From 4d207f0c3f326a6c54cbf7de54b94a4bfe39025d Mon Sep 17 00:00:00 2001
From: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
Date: Wed, 29 Jul 2026 15:18:55 +0100
Subject: [PATCH 001/122] a11y job: scan stories when their component changes;
 fix cold-start false failures (#7191)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## What

Two fixes to the pull-request a11y job (#7086 follow-up), both found on
its first day live.

### It now scans a component's stories when the component changes

The job picked its scan set from changed **story files** alone. But a
story renders the live component — editing `Button.tsx` changes what
every Button story shows without touching a story file, and the job
scanned nothing. That's the common way a11y regressions arrive, and it
was exactly the case the job missed.

The scan set now also includes stories whose **same-named sibling source
file changed**: edit `Button.tsx` or `Button.css` and
`Button.stories.tsx` is scanned. Changes that ripple further than a
component's own stories (shared UI, theme tokens) remain the nightly
sweep's job.

### It no longer fails on cold-start infrastructure noise

The job's first real run (#7163) flagged a story as "failed to render".
The story was fine — on a cold dependency cache (**every** CI run), Vite
discovered the preview's own dependency graph mid-run and reloaded the
page, killing whichever story happened to be loading with `Failed to
fetch dynamically imported module`. Reproduced on a cold cache, passes
on a warm one.

- The preview's deps are named in `optimizeDeps.include`, which removes
the mid-run reload (verified cold).
- A batch whose report contains crash-class failures (failures carrying
no axe rule) is retried once — a one-off infrastructure death passes the
retry, a story that genuinely can't render fails both attempts and is
still reported.

Also: the scan-report artifacts were never actually uploading — they
live in a dot-directory, which `upload-artifact` silently skips as
hidden by default. `include-hidden-files: true` fixes that for the PR
job and the nightly, so a red run finally has its evidence attached.

### The glue is Node now, so tasks work from any shell

Raised in review: the pipeline leaned on `bash`, `sed`, `grep`, `sort`
and `tr`. Task runs its commands in an embedded POSIX interpreter, but
those are external binaries it has to find on PATH — and a Windows dev
calling tasks from **PowerShell** has none of them (`sed`/`tr` missing
outright, `sort` resolves to Windows' own, and `bash` resolves to
*WSL's*). Confirmed broken by running the task from PowerShell before
the change.

The batch runner and affected-story detection are now small Node scripts
(`a11y-scan.mjs`, `a11y-changed.mjs`) — the repo already requires Node,
so one implementation serves PowerShell, git-bash and CI alike, instead
of maintaining `.sh`/`.ps1` twins.

## Testing

- Sibling detection: editing `Tabs.tsx` (component only) pulls
`Tabs.stories.tsx` into the scan set; editing a `.css` sibling does the
same; nothing unrelated leaks in.
- **From PowerShell**: `task frontend:storybook:a11y:changed`
early-exits cleanly with no changes, and with a component edit it
detects the sibling, runs the browser scan and passes the gate — same
result from git-bash.
- Cold cache end-to-end: cleared both Vite caches, ran the scan — no
re-optimize, no reload, stories fail only on their (baselined) axe
results.
- Crash classifier: 1 on a synthetic crash report, 0 on axe-only
failures, 0 on a real report — so the retry can't be triggered by
legitimate violations.
- Full scan + gate run green end-to-end; taskfile parses, workflows are
valid YAML, Prettier/ESLint pass.

#7163's red check needs no action from that PR's author — it should go
green on re-run once this lands.
---
 .github/workflows/frontend-a11y.yml  |   3 +
 .github/workflows/nightly.yml        |   3 +
 .taskfiles/frontend.yml              |  28 ++--
 frontend/.storybook/a11y-changed.mjs |  48 +++++++
 frontend/.storybook/a11y-scan.mjs    | 197 +++++++++++++++++++++++++++
 frontend/.storybook/a11y-scan.sh     |  84 ------------
 frontend/.storybook/vitest.config.ts |  26 +++-
 7 files changed, 285 insertions(+), 104 deletions(-)
 create mode 100644 frontend/.storybook/a11y-changed.mjs
 create mode 100644 frontend/.storybook/a11y-scan.mjs
 delete mode 100644 frontend/.storybook/a11y-scan.sh

diff --git a/.github/workflows/frontend-a11y.yml b/.github/workflows/frontend-a11y.yml
index d763447048..f4d3e3b93a 100644
--- a/.github/workflows/frontend-a11y.yml
+++ b/.github/workflows/frontend-a11y.yml
@@ -55,3 +55,6 @@ jobs:
           path: frontend/.a11y-scan/
           retention-days: 7
           if-no-files-found: ignore
+          # The reports live in a dot-directory, which upload-artifact treats as
+          # hidden and silently skips by default.
+          include-hidden-files: true
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 301a1fc8df..50346a6a39 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -92,6 +92,9 @@ jobs:
           path: frontend/.a11y-scan/
           retention-days: 14
           if-no-files-found: ignore
+          # The reports live in a dot-directory, which upload-artifact treats as
+          # hidden and silently skips by default.
+          include-hidden-files: true
 
   # Builds all desktop platforms on a schedule so the Rust dependency cache is
   # written on main, where PR and merge-queue tauri builds can restore it.
diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index 1338aae8e1..8c32efc5e3 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -214,42 +214,42 @@ tasks:
     desc: "a11y regression gate over every story: fail only on NEW axe violations"
     deps: [install, storybook:browser]
     cmds:
-      - bash .storybook/a11y-scan.sh
+      - node .storybook/a11y-scan.mjs
       - node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt
 
   storybook:a11y:changed:
-    desc: "a11y gate over stories changed vs a base ref (default origin/main)"
+    desc: "a11y gate over the stories this branch affects (default base origin/main)"
     summary: |
-      Scans only the stories this branch touches, which is what pull requests
-      run — a full scan takes ~30 minutes, far too long to sit in front of every
-      merge. The nightly job covers the rest of the suite.
+      Scans the stories a branch affects, which is what pull requests run — a
+      full scan takes ~30 minutes, far too long to sit in front of every merge.
+      A story is affected if its file changed, or if a same-named sibling
+      source file changed (editing Button.tsx or Button.css re-scans
+      Button.stories.tsx — the story renders the live component, so a component
+      edit changes what the story shows without touching the story file).
+      Changes that ripple further than a component's own stories are covered by
+      the nightly full sweep.
 
       Pass a base ref through CLI_ARGS, e.g.
         task frontend:storybook:a11y:changed -- origin/release
     deps: [install, storybook:browser]
     vars:
       BASE: '{{.CLI_ARGS | default "origin/main"}}'
-      # Stories touched by this branch, plus any not yet committed.
       CHANGED:
-        sh: |
-          { git diff --name-only --diff-filter=d {{.CLI_ARGS | default "origin/main"}}...HEAD -- '*.stories.ts' '*.stories.tsx';
-            git diff --name-only --diff-filter=d -- '*.stories.ts' '*.stories.tsx';
-            git ls-files --others --exclude-standard -- '*.stories.ts' '*.stories.tsx'; } \
-          | sed 's|^frontend/||' | sort -u | tr '\n' ' '
+        sh: node .storybook/a11y-changed.mjs {{.CLI_ARGS | default "origin/main"}}
     cmds:
       - cmd: |
           if [ -z "{{.CHANGED}}" ]; then
-            echo "a11y: no story files changed vs {{.BASE}} — nothing to check"
+            echo "a11y: no story files affected vs {{.BASE}} — nothing to check"
             exit 0
           fi
-          bash .storybook/a11y-scan.sh {{.CHANGED}}
+          node .storybook/a11y-scan.mjs {{.CHANGED}}
           node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt
 
   storybook:a11y:record:
     desc: "Re-record the a11y baseline (run after intentionally fixing/adding violations)"
     deps: [install, storybook:browser]
     cmds:
-      - bash .storybook/a11y-scan.sh
+      - node .storybook/a11y-scan.mjs
       - node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt --record
 
   # ============================================================
diff --git a/frontend/.storybook/a11y-changed.mjs b/frontend/.storybook/a11y-changed.mjs
new file mode 100644
index 0000000000..6aacf6274c
--- /dev/null
+++ b/frontend/.storybook/a11y-changed.mjs
@@ -0,0 +1,48 @@
+// Prints the story files a branch affects, one per line — the scan set for the
+// pull-request a11y gate. A story is affected if its file changed against the
+// base ref (or is uncommitted/untracked), or if a same-named sibling source
+// file changed: stories render the live component, so editing Button.tsx or
+// Button.css changes what Button.stories.tsx shows without touching it.
+//
+//   node a11y-changed.mjs [base-ref]     (default origin/main)
+//
+// Node rather than shell so the task works no matter what invokes it — Task's
+// embedded interpreter runs on Windows, but sed/grep/sort do not exist for
+// developers calling tasks from PowerShell.
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+
+const base = process.argv[2] || "origin/main";
+
+const git = (...args) =>
+  execFileSync("git", args, { encoding: "utf8" })
+    .split("\n")
+    .map((l) => l.trim().replace(/^frontend\//, ""))
+    .filter(Boolean);
+
+const STORY = /\.stories\.tsx?$/;
+const TEST = /\.test\.tsx?$/;
+const SOURCE = /\.(ts|tsx|css)$/;
+
+// Committed changes vs the base, plus working-tree changes, plus untracked
+// files — so the gate covers exactly what the branch would merge and what a
+// developer is about to commit.
+const changed = [
+  ...git("diff", "--name-only", "--diff-filter=d", `${base}...HEAD`),
+  ...git("diff", "--name-only", "--diff-filter=d"),
+  ...git("ls-files", "--others", "--exclude-standard"),
+];
+
+const stories = new Set();
+for (const f of changed) {
+  if (STORY.test(f)) {
+    stories.add(f);
+    continue;
+  }
+  if (TEST.test(f) || !SOURCE.test(f)) continue;
+  const sibling = f.replace(SOURCE, "");
+  for (const s of [`${sibling}.stories.tsx`, `${sibling}.stories.ts`])
+    if (existsSync(s)) stories.add(s);
+}
+
+process.stdout.write([...stories].sort().join("\n"));
diff --git a/frontend/.storybook/a11y-scan.mjs b/frontend/.storybook/a11y-scan.mjs
new file mode 100644
index 0000000000..77aed79d70
--- /dev/null
+++ b/frontend/.storybook/a11y-scan.mjs
@@ -0,0 +1,197 @@
+// Runs the Storybook Vitest scan in batches and emits one JSON report per batch
+// into .a11y-scan/, plus a manifest of every story file the run was supposed to
+// cover and a log of the raw output. Consumed by a11y-check.mjs, which fails if
+// any manifest entry produced no results. Run from frontend/.
+//
+//   node a11y-scan.mjs                 scan every story
+//   node a11y-scan.mjs <file> [file…]  scan only these story files
+//
+// Batching keeps each browser session small: a single run over the whole story
+// set holds one Chromium context open for the entire scan, so one crash in it
+// costs every story after that point.
+//
+// Node rather than shell so the task works no matter what invokes it — Task's
+// embedded interpreter runs on Windows, but bash/sed/sort do not exist for
+// developers calling tasks from PowerShell.
+import { execFileSync, spawn } from "node:child_process";
+import {
+  existsSync,
+  mkdirSync,
+  openSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
+import { join } from "node:path";
+
+const OUT = ".a11y-scan";
+const CHUNK = 20;
+const BATCH_TIMEOUT_MS = 300_000;
+
+const git = (...args) =>
+  execFileSync("git", args, { encoding: "utf8" })
+    .split("\n")
+    .map((l) => l.trim())
+    .filter(Boolean);
+
+rmSync(OUT, { recursive: true, force: true });
+mkdirSync(OUT, { recursive: true });
+const manifestFile = join(OUT, "manifest.txt");
+const logFile = join(OUT, "scan.log");
+
+const args = process.argv.slice(2);
+let files;
+if (args.length > 0) {
+  // Explicit list (the pull-request path passes just the stories a branch
+  // affects). Anything that no longer exists is dropped, so a deleted story
+  // doesn't fail the manifest check.
+  files = [...new Set(args.filter((f) => existsSync(f)))].sort();
+  if (files.length === 0) {
+    console.log(
+      "a11y-scan: no existing story files in the given list — nothing to scan",
+    );
+    writeFileSync(manifestFile, "");
+    process.exit(0);
+  }
+} else {
+  // Tracked story files plus any not yet committed, so a new story can be
+  // checked before it is added to the index.
+  files = [
+    ...new Set([
+      ...git(
+        "ls-files",
+        "--",
+        "editor/src/**/*.stories.ts",
+        "editor/src/**/*.stories.tsx",
+      ),
+      ...git(
+        "ls-files",
+        "--others",
+        "--exclude-standard",
+        "--",
+        "editor/src/**/*.stories.ts",
+        "editor/src/**/*.stories.tsx",
+      ),
+    ]),
+  ].sort();
+  if (files.length === 0) {
+    console.error("a11y-scan: no story files found — check the glob");
+    process.exit(2);
+  }
+}
+writeFileSync(manifestFile, files.join("\n") + "\n");
+
+/** Failures carrying no axe rule — a throw, a timeout, a dropped browser page. */
+function crashCount(reportFile) {
+  try {
+    const report = JSON.parse(readFileSync(reportFile, "utf8"));
+    let crashes = 0;
+    for (const tf of report.testResults ?? [])
+      for (const a of tf.assertionResults ?? []) {
+        if (a.status === "passed") continue;
+        const msg = (a.failureMessages ?? []).join("\n");
+        if (!/dequeuniversity\.com\/rules\/axe\//.test(msg)) crashes++;
+      }
+    return crashes;
+  } catch {
+    return -1; // unreadable report counts as a failed attempt
+  }
+}
+
+/** Runs one vitest batch, tee'd to the log, killed (whole tree) on timeout. */
+function runBatch(filters, outputFile) {
+  return new Promise((resolve) => {
+    const cmd =
+      `npx vitest run --config .storybook/vitest.config.ts ` +
+      `--reporter=json --outputFile=${outputFile} ` +
+      filters.map((f) => `"${f}"`).join(" ");
+    const log = openSync(logFile, "a");
+    const child = spawn(cmd, {
+      shell: true,
+      detached: process.platform !== "win32",
+      stdio: ["ignore", log, log],
+    });
+    const timer = setTimeout(() => {
+      if (process.platform === "win32") {
+        try {
+          execFileSync("taskkill", ["/pid", String(child.pid), "/T", "/F"], {
+            stdio: "ignore",
+          });
+        } catch {
+          /* already gone */
+        }
+      } else {
+        try {
+          process.kill(-child.pid, "SIGKILL");
+        } catch {
+          /* already gone */
+        }
+      }
+    }, BATCH_TIMEOUT_MS);
+    child.on("exit", () => {
+      clearTimeout(timer);
+      resolve();
+    });
+  });
+}
+
+const hasReport = (f) => existsSync(f) && statSync(f).size > 0;
+
+const batches = [];
+for (let i = 0; i < files.length; i += CHUNK)
+  batches.push(files.slice(i, i + CHUNK));
+console.log(
+  `a11y-scan: ${files.length} story files, ${batches.length} batches of ${CHUNK}`,
+);
+
+const failed = [];
+for (let bi = 0; bi < batches.length; bi++) {
+  const n = bi + 1;
+  const out = join(OUT, `chunk-${n}.json`);
+  // The scan exits non-zero whenever a story has a violation — expected here,
+  // so the report is what matters, not the status.
+  //
+  // A batch is retried once when it produced no report, or when its report
+  // contains crash-class failures. A one-off infrastructure death — the
+  // browser page dropping, a Vite dep re-optimize reloading mid-run — passes
+  // on the retry; a story that genuinely cannot render fails both attempts.
+  const filters = batches[bi].map((f) => f.replace(/\.tsx$/, ""));
+  for (let attempt = 1; attempt <= 2; attempt++) {
+    await runBatch(filters, out);
+    if (!hasReport(out)) {
+      console.error(
+        `a11y-scan: batch ${n} produced no report (attempt ${attempt})`,
+      );
+      continue;
+    }
+    if (attempt === 1) {
+      const crashes = crashCount(out);
+      if (crashes !== 0) {
+        console.error(
+          `a11y-scan: batch ${n} has ${crashes} crash-class failure(s) — retrying once`,
+        );
+        rmSync(out, { force: true });
+        continue;
+      }
+    }
+    break;
+  }
+  if (hasReport(out)) console.log(`  batch ${n}/${batches.length} done`);
+  else {
+    failed.push(n);
+    console.error(`  batch ${n}/${batches.length} FAILED — no report`);
+  }
+}
+
+const present = batches.filter((_, i) =>
+  hasReport(join(OUT, `chunk-${i + 1}.json`)),
+).length;
+console.log(`a11y-scan: ${present}/${batches.length} batches produced reports`);
+if (failed.length > 0) {
+  console.error(
+    `a11y-scan: ${failed.length} batch(es) produced no report: ${failed.join(" ")}`,
+  );
+  console.error(`a11y-scan: see ${logFile}. Not reporting on a partial scan.`);
+  process.exit(2);
+}
diff --git a/frontend/.storybook/a11y-scan.sh b/frontend/.storybook/a11y-scan.sh
deleted file mode 100644
index 855a4449dc..0000000000
--- a/frontend/.storybook/a11y-scan.sh
+++ /dev/null
@@ -1,84 +0,0 @@
-#!/usr/bin/env bash
-# Run the Storybook Vitest scan in batches and emit one JSON report per batch
-# into .a11y-scan/, plus a manifest of every story file the run was supposed to
-# cover and a log of the raw output. Consumed by a11y-check.mjs, which fails if
-# any manifest entry produced no results. Run from frontend/.
-#
-#   a11y-scan.sh                 scan every story
-#   a11y-scan.sh <file> [file…]  scan only these story files
-#
-# Batching keeps each browser session small: a single run over the whole story
-# set holds one Chromium context open for the entire scan, so one crash in it
-# costs every story after that point.
-set -uo pipefail
-cd "$(dirname "$0")/.." || exit 1
-
-OUT=".a11y-scan"
-rm -rf "$OUT"
-mkdir -p "$OUT"
-MANIFEST="$OUT/manifest.txt"
-LOG="$OUT/scan.log"
-
-if [ "$#" -gt 0 ]; then
-  # Explicit list (the pull-request path passes just the stories a branch
-  # touched). Anything that no longer exists is dropped, so a deleted story
-  # doesn't fail the manifest check.
-  for f in "$@"; do [ -f "$f" ] && printf '%s\n' "$f"; done | sort -u >"$MANIFEST"
-else
-  # Tracked story files plus any not yet committed, so a new story can be
-  # checked before it is added to the index.
-  {
-    git ls-files 'editor/src/**/*.stories.ts' 'editor/src/**/*.stories.tsx'
-    git ls-files --others --exclude-standard 'editor/src/**/*.stories.ts' \
-      'editor/src/**/*.stories.tsx'
-  } | sort -u >"$MANIFEST"
-fi
-
-mapfile -t FILES <"$MANIFEST"
-TOTAL=${#FILES[@]}
-if [ "$TOTAL" -eq 0 ]; then
-  if [ "$#" -gt 0 ]; then
-    echo "a11y-scan: no existing story files in the given list — nothing to scan"
-    exit 0
-  fi
-  echo "a11y-scan: no story files found — check the glob" >&2
-  exit 2
-fi
-
-CHUNK=20
-NB=$(((TOTAL + CHUNK - 1) / CHUNK))
-echo "a11y-scan: $TOTAL story files, $NB batches of $CHUNK"
-
-failed=()
-i=0
-ci=0
-while [ "$i" -lt "$TOTAL" ]; do
-  ci=$((ci + 1))
-  batch=("${FILES[@]:i:CHUNK}")
-  i=$((i + CHUNK))
-  out="$OUT/chunk-$ci.json"
-  filters=()
-  for f in "${batch[@]}"; do filters+=("${f%.tsx}"); done
-  # The scan exits non-zero whenever a story has a violation — expected here, so
-  # the report is what matters, not the status. Output is teed to the log so a red
-  # CI run still has the offending selectors and help text to work from.
-  for attempt in 1 2; do
-    timeout 300 npx vitest run --config .storybook/vitest.config.ts \
-      --reporter=json --outputFile="$out" "${filters[@]}" >>"$LOG" 2>&1
-    [ -s "$out" ] && break
-    echo "a11y-scan: batch $ci produced no report (attempt $attempt)" >&2
-  done
-  if [ -s "$out" ]; then
-    echo "  batch $ci/$NB done"
-  else
-    failed+=("$ci")
-    echo "  batch $ci/$NB FAILED — no report" >&2
-  fi
-done
-
-echo "a11y-scan: $(ls "$OUT"/chunk-*.json 2>/dev/null | wc -l)/$NB batches produced reports"
-if [ ${#failed[@]} -gt 0 ]; then
-  echo "a11y-scan: ${#failed[@]} batch(es) produced no report: ${failed[*]}" >&2
-  echo "a11y-scan: see $LOG. Not reporting on a partial scan." >&2
-  exit 2
-fi
diff --git a/frontend/.storybook/vitest.config.ts b/frontend/.storybook/vitest.config.ts
index 8c0d0e81f2..8519e50267 100644
--- a/frontend/.storybook/vitest.config.ts
+++ b/frontend/.storybook/vitest.config.ts
@@ -18,18 +18,32 @@ export default defineConfig({
     // Pre-scan every story + the preview so Vite discovers the story set's large
     // dep surface (embedpdf plugins, @mui icons, …) in one pass up front.
     entries: ["editor/src/**/*.stories.@(ts|tsx)", ".storybook/preview.tsx"],
-    // `entries` alone does not catch deps reached only through a transformed
-    // JSX runtime import, so Vite optimizes them lazily mid-run and emits
-    // "optimized dependencies changed, reloading". That reload tears down the
-    // browser worker and whichever stories were mid-load fail with a bogus
-    // "Failed to fetch dynamically imported module" — a scan that then looks
-    // like a real result. Naming them here keeps a run deterministic.
+    // `entries` alone does not catch deps reached through a transformed JSX
+    // runtime import, nor the preview's own dependency graph (the test plugin
+    // injects the preview in a way the entry scanner doesn't crawl). Vite then
+    // optimizes them lazily mid-run and emits "optimized dependencies changed,
+    // reloading" — the reload tears down the browser worker and whichever
+    // stories were mid-load fail with a bogus "Failed to fetch dynamically
+    // imported module" that reads like a real crash. Only a cold dep cache
+    // hits this, which is every CI run. Naming them keeps a run deterministic.
     include: [
       "react",
       "react/jsx-runtime",
       "react/jsx-dev-runtime",
       "react-dom",
       "react-dom/client",
+      "@storybook/react-vite",
+      "@storybook/addon-a11y/preview",
+      "@storybook/addon-themes",
+      "msw-storybook-addon",
+      "react-router-dom",
+      "@tanstack/react-query",
+      "i18next",
+      "react-i18next",
+      "smol-toml",
+      "@mantine/core",
+      "@supabase/supabase-js",
+      "axios",
     ],
   },
   test: {

From bbd4d2c3ac106321edcbf9c8df8ef9f45e2ae70f Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Wed, 29 Jul 2026 15:33:34 +0100
Subject: [PATCH 002/122] Redesign toml sorting to speed up from ~40s to ~2s
 (#7192)

# Description of Changes
The `pre-commit` tool to sort the translations is really slow. It took
~40 seconds to run because it's using a parser which attempts to save
all of the formatting data from the Toml. Our translations toml is
pretty much entirely formatted anyway, so there's no point in trying to
preserve any of that data. The only thing we lose is 5 comments, none of
which are needed anyway and only appear in the US translation file. By
switching to Python stdlib `tomllib` reading and `tomli-w` for writing,
we can make the Toml formatting job take 2.11 seconds, where it used to
take 39.78s. The whole pre-commit job now takes 4.58 seconds.
---
 .taskfiles/pre-commit.yml                     |  4 +-
 .../public/locales/en-US/translation.toml     |  5 -
 scripts/pre-commit/pyproject.toml             |  2 +-
 scripts/pre-commit/sort_locale_toml.py        | 96 +++++++++++++++++++
 scripts/pre-commit/uv.lock                    | 24 ++---
 5 files changed, 105 insertions(+), 26 deletions(-)
 create mode 100644 scripts/pre-commit/sort_locale_toml.py

diff --git a/.taskfiles/pre-commit.yml b/.taskfiles/pre-commit.yml
index 136f852a5b..f2e488e815 100644
--- a/.taskfiles/pre-commit.yml
+++ b/.taskfiles/pre-commit.yml
@@ -73,7 +73,7 @@ tasks:
       - task: gitleaks
 
   install:
-    desc: "Install the pinned pre-commit Python tools (ruff, codespell, toml-sort)"
+    desc: "Install the pinned pre-commit Python tools"
     run: once
     cmds:
       - uv sync --project scripts/pre-commit --locked
@@ -112,7 +112,7 @@ tasks:
   toml-sort:
     deps: [install]
     cmds:
-      - uv run --project scripts/pre-commit --no-sync toml-sort --all --ignore-case {{if .FIX}}--in-place{{else}}--check{{end}} {{.LOCALE_TOML}}
+      - uv run --project scripts/pre-commit --no-sync python scripts/pre-commit/sort_locale_toml.py {{if .FIX}}--fix {{end}}{{.LOCALE_TOML}}
 
   whitespace:
     cmds:
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 913cdf20a4..abbe1446ff 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -692,7 +692,6 @@ manualLinks = "Manual downloads: click the links and place the files into the te
 noLanguages = "No tessdata languages found in the configured directory."
 permissionNotice = "The tessdata path is not writable. Downloads will be opened in the browser; please save the .traineddata files manually into the tessdata folder."
 
-# AI engine admin settings (AI nav group)
 [admin.settings.ai.documents]
 description = "Configure the embedding model and retrieval settings used to answer questions over documents. Applied to the AI engine when saved."
 title = "Documents & RAG"
@@ -7320,7 +7319,6 @@ sectionsAriaLabel = "Infrastructure sections"
 subtitle = "Deployments, credentials, security posture, storage, and the audit trail for your Stirling workspace."
 title = "Infrastructure"
 
-# Fixed-enum label maps rendered via t(MAP[value]) in the infrastructure tabs.
 [portal.infrastructure.apiKeys]
 createKey = "Create key"
 heading = "API keys"
@@ -8415,13 +8413,10 @@ region = "State / region"
 regionPlaceholder = "California"
 running = "{{annual}} / yr · {{years}}-yr {{tcv}}"
 s1Sub = "Your team, and the PDFs you expect to run each year."
-# Step 1 — volume
 s1Title = "How much will you process?"
 s2Sub = "Longer terms discount the rate; your service level sets support."
-# Step 2 — commitment & service
 s2Title = "Commitment and service"
 s3Sub = "For the quote and the agreement it generates."
-# Step 3 — details
 s3Title = "Your details"
 serviceLevel = "Service level"
 size_compact = "Compact"
diff --git a/scripts/pre-commit/pyproject.toml b/scripts/pre-commit/pyproject.toml
index cd13b56f5e..9a730bdcb5 100644
--- a/scripts/pre-commit/pyproject.toml
+++ b/scripts/pre-commit/pyproject.toml
@@ -9,7 +9,7 @@ requires-python = ">=3.11"
 dependencies = [
     "ruff==0.15.14",
     "codespell==2.4.2",
-    "toml-sort==0.24.4",
+    "tomli-w==1.2.0",
 ]
 
 [tool.uv]
diff --git a/scripts/pre-commit/sort_locale_toml.py b/scripts/pre-commit/sort_locale_toml.py
new file mode 100644
index 0000000000..1515fe2cfe
--- /dev/null
+++ b/scripts/pre-commit/sort_locale_toml.py
@@ -0,0 +1,96 @@
+#!/usr/bin/env python3
+"""Key-sort the locale translation.toml files.
+
+python sort_locale_toml.py <pathspec>...         # check: report, exit 1 if unsorted
+python sort_locale_toml.py --fix <pathspec>...   # fix: rewrite in place
+"""
+
+from __future__ import annotations
+
+import subprocess
+import sys
+import tomllib
+from pathlib import Path
+
+import tomli_w
+
+
+class SortError(Exception):
+    """A file could not be sorted without risking its contents."""
+
+
+def ordered(table: dict[str, object]) -> dict[str, object]:
+    """Rebuild a table with its keys sorted, and sub-tables after its own keys."""
+    keys = {key: value for key, value in table.items() if not isinstance(value, dict)}
+    subtables = {key: value for key, value in table.items() if isinstance(value, dict)}
+    result: dict[str, object] = {key: keys[key] for key in sorted(keys, key=str.lower)}
+    for key in sorted(subtables, key=str.lower):
+        result[key] = ordered(subtables[key])
+    return result
+
+
+def tracked_files(path_specs: list[str]) -> list[str]:
+    result = subprocess.run(
+        ["git", "ls-files", "-z", *path_specs],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    return [path for path in result.stdout.split("\0") if path]
+
+
+def sort_file(path: str, fix: bool) -> bool:
+    """Rewrite one file if `fix`; return whether it was not already sorted."""
+    text = Path(path).read_text(encoding="utf-8")
+    try:
+        original = tomllib.loads(text)
+    except tomllib.TOMLDecodeError as exc:
+        raise SortError(f"{path}: invalid TOML: {exc}") from exc
+
+    expected = tomli_w.dumps(ordered(original))
+    if expected == text:
+        return False
+
+    try:
+        reordered = tomllib.loads(expected)
+    except tomllib.TOMLDecodeError as exc:
+        raise SortError(
+            f"{path}: refusing to sort, the sorted output is not valid TOML: {exc}"
+        ) from exc
+    if reordered != original:
+        raise SortError(
+            f"{path}: refusing to sort, sorting would change the file's contents"
+        )
+
+    if fix:
+        Path(path).write_text(expected, encoding="utf-8")
+    return True
+
+
+def main() -> int:
+    args = sys.argv[1:]
+    fix = "--fix" in args
+    pathspecs = [a for a in args if a != "--fix"]
+
+    offenders: list[str] = []
+    errors: list[str] = []
+    for path in tracked_files(pathspecs):
+        try:
+            if sort_file(path, fix):
+                offenders.append(path)
+        except SortError as exc:
+            errors.append(str(exc))
+
+    for error in errors:
+        print(error, file=sys.stderr)
+    if offenders and not fix:
+        print(f"{len(offenders)} file(s) need TOML sorting:")
+        for path in offenders:
+            print(f"  {path}")
+    if offenders and fix:
+        print(f"Sorted TOML in {len(offenders)} file(s).")
+    return 1 if errors or (offenders and not fix) else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/scripts/pre-commit/uv.lock b/scripts/pre-commit/uv.lock
index b90593a6e8..2a3c8ee11d 100644
--- a/scripts/pre-commit/uv.lock
+++ b/scripts/pre-commit/uv.lock
@@ -43,33 +43,21 @@ source = { virtual = "." }
 dependencies = [
     { name = "codespell" },
     { name = "ruff" },
-    { name = "toml-sort" },
+    { name = "tomli-w" },
 ]
 
 [package.metadata]
 requires-dist = [
     { name = "codespell", specifier = "==2.4.2" },
     { name = "ruff", specifier = "==0.15.14" },
-    { name = "toml-sort", specifier = "==0.24.4" },
+    { name = "tomli-w", specifier = "==1.2.0" },
 ]
 
 [[package]]
-name = "toml-sort"
-version = "0.24.4"
+name = "tomli-w"
+version = "1.2.0"
 source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "tomlkit" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/47/c5/d6f650fdcf8e1f83096815fa67fb13a9a345b99da6015c60c4b7e4a8ea2b/toml_sort-0.24.4.tar.gz", hash = "sha256:429b69f5b98b7047a11380c80ecf0838556bdea1a8902d0be564961c48841423", size = 17793, upload-time = "2026-03-24T14:05:53.637Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/19/75/241269d1da26b624c0d5e110e8149093c759b7a286138f4efd61a60e75fe/tomli_w-1.2.0.tar.gz", hash = "sha256:2dd14fac5a47c27be9cd4c976af5a12d87fb1f0b4512f81d69cce3b35ae25021", size = 7184, upload-time = "2025-01-15T12:07:24.262Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0f/5a/1f0e54df4eacf0f4d8f94ba50cf72be33d2a3f04babdfb1931bead48a0ab/toml_sort-0.24.4-py3-none-any.whl", hash = "sha256:125aa5fb94f33c542c6901040456145dd38f79bbb310b56b436a93057d30a739", size = 16577, upload-time = "2026-03-24T14:05:54.757Z" },
-]
-
-[[package]]
-name = "tomlkit"
-version = "0.15.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/51/db/03eaf4331631ef6b27d6e3c9b68c54dc6f0d63d87201fed600cc409307fd/tomlkit-0.15.0.tar.gz", hash = "sha256:7d1a9ecba3086638211b13814ea79c90dd54dd11993564376f3aa92271f5c7a3", size = 161875, upload-time = "2026-05-10T07:38:22.245Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/6a/43/8bd850ee71a191bf072e31302c73a66be413fecdd98fdcd111ecbcce13ca/tomlkit-0.15.0-py3-none-any.whl", hash = "sha256:4dbc8f0fc024412b57ced8757ac7461305126a648ff8c2c807fcb8e133a78738", size = 41328, upload-time = "2026-05-10T07:38:23.517Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/18/c86eb8e0202e32dd3df50d43d7ff9854f8e0603945ff398974c1d91ac1ef/tomli_w-1.2.0-py3-none-any.whl", hash = "sha256:188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90", size = 6675, upload-time = "2025-01-15T12:07:22.074Z" },
 ]

From b4a264239c468c89ce9639bfd15e1743e38b3045 Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Wed, 29 Jul 2026 16:15:49 +0100
Subject: [PATCH 003/122] fix(saas): provision a new user and their personal
 team atomically (#7193)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

New SaaS accounts were landing with `team_id = null`. That state is
unrecoverable: portal access derives from leading a team, and signup is
the only place one is assigned.

Five things had to be fixed, all on the signup path. Only the last is a
behaviour change you'd notice.

### 1. Shared-PK entity was routed to `merge()`
`SaasUserExtensions` pre-sets its `@MapsId` id in the constructor, so
Spring Data's id-nullness check treated a brand-new row as existing and
`save()` failed with `AssertionFailure: null identifier`. Now implements
`Persistable` and decides on the creation timestamp — the idiom already
used by `ProcessedFileEntity` and `SourceDocCountEntity`.

This was the blocker. It threw on every signup, and because the failure
was swallowed (see 3) every new account was stranded.

### 2. User and team were committed separately
`createUser()` is annotated `@Transactional` but is called as
`this.createUser(...)`, and self-invocation bypasses the proxy — so the
annotation did nothing. `saveUser()` and `ensurePersonalTeam()` each
committed in their own transaction, leaving a window where a **committed
user was visible with `team_id = null`**. Parallel requests entering
that window each provisioned a team, producing duplicates (observed:
teams 160/161 and 162/163 for one user).

Both writes now happen in one transaction via
`SaasTeamService.saveUserWithPersonalTeam()`. The window is gone, so
there is nothing left to race over.

### 3. A failed team create was swallowed
The old code logged at WARN and committed the user anyway. It now
propagates: the shared transaction rolls the user back, the request
401s, and a retry starts clean. Nothing half-built is committed.

This is the deliberate trade — a transient failure now surfaces instead
of silently producing an account that can never reach the portal.

### 4. Per-request healing removed
`recoverMissingTeam` (added in #7180) ran on **every authenticated
request** whose user had no team, with no mutual exclusion. Under a
burst of parallel requests it was itself a source of concurrent
provisioning. Provisioning belongs to signup alone.

### 5. Policy seeding could not run
`@TransactionalEventListener(AFTER_COMMIT)` leaves the *completed*
transaction bound to the thread, so `JpaPolicyStore.save`'s
`@Transactional` joined it instead of opening a live one — and its `FOR
UPDATE` lock threw `TransactionRequiredException`. Now seeded in
`BEFORE_COMMIT`: the lock has a live transaction, rollback safety is
unchanged (a rolled-back team still leaves no policy), and it stays on a
single pooled connection.

## Verified

`:saas:test` green, both spotless gates green, on top of current `main`.

Manually on a live signup: **one** team per user, and the
concurrent-signup race resolves correctly through the pre-existing
unique-constraint catch (`users_supabase_auth_id_key` violation →
refetch the winner).

12 filter tests needed updating. Two of them asserted behaviour this PR
deliberately removes (`personalTeamFailureSwallowed`,
`assignsTeamWhenMissing`), so they were rewritten to assert the new
contract rather than re-stubbed into passing.

## Not in scope

- **Existing stranded accounts** are not repaired — with the healer
gone, nothing fixes them on the request path. They need a one-off
backfill or deletion.
- **A DB-level invariant.** A partial unique index
(`UNIQUE(created_by_user_id) WHERE is_personal`) would make duplicate
personal teams impossible rather than merely unreachable. Wanted, but it
is a Supabase migration in the SaaS repo, so it is deliberately
separate.
- **Per-request auth cost.** The filter still does two remote-Postgres
round-trips per authenticated request; a frontend request storm makes
that expensive. Being handled separately.
---
 .../DefaultClassificationPolicySeeder.java    |  7 +-
 .../saas/model/SaasUserExtensions.java        | 17 ++++-
 .../SupabaseAuthenticationFilter.java         | 68 ++++---------------
 .../saas/service/SaasTeamService.java         | 40 +++++++++++
 .../SupabaseAuthenticationFilterMoreTest.java | 58 ++++++++--------
 .../SupabaseAuthenticationFilterTest.java     | 19 +++---
 6 files changed, 112 insertions(+), 97 deletions(-)

diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
index aca6ae0e84..4150dc2f31 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
@@ -46,9 +46,10 @@ public class DefaultClassificationPolicySeeder {
                 .ifPresent(team -> seedIfMissing(team.getId(), team.getName()));
     }
 
-    // Any team created at runtime (admin-created, SaaS sign-ups); after the team's commit so a
-    // rolled-back team never leaves a policy behind.
-    @TransactionalEventListener(phase = TransactionPhase.AFTER_COMMIT)
+    // Any team created at runtime (admin-created, SaaS sign-ups). Seeds inside the team's own
+    // transaction: rollback still leaves no policy behind, and the store's pessimistic lock needs a
+    // live transaction, which AFTER_COMMIT cannot offer.
+    @TransactionalEventListener(phase = TransactionPhase.BEFORE_COMMIT)
     public void onTeamCreated(TeamCreatedEvent event) {
         seedIfMissing(event.teamId(), event.teamName());
     }
diff --git a/app/saas/src/main/java/stirling/software/saas/model/SaasUserExtensions.java b/app/saas/src/main/java/stirling/software/saas/model/SaasUserExtensions.java
index 036fdd27be..8d7dda1726 100644
--- a/app/saas/src/main/java/stirling/software/saas/model/SaasUserExtensions.java
+++ b/app/saas/src/main/java/stirling/software/saas/model/SaasUserExtensions.java
@@ -7,6 +7,7 @@ import org.hibernate.annotations.CreationTimestamp;
 import org.hibernate.annotations.OnDelete;
 import org.hibernate.annotations.OnDeleteAction;
 import org.hibernate.annotations.UpdateTimestamp;
+import org.springframework.data.domain.Persistable;
 
 import jakarta.persistence.Column;
 import jakarta.persistence.Entity;
@@ -16,6 +17,7 @@ import jakarta.persistence.JoinColumn;
 import jakarta.persistence.MapsId;
 import jakarta.persistence.OneToOne;
 import jakarta.persistence.Table;
+import jakarta.persistence.Transient;
 
 import lombok.Getter;
 import lombok.NoArgsConstructor;
@@ -37,7 +39,7 @@ import stirling.software.proprietary.security.model.User;
 @NoArgsConstructor
 @Getter
 @Setter
-public class SaasUserExtensions implements Serializable {
+public class SaasUserExtensions implements Serializable, Persistable<Long> {
 
     private static final long serialVersionUID = 1L;
 
@@ -80,4 +82,17 @@ public class SaasUserExtensions implements Serializable {
     public boolean isMeteredBillingEnabled() {
         return Boolean.TRUE.equals(hasMeteredBillingEnabled);
     }
+
+    @Override
+    public Long getId() {
+        return userId;
+    }
+
+    // Decided on the timestamp, not the id: the constructor pre-sets the @MapsId id, so an
+    // id-based check would route a new row to merge() and fail with "null identifier".
+    @Override
+    @Transient
+    public boolean isNew() {
+        return createdAt == null;
+    }
 }
diff --git a/app/saas/src/main/java/stirling/software/saas/security/SupabaseAuthenticationFilter.java b/app/saas/src/main/java/stirling/software/saas/security/SupabaseAuthenticationFilter.java
index 684e22a98f..a4b2366379 100644
--- a/app/saas/src/main/java/stirling/software/saas/security/SupabaseAuthenticationFilter.java
+++ b/app/saas/src/main/java/stirling/software/saas/security/SupabaseAuthenticationFilter.java
@@ -239,7 +239,7 @@ public class SupabaseAuthenticationFilter extends OncePerRequestFilter {
                         && !supabaseUser.isAnonymous()) {
                     user = upgradeAnonymousUser(user, supabaseUser, jwt);
                 }
-                return recoverMissingTeam(user);
+                return user;
             }
 
             return createUser(jwt, supabaseId, email, appMetadata);
@@ -271,10 +271,8 @@ public class SupabaseAuthenticationFilter extends OncePerRequestFilter {
             user.setUsername(supabaseUser.getEmail());
         }
         try {
-            User saved = userService.saveUser(user);
             // Give the account its own team rather than the shared Default team.
-            saved.setTeam(saasTeamService.ensurePersonalTeam(saved));
-            return saved;
+            return saasTeamService.saveUserWithPersonalTeam(user);
         } catch (DataIntegrityViolationException e) {
             log.warn(
                     "Email collision upgrading anonymous user {} to {}: {}",
@@ -372,60 +370,22 @@ public class SupabaseAuthenticationFilter extends OncePerRequestFilter {
             throw new AuthenticationFailureException("Failed to create SupabaseUser", e);
         }
 
-        User savedUser;
-        boolean weCreatedThisUser = true;
+        // Guests get NO team: the editor is free and needs none. Everyone else is provisioned
+        // atomically, so a user visible to a parallel request always already has one.
         try {
-            savedUser = userService.saveUser(newUser);
+            return isAnonymous(jwt)
+                    ? userService.saveUser(newUser)
+                    : saasTeamService.saveUserWithPersonalTeam(newUser);
         } catch (DataIntegrityViolationException dup) {
             // Parallel filter won the race; fetch the winning row.
-            weCreatedThisUser = false;
-            savedUser =
-                    userService
-                            .findBySupabaseId(supabaseId)
-                            .orElseThrow(
-                                    () ->
-                                            new AuthenticationFailureException(
-                                                    "User creation conflict, but unable to find existing user",
-                                                    dup));
+            return userService
+                    .findBySupabaseId(supabaseId)
+                    .orElseThrow(
+                            () ->
+                                    new AuthenticationFailureException(
+                                            "User creation conflict, but unable to find existing user",
+                                            dup));
         }
-
-        // Only the DB-race winner runs first-time init; the losers skip it. Guests (anonymous
-        // sessions) get NO team: the editor is free and needs none, and automation requires a
-        // real account.
-        if (weCreatedThisUser && !isAnonymous(jwt)) {
-            try {
-                savedUser.setTeam(saasTeamService.ensurePersonalTeam(savedUser));
-            } catch (Exception e) {
-                log.warn(
-                        "Failed to create personal team for new user {} ({}): {}",
-                        LogRedactionUtils.redactSupabaseId(supabaseId),
-                        LogRedactionUtils.redactEmail(savedUser.getUsername()),
-                        e.getMessage());
-            }
-        }
-        return savedUser;
-    }
-
-    /**
-     * Recover an account stranded without a team: signup is the only other place one is assigned,
-     * so a null team_id is otherwise permanent — and portal access derives from leading a team.
-     * Guests get none by design.
-     */
-    private User recoverMissingTeam(User user) {
-        if (user.getTeam() != null
-                || ANONYMOUS.toString().equalsIgnoreCase(user.getAuthenticationType())) {
-            return user;
-        }
-        try {
-            user.setTeam(saasTeamService.ensurePersonalTeam(user));
-            log.info("Assigned a personal team to user {} which had none", user.getId());
-        } catch (Exception e) {
-            log.warn(
-                    "Could not assign a personal team to user {}: {}",
-                    user.getId(),
-                    e.getMessage());
-        }
-        return user;
     }
 
     private boolean apiKeyAuthenticated(HttpServletRequest request) throws AuthenticationException {
diff --git a/app/saas/src/main/java/stirling/software/saas/service/SaasTeamService.java b/app/saas/src/main/java/stirling/software/saas/service/SaasTeamService.java
index bda0602261..0038cca42a 100644
--- a/app/saas/src/main/java/stirling/software/saas/service/SaasTeamService.java
+++ b/app/saas/src/main/java/stirling/software/saas/service/SaasTeamService.java
@@ -53,6 +53,18 @@ public class SaasTeamService {
     public static final String DEFAULT_TEAM_NAME = "Default";
     public static final String INTERNAL_TEAM_NAME = "Internal";
 
+    /**
+     * Persist a user and their personal team atomically: an account with no team has no portal
+     * access and no way to acquire one, so a teamless user must never be committed. Constraint
+     * violations (the concurrent-signup race) propagate for the caller to resolve.
+     */
+    @Transactional
+    public User saveUserWithPersonalTeam(User user) {
+        User saved = userService.saveUser(user);
+        saved.setTeam(ensurePersonalTeam(saved));
+        return saved;
+    }
+
     /** Returns the user's personal team, creating one if they have none. Idempotent. */
     @Transactional
     public Team ensurePersonalTeam(User user) {
@@ -60,9 +72,37 @@ public class SaasTeamService {
         if (existing != null && saasTeamExtensionService.isPersonal(existing)) {
             return existing;
         }
+        // An empty users.team_id does not prove there is no personal team; adopt one the user
+        // already owns rather than minting a second.
+        Team owned = existingPersonalTeam(user);
+        if (owned != null) {
+            user.setTeam(owned);
+            userService.saveUser(user);
+            return owned;
+        }
         return createPersonalTeam(user);
     }
 
+    /**
+     * The personal team the user already owns — their recorded home, else a solo team they lead.
+     */
+    private Team existingPersonalTeam(User user) {
+        Long homeId = saasUserExtensionService.getHomeTeamId(user);
+        if (homeId != null) {
+            Team home = teamRepository.findById(homeId).orElse(null);
+            if (home != null) {
+                return home;
+            }
+        }
+        for (TeamMembership membership : membershipRepository.findByUserId(user.getId())) {
+            Team team = membership.getTeam();
+            if (membership.isLeader() && membershipRepository.countByTeamId(team.getId()) == 1) {
+                return team;
+            }
+        }
+        return null;
+    }
+
     /**
      * Create personal team for new user during signup or migrate existing user from Default team
      *
diff --git a/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterMoreTest.java b/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterMoreTest.java
index 3b8a0292c7..f6181dcebe 100644
--- a/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterMoreTest.java
+++ b/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterMoreTest.java
@@ -315,14 +315,13 @@ class SupabaseAuthenticationFilterMoreTest {
             local.setSupabaseId(supabaseId);
             local.setAuthenticationType(AuthenticationType.ANONYMOUS);
             when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.of(local));
-            when(userService.saveUser(any(User.class))).thenAnswer(inv -> inv.getArgument(0));
-            when(saasTeamService.ensurePersonalTeam(any(User.class))).thenReturn(new Team());
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
+                    .thenAnswer(inv -> inv.getArgument(0));
 
             bearer("tok");
             filter.doFilter(request, response, chain);
 
-            verify(userService).saveUser(any(User.class));
-            verify(saasTeamService).ensurePersonalTeam(any(User.class));
+            verify(saasTeamService).saveUserWithPersonalTeam(any(User.class));
             assertThat(local.getEmail()).isEqualTo("real@example.com");
             assertThat(local.getUsername()).isEqualTo("real@example.com");
             assertThat(local.getAuthenticationType())
@@ -342,8 +341,8 @@ class SupabaseAuthenticationFilterMoreTest {
             local.setSupabaseId(supabaseId);
             local.setAuthenticationType(AuthenticationType.ANONYMOUS);
             when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.of(local));
-            when(userService.saveUser(any(User.class))).thenAnswer(inv -> inv.getArgument(0));
-            when(saasTeamService.ensurePersonalTeam(any(User.class))).thenReturn(new Team());
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
+                    .thenAnswer(inv -> inv.getArgument(0));
 
             bearer("tok");
             filter.doFilter(request, response, chain);
@@ -365,7 +364,7 @@ class SupabaseAuthenticationFilterMoreTest {
             local.setSupabaseId(supabaseId);
             local.setAuthenticationType(AuthenticationType.ANONYMOUS);
             when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.of(local));
-            when(userService.saveUser(any(User.class)))
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                     .thenThrow(new DataIntegrityViolationException("email exists"));
 
             bearer("tok");
@@ -489,12 +488,13 @@ class SupabaseAuthenticationFilterMoreTest {
             org.mockito.Mockito.doThrow(new DataIntegrityViolationException("dup"))
                     .when(supabaseUserService)
                     .createSupabaseUser(eq(supabaseId), any(), eq(false));
-            when(userService.saveUser(any(User.class))).thenAnswer(inv -> inv.getArgument(0));
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
+                    .thenAnswer(inv -> inv.getArgument(0));
 
             bearer("tok");
             filter.doFilter(request, response, chain);
 
-            verify(userService, times(1)).saveUser(any(User.class));
+            verify(saasTeamService, times(1)).saveUserWithPersonalTeam(any(User.class));
             assertThat(SecurityContextHolder.getContext().getAuthentication())
                     .isInstanceOf(EnhancedJwtAuthenticationToken.class);
         }
@@ -516,7 +516,7 @@ class SupabaseAuthenticationFilterMoreTest {
             filter.doFilter(request, response, chain);
 
             assertThat(response.getStatus()).isEqualTo(401);
-            verify(userService, never()).saveUser(any());
+            verify(saasTeamService, never()).saveUserWithPersonalTeam(any());
         }
 
         @Test
@@ -533,13 +533,13 @@ class SupabaseAuthenticationFilterMoreTest {
             when(userService.findBySupabaseId(supabaseId))
                     .thenReturn(Optional.empty())
                     .thenReturn(Optional.of(winner));
-            when(userService.saveUser(any(User.class)))
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                     .thenThrow(new DataIntegrityViolationException("dup user"));
 
             bearer("tok");
             filter.doFilter(request, response, chain);
 
-            // Race loser does not run first-time init (ensurePersonalTeam).
+            // The winner committed user and team together, so the loser just adopts its row.
             verify(saasTeamService, never()).ensurePersonalTeam(any());
             assertThat(SecurityContextHolder.getContext().getAuthentication())
                     .isInstanceOf(EnhancedJwtAuthenticationToken.class);
@@ -554,7 +554,7 @@ class SupabaseAuthenticationFilterMoreTest {
             when(supabaseUserService.getUser(supabaseId))
                     .thenReturn(supabaseUser(supabaseId, "lost@example.com", false));
             when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.empty());
-            when(userService.saveUser(any(User.class)))
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                     .thenThrow(new DataIntegrityViolationException("dup user"));
 
             bearer("tok");
@@ -564,31 +564,30 @@ class SupabaseAuthenticationFilterMoreTest {
         }
 
         @Test
-        @DisplayName("personal team creation failure for a new user is swallowed")
-        void personalTeamFailureSwallowed() throws Exception {
+        @DisplayName("personal team creation failure fails the request, it is not swallowed")
+        void personalTeamFailureFailsAuth() throws Exception {
             UUID supabaseId = UUID.randomUUID();
             Jwt jwt = fullJwt(supabaseId, "team@example.com", false, "email");
             when(jwtDecoder.decode("tok")).thenReturn(jwt);
             when(supabaseUserService.getUser(supabaseId))
                     .thenReturn(supabaseUser(supabaseId, "team@example.com", false));
             when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.empty());
-            when(userService.saveUser(any(User.class))).thenAnswer(inv -> inv.getArgument(0));
-            when(saasTeamService.ensurePersonalTeam(any(User.class)))
+            when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                     .thenThrow(new IllegalStateException("team boom"));
 
             bearer("tok");
             filter.doFilter(request, response, chain);
 
-            // Auth still succeeds even though team creation failed.
-            assertThat(SecurityContextHolder.getContext().getAuthentication())
-                    .isInstanceOf(EnhancedJwtAuthenticationToken.class);
-            verify(userService, times(1)).saveUser(any(User.class));
+            // A teamless account has no portal access, so a failed provision must surface
+            // rather than admit a half-built user.
+            assertThat(response.getStatus()).isEqualTo(401);
+            assertThat(SecurityContextHolder.getContext().getAuthentication()).isNull();
         }
     }
 
     @Nested
-    @DisplayName("Team recovery for existing accounts")
-    class TeamRecovery {
+    @DisplayName("Existing accounts are never re-provisioned on the request path")
+    class ExistingAccountProvisioning {
 
         private User existingWebUser(UUID supabaseId) {
             User local = newUser("real@example.com");
@@ -598,8 +597,8 @@ class SupabaseAuthenticationFilterMoreTest {
         }
 
         @Test
-        @DisplayName("an existing account with no team is given a personal team")
-        void assignsTeamWhenMissing() throws Exception {
+        @DisplayName("a teamless account is left alone, not healed on every request")
+        void teamlessAccountIsNotHealed() throws Exception {
             UUID supabaseId = UUID.randomUUID();
             when(jwtDecoder.decode("tok"))
                     .thenReturn(fullJwt(supabaseId, "real@example.com", false, "email"));
@@ -607,15 +606,16 @@ class SupabaseAuthenticationFilterMoreTest {
                     .thenReturn(supabaseUser(supabaseId, "real@example.com", false));
 
             User local = existingWebUser(supabaseId);
-            Team recovered = new Team();
             when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.of(local));
-            when(saasTeamService.ensurePersonalTeam(local)).thenReturn(recovered);
 
             bearer("tok");
             filter.doFilter(request, response, chain);
 
-            verify(saasTeamService).ensurePersonalTeam(local);
-            assertThat(local.getTeam()).isSameAs(recovered);
+            // Healing here would run per request with no mutual exclusion, so parallel
+            // requests would mint duplicate teams. Provisioning belongs to signup alone.
+            verify(saasTeamService, never()).ensurePersonalTeam(any(User.class));
+            verify(saasTeamService, never()).saveUserWithPersonalTeam(any(User.class));
+            assertThat(local.getTeam()).isNull();
         }
 
         @Test
diff --git a/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterTest.java b/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterTest.java
index 58cf2d72a0..d78be84189 100644
--- a/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterTest.java
+++ b/app/saas/src/test/java/stirling/software/saas/security/SupabaseAuthenticationFilterTest.java
@@ -168,7 +168,7 @@ class SupabaseAuthenticationFilterTest {
         when(supabaseUserService.getUser(supabaseId))
                 .thenReturn(supabaseUserMatching(supabaseId, "bob@example.com", false));
         when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.empty());
-        when(userService.saveUser(any())).thenAnswer(inv -> inv.getArgument(0));
+        when(saasTeamService.saveUserWithPersonalTeam(any())).thenAnswer(inv -> inv.getArgument(0));
 
         request.setRequestURI("/api/v1/something");
         request.setMethod("POST");
@@ -176,10 +176,9 @@ class SupabaseAuthenticationFilterTest {
 
         filter.doFilter(request, response, chain);
 
-        verify(userService, times(1)).saveUser(any(User.class));
         verify(supabaseUserService).createSupabaseUser(supabaseId, "bob@example.com", false);
-        // New users get their own personal team, never the shared Default team.
-        verify(saasTeamService).ensurePersonalTeam(any(User.class));
+        // Own personal team, never the shared Default team, written with the user.
+        verify(saasTeamService, times(1)).saveUserWithPersonalTeam(any(User.class));
         verify(teamService, never()).getOrCreateDefaultTeam();
         assertThat(SecurityContextHolder.getContext().getAuthentication())
                 .isInstanceOf(EnhancedJwtAuthenticationToken.class);
@@ -194,7 +193,7 @@ class SupabaseAuthenticationFilterTest {
         when(supabaseUserService.getUser(supabaseId))
                 .thenReturn(supabaseUserMatching(supabaseId, "carol@example.com", false));
         when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.empty());
-        when(userService.saveUser(any(User.class)))
+        when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                 .thenAnswer(
                         inv -> {
                             User u = inv.getArgument(0);
@@ -210,7 +209,7 @@ class SupabaseAuthenticationFilterTest {
 
         filter.doFilter(request, response, chain);
 
-        verify(userService, times(1)).saveUser(any(User.class));
+        verify(saasTeamService, times(1)).saveUserWithPersonalTeam(any(User.class));
     }
 
     @Test
@@ -222,7 +221,7 @@ class SupabaseAuthenticationFilterTest {
         when(supabaseUserService.getUser(supabaseId))
                 .thenReturn(supabaseUserMatching(supabaseId, "dave@example.com", false));
         when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.empty());
-        when(userService.saveUser(any(User.class)))
+        when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                 .thenAnswer(
                         inv -> {
                             User u = inv.getArgument(0);
@@ -238,7 +237,7 @@ class SupabaseAuthenticationFilterTest {
 
         filter.doFilter(request, response, chain);
 
-        verify(userService, times(1)).saveUser(any(User.class));
+        verify(saasTeamService, times(1)).saveUserWithPersonalTeam(any(User.class));
     }
 
     @Test
@@ -250,7 +249,7 @@ class SupabaseAuthenticationFilterTest {
         when(supabaseUserService.getUser(supabaseId))
                 .thenReturn(supabaseUserMatching(supabaseId, "eve@example.com", false));
         when(userService.findBySupabaseId(supabaseId)).thenReturn(Optional.empty());
-        when(userService.saveUser(any(User.class)))
+        when(saasTeamService.saveUserWithPersonalTeam(any(User.class)))
                 .thenAnswer(
                         inv -> {
                             User u = inv.getArgument(0);
@@ -266,7 +265,7 @@ class SupabaseAuthenticationFilterTest {
 
         filter.doFilter(request, response, chain);
 
-        verify(userService, times(1)).saveUser(any(User.class));
+        verify(saasTeamService, times(1)).saveUserWithPersonalTeam(any(User.class));
     }
 
     @Test

From 648b61d6429d74b0c63d4cd41e2de3dffa3777bd Mon Sep 17 00:00:00 2001
From: Frooodle <77850077+Frooodle@users.noreply.github.com>
Date: Wed, 29 Jul 2026 17:57:04 +0100
Subject: [PATCH 004/122] regenerate og and lockfile

---
 frontend/editor/public/og-metadata.saas.json |  6 ++
 frontend/package-lock.json                   | 86 ++++++++++++++++++++
 2 files changed, 92 insertions(+)

diff --git a/frontend/editor/public/og-metadata.saas.json b/frontend/editor/public/og-metadata.saas.json
index 39f6bf414e..b383b225fa 100644
--- a/frontend/editor/public/og-metadata.saas.json
+++ b/frontend/editor/public/og-metadata.saas.json
@@ -266,6 +266,11 @@
       "title": "Fill Form - Stirling PDF",
       "description": "Fill PDF form fields interactively with a visual editor"
     },
+    "autoFormDetection": {
+      "image": "/og_images/home.png",
+      "title": "Auto Form Detection - Stirling PDF",
+      "description": "Automatically detect form fields with AI and make your PDF fillable."
+    },
     "multiTool": {
       "image": "/og_images/multi-tool.png",
       "title": "Multi-Tool - Stirling PDF",
@@ -597,6 +602,7 @@
     "/booklet-imposition": "bookletImposition",
     "/pdf-text-editor": "pdfTextEditor",
     "/form-fill": "formFill",
+    "/auto-form-detection": "autoFormDetection",
     "/multi-tool": "multiTool",
     "/read": "read",
     "/automate": "automate",
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 3daf53e40a..97934fbae2 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -3013,6 +3013,63 @@
       "integrity": "sha512-nctNujXL3FC1v99FktaTMSugSD9ZOZekEpahUSafkU2TSvW+XGKNkQZbokuJtiWvPBK208dwMJva8UfBkChqpw==",
       "license": "MIT"
     },
+    "node_modules/@protobufjs/aspromise": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/base64": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/codegen": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.5.tgz",
+      "integrity": "sha512-zgXFLzW3Ap33e6d0Wlj4MGIm6Ce8O89n/apUaGNB/jx+hw+ruWEp7EwGUshdLKVRCxZW12fp9r40E1mQrf/34g==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/eventemitter": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.1.tgz",
+      "integrity": "sha512-vW1GmwMZNnL+gMRaovlh9yZX74kc+TTU3FObkkurpMaRtBfLP3ldjS9KQWlwZgraRE0+dheEEoAxdzcJQ8eXZg==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/fetch": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.1.tgz",
+      "integrity": "sha512-GpptLrs57adMSuHi3VNj0mAF8dwh36LMaYF6XyJ6JMWlVsc+t42tm1HSEDmOs3A8fC9yyeisgLhsTVQokOZ0zw==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.1"
+      }
+    },
+    "node_modules/@protobufjs/float": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/path": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/pool": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/utf8": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.2.tgz",
+      "integrity": "sha512-b1UQwcEZ4yCnMCD8DAL1VlbvBJE9/IX4FTIp7BG1xYpf29SLazLSrqUkj4w7Y5y7cCVP6E5tcqqcI0xemPkHug==",
+      "license": "BSD-3-Clause"
+    },
     "node_modules/@puppeteer/browsers": {
       "version": "2.13.0",
       "resolved": "https://registry.npmjs.org/@puppeteer/browsers/-/browsers-2.13.0.tgz",
@@ -11381,6 +11438,12 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/long": {
+      "version": "5.3.2",
+      "resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz",
+      "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==",
+      "license": "Apache-2.0"
+    },
     "node_modules/longest-streak": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz",
@@ -13714,6 +13777,29 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/protobufjs": {
+      "version": "7.6.5",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.6.5.tgz",
+      "integrity": "sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==",
+      "hasInstallScript": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.2",
+        "@protobufjs/base64": "^1.1.2",
+        "@protobufjs/codegen": "^2.0.5",
+        "@protobufjs/eventemitter": "^1.1.1",
+        "@protobufjs/fetch": "^1.1.1",
+        "@protobufjs/float": "^1.0.2",
+        "@protobufjs/path": "^1.1.2",
+        "@protobufjs/pool": "^1.1.0",
+        "@protobufjs/utf8": "^1.1.1",
+        "@types/node": ">=13.7.0",
+        "long": "^5.3.2"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/proxy-agent": {
       "version": "6.5.0",
       "resolved": "https://registry.npmjs.org/proxy-agent/-/proxy-agent-6.5.0.tgz",

From 4dc0927104dc7943a6b8fc3f0c860194e16554a1 Mon Sep 17 00:00:00 2001
From: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
Date: Wed, 29 Jul 2026 18:08:08 +0100
Subject: [PATCH 005/122] a11y job: emit the affected-story list on one line
 (#7196)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## What

Fixes the a11y check failing with `permission denied` on any PR that
touches more than one story (currently hitting #7163).

The script that lists which stories to scan printed one path per line.
That list gets pasted into a shell command, so everything after the
first line fell out of the command — the shell treated the second path
as a command of its own and failed.

One-line fix: print the list on a single line.

## Testing

Changed two components and ran the task from both git-bash and
PowerShell — both stories scanned, check passes. #7163's red check
should go green on re-run once this is in.
---
 frontend/.storybook/a11y-changed.mjs | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/frontend/.storybook/a11y-changed.mjs b/frontend/.storybook/a11y-changed.mjs
index 6aacf6274c..5ff7a9e633 100644
--- a/frontend/.storybook/a11y-changed.mjs
+++ b/frontend/.storybook/a11y-changed.mjs
@@ -45,4 +45,12 @@ for (const f of changed) {
     if (existsSync(s)) stories.add(s);
 }
 
-process.stdout.write([...stories].sort().join("\n"));
+// One line, each path quoted: the output is interpolated into a task command,
+// where a newline would end the command after the first story and an unquoted
+// space would split a path into two arguments.
+process.stdout.write(
+  [...stories]
+    .sort()
+    .map((s) => `"${s}"`)
+    .join(" "),
+);

From b35329c8f5e134d07c687fbc34de2e97154b5c35 Mon Sep 17 00:00:00 2001
From: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
Date: Thu, 30 Jul 2026 09:13:41 +0100
Subject: [PATCH 006/122] a11y scan: generate required assets, and fail when a
 story file can't load (#7201)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## What

Two related bugs found while looking at why #7187's a11y check behaves
differently on CI than locally.

### 21 stories were never being scanned on CI

The scan tasks only depended on `install`, not `prepare`. On a fresh
checkout that means the generated icon set
(`editor/src/assets/material-symbols-icons.json`, gitignored) doesn't
exist, so every story that reaches `LocalIcon` fails to import:

```
Failed to resolve import "../../../assets/material-symbols-icons.json"
from "editor/src/core/components/shared/LocalIcon.tsx"
```

On CI that was four story files / 21 stories, every run. It works
locally only because our trees already have the file from a previous
build. The scan tasks now depend on `prepare`, like the `build:*` tasks
do.

### The gate reported those runs as clean

Worse than the missing stories: a file that fails to import produces a
**failed suite with no assertions**. Every check in `a11y-check.mjs`
reads assertions, so the file satisfied the manifest, contributed
nothing to compare, and the run printed `✓ no a11y regressions`.

An assertion-less failed suite now fails the gate and points at the scan
log for the underlying resolve error. `--record` refuses in the same
situation, so a baseline can't be written that quietly drops those
stories.

Also switched the affected-story emptiness test to single quotes, since
that list now carries its own per-path quoting (it was producing `[ -z
""a" "b"" ]`).

## Testing

- Deleted the generated asset to reproduce a fresh checkout: the gate
**fails** with the file named and the cause explained, where before it
printed `✓ no a11y regressions` and exited 0.
- With the `prepare` dependency the task regenerates the asset itself
and the previously-invisible files scan: 21 stories, 35 story-rule
pairs, all already baselined.
---
 .taskfiles/frontend.yml            | 14 ++++++------
 frontend/.storybook/a11y-check.mjs | 36 +++++++++++++++++++++++++++---
 2 files changed, 40 insertions(+), 10 deletions(-)

diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index 8c32efc5e3..3c2113bf96 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -184,13 +184,13 @@ tasks:
 
   storybook:
     desc: "Start Storybook dev server"
-    deps: [install]
+    deps: [prepare]
     cmds:
       - npx storybook dev -p 6006 {{.CLI_ARGS}}
 
   storybook:build:
     desc: "Build static Storybook"
-    deps: [install]
+    deps: [prepare]
     cmds:
       - npx storybook build {{.CLI_ARGS}}
 
@@ -204,7 +204,7 @@ tasks:
 
   storybook:test:
     desc: "Scan every story in real Chromium: it must render and pass axe"
-    deps: [install, storybook:browser]
+    deps: [prepare, storybook:browser]
     cmds:
       # Runs each story as a browser test. Pass a filter through, e.g.
       #   task frontend:storybook:test -- Button
@@ -212,7 +212,7 @@ tasks:
 
   storybook:a11y:
     desc: "a11y regression gate over every story: fail only on NEW axe violations"
-    deps: [install, storybook:browser]
+    deps: [prepare, storybook:browser]
     cmds:
       - node .storybook/a11y-scan.mjs
       - node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt
@@ -231,14 +231,14 @@ tasks:
 
       Pass a base ref through CLI_ARGS, e.g.
         task frontend:storybook:a11y:changed -- origin/release
-    deps: [install, storybook:browser]
+    deps: [prepare, storybook:browser]
     vars:
       BASE: '{{.CLI_ARGS | default "origin/main"}}'
       CHANGED:
         sh: node .storybook/a11y-changed.mjs {{.CLI_ARGS | default "origin/main"}}
     cmds:
       - cmd: |
-          if [ -z "{{.CHANGED}}" ]; then
+          if [ -z '{{.CHANGED}}' ]; then
             echo "a11y: no story files affected vs {{.BASE}} — nothing to check"
             exit 0
           fi
@@ -247,7 +247,7 @@ tasks:
 
   storybook:a11y:record:
     desc: "Re-record the a11y baseline (run after intentionally fixing/adding violations)"
-    deps: [install, storybook:browser]
+    deps: [prepare, storybook:browser]
     cmds:
       - node .storybook/a11y-scan.mjs
       - node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt --record
diff --git a/frontend/.storybook/a11y-check.mjs b/frontend/.storybook/a11y-check.mjs
index 7eef5e079e..43092812ff 100644
--- a/frontend/.storybook/a11y-check.mjs
+++ b/frontend/.storybook/a11y-check.mjs
@@ -52,6 +52,7 @@ const RULE_URL = /dequeuniversity\.com\/rules\/axe\/[\d.]+\/([a-z0-9-]+)/g;
 function collect(dir) {
   const rules = {}; // storyKey -> Set(ruleId)
   const crashed = []; // storyKey[] — failed for a non-a11y reason
+  const unloadable = []; // storyFile[] — the file itself never ran
   const seenFiles = new Set();
   let scanned = 0;
 
@@ -68,6 +69,14 @@ function collect(dir) {
       const idx = norm.search(/editor\/src\//);
       const file = idx >= 0 ? norm.slice(idx) : norm;
       seenFiles.add(file);
+      // A story file that fails to import produces a failed suite with no
+      // assertions at all. Every other check here reads assertions, so such a
+      // file satisfies the manifest and contributes nothing — its stories go
+      // unscanned while the run still reports clean.
+      if ((tf.assertionResults || []).length === 0 && tf.status !== "passed") {
+        unloadable.push(file);
+        continue;
+      }
       for (const a of tf.assertionResults || []) {
         scanned++;
         if (a.status === "passed") continue;
@@ -88,14 +97,14 @@ function collect(dir) {
       }
     }
   }
-  return { rules, crashed, seenFiles, scanned };
+  return { rules, crashed, unloadable, seenFiles, scanned };
 }
 
 if (!existsSync(inDir)) {
   console.error(`a11y-check: scan dir not found: ${inDir}`);
   process.exit(2);
 }
-const { rules, crashed, seenFiles, scanned } = collect(inDir);
+const { rules, crashed, unloadable, seenFiles, scanned } = collect(inDir);
 const observed = {};
 for (const [k, set] of Object.entries(rules)) observed[k] = [...set].sort();
 
@@ -129,6 +138,14 @@ if (record || merge) {
     merge && existsSync(baselineFile)
       ? JSON.parse(readFileSync(baselineFile, "utf8"))
       : {};
+  if (unloadable.length) {
+    console.error(
+      `a11y-check: refusing to record — ${unloadable.length} story file(s) failed to load:`,
+    );
+    unloadable.slice(0, 20).forEach((f) => console.error(`  ${f}`));
+    console.error("Their stories never ran, so the baseline would lose them.");
+    process.exit(2);
+  }
   if (crashed.length) {
     console.error(
       `a11y-check: refusing to record — ${crashed.length} story(ies) failed for a non-a11y reason:`,
@@ -176,6 +193,19 @@ console.log(
     `${pairs} story-rule pairs (baselined).`,
 );
 
+if (unloadable.length) {
+  console.error(
+    `\n✖ ${unloadable.length} story file(s) failed to load, so their stories never ran:`,
+  );
+  unloadable.slice(0, 50).forEach((f) => console.error(`  ${f}`));
+  if (unloadable.length > 50)
+    console.error(`  … and ${unloadable.length - 50} more`);
+  console.error(
+    "\nA file that cannot be imported reports no violations at all. The resolve " +
+      "or transform error is in the scan log (.a11y-scan/scan.log, uploaded as a " +
+      "run artifact); a missing generated asset is the usual cause.",
+  );
+}
 if (crashed.length) {
   console.error(`\n✖ ${crashed.length} story(ies) failed to render:`);
   crashed.slice(0, 50).forEach((k) => console.error(`  ${k}`));
@@ -191,7 +221,7 @@ if (regressions.length) {
       "baseline key no longer matches — re-record: task frontend:storybook:a11y:record",
   );
 }
-if (crashed.length || regressions.length) process.exit(1);
+if (unloadable.length || crashed.length || regressions.length) process.exit(1);
 
 if (fixed.length)
   console.log(

From 9d01866c83743a7639332006d41f91915809ecbc Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Thu, 30 Jul 2026 15:08:04 +0100
Subject: [PATCH 007/122] Set PRs to build Mac and Windows binaries when
 building desktop code (#7203)

# Description of Changes
Currently, desktop PRs only build on Linux, which none of the core
maintainers currently use. Change it so that desktop PRs build Mac and
Windows, so core maintainers can test the built version.
---
 .github/workflows/build.yml       |  7 +++----
 .github/workflows/tauri-build.yml | 14 ++++++++------
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c8275c023b..47170d7f07 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -174,13 +174,12 @@ jobs:
       pull-requests: write
     uses: ./.github/workflows/tauri-build.yml
     secrets: inherit
-    # PR smoke build: Linux only (fastest + cheapest to compile), unsigned,
-    # deb-only, no AppImage. The full signed multi-OS matrix runs on release;
+    # PR smoke build: macOS + Windows (the platforms our developers use). 
+    # The full signed multi-OS matrix runs on release;
     # nightly still warms the Rust cache with all-OS defaults.
     with:
-      platform: linux
+      platform: windows-macos
       sign: false
-      minimal: true
 
   ai-engine:
     if: needs.files-changed.outputs.engine == 'true'
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index c97ae4eaef..7daaf18bc1 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -12,7 +12,7 @@ on:
   workflow_call:
     inputs:
       platform:
-        description: "Platform to build (windows, macos, linux, or all)."
+        description: "Platform to build (windows, macos, linux, windows-macos, or all)."
         required: false
         type: string
         default: "all"
@@ -29,7 +29,7 @@ on:
   workflow_dispatch:
     inputs:
       platform:
-        description: "Platform to build (windows, macos, linux, or all)"
+        description: "Platform to build (windows, macos, linux, windows-macos, or all)"
         required: true
         default: "all"
         type: choice
@@ -38,6 +38,7 @@ on:
           - windows
           - macos
           - linux
+          - windows-macos
       sign:
         description: "Sign and notarize the bundles."
         required: false
@@ -76,10 +77,11 @@ jobs:
           LINUX='{"platform":"ubuntu-22.04","args":"","name":"linux-x86_64","jpdfium_platforms":"linux-x64"}'
 
           case "$PLATFORM" in
-            windows) ENTRIES=("$WINDOWS") ;;
-            macos)   ENTRIES=("$MACOS") ;;
-            linux)   ENTRIES=("$LINUX") ;;
-            *)       ENTRIES=("$WINDOWS" "$MACOS" "$LINUX") ;;
+            windows)       ENTRIES=("$WINDOWS") ;;
+            macos)         ENTRIES=("$MACOS") ;;
+            linux)         ENTRIES=("$LINUX") ;;
+            windows-macos) ENTRIES=("$WINDOWS" "$MACOS") ;;
+            *)             ENTRIES=("$WINDOWS" "$MACOS" "$LINUX") ;;
           esac
 
           # Drop macOS entries when Apple certificate secret is unavailable

From 3bee6d212e28e7ff9b11622e1bc7c4e02c3c251e Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Fri, 31 Jul 2026 09:53:01 +0100
Subject: [PATCH 008/122] Change pipelines to have 1 input and 1 output (#7121)

# Description of Changes

Change pipelines so that sources and triggers are grouped into a list of
inputs, so you can have a different trigger for each source in the list.
This is necessary because triggers are not universally supported by all
source types. If you wanted to have a pipeline pull from both a folder
and an S3 bucket, the current system allows you to choose "Folder Watch"
as the trigger, which will either do nothing or crash when it's paired
with the S3 bucket.

I've got reservations about actually allowing different triggers for
every source because it allows for user workflows that I don't believe
exist, like "I want this folder to be polled every minute and this other
one to be polled every hour, but they should run the same tools and
should output to the same place". Because of this (with agreement from
Connor, Anthony and Matt) I've changed this PR to artificially limit
pipelines to having 1 input & output at this stage. The backend is still
shaped to support multiple inputs & outputs so it should be trivial to
re-add support for them in the future if we decide we want to, but the
UI can be much simpler and easier to understand with just 1 input and
output.

<img width="1262" height="521" alt="image"
src="https://github.com/user-attachments/assets/809e6803-9f99-436d-9aeb-52dddf0906ff"
/>
---
 .../policy/controller/PolicyController.java   |   3 +-
 .../policy/engine/PolicyRunner.java           |  42 ++-
 .../policy/engine/PolicyValidator.java        |  52 ++-
 .../policy/model/PipelineInput.java           |  16 +
 .../proprietary/policy/model/Policy.java      |  61 +--
 .../policy/model/PolicyBinding.java           |  31 ++
 .../overview/PolicyOverviewService.java       |  13 +-
 .../DefaultClassificationPolicySeeder.java    |   1 -
 .../policy/store/InProcessPolicyStore.java    |  13 +-
 .../policy/store/JpaPolicyStore.java          |  54 ++-
 .../policy/store/PolicyEntity.java            |  11 +-
 .../policy/store/PolicyRepository.java        |   8 +-
 .../proprietary/policy/store/PolicyStore.java |   8 +-
 .../policy/trigger/FolderWatchTrigger.java    |  77 ++--
 .../policy/trigger/PolicyTrigger.java         |  13 +-
 .../policy/trigger/ScheduleTrigger.java       |  44 ++-
 .../policy/trigger/WebhookTrigger.java        |  64 ++--
 .../policy/config/FolderAccessGuardTest.java  |  10 +-
 .../policy/config/PolicyAccessGuardTest.java  |   2 +-
 .../controller/PolicyControllerTest.java      |  10 +-
 .../policy/engine/PolicyEngineTest.java       |   4 +-
 .../policy/engine/PolicyRunnerTest.java       |   5 +-
 .../policy/engine/PolicyValidatorTest.java    |  59 ++-
 .../PolicyInlineOutputMigrationTest.java      |   3 -
 .../output/PolicyOutputResolverTest.java      |   1 -
 .../overview/PolicyOverviewServiceTest.java   |  13 +-
 .../s3/EmbeddedS3CredentialMigrationTest.java |   4 +-
 .../s3/PolicyS3ConnectionUsageCheckTest.java  |   1 -
 ...DefaultClassificationPolicySeederTest.java |   1 -
 .../policy/source/SourceControllerTest.java   |   4 +-
 .../source/SourceOverviewServiceTest.java     |   8 +-
 .../store/InProcessPolicyStoreTest.java       |  20 +-
 .../policy/store/JpaPolicyStoreTest.java      |  54 ++-
 .../trigger/FolderWatchTriggerTest.java       |  99 +++--
 .../policy/trigger/ScheduleTriggerTest.java   |  87 +++--
 .../policy/trigger/WebhookTriggerTest.java    |  39 +-
 .../public/locales/en-US/translation.toml     |   8 +-
 frontend/editor/src/portal/api/pipelines.ts   |  18 +-
 .../pipelines/DestinationPicker.tsx           |  47 ++-
 .../src/portal/mocks/handlers/pipelines.ts    |  42 ++-
 .../src/portal/views/PipelineBuilder.css      |  23 ++
 .../src/portal/views/PipelineBuilder.test.tsx | 131 +++++--
 .../src/portal/views/PipelineBuilder.tsx      | 350 +++++++++++-------
 43 files changed, 1006 insertions(+), 548 deletions(-)
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineInput.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyBinding.java

diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
index a34c392597..b6156bc2b8 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
@@ -355,8 +355,7 @@ public class PolicyController {
                 policy.name(),
                 owner,
                 policy.enabled(),
-                policy.trigger(),
-                policy.sourceIds(),
+                policy.inputs(),
                 policy.steps(),
                 policy.output(),
                 policy.outputIds(),
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java
index 866fe0910d..837e3bd0ae 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java
@@ -15,6 +15,7 @@ import stirling.software.proprietary.policy.input.ResolvedInput;
 import stirling.software.proprietary.policy.ledger.ProcessedLedger;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.PipelineDefinition;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.PolicyInputs;
 import stirling.software.proprietary.policy.model.PolicyRun;
@@ -42,30 +43,46 @@ public class PolicyRunner {
     private final SourceDocCounter docCounter;
     private final ProcessedLedger processedLedger;
 
-    /** Full-listing sweep: resolve every source, then reconcile the ledger. */
+    /** Full-listing sweep over every input: resolve each source, then reconcile the ledger. */
     public SweepOutcome run(Policy policy) {
         return run(policy, SweepKind.FULL);
     }
 
-    /**
-     * Trigger entry point. Pulls every referenced source; each yielded unit becomes its own run so
-     * one failure does not affect the others. No sources means one run with no input (generator
-     * pipeline). Missing or disabled sources are skipped so one broken reference does not stop the
-     * rest. Returns the ids of the runs it started plus what the sweep skipped, so a manual trigger
-     * can report which runs to follow or why nothing ran.
-     */
+    /** Sweep every input of the policy at the given listing depth. */
     public SweepOutcome run(Policy policy, SweepKind sweep) {
+        return run(policy, policy.inputs(), sweep);
+    }
+
+    /**
+     * Fire one input binding: a background trigger pulling its own source without touching the
+     * policy's other inputs. Never reconciles the ledger (it sees a single source, so pruning would
+     * wrongly forget the rest); a full-policy sweep handles that.
+     */
+    public SweepOutcome runInput(Policy policy, PipelineInput input, SweepKind sweep) {
+        return run(policy, List.of(input), sweep);
+    }
+
+    /**
+     * Core sweep: pulls each of the given inputs' sources; each yielded unit becomes its own run so
+     * one failure does not affect the others. No inputs means one run with no input (generator
+     * pipeline). Missing or disabled sources are skipped so one broken reference does not stop the
+     * rest. Presence cleanup only runs when the sweep covered every input of the policy - a
+     * single-binding fire cannot reconcile the whole policy's ledger. Returns the ids of the runs
+     * it started plus what the sweep skipped, so a manual trigger can report which runs to follow
+     * or why nothing ran.
+     */
+    public SweepOutcome run(Policy policy, List<PipelineInput> inputs, SweepKind sweep) {
         long sweepStart = System.currentTimeMillis();
         PolicySweep context = new PolicySweep(policy.id(), sweep, processedLedger);
         List<String> runIds = new ArrayList<>();
-        List<String> sourceIds = policy.sourceIds();
-        if (sourceIds.isEmpty()) {
+        if (inputs.isEmpty()) {
             // Generator pipeline: one run with no input. Still fall through to the cleanup
             // below so rows recorded for its folder outputs are pruned like anything else,
             // instead of accumulating until the policy is deleted.
             runIds.add(startRun(policy, PolicyInputs.of(List.of()), unused -> {}));
         }
-        for (String sourceId : sourceIds) {
+        for (PipelineInput input : inputs) {
+            String sourceId = input.sourceId();
             Source source = sourceStore.get(sourceId).orElse(null);
             if (source == null) {
                 // No veto: a deleted source's rows should age out via the cleanup below.
@@ -84,7 +101,8 @@ public class PolicyRunner {
             }
             runIds.addAll(pullAndRun(policy, sourceId, source.toInputSpec(), context));
         }
-        if (context.cleanupAllowed()) {
+        boolean fullPolicy = inputs.size() == policy.inputs().size();
+        if (fullPolicy && context.cleanupAllowed()) {
             processedLedger.markSeen(policy.id(), context.presentIdentities());
             int removed = processedLedger.deleteUnseen(policy.id(), sweepStart);
             if (removed > 0) {
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java
index c2d1357889..b30a760fe3 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java
@@ -9,6 +9,7 @@ import lombok.RequiredArgsConstructor;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.TriggerConfig;
@@ -18,10 +19,11 @@ import stirling.software.proprietary.policy.source.SourceStore;
 import stirling.software.proprietary.policy.trigger.PolicyTrigger;
 
 /**
- * Validates a policy at save time by delegating each facet (trigger, sources, steps, output) to the
- * bean that handles its type, so a misconfiguration fails fast rather than at run time. A null
- * trigger is a manual-only policy and skips trigger validation. Each referenced {@code sourceId}
- * must resolve to a persisted {@link Source} whose config its {@link InputSource} bean accepts.
+ * Validates a policy at save time by delegating each facet (inputs, their triggers, output) to the
+ * bean that handles its type, so a misconfiguration fails fast rather than at run time. Each
+ * input's {@code sourceId} must resolve to a persisted {@link Source} whose config its {@link
+ * InputSource} bean accepts; its optional trigger must be a known type compatible with that source.
+ * A null trigger is a manual-only input and skips trigger validation.
  */
 @Service
 @RequiredArgsConstructor
@@ -34,21 +36,31 @@ public class PolicyValidator {
     private final SourceStore sourceStore;
 
     /**
-     * @throws IllegalArgumentException if any facet's type is unknown, a referenced source does not
-     *     exist, or any config is invalid
+     * @throws IllegalArgumentException if the policy has more than one input or output, any facet's
+     *     type is unknown, a referenced source does not exist, a trigger is incompatible with its
+     *     input's source, or any config is invalid
      */
     public void validate(Policy policy) {
-        if (policy.trigger() != null) {
-            triggerFor(policy.trigger()).validate(policy);
+        // Deliberate product cap, not a model limit: the lists stay lists so multiple
+        // inputs/outputs can be supported later, but today a policy carries at most one of
+        // each (zero of either remains fine - run on demand / inline output).
+        if (policy.inputs().size() > 1) {
+            throw new IllegalArgumentException("a policy supports at most one input");
         }
-        for (String sourceId : policy.sourceIds()) {
+        if (policy.outputIds().size() > 1) {
+            throw new IllegalArgumentException("a policy supports at most one output");
+        }
+        for (PipelineInput input : policy.inputs()) {
             Source source =
                     sourceStore
-                            .get(sourceId)
+                            .get(input.sourceId())
                             .orElseThrow(
                                     () ->
                                             new IllegalArgumentException(
-                                                    "unknown source: " + sourceId));
+                                                    "unknown source: " + input.sourceId()));
+            if (input.trigger() != null) {
+                validateTrigger(policy, input, source);
+            }
             InputSpec spec = source.toInputSpec();
             inputSourceFor(spec).validate(spec);
         }
@@ -73,6 +85,24 @@ public class PolicyValidator {
         }
     }
 
+    /**
+     * Check an input's trigger is a known type whose source constraints its source satisfies (e.g.
+     * folder-watch only on a folder source), then let the trigger validate its own options.
+     */
+    private void validateTrigger(Policy policy, PipelineInput input, Source source) {
+        PolicyTrigger trigger = triggerFor(input.trigger());
+        if (!trigger.supportedSourceTypes().isEmpty()
+                && !trigger.supportedSourceTypes().contains(source.type())) {
+            throw new IllegalArgumentException(
+                    "trigger '"
+                            + trigger.type()
+                            + "' is not compatible with source type '"
+                            + source.type()
+                            + "'");
+        }
+        trigger.validate(policy, input);
+    }
+
     /**
      * Validate an output spec against its sink. Must be called on a request thread (caller's
      * principal present) so an S3 output's connection is authorization-checked against the caller -
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineInput.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineInput.java
new file mode 100644
index 0000000000..15242a9916
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineInput.java
@@ -0,0 +1,16 @@
+package stirling.software.proprietary.policy.model;
+
+/**
+ * One input of a policy: a reference to a persisted {@code Source} paired with the {@link
+ * TriggerConfig} that decides when <em>this</em> source is pulled. The trigger lives on the
+ * binding, not on the source (so one connection can feed many policies on different schedules) and
+ * not on the policy (so a folder input can be watched while an S3 input on the same policy polls).
+ * A {@code null} trigger means this input is pulled only when the policy is run on demand.
+ */
+public record PipelineInput(String sourceId, TriggerConfig trigger) {
+
+    /** An input with no automatic trigger: pulled only on a manual run. */
+    public static PipelineInput manual(String sourceId) {
+        return new PipelineInput(sourceId, null);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java
index ae9fedc46a..a3d43b712d 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java
@@ -3,29 +3,31 @@ package stirling.software.proprietary.policy.model;
 import java.util.List;
 
 /**
- * A stored automation: ordered tool steps, input sources, and output destinations.
+ * A stored automation: ordered tool steps, input bindings, and output destinations.
  *
- * <p>Always runnable on demand. An optional {@link TriggerConfig} fires it automatically; a {@code
- * null} trigger means manual-only. Trigger decides when; {@code sourceIds} reference the persisted
- * {@code Source} locations (resolved live at run time) files come from; a run pulls from every
- * referenced source. {@code outputIds} reference the {@code Source} locations (resolved live) a
- * run's files are delivered to - a run is delivered to every one; when empty the inline {@link
- * #output} is used (results returned to the caller), the case for editor and one-off policies.
+ * <p>Always runnable on demand. Each {@link PipelineInput} references a persisted {@code Source}
+ * connection (resolved live at run time) and carries its own optional {@link TriggerConfig}: the
+ * trigger decides when that source is pulled, so one input can be watched while another polls, and
+ * a {@code null} trigger makes that input manual-only. An input with no trigger, or a policy with
+ * no triggered inputs, still runs when the policy is run on demand; a manual run pulls every input.
+ *
+ * <p>{@code outputIds} reference the {@code Source} locations (resolved live) a run's files are
+ * delivered to - a run is delivered to every one; when empty the inline {@link #output} is used
+ * (results returned to the caller), the case for editor and one-off policies.
  */
 public record Policy(
         String id,
         String name,
         String owner,
         boolean enabled,
-        TriggerConfig trigger,
-        List<String> sourceIds,
+        List<PipelineInput> inputs,
         List<PipelineStep> steps,
         OutputSpec output,
         List<String> outputIds,
         Long teamId) {
 
     public Policy {
-        sourceIds = sourceIds == null ? List.of() : List.copyOf(sourceIds);
+        inputs = inputs == null ? List.of() : List.copyOf(inputs);
         steps = steps == null ? List.of() : steps;
         output = output == null ? OutputSpec.inline() : output;
         outputIds = outputIds == null ? List.of() : List.copyOf(outputIds);
@@ -41,12 +43,11 @@ public record Policy(
             String name,
             String owner,
             boolean enabled,
-            TriggerConfig trigger,
-            List<String> sourceIds,
+            List<PipelineInput> inputs,
             List<PipelineStep> steps,
             OutputSpec output,
             Long teamId) {
-        this(id, name, owner, enabled, trigger, sourceIds, steps, output, List.of(), teamId);
+        this(id, name, owner, enabled, inputs, steps, output, List.of(), teamId);
     }
 
     /**
@@ -58,35 +59,35 @@ public record Policy(
             String name,
             String owner,
             boolean enabled,
-            TriggerConfig trigger,
-            List<String> sourceIds,
+            List<PipelineInput> inputs,
             List<PipelineStep> steps,
             OutputSpec output) {
-        this(id, name, owner, enabled, trigger, sourceIds, steps, output, List.of(), null);
+        this(id, name, owner, enabled, inputs, steps, output, List.of(), null);
     }
 
-    /** A policy with no configured sources (a generator, or files supplied directly to a run). */
-    public Policy(
-            String id,
-            String name,
-            String owner,
-            boolean enabled,
-            TriggerConfig trigger,
-            List<PipelineStep> steps,
-            OutputSpec output) {
-        this(id, name, owner, enabled, trigger, List.of(), steps, output, List.of(), null);
+    /** The source ids this policy pulls from, in input order; a derived view for reads. */
+    public List<String> sourceIds() {
+        return inputs.stream().map(PipelineInput::sourceId).toList();
+    }
+
+    /** The distinct trigger types configured across this policy's inputs (manual inputs aside). */
+    public List<String> triggerTypes() {
+        return inputs.stream()
+                .map(PipelineInput::trigger)
+                .filter(trigger -> trigger != null)
+                .map(TriggerConfig::type)
+                .distinct()
+                .toList();
     }
 
     /** A copy with the inline output replaced (e.g. resolved for the engine, or migrated). */
     public Policy withOutput(OutputSpec resolved) {
-        return new Policy(
-                id, name, owner, enabled, trigger, sourceIds, steps, resolved, outputIds, teamId);
+        return new Policy(id, name, owner, enabled, inputs, steps, resolved, outputIds, teamId);
     }
 
     /** A copy referencing the given saved output destinations. */
     public Policy withOutputIds(List<String> newOutputIds) {
-        return new Policy(
-                id, name, owner, enabled, trigger, sourceIds, steps, output, newOutputIds, teamId);
+        return new Policy(id, name, owner, enabled, inputs, steps, output, newOutputIds, teamId);
     }
 
     /**
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyBinding.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyBinding.java
new file mode 100644
index 0000000000..18e93ce1bc
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyBinding.java
@@ -0,0 +1,31 @@
+package stirling.software.proprietary.policy.model;
+
+import java.util.List;
+
+/**
+ * A policy paired with one of its {@link PipelineInput}s: the unit a background trigger fires. A
+ * policy with two triggered inputs yields two bindings, so each fires independently on its own
+ * trigger and pulls only its own source.
+ */
+public record PolicyBinding(Policy policy, PipelineInput input) {
+
+    /**
+     * The bindings across these policies whose input carries a trigger of the given type. Shared by
+     * the {@code PolicyStore} implementations so every backend derives a trigger's bindings the
+     * same way. Callers pass the policies a background trigger should consider (i.e. the enabled
+     * ones).
+     */
+    public static List<PolicyBinding> matching(List<Policy> policies, String triggerType) {
+        return policies.stream()
+                .flatMap(
+                        policy ->
+                                policy.inputs().stream()
+                                        .filter(
+                                                input ->
+                                                        input.trigger() != null
+                                                                && triggerType.equals(
+                                                                        input.trigger().type()))
+                                        .map(input -> new PolicyBinding(policy, input)))
+                .toList();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java
index c927ec199c..272917ec7f 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java
@@ -14,7 +14,6 @@ import stirling.software.proprietary.policy.config.PolicyAccessGuard;
 import stirling.software.proprietary.policy.model.OutputSpec;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
-import stirling.software.proprietary.policy.model.TriggerConfig;
 import stirling.software.proprietary.policy.source.Source;
 import stirling.software.proprietary.policy.source.SourceAccessGuard;
 import stirling.software.proprietary.policy.source.SourceStore;
@@ -73,7 +72,7 @@ public class PolicyOverviewService {
                 policy.name(),
                 policy.enabled(),
                 policy.enabled() ? "active" : "paused",
-                triggerSummary(policy.trigger()),
+                triggerSummary(policy),
                 sources,
                 steps,
                 outputSummary(policy, sourceNames),
@@ -95,9 +94,13 @@ public class PolicyOverviewService {
         return outputSummary(policy.output());
     }
 
-    /** A null trigger is a manual-only policy; otherwise the trigger's type keys the summary. */
-    private static String triggerSummary(TriggerConfig trigger) {
-        return trigger == null ? "manual" : trigger.type();
+    /**
+     * Summarise a policy's triggers for the overview row: "manual" when no input is triggered,
+     * otherwise the distinct trigger types across its inputs (e.g. "folder-watch, schedule").
+     */
+    private static String triggerSummary(Policy policy) {
+        List<String> types = policy.triggerTypes();
+        return types.isEmpty() ? "manual" : String.join(", ", types);
     }
 
     private static String outputSummary(OutputSpec output) {
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
index 4150dc2f31..63ebae833a 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
@@ -87,7 +87,6 @@ public class DefaultClassificationPolicySeeder {
                 POLICY_NAME,
                 "system",
                 true,
-                null,
                 List.of(),
                 List.of(new PipelineStep(CLASSIFY_ENDPOINT, Map.of())),
                 new OutputSpec("inline", options),
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/InProcessPolicyStore.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/InProcessPolicyStore.java
index 6498e7e28a..de6be8ef5d 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/InProcessPolicyStore.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/InProcessPolicyStore.java
@@ -9,6 +9,7 @@ import java.util.UUID;
 import java.util.concurrent.ConcurrentHashMap;
 
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 
 /**
  * In-memory {@link PolicyStore} for tests and any future no-database mode. {@link JpaPolicyStore}
@@ -32,8 +33,7 @@ public class InProcessPolicyStore implements PolicyStore {
                         policy.name(),
                         policy.owner(),
                         policy.enabled(),
-                        policy.trigger(),
-                        policy.sourceIds(),
+                        policy.inputs(),
                         policy.steps(),
                         policy.output(),
                         policy.outputIds(),
@@ -77,12 +77,9 @@ public class InProcessPolicyStore implements PolicyStore {
     }
 
     @Override
-    public List<Policy> findByTriggerType(String triggerType) {
-        return policies.values().stream()
-                .filter(Policy::enabled)
-                .filter(policy -> policy.trigger() != null)
-                .filter(policy -> triggerType.equals(policy.trigger().type()))
-                .toList();
+    public List<PolicyBinding> findBindingsByTriggerType(String triggerType) {
+        List<Policy> enabled = policies.values().stream().filter(Policy::enabled).toList();
+        return PolicyBinding.matching(enabled, triggerType);
     }
 
     @Override
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/JpaPolicyStore.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/JpaPolicyStore.java
index 1b598b88c1..4f91f9e930 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/JpaPolicyStore.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/JpaPolicyStore.java
@@ -12,8 +12,12 @@ import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 
+import tools.jackson.databind.JsonNode;
 import tools.jackson.databind.ObjectMapper;
+import tools.jackson.databind.node.ArrayNode;
+import tools.jackson.databind.node.ObjectNode;
 
 /**
  * Durable {@link PolicyStore} backed by JPA; the runtime store. Policies are persisted as JSON via
@@ -40,8 +44,7 @@ public class JpaPolicyStore implements PolicyStore {
                         policy.name(),
                         policy.owner(),
                         policy.enabled(),
-                        policy.trigger(),
-                        policy.sourceIds(),
+                        policy.inputs(),
                         policy.steps(),
                         policy.output(),
                         policy.outputIds(),
@@ -52,7 +55,6 @@ public class JpaPolicyStore implements PolicyStore {
         entity.setName(stored.name());
         entity.setOwner(stored.owner());
         entity.setEnabled(stored.enabled());
-        entity.setTriggerType(stored.trigger() == null ? null : stored.trigger().type());
         entity.setTeamId(stored.teamId());
         // Preserve an existing policy's run-order position; append a new one to the end of its
         // team's queue (max + 1), so setting up a policy adds it last by default.
@@ -119,11 +121,13 @@ public class JpaPolicyStore implements PolicyStore {
     }
 
     @Override
-    public List<Policy> findByTriggerType(String triggerType) {
-        return repository.findByTriggerTypeAndEnabledTrue(triggerType).stream()
-                .map(this::toPolicy)
-                .flatMap(Optional::stream)
-                .toList();
+    public List<PolicyBinding> findBindingsByTriggerType(String triggerType) {
+        List<Policy> enabled =
+                repository.findByEnabledTrue().stream()
+                        .map(this::toPolicy)
+                        .flatMap(Optional::stream)
+                        .toList();
+        return PolicyBinding.matching(enabled, triggerType);
     }
 
     @Override
@@ -139,7 +143,8 @@ public class JpaPolicyStore implements PolicyStore {
     // One unreadable row must never abort a bulk read or crash startup.
     private Optional<Policy> toPolicy(PolicyEntity entity) {
         try {
-            return Optional.of(objectMapper.readValue(entity.getPolicyJson(), Policy.class));
+            JsonNode node = upgradeLegacyShape(objectMapper.readTree(entity.getPolicyJson()));
+            return Optional.of(objectMapper.treeToValue(node, Policy.class));
         } catch (Exception e) {
             log.error(
                     "Skipping unreadable policy id={} name={}: stored JSON could not be parsed"
@@ -150,4 +155,35 @@ public class JpaPolicyStore implements PolicyStore {
             return Optional.empty();
         }
     }
+
+    /**
+     * Migrate a policy JSON blob written before triggers moved onto inputs. The old shape carried a
+     * single policy-level {@code trigger} and a {@code sourceIds} list; pair each source with that
+     * trigger so an upgraded policy keeps firing. A trigger incompatible with a source
+     * (folder-watch on an S3 source) is simply inert at run time, matching the old behaviour where
+     * such a source was never watched. New-shape blobs (already carrying {@code inputs}) are
+     * returned untouched.
+     */
+    private JsonNode upgradeLegacyShape(JsonNode root) {
+        if (!(root instanceof ObjectNode obj) || obj.has("inputs")) {
+            return root;
+        }
+        JsonNode trigger = obj.get("trigger");
+        JsonNode sourceIds = obj.get("sourceIds");
+        ArrayNode inputs = objectMapper.createArrayNode();
+        if (sourceIds != null && sourceIds.isArray()) {
+            for (JsonNode sourceId : sourceIds) {
+                ObjectNode input = objectMapper.createObjectNode();
+                input.set("sourceId", sourceId);
+                if (trigger != null && !trigger.isNull()) {
+                    input.set("trigger", trigger);
+                }
+                inputs.add(input);
+            }
+        }
+        obj.set("inputs", inputs);
+        obj.remove("trigger");
+        obj.remove("sourceIds");
+        return obj;
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyEntity.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyEntity.java
index c871267bc4..fa639b5c19 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyEntity.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyEntity.java
@@ -17,10 +17,10 @@ import stirling.software.proprietary.integration.crypto.LegacyDecryptStringConve
 /**
  * JPA row for a {@link stirling.software.proprietary.policy.model.Policy}. The whole policy lives
  * as JSON in {@code policyJson} (authoritative on read); the scalar columns are denormalized copies
- * for querying, notably {@code triggerType} + {@code enabled} so background triggers can fetch
- * their policies, and {@code teamId} so the caller's team can be loaded without scanning every
- * team's rows. {@code owner} and {@code teamId} are plain values, not foreign keys, to stay
- * decoupled from the security entities.
+ * for querying, notably {@code enabled} so background triggers can scan the active policies, and
+ * {@code teamId} so the caller's team can be loaded without scanning every team's rows. {@code
+ * owner} and {@code teamId} are plain values, not foreign keys, to stay decoupled from the security
+ * entities.
  */
 @Entity
 @Table(name = "policies")
@@ -44,9 +44,6 @@ public class PolicyEntity implements Serializable {
     @Column(name = "enabled")
     private boolean enabled;
 
-    @Column(name = "trigger_type")
-    private String triggerType;
-
     @Column(name = "team_id")
     private Long teamId;
 
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyRepository.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyRepository.java
index 82ae4355dd..1c8465c82a 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyRepository.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyRepository.java
@@ -13,8 +13,12 @@ import jakarta.persistence.LockModeType;
 @Repository
 public interface PolicyRepository extends JpaRepository<PolicyEntity, String> {
 
-    /** Enabled policies of a given trigger type, for background triggers to activate. */
-    List<PolicyEntity> findByTriggerTypeAndEnabledTrue(String triggerType);
+    /**
+     * Enabled policies, for background triggers to scan for inputs of their trigger type. Which
+     * inputs (and their trigger types) a policy carries lives in the JSON blob, so the type filter
+     * is applied after parsing rather than in SQL.
+     */
+    List<PolicyEntity> findByEnabledTrue();
 
     /**
      * Policies belonging to a team, in run order (ascending {@code sortOrder}; a null order sorts
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyStore.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyStore.java
index ac9e210439..fa2a7e9b87 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyStore.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/store/PolicyStore.java
@@ -4,6 +4,7 @@ import java.util.List;
 import java.util.Optional;
 
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 
 /** Stores {@link Policy} definitions. */
 public interface PolicyStore {
@@ -18,8 +19,11 @@ public interface PolicyStore {
     /** Policies owned by the given team, loaded scoped rather than fetched globally. */
     List<Policy> findByTeam(Long teamId);
 
-    /** Enabled policies with the given trigger type, for background triggers. */
-    List<Policy> findByTriggerType(String triggerType);
+    /**
+     * Enabled inputs with the given trigger type, as {@code (policy, input)} bindings, so a
+     * background trigger fires each input independently and pulls only its own source.
+     */
+    List<PolicyBinding> findBindingsByTriggerType(String triggerType);
 
     /**
      * Set the team's run order from {@code orderedIds} (position → sortOrder). Only policies that
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/FolderWatchTrigger.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/FolderWatchTrigger.java
index a4470a418b..5b859a4786 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/FolderWatchTrigger.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/FolderWatchTrigger.java
@@ -31,7 +31,9 @@ import stirling.software.proprietary.policy.engine.PolicyRunner;
 import stirling.software.proprietary.policy.engine.SweepKind;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.model.InputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.source.Source;
 import stirling.software.proprietary.policy.source.SourceStore;
 import stirling.software.proprietary.policy.store.PolicyStore;
@@ -85,10 +87,10 @@ public class FolderWatchTrigger implements PolicyTrigger {
     }
 
     @Override
-    public void validate(Policy policy) {
-        if (watchDirsOf(policy).isEmpty()) {
+    public void validate(Policy policy, PipelineInput input) {
+        if (watchDirsOf(input).isEmpty()) {
             throw new IllegalArgumentException(
-                    "folder-watch trigger requires at least one watchable (folder) input source");
+                    "folder-watch trigger requires a watchable (folder) input source");
         }
     }
 
@@ -185,24 +187,30 @@ public class FolderWatchTrigger implements PolicyTrigger {
         return changed;
     }
 
-    /** Run every folder-watch policy that draws from one of the changed directories. */
+    /** Fire every folder-watch input that draws from one of the changed directories. */
     void runForChangedDirs(Set<Path> changedDirs) {
         if (changedDirs.isEmpty()) {
             return;
         }
-        for (Policy policy : policyStore.findByTriggerType(TYPE)) {
+        for (PolicyBinding binding : policyStore.findBindingsByTriggerType(TYPE)) {
             List<Path> dirs;
             try {
-                dirs = watchDirsOf(policy);
+                dirs = watchDirsOf(binding.input());
             } catch (RuntimeException e) {
                 log.warn(
-                        "Folder-watch policy {} is misconfigured: {}", policy.id(), e.getMessage());
+                        "Folder-watch input {}/{} is misconfigured: {}",
+                        binding.policy().id(),
+                        binding.input().sourceId(),
+                        e.getMessage());
                 continue;
             }
             if (dirs.stream().anyMatch(changedDirs::contains)) {
-                log.debug("Folder-watch policy {} ({}) saw activity", policy.id(), policy.name());
+                log.debug(
+                        "Folder-watch input {}/{} saw activity",
+                        binding.policy().id(),
+                        binding.input().sourceId());
                 // Light: the periodic reconcile does the full sweep.
-                policyRunner.run(policy, SweepKind.LIGHT);
+                policyRunner.runInput(binding.policy(), binding.input(), SweepKind.LIGHT);
             }
         }
     }
@@ -216,15 +224,16 @@ public class FolderWatchTrigger implements PolicyTrigger {
         }
     }
 
-    /** Reconcile safety net: run every folder-watch policy regardless of watch events. */
+    /** Reconcile safety net: run every folder-watch input regardless of watch events. */
     void runAll() {
-        for (Policy policy : policyStore.findByTriggerType(TYPE)) {
+        for (PolicyBinding binding : policyStore.findBindingsByTriggerType(TYPE)) {
             try {
-                policyRunner.run(policy);
+                policyRunner.runInput(binding.policy(), binding.input(), SweepKind.FULL);
             } catch (RuntimeException e) {
                 log.warn(
-                        "Folder-watch reconcile run failed for policy {}: {}",
-                        policy.id(),
+                        "Folder-watch reconcile run failed for input {}/{}: {}",
+                        binding.policy().id(),
+                        binding.input().sourceId(),
                         e.getMessage());
             }
         }
@@ -269,41 +278,43 @@ public class FolderWatchTrigger implements PolicyTrigger {
         return Set.copyOf(keysByDir.keySet());
     }
 
-    /** Every existing directory any current folder-watch policy wants watched. */
+    /** Every existing directory any current folder-watch input wants watched. */
     private Set<Path> desiredDirs() {
         Set<Path> dirs = new HashSet<>();
-        for (Policy policy : policyStore.findByTriggerType(TYPE)) {
+        for (PolicyBinding binding : policyStore.findBindingsByTriggerType(TYPE)) {
             try {
-                for (Path dir : watchDirsOf(policy)) {
+                for (Path dir : watchDirsOf(binding.input())) {
                     if (Files.isDirectory(dir)) {
                         dirs.add(dir);
                     }
                 }
             } catch (RuntimeException e) {
                 log.warn(
-                        "Folder-watch policy {} is misconfigured: {}", policy.id(), e.getMessage());
+                        "Folder-watch input {}/{} is misconfigured: {}",
+                        binding.policy().id(),
+                        binding.input().sourceId(),
+                        e.getMessage());
             }
         }
         return dirs;
     }
 
     // Absolute + normalised so registration keys and event-time matching compare regardless of how
-    // the path was configured.
-    private List<Path> watchDirsOf(Policy policy) {
+    // the path was configured. Empty for a non-folder or missing source (that input is never
+    // watched), so a folder-watch trigger paired with an S3 input is simply inert.
+    private List<Path> watchDirsOf(PipelineInput input) {
         List<Path> dirs = new ArrayList<>();
-        for (String sourceId : policy.sourceIds()) {
-            Source source = sourceStore.get(sourceId).orElse(null);
-            if (source == null) {
-                continue;
-            }
-            InputSpec spec = source.toInputSpec();
-            InputSource inputSource = sourceFor(spec);
-            if (inputSource == null) {
-                continue;
-            }
-            for (Path dir : inputSource.watchTargets(spec)) {
-                dirs.add(dir.toAbsolutePath().normalize());
-            }
+        Source source = sourceStore.get(input.sourceId()).orElse(null);
+        if (source == null) {
+            return dirs;
+        }
+        InputSpec spec = source.toInputSpec();
+        InputSource inputSource = sourceFor(spec);
+        if (inputSource == null) {
+            return dirs;
+        }
+        for (Path dir : inputSource.watchTargets(spec)) {
+            dirs.add(dir.toAbsolutePath().normalize());
         }
         return dirs;
     }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/PolicyTrigger.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/PolicyTrigger.java
index ade5357162..e1e0cc7873 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/PolicyTrigger.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/PolicyTrigger.java
@@ -2,11 +2,13 @@ package stirling.software.proprietary.policy.trigger;
 
 import java.util.Set;
 
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
 
 /**
- * Decides <em>when</em> a policy runs. On firing it hands the policy to {@code PolicyRunner}; it
- * never resolves sources itself. New trigger kinds are just new beans of this type.
+ * Decides <em>when</em> a policy input runs. On firing it hands the binding to {@code
+ * PolicyRunner}, which pulls only that input's source; it never resolves sources itself. New
+ * trigger kinds are just new beans of this type.
  */
 public interface PolicyTrigger {
 
@@ -32,10 +34,11 @@ public interface PolicyTrigger {
     }
 
     /**
-     * Validate at save time so misconfiguration fails fast, not at fire time. Receives the whole
-     * {@link Policy} so triggers that depend on the policy's sources (folder-watch) can check that.
+     * Validate one input's use of this trigger at save time so misconfiguration fails fast, not at
+     * fire time. Receives the owning {@link Policy} and the specific {@link PipelineInput} so a
+     * trigger that depends on the input's source (folder-watch) can check it.
      */
-    default void validate(Policy policy) {}
+    default void validate(Policy policy, PipelineInput input) {}
 
     default void start() {}
 
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/ScheduleTrigger.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/ScheduleTrigger.java
index 2018ffd126..f4ffb30146 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/ScheduleTrigger.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/ScheduleTrigger.java
@@ -17,14 +17,18 @@ import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.policy.engine.PolicyRunner;
+import stirling.software.proprietary.policy.engine.SweepKind;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.model.Schedule;
 import stirling.software.proprietary.policy.store.PolicyStore;
 
 import tools.jackson.databind.ObjectMapper;
 
 /**
- * Fires policies on a {@link Schedule}: a fixed-interval sweep runs each due "schedule" policy.
+ * Fires policy inputs on a {@link Schedule}: a fixed-interval sweep pulls each due "schedule"
+ * input, independently of the policy's other inputs.
  *
  * <p>Last-fire times are in memory, so this assumes a single node and resets on restart.
  */
@@ -40,17 +44,20 @@ public class ScheduleTrigger implements PolicyTrigger {
     private final ObjectMapper objectMapper;
     private final ApplicationProperties applicationProperties;
 
-    private final Map<String, Instant> lastFiredByPolicy = new ConcurrentHashMap<>();
+    private final Map<BindingKey, Instant> lastFiredByBinding = new ConcurrentHashMap<>();
     private volatile ScheduledExecutorService scheduler;
 
+    /** Identifies a schedule binding: one input (by source) of one policy. */
+    private record BindingKey(String policyId, String sourceId) {}
+
     @Override
     public String type() {
         return TYPE;
     }
 
     @Override
-    public void validate(Policy policy) {
-        ScheduleConfig.from(objectMapper, policy.trigger().options());
+    public void validate(Policy policy, PipelineInput input) {
+        ScheduleConfig.from(objectMapper, input.trigger().options());
     }
 
     @Override
@@ -83,19 +90,26 @@ public class ScheduleTrigger implements PolicyTrigger {
         }
     }
 
-    /** Fire every scheduled policy that is due as of {@code now}. Package-visible for testing. */
+    /** Fire every scheduled input that is due as of {@code now}. Package-visible for testing. */
     void sweep(Instant now) {
-        for (Policy policy : policyStore.findByTriggerType(TYPE)) {
+        for (PolicyBinding binding : policyStore.findBindingsByTriggerType(TYPE)) {
+            Policy policy = binding.policy();
+            PipelineInput input = binding.input();
             ScheduleConfig config;
             try {
-                config = ScheduleConfig.from(objectMapper, policy.trigger().options());
+                config = ScheduleConfig.from(objectMapper, input.trigger().options());
             } catch (IllegalArgumentException e) {
-                log.warn("Scheduled policy {} is misconfigured: {}", policy.id(), e.getMessage());
+                log.warn(
+                        "Scheduled input {}/{} is misconfigured: {}",
+                        policy.id(),
+                        input.sourceId(),
+                        e.getMessage());
                 continue;
             }
 
-            // Baseline a newly-seen policy to now so it does not fire immediately.
-            Instant last = lastFiredByPolicy.computeIfAbsent(policy.id(), id -> now);
+            // Baseline a newly-seen binding to now so it does not fire immediately.
+            BindingKey key = new BindingKey(policy.id(), input.sourceId());
+            Instant last = lastFiredByBinding.computeIfAbsent(key, id -> now);
             ZonedDateTime next = config.schedule().nextAfter(last.atZone(config.zone()));
             if (next.toInstant().isAfter(now)) {
                 continue;
@@ -105,9 +119,13 @@ public class ScheduleTrigger implements PolicyTrigger {
                 next = later;
                 later = config.schedule().nextAfter(later);
             }
-            lastFiredByPolicy.put(policy.id(), next.toInstant());
-            log.info("Scheduled policy {} ({}) is due", policy.id(), policy.name());
-            policyRunner.run(policy);
+            lastFiredByBinding.put(key, next.toInstant());
+            log.info(
+                    "Scheduled input {}/{} ({}) is due",
+                    policy.id(),
+                    input.sourceId(),
+                    policy.name());
+            policyRunner.runInput(policy, input, SweepKind.FULL);
         }
     }
 
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/WebhookTrigger.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/WebhookTrigger.java
index 816f510bba..d5bb412a7c 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/WebhookTrigger.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/trigger/WebhookTrigger.java
@@ -13,7 +13,9 @@ import lombok.extern.slf4j.Slf4j;
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.policy.engine.PolicyRunner;
 import stirling.software.proprietary.policy.engine.SweepKind;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.source.Source;
 import stirling.software.proprietary.policy.source.SourceStore;
 import stirling.software.proprietary.policy.store.PolicyStore;
@@ -50,15 +52,14 @@ public class WebhookTrigger implements PolicyTrigger {
     }
 
     @Override
-    public void validate(Policy policy) {
-        boolean hasWebhookSource =
-                policy.sourceIds().stream()
-                        .map(sourceStore::get)
-                        .flatMap(java.util.Optional::stream)
-                        .anyMatch(source -> WEBHOOK_SOURCE_TYPE.equals(source.type()));
-        if (!hasWebhookSource) {
-            throw new IllegalArgumentException(
-                    "webhook trigger requires at least one webhook input source");
+    public void validate(Policy policy, PipelineInput input) {
+        boolean isWebhookSource =
+                sourceStore
+                        .get(input.sourceId())
+                        .filter(source -> WEBHOOK_SOURCE_TYPE.equals(source.type()))
+                        .isPresent();
+        if (!isWebhookSource) {
+            throw new IllegalArgumentException("webhook trigger requires a webhook input source");
         }
     }
 
@@ -83,29 +84,38 @@ public class WebhookTrigger implements PolicyTrigger {
         }
     }
 
+    /** Fire every webhook input fed by this webhook, pulling only that input's source. */
     public void fireForWebhook(String webhookId) {
-        for (Policy policy : policyStore.findByTriggerType(TYPE)) {
-            if (!referencesWebhook(policy, webhookId)) {
+        for (PolicyBinding binding : policyStore.findBindingsByTriggerType(TYPE)) {
+            if (!referencesWebhook(binding.input(), webhookId)) {
                 continue;
             }
             try {
-                log.debug("Webhook policy {} ({}) saw a delivery", policy.id(), policy.name());
-                policyRunner.run(policy, SweepKind.LIGHT);
+                log.debug(
+                        "Webhook input {}/{} saw a delivery",
+                        binding.policy().id(),
+                        binding.input().sourceId());
+                policyRunner.runInput(binding.policy(), binding.input(), SweepKind.LIGHT);
             } catch (RuntimeException e) {
-                log.warn("Webhook run failed for policy {}: {}", policy.id(), e.getMessage());
+                log.warn(
+                        "Webhook run failed for input {}/{}: {}",
+                        binding.policy().id(),
+                        binding.input().sourceId(),
+                        e.getMessage());
             }
         }
     }
 
     private void safeReconcile() {
         try {
-            for (Policy policy : policyStore.findByTriggerType(TYPE)) {
+            for (PolicyBinding binding : policyStore.findBindingsByTriggerType(TYPE)) {
                 try {
-                    policyRunner.run(policy);
+                    policyRunner.runInput(binding.policy(), binding.input(), SweepKind.FULL);
                 } catch (RuntimeException e) {
                     log.warn(
-                            "Webhook reconcile run failed for policy {}: {}",
-                            policy.id(),
+                            "Webhook reconcile run failed for input {}/{}: {}",
+                            binding.policy().id(),
+                            binding.input().sourceId(),
                             e.getMessage());
                 }
             }
@@ -114,17 +124,13 @@ public class WebhookTrigger implements PolicyTrigger {
         }
     }
 
-    private boolean referencesWebhook(Policy policy, String webhookId) {
-        for (String sourceId : policy.sourceIds()) {
-            Source source = sourceStore.get(sourceId).orElse(null);
-            if (source == null || !WEBHOOK_SOURCE_TYPE.equals(source.type())) {
-                continue;
-            }
-            Object configured = source.options().get(WebhookConfig.WEBHOOK_ID_OPTION);
-            if (configured != null && configured.toString().equals(webhookId)) {
-                return true;
-            }
+    /** Whether this input draws from the webhook source the delivery arrived on. */
+    private boolean referencesWebhook(PipelineInput input, String webhookId) {
+        Source source = sourceStore.get(input.sourceId()).orElse(null);
+        if (source == null || !WEBHOOK_SOURCE_TYPE.equals(source.type())) {
+            return false;
         }
-        return false;
+        Object configured = source.options().get(WebhookConfig.WEBHOOK_ID_OPTION);
+        return configured != null && configured.toString().equals(webhookId);
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/FolderAccessGuardTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/FolderAccessGuardTest.java
index 351dcd1d2f..431d74d8b8 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/FolderAccessGuardTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/FolderAccessGuardTest.java
@@ -17,6 +17,7 @@ import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.source.InProcessSourceStore;
 import stirling.software.proprietary.policy.source.Source;
@@ -189,6 +190,13 @@ class FolderAccessGuardTest {
                                                                 null))
                                                 .id())
                         .toList();
-        return new Policy("p1", "p", "owner", true, null, sourceIds, List.of(), output);
+        return new Policy(
+                "p1",
+                "p",
+                "owner",
+                true,
+                sourceIds.stream().map(PipelineInput::manual).toList(),
+                List.of(),
+                output);
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/PolicyAccessGuardTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/PolicyAccessGuardTest.java
index 35c4d2631e..c3f6552dc5 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/PolicyAccessGuardTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/PolicyAccessGuardTest.java
@@ -90,6 +90,6 @@ class PolicyAccessGuardTest {
 
     private static Policy inTeam(Long teamId) {
         return new Policy(
-                null, "p", "owner", true, null, List.of(), List.of(), OutputSpec.inline(), teamId);
+                null, "p", "owner", true, List.of(), List.of(), OutputSpec.inline(), teamId);
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
index 351eecd581..c29c96a8ed 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
@@ -139,7 +139,7 @@ class PolicyControllerTest {
     }
 
     private static Policy policy(String id, Long teamId) {
-        return new Policy(id, "name", "owner", true, null, List.of(), List.of(), null, teamId);
+        return new Policy(id, "name", "owner", true, List.of(), List.of(), null, teamId);
     }
 
     private static Policy s3OutputPolicy(String id, String secret) {
@@ -150,7 +150,7 @@ class PolicyControllerTest {
                                 "bucket", "outbox",
                                 "accessKeyId", "AKIAEXAMPLE",
                                 "secretAccessKey", secret));
-        return new Policy(id, "name", "owner", true, null, List.of(), List.of(), output, 1L);
+        return new Policy(id, "name", "owner", true, List.of(), List.of(), output, 1L);
     }
 
     private static PolicyRunHandle handle(String runId) {
@@ -401,8 +401,7 @@ class PolicyControllerTest {
         void updatePreservesOwnership() {
             applicationProperties.getSecurity().setEnableLogin(false);
             Policy existing =
-                    new Policy(
-                            "p2", "name", "origOwner", true, null, List.of(), List.of(), null, 3L);
+                    new Policy("p2", "name", "origOwner", true, List.of(), List.of(), null, 3L);
             when(policyStore.get("p2")).thenReturn(Optional.of(existing));
             when(policyAccessGuard.canAccess(existing)).thenReturn(true);
             when(policyStore.save(any())).thenAnswer(i -> i.getArgument(0));
@@ -410,8 +409,7 @@ class PolicyControllerTest {
             ResponseEntity<Policy> response =
                     controller.savePolicy(
                             new Policy(
-                                    "p2", "name", "forged", true, null, List.of(), List.of(), null,
-                                    77L));
+                                    "p2", "name", "forged", true, List.of(), List.of(), null, 77L));
 
             assertThat(response.getBody().owner()).isEqualTo("origOwner");
             assertThat(response.getBody().teamId()).isEqualTo(3L);
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java
index e69f0f5476..560c80d7cd 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java
@@ -262,7 +262,7 @@ class PolicyEngineTest {
                         "rotate",
                         "owner",
                         true,
-                        null,
+                        List.of(),
                         List.of(new PipelineStep(ROTATE, Map.of())),
                         OutputSpec.inline());
 
@@ -306,7 +306,7 @@ class PolicyEngineTest {
                         "rotate",
                         "alice",
                         true,
-                        null,
+                        List.of(),
                         List.of(new PipelineStep(ROTATE, Map.of())),
                         OutputSpec.inline());
 
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java
index e21f371305..51959a2525 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java
@@ -36,6 +36,7 @@ import stirling.software.proprietary.policy.ledger.InProcessProcessedLedger;
 import stirling.software.proprietary.policy.ledger.ProcessedLedger;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.PolicyInputs;
@@ -306,7 +307,6 @@ class PolicyRunnerTest {
                         "p",
                         "owner",
                         true,
-                        null,
                         List.of(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline(),
@@ -338,8 +338,7 @@ class PolicyRunnerTest {
                 "p",
                 "owner",
                 true,
-                null,
-                sourceIds,
+                sourceIds.stream().map(PipelineInput::manual).toList(),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.inline());
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java
index 2e9613a024..6440cefa4a 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java
@@ -20,6 +20,7 @@ import org.mockito.junit.jupiter.MockitoExtension;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 import stirling.software.proprietary.policy.output.PolicyOutputSink;
@@ -60,25 +61,27 @@ class PolicyValidatorTest {
 
         validator.validate(policy);
 
-        verify(trigger).validate(policy);
+        verify(trigger).validate(policy, policy.inputs().get(0));
         verify(inputSource).validate(InputSpec.folder("/in"));
         verify(outputSink).validate(policy.output());
     }
 
     @Test
-    void skipsTriggerValidationForAManualOnlyPolicy() {
+    void skipsTriggerValidationForAManualOnlyInput() {
         when(inputSource.supports(any())).thenReturn(true);
         when(outputSink.supports(any())).thenReturn(true);
 
         validator.validate(manualOnly());
 
-        verify(trigger, never()).validate(any());
+        verify(trigger, never()).validate(any(), any());
     }
 
     @Test
     void surfacesAnInvalidConfigFromAHandler() {
         when(trigger.type()).thenReturn("schedule");
-        doThrow(new IllegalArgumentException("invalid schedule")).when(trigger).validate(any());
+        doThrow(new IllegalArgumentException("invalid schedule"))
+                .when(trigger)
+                .validate(any(), any());
 
         IllegalArgumentException ex =
                 assertThrows(
@@ -120,14 +123,55 @@ class PolicyValidatorTest {
         assertTrue(ex.getMessage().contains("unknown trigger type"));
     }
 
+    // The one-input/one-output caps are a product decision, not a model limit: the lists stay so
+    // multiple can be supported later, but saving more than one of either is rejected today.
+
+    @Test
+    void rejectsMoreThanOneInput() {
+        Policy twoInputs =
+                new Policy(
+                        "p1",
+                        "p",
+                        "owner",
+                        true,
+                        List.of(
+                                PipelineInput.manual(folderSourceId()),
+                                PipelineInput.manual(folderSourceId())),
+                        List.of(),
+                        OutputSpec.inline());
+
+        IllegalArgumentException ex =
+                assertThrows(IllegalArgumentException.class, () -> validator.validate(twoInputs));
+        assertTrue(ex.getMessage().contains("at most one input"));
+    }
+
+    @Test
+    void rejectsMoreThanOneOutput() {
+        Policy twoOutputs = manualOnly().withOutputIds(List.of("out-a", "out-b"));
+
+        IllegalArgumentException ex =
+                assertThrows(IllegalArgumentException.class, () -> validator.validate(twoOutputs));
+        assertTrue(ex.getMessage().contains("at most one output"));
+    }
+
+    @Test
+    void allowsZeroInputsAndZeroOutputs() {
+        when(outputSink.supports(any())).thenReturn(true);
+        Policy bare =
+                new Policy("p1", "p", "owner", true, List.of(), List.of(), OutputSpec.inline());
+
+        validator.validate(bare);
+    }
+
     private Policy policy(String triggerType) {
         return new Policy(
                 "p1",
                 "p",
                 "owner",
                 true,
-                new TriggerConfig(triggerType, Map.of()),
-                List.of(folderSourceId()),
+                List.of(
+                        new PipelineInput(
+                                folderSourceId(), new TriggerConfig(triggerType, Map.of()))),
                 List.of(),
                 OutputSpec.inline());
     }
@@ -138,8 +182,7 @@ class PolicyValidatorTest {
                 "p",
                 "owner",
                 true,
-                null,
-                List.of(folderSourceId()),
+                List.of(PipelineInput.manual(folderSourceId())),
                 List.of(),
                 OutputSpec.inline());
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyInlineOutputMigrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyInlineOutputMigrationTest.java
index 082ca8cd42..8cd91c56e9 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyInlineOutputMigrationTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyInlineOutputMigrationTest.java
@@ -54,7 +54,6 @@ class PolicyInlineOutputMigrationTest {
                                 "Editor run",
                                 "owner",
                                 true,
-                                null,
                                 List.of(),
                                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                                 OutputSpec.inline()));
@@ -128,7 +127,6 @@ class PolicyInlineOutputMigrationTest {
                 name,
                 "owner",
                 true,
-                null,
                 List.of(),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.folder(directory));
@@ -140,7 +138,6 @@ class PolicyInlineOutputMigrationTest {
                 name,
                 "owner",
                 true,
-                null,
                 List.of(),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.folder(directory),
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyOutputResolverTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyOutputResolverTest.java
index d65c5b24f2..acaa68dae1 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyOutputResolverTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/output/PolicyOutputResolverTest.java
@@ -65,7 +65,6 @@ class PolicyOutputResolverTest {
                 "Pipeline",
                 "owner",
                 true,
-                null,
                 List.of(),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.inline());
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java
index 221cbc4482..8610926c2a 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java
@@ -16,6 +16,7 @@ import stirling.software.common.service.UserServiceInterface;
 import stirling.software.proprietary.policy.config.PolicyAccessGuard;
 import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.TriggerConfig;
@@ -57,8 +58,9 @@ class PolicyOverviewServiceTest {
                         "Redaction",
                         "owner",
                         true,
-                        new TriggerConfig("schedule", Map.of()),
-                        List.of(claims.id()),
+                        List.of(
+                                new PipelineInput(
+                                        claims.id(), new TriggerConfig("schedule", Map.of()))),
                         List.of(new PipelineStep("/api/v1/security/auto-redact", Map.of())),
                         OutputSpec.inline()));
         policyStore.save(
@@ -67,7 +69,6 @@ class PolicyOverviewServiceTest {
                         "Archive (paused)",
                         "owner",
                         false,
-                        null,
                         List.of(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline()));
@@ -102,8 +103,7 @@ class PolicyOverviewServiceTest {
                         "Orphan",
                         "owner",
                         true,
-                        null,
-                        List.of("src-missing"),
+                        List.of(PipelineInput.manual("src-missing")),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline()));
 
@@ -170,8 +170,7 @@ class PolicyOverviewServiceTest {
                         name,
                         "owner",
                         true,
-                        null,
-                        List.of(sourceIds),
+                        List.of(sourceIds).stream().map(PipelineInput::manual).toList(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline(),
                         teamId));
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/EmbeddedS3CredentialMigrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/EmbeddedS3CredentialMigrationTest.java
index a794ee104e..41f80461cd 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/EmbeddedS3CredentialMigrationTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/EmbeddedS3CredentialMigrationTest.java
@@ -25,6 +25,7 @@ import stirling.software.proprietary.integration.repository.IntegrationConfigRep
 import stirling.software.proprietary.model.Team;
 import stirling.software.proprietary.policy.migration.InProcessCompletedMigrations;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.source.InProcessSourceStore;
@@ -97,8 +98,7 @@ class EmbeddedS3CredentialMigrationTest {
                                 "Rotate",
                                 "alice",
                                 true,
-                                null,
-                                List.of(source.id()),
+                                List.of(PipelineInput.manual(source.id())),
                                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                                 new OutputSpec(
                                         "s3",
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/PolicyS3ConnectionUsageCheckTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/PolicyS3ConnectionUsageCheckTest.java
index 847a553ba6..4af725428d 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/PolicyS3ConnectionUsageCheckTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/s3/PolicyS3ConnectionUsageCheckTest.java
@@ -39,7 +39,6 @@ class PolicyS3ConnectionUsageCheckTest {
                         "Rotate",
                         "alice",
                         true,
-                        null,
                         List.of(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         new OutputSpec("s3", Map.of("connectionId", "5")),
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java
index 2f270afddb..49159e7d6e 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java
@@ -41,7 +41,6 @@ class DefaultClassificationPolicySeederTest {
                 "Classification Policy",
                 "system",
                 true,
-                null,
                 List.of(),
                 List.of(),
                 new OutputSpec("inline", Map.of("categoryId", "classification")),
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceControllerTest.java
index 545ea8e50f..20f783f75c 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceControllerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceControllerTest.java
@@ -30,6 +30,7 @@ import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.input.WebhookInputSource;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.store.InProcessPolicyStore;
@@ -274,8 +275,7 @@ class SourceControllerTest {
                 name,
                 "owner",
                 true,
-                null,
-                List.of(sourceId),
+                List.of(PipelineInput.manual(sourceId)),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.inline());
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceOverviewServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceOverviewServiceTest.java
index 3f63e18407..a8c295acc8 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceOverviewServiceTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/source/SourceOverviewServiceTest.java
@@ -16,6 +16,7 @@ import stirling.software.common.service.UserServiceInterface;
 import stirling.software.proprietary.policy.config.PolicyAccessGuard;
 import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.store.InProcessPolicyStore;
@@ -216,8 +217,7 @@ class SourceOverviewServiceTest {
                         name,
                         "owner",
                         true,
-                        null,
-                        List.of(sourceIds),
+                        List.of(sourceIds).stream().map(PipelineInput::manual).toList(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline()));
     }
@@ -232,7 +232,6 @@ class SourceOverviewServiceTest {
                         name,
                         "owner",
                         true,
-                        null,
                         List.of(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         new OutputSpec("inline", Map.of("sources", List.of("editor")))));
@@ -245,8 +244,7 @@ class SourceOverviewServiceTest {
                         name,
                         "owner",
                         true,
-                        null,
-                        List.of(sourceIds),
+                        List.of(sourceIds).stream().map(PipelineInput::manual).toList(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline(),
                         teamId));
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/InProcessPolicyStoreTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/InProcessPolicyStoreTest.java
index 60f14be20d..f74a4cfb5b 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/InProcessPolicyStoreTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/InProcessPolicyStoreTest.java
@@ -12,11 +12,13 @@ import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
 
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 
-/** Tests for {@link InProcessPolicyStore}: id assignment, upsert, trigger-type lookup, delete. */
+/** Tests for {@link InProcessPolicyStore}: id assignment, upsert, binding lookup, delete. */
 class InProcessPolicyStoreTest {
 
     private PolicyStore store;
@@ -45,7 +47,7 @@ class InProcessPolicyStoreTest {
                         "after",
                         "owner",
                         true,
-                        null,
+                        List.of(),
                         List.of(),
                         OutputSpec.inline()));
 
@@ -54,16 +56,16 @@ class InProcessPolicyStoreTest {
     }
 
     @Test
-    void findByTriggerTypeReturnsOnlyEnabledMatches() {
+    void findBindingsByTriggerTypeReturnsOnlyEnabledMatches() {
         store.save(policy(null, "nightly", "schedule", true));
         store.save(policy(null, "nightly-disabled", "schedule", false));
         store.save(policy(null, "hooked", "webhook", true));
         store.save(policy(null, "on-demand", null, true)); // manual-only: no trigger
 
-        List<Policy> scheduled = store.findByTriggerType("schedule");
+        List<PolicyBinding> scheduled = store.findBindingsByTriggerType("schedule");
 
         assertEquals(1, scheduled.size());
-        assertEquals("nightly", scheduled.get(0).name());
+        assertEquals("nightly", scheduled.get(0).policy().name());
     }
 
     @Test
@@ -76,14 +78,16 @@ class InProcessPolicyStoreTest {
     }
 
     private static Policy policy(String id, String name, String triggerType, boolean enabled) {
-        TriggerConfig trigger =
-                triggerType == null ? null : new TriggerConfig(triggerType, Map.of());
+        PipelineInput input =
+                triggerType == null
+                        ? PipelineInput.manual("src")
+                        : new PipelineInput("src", new TriggerConfig(triggerType, Map.of()));
         return new Policy(
                 id,
                 name,
                 "owner",
                 enabled,
-                trigger,
+                List.of(input),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.inline());
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/JpaPolicyStoreTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/JpaPolicyStoreTest.java
index e9667f2e8d..2a1d2b4f11 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/JpaPolicyStoreTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/store/JpaPolicyStoreTest.java
@@ -19,8 +19,10 @@ import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 
 import tools.jackson.databind.ObjectMapper;
@@ -53,8 +55,9 @@ class JpaPolicyStoreTest {
                                 "compress incoming",
                                 "alice",
                                 true,
-                                new TriggerConfig("schedule", Map.of()),
-                                List.of("src-in"),
+                                List.of(
+                                        new PipelineInput(
+                                                "src-in", new TriggerConfig("schedule", Map.of()))),
                                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                                 OutputSpec.inline()));
 
@@ -63,7 +66,6 @@ class JpaPolicyStoreTest {
         verify(repository).save(captor.capture());
         PolicyEntity entity = captor.getValue();
         assertEquals(saved.id(), entity.getId());
-        assertEquals("schedule", entity.getTriggerType());
         assertTrue(entity.isEnabled());
         // The stored JSON round-trips back to an equal policy.
         assertEquals(saved, objectMapper.readValue(entity.getPolicyJson(), Policy.class));
@@ -77,7 +79,7 @@ class JpaPolicyStoreTest {
                         "rotate",
                         "alice",
                         true,
-                        null, // manual-only: no automatic trigger
+                        List.of(), // no inputs: run on demand only
                         List.of(
                                 new PipelineStep(
                                         "/api/v1/general/rotate-pdf", Map.of("angle", 90))),
@@ -87,6 +89,30 @@ class JpaPolicyStoreTest {
         assertEquals(policy, store.get("p1").orElseThrow());
     }
 
+    @Test
+    void getUpgradesLegacyTriggerAndSourceIdsToPerInputTriggers() {
+        // A blob written before triggers moved onto inputs: one policy-level trigger + sourceIds.
+        String legacyJson =
+                "{\"id\":\"p1\",\"name\":\"legacy\",\"owner\":\"alice\",\"enabled\":true,"
+                        + "\"trigger\":{\"type\":\"schedule\",\"options\":{}},"
+                        + "\"sourceIds\":[\"s1\",\"s2\"],\"steps\":[],"
+                        + "\"output\":{\"type\":\"inline\",\"options\":{}}}";
+        PolicyEntity entity = new PolicyEntity();
+        entity.setId("p1");
+        entity.setName("legacy");
+        entity.setEnabled(true);
+        entity.setPolicyJson(legacyJson);
+        when(repository.findById("p1")).thenReturn(Optional.of(entity));
+
+        Policy upgraded = store.get("p1").orElseThrow();
+
+        assertEquals(
+                List.of(
+                        new PipelineInput("s1", new TriggerConfig("schedule", Map.of())),
+                        new PipelineInput("s2", new TriggerConfig("schedule", Map.of()))),
+                upgraded.inputs());
+    }
+
     @Test
     void saveDenormalizesTeamIdForScopedQueries() {
         store.save(
@@ -95,7 +121,6 @@ class JpaPolicyStoreTest {
                         "scoped",
                         "alice",
                         true,
-                        null,
                         List.of(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline(),
@@ -114,7 +139,6 @@ class JpaPolicyStoreTest {
                         "ours",
                         "alice",
                         true,
-                        null,
                         List.of(),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline(),
@@ -128,23 +152,28 @@ class JpaPolicyStoreTest {
     }
 
     @Test
-    void findByTriggerTypeUsesTheEnabledQuery() {
+    void findBindingsByTriggerTypeScansEnabledPoliciesForMatchingInputs() {
         Policy policy =
                 new Policy(
                         "p1",
                         "watch",
                         "alice",
                         true,
-                        new TriggerConfig("schedule", Map.of()),
+                        List.of(
+                                new PipelineInput(
+                                        "src-in", new TriggerConfig("schedule", Map.of())),
+                                PipelineInput.manual("src-manual")),
                         List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                         OutputSpec.inline());
-        when(repository.findByTriggerTypeAndEnabledTrue("schedule"))
-                .thenReturn(List.of(entityFor(policy)));
+        when(repository.findByEnabledTrue()).thenReturn(List.of(entityFor(policy)));
 
-        List<Policy> scheduled = store.findByTriggerType("schedule");
+        List<PolicyBinding> scheduled = store.findBindingsByTriggerType("schedule");
 
+        // Only the scheduled input yields a binding; the manual input on the same policy does not.
         assertEquals(1, scheduled.size());
-        assertEquals("p1", scheduled.get(0).id());
+        assertEquals("p1", scheduled.get(0).policy().id());
+        assertEquals("src-in", scheduled.get(0).input().sourceId());
+        assertEquals("schedule", scheduled.get(0).input().trigger().type());
     }
 
     @Test
@@ -163,7 +192,6 @@ class JpaPolicyStoreTest {
         entity.setName(policy.name());
         entity.setOwner(policy.owner());
         entity.setEnabled(policy.enabled());
-        entity.setTriggerType(policy.trigger() == null ? null : policy.trigger().type());
         entity.setTeamId(policy.teamId());
         entity.setPolicyJson(objectMapper.writeValueAsString(policy));
         return entity;
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/FolderWatchTriggerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/FolderWatchTriggerTest.java
index 2c3adf691e..c955e9ed8d 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/FolderWatchTriggerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/FolderWatchTriggerTest.java
@@ -14,6 +14,7 @@ import java.nio.file.FileSystems;
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.nio.file.WatchService;
+import java.util.Arrays;
 import java.util.List;
 import java.util.Map;
 import java.util.Set;
@@ -31,8 +32,10 @@ import stirling.software.proprietary.policy.engine.SweepKind;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 import stirling.software.proprietary.policy.source.InProcessSourceStore;
 import stirling.software.proprietary.policy.source.Source;
@@ -41,10 +44,10 @@ import stirling.software.proprietary.policy.store.PolicyStore;
 
 /**
  * Tests for {@link FolderWatchTrigger}'s dispatch logic via the package-visible {@code
- * runForChangedDirs}/{@code runAll}, plus its cross-facet validation. The OS watch loop and
- * scheduled reconcile are thin glue around these and are not exercised here (a real {@code
- * WatchService} is timing-dependent), mirroring how {@link ScheduleTriggerTest} drives {@code
- * sweep} directly. The folder source is stubbed to mirror {@code FolderInputSource.watchTargets}.
+ * runForChangedDirs}/{@code runAll}, plus its per-input validation. The OS watch loop and scheduled
+ * reconcile are thin glue around these and are not exercised here (a real {@code WatchService} is
+ * timing-dependent), mirroring how {@link ScheduleTriggerTest} drives {@code sweep} directly. The
+ * folder source is stubbed to mirror {@code FolderInputSource.watchTargets}.
  */
 @ExtendWith(MockitoExtension.class)
 class FolderWatchTriggerTest {
@@ -83,39 +86,43 @@ class FolderWatchTriggerTest {
     }
 
     @Test
-    void validateRejectsPolicyWithNoWatchableSource() {
+    void validateRejectsInputWithNoWatchableSource() {
+        PolicyBinding binding =
+                bindings(folderWatch("p1", List.of(new InputSpec("folder", Map.of())))).get(0);
         assertThrows(
                 IllegalArgumentException.class,
-                () -> trigger.validate(folderWatch("p1", List.of())));
+                () -> trigger.validate(binding.policy(), binding.input()));
     }
 
     @Test
-    void validateAcceptsPolicyWithAFolderSource() {
-        trigger.validate(folderWatch("p1", List.of(InputSpec.folder("/in"))));
+    void validateAcceptsAFolderSource() {
+        PolicyBinding binding =
+                bindings(folderWatch("p1", List.of(InputSpec.folder("/in")))).get(0);
+        trigger.validate(binding.policy(), binding.input());
     }
 
     @Test
-    void runsOnlyPoliciesDrawingFromTheChangedDirectory() {
+    void runsOnlyInputsDrawingFromTheChangedDirectory() {
         Policy a = folderWatch("a", List.of(InputSpec.folder("/in/a")));
         Policy b = folderWatch("b", List.of(InputSpec.folder("/in/b")));
-        when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of(a, b));
+        when(policyStore.findBindingsByTriggerType("folder-watch")).thenReturn(bindings(a, b));
 
         trigger.runForChangedDirs(Set.of(normalized("/in/a")));
 
-        verify(policyRunner).run(a, SweepKind.LIGHT);
-        verify(policyRunner, never()).run(eq(b), any());
+        verify(policyRunner).runInput(a, a.inputs().get(0), SweepKind.LIGHT);
+        verify(policyRunner, never()).runInput(eq(b), any(), any());
     }
 
     @Test
-    void skipsAMisconfiguredPolicyButStillRunsTheOthers() {
+    void skipsAMisconfiguredInputButStillRunsTheOthers() {
         Policy bad = folderWatch("bad", List.of(new InputSpec("folder", Map.of())));
         Policy good = folderWatch("good", List.of(InputSpec.folder("/in/a")));
-        when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of(bad, good));
+        when(policyStore.findBindingsByTriggerType("folder-watch")).thenReturn(bindings(bad, good));
 
         trigger.runForChangedDirs(Set.of(normalized("/in/a")));
 
-        verify(policyRunner).run(good, SweepKind.LIGHT);
-        verify(policyRunner, never()).run(eq(bad), any());
+        verify(policyRunner).runInput(good, good.inputs().get(0), SweepKind.LIGHT);
+        verify(policyRunner, never()).runInput(eq(bad), any(), any());
     }
 
     @Test
@@ -126,15 +133,15 @@ class FolderWatchTriggerTest {
     }
 
     @Test
-    void reconcileRunsEveryFolderWatchPolicyAsASafetyNet() {
+    void reconcileRunsEveryFolderWatchInputAsASafetyNet() {
         Policy a = folderWatch("a", List.of(InputSpec.folder("/in/a")));
         Policy b = folderWatch("b", List.of(InputSpec.folder("/in/b")));
-        when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of(a, b));
+        when(policyStore.findBindingsByTriggerType("folder-watch")).thenReturn(bindings(a, b));
 
         trigger.runAll();
 
-        verify(policyRunner).run(a);
-        verify(policyRunner).run(b);
+        verify(policyRunner).runInput(a, a.inputs().get(0), SweepKind.FULL);
+        verify(policyRunner).runInput(b, b.inputs().get(0), SweepKind.FULL);
     }
 
     @Test
@@ -151,15 +158,16 @@ class FolderWatchTriggerTest {
         try {
             trigger.watchService = service;
 
-            when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of(a, b, m));
+            when(policyStore.findBindingsByTriggerType("folder-watch"))
+                    .thenReturn(bindings(a, b, m));
             trigger.syncRegistrations();
             // Existing dirs are watched; the non-existent one is skipped.
             assertEquals(
                     Set.of(normalized(dirA.toString()), normalized(dirB.toString())),
                     trigger.watchedDirs());
 
-            // b's policy is removed: its registration is cancelled, a remains.
-            when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of(a));
+            // b's input is removed: its registration is cancelled, a remains.
+            when(policyStore.findBindingsByTriggerType("folder-watch")).thenReturn(bindings(a));
             trigger.syncRegistrations();
             assertEquals(Set.of(normalized(dirA.toString())), trigger.watchedDirs());
         } finally {
@@ -175,15 +183,15 @@ class FolderWatchTriggerTest {
         WatchService service = FileSystems.getDefault().newWatchService();
         try {
             trigger.watchService = service;
-            when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of(p));
+            when(policyStore.findBindingsByTriggerType("folder-watch")).thenReturn(bindings(p));
 
-            // The mutation hook registers the new policy's directory without waiting for a
+            // The mutation hook registers the new input's directory without waiting for a
             // reconcile.
             trigger.onPoliciesChanged();
             assertEquals(Set.of(normalized(dir.toString())), trigger.watchedDirs());
 
-            // Once the policy is gone, the same hook cancels its registration.
-            when(policyStore.findByTriggerType("folder-watch")).thenReturn(List.of());
+            // Once the input is gone, the same hook cancels its registration.
+            when(policyStore.findBindingsByTriggerType("folder-watch")).thenReturn(List.of());
             trigger.onPoliciesChanged();
             assertEquals(Set.of(), trigger.watchedDirs());
         } finally {
@@ -195,31 +203,40 @@ class FolderWatchTriggerTest {
         return Path.of(dir).toAbsolutePath().normalize();
     }
 
+    /** Every (policy, input) binding across the given policies, as the store would return them. */
+    private static List<PolicyBinding> bindings(Policy... policies) {
+        return Arrays.stream(policies)
+                .flatMap(
+                        policy -> policy.inputs().stream().map(in -> new PolicyBinding(policy, in)))
+                .toList();
+    }
+
     /** Persists each spec as a source and returns a folder-watch policy referencing them by id. */
     private Policy folderWatch(String id, List<InputSpec> sources) {
-        List<String> sourceIds =
+        List<PipelineInput> inputs =
                 sources.stream()
                         .map(
                                 spec ->
-                                        sourceStore
-                                                .save(
-                                                        new Source(
-                                                                null,
-                                                                "src",
-                                                                spec.type(),
-                                                                spec.options(),
-                                                                true,
-                                                                "owner",
-                                                                null))
-                                                .id())
+                                        new PipelineInput(
+                                                sourceStore
+                                                        .save(
+                                                                new Source(
+                                                                        null,
+                                                                        "src",
+                                                                        spec.type(),
+                                                                        spec.options(),
+                                                                        true,
+                                                                        "owner",
+                                                                        null))
+                                                        .id(),
+                                                new TriggerConfig("folder-watch", Map.of())))
                         .toList();
         return new Policy(
                 id,
                 "watcher",
                 "owner",
                 true,
-                new TriggerConfig("folder-watch", Map.of()),
-                sourceIds,
+                inputs,
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.inline());
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/ScheduleTriggerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/ScheduleTriggerTest.java
index 3f81392285..b7b7dccc9a 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/ScheduleTriggerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/ScheduleTriggerTest.java
@@ -25,8 +25,10 @@ import org.mockito.junit.jupiter.MockitoExtension;
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.policy.engine.PolicyRunner;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.model.Schedule;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 import stirling.software.proprietary.policy.store.PolicyStore;
@@ -35,9 +37,9 @@ import tools.jackson.databind.json.JsonMapper;
 
 /**
  * Tests for {@link ScheduleTrigger}'s due-firing logic via the package-visible {@code
- * sweep(Instant)}. The trigger only decides when a policy is due; pulling sources and starting runs
- * is the {@link PolicyRunner}'s job, so these assert it delegates to the runner. Schedules default
- * to UTC, so explicit UTC instants make these deterministic.
+ * sweep(Instant)}. The trigger only decides when an input is due; pulling the source and starting
+ * runs is the {@link PolicyRunner}'s job, so these assert it delegates to the runner per binding.
+ * Schedules default to UTC, so explicit UTC instants make these deterministic.
  */
 @ExtendWith(MockitoExtension.class)
 class ScheduleTriggerTest {
@@ -59,102 +61,105 @@ class ScheduleTriggerTest {
 
     @Test
     void firesOncePerScheduleWhenItComesDue() {
-        Policy policy = scheduled("p1", new Schedule.Every(1, Schedule.Unit.MINUTES));
-        when(policyStore.findByTriggerType("schedule")).thenReturn(List.of(policy));
+        PolicyBinding binding = scheduled("p1", new Schedule.Every(1, Schedule.Unit.MINUTES));
+        when(policyStore.findBindingsByTriggerType("schedule")).thenReturn(List.of(binding));
 
         Instant t0 = Instant.parse("2026-06-05T10:00:30Z");
         trigger.sweep(t0); // first sight: baseline, must not fire immediately
-        verify(policyRunner, never()).run(any());
+        verify(policyRunner, never()).runInput(any(), any(), any());
 
         trigger.sweep(t0.plusSeconds(120)); // the one-minute mark has passed
-        verify(policyRunner, times(1)).run(eq(policy));
+        verify(policyRunner, times(1)).runInput(eq(binding.policy()), eq(binding.input()), any());
     }
 
     @Test
     void anIntervalMatchingTheSweepPeriodFiresEverySweepDespiteJitter() {
-        Policy policy = scheduled("p1", new Schedule.Every(1, Schedule.Unit.MINUTES));
-        when(policyStore.findByTriggerType("schedule")).thenReturn(List.of(policy));
+        PolicyBinding binding = scheduled("p1", new Schedule.Every(1, Schedule.Unit.MINUTES));
+        when(policyStore.findBindingsByTriggerType("schedule")).thenReturn(List.of(binding));
 
         Instant t0 = Instant.parse("2026-06-05T10:00:00Z");
         trigger.sweep(t0); // baseline
         // The sweep that fires runs a few ms late (scheduler jitter)...
         trigger.sweep(t0.plusSeconds(60).plusMillis(5));
-        verify(policyRunner, times(1)).run(eq(policy));
+        verify(policyRunner, times(1)).runInput(eq(binding.policy()), eq(binding.input()), any());
 
         // ...and the next sweep lands exactly on the 60s grid. Anchoring lastFired to the due
         // time (not the jittered observation) means this must still fire, not alias to skip.
         trigger.sweep(t0.plusSeconds(120));
-        verify(policyRunner, times(2)).run(eq(policy));
+        verify(policyRunner, times(2)).runInput(eq(binding.policy()), eq(binding.input()), any());
     }
 
     @Test
     void aGapFiresOnceNotOncePerMissedInterval() {
-        Policy policy = scheduled("p1", new Schedule.Every(1, Schedule.Unit.MINUTES));
-        when(policyStore.findByTriggerType("schedule")).thenReturn(List.of(policy));
+        PolicyBinding binding = scheduled("p1", new Schedule.Every(1, Schedule.Unit.MINUTES));
+        when(policyStore.findBindingsByTriggerType("schedule")).thenReturn(List.of(binding));
 
         Instant t0 = Instant.parse("2026-06-05T10:00:00Z");
         trigger.sweep(t0); // baseline
         // Ten minutes of downtime: nine missed due points collapse into one firing.
         trigger.sweep(t0.plusSeconds(600));
-        verify(policyRunner, times(1)).run(eq(policy));
+        verify(policyRunner, times(1)).runInput(eq(binding.policy()), eq(binding.input()), any());
 
         // Not due again until a full interval after the latest due point.
         trigger.sweep(t0.plusSeconds(630));
-        verify(policyRunner, times(1)).run(eq(policy));
+        verify(policyRunner, times(1)).runInput(eq(binding.policy()), eq(binding.input()), any());
         trigger.sweep(t0.plusSeconds(660));
-        verify(policyRunner, times(2)).run(eq(policy));
+        verify(policyRunner, times(2)).runInput(eq(binding.policy()), eq(binding.input()), any());
     }
 
     @Test
     void doesNotFireBeforeTheNextScheduledTime() {
-        Policy policy = scheduled("p1", new Schedule.Daily(LocalTime.of(3, 0))); // 03:00 UTC daily
-        when(policyStore.findByTriggerType("schedule")).thenReturn(List.of(policy));
+        PolicyBinding binding =
+                scheduled("p1", new Schedule.Daily(LocalTime.of(3, 0))); // 03:00 UTC daily
+        when(policyStore.findBindingsByTriggerType("schedule")).thenReturn(List.of(binding));
 
         Instant t0 = Instant.parse("2026-06-05T10:00:00Z");
         trigger.sweep(t0);
         trigger.sweep(t0.plusSeconds(60)); // next 03:00 is far away
 
-        verify(policyRunner, never()).run(any());
+        verify(policyRunner, never()).runInput(any(), any(), any());
     }
 
     @Test
     void firesWeeklyOnAChosenDay() {
         // 2026-06-05 is a Friday; the next Monday 09:00 is the soonest firing.
-        Policy policy =
+        PolicyBinding binding =
                 scheduled("p1", new Schedule.Weekly(Set.of(DayOfWeek.MONDAY), LocalTime.of(9, 0)));
-        when(policyStore.findByTriggerType("schedule")).thenReturn(List.of(policy));
+        when(policyStore.findBindingsByTriggerType("schedule")).thenReturn(List.of(binding));
 
         Instant friday = Instant.parse("2026-06-05T10:00:00Z");
         trigger.sweep(friday); // baseline
         trigger.sweep(Instant.parse("2026-06-08T09:00:00Z")); // Monday 09:00
 
-        verify(policyRunner, times(1)).run(eq(policy));
+        verify(policyRunner, times(1)).runInput(eq(binding.policy()), eq(binding.input()), any());
     }
 
     @Test
-    void skipsPoliciesWithAnInvalidSchedule() {
-        Policy policy = scheduledWithRawOptions("p1", Map.of()); // no schedule
-        when(policyStore.findByTriggerType("schedule")).thenReturn(List.of(policy));
+    void skipsInputsWithAnInvalidSchedule() {
+        PolicyBinding binding = scheduledWithRawOptions("p1", Map.of()); // no schedule
+        when(policyStore.findBindingsByTriggerType("schedule")).thenReturn(List.of(binding));
 
         trigger.sweep(Instant.parse("2026-06-05T10:00:00Z"));
 
-        verify(policyRunner, never()).run(any());
+        verify(policyRunner, never()).runInput(any(), any(), any());
     }
 
     @Test
     void validateRejectsMissingSchedule() {
+        PolicyBinding binding = scheduledWithRawOptions("p1", Map.of());
         assertThrows(
                 IllegalArgumentException.class,
-                () -> trigger.validate(scheduledWithRawOptions("p1", Map.of())));
+                () -> trigger.validate(binding.policy(), binding.input()));
     }
 
     @Test
     void validateRejectsAnInvalidSchedule() {
         Map<String, Object> options =
                 Map.of("schedule", Map.of("type", "every", "count", -5, "unit", "MINUTES"));
+        PolicyBinding binding = scheduledWithRawOptions("p1", options);
         assertThrows(
                 IllegalArgumentException.class,
-                () -> trigger.validate(scheduledWithRawOptions("p1", options)));
+                () -> trigger.validate(binding.policy(), binding.input()));
     }
 
     @Test
@@ -162,21 +167,25 @@ class ScheduleTriggerTest {
         Map<String, Object> options = new LinkedHashMap<>();
         options.put("schedule", new Schedule.Daily(LocalTime.of(2, 0)));
         options.put("zone", "Europe/London");
-        trigger.validate(scheduledWithRawOptions("p1", options));
+        PolicyBinding binding = scheduledWithRawOptions("p1", options);
+        trigger.validate(binding.policy(), binding.input());
     }
 
-    private static Policy scheduled(String id, Schedule schedule) {
+    private static PolicyBinding scheduled(String id, Schedule schedule) {
         return scheduledWithRawOptions(id, Map.of("schedule", schedule));
     }
 
-    private static Policy scheduledWithRawOptions(String id, Map<String, Object> options) {
-        return new Policy(
-                id,
-                "nightly",
-                "owner",
-                true,
-                new TriggerConfig("schedule", options),
-                List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
-                OutputSpec.inline());
+    private static PolicyBinding scheduledWithRawOptions(String id, Map<String, Object> options) {
+        PipelineInput input = new PipelineInput("s1", new TriggerConfig("schedule", options));
+        Policy policy =
+                new Policy(
+                        id,
+                        "nightly",
+                        "owner",
+                        true,
+                        List.of(input),
+                        List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
+                        OutputSpec.inline());
+        return new PolicyBinding(policy, input);
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/WebhookTriggerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/WebhookTriggerTest.java
index 63b721dd6d..a5b06bde01 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/WebhookTriggerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/trigger/WebhookTriggerTest.java
@@ -2,10 +2,12 @@ package stirling.software.proprietary.policy.trigger;
 
 import static org.junit.jupiter.api.Assertions.assertThrows;
 import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
 import static org.mockito.Mockito.never;
 import static org.mockito.Mockito.verify;
 import static org.mockito.Mockito.when;
 
+import java.util.Arrays;
 import java.util.List;
 import java.util.Map;
 
@@ -19,8 +21,10 @@ import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.policy.engine.PolicyRunner;
 import stirling.software.proprietary.policy.engine.SweepKind;
 import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineInput;
 import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyBinding;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 import stirling.software.proprietary.policy.source.InProcessSourceStore;
 import stirling.software.proprietary.policy.source.Source;
@@ -46,37 +50,45 @@ class WebhookTriggerTest {
     }
 
     @Test
-    void firesOnlyPoliciesReferencingTheDeliveredWebhook() {
+    void firesOnlyInputsReferencingTheDeliveredWebhook() {
         Policy matching = webhookPolicy("a", "whkA");
         Policy other = webhookPolicy("b", "whkB");
-        when(policyStore.findByTriggerType(TYPE)).thenReturn(List.of(matching, other));
+        when(policyStore.findBindingsByTriggerType(TYPE)).thenReturn(bindings(matching, other));
 
         trigger.fireForWebhook("whkA");
 
-        verify(policyRunner).run(matching, SweepKind.LIGHT);
-        verify(policyRunner, never()).run(other, SweepKind.LIGHT);
+        verify(policyRunner).runInput(matching, matching.inputs().get(0), SweepKind.LIGHT);
+        verify(policyRunner, never()).runInput(eq(other), any(), any());
     }
 
     @Test
     void ignoresADeliveryForAnUnknownWebhookId() {
         Policy policy = webhookPolicy("a", "whkA");
-        when(policyStore.findByTriggerType(TYPE)).thenReturn(List.of(policy));
+        when(policyStore.findBindingsByTriggerType(TYPE)).thenReturn(bindings(policy));
 
         trigger.fireForWebhook("whkZ");
 
-        verify(policyRunner, never()).run(any(), any(SweepKind.class));
+        verify(policyRunner, never()).runInput(any(), any(), any());
     }
 
     @Test
     void validateRequiresAWebhookSource() {
+        // A non-webhook source (here: an id that resolves to nothing) is rejected.
+        Policy notWebhook = policy("p", PipelineInput.manual("missing-source"));
         assertThrows(
                 IllegalArgumentException.class,
-                () -> trigger.validate(policy("p", webhookTriggerConfig(), List.of())));
-        trigger.validate(webhookPolicy("p", "whkA"));
+                () -> trigger.validate(notWebhook, notWebhook.inputs().get(0)));
+
+        Policy hooked = webhookPolicy("p", "whkA");
+        trigger.validate(hooked, hooked.inputs().get(0));
     }
 
-    private static TriggerConfig webhookTriggerConfig() {
-        return new TriggerConfig(TYPE, Map.of());
+    /** Every (policy, input) binding across the given policies, as the store would return them. */
+    private static List<PolicyBinding> bindings(Policy... policies) {
+        return Arrays.stream(policies)
+                .flatMap(
+                        policy -> policy.inputs().stream().map(in -> new PolicyBinding(policy, in)))
+                .toList();
     }
 
     private Policy webhookPolicy(String id, String webhookId) {
@@ -98,17 +110,16 @@ class WebhookTriggerTest {
                                         "owner",
                                         null))
                         .id();
-        return policy(id, webhookTriggerConfig(), List.of(sourceId));
+        return policy(id, new PipelineInput(sourceId, new TriggerConfig(TYPE, Map.of())));
     }
 
-    private static Policy policy(String id, TriggerConfig trigger, List<String> sourceIds) {
+    private static Policy policy(String id, PipelineInput input) {
         return new Policy(
                 id,
                 "hook",
                 "owner",
                 true,
-                trigger,
-                sourceIds,
+                List.of(input),
                 List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
                 OutputSpec.inline());
     }
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index abbe1446ff..d02e60b84c 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -7745,11 +7745,17 @@ newPipeline = "New pipeline"
 addStep = "Add tool"
 back = "Back to pipelines"
 chooseAccount = "Choose an account"
+chooseDestination = "Choose a destination"
 chooseOperation = "Choose what this step does"
+chooseSource = "Choose a source"
 discard = "Discard changes"
 enabled = "Enabled"
+inputs = "Input"
+inputSource = "Input source"
+inputTrigger = "Trigger"
 keepEditing = "Keep editing"
 needsUpload = "Needs an uploaded file"
+noSources = "No sources connected yet. Create one to use it as an input."
 noToolMatches = "No tools match your search."
 pipelineSettings = "Pipeline settings"
 searchTools = "Search tools"
@@ -7777,7 +7783,7 @@ namePlaceholder = "e.g. Redaction sweep"
 noToolSettings = "This tool has no configurable settings."
 operations_one = "Operation ({{count}})"
 operations_other = "Operations ({{count}})"
-output = "Destinations"
+output = "Destination"
 removeStep = "Remove operation"
 save = "Save changes"
 scheduleEvery = "Run every"
diff --git a/frontend/editor/src/portal/api/pipelines.ts b/frontend/editor/src/portal/api/pipelines.ts
index 2a4f25b79e..d6088d06ff 100644
--- a/frontend/editor/src/portal/api/pipelines.ts
+++ b/frontend/editor/src/portal/api/pipelines.ts
@@ -17,12 +17,22 @@ export interface PipelineStep {
   fileParameters?: Record<string, string>;
 }
 
-/** When a policy fires automatically. `type` keys a trigger bean (e.g. "schedule"). */
+/** When a policy input fires automatically. `type` keys a trigger bean (e.g. "schedule"). */
 export interface TriggerConfig {
   type: string;
   options: Record<string, unknown>;
 }
 
+/**
+ * One input of a pipeline: a persisted source paired with the trigger that decides when that
+ * source is pulled. A `null` trigger means the input is pulled only on a manual run. Mirrors the
+ * backend `PipelineInput`.
+ */
+export interface PipelineInput {
+  sourceId: string;
+  trigger: TriggerConfig | null;
+}
+
 /** Where a run's outputs are delivered. `type` keys an output sink (e.g. "inline"). */
 export interface OutputSpec {
   type: string;
@@ -35,15 +45,15 @@ export type PipelineOutputMode = "folder" | "s3";
 /**
  * The stored policy record: the create/update body (`id` blank on create) and what
  * the backend returns from GET/POST. Mirrors Policy.java exactly; `owner`/`teamId`
- * are stamped server-side. A `null` trigger means manual-only.
+ * are stamped server-side. Each input pairs a source with its own trigger; an input
+ * with a `null` trigger (or a policy with no triggered inputs) runs only on demand.
  */
 export interface Policy {
   id?: string;
   name: string;
   owner?: string | null;
   enabled: boolean;
-  trigger: TriggerConfig | null;
-  sourceIds: string[];
+  inputs: PipelineInput[];
   steps: PipelineStep[];
   /**
    * Inline output, used only when no destinations are referenced (editor/one-off runs that return
diff --git a/frontend/editor/src/portal/components/pipelines/DestinationPicker.tsx b/frontend/editor/src/portal/components/pipelines/DestinationPicker.tsx
index 683c6301b4..de1187c3da 100644
--- a/frontend/editor/src/portal/components/pipelines/DestinationPicker.tsx
+++ b/frontend/editor/src/portal/components/pipelines/DestinationPicker.tsx
@@ -1,14 +1,15 @@
 import { useTranslation } from "react-i18next";
 import AddRoundedIcon from "@mui/icons-material/AddRounded";
-import { Button, Checkbox } from "@app/ui";
+import { Button, Select } from "@app/ui";
 
 /**
- * Picks the saved sources a pipeline delivers its output to. A destination is just
- * a source used as a write target, and a pipeline may write to several, so this is
- * a checklist over the same locations the builder loaded (filtered to writable
- * types by the caller) - mirroring the input-sources checklist. Creating a new one
- * is delegated to {@code onCreateNew} (the builder navigates to the source builder,
- * prompting about unsaved edits first).
+ * Picks the saved source a pipeline delivers its output to. A destination is just a
+ * source used as a write target. The value stays a list ({@code outputIds}) because
+ * the model supports several, but the product caps a pipeline at one destination
+ * today, so this renders a single dropdown over the same locations the builder
+ * loaded (filtered to writable types by the caller). Creating a new one is delegated
+ * to {@code onCreateNew} (the builder navigates to the source builder, prompting
+ * about unsaved edits first).
  */
 interface DestinationOption {
   id: string;
@@ -31,23 +32,21 @@ export function DestinationPicker({
 }: DestinationPickerProps) {
   const { t } = useTranslation();
 
-  function toggle(id: string, checked: boolean) {
-    onChange(
-      checked ? [...value, id] : value.filter((existing) => existing !== id),
-    );
-  }
-
   return (
-    <>
-      <div className="portal-pipelines__source-list">
-        {sources.map((source) => (
-          <Checkbox
-            key={source.id}
-            checked={value.includes(source.id)}
-            onChange={(e) => toggle(source.id, e.target.checked)}
-            label={source.name}
-          />
-        ))}
+    <div className="portal-builder__input-row">
+      <div className="portal-builder__input-field">
+        <Select
+          inputSize="sm"
+          aria-label={t("portal.pipelines.composer.output")}
+          placeholder={t("portal.pipelines.builder.chooseDestination")}
+          value={value[0] ?? null}
+          invalid={value.length !== 1}
+          onChange={(id) => onChange(id ? [id] : [])}
+          options={sources.map((source) => ({
+            value: source.id,
+            label: source.name,
+          }))}
+        />
       </div>
       <Button
         variant="tertiary"
@@ -57,6 +56,6 @@ export function DestinationPicker({
       >
         {t("portal.sources.actions.connectSource")}
       </Button>
-    </>
+    </div>
   );
 }
diff --git a/frontend/editor/src/portal/mocks/handlers/pipelines.ts b/frontend/editor/src/portal/mocks/handlers/pipelines.ts
index fdfa22e4b5..f4c085ade7 100644
--- a/frontend/editor/src/portal/mocks/handlers/pipelines.ts
+++ b/frontend/editor/src/portal/mocks/handlers/pipelines.ts
@@ -40,11 +40,15 @@ function seedPipelines(): StoredPolicy[] {
       name: "Redaction sweep",
       owner: "security@acme.com",
       enabled: true,
-      trigger: {
-        type: "schedule",
-        options: { schedule: { type: "every", count: 6, unit: "HOURS" } },
-      },
-      sourceIds: ["src-claims"],
+      inputs: [
+        {
+          sourceId: "src-claims",
+          trigger: {
+            type: "schedule",
+            options: { schedule: { type: "every", count: 6, unit: "HOURS" } },
+          },
+        },
+      ],
       steps: [
         {
           operation: "/api/v1/security/auto-redact",
@@ -53,15 +57,14 @@ function seedPipelines(): StoredPolicy[] {
         { operation: "/api/v1/security/sanitize-pdf", parameters: {} },
       ],
       output: { type: "inline", options: {} },
-      outputIds: ["src-archive", "src-contracts"],
+      outputIds: ["src-archive"],
     },
     {
       id: "plc-archive",
       name: "Archive compressor",
       owner: "data-eng@acme.com",
       enabled: true,
-      trigger: null,
-      sourceIds: ["src-contracts", "src-archive"],
+      inputs: [{ sourceId: "src-contracts", trigger: null }],
       steps: [{ operation: "/api/v1/misc/compress-pdf", parameters: {} }],
       output: { type: "inline", options: {} },
       outputIds: ["src-contracts"],
@@ -71,8 +74,7 @@ function seedPipelines(): StoredPolicy[] {
       name: "Onboarding OCR (paused)",
       owner: "ops@acme.com",
       enabled: false,
-      trigger: null,
-      sourceIds: [],
+      inputs: [],
       steps: [
         { operation: "/api/v1/misc/ocr-pdf", parameters: {} },
         { operation: "/api/v1/misc/flatten", parameters: {} },
@@ -95,16 +97,28 @@ function deriveStatus(policy: StoredPolicy): PipelineStatus {
   return policy.enabled ? "active" : "paused";
 }
 
+// Distinct trigger types across a policy's inputs, or "manual" when none is triggered.
+function triggerSummary(policy: StoredPolicy): string {
+  const types = [
+    ...new Set(
+      policy.inputs
+        .map((input) => input.trigger?.type)
+        .filter((type): type is string => type != null),
+    ),
+  ];
+  return types.length === 0 ? "manual" : types.join(", ");
+}
+
 function toView(policy: StoredPolicy): PipelineView {
   return {
     id: policy.id,
     name: policy.name,
     enabled: policy.enabled,
     status: deriveStatus(policy),
-    trigger: policy.trigger?.type ?? "manual",
-    sources: policy.sourceIds.map((id) => ({
-      id,
-      name: SOURCE_NAMES[id] ?? id,
+    trigger: triggerSummary(policy),
+    sources: policy.inputs.map((input) => ({
+      id: input.sourceId,
+      name: SOURCE_NAMES[input.sourceId] ?? input.sourceId,
     })),
     steps: policy.steps.map((s) => s.operation),
     output:
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.css b/frontend/editor/src/portal/views/PipelineBuilder.css
index f96228d042..50a86f7313 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.css
+++ b/frontend/editor/src/portal/views/PipelineBuilder.css
@@ -242,6 +242,29 @@
   gap: 0.5rem;
 }
 
+/* Input and destination each span the full settings width so their row has room. */
+.portal-builder__inputs-col {
+  grid-column: 1 / -1;
+}
+
+/* The input row (source + trigger + optional schedule) and the destination row. */
+.portal-builder__input-row {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+.portal-builder__input-field {
+  flex: 1 1 11rem;
+  min-width: 10rem;
+}
+
+/* The connect-source button trails to the end of the row. */
+.portal-builder__input-row > button:last-child {
+  margin-left: auto;
+}
+
 /* Inspector: heading sits outside the card so it aligns with the operations heading. */
 .portal-builder__inspector-col {
   position: sticky;
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.test.tsx b/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
index 9d3f60f54e..7587953e12 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
@@ -126,8 +126,7 @@ const POLICY: Policy = {
   id: "plc-1",
   name: "Existing pipeline",
   enabled: true,
-  trigger: null,
-  sourceIds: [],
+  inputs: [],
   steps: [],
   output: { type: "inline", options: {} },
   outputIds: [],
@@ -195,21 +194,53 @@ describe("PipelineBuilder", () => {
     createIntegration.mockReset();
   });
 
-  it("builds a new pipeline: name it, add a tool, and save", async () => {
+  // Choose the given source in the (pre-seeded) input row's dropdown.
+  async function pickInputSource(sourceName: string) {
+    fireEvent.click(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.builder.inputSource",
+      }),
+    );
+    fireEvent.click(await screen.findByText(sourceName));
+  }
+
+  it("always shows exactly one input row, with no add or remove controls", async () => {
     renderBuilder("/processor/pipelines/new");
 
-    // The name field is the only textbox before the picker opens.
-    fireEvent.change(await screen.findByRole("textbox"), {
-      target: { value: "Nightly compress" },
-    });
+    // The input row is a fixed part of the form: its source dropdown is present from the
+    // start, and there is nothing to add or remove.
+    expect(
+      await screen.findAllByRole("textbox", {
+        name: "portal.pipelines.builder.inputSource",
+      }),
+    ).toHaveLength(1);
+    expect(
+      screen.queryByText("portal.pipelines.builder.addInput"),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.queryByRole("button", {
+        name: "portal.pipelines.builder.removeInput",
+      }),
+    ).not.toBeInTheDocument();
+  });
+
+  it("builds a new pipeline: name it, add a tool, an input, a destination, and save", async () => {
+    renderBuilder("/processor/pipelines/new");
+
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      {
+        target: { value: "Nightly compress" },
+      },
+    );
 
     fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
     fireEvent.click(await screen.findByText("Compress"));
 
     // A pipeline must have at least one input source and one output destination.
-    fireEvent.click(
-      await screen.findByRole("checkbox", { name: "Claims intake" }),
-    );
+    await pickInputSource("Claims intake");
     fireEvent.click(screen.getByText("pick output"));
 
     fireEvent.click(screen.getByText("portal.pipelines.composer.create"));
@@ -218,8 +249,8 @@ describe("PipelineBuilder", () => {
     expect(savePipeline).toHaveBeenCalledWith(
       expect.objectContaining({
         name: "Nightly compress",
-        trigger: null,
-        sourceIds: ["src-in"],
+        // The input pairs the chosen source with its trigger (manual by default).
+        inputs: [{ sourceId: "src-in", trigger: null }],
         outputIds: ["src-1"],
         steps: [
           expect.objectContaining({ operation: "/api/v1/misc/compress-pdf" }),
@@ -232,19 +263,22 @@ describe("PipelineBuilder", () => {
   it("requires at least one source and one destination before saving", async () => {
     renderBuilder("/processor/pipelines/new");
 
-    fireEvent.change(await screen.findByRole("textbox"), {
-      target: { value: "Needs both" },
-    });
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      {
+        target: { value: "Needs both" },
+      },
+    );
     const saveButton = () =>
       screen.getByText("portal.pipelines.composer.create").closest("button");
 
     // Name only: blocked (no source, no destination).
     expect(saveButton()).toBeDisabled();
 
-    // A source but still no destination: blocked.
-    fireEvent.click(
-      await screen.findByRole("checkbox", { name: "Claims intake" }),
-    );
+    // An input with a source but still no destination: blocked.
+    await pickInputSource("Claims intake");
     expect(saveButton()).toBeDisabled();
 
     // Both chosen: allowed, and both are sent.
@@ -252,7 +286,10 @@ describe("PipelineBuilder", () => {
     fireEvent.click(screen.getByText("portal.pipelines.composer.create"));
     await waitFor(() => expect(savePipeline).toHaveBeenCalledTimes(1));
     expect(savePipeline).toHaveBeenCalledWith(
-      expect.objectContaining({ sourceIds: ["src-in"], outputIds: ["src-1"] }),
+      expect.objectContaining({
+        inputs: [{ sourceId: "src-in", trigger: null }],
+        outputIds: ["src-1"],
+      }),
     );
   });
 
@@ -309,9 +346,14 @@ describe("PipelineBuilder", () => {
   it("blocks saving a step that needs an uploaded file", async () => {
     renderBuilder("/processor/pipelines/new");
 
-    fireEvent.change(await screen.findByRole("textbox"), {
-      target: { value: "Watermarked" },
-    });
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      {
+        target: { value: "Watermarked" },
+      },
+    );
     fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
     fireEvent.click(await screen.findByText("Compress"));
     // The tool's settings upload a file, which a stored pipeline can't persist yet.
@@ -330,9 +372,14 @@ describe("PipelineBuilder", () => {
     // rejection; the builder must refuse to save it and say why, where the fix is one click away.
     renderBuilder("/processor/pipelines/new");
 
-    fireEvent.change(await screen.findByRole("textbox"), {
-      target: { value: "Notify only" },
-    });
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      {
+        target: { value: "Notify only" },
+      },
+    );
     fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
     fireEvent.click(
       await screen.findByText("portal.policies.operations.discordNotify.label"),
@@ -360,9 +407,14 @@ describe("PipelineBuilder", () => {
   it("prompts to save or discard when leaving with unsaved edits", async () => {
     renderBuilder("/processor/pipelines/new");
 
-    fireEvent.change(await screen.findByRole("textbox"), {
-      target: { value: "Draft" },
-    });
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      {
+        target: { value: "Draft" },
+      },
+    );
     fireEvent.click(screen.getByText("portal.pipelines.composer.cancel"));
 
     expect(
@@ -385,9 +437,14 @@ describe("PipelineBuilder", () => {
     ]);
     renderBuilder("/processor/pipelines/new");
 
-    fireEvent.change(await screen.findByRole("textbox"), {
-      target: { value: "Notify on processed" },
-    });
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      {
+        target: { value: "Notify on processed" },
+      },
+    );
 
     fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
     fireEvent.click(
@@ -401,10 +458,8 @@ describe("PipelineBuilder", () => {
     );
     fireEvent.click(await screen.findByText("Ops alerts"));
 
-    // Saving needs at least one input source and one destination.
-    fireEvent.click(
-      await screen.findByRole("checkbox", { name: "Claims intake" }),
-    );
+    // Saving needs the input's source and a destination.
+    await pickInputSource("Claims intake");
     fireEvent.click(screen.getByText("pick output"));
 
     fireEvent.click(screen.getByText("portal.pipelines.composer.create"));
@@ -424,7 +479,9 @@ describe("PipelineBuilder", () => {
   it("leaves immediately when there are no unsaved edits", async () => {
     renderBuilder("/processor/pipelines/new");
 
-    await screen.findByRole("textbox");
+    await screen.findByRole("textbox", {
+      name: "portal.pipelines.composer.name",
+    });
     fireEvent.click(screen.getByText("portal.pipelines.composer.cancel"));
 
     expect(await screen.findByText("pipelines list")).toBeInTheDocument();
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.tsx b/frontend/editor/src/portal/views/PipelineBuilder.tsx
index 0955049605..c7a873fe41 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.tsx
@@ -16,7 +16,6 @@ import {
   EmptyState,
   Input,
   Modal,
-  RadioGroup,
   Select,
   Spinner,
 } from "@app/ui";
@@ -72,6 +71,12 @@ type ScheduleUnit = "MINUTES" | "HOURS" | "DAYS";
 const SCHEDULE_UNITS: ScheduleUnit[] = ["MINUTES", "HOURS", "DAYS"];
 /** Empty trigger type = manual-only (no automatic trigger). */
 const MANUAL = "";
+/**
+ * Sentinel value for the manual choice in the trigger dropdown. Mantine's Select treats an empty
+ * string as "no selection" (it shows the placeholder, not the option), so the manual option needs a
+ * real value; it maps to/from the empty {@link MANUAL} trigger type at the edges.
+ */
+const MANUAL_OPTION = "manual";
 
 const TERMINAL_STATUSES = new Set(["COMPLETED", "FAILED", "CANCELLED"]);
 const POLL_INTERVAL_MS = 1500;
@@ -105,6 +110,42 @@ function parseTrigger(trigger: TriggerConfig | null): {
   return { triggerType: trigger.type, count: "1", unit: "HOURS" };
 }
 
+/** One input row in the builder: a source paired with its own trigger config. */
+interface WorkingInput {
+  sourceId: string;
+  triggerType: string;
+  scheduleCount: string;
+  scheduleUnit: ScheduleUnit;
+}
+
+/** The input row with nothing chosen yet: no source, manual trigger. */
+function blankInput(): WorkingInput {
+  return {
+    sourceId: "",
+    triggerType: MANUAL,
+    scheduleCount: "1",
+    scheduleUnit: "HOURS",
+  };
+}
+
+/** The trigger config for the input row, or null for a manual (on-demand) input. */
+function buildTriggerFor(input: WorkingInput): TriggerConfig | null {
+  if (input.triggerType === MANUAL) return null;
+  if (input.triggerType === "schedule") {
+    return {
+      type: "schedule",
+      options: {
+        schedule: {
+          type: "every",
+          count: Number(input.scheduleCount),
+          unit: input.scheduleUnit,
+        },
+      },
+    };
+  }
+  return { type: input.triggerType, options: {} };
+}
+
 /**
  * Full-page pipeline builder (route: /pipelines/new and /pipelines/:id). Pipeline-level settings
  * (sources, trigger, output) sit above the operation list; the operation list and the selected
@@ -166,13 +207,12 @@ export function PipelineBuilder() {
 
   const [name, setName] = useState("");
   const [enabled, setEnabled] = useState(true);
-  const [sourceIds, setSourceIds] = useState<string[]>([]);
+  // Exactly one input: the row is always present, so the working state is a single object; the
+  // wire shape stays a list (see save()).
+  const [input, setInput] = useState<WorkingInput>(blankInput);
   const [steps, setSteps] = useState<WorkingToolStep[]>([]);
   const [selectedIndex, setSelectedIndex] = useState<number | null>(null);
   const [pickerOpen, setPickerOpen] = useState(false);
-  const [triggerType, setTriggerType] = useState<string>(MANUAL);
-  const [scheduleCount, setScheduleCount] = useState("1");
-  const [scheduleUnit, setScheduleUnit] = useState<ScheduleUnit>("HOURS");
   const [outputIds, setOutputIds] = useState<string[]>([]);
   const [submitting, setSubmitting] = useState(false);
   const [error, setError] = useState<string | null>(null);
@@ -197,16 +237,26 @@ export function PipelineBuilder() {
     if (seeded) return;
     if (isEdit && !policyState.data) return;
     const policy = policyState.data ?? undefined;
-    const trigger = parseTrigger(policy?.trigger ?? null);
     setName(policy?.name ?? "");
     setEnabled(policy?.enabled ?? true);
-    setSourceIds(policy?.sourceIds ?? []);
+    // The one input row is always present: blank for a new pipeline (or a legacy policy saved
+    // without inputs), the stored input for an edit. A legacy multi-input policy shows only its
+    // first input; saving persists just that one (the backend rejects more anyway).
+    const stored = policy?.inputs[0];
+    if (stored) {
+      const trigger = parseTrigger(stored.trigger);
+      setInput({
+        sourceId: stored.sourceId,
+        triggerType: trigger.triggerType,
+        scheduleCount: trigger.count,
+        scheduleUnit: trigger.unit,
+      });
+    } else {
+      setInput(blankInput());
+    }
     setSteps(
       (policy?.steps ?? []).map((step) => deserializeToolStep(step, allTools)),
     );
-    setTriggerType(trigger.triggerType);
-    setScheduleCount(trigger.count);
-    setScheduleUnit(trigger.unit);
     setOutputIds(policy?.outputIds ?? []);
     setSeeded(true);
   }, [isEdit, policyState.data, allTools, seeded]);
@@ -219,37 +269,62 @@ export function PipelineBuilder() {
     }
   }, [seeded, selectedIndex, steps.length]);
 
-  const selectedSourceTypes = useMemo(
-    () =>
-      new Set(
-        availableSources
-          .filter((s) => sourceIds.includes(s.id))
-          .map((s) => s.type),
-      ),
-    [availableSources, sourceIds],
-  );
+  const sourceType = (sourceId: string) =>
+    availableSources.find((s) => s.id === sourceId)?.type;
 
-  const triggerAvailable = useMemo(
-    () => (trigger: TriggerInfo) =>
-      !trigger.requiresSource ||
-      trigger.supportedSourceTypes.some((type) =>
-        selectedSourceTypes.has(type),
-      ),
-    [selectedSourceTypes],
-  );
+  // A trigger fits a source when it needs no source, or the source's type is one it supports
+  // (folder-watch → folder; schedule → any). Drives the per-input trigger dropdown.
+  const triggerFitsType = (trigger: TriggerInfo, type: string) =>
+    !trigger.requiresSource || trigger.supportedSourceTypes.includes(type);
 
-  useEffect(() => {
-    if (triggerType === MANUAL) return;
-    const selected = triggers.find((trigger) => trigger.type === triggerType);
-    if (selected && !triggerAvailable(selected)) setTriggerType(MANUAL);
-  }, [triggerType, triggers, triggerAvailable]);
+  const sourceOptions = availableSources.map((source) => ({
+    value: source.id,
+    label: source.name,
+  }));
 
-  function toggleSource(sourceId: string, checked: boolean) {
-    setSourceIds((ids) =>
-      checked
-        ? [...ids, sourceId]
-        : ids.filter((existing) => existing !== sourceId),
-    );
+  // Manual plus every trigger compatible with this row's source. Manual only until a source is set.
+  function triggerOptionsFor(sourceId: string) {
+    const options = [
+      {
+        value: MANUAL_OPTION,
+        label: t("portal.pipelines.composer.triggerManual"),
+      },
+    ];
+    const type = sourceType(sourceId);
+    if (type) {
+      for (const trigger of triggers) {
+        if (triggerFitsType(trigger, type)) {
+          options.push({
+            value: trigger.type,
+            label: t(`portal.pipelines.trigger.${trigger.type}`, {
+              defaultValue: trigger.type,
+            }),
+          });
+        }
+      }
+    }
+    return options;
+  }
+
+  function updateInput(patch: Partial<WorkingInput>) {
+    setInput((current) => ({ ...current, ...patch }));
+  }
+
+  // Changing the source may make the current trigger incompatible (folder-watch on a non-folder);
+  // drop it back to manual when that happens so the row can't hold an invalid pairing.
+  function changeInputSource(sourceId: string) {
+    setInput((current) => {
+      const type = sourceType(sourceId);
+      const trigger = triggers.find((tr) => tr.type === current.triggerType);
+      const keepTrigger =
+        current.triggerType === MANUAL ||
+        (type != null && trigger != null && triggerFitsType(trigger, type));
+      return {
+        ...current,
+        sourceId,
+        triggerType: keepTrigger ? current.triggerType : MANUAL,
+      };
+    });
   }
 
   function addOperationStep(op: (typeof STEP_OPERATIONS)[number]) {
@@ -326,12 +401,9 @@ export function PipelineBuilder() {
   const snapshot = JSON.stringify({
     name: name.trim(),
     enabled,
-    sourceIds: [...sourceIds].sort(),
+    input,
     steps: steps.map((step) => serializeToolStep(step, allTools)),
     uploads: steps.map(stepRequiresUpload),
-    triggerType,
-    scheduleCount,
-    scheduleUnit,
     outputIds: [...outputIds].sort(),
   });
   const baseline = useRef<string | null>(null);
@@ -340,48 +412,20 @@ export function PipelineBuilder() {
   }, [seeded, snapshot]);
   const dirty = baseline.current !== null && baseline.current !== snapshot;
 
-  const scheduleCountValid =
-    triggerType !== "schedule" || Number(scheduleCount) > 0;
-  // A pipeline must have at least one input source and at least one output destination.
-  const sourceValid = sourceIds.length > 0;
-  const outputValid = outputIds.length > 0;
+  // The input needs a source, and a scheduled input needs a positive interval; the pipeline
+  // needs exactly one output destination.
+  const inputValid =
+    input.sourceId !== "" &&
+    (input.triggerType !== "schedule" || Number(input.scheduleCount) > 0);
+  const outputValid = outputIds.length === 1;
   const canSave =
     name.trim() !== "" &&
-    sourceValid &&
-    scheduleCountValid &&
+    inputValid &&
     outputValid &&
     !hasUploadSteps &&
     !hasUnconfiguredSteps &&
     !submitting;
 
-  const triggerOptions = [
-    { value: MANUAL, label: t("portal.pipelines.composer.triggerManual") },
-    ...triggers.map((trigger) => ({
-      value: trigger.type,
-      label: t(`portal.pipelines.trigger.${trigger.type}`, {
-        defaultValue: trigger.type,
-      }),
-      disabled: !triggerAvailable(trigger),
-    })),
-  ];
-
-  function buildTrigger(): TriggerConfig | null {
-    if (triggerType === MANUAL) return null;
-    if (triggerType === "schedule") {
-      return {
-        type: "schedule",
-        options: {
-          schedule: {
-            type: "every",
-            count: Number(scheduleCount),
-            unit: scheduleUnit,
-          },
-        },
-      };
-    }
-    return { type: triggerType, options: {} };
-  }
-
   const listPath = toPortalPath(VIEW_PATHS.pipelines);
   const sourcesPath = `${toPortalPath(VIEW_PATHS.sources)}/new`;
 
@@ -409,8 +453,8 @@ export function PipelineBuilder() {
       id: policyState.data?.id ?? undefined,
       name: name.trim(),
       enabled,
-      trigger: buildTrigger(),
-      sourceIds,
+      // The wire shape stays a list; canSave guarantees the one input has a source.
+      inputs: [{ sourceId: input.sourceId, trigger: buildTriggerFor(input) }],
       steps: steps.map((step) => serializeToolStep(step, allTools)),
       // Destinations are the referenced saved sources; the inline output field is
       // preserved as-is (e.g. an editor policy's membership metadata) or defaults to inline.
@@ -664,78 +708,102 @@ export function PipelineBuilder() {
           {t("portal.pipelines.builder.pipelineSettings")}
         </div>
         <div className="portal-builder__settings-grid">
-          <div className="portal-builder__settings-col">
+          <div className="portal-builder__settings-col portal-builder__inputs-col">
             <span className="portal-pipelines__detail-heading">
-              {t("portal.pipelines.composer.sources")}
+              {t("portal.pipelines.builder.inputs")}
             </span>
             {sourcesState.loading ? (
               <p className="portal-pipelines__muted">
                 {t("portal.pipelines.composer.sourcesLoading")}
               </p>
             ) : (
-              <div className="portal-pipelines__source-list">
-                {availableSources.map((source) => (
-                  <Checkbox
-                    key={source.id}
-                    checked={sourceIds.includes(source.id)}
-                    onChange={(e) => toggleSource(source.id, e.target.checked)}
-                    label={source.name}
-                  />
-                ))}
-              </div>
-            )}
-            <Button
-              variant="tertiary"
-              size="sm"
-              onClick={goToSources}
-              leftSection={<AddRoundedIcon style={{ fontSize: "1.125rem" }} />}
-            >
-              {t("portal.sources.actions.connectSource")}
-            </Button>
-          </div>
-
-          <div className="portal-builder__settings-col">
-            <span className="portal-pipelines__detail-heading">
-              {t("portal.pipelines.composer.trigger")}
-            </span>
-            <RadioGroup<string>
-              name="pipeline-trigger"
-              value={triggerType}
-              onChange={setTriggerType}
-              options={triggerOptions}
-            />
-            {triggerType === "schedule" && (
-              <div className="portal-pipelines__schedule">
-                <span className="portal-pipelines__muted">
-                  {t("portal.pipelines.composer.scheduleEvery")}
-                </span>
-                <Input
-                  inputSize="sm"
-                  type="number"
-                  min={1}
-                  value={scheduleCount}
-                  invalid={!scheduleCountValid}
-                  onChange={(e) => setScheduleCount(e.target.value)}
-                  className="portal-pipelines__schedule-count"
-                />
-                <Select
-                  inputSize="sm"
-                  value={scheduleUnit}
-                  onChange={(value) =>
-                    value && setScheduleUnit(value as ScheduleUnit)
-                  }
-                  options={SCHEDULE_UNITS.map((unit) => ({
-                    value: unit,
-                    label: t(
-                      `portal.pipelines.composer.unit.${unit.toLowerCase()}`,
-                    ),
-                  }))}
-                />
-              </div>
+              <>
+                <div className="portal-builder__input-row">
+                  <div className="portal-builder__input-field">
+                    <Select
+                      inputSize="sm"
+                      aria-label={t("portal.pipelines.builder.inputSource")}
+                      placeholder={t("portal.pipelines.builder.chooseSource")}
+                      value={input.sourceId || null}
+                      invalid={input.sourceId === ""}
+                      onChange={(value) => changeInputSource(value ?? "")}
+                      options={sourceOptions}
+                    />
+                  </div>
+                  <div className="portal-builder__input-field">
+                    <Select
+                      inputSize="sm"
+                      aria-label={t("portal.pipelines.builder.inputTrigger")}
+                      value={
+                        input.triggerType === MANUAL
+                          ? MANUAL_OPTION
+                          : input.triggerType
+                      }
+                      disabled={input.sourceId === ""}
+                      onChange={(value) =>
+                        updateInput({
+                          triggerType:
+                            value && value !== MANUAL_OPTION ? value : MANUAL,
+                        })
+                      }
+                      options={triggerOptionsFor(input.sourceId)}
+                    />
+                  </div>
+                  {input.triggerType === "schedule" && (
+                    <div className="portal-pipelines__schedule">
+                      <span className="portal-pipelines__muted">
+                        {t("portal.pipelines.composer.scheduleEvery")}
+                      </span>
+                      <Input
+                        inputSize="sm"
+                        type="number"
+                        min={1}
+                        value={input.scheduleCount}
+                        invalid={Number(input.scheduleCount) <= 0}
+                        onChange={(e) =>
+                          updateInput({ scheduleCount: e.target.value })
+                        }
+                        className="portal-pipelines__schedule-count"
+                      />
+                      <Select
+                        inputSize="sm"
+                        value={input.scheduleUnit}
+                        onChange={(value) =>
+                          value &&
+                          updateInput({
+                            scheduleUnit: value as ScheduleUnit,
+                          })
+                        }
+                        options={SCHEDULE_UNITS.map((unit) => ({
+                          value: unit,
+                          label: t(
+                            `portal.pipelines.composer.unit.${unit.toLowerCase()}`,
+                          ),
+                        }))}
+                      />
+                    </div>
+                  )}
+                  <Button
+                    variant="tertiary"
+                    size="sm"
+                    onClick={goToSources}
+                    leftSection={
+                      <AddRoundedIcon style={{ fontSize: "1.125rem" }} />
+                    }
+                  >
+                    {t("portal.sources.actions.connectSource")}
+                  </Button>
+                </div>
+                {availableSources.length === 0 && (
+                  <p className="portal-pipelines__muted">
+                    {t("portal.pipelines.builder.noSources")}
+                  </p>
+                )}
+              </>
             )}
           </div>
 
-          <div className="portal-builder__settings-col">
+          <div className="portal-builder__settings-col portal-builder__inputs-col">
             <span className="portal-pipelines__detail-heading">
               {t("portal.pipelines.composer.output")}
             </span>

From 46865cd1543dc3965b5f5ad29b9c653d3ae99740 Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Fri, 31 Jul 2026 12:27:12 +0100
Subject: [PATCH 009/122] Add Auto Rotate tool that detects and fixes page
 orientation (#7152)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## What

New **Auto Rotate** tool: give it any PDF and it detects each page's
correct orientation and sets `/Rotate` so every page displays upright.
Lossless — only the page rotation metadata changes, content is never
re-rendered.

New endpoint: `POST /api/v1/misc/auto-rotate-pdf`, plus an editor tool
registered next to Rotate.

## How it works

Two-tier detection, per page, both expressed as an additive clockwise
`/Rotate` correction:

1. **Embedded-text fast path** (`AutoRotateDetection`): dominant glyph
direction via `PDFTextStripper`/`TextPosition.getDir()`. Trusted only
with >= 30 glyphs at >= 95% agreement. Near-instant for born-digital
PDFs and needs no external tools. Correction = `(glyphDir -
pageRotation) mod 360` — the sign conventions are pinned by
parameterized fixture tests covering all text-angle x `/Rotate`
combinations.
2. **Tesseract OSD fallback**: pages the text path can't decide are
rendered at 300 DPI grayscale and run through `tesseract --psm 0`.
Corrections apply only above a confidence threshold (default 14.0,
matching OCRmyPDF's `--rotate-pages-threshold`). Rendering honours the
existing `/Rotate`, so the verdict is always additive.

**Conservative by default**: blank pages, mixed-direction pages, and
low-confidence verdicts are skipped, never guessed — the failure mode to
avoid is making a correct page wrong.

### API surface

- `detectionMode`: `auto` (default) | `text` | `osd` — forcing one
method is useful for testing
- `confidenceThreshold`: minimum OSD confidence to apply a correction
- `dryRun=true`: returns a JSON per-page report instead of the PDF
- `pageRotations={"1":90,...}`: applies precomputed corrections without
detection

The frontend uses analyze-then-apply (dryRun, then pageRotations) so
detection runs exactly once per file, and the analysis report can be
shown in the UI.

### UI

The tool's results panel shows a **detection report** for
debugging/tuning: per page — method badge (Text / OCR / Skipped),
confidence score (glyph-dominance % for text, raw OSD score for OCR),
applied rotation, and a skip reason (too little text, mixed directions,
below threshold, OCR not installed...). Settings expose detection mode
and the OSD threshold.

### Dependency handling

Registered in `PageOps` only — deliberately **not** gated on the
`tesseract` group, because the text path works without Tesseract. The
controller checks `isGroupEnabled("tesseract")` at runtime; when it's
missing, scanned pages are skipped with a visible `tesseractUnavailable`
note instead of the whole tool disappearing.

## Testing

- 14 detection unit tests: all text-angle x `/Rotate` fixture
combinations (pins the direction conventions), dominance/glyph-count
guards, OSD output parsing
- 6 controller tests: dryRun report, correction application, explicit
pageRotations, tesseract-unavailable reporting, input validation
- Frontend: typecheck (core/desktop/proprietary), ESLint, Prettier, all
i18n audit tests
- **Live, text path**: fixture with pages at `/Rotate` 0/90/180/270 ->
all pages return upright; report UI verified in the browser
- **Live, OSD path**: image-only "scan" fixture (no text layer) with
pages upright/180/90 -> all detected by OSD at conf ~15-17 and
corrected; closed-loop re-analysis of the output reports 0 pages to
rotate with *higher* confidence than the input

Out of scope: skew correction (that's the OCR tool's `--deskew`); this
fixes 90-degree-multiple orientation only.
---
 .../SPDF/config/EndpointConfiguration.java    |   1 +
 .../api/misc/AutoRotateController.java        | 385 ++++++++++++++++++
 .../api/misc/AutoRotateAnalysisResult.java    |  73 ++++
 .../model/api/misc/AutoRotatePdfRequest.java  |  58 +++
 .../SPDF/model/api/misc/PageRotation.java     |  28 ++
 .../SPDF/utils/AutoRotateDetection.java       | 189 +++++++++
 .../api/misc/AutoRotateControllerTest.java    | 342 ++++++++++++++++
 .../SPDF/utils/AutoRotateDetectionTest.java   | 248 +++++++++++
 engine/src/stirling/models/tool_models.py     |  52 +++
 .../public/locales/en-US/translation.toml     |  72 ++++
 frontend/editor/public/og-metadata.json       |   6 +
 frontend/editor/public/og-metadata.saas.json  |   6 +
 .../AutoRotateAutomationSettings.tsx          |  83 ++++
 .../tools/autoRotate/AutoRotateReport.tsx     | 191 +++++++++
 .../tools/autoRotate/AutoRotateSettings.tsx   |  89 ++++
 .../components/tooltips/useAutoRotateTips.ts  |  47 +++
 .../core/data/useTranslatedToolRegistry.tsx   |  26 ++
 .../autoRotate/useAutoRotateOperation.ts      | 175 ++++++++
 .../autoRotate/useAutoRotateParameters.ts     |  31 ++
 .../src/core/services/pdfExportService.ts     |  18 +-
 .../editor/src/core/services/pdfiumService.ts |  18 +
 frontend/editor/src/core/tools/AutoRotate.tsx |  70 ++++
 .../editor/src/core/types/toolApiTypes.ts     |  38 ++
 frontend/editor/src/core/types/toolId.ts      |   1 +
 24 files changed, 2230 insertions(+), 17 deletions(-)
 create mode 100644 app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java
 create mode 100644 app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotateAnalysisResult.java
 create mode 100644 app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotatePdfRequest.java
 create mode 100644 app/core/src/main/java/stirling/software/SPDF/model/api/misc/PageRotation.java
 create mode 100644 app/core/src/main/java/stirling/software/SPDF/utils/AutoRotateDetection.java
 create mode 100644 app/core/src/test/java/stirling/software/SPDF/controller/api/misc/AutoRotateControllerTest.java
 create mode 100644 app/core/src/test/java/stirling/software/SPDF/utils/AutoRotateDetectionTest.java
 create mode 100644 frontend/editor/src/core/components/tools/autoRotate/AutoRotateAutomationSettings.tsx
 create mode 100644 frontend/editor/src/core/components/tools/autoRotate/AutoRotateReport.tsx
 create mode 100644 frontend/editor/src/core/components/tools/autoRotate/AutoRotateSettings.tsx
 create mode 100644 frontend/editor/src/core/components/tooltips/useAutoRotateTips.ts
 create mode 100644 frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
 create mode 100644 frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts
 create mode 100644 frontend/editor/src/core/tools/AutoRotate.tsx

diff --git a/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java b/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java
index a154ed2a7a..ff1a880010 100644
--- a/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java
+++ b/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java
@@ -338,6 +338,7 @@ public class EndpointConfiguration {
         addEndpointToGroup("PageOps", "split-pages");
         addEndpointToGroup("PageOps", "rearrange-pages");
         addEndpointToGroup("PageOps", "rotate-pdf");
+        addEndpointToGroup("PageOps", "auto-rotate-pdf");
         addEndpointToGroup("PageOps", "multi-page-layout");
         addEndpointToGroup("PageOps", "booklet-imposition");
         addEndpointToGroup("PageOps", "scale-pages");
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java
new file mode 100644
index 0000000000..21a5885c7d
--- /dev/null
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java
@@ -0,0 +1,385 @@
+package stirling.software.SPDF.controller.api.misc;
+
+import java.awt.image.BufferedImage;
+import java.io.File;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Optional;
+import java.util.Set;
+
+import javax.imageio.ImageIO;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.rendering.ImageType;
+import org.apache.pdfbox.rendering.PDFRenderer;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.ModelAttribute;
+
+import io.swagger.v3.oas.annotations.Operation;
+
+import jakarta.validation.Valid;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.SPDF.config.EndpointConfiguration;
+import stirling.software.SPDF.model.api.misc.AutoRotateAnalysisResult;
+import stirling.software.SPDF.model.api.misc.AutoRotateAnalysisResult.PageResult;
+import stirling.software.SPDF.model.api.misc.AutoRotatePdfRequest;
+import stirling.software.SPDF.model.api.misc.PageRotation;
+import stirling.software.SPDF.utils.AutoRotateDetection;
+import stirling.software.SPDF.utils.AutoRotateDetection.OsdResult;
+import stirling.software.SPDF.utils.AutoRotateDetection.TextDirection;
+import stirling.software.common.annotations.AutoJobPostMapping;
+import stirling.software.common.annotations.api.MiscApi;
+import stirling.software.common.configuration.RuntimePathConfig;
+import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.util.ExceptionUtils;
+import stirling.software.common.util.GeneralUtils;
+import stirling.software.common.util.ProcessExecutor;
+import stirling.software.common.util.ProcessExecutor.ProcessExecutorResult;
+import stirling.software.common.util.TempDirectory;
+import stirling.software.common.util.TempFileManager;
+import stirling.software.common.util.WebResponseUtils;
+
+@MiscApi
+@Slf4j
+@RequiredArgsConstructor
+public class AutoRotateController {
+
+    // OSD decides orientation from script shape, not character identity, so it does not need
+    // OCR-grade resolution. 150 DPI is ample for that and a quarter of the pixels of 300.
+    private static final int OSD_RENDER_DPI = 150;
+
+    private static final String METHOD_TEXT = "text";
+    private static final String METHOD_OSD = "osd";
+    private static final String METHOD_INFERRED = "inferred";
+    private static final String METHOD_NONE = "none";
+
+    private final CustomPDFDocumentFactory pdfDocumentFactory;
+    private final TempFileManager tempFileManager;
+    private final EndpointConfiguration endpointConfiguration;
+    private final RuntimePathConfig runtimePathConfig;
+    private final ApplicationProperties applicationProperties;
+
+    @AutoJobPostMapping(
+            consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
+            value = "/auto-rotate-pdf",
+            resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @Operation(
+            summary = "Detect and fix the orientation of every page",
+            description =
+                    "Detects each page's orientation (embedded-text direction first, Tesseract OSD"
+                            + " for scanned pages) and sets the page rotation so the content"
+                            + " displays upright. With dryRun=true, returns a JSON per-page report"
+                            + " instead of the PDF. With pageRotations set, applies the given"
+                            + " corrections without running detection."
+                            + " Input:PDF Output:PDF Type:SISO")
+    public ResponseEntity<?> autoRotatePdf(@Valid @ModelAttribute AutoRotatePdfRequest request)
+            throws IOException, InterruptedException {
+        String mode =
+                request.getDetectionMode() == null
+                        ? "auto"
+                        : request.getDetectionMode().toLowerCase(Locale.ROOT);
+        if (!"auto".equals(mode) && !"text".equals(mode) && !"osd".equals(mode)) {
+            throw ExceptionUtils.createIllegalArgumentException(
+                    ExceptionUtils.ErrorCode.INVALID_ARGUMENT,
+                    "detectionMode",
+                    "must be one of auto, text, osd");
+        }
+
+        try (PDDocument document = pdfDocumentFactory.load(request)) {
+            if (request.getPageRotations() != null && !request.getPageRotations().isEmpty()) {
+                applyExplicitRotations(document, request.getPageRotations());
+                return pdfResponse(document, request);
+            }
+
+            AutoRotateAnalysisResult analysis = analyse(document, mode, request);
+            if (request.isDryRun()) {
+                return ResponseEntity.ok(analysis);
+            }
+            for (PageResult pageResult : analysis.getPages()) {
+                if (pageResult.isApply()) {
+                    PDPage page = document.getPage(pageResult.getPageNumber() - 1);
+                    page.setRotation(
+                            Math.floorMod(page.getRotation() + pageResult.getCorrection(), 360));
+                }
+            }
+            return pdfResponse(document, request);
+        }
+    }
+
+    private AutoRotateAnalysisResult analyse(
+            PDDocument document, String mode, AutoRotatePdfRequest request)
+            throws IOException, InterruptedException {
+        double threshold =
+                request.getConfidenceThreshold() == null ? 14.0 : request.getConfidenceThreshold();
+        boolean tesseractAvailable = endpointConfiguration.isGroupEnabled("tesseract");
+        boolean useText = !"osd".equals(mode);
+        boolean useOsd = !"text".equals(mode);
+
+        List<PageResult> results = new ArrayList<>();
+        List<Integer> osdCandidates = new ArrayList<>();
+
+        int pageCount = document.getNumberOfPages();
+        // One walk of the document for all pages, rather than one walk per page.
+        List<TextDirection> textDirections =
+                useText ? AutoRotateDetection.detectTextDirections(document) : List.of();
+
+        for (int i = 0; i < pageCount; i++) {
+            int currentRotation = Math.floorMod(document.getPage(i).getRotation(), 360);
+            PageResult result =
+                    PageResult.builder()
+                            .pageNumber(i + 1)
+                            .currentRotation(currentRotation)
+                            .method(METHOD_NONE)
+                            .build();
+
+            if (useText) {
+                TextDirection direction = textDirections.get(i);
+                if (direction.isConclusive()) {
+                    int correction =
+                            AutoRotateDetection.correctionFromTextDirection(
+                                    direction.dominantDirection(), currentRotation);
+                    result.setMethod(METHOD_TEXT);
+                    result.setCorrection(correction);
+                    result.setConfidence(direction.dominance() * 100);
+                    result.setApply(correction != 0);
+                } else if (!useOsd) {
+                    result.setNote(
+                            direction.glyphCount() < AutoRotateDetection.MIN_GLYPHS
+                                    ? "tooFewGlyphs"
+                                    : "noDominantDirection");
+                }
+            }
+
+            if (useOsd && METHOD_NONE.equals(result.getMethod())) {
+                if (tesseractAvailable) {
+                    osdCandidates.add(i);
+                } else {
+                    result.setNote("tesseractUnavailable");
+                }
+            }
+            results.add(result);
+        }
+
+        if (!osdCandidates.isEmpty()) {
+            runOsdOnPages(document, osdCandidates, results, threshold);
+        }
+
+        if (request.isInferUndetected()) {
+            inferUndetectedPages(results);
+        }
+
+        return summarise(results, pageCount);
+    }
+
+    /**
+     * Fill in pages that no signal could decide, using the pages that could. When every decided
+     * page sharing an undecided page's current rotation agrees on one correction, that correction
+     * is the document's consensus for that rotation and is applied to the undecided page. This is
+     * the common "whole document rotated uniformly, but a cover or near-blank page has too little
+     * text to detect on its own" case. If decided pages disagree, nothing is inferred.
+     */
+    private void inferUndetectedPages(List<PageResult> results) {
+        // rotation -> the single agreed correction, or null once a conflict is seen
+        Map<Integer, Integer> consensus = new HashMap<>();
+        Set<Integer> conflicted = new HashSet<>();
+        for (PageResult result : results) {
+            if (METHOD_NONE.equals(result.getMethod())) {
+                continue;
+            }
+            int rotation = result.getCurrentRotation();
+            if (conflicted.contains(rotation)) {
+                continue;
+            }
+            Integer existing = consensus.get(rotation);
+            if (existing == null) {
+                consensus.put(rotation, result.getCorrection());
+            } else if (existing != result.getCorrection()) {
+                conflicted.add(rotation);
+                consensus.remove(rotation);
+            }
+        }
+
+        for (PageResult result : results) {
+            if (!METHOD_NONE.equals(result.getMethod())) {
+                continue;
+            }
+            Integer correction = consensus.get(result.getCurrentRotation());
+            if (correction == null) {
+                continue;
+            }
+            result.setMethod(METHOD_INFERRED);
+            result.setCorrection(correction);
+            result.setConfidence(null);
+            result.setApply(correction != 0);
+            result.setNote("inferredFromDocument");
+        }
+    }
+
+    private void runOsdOnPages(
+            PDDocument document,
+            List<Integer> pageIndexes,
+            List<PageResult> results,
+            double threshold)
+            throws IOException, InterruptedException {
+        String tessDataPath = runtimePathConfig.getTessDataPath();
+        boolean haveOsdData =
+                tessDataPath != null && new File(tessDataPath, "osd.traineddata").exists();
+
+        int dpi = OSD_RENDER_DPI;
+        if (applicationProperties != null && applicationProperties.getSystem() != null) {
+            dpi = Math.min(OSD_RENDER_DPI, applicationProperties.getSystem().getMaxDPI());
+        }
+        final int renderDpi = dpi;
+
+        try (TempDirectory tempDir = new TempDirectory(tempFileManager)) {
+            PDFRenderer renderer = new PDFRenderer(document);
+            renderer.setSubsamplingAllowed(true);
+            // One reused path, deleted after every page: the images are throwaway input for
+            // Tesseract, so a long document must not accumulate one file per page on disk.
+            File imageFile = new File(tempDir.getPath().toFile(), "osd-page.bmp");
+
+            for (int pageIndex : pageIndexes) {
+                PageResult result = results.get(pageIndex);
+                try {
+                    // Rendering honours the page's current /Rotate, so OSD sees the page exactly
+                    // as a viewer would and its verdict is always an additive correction.
+                    BufferedImage image =
+                            ExceptionUtils.handleOomRendering(
+                                    pageIndex + 1,
+                                    renderDpi,
+                                    () ->
+                                            renderer.renderImageWithDPI(
+                                                    pageIndex, renderDpi, ImageType.GRAY));
+
+                    if (AutoRotateDetection.isBlankRender(image)) {
+                        // Nothing for OSD to read; skip the process spawn entirely.
+                        result.setNote("blankPage");
+                        continue;
+                    }
+
+                    // BMP, not PNG: the file is deleted straight after Tesseract reads it, so
+                    // paying for compression only to discard the result is wasted work.
+                    ImageIO.write(image, "bmp", imageFile);
+
+                    List<String> command = new ArrayList<>();
+                    command.add("tesseract");
+                    command.add(imageFile.getAbsolutePath());
+                    command.add("stdout");
+                    command.add("--psm");
+                    command.add("0");
+                    if (haveOsdData) {
+                        command.add("--tessdata-dir");
+                        command.add(tessDataPath);
+                    }
+
+                    ProcessExecutorResult processResult =
+                            ProcessExecutor.getInstance(ProcessExecutor.Processes.TESSERACT)
+                                    .runCommandWithOutputHandling(command);
+
+                    Optional<OsdResult> osd =
+                            AutoRotateDetection.parseOsd(processResult.getMessages());
+                    if (osd.isEmpty()) {
+                        result.setNote("osdNoVerdict");
+                        continue;
+                    }
+                    result.setConfidence(osd.get().confidence());
+                    result.setCorrection(osd.get().rotate());
+                    if (osd.get().confidence() >= threshold) {
+                        result.setMethod(METHOD_OSD);
+                        result.setApply(osd.get().rotate() != 0);
+                    } else {
+                        result.setNote("belowThreshold");
+                    }
+                } catch (IOException e) {
+                    // Textless pages make Tesseract exit non-zero; skip, never guess.
+                    log.debug("OSD failed for page {}: {}", pageIndex + 1, e.getMessage());
+                    result.setNote("osdFailed");
+                } finally {
+                    Files.deleteIfExists(imageFile.toPath());
+                }
+            }
+        }
+    }
+
+    private void applyExplicitRotations(PDDocument document, List<PageRotation> rotations) {
+        int pageCount = document.getNumberOfPages();
+        Set<Integer> seen = new HashSet<>();
+        for (PageRotation entry : rotations) {
+            Integer pageNumber = entry.getPageNumber();
+            Integer angle = entry.getRotation();
+            if (pageNumber == null
+                    || angle == null
+                    || pageNumber < 1
+                    || pageNumber > pageCount
+                    || angle % 90 != 0) {
+                throw ExceptionUtils.createIllegalArgumentException(
+                        ExceptionUtils.ErrorCode.INVALID_ARGUMENT,
+                        "pageRotations",
+                        "page numbers must exist and rotations must be multiples of 90");
+            }
+            // Rotations are additive, so a repeated page would be turned twice; reject rather
+            // than silently pick a winner.
+            if (!seen.add(pageNumber)) {
+                throw ExceptionUtils.createIllegalArgumentException(
+                        ExceptionUtils.ErrorCode.INVALID_ARGUMENT,
+                        "pageRotations",
+                        "page " + pageNumber + " is listed more than once");
+            }
+            PDPage page = document.getPage(pageNumber - 1);
+            page.setRotation(Math.floorMod(page.getRotation() + angle, 360));
+        }
+    }
+
+    private AutoRotateAnalysisResult summarise(List<PageResult> results, int pageCount) {
+        int toRotate = 0;
+        int byText = 0;
+        int byOsd = 0;
+        int byInference = 0;
+        int undetected = 0;
+        for (PageResult result : results) {
+            if (result.isApply()) {
+                toRotate++;
+            }
+            switch (result.getMethod()) {
+                case METHOD_TEXT -> byText++;
+                case METHOD_OSD -> byOsd++;
+                case METHOD_INFERRED -> byInference++;
+                default -> undetected++;
+            }
+        }
+        return AutoRotateAnalysisResult.builder()
+                .pages(results)
+                .totalPages(pageCount)
+                .pagesToRotate(toRotate)
+                .detectedByText(byText)
+                .detectedByOsd(byOsd)
+                .inferred(byInference)
+                .undetected(undetected)
+                .build();
+    }
+
+    private ResponseEntity<?> pdfResponse(PDDocument document, AutoRotatePdfRequest request)
+            throws IOException {
+        String originalName =
+                request.getFileInput() != null
+                        ? request.getFileInput().getOriginalFilename()
+                        : "document.pdf";
+        return WebResponseUtils.pdfDocToWebResponse(
+                document,
+                GeneralUtils.generateFilename(originalName, "_auto_rotated.pdf"),
+                tempFileManager);
+    }
+}
diff --git a/app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotateAnalysisResult.java b/app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotateAnalysisResult.java
new file mode 100644
index 0000000000..375e4eb646
--- /dev/null
+++ b/app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotateAnalysisResult.java
@@ -0,0 +1,73 @@
+package stirling.software.SPDF.model.api.misc;
+
+import java.util.List;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+/** Per-page orientation report returned by auto-rotate-pdf when dryRun is set. */
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class AutoRotateAnalysisResult {
+
+    private List<PageResult> pages;
+
+    private int totalPages;
+
+    @Schema(description = "Number of pages a correction would be applied to")
+    private int pagesToRotate;
+
+    private int detectedByText;
+
+    private int detectedByOsd;
+
+    @Schema(description = "Pages whose correction was inherited from the document consensus")
+    private int inferred;
+
+    private int undetected;
+
+    @Data
+    @Builder
+    @NoArgsConstructor
+    @AllArgsConstructor
+    public static class PageResult {
+
+        @Schema(description = "1-based page number")
+        private int pageNumber;
+
+        @Schema(description = "The page's current /Rotate value, normalised to 0-270")
+        private int currentRotation;
+
+        @Schema(
+                description =
+                        "Detected additional clockwise rotation that would make the page upright."
+                                + " Reported for diagnostics even when it is not used (for example"
+                                + " an OSD verdict below the confidence threshold); 'apply' is the"
+                                + " authority on whether it is actually applied")
+        private int correction;
+
+        @Schema(
+                description =
+                        "Detection confidence: percentage of glyphs sharing the dominant direction"
+                                + " for method 'text', Tesseract orientation confidence for method"
+                                + " 'osd', absent when nothing was detected")
+        private Double confidence;
+
+        @Schema(
+                description = "How the orientation was determined",
+                allowableValues = {"text", "osd", "inferred", "none"})
+        private String method;
+
+        @Schema(description = "Whether the correction will be (or was) applied")
+        private boolean apply;
+
+        @Schema(description = "Machine-readable reason when no correction is applied")
+        private String note;
+    }
+}
diff --git a/app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotatePdfRequest.java b/app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotatePdfRequest.java
new file mode 100644
index 0000000000..9994b033e6
--- /dev/null
+++ b/app/core/src/main/java/stirling/software/SPDF/model/api/misc/AutoRotatePdfRequest.java
@@ -0,0 +1,58 @@
+package stirling.software.SPDF.model.api.misc;
+
+import java.util.List;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import jakarta.validation.Valid;
+import jakarta.validation.constraints.Min;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+import stirling.software.common.model.api.PDFFile;
+
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class AutoRotatePdfRequest extends PDFFile {
+
+    @Schema(
+            description =
+                    "Detection method. 'auto' tries embedded-text direction first and falls back"
+                            + " to Tesseract OSD for pages without usable text; 'text' uses only"
+                            + " embedded-text direction; 'osd' forces Tesseract OSD for every page",
+            allowableValues = {"auto", "text", "osd"},
+            defaultValue = "auto")
+    private String detectionMode = "auto";
+
+    @Schema(
+            description =
+                    "Minimum Tesseract OSD orientation confidence required before a correction is"
+                            + " applied. Matches OCRmyPDF's --rotate-pages-threshold scale",
+            minimum = "0",
+            defaultValue = "14.0")
+    @Min(value = 0, message = "Confidence threshold must be non-negative")
+    private Double confidenceThreshold = 14.0;
+
+    @Schema(
+            description =
+                    "If true, no rotation is applied; returns a JSON report of the per-page"
+                            + " detection results instead of a PDF")
+    private boolean dryRun;
+
+    @Schema(
+            description =
+                    "When a page cannot be decided on its own but the pages that could be decided"
+                            + " agree on a single correction for that same current rotation, apply"
+                            + " that shared correction to the undecided page. Handles documents"
+                            + " rotated uniformly where some pages are too sparse to detect alone",
+            defaultValue = "true")
+    private boolean inferUndetected = true;
+
+    @Schema(
+            description =
+                    "Optional pre-computed corrections to apply without running detection. Pages"
+                            + " not listed are left unchanged, and a page may only appear once")
+    @Valid
+    private List<PageRotation> pageRotations;
+}
diff --git a/app/core/src/main/java/stirling/software/SPDF/model/api/misc/PageRotation.java b/app/core/src/main/java/stirling/software/SPDF/model/api/misc/PageRotation.java
new file mode 100644
index 0000000000..dbdbee7de7
--- /dev/null
+++ b/app/core/src/main/java/stirling/software/SPDF/model/api/misc/PageRotation.java
@@ -0,0 +1,28 @@
+package stirling.software.SPDF.model.api.misc;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+/** A pre-computed rotation for one page, used by auto-rotate-pdf's apply-only path. */
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class PageRotation {
+
+    @Schema(
+            description = "1-based page number to rotate",
+            requiredMode = Schema.RequiredMode.REQUIRED,
+            example = "1")
+    private Integer pageNumber;
+
+    @Schema(
+            description =
+                    "Additional clockwise rotation to add to the page's current rotation, in"
+                            + " degrees. Must be a multiple of 90",
+            requiredMode = Schema.RequiredMode.REQUIRED,
+            example = "90")
+    private Integer rotation;
+}
diff --git a/app/core/src/main/java/stirling/software/SPDF/utils/AutoRotateDetection.java b/app/core/src/main/java/stirling/software/SPDF/utils/AutoRotateDetection.java
new file mode 100644
index 0000000000..825705d9bd
--- /dev/null
+++ b/app/core/src/main/java/stirling/software/SPDF/utils/AutoRotateDetection.java
@@ -0,0 +1,189 @@
+package stirling.software.SPDF.utils;
+
+import java.awt.image.BufferedImage;
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Optional;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.apache.pdfbox.text.TextPosition;
+
+/**
+ * Page-orientation detection primitives for the auto-rotate tool.
+ *
+ * <p>Two independent signals are supported: the dominant direction of a page's embedded text
+ * (cheap, digital PDFs only) and Tesseract's orientation-and-script-detection output (works on
+ * scans, requires the external binary). Both express their result as the additional clockwise
+ * /Rotate correction that makes the page display upright.
+ */
+public final class AutoRotateDetection {
+
+    private AutoRotateDetection() {}
+
+    /** Glyphs needed to trust the text signal at the ordinary dominance bar. */
+    public static final int MIN_GLYPHS = 30;
+
+    /** Fraction of glyphs that must share one direction at the ordinary bar. */
+    public static final double MIN_DOMINANCE = 0.95;
+
+    /**
+     * Glyphs needed to trust the text signal when the glyphs are near-unanimous. Lets sparse pages
+     * (a header, a single line, a rotated URL) be decided from their own text instead of falling
+     * through to OSD, as long as effectively every glyph agrees on the direction.
+     */
+    public static final int MIN_GLYPHS_UNANIMOUS = 8;
+
+    /** Dominance required for the sparse-page path — essentially total agreement. */
+    public static final double UNANIMOUS_DOMINANCE = 0.99;
+
+    /**
+     * Dominant embedded-text direction of one page.
+     *
+     * @param dominantDirection glyph direction in page space, degrees CCW (0/90/180/270)
+     * @param dominance fraction of counted glyphs sharing the dominant direction (0..1)
+     * @param glyphCount number of non-whitespace glyphs counted
+     */
+    public record TextDirection(int dominantDirection, double dominance, int glyphCount) {
+
+        public boolean isConclusive() {
+            if (glyphCount >= MIN_GLYPHS && dominance >= MIN_DOMINANCE) {
+                return true;
+            }
+            return glyphCount >= MIN_GLYPHS_UNANIMOUS && dominance >= UNANIMOUS_DOMINANCE;
+        }
+    }
+
+    /**
+     * Parsed Tesseract OSD verdict.
+     *
+     * @param rotate clockwise degrees to rotate the rendered page so text is upright
+     * @param confidence Tesseract's orientation confidence (same scale OCRmyPDF thresholds on)
+     */
+    public record OsdResult(int rotate, double confidence) {}
+
+    private static final Pattern OSD_ROTATE =
+            Pattern.compile("^Rotate:\\s*(\\d+)", Pattern.MULTILINE);
+    private static final Pattern OSD_CONFIDENCE =
+            Pattern.compile("^Orientation confidence:\\s*([0-9.]+)", Pattern.MULTILINE);
+
+    /**
+     * Counts non-whitespace glyph directions for every page in one pass. A stripper per page would
+     * re-walk the document once per page, which is quadratic on long documents; this walks it once
+     * and buckets glyphs by the page being processed.
+     *
+     * @return one entry per page, in page order
+     */
+    public static List<TextDirection> detectTextDirections(PDDocument document) throws IOException {
+        int pageCount = document.getNumberOfPages();
+        DirectionCountingStripper stripper = new DirectionCountingStripper(pageCount);
+        stripper.setStartPage(1);
+        stripper.setEndPage(pageCount);
+        stripper.getText(document);
+
+        List<TextDirection> directions = new ArrayList<>(pageCount);
+        for (int page = 0; page < pageCount; page++) {
+            int[] counts = stripper.counts[page];
+            int total = 0;
+            int bestIndex = 0;
+            for (int i = 0; i < 4; i++) {
+                total += counts[i];
+                if (counts[i] > counts[bestIndex]) {
+                    bestIndex = i;
+                }
+            }
+            double dominance = total == 0 ? 0 : (double) counts[bestIndex] / total;
+            directions.add(new TextDirection(bestIndex * 90, dominance, total));
+        }
+        return directions;
+    }
+
+    /**
+     * True when a rendered page carries no ink worth analysing. Checked after rendering but before
+     * spawning Tesseract, since the process spawn costs far more than the pixel scan and this
+     * catches both empty generated pages and scanned blanks (the back of a duplex sheet).
+     */
+    public static boolean isBlankRender(BufferedImage image) {
+        final int darkThreshold = 200; // 8-bit grey; anything lighter counts as paper
+        final int step = 4; // subsample: blank pages are uniform, no need for every pixel
+        long sampled = 0;
+        long dark = 0;
+        for (int y = 0; y < image.getHeight(); y += step) {
+            for (int x = 0; x < image.getWidth(); x += step) {
+                sampled++;
+                if ((image.getRGB(x, y) & 0xFF) < darkThreshold) {
+                    dark++;
+                    // A page needs a meaningful amount of ink before OSD can do anything;
+                    // bail out as soon as we know there is enough.
+                    if (dark > sampled / 1000 + 20) {
+                        return false;
+                    }
+                }
+            }
+        }
+        return true;
+    }
+
+    /**
+     * Clockwise /Rotate correction for a page whose dominant glyph direction (page space, CCW) is
+     * {@code dominantDirection} and whose current /Rotate is {@code pageRotation}. Derivation: the
+     * on-screen text angle is (direction - rotation) CCW, and adding d to /Rotate turns the display
+     * a further d clockwise, so the correction that zeroes the screen angle is their difference.
+     */
+    public static int correctionFromTextDirection(int dominantDirection, int pageRotation) {
+        return Math.floorMod(dominantDirection - pageRotation, 360);
+    }
+
+    /** Extracts rotation and confidence from `tesseract <img> stdout --psm 0` output. */
+    public static Optional<OsdResult> parseOsd(String tesseractOutput) {
+        if (tesseractOutput == null) {
+            return Optional.empty();
+        }
+        Matcher rotate = OSD_ROTATE.matcher(tesseractOutput);
+        Matcher confidence = OSD_CONFIDENCE.matcher(tesseractOutput);
+        if (!rotate.find() || !confidence.find()) {
+            return Optional.empty();
+        }
+        try {
+            return Optional.of(
+                    new OsdResult(
+                            Integer.parseInt(rotate.group(1)),
+                            Double.parseDouble(confidence.group(1))));
+        } catch (NumberFormatException e) {
+            return Optional.empty();
+        }
+    }
+
+    private static class DirectionCountingStripper extends PDFTextStripper {
+
+        // counts[page][i] holds glyphs on that page whose direction is i * 90 degrees
+        final int[][] counts;
+
+        DirectionCountingStripper(int pageCount) throws IOException {
+            this.counts = new int[pageCount][4];
+        }
+
+        /**
+         * PDFBox snaps glyph direction to a quadrant, so getDir() only ever yields 0/90/180/270 —
+         * obliquely drawn text (30, 45, 135 degrees) is reported as 0 rather than as its true
+         * angle. Skew is therefore invisible to this signal by construction, which is consistent
+         * with skew being out of scope here: only 90-degree orientation is corrected.
+         */
+        @Override
+        protected void processTextPosition(TextPosition text) {
+            String unicode = text.getUnicode();
+            if (unicode == null || unicode.isBlank()) {
+                return;
+            }
+            int page = getCurrentPageNo() - 1;
+            if (page < 0 || page >= counts.length) {
+                return;
+            }
+            counts[page][Math.floorMod(Math.round(text.getDir()), 360) / 90]++;
+            // super is intentionally not called: we only count, no text assembly needed
+        }
+    }
+}
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/misc/AutoRotateControllerTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/misc/AutoRotateControllerTest.java
new file mode 100644
index 0000000000..0545a17058
--- /dev/null
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/misc/AutoRotateControllerTest.java
@@ -0,0 +1,342 @@
+package stirling.software.SPDF.controller.api.misc;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDPageContentStream;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.font.PDType1Font;
+import org.apache.pdfbox.pdmodel.font.Standard14Fonts;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.apache.pdfbox.text.TextPosition;
+import org.apache.pdfbox.util.Matrix;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.CsvSource;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.core.io.Resource;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.mock.web.MockMultipartFile;
+
+import stirling.software.SPDF.config.EndpointConfiguration;
+import stirling.software.SPDF.model.api.misc.AutoRotateAnalysisResult;
+import stirling.software.SPDF.model.api.misc.AutoRotatePdfRequest;
+import stirling.software.SPDF.model.api.misc.PageRotation;
+import stirling.software.common.configuration.RuntimePathConfig;
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.util.TempFile;
+import stirling.software.common.util.TempFileManager;
+
+@ExtendWith(MockitoExtension.class)
+class AutoRotateControllerTest {
+
+    private static final String SAMPLE_TEXT =
+            "The quick brown fox jumps over the lazy dog again and again";
+
+    @Mock private CustomPDFDocumentFactory pdfDocumentFactory;
+    @Mock private TempFileManager tempFileManager;
+    @Mock private EndpointConfiguration endpointConfiguration;
+    @Mock private RuntimePathConfig runtimePathConfig;
+    @Mock private ApplicationProperties applicationProperties;
+
+    @InjectMocks private AutoRotateController controller;
+
+    @BeforeEach
+    void setUp() throws Exception {
+        lenient()
+                .when(tempFileManager.createManagedTempFile(anyString()))
+                .thenAnswer(
+                        inv -> {
+                            File f =
+                                    Files.createTempFile("test", inv.<String>getArgument(0))
+                                            .toFile();
+                            TempFile tf = mock(TempFile.class);
+                            lenient().when(tf.getFile()).thenReturn(f);
+                            lenient().when(tf.getPath()).thenReturn(f.toPath());
+                            return tf;
+                        });
+        lenient().when(endpointConfiguration.isGroupEnabled("tesseract")).thenReturn(false);
+    }
+
+    private static PDDocument docWithUprightText(int... pageRotations) throws IOException {
+        PDDocument document = new PDDocument();
+        for (int rotation : pageRotations) {
+            PDPage page = new PDPage(PDRectangle.LETTER);
+            document.addPage(page);
+            try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+                content.beginText();
+                content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+                content.setTextMatrix(Matrix.getTranslateInstance(72, 400));
+                content.showText(SAMPLE_TEXT);
+                content.endText();
+            }
+            page.setRotation(rotation);
+        }
+        return document;
+    }
+
+    private AutoRotatePdfRequest request(PDDocument document) throws IOException {
+        AutoRotatePdfRequest request = new AutoRotatePdfRequest();
+        request.setFileInput(
+                new MockMultipartFile(
+                        "fileInput",
+                        "test.pdf",
+                        MediaType.APPLICATION_PDF_VALUE,
+                        new byte[] {1, 2, 3}));
+        when(pdfDocumentFactory.load(request)).thenReturn(document);
+        return request;
+    }
+
+    private static PDDocument reload(ResponseEntity<?> response) throws IOException {
+        Resource resource = (Resource) response.getBody();
+        return Loader.loadPDF(resource.getContentAsByteArray());
+    }
+
+    private static PDDocument docWithTextAt(int textAngleDegrees, int pageRotation)
+            throws IOException {
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.LETTER);
+        document.addPage(page);
+        try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+            content.beginText();
+            content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+            content.setTextMatrix(
+                    Matrix.getRotateInstance(Math.toRadians(textAngleDegrees), 300, 400));
+            content.showText(SAMPLE_TEXT);
+            content.endText();
+        }
+        page.setRotation(pageRotation);
+        return document;
+    }
+
+    /**
+     * Reads the dominant glyph direction straight from a document, independently of the production
+     * detection code, so the round-trip assertion below validates the result rather than restating
+     * the formula under test.
+     */
+    private static int dominantGlyphDirection(PDDocument document) throws IOException {
+        int[] counts = new int[4];
+        PDFTextStripper stripper =
+                new PDFTextStripper() {
+                    @Override
+                    protected void processTextPosition(TextPosition text) {
+                        if (!text.getUnicode().isBlank()) {
+                            counts[Math.floorMod(Math.round(text.getDir()), 360) / 90]++;
+                        }
+                    }
+                };
+        stripper.setStartPage(1);
+        stripper.setEndPage(1);
+        stripper.getText(document);
+        int best = 0;
+        for (int i = 1; i < 4; i++) {
+            if (counts[i] > counts[best]) {
+                best = i;
+            }
+        }
+        return best * 90;
+    }
+
+    /**
+     * End-to-end round trip: build a page whose text is drawn at a known angle under a known
+     * /Rotate, run the real controller, then assert the output actually displays upright. Upright
+     * means the glyph direction and the page rotation cancel — computed here in the test, not via
+     * the production helper.
+     */
+    @ParameterizedTest
+    @CsvSource({
+        "0,   0",
+        "0,   90",
+        "0,   180",
+        "0,   270",
+        "90,  0",
+        "90,  90",
+        "180, 0",
+        "180, 270",
+        "270, 90",
+    })
+    void roundTripLeavesPageUpright(int textAngle, int pageRotation) throws Exception {
+        AutoRotatePdfRequest request = request(docWithTextAt(textAngle, pageRotation));
+        request.setDetectionMode("text");
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        try (PDDocument corrected = reload(response)) {
+            int glyphDirection = dominantGlyphDirection(corrected);
+            int finalRotation = Math.floorMod(corrected.getPage(0).getRotation(), 360);
+            assertThat(Math.floorMod(glyphDirection - finalRotation, 360))
+                    .as(
+                            "text drawn at %d under /Rotate %d should display upright, got glyph"
+                                    + " direction %d with /Rotate %d",
+                            textAngle, pageRotation, glyphDirection, finalRotation)
+                    .isZero();
+        }
+    }
+
+    @Test
+    void dryRunReportsTextDetection() throws Exception {
+        AutoRotatePdfRequest request = request(docWithUprightText(90, 0));
+        request.setDryRun(true);
+        request.setDetectionMode("text");
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        AutoRotateAnalysisResult result = (AutoRotateAnalysisResult) response.getBody();
+        assertThat(result.getTotalPages()).isEqualTo(2);
+        assertThat(result.getPagesToRotate()).isEqualTo(1);
+        assertThat(result.getDetectedByText()).isEqualTo(2);
+
+        AutoRotateAnalysisResult.PageResult first = result.getPages().get(0);
+        assertThat(first.getMethod()).isEqualTo("text");
+        assertThat(first.getCorrection()).isEqualTo(270);
+        assertThat(first.isApply()).isTrue();
+        assertThat(first.getConfidence()).isEqualTo(100.0);
+
+        AutoRotateAnalysisResult.PageResult second = result.getPages().get(1);
+        assertThat(second.getCorrection()).isZero();
+        assertThat(second.isApply()).isFalse();
+    }
+
+    @Test
+    void appliesDetectedCorrections() throws Exception {
+        AutoRotatePdfRequest request = request(docWithUprightText(90, 0));
+        request.setDetectionMode("text");
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        try (PDDocument corrected = reload(response)) {
+            assertThat(corrected.getPage(0).getRotation()).isZero();
+            assertThat(corrected.getPage(1).getRotation()).isZero();
+        }
+    }
+
+    @Test
+    void appliesExplicitPageRotations() throws Exception {
+        AutoRotatePdfRequest request = request(docWithUprightText(0, 0));
+        request.setPageRotations(List.of(new PageRotation(1, 90)));
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        try (PDDocument corrected = reload(response)) {
+            assertThat(corrected.getPage(0).getRotation()).isEqualTo(90);
+            assertThat(corrected.getPage(1).getRotation()).isZero();
+        }
+    }
+
+    @Test
+    void reportsTesseractUnavailableForTextlessPages() throws Exception {
+        PDDocument document = new PDDocument();
+        document.addPage(new PDPage(PDRectangle.LETTER));
+        AutoRotatePdfRequest request = request(document);
+        request.setDryRun(true);
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        AutoRotateAnalysisResult result = (AutoRotateAnalysisResult) response.getBody();
+        AutoRotateAnalysisResult.PageResult page = result.getPages().get(0);
+        assertThat(page.getMethod()).isEqualTo("none");
+        assertThat(page.getNote()).isEqualTo("tesseractUnavailable");
+        assertThat(result.getUndetected()).isEqualTo(1);
+    }
+
+    @Test
+    void infersUndetectedPageFromDocumentConsensus() throws Exception {
+        // Page 1 has body text and is rotated 90 (-> 270 correction); page 2 is blank and shares
+        // the same rotation. With OSD unavailable, page 2 can't be detected on its own, so it
+        // should inherit page 1's 270 correction.
+        PDDocument document = docWithUprightText(90);
+        PDPage blank = new PDPage(PDRectangle.LETTER);
+        blank.setRotation(90);
+        document.addPage(blank);
+        AutoRotatePdfRequest request = request(document);
+        request.setDryRun(true);
+        request.setDetectionMode("text");
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        AutoRotateAnalysisResult result = (AutoRotateAnalysisResult) response.getBody();
+        AutoRotateAnalysisResult.PageResult page2 = result.getPages().get(1);
+        assertThat(page2.getMethod()).isEqualTo("inferred");
+        assertThat(page2.getCorrection()).isEqualTo(270);
+        assertThat(page2.isApply()).isTrue();
+        assertThat(page2.getNote()).isEqualTo("inferredFromDocument");
+        assertThat(result.getInferred()).isEqualTo(1);
+        assertThat(result.getPagesToRotate()).isEqualTo(2);
+    }
+
+    @Test
+    void doesNotInferWhenDisabled() throws Exception {
+        PDDocument document = docWithUprightText(90);
+        PDPage blank = new PDPage(PDRectangle.LETTER);
+        blank.setRotation(90);
+        document.addPage(blank);
+        AutoRotatePdfRequest request = request(document);
+        request.setDryRun(true);
+        request.setDetectionMode("text");
+        request.setInferUndetected(false);
+
+        ResponseEntity<?> response = controller.autoRotatePdf(request);
+
+        AutoRotateAnalysisResult result = (AutoRotateAnalysisResult) response.getBody();
+        AutoRotateAnalysisResult.PageResult page2 = result.getPages().get(1);
+        assertThat(page2.getMethod()).isEqualTo("none");
+        assertThat(page2.isApply()).isFalse();
+        assertThat(result.getInferred()).isZero();
+        assertThat(result.getUndetected()).isEqualTo(1);
+    }
+
+    @Test
+    void rejectsInvalidDetectionMode() {
+        AutoRotatePdfRequest request = new AutoRotatePdfRequest();
+        request.setDetectionMode("magic");
+
+        assertThatThrownBy(() -> controller.autoRotatePdf(request))
+                .isInstanceOf(IllegalArgumentException.class);
+    }
+
+    @Test
+    void rejectsRotationThatIsNotAMultipleOf90() throws Exception {
+        AutoRotatePdfRequest request = request(docWithUprightText(0));
+        request.setPageRotations(List.of(new PageRotation(1, 45)));
+
+        assertThatThrownBy(() -> controller.autoRotatePdf(request))
+                .isInstanceOf(IllegalArgumentException.class);
+    }
+
+    @Test
+    void rejectsPageRotationOutsideTheDocument() throws Exception {
+        AutoRotatePdfRequest request = request(docWithUprightText(0));
+        request.setPageRotations(List.of(new PageRotation(5, 90)));
+
+        assertThatThrownBy(() -> controller.autoRotatePdf(request))
+                .isInstanceOf(IllegalArgumentException.class);
+    }
+
+    @Test
+    void rejectsDuplicatePageInRotations() throws Exception {
+        // Rotations are additive, so applying the same page twice would over-rotate it.
+        AutoRotatePdfRequest request = request(docWithUprightText(0, 0));
+        request.setPageRotations(List.of(new PageRotation(1, 90), new PageRotation(1, 90)));
+
+        assertThatThrownBy(() -> controller.autoRotatePdf(request))
+                .isInstanceOf(IllegalArgumentException.class);
+    }
+}
diff --git a/app/core/src/test/java/stirling/software/SPDF/utils/AutoRotateDetectionTest.java b/app/core/src/test/java/stirling/software/SPDF/utils/AutoRotateDetectionTest.java
new file mode 100644
index 0000000000..741d18e652
--- /dev/null
+++ b/app/core/src/test/java/stirling/software/SPDF/utils/AutoRotateDetectionTest.java
@@ -0,0 +1,248 @@
+package stirling.software.SPDF.utils;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.awt.Color;
+import java.awt.Graphics2D;
+import java.awt.image.BufferedImage;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDPageContentStream;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.font.PDType1Font;
+import org.apache.pdfbox.pdmodel.font.Standard14Fonts;
+import org.apache.pdfbox.util.Matrix;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.CsvSource;
+
+import stirling.software.SPDF.utils.AutoRotateDetection.OsdResult;
+import stirling.software.SPDF.utils.AutoRotateDetection.TextDirection;
+
+class AutoRotateDetectionTest {
+
+    private static final String SAMPLE_TEXT =
+            "The quick brown fox jumps over the lazy dog again and again";
+
+    private PDDocument docWithText(int textAngleDegrees, int pageRotation) throws IOException {
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.LETTER);
+        document.addPage(page);
+        try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+            content.beginText();
+            content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+            content.setTextMatrix(
+                    Matrix.getRotateInstance(Math.toRadians(textAngleDegrees), 300, 400));
+            content.showText(SAMPLE_TEXT);
+            content.endText();
+        }
+        page.setRotation(pageRotation);
+        return document;
+    }
+
+    /**
+     * Ground truth per the PDF spec: /Rotate R displays the page R degrees clockwise, so upright
+     * page-space text under /Rotate R needs a further (360 - R) % 360 to display upright again;
+     * text drawn rotated T degrees CCW in page space needs T clockwise to correct. Combined, the
+     * expected correction is (T - R) mod 360.
+     */
+    @ParameterizedTest
+    @CsvSource({
+        // textAngle, pageRotation, expectedCorrection
+        "0,   0,   0",
+        "0,   90,  270",
+        "0,   180, 180",
+        "0,   270, 90",
+        "90,  0,   90",
+        "180, 0,   180",
+        "270, 0,   270",
+        "90,  90,  0",
+        "180, 90,  90",
+    })
+    void detectsCorrectionForRotatedTextAndPages(
+            int textAngle, int pageRotation, int expectedCorrection) throws IOException {
+        try (PDDocument document = docWithText(textAngle, pageRotation)) {
+            TextDirection direction = AutoRotateDetection.detectTextDirections(document).get(0);
+
+            assertThat(direction.isConclusive())
+                    .as(
+                            "direction should be conclusive, glyphs=%d dominance=%s",
+                            direction.glyphCount(), direction.dominance())
+                    .isTrue();
+            assertThat(
+                            AutoRotateDetection.correctionFromTextDirection(
+                                    direction.dominantDirection(),
+                                    Math.floorMod(pageRotation, 360)))
+                    .isEqualTo(expectedCorrection);
+        }
+    }
+
+    @Test
+    void mixedDirectionsAreNotConclusive() throws IOException {
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.LETTER);
+        document.addPage(page);
+        try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+            content.beginText();
+            content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+            content.setTextMatrix(Matrix.getTranslateInstance(100, 400));
+            content.showText(SAMPLE_TEXT);
+            content.setTextMatrix(Matrix.getRotateInstance(Math.toRadians(90), 300, 200));
+            content.showText(SAMPLE_TEXT);
+            content.endText();
+        }
+        try (document) {
+            TextDirection direction = AutoRotateDetection.detectTextDirections(document).get(0);
+            assertThat(direction.isConclusive()).isFalse();
+        }
+    }
+
+    @Test
+    void emptyPageIsNotConclusive() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage(PDRectangle.LETTER));
+            TextDirection direction = AutoRotateDetection.detectTextDirections(document).get(0);
+            assertThat(direction.glyphCount()).isZero();
+            assertThat(direction.isConclusive()).isFalse();
+        }
+    }
+
+    @Test
+    void shortTextIsNotConclusive() throws IOException {
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.LETTER);
+        document.addPage(page);
+        try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+            content.beginText();
+            content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+            content.setTextMatrix(Matrix.getTranslateInstance(100, 400));
+            content.showText("Short");
+            content.endText();
+        }
+        try (document) {
+            TextDirection direction = AutoRotateDetection.detectTextDirections(document).get(0);
+            assertThat(direction.isConclusive()).isFalse();
+        }
+    }
+
+    @Test
+    void unanimousShortTextIsConclusive() throws IOException {
+        // Between MIN_GLYPHS_UNANIMOUS (8) and MIN_GLYPHS (30): trusted only because every
+        // glyph agrees on direction, the sparse-page path (e.g. a lone header or URL line).
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.LETTER);
+        document.addPage(page);
+        try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+            content.beginText();
+            content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+            content.setTextMatrix(Matrix.getRotateInstance(Math.toRadians(90), 300, 200));
+            content.showText("york.gov.uk/pay");
+            content.endText();
+        }
+        try (document) {
+            TextDirection direction = AutoRotateDetection.detectTextDirections(document).get(0);
+            assertThat(direction.glyphCount())
+                    .isBetween(
+                            AutoRotateDetection.MIN_GLYPHS_UNANIMOUS,
+                            AutoRotateDetection.MIN_GLYPHS - 1);
+            assertThat(direction.dominance()).isEqualTo(1.0);
+            assertThat(direction.isConclusive()).isTrue();
+            assertThat(direction.dominantDirection()).isEqualTo(90);
+        }
+    }
+
+    @Test
+    void bucketsGlyphsPerPageInOneWalk() throws IOException {
+        // Each page carries text at a different angle; the single-pass walk must attribute
+        // glyphs to the right page rather than pooling them.
+        int[] angles = {0, 90, 180, 270};
+        try (PDDocument document = new PDDocument()) {
+            for (int angle : angles) {
+                PDPage page = new PDPage(PDRectangle.LETTER);
+                document.addPage(page);
+                try (PDPageContentStream content = new PDPageContentStream(document, page)) {
+                    content.beginText();
+                    content.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+                    content.setTextMatrix(
+                            Matrix.getRotateInstance(Math.toRadians(angle), 300, 400));
+                    content.showText(SAMPLE_TEXT);
+                    content.endText();
+                }
+            }
+
+            List<TextDirection> directions = AutoRotateDetection.detectTextDirections(document);
+
+            assertThat(directions).hasSize(angles.length);
+            for (int i = 0; i < angles.length; i++) {
+                assertThat(directions.get(i).isConclusive()).as("page %d", i + 1).isTrue();
+                assertThat(directions.get(i).dominantDirection())
+                        .as("page %d direction", i + 1)
+                        .isEqualTo(angles[i]);
+            }
+        }
+    }
+
+    @Test
+    void detectsBlankAndInkedRenders() {
+        BufferedImage blank = new BufferedImage(200, 200, BufferedImage.TYPE_BYTE_GRAY);
+        Graphics2D g = blank.createGraphics();
+        g.setColor(Color.WHITE);
+        g.fillRect(0, 0, 200, 200);
+        g.dispose();
+        assertThat(AutoRotateDetection.isBlankRender(blank)).isTrue();
+
+        BufferedImage speck = copyOf(blank);
+        Graphics2D specked = speck.createGraphics();
+        specked.setColor(Color.BLACK);
+        specked.fillRect(0, 0, 2, 2); // a dust speck must not count as content
+        specked.dispose();
+        assertThat(AutoRotateDetection.isBlankRender(speck)).isTrue();
+
+        BufferedImage inked = copyOf(blank);
+        Graphics2D inkedG = inked.createGraphics();
+        inkedG.setColor(Color.BLACK);
+        inkedG.fillRect(20, 20, 120, 60);
+        inkedG.dispose();
+        assertThat(AutoRotateDetection.isBlankRender(inked)).isFalse();
+    }
+
+    private static BufferedImage copyOf(BufferedImage source) {
+        BufferedImage copy =
+                new BufferedImage(source.getWidth(), source.getHeight(), source.getType());
+        Graphics2D g = copy.createGraphics();
+        g.drawImage(source, 0, 0, null);
+        g.dispose();
+        return copy;
+    }
+
+    @Test
+    void parsesTypicalOsdOutput() {
+        String output =
+                """
+                Estimating resolution as 336
+                Page number: 0
+                Orientation in degrees: 180
+                Rotate: 180
+                Orientation confidence: 9.15
+                Script: Latin
+                Script confidence: 4.43
+                """;
+        Optional<OsdResult> result = AutoRotateDetection.parseOsd(output);
+        assertThat(result).isPresent();
+        assertThat(result.get().rotate()).isEqualTo(180);
+        assertThat(result.get().confidence()).isEqualTo(9.15);
+    }
+
+    @Test
+    void parseOsdRejectsIncompleteOutput() {
+        assertThat(AutoRotateDetection.parseOsd("Too few characters. Skipping this page"))
+                .isEmpty();
+        assertThat(AutoRotateDetection.parseOsd("Rotate: 90")).isEmpty();
+        assertThat(AutoRotateDetection.parseOsd(null)).isEmpty();
+        assertThat(AutoRotateDetection.parseOsd("")).isEmpty();
+    }
+}
diff --git a/engine/src/stirling/models/tool_models.py b/engine/src/stirling/models/tool_models.py
index 1827730283..712e3575af 100644
--- a/engine/src/stirling/models/tool_models.py
+++ b/engine/src/stirling/models/tool_models.py
@@ -241,6 +241,16 @@ class AutoRenameParams(ApiModel):
     )
 
 
+class DetectionMode(StrEnum):
+    """
+    Detection method. 'auto' tries embedded-text direction first and falls back to Tesseract OSD for pages without usable text; 'text' uses only embedded-text direction; 'osd' forces Tesseract OSD for every page
+    """
+
+    auto = "auto"
+    text = "text"
+    osd = "osd"
+
+
 class AutoSplitPdfParams(ApiModel):
     duplex_mode: bool = Field(
         False,
@@ -705,6 +715,19 @@ class OcrPdfParams(ApiModel):
     sidecar: bool | None = Field(None, description="Include OCR text in a sidecar text file if set to true")
 
 
+class PageRotation(ApiModel):
+    """
+    Optional pre-computed corrections to apply without running detection. Pages not listed are left unchanged, and a page may only appear once
+    """
+
+    page_number: int = Field(..., description="1-based page number to rotate", examples=[1])
+    rotation: int = Field(
+        ...,
+        description="Additional clockwise rotation to add to the page's current rotation, in degrees. Must be a multiple of 90",
+        examples=[90],
+    )
+
+
 class PdfToCbrParams(ApiModel):
     dpi: int = Field(..., description="The DPI (Dots Per Inch) for rendering PDF pages as images", examples=[150])
 
@@ -1348,6 +1371,30 @@ class VectorToPdfParams(ApiModel):
     prepress: Prepress = Field(Prepress.boolean_false, description="Apply Ghostscript prepress settings")
 
 
+class AutoRotatePdfParams(ApiModel):
+    confidence_threshold: float = Field(
+        14.0,
+        description="Minimum Tesseract OSD orientation confidence required before a correction is applied. Matches OCRmyPDF's --rotate-pages-threshold scale",
+        ge=0.0,
+    )
+    detection_mode: DetectionMode = Field(
+        DetectionMode.auto,
+        description="Detection method. 'auto' tries embedded-text direction first and falls back to Tesseract OSD for pages without usable text; 'text' uses only embedded-text direction; 'osd' forces Tesseract OSD for every page",
+    )
+    dry_run: bool | None = Field(
+        None,
+        description="If true, no rotation is applied; returns a JSON report of the per-page detection results instead of a PDF",
+    )
+    infer_undetected: bool = Field(
+        True,
+        description="When a page cannot be decided on its own but the pages that could be decided agree on a single correction for that same current rotation, apply that shared correction to the undecided page. Handles documents rotated uniformly where some pages are too sparse to detect alone",
+    )
+    page_rotations: list[PageRotation] | None = Field(
+        None,
+        description="Optional pre-computed corrections to apply without running detection. Pages not listed are left unchanged, and a page may only appear once",
+    )
+
+
 class RedactExecuteParams(ApiModel):
     image_boxes: list[ImageBox] | None = Field(
         None, description="Rectangular areas to black out, each defined by a page number and bounding box coordinates."
@@ -1432,6 +1479,7 @@ class Model(
         | AddPageNumbersParams
         | AddStampParams
         | AutoRenameParams
+        | AutoRotatePdfParams
         | AutoSplitPdfParams
         | CompressPdfParams
         | DeleteAttachmentParams
@@ -1505,6 +1553,7 @@ class Model(
         | AddPageNumbersParams
         | AddStampParams
         | AutoRenameParams
+        | AutoRotatePdfParams
         | AutoSplitPdfParams
         | CompressPdfParams
         | DeleteAttachmentParams
@@ -1579,6 +1628,7 @@ type ParamToolModel = (
     | AddPageNumbersParams
     | AddStampParams
     | AutoRenameParams
+    | AutoRotatePdfParams
     | AutoSplitPdfParams
     | CompressPdfParams
     | DeleteAttachmentParams
@@ -1654,6 +1704,7 @@ class ToolEndpoint(StrEnum):
     ADD_PAGE_NUMBERS = "/api/v1/misc/add-page-numbers"
     ADD_STAMP = "/api/v1/misc/add-stamp"
     AUTO_RENAME = "/api/v1/misc/auto-rename"
+    AUTO_ROTATE_PDF = "/api/v1/misc/auto-rotate-pdf"
     AUTO_SPLIT_PDF = "/api/v1/misc/auto-split-pdf"
     COMPRESS_PDF = "/api/v1/misc/compress-pdf"
     DELETE_ATTACHMENT = "/api/v1/misc/delete-attachment"
@@ -1727,6 +1778,7 @@ OPERATIONS: dict[ToolEndpoint, ParamToolModelType] = {
     ToolEndpoint.ADD_PAGE_NUMBERS: AddPageNumbersParams,
     ToolEndpoint.ADD_STAMP: AddStampParams,
     ToolEndpoint.AUTO_RENAME: AutoRenameParams,
+    ToolEndpoint.AUTO_ROTATE_PDF: AutoRotatePdfParams,
     ToolEndpoint.AUTO_SPLIT_PDF: AutoSplitPdfParams,
     ToolEndpoint.COMPRESS_PDF: CompressPdfParams,
     ToolEndpoint.DELETE_ATTACHMENT: DeleteAttachmentParams,
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index d02e60b84c..d02925fe46 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -2175,6 +2175,73 @@ secureWorkflowDesc = "Secures PDF documents by removing potentially malicious co
 description = "This tool will automatically rename PDF files based on their content. It analyzes the document to find the most suitable title from the text."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Auto Rotate"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Confidence threshold"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "OCR only"
+text = "Text only"
+title = "Detection method"
+
+[autoRotate.error]
+failed = "An error occurred while auto-rotating the PDF."
+
+[autoRotate.inferUndetected]
+title = "Rotate low confidence pages to match"
+
+[autoRotate.report]
+applied = "{{degrees}}° CW"
+confidenceValue = "Confidence {{value}}"
+noChange = "No change"
+pageLabel = "Page {{number}}"
+summary = "{{rotated}} of {{total}} pages rotated, {{unchanged}} left as they are"
+title = "Detection report"
+
+[autoRotate.report.method]
+inferred = "Matched"
+none = "Skipped"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Below threshold"
+blankPage = "Page is blank"
+inferredFromDocument = "Same as the other pages"
+noDominantDirection = "Mixed text directions"
+osdFailed = "No readable text found"
+osdNoVerdict = "Could not tell which way up"
+tesseractUnavailable = "OCR not installed"
+tooFewGlyphs = "Too little text"
+
+[autoRotate.results]
+title = "Auto Rotate Results"
+
+[autoRotate.settings]
+title = "Settings"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "How certain the check has to be before a page is turned. Lower it to rotate more pages, raise it to leave more pages untouched."
+title = "Confidence threshold"
+
+[autoRotate.tooltip.description]
+text = "Works out which way up each page should be and turns it the right way round. Pages that are already upright are left alone."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto reads the text on the page first, then looks at the page as an image if that is not enough. Text only skips the image check, which is quickest for documents that were never scanned. OCR only treats every page as an image."
+title = "Detection method"
+
+[autoRotate.tooltip.header]
+title = "Auto Rotate"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Blank or nearly blank pages cannot be checked on their own. When every page that could be read needs the same turn, these pages are turned to match them."
+title = "Rotate low confidence pages to match"
+
 [autoSizeSplitPDF]
 tags = "pdf,split,document,organization"
 
@@ -4494,6 +4561,11 @@ desc = "Auto renames a PDF file based on its detected header"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 title = "Auto Rename PDF File"
 
+[home.autoRotate]
+desc = "Detect each page's orientation and rotate it upright automatically."
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "Auto Rotate"
+
 [home.autoSizeSplitPDF]
 tags = "auto,split,size"
 title = "Auto Split by Size/Count"
diff --git a/frontend/editor/public/og-metadata.json b/frontend/editor/public/og-metadata.json
index 3053b4fd9e..07cd6f0d27 100644
--- a/frontend/editor/public/og-metadata.json
+++ b/frontend/editor/public/og-metadata.json
@@ -100,6 +100,11 @@
       "title": "Rotate - Stirling PDF",
       "description": "Easily rotate your PDFs."
     },
+    "autoRotate": {
+      "image": "/og_images/home.png",
+      "title": "Auto Rotate - Stirling PDF",
+      "description": "Detect each page's orientation and rotate it upright automatically."
+    },
     "annotate": {
       "image": "/og_images/annotate.png",
       "title": "Annotate - Stirling PDF",
@@ -551,6 +556,7 @@
     "/ocr": "ocr",
     "/add-image": "addImage",
     "/rotate": "rotate",
+    "/auto-rotate": "autoRotate",
     "/annotate": "annotate",
     "/scanner-image-split": "scannerImageSplit",
     "/edit-table-of-contents": "editTableOfContents",
diff --git a/frontend/editor/public/og-metadata.saas.json b/frontend/editor/public/og-metadata.saas.json
index 39f6bf414e..da1ab7fc66 100644
--- a/frontend/editor/public/og-metadata.saas.json
+++ b/frontend/editor/public/og-metadata.saas.json
@@ -101,6 +101,11 @@
       "title": "Rotate - Stirling PDF",
       "description": "Easily rotate your PDFs."
     },
+    "autoRotate": {
+      "image": "/og_images/home.png",
+      "title": "Auto Rotate - Stirling PDF",
+      "description": "Detect each page's orientation and rotate it upright automatically."
+    },
     "annotate": {
       "image": "/og_images/annotate.png",
       "title": "Annotate - Stirling PDF",
@@ -564,6 +569,7 @@
     "/ocr": "ocr",
     "/add-image": "addImage",
     "/rotate": "rotate",
+    "/auto-rotate": "autoRotate",
     "/annotate": "annotate",
     "/scanner-image-split": "scannerImageSplit",
     "/edit-table-of-contents": "editTableOfContents",
diff --git a/frontend/editor/src/core/components/tools/autoRotate/AutoRotateAutomationSettings.tsx b/frontend/editor/src/core/components/tools/autoRotate/AutoRotateAutomationSettings.tsx
new file mode 100644
index 0000000000..ac828c1b59
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/autoRotate/AutoRotateAutomationSettings.tsx
@@ -0,0 +1,83 @@
+import { Stack, Text, NumberInput } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import {
+  AutoRotateParameters,
+  AutoRotateDetectionMode,
+} from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
+import ButtonSelector from "@app/components/shared/ButtonSelector";
+import { Checkbox } from "@app/ui/Checkbox";
+
+interface AutoRotateAutomationSettingsProps {
+  parameters: AutoRotateParameters;
+  onParameterChange: <K extends keyof AutoRotateParameters>(
+    key: K,
+    value: AutoRotateParameters[K],
+  ) => void;
+  disabled?: boolean;
+}
+
+const AutoRotateAutomationSettings = ({
+  parameters,
+  onParameterChange,
+  disabled = false,
+}: AutoRotateAutomationSettingsProps) => {
+  const { t } = useTranslation();
+
+  return (
+    <Stack gap="md">
+      <Text size="sm" fw={500}>
+        {t("autoRotate.detectionMode.title", "Detection method")}
+      </Text>
+
+      <ButtonSelector
+        value={parameters.detectionMode}
+        onChange={(value: AutoRotateDetectionMode) =>
+          onParameterChange("detectionMode", value)
+        }
+        options={[
+          { value: "auto", label: t("autoRotate.detectionMode.auto", "Auto") },
+          {
+            value: "text",
+            label: t("autoRotate.detectionMode.text", "Text only"),
+          },
+          {
+            value: "osd",
+            label: t("autoRotate.detectionMode.osd", "OCR only"),
+          },
+        ]}
+        disabled={disabled}
+      />
+
+      <NumberInput
+        label={t(
+          "autoRotate.confidenceThreshold.title",
+          "Confidence threshold",
+        )}
+        min={0}
+        step={1}
+        disabled={disabled}
+        value={parameters.confidenceThreshold}
+        onChange={(value) =>
+          onParameterChange(
+            "confidenceThreshold",
+            typeof value === "number" ? value : 14,
+          )
+        }
+      />
+
+      <Checkbox
+        label={t(
+          "autoRotate.inferUndetected.title",
+          "Rotate low confidence pages to match",
+        )}
+        disabled={disabled}
+        checked={parameters.inferUndetected}
+        onChange={(event) =>
+          onParameterChange("inferUndetected", event.currentTarget.checked)
+        }
+      />
+    </Stack>
+  );
+};
+
+export default AutoRotateAutomationSettings;
diff --git a/frontend/editor/src/core/components/tools/autoRotate/AutoRotateReport.tsx b/frontend/editor/src/core/components/tools/autoRotate/AutoRotateReport.tsx
new file mode 100644
index 0000000000..0445864ff8
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/autoRotate/AutoRotateReport.tsx
@@ -0,0 +1,191 @@
+import {
+  Stack,
+  Text,
+  Badge,
+  ScrollArea,
+  Group,
+  Divider,
+  Box,
+} from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import type { TFunction } from "i18next";
+import {
+  AutoRotateReport as ReportData,
+  AutoRotatePageResult,
+} from "@app/hooks/tools/autoRotate/useAutoRotateOperation";
+
+interface AutoRotateReportProps {
+  reports: { fileName: string; report: ReportData }[];
+}
+
+const methodBadge = (t: TFunction, method: AutoRotatePageResult["method"]) => {
+  switch (method) {
+    case "text":
+      return (
+        <Badge size="sm" variant="light" color="blue">
+          {t("autoRotate.report.method.text", "Text")}
+        </Badge>
+      );
+    case "osd":
+      return (
+        <Badge size="sm" variant="light" color="teal">
+          {t("autoRotate.report.method.osd", "OCR")}
+        </Badge>
+      );
+    case "inferred":
+      return (
+        <Badge size="sm" variant="light" color="grape">
+          {t("autoRotate.report.method.inferred", "Matched")}
+        </Badge>
+      );
+    default:
+      return (
+        <Badge size="sm" variant="light" color="gray">
+          {t("autoRotate.report.method.none", "Skipped")}
+        </Badge>
+      );
+  }
+};
+
+const noteLabel = (t: TFunction, note: string | null | undefined): string => {
+  switch (note) {
+    case "tooFewGlyphs":
+      return t("autoRotate.report.note.tooFewGlyphs", "Too little text");
+    case "noDominantDirection":
+      return t(
+        "autoRotate.report.note.noDominantDirection",
+        "Mixed text directions",
+      );
+    case "tesseractUnavailable":
+      return t(
+        "autoRotate.report.note.tesseractUnavailable",
+        "OCR not installed",
+      );
+    case "blankPage":
+      return t("autoRotate.report.note.blankPage", "Page is blank");
+    case "osdFailed":
+      return t("autoRotate.report.note.osdFailed", "No readable text found");
+    case "osdNoVerdict":
+      return t(
+        "autoRotate.report.note.osdNoVerdict",
+        "Could not tell which way up",
+      );
+    case "belowThreshold":
+      return t("autoRotate.report.note.belowThreshold", "Below threshold");
+    case "inferredFromDocument":
+      return t(
+        "autoRotate.report.note.inferredFromDocument",
+        "Same as the other pages",
+      );
+    default:
+      return note ?? "";
+  }
+};
+
+// Text confidence is a glyph-dominance percentage; OCR confidence is an
+// unbounded score. Format them differently so the numbers stay interpretable
+// when tuning the threshold.
+const confidenceValue = (page: AutoRotatePageResult): string | null => {
+  if (page.confidence == null) return null;
+  return page.method === "text"
+    ? `${page.confidence.toFixed(1)}%`
+    : page.confidence.toFixed(2);
+};
+
+const AutoRotateReport = ({ reports }: AutoRotateReportProps) => {
+  const { t } = useTranslation();
+
+  if (reports.length === 0) return null;
+
+  return (
+    <Stack gap="md">
+      {reports.map(({ fileName, report }) => (
+        <Stack gap="xs" key={fileName}>
+          {reports.length > 1 && (
+            <Text size="sm" fw={500} truncate>
+              {fileName}
+            </Text>
+          )}
+          <Text size="xs" c="dimmed">
+            {t("autoRotate.report.summary", {
+              defaultValue:
+                "{{rotated}} of {{total}} pages rotated, {{unchanged}} left as they are",
+              rotated: report.pagesToRotate,
+              total: report.totalPages,
+              unchanged: report.totalPages - report.pagesToRotate,
+            })}
+          </Text>
+
+          {/* A per-page list rather than a table: the tool panel is too narrow
+              for five columns, which truncated the badges and wrapped notes. */}
+          <ScrollArea.Autosize mah={300}>
+            <Stack gap={0}>
+              {report.pages.map((page, index) => {
+                const confidence = confidenceValue(page);
+                const note = noteLabel(t, page.note);
+                return (
+                  <Box key={page.pageNumber}>
+                    {index > 0 && <Divider />}
+                    <Stack gap={2} py={6}>
+                      <Group justify="space-between" gap="xs" wrap="nowrap">
+                        <Text size="sm" fw={500}>
+                          {t("autoRotate.report.pageLabel", {
+                            defaultValue: "Page {{number}}",
+                            number: page.pageNumber,
+                          })}
+                        </Text>
+                        <Text
+                          size="sm"
+                          fw={page.apply ? 600 : 400}
+                          c={page.apply ? undefined : "dimmed"}
+                          style={{ fontVariantNumeric: "tabular-nums" }}
+                        >
+                          {page.apply
+                            ? t("autoRotate.report.applied", {
+                                defaultValue: "{{degrees}}° CW",
+                                degrees: page.correction,
+                              })
+                            : t("autoRotate.report.noChange", "No change")}
+                        </Text>
+                      </Group>
+                      {/* Second line mirrors the first: detail under the page
+                          number, method badge under the rotation. */}
+                      <Group
+                        justify="space-between"
+                        gap="xs"
+                        wrap="nowrap"
+                        align="flex-start"
+                      >
+                        <Text
+                          size="xs"
+                          c="dimmed"
+                          style={{ fontVariantNumeric: "tabular-nums" }}
+                        >
+                          {[
+                            confidence &&
+                              t("autoRotate.report.confidenceValue", {
+                                defaultValue: "Confidence {{value}}",
+                                value: confidence,
+                              }),
+                            note,
+                          ]
+                            .filter(Boolean)
+                            .join(" · ")}
+                        </Text>
+                        <Box style={{ flexShrink: 0 }}>
+                          {methodBadge(t, page.method)}
+                        </Box>
+                      </Group>
+                    </Stack>
+                  </Box>
+                );
+              })}
+            </Stack>
+          </ScrollArea.Autosize>
+        </Stack>
+      ))}
+    </Stack>
+  );
+};
+
+export default AutoRotateReport;
diff --git a/frontend/editor/src/core/components/tools/autoRotate/AutoRotateSettings.tsx b/frontend/editor/src/core/components/tools/autoRotate/AutoRotateSettings.tsx
new file mode 100644
index 0000000000..ed3d22965e
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/autoRotate/AutoRotateSettings.tsx
@@ -0,0 +1,89 @@
+import { Stack, Text, NumberInput } from "@mantine/core";
+import { SegmentedControl } from "@app/ui/SegmentedControl";
+import { Checkbox } from "@app/ui/Checkbox";
+import { useTranslation } from "react-i18next";
+import {
+  AutoRotateParametersHook,
+  AutoRotateDetectionMode,
+} from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
+
+interface AutoRotateSettingsProps {
+  parameters: AutoRotateParametersHook;
+  disabled?: boolean;
+}
+
+// Explanatory copy for these controls lives in the step tooltip
+// (useAutoRotateTips), so the panel itself stays to labels only.
+const AutoRotateSettings = ({
+  parameters,
+  disabled = false,
+}: AutoRotateSettingsProps) => {
+  const { t } = useTranslation();
+
+  return (
+    <Stack gap="md">
+      <Stack gap="xs">
+        <Text size="sm" fw={500}>
+          {t("autoRotate.detectionMode.title", "Detection method")}
+        </Text>
+        <SegmentedControl<AutoRotateDetectionMode>
+          fullWidth
+          disabled={disabled}
+          ariaLabel={t("autoRotate.detectionMode.title", "Detection method")}
+          value={parameters.parameters.detectionMode}
+          onChange={(value) =>
+            parameters.updateParameter("detectionMode", value)
+          }
+          options={[
+            {
+              value: "auto",
+              label: t("autoRotate.detectionMode.auto", "Auto"),
+            },
+            {
+              value: "text",
+              label: t("autoRotate.detectionMode.text", "Text only"),
+            },
+            {
+              value: "osd",
+              label: t("autoRotate.detectionMode.osd", "OCR only"),
+            },
+          ]}
+        />
+      </Stack>
+
+      <NumberInput
+        label={t(
+          "autoRotate.confidenceThreshold.title",
+          "Confidence threshold",
+        )}
+        min={0}
+        step={1}
+        disabled={disabled}
+        value={parameters.parameters.confidenceThreshold}
+        onChange={(value) =>
+          parameters.updateParameter(
+            "confidenceThreshold",
+            typeof value === "number" ? value : 14,
+          )
+        }
+      />
+
+      <Checkbox
+        label={t(
+          "autoRotate.inferUndetected.title",
+          "Rotate low confidence pages to match",
+        )}
+        disabled={disabled}
+        checked={parameters.parameters.inferUndetected}
+        onChange={(event) =>
+          parameters.updateParameter(
+            "inferUndetected",
+            event.currentTarget.checked,
+          )
+        }
+      />
+    </Stack>
+  );
+};
+
+export default AutoRotateSettings;
diff --git a/frontend/editor/src/core/components/tooltips/useAutoRotateTips.ts b/frontend/editor/src/core/components/tooltips/useAutoRotateTips.ts
new file mode 100644
index 0000000000..6d0bc20864
--- /dev/null
+++ b/frontend/editor/src/core/components/tooltips/useAutoRotateTips.ts
@@ -0,0 +1,47 @@
+import { useTranslation } from "react-i18next";
+import { TooltipContent } from "@app/types/tips";
+
+export const useAutoRotateTips = (): TooltipContent => {
+  const { t } = useTranslation();
+
+  return {
+    header: {
+      title: t("autoRotate.tooltip.header.title", "Auto Rotate"),
+    },
+    tips: [
+      {
+        description: t(
+          "autoRotate.tooltip.description.text",
+          "Works out which way up each page should be and turns it the right way round. Pages that are already upright are left alone.",
+        ),
+      },
+      {
+        title: t("autoRotate.tooltip.detectionMode.title", "Detection method"),
+        description: t(
+          "autoRotate.tooltip.detectionMode.text",
+          "Auto reads the text on the page first, then looks at the page as an image if that is not enough. Text only skips the image check, which is quickest for documents that were never scanned. OCR only treats every page as an image.",
+        ),
+      },
+      {
+        title: t(
+          "autoRotate.tooltip.confidenceThreshold.title",
+          "Confidence threshold",
+        ),
+        description: t(
+          "autoRotate.tooltip.confidenceThreshold.text",
+          "How certain the check has to be before a page is turned. Lower it to rotate more pages, raise it to leave more pages untouched.",
+        ),
+      },
+      {
+        title: t(
+          "autoRotate.tooltip.inferUndetected.title",
+          "Rotate low confidence pages to match",
+        ),
+        description: t(
+          "autoRotate.tooltip.inferUndetected.text",
+          "Blank or nearly blank pages cannot be checked on their own. When every page that could be read needs the same turn, these pages are turned to match them.",
+        ),
+      },
+    ],
+  };
+};
diff --git a/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx b/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx
index 120f955b42..16b69d6983 100644
--- a/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx
+++ b/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx
@@ -45,6 +45,7 @@ import { usePrototypeToolRegistry } from "@app/data/usePrototypeToolRegistry";
 import { flattenOperationConfig } from "@app/hooks/tools/flatten/useFlattenOperation";
 import { redactOperationConfig } from "@app/hooks/tools/redact/useRedactOperation";
 import { rotateOperationConfig } from "@app/hooks/tools/rotate/useRotateOperation";
+import { autoRotateOperationConfig } from "@app/hooks/tools/autoRotate/useAutoRotateOperation";
 import { changeMetadataOperationConfig } from "@app/hooks/tools/changeMetadata/useChangeMetadataOperation";
 import { signOperationConfig } from "@app/hooks/tools/sign/useSignOperation";
 import { cropOperationConfig } from "@app/hooks/tools/crop/useCropOperation";
@@ -634,6 +635,31 @@ export function useTranslatedToolCatalog(): TranslatedToolCatalog {
         ),
         synonyms: getSynonyms(t, "rotate"),
       },
+      autoRotate: {
+        icon: (
+          <LocalIcon
+            icon="screen-rotation-alt-rounded"
+            width="1.5rem"
+            height="1.5rem"
+          />
+        ),
+        name: t("home.autoRotate.title", "Auto Rotate"),
+        component: lazy(() => import("@app/tools/AutoRotate")),
+        description: t(
+          "home.autoRotate.desc",
+          "Detect each page's orientation and rotate it upright automatically.",
+        ),
+        categoryId: ToolCategoryId.STANDARD_TOOLS,
+        subcategoryId: SubcategoryId.PAGE_FORMATTING,
+        maxFiles: -1,
+        endpoints: ["auto-rotate-pdf"],
+        operationConfig: asRegistryConfig(autoRotateOperationConfig),
+        automationSettings: lazySettings(
+          () =>
+            import("@app/components/tools/autoRotate/AutoRotateAutomationSettings"),
+        ),
+        synonyms: getSynonyms(t, "autoRotate"),
+      },
       split: {
         icon: (
           <LocalIcon
diff --git a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
new file mode 100644
index 0000000000..6460a66cfa
--- /dev/null
+++ b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
@@ -0,0 +1,175 @@
+import { useState, useCallback } from "react";
+import { useTranslation } from "react-i18next";
+import apiClient from "@app/services/apiClient";
+import {
+  getPdfiumModule,
+  openRawDocumentSafe,
+  setPageRotation,
+  degreesToPdfiumRotation,
+  saveRawDocument,
+  closeDocAndFreeBuffer,
+} from "@app/services/pdfiumService";
+import {
+  useToolOperation,
+  defineCustomTool,
+  CustomProcessorResult,
+  ToolOperationHook,
+} from "@app/hooks/tools/shared/useToolOperation";
+import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
+import {
+  AutoRotateParameters,
+  defaultParameters,
+} from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
+
+export const AUTO_ROTATE_ENDPOINT = "/api/v1/misc/auto-rotate-pdf";
+
+export type AutoRotateMethod = "text" | "osd" | "inferred" | "none";
+
+/** Mirrors the backend's AutoRotateAnalysisResult.PageResult. */
+export interface AutoRotatePageResult {
+  pageNumber: number;
+  currentRotation: number;
+  correction: number;
+  /** Percentage of glyphs sharing a direction (text) or Tesseract OSD score (osd). */
+  confidence: number | null;
+  method: AutoRotateMethod;
+  apply: boolean;
+  note?: string | null;
+}
+
+export interface AutoRotateReport {
+  pages: AutoRotatePageResult[];
+  totalPages: number;
+  pagesToRotate: number;
+  detectedByText: number;
+  detectedByOsd: number;
+  inferred: number;
+  undetected: number;
+}
+
+/**
+ * Detection needs the server (page rendering and OCR); setting /Rotate does not.
+ * So the file is uploaded once for the analysis pass and the resulting rotations
+ * are applied in the browser with PDFium, as the page editor does. Uploading a
+ * second time to apply would double the bandwidth, the PDFBox load and the job's
+ * resource accounting for what amounts to one dictionary entry per page.
+ *
+ * onReport receives the report from the analysis pass; the registry (automation)
+ * config passes no callback.
+ */
+const createAutoRotateProcessor =
+  (onReport?: (report: AutoRotateReport, fileName: string) => void) =>
+  async (
+    parameters: AutoRotateParameters,
+    files: File[],
+  ): Promise<CustomProcessorResult> => {
+    const outputs: File[] = [];
+
+    for (const inputFile of files) {
+      const analysisForm = new FormData();
+      analysisForm.append("fileInput", inputFile);
+      analysisForm.append("detectionMode", parameters.detectionMode);
+      analysisForm.append(
+        "confidenceThreshold",
+        String(parameters.confidenceThreshold),
+      );
+      analysisForm.append(
+        "inferUndetected",
+        String(parameters.inferUndetected),
+      );
+      analysisForm.append("dryRun", "true");
+
+      const analysis = await apiClient.post<AutoRotateReport>(
+        AUTO_ROTATE_ENDPOINT,
+        analysisForm,
+      );
+      const report = analysis.data;
+      onReport?.(report, inputFile.name);
+
+      // The report carries each page's existing rotation, so the absolute target
+      // is known without reading the PDF. Corrections are additive, matching the
+      // server's own apply path.
+      const targets = report.pages
+        .filter((page) => page.apply && page.correction !== 0)
+        .map((page) => ({
+          pageIndex: page.pageNumber - 1,
+          absoluteRotation:
+            (((page.currentRotation + page.correction) % 360) + 360) % 360,
+        }));
+
+      // Nothing to fix: pass the input through unchanged so the flow completes
+      // and the report explains why (all upright, or nothing detected).
+      if (targets.length === 0) {
+        outputs.push(inputFile);
+        continue;
+      }
+
+      const pdfium = await getPdfiumModule();
+      const docPtr = await openRawDocumentSafe(await inputFile.arrayBuffer());
+      try {
+        for (const { pageIndex, absoluteRotation } of targets) {
+          await setPageRotation(
+            docPtr,
+            pageIndex,
+            degreesToPdfiumRotation(absoluteRotation),
+          );
+        }
+        const rotatedBytes = await saveRawDocument(docPtr);
+        const baseName = inputFile.name.replace(/\.pdf$/i, "");
+        outputs.push(
+          new File([rotatedBytes], `${baseName}_auto_rotated.pdf`, {
+            type: "application/pdf",
+          }),
+        );
+      } finally {
+        closeDocAndFreeBuffer(pdfium, docPtr);
+      }
+    }
+
+    return { files: outputs, consumedAllInputs: true };
+  };
+
+// Static config for the registry/automation: same processing, no report UI.
+export const autoRotateOperationConfig = defineCustomTool<AutoRotateParameters>(
+  {
+    operationType: "autoRotate",
+    endpoint: AUTO_ROTATE_ENDPOINT,
+    customProcessor: createAutoRotateProcessor(),
+    defaultParameters,
+  },
+);
+
+export interface AutoRotateOperationHook extends ToolOperationHook<AutoRotateParameters> {
+  /** Per-file detection reports from the last run, keyed in run order. */
+  reports: { fileName: string; report: AutoRotateReport }[];
+}
+
+export const useAutoRotateOperation = (): AutoRotateOperationHook => {
+  const { t } = useTranslation();
+  const [reports, setReports] = useState<
+    { fileName: string; report: AutoRotateReport }[]
+  >([]);
+
+  const onReport = useCallback((report: AutoRotateReport, fileName: string) => {
+    setReports((previous) => [...previous, { fileName, report }]);
+  }, []);
+
+  const operation = useToolOperation<AutoRotateParameters>({
+    ...autoRotateOperationConfig,
+    customProcessor: useCallback(
+      async (parameters: AutoRotateParameters, files: File[]) => {
+        setReports([]);
+        return createAutoRotateProcessor(onReport)(parameters, files);
+      },
+      [onReport],
+    ),
+    getErrorMessage: createStandardErrorHandler(
+      t(
+        "autoRotate.error.failed",
+        "An error occurred while auto-rotating the PDF.",
+      ),
+    ),
+  });
+
+  return { ...operation, reports };
+};
diff --git a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts
new file mode 100644
index 0000000000..fd61395eb1
--- /dev/null
+++ b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts
@@ -0,0 +1,31 @@
+import { BaseParameters } from "@app/types/parameters";
+import {
+  useBaseParameters,
+  BaseParametersHook,
+} from "@app/hooks/tools/shared/useBaseParameters";
+
+export type AutoRotateDetectionMode = "auto" | "text" | "osd";
+
+export interface AutoRotateParameters extends BaseParameters {
+  /** auto = embedded-text direction first, OSD fallback; text/osd force one method. */
+  detectionMode: AutoRotateDetectionMode;
+  /** Minimum Tesseract OSD confidence before a correction is applied. */
+  confidenceThreshold: number;
+  /** Give undetected pages the document's consensus rotation when its pages agree. */
+  inferUndetected: boolean;
+}
+
+export const defaultParameters: AutoRotateParameters = {
+  detectionMode: "auto",
+  confidenceThreshold: 14,
+  inferUndetected: true,
+};
+
+export type AutoRotateParametersHook = BaseParametersHook<AutoRotateParameters>;
+
+export const useAutoRotateParameters = (): AutoRotateParametersHook =>
+  useBaseParameters({
+    defaultParameters,
+    endpointName: "auto-rotate-pdf",
+    validateFn: (params) => params.confidenceThreshold >= 0,
+  });
diff --git a/frontend/editor/src/core/services/pdfExportService.ts b/frontend/editor/src/core/services/pdfExportService.ts
index 1883d9efc9..2e32319207 100644
--- a/frontend/editor/src/core/services/pdfExportService.ts
+++ b/frontend/editor/src/core/services/pdfExportService.ts
@@ -5,6 +5,7 @@ import {
   saveRawDocument,
   importPages,
   setPageRotation,
+  degreesToPdfiumRotation,
   addNewPage,
 } from "@app/services/pdfiumService";
 import { downloadFileWithPolicy } from "@app/services/exportWithPolicy";
@@ -354,22 +355,5 @@ export class PDFExportService {
   }
 }
 
-/**
- * Convert degrees (0, 90, 180, 270) to PDFium rotation enum (0, 1, 2, 3).
- */
-function degreesToPdfiumRotation(degrees: number): number {
-  const normalized = ((degrees % 360) + 360) % 360;
-  switch (normalized) {
-    case 90:
-      return 1;
-    case 180:
-      return 2;
-    case 270:
-      return 3;
-    default:
-      return 0;
-  }
-}
-
 // Export singleton instance
 export const pdfExportService = new PDFExportService();
diff --git a/frontend/editor/src/core/services/pdfiumService.ts b/frontend/editor/src/core/services/pdfiumService.ts
index 107e36d8ca..a9a44c693b 100644
--- a/frontend/editor/src/core/services/pdfiumService.ts
+++ b/frontend/editor/src/core/services/pdfiumService.ts
@@ -1165,6 +1165,24 @@ export async function importPages(
   );
 }
 
+/**
+ * Convert degrees (0, 90, 180, 270) to the PDFium rotation enum (0, 1, 2, 3).
+ * Lives here beside setPageRotation, which is the only thing that consumes it.
+ */
+export function degreesToPdfiumRotation(degrees: number): number {
+  const normalized = ((degrees % 360) + 360) % 360;
+  switch (normalized) {
+    case 90:
+      return 1;
+    case 180:
+      return 2;
+    case 270:
+      return 3;
+    default:
+      return 0;
+  }
+}
+
 /**
  * Set page rotation on a raw document.
  * @param rotation 0, 1, 2, 3 for 0°, 90°, 180°, 270°
diff --git a/frontend/editor/src/core/tools/AutoRotate.tsx b/frontend/editor/src/core/tools/AutoRotate.tsx
new file mode 100644
index 0000000000..ac0643ea43
--- /dev/null
+++ b/frontend/editor/src/core/tools/AutoRotate.tsx
@@ -0,0 +1,70 @@
+import { useTranslation } from "react-i18next";
+import { createToolFlow } from "@app/components/tools/shared/createToolFlow";
+import AutoRotateSettings from "@app/components/tools/autoRotate/AutoRotateSettings";
+import AutoRotateReport from "@app/components/tools/autoRotate/AutoRotateReport";
+import { useAutoRotateParameters } from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
+import { useAutoRotateOperation } from "@app/hooks/tools/autoRotate/useAutoRotateOperation";
+import { useBaseTool } from "@app/hooks/tools/shared/useBaseTool";
+import { BaseToolProps, ToolComponent } from "@app/types/tool";
+import { useAutoRotateTips } from "@app/components/tooltips/useAutoRotateTips";
+
+const AutoRotate = (props: BaseToolProps) => {
+  const { t } = useTranslation();
+  const autoRotateTips = useAutoRotateTips();
+
+  // Instantiated here (not inside useBaseTool) so the component can read the
+  // per-page detection reports the operation hook additionally exposes.
+  const operation = useAutoRotateOperation();
+
+  const base = useBaseTool(
+    "autoRotate",
+    useAutoRotateParameters,
+    () => operation,
+    props,
+  );
+
+  return createToolFlow({
+    files: {
+      selectedFiles: base.selectedFiles,
+      isCollapsed: base.hasResults,
+    },
+    steps: [
+      {
+        title: t("autoRotate.settings.title", "Settings"),
+        isCollapsed: base.settingsCollapsed,
+        onCollapsedClick: base.settingsCollapsed
+          ? base.handleSettingsReset
+          : undefined,
+        tooltip: autoRotateTips,
+        content: (
+          <AutoRotateSettings
+            parameters={base.params}
+            disabled={base.endpointLoading}
+          />
+        ),
+      },
+      {
+        title: t("autoRotate.report.title", "Detection report"),
+        isVisible: base.hasResults && operation.reports.length > 0,
+        content: <AutoRotateReport reports={operation.reports} />,
+      },
+    ],
+    executeButton: {
+      text: t("autoRotate.submit", "Auto Rotate"),
+      isVisible: !base.hasResults,
+      loadingText: t("loading"),
+      onClick: base.handleExecute,
+      endpointEnabled: base.endpointEnabled,
+      paramsValid: base.params.validateParameters(),
+    },
+    review: {
+      isVisible: base.hasResults,
+      operation: base.operation,
+      title: t("autoRotate.results.title", "Auto Rotate Results"),
+      onFileClick: base.handleThumbnailClick,
+      onUndo: base.handleUndo,
+    },
+  });
+};
+
+export default AutoRotate as ToolComponent;
diff --git a/frontend/editor/src/core/types/toolApiTypes.ts b/frontend/editor/src/core/types/toolApiTypes.ts
index d62e13b20f..af7339d936 100644
--- a/frontend/editor/src/core/types/toolApiTypes.ts
+++ b/frontend/editor/src/core/types/toolApiTypes.ts
@@ -201,6 +201,41 @@ export interface AddWatermarkRequest {
    */
   widthSpacer?: number;
 }
+export interface AutoRotatePdfRequest {
+  /**
+   * Minimum Tesseract OSD orientation confidence required before a correction is applied. Matches OCRmyPDF's --rotate-pages-threshold scale
+   */
+  confidenceThreshold?: number;
+  /**
+   * Detection method. 'auto' tries embedded-text direction first and falls back to Tesseract OSD for pages without usable text; 'text' uses only embedded-text direction; 'osd' forces Tesseract OSD for every page
+   */
+  detectionMode?: "auto" | "text" | "osd";
+  /**
+   * If true, no rotation is applied; returns a JSON report of the per-page detection results instead of a PDF
+   */
+  dryRun?: boolean;
+  /**
+   * When a page cannot be decided on its own but the pages that could be decided agree on a single correction for that same current rotation, apply that shared correction to the undecided page. Handles documents rotated uniformly where some pages are too sparse to detect alone
+   */
+  inferUndetected?: boolean;
+  /**
+   * Optional pre-computed corrections to apply without running detection. Pages not listed are left unchanged, and a page may only appear once
+   */
+  pageRotations?: PageRotation[];
+}
+/**
+ * Optional pre-computed corrections to apply without running detection. Pages not listed are left unchanged, and a page may only appear once
+ */
+export interface PageRotation {
+  /**
+   * 1-based page number to rotate
+   */
+  pageNumber: number;
+  /**
+   * Additional clockwise rotation to add to the page's current rotation, in degrees. Must be a multiple of 90
+   */
+  rotation: number;
+}
 export interface AutoSplitPdfRequest {
   /**
    * Flag indicating if the duplex mode is active, where the page after the divider also gets removed.
@@ -1373,6 +1408,7 @@ export type ToolEndpoint =
   | "/api/v1/misc/add-page-numbers"
   | "/api/v1/misc/add-stamp"
   | "/api/v1/misc/auto-rename"
+  | "/api/v1/misc/auto-rotate-pdf"
   | "/api/v1/misc/auto-split-pdf"
   | "/api/v1/misc/compress-pdf"
   | "/api/v1/misc/decompress-pdf"
@@ -1463,6 +1499,7 @@ export interface ToolApiParams {
   "/api/v1/misc/add-page-numbers": AddPageNumbersRequest;
   "/api/v1/misc/add-stamp": AddStampRequest;
   "/api/v1/misc/auto-rename": ExtractHeaderRequest;
+  "/api/v1/misc/auto-rotate-pdf": AutoRotatePdfRequest;
   "/api/v1/misc/auto-split-pdf": AutoSplitPdfRequest;
   "/api/v1/misc/compress-pdf": OptimizePdfRequest;
   "/api/v1/misc/decompress-pdf": MiscDecompressPdfRequest;
@@ -1554,6 +1591,7 @@ export const TOOL_ENDPOINTS = [
   "/api/v1/misc/add-page-numbers",
   "/api/v1/misc/add-stamp",
   "/api/v1/misc/auto-rename",
+  "/api/v1/misc/auto-rotate-pdf",
   "/api/v1/misc/auto-split-pdf",
   "/api/v1/misc/compress-pdf",
   "/api/v1/misc/decompress-pdf",
diff --git a/frontend/editor/src/core/types/toolId.ts b/frontend/editor/src/core/types/toolId.ts
index 1fc231b427..13799ad869 100644
--- a/frontend/editor/src/core/types/toolId.ts
+++ b/frontend/editor/src/core/types/toolId.ts
@@ -31,6 +31,7 @@ export const CORE_REGULAR_TOOL_IDS = [
   "ocr",
   "addImage",
   "rotate",
+  "autoRotate",
   "annotate",
   "scannerImageSplit",
   "editTableOfContents",

From 6933d11bce683768c5b487110191dd9b6e6c1bba Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Fri, 31 Jul 2026 14:20:07 +0100
Subject: [PATCH 010/122] Type-check Storybook files (#7223)

# Description of Changes
Storybook files aren't currently being type-checked, but they should be.
A bunch of them had a dodgy import in them (which didn't affect anything
because it was just an `import type` but still worth fixing).
---
 .taskfiles/frontend.yml                       |  8 +++++
 frontend/.storybook/declarations.d.ts         |  5 ++-
 frontend/.storybook/tsconfig.json             | 36 +++++++------------
 .../editor/src/core/tokens/Tokens.stories.tsx |  2 +-
 .../editor/src/core/ui/ActionIcon.stories.tsx |  2 +-
 .../editor/src/core/ui/Button.stories.tsx     |  2 +-
 .../src/core/ui/MethodBadge.stories.tsx       |  2 +-
 .../src/core/ui/SegmentedControl.stories.tsx  |  2 +-
 .../src/core/ui/StatusBadge.stories.tsx       |  2 +-
 .../src/portal/data/Endpoints.stories.tsx     |  2 +-
 .../editor/src/portal/data/Ops.stories.tsx    |  2 +-
 .../auth/ui/AuthScreens.stories.tsx           |  2 +-
 .../auth/ui/EmailPasswordForm.stories.tsx     |  2 +-
 .../auth/ui/ErrorMessage.stories.tsx          |  2 +-
 .../auth/ui/SupabaseLoginForm.stories.tsx     |  2 +-
 .../components/PricingBadge.stories.tsx       |  2 +-
 .../stages/ErrorStage.stories.tsx             |  2 +-
 .../routes/login/OAuthButtons.stories.tsx     |  2 +-
 18 files changed, 40 insertions(+), 39 deletions(-)

diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index 3c2113bf96..6a3e394f6d 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -388,6 +388,13 @@ tasks:
       - task: typecheck:_run
         vars: { PROJECT: editor/src/portal/tsconfig.json }
 
+  typecheck:storybook:
+    desc: "Typecheck Storybook config and stories"
+    deps: [prepare]
+    cmds:
+      - task: typecheck:_run
+        vars: { PROJECT: .storybook/tsconfig.json }
+
   typecheck:all:
     desc: "Typecheck all build variants"
     cmds:
@@ -399,6 +406,7 @@ tasks:
       - task: typecheck:scripts
       - task: typecheck:prototypes
       - task: typecheck:portal
+      - task: typecheck:storybook
 
   # ============================================================
   # Quality Gate
diff --git a/frontend/.storybook/declarations.d.ts b/frontend/.storybook/declarations.d.ts
index cc3fa9ae47..bfe637494f 100644
--- a/frontend/.storybook/declarations.d.ts
+++ b/frontend/.storybook/declarations.d.ts
@@ -1,4 +1,7 @@
-declare module "*.css" {}
+// Shorthand (no body) so it doesn't shadow the editor's `*.module.css`
+// declaration when both are in one program - an empty body would type every
+// CSS-module class as a missing property.
+declare module "*.css";
 
 // Vite `?raw` suffix imports a file's contents as a string (used in preview.tsx
 // to load the English translation TOML synchronously).
diff --git a/frontend/.storybook/tsconfig.json b/frontend/.storybook/tsconfig.json
index cb3f958b2a..52a07ca25f 100644
--- a/frontend/.storybook/tsconfig.json
+++ b/frontend/.storybook/tsconfig.json
@@ -1,25 +1,15 @@
 {
-  "compilerOptions": {
-    "target": "es2022",
-    "jsx": "react-jsx",
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "paths": {
-      "@app/*": [
-        "../editor/src/desktop/*",
-        "../editor/src/proprietary/*",
-        "../editor/src/core/*"
-      ],
-      "@core/*": ["../editor/src/core/*"],
-      "@proprietary/*": ["../editor/src/proprietary/*"],
-      "@portal/*": ["../editor/src/portal/*"],
-      "@public/*": ["../editor/public/*"]
-    },
-    "resolveJsonModule": true,
-    "esModuleInterop": true,
-    "forceConsistentCasingInFileNames": true,
-    "strict": true,
-    "skipLibCheck": true
-  },
-  "include": ["./**/*"]
+  // Extends the same tsconfig main.ts feeds to vite-tsconfig-paths, so the
+  // alias map can't drift from the one Storybook actually bundles with, and
+  // stories are checked under that resolution (@app/* = proprietary -> core).
+  // The per-layer typecheck projects also cover story files, but each resolves
+  // @app/* its own way - not the way the single Storybook build renders them.
+  "extends": "../editor/tsconfig.proprietary.vite.json",
+  "exclude": [],
+  "include": [
+    "./**/*",
+    "../editor/src/global.d.ts",
+    "../editor/src/**/*.stories.ts",
+    "../editor/src/**/*.stories.tsx"
+  ]
 }
diff --git a/frontend/editor/src/core/tokens/Tokens.stories.tsx b/frontend/editor/src/core/tokens/Tokens.stories.tsx
index 0003c06b17..48ba778e22 100644
--- a/frontend/editor/src/core/tokens/Tokens.stories.tsx
+++ b/frontend/editor/src/core/tokens/Tokens.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 
 const meta: Meta = {
   title: "Foundations/Design Tokens",
diff --git a/frontend/editor/src/core/ui/ActionIcon.stories.tsx b/frontend/editor/src/core/ui/ActionIcon.stories.tsx
index a4df1359dc..43130cb9d0 100644
--- a/frontend/editor/src/core/ui/ActionIcon.stories.tsx
+++ b/frontend/editor/src/core/ui/ActionIcon.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { ActionIcon } from "@app/ui/ActionIcon";
 
 const Plus = () => (
diff --git a/frontend/editor/src/core/ui/Button.stories.tsx b/frontend/editor/src/core/ui/Button.stories.tsx
index 374d31c46e..630d14010c 100644
--- a/frontend/editor/src/core/ui/Button.stories.tsx
+++ b/frontend/editor/src/core/ui/Button.stories.tsx
@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { Button } from "@app/ui/Button";
 
 /* tiny inline icons for the demos */
diff --git a/frontend/editor/src/core/ui/MethodBadge.stories.tsx b/frontend/editor/src/core/ui/MethodBadge.stories.tsx
index 6dd557ab82..4dfc1d23ce 100644
--- a/frontend/editor/src/core/ui/MethodBadge.stories.tsx
+++ b/frontend/editor/src/core/ui/MethodBadge.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { MethodBadge, type HttpMethod } from "@app/ui/MethodBadge";
 
 const meta: Meta<typeof MethodBadge> = {
diff --git a/frontend/editor/src/core/ui/SegmentedControl.stories.tsx b/frontend/editor/src/core/ui/SegmentedControl.stories.tsx
index 0f16141a5a..06b1c71978 100644
--- a/frontend/editor/src/core/ui/SegmentedControl.stories.tsx
+++ b/frontend/editor/src/core/ui/SegmentedControl.stories.tsx
@@ -1,5 +1,5 @@
 import { useState } from "react";
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import InsertDriveFileOutlinedIcon from "@mui/icons-material/InsertDriveFileOutlined";
 import FolderOutlinedIcon from "@mui/icons-material/FolderOutlined";
 import { SegmentedControl } from "@app/ui/SegmentedControl";
diff --git a/frontend/editor/src/core/ui/StatusBadge.stories.tsx b/frontend/editor/src/core/ui/StatusBadge.stories.tsx
index fe4b322248..8b77c58e41 100644
--- a/frontend/editor/src/core/ui/StatusBadge.stories.tsx
+++ b/frontend/editor/src/core/ui/StatusBadge.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { StatusBadge } from "@app/ui/StatusBadge";
 
 const meta: Meta<typeof StatusBadge> = {
diff --git a/frontend/editor/src/portal/data/Endpoints.stories.tsx b/frontend/editor/src/portal/data/Endpoints.stories.tsx
index 5f3a561766..4d83bcd86f 100644
--- a/frontend/editor/src/portal/data/Endpoints.stories.tsx
+++ b/frontend/editor/src/portal/data/Endpoints.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { VERTICALS, ALL_ENDPOINTS } from "@portal/data/endpoints";
 import { MethodBadge } from "@app/ui/MethodBadge";
 import { StatusBadge } from "@app/ui/StatusBadge";
diff --git a/frontend/editor/src/portal/data/Ops.stories.tsx b/frontend/editor/src/portal/data/Ops.stories.tsx
index bcaa524095..8e59e5f5ef 100644
--- a/frontend/editor/src/portal/data/Ops.stories.tsx
+++ b/frontend/editor/src/portal/data/Ops.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import {
   PIPELINE_OPS,
   LIBRARY_OPS,
diff --git a/frontend/editor/src/proprietary/auth/ui/AuthScreens.stories.tsx b/frontend/editor/src/proprietary/auth/ui/AuthScreens.stories.tsx
index 9100892fee..a864a5ff5e 100644
--- a/frontend/editor/src/proprietary/auth/ui/AuthScreens.stories.tsx
+++ b/frontend/editor/src/proprietary/auth/ui/AuthScreens.stories.tsx
@@ -1,5 +1,5 @@
 import { useState } from "react";
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { AuthShell } from "@app/auth/ui/AuthShell";
 import SpringLoginForm from "@app/auth/ui/SpringLoginForm";
 import AuthSignupPrompt from "@app/auth/ui/AuthSignupPrompt";
diff --git a/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.stories.tsx b/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.stories.tsx
index 84e085725d..b026253a3a 100644
--- a/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.stories.tsx
+++ b/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.stories.tsx
@@ -1,5 +1,5 @@
 import { useState } from "react";
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import EmailPasswordForm from "@app/auth/ui/EmailPasswordForm";
 import "@app/auth/ui/auth.css";
 
diff --git a/frontend/editor/src/proprietary/auth/ui/ErrorMessage.stories.tsx b/frontend/editor/src/proprietary/auth/ui/ErrorMessage.stories.tsx
index 9647417990..4f9ff8bd3f 100644
--- a/frontend/editor/src/proprietary/auth/ui/ErrorMessage.stories.tsx
+++ b/frontend/editor/src/proprietary/auth/ui/ErrorMessage.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import ErrorMessage from "@app/auth/ui/ErrorMessage";
 import "@app/auth/ui/auth.css";
 
diff --git a/frontend/editor/src/proprietary/auth/ui/SupabaseLoginForm.stories.tsx b/frontend/editor/src/proprietary/auth/ui/SupabaseLoginForm.stories.tsx
index 9f24d2f971..c9bf994e6f 100644
--- a/frontend/editor/src/proprietary/auth/ui/SupabaseLoginForm.stories.tsx
+++ b/frontend/editor/src/proprietary/auth/ui/SupabaseLoginForm.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import SupabaseLoginForm from "@app/auth/ui/SupabaseLoginForm";
 import type { SupabaseLoginState } from "@app/auth/ui/useSupabaseLogin";
 import "@app/auth/ui/auth.css";
diff --git a/frontend/editor/src/proprietary/components/shared/stripeCheckout/components/PricingBadge.stories.tsx b/frontend/editor/src/proprietary/components/shared/stripeCheckout/components/PricingBadge.stories.tsx
index 2b85605458..d734eb4117 100644
--- a/frontend/editor/src/proprietary/components/shared/stripeCheckout/components/PricingBadge.stories.tsx
+++ b/frontend/editor/src/proprietary/components/shared/stripeCheckout/components/PricingBadge.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { PricingBadge } from "@app/components/shared/stripeCheckout/components/PricingBadge";
 
 /**
diff --git a/frontend/editor/src/proprietary/components/shared/stripeCheckout/stages/ErrorStage.stories.tsx b/frontend/editor/src/proprietary/components/shared/stripeCheckout/stages/ErrorStage.stories.tsx
index e0e7e082f8..959172a11a 100644
--- a/frontend/editor/src/proprietary/components/shared/stripeCheckout/stages/ErrorStage.stories.tsx
+++ b/frontend/editor/src/proprietary/components/shared/stripeCheckout/stages/ErrorStage.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import { ErrorStage } from "@app/components/shared/stripeCheckout/stages/ErrorStage";
 
 /**
diff --git a/frontend/editor/src/proprietary/routes/login/OAuthButtons.stories.tsx b/frontend/editor/src/proprietary/routes/login/OAuthButtons.stories.tsx
index c60ce89feb..f0ef05f5d0 100644
--- a/frontend/editor/src/proprietary/routes/login/OAuthButtons.stories.tsx
+++ b/frontend/editor/src/proprietary/routes/login/OAuthButtons.stories.tsx
@@ -1,4 +1,4 @@
-import type { Meta, StoryObj } from "@storybook/react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
 import OAuthButtons from "@app/auth/ui/OAuthButtons";
 import "@app/auth/ui/auth.css";
 

From 6094040e0afcd6e1843c7780d9ddbc822ac73dbc Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Fri, 31 Jul 2026 14:52:44 +0100
Subject: [PATCH 011/122] Make Auto Rotate's settings editable in the pipeline
 composer (#7222)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Follow-up to #7152.

## Why

Auto Rotate was already selectable as a pipeline step —
`getExecutableTools` lists any registry tool with an `operationConfig`
and an endpoint resolvable from defaults, which it has. But once added,
the settings pane showed *"Displaying these tool params for editing is
not supported yet"* and the step card read *"Runs with default
settings"*.

Both come from the same cause. `classifyToolStepSupport` keys off the
operation config's mappers:

```js
const hasMappers = Boolean(config?.toApiParams && config?.fromApiParams);
if (!hasMappers) return "unsupported";
return entry.automationSettings ? "editable" : "noSettings";
```

Auto Rotate had `automationSettings` but no mappers, because its custom
processor builds its own FormData and never needed them — so it
classified as `unsupported`.

The more consequential half is `serializeToolStep`, which emits
`parameters: {}` for a mapper-less tool. A composed pipeline therefore
ran Auto Rotate on server defaults with no way to change that. "Runs
with default settings" was literal.

## What

Declares `toApiParams` / `fromApiParams` on `autoRotateOperationConfig`,
mapping `detectionMode`, `confidenceThreshold` and `inferUndetected`.

That flips the step to `editable`, so the composer reuses the existing
`AutoRotateAutomationSettings` panel, and the chosen settings now reach
the backend.

**No backend change.** Policy steps already serialise `parameters` as
form fields and the endpoint already accepts these three — verified
against a running server while working on #7152.

## Testing

- New round-trip test in `toolAutomation.test.ts`: the step serialises
to `{detectionMode, confidenceThreshold, inferUndetected}` and
deserialises back with `support: "editable"`, using the real operation
config.
- `core/hooks/tools/shared` + `portal/components/pipelines` suites: 63
tests pass.
- Typecheck across build variants, ESLint, Prettier.

The composer UI itself was not clicked: the portal is not served by the
editor dev server locally, so the verification is the unit test plus the
render path (`PipelineStepSettings` renders `entry.automationSettings`
when support is `editable`, and the registry entry supplies it). Worth a
click-through on the preview deploy.

## Note for maintainers

While tracing this I found `PIPELINE_OPERATIONS` in
`portal/components/pipelines/pipelineOperations.ts` is exported but
never imported — the composer builds its list from the tool registry
instead. `humanizeOperation` in the same file *is* still used as a label
fallback. Left alone here as it is out of scope, but it looks like dead
code worth deleting separately.

Generated with [Claude Code](https://claude.com/claude-code)
---
 .../autoRotate/useAutoRotateOperation.ts      | 35 +++++++++++++++-
 .../hooks/tools/shared/toolAutomation.test.ts | 41 +++++++++++++++++++
 2 files changed, 75 insertions(+), 1 deletion(-)

diff --git a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
index 6460a66cfa..488a15a8e2 100644
--- a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
@@ -16,12 +16,43 @@ import {
   ToolOperationHook,
 } from "@app/hooks/tools/shared/useToolOperation";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
+import type {
+  ToolApiParams,
+  ToolEndpoint,
+} from "@app/hooks/tools/shared/toolApiMapping";
 import {
   AutoRotateParameters,
+  AutoRotateDetectionMode,
   defaultParameters,
 } from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
 
-export const AUTO_ROTATE_ENDPOINT = "/api/v1/misc/auto-rotate-pdf";
+export const AUTO_ROTATE_ENDPOINT =
+  "/api/v1/misc/auto-rotate-pdf" satisfies ToolEndpoint;
+
+type AutoRotateApiParams = ToolApiParams[typeof AUTO_ROTATE_ENDPOINT];
+
+/**
+ * Frontend params -> the endpoint's request model. Declaring these is what lets a
+ * backend pipeline step carry this tool's settings: serializeToolStep sends `{}`
+ * for a tool without mappers, and the pipeline composer can only offer a settings
+ * panel for a tool that can map its parameters both ways.
+ */
+export const autoRotateToApiParams = (
+  parameters: AutoRotateParameters,
+): AutoRotateApiParams => ({
+  detectionMode: parameters.detectionMode,
+  confidenceThreshold: parameters.confidenceThreshold,
+  inferUndetected: parameters.inferUndetected,
+});
+
+/** Rehydrate this tool's settings from a stored step's request body. */
+export const autoRotateFromApiParams = (
+  apiParams: AutoRotateApiParams,
+): Partial<AutoRotateParameters> => ({
+  detectionMode: apiParams.detectionMode as AutoRotateDetectionMode,
+  confidenceThreshold: apiParams.confidenceThreshold,
+  inferUndetected: apiParams.inferUndetected,
+});
 
 export type AutoRotateMethod = "text" | "osd" | "inferred" | "none";
 
@@ -135,6 +166,8 @@ export const autoRotateOperationConfig = defineCustomTool<AutoRotateParameters>(
     operationType: "autoRotate",
     endpoint: AUTO_ROTATE_ENDPOINT,
     customProcessor: createAutoRotateProcessor(),
+    toApiParams: autoRotateToApiParams,
+    fromApiParams: autoRotateFromApiParams,
     defaultParameters,
   },
 );
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts
index 03b85798d8..f4cb974692 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts
@@ -22,6 +22,8 @@ import { defaultParameters as compressDefaults } from "@app/hooks/tools/compress
 import { splitOperationConfig } from "@app/hooks/tools/split/useSplitOperation";
 import { SPLIT_METHODS } from "@app/constants/splitConstants";
 import { redactOperationConfig } from "@app/hooks/tools/redact/useRedactOperation";
+import { autoRotateOperationConfig } from "@app/hooks/tools/autoRotate/useAutoRotateOperation";
+import { defaultParameters as autoRotateDefaults } from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
 
 function entry(over: Partial<ToolRegistryEntry>): ToolRegistryEntry {
   return {
@@ -92,6 +94,11 @@ const dynamicRegistry: Partial<ToolRegistry> = {
     automationSettings: NoopSettings,
     operationConfig: asRegistryConfig(redactOperationConfig),
   }),
+  autoRotate: entry({
+    name: "Auto Rotate",
+    automationSettings: NoopSettings,
+    operationConfig: asRegistryConfig(autoRotateOperationConfig),
+  }),
 };
 
 describe("getExecutableTools", () => {
@@ -157,6 +164,40 @@ describe("serialize/deserialize round-trip", () => {
     });
   });
 
+  test("auto rotate carries its detection settings into the backend step", () => {
+    // A custom-processor tool: the browser applies the rotations, but a backend
+    // pipeline still has to receive the detection settings, which only happens
+    // because the config declares mappers.
+    const step: WorkingToolStep = {
+      toolId: "autoRotate" as ToolId,
+      operation: "/api/v1/misc/auto-rotate-pdf",
+      params: {
+        ...autoRotateDefaults,
+        detectionMode: "osd",
+        confidenceThreshold: 20,
+        inferUndetected: false,
+      },
+      support: "editable",
+    };
+
+    const api = serializeToolStep(step, dynamicRegistry);
+    expect(api.operation).toBe("/api/v1/misc/auto-rotate-pdf");
+    expect(api.parameters).toEqual({
+      detectionMode: "osd",
+      confidenceThreshold: 20,
+      inferUndetected: false,
+    });
+
+    const back = deserializeToolStep(api, dynamicRegistry);
+    expect(back.toolId).toBe("autoRotate");
+    expect(back.support).toBe("editable");
+    expect(back.params).toMatchObject({
+      detectionMode: "osd",
+      confidenceThreshold: 20,
+      inferUndetected: false,
+    });
+  });
+
   test("a dynamic-endpoint tool (split by chapters) round-trips as an editable step", () => {
     const step: WorkingToolStep = {
       toolId: "split" as ToolId,

From d5e3c3e6e10288999459c8b6b146b141fbf139c5 Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Fri, 31 Jul 2026 15:55:46 +0100
Subject: [PATCH 012/122] Remove dead frontend exports and their orphaned
 translation keys (#7226)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Why

Spotted while working on #7222. `PIPELINE_OPERATIONS` reads like the
list that decides which tools the pipeline composer offers — its doc
comment literally said *"the operation catalogue the composer builds a
pipeline from"* and *"adding an operation needs no translation work"*.
Nothing has imported it since #6905 replaced it with
`getExecutableTools` over the tool registry.

That makes it worse than dead weight: I added an entry to it to expose
Auto Rotate, and the entry did nothing. The next person will do the
same.

So I swept the editor frontend for the same shape — exported values with
no reference anywhere, including inside their own file — and removed the
confirmed ones.

## What went

**6 wholly dead files**
- `core/components/tooltips/useCertSignTooltips.ts`
- `core/components/tooltips/useCertificateChoiceTips.ts`
- `core/components/tooltips/useSessionManagementTips.ts`
- `core/components/tooltips/useWetSignatureTips.ts`
- `desktop/config/planFeatures.ts`
- `core/hooks/tools/shared/useOperationResults.ts`

**Dead consts and helpers** across core, portal and desktop:
`PIPELINE_OPERATIONS` + `PipelineOperationDef`, `FILE_ORIGINS`,
`DATE_GROUP_ORDER`, `toRgba`, `isSplitMethod`, `useSignatureMode`,
`getCategoryLabel`, `useCommonTranslations`, `useSignatureDetection`,
two `Z_INDEX_*` tokens, `getFontStatusIcon`, `buildUpdatedDocument`,
`INFO_PDF_FILENAME`, `useCustomMetadataTips`, `PORTAL_ACCESS_TONE`,
`MEMBER_STATUS_TONE`, `ASSIGNABLE_ROLES`, `TIER_INFO`, `VIEW_LABELS`,
`lookupVertical`, `lookupEndpoint`, `lookupAgent`, `lookupSource`,
`lookupDestination`, `docsSource`.

`fileProcessingService.ts` keeps only `ProcessedFileMetadata`, which
four files still import. Removing the dead service instance orphaned the
`FileProcessingService` class and its result type, so those went with
it.

**103 en-US translation keys** that only the deleted tooltip hooks and
helpers referenced — the unused-translation audit flags these as soon as
their callers go, so the cleanup isn't complete without them. Only
`en-US` is touched, since that is what the audit gates.

## Kept deliberately

Three things look unused in `core` but are not, and a naive sweep would
have deleted them:

- `Z_ANALYTICS_MODAL` and `DEV_TESTING_ENABLED` — the `saas` and
`proprietary` layers shadow those modules and reference them
- `CLOUD_LAYER_PROBE` — exists to prove layer resolution

## Testing

Deletions only, so the type checker and the suites are the proof:

- `typecheck:all` + `typecheck:portal` — all eight build variants clean
- full `eslint` (zero warnings) and `theme-lint`
- `prettier --check` across the frontend
- full editor suite: **1651 tests, 186 files, all passing**

Three incomplete removals and two orphaned imports were caught by
exactly those gates and fixed before pushing.

## Note

The same 103 keys still exist in the other ~40 locale files. The audit
only gates `en-US`, and translations are usually synced separately, so I
left them — worth a follow-up if you want them pruned too.
---
 .../public/locales/en-US/translation.toml     | 143 -----------
 .../core/components/filesPage/fileOrigin.ts   |   2 -
 .../components/shared/FileSidebarFileItem.tsx |   8 -
 .../core/components/tools/compare/compare.ts  |  10 -
 .../tooltips/useCertSignTooltips.ts           |  93 -------
 .../tooltips/useCertificateChoiceTips.ts      |  95 --------
 .../tooltips/useChangeMetadataTips.ts         |  32 ---
 .../tooltips/useSessionManagementTips.ts      | 114 ---------
 .../tooltips/useWetSignatureTips.ts           |  74 ------
 .../src/core/constants/splitConstants.ts      |   3 -
 .../src/core/contexts/SignatureContext.tsx    |   9 -
 .../editor/src/core/data/toolsTaxonomy.ts     |   2 -
 .../hooks/tools/shared/useOperationResults.ts |  67 -----
 .../editor/src/core/hooks/useTranslation.ts   |  18 --
 .../core/services/fileProcessingService.ts    | 230 +-----------------
 .../services/signatureDetectionService.ts     |  51 ----
 frontend/editor/src/core/styles/zIndex.ts     |   3 -
 .../core/tools/pdfTextEditor/fontAnalysis.ts  |  18 --
 .../tools/pdfTextEditor/pdfTextEditorUtils.ts |  36 ---
 frontend/editor/src/core/types/getPdfInfo.ts  |   1 -
 .../editor/src/desktop/config/planFeatures.ts |  86 -------
 frontend/editor/src/portal/api/users.ts       |  23 --
 .../pipelines/pipelineOperations.ts           |  41 +---
 .../src/portal/contexts/TierContext.tsx       |  11 -
 .../src/portal/contexts/ViewContext.tsx       |  16 --
 frontend/editor/src/portal/data/endpoints.ts  |   8 -
 frontend/editor/src/portal/data/ops.ts        |   8 -
 .../src/portal/docs/manifest/registry.ts      |   3 -
 28 files changed, 4 insertions(+), 1201 deletions(-)
 delete mode 100644 frontend/editor/src/core/components/tooltips/useCertSignTooltips.ts
 delete mode 100644 frontend/editor/src/core/components/tooltips/useCertificateChoiceTips.ts
 delete mode 100644 frontend/editor/src/core/components/tooltips/useSessionManagementTips.ts
 delete mode 100644 frontend/editor/src/core/components/tooltips/useWetSignatureTips.ts
 delete mode 100644 frontend/editor/src/core/hooks/tools/shared/useOperationResults.ts
 delete mode 100644 frontend/editor/src/desktop/config/planFeatures.ts

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index d02925fe46..045ea581f4 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "{{count}} files"
 font = "Font"
 fontSizeTooltip = "Size of the page number text in points. Larger numbers create bigger text."
 fontTypeTooltip = "Font family for the page numbers. Choose based on your document style."
-genericSubmit = "Submit"
 green = "Green"
 help = "Help"
-imgPrompt = "Select Image(s)"
 incorrectPasswordMessage = "Current password is incorrect."
 info = "Info"
 invalidUndoData = "Cannot undo: invalid operation data"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Login Agreement"
 logOut = "Log out"
 marginTooltip = "Distance between the page number and the edge of the page."
 moreOptions = "More Options"
-multiPdfPrompt = "Select PDFs (2+)"
 never = "Never"
 no = "No"
 noFileSelected = "No file loaded. Please upload one."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Custom Page Order (Enter a comma-separated list of page numbe
 pages = "Pages"
 pageSelectionPrompt = "Custom Page Selection (Enter a comma-separated list of page numbers 1,5,6 or Functions like 2n+1)"
 password = "Password"
-pdfPrompt = "Select PDF(s)"
 pin = "Pin File (keep active after tool run)"
 pro = "Pro"
 processingComplete = "Your file is ready."
@@ -2444,33 +2440,6 @@ keywords = "Keywords: odd, even"
 numbers = "Numbers/ranges: 5, 10-20"
 progressions = "Progressions: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Certificate Types"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Managed by system administrators"
-bullet2 = "Shared across authorized users"
-bullet3 = "Represents company identity, not individual"
-bullet4 = "Best for: Official documents, team signatures"
-description = "A shared certificate provided by your organization. Used for company-wide signing authority."
-title = "Organization Certificate"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generated automatically on first use"
-bullet2 = "Tied to your user account"
-bullet3 = "Cannot be shared with other users"
-bullet4 = "Best for: Personal documents, individual accountability"
-description = "An auto-generated certificate unique to your user account. Suitable for individual signatures."
-title = "Personal Certificate"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Requires P12/PFX file and password"
-bullet2 = "Can be issued by external Certificate Authorities"
-bullet3 = "Higher trust level for legal documents"
-bullet4 = "Best for: Legally binding contracts, external validation"
-description = "Use your own PKCS#12 certificate file. Provides full control over certificate properties."
-title = "Upload Custom P12"
-
 [certSign]
 awaitingSignatures = "Awaiting signatures"
 chooseCertificate = "Choose Certificate File"
@@ -2797,34 +2766,6 @@ server = "Server"
 stepTitle = "Certificate source"
 upload = "Upload"
 
-[certSign.tooltip.header]
-title = "About Managing Signatures"
-
-[certSign.tooltip.overview]
-bullet1 = "Check existing signatures and their validity"
-bullet2 = "View detailed information about signers and certificates"
-bullet3 = "Add new digital signatures to secure your documents"
-bullet4 = "Multiple files supported with easy navigation"
-text = "This tool lets you check if your PDFs are digitally signed and add new digital signatures. Digital signatures prove who created or approved a document and show if it has been changed since signing."
-title = "What can this tool do?"
-
-[certSign.tooltip.signing]
-bullet1 = "Supports PEM, PKCS12, JKS, and server certificate formats"
-bullet2 = "Option to show or hide signature on the PDF"
-bullet3 = "Add reason, location, and signer name"
-bullet4 = "Choose which page to place visible signatures"
-bullet5 = "Use server certificate for simple 'Sign with Stirling-PDF' option"
-text = "To sign a PDF, you need a digital certificate (like PEM, PKCS12, or JKS). You can choose to make the signature visible on the document or keep it invisible for security only."
-title = "Adding Signatures"
-
-[certSign.tooltip.validation]
-bullet1 = "Shows if signatures are valid or invalid"
-bullet2 = "Displays signer information and signing date"
-bullet3 = "Checks if the document was modified after signing"
-bullet4 = "Can use custom certificates for verification"
-text = "When you check signatures, the tool tells you if they're valid, who signed the document, when it was signed, and whether the document has been changed since signing."
-title = "Checking Signatures"
-
 [changeCreds]
 changeUsername = "Update your username. You will be logged out after updating."
 credsUpdated = "Account updated"
@@ -3520,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Advanced monitoring"
-allInOneWorkspace = "All-in-one PDF workspace (viewer, tools & agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Dedicated support & SLAs"
-fasterThroughput = "10x faster throughput"
-fullyPrivateFiles = "Fully private files"
-largeFileProcessing = "Large file processing"
-orgWideAccess = "Org-wide access controls"
-premiumAiModels = "Premium AI models"
-prioritySupport = "Priority support"
-privateDocCloud = "Private Document Cloud"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Secure API access"
-standardThroughput = "Standard throughput"
-unlimitedApiAccess = "Unlimited API access"
-unlimitedSeats = "Unlimited seats"
-
 [crop]
 autoCrop = "Auto-crop whitespace"
 noFileSelected = "Add a PDF file to begin cropping"
@@ -8903,11 +8826,6 @@ name = "Name"
 namePlaceholder = "e.g. Claims intake"
 type = "Type"
 
-[portal.tier]
-enterprise = "Enterprise plan"
-free = "Editor plan"
-pro = "Processor plan"
-
 [portal.usage]
 managePayment = "Manage Payment"
 subtitle = "Consumption, invoices, and plan management for every PDF Stirling has billed, in one console."
@@ -9673,38 +9591,6 @@ toolNotAvailableLocally = "Your Stirling-PDF server is offline and \"{{endpoint}
 [session]
 expired = "Your session has expired. Please refresh the page and try again."
 
-[sessionManagement.tooltip]
-header = "Managing Signing Sessions"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "New participants added to the end of signing order"
-bullet2 = "Cannot add participants after session is finalized"
-bullet3 = "Each participant receives a notification when it's their turn"
-description = "You can add more participants to an active session at any time before finalization."
-title = "Adding Participants"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Full finalization</b>: All participants have signed"
-bullet2 = "<b>Partial finalization</b>: Some participants haven't signed yet"
-bullet3 = "Unsigned participants will be excluded from the final document"
-bullet4 = "Once finalized, you can load the signed PDF into active files"
-description = "Finalization combines all signatures into a single signed PDF. This action cannot be undone."
-title = "Session Finalization"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Cannot remove participants who have already signed"
-bullet2 = "Removed participants no longer receive notifications"
-bullet3 = "Signing order adjusts automatically"
-description = "Participants can be removed from sessions before they sign."
-title = "Removing Participants"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Each signature is applied sequentially to the PDF"
-bullet2 = "Later signers can see earlier signatures"
-bullet3 = "Critical for approval workflows and legal chains of custody"
-description = "The order you specify when creating the session determines who signs first."
-title = "Signature Order"
-
 [settings]
 close = "Close"
 
@@ -10783,11 +10669,6 @@ noToolsFound = "No tools found"
 quickAccess = "QUICK ACCESS"
 searchPlaceholder = "Search tools..."
 
-[toolPicker.categories]
-advancedTools = "Advanced Tools"
-recommendedTools = "Recommended Tools"
-standardTools = "Standard Tools"
-
 [toolPicker.subcategories]
 advancedFormatting = "Advanced Formatting"
 automation = "Automation"
@@ -11612,30 +11493,6 @@ title = "Watermark Text"
 image = "Image"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Signature Creation Methods"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Customize pen color and thickness"
-bullet2 = "Clear and redraw until satisfied"
-bullet3 = "Works on touch devices (tablets, phones)"
-description = "Create a handwritten signature using your mouse or touchscreen. Best for personal, authentic signatures."
-title = "Draw Signature"
-
-[wetSignature.tooltip.type]
-bullet1 = "Choose from multiple fonts"
-bullet2 = "Customize text size and color"
-bullet3 = "Perfect for standardized signatures"
-description = "Generate a signature from typed text. Fast and consistent, suitable for business documents."
-title = "Type Signature"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Supports PNG, JPG, and other image formats"
-bullet2 = "Transparent backgrounds recommended for best results"
-bullet3 = "Image will be resized to fit signature area"
-description = "Upload a pre-created signature image. Ideal if you have a scanned signature or company logo."
-title = "Upload Signature Image"
-
 [workbenchBar]
 activeFiles = "Active Files"
 annotations = "Annotations"
diff --git a/frontend/editor/src/core/components/filesPage/fileOrigin.ts b/frontend/editor/src/core/components/filesPage/fileOrigin.ts
index f8edb40656..273e370053 100644
--- a/frontend/editor/src/core/components/filesPage/fileOrigin.ts
+++ b/frontend/editor/src/core/components/filesPage/fileOrigin.ts
@@ -11,8 +11,6 @@ import { StirlingFileStub } from "@app/types/fileContext";
 
 export type FileOrigin = "local" | "cloud" | "shared-with-me";
 
-export const FILE_ORIGINS: FileOrigin[] = ["local", "cloud", "shared-with-me"];
-
 export function getFileOrigin(file: StirlingFileStub): FileOrigin {
   if (file.remoteSharedViaLink || file.remoteOwnedByCurrentUser === false) {
     return "shared-with-me";
diff --git a/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx b/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
index 8647e18a68..a289a245f1 100644
--- a/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
+++ b/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
@@ -34,14 +34,6 @@ export type DateGroup =
   | "thisMonth"
   | "older";
 
-export const DATE_GROUP_ORDER: DateGroup[] = [
-  "today",
-  "yesterday",
-  "thisWeek",
-  "thisMonth",
-  "older",
-];
-
 export function getDateGroup(lastModified: number | undefined): DateGroup {
   if (!lastModified) return "older";
   const now = new Date();
diff --git a/frontend/editor/src/core/components/tools/compare/compare.ts b/frontend/editor/src/core/components/tools/compare/compare.ts
index cd8d65a2f9..30d0c42304 100644
--- a/frontend/editor/src/core/components/tools/compare/compare.ts
+++ b/frontend/editor/src/core/components/tools/compare/compare.ts
@@ -3,16 +3,6 @@ import type { FileId } from "@app/types/file";
 import type { StirlingFile, StirlingFileStub } from "@app/types/fileContext";
 import type { PagePreview } from "@app/types/compare";
 
-/** Convert hex color (#rrggbb) to rgba() string with alpha; falls back to input if invalid. */
-export const toRgba = (hexColor: string, alpha: number): string => {
-  const hex = hexColor.replace("#", "");
-  if (hex.length !== 6) return hexColor;
-  const r = parseInt(hex.slice(0, 2), 16);
-  const g = parseInt(hex.slice(2, 4), 16);
-  const b = parseInt(hex.slice(4, 6), 16);
-  return `rgba(${r}, ${g}, ${b}, ${alpha})`;
-};
-
 /** Normalize rotation to [0, 360). */
 export const normalizeRotation = (deg: number | undefined | null): number => {
   const n = (((deg ?? 0) % 360) + 360) % 360;
diff --git a/frontend/editor/src/core/components/tooltips/useCertSignTooltips.ts b/frontend/editor/src/core/components/tooltips/useCertSignTooltips.ts
deleted file mode 100644
index 1588e9fea1..0000000000
--- a/frontend/editor/src/core/components/tooltips/useCertSignTooltips.ts
+++ /dev/null
@@ -1,93 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { TooltipContent } from "@app/types/tips";
-
-export const useCertSignTooltips = (): TooltipContent => {
-  const { t } = useTranslation();
-
-  return {
-    header: {
-      title: t("certSign.tooltip.header.title", "About Managing Signatures"),
-    },
-    tips: [
-      {
-        title: t("certSign.tooltip.overview.title", "What can this tool do?"),
-        description: t(
-          "certSign.tooltip.overview.text",
-          "This tool lets you check if your PDFs are digitally signed and add new digital signatures. Digital signatures prove who created or approved a document and show if it has been changed since signing.",
-        ),
-        bullets: [
-          t(
-            "certSign.tooltip.overview.bullet1",
-            "Check existing signatures and their validity",
-          ),
-          t(
-            "certSign.tooltip.overview.bullet2",
-            "View detailed information about signers and certificates",
-          ),
-          t(
-            "certSign.tooltip.overview.bullet3",
-            "Add new digital signatures to secure your documents",
-          ),
-          t(
-            "certSign.tooltip.overview.bullet4",
-            "Multiple files supported with easy navigation",
-          ),
-        ],
-      },
-      {
-        title: t("certSign.tooltip.validation.title", "Checking Signatures"),
-        description: t(
-          "certSign.tooltip.validation.text",
-          "When you check signatures, the tool tells you if they're valid, who signed the document, when it was signed, and whether the document has been changed since signing.",
-        ),
-        bullets: [
-          t(
-            "certSign.tooltip.validation.bullet1",
-            "Shows if signatures are valid or invalid",
-          ),
-          t(
-            "certSign.tooltip.validation.bullet2",
-            "Displays signer information and signing date",
-          ),
-          t(
-            "certSign.tooltip.validation.bullet3",
-            "Checks if the document was modified after signing",
-          ),
-          t(
-            "certSign.tooltip.validation.bullet4",
-            "Can use custom certificates for verification",
-          ),
-        ],
-      },
-      {
-        title: t("certSign.tooltip.signing.title", "Adding Signatures"),
-        description: t(
-          "certSign.tooltip.signing.text",
-          "To sign a PDF, you need a digital certificate (like PEM, PKCS12, or JKS). You can choose to make the signature visible on the document or keep it invisible for security only.",
-        ),
-        bullets: [
-          t(
-            "certSign.tooltip.signing.bullet1",
-            "Supports PEM, PKCS12, JKS, and server certificate formats",
-          ),
-          t(
-            "certSign.tooltip.signing.bullet2",
-            "Option to show or hide signature on the PDF",
-          ),
-          t(
-            "certSign.tooltip.signing.bullet3",
-            "Add reason, location, and signer name",
-          ),
-          t(
-            "certSign.tooltip.signing.bullet4",
-            "Choose which page to place visible signatures",
-          ),
-          t(
-            "certSign.tooltip.signing.bullet5",
-            "Use server certificate for simple 'Sign with Stirling-PDF' option",
-          ),
-        ],
-      },
-    ],
-  };
-};
diff --git a/frontend/editor/src/core/components/tooltips/useCertificateChoiceTips.ts b/frontend/editor/src/core/components/tooltips/useCertificateChoiceTips.ts
deleted file mode 100644
index 12f132c40a..0000000000
--- a/frontend/editor/src/core/components/tooltips/useCertificateChoiceTips.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { TooltipContent } from "@app/types/tips";
-
-export const useCertificateChoiceTips = (): TooltipContent => {
-  const { t } = useTranslation();
-
-  return {
-    header: {
-      title: t("certificateChoice.tooltip.header", "Certificate Types"),
-    },
-    tips: [
-      {
-        title: t(
-          "certificateChoice.tooltip.personal.title",
-          "Personal Certificate",
-        ),
-        description: t(
-          "certificateChoice.tooltip.personal.description",
-          "An auto-generated certificate unique to your user account. Suitable for individual signatures.",
-        ),
-        bullets: [
-          t(
-            "certificateChoice.tooltip.personal.bullet1",
-            "Generated automatically on first use",
-          ),
-          t(
-            "certificateChoice.tooltip.personal.bullet2",
-            "Tied to your user account",
-          ),
-          t(
-            "certificateChoice.tooltip.personal.bullet3",
-            "Cannot be shared with other users",
-          ),
-          t(
-            "certificateChoice.tooltip.personal.bullet4",
-            "Best for: Personal documents, individual accountability",
-          ),
-        ],
-      },
-      {
-        title: t(
-          "certificateChoice.tooltip.organization.title",
-          "Organization Certificate",
-        ),
-        description: t(
-          "certificateChoice.tooltip.organization.description",
-          "A shared certificate provided by your organization. Used for company-wide signing authority.",
-        ),
-        bullets: [
-          t(
-            "certificateChoice.tooltip.organization.bullet1",
-            "Managed by system administrators",
-          ),
-          t(
-            "certificateChoice.tooltip.organization.bullet2",
-            "Shared across authorized users",
-          ),
-          t(
-            "certificateChoice.tooltip.organization.bullet3",
-            "Represents company identity, not individual",
-          ),
-          t(
-            "certificateChoice.tooltip.organization.bullet4",
-            "Best for: Official documents, team signatures",
-          ),
-        ],
-      },
-      {
-        title: t("certificateChoice.tooltip.upload.title", "Upload Custom P12"),
-        description: t(
-          "certificateChoice.tooltip.upload.description",
-          "Use your own PKCS#12 certificate file. Provides full control over certificate properties.",
-        ),
-        bullets: [
-          t(
-            "certificateChoice.tooltip.upload.bullet1",
-            "Requires P12/PFX file and password",
-          ),
-          t(
-            "certificateChoice.tooltip.upload.bullet2",
-            "Can be issued by external Certificate Authorities",
-          ),
-          t(
-            "certificateChoice.tooltip.upload.bullet3",
-            "Higher trust level for legal documents",
-          ),
-          t(
-            "certificateChoice.tooltip.upload.bullet4",
-            "Best for: Legally binding contracts, external validation",
-          ),
-        ],
-      },
-    ],
-  };
-};
diff --git a/frontend/editor/src/core/components/tooltips/useChangeMetadataTips.ts b/frontend/editor/src/core/components/tooltips/useChangeMetadataTips.ts
index 26975f000d..99fc23b654 100644
--- a/frontend/editor/src/core/components/tooltips/useChangeMetadataTips.ts
+++ b/frontend/editor/src/core/components/tooltips/useChangeMetadataTips.ts
@@ -93,38 +93,6 @@ export const useDocumentDatesTips = (): TooltipContent => {
   };
 };
 
-export const useCustomMetadataTips = (): TooltipContent => {
-  const { t } = useTranslation();
-
-  return {
-    header: {
-      title: t("changeMetadata.tooltip.customFields.title", "Custom Metadata"),
-    },
-    tips: [
-      {
-        description: t(
-          "changeMetadata.tooltip.customFields.text",
-          "Add your own custom key-value metadata pairs.",
-        ),
-        bullets: [
-          t(
-            "changeMetadata.tooltip.customFields.bullet1",
-            "Add any custom fields relevant to your document",
-          ),
-          t(
-            "changeMetadata.tooltip.customFields.bullet2",
-            "Examples: Department, Project, Version, Status",
-          ),
-          t(
-            "changeMetadata.tooltip.customFields.bullet3",
-            "Both key and value are required for each entry",
-          ),
-        ],
-      },
-    ],
-  };
-};
-
 export const useAdvancedOptionsTips = (): TooltipContent => {
   const { t } = useTranslation();
 
diff --git a/frontend/editor/src/core/components/tooltips/useSessionManagementTips.ts b/frontend/editor/src/core/components/tooltips/useSessionManagementTips.ts
deleted file mode 100644
index dd36f7fc83..0000000000
--- a/frontend/editor/src/core/components/tooltips/useSessionManagementTips.ts
+++ /dev/null
@@ -1,114 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { TooltipContent } from "@app/types/tips";
-
-export const useSessionManagementTips = (): TooltipContent => {
-  const { t } = useTranslation();
-
-  return {
-    header: {
-      title: t("sessionManagement.tooltip.header", "Managing Signing Sessions"),
-    },
-    tips: [
-      {
-        title: t(
-          "sessionManagement.tooltip.addParticipants.title",
-          "Adding Participants",
-        ),
-        description: t(
-          "sessionManagement.tooltip.addParticipants.description",
-          "You can add more participants to an active session at any time before finalization.",
-        ),
-        bullets: [
-          t(
-            "sessionManagement.tooltip.addParticipants.bullet1",
-            "New participants added to the end of signing order",
-          ),
-          t(
-            "sessionManagement.tooltip.addParticipants.bullet2",
-            "Cannot add participants after session is finalized",
-          ),
-          t(
-            "sessionManagement.tooltip.addParticipants.bullet3",
-            "Each participant receives a notification when it's their turn",
-          ),
-        ],
-      },
-      {
-        title: t(
-          "sessionManagement.tooltip.finalization.title",
-          "Session Finalization",
-        ),
-        description: t(
-          "sessionManagement.tooltip.finalization.description",
-          "Finalization combines all signatures into a single signed PDF. This action cannot be undone.",
-        ),
-        bullets: [
-          t(
-            "sessionManagement.tooltip.finalization.bullet1",
-            "<b>Full finalization</b>: All participants have signed",
-          ),
-          t(
-            "sessionManagement.tooltip.finalization.bullet2",
-            "<b>Partial finalization</b>: Some participants haven't signed yet",
-          ),
-          t(
-            "sessionManagement.tooltip.finalization.bullet3",
-            "Unsigned participants will be excluded from the final document",
-          ),
-          t(
-            "sessionManagement.tooltip.finalization.bullet4",
-            "Once finalized, you can load the signed PDF into active files",
-          ),
-        ],
-      },
-      {
-        title: t(
-          "sessionManagement.tooltip.signatureOrder.title",
-          "Signature Order",
-        ),
-        description: t(
-          "sessionManagement.tooltip.signatureOrder.description",
-          "The order you specify when creating the session determines who signs first.",
-        ),
-        bullets: [
-          t(
-            "sessionManagement.tooltip.signatureOrder.bullet1",
-            "Each signature is applied sequentially to the PDF",
-          ),
-          t(
-            "sessionManagement.tooltip.signatureOrder.bullet2",
-            "Later signers can see earlier signatures",
-          ),
-          t(
-            "sessionManagement.tooltip.signatureOrder.bullet3",
-            "Critical for approval workflows and legal chains of custody",
-          ),
-        ],
-      },
-      {
-        title: t(
-          "sessionManagement.tooltip.participantRemoval.title",
-          "Removing Participants",
-        ),
-        description: t(
-          "sessionManagement.tooltip.participantRemoval.description",
-          "Participants can be removed from sessions before they sign.",
-        ),
-        bullets: [
-          t(
-            "sessionManagement.tooltip.participantRemoval.bullet1",
-            "Cannot remove participants who have already signed",
-          ),
-          t(
-            "sessionManagement.tooltip.participantRemoval.bullet2",
-            "Removed participants no longer receive notifications",
-          ),
-          t(
-            "sessionManagement.tooltip.participantRemoval.bullet3",
-            "Signing order adjusts automatically",
-          ),
-        ],
-      },
-    ],
-  };
-};
diff --git a/frontend/editor/src/core/components/tooltips/useWetSignatureTips.ts b/frontend/editor/src/core/components/tooltips/useWetSignatureTips.ts
deleted file mode 100644
index aff3e69fea..0000000000
--- a/frontend/editor/src/core/components/tooltips/useWetSignatureTips.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { TooltipContent } from "@app/types/tips";
-
-export const useWetSignatureTips = (): TooltipContent => {
-  const { t } = useTranslation();
-
-  return {
-    header: {
-      title: t("wetSignature.tooltip.header", "Signature Creation Methods"),
-    },
-    tips: [
-      {
-        title: t("wetSignature.tooltip.draw.title", "Draw Signature"),
-        description: t(
-          "wetSignature.tooltip.draw.description",
-          "Create a handwritten signature using your mouse or touchscreen. Best for personal, authentic signatures.",
-        ),
-        bullets: [
-          t(
-            "wetSignature.tooltip.draw.bullet1",
-            "Customize pen color and thickness",
-          ),
-          t(
-            "wetSignature.tooltip.draw.bullet2",
-            "Clear and redraw until satisfied",
-          ),
-          t(
-            "wetSignature.tooltip.draw.bullet3",
-            "Works on touch devices (tablets, phones)",
-          ),
-        ],
-      },
-      {
-        title: t("wetSignature.tooltip.upload.title", "Upload Signature Image"),
-        description: t(
-          "wetSignature.tooltip.upload.description",
-          "Upload a pre-created signature image. Ideal if you have a scanned signature or company logo.",
-        ),
-        bullets: [
-          t(
-            "wetSignature.tooltip.upload.bullet1",
-            "Supports PNG, JPG, and other image formats",
-          ),
-          t(
-            "wetSignature.tooltip.upload.bullet2",
-            "Transparent backgrounds recommended for best results",
-          ),
-          t(
-            "wetSignature.tooltip.upload.bullet3",
-            "Image will be resized to fit signature area",
-          ),
-        ],
-      },
-      {
-        title: t("wetSignature.tooltip.type.title", "Type Signature"),
-        description: t(
-          "wetSignature.tooltip.type.description",
-          "Generate a signature from typed text. Fast and consistent, suitable for business documents.",
-        ),
-        bullets: [
-          t("wetSignature.tooltip.type.bullet1", "Choose from multiple fonts"),
-          t(
-            "wetSignature.tooltip.type.bullet2",
-            "Customize text size and color",
-          ),
-          t(
-            "wetSignature.tooltip.type.bullet3",
-            "Perfect for standardized signatures",
-          ),
-        ],
-      },
-    ],
-  };
-};
diff --git a/frontend/editor/src/core/constants/splitConstants.ts b/frontend/editor/src/core/constants/splitConstants.ts
index 5561ae957f..20ff307f0d 100644
--- a/frontend/editor/src/core/constants/splitConstants.ts
+++ b/frontend/editor/src/core/constants/splitConstants.ts
@@ -21,9 +21,6 @@ export const ENDPOINTS = {
 } as const;
 
 export type SplitMethod = (typeof SPLIT_METHODS)[keyof typeof SPLIT_METHODS];
-export const isSplitMethod = (value: string | null): value is SplitMethod => {
-  return Object.values(SPLIT_METHODS).includes(value as SplitMethod);
-};
 
 import { CardOption } from "@app/components/shared/CardSelector";
 
diff --git a/frontend/editor/src/core/contexts/SignatureContext.tsx b/frontend/editor/src/core/contexts/SignatureContext.tsx
index 1c1a53e05f..a53a58ee21 100644
--- a/frontend/editor/src/core/contexts/SignatureContext.tsx
+++ b/frontend/editor/src/core/contexts/SignatureContext.tsx
@@ -211,12 +211,3 @@ export const useSignature = (): SignatureContextValue => {
   }
   return context;
 };
-
-// Hook for components that need to check if signature mode is active
-export const useSignatureMode = () => {
-  const context = useContext(SignatureContext);
-  return {
-    isSignatureModeActive: context?.isPlacementMode || false,
-    hasSignatureConfig: context?.signatureConfig !== null,
-  };
-};
diff --git a/frontend/editor/src/core/data/toolsTaxonomy.ts b/frontend/editor/src/core/data/toolsTaxonomy.ts
index 18b8561535..fc9b37565c 100644
--- a/frontend/editor/src/core/data/toolsTaxonomy.ts
+++ b/frontend/editor/src/core/data/toolsTaxonomy.ts
@@ -148,8 +148,6 @@ export const getSubcategoryIcon = (
   }
 };
 
-export const getCategoryLabel = (t: TFunction, id: ToolCategoryId): string =>
-  t(`toolPicker.categories.${id}`, id);
 export const getSubcategoryLabel = (t: TFunction, id: SubcategoryId): string =>
   t(`toolPicker.subcategories.${id}`, id);
 export const getSubcategoryColor = (subcategory: SubcategoryId): string =>
diff --git a/frontend/editor/src/core/hooks/tools/shared/useOperationResults.ts b/frontend/editor/src/core/hooks/tools/shared/useOperationResults.ts
deleted file mode 100644
index 0e085fb920..0000000000
--- a/frontend/editor/src/core/hooks/tools/shared/useOperationResults.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-import { useState, useCallback } from "react";
-
-export interface OperationResult {
-  files: File[];
-  thumbnails: string[];
-  isGeneratingThumbnails: boolean;
-}
-
-export interface OperationResultsHook {
-  results: OperationResult;
-  downloadUrl: string | null;
-  status: string;
-  errorMessage: string | null;
-  isLoading: boolean;
-
-  setResults: (results: OperationResult) => void;
-  setDownloadUrl: (url: string | null) => void;
-  setStatus: (status: string) => void;
-  setErrorMessage: (error: string | null) => void;
-  setIsLoading: (loading: boolean) => void;
-
-  resetResults: () => void;
-  clearError: () => void;
-}
-
-const initialResults: OperationResult = {
-  files: [],
-  thumbnails: [],
-  isGeneratingThumbnails: false,
-};
-
-export const useOperationResults = (): OperationResultsHook => {
-  const [results, setResults] = useState<OperationResult>(initialResults);
-  const [downloadUrl, setDownloadUrl] = useState<string | null>(null);
-  const [status, setStatus] = useState("");
-  const [errorMessage, setErrorMessage] = useState<string | null>(null);
-  const [isLoading, setIsLoading] = useState(false);
-
-  const resetResults = useCallback(() => {
-    setResults(initialResults);
-    setDownloadUrl(null);
-    setStatus("");
-    setErrorMessage(null);
-    setIsLoading(false);
-  }, []);
-
-  const clearError = useCallback(() => {
-    setErrorMessage(null);
-  }, []);
-
-  return {
-    results,
-    downloadUrl,
-    status,
-    errorMessage,
-    isLoading,
-
-    setResults,
-    setDownloadUrl,
-    setStatus,
-    setErrorMessage,
-    setIsLoading,
-
-    resetResults,
-    clearError,
-  };
-};
diff --git a/frontend/editor/src/core/hooks/useTranslation.ts b/frontend/editor/src/core/hooks/useTranslation.ts
index 6da312c3d6..910c16ebf9 100644
--- a/frontend/editor/src/core/hooks/useTranslation.ts
+++ b/frontend/editor/src/core/hooks/useTranslation.ts
@@ -1,20 +1,2 @@
 // Re-export react-i18next hook with our custom types
 export { useTranslation } from "react-i18next";
-
-// You can add custom hooks here later if needed
-// For example, a hook that returns commonly used translations
-import { useTranslation as useI18nTranslation } from "react-i18next";
-
-export const useCommonTranslations = () => {
-  const { t } = useI18nTranslation();
-
-  return {
-    submit: t("genericSubmit"),
-    selectPdf: t("pdfPrompt"),
-    selectPdfs: t("multiPdfPrompt"),
-    selectImages: t("imgPrompt"),
-    loading: t("loading", "Loading..."), // fallback if not found
-    error: t("error._value", "Error"),
-    success: t("success", "Success"),
-  };
-};
diff --git a/frontend/editor/src/core/services/fileProcessingService.ts b/frontend/editor/src/core/services/fileProcessingService.ts
index 2c8aba2b15..357021711a 100644
--- a/frontend/editor/src/core/services/fileProcessingService.ts
+++ b/frontend/editor/src/core/services/fileProcessingService.ts
@@ -1,13 +1,8 @@
 /**
- * Centralized file processing service
- * Handles metadata discovery, page counting, and thumbnail generation
- * Called when files are added to FileContext, before any view sees them
+ * Shape of the per-file metadata (page count, per-page thumbnails and rotation)
+ * that FileContext stores against a file stub.
  */
 
-import { generateThumbnailForFile } from "@app/utils/thumbnailUtils";
-import { pdfWorkerManager } from "@app/services/pdfWorkerManager";
-import { FileId } from "@app/types/file";
-
 export interface ProcessedFileMetadata {
   totalPages: number;
   pages: Array<{
@@ -19,224 +14,3 @@ export interface ProcessedFileMetadata {
   thumbnailUrl?: string; // Page 1 thumbnail for FileEditor
   lastProcessed: number;
 }
-
-export interface FileProcessingResult {
-  success: boolean;
-  metadata?: ProcessedFileMetadata;
-  error?: string;
-}
-
-interface ProcessingOperation {
-  promise: Promise<FileProcessingResult>;
-  abortController: AbortController;
-}
-
-class FileProcessingService {
-  private processingCache = new Map<string, ProcessingOperation>();
-
-  /**
-   * Process a file to extract metadata, page count, and generate thumbnails
-   * This is the single source of truth for file processing
-   */
-  async processFile(file: File, fileId: FileId): Promise<FileProcessingResult> {
-    // Check if we're already processing this file
-    const existingOperation = this.processingCache.get(fileId);
-    if (existingOperation) {
-      console.log(
-        `📁 FileProcessingService: Using cached processing for ${file.name}`,
-      );
-      return existingOperation.promise;
-    }
-
-    // Create abort controller for this operation
-    const abortController = new AbortController();
-
-    // Create processing promise
-    const processingPromise = this.performProcessing(
-      file,
-      fileId,
-      abortController,
-    );
-
-    // Store operation with abort controller
-    const operation: ProcessingOperation = {
-      promise: processingPromise,
-      abortController,
-    };
-    this.processingCache.set(fileId, operation);
-
-    // Clean up cache after completion
-    processingPromise.finally(() => {
-      this.processingCache.delete(fileId);
-    });
-
-    return processingPromise;
-  }
-
-  private async performProcessing(
-    file: File,
-    fileId: FileId,
-    abortController: AbortController,
-  ): Promise<FileProcessingResult> {
-    console.log(
-      `📁 FileProcessingService: Starting processing for ${file.name} (${fileId})`,
-    );
-
-    try {
-      // Check for cancellation at start
-      if (abortController.signal.aborted) {
-        throw new Error("Processing cancelled");
-      }
-
-      let totalPages = 1;
-      let thumbnailUrl: string | undefined;
-
-      // Handle PDF files
-      if (file.type === "application/pdf") {
-        // Read arrayBuffer once and reuse for both PDF.js and fallback
-        const arrayBuffer = await file.arrayBuffer();
-
-        // Check for cancellation after async operation
-        if (abortController.signal.aborted) {
-          throw new Error("Processing cancelled");
-        }
-
-        // Discover page count using PDF.js (most accurate)
-        try {
-          const pdfDoc = await pdfWorkerManager.createDocument(arrayBuffer, {
-            disableAutoFetch: true,
-            disableStream: true,
-          });
-
-          totalPages = pdfDoc.numPages;
-          console.log(
-            `📁 FileProcessingService: PDF.js discovered ${totalPages} pages for ${file.name}`,
-          );
-
-          // Clean up immediately
-          pdfWorkerManager.destroyDocument(pdfDoc);
-
-          // Check for cancellation after PDF.js processing
-          if (abortController.signal.aborted) {
-            throw new Error("Processing cancelled");
-          }
-        } catch (pdfError) {
-          console.warn(
-            `📁 FileProcessingService: PDF.js failed for ${file.name}, setting pages to 0:`,
-            pdfError,
-          );
-          totalPages = 0; // Unknown page count - UI will hide page count display
-        }
-      }
-
-      // Generate page 1 thumbnail
-      try {
-        thumbnailUrl = await generateThumbnailForFile(file);
-        console.log(
-          `📁 FileProcessingService: Generated thumbnail for ${file.name}`,
-        );
-
-        // Check for cancellation after thumbnail generation
-        if (abortController.signal.aborted) {
-          throw new Error("Processing cancelled");
-        }
-      } catch (thumbError) {
-        console.warn(
-          `📁 FileProcessingService: Thumbnail generation failed for ${file.name}:`,
-          thumbError,
-        );
-      }
-
-      // Create page structure
-      const pages = Array.from({ length: totalPages }, (_, index) => ({
-        pageNumber: index + 1,
-        thumbnail: index === 0 ? thumbnailUrl : undefined, // Only page 1 gets thumbnail initially
-        rotation: 0,
-        splitBefore: false,
-      }));
-
-      const metadata: ProcessedFileMetadata = {
-        totalPages,
-        pages,
-        thumbnailUrl, // For FileEditor display
-        lastProcessed: Date.now(),
-      };
-
-      console.log(
-        `📁 FileProcessingService: Processing complete for ${file.name} - ${totalPages} pages`,
-      );
-
-      return {
-        success: true,
-        metadata,
-      };
-    } catch (error) {
-      console.error(
-        `📁 FileProcessingService: Processing failed for ${file.name}:`,
-        error,
-      );
-
-      return {
-        success: false,
-        error:
-          error instanceof Error ? error.message : "Unknown processing error",
-      };
-    }
-  }
-
-  /**
-   * Clear all processing caches
-   */
-  clearCache(): void {
-    this.processingCache.clear();
-  }
-
-  /**
-   * Check if a file is currently being processed
-   */
-  isProcessing(fileId: FileId): boolean {
-    return this.processingCache.has(fileId);
-  }
-
-  /**
-   * Cancel processing for a specific file
-   */
-  cancelProcessing(fileId: FileId): boolean {
-    const operation = this.processingCache.get(fileId);
-    if (operation) {
-      operation.abortController.abort();
-      console.log(
-        `📁 FileProcessingService: Cancelled processing for ${fileId}`,
-      );
-      return true;
-    }
-    return false;
-  }
-
-  /**
-   * Cancel all ongoing processing operations
-   */
-  cancelAllProcessing(): void {
-    this.processingCache.forEach((operation, fileId) => {
-      operation.abortController.abort();
-      console.log(
-        `📁 FileProcessingService: Cancelled processing for ${fileId}`,
-      );
-    });
-    console.log(
-      `📁 FileProcessingService: Cancelled ${this.processingCache.size} processing operations`,
-    );
-  }
-
-  /**
-   * Emergency cleanup - cancel all processing and destroy workers
-   */
-  emergencyCleanup(): void {
-    this.cancelAllProcessing();
-    this.clearCache();
-    pdfWorkerManager.destroyAllDocuments();
-  }
-}
-
-// Export singleton instance
-export const fileProcessingService = new FileProcessingService();
diff --git a/frontend/editor/src/core/services/signatureDetectionService.ts b/frontend/editor/src/core/services/signatureDetectionService.ts
index cae3fed8ed..0062380a79 100644
--- a/frontend/editor/src/core/services/signatureDetectionService.ts
+++ b/frontend/editor/src/core/services/signatureDetectionService.ts
@@ -98,54 +98,3 @@ export const detectSignaturesInFiles = async (
 
   return results;
 };
-
-/**
- * Hook for managing signature detection state
- */
-export const useSignatureDetection = () => {
-  const [detectionResults, setDetectionResults] = React.useState<
-    FileSignatureStatus[]
-  >([]);
-  const [isDetecting, setIsDetecting] = React.useState(false);
-
-  const detectSignatures = async (files: File[]) => {
-    if (files.length === 0) {
-      setDetectionResults([]);
-      return;
-    }
-
-    setIsDetecting(true);
-    try {
-      const results = await detectSignaturesInFiles(files);
-      setDetectionResults(results);
-    } finally {
-      setIsDetecting(false);
-    }
-  };
-
-  const getFileSignatureStatus = (
-    file: File,
-  ): SignatureDetectionResult | null => {
-    const result = detectionResults.find((r) => r.file === file);
-    return result ? result.result : null;
-  };
-
-  const hasAnySignatures = detectionResults.some((r) => r.result.hasSignatures);
-  const totalSignatures = detectionResults.reduce(
-    (sum, r) => sum + (r.result.signatureCount || 0),
-    0,
-  );
-
-  return {
-    detectionResults,
-    isDetecting,
-    detectSignatures,
-    getFileSignatureStatus,
-    hasAnySignatures,
-    totalSignatures,
-    reset: () => setDetectionResults([]),
-  };
-};
-
-// Import React for the hook
-import React from "react";
diff --git a/frontend/editor/src/core/styles/zIndex.ts b/frontend/editor/src/core/styles/zIndex.ts
index 3bc0801dee..b9e3df4ad1 100644
--- a/frontend/editor/src/core/styles/zIndex.ts
+++ b/frontend/editor/src/core/styles/zIndex.ts
@@ -1,7 +1,6 @@
 // Centralized z-index constants for new usages added in this branch.
 // Keep values identical to their original inline usages.
 
-export const Z_INDEX_FULLSCREEN_SURFACE = 1000;
 export const Z_INDEX_OVER_FULLSCREEN_SURFACE = 1300;
 export const Z_ANALYTICS_MODAL = 1301;
 // Config/Settings modal - should appear above analytics modal when navigating from onboarding
@@ -45,8 +44,6 @@ export const Z_INDEX_VIEWER_FLOATING_MENU = 10000;
 
 export const Z_INDEX_TOAST = 10001;
 
-// Signature preview overlays inside the PDF viewer
-export const Z_INDEX_SIGNATURE_DRAG_BLOCKER = 999;
 export const Z_INDEX_SIGNATURE_OVERLAY = 1000;
 export const Z_INDEX_SIGNATURE_OVERLAY_HANDLE = 1001;
 export const Z_INDEX_SIGNATURE_OVERLAY_DELETE = 1002;
diff --git a/frontend/editor/src/core/tools/pdfTextEditor/fontAnalysis.ts b/frontend/editor/src/core/tools/pdfTextEditor/fontAnalysis.ts
index 197a350ebd..87b2f92d20 100644
--- a/frontend/editor/src/core/tools/pdfTextEditor/fontAnalysis.ts
+++ b/frontend/editor/src/core/tools/pdfTextEditor/fontAnalysis.ts
@@ -502,21 +502,3 @@ export const getFontStatusColor = (status: FontStatus): string => {
       return "gray";
   }
 };
-
-/**
- * Gets an icon indicator for the font status
- */
-export const getFontStatusIcon = (status: FontStatus): string => {
-  switch (status) {
-    case "perfect":
-      return "✓";
-    case "embedded-subset":
-      return "⚠";
-    case "system-fallback":
-      return "⚠";
-    case "missing":
-      return "✗";
-    case "unknown":
-      return "?";
-  }
-};
diff --git a/frontend/editor/src/core/tools/pdfTextEditor/pdfTextEditorUtils.ts b/frontend/editor/src/core/tools/pdfTextEditor/pdfTextEditorUtils.ts
index f2a5777b8e..522e25684f 100644
--- a/frontend/editor/src/core/tools/pdfTextEditor/pdfTextEditorUtils.ts
+++ b/frontend/editor/src/core/tools/pdfTextEditor/pdfTextEditorUtils.ts
@@ -1334,42 +1334,6 @@ const rebuildParagraphLineElements = (
   return rebuilt;
 };
 
-export const buildUpdatedDocument = (
-  source: PdfJsonDocument,
-  groupsByPage: TextGroup[][],
-  imagesByPage: PdfJsonImageElement[][],
-): PdfJsonDocument => {
-  const updated = deepCloneDocument(source);
-  const pages = updated.pages ?? [];
-
-  updated.pages = pages.map((page, pageIndex) => {
-    const groups = groupsByPage[pageIndex] ?? [];
-    const images = imagesByPage[pageIndex] ?? [];
-    if (!groups.length) {
-      return {
-        ...page,
-        imageElements: images.map(cloneImageElement),
-      };
-    }
-
-    const updatedElements: PdfJsonTextElement[] = groups.flatMap((group) => {
-      if (group.text === group.originalText) {
-        return group.originalElements.map(cloneTextElement);
-      }
-      return [createMergedElement(group)];
-    });
-
-    return {
-      ...page,
-      textElements: updatedElements,
-      imageElements: images.map(cloneImageElement),
-      contentStreams: page.contentStreams ?? null,
-    };
-  });
-
-  return updated;
-};
-
 export const restoreGlyphElements = (
   source: PdfJsonDocument,
   groupsByPage: TextGroup[][],
diff --git a/frontend/editor/src/core/types/getPdfInfo.ts b/frontend/editor/src/core/types/getPdfInfo.ts
index 46b73c2371..8fd2ca361a 100644
--- a/frontend/editor/src/core/types/getPdfInfo.ts
+++ b/frontend/editor/src/core/types/getPdfInfo.ts
@@ -279,4 +279,3 @@ export interface PdfInfoReportData {
 }
 
 export const INFO_JSON_FILENAME = "response.json";
-export const INFO_PDF_FILENAME = "pdf-information-report.pdf";
diff --git a/frontend/editor/src/desktop/config/planFeatures.ts b/frontend/editor/src/desktop/config/planFeatures.ts
deleted file mode 100644
index d0d7896c1e..0000000000
--- a/frontend/editor/src/desktop/config/planFeatures.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-/**
- * Desktop plan features configuration
- * Single source of truth for plan features in desktop billing page
- */
-
-export interface PlanFeatureConfig {
-  translationKey: string;
-  defaultText: string;
-}
-
-export const FREE_PLAN_FEATURES: PlanFeatureConfig[] = [
-  {
-    translationKey: "credits.modal.allInOneWorkspace",
-    defaultText: "All-in-one PDF workspace (viewer, tools & agent)",
-  },
-  {
-    translationKey: "credits.modal.fullyPrivateFiles",
-    defaultText: "Fully private files",
-  },
-  {
-    translationKey: "credits.modal.standardThroughput",
-    defaultText: "Standard throughput",
-  },
-  {
-    translationKey: "credits.modal.customSmartFolders",
-    defaultText: "Custom Smart Folders",
-  },
-  {
-    translationKey: "credits.modal.apiSandbox",
-    defaultText: "API sandbox",
-  },
-];
-
-export const TEAM_PLAN_FEATURES: PlanFeatureConfig[] = [
-  {
-    translationKey: "credits.modal.unlimitedSeats",
-    defaultText: "Unlimited seats",
-  },
-  {
-    translationKey: "credits.modal.fasterThroughput",
-    defaultText: "10x faster throughput",
-  },
-  {
-    translationKey: "credits.modal.largeFileProcessing",
-    defaultText: "Large file processing",
-  },
-  {
-    translationKey: "credits.modal.premiumAiModels",
-    defaultText: "Premium AI models",
-  },
-  {
-    translationKey: "credits.modal.secureApiAccess",
-    defaultText: "Secure API access",
-  },
-  {
-    translationKey: "credits.modal.prioritySupport",
-    defaultText: "Priority support",
-  },
-];
-
-export const ENTERPRISE_PLAN_FEATURES: PlanFeatureConfig[] = [
-  {
-    translationKey: "credits.modal.orgWideAccess",
-    defaultText: "Org-wide access controls",
-  },
-  {
-    translationKey: "credits.modal.privateDocCloud",
-    defaultText: "Private Document Cloud",
-  },
-  {
-    translationKey: "credits.modal.ragFineTuning",
-    defaultText: "RAG + fine-tuning",
-  },
-  {
-    translationKey: "credits.modal.unlimitedApiAccess",
-    defaultText: "Unlimited API access",
-  },
-  {
-    translationKey: "credits.modal.advancedMonitoring",
-    defaultText: "Advanced monitoring",
-  },
-  {
-    translationKey: "credits.modal.dedicatedSupportSlas",
-    defaultText: "Dedicated support & SLAs",
-  },
-];
diff --git a/frontend/editor/src/portal/api/users.ts b/frontend/editor/src/portal/api/users.ts
index 19a686cf8c..0755185109 100644
--- a/frontend/editor/src/portal/api/users.ts
+++ b/frontend/editor/src/portal/api/users.ts
@@ -21,17 +21,6 @@ export type MemberStatus = "active" | "invited" | "suspended";
  */
 export type PortalAccessState = "admin" | "role" | "team" | "granted" | "none";
 
-export const PORTAL_ACCESS_TONE: Record<
-  PortalAccessState,
-  "success" | "info" | "neutral" | "warning"
-> = {
-  admin: "info",
-  role: "info",
-  team: "info",
-  granted: "success",
-  none: "neutral",
-};
-
 export interface Member {
   id: string;
   name: string;
@@ -158,15 +147,6 @@ export interface UsersResponse {
 /*  Presentation metadata — product copy, lives client-side                  */
 /* ──────────────────────────────────────────────────────────────────────── */
 
-export const MEMBER_STATUS_TONE: Record<
-  MemberStatus,
-  "success" | "warning" | "danger" | "neutral" | "info"
-> = {
-  active: "success",
-  invited: "info",
-  suspended: "danger",
-};
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  Role catalogue                                                           */
 /*  The same five roles exist on every tier — what varies is who can fill    */
@@ -233,9 +213,6 @@ export const ROLE_TONE: Record<RoleId, Role["tone"]> = Object.fromEntries(
   ROLES.map((r) => [r.id, r.tone]),
 ) as Record<RoleId, Role["tone"]>;
 
-/** Roles an admin can assign from the portal; guest is derived, not assigned. */
-export const ASSIGNABLE_ROLES: RoleId[] = ["admin", "team_owner", "member"];
-
 /* ── backend payload (subset of AdminSettingsData) ─────────────────────── */
 
 interface AdminUserSummaryDto {
diff --git a/frontend/editor/src/portal/components/pipelines/pipelineOperations.ts b/frontend/editor/src/portal/components/pipelines/pipelineOperations.ts
index 2a405e8f1e..4c44a50224 100644
--- a/frontend/editor/src/portal/components/pipelines/pipelineOperations.ts
+++ b/frontend/editor/src/portal/components/pipelines/pipelineOperations.ts
@@ -1,46 +1,9 @@
-/**
- * The operation catalogue the composer builds a pipeline from. Each entry's
- * `operation` is a real Stirling endpoint path (the backend's PipelineStep
- * contract) with sensible default `parameters`, so a composed pipeline is
- * runnable as-is. Per-operation parameter editing is intentionally out of scope
- * for this version: the composer chains operations with their defaults. Labels
- * are derived from the path, so adding an operation needs no translation work.
- */
-
-export interface PipelineOperationDef {
-  /** Stirling endpoint path, e.g. "/api/v1/misc/compress-pdf". */
-  operation: string;
-  /** Scalar form fields the endpoint accepts; defaults that keep the step valid. */
-  parameters: Record<string, unknown>;
-}
-
-export const PIPELINE_OPERATIONS: PipelineOperationDef[] = [
-  { operation: "/api/v1/misc/ocr-pdf", parameters: {} },
-  { operation: "/api/v1/misc/compress-pdf", parameters: {} },
-  { operation: "/api/v1/misc/flatten", parameters: {} },
-  { operation: "/api/v1/misc/repair", parameters: {} },
-  {
-    operation: "/api/v1/security/auto-redact",
-    parameters: { mode: "automatic", convertPDFToImage: true },
-  },
-  {
-    operation: "/api/v1/security/sanitize-pdf",
-    parameters: { removeJavaScript: true },
-  },
-  { operation: "/api/v1/security/add-watermark", parameters: {} },
-  { operation: "/api/v1/security/add-password", parameters: {} },
-  { operation: "/api/v1/security/remove-password", parameters: {} },
-  { operation: "/api/v1/general/merge-pdfs", parameters: {} },
-  { operation: "/api/v1/misc/add-stamp", parameters: {} },
-  { operation: "/api/v1/misc/add-page-numbers", parameters: {} },
-];
-
 /**
  * Turn an endpoint path into a display label: take the last segment, drop the
  * "pdf"/"pdfs" filler words, and title-case the rest.
  * "/api/v1/misc/compress-pdf" → "Compress"; "/api/v1/security/auto-redact" →
- * "Auto Redact". Works for any operation, including ones loaded from the backend
- * that aren't in the catalogue above.
+ * "Auto Redact". Used as the fallback name for a stored step whose endpoint has
+ * no tool in the registry to take a name from.
  */
 export function humanizeOperation(path: string): string {
   const last = path.split("/").filter(Boolean).pop() ?? path;
diff --git a/frontend/editor/src/portal/contexts/TierContext.tsx b/frontend/editor/src/portal/contexts/TierContext.tsx
index 411a3f75ba..22c1c055fe 100644
--- a/frontend/editor/src/portal/contexts/TierContext.tsx
+++ b/frontend/editor/src/portal/contexts/TierContext.tsx
@@ -15,17 +15,6 @@ export interface TierInfo {
   dotColor: string;
 }
 
-export const TIER_INFO: Record<Tier, TierInfo> = {
-  // Matches SaaS branding (editor/cloud Payg + PaygFree): the always-free
-  // manual-tools tier is "Editor plan"; the metered tier is "Processor plan".
-  free: { labelKey: "portal.tier.free", dotColor: "var(--c-text-subtle)" },
-  pro: { labelKey: "portal.tier.pro", dotColor: "var(--c-primary)" },
-  enterprise: {
-    labelKey: "portal.tier.enterprise",
-    dotColor: "var(--color-purple)",
-  },
-};
-
 interface TierContextValue {
   tier: Tier;
   /** No-op when the tier is derived from the real plan (i.e. in the app). */
diff --git a/frontend/editor/src/portal/contexts/ViewContext.tsx b/frontend/editor/src/portal/contexts/ViewContext.tsx
index be333f56d3..dd9cf41b6c 100644
--- a/frontend/editor/src/portal/contexts/ViewContext.tsx
+++ b/frontend/editor/src/portal/contexts/ViewContext.tsx
@@ -17,22 +17,6 @@ export type ViewId =
   | "procurement"
   | "settings";
 
-export const VIEW_LABELS: Record<ViewId, string> = {
-  home: "Home",
-  editor: "Editor",
-  users: "Users",
-  sources: "Sources",
-  integrations: "Integrations",
-  policies: "Policies",
-  pipelines: "Pipelines",
-  documents: "Documents",
-  infrastructure: "Infrastructure",
-  usage: "Usage & Billing",
-  docs: "Documentation",
-  procurement: "Procurement",
-  settings: "Settings",
-};
-
 export const VIEW_PATHS: Record<ViewId, string> = {
   home: "/",
   editor: "/editor",
diff --git a/frontend/editor/src/portal/data/endpoints.ts b/frontend/editor/src/portal/data/endpoints.ts
index d6e440805d..974b654b5b 100644
--- a/frontend/editor/src/portal/data/endpoints.ts
+++ b/frontend/editor/src/portal/data/endpoints.ts
@@ -1254,14 +1254,6 @@ export const ENDPOINTS_BY_PATH: Record<string, Endpoint> = Object.fromEntries(
   ALL_ENDPOINTS.map((e) => [e.endpoint, e]),
 );
 
-/** Lookup a vertical by its key. */
-export const lookupVertical = (key: VerticalKey): Vertical | null =>
-  VERTICALS.find((v) => v.key === key) ?? null;
-
-/** Lookup an endpoint by its route path. */
-export const lookupEndpoint = (path: string): Endpoint | null =>
-  ENDPOINTS_BY_PATH[path] ?? null;
-
 /** Tier-availability gate used by the docs / cards / picker. */
 export function isEndpointAvailable(endpoint: Endpoint, tier: Tier): boolean {
   if (endpoint.tier === 0) return true;
diff --git a/frontend/editor/src/portal/data/ops.ts b/frontend/editor/src/portal/data/ops.ts
index f650a13fad..e529eaab06 100644
--- a/frontend/editor/src/portal/data/ops.ts
+++ b/frontend/editor/src/portal/data/ops.ts
@@ -404,9 +404,6 @@ export const PIPELINE_AGENTS: readonly PipelineAgent[] = [
   },
 ];
 
-export const lookupAgent = (id: string): PipelineAgent | null =>
-  PIPELINE_AGENTS.find((a) => a.id === id) ?? null;
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  OP_CATEGORIES — picker section metadata                                 */
 /* ──────────────────────────────────────────────────────────────────────── */
@@ -1301,8 +1298,3 @@ export const DESTINATION_OPTIONS: readonly DestinationOption[] = [
     desc: "Drop output files on an SFTP server",
   },
 ];
-
-export const lookupSource = (id: string) =>
-  SOURCE_OPTIONS.find((s) => s.id === id) ?? null;
-export const lookupDestination = (id: string) =>
-  DESTINATION_OPTIONS.find((d) => d.id === id) ?? null;
diff --git a/frontend/editor/src/portal/docs/manifest/registry.ts b/frontend/editor/src/portal/docs/manifest/registry.ts
index 02d608f264..730367f87e 100644
--- a/frontend/editor/src/portal/docs/manifest/registry.ts
+++ b/frontend/editor/src/portal/docs/manifest/registry.ts
@@ -14,9 +14,6 @@ import type {
 
 const manifest = JSON.parse(manifestRaw) as DocsManifest;
 
-/** Provenance of the current manifest (repo + ref it was generated from). */
-export const docsSource = manifest.source;
-
 /** The auto-sorted nav tree (sections → items). */
 export function loadDocsNav(): DocsNavSection[] {
   return manifest.nav;

From 8990f55e503ff441f55b252f070a1a0cc2f52951 Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Fri, 31 Jul 2026 15:57:19 +0100
Subject: [PATCH 013/122] feat(storage): encryption at rest for stored files
 (per-team envelope encryption) (#7155)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

PR1 of the encrypt-at-rest initiative: user files stored by Stirling (My
Files, workflow files) are now AES-256 encrypted at rest across all
three storage backends, with keys that never leave the deployment.

**What was changed**

- New `EncryptingStorageProvider` decorator wraps whichever
`StorageProvider` backend is configured (local / database / S3). It
encrypts on `store` (Tink AES-256-GCM streaming AEAD, 1 MiB segments)
and transparently decrypts on `load`; legacy plaintext blobs are
detected by magic sniff and pass through untouched, so mixed state is
safe and no migration is required to enable.
- Envelope-encryption key hierarchy: each blob gets a random per-file
DEK, wrapped by a per-team KEK stored (master-key-wrapped) in a new
`file_encryption_keys` registry table; the master key resolves like the
existing credential key — `stirling.security.fileEncryptionKey`
property, `STIRLING_FILE_ENCRYPTION_KEY` env var, or an auto-generated
owner-only `file-encryption.key` in the config dir (cluster mode
requires an explicit shared key, fail-fast).
- Self-describing blob format (`SPDFEAR1` header) carrying the key id,
plaintext length, and the wrapped DEK; the header prefix is bound as GCM
associated data to both the DEK wrap and the payload, so headers cannot
be transplanted between blobs.
- Enabled via `storage.encryption.enabled=true`, gated on a
Pro/Enterprise licence — **write side only**: decryption activates
whenever key rows exist, so switching the flag off or a lapsed licence
can never make previously encrypted files unreadable.
- Key status lifecycle (`ACTIVE`/`RETIRED`/`DISABLED`): `DISABLED` is a
reversible per-team kill switch that fails closed on read; no API path
deletes key material. A revoked download surfaces as **403 Forbidden**
("access revoked"), not a 500, since it is a deliberate policy state
rather than a fault.
- Startup self-check: a master key that cannot unwrap existing key rows
refuses to boot rather than silently starting a second key hierarchy.
- S3 presigned download URLs are suppressed for decorated storage (they
would serve ciphertext); the controller already falls back to
app-streamed downloads.
- `StoredFile`/`StoredObject` gain a nullable `encryption_key_id`
(ddl-auto, no migration); persisted sizes remain plaintext sizes so
quotas and UI are unchanged.

**Why**

Enterprise security questionnaires (and HIPAA/GDPR/CMMC buyers) require
encryption at rest with documented key management; files were previously
plaintext in every backend. Design doc and vendor/standards research
(Purview, Box KeySafe, Google CSE, ISO 32000-2) informed the approach.

## Manually tested end-to-end

Beyond the automated suite, the full flow was exercised against a
running backend (local provider, `storage.encryption.enabled=true`,
login enabled) via the storage API:

1. **Startup** — master key auto-generated with the "back this up"
warning; logs `master key initialised (AES-256-GCM, fingerprint …)` and
`Storage encryption at rest active (writes encrypted)`.
2. **Encrypted at rest** — uploaded a PDF containing a known marker
string; the blob on disk (371 B vs 219 B plaintext) began with the
`SPDFEAR1` header + key id + ciphertext, contained **no `%PDF` signature
and no marker** — not openable as a PDF straight off disk.
3. **Transparent access** — downloading the file through the API
returned it **byte-identical** to the original, marker intact; stored
`sizeBytes` stayed the plaintext size.
4. **Kill switch + reversibility** — set the team key's status directly
in the DB and restarted:
- `DISABLED` → download **failed closed** (`403`, "access to this
content is revoked"), zero plaintext served.
- `ACTIVE` again → file **fully recovered, byte-identical**. Disabling
is a reversible switch on a preserved key row, not destruction.

(The 403 mapping in step 4 was added in this PR after the manual run
first surfaced it as a generic 500.)

## Coming in later PRs

- **PR2 — ops & lifecycle:** audit events for
encrypt/decrypt/key-lifecycle; admin endpoints for the kill switch
(disable/enable) and key status; a background "encrypt existing files"
migration job for turning the feature on over pre-existing plaintext;
master-key rotation (re-wrap KEK rows). Also plans a
key-backup/fingerprint verification command.
- **PR3 — admin UI:** settings section (status, per-team key list with
disable/enable), encrypted-file badge in My Files, i18n.
- **Later:** per-**source** encryption for the Processor pipeline (the
`SOURCE` key scope is already reserved in the schema); pluggable
external KMS / BYOK master-key backends (Vault, AWS/Azure/GCP KMS);
optional FIPS-validated crypto module build for CMMC; and encrypted
egress (PDF-native AES-256) for files leaving the platform.

**Reviewer notes**

- New dependency: `com.google.crypto.tink:tink:1.23.0` (Apache-2.0, pure
Java — bundled in the boot jar, no Docker changes). Pulls protobuf-java
4.33.6, which clears the Aikido-flagged CVE-2024-7254. `./gradlew
checkLicense --no-parallel` passes.
- The `file-encryption.key` file is generated in the config dir on first
use and must be backed up; losing it makes encrypted files unrecoverable
(loud log warning + fingerprint exposed for backup verification).
- Tests cover round-trips on re-openable and one-shot (S3-style)
backends, multi-segment files, legacy passthrough, decrypt-only mode,
disabled-key fail-closed (now asserting the 403 mapping), header/payload
tamper rejection, key-creation races, and presigned-URL suppression.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../common/model/ApplicationProperties.java   |  14 +
 .../src/main/resources/settings.yml.template  |  20 +
 app/proprietary/build.gradle                  |   3 +
 .../storage/config/StorageProviderConfig.java |  67 ++-
 .../storage/crypto/EncryptedFileFormat.java   | 105 ++++
 .../crypto/EncryptingStorageProvider.java     | 470 ++++++++++++++++++
 .../crypto/FileEncryptionKeyService.java      | 214 ++++++++
 .../crypto/FileEncryptionMasterKey.java       | 172 +++++++
 .../crypto/StorageEncryptionException.java    |  15 +
 .../crypto/StorageEncryptionState.java        | 112 +++++
 .../crypto/StorageKeyRevokedException.java    |  14 +
 .../storage/model/FileEncryptionKey.java      |  95 ++++
 .../proprietary/storage/model/StoredFile.java |   8 +
 .../storage/provider/StoredObject.java        |   7 +-
 .../FileEncryptionKeyRepository.java          |  21 +
 .../storage/service/FileStorageService.java   |  14 +
 .../service/WorkflowSessionService.java       |   1 +
 .../config/StorageProviderConfigTest.java     | 142 ++++--
 .../crypto/EncryptedFileFormatTest.java       |  78 +++
 .../crypto/EncryptingStorageProviderTest.java | 391 +++++++++++++++
 .../FileEncryptionKeyServiceDbTest.java       | 113 +++++
 .../crypto/FileEncryptionKeyServiceTest.java  | 197 ++++++++
 .../storage/crypto/InMemoryKeyRepo.java       |  66 +++
 .../service/FileStorageServiceTest.java       |  36 ++
 build.gradle                                  |   1 +
 25 files changed, 2338 insertions(+), 38 deletions(-)
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormat.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProvider.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyService.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionMasterKey.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionException.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageKeyRevokedException.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/model/FileEncryptionKey.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/storage/repository/FileEncryptionKeyRepository.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormatTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProviderTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceDbTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/InMemoryKeyRepo.java

diff --git a/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java b/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java
index 43f27eec2d..ffbacfee1b 100644
--- a/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java
+++ b/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java
@@ -1076,6 +1076,20 @@ public class ApplicationProperties {
         private Quotas quotas = new Quotas();
         private Sharing sharing = new Sharing();
         private Signing signing = new Signing();
+        private Encryption encryption = new Encryption();
+
+        /**
+         * Encryption at rest for stored files (Pro/Enterprise). Enabling encrypts new writes;
+         * disabling later only stops encrypting new writes — existing encrypted files keep
+         * decrypting as long as the key material is present. The master key is resolved like the
+         * credential key: {@code stirling.security.fileEncryptionKey} property, {@code
+         * STIRLING_FILE_ENCRYPTION_KEY} env var, or an auto-generated {@code file-encryption.key}
+         * in the config directory.
+         */
+        @Data
+        public static class Encryption {
+            private boolean enabled = false;
+        }
 
         @Data
         public static class Local {
diff --git a/app/core/src/main/resources/settings.yml.template b/app/core/src/main/resources/settings.yml.template
index fd9cc13c13..be93a4485f 100644
--- a/app/core/src/main/resources/settings.yml.template
+++ b/app/core/src/main/resources/settings.yml.template
@@ -292,6 +292,26 @@ storage:
     linkExpirationDays: 3 # Number of days before share links expire
   signing:
     enabled: false # set to 'true' to enable group signing workflow (requires storage.enabled) [ALPHA]
+  # ====================================================================================
+  # ENCRYPTION AT REST - PRO / ENTERPRISE LICENSE REQUIRED TO ENABLE
+  # ====================================================================================
+  # Encrypts stored files (AES-256 envelope encryption, per-team keys). The master key is
+  # resolved in this order:
+  #   1. stirling.security.fileEncryptionKey property
+  #   2. STIRLING_FILE_ENCRYPTION_KEY environment variable
+  #   3. an auto-generated configs/file-encryption.key (single-node only; cluster mode
+  #      requires an explicitly shared key on every node)
+  # Generate a key with: openssl rand -base64 32
+  #
+  # *** BACK UP THE MASTER KEY. Losing it makes every encrypted stored file            ***
+  # *** permanently unrecoverable. Verify backups against the key fingerprint logged   ***
+  # *** at startup.                                                                    ***
+  #
+  # Enabling encrypts new writes only (existing files stay readable as plaintext).
+  # Disabling later only stops encrypting new writes - existing encrypted files remain
+  # readable as long as the key material is present.
+  encryption:
+    enabled: false # set to 'true' to encrypt stored files at rest
     userListScope: org # Signing user-picker scope: 'org' (default) = whole instance, else caller's team only.
 autoPipeline:
   outputFolder: "" # Output folder for processed pipeline files (leave empty for default)
diff --git a/app/proprietary/build.gradle b/app/proprietary/build.gradle
index d2028f7859..ffe3cdc1e6 100644
--- a/app/proprietary/build.gradle
+++ b/app/proprietary/build.gradle
@@ -67,6 +67,9 @@ dependencies {
     implementation "software.amazon.awssdk:s3:${awsSdkVersion}"
     implementation "software.amazon.awssdk:url-connection-client:${awsSdkVersion}"
 
+    // Streaming AEAD (AES-GCM-HKDF segments) for storage encryption at rest. Apache-2.0.
+    implementation "com.google.crypto.tink:tink:${tinkVersion}"
+
     // @DataJpaTest slice (Boot 4 ships test slices as separate starters, like webmvc-test at the
     // root) so policy.source repositories can be exercised against embedded H2.
     testImplementation 'org.springframework.boot:spring-boot-starter-data-jpa-test'
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java
index db063cda80..6bad8b487b 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java
@@ -6,20 +6,31 @@ import java.nio.file.Path;
 import java.util.Locale;
 import java.util.Optional;
 
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.transaction.PlatformTransactionManager;
+import org.springframework.transaction.TransactionDefinition;
+import org.springframework.transaction.support.TransactionOperations;
+import org.springframework.transaction.support.TransactionTemplate;
 
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.configuration.InstallationPathConfig;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.util.TempFileManager;
 import stirling.software.proprietary.cluster.s3.S3Clients;
 import stirling.software.proprietary.security.configuration.ee.LicenseKeyChecker;
+import stirling.software.proprietary.storage.crypto.EncryptingStorageProvider;
+import stirling.software.proprietary.storage.crypto.FileEncryptionKeyService;
+import stirling.software.proprietary.storage.crypto.FileEncryptionMasterKey;
+import stirling.software.proprietary.storage.crypto.StorageEncryptionState;
 import stirling.software.proprietary.storage.provider.DatabaseStorageProvider;
 import stirling.software.proprietary.storage.provider.LocalStorageProvider;
 import stirling.software.proprietary.storage.provider.S3StorageProvider;
 import stirling.software.proprietary.storage.provider.StorageProvider;
+import stirling.software.proprietary.storage.repository.FileEncryptionKeyRepository;
 import stirling.software.proprietary.storage.repository.StoredFileBlobRepository;
 
 @Configuration
@@ -29,10 +40,64 @@ public class StorageProviderConfig {
 
     private final ApplicationProperties applicationProperties;
     private final StoredFileBlobRepository storedFileBlobRepository;
+    private final FileEncryptionKeyRepository fileEncryptionKeyRepository;
     private final LicenseKeyChecker licenseKeyChecker;
 
+    /**
+     * The encryption state behind the always-installed decorator. Key machinery is created eagerly
+     * when the write flag is on (licence-gated) or key rows already exist — so a wrong master key
+     * fails startup, not the first download — and lazily if encrypted content shows up later
+     * (config drift on one cluster node must fail loudly, never stream ciphertext). Turning the
+     * flag off or losing the licence only stops encrypting new writes; decryption stays available.
+     */
+    @Bean
+    public StorageEncryptionState storageEncryptionState(
+            @Value("${stirling.security.fileEncryptionKey:}") String configuredFileEncryptionKey,
+            @Value("${cluster.enabled:false}") boolean clusterEnabled,
+            PlatformTransactionManager transactionManager) {
+        boolean writeEnabled = applicationProperties.getStorage().getEncryption().isEnabled();
+        if (writeEnabled) {
+            licenseKeyChecker.requireProOrEnterprise("storage.encryption");
+        }
+        // Key creation must commit independently of any caller transaction (see
+        // FileEncryptionKeyService#createActive).
+        TransactionTemplate requiresNew = new TransactionTemplate(transactionManager);
+        requiresNew.setPropagationBehavior(TransactionDefinition.PROPAGATION_REQUIRES_NEW);
+        StorageEncryptionState state =
+                new StorageEncryptionState(
+                        writeEnabled,
+                        () ->
+                                createKeyService(
+                                        configuredFileEncryptionKey, clusterEnabled, requiresNew),
+                        fileEncryptionKeyRepository);
+        if (writeEnabled || fileEncryptionKeyRepository.count() > 0) {
+            state.initialiseEagerly();
+            log.info(
+                    "Storage encryption at rest active (writes {})",
+                    writeEnabled ? "encrypted" : "plaintext; decrypt-only mode");
+        }
+        return state;
+    }
+
+    private FileEncryptionKeyService createKeyService(
+            String configuredKey, boolean clusterEnabled, TransactionOperations keyCreationTx) {
+        FileEncryptionMasterKey masterKey =
+                new FileEncryptionMasterKey(configuredKey, clusterEnabled);
+        FileEncryptionKeyService keyService =
+                new FileEncryptionKeyService(fileEncryptionKeyRepository, masterKey, keyCreationTx);
+        // Wrong key must fail fast, not silently start a second key hierarchy.
+        keyService.verifyMasterKey();
+        return keyService;
+    }
+
     @Bean(destroyMethod = "close")
-    public StorageProvider storageProvider() {
+    public StorageProvider storageProvider(
+            StorageEncryptionState encryptionState, Optional<TempFileManager> tempFileManager) {
+        return new EncryptingStorageProvider(
+                innerStorageProvider(), encryptionState, tempFileManager.orElse(null));
+    }
+
+    private StorageProvider innerStorageProvider() {
         boolean storageEnabled = applicationProperties.getStorage().isEnabled();
         String providerName =
                 Optional.ofNullable(applicationProperties.getStorage().getProvider())
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormat.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormat.java
new file mode 100644
index 0000000000..389caa1e3c
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormat.java
@@ -0,0 +1,105 @@
+package stirling.software.proprietary.storage.crypto;
+
+import java.nio.ByteBuffer;
+import java.util.Arrays;
+import java.util.UUID;
+
+/**
+ * On-disk format for storage-encrypted blobs. The object is self-describing so every {@code
+ * StorageProvider} backend stores identical bytes and legacy plaintext blobs are recognised by the
+ * absence of the magic:
+ *
+ * <pre>
+ * offset size field
+ * 0      8    magic "SPDFEAR1"
+ * 8      1    format version (1)
+ * 9      1    cipher suite (1 = AES-256-GCM-HKDF streaming, 1 MiB segments)
+ * 10     16   key id (file_encryption_keys row that wraps the DEK)
+ * 26     8    plaintext length
+ * 34     2    wrapped-DEK length (60 for suite 1)
+ * 36     60   wrapped DEK = IV(12) || AES-256-GCM(scope KEK, DEK) || tag(16)
+ * 96     ..   payload: streaming-AEAD ciphertext
+ * </pre>
+ *
+ * <p>Bytes 0–33 are the associated data for both the DEK wrap and the payload AEAD, so neither a
+ * header transplanted onto another payload nor an altered key id / plaintext length authenticates.
+ */
+public final class EncryptedFileFormat {
+
+    public static final byte[] MAGIC = {'S', 'P', 'D', 'F', 'E', 'A', 'R', '1'};
+    public static final byte FORMAT_VERSION = 1;
+    public static final byte SUITE_AES_GCM_HKDF_1MIB = 1;
+    public static final int SEGMENT_SIZE_BYTES = 1 << 20;
+    public static final int DEK_LENGTH_BYTES = 32;
+    public static final int WRAPPED_DEK_LENGTH = 12 + DEK_LENGTH_BYTES + 16;
+    public static final int HEADER_LENGTH = 8 + 1 + 1 + 16 + 8 + 2 + WRAPPED_DEK_LENGTH;
+
+    private static final int AAD_LENGTH = 34;
+
+    private EncryptedFileFormat() {}
+
+    public record Header(
+            byte formatVersion,
+            byte cipherSuite,
+            UUID keyId,
+            long plaintextLength,
+            byte[] wrappedDek) {
+
+        public byte[] serialize() {
+            ByteBuffer buffer = ByteBuffer.allocate(HEADER_LENGTH);
+            buffer.put(MAGIC);
+            buffer.put(formatVersion);
+            buffer.put(cipherSuite);
+            buffer.putLong(keyId.getMostSignificantBits());
+            buffer.putLong(keyId.getLeastSignificantBits());
+            buffer.putLong(plaintextLength);
+            buffer.putShort((short) wrappedDek.length);
+            buffer.put(wrappedDek);
+            return buffer.array();
+        }
+
+        /** The header prefix (everything before the wrapped DEK) used as AEAD associated data. */
+        public byte[] associatedData() {
+            return Arrays.copyOfRange(serialize(), 0, AAD_LENGTH);
+        }
+    }
+
+    /**
+     * Parses a header from the first {@link #HEADER_LENGTH} bytes of a blob. Returns {@code null}
+     * when the bytes are not a storage-encrypted object (legacy plaintext passthrough).
+     *
+     * @throws StorageEncryptionException when the magic matches but the version/suite is unknown —
+     *     checked so it flows through the callers' IOException error mapping instead of surfacing
+     *     as a bare 500.
+     */
+    public static Header parse(byte[] prefix) throws StorageEncryptionException {
+        if (prefix == null || prefix.length < HEADER_LENGTH) {
+            return null;
+        }
+        for (int i = 0; i < MAGIC.length; i++) {
+            if (prefix[i] != MAGIC[i]) {
+                return null;
+            }
+        }
+        ByteBuffer buffer = ByteBuffer.wrap(prefix, MAGIC.length, HEADER_LENGTH - MAGIC.length);
+        byte version = buffer.get();
+        byte suite = buffer.get();
+        UUID keyId = new UUID(buffer.getLong(), buffer.getLong());
+        long plaintextLength = buffer.getLong();
+        int wrappedDekLength = Short.toUnsignedInt(buffer.getShort());
+        if (version != FORMAT_VERSION
+                || suite != SUITE_AES_GCM_HKDF_1MIB
+                || plaintextLength < 0
+                || wrappedDekLength != WRAPPED_DEK_LENGTH) {
+            throw new StorageEncryptionException(
+                    "Unsupported storage-encryption header (version="
+                            + version
+                            + ", suite="
+                            + suite
+                            + "). This build cannot read the file.");
+        }
+        byte[] wrappedDek = new byte[wrappedDekLength];
+        buffer.get(wrappedDek);
+        return new Header(version, suite, keyId, plaintextLength, wrappedDek);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProvider.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProvider.java
new file mode 100644
index 0000000000..9a22dfd35d
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProvider.java
@@ -0,0 +1,470 @@
+package stirling.software.proprietary.storage.crypto;
+
+import java.io.BufferedOutputStream;
+import java.io.ByteArrayInputStream;
+import java.io.File;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.io.SequenceInputStream;
+import java.net.URI;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.security.GeneralSecurityException;
+import java.security.SecureRandom;
+import java.time.Duration;
+import java.util.Arrays;
+import java.util.Optional;
+
+import javax.crypto.Cipher;
+import javax.crypto.spec.GCMParameterSpec;
+import javax.crypto.spec.SecretKeySpec;
+
+import org.springframework.core.io.AbstractResource;
+import org.springframework.core.io.Resource;
+import org.springframework.web.multipart.MultipartFile;
+
+import com.google.crypto.tink.subtle.AesGcmHkdfStreaming;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.util.TempFileManager;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.provider.StorageProvider;
+import stirling.software.proprietary.storage.provider.StoredObject;
+
+/**
+ * Envelope-encryption decorator over any {@link StorageProvider}: encrypts on {@code store} (when
+ * the write flag is on), decrypts on {@code load}, and passes legacy plaintext blobs through
+ * untouched (detected by the {@link EncryptedFileFormat} magic). Backends store opaque ciphertext
+ * and need no changes.
+ *
+ * <p>The decorator is installed unconditionally (see {@link StorageEncryptionState}), so a node
+ * whose config lags the cluster decrypts or fails loudly instead of streaming raw ciphertext.
+ * Decryption keeps working after the feature is switched off; only new writes revert to plaintext.
+ *
+ * <p>Presigned download URLs delegate to the backend only while no encrypted content can exist;
+ * otherwise they are suppressed, because an S3 presigned GET would hand ciphertext straight to the
+ * browser. Callers already fall back to app-streamed {@link #load} when no URL is offered.
+ */
+@Slf4j
+public class EncryptingStorageProvider implements StorageProvider {
+
+    private static final SecureRandom RANDOM = new SecureRandom();
+
+    private final StorageProvider delegate;
+    private final StorageEncryptionState state;
+    private final TempFileManager tempFileManager;
+
+    public EncryptingStorageProvider(StorageProvider delegate, StorageEncryptionState state) {
+        this(delegate, state, null);
+    }
+
+    public EncryptingStorageProvider(
+            StorageProvider delegate,
+            StorageEncryptionState state,
+            TempFileManager tempFileManager) {
+        this.delegate = delegate;
+        this.state = state;
+        this.tempFileManager = tempFileManager;
+    }
+
+    /** Test convenience mirroring the pre-state constructor shape. */
+    public EncryptingStorageProvider(
+            StorageProvider delegate, FileEncryptionKeyService keys, boolean writeEnabled) {
+        this(delegate, StorageEncryptionState.of(writeEnabled, keys), null);
+    }
+
+    @Override
+    public StoredObject store(User owner, MultipartFile file) throws IOException {
+        if (!state.isWriteEnabled()) {
+            return delegate.store(owner, file);
+        }
+        FileEncryptionKeyService.ScopeKek kek = state.keyService().activeKekForOwner(owner);
+        byte[] dek = new byte[EncryptedFileFormat.DEK_LENGTH_BYTES];
+        RANDOM.nextBytes(dek);
+
+        // Spool ciphertext to a temp file: DatabaseStorageProvider needs getBytes() and
+        // S3StorageProvider needs an exact Content-Length, so the ciphertext size must be known
+        // before the delegate reads the upload. TempFileManager-registered so a crash mid-upload
+        // doesn't orphan the spool forever.
+        Path spool = createSpoolFile();
+        try {
+            EncryptedFileFormat.Header header = buildHeader(kek, dek, file.getSize());
+            byte[] aad = header.associatedData();
+            long plaintextBytes;
+            try (OutputStream out = new BufferedOutputStream(Files.newOutputStream(spool))) {
+                out.write(header.serialize());
+                OutputStream encrypting = streamingAead(dek).newEncryptingStream(out, aad);
+                try (InputStream in = file.getInputStream()) {
+                    plaintextBytes = in.transferTo(encrypting);
+                }
+                encrypting.close();
+            } catch (GeneralSecurityException e) {
+                throw new StorageEncryptionException("Failed to encrypt upload", e);
+            }
+            // The header (and AAD) already carry file.getSize(); a MultipartFile that mis-reports
+            // would otherwise surface as a Content-Length mismatch, i.e. a truncated or hanging
+            // download instead of an error.
+            if (plaintextBytes != file.getSize()) {
+                throw new StorageEncryptionException(
+                        "Upload reported "
+                                + file.getSize()
+                                + " bytes but streamed "
+                                + plaintextBytes);
+            }
+            StoredObject stored = delegate.store(owner, new SpooledUpload(file, spool));
+            log.debug(
+                    "Encrypted {} under key {} ({} plaintext bytes)",
+                    stored.getStorageKey(),
+                    kek.keyId(),
+                    file.getSize());
+            return stored.toBuilder()
+                    .sizeBytes(file.getSize())
+                    .encryptionKeyId(kek.keyId().toString())
+                    .build();
+        } finally {
+            Arrays.fill(dek, (byte) 0);
+            Files.deleteIfExists(spool);
+        }
+    }
+
+    private Path createSpoolFile() throws IOException {
+        if (tempFileManager != null) {
+            return tempFileManager.createTempFile(".enc").toPath();
+        }
+        return Files.createTempFile("stirling-enc-", ".bin");
+    }
+
+    @Override
+    public Resource load(String storageKey) throws IOException {
+        Resource raw = delegate.load(storageKey);
+        if (raw.isOpen()) {
+            return wrapOneShot(raw);
+        }
+        return wrapReopenable(raw);
+    }
+
+    @Override
+    public void delete(String storageKey) throws IOException {
+        delegate.delete(storageKey);
+    }
+
+    @Override
+    public void close() {
+        try {
+            delegate.close();
+        } catch (Exception e) {
+            log.warn("Error closing delegate storage provider", e);
+        }
+    }
+
+    @Override
+    public Optional<URI> signedDownloadUrl(String storageKey, Duration ttl) throws IOException {
+        if (state.suppressDirectDownloads()) {
+            return Optional.empty();
+        }
+        return delegate.signedDownloadUrl(storageKey, ttl);
+    }
+
+    @Override
+    public Optional<URI> signedDownloadUrl(
+            String storageKey, Duration ttl, boolean inline, String originalFilename)
+            throws IOException {
+        if (state.suppressDirectDownloads()) {
+            return Optional.empty();
+        }
+        return delegate.signedDownloadUrl(storageKey, ttl, inline, originalFilename);
+    }
+
+    // ---- store helpers -------------------------------------------------------------------
+
+    private EncryptedFileFormat.Header buildHeader(
+            FileEncryptionKeyService.ScopeKek kek, byte[] dek, long plaintextLength)
+            throws StorageEncryptionException {
+        // AAD covers the header prefix, so build a header with a placeholder wrap first to get
+        // the prefix bytes, then wrap the DEK bound to that prefix.
+        EncryptedFileFormat.Header prototype =
+                new EncryptedFileFormat.Header(
+                        EncryptedFileFormat.FORMAT_VERSION,
+                        EncryptedFileFormat.SUITE_AES_GCM_HKDF_1MIB,
+                        kek.keyId(),
+                        plaintextLength,
+                        new byte[EncryptedFileFormat.WRAPPED_DEK_LENGTH]);
+        byte[] aad = prototype.associatedData();
+        byte[] wrappedDek = wrapDek(dek, kek.key(), aad);
+        return new EncryptedFileFormat.Header(
+                EncryptedFileFormat.FORMAT_VERSION,
+                EncryptedFileFormat.SUITE_AES_GCM_HKDF_1MIB,
+                kek.keyId(),
+                plaintextLength,
+                wrappedDek);
+    }
+
+    private static byte[] wrapDek(byte[] dek, byte[] kek, byte[] aad)
+            throws StorageEncryptionException {
+        try {
+            byte[] iv = new byte[12];
+            RANDOM.nextBytes(iv);
+            Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
+            cipher.init(
+                    Cipher.ENCRYPT_MODE,
+                    new SecretKeySpec(kek, "AES"),
+                    new GCMParameterSpec(128, iv));
+            cipher.updateAAD(aad);
+            byte[] ct = cipher.doFinal(dek);
+            byte[] out = new byte[iv.length + ct.length];
+            System.arraycopy(iv, 0, out, 0, iv.length);
+            System.arraycopy(ct, 0, out, iv.length, ct.length);
+            return out;
+        } catch (GeneralSecurityException e) {
+            throw new StorageEncryptionException("Failed to wrap file key", e);
+        }
+    }
+
+    private byte[] unwrapDek(EncryptedFileFormat.Header header) throws IOException {
+        byte[] kek = state.keyService().kekForDecrypt(header.keyId());
+        try {
+            byte[] wrapped = header.wrappedDek();
+            byte[] iv = Arrays.copyOfRange(wrapped, 0, 12);
+            byte[] ct = Arrays.copyOfRange(wrapped, 12, wrapped.length);
+            Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
+            cipher.init(
+                    Cipher.DECRYPT_MODE,
+                    new SecretKeySpec(kek, "AES"),
+                    new GCMParameterSpec(128, iv));
+            cipher.updateAAD(header.associatedData());
+            return cipher.doFinal(ct);
+        } catch (GeneralSecurityException e) {
+            throw new StorageEncryptionException(
+                    "Failed to unwrap file key for key " + header.keyId() + " — tampered header?",
+                    e);
+        }
+    }
+
+    /**
+     * Uses Tink's {@code subtle} API directly rather than the keyset/StreamingAead registry:
+     * keysets would store DEKs in Tink's own serialisation and key-management model, while this
+     * format keeps the (already-wrapped) DEK in our header. {@code subtle} is outside Tink's
+     * stability guarantee — the pinned version plus the round-trip tests are what make upgrades
+     * safe; re-run them on any Tink bump.
+     */
+    private static AesGcmHkdfStreaming streamingAead(byte[] dek) throws GeneralSecurityException {
+        return new AesGcmHkdfStreaming(
+                dek,
+                "HMACSHA256",
+                EncryptedFileFormat.DEK_LENGTH_BYTES,
+                EncryptedFileFormat.SEGMENT_SIZE_BYTES,
+                0);
+    }
+
+    // ---- load helpers --------------------------------------------------------------------
+
+    /** Re-openable delegate (local file, DB byte array): sniff via a throwaway stream. */
+    private Resource wrapReopenable(Resource raw) throws IOException {
+        byte[] prefix;
+        try (InputStream in = raw.getInputStream()) {
+            prefix = in.readNBytes(EncryptedFileFormat.HEADER_LENGTH);
+        }
+        EncryptedFileFormat.Header header = EncryptedFileFormat.parse(prefix);
+        if (header == null) {
+            return raw;
+        }
+        byte[] dek = unwrapDek(header);
+        return new ReopenableDecryptedResource(raw, header, dek);
+    }
+
+    /**
+     * One-shot delegate (S3 stream): the sniffed prefix must be replayed or decrypted inline. The
+     * stream is a live HTTP connection, so every failure path (unknown header version, revoked key,
+     * tampered wrap) must close it — leaking here would starve the S3 connection pool precisely
+     * when the kill switch is being exercised.
+     */
+    private Resource wrapOneShot(Resource raw) throws IOException {
+        InputStream in = raw.getInputStream();
+        try {
+            byte[] prefix = in.readNBytes(EncryptedFileFormat.HEADER_LENGTH);
+            EncryptedFileFormat.Header header = EncryptedFileFormat.parse(prefix);
+            if (header == null) {
+                long length;
+                try {
+                    length = raw.contentLength();
+                } catch (IOException | RuntimeException e) {
+                    // Stock InputStreamResource refuses contentLength() once the stream is
+                    // partially read; S3's resource reports it from the response header instead.
+                    length = -1;
+                }
+                return new OneShotResource(
+                        new SequenceInputStream(new ByteArrayInputStream(prefix), in),
+                        length,
+                        raw.getDescription());
+            }
+            byte[] dek = unwrapDek(header);
+            InputStream decrypting;
+            try {
+                decrypting = streamingAead(dek).newDecryptingStream(in, header.associatedData());
+            } catch (GeneralSecurityException e) {
+                throw new StorageEncryptionException("Failed to open decrypting stream", e);
+            }
+            return new OneShotResource(decrypting, header.plaintextLength(), raw.getDescription());
+        } catch (IOException | RuntimeException e) {
+            try {
+                in.close();
+            } catch (IOException closeFailure) {
+                e.addSuppressed(closeFailure);
+            }
+            throw e;
+        }
+    }
+
+    /**
+     * Fresh decrypting stream per read; supports repeated reads and range-skip consumers. Note a
+     * range request still decrypts from byte 0 and discards up to the offset — inherent to
+     * streaming AEAD without a seekable-channel implementation.
+     */
+    private static final class ReopenableDecryptedResource extends AbstractResource {
+        private final Resource ciphertext;
+        private final EncryptedFileFormat.Header header;
+        private final byte[] dek;
+
+        private ReopenableDecryptedResource(
+                Resource ciphertext, EncryptedFileFormat.Header header, byte[] dek) {
+            this.ciphertext = ciphertext;
+            this.header = header;
+            this.dek = dek;
+        }
+
+        @Override
+        public InputStream getInputStream() throws IOException {
+            InputStream in = ciphertext.getInputStream();
+            try {
+                in.skipNBytes(EncryptedFileFormat.HEADER_LENGTH);
+                return streamingAead(dek).newDecryptingStream(in, header.associatedData());
+            } catch (GeneralSecurityException | IOException e) {
+                in.close();
+                throw e instanceof IOException io
+                        ? io
+                        : new StorageEncryptionException("Failed to open decrypting stream", e);
+            }
+        }
+
+        @Override
+        public long contentLength() {
+            return header.plaintextLength();
+        }
+
+        @Override
+        public boolean exists() {
+            return ciphertext.exists();
+        }
+
+        @Override
+        public String getFilename() {
+            return ciphertext.getFilename();
+        }
+
+        @Override
+        public String getDescription() {
+            return "decrypted " + ciphertext.getDescription();
+        }
+    }
+
+    /** Single-use resource over an already-open stream (mirrors InputStreamResource semantics). */
+    private static final class OneShotResource extends AbstractResource {
+        private final InputStream stream;
+        private final long contentLength;
+        private final String description;
+        private boolean consumed;
+
+        private OneShotResource(InputStream stream, long contentLength, String description) {
+            this.stream = stream;
+            this.contentLength = contentLength;
+            this.description = description;
+        }
+
+        @Override
+        public synchronized InputStream getInputStream() {
+            if (consumed) {
+                throw new IllegalStateException(
+                        "InputStream has already been read - do not use OneShotResource twice");
+            }
+            consumed = true;
+            return stream;
+        }
+
+        @Override
+        public long contentLength() {
+            return contentLength;
+        }
+
+        @Override
+        public boolean isOpen() {
+            return true;
+        }
+
+        @Override
+        public boolean exists() {
+            return true;
+        }
+
+        @Override
+        public String getDescription() {
+            return "decrypted " + description;
+        }
+    }
+
+    /** Presents the spooled ciphertext file as the upload the delegate should persist. */
+    private static final class SpooledUpload implements MultipartFile {
+        private final MultipartFile original;
+        private final Path spool;
+
+        private SpooledUpload(MultipartFile original, Path spool) {
+            this.original = original;
+            this.spool = spool;
+        }
+
+        @Override
+        public String getName() {
+            return original.getName();
+        }
+
+        @Override
+        public String getOriginalFilename() {
+            return original.getOriginalFilename();
+        }
+
+        @Override
+        public String getContentType() {
+            return original.getContentType();
+        }
+
+        @Override
+        public boolean isEmpty() {
+            return getSize() == 0;
+        }
+
+        @Override
+        public long getSize() {
+            try {
+                return Files.size(spool);
+            } catch (IOException e) {
+                throw new IllegalStateException("Spooled ciphertext unavailable", e);
+            }
+        }
+
+        @Override
+        public byte[] getBytes() throws IOException {
+            return Files.readAllBytes(spool);
+        }
+
+        @Override
+        public InputStream getInputStream() throws IOException {
+            return Files.newInputStream(spool);
+        }
+
+        @Override
+        public void transferTo(File dest) throws IOException {
+            Files.copy(spool, dest.toPath());
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyService.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyService.java
new file mode 100644
index 0000000000..716d4f1a7b
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyService.java
@@ -0,0 +1,214 @@
+package stirling.software.proprietary.storage.crypto;
+
+import java.nio.charset.StandardCharsets;
+import java.security.GeneralSecurityException;
+import java.security.SecureRandom;
+import java.time.Duration;
+import java.util.Base64;
+import java.util.UUID;
+
+import org.springframework.dao.DataIntegrityViolationException;
+import org.springframework.transaction.support.TransactionOperations;
+
+import com.github.benmanes.caffeine.cache.Cache;
+import com.github.benmanes.caffeine.cache.Caffeine;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.proprietary.model.Team;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.model.FileEncryptionKey;
+import stirling.software.proprietary.storage.repository.FileEncryptionKeyRepository;
+
+/**
+ * Resolves and unwraps scope-level KEKs for storage encryption. Per-team scoping by default (files
+ * keep decrypting after team changes because each blob header pins its exact key id); GLOBAL is the
+ * fallback for owners without a team; SOURCE is reserved for pipeline encryption (P2).
+ *
+ * <p>Unwrapped KEKs are cached briefly so the kill switch (DISABLED status) propagates across
+ * cluster nodes within {@link #CACHE_TTL} without a per-read DB round-trip. Note the TTL bounds the
+ * write side too: a key disabled on another node can wrap new blobs for up to the TTL there.
+ */
+@Slf4j
+public class FileEncryptionKeyService {
+
+    private static final Duration CACHE_TTL = Duration.ofSeconds(60);
+    private static final SecureRandom RANDOM = new SecureRandom();
+
+    private final FileEncryptionKeyRepository repository;
+    private final FileEncryptionMasterKey masterKey;
+
+    /**
+     * Runs key-row creation in its own committed transaction (REQUIRES_NEW in production). Callers
+     * like WorkflowSessionService are {@code @Transactional}, and with an assigned-UUID id the
+     * INSERT would otherwise defer to the outer commit — the duplicate-key exception would surface
+     * far from {@link #createActive}'s recovery catch, and the outer transaction would already be
+     * rollback-only.
+     */
+    private final TransactionOperations keyCreationTx;
+
+    private final Cache<UUID, byte[]> unwrapCache =
+            Caffeine.newBuilder().expireAfterWrite(CACHE_TTL).maximumSize(10_000).build();
+    private final Cache<String, UUID> activeScopeCache =
+            Caffeine.newBuilder().expireAfterWrite(CACHE_TTL).maximumSize(10_000).build();
+
+    public FileEncryptionKeyService(
+            FileEncryptionKeyRepository repository, FileEncryptionMasterKey masterKey) {
+        this(repository, masterKey, TransactionOperations.withoutTransaction());
+    }
+
+    public FileEncryptionKeyService(
+            FileEncryptionKeyRepository repository,
+            FileEncryptionMasterKey masterKey,
+            TransactionOperations keyCreationTx) {
+        this.repository = repository;
+        this.masterKey = masterKey;
+        this.keyCreationTx = keyCreationTx;
+    }
+
+    public record ScopeKek(UUID keyId, byte[] key) {}
+
+    /** The ACTIVE KEK for the owner's scope, created on first use. */
+    public ScopeKek activeKekForOwner(User owner) throws StorageEncryptionException {
+        FileEncryptionKey.ScopeType scopeType = FileEncryptionKey.ScopeType.GLOBAL;
+        long scopeId = 0;
+        Team team = owner != null ? owner.getTeam() : null;
+        if (team != null && team.getId() != null) {
+            scopeType = FileEncryptionKey.ScopeType.TEAM;
+            scopeId = team.getId();
+        }
+        UUID cachedId = activeScopeCache.getIfPresent(scopeType + ":" + scopeId);
+        if (cachedId != null) {
+            byte[] cachedKey = unwrapCache.getIfPresent(cachedId);
+            if (cachedKey != null) {
+                return new ScopeKek(cachedId, cachedKey);
+            }
+        }
+        FileEncryptionKey row = findOrCreateActive(scopeType, scopeId);
+        byte[] kek = unwrapRow(row);
+        activeScopeCache.put(scopeType + ":" + scopeId, row.getKeyId());
+        return new ScopeKek(row.getKeyId(), kek);
+    }
+
+    /** Unwraps the KEK for decrypting an existing blob. Fails closed on DISABLED or missing. */
+    public byte[] kekForDecrypt(UUID keyId) throws StorageEncryptionException {
+        byte[] cached = unwrapCache.getIfPresent(keyId);
+        if (cached != null) {
+            return cached;
+        }
+        FileEncryptionKey row =
+                repository
+                        .findById(keyId)
+                        .orElseThrow(
+                                () ->
+                                        new StorageEncryptionException(
+                                                "No encryption key "
+                                                        + keyId
+                                                        + " — the key registry does not match the"
+                                                        + " stored data (restored from an older"
+                                                        + " database backup?)"));
+        if (row.getStatus() == FileEncryptionKey.Status.DISABLED) {
+            throw new StorageKeyRevokedException(
+                    "Encryption key " + keyId + " is disabled; access to this content is revoked");
+        }
+        return unwrapRow(row);
+    }
+
+    /**
+     * Startup self-check: proves the resolved master key can unwrap an existing row, so a wrong key
+     * fails fast instead of silently writing new files under a second key hierarchy.
+     */
+    public void verifyMasterKey() {
+        repository
+                .findFirstByStatus(FileEncryptionKey.Status.ACTIVE)
+                .or(() -> repository.findFirstByStatus(FileEncryptionKey.Status.RETIRED))
+                .ifPresent(
+                        row -> {
+                            try {
+                                unwrapRow(row);
+                            } catch (StorageEncryptionException e) {
+                                throw new IllegalStateException(
+                                        "The configured file encryption key (fingerprint "
+                                                + masterKey.fingerprint()
+                                                + ") cannot unwrap existing key "
+                                                + row.getKeyId()
+                                                + ". Refusing to start with a mismatched key —"
+                                                + " restore the original"
+                                                + " STIRLING_FILE_ENCRYPTION_KEY /"
+                                                + " file-encryption.key.",
+                                        e);
+                            }
+                        });
+    }
+
+    private FileEncryptionKey findOrCreateActive(
+            FileEncryptionKey.ScopeType scopeType, long scopeId) throws StorageEncryptionException {
+        return repository
+                .findFirstByScopeTypeAndScopeIdAndStatus(
+                        scopeType, scopeId, FileEncryptionKey.Status.ACTIVE)
+                .orElseGet(() -> createActive(scopeType, scopeId));
+    }
+
+    // Package-private so the @DataJpaTest can drive the duplicate-insert recovery
+    // deterministically.
+    FileEncryptionKey createActive(FileEncryptionKey.ScopeType scopeType, long scopeId) {
+        byte[] kek = new byte[EncryptedFileFormat.DEK_LENGTH_BYTES];
+        RANDOM.nextBytes(kek);
+        FileEncryptionKey row = new FileEncryptionKey();
+        row.setKeyId(UUID.randomUUID());
+        row.setScopeType(scopeType);
+        row.setScopeId(scopeId);
+        int version =
+                repository
+                                .findFirstByScopeTypeAndScopeIdOrderByKeyVersionDesc(
+                                        scopeType, scopeId)
+                                .map(FileEncryptionKey::getKeyVersion)
+                                .orElse(0)
+                        + 1;
+        row.setKeyVersion(version);
+        row.setWrappedKey(
+                Base64.getEncoder().encodeToString(masterKey.wrap(kek, aadFor(row.getKeyId()))));
+        row.setMasterKeyVersion(FileEncryptionMasterKey.CURRENT_VERSION);
+        row.setStatus(FileEncryptionKey.Status.ACTIVE);
+        try {
+            // saveAndFlush inside a fresh transaction so a unique-constraint violation surfaces
+            // right here (not at some outer commit) and the caller's transaction stays healthy.
+            FileEncryptionKey saved = keyCreationTx.execute(status -> repository.saveAndFlush(row));
+            log.info(
+                    "Created storage encryption key {} for {}:{}",
+                    saved.getKeyId(),
+                    scopeType,
+                    scopeId);
+            unwrapCache.put(saved.getKeyId(), kek);
+            return saved;
+        } catch (DataIntegrityViolationException raced) {
+            // Another node created the scope key concurrently; use theirs.
+            return repository
+                    .findFirstByScopeTypeAndScopeIdAndStatus(
+                            scopeType, scopeId, FileEncryptionKey.Status.ACTIVE)
+                    .orElseThrow(() -> raced);
+        }
+    }
+
+    private byte[] unwrapRow(FileEncryptionKey row) throws StorageEncryptionException {
+        try {
+            byte[] kek =
+                    masterKey.unwrap(
+                            Base64.getDecoder().decode(row.getWrappedKey()),
+                            aadFor(row.getKeyId()));
+            unwrapCache.put(row.getKeyId(), kek);
+            return kek;
+        } catch (GeneralSecurityException e) {
+            throw new StorageEncryptionException(
+                    "Failed to unwrap encryption key "
+                            + row.getKeyId()
+                            + " — master key mismatch or corrupted key row",
+                    e);
+        }
+    }
+
+    // Binds each wrapped KEK to its row identity so ciphertexts can't be swapped between rows.
+    private static byte[] aadFor(UUID keyId) {
+        return keyId.toString().getBytes(StandardCharsets.US_ASCII);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionMasterKey.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionMasterKey.java
new file mode 100644
index 0000000000..025b281b79
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/FileEncryptionMasterKey.java
@@ -0,0 +1,172 @@
+package stirling.software.proprietary.storage.crypto;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.attribute.PosixFilePermission;
+import java.nio.file.attribute.PosixFilePermissions;
+import java.security.GeneralSecurityException;
+import java.security.MessageDigest;
+import java.security.SecureRandom;
+import java.util.Arrays;
+import java.util.Base64;
+import java.util.EnumSet;
+import java.util.HexFormat;
+
+import javax.crypto.Cipher;
+import javax.crypto.KeyGenerator;
+import javax.crypto.SecretKey;
+import javax.crypto.spec.GCMParameterSpec;
+import javax.crypto.spec.SecretKeySpec;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.configuration.InstallationPathConfig;
+
+/**
+ * Master key-encryption key for storage encryption at rest. Deliberately a separate key from {@code
+ * credential-encryption.key}: file data and integration secrets have different blast radii and
+ * rotate independently.
+ *
+ * <p>Resolution order mirrors {@code CredentialEncryption}: {@code
+ * stirling.security.fileEncryptionKey} property, {@code STIRLING_FILE_ENCRYPTION_KEY} env var, then
+ * an auto-generated owner-only {@code file-encryption.key} in the config dir. Cluster mode requires
+ * an explicitly shared key.
+ */
+@Slf4j
+public class FileEncryptionMasterKey {
+
+    private static final String ALGORITHM = "AES";
+    private static final String TRANSFORMATION = "AES/GCM/NoPadding";
+    private static final int GCM_TAG_BITS = 128;
+    private static final int IV_BYTES = 12;
+    private static final String KEY_FILE = "file-encryption.key";
+    private static final SecureRandom RANDOM = new SecureRandom();
+
+    /** Bumped when master rotation ships (P2); recorded on every wrapped KEK row. */
+    public static final int CURRENT_VERSION = 1;
+
+    private final SecretKey key;
+
+    public FileEncryptionMasterKey(String configuredKey, boolean clusterEnabled) {
+        this.key = resolveKey(configuredKey, clusterEnabled);
+        log.info(
+                "Storage encryption master key initialised (AES-256-GCM, fingerprint {})",
+                fingerprint());
+    }
+
+    private static SecretKey resolveKey(String configuredKey, boolean clusterEnabled) {
+        String configured = configuredKey;
+        String source = "stirling.security.fileEncryptionKey";
+        if (configured == null || configured.isBlank()) {
+            configured = System.getenv("STIRLING_FILE_ENCRYPTION_KEY");
+            source = "STIRLING_FILE_ENCRYPTION_KEY";
+        }
+        if (configured != null && !configured.isBlank()) {
+            return decodeKey(configured, source);
+        }
+        if (clusterEnabled) {
+            throw new IllegalStateException(
+                    "cluster.enabled=true requires a shared file encryption key. Set"
+                            + " STIRLING_FILE_ENCRYPTION_KEY (or"
+                            + " stirling.security.fileEncryptionKey) to the same value on every"
+                            + " node.");
+        }
+        return loadOrCreateKeyFile();
+    }
+
+    /**
+     * Decodes and validates key material: must be valid base64 for exactly 32 bytes. Without the
+     * length check a short key would silently downgrade to AES-128/192 while the startup log claims
+     * AES-256.
+     */
+    private static SecretKey decodeKey(String base64, String source) {
+        byte[] bytes;
+        try {
+            bytes = Base64.getDecoder().decode(base64.trim());
+        } catch (IllegalArgumentException e) {
+            throw new IllegalStateException(source + " is not valid base64", e);
+        }
+        if (bytes.length != 32) {
+            throw new IllegalStateException(
+                    source
+                            + " must decode to exactly 32 bytes (a 256-bit AES key), got "
+                            + bytes.length
+                            + " bytes. Generate one with: openssl rand -base64 32");
+        }
+        return new SecretKeySpec(bytes, ALGORITHM);
+    }
+
+    private static SecretKey loadOrCreateKeyFile() {
+        Path path = Path.of(InstallationPathConfig.getConfigPath(), KEY_FILE);
+        try {
+            if (Files.exists(path)) {
+                return decodeKey(Files.readString(path), path.toString());
+            }
+            KeyGenerator generator = KeyGenerator.getInstance(ALGORITHM);
+            generator.init(256);
+            SecretKey generated = generator.generateKey();
+            Files.createDirectories(path.getParent());
+            writeOwnerOnly(path, Base64.getEncoder().encodeToString(generated.getEncoded()));
+            log.warn(
+                    "Generated a new file encryption key at {}. Back this file up: losing it makes"
+                            + " every encrypted stored file unrecoverable.",
+                    path);
+            return generated;
+        } catch (Exception e) {
+            throw new IllegalStateException("Unable to initialise file encryption key", e);
+        }
+    }
+
+    private static void writeOwnerOnly(Path path, String content) throws IOException {
+        EnumSet<PosixFilePermission> ownerOnly =
+                EnumSet.of(PosixFilePermission.OWNER_READ, PosixFilePermission.OWNER_WRITE);
+        try {
+            Files.createFile(path, PosixFilePermissions.asFileAttribute(ownerOnly));
+        } catch (UnsupportedOperationException e) {
+            // Non-POSIX filesystem (Windows): the config-dir ACL is the protection.
+            Files.createFile(path);
+        }
+        Files.writeString(path, content);
+        try {
+            Files.setPosixFilePermissions(path, ownerOnly);
+        } catch (UnsupportedOperationException ignored) {
+        }
+    }
+
+    public byte[] wrap(byte[] kek, byte[] associatedData) {
+        try {
+            byte[] iv = new byte[IV_BYTES];
+            RANDOM.nextBytes(iv);
+            Cipher cipher = Cipher.getInstance(TRANSFORMATION);
+            cipher.init(Cipher.ENCRYPT_MODE, key, new GCMParameterSpec(GCM_TAG_BITS, iv));
+            cipher.updateAAD(associatedData);
+            byte[] ciphertext = cipher.doFinal(kek);
+            byte[] combined = new byte[iv.length + ciphertext.length];
+            System.arraycopy(iv, 0, combined, 0, iv.length);
+            System.arraycopy(ciphertext, 0, combined, iv.length, ciphertext.length);
+            return combined;
+        } catch (GeneralSecurityException e) {
+            throw new IllegalStateException("Failed to wrap scope key", e);
+        }
+    }
+
+    public byte[] unwrap(byte[] wrapped, byte[] associatedData) throws GeneralSecurityException {
+        byte[] iv = Arrays.copyOfRange(wrapped, 0, IV_BYTES);
+        byte[] ciphertext = Arrays.copyOfRange(wrapped, IV_BYTES, wrapped.length);
+        Cipher cipher = Cipher.getInstance(TRANSFORMATION);
+        cipher.init(Cipher.DECRYPT_MODE, key, new GCMParameterSpec(GCM_TAG_BITS, iv));
+        cipher.updateAAD(associatedData);
+        return cipher.doFinal(ciphertext);
+    }
+
+    /** SHA-256 prefix of the key material so admins can verify backups without exposing it. */
+    public String fingerprint() {
+        try {
+            byte[] digest = MessageDigest.getInstance("SHA-256").digest(key.getEncoded());
+            return HexFormat.of().formatHex(digest, 0, 8);
+        } catch (GeneralSecurityException e) {
+            return "unavailable";
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionException.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionException.java
new file mode 100644
index 0000000000..8db303dd42
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionException.java
@@ -0,0 +1,15 @@
+package stirling.software.proprietary.storage.crypto;
+
+import java.io.IOException;
+
+/** Storage encrypt/decrypt failure (missing/disabled key, master-key mismatch, tampered blob). */
+public class StorageEncryptionException extends IOException {
+
+    public StorageEncryptionException(String message) {
+        super(message);
+    }
+
+    public StorageEncryptionException(String message, Throwable cause) {
+        super(message, cause);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java
new file mode 100644
index 0000000000..fe4539332a
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java
@@ -0,0 +1,112 @@
+package stirling.software.proprietary.storage.crypto;
+
+import java.time.Duration;
+import java.util.function.Supplier;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.proprietary.storage.repository.FileEncryptionKeyRepository;
+
+/**
+ * Holds the storage-encryption machinery for the always-installed {@link EncryptingStorageProvider}
+ * decorator.
+ *
+ * <p>The decorator is unconditional so a node whose config lags the cluster (flag off, rolling
+ * deploy, config drift) can never stream raw ciphertext: it always sniffs the header and decrypts
+ * or fails loudly. The expensive parts — resolving the master key (which may generate a key file)
+ * and the key service — are created lazily: eagerly at startup only when the write flag is on or
+ * key rows already exist (preserving the fail-fast master-key verification), otherwise on first
+ * encounter with an encrypted blob.
+ */
+@Slf4j
+public class StorageEncryptionState {
+
+    private static final Duration KEYS_EXIST_CACHE_TTL = Duration.ofSeconds(60);
+
+    private final boolean writeEnabled;
+    private final Supplier<FileEncryptionKeyService> keyServiceFactory;
+    private final FileEncryptionKeyRepository keyRepository;
+
+    private volatile FileEncryptionKeyService keyService;
+    private volatile boolean keysExistEverChecked;
+    private volatile long keysExistCheckedAtNanos;
+    private volatile boolean keysExistCached;
+
+    public StorageEncryptionState(
+            boolean writeEnabled,
+            Supplier<FileEncryptionKeyService> keyServiceFactory,
+            FileEncryptionKeyRepository keyRepository) {
+        this.writeEnabled = writeEnabled;
+        this.keyServiceFactory = keyServiceFactory;
+        this.keyRepository = keyRepository;
+    }
+
+    /** Test convenience: a pre-materialised state around an existing service. */
+    public static StorageEncryptionState of(
+            boolean writeEnabled, FileEncryptionKeyService keyService) {
+        StorageEncryptionState state =
+                new StorageEncryptionState(writeEnabled, () -> keyService, null);
+        state.keyService = keyService;
+        return state;
+    }
+
+    /** True when new writes are encrypted (flag on + licence passed). */
+    public boolean isWriteEnabled() {
+        return writeEnabled;
+    }
+
+    /**
+     * The key service, created on first use. A failure here (no key material, wrong key) is a loud,
+     * actionable error — never silently-served ciphertext.
+     */
+    public FileEncryptionKeyService keyService() throws StorageEncryptionException {
+        FileEncryptionKeyService current = keyService;
+        if (current != null) {
+            return current;
+        }
+        synchronized (this) {
+            if (keyService == null) {
+                try {
+                    keyService = keyServiceFactory.get();
+                } catch (RuntimeException e) {
+                    throw new StorageEncryptionException(
+                            "Encrypted content was encountered but the storage encryption key"
+                                    + " machinery could not be initialised: "
+                                    + e.getMessage(),
+                            e);
+                }
+            }
+            return keyService;
+        }
+    }
+
+    /** Forces eager initialisation (startup fail-fast path). */
+    public void initialiseEagerly() {
+        keyService = keyServiceFactory.get();
+    }
+
+    /**
+     * Whether presigned/direct download URLs must be suppressed: any time this node encrypts new
+     * writes or encrypted content may exist, a presigned URL could hand ciphertext to the client.
+     * The registry check is cached briefly, so installs that never enable encryption keep the S3
+     * fast path. Per-file precision (redirecting plaintext blobs via {@code
+     * StoredFile.encryptionKeyId}) is a deliberate follow-up.
+     */
+    public boolean suppressDirectDownloads() {
+        if (writeEnabled || keyService != null) {
+            return true;
+        }
+        if (keyRepository == null) {
+            return false;
+        }
+        long now = System.nanoTime();
+        if (keysExistEverChecked
+                && now - keysExistCheckedAtNanos < KEYS_EXIST_CACHE_TTL.toNanos()) {
+            return keysExistCached;
+        }
+        keysExistCached = keyRepository.count() > 0;
+        keysExistCheckedAtNanos = now;
+        keysExistEverChecked = true;
+        return keysExistCached;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageKeyRevokedException.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageKeyRevokedException.java
new file mode 100644
index 0000000000..a773a14860
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageKeyRevokedException.java
@@ -0,0 +1,14 @@
+package stirling.software.proprietary.storage.crypto;
+
+/**
+ * The encryption key protecting the requested content is disabled (the per-scope kill switch).
+ * Distinct from a generic {@link StorageEncryptionException} so callers can surface this as an
+ * access-denied (403) rather than an internal error (500): it is a deliberate, reversible policy
+ * state, not a failure. Re-enabling the key restores access.
+ */
+public class StorageKeyRevokedException extends StorageEncryptionException {
+
+    public StorageKeyRevokedException(String message) {
+        super(message);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/FileEncryptionKey.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/FileEncryptionKey.java
new file mode 100644
index 0000000000..b58e8922c6
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/FileEncryptionKey.java
@@ -0,0 +1,95 @@
+package stirling.software.proprietary.storage.model;
+
+import java.io.Serializable;
+import java.time.LocalDateTime;
+import java.util.UUID;
+
+import org.hibernate.annotations.CreationTimestamp;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.EnumType;
+import jakarta.persistence.Enumerated;
+import jakarta.persistence.Id;
+import jakarta.persistence.Index;
+import jakarta.persistence.Table;
+import jakarta.persistence.UniqueConstraint;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+/**
+ * A scope-level key-encryption key (KEK) for storage encryption at rest. The 256-bit KEK is stored
+ * AES-GCM-wrapped by the master file-encryption key; per-file data keys are wrapped by the KEK
+ * inside each encrypted blob's header, so this table stays tiny (one row per scope per rotation)
+ * and master-key rotation only re-wraps these rows, never file contents.
+ *
+ * <p>Status semantics: ACTIVE wraps new files and unwraps existing ones; RETIRED (post-rotation)
+ * unwraps only; DISABLED unwraps nothing — the per-scope kill switch.
+ */
+@Entity
+@Table(
+        name = "file_encryption_keys",
+        indexes = {@Index(name = "idx_file_enc_keys_scope", columnList = "scope_type,scope_id")},
+        uniqueConstraints =
+                @UniqueConstraint(
+                        name = "uk_file_enc_keys_scope_version",
+                        columnNames = {"scope_type", "scope_id", "key_version"}))
+@NoArgsConstructor
+@Getter
+@Setter
+public class FileEncryptionKey implements Serializable {
+
+    private static final long serialVersionUID = 1L;
+
+    public enum ScopeType {
+        GLOBAL,
+        TEAM,
+        SOURCE
+    }
+
+    public enum Status {
+        ACTIVE,
+        RETIRED,
+        DISABLED
+    }
+
+    @Id
+    @Column(name = "key_id", nullable = false)
+    private UUID keyId;
+
+    @Enumerated(EnumType.STRING)
+    @Column(name = "scope_type", nullable = false, length = 16)
+    private ScopeType scopeType;
+
+    /** Scope discriminator (team id, source id). 0 for GLOBAL so the unique constraint holds. */
+    @Column(name = "scope_id", nullable = false)
+    private long scopeId;
+
+    /** Increments when the scope KEK is rotated; the unique constraint tolerates retired rows. */
+    @Column(name = "key_version", nullable = false)
+    private int keyVersion;
+
+    /** Base64 of IV(12) || AES-256-GCM(masterKey, kek) || tag(16), AAD-bound to keyId. */
+    @Column(name = "wrapped_key", nullable = false, length = 512)
+    private String wrappedKey;
+
+    /** Which master-key version wrapped this row; supports master rotation re-wraps. */
+    @Column(name = "master_key_version", nullable = false)
+    private int masterKeyVersion;
+
+    @Enumerated(EnumType.STRING)
+    @Column(name = "status", nullable = false, length = 16)
+    private Status status;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    @Column(name = "status_changed_at")
+    private LocalDateTime statusChangedAt;
+
+    @Column(name = "status_changed_by")
+    private String statusChangedBy;
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/StoredFile.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/StoredFile.java
index cbf5316db6..db80bd1e91 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/StoredFile.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/model/StoredFile.java
@@ -102,6 +102,14 @@ public class StoredFile implements Serializable {
     @Enumerated(EnumType.STRING)
     private FilePurpose purpose;
 
+    /**
+     * file_encryption_keys id under which this file's blobs (main/history/audit) were encrypted;
+     * null = stored plaintext. The per-blob truth is each blob's own header — this column exists
+     * for reporting and the encrypt-existing migration. Nullable so ddl-auto upgrades cleanly.
+     */
+    @Column(name = "encryption_key_id", length = 36)
+    private String encryptionKeyId;
+
     @OneToMany(
             mappedBy = "file",
             fetch = FetchType.LAZY,
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/provider/StoredObject.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/provider/StoredObject.java
index d58f223c75..d455d3f15c 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/provider/StoredObject.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/provider/StoredObject.java
@@ -4,10 +4,15 @@ import lombok.Builder;
 import lombok.Getter;
 
 @Getter
-@Builder
+@Builder(toBuilder = true)
 public class StoredObject {
     private final String storageKey;
     private final String originalFilename;
     private final String contentType;
+
+    /** Plaintext size. When encryption at rest is active the stored blob is larger. */
     private final long sizeBytes;
+
+    /** file_encryption_keys id that wraps this blob's data key; null when stored plaintext. */
+    private final String encryptionKeyId;
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/repository/FileEncryptionKeyRepository.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/repository/FileEncryptionKeyRepository.java
new file mode 100644
index 0000000000..b6563f8c26
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/repository/FileEncryptionKeyRepository.java
@@ -0,0 +1,21 @@
+package stirling.software.proprietary.storage.repository;
+
+import java.util.Optional;
+import java.util.UUID;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+
+import stirling.software.proprietary.storage.model.FileEncryptionKey;
+
+@Repository
+public interface FileEncryptionKeyRepository extends JpaRepository<FileEncryptionKey, UUID> {
+
+    Optional<FileEncryptionKey> findFirstByScopeTypeAndScopeIdAndStatus(
+            FileEncryptionKey.ScopeType scopeType, long scopeId, FileEncryptionKey.Status status);
+
+    Optional<FileEncryptionKey> findFirstByScopeTypeAndScopeIdOrderByKeyVersionDesc(
+            FileEncryptionKey.ScopeType scopeType, long scopeId);
+
+    Optional<FileEncryptionKey> findFirstByStatus(FileEncryptionKey.Status status);
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/FileStorageService.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/FileStorageService.java
index 32371222f6..9764f392b1 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/FileStorageService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/FileStorageService.java
@@ -32,6 +32,7 @@ import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.security.database.repository.UserRepository;
 import stirling.software.proprietary.security.model.User;
 import stirling.software.proprietary.security.service.EmailService;
+import stirling.software.proprietary.storage.crypto.StorageKeyRevokedException;
 import stirling.software.proprietary.storage.model.FileShare;
 import stirling.software.proprietary.storage.model.FileShareAccess;
 import stirling.software.proprietary.storage.model.FileShareAccessType;
@@ -143,6 +144,7 @@ public class FileStorageService {
             storedFile.setContentType(mainObject.getContentType());
             storedFile.setSizeBytes(mainObject.getSizeBytes());
             storedFile.setStorageKey(mainObject.getStorageKey());
+            storedFile.setEncryptionKeyId(mainObject.getEncryptionKeyId());
             applyHistoryMetadata(storedFile, historyObject);
             applyAuditMetadata(storedFile, auditObject);
             try {
@@ -207,6 +209,7 @@ public class FileStorageService {
             existing.setContentType(mainObject.getContentType());
             existing.setSizeBytes(mainObject.getSizeBytes());
             existing.setStorageKey(mainObject.getStorageKey());
+            existing.setEncryptionKeyId(mainObject.getEncryptionKeyId());
             if (historyObject != null) {
                 applyHistoryMetadata(existing, historyObject);
             }
@@ -492,6 +495,17 @@ public class FileStorageService {
         ensureStorageEnabled();
         try {
             return storageProvider.load(file.getStorageKey());
+        } catch (StorageKeyRevokedException e) {
+            // Deliberate, reversible policy state (encryption key disabled), not a server fault —
+            // surface as forbidden so the client sees "revoked", not "internal error".
+            log.warn(
+                    "Access to stored file {} denied: {}",
+                    file != null ? file.getId() : null,
+                    e.getMessage());
+            throw new ResponseStatusException(
+                    HttpStatus.FORBIDDEN,
+                    "Access to this file has been revoked (its encryption key is disabled)",
+                    e);
         } catch (IOException e) {
             log.error(
                     "Failed to load stored file {} (key: {})",
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/workflow/service/WorkflowSessionService.java b/app/proprietary/src/main/java/stirling/software/proprietary/workflow/service/WorkflowSessionService.java
index 364dbf39ce..41aed7d9c2 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/workflow/service/WorkflowSessionService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/workflow/service/WorkflowSessionService.java
@@ -263,6 +263,7 @@ public class WorkflowSessionService {
         storedFile.setContentType(storedObject.getContentType());
         storedFile.setSizeBytes(storedObject.getSizeBytes());
         storedFile.setStorageKey(storedObject.getStorageKey());
+        storedFile.setEncryptionKeyId(storedObject.getEncryptionKeyId());
         storedFile.setPurpose(purpose);
 
         return storedFileRepository.save(storedFile);
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java
index ddd67db020..447354b5cb 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java
@@ -9,92 +9,162 @@ import static org.mockito.Mockito.doNothing;
 import static org.mockito.Mockito.mock;
 import static org.mockito.Mockito.when;
 
+import java.util.Base64;
+import java.util.Optional;
+
 import org.junit.jupiter.api.Test;
+import org.springframework.transaction.PlatformTransactionManager;
 
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.model.Team;
 import stirling.software.proprietary.security.configuration.ee.KeygenLicenseVerifier.License;
 import stirling.software.proprietary.security.configuration.ee.LicenseKeyChecker;
-import stirling.software.proprietary.storage.provider.LocalStorageProvider;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.crypto.EncryptingStorageProvider;
+import stirling.software.proprietary.storage.crypto.InMemoryKeyRepo;
+import stirling.software.proprietary.storage.crypto.StorageEncryptionState;
 import stirling.software.proprietary.storage.provider.StorageProvider;
 import stirling.software.proprietary.storage.repository.StoredFileBlobRepository;
 
 /**
- * Verifies the Pro/Enterprise license gate on the S3 storage backend without touching real S3
- * clients (and without needing Docker). Provider-specific construction is delegated to the existing
- * provider tests.
+ * Verifies the Pro/Enterprise license gates and, critically, that the encryption decorator is
+ * installed in EVERY configuration — a node whose config lags the cluster (flag off, key rows
+ * already existing elsewhere) must never serve raw ciphertext.
  */
 class StorageProviderConfigTest {
 
-    @Test
-    void provider_local_normalLicense_buildsLocalProviderWithoutLicenseCheck() {
-        StorageProviderConfig cfg = newConfig("local", License.NORMAL);
+    private static final String MASTER =
+            Base64.getEncoder().encodeToString("0123456789abcdef0123456789abcdef".getBytes());
 
-        StorageProvider provider = cfg.storageProvider();
-        assertThat(provider).isInstanceOf(LocalStorageProvider.class);
+    private final InMemoryKeyRepo keyRepo = new InMemoryKeyRepo();
+    private final PlatformTransactionManager txManager = mock(PlatformTransactionManager.class);
+
+    // ---- decorator installation matrix -------------------------------------------------
+
+    @Test
+    void decorator_alwaysInstalled_evenWhenEncryptionOffAndNoKeys() {
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
+
+        StorageProvider provider = cfg.storageProvider(state, Optional.empty());
+        assertThat(provider).isInstanceOf(EncryptingStorageProvider.class);
+        assertThat(state.isWriteEnabled()).isFalse();
+        // Nothing encrypted can exist -> the S3 fast path stays available.
+        assertThat(state.suppressDirectDownloads()).isFalse();
     }
 
+    @Test
+    void decorator_writeEnabled_requiresLicenceAndSuppressesDirectDownloads() {
+        StorageProviderConfig cfg = newConfig("local", License.SERVER, true);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
+
+        StorageProvider provider = cfg.storageProvider(state, Optional.empty());
+        assertThat(provider).isInstanceOf(EncryptingStorageProvider.class);
+        assertThat(state.isWriteEnabled()).isTrue();
+        assertThat(state.suppressDirectDownloads()).isTrue();
+    }
+
+    @Test
+    void decorator_flagOffButKeysExist_decryptOnlyModeStillMaterialises() throws Exception {
+        // Simulate the drifted-node case: another node already created keys.
+        StorageProviderConfig seedCfg = newConfig("local", License.SERVER, true);
+        StorageEncryptionState seedState = seedCfg.storageEncryptionState(MASTER, false, txManager);
+        Team team = new Team();
+        team.setId(1L);
+        User owner = new User();
+        owner.setTeam(team);
+        seedState.keyService().activeKekForOwner(owner);
+
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
+
+        assertThat(cfg.storageProvider(state, Optional.empty()))
+                .isInstanceOf(EncryptingStorageProvider.class);
+        assertThat(state.isWriteEnabled()).isFalse();
+        // Encrypted content may exist -> presigned URLs must be suppressed on this node too.
+        assertThat(state.suppressDirectDownloads()).isTrue();
+        // Eager init ran (keys existed at boot), so decryption works without a licence.
+        assertThat(state.keyService()).isNotNull();
+    }
+
+    @Test
+    void encryption_enabled_normalLicense_failsStartup() {
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, true);
+        assertThatThrownBy(() -> cfg.storageEncryptionState(MASTER, false, txManager))
+                .isInstanceOf(IllegalStateException.class)
+                .hasMessageContaining("storage.encryption requires a Pro or Enterprise license");
+    }
+
+    @Test
+    void encryption_enabled_wrongLengthKey_failsStartup() {
+        StorageProviderConfig cfg = newConfig("local", License.SERVER, true);
+        String shortKey = Base64.getEncoder().encodeToString("only16bytes-yes!".getBytes());
+        assertThatThrownBy(() -> cfg.storageEncryptionState(shortKey, false, txManager))
+                .isInstanceOf(IllegalStateException.class)
+                .hasMessageContaining("32 bytes");
+    }
+
+    // ---- backend licence gates (unchanged behaviour) ------------------------------------
+
     @Test
     void provider_s3_normalLicense_throwsBeforeBuildingClient() {
-        StorageProviderConfig cfg = newConfig("s3", License.NORMAL);
+        StorageProviderConfig cfg = newConfig("s3", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
 
         // License check must throw BEFORE S3Clients.build tries to validate endpoint / bucket.
-        // Otherwise an empty config would surface as a confusing "bucket must be set" error.
-        assertThatThrownBy(cfg::storageProvider)
+        assertThatThrownBy(() -> cfg.storageProvider(state, Optional.empty()))
                 .isInstanceOf(IllegalStateException.class)
                 .hasMessageContaining("storage.provider=s3 requires a Pro or Enterprise license");
     }
 
     @Test
     void provider_database_normalLicense_throws() {
-        StorageProviderConfig cfg = newConfig("database", License.NORMAL);
+        StorageProviderConfig cfg = newConfig("database", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
 
-        assertThatThrownBy(cfg::storageProvider)
+        assertThatThrownBy(() -> cfg.storageProvider(state, Optional.empty()))
                 .isInstanceOf(IllegalStateException.class)
                 .hasMessageContaining(
                         "storage.provider=database requires a Pro or Enterprise license");
     }
 
     @Test
-    void provider_database_serverLicense_buildsDatabaseProvider() {
-        StorageProviderConfig cfg = newConfig("database", License.SERVER);
-        assertThatCode(cfg::storageProvider).doesNotThrowAnyException();
+    void provider_database_serverLicense_builds() {
+        StorageProviderConfig cfg = newConfig("database", License.SERVER, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
+        assertThatCode(() -> cfg.storageProvider(state, Optional.empty()))
+                .doesNotThrowAnyException();
     }
 
     @Test
     void provider_s3_serverLicense_passesLicenseCheck_thenFailsOnEmptyConfig() {
-        StorageProviderConfig cfg = newConfig("s3", License.SERVER);
+        StorageProviderConfig cfg = newConfig("s3", License.SERVER, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
 
         // Valid license, but no bucket/endpoint configured - so we expect a CONFIG error,
-        // not a license error. The error message must not mention the license.
-        assertThatThrownBy(cfg::storageProvider)
+        // not a license error.
+        assertThatThrownBy(() -> cfg.storageProvider(state, Optional.empty()))
                 .isInstanceOf(IllegalStateException.class)
                 .hasMessageNotContaining("Pro or Enterprise license");
     }
 
     @Test
-    void provider_s3_enterpriseLicense_passesLicenseCheck_thenFailsOnEmptyConfig() {
-        StorageProviderConfig cfg = newConfig("s3", License.ENTERPRISE);
+    void provider_unknown_throwsUnsupportedProvider_notLicense() {
+        StorageProviderConfig cfg = newConfig("magic", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
 
-        assertThatThrownBy(cfg::storageProvider)
-                .isInstanceOf(IllegalStateException.class)
-                .hasMessageNotContaining("Pro or Enterprise license");
-    }
-
-    @Test
-    void provider_unknown_normalLicense_throwsUnsupportedProvider_notLicense() {
-        StorageProviderConfig cfg = newConfig("magic", License.NORMAL);
-
-        assertThatThrownBy(cfg::storageProvider)
+        assertThatThrownBy(() -> cfg.storageProvider(state, Optional.empty()))
                 .isInstanceOf(IllegalStateException.class)
                 .hasMessageContaining("Storage provider not supported: magic")
                 .hasMessageNotContaining("license");
     }
 
-    private static StorageProviderConfig newConfig(String provider, License license) {
+    private StorageProviderConfig newConfig(
+            String provider, License license, boolean encryptionEnabled) {
         ApplicationProperties props = new ApplicationProperties();
         props.getStorage().setProvider(provider);
-        props.getStorage()
-                .setEnabled(false); // local-fallback path skips dir creation when disabled
+        props.getStorage().setEnabled(false); // local-fallback path skips dir creation
+        props.getStorage().getEncryption().setEnabled(encryptionEnabled);
         StoredFileBlobRepository repo = mock(StoredFileBlobRepository.class);
         LicenseKeyChecker checker = mock(LicenseKeyChecker.class);
         when(checker.getPremiumLicenseEnabledResult()).thenReturn(license);
@@ -111,6 +181,6 @@ class StorageProviderConfigTest {
                     .when(checker)
                     .requireProOrEnterprise(anyString());
         }
-        return new StorageProviderConfig(props, repo, checker);
+        return new StorageProviderConfig(props, repo, keyRepo.mock, checker);
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormatTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormatTest.java
new file mode 100644
index 0000000000..89aad24587
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptedFileFormatTest.java
@@ -0,0 +1,78 @@
+package stirling.software.proprietary.storage.crypto;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.util.UUID;
+
+import org.junit.jupiter.api.Test;
+
+class EncryptedFileFormatTest {
+
+    private static EncryptedFileFormat.Header sampleHeader() {
+        return new EncryptedFileFormat.Header(
+                EncryptedFileFormat.FORMAT_VERSION,
+                EncryptedFileFormat.SUITE_AES_GCM_HKDF_1MIB,
+                UUID.randomUUID(),
+                123_456_789L,
+                new byte[EncryptedFileFormat.WRAPPED_DEK_LENGTH]);
+    }
+
+    @Test
+    void serialize_parse_roundtrips() throws Exception {
+        EncryptedFileFormat.Header header = sampleHeader();
+        byte[] bytes = header.serialize();
+        assertThat(bytes).hasSize(EncryptedFileFormat.HEADER_LENGTH);
+
+        EncryptedFileFormat.Header parsed = EncryptedFileFormat.parse(bytes);
+        assertThat(parsed).isNotNull();
+        assertThat(parsed.keyId()).isEqualTo(header.keyId());
+        assertThat(parsed.plaintextLength()).isEqualTo(header.plaintextLength());
+        assertThat(parsed.wrappedDek()).isEqualTo(header.wrappedDek());
+    }
+
+    @Test
+    void parse_returnsNullForPlaintext() throws Exception {
+        byte[] pdf = new byte[EncryptedFileFormat.HEADER_LENGTH];
+        pdf[0] = '%';
+        pdf[1] = 'P';
+        pdf[2] = 'D';
+        pdf[3] = 'F';
+        assertThat(EncryptedFileFormat.parse(pdf)).isNull();
+    }
+
+    @Test
+    void parse_returnsNullForShortPrefix() throws Exception {
+        assertThat(EncryptedFileFormat.parse(new byte[10])).isNull();
+        assertThat(EncryptedFileFormat.parse(null)).isNull();
+    }
+
+    @Test
+    void parse_throwsCheckedOnUnknownVersion() {
+        byte[] bytes = sampleHeader().serialize();
+        bytes[8] = 99; // format version
+        // Checked StorageEncryptionException so callers' IOException mapping catches it —
+        // a downgrade-read must not surface as a bare 500.
+        assertThatThrownBy(() -> EncryptedFileFormat.parse(bytes))
+                .isInstanceOf(StorageEncryptionException.class)
+                .hasMessageContaining("Unsupported");
+    }
+
+    @Test
+    void associatedData_excludesWrappedDek() {
+        EncryptedFileFormat.Header header = sampleHeader();
+        byte[] aad = header.associatedData();
+        assertThat(aad).hasSize(34);
+        // Changing the wrapped DEK must not change the AAD (it is authenticated separately).
+        byte[] otherDek = new byte[EncryptedFileFormat.WRAPPED_DEK_LENGTH];
+        otherDek[0] = 1;
+        EncryptedFileFormat.Header other =
+                new EncryptedFileFormat.Header(
+                        header.formatVersion(),
+                        header.cipherSuite(),
+                        header.keyId(),
+                        header.plaintextLength(),
+                        otherDek);
+        assertThat(other.associatedData()).isEqualTo(aad);
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProviderTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProviderTest.java
new file mode 100644
index 0000000000..f66d03ae42
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/EncryptingStorageProviderTest.java
@@ -0,0 +1,391 @@
+package stirling.software.proprietary.storage.crypto;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.time.Duration;
+import java.util.Base64;
+import java.util.UUID;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
+import org.springframework.core.io.InputStreamResource;
+import org.springframework.core.io.Resource;
+import org.springframework.mock.web.MockMultipartFile;
+import org.springframework.web.multipart.MultipartFile;
+
+import stirling.software.proprietary.model.Team;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.model.FileEncryptionKey;
+import stirling.software.proprietary.storage.provider.LocalStorageProvider;
+import stirling.software.proprietary.storage.provider.StorageProvider;
+import stirling.software.proprietary.storage.provider.StoredObject;
+
+class EncryptingStorageProviderTest {
+
+    private static final byte[] PLAINTEXT =
+            "This is the secret PDF payload used to prove round-trips work."
+                    .getBytes(StandardCharsets.UTF_8);
+    private static final String MASTER =
+            Base64.getEncoder()
+                    .encodeToString(
+                            "0123456789abcdef0123456789abcdef".getBytes(StandardCharsets.UTF_8));
+
+    @TempDir Path tempDir;
+
+    private InMemoryKeyRepo repo;
+    private LocalStorageProvider inner;
+    private EncryptingStorageProvider provider;
+    private User owner;
+
+    @BeforeEach
+    void setUp() {
+        repo = new InMemoryKeyRepo();
+        inner = new LocalStorageProvider(tempDir);
+        provider = new EncryptingStorageProvider(inner, newKeyService(), true);
+        Team team = new Team();
+        team.setId(7L);
+        owner = new User();
+        owner.setId(1L);
+        owner.setTeam(team);
+    }
+
+    private FileEncryptionKeyService newKeyService() {
+        return new FileEncryptionKeyService(repo.mock, new FileEncryptionMasterKey(MASTER, false));
+    }
+
+    private static MultipartFile upload() {
+        return new MockMultipartFile("file", "test.pdf", "application/pdf", PLAINTEXT);
+    }
+
+    @Test
+    void store_load_roundTripsAndKeepsPlaintextMetadata() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+
+        assertThat(stored.getSizeBytes()).isEqualTo(PLAINTEXT.length);
+        assertThat(stored.getEncryptionKeyId()).isNotNull();
+        assertThat(stored.getOriginalFilename()).isEqualTo("test.pdf");
+
+        Resource loaded = provider.load(stored.getStorageKey());
+        assertThat(loaded.contentLength()).isEqualTo(PLAINTEXT.length);
+        try (InputStream in = loaded.getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(PLAINTEXT);
+        }
+        // Re-openable resources must support a second full read (e.g. retry after range abort).
+        try (InputStream in = loaded.getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(PLAINTEXT);
+        }
+    }
+
+    @Test
+    void store_writesOnlyCiphertextToDisk() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        byte[] onDisk = Files.readAllBytes(tempDir.resolve(stored.getStorageKey()));
+
+        assertThat(new String(onDisk, 0, 8, StandardCharsets.US_ASCII)).isEqualTo("SPDFEAR1");
+        assertThat(new String(onDisk, StandardCharsets.ISO_8859_1)).doesNotContain("secret");
+        assertThat(onDisk.length).isGreaterThan(PLAINTEXT.length);
+    }
+
+    @Test
+    void load_legacyPlaintextBlob_passesThroughUntouched() throws IOException {
+        StoredObject legacy = inner.store(owner, upload());
+        Resource loaded = provider.load(legacy.getStorageKey());
+        try (InputStream in = loaded.getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(PLAINTEXT);
+        }
+    }
+
+    @Test
+    void store_writeDisabled_staysPlaintextButLoadStillDecrypts() throws IOException {
+        StoredObject encrypted = provider.store(owner, upload());
+
+        EncryptingStorageProvider decryptOnly =
+                new EncryptingStorageProvider(inner, newKeyService(), false);
+        StoredObject plain = decryptOnly.store(owner, upload());
+
+        assertThat(plain.getEncryptionKeyId()).isNull();
+        byte[] onDisk = Files.readAllBytes(tempDir.resolve(plain.getStorageKey()));
+        assertThat(onDisk).isEqualTo(PLAINTEXT);
+
+        // Decrypt-only mode still reads previously encrypted content.
+        try (InputStream in = decryptOnly.load(encrypted.getStorageKey()).getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(PLAINTEXT);
+        }
+    }
+
+    @Test
+    void load_disabledKey_failsClosed() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        repo.rows
+                .get(UUID.fromString(stored.getEncryptionKeyId()))
+                .setStatus(FileEncryptionKey.Status.DISABLED);
+
+        // Fresh service = fresh unwrap cache, as another node would see it.
+        EncryptingStorageProvider fresh =
+                new EncryptingStorageProvider(inner, newKeyService(), true);
+        assertThatThrownBy(() -> fresh.load(stored.getStorageKey()))
+                .isInstanceOf(StorageKeyRevokedException.class)
+                .hasMessageContaining("disabled");
+    }
+
+    @Test
+    void load_tamperedPayload_failsAuthentication() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        Path blob = tempDir.resolve(stored.getStorageKey());
+        byte[] bytes = Files.readAllBytes(blob);
+        bytes[EncryptedFileFormat.HEADER_LENGTH + 20] ^= 0x42; // flip a payload bit
+        Files.write(blob, bytes);
+
+        Resource loaded = provider.load(stored.getStorageKey());
+        assertThatThrownBy(
+                        () -> {
+                            try (InputStream in = loaded.getInputStream()) {
+                                in.readAllBytes();
+                            }
+                        })
+                .isInstanceOf(IOException.class);
+    }
+
+    @Test
+    void load_tamperedHeaderKeyId_failsAuthentication() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        // Second key so the swapped-in id exists and is ACTIVE.
+        Team otherTeam = new Team();
+        otherTeam.setId(99L);
+        User otherOwner = new User();
+        otherOwner.setId(2L);
+        otherOwner.setTeam(otherTeam);
+        StoredObject other = provider.store(otherOwner, upload());
+
+        Path blob = tempDir.resolve(stored.getStorageKey());
+        byte[] bytes = Files.readAllBytes(blob);
+        byte[] otherBytes = Files.readAllBytes(tempDir.resolve(other.getStorageKey()));
+        System.arraycopy(otherBytes, 10, bytes, 10, 16); // transplant the other key id
+        Files.write(blob, bytes);
+
+        assertThatThrownBy(() -> provider.load(stored.getStorageKey()))
+                .isInstanceOf(StorageEncryptionException.class);
+    }
+
+    @Test
+    void signedDownloadUrl_isSuppressed() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        assertThat(provider.signedDownloadUrl(stored.getStorageKey(), Duration.ofMinutes(5)))
+                .isEmpty();
+        assertThat(
+                        provider.signedDownloadUrl(
+                                stored.getStorageKey(), Duration.ofMinutes(5), true, "a.pdf"))
+                .isEmpty();
+    }
+
+    @Test
+    void load_oneShotStreamBackend_roundTrips() throws IOException {
+        // Simulates S3: load() hands back a single-use InputStreamResource.
+        StorageProvider oneShotInner =
+                new StorageProvider() {
+                    @Override
+                    public StoredObject store(User owner, MultipartFile file) throws IOException {
+                        return inner.store(owner, file);
+                    }
+
+                    @Override
+                    public Resource load(String storageKey) throws IOException {
+                        InputStream in = inner.load(storageKey).getInputStream();
+                        return new InputStreamResource(in);
+                    }
+
+                    @Override
+                    public void delete(String storageKey) throws IOException {
+                        inner.delete(storageKey);
+                    }
+                };
+        EncryptingStorageProvider oneShot =
+                new EncryptingStorageProvider(oneShotInner, newKeyService(), true);
+
+        StoredObject stored = oneShot.store(owner, upload());
+        Resource loaded = oneShot.load(stored.getStorageKey());
+        assertThat(loaded.isOpen()).isTrue();
+        assertThat(loaded.contentLength()).isEqualTo(PLAINTEXT.length);
+        try (InputStream in = loaded.getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(PLAINTEXT);
+        }
+
+        // Legacy plaintext through the one-shot path replays the sniffed prefix.
+        StoredObject legacy = inner.store(owner, upload());
+        try (InputStream in = oneShot.load(legacy.getStorageKey()).getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(PLAINTEXT);
+        }
+    }
+
+    @Test
+    void store_largeFile_roundTripsAcrossSegmentBoundaries() throws IOException {
+        byte[] big = new byte[EncryptedFileFormat.SEGMENT_SIZE_BYTES * 2 + 12345];
+        for (int i = 0; i < big.length; i++) {
+            big[i] = (byte) (i * 31);
+        }
+        StoredObject stored =
+                provider.store(
+                        owner, new MockMultipartFile("file", "big.bin", "application/pdf", big));
+        assertThat(stored.getSizeBytes()).isEqualTo(big.length);
+        try (InputStream in = provider.load(stored.getStorageKey()).getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(big);
+        }
+    }
+
+    @Test
+    void load_tinyLegacyBlob_shorterThanHeader_passesThrough() throws IOException {
+        byte[] tiny = "hi".getBytes(StandardCharsets.UTF_8);
+        StoredObject legacy =
+                inner.store(owner, new MockMultipartFile("file", "tiny.txt", "text/plain", tiny));
+        try (InputStream in = provider.load(legacy.getStorageKey()).getInputStream()) {
+            assertThat(in.readAllBytes()).isEqualTo(tiny);
+        }
+    }
+
+    /** Tracks close() so leak regressions on the one-shot (S3-style) path are caught. */
+    private final class TrackingOneShotProvider implements StorageProvider {
+        final java.util.concurrent.atomic.AtomicInteger openStreams =
+                new java.util.concurrent.atomic.AtomicInteger();
+
+        @Override
+        public StoredObject store(User owner, MultipartFile file) throws IOException {
+            return inner.store(owner, file);
+        }
+
+        @Override
+        public Resource load(String storageKey) throws IOException {
+            openStreams.incrementAndGet();
+            InputStream tracked =
+                    new java.io.FilterInputStream(inner.load(storageKey).getInputStream()) {
+                        @Override
+                        public void close() throws IOException {
+                            openStreams.decrementAndGet();
+                            super.close();
+                        }
+                    };
+            return new InputStreamResource(tracked);
+        }
+
+        @Override
+        public void delete(String storageKey) throws IOException {
+            inner.delete(storageKey);
+        }
+    }
+
+    @Test
+    void load_oneShot_disabledKey_closesUnderlyingStream() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        repo.rows
+                .get(UUID.fromString(stored.getEncryptionKeyId()))
+                .setStatus(FileEncryptionKey.Status.DISABLED);
+
+        TrackingOneShotProvider tracking = new TrackingOneShotProvider();
+        EncryptingStorageProvider oneShot =
+                new EncryptingStorageProvider(tracking, newKeyService(), true);
+
+        // Exercising the kill switch repeatedly must not leak connections.
+        for (int i = 0; i < 3; i++) {
+            assertThatThrownBy(() -> oneShot.load(stored.getStorageKey()))
+                    .isInstanceOf(StorageKeyRevokedException.class);
+        }
+        assertThat(tracking.openStreams.get()).isZero();
+    }
+
+    @Test
+    void load_oneShot_unknownHeaderVersion_closesUnderlyingStream() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        Path blob = tempDir.resolve(stored.getStorageKey());
+        byte[] bytes = Files.readAllBytes(blob);
+        bytes[8] = 99; // future format version
+        Files.write(blob, bytes);
+
+        TrackingOneShotProvider tracking = new TrackingOneShotProvider();
+        EncryptingStorageProvider oneShot =
+                new EncryptingStorageProvider(tracking, newKeyService(), true);
+
+        assertThatThrownBy(() -> oneShot.load(stored.getStorageKey()))
+                .isInstanceOf(StorageEncryptionException.class)
+                .hasMessageContaining("Unsupported");
+        assertThat(tracking.openStreams.get()).isZero();
+    }
+
+    @Test
+    void store_uploadMisreportingSize_failsInsteadOfCorruptingContentLength() {
+        MultipartFile lying =
+                new MockMultipartFile("file", "test.pdf", "application/pdf", PLAINTEXT) {
+                    @Override
+                    public long getSize() {
+                        return PLAINTEXT.length + 5;
+                    }
+                };
+        assertThatThrownBy(() -> provider.store(owner, lying))
+                .isInstanceOf(StorageEncryptionException.class)
+                .hasMessageContaining("streamed");
+    }
+
+    @Test
+    void load_tamperedPlaintextLength_failsAuthentication() throws IOException {
+        StoredObject stored = provider.store(owner, upload());
+        Path blob = tempDir.resolve(stored.getStorageKey());
+        byte[] bytes = Files.readAllBytes(blob);
+        bytes[33] ^= 0x01; // low byte of the header's plaintextLength field
+        Files.write(blob, bytes);
+
+        // plaintextLength is part of the AAD, so the DEK unwrap must reject the header.
+        assertThatThrownBy(() -> provider.load(stored.getStorageKey()))
+                .isInstanceOf(StorageEncryptionException.class);
+    }
+
+    @Test
+    void signedDownloadUrl_delegatesWhenNoEncryptedContentPossible() throws IOException {
+        // Vanilla install: flag off, no key rows anywhere -> keep the backend's fast path.
+        StorageEncryptionState vanilla =
+                new StorageEncryptionState(false, () -> newKeyService(), repo.mock);
+        StorageProvider withUrls =
+                new StorageProvider() {
+                    @Override
+                    public StoredObject store(User owner, MultipartFile file) throws IOException {
+                        return inner.store(owner, file);
+                    }
+
+                    @Override
+                    public Resource load(String storageKey) throws IOException {
+                        return inner.load(storageKey);
+                    }
+
+                    @Override
+                    public void delete(String storageKey) throws IOException {
+                        inner.delete(storageKey);
+                    }
+
+                    @Override
+                    public java.util.Optional<java.net.URI> signedDownloadUrl(
+                            String storageKey,
+                            Duration ttl,
+                            boolean inline,
+                            String originalFilename) {
+                        return java.util.Optional.of(java.net.URI.create("https://signed.example"));
+                    }
+                };
+        EncryptingStorageProvider decorated = new EncryptingStorageProvider(withUrls, vanilla);
+
+        assertThat(decorated.signedDownloadUrl("k", Duration.ofMinutes(5), false, "a.pdf"))
+                .contains(java.net.URI.create("https://signed.example"));
+
+        // As soon as key rows exist, the same node must stop handing out direct URLs.
+        StoredObject encrypted = provider.store(owner, upload());
+        assertThat(encrypted.getEncryptionKeyId()).isNotNull();
+        StorageEncryptionState drifted =
+                new StorageEncryptionState(false, () -> newKeyService(), repo.mock);
+        EncryptingStorageProvider driftedNode = new EncryptingStorageProvider(withUrls, drifted);
+        assertThat(driftedNode.signedDownloadUrl("k", Duration.ofMinutes(5), false, "a.pdf"))
+                .isEmpty();
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceDbTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceDbTest.java
new file mode 100644
index 0000000000..e2b5be0186
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceDbTest.java
@@ -0,0 +1,113 @@
+package stirling.software.proprietary.storage.crypto;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.Base64;
+
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.SpringBootConfiguration;
+import org.springframework.boot.autoconfigure.AutoConfigurationPackage;
+import org.springframework.boot.data.jpa.test.autoconfigure.DataJpaTest;
+import org.springframework.transaction.PlatformTransactionManager;
+import org.springframework.transaction.TransactionDefinition;
+import org.springframework.transaction.support.TransactionTemplate;
+
+import stirling.software.proprietary.model.Team;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.model.FileEncryptionKey;
+import stirling.software.proprietary.storage.repository.FileEncryptionKeyRepository;
+
+/**
+ * Key-creation against a real database and real transaction boundaries. The Mockito race test
+ * throws synchronously from save(), which hides the production failure mode: under a caller's
+ * transaction (e.g. WorkflowSessionService is class-level {@code @Transactional}) an assigned-UUID
+ * INSERT defers to the outer flush, so without REQUIRES_NEW the duplicate-key error would surface
+ * at commit — far from the recovery catch — with the outer transaction already rollback-only.
+ */
+@DataJpaTest
+class FileEncryptionKeyServiceDbTest {
+
+    private static final String MASTER =
+            Base64.getEncoder().encodeToString("0123456789abcdef0123456789abcdef".getBytes());
+
+    @Autowired private FileEncryptionKeyRepository repository;
+    @Autowired private PlatformTransactionManager transactionManager;
+
+    @AfterEach
+    void wipe() {
+        repository.deleteAllInBatch();
+    }
+
+    private FileEncryptionKeyService newService() {
+        TransactionTemplate requiresNew = new TransactionTemplate(transactionManager);
+        requiresNew.setPropagationBehavior(TransactionDefinition.PROPAGATION_REQUIRES_NEW);
+        return new FileEncryptionKeyService(
+                repository, new FileEncryptionMasterKey(MASTER, false), requiresNew);
+    }
+
+    private static User teamUser(long teamId) {
+        Team team = new Team();
+        team.setId(teamId);
+        User user = new User();
+        user.setTeam(team);
+        return user;
+    }
+
+    @Test
+    void createActive_duplicateInsertInsideCallerTransaction_recoversAndKeepsCallerHealthy() {
+        // "Node A" creates the scope key first (committed independently).
+        FileEncryptionKey winner = newService().createActive(FileEncryptionKey.ScopeType.TEAM, 42L);
+        assertThat(repository.count()).isEqualTo(1);
+
+        // "Node B" raced: it computed its key version BEFORE A's commit was visible, so it
+        // attempts the same (scope, version) row. Only that read is faked; the flush, the
+        // unique-constraint violation, and the recovery all run against the real database.
+        FileEncryptionKeyRepository raceTimedRepo =
+                org.mockito.Mockito.mock(
+                        FileEncryptionKeyRepository.class,
+                        org.mockito.AdditionalAnswers.delegatesTo(repository));
+        org.mockito.Mockito.doReturn(java.util.Optional.empty())
+                .when(raceTimedRepo)
+                .findFirstByScopeTypeAndScopeIdOrderByKeyVersionDesc(
+                        FileEncryptionKey.ScopeType.TEAM, 42L);
+
+        TransactionTemplate requiresNew = new TransactionTemplate(transactionManager);
+        requiresNew.setPropagationBehavior(TransactionDefinition.PROPAGATION_REQUIRES_NEW);
+        FileEncryptionKeyService raced =
+                new FileEncryptionKeyService(
+                        raceTimedRepo, new FileEncryptionMasterKey(MASTER, false), requiresNew);
+
+        // Inside a caller transaction (the WorkflowSessionService shape): the duplicate insert
+        // must be absorbed by createActive's own REQUIRES_NEW transaction, recover to the
+        // winner's row, and leave the caller transaction committable.
+        TransactionTemplate callerTx = new TransactionTemplate(transactionManager);
+        FileEncryptionKey resolved =
+                callerTx.execute(
+                        status -> {
+                            FileEncryptionKey row =
+                                    raced.createActive(FileEncryptionKey.ScopeType.TEAM, 42L);
+                            assertThat(status.isRollbackOnly()).isFalse();
+                            return row;
+                        });
+
+        assertThat(resolved.getKeyId()).isEqualTo(winner.getKeyId());
+        assertThat(repository.count()).isEqualTo(1);
+    }
+
+    @Test
+    void activeKekForOwner_roundTripsThroughRealDatabase() throws Exception {
+        FileEncryptionKeyService service = newService();
+        FileEncryptionKeyService.ScopeKek created = service.activeKekForOwner(teamUser(7));
+
+        // Fresh service (cold caches) unwraps the same key material from the committed row.
+        assertThat(newService().kekForDecrypt(created.keyId())).isEqualTo(created.key());
+    }
+
+    // The key entity/repository live in sibling packages, so point the JPA slice at the whole
+    // proprietary tree (the entity graph pulls in User/Team either way).
+    @SpringBootConfiguration
+    @AutoConfigurationPackage(basePackages = "stirling.software.proprietary")
+    static class TestApp {}
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceTest.java
new file mode 100644
index 0000000000..10c0a1431d
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/FileEncryptionKeyServiceTest.java
@@ -0,0 +1,197 @@
+package stirling.software.proprietary.storage.crypto;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.doAnswer;
+import static org.mockito.Mockito.doThrow;
+
+import java.util.Base64;
+import java.util.UUID;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.dao.DataIntegrityViolationException;
+
+import stirling.software.proprietary.model.Team;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.model.FileEncryptionKey;
+
+class FileEncryptionKeyServiceTest {
+
+    private static final String MASTER_A =
+            Base64.getEncoder()
+                    .encodeToString(
+                            new byte[] {
+                                1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19,
+                                20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32
+                            });
+    private static final String MASTER_B =
+            Base64.getEncoder()
+                    .encodeToString(
+                            new byte[] {
+                                32, 31, 30, 29, 28, 27, 26, 25, 24, 23, 22, 21, 20, 19, 18, 17, 16,
+                                15, 14, 13, 12, 11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1
+                            });
+
+    private InMemoryKeyRepo repo;
+    private FileEncryptionKeyService service;
+
+    @BeforeEach
+    void setUp() {
+        repo = new InMemoryKeyRepo();
+        service =
+                new FileEncryptionKeyService(
+                        repo.mock, new FileEncryptionMasterKey(MASTER_A, false));
+    }
+
+    private static User teamUser(long teamId) {
+        Team team = new Team();
+        team.setId(teamId);
+        User user = new User();
+        user.setTeam(team);
+        return user;
+    }
+
+    @Test
+    void activeKekForOwner_createsPerTeamKeyOnDemand_thenReuses() throws Exception {
+        FileEncryptionKeyService.ScopeKek first = service.activeKekForOwner(teamUser(5));
+        FileEncryptionKeyService.ScopeKek second = service.activeKekForOwner(teamUser(5));
+        assertThat(second.keyId()).isEqualTo(first.keyId());
+        assertThat(repo.rows).hasSize(1);
+        FileEncryptionKey row = repo.rows.values().iterator().next();
+        assertThat(row.getScopeType()).isEqualTo(FileEncryptionKey.ScopeType.TEAM);
+        assertThat(row.getScopeId()).isEqualTo(5);
+        assertThat(row.getStatus()).isEqualTo(FileEncryptionKey.Status.ACTIVE);
+
+        FileEncryptionKeyService.ScopeKek otherTeam = service.activeKekForOwner(teamUser(6));
+        assertThat(otherTeam.keyId()).isNotEqualTo(first.keyId());
+        assertThat(repo.rows).hasSize(2);
+    }
+
+    @Test
+    void activeKekForOwner_withoutTeam_usesGlobalScope() throws Exception {
+        service.activeKekForOwner(new User());
+        FileEncryptionKey row = repo.rows.values().iterator().next();
+        assertThat(row.getScopeType()).isEqualTo(FileEncryptionKey.ScopeType.GLOBAL);
+        assertThat(row.getScopeId()).isZero();
+    }
+
+    @Test
+    void kekForDecrypt_unwrapsWhatWasWrapped() throws Exception {
+        FileEncryptionKeyService.ScopeKek created = service.activeKekForOwner(teamUser(1));
+        // A fresh service (empty cache) must unwrap the same key material from the DB row.
+        FileEncryptionKeyService fresh =
+                new FileEncryptionKeyService(
+                        repo.mock, new FileEncryptionMasterKey(MASTER_A, false));
+        assertThat(fresh.kekForDecrypt(created.keyId())).isEqualTo(created.key());
+    }
+
+    @Test
+    void kekForDecrypt_disabledKey_failsClosed() throws Exception {
+        FileEncryptionKeyService.ScopeKek created = service.activeKekForOwner(teamUser(1));
+        repo.rows.get(created.keyId()).setStatus(FileEncryptionKey.Status.DISABLED);
+        FileEncryptionKeyService fresh =
+                new FileEncryptionKeyService(
+                        repo.mock, new FileEncryptionMasterKey(MASTER_A, false));
+        assertThatThrownBy(() -> fresh.kekForDecrypt(created.keyId()))
+                .isInstanceOf(StorageKeyRevokedException.class)
+                .hasMessageContaining("disabled");
+    }
+
+    @Test
+    void kekForDecrypt_unknownKey_failsClosed() {
+        assertThatThrownBy(() -> service.kekForDecrypt(UUID.randomUUID()))
+                .isInstanceOf(StorageEncryptionException.class)
+                .hasMessageContaining("No encryption key");
+    }
+
+    @Test
+    void verifyMasterKey_wrongKey_refusesStartup() throws Exception {
+        service.activeKekForOwner(teamUser(1));
+        FileEncryptionKeyService wrongKey =
+                new FileEncryptionKeyService(
+                        repo.mock, new FileEncryptionMasterKey(MASTER_B, false));
+        assertThatThrownBy(wrongKey::verifyMasterKey)
+                .isInstanceOf(IllegalStateException.class)
+                .hasMessageContaining("cannot unwrap");
+    }
+
+    @Test
+    void verifyMasterKey_correctKeyOrEmptyRegistry_passes() throws Exception {
+        service.verifyMasterKey(); // empty registry: nothing to prove
+        service.activeKekForOwner(teamUser(1));
+        service.verifyMasterKey();
+    }
+
+    @Test
+    void verifyMasterKey_retiredOnlyRegistry_stillVerifies() throws Exception {
+        FileEncryptionKeyService.ScopeKek created = service.activeKekForOwner(teamUser(1));
+        repo.rows.get(created.keyId()).setStatus(FileEncryptionKey.Status.RETIRED);
+
+        // A retired-only registry must still prove the key (RETIRED rows decrypt old blobs)...
+        new FileEncryptionKeyService(repo.mock, new FileEncryptionMasterKey(MASTER_A, false))
+                .verifyMasterKey();
+        // ...and still refuse a mismatched master key.
+        assertThatThrownBy(
+                        () ->
+                                new FileEncryptionKeyService(
+                                                repo.mock,
+                                                new FileEncryptionMasterKey(MASTER_B, false))
+                                        .verifyMasterKey())
+                .isInstanceOf(IllegalStateException.class)
+                .hasMessageContaining("cannot unwrap");
+    }
+
+    @Test
+    void createActive_concurrentInsertRace_fallsBackToWinnersRow() throws Exception {
+        // First save call hits the unique constraint; the service must re-read the winner's row.
+        FileEncryptionKey winner = new FileEncryptionKey();
+        winner.setKeyId(UUID.randomUUID());
+        winner.setScopeType(FileEncryptionKey.ScopeType.TEAM);
+        winner.setScopeId(9);
+        winner.setKeyVersion(1);
+        winner.setStatus(FileEncryptionKey.Status.ACTIVE);
+        winner.setMasterKeyVersion(1);
+        FileEncryptionMasterKey master = new FileEncryptionMasterKey(MASTER_A, false);
+        byte[] winnerKek = new byte[32];
+        winner.setWrappedKey(
+                Base64.getEncoder()
+                        .encodeToString(
+                                master.wrap(
+                                        winnerKek,
+                                        winner.getKeyId()
+                                                .toString()
+                                                .getBytes(
+                                                        java.nio.charset.StandardCharsets
+                                                                .US_ASCII))));
+
+        doAnswer(
+                        inv -> {
+                            repo.rows.put(winner.getKeyId(), winner);
+                            throw new DataIntegrityViolationException("duplicate key");
+                        })
+                .doAnswer(
+                        inv -> {
+                            FileEncryptionKey row = inv.getArgument(0);
+                            repo.rows.put(row.getKeyId(), row);
+                            return row;
+                        })
+                .when(repo.mock)
+                .saveAndFlush(any(FileEncryptionKey.class));
+
+        FileEncryptionKeyService racedService = new FileEncryptionKeyService(repo.mock, master);
+        FileEncryptionKeyService.ScopeKek resolved = racedService.activeKekForOwner(teamUser(9));
+        assertThat(resolved.keyId()).isEqualTo(winner.getKeyId());
+        assertThat(resolved.key()).isEqualTo(winnerKek);
+    }
+
+    @Test
+    void createActive_raceWithoutWinner_rethrows() {
+        doThrow(new DataIntegrityViolationException("duplicate key"))
+                .when(repo.mock)
+                .saveAndFlush(any(FileEncryptionKey.class));
+        assertThatThrownBy(() -> service.activeKekForOwner(teamUser(9)))
+                .isInstanceOf(DataIntegrityViolationException.class);
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/InMemoryKeyRepo.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/InMemoryKeyRepo.java
new file mode 100644
index 0000000000..cc3828333a
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/crypto/InMemoryKeyRepo.java
@@ -0,0 +1,66 @@
+package stirling.software.proprietary.storage.crypto;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyLong;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.util.Comparator;
+import java.util.Map;
+import java.util.Optional;
+import java.util.UUID;
+import java.util.concurrent.ConcurrentHashMap;
+
+import stirling.software.proprietary.storage.model.FileEncryptionKey;
+import stirling.software.proprietary.storage.repository.FileEncryptionKeyRepository;
+
+/** Map-backed Mockito stub of the key repository for crypto tests (no JPA slice needed). */
+public final class InMemoryKeyRepo {
+
+    public final Map<UUID, FileEncryptionKey> rows = new ConcurrentHashMap<>();
+    public final FileEncryptionKeyRepository mock;
+
+    public InMemoryKeyRepo() {
+        mock = mock(FileEncryptionKeyRepository.class);
+        when(mock.saveAndFlush(any(FileEncryptionKey.class)))
+                .thenAnswer(
+                        inv -> {
+                            FileEncryptionKey row = inv.getArgument(0);
+                            rows.put(row.getKeyId(), row);
+                            return row;
+                        });
+        when(mock.save(any(FileEncryptionKey.class)))
+                .thenAnswer(
+                        inv -> {
+                            FileEncryptionKey row = inv.getArgument(0);
+                            rows.put(row.getKeyId(), row);
+                            return row;
+                        });
+        when(mock.findById(any(UUID.class)))
+                .thenAnswer(inv -> Optional.ofNullable(rows.get(inv.<UUID>getArgument(0))));
+        when(mock.findFirstByScopeTypeAndScopeIdAndStatus(any(), anyLong(), any()))
+                .thenAnswer(
+                        inv ->
+                                rows.values().stream()
+                                        .filter(r -> r.getScopeType() == inv.getArgument(0))
+                                        .filter(r -> r.getScopeId() == inv.<Long>getArgument(1))
+                                        .filter(r -> r.getStatus() == inv.getArgument(2))
+                                        .findFirst());
+        when(mock.findFirstByScopeTypeAndScopeIdOrderByKeyVersionDesc(any(), anyLong()))
+                .thenAnswer(
+                        inv ->
+                                rows.values().stream()
+                                        .filter(r -> r.getScopeType() == inv.getArgument(0))
+                                        .filter(r -> r.getScopeId() == inv.<Long>getArgument(1))
+                                        .max(
+                                                Comparator.comparingInt(
+                                                        FileEncryptionKey::getKeyVersion)));
+        when(mock.findFirstByStatus(any()))
+                .thenAnswer(
+                        inv ->
+                                rows.values().stream()
+                                        .filter(r -> r.getStatus() == inv.getArgument(0))
+                                        .findFirst());
+        when(mock.count()).thenAnswer(inv -> (long) rows.size());
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/service/FileStorageServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/service/FileStorageServiceTest.java
index 83d9111981..d02b04ae2b 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/storage/service/FileStorageServiceTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/service/FileStorageServiceTest.java
@@ -19,12 +19,15 @@ import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 import org.mockito.junit.jupiter.MockitoSettings;
 import org.mockito.quality.Strictness;
+import org.springframework.http.HttpStatus;
 import org.springframework.mock.web.MockMultipartFile;
 import org.springframework.web.server.ResponseStatusException;
 
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.proprietary.security.database.repository.UserRepository;
 import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.storage.crypto.StorageEncryptionException;
+import stirling.software.proprietary.storage.crypto.StorageKeyRevokedException;
 import stirling.software.proprietary.storage.model.FileShare;
 import stirling.software.proprietary.storage.model.ShareAccessRole;
 import stirling.software.proprietary.storage.model.StoredFile;
@@ -570,4 +573,37 @@ class FileStorageServiceTest {
 
         verify(storedFileRepository).delete(f);
     }
+
+    // -------------------------------------------------------------------------
+    // loadFile — encryption error mapping
+    // -------------------------------------------------------------------------
+
+    @Test
+    void loadFile_revokedKey_throwsForbidden() throws IOException {
+        StoredFile f = ownedFile(user(1L));
+        f.setStorageKey("k");
+        when(storageProvider.load("k"))
+                .thenThrow(new StorageKeyRevokedException("Encryption key X is disabled"));
+
+        assertThatThrownBy(() -> service.loadFile(f))
+                .isInstanceOf(ResponseStatusException.class)
+                .satisfies(
+                        e ->
+                                assertThat(((ResponseStatusException) e).getStatusCode())
+                                        .isEqualTo(HttpStatus.FORBIDDEN));
+    }
+
+    @Test
+    void loadFile_genericIoError_throwsInternalServerError() throws IOException {
+        StoredFile f = ownedFile(user(1L));
+        f.setStorageKey("k");
+        when(storageProvider.load("k")).thenThrow(new StorageEncryptionException("corrupt blob"));
+
+        assertThatThrownBy(() -> service.loadFile(f))
+                .isInstanceOf(ResponseStatusException.class)
+                .satisfies(
+                        e ->
+                                assertThat(((ResponseStatusException) e).getStatusCode())
+                                        .isEqualTo(HttpStatus.INTERNAL_SERVER_ERROR));
+    }
 }
diff --git a/build.gradle b/build.gradle
index 8070d9db82..6aabb1a198 100644
--- a/build.gradle
+++ b/build.gradle
@@ -44,6 +44,7 @@ ext {
     jpdfiumVersion = "1.0.2"
     jwtVersion = "0.13.0"
     awsSdkVersion = "2.44.12"
+    tinkVersion = "1.23.0"
     testcontainersMinioVersion = "1.21.4"
     // junit-platform-launcher version managed by Spring Boot BOM
     modernJavaVersion = 25

From 041b6a4b5fb8649b61606e559defc93a45e5ccd7 Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Fri, 31 Jul 2026 16:59:16 +0100
Subject: [PATCH 014/122] Move parameter validation to config-accessible
 function (#7224)

# Description of Changes
Move the logic for validating params into global exported functions and
attach them to the operation config so that we can access them elsewhere
so things like Pipelines know whether the tool has been configured and
provide a warning if not.

<img width="1264" height="503" alt="image"
src="https://github.com/user-attachments/assets/f320579c-6c08-4c66-a999-015d46df1b33"
/>
---
 .../public/locales/en-US/translation.toml     |  3 +-
 .../useAddPageNumbersOperation.ts             |  2 +
 .../useAddPageNumbersParameters.ts            | 10 ++-
 .../tools/addStamp/useAddStampOperation.ts    |  2 +
 .../tools/addStamp/useAddStampParameters.ts   | 18 ++--
 .../addPassword/useAddPasswordOperation.ts    |  2 +
 .../addPassword/useAddPasswordParameters.ts   | 11 +++
 .../addWatermark/useAddWatermarkOperation.ts  |  2 +
 .../addWatermark/useAddWatermarkParameters.ts | 26 +++---
 .../useAdjustPageScaleOperation.ts            |  2 +
 .../useAdjustPageScaleParameters.ts           | 12 ++-
 .../autoRotate/useAutoRotateOperation.ts      |  2 +
 .../autoRotate/useAutoRotateParameters.ts     |  8 +-
 .../useBookletImpositionOperation.ts          |  2 +
 .../useBookletImpositionParameters.ts         | 12 ++-
 .../tools/certSign/useCertSignOperation.ts    |  2 +
 .../tools/certSign/useCertSignParameters.ts   | 66 +++++++-------
 .../useChangeMetadataOperation.ts             |  2 +
 .../useChangeMetadataParameters.ts            |  6 +-
 .../useChangePermissionsOperation.ts          |  2 +
 .../useChangePermissionsParameters.ts         | 11 +++
 .../tools/compare/useCompareParameters.ts     | 17 ++--
 .../tools/compress/useCompressOperation.ts    |  2 +
 .../tools/compress/useCompressParameters.ts   | 28 +++---
 .../tools/convert/useConvertOperation.ts      |  2 +
 .../tools/convert/useConvertParameters.ts     |  6 +-
 .../core/hooks/tools/crop/useCropOperation.ts |  2 +
 .../hooks/tools/crop/useCropParameters.ts     | 14 +--
 .../extractPages/useExtractPagesOperation.ts  |  2 +
 .../extractPages/useExtractPagesParameters.ts | 10 ++-
 .../core/hooks/tools/ocr/useOCROperation.ts   |  2 +
 .../core/hooks/tools/ocr/useOCRParameters.ts  | 12 ++-
 .../overlayPdfs/useOverlayPdfsOperation.ts    |  2 +
 .../overlayPdfs/useOverlayPdfsParameters.ts   | 29 ++++---
 .../pageLayout/usePageLayoutOperation.ts      |  2 +
 .../pageLayout/usePageLayoutParameters.ts     | 70 ++++++++-------
 .../hooks/tools/redact/useRedactOperation.ts  |  2 +
 .../hooks/tools/redact/useRedactParameters.ts | 24 ++---
 .../removeBlanks/useRemoveBlanksOperation.ts  |  2 +
 .../removeBlanks/useRemoveBlanksParameters.ts | 19 ++--
 .../removePages/useRemovePagesOperation.ts    |  2 +
 .../removePages/useRemovePagesParameters.ts   | 10 ++-
 .../useRemovePasswordOperation.ts             |  2 +
 .../useRemovePasswordParameters.ts            | 12 ++-
 .../replaceColor/useReplaceColorOperation.ts  |  2 +
 .../replaceColor/useReplaceColorParameters.ts | 14 ++-
 .../hooks/tools/rotate/useRotateOperation.ts  |  2 +
 .../hooks/tools/rotate/useRotateParameters.ts | 12 ++-
 .../tools/sanitize/useSanitizeOperation.ts    |  2 +
 .../tools/sanitize/useSanitizeParameters.ts   | 12 ++-
 .../useScannerImageSplitOperation.ts          |  2 +
 .../useScannerImageSplitParameters.ts         | 14 ++-
 .../core/hooks/tools/shared/toolAutomation.ts | 20 +++++
 .../hooks/tools/shared/toolOperationTypes.ts  |  8 ++
 .../shared/validateParamsCoverage.test.ts     | 87 +++++++++++++++++++
 .../core/hooks/tools/sign/useSignOperation.ts |  2 +
 .../hooks/tools/sign/useSignParameters.ts     |  2 +-
 .../hooks/tools/split/useSplitOperation.ts    |  2 +
 .../hooks/tools/split/useSplitParameters.ts   | 58 +++++++------
 .../timestampPdf/useTimestampPdfOperation.ts  |  2 +
 .../timestampPdf/useTimestampPdfParameters.ts | 12 ++-
 .../src/portal/views/PipelineBuilder.tsx      | 16 +++-
 62 files changed, 541 insertions(+), 204 deletions(-)
 create mode 100644 frontend/editor/src/core/hooks/tools/shared/validateParamsCoverage.test.ts

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 045ea581f4..3cfc28cd09 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -7749,6 +7749,7 @@ inputs = "Input"
 inputSource = "Input source"
 inputTrigger = "Trigger"
 keepEditing = "Keep editing"
+needsConfiguring = "Needs setting up"
 needsUpload = "Needs an uploaded file"
 noSources = "No sources connected yet. Create one to use it as an input."
 noToolMatches = "No tools match your search."
@@ -7757,7 +7758,7 @@ searchTools = "Search tools"
 selectToolBody = "Add a tool to build your pipeline."
 selectToolTitle = "No tools yet"
 sendToSystem = "Send to another system"
-stepsNeedSetup = "These steps still need an operation and an account chosen before saving: {{tools}}."
+stepsNeedSetup = "These steps still need setting up before saving: {{tools}}."
 toolSettings = "Tool settings"
 unknownStep = "Unrecognized operation, kept as-is."
 unsavedBody = "You have unsaved changes. Save them before leaving, or discard them?"
diff --git a/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersOperation.ts b/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersOperation.ts
index ba8ca13b32..eb1ba6def6 100644
--- a/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersOperation.ts
+++ b/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersOperation.ts
@@ -12,6 +12,7 @@ import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
   AddPageNumbersParameters,
   defaultParameters,
+  validateAddPageNumbersParameters,
 } from "@app/components/tools/addPageNumbers/useAddPageNumbersParameters";
 
 const ENDPOINT = "/api/v1/misc/add-page-numbers" satisfies ToolEndpoint;
@@ -74,6 +75,7 @@ export const buildAddPageNumbersFormData = (
   objectToFormData(addPageNumbersToApiParams(parameters), { fileInput: file });
 
 export const addPageNumbersOperationConfig = defineSingleFileTool({
+  validateParams: validateAddPageNumbersParameters,
   buildFormData: buildAddPageNumbersFormData,
   toApiParams: addPageNumbersToApiParams,
   fromApiParams: addPageNumbersFromApiParams,
diff --git a/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersParameters.ts b/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersParameters.ts
index 43f2d18ec0..5eae2f74e0 100644
--- a/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersParameters.ts
+++ b/frontend/editor/src/core/components/tools/addPageNumbers/useAddPageNumbersParameters.ts
@@ -30,12 +30,16 @@ export const defaultParameters: AddPageNumbersParameters = {
 export type AddPageNumbersParametersHook =
   BaseParametersHook<AddPageNumbersParameters>;
 
+export function validateAddPageNumbersParameters(
+  params: AddPageNumbersParameters,
+): boolean {
+  return params.fontSize > 0 && params.startingNumber > 0;
+}
+
 export const useAddPageNumbersParameters = (): AddPageNumbersParametersHook => {
   return useBaseParameters<AddPageNumbersParameters>({
     defaultParameters,
     endpointName: "add-page-numbers",
-    validateFn: (params): boolean => {
-      return params.fontSize > 0 && params.startingNumber > 0;
-    },
+    validateFn: validateAddPageNumbersParameters,
   });
 };
diff --git a/frontend/editor/src/core/components/tools/addStamp/useAddStampOperation.ts b/frontend/editor/src/core/components/tools/addStamp/useAddStampOperation.ts
index 71510694b0..69122754b7 100644
--- a/frontend/editor/src/core/components/tools/addStamp/useAddStampOperation.ts
+++ b/frontend/editor/src/core/components/tools/addStamp/useAddStampOperation.ts
@@ -12,6 +12,7 @@ import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
   AddStampParameters,
   defaultParameters,
+  validateAddStampParameters,
 } from "@app/components/tools/addStamp/useAddStampParameters";
 
 const ENDPOINT = "/api/v1/misc/add-stamp" satisfies ToolEndpoint;
@@ -88,6 +89,7 @@ export const buildAddStampFormData = (
   );
 
 export const addStampOperationConfig = defineSingleFileTool({
+  validateParams: validateAddStampParameters,
   buildFormData: buildAddStampFormData,
   toApiParams: addStampToApiParams,
   fromApiParams: addStampFromApiParams,
diff --git a/frontend/editor/src/core/components/tools/addStamp/useAddStampParameters.ts b/frontend/editor/src/core/components/tools/addStamp/useAddStampParameters.ts
index 637f4c0566..6cd52eb835 100644
--- a/frontend/editor/src/core/components/tools/addStamp/useAddStampParameters.ts
+++ b/frontend/editor/src/core/components/tools/addStamp/useAddStampParameters.ts
@@ -39,16 +39,20 @@ export const defaultParameters: AddStampParameters = {
 
 export type AddStampParametersHook = BaseParametersHook<AddStampParameters>;
 
+export function validateAddStampParameters(
+  params: AddStampParameters,
+): boolean {
+  if (!params.stampType) return false;
+  if (params.stampType === "text") {
+    return params.stampText.trim().length > 0;
+  }
+  return params.stampImage !== undefined;
+}
+
 export const useAddStampParameters = (): AddStampParametersHook => {
   return useBaseParameters<AddStampParameters>({
     defaultParameters,
     endpointName: "add-stamp",
-    validateFn: (params): boolean => {
-      if (!params.stampType) return false;
-      if (params.stampType === "text") {
-        return params.stampText.trim().length > 0;
-      }
-      return params.stampImage !== undefined;
-    },
+    validateFn: validateAddStampParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordOperation.ts b/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordOperation.ts
index f6eca6ffbd..d68154c9b1 100644
--- a/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateAddPasswordParameters,
   AddPasswordFullParameters,
   defaultParameters,
 } from "@app/hooks/tools/addPassword/useAddPasswordParameters";
@@ -86,6 +87,7 @@ const fullDefaultParameters: AddPasswordFullParameters = {
 
 // Static configuration object
 export const addPasswordOperationConfig = defineSingleFileTool({
+  validateParams: validateAddPasswordParameters,
   buildFormData: buildAddPasswordFormData,
   toApiParams: addPasswordToApiParams,
   fromApiParams: addPasswordFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordParameters.ts b/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordParameters.ts
index 25e68f7e6a..97f0b41aa8 100644
--- a/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/addPassword/useAddPasswordParameters.ts
@@ -2,6 +2,7 @@ import {
   ChangePermissionsParameters,
   ChangePermissionsParametersHook,
   useChangePermissionsParameters,
+  validateChangePermissionsParameters,
 } from "@app/hooks/tools/changePermissions/useChangePermissionsParameters";
 import { BaseParameters } from "@app/types/parameters";
 import {
@@ -30,6 +31,16 @@ export const defaultParameters: AddPasswordParameters = {
   keyLength: 128,
 };
 
+/**
+ * Whether these parameters are complete enough to run.
+ * Add Password requires nothing of its own, so delegate to Change Permissions.
+ */
+export function validateAddPasswordParameters(
+  params: AddPasswordFullParameters,
+): boolean {
+  return validateChangePermissionsParameters(params.permissions);
+}
+
 export const useAddPasswordParameters = (): AddPasswordParametersHook => {
   const permissions = useChangePermissionsParameters();
 
diff --git a/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkOperation.ts b/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkOperation.ts
index 423110a2d2..b9f23a39bc 100644
--- a/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateAddWatermarkParameters,
   AddWatermarkParameters,
   defaultParameters,
 } from "@app/hooks/tools/addWatermark/useAddWatermarkParameters";
@@ -88,6 +89,7 @@ export const buildAddWatermarkFormData = (
 
 // Static configuration object
 export const addWatermarkOperationConfig = defineSingleFileTool({
+  validateParams: validateAddWatermarkParameters,
   buildFormData: buildAddWatermarkFormData,
   toApiParams: addWatermarkToApiParams,
   fromApiParams: addWatermarkFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkParameters.ts b/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkParameters.ts
index 72f29e840b..83ea860193 100644
--- a/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/addWatermark/useAddWatermarkParameters.ts
@@ -34,19 +34,25 @@ export const defaultParameters: AddWatermarkParameters = {
 export type AddWatermarkParametersHook =
   BaseParametersHook<AddWatermarkParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateAddWatermarkParameters(
+  params: AddWatermarkParameters,
+): boolean {
+  if (!params.watermarkType) {
+    return false;
+  }
+  if (params.watermarkType === "text") {
+    return params.watermarkText.trim().length > 0;
+  } else {
+    return params.watermarkImage !== undefined;
+  }
+}
+
 export const useAddWatermarkParameters = (): AddWatermarkParametersHook => {
   return useBaseParameters({
     defaultParameters: defaultParameters,
     endpointName: "add-watermark",
-    validateFn: (params): boolean => {
-      if (!params.watermarkType) {
-        return false;
-      }
-      if (params.watermarkType === "text") {
-        return params.watermarkText.trim().length > 0;
-      } else {
-        return params.watermarkImage !== undefined;
-      }
-    },
+    validateFn: validateAddWatermarkParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleOperation.ts b/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleOperation.ts
index db0ce22da2..9a52cba20d 100644
--- a/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleOperation.ts
@@ -5,6 +5,7 @@ import {
 } from "@app/hooks/tools/shared/useToolOperation";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateAdjustPageScaleParameters,
   AdjustPageScaleParameters,
   defaultParameters,
 } from "@app/hooks/tools/adjustPageScale/useAdjustPageScaleParameters";
@@ -22,6 +23,7 @@ export {
 };
 
 export const adjustPageScaleOperationConfig = defineSingleFileTool({
+  validateParams: validateAdjustPageScaleParameters,
   buildFormData: buildAdjustPageScaleFormData,
   toApiParams: adjustPageScaleToApiParams,
   fromApiParams: adjustPageScaleFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleParameters.ts b/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleParameters.ts
index b099bcc39b..09b1be0e6f 100644
--- a/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/adjustPageScale/useAdjustPageScaleParameters.ts
@@ -34,13 +34,19 @@ export const defaultParameters: AdjustPageScaleParameters = {
 export type AdjustPageScaleParametersHook =
   BaseParametersHook<AdjustPageScaleParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateAdjustPageScaleParameters(
+  params: AdjustPageScaleParameters,
+): boolean {
+  return params.scaleFactor > 0;
+}
+
 export const useAdjustPageScaleParameters =
   (): AdjustPageScaleParametersHook => {
     return useBaseParameters({
       defaultParameters,
       endpointName: "scale-pages",
-      validateFn: (params) => {
-        return params.scaleFactor > 0;
-      },
+      validateFn: validateAdjustPageScaleParameters,
     });
   };
diff --git a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
index 488a15a8e2..fde4ae1eca 100644
--- a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateOperation.ts
@@ -24,6 +24,7 @@ import {
   AutoRotateParameters,
   AutoRotateDetectionMode,
   defaultParameters,
+  validateAutoRotateParameters,
 } from "@app/hooks/tools/autoRotate/useAutoRotateParameters";
 
 export const AUTO_ROTATE_ENDPOINT =
@@ -169,6 +170,7 @@ export const autoRotateOperationConfig = defineCustomTool<AutoRotateParameters>(
     toApiParams: autoRotateToApiParams,
     fromApiParams: autoRotateFromApiParams,
     defaultParameters,
+    validateParams: validateAutoRotateParameters,
   },
 );
 
diff --git a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts
index fd61395eb1..4c4d318ba6 100644
--- a/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/autoRotate/useAutoRotateParameters.ts
@@ -23,9 +23,15 @@ export const defaultParameters: AutoRotateParameters = {
 
 export type AutoRotateParametersHook = BaseParametersHook<AutoRotateParameters>;
 
+export function validateAutoRotateParameters(
+  params: AutoRotateParameters,
+): boolean {
+  return params.confidenceThreshold >= 0;
+}
+
 export const useAutoRotateParameters = (): AutoRotateParametersHook =>
   useBaseParameters({
     defaultParameters,
     endpointName: "auto-rotate-pdf",
-    validateFn: (params) => params.confidenceThreshold >= 0,
+    validateFn: validateAutoRotateParameters,
   });
diff --git a/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionOperation.ts b/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionOperation.ts
index 7add5d126c..d31e1506cf 100644
--- a/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateBookletImpositionParameters,
   BookletImpositionParameters,
   defaultParameters,
 } from "@app/hooks/tools/bookletImposition/useBookletImpositionParameters";
@@ -60,6 +61,7 @@ export const buildBookletImpositionFormData = (
 
 // Static configuration object
 export const bookletImpositionOperationConfig = defineSingleFileTool({
+  validateParams: validateBookletImpositionParameters,
   buildFormData: buildBookletImpositionFormData,
   toApiParams: bookletImpositionToApiParams,
   fromApiParams: bookletImpositionFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionParameters.ts b/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionParameters.ts
index 1c90b8ba9e..fa0706d255 100644
--- a/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/bookletImposition/useBookletImpositionParameters.ts
@@ -29,13 +29,19 @@ export const defaultParameters: BookletImpositionParameters = {
 export type BookletImpositionParametersHook =
   BaseParametersHook<BookletImpositionParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateBookletImpositionParameters(
+  params: BookletImpositionParameters,
+): boolean {
+  return params.pagesPerSheet === 2;
+}
+
 export const useBookletImpositionParameters =
   (): BookletImpositionParametersHook => {
     return useBaseParameters({
       defaultParameters,
       endpointName: "booklet-imposition",
-      validateFn: (params) => {
-        return params.pagesPerSheet === 2;
-      },
+      validateFn: validateBookletImpositionParameters,
     });
   };
diff --git a/frontend/editor/src/core/hooks/tools/certSign/useCertSignOperation.ts b/frontend/editor/src/core/hooks/tools/certSign/useCertSignOperation.ts
index 01cfa32b1a..22a89cdb0a 100644
--- a/frontend/editor/src/core/hooks/tools/certSign/useCertSignOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/certSign/useCertSignOperation.ts
@@ -11,6 +11,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateCertSignParameters,
   CertSignParameters,
   defaultParameters,
 } from "@app/hooks/tools/certSign/useCertSignParameters";
@@ -137,6 +138,7 @@ export const buildCertSignFormData = (
 
 // Static configuration object
 export const certSignOperationConfig = defineSingleFileTool({
+  validateParams: validateCertSignParameters,
   buildFormData: buildCertSignFormData,
   toApiParams: certSignToApiParams,
   fromApiParams: certSignFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/certSign/useCertSignParameters.ts b/frontend/editor/src/core/hooks/tools/certSign/useCertSignParameters.ts
index f69c98ffd2..a1d50a4e2c 100644
--- a/frontend/editor/src/core/hooks/tools/certSign/useCertSignParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/certSign/useCertSignParameters.ts
@@ -46,39 +46,45 @@ export const defaultParameters: CertSignParameters = {
 
 export type CertSignParametersHook = BaseParametersHook<CertSignParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateCertSignParameters(
+  params: CertSignParameters,
+): boolean {
+  // Auto mode (server certificate) - no additional validation needed
+  if (params.signMode === "AUTO") {
+    return true;
+  }
+
+  // Manual mode - requires certificate type and files
+  if (!params.certType) {
+    return false;
+  }
+
+  // Check for required files based on cert type
+  switch (params.certType) {
+    case "PEM":
+      return !!(params.privateKeyFile && params.certFile);
+    case "PKCS12":
+    case "PFX":
+      return !!params.p12File;
+    case "JKS":
+      return !!params.jksFile;
+    case "WINDOWS_STORE":
+      // Need a chosen certificate from the Windows store.
+      return !!params.alias;
+    case "PKCS11":
+      // Need a driver library and a chosen certificate on the token.
+      return !!(params.pkcs11LibraryPath && params.alias);
+    default:
+      return false;
+  }
+}
+
 export const useCertSignParameters = (): CertSignParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "cert-sign",
-    validateFn: (params) => {
-      // Auto mode (server certificate) - no additional validation needed
-      if (params.signMode === "AUTO") {
-        return true;
-      }
-
-      // Manual mode - requires certificate type and files
-      if (!params.certType) {
-        return false;
-      }
-
-      // Check for required files based on cert type
-      switch (params.certType) {
-        case "PEM":
-          return !!(params.privateKeyFile && params.certFile);
-        case "PKCS12":
-        case "PFX":
-          return !!params.p12File;
-        case "JKS":
-          return !!params.jksFile;
-        case "WINDOWS_STORE":
-          // Need a chosen certificate from the Windows store.
-          return !!params.alias;
-        case "PKCS11":
-          // Need a driver library and a chosen certificate on the token.
-          return !!(params.pkcs11LibraryPath && params.alias);
-        default:
-          return false;
-      }
-    },
+    validateFn: validateCertSignParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataOperation.ts b/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataOperation.ts
index 97a8285194..dffe83d8e9 100644
--- a/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataOperation.ts
@@ -11,6 +11,7 @@ import {
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import { TrappedStatus, CustomMetadataEntry } from "@app/types/metadata";
 import {
+  validateChangeMetadataParameters,
   ChangeMetadataParameters,
   defaultParameters,
 } from "@app/hooks/tools/changeMetadata/useChangeMetadataParameters";
@@ -154,6 +155,7 @@ export const buildChangeMetadataFormData = (
 
 // Static configuration object
 export const changeMetadataOperationConfig = defineSingleFileTool({
+  validateParams: validateChangeMetadataParameters,
   buildFormData: buildChangeMetadataFormData,
   toApiParams: changeMetadataToApiParams,
   fromApiParams: changeMetadataFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataParameters.ts b/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataParameters.ts
index 4966f4b40f..83588e1619 100644
--- a/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/changeMetadata/useChangeMetadataParameters.ts
@@ -90,7 +90,9 @@ export const createCustomMetadataFunctions = (
 };
 
 // Validation function
-const validateParameters = (params: ChangeMetadataParameters): boolean => {
+export const validateChangeMetadataParameters = (
+  params: ChangeMetadataParameters,
+): boolean => {
   // If deleteAll is true, no other validation needed
   if (params.deleteAll) {
     return true;
@@ -127,7 +129,7 @@ export const useChangeMetadataParameters = (): ChangeMetadataParametersHook => {
   const base = useBaseParameters({
     defaultParameters,
     endpointName: "update-metadata",
-    validateFn: validateParameters,
+    validateFn: validateChangeMetadataParameters,
   });
 
   // Use the utility functions with the hook's parameters and updateParameter
diff --git a/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsOperation.ts b/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsOperation.ts
index a2e3eb3d1d..ac5f9a7d96 100644
--- a/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsOperation.ts
@@ -12,6 +12,7 @@ import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
   ChangePermissionsParameters,
   defaultParameters,
+  validateChangePermissionsParameters,
 } from "@app/hooks/tools/changePermissions/useChangePermissionsParameters";
 
 // Change Permissions reuses the Add Password endpoint but sends only the
@@ -72,6 +73,7 @@ export const buildChangePermissionsFormData = (
 
 // Static configuration object
 export const changePermissionsOperationConfig = defineSingleFileTool({
+  validateParams: validateChangePermissionsParameters,
   buildFormData: buildChangePermissionsFormData,
   toApiParams: changePermissionsToApiParams,
   fromApiParams: changePermissionsFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsParameters.ts b/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsParameters.ts
index 30220c13e3..039f7214fe 100644
--- a/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/changePermissions/useChangePermissionsParameters.ts
@@ -29,10 +29,21 @@ export const defaultParameters: ChangePermissionsParameters = {
 export type ChangePermissionsParametersHook =
   BaseParametersHook<ChangePermissionsParameters>;
 
+/**
+ * Whether these permissions are complete enough to run.
+ * Every field is a boolean with a default, so today any combination is a valid request.
+ */
+export function validateChangePermissionsParameters(
+  _params: ChangePermissionsParameters,
+): boolean {
+  return true;
+}
+
 export const useChangePermissionsParameters =
   (): ChangePermissionsParametersHook => {
     return useBaseParameters({
       defaultParameters,
       endpointName: "add-password", // Change Permissions is a fake endpoint for the Add Password tool
+      validateFn: validateChangePermissionsParameters,
     });
   };
diff --git a/frontend/editor/src/core/hooks/tools/compare/useCompareParameters.ts b/frontend/editor/src/core/hooks/tools/compare/useCompareParameters.ts
index 693f537fa6..1634e3fe27 100644
--- a/frontend/editor/src/core/hooks/tools/compare/useCompareParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/compare/useCompareParameters.ts
@@ -26,15 +26,20 @@ export const defaultParameters: CompareParameters = {
 
 export type CompareParametersHook = BaseParametersHook<CompareParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings hook
+ * and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateCompareParameters(params: CompareParameters): boolean {
+  return Boolean(
+    params.baseFileId &&
+    params.comparisonFileId &&
+    params.baseFileId !== params.comparisonFileId,
+  );
+}
+
 export const useCompareParameters = (): CompareParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "compare",
-    validateFn: (params) =>
-      Boolean(
-        params.baseFileId &&
-        params.comparisonFileId &&
-        params.baseFileId !== params.comparisonFileId,
-      ),
+    validateFn: validateCompareParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/compress/useCompressOperation.ts b/frontend/editor/src/core/hooks/tools/compress/useCompressOperation.ts
index b24bb8c6ee..1c21418dbb 100644
--- a/frontend/editor/src/core/hooks/tools/compress/useCompressOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/compress/useCompressOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateCompressParameters,
   CompressParameters,
   defaultParameters,
 } from "@app/hooks/tools/compress/useCompressParameters";
@@ -91,6 +92,7 @@ export const buildCompressFormData = (
 
 // Static configuration object
 export const compressOperationConfig = defineSingleFileTool({
+  validateParams: validateCompressParameters,
   buildFormData: buildCompressFormData,
   toApiParams: compressToApiParams,
   fromApiParams: compressFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/compress/useCompressParameters.ts b/frontend/editor/src/core/hooks/tools/compress/useCompressParameters.ts
index 0500b8c77c..b27a9e97cc 100644
--- a/frontend/editor/src/core/hooks/tools/compress/useCompressParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/compress/useCompressParameters.ts
@@ -32,20 +32,26 @@ export const defaultParameters: CompressParameters = {
 
 export type CompressParametersHook = BaseParametersHook<CompressParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateCompressParameters(
+  params: CompressParameters,
+): boolean {
+  if (params.compressionLevel < 1 || params.compressionLevel > 9) {
+    return false;
+  }
+  // Filesize mode needs a target size; without one the request omits
+  // expectedOutputSize and the backend silently does a quality compression.
+  if (params.compressionMethod === "filesize") {
+    return params.fileSizeValue.trim() !== "";
+  }
+  return true;
+}
+
 export const useCompressParameters = (): CompressParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "compress-pdf",
-    validateFn: (params) => {
-      if (params.compressionLevel < 1 || params.compressionLevel > 9) {
-        return false;
-      }
-      // Filesize mode needs a target size; without one the request omits
-      // expectedOutputSize and the backend silently does a quality compression.
-      if (params.compressionMethod === "filesize") {
-        return params.fileSizeValue.trim() !== "";
-      }
-      return true;
-    },
+    validateFn: validateCompressParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts b/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
index a9488e373d..d6175e2b8b 100644
--- a/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
@@ -2,6 +2,7 @@ import { useCallback, useMemo } from "react";
 import apiClient from "@app/services/apiClient";
 import { useTranslation } from "react-i18next";
 import {
+  validateConvertParameters,
   ConvertParameters,
   defaultParameters,
 } from "@app/hooks/tools/convert/useConvertParameters";
@@ -301,6 +302,7 @@ export const convertProcessor = async (
 
 // Static configuration object
 export const convertOperationConfig = defineCustomTool({
+  validateParams: validateConvertParameters,
   customProcessor: convertProcessor, // Can't use callback version here
   operationType: "convert",
   defaultParameters,
diff --git a/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts b/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts
index c2e3ba2e1a..b1c0151cc8 100644
--- a/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts
@@ -138,7 +138,9 @@ export const defaultParameters: ConvertParameters = {
   smartDetectionType: "none",
 };
 
-const validateParameters = (params: ConvertParameters): boolean => {
+export const validateConvertParameters = (
+  params: ConvertParameters,
+): boolean => {
   const { fromExtension, toExtension } = params;
 
   if (!fromExtension || !toExtension) return false;
@@ -191,7 +193,7 @@ export const useConvertParameters = (): ConvertParametersHook => {
     () => ({
       defaultParameters,
       endpointName: getEndpointName,
-      validateFn: validateParameters,
+      validateFn: validateConvertParameters,
     }),
     [],
   );
diff --git a/frontend/editor/src/core/hooks/tools/crop/useCropOperation.ts b/frontend/editor/src/core/hooks/tools/crop/useCropOperation.ts
index b3a69f9dbe..287980ec03 100644
--- a/frontend/editor/src/core/hooks/tools/crop/useCropOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/crop/useCropOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateCropParameters,
   CropParameters,
   defaultParameters,
 } from "@app/hooks/tools/crop/useCropParameters";
@@ -60,6 +61,7 @@ export const buildCropFormData = (
 
 // Static configuration object
 export const cropOperationConfig = defineSingleFileTool({
+  validateParams: validateCropParameters,
   buildFormData: buildCropFormData,
   toApiParams: cropToApiParams,
   fromApiParams: cropFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/crop/useCropParameters.ts b/frontend/editor/src/core/hooks/tools/crop/useCropParameters.ts
index 920f2cb6c5..cc37421cdf 100644
--- a/frontend/editor/src/core/hooks/tools/crop/useCropParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/crop/useCropParameters.ts
@@ -42,15 +42,19 @@ export type CropParametersHook = BaseParametersHook<CropParameters> & {
   ) => void;
 };
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateCropParameters(params: CropParameters): boolean {
+  const rect = params.cropArea;
+  // Basic validation - coordinates and dimensions must be positive
+  return rect.x >= 0 && rect.y >= 0 && rect.width > 0 && rect.height > 0;
+}
+
 export const useCropParameters = (): CropParametersHook => {
   const baseHook = useBaseParameters({
     defaultParameters,
     endpointName: "crop",
-    validateFn: (params) => {
-      const rect = params.cropArea;
-      // Basic validation - coordinates and dimensions must be positive
-      return rect.x >= 0 && rect.y >= 0 && rect.width > 0 && rect.height > 0;
-    },
+    validateFn: validateCropParameters,
   });
 
   // Get current crop area as CropArea object
diff --git a/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesOperation.ts b/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesOperation.ts
index 0cd5273f0b..67ddb52594 100644
--- a/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesOperation.ts
@@ -7,6 +7,7 @@ import {
 } from "@app/hooks/tools/shared/useToolOperation";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateExtractPagesParameters,
   ExtractPagesParameters,
   defaultParameters,
 } from "@app/hooks/tools/extractPages/useExtractPagesParameters";
@@ -34,6 +35,7 @@ async function resolveSelectionToCsv(
 }
 
 export const extractPagesOperationConfig = defineCustomTool({
+  validateParams: validateExtractPagesParameters,
   operationType: "extractPages",
   customProcessor: async (
     parameters: ExtractPagesParameters,
diff --git a/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesParameters.ts b/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesParameters.ts
index 60bb2b5848..24daacce65 100644
--- a/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/extractPages/useExtractPagesParameters.ts
@@ -15,10 +15,18 @@ export const defaultParameters: ExtractPagesParameters = {
 export type ExtractPagesParametersHook =
   BaseParametersHook<ExtractPagesParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings hook
+ * and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateExtractPagesParameters(
+  params: ExtractPagesParameters,
+): boolean {
+  return (params.pageNumbers || "").trim().length > 0;
+}
+
 export const useExtractPagesParameters = (): ExtractPagesParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "rearrange-pages",
-    validateFn: (p) => (p.pageNumbers || "").trim().length > 0,
+    validateFn: validateExtractPagesParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/ocr/useOCROperation.ts b/frontend/editor/src/core/hooks/tools/ocr/useOCROperation.ts
index f995ef06fc..79b339dda9 100644
--- a/frontend/editor/src/core/hooks/tools/ocr/useOCROperation.ts
+++ b/frontend/editor/src/core/hooks/tools/ocr/useOCROperation.ts
@@ -3,6 +3,7 @@ import { useTranslation } from "react-i18next";
 import {
   OCRParameters,
   defaultParameters,
+  validateOCRParameters,
 } from "@app/hooks/tools/ocr/useOCRParameters";
 import {
   useToolOperation,
@@ -152,6 +153,7 @@ export const ocrResponseHandler = async (
 
 // Static configuration object (without t function dependencies)
 export const ocrOperationConfig = defineSingleFileTool({
+  validateParams: validateOCRParameters,
   buildFormData: buildOCRFormData,
   toApiParams: ocrToApiParams,
   fromApiParams: ocrFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/ocr/useOCRParameters.ts b/frontend/editor/src/core/hooks/tools/ocr/useOCRParameters.ts
index a8bd5abb8d..8f7b0f83ee 100644
--- a/frontend/editor/src/core/hooks/tools/ocr/useOCRParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/ocr/useOCRParameters.ts
@@ -20,13 +20,17 @@ export const defaultParameters: OCRParameters = {
   additionalOptions: [],
 };
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateOCRParameters(params: OCRParameters): boolean {
+  // At minimum, we need at least one language selected
+  return params.languages.length > 0;
+}
+
 export const useOCRParameters = (): OCRParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "ocr-pdf",
-    validateFn: (params) => {
-      // At minimum, we need at least one language selected
-      return params.languages.length > 0;
-    },
+    validateFn: validateOCRParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsOperation.ts b/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsOperation.ts
index f71c237e9d..855d921b06 100644
--- a/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsOperation.ts
@@ -11,6 +11,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateOverlayPdfsParameters,
   type OverlayPdfsParameters,
   defaultParameters,
 } from "@app/hooks/tools/overlayPdfs/useOverlayPdfsParameters";
@@ -61,6 +62,7 @@ const buildFormData = (
 
 export const overlayPdfsOperationConfig: ToolOperationConfig<OverlayPdfsParameters> =
   defineSingleFileTool({
+    validateParams: validateOverlayPdfsParameters,
     buildFormData,
     toApiParams: overlayPdfsToApiParams,
     fromApiParams: overlayPdfsFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsParameters.ts b/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsParameters.ts
index fc88ad4ef0..f2f892f172 100644
--- a/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/overlayPdfs/useOverlayPdfsParameters.ts
@@ -27,24 +27,25 @@ export const defaultParameters: OverlayPdfsParameters = {
 export type OverlayPdfsParametersHook =
   BaseParametersHook<OverlayPdfsParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateOverlayPdfsParameters(
+  params: OverlayPdfsParameters,
+): boolean {
+  if (!params.overlayFiles || params.overlayFiles.length === 0) return false;
+  if (params.overlayMode === "FixedRepeatOverlay") {
+    if (!params.counts || params.counts.length !== params.overlayFiles.length)
+      return false;
+    if (params.counts.some((c) => !Number.isFinite(c) || c <= 0)) return false;
+  }
+  return true;
+}
+
 export const useOverlayPdfsParameters = (): OverlayPdfsParametersHook => {
   const base = useBaseParameters<OverlayPdfsParameters>({
     defaultParameters,
     endpointName: "overlay-pdfs",
-    validateFn: (params) => {
-      if (!params.overlayFiles || params.overlayFiles.length === 0)
-        return false;
-      if (params.overlayMode === "FixedRepeatOverlay") {
-        if (
-          !params.counts ||
-          params.counts.length !== params.overlayFiles.length
-        )
-          return false;
-        if (params.counts.some((c) => !Number.isFinite(c) || c <= 0))
-          return false;
-      }
-      return true;
-    },
+    validateFn: validateOverlayPdfsParameters,
   });
 
   // Overlay files are chosen independently of the base file selection, so they
diff --git a/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutOperation.ts b/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutOperation.ts
index 5de635f965..3f06456702 100644
--- a/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validatePageLayoutParameters,
   PageLayoutParameters,
   defaultParameters,
 } from "@app/hooks/tools/pageLayout/usePageLayoutParameters";
@@ -68,6 +69,7 @@ export const buildPageLayoutFormData = (
   objectToFormData(pageLayoutToApiParams(parameters), { fileInput: file });
 
 export const pageLayoutOperationConfig = defineSingleFileTool({
+  validateParams: validatePageLayoutParameters,
   buildFormData: buildPageLayoutFormData,
   toApiParams: pageLayoutToApiParams,
   fromApiParams: pageLayoutFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutParameters.ts b/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutParameters.ts
index 89ae157ef8..3aeb69288f 100644
--- a/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/pageLayout/usePageLayoutParameters.ts
@@ -40,41 +40,47 @@ export const defaultParameters: PageLayoutParameters = {
 
 export type PageLayoutParametersHook = BaseParametersHook<PageLayoutParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validatePageLayoutParameters(
+  params: PageLayoutParameters,
+): boolean {
+  const cols =
+    params.mode === "DEFAULT"
+      ? Math.ceil(Math.sqrt(params.pagesPerSheet))
+      : params.cols;
+  const rows =
+    params.mode === "DEFAULT"
+      ? Math.ceil(params.pagesPerSheet / cols)
+      : params.rows;
+
+  if (cols <= 0 || rows <= 0) return false;
+
+  const pageWidth = params.orientation === "PORTRAIT" ? 595.28 : 841.89;
+  const pageHeight = params.orientation === "PORTRAIT" ? 841.89 : 595.28;
+
+  const left = params.leftMargin ?? 0;
+  const right = params.rightMargin ?? 0;
+  const top = params.topMargin ?? 0;
+  const bottom = params.bottomMargin ?? 0;
+  const inner = params.innerMargin ?? 0;
+
+  // Reject impossible outer margins first.
+  if (left + right >= pageWidth) return false;
+  if (top + bottom >= pageHeight) return false;
+
+  const cellWidth = (pageWidth - left - right) / cols;
+  const cellHeight = (pageHeight - top - bottom) / rows;
+  const innerWidth = cellWidth - 2 * inner;
+  const innerHeight = cellHeight - 2 * inner;
+
+  return innerWidth > 0 && innerHeight > 0;
+}
+
 export const usePageLayoutParameters = (): PageLayoutParametersHook => {
   return useBaseParameters<PageLayoutParameters>({
     defaultParameters,
     endpointName: "multi-page-layout",
-    validateFn: (params) => {
-      const cols =
-        params.mode === "DEFAULT"
-          ? Math.ceil(Math.sqrt(params.pagesPerSheet))
-          : params.cols;
-      const rows =
-        params.mode === "DEFAULT"
-          ? Math.ceil(params.pagesPerSheet / cols)
-          : params.rows;
-
-      if (cols <= 0 || rows <= 0) return false;
-
-      const pageWidth = params.orientation === "PORTRAIT" ? 595.28 : 841.89;
-      const pageHeight = params.orientation === "PORTRAIT" ? 841.89 : 595.28;
-
-      const left = params.leftMargin ?? 0;
-      const right = params.rightMargin ?? 0;
-      const top = params.topMargin ?? 0;
-      const bottom = params.bottomMargin ?? 0;
-      const inner = params.innerMargin ?? 0;
-
-      // Reject impossible outer margins first.
-      if (left + right >= pageWidth) return false;
-      if (top + bottom >= pageHeight) return false;
-
-      const cellWidth = (pageWidth - left - right) / cols;
-      const cellHeight = (pageHeight - top - bottom) / rows;
-      const innerWidth = cellWidth - 2 * inner;
-      const innerHeight = cellHeight - 2 * inner;
-
-      return innerWidth > 0 && innerHeight > 0;
-    },
+    validateFn: validatePageLayoutParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/redact/useRedactOperation.ts b/frontend/editor/src/core/hooks/tools/redact/useRedactOperation.ts
index 82d45e9e55..fbfa5045e4 100644
--- a/frontend/editor/src/core/hooks/tools/redact/useRedactOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/redact/useRedactOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateRedactParameters,
   RedactParameters,
   defaultParameters,
 } from "@app/hooks/tools/redact/useRedactParameters";
@@ -65,6 +66,7 @@ export const buildRedactFormData = (
 
 // Static configuration object
 export const redactOperationConfig = defineSingleFileTool({
+  validateParams: validateRedactParameters,
   buildFormData: buildRedactFormData,
   toApiParams: redactToApiParams,
   fromApiParams: redactFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/redact/useRedactParameters.ts b/frontend/editor/src/core/hooks/tools/redact/useRedactParameters.ts
index e41b9d2216..048b230567 100644
--- a/frontend/editor/src/core/hooks/tools/redact/useRedactParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/redact/useRedactParameters.ts
@@ -30,6 +30,19 @@ export const defaultParameters: RedactParameters = {
 
 export type RedactParametersHook = BaseParametersHook<RedactParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateRedactParameters(params: RedactParameters): boolean {
+  if (params.mode === "automatic") {
+    return (
+      params.wordsToRedact.length > 0 &&
+      params.wordsToRedact.some((word) => word.trim().length > 0)
+    );
+  }
+  // Manual mode is not yet supported via this flow
+  return false;
+}
+
 export const useRedactParameters = (): RedactParametersHook => {
   return useBaseParameters({
     defaultParameters,
@@ -40,15 +53,6 @@ export const useRedactParameters = (): RedactParametersHook => {
       // Manual redaction handled client-side (validation prevents this path)
       return "";
     },
-    validateFn: (params) => {
-      if (params.mode === "automatic") {
-        return (
-          params.wordsToRedact.length > 0 &&
-          params.wordsToRedact.some((word) => word.trim().length > 0)
-        );
-      }
-      // Manual mode is not yet supported via this flow
-      return false;
-    },
+    validateFn: validateRedactParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksOperation.ts b/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksOperation.ts
index 54e45d43fe..46366508b4 100644
--- a/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksOperation.ts
@@ -11,6 +11,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateRemoveBlanksParameters,
   RemoveBlanksParameters,
   defaultParameters,
 } from "@app/hooks/tools/removeBlanks/useRemoveBlanksParameters";
@@ -41,6 +42,7 @@ export const buildRemoveBlanksFormData = (
   objectToFormData(removeBlanksToApiParams(parameters), { fileInput: file });
 
 export const removeBlanksOperationConfig = defineSingleFileTool({
+  validateParams: validateRemoveBlanksParameters,
   buildFormData: buildRemoveBlanksFormData,
   toApiParams: removeBlanksToApiParams,
   fromApiParams: removeBlanksFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksParameters.ts b/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksParameters.ts
index 2eb5c9bce5..292807128f 100644
--- a/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/removeBlanks/useRemoveBlanksParameters.ts
@@ -19,14 +19,23 @@ export const defaultParameters: RemoveBlanksParameters = {
 export type RemoveBlanksParametersHook =
   BaseParametersHook<RemoveBlanksParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings hook
+ * and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateRemoveBlanksParameters(
+  params: RemoveBlanksParameters,
+): boolean {
+  return (
+    params.threshold >= 0 &&
+    params.threshold <= 255 &&
+    params.whitePercent > 0 &&
+    params.whitePercent <= 100
+  );
+}
+
 export const useRemoveBlanksParameters = (): RemoveBlanksParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "remove-blanks",
-    validateFn: (p) =>
-      p.threshold >= 0 &&
-      p.threshold <= 255 &&
-      p.whitePercent > 0 &&
-      p.whitePercent <= 100,
+    validateFn: validateRemoveBlanksParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesOperation.ts b/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesOperation.ts
index c8a8aca2d0..b44db4d5c4 100644
--- a/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateRemovePagesParameters,
   RemovePagesParameters,
   defaultParameters,
 } from "@app/hooks/tools/removePages/useRemovePagesParameters";
@@ -42,6 +43,7 @@ export const buildRemovePagesFormData = (
   objectToFormData(removePagesToApiParams(parameters), { fileInput: file });
 
 export const removePagesOperationConfig = defineSingleFileTool({
+  validateParams: validateRemovePagesParameters,
   buildFormData: buildRemovePagesFormData,
   toApiParams: removePagesToApiParams,
   fromApiParams: removePagesFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesParameters.ts b/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesParameters.ts
index 97a4953203..3995be8571 100644
--- a/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/removePages/useRemovePagesParameters.ts
@@ -16,10 +16,18 @@ export const defaultParameters: RemovePagesParameters = {
 export type RemovePagesParametersHook =
   BaseParametersHook<RemovePagesParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings hook
+ * and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateRemovePagesParameters(
+  params: RemovePagesParameters,
+): boolean {
+  return validatePageNumbers(params.pageNumbers);
+}
+
 export const useRemovePagesParameters = (): RemovePagesParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "remove-pages",
-    validateFn: (p) => validatePageNumbers(p.pageNumbers),
+    validateFn: validateRemovePagesParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.ts b/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.ts
index 644bbe3b1a..e8448bf518 100644
--- a/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.ts
@@ -5,6 +5,7 @@ import {
 } from "@app/hooks/tools/shared/useToolOperation";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateRemovePasswordParameters,
   RemovePasswordParameters,
   defaultParameters,
 } from "@app/hooks/tools/removePassword/useRemovePasswordParameters";
@@ -20,6 +21,7 @@ export { buildRemovePasswordFormData };
 
 // Static configuration object
 export const removePasswordOperationConfig = defineSingleFileTool({
+  validateParams: validateRemovePasswordParameters,
   buildFormData: buildRemovePasswordFormData,
   toApiParams: removePasswordToApiParams,
   fromApiParams: removePasswordFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordParameters.ts b/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordParameters.ts
index ebb0dd317f..af920a20f2 100644
--- a/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordParameters.ts
@@ -15,12 +15,18 @@ export const defaultParameters: RemovePasswordParameters = {
   password: "",
 };
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateRemovePasswordParameters(
+  params: RemovePasswordParameters,
+): boolean {
+  return params.password !== "";
+}
+
 export const useRemovePasswordParameters = (): RemovePasswordParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "remove-password",
-    validateFn: (params) => {
-      return params.password !== "";
-    },
+    validateFn: validateRemovePasswordParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorOperation.ts b/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorOperation.ts
index 33223afa43..3b54ec8827 100644
--- a/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateReplaceColorParameters,
   ReplaceColorParameters,
   defaultParameters,
 } from "@app/hooks/tools/replaceColor/useReplaceColorParameters";
@@ -63,6 +64,7 @@ export const buildReplaceColorFormData = (
   objectToFormData(replaceColorToApiParams(parameters), { fileInput: file });
 
 export const replaceColorOperationConfig = defineSingleFileTool({
+  validateParams: validateReplaceColorParameters,
   buildFormData: buildReplaceColorFormData,
   toApiParams: replaceColorToApiParams,
   fromApiParams: replaceColorFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorParameters.ts b/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorParameters.ts
index 5304210ce3..9e6ccd2343 100644
--- a/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/replaceColor/useReplaceColorParameters.ts
@@ -29,13 +29,19 @@ export const defaultParameters: ReplaceColorParameters = {
 export type ReplaceColorParametersHook =
   BaseParametersHook<ReplaceColorParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateReplaceColorParameters(
+  _params: ReplaceColorParameters,
+): boolean {
+  // All parameters are always valid as they have defaults
+  return true;
+}
+
 export const useReplaceColorParameters = (): ReplaceColorParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "replace-invert-pdf",
-    validateFn: () => {
-      // All parameters are always valid as they have defaults
-      return true;
-    },
+    validateFn: validateReplaceColorParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/rotate/useRotateOperation.ts b/frontend/editor/src/core/hooks/tools/rotate/useRotateOperation.ts
index f8c6d32216..5f80714f95 100644
--- a/frontend/editor/src/core/hooks/tools/rotate/useRotateOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/rotate/useRotateOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateRotateParameters,
   RotateParameters,
   defaultParameters,
   normalizeAngle,
@@ -44,6 +45,7 @@ export const buildRotateFormData = (
 
 // Static configuration object
 export const rotateOperationConfig = defineSingleFileTool({
+  validateParams: validateRotateParameters,
   buildFormData: buildRotateFormData,
   toApiParams: rotateToApiParams,
   fromApiParams: rotateFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/rotate/useRotateParameters.ts b/frontend/editor/src/core/hooks/tools/rotate/useRotateParameters.ts
index 870fb10ecc..66e5670dda 100644
--- a/frontend/editor/src/core/hooks/tools/rotate/useRotateParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/rotate/useRotateParameters.ts
@@ -25,14 +25,18 @@ export type RotateParametersHook = BaseParametersHook<RotateParameters> & {
   normalizeAngle: (angle: number) => number;
 };
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateRotateParameters(params: RotateParameters): boolean {
+  // Angle must be a multiple of 90
+  return params.angle % 90 === 0;
+}
+
 export const useRotateParameters = (): RotateParametersHook => {
   const baseHook = useBaseParameters({
     defaultParameters,
     endpointName: "rotate-pdf",
-    validateFn: (params) => {
-      // Angle must be a multiple of 90
-      return params.angle % 90 === 0;
-    },
+    validateFn: validateRotateParameters,
   });
 
   // Rotate clockwise by 90 degrees
diff --git a/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeOperation.ts b/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeOperation.ts
index 26a5ca7250..d85af584b3 100644
--- a/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateSanitizeParameters,
   SanitizeParameters,
   defaultParameters,
 } from "@app/hooks/tools/sanitize/useSanitizeParameters";
@@ -56,6 +57,7 @@ export const buildSanitizeFormData = (
 
 // Static configuration object
 export const sanitizeOperationConfig = defineSingleFileTool({
+  validateParams: validateSanitizeParameters,
   buildFormData: buildSanitizeFormData,
   toApiParams: sanitizeToApiParams,
   fromApiParams: sanitizeFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeParameters.ts b/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeParameters.ts
index f2e7ec2193..716bc90d56 100644
--- a/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/sanitize/useSanitizeParameters.ts
@@ -24,12 +24,18 @@ export const defaultParameters: SanitizeParameters = {
 
 export type SanitizeParametersHook = BaseParametersHook<SanitizeParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateSanitizeParameters(
+  params: SanitizeParameters,
+): boolean {
+  return Object.values(params).some((value) => value === true);
+}
+
 export const useSanitizeParameters = (): SanitizeParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "sanitize-pdf",
-    validateFn: (params) => {
-      return Object.values(params).some((value) => value === true);
-    },
+    validateFn: validateSanitizeParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitOperation.ts b/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitOperation.ts
index 26db1414d0..3a4a2e72cb 100644
--- a/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitOperation.ts
@@ -12,6 +12,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateScannerImageSplitParameters,
   ScannerImageSplitParameters,
   defaultParameters,
 } from "@app/hooks/tools/scannerImageSplit/useScannerImageSplitParameters";
@@ -55,6 +56,7 @@ export const buildScannerImageSplitFormData = (
 
 // Static configuration object
 export const scannerImageSplitOperationConfig = defineSingleFileTool({
+  validateParams: validateScannerImageSplitParameters,
   buildFormData: buildScannerImageSplitFormData,
   toApiParams: scannerImageSplitToApiParams,
   fromApiParams: scannerImageSplitFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitParameters.ts b/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitParameters.ts
index 5a40c3034e..cf2abc4fbf 100644
--- a/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/scannerImageSplit/useScannerImageSplitParameters.ts
@@ -23,14 +23,20 @@ export const defaultParameters: ScannerImageSplitParameters = {
 export type ScannerImageSplitParametersHook =
   BaseParametersHook<ScannerImageSplitParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateScannerImageSplitParameters(
+  _params: ScannerImageSplitParameters,
+): boolean {
+  // All parameters are numeric with defaults, validation handled by form
+  return true;
+}
+
 export const useScannerImageSplitParameters =
   (): ScannerImageSplitParametersHook => {
     return useBaseParameters({
       defaultParameters,
       endpointName: "extract-image-scans",
-      validateFn: () => {
-        // All parameters are numeric with defaults, validation handled by form
-        return true;
-      },
+      validateFn: validateScannerImageSplitParameters,
     });
   };
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts
index d567a1dad1..d3874bc840 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts
@@ -137,6 +137,26 @@ export function stepRequiresUpload(step: WorkingToolStep): boolean {
   return Object.values(step.params).some(isFileValue);
 }
 
+/**
+ * True if a step still needs the user to make a choice before it can run - the tool declares some
+ * of its parameters mandatory and this step has not filled them in yet.
+ *
+ * This asks the tool the same question its own Run button asks (`validateParams` is the predicate
+ * the tool passes `useBaseParameters` as `validateFn`), so a step is "configured" in a pipeline
+ * exactly when it would be runnable in the editor. Tools that declare no predicate run happily on
+ * their defaults, and an unknown step is nobody's to judge.
+ */
+export function stepNeedsConfiguring(
+  step: WorkingToolStep,
+  registry: Partial<ToolRegistry>,
+): boolean {
+  if (step.toolId === null) return false;
+  const config = registry[step.toolId]?.operationConfig;
+  if (!config?.validateParams) return false;
+  const merged = { ...(config.defaultParameters ?? {}), ...step.params };
+  return !config.validateParams(merged);
+}
+
 /**
  * The tools that can be run as a backend operation step, sorted by name. Includes only automatable
  * tools whose endpoint resolves from defaults (so they can become a backend step); this drops
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts b/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts
index 321443f463..d4d4ccceec 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts
@@ -79,6 +79,14 @@ interface BaseToolOperationConfig<TParams, TEndpoint extends ToolEndpoint> {
   /** Default parameter values for automation */
   defaultParameters?: TParams;
 
+  /**
+   * Whether these parameters are complete enough to run. The same predicate a tool gives
+   * `useBaseParameters` as its `validateFn`, so the Run button in the editor and anything composing
+   * the tool without rendering it (a pipeline step, an AI-authored plan) agree on what "configured"
+   * means. Absent means the tool runs happily on its defaults.
+   */
+  validateParams?: (params: TParams) => boolean;
+
   /**
    * Typed frontend params -> backend request model. When a tool provides this,
    * it is the spec-checked source of truth for the request body and its
diff --git a/frontend/editor/src/core/hooks/tools/shared/validateParamsCoverage.test.ts b/frontend/editor/src/core/hooks/tools/shared/validateParamsCoverage.test.ts
new file mode 100644
index 0000000000..052d074190
--- /dev/null
+++ b/frontend/editor/src/core/hooks/tools/shared/validateParamsCoverage.test.ts
@@ -0,0 +1,87 @@
+import fs from "fs";
+import path from "path";
+import { describe, expect, test } from "vitest";
+
+/**
+ * A tool declares its mandatory parameters once, as the `validateFn` it hands `useBaseParameters` -
+ * that is what greys out its Run button until the user has chosen. Anything composing the tool
+ * without rendering it (a pipeline step, an AI-authored plan) has no hook to ask, so the same
+ * predicate has to reach the tool's `operationConfig` as `validateParams`.
+ *
+ * Nothing in the type system ties the two together: a tool that gains a `validateFn` and forgets
+ * `validateParams` still compiles, and a pipeline step for it would silently look configured while
+ * the run failed at the backend. So this scans for the drift instead.
+ */
+const SRC = path.resolve(__dirname, "../../../..");
+const TOOL_ROOTS = ["core/hooks/tools", "core/components/tools"];
+
+interface ToolModules {
+  tool: string;
+  paramsSource: string;
+  operationSource: string | null;
+}
+
+const isModule = (file: string, suffix: string) =>
+  file.endsWith(suffix) && !file.endsWith(".test.ts");
+
+/** Source lines, minus whole-line comments - a mention of a field is not a declaration of one. */
+const code = (source: string) =>
+  source
+    .split("\n")
+    .filter((line) => !/^\s*(\/\/|\*|\/\*)/.test(line))
+    .join("\n");
+
+/**
+ * True if the tool constrains its parameters at all. `validateFn: () => true` is not a constraint -
+ * it says "these defaults are always runnable", which is exactly what declaring nothing says.
+ */
+const hasMandatoryParams = (source: string) =>
+  /\bvalidateFn:/.test(source) &&
+  !/\bvalidateFn:\s*\(\)\s*=>\s*true\b/.test(source);
+
+function toolModules(): ToolModules[] {
+  const found: ToolModules[] = [];
+  for (const root of TOOL_ROOTS) {
+    const rootDir = path.join(SRC, root);
+    for (const tool of fs.readdirSync(rootDir)) {
+      const dir = path.join(rootDir, tool);
+      if (!fs.statSync(dir).isDirectory()) continue;
+      const files = fs.readdirSync(dir);
+      const params = files.find((f) => isModule(f, "Parameters.ts"));
+      if (!params) continue;
+      const operation = files.find((f) => isModule(f, "Operation.ts"));
+      found.push({
+        tool,
+        paramsSource: code(fs.readFileSync(path.join(dir, params), "utf8")),
+        operationSource: operation
+          ? code(fs.readFileSync(path.join(dir, operation), "utf8"))
+          : null,
+      });
+    }
+  }
+  return found;
+}
+
+describe("validateParams coverage", () => {
+  const modules = toolModules();
+
+  test("the scan finds the tools at all", () => {
+    // Guards against the sweep passing vacuously because it looked in the wrong place.
+    expect(modules.length).toBeGreaterThan(20);
+  });
+
+  test("every tool with mandatory parameters exposes them to composers", () => {
+    const missing = modules
+      .filter(({ paramsSource }) => hasMandatoryParams(paramsSource))
+      .filter(
+        ({ operationSource }) =>
+          // A tool with no operationConfig is not composable at all, so it has nothing to tell.
+          operationSource !== null &&
+          /OperationConfig\s*[:=]/.test(operationSource) &&
+          !/\bvalidateParams:/.test(operationSource),
+      )
+      .map(({ tool }) => tool);
+
+    expect(missing).toEqual([]);
+  });
+});
diff --git a/frontend/editor/src/core/hooks/tools/sign/useSignOperation.ts b/frontend/editor/src/core/hooks/tools/sign/useSignOperation.ts
index d54be4ecbf..439832e5f8 100644
--- a/frontend/editor/src/core/hooks/tools/sign/useSignOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/sign/useSignOperation.ts
@@ -5,6 +5,7 @@ import {
   defineSingleFileTool,
 } from "@app/hooks/tools/shared/useToolOperation";
 import {
+  validateSignParameters,
   SignParameters,
   DEFAULT_PARAMETERS,
 } from "@app/hooks/tools/sign/useSignParameters";
@@ -51,6 +52,7 @@ export const buildSignFormData = (
 
 // Static configuration object
 export const signOperationConfig = defineSingleFileTool({
+  validateParams: validateSignParameters,
   buildFormData: buildSignFormData,
   operationType: "sign",
   // Signing is applied client-side in the viewer (see createStampTool ->
diff --git a/frontend/editor/src/core/hooks/tools/sign/useSignParameters.ts b/frontend/editor/src/core/hooks/tools/sign/useSignParameters.ts
index d06c18e1e3..b981638806 100644
--- a/frontend/editor/src/core/hooks/tools/sign/useSignParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/sign/useSignParameters.ts
@@ -32,7 +32,7 @@ export const DEFAULT_PARAMETERS: SignParameters = {
   textAlign: "left",
 };
 
-const validateSignParameters = (parameters: SignParameters): boolean => {
+export const validateSignParameters = (parameters: SignParameters): boolean => {
   // Basic validation
   if (!parameters.signatureType) return false;
 
diff --git a/frontend/editor/src/core/hooks/tools/split/useSplitOperation.ts b/frontend/editor/src/core/hooks/tools/split/useSplitOperation.ts
index af14ca2045..832bf51a3b 100644
--- a/frontend/editor/src/core/hooks/tools/split/useSplitOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/split/useSplitOperation.ts
@@ -12,6 +12,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateSplitParameters,
   SplitParameters,
   defaultParameters,
 } from "@app/hooks/tools/split/useSplitParameters";
@@ -172,6 +173,7 @@ export const getSplitEndpoint = (parameters: SplitParameters): SplitEndpoint =>
 
 // Static configuration object
 export const splitOperationConfig = defineSingleFileTool({
+  validateParams: validateSplitParameters,
   buildFormData: buildSplitFormData,
   toApiParams: splitToApiParams,
   fromApiParams: splitFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/split/useSplitParameters.ts b/frontend/editor/src/core/hooks/tools/split/useSplitParameters.ts
index b5e2dc3212..0a2874c947 100644
--- a/frontend/editor/src/core/hooks/tools/split/useSplitParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/split/useSplitParameters.ts
@@ -49,6 +49,35 @@ export const defaultParameters: SplitParameters = {
   rightToLeft: false,
 };
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateSplitParameters(params: SplitParameters): boolean {
+  switch (params.method) {
+    case SPLIT_METHODS.BY_PAGES:
+      return params.pages.trim() !== "";
+    case SPLIT_METHODS.BY_SECTIONS:
+      if (params.hDiv === "" || params.vDiv === "") return false;
+      if (params.splitMode === "CUSTOM") {
+        return (params.customPages || "").trim() !== "";
+      }
+      return true;
+    case SPLIT_METHODS.BY_SIZE:
+    case SPLIT_METHODS.BY_PAGE_COUNT:
+    case SPLIT_METHODS.BY_DOC_COUNT:
+      return params.splitValue.trim() !== "";
+    case SPLIT_METHODS.BY_CHAPTERS:
+      return params.bookmarkLevel !== "";
+    case SPLIT_METHODS.BY_PAGE_DIVIDER:
+      return true; // No required parameters
+    case SPLIT_METHODS.BY_POSTER:
+      return (
+        params.pageSize !== "" && params.xFactor !== "" && params.yFactor !== ""
+      );
+    default:
+      return false;
+  }
+}
+
 export const useSplitParameters = (): SplitParametersHook => {
   return useBaseParameters({
     defaultParameters,
@@ -56,33 +85,6 @@ export const useSplitParameters = (): SplitParametersHook => {
       params.method
         ? ENDPOINTS[params.method]
         : ENDPOINTS[SPLIT_METHODS.BY_PAGES],
-    validateFn: (params) => {
-      switch (params.method) {
-        case SPLIT_METHODS.BY_PAGES:
-          return params.pages.trim() !== "";
-        case SPLIT_METHODS.BY_SECTIONS:
-          if (params.hDiv === "" || params.vDiv === "") return false;
-          if (params.splitMode === "CUSTOM") {
-            return (params.customPages || "").trim() !== "";
-          }
-          return true;
-        case SPLIT_METHODS.BY_SIZE:
-        case SPLIT_METHODS.BY_PAGE_COUNT:
-        case SPLIT_METHODS.BY_DOC_COUNT:
-          return params.splitValue.trim() !== "";
-        case SPLIT_METHODS.BY_CHAPTERS:
-          return params.bookmarkLevel !== "";
-        case SPLIT_METHODS.BY_PAGE_DIVIDER:
-          return true; // No required parameters
-        case SPLIT_METHODS.BY_POSTER:
-          return (
-            params.pageSize !== "" &&
-            params.xFactor !== "" &&
-            params.yFactor !== ""
-          );
-        default:
-          return false;
-      }
-    },
+    validateFn: validateSplitParameters,
   });
 };
diff --git a/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfOperation.ts b/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfOperation.ts
index 0769f37952..2faf90c660 100644
--- a/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfOperation.ts
@@ -10,6 +10,7 @@ import {
 } from "@app/hooks/tools/shared/toolApiMapping";
 import { createStandardErrorHandler } from "@app/utils/toolErrorHandler";
 import {
+  validateTimestampPdfParameters,
   TimestampPdfParameters,
   defaultParameters,
 } from "@app/hooks/tools/timestampPdf/useTimestampPdfParameters";
@@ -36,6 +37,7 @@ export const buildTimestampPdfFormData = (
   objectToFormData(timestampPdfToApiParams(parameters), { fileInput: file });
 
 export const timestampPdfOperationConfig = defineSingleFileTool({
+  validateParams: validateTimestampPdfParameters,
   buildFormData: buildTimestampPdfFormData,
   toApiParams: timestampPdfToApiParams,
   fromApiParams: timestampPdfFromApiParams,
diff --git a/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfParameters.ts b/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfParameters.ts
index 8eebe34e7d..ab99243787 100644
--- a/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/timestampPdf/useTimestampPdfParameters.ts
@@ -26,12 +26,18 @@ export const defaultParameters: TimestampPdfParameters = {
 export type TimestampPdfParametersHook =
   BaseParametersHook<TimestampPdfParameters>;
 
+/** Whether these parameters are complete enough to run. Shared by the tool's settings
+ * hook and its operationConfig, so the editor and the pipeline builder agree. */
+export function validateTimestampPdfParameters(
+  params: TimestampPdfParameters,
+): boolean {
+  return params.tsaUrl.trim().length > 0;
+}
+
 export const useTimestampPdfParameters = (): TimestampPdfParametersHook => {
   return useBaseParameters({
     defaultParameters,
     endpointName: "timestamp-pdf",
-    validateFn: (params) => {
-      return params.tsaUrl.trim().length > 0;
-    },
+    validateFn: validateTimestampPdfParameters,
   });
 };
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.tsx b/frontend/editor/src/portal/views/PipelineBuilder.tsx
index c7a873fe41..4227dbcd11 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.tsx
@@ -26,6 +26,7 @@ import {
   getExecutableTools,
   newWorkingToolStep,
   serializeToolStep,
+  stepNeedsConfiguring,
   stepRequiresUpload,
   type ExecutableTool,
   type WorkingToolStep,
@@ -389,10 +390,15 @@ export function PipelineBuilder() {
   const uploadStepLabels = steps.filter(stepRequiresUpload).map(stepLabel);
   const hasUploadSteps = uploadStepLabels.length > 0;
 
-  // An integration step with no operation or no account chosen would fail at run time with a raw
-  // backend rejection, so block saving on it here where the fix is one click away.
+  // A step still missing a choice - an integration with no operation or account, a tool whose
+  // mandatory parameters are unset - would fail at run time with a raw backend rejection, so block
+  // saving on it here where the fix is one click away.
   const unconfiguredStepLabels = steps
-    .filter((step) => !integrationStepConfigured(step))
+    .filter(
+      (step) =>
+        !integrationStepConfigured(step) ||
+        stepNeedsConfiguring(step, allTools),
+    )
     .map(stepLabel);
   const hasUnconfiguredSteps = unconfiguredStepLabels.length > 0;
 
@@ -867,6 +873,10 @@ export function PipelineBuilder() {
                         <span className="portal-builder__step-note">
                           {t("portal.pipelines.builder.needsUpload")}
                         </span>
+                      ) : stepNeedsConfiguring(step, allTools) ? (
+                        <span className="portal-builder__step-note">
+                          {t("portal.pipelines.builder.needsConfiguring")}
+                        </span>
                       ) : step.support === "unsupported" ? (
                         <span className="portal-builder__step-note">
                           {t("portal.pipelines.builder.usesDefaults")}

From 9d473fb43523b79e1c2ba12a7f5c63ad08b12773 Mon Sep 17 00:00:00 2001
From: EthanHealy01 <80844253+EthanHealy01@users.noreply.github.com>
Date: Fri, 31 Jul 2026 17:46:31 +0100
Subject: [PATCH 015/122] Resolve duplicate CSS selectors reported by Stylelint
 (#7212)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes #7189

Consolidates all 29 `no-duplicate-selectors` violations across 18
stylesheets by merging later duplicate rule blocks into the first
occurrence. Where duplicates had conflicting values, the cascade-winning
(later) value was kept, so computed styles are unchanged.

Also:
- Adds `frontend/stylelint.config.mjs` with only
`no-duplicate-selectors` enabled (Prettier and the theme linter own
everything else).
- Adds a `frontend:lint:css` task, wired into `task frontend:lint` as a
blocking check so regressions can't creep back in.
- Lints all first-party CSS (`editor/**/*.css`, so `public/css` and any
future non-`src` stylesheets are covered too), excluding only the
vendored `cookieconsent.css` and build output via `ignoreFiles`. This
surfaced and fixed 5 additional duplicate selectors in
`cookieconsentCustomisation.css` that weren't in the original issue
report.

Note: `portal/views/Sources.css` goes beyond dedup — the whole
`.portal-sources__connections*` block is deleted as dead code
(unreferenced since the S3 connections redesign in #6965; only
`-actions` in it was an actual duplicate).

🤖 Generated with [Claude Code](https://claude.ai/code)
---
 .taskfiles/frontend.yml                       |  10 +
 .../public/css/cookieconsentCustomisation.css |  58 +-
 .../fileEditor/FileEditor.module.css          |   5 -
 .../core/components/filesPage/FilesPage.css   |  15 +-
 .../core/components/shared/FileSidebar.css    |   9 +-
 .../components/shared/FileSidebarFileItem.css |   9 +-
 .../src/core/components/tools/ToolPanel.css   | 230 +++--
 .../PageNumberPreview.module.css              |   6 +-
 .../components/tools/compare/compareView.css  |  11 +-
 .../validateSignature/reportView/styles.css   |  15 +-
 .../components/viewer/AttachmentSidebar.css   |   5 +-
 .../components/viewer/BookmarkSidebar.css     |   5 +-
 .../core/components/viewer/LayerSidebar.css   |   5 +-
 frontend/editor/src/core/styles/theme.css     |  94 +-
 frontend/editor/src/core/tokens/tokens.css    |  46 +-
 frontend/editor/src/core/ui/Checkbox.css      |  12 +-
 .../src/portal/components/billing/billing.css |  10 +-
 frontend/editor/src/portal/views/Sources.css  |  64 --
 .../editor/src/proprietary/auth/ui/auth.css   |   6 -
 frontend/package-lock.json                    | 929 +++++++++++++++++-
 frontend/package.json                         |   1 +
 frontend/stylelint.config.mjs                 |  13 +
 22 files changed, 1153 insertions(+), 405 deletions(-)
 create mode 100644 frontend/stylelint.config.mjs

diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index 6a3e394f6d..e737f897f2 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -263,6 +263,16 @@ tasks:
       - task: lint:eslint
       - task: lint:dpdm
       - task: lint:colors
+      - task: lint:css
+
+  lint:css:
+    desc: "Lint stylesheets for duplicate selectors"
+    deps: [install]
+    cmds:
+      # Covers the whole editor tree, including the portal/processor layer and
+      # public/css. Vendored CSS and build output are excluded via ignoreFiles
+      # in stylelint.config.mjs.
+      - npx stylelint "editor/**/*.css"
 
   lint:colors:
     desc: "Enforce theme tokens — no hardcoded colours or raw primitives in components"
diff --git a/frontend/editor/public/css/cookieconsentCustomisation.css b/frontend/editor/public/css/cookieconsentCustomisation.css
index 25ec0fd527..78fd3d13d4 100644
--- a/frontend/editor/public/css/cookieconsentCustomisation.css
+++ b/frontend/editor/public/css/cookieconsentCustomisation.css
@@ -130,21 +130,35 @@
   opacity: 0 !important; /* Keep invisible but functional */
 }
 
+/* Track: flat fill in both themes, no outline ring or border */
 #cc-main .toggle__icon {
   display: flex !important;
   align-items: center !important;
   justify-content: flex-start !important;
+  background: var(--cc-toggle-off-bg) !important;
+  border: none !important;
+  box-shadow: none !important;
+  transition: background-color 150ms ease !important;
 }
 
+/* Thumb: small plain circle, vertically centred, no drop shadow */
 #cc-main .toggle__icon-circle {
   display: block !important;
   position: absolute !important;
-  transition: transform 0.25s ease !important;
+  width: 14px !important;
+  height: 14px !important;
+  top: 3px !important;
+  left: 2.5px !important;
+  box-shadow: none !important;
+  transition:
+    transform 150ms ease,
+    background-color 150ms ease !important;
 }
 
+/* Mantine switches have no check/cross glyph inside the thumb */
 #cc-main .toggle__icon-on,
 #cc-main .toggle__icon-off {
-  display: flex !important;
+  display: none !important;
   align-items: center !important;
   justify-content: center !important;
   position: absolute !important;
@@ -152,15 +166,11 @@
   height: 100% !important;
 }
 
-/* Ensure toggles are visible in both themes */
-#cc-main .toggle__icon {
-  background: var(--cc-toggle-off-bg) !important;
-  border: 1px solid var(--cc-toggle-off-bg) !important;
-}
-
+/* Checked track visible in both themes, same flat Mantine look */
 #cc-main .section__toggle:checked ~ .toggle__icon {
   background: var(--cc-toggle-on-bg) !important;
-  border: 1px solid var(--cc-toggle-on-bg) !important;
+  border: none !important;
+  box-shadow: none !important;
 }
 
 /* Ensure toggle text is visible */
@@ -226,18 +236,6 @@
   border-radius: 1000px !important;
 }
 
-/* Track: flat fill, no outline ring or border */
-#cc-main .toggle__icon {
-  border: none !important;
-  box-shadow: none !important;
-  transition: background-color 150ms ease !important;
-}
-
-#cc-main .section__toggle:checked ~ .toggle__icon {
-  border: none !important;
-  box-shadow: none !important;
-}
-
 /* Always-enabled categories = Mantine disabled switch (must out-prioritise
    the !important checked-track rule above) */
 #cc-main .section__toggle:checked:disabled ~ .toggle__icon {
@@ -250,25 +248,7 @@
   cursor: not-allowed !important;
 }
 
-/* Thumb: small plain circle, vertically centred, no drop shadow */
-#cc-main .toggle__icon-circle {
-  width: 14px !important;
-  height: 14px !important;
-  top: 3px !important;
-  left: 2.5px !important;
-  box-shadow: none !important;
-  transition:
-    transform 150ms ease,
-    background-color 150ms ease !important;
-}
-
 /* Checked thumb travel: 38 − 14 − 2.5 = 21.5px end position */
 #cc-main .section__toggle:checked ~ .toggle__icon .toggle__icon-circle {
   transform: translateX(19px) !important;
 }
-
-/* Mantine switches have no check/cross glyph inside the thumb */
-#cc-main .toggle__icon-on,
-#cc-main .toggle__icon-off {
-  display: none !important;
-}
diff --git a/frontend/editor/src/core/components/fileEditor/FileEditor.module.css b/frontend/editor/src/core/components/fileEditor/FileEditor.module.css
index aa89d250e1..c5770f1ea7 100644
--- a/frontend/editor/src/core/components/fileEditor/FileEditor.module.css
+++ b/frontend/editor/src/core/components/fileEditor/FileEditor.module.css
@@ -320,11 +320,6 @@
   color: var(--c-text-muted); /* subtitle text */
 }
 
-/* Light mode selected header stroke override */
-:global([data-mantine-color-scheme="light"]) .card[data-selected="true"] {
-  outline-color: var(--c-primary);
-}
-
 /* =========================
    Add File Card Styles
    ========================= */
diff --git a/frontend/editor/src/core/components/filesPage/FilesPage.css b/frontend/editor/src/core/components/filesPage/FilesPage.css
index dfdb35dcb7..9de4a276aa 100644
--- a/frontend/editor/src/core/components/filesPage/FilesPage.css
+++ b/frontend/editor/src/core/components/filesPage/FilesPage.css
@@ -156,6 +156,11 @@
   flex-shrink: 0;
   flex-wrap: wrap;
   min-height: 3rem;
+  /* Safety net - the content should always fit thanks to the shrink rules on
+     `.files-page-toolbar-actions` below, but if a future addition ever breaks
+     that, this stops the action group bleeding into sibling areas (notably the
+     details panel on the right). */
+  overflow-x: hidden;
 }
 
 .files-page-toolbar-info {
@@ -210,13 +215,6 @@
 .files-page-toolbar-actions .mantine-SegmentedControl-root {
   flex-shrink: 0;
 }
-/* Clip overflow on the toolbar itself as a safety net - the content
-   should always fit thanks to the rules above, but if a future addition
-   ever breaks that, this prevents the action group from bleeding into
-   sibling areas (notably the details panel on the right). */
-.files-page-toolbar {
-  overflow-x: hidden;
-}
 
 .files-page-toolbar-divider {
   width: 1px;
@@ -1319,9 +1317,6 @@
     gap: 0.3rem;
     flex-wrap: nowrap;
   }
-  .files-page-search {
-    flex: 1 1 100%;
-  }
   .files-page-breadcrumbs {
     font-size: 0.85rem;
     flex-wrap: nowrap;
diff --git a/frontend/editor/src/core/components/shared/FileSidebar.css b/frontend/editor/src/core/components/shared/FileSidebar.css
index 5832609680..7dce3d32b9 100644
--- a/frontend/editor/src/core/components/shared/FileSidebar.css
+++ b/frontend/editor/src/core/components/shared/FileSidebar.css
@@ -447,19 +447,14 @@
 }
 
 .file-sidebar-section-header {
+  position: relative;
   display: flex;
   align-items: center;
   justify-content: space-between;
   gap: 8px;
-  padding: 12px 14px 6px 14px;
+  padding: 10px 14px 6px 14px;
   margin: 4px 0 0 0;
-}
-
-.file-sidebar-section-header {
-  position: relative;
   border-top: 1px solid var(--c-border-subtle);
-  padding-top: 10px;
-  margin-top: 4px;
   flex-shrink: 0;
 }
 
diff --git a/frontend/editor/src/core/components/shared/FileSidebarFileItem.css b/frontend/editor/src/core/components/shared/FileSidebarFileItem.css
index 4d742f7be6..d43385ece0 100644
--- a/frontend/editor/src/core/components/shared/FileSidebarFileItem.css
+++ b/frontend/editor/src/core/components/shared/FileSidebarFileItem.css
@@ -56,12 +56,6 @@
   pointer-events: auto;
 }
 
-/* Always reserve space for action buttons so file name truncation dots (...)
-   never bleed under action buttons or overlap their outline/focus box. */
-.file-sidebar-file-info {
-  padding-right: 3.75rem;
-}
-
 .file-sidebar-file-item:hover:not(.selected) {
   background-color: color-mix(in srgb, var(--c-primary) 6%, transparent);
 }
@@ -173,6 +167,9 @@
 .file-sidebar-file-info {
   flex: 1;
   min-width: 0;
+  /* Always reserve space for action buttons so file name truncation dots (...)
+     never bleed under action buttons or overlap their outline/focus box. */
+  padding-right: 3.75rem;
 }
 
 .file-sidebar-file-name {
diff --git a/frontend/editor/src/core/components/tools/ToolPanel.css b/frontend/editor/src/core/components/tools/ToolPanel.css
index 8a2d17f3fa..5ba31e5b86 100644
--- a/frontend/editor/src/core/components/tools/ToolPanel.css
+++ b/frontend/editor/src/core/components/tools/ToolPanel.css
@@ -9,113 +9,6 @@
   flex-shrink: 0;
 }
 
-/* CSS Custom Properties for Fullscreen Mode */
-.tool-panel__fullscreen-surface-inner {
-  --fullscreen-bg-surface-1: color-mix(
-    in srgb,
-    var(--c-bg-raised) 96%,
-    transparent
-  );
-  --fullscreen-bg-surface-2: color-mix(in srgb, var(--c-bg) 90%, transparent);
-  --fullscreen-bg-header: var(--c-bg-raised);
-  --fullscreen-bg-controls-1: var(--c-bg-raised);
-  --fullscreen-bg-controls-2: color-mix(
-    in srgb,
-    var(--c-bg-raised) 95%,
-    var(--c-bg)
-  );
-  --fullscreen-bg-body-1: color-mix(in srgb, var(--c-bg) 86%, transparent);
-  --fullscreen-bg-body-2: color-mix(
-    in srgb,
-    var(--c-bg-raised) 78%,
-    transparent
-  );
-  --fullscreen-bg-group: color-mix(
-    in srgb,
-    var(--c-bg-raised) 82%,
-    transparent
-  );
-  --fullscreen-bg-item: color-mix(in srgb, var(--c-bg-raised) 88%, transparent);
-  --fullscreen-bg-list-item: color-mix(
-    in srgb,
-    var(--c-bg-raised) 86%,
-    transparent
-  );
-  --fullscreen-bg-icon-detailed: color-mix(
-    in srgb,
-    var(--c-surface-sunken) 75%,
-    transparent
-  );
-  --fullscreen-bg-icon-compact: color-mix(
-    in srgb,
-    var(--c-surface-sunken) 70%,
-    transparent
-  );
-  --fullscreen-border-subtle-75: color-mix(
-    in srgb,
-    var(--c-border-subtle) 75%,
-    transparent
-  );
-  --fullscreen-border-subtle-70: color-mix(
-    in srgb,
-    var(--c-border-subtle) 70%,
-    transparent
-  );
-  --fullscreen-border-subtle-65: color-mix(
-    in srgb,
-    var(--c-border-subtle) 65%,
-    transparent
-  );
-  --fullscreen-border-favorites: color-mix(
-    in srgb,
-    var(--special-color-favorites) 25%,
-    var(--c-border-subtle)
-  );
-  --fullscreen-border-recommended: color-mix(
-    in srgb,
-    var(--special-color-recommended) 25%,
-    var(--c-border-subtle)
-  );
-  --fullscreen-shadow-primary: color-mix(
-    in srgb,
-    var(--shadow-color, color-mix(in srgb, black 55%, transparent)) 25%,
-    transparent
-  );
-  --fullscreen-shadow-secondary: color-mix(
-    in srgb,
-    var(--shadow-color, color-mix(in srgb, black 35%, transparent)) 30%,
-    transparent
-  );
-  --fullscreen-shadow-group: color-mix(
-    in srgb,
-    var(--shadow-color, color-mix(in srgb, black 45%, transparent)) 18%,
-    transparent
-  );
-  --fullscreen-accent-hover: color-mix(
-    in srgb,
-    var(--c-text) 20%,
-    var(--c-border-subtle)
-  );
-  --fullscreen-accent-selected: color-mix(
-    in srgb,
-    var(--c-text) 30%,
-    var(--c-border-subtle)
-  );
-  --fullscreen-accent-ring: color-mix(in srgb, var(--c-text) 15%, transparent);
-  --fullscreen-accent-list-bg: color-mix(
-    in srgb,
-    var(--c-text) 8%,
-    var(--c-bg-raised)
-  );
-  --fullscreen-accent-list-border: color-mix(
-    in srgb,
-    var(--c-text) 20%,
-    var(--c-border-subtle)
-  );
-  --fullscreen-text-icon: var(--c-text);
-  --fullscreen-text-icon-compact: var(--c-text);
-}
-
 .tool-panel {
   position: relative;
   transition:
@@ -373,6 +266,110 @@
   --fullscreen-anim-out-duration: var(--fullscreen-anim-duration-out);
   animation: tool-panel-fullscreen-slide-in var(--fullscreen-anim-in-duration)
     ease forwards;
+
+  --fullscreen-bg-surface-1: color-mix(
+    in srgb,
+    var(--c-bg-raised) 96%,
+    transparent
+  );
+  --fullscreen-bg-surface-2: color-mix(in srgb, var(--c-bg) 90%, transparent);
+  --fullscreen-bg-header: var(--c-bg-raised);
+  --fullscreen-bg-controls-1: var(--c-bg-raised);
+  --fullscreen-bg-controls-2: color-mix(
+    in srgb,
+    var(--c-bg-raised) 95%,
+    var(--c-bg)
+  );
+  --fullscreen-bg-body-1: color-mix(in srgb, var(--c-bg) 86%, transparent);
+  --fullscreen-bg-body-2: color-mix(
+    in srgb,
+    var(--c-bg-raised) 78%,
+    transparent
+  );
+  --fullscreen-bg-group: color-mix(
+    in srgb,
+    var(--c-bg-raised) 82%,
+    transparent
+  );
+  --fullscreen-bg-item: color-mix(in srgb, var(--c-bg-raised) 88%, transparent);
+  --fullscreen-bg-list-item: color-mix(
+    in srgb,
+    var(--c-bg-raised) 86%,
+    transparent
+  );
+  --fullscreen-bg-icon-detailed: color-mix(
+    in srgb,
+    var(--c-surface-sunken) 75%,
+    transparent
+  );
+  --fullscreen-bg-icon-compact: color-mix(
+    in srgb,
+    var(--c-surface-sunken) 70%,
+    transparent
+  );
+  --fullscreen-border-subtle-75: color-mix(
+    in srgb,
+    var(--c-border-subtle) 75%,
+    transparent
+  );
+  --fullscreen-border-subtle-70: color-mix(
+    in srgb,
+    var(--c-border-subtle) 70%,
+    transparent
+  );
+  --fullscreen-border-subtle-65: color-mix(
+    in srgb,
+    var(--c-border-subtle) 65%,
+    transparent
+  );
+  --fullscreen-border-favorites: color-mix(
+    in srgb,
+    var(--special-color-favorites) 25%,
+    var(--c-border-subtle)
+  );
+  --fullscreen-border-recommended: color-mix(
+    in srgb,
+    var(--special-color-recommended) 25%,
+    var(--c-border-subtle)
+  );
+  --fullscreen-shadow-primary: color-mix(
+    in srgb,
+    var(--shadow-color, color-mix(in srgb, black 55%, transparent)) 25%,
+    transparent
+  );
+  --fullscreen-shadow-secondary: color-mix(
+    in srgb,
+    var(--shadow-color, color-mix(in srgb, black 35%, transparent)) 30%,
+    transparent
+  );
+  --fullscreen-shadow-group: color-mix(
+    in srgb,
+    var(--shadow-color, color-mix(in srgb, black 45%, transparent)) 18%,
+    transparent
+  );
+  --fullscreen-accent-hover: color-mix(
+    in srgb,
+    var(--c-text) 20%,
+    var(--c-border-subtle)
+  );
+  --fullscreen-accent-selected: color-mix(
+    in srgb,
+    var(--c-text) 30%,
+    var(--c-border-subtle)
+  );
+  --fullscreen-accent-ring: color-mix(in srgb, var(--c-text) 15%, transparent);
+  --fullscreen-accent-list-bg: color-mix(
+    in srgb,
+    var(--c-text) 8%,
+    var(--c-bg-raised)
+  );
+  --fullscreen-accent-list-border: color-mix(
+    in srgb,
+    var(--c-text) 20%,
+    var(--c-border-subtle)
+  );
+  --fullscreen-text-icon: var(--c-text);
+  --fullscreen-text-icon-compact: var(--c-text);
 }
 
 .tool-panel__fullscreen-surface-inner--exiting {
@@ -428,8 +425,15 @@
   flex: 1 1 auto;
 }
 
+/* Used by both FullscreenToolSurface and DetailedToolItem. */
 .tool-panel__fullscreen-body {
-  flex: 1;
+  display: flex;
+  flex-direction: column;
+  gap: 0.4rem;
+  text-align: left;
+  /* Prevent long content (names, descriptions, shortcuts) from overflowing */
+  flex: 1 1 auto;
+  min-width: 0;
   min-height: 0;
   background: transparent;
 }
@@ -639,16 +643,6 @@
   z-index: var(--z-fullscreen-icon-svg);
 }
 
-.tool-panel__fullscreen-body {
-  display: flex;
-  flex-direction: column;
-  gap: 0.4rem;
-  text-align: left;
-  /* Prevent long content (names, descriptions, shortcuts) from overflowing */
-  flex: 1 1 auto;
-  min-width: 0;
-}
-
 .tool-panel__fullscreen-name {
   color: var(--c-text);
   font-size: 13px !important;
diff --git a/frontend/editor/src/core/components/tools/addPageNumbers/PageNumberPreview.module.css b/frontend/editor/src/core/components/tools/addPageNumbers/PageNumberPreview.module.css
index d2ae85a88b..34760f83f2 100644
--- a/frontend/editor/src/core/components/tools/addPageNumbers/PageNumberPreview.module.css
+++ b/frontend/editor/src/core/components/tools/addPageNumbers/PageNumberPreview.module.css
@@ -52,6 +52,7 @@
   user-select: none;
   font-weight: 600;
   position: relative;
+  padding: 8px;
 }
 
 /* Position numbers at edges within each tile with extra top/bottom spacing */
@@ -98,11 +99,6 @@
   padding-bottom: 4px;
 } /* bottom-right */
 
-/* Base padding for all tiles */
-.gridTile {
-  padding: 8px;
-}
-
 .gridTileSelected,
 .gridTileHovered {
   border: 2px solid var(--c-primary);
diff --git a/frontend/editor/src/core/components/tools/compare/compareView.css b/frontend/editor/src/core/components/tools/compare/compareView.css
index aaa703fcc1..c33abfc0ca 100644
--- a/frontend/editor/src/core/components/tools/compare/compareView.css
+++ b/frontend/editor/src/core/components/tools/compare/compareView.css
@@ -1,5 +1,6 @@
 .compare-dropdown-scrollwrap {
   position: relative;
+  margin: 0;
 }
 
 .compare-dropdown-sticky {
@@ -138,20 +139,11 @@
   border-radius: 8px !important; /* match dropdown container radius */
 }
 
-/* Ensure options text uses full width inside wider dropdown */
-.compare-dropdown-option__text {
-  max-width: 100%;
-}
-
 /* Remove default padding inside Mantine options list so sticky header touches edges */
 .compare-changes-dropdown .mantine-Combobox-options {
   padding: 0 !important;
 }
 
-.compare-dropdown-scrollwrap {
-  margin: 0;
-}
-
 /* Ensure search field sits flush and does not overflow */
 .compare-changes-dropdown .mantine-Combobox-search {
   box-sizing: border-box;
@@ -435,6 +427,7 @@
   overflow: hidden;
   text-overflow: ellipsis;
   line-clamp: 3;
+  max-width: 100%;
 }
 
 /* Non-sticky in-flow group headers; sticky handled by floating header */
diff --git a/frontend/editor/src/core/components/tools/validateSignature/reportView/styles.css b/frontend/editor/src/core/components/tools/validateSignature/reportView/styles.css
index b4c9e1c815..e6cb96be3b 100644
--- a/frontend/editor/src/core/components/tools/validateSignature/reportView/styles.css
+++ b/frontend/editor/src/core/components/tools/validateSignature/reportView/styles.css
@@ -8,13 +8,14 @@
   display: flex;
   flex-direction: column;
   gap: 4px;
+  color: var(--c-text) !important;
 }
 
 .field-value {
-  border: 1px solid rgb(var(--pdf-light-box-border));
+  border: 1px solid var(--c-border) !important;
   border-radius: 8px;
   padding: 0.65rem 0.75rem;
-  background-color: rgb(var(--pdf-light-box-bg));
+  background-color: var(--c-surface-raised) !important;
   min-height: 44px;
 }
 
@@ -65,16 +66,6 @@
   overflow-y: auto;
 }
 
-/* Keep field blocks stable colors across themes */
-.field-value {
-  border: 1px solid var(--c-border) !important;
-  background-color: var(--c-surface-raised) !important;
-}
-
-.field-container {
-  color: var(--c-text) !important;
-}
-
 /* Thumbnail preview styles */
 .thumbnail-container {
   width: 140px;
diff --git a/frontend/editor/src/core/components/viewer/AttachmentSidebar.css b/frontend/editor/src/core/components/viewer/AttachmentSidebar.css
index addaca8979..1afd184bc6 100644
--- a/frontend/editor/src/core/components/viewer/AttachmentSidebar.css
+++ b/frontend/editor/src/core/components/viewer/AttachmentSidebar.css
@@ -5,6 +5,7 @@
   display: flex;
   flex-direction: column;
   gap: 0.25rem;
+  animation: attachment-fade-in 0.2s ease;
 }
 
 /* Attachment Items */
@@ -91,10 +92,6 @@
   }
 }
 
-.attachment-list {
-  animation: attachment-fade-in 0.2s ease;
-}
-
 /* Accessibility & Reduced Motion */
 @media (prefers-reduced-motion: reduce) {
   .attachment-item,
diff --git a/frontend/editor/src/core/components/viewer/BookmarkSidebar.css b/frontend/editor/src/core/components/viewer/BookmarkSidebar.css
index 5d8beab4e0..8ec9b1d1db 100644
--- a/frontend/editor/src/core/components/viewer/BookmarkSidebar.css
+++ b/frontend/editor/src/core/components/viewer/BookmarkSidebar.css
@@ -108,6 +108,7 @@
   flex-direction: column;
   gap: 0.25rem;
   margin-top: 0.25rem;
+  animation: bookmark-fade-in 0.2s ease;
 }
 
 /* Smooth expand/collapse animation */
@@ -122,10 +123,6 @@
   }
 }
 
-.bookmark-item__children {
-  animation: bookmark-fade-in 0.2s ease;
-}
-
 /* Accessibility & Reduced Motion */
 @media (prefers-reduced-motion: reduce) {
   .bookmark-item,
diff --git a/frontend/editor/src/core/components/viewer/LayerSidebar.css b/frontend/editor/src/core/components/viewer/LayerSidebar.css
index 305853ec9f..3b4394d3ad 100644
--- a/frontend/editor/src/core/components/viewer/LayerSidebar.css
+++ b/frontend/editor/src/core/components/viewer/LayerSidebar.css
@@ -100,6 +100,7 @@
     color-mix(in srgb, var(--c-border-subtle) 60%, transparent);
   margin-left: 0.875rem;
   padding-left: 0.25rem;
+  animation: layer-fade-in 0.15s ease;
 }
 
 /* Footer with Apply button */
@@ -133,10 +134,6 @@
   }
 }
 
-.layer-item__children {
-  animation: layer-fade-in 0.15s ease;
-}
-
 /* Accessibility & Reduced Motion */
 @media (prefers-reduced-motion: reduce) {
   .layer-item,
diff --git a/frontend/editor/src/core/styles/theme.css b/frontend/editor/src/core/styles/theme.css
index c8a1663b4c..de6c18614e 100644
--- a/frontend/editor/src/core/styles/theme.css
+++ b/frontend/editor/src/core/styles/theme.css
@@ -49,11 +49,9 @@
     var(--p-green-500) 30%,
     transparent
   ); /* Green border for active badge */
-}
 
-/* CSS variables for Tailwind + Mantine integration */
+  /* CSS variables for Tailwind + Mantine integration */
 
-:root {
   /* Global animation durations */
   --fullscreen-anim-duration-in: 0.28s;
   --fullscreen-anim-duration-out: 0.22s;
@@ -284,12 +282,25 @@
   --dropdown-panel-bg: var(--mantine-color-white);
   --dropdown-panel-border: var(--mantine-color-gray-4);
   --dropdown-group-label: var(--mantine-color-gray-6);
-}
 
-/* Onboarding (light mode) */
-:root {
+  /* Onboarding (light mode) */
   --onboarding-step-active: var(--p-gray-800);
   --onboarding-step-inactive: var(--p-gray-300);
+
+  /* PDF Link Overlay (viewer) */
+  --link-hover-bg: color-mix(in srgb, var(--p-blue-500) 10%, transparent);
+  --link-hover-border: color-mix(in srgb, var(--p-blue-500) 32%, transparent);
+  --link-hover-shadow:
+    inset 0 0 0 1px rgba(255, 255, 255, 0.35),
+    0 1px 4px color-mix(in srgb, var(--p-azure-500) 12%, transparent);
+  --link-focus-ring: color-mix(in srgb, var(--p-blue-500) 25%, transparent);
+  --link-toolbar-bg: color-mix(in srgb, var(--p-blue-700) 88%, transparent);
+  --link-toolbar-border: rgba(255, 255, 255, 0.1);
+  --link-toolbar-shadow:
+    0 12px 40px rgba(0, 0, 0, 0.2), 0 4px 12px rgba(0, 0, 0, 0.16),
+    0 0 0 0.5px rgba(255, 255, 255, 0.05);
+
+  --shadow-color: color-mix(in srgb, var(--p-blue-700) 55%, transparent);
 }
 
 [data-mantine-color-scheme="dark"] {
@@ -484,6 +495,19 @@
   --dropdown-panel-bg: var(--mantine-color-dark-7);
   --dropdown-panel-border: var(--mantine-color-dark-4);
   --dropdown-group-label: var(--mantine-color-dark-2);
+
+  /* PDF Link Overlay (viewer) */
+  --link-hover-bg: color-mix(in srgb, var(--p-blue-500) 14%, transparent);
+  --link-hover-border: color-mix(in srgb, var(--p-blue-500) 38%, transparent);
+  --link-hover-shadow:
+    inset 0 0 0 1px rgba(255, 255, 255, 0.1),
+    0 1px 4px color-mix(in srgb, var(--p-c-4f8ef5) 18%, transparent);
+  --link-focus-ring: color-mix(in srgb, var(--p-blue-500) 30%, transparent);
+  --link-toolbar-bg: color-mix(in srgb, var(--p-blue-700) 94%, transparent);
+  --link-toolbar-border: rgba(255, 255, 255, 0.07);
+  --link-toolbar-shadow:
+    0 12px 40px rgba(0, 0, 0, 0.5), 0 4px 12px rgba(0, 0, 0, 0.35),
+    0 0 0 0.5px rgba(255, 255, 255, 0.04);
 }
 
 /* Dropzone drop state styling */
@@ -581,34 +605,6 @@
     border-color 0.2s ease;
 }
 /* ── PDF Link Overlay (viewer) ── */
-:root {
-  --link-hover-bg: color-mix(in srgb, var(--p-blue-500) 10%, transparent);
-  --link-hover-border: color-mix(in srgb, var(--p-blue-500) 32%, transparent);
-  --link-hover-shadow:
-    inset 0 0 0 1px rgba(255, 255, 255, 0.35),
-    0 1px 4px color-mix(in srgb, var(--p-azure-500) 12%, transparent);
-  --link-focus-ring: color-mix(in srgb, var(--p-blue-500) 25%, transparent);
-  --link-toolbar-bg: color-mix(in srgb, var(--p-blue-700) 88%, transparent);
-  --link-toolbar-border: rgba(255, 255, 255, 0.1);
-  --link-toolbar-shadow:
-    0 12px 40px rgba(0, 0, 0, 0.2), 0 4px 12px rgba(0, 0, 0, 0.16),
-    0 0 0 0.5px rgba(255, 255, 255, 0.05);
-}
-
-[data-mantine-color-scheme="dark"] {
-  --link-hover-bg: color-mix(in srgb, var(--p-blue-500) 14%, transparent);
-  --link-hover-border: color-mix(in srgb, var(--p-blue-500) 38%, transparent);
-  --link-hover-shadow:
-    inset 0 0 0 1px rgba(255, 255, 255, 0.1),
-    0 1px 4px color-mix(in srgb, var(--p-c-4f8ef5) 18%, transparent);
-  --link-focus-ring: color-mix(in srgb, var(--p-blue-500) 30%, transparent);
-  --link-toolbar-bg: color-mix(in srgb, var(--p-blue-700) 94%, transparent);
-  --link-toolbar-border: rgba(255, 255, 255, 0.07);
-  --link-toolbar-shadow:
-    0 12px 40px rgba(0, 0, 0, 0.5), 0 4px 12px rgba(0, 0, 0, 0.35),
-    0 0 0 0.5px rgba(255, 255, 255, 0.04);
-}
-
 /* ── Link hit-area ── */
 .pdf-link-overlay {
   position: absolute;
@@ -739,28 +735,13 @@
 
 .pdf-link-toolbar-btn:hover {
   background: rgba(255, 255, 255, 0.08);
-}
-
-.pdf-link-toolbar-btn--delete:hover {
-  background: color-mix(in srgb, var(--p-red-500) 15%, transparent);
-  color: var(--p-art-red-light);
-}
-
-.pdf-link-toolbar-sep {
-  width: 1px;
-  height: 12px;
-  background: rgba(255, 255, 255, 0.12);
-  margin: 0 4px;
+  color: #fff;
 }
 
 .pdf-link-toolbar-btn:last-child {
   border-radius: 0 9px 9px 0;
 }
 
-.pdf-link-toolbar-btn:hover {
-  color: #fff;
-}
-
 .pdf-link-toolbar-btn--delete {
   padding: 0 10px;
 }
@@ -770,25 +751,22 @@
   color: var(--p-red-400);
 }
 
-.pdf-link-toolbar-btn--go:hover {
-  background: rgba(255, 255, 255, 0.08);
-}
-
 .pdf-link-toolbar-btn--go {
   min-width: 0;
 }
 
+.pdf-link-toolbar-btn--go:hover {
+  background: rgba(255, 255, 255, 0.08);
+}
+
 .pdf-link-toolbar-sep {
   width: 1px;
   height: 16px;
   background: rgba(255, 255, 255, 0.1);
+  margin: 0 4px;
   flex-shrink: 0;
 }
 
-:root {
-  --shadow-color: color-mix(in srgb, var(--p-blue-700) 55%, transparent);
-}
-
 [data-theme="dark"] {
   --shadow-color: rgba(0, 0, 0, 0.88);
 }
diff --git a/frontend/editor/src/core/tokens/tokens.css b/frontend/editor/src/core/tokens/tokens.css
index 6f4a5f5204..c36fae35fc 100644
--- a/frontend/editor/src/core/tokens/tokens.css
+++ b/frontend/editor/src/core/tokens/tokens.css
@@ -153,6 +153,27 @@
     var(--p-red-500) 50%,
     var(--p-red-600) 100%
   );
+
+  /* Code palette — theme-aware: a light GitHub-style box in light mode, the
+     dark terminal palette in dark mode. (CodeBlock renders plain text, so only
+     the base colours are load-bearing; the syntax slots are kept for future
+     Shiki. */
+  --code-bg: var(--p-c-f6f8fa);
+  --code-bg-alt: var(--p-c-eef1f4);
+  --code-bg-header: var(--p-c-eaeef2);
+  --code-text: var(--p-c-1f2328);
+  --code-dim: var(--p-c-656d76);
+  --code-muted: var(--p-c-8c959f);
+  --code-keyword: var(--p-c-cf222e);
+  --code-string: var(--p-code-string);
+  --code-number: var(--p-c-0550ae);
+  --code-fn: var(--p-c-8250df);
+  --code-type: var(--p-code-type);
+  --code-property: var(--p-c-0550ae);
+  --code-comment: var(--p-c-6e7781);
+  --code-border: var(--p-c-d0d7de);
+  /* Window-chrome traffic-light dots in the code-block header. */
+  --code-dot: var(--p-c-d0d7de);
 }
 
 [data-theme="dark"] {
@@ -224,31 +245,8 @@
     var(--p-blue-600) 50%,
     var(--p-blue-700) 100%
   );
-}
 
-/* Code palette — theme-aware: a light GitHub-style box in light mode, the dark
-   terminal palette in dark mode. (CodeBlock renders plain text, so only the
-   base colours are load-bearing; the syntax slots are kept for future Shiki. */
-:root,
-[data-theme="light"] {
-  --code-bg: var(--p-c-f6f8fa);
-  --code-bg-alt: var(--p-c-eef1f4);
-  --code-bg-header: var(--p-c-eaeef2);
-  --code-text: var(--p-c-1f2328);
-  --code-dim: var(--p-c-656d76);
-  --code-muted: var(--p-c-8c959f);
-  --code-keyword: var(--p-c-cf222e);
-  --code-string: var(--p-code-string);
-  --code-number: var(--p-c-0550ae);
-  --code-fn: var(--p-c-8250df);
-  --code-type: var(--p-code-type);
-  --code-property: var(--p-c-0550ae);
-  --code-comment: var(--p-c-6e7781);
-  --code-border: var(--p-c-d0d7de);
-  /* Window-chrome traffic-light dots in the code-block header. */
-  --code-dot: var(--p-c-d0d7de);
-}
-[data-theme="dark"] {
+  /* Code palette */
   --code-bg: var(--p-c-0f172a);
   --code-bg-alt: var(--p-c-1e293b);
   --code-bg-header: var(--p-c-1a2332);
diff --git a/frontend/editor/src/core/ui/Checkbox.css b/frontend/editor/src/core/ui/Checkbox.css
index f20358f1aa..44082d51d9 100644
--- a/frontend/editor/src/core/ui/Checkbox.css
+++ b/frontend/editor/src/core/ui/Checkbox.css
@@ -61,18 +61,16 @@
 .sui-check--mixed .sui-check__tick {
   opacity: 0;
 }
-.sui-check--mixed .sui-check__dash {
-  position: absolute;
-  width: 0.5rem;
-  height: 2px;
-  background: var(--color-text-on-accent);
-  border-radius: 1px;
-}
 .sui-check__dash {
   display: none;
 }
 .sui-check--mixed .sui-check__dash {
   display: block;
+  position: absolute;
+  width: 0.5rem;
+  height: 2px;
+  background: var(--color-text-on-accent);
+  border-radius: 1px;
 }
 
 .sui-check__icon {
diff --git a/frontend/editor/src/portal/components/billing/billing.css b/frontend/editor/src/portal/components/billing/billing.css
index cfcbf50697..2f39fa0506 100644
--- a/frontend/editor/src/portal/components/billing/billing.css
+++ b/frontend/editor/src/portal/components/billing/billing.css
@@ -1276,10 +1276,12 @@
   flex-direction: column;
   gap: 1.25rem;
 }
+/* Shared by the calculator and payment steps, kept compact so the payment step
+   fits without scrolling. */
 .portal-billing__bundle-fields {
   display: flex;
   flex-direction: column;
-  gap: 1rem;
+  gap: 0.625rem;
 }
 .portal-billing__bundle-field-label {
   font-size: 0.8125rem;
@@ -1460,12 +1462,6 @@
   padding-top: 0.75rem;
   border-top: 1px solid var(--c-border-subtle);
 }
-/* Recipient fields on the payment step, kept compact so the step fits without scrolling. */
-.portal-billing__bundle-fields {
-  display: flex;
-  flex-direction: column;
-  gap: 0.625rem;
-}
 /* Company name + PO number share a row. */
 .portal-billing__bundle-field-row {
   display: flex;
diff --git a/frontend/editor/src/portal/views/Sources.css b/frontend/editor/src/portal/views/Sources.css
index 5ca4064e65..132c137c89 100644
--- a/frontend/editor/src/portal/views/Sources.css
+++ b/frontend/editor/src/portal/views/Sources.css
@@ -560,70 +560,6 @@
   outline-offset: -1px;
 }
 
-.portal-sources__connections {
-  margin-top: 1.5rem;
-}
-
-.portal-sources__connections-title {
-  font-size: 0.875rem;
-  font-weight: 600;
-  color: var(--c-text-muted);
-  margin: 0 0 0.5rem;
-}
-
-.portal-sources__connections-list {
-  list-style: none;
-  margin: 0;
-  padding: 0;
-  display: flex;
-  flex-direction: column;
-  gap: 0.25rem;
-}
-
-.portal-sources__connections-row {
-  display: flex;
-  align-items: center;
-  gap: 0.75rem;
-  padding: 0.375rem 0;
-  border-bottom: 1px solid var(--color-border-2);
-}
-
-.portal-sources__connections-name {
-  font-weight: 500;
-  color: var(--c-text);
-}
-
-.portal-sources__connections-bucket {
-  color: var(--c-text-subtle);
-  font-size: 0.8125rem;
-}
-
-.portal-sources__connections-actions {
-  margin-left: auto;
-  display: flex;
-  gap: 0.25rem;
-}
-
-.portal-sources__connections-head {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  margin-bottom: 0.5rem;
-}
-
-.portal-sources__connections-sub {
-  color: var(--c-text-subtle);
-  font-size: 0.875rem;
-  margin: 0;
-}
-
-.portal-sources__connections-actions {
-  display: inline-flex;
-  gap: 0.25rem;
-  justify-content: flex-end;
-}
-
 /* ---- Integration picker ---------------------------------------------------------------------
    A searchable grid of what we can connect to. Sized so a full category is visible without
    scrolling on a laptop, and so the search box is the first thing focus lands on. */
diff --git a/frontend/editor/src/proprietary/auth/ui/auth.css b/frontend/editor/src/proprietary/auth/ui/auth.css
index e4337af2d6..9bc175efdd 100644
--- a/frontend/editor/src/proprietary/auth/ui/auth.css
+++ b/frontend/editor/src/proprietary/auth/ui/auth.css
@@ -766,12 +766,6 @@
   min-height: 0;
 }
 
-.oauth-container-fullwidth {
-  display: flex;
-  flex-direction: column;
-  gap: 0.75rem;
-}
-
 .oauth-button-fullwidth {
   width: 100%;
   display: flex;
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 86c998e997..1838e5637d 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -132,6 +132,7 @@
         "puppeteer": "^24.25.0",
         "rollup-plugin-visualizer": "^7.0.1",
         "storybook": "^9.1.20",
+        "stylelint": "^17.14.1",
         "tsx": "^4.22.4",
         "typescript": "npm:@typescript/typescript6@^6.0.2",
         "typescript-eslint": "^8.61.1",
@@ -546,6 +547,67 @@
         "node": ">=18"
       }
     },
+    "node_modules/@cacheable/memory": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cacheable/memory/-/memory-2.2.0.tgz",
+      "integrity": "sha512-CTLKqLItRCEixEAewD3/j9DB3/o96gpTPD4eJ1v+DGOlxZRZncRQkGYqqnAGCscYd6RNeXfGeiuCphsPtqyIfQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@cacheable/utils": "^2.5.0",
+        "@keyv/bigmap": "^1.3.1",
+        "hookified": "^1.15.1",
+        "keyv": "^5.6.0"
+      }
+    },
+    "node_modules/@cacheable/memory/node_modules/@keyv/bigmap": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/@keyv/bigmap/-/bigmap-1.3.1.tgz",
+      "integrity": "sha512-WbzE9sdmQtKy8vrNPa9BRnwZh5UF4s1KTmSK0KUVLo3eff5BlQNNWDnFOouNpKfPKDnms9xynJjsMYjMaT/aFQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hashery": "^1.4.0",
+        "hookified": "^1.15.0"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "peerDependencies": {
+        "keyv": "^5.6.0"
+      }
+    },
+    "node_modules/@cacheable/memory/node_modules/keyv": {
+      "version": "5.6.0",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
+      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@keyv/serialize": "^1.1.1"
+      }
+    },
+    "node_modules/@cacheable/utils": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@cacheable/utils/-/utils-2.5.0.tgz",
+      "integrity": "sha512-buipgOVDkkPXNR5+xBpDw7Zk2n1EvU7qBJCNUcL7rhQ//kfpOXPAvQ511Os0vpLYJ1pZnvudNytkQt2hst3wqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hashery": "^1.5.1",
+        "keyv": "^5.6.0"
+      }
+    },
+    "node_modules/@cacheable/utils/node_modules/keyv": {
+      "version": "5.6.0",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
+      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@keyv/serialize": "^1.1.1"
+      }
+    },
     "node_modules/@cantoo/pdf-lib": {
       "version": "2.6.5",
       "resolved": "https://registry.npmjs.org/@cantoo/pdf-lib/-/pdf-lib-2.6.5.tgz",
@@ -582,9 +644,9 @@
       }
     },
     "node_modules/@csstools/css-calc": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.1.1.tgz",
-      "integrity": "sha512-HJ26Z/vmsZQqs/o3a6bgKslXGFAungXGbinULZO3eMsOyNJHeBBZfup5FiZInOghgoM4Hwnmw+OgbJCNg1wwUQ==",
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.3.0.tgz",
+      "integrity": "sha512-c5ihYsPkdG6JCkU2zTMm4+k6r7RXuGxtWYhu5DHMIiF1FHzrfmHL5so11AoFpUv/tu61xfcmT4AmKoFfMPoqdQ==",
       "dev": true,
       "funding": [
         {
@@ -657,9 +719,9 @@
       }
     },
     "node_modules/@csstools/css-syntax-patches-for-csstree": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.1.tgz",
-      "integrity": "sha512-BvqN0AMWNAnLk9G8jnUT77D+mUbY/H2b3uDTvg2isJkHaOufUE2R3AOwxWo7VBQKT1lOdwdvorddo2B/lk64+w==",
+      "version": "1.1.7",
+      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.7.tgz",
+      "integrity": "sha512-fQ+05118eQS1cofO3aJpB5efgpBZMvIzwr/sbC8kDLVA5XLG8q1kJV5yzrUAI1f7lvhPnm8fgIjzFB8/O/5Dig==",
       "dev": true,
       "funding": [
         {
@@ -701,6 +763,76 @@
         "node": ">=20.19.0"
       }
     },
+    "node_modules/@csstools/media-query-list-parser": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@csstools/media-query-list-parser/-/media-query-list-parser-5.0.0.tgz",
+      "integrity": "sha512-T9lXmZOfnam3eMERPsszjY5NK0jX8RmThmmm99FZ8b7z8yMaFZWKwLWGZuTwdO3ddRY5fy13GmmEYZXB4I98Eg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^4.0.0",
+        "@csstools/css-tokenizer": "^4.0.0"
+      }
+    },
+    "node_modules/@csstools/selector-resolve-nested": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/@csstools/selector-resolve-nested/-/selector-resolve-nested-4.0.1.tgz",
+      "integrity": "sha512-j3vdQu0XwLME5qOTWxm8cnmvsf423R2YL6DbKklCHZwkDm7UdKNu6RPlw4REIJhSlKBICY3B70/7QZdicLqZgg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "postcss-selector-parser": "^7.1.1"
+      }
+    },
+    "node_modules/@csstools/selector-specificity": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-6.0.0.tgz",
+      "integrity": "sha512-4sSgl78OtOXEX/2d++8A83zHNTgwCJMaR24FvsYL7Uf/VS8HZk9PTwR51elTbGqMuwH3szLvvOXEaVnqn0Z3zA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "postcss-selector-parser": "^7.1.1"
+      }
+    },
     "node_modules/@dnd-kit/accessibility": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/@dnd-kit/accessibility/-/accessibility-3.1.1.tgz",
@@ -2894,6 +3026,44 @@
         "url": "https://github.com/sponsors/Brooooooklyn"
       }
     },
+    "node_modules/@nodelib/fs.scandir": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
+      "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.stat": "2.0.5",
+        "run-parallel": "^1.1.9"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.stat": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz",
+      "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.walk": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz",
+      "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.scandir": "2.1.5",
+        "fastq": "^1.6.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
     "node_modules/@open-draft/deferred-promise": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/@open-draft/deferred-promise/-/deferred-promise-3.0.0.tgz",
@@ -3548,6 +3718,19 @@
         "url": "https://github.com/sindresorhus/is?sponsor=1"
       }
     },
+    "node_modules/@sindresorhus/merge-streams": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/merge-streams/-/merge-streams-4.0.0.tgz",
+      "integrity": "sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
@@ -6849,6 +7032,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/astral-regex": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz",
+      "integrity": "sha512-Z7tMw1ytTXt5jqMcOP+OQteU1VuNK9Y02uuJtKQ1Sv69jXQKKg5cibLwGJow8yzZP+eAc18EmLGPal0bp36rvQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/asynckit": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -7410,6 +7603,20 @@
         "node": ">=8"
       }
     },
+    "node_modules/cacheable": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/cacheable/-/cacheable-2.5.0.tgz",
+      "integrity": "sha512-60cyAOytib/OzBw1JNSoSV/boK1AtHryDIjvVBk7XbN4ugfkM3+Sry7fEjNgPMGgOjuaZPAp8ruZ0Cxafwyq9g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@cacheable/memory": "^2.2.0",
+        "@cacheable/utils": "^2.5.0",
+        "hookified": "^1.15.0",
+        "keyv": "^5.6.0",
+        "qified": "^0.10.1"
+      }
+    },
     "node_modules/cacheable-lookup": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/cacheable-lookup/-/cacheable-lookup-7.0.0.tgz",
@@ -7446,6 +7653,16 @@
         "@keyv/serialize": "^1.1.1"
       }
     },
+    "node_modules/cacheable/node_modules/keyv": {
+      "version": "5.6.0",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
+      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@keyv/serialize": "^1.1.1"
+      }
+    },
     "node_modules/call-bind-apply-helpers": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -7814,6 +8031,13 @@
         "simple-swizzle": "^0.2.2"
       }
     },
+    "node_modules/colord": {
+      "version": "2.9.3",
+      "resolved": "https://registry.npmjs.org/colord/-/colord-2.9.3.tgz",
+      "integrity": "sha512-jeC1axXpnb0/2nn/Y1LPuLdgXBLH7aDcHu4KEKfqw3CUhX7ZpfBSlPKyqXE6btIgEzfWtrX3/tyBCaCvXvMkOw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/combined-stream": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
@@ -7941,6 +8165,16 @@
       "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==",
       "license": "MIT"
     },
+    "node_modules/css-functions-list": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/css-functions-list/-/css-functions-list-3.3.3.tgz",
+      "integrity": "sha512-8HFEBPKhOpJPEPu70wJJetjKta86Gw9+CCyCnB3sui2qQfOvRyqBy4IKLKKAwdMpWb2lHXWk9Wb4Z6AmaUT1Pg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/css-tree": {
       "version": "3.2.1",
       "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
@@ -9389,6 +9623,36 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-glob": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz",
+      "integrity": "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.stat": "^2.0.2",
+        "@nodelib/fs.walk": "^1.2.3",
+        "glob-parent": "^5.1.2",
+        "merge2": "^1.3.0",
+        "micromatch": "^4.0.8"
+      },
+      "engines": {
+        "node": ">=8.6.0"
+      }
+    },
+    "node_modules/fast-glob/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/fast-json-stable-stringify": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
@@ -9420,6 +9684,23 @@
         "fast-string-truncated-width": "^3.0.2"
       }
     },
+    "node_modules/fast-uri": {
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
+      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
     "node_modules/fast-wrap-ansi": {
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/fast-wrap-ansi/-/fast-wrap-ansi-0.2.0.tgz",
@@ -9430,6 +9711,26 @@
         "fast-string-width": "^3.0.2"
       }
     },
+    "node_modules/fastest-levenshtein": {
+      "version": "1.0.16",
+      "resolved": "https://registry.npmjs.org/fastest-levenshtein/-/fastest-levenshtein-1.0.16.tgz",
+      "integrity": "sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4.9.1"
+      }
+    },
+    "node_modules/fastq": {
+      "version": "1.20.1",
+      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz",
+      "integrity": "sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "reusify": "^1.0.4"
+      }
+    },
     "node_modules/fd-slicer": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz",
@@ -9838,6 +10139,54 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/global-modules": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/global-modules/-/global-modules-2.0.0.tgz",
+      "integrity": "sha512-NGbfmJBp9x8IxyJSd1P+otYK8vonoJactOogrVfFRIAEY1ukil8RSKDz2Yo7wh1oihl51l/r6W4epkeKJHqL8A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "global-prefix": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/global-prefix": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/global-prefix/-/global-prefix-3.0.0.tgz",
+      "integrity": "sha512-awConJSVCHVGND6x3tmMaKcQvwXLhjdkmomy2W+Goaui8YPgYgXJZewhg3fWC+DlfqqQuWg8AwqjGTD2nAPVWg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ini": "^1.3.5",
+        "kind-of": "^6.0.2",
+        "which": "^1.3.1"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/global-prefix/node_modules/ini": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
+      "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/global-prefix/node_modules/which": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/which/-/which-1.3.1.tgz",
+      "integrity": "sha512-HxJdYWq1MTIQbJ3nw0cqssHoTNU267KlrDuGZ1WYlxDStUtKUhOaJmh112/TZmHxxUfuJqPXSOm7tDyas0OSIQ==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "isexe": "^2.0.0"
+      },
+      "bin": {
+        "which": "bin/which"
+      }
+    },
     "node_modules/globals": {
       "version": "17.5.0",
       "resolved": "https://registry.npmjs.org/globals/-/globals-17.5.0.tgz",
@@ -9850,6 +10199,47 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/globby": {
+      "version": "16.2.2",
+      "resolved": "https://registry.npmjs.org/globby/-/globby-16.2.2.tgz",
+      "integrity": "sha512-NLvV9ubZ6NDsJaOpKPy3cQeJpKi9DcWiyCiFUpJPA0YihRqiE6RWaLUmgNNPr8MgPpLZjnBjSmou7uZBRJv9wA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@sindresorhus/merge-streams": "^4.0.0",
+        "fast-glob": "^3.3.3",
+        "ignore": "^7.0.5",
+        "is-path-inside": "^4.0.0",
+        "slash": "^5.1.0",
+        "unicorn-magic": "^0.4.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/globby/node_modules/unicorn-magic": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/unicorn-magic/-/unicorn-magic-0.4.0.tgz",
+      "integrity": "sha512-wH590V9VNgYH9g3lH9wWjTrUoKsjLF6sGLjhR4sH1LWpLmCOH0Zf7PukhDA8BiS7KHe4oPNkcTHqYkj7SOGUOw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/globjoin": {
+      "version": "0.1.4",
+      "resolved": "https://registry.npmjs.org/globjoin/-/globjoin-0.1.4.tgz",
+      "integrity": "sha512-xYfnw62CKG8nLkZBfWbhWwDw02CHty86jfPcc2cr3ZfeuK9ysoVPPEUxf21bAD/rWAgk52SuBrLJlefNy8mvFg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/globrex": {
       "version": "0.1.2",
       "resolved": "https://registry.npmjs.org/globrex/-/globrex-0.1.2.tgz",
@@ -9957,6 +10347,19 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/hashery": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/hashery/-/hashery-1.5.1.tgz",
+      "integrity": "sha512-iZyKG96/JwPz1N55vj2Ie2vXbhu440zfUfJvSwEqEbeLluk7NnapfGqa7LH0mOsnDxTF85Mx8/dyR6HfqcbmbQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hookified": "^1.15.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
     "node_modules/hasown": {
       "version": "2.0.4",
       "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
@@ -10042,6 +10445,13 @@
       "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==",
       "license": "MIT"
     },
+    "node_modules/hookified": {
+      "version": "1.15.1",
+      "resolved": "https://registry.npmjs.org/hookified/-/hookified-1.15.1.tgz",
+      "integrity": "sha512-MvG/clsADq1GPM2KGo2nyfaWVyn9naPiXrqIe4jYjXNZQt238kWyOGrsyc/DmRAQ+Re6yeo6yX/yoNCG5KAEVg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/hosted-git-info": {
       "version": "2.8.9",
       "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz",
@@ -10094,6 +10504,19 @@
         "void-elements": "3.1.0"
       }
     },
+    "node_modules/html-tags": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/html-tags/-/html-tags-5.1.0.tgz",
+      "integrity": "sha512-n6l5uca7/y5joxZ3LUePhzmBFUJ+U2YWzhMa8XUTecSeSlQiZdF5XAd/Q3/WUl0VsXgUwWi8I7CNIwdI5WN1SQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/html-url-attributes": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/html-url-attributes/-/html-url-attributes-3.0.1.tgz",
@@ -10275,6 +10698,17 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/import-meta-resolve": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/import-meta-resolve/-/import-meta-resolve-4.2.0.tgz",
+      "integrity": "sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/imurmurhash": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
@@ -10533,6 +10967,19 @@
         "node": ">=0.12.0"
       }
     },
+    "node_modules/is-path-inside": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-4.0.0.tgz",
+      "integrity": "sha512-lJJV/5dYS+RcL8uQdBDW9c9uWFLLBNRyFhnAKXw5tVqLlKZ4RMGZKv+YQ/IA3OhD+RpbJa1LLFM1FQPGyIXvOA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-plain-obj": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz",
@@ -10875,6 +11322,16 @@
         "json-buffer": "3.0.1"
       }
     },
+    "node_modules/kind-of": {
+      "version": "6.0.3",
+      "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz",
+      "integrity": "sha512-dcS1ul+9tmeD95T+x28/ehLgd9mENa3LsvDTtzm3vyBEO7RPptvAD+t44WVXaUjTBRcrpFeFlC8WCruUR456hw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/kleur": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz",
@@ -11351,6 +11808,13 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/lodash.truncate": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz",
+      "integrity": "sha512-jttmRe7bRse52OsWIMDLaXxWqRAmtIUccAQ3garviCqJjafXOfNMO0yMfNpdD6zbGaTU0P5Nz7e7gAT6cKmJRw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/log-symbols": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz",
@@ -11485,6 +11949,17 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/mathml-tag-names": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/mathml-tag-names/-/mathml-tag-names-4.0.0.tgz",
+      "integrity": "sha512-aa6AU2Pcx0VP/XWnh8IGL0SYSgQHDT6Ucror2j2mXeFAlN3ahaNs8EZtG1YiticMkSLj3Gt6VPFfZogt7G5iFQ==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/mdast-util-find-and-replace": {
       "version": "3.0.2",
       "resolved": "https://registry.npmjs.org/mdast-util-find-and-replace/-/mdast-util-find-and-replace-3.0.2.tgz",
@@ -11774,6 +12249,29 @@
       "dev": true,
       "license": "CC0-1.0"
     },
+    "node_modules/meow": {
+      "version": "14.1.0",
+      "resolved": "https://registry.npmjs.org/meow/-/meow-14.1.0.tgz",
+      "integrity": "sha512-EDYo6VlmtnumlcBCbh1gLJ//9jvM/ndXHfVXIFrZVr6fGcwTUyCTFNTLCKuY3ffbK8L/+3Mzqnd58RojiZqHVw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/merge2": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
+      "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8"
+      }
+    },
     "node_modules/micromark": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/micromark/-/micromark-4.0.2.tgz",
@@ -12337,6 +12835,20 @@
       ],
       "license": "MIT"
     },
+    "node_modules/micromatch": {
+      "version": "4.0.8",
+      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz",
+      "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "braces": "^3.0.3",
+        "picomatch": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=8.6"
+      }
+    },
     "node_modules/mime-db": {
       "version": "1.52.0",
       "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
@@ -12559,9 +13071,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.15",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.15.tgz",
-      "integrity": "sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==",
+      "version": "3.3.16",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
+      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
       "funding": [
         {
           "type": "github",
@@ -13253,9 +13765,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.15",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.15.tgz",
-      "integrity": "sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==",
+      "version": "8.5.24",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.24.tgz",
+      "integrity": "sha512-8RyVklq0owXUTa4xlpzu4l9AaVKIdQvAcOHZWaMh98HgySsUtxRVf/chRe3dsSLqb6i40BzGRzEUddRaI+9TSw==",
       "funding": [
         {
           "type": "opencollective",
@@ -13272,7 +13784,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.12",
+        "nanoid": "^3.3.16",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
@@ -13471,10 +13983,37 @@
         "postcss": "^8.1.0"
       }
     },
+    "node_modules/postcss-safe-parser": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/postcss-safe-parser/-/postcss-safe-parser-7.0.1.tgz",
+      "integrity": "sha512-0AioNCJZ2DPYz5ABT6bddIqlhgwhpHZ/l65YAYo0BCIn0xiDpsnTHz0gnoTGk0OXZW0JRs+cDwL8u/teRdz+8A==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss-safe-parser"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0"
+      },
+      "peerDependencies": {
+        "postcss": "^8.4.31"
+      }
+    },
     "node_modules/postcss-selector-parser": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.1.tgz",
-      "integrity": "sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==",
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.4.tgz",
+      "integrity": "sha512-HeP7D2wyhkR+XaK6v4W8oRF62Dsz4flyuczALJp61GckGm42u1saSSJ/0auvcBqxs3jMRFEcPK34At/0JBKdOg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -13801,6 +14340,26 @@
         }
       }
     },
+    "node_modules/qified": {
+      "version": "0.10.1",
+      "resolved": "https://registry.npmjs.org/qified/-/qified-0.10.1.tgz",
+      "integrity": "sha512-+Owyggi9IxT1ePKGafcI87ubSmxol6smwJ+RAHDQlx9+9cPwFWDiKFFCPuWhr9ignlGpZ9vDQLw67N4dcTVFEA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hookified": "^2.1.1"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/qified/node_modules/hookified": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/hookified/-/hookified-2.2.0.tgz",
+      "integrity": "sha512-p/LgFzRN5FeoD3DLS6bkUapeye6E4SI6yJs6KetENd18S+FBthqYq2amJUWpt5z0EQwwHemidjY5OqJGEKm5uA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/qrcode.react": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/qrcode.react/-/qrcode.react-4.2.0.tgz",
@@ -13816,6 +14375,27 @@
       "integrity": "sha512-lT5yCqEBgfoMYpf3F2xQRK7zEr1rhIIZuceDK6+xRkJQ4NMbHTwXqk4NkwDwQMNqXgG9r9fyHnzwNVs6zV5KRw==",
       "license": "MIT"
     },
+    "node_modules/queue-microtask": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
+      "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
     "node_modules/quick-lru": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/quick-lru/-/quick-lru-5.1.1.tgz",
@@ -14659,6 +15239,17 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/reusify": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz",
+      "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "iojs": ">=1.0.0",
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/robust-predicates": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",
@@ -14876,6 +15467,30 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/run-parallel": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
+      "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "queue-microtask": "^1.2.2"
+      }
+    },
     "node_modules/rw": {
       "version": "1.3.3",
       "resolved": "https://registry.npmjs.org/rw/-/rw-1.3.3.tgz",
@@ -15042,6 +15657,24 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/slice-ansi": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz",
+      "integrity": "sha512-qMCMfhY040cVHT43K9BFygqYbUPFZKHOg7K73mtTWJRb8pyP3fzf4Ixd5SzdEJQ6MRUg/WBnOLxghZtKKurENQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "astral-regex": "^2.0.0",
+        "is-fullwidth-code-point": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/slice-ansi?sponsor=1"
+      }
+    },
     "node_modules/slide": {
       "version": "1.1.6",
       "resolved": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz",
@@ -15951,6 +16584,132 @@
         "inline-style-parser": "0.2.7"
       }
     },
+    "node_modules/stylelint": {
+      "version": "17.14.1",
+      "resolved": "https://registry.npmjs.org/stylelint/-/stylelint-17.14.1.tgz",
+      "integrity": "sha512-xVQwyiuxALUBNB2fBe0tmNemg9KqLtdj3T64mioFDar79B2cU8LIyz+3KL6LdiHs9NkeNfwxpKSaIVOY8f112g==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/stylelint"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/stylelint"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/css-calc": "^3.2.1",
+        "@csstools/css-parser-algorithms": "^4.0.0",
+        "@csstools/css-syntax-patches-for-csstree": "^1.1.6",
+        "@csstools/css-tokenizer": "^4.0.0",
+        "@csstools/media-query-list-parser": "^5.0.0",
+        "@csstools/selector-resolve-nested": "^4.0.0",
+        "@csstools/selector-specificity": "^6.0.0",
+        "colord": "^2.9.3",
+        "cosmiconfig": "^9.0.2",
+        "css-functions-list": "^3.3.3",
+        "css-tree": "^3.2.1",
+        "debug": "^4.4.3",
+        "fast-glob": "^3.3.3",
+        "fastest-levenshtein": "^1.0.16",
+        "file-entry-cache": "^11.1.5",
+        "global-modules": "^2.0.0",
+        "globby": "^16.2.1",
+        "globjoin": "^0.1.4",
+        "html-tags": "^5.1.0",
+        "ignore": "^7.0.5",
+        "import-meta-resolve": "^4.2.0",
+        "mathml-tag-names": "^4.0.0",
+        "meow": "^14.1.0",
+        "micromatch": "^4.0.8",
+        "normalize-path": "^3.0.0",
+        "picocolors": "^1.1.1",
+        "postcss": "^8.5.16",
+        "postcss-safe-parser": "^7.0.1",
+        "postcss-selector-parser": "^7.1.4",
+        "postcss-value-parser": "^4.2.0",
+        "string-width": "^8.2.1",
+        "supports-hyperlinks": "^4.5.0",
+        "svg-tags": "^1.0.0",
+        "table": "^6.9.0",
+        "write-file-atomic": "^7.0.1"
+      },
+      "bin": {
+        "stylelint": "bin/stylelint.mjs"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
+    "node_modules/stylelint/node_modules/cosmiconfig": {
+      "version": "9.0.2",
+      "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-9.0.2.tgz",
+      "integrity": "sha512-gtTZxTDau1wL7Y7zifc2dd8jHSK/k6BTx/2Xp/BpdlAdnlYWFVt7qhJqgwi7637yRwRQ3qL4ZidbB4I8tA5VOg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "env-paths": "^2.2.1",
+        "import-fresh": "^3.3.0",
+        "js-yaml": "^4.1.0",
+        "parse-json": "^5.2.0"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/d-fischer"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.9.5"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/stylelint/node_modules/file-entry-cache": {
+      "version": "11.1.5",
+      "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-11.1.5.tgz",
+      "integrity": "sha512-+PFTHITI08JIGhnNpGNI8T8inUpgZfk3GNEqfT9R2zZV2iFXg3CvqzSl/uEhs7TSGujYRELEANyDvS8Fj7+S7Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "flat-cache": "^6.1.23"
+      }
+    },
+    "node_modules/stylelint/node_modules/flat-cache": {
+      "version": "6.1.23",
+      "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-6.1.23.tgz",
+      "integrity": "sha512-f++BY9pTk+983xK1FLzlLpmM0i0z+jHmx3QESGkURMXujQZz1k5wzwX6hjnQ8goaD0B+sYnDK1yZ6MTyZfUaqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cacheable": "^2.5.0",
+        "flatted": "^3.4.2",
+        "hookified": "^1.15.0"
+      }
+    },
+    "node_modules/stylelint/node_modules/string-width": {
+      "version": "8.2.2",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-8.2.2.tgz",
+      "integrity": "sha512-GaPUh5gfdrYzqeVNZvUfT23vYYxXzKYidUcnMtJg/3rxRV63EFZy3k6xfKlmfeJD0176lnUV/Usr3XcwSvFzpg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "get-east-asian-width": "^1.5.0",
+        "strip-ansi": "^7.1.2"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/stylis": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/stylis/-/stylis-4.2.0.tgz",
@@ -15993,6 +16752,49 @@
         "node": ">=8"
       }
     },
+    "node_modules/supports-hyperlinks": {
+      "version": "4.5.0",
+      "resolved": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-4.5.0.tgz",
+      "integrity": "sha512-ZW2OvfeCXrNTbLakPUzjQG922EeGCOteFSVoek5DKStTh898wf7zgtuFlzQN8HfZCxC3Eh02yJVrRW51hADf+w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^5.0.1",
+        "supports-color": "^10.2.2"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-hyperlinks?sponsor=1"
+      }
+    },
+    "node_modules/supports-hyperlinks/node_modules/has-flag": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-5.0.1.tgz",
+      "integrity": "sha512-CsNUt5x9LUdx6hnk/E2SZLsDyvfqANZSUq4+D3D8RzDJ2M+HDTIkF60ibS1vHaK55vzgiZw1bEPFG9yH7l33wA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/supports-hyperlinks/node_modules/supports-color": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-10.2.2.tgz",
+      "integrity": "sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-color?sponsor=1"
+      }
+    },
     "node_modules/supports-preserve-symlinks-flag": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
@@ -16043,6 +16845,12 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/svg-tags": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/svg-tags/-/svg-tags-1.0.0.tgz",
+      "integrity": "sha512-ovssysQTa+luh7A5Weu3Rta6FJlFBBbInjOh722LIt6klpU2/HtdUbszju/G4devcvk8PGt7FCLv5wftu3THUA==",
+      "dev": true
+    },
     "node_modules/symbol-tree": {
       "version": "3.2.4",
       "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
@@ -16056,6 +16864,82 @@
       "integrity": "sha512-05PUHKSNE8ou2dwIxTngl4EzcnsCDZGJ/iCLtDflR/SHB/ny14rXc+qU5P4mG9JkusiV7EivzY9Mhm55AzAvCg==",
       "license": "MIT"
     },
+    "node_modules/table": {
+      "version": "6.9.0",
+      "resolved": "https://registry.npmjs.org/table/-/table-6.9.0.tgz",
+      "integrity": "sha512-9kY+CygyYM6j02t5YFHbNz2FN5QmYGv9zAjVp4lCDjlCw7amdckXlEt/bjMhUIfj4ThGRE4gCUH5+yGnNuPo5A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "ajv": "^8.0.1",
+        "lodash.truncate": "^4.4.2",
+        "slice-ansi": "^4.0.0",
+        "string-width": "^4.2.3",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/table/node_modules/ajv": {
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/table/node_modules/emoji-regex": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/table/node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/table/node_modules/string-width": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "emoji-regex": "^8.0.0",
+        "is-fullwidth-code-point": "^3.0.0",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/table/node_modules/strip-ansi": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/tablemark": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/tablemark/-/tablemark-4.1.0.tgz",
@@ -17642,6 +18526,19 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/write-file-atomic": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-7.0.1.tgz",
+      "integrity": "sha512-OTIk8iR8/aCRWBqvxrzxR0hgxWpnYBblY1S5hDWBQfk/VFmJwzmJgQFN3WsoUKHISv2eAwe+PpbUzyL1CKTLXg==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "signal-exit": "^4.0.1"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
     "node_modules/ws": {
       "version": "8.21.0",
       "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index 404366383a..a527bcf06f 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -154,6 +154,7 @@
     "puppeteer": "^24.25.0",
     "rollup-plugin-visualizer": "^7.0.1",
     "storybook": "^9.1.20",
+    "stylelint": "^17.14.1",
     "tsx": "^4.22.4",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
     "typescript-eslint": "^8.61.1",
diff --git a/frontend/stylelint.config.mjs b/frontend/stylelint.config.mjs
new file mode 100644
index 0000000000..2781e78516
--- /dev/null
+++ b/frontend/stylelint.config.mjs
@@ -0,0 +1,13 @@
+// Deliberately minimal: Prettier owns formatting and `task frontend:lint:colors`
+// owns the theme tokens, so this only carries rules that catch real bugs.
+export default {
+  ignoreFiles: [
+    "**/dist/**",
+    "**/src-tauri/**",
+    // Vendored third-party CSS (its first-party customisation file IS linted).
+    "**/editor/public/css/cookieconsent.css",
+  ],
+  rules: {
+    "no-duplicate-selectors": true,
+  },
+};

From d8c6af2e7a11bcaab19dd1c2b163e7b8ba5780df Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 11:55:05 +0100
Subject: [PATCH 016/122] build(deps): bump eclipse-temurin from `b27ca47` to
 `2f1da10` in /docker/base (#6555)

Bumps eclipse-temurin from `b27ca47` to `2f1da10`.


> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 docker/base/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/base/Dockerfile b/docker/base/Dockerfile
index ce35373ef0..4bb8c43dca 100644
--- a/docker/base/Dockerfile
+++ b/docker/base/Dockerfile
@@ -364,7 +364,7 @@ RUN --mount=type=cache,target=/root/.cache/pip,sharing=locked \
 
 
 # Final runtime image - the actual base image
-FROM eclipse-temurin:25-jre-noble@sha256:b27ca47660a8fa837e47a8533b9b1a3a430295cf29ca28d91af4fd121572dc29 AS runtime
+FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS runtime
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 

From 5412dd4d4fd6191f75a679d2713e4880c8f57869 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 11:55:10 +0100
Subject: [PATCH 017/122] build(deps): bump dorny/paths-filter from 4.0.1 to
 4.0.2 (#6987)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from
4.0.1 to 4.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/releases">dorny/paths-filter's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix warning message by <a
href="https://github.com/cgundy"><code>@​cgundy</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282">dorny/paths-filter#282</a></li>
<li>chore: fix GitHub spelling in logs by <a
href="https://github.com/squat"><code>@​squat</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278">dorny/paths-filter#278</a></li>
<li>fix: use rev-parse instead of branch --show-current for older git
compat by <a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/303">dorny/paths-filter#303</a></li>
<li>fix: work around git dubious ownership errors in container jobs by
<a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/317">dorny/paths-filter#317</a></li>
<li>docs: update changelog for v4.0.2 by <a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/318">dorny/paths-filter#318</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cgundy"><code>@​cgundy</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282">dorny/paths-filter#282</a></li>
<li><a href="https://github.com/squat"><code>@​squat</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278">dorny/paths-filter#278</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2">https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md">dorny/paths-filter's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/317">Work
around git dubious ownership errors in container jobs</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/303">Use
rev-parse instead of branch --show-current for older git compat</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/282">Fix
warning message</a></li>
</ul>
<h2>v4.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/255">Support
merge queue</a></li>
</ul>
<h2>v4.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/294">Update
action runtime to node24</a></li>
</ul>
<h2>v3.0.3</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/279">Add
missing predicate-quantifier</a></li>
</ul>
<h2>v3.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/224">Add
config parameter for predicate quantifier</a></li>
</ul>
<h2>v3.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/133">Compare
base and ref when token is empty</a></li>
</ul>
<h2>v3.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/210">Update to
Node.js 20</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/215">Update
all dependencies</a></li>
</ul>
<h2>v2.11.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/167">Update
@​actions/core to v1.10.0 - Fixes warning about deprecated
set-output</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/168">Document
need for pull-requests: read permission</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/164">Updating
to actions/checkout@v3</a></li>
</ul>
<h2>v2.11.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/157">Set
list-files input parameter as not required</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/161">Update
Node.js</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/162">Fix
incorrect handling of Unicode characters in exec()</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/163">Use
Octokit pagination</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/160">Updates
real world links</a></li>
</ul>
<h2>v2.10.2</h2>
<ul>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/91">Fix
getLocalRef() returns wrong ref</a></li>
</ul>
<h2>v2.10.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/85">Improve
robustness of change detection</a></li>
</ul>
<h2>v2.10.0</h2>
<ul>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/82">Add
ref input parameter</a></li>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/83">Fix
change detection in PR when pullRequest.changed_files is
incorrect</a></li>
</ul>
<h2>v2.9.3</h2>
<ul>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/78">Fix
change detection when base is a tag</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dorny/paths-filter/commit/7b450fff21473bca461d4b92ce414b9d0420d706"><code>7b450ff</code></a>
docs: update changelog for v4.0.2 (<a
href="https://redirect.github.com/dorny/paths-filter/issues/318">#318</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/928037783a71f24983ea250c6e55290c1b2de54f"><code>9280377</code></a>
fix: work around git dubious ownership errors in container jobs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/317">#317</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/f3ceefdc7ef57bc2d8560787d4b6c33e44044cec"><code>f3ceefd</code></a>
fix: use rev-parse instead of branch --show-current for older git compat
(<a
href="https://redirect.github.com/dorny/paths-filter/issues/303">#303</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/61f87a10cd2c304679af17bb73ef192addf33c1c"><code>61f87a1</code></a>
chore: fix GitHub spelling in logs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/278">#278</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/b82ff81ffbe6fb4b636bb5b47e37fd8d12b32632"><code>b82ff81</code></a>
fix warning message (<a
href="https://redirect.github.com/dorny/paths-filter/issues/282">#282</a>)</li>
<li>See full diff in <a
href="https://github.com/dorny/paths-filter/compare/fbd0ab8f3e69293af611ebaee6363fc25e6d187d...7b450fff21473bca461d4b92ce414b9d0420d706">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dorny/paths-filter&package-manager=github_actions&previous-version=4.0.1&new-version=4.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Auto-Deploy-V2.yml                | 2 +-
 .github/workflows/build.yml                            | 2 +-
 .github/workflows/frontend-backend-licenses-update.yml | 2 +-
 .github/workflows/testdriver.yml                       | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index a19a616735..7f0d307987 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -320,7 +320,7 @@ jobs:
       # under the exact same access rules as the app preview.
       - name: Detect Storybook changes
         id: sb-changes
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         with:
           list-files: json
           filters: |
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 47170d7f07..fc8346af30 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -55,7 +55,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check for file changes
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: changes
         with:
           filters: .github/config/.files.yaml
diff --git a/.github/workflows/frontend-backend-licenses-update.yml b/.github/workflows/frontend-backend-licenses-update.yml
index fcf6e18d0e..3ba484bf67 100644
--- a/.github/workflows/frontend-backend-licenses-update.yml
+++ b/.github/workflows/frontend-backend-licenses-update.yml
@@ -36,7 +36,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check for file changes
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: changes
         with:
           filters: .github/config/.files.yaml
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index f86191656f..c759cb99a1 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -138,7 +138,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check for file changes
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: changes
         with:
           filters: ".github/config/.files.yaml"

From 47c68af0685d96f083c8b3629f3310720389df6a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 11:55:16 +0100
Subject: [PATCH 018/122] build(deps): bump pyasn1 from 0.6.3 to 0.6.4 in
 /engine in the uv group across 1 directory (#7190)

Bumps the uv group with 1 update in the /engine directory:
[pyasn1](https://github.com/pyasn1/pyasn1).

Updates `pyasn1` from 0.6.3 to 0.6.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pyasn1/pyasn1/releases">pyasn1's
releases</a>.</em></p>
<blockquote>
<h2>Release 0.6.4</h2>
<p>This is a security release.</p>
<ul>
<li>CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time
complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders. A small
crafted substrate encoding many arcs could consume excessive CPU.</li>
<li>CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag IDs
to 20 octets (140 bits). Unbounded tag IDs allowed a crafted substrate
to consume excessive CPU and memory.</li>
<li>CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and CPU
consumption in <code>Real.__float__()</code> for values with large
base-10 exponents.</li>
<li>Pinned PyPI publish GitHub Action to an immutable commit.</li>
</ul>
<p>All changes are noted in the <a
href="https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst">CHANGELOG</a>.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst">pyasn1's
changelog</a>.</em></p>
<blockquote>
<h2>Revision 0.6.4, released 08-07-2026</h2>
<ul>
<li>CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time
complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders.
A small crafted substrate encoding many arcs could consume
excessive CPU. Arcs are now accumulated in linear time; decoded
values are unchanged (thanks for reporting, tynus2)</li>
<li>CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag
IDs to 20 octets (140 bits), matching the OID arc limit introduced
in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume
excessive CPU and memory; longer tag IDs are now rejected with
PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag
(thanks for reporting, mikeappsec)
IDs due to the integer-to-string conversion limit (Python 3.11+)</li>
<li>CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and
CPU consumption in Real.<strong>float</strong>() for values with large
base-10
exponents. Conversion no longer materializes huge intermediate
integers; values too large to represent as a Python float raise
OverflowError promptly, and prettyPrint() renders them as
'<!-- raw HTML omitted -->' as before. Also fixed base-10 mantissa
normalization
to use exact integer arithmetic; mantissas larger than 2**53
could previously lose precision through float division
(thanks for reporting, gvozdila)</li>
<li>Pinned PyPI publish GitHub Action to an immutable commit
[pr <a
href="https://redirect.github.com/pyasn1/pyasn1/issues/113">#113</a>](<a
href="https://redirect.github.com/pyasn1/pyasn1/pull/113">pyasn1/pyasn1#113</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyasn1/pyasn1/commit/72e4803405816c371ed3b2cb4be181c47f038406"><code>72e4803</code></a>
Prepare release 0.6.4</li>
<li><a
href="https://github.com/pyasn1/pyasn1/commit/0c19eeb853731db1c717ff125ea001a1e558332d"><code>0c19eeb</code></a>
Pin PyPI publish action to immutable commit (<a
href="https://redirect.github.com/pyasn1/pyasn1/issues/113">#113</a>)</li>
<li><a
href="https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"><code>45bdb19</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"><code>628e36e</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886"><code>e60c691</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/pyasn1/pyasn1/compare/v0.6.3...v0.6.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyasn1&package-manager=uv&previous-version=0.6.3&new-version=0.6.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 engine/uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/engine/uv.lock b/engine/uv.lock
index 258c38b3de..fd10a81182 100644
--- a/engine/uv.lock
+++ b/engine/uv.lock
@@ -2338,11 +2338,11 @@ memory = [
 
 [[package]]
 name = "pyasn1"
-version = "0.6.3"
+version = "0.6.4"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" },
 ]
 
 [[package]]

From e56525199190bcbb1498df07d3fa4fcb3fdff831 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Sat, 1 Aug 2026 15:28:47 +0200
Subject: [PATCH 019/122] ci(tauri): disable updater signing for unsigned
 builds (#7181)

# Description of Changes

This change updates the Tauri CI workflow to:

- Disable Tauri updater artifact generation for unsigned builds.
- Prevent unsigned builds from requiring updater signing secrets.
- Skip PR artifact comments for fork and Dependabot pull requests, where
the GitHub token is read-only.
- Preserve signed release builds and their updater artifacts unchanged.

The change prevents unsigned CI builds from failing because of
unavailable or invalid updater signing credentials. It also prevents
expected GitHub API permission errors from failing the workflow.

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .github/workflows/tauri-build.yml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index 7daaf18bc1..f7763b3dbe 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -420,7 +420,9 @@ jobs:
           # Linux: build deb+rpm only here (deb-only on minimal smoke builds).
           # AppImage runs in its own continue-on-error step below so its
           # persistent linuxdeploy failure (#6127 onwards) does not tank uploads.
-          args: ${{ matrix.platform == 'ubuntu-22.04' && (inputs.minimal && '--bundles deb' || '--bundles deb,rpm') || matrix.args }}
+          args: >-
+            ${{ matrix.platform == 'ubuntu-22.04' && (inputs.minimal && '--bundles deb' || '--bundles deb,rpm') || matrix.args }}
+            --config '{"bundle":{"createUpdaterArtifacts":false}}'
 
       # AppImage is decoupled so its linuxdeploy run gets a fresh process
       # (rpm scratch state torn down) and its failure can't tank deb/rpm.
@@ -613,7 +615,14 @@ jobs:
   pr-comment:
     needs: build
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' && needs.build.result == 'success'
+    # Fork and Dependabot pull_request runs receive a read-only GITHUB_TOKEN,
+    # so the API cannot create or update PR comments there. The artifacts are
+    # still uploaded and remain available from the Actions run page.
+    if: >-
+      github.event_name == 'pull_request' &&
+      needs.build.result == 'success' &&
+      !github.event.pull_request.head.repo.fork &&
+      github.actor != 'dependabot[bot]'
     permissions:
       pull-requests: write
     steps:

From e76a22e520b5a9f107b9970c9818d2d711dcffe8 Mon Sep 17 00:00:00 2001
From: Wesley <25321235+wesley-ka@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:30:53 +0200
Subject: [PATCH 020/122] fix(desktop): persist default-app banner dismiss and
 fix Linux detection (#7112)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

Fixes the desktop default-PDF banner that kept returning every launch
after users dismissed it or already set Stirling as default
([#6743](https://github.com/Stirling-Tools/Stirling-PDF/issues/6743),
also tracked in
[#5772](https://github.com/Stirling-Tools/Stirling-PDF/issues/5772) /
[#6270](https://github.com/Stirling-Tools/Stirling-PDF/issues/6270)).

### What changed
- **Persist dismiss:** X closes the banner for the current session only;
**Don't remind me again** (muted secondary action) permanently opts out
via the existing `localStorage` helpers that were never wired.
- **Settings:** General → Default PDF editor includes a **Remind me to
set as default** toggle (on by default), shown only when Stirling is not
already the default, so users can undo a permanent dismiss.
- **Linux detection:** Treat `Stirling-PDF.desktop` / case-insensitive
`*stirling*.desktop` as default, and resolve the real desktop file when
setting the association (fixes “already default but banner still
shows”).
- **InfoBanner:** optional secondary button support for the muted “Don't
remind me again” action.

### macOS quirk (Gatekeeper false positive)
One-click **Set Default** on macOS still uses
`LSSetDefaultRoleHandlerForContentType` — Apple has no public
replacement for document UTIs, so this remains the only single-button
path.

After setting Stirling as default, if a user later switches away with
Finder **Open With → Always Open With** on a *quarantined* (typically
downloaded) PDF, macOS can show:

> Apple could not verify “…pdf” is free of malware…

That is a known Gatekeeper/`LSRiskCategoryHasRedirectedBinding`
behaviour ([Apple Developer Forums
thread](https://developer.apple.com/forums/thread/795994)), not malware
and not something we can suppress from the app. **Safe way to switch
away:** select a PDF → File → Get Info → Open With → choose the app →
**Change All** (avoid Open With → Always on downloaded PDFs).

Closes #6743

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [x] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)
- New strings added in **en-US only** (`defaultApp.prompt.dontRemind`,
`settings.general.defaultPdfEditorRemind` / `RemindDescription`); other
locales handled separately.

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)
- Banner: session dismiss (X) + muted **Don't remind me again**;
settings toggle only when not already default.

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

#### Test runs
- `task pre-commit:fix` (including toml-sort / locale hygiene)
- `task backend:test` — passed (incl. JaCoCo coverage targets)
- `task frontend:check` — lint, typecheck, format, tests
- `task frontend:test` — **166 files / 1353 tests passed**
- `task engine:check` — typecheck, lint, format; **335 pytest tests
passed**
- Re-ran `unusedTranslations` / `missingTranslations` after new en-US
keys — passed
- Manual: permanent dismiss persists across relaunch; settings remind
toggle restores banner; Linux desktop-file name mismatch addressed in
Rust

Co-authored-by: Wesley <wesley@awka.dev>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 .../public/locales/en-US/translation.toml     |   3 +
 .../src-tauri/src/commands/default_app.rs     |  64 +++++++++--
 .../src/core/components/shared/InfoBanner.tsx |  25 ++++-
 .../components/shared/DefaultAppBanner.tsx    |  23 ++--
 .../configSections/DefaultAppSettings.tsx     | 105 ++++++++++++------
 .../editor/src/desktop/hooks/useDefaultApp.ts |  24 ++++
 .../src/desktop/services/defaultAppService.ts |  32 ++++--
 7 files changed, 220 insertions(+), 56 deletions(-)

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 3cfc28cd09..3b94a878ac 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -3525,6 +3525,7 @@ message = "Failed to set default PDF handler"
 title = "Error"
 
 [defaultApp.prompt]
+dontRemind = "Don't remind me again"
 message = "Make Stirling PDF your default application for opening PDF files."
 
 [defaultApp.settingsOpened]
@@ -9641,6 +9642,8 @@ defaultPdfEditor = "Default PDF editor"
 defaultPdfEditorActive = "Stirling PDF is your default PDF editor"
 defaultPdfEditorChecking = "Checking..."
 defaultPdfEditorInactive = "Another application is set as default"
+defaultPdfEditorRemind = "Remind me to set as default"
+defaultPdfEditorRemindDescription = "Show a banner when Stirling PDF is not your default PDF application."
 defaultPdfEditorSet = "Already Default"
 defaultStartupView = "Default view on launch"
 defaultStartupViewDescription = "Choose which view is active when the app starts"
diff --git a/frontend/editor/src-tauri/src/commands/default_app.rs b/frontend/editor/src-tauri/src/commands/default_app.rs
index 41c59fdd09..1ca4e0c004 100644
--- a/frontend/editor/src-tauri/src/commands/default_app.rs
+++ b/frontend/editor/src-tauri/src/commands/default_app.rs
@@ -171,7 +171,11 @@ fn set_default_macos() -> Result<String, String> {
     use core_foundation::string::{CFString, CFStringRef};
     use std::os::raw::c_int;
 
-    // Define the LSSetDefaultRoleHandlerForContentType function
+    // LSSetDefaultRoleHandlerForContentType is deprecated and has no public
+    // replacement for document UTIs (unlike default browser/mail). It is still
+    // the only one-click option. Prefer Finder Get Info → Change All when
+    // switching *away* from Stirling — Open With → Always Open With can trip a
+    // Gatekeeper false positive (LSRiskCategoryHasRedirectedBinding).
     #[link(name = "CoreServices", kind = "framework")]
     extern "C" {
         fn LSSetDefaultRoleHandlerForContentType(
@@ -184,7 +188,6 @@ fn set_default_macos() -> Result<String, String> {
     const K_LS_ROLES_ALL: c_int = 0xFFFFFFFF_u32 as c_int;
 
     unsafe {
-        // Set our app as the default handler for PDF files
         let pdf_uti = CFString::new("com.adobe.pdf");
         let our_bundle_id = CFString::new("stirling.pdf.dev");
 
@@ -195,7 +198,7 @@ fn set_default_macos() -> Result<String, String> {
         );
 
         if status == 0 {
-            add_log("Successfully triggered default app dialog".to_string());
+            add_log("Successfully set as default PDF handler on macOS".to_string());
             Ok("set_successfully".to_string())
         } else {
             let error_msg = format!("LaunchServices returned status: {}", status);
@@ -209,6 +212,48 @@ fn set_default_macos() -> Result<String, String> {
 // Linux Implementation
 // ============================================================================
 
+/// Installed desktop entry names vary by packaging (template vs binary name).
+#[cfg(target_os = "linux")]
+const LINUX_DESKTOP_CANDIDATES: &[&str] =
+    &["Stirling-PDF.desktop", "stirling-pdf.desktop"];
+
+#[cfg(target_os = "linux")]
+fn is_stirling_desktop_handler(handler: &str) -> bool {
+    let name = handler.trim().to_lowercase();
+    name.contains("stirling") && name.ends_with(".desktop")
+}
+
+#[cfg(target_os = "linux")]
+fn linux_desktop_file_exists(name: &str) -> bool {
+    use std::path::PathBuf;
+
+    let mut dirs = Vec::new();
+    if let Ok(home) = std::env::var("HOME") {
+        dirs.push(PathBuf::from(home).join(".local/share/applications"));
+    }
+    if let Ok(xdg_data_dirs) = std::env::var("XDG_DATA_DIRS") {
+        for dir in xdg_data_dirs.split(':').filter(|d| !d.is_empty()) {
+            dirs.push(PathBuf::from(dir).join("applications"));
+        }
+    } else {
+        dirs.push(PathBuf::from("/usr/local/share/applications"));
+        dirs.push(PathBuf::from("/usr/share/applications"));
+    }
+
+    dirs.iter().any(|dir| dir.join(name).is_file())
+}
+
+#[cfg(target_os = "linux")]
+fn resolve_linux_desktop_file() -> String {
+    for name in LINUX_DESKTOP_CANDIDATES {
+        if linux_desktop_file_exists(name) {
+            return (*name).to_string();
+        }
+    }
+    // Matches tauri.conf.json desktopTemplate
+    "stirling-pdf.desktop".to_string()
+}
+
 #[cfg(target_os = "linux")]
 fn check_default_linux() -> Result<bool, String> {
     use std::process::Command;
@@ -222,18 +267,23 @@ fn check_default_linux() -> Result<bool, String> {
     let handler = String::from_utf8_lossy(&output.stdout);
     add_log(format!("Linux PDF handler: {}", handler.trim()));
 
-    // Check if it's our .desktop file
-    let is_default = handler.trim() == "stirling-pdf.desktop";
-    Ok(is_default)
+    // Accept stirling-pdf.desktop and Stirling-PDF.desktop (and similar)
+    Ok(is_stirling_desktop_handler(&handler))
 }
 
 #[cfg(target_os = "linux")]
 fn set_default_linux() -> Result<String, String> {
     use std::process::Command;
 
+    let desktop_file = resolve_linux_desktop_file();
+    add_log(format!(
+        "Setting Linux default PDF handler to {}",
+        desktop_file
+    ));
+
     // Use xdg-mime to set the default application for PDF files
     let result = Command::new("xdg-mime")
-        .args(["default", "stirling-pdf.desktop", "application/pdf"])
+        .args(["default", &desktop_file, "application/pdf"])
         .output()
         .map_err(|e| format!("Failed to set default app: {}", e))?;
 
diff --git a/frontend/editor/src/core/components/shared/InfoBanner.tsx b/frontend/editor/src/core/components/shared/InfoBanner.tsx
index 6572022299..a081f60bbe 100644
--- a/frontend/editor/src/core/components/shared/InfoBanner.tsx
+++ b/frontend/editor/src/core/components/shared/InfoBanner.tsx
@@ -78,6 +78,9 @@ interface InfoBannerProps {
   buttonText?: string;
   buttonIcon?: string;
   onButtonClick?: () => void;
+  /** Optional muted secondary action (e.g. "Don't remind me again"). */
+  secondaryButtonText?: string;
+  onSecondaryButtonClick?: () => void;
   onDismiss?: () => void;
   dismissible?: boolean;
   loading?: boolean;
@@ -106,6 +109,8 @@ export const InfoBanner: React.FC<InfoBannerProps> = ({
   buttonText,
   buttonIcon = "check-circle-rounded",
   onButtonClick,
+  secondaryButtonText,
+  onSecondaryButtonClick,
   onDismiss,
   dismissible = true,
   loading = false,
@@ -128,6 +133,7 @@ export const InfoBanner: React.FC<InfoBannerProps> = ({
   }
 
   const toneStyle = toneStyles[tone] ?? toneStyles.info;
+  const resolvedTextColor = textColor ?? toneStyle.text;
   const handleDismiss = () => {
     onDismiss?.();
   };
@@ -184,7 +190,7 @@ export const InfoBanner: React.FC<InfoBannerProps> = ({
               <Text
                 fw={600}
                 size={textSize}
-                style={{ color: textColor ?? toneStyle.text }}
+                style={{ color: resolvedTextColor }}
               >
                 {title}
               </Text>
@@ -192,7 +198,7 @@ export const InfoBanner: React.FC<InfoBannerProps> = ({
             <Text
               fw={title ? 400 : 500}
               size={textSize}
-              style={{ color: textColor ?? toneStyle.text }}
+              style={{ color: resolvedTextColor }}
               lineClamp={compact ? 1 : 2}
             >
               {message}
@@ -221,6 +227,17 @@ export const InfoBanner: React.FC<InfoBannerProps> = ({
               {buttonText}
             </Button>
           )}
+          {secondaryButtonText && onSecondaryButtonClick && (
+            <Button
+              variant="tertiary"
+              accent="neutral"
+              size="sm"
+              onClick={onSecondaryButtonClick}
+              style={{ color: "var(--c-text-muted)" }}
+            >
+              {secondaryButtonText}
+            </Button>
+          )}
           {dismissible && (
             <ActionIcon
               variant="tertiary"
@@ -228,7 +245,9 @@ export const InfoBanner: React.FC<InfoBannerProps> = ({
               size="sm"
               onClick={handleDismiss}
               aria-label={t("infoBanner.dismiss", "Dismiss")}
-              style={closeIconColor ? { color: closeIconColor } : undefined}
+              style={{
+                color: closeIconColor ?? "var(--c-text-muted)",
+              }}
             >
               <LocalIcon
                 icon="close-rounded"
diff --git a/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx b/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx
index cf843de9db..1b24cd4675 100644
--- a/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx
+++ b/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx
@@ -5,12 +5,14 @@ import { useDefaultApp } from "@app/hooks/useDefaultApp";
 
 export const DefaultAppBanner: React.FC = () => {
   const { t } = useTranslation();
-  const { isDefault, isLoading, handleSetDefault } = useDefaultApp();
-  const [dismissed, setDismissed] = useState(false);
-
-  const handleDismissPrompt = () => {
-    setDismissed(true);
-  };
+  const {
+    isDefault,
+    isLoading,
+    promptDismissed,
+    handleSetDefault,
+    dontRemindAgain,
+  } = useDefaultApp();
+  const [sessionDismissed, setSessionDismissed] = useState(false);
 
   return (
     <InfoBanner
@@ -22,9 +24,14 @@ export const DefaultAppBanner: React.FC = () => {
       buttonText={t("defaultApp.setDefault", "Set Default")}
       buttonIcon="check-circle-rounded"
       onButtonClick={handleSetDefault}
-      onDismiss={handleDismissPrompt}
+      secondaryButtonText={t(
+        "defaultApp.prompt.dontRemind",
+        "Don't remind me again",
+      )}
+      onSecondaryButtonClick={dontRemindAgain}
+      onDismiss={() => setSessionDismissed(true)}
       loading={isLoading}
-      show={!dismissed && isDefault === false}
+      show={!sessionDismissed && !promptDismissed && isDefault === false}
     />
   );
 };
diff --git a/frontend/editor/src/desktop/components/shared/config/configSections/DefaultAppSettings.tsx b/frontend/editor/src/desktop/components/shared/config/configSections/DefaultAppSettings.tsx
index 247fda74d3..01d908f0b2 100644
--- a/frontend/editor/src/desktop/components/shared/config/configSections/DefaultAppSettings.tsx
+++ b/frontend/editor/src/desktop/components/shared/config/configSections/DefaultAppSettings.tsx
@@ -1,46 +1,89 @@
 import React from "react";
-import { Paper, Text, Group } from "@mantine/core";
+import { Paper, Text, Group, Switch, Stack } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { useTranslation } from "react-i18next";
 import { useDefaultApp } from "@app/hooks/useDefaultApp";
 
 export const DefaultAppSettings: React.FC = () => {
   const { t } = useTranslation();
-  const { isDefault, isLoading, handleSetDefault } = useDefaultApp();
+  const {
+    isDefault,
+    isLoading,
+    promptDismissed,
+    handleSetDefault,
+    setRemindWhenNotDefault,
+  } = useDefaultApp();
+
+  // Remind is on by default (promptDismissed is false until the user opts out).
+  const remindEnabled = !promptDismissed;
 
   return (
     <Paper withBorder p="md" radius="md">
-      <Group justify="space-between" align="center">
-        <div>
-          <Text fw={500} size="sm">
-            {t("settings.general.defaultPdfEditor", "Default PDF editor")}
-          </Text>
-          <Text size="xs" c="dimmed" mt={4}>
-            {isDefault === true
-              ? t(
-                  "settings.general.defaultPdfEditorActive",
-                  "Stirling PDF is your default PDF editor",
-                )
-              : isDefault === false
+      <Stack gap="md">
+        <Group justify="space-between" align="center">
+          <div>
+            <Text fw={500} size="sm">
+              {t("settings.general.defaultPdfEditor", "Default PDF editor")}
+            </Text>
+            <Text size="xs" c="dimmed" mt={4}>
+              {isDefault === true
                 ? t(
-                    "settings.general.defaultPdfEditorInactive",
-                    "Another application is set as default",
+                    "settings.general.defaultPdfEditorActive",
+                    "Stirling PDF is your default PDF editor",
                   )
-                : t("settings.general.defaultPdfEditorChecking", "Checking...")}
-          </Text>
-        </div>
-        <Button
-          variant={isDefault ? "secondary" : "primary"}
-          size="sm"
-          onClick={handleSetDefault}
-          loading={isLoading}
-          disabled={isDefault === true}
-        >
-          {isDefault
-            ? t("settings.general.defaultPdfEditorSet", "Already Default")
-            : t("settings.general.setAsDefault", "Set as Default")}
-        </Button>
-      </Group>
+                : isDefault === false
+                  ? t(
+                      "settings.general.defaultPdfEditorInactive",
+                      "Another application is set as default",
+                    )
+                  : t(
+                      "settings.general.defaultPdfEditorChecking",
+                      "Checking...",
+                    )}
+            </Text>
+          </div>
+          <Button
+            variant={isDefault ? "secondary" : "primary"}
+            size="sm"
+            onClick={handleSetDefault}
+            loading={isLoading}
+            disabled={isDefault === true}
+          >
+            {isDefault
+              ? t("settings.general.defaultPdfEditorSet", "Already Default")
+              : t("settings.general.setAsDefault", "Set as Default")}
+          </Button>
+        </Group>
+
+        {isDefault === false && (
+          <Group justify="space-between" align="center" wrap="nowrap">
+            <div style={{ flex: 1, minWidth: 0 }}>
+              <Text fw={500} size="sm">
+                {t(
+                  "settings.general.defaultPdfEditorRemind",
+                  "Remind me to set as default",
+                )}
+              </Text>
+              <Text size="xs" c="dimmed" mt={4}>
+                {t(
+                  "settings.general.defaultPdfEditorRemindDescription",
+                  "Show a banner when Stirling PDF is not your default PDF application.",
+                )}
+              </Text>
+            </div>
+            <Switch
+              checked={remindEnabled}
+              onChange={(event) =>
+                setRemindWhenNotDefault(event.currentTarget.checked)
+              }
+              aria-label={t(
+                "settings.general.defaultPdfEditorRemind",
+                "Remind me to set as default",
+              )}
+            />
+          </Group>
+        )}
+      </Stack>
     </Paper>
   );
 };
diff --git a/frontend/editor/src/desktop/hooks/useDefaultApp.ts b/frontend/editor/src/desktop/hooks/useDefaultApp.ts
index 9f647ca888..1719ee0924 100644
--- a/frontend/editor/src/desktop/hooks/useDefaultApp.ts
+++ b/frontend/editor/src/desktop/hooks/useDefaultApp.ts
@@ -7,11 +7,20 @@ export const useDefaultApp = () => {
   const { t } = useTranslation();
   const [isDefault, setIsDefault] = useState<boolean | null>(null);
   const [isLoading, setIsLoading] = useState(false);
+  const [promptDismissed, setPromptDismissed] = useState(() =>
+    defaultAppService.hasUserDismissedPrompt(),
+  );
 
   useEffect(() => {
     checkDefaultStatus();
   }, []);
 
+  useEffect(() => {
+    return defaultAppService.subscribePromptDismissed(() => {
+      setPromptDismissed(defaultAppService.hasUserDismissedPrompt());
+    });
+  }, []);
+
   const checkDefaultStatus = async () => {
     try {
       const status = await defaultAppService.isDefaultPdfHandler();
@@ -21,6 +30,18 @@ export const useDefaultApp = () => {
     }
   };
 
+  /** Permanently stop showing the banner (same as turning off the settings toggle). */
+  const dontRemindAgain = () => {
+    defaultAppService.setPromptDismissed(true);
+    setPromptDismissed(true);
+  };
+
+  /** Settings toggle: remind is on by default until the user opts out. */
+  const setRemindWhenNotDefault = (remind: boolean) => {
+    defaultAppService.setPromptDismissed(!remind);
+    setPromptDismissed(!remind);
+  };
+
   const handleSetDefault = async () => {
     setIsLoading(true);
     try {
@@ -64,7 +85,10 @@ export const useDefaultApp = () => {
   return {
     isDefault,
     isLoading,
+    promptDismissed,
     checkDefaultStatus,
+    dontRemindAgain,
+    setRemindWhenNotDefault,
     handleSetDefault,
   };
 };
diff --git a/frontend/editor/src/desktop/services/defaultAppService.ts b/frontend/editor/src/desktop/services/defaultAppService.ts
index c7f554a960..0d5d17e45d 100644
--- a/frontend/editor/src/desktop/services/defaultAppService.ts
+++ b/frontend/editor/src/desktop/services/defaultAppService.ts
@@ -1,5 +1,16 @@
 import { invoke } from "@tauri-apps/api/core";
 
+const PROMPT_DISMISSED_KEY = "stirlingpdf_default_app_prompt_dismissed";
+
+type PromptDismissedListener = () => void;
+const promptDismissedListeners = new Set<PromptDismissedListener>();
+
+function notifyPromptDismissedListeners(): void {
+  for (const listener of promptDismissedListeners) {
+    listener();
+  }
+}
+
 /**
  * Service for managing default PDF handler settings
  * Note: Uses localStorage for machine-specific preferences (not synced to server)
@@ -39,9 +50,7 @@ export const defaultAppService = {
    */
   hasUserDismissedPrompt(): boolean {
     try {
-      const dismissed = localStorage.getItem(
-        "stirlingpdf_default_app_prompt_dismissed",
-      );
+      const dismissed = localStorage.getItem(PROMPT_DISMISSED_KEY);
       return dismissed === "true";
     } catch {
       return false;
@@ -53,15 +62,24 @@ export const defaultAppService = {
    */
   setPromptDismissed(dismissed: boolean): void {
     try {
-      localStorage.setItem(
-        "stirlingpdf_default_app_prompt_dismissed",
-        dismissed ? "true" : "false",
-      );
+      localStorage.setItem(PROMPT_DISMISSED_KEY, dismissed ? "true" : "false");
+      notifyPromptDismissedListeners();
     } catch (error) {
       console.error("[DefaultApp] Failed to save prompt preference:", error);
     }
   },
 
+  /**
+   * Subscribe to prompt-dismissed preference changes (same-session sync).
+   * Returns an unsubscribe function.
+   */
+  subscribePromptDismissed(listener: PromptDismissedListener): () => void {
+    promptDismissedListeners.add(listener);
+    return () => {
+      promptDismissedListeners.delete(listener);
+    };
+  },
+
   /**
    * Check if we should show the default app prompt
    * Returns true if: user hasn't dismissed it AND app is not default handler

From 88012c68618c27bd1f043514ffb800d2808896cb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:07:02 +0100
Subject: [PATCH 021/122] build(deps): bump jackson2Version from 2.21.4 to
 2.22.1 (#7131)

Bumps `jackson2Version` from 2.21.4 to 2.22.1.
Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.4 to 2.22.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/2451603e1931dac6f28ebdbcf308eb24b0f84b26"><code>2451603</code></a>
[maven-release-plugin] prepare release jackson-core-2.22.1</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/d3180c0827e45e39c0ca38dc6d650f19aff572ef"><code>d3180c0</code></a>
Prep for 2.22.1 release</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/6c5bae8184485c9def18ef98951840830bcdca60"><code>6c5bae8</code></a>
Merge branch '2.21' into 2.22</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/fda71aa915d4637c2e8377725eeee9039b740500"><code>fda71aa</code></a>
Post-release dep version bump</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/4ad623584c272a8b7de89ea6fd2bb40af1911b4a"><code>4ad6235</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/b5f62dd8cf4b6897bb18a43565495355e45b4e65"><code>b5f62dd</code></a>
[maven-release-plugin] prepare release jackson-core-2.21.5</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/11f8b8c2730c48c8da188372af98b1b7a8219172"><code>11f8b8c</code></a>
Prep for 2.21.5 release</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/492000443fcfc30bd97ae6a46d924120f39ce21c"><code>4920004</code></a>
Post-release version bump</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/2bb55e8634c7fa1c197f995cdd4566ae7b7f4e0f"><code>2bb55e8</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://github.com/FasterXML/jackson-core/commit/d763562443cc9d6e224a6265ca3710195c813cf5"><code>d763562</code></a>
[maven-release-plugin] prepare release jackson-core-2.22.0</li>
<li>Additional commits viewable in <a
href="https://github.com/FasterXML/jackson-core/compare/jackson-core-2.21.4...jackson-core-2.22.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.4 to
2.22.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/FasterXML/jackson/commits">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from
2.21.4 to 2.22.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/681f699ec98fec4202245384e46fb781ee92e747"><code>681f699</code></a>
[maven-release-plugin] prepare release
jackson-dataformats-text-2.22.1</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/8e2585234fecca6599e75b060f913495d12b418b"><code>8e25852</code></a>
Prep for 2.22.1 release</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/e1ed4d2cb6cebf7e657ee5b91732a20c60baf932"><code>e1ed4d2</code></a>
Merge branch '2.21' into 2.22</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/3f3257ce1b8f367ec024adff3145819f9f168c21"><code>3f3257c</code></a>
Post-release dep version bump</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/3348a1aac8d06a14d787ce69022241581f2bf409"><code>3348a1a</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/687ad4f318cd633eb0000f888bbb936c328dddde"><code>687ad4f</code></a>
[maven-release-plugin] prepare release
jackson-dataformats-text-2.21.5</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/955c59fae23292e389a13715fde664f7d3484eb9"><code>955c59f</code></a>
Prep for 2.21.5 release</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/588933e4c87ea2ef7669d4659c770fbff04fc108"><code>588933e</code></a>
Post-release dep version bump</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/38f3683f4c7793dad8111cf823c17243541a74df"><code>38f3683</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-text/commit/23d487c5e2740c74668b67d9a0a98992248ce91f"><code>23d487c</code></a>
[maven-release-plugin] prepare release
jackson-dataformats-text-2.22.0</li>
<li>Additional commits viewable in <a
href="https://github.com/FasterXML/jackson-dataformats-text/compare/jackson-dataformats-text-2.21.4...jackson-dataformats-text-2.22.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jdk8` from
2.21.4 to 2.22.1

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from
2.21.4 to 2.22.1


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 6aabb1a198..0258c2ca4a 100644
--- a/build.gradle
+++ b/build.gradle
@@ -37,7 +37,7 @@ ext {
     gsonVersion = "2.14.0"
     guavaVersion = "33.6.0-jre"
     jinjavaVersion = "2.8.3"
-    jackson2Version = "2.21.4"
+    jackson2Version = "2.22.1"
     bucket4jVersion = "8.19.0"
     archunitVersion = "1.4.2"
     batikVersion = "1.19"

From c8db0a912e4307cefb6937795c29d804c7e0c7bf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:07:21 +0100
Subject: [PATCH 022/122] build(deps): bump ubuntu from `c4a8d55` to `4fbb8e6`
 in /docker/unoserver (#6557)

Bumps ubuntu from `c4a8d55` to `4fbb8e6`.


> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 docker/unoserver/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/unoserver/Dockerfile b/docker/unoserver/Dockerfile
index 8adf0ab980..0bd9d1da0a 100644
--- a/docker/unoserver/Dockerfile
+++ b/docker/unoserver/Dockerfile
@@ -1,7 +1,7 @@
 # Standalone unoserver image for Stirling-PDF remote UNO mode.
 # Pinned to unoserver 3.6 to match Stirling-PDF's client (avoids 3.4/3.6 wire mismatch).
 
-FROM ubuntu:noble@sha256:c4a8d5503dfb2a3eb8ab5f807da5bc69a85730fb49b5cfca2330194ebcc41c7b
+FROM ubuntu:noble@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90
 
 ARG UNOSERVER_VERSION=3.6
 # ~120 MB of CJK fonts — opt-in.

From 536a9ebaa71c2c514ea507d5a6241fe49f1f0582 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:07:32 +0100
Subject: [PATCH 023/122] build(deps): bump actions/ai-inference from 2.1.0 to
 2.1.1 (#6832)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/ai-inference](https://github.com/actions/ai-inference)
from 2.1.0 to 2.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/ai-inference/releases">actions/ai-inference's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: delay process.exit on Windows to dodge libuv UV_HANDLE_CLOSING
crash by <a
href="https://github.com/mickey-mikey"><code>@​mickey-mikey</code></a>
in <a
href="https://redirect.github.com/actions/ai-inference/pull/228">actions/ai-inference#228</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/mickey-mikey"><code>@​mickey-mikey</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/ai-inference/pull/228">actions/ai-inference#228</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/ai-inference/compare/v2...v2.1.1">https://github.com/actions/ai-inference/compare/v2...v2.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/ai-inference/commit/a7805884c80886efc241e94a5351df715968a0ad"><code>a780588</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/ai-inference/issues/228">#228</a>
from mickey-mikey/fix/libuv-windows-exit</li>
<li><a
href="https://github.com/actions/ai-inference/commit/99b696214c2205c9bdca442acae4307252da5067"><code>99b6962</code></a>
chore: npm audit fix — clear 17 transitive-dep CVEs</li>
<li><a
href="https://github.com/actions/ai-inference/commit/200ca3a4231fb2fbf71affa629d3af65e17e3a70"><code>200ca3a</code></a>
ci: disable redundant Biome validators and add dependabot cooldown</li>
<li><a
href="https://github.com/actions/ai-inference/commit/0e2c6977336b824b8dbb490be15874fe6f589e43"><code>0e2c697</code></a>
chore: refresh .licenses cache</li>
<li><a
href="https://github.com/actions/ai-inference/commit/0bb3dae7d8aab92acdb63a4595aa693f6ebc21f8"><code>0bb3dae</code></a>
fix: delay process.exit on Windows to dodge libuv UV_HANDLE_CLOSING
crash</li>
<li>See full diff in <a
href="https://github.com/actions/ai-inference/compare/17ff458cb182449bbb2e43701fcd98f6af8f6570...a7805884c80886efc241e94a5351df715968a0ad">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/ai-inference&package-manager=github_actions&previous-version=2.1.0&new-version=2.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ai_pr_title_review.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ai_pr_title_review.yml b/.github/workflows/ai_pr_title_review.yml
index 65e6445637..7ac480c815 100644
--- a/.github/workflows/ai_pr_title_review.yml
+++ b/.github/workflows/ai_pr_title_review.yml
@@ -87,7 +87,7 @@ jobs:
       - name: AI PR Title Analysis
         if: steps.actor.outputs.is_repo_dev == 'true'
         id: ai-title-analysis
-        uses: actions/ai-inference@17ff458cb182449bbb2e43701fcd98f6af8f6570 # v2.1.0
+        uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # v2.1.1
         with:
           model: openai/gpt-4o
           system-prompt-file: ".github/config/system-prompt.txt"

From 71957d5da524dcefc68112a1fd92caefed8b429c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:07:56 +0100
Subject: [PATCH 024/122] build(deps): bump fast-uri from 3.1.2 to 3.1.5 in
 /devTools (#7231)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to
3.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.5</h2>
<h2>⚠️ Security Warning</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p>
<h2>v3.1.4</h2>
<h2>⚠️ Security Release</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p>
<h2>v3.1.3</h2>
<h2>⚠️ Security Release</h2>
<ul>
<li>Fixes: <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6">https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3">https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/commit/5e179cbb4636d5f773ed21126e5bd3068e87e94e"><code>5e179cb</code></a>
Bumped v3.1.5</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2cad02d6ed428a720499bb7a3c3d6c3d41f10f5a"><code>2cad02d</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/6aeece669e4166b2446a89f17c07a3b15dfb7ed4"><code>6aeece6</code></a>
Bumped v3.1.4</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2d50fbabc80e4d0884fe0f6a98fe118ce6faa353"><code>2d50fba</code></a>
fix: reject literal backslash in URI authority</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/0549fe35b0d482233f3be2816439f3ec803603fa"><code>0549fe3</code></a>
Bumped v3.1.3</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2a6d357a18a68e6d812824379fd3388a1ae50d05"><code>2a6d357</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.2&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 devTools/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/devTools/package-lock.json b/devTools/package-lock.json
index 0555ac9543..c5c409b6ae 100644
--- a/devTools/package-lock.json
+++ b/devTools/package-lock.json
@@ -555,9 +555,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
-      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
+      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
       "dev": true,
       "funding": [
         {

From aba9275ea7db897663a33db3072bef4c0888a2ab Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:08:03 +0100
Subject: [PATCH 025/122] build(deps): bump postcss from 8.5.12 to 8.5.25 in
 /devTools (#7232)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.12 to
8.5.25.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.25</h2>
<ul>
<li>Fixed 8.5.17 visitor regression.</li>
<li>Fixed <code>list.split()</code> for non-string values (by <a
href="https://github.com/amir-rezaei"><code>@​amir-rezaei</code></a>).</li>
</ul>
<h2>8.5.24</h2>
<ul>
<li>Preserve the BOM after the processing (by <a
href="https://github.com/hdimer"><code>@​hdimer</code></a>).</li>
</ul>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media"><code>@​chatman-media</code></a>).</li>
</ul>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra"><code>@​mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp"><code>@​homanp</code></a>).</li>
</ul>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j"><code>@​43081j</code></a>).</li>
</ul>
<h2>8.5.13</h2>
<ul>
<li>Fixed <code>postcss-scss</code> commend regression.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.25</h2>
<ul>
<li>Fixed 8.5.17 visitor regression.</li>
<li>Fixed <code>list.split()</code> for non-string values (by <a
href="https://github.com/amir-rezaei"><code>@​amir-rezaei</code></a>).</li>
</ul>
<h2>8.5.24</h2>
<ul>
<li>Preserve the BOM after the processing (by <a
href="https://github.com/hdimer"><code>@​hdimer</code></a>).</li>
</ul>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media"><code>@​chatman-media</code></a>).</li>
</ul>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra"><code>@​mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.15</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/08c989c43cc87edb1ed71408c2f5164c54fc21df"><code>08c989c</code></a>
Release 8.5.25 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/24f681471645cd960ee760ab7f9e348fbabfd42c"><code>24f6814</code></a>
Fix 8.5.17 visitor regression</li>
<li><a
href="https://github.com/postcss/postcss/commit/f2fa53f11daab3a16c7eb8bcaf5a945142341df3"><code>f2fa53f</code></a>
Add supply chain security requirement to PostCSS plugin guide</li>
<li><a
href="https://github.com/postcss/postcss/commit/10edf0b0606f97b1510e040c27bfd078c48d6ea7"><code>10edf0b</code></a>
fix: return empty array for empty string in list.split (<a
href="https://redirect.github.com/postcss/postcss/issues/2121">#2121</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/0ebe8ad591621ab4e48311da47a76974617571f9"><code>0ebe8ad</code></a>
Release 8.5.24 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/73218c64245be53e25d58150e0cc7e984f1d162d"><code>73218c6</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/9a114f62b0deb37be859102f93b414b49385805a"><code>9a114f6</code></a>
Preserve the BOM when stringifying (<a
href="https://redirect.github.com/postcss/postcss/issues/2119">#2119</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/90692619125cb9424f5eafd8c64bc76b2da23db1"><code>9069261</code></a>
Fix types check</li>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.12...8.5.25">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for postcss since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.12&new-version=8.5.25)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 devTools/package-lock.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/devTools/package-lock.json b/devTools/package-lock.json
index c5c409b6ae..39db3d2046 100644
--- a/devTools/package-lock.json
+++ b/devTools/package-lock.json
@@ -1027,9 +1027,9 @@
       "license": "MIT"
     },
     "node_modules/nanoid": {
-      "version": "3.3.11",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
-      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "version": "3.3.16",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
+      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
       "dev": true,
       "funding": [
         {
@@ -1108,9 +1108,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.12",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.12.tgz",
-      "integrity": "sha512-W62t/Se6rA0Az3DfCL0AqJwXuKwBeYg6nOaIgzP+xZ7N5BFCI7DYi1qs6ygUYT6rvfi6t9k65UMLJC+PHZpDAA==",
+      "version": "8.5.25",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
+      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
       "dev": true,
       "funding": [
         {
@@ -1128,7 +1128,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.11",
+        "nanoid": "^3.3.16",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },

From 547dce4cf35b58167a51abb07b4ceeccbdc90422 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Sat, 1 Aug 2026 17:09:11 +0100
Subject: [PATCH 026/122] Add multi-node cluster regression suite (compose
 stack + behave e2e) (#7026)

# Description of Changes

- The multi-node compose stack + behave suite (11 features)
- The nightly multinode-e2e job in build-enterprise.yml


cuke features are

cluster_health - both nodes boot healthy and join the Valkey backplane
load_balancing - traffic spreads across nodes; no spurious 401 when
bounced
cross_node_auth - a token from one node validates on all nodes (shared
DB keys)
shared_state - teams/sources/org visible from every node
policy_management - create/rename/delete a policy on any node, reflected
everywhere
source_management - source CRUD cross-node; referenced source can't be
deleted anywhere
connections - S3 connection resolves (secret masked) and deletes
cluster-wide
processor_ledger - files processed exactly once even when both nodes
trigger together
policy_run_coordination - a run on one node is visible from every node
rate_limiting - rate-limit counters shared via Valkey, not per node
failover - LB keeps serving when a node dies; recovered node accepts
existing tokens


can now start a full node system with
export PREMIUM_KEY=<your licence key> ./start-multinode-test.sh
starts a 40 person org DB install with multi node and database
(--no-seed to have without DB on startup)
4 teams
1 s3 connection
1 policy

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .github/workflows/build-enterprise.yml        |  67 ++
 testing/compose/docker-compose-multinode.yml  | 225 +++++++
 testing/compose/multinode/nginx.conf          |  49 ++
 testing/compose/multinode/seed.sh             | 140 +++++
 testing/compose/run-multinode-regression.sh   |  69 ++
 testing/compose/start-multinode-test.sh       |  65 ++
 testing/compose/validate-multinode-test.sh    |  81 +++
 testing/cucumber/behave.ini                   |  14 +-
 .../features/multinode/cluster_health.feature |  18 +
 .../features/multinode/connections.feature    |  12 +
 .../multinode/cross_node_auth.feature         |  14 +
 .../features/multinode/failover.feature       |  21 +
 .../features/multinode/load_balancing.feature |  15 +
 .../multinode/policy_management.feature       |  19 +
 .../multinode/policy_run_coordination.feature |  10 +
 .../multinode/processor_ledger.feature        |  20 +
 .../features/multinode/rate_limiting.feature  |   9 +
 .../features/multinode/shared_state.feature   |  20 +
 .../multinode/source_management.feature       |  25 +
 .../steps/multinode_step_definitions.py       | 595 ++++++++++++++++++
 20 files changed, 1481 insertions(+), 7 deletions(-)
 create mode 100644 testing/compose/docker-compose-multinode.yml
 create mode 100644 testing/compose/multinode/nginx.conf
 create mode 100644 testing/compose/multinode/seed.sh
 create mode 100644 testing/compose/run-multinode-regression.sh
 create mode 100644 testing/compose/start-multinode-test.sh
 create mode 100644 testing/compose/validate-multinode-test.sh
 create mode 100644 testing/cucumber/features/multinode/cluster_health.feature
 create mode 100644 testing/cucumber/features/multinode/connections.feature
 create mode 100644 testing/cucumber/features/multinode/cross_node_auth.feature
 create mode 100644 testing/cucumber/features/multinode/failover.feature
 create mode 100644 testing/cucumber/features/multinode/load_balancing.feature
 create mode 100644 testing/cucumber/features/multinode/policy_management.feature
 create mode 100644 testing/cucumber/features/multinode/policy_run_coordination.feature
 create mode 100644 testing/cucumber/features/multinode/processor_ledger.feature
 create mode 100644 testing/cucumber/features/multinode/rate_limiting.feature
 create mode 100644 testing/cucumber/features/multinode/shared_state.feature
 create mode 100644 testing/cucumber/features/multinode/source_management.feature
 create mode 100644 testing/cucumber/features/steps/multinode_step_definitions.py

diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index 8c06175a5d..ce06352996 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -295,3 +295,70 @@ jobs:
           name: playwright-report-enterprise-${{ github.run_id }}
           path: frontend/playwright-report/
           retention-days: 7
+
+  # Multi-node regression: builds + seeds the clustered stack (testing/compose/docker-compose-multinode.yml)
+  # and runs behave features/multinode. Licence-gated, so it runs after the Playwright job (not in parallel).
+  multinode-e2e:
+    needs: [pick, playwright-e2e-enterprise]
+    # Nightly cron + manual dispatch only (heavy build), fork-gated for the licence secret.
+    if: >-
+      always() && needs.pick.outputs.is_fork != 'true'
+      && (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch')
+    runs-on: ${{ needs.pick.outputs.is_fork == 'true' && 'ubuntu-latest' || format('depot-ubuntu-24.04-{0}', inputs.depot_cores || '8') }}
+    timeout-minutes: 60
+    env:
+      PREMIUM_KEY: ${{ secrets.PREMIUM_KEY_ENTERPRISE }}
+      PREMIUM_ENABLED: "true"
+      SYSTEM_ENABLEANALYTICS: "false"
+      DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
+      MN_COMPOSE: docker-compose-multinode.yml
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        with:
+          egress-policy: audit
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: "3.12"
+          cache: "pip"
+          cache-dependency-path: ./testing/cucumber/requirements.txt
+      - name: Install behave test deps
+        run: |
+          pip install --require-hashes --only-binary=:all: -r ./testing/cucumber/requirements.txt
+      - name: Build the multi-node image
+        working-directory: testing/compose
+        run: docker compose -f "$MN_COMPOSE" build
+      - name: Bring up the cluster and wait for both nodes healthy
+        working-directory: testing/compose
+        run: |
+          docker compose -f "$MN_COMPOSE" up -d
+          for i in $(seq 1 90); do
+            h1=$(docker inspect -f '{{.State.Health.Status}}' multinode-stirling-1 2>/dev/null || echo starting)
+            h2=$(docker inspect -f '{{.State.Health.Status}}' multinode-stirling-2 2>/dev/null || echo starting)
+            if [ "$h1" = healthy ] && [ "$h2" = healthy ]; then echo "both nodes healthy"; exit 0; fi
+            sleep 5
+          done
+          echo "::error::nodes did not become healthy"
+          docker compose -f "$MN_COMPOSE" logs --tail=200 stirling-1 stirling-2
+          exit 1
+      - name: Seed the cluster (teams, users, S3 connection, policy)
+        working-directory: testing/compose
+        run: docker compose -f "$MN_COMPOSE" --profile seed run --rm seed
+      - name: Run multi-node regression (implemented guarantees)
+        working-directory: testing/cucumber
+        # -e overrides behave.ini's exclusion of features/multinode; ~@known_gap skips any tracked-gap scenarios.
+        run: python -m behave features/multinode -e "features/enterprise" --tags="~@known_gap ~@destructive" --no-capture -f plain
+      - name: Run multi-node failover (destructive)
+        working-directory: testing/cucumber
+        run: python -m behave features/multinode -e "features/enterprise" --tags="@destructive ~@known_gap" --no-capture -f plain
+      - name: Dump node logs on failure
+        if: failure()
+        working-directory: testing/compose
+        run: docker compose -f "$MN_COMPOSE" logs --tail=400 stirling-1 stirling-2
+      - name: Tear down
+        if: always()
+        working-directory: testing/compose
+        run: docker compose -f "$MN_COMPOSE" --profile seed down -v --remove-orphans
diff --git a/testing/compose/docker-compose-multinode.yml b/testing/compose/docker-compose-multinode.yml
new file mode 100644
index 0000000000..b50ad4741c
--- /dev/null
+++ b/testing/compose/docker-compose-multinode.yml
@@ -0,0 +1,225 @@
+# Multi-node Stirling-PDF processor test stack: shared Postgres/MinIO/Valkey behind an nginx LB fronting N app nodes, with enterprise features unlocked via a local test licence key.
+# Bring up: ./start-multinode-test.sh   Validate: ./validate-multinode-test.sh   Access: http://localhost:8080 (admin / stirling)
+
+x-stirling-node: &stirling-node
+  build:
+    context: ../..
+    dockerfile: docker/embedded/Dockerfile
+  image: stirling-pdf-multinode:local
+  restart: unless-stopped
+  depends_on:
+    postgres:
+      condition: service_healthy
+    valkey:
+      condition: service_healthy
+    minio-init:
+      condition: service_completed_successfully
+  deploy:
+    resources:
+      limits:
+        memory: 4G
+  healthcheck:
+    test: ["CMD-SHELL", "curl -fsS http://localhost:8080/api/v1/info/status | grep -q UP"]
+    interval: 10s
+    timeout: 10s
+    retries: 30
+    start_period: 90s
+  environment: &stirling-env
+    # --- Licensing: unlock pro/enterprise (custom DB + cluster mode) ---
+    # Cluster mode is licence-gated - set PREMIUM_KEY (locally: export PREMIUM_KEY=...; CI: the PREMIUM_KEY_ENTERPRISE secret); the default below is a non-functional placeholder, never a real key.
+    PREMIUM_ENABLED: "true"
+    PREMIUM_KEY: "${PREMIUM_KEY:-00000000-0000-0000-0000-000000000000}"
+    DISABLE_ADDITIONAL_FEATURES: "false"
+
+    # --- Login + teams ---
+    DOCKER_ENABLE_SECURITY: "true"
+    SECURITY_ENABLELOGIN: "true"
+    SECURITY_INITIALLOGIN_USERNAME: "admin"
+    SECURITY_INITIALLOGIN_PASSWORD: "stirling"
+    # Global API key: lets the seed/validate scripts call admin APIs without a login flow.
+    SECURITY_CUSTOMGLOBALAPIKEY: "multinode-test-key"
+
+    # --- Shared Postgres (the single DB every node coordinates through) ---
+    # enableCustomDatabase is an enterprise feature, unlocked by PREMIUM_* above.
+    SYSTEM_DATASOURCE_ENABLECUSTOMDATABASE: "true"
+    SYSTEM_DATASOURCE_TYPE: "postgresql"
+    SYSTEM_DATASOURCE_HOSTNAME: "postgres"
+    SYSTEM_DATASOURCE_PORT: "5432"
+    SYSTEM_DATASOURCE_NAME: "stirling"
+    SYSTEM_DATASOURCE_USERNAME: "stirling"
+    SYSTEM_DATASOURCE_PASSWORD: "stirling"
+    # User.settings has no @Lob annotation - with one, Postgres treats it as a large object and every login 500s ("Large Objects may not be used in auto-commit mode"); see multinode/README.md.
+
+    # --- Shared object storage (persistent user uploads + share/store feature) ---
+    STORAGE_ENABLED: "true"
+    STORAGE_PROVIDER: "s3"
+    STORAGE_S3_ENDPOINT: "http://minio:9000"
+    STORAGE_S3_BUCKET: "stirling-storage"
+    STORAGE_S3_REGION: "us-east-1"
+    STORAGE_S3_ACCESSKEY: "minioadmin"
+    STORAGE_S3_SECRETKEY: "minioadmin"
+    STORAGE_S3_PATHSTYLEACCESS: "true"
+    STORAGE_S3_ALLOWPRIVATEENDPOINTS: "true"
+
+    # --- Cluster mode: Valkey backplane + shared S3 job-artifact store ---
+    # artifactStore=s3 is REQUIRED for multi-node (transient job artifacts must be shared).
+    CLUSTER_ENABLED: "true"
+    CLUSTER_BACKPLANE: "valkey"
+    CLUSTER_ARTIFACTSTORE: "s3"
+    CLUSTER_VALKEY_URL: "redis://valkey:6379"
+    # SPRING_DATA_REDIS_REPOSITORIES_ENABLED is not needed: DataRedisRepositoriesAutoConfiguration is excluded (see application.properties, multinode/README.md).
+
+    # --- Shared credential-encryption key (REQUIRED in cluster mode) ---
+    # AES-256 key that encrypts stored integration/S3 secrets - must match on every node or secrets encrypted on one can't decrypt on another; boot fails if unset with cluster.enabled=true (test-only value; JWT keys persist separately in the shared DB).
+    STIRLING_CREDENTIAL_ENCRYPTION_KEY: "dMobekyUEnEV7WHBah2FkbboP4Coqifd3JRXB00LiIY="
+
+    # --- Policy / processor subsystem (the thing under test) ---
+    POLICIES_ENABLED: "true"
+    # Let policy S3 sources/webhook-staging connections point at the in-cluster MinIO.
+    POLICIES_ALLOWPRIVATES3ENDPOINTS: "true"
+
+    # --- Misc features on ---
+    METRICS_ENABLED: "true"
+    SYSTEM_DEFAULTLOCALE: "en-US"
+    SYSTEM_MAXFILESIZE: "100"
+    UI_APPNAME: "Stirling-PDF Multi-Node"
+    UI_APPNAMENAVBAR: "Stirling Multi-Node"
+  networks:
+    - stirling-multinode
+
+services:
+  # ---- Shared Postgres: the single DB all nodes coordinate through ----------
+  postgres:
+    image: postgres:17-alpine
+    container_name: multinode-postgres
+    environment:
+      POSTGRES_USER: stirling
+      POSTGRES_PASSWORD: stirling
+      POSTGRES_DB: stirling
+    ports:
+      - "5434:5432" # host access for inspection (psql -h localhost -p 5434 -U stirling)
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U stirling -d stirling"]
+      interval: 3s
+      timeout: 5s
+      retries: 30
+    networks:
+      - stirling-multinode
+
+  # ---- Valkey: cluster backplane (shared job state / rate limiting) ---------
+  valkey:
+    image: valkey/valkey:8-alpine
+    container_name: multinode-valkey
+    command: ["valkey-server", "--save", "", "--appendonly", "no"]
+    healthcheck:
+      test: ["CMD-SHELL", "valkey-cli ping | grep -q PONG"]
+      interval: 3s
+      timeout: 5s
+      retries: 30
+    networks:
+      - stirling-multinode
+
+  # ---- MinIO: shared S3 (platform storage + policy connections + webhook staging) ----
+  minio:
+    image: minio/minio:latest
+    container_name: multinode-minio
+    command: ["server", "/data", "--console-address", ":9001"]
+    environment:
+      MINIO_ROOT_USER: minioadmin
+      MINIO_ROOT_PASSWORD: minioadmin
+    ports:
+      - "9000:9000" # S3 API
+      - "9001:9001" # web console (minioadmin / minioadmin)
+    volumes:
+      - minio-data:/data
+    healthcheck:
+      test: ["CMD-SHELL", "mc ready local || exit 1"]
+      interval: 5s
+      timeout: 5s
+      retries: 30
+    networks:
+      - stirling-multinode
+
+  # ---- One-shot: create the buckets the stack needs -------------------------
+  minio-init:
+    image: minio/mc:latest
+    container_name: multinode-minio-init
+    depends_on:
+      minio:
+        condition: service_healthy
+    entrypoint: >
+      /bin/sh -c "
+      mc alias set local http://minio:9000 minioadmin minioadmin &&
+      mc mb --ignore-existing local/stirling-storage &&
+      mc mb --ignore-existing local/policy-data &&
+      echo 'buckets ready: stirling-storage, policy-data'
+      "
+    networks:
+      - stirling-multinode
+
+  # ---- App node 1 -----------------------------------------------------------
+  stirling-1:
+    <<: *stirling-node
+    container_name: multinode-stirling-1
+    environment:
+      <<: *stirling-env
+      SYSTEM_NODEID: "node-1"
+
+  # ---- App node 2 -----------------------------------------------------------
+  # No ordering vs node-1 needed - each node mints its own signing key at boot and publishes the public half to the shared DB, so both verify each other's tokens.
+  stirling-2:
+    <<: *stirling-node
+    container_name: multinode-stirling-2
+    environment:
+      <<: *stirling-env
+      SYSTEM_NODEID: "node-2"
+
+  # ---- One-shot seeder: teams, ~40 users, S3 connection, policies -----------
+  # Profile-gated so plain `docker compose up` skips it; the start script runs it once, using postgres:alpine for psql with curl+jq added for the HTTP calls.
+  seed:
+    image: postgres:17-alpine
+    container_name: multinode-seed
+    profiles: ["seed"]
+    depends_on:
+      stirling-1:
+        condition: service_healthy
+      stirling-2:
+        condition: service_healthy
+    environment:
+      BASE_URL: "http://nginx:8080"
+      PGHOST: "postgres"
+      PGUSER: "stirling"
+      PGPASSWORD: "stirling"
+      PGDATABASE: "stirling"
+      USER_COUNT: "40"
+    volumes:
+      - ./multinode/seed.sh:/seed.sh:ro
+    entrypoint: ["/bin/sh", "-c", "apk add --no-cache curl jq >/dev/null && sh /seed.sh"]
+    networks:
+      - stirling-multinode
+
+  # ---- nginx load balancer: single entrypoint round-robining the nodes ------
+  nginx:
+    image: nginx:1.27-alpine
+    container_name: multinode-nginx
+    depends_on:
+      stirling-1:
+        condition: service_healthy
+      stirling-2:
+        condition: service_healthy
+    ports:
+      - "8080:8080"
+    volumes:
+      - ./multinode/nginx.conf:/etc/nginx/nginx.conf:ro
+    networks:
+      - stirling-multinode
+
+networks:
+  stirling-multinode:
+    driver: bridge
+
+volumes:
+  postgres-data:
+  minio-data:
diff --git a/testing/compose/multinode/nginx.conf b/testing/compose/multinode/nginx.conf
new file mode 100644
index 0000000000..ef0fea45b5
--- /dev/null
+++ b/testing/compose/multinode/nginx.conf
@@ -0,0 +1,49 @@
+worker_processes 1;
+events { worker_connections 1024; }
+
+http {
+    # Round-robin across the app nodes. Add a node here to scale out.
+    # max_fails=1 marks a node down after a single failure so a dead node drains fast.
+    upstream stirling_nodes {
+        server stirling-1:8080 max_fails=1 fail_timeout=10s;
+        server stirling-2:8080 max_fails=1 fail_timeout=10s;
+    }
+
+    # Large uploads (SYSTEM_MAXFILESIZE=100MB) plus headroom.
+    client_max_body_size 200m;
+
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        ''      close;
+    }
+
+    server {
+        listen 8080;
+
+        location / {
+            proxy_pass http://stirling_nodes;
+
+            # Graceful failover: retries the other node only on connection-level failures (unreachable/timeout), never on 5xx, so a POST a node already started is never re-sent.
+            proxy_next_upstream error timeout;
+            proxy_next_upstream_tries 2;
+            proxy_connect_timeout 3s;
+
+            proxy_set_header Host              $host;
+            proxy_set_header X-Real-IP         $remote_addr;
+            proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            # WebSocket / SSE upgrade support (policy run streaming).
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade    $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+
+            # Stream server-sent events straight through, don't buffer.
+            proxy_buffering off;
+            proxy_read_timeout 3600s;
+
+            # Surface which app node served the request, so the validate script can prove the LB is spreading load.
+            add_header X-Served-By $upstream_addr always;
+        }
+    }
+}
diff --git a/testing/compose/multinode/seed.sh b/testing/compose/multinode/seed.sh
new file mode 100644
index 0000000000..3fc777b193
--- /dev/null
+++ b/testing/compose/multinode/seed.sh
@@ -0,0 +1,140 @@
+#!/bin/sh
+# Seeds a running multi-node stack: 4 teams, ~40 users, an S3 connection, a scheduled S3 policy, and a webhook source if the build supports it.
+# Auth uses the Bearer JWT from the login response body (not a cookie) since the global API key can't create teams.
+# Idempotent-ish: re-running skips existing teams/users; each step is best-effort and logs failures without aborting.
+set -u
+
+BASE_URL="${BASE_URL:-http://localhost:8080}"
+ADMIN_USER="${ADMIN_USER:-admin}"
+ADMIN_PASS="${ADMIN_PASS:-stirling}"
+USER_COUNT="${USER_COUNT:-40}"
+USER_PASS="${USER_PASS:-Password123!}"
+PGHOST="${PGHOST:-postgres}"
+PGUSER="${PGUSER:-stirling}"
+PGPASSWORD="${PGPASSWORD:-stirling}"
+PGDATABASE="${PGDATABASE:-stirling}"
+export PGPASSWORD
+
+TEAMS="Engineering Finance Legal Operations"
+
+log()   { echo "[seed] $*"; }
+psqlq() { psql -h "$PGHOST" -U "$PGUSER" -d "$PGDATABASE" -tAc "$1" 2>/dev/null | tr -d '[:space:]'; }
+
+# --- wait for the load balancer to serve a healthy app -----------------------
+log "waiting for $BASE_URL ..."
+i=0
+until curl -fsS "$BASE_URL/api/v1/info/status" 2>/dev/null | grep -q UP; do
+  i=$((i+1)); [ "$i" -gt 120 ] && { log "timed out waiting for API"; exit 1; }
+  sleep 3
+done
+log "API is up"
+
+# --- admin login -> Bearer token ---------------------------------------------
+code=$(curl -sS -o /tmp/login.json -w '%{http_code}' \
+  -X POST "$BASE_URL/api/v1/auth/login" \
+  -H 'Content-Type: application/json' \
+  -d "{\"username\":\"$ADMIN_USER\",\"password\":\"$ADMIN_PASS\"}")
+log "admin login: HTTP $code"
+[ "$code" = "200" ] || { log "login failed: $(cat /tmp/login.json)"; exit 1; }
+TOKEN=$(jq -r '.session.access_token' </tmp/login.json)
+[ -n "$TOKEN" ] && [ "$TOKEN" != "null" ] || { log "no access_token in login response"; exit 1; }
+
+auth() { curl -sS -H "Authorization: Bearer $TOKEN" "$@"; }
+
+# --- teams -------------------------------------------------------------------
+for t in $TEAMS; do
+  code=$(auth -o /dev/null -w '%{http_code}' -X POST "$BASE_URL/api/v1/team/create" \
+    --data-urlencode "name=$t")
+  log "team '$t': HTTP $code"
+done
+
+# Resolve team ids from the DB (no admin list endpoint self-hosted).
+seed_team_ids=""
+for t in $TEAMS; do
+  id=$(psqlq "select team_id from teams where name='$t' limit 1")
+  [ -n "$id" ] && seed_team_ids="$seed_team_ids $id"
+done
+set -- $seed_team_ids
+team_count=$#
+log "seedable team ids:$seed_team_ids (count=$team_count)"
+
+# --- users: spread across teams, first two are admins ------------------------
+created=0; failed=0
+n=1
+while [ "$n" -le "$USER_COUNT" ]; do
+  uname=$(printf "user%02d@stirling.test" "$n")
+  role="ROLE_USER"; [ "$n" -le 2 ] && role="ROLE_ADMIN"
+  team_id=""
+  if [ "$team_count" -gt 0 ]; then
+    idx=$(( (n % team_count) + 1 )); team_id=$(eval echo "\${$idx}")
+  fi
+  code=$(auth -o /tmp/user.json -w '%{http_code}' -X POST "$BASE_URL/api/v1/user/admin/saveUser" \
+    --data-urlencode "username=$uname" \
+    --data-urlencode "password=$USER_PASS" \
+    --data-urlencode "role=$role" \
+    ${team_id:+--data-urlencode "teamId=$team_id"} \
+    --data-urlencode "authType=WEB" \
+    --data-urlencode "forceChange=false")
+  case "$code" in
+    200|201) created=$((created+1));;
+    409)     log "user $uname already exists";;
+    *)       failed=$((failed+1)); [ "$failed" -le 3 ] && log "user $uname failed HTTP $code: $(cat /tmp/user.json)";;
+  esac
+  n=$((n+1))
+done
+log "users created: $created (failed: $failed, requested: $USER_COUNT)"
+
+# --- S3 connection -> the in-cluster MinIO 'policy-data' bucket ---------------
+conn_body=$(cat <<JSON
+{"integrationType":"S3","name":"MinIO policy bucket","scope":"SERVER","enabled":true,"locked":false,"defaultAccess":"ORG_ALL",
+ "config":{"bucket":"policy-data","region":"us-east-1","endpoint":"http://minio:9000","accessKeyId":"minioadmin","secretAccessKey":"minioadmin","pathStyleAccess":true}}
+JSON
+)
+conn_id=$(auth -X POST "$BASE_URL/api/v1/integrations" -H 'Content-Type: application/json' -d "$conn_body" \
+  | jq -r '.id // empty' 2>/dev/null)
+log "S3 connection id: ${conn_id:-<none>}"
+
+# --- a scheduled S3 -> compress -> S3 policy ---------------------------------
+if [ -n "${conn_id:-}" ]; then
+  src_body=$(cat <<JSON
+{"name":"Incoming S3","type":"s3","enabled":true,
+ "options":{"connectionId":$conn_id,"prefix":"incoming/","mode":"consume"}}
+JSON
+)
+  src_id=$(auth -X POST "$BASE_URL/api/v1/sources" -H 'Content-Type: application/json' -d "$src_body" \
+    | jq -r '.id // empty' 2>/dev/null)
+  log "S3 source id: ${src_id:-<none>}"
+
+  if [ -n "${src_id:-}" ]; then
+    pol_body=$(cat <<JSON
+{"name":"Compress incoming PDFs","enabled":true,
+ "trigger":{"type":"schedule","options":{"schedule":{"type":"every","count":5,"unit":"MINUTES"}}},
+ "sourceIds":["$src_id"],
+ "steps":[{"operation":"/api/v1/misc/compress-pdf","parameters":{}}],
+ "output":{"type":"s3","options":{"connectionId":$conn_id,"prefix":"processed/"}}}
+JSON
+)
+    code=$(auth -o /tmp/pol.json -w '%{http_code}' -X POST "$BASE_URL/api/v1/policies" \
+      -H 'Content-Type: application/json' -d "$pol_body")
+    log "policy create: HTTP $code $( [ "$code" != 200 ] && head -c 160 /tmp/pol.json )"
+  fi
+
+  # --- webhook source + policy (only if this build has the webhook type) -----
+  wh_body=$(cat <<JSON
+{"name":"Partner webhook","type":"webhook","enabled":true,
+ "options":{"connectionId":$conn_id,"mode":"consume"}}
+JSON
+)
+  wh=$(auth -o /tmp/wh.json -w '%{http_code}' -X POST "$BASE_URL/api/v1/sources" \
+    -H 'Content-Type: application/json' -d "$wh_body")
+  if [ "$wh" = "200" ] || [ "$wh" = "201" ]; then
+    wh_url=$(jq -r '.options.webhookId // empty' </tmp/wh.json 2>/dev/null)
+    log "webhook source created (deliver to /api/v1/webhooks/$wh_url)"
+  else
+    log "webhook source not created (HTTP $wh) - expected on builds without the webhook branch"
+  fi
+fi
+
+log "seed complete."
+log "  login: $ADMIN_USER / $ADMIN_PASS at $BASE_URL"
+log "  users: user01..$(printf '%02d' "$USER_COUNT")@stirling.test / $USER_PASS"
diff --git a/testing/compose/run-multinode-regression.sh b/testing/compose/run-multinode-regression.sh
new file mode 100644
index 0000000000..01a0710a5b
--- /dev/null
+++ b/testing/compose/run-multinode-regression.sh
@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+# Runs the multi-node regression suite (behave features/multinode) against the clustered stack: brings it up if needed, runs non-destructive scenarios then @destructive failover ones, and restores any killed node.
+# Usage: ./run-multinode-regression.sh [--no-failover] [--no-seed]
+# @known_gap scenarios are expected to fail - they mark work not yet done, so a non-zero exit is fine while those are open.
+set -uo pipefail
+cd "$(dirname "$0")"
+
+COMPOSE="docker compose -f docker-compose-multinode.yml"
+CUKE_DIR="../cucumber"
+RUN_FAILOVER=1
+SEED=1
+for arg in "$@"; do
+  case "$arg" in
+    --no-failover) RUN_FAILOVER=0 ;;
+    --no-seed)     SEED=0 ;;
+  esac
+done
+
+echo "==> Ensuring the multi-node stack is up..."
+if ! docker inspect -f '{{.State.Health.Status}}' multinode-stirling-1 2>/dev/null | grep -q healthy; then
+  ./start-multinode-test.sh $([ "$SEED" = 0 ] && echo --no-seed) || exit 1
+elif [ "$SEED" = 1 ]; then
+  echo "    stack already up; seeding (idempotent)..."
+  $COMPOSE --profile seed run --rm seed >/dev/null 2>&1 || echo "    (seed reported issues, continuing)"
+fi
+
+echo "==> Checking Python + behave..."
+PY="${PYTHON:-python}"
+command -v "$PY" >/dev/null || PY=python3
+if ! "$PY" -c "import behave" 2>/dev/null; then
+  echo "    installing test deps..."
+  "$PY" -m pip install -q -r "$CUKE_DIR/requirements.txt" || {
+    echo "    could not install behave; install $CUKE_DIR/requirements.txt manually"; exit 1; }
+fi
+
+REPORT_DIR="$(pwd)/multinode/regression-report"
+mkdir -p "$REPORT_DIR"
+
+run_behave() { # $1=tags  $2=label
+  echo "==> behave features/multinode --tags='$1'  ($2)"
+  # behave.ini excludes features/multinode by default; -e here overrides that while still excluding the licence-gated enterprise suite.
+  ( cd "$CUKE_DIR" && "$PY" -m behave features/multinode -e "features/enterprise" \
+      --tags="$1" --no-capture --format plain --format html --outfile "$REPORT_DIR/$2.html" )
+  return $?
+}
+
+rc=0
+run_behave "~@destructive" "core" || rc=1
+
+if [ "$RUN_FAILOVER" = 1 ]; then
+  run_behave "@destructive" "failover" || rc=1
+  echo "==> Restoring any killed nodes..."
+  $COMPOSE up -d >/dev/null 2>&1
+  for n in multinode-stirling-1 multinode-stirling-2; do
+    for i in $(seq 1 24); do
+      [ "$(docker inspect -f '{{.State.Health.Status}}' "$n" 2>/dev/null)" = "healthy" ] && break
+      sleep 5
+    done
+  done
+fi
+
+echo
+echo "============================================================"
+echo " Regression run complete. Reports: $REPORT_DIR"
+echo " Exit $rc (non-zero = at least one scenario failed;"
+echo " @known_gap scenarios are expected to fail - see the report)."
+echo " Stack left running: http://localhost:8080  (admin / stirling)"
+echo "============================================================"
+exit $rc
diff --git a/testing/compose/start-multinode-test.sh b/testing/compose/start-multinode-test.sh
new file mode 100644
index 0000000000..d842d68019
--- /dev/null
+++ b/testing/compose/start-multinode-test.sh
@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+# Brings up the multi-node stack (Postgres/Valkey/MinIO/2 app nodes/nginx LB), seeds teams/users/an S3 connection/policies, then leaves it running for manual testing.
+# Usage: ./start-multinode-test.sh [--no-seed | --down]
+set -euo pipefail
+cd "$(dirname "$0")"
+
+COMPOSE="docker compose -f docker-compose-multinode.yml"
+
+if [ "${1:-}" = "--down" ]; then
+  echo "Tearing down multi-node stack + volumes..."
+  $COMPOSE --profile seed down -v --remove-orphans
+  exit 0
+fi
+
+SEED=1
+[ "${1:-}" = "--no-seed" ] && SEED=0
+
+# Cluster mode is licence-gated. Without a valid key the nodes fail the cluster licence gate at boot.
+if [ -z "${PREMIUM_KEY:-}" ]; then
+  echo "WARNING: PREMIUM_KEY is not set - cluster mode needs a valid enterprise/pro licence key."
+  echo "         Run:  export PREMIUM_KEY=<your test licence key>   before starting."
+fi
+
+echo "==> Building the Stirling image (first run compiles the app; be patient)..."
+$COMPOSE build
+
+echo "==> Starting Postgres + Valkey + MinIO + 2 app nodes + nginx..."
+$COMPOSE up -d
+
+echo "==> Waiting for both app nodes to report healthy..."
+for node in multinode-stirling-1 multinode-stirling-2; do
+  for i in $(seq 1 60); do
+    status=$(docker inspect -f '{{.State.Health.Status}}' "$node" 2>/dev/null || echo "starting")
+    [ "$status" = "healthy" ] && { echo "    $node: healthy"; break; }
+    [ "$i" = "60" ] && { echo "    $node did not become healthy; see: $COMPOSE logs $node"; exit 1; }
+    sleep 5
+  done
+done
+
+if [ "$SEED" = "1" ]; then
+  echo "==> Seeding teams / users / S3 connection / policies..."
+  $COMPOSE --profile seed run --rm seed || echo "    (seed reported issues; check output above)"
+fi
+
+cat <<EOF
+
+============================================================================
+ Multi-node Stirling is UP.
+
+   App (via load balancer): http://localhost:8080     (admin / stirling)
+   MinIO console:           http://localhost:9001     (minioadmin / minioadmin)
+   Postgres:                localhost:5434            (stirling / stirling, db 'stirling')
+
+   Seeded users:            user01..user40@stirling.test / Password123!
+   Global API key:          multinode-test-key   (header: X-API-KEY)
+
+ Try it:
+   ./validate-multinode-test.sh        # multi-node smoke tests (optional)
+   $COMPOSE logs -f stirling-1         # tail a node
+   ./start-multinode-test.sh --down    # stop + wipe
+
+ Nodes are reachable directly for cross-node checks:
+   docker compose -f docker-compose-multinode.yml exec stirling-1 curl -s localhost:8080/api/v1/info/status
+============================================================================
+EOF
diff --git a/testing/compose/validate-multinode-test.sh b/testing/compose/validate-multinode-test.sh
new file mode 100644
index 0000000000..c42ba006fe
--- /dev/null
+++ b/testing/compose/validate-multinode-test.sh
@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+# Multi-node smoke tests against a running stack (start-multinode-test.sh): load-balancer spread, cross-node JWT validation (signing keys persist in the shared DB), and processor state visible from every node.
+# Auth: extracts the Bearer JWT from the login body via sed (no jq needed host-side) and hits nodes directly with docker exec.
+# Non-destructive - safe to re-run against the stack at http://localhost:8080.
+set -uo pipefail
+cd "$(dirname "$0")"
+
+LB="http://localhost:8080"
+ADMIN_USER="admin"; ADMIN_PASS="stirling"
+NODES="multinode-stirling-1 multinode-stirling-2"
+# An authed, admin-visible endpoint that returns 200 with a valid token, 401 without.
+PROBE="/api/v1/sources"
+pass=0; fail=0
+ok()   { echo "  PASS - $*"; pass=$((pass+1)); }
+bad()  { echo "  FAIL - $*"; fail=$((fail+1)); }
+
+login() { # -> prints the bearer token
+  curl -s -X POST "$LB/api/v1/auth/login" -H 'Content-Type: application/json' \
+    -d "{\"username\":\"$ADMIN_USER\",\"password\":\"$ADMIN_PASS\"}" \
+    | sed -n 's/.*"access_token":"\([^"]*\)".*/\1/p'
+}
+
+echo "== 1. Load balancer spreads requests across nodes =="
+served=$(for i in $(seq 1 12); do
+  curl -s -D - -o /dev/null "$LB/api/v1/info/status" | tr -d '\r' | awk -F': ' '/^X-Served-By/{print $2}'
+done | sort -u)
+distinct=$(printf '%s\n' "$served" | grep -c .)
+echo "  upstreams seen: $(printf '%s' "$served" | paste -sd, -)"
+[ "$distinct" -ge 2 ] && ok "LB round-robined across $distinct nodes" \
+                       || bad "only $distinct node(s) served (expected >=2; is X-Served-By enabled?)"
+
+echo "== 2. A JWT from the LB is accepted by BOTH nodes directly (shared signing key) =="
+jwt=$(login)
+if [ -z "$jwt" ]; then
+  bad "admin login via LB failed - cannot test cross-node JWT"
+else
+  ok "logged in via LB, got a JWT (${#jwt} chars)"
+  for n in $NODES; do
+    hc=$(docker exec "$n" curl -s -o /dev/null -w '%{http_code}' \
+        -H "Authorization: Bearer $jwt" "http://localhost:8080$PROBE" 2>/dev/null)
+    [ "$hc" = "200" ] && ok "$n accepted the foreign-minted JWT (HTTP 200)" \
+                       || bad "$n rejected the JWT (HTTP $hc) - keys not shared across nodes"
+  done
+fi
+
+echo "== 3. Processor state is shared: each node sees the same sources =="
+count_of() { # $1=node -> number of sources that node reports
+  docker exec "$1" curl -s -H "Authorization: Bearer $jwt" "http://localhost:8080$PROBE" 2>/dev/null \
+    | grep -o '"id"' | grep -c .
+}
+a=$(count_of multinode-stirling-1); b=$(count_of multinode-stirling-2)
+echo "  stirling-1 sources: $a   stirling-2 sources: $b"
+if [ "$a" -gt 0 ] && [ "$a" = "$b" ]; then
+  ok "both nodes report the same $a sources (shared DB)"
+else
+  bad "source counts differ or zero across nodes ($a vs $b)"
+fi
+
+echo "== 4. Seeded org is in the shared DB =="
+users=$(docker exec multinode-postgres psql -U stirling -d stirling -tAc "select count(*) from users" 2>/dev/null | tr -d '[:space:]')
+teams=$(docker exec multinode-postgres psql -U stirling -d stirling -tAc "select count(*) from teams" 2>/dev/null | tr -d '[:space:]')
+conns=$(docker exec multinode-postgres psql -U stirling -d stirling -tAc "select count(*) from integration_configs" 2>/dev/null | tr -d '[:space:]')
+echo "  users=$users teams=$teams integration_configs=$conns"
+[ "${users:-0}" -ge 40 ] && ok "$users users present" || bad "only ${users:-0} users (did the seed run?)"
+[ "${conns:-0}" -ge 1 ]  && ok "$conns S3/integration connection(s) present" || bad "no integration connections"
+
+echo "== 5. Cross-node encrypted-secret read (shared credential key) =="
+# The seed's S3 secret was encrypted by whichever node handled it; fetching it via the LB (either node) and getting a masked, non-error view proves the credential key is shared, not per-node.
+lc=$(curl -s -o /tmp/mn_conns.json -w '%{http_code}' -H "Authorization: Bearer $jwt" "$LB/api/v1/integrations")
+if [ "$lc" = "200" ] && grep -q '"integrationType"' /tmp/mn_conns.json; then
+  ok "integration list decrypts through the LB (HTTP 200) - credential key is shared"
+else
+  bad "integration list failed (HTTP $lc) - credential key may not be shared across nodes"
+fi
+
+echo
+echo "============================================================"
+echo " Multi-node validation: $pass passed, $fail failed."
+echo " Stack left running: $LB  (admin / stirling)"
+echo "============================================================"
+[ "$fail" -eq 0 ]
diff --git a/testing/cucumber/behave.ini b/testing/cucumber/behave.ini
index b6f3417728..0b2a9e4bac 100644
--- a/testing/cucumber/behave.ini
+++ b/testing/cucumber/behave.ini
@@ -1,9 +1,9 @@
 [behave]
-# Enterprise and premium-licensed features live in features/enterprise/.
-# They are excluded from the default CI run because the test environment
-# does not have a commercial licence.  To run them explicitly:
-#
-#   python -m behave features/enterprise
-#
-exclude_re = features/enterprise
+# features/enterprise (needs a commercial licence) and features/multinode (needs the clustered stack in testing/compose/docker-compose-multinode.yml) are excluded by default.
+# Run either directly, e.g. `python -m behave features/enterprise`.
+exclude_re = features/(enterprise|multinode)
 tags = ~@manual
+
+[behave.formatters]
+# Registers the html report formatter (behave-html-formatter) used by run-multinode-regression.sh.
+html = behave_html_formatter:HTMLFormatter
diff --git a/testing/cucumber/features/multinode/cluster_health.feature b/testing/cucumber/features/multinode/cluster_health.feature
new file mode 100644
index 0000000000..def781d895
--- /dev/null
+++ b/testing/cucumber/features/multinode/cluster_health.feature
@@ -0,0 +1,18 @@
+@multinode @health
+Feature: Multi-node cluster health
+
+    Every node must come up healthy and join the shared Valkey backplane - the precondition for the rest of the suite (stack: testing/compose/docker-compose-multinode.yml).
+
+    @smoke
+    Scenario: Both application nodes are healthy
+        Given the multi-node stack is running
+
+    @smoke
+    Scenario: Both nodes joined the Valkey backplane in cluster mode
+        Given the multi-node stack is running
+        And both nodes are cluster members using the Valkey backplane
+
+    Scenario: The load balancer answers the health endpoint
+        Given the multi-node stack is running
+        When I request "/api/v1/info/status" 4 times through the load balancer
+        Then every load-balanced response should be 200
diff --git a/testing/cucumber/features/multinode/connections.feature b/testing/cucumber/features/multinode/connections.feature
new file mode 100644
index 0000000000..c20f615cdd
--- /dev/null
+++ b/testing/cucumber/features/multinode/connections.feature
@@ -0,0 +1,12 @@
+@multinode @connections
+Feature: S3 connections across nodes
+
+    Integration connections are team-scoped, secret-encrypted rows in the shared DB - a connection created via the LB must resolve (secret masked) from every node and deletion must remove it cluster-wide.
+
+    Scenario: A connection created via the LB resolves everywhere, then deletes cluster-wide
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I create an S3 connection named "regr_conn_alpha" via the load balancer
+        Then the connection "regr_conn_alpha" should resolve from every node with its secret masked
+        When I delete the connection via the load balancer
+        Then the connection should be gone from every node
diff --git a/testing/cucumber/features/multinode/cross_node_auth.feature b/testing/cucumber/features/multinode/cross_node_auth.feature
new file mode 100644
index 0000000000..9018004c49
--- /dev/null
+++ b/testing/cucumber/features/multinode/cross_node_auth.feature
@@ -0,0 +1,14 @@
+@multinode @auth
+Feature: Cross-node authentication
+
+    JWTs are signed RS256 and verified by key id, so the signing keys (stored in the shared DB, private half encrypted) must be shared for a token minted on one node to validate on another.
+
+    Scenario: A token minted through the LB validates on every node directly
+        Given the multi-node stack is running
+        And I am logged in as admin
+        Then the current token should be accepted by every node
+
+    Scenario: Signing keys are persisted in the shared database, encrypted
+        Given the multi-node stack is running
+        Then the signing keys should be stored in the shared database
+        And every stored private key should be encrypted at rest
diff --git a/testing/cucumber/features/multinode/failover.feature b/testing/cucumber/features/multinode/failover.feature
new file mode 100644
index 0000000000..bc2453ba76
--- /dev/null
+++ b/testing/cucumber/features/multinode/failover.feature
@@ -0,0 +1,21 @@
+@multinode @failover @destructive
+Feature: Node failover and recovery
+
+    Losing a node must not take the service down: the LB drains it and the survivor keeps serving, then the node rejoins healthy on restart. These scenarios kill/restart containers, so they are @destructive - pass --tags=failover to run them.
+
+    @destructive
+    Scenario: The load balancer keeps serving when a node dies
+        Given the multi-node stack is running
+        When I kill node "2"
+        Then the load balancer should still serve requests
+        When I restart node "2"
+        Then node "2" should become healthy again within 120s
+
+    @destructive
+    Scenario: A recovered node validates tokens minted while it was down
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I kill node "2"
+        And I restart node "2"
+        Then node "2" should become healthy again within 120s
+        And the current token should be accepted by every node
diff --git a/testing/cucumber/features/multinode/load_balancing.feature b/testing/cucumber/features/multinode/load_balancing.feature
new file mode 100644
index 0000000000..b5f14c2be1
--- /dev/null
+++ b/testing/cucumber/features/multinode/load_balancing.feature
@@ -0,0 +1,15 @@
+@multinode @loadbalancing
+Feature: Load balancer distributes across nodes
+
+    Requests must spread across nodes via round-robin with no session affinity, and a client bounced between nodes must never see a spurious failure since the app is stateless at the HTTP layer.
+
+    Scenario: Requests are spread across both nodes
+        Given the multi-node stack is running
+        When I request "/api/v1/info/status" 12 times through the load balancer
+        Then the requests should be served by at least 2 distinct nodes
+
+    Scenario: An authenticated client bounced between nodes never gets a spurious 401
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I request "/api/v1/sources" 12 times through the load balancer
+        Then every load-balanced response should be 200
diff --git a/testing/cucumber/features/multinode/policy_management.feature b/testing/cucumber/features/multinode/policy_management.feature
new file mode 100644
index 0000000000..9a99d72bb5
--- /dev/null
+++ b/testing/cucumber/features/multinode/policy_management.feature
@@ -0,0 +1,19 @@
+@multinode @policy
+Feature: Policy management across nodes
+
+    A policy is durable state in the shared DB, so creating, editing, or deleting it on any node must be reflected on every other node, and both nodes must register the same trigger types.
+
+    Scenario: A policy created on one node is edited and deleted from the other
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I create a policy named "regr_pol_alpha" on node "1"
+        Then the policy "regr_pol_alpha" should be visible from every node
+        When I rename the policy "regr_pol_alpha" to "regr_pol_beta" via the load balancer
+        Then the policy "regr_pol_beta" should be visible from every node
+        When I delete the policy "regr_pol_beta" on node "2"
+        Then the policy "regr_pol_beta" should be absent from every node
+
+    Scenario: Every node registers the same trigger types
+        Given the multi-node stack is running
+        And I am logged in as admin
+        Then the trigger registry should be identical across nodes
diff --git a/testing/cucumber/features/multinode/policy_run_coordination.feature b/testing/cucumber/features/multinode/policy_run_coordination.feature
new file mode 100644
index 0000000000..c89cafe59a
--- /dev/null
+++ b/testing/cucumber/features/multinode/policy_run_coordination.feature
@@ -0,0 +1,10 @@
+@multinode @processor
+Feature: Policy run visibility across nodes
+
+    Run state is projected into the shared job store, so the run-view endpoints (/policies/runs, /run/{runId}) show a run from any node, not only the one that executed it - no sticky-session LB required.
+
+    Scenario: A run executed on one node is visible from every node
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I run the policy "Compress incoming PDFs" on node "1"
+        Then the run should be visible from every node
diff --git a/testing/cucumber/features/multinode/processor_ledger.feature b/testing/cucumber/features/multinode/processor_ledger.feature
new file mode 100644
index 0000000000..62abae6cdc
--- /dev/null
+++ b/testing/cucumber/features/multinode/processor_ledger.feature
@@ -0,0 +1,20 @@
+@multinode @processor
+Feature: Processor pipeline and exactly-once ledger
+
+    A shared processed-file ledger with an atomic (identity_hash, policy_id) primary key ensures exactly-once processing when several nodes race the same scheduled policy; depends on the seeded "Compress incoming PDFs" policy.
+
+    @slow
+    Scenario: Files dropped in the source are processed across the cluster when both
+              nodes trigger the policy at the same instant
+        Given the multi-node stack is running
+        And I am logged in as admin
+        And the processor workspace is clean
+        When I drop 5 PDF file(s) into the S3 source under "incoming/"
+        And I trigger the policy "Compress incoming PDFs" on every node simultaneously
+        Then within 90s every dropped file should be processed across the cluster
+
+    Scenario: The ledger's atomic claim enforces exactly-once
+        Given the multi-node stack is running
+        Then a duplicate ledger claim for the same file and policy is rejected
+
+    # Note: output lands in the source's own bucket so it can be re-ingested; too flaky to assert under consume-mode pruning.
diff --git a/testing/cucumber/features/multinode/rate_limiting.feature b/testing/cucumber/features/multinode/rate_limiting.feature
new file mode 100644
index 0000000000..423d26b308
--- /dev/null
+++ b/testing/cucumber/features/multinode/rate_limiting.feature
@@ -0,0 +1,9 @@
+@multinode @ratelimit
+Feature: Shared rate limiting via the backplane
+
+    Rate limits must be enforced across all nodes, not per node, or a client's effective limit multiplies by the node count - cluster mode routes counters through Valkey (ValkeyRateLimitStore).
+
+    Scenario: Backplane counters are held in Valkey, not per node
+        Given the multi-node stack is running
+        And both nodes are cluster members using the Valkey backplane
+        Then the rate-limit counter should be shared across nodes
diff --git a/testing/cucumber/features/multinode/shared_state.feature b/testing/cucumber/features/multinode/shared_state.feature
new file mode 100644
index 0000000000..60de9dea08
--- /dev/null
+++ b/testing/cucumber/features/multinode/shared_state.feature
@@ -0,0 +1,20 @@
+@multinode @state
+Feature: Shared state across nodes
+
+    All durable state lives in the shared database, so an object created through the LB (landing on whichever node) is immediately visible from every other node - the cluster is a single logical system.
+
+    Scenario: A team created through the LB lands in the shared database
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I create a team named "regr_shared_team" through the load balancer
+        Then the team "regr_shared_team" should exist in the shared database
+
+    Scenario: Every node reports the same sources
+        Given the multi-node stack is running
+        And I am logged in as admin
+        Then every node should report the same number of sources
+
+    Scenario: The seeded org is present in the shared database
+        Given the multi-node stack is running
+        Then the "users" table should contain at least 40 row(s)
+        And the "integration_configs" table should contain at least 1 row(s)
diff --git a/testing/cucumber/features/multinode/source_management.feature b/testing/cucumber/features/multinode/source_management.feature
new file mode 100644
index 0000000000..ff3fd586a2
--- /dev/null
+++ b/testing/cucumber/features/multinode/source_management.feature
@@ -0,0 +1,25 @@
+@multinode @sources
+Feature: Source management across nodes
+
+    Sources are durable state. A source created on one node must be usable from
+    every node, and the guard that stops a referenced source from being deleted
+    must hold across nodes - even when the source and the referencing policy were
+    created on different nodes.
+
+    Scenario: A source created on one node is visible and deletable from the other
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I create an S3 source named "regr_src_alpha" on node "1"
+        Then the source "regr_src_alpha" should be visible from every node
+        When I delete the source "regr_src_alpha" on node "2"
+        Then the source "regr_src_alpha" should be absent from every node
+
+    Scenario: A referenced source cannot be deleted from another node
+        Given the multi-node stack is running
+        And I am logged in as admin
+        When I create an S3 source named "regr_src_ref" on node "1"
+        And I create a policy named "regr_pol_ref" referencing source "regr_src_ref" via the load balancer
+        Then deleting the source "regr_src_ref" from node "2" is rejected because it is referenced
+        When I delete the policy "regr_pol_ref" on node "2"
+        And I delete the source "regr_src_ref" on node "1"
+        Then the source "regr_src_ref" should be absent from every node
diff --git a/testing/cucumber/features/steps/multinode_step_definitions.py b/testing/cucumber/features/steps/multinode_step_definitions.py
new file mode 100644
index 0000000000..e43673dc86
--- /dev/null
+++ b/testing/cucumber/features/steps/multinode_step_definitions.py
@@ -0,0 +1,595 @@
+"""Step definitions for the multi-node regression suite: drive the stack (testing/compose/docker-compose-multinode.yml) via the LB, docker exec curl/psql on individual nodes, and a throwaway minio/mc container."""
+
+import io
+import json
+import subprocess
+import time
+import uuid
+
+import requests
+from behave import given, then, when
+
+LB_URL = "http://localhost:8080"
+NODES = ["multinode-stirling-1", "multinode-stirling-2"]
+PG = "multinode-postgres"
+MINIO = "multinode-minio"
+BUCKET = "policy-data"
+SOURCE_PREFIX = "incoming/"
+OUTPUT_PREFIX = "processed/"
+ADMIN_USER = "admin"
+ADMIN_PASS = "stirling"
+
+
+# --------------------------------------------------------------------------- helpers
+def _sh(args, stdin=None, timeout=60):
+    """Run a command, return (returncode, stdout, stderr)."""
+    r = subprocess.run(
+        args, input=stdin, capture_output=True, timeout=timeout,
+        text=(stdin is None or isinstance(stdin, str)),
+    )
+    out = r.stdout if isinstance(r.stdout, str) else r.stdout.decode("utf-8", "replace")
+    err = r.stderr if isinstance(r.stderr, str) else r.stderr.decode("utf-8", "replace")
+    return r.returncode, out, err
+
+
+def _psql(query):
+    """Run a query against the shared Postgres, return the raw tab/newline output (trimmed)."""
+    rc, out, err = _sh(
+        ["docker", "exec", PG, "psql", "-U", "stirling", "-d", "stirling", "-tAc", query]
+    )
+    assert rc == 0, f"psql failed: {err.strip() or out.strip()}"
+    return out.strip()
+
+
+def _psql_int(query):
+    val = _psql(query)
+    return int(val) if val else 0
+
+
+def _network():
+    rc, out, _ = _sh(
+        ["docker", "inspect", "-f",
+         "{{range $k,$v := .NetworkSettings.Networks}}{{$k}}{{end}}", NODES[0]]
+    )
+    return out.strip() or "compose_stirling-multinode"
+
+
+def _token(context):
+    tok = getattr(context, "jwt_token", None)
+    assert tok, "No JWT token in context - use 'Given I am logged in as admin' first."
+    return tok
+
+
+def _curl_on_node(node, method, path, token=None, data=None, content_type=None, timeout=30):
+    """Hit a node's own :8080 from inside the cluster (bypasses the LB). Returns (status, body)."""
+    cmd = ["docker", "exec", node, "curl", "-s", "-w", "\n%{http_code}", "-X", method]
+    if token:
+        cmd += ["-H", f"Authorization: Bearer {token}"]
+    if content_type:
+        cmd += ["-H", f"Content-Type: {content_type}"]
+    if data is not None:
+        cmd += ["--data", data]
+    cmd.append(f"http://localhost:8080{path}")
+    rc, out, err = _sh(cmd, timeout=timeout)
+    # Body then a newline then the status code; split the status off the end.
+    text = out.rstrip("\n")
+    body, _, status = text.rpartition("\n")
+    return (int(status.strip()) if status.strip().isdigit() else 0), body
+
+
+def _node(idx):
+    return NODES[int(idx) - 1]
+
+
+def _names_on_node(node, path, token):
+    """GET a list endpoint on a node and return the set of resource names it reports."""
+    status, body = _curl_on_node(node, "GET", path, token=token)
+    assert status == 200, f"{node} GET {path} returned HTTP {status}: {body[:150]}"
+    try:
+        data = json.loads(body)
+    except ValueError:
+        return set()
+    items = data if isinstance(data, list) else data.get(path.rsplit("/", 1)[-1], []) \
+        or data.get("sources", []) or data.get("policies", [])
+    return {i.get("name") for i in items if isinstance(i, dict)}
+
+
+def _policy_body(name, source_ids=None, enabled=True):
+    return json.dumps({
+        "name": name, "enabled": enabled, "trigger": None,
+        "sourceIds": source_ids or [],
+        "steps": [{"operation": "/api/v1/misc/compress-pdf", "parameters": {}}],
+        "output": {"type": "inline", "options": {}},
+    })
+
+
+def _any_connection_id(context):
+    """Id of any usable S3 connection (the seed creates one). Cached on the context."""
+    cid = getattr(context, "_seed_conn_id", None)
+    if cid:
+        return cid
+    r = requests.get(f"{LB_URL}/api/v1/integrations",
+                     headers={"Authorization": f"Bearer {_token(context)}"}, timeout=15)
+    assert r.status_code == 200, f"list integrations failed: HTTP {r.status_code}"
+    s3 = next((c for c in r.json() if c.get("integrationType") == "S3"), None)
+    assert s3, "no S3 connection available (did the seed run?)"
+    context._seed_conn_id = s3["id"]
+    return s3["id"]
+
+
+def _s3_source_body(name, connection_id):
+    # Folder sources are config-gated; S3 sources against the seeded connection always work.
+    return json.dumps({
+        "name": name, "type": "s3",
+        "options": {"connectionId": connection_id, "prefix": "regr/", "mode": "snapshot"},
+        "enabled": True,
+    })
+
+
+def _source_id_by_name(context, name):
+    r = requests.get(f"{LB_URL}/api/v1/sources",
+                     headers={"Authorization": f"Bearer {_token(context)}"}, timeout=15)
+    assert r.status_code == 200, f"list sources failed: HTTP {r.status_code}"
+    return next((s["id"] for s in r.json().get("sources", []) if s.get("name") == name), None)
+
+
+def _s3_connection_body(name):
+    return json.dumps({
+        "integrationType": "S3", "name": name, "scope": "SERVER", "enabled": True,
+        "locked": False, "defaultAccess": "ORG_ALL",
+        "config": {"bucket": BUCKET, "region": "us-east-1", "endpoint": "http://minio:9000",
+                   "accessKeyId": "minioadmin", "secretAccessKey": "minioadmin",
+                   "pathStyleAccess": True},
+    })
+
+
+def _lb_login(context):
+    r = requests.post(f"{LB_URL}/api/v1/auth/login",
+                      json={"username": ADMIN_USER, "password": ADMIN_PASS}, timeout=15)
+    assert r.status_code == 200, f"admin login via LB failed: HTTP {r.status_code}"
+    context.jwt_token = r.json()["session"]["access_token"]
+
+
+def _pdf_bytes(marker):
+    """A minimal valid single-page PDF carrying a unique marker (so outputs are identifiable)."""
+    try:
+        from reportlab.pdfgen import canvas
+        buf = io.BytesIO()
+        c = canvas.Canvas(buf)
+        c.drawString(100, 750, f"multinode-regression {marker}")
+        c.showPage()
+        c.save()
+        return buf.getvalue()
+    except Exception:
+        # Fallback: a hand-rolled minimal PDF if reportlab is unavailable.
+        return (b"%PDF-1.4\n1 0 obj<</Type/Catalog/Pages 2 0 R>>endobj\n"
+                b"2 0 obj<</Type/Pages/Kids[3 0 R]/Count 1>>endobj\n"
+                b"3 0 obj<</Type/Page/Parent 2 0 R/MediaBox[0 0 612 792]>>endobj\n"
+                b"trailer<</Root 1 0 R>>\n%%EOF")
+
+
+def _mc(context, script, stdin=None):
+    """Run an mc script in a throwaway minio/mc container on the cluster network."""
+    net = getattr(context, "_net", None) or _network()
+    context._net = net
+    full = f"mc alias set local http://minio:9000 minioadmin minioadmin >/dev/null 2>&1 && {script}"
+    args = ["docker", "run", "-i", "--rm", "--network", net, "--entrypoint", "/bin/sh",
+            "minio/mc", "-c", full]
+    return _sh(args, stdin=stdin, timeout=90)
+
+
+def _policy_id_by_name(context, name):
+    r = requests.get(f"{LB_URL}/api/v1/policies",
+                     headers={"Authorization": f"Bearer {_token(context)}"}, timeout=15)
+    assert r.status_code == 200, f"list policies failed: HTTP {r.status_code}"
+    data = r.json()
+    items = data if isinstance(data, list) else data.get("policies", [])
+    for p in items:
+        if p.get("name") == name:
+            return p.get("id")
+    return None
+
+
+# --------------------------------------------------------------------------- preconditions
+@given("the multi-node stack is running")
+def step_stack_running(context):
+    for node in NODES:
+        rc, out, _ = _sh(["docker", "inspect", "-f", "{{.State.Health.Status}}", node])
+        assert rc == 0 and out.strip() == "healthy", f"{node} is not healthy (got '{out.strip()}')"
+    context._net = _network()
+
+
+@given("both nodes are cluster members using the Valkey backplane")
+def step_cluster_members(context):
+    for node in NODES:
+        rc, out, err = _sh(["docker", "logs", node])
+        logs = out + err
+        assert "backplane=valkey" in logs, f"{node} did not join the Valkey backplane"
+
+
+# --------------------------------------------------------------------------- load balancer
+@when('I request "{endpoint}" {count:d} times through the load balancer')
+def step_lb_requests(context, endpoint, count):
+    context._served_by = []
+    context._lb_statuses = []
+    headers = {}
+    if getattr(context, "jwt_token", None):
+        headers["Authorization"] = f"Bearer {context.jwt_token}"
+    for _ in range(count):
+        r = requests.get(f"{LB_URL}{endpoint}", headers=headers, timeout=15)
+        context._lb_statuses.append(r.status_code)
+        node = r.headers.get("X-Served-By")
+        if node:
+            context._served_by.append(node)
+
+
+@then("the requests should be served by at least {n:d} distinct nodes")
+def step_distinct_nodes(context, n):
+    distinct = set(context._served_by)
+    assert len(distinct) >= n, (
+        f"expected >= {n} distinct upstreams, saw {sorted(distinct)} "
+        f"(is the X-Served-By header configured on the LB?)")
+
+
+@then("every load-balanced response should be {code:d}")
+def step_all_lb_ok(context, code):
+    bad = [s for s in context._lb_statuses if s != code]
+    assert not bad, f"expected all {code}, got failures: {bad}"
+
+
+# --------------------------------------------------------------------------- cross-node auth
+@then("the current token should be accepted by every node")
+def step_token_every_node(context):
+    token = _token(context)
+    for node in NODES:
+        status, body = _curl_on_node(node, "GET", "/api/v1/sources", token=token)
+        assert status == 200, f"{node} rejected the LB-minted token (HTTP {status}): {body[:200]}"
+
+
+@then("the signing keys should be stored in the shared database")
+def step_keys_in_db(context):
+    assert _psql_int("select count(*) from jwt_signing_keys") >= 1, \
+        "no rows in jwt_signing_keys - keys are not persisted in the shared DB"
+
+
+@then("every stored private key should be encrypted at rest")
+def step_keys_encrypted(context):
+    # A plaintext PKCS#8 RSA key base64 begins with 'MII'; an encrypted blob does not.
+    plaintext = _psql_int("select count(*) from jwt_signing_keys where signing_key like 'MII%'")
+    assert plaintext == 0, f"{plaintext} signing key(s) look like plaintext PKCS#8 (not encrypted)"
+
+
+# --------------------------------------------------------------------------- shared state
+@when('I create a team named "{name}" through the load balancer')
+def step_create_team(context, name):
+    context._team_name = name
+    r = requests.post(f"{LB_URL}/api/v1/team/create",
+                      headers={"Authorization": f"Bearer {_token(context)}"},
+                      data={"name": name}, timeout=15)
+    assert r.status_code in (200, 201, 409), f"create team failed: HTTP {r.status_code}"
+
+
+@then('the team "{name}" should exist in the shared database')
+def step_team_in_db(context, name):
+    n = _psql_int(f"select count(*) from teams where name = '{name}'")
+    assert n >= 1, f"team '{name}' not found in the shared DB"
+
+
+@then("every node should report the same number of sources")
+def step_same_sources(context):
+    token = _token(context)
+    counts = {}
+    for node in NODES:
+        status, body = _curl_on_node(node, "GET", "/api/v1/sources", token=token)
+        assert status == 200, f"{node} /sources returned HTTP {status}"
+        counts[node] = body.count('"id"')
+    values = set(counts.values())
+    assert len(values) == 1 and values != {0}, f"source counts differ across nodes: {counts}"
+
+
+@then('the "{table}" table should contain at least {n:d} row(s)')
+def step_table_rows(context, table, n):
+    got = _psql_int(f"select count(*) from {table}")
+    assert got >= n, f"{table} has {got} rows, expected >= {n}"
+
+
+# --------------------------------------------------------------------------- processor / ledger
+@given("the processor workspace is clean")
+def step_clean_workspace(context):
+    # Start from a known state so file/output/ledger counts reflect only this scenario.
+    _mc(context, f"mc rm --recursive --force local/{BUCKET}/{SOURCE_PREFIX} || true")
+    _mc(context, f"mc rm --recursive --force local/{BUCKET}/{OUTPUT_PREFIX} || true")
+    _psql("delete from policy_processed_files")
+
+
+@when('I drop {count:d} PDF file(s) into the S3 source under "{prefix}"')
+def step_drop_files(context, count, prefix):
+    context._dropped = []
+    for _ in range(count):
+        marker = uuid.uuid4().hex[:12]
+        key = f"{prefix}regr-{marker}.pdf"
+        rc, out, err = _mc(context, f"mc pipe local/{BUCKET}/{key}", stdin=_pdf_bytes(marker))
+        assert rc == 0, f"failed to upload {key}: {err.strip() or out.strip()}"
+        context._dropped.append(key)
+
+
+@when('I trigger the policy "{name}" on every node simultaneously')
+def step_trigger_all_nodes(context, name):
+    pid = _policy_id_by_name(context, name)
+    assert pid, f"policy '{name}' not found"
+    context._policy_id = pid
+    token = _token(context)
+    # Fire the trigger on both nodes as close together as possible to race the ledger claim.
+    for node in NODES:
+        _curl_on_node(node, "POST", f"/api/v1/policies/{pid}/trigger", token=token, timeout=15)
+
+
+@then("within {seconds:d}s every dropped file should be processed across the cluster")
+def step_files_processed(context, seconds):
+    # Consume-mode deletes processed files, so an empty source prefix signals every file was processed (ledger rows are pruned too, so counting them would be racy).
+    deadline = time.monotonic() + seconds
+    remaining = None
+    while time.monotonic() < deadline:
+        rc, out, _ = _mc(context, f"mc ls --recursive local/{BUCKET}/{SOURCE_PREFIX} | wc -l")
+        remaining = int(out.strip() or "0") if rc == 0 else -1
+        if remaining == 0:
+            break
+        time.sleep(3)
+    assert remaining == 0, (
+        f"{remaining} of {len(context._dropped)} dropped files were still unprocessed after "
+        f"{seconds}s")
+    for node in NODES:
+        rc, out, _ = _sh(["docker", "inspect", "-f", "{{.State.Status}}", node])
+        assert out.strip() == "running", f"{node} crashed during concurrent processing"
+
+
+@then("a duplicate ledger claim for the same file and policy is rejected")
+def step_ledger_claim_atomic(context):
+    # Exactly-once relies on the (identity_hash, policy_id) primary key: two nodes claiming the same file both insert it, but only one wins; this proves the constraint rejects the second claim.
+    ihash = "regr-" + uuid.uuid4().hex
+    pol = "regr-policy-" + uuid.uuid4().hex[:8]
+    insert = (f"insert into policy_processed_files (identity_hash, policy_id, status, attempts) "
+              f"values ('{ihash}', '{pol}', 'PROCESSING', 1)")
+    _psql(insert)  # first claim wins
+    rc, out, err = _sh(["docker", "exec", PG, "psql", "-U", "stirling", "-d", "stirling",
+                        "-tAc", insert])  # second claim must be rejected
+    _psql(f"delete from policy_processed_files where identity_hash = '{ihash}'")
+    assert rc != 0 and "duplicate key" in (out + err).lower(), (
+        "a second claim for the same file and policy was NOT rejected - the ledger's exactly-once "
+        "guarantee is not enforced by the primary key")
+
+
+# --------------------------------------------------------------------------- policy run coordination (gap)
+@when('I run the policy "{name}" on node "{idx}"')
+def step_run_policy_on_node(context, name, idx):
+    node = _node(idx)
+    context._run_node = node
+    pid = _policy_id_by_name(context, name)
+    assert pid, f"policy '{name}' not found"
+    # Drop an input so the trigger actually produces a run (the source is otherwise empty).
+    marker = uuid.uuid4().hex[:12]
+    _mc(context, f"mc pipe local/{BUCKET}/{SOURCE_PREFIX}runvis-{marker}.pdf",
+        stdin=_pdf_bytes(marker))
+    status, _ = _curl_on_node(node, "POST", f"/api/v1/policies/{pid}/trigger", token=_token(context))
+    assert status in (200, 202), f"triggering the policy on {node} failed: HTTP {status}"
+    # Grab the runId that node recorded for the run it just executed.
+    context._run_id = None
+    for _ in range(8):
+        s, body = _curl_on_node(node, "GET", "/api/v1/policies/runs", token=_token(context))
+        runs = json.loads(body) if s == 200 and body.strip().startswith("[") else []
+        if runs:
+            context._run_id = runs[0]["runId"]
+            break
+        time.sleep(2)
+    assert context._run_id, f"{node} recorded no run after triggering '{name}'"
+
+
+@then("the run should be visible from every node")
+def step_run_visible_every(context):
+    for node in NODES:
+        status, body = _curl_on_node(node, "GET", "/api/v1/policies/runs", token=_token(context))
+        assert status == 200, f"{node} /policies/runs returned HTTP {status}"
+        run_ids = [r.get("runId") for r in json.loads(body)] if body.strip().startswith("[") else []
+        assert context._run_id in run_ids, (
+            f"run {context._run_id} (executed on {context._run_node}) is not visible from {node} - "
+            f"PolicyRunRegistry is a per-node in-JVM map, so run status and cancellation do not "
+            f"cross nodes")
+
+
+# --------------------------------------------------------------------------- rate limiting
+@then("the rate-limit counter should be shared across nodes")
+def step_ratelimit_shared(context):
+    # In cluster mode the ValkeyRateLimitStore holds counters in Valkey; probe that a key exists.
+    net = context._net or _network()
+    rc, out, err = _sh(["docker", "run", "--rm", "--network", net, "--entrypoint", "/bin/sh",
+                        "valkey/valkey:8-alpine", "-c",
+                        "valkey-cli -h valkey keys '*'"], timeout=30)
+    assert rc == 0, f"valkey probe failed: {err.strip()}"
+    assert out.strip(), "no keys in Valkey - rate-limit/backplane state is not shared"
+
+
+# --------------------------------------------------------------------------- failover
+@when('I kill node "{idx}"')
+def step_kill_node(context, idx):
+    node = NODES[int(idx) - 1]
+    context._killed = getattr(context, "_killed", [])
+    _sh(["docker", "kill", node])
+    context._killed.append(node)
+    time.sleep(2)
+
+
+@then("the load balancer should still serve requests")
+def step_lb_survives(context):
+    ok = 0
+    for _ in range(6):
+        try:
+            r = requests.get(f"{LB_URL}/api/v1/info/status", timeout=10)
+            if r.status_code == 200:
+                ok += 1
+        except requests.RequestException:
+            pass
+    assert ok >= 4, f"LB served only {ok}/6 requests with a node down (does it drain dead nodes?)"
+
+
+@when('I restart node "{idx}"')
+def step_restart_node(context, idx):
+    node = NODES[int(idx) - 1]
+    _sh(["docker", "start", node])
+    context._killed = [n for n in getattr(context, "_killed", []) if n != node]
+
+
+@then('node "{idx}" should become healthy again within {seconds:d}s')
+def step_node_recovers(context, idx, seconds):
+    node = NODES[int(idx) - 1]
+    deadline = time.monotonic() + seconds
+    while time.monotonic() < deadline:
+        rc, out, _ = _sh(["docker", "inspect", "-f", "{{.State.Health.Status}}", node])
+        if out.strip() == "healthy":
+            return
+        time.sleep(5)
+    raise AssertionError(f"{node} did not become healthy within {seconds}s")
+
+
+# ------------------------------------------------- policy / source / connection management (CRUD)
+def _auth(context):
+    return {"Authorization": f"Bearer {_token(context)}"}
+
+
+# --- policies ---
+@when('I create a policy named "{name}" on node "{idx}"')
+def step_create_policy_on_node(context, name, idx):
+    status, body = _curl_on_node(_node(idx), "POST", "/api/v1/policies", token=_token(context),
+                                 data=_policy_body(name), content_type="application/json")
+    assert status in (200, 201), f"create policy on {_node(idx)} failed: HTTP {status}: {body[:200]}"
+
+
+@when('I create a policy named "{name}" referencing source "{src}" via the load balancer')
+def step_create_policy_ref(context, name, src):
+    sid = _source_id_by_name(context, src)
+    assert sid, f"source '{src}' not found"
+    r = requests.post(f"{LB_URL}/api/v1/policies",
+                      headers={**_auth(context), "Content-Type": "application/json"},
+                      data=_policy_body(name, [sid]), timeout=15)
+    assert r.status_code in (200, 201), f"create referencing policy failed: HTTP {r.status_code}"
+
+
+@when('I rename the policy "{old}" to "{new}" via the load balancer')
+def step_rename_policy(context, old, new):
+    pid = _policy_id_by_name(context, old)
+    assert pid, f"policy '{old}' not found"
+    pol = requests.get(f"{LB_URL}/api/v1/policies/{pid}", headers=_auth(context), timeout=15).json()
+    pol["name"] = new
+    r = requests.post(f"{LB_URL}/api/v1/policies",
+                      headers={**_auth(context), "Content-Type": "application/json"},
+                      json=pol, timeout=15)
+    assert r.status_code in (200, 201), f"rename policy failed: HTTP {r.status_code}"
+
+
+@when('I delete the policy "{name}" on node "{idx}"')
+def step_delete_policy_on_node(context, name, idx):
+    pid = _policy_id_by_name(context, name)
+    assert pid, f"policy '{name}' not found"
+    status, body = _curl_on_node(_node(idx), "DELETE", f"/api/v1/policies/{pid}", token=_token(context))
+    assert status in (200, 204), f"delete policy on {_node(idx)} failed: HTTP {status}"
+
+
+@then('the policy "{name}" should be visible from every node')
+def step_policy_visible(context, name):
+    for node in NODES:
+        names = _names_on_node(node, "/api/v1/policies", _token(context))
+        assert name in names, f"{node} does not see policy '{name}' (sees {sorted(names)})"
+
+
+@then('the policy "{name}" should be absent from every node')
+def step_policy_absent(context, name):
+    for node in NODES:
+        names = _names_on_node(node, "/api/v1/policies", _token(context))
+        assert name not in names, f"{node} still sees deleted policy '{name}'"
+
+
+@then("the trigger registry should be identical across nodes")
+def step_triggers_identical(context):
+    seen = {}
+    for node in NODES:
+        status, body = _curl_on_node(node, "GET", "/api/v1/policies/triggers", token=_token(context))
+        assert status == 200, f"{node} GET /policies/triggers returned HTTP {status}"
+        items = json.loads(body)
+        # Trigger descriptors are dicts; normalise to a canonical, order-independent form.
+        seen[node] = sorted(json.dumps(t, sort_keys=True) for t in items)
+    a, b = (seen[n] for n in NODES)
+    assert a == b, f"trigger registry differs across nodes: {seen}"
+
+
+# --- sources ---
+@when('I create an S3 source named "{name}" on node "{idx}"')
+def step_create_source_on_node(context, name, idx):
+    conn = _any_connection_id(context)
+    status, body = _curl_on_node(_node(idx), "POST", "/api/v1/sources", token=_token(context),
+                                 data=_s3_source_body(name, conn), content_type="application/json")
+    assert status in (200, 201), f"create source on {_node(idx)} failed: HTTP {status}: {body[:200]}"
+
+
+@when('I delete the source "{name}" on node "{idx}"')
+def step_delete_source_on_node(context, name, idx):
+    sid = _source_id_by_name(context, name)
+    assert sid, f"source '{name}' not found"
+    status, body = _curl_on_node(_node(idx), "DELETE", f"/api/v1/sources/{sid}", token=_token(context))
+    assert status in (200, 204), f"delete source on {_node(idx)} failed: HTTP {status}"
+
+
+@then('the source "{name}" should be visible from every node')
+def step_source_visible(context, name):
+    for node in NODES:
+        names = _names_on_node(node, "/api/v1/sources", _token(context))
+        assert name in names, f"{node} does not see source '{name}' (sees {sorted(names)})"
+
+
+@then('the source "{name}" should be absent from every node')
+def step_source_absent(context, name):
+    for node in NODES:
+        names = _names_on_node(node, "/api/v1/sources", _token(context))
+        assert name not in names, f"{node} still sees deleted source '{name}'"
+
+
+@then('deleting the source "{name}" from node "{idx}" is rejected because it is referenced')
+def step_source_delete_guarded(context, name, idx):
+    sid = _source_id_by_name(context, name)
+    assert sid, f"source '{name}' not found"
+    status, body = _curl_on_node(_node(idx), "DELETE", f"/api/v1/sources/{sid}", token=_token(context))
+    assert status == 409, (
+        f"expected 409 (source referenced by a policy created on another node), got HTTP {status}")
+
+
+# --- connections (integration configs) ---
+@when('I create an S3 connection named "{name}" via the load balancer')
+def step_create_conn(context, name):
+    r = requests.post(f"{LB_URL}/api/v1/integrations",
+                      headers={**_auth(context), "Content-Type": "application/json"},
+                      data=_s3_connection_body(name), timeout=15)
+    assert r.status_code in (200, 201), f"create connection failed: HTTP {r.status_code}: {r.text[:200]}"
+    context._conn_id = r.json()["id"]
+
+
+@then('the connection "{name}" should resolve from every node with its secret masked')
+def step_conn_resolves(context, name):
+    cid = context._conn_id
+    for node in NODES:
+        status, body = _curl_on_node(node, "GET", f"/api/v1/integrations/{cid}", token=_token(context))
+        assert status == 200, f"{node} cannot resolve connection {cid}: HTTP {status}"
+        secret = json.loads(body).get("config", {}).get("secretAccessKey")
+        assert secret in (None, "", "********"), f"{node} leaked the connection secret on read"
+
+
+@when('I delete the connection via the load balancer')
+def step_delete_conn(context):
+    r = requests.delete(f"{LB_URL}/api/v1/integrations/{context._conn_id}",
+                        headers=_auth(context), timeout=15)
+    assert r.status_code in (200, 204), f"delete connection failed: HTTP {r.status_code}"
+
+
+@then("the connection should be gone from every node")
+def step_conn_absent(context):
+    cid = context._conn_id
+    for node in NODES:
+        status, _ = _curl_on_node(node, "GET", f"/api/v1/integrations/{cid}", token=_token(context))
+        assert status in (403, 404), f"{node} still resolves deleted connection {cid}: HTTP {status}"

From a2ff8f8c8c74f1d92a73e6f2f9ceaf0ae3eca552 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 18:52:12 +0100
Subject: [PATCH 027/122] build(deps): bump step-security/harden-runner from
 2.19.3 to 2.20.0 (#7066)

Bumps
[step-security/harden-runner](https://github.com/step-security/harden-runner)
from 2.19.3 to 2.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's
releases</a>.</em></p>
<blockquote>
<h2>v2.20.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Support for block policy for MacOS and Windows GitHub-hosted
runners</li>
<li>Support for Bitrise MacOS GitHub Actions runners</li>
<li>HTTPS monitoring support for Bun for Linux runners (enterprise
tier)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2.19.4...v2.20.0">https://github.com/step-security/harden-runner/compare/v2.19.4...v2.20.0</a></p>
<h2>v2.19.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Improvements for HTTPS Monitoring for the Enterprise tier of Harden
Runner</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2.19.3...v2.19.4">https://github.com/step-security/harden-runner/compare/v2.19.3...v2.19.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/step-security/harden-runner/commit/bf7454d06d71f1098171f2acdf0cd4708d7b5920"><code>bf7454d</code></a>
Merge pull request <a
href="https://redirect.github.com/step-security/harden-runner/issues/673">#673</a>
from step-security/fix/aggregate-error-startup-hang</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/1188420976b49762617c32cc010cba50a9fd7a71"><code>1188420</code></a>
Update non-TLS agent to v0.16.2</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/162cfeac170141192dc6d57ade86ddf59448ad96"><code>162cfea</code></a>
Update non-TLS agent to v0.16.1</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/eb9e1f4943b602b6f338f6f79468e812c2c6b320"><code>eb9e1f4</code></a>
Bring macOS runner updates from PR 674</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/1a10b01783c147498a6dee4fa4e7122325762720"><code>1a10b01</code></a>
Update Windows agent to v1.0.7</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/8b4a105ef5119b20c97c1566b0275b9399ae188d"><code>8b4a105</code></a>
Apply npm audit fixes with release-age cooldown</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/3626e0327723bef1c4e6b01750518eccd380a5df"><code>3626e03</code></a>
Default TLS status check failures to enabled</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/100e08b39cfd419c292df7becc379b0305ac0628"><code>100e08b</code></a>
Update agent-ebpf to v1.8.12</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/774f75f2c6334606d2d3d910a663f93c9ea49b3b"><code>774f75f</code></a>
Update agent to v1.8.9</li>
<li><a
href="https://github.com/step-security/harden-runner/commit/f312657a64c745fae39c2c66cc7c7f7bc4c804d8"><code>f312657</code></a>
Extend missing-agent-dir guard to Linux and macOS cleanup paths</li>
<li>Additional commits viewable in <a
href="https://github.com/step-security/harden-runner/compare/ab7a9404c0f3da075243ca237b5fac12c98deaa5...bf7454d06d71f1098171f2acdf0cd4708d7b5920">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Auto-Deploy-V2.yml                | 6 +++---
 .github/workflows/PR-Demo-Comment-with-react.yml       | 6 +++---
 .github/workflows/PR-Demo-cleanup.yml                  | 2 +-
 .github/workflows/_runner-pick.yml                     | 2 +-
 .github/workflows/ai-engine.yml                        | 2 +-
 .github/workflows/ai_pr_title_review.yml               | 2 +-
 .github/workflows/aur-publish.yml                      | 4 ++--
 .github/workflows/auto-labelerV2.yml                   | 2 +-
 .github/workflows/backend-build.yml                    | 2 +-
 .github/workflows/build-enterprise.yml                 | 4 ++--
 .github/workflows/build.yml                            | 4 ++--
 .github/workflows/check-generated-models.yml           | 2 +-
 .github/workflows/check-licence.yml                    | 2 +-
 .github/workflows/check-openapi.yml                    | 2 +-
 .github/workflows/check_toml.yml                       | 2 +-
 .github/workflows/coverage-aggregate.yml               | 2 +-
 .github/workflows/db-migration-test.yml                | 2 +-
 .github/workflows/dependency-review.yml                | 2 +-
 .github/workflows/deploy-on-v2-commit.yml              | 2 +-
 .github/workflows/docker-compose-tests.yml             | 2 +-
 .github/workflows/e2e-live.yml                         | 2 +-
 .github/workflows/e2e-stubbed.yml                      | 2 +-
 .github/workflows/frontend-a11y.yml                    | 2 +-
 .github/workflows/frontend-backend-licenses-update.yml | 6 +++---
 .github/workflows/frontend-validation.yml              | 2 +-
 .github/workflows/manage-label.yml                     | 2 +-
 .github/workflows/multiOSReleases.yml                  | 8 ++++----
 .github/workflows/nightly.yml                          | 4 ++--
 .github/workflows/package-managers.yml                 | 4 ++--
 .github/workflows/pr-conflict-labeler.yml              | 2 +-
 .github/workflows/pre_commit.yml                       | 2 +-
 .github/workflows/push-docker-base.yml                 | 2 +-
 .github/workflows/push-docker.yml                      | 2 +-
 .github/workflows/rollback-latest.yml                  | 2 +-
 .github/workflows/scorecards.yml                       | 2 +-
 .github/workflows/stale.yml                            | 2 +-
 .github/workflows/swagger.yml                          | 2 +-
 .github/workflows/sync-portal-docs.yml                 | 2 +-
 .github/workflows/sync_files_v2.yml                    | 2 +-
 .github/workflows/tauri-build.yml                      | 8 ++++----
 .github/workflows/test-build-docker.yml                | 4 ++--
 .github/workflows/testdriver.yml                       | 8 ++++----
 42 files changed, 63 insertions(+), 63 deletions(-)

diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index 7f0d307987..260774f799 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -35,7 +35,7 @@ jobs:
       pr_ref: ${{ steps.resolve.outputs.ref }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -115,7 +115,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -456,7 +456,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index 2b81b8c777..85bb9aa6d3 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -70,7 +70,7 @@ jobs:
       enable_prototypes: ${{ steps.check-prototypes-flag.outputs.enable_prototypes }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -183,7 +183,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -474,7 +474,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/PR-Demo-cleanup.yml b/.github/workflows/PR-Demo-cleanup.yml
index ab30d29cdb..146f5c7f78 100644
--- a/.github/workflows/PR-Demo-cleanup.yml
+++ b/.github/workflows/PR-Demo-cleanup.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/_runner-pick.yml b/.github/workflows/_runner-pick.yml
index 0f32d79b95..0b3f76a8cd 100644
--- a/.github/workflows/_runner-pick.yml
+++ b/.github/workflows/_runner-pick.yml
@@ -38,7 +38,7 @@ jobs:
       is_fork: ${{ steps.decide.outputs.is_fork }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/ai-engine.yml b/.github/workflows/ai-engine.yml
index fbc9848eaf..608ac07703 100644
--- a/.github/workflows/ai-engine.yml
+++ b/.github/workflows/ai-engine.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/ai_pr_title_review.yml b/.github/workflows/ai_pr_title_review.yml
index 7ac480c815..563e94c9b3 100644
--- a/.github/workflows/ai_pr_title_review.yml
+++ b/.github/workflows/ai_pr_title_review.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/aur-publish.yml b/.github/workflows/aur-publish.yml
index 8371695856..3238750171 100644
--- a/.github/workflows/aur-publish.yml
+++ b/.github/workflows/aur-publish.yml
@@ -26,7 +26,7 @@ jobs:
       jar_sha256: ${{ steps.hashes.outputs.jar_sha256 }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -70,7 +70,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/auto-labelerV2.yml b/.github/workflows/auto-labelerV2.yml
index 96700ef2a0..6039c0e7df 100644
--- a/.github/workflows/auto-labelerV2.yml
+++ b/.github/workflows/auto-labelerV2.yml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/backend-build.yml b/.github/workflows/backend-build.yml
index 0479f91f0e..4d133593d3 100644
--- a/.github/workflows/backend-build.yml
+++ b/.github/workflows/backend-build.yml
@@ -28,7 +28,7 @@ jobs:
         flavor: [core, proprietary, saas]
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index ce06352996..7218cfb7f7 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -50,7 +50,7 @@ jobs:
       SYSTEM_ENABLEANALYTICS: "false"
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
@@ -314,7 +314,7 @@ jobs:
       MN_COMPOSE: docker-compose-multinode.yml
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fc8346af30..07dbb781da 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,7 +48,7 @@ jobs:
       proprietary: ${{ steps.changes.outputs.proprietary }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
@@ -267,7 +267,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index eef119cd02..a4916954db 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -23,7 +23,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/check-licence.yml b/.github/workflows/check-licence.yml
index 9f6cfb39a0..c9f64a0b93 100644
--- a/.github/workflows/check-licence.yml
+++ b/.github/workflows/check-licence.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/check-openapi.yml b/.github/workflows/check-openapi.yml
index d853afa86f..eb89d32629 100644
--- a/.github/workflows/check-openapi.yml
+++ b/.github/workflows/check-openapi.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/check_toml.yml b/.github/workflows/check_toml.yml
index 279e57f95d..baee0aa54a 100644
--- a/.github/workflows/check_toml.yml
+++ b/.github/workflows/check_toml.yml
@@ -27,7 +27,7 @@ jobs:
       pull-requests: write # Allow writing to pull requests
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/coverage-aggregate.yml b/.github/workflows/coverage-aggregate.yml
index 42aa971971..e3a871b08e 100644
--- a/.github/workflows/coverage-aggregate.yml
+++ b/.github/workflows/coverage-aggregate.yml
@@ -34,7 +34,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/db-migration-test.yml b/.github/workflows/db-migration-test.yml
index c6ebc481a7..8bd28fc060 100644
--- a/.github/workflows/db-migration-test.yml
+++ b/.github/workflows/db-migration-test.yml
@@ -17,7 +17,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 1449123eff..07f1f8ce1a 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/deploy-on-v2-commit.yml b/.github/workflows/deploy-on-v2-commit.yml
index 2dcbe2ae65..69c5d11e9a 100644
--- a/.github/workflows/deploy-on-v2-commit.yml
+++ b/.github/workflows/deploy-on-v2-commit.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/docker-compose-tests.yml b/.github/workflows/docker-compose-tests.yml
index 68bc1722be..81b757ab42 100644
--- a/.github/workflows/docker-compose-tests.yml
+++ b/.github/workflows/docker-compose-tests.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/e2e-live.yml b/.github/workflows/e2e-live.yml
index a082f89bf5..43003f7e25 100644
--- a/.github/workflows/e2e-live.yml
+++ b/.github/workflows/e2e-live.yml
@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/e2e-stubbed.yml b/.github/workflows/e2e-stubbed.yml
index 214a7188df..8ef1218677 100644
--- a/.github/workflows/e2e-stubbed.yml
+++ b/.github/workflows/e2e-stubbed.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/frontend-a11y.yml b/.github/workflows/frontend-a11y.yml
index f4d3e3b93a..1eefd8ce75 100644
--- a/.github/workflows/frontend-a11y.yml
+++ b/.github/workflows/frontend-a11y.yml
@@ -26,7 +26,7 @@ jobs:
     timeout-minutes: 25
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/frontend-backend-licenses-update.yml b/.github/workflows/frontend-backend-licenses-update.yml
index 3ba484bf67..38279d5341 100644
--- a/.github/workflows/frontend-backend-licenses-update.yml
+++ b/.github/workflows/frontend-backend-licenses-update.yml
@@ -28,7 +28,7 @@ jobs:
       licenses-backend: ${{ steps.changes.outputs.licenses-backend }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -52,7 +52,7 @@ jobs:
       repository-projects: write # Required for enabling automerge
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -326,7 +326,7 @@ jobs:
       repository-projects: write # Required for enabling automerge
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/frontend-validation.yml b/.github/workflows/frontend-validation.yml
index 0e0a35a25e..9babe3c078 100644
--- a/.github/workflows/frontend-validation.yml
+++ b/.github/workflows/frontend-validation.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/manage-label.yml b/.github/workflows/manage-label.yml
index c433346711..571479b030 100644
--- a/.github/workflows/manage-label.yml
+++ b/.github/workflows/manage-label.yml
@@ -15,7 +15,7 @@ jobs:
       issues: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index 41ddeb7a13..216c31e621 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -44,7 +44,7 @@ jobs:
       version: ${{ steps.versionNumber.outputs.versionNumber }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -127,7 +127,7 @@ jobs:
             file_suffix: "-server"
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -191,7 +191,7 @@ jobs:
       RELEASE_GPG_PRIVATE_KEY: ${{ secrets.RELEASE_GPG_PRIVATE_KEY }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
           allowed-endpoints: >
@@ -637,7 +637,7 @@ jobs:
       contents: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 50346a6a39..0bf7056b52 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -64,7 +64,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/package-managers.yml b/.github/workflows/package-managers.yml
index 018cc61b67..e88c5e400e 100644
--- a/.github/workflows/package-managers.yml
+++ b/.github/workflows/package-managers.yml
@@ -28,7 +28,7 @@ jobs:
       jar_sha256: ${{ steps.hashes.outputs.jar_sha256 }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -79,7 +79,7 @@ jobs:
       contents: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/pr-conflict-labeler.yml b/.github/workflows/pr-conflict-labeler.yml
index f6e1016a4c..a44d4f7b28 100644
--- a/.github/workflows/pr-conflict-labeler.yml
+++ b/.github/workflows/pr-conflict-labeler.yml
@@ -32,7 +32,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/pre_commit.yml b/.github/workflows/pre_commit.yml
index 3feca530d1..296ed70bb7 100644
--- a/.github/workflows/pre_commit.yml
+++ b/.github/workflows/pre_commit.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index c6fbe3f7ad..d55b62a00d 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -43,7 +43,7 @@ jobs:
           echo "version=${VERSION}" >> $GITHUB_OUTPUT
 
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index a87f6d68b5..f49fc78a8b 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -53,7 +53,7 @@ jobs:
       RUN_UNOSERVER: ${{ github.event_name != 'workflow_dispatch' || inputs.build_unoserver }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/rollback-latest.yml b/.github/workflows/rollback-latest.yml
index 7f9f5b0a9a..32df9104b6 100644
--- a/.github/workflows/rollback-latest.yml
+++ b/.github/workflows/rollback-latest.yml
@@ -18,7 +18,7 @@ jobs:
       packages: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index f1e67e6b83..dfc38fea37 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 6972a1fc95..039c16175e 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/swagger.yml b/.github/workflows/swagger.yml
index 90c5984693..ffbeafdd1e 100644
--- a/.github/workflows/swagger.yml
+++ b/.github/workflows/swagger.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/sync-portal-docs.yml b/.github/workflows/sync-portal-docs.yml
index 54ee262239..e7a14af407 100644
--- a/.github/workflows/sync-portal-docs.yml
+++ b/.github/workflows/sync-portal-docs.yml
@@ -32,7 +32,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/sync_files_v2.yml b/.github/workflows/sync_files_v2.yml
index 656c636e48..fdf5d7cdf1 100644
--- a/.github/workflows/sync_files_v2.yml
+++ b/.github/workflows/sync_files_v2.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index f7763b3dbe..bb725359ce 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -62,7 +62,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -110,7 +110,7 @@ jobs:
       RELEASE_GPG_PRIVATE_KEY: ${{ secrets.RELEASE_GPG_PRIVATE_KEY }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -627,7 +627,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -718,7 +718,7 @@ jobs:
     if: always()
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index f8344da116..072969a0ce 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -53,7 +53,7 @@ jobs:
             cache-scope: stirling-pdf-fat
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -195,7 +195,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index c759cb99a1..3fc3b87e56 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -131,7 +131,7 @@ jobs:
       frontend: ${{ steps.changes.outputs.frontend }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -149,7 +149,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -185,7 +185,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 

From 80501e599cf40dc6db5afa8f3a975115ca4cc9f3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 18:52:32 +0100
Subject: [PATCH 028/122] build(deps): bump windows from 0.61.3 to 0.62.2 in
 /frontend/editor/src-tauri (#6419)

Bumps [windows](https://github.com/microsoft/windows-rs) from 0.61.3 to
0.62.2.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/microsoft/windows-rs/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=windows&package-manager=cargo&previous-version=0.61.3&new-version=0.62.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock | 79 +++++++++++++++++++++++-----
 frontend/editor/src-tauri/Cargo.toml |  2 +-
 2 files changed, 66 insertions(+), 15 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index 6b04a564f8..fcb07eed86 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -4529,7 +4529,7 @@ dependencies = [
  "tokio",
  "url",
  "urlencoding",
- "windows",
+ "windows 0.62.2",
 ]
 
 [[package]]
@@ -4712,7 +4712,7 @@ dependencies = [
  "tao-macros",
  "unicode-segmentation",
  "url",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "windows-version",
  "x11-dl",
@@ -4800,7 +4800,7 @@ dependencies = [
  "webkit2gtk",
  "webview2-com",
  "window-vibrancy",
- "windows",
+ "windows 0.61.3",
 ]
 
 [[package]]
@@ -5028,7 +5028,7 @@ dependencies = [
  "tauri-plugin",
  "thiserror 2.0.18",
  "url",
- "windows",
+ "windows 0.61.3",
  "zbus",
 ]
 
@@ -5155,7 +5155,7 @@ dependencies = [
  "url",
  "webkit2gtk",
  "webview2-com",
- "windows",
+ "windows 0.61.3",
 ]
 
 [[package]]
@@ -5180,7 +5180,7 @@ dependencies = [
  "url",
  "webkit2gtk",
  "webview2-com",
- "windows",
+ "windows 0.61.3",
  "wry",
 ]
 
@@ -5243,7 +5243,7 @@ checksum = "0b1e66e07de489fe43a46678dd0b8df65e0c973909df1b60ba33874e297ba9b9"
 dependencies = [
  "quick-xml 0.37.5",
  "thiserror 2.0.18",
- "windows",
+ "windows 0.61.3",
  "windows-version",
 ]
 
@@ -6093,7 +6093,7 @@ checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
 dependencies = [
  "webview2-com-macros",
  "webview2-com-sys",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "windows-implement",
  "windows-interface",
@@ -6117,7 +6117,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
 dependencies = [
  "thiserror 2.0.18",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
 ]
 
@@ -6173,11 +6173,23 @@ version = "0.61.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
 dependencies = [
- "windows-collections",
+ "windows-collections 0.2.0",
  "windows-core 0.61.2",
- "windows-future",
+ "windows-future 0.2.1",
  "windows-link 0.1.3",
- "windows-numerics",
+ "windows-numerics 0.2.0",
+]
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections 0.3.2",
+ "windows-core 0.62.2",
+ "windows-future 0.3.2",
+ "windows-numerics 0.3.1",
 ]
 
 [[package]]
@@ -6189,6 +6201,15 @@ dependencies = [
  "windows-core 0.61.2",
 ]
 
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core 0.62.2",
+]
+
 [[package]]
 name = "windows-core"
 version = "0.61.2"
@@ -6223,7 +6244,18 @@ checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
 dependencies = [
  "windows-core 0.61.2",
  "windows-link 0.1.3",
- "windows-threading",
+ "windows-threading 0.1.0",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+ "windows-threading 0.2.1",
 ]
 
 [[package]]
@@ -6270,6 +6302,16 @@ dependencies = [
  "windows-link 0.1.3",
 ]
 
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+]
+
 [[package]]
 name = "windows-registry"
 version = "0.5.3"
@@ -6430,6 +6472,15 @@ dependencies = [
  "windows-link 0.1.3",
 ]
 
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
 [[package]]
 name = "windows-version"
 version = "0.1.7"
@@ -6737,7 +6788,7 @@ dependencies = [
  "webkit2gtk",
  "webkit2gtk-sys",
  "webview2-com",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "windows-version",
  "x11-dl",
diff --git a/frontend/editor/src-tauri/Cargo.toml b/frontend/editor/src-tauri/Cargo.toml
index ddfd8911de..c372011489 100644
--- a/frontend/editor/src-tauri/Cargo.toml
+++ b/frontend/editor/src-tauri/Cargo.toml
@@ -56,7 +56,7 @@ objc2-foundation = { version = "0.3.2", features = ["NSObject", "NSString", "NSU
 objc2-pdf-kit = { version = "0.3.2", features = ["PDFDocument", "objc2-app-kit"] }
 
 [target.'cfg(target_os = "windows")'.dependencies]
-windows = { version = "0.61", features = [
+windows = { version = "0.62", features = [
     "Win32_Foundation",
     "Win32_System_Com",
     "Win32_UI_Shell",

From 73668bcae8e33a703fd9d67641964704ac478d21 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 18:52:48 +0100
Subject: [PATCH 029/122] build(deps): bump the mui group across 1 directory
 with 2 updates (#6497)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the mui group with 1 update in the /frontend directory:
[@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material).

Updates `@mui/icons-material` from 9.0.0 to 9.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mui/material-ui/releases">@​mui/icons-material's
releases</a>.</em></p>
<blockquote>
<h2>v9.2.0</h2>
<p>A big thanks to the 9 contributors who made this release
possible.</p>
<ul>
<li>⚙️ Add support for <a
href="https://mui.com/material-ui/guides/typescript/#allowing-data-attributes-on-slotprops"><code>data-*</code>
attributes on <code>slotProps</code></a>.</li>
</ul>
<h3><code>@mui/material@9.1.3</code></h3>
<ul>
<li>[l10n] Add missing MuiPagination localization to zh-CN locale (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48741">#48741</a>)
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a></li>
<li>[select] Guard display ref during mouse down (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48744">#48744</a>)
<a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a></li>
</ul>
<h3><code>@mui/utils@9.1.3</code></h3>
<ul>
<li>[utils] Add opt-in <code>DataAttributesOverrides</code> augmentation
for slot props (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48554">#48554</a>)
<a href="https://github.com/LukasTy"><code>@​LukasTy</code></a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>[docs] Improve Icon Dialog responsiveness on small screens (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48639">#48639</a>)
<a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a></li>
<li>[docs] Fix invalid UTF-8 in skill references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48739">#48739</a>)
<a href="https://github.com/mturac"><code>@​mturac</code></a></li>
</ul>
<h3>Core</h3>
<ul>
<li>[code-infra] Resolve Renovate dashboard warnings (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48700">#48700</a>)
<a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></li>
<li>[code-infra] Validate npm publishing through dry run (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48691">#48691</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra] Run prettier after renovate update (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48754">#48754</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix 'A11y results committed?' check on react-pinned
nightly jobs (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48740">#48740</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[core] Remove leftover Joy UI references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48719">#48719</a>)
<a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a></li>
<li>[code-infra] Bump react-router to 7.15.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48725">#48725</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Drive docs analytics IDs via ANALYTICS_ENV (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48694">#48694</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Pre-render API page descriptions (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48693">#48693</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra][icons-material] Build lib/package.json with code-infra
--no-expand (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48689">#48689</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix react@18/next nightly workflow (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48635">#48635</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
</ul>
<p>All contributors of this release in alphabetical order: <a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a>, <a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>, <a
href="https://github.com/Janpot"><code>@​Janpot</code></a>, <a
href="https://github.com/LukasTy"><code>@​LukasTy</code></a>, <a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a>,
<a href="https://github.com/mturac"><code>@​mturac</code></a>, <a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a>, <a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a>, <a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></p>
<h2>v9.1.2</h2>
<p>A big thanks to the 5 contributors who made this release
possible.</p>
<h3><code>@mui/material@9.1.2</code></h3>
<ul>
<li>[autocomplete] Don't submit forms when committing
<code>freeSolo</code> value with Enter key (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48679">#48679</a>)
<a
href="https://github.com/mj12albert"><code>@​mj12albert</code></a></li>
<li>[transitions] Fix RTG import in ESM (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48645">#48645</a>)
<a
href="https://github.com/mj12albert"><code>@​mj12albert</code></a></li>
</ul>
<h3><code>@mui/system@9.1.2</code></h3>
<ul>
<li>[InitColorSchemeScript] Fix script tag warning in Next.js 16 dev
mode (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48671">#48671</a>)
<a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>Fix typos in release instructions (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48687">#48687</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>Update <code>@​mui/x</code>-* packages to latest (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48661">#48661</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/mui/material-ui/blob/master/CHANGELOG.md">@​mui/icons-material's
changelog</a>.</em></p>
<blockquote>
<h2>9.2.0</h2>
<!-- raw HTML omitted -->
<p><em>Jul 3, 2026</em></p>
<p>A big thanks to the 9 contributors who made this release
possible.</p>
<ul>
<li>⚙️ Add support for <a
href="https://mui.com/material-ui/guides/typescript/#allowing-data-attributes-on-slotprops"><code>data-*</code>
attributes on <code>slotProps</code></a>.</li>
</ul>
<h3><code>@mui/material@9.2.0</code></h3>
<ul>
<li>[l10n] Add missing MuiPagination localization to zh-CN locale (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48741">#48741</a>)
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a></li>
<li>[select] Guard display ref during mouse down (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48744">#48744</a>)
<a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a></li>
</ul>
<h3><code>@mui/utils@9.2.0</code></h3>
<ul>
<li>[utils] Add opt-in <code>DataAttributesOverrides</code> augmentation
for slot props (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48554">#48554</a>)
<a href="https://github.com/LukasTy"><code>@​LukasTy</code></a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>[docs] Improve Icon Dialog responsiveness on small screens (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48639">#48639</a>)
<a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a></li>
<li>[docs] Fix invalid UTF-8 in skill references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48739">#48739</a>)
<a href="https://github.com/mturac"><code>@​mturac</code></a></li>
</ul>
<h3>Core</h3>
<ul>
<li>[code-infra] Resolve Renovate dashboard warnings (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48700">#48700</a>)
<a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></li>
<li>[code-infra] Validate npm publishing through dry run (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48691">#48691</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra] Run prettier after renovate update (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48754">#48754</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix 'A11y results committed?' check on react-pinned
nightly jobs (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48740">#48740</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[core] Remove leftover Joy UI references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48719">#48719</a>)
<a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a></li>
<li>[code-infra] Bump react-router to 7.15.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48725">#48725</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Drive docs analytics IDs via ANALYTICS_ENV (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48694">#48694</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Pre-render API page descriptions (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48693">#48693</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra][icons-material] Build lib/package.json with code-infra
--no-expand (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48689">#48689</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix react@18/next nightly workflow (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48635">#48635</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
</ul>
<p>All contributors of this release in alphabetical order: <a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a>, <a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>, <a
href="https://github.com/Janpot"><code>@​Janpot</code></a>, <a
href="https://github.com/LukasTy"><code>@​LukasTy</code></a>, <a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a>,
<a href="https://github.com/mturac"><code>@​mturac</code></a>, <a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a>, <a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a>, <a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></p>
<h2>9.1.2</h2>
<!-- raw HTML omitted -->
<p><em>Jun 23, 2026</em></p>
<p>A big thanks to the 5 contributors who made this release
possible.</p>
<h3><code>@mui/material@9.1.2</code></h3>
<ul>
<li>[autocomplete] Don't submit forms when committing
<code>freeSolo</code> value with Enter key (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48679">#48679</a>)
<a
href="https://github.com/mj12albert"><code>@​mj12albert</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mui/material-ui/commit/cb77df2fdf6b070cd3958af0ffba11e11454bf98"><code>cb77df2</code></a>
[release] v9.2.0 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48755">#48755</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/4206a995e11373a82f0fa29211434f910fa62d98"><code>4206a99</code></a>
[icons-material] Build lib/package.json with code-infra --no-expand (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48689">#48689</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/0f9b43f4e001102e9aa94f10c3882e15277908a5"><code>0f9b43f</code></a>
[release] v9.1.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48656">#48656</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/ef607d7d9254fb3bebbf739f9e9217b086381440"><code>ef607d7</code></a>
[code-infra] Port codebase to use tsgo (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48616">#48616</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/a389a2d9bc2a89c6c86c4d98aca51c3fa809a753"><code>a389a2d</code></a>
[release] v9.1.0 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48620">#48620</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/a34a94d094338213d7e3aba73ee85c9deaf2dafa"><code>a34a94d</code></a>
[docs] Use the standard license header preferred by OSI and GitHub</li>
<li><a
href="https://github.com/mui/material-ui/commit/a11407d18d3c241657e623e9f626bdd803e4ec79"><code>a11407d</code></a>
Bump react monorepo to 19.2.6 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48511">#48511</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/ea0f8b93c7936c057c17d4c648a59920f5382090"><code>ea0f8b9</code></a>
Bump code-infra:devDependencies (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48401">#48401</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/35b5b62f1861ec14b0a4b4c7aed8a9304f3e30e4"><code>35b5b62</code></a>
Bump react monorepo to 19.2.5 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48406">#48406</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/933bdf67f2405b9bfd4a115b957bc60fd2abaccf"><code>933bdf6</code></a>
v9.0.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material/issues/48479">#48479</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/mui/material-ui/commits/v9.2.0/packages/mui-icons-material">compare
view</a></li>
</ul>
</details>
<br />

Updates `@mui/material` from 9.0.0 to 9.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mui/material-ui/releases">@​mui/material's
releases</a>.</em></p>
<blockquote>
<h2>v9.2.0</h2>
<p>A big thanks to the 9 contributors who made this release
possible.</p>
<ul>
<li>⚙️ Add support for <a
href="https://mui.com/material-ui/guides/typescript/#allowing-data-attributes-on-slotprops"><code>data-*</code>
attributes on <code>slotProps</code></a>.</li>
</ul>
<h3><code>@mui/material@9.1.3</code></h3>
<ul>
<li>[l10n] Add missing MuiPagination localization to zh-CN locale (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48741">#48741</a>)
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a></li>
<li>[select] Guard display ref during mouse down (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48744">#48744</a>)
<a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a></li>
</ul>
<h3><code>@mui/utils@9.1.3</code></h3>
<ul>
<li>[utils] Add opt-in <code>DataAttributesOverrides</code> augmentation
for slot props (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48554">#48554</a>)
<a href="https://github.com/LukasTy"><code>@​LukasTy</code></a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>[docs] Improve Icon Dialog responsiveness on small screens (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48639">#48639</a>)
<a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a></li>
<li>[docs] Fix invalid UTF-8 in skill references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48739">#48739</a>)
<a href="https://github.com/mturac"><code>@​mturac</code></a></li>
</ul>
<h3>Core</h3>
<ul>
<li>[code-infra] Resolve Renovate dashboard warnings (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48700">#48700</a>)
<a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></li>
<li>[code-infra] Validate npm publishing through dry run (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48691">#48691</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra] Run prettier after renovate update (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48754">#48754</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix 'A11y results committed?' check on react-pinned
nightly jobs (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48740">#48740</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[core] Remove leftover Joy UI references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48719">#48719</a>)
<a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a></li>
<li>[code-infra] Bump react-router to 7.15.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48725">#48725</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Drive docs analytics IDs via ANALYTICS_ENV (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48694">#48694</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Pre-render API page descriptions (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48693">#48693</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra][icons-material] Build lib/package.json with code-infra
--no-expand (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48689">#48689</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix react@18/next nightly workflow (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48635">#48635</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
</ul>
<p>All contributors of this release in alphabetical order: <a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a>, <a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>, <a
href="https://github.com/Janpot"><code>@​Janpot</code></a>, <a
href="https://github.com/LukasTy"><code>@​LukasTy</code></a>, <a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a>,
<a href="https://github.com/mturac"><code>@​mturac</code></a>, <a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a>, <a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a>, <a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></p>
<h2>v9.1.2</h2>
<p>A big thanks to the 5 contributors who made this release
possible.</p>
<h3><code>@mui/material@9.1.2</code></h3>
<ul>
<li>[autocomplete] Don't submit forms when committing
<code>freeSolo</code> value with Enter key (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48679">#48679</a>)
<a
href="https://github.com/mj12albert"><code>@​mj12albert</code></a></li>
<li>[transitions] Fix RTG import in ESM (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48645">#48645</a>)
<a
href="https://github.com/mj12albert"><code>@​mj12albert</code></a></li>
</ul>
<h3><code>@mui/system@9.1.2</code></h3>
<ul>
<li>[InitColorSchemeScript] Fix script tag warning in Next.js 16 dev
mode (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48671">#48671</a>)
<a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>Fix typos in release instructions (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48687">#48687</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>Update <code>@​mui/x</code>-* packages to latest (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48661">#48661</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/mui/material-ui/blob/master/CHANGELOG.md">@​mui/material's
changelog</a>.</em></p>
<blockquote>
<h2>9.2.0</h2>
<!-- raw HTML omitted -->
<p><em>Jul 3, 2026</em></p>
<p>A big thanks to the 9 contributors who made this release
possible.</p>
<ul>
<li>⚙️ Add support for <a
href="https://mui.com/material-ui/guides/typescript/#allowing-data-attributes-on-slotprops"><code>data-*</code>
attributes on <code>slotProps</code></a>.</li>
</ul>
<h3><code>@mui/material@9.2.0</code></h3>
<ul>
<li>[l10n] Add missing MuiPagination localization to zh-CN locale (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48741">#48741</a>)
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a></li>
<li>[select] Guard display ref during mouse down (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48744">#48744</a>)
<a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a></li>
</ul>
<h3><code>@mui/utils@9.2.0</code></h3>
<ul>
<li>[utils] Add opt-in <code>DataAttributesOverrides</code> augmentation
for slot props (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48554">#48554</a>)
<a href="https://github.com/LukasTy"><code>@​LukasTy</code></a></li>
</ul>
<h3>Docs</h3>
<ul>
<li>[docs] Improve Icon Dialog responsiveness on small screens (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48639">#48639</a>)
<a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a></li>
<li>[docs] Fix invalid UTF-8 in skill references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48739">#48739</a>)
<a href="https://github.com/mturac"><code>@​mturac</code></a></li>
</ul>
<h3>Core</h3>
<ul>
<li>[code-infra] Resolve Renovate dashboard warnings (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48700">#48700</a>)
<a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></li>
<li>[code-infra] Validate npm publishing through dry run (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48691">#48691</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra] Run prettier after renovate update (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48754">#48754</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix 'A11y results committed?' check on react-pinned
nightly jobs (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48740">#48740</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[core] Remove leftover Joy UI references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48719">#48719</a>)
<a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a></li>
<li>[code-infra] Bump react-router to 7.15.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48725">#48725</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Drive docs analytics IDs via ANALYTICS_ENV (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48694">#48694</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[docs-infra] Pre-render API page descriptions (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48693">#48693</a>)
<a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a></li>
<li>[code-infra][icons-material] Build lib/package.json with code-infra
--no-expand (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48689">#48689</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
<li>[code-infra] Fix react@18/next nightly workflow (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48635">#48635</a>)
<a href="https://github.com/Janpot"><code>@​Janpot</code></a></li>
</ul>
<p>All contributors of this release in alphabetical order: <a
href="https://github.com/brijeshb42"><code>@​brijeshb42</code></a>, <a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>, <a
href="https://github.com/Janpot"><code>@​Janpot</code></a>, <a
href="https://github.com/LukasTy"><code>@​LukasTy</code></a>, <a
href="https://github.com/michelengelen"><code>@​michelengelen</code></a>,
<a href="https://github.com/mturac"><code>@​mturac</code></a>, <a
href="https://github.com/Prakash1185"><code>@​Prakash1185</code></a>, <a
href="https://github.com/siriwatknp"><code>@​siriwatknp</code></a>, <a
href="https://github.com/Sushantplive"><code>@​Sushantplive</code></a></p>
<h2>9.1.2</h2>
<!-- raw HTML omitted -->
<p><em>Jun 23, 2026</em></p>
<p>A big thanks to the 5 contributors who made this release
possible.</p>
<h3><code>@mui/material@9.1.2</code></h3>
<ul>
<li>[autocomplete] Don't submit forms when committing
<code>freeSolo</code> value with Enter key (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48679">#48679</a>)
<a
href="https://github.com/mj12albert"><code>@​mj12albert</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mui/material-ui/commit/cb77df2fdf6b070cd3958af0ffba11e11454bf98"><code>cb77df2</code></a>
[release] v9.2.0 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48755">#48755</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/ff92ccd23f7dde356a6f17e52f18747647e9a359"><code>ff92ccd</code></a>
[l10n] Add missing MuiPagination localization to zh-CN locale (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48741">#48741</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/71f1a967fa83054ef2c8ef05201ac92ff78af860"><code>71f1a96</code></a>
[Select] Guard display ref during mouse down (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48744">#48744</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/3ccff759bd1cd8c39c5ee1599a42d9ca682eed7f"><code>3ccff75</code></a>
[internal] Fix outdated links to the React repository</li>
<li><a
href="https://github.com/mui/material-ui/commit/33be3ca2326a1043cdc19b7dce4bd07827555533"><code>33be3ca</code></a>
[test] Fix react@18/next nightly workflow (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48635">#48635</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/48a4f98e257c00772fd8de194ec546daff8b5db9"><code>48a4f98</code></a>
[utils] Add opt-in <code>DataAttributesOverrides</code> augmentation for
slot props (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48">#48</a>...</li>
<li><a
href="https://github.com/mui/material-ui/commit/0cc3e24327ab6ef1aab39687cdb074dd692cfef3"><code>0cc3e24</code></a>
[core] Remove leftover Joy UI references (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48719">#48719</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/f33d58f7b86d78458216427b91682b3e7bcc5c6a"><code>f33d58f</code></a>
[core] Bump react-router to 7.15.1 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48725">#48725</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/a1ea5d8bb0fedc4dfe26886ab4012771b8f9aae7"><code>a1ea5d8</code></a>
[release] v9.1.2 (<a
href="https://github.com/mui/material-ui/tree/HEAD/packages/mui-material/issues/48713">#48713</a>)</li>
<li><a
href="https://github.com/mui/material-ui/commit/e6a054d39fe8c1f8f877b993aa3f2d88bf1b2d51"><code>e6a054d</code></a>
[autocomplete] Don't submit forms when committing <code>freeSolo</code>
value with Enter...</li>
<li>Additional commits viewable in <a
href="https://github.com/mui/material-ui/commits/v9.2.0/packages/mui-material">compare
view</a></li>
</ul>
</details>
<br />


> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludy <Ludy87@users.noreply.github.com>
---
 frontend/package-lock.json | 84 +++++++++++++++++++-------------------
 frontend/package.json      |  2 +-
 2 files changed, 43 insertions(+), 43 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 1838e5637d..7d3738369e 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -42,7 +42,7 @@
         "@mantine/dates": "^8.3.1",
         "@mantine/dropzone": "^8.3.1",
         "@mantine/hooks": "^8.3.1",
-        "@mui/icons-material": "^9.0.0",
+        "@mui/icons-material": "^9.2.0",
         "@mui/material": "^9.0.0",
         "@posthog/react": "^1.8.2",
         "@reactour/tour": "^3.8.0",
@@ -2544,9 +2544,9 @@
       "license": "MIT"
     },
     "node_modules/@mui/core-downloads-tracker": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/core-downloads-tracker/-/core-downloads-tracker-9.0.0.tgz",
-      "integrity": "sha512-uwQNGkhv0lf7ufxw6QXev77BW6pWbW+7uxYjU5+rfp4lBkFtMEgJCsarTM3Tn+i0lGx6+Ol2u88JdGXr0GDskA==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@mui/core-downloads-tracker/-/core-downloads-tracker-9.2.0.tgz",
+      "integrity": "sha512-+XMav+ZaXkZKUFUgzjrfMEedfyJKxxviAske2q8N8CWDMeqZdDU2lWMkiUPiB388hGaDqhwvOAwkrsc/pUyp8g==",
       "license": "MIT",
       "funding": {
         "type": "opencollective",
@@ -2554,9 +2554,9 @@
       }
     },
     "node_modules/@mui/icons-material": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/icons-material/-/icons-material-9.0.0.tgz",
-      "integrity": "sha512-oDwyvI6LgjWRC9MBcSGvLkPud9S9ELgSBQFYxa1rYcZn6Br55dn22SyvsPDMsn0G8OndFk53iMT45W5mNqrogw==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@mui/icons-material/-/icons-material-9.2.0.tgz",
+      "integrity": "sha512-VgBd3z7Qc3vd/thcNSMC03nHRh/U4DzMUd+1dRyJTbm/hGo7+N6N4GDuJZDNHa6LZhhwG6Cu1X3DNvrVv8sNag==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2"
@@ -2569,7 +2569,7 @@
         "url": "https://opencollective.com/mui-org"
       },
       "peerDependencies": {
-        "@mui/material": "^9.0.0",
+        "@mui/material": "^9.2.0",
         "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0",
         "react": "^17.0.0 || ^18.0.0 || ^19.0.0"
       },
@@ -2580,22 +2580,22 @@
       }
     },
     "node_modules/@mui/material": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/material/-/material-9.0.0.tgz",
-      "integrity": "sha512-+VP/oQCDhDR87NQQgXnNBG8dwy6GNuQLnenS1pZvkbn2dKFSxRSRMybTpH9xUxXP+316mlYDy5CSbYtusnCWtw==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@mui/material/-/material-9.2.0.tgz",
+      "integrity": "sha512-+YTRSgGKGrrRo2XJZXs7JRA6qHoHWvNtxyqxnrRJTBmIuLOUpxxh7m4G9lF4tWberxGFY+EqkkRPgJCl+fSMJg==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
-        "@mui/core-downloads-tracker": "^9.0.0",
-        "@mui/system": "^9.0.0",
-        "@mui/types": "^9.0.0",
-        "@mui/utils": "^9.0.0",
+        "@mui/core-downloads-tracker": "^9.2.0",
+        "@mui/system": "^9.2.0",
+        "@mui/types": "^9.1.1",
+        "@mui/utils": "^9.2.0",
         "@popperjs/core": "^2.11.8",
         "@types/react-transition-group": "^4.4.12",
         "clsx": "^2.1.1",
         "csstype": "^3.2.3",
         "prop-types": "^15.8.1",
-        "react-is": "^19.2.4",
+        "react-is": "^19.2.6",
         "react-transition-group": "^4.4.5"
       },
       "engines": {
@@ -2608,7 +2608,7 @@
       "peerDependencies": {
         "@emotion/react": "^11.5.0",
         "@emotion/styled": "^11.3.0",
-        "@mui/material-pigment-css": "^9.0.0",
+        "@mui/material-pigment-css": "^9.2.0",
         "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0",
         "react": "^17.0.0 || ^18.0.0 || ^19.0.0",
         "react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0"
@@ -2629,13 +2629,13 @@
       }
     },
     "node_modules/@mui/private-theming": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/private-theming/-/private-theming-9.0.0.tgz",
-      "integrity": "sha512-JtuZoaiCqwD6vjgYu6Xp3T7DZkrxJlgtDz5yESzhI34fEX5hHMh2VJUbuL9UOg8xrfIFMrq6dcYoH/7Zi4G0RA==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@mui/private-theming/-/private-theming-9.2.0.tgz",
+      "integrity": "sha512-w9wpyDxGPGnAACPB2hKhCDmILJIAvQxrfjUbIAEa0AznX1rOjaz5N+yB1uuw8ixnJcpEh/tPbD9oEe19wcWPHw==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
-        "@mui/utils": "^9.0.0",
+        "@mui/utils": "^9.2.0",
         "prop-types": "^15.8.1"
       },
       "engines": {
@@ -2656,9 +2656,9 @@
       }
     },
     "node_modules/@mui/styled-engine": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/styled-engine/-/styled-engine-9.0.0.tgz",
-      "integrity": "sha512-9RLGdX4Jg0aQPRuvqh/OLzYSPlgd5zyEw5/1HIRfdavSiOd03WtUaGZH9/w1RoTYuRKwpgy0hpIFaMHIqPVIWg==",
+      "version": "9.1.1",
+      "resolved": "https://registry.npmjs.org/@mui/styled-engine/-/styled-engine-9.1.1.tgz",
+      "integrity": "sha512-neaYKdJfvEG54q8efHLJR7swpHG/gfSv9xGqW5iTSMsubD7yPCPFrhVBt284j1DOF3uZaaDJSHQL7gz6jGF21Q==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
@@ -2690,16 +2690,16 @@
       }
     },
     "node_modules/@mui/system": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/system/-/system-9.0.0.tgz",
-      "integrity": "sha512-YnC5Zg6j04IxiLc/boAKs0464jfZlLFVa7mf5E8lF0XOtZVUvG6R6gJK50lgUYdaaLdyLfxF6xR7LaPuEpeT/g==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@mui/system/-/system-9.2.0.tgz",
+      "integrity": "sha512-YvUJwKoGVtbnOm2PyPi5TvX2d1rOA6sqSpEWVs4WmXNIaFTuYmNUaVdU2o1NKUEe31URnD3E8ZVUMcsLQXwcYg==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
-        "@mui/private-theming": "^9.0.0",
-        "@mui/styled-engine": "^9.0.0",
-        "@mui/types": "^9.0.0",
-        "@mui/utils": "^9.0.0",
+        "@mui/private-theming": "^9.2.0",
+        "@mui/styled-engine": "^9.1.1",
+        "@mui/types": "^9.1.1",
+        "@mui/utils": "^9.2.0",
         "clsx": "^2.1.1",
         "csstype": "^3.2.3",
         "prop-types": "^15.8.1"
@@ -2730,9 +2730,9 @@
       }
     },
     "node_modules/@mui/types": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/types/-/types-9.0.0.tgz",
-      "integrity": "sha512-i1cuFCAWN44b3AJWO7mh7tuh1sqbQSeVr/94oG0TX5uXivac8XalgE4/6fQZcmGZigzbQ35IXxj/4jLpRIBYZg==",
+      "version": "9.1.1",
+      "resolved": "https://registry.npmjs.org/@mui/types/-/types-9.1.1.tgz",
+      "integrity": "sha512-Zjt7u8wNvDg40rPTGoL+TnfkpuSKjwubsNSFRH1KAVZLcaV4I3AFNHIFbvH7p4F3alEibSbdd90xAgn5Rnfndg==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2"
@@ -2747,17 +2747,17 @@
       }
     },
     "node_modules/@mui/utils": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@mui/utils/-/utils-9.0.0.tgz",
-      "integrity": "sha512-bQcqyg/gjULUqTuyUjSAFr6LQGLvtkNtDbJerAtoUn9kGZ0hg5QJiN1PLHMLbeFpe3te1831uq7GFl2ITokGdg==",
+      "version": "9.2.0",
+      "resolved": "https://registry.npmjs.org/@mui/utils/-/utils-9.2.0.tgz",
+      "integrity": "sha512-OsUH5zhlSOM4xmLl53+agug1M1UyWb4zxFxWQCqwKTKUeQPvTENtg3JhrroBD2qpCLKsX5W/DYGERJ4mBUbc8g==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
-        "@mui/types": "^9.0.0",
+        "@mui/types": "^9.1.1",
         "@types/prop-types": "^15.7.15",
         "clsx": "^2.1.1",
         "prop-types": "^15.8.1",
-        "react-is": "^19.2.4"
+        "react-is": "^19.2.6"
       },
       "engines": {
         "node": ">=14.0.0"
@@ -14584,9 +14584,9 @@
       }
     },
     "node_modules/react-is": {
-      "version": "19.2.4",
-      "resolved": "https://registry.npmjs.org/react-is/-/react-is-19.2.4.tgz",
-      "integrity": "sha512-W+EWGn2v0ApPKgKKCy/7s7WHXkboGcsrXE+2joLyVxkbyVQfO3MUEaUQDHoSmb8TFFrSKYa9mw64WZHNHSDzYA==",
+      "version": "19.2.7",
+      "resolved": "https://registry.npmjs.org/react-is/-/react-is-19.2.7.tgz",
+      "integrity": "sha512-kZFnouyVv7eP/Phmrlo9FK+zcAdriZJvzxXHF1Sl1P377WSGe2G/JxVolhTrB/jeV47lKImhNUsijjHAAbcl/A==",
       "license": "MIT"
     },
     "node_modules/react-markdown": {
diff --git a/frontend/package.json b/frontend/package.json
index a527bcf06f..04b4c4777b 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -39,7 +39,7 @@
     "@mantine/dates": "^8.3.1",
     "@mantine/dropzone": "^8.3.1",
     "@mantine/hooks": "^8.3.1",
-    "@mui/icons-material": "^9.0.0",
+    "@mui/icons-material": "^9.2.0",
     "@mui/material": "^9.0.0",
     "@posthog/react": "^1.8.2",
     "@reactour/tour": "^3.8.0",

From 18fb663b4de7c86fac78f9a9b219f5051ac62654 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 22:41:26 +0100
Subject: [PATCH 030/122] build(deps): bump bouncycastleVersion from 1.84 to
 1.85 (#7132)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps `bouncycastleVersion` from 1.84 to 1.85.
Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html">org.bouncycastle:bcprov-jdk18on's
changelog</a>.</em></p>
<blockquote>
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted -->2.2.1 Version<!--
raw HTML omitted --><!-- raw HTML omitted -->
Release: 1.85, 1.85.1<!-- raw HTML omitted -->
Date:      2026, July 12th</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/bcgit/bc-java/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html">org.bouncycastle:bcpkix-jdk18on's
changelog</a>.</em></p>
<blockquote>
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted -->2.2.1 Version<!--
raw HTML omitted --><!-- raw HTML omitted -->
Release: 1.85, 1.85.1<!-- raw HTML omitted -->
Date:      2026, July 12th</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/bcgit/bc-java/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `org.bouncycastle:bcutil-jdk18on` from 1.84 to 1.85
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html">org.bouncycastle:bcutil-jdk18on's
changelog</a>.</em></p>
<blockquote>
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted -->2.2.1 Version<!--
raw HTML omitted --><!-- raw HTML omitted -->
Release: 1.85, 1.85.1<!-- raw HTML omitted -->
Date:      2026, July 12th</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/bcgit/bc-java/commits">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 .../security/ValidateSignatureController.java |  8 +++++--
 .../ValidateSignatureControllerMoreTest.java  | 22 +++++++++++++++++++
 build.gradle                                  |  2 +-
 3 files changed, 29 insertions(+), 3 deletions(-)

diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java
index 47fce44876..f9eeeb6415 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java
@@ -140,11 +140,15 @@ public class ValidateSignatureController {
                     // covers the TSTInfo, which can never match.
                     boolean isDocTimeStamp = SUBFILTER_RFC3161.equals(sig.getSubFilter());
                     CMSSignedData signedData;
+                    // Parse from a stream: /Contents is zero-padded to its reserved length and the
+                    // byte[] constructors reject those trailing bytes since BC 1.85.
                     if (isDocTimeStamp) {
-                        signedData = new CMSSignedData(signatureBytes);
+                        signedData = new CMSSignedData(new ByteArrayInputStream(signatureBytes));
                     } else {
                         CMSProcessable content = new CMSProcessableByteArray(signedContent);
-                        signedData = new CMSSignedData(content, signatureBytes);
+                        signedData =
+                                new CMSSignedData(
+                                        content, new ByteArrayInputStream(signatureBytes));
                     }
 
                     // What actually binds a timestamp to this document: the TSTInfo's message
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/security/ValidateSignatureControllerMoreTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/security/ValidateSignatureControllerMoreTest.java
index e6de0225dd..65afbefd97 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/security/ValidateSignatureControllerMoreTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/security/ValidateSignatureControllerMoreTest.java
@@ -5,6 +5,7 @@ import static org.junit.jupiter.api.Assertions.assertThrows;
 import static org.mockito.ArgumentMatchers.any;
 import static org.mockito.Mockito.when;
 
+import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.InputStream;
@@ -291,6 +292,27 @@ class ValidateSignatureControllerMoreTest {
         }
     }
 
+    @Nested
+    @DisplayName("Padded signature contents")
+    class PaddedContentsTests {
+
+        @Test
+        @DisplayName("Zero-padded /Contents still parses as CMS")
+        void zeroPaddedContentsParsesAsCms() throws Exception {
+            byte[] contents;
+            try (PDDocument doc = Loader.loadPDF(signedPdfBytes)) {
+                PDSignature sig = doc.getSignatureDictionaries().get(0);
+                contents = sig.getContents(new ByteArrayInputStream(signedPdfBytes));
+            }
+
+            // /Contents is zero-filled up to its reserved length. Since BC 1.85 the byte[]
+            // constructors reject that tail ("Extra data detected in stream"), streams do not.
+            assertThat(contents[contents.length - 1]).isZero();
+            CMSSignedData parsed = new CMSSignedData(new ByteArrayInputStream(contents));
+            assertThat(parsed.getSignerInfos().size()).isEqualTo(1);
+        }
+    }
+
     @Nested
     @DisplayName("Error and edge handling")
     class ErrorHandlingTests {
diff --git a/build.gradle b/build.gradle
index 0258c2ca4a..c870aab526 100644
--- a/build.gradle
+++ b/build.gradle
@@ -24,7 +24,7 @@ ext {
     pdfboxVersion = "3.0.7"
     imageioVersion = "3.13.1"
     lombokVersion = "1.18.46"
-    bouncycastleVersion = "1.84"
+    bouncycastleVersion = "1.85"
     springSecuritySamlVersion = "7.0.5"
     openSamlVersion = "5.2.1"
     commonmarkVersion = "0.28.0"

From 5f2001c708c15d70114808ca6014696fdcb28f44 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 22:41:39 +0100
Subject: [PATCH 031/122] build(deps-dev): bump brace-expansion from 1.1.14 to
 1.1.16 in /frontend (#7149)

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion)
from 1.1.14 to 1.1.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.15</h2>
<ul>
<li>Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)
0b09384</li>
</ul>
<hr />
<p><a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15">https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.15</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/447763a91a613cfa67ac73096cbc1de9a2304f97"><code>447763a</code></a>
1.1.16</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95"><code>d74e630</code></a>
fix: v1 backport for CVE-2026-13149 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/122">#122</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/2203f4f4895eba16c4d408b4219ce1b8e5f6ff24"><code>2203f4f</code></a>
1.1.15</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/0b0938410732370559704230724ca4a44d1b29fd"><code>0b09384</code></a>
Backport v5.0.6 change to v1 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/111">#111</a>)</li>
<li>See full diff in <a
href="https://github.com/juliangruber/brace-expansion/compare/v1.1.14...v1.1.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=brace-expansion&package-manager=npm_and_yarn&previous-version=1.1.14&new-version=1.1.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/package-lock.json | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 7d3738369e..26dc1714a1 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -7472,16 +7472,16 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/braces": {
@@ -10114,9 +10114,9 @@
       "license": "MIT"
     },
     "node_modules/glob/node_modules/brace-expansion": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.0.tgz",
-      "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz",
+      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -14871,9 +14871,9 @@
       "license": "MIT"
     },
     "node_modules/read-package-json/node_modules/brace-expansion": {
-      "version": "1.1.14",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.14.tgz",
-      "integrity": "sha512-MWPGfDxnyzKU7rNOW9SP/c50vi3xrmrua/+6hfPbCS2ABNWfx24vPidzvC7krjU/RTo235sV776ymlsMtGKj8g==",
+      "version": "1.1.18",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
+      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

From 113a5c737221d85ba743d0d0647a6a547eb9da8c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 22:41:56 +0100
Subject: [PATCH 032/122] build(deps): bump the serde group across 2
 directories with 2 updates (#7182)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the serde group with 2 updates in the /frontend/editor/src-tauri
directory: [serde_json](https://github.com/serde-rs/json) and
[serde](https://github.com/serde-rs/serde).
Bumps the serde group with 2 updates in the
/frontend/editor/src-tauri/provisioner directory:
[serde_json](https://github.com/serde-rs/json) and
[serde](https://github.com/serde-rs/serde).

Updates `serde_json` from 1.0.149 to 1.0.151
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/json/releases">serde_json's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.151</h2>
<ul>
<li>Add RawValue::from_string_unchecked (<a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>,
thanks <a
href="https://github.com/WonderLawrence"><code>@​WonderLawrence</code></a>)</li>
</ul>
<h2>v1.0.150</h2>
<ul>
<li>Reject non-string enum object keys (<a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>,
thanks <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/json/commit/de8500740cdcabffb9734f503e4889def823cf10"><code>de85007</code></a>
Release 1.0.151</li>
<li><a
href="https://github.com/serde-rs/json/commit/3b2b3c5f28c20ed988bd081a4147c535e7e65c74"><code>3b2b3c5</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>
from WonderLawrence/rawvalue-from-string-unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/0406d96860e9d8b9252e2002fa3e626ae48ca1b0"><code>0406d96</code></a>
Debug-assert well-formedness and no-whitespace in
from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/cf16f75d81e28c723323bfc60a68fc02d2994fff"><code>cf16f75</code></a>
Add RawValue::from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/827a315bf2198558f0325b07bcc1e2cd973aba2f"><code>827a315</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/cea36a5c017ebffdeb95d0cd0f1aad473bfab758"><code>cea36a5</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/a1ae73ac6a6940a4a57c673aebaa13ed4dfe3e8c"><code>a1ae73a</code></a>
Release 1.0.150</li>
<li><a
href="https://github.com/serde-rs/json/commit/1a360b0a6c003912afc3503c834b0edd798bca28"><code>1a360b0</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>
from puneetdixit200/reject-non-string-enum-keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/2037b634f9dccbddc11cff189ebeb5854fa0e01c"><code>2037b63</code></a>
Reject non-string enum object keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/5d30df60e916e9b8fc46c74794007ff271fdfbbf"><code>5d30df6</code></a>
Resolve manual_assert_eq pedantic clippy lint</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/json/compare/v1.0.149...v1.0.151">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde` from 1.0.228 to 1.0.229
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/serde/releases">serde's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.229</h2>
<ul>
<li>Update to syn 3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/serde/commit/7fc3b4c30c94f73a96ebd1553f2b090d928fc3a8"><code>7fc3b4c</code></a>
Release 1.0.229</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6d6e9a11101354ce769a3438a088b6b9305c1863"><code>6d6e9a1</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/serde/issues/3085">#3085</a>
from dtolnay/syn3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6dec3b751126c8338cac0fe8085612d695e4ecf3"><code>6dec3b7</code></a>
Update to syn 3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/cfe669241065984177ff63af8b45058e6e9b499d"><code>cfe6692</code></a>
Resolve mut_mut pedantic clippy lint</li>
<li><a
href="https://github.com/serde-rs/serde/commit/1023d077510b4aef36a41ef56fdb7798568a2654"><code>1023d07</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/dd682c2c86aa7629e77c1ccd93212d3729f4c66d"><code>dd682c2</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/5f0f18b9211732f2d82f73b5a43e4f5ff3701251"><code>5f0f18b</code></a>
Update ui test suite to nightly-2026-06-01</li>
<li><a
href="https://github.com/serde-rs/serde/commit/63a1498f0e7be991ffac5939bdd202ca16e9a23f"><code>63a1498</code></a>
Regenerate stderr with trybuild normalization fixes</li>
<li><a
href="https://github.com/serde-rs/serde/commit/fa7da4a93567ed347ad0735c28e439fca688ef26"><code>fa7da4a</code></a>
Fix unused_features warning</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6b1a17851ea3d86a56aa116ca1cbf428f8d5f22d"><code>6b1a178</code></a>
Unpin CI miri toolchain</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde` from 1.0.228 to 1.0.229
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/serde/releases">serde's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.229</h2>
<ul>
<li>Update to syn 3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/serde/commit/7fc3b4c30c94f73a96ebd1553f2b090d928fc3a8"><code>7fc3b4c</code></a>
Release 1.0.229</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6d6e9a11101354ce769a3438a088b6b9305c1863"><code>6d6e9a1</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/serde/issues/3085">#3085</a>
from dtolnay/syn3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6dec3b751126c8338cac0fe8085612d695e4ecf3"><code>6dec3b7</code></a>
Update to syn 3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/cfe669241065984177ff63af8b45058e6e9b499d"><code>cfe6692</code></a>
Resolve mut_mut pedantic clippy lint</li>
<li><a
href="https://github.com/serde-rs/serde/commit/1023d077510b4aef36a41ef56fdb7798568a2654"><code>1023d07</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/dd682c2c86aa7629e77c1ccd93212d3729f4c66d"><code>dd682c2</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/5f0f18b9211732f2d82f73b5a43e4f5ff3701251"><code>5f0f18b</code></a>
Update ui test suite to nightly-2026-06-01</li>
<li><a
href="https://github.com/serde-rs/serde/commit/63a1498f0e7be991ffac5939bdd202ca16e9a23f"><code>63a1498</code></a>
Regenerate stderr with trybuild normalization fixes</li>
<li><a
href="https://github.com/serde-rs/serde/commit/fa7da4a93567ed347ad0735c28e439fca688ef26"><code>fa7da4a</code></a>
Fix unused_features warning</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6b1a17851ea3d86a56aa116ca1cbf428f8d5f22d"><code>6b1a178</code></a>
Unpin CI miri toolchain</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde_json` from 1.0.149 to 1.0.151
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/json/releases">serde_json's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.151</h2>
<ul>
<li>Add RawValue::from_string_unchecked (<a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>,
thanks <a
href="https://github.com/WonderLawrence"><code>@​WonderLawrence</code></a>)</li>
</ul>
<h2>v1.0.150</h2>
<ul>
<li>Reject non-string enum object keys (<a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>,
thanks <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/json/commit/de8500740cdcabffb9734f503e4889def823cf10"><code>de85007</code></a>
Release 1.0.151</li>
<li><a
href="https://github.com/serde-rs/json/commit/3b2b3c5f28c20ed988bd081a4147c535e7e65c74"><code>3b2b3c5</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>
from WonderLawrence/rawvalue-from-string-unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/0406d96860e9d8b9252e2002fa3e626ae48ca1b0"><code>0406d96</code></a>
Debug-assert well-formedness and no-whitespace in
from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/cf16f75d81e28c723323bfc60a68fc02d2994fff"><code>cf16f75</code></a>
Add RawValue::from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/827a315bf2198558f0325b07bcc1e2cd973aba2f"><code>827a315</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/cea36a5c017ebffdeb95d0cd0f1aad473bfab758"><code>cea36a5</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/a1ae73ac6a6940a4a57c673aebaa13ed4dfe3e8c"><code>a1ae73a</code></a>
Release 1.0.150</li>
<li><a
href="https://github.com/serde-rs/json/commit/1a360b0a6c003912afc3503c834b0edd798bca28"><code>1a360b0</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>
from puneetdixit200/reject-non-string-enum-keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/2037b634f9dccbddc11cff189ebeb5854fa0e01c"><code>2037b63</code></a>
Reject non-string enum object keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/5d30df60e916e9b8fc46c74794007ff271fdfbbf"><code>5d30df6</code></a>
Resolve manual_assert_eq pedantic clippy lint</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/json/compare/v1.0.149...v1.0.151">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde_json` from 1.0.149 to 1.0.151
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/json/releases">serde_json's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.151</h2>
<ul>
<li>Add RawValue::from_string_unchecked (<a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>,
thanks <a
href="https://github.com/WonderLawrence"><code>@​WonderLawrence</code></a>)</li>
</ul>
<h2>v1.0.150</h2>
<ul>
<li>Reject non-string enum object keys (<a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>,
thanks <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/json/commit/de8500740cdcabffb9734f503e4889def823cf10"><code>de85007</code></a>
Release 1.0.151</li>
<li><a
href="https://github.com/serde-rs/json/commit/3b2b3c5f28c20ed988bd081a4147c535e7e65c74"><code>3b2b3c5</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>
from WonderLawrence/rawvalue-from-string-unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/0406d96860e9d8b9252e2002fa3e626ae48ca1b0"><code>0406d96</code></a>
Debug-assert well-formedness and no-whitespace in
from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/cf16f75d81e28c723323bfc60a68fc02d2994fff"><code>cf16f75</code></a>
Add RawValue::from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/827a315bf2198558f0325b07bcc1e2cd973aba2f"><code>827a315</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/cea36a5c017ebffdeb95d0cd0f1aad473bfab758"><code>cea36a5</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/a1ae73ac6a6940a4a57c673aebaa13ed4dfe3e8c"><code>a1ae73a</code></a>
Release 1.0.150</li>
<li><a
href="https://github.com/serde-rs/json/commit/1a360b0a6c003912afc3503c834b0edd798bca28"><code>1a360b0</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>
from puneetdixit200/reject-non-string-enum-keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/2037b634f9dccbddc11cff189ebeb5854fa0e01c"><code>2037b63</code></a>
Reject non-string enum object keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/5d30df60e916e9b8fc46c74794007ff271fdfbbf"><code>5d30df6</code></a>
Resolve manual_assert_eq pedantic clippy lint</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/json/compare/v1.0.149...v1.0.151">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde` from 1.0.228 to 1.0.229
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/serde/releases">serde's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.229</h2>
<ul>
<li>Update to syn 3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/serde/commit/7fc3b4c30c94f73a96ebd1553f2b090d928fc3a8"><code>7fc3b4c</code></a>
Release 1.0.229</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6d6e9a11101354ce769a3438a088b6b9305c1863"><code>6d6e9a1</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/serde/issues/3085">#3085</a>
from dtolnay/syn3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6dec3b751126c8338cac0fe8085612d695e4ecf3"><code>6dec3b7</code></a>
Update to syn 3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/cfe669241065984177ff63af8b45058e6e9b499d"><code>cfe6692</code></a>
Resolve mut_mut pedantic clippy lint</li>
<li><a
href="https://github.com/serde-rs/serde/commit/1023d077510b4aef36a41ef56fdb7798568a2654"><code>1023d07</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/dd682c2c86aa7629e77c1ccd93212d3729f4c66d"><code>dd682c2</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/5f0f18b9211732f2d82f73b5a43e4f5ff3701251"><code>5f0f18b</code></a>
Update ui test suite to nightly-2026-06-01</li>
<li><a
href="https://github.com/serde-rs/serde/commit/63a1498f0e7be991ffac5939bdd202ca16e9a23f"><code>63a1498</code></a>
Regenerate stderr with trybuild normalization fixes</li>
<li><a
href="https://github.com/serde-rs/serde/commit/fa7da4a93567ed347ad0735c28e439fca688ef26"><code>fa7da4a</code></a>
Fix unused_features warning</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6b1a17851ea3d86a56aa116ca1cbf428f8d5f22d"><code>6b1a178</code></a>
Unpin CI miri toolchain</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde` from 1.0.228 to 1.0.229
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/serde/releases">serde's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.229</h2>
<ul>
<li>Update to syn 3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/serde/commit/7fc3b4c30c94f73a96ebd1553f2b090d928fc3a8"><code>7fc3b4c</code></a>
Release 1.0.229</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6d6e9a11101354ce769a3438a088b6b9305c1863"><code>6d6e9a1</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/serde/issues/3085">#3085</a>
from dtolnay/syn3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6dec3b751126c8338cac0fe8085612d695e4ecf3"><code>6dec3b7</code></a>
Update to syn 3</li>
<li><a
href="https://github.com/serde-rs/serde/commit/cfe669241065984177ff63af8b45058e6e9b499d"><code>cfe6692</code></a>
Resolve mut_mut pedantic clippy lint</li>
<li><a
href="https://github.com/serde-rs/serde/commit/1023d077510b4aef36a41ef56fdb7798568a2654"><code>1023d07</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/dd682c2c86aa7629e77c1ccd93212d3729f4c66d"><code>dd682c2</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/serde/commit/5f0f18b9211732f2d82f73b5a43e4f5ff3701251"><code>5f0f18b</code></a>
Update ui test suite to nightly-2026-06-01</li>
<li><a
href="https://github.com/serde-rs/serde/commit/63a1498f0e7be991ffac5939bdd202ca16e9a23f"><code>63a1498</code></a>
Regenerate stderr with trybuild normalization fixes</li>
<li><a
href="https://github.com/serde-rs/serde/commit/fa7da4a93567ed347ad0735c28e439fca688ef26"><code>fa7da4a</code></a>
Fix unused_features warning</li>
<li><a
href="https://github.com/serde-rs/serde/commit/6b1a17851ea3d86a56aa116ca1cbf428f8d5f22d"><code>6b1a178</code></a>
Unpin CI miri toolchain</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/serde/compare/v1.0.228...v1.0.229">compare
view</a></li>
</ul>
</details>
<br />

Updates `serde_json` from 1.0.149 to 1.0.151
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/serde-rs/json/releases">serde_json's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.151</h2>
<ul>
<li>Add RawValue::from_string_unchecked (<a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>,
thanks <a
href="https://github.com/WonderLawrence"><code>@​WonderLawrence</code></a>)</li>
</ul>
<h2>v1.0.150</h2>
<ul>
<li>Reject non-string enum object keys (<a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>,
thanks <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/serde-rs/json/commit/de8500740cdcabffb9734f503e4889def823cf10"><code>de85007</code></a>
Release 1.0.151</li>
<li><a
href="https://github.com/serde-rs/json/commit/3b2b3c5f28c20ed988bd081a4147c535e7e65c74"><code>3b2b3c5</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1331">#1331</a>
from WonderLawrence/rawvalue-from-string-unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/0406d96860e9d8b9252e2002fa3e626ae48ca1b0"><code>0406d96</code></a>
Debug-assert well-formedness and no-whitespace in
from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/cf16f75d81e28c723323bfc60a68fc02d2994fff"><code>cf16f75</code></a>
Add RawValue::from_string_unchecked</li>
<li><a
href="https://github.com/serde-rs/json/commit/827a315bf2198558f0325b07bcc1e2cd973aba2f"><code>827a315</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/cea36a5c017ebffdeb95d0cd0f1aad473bfab758"><code>cea36a5</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/serde-rs/json/commit/a1ae73ac6a6940a4a57c673aebaa13ed4dfe3e8c"><code>a1ae73a</code></a>
Release 1.0.150</li>
<li><a
href="https://github.com/serde-rs/json/commit/1a360b0a6c003912afc3503c834b0edd798bca28"><code>1a360b0</code></a>
Merge pull request <a
href="https://redirect.github.com/serde-rs/json/issues/1324">#1324</a>
from puneetdixit200/reject-non-string-enum-keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/2037b634f9dccbddc11cff189ebeb5854fa0e01c"><code>2037b63</code></a>
Reject non-string enum object keys</li>
<li><a
href="https://github.com/serde-rs/json/commit/5d30df60e916e9b8fc46c74794007ff271fdfbbf"><code>5d30df6</code></a>
Resolve manual_assert_eq pedantic clippy lint</li>
<li>Additional commits viewable in <a
href="https://github.com/serde-rs/json/compare/v1.0.149...v1.0.151">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock          | 29 +++++++++++++------
 .../editor/src-tauri/provisioner/Cargo.lock   | 20 ++++++-------
 2 files changed, 30 insertions(+), 19 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index fcb07eed86..25744c9396 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -4146,9 +4146,9 @@ dependencies = [
 
 [[package]]
 name = "serde"
-version = "1.0.228"
+version = "1.0.229"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
 dependencies = [
  "serde_core",
  "serde_derive",
@@ -4168,22 +4168,22 @@ dependencies = [
 
 [[package]]
 name = "serde_core"
-version = "1.0.228"
+version = "1.0.229"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.228"
+version = "1.0.229"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.117",
+ "syn 3.0.3",
 ]
 
 [[package]]
@@ -4199,9 +4199,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.149"
+version = "1.0.151"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
 dependencies = [
  "itoa",
  "memchr",
@@ -4626,6 +4626,17 @@ dependencies = [
  "unicode-ident",
 ]
 
+[[package]]
+name = "syn"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
 [[package]]
 name = "sync_wrapper"
 version = "1.0.2"
diff --git a/frontend/editor/src-tauri/provisioner/Cargo.lock b/frontend/editor/src-tauri/provisioner/Cargo.lock
index 0bc318ab62..f397ec3e03 100644
--- a/frontend/editor/src-tauri/provisioner/Cargo.lock
+++ b/frontend/editor/src-tauri/provisioner/Cargo.lock
@@ -34,9 +34,9 @@ dependencies = [
 
 [[package]]
 name = "serde"
-version = "1.0.228"
+version = "1.0.229"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
 dependencies = [
  "serde_core",
  "serde_derive",
@@ -44,18 +44,18 @@ dependencies = [
 
 [[package]]
 name = "serde_core"
-version = "1.0.228"
+version = "1.0.229"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
 dependencies = [
  "serde_derive",
 ]
 
 [[package]]
 name = "serde_derive"
-version = "1.0.228"
+version = "1.0.229"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -64,9 +64,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.149"
+version = "1.0.151"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
 dependencies = [
  "itoa",
  "memchr",
@@ -85,9 +85,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "2.0.114"
+version = "3.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
 dependencies = [
  "proc-macro2",
  "quote",

From 4d6c8341c88d7fbc3688aa82424c159485910396 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 22:42:14 +0100
Subject: [PATCH 033/122] build(deps): bump quinn-proto from 0.11.14 to 0.11.16
 in /frontend/editor/src-tauri (#7179)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.14 to
0.11.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/quinn-rs/quinn/releases">quinn-proto's
releases</a>.</em></p>
<blockquote>
<h2>quinn-proto-0.11.16</h2>
<h2>What's Changed</h2>
<ul>
<li>0.11.x: upgrade dependencies by <a
href="https://github.com/djc"><code>@​djc</code></a> in <a
href="https://redirect.github.com/quinn-rs/quinn/pull/2707">quinn-rs/quinn#2707</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/quinn-rs/quinn/commit/a96949f6cd257c665f544626af4e8ce668a40b30"><code>a96949f</code></a>
Take semver-compatible update for anyhow</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/5429f60d0ee9971770e60f0407d992d3b912d274"><code>5429f60</code></a>
udp: bump version to 0.5.15</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/262a493629acdc979070cd36d801464a2b8dd3e2"><code>262a493</code></a>
proto: bump version to 0.11.16</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/c19b63a04c6eff60684a845fce29fee6d74b1acd"><code>c19b63a</code></a>
Upgrade rustls-platform-verifier to 0.7</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/aff3652c43be3491908ef553fac16610c9ad3e6a"><code>aff3652</code></a>
Disable default features for fastbloom</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/01b2eee2c68b1d73ad09485b440fbfa8f6d3e290"><code>01b2eee</code></a>
Upgrade fastbloom to 0.17</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/2c82013a8cd502f3dd0bba0a4c38a51e564d29cc"><code>2c82013</code></a>
Switch BBR RNG to PCG</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/544dd9ebabf18639cb2041f849ea406100dd3d6d"><code>544dd9e</code></a>
Upgrade to rand 0.10.1</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/a7499b8439e393a6299330111d9c8564cd96c464"><code>a7499b8</code></a>
Bump versions for release</li>
<li><a
href="https://github.com/quinn-rs/quinn/commit/7c1970f19b24280af86b1a0a1c2d06d59fc453f0"><code>7c1970f</code></a>
proto: yield error on too many gaps in assembler</li>
<li>Additional commits viewable in <a
href="https://github.com/quinn-rs/quinn/compare/quinn-proto-0.11.14...quinn-proto-0.11.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=quinn-proto&package-manager=cargo&previous-version=0.11.14&new-version=0.11.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock | 53 ++++++++++++++++++++++++----
 1 file changed, 46 insertions(+), 7 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index 25744c9396..d2d5236a56 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -577,6 +577,17 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "chrono"
 version = "0.4.44"
@@ -1602,11 +1613,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
  "cfg-if",
- "js-sys",
  "libc",
  "r-efi",
  "wasip2",
- "wasm-bindgen",
 ]
 
 [[package]]
@@ -1616,10 +1625,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "139ef39800118c7683f2fd3c98c1b23c09ae076556b435f8e9064ae108aaeeec"
 dependencies = [
  "cfg-if",
+ "js-sys",
  "libc",
  "r-efi",
+ "rand_core 0.10.1",
  "wasip2",
  "wasip3",
+ "wasm-bindgen",
 ]
 
 [[package]]
@@ -3442,14 +3454,15 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.14"
+version = "0.11.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+checksum = "2f4bfc015262b9df63c8845072ce59068853ff5872180c2ce2f13038b970e560"
 dependencies = [
  "bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.1",
  "lru-slab",
- "rand 0.9.2",
+ "rand 0.10.2",
+ "rand_pcg 0.10.2",
  "ring",
  "rustc-hash",
  "rustls",
@@ -3507,7 +3520,7 @@ dependencies = [
  "rand_chacha 0.2.2",
  "rand_core 0.5.1",
  "rand_hc",
- "rand_pcg",
+ "rand_pcg 0.2.1",
 ]
 
 [[package]]
@@ -3531,6 +3544,17 @@ dependencies = [
  "rand_core 0.9.5",
 ]
 
+[[package]]
+name = "rand"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
+dependencies = [
+ "chacha20",
+ "getrandom 0.4.1",
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "rand_chacha"
 version = "0.2.2"
@@ -3588,6 +3612,12 @@ dependencies = [
  "getrandom 0.3.4",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+
 [[package]]
 name = "rand_hc"
 version = "0.2.0"
@@ -3606,6 +3636,15 @@ dependencies = [
  "rand_core 0.5.1",
 ]
 
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "raw-window-handle"
 version = "0.6.2"

From 53086a12c2b20689bd0bcde7dbb3ac7d7b67e1a8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 22:42:31 +0100
Subject: [PATCH 034/122] build(deps): bump serde_with from 3.17.0 to 3.21.0 in
 /frontend/editor/src-tauri (#7053)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [serde_with](https://github.com/jonasbb/serde_with) from 3.17.0 to
3.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jonasbb/serde_with/releases">serde_with's
releases</a>.</em></p>
<blockquote>
<h2>serde_with v3.21.0</h2>
<h3>Security</h3>
<ul>
<li>
<p><a
href="https://github.com/jonasbb/serde_with/security/advisories/GHSA-7gcf-g7xr-8hxj">GHSA-7gcf-g7xr-8hxj</a>:
KeyValueMap serialization panics on empty sequence or map entries
Bad or attacker controlled values could cause a panic while allocating
too large values.
Fixed in <a
href="https://redirect.github.com/jonasbb/serde_with/issues/966">#966</a>
by setting a maximum allocation size during the creation of collections
like <code>Vec</code> or sets.</p>
<p>Thanks to <a
href="https://github.com/7thParkk"><code>@​7thParkk</code></a> for
reporting the issue.</p>
</li>
</ul>
<h3>Added</h3>
<ul>
<li>Add <code>NoneAsZero</code> adapter that maps
<code>Option&lt;NonZero*&gt;</code> to a plain integer, encoding
<code>None</code> as <code>0</code> by <a
href="https://github.com/SAY-5"><code>@​SAY-5</code></a> (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/486">#486</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Re-enable link-to-definition on docs.rs (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/964">#964</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix some doc links to point to the correct types (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/963">#963</a>)</li>
<li>Re-enable <code>unused_qualifications</code> and fix the resulting
findings by <a
href="https://github.com/lms0806"><code>@​lms0806</code></a> (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/962">#962</a>)</li>
</ul>
<h2>serde_with v3.20.0</h2>
<h3>Added</h3>
<ul>
<li>Add support for <code>base58</code> encoding, similar to the
existing <code>base64</code> setup by <a
href="https://github.com/mitinarseny"><code>@​mitinarseny</code></a> (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/943">#943</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Extend <code>base64</code> with <code>schemars</code> support by <a
href="https://github.com/mitinarseny"><code>@​mitinarseny</code></a> (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/9949">#9949</a>)</li>
</ul>
<h2>serde_with v3.19.0</h2>
<h3>Added</h3>
<ul>
<li>
<p>Add support for <code>hashbrown</code> v0.17 (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/940">#940</a>)</p>
<p>This extends the existing support for <code>hashbrown</code> to the
newly released version.</p>
</li>
</ul>
<h2>serde_with v3.18.0</h2>
<h3>Added</h3>
<ul>
<li>Support <code>OneOrMany</code> with more sequence and set types (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/929">#929</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump MSRV to 1.88 due to the <code>darling</code> dependency</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jonasbb/serde_with/commit/0f4ca67e1f8fc4679e850f3a566d454fb30953c1"><code>0f4ca67</code></a>
Update changelog for 3.21.0 (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/967">#967</a>)</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/7654841be1d1702a65afc0f839c67c36563c8188"><code>7654841</code></a>
Update changelog for 3.21.0</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/c8a1d820ea25df01692b367058d587343e199389"><code>c8a1d82</code></a>
Protect all collection creations against capacity overflow by using
`size_hin...</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/6ad5fa5b474270f50016b4cc983e37f25f097ba4"><code>6ad5fa5</code></a>
Properly feature gate the <code>vec_with_capacity_cautious</code>
function</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/ef7d1417e3eacd0077f029763109368ee05c1c22"><code>ef7d141</code></a>
Protect all collection creations against capacity overflow by using
`size_hin...</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/a348da35fe808852a1b7e6fa890b425ad001d3f1"><code>a348da3</code></a>
Add serde_as deserialize_as explain (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/958">#958</a>)</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/2e5bc20e29e1d42eb9c85ab503964130eb1ea62e"><code>2e5bc20</code></a>
Bump the github-actions group with 3 updates (<a
href="https://redirect.github.com/jonasbb/serde_with/issues/965">#965</a>)</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/927a3d69c3cecdf415f7d7662a0521894d313261"><code>927a3d6</code></a>
Bump the github-actions group with 3 updates</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/62d14ec637834259e0fab59ea84b87ca329e81c1"><code>62d14ec</code></a>
Enable link-to-definition on docs.rs again, after the upstream issue was
reso...</li>
<li><a
href="https://github.com/jonasbb/serde_with/commit/4584d94f685b66b96bdcf07bffe76e5df0819ea2"><code>4584d94</code></a>
Enable link-to-definition on docs.rs again, after the upstream issue was
reso...</li>
<li>Additional commits viewable in <a
href="https://github.com/jonasbb/serde_with/compare/v3.17.0...v3.21.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock | 33 ++++++++++++++++++----------
 1 file changed, 21 insertions(+), 12 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index d2d5236a56..8e710cd776 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -400,6 +400,15 @@ dependencies = [
  "alloc-stdlib",
 ]
 
+[[package]]
+name = "bs58"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
+dependencies = [
+ "tinyvec",
+]
+
 [[package]]
 name = "bumpalo"
 version = "3.20.2"
@@ -870,9 +879,9 @@ checksum = "52560adf09603e58c9a7ee1fe1dcb95a16927b17c127f0ac02d6e768a0e25bc1"
 
 [[package]]
 name = "darling"
-version = "0.21.3"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9cdf337090841a411e2a7f3deb9187445851f91b309c0c0a29e05f74a00a48c0"
+checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
 dependencies = [
  "darling_core",
  "darling_macro",
@@ -880,11 +889,10 @@ dependencies = [
 
 [[package]]
 name = "darling_core"
-version = "0.21.3"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1247195ecd7e3c85f83c8d2a366e4210d588e802133e1e355180a9870b517ea4"
+checksum = "9865a50f7c335f53564bb694ef660825eb8610e0a53d3e11bf1b0d3df31e03b0"
 dependencies = [
- "fnv",
  "ident_case",
  "proc-macro2",
  "quote",
@@ -894,9 +902,9 @@ dependencies = [
 
 [[package]]
 name = "darling_macro"
-version = "0.21.3"
+version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
+checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
 dependencies = [
  "darling_core",
  "quote",
@@ -2008,7 +2016,7 @@ dependencies = [
  "js-sys",
  "log",
  "wasm-bindgen",
- "windows-core 0.62.2",
+ "windows-core 0.61.2",
 ]
 
 [[package]]
@@ -4292,11 +4300,12 @@ dependencies = [
 
 [[package]]
 name = "serde_with"
-version = "3.17.0"
+version = "3.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "381b283ce7bc6b476d903296fb59d0d36633652b633b27f64db4fb46dcbfc3b9"
+checksum = "76a5c54c7310e7b8b9577c286d7e399ddd876c3e12b3ed917a8aabc4b96e9e8c"
 dependencies = [
  "base64 0.22.1",
+ "bs58",
  "chrono",
  "hex",
  "indexmap 1.9.3",
@@ -4311,9 +4320,9 @@ dependencies = [
 
 [[package]]
 name = "serde_with_macros"
-version = "3.17.0"
+version = "3.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6d4e30573c8cb306ed6ab1dca8423eec9a463ea0e155f45399455e0368b27e0"
+checksum = "84d57bc0c8b9a17920c178daa6bb924850d54a9c97ab45194bb8c17ad66bb660"
 dependencies = [
  "darling",
  "proc-macro2",

From e4c9b0410c9f89226a78925b4b29dcf07a4323b4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:39:20 +0100
Subject: [PATCH 035/122] build(deps): bump org.verapdf:validation-model from
 1.28.2 to 1.30.2 in /app/core (#6836)

Bumps
[org.verapdf:validation-model](https://github.com/veraPDF/veraPDF-validation)
from 1.28.2 to 1.30.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/94caa46c1a594512247fbd46c808edae39469542"><code>94caa46</code></a>
Improve security of the DocumentBuilder</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/ae243fc06775ef79495accd2165e5262e31dcf67"><code>ae243fc</code></a>
Fix typo</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/f89130de3b97f19ef4030e5fc84345c4463cd867"><code>f89130d</code></a>
Fix getAlt in GFPDAnnot</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/11ad0c577853a658d11370277196c12e34b5fd81"><code>11ad0c5</code></a>
Proposed SECURITY.md file for veraPDF projects</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/59f9cd4c97799dd87d738ce847c066530bcf2ed1"><code>59f9cd4</code></a>
Use non static isCircularMappingExist</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/7494455aa44fd322fa7bd900456a3cb8f0602f18"><code>7494455</code></a>
REL - v1.30</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/ecd191d3d796dfdfa13970a114920530627a25bb"><code>ecd191d</code></a>
Fix glyph name detection for symbolic TrueType font</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/32e21ce19a478a4e8e47c4a090674cbb2cb58026"><code>32e21ce</code></a>
Update fixRevProperty method (<a
href="https://redirect.github.com/veraPDF/veraPDF-validation/issues/726">#726</a>)</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/ddfee10116d45cc37750a988ff4385dad0c8510a"><code>ddfee10</code></a>
PDF/UA. Fix Table validation</li>
<li><a
href="https://github.com/veraPDF/veraPDF-validation/commit/22ea95799bb98b50a2063c542de50de4aeb4ce9e"><code>22ea957</code></a>
RC - v1.30</li>
<li>Additional commits viewable in <a
href="https://github.com/veraPDF/veraPDF-validation/compare/v1.28.2...v1.30.2">compare
view</a></li>
</ul>
</details>
<br />


> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 app/core/build.gradle                         |   2 +-
 .../software/SPDF/service/VeraPDFService.java |  20 +-
 .../VeraPDFServicePdfaFixtureTest.java        | 197 ++++++++++++++++++
 .../pdfa/declared-pdfa-1b-no-outputintent.pdf | Bin 0 -> 5822 bytes
 .../src/test/resources/pdfa/valid-pdfa-1b.pdf | Bin 0 -> 8931 bytes
 .../src/test/resources/pdfa/valid-pdfa-2b.pdf | Bin 0 -> 8395 bytes
 6 files changed, 214 insertions(+), 5 deletions(-)
 create mode 100644 app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java
 create mode 100644 app/core/src/test/resources/pdfa/declared-pdfa-1b-no-outputintent.pdf
 create mode 100644 app/core/src/test/resources/pdfa/valid-pdfa-1b.pdf
 create mode 100644 app/core/src/test/resources/pdfa/valid-pdfa-2b.pdf

diff --git a/app/core/build.gradle b/app/core/build.gradle
index 578ace75cc..31a1223e85 100644
--- a/app/core/build.gradle
+++ b/app/core/build.gradle
@@ -50,7 +50,7 @@ dependencies {
     implementation "org.apache.pdfbox:preflight:$pdfboxVersion"
     implementation "org.apache.pdfbox:xmpbox:$pdfboxVersion"
 
-    implementation 'org.verapdf:validation-model:1.28.2'
+    implementation 'org.verapdf:validation-model:1.30.2'
     // CVE-2025-66453: Explicit rhino 1.7.15 to override verapdf's 1.7.13
     implementation "org.mozilla:rhino:${rhinoVersion}"
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java b/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java
index 9e082ba82a..bb3c84534c 100644
--- a/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java
+++ b/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java
@@ -200,8 +200,8 @@ public class VeraPDFService {
 
         try (PDFAParser detectionParser =
                 Foundries.defaultInstance().createParser(new ByteArrayInputStream(pdfBytes))) {
-            declaredFlavour = detectionParser.getFlavour();
-            detectedFlavours = detectionParser.getFlavours();
+            detectedFlavours = detectedFlavours(detectionParser);
+            declaredFlavour = firstFlavour(detectedFlavours);
         }
 
         // For PDF/A flavours, we need to validate first to check if PDF/A identification exists in
@@ -299,7 +299,7 @@ public class VeraPDFService {
                     Foundries.defaultInstance()
                             .createParser(new ByteArrayInputStream(pdfBytes), flavour)) {
 
-                PDFAFlavour parserDeclared = parser.getFlavour();
+                PDFAFlavour parserDeclared = firstFlavour(detectedFlavours(parser));
                 PDFAValidator validator =
                         Foundries.defaultInstance().createValidator(flavour, false);
                 ValidationResult result = validator.validate(parser);
@@ -322,7 +322,19 @@ public class VeraPDFService {
     }
 
     private static boolean isPdfaFlavour(PDFAFlavour flavour) {
-        return PDFFlavours.isFlavourFamily(flavour, PDFAFlavour.SpecificationFamily.PDF_A);
+        return flavour != null
+                && PDFFlavours.isFlavourFamily(flavour, PDFAFlavour.SpecificationFamily.PDF_A);
+    }
+
+    // veraPDF 1.30+ returns an empty flavour list for non-PDF/A files, where getFlavour() throws
+    private static List<PDFAFlavour> detectedFlavours(PDFAParser parser) {
+        List<PDFAFlavour> flavours = parser.getFlavours();
+        return flavours != null ? flavours : List.of();
+    }
+
+    // null means "no PDF/A flavour detected" rather than an error
+    private static PDFAFlavour firstFlavour(List<PDFAFlavour> flavours) {
+        return flavours.isEmpty() ? null : flavours.get(0);
     }
 
     private static String formatStandardDisplay(
diff --git a/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java b/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java
new file mode 100644
index 0000000000..38043780d9
--- /dev/null
+++ b/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java
@@ -0,0 +1,197 @@
+package stirling.software.SPDF.service;
+
+import static org.junit.jupiter.api.Assertions.*;
+import static org.mockito.Mockito.*;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.lang.reflect.Method;
+import java.util.List;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.verapdf.gf.foundry.VeraGreenfieldFoundryProvider;
+import org.verapdf.pdfa.Foundries;
+import org.verapdf.pdfa.PDFAParser;
+import org.verapdf.pdfa.PDFAValidator;
+import org.verapdf.pdfa.flavours.PDFAFlavour;
+import org.verapdf.pdfa.results.ValidationResult;
+
+import stirling.software.SPDF.model.api.security.PDFVerificationResult;
+
+/**
+ * Exercises {@link VeraPDFService} against real PDF/A files. Fixtures were produced by Ghostscript
+ * with the same flags as ConvertPDFToPDFA and independently confirmed conformant by veraPDF.
+ */
+class VeraPDFServicePdfaFixtureTest {
+
+    private static final String VALID_1B = "valid-pdfa-1b.pdf";
+    private static final String VALID_2B = "valid-pdfa-2b.pdf";
+    private static final String DECLARED_BUT_INVALID_1B = "declared-pdfa-1b-no-outputintent.pdf";
+
+    private VeraPDFService service;
+
+    @BeforeEach
+    void setUp() {
+        service = new VeraPDFService();
+        service.initialize();
+    }
+
+    @Test
+    void fixtures_areGenuinePdfaAccordingToVeraPdfItself() throws Exception {
+        assertVeraPdfVerdict(VALID_1B, PDFAFlavour.PDFA_1_B, true);
+        assertVeraPdfVerdict(VALID_2B, PDFAFlavour.PDFA_2_B, true);
+        assertVeraPdfVerdict(DECLARED_BUT_INVALID_1B, PDFAFlavour.PDFA_1_B, false);
+    }
+
+    @Test
+    void validatePDF_realPdfa1b_reportsCompliantPdfa1b() throws Exception {
+        PDFVerificationResult result = onlyResult(fixture(VALID_1B));
+
+        assertEquals("1b", result.getStandard());
+        assertEquals("1b", result.getValidationProfile());
+        assertTrue(result.isDeclaredPdfa(), "Genuine PDF/A-1b must be reported as declared PDF/A");
+        assertTrue(result.isCompliant(), "Genuine PDF/A-1b must validate as compliant");
+        assertEquals(
+                0, result.getTotalFailures(), () -> "Unexpected failures: " + messages(result));
+        assertTrue(
+                result.getStandardName().startsWith("PDF/A-"),
+                "Display name should name the PDF/A standard, got: " + result.getStandardName());
+        assertTrue(
+                result.getStandardName().endsWith(" compliant"),
+                "Display name should read as compliant, got: " + result.getStandardName());
+        assertEquals(result.getStandardName(), result.getComplianceSummary());
+    }
+
+    @Test
+    void validatePDF_realPdfa2b_reportsPdfa2bAndNotPdfa1b() throws Exception {
+        PDFVerificationResult result = onlyResult(fixture(VALID_2B));
+
+        // Proves firstFlavour() returns the flavour actually declared, not just a non-null one
+        assertEquals("2b", result.getStandard());
+        assertEquals("2b", result.getValidationProfile());
+        assertNotEquals("1b", result.getStandard());
+        assertTrue(result.isDeclaredPdfa());
+        assertTrue(result.isCompliant(), () -> "Unexpected failures: " + messages(result));
+        assertEquals(0, result.getTotalFailures());
+    }
+
+    @Test
+    void validatePDF_plainPdf_reportsNotPdfaAndDoesNotThrowIndexOutOfBounds() throws Exception {
+        byte[] pdfBytes = createSimplePdf();
+
+        // veraPDF 1.30 returns an empty flavour list here where 1.28 returned [1b]; get(0) threw
+        List<PDFVerificationResult> results =
+                assertDoesNotThrow(
+                        () -> service.validatePDF(new ByteArrayInputStream(pdfBytes)),
+                        "Empty veraPDF flavour list must not surface as IndexOutOfBoundsException");
+
+        assertEquals(1, results.size());
+        PDFVerificationResult result = results.get(0);
+        assertEquals("not-pdfa", result.getStandard());
+        assertFalse(result.isDeclaredPdfa());
+        assertFalse(result.isCompliant());
+        assertEquals("Not PDF/A (no PDF/A identification metadata)", result.getStandardName());
+    }
+
+    @Test
+    void validatePDF_declaresPdfaButNotConformant_reportsFlavourWithFailures() throws Exception {
+        PDFVerificationResult result = onlyResult(fixture(DECLARED_BUT_INVALID_1B));
+
+        // "declares PDF/A but broken" must stay distinct from "not PDF/A at all"
+        assertEquals("1b", result.getStandard());
+        assertNotEquals("not-pdfa", result.getStandard());
+        assertTrue(result.isDeclaredPdfa(), "XMP still declares pdfaid:part=1");
+        assertFalse(result.isCompliant(), "Stripped OutputIntent must fail conformance");
+        assertTrue(result.getTotalFailures() > 0, "Non-conformance must be reported as issues");
+        assertTrue(
+                result.getStandardName().endsWith(" with errors"),
+                "Display name should flag errors, got: " + result.getStandardName());
+        assertTrue(
+                messages(result).contains("OutputIntent"),
+                "Expected the missing OutputIntent to be reported, got: " + messages(result));
+    }
+
+    @Test
+    void firstFlavour_withEmptyList_returnsNullInsteadOfThrowing() throws Exception {
+        Method method = VeraPDFService.class.getDeclaredMethod("firstFlavour", List.class);
+        method.setAccessible(true);
+
+        assertNull(method.invoke(null, List.of()));
+        assertEquals(PDFAFlavour.PDFA_2_B, method.invoke(null, List.of(PDFAFlavour.PDFA_2_B)));
+    }
+
+    @Test
+    void detectedFlavours_withNullFlavourList_returnsEmptyList() throws Exception {
+        Method method =
+                VeraPDFService.class.getDeclaredMethod("detectedFlavours", PDFAParser.class);
+        method.setAccessible(true);
+
+        PDFAParser parser = mock(PDFAParser.class);
+        when(parser.getFlavours()).thenReturn(null);
+
+        assertEquals(List.of(), method.invoke(null, parser));
+    }
+
+    private static void assertVeraPdfVerdict(
+            String fixtureName, PDFAFlavour expectedFlavour, boolean expectedCompliant)
+            throws Exception {
+        VeraGreenfieldFoundryProvider.initialise();
+        byte[] bytes = fixture(fixtureName);
+
+        List<PDFAFlavour> flavours;
+        try (PDFAParser parser =
+                Foundries.defaultInstance().createParser(new ByteArrayInputStream(bytes))) {
+            flavours = parser.getFlavours();
+        }
+        assertEquals(List.of(expectedFlavour), flavours, fixtureName + " declared flavours");
+
+        try (PDFAParser parser =
+                Foundries.defaultInstance()
+                        .createParser(new ByteArrayInputStream(bytes), expectedFlavour)) {
+            PDFAValidator validator =
+                    Foundries.defaultInstance().createValidator(expectedFlavour, false);
+            ValidationResult result = validator.validate(parser);
+            assertEquals(
+                    expectedCompliant, result.isCompliant(), fixtureName + " veraPDF compliance");
+        }
+    }
+
+    private PDFVerificationResult onlyResult(byte[] pdfBytes) throws Exception {
+        List<PDFVerificationResult> results =
+                service.validatePDF(new ByteArrayInputStream(pdfBytes));
+
+        assertNotNull(results);
+        assertEquals(1, results.size(), () -> "Expected a single result, got: " + results);
+        return results.get(0);
+    }
+
+    private static String messages(PDFVerificationResult result) {
+        StringBuilder builder = new StringBuilder();
+        for (PDFVerificationResult.ValidationIssue issue : result.getFailures()) {
+            builder.append(issue.getMessage()).append(" | ");
+        }
+        return builder.toString();
+    }
+
+    private static byte[] fixture(String name) throws IOException {
+        try (InputStream in =
+                VeraPDFServicePdfaFixtureTest.class.getResourceAsStream("/pdfa/" + name)) {
+            assertNotNull(in, "Missing test fixture /pdfa/" + name);
+            return in.readAllBytes();
+        }
+    }
+
+    private static byte[] createSimplePdf() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage());
+            ByteArrayOutputStream baos = new ByteArrayOutputStream();
+            document.save(baos);
+            return baos.toByteArray();
+        }
+    }
+}
diff --git a/app/core/src/test/resources/pdfa/declared-pdfa-1b-no-outputintent.pdf b/app/core/src/test/resources/pdfa/declared-pdfa-1b-no-outputintent.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..f3c29fe1aa597c2ec54f930ae191698d4dd7d49a
GIT binary patch
literal 5822
zcmcII3tUWT-y5OEt>jKRQU;khbIvq1Gd0<oDW$6})Jk@mIa5<}GjpmDN;jrhWNFJS
zv1n;g?A9umF65qTgc7nTsn15D<a^F!2)*y_`~BYU^y@dz`9J^r<@x`gW9h?lp&(Ri
zl4VCj_X84Q4bdQZXavdLo&@_ZQ(zFx<>P#bJd6bU@WU__gfIYxFA4U<aJ~?1L5PhO
z;NU>QWI}=zvF*ddM=2LZ2{0uzW3G<}G&fwX!c_vLSb;+bjY_knA~Q)aSBdd)v0TRE
z;}|r9$3|(W4UI`dP?Uin)>brxOrwzjo~K;+cPRd1TmpFb;bNskEDM8xb;LjHNI^m&
zkywpKDY2QPKDrXtd~UDSOcLxa7OJ2{2$L{wG0;&SB?CJ5B_-_Ek$PaVFgzSMheg-<
zP3IsI>=zY^Yh4-W=|M11;lN<&aFYETwSq5*#BeAS3lqyY<hJ5dWJoOJkQXvMX`Tu$
z7A|&;RbqazUjBmENC8Vop5p+h_`uB=Ma@@GL}Ce!DOC`r5^&79z8)^-1cI8amMWwm
zK9E`}k*U~f4p~dW25SNglOZh%9?2mGdip@PTrP<e;}A+^Q4tD4pACtWd?^+qS4Khz
z)rJgMDup7pFYskAL-58ShvT?{4Z|@pG1M43Rjv$!5f+OD(@+>iDFB0_S|-E!YKlxX
z4an0fA`bjWCR0(hI#C63DJ%|z5h@MV3E}~Bh!g=S0TF`vq4Fr4V{ZO|i=vP8&)9$s
zz=saZ11q*J^El*xk$GhJgJFLo4>+@bwLt_v=xq;h*dRT{qGd#eIuIF5p)n~m#2-c3
z41}#sV>XRu4}XCPq6J8`6@dK{(mt5Iq`EZwC&ZuO_K_@C`hyg3AP2}IW%3xAqe3AO
z3$!Ik?p0VT^#hhYOvI#*&;GF&Jw5-uAEi<vGo=boPc~03h>~J5+>OT}M@5N+Y?e?+
zquDS}3X5iqQ4mCgP-x(xFsyB@1);XKwoE$fKM3f5po%Xz*2F|EawU9~ibED+B7T$v
z|NjxT08}#&MVO8JQwc)BN4F}XloD+z3I#AG!3YnkK#C&3uR;M^Bv(rLI5-SG#TN#Z
zLUynRn>cZDI%o^sQG)j_Bx0iE*b=@hj6+sabe22(+vBx2KO|y@-i4MK{7Jz7Eqj2P
zeBxm2bLjBJVyV_vVh@(7V6m{b@&O`S!B+x95$#DpybI(qt@Sbi#vwZa&-N+@jx><H
z@W%twfdu`Rp8p=BPhA2eB8MCUdcbg^)%JFgk4=|oRJv}|+qj8FM)YZ+nC~Q4LyKqt
zgTZ1@Q6|K+MyN~{XluT5oM^f<qPr_WwtQ^wzL-iLr4)dMPfP;fEEV{HKD7uY8Y=9M
zsc}H;A}0t~M295W8t9QSoX9u`B}8dqx{-iD(rM?*f>7iO1TBRQ;X^Y;Q7sbeqHS^z
z>>>fG@-Ts1i1qEF>g|+ub|cDYM!YW08QjA2NRGi~$YJ;(vn3F^?VN#Kn$)PW(rfq3
zozaZ;!J2ta4VP|a=(8ufu3vKL>e%JZ7rVwP2j05wpOL#TH)U0Uzy0nP^2hApk>nLM
zwpr<1US!;h$A9=AJ`Ww`?^rNy)|D1t#$P7Vws!oFq}Ii3$z$tsRU=FPM)9>V2b7L;
zoeMY5sc%CM_Y)zl%{mjE_$o~6KG@fTyO8H)<%&t7F&vz_y>8VVuW}`X(tF*|8&rY_
zpoo<!oEy$pLUfb_d+<NJASejrLa`7J2crvWOQggXe<a;IvD*jZBV4x+em}r$Y>0V|
z2H9%kVS^wLIBdVd*J1&v4*P391cbpLh9(BBcLm-^gbuw>RLh?R5x-12T?-{J2s%3P
z4ybh4#9GS-WTCSRWCStm0n25MGL={d=rec`zUw=?X+;sSK&)B13ex&n7oShg{uGJc
z$asOt2>KUMbJErsg$YqmFgV)UppdOKLKKRGAEwfV%26dCstkZZx$qUPm^du_!z&?(
z*du63up1b<#R5lJ7#L?kQ2lUBx&Q*xFeqrTN(Ic-hM8~(2@d?ghCycmt{^LjQk?-i
z!aUdoo(ucHelQ;vz(N><MQ|7_h9$5RmcepZfhomuA*_T|unIJ{a99QAQ4Gf6C^#Bc
zgNd8SHc);T9YTqVLEn<r0(9=ujlV2wpkROX`e_E%hJyQf0q+P{=|B4Rm~4Jb*q?#H
z>E|`0x7Q|BAJRB|Gsrm=D$;yAT0d>oV7-J3R0FHDG-L7RP9r1BQImqYd8vu>jU#e)
zjc=|r-_)6JK{c~d+f?tf*mvS+W2rdIE!O^BVPnahx|MDByW(EQ#J_gfwDGR7g`1b5
zdll97Hnw-)o!K#^DWij*>o0UOtp4ueuPG=$gOku=c`hWje9McN<b6#?A}304$ikv&
zT*;C#lT7Exdsb}N!ulg+S<r+m_TIwV#V0RZPPwo|ws~sPo1h8bJqcdww{ho=9}l|S
zZr)vBy{)j(O5l6!jokG8DIa~uZno<-lTC%Qmi&4zWMcuHL0Nh6?z+58$z>;ROUEMP
zHj~KI2S!MRJoQy_n#S^xMs1$y3OQ+fLdWDxud^)ED9V1)SnSq_lLtDEqMFl_HwVsZ
zF=uNGuW#_MD1L7L9DUyWyw!b^MZhM#Cf_FGrh!>WEtxIe{zhZG8Gf}ljb06y*s#F+
z=QR~^rS9IO@6J8k`Dk*@B$C<D2;rTbWek&vHLo`tD}{<<+2zY;99c6pEBGldcIw-u
z`|9$m#xo6`4D@Q*>yWd4(&0(TqOFYXg9qhB`&o>{%J)-@HXmb^L{h6_DRT|CHhll*
zAj;ck>k`+bOHl6qpaEei(?=X!abICDVkI)^&xD8ua-iPBwQ&_w(h9z9Ek5+E{Xo0C
zp)Z5SOZCUzv2$7LB&$vIDC3y0LXCqdo6;vJvJwq8>W#G9^^JQ%Wjbj^R)I&6qKp&h
zSiU{1l}Va=vT=Rmj0W25eMkJ_zisPu^(aj}(e-p(cUTjuXn8u|_~r?_gASKFTViLZ
z`Qh!=6;Fm0cWg13!n-hR`V2IE&sf8}gsCIWdZ>q`>F*VnggXgx8l0M{4C}1R<BswS
z#x>l}F}t<o(Jz|PzcAxg_pLWhJMMY<;0<=IX~3~FEPi=glI_0R+h^6k-r4!IBEf3i
z$bf|X9fy*FGznQrtMhw2ZAIAu`Zo`}&*h{XViwjG-RU~wR@_5_3#*$wd?FItrx%<t
z&!28Ec}?5wgc8%yJCS(3=n*8l`1XMg`P@jCJ;QS2SIs<PWbwcSzS@2`SGue0`qas*
zO0LaYj9-6r)nYdHPHHJTGvx&Iu&c-F!HUb-(LY7`DZ{UF#@=6kK1a{cKUGLcWc8@M
zG;a?swH$NrXU2B+vZ8{WZF}a-u8j#F7mB7GJUru@k=_fsmL~onnOpvi|FArDb4BZD
zlE@&cr)Y<0(H11<<UzkfwT*-B#s@ohO$?2zuQ8eyVfUazV>q_foowY?HjWMj<^D+7
zbtGa1YXRxv847RR?eo)@7?rFO9-R;|*rKdadcSAG$lU`q*IFHxdg;Z8*B&=jCCtBf
z1MTd-A9}g+#U&`<RsGtb?=;JzIb_HD9S)o47cD$t=3V2bRy?cAmDZehy{vv&^1f>4
zl^cb}-%QJI#0#&wy*&T$?X1C7gBWX+^P-<L6%^RE)ve0>pO>qz-1B_3hmn^4I6L6x
zZJOM%ux!Ezr+Urs->0oVyWWV>zUzC-Lub<i;pNT=bc-YtuZ$CMR@(;8r!V5Kv+Mk6
z<xkPU=fc+(8O<hDULNYclosM}K;JgA=dz!A|921Pj(M|k<EX^(Rj<5D^|s4ioob1!
znH>D<k)_v9g}}TH?ykBQ+b6Iqrb|uc<xRX|mYsvz37WZQG7r^dR_HPD@jupgM0G9W
z9!#t~+HCkkjN#1tPj_H<=9h+)`Q0AWsdnKEVV!Gph(GV$0VlsoJe)rI03Tj+^4-&_
z<%dMWhv1h?1XmWXvSb<z`Qdm1sbxrP!U2<|%?m8C<Q(R)7am?0*RPE)Qs*YI?q3Wz
z(Ry-@CNrn?*3gQb5+gU0^5gc?muSqpc%!opr$*#)mi=~Mvgv^*X4mYjI<}<VC3(~x
zb9!icpmmb>M59fYURDY6YV<2T8r+AjE6LFOSU+V*%1zUoZ)<Ly&4~QX_8NDvh{AZp
zvOkGEn_ucos)W{0Y4R9mpmBfsJF@z>m9*LgdP@r!TXU{GtvF7aWqfwIb=TXtdCGSY
z<1W3epQ+CBuH9PAJaem|qh!%jhlpS0O?;&|&tq-2X~Eu}!<OBl&AG)0X@-zD@=A#8
zWOa1es_!RGTRn7tjbyvo`4izI%dTX;TfDJtck=$zrFPG&Ry&janjY1@A$#)j!SBwb
z1)W~JqAtEfwkotTZ{jc6_aIBrLAs&foiN)OqKqmvpWNuPylH<iynh5$R(hjiROf+=
z`m8!zK~Kj1Rku<zx}PobIYysn<$Ag95XF@mvUY$^uvDaKZ8WpV_${q`-|Rfmjg*@m
z0ZCbqqv++99+BU@TZ5A_?}mG9XtoczVRNJLQg!UjGxo@_cc$aH-Q8&1s62+hcgKi%
zr@5mu9weV#-Fp80iV=VO{-naD=XE^oT1$CYVOvLCq{qm|FOr|17S&1TEt1kxf?met
zo3=aok*a0&M~i*0<QkX9rtJP%y3IV3e9Uv2+_im@VMWP9QB|B^lDpl@YW@5hBxn61
z_3psvZHb|g`5q<d&%B04k)gMp)!x4}`prIde11s4{P_VvK_QD5%jEIzI@8lG?0GU~
z%a&V%yMEDsVb-?7B&nYnR;|QDU?4*oB;xX|eGtfo!JsoB(eO_&v>zC~ADDGNFh)Nx
zn|@%n{lJ+0z*t|y5HO~GsWTXBzlQZ=2hyJ%{qX}I7KsOvee?^;_!>qhKDd5?M`MDC
z|8p4lvIZ_gpTkgu0fyi&VPDgt*1+B`@t8C)h<`!LM8AU35ft3qba=Ru4`xB7_S>+Z
zI2I%F0Nfzu;1bw79l~zlmJMmY|AH^XZaip_y(5oqYeVC5t*z<S&Q8t@u;Q_ttm!rk
i7iTV$$#sDK9%XUwv<R;B+Wcc6HZ~+nOJ{Ev(*FV#2@>W2

literal 0
HcmV?d00001

diff --git a/app/core/src/test/resources/pdfa/valid-pdfa-1b.pdf b/app/core/src/test/resources/pdfa/valid-pdfa-1b.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..14d8d0c6bd10bc82473c52dac6a03a38d231f874
GIT binary patch
literal 8931
zcmcgS2|SeD*C~o=p-79=lclK`&&)6wjA9Vk*C<P4W-!cV7ABFslr|MnB2*+L+LWa%
zg(y)fSyJhh7G9Br`0j(=djIeHU%v16ec$6Z=H7G8J@;()KKI-+s&*!37@UR{O11jq
zp-hyjss%fUL!}599JU_Br3n0BUw$xyt*u4Xpo{1bhGxRxbD5MKW*i=iA|T<2x;nbL
zKfw-kK8GnpMw5uz5C+4g^H>Z4#)rYAV|a85jkMwa0T|3<2<XU6G@zUj2{+v!b67wj
zhBt%B5bUtyFd5VxBplFK4dDNTv!VylnIvEo2*Woqb+I6ulDIUVNv;4w<}f)tGKU>R
z=kbA_jshM<K=<82a@b^yOvK|*>HH}oYYq+YflcT^3@UvR&9@Z_xI%#inGEO<qaaf9
zP3S%pAyWV-{sy{<N7?ZUm}biIrqhg=OfwE!z$XcKLc}SKLT^4@@Fx(W5f4c6C!me3
zqqDK2lbNlJlOxH8!sOGZ^|!ILGjet`1+0vXoXF<j+s4+`*~!$w(Z~frr{y-Al6V73
z2f{)eZ-1150c=HQ`wILZT>x=_0fB(dgJ3fzu!#ws3JhRqh~f)?>scsKDrUd_f(opR
z$tdZrK*joUhU78GaK6MUF9?6KMpAztOQyQoCUad{5Mf|;+-Bph`X@=^ddtlZdeuLY
z-)UMmD$kqM+~ky$vn3}sqR`18v!C-u&s`cF+M<(^KsE{3)&J(EQ+_RUg>uSe$@+&M
z9SEOgS$zY7o6)@<ddxRkmHcj^_~YWn#koAAO{O=FZRqU7=cDLs+O&M2h3JH6f_&q&
zhzJsCYX4N%X$O}M+fjV!ur-~=pcr#R&^9bU6Nm&2ye_1xh11X_dZ1tjjsTbd!U9?z
zoh^Vg5&HlzSRX<jh!9{oBvc&ff^9H}QV4dUiv(aC;w}h>o1_M&gF&DPz<54{nA`yc
zK+`fI45wTG#sZ<BNvZe{Y{{VUp>2~gJD@xuz(I(x{ADP@eQN0RNHRr0VRC$bu$Y#0
zI##FW-v$v72_PV&HC;fVfguoXit?vWlY&pPb|9jN$cUd<q&tl?rts;As<49<d5ejS
znmL^rL>Dlqlt}}a(D_szgDc?hARJ;`he<gnQNThB9$!HAqwpY2JZwdoZsYJ+cngCj
z@Z)bo;dKxn{<A*>3qGiShM$H5ytX!CbS$KU$AkacKslYiaz_22`tkiYd;u>40SO`k
zcB+N+5ILrx_(}d)2>I64)SQF@%%p^xNFR*)L5;L0`2atdvcUpluzi8zY$G<G@kbwQ
z2LdEck+{J9wEv_ne{uXj*m|;SLt)YX-YLc)*0*86UXRD=LOR-bNJk6jfvj|2KJWwz
zHsVu}KnG9|wG^&7o#E>@-9`L~;E<sx*a8F_gKEU~WrFpAf*l2PmJ0}ZEf81?J|E~a
z>BmVQ!LHM62%1E|6*wI%n6<DGYyz9Xn_xTG5vIUYm<H2fAJ`XWz)YA0vtbSl-a8Bq
z4d%gon9ro}{a`+qLZ!n3SO^EfqIHw1BD<L;ghPD$OOQ_Xr;RkVo&CC-0daq|E&0dx
zha+lf85;hv(VcP*bCP?uIGqyg`<ttKLT#K}YJ2q4OL4|CBuw{0MR6PD#P>za7K^;E
zA*r@+-$KT*VHp|KMG9_XCVQjo7y4(MUi!XT>Bw+_ipDB6k@nMbD(6bCbeA)HEkX>w
z-{>yc&=J<xHoEI;aQIilBZprsRI#v;vTV>We?~uh?zwt!d90lKC-E&7Qct(mU5v$3
zl1PysRcky$DiiyIW6t$l4p`0<Kq@LdOG>;JD=2Q@jE5ddB;JhO;kGPA@9d3d#bx&&
z#NPK}A6wn?&28D%x9)+Chtp0Sy<qX|eP*H7$s65jREMkIIEoXu?Zl17^vqAn9=WmJ
z>td_t;X+LUCamto{=8)717llNqoRd<vH^Qv%HXOvd%wi&i&K3aCsIl_hm7OwyccJz
z=}@hR<5nDxQ^|~D#LO~Uq@ko4bIf(~M<u;Dsis3#D#f1+KH)#T|I}-FM8)}tSdT-`
z!k$?v(I1mP+B(TBwk0^WKau$|b9tAG?U_AQyUHzXQCn+XrM+I!qJUa;#h>;(t%4xC
zyyfe$g*+PfYI^0)wU_s-PH}%{60&+E@LWeh!%|(zx3g?Mo;A!ksF1G^<8y*AcHsi2
zD4R%#s-9RWbL=XyBtWAf1hYx%MA!D;Brqc%_DAhWVB*QyZZmyj*DSaY+QyY!5QbCu
zEz-XW?JD*vepl7XeT5r)i!W_7n5CaLchG$)OI-fBzFE96yFJRPf+S1yUg(ZFlCX@M
z5+!+9Oj`f+49m#s1XO5Bp;ZyLg5+vcnd;lCi`rDyeXx6N7gqh;WykQ1eZ%Hf<$Fs<
z-z^#Q?ZI<DzMFaL*s@Hw{7O?*`dy6zzk#P!Z|4;cB}%R|xj%2sT6{v5yi{J~>IL_#
zMDzBEpJkNz8B;U5jC&fSI<zWxT``ed($$u+s@d!H`MC1W^o6~aCm!E1%6j+m8@;h-
z=GD7IN@ZWP&beo)>pQ=u4Zo|3RNF7@9GN|IDcUVAG9`L<!ML@KPr9@CliZ0MQtTz&
z8|_8UM=x6xk7MB*Pv2YF`9}?`DZHyxutsvlo<8-+5=FT*T)0@!0+fFEz%0W8a)4RZ
zyqxfeb(dvSUYfy=2J&-Qrz@IPuZSpV-0UG}di_X6o&0=nxn6Q?DfDV|T<vA(gY=-|
zLPwt8Ba(dE&e{wyDW|<OOcZfkWD_@XAy9R3>ls3--j1Tew7#qj>g~aPOT6*>F66JB
zA#Lk28W?qexv6r7)4V*<`>I|!l#irvyy%qAwnSV;*#*Z-?cEYD!re_rmwWH(Y>`p+
z*MB(_Cneu*iB>bMSfUBJ<s8MFzU&`LbV1eK#hC1WR=dVarer_u$}<1iDiz(Vw(&#K
znX}>=dkq6^#DW>|w-ou2_N|Zc!((mU532j?A?Gih@pHe&?Fb^FjS5Z~9<wjnQo72v
z#Zkol(2>JxsWpEf8Z4P;NPGDB#;tG41>J%hk1PgjUyZDv-5^2O!`mG6wx_UAr>`R-
z`S-!y4_mFjWD)iyyh(R{@(jx{x>2!gfpKTt{OigG?;VuE44mGsdg)$*E4<S*Qd1>b
z)+VWRm)gnM_L|!$`}K#9haC@cuknj7l2J!hKbUJ7i1jqg71v1~f8Z#}-ui0O;%{Mx
z7ey^?_+ncwmdgHe`(r@M3ipeb1DkGp!X`uH(;fY(%k-+&uw*yqEq}NwJp->#eNVod
ze5oV3N=#R<^l0ahaC8UxLR9;e_fiLfrPj5*J4JtPU+!7q_)KD0WJa1ptm!ihueBY5
zW4=V?C&=Ye;5}vE-!<&K<THPcpk9{x&?7=sS8~pQTal=bb3!6>Wdq;4sM2FHbg%YX
z+0-434=)nsL=)TUoJ)JlHpC@o^fu3}N@L1c$X4DmSmPC^G-@K3lE2qKkF?`j?h3`+
zx2qcU)rJ!HzCc-ZTs3~BnA@vhyIkf-{a^z%uSLAts>^cj{*t7)qn#_~#6D4cGSbp~
zFDc-fP9u4?4~FoXXi!G~U|(*Es)i1(?6I0B8D}|o9k=^h7`EL-EU=JpBBSwL)h*Qe
zh4*%9jgIWv%=_-Yq<*AxohZe&{lrt<yUkrgCEMN^`d{SqP<V_ytN3)q!n5P~s$<^o
zbBb}OwKNmyho0=Rr$H4F+m|cvo}1mmOkGu5>L*?CF!{U3;l9k6>^tT9pBi?XqCT$?
z4jf8fv2*tKyZhYkc!YL@m#`zetMithPj7`(eJ*H9QNPpD!6|)FxzdVmyPZAR#c=il
z4R-nCszt-ONu4PjI@Ix`?1<*QNn;<j*<ID#tY-e8;}XVP!!v%Sojc2i-`l-PJL%fK
z%5&;@K96Ic3^_-qKt?`;iQ_(wt<AHelVA8*9eQuz`B?jLcm30lCwC2SSHCMRC6A5a
zcP+{zIN1&@*nEd9m-I5`-tOMoiO>Z%ufMI*9{(DSZTwj2d!uitBfv`fO@GX%J3bw(
z&D&U-v2KIG1&Ra4j;N>X&MU<Z4|5h)hQwx`VVzV;Mqjm7=9mvCNL7`*@@d#bRj||_
zd@5e>7-cG6B+7IRIvM31P+(P(@WE!T5DkqCKeavI?WlhHmc6I5y}h%Wo2Q2dn-l(h
zIAP!Ythb936Pss`o)_<5)fXxo{nxYp<N@~A6VZ>O?a%kTtF_f1FL?q{^N*Lj!3GgH
zQUuTikT>0z!6u>mif^MK291Q?La@eKbIEi+hIt5&?iga@L=6d`5^3lShA4v#6p&HS
zF(L{VNs2+T#D~D)h@?bzurgCZ2t;}!7MBH1*pP_DWb^ezB=qDEJ<vwLFdCX95d@IX
zuGV&tfWu)1Fa!`@gQ$VS;55}CA09Zv1#@@-5KcoI4OsGMK6(xy$CzRWdL*=;K)}_5
z;o#t4jbKd;4$l|H5s5??i-+-e44}a9cd!K%5r)lI2J=k{!f^d#7@My#DU$}3!-5&E
zFiryt|Cs2<*&U?D5Hc~vn<EsEl$55qfJFN5*#HFKqY2alEj^GM(S%ewkA&W2X9aEY
z<M0JjDFH|bG_X1vI5a%1*uR+%81wJv10I-`+W^q$fn1&8v%>`BY=(F&UK@ke#b9wx
zc)T6~r-##0!{YR?SOfSUD1o=YP%_AFLALuJ4E=?2YUqz}`%eb{iT0P7IXov20)}X3
zb^x0b%r@e3!RdPP0tY=M@Z_x1R0c5OlV5E1A6wDd`d{0T#X=&J#kIE9GvQE$EO6ep
zFd?CZLIzEbNTXq~+5|j?h}EKFa5x_v1`8exK}$!A>a7E^Dox^l!=e8TQ5-<F%s{TA
z$RG>glhCxOtCs(p$y}yxgb=m=<M^ae|1c|8$YV|}MH&^RGwFy0`5;7bz^*i^p3l^U
z8=CUdzc5%SXhQ>l6fgu#y5ZzPH)0B=8cYVV<n)*nwl4`S!u-(O&{4qPF+r9EA=eJz
z0~=v*-jEMNBoOlGQ}MxM7)~`NnZZ9N_@6}&5R-yzjK6F;6b6GesVjnm*?gEmn_BsR
zP>)OD2@n$^I|0(Ca@dpFv#E3v+8Fq5N;t5kf#`+**f0%I(Erl&zsKn3TLJ_k2_1~Q
z13>G~H%?k01N|2nrwyd};|+u-XzTp(1`?%SOJdl`w#Zj=f`<-Z#Khbx%63~P%_!WB
zIUN<j%v^M221QC{(H)P4_K^!sO~l<d&Nf}a6}Zx57TUMXmXL6AkD7<NudBOHVSWCr
zRf6}{%@?-hcihe`4i9^u+S;8qnlUlsFng8>mUmY2Zsv9`+Yl3)oZ?q;soH2_V9_#0
z=SzvO%HZe$PVmyg;`p|d>iMG!1Wr{7L-LE<N+;|_OXWmk^E3)mmsGU5cD<2I-<T|~
zu)N;5NO6V%aa><Mthz*QrSyynXO(c@F?S5k+~uUY#X_k5Xdo*6Xe3v=Vx+)=;T@w!
z4{Qt_XDo~V)+QcPyl{>0=3#S1d+p<jZr*N&>x`2stz~O<mr>@hXU?fz-3&1eUrwY-
zE~}Zr%FAO-RHjV?)IOx84IY{arO(|sfVpIHjJS$i$6mV8#Ag5OClT_GX5EVrV@Ay4
z&hEXVFdV&62BlQ)e@8+Jl8D<V|9r;vC<D70LlNIkuUH{QIK4nCLi4o5)#&(6RFN1v
zS`0hy%=URD;*On)$&rxc9D8W}nb{2T?8D1wvv8}o)F^D7DM3!Kn<pnNwOZ<`*o)bV
zH{P`)I!QDeZ6J4_j(<eRk-jB;V596KuSe*m5=SY^^Q06ilCZKv5wkk&M2lBQXIFmc
zbQkHk&)!m*-RU!|6gq2V#M$31Maw1ZRF0uG&$+u1XRq!Atw$~1vnWG5<FozQ9Dk=-
zx$~Q&Z$%%;Tw}kg(N$})^(M_n5B)X_qO_KrI@l4TVRAgn_Vmfd_ILX477ogdsO^qw
zypv2x#WJnL*Q`7mTU&X|+aG70T$e0Xzw|dn`FQ8@<rKxsyPlgfm4ZmuWp+xo#(k<9
zqHHR7th>TyzVB{+xx{N-U7Ut=uuL#2SnSy$h03ryM}L1IQYeuI7noJuotFLRe#PNk
zWBjpsMv>b$a+SmviDItBC>hVsIKYj^nkBDZzvw`mMwOknQlMJF{^uJ@tU}F0$w~<V
zi-Tw0s)#Y>p5HGxAxP9R9x-=OI(fvc%daq|<YZ`Sn?;%JE^>z5ymh_D*6vF#Jn69M
zrpXSgZ_uX1D~G9d{axC1&NYO(FLk9y&@~D*J8SZjywG0j!(GOc#?H(%Dz}R~d&mCy
z8M_Rw4aJ<YH6hpU;?kVtOxGNdL;s1_MT=}|?P|B}%|3QPVAXS^Y3*Xu=B&aT_xIZV
z^S|JQ`*)vR*7*FY$yTvX=&dkovztYW3(<<W?WXa!l0qkmv)(xsE*3899Ee%?oX?EN
z-)0_?7?UWL*HVAy^}DAqBe!_H7s2bAy>R1~qsu)WY{OWv^0&snP!?Xjb$*2RMg2?V
z`{T{%B~9{raF<5Cm&oVUtog2$PRg#-(tEfACzn4yvGqjR3C4*z1ejstf8OtAfU19@
zpU}_R&+(eaHHjChFP2>OdX(6+a*!6Xtn{Se*{qB=*~*RQn|hj48VOAv87H$^b4JY%
z<y1e3f2`K{q3LAPv!`CUw~cOlPDF~8M=%a==iWJ8-C3HEKq-2)pi;gvP}y1edZS)e
zNY<Wva#Wo+f;aweir2Wxp0hYoyZUJBxy$EIF`^i;Js8dB^&M8*gKF{`R#1EWG_>-y
zS9u>^wsOCf8HrkDeAj!g=|R)@yK0tUb!+QNlSoNk7eD45x#*v_`(k3=_lx|z*1U;A
z+_hIPoSwINn7DOa@f*l|YMRe_!2EW7538@m{!`M6PnSOwj(YcPhYLBE)47j=;{tO8
zOTC+tjp~hmbKbN+EBlR4bx`#on;{$TY)zYRJ<ZgkskVBDVC}8-UhY>!PfVZ1zHxY~
zBs^PuuV|$(@m5b!U|Vi`+N}>a2igMK(|0C|R6<fei{3KcuKUdV9NNJ1X3>Np86}~m
zpG!kZ6HB&;j_=$s)c9rZ*YjUfK3^N~=xgoS(?9q3)(<*WPig!X;m391b0!Xqw~KW}
z9FF)Lk!@*pJTB=fCieIU+<s&56+W6?LB~WwhZT$9-|Y|E+l4&JuPdmFPTHa#F3(gf
zSzUyVSzfrNi&j%?*YGIw(W}Mx)Kt`NRdiKmR=%(3*t0Ws$sS8(b!Ba{wm7FlawgZ!
zUS(Ef`e&Wn5|ZC`o2ULlLk|w&CN}1NbbjV?A>YO`Y}bLY<quC>!6hgEo_rLSPK-?T
ze<)Dbzm5;uSND2lXIa<Hfz2Y>&?UQY6FX8Z-2>Z1C6;4l!+XVV#5BcNh*{cch)%sb
zE>h_abJ*V0f2O7D_pW<#p_{Gl6ElurEuNpsO+0bx#c`jcq~mL>gEzlSH&jK*H2Z8^
zb^*Wju2$D3o};&Vi^j5A!GpY-vBQg#gxcG1+mgfh7kgfK1f=H=xP5&SG8oc3a%sMv
z!gco2mUjgO{<2rs1vx(RDSdGBWcBr7HnAYFh`{*3A-WLn5;-?wIRSOe_3cOWZ?y;S
z3`=uQTg&m=GjLE@zfoU8e`he}g^>H~S*Yjumzfu$nxYzF+bTY6aGkIls{Ghn)Lv>j
zWV+|;_OFs(=k*F(cV@a4h&=k=m7N_uVfjw=n=0pPeoOepC)WpS#9oWliZNP_6h4g}
zne%nUn0uO?q1`LDM%VN9H!pntzPcl0ys~$X!a={4>vTW&<aE9(UH>xoH~-4_P1NVq
zl<KtRnC8K;nz4dQE~VE`57h;}3hde2DcdewAQYkrHuBAtUyh9Ib!^OLPjr28449Rb
zk!ydppi@g1L;U`_J2`z$gLrC>UY$Yf@A2huqV<z=V?H@MSOZR$#_?APh1dF0CvINS
z?!JD`3$u&Vap|#Vpy#(x`#A;5H>g7ux8^=R#W;0z$s71!(8ZqRWpaT%?604DJL<%a
z=X>_w<ejh1>aK7;e&N%z)Jvy|AC`3RD#y(Rtcy=t-){N-^hv<W*3i0FE+1Ict*o&4
zQN5A&5xArO7XPirXzzhY`mC^Mwb_01O{FdR`g;$&v@M$$G5Re!<rPL6Cq1xgox%FB
zy#At*y|qWp&X*33#XYNekiFV=&!(GMaCpP;_W{>l&HGoHx?ePWxW~HJiVj`FzU}(W
z`y>5DT}o}q2DyoxQ2N;W;~Uy1N{EYbgrTj2Aw&5UI{uu4x37h@5)`$*4}07%PWk$6
z)f2<i;hM4M1M9{f52WNZ6gAMjtjey2%^x1&YSV*;^rgMahkP18T~z$^X_@xCfLlv8
z98|WDe@uUPF!4m{`h|_;CS7;KQ%1*A5+_dD?j=cXtP7gqv??@yHR?oo{mw$7QD?eD
z_?F<MH));$)i+%I2{Y;$GwgQa#ryd<7w+2c#YAk>x4_VaUU5u<)t!b#l5Y~e&)qSz
z0CF~8BH0tJ@OYwZ;P!`Y=`TwPlG8D1A2bQ9i{>)v(77wI-eu-B3BoFiG=0T{yz2c<
z39gU@E?e2AX+gyPB2#U?r4g-4nVMGrunZ?YW6R7t$1_`6QgT~b;2L$i${B*q;}QoX
z8<qcho<s_Dzg}wmTF66zax`Bs1(_}@LlANRb%4N~2fWG2(F-Y>gBs2h4X8g(B~TVL
zkdH8Y7<ArRK2poJFePi_h}zm1yasL^DC&SC`rjfP!0iY)?(RSeOKX400H{bA9Z3P!
z{VY%+rI=~Ke_Q~p{U`Z9m~t|&1*sj9Jg+s;L(+DvE*6K!6F@NuWb9}x77fTiX8&&}
zoRI8k?Z3>6ei2f{qx*o;9H>_zIqcK}X%h&V1jq-PhT(u1&?E|C|A2wY9w?V0&rcYZ
zNcankK){0X<)7(vaaw<Y0bPNk|4fG^XoE82KfrW!{{q9|H2)$Wj)40cI_zKRbg`h2
z`{y|{bv1vH5Bwqml-79Q*8vdh$OxeWTS1^8&H+{E$v~S776@@RsEAvbK-&zAOf+@0
zv1GEAmZp}eu_*zxOo+x>n%V?2Q?jlu+3?>}cpwFCz5t|-lMd3=BI<(QHkjI)q5cc{
CBM-s=

literal 0
HcmV?d00001

diff --git a/app/core/src/test/resources/pdfa/valid-pdfa-2b.pdf b/app/core/src/test/resources/pdfa/valid-pdfa-2b.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..1b7687fd899512ab78395141f9afa342fc25659f
GIT binary patch
literal 8395
zcmch62|U!@yEs{5T97SUCTqpa7z_qO*6ceG(U=(wvzdiSWG|(SvSka2q(q8rWhq37
zlB`h*35k&Pen-8%?|Xmm=YN0q|GD?h=QE!<^PFct&pGFL&LeMUYzl!xH9_*tUoPf?
z<mJstL1YY?jwh3}!4x#z59Uh?#*;MEF;E;62Zmsc@iYnnecY5xC8FslI8sYfOY2Xt
z1CB-}Fj&+mqy`uQq2Q=QJRRbLC*UAd92$$#|33f*Q}J{hOA;0^&H$zQYhXks0tVr|
z@dP~mxE+~*#~eq&0gIJ@`M=Fs;ev1k6yOvvgl25wVs2!DqF{YCxdIR)GJ#ArB9nq}
zR2pEXBb|z-<9v^!91a<>1X0Nt9PKBPH5m)=ff?h1@EF|YG|iSlr!eT|Mn(W0%PA}^
zX~sAoG=o3~F#Z90h>AY`7cka@=#9e~5D2DZ5}k&kQyHv9ab$SYaP+@{SQb$MP5uV7
zv2}DdbaXPcwQ+Jp`Jf3j+%NlWZ0!u39ZdjMh6YYXX27qFt*x_@iG!no3jqD4x9Lxf
z^+B3o6)@S`AEc`bv%-;l>3(1>0O9}x5a>867-mWUd}55l01nX81JUTf(i1_<49Gd1
zoee7d#w(~NbUEw0IXqXudONtJy}+vJEj&7BiTusYHo5z=f)I1uaTbQ7?XQzLwZ+XY
zc(uP2IbqVaB0}Zp?s7^lJX{zXQRbwZJ4^nc?ZKxQ+N+tCU}PL{a`wYRr;=9iJ#?mv
z=z$ks91!0Gi8FKbhtbnVwFw{88);)m&R5l)!bMbrLnakh^oM6uOF%dh_LqLZh-H(;
zpSC$2r{G|AXkQ%68i&QB4arQfy9zLkKq8>3T3{`8I8+OH6a;f1(*b+IDgZ7ON1}t(
zSk3^zz-C}jfp7ra#EJ_?9NirTgd`Z|gk#bHI@a2N;i{Y1fS+JMRM7!?8kpr@2M_@I
zr4x(cPk#fnfKuR1t!QAFB_2xyyKn0306Gc=I51c&|3V7?P5O({2u(*5$i9ED_@(Qw
z!2BiO9gJXU00wll#?jGOfCLOz|4&N6|J3T&!vA&MK`<aF=`07b6owo95h!q^y1Jg;
z?~urJ4s#Of5za;j`+jouNN9}{${37(b0^M_jmzW=xH9gb5a-zlZuZD$P#&eTX9e(A
zmiYPQcS*Rd8lQ=>7x2%yw)=ClOyW|h98_9~sqyB9+>P3MWA%7n^AO#&im@8~p|F{O
zm6MCX;fs2Sm-+<c%x!orJD_GgxcnP$m4oYJg*>J>51aG8Ins7JRu!F$iu@wq;u+GI
zG#eaqW8!XrIDrn9lbaB&@e-Dh(kHKnUQ9whj6LoqmZqIw(NkUb?0M`nFVdC06F=O<
zj(qe8bi9<6dHI%k&*$7S_4JA{C5%J)53<z8BRfumRc*6$!NiIKUbp)_FO{hwAYpBN
z=ZaGa&kb$m4Jrj@1Ov{z<A*nq&wP(L8z=uhjwzFB1~!bd^A^rg7?N*@qco(%$>ql3
zV>k?UL1olpuDDu!k<pIh?Yd|sS3RXWr8@O_YT7bU&N-2N!eK&Sf+H>ZOX?R}Cw^gD
zgyZ0A{_k7FM_p{MpKdx?Z)poU(lV0uUb0sLBz?~x`!=fqAt>IvctwDUrIcqkp4fNy
z^xia&apRD^%YiqBN;`II@qFa4`I4`fb3vj+BF5(`V)fQ7a%BM$5!Jl0hyO}BvL*o9
z5dt~Hdv)~KCoahH<hiKR2?SN60=F%`u?jnHg$_`7c80+vK1KSED!Q_d#Gh>1bGGc@
zboHHsx*R&i+vYuX6FEiR>X^nGk_Mx!8c>2rZvhWTVuBbYEsEz7JD<)qHp|H71W;&N
znN=mF0p)7YnBhCE1v*qWc42JasEYE9yN=-pXO_&Y>d(}!jEk=NPN-78jBlyBB9`k`
z(r6-&djc)>n|ssraeMVb63-svXWJF_sV3x!@D@kz-TBmtx&16>KEB4!5R)@%IMKm7
zq~3V)o-vQ;=s=Eix7YidarNJD0@IdPUp+R+8-Mo$*EzAJ{0S1>I1{aTqbK9Q@M6}|
zcvGa(IX>sef`vQLZgG)m(Wgq+tu=kJojG3@Z4{zn?`TyFR=!=iYhJys0;_oQ*~-p8
zYEGf-iA<>ikL2kY<;WT-p)7bfd(cjhPWT*$Ua3)lY2Nn2@QD3)`Q_f3!d}jm6cVpB
zbnTUlsOhvgO7D9AQcl_E?U{P*)Yw|^$jZ9XyU^#^K`9JJs^3eL$iRu#9Clu(GgwFz
za-C@tw|py5Ubz1{B18LlWm(otp1$&6u%D>6>e*W*``GwwT~-34&JzwbvN>%pW`1s(
z76SS3FxD$GecY4aId!)j?+lJ{^@V$wtcZJ`9PZ_p_1Af~5XUPrXsM`V(jck^b}PIL
zxpvn-6zKwLdjc^&*VC%t#b0v{dr!=tTdrY@IIw<^FP9^(b6PLZhCLV`UnND0wC{hV
zy0kjr{k(a$9qjylIDXq&-0>ikqCsh<-WB`G!?n`3y^c)E<WM28x7F-9bG~MyBkRSh
zimD&7rDODpm*(@WBg+T4JGc<1sTM&WC(6n+XNDqDzs{d}(Qo}d4{<i(L$>ql9u=}d
zMT6K*!{N9c4`eSqy}%EdyLL?e&eH@}*a?$JHMwX(o8;P)O6lD8YVPQBI!h^GDM21B
ze({z3%An@w+bjcBJoSn=HB;B0J2DH7j2sgF5q4=;)b5V&w)N~8r0<Wu1oTRJ+`b#w
z^~e)uykK-~Xf{JkyGem4Xi+TwLOMG~RR{Cg=t=6Gq0}aJE&A@u!wZa+<3_il2Je05
zJs-@we_%Wl_tw7Nv%#^4Yl&%!+KOzM(F<?2U4X@Wk19zJDni3f*R73roVeq&V=KK~
z5cA?_guE8d*7H@7pf6iPB8vnAKfB1|Vsf;~XRU17F2sjdG7F=T18vT=({=iBsX5c#
z+nTZn{N{p<Rk{jZaWX5$LTM#u{EJb??-xl*6@8TM)KOYUI@1TT8Y(v&kt&*&uodS|
zY@hGI6!&sATa8+7J6Dq&cX@cv*4Wolua|qfpC$*~*X%Un_JJVYBX#R=llJu{pl0xe
zJrh>jdEzYRAHYxD4^tU*VGk@rT+QhmZ>j<v5O{h*eP#Ki1$E6|w0(JaKQqmC@ah|_
zC*7k9HSXhj{<p~!Xez$gDn47PEPuU3e%1SPVKp4I4{OZ#!jn|@Ca59en7HhzZ3VrA
z4C&TdKfZ<+scT0s&E&=uJg(Q7>NsTr`li5`yO=F`f_v@BS+~bWLx;j^ND<!6#o{-!
z`@!-)x72tsYuIccpV?I}BROVwVxpiLR<ILFs(;nAYpE!CIBiH1vz}ZK(S0U)b<*9g
zT+Kqs?D^0gh#Ax~ev6$4(T6rYCasZt|7_z8<zk;#v9A}Lqtn0!KJ!WIK92p}+|j9h
zepVMh>w3P@cs17kCgk-KU3mGL)NZ5IRn?QbiV;q>3p*_y8wn-9i+Or#x^*LT=fejd
zn>5xJ!&N%JH2PM|EDQx$@qL($nR@IqM6_@xs>Qm^2bW6C89IXAkcRJ7JG>|qXbg$X
zy-rM*NmVSjmL;3bN$@t+jQDh%#7J1`%)j9*eFZY%tYqf82Bk-N2b5aXBuv_DV<>``
zm)_Xk9CK8DRAuk!Y;W)E=H_|yD2W`twv=%8S>8wCq@-@{m7AQi(leog(f^tiZQlOB
zQohZ!=#RYM&wJk0+UoZuk3g#ZzT|cFnG`f807nOV<9zWXl;TYFBSkPCi&8v{uvW3A
z7~%ZzW+7CZV~C9tCL{oZ#476RfpqoJKsttlFwqoN`2eJqG%${aLCF|7SeeSO5SZFb
zB83Q~CtxO#K%!|gQHq-++Q66vhADzKQRo3EMOSM(Fr7>$1mNjlRVWe)hrrd8!9G+p
z5f@CR27uvE4Ml(@73-tz03>KX83O-MihguDMH>bS4i1I}t3k<BUl<&TM8Z^5VXCSS
z00TlhPNJik5E4xmkhiG_-t{*bi3Z)&35p>TVR%;<9I68QLy$3G4i!&f6-!{2V6-=x
zK}X5R{Ne(X9RJJ)m;m^w0p<ZCZ6LA4GB7wQO7W1L75I=JnMVJ~77SN`s%S#tim+dX
z{TK28Xa2K1U<H2Ztqb62162*)=eRMD@an0msA@n|v>+;QCskE#1Y8@guA~CjR#DM~
z{U=OdwE$8hpbh})f`5bbFPJ|`{|L8#hxl)}f00b4IsqY|r|3)yAd!Pf1{4ZV18$bO
zia!<Jl==%x7sgtXzxeFm_M)}*|J#p5A}cb96l-g3V={(81TubeW0WF;fyZhiu~-!q
z4TLHLsiKa9z~Me{hzjt5_^6=0u^0^`0<MMqZ!GA4Llp<0)WEZ1(TISi(NK!mpGE2a
zjxd*>wKL1?e>*<0nBQ)tFsOvht%$|Ia0DF7gESyS;ecPU7;T@QPZNshKi3xq>=Z>k
zU0{-qrxS2`n;YGLK>s-);8|Nvn}8<yq7<2sKP=aCq~oasJjoZ#s@Z@q%mAY54feq^
z=?p6FXM7OwdOru7%wT^C`2UL@Kut93VEoIWgT~{Do3^s%U?dt0kNvsx0Yq&Ino370
zs&1YHtp6A?Y14WV28U8K1lI1Sa=?)WL@(_3fvE=q{||ls=NSEYO8|k0QVeF@0l?_*
zwK=N<{dEcbd}{c6#c2ap`{M>uMQCXLzJZt-_mlB<g1sWm<lu$#5O#LAhPqSM$!uk(
zAlITI2)Vlw+0eZFyB;4Eu#XflG3N9*$ZaA?p}S)F1?&g7xwxD>qPBycX=$C6I8eeN
zP5*4&ed}<^(4(U2@UYJr{bN}xIU8)3NF2s0)O?;NxyQV0LyWOPQj46tt<lK9N-_NK
zJFc+C;OIGW@b0qe_<^+M9V<KOPE8UEBD>sbH|$nwg_x_`p=BAO4Fj&DA9%74riw_2
zw;NVUvFRe$bwt9NYlQaju{Ai$h5N30K;ULB>B{B;;P%UbpzO<$6pe=EQggg_j1n%e
zGjts<7XM>_Gp1TV!PjEROv+v(Mas?FO>e(pa-+3itCkpgD{0Ht*1g?eg5JB03?8u-
zHezuxaicM7BcSyKHf#Rk7I5~qgL9BO##fNiMs1|s2aRpcaleibdCBoKf}Ie-LE)Z$
zEU^@QkRK#d@Bf&K7t9rRP~<J!gD71)wuOkbYm$=eh-*95Bh;>Ol}E=9gDTlc(d;VQ
zuOHi9!|6CIl^O}=*=i3yaGe`(#C=H&%K_hexJBZ~7A~U%yX``JynA`e+55PK4?eL&
zI&pOy=o^h)i+_nI<g4O4e^BtH*Gt9ST$j<}#k>*?$tr>i5gfyIOkqjBg2u^V52mIE
z_u<BZVV@<LP>wwj`Cl!W;#_ueS3nk9pB#kSD?5P?fP_!)%F)RAW}jc^@5E8GqdU4P
zIx$zlUb@p&UD*1N+RGPy`tu-l(aZ}&F;L@_JlkvOorB{#;{x+S%SxxBIv=N^GgJsx
zoC<p`$F??J@%D#Xr?#cCx9|QWB@*vkFOHVFd-AOrK_&?Gfd2$ff812l0{T$tD=kTz
z9lob%^<3|@wBS&_VE$lGFniBMiN>(Um%sKgC2IJ9*Po`bVar*?S*fLytF+ba29d`O
zQe-%HF=Ot>$QbU(IZugKF-_fjVAuILXp^0{OrTQfxwi*vtU}E~jbsw&<`=Gilw-$l
zyLpa&m7b(-xNPPklb+}{>Q@$1lOCEeU|wf?(kRDn`~K-G`_878r8^vYXnfr22l!CZ
zy-S$3*-?!)=N3fU_qN(Z#TJQ{6D=jlUW#4^!d=#rSFdj|sJDyEe{BEux?K*%25p8u
zl2GJ#dv{@Ku4^IFVfO0#%3U_CcCGGb3a;FuTTLW(?GrZX&MPbQ_^jc-<GU*3+^KxA
z&bQ^pN7$znkHCl)Zsxr%NGqiKL&G06WlmiA-h~Y=<}Ujkka?<w-|&&2wp`>|<*F7@
zS04BJ>dD9{sy^U_@Val$IQadt_|fO?5OZS5k@!AYMtRlEW$Jh3?~R{Rx)nvcM6_X}
z&~`7T&j`m3*G4B<S4{0w`1y44S67c*t-Ff9x)lM#+xXw~dl(?^pXA5zv-WemfAl_A
zpM0Nax!232i9Pe!5V6{Hz5KkK4+XNFH@haf(>f7dM|0Bi`U_XgE*3Vwj(?@pIoXxo
z)$_)y=#jxA&y7g-`Uw1`W0c3&nulw163~?+I~zqB17)3MA9QNxh2))nDumJeK>y(X
zp<2OJ@P>I}>)y-#H}2ld#7E&{Cm?EX+lQ=<1+^4+NMfe_pz0+W(%zTE_MEdaMPZr@
zpLm}!xnL6iM9DI&ZC_h$GAh~Y_Lt(s+y2F;ZYLG5-KG`y7jKlo?~n93y&X7e>^6GO
zZ!Y(ZNeS^e;m3p1#F<|EspP(?yOU)r-ZRHwW#qfrl$XJAfra$l-d(8%?S`M651q>^
z_~6qV)O^uq!N$8l%_dx1E#q>At@cHj#*ua}k9*A5COxqq96ri0@~fX#?qMWVO;iRB
z6b)uoO+K6(2pG&hk;;?{$@s?ni2u0%8{u1M2i2R1WrXC^gw}qm4XI74Im}Esp})}i
z{mkOc#k6nt=Z?<wPn@3J_O*Xfv*`_%*30;^KYZ)P`Sn5e(TGbC-y#Yuty1EW%OSBT
z%do+U`4QD<Tmudg3BDv%3Hxe)$=)vHWl39UTXgba<!}*#RL$N>#TfB2g;8uvwOz-{
z+?ON5PnG19sv1Tca~nT544pm^D|*^eR#{fVbRf>@qLA?e(~;bUT>rcqheJvR9#NJ1
zpxUqyN>XRh7v~<ATO~H0VJFY8iodve51yL(HT5z)8yT75|AMZp^FTG|Y}@-i!*!z%
z=Pa0lp`s_@8^<#&Jpu=qHI}P&OJ_JMV!C3?*)8p$%*^o=rrd0p!?CW}>%F62N1qCX
zT39_p<|L|^zs)R4x|-RS;**@5qF^0t@h)3W9>m}6b5QJ->X9evqlc)D-pajDu~z!?
z;+EA*!pRH`ces0M8142%-_d~Vk~z1<4<Yj*)5~{uXiGdG?d}~fE%g^H-yh`I<5T<m
zVS4j}B@(hUsS<&oBqLprPmtt_SaLvHcl%(XPSs%WiLfk>tbJs^({mSObvkvpbWQ|A
z`WTd+o>0&A?^|v~bwzc=4m3>ayKdMmG=7<`9IQ22Fgd+=Y>{Vi`!u8fM6PQo^XTk&
zUH-~d%W?T1^5n&m-tgP6AI!I~zh`e{$M+_dy@_7lx+uBok!7c6H{#amdei>lt#504
zhjP{%r%y{<@Y}Or>)S-(@ObTkcSWE48$Wkp-eS_4v$|ut=T}=+OYgYUKDf5f7B~_(
zab{R>kg=1&P(;{>bT@uaTt4I2SwPwt{q7jRk(X0spI<txt_4A^y&p@>-rB*LF`?b2
z+y6Db9+qVN`o^kH;c?=elciyNIil?TOvc8;I~rpTZg@dXqK59g@(lF+5o*7+RJH=M
z&``DQRVF_3vgilcg`nFL;&noS6Qsp&(?f0SDJ7n>52-hs^TrySQ*KT5WZcQDeo-?-
zZCp2<v#w6Je$>16=5@fk{?N7&mq}uCKQSzRMSFR088$RqMf(U{nLZzh;|PmZ;-1-I
z!e>4+JAMA0ZQaJQ!Kdi75eOfgZ%%r@?t!r4*~;ZJt(Q%2*3PfS^|U-M*lT<G(8D}f
zc*oM(oa?mOvwK}*eI1ieiBJ0#LlsDmTz`0f!S%JJwbtkhZ4`#$RzIic4{p>Th2e;W
zBl95(B@LSX<O`4PhxH?*)Yq1dKC4b!{2~2XFJq}?_3hmL)mL+A#T}I$I4`TZ@~|CC
z%M=Y<(1H%1cm0A-=hSVfsVOmy?EzJy`WIx)MPA`vTu8c_aX_Hcs7uR3FVi3;Eomd&
z_6&;WU|SHIlXPhOUeML>_7i1DgW+th@Wa8oA7VWNnk!uW5p3;vHoFt5oU=5z3uWJ0
zHBu$&M_{OcR~!Lh^|)gf&xeGyZO6Bif}PDoc_zXoUTxIPJ(_gSepgePnhnXCR6`JN
zoAGCZZ`_OZt}|;%U^JO$=}09MH=lD#a0Q#g3uJA&c1E15G|`}08ep4bF<I>|>foGg
zhqpXV$?fe;E9&iqwJ6&)ve7Npxz6)+%KmFU3I9uX<ew7C&6f^aZ+}NR5d^aVYXB`9
zJe3ACcz)-Z2+cnqI+z);j{W{0RQSUd54ZQ<xPp~KmS#GD9;)N7O`W<<5Vde~au4LZ
zgOkfodGsz}u&wcdvgw<1KA)D_#gH7_9*_B-K2{sv{$4p&K(3Xa6FbYlM3KzQdha87
zem{d2BvNye?vM7rnBLYqwYt1y=xqCJ(!*OTQz^xLkcr^{3y(Yx$m_F<*+$IFp30AP
z9nKHE_wX3=*0x8%!3kz+$KL7fwNP5t%M06=C5I0vFnp;qBH0z5khfU8xE4^{xo>Yk
zleSXv<2)T<$jJ)dz}2iy)pOAuZx03Cb<bGg>6jc4s)F8}4RO#}8zJ-Y>G6m-eaIY^
z-g45vzpCe(eHbcc;&siyceU|tR|Br{n4MnTBbuZvwO@Lq>0{Bth<ZaB0eS_xNG2_r
z#>IB=9QJh4&VG%{Hv<iXd|%q8C2h*g&y=m38t6+Kp3zLT*Hv&5|Kjpvj}7I*Hjnq>
z75m`LTZE_Y8lM-|^FGflfxEx|Wv<a-^NK?~Egm_|9C{;d_Wdsn4<F#(6F$`7awU7~
zJIU3eg#!c7-0AAe_YpcpY*l?uY{rr)n*I8dKfDbgK}a=6(Y^r35>U|_o!f*CVzQ%a
zX2&i)o5Z@^Uu6@o4W+?2B%J-nrUG^wk!QkaQA?|<x-HhYFOT1TE5uk}&l=f`w|$pa
zUVQq4bap;`yKA4}^WwzFXC5Kl>DfFAyOQD1rnquFpVh4x{e4r<gf?0$JL?>3Z}&XN
z9brRAir6f_XAfF_B3%qBUf*&@Lm=)Sf|J#Q`&sRPe)aBL9dJItgBv~s2ZjT|=s+d|
z&A!b}9n2i4{J=k3i7<0xu)D5?ik5+?iK-^jz}U#dNKMT^#RO?=tY&~zM<Ngi17p4a
z8UtwmnUk=%&8{b0gVhZ@40eYDQdC*Z%YW_l{!x5sXs{ZPzk7U`W5<>@vJ-yn<=_zH
z(Bx2(om1uJHqBx1L$}G^<G<8~<sOORRp760-#5qCfWu--xettVvhDhIPi!|EQDdv=
Zzq*D-2MS*%6>x@@3X;{sH?cJZ{Rcy~B)9+o

literal 0
HcmV?d00001


From ced8e5e52cf593f794e347840f585449edf6b93a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:39:36 +0100
Subject: [PATCH 036/122] build(deps): bump eclipse-temurin from `b27ca47` to
 `f9bd881` in /docker/embedded (#6556)

Bumps eclipse-temurin from `b27ca47` to `f9bd881`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eclipse-temurin&package-manager=docker&previous-version=25-jre-alpine&new-version=25-jre-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 docker/backend/Dockerfile             | 4 ++--
 docker/embedded/Dockerfile            | 4 ++--
 docker/embedded/Dockerfile.fat        | 4 ++--
 docker/embedded/Dockerfile.ultra-lite | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/docker/backend/Dockerfile b/docker/backend/Dockerfile
index 7f262b840b..5c6680661f 100644
--- a/docker/backend/Dockerfile
+++ b/docker/backend/Dockerfile
@@ -4,7 +4,7 @@ ARG BASE_VERSION=1.0.2@sha256:c7698687f486707ddef9e0298587ca8b44c4e96185e1bdb0c3
 ARG BASE_IMAGE=stirlingtools/stirling-pdf-base:${BASE_VERSION}
 
 # Stage 1: Build the Java application (backend only, no frontend)
-FROM gradle:9.6.1-jdk25@sha256:d25357611c559203299f3c6673101154156bdd28985858ff6f465fc69bd27ca4 AS app-build
+FROM gradle:9.6.1-jdk25@sha256:934a520ae0cc1f46764c2e6e1f6510d2fcdf6a7e12328b6aee34192d14f171a2 AS app-build
 
 # JDK 25+: --add-exports is no longer accepted via JAVA_TOOL_OPTIONS; use JDK_JAVA_OPTIONS instead
 ENV JDK_JAVA_OPTIONS="--add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED \
@@ -43,7 +43,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
       --no-daemon
 
 # Stage 2: Extract Spring Boot Layers
-FROM eclipse-temurin:25-jre-noble@sha256:b27ca47660a8fa837e47a8533b9b1a3a430295cf29ca28d91af4fd121572dc29 AS jar-extract
+FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS jar-extract
 WORKDIR /tmp
 COPY --from=app-build /app/app/core/build/libs/*.jar app.jar
 RUN java -Djarmode=tools -jar app.jar extract --layers --destination /layers
diff --git a/docker/embedded/Dockerfile b/docker/embedded/Dockerfile
index 6655d7d4b8..54458667be 100644
--- a/docker/embedded/Dockerfile
+++ b/docker/embedded/Dockerfile
@@ -5,7 +5,7 @@ ARG BASE_VERSION=1.0.2@sha256:c7698687f486707ddef9e0298587ca8b44c4e96185e1bdb0c3
 ARG BASE_IMAGE=stirlingtools/stirling-pdf-base:${BASE_VERSION}
 
 # Stage 1: Build the Java application and frontend
-FROM gradle:9.6.1-jdk25@sha256:d25357611c559203299f3c6673101154156bdd28985858ff6f465fc69bd27ca4 AS app-build
+FROM gradle:9.6.1-jdk25@sha256:934a520ae0cc1f46764c2e6e1f6510d2fcdf6a7e12328b6aee34192d14f171a2 AS app-build
 
 ARG TASK_VERSION=3.49.1
 RUN apt-get update \
@@ -59,7 +59,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
       --no-daemon
 
 # Stage 2: Extract Spring Boot Layers
-FROM eclipse-temurin:25-jre-noble@sha256:b27ca47660a8fa837e47a8533b9b1a3a430295cf29ca28d91af4fd121572dc29 AS jar-extract
+FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS jar-extract
 WORKDIR /tmp
 COPY --from=app-build /app/app/core/build/libs/*.jar app.jar
 RUN java -Djarmode=tools -jar app.jar extract --layers --destination /layers
diff --git a/docker/embedded/Dockerfile.fat b/docker/embedded/Dockerfile.fat
index 058e824e1b..9b2655987f 100644
--- a/docker/embedded/Dockerfile.fat
+++ b/docker/embedded/Dockerfile.fat
@@ -6,7 +6,7 @@ ARG BASE_VERSION=1.0.2@sha256:c7698687f486707ddef9e0298587ca8b44c4e96185e1bdb0c3
 ARG BASE_IMAGE=stirlingtools/stirling-pdf-base:${BASE_VERSION}
 
 # Stage 1: Build the Java application and frontend
-FROM gradle:9.6.1-jdk25@sha256:d25357611c559203299f3c6673101154156bdd28985858ff6f465fc69bd27ca4 AS app-build
+FROM gradle:9.6.1-jdk25@sha256:934a520ae0cc1f46764c2e6e1f6510d2fcdf6a7e12328b6aee34192d14f171a2 AS app-build
 
 ARG TASK_VERSION=3.49.1
 RUN apt-get update \
@@ -54,7 +54,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
       --no-daemon
 
 # Stage 2: Extract Spring Boot Layers
-FROM eclipse-temurin:25-jre-noble@sha256:b27ca47660a8fa837e47a8533b9b1a3a430295cf29ca28d91af4fd121572dc29 AS jar-extract
+FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS jar-extract
 WORKDIR /tmp
 COPY --from=app-build /app/app/core/build/libs/*.jar app.jar
 RUN java -Djarmode=tools -jar app.jar extract --layers --destination /layers
diff --git a/docker/embedded/Dockerfile.ultra-lite b/docker/embedded/Dockerfile.ultra-lite
index 4095300ce6..bcf189e9ee 100644
--- a/docker/embedded/Dockerfile.ultra-lite
+++ b/docker/embedded/Dockerfile.ultra-lite
@@ -2,7 +2,7 @@
 # Single JAR contains both frontend and backend with minimal dependencies
 
 # Stage 1: Build application with embedded frontend
-FROM gradle:9.6.1-jdk25@sha256:d25357611c559203299f3c6673101154156bdd28985858ff6f465fc69bd27ca4 AS build
+FROM gradle:9.6.1-jdk25@sha256:934a520ae0cc1f46764c2e6e1f6510d2fcdf6a7e12328b6aee34192d14f171a2 AS build
 
 # Install Node.js and npm for frontend build
 ARG TASK_VERSION=3.49.1
@@ -55,7 +55,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
 
 # Stage 2: Runtime image
 # glibc base (not Alpine/musl): JPDFium's PDFium natives are glibc-linked.
-FROM eclipse-temurin:25-jre-noble@sha256:b27ca47660a8fa837e47a8533b9b1a3a430295cf29ca28d91af4fd121572dc29
+FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175
 
 ENV DEBIAN_FRONTEND=noninteractive \
     LANG=C.UTF-8 \

From 2533baaeb31e90cf036fdae706b4bf59ca245bff Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:40:30 +0100
Subject: [PATCH 037/122] build(deps): bump rand from 0.9.2 to 0.10.2 in
 /frontend/editor/src-tauri (#7065)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [rand](https://github.com/rust-random/rand) from 0.9.2 to 0.10.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rust-random/rand/blob/master/CHANGELOG.md">rand's
changelog</a>.</em></p>
<blockquote>
<h2>[0.10.2] — 2026-07-02</h2>
<h3>Fixes</h3>
<ul>
<li>Fix possible memory safety violation due to deserialization of
<code>UniformChar</code> from bad source (<a
href="https://redirect.github.com/rust-random/rand/issues/1790">#1790</a>)</li>
</ul>
<h3>Changes</h3>
<ul>
<li>Document required output order of fn <code>partial_shuffle</code>
and apply <code>#[must_use]</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1769">#1769</a>)</li>
<li>Avoid usage of <code>unsafe</code> in contexts where non-local
memory corruption could invalidate contract (<a
href="https://redirect.github.com/rust-random/rand/issues/1791">#1791</a>)</li>
</ul>
<p><a
href="https://redirect.github.com/rust-random/rand/issues/1769">#1769</a>:
<a
href="https://redirect.github.com/rust-random/rand/pull/1769">rust-random/rand#1769</a>
<a
href="https://redirect.github.com/rust-random/rand/issues/1790">#1790</a>:
<a
href="https://redirect.github.com/rust-random/rand/pull/1790">rust-random/rand#1790</a>
<a
href="https://redirect.github.com/rust-random/rand/issues/1791">#1791</a>:
<a
href="https://redirect.github.com/rust-random/rand/pull/1791">rust-random/rand#1791</a></p>
<h2>[0.10.1] — 2026-02-11</h2>
<p>This release includes a fix for a soundness bug; see <a
href="https://redirect.github.com/rust-random/rand/issues/1763">#1763</a>.</p>
<h3>Changes</h3>
<ul>
<li>Document panic behavior of <code>make_rng</code> and add
<code>#[track_caller]</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1761">#1761</a>)</li>
<li>Deprecate feature <code>log</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1763">#1763</a>)</li>
</ul>
<p><a
href="https://redirect.github.com/rust-random/rand/issues/1761">#1761</a>:
<a
href="https://redirect.github.com/rust-random/rand/pull/1761">rust-random/rand#1761</a>
<a
href="https://redirect.github.com/rust-random/rand/issues/1763">#1763</a>:
<a
href="https://redirect.github.com/rust-random/rand/pull/1763">rust-random/rand#1763</a></p>
<h2>[0.10.0] - 2026-02-08</h2>
<h3>Changes</h3>
<ul>
<li>The dependency on <code>rand_chacha</code> has been replaced with a
dependency on <code>chacha20</code>. This changes the implementation
behind <code>StdRng</code>, but the output remains the same. There may
be some API breakage when using the ChaCha-types directly as these are
now the ones in <code>chacha20</code> instead of
<code>rand_chacha</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1642">#1642</a>).</li>
<li>Rename fns <code>IndexedRandom::choose_multiple</code> -&gt;
<code>sample</code>, <code>choose_multiple_array</code> -&gt;
<code>sample_array</code>, <code>choose_multiple_weighted</code> -&gt;
<code>sample_weighted</code>, struct <code>SliceChooseIter</code> -&gt;
<code>IndexedSamples</code> and fns
<code>IteratorRandom::choose_multiple</code> -&gt; <code>sample</code>,
<code>choose_multiple_fill</code> -&gt; <code>sample_fill</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1632">#1632</a>)</li>
<li>Use Edition 2024 and MSRV 1.85 (<a
href="https://redirect.github.com/rust-random/rand/issues/1653">#1653</a>)</li>
<li>Let <code>Fill</code> be implemented for element types, not
sliceable types (<a
href="https://redirect.github.com/rust-random/rand/issues/1652">#1652</a>)</li>
<li>Fix <code>OsError::raw_os_error</code> on UEFI targets by returning
<code>Option&lt;usize&gt;</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1665">#1665</a>)</li>
<li>Replace fn <code>TryRngCore::read_adapter(..) -&gt;
RngReadAdapter</code> with simpler struct <code>RngReader</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1669">#1669</a>)</li>
<li>Remove fns <code>SeedableRng::from_os_rng</code>,
<code>try_from_os_rng</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1674">#1674</a>)</li>
<li>Remove <code>Clone</code> support for <code>StdRng</code>,
<code>ReseedingRng</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1677">#1677</a>)</li>
<li>Use <code>postcard</code> instead of <code>bincode</code> to test
the serde feature (<a
href="https://redirect.github.com/rust-random/rand/issues/1693">#1693</a>)</li>
<li>Avoid excessive allocation in <code>IteratorRandom::sample</code>
when <code>amount</code> is much larger than iterator size (<a
href="https://redirect.github.com/rust-random/rand/issues/1695">#1695</a>)</li>
<li>Rename <code>os_rng</code> -&gt; <code>sys_rng</code>,
<code>OsRng</code> -&gt; <code>SysRng</code>, <code>OsError</code> -&gt;
<code>SysError</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1697">#1697</a>)</li>
<li>Rename <code>Rng</code> -&gt; <code>RngExt</code> as upstream
<code>rand_core</code> has renamed <code>RngCore</code> -&gt;
<code>Rng</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1717">#1717</a>)</li>
</ul>
<h3>Additions</h3>
<ul>
<li>Add fns <code>IndexedRandom::choose_iter</code>,
<code>choose_weighted_iter</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1632">#1632</a>)</li>
<li>Pub export <code>Xoshiro128PlusPlus</code>,
<code>Xoshiro256PlusPlus</code> prngs (<a
href="https://redirect.github.com/rust-random/rand/issues/1649">#1649</a>)</li>
<li>Pub export <code>ChaCha8Rng</code>, <code>ChaCha12Rng</code>,
<code>ChaCha20Rng</code> behind <code>chacha</code> feature (<a
href="https://redirect.github.com/rust-random/rand/issues/1659">#1659</a>)</li>
<li>Fn <code>rand::make_rng() -&gt; R where R: SeedableRng</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1734">#1734</a>)</li>
</ul>
<h3>Removals</h3>
<ul>
<li>Removed <code>ReseedingRng</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1722">#1722</a>)</li>
<li>Removed unused feature &quot;nightly&quot; (<a
href="https://redirect.github.com/rust-random/rand/issues/1732">#1732</a>)</li>
<li>Removed feature <code>small_rng</code> (<a
href="https://redirect.github.com/rust-random/rand/issues/1732">#1732</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rust-random/rand/commit/1540ea327e8beaf0694ea64f6d9eb8eaadd47bd5"><code>1540ea3</code></a>
Prepare rand 0.10.2 (<a
href="https://redirect.github.com/rust-random/rand/issues/1800">#1800</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/a29964ad94b54c25b3865626de6964ce0f796a29"><code>a29964a</code></a>
Bump chacha20 from 0.10.0 to 0.10.1 in the all-deps group (<a
href="https://redirect.github.com/rust-random/rand/issues/1801">#1801</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/ced94914cb75c93a1f19140a966a466345185fff"><code>ced9491</code></a>
Tweak docs for RngExt::random_range and SampleRange (<a
href="https://redirect.github.com/rust-random/rand/issues/1798">#1798</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/db146647afaf002b866420d34e4501b0dd872163"><code>db14664</code></a>
Check UniformChar validity on deser (<a
href="https://redirect.github.com/rust-random/rand/issues/1790">#1790</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/bea8620204c7aeecdefc132b5cb0dec8134add4b"><code>bea8620</code></a>
Bump the all-deps group with 2 updates (<a
href="https://redirect.github.com/rust-random/rand/issues/1796">#1796</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/4f449322825498e4ec1f486119e5fd251ba97f8a"><code>4f44932</code></a>
Bump actions/cache from 5 to 6 (<a
href="https://redirect.github.com/rust-random/rand/issues/1795">#1795</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/b999a130a990b30af01743021e8ea97f3b09a17e"><code>b999a13</code></a>
Bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/rust-random/rand/issues/1794">#1794</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/aeab810bd9704a3b7666ba0a78e1ad5d1d5ad1ae"><code>aeab810</code></a>
Avoid unsafe where safety depends on non-local values (<a
href="https://redirect.github.com/rust-random/rand/issues/1791">#1791</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/1896d7c660524a022b3dbc3a1e044e162d766b25"><code>1896d7c</code></a>
Add typos CI job (<a
href="https://redirect.github.com/rust-random/rand/issues/1789">#1789</a>)</li>
<li><a
href="https://github.com/rust-random/rand/commit/43eddee18c8cca2cebee929be3899cf183afe801"><code>43eddee</code></a>
Bump the all-deps group with 2 updates (<a
href="https://redirect.github.com/rust-random/rand/issues/1788">#1788</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/rust-random/rand/compare/rand_core-0.9.2...0.10.2">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock           | 2 +-
 frontend/editor/src-tauri/Cargo.toml           | 2 +-
 frontend/editor/src-tauri/src/commands/auth.rs | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index 8e710cd776..77875af9df 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -4554,7 +4554,7 @@ dependencies = [
  "objc2-app-kit",
  "objc2-foundation",
  "objc2-pdf-kit",
- "rand 0.9.2",
+ "rand 0.10.2",
  "reqwest 0.12.28",
  "serde",
  "serde_json",
diff --git a/frontend/editor/src-tauri/Cargo.toml b/frontend/editor/src-tauri/Cargo.toml
index c372011489..c7ef871d84 100644
--- a/frontend/editor/src-tauri/Cargo.toml
+++ b/frontend/editor/src-tauri/Cargo.toml
@@ -45,7 +45,7 @@ url = "2.5"
 urlencoding = "2.1"
 sha2 = "0.11"
 base64 = "0.22"
-rand = "0.9"
+rand = "0.10"
 
 [target.'cfg(target_os = "macos")'.dependencies]
 core-foundation = "0.10"
diff --git a/frontend/editor/src-tauri/src/commands/auth.rs b/frontend/editor/src-tauri/src/commands/auth.rs
index b906bbbf7d..6734ba6025 100644
--- a/frontend/editor/src-tauri/src/commands/auth.rs
+++ b/frontend/editor/src-tauri/src/commands/auth.rs
@@ -6,7 +6,7 @@ use tauri_plugin_store::StoreExt;
 use tiny_http::{Response, Server};
 use sha2::{Sha256, Digest};
 use base64::{Engine as _, engine::general_purpose::URL_SAFE_NO_PAD};
-use rand::Rng;
+use rand::RngExt;
 use rand::distr::Alphanumeric;
 
 const STORE_FILE: &str = "connection.json";

From 02a7db0f1eb056509a13f1e6aab475b33e047bd6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:40:47 +0100
Subject: [PATCH 038/122] build(deps): bump pdfboxVersion from 3.0.7 to 3.0.8
 (#7237)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps `pdfboxVersion` from 3.0.7 to 3.0.8.
Updates `org.apache.pdfbox:preflight` from 3.0.7 to 3.0.8

Updates `org.apache.pdfbox:xmpbox` from 3.0.7 to 3.0.8

Updates `org.apache.pdfbox:pdfbox` from 3.0.7 to 3.0.8

Updates `org.apache.pdfbox:pdfbox-io` from 3.0.7 to 3.0.8


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index c870aab526..5f29508958 100644
--- a/build.gradle
+++ b/build.gradle
@@ -21,7 +21,7 @@ import org.gradle.jvm.toolchain.JavaLanguageVersion
 
 ext {
     springBootVersion = "4.0.6"
-    pdfboxVersion = "3.0.7"
+    pdfboxVersion = "3.0.8"
     imageioVersion = "3.13.1"
     lombokVersion = "1.18.46"
     bouncycastleVersion = "1.85"

From 0661f90267ee47dba79cf268a37486d80d8b9993 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:41:14 +0100
Subject: [PATCH 039/122] build(deps): bump docker/setup-buildx-action from
 4.0.0 to 4.2.0 (#7239)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[docker/setup-buildx-action](https://github.com/docker/setup-buildx-action)
from 4.0.0 to 4.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.0</h2>
<ul>
<li>Preserve names in esbuild bundle by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/572">docker/setup-buildx-action#572</a></li>
<li>Bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/551">docker/setup-buildx-action#551</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in
<a
href="https://redirect.github.com/docker/setup-buildx-action/pull/557">docker/setup-buildx-action#557</a>
<a
href="https://redirect.github.com/docker/setup-buildx-action/pull/580">docker/setup-buildx-action#580</a></li>
<li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/573">docker/setup-buildx-action#573</a></li>
<li>Bump <code>@​sigstore/verify</code> from 3.1.0 to 3.1.1 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/576">docker/setup-buildx-action#576</a></li>
<li>Bump js-yaml from 4.1.1 to 5.2.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/562">docker/setup-buildx-action#562</a></li>
<li>Bump sigstore from 4.1.0 to 4.1.1 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/577">docker/setup-buildx-action#577</a></li>
<li>Bump tmp from 0.2.5 to 0.2.7 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/556">docker/setup-buildx-action#556</a></li>
<li>Bump undici from 6.25.0 to 6.27.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/570">docker/setup-buildx-action#570</a></li>
<li>Bump vite from 7.3.2 to 7.3.6 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/569">docker/setup-buildx-action#569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0">https://github.com/docker/setup-buildx-action/compare/v4.1.0...v4.2.0</a></p>
<h2>v4.1.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.79.0 to 0.90.0 in
<a
href="https://redirect.github.com/docker/setup-buildx-action/pull/489">docker/setup-buildx-action#489</a></li>
<li>Bump brace-expansion from 1.1.12 to 5.0.6 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/547">docker/setup-buildx-action#547</a>
<a
href="https://redirect.github.com/docker/setup-buildx-action/pull/508">docker/setup-buildx-action#508</a></li>
<li>Bump fast-xml-builder from 1.0.0 to 1.2.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/540">docker/setup-buildx-action#540</a></li>
<li>Bump fast-xml-parser from 5.4.2 to 5.8.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/496">docker/setup-buildx-action#496</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/499">docker/setup-buildx-action#499</a></li>
<li>Bump glob from 10.3.12 to 13.0.6 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/495">docker/setup-buildx-action#495</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/504">docker/setup-buildx-action#504</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/523">docker/setup-buildx-action#523</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/503">docker/setup-buildx-action#503</a></li>
<li>Bump postcss from 8.5.6 to 8.5.10 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/537">docker/setup-buildx-action#537</a></li>
<li>Bump tar from 6.2.1 to 7.5.15 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/545">docker/setup-buildx-action#545</a></li>
<li>Bump undici from 6.23.0 to 6.25.0 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/492">docker/setup-buildx-action#492</a></li>
<li>Bump vite from 7.3.1 to 7.3.2 in <a
href="https://redirect.github.com/docker/setup-buildx-action/pull/520">docker/setup-buildx-action#520</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-buildx-action/compare/v4.0.0...v4.1.0">https://github.com/docker/setup-buildx-action/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c"><code>bb05f3f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/580">#580</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/321c814cb51fbe4af8eca00249525cc0973ea66f"><code>321c814</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/b9a36ef79ba42cfc611885a1e8c388fbf8b8cb3f"><code>b9a36ef</code></a>
build(deps): bump <code>@​docker/actions-toolkit</code> from 0.91.0 to
0.92.0</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/ebeab241289497cd564ac98b3cfc9e64607bb276"><code>ebeab24</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/570">#570</a>
from docker/dependabot/npm_and_yarn/undici-6.27.0</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/5c7b8ae78cec97a3215d4d86679b1d072eaa80cb"><code>5c7b8ae</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/037e618cd98e95e81525b15ff0e9c96f507e6a0e"><code>037e618</code></a>
build(deps): bump undici from 6.25.0 to 6.27.0</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/66080e5802281ec2e72b7f3108915643e702db85"><code>66080e5</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/577">#577</a>
from docker/dependabot/npm_and_yarn/sigstore-4.1.1</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/409aef0aa3f48f0a742e7dec4e0e04ab19afe93c"><code>409aef0</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-buildx-action/issues/562">#562</a>
from docker/dependabot/npm_and_yarn/js-yaml-4.2.0</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/49c6e42949280fa0d70fb327633591be54efbfb6"><code>49c6e42</code></a>
build(deps): bump sigstore from 4.1.0 to 4.1.1</li>
<li><a
href="https://github.com/docker/setup-buildx-action/commit/2211273e8121ecf9ecb7d6c7c0fcd55526d530c7"><code>2211273</code></a>
[dependabot skip] chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/setup-buildx-action&package-manager=github_actions&previous-version=4.0.0&new-version=4.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Auto-Deploy-V2.yml          | 2 +-
 .github/workflows/PR-Demo-Comment-with-react.yml | 2 +-
 .github/workflows/deploy-on-v2-commit.yml        | 2 +-
 .github/workflows/docker-compose-tests.yml       | 2 +-
 .github/workflows/push-docker-base.yml           | 2 +-
 .github/workflows/push-docker.yml                | 2 +-
 .github/workflows/test-build-docker.yml          | 4 ++--
 .github/workflows/testdriver.yml                 | 2 +-
 8 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index 260774f799..1ab9230521 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -184,7 +184,7 @@ jobs:
           fetch-depth: 0 # Fetch full history for commit hash detection
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Get version number
         id: versionNumber
diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index 85bb9aa6d3..6e6530bef6 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -233,7 +233,7 @@ jobs:
           STIRLING_PDF_DESKTOP_UI: false
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Login to Docker Hub
         uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
diff --git a/.github/workflows/deploy-on-v2-commit.yml b/.github/workflows/deploy-on-v2-commit.yml
index 69c5d11e9a..0767f7ed02 100644
--- a/.github/workflows/deploy-on-v2-commit.yml
+++ b/.github/workflows/deploy-on-v2-commit.yml
@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Get commit hashes for frontend and backend
         id: commit-hashes
diff --git a/.github/workflows/docker-compose-tests.yml b/.github/workflows/docker-compose-tests.yml
index 81b757ab42..9b81f774ef 100644
--- a/.github/workflows/docker-compose-tests.yml
+++ b/.github/workflows/docker-compose-tests.yml
@@ -61,7 +61,7 @@ jobs:
       # runtime token isn't exposed) since the docker driver can't use it.
       - name: Set up Docker Buildx
         if: inputs.docker-base-changed != 'true'
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       # Expose ACTIONS_RUNTIME_TOKEN / ACTIONS_RESULTS_URL for docker buildx type=gha cache backend.
       - name: Expose GitHub runtime for Buildx cache
diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index d55b62a00d..9c1c1eaf5c 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -64,7 +64,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index f49fc78a8b..00f1d57d9b 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -82,7 +82,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index 072969a0ce..4ef255a73d 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -115,7 +115,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Build base image locally (PR base change only)
         if: github.event_name == 'pull_request' && inputs.docker-base-changed == 'true'
@@ -207,7 +207,7 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Build docker/unoserver/Dockerfile
         uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index 3fc3b87e56..786b4f8e87 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -52,7 +52,7 @@ jobs:
           DISABLE_ADDITIONAL_FEATURES: true
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Get version number
         id: versionNumber

From efc6b91648ac856868871d77fe797d66c7582e24 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:42:34 +0100
Subject: [PATCH 040/122] build(deps): bump docker/login-action from 4.1.0 to
 4.5.1 (#7241)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [docker/login-action](https://github.com/docker/login-action) from
4.1.0 to 4.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.5.1</h2>
<ul>
<li>Support <code>dhi.io</code> as Docker Hub OIDC registry by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1054">docker/login-action#1054</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.5.0...v4.5.1">https://github.com/docker/login-action/compare/v4.5.0...v4.5.1</a></p>
<h2>v4.5.0</h2>
<ul>
<li><a href="https://github.com/docker/login-action#docker-hub">Docker
Hub OIDC</a> login support by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1048">docker/login-action#1048</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1091.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1037">docker/login-action#1037</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.92.0 to 0.94.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/1044">docker/login-action#1044</a>
<a
href="https://redirect.github.com/docker/login-action/pull/1050">docker/login-action#1050</a></li>
<li>Bump brace-expansion from 1.1.13 to 1.1.16 in <a
href="https://redirect.github.com/docker/login-action/pull/1046">docker/login-action#1046</a></li>
<li>Bump js-yaml from 5.2.0 to 5.2.1 in <a
href="https://redirect.github.com/docker/login-action/pull/1038">docker/login-action#1038</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.4.0...v4.5.0">https://github.com/docker/login-action/compare/v4.4.0...v4.5.0</a></p>
<h2>v4.4.0</h2>
<ul>
<li>Skip empty <code>registry-auth</code> secret mask by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1035">docker/login-action#1035</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1077.0 <a
href="https://redirect.github.com/docker/login-action/pull/1034">docker/login-action#1034</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.3.0...v4.4.0">https://github.com/docker/login-action/compare/v4.3.0...v4.4.0</a></p>
<h2>v4.3.0</h2>
<ul>
<li>Preserve names in esbuild bundle by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1022">docker/login-action#1022</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1076.0 <a
href="https://redirect.github.com/docker/login-action/pull/999">docker/login-action#999</a>
<a
href="https://redirect.github.com/docker/login-action/pull/1030">docker/login-action#1030</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/1004">docker/login-action#1004</a>
<a
href="https://redirect.github.com/docker/login-action/pull/1027">docker/login-action#1027</a></li>
<li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a
href="https://redirect.github.com/docker/login-action/pull/1023">docker/login-action#1023</a></li>
<li>Bump <code>@​sigstore/verify</code> from 3.1.0 to 3.1.1 in <a
href="https://redirect.github.com/docker/login-action/pull/1029">docker/login-action#1029</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 9.1.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1017">docker/login-action#1017</a></li>
<li>Bump js-yaml from 4.1.1 to 5.2.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1028">docker/login-action#1028</a></li>
<li>Bump sigstore from 4.1.0 to 4.1.1 in <a
href="https://redirect.github.com/docker/login-action/pull/1031">docker/login-action#1031</a></li>
<li>Bump tmp from 0.2.5 to 0.2.7 in <a
href="https://redirect.github.com/docker/login-action/pull/1002">docker/login-action#1002</a></li>
<li>Bump undici from 6.24.1 to 6.27.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1020">docker/login-action#1020</a></li>
<li>Bump vite from 7.3.3 to 7.3.6 in <a
href="https://redirect.github.com/docker/login-action/pull/1019">docker/login-action#1019</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.2.0...v4.3.0">https://github.com/docker/login-action/compare/v4.2.0...v4.3.0</a></p>
<h2>v4.2.0</h2>
<ul>
<li>Bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in <a
href="https://redirect.github.com/docker/login-action/pull/976">docker/login-action#976</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1050.0 in <a
href="https://redirect.github.com/docker/login-action/pull/960">docker/login-action#960</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.86.0 to 0.90.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/970">docker/login-action#970</a></li>
<li>Bump brace-expansion from 2.0.1 to 5.0.6 in <a
href="https://redirect.github.com/docker/login-action/pull/993">docker/login-action#993</a></li>
<li>Bump fast-xml-builder from 1.1.4 to 1.2.0 in <a
href="https://redirect.github.com/docker/login-action/pull/985">docker/login-action#985</a></li>
<li>Bump fast-xml-parser from 5.3.6 to 5.8.0 in <a
href="https://redirect.github.com/docker/login-action/pull/963">docker/login-action#963</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 9.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/961">docker/login-action#961</a></li>
<li>Bump postcss from 8.5.6 to 8.5.10 in <a
href="https://redirect.github.com/docker/login-action/pull/979">docker/login-action#979</a></li>
<li>Bump tar from 6.2.1 to 7.5.15 in <a
href="https://redirect.github.com/docker/login-action/pull/991">docker/login-action#991</a></li>
<li>Bump vite from 7.3.1 to 7.3.3 in <a
href="https://redirect.github.com/docker/login-action/pull/986">docker/login-action#986</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.1.0...v4.2.0">https://github.com/docker/login-action/compare/v4.1.0...v4.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/abd2ef45e78c5afb21d64d4ca52ee8550d9572c7"><code>abd2ef4</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1055">#1055</a>
from crazy-max/test-registry-auth-oidc</li>
<li><a
href="https://github.com/docker/login-action/commit/d49d3a9839fef51322fa44989a44fdc43fccfc22"><code>d49d3a9</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1054">#1054</a>
from crazy-max/oidc-missing-dhi</li>
<li><a
href="https://github.com/docker/login-action/commit/b58b17c30b4db92a4ed049b213cae512b12e460b"><code>b58b17c</code></a>
test: cover Docker Hub OIDC with registry-auth</li>
<li><a
href="https://github.com/docker/login-action/commit/be646c21cec26cea303e29290d5f6ba6fde8e606"><code>be646c2</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/d77c059cb9956cedaa427dc022d89f39acba678f"><code>d77c059</code></a>
support dhi.io as Docker Hub OIDC registry</li>
<li><a
href="https://github.com/docker/login-action/commit/06fb636fac595d6fb4b28a5dfcb21a6f5091859c"><code>06fb636</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1037">#1037</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li>
<li><a
href="https://github.com/docker/login-action/commit/a8bc9539118a762b0e5788b53a50907977cc1b8d"><code>a8bc953</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/f54b9019bf5074f6e3480a3ac4b834f5f4b90aab"><code>f54b901</code></a>
build(deps): bump the aws-sdk-dependencies group across 1 directory with
2 up...</li>
<li><a
href="https://github.com/docker/login-action/commit/77f18f6713512f90ac35aaf21db0d3710f1b85a6"><code>77f18f6</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1049">#1049</a>
from docker/dependabot/github_actions/codeql-actions...</li>
<li><a
href="https://github.com/docker/login-action/commit/ec0bf287fb1e2e051c56b2f6e6a3eed487b9fe52"><code>ec0bf28</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1050">#1050</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...abd2ef45e78c5afb21d64d4ca52ee8550d9572c7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.1.0&new-version=4.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Auto-Deploy-V2.yml          | 2 +-
 .github/workflows/PR-Demo-Comment-with-react.yml | 2 +-
 .github/workflows/deploy-on-v2-commit.yml        | 2 +-
 .github/workflows/push-docker-base.yml           | 4 ++--
 .github/workflows/push-docker.yml                | 4 ++--
 .github/workflows/rollback-latest.yml            | 4 ++--
 .github/workflows/test-build-docker.yml          | 2 +-
 .github/workflows/testdriver.yml                 | 2 +-
 8 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index 1ab9230521..ebf900d218 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -193,7 +193,7 @@ jobs:
           echo "versionNumber=$VERSION" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index 6e6530bef6..e48a6170da 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -236,7 +236,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
diff --git a/.github/workflows/deploy-on-v2-commit.yml b/.github/workflows/deploy-on-v2-commit.yml
index 0767f7ed02..4a1386c6bb 100644
--- a/.github/workflows/deploy-on-v2-commit.yml
+++ b/.github/workflows/deploy-on-v2-commit.yml
@@ -85,7 +85,7 @@ jobs:
           fi
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index 9c1c1eaf5c..46dd40c78f 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -50,13 +50,13 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index 00f1d57d9b..12fcd23f6c 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -107,13 +107,13 @@ jobs:
           cosign-release: "v2.4.1"
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/rollback-latest.yml b/.github/workflows/rollback-latest.yml
index 32df9104b6..9977fe5ec9 100644
--- a/.github/workflows/rollback-latest.yml
+++ b/.github/workflows/rollback-latest.yml
@@ -26,13 +26,13 @@ jobs:
         uses: imjasonh/setup-crane@31b88afe9de28ae0ffa220711af4b60be9435f6e # v0.4
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index 4ef255a73d..d935cac53d 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -61,7 +61,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index 786b4f8e87..de3307858d 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -61,7 +61,7 @@ jobs:
           echo "versionNumber=$VERSION" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}

From 5bbe26072fa89030c3f6fcdc188fe7581a2b4e31 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:55:27 +0100
Subject: [PATCH 041/122] build(deps): bump dompurify from 3.4.11 to 3.4.12 in
 /frontend (#7133)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to
3.4.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cure53/DOMPurify/releases">dompurify's
releases</a>.</em></p>
<blockquote>
<h2>DOMPurify 3.4.12</h2>
<ul>
<li>Fixed an issue where a hook would not get called for custom
elements, thanks <a
href="https://github.com/Rikuxx0"><code>@​Rikuxx0</code></a></li>
<li>Hardened the handling of hooks removing elements, <a
href="https://github.com/mkrause-bee360"><code>@​mkrause-bee360</code></a></li>
<li>Added support for a few new SVG attributes, thanks <a
href="https://github.com/cbn-falias"><code>@​cbn-falias</code></a> &amp;
<a
href="https://github.com/Develop-KIM"><code>@​Develop-KIM</code></a></li>
<li>Hardened the handling of declarative partial updates</li>
<li>Updated the documentation is several spots, README, wiki, etc.</li>
<li>Bumped several dependencies where possible</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197"><code>a9ca1e5</code></a>
release: 3.4.12 (<a
href="https://redirect.github.com/cure53/DOMPurify/issues/1537">#1537</a>)</li>
<li>See full diff in <a
href="https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.4.11&new-version=3.4.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 26dc1714a1..0e61842b5c 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -8960,9 +8960,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.11",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.11.tgz",
-      "integrity": "sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==",
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"

From 98bdacc7065a2f9700beec8f232c150a35405386 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 10:40:57 +0100
Subject: [PATCH 042/122] build(deps): bump org.apache.pdfbox:jbig2-imageio
 from 3.0.4 to 3.0.5 in /app/core (#7253)

Bumps org.apache.pdfbox:jbig2-imageio from 3.0.4 to 3.0.5.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.pdfbox:jbig2-imageio&package-manager=gradle&previous-version=3.0.4&new-version=3.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 app/core/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/core/build.gradle b/app/core/build.gradle
index 31a1223e85..33aa679994 100644
--- a/app/core/build.gradle
+++ b/app/core/build.gradle
@@ -61,7 +61,7 @@ dependencies {
 
     // CVE-2022-25647: Explicit gson to prevent unsafe deserialization (tabula would pull 2.8.7)
     implementation "com.google.code.gson:gson:${gsonVersion}"
-    implementation 'org.apache.pdfbox:jbig2-imageio:3.0.4'
+    implementation 'org.apache.pdfbox:jbig2-imageio:3.0.5'
     implementation 'com.opencsv:opencsv:5.12.0' // https://mvnrepository.com/artifact/com.opencsv/opencsv
     implementation 'org.apache.poi:poi-ooxml:5.5.1'
 

From 6270fe6d6735a2c1b4ad1218e321919a80d734a2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 10:41:17 +0100
Subject: [PATCH 043/122] build(deps): bump org.apache.pdfbox:jbig2-imageio
 from 3.0.4 to 3.0.5 (#7249)

Bumps org.apache.pdfbox:jbig2-imageio from 3.0.4 to 3.0.5.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.pdfbox:jbig2-imageio&package-manager=gradle&previous-version=3.0.4&new-version=3.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

From 4191d347ff73a1c3f5754888bacfe0d1ad9766bc Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Mon, 3 Aug 2026 12:11:13 +0100
Subject: [PATCH 044/122] Fix Java tests not running headless on Mac (#7260)

# Description of Changes
The `task backend:test` command automatically spawns new Java processes
in the dock on Mac as it runs, which takes the focus away from whatever
the developer is doing at the time. This is because there's missing a
missing `headless` tag in the `build.gradle` file (the tests don't spawn
or require any windows, so they run fine headless).

Also adds a `task backend:test:force` rule to run the tests without
cache because the cache was getting in the way of testing this.

<img width="175" height="98" alt="image"
src="https://github.com/user-attachments/assets/d4524959-9c25-4513-bf34-9fd48310c4d3"
/>
---
 .taskfiles/backend.yml | 9 +++++++++
 build.gradle           | 2 ++
 2 files changed, 11 insertions(+)

diff --git a/.taskfiles/backend.yml b/.taskfiles/backend.yml
index dde75433a8..fbabd783a3 100644
--- a/.taskfiles/backend.yml
+++ b/.taskfiles/backend.yml
@@ -114,6 +114,15 @@ tasks:
       - cmd: ./gradlew test
         platforms: [linux, darwin]
 
+  test:force:
+    desc: "Run backend tests, ignoring cached results"
+    aliases: [test:no-cache]
+    cmds:
+      - cmd: cmd /c ".\gradlew.bat cleanTest test --no-build-cache"
+        platforms: [windows]
+      - cmd: ./gradlew cleanTest test --no-build-cache
+        platforms: [linux, darwin]
+
   format:
     desc: "Auto-fix code formatting"
     cmds:
diff --git a/build.gradle b/build.gradle
index 5f29508958..28e20c9b15 100644
--- a/build.gradle
+++ b/build.gradle
@@ -292,6 +292,8 @@ subprojects {
 
     tasks.withType(Test).configureEach {
         useJUnitPlatform()
+        systemProperty 'java.awt.headless', 'true'
+        systemProperty 'apple.awt.UIElement', 'true'
         finalizedBy(jacocoReport)
     }
 

From 88cdfb3a43dabc4f8265838c3cb06c323f8341b5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 13:25:01 +0100
Subject: [PATCH 045/122] build(deps): bump org.postgresql:postgresql from
 42.7.11 to 42.7.13 (#7243)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from
42.7.11 to 42.7.13.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pgjdbc/pgjdbc/releases">org.postgresql:postgresql's
releases</a>.</em></p>
<blockquote>
<h2>v42.7.13</h2>
<h2>Changes</h2>
<ul>
<li>docs: add 42.7.13 release changelog <a
href="https://github.com/davecramer"><code>@​davecramer</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4270">#4270</a>)</li>
<li>Adjust EditorConfig für Makefile <a
href="https://github.com/BaumiCoder"><code>@​BaumiCoder</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4279">#4279</a>)</li>
<li>fix(scram): fail closed on channel-binding downgrade (no scram bump)
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4272">#4272</a>)</li>
<li>Bump pgjdbc version from 42.7.12 to 42.7.13 <a
href="https://github.com/davecramer"><code>@​davecramer</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4269">#4269</a>)</li>
<li>chore: remove test-anorm-sbt module and its disabled CI wiring <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4261">#4261</a>)</li>
<li>refactor(test-gss): convert to Java/JUnit 5 submodule of the main
build <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4166">#4166</a>)</li>
<li>ci: derive PG test versions from a Renovate-managed maxPgVersion <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4218">#4218</a>)</li>
<li>feat(insert): cap reWriteBatchedInserts by the protocol limit, not
128 <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4207">#4207</a>)</li>
<li>refactor(metadata): derive getPrimaryKeys from pg_constraint.conkey
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4202">#4202</a>)</li>
<li>fix(protocol): defer flushes until response processing <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4196">#4196</a>)</li>
<li>fix(build): resolve the Temurin 8 test toolchain by vendor <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4257">#4257</a>)</li>
<li>build: include multi-release source sets in the JaCoCo coverage
report <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4256">#4256</a>)</li>
<li>fix(ci): read java_vendor before overwriting java_distribution <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4255">#4255</a>)</li>
<li>ci: generate the whole matrix in one batch, coverage job included <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4253">#4253</a>)</li>
<li>ci: pass CODECOV_TOKEN so protected-branch coverage uploads succeed
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4254">#4254</a>)</li>
<li>ci: collect coverage on one pinned job <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4245">#4245</a>)</li>
<li>ci: apply -DqueryTimeout from the matrix query_timeout axis <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4246">#4246</a>)</li>
<li>ci: make Codecov project and patch statuses informational <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4244">#4244</a>)</li>
<li>fix(build): restore JaCoCo XML report so Codecov receives coverage
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4240">#4240</a>)</li>
<li>test(replication): shrink big-transaction inserts to avoid CI
timeouts <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4243">#4243</a>)</li>
<li>update maintainers <a
href="https://github.com/davecramer"><code>@​davecramer</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4222">#4222</a>)</li>
<li>test: add hermetic test for localSocketAddress <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4224">#4224</a>)</li>
<li>docs(translation): clean up leftover German header in ja.po <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4206">#4206</a>)</li>
<li>Update ja.po <a
href="https://github.com/davecramer"><code>@​davecramer</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2004">#2004</a>)</li>
<li>test: add PostgreSQL 18 to the CI test matrix <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4198">#4198</a>)</li>
<li>test: silence expected SSPI warning stack trace in
SSPIClientWaffleTest <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4197">#4197</a>)</li>
<li>fix(ssl): build PKIX trust anchors without a KeyStore so FIPS-mode
JVMs can load sslrootcert <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4193">#4193</a>)</li>
<li>test: fix flaky sentLocationEqualToLastReceiveLSN replication test
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4175">#4175</a>)</li>
<li>build: promote MethodCanBeStatic to error level <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4172">#4172</a>)</li>
<li>Fix PGInterval.setSeconds to reject out of range and NaN values <a
href="https://github.com/sehrope"><code>@​sehrope</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4194">#4194</a>)</li>
<li>Replace connectThreadFactory with connectExecutor <a
href="https://github.com/sehrope"><code>@​sehrope</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4165">#4165</a>)</li>
<li>Fix deleting temp file when spooling large stream to disk in
StreamWrapper <a
href="https://github.com/sehrope"><code>@​sehrope</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4190">#4190</a>)</li>
<li>chore: Add top level /scratch to gitignore <a
href="https://github.com/sehrope"><code>@​sehrope</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4164">#4164</a>)</li>
<li>refactor: favour composition over inheritance for Driver.ConnectTask
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4160">#4160</a>)</li>
<li>Fix NumberParser.getFastLong(...) handling of overlong values <a
href="https://github.com/sehrope"><code>@​sehrope</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4163">#4163</a>)</li>
<li>build: produce a multi-release jar from reduced-pom.xml on Java 11+
<a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4157">#4157</a>)</li>
<li>Add connectThreadFactory and refactor Driver to use FutureTask for
loginTimeout connection attempts <a
href="https://github.com/sehrope"><code>@​sehrope</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4120">#4120</a>)</li>
<li>test: verify custom properties reach socket factory <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4125">#4125</a>)</li>
<li>test: fix LazyCleanerTest timeouts for the lingering Java 8 cleanup
thread <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4122">#4122</a>)</li>
<li>test: stabilise StatementTest.fastCloses on Windows <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4121">#4121</a>)</li>
<li>fix: append default non-proxy hosts when socksNonProxyHosts is set
<a href="https://github.com/davecramer"><code>@​davecramer</code></a>
(<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4045">#4045</a>)</li>
<li>test: budget terminating Sync in BatchDeadlockTest small-RETURNING
branch <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4116">#4116</a>)</li>
<li>test: make message assertions locale-independent <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4113">#4113</a>)</li>
<li>build: drop xgettext default keywords; regenerate translations <a
href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4100">#4100</a>)</li>
<li>ci: opt-in scheduled workflows via ENABLE_SCHEDULED_JOBS repo
variable <a href="https://github.com/vlsi"><code>@​vlsi</code></a> (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4085">#4085</a>)</li>
<li>Avoid direct java.lang.management dependency in maxResultBuffer
parser <a
href="https://github.com/mblakley-casana"><code>@​mblakley-casana</code></a>
(<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4069">#4069</a>)</li>
<li>fix: restore pre-describe for generated-key batches <a
href="https://github.com/bilalshehata"><code>@​bilalshehata</code></a>
(<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4014">#4014</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md">org.postgresql:postgresql's
changelog</a>.</em></p>
<blockquote>
<h2>[42.7.13] (2026-07-06)</h2>
<h3>Added</h3>
<ul>
<li>feat: invalidate the prepared-statement cache when the server
reports a <code>search_path</code> change via GUC_REPORT (PostgreSQL
18+), so cached plans are no longer used against the wrong schema [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4259">#4259</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4259">pgjdbc/pgjdbc#4259</a>)</li>
<li>feat: <code>reWriteBatchedInserts</code> now merges up to 32768 rows
into one multi-values <code>INSERT</code> (bounded by the 65535
bind-parameter limit on the extended protocol) instead of capping at
128, which speeds up batches of few-column rows. The new
<code>reWriteBatchedInsertsSize</code> connection property lowers that
cap when set; the default of <code>0</code> uses that maximum. [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4207">#4207</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4207">pgjdbc/pgjdbc#4207</a>)</li>
<li>feat: invalidate the prepared-statement cache after
CREATE/DROP/ALTER so callers no longer trip on &quot;cached plan must
not change result type&quot; without opting into
<code>autosave=ALWAYS</code>. Controlled by the new
<code>flushCacheOnDdl</code> connection property (default
<code>true</code>); set to <code>false</code> for the prior behaviour.
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4067">#4067</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4067">pgjdbc/pgjdbc#4067</a>)</li>
<li>feat: add <code>connectExecutor</code> connection property to
customize the <code>Executor</code> used to run the worker task that
performs the connection attempt when <code>loginTimeout</code> is in
effect. The value is the fully qualified name of a class implementing
<code>java.util.concurrent.Executor</code>. With a null value, the
default, the driver retains the prior behavior of running the connection
attempt on a daemon thread named <code>&quot;PostgreSQL JDBC driver
connection thread&quot;</code>. The executor must run the task on a
thread other than the caller's. Running the attempt on a named thread
lets applications that monitor driver-created threads identify it. [PR
<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4165">#4165</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4165">pgjdbc/pgjdbc#4165</a>)</li>
<li>feat: add <code>classLoaderStrategy</code> connection property to
control which classloaders the driver searches when loading a class
named by a connection property, for example <code>socketFactory</code>.
The default <code>driver-first</code> now falls back to the thread
context classloader when the driver's classloader cannot resolve the
class, which fixes class loading in non-flat class paths such as Quarkus
and OSGi. Set <code>driver</code> to keep the previous
driver-classloader-only behaviour, or <code>context-first</code> to
prefer the thread context classloader [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2112">#2112</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2112">pgjdbc/pgjdbc#2112</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4167">#4167</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4167">pgjdbc/pgjdbc#4167</a>)</li>
<li>feat: add OID constants for geometric arrays, <code>RECORD</code>,
and <code>refcursor</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4220">#4220</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4220">pgjdbc/pgjdbc#4220</a>)</li>
<li>feat: <code>LargeObject</code> <code>BlobInputStream</code> now
skips by seeking instead of reading, and the driver exposes the server
version so it can select the 64-bit large-object API where available [PR
<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4204">#4204</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4204">pgjdbc/pgjdbc#4204</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>refactor: the worker that runs the connection attempt under
<code>loginTimeout</code> is now a <code>FutureTask</code>
(<code>ConnectTask</code>) instead of the hand-rolled
<code>ConnectThread</code>. When the caller hits the timeout, the task
is now cancelled with <code>cancel(true)</code>, which interrupts the
worker thread rather than letting it run to completion. This makes the
connection attempt interruptible, so <code>loginTimeout</code> can stop
a slow connection attempt instead of leaking a thread. As before, a
connection that the worker still manages to establish after the caller
gives up is closed by the worker so that it does not leak. There are no
public API changes and this should only lead to faster background
resource cleanup for connections that time out. [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4120">#4120</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4120">pgjdbc/pgjdbc#4120</a>)</li>
<li>chore: <code>PGXAConnection.ConnectionHandler</code> now rejects
<code>setAutoCommit(false)</code> and <code>setSavepoint(...)</code>
during an active XA branch, in addition to the long-rejected
<code>setAutoCommit(true)</code> / <code>commit()</code> /
<code>rollback()</code>. The <code>setSavepoint</code> rejection was
already meant to be in place but the guard misspelled the method name as
<code>setSavePoint</code>, so savepoints silently went through. Both
changes bring the proxy in line with JTA 1.2 §3.4. [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4114">#4114</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4114">pgjdbc/pgjdbc#4114</a>)</li>
<li>chore: <code>commitPrepared</code> /
<code>rollback</code>-of-prepared now return <code>XAER_RMFAIL</code>
instead of <code>XAER_RMERR</code> when the underlying connection is
left in a non-idle <code>TransactionState</code>. Transaction managers
(Geronimo, Narayana, Atomikos) treat <code>XAER_RMFAIL</code> as
retryable on a fresh <code>XAResource</code>; the prepared transaction
is no longer abandoned. [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4114">#4114</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4114">pgjdbc/pgjdbc#4114</a>)</li>
<li>refactor: derive <code>getPrimaryKeys</code> from
<code>pg_constraint.conkey</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4202">#4202</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4202">pgjdbc/pgjdbc#4202</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>fix: the published GitHub release now ships the released
<code>postgresql-&lt;version&gt;.jar</code> and its detached PGP
signature, taken from the same signed build that is uploaded to Maven
Central, instead of a leftover SNAPSHOT jar [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3812">#3812</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3812">pgjdbc/pgjdbc#3812</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3814">#3814</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3814">pgjdbc/pgjdbc#3814</a>)</li>
<li>fix: simplify the <code>Statement#cancel</code> state machine by
dropping the redundant <code>CANCELLED</code> state.
<code>killTimerTask</code> now waits for the state to return to
<code>IDLE</code> directly, which removes a spin-forever case when more
than one thread observes the cancel completing [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/1827">#1827</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/1827">pgjdbc/pgjdbc#1827</a>).</li>
<li>perf: defer simple-query flushes until the driver reads the
response, allowing <code>BEGIN</code> and the following query to share a
network flush [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3894">#3894</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3894">pgjdbc/pgjdbc#3894</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4196">#4196</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4196">pgjdbc/pgjdbc#4196</a>)</li>
<li>fix: <code>reWriteBatchedInserts</code> no longer throws
<code>IllegalArgumentException</code> when batching a parameterless
<code>INSERT</code> (for example <code>INSERT INTO t VALUES (1,
2)</code>) of 256 rows or more [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4207">#4207</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4207">pgjdbc/pgjdbc#4207</a>)</li>
<li>fix: a comment before <code>CALL</code> in a
<code>CallableStatement</code> no longer hides the native call, so OUT
parameter registration works for <code>/* comment */ call proc(?,
?)</code> and similar. <code>Parser.modifyJdbcCall</code> now skips
leading whitespace and SQL comments (both <code>--</code> and <code>/*
*/</code>) before the call, tolerates a trailing comment after a <code>{
... }</code> escape, and no longer adds a spurious comma when moving an
OUT parameter into a call whose arguments are only a comment [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2538">#2538</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/2538">pgjdbc/pgjdbc#2538</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4209">#4209</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4209">pgjdbc/pgjdbc#4209</a>)</li>
<li>fix: <code>PreparedStatement.toString()</code> no longer throws for
a <code>bytea</code> value supplied as text via <code>PGobject</code>.
Hex-format values (<code>\x...</code>) are validated and rendered as a
<code>bytea</code> literal, and escape-format values are quoted and cast
like any other literal [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3757">#3757</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3757">pgjdbc/pgjdbc#3757</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4201">#4201</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4201">pgjdbc/pgjdbc#4201</a>)</li>
<li>fix: the driver no longer nulls the <code>contextClassLoader</code>
of shared <code>ForkJoinPool.commonPool()</code> worker threads, which
previously left unrelated tasks on those threads running with a
<code>null</code> classloader [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4155">#4155</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4155">pgjdbc/pgjdbc#4155</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4156">#4156</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4156">pgjdbc/pgjdbc#4156</a>)</li>
<li>fix: <code>PgResultSet#getCharacterStream</code> wraps
<code>String</code> in a <code>StringReader</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4063">#4063</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4063">pgjdbc/pgjdbc#4063</a>)</li>
<li>fix: <code>PGXAConnection</code> no longer saves and restores the
underlying connection's JDBC <code>autoCommit</code> flag. All
XA-protocol SQL (<code>BEGIN</code>, <code>PREPARE TRANSACTION</code>,
<code>COMMIT</code>, <code>ROLLBACK</code>, <code>COMMIT
PREPARED</code>, <code>ROLLBACK PREPARED</code>, the
<code>recover()</code> SELECT) is sent through
<code>QUERY_SUPPRESS_BEGIN</code>, so the caller's
<code>autoCommit</code> value is invariant across every
<code>XAResource</code> call. Fixes the &quot;2nd phase commit must be
issued using an idle connection&quot; failure during recovery on managed
datasources that pool connections with <code>autoCommit=false</code>
(TomEE, WildFly, WebSphere Liberty) [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4114">#4114</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4114">pgjdbc/pgjdbc#4114</a>)</li>
<li>fix: <code>PGXAConnection.prepare()</code> now mutates XA state only
after <code>PREPARE TRANSACTION</code> succeeds. A failed
<code>PREPARE</code> previously left the driver thinking the branch was
already prepared, so the follow-up <code>rollback(xid)</code> tried
<code>ROLLBACK PREPARED</code> against a non-existent gid and returned
<code>XAER_RMERR</code>. Transaction managers (Narayana) escalated this
to <code>HeuristicMixedException</code>. With the fix,
<code>rollback(xid)</code> takes the active-branch path and issues a
plain <code>ROLLBACK</code>, which the server accepts cleanly. Fixes
[Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3153">#3153</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3153">pgjdbc/pgjdbc#3153</a>),
[Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3123">#3123</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3123">pgjdbc/pgjdbc#3123</a>).
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4114">#4114</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4114">pgjdbc/pgjdbc#4114</a>)</li>
<li>fix: an updatable result set over an unqualified table name is now
classified using only the table visible through
<code>search_path</code>. When two schemas held a table with the same
name and the same primary or unique index name but a different set of
key columns, the driver took the union of both schemas' columns, so the
result set could be wrongly rejected as not updatable [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4214">#4214</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4214">pgjdbc/pgjdbc#4214</a>).
Supersedes [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3400">#3400</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3400">pgjdbc/pgjdbc#3400</a>).</li>
<li>fix: <code>LargeObject.close()</code> now flushes a buffered output
stream before marking the object closed, so closing a large object
without an explicit <code>flush()</code> no longer drops buffered
writes. The flush runs while the object is still open (it calls back
into <code>LargeObject.write()</code>), and <code>lo_close</code> always
runs afterward; a failure from <code>lo_close</code> no longer masks an
earlier flush error, and the transaction is not committed when the flush
failed [Issue <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4247">#4247</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4247">pgjdbc/pgjdbc#4247</a>)
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4248">#4248</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4248">pgjdbc/pgjdbc#4248</a>).</li>
<li>fix: reject empty <code>timestamp</code>, <code>timestamptz</code>,
and <code>date</code> text with a clear <code>SQLException</code>
(SQLState <code>22007</code>) instead of an
<code>ArrayIndexOutOfBoundsException</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4278">#4278</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4278">pgjdbc/pgjdbc#4278</a>)</li>
<li>fix: return null <code>CHAR_OCTET_LENGTH</code> for non-character
columns [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4231">#4231</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4231">pgjdbc/pgjdbc#4231</a>)</li>
<li>fix: honor scale in <code>ResultSet.getBigDecimal(int, int)</code>
[PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4211">#4211</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4211">pgjdbc/pgjdbc#4211</a>)</li>
<li>fix: support <code>java.time</code> values in an updatable
<code>ResultSet</code> <code>updateRow()</code> /
<code>insertRow()</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3848">#3848</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3848">pgjdbc/pgjdbc#3848</a>)</li>
<li>fix: improve batching when the <code>RETURNING</code> clause
contains <code>varchar</code> or <code>numeric</code> types [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4014">#4014</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4014">pgjdbc/pgjdbc#4014</a>)</li>
<li>fix: correct <code>estimatedReceiveBufferBytes</code> accounting
after a forced <code>Sync</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4014">#4014</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4014">pgjdbc/pgjdbc#4014</a>)</li>
<li>fix: avoid creating a transient <code>ResultSet</code> for
describe-statement purposes, and restore the pre-describe path for
generated-key batches [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4014">#4014</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4014">pgjdbc/pgjdbc#4014</a>)</li>
<li>fix: add an explicit failure message when a multi-statement command
executes in a batch [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4014">#4014</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4014">pgjdbc/pgjdbc#4014</a>)</li>
<li>fix: detect <code>search_path</code> changes case-insensitively [PR
<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4216">#4216</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4216">pgjdbc/pgjdbc#4216</a>)</li>
<li>fix: auto-detect the SSL key format instead of relying on the
<code>.key</code> extension [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/3946">#3946</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/3946">pgjdbc/pgjdbc#3946</a>)</li>
<li>fix: build PKIX trust anchors without a <code>KeyStore</code> so
FIPS JVMs work [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4193">#4193</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4193">pgjdbc/pgjdbc#4193</a>)</li>
<li>fix: use <code>gssResponseTimeout</code> rather than
<code>sslResponseTimeout</code> for GSS connections [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4076">#4076</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4076">pgjdbc/pgjdbc#4076</a>)</li>
<li>fix: skip the autosave savepoint for <code>SET LOCAL</code> /
<code>SET SESSION TRANSACTION</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4203">#4203</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4203">pgjdbc/pgjdbc#4203</a>)</li>
<li>fix: do not throw <code>AssertionError</code> from
<code>BatchResultHandler</code> on a closed connection [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4187">#4187</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4187">pgjdbc/pgjdbc#4187</a>)</li>
<li>fix: reject <code>SQL_TSI_FRAC_SECOND</code> with an explicit,
explained error [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4229">#4229</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4229">pgjdbc/pgjdbc#4229</a>)</li>
<li>fix: reject a null URL in <code>Driver.acceptsURL</code> with a
clear <code>NullPointerException</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4205">#4205</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4205">pgjdbc/pgjdbc#4205</a>)</li>
<li>fix: reject overlong inputs in <code>NumberParser.getFastLong</code>
instead of silently wrapping [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4163">#4163</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4163">pgjdbc/pgjdbc#4163</a>)</li>
<li>fix: reject out-of-range and NaN values in
<code>PGInterval.setSeconds</code> [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4194">#4194</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4194">pgjdbc/pgjdbc#4194</a>)</li>
<li>fix: close the socket when <code>PgConnection</code> setup fails
after connect [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4161">#4161</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4161">pgjdbc/pgjdbc#4161</a>)</li>
<li>fix: keep the <code>LazyCleanerImpl</code> cleanup task alive across
a transient empty queue [PR <a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4038">#4038</a>](<a
href="https://redirect.github.com/pgjdbc/pgjdbc/pull/4038">pgjdbc/pgjdbc#4038</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/3297557c6a8059d0d6e3522c79f0bd9a6f82ee07"><code>3297557</code></a>
docs: add 42.7.13 release changelog (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4270">#4270</a>)</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/d93d370984fbbccd099fc6466e4075ba46d8ec59"><code>d93d370</code></a>
style: apply Autostyle to docs/ and .github/</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/2e05ff9e3ea9e8249f25dcb7017984285f1f76b1"><code>2e05ff9</code></a>
build: check docs/ and .github/ formatting with Autostyle</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/b4a6087d2f07b578923a5272fa0155602ade9d40"><code>b4a6087</code></a>
Adjust EditorConfig für Makefiles</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/725cebbb4e13be777483bd916b19dfcd428b5f26"><code>725cebb</code></a>
fix(jdbc): reject empty timestamp/timestamptz text with a clear
error</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/23a1b0dac5a8fc633cc163e883eb21f0219ea521"><code>23a1b0d</code></a>
fix(scram): fail closed on channel-binding downgrade (no scram
bump)</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/0b4077a529b2448cc55a6ca87b2be8667243c9ab"><code>0b4077a</code></a>
Bump pgjdbc version from 42.7.12 to 42.7.13 (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4269">#4269</a>)</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/394800a38aebf54f9f293f6198e1fc5c8b19f10f"><code>394800a</code></a>
fix: flush LargeObject output stream before marking closed (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4248">#4248</a>)</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/83780f130e0c83a77bb67350603f3cca8d4b9bb2"><code>83780f1</code></a>
Maintain consistency with the use of the word maintainer vs comitter (<a
href="https://redirect.github.com/pgjdbc/pgjdbc/issues/4234">#4234</a>)</li>
<li><a
href="https://github.com/pgjdbc/pgjdbc/commit/d42cad5cd12a13197e68aa53f09a7721336dce7a"><code>d42cad5</code></a>
fix(jdbc): classify updatable result set by search_path visibility</li>
<li>Additional commits viewable in <a
href="https://github.com/pgjdbc/pgjdbc/compare/REL42.7.11...REL42.7.13">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.postgresql:postgresql&package-manager=gradle&previous-version=42.7.11&new-version=42.7.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 app/proprietary/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/proprietary/build.gradle b/app/proprietary/build.gradle
index ffe3cdc1e6..495a013c03 100644
--- a/app/proprietary/build.gradle
+++ b/app/proprietary/build.gradle
@@ -59,7 +59,7 @@ dependencies {
     runtimeOnly "io.jsonwebtoken:jjwt-impl:${jwtVersion}"
     runtimeOnly "io.jsonwebtoken:jjwt-jackson:${jwtVersion}"
     runtimeOnly 'com.h2database:h2:2.3.232' // Don't upgrade h2database - file format incompatible with 2.4.x, would break existing user databases
-    runtimeOnly 'org.postgresql:postgresql:42.7.11'
+    runtimeOnly 'org.postgresql:postgresql:42.7.13'
     implementation('com.coveo:saml-client:5.0.0') {
         exclude group: 'org.opensaml', module: 'opensaml-core'
     }

From 66369fd609b6aaf96e9901dda399d45a688edc3b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 13:25:19 +0100
Subject: [PATCH 046/122] build(deps): bump log from 0.4.29 to 0.4.33 in
 /frontend/editor/src-tauri (#7244)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [log](https://github.com/rust-lang/log) from 0.4.29 to 0.4.33.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rust-lang/log/releases">log's
releases</a>.</em></p>
<blockquote>
<h2>0.4.32</h2>
<h2>What's Changed</h2>
<ul>
<li>Support <code>Value</code> -&gt; string conversions with
<code>kv</code> + <code>std</code> features instead of
<code>kv_std</code> by <a
href="https://github.com/tisonkun"><code>@​tisonkun</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/729">rust-lang/log#729</a></li>
<li>Prepare for 0.4.32 release by <a
href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/730">rust-lang/log#730</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.31...0.4.32">https://github.com/rust-lang/log/compare/0.4.31...0.4.32</a></p>
<h2>0.4.31</h2>
<h2>What's Changed</h2>
<ul>
<li>fix typos in kv compile errors and log documentation by <a
href="https://github.com/Isvane"><code>@​Isvane</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/726">rust-lang/log#726</a></li>
<li>Leverage static str key when possible by <a
href="https://github.com/tisonkun"><code>@​tisonkun</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/727">rust-lang/log#727</a></li>
<li>Prepare for 0.4.31 release by <a
href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/728">rust-lang/log#728</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Isvane"><code>@​Isvane</code></a> made
their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/726">rust-lang/log#726</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.30...0.4.31">https://github.com/rust-lang/log/compare/0.4.30...0.4.31</a></p>
<h2>0.4.30</h2>
<h3>What's Changed</h3>
<ul>
<li>Support capturing of <code>std::net</code> types by <a
href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/724">rust-lang/log#724</a></li>
</ul>
<h3>New Contributors</h3>
<ul>
<li><a href="https://github.com/V0ldek"><code>@​V0ldek</code></a> made
their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/720">rust-lang/log#720</a></li>
<li><a href="https://github.com/woodruffw"><code>@​woodruffw</code></a>
made their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/723">rust-lang/log#723</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.29...0.4.30">https://github.com/rust-lang/log/compare/0.4.29...0.4.30</a></p>
<h3>Notable Changes</h3>
<ul>
<li>MSRV is bumped to 1.71.0 in <a
href="https://redirect.github.com/rust-lang/log/pull/723">rust-lang/log#723</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rust-lang/log/blob/master/CHANGELOG.md">log's
changelog</a>.</em></p>
<blockquote>
<h2>[0.4.33] - 2026-06-20</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixed key comparison by <a
href="https://github.com/matteo-zeggiotti-ok"><code>@​matteo-zeggiotti-ok</code></a>
in <a
href="https://redirect.github.com/rust-lang/log/pull/732">rust-lang/log#732</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/matteo-zeggiotti-ok"><code>@​matteo-zeggiotti-ok</code></a>
made their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/732">rust-lang/log#732</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.32...0.4.33">https://github.com/rust-lang/log/compare/0.4.32...0.4.33</a></p>
<h2>[0.4.32] - 2026-06-04</h2>
<h3>What's Changed</h3>
<ul>
<li>Support <code>Value</code> -&gt; string conversions with
<code>kv</code> + <code>std</code> features instead of
<code>kv_std</code> by <a
href="https://github.com/tisonkun"><code>@​tisonkun</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/729">rust-lang/log#729</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.31...0.4.32">https://github.com/rust-lang/log/compare/0.4.31...0.4.32</a></p>
<h2>[0.4.31] - 2026-06-02</h2>
<h3>What's Changed</h3>
<ul>
<li>Leverage static str key when possible by <a
href="https://github.com/tisonkun"><code>@​tisonkun</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/727">rust-lang/log#727</a></li>
</ul>
<h3>New Contributors</h3>
<ul>
<li><a href="https://github.com/Isvane"><code>@​Isvane</code></a> made
their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/726">rust-lang/log#726</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.30...0.4.31">https://github.com/rust-lang/log/compare/0.4.30...0.4.31</a></p>
<h2>[0.4.30] - 2026-05-21</h2>
<h3>What's Changed</h3>
<ul>
<li>Support capturing of <code>std::net</code> types by <a
href="https://github.com/KodrAus"><code>@​KodrAus</code></a> in <a
href="https://redirect.github.com/rust-lang/log/pull/724">rust-lang/log#724</a></li>
</ul>
<h3>New Contributors</h3>
<ul>
<li><a href="https://github.com/V0ldek"><code>@​V0ldek</code></a> made
their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/720">rust-lang/log#720</a></li>
<li><a href="https://github.com/woodruffw"><code>@​woodruffw</code></a>
made their first contribution in <a
href="https://redirect.github.com/rust-lang/log/pull/723">rust-lang/log#723</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rust-lang/log/compare/0.4.29...0.4.30">https://github.com/rust-lang/log/compare/0.4.29...0.4.30</a></p>
<h3>Notable Changes</h3>
<ul>
<li>MSRV is bumped to 1.71.0 in <a
href="https://redirect.github.com/rust-lang/log/pull/723">rust-lang/log#723</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rust-lang/log/commit/f405739f3a15a3f00680c793e1e1fa7e57d26ba4"><code>f405739</code></a>
Merge pull request <a
href="https://redirect.github.com/rust-lang/log/issues/734">#734</a>
from rust-lang/cargo/0.4.33</li>
<li><a
href="https://github.com/rust-lang/log/commit/6a24abf0835cef62e3d882287c97307dd3ecb403"><code>6a24abf</code></a>
prepare for 0.4.33 release</li>
<li><a
href="https://github.com/rust-lang/log/commit/87e062162e051d54bb553aacae3f0c6c4c213e59"><code>87e0621</code></a>
Merge pull request <a
href="https://redirect.github.com/rust-lang/log/issues/732">#732</a>
from matteo-zeggiotti-ok/fix-key-comparison</li>
<li><a
href="https://github.com/rust-lang/log/commit/a9b57119a631249fc8e881c7ef78e2028aacb823"><code>a9b5711</code></a>
Review: fallback to the &amp;str hash</li>
<li><a
href="https://github.com/rust-lang/log/commit/cc89cc6e41190de36892e33fff48e5f48cf57fa9"><code>cc89cc6</code></a>
Review: fixed other comparisons</li>
<li><a
href="https://github.com/rust-lang/log/commit/920e7dc2811c18a228bf78e818196de950659d85"><code>920e7dc</code></a>
Review: fixed comparison on <code>MaybeStaticStr</code></li>
<li><a
href="https://github.com/rust-lang/log/commit/0d71d3c685f2e23b1ad209b48408efe1205b18b0"><code>0d71d3c</code></a>
Fixed key comparison</li>
<li><a
href="https://github.com/rust-lang/log/commit/a5b5b2113e2767801250af184d6c3971e689ae3b"><code>a5b5b21</code></a>
Merge pull request <a
href="https://redirect.github.com/rust-lang/log/issues/730">#730</a>
from rust-lang/cargo/0.4.32</li>
<li><a
href="https://github.com/rust-lang/log/commit/c8d3b125c6216b3667e05544591f4fb34f53ff78"><code>c8d3b12</code></a>
prepare for 0.4.32 release</li>
<li><a
href="https://github.com/rust-lang/log/commit/ce6cd9fef14084207f2b6758999af062f89f9d87"><code>ce6cd9f</code></a>
Merge pull request <a
href="https://redirect.github.com/rust-lang/log/issues/729">#729</a>
from tisonkun/kv-std-support</li>
<li>Additional commits viewable in <a
href="https://github.com/rust-lang/log/compare/0.4.29...0.4.33">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=log&package-manager=cargo&previous-version=0.4.29&new-version=0.4.33)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index 77875af9df..130eb64c0e 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -2016,7 +2016,7 @@ dependencies = [
  "js-sys",
  "log",
  "wasm-bindgen",
- "windows-core 0.61.2",
+ "windows-core 0.62.2",
 ]
 
 [[package]]
@@ -2423,9 +2423,9 @@ dependencies = [
 
 [[package]]
 name = "log"
-version = "0.4.29"
+version = "0.4.33"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
 dependencies = [
  "value-bag",
 ]

From 98fa03caeb518436f99ed545eac8b2504c2169b0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 13:25:33 +0100
Subject: [PATCH 047/122] build(deps): bump github/codeql-action/upload-sarif
 from 4.35.5 to 4.37.3 (#7251)

Bumps
[github/codeql-action/upload-sarif](https://github.com/github/codeql-action)
from 4.35.5 to 4.37.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/upload-sarif's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.3</h2>
<p>No user facing changes.</p>
<h2>v4.37.2</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>v4.37.1</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>v4.37.0</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>v4.36.3</h2>
<p>No user facing changes.</p>
<h2>v4.36.2</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>v4.36.1</h2>
<p>No user facing changes.</p>
<h2>v4.36.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/upload-sarif's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.2 - 21 Jul 2026</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81"><code>e4fba86</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4031">#4031</a>
from github/update-v4.37.3-72f6a9da0</li>
<li><a
href="https://github.com/github/codeql-action/commit/fb50ab5d62a274adf3ef3e22cfe750ae87a0ede7"><code>fb50ab5</code></a>
Update changelog for v4.37.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/72f6a9da0def52d9193d6a758f0378b65091f8d1"><code>72f6a9d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4030">#4030</a>
from github/mbg/fix/no-proxy</li>
<li><a
href="https://github.com/github/codeql-action/commit/3b5ee58597653d9cc6785f3f1277f796d81f3646"><code>3b5ee58</code></a>
Use default <code>request</code> options instead of
<code>undefined</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/bfb6be4b5ecd3650f02f530571453e8c64ef0778"><code>bfb6be4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4028">#4028</a>
from github/mergeback/v4.37.2-to-main-e0647621</li>
<li><a
href="https://github.com/github/codeql-action/commit/526ab84f9858816d9cf5f7b9df4dd5e2235f0eba"><code>526ab84</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/d6217b9b8c14166e4851db94c11155d03bd13c07"><code>d6217b9</code></a>
Update changelog and version after v4.37.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0647621c2984b5ed2f768cb892365bf2a616ad1"><code>e064762</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4027">#4027</a>
from github/update-v4.37.2-385bcdc5a</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0faed839190caa67a5cd42f1cc16246028ca3df"><code>e0faed8</code></a>
Add a couple of change notes</li>
<li><a
href="https://github.com/github/codeql-action/commit/73aad0eaa9df172668665a150d17b8bc5a650c20"><code>73aad0e</code></a>
Update changelog for v4.37.2</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action/upload-sarif&package-manager=github_actions&previous-version=4.35.5&new-version=4.37.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/scorecards.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index dfc38fea37..f7ef677359 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -75,6 +75,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v3.29.5
+        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.29.5
         with:
           sarif_file: results.sarif

From 2bc1041443207d5a2f5fce7a4f61711f9996fd78 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 12:26:15 +0000
Subject: [PATCH 048/122] build(deps-dev): bump the typescript-eslint group
 across 1 directory with 3 updates (#7252)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the typescript-eslint group with 3 updates in the /frontend
directory:
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin),
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
and
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).

Updates `@typescript-eslint/eslint-plugin` from 8.61.1 to 8.65.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/eslint-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v8.65.0</h2>
<h2>8.65.0 (2026-07-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li>add warning when TS 7 is detected (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12529">#12529</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-imports] deprecate
extension rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12527">#12527</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/19562">#19562</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11889">#11889</a>)</li>
<li><strong>eslint-plugin:</strong> [no-shadow] specialized error on
enum declaration and member shadowing (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12578">#12578</a>)</li>
<li><strong>parser:</strong> add onUnsupportedTypeScriptVersion option
to error on unsupported TypeScript versions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12465">#12465</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid import defer
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12552">#12552</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-string-starts-ends-with]
handle escaped $ ending regex literals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12515">#12515</a>)</li>
<li><strong>eslint-plugin:</strong> [unbound-method] report unbound
methods accessed via member expression on union types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12448">#12448</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-parameter-property-assignment] don't flag computed
assignments with a variable key (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12568">#12568</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg ✨</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.65.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.64.0</h2>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support parsing <code>import defer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@​typescript-eslint/eslint-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>8.65.0 (2026-07-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-shadow] specialized error on
enum declaration and member shadowing (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12578">#12578</a>)</li>
<li>add warning when TS 7 is detected (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12529">#12529</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-imports] deprecate
extension rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12527">#12527</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/19562">#19562</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11889">#11889</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-parameter-property-assignment] don't flag computed
assignments with a variable key (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12568">#12568</a>)</li>
<li><strong>eslint-plugin:</strong> [unbound-method] report unbound
methods accessed via member expression on union types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12448">#12448</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-string-starts-ends-with]
handle escaped $ ending regex literals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12515">#12515</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg ✨</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.65.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.63.0 (2026-07-06)</h2>
<h3>🚀 Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/63ba81b6acfa0d663c29aa0013d4672bf3b0426c"><code>63ba81b</code></a>
chore(release): publish 8.65.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/aa602bdf3f2dd460069da4f82d8acf41a7f938b8"><code>aa602bd</code></a>
fix(eslint-plugin): [no-unnecessary-parameter-property-assignment] don't
flag...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/1e90d6733210f550697a062b1e79cb49ce2880e6"><code>1e90d67</code></a>
feat(eslint-plugin): [no-shadow] specialized error on enum declaration
and me...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/b32fb34305f685254059b8ceaf8bec15b1f1f77e"><code>b32fb34</code></a>
docs: fix broken code samples in no-extraneous-class and
prefer-function-type...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/eaf457631ac381aadfee747c2d098c8ac4df9d63"><code>eaf4576</code></a>
feat: add warning when TS 7 is detected (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12529">#12529</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/18c01c7049e55aa346d84c06bd03d8e9daf48343"><code>18c01c7</code></a>
feat(eslint-plugin): [no-restricted-imports] deprecate extension rule
(<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12527">#12527</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/96e8fe25587a6e83a7a1cd957132a2e02b451b4b"><code>96e8fe2</code></a>
fix(eslint-plugin): [unbound-method] report unbound methods accessed via
memb...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/0d06406f3181f063041dbd1621d71984127ddae1"><code>0d06406</code></a>
chore: add attw validation to repo (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12437">#12437</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/9d9973bb181a413187468a95f84f86d9998b0658"><code>9d9973b</code></a>
fix(eslint-plugin): [prefer-string-starts-ends-with] handle escaped $
ending ...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/c2386e49ec6347aa92d53a1f32143ca45984cc13"><code>c2386e4</code></a>
chore(deps): update dependency prettier to v3.9.5 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12486">#12486</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/parser` from 8.61.1 to 8.65.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/parser's
releases</a>.</em></p>
<blockquote>
<h2>v8.65.0</h2>
<h2>8.65.0 (2026-07-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li>add warning when TS 7 is detected (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12529">#12529</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-imports] deprecate
extension rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12527">#12527</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/19562">#19562</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11889">#11889</a>)</li>
<li><strong>eslint-plugin:</strong> [no-shadow] specialized error on
enum declaration and member shadowing (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12578">#12578</a>)</li>
<li><strong>parser:</strong> add onUnsupportedTypeScriptVersion option
to error on unsupported TypeScript versions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12465">#12465</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid import defer
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12552">#12552</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-string-starts-ends-with]
handle escaped $ ending regex literals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12515">#12515</a>)</li>
<li><strong>eslint-plugin:</strong> [unbound-method] report unbound
methods accessed via member expression on union types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12448">#12448</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-parameter-property-assignment] don't flag computed
assignments with a variable key (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12568">#12568</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg ✨</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.65.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.64.0</h2>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support parsing <code>import defer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@​typescript-eslint/parser's
changelog</a>.</em></p>
<blockquote>
<h2>8.65.0 (2026-07-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li>add warning when TS 7 is detected (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12529">#12529</a>)</li>
<li><strong>parser:</strong> add onUnsupportedTypeScriptVersion option
to error on unsupported TypeScript versions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12465">#12465</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg ✨</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.65.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.64.0 (2026-07-13)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.63.0 (2026-07-06)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.62.1 (2026-06-29)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/63ba81b6acfa0d663c29aa0013d4672bf3b0426c"><code>63ba81b</code></a>
chore(release): publish 8.65.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/eaf457631ac381aadfee747c2d098c8ac4df9d63"><code>eaf4576</code></a>
feat: add warning when TS 7 is detected (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12529">#12529</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/d8f1044702e3257ee92c0af6681c1455563009db"><code>d8f1044</code></a>
feat(parser): add onUnsupportedTypeScriptVersion option to error on
unsupport...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/0d06406f3181f063041dbd1621d71984127ddae1"><code>0d06406</code></a>
chore: add attw validation to repo (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12437">#12437</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/c2386e49ec6347aa92d53a1f32143ca45984cc13"><code>c2386e4</code></a>
chore(deps): update dependency prettier to v3.9.5 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12486">#12486</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a>
chore(release): publish 8.64.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a>
chore(release): publish 8.63.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a>
chore(release): publish 8.62.1</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a>
chore(release): publish 8.62.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a>
feat: remove redundant package.json &quot;files&quot; (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12444">#12444</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser">compare
view</a></li>
</ul>
</details>
<br />

Updates `typescript-eslint` from 8.61.1 to 8.65.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.65.0</h2>
<h2>8.65.0 (2026-07-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li>add warning when TS 7 is detected (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12529">#12529</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-imports] deprecate
extension rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12527">#12527</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/19562">#19562</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11889">#11889</a>)</li>
<li><strong>eslint-plugin:</strong> [no-shadow] specialized error on
enum declaration and member shadowing (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12578">#12578</a>)</li>
<li><strong>parser:</strong> add onUnsupportedTypeScriptVersion option
to error on unsupported TypeScript versions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12465">#12465</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid import defer
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12552">#12552</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-string-starts-ends-with]
handle escaped $ ending regex literals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12515">#12515</a>)</li>
<li><strong>eslint-plugin:</strong> [unbound-method] report unbound
methods accessed via member expression on union types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12448">#12448</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-parameter-property-assignment] don't flag computed
assignments with a variable key (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12568">#12568</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg ✨</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.65.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.64.0</h2>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support parsing <code>import defer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.65.0 (2026-07-20)</h2>
<h3>🚀 Features</h3>
<ul>
<li>add warning when TS 7 is detected (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12529">#12529</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Josh Goldberg ✨</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.65.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.64.0 (2026-07-13)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.63.0 (2026-07-06)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.62.1 (2026-06-29)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/63ba81b6acfa0d663c29aa0013d4672bf3b0426c"><code>63ba81b</code></a>
chore(release): publish 8.65.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/eaf457631ac381aadfee747c2d098c8ac4df9d63"><code>eaf4576</code></a>
feat: add warning when TS 7 is detected (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12529">#12529</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/0d06406f3181f063041dbd1621d71984127ddae1"><code>0d06406</code></a>
chore: add attw validation to repo (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12437">#12437</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/c2386e49ec6347aa92d53a1f32143ca45984cc13"><code>c2386e4</code></a>
chore(deps): update dependency prettier to v3.9.5 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12486">#12486</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a>
chore(release): publish 8.64.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a>
chore(release): publish 8.63.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a>
chore(release): publish 8.62.1</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a>
chore(release): publish 8.62.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a>
feat: remove redundant package.json &quot;files&quot; (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12444">#12444</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 128 ++++++++++++++++++-------------------
 frontend/package.json      |   6 +-
 2 files changed, 67 insertions(+), 67 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 0e61842b5c..28c91fcc4f 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -109,8 +109,8 @@
         "@types/node": "^24.5.2",
         "@types/react": "^19.1.13",
         "@types/react-dom": "^19.1.9",
-        "@typescript-eslint/eslint-plugin": "^8.61.1",
-        "@typescript-eslint/parser": "^8.61.1",
+        "@typescript-eslint/eslint-plugin": "^8.65.0",
+        "@typescript-eslint/parser": "^8.65.0",
         "@typescript/native": "npm:typescript@^7.0.2",
         "@vitejs/plugin-react-swc": "^4.1.0",
         "@vitest/browser": "^3.2.6",
@@ -135,7 +135,7 @@
         "stylelint": "^17.14.1",
         "tsx": "^4.22.4",
         "typescript": "npm:@typescript/typescript6@^6.0.2",
-        "typescript-eslint": "^8.61.1",
+        "typescript-eslint": "^8.65.0",
         "vite": "^7.3.2",
         "vite-plugin-compression2": "^2.5.3",
         "vite-plugin-static-copy": "^3.1.4",
@@ -5778,17 +5778,17 @@
       }
     },
     "node_modules/@typescript-eslint/eslint-plugin": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.61.1.tgz",
-      "integrity": "sha512-ZPlVl3PB3et/59Ne0fv/sci6ZXz4T4Hp4nTJ56i/Y0gR89ARb+KphojTq6j+56E5PIezmOIOOWyY+aWQFd+IkQ==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.65.0.tgz",
+      "integrity": "sha512-IEgob78X12rHpUmtcwFsXhZdVGJtwTVP8FiCLZkR6GlYVrl2PcuB+KhCE5BlVC/eQpQnu8WXRtkHZuPar+gCRA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@eslint-community/regexpp": "^4.12.2",
-        "@typescript-eslint/scope-manager": "8.61.1",
-        "@typescript-eslint/type-utils": "8.61.1",
-        "@typescript-eslint/utils": "8.61.1",
-        "@typescript-eslint/visitor-keys": "8.61.1",
+        "@typescript-eslint/scope-manager": "8.65.0",
+        "@typescript-eslint/type-utils": "8.65.0",
+        "@typescript-eslint/utils": "8.65.0",
+        "@typescript-eslint/visitor-keys": "8.65.0",
         "ignore": "^7.0.5",
         "natural-compare": "^1.4.0",
         "ts-api-utils": "^2.5.0"
@@ -5801,22 +5801,22 @@
         "url": "https://opencollective.com/typescript-eslint"
       },
       "peerDependencies": {
-        "@typescript-eslint/parser": "^8.61.1",
+        "@typescript-eslint/parser": "^8.65.0",
         "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
         "typescript": ">=4.8.4 <6.1.0"
       }
     },
     "node_modules/@typescript-eslint/parser": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.61.1.tgz",
-      "integrity": "sha512-PJ5vePq5/ognBbrIcoC5+SHO5dfpeLPzP9FpLkzWrguoYQEeeSjlJpVwOpo1JRSTEi7dRcwNy4h4dzV70PqHcg==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.65.0.tgz",
+      "integrity": "sha512-CZ4nMxWwgu1HEEFNkeaCptra9QCtkmKdgf3sWh1rl1trIhmxLilgTV4cwcbQ4wemnT4sWQN8CaKOmdYx+g2gMA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/scope-manager": "8.61.1",
-        "@typescript-eslint/types": "8.61.1",
-        "@typescript-eslint/typescript-estree": "8.61.1",
-        "@typescript-eslint/visitor-keys": "8.61.1",
+        "@typescript-eslint/scope-manager": "8.65.0",
+        "@typescript-eslint/types": "8.65.0",
+        "@typescript-eslint/typescript-estree": "8.65.0",
+        "@typescript-eslint/visitor-keys": "8.65.0",
         "debug": "^4.4.3"
       },
       "engines": {
@@ -5832,14 +5832,14 @@
       }
     },
     "node_modules/@typescript-eslint/project-service": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.61.1.tgz",
-      "integrity": "sha512-PrC4JYGmR241lYnfhmKGTXkFqv8+ymbTFgSAY0fVXpY82/QkMw5TZPl+vGzuDDU2QYJk9fIDOBTntF+yDv9LEA==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.65.0.tgz",
+      "integrity": "sha512-SxnPhbTsGahizDgbu7oqFH/xVtzIqMd/s+WtnSxNxJZJpLbdT5IPdzg8EZxO3+PoKahXmwJLeNQOpKJb3/bi7Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/tsconfig-utils": "^8.61.1",
-        "@typescript-eslint/types": "^8.61.1",
+        "@typescript-eslint/tsconfig-utils": "^8.65.0",
+        "@typescript-eslint/types": "^8.65.0",
         "debug": "^4.4.3"
       },
       "engines": {
@@ -5854,14 +5854,14 @@
       }
     },
     "node_modules/@typescript-eslint/scope-manager": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.61.1.tgz",
-      "integrity": "sha512-L2bdIeoQS8FlKAvONAr20w6OcLXeB+qiDKbAooS9A0Ben+iSIkBef0FxqwKWYqt5sa0i4KJtxVyVmhMylKzF5w==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.65.0.tgz",
+      "integrity": "sha512-Esbl8OSYiVxBokYgWPf7VVWg/BE798wXhimnn9ML9Pt5qoDf8bfQlgjlKXR/k98+AcNzlLKYrpCcrcuZ9DZLgg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.61.1",
-        "@typescript-eslint/visitor-keys": "8.61.1"
+        "@typescript-eslint/types": "8.65.0",
+        "@typescript-eslint/visitor-keys": "8.65.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -5872,9 +5872,9 @@
       }
     },
     "node_modules/@typescript-eslint/tsconfig-utils": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.61.1.tgz",
-      "integrity": "sha512-UN/H4di+OO7EWx2ovME+8t31YO+KVnK0RRKEHR3kOt21/Ay8BOq3M1OMvWs5vNiqcFCYGYoxK3MXPZzmMUE+yg==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.65.0.tgz",
+      "integrity": "sha512-j6GzGqCiRdA7Qhur2VVmKZAkBLfnHFQfx4TaJGL9RMveZqCo48jSHHO0DTgizEnGhtWnqmbtCUSrqSkdiY/0Hg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -5889,15 +5889,15 @@
       }
     },
     "node_modules/@typescript-eslint/type-utils": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.61.1.tgz",
-      "integrity": "sha512-GYRicKmVK0C4fsKgaACaknOUAq9Oa2kwsjnpFhFcS/5p4Ht5IP9OVLbgIgcK4SRk92nVHFluurg1lumD9dBcLw==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.65.0.tgz",
+      "integrity": "sha512-YjaZ7PRI5qY7ax2L3PbvX0rRyGtipAReCWs0mhhDBHjH/vl0g0BonaGXrKdKpMbIIsMIwDgbk/xzkBTyAltS5g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.61.1",
-        "@typescript-eslint/typescript-estree": "8.61.1",
-        "@typescript-eslint/utils": "8.61.1",
+        "@typescript-eslint/types": "8.65.0",
+        "@typescript-eslint/typescript-estree": "8.65.0",
+        "@typescript-eslint/utils": "8.65.0",
         "debug": "^4.4.3",
         "ts-api-utils": "^2.5.0"
       },
@@ -5914,9 +5914,9 @@
       }
     },
     "node_modules/@typescript-eslint/types": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.61.1.tgz",
-      "integrity": "sha512-G+CRlPqLv7Bz1IZVs03x5K59F1veqL0EJUROAdGhKsEq8qOiRiZbI+HUojPq5l0fEGOKModD9br6lObhB8zkoA==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.65.0.tgz",
+      "integrity": "sha512-JSSwWNy+H0E/01jJEM+hrX6N0OFDzFzeIhHFSAS01tlVaevpG8cFyYRPhS5yjGOvBUx3sqQHVMjCL1CAZZMxBg==",
       "devOptional": true,
       "license": "MIT",
       "engines": {
@@ -5928,16 +5928,16 @@
       }
     },
     "node_modules/@typescript-eslint/typescript-estree": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.61.1.tgz",
-      "integrity": "sha512-u+oQD3BqYWPc8YV9Zab4vaJElJuwOLPRc10Jm1o/qS+6Qwen14HCWwx0Seo4LnSn2wxea2Ik8DxPt2/FHmuhrg==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.65.0.tgz",
+      "integrity": "sha512-JboAE2swaYt4tb1fHhHTABE2K+OLy09XfcTbhnk4Pw96f9dd2e9iYsJ28gBggHlo5z5x1rkyWvcPoTuNTd4oGg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/project-service": "8.61.1",
-        "@typescript-eslint/tsconfig-utils": "8.61.1",
-        "@typescript-eslint/types": "8.61.1",
-        "@typescript-eslint/visitor-keys": "8.61.1",
+        "@typescript-eslint/project-service": "8.65.0",
+        "@typescript-eslint/tsconfig-utils": "8.65.0",
+        "@typescript-eslint/types": "8.65.0",
+        "@typescript-eslint/visitor-keys": "8.65.0",
         "debug": "^4.4.3",
         "minimatch": "^10.2.2",
         "semver": "^7.7.3",
@@ -5956,16 +5956,16 @@
       }
     },
     "node_modules/@typescript-eslint/utils": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.61.1.tgz",
-      "integrity": "sha512-1+P/3Dj6jvtybE1q0HQ6yBt/gq+oKJyLdEv4HdnqasaEXRSYCAsD59mXEVQnM/ULNdQxbX77tdG4jPRjIS6knA==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.65.0.tgz",
+      "integrity": "sha512-gXiwIHsYreboxeJucHKPvgwl7dXt50mF8s1/c00cP/WoVTyWKFdtfhRWwZiXYFU5H2O8vVoSLNrexFZjYS/SGA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.9.1",
-        "@typescript-eslint/scope-manager": "8.61.1",
-        "@typescript-eslint/types": "8.61.1",
-        "@typescript-eslint/typescript-estree": "8.61.1"
+        "@typescript-eslint/scope-manager": "8.65.0",
+        "@typescript-eslint/types": "8.65.0",
+        "@typescript-eslint/typescript-estree": "8.65.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -5980,13 +5980,13 @@
       }
     },
     "node_modules/@typescript-eslint/visitor-keys": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.61.1.tgz",
-      "integrity": "sha512-6fJ9MHWtK14C1DSkiMlHUSOmrVebL7150xZJBlJiL62jjhIA4JmOq6flwBgDxIdBKKdoiZRel+dfPD5MLfny3w==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.65.0.tgz",
+      "integrity": "sha512-8C71BQkGjiMmXtop7pHVJu1l2NNShFdkCyD6a2ezzs5vU/L3LRtb69EtcteFwz0mYMPzIgOw0n6OV4VBUWZd7A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.61.1",
+        "@typescript-eslint/types": "8.65.0",
         "eslint-visitor-keys": "^5.0.0"
       },
       "engines": {
@@ -17476,16 +17476,16 @@
       }
     },
     "node_modules/typescript-eslint": {
-      "version": "8.61.1",
-      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.61.1.tgz",
-      "integrity": "sha512-V7PayAfJokV3pEHgN7/v03D1SpujhRfQtYLbLIiBfDDncdg4PAiRBfoS4cnCANK4jmAPncczi59QO3afiXUlNw==",
+      "version": "8.65.0",
+      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.65.0.tgz",
+      "integrity": "sha512-/ggrHAwyjENDusvyxbuqxAC2dTnZg/Z8F+fgQtYIz+L6n/9HfSlEZcFGV/NsMNa6CkGk0xUjUAFwC0vHOflvIA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/eslint-plugin": "8.61.1",
-        "@typescript-eslint/parser": "8.61.1",
-        "@typescript-eslint/typescript-estree": "8.61.1",
-        "@typescript-eslint/utils": "8.61.1"
+        "@typescript-eslint/eslint-plugin": "8.65.0",
+        "@typescript-eslint/parser": "8.65.0",
+        "@typescript-eslint/typescript-estree": "8.65.0",
+        "@typescript-eslint/utils": "8.65.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
diff --git a/frontend/package.json b/frontend/package.json
index 04b4c4777b..e8bedb6bd8 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -131,8 +131,8 @@
     "@types/node": "^24.5.2",
     "@types/react": "^19.1.13",
     "@types/react-dom": "^19.1.9",
-    "@typescript-eslint/eslint-plugin": "^8.61.1",
-    "@typescript-eslint/parser": "^8.61.1",
+    "@typescript-eslint/eslint-plugin": "^8.65.0",
+    "@typescript-eslint/parser": "^8.65.0",
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitejs/plugin-react-swc": "^4.1.0",
     "@vitest/browser": "^3.2.6",
@@ -157,7 +157,7 @@
     "stylelint": "^17.14.1",
     "tsx": "^4.22.4",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "typescript-eslint": "^8.61.1",
+    "typescript-eslint": "^8.65.0",
     "vite": "^7.3.2",
     "vite-plugin-compression2": "^2.5.3",
     "vite-plugin-static-copy": "^3.1.4",

From df4683e219fc1e4ee3da04cccf45023578515900 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 13:27:06 +0100
Subject: [PATCH 049/122] build(deps): bump the react group across 1 directory
 with 3 updates (#7246)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the react group with 3 updates in the /frontend directory:
[react](https://github.com/react/react/tree/HEAD/packages/react),
[@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)
and
[react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom).

Updates `react` from 19.2.4 to 19.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react's
releases</a>.</em></p>
<blockquote>
<h2>19.2.8 (July 21st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Performance improvements when decoding
(<a
href="https://redirect.github.com/facebook/react/pull/37087">#37087</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
<h2>19.2.7 (June 1st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6
(<a
href="https://redirect.github.com/facebook/react/pull/36566">#36566</a>
by <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a>)</li>
</ul>
<h2>19.2.6 (May 6th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Type hardening and performance improvements
(<a
href="https://redirect.github.com/facebook/react/pull/36425">#36425</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a> and
<a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a>)</li>
</ul>
<h2>19.2.5 (April 8th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add more cycle protections (<a
href="https://redirect.github.com/facebook/react/pull/36236">#36236</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a> and
<a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/blob/main/CHANGELOG.md">react's
changelog</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6 (<a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36566">#36566</a>)</li>
</ul>
<h2>19.2.6 (May 6, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Type hardening and performance improvements (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a>, <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36425">#36425</a>)</li>
</ul>
<h2>19.2.5 (March 18, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Add more cycle protections (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a>, <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36236">#36236</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a>
[FlightReply] Performance improvements when decoding (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/37087">#37087</a>)</li>
<li><a
href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a>
[19.2.x] Update required references to GitHub repo (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/36753">#36753</a>)</li>
<li><a
href="https://github.com/react/react/commit/6117d7cca4906492c51fe6a03381e35adfd86e7d"><code>6117d7c</code></a>
Version 19.2.7 (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/36591">#36591</a>)</li>
<li><a
href="https://github.com/react/react/commit/eaf3e95ca92be7a23d3c9cc8ffd6f199a40be401"><code>eaf3e95</code></a>
Version 19.2.6</li>
<li><a
href="https://github.com/react/react/commit/23f4f9f30da9e9af2108c18bb197bae75ab584ea"><code>23f4f9f</code></a>
19.2.5</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.2.8/packages/react">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for react since your current version.</p>
</details>
<br />

Updates `@types/react` from 19.2.14 to 19.2.17
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-dom` from 19.2.4 to 19.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.2.8 (July 21st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Performance improvements when decoding
(<a
href="https://redirect.github.com/facebook/react/pull/37087">#37087</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
<h2>19.2.7 (June 1st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6
(<a
href="https://redirect.github.com/facebook/react/pull/36566">#36566</a>
by <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a>)</li>
</ul>
<h2>19.2.6 (May 6th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Type hardening and performance improvements
(<a
href="https://redirect.github.com/facebook/react/pull/36425">#36425</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a> and
<a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a>)</li>
</ul>
<h2>19.2.5 (April 8th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add more cycle protections (<a
href="https://redirect.github.com/facebook/react/pull/36236">#36236</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a> and
<a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/blob/main/CHANGELOG.md">react-dom's
changelog</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6 (<a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36566">#36566</a>)</li>
</ul>
<h2>19.2.6 (May 6, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Type hardening and performance improvements (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a>, <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36425">#36425</a>)</li>
</ul>
<h2>19.2.5 (March 18, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Add more cycle protections (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a>, <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36236">#36236</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a>
[FlightReply] Performance improvements when decoding (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37087">#37087</a>)</li>
<li><a
href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a>
[19.2.x] Update required references to GitHub repo (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/36753">#36753</a>)</li>
<li><a
href="https://github.com/react/react/commit/6117d7cca4906492c51fe6a03381e35adfd86e7d"><code>6117d7c</code></a>
Version 19.2.7 (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/36591">#36591</a>)</li>
<li><a
href="https://github.com/react/react/commit/eaf3e95ca92be7a23d3c9cc8ffd6f199a40be401"><code>eaf3e95</code></a>
Version 19.2.6</li>
<li><a
href="https://github.com/react/react/commit/23f4f9f30da9e9af2108c18bb197bae75ab584ea"><code>23f4f9f</code></a>
19.2.5</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.2.8/packages/react-dom">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for react-dom since your current version.</p>
</details>
<br />

Updates `@types/react` from 19.2.14 to 19.2.17
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 26 +++++++++++++-------------
 frontend/package.json      |  6 +++---
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 28c91fcc4f..970d6703cd 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -72,8 +72,8 @@
         "pixelmatch": "^7.1.0",
         "posthog-js": "^1.268.0",
         "qrcode.react": "^4.2.0",
-        "react": "^19.1.1",
-        "react-dom": "^19.1.1",
+        "react": "^19.2.8",
+        "react-dom": "^19.2.8",
         "react-easy-crop": "^5.5.6",
         "react-i18next": "^16.6.6",
         "react-markdown": "^9.0.3",
@@ -107,7 +107,7 @@
         "@types/google.accounts": "^0.0.18",
         "@types/google.picker": "^0.0.51",
         "@types/node": "^24.5.2",
-        "@types/react": "^19.1.13",
+        "@types/react": "^19.2.17",
         "@types/react-dom": "^19.1.9",
         "@typescript-eslint/eslint-plugin": "^8.65.0",
         "@typescript-eslint/parser": "^8.65.0",
@@ -5688,9 +5688,9 @@
       "license": "MIT"
     },
     "node_modules/@types/react": {
-      "version": "19.2.14",
-      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.14.tgz",
-      "integrity": "sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w==",
+      "version": "19.2.17",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.17.tgz",
+      "integrity": "sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw==",
       "license": "MIT",
       "dependencies": {
         "csstype": "^3.2.2"
@@ -14446,9 +14446,9 @@
       }
     },
     "node_modules/react": {
-      "version": "19.2.4",
-      "resolved": "https://registry.npmjs.org/react/-/react-19.2.4.tgz",
-      "integrity": "sha512-9nfp2hYpCwOjAN+8TZFGhtWEwgvWHXqESH8qT89AT/lWklpLON22Lc8pEtnpsZz7VmawabSU0gCjnj8aC0euHQ==",
+      "version": "19.2.8",
+      "resolved": "https://registry.npmjs.org/react/-/react-19.2.8.tgz",
+      "integrity": "sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==",
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
@@ -14500,15 +14500,15 @@
       }
     },
     "node_modules/react-dom": {
-      "version": "19.2.4",
-      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.4.tgz",
-      "integrity": "sha512-AXJdLo8kgMbimY95O2aKQqsz2iWi9jMgKJhRBAxECE4IFxfcazB2LmzloIoibJI3C12IlY20+KFaLv+71bUJeQ==",
+      "version": "19.2.8",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.8.tgz",
+      "integrity": "sha512-rVprimfGBG3DR+Tq0IQG2DT5PxKth1WIGDmj5yPmlzr4YBe7uyE+Du4oVqTDXZSHGGGXRtTJEGSSePyQCMBglQ==",
       "license": "MIT",
       "dependencies": {
         "scheduler": "^0.27.0"
       },
       "peerDependencies": {
-        "react": "^19.2.4"
+        "react": "^19.2.8"
       }
     },
     "node_modules/react-draggable": {
diff --git a/frontend/package.json b/frontend/package.json
index e8bedb6bd8..1763a2126a 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -69,8 +69,8 @@
     "pixelmatch": "^7.1.0",
     "posthog-js": "^1.268.0",
     "qrcode.react": "^4.2.0",
-    "react": "^19.1.1",
-    "react-dom": "^19.1.1",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
     "react-easy-crop": "^5.5.6",
     "react-i18next": "^16.6.6",
     "react-markdown": "^9.0.3",
@@ -129,7 +129,7 @@
     "@types/google.accounts": "^0.0.18",
     "@types/google.picker": "^0.0.51",
     "@types/node": "^24.5.2",
-    "@types/react": "^19.1.13",
+    "@types/react": "^19.2.17",
     "@types/react-dom": "^19.1.9",
     "@typescript-eslint/eslint-plugin": "^8.65.0",
     "@typescript-eslint/parser": "^8.65.0",

From 279b05fc7b7f316e8026cf646dbdc2482919aba3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 12:27:38 +0000
Subject: [PATCH 050/122] build(deps): bump base64 from 0.22.1 to 0.23.0 in
 /frontend/editor/src-tauri (#7245)

Bumps [base64](https://github.com/marshallpierce/rust-base64) from
0.22.1 to 0.23.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md">base64's
changelog</a>.</em></p>
<blockquote>
<h1>0.23.0</h1>
<ul>
<li>Added more consts for preconfigured configs and engines</li>
<li>Make DecodeError::InvalidLastSymbol more clear by including the
decoded value</li>
<li>Added SIMD-accelerated engines behind the default-on
<code>simd-unsafe</code> feature: <code>Simd</code> picks the best
instruction set at runtime (AVX2 on <code>x86_64</code>, NEON on
<code>aarch64</code>) and falls back to the scalar
<code>GeneralPurpose</code> engine, while <code>Avx2</code> and
<code>Neon</code> target one instruction set with no runtime
detection and work in <code>no_std</code>. The engines support the
standard and URL-safe alphabets.</li>
<li>Update MSRV to 1.71.0</li>
<li>Add support for custom padding symbols</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/9e9220a4166f628de7c8803289e120ae1e944f78"><code>9e9220a</code></a>
v0.23.0</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/870326ec592eebde9d6bfe4c5d8130c591273e9c"><code>870326e</code></a>
Merge pull request <a
href="https://redirect.github.com/marshallpierce/rust-base64/issues/306">#306</a>
from marshallpierce/mp/trailing-bits-docs</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/fbec5f1050f9fc16e6a826ebabaa2b7b0644bd67"><code>fbec5f1</code></a>
Document no trailing trailing bits</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/0a23549968f059b53cf39e96eba8f46779f322a7"><code>0a23549</code></a>
Merge pull request <a
href="https://redirect.github.com/marshallpierce/rust-base64/issues/305">#305</a>
from marshallpierce/mp/edition-2021</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/f10b7e20614135aa61289140683fc93e5a45d338"><code>f10b7e2</code></a>
Update deps &amp; edition</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/9d21a598860645cb6290940e7a43033bc43ebd74"><code>9d21a59</code></a>
Merge pull request <a
href="https://redirect.github.com/marshallpierce/rust-base64/issues/304">#304</a>
from marshallpierce/mp/custom-padding-rebase</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/f70bad2caaa85350b95d988bfb9a0997e824bfd8"><code>f70bad2</code></a>
Support custom padding symbols</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/684d79cd3deb8dfd5323619634c75bc0ff6edfd9"><code>684d79c</code></a>
Merge pull request <a
href="https://redirect.github.com/marshallpierce/rust-base64/issues/301">#301</a>
from marshallpierce/mp/simd-gardening</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/5bf66f2646c6fd99e1b18bf4e2bb0a47d34e1eaa"><code>5bf66f2</code></a>
Merge pull request <a
href="https://redirect.github.com/marshallpierce/rust-base64/issues/284">#284</a>
from AbeZbm/add-tests</li>
<li><a
href="https://github.com/marshallpierce/rust-base64/commit/d3831cfbf7dafe226a8383450c3410e2f67c826a"><code>d3831cf</code></a>
Followups to SIMD work</li>
<li>Additional commits viewable in <a
href="https://github.com/marshallpierce/rust-base64/compare/v0.22.1...v0.23.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/editor/src-tauri/Cargo.lock | 8 +++++++-
 frontend/editor/src-tauri/Cargo.toml | 2 +-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index 130eb64c0e..c7d25757c9 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -274,6 +274,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b25655df2c3cdd83c5e5b293b88acd880332b2ddadd7c30ac43144fdc0033da9"
+
 [[package]]
 name = "bit-set"
 version = "0.8.0"
@@ -4545,7 +4551,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 name = "stirling-pdf"
 version = "0.1.0"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.0",
  "core-foundation 0.10.1",
  "core-services",
  "keyring",
diff --git a/frontend/editor/src-tauri/Cargo.toml b/frontend/editor/src-tauri/Cargo.toml
index c7ef871d84..f617cd0738 100644
--- a/frontend/editor/src-tauri/Cargo.toml
+++ b/frontend/editor/src-tauri/Cargo.toml
@@ -44,7 +44,7 @@ tiny_http = "0.12"
 url = "2.5"
 urlencoding = "2.1"
 sha2 = "0.11"
-base64 = "0.22"
+base64 = "0.23"
 rand = "0.10"
 
 [target.'cfg(target_os = "macos")'.dependencies]

From 7a5eb73c5b250dc6b96ddabf8d8dba5549f4070f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 12:28:05 +0000
Subject: [PATCH 051/122] build(deps): bump actions/setup-node from 6.4.0 to
 7.0.0 (#7240)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-node](https://github.com/actions/setup-node) from
6.4.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=6.4.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Auto-Deploy-V2.yml                | 2 +-
 .github/workflows/build-enterprise.yml                 | 2 +-
 .github/workflows/check-generated-models.yml           | 2 +-
 .github/workflows/e2e-live.yml                         | 2 +-
 .github/workflows/e2e-stubbed.yml                      | 2 +-
 .github/workflows/frontend-a11y.yml                    | 2 +-
 .github/workflows/frontend-backend-licenses-update.yml | 2 +-
 .github/workflows/frontend-validation.yml              | 2 +-
 .github/workflows/multiOSReleases.yml                  | 4 ++--
 .github/workflows/nightly.yml                          | 4 ++--
 .github/workflows/sync-portal-docs.yml                 | 2 +-
 .github/workflows/tauri-build.yml                      | 2 +-
 .github/workflows/testdriver.yml                       | 2 +-
 13 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index ebf900d218..6b37029f90 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -331,7 +331,7 @@ jobs:
 
       - name: Set up Node.js for Storybook
         if: steps.sb-changes.outputs.storybook == 'true'
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index 7218cfb7f7..0fb02ad90f 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -61,7 +61,7 @@ jobs:
           java-version: "25"
           distribution: "temurin"
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index a4916954db..bf726bec2e 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -48,7 +48,7 @@ jobs:
           gradle-version: 9.6.0
 
       - name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/e2e-live.yml b/.github/workflows/e2e-live.yml
index 43003f7e25..af3ca377c1 100644
--- a/.github/workflows/e2e-live.yml
+++ b/.github/workflows/e2e-live.yml
@@ -26,7 +26,7 @@ jobs:
           java-version: "25"
           distribution: "temurin"
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/e2e-stubbed.yml b/.github/workflows/e2e-stubbed.yml
index 8ef1218677..0d972303ff 100644
--- a/.github/workflows/e2e-stubbed.yml
+++ b/.github/workflows/e2e-stubbed.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/frontend-a11y.yml b/.github/workflows/frontend-a11y.yml
index 1eefd8ce75..e9f259f2ab 100644
--- a/.github/workflows/frontend-a11y.yml
+++ b/.github/workflows/frontend-a11y.yml
@@ -35,7 +35,7 @@ jobs:
           # Need the base branch too, to diff against it.
           fetch-depth: 0
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/frontend-backend-licenses-update.yml b/.github/workflows/frontend-backend-licenses-update.yml
index 38279d5341..8c852ae08f 100644
--- a/.github/workflows/frontend-backend-licenses-update.yml
+++ b/.github/workflows/frontend-backend-licenses-update.yml
@@ -80,7 +80,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/frontend-validation.yml b/.github/workflows/frontend-validation.yml
index 9babe3c078..6824db1b5d 100644
--- a/.github/workflows/frontend-validation.yml
+++ b/.github/workflows/frontend-validation.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index 216c31e621..75cecb7fb5 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -146,7 +146,7 @@ jobs:
 
       - name: Setup Node.js
         if: matrix.variant.build_frontend == true
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: "npm"
@@ -208,7 +208,7 @@ jobs:
           sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.0-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libjavascriptcoregtk-4.0-dev libsoup2.4-dev libjavascriptcoregtk-4.1-dev libsoup-3.0-dev
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: "npm"
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 0bf7056b52..43074d92f7 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
@@ -72,7 +72,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/sync-portal-docs.yml b/.github/workflows/sync-portal-docs.yml
index e7a14af407..0b27858d5f 100644
--- a/.github/workflows/sync-portal-docs.yml
+++ b/.github/workflows/sync-portal-docs.yml
@@ -50,7 +50,7 @@ jobs:
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
 
       - name: Set up Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: "22"
           cache: "npm"
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index bb725359ce..65aac82520 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -124,7 +124,7 @@ jobs:
           sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.0-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libjavascriptcoregtk-4.0-dev libsoup2.4-dev libjavascriptcoregtk-4.1-dev libsoup-3.0-dev
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: "npm"
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index de3307858d..a7f74df4a7 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -156,7 +156,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           cache: "npm"
           cache-dependency-path: frontend/package-lock.json

From cd199c86591e9a9db31da91d783e6e9442427282 Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Mon, 3 Aug 2026 15:13:43 +0100
Subject: [PATCH 052/122] Define tool inputs & outputs in a structured way
 (#7204)

# Description of Changes
Change tool APIs to use structured definitions for input/output/type
info because we need that info to be able to validate whether policies
can actually successfully work based on whether one tool accepts the
output of another. There were various bugs in the previous string
definitions because of either misspellings or just incorrect
definitions, so I've gone through and fixed all that I can find.

<img width="729" height="271" alt="image"
src="https://github.com/user-attachments/assets/08357e96-6fbb-4b9c-ba4d-8995420c7b86"
/>

<img width="749" height="264" alt="image"
src="https://github.com/user-attachments/assets/76f46284-1866-4b64-b1ed-2480e01866e9"
/>

<img width="402" height="636" alt="image"
src="https://github.com/user-attachments/assets/8f7a36ca-2845-4f14-a2df-ec9c772e66f6"
/>

<img width="393" height="317" alt="image"
src="https://github.com/user-attachments/assets/46d8b891-9820-4ce3-8109-a8b782277037"
/>

---------

Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 .github/config/.files.yaml                    |   2 +
 .github/workflows/check-generated-models.yml  |  35 +-
 .taskfiles/engine.yml                         |   9 +-
 .taskfiles/frontend.yml                       |   5 +-
 DeveloperGuide.md                             |  35 +-
 Taskfile.yml                                  |   6 +
 .../swagger/ToolIOOperationCustomizer.java    | 105 +++
 .../software/common/model/tool/ToolArity.java |  24 +
 .../common/model/tool/ToolDiagnostic.java     |  47 ++
 .../common/model/tool/ToolFormat.java         |  62 ++
 .../software/common/model/tool/ToolIO.java    |  30 +
 .../common/model/tool/ToolIOCase.java         |  22 +
 .../common/model/tool/ToolIOSource.java       |  19 +
 .../common/model/tool/ToolIOSpec.java         | 108 +++
 .../common/model/tool/ToolIOWhen.java         |  18 +
 .../common/service/ToolChainValidator.java    | 168 +++++
 .../common/service/ToolIORegistry.java        | 127 ++++
 .../common/service/ToolMetadataService.java   |  10 +-
 .../common/util/RegexPatternUtils.java        |  21 -
 .../ToolChainValidatorConformanceTest.java    | 159 +++++
 .../common/service/ToolIODiscoveryTest.java   | 119 ++++
 .../common/service/ToolIORegistryTest.java    |  87 +++
 .../util/RegexPatternUtilsMoreTest.java       |   5 +-
 .../controller/api/AnalysisController.java    |  19 +-
 .../api/BookletImpositionController.java      |   9 +-
 .../SPDF/controller/api/CropController.java   |   5 +-
 .../api/EditTableOfContentsController.java    |   4 +
 .../controller/api/EditTextController.java    |  19 +-
 .../SPDF/controller/api/MergeController.java  |   6 +-
 .../api/MultiPageLayoutController.java        |   5 +-
 .../controller/api/PdfOverlayController.java  |   6 +-
 .../controller/api/PosterPdfController.java   |  11 +-
 .../api/RearrangePagesPDFController.java      |  12 +-
 .../controller/api/RotationController.java    |   5 +-
 .../controller/api/ScalePagesController.java  |   5 +-
 .../controller/api/SplitPDFController.java    |   9 +-
 .../api/SplitPdfByChaptersController.java     |   8 +-
 .../api/SplitPdfBySectionsController.java     |   9 +-
 .../api/SplitPdfBySizeController.java         |  11 +-
 .../api/ToSinglePageController.java           |   8 +-
 .../ConvertEbookToPDFController.java          |   5 +-
 .../api/converters/ConvertEmlToPDF.java       |  11 +-
 .../api/converters/ConvertHtmlToPDF.java      |   9 +-
 .../converters/ConvertImgPDFController.java   |  38 +-
 .../api/converters/ConvertMarkdownToPdf.java  |  10 +-
 .../converters/ConvertOfficeController.java   |   7 +-
 .../ConvertPDFToEpubController.java           |   7 +-
 .../ConvertPDFToExcelController.java          |   5 +-
 .../api/converters/ConvertPDFToHtml.java      |   6 +-
 .../api/converters/ConvertPDFToOffice.java    |  31 +-
 .../api/converters/ConvertPDFToPDFA.java      |   7 +-
 .../converters/ConvertPdfJsonController.java  |  10 +-
 .../ConvertPdfToVideoController.java          |   3 +-
 .../api/converters/ConvertSvgToPDF.java       |  25 +-
 .../api/converters/ConvertWebsiteToPDF.java   |   6 +-
 .../api/converters/ExtractCSVController.java  |   7 +-
 .../converters/PdfVectorExportController.java |  30 +-
 .../api/filters/FilterController.java         |  32 +-
 .../api/misc/AddCommentsController.java       |  12 +-
 .../api/misc/AttachmentController.java        |  22 +-
 .../api/misc/AutoRenameController.java        |   5 +-
 .../api/misc/AutoRotateController.java        |  15 +-
 .../api/misc/AutoSplitPdfController.java      |   9 +-
 .../api/misc/BlankPageController.java         |   7 +-
 .../api/misc/CompressController.java          |   5 +-
 .../api/misc/DecompressPdfController.java     |   3 +
 .../api/misc/ExtractImageScansController.java |   7 +-
 .../api/misc/ExtractImagesController.java     |   7 +-
 .../api/misc/FlattenController.java           |   5 +-
 .../api/misc/MetadataController.java          |   6 +-
 .../controller/api/misc/OCRController.java    |  20 +-
 .../api/misc/OverlayImageController.java      |  12 +-
 .../api/misc/PageNumbersController.java       |   7 +-
 .../api/misc/PrintFileController.java         |   4 +-
 .../api/misc/RemoveImagesController.java      |   5 +-
 .../controller/api/misc/RepairController.java |   9 +-
 .../misc/ReplaceAndInvertColorController.java |   8 +-
 .../api/misc/ScannerEffectController.java     |   6 +-
 .../controller/api/misc/ShowJavascript.java   |   5 +-
 .../controller/api/misc/StampController.java  |   6 +-
 .../api/misc/UnlockPDFFormsController.java    |   7 +-
 .../api/pipeline/PipelineController.java      |   3 +-
 .../pipeline/PipelineDirectoryProcessor.java  |   6 +-
 .../api/pipeline/PipelineProcessor.java       |   9 +-
 .../api/security/CertSignController.java      |   5 +-
 .../controller/api/security/GetInfoOnPDF.java |   6 +-
 .../api/security/PasswordController.java      |  23 +-
 .../api/security/RedactController.java        |  22 +-
 .../security/RemoveCertSignController.java    |   5 +-
 .../api/security/SanitizeController.java      |   5 +-
 .../api/security/TimestampController.java     |   8 +-
 .../security/ValidateSignatureController.java |   8 +-
 .../api/security/VerifyPDFController.java     |  10 +-
 .../api/security/WatermarkController.java     |   7 +-
 .../api/converters/ConvertPDFToMarkdown.java  |   6 +-
 .../software/SPDF/service/ApiDocService.java  | 120 +---
 .../config/ToolIODeclarationCoverageTest.java | 342 ++++++++++
 .../api/pipeline/PipelineProcessorTest.java   |  16 +-
 .../SPDF/service/ApiDocServiceTest.java       | 376 +----------
 .../api/MathAuditorAgentController.java       |   2 -
 .../api/PdfCommentAgentController.java        |   2 -
 .../api/ExternalApiCallController.java        |   7 +-
 .../purview/PurviewLabelController.java       |  10 +-
 .../policy/controller/PolicyController.java   |  20 +
 .../policy/engine/PolicyValidator.java        |  44 ++
 .../policy/model/PipelineValidation.java      |  39 ++
 .../controller/api/EmailController.java       |   4 +-
 .../controller/SigningSessionController.java  |   2 +-
 .../controller/PolicyControllerTest.java      |  59 ++
 .../controller/PolicyRunRoutesTest.java       |   4 +-
 .../policy/engine/PolicyValidatorTest.java    |  79 ++-
 engine/scripts/generate_tool_models.py        | 178 ++++-
 engine/src/stirling/agents/pdf_edit.py        |  86 ++-
 engine/src/stirling/models/tool_io.py         | 261 ++++++++
 engine/src/stirling/services/__init__.py      |   5 +
 .../src/stirling/services/tool_io_compat.py   | 216 ++++++
 engine/tests/test_pdf_edit_agent.py           | 124 ++++
 engine/tests/test_tool_io_compat.py           |  59 ++
 .../public/locales/en-US/translation.toml     |  36 +
 .../scripts/generate-tool-api-types.mts       | 228 ++++++-
 .../editor/src/core/types/toolApiTypes.ts     | 113 ++++
 frontend/editor/src/core/types/toolIO.ts      | 616 ++++++++++++++++++
 .../src/core/utils/toolIOCompat.test.ts       |  74 +++
 .../editor/src/core/utils/toolIOCompat.ts     | 265 ++++++++
 .../src/core/utils/toolIOLabels.test.ts       |  67 ++
 .../editor/src/core/utils/toolIOLabels.ts     |  25 +
 .../components/pipelines/ToolPicker.tsx       |  18 +
 .../src/portal/views/PipelineBuilder.css      |  13 +
 .../src/portal/views/PipelineBuilder.test.tsx |  72 +-
 .../src/portal/views/PipelineBuilder.tsx      |  87 ++-
 testing/tool-io-cases.json                    | 279 ++++++++
 131 files changed, 5026 insertions(+), 860 deletions(-)
 create mode 100644 app/common/src/main/java/stirling/software/common/config/swagger/ToolIOOperationCustomizer.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolArity.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolDiagnostic.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolFormat.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolIO.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolIOCase.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolIOSource.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolIOSpec.java
 create mode 100644 app/common/src/main/java/stirling/software/common/model/tool/ToolIOWhen.java
 create mode 100644 app/common/src/main/java/stirling/software/common/service/ToolChainValidator.java
 create mode 100644 app/common/src/main/java/stirling/software/common/service/ToolIORegistry.java
 create mode 100644 app/common/src/test/java/stirling/software/common/service/ToolChainValidatorConformanceTest.java
 create mode 100644 app/common/src/test/java/stirling/software/common/service/ToolIODiscoveryTest.java
 create mode 100644 app/common/src/test/java/stirling/software/common/service/ToolIORegistryTest.java
 create mode 100644 app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineValidation.java
 create mode 100644 engine/src/stirling/models/tool_io.py
 create mode 100644 engine/src/stirling/services/tool_io_compat.py
 create mode 100644 engine/tests/test_tool_io_compat.py
 create mode 100644 frontend/editor/src/core/types/toolIO.ts
 create mode 100644 frontend/editor/src/core/utils/toolIOCompat.test.ts
 create mode 100644 frontend/editor/src/core/utils/toolIOCompat.ts
 create mode 100644 frontend/editor/src/core/utils/toolIOLabels.test.ts
 create mode 100644 frontend/editor/src/core/utils/toolIOLabels.ts
 create mode 100644 testing/tool-io-cases.json

diff --git a/.github/config/.files.yaml b/.github/config/.files.yaml
index a9d4d3550e..e6e4f08230 100644
--- a/.github/config/.files.yaml
+++ b/.github/config/.files.yaml
@@ -123,8 +123,10 @@ generated-models: &generated-models
   - *openapi
   - frontend/editor/scripts/generate-tool-api-types.mts
   - frontend/editor/src/core/types/toolApiTypes.ts
+  - frontend/editor/src/core/types/toolIO.ts
   - engine/scripts/generate_tool_models.py
   - engine/src/stirling/models/tool_models.py
+  - engine/src/stirling/models/tool_io.py
   - .taskfiles/frontend.yml
   - .taskfiles/engine.yml
   - .github/workflows/check-generated-models.yml
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index bf726bec2e..f108a55afc 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -1,12 +1,12 @@
 name: Check generated models
 
-# Verifies the committed generated API models are still in sync with the Java
-# OpenAPI spec: the frontend tool API types
-# (frontend/editor/src/core/types/toolApiTypes.ts) and the engine tool
-# models (engine/src/stirling/models/tool_models.py). Regenerates both with the
-# single top-level `task tool-models` and fails if either committed file is
-# out of date. Called from build.yml when the backend Java, frontend, or engine
-# changes; also runs on push to main as a post-merge safety net.
+# Verifies the committed generated files are still in sync with the Java OpenAPI
+# spec: the request models (toolApiTypes.ts, tool_models.py) and the tool I/O
+# tables saying what each endpoint accepts and produces (toolIO.ts, tool_io.py).
+# Regenerates them all with the single top-level `task tool-models` and fails if
+# any committed file is out of date. Called from build.yml when the
+# backend Java, frontend, or engine changes; also runs on push to main as a
+# post-merge safety net.
 on:
   workflow_call:
   push:
@@ -57,18 +57,10 @@ jobs:
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
 
-      # Rebuilds the OpenAPI spec from the current Java and regenerates both the
-      # frontend types and the engine tool models from it.
-      - name: Regenerate generated models
-        run: task tool-models
-
       - name: Verify generated models are up to date
         id: models-check
         continue-on-error: true
-        run: |
-          git diff --exit-code \
-            frontend/editor/src/core/types/toolApiTypes.ts \
-            engine/src/stirling/models/tool_models.py
+        run: task tool-models:check
 
       - name: Comment on generated models check failure
         # Only post a comment on PRs. github-script's PR helpers need an
@@ -83,9 +75,9 @@ jobs:
               marker,
               '### Generated Models Check Failed',
               '',
-              'The generated `frontend/editor/src/core/types/toolApiTypes.ts` and/or `engine/src/stirling/models/tool_models.py` are out of date with the Java OpenAPI spec and will need to be regenerated before they can be merged in.',
+              'One or more generated files are out of date with the Java OpenAPI spec and will need to be regenerated before they can be merged in.',
               '',
-              'Run `task tool-models` to regenerate both, then commit the updated files.',
+              'Run `task tool-models` to regenerate them, then commit the updated files.',
             ].join('\n');
             const { data: comments } = await github.rest.issues.listComments({
               owner: context.repo.owner,
@@ -116,11 +108,10 @@ jobs:
           echo "  Generated Models Check Failed"
           echo "============================================"
           echo ""
-          echo "The generated frontend API types and/or engine tool"
-          echo "models are out of date with the Java OpenAPI spec and"
-          echo "will need to be regenerated before they can be merged in."
+          echo "One or more generated files are out of date with the Java"
+          echo "OpenAPI spec and will need to be regenerated before merging."
           echo ""
-          echo "Run 'task tool-models' to regenerate both, then"
+          echo "Run 'task tool-models' to regenerate them, then"
           echo "commit the updated files."
           echo "============================================"
           exit 1
diff --git a/.taskfiles/engine.yml b/.taskfiles/engine.yml
index cfe0790241..b62aeb5308 100644
--- a/.taskfiles/engine.yml
+++ b/.taskfiles/engine.yml
@@ -102,12 +102,19 @@ tasks:
     desc: "Generate tool_models.py from Java OpenAPI spec (SwaggerDoc.json)"
     deps: [install, ":backend:swagger"]
     cmds:
-      - uv run python scripts/generate_tool_models.py --spec ../SwaggerDoc.json --output src/stirling/models/tool_models.py
+      - uv run python scripts/generate_tool_models.py --spec ../SwaggerDoc.json --output src/stirling/models/tool_models.py --io-output src/stirling/models/tool_io.py
     sources:
       - ../SwaggerDoc.json
       - scripts/generate_tool_models.py
     generates:
       - src/stirling/models/tool_models.py
+      - src/stirling/models/tool_io.py
+
+  tool-models:check:
+    desc: "Fail if the committed tool models are out of date"
+    deps: [install, ":backend:swagger"]
+    cmds:
+      - uv run python scripts/generate_tool_models.py --spec ../SwaggerDoc.json --output src/stirling/models/tool_models.py --io-output src/stirling/models/tool_io.py --check
 
   clean:
     desc: "Clean build artifacts"
diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index e737f897f2..d3ce0d86dd 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -498,18 +498,19 @@ tasks:
     desc: "Generate tool API types from the Java OpenAPI spec"
     deps: [install, ":backend:swagger"]
     cmds:
-      - npx tsx editor/scripts/generate-tool-api-types.mts --spec ../SwaggerDoc.json --output editor/src/core/types/toolApiTypes.ts
+      - npx tsx editor/scripts/generate-tool-api-types.mts --spec ../SwaggerDoc.json --output editor/src/core/types/toolApiTypes.ts --io-output editor/src/core/types/toolIO.ts
     sources:
       - editor/scripts/generate-tool-api-types.mts
       - ../SwaggerDoc.json
     generates:
       - editor/src/core/types/toolApiTypes.ts
+      - editor/src/core/types/toolIO.ts
 
   tool-models:check:
     desc: "Fail if committed tool API types are out of date"
     deps: [install, ":backend:swagger"]
     cmds:
-      - npx tsx editor/scripts/generate-tool-api-types.mts --spec ../SwaggerDoc.json --output editor/src/core/types/toolApiTypes.ts --check
+      - npx tsx editor/scripts/generate-tool-api-types.mts --spec ../SwaggerDoc.json --output editor/src/core/types/toolApiTypes.ts --io-output editor/src/core/types/toolIO.ts --check
 
   licenses:generate:
     desc: "Generate frontend license report"
diff --git a/DeveloperGuide.md b/DeveloperGuide.md
index fbbf6478ac..286bf47fa5 100644
--- a/DeveloperGuide.md
+++ b/DeveloperGuide.md
@@ -504,7 +504,8 @@ For Stirling 2.0, new features are built as React components:
 1. **Create a New Controller:**
    - Create a new Java class in the `stirling-pdf/src/main/java/stirling/software/SPDF/controller/api` directory.
    - Annotate the class with `@RestController` and `@RequestMapping` to define the API endpoint.
-   - Ensure to add API documentation annotations like `@Tag(name = "General", description = "General APIs")` and `@Operation(summary = "Crops a PDF document", description = "This operation takes an input PDF file and crops it according to the given coordinates. Input:PDF Output:PDF Type:SISO")`.
+   - Ensure to add API documentation annotations like `@Tag(name = "General", description = "General APIs")` and `@Operation(summary = "Crops a PDF document", description = "This operation takes an input PDF file and crops it according to the given coordinates.")`.
+   - If the endpoint transforms a document, declare what it accepts and produces with `@ToolIO`, for example `@ToolIO(produces = ToolFormat.PDF)`. This is what lets a pipeline containing the step be checked before it runs, so a chain that cannot work is caught in the builder rather than part-way through a job. Endpoints under the tool namespaces are required to carry it - `ToolIODeclarationCoverageTest` fails the build otherwise. See [Declaring tool inputs and outputs](#declaring-tool-inputs-and-outputs).
 
    ```java
    package stirling.software.SPDF.controller.api;
@@ -578,6 +579,38 @@ For Stirling 2.0, new features are built as React components:
   }
   ```
 
+### Declaring tool inputs and outputs
+
+An endpoint that transforms a document declares what it accepts and produces with `@ToolIO`. This is the single source of truth: it is published into the OpenAPI spec as an `x-stirling-io` extension, and generated from there into the frontend (`toolIO.ts`) and the AI engine (`tool_io.py`). A pipeline can therefore be checked while it is being edited, instead of failing part-way through a job.
+
+```java
+@ToolIO(produces = ToolFormat.PDF)
+```
+
+`accepts` defaults to `{ ToolFormat.PDF }` and `arity` to `ToolArity.SISO`, so most tools only declare what they produce.
+
+- **`ToolFormat`** is the kind of file: `PDF`, `PDF_ENCRYPTED`, `IMAGE`, `ZIP`, `WORD`, `PPT`, `EXCEL`, `CSV`, `HTML`, `XML`, `JSON`, `TEXT`, `MARKDOWN`, `JAVASCRIPT`, `EBOOK`, `EMAIL`, `POSTSCRIPT`, `VIDEO`, `CBZ`, `CBR`, plus `ANY` (accepts or produces anything) and `NONE` (returns a report, not a file). Encryption is a format rather than a flag, so the default `accepts = PDF` means an endpoint rejects an encrypted PDF unless it opts in.
+- **`ToolArity`** is how many files go in and out: `SISO`, `SIMO`, `MISO`, `MIMO`. This axis carries ZIP-as-transport. A splitter is `produces = PDF, arity = SIMO`, and the caller unpacks the archive; an endpoint whose deliverable really is an archive declares `produces = ZIP` with a single-output arity and stays packed.
+
+When the output depends on a parameter, declare the exception as a case rather than picking one answer. Add Password produces an encrypted PDF unless both passwords are blank, in which case it has only set permissions:
+
+```java
+@ToolIO(
+        produces = ToolFormat.PDF_ENCRYPTED,
+        cases =
+                @ToolIOCase(
+                        when = {
+                            @ToolIOWhen(param = "password", matches = ""),
+                            @ToolIOWhen(param = "ownerPassword", matches = "")
+                        },
+                        produces = ToolFormat.PDF,
+                        arity = ToolArity.SISO))
+```
+
+Every condition in a `when` must hold for the case to apply, and `matches` is compared as a string, case-insensitively, with an empty string matching an absent or blank value. If a case reads a parameter that is not set yet, the output is reported as uncertain and the chain warns rather than erroring.
+
+Endpoints under the tool namespaces must carry a declaration; `ToolIODeclarationCoverageTest` fails the build for any that does not, with a short allowlist for endpoints that manage a session, a device or a stored resource rather than transforming a document. The matching rules are implemented three times (Java `ToolChainValidator`, `toolIOCompat.ts`, `tool_io_compat.py`) and pinned to the same answers by the shared fixtures in `testing/tool-io-cases.json`, so a behaviour change belongs in that file first.
+
 ## Adding New Translations to Existing Language Files in Stirling-PDF
 
 When adding a new feature or modifying existing ones in Stirling-PDF, you'll need to add new translation entries to the existing language files. Here's a step-by-step guide:
diff --git a/Taskfile.yml b/Taskfile.yml
index 75183bd4f9..304a031ac0 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -194,6 +194,12 @@ tasks:
       - task: frontend:tool-models
       - task: engine:tool-models
 
+  tool-models:check:
+    desc: "Fail if any committed API model is out of date"
+    cmds:
+      - task: frontend:tool-models:check
+      - task: engine:tool-models:check
+
   # ============================================================
   # Quality Gate
   # ============================================================
diff --git a/app/common/src/main/java/stirling/software/common/config/swagger/ToolIOOperationCustomizer.java b/app/common/src/main/java/stirling/software/common/config/swagger/ToolIOOperationCustomizer.java
new file mode 100644
index 0000000000..c7ea1b4f7c
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/config/swagger/ToolIOOperationCustomizer.java
@@ -0,0 +1,105 @@
+package stirling.software.common.config.swagger;
+
+import java.util.Arrays;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+import org.springdoc.core.customizers.GlobalOpenApiCustomizer;
+import org.springdoc.core.customizers.GlobalOperationCustomizer;
+import org.springframework.stereotype.Component;
+import org.springframework.web.method.HandlerMethod;
+
+import io.swagger.v3.oas.models.OpenAPI;
+import io.swagger.v3.oas.models.Operation;
+
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
+
+/**
+ * Publishes each {@link ToolIO} into the spec as {@code x-stirling-io}, which is how the frontend
+ * and the AI engine get it.
+ *
+ * <p>Also appends the {@code Input:/Output:/Type:} line the docs used to carry by hand, so the
+ * published text is unchanged without anyone maintaining it.
+ */
+@Component
+public class ToolIOOperationCustomizer
+        implements GlobalOperationCustomizer, GlobalOpenApiCustomizer {
+
+    public static final String EXTENSION_NAME = "x-stirling-io";
+    public static final String VOCABULARY_EXTENSION_NAME = "x-stirling-io-vocabulary";
+
+    // Published separately from the declarations: generators need the full vocabulary for their
+    // enums, and deriving it from what is present would shrink it when an endpoint is disabled.
+    @Override
+    public void customise(OpenAPI openApi) {
+        Map<String, Object> vocabulary = new LinkedHashMap<>();
+        vocabulary.put("formats", names(ToolFormat.values()));
+        vocabulary.put("arities", names(ToolArity.values()));
+        openApi.addExtension(VOCABULARY_EXTENSION_NAME, vocabulary);
+    }
+
+    @Override
+    public Operation customize(Operation operation, HandlerMethod handlerMethod) {
+        ToolIO declaration = handlerMethod.getMethodAnnotation(ToolIO.class);
+        if (declaration == null) {
+            return operation;
+        }
+        operation.addExtension(EXTENSION_NAME, toExtension(declaration));
+        operation.setDescription(appendSummaryLine(operation.getDescription(), declaration));
+        return operation;
+    }
+
+    private static Map<String, Object> toExtension(ToolIO declaration) {
+        Map<String, Object> extension = new LinkedHashMap<>();
+        extension.put("accepts", names(declaration.accepts()));
+        extension.put("produces", declaration.produces().name());
+        extension.put("arity", declaration.arity().name());
+        if (declaration.cases().length > 0) {
+            extension.put("cases", cases(declaration));
+        }
+        return extension;
+    }
+
+    private static List<Map<String, Object>> cases(ToolIO declaration) {
+        return Arrays.stream(declaration.cases()).map(ToolIOOperationCustomizer::toCase).toList();
+    }
+
+    private static Map<String, Object> toCase(ToolIOCase rule) {
+        Map<String, Object> entry = new LinkedHashMap<>();
+        entry.put(
+                "when",
+                Arrays.stream(rule.when()).map(ToolIOOperationCustomizer::toCondition).toList());
+        entry.put("produces", rule.produces().name());
+        entry.put("arity", rule.arity().name());
+        return entry;
+    }
+
+    private static Map<String, Object> toCondition(ToolIOWhen condition) {
+        Map<String, Object> entry = new LinkedHashMap<>();
+        entry.put("param", condition.param());
+        entry.put("matches", List.of(condition.matches()));
+        return entry;
+    }
+
+    private static List<String> names(Enum<?>[] values) {
+        return Arrays.stream(values).map(Enum::name).toList();
+    }
+
+    private static String appendSummaryLine(String description, ToolIO declaration) {
+        String summary =
+                "Input:"
+                        + String.join("/", names(declaration.accepts()))
+                        + " Output:"
+                        + declaration.produces().name()
+                        + " Type:"
+                        + declaration.arity().name();
+        return description == null || description.isBlank()
+                ? summary
+                : description.trim() + " " + summary;
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolArity.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolArity.java
new file mode 100644
index 0000000000..5966d4e181
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolArity.java
@@ -0,0 +1,24 @@
+package stirling.software.common.model.tool;
+
+/**
+ * How many files an endpoint consumes and produces (Single/Multiple In, Single/Multiple Out).
+ *
+ * <p>This axis carries ZIP-as-transport: a multi-output endpoint returns its results zipped and the
+ * caller unpacks them, so {@code split-pages} is {@code produces = PDF, arity = SIMO} rather than
+ * naming a ZIP-of-PDF format. An endpoint whose deliverable really is an archive declares {@link
+ * ToolFormat#ZIP} with a single-output arity and stays packed.
+ */
+public enum ToolArity {
+    SISO,
+    SIMO,
+    MISO,
+    MIMO;
+
+    public boolean isMultiInput() {
+        return this == MISO || this == MIMO;
+    }
+
+    public boolean isMultiOutput() {
+        return this == SIMO || this == MIMO;
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolDiagnostic.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolDiagnostic.java
new file mode 100644
index 0000000000..bc3184ba93
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolDiagnostic.java
@@ -0,0 +1,47 @@
+package stirling.software.common.model.tool;
+
+/**
+ * One problem found while checking a chain, against the step that cannot run. {@code code} is
+ * stable so the frontend can pick its own wording; {@code message} is an English fallback.
+ */
+public record ToolDiagnostic(int stepIndex, Severity severity, String code, String message) {
+
+    public enum Severity {
+        /** The chain cannot run as configured. Only this should block a save. */
+        ERROR,
+        /** May not run, depending on configuration or file content. */
+        WARN,
+        /** Worth knowing but not a problem, such as a step running once per file. */
+        INFO
+    }
+
+    /** The step declares no {@link ToolIO}, so nothing past it can be checked. */
+    public static final String UNDECLARED = "undeclared-operation";
+
+    /** The previous step's output is not a format this step accepts. */
+    public static final String FORMAT_MISMATCH = "format-mismatch";
+
+    /** The previous step's output depends on a parameter that is not set yet. */
+    public static final String OUTPUT_UNCERTAIN = "output-uncertain";
+
+    /** The pipeline's input files are not a format the first step accepts. */
+    public static final String SOURCE_MISMATCH = "source-mismatch";
+
+    /** The previous step emits several files and this one runs once per file. */
+    public static final String FAN_OUT = "fan-out";
+
+    /** The previous step emits several files and this one consumes them in a single call. */
+    public static final String FAN_IN = "fan-in";
+
+    public static ToolDiagnostic error(int stepIndex, String code, String message) {
+        return new ToolDiagnostic(stepIndex, Severity.ERROR, code, message);
+    }
+
+    public static ToolDiagnostic warn(int stepIndex, String code, String message) {
+        return new ToolDiagnostic(stepIndex, Severity.WARN, code, message);
+    }
+
+    public static ToolDiagnostic info(int stepIndex, String code, String message) {
+        return new ToolDiagnostic(stepIndex, Severity.INFO, code, message);
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolFormat.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolFormat.java
new file mode 100644
index 0000000000..3e83c94a39
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolFormat.java
@@ -0,0 +1,62 @@
+package stirling.software.common.model.tool;
+
+import java.util.List;
+
+import lombok.Getter;
+
+/**
+ * The kind of file a tool endpoint consumes or produces.
+ *
+ * <p>Encryption is its own format rather than a separate attribute, so the endpoints accepting only
+ * {@link #PDF} reject an encrypted one without declaring anything.
+ *
+ * <p>Extensions are a lossy projection used for run-time file checks: {@link #PDF} and {@link
+ * #PDF_ENCRYPTED} share {@code pdf}, because a filename cannot tell you whether a PDF is encrypted.
+ */
+@Getter
+public enum ToolFormat {
+    PDF("pdf"),
+    PDF_ENCRYPTED("pdf"),
+
+    // Vector formats are folded in: the extension set has always included svg/eps, and splitting
+    // them out would make chains that run fine today report as broken.
+    IMAGE("png", "jpg", "jpeg", "gif", "webp", "bmp", "tif", "tiff", "svg", "psd", "ai", "eps"),
+
+    /**
+     * An archive that is itself the deliverable. Multiple results use {@link ToolArity} instead.
+     */
+    ZIP("zip", "rar", "7z", "tar", "gz", "bz2", "xz", "lz", "lzma", "z"),
+
+    WORD("doc", "docx", "odt", "rtf"),
+    PPT("ppt", "pptx", "odp"),
+    EXCEL("xls", "xlsx", "ods"),
+    CSV("csv"),
+    HTML("html", "htm", "xhtml"),
+    XML("xml", "xsd", "xsl"),
+    JSON("json"),
+    TEXT("txt", "text", "md", "markdown"),
+    MARKDOWN("md", "markdown"),
+    JAVASCRIPT("js", "jsx"),
+    EBOOK("epub", "mobi", "azw3", "fb2", "txt", "docx"),
+    EMAIL("eml", "msg"),
+    POSTSCRIPT("ps", "eps"),
+
+    PCL("pcl", "pxl"),
+    XPS("xps", "oxps"),
+
+    VIDEO("mp4", "webm", "avi", "mov", "mkv"),
+    CBZ("cbz"),
+    CBR("cbr"),
+
+    /** Never reported as incompatible. */
+    ANY(),
+
+    /** A report or a status rather than a document. */
+    NONE();
+
+    private final List<String> extensions;
+
+    ToolFormat(String... extensions) {
+        this.extensions = List.of(extensions);
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolIO.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolIO.java
new file mode 100644
index 0000000000..30325b4b62
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolIO.java
@@ -0,0 +1,30 @@
+package stirling.software.common.model.tool;
+
+import java.lang.annotation.Documented;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+/**
+ * What a tool endpoint consumes and produces, so a chain of steps can be checked before it runs.
+ *
+ * <p>The single source of truth: read off the handler method by {@code ToolIORegistry}, published
+ * into the OpenAPI spec as {@code x-stirling-io}, and generated from there into the frontend and
+ * the AI engine.
+ */
+@Target(ElementType.METHOD)
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+public @interface ToolIO {
+
+    /** Defaulting to a plain PDF is what makes an ordinary endpoint reject an encrypted one. */
+    ToolFormat[] accepts() default {ToolFormat.PDF};
+
+    ToolFormat produces();
+
+    ToolArity arity() default ToolArity.SISO;
+
+    /** Overrides for an output that depends on a parameter; first match wins. */
+    ToolIOCase[] cases() default {};
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolIOCase.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOCase.java
new file mode 100644
index 0000000000..b3af8c2348
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOCase.java
@@ -0,0 +1,22 @@
+package stirling.software.common.model.tool;
+
+import java.lang.annotation.Documented;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+
+/**
+ * An output that applies when every condition in {@link #when()} holds.
+ *
+ * <p>Conditions are ANDed because the interesting branches turn on more than one parameter: Add
+ * Password only leaves the document unencrypted when both passwords are absent.
+ */
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+public @interface ToolIOCase {
+
+    ToolIOWhen[] when();
+
+    ToolFormat produces();
+
+    ToolArity arity();
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolIOSource.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOSource.java
new file mode 100644
index 0000000000..1e0d896fbd
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOSource.java
@@ -0,0 +1,19 @@
+package stirling.software.common.model.tool;
+
+import java.util.Map;
+import java.util.Optional;
+
+/**
+ * Supplies the {@link ToolIO} declaration for an endpoint path. An interface so a chain can be
+ * checked against a fixed set of declarations without standing up an application context.
+ */
+@FunctionalInterface
+public interface ToolIOSource {
+
+    Optional<ToolIOSpec> find(String operationPath);
+
+    static ToolIOSource of(Map<String, ToolIOSpec> specs) {
+        Map<String, ToolIOSpec> copy = Map.copyOf(specs);
+        return path -> Optional.ofNullable(copy.get(path));
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolIOSpec.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOSpec.java
new file mode 100644
index 0000000000..146ae85133
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOSpec.java
@@ -0,0 +1,108 @@
+package stirling.software.common.model.tool;
+
+import java.util.Arrays;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Set;
+
+/** The runtime form of a {@link ToolIO} declaration, read off a handler method once at startup. */
+public record ToolIOSpec(
+        Set<ToolFormat> accepts, ToolFormat produces, ToolArity arity, List<Case> cases) {
+
+    public record When(String param, List<String> matches) {
+
+        boolean holdsFor(Object value) {
+            String normalised = normalise(value);
+            return matches.stream().anyMatch(match -> normalise(match).equals(normalised));
+        }
+    }
+
+    /**
+     * Both sides of a condition are normalised at comparison, not at construction: the declaration
+     * reaches the frontend and the engine as published data, and normalising only one side there
+     * would silently disagree with this one.
+     */
+    public static String normalise(Object value) {
+        return value == null ? "" : String.valueOf(value).trim().toLowerCase(Locale.ROOT);
+    }
+
+    public record Case(List<When> when, ToolFormat produces, ToolArity arity) {
+
+        public Case {
+            when = List.copyOf(when);
+        }
+    }
+
+    /** {@code certain} is false when a {@link Case} keys on a parameter whose value is unknown. */
+    public record Output(ToolFormat format, ToolArity arity, boolean certain) {}
+
+    public ToolIOSpec {
+        accepts = Set.copyOf(accepts);
+        cases = List.copyOf(cases);
+    }
+
+    public static ToolIOSpec from(ToolIO annotation) {
+        return new ToolIOSpec(
+                new LinkedHashSet<>(Arrays.asList(annotation.accepts())),
+                annotation.produces(),
+                annotation.arity(),
+                Arrays.stream(annotation.cases()).map(ToolIOSpec::toCase).toList());
+    }
+
+    private static Case toCase(ToolIOCase rule) {
+        List<When> when = Arrays.stream(rule.when()).map(ToolIOSpec::toWhen).toList();
+        return new Case(when, rule.produces(), rule.arity());
+    }
+
+    private static When toWhen(ToolIOWhen condition) {
+        return new When(condition.param(), List.of(condition.matches()));
+    }
+
+    /**
+     * First matching {@link Case} wins. If none match but one reads a parameter we cannot see, the
+     * declared output comes back uncertain: a value we never saw might have picked another branch.
+     *
+     * @param parameters the step's configured parameters, or null when not known
+     */
+    public Output resolveOutput(Map<String, Object> parameters) {
+        boolean sawUnknownParam = false;
+        for (Case rule : cases) {
+            boolean allHold = true;
+            for (When condition : rule.when()) {
+                if (parameters == null || !parameters.containsKey(condition.param())) {
+                    sawUnknownParam = true;
+                    allHold = false;
+                    continue;
+                }
+                allHold &= condition.holdsFor(parameters.get(condition.param()));
+            }
+            if (allHold) {
+                return new Output(rule.produces(), rule.arity(), true);
+            }
+        }
+        return new Output(produces, arity, !sawUnknownParam);
+    }
+
+    public Output resolveOutput() {
+        return resolveOutput(null);
+    }
+
+    public boolean acceptsFormat(ToolFormat format) {
+        return format == ToolFormat.ANY
+                || accepts.contains(ToolFormat.ANY)
+                || accepts.contains(format);
+    }
+
+    /** For run-time file checks. Empty means anything is accepted. */
+    public List<String> acceptedExtensions() {
+        if (accepts.contains(ToolFormat.ANY)) {
+            return List.of();
+        }
+        return accepts.stream()
+                .flatMap(format -> format.getExtensions().stream())
+                .distinct()
+                .toList();
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/model/tool/ToolIOWhen.java b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOWhen.java
new file mode 100644
index 0000000000..7202ed1126
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/model/tool/ToolIOWhen.java
@@ -0,0 +1,18 @@
+package stirling.software.common.model.tool;
+
+import java.lang.annotation.Documented;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+
+/** One condition on a request parameter, guarding a {@link ToolIOCase}. */
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+public @interface ToolIOWhen {
+
+    String param();
+
+    /**
+     * Compared as strings, case-insensitively. An empty string matches an absent or blank value.
+     */
+    String[] matches();
+}
diff --git a/app/common/src/main/java/stirling/software/common/service/ToolChainValidator.java b/app/common/src/main/java/stirling/software/common/service/ToolChainValidator.java
new file mode 100644
index 0000000000..074a127925
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/service/ToolChainValidator.java
@@ -0,0 +1,168 @@
+package stirling.software.common.service;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.common.model.tool.ToolDiagnostic;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIOSource;
+import stirling.software.common.model.tool.ToolIOSpec;
+
+/**
+ * Whether a chain of steps can run: what each produces against what the next accepts.
+ *
+ * <p>The frontend and the AI engine implement the same rules against their generated copies, so a
+ * chain can be checked without a round trip. {@code testing/tool-io-cases.json} pins all three to
+ * the same answers.
+ */
+@Service
+@RequiredArgsConstructor
+public class ToolChainValidator {
+
+    /** {@code parameters} may be null; only used to resolve an output that depends on one. */
+    public record Step(String operation, Map<String, Object> parameters) {}
+
+    private final ToolIOSource toolIO;
+
+    public List<ToolDiagnostic> validate(List<Step> steps) {
+        return validate(steps, null);
+    }
+
+    /**
+     * @param sourceFormat the format entering step one, or null when unknown
+     */
+    public List<ToolDiagnostic> validate(List<Step> steps, ToolFormat sourceFormat) {
+        List<ToolDiagnostic> diagnostics = new ArrayList<>();
+        ToolIOSpec.Output carried = null;
+
+        for (int i = 0; i < steps.size(); i++) {
+            Step step = steps.get(i);
+            Optional<ToolIOSpec> found = toolIO.find(step.operation());
+            if (found.isEmpty()) {
+                diagnostics.add(
+                        ToolDiagnostic.warn(
+                                i,
+                                ToolDiagnostic.UNDECLARED,
+                                "Step "
+                                        + step.operation()
+                                        + " does not declare what it accepts or produces, so the"
+                                        + " rest of the chain cannot be checked."));
+                // Nothing is known past an undeclared step.
+                carried = null;
+                continue;
+            }
+            ToolIOSpec spec = found.get();
+
+            // Only the first step is handed the pipeline's input. Every later step is handed the
+            // previous step's output, which is simply unknown once an undeclared step intervened -
+            // checking it against the input again would judge it on a format it never receives.
+            if (i == 0) {
+                checkSource(diagnostics, i, step, spec, sourceFormat);
+            } else if (carried != null) {
+                checkTransition(diagnostics, i, step, spec, carried);
+            }
+            carried = spec.resolveOutput(step.parameters());
+        }
+        return diagnostics;
+    }
+
+    public static boolean hasErrors(List<ToolDiagnostic> diagnostics) {
+        return diagnostics.stream().anyMatch(d -> d.severity() == ToolDiagnostic.Severity.ERROR);
+    }
+
+    private static void checkSource(
+            List<ToolDiagnostic> diagnostics,
+            int index,
+            Step step,
+            ToolIOSpec spec,
+            ToolFormat sourceFormat) {
+        if (sourceFormat == null || spec.acceptsFormat(sourceFormat)) {
+            return;
+        }
+        diagnostics.add(
+                ToolDiagnostic.error(
+                        index,
+                        ToolDiagnostic.SOURCE_MISMATCH,
+                        "Step "
+                                + step.operation()
+                                + " accepts "
+                                + describe(spec)
+                                + " but the pipeline's input is "
+                                + sourceFormat
+                                + "."));
+    }
+
+    private static void checkTransition(
+            List<ToolDiagnostic> diagnostics,
+            int index,
+            Step step,
+            ToolIOSpec spec,
+            ToolIOSpec.Output previous) {
+
+        if (previous.format() == ToolFormat.NONE) {
+            diagnostics.add(
+                    ToolDiagnostic.error(
+                            index,
+                            ToolDiagnostic.FORMAT_MISMATCH,
+                            "The previous step returns a report rather than a file, so "
+                                    + step.operation()
+                                    + " has nothing to run on."));
+            return;
+        }
+
+        if (!spec.acceptsFormat(previous.format())) {
+            String message =
+                    "Step "
+                            + step.operation()
+                            + " accepts "
+                            + describe(spec)
+                            + " but the previous step produces "
+                            + previous.format()
+                            + ".";
+            diagnostics.add(
+                    previous.certain()
+                            ? ToolDiagnostic.error(index, ToolDiagnostic.FORMAT_MISMATCH, message)
+                            // Unresolved output: may yet be fine once the step is configured.
+                            : ToolDiagnostic.warn(index, ToolDiagnostic.OUTPUT_UNCERTAIN, message));
+            return;
+        }
+
+        if (!previous.certain()) {
+            diagnostics.add(
+                    ToolDiagnostic.warn(
+                            index,
+                            ToolDiagnostic.OUTPUT_UNCERTAIN,
+                            "The previous step's output depends on how it is configured, so this"
+                                    + " step may not be able to run."));
+            return;
+        }
+
+        if (previous.arity().isMultiOutput()) {
+            diagnostics.add(
+                    spec.arity().isMultiInput()
+                            ? ToolDiagnostic.info(
+                                    index,
+                                    ToolDiagnostic.FAN_IN,
+                                    "This step combines every file the previous step produced.")
+                            : ToolDiagnostic.info(
+                                    index,
+                                    ToolDiagnostic.FAN_OUT,
+                                    "This step runs once for each file the previous step"
+                                            + " produced."));
+        }
+    }
+
+    private static String describe(ToolIOSpec spec) {
+        return spec.accepts().stream()
+                .map(Enum::name)
+                .sorted()
+                .reduce((a, b) -> a + " or " + b)
+                .orElse("nothing");
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/service/ToolIORegistry.java b/app/common/src/main/java/stirling/software/common/service/ToolIORegistry.java
new file mode 100644
index 0000000000..754bfb8019
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/service/ToolIORegistry.java
@@ -0,0 +1,127 @@
+package stirling.software.common.service;
+
+import java.lang.reflect.Method;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.Set;
+import java.util.TreeMap;
+
+import org.springframework.context.ApplicationContext;
+import org.springframework.context.event.ContextRefreshedEvent;
+import org.springframework.context.event.EventListener;
+import org.springframework.stereotype.Service;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.servlet.mvc.method.RequestMappingInfo;
+import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOSource;
+import stirling.software.common.model.tool.ToolIOSpec;
+
+/**
+ * Reads every {@link ToolIO} declaration off its handler method at startup and serves it by
+ * endpoint path. Replaces parsing the same information out of the description prose, which meant
+ * fetching our own {@code /v1/api-docs} over HTTP first.
+ */
+@Slf4j
+@Service
+public class ToolIORegistry implements ToolMetadataService, ToolIOSource {
+
+    private final ApplicationContext applicationContext;
+
+    // Written on the startup thread, read on request threads. Spring's lifecycle establishes
+    // happens-before, so no volatile (same as AiEngineEndpointResolver).
+    private Map<String, ToolIOSpec> specsByPath = Map.of();
+
+    // Keep this the only constructor: with two, Spring falls back to a no-arg one that isn't here.
+    public ToolIORegistry(ApplicationContext applicationContext) {
+        this.applicationContext = applicationContext;
+    }
+
+    /** A registry over known declarations rather than ones discovered from the context. */
+    static ToolIORegistry forSpecs(Map<String, ToolIOSpec> specs) {
+        ToolIORegistry registry = new ToolIORegistry(null);
+        registry.specsByPath = Map.copyOf(specs);
+        return registry;
+    }
+
+    @EventListener(ContextRefreshedEvent.class)
+    public void discoverToolIO() {
+        Map<String, ToolIOSpec> discovered = new TreeMap<>();
+        for (RequestMappingHandlerMapping mapping :
+                applicationContext.getBeansOfType(RequestMappingHandlerMapping.class).values()) {
+            mapping.getHandlerMethods()
+                    .forEach((info, handler) -> register(discovered, info, handler));
+        }
+        specsByPath = Map.copyOf(discovered);
+        log.debug("Discovered {} endpoints declaring @ToolIO", specsByPath.size());
+    }
+
+    private static void register(
+            Map<String, ToolIOSpec> target, RequestMappingInfo info, HandlerMethod handler) {
+        ToolIO annotation = handler.getMethodAnnotation(ToolIO.class);
+        if (annotation == null) {
+            return;
+        }
+        ToolIOSpec spec = ToolIOSpec.from(annotation);
+        for (String pattern : extractPatterns(info)) {
+            target.put(pattern, spec);
+        }
+    }
+
+    @Override
+    public Optional<ToolIOSpec> find(String operationPath) {
+        return Optional.ofNullable(specsByPath.get(operationPath));
+    }
+
+    @Override
+    public boolean isMultiInput(String operationPath) {
+        return find(operationPath).map(spec -> spec.arity().isMultiInput()).orElse(false);
+    }
+
+    @Override
+    public List<String> getExtensionTypes(boolean output, String operationPath) {
+        Optional<ToolIOSpec> spec = find(operationPath);
+        if (spec.isEmpty()) {
+            return null;
+        }
+        List<String> extensions =
+                output
+                        ? spec.get().resolveOutput().format().getExtensions()
+                        : spec.get().acceptedExtensions();
+        // Callers express "no restriction" as null.
+        return extensions.isEmpty() ? null : extensions;
+    }
+
+    @Override
+    public boolean shouldUnpackZipResponse(String operationPath) {
+        // Multi-output zips purely as transport. A single-output ZIP is the deliverable
+        // (extract-attachments) and stays packed.
+        return find(operationPath)
+                .map(spec -> spec.resolveOutput().arity().isMultiOutput())
+                .orElse(false);
+    }
+
+    private static Set<String> extractPatterns(RequestMappingInfo info) {
+        try {
+            Method getDirectPaths = info.getClass().getMethod("getDirectPaths");
+            Object result = getDirectPaths.invoke(info);
+            if (result instanceof Set<?> set) {
+                Set<String> patterns = new HashSet<>();
+                for (Object value : set) {
+                    if (value instanceof String s) {
+                        patterns.add(s);
+                    }
+                }
+                return patterns;
+            }
+        } catch (Exception e) {
+            log.trace("getDirectPaths unavailable on RequestMappingInfo", e);
+        }
+        return Set.of();
+    }
+}
diff --git a/app/common/src/main/java/stirling/software/common/service/ToolMetadataService.java b/app/common/src/main/java/stirling/software/common/service/ToolMetadataService.java
index fb7a928d76..89fbc89f5a 100644
--- a/app/common/src/main/java/stirling/software/common/service/ToolMetadataService.java
+++ b/app/common/src/main/java/stirling/software/common/service/ToolMetadataService.java
@@ -17,12 +17,12 @@ public interface ToolMetadataService {
     List<String> getExtensionTypes(boolean output, String operationPath);
 
     /**
-     * Returns true when the endpoint's ZIP response is a transport for multiple typed results and
-     * should be unpacked: multi-output endpoints (Type:SIMO / Type:MIMO) and wrapper declarations
-     * such as {@code Output:ZIP-PDF} or {@code Output:IMAGE/ZIP}.
+     * Returns true when the endpoint's ZIP response is a transport for several results and should
+     * be unpacked, which is exactly the multi-output endpoints (a {@code SIMO} or {@code MIMO}
+     * arity).
      *
-     * <p>Returns false for a bare {@code Output:ZIP} (e.g. {@code get-attachments}), where the
-     * archive itself is the deliverable and should be kept packed.
+     * <p>Returns false for an endpoint whose declared output is an archive in its own right (for
+     * example {@code extract-attachments}), where unpacking would discard the deliverable.
      */
     boolean shouldUnpackZipResponse(String operationPath);
 }
diff --git a/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java b/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java
index 48e419a0ae..b4821edd9c 100644
--- a/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java
+++ b/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java
@@ -537,10 +537,6 @@ public final class RegexPatternUtils {
         getPattern("[/\\\\?%*:|\"<>]"); // Unsafe filename characters
         getPattern("[^a-zA-Z0-9 ]"); // Input sanitization
         getPattern("[^a-zA-Z0-9]"); // Filename sanitization
-        // API doc patterns
-        getPattern("Output:\\s*(\\w+)");
-        getPattern("Input:\\s*(\\w+)");
-        getPattern("Type:\\s*(\\w+)");
         log.debug("Pre-compiled {} common regex patterns", patternCache.size());
     }
 
@@ -550,23 +546,6 @@ public final class RegexPatternUtils {
                 "^(?=.{1,320}$)(?=.{1,64}@)[A-Za-z0-9](?:[A-Za-z0-9_.+-]*[A-Za-z0-9])?@[^-][A-Za-z0-9-]+(?:\\.[A-Za-z0-9-]+)*(?:\\.[A-Za-z]{2,})$");
     }
 
-    /* Pattern for matching Output:<TYPE> in API descriptions */
-    public Pattern getApiDocOutputTypePattern() {
-        return getPattern("Output:\\s*(\\w+)");
-    }
-
-    /* Pattern for matching Input:<TYPE> in API descriptions */
-    public Pattern getApiDocInputTypePattern() {
-        return getPattern("Input:\\s*(\\w+)");
-    }
-
-    /**
-     * Pattern for matching Type:<CODE> in API descriptions
-     */
-    public Pattern getApiDocTypePattern() {
-        return getPattern("Type:\\s*(\\w+)");
-    }
-
     /* Pattern for validating file extensions (2-4 alphanumeric, case-insensitive) */
     public Pattern getFileExtensionValidationPattern() {
         return getPattern("^[a-zA-Z0-9]{2,4}$", Pattern.CASE_INSENSITIVE);
diff --git a/app/common/src/test/java/stirling/software/common/service/ToolChainValidatorConformanceTest.java b/app/common/src/test/java/stirling/software/common/service/ToolChainValidatorConformanceTest.java
new file mode 100644
index 0000000000..67ba8be612
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/service/ToolChainValidatorConformanceTest.java
@@ -0,0 +1,159 @@
+package stirling.software.common.service;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.stream.Stream;
+
+import org.junit.jupiter.api.DynamicTest;
+import org.junit.jupiter.api.TestFactory;
+
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolDiagnostic;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIOSource;
+import stirling.software.common.model.tool.ToolIOSpec;
+
+import tools.jackson.databind.JsonNode;
+import tools.jackson.databind.json.JsonMapper;
+
+/** The shared cases in {@code testing/tool-io-cases.json}, which all three implementations run. */
+class ToolChainValidatorConformanceTest {
+
+    private static final JsonMapper MAPPER = JsonMapper.builder().build();
+
+    @TestFactory
+    Stream<DynamicTest> sharedCases() throws IOException {
+        JsonNode root = MAPPER.readTree(Files.readString(casesFile()));
+        Map<String, ToolIOSpec> specs = readSpecs(root.get("specs"));
+
+        List<DynamicTest> tests = new ArrayList<>();
+        for (JsonNode testCase : root.get("cases")) {
+            tests.add(
+                    DynamicTest.dynamicTest(
+                            testCase.get("name").asString(), () -> runCase(testCase, specs)));
+        }
+        return tests.stream();
+    }
+
+    private static void runCase(JsonNode testCase, Map<String, ToolIOSpec> specs) {
+        Map<String, ToolIOSpec> registry = new HashMap<>();
+        List<ToolChainValidator.Step> steps = new ArrayList<>();
+
+        int index = 0;
+        for (JsonNode stepNode : testCase.get("steps")) {
+            // Each step gets its own path so the same spec can appear twice in a chain.
+            String operation = "/op/" + index++;
+            JsonNode specName = stepNode.get("spec");
+            if (specName != null && !specName.isNull()) {
+                registry.put(operation, specs.get(specName.asString()));
+            }
+            steps.add(new ToolChainValidator.Step(operation, readParameters(stepNode)));
+        }
+
+        JsonNode sourceNode = testCase.get("sourceFormat");
+        ToolFormat sourceFormat =
+                sourceNode == null || sourceNode.isNull()
+                        ? null
+                        : ToolFormat.valueOf(sourceNode.asString());
+
+        List<ToolDiagnostic> actual =
+                new ToolChainValidator(ToolIOSource.of(registry)).validate(steps, sourceFormat);
+
+        assertEquals(summarise(testCase.get("expected")), summarise(actual), describe(actual));
+    }
+
+    private static Map<String, Object> readParameters(JsonNode stepNode) {
+        JsonNode parameters = stepNode.get("parameters");
+        if (parameters == null || parameters.isNull()) {
+            return null;
+        }
+        Map<String, Object> values = new HashMap<>();
+        parameters.propertyStream().forEach(e -> values.put(e.getKey(), e.getValue().asString()));
+        return values;
+    }
+
+    private static Map<String, ToolIOSpec> readSpecs(JsonNode node) {
+        Map<String, ToolIOSpec> specs = new HashMap<>();
+        node.propertyStream()
+                .forEach(entry -> specs.put(entry.getKey(), readSpec(entry.getValue())));
+        return specs;
+    }
+
+    private static ToolIOSpec readSpec(JsonNode node) {
+        Set<ToolFormat> accepts = new LinkedHashSet<>();
+        for (JsonNode format : node.get("accepts")) {
+            accepts.add(ToolFormat.valueOf(format.asString()));
+        }
+        List<ToolIOSpec.Case> cases = new ArrayList<>();
+        for (JsonNode rule : node.get("cases")) {
+            List<ToolIOSpec.When> when = new ArrayList<>();
+            for (JsonNode condition : rule.get("when")) {
+                List<String> matches = new ArrayList<>();
+                for (JsonNode match : condition.get("matches")) {
+                    matches.add(match.asString());
+                }
+                when.add(new ToolIOSpec.When(condition.get("param").asString(), matches));
+            }
+            cases.add(
+                    new ToolIOSpec.Case(
+                            when,
+                            ToolFormat.valueOf(rule.get("produces").asString()),
+                            ToolArity.valueOf(rule.get("arity").asString())));
+        }
+        return new ToolIOSpec(
+                accepts,
+                ToolFormat.valueOf(node.get("produces").asString()),
+                ToolArity.valueOf(node.get("arity").asString()),
+                cases);
+    }
+
+    /** Messages are free text, so compare only the contractual parts. */
+    private static List<String> summarise(List<ToolDiagnostic> diagnostics) {
+        return diagnostics.stream()
+                .map(d -> d.stepIndex() + ":" + d.severity() + ":" + d.code())
+                .toList();
+    }
+
+    private static List<String> summarise(JsonNode expected) {
+        List<String> summary = new ArrayList<>();
+        for (JsonNode node : expected) {
+            summary.add(
+                    node.get("stepIndex").asInt()
+                            + ":"
+                            + node.get("severity").asString()
+                            + ":"
+                            + node.get("code").asString());
+        }
+        return summary;
+    }
+
+    private static String describe(List<ToolDiagnostic> actual) {
+        return actual.stream()
+                .map(ToolDiagnostic::message)
+                .reduce((a, b) -> a + " | " + b)
+                .orElse("no diagnostics");
+    }
+
+    /** Shared with the frontend and engine, so it lives at the repo root. */
+    private static Path casesFile() {
+        Path current = Path.of("").toAbsolutePath();
+        while (current != null) {
+            Path candidate = current.resolve("testing/tool-io-cases.json");
+            if (Files.exists(candidate)) {
+                return candidate;
+            }
+            current = current.getParent();
+        }
+        throw new IllegalStateException(
+                "testing/tool-io-cases.json not found above the working directory");
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/service/ToolIODiscoveryTest.java b/app/common/src/test/java/stirling/software/common/service/ToolIODiscoveryTest.java
new file mode 100644
index 0000000000..4059382a55
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/service/ToolIODiscoveryTest.java
@@ -0,0 +1,119 @@
+package stirling.software.common.service;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.List;
+import java.util.Map;
+
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.Test;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.context.support.StaticWebApplicationContext;
+import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping;
+
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOSpec;
+import stirling.software.common.model.tool.ToolIOWhen;
+
+/**
+ * The registry reads real {@code @ToolIO} annotations off real handler mappings. Everything else
+ * checks the logic against a hand-built map, which would still pass if discovery silently found
+ * nothing.
+ */
+class ToolIODiscoveryTest {
+
+    @RestController
+    @RequestMapping("/api/v1/fixture")
+    static class FixtureController {
+
+        @PostMapping("/rotate")
+        @ToolIO(produces = ToolFormat.PDF)
+        public String rotate() {
+            return "";
+        }
+
+        @PostMapping("/split")
+        @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
+        public String split() {
+            return "";
+        }
+
+        @PostMapping("/add-password")
+        @ToolIO(
+                produces = ToolFormat.PDF_ENCRYPTED,
+                cases =
+                        @ToolIOCase(
+                                when = {
+                                    @ToolIOWhen(param = "password", matches = ""),
+                                    @ToolIOWhen(param = "ownerPassword", matches = "")
+                                },
+                                produces = ToolFormat.PDF,
+                                arity = ToolArity.SISO))
+        public String addPassword() {
+            return "";
+        }
+
+        @PostMapping("/undeclared")
+        public String undeclared() {
+            return "";
+        }
+    }
+
+    private static ToolIORegistry registry;
+
+    @BeforeAll
+    static void discover() {
+        StaticWebApplicationContext context = new StaticWebApplicationContext();
+        context.registerSingleton("fixtureController", FixtureController.class);
+        RequestMappingHandlerMapping mapping = new RequestMappingHandlerMapping();
+        mapping.setApplicationContext(context);
+        mapping.afterPropertiesSet();
+        context.getBeanFactory().registerSingleton("requestMappingHandlerMapping", mapping);
+
+        registry = new ToolIORegistry(context);
+        registry.discoverToolIO();
+    }
+
+    @Test
+    void readsDeclarationsOffHandlerMethods() {
+        ToolIOSpec rotate = registry.find("/api/v1/fixture/rotate").orElseThrow();
+        assertEquals(ToolFormat.PDF, rotate.produces());
+        assertEquals(ToolArity.SISO, rotate.arity());
+        assertTrue(rotate.acceptsFormat(ToolFormat.PDF));
+        assertFalse(rotate.acceptsFormat(ToolFormat.PDF_ENCRYPTED));
+    }
+
+    @Test
+    void skipsMethodsWithNoDeclaration() {
+        assertTrue(registry.find("/api/v1/fixture/undeclared").isEmpty());
+    }
+
+    @Test
+    void carriesArityThroughToTheUnpackDecision() {
+        assertTrue(registry.shouldUnpackZipResponse("/api/v1/fixture/split"));
+        assertFalse(registry.shouldUnpackZipResponse("/api/v1/fixture/rotate"));
+    }
+
+    @Test
+    void carriesCasesThroughToOutputResolution() {
+        ToolIOSpec spec = registry.find("/api/v1/fixture/add-password").orElseThrow();
+        assertEquals(
+                ToolFormat.PDF_ENCRYPTED,
+                spec.resolveOutput(Map.of("password", "x", "ownerPassword", "")).format());
+        assertEquals(
+                ToolFormat.PDF,
+                spec.resolveOutput(Map.of("password", "", "ownerPassword", "")).format());
+    }
+
+    @Test
+    void exposesInputExtensionsForRunTimeFileChecks() {
+        assertEquals(List.of("pdf"), registry.getExtensionTypes(false, "/api/v1/fixture/rotate"));
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/service/ToolIORegistryTest.java b/app/common/src/test/java/stirling/software/common/service/ToolIORegistryTest.java
new file mode 100644
index 0000000000..2ff60bfce7
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/service/ToolIORegistryTest.java
@@ -0,0 +1,87 @@
+package stirling.software.common.service;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIOSpec;
+
+/** The {@link ToolMetadataService} behaviour the pipeline executors depend on. */
+class ToolIORegistryTest {
+
+    private static final String SPLIT = "/api/v1/general/split-pages";
+    private static final String MERGE = "/api/v1/general/merge-pdfs";
+    private static final String ROTATE = "/api/v1/general/rotate-pdf";
+    private static final String ATTACHMENTS = "/api/v1/security/get-attachments";
+    private static final String EXTRACT_IMAGES = "/api/v1/misc/extract-images";
+    private static final String CONVERT_ANY = "/api/v1/convert/file/pdf";
+    private static final String UNKNOWN = "/api/v1/general/does-not-exist";
+
+    private static ToolIOSpec spec(ToolFormat accepts, ToolFormat produces, ToolArity arity) {
+        return new ToolIOSpec(Set.of(accepts), produces, arity, List.of());
+    }
+
+    private final ToolIORegistry registry =
+            ToolIORegistry.forSpecs(
+                    Map.of(
+                            SPLIT, spec(ToolFormat.PDF, ToolFormat.PDF, ToolArity.SIMO),
+                            MERGE, spec(ToolFormat.PDF, ToolFormat.PDF, ToolArity.MISO),
+                            ROTATE, spec(ToolFormat.PDF, ToolFormat.PDF, ToolArity.SISO),
+                            ATTACHMENTS, spec(ToolFormat.PDF, ToolFormat.ZIP, ToolArity.SISO),
+                            EXTRACT_IMAGES, spec(ToolFormat.PDF, ToolFormat.IMAGE, ToolArity.SIMO),
+                            CONVERT_ANY, spec(ToolFormat.ANY, ToolFormat.PDF, ToolArity.SISO)));
+
+    @Test
+    void multiInputFollowsArity() {
+        assertTrue(registry.isMultiInput(MERGE));
+        assertFalse(registry.isMultiInput(SPLIT));
+        assertFalse(registry.isMultiInput(ROTATE));
+        assertFalse(registry.isMultiInput(UNKNOWN));
+    }
+
+    @Test
+    void inputExtensionsComeFromAcceptedFormats() {
+        assertEquals(List.of("pdf"), registry.getExtensionTypes(false, ROTATE));
+    }
+
+    @Test
+    void outputExtensionsComeFromTheProducedFormat() {
+        assertEquals(List.of("pdf"), registry.getExtensionTypes(true, ROTATE));
+        assertTrue(registry.getExtensionTypes(true, EXTRACT_IMAGES).contains("png"));
+    }
+
+    @Test
+    void noRestrictionIsReportedAsNull() {
+        // Callers treat null as "any type accepted".
+        assertNull(registry.getExtensionTypes(false, CONVERT_ANY));
+        assertNull(registry.getExtensionTypes(false, UNKNOWN));
+    }
+
+    @Test
+    void multiOutputResponsesAreUnpacked() {
+        assertTrue(registry.shouldUnpackZipResponse(SPLIT));
+        assertTrue(registry.shouldUnpackZipResponse(EXTRACT_IMAGES));
+    }
+
+    @Test
+    void anArchiveDeliverableStaysPacked() {
+        // The archive is the deliverable; unpacking would lose it.
+        assertFalse(registry.shouldUnpackZipResponse(ATTACHMENTS));
+    }
+
+    @Test
+    void singleOutputResponsesAreNotUnpacked() {
+        assertFalse(registry.shouldUnpackZipResponse(ROTATE));
+        assertFalse(registry.shouldUnpackZipResponse(MERGE));
+        assertFalse(registry.shouldUnpackZipResponse(UNKNOWN));
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/RegexPatternUtilsMoreTest.java b/app/common/src/test/java/stirling/software/common/util/RegexPatternUtilsMoreTest.java
index 217f18abf5..6ae84a8e6d 100644
--- a/app/common/src/test/java/stirling/software/common/util/RegexPatternUtilsMoreTest.java
+++ b/app/common/src/test/java/stirling/software/common/util/RegexPatternUtilsMoreTest.java
@@ -325,11 +325,8 @@ class RegexPatternUtilsMoreTest {
         }
 
         @Test
-        void pageModeAndApiDocPatterns() {
+        void pageModePattern() {
             assertTrue(utils.getPageModePattern().matcher("a/b").find());
-            assertTrue(utils.getApiDocOutputTypePattern().matcher("Output: PDF").find());
-            assertTrue(utils.getApiDocInputTypePattern().matcher("Input: PDF").find());
-            assertTrue(utils.getApiDocTypePattern().matcher("Type: WEB").find());
         }
 
         @Test
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/AnalysisController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/AnalysisController.java
index 7dc79a3ebc..275bc3f967 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/AnalysisController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/AnalysisController.java
@@ -40,7 +40,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get PDF page count",
-            description = "Returns total number of pages in PDF. Input:PDF Output:JSON Type:SISO")
+            description = "Returns total number of pages in PDF.")
     public ResponseEntity<?> getPageCount(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             return ResponseEntity.ok(Map.of("pageCount", document.getNumberOfPages()));
@@ -54,7 +54,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get basic PDF information",
-            description = "Returns page count, version, file size. Input:PDF Output:JSON Type:SISO")
+            description = "Returns page count, version, file size.")
     public ResponseEntity<?> getBasicInfo(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             Map<String, Object> info = new HashMap<>();
@@ -72,7 +72,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get PDF document properties",
-            description = "Returns title, author, subject, etc. Input:PDF Output:JSON Type:SISO")
+            description = "Returns title, author, subject, etc.")
     public ResponseEntity<?> getDocumentProperties(@ModelAttribute PDFFile file)
             throws IOException {
         // Load the document in read-only mode to prevent modifications and ensure the integrity of
@@ -105,7 +105,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get page dimensions for all pages",
-            description = "Returns width and height of each page. Input:PDF Output:JSON Type:SISO")
+            description = "Returns width and height of each page.")
     public ResponseEntity<?> getPageDimensions(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             List<Map<String, Float>> dimensions = new ArrayList<>();
@@ -128,8 +128,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get form field information",
-            description =
-                    "Returns count and details of form fields. Input:PDF Output:JSON Type:SISO")
+            description = "Returns count and details of form fields.")
     public ResponseEntity<?> getFormFields(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             Map<String, Object> formInfo = new HashMap<>();
@@ -155,7 +154,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get annotation information",
-            description = "Returns count and types of annotations. Input:PDF Output:JSON Type:SISO")
+            description = "Returns count and types of annotations.")
     public ResponseEntity<?> getAnnotationInfo(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             Map<String, Object> annotInfo = new HashMap<>();
@@ -183,8 +182,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get font information",
-            description =
-                    "Returns list of fonts used in the document. Input:PDF Output:JSON Type:SISO")
+            description = "Returns list of fonts used in the document.")
     public ResponseEntity<?> getFontInfo(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             Map<String, Object> fontInfo = new HashMap<>();
@@ -212,8 +210,7 @@ public class AnalysisController {
     @JsonDataResponse
     @Operation(
             summary = "Get security information",
-            description =
-                    "Returns encryption and permission details. Input:PDF Output:JSON Type:SISO")
+            description = "Returns encryption and permission details.")
     public ResponseEntity<?> getSecurityInfo(@ModelAttribute PDFFile file) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(file.getFileInput())) {
             Map<String, Object> securityInfo = new HashMap<>();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/BookletImpositionController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/BookletImpositionController.java
index d1145fa815..f777680223 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/BookletImpositionController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/BookletImpositionController.java
@@ -29,6 +29,8 @@ import lombok.RequiredArgsConstructor;
 import stirling.software.SPDF.model.api.general.BookletImpositionRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFileManager;
@@ -47,12 +49,13 @@ public class BookletImpositionController {
             value = "/booklet-imposition",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Create a booklet with proper page imposition",
             description =
-                    "This operation combines page reordering for booklet printing with multi-page layout. "
-                            + "It rearranges pages in the correct order for booklet printing and places multiple pages "
-                            + "on each sheet for proper folding and binding. Input:PDF Output:PDF Type:SISO")
+                    "This operation combines page reordering for booklet printing with multi-page"
+                            + " layout. It rearranges pages in the correct order for booklet printing and"
+                            + " places multiple pages on each sheet for proper folding and binding.")
     public ResponseEntity<Resource> createBookletImposition(
             @ModelAttribute BookletImpositionRequest request) throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/CropController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/CropController.java
index f5a0cdcba9..571bb42914 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/CropController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/CropController.java
@@ -27,6 +27,8 @@ import stirling.software.SPDF.model.api.general.CropPdfForm;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -131,11 +133,12 @@ public class CropController {
             value = "/crop",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Crops a PDF document",
             description =
                     "This operation takes an input PDF file and crops it according to the given"
-                            + " coordinates. Input:PDF Output:PDF Type:SISO")
+                            + " coordinates.")
     public ResponseEntity<Resource> cropPdf(@ModelAttribute CropPdfForm request)
             throws IOException {
         if (request.isAutoCrop()) {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTableOfContentsController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTableOfContentsController.java
index 53abc46ac6..0cd187f2ec 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTableOfContentsController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTableOfContentsController.java
@@ -26,6 +26,8 @@ import stirling.software.SPDF.model.api.EditTableOfContentsRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFileManager;
@@ -47,6 +49,7 @@ public class EditTableOfContentsController {
             value = "/extract-bookmarks",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.JSON)
     @Operation(
             summary = "Extract PDF Bookmarks",
             description = "Extracts bookmarks/table of contents from a PDF document as JSON.")
@@ -151,6 +154,7 @@ public class EditTableOfContentsController {
             value = "/edit-table-of-contents",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Edit Table of Contents",
             description = "Add or edit bookmarks/table of contents in a PDF document.")
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTextController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTextController.java
index 3a10b1419b..17d1d7d8a7 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTextController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/EditTextController.java
@@ -34,6 +34,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.general.EditTextOperation;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFile;
@@ -83,19 +85,18 @@ public class EditTextController {
             value = "/edit-text",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Edit text in a PDF via find and replace",
             description =
                     "Applies an ordered list of find/replace operations to the text in a PDF and"
-                            + " returns the edited PDF. Useful for find-and-replace, bulk renames"
-                            + " (e.g. updating a company name throughout a document), and copy"
-                            + " editing where the AI agent has identified specific replacements."
-                            + " Matching is performed against the joined text of each page, so"
-                            + " find strings can span multiple visual runs (titles split per word,"
-                            + " kerning-broken phrases). Cross-element matches are written as a"
-                            + " single replacement run anchored at the leftmost matched position;"
-                            + " centered or tracked text may shift left when its content changes."
-                            + " Input:PDF Output:PDF Type:SISO")
+                            + " returns the edited PDF. Useful for find-and-replace, bulk renames (e.g."
+                            + " updating a company name throughout a document), and copy editing where the AI"
+                            + " agent has identified specific replacements. Matching is performed against the"
+                            + " joined text of each page, so find strings can span multiple visual runs"
+                            + " (titles split per word, kerning-broken phrases). Cross-element matches are"
+                            + " written as a single replacement run anchored at the leftmost matched position;"
+                            + " centered or tracked text may shift left when its content changes.")
     public ResponseEntity<Resource> editText(@ModelAttribute EditTextRequest request)
             throws Exception {
         MultipartFile inputFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/MergeController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/MergeController.java
index 9408aa821f..db26ca58d1 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/MergeController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/MergeController.java
@@ -41,6 +41,9 @@ import stirling.software.SPDF.model.api.general.MergePdfsRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -265,12 +268,13 @@ public class MergeController {
             value = "/merge-pdfs",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.MISO)
     @Operation(
             summary = "Merge multiple PDF files into one",
             description =
                     "This endpoint merges multiple PDF files into a single PDF file. The merged"
                             + " file will contain all pages from the input files in the order they were"
-                            + " provided. Input:PDF Output:PDF Type:MISO")
+                            + " provided.")
     public ResponseEntity<Resource> mergePdfs(
             @ModelAttribute MergePdfsRequest request,
             @RequestParam(value = "fileOrder", required = false) String fileOrder)
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/MultiPageLayoutController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/MultiPageLayoutController.java
index a18d0a81c0..e9d49ef262 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/MultiPageLayoutController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/MultiPageLayoutController.java
@@ -25,6 +25,8 @@ import stirling.software.SPDF.model.api.general.MergeMultiplePagesRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralFormCopyUtils;
@@ -44,11 +46,12 @@ public class MultiPageLayoutController {
             value = "/multi-page-layout",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Merge multiple pages of a PDF document into a single page",
             description =
                     "This operation takes an input PDF file and the number of pages to merge into a"
-                            + " single sheet in the output PDF file. Input:PDF Output:PDF Type:SISO")
+                            + " single sheet in the output PDF file.")
     public ResponseEntity<Resource> mergeMultiplePagesIntoOne(
             @ModelAttribute MergeMultiplePagesRequest request) throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/PdfOverlayController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/PdfOverlayController.java
index 4aab03ff55..7f17738d98 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/PdfOverlayController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/PdfOverlayController.java
@@ -27,6 +27,9 @@ import stirling.software.SPDF.model.api.general.OverlayPdfsRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -46,11 +49,12 @@ public class PdfOverlayController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.MISO)
     @Operation(
             summary = "Overlay PDF files in various modes",
             description =
                     "Overlay PDF files onto a base PDF with different modes: Sequential,"
-                            + " Interleaved, or Fixed Repeat. Input:PDF Output:PDF Type:MIMO")
+                            + " Interleaved, or Fixed Repeat.")
     public ResponseEntity<Resource> overlayPdfs(@ModelAttribute OverlayPdfsRequest request)
             throws IOException {
         MultipartFile baseFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/PosterPdfController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/PosterPdfController.java
index 80f1a159da..24aa4a2c80 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/PosterPdfController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/PosterPdfController.java
@@ -29,6 +29,9 @@ import stirling.software.SPDF.model.api.general.PosterPdfRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -49,13 +52,13 @@ public class PosterPdfController {
             consumes = "multipart/form-data",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Split large PDF pages into smaller printable chunks",
             description =
-                    "This endpoint splits large or oddly-sized PDF pages into smaller chunks "
-                            + "suitable for printing on standard paper sizes (e.g., A4, Letter). "
-                            + "Divides each page into a grid of smaller pages using Apache PDFBox. "
-                            + "Input: PDF Output: ZIP-PDF Type: SISO")
+                    "This endpoint splits large or oddly-sized PDF pages into smaller chunks"
+                            + " suitable for printing on standard paper sizes (e.g., A4, Letter). Divides each"
+                            + " page into a grid of smaller pages using Apache PDFBox.")
     public ResponseEntity<Resource> posterPdf(@ModelAttribute PosterPdfRequest request)
             throws Exception {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/RearrangePagesPDFController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/RearrangePagesPDFController.java
index 12e3a15b89..4c45951644 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/RearrangePagesPDFController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/RearrangePagesPDFController.java
@@ -30,6 +30,8 @@ import stirling.software.SPDF.model.api.general.RearrangePagesRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.FormUtils;
@@ -50,12 +52,12 @@ public class RearrangePagesPDFController {
             value = "/remove-pages",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Remove pages from a PDF file",
             description =
                     "This endpoint removes specified pages from a given PDF file. Users can provide"
-                            + " a comma-separated list of page numbers or ranges to delete. Input:PDF"
-                            + " Output:PDF Type:SISO")
+                            + " a comma-separated list of page numbers or ranges to delete.")
     public ResponseEntity<Resource> deletePages(@ModelAttribute PDFWithPageNums request)
             throws IOException {
 
@@ -234,13 +236,13 @@ public class RearrangePagesPDFController {
             value = "/rearrange-pages",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Rearrange pages in a PDF file",
             description =
                     "This endpoint rearranges pages in a given PDF file based on the specified page"
-                            + " order or custom mode. Users can provide a page order as a"
-                            + " comma-separated list of page numbers or page ranges, or a custom mode."
-                            + " Input:PDF Output:PDF")
+                            + " order or custom mode. Users can provide a page order as a comma-separated list"
+                            + " of page numbers or page ranges, or a custom mode.")
     public ResponseEntity<Resource> rearrangePages(@ModelAttribute RearrangePagesRequest request)
             throws IOException {
         MultipartFile pdfFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/RotationController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/RotationController.java
index 7dbb891197..31719bad75 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/RotationController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/RotationController.java
@@ -20,6 +20,8 @@ import stirling.software.SPDF.model.api.general.RotatePDFRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -38,11 +40,12 @@ public class RotationController {
             value = "/rotate-pdf",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Rotate a PDF file",
             description =
                     "This endpoint rotates a given PDF file by a specified angle. The angle must be"
-                            + " a multiple of 90. Input:PDF Output:PDF Type:SISO")
+                            + " a multiple of 90.")
     public ResponseEntity<Resource> rotatePDF(@ModelAttribute RotatePDFRequest request)
             throws IOException {
         MultipartFile pdfFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/ScalePagesController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/ScalePagesController.java
index fb7a55b793..6aa8599eea 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/ScalePagesController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/ScalePagesController.java
@@ -26,6 +26,8 @@ import stirling.software.SPDF.model.api.general.ScalePagesRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -87,11 +89,12 @@ public class ScalePagesController {
             value = "/scale-pages",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Change the size of a PDF page/document",
             description =
                     "This operation takes an input PDF file and the size to scale the pages to in"
-                            + " the output PDF file. Input:PDF Output:PDF Type:SISO")
+                            + " the output PDF file.")
     public ResponseEntity<Resource> scalePages(@ModelAttribute ScalePagesRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPDFController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPDFController.java
index d4516c0ed6..712a123581 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPDFController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPDFController.java
@@ -30,6 +30,9 @@ import stirling.software.SPDF.model.api.SplitPagesRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.FormUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -52,13 +55,13 @@ public class SplitPDFController {
             value = "/split-pages",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Split a PDF file into separate documents",
             description =
                     "This endpoint splits a given PDF file into separate documents based on the"
-                            + " specified page numbers or ranges. Users can specify pages using"
-                            + " individual numbers, ranges, or 'all' for every page. Input:PDF"
-                            + " Output:PDF Type:SIMO")
+                            + " specified page numbers or ranges. Users can specify pages using individual"
+                            + " numbers, ranges, or 'all' for every page.")
     public ResponseEntity<Resource> splitPdf(@ModelAttribute SplitPagesRequest request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfByChaptersController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfByChaptersController.java
index 6ad85d0c92..d4b07c3add 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfByChaptersController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfByChaptersController.java
@@ -34,6 +34,9 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.PdfMetadata;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.service.PdfMetadataService;
 import stirling.software.common.util.ExceptionUtils;
@@ -93,11 +96,10 @@ public class SplitPdfByChaptersController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Split PDFs by Chapters",
-            description =
-                    "Splits a PDF into chapters and returns a ZIP file. Input:PDF Output:ZIP-PDF"
-                            + " Type:SISO")
+            description = "Splits a PDF into chapters and returns a ZIP file.")
     public ResponseEntity<Resource> splitPdf(@ModelAttribute SplitPdfByChaptersRequest request)
             throws Exception {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySectionsController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySectionsController.java
index adaed9ec35..be8ca183a7 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySectionsController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySectionsController.java
@@ -34,6 +34,9 @@ import stirling.software.SPDF.model.api.SplitPdfBySectionsRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -54,13 +57,13 @@ public class SplitPdfBySectionsController {
             value = "/split-pdf-by-sections",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Split PDF pages into smaller sections",
             description =
                     "Split each page of a PDF into smaller sections based on the user's choice"
-                            + " which page to split, and how to split"
-                            + " ( halves, thirds, quarters, etc.), both vertically and horizontally."
-                            + " Input:PDF Output:ZIP-PDF Type:SISO")
+                            + " which page to split, and how to split ( halves, thirds, quarters, etc.), both"
+                            + " vertically and horizontally.")
     public ResponseEntity<Resource> splitPdf(
             @Valid @ModelAttribute SplitPdfBySectionsRequest request) throws Exception {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySizeController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySizeController.java
index e8ff5d9e23..8721fd3b70 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySizeController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/SplitPdfBySizeController.java
@@ -29,6 +29,9 @@ import stirling.software.SPDF.model.api.general.SplitPdfBySizeOrCountRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.FormUtils;
@@ -52,14 +55,14 @@ public class SplitPdfBySizeController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Auto split PDF pages into separate documents based on size or count",
             description =
                     "split PDF into multiple paged documents based on size/count, ie if 20 pages"
-                            + " and split into 5, it does 5 documents each 4 pages\r\n"
-                            + " if 10MB and each page is 1MB and you enter 2MB then 5 docs each 2MB"
-                            + " (rounded so that it accepts 1.9MB but not 2.1MB) Input:PDF"
-                            + " Output:ZIP-PDF Type:SISO")
+                            + " and split into 5, it does 5 documents each 4 pages\r\n if 10MB and each page"
+                            + " is 1MB and you enter 2MB then 5 docs each 2MB (rounded so that it accepts"
+                            + " 1.9MB but not 2.1MB)")
     public ResponseEntity<Resource> autoSplitPdf(
             @ModelAttribute SplitPdfBySizeOrCountRequest request) throws Exception {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/ToSinglePageController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/ToSinglePageController.java
index d451e98f5e..08d49c579f 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/ToSinglePageController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/ToSinglePageController.java
@@ -22,6 +22,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFileManager;
@@ -39,13 +41,13 @@ public class ToSinglePageController {
             value = "/pdf-to-single-page",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert a multi-page PDF into a single long page PDF",
             description =
                     "This endpoint converts a multi-page PDF document into a single paged PDF"
-                            + " document. The width of the single page will be same as the input's"
-                            + " width, but the height will be the sum of all the pages' heights."
-                            + " Input:PDF Output:PDF Type:SISO")
+                            + " document. The width of the single page will be same as the input's width, but"
+                            + " the height will be the sum of all the pages' heights.")
     public ResponseEntity<Resource> pdfToSinglePage(@ModelAttribute PDFFile request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEbookToPDFController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEbookToPDFController.java
index a53ae4943c..a835fc4307 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEbookToPDFController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEbookToPDFController.java
@@ -29,6 +29,8 @@ import stirling.software.SPDF.model.api.converters.ConvertEbookToPdfRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.ProcessExecutor;
@@ -61,11 +63,12 @@ public class ConvertEbookToPDFController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/ebook/pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(accepts = ToolFormat.EBOOK, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert an eBook file to PDF",
             description =
                     "This endpoint converts common eBook formats (EPUB, MOBI, AZW3, FB2, TXT, DOCX)"
-                            + " to PDF using Calibre. Input:BOOK Output:PDF Type:SISO")
+                            + " to PDF using Calibre.")
     public ResponseEntity<Resource> convertEbookToPdf(
             @ModelAttribute ConvertEbookToPdfRequest request) throws Exception {
         if (!isCalibreEnabled()) {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEmlToPDF.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEmlToPDF.java
index 7c3978ca00..446892b0fc 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEmlToPDF.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertEmlToPDF.java
@@ -27,6 +27,8 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.converters.EmlToPdfRequest;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.CustomHtmlSanitizer;
 import stirling.software.common.util.EmlToPdf;
@@ -49,13 +51,14 @@ public class ConvertEmlToPDF {
             value = "/eml/pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(accepts = ToolFormat.EMAIL, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert EML/MSG to PDF",
             description =
-                    "This endpoint converts EML (email) and MSG (Outlook) files to PDF format"
-                            + " with extensive customization options. Features include font settings,"
-                            + " image constraints, display modes, attachment handling, and HTML debug"
-                            + " output. Input: EML or MSG file, Output: PDF or HTML file. Type: SISO")
+                    "This endpoint converts EML (email) and MSG (Outlook) files to PDF format with"
+                            + " extensive customization options. Features include font settings, image"
+                            + " constraints, display modes, attachment handling, and HTML debug output. or MSG"
+                            + " file, or HTML file.")
     public ResponseEntity<Resource> convertEmlToPdf(@ModelAttribute EmlToPdfRequest request) {
 
         MultipartFile inputFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertHtmlToPDF.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertHtmlToPDF.java
index 53a0def649..c7799497a5 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertHtmlToPDF.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertHtmlToPDF.java
@@ -19,6 +19,8 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.converters.HTMLToPdfRequest;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.*;
 
@@ -39,11 +41,14 @@ public class ConvertHtmlToPDF {
             value = "/html/pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    // A ZIP of HTML plus its CSS is a first-class input here, and is what convert/pdf/html emits.
+    @ToolIO(
+            accepts = {ToolFormat.HTML, ToolFormat.ZIP},
+            produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert an HTML or ZIP (containing HTML and CSS) to PDF",
             description =
-                    "This endpoint takes an HTML or ZIP file input and converts it to a PDF format."
-                            + " Input:HTML Output:PDF Type:SISO")
+                    "This endpoint takes an HTML or ZIP file input and converts it to a PDF format.")
     public ResponseEntity<Resource> HtmlToPdf(@ModelAttribute HTMLToPdfRequest request)
             throws Exception {
         MultipartFile fileInput = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertImgPDFController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertImgPDFController.java
index 1255a2a228..40f1c8be45 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertImgPDFController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertImgPDFController.java
@@ -41,6 +41,11 @@ import stirling.software.SPDF.model.api.converters.ConvertToPdfRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.CbrUtils;
 import stirling.software.common.util.CbzUtils;
@@ -78,12 +83,20 @@ public class ConvertImgPDFController {
             value = "/pdf/img",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(
+            produces = ToolFormat.IMAGE,
+            arity = ToolArity.SIMO,
+            cases =
+                    @ToolIOCase(
+                            when = @ToolIOWhen(param = "singleOrMultiple", matches = "single"),
+                            produces = ToolFormat.IMAGE,
+                            arity = ToolArity.SISO))
     @Operation(
             summary = "Convert PDF to image(s)",
             description =
                     "This endpoint converts a PDF file to image(s) with the specified image format,"
                             + " color type, and DPI. Users can choose to get a single image or multiple"
-                            + " images.  Input:PDF Output:Image Type:SI-Conditional")
+                            + " images.")
     public ResponseEntity<?> convertToImage(@ModelAttribute ConvertToImageRequest request)
             throws Exception {
         MultipartFile file = request.getFileInput();
@@ -248,12 +261,13 @@ public class ConvertImgPDFController {
             value = "/img/pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(accepts = ToolFormat.IMAGE, produces = ToolFormat.PDF, arity = ToolArity.MISO)
     @Operation(
             summary = "Convert images to a PDF file",
             description =
                     "This endpoint converts one or more images to a PDF file. Users can specify"
                             + " whether to stretch the images to fit the PDF page, and whether to"
-                            + " automatically rotate the images. Input:Image Output:PDF Type:MISO")
+                            + " automatically rotate the images.")
     public ResponseEntity<byte[]> convertToPdf(@ModelAttribute ConvertToPdfRequest request)
             throws IOException {
         MultipartFile[] file = request.getFileInput();
@@ -279,11 +293,10 @@ public class ConvertImgPDFController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/cbz/pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(accepts = ToolFormat.CBZ, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert CBZ comic book archive to PDF",
-            description =
-                    "This endpoint converts a CBZ (ZIP) comic book archive to a PDF file. "
-                            + "Input:CBZ Output:PDF Type:SISO")
+            description = "This endpoint converts a CBZ (ZIP) comic book archive to a PDF file.")
     public ResponseEntity<Resource> convertCbzToPdf(@ModelAttribute ConvertCbzToPdfRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
@@ -308,11 +321,10 @@ public class ConvertImgPDFController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/cbz",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.CBZ)
     @Operation(
             summary = "Convert PDF to CBZ comic book archive",
-            description =
-                    "This endpoint converts a PDF file to a CBZ (ZIP) comic book archive. "
-                            + "Input:PDF Output:CBZ Type:SISO")
+            description = "This endpoint converts a PDF file to a CBZ (ZIP) comic book archive.")
     public ResponseEntity<Resource> convertPdfToCbz(@ModelAttribute ConvertPdfToCbzRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
@@ -334,11 +346,10 @@ public class ConvertImgPDFController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/cbr/pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(accepts = ToolFormat.CBR, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert CBR comic book archive to PDF",
-            description =
-                    "This endpoint converts a CBR (RAR) comic book archive to a PDF file. "
-                            + "Input:CBR Output:PDF Type:SISO")
+            description = "This endpoint converts a CBR (RAR) comic book archive to a PDF file.")
     public ResponseEntity<?> convertCbrToPdf(@ModelAttribute ConvertCbrToPdfRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
@@ -363,11 +374,12 @@ public class ConvertImgPDFController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/cbr",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.CBR)
     @Operation(
             summary = "Convert PDF to CBR comic book archive",
             description =
-                    "This endpoint converts a PDF file to a CBR comic book archive using the local RAR CLI. "
-                            + "Input:PDF Output:CBR Type:SISO")
+                    "This endpoint converts a PDF file to a CBR comic book archive using the local"
+                            + " RAR CLI.")
     public ResponseEntity<?> convertPdfToCbr(@ModelAttribute ConvertPdfToCbrRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertMarkdownToPdf.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertMarkdownToPdf.java
index e47f3322ea..c9c95d6ef2 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertMarkdownToPdf.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertMarkdownToPdf.java
@@ -28,6 +28,8 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.GeneralFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.*;
 
@@ -47,11 +49,15 @@ public class ConvertMarkdownToPdf {
             value = "/markdown/pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    // A ZIP of Markdown plus its images is a first-class input here, not just a bare .md file.
+    @ToolIO(
+            accepts = {ToolFormat.MARKDOWN, ToolFormat.ZIP},
+            produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert a Markdown file to PDF",
             description =
-                    "This endpoint takes a Markdown file or ZIP (containing Markdown + images) input, converts it to HTML, and then to"
-                            + " PDF format. Input:MARKDOWN Output:PDF Type:SISO")
+                    "This endpoint takes a Markdown file or ZIP (containing Markdown + images)"
+                            + " input, converts it to HTML, and then to PDF format.")
     public ResponseEntity<Resource> markdownToPdf(@ModelAttribute GeneralFile generalFile)
             throws Exception {
         MultipartFile fileInput = generalFile.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertOfficeController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertOfficeController.java
index 4fc6669bc7..97552000f2 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertOfficeController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertOfficeController.java
@@ -31,6 +31,8 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.GeneralFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.CustomHtmlSanitizer;
 import stirling.software.common.util.ExceptionUtils;
@@ -209,11 +211,10 @@ public class ConvertOfficeController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/file/pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(accepts = ToolFormat.ANY, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert a file to a PDF using LibreOffice",
-            description =
-                    "This endpoint converts a given file to a PDF using LibreOffice API  Input:ANY"
-                            + " Output:PDF Type:SISO")
+            description = "This endpoint converts a given file to a PDF using LibreOffice API")
     public ResponseEntity<Resource> processFileToPDF(@ModelAttribute GeneralFile generalFile)
             throws Exception {
         MultipartFile inputFile = generalFile.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToEpubController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToEpubController.java
index 7b2de8d11b..c95c2b932f 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToEpubController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToEpubController.java
@@ -28,6 +28,8 @@ import stirling.software.SPDF.model.api.converters.ConvertPdfToEpubRequest.Targe
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.ProcessExecutor;
 import stirling.software.common.util.ProcessExecutor.ProcessExecutorResult;
@@ -86,11 +88,10 @@ public class ConvertPDFToEpubController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/epub",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.EBOOK)
     @Operation(
             summary = "Convert PDF to EPUB/AZW3",
-            description =
-                    "Convert a PDF file to a high-quality EPUB or AZW3 ebook using Calibre. Input:PDF"
-                            + " Output:EPUB/AZW3 Type:SISO")
+            description = "Convert a PDF file to a high-quality EPUB or AZW3 ebook using Calibre.")
     public ResponseEntity<Resource> convertPdfToEpub(
             @ModelAttribute ConvertPdfToEpubRequest request) throws Exception {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToExcelController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToExcelController.java
index 59e21138e6..f747ce7447 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToExcelController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToExcelController.java
@@ -26,6 +26,8 @@ import stirling.software.SPDF.model.api.PDFWithPageNums;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFile;
@@ -50,11 +52,12 @@ public class ConvertPDFToExcelController {
             value = "/pdf/xlsx",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.EXCEL)
     @Operation(
             summary = "Convert a PDF to an Excel spreadsheet (XLSX)",
             description =
                     "Extracts tabular data from each page of a PDF and writes it into an Excel"
-                            + " workbook, one sheet per table. Input:PDF Output:XLSX Type:SISO")
+                            + " workbook, one sheet per table.")
     public ResponseEntity<Resource> pdfToExcel(@ModelAttribute PDFWithPageNums request)
             throws Exception {
         String baseName =
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToHtml.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToHtml.java
index 20253a3a00..8f9819c0e4 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToHtml.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToHtml.java
@@ -15,6 +15,8 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.util.PDFToFile;
 import stirling.software.common.util.TempFileManager;
 
@@ -29,10 +31,10 @@ public class ConvertPDFToHtml {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/html",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.ZIP)
     @Operation(
             summary = "Convert PDF to HTML",
-            description =
-                    "This endpoint converts a PDF file to HTML format. Input:PDF Output:HTML Type:SISO")
+            description = "This endpoint converts a PDF file to HTML format.")
     public ResponseEntity<Resource> processPdfToHTML(@ModelAttribute PDFFile file)
             throws Exception {
         MultipartFile inputFile = file.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToOffice.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToOffice.java
index 0fd7dee9a7..fd6218de0d 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToOffice.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToOffice.java
@@ -24,6 +24,11 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.PDFToFile;
@@ -43,11 +48,10 @@ public class ConvertPDFToOffice {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/presentation",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.PPT)
     @Operation(
             summary = "Convert PDF to Presentation format",
-            description =
-                    "This endpoint converts a given PDF file to a Presentation format. Input:PDF"
-                            + " Output:PPT Type:SISO")
+            description = "This endpoint converts a given PDF file to a Presentation format.")
     public ResponseEntity<Resource> processPdfToPresentation(
             @ModelAttribute PdfToPresentationRequest request)
             throws IOException, InterruptedException {
@@ -61,11 +65,16 @@ public class ConvertPDFToOffice {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/text",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(
+            produces = ToolFormat.TEXT,
+            cases =
+                    @ToolIOCase(
+                            when = @ToolIOWhen(param = "outputFormat", matches = "rtf"),
+                            produces = ToolFormat.WORD,
+                            arity = ToolArity.SISO))
     @Operation(
             summary = "Convert PDF to Text or RTF format",
-            description =
-                    "This endpoint converts a given PDF file to Text or RTF format. Input:PDF"
-                            + " Output:TXT Type:SISO")
+            description = "This endpoint converts a given PDF file to Text or RTF format.")
     public ResponseEntity<Resource> processPdfToRTForTXT(
             @ModelAttribute PdfToTextOrRTFRequest request)
             throws IOException, InterruptedException {
@@ -94,11 +103,10 @@ public class ConvertPDFToOffice {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/word",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.WORD)
     @Operation(
             summary = "Convert PDF to Word document",
-            description =
-                    "This endpoint converts a given PDF file to a Word document format. Input:PDF"
-                            + " Output:WORD Type:SISO")
+            description = "This endpoint converts a given PDF file to a Word document format.")
     public ResponseEntity<Resource> processPdfToWord(@ModelAttribute PdfToWordRequest request)
             throws IOException, InterruptedException {
         MultipartFile inputFile = request.getFileInput();
@@ -111,11 +119,10 @@ public class ConvertPDFToOffice {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/xml",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.XML)
     @Operation(
             summary = "Convert PDF to XML",
-            description =
-                    "This endpoint converts a PDF file to an XML file. Input:PDF Output:XML"
-                            + " Type:SISO")
+            description = "This endpoint converts a PDF file to an XML file.")
     public ResponseEntity<Resource> processPdfToXML(@ModelAttribute PDFFile file) throws Exception {
         MultipartFile inputFile = file.getFileInput();
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java
index a58d466d7a..49bf4e4895 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java
@@ -91,6 +91,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.ProcessExecutor;
 import stirling.software.common.util.ProcessExecutor.ProcessExecutorResult;
@@ -577,10 +579,13 @@ public class ConvertPDFToPDFA {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/pdfa",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert a PDF to a PDF/A or PDF/X",
             description =
-                    "This endpoint converts a PDF file to a PDF/A or PDF/X file using Ghostscript (preferred) or PDFBox/LibreOffice (fallback). PDF/A is a format designed for long-term archiving, while PDF/X is optimized for print production. Input:PDF Output:PDF Type:SISO")
+                    "This endpoint converts a PDF file to a PDF/A or PDF/X file using Ghostscript"
+                            + " (preferred) or PDFBox/LibreOffice (fallback). PDF/A is a format designed for"
+                            + " long-term archiving, while PDF/X is optimized for print production.")
     public ResponseEntity<Resource> pdfToPdfA(@ModelAttribute PdfToPdfARequest request)
             throws Exception {
         MultipartFile inputFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfJsonController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfJsonController.java
index ccac814ef7..6aeb033761 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfJsonController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfJsonController.java
@@ -62,7 +62,7 @@ public class ConvertPdfJsonController {
     @Operation(
             summary = "Convert PDF to Text Editor Format",
             description =
-                    "Extracts PDF text, fonts, and metadata into an editable JSON structure for the text editor tool. Input:PDF Output:JSON Type:SISO")
+                    "Extracts PDF text, fonts, and metadata into an editable JSON structure for the text editor tool.")
     public ResponseEntity<Resource> convertPdfToJson(
             @ModelAttribute PDFFile request,
             @RequestParam(value = "lightweight", defaultValue = "false") boolean lightweight)
@@ -104,7 +104,7 @@ public class ConvertPdfJsonController {
     @Operation(
             summary = "Convert Text Editor Format to PDF",
             description =
-                    "Rebuilds a PDF from the editable JSON structure generated by the text editor tool. Input:JSON Output:PDF Type:SISO")
+                    "Rebuilds a PDF from the editable JSON structure generated by the text editor tool.")
     public ResponseEntity<Resource> convertJsonToPdf(@ModelAttribute GeneralFile request)
             throws Exception {
         MultipartFile jsonFile = request.getFileInput();
@@ -139,7 +139,7 @@ public class ConvertPdfJsonController {
             description =
                     "Extracts document metadata, fonts, and page dimensions for the text editor tool. Caches the document for"
                             + " subsequent page requests. Returns a server-generated jobId scoped to the"
-                            + " authenticated user. Input:PDF Output:JSON Type:SISO")
+                            + " authenticated user.")
     public ResponseEntity<Resource> extractPdfMetadata(@ModelAttribute PDFFile request)
             throws Exception {
         MultipartFile inputFile = request.getFileInput();
@@ -226,7 +226,7 @@ public class ConvertPdfJsonController {
             description =
                     "Retrieves a single page's content from a previously cached PDF document for the text editor tool."
                             + " Requires prior call to /pdf/text-editor/metadata. The jobId must belong to the"
-                            + " authenticated user. Output:JSON")
+                            + " authenticated user.")
     public ResponseEntity<Resource> extractSinglePage(
             @PathVariable String jobId, @PathVariable int pageNumber) throws Exception {
 
@@ -255,7 +255,7 @@ public class ConvertPdfJsonController {
             description =
                     "Retrieves the font payloads used by a single page from a previously cached PDF document."
                             + " Requires prior call to /pdf/text-editor/metadata. The jobId must belong to the"
-                            + " authenticated user. Output:JSON")
+                            + " authenticated user.")
     public ResponseEntity<Resource> extractPageFonts(
             @PathVariable String jobId, @PathVariable int pageNumber) throws Exception {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfToVideoController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfToVideoController.java
index 8f5d2a4817..df5a91ad67 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfToVideoController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPdfToVideoController.java
@@ -56,8 +56,7 @@ public class ConvertPdfToVideoController {
     @Operation(
             summary = "Convert PDF to Video Slideshow",
             description =
-                    "This endpoint converts a PDF document into a slideshow-style video."
-                            + " Input:PDF Output:Video Type:SISO")
+                    "This endpoint converts a PDF document into a slideshow-style video.")
     public ResponseEntity<byte[]> convertPdfToVideo(@ModelAttribute PdfToVideoRequest request)
             throws Exception {
         if (!CheckProgramInstall.isFfmpegAvailable()) {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertSvgToPDF.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertSvgToPDF.java
index 314dd28271..94a9ed44f2 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertSvgToPDF.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertSvgToPDF.java
@@ -29,6 +29,11 @@ import stirling.software.SPDF.utils.SvgToPdf;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.SvgSanitizer;
@@ -50,15 +55,23 @@ public class ConvertSvgToPDF {
             value = "/svg/pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(
+            accepts = ToolFormat.IMAGE,
+            produces = ToolFormat.PDF,
+            arity = ToolArity.MIMO,
+            cases =
+                    @ToolIOCase(
+                            when = @ToolIOWhen(param = "combineIntoSinglePdf", matches = "true"),
+                            produces = ToolFormat.PDF,
+                            arity = ToolArity.MISO))
     @Operation(
             summary = "Convert SVG to PDF",
             description =
-                    "This endpoint converts one or more SVG (Scalable Vector Graphics) files to PDF format. "
-                            + "Each SVG is converted to a separate PDF file. "
-                            + "The conversion preserves vector graphics for crisp output at any resolution - no rasterization occurs. "
-                            + "SVG dimensions (width/height) determine the PDF page size; defaults to A4 if not specified. "
-                            + "SVG content is sanitized to prevent XSS attacks. "
-                            + "Input: SVG file(s), Output: PDF file(s) or ZIP. Type: MIMO")
+                    "This endpoint converts one or more SVG (Scalable Vector Graphics) files to PDF"
+                            + " format. Each SVG is converted to a separate PDF file. The conversion preserves"
+                            + " vector graphics for crisp output at any resolution - no rasterization occurs."
+                            + " SVG dimensions (width/height) determine the PDF page size; defaults to A4 if"
+                            + " not specified. SVG content is sanitized to prevent XSS attacks.")
     public ResponseEntity<Resource> convertSvgToPdf(@ModelAttribute SvgToPdfRequest request) {
 
         MultipartFile[] inputFiles = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertWebsiteToPDF.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertWebsiteToPDF.java
index c07525f06c..1902dcf053 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertWebsiteToPDF.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertWebsiteToPDF.java
@@ -34,6 +34,8 @@ import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -62,11 +64,11 @@ public class ConvertWebsiteToPDF {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/url/pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(accepts = ToolFormat.NONE, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert a URL to a PDF",
             description =
-                    "This endpoint fetches content from a URL and converts it to a PDF format."
-                            + " Input:N/A Output:PDF Type:SISO")
+                    "This endpoint fetches content from a URL and converts it to a PDF format.")
     public ResponseEntity<?> urlToPdf(@ModelAttribute UrlToPdfRequest request)
             throws IOException, InterruptedException {
         String URL = request.getUrlInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ExtractCSVController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ExtractCSVController.java
index 48ab474d42..1141d503aa 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ExtractCSVController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ExtractCSVController.java
@@ -31,6 +31,9 @@ import stirling.software.SPDF.pdf.parser.TabulaTableParser;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.WebResponseUtils;
@@ -48,11 +51,11 @@ public class ExtractCSVController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @CsvConversionResponse
+    @ToolIO(produces = ToolFormat.CSV, arity = ToolArity.SIMO)
     @Operation(
             summary = "Extracts a CSV document from a PDF",
             description =
-                    "This operation takes an input PDF file and returns CSV file of whole page."
-                            + " Input:PDF Output:CSV Type:SISO")
+                    "This operation takes an input PDF file and returns CSV file of whole page.")
     public ResponseEntity<?> pdfToCsv(@ModelAttribute PDFWithPageNums request) throws Exception {
         String baseName = getBaseName(request.getFileInput().getOriginalFilename());
         List<CsvEntry> csvEntries = new ArrayList<>();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/PdfVectorExportController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/PdfVectorExportController.java
index 0dbddc5e07..6b6a6a0bf0 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/PdfVectorExportController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/PdfVectorExportController.java
@@ -27,6 +27,11 @@ import stirling.software.SPDF.model.api.converters.PdfVectorExportRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.ProcessExecutor;
@@ -50,11 +55,11 @@ public class PdfVectorExportController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/vector/pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(accepts = ToolFormat.POSTSCRIPT, produces = ToolFormat.PDF)
     @Operation(
             summary = "Convert PostScript formats to PDF",
             description =
-                    "Converts PostScript vector inputs (PS, EPS, EPSF) to PDF using Ghostscript."
-                            + " Input:PS/EPS Output:PDF Type:SISO")
+                    "Converts PostScript vector inputs (PS, EPS, EPSF) to PDF using Ghostscript.")
     public ResponseEntity<Resource> convertGhostscriptInputsToPdf(
             @Valid @ModelAttribute PdfVectorExportRequest request) throws Exception {
 
@@ -100,11 +105,26 @@ public class PdfVectorExportController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/pdf/vector",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    // One case per non-default value of outputFormat; the base covers the default, eps.
+    @ToolIO(
+            produces = ToolFormat.IMAGE,
+            cases = {
+                @ToolIOCase(
+                        when = @ToolIOWhen(param = "outputFormat", matches = "ps"),
+                        produces = ToolFormat.POSTSCRIPT,
+                        arity = ToolArity.SISO),
+                @ToolIOCase(
+                        when = @ToolIOWhen(param = "outputFormat", matches = "pcl"),
+                        produces = ToolFormat.PCL,
+                        arity = ToolArity.SISO),
+                @ToolIOCase(
+                        when = @ToolIOWhen(param = "outputFormat", matches = "xps"),
+                        produces = ToolFormat.XPS,
+                        arity = ToolArity.SISO)
+            })
     @Operation(
             summary = "Convert PDF to vector format",
-            description =
-                    "Converts PDF to Ghostscript vector formats (EPS, PS, PCL, or XPS)."
-                            + " Input:PDF Output:VECTOR Type:SISO")
+            description = "Converts PDF to Ghostscript vector formats (EPS, PS, PCL, or XPS).")
     public ResponseEntity<Resource> convertPdfToVector(
             @Valid @ModelAttribute PdfVectorExportRequest request) throws Exception {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/filters/FilterController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/filters/FilterController.java
index 7563a09a92..9cd4bbaf1f 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/filters/FilterController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/filters/FilterController.java
@@ -28,6 +28,8 @@ import stirling.software.SPDF.model.api.filter.PageSizeRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.FilterApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.PdfUtils;
@@ -45,9 +47,8 @@ public class FilterController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/filter-contains-text",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
-    @Operation(
-            summary = "Checks if a PDF contains set text, returns true if does",
-            description = "Input:PDF Output:Boolean Type:SISO")
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(summary = "Checks if a PDF contains set text, returns true if does")
     @ApiResponses({
         @ApiResponse(
                 responseCode = "200",
@@ -79,9 +80,8 @@ public class FilterController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/filter-contains-image",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
-    @Operation(
-            summary = "Checks if a PDF contains an image",
-            description = "Input:PDF Output:Boolean Type:SISO")
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(summary = "Checks if a PDF contains an image")
     @ApiResponses({
         @ApiResponse(
                 responseCode = "200",
@@ -112,9 +112,8 @@ public class FilterController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/filter-page-count",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
-    @Operation(
-            summary = "Checks if a PDF is greater, less or equal to a setPageCount",
-            description = "Input:PDF Output:Boolean Type:SISO")
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(summary = "Checks if a PDF is greater, less or equal to a setPageCount")
     @ApiResponses({
         @ApiResponse(
                 responseCode = "200",
@@ -146,9 +145,8 @@ public class FilterController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/filter-page-size",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
-    @Operation(
-            summary = "Checks if a PDF is of a certain size",
-            description = "Input:PDF Output:Boolean Type:SISO")
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(summary = "Checks if a PDF is of a certain size")
     @ApiResponses({
         @ApiResponse(
                 responseCode = "200",
@@ -186,9 +184,8 @@ public class FilterController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/filter-file-size",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
-    @Operation(
-            summary = "Checks if a PDF is a set file size",
-            description = "Input:PDF Output:Boolean Type:SISO")
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(summary = "Checks if a PDF is a set file size")
     @ApiResponses({
         @ApiResponse(
                 responseCode = "200",
@@ -217,9 +214,8 @@ public class FilterController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/filter-page-rotation",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
-    @Operation(
-            summary = "Checks if a PDF is of a certain rotation",
-            description = "Input:PDF Output:Boolean Type:SISO")
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(summary = "Checks if a PDF is of a certain rotation")
     @ApiResponses({
         @ApiResponse(
                 responseCode = "200",
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AddCommentsController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AddCommentsController.java
index 4e322b591d..dc2dd22863 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AddCommentsController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AddCommentsController.java
@@ -26,6 +26,8 @@ import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.comments.AnnotationLocation;
 import stirling.software.common.model.api.comments.StickyNoteSpec;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.service.PdfAnnotationService;
 import stirling.software.common.util.GeneralUtils;
@@ -72,14 +74,14 @@ public class AddCommentsController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Add sticky-note comments to a PDF at specified positions or anchored text",
             description =
-                    "Attaches PDF Text (sticky-note) annotations to the document."
-                            + " Each CommentSpec can either supply absolute coordinates or an"
-                            + " `anchorText` hint; when provided, the tool locates the first matching"
-                            + " line on the target page and anchors the icon there (falling back to"
-                            + " the coordinates if no match). Input:PDF Output:PDF Type:SISO")
+                    "Attaches PDF Text (sticky-note) annotations to the document. Each CommentSpec"
+                            + " can either supply absolute coordinates or an `anchorText` hint; when provided,"
+                            + " the tool locates the first matching line on the target page and anchors the"
+                            + " icon there (falling back to the coordinates if no match).")
     public ResponseEntity<Resource> addComments(@ModelAttribute AddCommentsRequest request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AttachmentController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AttachmentController.java
index 0e272678c4..a6a3dd8c56 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AttachmentController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AttachmentController.java
@@ -29,6 +29,8 @@ import stirling.software.SPDF.service.AttachmentServiceInterface;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -54,10 +56,10 @@ public class AttachmentController {
             value = "/add-attachments",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Add attachments to PDF",
-            description =
-                    "This endpoint adds attachments to a PDF. Input:PDF, Output:PDF Type:MISO")
+            description = "This endpoint adds attachments to a PDF.")
     public ResponseEntity<Resource> addAttachments(@ModelAttribute AddAttachmentRequest request)
             throws Exception {
         MultipartFile fileInput = request.getFileInput();
@@ -143,11 +145,11 @@ public class AttachmentController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/extract-attachments",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.ZIP)
     @Operation(
             summary = "Extract attachments from PDF",
             description =
-                    "This endpoint extracts all embedded attachments from a PDF into a ZIP archive."
-                            + " Input:PDF Output:ZIP Type:SISO")
+                    "This endpoint extracts all embedded attachments from a PDF into a ZIP archive.")
     public ResponseEntity<Resource> extractAttachments(
             @ModelAttribute ExtractAttachmentsRequest request) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(request, true)) {
@@ -181,10 +183,10 @@ public class AttachmentController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/list-attachments",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.JSON)
     @Operation(
             summary = "List attachments in PDF",
-            description =
-                    "This endpoint lists all embedded attachments in a PDF. Input:PDF Output:JSON Type:SISO")
+            description = "This endpoint lists all embedded attachments in a PDF.")
     public ResponseEntity<List<stirling.software.SPDF.model.api.misc.AttachmentInfo>>
             listAttachments(@ModelAttribute ListAttachmentsRequest request) throws IOException {
         try (PDDocument document = pdfDocumentFactory.load(request, true)) {
@@ -200,10 +202,10 @@ public class AttachmentController {
             value = "/rename-attachment",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Rename attachment in PDF",
-            description =
-                    "This endpoint renames an embedded attachment in a PDF. Input:PDF Output:PDF Type:MISO")
+            description = "This endpoint renames an embedded attachment in a PDF.")
     public ResponseEntity<Resource> renameAttachment(
             @ModelAttribute RenameAttachmentRequest request) throws Exception {
         MultipartFile fileInput = request.getFileInput();
@@ -236,10 +238,10 @@ public class AttachmentController {
             value = "/delete-attachment",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Delete attachment from PDF",
-            description =
-                    "This endpoint deletes an embedded attachment from a PDF. Input:PDF Output:PDF Type:MISO")
+            description = "This endpoint deletes an embedded attachment from a PDF.")
     public ResponseEntity<Resource> deleteAttachment(
             @ModelAttribute DeleteAttachmentRequest request) throws Exception {
         MultipartFile fileInput = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRenameController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRenameController.java
index 405e45d9f2..60333191d3 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRenameController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRenameController.java
@@ -24,6 +24,8 @@ import stirling.software.SPDF.model.api.misc.ExtractHeaderRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.RegexPatternUtils;
 import stirling.software.common.util.TempFileManager;
@@ -44,11 +46,12 @@ public class AutoRenameController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/auto-rename",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Extract header from PDF file",
             description =
                     "This endpoint accepts a PDF file and attempts to extract its title or header"
-                            + " based on heuristics. Input:PDF Output:PDF Type:SISO")
+                            + " based on heuristics.")
     public ResponseEntity<Resource> extractHeader(@ModelAttribute ExtractHeaderRequest request)
             throws Exception {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java
index 21a5885c7d..85d60b02be 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoRotateController.java
@@ -43,6 +43,11 @@ import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -76,6 +81,13 @@ public class AutoRotateController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/auto-rotate-pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(
+            produces = ToolFormat.PDF,
+            cases =
+                    @ToolIOCase(
+                            when = @ToolIOWhen(param = "dryRun", matches = "true"),
+                            produces = ToolFormat.JSON,
+                            arity = ToolArity.SISO))
     @Operation(
             summary = "Detect and fix the orientation of every page",
             description =
@@ -83,8 +95,7 @@ public class AutoRotateController {
                             + " for scanned pages) and sets the page rotation so the content"
                             + " displays upright. With dryRun=true, returns a JSON per-page report"
                             + " instead of the PDF. With pageRotations set, applies the given"
-                            + " corrections without running detection."
-                            + " Input:PDF Output:PDF Type:SISO")
+                            + " corrections without running detection.")
     public ResponseEntity<?> autoRotatePdf(@Valid @ModelAttribute AutoRotatePdfRequest request)
             throws IOException, InterruptedException {
         String mode =
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoSplitPdfController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoSplitPdfController.java
index ad5776b3cd..39ba6e54f5 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoSplitPdfController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/AutoSplitPdfController.java
@@ -41,6 +41,9 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -274,13 +277,13 @@ public class AutoSplitPdfController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Auto split PDF pages into separate documents",
             description =
                     "This endpoint accepts a PDF file, scans each page for a specific QR code, and"
-                            + " splits the document at the QR code boundaries. The output is a zip"
-                            + " file containing each separate PDF document. Input:PDF Output:ZIP-PDF"
-                            + " Type:SISO")
+                            + " splits the document at the QR code boundaries. The output is a zip file"
+                            + " containing each separate PDF document.")
     public ResponseEntity<Resource> autoSplitPdf(@ModelAttribute AutoSplitPdfRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/BlankPageController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/BlankPageController.java
index 9b702e9c58..8105f309bc 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/BlankPageController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/BlankPageController.java
@@ -33,6 +33,9 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ApplicationContextProvider;
 import stirling.software.common.util.ExceptionUtils;
@@ -86,12 +89,12 @@ public class BlankPageController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/remove-blanks",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF, arity = ToolArity.SIMO)
     @Operation(
             summary = "Remove blank pages from a PDF file",
             description =
                     "This endpoint removes blank pages from a given PDF file. Users can specify the"
-                            + " threshold and white percentage to tune the detection of blank pages."
-                            + " Input:PDF Output:PDF Type:SISO")
+                            + " threshold and white percentage to tune the detection of blank pages.")
     public ResponseEntity<Resource> removeBlankPages(
             @ModelAttribute RemoveBlankPagesRequest request)
             throws IOException, InterruptedException {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/CompressController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/CompressController.java
index 8bae8adbf5..fcbfcea62e 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/CompressController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/CompressController.java
@@ -50,6 +50,8 @@ import stirling.software.SPDF.model.api.misc.OptimizePdfRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.service.LineArtConversionService;
 import stirling.software.common.util.ExceptionUtils;
@@ -927,11 +929,12 @@ public class CompressController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/compress-pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Optimize PDF file",
             description =
                     "This endpoint accepts a PDF file and optimizes it based on the provided"
-                            + " parameters. Input:PDF Output:PDF Type:SISO")
+                            + " parameters.")
     public ResponseEntity<Resource> optimizePdf(@ModelAttribute OptimizePdfRequest request)
             throws Exception {
         MultipartFile inputFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/DecompressPdfController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/DecompressPdfController.java
index a867937c38..2f475faa9a 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/DecompressPdfController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/DecompressPdfController.java
@@ -24,6 +24,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -43,6 +45,7 @@ public class DecompressPdfController {
             value = "/decompress-pdf",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Decompress PDF streams",
             description = "Fully decompresses all PDF streams including text content")
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImageScansController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImageScansController.java
index 2284abfbf6..daa8f35121 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImageScansController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImageScansController.java
@@ -34,6 +34,9 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ApplicationContextProvider;
 import stirling.software.common.util.CheckProgramInstall;
@@ -60,13 +63,13 @@ public class ExtractImageScansController {
             value = "/extract-image-scans",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.IMAGE, arity = ToolArity.SIMO)
     @Operation(
             summary = "Extract image scans from an input file",
             description =
                     "This endpoint extracts image scans from a given file based on certain"
                             + " parameters. Users can specify angle threshold, tolerance, minimum area,"
-                            + " minimum contour area, and border size. Input:PDF Output:IMAGE/ZIP"
-                            + " Type:SIMO")
+                            + " minimum contour area, and border size.")
     public ResponseEntity<Resource> extractImageScans(
             @ModelAttribute ExtractImageScansRequest request)
             throws IOException, InterruptedException {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImagesController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImagesController.java
index 8faf93ec2d..3dfe1d6ba2 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImagesController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ExtractImagesController.java
@@ -35,6 +35,9 @@ import stirling.software.SPDF.model.api.PDFExtractImagesRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -55,12 +58,12 @@ public class ExtractImagesController {
             value = "/extract-images",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MultiFileResponse
+    @ToolIO(produces = ToolFormat.IMAGE, arity = ToolArity.SIMO)
     @Operation(
             summary = "Extract images from a PDF file",
             description =
                     "This endpoint extracts images from a given PDF file and returns them in a zip"
-                            + " file. Users can specify the output image format. Input:PDF"
-                            + " Output:IMAGE/ZIP Type:SIMO")
+                            + " file. Users can specify the output image format.")
     public ResponseEntity<Resource> extractImages(@ModelAttribute PDFExtractImagesRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/FlattenController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/FlattenController.java
index 21ca7b2d51..9bbbeffccb 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/FlattenController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/FlattenController.java
@@ -29,6 +29,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ApplicationContextProvider;
 import stirling.software.common.util.ExceptionUtils;
@@ -48,11 +50,12 @@ public class FlattenController {
             value = "/flatten",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Flatten PDF form fields or full page",
             description =
                     "Flattening just PDF form fields or converting each page to images to make text"
-                            + " unselectable. Input:PDF, Output:PDF. Type:SISO")
+                            + " unselectable.")
     public ResponseEntity<Resource> flatten(@ModelAttribute FlattenRequest request)
             throws Exception {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/MetadataController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/MetadataController.java
index ca68547003..b51bfdc3fb 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/MetadataController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/MetadataController.java
@@ -26,6 +26,8 @@ import stirling.software.SPDF.model.api.misc.MetadataRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.service.PdfMetadataService;
 import stirling.software.common.util.GeneralUtils;
@@ -62,12 +64,12 @@ public class MetadataController {
             value = "/update-metadata",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Update metadata of a PDF file",
             description =
                     "This endpoint allows you to update the metadata of a given PDF file. You can"
-                            + " add, modify, or delete standard and custom metadata fields. Input:PDF"
-                            + " Output:PDF Type:SISO")
+                            + " add, modify, or delete standard and custom metadata fields.")
     public ResponseEntity<Resource> metadata(@ModelAttribute MetadataRequest request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OCRController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OCRController.java
index 4660d5f128..4803184a33 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OCRController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OCRController.java
@@ -41,6 +41,11 @@ import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -88,13 +93,20 @@ public class OCRController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/ocr-pdf",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(
+            produces = ToolFormat.PDF,
+            cases =
+                    @ToolIOCase(
+                            when = @ToolIOWhen(param = "sidecar", matches = "true"),
+                            produces = ToolFormat.ZIP,
+                            arity = ToolArity.SISO))
     @Operation(
             summary = "Process a PDF file with OCR",
             description =
-                    "This endpoint processes a PDF file using OCR (Optical Character Recognition). Users can"
-                            + " specify languages, sidecar, deskew, clean, cleanFinal, ocrType, ocrRenderType,"
-                            + " and removeImagesAfter options. Uses OCRmyPDF if available, falls back to"
-                            + " Tesseract. Input:PDF Output:PDF Type:SI-Conditional")
+                    "This endpoint processes a PDF file using OCR (Optical Character Recognition)."
+                            + " Users can specify languages, sidecar, deskew, clean, cleanFinal, ocrType,"
+                            + " ocrRenderType, and removeImagesAfter options. Uses OCRmyPDF if available,"
+                            + " falls back to Tesseract.")
     public ResponseEntity<Resource> processPdfWithOCR(
             @ModelAttribute ProcessPdfWithOcrRequest request)
             throws IOException, InterruptedException {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OverlayImageController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OverlayImageController.java
index 557c77c76e..4f7c335a23 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OverlayImageController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/OverlayImageController.java
@@ -23,6 +23,8 @@ import stirling.software.SPDF.utils.SvgOverlayUtil;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.SvgSanitizer;
@@ -43,14 +45,14 @@ public class OverlayImageController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/add-image",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Overlay image onto a PDF file",
             description =
-                    "This endpoint overlays an image onto a PDF file at the specified coordinates. "
-                            + "Supports both raster formats (PNG, JPEG, etc.) and vector format (SVG). "
-                            + "SVG files are rendered as vector graphics for crisp output at any resolution. "
-                            + "The image can be overlaid on every page of the PDF if specified. "
-                            + "Input:PDF/IMAGE/SVG Output:PDF Type:SISO")
+                    "This endpoint overlays an image onto a PDF file at the specified coordinates."
+                            + " Supports both raster formats (PNG, JPEG, etc.) and vector format (SVG). SVG"
+                            + " files are rendered as vector graphics for crisp output at any resolution. The"
+                            + " image can be overlaid on every page of the PDF if specified.")
     public ResponseEntity<Resource> overlayImage(@ModelAttribute OverlayImageRequest request) {
         MultipartFile pdfFile = request.getFileInput();
         MultipartFile imageFile = request.getImageFile();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PageNumbersController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PageNumbersController.java
index e000d9ff3a..bcced01ba9 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PageNumbersController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PageNumbersController.java
@@ -27,6 +27,8 @@ import stirling.software.SPDF.model.api.misc.AddPageNumbersRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFile;
@@ -45,11 +47,10 @@ public class PageNumbersController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Add page numbers to a PDF document",
-            description =
-                    "This operation takes an input PDF file and adds page numbers to it. Input:PDF"
-                            + " Output:PDF Type:SISO")
+            description = "This operation takes an input PDF file and adds page numbers to it.")
     public ResponseEntity<Resource> addPageNumbers(@ModelAttribute AddPageNumbersRequest request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PrintFileController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PrintFileController.java
index e369bbf102..82184b68ba 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PrintFileController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/PrintFileController.java
@@ -46,8 +46,8 @@ public class PrintFileController {
     // @Operation(
     //        summary = "Prints PDF/Image file to a set printer",
     //        description =
-    //                "Input of PDF or Image along with a printer name/URL/IP to match against to
-    // send it to (Fire and forget) Input:Any Output:N/A Type:SISO")
+    //                "Input of PDF or Image along with a printer name/URL/IP to match against
+    // to send it to (Fire and forget)")
     public ResponseEntity<String> printFile(@ModelAttribute PrintFileRequest request)
             throws IOException {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RemoveImagesController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RemoveImagesController.java
index ce4ca94239..44703af863 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RemoveImagesController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RemoveImagesController.java
@@ -27,6 +27,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.GeneralApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -46,11 +48,12 @@ public class RemoveImagesController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/remove-image-pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Remove images from PDF",
             description =
                     "This endpoint removes all embedded images from a PDF file and returns the"
-                            + " modified document. Input:PDF Output:PDF Type:SISO")
+                            + " modified document.")
     public ResponseEntity<Resource> removeImages(@ModelAttribute PDFFile request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RepairController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RepairController.java
index 076e977b4c..7c74c85d09 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RepairController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/RepairController.java
@@ -21,6 +21,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -52,12 +54,13 @@ public class RepairController {
             value = "/repair",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Repair a PDF file",
             description =
-                    "This endpoint repairs a given PDF file by running Ghostscript (primary), qpdf (fallback), or PDFBox (if no external tools available). The PDF is"
-                            + " first saved to a temporary location, repaired, read back, and then"
-                            + " returned as a response. Input:PDF Output:PDF Type:SISO")
+                    "This endpoint repairs a given PDF file by running Ghostscript (primary), qpdf"
+                            + " (fallback), or PDFBox (if no external tools available). The PDF is first saved"
+                            + " to a temporary location, repaired, read back, and then returned as a response.")
     public ResponseEntity<Resource> repairPdf(@ModelAttribute PDFFile file)
             throws IOException, InterruptedException {
         MultipartFile inputFile = file.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ReplaceAndInvertColorController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ReplaceAndInvertColorController.java
index 7c5115e361..3a5f0259f5 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ReplaceAndInvertColorController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ReplaceAndInvertColorController.java
@@ -20,6 +20,8 @@ import stirling.software.SPDF.service.misc.ReplaceAndInvertColorService;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
@@ -36,11 +38,13 @@ public class ReplaceAndInvertColorController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/replace-invert-pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Replace-Invert Color PDF",
             description =
-                    "This endpoint accepts a PDF file and provides options to invert all colors, replace"
-                            + " text and background colors, or convert to CMYK color space for printing. Input:PDF Output:PDF Type:SISO")
+                    "This endpoint accepts a PDF file and provides options to invert all colors,"
+                            + " replace text and background colors, or convert to CMYK color space for"
+                            + " printing.")
     public ResponseEntity<Resource> replaceAndInvertColor(
             @ModelAttribute ReplaceAndInvertColorRequest request) throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ScannerEffectController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ScannerEffectController.java
index 445009000f..eb6b74fd58 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ScannerEffectController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ScannerEffectController.java
@@ -48,6 +48,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ApplicationContextProvider;
 import stirling.software.common.util.ExceptionUtils;
@@ -564,10 +566,12 @@ public class ScannerEffectController {
             value = "/scanner-effect",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Apply scanner effect to PDF",
             description =
-                    "Applies various effects to simulate a scanned document, including rotation, noise, and edge softening. Input:PDF Output:PDF Type:SISO")
+                    "Applies various effects to simulate a scanned document, including rotation,"
+                            + " noise, and edge softening.")
     public ResponseEntity<Resource> scannerEffect(
             @Valid @ModelAttribute ScannerEffectRequest request) throws IOException {
         MultipartFile file = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ShowJavascript.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ShowJavascript.java
index 9897100a7d..fcba1ea718 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ShowJavascript.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/ShowJavascript.java
@@ -23,6 +23,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
@@ -40,9 +42,10 @@ public class ShowJavascript {
             value = "/show-javascript",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @JavaScriptResponse
+    @ToolIO(produces = ToolFormat.JAVASCRIPT)
     @Operation(
             summary = "Grabs all JS from a PDF and returns a single JS file with all code",
-            description = "desc. Input:PDF Output:JS Type:SISO")
+            description = "desc.")
     public ResponseEntity<Resource> extractHeader(@ModelAttribute PDFFile file) throws Exception {
         MultipartFile inputFile = file.getFileInput();
         StringBuilder script = new StringBuilder();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/StampController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/StampController.java
index 9b9f0213cd..0cd485d7d1 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/StampController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/StampController.java
@@ -47,6 +47,8 @@ import stirling.software.SPDF.model.api.misc.AddStampRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -91,12 +93,12 @@ public class StampController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/add-stamp",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Add stamp to a PDF file",
             description =
                     "This endpoint adds a stamp to a given PDF file. Users can specify the stamp"
-                            + " type (text or image), rotation, opacity, width spacer, and height"
-                            + " spacer. Input:PDF Output:PDF Type:SISO")
+                            + " type (text or image), rotation, opacity, width spacer, and height spacer.")
     public ResponseEntity<Resource> addStamp(@ModelAttribute AddStampRequest request)
             throws IOException, Exception {
         MultipartFile pdfFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/UnlockPDFFormsController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/UnlockPDFFormsController.java
index 246626b38b..3dcabd43f7 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/UnlockPDFFormsController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/misc/UnlockPDFFormsController.java
@@ -25,6 +25,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.MiscApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.RegexPatternUtils;
@@ -48,11 +50,10 @@ public class UnlockPDFFormsController {
             value = "/unlock-pdf-forms",
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Remove read-only property from form fields",
-            description =
-                    "Removing read-only property from form fields making them fillable"
-                            + "Input:PDF, Output:PDF. Type:SISO")
+            description = "Removing read-only property from form fields making them fillable")
     public ResponseEntity<Resource> unlockPDFForms(@ModelAttribute PDFFile file) {
         try (PDDocument document = pdfDocumentFactory.load(file)) {
             PDAcroForm acroForm = document.getDocumentCatalog().getAcroForm();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineController.java
index 40102fb742..b624434502 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineController.java
@@ -59,8 +59,7 @@ public class PipelineController {
             summary = "Execute automated PDF processing pipeline",
             description =
                     "This endpoint processes multiple PDF files through a configurable pipeline of operations. "
-                            + "Users provide files and a JSON configuration defining the sequence of operations to perform. "
-                            + "Input:PDF Output:PDF/ZIP Type:MIMO")
+                            + "Users provide files and a JSON configuration defining the sequence of operations to perform.")
     public ResponseEntity<Resource> handleData(@ModelAttribute HandleDataRequest request)
             throws DatabindException, JacksonException {
         MultipartFile[] files = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineDirectoryProcessor.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineDirectoryProcessor.java
index 79223ddd38..627b1461f6 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineDirectoryProcessor.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineDirectoryProcessor.java
@@ -35,6 +35,7 @@ import stirling.software.SPDF.model.PipelineResult;
 import stirling.software.SPDF.service.ApiDocService;
 import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.service.PostHogService;
+import stirling.software.common.service.ToolMetadataService;
 import stirling.software.common.util.FileReadinessChecker;
 
 import tools.jackson.databind.ObjectMapper;
@@ -48,6 +49,7 @@ public class PipelineDirectoryProcessor {
 
     private final ObjectMapper objectMapper;
     private final ApiDocService apiDocService;
+    private final ToolMetadataService toolMetadataService;
     private final PipelineProcessor processor;
     private final PostHogService postHogService;
     private final FileReadinessChecker fileReadinessChecker;
@@ -61,12 +63,14 @@ public class PipelineDirectoryProcessor {
     public PipelineDirectoryProcessor(
             ObjectMapper objectMapper,
             ApiDocService apiDocService,
+            ToolMetadataService toolMetadataService,
             PipelineProcessor processor,
             PostHogService postHogService,
             FileReadinessChecker fileReadinessChecker,
             RuntimePathConfig runtimePathConfig) {
         this.objectMapper = objectMapper;
         this.apiDocService = apiDocService;
+        this.toolMetadataService = toolMetadataService;
         this.processor = processor;
         this.postHogService = postHogService;
         this.fileReadinessChecker = fileReadinessChecker;
@@ -229,7 +233,7 @@ public class PipelineDirectoryProcessor {
             throws IOException {
 
         List<String> inputExtensions =
-                apiDocService.getExtensionTypes(false, operation.getOperation());
+                toolMetadataService.getExtensionTypes(false, operation.getOperation());
         log.info(
                 "Allowed extensions for operation {}: {}",
                 operation.getOperation(),
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java
index c4f1c76f5e..08684dd5fe 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessor.java
@@ -30,6 +30,7 @@ import stirling.software.SPDF.model.PipelineResult;
 import stirling.software.SPDF.service.ApiDocService;
 import stirling.software.common.service.AutomationRunContext;
 import stirling.software.common.service.InternalApiClient;
+import stirling.software.common.service.ToolMetadataService;
 import stirling.software.common.util.TempFileManager;
 import stirling.software.common.util.ZipExtractionUtils;
 
@@ -39,15 +40,19 @@ public class PipelineProcessor {
 
     private final ApiDocService apiDocService;
 
+    private final ToolMetadataService toolMetadataService;
+
     private final InternalApiClient internalApiClient;
 
     private final TempFileManager tempFileManager;
 
     public PipelineProcessor(
             ApiDocService apiDocService,
+            ToolMetadataService toolMetadataService,
             InternalApiClient internalApiClient,
             TempFileManager tempFileManager) {
         this.apiDocService = apiDocService;
+        this.toolMetadataService = toolMetadataService;
         this.internalApiClient = internalApiClient;
         this.tempFileManager = tempFileManager;
     }
@@ -92,13 +97,13 @@ public class PipelineProcessor {
         boolean filtersApplied = false;
         for (PipelineOperation pipelineOperation : config.getOperations()) {
             String operation = pipelineOperation.getOperation();
-            boolean isMultiInputOperation = apiDocService.isMultiInput(operation);
+            boolean isMultiInputOperation = toolMetadataService.isMultiInput(operation);
             log.info(
                     "Running operation: {} isMultiInputOperation {}",
                     operation,
                     isMultiInputOperation);
             Map<String, Object> parameters = pipelineOperation.getParameters();
-            List<String> inputFileTypes = apiDocService.getExtensionTypes(false, operation);
+            List<String> inputFileTypes = toolMetadataService.getExtensionTypes(false, operation);
             if (inputFileTypes == null) {
                 inputFileTypes = new ArrayList<>(List.of("ALL"));
             }
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java
index 7ad69ebc5b..ffadb8fe1a 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java
@@ -79,6 +79,8 @@ import stirling.software.SPDF.model.api.security.SignPDFWithCertRequest;
 import stirling.software.SPDF.service.HardwareKeyStoreService;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.service.ServerCertificateServiceInterface;
 import stirling.software.common.util.ExceptionUtils;
@@ -170,12 +172,13 @@ public class CertSignController {
             value = "/cert-sign",
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Sign PDF with a Digital Certificate",
             description =
                     "This endpoint accepts a PDF file, a digital certificate and related"
                             + " information to sign the PDF. It then returns the digitally signed PDF"
-                            + " file. Input:PDF Output:PDF Type:SISO")
+                            + " file.")
     public ResponseEntity<Resource> signPDFWithCert(
             @ModelAttribute SignPDFWithCertRequest request, HttpServletRequest httpRequest)
             throws Exception {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java
index a66b168163..d29480fd3c 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java
@@ -58,6 +58,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.RegexPatternUtils;
@@ -1095,10 +1097,10 @@ public class GetInfoOnPDF {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             value = "/get-info-on-pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
+    @ToolIO(produces = ToolFormat.JSON)
     @Operation(
             summary = "Get comprehensive PDF information",
-            description =
-                    "Extracts all available information from a PDF file. Input:PDF Output:JSON Type:SISO")
+            description = "Extracts all available information from a PDF file.")
     public ResponseEntity<byte[]> getPdfInfo(@ModelAttribute PDFFile request) throws IOException {
         MultipartFile inputFile = request.getFileInput();
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java
index 946eee0359..690c82ca8f 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java
@@ -21,6 +21,11 @@ import stirling.software.SPDF.model.api.security.PDFPasswordRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOCase;
+import stirling.software.common.model.tool.ToolIOWhen;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.GeneralUtils;
@@ -39,11 +44,14 @@ public class PasswordController {
             value = "/remove-password",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(
+            accepts = {ToolFormat.PDF, ToolFormat.PDF_ENCRYPTED},
+            produces = ToolFormat.PDF)
     @Operation(
             summary = "Remove password from a PDF file",
             description =
                     "This endpoint removes the password from a protected PDF file. Users need to"
-                            + " provide the existing password. Input:PDF Output:PDF Type:SISO")
+                            + " provide the existing password.")
     public ResponseEntity<Resource> removePassword(@ModelAttribute PDFPasswordRequest request)
             throws IOException {
         MultipartFile fileInput = request.getFileInput();
@@ -71,12 +79,21 @@ public class PasswordController {
             value = "/add-password",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(
+            produces = ToolFormat.PDF_ENCRYPTED,
+            cases =
+                    @ToolIOCase(
+                            when = {
+                                @ToolIOWhen(param = "password", matches = ""),
+                                @ToolIOWhen(param = "ownerPassword", matches = "")
+                            },
+                            produces = ToolFormat.PDF,
+                            arity = ToolArity.SISO))
     @Operation(
             summary = "Add password to a PDF file",
             description =
                     "This endpoint adds password protection to a PDF file. Users can specify a set"
-                            + " of permissions that should be applied to the file. Input:PDF"
-                            + " Output:PDF")
+                            + " of permissions that should be applied to the file.")
     public ResponseEntity<Resource> addPassword(@ModelAttribute AddPasswordRequest request)
             throws IOException {
         MultipartFile fileInput = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactController.java
index ece149a820..c280264838 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactController.java
@@ -33,6 +33,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.security.RedactionArea;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.PdfUtils;
@@ -82,13 +84,14 @@ public class RedactController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             operationId = "redactPdfManual",
             summary = "Redacts areas and pages in a PDF document",
             description =
-                    "This endpoint redacts content from a PDF file based on manually specified areas. "
-                            + "Users can specify areas to redact and optionally convert the PDF to an image. "
-                            + "Input:PDF Output:PDF Type:SISO")
+                    "This endpoint redacts content from a PDF file based on manually specified"
+                            + " areas. Users can specify areas to redact and optionally convert the PDF to an"
+                            + " image.")
     public ResponseEntity<Resource> redactPDF(@ModelAttribute ManualRedactPdfRequest request)
             throws IOException {
 
@@ -128,13 +131,14 @@ public class RedactController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Redact PDF automatically",
             operationId = "redactPdfAuto",
             description =
-                    "This endpoint automatically redacts text from a PDF file based on specified patterns. "
-                            + "Users can provide text patterns to redact, with options for regex and whole word matching. "
-                            + "Input:PDF Output:PDF Type:SISO")
+                    "This endpoint automatically redacts text from a PDF file based on specified"
+                            + " patterns. Users can provide text patterns to redact, with options for regex"
+                            + " and whole word matching.")
     public ResponseEntity<Resource> redactPdf(@ModelAttribute RedactPdfRequest request) {
         String rawListOfText = request.getListOfText();
         boolean useRegex = Boolean.TRUE.equals(request.getUseRegex());
@@ -272,13 +276,13 @@ public class RedactController {
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
             resourceWeight = ResourceWeight.LARGE_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             operationId = "redactExecute",
             summary = "Execute a unified redaction plan on a PDF",
             description =
-                    "Unified redaction endpoint that accepts exact strings, regex patterns, and "
-                            + "page numbers in a single request. Supports execution strategy hints. "
-                            + "Input:PDF Output:PDF Type:SISO")
+                    "Unified redaction endpoint that accepts exact strings, regex patterns, and"
+                            + " page numbers in a single request. Supports execution strategy hints.")
     public ResponseEntity<Resource> executeRedaction(@ModelAttribute RedactExecuteRequest request)
             throws IOException {
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RemoveCertSignController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RemoveCertSignController.java
index 26f4a09e89..bb1e0e48d5 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RemoveCertSignController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RemoveCertSignController.java
@@ -22,6 +22,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFileManager;
@@ -39,11 +41,12 @@ public class RemoveCertSignController {
             value = "/remove-cert-sign",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Remove digital signature from PDF",
             description =
                     "This endpoint accepts a PDF file and returns the PDF file without the digital"
-                            + " signature. Input:PDF, Output:PDF Type:SISO")
+                            + " signature.")
     public ResponseEntity<Resource> removeCertSignPDF(@ModelAttribute PDFFile request)
             throws Exception {
         MultipartFile pdf = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/SanitizeController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/SanitizeController.java
index 15c768349d..4b3fd497a3 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/SanitizeController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/SanitizeController.java
@@ -40,6 +40,8 @@ import stirling.software.SPDF.model.api.security.SanitizePdfRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFileManager;
@@ -58,11 +60,12 @@ public class SanitizeController {
             value = "/sanitize-pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Sanitize a PDF file",
             description =
                     "This endpoint processes a PDF file and removes specific elements based on the"
-                            + " provided options. Input:PDF Output:PDF Type:SISO")
+                            + " provided options.")
     public ResponseEntity<Resource> sanitizePDF(@ModelAttribute SanitizePdfRequest request)
             throws IOException {
         MultipartFile inputFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/TimestampController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/TimestampController.java
index 9110131f4f..2329ca2484 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/TimestampController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/TimestampController.java
@@ -45,6 +45,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.TempFile;
@@ -84,13 +86,13 @@ public class TimestampController {
             value = "/timestamp-pdf",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Add RFC 3161 document timestamp to a PDF",
             description =
                     "Contacts a trusted Time Stamp Authority (TSA) server and embeds an RFC 3161"
-                            + " document timestamp into the PDF. Only a SHA-256 hash of the"
-                            + " document is sent to the TSA — the PDF itself never leaves the"
-                            + " server. Input:PDF Output:PDF Type:SISO")
+                            + " document timestamp into the PDF. Only a SHA-256 hash of the document is sent"
+                            + " to the TSA - the PDF itself never leaves the server.")
     public ResponseEntity<Resource> timestampPdf(@ModelAttribute TimestampPdfRequest request)
             throws Exception {
         MultipartFile inputFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java
index f9eeeb6415..c807a68bc8 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/ValidateSignatureController.java
@@ -46,6 +46,8 @@ import stirling.software.SPDF.service.CertificateValidationService;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 
@@ -73,12 +75,12 @@ public class ValidateSignatureController {
     }
 
     @JsonDataResponse
+    @ToolIO(produces = ToolFormat.JSON)
     @Operation(
             summary = "Validate PDF Digital Signature",
             description =
-                    "Validates the digital signatures in a PDF file using PKIX path building"
-                            + " and time-of-signing semantics. Supports custom trust anchors."
-                            + " Input:PDF Output:JSON Type:SISO")
+                    "Validates the digital signatures in a PDF file using PKIX path building and"
+                            + " time-of-signing semantics. Supports custom trust anchors.")
     @AutoJobPostMapping(
             value = "/validate-signature",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/VerifyPDFController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/VerifyPDFController.java
index 505eeb2c62..4226005c8e 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/VerifyPDFController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/VerifyPDFController.java
@@ -22,6 +22,8 @@ import stirling.software.SPDF.service.VeraPDFService;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.util.ExceptionUtils;
 
 @SecurityApi
@@ -31,13 +33,13 @@ public class VerifyPDFController {
 
     private final VeraPDFService veraPDFService;
 
+    @ToolIO(produces = ToolFormat.JSON)
     @Operation(
             summary = "Verify PDF Standards Compliance",
             description =
-                    "Validates PDF files against the standards declared in their metadata. "
-                            + "Automatically detects PDF/A, PDF/UA-1, PDF/UA-2, and WTPDF standards "
-                            + "from the document's XMP metadata and validates compliance. "
-                            + "Input:PDF Output:JSON Type:SISO")
+                    "Validates PDF files against the standards declared in their metadata."
+                            + " Automatically detects PDF/A, PDF/UA-1, PDF/UA-2, and WTPDF standards from the"
+                            + " document's XMP metadata and validates compliance.")
     @AutoJobPostMapping(
             value = "/verify-pdf",
             consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/WatermarkController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/WatermarkController.java
index 38364e541e..0bcc3a6439 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/WatermarkController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/WatermarkController.java
@@ -43,6 +43,8 @@ import stirling.software.SPDF.model.api.security.AddWatermarkRequest;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.SecurityApi;
 import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.GeneralUtils;
 import stirling.software.common.util.PdfUtils;
@@ -74,12 +76,13 @@ public class WatermarkController {
             value = "/add-watermark",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @StandardPdfResponse
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Add watermark to a PDF file",
             description =
                     "This endpoint adds a watermark to a given PDF file. Users can specify the"
-                            + " watermark type (text or image), rotation, opacity, width spacer, and"
-                            + " height spacer. Input:PDF Output:PDF Type:SISO")
+                            + " watermark type (text or image), rotation, opacity, width spacer, and height"
+                            + " spacer.")
     public ResponseEntity<Resource> addWatermark(@Valid @ModelAttribute AddWatermarkRequest request)
             throws IOException, Exception {
         MultipartFile pdfFile = request.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/model/api/converters/ConvertPDFToMarkdown.java b/app/core/src/main/java/stirling/software/SPDF/model/api/converters/ConvertPDFToMarkdown.java
index 42ebd51ab3..45f093148b 100644
--- a/app/core/src/main/java/stirling/software/SPDF/model/api/converters/ConvertPDFToMarkdown.java
+++ b/app/core/src/main/java/stirling/software/SPDF/model/api/converters/ConvertPDFToMarkdown.java
@@ -17,6 +17,8 @@ import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.annotations.api.ConvertApi;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.pdf.PdfMarkdownConverter;
 import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
@@ -34,10 +36,10 @@ public class ConvertPDFToMarkdown {
             value = "/pdf/markdown",
             resourceWeight = ResourceWeight.MEDIUM_WEIGHT)
     @MarkdownConversionResponse
+    @ToolIO(produces = ToolFormat.MARKDOWN)
     @Operation(
             summary = "Convert PDF to Markdown",
-            description =
-                    "This endpoint converts a PDF file to Markdown format. Input:PDF Output:Markdown Type:SISO")
+            description = "This endpoint converts a PDF file to Markdown format.")
     public ResponseEntity<byte[]> processPdfToMarkdown(@ModelAttribute PDFFile file)
             throws Exception {
         MultipartFile inputFile = file.getFileInput();
diff --git a/app/core/src/main/java/stirling/software/SPDF/service/ApiDocService.java b/app/core/src/main/java/stirling/software/SPDF/service/ApiDocService.java
index 3a8d418aa6..35f194f5d8 100644
--- a/app/core/src/main/java/stirling/software/SPDF/service/ApiDocService.java
+++ b/app/core/src/main/java/stirling/software/SPDF/service/ApiDocService.java
@@ -1,12 +1,7 @@
 package stirling.software.SPDF.service;
 
-import java.util.Arrays;
 import java.util.HashMap;
-import java.util.List;
-import java.util.Locale;
 import java.util.Map;
-import java.util.regex.Matcher;
-import java.util.regex.Pattern;
 
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.http.HttpEntity;
@@ -24,28 +19,26 @@ import stirling.software.SPDF.SPDFApplication;
 import stirling.software.SPDF.model.ApiEndpoint;
 import stirling.software.common.model.enumeration.Role;
 import stirling.software.common.service.UserServiceInterface;
-import stirling.software.common.util.RegexPatternUtils;
 
 import tools.jackson.databind.JsonNode;
 import tools.jackson.databind.ObjectMapper;
 
+/**
+ * Validates a request's parameters against the OpenAPI spec.
+ *
+ * <p>Input and output types are no longer read from here: they are declared with {@code @ToolIO}
+ * and served by {@code ToolIORegistry}, which reads the annotations directly rather than parsing
+ * them back out of the description prose.
+ */
 @Service
 @Slf4j
-public class ApiDocService implements stirling.software.common.service.ToolMetadataService {
-
-    // Matches a bare "Output:ZIP" declaration (i.e. ZIP is not followed by "-" or "/").
-    // Bare ZIP means the archive itself is the deliverable (e.g. get-attachments), so it
-    // should not be auto-unpacked. Wrapper forms like Output:ZIP-PDF or Output:IMAGE/ZIP
-    // use ZIP as transport for multiple typed results and are safe to unpack.
-    private static final Pattern BARE_ZIP_OUTPUT =
-            Pattern.compile("Output\\s*:\\s*ZIP(?![-/])", Pattern.CASE_INSENSITIVE);
+public class ApiDocService {
 
     private final Map<String, ApiEndpoint> apiDocumentation = new HashMap<>();
 
     private final ServletContext servletContext;
     private final UserServiceInterface userService;
     private final ObjectMapper objectMapper;
-    Map<String, List<String>> outputToFileTypes = new HashMap<>();
     JsonNode apiDocsJsonRootNode;
 
     public ApiDocService(
@@ -63,52 +56,6 @@ public class ApiDocService implements stirling.software.common.service.ToolMetad
         return "http://localhost:" + port + contextPath + "/v1/api-docs";
     }
 
-    @Override
-    public List<String> getExtensionTypes(boolean output, String operationName) {
-        if (outputToFileTypes.isEmpty()) {
-            outputToFileTypes.put("PDF", List.of("pdf"));
-            outputToFileTypes.put(
-                    "IMAGE",
-                    Arrays.asList(
-                            "png", "jpg", "jpeg", "gif", "webp", "bmp", "tif", "tiff", "svg", "psd",
-                            "ai", "eps"));
-            outputToFileTypes.put(
-                    "ZIP",
-                    Arrays.asList("zip", "rar", "7z", "tar", "gz", "bz2", "xz", "lz", "lzma", "z"));
-            outputToFileTypes.put("WORD", Arrays.asList("doc", "docx", "odt", "rtf"));
-            outputToFileTypes.put("CSV", List.of("csv"));
-            outputToFileTypes.put("JS", Arrays.asList("js", "jsx"));
-            outputToFileTypes.put("HTML", Arrays.asList("html", "htm", "xhtml"));
-            outputToFileTypes.put("JSON", List.of("json"));
-            outputToFileTypes.put("TXT", Arrays.asList("txt", "text", "md", "markdown"));
-            outputToFileTypes.put("PPT", Arrays.asList("ppt", "pptx", "odp"));
-            outputToFileTypes.put("XML", Arrays.asList("xml", "xsd", "xsl"));
-            outputToFileTypes.put(
-                    "BOOK", Arrays.asList("epub", "mobi", "azw3", "fb2", "txt", "docx"));
-            // type.
-        }
-        if (apiDocsJsonRootNode == null || apiDocumentation.isEmpty()) {
-            loadApiDocumentation();
-        }
-        if (!apiDocumentation.containsKey(operationName)) {
-            return null;
-        }
-        ApiEndpoint endpoint = apiDocumentation.get(operationName);
-        String description = endpoint.getDescription();
-        Matcher matcher =
-                (output
-                                ? RegexPatternUtils.getInstance().getApiDocOutputTypePattern()
-                                : RegexPatternUtils.getInstance().getApiDocInputTypePattern())
-                        .matcher(description);
-        while (matcher.find()) {
-            String type = matcher.group(1).toUpperCase(Locale.ROOT);
-            if (outputToFileTypes.containsKey(type)) {
-                return outputToFileTypes.get(type);
-            }
-        }
-        return null;
-    }
-
     private String getApiKeyForUser() {
         if (userService == null) return "";
         return userService.getApiKeyForUser(Role.INTERNAL_API_USER.getRoleId());
@@ -157,55 +104,4 @@ public class ApiDocService implements stirling.software.common.service.ToolMetad
         ApiEndpoint endpoint = apiDocumentation.get(operationName);
         return endpoint.areParametersValid(parameters);
     }
-
-    @Override
-    public boolean isMultiInput(String operationName) {
-        if (apiDocsJsonRootNode == null || apiDocumentation.isEmpty()) {
-            loadApiDocumentation();
-        }
-        if (!apiDocumentation.containsKey(operationName)) {
-            return false;
-        }
-        ApiEndpoint endpoint = apiDocumentation.get(operationName);
-        String description = endpoint.getDescription();
-        Matcher matcher =
-                RegexPatternUtils.getInstance().getApiDocTypePattern().matcher(description);
-        if (matcher.find()) {
-            String type = matcher.group(1);
-            return type.startsWith("MI");
-        }
-        return false;
-    }
-
-    @Override
-    public boolean shouldUnpackZipResponse(String operationName) {
-        if (apiDocsJsonRootNode == null || apiDocumentation.isEmpty()) {
-            loadApiDocumentation();
-        }
-        if (!apiDocumentation.containsKey(operationName)) {
-            return false;
-        }
-        ApiEndpoint endpoint = apiDocumentation.get(operationName);
-        String description = endpoint.getDescription();
-        Matcher typeMatcher =
-                RegexPatternUtils.getInstance().getApiDocTypePattern().matcher(description);
-        if (typeMatcher.find()) {
-            String type = typeMatcher.group(1);
-            // Multi-output endpoints (SIMO/MIMO) return a ZIP of their outputs.
-            if (type.endsWith("MO")) {
-                return true;
-            }
-        }
-        Matcher outputMatcher =
-                RegexPatternUtils.getInstance().getApiDocOutputTypePattern().matcher(description);
-        if (outputMatcher.find()) {
-            String output = outputMatcher.group(1).toUpperCase(Locale.ROOT);
-            if (output.startsWith("ZIP")) {
-                // Bare "Output:ZIP" is a single-archive deliverable, not a transport.
-                return !BARE_ZIP_OUTPUT.matcher(description).find();
-            }
-        }
-        return false;
-    }
 }
-// Model class for API Endpoint
diff --git a/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java b/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java
new file mode 100644
index 0000000000..120bee6a2b
--- /dev/null
+++ b/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java
@@ -0,0 +1,342 @@
+package stirling.software.SPDF.config;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.lang.reflect.Method;
+import java.util.Arrays;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.ValueSource;
+import org.springframework.beans.factory.config.BeanDefinition;
+import org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider;
+import org.springframework.core.annotation.AnnotatedElementUtils;
+import org.springframework.core.type.filter.AnnotationTypeFilter;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.model.tool.ToolIOSpec;
+
+/**
+ * Every document-transforming endpoint must declare its I/O, or it becomes a hole in the
+ * compatibility graph: an undeclared step reads as "cannot tell" and nothing past it is checked.
+ *
+ * <p>The rest pins the declarations that were corrected on the way out of the description prose,
+ * where several disagreed with what the endpoint actually does.
+ */
+class ToolIODeclarationCoverageTest {
+
+    /** The namespaces whose endpoints act on documents. */
+    private static final List<String> TOOL_NAMESPACES =
+            List.of(
+                    "/api/v1/general/",
+                    "/api/v1/misc/",
+                    "/api/v1/security/",
+                    "/api/v1/convert/",
+                    "/api/v1/filter/",
+                    "/api/v1/integration/");
+
+    /**
+     * Not document transforms, so nothing to declare. A path exempts everything nested under it.
+     * Keep it short: if you are adding a real tool, annotate it instead.
+     */
+    private static final List<String> EXEMPT =
+            List.of(
+                    // Interactive editing sessions: page fragments and cache handles, not
+                    // documents.
+                    "/api/v1/convert/pdf/text-editor",
+                    "/api/v1/convert/text-editor/pdf",
+                    // Signing sessions, certificate checks and hardware token enumeration; the
+                    // signing tool itself is /api/v1/security/cert-sign, which is declared.
+                    "/api/v1/security/cert-sign/sessions",
+                    "/api/v1/security/cert-sign/validate-certificate",
+                    "/api/v1/security/cert-sign/hardware");
+
+    private record Scan(Set<String> required, Map<String, ToolIOSpec> declared) {}
+
+    private static final Scan SCAN = scan();
+    private static final Map<String, ToolIOSpec> DECLARED = SCAN.declared();
+
+    @Test
+    void everyToolEndpointDeclaresItsIo() {
+        List<String> missing =
+                SCAN.required().stream()
+                        .filter(path -> !DECLARED.containsKey(path))
+                        .sorted()
+                        .toList();
+        assertTrue(
+                missing.isEmpty(),
+                () ->
+                        "These tool endpoints are missing a @ToolIO declaration. Add one so a"
+                                + " pipeline containing them can be checked before it runs, or"
+                                + " exempt them in EXEMPT with a reason:\n  "
+                                + String.join("\n  ", missing));
+    }
+
+    @ParameterizedTest
+    @ValueSource(
+            strings = {
+                // Splitters emit a set of documents; the archive is only transport.
+                "/api/v1/general/split-pages",
+                "/api/v1/general/split-pdf-by-sections",
+                "/api/v1/general/split-pdf-by-chapters",
+                "/api/v1/general/split-by-size-or-count",
+                "/api/v1/general/split-for-poster-print",
+                "/api/v1/misc/auto-split-pdf",
+                "/api/v1/misc/extract-images",
+                "/api/v1/misc/extract-image-scans",
+                // Corrected: both were declared single-output but return an archive of results.
+                "/api/v1/misc/remove-blanks",
+                "/api/v1/convert/pdf/csv"
+            })
+    void multiResultEndpointsAreUnpacked(String path) {
+        assertTrue(spec(path).resolveOutput().arity().isMultiOutput(), path);
+    }
+
+    @ParameterizedTest
+    @ValueSource(
+            strings = {
+                // The archive itself is the deliverable.
+                "/api/v1/misc/extract-attachments",
+                // A page of HTML plus the assets it references; unpacking scatters them.
+                "/api/v1/convert/pdf/html",
+                "/api/v1/general/rotate-pdf",
+                "/api/v1/general/merge-pdfs",
+                // Corrected: was declared MIMO, but it returns one overlaid document.
+                "/api/v1/general/overlay-pdfs",
+                // Sits under the exempted cert-sign session paths; pinned so it stays declared.
+                "/api/v1/security/cert-sign"
+            })
+    void singleResultEndpointsAreNotUnpacked(String path) {
+        assertFalse(spec(path).resolveOutput().arity().isMultiOutput(), path);
+    }
+
+    @ParameterizedTest
+    @ValueSource(
+            strings = {
+                "/api/v1/general/merge-pdfs",
+                "/api/v1/general/overlay-pdfs",
+                "/api/v1/convert/img/pdf"
+            })
+    void multiInputEndpointsTakeEveryFileAtOnce(String path) {
+        assertTrue(spec(path).arity().isMultiInput(), path);
+    }
+
+    @ParameterizedTest
+    @ValueSource(
+            strings = {
+                // Corrected: the multiple files are the attachments, a secondary field. The
+                // primary stream is one document in, one out, so these must not fan in.
+                "/api/v1/misc/add-attachments",
+                "/api/v1/misc/delete-attachment",
+                "/api/v1/misc/rename-attachment"
+            })
+    void attachmentEditsActOnOneDocument(String path) {
+        assertFalse(spec(path).arity().isMultiInput(), path);
+    }
+
+    @ParameterizedTest
+    @ValueSource(
+            strings = {
+                // Corrected: these declared Output:Boolean, which would have reported every chain
+                // after a filter as broken. A filter returns the document, or 204 to drop it.
+                "/api/v1/filter/filter-contains-text",
+                "/api/v1/filter/filter-contains-image",
+                "/api/v1/filter/filter-file-size",
+                "/api/v1/filter/filter-page-count",
+                "/api/v1/filter/filter-page-rotation",
+                "/api/v1/filter/filter-page-size"
+            })
+    void filtersPassTheDocumentThrough(String path) {
+        ToolIOSpec spec = spec(path);
+        assertTrue(spec.acceptsFormat(ToolFormat.PDF), path);
+        assertEquals(ToolFormat.PDF, spec.resolveOutput().format(), path);
+    }
+
+    @Test
+    void addPasswordProducesAnEncryptedDocument() {
+        ToolIOSpec spec = spec("/api/v1/security/add-password");
+        assertEquals(
+                ToolFormat.PDF_ENCRYPTED,
+                spec.resolveOutput(Map.of("password", "hunter2", "ownerPassword", "")).format());
+    }
+
+    @Test
+    void addPasswordWithNoPasswordsOnlySetsPermissions() {
+        // The controller returns the document unencrypted when both passwords are absent, so a
+        // permissions-only call must not close the chain to every downstream tool.
+        ToolIOSpec spec = spec("/api/v1/security/add-password");
+        assertEquals(
+                ToolFormat.PDF,
+                spec.resolveOutput(Map.of("password", "", "ownerPassword", "")).format());
+    }
+
+    @Test
+    void pdfToTextProducesTextOnlyForTheTxtBranch() {
+        // The endpoint serves both formats, and RTF is a word-processor format: declaring the whole
+        // endpoint as TEXT would pass RTF into text tools and reject it from the Word tools that
+        // can actually open it.
+        ToolIOSpec spec = spec("/api/v1/convert/pdf/text");
+        assertEquals(ToolFormat.TEXT, spec.resolveOutput(Map.of("outputFormat", "txt")).format());
+        assertEquals(ToolFormat.WORD, spec.resolveOutput(Map.of("outputFormat", "rtf")).format());
+    }
+
+    @Test
+    void theHtmlRoundTripIsAValidChain() {
+        // convert/pdf/html emits a ZIP of the page plus its assets, and convert/html/pdf takes one
+        // back. Declaring only HTML would reject the round trip the two endpoints exist to support.
+        assertEquals(ToolFormat.ZIP, spec("/api/v1/convert/pdf/html").resolveOutput().format());
+        assertTrue(spec("/api/v1/convert/html/pdf").acceptsFormat(ToolFormat.ZIP));
+        assertTrue(spec("/api/v1/convert/html/pdf").acceptsFormat(ToolFormat.HTML));
+    }
+
+    @Test
+    void markdownToPdfTakesAZipOfMarkdownAndImages() {
+        assertTrue(spec("/api/v1/convert/markdown/pdf").acceptsFormat(ToolFormat.ZIP));
+        assertTrue(spec("/api/v1/convert/markdown/pdf").acceptsFormat(ToolFormat.MARKDOWN));
+    }
+
+    @Test
+    void vectorExportDeclaresEveryOutputFormat() {
+        // Every value the request permits must resolve to what it actually emits. "eps" is the
+        // default and is an image extension; the other three are not, and would otherwise fall
+        // through to IMAGE and pass a chain that fails at run time.
+        ToolIOSpec spec = spec("/api/v1/convert/pdf/vector");
+        assertEquals(ToolFormat.IMAGE, spec.resolveOutput(Map.of("outputFormat", "eps")).format());
+        assertEquals(
+                ToolFormat.POSTSCRIPT, spec.resolveOutput(Map.of("outputFormat", "ps")).format());
+        assertEquals(ToolFormat.PCL, spec.resolveOutput(Map.of("outputFormat", "pcl")).format());
+        assertEquals(ToolFormat.XPS, spec.resolveOutput(Map.of("outputFormat", "xps")).format());
+        // The request pattern accepts any casing, so the declaration must too.
+        assertEquals(
+                ToolFormat.POSTSCRIPT, spec.resolveOutput(Map.of("outputFormat", "PS")).format());
+    }
+
+    @Test
+    void everyVectorOutputFormatHasACase() {
+        // Guards the list above against a new allowableValue being added without a declaration.
+        Set<String> declared =
+                spec("/api/v1/convert/pdf/vector").cases().stream()
+                        .flatMap(rule -> rule.when().stream())
+                        .flatMap(when -> when.matches().stream())
+                        .collect(java.util.stream.Collectors.toSet());
+        assertEquals(Set.of("ps", "pcl", "xps"), declared);
+    }
+
+    @Test
+    void onlyRemovePasswordAcceptsAnEncryptedDocument() {
+        assertTrue(
+                spec("/api/v1/security/remove-password").acceptsFormat(ToolFormat.PDF_ENCRYPTED));
+        List<String> accepting =
+                DECLARED.entrySet().stream()
+                        .filter(e -> e.getValue().acceptsFormat(ToolFormat.PDF_ENCRYPTED))
+                        .map(Map.Entry::getKey)
+                        .filter(path -> !path.equals("/api/v1/security/remove-password"))
+                        .filter(path -> !spec(path).accepts().contains(ToolFormat.ANY))
+                        .sorted()
+                        .toList();
+        assertTrue(
+                accepting.isEmpty(),
+                () ->
+                        "Only remove-password should accept an encrypted PDF. If one of these"
+                                + " genuinely handles encryption, say so in its @ToolIO:\n  "
+                                + String.join("\n  ", accepting));
+    }
+
+    private static ToolIOSpec spec(String path) {
+        ToolIOSpec spec = DECLARED.get(path);
+        if (spec == null) {
+            throw new AssertionError("No @ToolIO declared for " + path);
+        }
+        return spec;
+    }
+
+    private static Scan scan() {
+        Set<String> required = new HashSet<>();
+        Map<String, ToolIOSpec> declared = new HashMap<>();
+        ClassPathScanningCandidateComponentProvider scanner =
+                new ClassPathScanningCandidateComponentProvider(false);
+        scanner.addIncludeFilter(new AnnotationTypeFilter(RequestMapping.class, true, true));
+
+        for (BeanDefinition definition : scanner.findCandidateComponents("stirling.software")) {
+            Class<?> controller = loadClass(definition.getBeanClassName());
+            if (controller == null) {
+                continue;
+            }
+            RequestMapping base =
+                    AnnotatedElementUtils.findMergedAnnotation(controller, RequestMapping.class);
+            if (base == null || base.value().length == 0) {
+                continue;
+            }
+            for (Method method : controller.getDeclaredMethods()) {
+                ToolIO declaration =
+                        AnnotatedElementUtils.findMergedAnnotation(method, ToolIO.class);
+                for (String path : mappedPaths(method)) {
+                    String full = join(base.value()[0], path);
+                    if (!requiresDeclaration(full)) {
+                        continue;
+                    }
+                    required.add(full);
+                    if (declaration != null) {
+                        declared.put(full, ToolIOSpec.from(declaration));
+                    }
+                }
+            }
+        }
+        return new Scan(required, declared);
+    }
+
+    private static boolean requiresDeclaration(String path) {
+        if (TOOL_NAMESPACES.stream().noneMatch(path::startsWith)) {
+            return false;
+        }
+        // A path variable means it addresses a resource, not a document to transform.
+        if (path.contains("{")) {
+            return false;
+        }
+        return EXEMPT.stream().noneMatch(e -> path.equals(e) || path.startsWith(e + "/"));
+    }
+
+    private static List<String> mappedPaths(Method method) {
+        RequestMapping mapping =
+                AnnotatedElementUtils.findMergedAnnotation(method, RequestMapping.class);
+        if (mapping == null) {
+            return List.of();
+        }
+        boolean writes =
+                AnnotatedElementUtils.hasAnnotation(method, PostMapping.class)
+                        || AnnotatedElementUtils.hasAnnotation(method, PutMapping.class)
+                        || Set.of(mapping.method()).stream()
+                                .anyMatch(m -> m.name().equals("POST") || m.name().equals("PUT"));
+        if (!writes) {
+            return List.of();
+        }
+        return mapping.value().length == 0 ? List.of("") : Arrays.asList(mapping.value());
+    }
+
+    private static String join(String base, String path) {
+        if (path.isEmpty()) {
+            return base;
+        }
+        return base.endsWith("/") || path.startsWith("/") ? base + path : base + "/" + path;
+    }
+
+    private static Class<?> loadClass(String name) {
+        try {
+            return name == null ? null : Class.forName(name);
+        } catch (Throwable e) {
+            // Absent optional dependencies in this flavor; not this test's concern.
+            return null;
+        }
+    }
+}
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessorTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessorTest.java
index e87d08a863..aad630448f 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessorTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/pipeline/PipelineProcessorTest.java
@@ -25,6 +25,7 @@ import stirling.software.SPDF.model.PipelineOperation;
 import stirling.software.SPDF.model.PipelineResult;
 import stirling.software.SPDF.service.ApiDocService;
 import stirling.software.common.service.InternalApiClient;
+import stirling.software.common.service.ToolMetadataService;
 import stirling.software.common.util.TempFileManager;
 
 @ExtendWith(MockitoExtension.class)
@@ -32,6 +33,8 @@ class PipelineProcessorTest {
 
     @Mock ApiDocService apiDocService;
 
+    @Mock ToolMetadataService toolMetadataService;
+
     @Mock InternalApiClient internalApiClient;
 
     @Mock TempFileManager tempFileManager;
@@ -41,7 +44,8 @@ class PipelineProcessorTest {
     @BeforeEach
     void setUp() throws Exception {
         pipelineProcessor =
-                new PipelineProcessor(apiDocService, internalApiClient, tempFileManager);
+                new PipelineProcessor(
+                        apiDocService, toolMetadataService, internalApiClient, tempFileManager);
     }
 
     @Test
@@ -55,8 +59,9 @@ class PipelineProcessorTest {
         Resource file = new MyFileByteArrayResource();
         List<Resource> files = List.of(file);
 
-        when(apiDocService.isMultiInput("/api/v1/filter/filter-page-count")).thenReturn(false);
-        when(apiDocService.getExtensionTypes(false, "/api/v1/filter/filter-page-count"))
+        when(toolMetadataService.isMultiInput("/api/v1/filter/filter-page-count"))
+                .thenReturn(false);
+        when(toolMetadataService.getExtensionTypes(false, "/api/v1/filter/filter-page-count"))
                 .thenReturn(List.of("pdf"));
         when(apiDocService.isValidOperation(eq("/api/v1/filter/filter-page-count"), anyMap()))
                 .thenReturn(true);
@@ -99,8 +104,9 @@ class PipelineProcessorTest {
                     }
                 };
 
-        when(apiDocService.isMultiInput(anyString())).thenReturn(false);
-        when(apiDocService.getExtensionTypes(anyBoolean(), anyString())).thenReturn(List.of("pdf"));
+        when(toolMetadataService.isMultiInput(anyString())).thenReturn(false);
+        when(toolMetadataService.getExtensionTypes(anyBoolean(), anyString()))
+                .thenReturn(List.of("pdf"));
         when(apiDocService.isValidOperation(anyString(), anyMap())).thenReturn(true);
 
         when(internalApiClient.post(anyString(), any()))
diff --git a/app/core/src/test/java/stirling/software/SPDF/service/ApiDocServiceTest.java b/app/core/src/test/java/stirling/software/SPDF/service/ApiDocServiceTest.java
index 42b56a9cfa..1fce6a3836 100644
--- a/app/core/src/test/java/stirling/software/SPDF/service/ApiDocServiceTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/service/ApiDocServiceTest.java
@@ -3,14 +3,11 @@ package stirling.software.SPDF.service;
 import static org.junit.jupiter.api.Assertions.*;
 
 import java.lang.reflect.Field;
-import java.util.List;
 import java.util.Map;
 
 import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.extension.ExtendWith;
-import org.junit.jupiter.params.ParameterizedTest;
-import org.junit.jupiter.params.provider.CsvSource;
 import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 
@@ -23,6 +20,11 @@ import tools.jackson.databind.JsonNode;
 import tools.jackson.databind.ObjectMapper;
 import tools.jackson.databind.json.JsonMapper;
 
+/**
+ * Input/output type behaviour used to live here, parsed out of the description prose. It is now
+ * declared with {@code @ToolIO} and covered by {@code ToolIORegistryTest} and {@code
+ * ToolIODeclarationCoverageTest}.
+ */
 @ExtendWith(MockitoExtension.class)
 class ApiDocServiceTest {
 
@@ -52,199 +54,6 @@ class ApiDocServiceTest {
         field.set(apiDocService, mapper.createObjectNode());
     }
 
-    @Test
-    void getExtensionTypesReturnsExpectedList() throws Exception {
-        String json = "{\"description\": \"Output:PDF\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/test", postNode);
-
-        setApiDocumentation(Map.of("/test", endpoint));
-        setApiDocsJsonRootNode();
-
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/test");
-        assertEquals(List.of("pdf"), extensions);
-    }
-
-    @Test
-    void getExtensionTypesHandlesUnknownOperation() throws Exception {
-        setApiDocumentation(Map.of());
-
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/unknown");
-        assertNull(extensions);
-    }
-
-    @Test
-    void getExtensionTypesReturnsImageTypes() throws Exception {
-        String json = "{\"description\": \"Output:IMAGE\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/img", postNode);
-        setApiDocumentation(Map.of("/img", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/img");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("png"));
-        assertTrue(extensions.contains("jpg"));
-        assertTrue(extensions.contains("gif"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsZipTypes() throws Exception {
-        String json = "{\"description\": \"Output:ZIP\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/zip", postNode);
-        setApiDocumentation(Map.of("/zip", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/zip");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("zip"));
-        assertTrue(extensions.contains("rar"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsWordTypes() throws Exception {
-        String json = "{\"description\": \"Output:WORD\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/word", postNode);
-        setApiDocumentation(Map.of("/word", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/word");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("doc"));
-        assertTrue(extensions.contains("docx"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsCsvTypes() throws Exception {
-        String json = "{\"description\": \"Output:CSV\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/csv", postNode);
-        setApiDocumentation(Map.of("/csv", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/csv");
-        assertEquals(List.of("csv"), extensions);
-    }
-
-    @Test
-    void getExtensionTypesReturnsHtmlTypes() throws Exception {
-        String json = "{\"description\": \"Output:HTML\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/html", postNode);
-        setApiDocumentation(Map.of("/html", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/html");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("html"));
-        assertTrue(extensions.contains("htm"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsBookTypes() throws Exception {
-        String json = "{\"description\": \"Output:BOOK\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/book", postNode);
-        setApiDocumentation(Map.of("/book", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/book");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("epub"));
-        assertTrue(extensions.contains("mobi"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsJsonTypes() throws Exception {
-        String json = "{\"description\": \"Output:JSON\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/json", postNode);
-        setApiDocumentation(Map.of("/json", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/json");
-        assertEquals(List.of("json"), extensions);
-    }
-
-    @Test
-    void getExtensionTypesReturnsTxtTypes() throws Exception {
-        String json = "{\"description\": \"Output:TXT\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/txt", postNode);
-        setApiDocumentation(Map.of("/txt", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/txt");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("txt"));
-        assertTrue(extensions.contains("md"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsPptTypes() throws Exception {
-        String json = "{\"description\": \"Output:PPT\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/ppt", postNode);
-        setApiDocumentation(Map.of("/ppt", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/ppt");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("ppt"));
-        assertTrue(extensions.contains("pptx"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsXmlTypes() throws Exception {
-        String json = "{\"description\": \"Output:XML\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/xml", postNode);
-        setApiDocumentation(Map.of("/xml", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/xml");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("xml"));
-    }
-
-    @Test
-    void getExtensionTypesReturnsJsTypes() throws Exception {
-        String json = "{\"description\": \"Output:JS\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/js", postNode);
-        setApiDocumentation(Map.of("/js", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/js");
-        assertNotNull(extensions);
-        assertTrue(extensions.contains("js"));
-        assertTrue(extensions.contains("jsx"));
-    }
-
-    @Test
-    void getExtensionTypesWithInputMode() throws Exception {
-        String json = "{\"description\": \"Input:PDF\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/test-input", postNode);
-        setApiDocumentation(Map.of("/test-input", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(false, "/test-input");
-        assertEquals(List.of("pdf"), extensions);
-    }
-
-    @Test
-    void getExtensionTypesReturnsNullWhenNoTypeMatch() throws Exception {
-        String json = "{\"description\": \"No type here\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/notype", postNode);
-        setApiDocumentation(Map.of("/notype", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/notype");
-        assertNull(extensions);
-    }
-
-    @Test
-    void getExtensionTypesReturnsNullForUnknownOutputType() throws Exception {
-        String json = "{\"description\": \"Output:UNKNOWNTYPE\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/unk", postNode);
-        setApiDocumentation(Map.of("/unk", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> extensions = apiDocService.getExtensionTypes(true, "/unk");
-        assertNull(extensions);
-    }
-
     @Test
     void isValidOperationChecksRequiredParameters() throws Exception {
         String json =
@@ -304,184 +113,9 @@ class ApiDocServiceTest {
         assertFalse(apiDocService.isValidOperation("/mixed", Map.of()));
     }
 
-    @Test
-    void isMultiInputDetectsTypeMI() throws Exception {
-        String json = "{\"description\": \"Type:MI\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/multi", postNode);
-        setApiDocumentation(Map.of("/multi", endpoint));
-        setApiDocsJsonRootNode();
-        assertTrue(apiDocService.isMultiInput("/multi"));
-    }
-
-    @Test
-    void isMultiInputDetectsUnknownOperation() throws Exception {
-        setApiDocumentation(Map.of());
-        assertFalse(apiDocService.isMultiInput("/unknown"));
-    }
-
-    @Test
-    void isMultiInputHandlesNoDescription() throws Exception {
-        String json = "{\"parameters\": [{\"name\":\"param1\"}, {\"name\":\"param2\"}]}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/multi", postNode);
-        setApiDocumentation(Map.of("/multi", endpoint));
-        setApiDocsJsonRootNode();
-        assertFalse(apiDocService.isMultiInput("/multi"));
-    }
-
-    @Test
-    void isMultiInputReturnsFalseForNonMIType() throws Exception {
-        String json = "{\"description\": \"Type:SI\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/single", postNode);
-        setApiDocumentation(Map.of("/single", endpoint));
-        setApiDocsJsonRootNode();
-        assertFalse(apiDocService.isMultiInput("/single"));
-    }
-
-    @Test
-    void isMultiInputReturnsTrueForMISO() throws Exception {
-        String json = "{\"description\": \"Type:MISO\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/miso", postNode);
-        setApiDocumentation(Map.of("/miso", endpoint));
-        setApiDocsJsonRootNode();
-        assertTrue(apiDocService.isMultiInput("/miso"));
-    }
-
-    @Test
-    void shouldUnpackZipResponseDetectsMultiOutputType() throws Exception {
-        String json = "{\"description\": \"Output:PDF Type:SIMO\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/split", postNode);
-        setApiDocumentation(Map.of("/split", endpoint));
-        setApiDocsJsonRootNode();
-        assertTrue(apiDocService.shouldUnpackZipResponse("/split"));
-    }
-
-    @Test
-    void shouldUnpackZipResponseDetectsMimoType() throws Exception {
-        String json = "{\"description\": \"Output:PDF Type:MIMO\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/overlay", postNode);
-        setApiDocumentation(Map.of("/overlay", endpoint));
-        setApiDocsJsonRootNode();
-        assertTrue(apiDocService.shouldUnpackZipResponse("/overlay"));
-    }
-
-    @Test
-    void shouldUnpackZipResponseDetectsZipOutputDeclaration() throws Exception {
-        String json = "{\"description\": \"Output:ZIP-PDF Type:SISO\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/split-by-sections", postNode);
-        setApiDocumentation(Map.of("/split-by-sections", endpoint));
-        setApiDocsJsonRootNode();
-        assertTrue(apiDocService.shouldUnpackZipResponse("/split-by-sections"));
-    }
-
-    @Test
-    void shouldUnpackZipResponseReturnsFalseForSisoPdf() throws Exception {
-        String json = "{\"description\": \"Input:PDF Output:PDF Type:SISO\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/rotate", postNode);
-        setApiDocumentation(Map.of("/rotate", endpoint));
-        setApiDocsJsonRootNode();
-        assertFalse(apiDocService.shouldUnpackZipResponse("/rotate"));
-    }
-
-    @Test
-    void shouldUnpackZipResponseReturnsFalseForUnknownOperation() throws Exception {
-        setApiDocumentation(Map.of());
-        assertFalse(apiDocService.shouldUnpackZipResponse("/unknown"));
-    }
-
-    /**
-     * Coverage test: every Stirling endpoint whose ZIP response is a transport for multiple typed
-     * results (SIMO/MIMO or Output:ZIP-PDF / Output:IMAGE/ZIP etc.) must be classified as {@code
-     * shouldUnpackZipResponse = true}. Descriptions below are the real
-     * {@code @Operation(description=...)} strings from each controller, so if a controller is
-     * renamed, tweaked or introduced without a {@code Type:} / {@code Output:ZIP-*} tag, this test
-     * breaks, surfacing the bug before {@code AiWorkflowService} silently registers a multi-result
-     * ZIP as a single file.
-     *
-     * <p>Add a new row here whenever a new unpack-eligible endpoint is introduced. Descriptions can
-     * be trimmed to the part containing the relevant tags.
-     */
-    @ParameterizedTest(name = "{0} → shouldUnpackZipResponse")
-    @CsvSource(
-            textBlock =
-                    """
-                    /api/v1/general/split-pages,              'Split pages. Input:PDF Output:PDF Type:SIMO'
-                    /api/v1/general/split-pdf-by-sections,    'Split. Input:PDF Output:ZIP-PDF Type:SISO'
-                    /api/v1/general/split-by-size-or-count,   'Split by size. Input:PDF Output:ZIP-PDF Type:SISO'
-                    /api/v1/general/split-pdf-by-chapters,    'Split by chapters. Input:PDF Output:ZIP-PDF Type:SISO'
-                    /api/v1/general/split-for-poster-print,   'Poster split. Input: PDF Output: ZIP-PDF Type: SISO'
-                    /api/v1/general/overlay-pdfs,             'Overlay PDFs. Input:PDF Output:PDF Type:MIMO'
-                    /api/v1/misc/auto-split-pdf,              'Auto split. Input:PDF Output:ZIP-PDF Type:SISO'
-                    /api/v1/misc/extract-images,              'Extract images. Output:IMAGE/ZIP Type:SIMO'
-                    /api/v1/misc/extract-image-scans,         'Extract image scans. Input:PDF Output:IMAGE/ZIP Type:SIMO'
-                    """)
-    void shouldUnpackZipResponseClassifiesKnownUnpackableEndpoints(
-            String endpoint, String description) throws Exception {
-        String json = mapper.writeValueAsString(Map.of("description", description));
-        JsonNode postNode = mapper.readTree(json);
-        setApiDocumentation(Map.of(endpoint, new ApiEndpoint(endpoint, postNode)));
-        setApiDocsJsonRootNode();
-        assertTrue(
-                apiDocService.shouldUnpackZipResponse(endpoint),
-                () ->
-                        "Expected shouldUnpackZipResponse=true for "
-                                + endpoint
-                                + " with description: "
-                                + description);
-    }
-
-    /**
-     * Inverse coverage: endpoints whose ZIP response is the deliverable itself (or that return
-     * single non-ZIP files) must not be flagged for unpacking. Catches regressions where a change
-     * to the classifier accidentally widens the positive match.
-     */
-    @ParameterizedTest(name = "{0} → !shouldUnpackZipResponse")
-    @CsvSource(
-            textBlock =
-                    """
-                    /api/v1/general/rotate-pdf,        'Rotate. Input:PDF Output:PDF Type:SISO'
-                    /api/v1/general/merge-pdfs,        'Merge. Input:PDF Output:PDF Type:MISO'
-                    /api/v1/misc/compress-pdf,         'Compress. Input:PDF Output:PDF Type:SISO'
-                    /api/v1/misc/flatten,              'Flatten forms. Input:PDF Output:PDF Type:SISO'
-                    /api/v1/security/get-attachments,  'Extract attachments. Input:PDF Output:ZIP Type:SISO'
-                    """)
-    void shouldUnpackZipResponseRejectsNonUnpackableEndpoints(String endpoint, String description)
-            throws Exception {
-        String json = mapper.writeValueAsString(Map.of("description", description));
-        JsonNode postNode = mapper.readTree(json);
-        setApiDocumentation(Map.of(endpoint, new ApiEndpoint(endpoint, postNode)));
-        setApiDocsJsonRootNode();
-        assertFalse(
-                apiDocService.shouldUnpackZipResponse(endpoint),
-                () ->
-                        "Expected shouldUnpackZipResponse=false for "
-                                + endpoint
-                                + " with description: "
-                                + description);
-    }
-
     @Test
     void constructorAcceptsNullUserService() {
         ApiDocService service = new ApiDocService(mapper, servletContext, null);
         assertNotNull(service);
     }
-
-    @Test
-    void getExtensionTypesInitializesMapOnFirstCall() throws Exception {
-        String json = "{\"description\": \"Output:PDF\"}";
-        JsonNode postNode = mapper.readTree(json);
-        ApiEndpoint endpoint = new ApiEndpoint("/test", postNode);
-        setApiDocumentation(Map.of("/test", endpoint));
-        setApiDocsJsonRootNode();
-        List<String> first = apiDocService.getExtensionTypes(true, "/test");
-        List<String> second = apiDocService.getExtensionTypes(true, "/test");
-        assertEquals(first, second);
-    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/MathAuditorAgentController.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/MathAuditorAgentController.java
index 8beddd5e94..d03c176c23 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/MathAuditorAgentController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/MathAuditorAgentController.java
@@ -68,8 +68,6 @@ public class MathAuditorAgentController {
                     Returns a JSON Verdict describing every discrepancy found. How the Verdict is
                     presented to the end user (chat answer, PDF annotations, etc.) is up to the
                     caller.
-
-                    Input: PDF  Output: JSON  Type: SISO
                     """)
     public ResponseEntity<Verdict> mathAuditorAgent(
             @Parameter(description = "The PDF document to audit", required = true)
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PdfCommentAgentController.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PdfCommentAgentController.java
index fadfacf03a..db9a89a867 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PdfCommentAgentController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PdfCommentAgentController.java
@@ -67,8 +67,6 @@ public class PdfCommentAgentController {
 
                     The annotated PDF is streamed back in the response body with
                     Content-Type: application/pdf.
-
-                    Input: PDF + prompt  Output: PDF  Type: SISO
                     """)
     public ResponseEntity<Resource> pdfCommentAgent(
             @Parameter(description = "The PDF document to annotate", required = true)
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/integration/api/ExternalApiCallController.java b/app/proprietary/src/main/java/stirling/software/proprietary/integration/api/ExternalApiCallController.java
index 499ab90fdb..bb32d85092 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/integration/api/ExternalApiCallController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/integration/api/ExternalApiCallController.java
@@ -27,6 +27,8 @@ import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.AutomationRunContext;
 import stirling.software.common.service.InternalApiClient;
 import stirling.software.common.util.TempFileManager;
@@ -89,7 +91,10 @@ public class ExternalApiCallController {
     private final TempFileManager tempFileManager;
     private final ApplicationProperties applicationProperties;
 
+    // The document is forwarded as bytes and never parsed, and in 'replace' mode the response
+    // becomes the document, so neither side can be pinned to a format.
     @PostMapping(value = "/external-api-call", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
+    @ToolIO(accepts = ToolFormat.ANY, produces = ToolFormat.ANY)
     @Operation(
             summary = "Send the document to an external API",
             description =
@@ -97,7 +102,7 @@ public class ExternalApiCallController {
                             + " either records the response as a step report or replaces the"
                             + " document with it. Fields, path and headers may reference"
                             + " {{document.*}}, {{classification.*}}, {{sensitivityLabel.*}} and"
-                            + " {{run.*}}. Type:SISO")
+                            + " {{run.*}}.")
     public ResponseEntity<Resource> call(
             @RequestParam("fileInput") MultipartFile fileInput,
             @RequestParam("connectionId") String connectionId,
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/integration/purview/PurviewLabelController.java b/app/proprietary/src/main/java/stirling/software/proprietary/integration/purview/PurviewLabelController.java
index 65555077c3..666e7e5620 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/integration/purview/PurviewLabelController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/integration/purview/PurviewLabelController.java
@@ -24,6 +24,8 @@ import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.TempFileManager;
 import stirling.software.common.util.WebResponseUtils;
@@ -59,13 +61,13 @@ public class PurviewLabelController {
     private final ObjectMapper objectMapper;
 
     @PostMapping(value = "/purview-apply-label", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Apply a Microsoft Purview sensitivity label",
             description =
                     "Writes the Purview label metadata (MSIP_Label_<GUID>_*) onto the PDF, so"
                             + " Purview-aware tools recognise the label. Applies the label only;"
-                            + " it cannot encrypt, which requires the Microsoft client."
-                            + " Input:PDF Output:PDF Type:SISO")
+                            + " it cannot encrypt, which requires the Microsoft client.")
     public ResponseEntity<Resource> applyLabel(
             @RequestParam("fileInput") MultipartFile fileInput,
             @RequestParam("connectionId") String connectionId,
@@ -95,12 +97,12 @@ public class PurviewLabelController {
     }
 
     @PostMapping(value = "/purview-read-label", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
+    @ToolIO(produces = ToolFormat.PDF)
     @Operation(
             summary = "Read the Microsoft Purview sensitivity label on a PDF",
             description =
                     "Reports the Purview labels a PDF already carries so a policy can act on"
-                            + " them. The document passes through unchanged."
-                            + " Input:PDF Output:PDF Type:SISO")
+                            + " them. The document passes through unchanged.")
     public ResponseEntity<Resource> readLabel(
             @RequestParam("fileInput") MultipartFile fileInput,
             @RequestParam("connectionId") String connectionId)
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
index b6156bc2b8..a382f96bbc 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
@@ -44,7 +44,9 @@ import stirling.software.common.cluster.JobStore;
 import stirling.software.common.cluster.JobStoreEntry;
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.common.model.job.JobResponse;
+import stirling.software.common.model.tool.ToolDiagnostic;
 import stirling.software.common.service.JobOwnershipService;
+import stirling.software.common.service.ToolChainValidator;
 import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
 import stirling.software.proprietary.audit.AuditContext;
@@ -59,6 +61,7 @@ import stirling.software.proprietary.policy.ledger.ProcessedLedger;
 import stirling.software.proprietary.policy.model.OutputSpec;
 import stirling.software.proprietary.policy.model.PipelineDefinition;
 import stirling.software.proprietary.policy.model.PipelineStep;
+import stirling.software.proprietary.policy.model.PipelineValidation;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.PolicyInputs;
 import stirling.software.proprietary.policy.model.PolicyRun;
@@ -239,6 +242,23 @@ public class PolicyController {
 
     // --- Policy management ---
 
+    @PostMapping(value = "/validate", consumes = MediaType.APPLICATION_JSON_VALUE)
+    @Operation(
+            summary = "Check whether a chain of steps can run",
+            description =
+                    "Reports which steps cannot accept what the step before them produces, without"
+                            + " running anything or storing anything. Saving already rejects a"
+                            + " chain whose steps cannot run; this answers the same question up"
+                            + " front, and also returns the warnings and fan-out notes that saving"
+                            + " does not.")
+    public PipelineValidation.Response validateChain(
+            @RequestBody PipelineValidation.Request request) {
+        List<ToolDiagnostic> diagnostics =
+                policyValidator.diagnoseChain(request.steps(), request.sourceFormat());
+        return new PipelineValidation.Response(
+                !ToolChainValidator.hasErrors(diagnostics), diagnostics);
+    }
+
     @PostMapping(consumes = MediaType.APPLICATION_JSON_VALUE)
     @Operation(
             summary = "Create or update a policy",
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java
index b30a760fe3..7d9a8cf88b 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyValidator.java
@@ -6,6 +6,9 @@ import org.springframework.stereotype.Service;
 
 import lombok.RequiredArgsConstructor;
 
+import stirling.software.common.model.tool.ToolDiagnostic;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.service.ToolChainValidator;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
@@ -34,6 +37,7 @@ public class PolicyValidator {
     private final List<PolicyOutputSink> outputSinks;
     private final List<PipelineStepValidator> stepValidators;
     private final SourceStore sourceStore;
+    private final ToolChainValidator toolChainValidator;
 
     /**
      * @throws IllegalArgumentException if the policy has more than one input or output, any facet's
@@ -65,9 +69,49 @@ public class PolicyValidator {
             inputSourceFor(spec).validate(spec);
         }
         validateSteps(policy.steps());
+        validateChain(policy.steps());
         validateOutput(policy.output());
     }
 
+    /**
+     * Reject a chain whose steps cannot run on each other. Such a policy saves fine today and only
+     * fails part-way through its first run, which for a scheduled one may be much later.
+     *
+     * <p>Only errors block; warnings depend on configuration or file content.
+     *
+     * @throws IllegalArgumentException if any step cannot accept what the one before it produces
+     */
+    public void validateChain(List<PipelineStep> steps) {
+        List<ToolDiagnostic> diagnostics = diagnoseChain(steps, null);
+        if (!ToolChainValidator.hasErrors(diagnostics)) {
+            return;
+        }
+        String reasons =
+                diagnostics.stream()
+                        .filter(d -> d.severity() == ToolDiagnostic.Severity.ERROR)
+                        .map(d -> "step " + (d.stepIndex() + 1) + ": " + d.message())
+                        .reduce((a, b) -> a + "; " + b)
+                        .orElse("");
+        throw new IllegalArgumentException("pipeline steps cannot run in this order - " + reasons);
+    }
+
+    /**
+     * Everything wrong with a chain, without rejecting it, so a caller can show warnings and
+     * fan-out notes too.
+     *
+     * @param sourceFormat the format entering the first step, or null when unknown
+     */
+    public List<ToolDiagnostic> diagnoseChain(List<PipelineStep> steps, ToolFormat sourceFormat) {
+        List<ToolChainValidator.Step> chain =
+                steps.stream()
+                        .map(
+                                step ->
+                                        new ToolChainValidator.Step(
+                                                step.operation(), step.parameters()))
+                        .toList();
+        return toolChainValidator.validate(chain, sourceFormat);
+    }
+
     /**
      * Validate each step against every registered {@link PipelineStepValidator}. Must be called on
      * a request thread (caller's principal present) for the same reason as {@link
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineValidation.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineValidation.java
new file mode 100644
index 0000000000..53eba97aa6
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PipelineValidation.java
@@ -0,0 +1,39 @@
+package stirling.software.proprietary.policy.model;
+
+import java.util.List;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import stirling.software.common.model.tool.ToolDiagnostic;
+import stirling.software.common.model.tool.ToolFormat;
+
+/**
+ * Checking whether a policy's steps can run on each other, without the files they would run on.
+ *
+ * <p>The same check runs at save time in {@code PolicyValidator}. This exposes it on its own so a
+ * chain can be checked before it is saved, and so callers that are not the editor can ask.
+ */
+public final class PipelineValidation {
+
+    private PipelineValidation() {}
+
+    /**
+     * @param steps the steps to check, in the order they would run
+     * @param sourceFormat the format of the files entering the first step, or null to check only
+     *     that the steps fit together
+     */
+    @Schema(description = "A chain of steps to check")
+    public record Request(List<PipelineStep> steps, ToolFormat sourceFormat) {
+
+        public List<PipelineStep> steps() {
+            return steps == null ? List.of() : steps;
+        }
+    }
+
+    /**
+     * @param valid false when at least one diagnostic is an error, meaning the chain cannot run
+     * @param diagnostics every problem found, each against the step that cannot run
+     */
+    @Schema(description = "Whether a chain of steps can run, and what is wrong with it if not")
+    public record Response(boolean valid, List<ToolDiagnostic> diagnostics) {}
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/EmailController.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/EmailController.java
index 213e08ea0c..8145531dc0 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/EmailController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/EmailController.java
@@ -46,9 +46,7 @@ public class EmailController {
             resourceWeight = ResourceWeight.SMALL_WEIGHT)
     @Operation(
             summary = "Send an email with an attachment",
-            description =
-                    "This endpoint sends an email with an attachment. Input:PDF"
-                            + " Output:Success/Failure Type:MISO")
+            description = "This endpoint sends an email with an attachment.")
     public ResponseEntity<String> sendEmailWithAttachment(@Valid @ModelAttribute Email email) {
         log.info("Sending email to: {}", email.toString());
         try {
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/SigningSessionController.java b/app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/SigningSessionController.java
index 2464b6ed62..4e95707217 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/SigningSessionController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/SigningSessionController.java
@@ -93,7 +93,7 @@ public class SigningSessionController {
             summary = "Create a shared signing session",
             description =
                     "Starts a collaboration session, distributes share links, and optionally notifies"
-                            + " participants. Input:PDF Output:JSON Type:SISO")
+                            + " participants.")
     public ResponseEntity<?> createSession(
             @org.springframework.web.bind.annotation.RequestParam("file")
                     org.springframework.web.multipart.MultipartFile file,
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
index c29c96a8ed..56e5b2d9cd 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
@@ -2,7 +2,11 @@ package stirling.software.proprietary.policy.controller;
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyList;
 import static org.mockito.ArgumentMatchers.eq;
 import static org.mockito.Mockito.doThrow;
 import static org.mockito.Mockito.never;
@@ -31,6 +35,7 @@ import stirling.software.common.cluster.JobStore;
 import stirling.software.common.cluster.inprocess.InProcessJobStore;
 import stirling.software.common.model.ApplicationProperties;
 import stirling.software.common.model.job.JobResponse;
+import stirling.software.common.model.tool.ToolDiagnostic;
 import stirling.software.common.service.JobOwnershipService;
 import stirling.software.common.util.TempFileManager;
 import stirling.software.proprietary.policy.config.PolicyAccessGuard;
@@ -44,6 +49,7 @@ import stirling.software.proprietary.policy.ledger.ProcessedLedger;
 import stirling.software.proprietary.policy.model.OutputSpec;
 import stirling.software.proprietary.policy.model.PipelineDefinition;
 import stirling.software.proprietary.policy.model.PipelineStep;
+import stirling.software.proprietary.policy.model.PipelineValidation;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.PolicyRun;
 import stirling.software.proprietary.policy.model.PolicyRunView;
@@ -113,6 +119,59 @@ class PolicyControllerTest {
                         jobStore);
     }
 
+    @Test
+    void validateReportsAChainThatCannotRun() {
+        // Delegates to PolicyValidator so the endpoint and the save-time gate cannot disagree.
+        ToolDiagnostic mismatch =
+                ToolDiagnostic.error(
+                        1, ToolDiagnostic.FORMAT_MISMATCH, "rotate cannot take an image");
+        when(policyValidator.diagnoseChain(anyList(), any())).thenReturn(List.of(mismatch));
+
+        PipelineValidation.Response response =
+                controller.validateChain(
+                        new PipelineValidation.Request(
+                                List.of(
+                                        new PipelineStep(
+                                                "/api/v1/misc/extract-images", Map.of(), Map.of()),
+                                        new PipelineStep(
+                                                "/api/v1/general/rotate-pdf", Map.of(), Map.of())),
+                                null));
+
+        assertFalse(response.valid());
+        assertEquals(List.of(mismatch), response.diagnostics());
+    }
+
+    @Test
+    void validateReportsAWorkableChainAsValid() {
+        // Warnings and fan-out notes come back without making the chain invalid.
+        ToolDiagnostic fanOut =
+                ToolDiagnostic.info(1, ToolDiagnostic.FAN_OUT, "runs once per file");
+        when(policyValidator.diagnoseChain(anyList(), any())).thenReturn(List.of(fanOut));
+
+        PipelineValidation.Response response =
+                controller.validateChain(
+                        new PipelineValidation.Request(
+                                List.of(
+                                        new PipelineStep(
+                                                "/api/v1/general/split-pages", Map.of(), Map.of()),
+                                        new PipelineStep(
+                                                "/api/v1/general/rotate-pdf", Map.of(), Map.of())),
+                                null));
+
+        assertTrue(response.valid());
+        assertEquals(List.of(fanOut), response.diagnostics());
+    }
+
+    @Test
+    void validateToleratesNoSteps() {
+        when(policyValidator.diagnoseChain(anyList(), any())).thenReturn(List.of());
+
+        PipelineValidation.Response response =
+                controller.validateChain(new PipelineValidation.Request(null, null));
+
+        assertTrue(response.valid());
+    }
+
     private static stirling.software.proprietary.policy.trigger.PolicyTrigger trigger(
             String type, boolean requiresSource, java.util.Set<String> sourceTypes) {
         return new stirling.software.proprietary.policy.trigger.PolicyTrigger() {
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyRunRoutesTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyRunRoutesTest.java
index f1be12ae1d..e7081ec8ca 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyRunRoutesTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyRunRoutesTest.java
@@ -72,7 +72,9 @@ class PolicyRunRoutesTest {
     private static final Map<String, Boolean> EXPECTED_ID_EXECUTES =
             Map.of(
                     "/api/v1/policies/{policyId}/run", true,
-                    "/api/v1/policies/{policyId}/trigger", true);
+                    "/api/v1/policies/{policyId}/trigger", true,
+                    // Checks whether a chain could run; runs and stores nothing, so not billable.
+                    "/api/v1/policies/validate", false);
 
     /**
      * Fail-safe: this matcher is the sole billing gate, so an unmatched execute route would run
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java
index 6440cefa4a..074adc2b36 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyValidatorTest.java
@@ -10,6 +10,7 @@ import static org.mockito.Mockito.when;
 
 import java.util.List;
 import java.util.Map;
+import java.util.Set;
 
 import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
@@ -17,10 +18,16 @@ import org.junit.jupiter.api.extension.ExtendWith;
 import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 
+import stirling.software.common.model.tool.ToolArity;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIOSource;
+import stirling.software.common.model.tool.ToolIOSpec;
+import stirling.software.common.service.ToolChainValidator;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.model.InputSpec;
 import stirling.software.proprietary.policy.model.OutputSpec;
 import stirling.software.proprietary.policy.model.PipelineInput;
+import stirling.software.proprietary.policy.model.PipelineStep;
 import stirling.software.proprietary.policy.model.Policy;
 import stirling.software.proprietary.policy.model.TriggerConfig;
 import stirling.software.proprietary.policy.output.PolicyOutputSink;
@@ -49,7 +56,8 @@ class PolicyValidatorTest {
                         List.of(inputSource),
                         List.of(outputSink),
                         List.of(stepValidator),
-                        sourceStore);
+                        sourceStore,
+                        new ToolChainValidator(path -> java.util.Optional.empty()));
     }
 
     @Test
@@ -123,6 +131,75 @@ class PolicyValidatorTest {
         assertTrue(ex.getMessage().contains("unknown trigger type"));
     }
 
+    @Test
+    void rejectsAChainWhoseStepsCannotRunOnEachOther() {
+        // Extracting images then rotating them saves fine today and fails part-way through the
+        // first run, which for a scheduled policy can be long after the mistake was made.
+        // The chain is checked before the output, so the sink is never reached here.
+        when(inputSource.supports(any())).thenReturn(true);
+        PolicyValidator strict = validatorWith(IMAGE_THEN_PDF);
+
+        IllegalArgumentException ex =
+                assertThrows(
+                        IllegalArgumentException.class,
+                        () -> strict.validate(withSteps(EXTRACT_IMAGES, ROTATE)));
+
+        assertTrue(ex.getMessage().contains("cannot run in this order"), ex.getMessage());
+    }
+
+    @Test
+    void acceptsAChainWhoseStepsLineUp() {
+        when(inputSource.supports(any())).thenReturn(true);
+        when(outputSink.supports(any())).thenReturn(true);
+        PolicyValidator strict = validatorWith(IMAGE_THEN_PDF);
+
+        strict.validate(withSteps(ROTATE, ROTATE));
+
+        verify(outputSink).validate(any());
+    }
+
+    private static final String EXTRACT_IMAGES = "/api/v1/misc/extract-images";
+    private static final String ROTATE = "/api/v1/general/rotate-pdf";
+
+    private static final ToolIOSource IMAGE_THEN_PDF =
+            ToolIOSource.of(
+                    Map.of(
+                            EXTRACT_IMAGES,
+                            new ToolIOSpec(
+                                    Set.of(ToolFormat.PDF),
+                                    ToolFormat.IMAGE,
+                                    ToolArity.SIMO,
+                                    List.of()),
+                            ROTATE,
+                            new ToolIOSpec(
+                                    Set.of(ToolFormat.PDF),
+                                    ToolFormat.PDF,
+                                    ToolArity.SISO,
+                                    List.of())));
+
+    private PolicyValidator validatorWith(ToolIOSource toolIO) {
+        return new PolicyValidator(
+                List.of(trigger),
+                List.of(inputSource),
+                List.of(outputSink),
+                List.of(stepValidator),
+                sourceStore,
+                new ToolChainValidator(toolIO));
+    }
+
+    private Policy withSteps(String... operations) {
+        return new Policy(
+                "p1",
+                "p",
+                "owner",
+                true,
+                List.of(PipelineInput.manual(folderSourceId())),
+                java.util.Arrays.stream(operations)
+                        .map(op -> new PipelineStep(op, Map.of(), Map.of()))
+                        .toList(),
+                OutputSpec.inline());
+    }
+
     // The one-input/one-output caps are a product decision, not a model limit: the lists stay so
     // multiple can be supported later, but saving more than one of either is rejected today.
 
diff --git a/engine/scripts/generate_tool_models.py b/engine/scripts/generate_tool_models.py
index dfe461fcca..2a5139a263 100644
--- a/engine/scripts/generate_tool_models.py
+++ b/engine/scripts/generate_tool_models.py
@@ -1,8 +1,9 @@
 #!/usr/bin/env python3
-"""Generate Python tool models from the Java backend's OpenAPI spec (SwaggerDoc.json).
+"""Generate the Python files derived from the Java OpenAPI spec (SwaggerDoc.json).
 
-Uses datamodel-code-generator to convert OpenAPI request schemas to Pydantic models.
-Run via:
+tool_models.py holds each tool's request model; tool_io.py holds what it accepts and produces,
+from ``@ToolIO`` via the ``x-stirling-io`` extension. One pass over one spec, so the two cannot
+drift apart. Run via:
     task engine:tool-models
 """
 
@@ -10,6 +11,7 @@ from __future__ import annotations
 
 import argparse
 import json
+import subprocess
 from collections.abc import Iterable
 from dataclasses import dataclass
 from pathlib import Path
@@ -24,8 +26,69 @@ from referencing.jsonschema import DRAFT202012
 # Fields inherited from PDFFile base class - not tool parameters.
 BASE_CLASS_FIELDS = frozenset({"fileInput", "fileId"})
 
+IO_EXTENSION = "x-stirling-io"
+IO_VOCABULARY_EXTENSION = "x-stirling-io-vocabulary"
+
 _ENGINE_ROOT = Path(__file__).resolve().parents[1]
 
+_IO_TEMPLATE = '''# AUTO-GENERATED FILE. DO NOT EDIT.
+# Generated by scripts/generate_tool_models.py from the Java OpenAPI spec (SwaggerDoc.json).
+# Regenerate with: task engine:tool-models
+"""What each tool endpoint accepts and produces, so a planned chain can be checked before it
+is run. Declared in Java with ``@ToolIO``; see ``stirling.services.tool_io_compat`` for the
+compatibility rules that read this table."""
+
+from enum import StrEnum
+
+from pydantic import Field
+
+from stirling.models.base import ApiModel
+from stirling.models.tool_models import ToolEndpoint
+
+
+class ToolFormat(StrEnum):
+    """The kind of file a tool consumes or produces. ``ANY`` accepts or produces anything;
+    ``NONE`` means no file at all, such as a report or a status."""
+
+{formats}
+
+
+class ToolArity(StrEnum):
+    """How many files go in and come out (Single/Multiple In, Single/Multiple Out). A
+    multi-output tool returns its results zipped, and the caller unpacks them."""
+
+{arities}
+
+
+class ToolIOWhen(ApiModel):
+    """One condition on a request parameter, guarding a :class:`ToolIOCase`."""
+
+    param: str
+    matches: list[str]
+
+
+class ToolIOCase(ApiModel):
+    """An output that applies when every condition in ``when`` holds."""
+
+    when: list[ToolIOWhen]
+    produces: ToolFormat
+    arity: ToolArity
+
+
+class ToolIOSpec(ApiModel):
+    """What one endpoint accepts and produces."""
+
+    accepts: list[ToolFormat]
+    produces: ToolFormat
+    arity: ToolArity
+    cases: list[ToolIOCase] = Field(default_factory=list)
+
+
+TOOL_IO: dict[ToolEndpoint, ToolIOSpec] = {{
+{declarations}
+}}
+'''
+
 _FILE_HEADER = (
     "# AUTO-GENERATED FILE. DO NOT EDIT.\n"
     "# Generated by scripts/generate_tool_models.py from Java OpenAPI spec (SwaggerDoc.json).\n"
@@ -281,7 +344,7 @@ def generate_models_code(combined_schema: dict[str, Any]) -> str:
     return str(code or "")
 
 
-def write_output(out_path: Path, tools: list[ToolSpec], models_code: str) -> None:
+def render_models(tools: list[ToolSpec], models_code: str) -> str:
     union_lines = ["type ParamToolModel = ("]
     for i, tool in enumerate(tools):
         prefix = "    | " if i > 0 else "    "
@@ -301,30 +364,119 @@ def write_output(out_path: Path, tools: list[ToolSpec], models_code: str) -> Non
     ]
 
     parts = [models_code, "\n", *union_lines, "\n", *enum_lines, "\n", *ops_lines, ""]
-    out_path.write_text("\n".join(parts), encoding="utf-8")
+    return "\n".join(parts)
+
+
+def collect_tool_io(spec: dict[str, Any]) -> dict[str, dict[str, Any]]:
+    """The ``x-stirling-io`` declaration for every endpoint that carries one."""
+    table: dict[str, dict[str, Any]] = {}
+    for path, path_item in sorted(spec.get("paths", {}).items()):
+        for operation in path_item.values():
+            if isinstance(operation, dict) and operation.get(IO_EXTENSION):
+                table[path] = operation[IO_EXTENSION]
+    return table
+
+
+def _render_when(condition: dict[str, Any]) -> str:
+    return f"ToolIOWhen(param={json.dumps(condition['param'])}, matches={json.dumps(condition['matches'])})"
+
+
+def _render_case(case: dict[str, Any]) -> str:
+    when = ", ".join(_render_when(condition) for condition in case["when"])
+    return f"ToolIOCase(when=[{when}], produces=ToolFormat.{case['produces']}, arity=ToolArity.{case['arity']})"
+
+
+def _render_spec(declaration: dict[str, Any]) -> str:
+    """One declaration as a constructor call, so a bad spec is a type error at import rather
+    than a validation failure at first use."""
+    accepts = ", ".join(f"ToolFormat.{f}" for f in declaration["accepts"])
+    parts = [
+        f"accepts=[{accepts}]",
+        f"produces=ToolFormat.{declaration['produces']}",
+        f"arity=ToolArity.{declaration['arity']}",
+    ]
+    cases = declaration.get("cases")
+    if cases:
+        parts.append("cases=[" + ", ".join(_render_case(case) for case in cases) + "]")
+    return f"ToolIOSpec({', '.join(parts)})"
+
+
+def _members(values: list[str]) -> str:
+    return "\n".join(f'    {value} = "{value}"' for value in values)
+
+
+def render_tool_io(spec: dict[str, Any], tools: list[ToolSpec]) -> str:
+    """Keyed by ``ToolEndpoint`` so the endpoint strings live in one place and lookups are checked.
+
+    Declarations outside the enum - the filters, and the introspection endpoints the agent never
+    plans - are dropped.
+    """
+    by_path = {tool.path: tool.enum_name for tool in tools}
+    table = {path: d for path, d in collect_tool_io(spec).items() if path in by_path}
+    if not table:
+        raise SystemExit(
+            f"No {IO_EXTENSION} declarations in the spec. The backend publishes these from @ToolIO; "
+            "regenerate the spec with 'task backend:swagger'."
+        )
+    # Published separately: deriving the enums from the declarations present would shrink them
+    # whenever an endpoint is disabled in a build.
+    vocabulary = spec.get(IO_VOCABULARY_EXTENSION)
+    if not vocabulary:
+        raise SystemExit(f"No {IO_VOCABULARY_EXTENSION} in the spec; regenerate it from a current backend.")
+
+    rendered = _IO_TEMPLATE.format(
+        formats=_members(vocabulary["formats"]),
+        arities=_members(vocabulary["arities"]),
+        declarations="\n".join(
+            f"    ToolEndpoint.{by_path[path]}: {_render_spec(declaration)},"
+            for path, declaration in sorted(table.items())
+        ),
+    )
+    # Formatted before writing so --check compares like for like.
+    return subprocess.run(
+        ["ruff", "format", "--stdin-filename", "tool_io.py", "-"],
+        input=rendered,
+        capture_output=True,
+        text=True,
+        check=True,
+        cwd=_ENGINE_ROOT,
+    ).stdout
+
+
+def write_or_check(out_path: Path, rendered: str, check: bool) -> None:
+    """In check mode, fail when the committed file is out of date."""
+    if check:
+        current = out_path.read_text(encoding="utf-8") if out_path.exists() else ""
+        if current != rendered:
+            raise SystemExit(f"{out_path} is out of date. Run 'task engine:tool-models' and commit the result.")
+        return
+    out_path.write_text(rendered, encoding="utf-8")
 
 
 def main() -> None:
-    parser = argparse.ArgumentParser(description="Generate Python tool models from Java OpenAPI spec")
+    parser = argparse.ArgumentParser(description="Generate the Python files derived from the Java OpenAPI spec")
     parser.add_argument("--spec", required=True, help="Path to SwaggerDoc.json")
     parser.add_argument("--output", required=True, help="Path to output tool_models.py")
+    parser.add_argument("--io-output", required=True, help="Path to output tool_io.py")
+    parser.add_argument("--check", action="store_true", help="Fail if a committed file is out of date")
     args = parser.parse_args()
 
     spec_path = Path(args.spec)
     if not spec_path.exists():
-        raise SystemExit(f"OpenAPI spec not found at {spec_path}\nRun 'task engine:tool-models' to generate it.")
-    output_path = Path(args.output)
+        raise SystemExit(f"OpenAPI spec not found at {spec_path}\nRun 'task backend:swagger' to generate it.")
 
     with open(spec_path, encoding="utf-8") as f:
         spec = json.load(f)
 
     result = ToolDiscovery(spec).discover()
-    models_code = generate_models_code(result.combined_schema)
-    write_output(output_path, result.tools, models_code)
 
-    print(f"Generated {len(result.tools)} tool models from {spec_path.name}")
-    for tool in result.tools:
-        print(f"  {tool.enum_name}: {tool.path} -> {tool.class_name}")
+    io_table = render_tool_io(spec, result.tools)
+    write_or_check(Path(args.io_output), io_table, args.check)
+    print(f"{'Up to date' if args.check else 'Generated'}: {len(result.tools)} tool I/O declarations")
+
+    models_code = generate_models_code(result.combined_schema)
+    write_or_check(Path(args.output), render_models(result.tools, models_code), args.check)
+    print(f"{'Up to date' if args.check else 'Generated'}: {len(result.tools)} tool models from {spec_path.name}")
 
 
 if __name__ == "__main__":
diff --git a/engine/src/stirling/agents/pdf_edit.py b/engine/src/stirling/agents/pdf_edit.py
index cdc4fea4f7..c46fdb9f24 100644
--- a/engine/src/stirling/agents/pdf_edit.py
+++ b/engine/src/stirling/agents/pdf_edit.py
@@ -27,7 +27,7 @@ from stirling.contracts import (
 )
 from stirling.logging import Pretty
 from stirling.models import OPERATIONS, ApiModel, ParamToolModel, ToolEndpoint
-from stirling.services import AppRuntime
+from stirling.services import AppRuntime, ToolChainStep, blocking, validate_tool_chain
 
 logger = logging.getLogger(__name__)
 
@@ -209,25 +209,42 @@ class PdfEditAgent:
         supported_operations, unavailable_operations = self._classify_operations(request)
         if not supported_operations:
             return EditCannotDoResponse(reason="No PDF edit operations are available on this server.")
-        selection = await self._select_plan(
-            request, supported_operations, unavailable_operations, allow_need_content=allow_need_content
-        )
-        if isinstance(selection, EditClarificationRequest | EditCannotDoResponse):
-            logger.info("[pdf-edit] selection -> %s: %s", selection.outcome, Pretty(selection))
-            return selection
-        if isinstance(selection, PdfEditNeedContentSelection):
-            logger.info("[pdf-edit] selection -> need_content: %s", selection.reason)
-            return self._build_need_content_response(selection, request)
-        enabled = set(supported_operations)
-        unsupported = [op for op in selection.operations if op not in enabled]
-        if unsupported:
-            logger.warning("[pdf-edit] plan referenced unavailable operations: %s", [op.name for op in unsupported])
-            return EditCannotDoResponse(
-                reason=(
-                    "The following operations are not available on this server "
-                    "(either disabled by the administrator or not installed): "
-                    + ", ".join(op.name for op in unsupported)
+        # One retry, told exactly which transition fails. Cheaper than carrying the whole
+        # compatibility matrix in the prompt.
+        repair_note = ""
+        for attempt in range(2):
+            selection = await self._select_plan(
+                request,
+                supported_operations,
+                unavailable_operations,
+                allow_need_content=allow_need_content,
+                repair_note=repair_note,
+            )
+            if isinstance(selection, EditClarificationRequest | EditCannotDoResponse):
+                logger.info("[pdf-edit] selection -> %s: %s", selection.outcome, Pretty(selection))
+                return selection
+            if isinstance(selection, PdfEditNeedContentSelection):
+                logger.info("[pdf-edit] selection -> need_content: %s", selection.reason)
+                return self._build_need_content_response(selection, request)
+            enabled = set(supported_operations)
+            unsupported = [op for op in selection.operations if op not in enabled]
+            if unsupported:
+                logger.warning("[pdf-edit] plan referenced unavailable operations: %s", [op.name for op in unsupported])
+                return EditCannotDoResponse(
+                    reason=(
+                        "The following operations are not available on this server "
+                        "(either disabled by the administrator or not installed): "
+                        + ", ".join(op.name for op in unsupported)
+                    )
                 )
+            problems = self._chain_problems(selection.operations)
+            if not problems:
+                break
+            logger.warning("[pdf-edit] plan rejected on attempt %d: %s", attempt + 1, problems)
+            repair_note = problems
+        else:
+            return EditCannotDoResponse(
+                reason=("No workable order of the available operations achieves this: " + repair_note)
             )
         logger.info("[pdf-edit] plan: %s", [op.name for op in selection.operations])
         steps: list[ToolOperationStep] = []
@@ -257,6 +274,7 @@ class PdfEditAgent:
         unavailable_operations: Iterable[ToolEndpoint],
         *,
         allow_need_content: bool = True,
+        repair_note: str = "",
     ) -> PdfEditPlanOutput:
         can_request_content = allow_need_content and not has_page_text(request.page_text)
         agent = self._build_selection_agent(
@@ -264,7 +282,9 @@ class PdfEditAgent:
             unavailable_operations,
             allow_need_content=can_request_content,
         )
-        return await agent.select(self._build_selection_prompt(request, supported_operations, unavailable_operations))
+        return await agent.select(
+            self._build_selection_prompt(request, supported_operations, unavailable_operations, repair_note)
+        )
 
     def _build_selection_agent(
         self,
@@ -311,7 +331,18 @@ class PdfEditAgent:
         request: PdfEditRequest,
         supported_operations: Iterable[ToolEndpoint],
         unavailable_operations: Iterable[ToolEndpoint],
+        repair_note: str = "",
     ) -> str:
+        repair_line = (
+            f"A previous attempt planned operations in an order that cannot run: {repair_note}\n"
+            "If running them in a different order still gives the user what they asked for, "
+            "return that plan. If it would not - reordering changes the result, or no order "
+            "works - return cannot_do and say plainly which step cannot accept the previous "
+            "step's output. This is the one case where cannot_do is right even though some "
+            "order of these operations would run.\n"
+            if repair_note
+            else ""
+        )
         unavailable_line = (
             "Unavailable operations (exist but not currently usable): "
             f"{self._get_operations_prompt(unavailable_operations)}\n"
@@ -324,6 +355,7 @@ class PdfEditAgent:
             f"Files: {format_file_names(request.files)}\n"
             f"Supported operations:\n{self._get_supported_operations_prompt(supported_operations)}\n"
             f"{unavailable_line}"
+            f"{repair_line}"
             f"Extracted page text:\n{format_page_text(request.page_text)}"
         )
 
@@ -353,6 +385,20 @@ class PdfEditAgent:
         unavailable = [op for op in OPERATIONS if op not in enabled_set and op not in self._AGENT_HIDDEN_ENDPOINTS]
         return supported, unavailable
 
+    @staticmethod
+    def _chain_problems(operations: Iterable[ToolEndpoint]) -> str:
+        """Why this ordering cannot run, or empty if it can.
+
+        Only errors count: parameters are not chosen yet, so a conditional output merely warns and
+        acting on that would reject plans that are fine once configured.
+        """
+        diagnostics = validate_tool_chain([ToolChainStep(operation=op) for op in operations])
+        errors = blocking(diagnostics)
+        if not errors:
+            return ""
+        steps = list(operations)
+        return "; ".join(f"step {d.step_index + 1} ({steps[d.step_index].name}) {d.message}" for d in errors)
+
     @staticmethod
     def _get_operations_prompt(operations: Iterable[ToolEndpoint]) -> str:
         return ", ".join(f"{op.name} ({op.value})" for op in operations)
diff --git a/engine/src/stirling/models/tool_io.py b/engine/src/stirling/models/tool_io.py
new file mode 100644
index 0000000000..8c95be59a1
--- /dev/null
+++ b/engine/src/stirling/models/tool_io.py
@@ -0,0 +1,261 @@
+# AUTO-GENERATED FILE. DO NOT EDIT.
+# Generated by scripts/generate_tool_models.py from the Java OpenAPI spec (SwaggerDoc.json).
+# Regenerate with: task engine:tool-models
+"""What each tool endpoint accepts and produces, so a planned chain can be checked before it
+is run. Declared in Java with ``@ToolIO``; see ``stirling.services.tool_io_compat`` for the
+compatibility rules that read this table."""
+
+from enum import StrEnum
+
+from pydantic import Field
+
+from stirling.models.base import ApiModel
+from stirling.models.tool_models import ToolEndpoint
+
+
+class ToolFormat(StrEnum):
+    """The kind of file a tool consumes or produces. ``ANY`` accepts or produces anything;
+    ``NONE`` means no file at all, such as a report or a status."""
+
+    PDF = "PDF"
+    PDF_ENCRYPTED = "PDF_ENCRYPTED"
+    IMAGE = "IMAGE"
+    ZIP = "ZIP"
+    WORD = "WORD"
+    PPT = "PPT"
+    EXCEL = "EXCEL"
+    CSV = "CSV"
+    HTML = "HTML"
+    XML = "XML"
+    JSON = "JSON"
+    TEXT = "TEXT"
+    MARKDOWN = "MARKDOWN"
+    JAVASCRIPT = "JAVASCRIPT"
+    EBOOK = "EBOOK"
+    EMAIL = "EMAIL"
+    POSTSCRIPT = "POSTSCRIPT"
+    PCL = "PCL"
+    XPS = "XPS"
+    VIDEO = "VIDEO"
+    CBZ = "CBZ"
+    CBR = "CBR"
+    ANY = "ANY"
+    NONE = "NONE"
+
+
+class ToolArity(StrEnum):
+    """How many files go in and come out (Single/Multiple In, Single/Multiple Out). A
+    multi-output tool returns its results zipped, and the caller unpacks them."""
+
+    SISO = "SISO"
+    SIMO = "SIMO"
+    MISO = "MISO"
+    MIMO = "MIMO"
+
+
+class ToolIOWhen(ApiModel):
+    """One condition on a request parameter, guarding a :class:`ToolIOCase`."""
+
+    param: str
+    matches: list[str]
+
+
+class ToolIOCase(ApiModel):
+    """An output that applies when every condition in ``when`` holds."""
+
+    when: list[ToolIOWhen]
+    produces: ToolFormat
+    arity: ToolArity
+
+
+class ToolIOSpec(ApiModel):
+    """What one endpoint accepts and produces."""
+
+    accepts: list[ToolFormat]
+    produces: ToolFormat
+    arity: ToolArity
+    cases: list[ToolIOCase] = Field(default_factory=list)
+
+
+TOOL_IO: dict[ToolEndpoint, ToolIOSpec] = {
+    ToolEndpoint.CBR_TO_PDF: ToolIOSpec(accepts=[ToolFormat.CBR], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.CBZ_TO_PDF: ToolIOSpec(accepts=[ToolFormat.CBZ], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.EBOOK_TO_PDF: ToolIOSpec(accepts=[ToolFormat.EBOOK], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.EML_TO_PDF: ToolIOSpec(accepts=[ToolFormat.EMAIL], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.FILE_TO_PDF: ToolIOSpec(accepts=[ToolFormat.ANY], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.HTML_TO_PDF: ToolIOSpec(
+        accepts=[ToolFormat.HTML, ToolFormat.ZIP], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.IMG_TO_PDF: ToolIOSpec(accepts=[ToolFormat.IMAGE], produces=ToolFormat.PDF, arity=ToolArity.MISO),
+    ToolEndpoint.MARKDOWN_TO_PDF: ToolIOSpec(
+        accepts=[ToolFormat.MARKDOWN, ToolFormat.ZIP], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.PDF_TO_CBR: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.CBR, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_CBZ: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.CBZ, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_CSV: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.CSV, arity=ToolArity.SIMO),
+    ToolEndpoint.PDF_TO_EPUB: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.EBOOK, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_HTML: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.ZIP, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_IMG: ToolIOSpec(
+        accepts=[ToolFormat.PDF],
+        produces=ToolFormat.IMAGE,
+        arity=ToolArity.SIMO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="singleOrMultiple", matches=["single"])],
+                produces=ToolFormat.IMAGE,
+                arity=ToolArity.SISO,
+            )
+        ],
+    ),
+    ToolEndpoint.PDF_TO_MARKDOWN: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.MARKDOWN, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.PDF_TO_PDFA: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_PRESENTATION: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PPT, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.PDF_TO_TEXT: ToolIOSpec(
+        accepts=[ToolFormat.PDF],
+        produces=ToolFormat.TEXT,
+        arity=ToolArity.SISO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="outputFormat", matches=["rtf"])], produces=ToolFormat.WORD, arity=ToolArity.SISO
+            )
+        ],
+    ),
+    ToolEndpoint.PDF_TO_VECTOR: ToolIOSpec(
+        accepts=[ToolFormat.PDF],
+        produces=ToolFormat.IMAGE,
+        arity=ToolArity.SISO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="outputFormat", matches=["ps"])],
+                produces=ToolFormat.POSTSCRIPT,
+                arity=ToolArity.SISO,
+            ),
+            ToolIOCase(
+                when=[ToolIOWhen(param="outputFormat", matches=["pcl"])], produces=ToolFormat.PCL, arity=ToolArity.SISO
+            ),
+            ToolIOCase(
+                when=[ToolIOWhen(param="outputFormat", matches=["xps"])], produces=ToolFormat.XPS, arity=ToolArity.SISO
+            ),
+        ],
+    ),
+    ToolEndpoint.PDF_TO_WORD: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.WORD, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_XLSX: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.EXCEL, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_XML: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.XML, arity=ToolArity.SISO),
+    ToolEndpoint.SVG_TO_PDF: ToolIOSpec(
+        accepts=[ToolFormat.IMAGE],
+        produces=ToolFormat.PDF,
+        arity=ToolArity.MIMO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="combineIntoSinglePdf", matches=["true"])],
+                produces=ToolFormat.PDF,
+                arity=ToolArity.MISO,
+            )
+        ],
+    ),
+    ToolEndpoint.URL_TO_PDF: ToolIOSpec(accepts=[ToolFormat.NONE], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.VECTOR_TO_PDF: ToolIOSpec(
+        accepts=[ToolFormat.POSTSCRIPT], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.BOOKLET_IMPOSITION: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.CROP: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.EDIT_TABLE_OF_CONTENTS: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.EDIT_TEXT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.MERGE_PDFS: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.MISO),
+    ToolEndpoint.MULTI_PAGE_LAYOUT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.PDF_TO_SINGLE_PAGE: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.REARRANGE_PAGES: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REMOVE_IMAGE_PDF: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REMOVE_PAGES: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.ROTATE_PDF: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.SCALE_PAGES: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.SPLIT_BY_SIZE_OR_COUNT: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO
+    ),
+    ToolEndpoint.SPLIT_FOR_POSTER_PRINT: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO
+    ),
+    ToolEndpoint.SPLIT_PAGES: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO),
+    ToolEndpoint.SPLIT_PDF_BY_CHAPTERS: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO
+    ),
+    ToolEndpoint.SPLIT_PDF_BY_SECTIONS: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO
+    ),
+    ToolEndpoint.ADD_COMMENTS: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.ADD_PAGE_NUMBERS: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.ADD_STAMP: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.AUTO_RENAME: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.AUTO_ROTATE_PDF: ToolIOSpec(
+        accepts=[ToolFormat.PDF],
+        produces=ToolFormat.PDF,
+        arity=ToolArity.SISO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="dryRun", matches=["true"])], produces=ToolFormat.JSON, arity=ToolArity.SISO
+            )
+        ],
+    ),
+    ToolEndpoint.AUTO_SPLIT_PDF: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO),
+    ToolEndpoint.COMPRESS_PDF: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.DELETE_ATTACHMENT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.EXTRACT_ATTACHMENTS: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.ZIP, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.EXTRACT_IMAGE_SCANS: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.IMAGE, arity=ToolArity.SIMO
+    ),
+    ToolEndpoint.EXTRACT_IMAGES: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.IMAGE, arity=ToolArity.SIMO),
+    ToolEndpoint.FLATTEN: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.OCR_PDF: ToolIOSpec(
+        accepts=[ToolFormat.PDF],
+        produces=ToolFormat.PDF,
+        arity=ToolArity.SISO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="sidecar", matches=["true"])], produces=ToolFormat.ZIP, arity=ToolArity.SISO
+            )
+        ],
+    ),
+    ToolEndpoint.REMOVE_BLANKS: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SIMO),
+    ToolEndpoint.RENAME_ATTACHMENT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REPAIR: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REPLACE_INVERT_PDF: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.SCANNER_EFFECT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.UNLOCK_PDF_FORMS: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.UPDATE_METADATA: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.ADD_PASSWORD: ToolIOSpec(
+        accepts=[ToolFormat.PDF],
+        produces=ToolFormat.PDF_ENCRYPTED,
+        arity=ToolArity.SISO,
+        cases=[
+            ToolIOCase(
+                when=[ToolIOWhen(param="password", matches=[""]), ToolIOWhen(param="ownerPassword", matches=[""])],
+                produces=ToolFormat.PDF,
+                arity=ToolArity.SISO,
+            )
+        ],
+    ),
+    ToolEndpoint.ADD_WATERMARK: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.AUTO_REDACT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REDACT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REDACT_EXECUTE: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REMOVE_CERT_SIGN: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.REMOVE_PASSWORD: ToolIOSpec(
+        accepts=[ToolFormat.PDF, ToolFormat.PDF_ENCRYPTED], produces=ToolFormat.PDF, arity=ToolArity.SISO
+    ),
+    ToolEndpoint.SANITIZE_PDF: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.TIMESTAMP_PDF: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+}
diff --git a/engine/src/stirling/services/__init__.py b/engine/src/stirling/services/__init__.py
index 1db54243f8..4488409142 100644
--- a/engine/src/stirling/services/__init__.py
+++ b/engine/src/stirling/services/__init__.py
@@ -7,11 +7,15 @@ from .progress import (
     set_progress_emitter,
 )
 from .runtime import AppRuntime, build_model_settings, build_runtime
+from .tool_io_compat import ToolChainStep, ToolDiagnostic, blocking, validate_tool_chain
 from .tracking import current_user_id, require_current_user_id, setup_posthog_tracking
 
 __all__ = [
     "AppRuntime",
     "ProgressEmitter",
+    "ToolChainStep",
+    "ToolDiagnostic",
+    "blocking",
     "build_model_settings",
     "build_runtime",
     "current_user_id",
@@ -20,4 +24,5 @@ __all__ = [
     "reset_progress_emitter",
     "set_progress_emitter",
     "setup_posthog_tracking",
+    "validate_tool_chain",
 ]
diff --git a/engine/src/stirling/services/tool_io_compat.py b/engine/src/stirling/services/tool_io_compat.py
new file mode 100644
index 0000000000..b2bb5566e9
--- /dev/null
+++ b/engine/src/stirling/services/tool_io_compat.py
@@ -0,0 +1,216 @@
+"""Whether a chain of tool steps can actually run, decided from the generated tool I/O table
+rather than by running it.
+
+The same rules exist in the backend (``ToolChainValidator``) and the frontend
+(``utils/toolIoCompat.ts``). They are duplicated on purpose: the frontend checks a pipeline on
+every keystroke, and the engine checks a plan before spending a call per step filling in its
+parameters. ``testing/tool-io-cases.json`` runs against all three, so a rule that changes in one
+place and not the others fails there.
+"""
+
+from __future__ import annotations
+
+from enum import StrEnum
+
+from pydantic import Field
+
+from stirling.models.base import ApiModel
+from stirling.models.tool_io import TOOL_IO, ToolArity, ToolFormat, ToolIOSpec
+from stirling.models.tool_models import ToolEndpoint
+
+
+class DiagnosticSeverity(StrEnum):
+    """Only ERROR means the chain cannot run as configured."""
+
+    ERROR = "ERROR"
+    WARN = "WARN"
+    INFO = "INFO"
+
+
+class DiagnosticCode(StrEnum):
+    """Matching the backend and frontend implementations."""
+
+    UNDECLARED = "undeclared-operation"
+    FORMAT_MISMATCH = "format-mismatch"
+    OUTPUT_UNCERTAIN = "output-uncertain"
+    SOURCE_MISMATCH = "source-mismatch"
+    FAN_OUT = "fan-out"
+    FAN_IN = "fan-in"
+
+
+class ToolDiagnostic(ApiModel):
+    """One problem, against the step that cannot run."""
+
+    step_index: int
+    severity: DiagnosticSeverity
+    code: DiagnosticCode
+    message: str
+
+
+class ToolChainStep(ApiModel):
+    """``parameters`` is only used to resolve an output that depends on one."""
+
+    operation: ToolEndpoint
+    parameters: dict[str, object] = Field(default_factory=dict)
+
+
+class ResolvedOutput(ApiModel):
+    """``certain`` is false when a case reads a parameter we cannot see."""
+
+    format: ToolFormat
+    arity: ToolArity
+    certain: bool
+
+
+def _is_multi_input(arity: ToolArity) -> bool:
+    return arity in (ToolArity.MISO, ToolArity.MIMO)
+
+
+def _is_multi_output(arity: ToolArity) -> bool:
+    return arity in (ToolArity.SIMO, ToolArity.MIMO)
+
+
+def _accepts_format(spec: ToolIOSpec, candidate: ToolFormat) -> bool:
+    return candidate == ToolFormat.ANY or ToolFormat.ANY in spec.accepts or candidate in spec.accepts
+
+
+def _normalise(value: object) -> str:
+    """Both sides of a condition go through this, so a declaration's casing cannot matter."""
+    return "" if value is None else str(value).strip().lower()
+
+
+def resolve_output(spec: ToolIOSpec, parameters: dict[str, object] | None) -> ResolvedOutput:
+    """First case whose conditions all hold wins.
+
+    If none match but one reads a parameter we cannot see, the declared output comes back
+    uncertain: an unseen value might have picked another branch.
+    """
+    saw_unknown_param = False
+    for rule in spec.cases:
+        all_hold = True
+        for condition in rule.when:
+            if parameters is None or condition.param not in parameters:
+                saw_unknown_param = True
+                all_hold = False
+                continue
+            normalised = _normalise(parameters[condition.param])
+            all_hold = all_hold and any(_normalise(m) == normalised for m in condition.matches)
+        if all_hold:
+            return ResolvedOutput(format=rule.produces, arity=rule.arity, certain=True)
+    return ResolvedOutput(format=spec.produces, arity=spec.arity, certain=not saw_unknown_param)
+
+
+def validate_tool_chain(
+    steps: list[ToolChainStep],
+    *,
+    source_format: ToolFormat | None = None,
+    tool_io: dict[ToolEndpoint, ToolIOSpec] | None = None,
+) -> list[ToolDiagnostic]:
+    """Every problem with the chain, against the step that cannot run."""
+    table = TOOL_IO if tool_io is None else tool_io
+    diagnostics: list[ToolDiagnostic] = []
+    carried: ResolvedOutput | None = None
+
+    for index, step in enumerate(steps):
+        spec = table.get(step.operation)
+        if spec is None:
+            diagnostics.append(
+                ToolDiagnostic(
+                    step_index=index,
+                    severity=DiagnosticSeverity.WARN,
+                    code=DiagnosticCode.UNDECLARED,
+                    message=(
+                        f"{step.operation} does not declare what it accepts or produces, "
+                        "so the rest of the chain cannot be checked."
+                    ),
+                )
+            )
+            # Nothing is known past an undeclared step.
+            carried = None
+            continue
+
+        # Only the first step is handed the pipeline's input. Every later step is handed the
+        # previous step's output, which is simply unknown once an undeclared step intervened -
+        # checking it against the input again would judge it on a format it never receives.
+        if index == 0:
+            if source_format is not None and not _accepts_format(spec, source_format):
+                diagnostics.append(
+                    ToolDiagnostic(
+                        step_index=index,
+                        severity=DiagnosticSeverity.ERROR,
+                        code=DiagnosticCode.SOURCE_MISMATCH,
+                        message=(f"{step.operation} accepts {_describe(spec)} but the input is {source_format}."),
+                    )
+                )
+        elif carried is not None:
+            diagnostics.extend(_check_transition(index, step, spec, carried))
+        carried = resolve_output(spec, step.parameters or None)
+
+    return diagnostics
+
+
+def _check_transition(
+    index: int, step: ToolChainStep, spec: ToolIOSpec, previous: ResolvedOutput
+) -> list[ToolDiagnostic]:
+    if previous.format == ToolFormat.NONE:
+        return [
+            ToolDiagnostic(
+                step_index=index,
+                severity=DiagnosticSeverity.ERROR,
+                code=DiagnosticCode.FORMAT_MISMATCH,
+                message=(
+                    f"The previous step returns a report rather than a file, so {step.operation} has nothing to run on."
+                ),
+            )
+        ]
+
+    if not _accepts_format(spec, previous.format):
+        message = f"{step.operation} accepts {_describe(spec)} but the previous step produces {previous.format}."
+        # Unresolved output: may yet be fine once the step is configured.
+        return [
+            ToolDiagnostic(
+                step_index=index,
+                severity=DiagnosticSeverity.ERROR if previous.certain else DiagnosticSeverity.WARN,
+                code=DiagnosticCode.FORMAT_MISMATCH if previous.certain else DiagnosticCode.OUTPUT_UNCERTAIN,
+                message=message,
+            )
+        ]
+
+    if not previous.certain:
+        return [
+            ToolDiagnostic(
+                step_index=index,
+                severity=DiagnosticSeverity.WARN,
+                code=DiagnosticCode.OUTPUT_UNCERTAIN,
+                message=(
+                    "The previous step's output depends on how it is configured, "
+                    f"so {step.operation} may not be able to run."
+                ),
+            )
+        ]
+
+    if _is_multi_output(previous.arity):
+        fan_in = _is_multi_input(spec.arity)
+        return [
+            ToolDiagnostic(
+                step_index=index,
+                severity=DiagnosticSeverity.INFO,
+                code=DiagnosticCode.FAN_IN if fan_in else DiagnosticCode.FAN_OUT,
+                message=(
+                    f"{step.operation} combines every file the previous step produced."
+                    if fan_in
+                    else f"{step.operation} runs once for each file the previous step produced."
+                ),
+            )
+        ]
+
+    return []
+
+
+def _describe(spec: ToolIOSpec) -> str:
+    return " or ".join(sorted(f.value for f in spec.accepts))
+
+
+def blocking(diagnostics: list[ToolDiagnostic]) -> list[ToolDiagnostic]:
+    """The diagnostics that mean the chain cannot run."""
+    return [d for d in diagnostics if d.severity == DiagnosticSeverity.ERROR]
diff --git a/engine/tests/test_pdf_edit_agent.py b/engine/tests/test_pdf_edit_agent.py
index 0ba5eca6c9..15ca39369c 100644
--- a/engine/tests/test_pdf_edit_agent.py
+++ b/engine/tests/test_pdf_edit_agent.py
@@ -28,6 +28,7 @@ from stirling.models.tool_models import (
     EditTextParams,
     FlattenParams,
     RotatePdfParams,
+    SplitPagesParams,
     ToolEndpoint,
 )
 from stirling.services.runtime import AppRuntime
@@ -76,9 +77,13 @@ class StubPdfEditAgent(PdfEditAgent):
         runtime: AppRuntime,
         selection: PdfEditPlanOutput,
         parameter_selector: RecordingParameterSelector | PdfEditParameterSelector | None = None,
+        later_selections: list[PdfEditPlanOutput] | None = None,
     ) -> None:
         super().__init__(runtime)
         self.selection = selection
+        # Selections handed out on retry, in order, so a test can drive the repair loop.
+        self.later_selections = list(later_selections or [])
+        self.repair_notes: list[str] = []
         if parameter_selector is not None:
             self.parameter_selector = parameter_selector
 
@@ -96,7 +101,11 @@ class StubPdfEditAgent(PdfEditAgent):
         unavailable_operations: Iterable[ToolEndpoint],
         *,
         allow_need_content: bool = True,
+        repair_note: str = "",
     ) -> PdfEditPlanOutput:
+        self.repair_notes.append(repair_note)
+        if repair_note and self.later_selections:
+            return self.later_selections.pop(0)
         return self.selection
 
 
@@ -128,6 +137,121 @@ async def test_pdf_edit_agent_builds_multi_step_plan(runtime: AppRuntime) -> Non
     assert isinstance(response.steps[1].parameters, FlattenParams)
 
 
+_ANY_SELECTION = PdfEditPlanSelection(operations=[ToolEndpoint.ROTATE_PDF], summary="s", rationale="r")
+
+
+def test_selection_prompt_says_nothing_about_output_formats(runtime: AppRuntime) -> None:
+    # Compatibility is only raised once a plan has actually failed, so the operation list stays
+    # about what each tool does. Leaking format hints here re-inflates an already large prompt.
+    agent = StubPdfEditAgent(runtime, _ANY_SELECTION)
+    prompt = agent._build_selection_prompt(PdfEditRequest(user_message="anything", files=[]), list(OPERATIONS), [])
+    assert "outputs:" not in prompt
+    assert "IMAGE (several files)" not in prompt
+
+
+def test_repair_prompt_offers_reorder_or_telling_the_user(runtime: AppRuntime) -> None:
+    # The model decides which: it has the user's intent, and a reorder that changes the result
+    # is worse than saying it cannot be done.
+    agent = StubPdfEditAgent(runtime, _ANY_SELECTION)
+    prompt = agent._build_selection_prompt(
+        PdfEditRequest(user_message="anything", files=[]),
+        list(OPERATIONS),
+        [],
+        "step 3 (SANITIZE_PDF) accepts PDF but the previous step produces IMAGE.",
+    )
+    assert "SANITIZE_PDF" in prompt
+    assert "different order" in prompt
+    assert "cannot_do" in prompt
+
+
+@pytest.mark.anyio
+async def test_pdf_edit_agent_retries_a_plan_whose_steps_cannot_chain(runtime: AppRuntime) -> None:
+    # Extracting images emits images, which rotate cannot take. The agent should be told exactly
+    # that and get one chance to produce something workable rather than shipping a plan that
+    # would fail part-way through execution.
+    agent = StubPdfEditAgent(
+        runtime,
+        PdfEditPlanSelection(
+            operations=[ToolEndpoint.EXTRACT_IMAGES, ToolEndpoint.ROTATE_PDF],
+            summary="Extract the images, then rotate.",
+            rationale="Initial attempt.",
+        ),
+        later_selections=[
+            PdfEditPlanSelection(
+                operations=[ToolEndpoint.ROTATE_PDF],
+                summary="Rotate the PDF.",
+                rationale="Repaired attempt.",
+            )
+        ],
+        parameter_selector=RecordingParameterSelector(),
+    )
+
+    response = await agent.handle(
+        PdfEditRequest(
+            user_message="Pull out the images and rotate them.",
+            files=[AiFile(id=FileId("scan-id"), name="scan.pdf")],
+        )
+    )
+
+    assert isinstance(response, EditPlanResponse)
+    assert [step.tool for step in response.steps] == [ToolEndpoint.ROTATE_PDF]
+    # First attempt gets no note; the retry is told which transition failed.
+    assert agent.repair_notes[0] == ""
+    assert "ROTATE_PDF" in agent.repair_notes[1]
+
+
+@pytest.mark.anyio
+async def test_pdf_edit_agent_gives_up_when_the_repaired_plan_still_cannot_chain(
+    runtime: AppRuntime,
+) -> None:
+    agent = StubPdfEditAgent(
+        runtime,
+        PdfEditPlanSelection(
+            operations=[ToolEndpoint.EXTRACT_IMAGES, ToolEndpoint.ROTATE_PDF],
+            summary="Extract the images, then rotate.",
+            rationale="Initial attempt.",
+        ),
+    )
+
+    response = await agent.handle(
+        PdfEditRequest(
+            user_message="Pull out the images and rotate them.",
+            files=[AiFile(id=FileId("scan-id"), name="scan.pdf")],
+        )
+    )
+
+    assert isinstance(response, EditCannotDoResponse)
+    assert "No workable order" in response.reason
+    # Exactly one retry, not an unbounded loop.
+    assert len(agent.repair_notes) == 2
+
+
+@pytest.mark.anyio
+async def test_pdf_edit_agent_accepts_a_chain_that_lines_up(runtime: AppRuntime) -> None:
+    agent = StubPdfEditAgent(
+        runtime,
+        PdfEditPlanSelection(
+            operations=[ToolEndpoint.SPLIT_PAGES, ToolEndpoint.ROTATE_PDF],
+            summary="Split then rotate.",
+            rationale="Splitting fans out; rotate runs per file.",
+        ),
+        parameter_selector=RecordingParameterSelector(
+            [SplitPagesParams(page_numbers="all"), RotatePdfParams(angle=Angle(90))]
+        ),
+    )
+
+    response = await agent.handle(
+        PdfEditRequest(
+            user_message="Split the pages and rotate each one.",
+            files=[AiFile(id=FileId("scan-id"), name="scan.pdf")],
+        )
+    )
+
+    # A fan-out is information, not a problem, so no retry.
+    assert isinstance(response, EditPlanResponse)
+    assert agent.repair_notes == [""]
+
+
 @pytest.mark.anyio
 async def test_pdf_edit_agent_passes_previous_steps_to_parameter_selector(runtime: AppRuntime) -> None:
     parameter_selector = RecordingParameterSelector()
diff --git a/engine/tests/test_tool_io_compat.py b/engine/tests/test_tool_io_compat.py
new file mode 100644
index 0000000000..18f9c79801
--- /dev/null
+++ b/engine/tests/test_tool_io_compat.py
@@ -0,0 +1,59 @@
+"""The shared cases in ``testing/tool-io-cases.json``, which all three implementations run."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any
+
+import pytest
+
+from stirling.models.tool_io import ToolFormat, ToolIOSpec
+from stirling.models.tool_models import ToolEndpoint
+from stirling.services.tool_io_compat import (
+    ToolChainStep,
+    ToolDiagnostic,
+    validate_tool_chain,
+)
+
+
+def _cases_file() -> Path:
+    """Shared with the backend and frontend, so it lives at the repo root."""
+    for parent in Path(__file__).resolve().parents:
+        candidate = parent / "testing" / "tool-io-cases.json"
+        if candidate.exists():
+            return candidate
+    raise RuntimeError("testing/tool-io-cases.json not found above the test directory")
+
+
+_DATA: dict[str, Any] = json.loads(_cases_file().read_text())
+_SPECS: dict[str, ToolIOSpec] = {name: ToolIOSpec.model_validate(spec) for name, spec in _DATA["specs"].items()}
+_ENDPOINTS: list[ToolEndpoint] = list(ToolEndpoint)
+
+
+def _summarise(diagnostics: list[ToolDiagnostic]) -> list[str]:
+    """Messages are free text, so compare only the contractual parts."""
+    return [f"{d.step_index}:{d.severity}:{d.code}" for d in diagnostics]
+
+
+@pytest.mark.parametrize("case", _DATA["cases"], ids=lambda c: c["name"])
+def test_shared_cases(case: dict[str, Any]) -> None:
+    table: dict[ToolEndpoint, ToolIOSpec] = {}
+    steps: list[ToolChainStep] = []
+    for index, step in enumerate(case["steps"]):
+        # Distinct endpoints so the same spec can appear twice in a chain. Which ones is
+        # irrelevant: the case supplies its own table, these are just keys.
+        operation = _ENDPOINTS[index]
+        if step.get("spec") is not None:
+            table[operation] = _SPECS[step["spec"]]
+        steps.append(ToolChainStep(operation=operation, parameters=step.get("parameters") or {}))
+
+    source = case.get("sourceFormat")
+    actual = validate_tool_chain(
+        steps,
+        source_format=ToolFormat(source) if source else None,
+        tool_io=table,
+    )
+
+    expected = [f"{e['stepIndex']}:{e['severity']}:{e['code']}" for e in case["expected"]]
+    assert _summarise(actual) == expected, [d.message for d in actual]
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 3b94a878ac..25a2e4bafa 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -7740,6 +7740,7 @@ newPipeline = "New pipeline"
 [portal.pipelines.builder]
 addStep = "Add tool"
 back = "Back to pipelines"
+cannotFollow = "Can't take {{produced}}"
 chooseAccount = "Choose an account"
 chooseDestination = "Choose a destination"
 chooseOperation = "Choose what this step does"
@@ -7759,6 +7760,7 @@ searchTools = "Search tools"
 selectToolBody = "Add a tool to build your pipeline."
 selectToolTitle = "No tools yet"
 sendToSystem = "Send to another system"
+stepsIncompatible = "These steps can't run on what their prior step produces: {{tools}}."
 stepsNeedSetup = "These steps still need setting up before saving: {{tools}}."
 toolSettings = "Tool settings"
 unknownStep = "Unrecognized operation, kept as-is."
@@ -7767,6 +7769,14 @@ unsavedTitle = "Unsaved changes"
 uploadUnsupported = "Uploaded files aren't supported in pipelines yet, so these steps can't be saved: {{tools}}."
 usesDefaults = "Runs with default settings"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combines every file from the previous step"
+fan-out = "Runs once per file from the previous step"
+format-mismatch = "Needs {{accepts}}, but the previous step produces {{produced}}"
+output-uncertain = "May not run: the previous step's output depends on how it's set up"
+source-mismatch = "Needs {{accepts}}, but this pipeline's input is {{produced}}"
+undeclared-operation = "Can't check what this step accepts"
+
 [portal.pipelines.composer]
 addTool = "Add tool"
 cancel = "Cancel"
@@ -10631,6 +10641,32 @@ selectFilesHint = "Select files in Active Files to run this tool"
 singleFileScope = "Only applying to: {{fileName}}"
 viewerMode = "Switch to the file editor to add multiple files."
 
+[toolFormat]
+ANY = "any file"
+CBR = "a comic book archive (CBR)"
+CBZ = "a comic book archive (CBZ)"
+CSV = "a CSV file"
+EBOOK = "an ebook"
+EMAIL = "an email"
+EXCEL = "a spreadsheet"
+HTML = "a web page"
+IMAGE = "images"
+JAVASCRIPT = "a JavaScript file"
+JSON = "a JSON file"
+MARKDOWN = "a Markdown file"
+NONE = "no file"
+PCL = "a PCL print file"
+PDF = "a PDF"
+PDF_ENCRYPTED = "a password-protected PDF"
+POSTSCRIPT = "a PostScript file"
+PPT = "a presentation"
+TEXT = "a text file"
+VIDEO = "a video"
+WORD = "a Word document"
+XML = "an XML file"
+XPS = "an XPS document"
+ZIP = "a ZIP archive"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Back to all tools"
diff --git a/frontend/editor/scripts/generate-tool-api-types.mts b/frontend/editor/scripts/generate-tool-api-types.mts
index f12572620a..a805f2dfa3 100644
--- a/frontend/editor/scripts/generate-tool-api-types.mts
+++ b/frontend/editor/scripts/generate-tool-api-types.mts
@@ -1,7 +1,9 @@
 /**
- * Generates the committed frontend tool API types (toolApiTypes.ts) from the
- * Java backend's OpenAPI spec, so the frontend's request shapes stay in step
- * with the backend.
+ * Generates the committed frontend files derived from the Java OpenAPI spec:
+ * toolApiTypes.ts (each tool's request shape) and toolIO.ts (what it accepts and
+ * produces, from `@ToolIO` via the `x-stirling-io` extension).
+ *
+ * One pass over one spec, so the two cannot drift apart.
  */
 
 import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
@@ -10,14 +12,20 @@ import { parseArgs } from "node:util";
 import { compile, type JSONSchema } from "json-schema-to-typescript";
 import * as prettier from "prettier";
 
-// The API namespaces whose endpoints are real, callable tools. `/api/v1/filter/`
-// (pipeline-only) and `/api/v1/ai/tools/` (not in the spec) are intentionally
-// excluded. Extend this list when other namespaces become tools.
+// The API namespaces whose endpoints a pipeline can reference. `/api/v1/ai/tools/`
+// is absent from the spec, so it cannot appear here. Extend this list when other
+// namespaces become tools.
+//
+// `/api/v1/filter/` and `/api/v1/integration/` are included even though neither is a
+// user-facing tool: a stored pipeline can contain one, and ToolEndpoint keys the I/O
+// table, so leaving them out would stop a chain being checked past such a step.
 const ALLOWED_PATH_PREFIXES = [
   "/api/v1/general/",
   "/api/v1/misc/",
   "/api/v1/security/",
   "/api/v1/convert/",
+  "/api/v1/filter/",
+  "/api/v1/integration/",
 ];
 
 // File plumbing, not user parameters: `fileInput` is the uploaded document and
@@ -38,12 +46,21 @@ const FILE_WRAPPER_COMPONENTS = new Set([
 
 const COMPONENT_REF_PREFIX = "#/components/schemas/";
 
-const FILE_HEADER = [
-  "// AUTO-GENERATED FILE. DO NOT EDIT.",
-  "// Generated by editor/scripts/generate-tool-api-types.mts from the Java OpenAPI spec",
-  "// (SwaggerDoc.json). Regenerate with: task frontend:tool-models",
+const IO_EXTENSION = "x-stirling-io";
+const IO_VOCABULARY_EXTENSION = "x-stirling-io-vocabulary";
+
+function fileHeader(...extra: string[]): string {
+  return [
+    "// AUTO-GENERATED FILE. DO NOT EDIT.",
+    "// Generated by editor/scripts/generate-tool-api-types.mts from the Java OpenAPI spec",
+    "// (SwaggerDoc.json). Regenerate with: task frontend:tool-models",
+    ...extra,
+  ].join("\n");
+}
+
+const FILE_HEADER = fileHeader(
   "// Tools that take only a file input have no parameters; their model is Record<string, never>.",
-].join("\n");
+);
 
 type Json = Record<string, unknown>;
 
@@ -170,23 +187,164 @@ function computeRequired(schema: Json, properties: Json): string[] {
   });
 }
 
+/**
+ * The `x-stirling-io` declaration for every endpoint that carries one, path-sorted.
+ *
+ * Restricted to `endpoints`, the paths that become {@link ToolEndpoint}: the table is typed by
+ * that union, so a declaration outside it would not type-check. `dropped` is reported rather
+ * than discarded silently, since a tool losing its declaration this way is invisible otherwise.
+ */
+function collectToolIO(
+  paths: Json,
+  endpoints: Set<string>,
+): { table: Record<string, unknown>; dropped: string[] } {
+  const table: Record<string, unknown> = {};
+  const dropped: string[] = [];
+  for (const path of Object.keys(paths).sort()) {
+    const pathItem = paths[path];
+    if (!isObject(pathItem)) continue;
+    for (const operation of Object.values(pathItem)) {
+      if (isObject(operation) && operation[IO_EXTENSION]) {
+        if (endpoints.has(path)) table[path] = operation[IO_EXTENSION];
+        else dropped.push(path);
+      }
+    }
+  }
+  return { table, dropped };
+}
+
+async function renderToolIO(
+  spec: Json,
+  table: Record<string, unknown>,
+  outputPath: string,
+): Promise<string> {
+  if (Object.keys(table).length === 0) {
+    throw new Error(
+      `No ${IO_EXTENSION} declarations in the spec. The backend publishes these from @ToolIO; regenerate with 'task backend:swagger'.`,
+    );
+  }
+  // Published separately: deriving the unions from the declarations present would shrink them
+  // whenever an endpoint is disabled in a build.
+  const vocabulary = spec[IO_VOCABULARY_EXTENSION];
+  if (!isObject(vocabulary)) {
+    throw new Error(
+      `No ${IO_VOCABULARY_EXTENSION} in the spec; regenerate it from a current backend.`,
+    );
+  }
+  const union = (values: string[]) =>
+    values.map((v) => JSON.stringify(v)).join(" | ");
+  const formats = vocabulary.formats as string[];
+
+  const body = `${fileHeader()}
+
+/**
+ * What each tool endpoint accepts and produces, so a chain can be checked while it is being
+ * edited rather than by running it. Declared in Java with \`@ToolIO\`; see
+ * \`utils/toolIOCompat\` for the compatibility rules that read this table.
+ */
+
+import { type ToolEndpoint } from "@app/types/toolApiTypes";
+
+/** The kind of file a tool consumes or produces. \`ANY\` accepts or produces anything; \`NONE\` means no file at all. */
+export type ToolFormat = ${union(formats)};
+
+/** Every format, for iteration. */
+export const TOOL_FORMATS = ${JSON.stringify(formats)} as const satisfies readonly ToolFormat[];
+
+/** How many files go in and come out. A multi-output tool returns its results zipped, and the caller unpacks them. */
+export type ToolArity = ${union(vocabulary.arities as string[])};
+
+/** One condition on a request parameter, guarding a {@link ToolIOCase}. */
+export interface ToolIOWhen {
+  param: string;
+  matches: string[];
+}
+
+/** An output that applies when every condition in \`when\` holds. */
+export interface ToolIOCase {
+  when: ToolIOWhen[];
+  produces: ToolFormat;
+  arity: ToolArity;
+}
+
+/** What one endpoint accepts and produces. */
+export interface ToolIOSpec {
+  accepts: ToolFormat[];
+  produces: ToolFormat;
+  arity: ToolArity;
+  cases?: ToolIOCase[];
+}
+
+/**
+ * What each endpoint accepts and produces, keyed by {@link ToolEndpoint} so the paths live in
+ * exactly one place. Partial: endpoints that manage a session, a device or a stored resource
+ * rather than transform a document declare nothing.
+ */
+export type ToolIOTable = Partial<Record<ToolEndpoint, ToolIOSpec>>;
+
+export const TOOL_IO: ToolIOTable = ${JSON.stringify(table)};
+
+/** The declaration for an endpoint, or undefined when it declares none. */
+export function toolIOFor(
+  operation: string,
+  table: ToolIOTable = TOOL_IO,
+): ToolIOSpec | undefined {
+  // The table's own keys are the valid set, so a hasOwn guard is the narrowing.
+  return Object.hasOwn(table, operation)
+    ? table[operation as ToolEndpoint]
+    : undefined;
+}
+`;
+
+  const prettierConfig = await prettier.resolveConfig(outputPath);
+  return prettier.format(body, { ...prettierConfig, parser: "typescript" });
+}
+
+/** In check mode, fail when the committed file is out of date. */
+function writeOrCheck(
+  outputPath: string,
+  formatted: string,
+  check: boolean,
+  task: string,
+): void {
+  if (check) {
+    let current = "";
+    try {
+      current = readFileSync(outputPath, "utf-8");
+    } catch {
+      // Missing file counts as out of date.
+    }
+    if (current !== formatted) {
+      throw new Error(
+        `${outputPath} is out of date. Run '${task}' and commit the result.`,
+      );
+    }
+    return;
+  }
+  mkdirSync(dirname(outputPath), { recursive: true });
+  writeFileSync(outputPath, formatted, "utf-8");
+}
+
 async function main(): Promise<void> {
   const { values } = parseArgs({
     options: {
       spec: { type: "string" },
       output: { type: "string" },
+      "io-output": { type: "string" },
       check: { type: "boolean", default: false },
     },
   });
-  if (!values.spec || !values.output) {
+  if (!values.spec || !values.output || !values["io-output"]) {
     throw new Error(
-      "Usage: generate-tool-api-types.mts --spec <SwaggerDoc.json> --output <file.ts> [--check]",
+      "Usage: generate-tool-api-types.mts --spec <SwaggerDoc.json> --output <file.ts> --io-output <file.ts> [--check]",
     );
   }
   const specPath = resolve(values.spec);
   const outputPath = resolve(values.output);
+  const ioOutputPath = resolve(values["io-output"]);
 
   const spec = JSON.parse(readFileSync(specPath, "utf-8")) as Json;
+
   const paths = isObject(spec.paths) ? spec.paths : {};
   const components =
     isObject(spec.components) && isObject(spec.components.schemas)
@@ -267,6 +425,25 @@ async function main(): Promise<void> {
     tools.push({ path, className });
   }
 
+  const { table: ioDeclarations, dropped } = collectToolIO(
+    paths,
+    new Set(tools.map((tool) => tool.path)),
+  );
+  if (dropped.length > 0) {
+    console.warn(
+      `Dropped ${dropped.length} @ToolIO declaration(s) on paths that are not tool endpoints. Add the namespace to ALLOWED_PATH_PREFIXES if a pipeline can contain these steps:\n  ${dropped.join("\n  ")}`,
+    );
+  }
+  writeOrCheck(
+    ioOutputPath,
+    await renderToolIO(spec, ioDeclarations, ioOutputPath),
+    values.check ?? false,
+    "task frontend:tool-models",
+  );
+  console.log(
+    `${values.check ? "Up to date" : "Generated"}: ${Object.keys(ioDeclarations).length} tool I/O declarations.`,
+  );
+
   // Transitively inline every referenced component into `definitions`, rewriting its refs too.
   const queue = [...pendingComponents];
   while (queue.length > 0) {
@@ -368,26 +545,11 @@ async function compileAndWrite(
     parser: "typescript",
   });
 
-  if (check) {
-    let current = "";
-    try {
-      current = readFileSync(outputPath, "utf-8");
-    } catch {
-      // Missing file counts as out of date.
-    }
-    if (current !== formatted) {
-      throw new Error(
-        `${outputPath} is out of date. Run 'task frontend:tool-models' and commit the result.`,
-      );
-    }
-    console.log(`Up to date: ${tools.length} tool endpoints.`);
-    return;
-  }
-
-  mkdirSync(dirname(outputPath), { recursive: true });
-  writeFileSync(outputPath, formatted, "utf-8");
-  console.log(`Generated ${tools.length} tool endpoints -> ${outputPath}`);
-  if (skipped.length > 0) {
+  writeOrCheck(outputPath, formatted, check, "task frontend:tool-models");
+  console.log(
+    `${check ? "Up to date" : "Generated"}: ${tools.length} tool endpoints.`,
+  );
+  if (!check && skipped.length > 0) {
     console.log(
       `Skipped ${skipped.length} POST endpoint(s) with no request body: ${skipped.join(", ")}`,
     );
diff --git a/frontend/editor/src/core/types/toolApiTypes.ts b/frontend/editor/src/core/types/toolApiTypes.ts
index af7339d936..bf498eb450 100644
--- a/frontend/editor/src/core/types/toolApiTypes.ts
+++ b/frontend/editor/src/core/types/toolApiTypes.ts
@@ -276,6 +276,16 @@ export interface BookletImpositionRequest {
    */
   spineLocation?: "LEFT" | "RIGHT";
 }
+export interface ContainsTextRequest {
+  /**
+   * The pages to select, Supports ranges (e.g., '1,3,5-9'), or 'all' or functions in the format 'an+b' where 'a' is the multiplier of the page number 'n', and 'b' is a constant (e.g., '2n+1', '3n', '6n-5')
+   */
+  pageNumbers?: string;
+  /**
+   * The text to check for
+   */
+  text?: string;
+}
 export interface ConvertCbrToPdfRequest {
   /**
    * Optimize the output PDF for ebook reading using Ghostscript
@@ -495,6 +505,16 @@ export interface ExtractImageScansRequest {
    */
   tolerance?: number;
 }
+export interface FileSizeRequest {
+  /**
+   * The comparison type, accepts Greater, Equal, Less than
+   */
+  comparator: "Greater" | "Equal" | "Less";
+  /**
+   * Size of the file in bytes
+   */
+  fileSize?: number;
+}
 export interface FlattenRequest {
   /**
    * True to flatten only the forms, false to flatten full PDF (Convert page to image)
@@ -517,6 +537,33 @@ export interface HTMLToPdfRequest {
    */
   zoom?: number;
 }
+export interface IntegrationExternalApiCallRequest {
+  bodyMode?: string;
+  bodyTemplate?: string;
+  connectionId: string;
+  fields?: string;
+  fileFieldName?: string;
+  headers?: string;
+  includeContext?: boolean;
+  includeFile?: boolean;
+  method?: string;
+  path?: string;
+  requireTrue?: string;
+  responseMode?: string;
+  responseSelect?: string;
+  resultUrlHeader?: string;
+  resultUrlPath?: string;
+}
+export interface IntegrationPurviewApplyLabelRequest {
+  connectionId: string;
+  contentBits?: number;
+  labelId: string;
+  labelName?: string;
+  method?: string;
+}
+export interface IntegrationPurviewReadLabelRequest {
+  connectionId: string;
+}
 export type ListAttachmentsRequest = Record<string, never>;
 export interface ManualRedactPdfRequest {
   /**
@@ -772,6 +819,16 @@ export interface OverlayPdfsRequest {
    */
   overlayPosition: 0 | 1;
 }
+export interface PDFComparisonAndCount {
+  /**
+   * The comparison type, accepts Greater, Equal, Less than
+   */
+  comparator: "Greater" | "Equal" | "Less";
+  /**
+   * Count
+   */
+  pageCount?: number;
+}
 export interface PDFExtractImagesRequest {
   /**
    * The output image format e.g., 'png', 'jpeg', or 'gif'
@@ -791,6 +848,35 @@ export interface PDFWithPageNums {
    */
   pageNumbers?: string;
 }
+export interface PageRotationRequest {
+  /**
+   * The comparison type, accepts Greater, Equal, Less than
+   */
+  comparator: "Greater" | "Equal" | "Less";
+  /**
+   * Rotation in degrees
+   */
+  rotation?: number;
+}
+export interface PageSizeRequest {
+  /**
+   * The comparison type, accepts Greater, Equal, Less than
+   */
+  comparator: "Greater" | "Equal" | "Less";
+  /**
+   * Standard Page Size
+   */
+  standardPageSize?:
+    | "A0"
+    | "A1"
+    | "A2"
+    | "A3"
+    | "A4"
+    | "A5"
+    | "A6"
+    | "LETTER"
+    | "LEGAL";
+}
 export interface PdfToPdfARequest {
   /**
    * The output format type (PDF/A or PDF/X)
@@ -1383,6 +1469,12 @@ export type ToolEndpoint =
   | "/api/v1/convert/text-editor/pdf"
   | "/api/v1/convert/url/pdf"
   | "/api/v1/convert/vector/pdf"
+  | "/api/v1/filter/filter-contains-image"
+  | "/api/v1/filter/filter-contains-text"
+  | "/api/v1/filter/filter-file-size"
+  | "/api/v1/filter/filter-page-count"
+  | "/api/v1/filter/filter-page-rotation"
+  | "/api/v1/filter/filter-page-size"
   | "/api/v1/general/booklet-imposition"
   | "/api/v1/general/crop"
   | "/api/v1/general/edit-table-of-contents"
@@ -1402,6 +1494,9 @@ export type ToolEndpoint =
   | "/api/v1/general/split-pages"
   | "/api/v1/general/split-pdf-by-chapters"
   | "/api/v1/general/split-pdf-by-sections"
+  | "/api/v1/integration/external-api-call"
+  | "/api/v1/integration/purview-apply-label"
+  | "/api/v1/integration/purview-read-label"
   | "/api/v1/misc/add-attachments"
   | "/api/v1/misc/add-comments"
   | "/api/v1/misc/add-image"
@@ -1474,6 +1569,12 @@ export interface ToolApiParams {
   "/api/v1/convert/text-editor/pdf": GeneralFile;
   "/api/v1/convert/url/pdf": UrlToPdfRequest;
   "/api/v1/convert/vector/pdf": PdfVectorExportRequest;
+  "/api/v1/filter/filter-contains-image": PDFWithPageNums;
+  "/api/v1/filter/filter-contains-text": ContainsTextRequest;
+  "/api/v1/filter/filter-file-size": FileSizeRequest;
+  "/api/v1/filter/filter-page-count": PDFComparisonAndCount;
+  "/api/v1/filter/filter-page-rotation": PageRotationRequest;
+  "/api/v1/filter/filter-page-size": PageSizeRequest;
   "/api/v1/general/booklet-imposition": BookletImpositionRequest;
   "/api/v1/general/crop": CropPdfForm;
   "/api/v1/general/edit-table-of-contents": EditTableOfContentsRequest;
@@ -1493,6 +1594,9 @@ export interface ToolApiParams {
   "/api/v1/general/split-pages": SplitPagesRequest;
   "/api/v1/general/split-pdf-by-chapters": SplitPdfByChaptersRequest;
   "/api/v1/general/split-pdf-by-sections": SplitPdfBySectionsRequest;
+  "/api/v1/integration/external-api-call": IntegrationExternalApiCallRequest;
+  "/api/v1/integration/purview-apply-label": IntegrationPurviewApplyLabelRequest;
+  "/api/v1/integration/purview-read-label": IntegrationPurviewReadLabelRequest;
   "/api/v1/misc/add-attachments": AddAttachmentRequest;
   "/api/v1/misc/add-comments": AddCommentsRequest;
   "/api/v1/misc/add-image": OverlayImageRequest;
@@ -1566,6 +1670,12 @@ export const TOOL_ENDPOINTS = [
   "/api/v1/convert/text-editor/pdf",
   "/api/v1/convert/url/pdf",
   "/api/v1/convert/vector/pdf",
+  "/api/v1/filter/filter-contains-image",
+  "/api/v1/filter/filter-contains-text",
+  "/api/v1/filter/filter-file-size",
+  "/api/v1/filter/filter-page-count",
+  "/api/v1/filter/filter-page-rotation",
+  "/api/v1/filter/filter-page-size",
   "/api/v1/general/booklet-imposition",
   "/api/v1/general/crop",
   "/api/v1/general/edit-table-of-contents",
@@ -1585,6 +1695,9 @@ export const TOOL_ENDPOINTS = [
   "/api/v1/general/split-pages",
   "/api/v1/general/split-pdf-by-chapters",
   "/api/v1/general/split-pdf-by-sections",
+  "/api/v1/integration/external-api-call",
+  "/api/v1/integration/purview-apply-label",
+  "/api/v1/integration/purview-read-label",
   "/api/v1/misc/add-attachments",
   "/api/v1/misc/add-comments",
   "/api/v1/misc/add-image",
diff --git a/frontend/editor/src/core/types/toolIO.ts b/frontend/editor/src/core/types/toolIO.ts
new file mode 100644
index 0000000000..f8a034dcee
--- /dev/null
+++ b/frontend/editor/src/core/types/toolIO.ts
@@ -0,0 +1,616 @@
+// AUTO-GENERATED FILE. DO NOT EDIT.
+// Generated by editor/scripts/generate-tool-api-types.mts from the Java OpenAPI spec
+// (SwaggerDoc.json). Regenerate with: task frontend:tool-models
+
+/**
+ * What each tool endpoint accepts and produces, so a chain can be checked while it is being
+ * edited rather than by running it. Declared in Java with `@ToolIO`; see
+ * `utils/toolIOCompat` for the compatibility rules that read this table.
+ */
+
+import { type ToolEndpoint } from "@app/types/toolApiTypes";
+
+/** The kind of file a tool consumes or produces. `ANY` accepts or produces anything; `NONE` means no file at all. */
+export type ToolFormat =
+  | "PDF"
+  | "PDF_ENCRYPTED"
+  | "IMAGE"
+  | "ZIP"
+  | "WORD"
+  | "PPT"
+  | "EXCEL"
+  | "CSV"
+  | "HTML"
+  | "XML"
+  | "JSON"
+  | "TEXT"
+  | "MARKDOWN"
+  | "JAVASCRIPT"
+  | "EBOOK"
+  | "EMAIL"
+  | "POSTSCRIPT"
+  | "PCL"
+  | "XPS"
+  | "VIDEO"
+  | "CBZ"
+  | "CBR"
+  | "ANY"
+  | "NONE";
+
+/** Every format, for iteration. */
+export const TOOL_FORMATS = [
+  "PDF",
+  "PDF_ENCRYPTED",
+  "IMAGE",
+  "ZIP",
+  "WORD",
+  "PPT",
+  "EXCEL",
+  "CSV",
+  "HTML",
+  "XML",
+  "JSON",
+  "TEXT",
+  "MARKDOWN",
+  "JAVASCRIPT",
+  "EBOOK",
+  "EMAIL",
+  "POSTSCRIPT",
+  "PCL",
+  "XPS",
+  "VIDEO",
+  "CBZ",
+  "CBR",
+  "ANY",
+  "NONE",
+] as const satisfies readonly ToolFormat[];
+
+/** How many files go in and come out. A multi-output tool returns its results zipped, and the caller unpacks them. */
+export type ToolArity = "SISO" | "SIMO" | "MISO" | "MIMO";
+
+/** One condition on a request parameter, guarding a {@link ToolIOCase}. */
+export interface ToolIOWhen {
+  param: string;
+  matches: string[];
+}
+
+/** An output that applies when every condition in `when` holds. */
+export interface ToolIOCase {
+  when: ToolIOWhen[];
+  produces: ToolFormat;
+  arity: ToolArity;
+}
+
+/** What one endpoint accepts and produces. */
+export interface ToolIOSpec {
+  accepts: ToolFormat[];
+  produces: ToolFormat;
+  arity: ToolArity;
+  cases?: ToolIOCase[];
+}
+
+/**
+ * What each endpoint accepts and produces, keyed by {@link ToolEndpoint} so the paths live in
+ * exactly one place. Partial: endpoints that manage a session, a device or a stored resource
+ * rather than transform a document declare nothing.
+ */
+export type ToolIOTable = Partial<Record<ToolEndpoint, ToolIOSpec>>;
+
+export const TOOL_IO: ToolIOTable = {
+  "/api/v1/convert/cbr/pdf": {
+    accepts: ["CBR"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/cbz/pdf": {
+    accepts: ["CBZ"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/ebook/pdf": {
+    accepts: ["EBOOK"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/eml/pdf": {
+    accepts: ["EMAIL"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/file/pdf": {
+    accepts: ["ANY"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/html/pdf": {
+    accepts: ["HTML", "ZIP"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/img/pdf": {
+    accepts: ["IMAGE"],
+    produces: "PDF",
+    arity: "MISO",
+  },
+  "/api/v1/convert/markdown/pdf": {
+    accepts: ["MARKDOWN", "ZIP"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/cbr": {
+    accepts: ["PDF"],
+    produces: "CBR",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/cbz": {
+    accepts: ["PDF"],
+    produces: "CBZ",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/csv": {
+    accepts: ["PDF"],
+    produces: "CSV",
+    arity: "SIMO",
+  },
+  "/api/v1/convert/pdf/epub": {
+    accepts: ["PDF"],
+    produces: "EBOOK",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/html": {
+    accepts: ["PDF"],
+    produces: "ZIP",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/img": {
+    accepts: ["PDF"],
+    produces: "IMAGE",
+    arity: "SIMO",
+    cases: [
+      {
+        when: [{ param: "singleOrMultiple", matches: ["single"] }],
+        produces: "IMAGE",
+        arity: "SISO",
+      },
+    ],
+  },
+  "/api/v1/convert/pdf/markdown": {
+    accepts: ["PDF"],
+    produces: "MARKDOWN",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/pdfa": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/presentation": {
+    accepts: ["PDF"],
+    produces: "PPT",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/text": {
+    accepts: ["PDF"],
+    produces: "TEXT",
+    arity: "SISO",
+    cases: [
+      {
+        when: [{ param: "outputFormat", matches: ["rtf"] }],
+        produces: "WORD",
+        arity: "SISO",
+      },
+    ],
+  },
+  "/api/v1/convert/pdf/vector": {
+    accepts: ["PDF"],
+    produces: "IMAGE",
+    arity: "SISO",
+    cases: [
+      {
+        when: [{ param: "outputFormat", matches: ["ps"] }],
+        produces: "POSTSCRIPT",
+        arity: "SISO",
+      },
+      {
+        when: [{ param: "outputFormat", matches: ["pcl"] }],
+        produces: "PCL",
+        arity: "SISO",
+      },
+      {
+        when: [{ param: "outputFormat", matches: ["xps"] }],
+        produces: "XPS",
+        arity: "SISO",
+      },
+    ],
+  },
+  "/api/v1/convert/pdf/word": {
+    accepts: ["PDF"],
+    produces: "WORD",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/xlsx": {
+    accepts: ["PDF"],
+    produces: "EXCEL",
+    arity: "SISO",
+  },
+  "/api/v1/convert/pdf/xml": {
+    accepts: ["PDF"],
+    produces: "XML",
+    arity: "SISO",
+  },
+  "/api/v1/convert/svg/pdf": {
+    accepts: ["IMAGE"],
+    produces: "PDF",
+    arity: "MIMO",
+    cases: [
+      {
+        when: [{ param: "combineIntoSinglePdf", matches: ["true"] }],
+        produces: "PDF",
+        arity: "MISO",
+      },
+    ],
+  },
+  "/api/v1/convert/url/pdf": {
+    accepts: ["NONE"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/convert/vector/pdf": {
+    accepts: ["POSTSCRIPT"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/filter/filter-contains-image": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/filter/filter-contains-text": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/filter/filter-file-size": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/filter/filter-page-count": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/filter/filter-page-rotation": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/filter/filter-page-size": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/booklet-imposition": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/crop": { accepts: ["PDF"], produces: "PDF", arity: "SISO" },
+  "/api/v1/general/edit-table-of-contents": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/edit-text": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/extract-bookmarks": {
+    accepts: ["PDF"],
+    produces: "JSON",
+    arity: "SISO",
+  },
+  "/api/v1/general/merge-pdfs": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "MISO",
+  },
+  "/api/v1/general/multi-page-layout": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/overlay-pdfs": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "MISO",
+  },
+  "/api/v1/general/pdf-to-single-page": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/rearrange-pages": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/remove-image-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/remove-pages": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/rotate-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/scale-pages": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/general/split-by-size-or-count": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/general/split-for-poster-print": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/general/split-pages": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/general/split-pdf-by-chapters": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/general/split-pdf-by-sections": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/integration/external-api-call": {
+    accepts: ["ANY"],
+    produces: "ANY",
+    arity: "SISO",
+  },
+  "/api/v1/integration/purview-apply-label": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/integration/purview-read-label": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/add-attachments": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/add-comments": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/add-image": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/add-page-numbers": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/add-stamp": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/auto-rename": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/auto-rotate-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+    cases: [
+      {
+        when: [{ param: "dryRun", matches: ["true"] }],
+        produces: "JSON",
+        arity: "SISO",
+      },
+    ],
+  },
+  "/api/v1/misc/auto-split-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/misc/compress-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/decompress-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/delete-attachment": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/extract-attachments": {
+    accepts: ["PDF"],
+    produces: "ZIP",
+    arity: "SISO",
+  },
+  "/api/v1/misc/extract-image-scans": {
+    accepts: ["PDF"],
+    produces: "IMAGE",
+    arity: "SIMO",
+  },
+  "/api/v1/misc/extract-images": {
+    accepts: ["PDF"],
+    produces: "IMAGE",
+    arity: "SIMO",
+  },
+  "/api/v1/misc/flatten": { accepts: ["PDF"], produces: "PDF", arity: "SISO" },
+  "/api/v1/misc/list-attachments": {
+    accepts: ["PDF"],
+    produces: "JSON",
+    arity: "SISO",
+  },
+  "/api/v1/misc/ocr-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+    cases: [
+      {
+        when: [{ param: "sidecar", matches: ["true"] }],
+        produces: "ZIP",
+        arity: "SISO",
+      },
+    ],
+  },
+  "/api/v1/misc/remove-blanks": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SIMO",
+  },
+  "/api/v1/misc/rename-attachment": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/repair": { accepts: ["PDF"], produces: "PDF", arity: "SISO" },
+  "/api/v1/misc/replace-invert-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/scanner-effect": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/show-javascript": {
+    accepts: ["PDF"],
+    produces: "JAVASCRIPT",
+    arity: "SISO",
+  },
+  "/api/v1/misc/unlock-pdf-forms": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/misc/update-metadata": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/add-password": {
+    accepts: ["PDF"],
+    produces: "PDF_ENCRYPTED",
+    arity: "SISO",
+    cases: [
+      {
+        when: [
+          { param: "password", matches: [""] },
+          { param: "ownerPassword", matches: [""] },
+        ],
+        produces: "PDF",
+        arity: "SISO",
+      },
+    ],
+  },
+  "/api/v1/security/add-watermark": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/auto-redact": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/cert-sign": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/get-info-on-pdf": {
+    accepts: ["PDF"],
+    produces: "JSON",
+    arity: "SISO",
+  },
+  "/api/v1/security/redact": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/redact-execute": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/remove-cert-sign": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/remove-password": {
+    accepts: ["PDF", "PDF_ENCRYPTED"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/sanitize-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/timestamp-pdf": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
+  "/api/v1/security/validate-signature": {
+    accepts: ["PDF"],
+    produces: "JSON",
+    arity: "SISO",
+  },
+  "/api/v1/security/verify-pdf": {
+    accepts: ["PDF"],
+    produces: "JSON",
+    arity: "SISO",
+  },
+};
+
+/** The declaration for an endpoint, or undefined when it declares none. */
+export function toolIOFor(
+  operation: string,
+  table: ToolIOTable = TOOL_IO,
+): ToolIOSpec | undefined {
+  // The table's own keys are the valid set, so a hasOwn guard is the narrowing.
+  return Object.hasOwn(table, operation)
+    ? table[operation as ToolEndpoint]
+    : undefined;
+}
diff --git a/frontend/editor/src/core/utils/toolIOCompat.test.ts b/frontend/editor/src/core/utils/toolIOCompat.test.ts
new file mode 100644
index 0000000000..c0e9d9efa3
--- /dev/null
+++ b/frontend/editor/src/core/utils/toolIOCompat.test.ts
@@ -0,0 +1,74 @@
+/** The shared cases in `testing/tool-io-cases.json`, which all three implementations run. */
+
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { describe, expect, it } from "vitest";
+import {
+  validateToolChain,
+  type ToolChainStep,
+  type ToolDiagnostic,
+} from "@app/utils/toolIOCompat";
+import { type ToolEndpoint, TOOL_ENDPOINTS } from "@app/types/toolApiTypes";
+import {
+  type ToolFormat,
+  type ToolIOSpec,
+  type ToolIOTable,
+} from "@app/types/toolIO";
+
+interface SharedCase {
+  name: string;
+  sourceFormat?: ToolFormat;
+  steps: { spec: string | null; parameters?: Record<string, unknown> }[];
+  expected: { stepIndex: number; severity: string; code: string }[];
+}
+
+/** Shared with the backend and engine, so it lives at the repo root. */
+function casesFile(): string {
+  let current = dirname(new URL(import.meta.url).pathname);
+  for (let i = 0; i < 12; i++) {
+    const candidate = resolve(current, "testing/tool-io-cases.json");
+    try {
+      readFileSync(candidate);
+      return candidate;
+    } catch {
+      current = resolve(current, "..");
+    }
+  }
+  throw new Error(
+    "testing/tool-io-cases.json not found above the test directory",
+  );
+}
+
+const data = JSON.parse(readFileSync(casesFile(), "utf-8")) as {
+  specs: Record<string, ToolIOSpec>;
+  cases: SharedCase[];
+};
+
+/** The detail payload is free, so compare only the contractual parts. */
+function summarise(diagnostics: ToolDiagnostic[]): string[] {
+  return diagnostics.map((d) => `${d.stepIndex}:${d.severity}:${d.code}`);
+}
+
+describe("tool chain conformance", () => {
+  for (const testCase of data.cases) {
+    it(testCase.name, () => {
+      const table: ToolIOTable = {};
+      const steps: ToolChainStep[] = testCase.steps.map((step, index) => {
+        // Distinct endpoints so the same spec can appear twice in a chain. Which ones is
+        // irrelevant: the case supplies its own table, these are just keys.
+        const operation: ToolEndpoint = TOOL_ENDPOINTS[index];
+        if (step.spec !== null) table[operation] = data.specs[step.spec];
+        return { operation, parameters: step.parameters };
+      });
+
+      const actual = validateToolChain(steps, {
+        sourceFormat: testCase.sourceFormat,
+        toolIO: table,
+      });
+
+      expect(summarise(actual)).toEqual(
+        testCase.expected.map((e) => `${e.stepIndex}:${e.severity}:${e.code}`),
+      );
+    });
+  }
+});
diff --git a/frontend/editor/src/core/utils/toolIOCompat.ts b/frontend/editor/src/core/utils/toolIOCompat.ts
new file mode 100644
index 0000000000..a5f9ea0fe9
--- /dev/null
+++ b/frontend/editor/src/core/utils/toolIOCompat.ts
@@ -0,0 +1,265 @@
+/**
+ * Whether a chain of steps can run, from the generated I/O table rather than by running it.
+ *
+ * Duplicated in the backend (`ToolChainValidator`) and the AI engine (`tool_io_compat.py`) on
+ * purpose: this runs on every keystroke, and the desktop build has no cloud backend to ask.
+ * `testing/tool-io-cases.json` pins all three to the same answers.
+ */
+
+import {
+  TOOL_IO,
+  toolIOFor,
+  type ToolArity,
+  type ToolFormat,
+  type ToolIOSpec,
+  type ToolIOTable,
+} from "@app/types/toolIO";
+
+export type ToolDiagnosticSeverity = "ERROR" | "WARN" | "INFO";
+
+/** Stable identifiers so the UI can pick its own wording. */
+export const ToolDiagnosticCode = {
+  /** The step declares no I/O, so nothing past it can be checked. */
+  Undeclared: "undeclared-operation",
+  /** The previous step's output is not a format this step accepts. */
+  FormatMismatch: "format-mismatch",
+  /** The previous step's output depends on a parameter that is not set yet. */
+  OutputUncertain: "output-uncertain",
+  /** The pipeline's input files are not a format the first step accepts. */
+  SourceMismatch: "source-mismatch",
+  /** The previous step emits several files and this one runs once per file. */
+  FanOut: "fan-out",
+  /** The previous step emits several files and this one consumes them together. */
+  FanIn: "fan-in",
+} as const;
+
+export type ToolDiagnosticCode =
+  (typeof ToolDiagnosticCode)[keyof typeof ToolDiagnosticCode];
+
+export interface ToolDiagnostic {
+  stepIndex: number;
+  severity: ToolDiagnosticSeverity;
+  code: ToolDiagnosticCode;
+  /** Interpolation values; the wording lives in the locale files. */
+  detail: {
+    operation: string;
+    accepts?: ToolFormat[];
+    produced?: ToolFormat;
+  };
+}
+
+export interface ToolChainStep {
+  /** A plain string: a stored pipeline may name an endpoint this build does not model. */
+  operation: string;
+  /** Only used to resolve an output that depends on one. */
+  parameters?: Record<string, unknown>;
+}
+
+export interface ToolChainOptions {
+  /** The format entering step one, when known. */
+  sourceFormat?: ToolFormat;
+  toolIO?: ToolIOTable;
+}
+
+interface ResolvedOutput {
+  format: ToolFormat;
+  arity: ToolArity;
+  /** False when a conditional output turns on a parameter we cannot see. */
+  certain: boolean;
+}
+
+function isMultiInput(arity: ToolArity): boolean {
+  return arity === "MISO" || arity === "MIMO";
+}
+
+function isMultiOutput(arity: ToolArity): boolean {
+  return arity === "SIMO" || arity === "MIMO";
+}
+
+function normalise(value: unknown): string {
+  return value === null || value === undefined
+    ? ""
+    : String(value).trim().toLowerCase();
+}
+
+function acceptsFormat(spec: ToolIOSpec, format: ToolFormat): boolean {
+  return (
+    format === "ANY" ||
+    spec.accepts.includes("ANY") ||
+    spec.accepts.includes(format)
+  );
+}
+
+/**
+ * First case whose conditions all hold wins. If none match but one reads a parameter we cannot
+ * see, the declared output comes back uncertain: an unseen value might have picked another branch.
+ */
+export function resolveOutput(
+  spec: ToolIOSpec,
+  parameters?: Record<string, unknown>,
+): ResolvedOutput {
+  let sawUnknownParam = false;
+  for (const rule of spec.cases ?? []) {
+    let allHold = true;
+    for (const condition of rule.when) {
+      if (!parameters || !(condition.param in parameters)) {
+        sawUnknownParam = true;
+        allHold = false;
+        continue;
+      }
+      const value = normalise(parameters[condition.param]);
+      allHold &&= condition.matches.some((match) => normalise(match) === value);
+    }
+    if (allHold) {
+      return { format: rule.produces, arity: rule.arity, certain: true };
+    }
+  }
+  return {
+    format: spec.produces,
+    arity: spec.arity,
+    certain: !sawUnknownParam,
+  };
+}
+
+export function validateToolChain(
+  steps: ToolChainStep[],
+  options: ToolChainOptions = {},
+): ToolDiagnostic[] {
+  const table = options.toolIO ?? TOOL_IO;
+  const diagnostics: ToolDiagnostic[] = [];
+  let carried: ResolvedOutput | null = null;
+
+  steps.forEach((step, index) => {
+    const spec = toolIOFor(step.operation, table);
+    if (!spec) {
+      diagnostics.push({
+        stepIndex: index,
+        severity: "WARN",
+        code: ToolDiagnosticCode.Undeclared,
+        detail: { operation: step.operation },
+      });
+      // Nothing is known past an undeclared step.
+      carried = null;
+      return;
+    }
+
+    // Only the first step is handed the pipeline's input. Every later step is handed the previous
+    // step's output, which is simply unknown once an undeclared step intervened - checking it
+    // against the input again would judge it on a format it never receives.
+    if (index === 0) {
+      if (options.sourceFormat && !acceptsFormat(spec, options.sourceFormat)) {
+        diagnostics.push({
+          stepIndex: index,
+          severity: "ERROR",
+          code: ToolDiagnosticCode.SourceMismatch,
+          detail: {
+            operation: step.operation,
+            accepts: spec.accepts,
+            produced: options.sourceFormat,
+          },
+        });
+      }
+    } else if (carried !== null) {
+      diagnostics.push(...checkTransition(index, step, spec, carried));
+    }
+    carried = resolveOutput(spec, step.parameters);
+  });
+
+  return diagnostics;
+}
+
+function checkTransition(
+  index: number,
+  step: ToolChainStep,
+  spec: ToolIOSpec,
+  previous: ResolvedOutput,
+): ToolDiagnostic[] {
+  const detail = {
+    operation: step.operation,
+    accepts: spec.accepts,
+    produced: previous.format,
+  };
+
+  if (previous.format === "NONE") {
+    return [
+      {
+        stepIndex: index,
+        severity: "ERROR",
+        code: ToolDiagnosticCode.FormatMismatch,
+        detail,
+      },
+    ];
+  }
+
+  if (!acceptsFormat(spec, previous.format)) {
+    return [
+      {
+        stepIndex: index,
+        // Unresolved output: may yet be fine once the step is configured.
+        severity: previous.certain ? "ERROR" : "WARN",
+        code: previous.certain
+          ? ToolDiagnosticCode.FormatMismatch
+          : ToolDiagnosticCode.OutputUncertain,
+        detail,
+      },
+    ];
+  }
+
+  if (!previous.certain) {
+    return [
+      {
+        stepIndex: index,
+        severity: "WARN",
+        code: ToolDiagnosticCode.OutputUncertain,
+        detail,
+      },
+    ];
+  }
+
+  if (isMultiOutput(previous.arity)) {
+    return [
+      {
+        stepIndex: index,
+        severity: "INFO",
+        code: isMultiInput(spec.arity)
+          ? ToolDiagnosticCode.FanIn
+          : ToolDiagnosticCode.FanOut,
+        detail,
+      },
+    ];
+  }
+
+  return [];
+}
+
+/** What a newly appended step would be handed, or undefined when the last step declares nothing. */
+export function chainOutputFormat(
+  steps: ToolChainStep[],
+  toolIO: ToolIOTable = TOOL_IO,
+): ToolFormat | undefined {
+  const last = steps.at(-1);
+  if (!last) return undefined;
+  const spec = toolIOFor(last.operation, toolIO);
+  return spec ? resolveOutput(spec, last.parameters).format : undefined;
+}
+
+/** Unknown operations are not claimed to be a problem. */
+export function toolAcceptsFormat(
+  operation: string,
+  format: ToolFormat,
+  toolIO: ToolIOTable = TOOL_IO,
+): boolean {
+  const spec = toolIOFor(operation, toolIO);
+  return spec ? acceptsFormat(spec, format) : true;
+}
+
+export function hasBlockingDiagnostics(diagnostics: ToolDiagnostic[]): boolean {
+  return diagnostics.some((d) => d.severity === "ERROR");
+}
+
+export function diagnosticsForStep(
+  diagnostics: ToolDiagnostic[],
+  stepIndex: number,
+): ToolDiagnostic[] {
+  return diagnostics.filter((d) => d.stepIndex === stepIndex);
+}
diff --git a/frontend/editor/src/core/utils/toolIOLabels.test.ts b/frontend/editor/src/core/utils/toolIOLabels.test.ts
new file mode 100644
index 0000000000..ac6b4c155b
--- /dev/null
+++ b/frontend/editor/src/core/utils/toolIOLabels.test.ts
@@ -0,0 +1,67 @@
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { describe, expect, it } from "vitest";
+import { TOOL_FORMATS, type ToolFormat } from "@app/types/toolIO";
+import {
+  getToolFormatLabel,
+  getToolFormatListLabel,
+} from "@app/utils/toolIOLabels";
+
+/** The en-US `[toolFormat]` block, read straight from the locale file. */
+function toolFormatLabels(): Record<string, string> {
+  let current = dirname(new URL(import.meta.url).pathname);
+  for (let i = 0; i < 12; i++) {
+    try {
+      const toml = readFileSync(
+        resolve(current, "public/locales/en-US/translation.toml"),
+        "utf-8",
+      );
+      const section = toml.split("\n[toolFormat]\n")[1]?.split("\n[")[0] ?? "";
+      return Object.fromEntries(
+        section
+          .split("\n")
+          .map((line) => /^(\w+) = "(.*)"$/.exec(line.trim()))
+          .filter((m): m is RegExpExecArray => m !== null)
+          .map((m) => [m[1], m[2]]),
+      );
+    } catch {
+      current = resolve(current, "..");
+    }
+  }
+  throw new Error("en-US translation.toml not found above the test directory");
+}
+
+const labels = toolFormatLabels();
+const t = ((key: string) =>
+  labels[key.replace("toolFormat.", "")] ?? key) as never;
+
+describe("tool format labels", () => {
+  it("gives every format a phrase, so no wire value reaches the reader", () => {
+    const missing = TOOL_FORMATS.filter((format) => !labels[format]);
+    expect(missing).toEqual([]);
+  });
+
+  it("never renders the enum name itself", () => {
+    // PDF_ENCRYPTED is the giveaway: a label that still shouts in SCREAMING_SNAKE
+    // is a wire value that escaped into the UI.
+    for (const format of TOOL_FORMATS) {
+      const label = getToolFormatLabel(t, format);
+      expect(label).not.toMatch(/^[A-Z][A-Z_]*$/);
+    }
+  });
+
+  it("names an encrypted PDF in words", () => {
+    expect(getToolFormatLabel(t, "PDF_ENCRYPTED")).toBe(
+      "a password-protected PDF",
+    );
+  });
+
+  it("joins alternatives the way the language does", () => {
+    const formats: ToolFormat[] = ["PDF", "IMAGE"];
+    expect(getToolFormatListLabel(t, "en-US", formats)).toBe("a PDF or images");
+  });
+
+  it("renders a single format without a conjunction", () => {
+    expect(getToolFormatListLabel(t, "en-US", ["PDF"])).toBe("a PDF");
+  });
+});
diff --git a/frontend/editor/src/core/utils/toolIOLabels.ts b/frontend/editor/src/core/utils/toolIOLabels.ts
new file mode 100644
index 0000000000..6a96f5f2f7
--- /dev/null
+++ b/frontend/editor/src/core/utils/toolIOLabels.ts
@@ -0,0 +1,25 @@
+import { type TFunction } from "i18next";
+import { type ToolFormat } from "@app/types/toolIO";
+
+/**
+ * A tool format as a phrase to show someone, not the enum name. `PDF_ENCRYPTED` is a wire value;
+ * the reader sees "a password-protected PDF".
+ */
+export const getToolFormatLabel = (t: TFunction, format: ToolFormat): string =>
+  t(`toolFormat.${format}`);
+
+/**
+ * Several formats as one phrase, joined the way the reader's language joins alternatives:
+ * "a PDF or an image".
+ */
+export function getToolFormatListLabel(
+  t: TFunction,
+  language: string,
+  formats: ToolFormat[],
+): string {
+  const labels = formats.map((format) => getToolFormatLabel(t, format));
+  return new Intl.ListFormat(language, {
+    style: "long",
+    type: "disjunction",
+  }).format(labels);
+}
diff --git a/frontend/editor/src/portal/components/pipelines/ToolPicker.tsx b/frontend/editor/src/portal/components/pipelines/ToolPicker.tsx
index 99395a0ffe..64f8ec7fa0 100644
--- a/frontend/editor/src/portal/components/pipelines/ToolPicker.tsx
+++ b/frontend/editor/src/portal/components/pipelines/ToolPicker.tsx
@@ -7,6 +7,9 @@ import {
   type SubcategoryId,
 } from "@app/data/toolsTaxonomy";
 import { type ExecutableTool } from "@app/hooks/tools/shared/toolAutomation";
+import { toolAcceptsFormat } from "@app/utils/toolIOCompat";
+import { getToolFormatLabel } from "@app/utils/toolIOLabels";
+import { type ToolFormat } from "@app/types/toolIO";
 import {
   searchOperations,
   type StepOperation,
@@ -24,6 +27,12 @@ interface ToolPickerProps {
    */
   operations?: StepOperation[];
   onPickOperation?: (operation: StepOperation) => void;
+  /**
+   * What the step before this one produces, when known. Tools that cannot run on it are marked
+   * rather than hidden: the chain is still editable in any order, and the builder explains the
+   * problem once the step is added.
+   */
+  precedingOutput?: ToolFormat;
 }
 
 /**
@@ -36,6 +45,7 @@ export function ToolPicker({
   onClose,
   operations = [],
   onPickOperation,
+  precedingOutput,
 }: ToolPickerProps) {
   const { t } = useTranslation();
   const [query, setQuery] = useState("");
@@ -114,6 +124,14 @@ export function ToolPicker({
                   <span className="portal-pipelines__picker-name">
                     {tool.name}
                   </span>
+                  {precedingOutput &&
+                  !toolAcceptsFormat(tool.endpoint, precedingOutput) ? (
+                    <span className="portal-pipelines__picker-note">
+                      {t("portal.pipelines.builder.cannotFollow", {
+                        produced: getToolFormatLabel(t, precedingOutput),
+                      })}
+                    </span>
+                  ) : null}
                 </Button>
               ))}
             </div>
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.css b/frontend/editor/src/portal/views/PipelineBuilder.css
index 50a86f7313..128e8d4a1b 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.css
+++ b/frontend/editor/src/portal/views/PipelineBuilder.css
@@ -164,6 +164,19 @@
   color: var(--c-text-subtle);
 }
 
+/* A step that cannot run on what the one before it produces. */
+.portal-builder__step-note--danger {
+  color: var(--c-danger);
+}
+
+/* A picker entry that cannot run on what the chain currently produces. */
+.portal-pipelines__picker-note {
+  margin-left: auto;
+  padding-left: 0.5rem;
+  font-size: 0.6875rem;
+  color: var(--c-text-subtle);
+}
+
 .portal-builder__step-actions {
   display: flex;
   gap: 0.25rem;
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.test.tsx b/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
index 7587953e12..e06025889e 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
@@ -111,7 +111,28 @@ vi.mock("@app/contexts/ToolRegistryContext", () => {
       fromApiParams: (params: Record<string, unknown>) => ({ ...params }),
     },
   } as unknown as ToolRegistryEntry;
-  const allTools = { compress } as unknown as ToolRegistryCatalog["allTools"];
+  // Produces images, so nothing downstream that wants a PDF can follow it.
+  const extractImages = {
+    name: "Extract images",
+    icon: null,
+    component: null,
+    description: "",
+    categoryId: "recommendedTools",
+    subcategoryId: "general",
+    operationConfig: {
+      operationType: "extractImages",
+      toolType: 0,
+      endpoint: "/api/v1/misc/extract-images",
+      defaultParameters: {},
+      buildFormData: () => new FormData(),
+      toApiParams: (params: Record<string, unknown>) => ({ ...params }),
+      fromApiParams: (params: Record<string, unknown>) => ({ ...params }),
+    },
+  } as unknown as ToolRegistryEntry;
+  const allTools = {
+    compress,
+    extractImages,
+  } as unknown as ToolRegistryCatalog["allTools"];
   const catalog: ToolRegistryCatalog = {
     regularTools: allTools,
     superTools: allTools,
@@ -260,6 +281,55 @@ describe("PipelineBuilder", () => {
     expect(await screen.findByText("pipelines list")).toBeInTheDocument();
   });
 
+  it("blocks saving a chain whose steps can't run on each other", async () => {
+    renderBuilder("/processor/pipelines/new");
+
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      { target: { value: "Broken chain" } },
+    );
+    await pickInputSource("Claims intake");
+    fireEvent.click(screen.getByText("pick output"));
+
+    // Extract images emits images; compress only takes a PDF, so it can never run.
+    fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
+    fireEvent.click(await screen.findByText("Extract images"));
+    fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
+    fireEvent.click(await screen.findByText("Compress"));
+
+    expect(
+      await screen.findByText("portal.pipelines.builder.stepsIncompatible"),
+    ).toBeInTheDocument();
+    expect(
+      screen.getByText("portal.pipelines.composer.create").closest("button"),
+    ).toBeDisabled();
+  });
+
+  it("allows a chain whose steps line up", async () => {
+    renderBuilder("/processor/pipelines/new");
+
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      { target: { value: "Fine chain" } },
+    );
+    await pickInputSource("Claims intake");
+    fireEvent.click(screen.getByText("pick output"));
+
+    fireEvent.click(screen.getByRole("button", { name: /addTool/ }));
+    fireEvent.click(await screen.findByText("Compress"));
+
+    expect(
+      screen.queryByText("portal.pipelines.builder.stepsIncompatible"),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.getByText("portal.pipelines.composer.create").closest("button"),
+    ).not.toBeDisabled();
+  });
+
   it("requires at least one source and one destination before saving", async () => {
     renderBuilder("/processor/pipelines/new");
 
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.tsx b/frontend/editor/src/portal/views/PipelineBuilder.tsx
index 4227dbcd11..d788fc4f35 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.tsx
@@ -31,6 +31,17 @@ import {
   type ExecutableTool,
   type WorkingToolStep,
 } from "@app/hooks/tools/shared/toolAutomation";
+import {
+  getToolFormatLabel,
+  getToolFormatListLabel,
+} from "@app/utils/toolIOLabels";
+import {
+  chainOutputFormat,
+  diagnosticsForStep,
+  hasBlockingDiagnostics,
+  validateToolChain,
+  type ToolDiagnostic,
+} from "@app/utils/toolIOCompat";
 import { errorMessage } from "@portal/api/http";
 import {
   deletePipeline,
@@ -154,7 +165,7 @@ function buildTriggerFor(input: WorkingInput): TriggerConfig | null {
  * deletes it. Replaces the former modal composer and the list's inline detail card.
  */
 export function PipelineBuilder() {
-  const { t } = useTranslation();
+  const { t, i18n } = useTranslation();
   const navigate = useNavigate();
   const queryClient = useQueryClient();
   // Pipelines are stored as policies, so a save/delete must invalidate both the
@@ -402,6 +413,66 @@ export function PipelineBuilder() {
     .map(stepLabel);
   const hasUnconfiguredSteps = unconfiguredStepLabels.length > 0;
 
+  // Whether each step can actually accept what the one before it produces. Checked here from the
+  // generated tool I/O table rather than by running the pipeline, so an impossible chain (say,
+  // Extract Images then Rotate) is caught while it is being built.
+  const chainDiagnostics = useMemo(
+    () =>
+      validateToolChain(
+        steps.map((step) => ({
+          operation: step.operation,
+          parameters: step.params,
+        })),
+      ),
+    [steps],
+  );
+  const blockingSteps = chainDiagnostics
+    .filter((d) => d.severity === "ERROR")
+    .map((d) => stepLabel(steps[d.stepIndex]));
+  const hasIncompatibleSteps = hasBlockingDiagnostics(chainDiagnostics);
+
+  // What a newly added step would be handed, so the picker can flag tools that cannot take it.
+  const chainOutput = useMemo(
+    () =>
+      chainOutputFormat(
+        steps.map((step) => ({
+          operation: step.operation,
+          parameters: step.params,
+        })),
+      ),
+    [steps],
+  );
+
+  function diagnosticNote(diagnostic: ToolDiagnostic): string {
+    const { accepts, produced } = diagnostic.detail;
+    return t(`portal.pipelines.builder.diagnostic.${diagnostic.code}`, {
+      accepts: getToolFormatListLabel(t, i18n.language, accepts ?? []),
+      produced: produced ? getToolFormatLabel(t, produced) : "",
+    });
+  }
+
+  /** The most severe diagnostic for a step, rendered as its note. */
+  function renderStepDiagnostic(index: number) {
+    const forStep = diagnosticsForStep(chainDiagnostics, index);
+    const diagnostic =
+      forStep.find((d) => d.severity === "ERROR") ??
+      forStep.find((d) => d.severity === "WARN") ??
+      forStep[0];
+    if (!diagnostic) return null;
+    return (
+      <span
+        className={
+          "portal-builder__step-note" +
+          (diagnostic.severity === "ERROR"
+            ? " portal-builder__step-note--danger"
+            : "")
+        }
+      >
+        {diagnosticNote(diagnostic)}
+      </span>
+    );
+  }
+
   // Track unsaved edits: snapshot the form and compare against the state captured just after
   // seeding, so leaving the builder can prompt to save or discard.
   const snapshot = JSON.stringify({
@@ -430,6 +501,7 @@ export function PipelineBuilder() {
     outputValid &&
     !hasUploadSteps &&
     !hasUnconfiguredSteps &&
+    !hasIncompatibleSteps &&
     !submitting;
 
   const listPath = toPortalPath(VIEW_PATHS.pipelines);
@@ -707,6 +779,14 @@ export function PipelineBuilder() {
           })}
         />
       )}
+      {hasIncompatibleSteps && (
+        <Banner
+          tone="danger"
+          description={t("portal.pipelines.builder.stepsIncompatible", {
+            tools: blockingSteps.join(", "),
+          })}
+        />
+      )}
 
       {/* Pipeline-level settings, above the operation list. */}
       <section className="portal-builder__settings">
@@ -885,7 +965,9 @@ export function PipelineBuilder() {
                         <span className="portal-builder__step-note">
                           {t("portal.pipelines.builder.unknownStep")}
                         </span>
-                      ) : null}
+                      ) : (
+                        renderStepDiagnostic(i)
+                      )}
                     </span>
                   </Button>
                   <div className="portal-builder__step-actions">
@@ -930,6 +1012,7 @@ export function PipelineBuilder() {
               onPick={addStep}
               operations={STEP_OPERATIONS}
               onPickOperation={addOperationStep}
+              precedingOutput={chainOutput}
               onClose={() => setPickerOpen(false)}
             />
           ) : (
diff --git a/testing/tool-io-cases.json b/testing/tool-io-cases.json
new file mode 100644
index 0000000000..59c2802f8d
--- /dev/null
+++ b/testing/tool-io-cases.json
@@ -0,0 +1,279 @@
+{
+  "$comment": [
+    "Shared conformance cases for the tool I/O compatibility check.",
+    "Run by Java (ToolChainValidatorConformanceTest), the frontend (toolIOCompat.test.ts) and the",
+    "engine (test_tool_io_compat.py) against their own implementations, which must agree.",
+    "Specs are synthetic, so retyping a real endpoint never invalidates a case.",
+    "'expected' is matched on stepIndex/severity/code; messages are free text."
+  ],
+  "specs": {
+    "pdfToPdf": { "accepts": ["PDF"], "produces": "PDF", "arity": "SISO", "cases": [] },
+    "pdfToPdfSplit": { "accepts": ["PDF"], "produces": "PDF", "arity": "SIMO", "cases": [] },
+    "pdfMerge": { "accepts": ["PDF"], "produces": "PDF", "arity": "MISO", "cases": [] },
+    "addPassword": { "accepts": ["PDF"], "produces": "PDF_ENCRYPTED", "arity": "SISO", "cases": [] },
+    "removePassword": { "accepts": ["PDF_ENCRYPTED"], "produces": "PDF", "arity": "SISO", "cases": [] },
+    "extractImages": { "accepts": ["PDF"], "produces": "IMAGE", "arity": "SIMO", "cases": [] },
+    "imageToPdf": { "accepts": ["IMAGE"], "produces": "PDF", "arity": "MISO", "cases": [] },
+    "getAttachments": { "accepts": ["PDF"], "produces": "ZIP", "arity": "SISO", "cases": [] },
+    "getInfo": { "accepts": ["PDF"], "produces": "JSON", "arity": "SISO", "cases": [] },
+    "validateOnly": { "accepts": ["PDF"], "produces": "NONE", "arity": "SISO", "cases": [] },
+    "anyToPdf": { "accepts": ["ANY"], "produces": "PDF", "arity": "SISO", "cases": [] },
+    "pdfToAny": { "accepts": ["PDF"], "produces": "ANY", "arity": "SISO", "cases": [] },
+    "pdfOrImage": { "accepts": ["PDF", "IMAGE"], "produces": "PDF", "arity": "SISO", "cases": [] },
+    "pdfToImageConfigurable": {
+      "accepts": ["PDF"],
+      "produces": "IMAGE",
+      "arity": "SIMO",
+      "cases": [
+        {
+          "when": [{ "param": "singleOrMultiple", "matches": ["single"] }],
+          "produces": "IMAGE",
+          "arity": "SISO"
+        }
+      ]
+    },
+    "addPasswordConfigurable": {
+      "accepts": ["PDF"],
+      "produces": "PDF_ENCRYPTED",
+      "arity": "SISO",
+      "cases": [
+        {
+          "when": [{ "param": "password", "matches": [""] }],
+          "produces": "PDF",
+          "arity": "SISO"
+        }
+      ]
+    },
+    "pdfToImageMixedCase": {
+      "accepts": ["PDF"],
+      "produces": "IMAGE",
+      "arity": "SIMO",
+      "cases": [
+        {
+          "when": [{ "param": "singleOrMultiple", "matches": ["  SiNgLe "] }],
+          "produces": "IMAGE",
+          "arity": "SISO"
+        }
+      ]
+    },
+    "addPasswordTwoKeys": {
+      "accepts": ["PDF"],
+      "produces": "PDF_ENCRYPTED",
+      "arity": "SISO",
+      "cases": [
+        {
+          "when": [
+            { "param": "password", "matches": [""] },
+            { "param": "ownerPassword", "matches": [""] }
+          ],
+          "produces": "PDF",
+          "arity": "SISO"
+        }
+      ]
+    }
+  },
+  "cases": [
+    {
+      "name": "a plain pdf chain is clean",
+      "steps": [{ "spec": "pdfToPdf" }, { "spec": "pdfToPdf" }],
+      "expected": []
+    },
+    {
+      "name": "an empty chain is clean",
+      "steps": [],
+      "expected": []
+    },
+    {
+      "name": "a single step is never a transition",
+      "steps": [{ "spec": "extractImages" }],
+      "expected": []
+    },
+    {
+      "name": "encrypting then editing is rejected",
+      "steps": [{ "spec": "addPassword" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "encrypting then decrypting is allowed",
+      "steps": [{ "spec": "addPassword" }, { "spec": "removePassword" }],
+      "expected": []
+    },
+    {
+      "name": "decrypting then editing is allowed",
+      "steps": [{ "spec": "removePassword" }, { "spec": "pdfToPdf" }],
+      "expected": []
+    },
+    {
+      "name": "an ordinary tool cannot be handed an encrypted pdf from source",
+      "sourceFormat": "PDF_ENCRYPTED",
+      "steps": [{ "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 0, "severity": "ERROR", "code": "source-mismatch" }]
+    },
+    {
+      "name": "remove-password is the one thing an encrypted source can start with",
+      "sourceFormat": "PDF_ENCRYPTED",
+      "steps": [{ "spec": "removePassword" }, { "spec": "pdfToPdf" }],
+      "expected": []
+    },
+    {
+      "name": "extracted images cannot feed a pdf tool",
+      "steps": [{ "spec": "extractImages" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "extracted images can feed an image tool, and fan in",
+      "steps": [{ "spec": "extractImages" }, { "spec": "imageToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-in" }]
+    },
+    {
+      "name": "splitting then a single-file tool fans out",
+      "steps": [{ "spec": "pdfToPdfSplit" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-out" }]
+    },
+    {
+      "name": "splitting then merging fans in",
+      "steps": [{ "spec": "pdfToPdfSplit" }, { "spec": "pdfMerge" }],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-in" }]
+    },
+    {
+      "name": "an archive deliverable does not feed a pdf tool",
+      "steps": [{ "spec": "getAttachments" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "a json report does not feed a pdf tool",
+      "steps": [{ "spec": "getInfo" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "a step producing no file terminates the chain",
+      "steps": [{ "spec": "validateOnly" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "a tool accepting anything swallows any upstream output",
+      "steps": [{ "spec": "extractImages" }, { "spec": "anyToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-out" }]
+    },
+    {
+      "name": "a tool producing anything satisfies any downstream input",
+      "steps": [{ "spec": "pdfToAny" }, { "spec": "imageToPdf" }],
+      "expected": []
+    },
+    {
+      "name": "a source of unknown type is not checked against step one",
+      "steps": [{ "spec": "imageToPdf" }],
+      "expected": []
+    },
+    {
+      "name": "a multi-format tool accepts either branch",
+      "steps": [{ "spec": "extractImages" }, { "spec": "pdfOrImage" }],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-out" }]
+    },
+    {
+      "name": "an unconfigured parameter-dependent output only warns",
+      "steps": [{ "spec": "addPasswordConfigurable" }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "WARN", "code": "output-uncertain" }]
+    },
+    {
+      "name": "configuring the parameter to the encrypting branch makes it an error",
+      "steps": [
+        { "spec": "addPasswordConfigurable", "parameters": { "password": "hunter2" } },
+        { "spec": "pdfToPdf" }
+      ],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "configuring the parameter to the non-encrypting branch clears it",
+      "steps": [
+        { "spec": "addPasswordConfigurable", "parameters": { "password": "" } },
+        { "spec": "pdfToPdf" }
+      ],
+      "expected": []
+    },
+    {
+      "name": "a multi-condition case needs every condition to hold",
+      "steps": [
+        {
+          "spec": "addPasswordTwoKeys",
+          "parameters": { "password": "", "ownerPassword": "hunter2" }
+        },
+        { "spec": "pdfToPdf" }
+      ],
+      "expected": [{ "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" }]
+    },
+    {
+      "name": "a multi-condition case applies when every condition holds",
+      "steps": [
+        { "spec": "addPasswordTwoKeys", "parameters": { "password": "", "ownerPassword": "" } },
+        { "spec": "pdfToPdf" }
+      ],
+      "expected": []
+    },
+    {
+      "name": "a multi-condition case is unresolved when one condition is unconfigured",
+      "steps": [
+        { "spec": "addPasswordTwoKeys", "parameters": { "password": "" } },
+        { "spec": "pdfToPdf" }
+      ],
+      "expected": [{ "stepIndex": 1, "severity": "WARN", "code": "output-uncertain" }]
+    },
+    {
+      "name": "the single branch of an arity case produces one file, so no fan-out",
+      "steps": [
+        { "spec": "pdfToImageConfigurable", "parameters": { "singleOrMultiple": "single" } },
+        { "spec": "imageToPdf" }
+      ],
+      "expected": []
+    },
+    {
+      "name": "the default branch of an arity case fans in",
+      "steps": [
+        { "spec": "pdfToImageConfigurable", "parameters": { "singleOrMultiple": "multiple" } },
+        { "spec": "imageToPdf" }
+      ],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-in" }]
+    },
+    {
+      "name": "a condition matches regardless of the casing and padding it was declared with",
+      "steps": [
+        { "spec": "pdfToImageMixedCase", "parameters": { "singleOrMultiple": "SINGLE" } },
+        { "spec": "imageToPdf" }
+      ],
+      "expected": []
+    },
+    {
+      "name": "a condition declared in mixed case still fails on a genuinely different value",
+      "steps": [
+        { "spec": "pdfToImageMixedCase", "parameters": { "singleOrMultiple": "multiple" } },
+        { "spec": "imageToPdf" }
+      ],
+      "expected": [{ "stepIndex": 1, "severity": "INFO", "code": "fan-in" }]
+    },
+    {
+      "name": "an undeclared step warns and stops the chain being checked past it",
+      "steps": [{ "spec": "addPassword" }, { "spec": null }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "WARN", "code": "undeclared-operation" }]
+    },
+    {
+      "name": "the source format is not re-applied to a step that follows an undeclared one",
+      "sourceFormat": "PDF_ENCRYPTED",
+      "steps": [{ "spec": "removePassword" }, { "spec": null }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 1, "severity": "WARN", "code": "undeclared-operation" }]
+    },
+    {
+      "name": "an undeclared first step does not pass the source format on to the next step",
+      "sourceFormat": "PDF_ENCRYPTED",
+      "steps": [{ "spec": null }, { "spec": "pdfToPdf" }],
+      "expected": [{ "stepIndex": 0, "severity": "WARN", "code": "undeclared-operation" }]
+    },
+    {
+      "name": "every broken transition is reported, not just the first",
+      "steps": [{ "spec": "extractImages" }, { "spec": "pdfToPdf" }, { "spec": "imageToPdf" }],
+      "expected": [
+        { "stepIndex": 1, "severity": "ERROR", "code": "format-mismatch" },
+        { "stepIndex": 2, "severity": "ERROR", "code": "format-mismatch" }
+      ]
+    }
+  ]
+}

From 19e7095a4f3bbd6891710311d58bef4fb21da05d Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Mon, 3 Aug 2026 15:34:21 +0100
Subject: [PATCH 053/122] Convert unused translations test to use a trie to
 more efficiently scan (#7263)

# Description of Changes
Unused translations test takes ~8 seconds to run on my computer with no
contention, but when my CPU is under heavy contention, it often takes
>20 seconds and occasionally goes over the 30 second timeout. This PR
changes the test to use [a trie](https://en.wikipedia.org/wiki/Trie) to
more efficiently search for the strings, taking the test down to ~1.8
seconds. I've also increased the timeout for the missing & unused
translations tests for belt-and-braces.
---
 .../editor/src/core/i18n/translationAudit.ts  | 78 ++++++++++++++++---
 .../core/tests/missingTranslations.test.ts    |  3 +-
 .../src/core/tests/unusedTranslations.test.ts |  3 +-
 3 files changed, 71 insertions(+), 13 deletions(-)

diff --git a/frontend/editor/src/core/i18n/translationAudit.ts b/frontend/editor/src/core/i18n/translationAudit.ts
index 9e4e57a8a5..2a9bd33d6d 100644
--- a/frontend/editor/src/core/i18n/translationAudit.ts
+++ b/frontend/editor/src/core/i18n/translationAudit.ts
@@ -218,14 +218,15 @@ const extractStaticKeys = (file: string): MissingKey[] => {
     file,
     code,
     ts.ScriptTarget.Latest,
-    true,
+    false,
     getScriptKind(file),
   );
   const found: MissingKey[] = [];
 
   const record = (node: ts.Node, key: string, fallback = "") => {
+    // Pass sourceFile explicitly: the tree is parsed without parent links.
     const { line, character } = sourceFile.getLineAndCharacterOfPosition(
-      node.getStart(),
+      node.getStart(sourceFile),
     );
     found.push({ key, fallback, file, line: line + 1, column: character + 1 });
   };
@@ -287,8 +288,11 @@ const extractStaticKeys = (file: string): MissingKey[] => {
  * (not just t() sites; keys are often assembled in helpers/constants), but
  * only kept if a shape carries an identifier-like static fragment.
  */
-const extractTemplateShapes = (file: string, acc: Set<string>): void => {
-  const code = fs.readFileSync(file, "utf8");
+const extractTemplateShapes = (
+  file: string,
+  code: string,
+  acc: Set<string>,
+): void => {
   if (!code.includes("${")) return;
 
   const sourceFile = ts.createSourceFile(
@@ -319,6 +323,53 @@ const extractTemplateShapes = (file: string, acc: Set<string>): void => {
   ts.forEachChild(sourceFile, visit);
 };
 
+interface TrieNode {
+  children: Map<number, TrieNode>;
+  needle?: string;
+}
+
+/**
+ * Which of `needles` appear as a substring of `text`.
+ *
+ * Same answer as `needles.filter((n) => text.includes(n))`, but walks the text
+ * once against a trie of every needle rather than once per needle: the locale
+ * carries thousands of keys and the joined source is tens of MB, so per-key
+ * scanning dominated the suite's runtime.
+ */
+const findSubstrings = (
+  text: string,
+  needles: Iterable<string>,
+): Set<string> => {
+  const root: TrieNode = { children: new Map() };
+  for (const needle of needles) {
+    if (!needle) continue;
+    let node = root;
+    for (let i = 0; i < needle.length; i++) {
+      const code = needle.charCodeAt(i);
+      let next = node.children.get(code);
+      if (!next) {
+        next = { children: new Map() };
+        node.children.set(code, next);
+      }
+      node = next;
+    }
+    node.needle = needle;
+  }
+
+  const found = new Set<string>();
+  for (let start = 0; start < text.length; start++) {
+    let node = root.children.get(text.charCodeAt(start));
+    let at = start;
+    while (node) {
+      if (node.needle !== undefined) found.add(node.needle);
+      at += 1;
+      if (at >= text.length) break;
+      node = node.children.get(text.charCodeAt(at));
+    }
+  }
+  return found;
+};
+
 const shapeToMatcher = (shape: string): RegExp => {
   // Each * is one runtime path segment, so match `[^.]+` (not `.+`) to avoid
   // spanning key levels. Multi-segment interpolations use ignoredKeyPatterns.
@@ -363,19 +414,24 @@ export function findUnusedKeys(project: TranslationProject): {
 } {
   const localeKeys = Array.from(collectLocaleKeys(project.localeFile));
   const files = listSourceFiles([project.srcRoot]);
-  const source = files.map((file) => fs.readFileSync(file, "utf8")).join("\n");
+  const contents = files.map((file) => fs.readFileSync(file, "utf8"));
+  const source = contents.join("\n");
 
   const shapes = new Set<string>();
-  for (const file of files) extractTemplateShapes(file, shapes);
+  files.forEach((file, i) => extractTemplateShapes(file, contents[i], shapes));
   const matchers = [...shapes].map(shapeToMatcher);
   const patterns = project.ignoredKeyPatterns ?? [];
 
-  const unused = localeKeys.filter((key) => {
-    if (patterns.some((re) => re.test(key))) return false;
+  const candidates = localeKeys.filter(
+    (key) => !patterns.some((re) => re.test(key)),
+  );
+  // Direct: the literal appears anywhere in source (static t(), i18nKey,
+  // constants, comments). Plural variants count when their base is referenced.
+  const referenced = findSubstrings(source, candidates.flatMap(getLookupKeys));
+
+  const unused = candidates.filter((key) => {
     const lookups = getLookupKeys(key);
-    // Direct: the literal appears anywhere in source (static t(), i18nKey,
-    // constants, comments). Plural variants count when their base is referenced.
-    if (lookups.some((k) => source.includes(k))) return false;
+    if (lookups.some((k) => referenced.has(k))) return false;
     // Dynamic: the key matches a template-literal shape from source.
     return !lookups.some((k) => matchers.some((re) => re.test(k)));
   });
diff --git a/frontend/editor/src/core/tests/missingTranslations.test.ts b/frontend/editor/src/core/tests/missingTranslations.test.ts
index 617699e43a..64b6392dc1 100644
--- a/frontend/editor/src/core/tests/missingTranslations.test.ts
+++ b/frontend/editor/src/core/tests/missingTranslations.test.ts
@@ -14,7 +14,8 @@ describe.each(I18N_PROJECTS)(
   (project) => {
     test(
       "fails if any en-US key used in source is missing from the locale",
-      { timeout: 10000 },
+      // Scans/parses the whole source tree: generous headroom for a loaded CPU.
+      { timeout: 60_000 },
       () => {
         expect(fs.existsSync(project.localeFile)).toBe(true);
 
diff --git a/frontend/editor/src/core/tests/unusedTranslations.test.ts b/frontend/editor/src/core/tests/unusedTranslations.test.ts
index f0d0fbce93..e91c2f4485 100644
--- a/frontend/editor/src/core/tests/unusedTranslations.test.ts
+++ b/frontend/editor/src/core/tests/unusedTranslations.test.ts
@@ -15,7 +15,8 @@ describe.each(I18N_PROJECTS)(
   (project) => {
     test(
       "fails if any en-US key has no source references",
-      { timeout: 30_000 },
+      // Scans/parses the whole source tree: generous headroom for a loaded CPU.
+      { timeout: 60_000 },
       () => {
         expect(fs.existsSync(project.localeFile)).toBe(true);
 

From 21dff695fe163b493ef60146287b0f4589f808c7 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:58:10 +0100
Subject: [PATCH 054/122] Add SFTP, FTP and SMB network sources to the
 processor (#7153)

# Description of Changes

Add SFTP, FTP and SMB network sources to the processor plus UI change to
enable it

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 app/allowed-licenses.json                     |  12 +
 .../common/model/ApplicationProperties.java   |  15 +
 app/proprietary/build.gradle                  |   6 +
 .../integration/model/IntegrationType.java    |   2 +
 .../service/IntegrationConfigService.java     |  16 +-
 .../policy/network/FtpFileClient.java         | 181 ++++++++++
 .../policy/network/NetworkConfig.java         | 222 +++++++++++++
 .../network/NetworkConnectionResolver.java    | 136 ++++++++
 .../policy/network/NetworkHostGuard.java      |  68 ++++
 .../policy/network/NetworkIdentities.java     |  52 +++
 .../policy/network/NetworkInputSource.java    | 148 +++++++++
 .../network/NetworkIntegrationValidator.java  |  35 ++
 .../policy/network/NetworkProtocol.java       |  57 ++++
 .../policy/network/RemoteFile.java            |  18 +
 .../policy/network/RemoteFileClient.java      |  38 +++
 .../network/RemoteFileClientFactory.java      |  28 ++
 .../policy/network/RemoteFileResource.java    |  68 ++++
 .../policy/network/SftpFileClient.java        | 312 ++++++++++++++++++
 .../policy/network/SmbFileClient.java         | 236 +++++++++++++
 .../FtpNetworkSourceIntegrationTest.java      | 199 +++++++++++
 .../policy/network/NetworkConfigTest.java     | 136 ++++++++
 .../policy/network/NetworkHostGuardTest.java  |  64 ++++
 .../policy/network/NetworkIdentitiesTest.java |  49 +++
 .../network/NetworkInputSourceTest.java       | 280 ++++++++++++++++
 .../NetworkIntegrationValidatorTest.java      |  55 +++
 .../SftpNetworkSourceIntegrationTest.java     | 241 ++++++++++++++
 .../SmbNetworkSourceIntegrationTest.java      | 194 +++++++++++
 build.gradle                                  |   3 +
 .../public/locales/en-US/translation.toml     |  88 +++++
 .../editor/src/portal/api/integrations.ts     |   8 +-
 .../src/portal/components/BrandMarks.tsx      |   8 +
 .../components/sources/ConnectionForm.tsx     |  20 +-
 .../portal/components/sources/SourceModal.tsx |  59 +++-
 .../components/sources/connectionTypes.ts     | 202 ++++++++++++
 .../portal/components/sources/sourceTypes.ts  |  97 +++++-
 gradle.properties                             |   5 +
 36 files changed, 3337 insertions(+), 21 deletions(-)
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/FtpFileClient.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConfig.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConnectionResolver.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkHostGuard.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIdentities.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkInputSource.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidator.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkProtocol.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFile.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClient.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClientFactory.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileResource.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java
 create mode 100644 app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SmbFileClient.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/FtpNetworkSourceIntegrationTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkConfigTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkHostGuardTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIdentitiesTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkInputSourceTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidatorTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SftpNetworkSourceIntegrationTest.java
 create mode 100644 app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SmbNetworkSourceIntegrationTest.java

diff --git a/app/allowed-licenses.json b/app/allowed-licenses.json
index 88ed8ba4d5..9b5ef66556 100644
--- a/app/allowed-licenses.json
+++ b/app/allowed-licenses.json
@@ -32,6 +32,14 @@
       "moduleName": ".*",
       "moduleLicense": "BSD-4 License"
     },
+    {
+      "moduleName": ".*",
+      "moduleLicense": "Revised BSD"
+    },
+    {
+      "moduleName": ".*",
+      "moduleLicense": "ISC"
+    },
     {
       "moduleName": ".*",
       "moduleLicense": "MIT"
@@ -48,6 +56,10 @@
       "moduleName": ".*",
       "moduleLicense": "MIT-0"
     },
+    {
+      "moduleName": ".*",
+      "moduleLicense": "MIT license"
+    },
     {
       "moduleName": "com.github.jai-imageio:jai-imageio-core",
       "moduleLicense": "LICENSE.txt"
diff --git a/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java b/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java
index ffbacfee1b..99c8f65117 100644
--- a/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java
+++ b/app/common/src/main/java/stirling/software/common/model/ApplicationProperties.java
@@ -251,6 +251,21 @@ public class ApplicationProperties {
          */
         private boolean allowPrivateS3Endpoints = false;
 
+        /**
+         * Whether a network source's host (SFTP, FTP, or SMB) may resolve to a loopback,
+         * link-local, or private address. Off by default so a connection cannot be pointed at
+         * internal services; enable for an on-network file server (e.g. an internal SFTP drop or a
+         * Samba share).
+         */
+        private boolean allowPrivateNetworkSources = false;
+
+        /**
+         * Hostnames (exact, case-insensitive) that a network source may use even when they resolve
+         * to a private or local address and {@code allowPrivateNetworkSources} is off. Lets shared
+         * infra allow one named on-prem file server without opening every internal host.
+         */
+        private List<String> allowedPrivateNetworkHosts = new java.util.ArrayList<>();
+
         /**
          * Whether an API/Purview/ConsignO integration's base URL may resolve to a loopback,
          * link-local, or private address. Off by default: unlike S3 connections, any user may
diff --git a/app/proprietary/build.gradle b/app/proprietary/build.gradle
index 495a013c03..c20241dbb5 100644
--- a/app/proprietary/build.gradle
+++ b/app/proprietary/build.gradle
@@ -67,6 +67,12 @@ dependencies {
     implementation "software.amazon.awssdk:s3:${awsSdkVersion}"
     implementation "software.amazon.awssdk:url-connection-client:${awsSdkVersion}"
 
+    // Network policy sources (SFTP/FTP/SMB drop folders). All permissively licensed:
+    // jsch fork BSD, commons-net Apache-2.0, smbj Apache-2.0 (BouncyCastle already on classpath).
+    implementation "com.github.mwiede:jsch:${jschVersion}"
+    implementation "commons-net:commons-net:${commonsNetVersion}"
+    implementation "com.hierynomus:smbj:${smbjVersion}"
+
     // Streaming AEAD (AES-GCM-HKDF segments) for storage encryption at rest. Apache-2.0.
     implementation "com.google.crypto.tink:tink:${tinkVersion}"
 
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/integration/model/IntegrationType.java b/app/proprietary/src/main/java/stirling/software/proprietary/integration/model/IntegrationType.java
index 375b7f4604..e372336763 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/integration/model/IntegrationType.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/integration/model/IntegrationType.java
@@ -3,6 +3,8 @@ package stirling.software.proprietary.integration.model;
 /** Kind of external integration a stored config describes. */
 public enum IntegrationType {
     S3,
+    /** A network file server (SFTP, FTP/FTPS, or SMB/Samba) a policy source polls for documents. */
+    NETWORK,
     MCP,
     /** A generic outbound HTTP endpoint a pipeline step can post a document to. */
     API,
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/integration/service/IntegrationConfigService.java b/app/proprietary/src/main/java/stirling/software/proprietary/integration/service/IntegrationConfigService.java
index a6650569a8..a29ac2c08f 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/integration/service/IntegrationConfigService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/integration/service/IntegrationConfigService.java
@@ -57,12 +57,15 @@ public class IntegrationConfigService {
         OwnerScope scope = request.scope() == null ? OwnerScope.USER : request.scope();
         IntegrationConfig cfg = new IntegrationConfig();
         cfg.setIntegrationType(require(request.integrationType(), "integrationType"));
-        // S3 is infrastructure, not self-serve: no personal S3 for regular users. TEAM/SERVER
-        // scopes are already restricted to admins/team owners by assignOwnership.
-        if (cfg.getIntegrationType() == IntegrationType.S3
+        // S3 and network file servers are infrastructure, not self-serve: they hold shared host
+        // credentials, so no personal connection for regular users. TEAM/SERVER scopes are already
+        // restricted to admins/team owners by assignOwnership.
+        if (isInfrastructureType(cfg.getIntegrationType())
                 && scope == OwnerScope.USER
                 && !ownership.isAdmin(currentUser)) {
-            throw forbidden("S3 connections can only be created by administrators or team owners");
+            throw forbidden(
+                    "S3 and network connections can only be created by administrators or team"
+                            + " owners");
         }
         requireCustomApiAllowed(cfg.getIntegrationType(), currentUser);
         cfg.setName(require(request.name(), "name"));
@@ -147,6 +150,11 @@ public class IntegrationConfigService {
         }
     }
 
+    /** Types holding shared host credentials, restricted to admins/team owners like S3. */
+    private static boolean isInfrastructureType(IntegrationType type) {
+        return type == IntegrationType.S3 || type == IntegrationType.NETWORK;
+    }
+
     /** Whether this caller may author custom API integrations, for the UI to offer or hide it. */
     public boolean canAuthorCustomApi(User currentUser) {
         return applicationProperties.getPolicies().isAllowCustomApiIntegrations()
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/FtpFileClient.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/FtpFileClient.java
new file mode 100644
index 0000000000..d493831437
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/FtpFileClient.java
@@ -0,0 +1,181 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.FilterInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.commons.net.ftp.FTP;
+import org.apache.commons.net.ftp.FTPClient;
+import org.apache.commons.net.ftp.FTPFile;
+import org.apache.commons.net.ftp.FTPReply;
+import org.apache.commons.net.ftp.FTPSClient;
+
+/**
+ * FTP client over Apache Commons Net, with optional TLS ({@code EXPLICIT} = AUTH TLS, {@code
+ * IMPLICIT} = TLS on connect). Passive mode is the default since it works through NAT. A blank
+ * directory lists the login working directory. One transfer is in flight at a time, so the read
+ * stream calls {@code completePendingCommand} on close before the session is reused or shut down.
+ */
+final class FtpFileClient implements RemoteFileClient {
+
+    private static final int CONNECT_TIMEOUT_MS = 15_000;
+    private static final int READ_TIMEOUT_MS = 60_000;
+    private static final int MAX_DEPTH = 64;
+
+    private final FTPClient ftp;
+
+    private FtpFileClient(FTPClient ftp) {
+        this.ftp = ftp;
+    }
+
+    static FtpFileClient connect(NetworkConfig config) throws IOException {
+        FTPClient ftp = clientFor(config);
+        ftp.setConnectTimeout(CONNECT_TIMEOUT_MS);
+        // Read timeouts so a server that connects then stalls cannot hang a poller: default
+        // becomes the control socket's SO timeout at connect, data covers transfer sockets.
+        ftp.setDefaultTimeout(READ_TIMEOUT_MS);
+        ftp.setDataTimeout(Duration.ofMillis(READ_TIMEOUT_MS));
+        try {
+            ftp.connect(config.host(), config.port());
+            int reply = ftp.getReplyCode();
+            if (!FTPReply.isPositiveCompletion(reply)) {
+                ftp.disconnect();
+                throw new IOException(
+                        "FTP server " + config.host() + " refused connection: " + reply);
+            }
+            if (ftp instanceof FTPSClient ftps) {
+                // Encrypt the data channel too, not only the control channel.
+                ftps.execPBSZ(0);
+                ftps.execPROT("P");
+            }
+            if (!ftp.login(config.username(), config.password())) {
+                int code = ftp.getReplyCode();
+                ftp.disconnect();
+                throw new IOException("FTP login to " + config.host() + " failed: " + code);
+            }
+            if (config.passive()) {
+                ftp.enterLocalPassiveMode();
+            }
+            ftp.setFileType(FTP.BINARY_FILE_TYPE);
+            return new FtpFileClient(ftp);
+        } catch (IOException e) {
+            quietlyDisconnect(ftp);
+            throw e;
+        }
+    }
+
+    private static FTPClient clientFor(NetworkConfig config) {
+        return switch (config.security()) {
+            case NONE -> new FTPClient();
+            case IMPLICIT -> new FTPSClient(true);
+            case EXPLICIT -> new FTPSClient(false);
+        };
+    }
+
+    @Override
+    public List<RemoteFile> list(String directory, boolean recursive) throws IOException {
+        List<RemoteFile> files = new ArrayList<>();
+        collect(dir(directory), recursive, 0, files);
+        return files;
+    }
+
+    private void collect(String directory, boolean recursive, int depth, List<RemoteFile> out)
+            throws IOException {
+        FTPFile[] entries = ftp.listFiles(directory);
+        for (FTPFile entry : entries) {
+            if (out.size() >= MAX_FILES) {
+                return;
+            }
+            if (entry == null) {
+                continue;
+            }
+            String name = entry.getName();
+            if (name.equals(".") || name.equals("..") || name.startsWith(".")) {
+                continue;
+            }
+            String path = join(directory, name);
+            if (entry.isDirectory()) {
+                if (recursive && !entry.isSymbolicLink() && depth < MAX_DEPTH) {
+                    collect(path, true, depth + 1, out);
+                }
+                continue;
+            }
+            if (entry.isFile()) {
+                out.add(new RemoteFile(path, name, entry.getSize(), lastModified(entry)));
+            }
+        }
+    }
+
+    @Override
+    public RemoteFile stat(String path) throws IOException {
+        // LIST, not MLST: listing uses listFiles, so the re-stat that guards the consume delete
+        // must read the timestamp the same way or the version gate never matches (and many servers
+        // do not implement MLST at all, returning null and skipping the delete entirely).
+        FTPFile[] listed = ftp.listFiles(path);
+        if (listed.length == 0 || listed[0] == null) {
+            return null;
+        }
+        FTPFile entry = listed[0];
+        String name = path.substring(path.lastIndexOf('/') + 1);
+        return new RemoteFile(path, name, entry.getSize(), lastModified(entry));
+    }
+
+    @Override
+    public InputStream open(String path) throws IOException {
+        InputStream stream = ftp.retrieveFileStream(path);
+        if (stream == null) {
+            throw new IOException("cannot read " + path + ": " + ftp.getReplyString());
+        }
+        // The data stream must be closed and the transfer acknowledged before the session is
+        // reused.
+        return new FilterInputStream(stream) {
+            @Override
+            public void close() throws IOException {
+                super.close();
+                ftp.completePendingCommand();
+            }
+        };
+    }
+
+    @Override
+    public void delete(String path) throws IOException {
+        ftp.deleteFile(path);
+    }
+
+    @Override
+    public void close() throws IOException {
+        try {
+            ftp.logout();
+        } finally {
+            quietlyDisconnect(ftp);
+        }
+    }
+
+    private static long lastModified(FTPFile entry) {
+        return entry.getTimestamp() == null ? 0L : entry.getTimestamp().getTimeInMillis();
+    }
+
+    private static void quietlyDisconnect(FTPClient ftp) {
+        if (ftp.isConnected()) {
+            try {
+                ftp.disconnect();
+            } catch (IOException ignored) {
+                // Best-effort teardown; the session is being abandoned anyway.
+            }
+        }
+    }
+
+    private static String dir(String directory) {
+        return directory == null || directory.isBlank() ? "." : directory;
+    }
+
+    private static String join(String directory, String name) {
+        if (directory.equals(".")) {
+            return name;
+        }
+        return directory.endsWith("/") ? directory + name : directory + "/" + name;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConfig.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConfig.java
new file mode 100644
index 0000000000..403799a1bf
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConfig.java
@@ -0,0 +1,222 @@
+package stirling.software.proprietary.policy.network;
+
+import java.util.Map;
+
+/**
+ * The fully resolved settings a network source runs with - produced by {@link
+ * NetworkConnectionResolver} merging a stored connection (protocol, host, credentials, and, for
+ * SMB, the share) with per-use source options (directory, mode, recursive). Credentials are
+ * required: there is no anonymous fallback, so a source can never reach a server without
+ * config-supplied identity. {@code snapshot} and {@code recursive} are input-only.
+ */
+public record NetworkConfig(
+        NetworkProtocol protocol,
+        String host,
+        int port,
+        String username,
+        String password,
+        String privateKey,
+        String privateKeyPassphrase,
+        String hostKeyFingerprint,
+        String domain,
+        String share,
+        FtpSecurity security,
+        boolean passive,
+        String directory,
+        boolean snapshot,
+        boolean recursive) {
+
+    /** FTP transport security: plaintext, or TLS negotiated up-front (implicit) or via AUTH TLS. */
+    public enum FtpSecurity {
+        NONE,
+        EXPLICIT,
+        IMPLICIT;
+
+        static FtpSecurity fromOption(String value) {
+            if (value == null || value.isBlank()) {
+                return NONE;
+            }
+            String normalized = value.trim().toUpperCase();
+            for (FtpSecurity security : values()) {
+                if (security.name().equals(normalized)) {
+                    return security;
+                }
+            }
+            throw new IllegalArgumentException(
+                    "network config 'security' must be NONE, EXPLICIT or IMPLICIT");
+        }
+    }
+
+    private static final String PROTOCOL_OPTION = "protocol";
+    private static final String HOST_OPTION = "host";
+    private static final String PORT_OPTION = "port";
+    private static final String USERNAME_OPTION = "username";
+    private static final String PASSWORD_OPTION = "password";
+    private static final String PRIVATE_KEY_OPTION = "privateKey";
+    private static final String PRIVATE_KEY_PASSPHRASE_OPTION = "privateKeyPassphrase";
+    private static final String HOST_KEY_FINGERPRINT_OPTION = "hostKeyFingerprint";
+    private static final String DOMAIN_OPTION = "domain";
+    private static final String SHARE_OPTION = "share";
+    private static final String SECURITY_OPTION = "security";
+    private static final String PASSIVE_OPTION = "passive";
+    private static final String DIRECTORY_OPTION = "directory";
+    private static final String MODE_OPTION = "mode";
+    private static final String MODE_CONSUME = "consume";
+    private static final String MODE_SNAPSHOT = "snapshot";
+    private static final String RECURSIVE_OPTION = "recursive";
+
+    public static NetworkConfig from(Map<String, Object> options) {
+        NetworkProtocol protocol = NetworkProtocol.fromOption(str(options.get(PROTOCOL_OPTION)));
+        if (protocol == null) {
+            throw new IllegalArgumentException(
+                    "network config requires a 'protocol' of sftp, ftp or smb");
+        }
+        String host = trimmed(options.get(HOST_OPTION));
+        if (host == null) {
+            throw new IllegalArgumentException("network config requires a 'host'");
+        }
+        FtpSecurity security = FtpSecurity.fromOption(str(options.get(SECURITY_OPTION)));
+        int port = port(options.get(PORT_OPTION), defaultPort(protocol, security));
+        String username = trimmed(options.get(USERNAME_OPTION));
+        if (username == null) {
+            throw new IllegalArgumentException("network config requires a 'username'");
+        }
+        String password = trimmed(options.get(PASSWORD_OPTION));
+        String privateKey = trimmed(options.get(PRIVATE_KEY_OPTION));
+        String passphrase = trimmed(options.get(PRIVATE_KEY_PASSPHRASE_OPTION));
+        String fingerprint = trimmed(options.get(HOST_KEY_FINGERPRINT_OPTION));
+        String domain = trimmed(options.get(DOMAIN_OPTION));
+        String share = trimmed(options.get(SHARE_OPTION));
+        boolean passive = parseBoolean(options.get(PASSIVE_OPTION), true);
+        String directory = directory(options.get(DIRECTORY_OPTION));
+        boolean recursive = parseBoolean(options.get(RECURSIVE_OPTION), false);
+        boolean snapshot = snapshot(str(options.get(MODE_OPTION)));
+
+        if (protocol == NetworkProtocol.SFTP && password == null && privateKey == null) {
+            throw new IllegalArgumentException(
+                    "sftp connection requires a 'password' or a 'privateKey'");
+        }
+        if ((protocol == NetworkProtocol.FTP || protocol == NetworkProtocol.SMB)
+                && password == null) {
+            throw new IllegalArgumentException(
+                    protocol.name() + " connection requires a 'password'");
+        }
+        if (protocol == NetworkProtocol.SMB && share == null) {
+            throw new IllegalArgumentException(
+                    "smb connection requires a 'share' (e.g. documents)");
+        }
+        return new NetworkConfig(
+                protocol,
+                host,
+                port,
+                username,
+                password,
+                privateKey,
+                passphrase,
+                fingerprint,
+                domain,
+                share,
+                security,
+                passive,
+                directory,
+                snapshot,
+                recursive);
+    }
+
+    /** Implicit FTPS listens on 990, not the plain-FTP 21. */
+    private static int defaultPort(NetworkProtocol protocol, FtpSecurity security) {
+        if (protocol == NetworkProtocol.FTP && security == FtpSecurity.IMPLICIT) {
+            return 990;
+        }
+        return protocol.defaultPort();
+    }
+
+    private static int port(Object value, int fallback) {
+        String text = trimmed(value);
+        if (text == null) {
+            return fallback;
+        }
+        int port;
+        try {
+            port = Integer.parseInt(text);
+        } catch (NumberFormatException e) {
+            throw new IllegalArgumentException("network config 'port' must be a number");
+        }
+        if (port < 1 || port > 65535) {
+            throw new IllegalArgumentException("network config 'port' must be between 1 and 65535");
+        }
+        return port;
+    }
+
+    /**
+     * A poll directory relative to the login/home dir (SFTP/FTP) or the share root (SMB). Traversal
+     * segments are rejected so a connection cannot be steered above where the operator scoped it.
+     */
+    private static String directory(Object value) {
+        String text = trimmed(value);
+        if (text == null) {
+            return "";
+        }
+        String normalized = text.replace('\\', '/');
+        if (normalized.indexOf('\0') >= 0) {
+            throw new IllegalArgumentException("network config 'directory' contains a null byte");
+        }
+        for (String segment : normalized.split("/")) {
+            if (segment.equals("..")) {
+                throw new IllegalArgumentException(
+                        "network config 'directory' must not contain '..'");
+            }
+        }
+        return normalized;
+    }
+
+    private static boolean snapshot(String mode) {
+        if (mode == null || mode.isBlank()) {
+            return false;
+        }
+        if (!MODE_CONSUME.equals(mode) && !MODE_SNAPSHOT.equals(mode)) {
+            throw new IllegalArgumentException(
+                    "network config 'mode' must be 'consume' or 'snapshot'");
+        }
+        return MODE_SNAPSHOT.equals(mode);
+    }
+
+    private static boolean parseBoolean(Object value, boolean fallback) {
+        String text = trimmed(value);
+        return text == null ? fallback : Boolean.parseBoolean(text);
+    }
+
+    private static String str(Object value) {
+        return value == null ? null : value.toString();
+    }
+
+    private static String trimmed(Object value) {
+        if (value == null) {
+            return null;
+        }
+        String text = value.toString().trim();
+        return text.isEmpty() ? null : text;
+    }
+
+    /** Never prints the credentials, so an accidental log line cannot leak them. */
+    @Override
+    public String toString() {
+        return "NetworkConfig[protocol="
+                + protocol
+                + ", host="
+                + host
+                + ", port="
+                + port
+                + ", username="
+                + username
+                + ", share="
+                + share
+                + ", directory="
+                + directory
+                + ", snapshot="
+                + snapshot
+                + ", recursive="
+                + recursive
+                + "]";
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConnectionResolver.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConnectionResolver.java
new file mode 100644
index 0000000000..098b31b561
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkConnectionResolver.java
@@ -0,0 +1,136 @@
+package stirling.software.proprietary.policy.network;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.proprietary.access.model.ResourceType;
+import stirling.software.proprietary.access.service.OwnershipService;
+import stirling.software.proprietary.integration.model.IntegrationConfig;
+import stirling.software.proprietary.integration.model.IntegrationType;
+import stirling.software.proprietary.integration.repository.IntegrationConfigRepository;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.security.service.UserService;
+
+import tools.jackson.core.type.TypeReference;
+import tools.jackson.databind.ObjectMapper;
+
+/**
+ * Turns a network source's options into a full {@link NetworkConfig} by dereferencing its {@code
+ * connectionId} to a stored NETWORK {@link IntegrationConfig} (the connection owns protocol, host,
+ * credentials and, for SMB, the share; the options own the per-use directory and mode). Options
+ * with no {@code connectionId} are parsed directly, so a programmatic caller can embed config.
+ *
+ * <p>Mirrors {@code S3ConnectionResolver}: an authenticated caller (save-time validation) must be
+ * allowed to use the connection; a background sweep with no caller skips that check, since the
+ * referencing source was access-checked when it was saved.
+ */
+@Service
+@RequiredArgsConstructor
+@Transactional(readOnly = true)
+public class NetworkConnectionResolver {
+
+    static final String CONNECTION_ID_OPTION = "connectionId";
+    private static final String DIRECTORY_OPTION = "directory";
+    private static final String MODE_OPTION = "mode";
+    private static final String RECURSIVE_OPTION = "recursive";
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    private final IntegrationConfigRepository connections;
+    private final OwnershipService ownership;
+    private final UserService userService;
+
+    public NetworkConfig resolve(Map<String, Object> options) {
+        Long connectionId = connectionId(options);
+        if (connectionId == null) {
+            return NetworkConfig.from(options);
+        }
+        IntegrationConfig connection =
+                connections
+                        .findById(connectionId)
+                        .filter(cfg -> cfg.getIntegrationType() == IntegrationType.NETWORK)
+                        .filter(this::usableByCurrentUser)
+                        // Existence and access collapse into one error so a caller cannot tell
+                        // "no such connection" from "someone else's" and enumerate ids.
+                        .orElseThrow(
+                                () ->
+                                        new IllegalArgumentException(
+                                                "unknown or inaccessible network connection"));
+        if (!connection.isEnabled()) {
+            throw new IllegalArgumentException("network connection is disabled");
+        }
+        Map<String, Object> merged = new LinkedHashMap<>(connectionConfig(connection));
+        copyPerUseOption(options, merged, DIRECTORY_OPTION);
+        copyPerUseOption(options, merged, MODE_OPTION);
+        copyPerUseOption(options, merged, RECURSIVE_OPTION);
+        return NetworkConfig.from(merged);
+    }
+
+    static Long connectionId(Map<String, Object> options) {
+        Object reference = options.get(CONNECTION_ID_OPTION);
+        if (reference == null || (reference instanceof String s && s.isBlank())) {
+            return null;
+        }
+        if (reference instanceof Number number) {
+            return number.longValue();
+        }
+        try {
+            return Long.valueOf(reference.toString().trim());
+        } catch (NumberFormatException e) {
+            throw new IllegalArgumentException(
+                    "network 'connectionId' is not a valid connection reference: " + reference);
+        }
+    }
+
+    private boolean usableByCurrentUser(IntegrationConfig connection) {
+        User user = currentUser();
+        return user == null || ownership.canUse(ResourceType.INTEGRATION_CONFIG, connection, user);
+    }
+
+    private User currentUser() {
+        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
+        if (auth == null || !auth.isAuthenticated()) {
+            return null;
+        }
+        Object principal = auth.getPrincipal();
+        if (principal instanceof User user) {
+            return user;
+        }
+        if (principal instanceof UserDetails userDetails) {
+            return userService.findByUsername(userDetails.getUsername()).orElse(null);
+        }
+        if (principal instanceof String username && !"anonymousUser".equals(username)) {
+            return userService.findByUsername(username).orElse(null);
+        }
+        return null;
+    }
+
+    private static Map<String, Object> connectionConfig(IntegrationConfig connection) {
+        String json = connection.getConfig();
+        if (json == null || json.isBlank()) {
+            return Map.of();
+        }
+        try {
+            return OBJECT_MAPPER.readValue(
+                    json, new TypeReference<LinkedHashMap<String, Object>>() {});
+        } catch (Exception e) {
+            throw new IllegalArgumentException(
+                    "network connection '" + connection.getName() + "' has unreadable config", e);
+        }
+    }
+
+    private static void copyPerUseOption(
+            Map<String, Object> options, Map<String, Object> merged, String key) {
+        Object value = options.get(key);
+        if (value != null && !value.toString().isBlank()) {
+            merged.put(key, value);
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkHostGuard.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkHostGuard.java
new file mode 100644
index 0000000000..44a174f989
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkHostGuard.java
@@ -0,0 +1,68 @@
+package stirling.software.proprietary.policy.network;
+
+import java.net.InetAddress;
+import java.net.UnknownHostException;
+
+import org.springframework.stereotype.Component;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.common.model.ApplicationProperties;
+
+/**
+ * Refuses a network source whose host resolves to a loopback, link-local, or private address,
+ * unless the operator opts in via {@code policies.allowPrivateNetworkSources} (every host) or names
+ * the host in {@code policies.allowedPrivateNetworkHosts} (that host only, for shared infra). The
+ * host comes from a portal user, so without this a connection could be aimed at internal services
+ * (the cloud metadata address, an admin panel). Mirrors the S3 endpoint guard; enforced both at
+ * save time and before every connect.
+ */
+@Component
+@RequiredArgsConstructor
+public class NetworkHostGuard {
+
+    private final ApplicationProperties applicationProperties;
+
+    public void requirePermitted(String host) {
+        if (applicationProperties.getPolicies().isAllowPrivateNetworkSources()) {
+            return;
+        }
+        if (host == null || host.isBlank()) {
+            throw new IllegalArgumentException("network source requires a host");
+        }
+        if (isAllowlisted(host)) {
+            return;
+        }
+        InetAddress[] addresses;
+        try {
+            addresses = InetAddress.getAllByName(host);
+        } catch (UnknownHostException e) {
+            throw new IllegalArgumentException("cannot resolve network host '" + host + "'", e);
+        }
+        for (InetAddress address : addresses) {
+            if (isPrivateOrLocal(address)) {
+                throw new IllegalArgumentException(
+                        "network host '"
+                                + host
+                                + "' resolves to a private or local address ("
+                                + address.getHostAddress()
+                                + "); add it to policies.allowedPrivateNetworkHosts or set"
+                                + " policies.allowPrivateNetworkSources=true to allow an"
+                                + " on-network server");
+            }
+        }
+    }
+
+    private boolean isAllowlisted(String host) {
+        return applicationProperties.getPolicies().getAllowedPrivateNetworkHosts().stream()
+                .anyMatch(allowed -> allowed != null && allowed.trim().equalsIgnoreCase(host));
+    }
+
+    private static boolean isPrivateOrLocal(InetAddress address) {
+        return address.isLoopbackAddress()
+                || address.isLinkLocalAddress()
+                || address.isSiteLocalAddress()
+                || address.isAnyLocalAddress()
+                || address.isMulticastAddress();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIdentities.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIdentities.java
new file mode 100644
index 0000000000..fb8d344abd
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIdentities.java
@@ -0,0 +1,52 @@
+package stirling.software.proprietary.policy.network;
+
+/**
+ * The network backend's identity and version scheme, shared by {@link NetworkInputSource} and its
+ * completion hook. Identity keys a file's ledger row and stays stable across sweeps; the gate is
+ * size + last-modified, since SFTP/FTP/SMB expose no ETag - the same "stat" strength as a folder
+ * source, so a touch that changes mtime counts as a new version.
+ */
+public final class NetworkIdentities {
+
+    private NetworkIdentities() {}
+
+    /** A stable, unique key for a remote file: {@code protocol://host:port[/share]/path}. */
+    public static String identity(NetworkConfig config, String path) {
+        StringBuilder id =
+                new StringBuilder(config.protocol().name().toLowerCase())
+                        .append("://")
+                        .append(config.host())
+                        .append(':')
+                        .append(config.port());
+        if (config.share() != null && !config.share().isBlank()) {
+            id.append('/').append(trimSlashes(config.share()));
+        }
+        id.append('/').append(trimLeadingSlash(path));
+        return id.toString();
+    }
+
+    /** The version gate: size and last-modified, mirroring the folder source's stat identity. */
+    public static String gate(long size, long lastModifiedMs) {
+        return size + ":" + lastModifiedMs;
+    }
+
+    private static String trimSlashes(String value) {
+        int start = 0;
+        int end = value.length();
+        while (start < end && (value.charAt(start) == '/' || value.charAt(start) == '\\')) {
+            start++;
+        }
+        while (end > start && (value.charAt(end - 1) == '/' || value.charAt(end - 1) == '\\')) {
+            end--;
+        }
+        return value.substring(start, end);
+    }
+
+    private static String trimLeadingSlash(String value) {
+        int start = 0;
+        while (start < value.length() && value.charAt(start) == '/') {
+            start++;
+        }
+        return value.substring(start);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkInputSource.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkInputSource.java
new file mode 100644
index 0000000000..0b6ff0aa45
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkInputSource.java
@@ -0,0 +1,148 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.springframework.core.io.Resource;
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.proprietary.policy.input.InputSource;
+import stirling.software.proprietary.policy.input.ResolveContext;
+import stirling.software.proprietary.policy.input.ResolvedInput;
+import stirling.software.proprietary.policy.model.InputSpec;
+import stirling.software.proprietary.policy.model.PolicyInputs;
+
+/**
+ * Reads input files from a network file server (SFTP, FTP/FTPS, or SMB), one bean serving all three
+ * source types ({@code sftp}, {@code ftp}, {@code network}); the protocol comes from the referenced
+ * connection. Each listed file is its own unit of work, claimed through the {@link ResolveContext}
+ * ledger and tracked in place, mirroring the S3 source. The version gate is size + last-modified
+ * (there is no ETag), so this has folder-source "stat" strength. Options: "connectionId" references
+ * the stored NETWORK connection; "directory" is the poll folder (relative to the login home or
+ * share root); "recursive" descends into subdirectories; "mode" is "consume" (default: a processed
+ * file is deleted once every policy that claimed it has settled successfully and it is still the
+ * version that ran) or "snapshot" (stateless, every run sees the full set).
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class NetworkInputSource implements InputSource {
+
+    private final NetworkConnectionResolver connectionResolver;
+    private final RemoteFileClientFactory clientFactory;
+
+    @Override
+    public String type() {
+        return NetworkProtocol.SMB.sourceType();
+    }
+
+    @Override
+    public boolean supports(InputSpec spec) {
+        return spec != null && NetworkProtocol.forSourceType(spec.type()) != null;
+    }
+
+    /**
+     * Fails fast at save time: an unknown/disabled/inaccessible connection, a protocol that does
+     * not match the source type, a blocked host, or a server the connection cannot list.
+     */
+    @Override
+    public void validate(InputSpec spec) {
+        NetworkConfig config = connectionResolver.resolve(spec.options());
+        NetworkProtocol expected = NetworkProtocol.forSourceType(spec.type());
+        if (expected != null && config.protocol() != expected) {
+            throw new IllegalArgumentException(
+                    "source type '"
+                            + spec.type()
+                            + "' does not match the connection protocol "
+                            + config.protocol());
+        }
+        try (RemoteFileClient client = clientFactory.connect(config)) {
+            client.list(config.directory(), false);
+        } catch (IOException e) {
+            throw new IllegalArgumentException(
+                    "cannot access " + config.protocol() + " source: " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public List<ResolvedInput> resolve(InputSpec spec, ResolveContext ctx) throws IOException {
+        NetworkConfig config = connectionResolver.resolve(spec.options());
+        // A listing failure propagates so the sweep reads it as "could not list" (which vetoes
+        // presence cleanup), never as "verifiably no files".
+        List<RemoteFile> files;
+        try (RemoteFileClient client = clientFactory.connect(config)) {
+            files = client.list(config.directory(), config.recursive());
+        }
+        if (files.size() >= RemoteFileClient.MAX_FILES) {
+            log.warn(
+                    "Network source listing hit the {}-file cap; remaining files are picked up"
+                            + " on later sweeps",
+                    RemoteFileClient.MAX_FILES);
+        }
+
+        if (config.snapshot()) {
+            return files.stream()
+                    .map(file -> ResolvedInput.of(PolicyInputs.of(List.of(resource(config, file)))))
+                    .toList();
+        }
+
+        ctx.reportPresent(
+                files.stream()
+                        .map(file -> NetworkIdentities.identity(config, file.path()))
+                        .toList());
+
+        List<ResolvedInput> work = new ArrayList<>();
+        for (RemoteFile file : files) {
+            String identity = NetworkIdentities.identity(config, file.path());
+            String gate = NetworkIdentities.gate(file.size(), file.lastModifiedMs());
+            if (!ctx.claim(identity, gate, null)) {
+                continue;
+            }
+            work.add(
+                    new ResolvedInput(
+                            PolicyInputs.of(List.of(resource(config, file))),
+                            success ->
+                                    completeConsumed(ctx, config, file, identity, gate, success)));
+        }
+        return work;
+    }
+
+    /**
+     * Settle at the version this run claimed, then remove the file only when it still carries that
+     * version and every policy that claimed it has settled DONE, mirroring the S3 source's
+     * consensus delete. A failed run settles ERROR and never deletes; the DONE row of a file that
+     * could not be deleted still stops reprocessing.
+     */
+    private void completeConsumed(
+            ResolveContext ctx,
+            NetworkConfig config,
+            RemoteFile file,
+            String identity,
+            String claimGate,
+            boolean success) {
+        ctx.settle(identity, claimGate, null, success);
+        if (!success) {
+            return;
+        }
+        try (RemoteFileClient client = clientFactory.connect(config)) {
+            RemoteFile current = client.stat(file.path());
+            if (current == null) {
+                return; // removed by the user or a co-watching policy's consensus delete
+            }
+            String currentGate = NetworkIdentities.gate(current.size(), current.lastModifiedMs());
+            if (currentGate.equals(claimGate) && ctx.allSettledDone(identity)) {
+                client.delete(file.path());
+            }
+        } catch (IOException e) {
+            log.warn("Could not remove consumed network file {}: {}", identity, e.getMessage());
+        }
+    }
+
+    private Resource resource(NetworkConfig config, RemoteFile file) {
+        return new RemoteFileResource(clientFactory, config, file);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidator.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidator.java
new file mode 100644
index 0000000000..a9ec9cc260
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidator.java
@@ -0,0 +1,35 @@
+package stirling.software.proprietary.policy.network;
+
+import java.util.Map;
+
+import org.springframework.stereotype.Component;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.proprietary.integration.model.IntegrationType;
+import stirling.software.proprietary.integration.service.IntegrationConfigValidator;
+
+/**
+ * The network connection schema, enforced when a NETWORK {@link IntegrationType} config is saved:
+ * protocol, host, credentials (and, for SMB, a share) required, with the same private-address guard
+ * {@link RemoteFileClientFactory} applies before connecting, moved to save time so a bad connection
+ * fails in the form rather than in a sweep. A live connectivity check runs later, when the source
+ * that uses the connection is saved ({@link NetworkInputSource#validate}).
+ */
+@Component
+@RequiredArgsConstructor
+public class NetworkIntegrationValidator implements IntegrationConfigValidator {
+
+    private final NetworkHostGuard hostGuard;
+
+    @Override
+    public IntegrationType type() {
+        return IntegrationType.NETWORK;
+    }
+
+    @Override
+    public void validate(Map<String, Object> config) {
+        NetworkConfig parsed = NetworkConfig.from(config);
+        hostGuard.requirePermitted(parsed.host());
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkProtocol.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkProtocol.java
new file mode 100644
index 0000000000..bbd6dc5d7e
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/NetworkProtocol.java
@@ -0,0 +1,57 @@
+package stirling.software.proprietary.policy.network;
+
+/**
+ * The file-transfer protocols a network source speaks. Each maps to a {@link RemoteFileClient}
+ * implementation and to a portal source type: {@code sftp} -> SFTP, {@code ftp} -> FTP/FTPS, {@code
+ * network} -> SMB (a Windows/Samba share). The stored connection carries the protocol; the source
+ * type only routes the UI.
+ */
+public enum NetworkProtocol {
+    SFTP(22, "sftp"),
+    FTP(21, "ftp"),
+    SMB(445, "network");
+
+    private final int defaultPort;
+    private final String sourceType;
+
+    NetworkProtocol(int defaultPort, String sourceType) {
+        this.defaultPort = defaultPort;
+        this.sourceType = sourceType;
+    }
+
+    public int defaultPort() {
+        return defaultPort;
+    }
+
+    /** The portal source {@code type} string this protocol backs. */
+    public String sourceType() {
+        return sourceType;
+    }
+
+    /** Parse a stored {@code protocol} option (case-insensitive), or null when absent/unknown. */
+    public static NetworkProtocol fromOption(String value) {
+        if (value == null) {
+            return null;
+        }
+        String normalized = value.trim().toUpperCase();
+        for (NetworkProtocol protocol : values()) {
+            if (protocol.name().equals(normalized)) {
+                return protocol;
+            }
+        }
+        return null;
+    }
+
+    /** The protocol a source {@code type} string implies, or null when it is not a network type. */
+    public static NetworkProtocol forSourceType(String type) {
+        if (type == null) {
+            return null;
+        }
+        for (NetworkProtocol protocol : values()) {
+            if (protocol.sourceType.equals(type)) {
+                return protocol;
+            }
+        }
+        return null;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFile.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFile.java
new file mode 100644
index 0000000000..8c72ddab64
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFile.java
@@ -0,0 +1,18 @@
+package stirling.software.proprietary.policy.network;
+
+/**
+ * One remote file discovered by a {@link RemoteFileClient} listing: its full path on the server,
+ * its display name, size in bytes, and last-modified epoch milliseconds. Size and mtime form the
+ * version gate ({@link NetworkIdentities#gate}) since network protocols expose no ETag.
+ */
+public record RemoteFile(String path, String name, long size, long lastModifiedMs) {
+
+    public RemoteFile {
+        if (path == null || path.isBlank()) {
+            throw new IllegalArgumentException("remote file requires a path");
+        }
+        if (name == null || name.isBlank()) {
+            name = path.substring(path.lastIndexOf('/') + 1);
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClient.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClient.java
new file mode 100644
index 0000000000..217c590031
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClient.java
@@ -0,0 +1,38 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.Closeable;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.List;
+
+/**
+ * A connected session to one network file server (SFTP, FTP, or SMB), created by {@link
+ * RemoteFileClientFactory}. Sessions are short-lived and single-use: the caller opens one, performs
+ * a listing, a read, or a delete, then closes it - there is no pooling, because network sessions
+ * time out and go stale far more readily than an S3 HTTP client. Callers must {@link #close()}
+ * every client (try-with-resources), except when streaming, where ownership is handed to the
+ * returned stream so it can be read after {@code resolve} returns.
+ */
+public interface RemoteFileClient extends Closeable {
+
+    /**
+     * Listing cap: a listing stops once this many files are collected, bounding memory against a
+     * huge (or maliciously deep) tree. Consume mode drains the rest on later sweeps.
+     */
+    int MAX_FILES = 10_000;
+
+    /**
+     * Every regular, non-hidden file under {@code directory}, optionally descending into it,
+     * truncated at {@link #MAX_FILES}.
+     */
+    List<RemoteFile> list(String directory, boolean recursive) throws IOException;
+
+    /** The current metadata for one path, or null when it no longer exists. */
+    RemoteFile stat(String path) throws IOException;
+
+    /** Opens the file for reading; the stream stays valid until this client is closed. */
+    InputStream open(String path) throws IOException;
+
+    /** Removes the file; a no-op if it is already gone. */
+    void delete(String path) throws IOException;
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClientFactory.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClientFactory.java
new file mode 100644
index 0000000000..fe3f43b1bb
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileClientFactory.java
@@ -0,0 +1,28 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.IOException;
+
+import org.springframework.stereotype.Component;
+
+import lombok.RequiredArgsConstructor;
+
+/**
+ * Opens a fresh {@link RemoteFileClient} for one {@link NetworkConfig}, dispatched by protocol. The
+ * host is guarded against private addresses before every connect, since it comes from a portal user
+ * and each operation opens its own short-lived session (there is no long-lived pool to guard once).
+ */
+@Component
+@RequiredArgsConstructor
+public class RemoteFileClientFactory {
+
+    private final NetworkHostGuard hostGuard;
+
+    public RemoteFileClient connect(NetworkConfig config) throws IOException {
+        hostGuard.requirePermitted(config.host());
+        return switch (config.protocol()) {
+            case SFTP -> SftpFileClient.connect(config);
+            case FTP -> FtpFileClient.connect(config);
+            case SMB -> SmbFileClient.connect(config);
+        };
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileResource.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileResource.java
new file mode 100644
index 0000000000..e9429e0ea7
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/RemoteFileResource.java
@@ -0,0 +1,68 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.FilterInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+
+import org.springframework.core.io.AbstractResource;
+
+/**
+ * A policy input backed by a remote file, streamed on demand. Each read opens its own short-lived
+ * client (the listing client is long gone by the time the run reads the file) and hands it to the
+ * stream, so closing the stream tears the session down. Size and name come from the listing, so the
+ * pipeline can size the input without a second round trip.
+ */
+final class RemoteFileResource extends AbstractResource {
+
+    private final RemoteFileClientFactory factory;
+    private final NetworkConfig config;
+    private final RemoteFile file;
+
+    RemoteFileResource(RemoteFileClientFactory factory, NetworkConfig config, RemoteFile file) {
+        this.factory = factory;
+        this.config = config;
+        this.file = file;
+    }
+
+    @Override
+    public InputStream getInputStream() throws IOException {
+        RemoteFileClient client = factory.connect(config);
+        try {
+            InputStream stream = client.open(file.path());
+            return new FilterInputStream(stream) {
+                @Override
+                public void close() throws IOException {
+                    try {
+                        super.close();
+                    } finally {
+                        client.close();
+                    }
+                }
+            };
+        } catch (IOException e) {
+            client.close();
+            throw e;
+        }
+    }
+
+    /** Listed just now; a reader gets a precise error from {@link #getInputStream} instead. */
+    @Override
+    public boolean exists() {
+        return true;
+    }
+
+    @Override
+    public long contentLength() {
+        return file.size();
+    }
+
+    @Override
+    public String getFilename() {
+        return file.name();
+    }
+
+    @Override
+    public String getDescription() {
+        return "network file " + NetworkIdentities.identity(config, file.path());
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java
new file mode 100644
index 0000000000..5ecc29392d
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java
@@ -0,0 +1,312 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.FileAlreadyExistsException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
+import java.util.ArrayList;
+import java.util.Base64;
+import java.util.List;
+import java.util.Locale;
+import java.util.Vector;
+
+import com.jcraft.jsch.ChannelSftp;
+import com.jcraft.jsch.HostKey;
+import com.jcraft.jsch.HostKeyRepository;
+import com.jcraft.jsch.JSch;
+import com.jcraft.jsch.JSchException;
+import com.jcraft.jsch.Session;
+import com.jcraft.jsch.SftpATTRS;
+import com.jcraft.jsch.SftpException;
+import com.jcraft.jsch.UserInfo;
+
+import stirling.software.common.configuration.InstallationPathConfig;
+
+/**
+ * SFTP client over jsch. Host keys are verified: a connection with a configured {@code
+ * hostKeyFingerprint} only accepts the server presenting that key; otherwise the key seen on the
+ * first connect is pinned in a known-hosts file under the config directory and any later change is
+ * refused (trust-on-first-use). Directories are listed, read and deleted through one channel; a
+ * blank directory means the login home. Symlinked directories are not followed and hidden entries
+ * are skipped, mirroring the folder source.
+ */
+final class SftpFileClient implements RemoteFileClient {
+
+    private static final int CONNECT_TIMEOUT_MS = 15_000;
+    private static final int READ_TIMEOUT_MS = 60_000;
+    private static final int MAX_DEPTH = 64;
+    static final String KNOWN_HOSTS_FILE = "sftp_known_hosts";
+
+    private final Session session;
+    private final ChannelSftp channel;
+
+    private SftpFileClient(Session session, ChannelSftp channel) {
+        this.session = session;
+        this.channel = channel;
+    }
+
+    static SftpFileClient connect(NetworkConfig config) throws IOException {
+        JSch jsch = new JSch();
+        try {
+            if (config.privateKey() != null) {
+                byte[] passphrase =
+                        config.privateKeyPassphrase() == null
+                                ? null
+                                : config.privateKeyPassphrase().getBytes(StandardCharsets.UTF_8);
+                jsch.addIdentity(
+                        "network-source",
+                        config.privateKey().getBytes(StandardCharsets.UTF_8),
+                        null,
+                        passphrase);
+            }
+            Session session = jsch.getSession(config.username(), config.host(), config.port());
+            if (config.password() != null) {
+                session.setPassword(config.password());
+            }
+            if (config.hostKeyFingerprint() != null) {
+                // Pinned key: only the configured fingerprint is ever accepted.
+                session.setHostKeyRepository(
+                        new PinnedHostKeyRepository(config.hostKeyFingerprint()));
+            } else {
+                // Trust-on-first-use: the first key seen is recorded, a changed key is refused.
+                jsch.setKnownHosts(knownHostsFile().toString());
+                session.setHostKeyRepository(
+                        new TofuHostKeyRepository(jsch.getHostKeyRepository()));
+            }
+            session.setConfig("StrictHostKeyChecking", "yes");
+            session.connect(CONNECT_TIMEOUT_MS);
+            session.setTimeout(READ_TIMEOUT_MS);
+            ChannelSftp channel = (ChannelSftp) session.openChannel("sftp");
+            channel.connect(CONNECT_TIMEOUT_MS);
+            return new SftpFileClient(session, channel);
+        } catch (JSchException e) {
+            throw new IOException(
+                    "SFTP connection to " + config.host() + " failed: " + e.getMessage(), e);
+        }
+    }
+
+    /** jsch only persists newly pinned keys into a file that already exists, so create it. */
+    private static Path knownHostsFile() throws IOException {
+        Path file = Path.of(InstallationPathConfig.getConfigPath(), KNOWN_HOSTS_FILE);
+        Files.createDirectories(file.getParent());
+        try {
+            Files.createFile(file);
+        } catch (FileAlreadyExistsException ignored) {
+            // Another connect already created it; the content is managed by jsch.
+        }
+        return file;
+    }
+
+    /**
+     * Trust-on-first-use over the shared known-hosts file: an unknown host's key is pinned on first
+     * contact, and a key that later differs is refused ({@code CHANGED}). Rejection happens before
+     * authentication, so credentials are never sent to an impersonating server.
+     */
+    private static final class TofuHostKeyRepository implements HostKeyRepository {
+
+        private final HostKeyRepository knownHosts;
+
+        private TofuHostKeyRepository(HostKeyRepository knownHosts) {
+            this.knownHosts = knownHosts;
+        }
+
+        @Override
+        public int check(String host, byte[] key) {
+            int result = knownHosts.check(host, key);
+            if (result != NOT_INCLUDED) {
+                return result;
+            }
+            try {
+                knownHosts.add(new HostKey(host, key), null);
+            } catch (JSchException e) {
+                return CHANGED; // a key we cannot even parse is refused, not trusted
+            }
+            return OK;
+        }
+
+        @Override
+        public void add(HostKey hostkey, UserInfo ui) {
+            knownHosts.add(hostkey, ui);
+        }
+
+        @Override
+        public void remove(String host, String type) {
+            knownHosts.remove(host, type);
+        }
+
+        @Override
+        public void remove(String host, String type, byte[] key) {
+            knownHosts.remove(host, type, key);
+        }
+
+        @Override
+        public String getKnownHostsRepositoryID() {
+            return knownHosts.getKnownHostsRepositoryID();
+        }
+
+        @Override
+        public HostKey[] getHostKey() {
+            return knownHosts.getHostKey();
+        }
+
+        @Override
+        public HostKey[] getHostKey(String host, String type) {
+            return knownHosts.getHostKey(host, type);
+        }
+    }
+
+    /**
+     * Accepts only the server key whose SHA-256 fingerprint matches the configured value (OpenSSH
+     * {@code SHA256:base64} form, prefix optional). Rejection happens before authentication, so
+     * credentials are never sent to an impersonating server.
+     */
+    private static final class PinnedHostKeyRepository implements HostKeyRepository {
+
+        private final String expected;
+
+        private PinnedHostKeyRepository(String fingerprint) {
+            this.expected = normalize(fingerprint);
+        }
+
+        @Override
+        public int check(String host, byte[] key) {
+            return expected.equals(sha256Fingerprint(key)) ? OK : CHANGED;
+        }
+
+        private static String normalize(String fingerprint) {
+            String value = fingerprint.trim();
+            if (value.toUpperCase(Locale.ROOT).startsWith("SHA256:")) {
+                value = value.substring("SHA256:".length());
+            }
+            // OpenSSH prints the digest base64 without padding; accept it padded too.
+            return value.replace("=", "");
+        }
+
+        private static String sha256Fingerprint(byte[] key) {
+            try {
+                MessageDigest digest = MessageDigest.getInstance("SHA-256");
+                return Base64.getEncoder().withoutPadding().encodeToString(digest.digest(key));
+            } catch (NoSuchAlgorithmException e) {
+                throw new IllegalStateException("SHA-256 unavailable", e);
+            }
+        }
+
+        @Override
+        public void add(HostKey hostkey, UserInfo ui) {}
+
+        @Override
+        public void remove(String host, String type) {}
+
+        @Override
+        public void remove(String host, String type, byte[] key) {}
+
+        @Override
+        public String getKnownHostsRepositoryID() {
+            return "pinned-fingerprint";
+        }
+
+        @Override
+        public HostKey[] getHostKey() {
+            return new HostKey[0];
+        }
+
+        @Override
+        public HostKey[] getHostKey(String host, String type) {
+            return new HostKey[0];
+        }
+    }
+
+    @Override
+    public List<RemoteFile> list(String directory, boolean recursive) throws IOException {
+        List<RemoteFile> files = new ArrayList<>();
+        collect(dir(directory), recursive, 0, files);
+        return files;
+    }
+
+    @SuppressWarnings("unchecked")
+    private void collect(String directory, boolean recursive, int depth, List<RemoteFile> out)
+            throws IOException {
+        Vector<ChannelSftp.LsEntry> entries;
+        try {
+            entries = channel.ls(directory);
+        } catch (SftpException e) {
+            throw new IOException("cannot list " + directory + ": " + e.getMessage(), e);
+        }
+        for (ChannelSftp.LsEntry entry : entries) {
+            if (out.size() >= MAX_FILES) {
+                return;
+            }
+            String name = entry.getFilename();
+            if (name.equals(".") || name.equals("..") || name.startsWith(".")) {
+                continue;
+            }
+            SftpATTRS attrs = entry.getAttrs();
+            String path = join(directory, name);
+            if (attrs.isDir()) {
+                if (recursive && !attrs.isLink() && depth < MAX_DEPTH) {
+                    collect(path, true, depth + 1, out);
+                }
+                continue;
+            }
+            if (attrs.isReg()) {
+                out.add(new RemoteFile(path, name, attrs.getSize(), attrs.getMTime() * 1000L));
+            }
+        }
+    }
+
+    @Override
+    public RemoteFile stat(String path) throws IOException {
+        try {
+            SftpATTRS attrs = channel.stat(path);
+            String name = path.substring(path.lastIndexOf('/') + 1);
+            return new RemoteFile(path, name, attrs.getSize(), attrs.getMTime() * 1000L);
+        } catch (SftpException e) {
+            if (e.id == ChannelSftp.SSH_FX_NO_SUCH_FILE) {
+                return null;
+            }
+            throw new IOException("cannot stat " + path + ": " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public InputStream open(String path) throws IOException {
+        try {
+            return channel.get(path);
+        } catch (SftpException e) {
+            throw new IOException("cannot read " + path + ": " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public void delete(String path) throws IOException {
+        try {
+            channel.rm(path);
+        } catch (SftpException e) {
+            if (e.id == ChannelSftp.SSH_FX_NO_SUCH_FILE) {
+                return;
+            }
+            throw new IOException("cannot delete " + path + ": " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public void close() {
+        channel.disconnect();
+        session.disconnect();
+    }
+
+    private static String dir(String directory) {
+        return directory == null || directory.isBlank() ? "." : directory;
+    }
+
+    private static String join(String directory, String name) {
+        if (directory.equals(".")) {
+            return name;
+        }
+        return directory.endsWith("/") ? directory + name : directory + "/" + name;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SmbFileClient.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SmbFileClient.java
new file mode 100644
index 0000000000..b49d6dad53
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SmbFileClient.java
@@ -0,0 +1,236 @@
+package stirling.software.proprietary.policy.network;
+
+import java.io.FilterInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.EnumSet;
+import java.util.List;
+import java.util.concurrent.TimeUnit;
+
+import com.hierynomus.msdtyp.AccessMask;
+import com.hierynomus.mserref.NtStatus;
+import com.hierynomus.msfscc.FileAttributes;
+import com.hierynomus.msfscc.fileinformation.FileAllInformation;
+import com.hierynomus.msfscc.fileinformation.FileIdBothDirectoryInformation;
+import com.hierynomus.mssmb2.SMB2CreateDisposition;
+import com.hierynomus.mssmb2.SMB2ShareAccess;
+import com.hierynomus.mssmb2.SMBApiException;
+import com.hierynomus.protocol.commons.socket.ProxySocketFactory;
+import com.hierynomus.smbj.SMBClient;
+import com.hierynomus.smbj.SmbConfig;
+import com.hierynomus.smbj.auth.AuthenticationContext;
+import com.hierynomus.smbj.common.SMBRuntimeException;
+import com.hierynomus.smbj.connection.Connection;
+import com.hierynomus.smbj.session.Session;
+import com.hierynomus.smbj.share.DiskShare;
+
+/**
+ * SMB2/3 client over smbj against a Windows or Samba share. The share is named on the connection;
+ * directories are relative to its root, using backslashes as SMB expects. A blank directory lists
+ * the share root. Hidden and system entries are skipped, and symlink/reparse dirs are not
+ * descended, mirroring the folder source.
+ */
+final class SmbFileClient implements RemoteFileClient {
+
+    private static final int CONNECT_TIMEOUT_MS = 15_000;
+    private static final int READ_TIMEOUT_MS = 60_000;
+    private static final int MAX_DEPTH = 64;
+
+    private final SMBClient smbClient;
+    private final Connection connection;
+    private final Session session;
+    private final DiskShare share;
+
+    private SmbFileClient(
+            SMBClient smbClient, Connection connection, Session session, DiskShare share) {
+        this.smbClient = smbClient;
+        this.connection = connection;
+        this.session = session;
+        this.share = share;
+    }
+
+    static SmbFileClient connect(NetworkConfig config) throws IOException {
+        // Bounded connect and read timeouts (both default to unlimited) so a host that accepts
+        // the TCP connection then stalls cannot wedge a poller.
+        SmbConfig smbConfig =
+                SmbConfig.builder()
+                        .withSocketFactory(new ProxySocketFactory(CONNECT_TIMEOUT_MS))
+                        .withSoTimeout(READ_TIMEOUT_MS, TimeUnit.MILLISECONDS)
+                        .withTimeout(READ_TIMEOUT_MS, TimeUnit.MILLISECONDS)
+                        .build();
+        SMBClient smbClient = new SMBClient(smbConfig);
+        Connection connection = smbClient.connect(config.host(), config.port());
+        try {
+            char[] password =
+                    config.password() == null ? new char[0] : config.password().toCharArray();
+            AuthenticationContext auth =
+                    new AuthenticationContext(config.username(), password, config.domain());
+            Session session = connection.authenticate(auth);
+            DiskShare share = (DiskShare) session.connectShare(config.share());
+            return new SmbFileClient(smbClient, connection, session, share);
+        } catch (RuntimeException e) {
+            closeQuietly(connection);
+            closeQuietly(smbClient);
+            throw new IOException(
+                    "SMB connection to \\\\"
+                            + config.host()
+                            + "\\"
+                            + config.share()
+                            + " failed: "
+                            + e.getMessage(),
+                    e);
+        }
+    }
+
+    @Override
+    public List<RemoteFile> list(String directory, boolean recursive) throws IOException {
+        List<RemoteFile> files = new ArrayList<>();
+        collect(smbDir(directory), recursive, 0, files);
+        return files;
+    }
+
+    private void collect(String directory, boolean recursive, int depth, List<RemoteFile> out)
+            throws IOException {
+        List<FileIdBothDirectoryInformation> entries;
+        try {
+            entries = share.list(directory);
+        } catch (SMBRuntimeException e) {
+            // smbj throws unchecked; surface as IOException like the SFTP/FTP clients.
+            throw new IOException("cannot list " + slashed(directory) + ": " + e.getMessage(), e);
+        }
+        for (FileIdBothDirectoryInformation info : entries) {
+            if (out.size() >= MAX_FILES) {
+                return;
+            }
+            String name = info.getFileName();
+            if (name.equals(".") || name.equals("..") || name.startsWith(".")) {
+                continue;
+            }
+            long attributes = info.getFileAttributes();
+            if (isSet(attributes, FileAttributes.FILE_ATTRIBUTE_HIDDEN)
+                    || isSet(attributes, FileAttributes.FILE_ATTRIBUTE_SYSTEM)) {
+                continue;
+            }
+            String path = join(directory, name);
+            if (isSet(attributes, FileAttributes.FILE_ATTRIBUTE_DIRECTORY)) {
+                if (recursive
+                        && !isSet(attributes, FileAttributes.FILE_ATTRIBUTE_REPARSE_POINT)
+                        && depth < MAX_DEPTH) {
+                    collect(path, true, depth + 1, out);
+                }
+                continue;
+            }
+            out.add(
+                    new RemoteFile(
+                            slashed(path),
+                            name,
+                            info.getEndOfFile(),
+                            info.getLastWriteTime().toEpochMillis()));
+        }
+    }
+
+    @Override
+    public RemoteFile stat(String path) throws IOException {
+        String smbPath = smbPath(path);
+        try {
+            FileAllInformation info = share.getFileInformation(smbPath);
+            String name = path.substring(path.lastIndexOf('/') + 1);
+            return new RemoteFile(
+                    slashed(smbPath),
+                    name,
+                    info.getStandardInformation().getEndOfFile(),
+                    info.getBasicInformation().getLastWriteTime().toEpochMillis());
+        } catch (SMBApiException e) {
+            if (isNotFound(e)) {
+                return null;
+            }
+            throw new IOException("cannot stat " + path + ": " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public InputStream open(String path) throws IOException {
+        try {
+            com.hierynomus.smbj.share.File file =
+                    share.openFile(
+                            smbPath(path),
+                            EnumSet.of(AccessMask.GENERIC_READ),
+                            null,
+                            SMB2ShareAccess.ALL,
+                            SMB2CreateDisposition.FILE_OPEN,
+                            null);
+            // Close the SMB file handle when the stream is closed, before the session is torn down.
+            return new FilterInputStream(file.getInputStream()) {
+                @Override
+                public void close() throws IOException {
+                    try {
+                        super.close();
+                    } finally {
+                        file.close();
+                    }
+                }
+            };
+        } catch (SMBApiException e) {
+            throw new IOException("cannot read " + path + ": " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public void delete(String path) throws IOException {
+        try {
+            share.rm(smbPath(path));
+        } catch (SMBApiException e) {
+            if (isNotFound(e)) {
+                return;
+            }
+            throw new IOException("cannot delete " + path + ": " + e.getMessage(), e);
+        }
+    }
+
+    @Override
+    public void close() {
+        closeQuietly(share);
+        closeQuietly(session);
+        closeQuietly(connection);
+        closeQuietly(smbClient);
+    }
+
+    private static boolean isNotFound(SMBApiException e) {
+        return e.getStatus() == NtStatus.STATUS_OBJECT_NAME_NOT_FOUND
+                || e.getStatus() == NtStatus.STATUS_OBJECT_PATH_NOT_FOUND;
+    }
+
+    private static boolean isSet(long attributes, FileAttributes attribute) {
+        return (attributes & attribute.getValue()) != 0;
+    }
+
+    private static void closeQuietly(AutoCloseable closeable) {
+        try {
+            closeable.close();
+        } catch (Exception ignored) {
+            // Best-effort teardown; the session is being abandoned anyway.
+        }
+    }
+
+    /** The share-relative listing path: blank means the share root, which smbj lists as "". */
+    private static String smbDir(String directory) {
+        return directory == null || directory.isBlank() ? "" : smbPath(directory);
+    }
+
+    /** SMB paths use backslashes; internal identities keep forward slashes. */
+    private static String smbPath(String path) {
+        return path.replace('/', '\\');
+    }
+
+    private static String slashed(String path) {
+        return path.replace('\\', '/');
+    }
+
+    private static String join(String directory, String name) {
+        if (directory.isEmpty()) {
+            return name;
+        }
+        return directory.endsWith("\\") ? directory + name : directory + "\\" + name;
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/FtpNetworkSourceIntegrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/FtpNetworkSourceIntegrationTest.java
new file mode 100644
index 0000000000..567ed4e7cf
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/FtpNetworkSourceIntegrationTest.java
@@ -0,0 +1,199 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.Mockito.mock;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Supplier;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.condition.EnabledIfEnvironmentVariable;
+import org.testcontainers.containers.Container;
+import org.testcontainers.containers.FixedHostPortGenericContainer;
+import org.testcontainers.containers.GenericContainer;
+import org.testcontainers.containers.wait.strategy.Wait;
+import org.testcontainers.junit.jupiter.Testcontainers;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.access.service.OwnershipService;
+import stirling.software.proprietary.integration.repository.IntegrationConfigRepository;
+import stirling.software.proprietary.policy.input.ResolveContext;
+import stirling.software.proprietary.policy.input.ResolvedInput;
+import stirling.software.proprietary.policy.ledger.InProcessProcessedLedger;
+import stirling.software.proprietary.policy.model.InputSpec;
+import stirling.software.proprietary.security.service.UserService;
+
+/**
+ * End-to-end {@link NetworkInputSource} test over FTP against a real vsftpd server, through the
+ * production {@link FtpFileClient}: listing, claiming, streaming the actual bytes (exercising the
+ * passive data channel and {@code completePendingCommand}), consume delete, and save-time
+ * validation. Passive FTP hands the client a data port, so the control and one passive port are
+ * pinned to fixed host ports and the server advertises 127.0.0.1 - the only way this works through
+ * Testcontainers' per-run port mapping.
+ */
+@Testcontainers(disabledWithoutDocker = true)
+@EnabledIfEnvironmentVariable(
+        named = "RUN_NETWORK_INTEGRATION_TESTS",
+        matches = "true",
+        disabledReason =
+                "Spins up SFTP/FTP/SMB containers; opt-in to keep several heavy containers off the"
+                        + " standard CI runner. Run with RUN_NETWORK_INTEGRATION_TESTS=true.")
+class FtpNetworkSourceIntegrationTest {
+
+    private static final String POLICY = "p1";
+    private static final String USER = "stirling";
+    private static final String PASS = "secret";
+    private static final String HOME = "/ftp/stirling";
+    // Passive FTP needs the data port pinned to a known host port, so pick two free ones up front
+    // (rather than hard-coding) to avoid clashing with anything else on a CI runner.
+    private static final int CONTROL_PORT;
+    private static final int PASSIVE_PORT;
+
+    static {
+        try (java.net.ServerSocket control = new java.net.ServerSocket(0);
+                java.net.ServerSocket passive = new java.net.ServerSocket(0)) {
+            CONTROL_PORT = control.getLocalPort();
+            PASSIVE_PORT = passive.getLocalPort();
+        } catch (java.io.IOException e) {
+            throw new java.io.UncheckedIOException(e);
+        }
+    }
+
+    @org.testcontainers.junit.jupiter.Container
+    static GenericContainer<?> ftp =
+            new FixedHostPortGenericContainer<>("delfer/alpine-ftp-server:latest")
+                    .withFixedExposedPort(CONTROL_PORT, 21)
+                    .withFixedExposedPort(PASSIVE_PORT, PASSIVE_PORT)
+                    .withEnv("USERS", USER + "|" + PASS + "|" + HOME + "|1000")
+                    .withEnv("ADDRESS", "127.0.0.1")
+                    .withEnv("MIN_PORT", String.valueOf(PASSIVE_PORT))
+                    .withEnv("MAX_PORT", String.valueOf(PASSIVE_PORT))
+                    .waitingFor(Wait.forListeningPort());
+
+    private NetworkInputSource source;
+    private InProcessProcessedLedger ledger;
+    private RecordingContext ctx;
+
+    @BeforeEach
+    void setUp() {
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowPrivateNetworkSources(true);
+        RemoteFileClientFactory factory =
+                new RemoteFileClientFactory(new NetworkHostGuard(properties));
+        NetworkConnectionResolver resolver =
+                new NetworkConnectionResolver(
+                        mock(IntegrationConfigRepository.class),
+                        mock(OwnershipService.class),
+                        mock(UserService.class));
+        source = new NetworkInputSource(resolver, factory);
+        ledger = new InProcessProcessedLedger();
+        ctx = new RecordingContext();
+    }
+
+    @Test
+    void consumeListsStreamsAndDeletes() throws Exception {
+        put("doc.pdf", "hello ftp");
+
+        List<ResolvedInput> work = source.resolve(spec(Map.of()), ctx);
+
+        assertThat(work).hasSize(1);
+        assertThat(read(work.get(0))).isEqualTo("hello ftp");
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+
+        work.get(0).onComplete().accept(true);
+        assertThat(exists("doc.pdf")).isFalse();
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+    }
+
+    @Test
+    void aFailedFileStaysOnTheServer() throws Exception {
+        put("doc.pdf", "data");
+
+        source.resolve(spec(Map.of()), ctx).get(0).onComplete().accept(false);
+
+        assertThat(exists("doc.pdf")).isTrue();
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+    }
+
+    @Test
+    void validateConnectsAndRejectsBadCredentials() {
+        source.validate(spec(Map.of()));
+
+        Map<String, Object> wrong = new HashMap<>(baseOptions());
+        wrong.put("password", "not-the-password");
+        assertThatThrownBy(() -> source.validate(new InputSpec("ftp", wrong)))
+                .isInstanceOf(IllegalArgumentException.class)
+                .hasMessageContaining("cannot access");
+    }
+
+    private Map<String, Object> baseOptions() {
+        Map<String, Object> options = new HashMap<>();
+        options.put("protocol", "ftp");
+        options.put("host", "127.0.0.1");
+        options.put("port", String.valueOf(CONTROL_PORT));
+        options.put("username", USER);
+        options.put("password", PASS);
+        return options;
+    }
+
+    private InputSpec spec(Map<String, Object> extra) {
+        Map<String, Object> options = new HashMap<>(baseOptions());
+        options.putAll(extra);
+        return new InputSpec("ftp", options);
+    }
+
+    private void put(String name, String content) throws Exception {
+        String path = HOME + "/" + name;
+        exec("printf '%s' '" + content + "' > " + path + " && chown 1000 " + path);
+    }
+
+    private boolean exists(String name) throws Exception {
+        return exec("test -f " + HOME + "/" + name + " && echo yes || echo no").contains("yes");
+    }
+
+    private String exec(String script) throws Exception {
+        Container.ExecResult result = ftp.execInContainer("sh", "-c", script);
+        return result.getStdout() + result.getStderr();
+    }
+
+    private static String read(ResolvedInput unit) throws IOException {
+        try (InputStream stream = unit.inputs().primary().get(0).getInputStream()) {
+            return new String(stream.readAllBytes(), StandardCharsets.UTF_8);
+        }
+    }
+
+    private class RecordingContext implements ResolveContext {
+
+        private final List<String> present = new ArrayList<>();
+
+        @Override
+        public boolean claim(String identity, String gate, Supplier<String> contentHash) {
+            return ledger.claim(POLICY, identity, gate, contentHash);
+        }
+
+        @Override
+        public void settle(
+                String identity, String finalGate, String finalContentHash, boolean success) {
+            ledger.settle(POLICY, identity, finalGate, finalContentHash, success);
+        }
+
+        @Override
+        public boolean allSettledDone(String identity) {
+            return ledger.allSettledDone(identity);
+        }
+
+        @Override
+        public void reportPresent(Collection<String> identities) {
+            present.addAll(identities);
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkConfigTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkConfigTest.java
new file mode 100644
index 0000000000..3fb48501f5
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkConfigTest.java
@@ -0,0 +1,136 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import org.junit.jupiter.api.Test;
+
+class NetworkConfigTest {
+
+    private static Map<String, Object> base(String protocol) {
+        Map<String, Object> options = new LinkedHashMap<>();
+        options.put("protocol", protocol);
+        options.put("host", "files.example.com");
+        options.put("username", "u");
+        options.put("password", "p");
+        return options;
+    }
+
+    @Test
+    void parsesAnSftpConnectionWithDefaultPort() {
+        NetworkConfig config = NetworkConfig.from(base("sftp"));
+        assertEquals(NetworkProtocol.SFTP, config.protocol());
+        assertEquals(22, config.port());
+        assertEquals("files.example.com", config.host());
+    }
+
+    @Test
+    void defaultsPortPerProtocol() {
+        assertEquals(21, NetworkConfig.from(base("ftp")).port());
+        Map<String, Object> smb = base("smb");
+        smb.put("share", "docs");
+        assertEquals(445, NetworkConfig.from(smb).port());
+    }
+
+    @Test
+    void implicitFtpsDefaultsToPort990() {
+        Map<String, Object> implicit = base("ftp");
+        implicit.put("security", "implicit");
+        assertEquals(990, NetworkConfig.from(implicit).port());
+
+        implicit.put("port", "2121");
+        assertEquals(2121, NetworkConfig.from(implicit).port());
+    }
+
+    @Test
+    void sftpAcceptsAPrivateKeyInsteadOfAPassword() {
+        Map<String, Object> options = base("sftp");
+        options.remove("password");
+        options.put("privateKey", "dummy-test-key-material");
+        NetworkConfig config = NetworkConfig.from(options);
+        assertEquals(NetworkProtocol.SFTP, config.protocol());
+    }
+
+    @Test
+    void sftpWithoutPasswordOrKeyIsRejected() {
+        Map<String, Object> options = base("sftp");
+        options.remove("password");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(options));
+    }
+
+    @Test
+    void ftpRequiresAPassword() {
+        Map<String, Object> options = base("ftp");
+        options.remove("password");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(options));
+    }
+
+    @Test
+    void smbRequiresAShare() {
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(base("smb")));
+    }
+
+    @Test
+    void requiresProtocolHostAndUsername() {
+        assertThrows(
+                IllegalArgumentException.class,
+                () -> NetworkConfig.from(Map.of("host", "h", "username", "u", "password", "p")));
+        Map<String, Object> noHost = base("sftp");
+        noHost.remove("host");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(noHost));
+        Map<String, Object> noUser = base("sftp");
+        noUser.remove("username");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(noUser));
+    }
+
+    @Test
+    void rejectsAnOutOfRangePort() {
+        Map<String, Object> options = base("sftp");
+        options.put("port", "70000");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(options));
+    }
+
+    @Test
+    void rejectsATraversalDirectory() {
+        Map<String, Object> options = base("sftp");
+        options.put("directory", "in/../../etc");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(options));
+    }
+
+    @Test
+    void mapsModeToSnapshotFlag() {
+        Map<String, Object> consume = base("sftp");
+        consume.put("mode", "consume");
+        assertFalse(NetworkConfig.from(consume).snapshot());
+
+        Map<String, Object> snapshot = base("sftp");
+        snapshot.put("mode", "snapshot");
+        assertTrue(NetworkConfig.from(snapshot).snapshot());
+
+        Map<String, Object> bad = base("sftp");
+        bad.put("mode", "sometimes");
+        assertThrows(IllegalArgumentException.class, () -> NetworkConfig.from(bad));
+    }
+
+    @Test
+    void carriesTheHostKeyFingerprint() {
+        Map<String, Object> options = base("sftp");
+        options.put("hostKeyFingerprint", " SHA256:abc123 ");
+        assertEquals("SHA256:abc123", NetworkConfig.from(options).hostKeyFingerprint());
+        assertNull(NetworkConfig.from(base("sftp")).hostKeyFingerprint());
+    }
+
+    @Test
+    void toStringHidesSecrets() {
+        Map<String, Object> options = base("sftp");
+        options.put("password", "hunter2");
+        String text = NetworkConfig.from(options).toString();
+        assertFalse(text.contains("hunter2"), "password must not appear in toString");
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkHostGuardTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkHostGuardTest.java
new file mode 100644
index 0000000000..fffbf77305
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkHostGuardTest.java
@@ -0,0 +1,64 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+
+import java.util.List;
+
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.model.ApplicationProperties;
+
+class NetworkHostGuardTest {
+
+    private static NetworkHostGuard guard(boolean allowPrivate) {
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowPrivateNetworkSources(allowPrivate);
+        return new NetworkHostGuard(properties);
+    }
+
+    private static NetworkHostGuard guardWithAllowlist(String... hosts) {
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowedPrivateNetworkHosts(List.of(hosts));
+        return new NetworkHostGuard(properties);
+    }
+
+    @Test
+    void rejectsLoopbackByDefault() {
+        assertThrows(
+                IllegalArgumentException.class, () -> guard(false).requirePermitted("127.0.0.1"));
+    }
+
+    @Test
+    void rejectsPrivateRangesByDefault() {
+        assertThrows(
+                IllegalArgumentException.class, () -> guard(false).requirePermitted("10.0.0.1"));
+        assertThrows(
+                IllegalArgumentException.class,
+                () -> guard(false).requirePermitted("192.168.1.10"));
+    }
+
+    @Test
+    void rejectsABlankHost() {
+        assertThrows(IllegalArgumentException.class, () -> guard(false).requirePermitted(""));
+    }
+
+    @Test
+    void optInAllowsPrivateAddresses() {
+        assertDoesNotThrow(() -> guard(true).requirePermitted("127.0.0.1"));
+        assertDoesNotThrow(() -> guard(true).requirePermitted("10.0.0.1"));
+    }
+
+    @Test
+    void allowlistedHostIsAllowedWithoutTheGlobalFlag() {
+        assertDoesNotThrow(() -> guardWithAllowlist("10.0.0.1").requirePermitted("10.0.0.1"));
+        assertDoesNotThrow(() -> guardWithAllowlist("FILES.local").requirePermitted("files.LOCAL"));
+    }
+
+    @Test
+    void allowlistDoesNotOpenOtherPrivateHosts() {
+        assertThrows(
+                IllegalArgumentException.class,
+                () -> guardWithAllowlist("10.0.0.1").requirePermitted("10.0.0.2"));
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIdentitiesTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIdentitiesTest.java
new file mode 100644
index 0000000000..00f3637bdf
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIdentitiesTest.java
@@ -0,0 +1,49 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import org.junit.jupiter.api.Test;
+
+class NetworkIdentitiesTest {
+
+    private static NetworkConfig config(String protocol, String share) {
+        Map<String, Object> options = new LinkedHashMap<>();
+        options.put("protocol", protocol);
+        options.put("host", "files.example.com");
+        options.put("port", "2222");
+        options.put("username", "u");
+        options.put("password", "p");
+        if (share != null) {
+            options.put("share", share);
+        }
+        return NetworkConfig.from(options);
+    }
+
+    @Test
+    void identityIsProtocolHostPortAndPath() {
+        assertEquals(
+                "sftp://files.example.com:2222/in/doc.pdf",
+                NetworkIdentities.identity(config("sftp", null), "in/doc.pdf"));
+    }
+
+    @Test
+    void smbIdentityIncludesTheShare() {
+        Map<String, Object> options = new LinkedHashMap<>();
+        options.put("protocol", "smb");
+        options.put("host", "files.example.com");
+        options.put("username", "u");
+        options.put("password", "p");
+        options.put("share", "documents");
+        assertEquals(
+                "smb://files.example.com:445/documents/reports/q1.pdf",
+                NetworkIdentities.identity(NetworkConfig.from(options), "reports/q1.pdf"));
+    }
+
+    @Test
+    void gateIsSizeAndModifiedTime() {
+        assertEquals("42:1700000000000", NetworkIdentities.gate(42, 1700000000000L));
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkInputSourceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkInputSourceTest.java
new file mode 100644
index 0000000000..c125dd4919
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkInputSourceTest.java
@@ -0,0 +1,280 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.mock;
+
+import java.io.ByteArrayInputStream;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Supplier;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.access.service.OwnershipService;
+import stirling.software.proprietary.integration.repository.IntegrationConfigRepository;
+import stirling.software.proprietary.policy.input.ResolveContext;
+import stirling.software.proprietary.policy.input.ResolvedInput;
+import stirling.software.proprietary.policy.ledger.InProcessProcessedLedger;
+import stirling.software.proprietary.policy.model.InputSpec;
+import stirling.software.proprietary.security.service.UserService;
+
+/**
+ * Tests for {@link NetworkInputSource}: consume mode tracks remote files through the ledger, the
+ * version-guarded delete survives a mid-run replacement, a shared file is removed only once every
+ * policy is done, snapshot stays stateless, and the source type must match the connection protocol.
+ * The remote server is faked in memory, so no real SFTP/FTP/SMB endpoint is needed.
+ */
+class NetworkInputSourceTest {
+
+    private static final String POLICY = "p1";
+
+    private FakeServer server;
+    private NetworkInputSource source;
+    private InProcessProcessedLedger ledger;
+    private RecordingContext ctx;
+
+    @BeforeEach
+    void setUp() {
+        server = new FakeServer();
+        // allowPrivate=true so the host guard never resolves DNS; connect() is overridden anyway.
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowPrivateNetworkSources(true);
+        RemoteFileClientFactory factory =
+                new RemoteFileClientFactory(new NetworkHostGuard(properties)) {
+                    @Override
+                    public RemoteFileClient connect(NetworkConfig config) {
+                        return new FakeClient(server);
+                    }
+                };
+        NetworkConnectionResolver resolver =
+                new NetworkConnectionResolver(
+                        mock(IntegrationConfigRepository.class),
+                        mock(OwnershipService.class),
+                        mock(UserService.class));
+        source = new NetworkInputSource(resolver, factory);
+        ledger = new InProcessProcessedLedger();
+        ctx = new RecordingContext();
+    }
+
+    private static InputSpec sftp(Map<String, Object> extra) {
+        Map<String, Object> options = new LinkedHashMap<>();
+        options.put("protocol", "sftp");
+        options.put("host", "files.example.com");
+        options.put("username", "u");
+        options.put("password", "p");
+        options.put("directory", "in");
+        options.putAll(extra);
+        return new InputSpec("sftp", options);
+    }
+
+    @Test
+    void supportsTheThreeNetworkSourceTypes() {
+        assertTrue(source.supports(new InputSpec("sftp", Map.of())));
+        assertTrue(source.supports(new InputSpec("ftp", Map.of())));
+        assertTrue(source.supports(new InputSpec("network", Map.of())));
+        assertFalse(source.supports(new InputSpec("folder", Map.of())));
+    }
+
+    @Test
+    void consumeRemovesTheFileOnceProcessed() throws Exception {
+        server.put("in/doc.pdf", "data", 1000);
+
+        List<ResolvedInput> work = source.resolve(sftp(Map.of()), ctx);
+
+        assertEquals(1, work.size());
+        assertEquals(1, work.get(0).inputs().primary().size());
+        // In flight: still on the server, but a second sweep does not pick it up again.
+        assertTrue(server.has("in/doc.pdf"));
+        assertTrue(source.resolve(sftp(Map.of()), ctx).isEmpty());
+
+        work.get(0).onComplete().accept(true);
+        assertFalse(server.has("in/doc.pdf"));
+        assertTrue(source.resolve(sftp(Map.of()), ctx).isEmpty());
+    }
+
+    @Test
+    void aFileReplacedMidRunSurvivesTheDeleteAndRunsAgain() throws Exception {
+        server.put("in/doc.pdf", "data", 1000);
+
+        List<ResolvedInput> work = source.resolve(sftp(Map.of()), ctx);
+        // A new version lands while the run is executing (different size/mtime = new gate).
+        server.put("in/doc.pdf", "new data, different size", 2000);
+        work.get(0).onComplete().accept(true);
+
+        // The delete is version-guarded: the replacement is not the file that ran, so it stays and
+        // is claimed as fresh work next sweep.
+        assertTrue(server.has("in/doc.pdf"));
+        assertEquals(1, source.resolve(sftp(Map.of()), ctx).size());
+    }
+
+    @Test
+    void aSharedFileIsRemovedOnlyOnceEveryPolicyHasProcessedIt() throws Exception {
+        server.put("in/doc.pdf", "data", 1000);
+        RecordingContext other = new RecordingContext("p2");
+
+        List<ResolvedInput> mine = source.resolve(sftp(Map.of()), ctx);
+        List<ResolvedInput> theirs = source.resolve(sftp(Map.of()), other);
+        assertEquals(1, mine.size());
+        assertEquals(1, theirs.size());
+
+        mine.get(0).onComplete().accept(true);
+        assertTrue(server.has("in/doc.pdf")); // the other claim is still in flight
+
+        theirs.get(0).onComplete().accept(true);
+        assertFalse(server.has("in/doc.pdf"));
+    }
+
+    @Test
+    void aFailedFileStaysInPlaceAndIsNotRetriedUntilItChanges() throws Exception {
+        server.put("in/doc.pdf", "data", 1000);
+
+        source.resolve(sftp(Map.of()), ctx).get(0).onComplete().accept(false);
+
+        assertTrue(server.has("in/doc.pdf"));
+        assertTrue(source.resolve(sftp(Map.of()), ctx).isEmpty());
+
+        server.put("in/doc.pdf", "data", 2000); // touched: new mtime is a new version
+        assertEquals(1, source.resolve(sftp(Map.of()), ctx).size());
+    }
+
+    @Test
+    void snapshotReadsStatelesslyEverySweep() throws Exception {
+        server.put("in/doc.pdf", "data", 1000);
+        InputSpec spec = sftp(Map.of("mode", "snapshot"));
+
+        List<ResolvedInput> first = source.resolve(spec, ctx);
+        first.get(0).onComplete().accept(true);
+        List<ResolvedInput> second = source.resolve(spec, ctx);
+
+        assertEquals(1, first.size());
+        assertEquals(1, second.size()); // no ledger involvement
+        assertTrue(ctx.present.isEmpty());
+        assertTrue(server.has("in/doc.pdf"));
+    }
+
+    @Test
+    void streamsTheFileContent() throws Exception {
+        server.put("in/doc.pdf", "hello", 1000);
+
+        List<ResolvedInput> work = source.resolve(sftp(Map.of()), ctx);
+        try (InputStream in = work.get(0).inputs().primary().get(0).getInputStream()) {
+            assertEquals("hello", new String(in.readAllBytes(), StandardCharsets.UTF_8));
+        }
+    }
+
+    @Test
+    void validateRejectsASourceTypeThatDoesNotMatchTheConnectionProtocol() {
+        // A "network" (SMB) source pointed at an SFTP connection is a misconfiguration.
+        Map<String, Object> options = new LinkedHashMap<>();
+        options.put("protocol", "sftp");
+        options.put("host", "files.example.com");
+        options.put("username", "u");
+        options.put("password", "p");
+        assertThrows(
+                IllegalArgumentException.class,
+                () -> source.validate(new InputSpec("network", options)));
+    }
+
+    /** In-memory remote server shared between a test's fake clients. */
+    private static final class FakeServer {
+        private final Map<String, FakeFile> files = new LinkedHashMap<>();
+
+        void put(String path, String content, long mtime) {
+            files.put(path, new FakeFile(content.getBytes(StandardCharsets.UTF_8), mtime));
+        }
+
+        boolean has(String path) {
+            return files.containsKey(path);
+        }
+    }
+
+    private record FakeFile(byte[] content, long mtime) {}
+
+    /** A RemoteFileClient over the in-memory server; every op reads/writes the shared map. */
+    private static final class FakeClient implements RemoteFileClient {
+        private final FakeServer server;
+
+        private FakeClient(FakeServer server) {
+            this.server = server;
+        }
+
+        @Override
+        public List<RemoteFile> list(String directory, boolean recursive) {
+            List<RemoteFile> out = new ArrayList<>();
+            server.files.forEach(
+                    (path, file) -> {
+                        String name = path.substring(path.lastIndexOf('/') + 1);
+                        out.add(new RemoteFile(path, name, file.content().length, file.mtime()));
+                    });
+            return out;
+        }
+
+        @Override
+        public RemoteFile stat(String path) {
+            FakeFile file = server.files.get(path);
+            if (file == null) {
+                return null;
+            }
+            String name = path.substring(path.lastIndexOf('/') + 1);
+            return new RemoteFile(path, name, file.content().length, file.mtime());
+        }
+
+        @Override
+        public InputStream open(String path) {
+            return new ByteArrayInputStream(server.files.get(path).content());
+        }
+
+        @Override
+        public void delete(String path) {
+            server.files.remove(path);
+        }
+
+        @Override
+        public void close() {}
+    }
+
+    /** Policy-scoped context backed by the in-process ledger, recording presence reports. */
+    private final class RecordingContext implements ResolveContext {
+        private final String policyId;
+        private final List<String> present = new ArrayList<>();
+
+        private RecordingContext() {
+            this(POLICY);
+        }
+
+        private RecordingContext(String policyId) {
+            this.policyId = policyId;
+        }
+
+        @Override
+        public boolean claim(String identity, String gate, Supplier<String> contentHash) {
+            return ledger.claim(policyId, identity, gate, contentHash);
+        }
+
+        @Override
+        public void settle(
+                String identity, String finalGate, String finalContentHash, boolean success) {
+            ledger.settle(policyId, identity, finalGate, finalContentHash, success);
+        }
+
+        @Override
+        public boolean allSettledDone(String identity) {
+            return ledger.allSettledDone(identity);
+        }
+
+        @Override
+        public void reportPresent(Collection<String> identities) {
+            present.addAll(identities);
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidatorTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidatorTest.java
new file mode 100644
index 0000000000..40a3fb70a8
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/NetworkIntegrationValidatorTest.java
@@ -0,0 +1,55 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.integration.model.IntegrationType;
+
+class NetworkIntegrationValidatorTest {
+
+    private static NetworkIntegrationValidator validator(boolean allowPrivate) {
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowPrivateNetworkSources(allowPrivate);
+        return new NetworkIntegrationValidator(new NetworkHostGuard(properties));
+    }
+
+    private static Map<String, Object> config(String host) {
+        Map<String, Object> options = new LinkedHashMap<>();
+        options.put("protocol", "sftp");
+        options.put("host", host);
+        options.put("username", "u");
+        options.put("password", "p");
+        return options;
+    }
+
+    @Test
+    void reportsTheNetworkType() {
+        assertEquals(IntegrationType.NETWORK, validator(true).type());
+    }
+
+    @Test
+    void acceptsAValidConfig() {
+        assertDoesNotThrow(() -> validator(true).validate(config("10.0.0.5")));
+    }
+
+    @Test
+    void rejectsAMalformedConfig() {
+        assertThrows(
+                IllegalArgumentException.class,
+                () -> validator(true).validate(Map.of("host", "h")));
+    }
+
+    @Test
+    void rejectsAPrivateHostUnlessOptedIn() {
+        assertThrows(
+                IllegalArgumentException.class,
+                () -> validator(false).validate(config("10.0.0.5")));
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SftpNetworkSourceIntegrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SftpNetworkSourceIntegrationTest.java
new file mode 100644
index 0000000000..3df4f49cb3
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SftpNetworkSourceIntegrationTest.java
@@ -0,0 +1,241 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.Mockito.mock;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.ByteBuffer;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Supplier;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.condition.EnabledIfEnvironmentVariable;
+import org.testcontainers.containers.Container;
+import org.testcontainers.containers.GenericContainer;
+import org.testcontainers.containers.wait.strategy.Wait;
+import org.testcontainers.junit.jupiter.Testcontainers;
+
+import stirling.software.common.configuration.InstallationPathConfig;
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.access.service.OwnershipService;
+import stirling.software.proprietary.integration.repository.IntegrationConfigRepository;
+import stirling.software.proprietary.policy.input.ResolveContext;
+import stirling.software.proprietary.policy.input.ResolvedInput;
+import stirling.software.proprietary.policy.ledger.InProcessProcessedLedger;
+import stirling.software.proprietary.policy.model.InputSpec;
+import stirling.software.proprietary.security.service.UserService;
+
+/**
+ * End-to-end {@link NetworkInputSource} test over SFTP against a real atmoz/sftp server, through
+ * the production {@link SftpFileClient}: listing, claiming, streaming the actual bytes, consume
+ * delete, and save-time validation. The server chroots the user to its home; {@code upload} is the
+ * writable drop folder.
+ */
+@Testcontainers(disabledWithoutDocker = true)
+@EnabledIfEnvironmentVariable(
+        named = "RUN_NETWORK_INTEGRATION_TESTS",
+        matches = "true",
+        disabledReason =
+                "Spins up SFTP/FTP/SMB containers; opt-in to keep several heavy containers off the"
+                        + " standard CI runner. Run with RUN_NETWORK_INTEGRATION_TESTS=true.")
+class SftpNetworkSourceIntegrationTest {
+
+    private static final String POLICY = "p1";
+    private static final String USER = "stirling";
+    private static final String PASS = "secret";
+    private static final String DIR = "upload";
+    private static final int SFTP_PORT = 22;
+
+    @org.testcontainers.junit.jupiter.Container
+    static GenericContainer<?> sftp =
+            new GenericContainer<>("atmoz/sftp:alpine")
+                    .withExposedPorts(SFTP_PORT)
+                    .withCommand(USER + ":" + PASS + ":::" + DIR)
+                    .waitingFor(Wait.forListeningPort());
+
+    private NetworkInputSource source;
+    private InProcessProcessedLedger ledger;
+    private RecordingContext ctx;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        // Each run's container has a fresh host key, so drop pins from earlier runs: a reused
+        // mapped port would otherwise trip the trust-on-first-use "key changed" refusal.
+        Files.deleteIfExists(
+                Path.of(InstallationPathConfig.getConfigPath(), SftpFileClient.KNOWN_HOSTS_FILE));
+        // The container resolves to loopback, so the private-host opt-in must be on.
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowPrivateNetworkSources(true);
+        RemoteFileClientFactory factory =
+                new RemoteFileClientFactory(new NetworkHostGuard(properties));
+        NetworkConnectionResolver resolver =
+                new NetworkConnectionResolver(
+                        mock(IntegrationConfigRepository.class),
+                        mock(OwnershipService.class),
+                        mock(UserService.class));
+        source = new NetworkInputSource(resolver, factory);
+        ledger = new InProcessProcessedLedger();
+        ctx = new RecordingContext();
+    }
+
+    @Test
+    void consumeListsStreamsAndDeletes() throws Exception {
+        put("doc.pdf", "hello sftp");
+
+        List<ResolvedInput> work = source.resolve(spec(Map.of()), ctx);
+
+        assertThat(work).hasSize(1);
+        String identity =
+                "sftp://"
+                        + sftp.getHost()
+                        + ":"
+                        + sftp.getMappedPort(SFTP_PORT)
+                        + "/upload/doc.pdf";
+        assertThat(ctx.present).containsExactly(identity);
+        assertThat(read(work.get(0))).isEqualTo("hello sftp");
+        // In flight: a second sweep does not re-claim it.
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+
+        work.get(0).onComplete().accept(true);
+        assertThat(exists("doc.pdf")).isFalse();
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+    }
+
+    @Test
+    void aFailedFileStaysOnTheServer() throws Exception {
+        put("doc.pdf", "data");
+
+        source.resolve(spec(Map.of()), ctx).get(0).onComplete().accept(false);
+
+        assertThat(exists("doc.pdf")).isTrue();
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+    }
+
+    @Test
+    void validateConnectsAndRejectsBadCredentials() {
+        source.validate(spec(Map.of()));
+
+        Map<String, Object> wrong = new HashMap<>(baseOptions());
+        wrong.put("password", "not-the-password");
+        assertThatThrownBy(() -> source.validate(new InputSpec("sftp", wrong)))
+                .isInstanceOf(IllegalArgumentException.class)
+                .hasMessageContaining("cannot access");
+    }
+
+    @Test
+    void acceptsTheServersRealHostKeyFingerprint() throws Exception {
+        String fingerprint =
+                exec("ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub | awk '{print $2}'").trim();
+        Map<String, Object> pinned = new HashMap<>(baseOptions());
+        pinned.put("hostKeyFingerprint", fingerprint);
+        source.validate(new InputSpec("sftp", pinned));
+    }
+
+    @Test
+    void rejectsAWrongHostKeyFingerprint() {
+        Map<String, Object> wrong = new HashMap<>(baseOptions());
+        wrong.put("hostKeyFingerprint", "SHA256:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA");
+        // Refused during the handshake, before any credentials are sent.
+        assertThatThrownBy(() -> source.validate(new InputSpec("sftp", wrong)))
+                .isInstanceOf(IllegalArgumentException.class)
+                .hasMessageContaining("cannot access");
+    }
+
+    @Test
+    void refusesAChangedHostKey() throws Exception {
+        source.validate(spec(Map.of())); // pins the current key (trust-on-first-use)
+
+        Path knownHosts =
+                Path.of(InstallationPathConfig.getConfigPath(), SftpFileClient.KNOWN_HOSTS_FILE);
+        String pinned = Files.readString(knownHosts);
+        // Swap the pinned key for a valid-but-different one so the server's real key reads as
+        // changed rather than unparseable.
+        Files.writeString(knownHosts, pinned.replaceFirst("(?m) [^ ]+$", " " + bogusEd25519Key()));
+
+        assertThatThrownBy(() -> source.validate(spec(Map.of())))
+                .isInstanceOf(IllegalArgumentException.class)
+                .hasMessageContaining("cannot access");
+    }
+
+    /** A structurally valid ssh-ed25519 public key blob (all-zero key material), base64. */
+    private static String bogusEd25519Key() {
+        byte[] type = "ssh-ed25519".getBytes(StandardCharsets.US_ASCII);
+        ByteBuffer blob = ByteBuffer.allocate(4 + type.length + 4 + 32);
+        blob.putInt(type.length).put(type).putInt(32);
+        return java.util.Base64.getEncoder().encodeToString(blob.array());
+    }
+
+    private Map<String, Object> baseOptions() {
+        Map<String, Object> options = new HashMap<>();
+        options.put("protocol", "sftp");
+        options.put("host", sftp.getHost());
+        options.put("port", String.valueOf(sftp.getMappedPort(SFTP_PORT)));
+        options.put("username", USER);
+        options.put("password", PASS);
+        options.put("directory", DIR);
+        return options;
+    }
+
+    private InputSpec spec(Map<String, Object> extra) {
+        Map<String, Object> options = new HashMap<>(baseOptions());
+        options.putAll(extra);
+        return new InputSpec("sftp", options);
+    }
+
+    private void put(String name, String content) throws Exception {
+        String path = "/home/" + USER + "/" + DIR + "/" + name;
+        exec("printf '%s' '" + content + "' > " + path + " && chmod 644 " + path);
+    }
+
+    private boolean exists(String name) throws Exception {
+        return exec("test -f /home/" + USER + "/" + DIR + "/" + name + " && echo yes || echo no")
+                .contains("yes");
+    }
+
+    private String exec(String script) throws Exception {
+        Container.ExecResult result = sftp.execInContainer("sh", "-c", script);
+        return result.getStdout() + result.getStderr();
+    }
+
+    private static String read(ResolvedInput unit) throws IOException {
+        try (InputStream stream = unit.inputs().primary().get(0).getInputStream()) {
+            return new String(stream.readAllBytes(), StandardCharsets.UTF_8);
+        }
+    }
+
+    private class RecordingContext implements ResolveContext {
+
+        private final List<String> present = new ArrayList<>();
+
+        @Override
+        public boolean claim(String identity, String gate, Supplier<String> contentHash) {
+            return ledger.claim(POLICY, identity, gate, contentHash);
+        }
+
+        @Override
+        public void settle(
+                String identity, String finalGate, String finalContentHash, boolean success) {
+            ledger.settle(POLICY, identity, finalGate, finalContentHash, success);
+        }
+
+        @Override
+        public boolean allSettledDone(String identity) {
+            return ledger.allSettledDone(identity);
+        }
+
+        @Override
+        public void reportPresent(Collection<String> identities) {
+            present.addAll(identities);
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SmbNetworkSourceIntegrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SmbNetworkSourceIntegrationTest.java
new file mode 100644
index 0000000000..9d07100bc4
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/network/SmbNetworkSourceIntegrationTest.java
@@ -0,0 +1,194 @@
+package stirling.software.proprietary.policy.network;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.Mockito.mock;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Supplier;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.condition.EnabledIfEnvironmentVariable;
+import org.testcontainers.containers.Container;
+import org.testcontainers.containers.GenericContainer;
+import org.testcontainers.containers.wait.strategy.Wait;
+import org.testcontainers.junit.jupiter.Testcontainers;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.access.service.OwnershipService;
+import stirling.software.proprietary.integration.repository.IntegrationConfigRepository;
+import stirling.software.proprietary.policy.input.ResolveContext;
+import stirling.software.proprietary.policy.input.ResolvedInput;
+import stirling.software.proprietary.policy.ledger.InProcessProcessedLedger;
+import stirling.software.proprietary.policy.model.InputSpec;
+import stirling.software.proprietary.security.service.UserService;
+
+/**
+ * End-to-end {@link NetworkInputSource} test over SMB against a real Samba server, through the
+ * production {@link SmbFileClient}: listing a share, claiming, streaming the actual bytes, consume
+ * delete, and save-time validation. The share is served world-writable so the SMB user can remove a
+ * consumed file.
+ */
+@Testcontainers(disabledWithoutDocker = true)
+@EnabledIfEnvironmentVariable(
+        named = "RUN_NETWORK_INTEGRATION_TESTS",
+        matches = "true",
+        disabledReason =
+                "Spins up SFTP/FTP/SMB containers; opt-in to keep several heavy containers off the"
+                        + " standard CI runner. Run with RUN_NETWORK_INTEGRATION_TESTS=true.")
+class SmbNetworkSourceIntegrationTest {
+
+    private static final String POLICY = "p1";
+    private static final String USER = "stirling";
+    private static final String PASS = "secret";
+    private static final String SHARE = "documents";
+    private static final int SMB_PORT = 445;
+
+    @org.testcontainers.junit.jupiter.Container
+    static GenericContainer<?> samba =
+            new GenericContainer<>("dperson/samba")
+                    .withExposedPorts(SMB_PORT)
+                    .withCommand(
+                            "-p",
+                            "-u",
+                            USER + ";" + PASS,
+                            "-s",
+                            SHARE + ";/share;yes;no;no;" + USER)
+                    .waitingFor(Wait.forListeningPort());
+
+    private NetworkInputSource source;
+    private InProcessProcessedLedger ledger;
+    private RecordingContext ctx;
+
+    @BeforeEach
+    void setUp() throws Exception {
+        // The share dir must be writable by the SMB user so a consumed file can be deleted.
+        samba.execInContainer("sh", "-c", "mkdir -p /share && chmod -R 0777 /share");
+        ApplicationProperties properties = new ApplicationProperties();
+        properties.getPolicies().setAllowPrivateNetworkSources(true);
+        RemoteFileClientFactory factory =
+                new RemoteFileClientFactory(new NetworkHostGuard(properties));
+        NetworkConnectionResolver resolver =
+                new NetworkConnectionResolver(
+                        mock(IntegrationConfigRepository.class),
+                        mock(OwnershipService.class),
+                        mock(UserService.class));
+        source = new NetworkInputSource(resolver, factory);
+        ledger = new InProcessProcessedLedger();
+        ctx = new RecordingContext();
+    }
+
+    @Test
+    void consumeListsStreamsAndDeletes() throws Exception {
+        put("doc.pdf", "hello smb");
+
+        List<ResolvedInput> work = source.resolve(spec(Map.of()), ctx);
+
+        assertThat(work).hasSize(1);
+        String identity =
+                "smb://"
+                        + samba.getHost()
+                        + ":"
+                        + samba.getMappedPort(SMB_PORT)
+                        + "/documents/doc.pdf";
+        assertThat(ctx.present).containsExactly(identity);
+        assertThat(read(work.get(0))).isEqualTo("hello smb");
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+
+        work.get(0).onComplete().accept(true);
+        assertThat(exists("doc.pdf")).isFalse();
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+    }
+
+    @Test
+    void aFailedFileStaysOnTheShare() throws Exception {
+        put("doc.pdf", "data");
+
+        source.resolve(spec(Map.of()), ctx).get(0).onComplete().accept(false);
+
+        assertThat(exists("doc.pdf")).isTrue();
+        assertThat(source.resolve(spec(Map.of()), ctx)).isEmpty();
+    }
+
+    @Test
+    void validateConnectsAndRejectsBadCredentials() {
+        source.validate(spec(Map.of()));
+
+        Map<String, Object> wrong = new HashMap<>(baseOptions());
+        wrong.put("password", "not-the-password");
+        assertThatThrownBy(() -> source.validate(new InputSpec("network", wrong)))
+                .isInstanceOf(IllegalArgumentException.class)
+                .hasMessageContaining("cannot access");
+    }
+
+    private Map<String, Object> baseOptions() {
+        Map<String, Object> options = new HashMap<>();
+        options.put("protocol", "smb");
+        options.put("host", samba.getHost());
+        options.put("port", String.valueOf(samba.getMappedPort(SMB_PORT)));
+        options.put("username", USER);
+        options.put("password", PASS);
+        options.put("share", SHARE);
+        return options;
+    }
+
+    private InputSpec spec(Map<String, Object> extra) {
+        Map<String, Object> options = new HashMap<>(baseOptions());
+        options.putAll(extra);
+        return new InputSpec("network", options);
+    }
+
+    private void put(String name, String content) throws Exception {
+        String path = "/share/" + name;
+        exec("printf '%s' '" + content + "' > " + path + " && chmod 0666 " + path);
+    }
+
+    private boolean exists(String name) throws Exception {
+        return exec("test -f /share/" + name + " && echo yes || echo no").contains("yes");
+    }
+
+    private String exec(String script) throws Exception {
+        Container.ExecResult result = samba.execInContainer("sh", "-c", script);
+        return result.getStdout() + result.getStderr();
+    }
+
+    private static String read(ResolvedInput unit) throws IOException {
+        try (InputStream stream = unit.inputs().primary().get(0).getInputStream()) {
+            return new String(stream.readAllBytes(), StandardCharsets.UTF_8);
+        }
+    }
+
+    private class RecordingContext implements ResolveContext {
+
+        private final List<String> present = new ArrayList<>();
+
+        @Override
+        public boolean claim(String identity, String gate, Supplier<String> contentHash) {
+            return ledger.claim(POLICY, identity, gate, contentHash);
+        }
+
+        @Override
+        public void settle(
+                String identity, String finalGate, String finalContentHash, boolean success) {
+            ledger.settle(POLICY, identity, finalGate, finalContentHash, success);
+        }
+
+        @Override
+        public boolean allSettledDone(String identity) {
+            return ledger.allSettledDone(identity);
+        }
+
+        @Override
+        public void reportPresent(Collection<String> identities) {
+            present.addAll(identities);
+        }
+    }
+}
diff --git a/build.gradle b/build.gradle
index 28e20c9b15..3bcae55ea7 100644
--- a/build.gradle
+++ b/build.gradle
@@ -44,6 +44,9 @@ ext {
     jpdfiumVersion = "1.0.2"
     jwtVersion = "0.13.0"
     awsSdkVersion = "2.44.12"
+    jschVersion = "0.2.23"
+    commonsNetVersion = "3.11.1"
+    smbjVersion = "0.14.0"
     tinkVersion = "1.23.0"
     testcontainersMinioVersion = "1.21.4"
     // junit-platform-launcher version managed by Spring Boot BOM
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 25a2e4bafa..77e41e2ffd 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -6701,9 +6701,15 @@ label = "Server URL"
 [portal.connections.commonFields.email]
 label = "Email"
 
+[portal.connections.commonFields.host]
+label = "Host"
+
 [portal.connections.commonFields.password]
 label = "Password"
 
+[portal.connections.commonFields.port]
+label = "Port"
+
 [portal.connections.commonFields.username]
 label = "Username"
 
@@ -6836,6 +6842,27 @@ baseUrlPlaceholder = "https://your-cluster:9200"
 description = "Index an audit event in Elasticsearch each time a policy handles a document."
 label = "Elasticsearch"
 
+[portal.connections.types.ftp]
+description = "Poll an FTP or FTPS server for new documents."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Connection mode"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (recommended)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Plain FTP sends credentials and files unencrypted; choose FTPS if the server supports it."
+label = "Encryption"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "None (plain FTP)"
+
 [portal.connections.types.googlechat]
 baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
 description = "Post a message to a Google Chat space when a policy runs."
@@ -6903,10 +6930,43 @@ label = "Secret access key"
 description = "Email a document or a notification when a policy runs."
 label = "SendGrid"
 
+[portal.connections.types.sftp]
+description = "Poll an SFTP (SSH) server for new documents."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Optional. The server's SHA-256 host key fingerprint (from `ssh-keyscan host | ssh-keygen -lf -`). When set, only a server presenting this key is accepted; when blank, the key seen on first connect is pinned and later changes are refused."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Leave blank if you authenticate with a private key instead."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Optional. Paste an OpenSSH private key to authenticate with a key instead of a password."
+label = "Private key"
+
 [portal.connections.types.slack]
 description = "Post a message to Slack when a policy processes a document."
 label = "Slack"
 
+[portal.connections.types.smb]
+description = "Watch an SMB / CIFS network share (Windows or Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Optional. The Windows domain or workgroup, if your server uses one."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
 [portal.connections.types.splunk]
 baseUrlPlaceholder = "https://your-splunk:8088"
 description = "Send an audit event to Splunk each time a policy handles a document."
@@ -8711,6 +8771,30 @@ inUse = "In use"
 total = "Connections"
 unused = "Unused"
 
+[portal.sources.networkFields.connection]
+helperText = "The stored connection with the server address and credentials. Reused by every source that references it."
+label = "Connection"
+
+[portal.sources.networkFields.directory]
+helperText = "Folder on the server to poll, relative to the login home or share root. Leave blank for the root."
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume removes each file from the server once every policy has processed it."
+label = "Read mode"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: process each file once"
+snapshot = "Snapshot: re-read the folder every run"
+
+[portal.sources.networkFields.recursive]
+label = "Folder depth"
+
+[portal.sources.networkFields.recursive.options]
+all = "Include subfolders"
+top = "Top level only"
+
 [portal.sources.status]
 active = "Active"
 disabled = "Disabled"
@@ -8770,6 +8854,10 @@ label = "Folder depth"
 all = "Include subfolders"
 top = "Top level only"
 
+[portal.sources.types.ftp]
+description = "Poll an FTP or FTPS server folder for new documents."
+label = "FTP"
+
 [portal.sources.types.googledrive]
 description = "Pull documents from shared Google Drive folders."
 label = "Google Drive"
diff --git a/frontend/editor/src/portal/api/integrations.ts b/frontend/editor/src/portal/api/integrations.ts
index 01eebe96ab..4ced16ca79 100644
--- a/frontend/editor/src/portal/api/integrations.ts
+++ b/frontend/editor/src/portal/api/integrations.ts
@@ -6,7 +6,13 @@
  */
 import { apiClient } from "@portal/api/http";
 
-export type IntegrationType = "S3" | "MCP" | "API" | "PURVIEW" | "CONSIGNO";
+export type IntegrationType =
+  | "S3"
+  | "NETWORK"
+  | "MCP"
+  | "API"
+  | "PURVIEW"
+  | "CONSIGNO";
 export type OwnerScope = "USER" | "TEAM" | "SERVER";
 
 /** Mirrors the backend IntegrationConfigResponse; `config` values are masked. */
diff --git a/frontend/editor/src/portal/components/BrandMarks.tsx b/frontend/editor/src/portal/components/BrandMarks.tsx
index 04f1d79e83..7c381650d3 100644
--- a/frontend/editor/src/portal/components/BrandMarks.tsx
+++ b/frontend/editor/src/portal/components/BrandMarks.tsx
@@ -383,6 +383,14 @@ const NEUTRAL: Record<string, ReactNode> = {
       <path d="m8.5 6.5 3.5-3 3.5 3" />
     </>
   ),
+  ftp: (
+    <>
+      <rect x="4" y="13" width="16" height="7" rx="1.5" />
+      <path d="M7.5 16.5h.01" />
+      <path d="M11 16.5h.01" />
+      <path d="M9 4.5h6l-2-2M15 8.5H9l2 2" />
+    </>
+  ),
   email: (
     <>
       <path d="M21 12.5V18a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-5.5" />
diff --git a/frontend/editor/src/portal/components/sources/ConnectionForm.tsx b/frontend/editor/src/portal/components/sources/ConnectionForm.tsx
index 79d6883bdb..f975e5cc9d 100644
--- a/frontend/editor/src/portal/components/sources/ConnectionForm.tsx
+++ b/frontend/editor/src/portal/components/sources/ConnectionForm.tsx
@@ -26,8 +26,24 @@ export function ConnectionForm({
   onChange,
 }: ConnectionFormProps) {
   const { t } = useTranslation();
-  const set = (key: string, value: string) =>
-    onChange({ ...values, [key]: value });
+  const set = (key: string, value: string) => {
+    const next = { ...values, [key]: value };
+    const sync = type.fields.find((f) => f.key === key)?.syncsDefault;
+    if (sync) {
+      const target = next[sync.targetKey] ?? "";
+      const targetDefault =
+        type.fields.find((f) => f.key === sync.targetKey)?.defaultValue ?? "";
+      const untouched =
+        target === "" ||
+        target === targetDefault ||
+        Object.values(sync.map).includes(target);
+      const mapped = sync.map[value];
+      if (untouched && mapped !== undefined) {
+        next[sync.targetKey] = mapped;
+      }
+    }
+    onChange(next);
+  };
 
   return (
     <div className="portal-sources__connection-form">
diff --git a/frontend/editor/src/portal/components/sources/SourceModal.tsx b/frontend/editor/src/portal/components/sources/SourceModal.tsx
index 626c12b33a..0235b22a32 100644
--- a/frontend/editor/src/portal/components/sources/SourceModal.tsx
+++ b/frontend/editor/src/portal/components/sources/SourceModal.tsx
@@ -32,12 +32,14 @@ import {
 } from "@portal/components/sources/sourceTypes";
 import { BrandMark } from "@portal/components/BrandMarks";
 import { S3ConnectionPicker } from "@portal/components/sources/S3ConnectionPicker";
+import { ConnectionPicker } from "@portal/components/sources/ConnectionPicker";
 import { ConnectionForm } from "@portal/components/sources/ConnectionForm";
 import {
   CREATABLE_CONNECTION_TYPES,
   buildConnectionConfig,
   connectionFormValid,
   emptyConnectionValues,
+  type CreatableConnectionType,
 } from "@portal/components/sources/connectionTypes";
 import { createIntegration } from "@portal/api/integrations";
 import "@portal/components/sources/SourceModal.css";
@@ -76,6 +78,14 @@ const S3_CONNECTION_TYPE = CREATABLE_CONNECTION_TYPES.find(
   (entry) => entry.id === "s3",
 )!;
 
+/** A connection-catalogue entry by id, for the inline create form a source field opens. */
+function connectionTypeById(id: string): CreatableConnectionType {
+  return (
+    CREATABLE_CONNECTION_TYPES.find((entry) => entry.id === id) ??
+    S3_CONNECTION_TYPE
+  );
+}
+
 interface SourceModalProps {
   open: boolean;
   /** When set, edit this source; otherwise create a new one. */
@@ -129,7 +139,10 @@ export function SourceModal({
     webhookId: string;
     secret: string;
   } | null>(null);
-  // In-place connection create (swaps the stage; never stacks a second modal).
+  // In-place connection create (swaps the stage; never stacks a second modal). The type is set
+  // per field, so a source that wants an SFTP connection opens the SFTP form, not always S3.
+  const [connType, setConnType] =
+    useState<CreatableConnectionType>(S3_CONNECTION_TYPE);
   const [connValues, setConnValues] = useState<Record<string, string>>(() =>
     emptyConnectionValues(S3_CONNECTION_TYPE),
   );
@@ -192,24 +205,27 @@ export function SourceModal({
     onClose();
   }
 
-  function openConnectionStage(fieldKey: string) {
-    setConnValues(emptyConnectionValues(S3_CONNECTION_TYPE));
+  function openConnectionStage(
+    fieldKey: string,
+    type: CreatableConnectionType,
+  ) {
+    setConnType(type);
+    setConnValues(emptyConnectionValues(type));
     setConnField(fieldKey);
     setError(null);
     setStage("connection");
   }
 
   async function saveConnection() {
-    if (connSaving || !connectionFormValid(S3_CONNECTION_TYPE, connValues))
-      return;
+    if (connSaving || !connectionFormValid(connType, connValues)) return;
     setConnSaving(true);
     setError(null);
     try {
       const created = await createIntegration({
-        integrationType: S3_CONNECTION_TYPE.integrationType,
+        integrationType: connType.integrationType,
         name: connValues.name.trim(),
         scope: "TEAM",
-        config: buildConnectionConfig(S3_CONNECTION_TYPE, connValues),
+        config: buildConnectionConfig(connType, connValues),
       });
       // Back to the source form with the fresh connection selected; the picker
       // remounts and refetches, so the new name is in its list.
@@ -277,7 +293,7 @@ export function SourceModal({
       ? t("portal.sources.builder.createTitle")
       : stage === "connection"
         ? t("portal.connections.createTitleFor", {
-            name: t(S3_CONNECTION_TYPE.labelKey),
+            name: t(connType.labelKey),
           })
         : stage === "reveal"
           ? t("portal.sources.types.webhook.reveal.title")
@@ -346,7 +362,7 @@ export function SourceModal({
             <Button
               size="sm"
               loading={connSaving}
-              disabled={!connectionFormValid(S3_CONNECTION_TYPE, connValues)}
+              disabled={!connectionFormValid(connType, connValues)}
               onClick={() => void saveConnection()}
             >
               {t("portal.connections.picker.save")}
@@ -512,7 +528,28 @@ export function SourceModal({
                       onChange={(connectionId) =>
                         setOption(field.key, connectionId)
                       }
-                      onCreateNew={() => openConnectionStage(field.key)}
+                      onCreateNew={() =>
+                        openConnectionStage(field.key, S3_CONNECTION_TYPE)
+                      }
+                    />
+                  ) : field.control === "connection" ? (
+                    <ConnectionPicker
+                      value={options[field.key] ?? ""}
+                      onChange={(connectionId) =>
+                        setOption(field.key, connectionId)
+                      }
+                      integrationType={
+                        connectionTypeById(field.connectionTypeId ?? "")
+                          .integrationType
+                      }
+                      createTypeId={field.connectionTypeId ?? ""}
+                      presetId={field.connectionTypeId}
+                      onCreateNew={() =>
+                        openConnectionStage(
+                          field.key,
+                          connectionTypeById(field.connectionTypeId ?? ""),
+                        )
+                      }
                     />
                   ) : field.control === "select" ? (
                     <Select
@@ -593,7 +630,7 @@ export function SourceModal({
       {stage === "connection" && (
         <div className="portal-source-modal__form">
           <ConnectionForm
-            type={S3_CONNECTION_TYPE}
+            type={connType}
             values={connValues}
             onChange={setConnValues}
           />
diff --git a/frontend/editor/src/portal/components/sources/connectionTypes.ts b/frontend/editor/src/portal/components/sources/connectionTypes.ts
index ad5dfa3f17..d71d0ce2dc 100644
--- a/frontend/editor/src/portal/components/sources/connectionTypes.ts
+++ b/frontend/editor/src/portal/components/sources/connectionTypes.ts
@@ -29,6 +29,12 @@ export interface ConnectionFieldDef {
   defaultValue?: string;
   /** Shown only when another field has one of these values, e.g. auth fields per authType. */
   visibleWhen?: { key: string; oneOf: string[] };
+  /**
+   * When this field changes, move another field onto the default paired with the new value (FTP
+   * port per encryption mode) — but only while the target still holds a default, never a custom
+   * value the operator typed.
+   */
+  syncsDefault?: { targetKey: string; map: Record<string, string> };
 }
 
 export interface CreatableConnectionType {
@@ -122,6 +128,162 @@ const S3_FIELDS: ConnectionFieldDef[] = [
   },
 ];
 
+// Network file servers (SFTP/FTP/SMB). The protocol is baked into presetConfig; the operator
+// supplies host and credentials. host/port/username/password reuse the shared commonFields copy.
+const SFTP_FIELDS: ConnectionFieldDef[] = [
+  {
+    key: "host",
+    labelKey: `${COMMON}.host.label`,
+    control: "text",
+    required: true,
+    placeholderKey: `${PREFIX}.sftp.hostPlaceholder`,
+  },
+  {
+    key: "port",
+    labelKey: `${COMMON}.port.label`,
+    control: "text",
+    defaultValue: "22",
+  },
+  {
+    key: "username",
+    labelKey: `${COMMON}.username.label`,
+    control: "text",
+    required: true,
+  },
+  {
+    key: "password",
+    labelKey: `${COMMON}.password.label`,
+    control: "password",
+    helperTextKey: `${PREFIX}.sftp.fields.password.helperText`,
+  },
+  {
+    key: "privateKey",
+    labelKey: `${PREFIX}.sftp.fields.privateKey.label`,
+    control: "textarea",
+    helperTextKey: `${PREFIX}.sftp.fields.privateKey.helperText`,
+  },
+  {
+    key: "privateKeyPassphrase",
+    labelKey: `${PREFIX}.sftp.fields.passphrase.label`,
+    control: "password",
+  },
+  {
+    key: "hostKeyFingerprint",
+    labelKey: `${PREFIX}.sftp.fields.hostKeyFingerprint.label`,
+    control: "text",
+    placeholderKey: `${PREFIX}.sftp.fields.hostKeyFingerprint.placeholder`,
+    helperTextKey: `${PREFIX}.sftp.fields.hostKeyFingerprint.helperText`,
+  },
+];
+
+const FTP_FIELDS: ConnectionFieldDef[] = [
+  {
+    key: "host",
+    labelKey: `${COMMON}.host.label`,
+    control: "text",
+    required: true,
+    placeholderKey: `${PREFIX}.ftp.hostPlaceholder`,
+  },
+  {
+    key: "port",
+    labelKey: `${COMMON}.port.label`,
+    control: "text",
+    defaultValue: "21",
+  },
+  {
+    key: "username",
+    labelKey: `${COMMON}.username.label`,
+    control: "text",
+    required: true,
+  },
+  {
+    key: "password",
+    labelKey: `${COMMON}.password.label`,
+    control: "password",
+    required: true,
+  },
+  {
+    key: "security",
+    labelKey: `${PREFIX}.ftp.fields.security.label`,
+    control: "select",
+    defaultValue: "NONE",
+    helperTextKey: `${PREFIX}.ftp.fields.security.helperText`,
+    // Implicit FTPS listens on 990; follow the untouched port default across modes.
+    syncsDefault: {
+      targetKey: "port",
+      map: { NONE: "21", EXPLICIT: "21", IMPLICIT: "990" },
+    },
+    options: [
+      { value: "NONE", labelKey: `${PREFIX}.ftp.fields.security.options.none` },
+      {
+        value: "EXPLICIT",
+        labelKey: `${PREFIX}.ftp.fields.security.options.explicit`,
+      },
+      {
+        value: "IMPLICIT",
+        labelKey: `${PREFIX}.ftp.fields.security.options.implicit`,
+      },
+    ],
+  },
+  {
+    key: "passive",
+    labelKey: `${PREFIX}.ftp.fields.passive.label`,
+    control: "select",
+    defaultValue: "true",
+    options: [
+      {
+        value: "true",
+        labelKey: `${PREFIX}.ftp.fields.passive.options.passive`,
+      },
+      {
+        value: "false",
+        labelKey: `${PREFIX}.ftp.fields.passive.options.active`,
+      },
+    ],
+  },
+];
+
+const SMB_FIELDS: ConnectionFieldDef[] = [
+  {
+    key: "host",
+    labelKey: `${COMMON}.host.label`,
+    control: "text",
+    required: true,
+    placeholderKey: `${PREFIX}.smb.hostPlaceholder`,
+  },
+  {
+    key: "port",
+    labelKey: `${COMMON}.port.label`,
+    control: "text",
+    defaultValue: "445",
+  },
+  {
+    key: "share",
+    labelKey: `${PREFIX}.smb.fields.share.label`,
+    control: "text",
+    required: true,
+    placeholderKey: `${PREFIX}.smb.fields.share.placeholder`,
+  },
+  {
+    key: "username",
+    labelKey: `${COMMON}.username.label`,
+    control: "text",
+    required: true,
+  },
+  {
+    key: "password",
+    labelKey: `${COMMON}.password.label`,
+    control: "password",
+    required: true,
+  },
+  {
+    key: "domain",
+    labelKey: `${PREFIX}.smb.fields.domain.label`,
+    control: "text",
+    helperTextKey: `${PREFIX}.smb.fields.domain.helperText`,
+  },
+];
+
 const PURVIEW_FIELDS: ConnectionFieldDef[] = [
   {
     key: "tenantId",
@@ -587,6 +749,46 @@ export const CREATABLE_CONNECTION_TYPES: CreatableConnectionType[] = [
     searchTerms: ["aws", "bucket", "minio", "object storage"],
     fields: S3_FIELDS,
   },
+  {
+    id: "sftp",
+    integrationType: "NETWORK",
+    kind: "preset",
+    category: "storage",
+    labelKey: `${PREFIX}.sftp.label`,
+    descriptionKey: `${PREFIX}.sftp.description`,
+    searchTerms: ["sftp", "ssh", "scp", "drop folder", "file transfer"],
+    presetConfig: { protocol: "SFTP" },
+    fields: SFTP_FIELDS,
+  },
+  {
+    id: "ftp",
+    integrationType: "NETWORK",
+    kind: "preset",
+    category: "storage",
+    labelKey: `${PREFIX}.ftp.label`,
+    descriptionKey: `${PREFIX}.ftp.description`,
+    searchTerms: ["ftp", "ftps", "file transfer", "drop folder"],
+    presetConfig: { protocol: "FTP" },
+    fields: FTP_FIELDS,
+  },
+  {
+    id: "smb",
+    integrationType: "NETWORK",
+    kind: "preset",
+    category: "storage",
+    labelKey: `${PREFIX}.smb.label`,
+    descriptionKey: `${PREFIX}.smb.description`,
+    searchTerms: [
+      "smb",
+      "cifs",
+      "samba",
+      "network drive",
+      "windows share",
+      "unc",
+    ],
+    presetConfig: { protocol: "SMB" },
+    fields: SMB_FIELDS,
+  },
   {
     id: "purview",
     integrationType: "PURVIEW",
diff --git a/frontend/editor/src/portal/components/sources/sourceTypes.ts b/frontend/editor/src/portal/components/sources/sourceTypes.ts
index e25490a2bf..ee51ba21f3 100644
--- a/frontend/editor/src/portal/components/sources/sourceTypes.ts
+++ b/frontend/editor/src/portal/components/sources/sourceTypes.ts
@@ -37,6 +37,18 @@ const SOURCE_TYPE_META: Record<string, SourceTypeMeta> = {
     labelKey: "portal.sources.types.s3.label",
     accent: "brand",
   },
+  sftp: {
+    labelKey: "portal.sources.types.sftp.label",
+    accent: "default",
+  },
+  ftp: {
+    labelKey: "portal.sources.types.ftp.label",
+    accent: "default",
+  },
+  network: {
+    labelKey: "portal.sources.types.network.label",
+    accent: "default",
+  },
   webhook: {
     labelKey: "portal.sources.types.webhook.label",
     accent: "warning",
@@ -56,12 +68,17 @@ export function sourceTypeMeta(type: string): SourceTypeMeta {
 export interface SourceFieldDef {
   key: string;
   labelKey: string;
-  control: "text" | "password" | "select" | "s3Connection";
+  control: "text" | "password" | "select" | "s3Connection" | "connection";
   required?: boolean;
   placeholderKey?: string;
   helperTextKey?: string;
   options?: { value: string; labelKey: string }[];
   defaultValue?: string;
+  /**
+   * For `control: "connection"` - the connection-catalogue entry id this slot accepts (e.g.
+   * "sftp"). Filters the picker to matching connections and pins the inline "new connection" form.
+   */
+  connectionTypeId?: string;
 }
 
 /** A source type the wizard can create, with the fields its config needs. */
@@ -72,6 +89,64 @@ export interface CreatableSourceType {
   fields: SourceFieldDef[];
 }
 
+/**
+ * The config a network source (SFTP/FTP/SMB) needs: a stored connection of the matching protocol,
+ * the folder to poll, and the same consume/snapshot + recursion choices as a folder source. Shared
+ * copy across the three protocols, since only the connection type differs.
+ */
+function networkSourceFields(connectionTypeId: string): SourceFieldDef[] {
+  return [
+    {
+      key: "connectionId",
+      labelKey: "portal.sources.networkFields.connection.label",
+      control: "connection",
+      connectionTypeId,
+      required: true,
+      helperTextKey: "portal.sources.networkFields.connection.helperText",
+    },
+    {
+      key: "directory",
+      labelKey: "portal.sources.networkFields.directory.label",
+      control: "text",
+      placeholderKey: "portal.sources.networkFields.directory.placeholder",
+      helperTextKey: "portal.sources.networkFields.directory.helperText",
+    },
+    {
+      key: "mode",
+      labelKey: "portal.sources.networkFields.mode.label",
+      control: "select",
+      defaultValue: "consume",
+      helperTextKey: "portal.sources.networkFields.mode.helperText",
+      options: [
+        {
+          value: "consume",
+          labelKey: "portal.sources.networkFields.mode.options.consume",
+        },
+        {
+          value: "snapshot",
+          labelKey: "portal.sources.networkFields.mode.options.snapshot",
+        },
+      ],
+    },
+    {
+      key: "recursive",
+      labelKey: "portal.sources.networkFields.recursive.label",
+      control: "select",
+      defaultValue: "false",
+      options: [
+        {
+          value: "false",
+          labelKey: "portal.sources.networkFields.recursive.options.top",
+        },
+        {
+          value: "true",
+          labelKey: "portal.sources.networkFields.recursive.options.all",
+        },
+      ],
+    },
+  ];
+}
+
 export const CREATABLE_SOURCE_TYPES: CreatableSourceType[] = [
   {
     type: "folder",
@@ -182,6 +257,24 @@ export const CREATABLE_SOURCE_TYPES: CreatableSourceType[] = [
       },
     ],
   },
+  {
+    type: "sftp",
+    labelKey: "portal.sources.types.sftp.label",
+    descriptionKey: "portal.sources.types.sftp.description",
+    fields: networkSourceFields("sftp"),
+  },
+  {
+    type: "ftp",
+    labelKey: "portal.sources.types.ftp.label",
+    descriptionKey: "portal.sources.types.ftp.description",
+    fields: networkSourceFields("ftp"),
+  },
+  {
+    type: "network",
+    labelKey: "portal.sources.types.network.label",
+    descriptionKey: "portal.sources.types.network.description",
+    fields: networkSourceFields("smb"),
+  },
   {
     type: WEBHOOK_SOURCE_TYPE,
     labelKey: "portal.sources.types.webhook.label",
@@ -208,8 +301,6 @@ export const COMING_SOON_SOURCE_TYPES: ComingSoonSourceType[] = [
   "googledrive",
   "dropbox",
   "box",
-  "network",
-  "sftp",
   "email",
 ].map((type) => ({
   type,
diff --git a/gradle.properties b/gradle.properties
index 0e8306a444..2a33a5cebc 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -16,3 +16,8 @@ org.gradle.java.installations.auto-download=true
 
 org.gradle.daemon=true
 # org.gradle.configuration-cache=true
+
+# Gradle daemon heap. Without this the daemon uses Gradle's 512m default, which the SaaS build
+# variant (it compiles saas + proprietary + core together) exhausts during compileTestJava - the
+# GC thrashes and the daemon is stopped. Give all flavours comfortable headroom.
+org.gradle.jvmargs=-Xmx2g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8

From 28480d137a4079953e64c2ce6997f80a61c1376b Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:58:14 +0100
Subject: [PATCH 055/122] Cache Gradle dependencies in the live E2E workflow
 (#7234)

# Description of Changes

Fixes the `playwright-e2e-live` failure seen on [run
30694073128](https://github.com/Stirling-Tools/Stirling-PDF/actions/runs/30694073128).
The backend never started:

```
> Could not resolve org.springframework.boot:spring-boot-buildpack-platform:4.0.6.
   > Could not GET 'https://repo.maven.apache.org/maven2/.../spring-boot-buildpack-platform-4.0.6.pom'.
     Received status code 429 from server: Too Many Requests
> There are 14 more failures with identical causes.
BUILD FAILED in 21s
```

Gradle was throttled by Maven Central while resolving the buildscript
classpath, `:stirling-pdf:bootRun` died, and the runner's "backend
exited before becoming ready" guard aborted the suite before a single
test ran.

`e2e-live.yml` was the only Java-running workflow with no Gradle
dependency cache, no `setup-gradle`, and no Maven mirror env - every
sibling (`backend-build.yml`, `db-migration-test.yml`,
`coverage-aggregate.yml`) has all three. So it downloaded the Gradle
distribution and resolved the entire classpath cold from Maven Central
on every single run, and eventually got throttled.

Added:

- the same `Cache Gradle dependency artifacts` + `Setup Gradle` pair
used by `backend-build.yml`
- `MAVEN_USER` / `MAVEN_PASSWORD` / `MAVEN_PUBLIC_URL` on the two
Gradle-invoking steps, so runs that have the secrets use the internal
mirror instead of hitting Central
- a `Prime Gradle dependencies` step that retries 3x with backoff.
Gradle does not retry 429s, and doing the cold resolve up front means a
rate-limit failure retries cheaply instead of killing a backgrounded
`bootRun` twenty minutes in

Side benefit: the job gets faster once the cache is warm.

## Notes for reviewers

- The 429 itself is transient infrastructure behaviour - a re-run would
likely have gone green. The defect being fixed is that this job had no
cache to fall back on, so it was exposed to it on every run.
- `:stirling-pdf:classes` does not trigger a frontend build
(`buildWithFrontend` defaults off, `app/core/build.gradle:147`), so
priming before the Vite build step is safe. It is not wasted work either
- `bootRun` compiles the same classes.
- This PR originally also carried a fix for the `tauri-build`
updater-key failure on that same run. #7181 fixes that more simply and
has been merged, so that half has been dropped here.
- Workflow changes cannot be fully verified locally; a CI run on this
branch is the real check.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .github/workflows/e2e-live.yml | 42 ++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/.github/workflows/e2e-live.yml b/.github/workflows/e2e-live.yml
index af3ca377c1..302663cbf9 100644
--- a/.github/workflows/e2e-live.yml
+++ b/.github/workflows/e2e-live.yml
@@ -25,6 +25,39 @@ jobs:
         with:
           java-version: "25"
           distribution: "temurin"
+      # Same cache layer as backend-build.yml. Without it every run resolved the
+      # whole classpath cold and eventually got HTTP 429 from Maven Central.
+      - name: Cache Gradle dependency artifacts
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/wrapper
+            ~/.gradle/caches/modules-2/files-2.1
+            ~/.gradle/caches/modules-2/metadata-2.*
+          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+        with:
+          gradle-version: 9.6.1
+          cache-disabled: true
+      # Gradle does not retry 429s, and a cold cache resolving the buildscript
+      # classpath is exactly where Maven Central rate-limits us. Retry it here,
+      # where a failure is cheap, instead of inside the backgrounded bootRun.
+      - name: Prime Gradle dependencies
+        env:
+          MAVEN_USER: ${{ secrets.MAVEN_USER }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
+        run: |
+          for attempt in 1 2 3; do
+            if ./gradlew --quiet -PnoSpotless :stirling-pdf:classes; then
+              exit 0
+            fi
+            echo "::warning::Gradle dependency resolution failed (attempt $attempt of 3)"
+            sleep $((attempt * 30))
+          done
+          echo "::error::Gradle could not resolve dependencies after 3 attempts"
+          exit 1
       - name: Set up Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
@@ -53,6 +86,11 @@ jobs:
           # to aggregate. Chromium-only - other engines silently skip.
           PW_COVERAGE: "1"
           PLAYWRIGHT_JSON_OUTPUT_FILE: ${{ github.workspace }}/frontend/playwright-report/results.json
+          # Internal mirror, as in backend-build.yml. Empty on Dependabot and
+          # fork PRs, where the build falls back to Maven Central.
+          MAVEN_USER: ${{ secrets.MAVEN_USER }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
         run: task e2e:live
       - name: Flag flaky tests
         # Runs regardless of the test outcome: a flaky test (passed on retry)
@@ -66,6 +104,10 @@ jobs:
       - name: Generate JaCoCo report from e2e:live .exec
         if: always()
         id: live-coverage
+        env:
+          MAVEN_USER: ${{ secrets.MAVEN_USER }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
         # `if: always()` so even a failed test run still produces a
         # report from whatever flows did exercise the backend before
         # the failure. The task itself tolerates a missing .exec

From 22815b545880f5c3066f3018abaf0d819aaf7863 Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Mon, 3 Aug 2026 17:18:21 +0100
Subject: [PATCH 056/122] Sign Mac PR builds (#7267)

# Description of Changes
Mac builds in PRs are not currently signed, which means you can't run
them when downloaded. This restores the functionality so that Mac builds
are always signed.
---
 .github/workflows/build.yml       |  6 ++++--
 .github/workflows/tauri-build.yml | 15 ++++++++++-----
 2 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 07dbb781da..9d4aee192d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -174,12 +174,14 @@ jobs:
       pull-requests: write
     uses: ./.github/workflows/tauri-build.yml
     secrets: inherit
-    # PR smoke build: macOS + Windows (the platforms our developers use). 
+    # PR smoke build: macOS + Windows (the platforms our developers use).
+    # sign: true only reaches macOS - tauri-build's per-platform gate keeps
+    # Windows/Linux signing on main, and an unsigned .dmg cannot be opened.
     # The full signed multi-OS matrix runs on release;
     # nightly still warms the Rust cache with all-OS defaults.
     with:
       platform: windows-macos
-      sign: false
+      sign: true
 
   ai-engine:
     if: needs.files-changed.outputs.engine == 'true'
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index 65aac82520..e504826d35 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -108,6 +108,11 @@ jobs:
       WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
       APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
       RELEASE_GPG_PRIVATE_KEY: ${{ secrets.RELEASE_GPG_PRIVATE_KEY }}
+      # Per-platform sign gate. macOS signs on any run with the cert available,
+      # PRs included: Gatekeeper blocks an unsigned .dmg, so an unsigned macOS
+      # PR build is not testable. Windows and Linux stay main-only, matching the
+      # gates on their own signing steps below.
+      SIGN_BUNDLE: ${{ inputs.sign && (matrix.platform == 'macos-15' && secrets.APPLE_CERTIFICATE != '' || github.ref == 'refs/heads/main') }}
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
@@ -274,7 +279,7 @@ jobs:
           }
 
       - name: Import Apple Developer Certificate
-        if: inputs.sign && matrix.platform == 'macos-15' && env.APPLE_CERTIFICATE != ''
+        if: env.SIGN_BUNDLE == 'true' && matrix.platform == 'macos-15'
         env:
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
           APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
@@ -295,7 +300,7 @@ jobs:
           rm certificate.p12
 
       - name: Verify Certificate
-        if: inputs.sign && matrix.platform == 'macos-15' && env.APPLE_CERTIFICATE != ''
+        if: env.SIGN_BUNDLE == 'true' && matrix.platform == 'macos-15'
         run: |
           echo "Verifying Apple Developer Certificate..."
           KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
@@ -368,7 +373,7 @@ jobs:
           fi
 
       - name: Build Tauri app (signed)
-        if: inputs.sign
+        if: env.SIGN_BUNDLE == 'true'
         uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0.6.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -403,7 +408,7 @@ jobs:
           args: ${{ matrix.platform == 'ubuntu-22.04' && (inputs.minimal && '--bundles deb' || '--bundles deb,rpm') || matrix.args }}
 
       - name: Build Tauri app (unsigned)
-        if: ${{ !inputs.sign }}
+        if: env.SIGN_BUNDLE != 'true'
         uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0.6.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -458,7 +463,7 @@ jobs:
           fi
 
       - name: Verify notarization (macOS only)
-        if: inputs.sign && matrix.platform == 'macos-15'
+        if: env.SIGN_BUNDLE == 'true' && matrix.platform == 'macos-15'
         run: |
           echo "🔍 Verifying notarization status..."
           cd ./frontend/editor/src-tauri/target

From c91d63f21500221ace37102b48cab5f2db8882d9 Mon Sep 17 00:00:00 2001
From: EthanHealy01 <80844253+EthanHealy01@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:59:28 +0100
Subject: [PATCH 057/122] New design, part one: shared branding, nav surfaces
 and theme tokens (#7163)

## Overview

First part of the move over to the new designs. This lays the groundwork
(shared brand components, button/nav styling, theme tokens) and applies
it across the editor and the processor. Later parts will build on top of
it.

## What's changed

**Branding**
- Shared `Logo` and `BrandMark` components used everywhere, so the mark
and wordmark are identical across the editor, processor, auth pages and
the chat FAB.
- The sidebar logo doubles as the editor to processor switcher, morphing
into a chevron on hover. It only appears for users who can actually
reach the processor.

**Navigation and layout**
- Both sidebars restructured onto the floating nav surface treatment,
with rounded panels sitting on the app canvas.
- The editor file sidebar is now three sections (controls, PDF Library,
settings) and the workbench top bar and tools panel match.
- Added a collapse toggle to both sidebars, with an animated expand and
collapse and a tidy icon rail when collapsed. The processor did not have
a desktop collapse before.

**Components**
- Buttons and action icons now share one styling system, so both react
to the same tokens.
- Secondary buttons in dark mode use a neutral fill and border instead
of inheriting the primary colour.
- Status badges default to a clean dot with no background, with a filled
pill as the alternative.
- Metric strips gained a row layout with an optional leading icon.

**Theme**
- Colour tokens consolidated. Literal colours live only in the palette
file, everything else references the semantic `--c-*` tokens.
- `saas-theme.css` removed and the parts that were genuinely needed
moved into the shared theme, so all builds get them.
- The colour linter enforces this across the app and runs in CI.

## Notes

- Nothing functional should change here, it is styling plus the sidebar
collapse feature.
- Main has been merged in. The Sources and billing pages picked up
changes from main during that merge and are worth a look alongside the
new styling.

---------

Co-authored-by: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
---
 .../public/locales/en-US/translation.toml     |   9 +-
 frontend/editor/scripts/lint/theme-lint.mjs   |   1 -
 .../assets/brand/branding-logo/logo-mark.svg  |   4 +
 .../brand/branding-logo/wordmark-dark.svg     |   3 +
 .../brand/branding-logo/wordmark-light.svg    |   3 +
 .../components/fileEditor/AddFileCard.tsx     |   2 +-
 .../fileEditor/FileEditor.module.css          |  20 +-
 .../core/components/shared/AppConfigModal.tsx |  21 +-
 .../components/shared/AppConfigModalLazy.tsx  |   4 +
 .../src/core/components/shared/AppSwitch.css  |  27 -
 .../components/shared/AppSwitch.stories.tsx   |  35 --
 .../src/core/components/shared/AppSwitch.tsx  |  76 +--
 .../core/components/shared/AppSwitcher.tsx    |  24 +-
 .../src/core/components/shared/BrandMark.css  |  56 ++
 .../src/core/components/shared/BrandMark.tsx  |  36 ++
 .../core/components/shared/BrandSwitcher.css  |  15 +
 .../shared/BrandSwitcher.stories.tsx          |  16 +
 .../core/components/shared/BrandSwitcher.tsx  |  57 ++
 .../core/components/shared/FileSidebar.css    | 185 +++---
 .../core/components/shared/FileSidebar.tsx    | 562 +++++++++---------
 .../core/components/shared/LandingActions.tsx |   2 +
 .../core/components/shared/LandingPage.css    |  54 +-
 .../core/components/shared/LandingPage.tsx    |  31 +-
 .../components/shared/SidebarToggleIcon.tsx   |  39 ++
 .../core/components/shared/WorkbenchBar.css   |   9 +-
 .../core/components/tools/RightSidebar.tsx    |  90 ++-
 .../src/core/components/tools/ToolPanel.css   |  24 +-
 .../src/core/components/tools/ToolPicker.tsx  |   2 +-
 .../core/components/viewer/EmbedPdfViewer.tsx |   5 +-
 .../components/viewer/PdfViewerToolbar.css    |  35 ++
 .../components/viewer/PdfViewerToolbar.tsx    |   9 +-
 frontend/editor/src/core/pages/HomePage.tsx   |   1 +
 frontend/editor/src/core/styles/theme.css     |  53 ++
 .../tests/live/edge-cases-security.spec.ts    |   4 +-
 .../stubbed/language-localization.spec.ts     |  10 +-
 .../core/tests/stubbed/main-dashboard.spec.ts |  13 +-
 .../core/tests/stubbed/tool-search.spec.ts    |  24 +-
 frontend/editor/src/core/theme/colors.css     |  60 +-
 frontend/editor/src/core/theme/dimensions.css |   5 +
 frontend/editor/src/core/theme/primitives.css |  14 +-
 frontend/editor/src/core/tokens/tokens.css    |  10 -
 frontend/editor/src/core/ui/ActionIcon.tsx    |  25 +-
 frontend/editor/src/core/ui/Button.tsx        |  26 +-
 frontend/editor/src/core/ui/ChatFABButton.css |   9 +-
 frontend/editor/src/core/ui/ChatFABButton.tsx |  19 +-
 .../editor/src/core/ui/Inline.stories.tsx     |   4 +-
 frontend/editor/src/core/ui/Logo.css          |  33 +
 frontend/editor/src/core/ui/Logo.stories.tsx  |  48 ++
 frontend/editor/src/core/ui/Logo.tsx          |  89 +++
 frontend/editor/src/core/ui/MetricStrip.css   |  68 ++-
 .../src/core/ui/MetricStrip.stories.tsx       |  46 ++
 frontend/editor/src/core/ui/MetricStrip.tsx   |  32 +-
 frontend/editor/src/core/ui/NavItem.tsx       |   1 +
 frontend/editor/src/core/ui/NavSurface.css    |   5 +
 .../editor/src/core/ui/NavSurface.stories.tsx |  62 ++
 frontend/editor/src/core/ui/NavSurface.tsx    |  30 +
 .../src/core/ui/PanelHeader.stories.tsx       |   4 +-
 frontend/editor/src/core/ui/StatusBadge.css   |  55 +-
 .../src/core/ui/StatusBadge.stories.tsx       |   2 +-
 frontend/editor/src/core/ui/StatusBadge.tsx   |  16 +-
 frontend/editor/src/core/ui/accents.css       |  24 +-
 frontend/editor/src/core/ui/index.ts          |   2 +
 .../desktop/components/shared/AppSwitcher.tsx |  19 +-
 .../editor/src/portal/components/AppShell.css |   3 -
 .../editor/src/portal/components/AppShell.tsx |  12 +-
 .../portal/components/PortalSettingsHost.tsx  |   4 +
 .../editor/src/portal/components/Sidebar.css  | 151 +++--
 .../editor/src/portal/components/Sidebar.tsx  | 124 ++--
 .../account-link/LinkedInstancesTable.tsx     |   2 +-
 .../editor-admin/DeploymentSummaryStrip.tsx   |   7 +-
 .../editor-admin/DeploymentTargets.tsx        |   6 +-
 .../editor-admin/InstanceHealthTable.tsx      |   6 +-
 .../components/infrastructure/AuditTab.tsx    |   5 +-
 .../infrastructure/DeploymentsTab.tsx         |   6 +-
 .../components/infrastructure/ModelsTab.tsx   |  11 +-
 .../portal/components/pipelines/KpiStrip.tsx  |   3 +-
 .../components/pipelines/PipelinesTable.tsx   |   6 +-
 .../components/policies/CatalogueSummary.tsx  |   3 +-
 .../policies/PolicyCatalogueTable.tsx         |   6 +-
 .../policies/PolicyCategoryCard.tsx           |   1 -
 .../components/policies/PolicyDetailPanel.tsx |   5 +-
 .../portal/components/sources/KpiStrip.tsx    |   3 +-
 .../components/sources/SourcesTable.tsx       |   6 +-
 .../editor/src/portal/contexts/UIContext.tsx  |  31 +
 .../src/portal/views/Infrastructure.css       |  19 -
 .../proprietary/auth/ui/AuthShell.module.css  |   2 +-
 .../proprietary/auth/ui/AuthSignupPrompt.tsx  |   4 +-
 .../proprietary/auth/ui/EmailPasswordForm.tsx |   4 +-
 .../src/proprietary/auth/ui/auth-theme.css    |   2 -
 .../agents/StirlingLogoOutline.stories.tsx    |  22 -
 .../components/agents/StirlingLogoOutline.tsx |  21 -
 .../proprietary/components/chat/ChatPanel.css |  35 +-
 .../proprietary/components/chat/ChatPanel.tsx |  13 +-
 .../components/shared/AppSwitcher.tsx         |  29 +-
 .../editor/src/proprietary/routes/Login.tsx   |  44 +-
 .../editor/src/proprietary/routes/Signup.tsx  |   1 +
 frontend/editor/src/saas/App.tsx              |   2 +-
 .../onboarding/OnboardingChecklist.module.css |  11 +-
 .../saas/components/shared/AppConfigModal.tsx |  22 +-
 .../saas/components/shared/AppSwitcher.tsx    |  41 ++
 .../src/saas/hooks/usePortalAccess.test.tsx   | 108 ++++
 .../editor/src/saas/hooks/usePortalAccess.ts  |  52 ++
 frontend/editor/src/saas/routes/Login.tsx     | 109 ++--
 frontend/editor/src/saas/routes/Signup.tsx    | 101 ++--
 .../saas/routes/login/EmailPasswordForm.tsx   |   2 +-
 .../editor/src/saas/styles/saas-theme.css     | 173 ------
 106 files changed, 2121 insertions(+), 1366 deletions(-)
 create mode 100644 frontend/editor/src/core/assets/brand/branding-logo/logo-mark.svg
 create mode 100644 frontend/editor/src/core/assets/brand/branding-logo/wordmark-dark.svg
 create mode 100644 frontend/editor/src/core/assets/brand/branding-logo/wordmark-light.svg
 delete mode 100644 frontend/editor/src/core/components/shared/AppSwitch.css
 delete mode 100644 frontend/editor/src/core/components/shared/AppSwitch.stories.tsx
 create mode 100644 frontend/editor/src/core/components/shared/BrandMark.css
 create mode 100644 frontend/editor/src/core/components/shared/BrandMark.tsx
 create mode 100644 frontend/editor/src/core/components/shared/BrandSwitcher.css
 create mode 100644 frontend/editor/src/core/components/shared/BrandSwitcher.stories.tsx
 create mode 100644 frontend/editor/src/core/components/shared/BrandSwitcher.tsx
 create mode 100644 frontend/editor/src/core/components/shared/SidebarToggleIcon.tsx
 create mode 100644 frontend/editor/src/core/components/viewer/PdfViewerToolbar.css
 create mode 100644 frontend/editor/src/core/ui/Logo.css
 create mode 100644 frontend/editor/src/core/ui/Logo.stories.tsx
 create mode 100644 frontend/editor/src/core/ui/Logo.tsx
 create mode 100644 frontend/editor/src/core/ui/NavSurface.css
 create mode 100644 frontend/editor/src/core/ui/NavSurface.stories.tsx
 create mode 100644 frontend/editor/src/core/ui/NavSurface.tsx
 delete mode 100644 frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.stories.tsx
 delete mode 100644 frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.tsx
 create mode 100644 frontend/editor/src/saas/components/shared/AppSwitcher.tsx
 create mode 100644 frontend/editor/src/saas/hooks/usePortalAccess.test.tsx
 create mode 100644 frontend/editor/src/saas/hooks/usePortalAccess.ts
 delete mode 100644 frontend/editor/src/saas/styles/saas-theme.css

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 77e41e2ffd..bf00cfd08d 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -3877,10 +3877,10 @@ customizeGroups = "Customize groups"
 dropHint = "Open files to get started"
 dropToAdd = "Drop files to add"
 expand = "Expand sidebar"
-files = "Files"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive is not configured"
 leaveMyFiles = "Leave My Files"
+library = "PDF Library"
 myFiles = "My Files"
 noFiles = "No files yet"
 openFileManager = "Browse all files & folders"
@@ -4830,8 +4830,7 @@ welcomeTitle = "You've been invited!"
 addFiles = "Add Files"
 mobileUpload = "Upload from Mobile"
 openFromComputer = "Open from computer"
-uploadFromComputer = "Upload from computer"
-workbenchEmptyStateHero = "Drop a PDF anywhere"
+uploadFromComputer = "Browse files"
 
 [language]
 direction = "ltr"
@@ -4896,7 +4895,6 @@ signInWith = "Sign in with"
 title = "Sign in"
 unexpectedError = "Unexpected error: {{message}}"
 updatePassword = "Update password"
-useEmailInstead = "Login with email"
 useMagicLink = "Use magic link instead"
 username = "Username"
 youAreLoggedIn = "You are logged in!"
@@ -8720,7 +8718,6 @@ account-link = "Account link"
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
 linkAccount = "Link Stirling account"
 primaryNav = "Primary navigation"
 switchApp = "Switch app"
@@ -10761,8 +10758,10 @@ backToAllTools = "Back to all tools"
 collapse = "Collapse panel"
 expand = "Expand panel"
 goBack = "Go back"
+pdfTools = "PDF Tools"
 placeholder = "Choose a tool to get started"
 premiumFeature = "Premium feature:"
+searchTools = "Search tools"
 toolsHeader = "Tools"
 viewAllTools = "View all tools"
 
diff --git a/frontend/editor/scripts/lint/theme-lint.mjs b/frontend/editor/scripts/lint/theme-lint.mjs
index 71a9cf07e5..0ae53a3ce9 100644
--- a/frontend/editor/scripts/lint/theme-lint.mjs
+++ b/frontend/editor/scripts/lint/theme-lint.mjs
@@ -740,7 +740,6 @@ const PRIMITIVE_LAYER = [
   /^editor\/src\/core\/theme\//,
   /^editor\/src\/core\/styles\/theme\.css$/,
   /^editor\/src\/core\/tokens\/tokens\.css$/,
-  /^editor\/src\/saas\/styles\/saas-theme\.css$/,
   /^editor\/src\/proprietary\/auth\/ui\/auth-theme\.css$/,
   /^editor\/src\/core\/ui\/accents\.css$/,
 ];
diff --git a/frontend/editor/src/core/assets/brand/branding-logo/logo-mark.svg b/frontend/editor/src/core/assets/brand/branding-logo/logo-mark.svg
new file mode 100644
index 0000000000..de7d337f91
--- /dev/null
+++ b/frontend/editor/src/core/assets/brand/branding-logo/logo-mark.svg
@@ -0,0 +1,4 @@
+<svg width="71" height="79" viewBox="0 0 71 79" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M0 39L46.5 0V35.5L0 74.5V39Z" fill="#AD7373"/>
+<path d="M24 43L70.5 4V39.5L24 78.5V43Z" fill="#8E3131"/>
+</svg>
diff --git a/frontend/editor/src/core/assets/brand/branding-logo/wordmark-dark.svg b/frontend/editor/src/core/assets/brand/branding-logo/wordmark-dark.svg
new file mode 100644
index 0000000000..5c29f32920
--- /dev/null
+++ b/frontend/editor/src/core/assets/brand/branding-logo/wordmark-dark.svg
@@ -0,0 +1,3 @@
+<svg width="58" height="21" viewBox="0 0 58 21" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M4.36798 17.186C3.44931 17.186 2.66064 17.056 2.00198 16.796C1.36064 16.536 0.866643 16.0767 0.519977 15.418C0.17331 14.7594 -2.34321e-05 13.832 -2.34321e-05 12.636V11.726C0.53731 11.726 1.06598 11.726 1.58598 11.726C2.10598 11.726 2.62598 11.726 3.14598 11.726V12.896C3.14598 13.5374 3.19798 14.0314 3.30198 14.378C3.40598 14.7074 3.55331 14.9414 3.74398 15.08C3.93464 15.2014 4.15998 15.262 4.41998 15.262C4.81864 15.262 5.13064 15.1234 5.35598 14.846C5.59864 14.5514 5.71998 13.988 5.71998 13.156C5.71998 12.5147 5.61598 12.038 5.40798 11.726C5.21731 11.3967 4.90531 11.1367 4.47198 10.946C4.03864 10.738 3.48398 10.4867 2.80798 10.192C2.20131 9.93203 1.69864 9.62003 1.29998 9.25603C0.90131 8.89203 0.606643 8.43269 0.415977 7.87803C0.22531 7.32336 0.129977 6.64736 0.129977 5.85003C0.129977 4.84469 0.259977 4.03003 0.519977 3.40603C0.79731 2.78203 1.24798 2.33136 1.87198 2.05403C2.51331 1.75936 3.37131 1.61203 4.44598 1.61203C5.83264 1.61203 6.88998 1.91536 7.61798 2.52203C8.36331 3.11136 8.73598 4.00403 8.73598 5.20003V7.04603C8.23331 7.04603 7.73064 7.04603 7.22798 7.04603C6.74264 7.04603 6.23998 7.04603 5.71998 7.04603V6.11003C5.71998 5.33003 5.62464 4.78403 5.43398 4.47203C5.26064 4.16003 4.93998 4.00403 4.47198 4.00403C4.02131 4.00403 3.70064 4.14269 3.50998 4.42003C3.31931 4.69736 3.22398 5.14803 3.22398 5.77203C3.22398 6.34403 3.33664 6.79469 3.56198 7.12403C3.80464 7.43603 4.10798 7.67869 4.47198 7.85203C4.83598 8.00803 5.22598 8.16403 5.64198 8.32003C6.40464 8.61469 7.02864 8.91803 7.51398 9.23003C7.99931 9.52469 8.35464 9.94069 8.57998 10.478C8.80531 10.998 8.91798 11.752 8.91798 12.74C8.91798 13.8494 8.72731 14.7334 8.34598 15.392C7.98198 16.0334 7.45331 16.4927 6.75998 16.77C6.08398 17.0474 5.28664 17.186 4.36798 17.186ZM14.3162 17.082C13.9176 17.082 13.5189 17.0474 13.1202 16.978C12.7216 16.9087 12.3662 16.7787 12.0542 16.588C11.7422 16.38 11.4909 16.094 11.3002 15.73C11.1096 15.3487 11.0142 14.846 11.0142 14.222V5.87603H9.79223V4.39403L11.2742 4.13403L11.6902 1.76803H13.9782V4.13403H16.4222V5.87603H13.9782V13.702C13.9782 14.066 14.0476 14.3954 14.1862 14.69C14.3249 14.9674 14.6369 15.106 15.1222 15.106C15.3476 15.106 15.6076 15.0974 15.9022 15.08C16.1969 15.0454 16.3702 15.028 16.4222 15.028V16.822C16.3702 16.822 16.1276 16.8654 15.6942 16.952C15.2782 17.0387 14.8189 17.082 14.3162 17.082ZM17.7052 17.004V4.13403H20.6692V17.004H17.7052ZM19.1872 2.70403C18.8058 2.70403 18.4765 2.57403 18.1992 2.31403C17.9218 2.03669 17.7832 1.71603 17.7832 1.35203C17.7832 0.970694 17.9218 0.650028 18.1992 0.390027C18.4765 0.130027 18.8058 2.71797e-05 19.1872 2.71797e-05C19.5685 2.71797e-05 19.8978 0.130027 20.1752 0.390027C20.4698 0.650028 20.6172 0.970694 20.6172 1.35203C20.6172 1.71603 20.4698 2.03669 20.1752 2.31403C19.8978 2.57403 19.5685 2.70403 19.1872 2.70403ZM22.6309 17.004V4.13403H25.1529L25.4129 5.66803C25.5689 5.28669 25.8029 4.98336 26.1149 4.75803C26.4269 4.51536 26.7563 4.35069 27.1029 4.26403C27.6749 4.02136 28.2729 3.96069 28.8969 4.08203V6.37003C28.8623 6.35269 28.7236 6.33536 28.4809 6.31803C28.2556 6.28336 27.9956 6.28336 27.7009 6.31803C27.4063 6.33536 27.1549 6.40469 26.9469 6.52603C26.5136 6.68203 26.1756 6.95069 25.9329 7.33203C25.7076 7.71336 25.5949 8.17269 25.5949 8.71003V17.004H22.6309ZM29.9434 17.004V0.572028H32.9074V17.004H29.9434ZM34.8692 17.004V4.13403H37.8332V17.004H34.8692ZM36.3512 2.70403C35.9699 2.70403 35.6406 2.57403 35.3632 2.31403C35.0859 2.03669 34.9472 1.71603 34.9472 1.35203C34.9472 0.970694 35.0859 0.650028 35.3632 0.390027C35.6406 0.130027 35.9699 2.71797e-05 36.3512 2.71797e-05C36.7326 2.71797e-05 37.0619 0.130027 37.3392 0.390027C37.6339 0.650028 37.7812 0.970694 37.7812 1.35203C37.7812 1.71603 37.6339 2.03669 37.3392 2.31403C37.0619 2.57403 36.7326 2.70403 36.3512 2.70403ZM39.795 17.004V4.13403H42.317L42.577 5.64203C42.733 5.12203 43.0363 4.69736 43.487 4.36803C43.955 4.03869 44.4663 3.87403 45.021 3.87403C45.853 3.87403 46.477 4.02136 46.893 4.31603C47.309 4.59336 47.5863 4.99203 47.725 5.51203C47.881 6.01469 47.959 6.61269 47.959 7.30603V17.004H44.995V7.48803C44.995 7.28003 44.9863 7.08936 44.969 6.91603C44.9517 6.72536 44.8997 6.56069 44.813 6.42203C44.7437 6.28336 44.6397 6.17936 44.501 6.11003C44.3623 6.02336 44.1543 5.98003 43.877 5.98003C43.669 5.98003 43.487 6.02336 43.331 6.11003C43.175 6.17936 43.0537 6.26603 42.967 6.37003C42.8803 6.47403 42.811 6.56936 42.759 6.65603V17.004H39.795ZM53.5714 20.098C53.3287 20.098 53.034 20.0894 52.6874 20.072C52.3407 20.0547 51.994 20.0287 51.6474 19.994C51.318 19.9594 51.032 19.9247 50.7894 19.89C50.564 19.8727 50.4254 19.8554 50.3734 19.838V18.252C50.5987 18.2867 50.9367 18.3214 51.3874 18.356C51.838 18.408 52.2194 18.434 52.5314 18.434C52.8087 18.434 53.0687 18.408 53.3114 18.356C53.5714 18.3214 53.7967 18.2347 53.9874 18.096C54.1954 17.9747 54.36 17.784 54.4814 17.524C54.6027 17.2814 54.6634 16.952 54.6634 16.536V14.69C54.5767 14.898 54.4467 15.132 54.2734 15.392C54.1174 15.6347 53.8834 15.8427 53.5714 16.016C53.2594 16.1894 52.8174 16.276 52.2454 16.276C51.8294 16.276 51.448 16.2327 51.1014 16.146C50.772 16.042 50.486 15.86 50.2434 15.6C50.018 15.3227 49.836 14.9327 49.6974 14.43C49.5587 13.91 49.4894 13.234 49.4894 12.402V7.15003C49.4894 6.05803 49.7147 5.24336 50.1654 4.70603C50.6334 4.15136 51.3354 3.87403 52.2714 3.87403C52.826 3.87403 53.268 3.94336 53.5974 4.08203C53.944 4.22069 54.2214 4.42003 54.4294 4.68003C54.6374 4.92269 54.802 5.20869 54.9234 5.53803L54.5334 5.59003L54.9754 4.13403H57.6274V15.08C57.6274 15.704 57.5667 16.3194 57.4454 16.926C57.3414 17.5154 57.1507 18.044 56.8734 18.512C56.596 18.9974 56.1887 19.3787 55.6514 19.656C55.1314 19.9507 54.438 20.098 53.5714 20.098ZM53.5194 14.508C53.814 14.508 54.0394 14.4387 54.1954 14.3C54.3687 14.144 54.4814 13.936 54.5334 13.676C54.6027 13.3987 54.6374 13.1127 54.6374 12.818V6.44803C54.6027 6.36136 54.542 6.27469 54.4554 6.18803C54.3687 6.10136 54.2474 6.02336 54.0914 5.95403C53.9527 5.88469 53.7534 5.85003 53.4934 5.85003C53.1467 5.85003 52.8867 5.95403 52.7134 6.16203C52.54 6.35269 52.4534 6.71669 52.4534 7.25403V13.182C52.4534 13.4767 52.488 13.7194 52.5574 13.91C52.6267 14.0834 52.7134 14.2134 52.8174 14.3C52.9387 14.3867 53.06 14.4474 53.1814 14.482C53.3027 14.4994 53.4154 14.508 53.5194 14.508Z" fill="#FAFAFA"/>
+</svg>
diff --git a/frontend/editor/src/core/assets/brand/branding-logo/wordmark-light.svg b/frontend/editor/src/core/assets/brand/branding-logo/wordmark-light.svg
new file mode 100644
index 0000000000..a9eeaa9e74
--- /dev/null
+++ b/frontend/editor/src/core/assets/brand/branding-logo/wordmark-light.svg
@@ -0,0 +1,3 @@
+<svg width="58" height="21" viewBox="0 0 58 21" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M4.36798 17.186C3.44931 17.186 2.66064 17.056 2.00198 16.796C1.36064 16.536 0.866643 16.0767 0.519977 15.418C0.17331 14.7594 -2.34321e-05 13.832 -2.34321e-05 12.636V11.726C0.53731 11.726 1.06598 11.726 1.58598 11.726C2.10598 11.726 2.62598 11.726 3.14598 11.726V12.896C3.14598 13.5374 3.19798 14.0314 3.30198 14.378C3.40598 14.7074 3.55331 14.9414 3.74398 15.08C3.93464 15.2014 4.15998 15.262 4.41998 15.262C4.81864 15.262 5.13064 15.1234 5.35598 14.846C5.59864 14.5514 5.71998 13.988 5.71998 13.156C5.71998 12.5147 5.61598 12.038 5.40798 11.726C5.21731 11.3967 4.90531 11.1367 4.47198 10.946C4.03864 10.738 3.48398 10.4867 2.80798 10.192C2.20131 9.93203 1.69864 9.62003 1.29998 9.25603C0.90131 8.89203 0.606643 8.43269 0.415977 7.87803C0.22531 7.32336 0.129977 6.64736 0.129977 5.85003C0.129977 4.84469 0.259977 4.03003 0.519977 3.40603C0.79731 2.78203 1.24798 2.33136 1.87198 2.05403C2.51331 1.75936 3.37131 1.61203 4.44598 1.61203C5.83264 1.61203 6.88998 1.91536 7.61798 2.52203C8.36331 3.11136 8.73598 4.00403 8.73598 5.20003V7.04603C8.23331 7.04603 7.73064 7.04603 7.22798 7.04603C6.74264 7.04603 6.23998 7.04603 5.71998 7.04603V6.11003C5.71998 5.33003 5.62464 4.78403 5.43398 4.47203C5.26064 4.16003 4.93998 4.00403 4.47198 4.00403C4.02131 4.00403 3.70064 4.14269 3.50998 4.42003C3.31931 4.69736 3.22398 5.14803 3.22398 5.77203C3.22398 6.34403 3.33664 6.79469 3.56198 7.12403C3.80464 7.43603 4.10798 7.67869 4.47198 7.85203C4.83598 8.00803 5.22598 8.16403 5.64198 8.32003C6.40464 8.61469 7.02864 8.91803 7.51398 9.23003C7.99931 9.52469 8.35464 9.94069 8.57998 10.478C8.80531 10.998 8.91798 11.752 8.91798 12.74C8.91798 13.8494 8.72731 14.7334 8.34598 15.392C7.98198 16.0334 7.45331 16.4927 6.75998 16.77C6.08398 17.0474 5.28664 17.186 4.36798 17.186ZM14.3162 17.082C13.9176 17.082 13.5189 17.0474 13.1202 16.978C12.7216 16.9087 12.3662 16.7787 12.0542 16.588C11.7422 16.38 11.4909 16.094 11.3002 15.73C11.1096 15.3487 11.0142 14.846 11.0142 14.222V5.87603H9.79223V4.39403L11.2742 4.13403L11.6902 1.76803H13.9782V4.13403H16.4222V5.87603H13.9782V13.702C13.9782 14.066 14.0476 14.3954 14.1862 14.69C14.3249 14.9674 14.6369 15.106 15.1222 15.106C15.3476 15.106 15.6076 15.0974 15.9022 15.08C16.1969 15.0454 16.3702 15.028 16.4222 15.028V16.822C16.3702 16.822 16.1276 16.8654 15.6942 16.952C15.2782 17.0387 14.8189 17.082 14.3162 17.082ZM17.7052 17.004V4.13403H20.6692V17.004H17.7052ZM19.1872 2.70403C18.8058 2.70403 18.4765 2.57403 18.1992 2.31403C17.9218 2.03669 17.7832 1.71603 17.7832 1.35203C17.7832 0.970694 17.9218 0.650028 18.1992 0.390027C18.4765 0.130027 18.8058 2.71797e-05 19.1872 2.71797e-05C19.5685 2.71797e-05 19.8978 0.130027 20.1752 0.390027C20.4698 0.650028 20.6172 0.970694 20.6172 1.35203C20.6172 1.71603 20.4698 2.03669 20.1752 2.31403C19.8978 2.57403 19.5685 2.70403 19.1872 2.70403ZM22.6309 17.004V4.13403H25.1529L25.4129 5.66803C25.5689 5.28669 25.8029 4.98336 26.1149 4.75803C26.4269 4.51536 26.7563 4.35069 27.1029 4.26403C27.6749 4.02136 28.2729 3.96069 28.8969 4.08203V6.37003C28.8623 6.35269 28.7236 6.33536 28.4809 6.31803C28.2556 6.28336 27.9956 6.28336 27.7009 6.31803C27.4063 6.33536 27.1549 6.40469 26.9469 6.52603C26.5136 6.68203 26.1756 6.95069 25.9329 7.33203C25.7076 7.71336 25.5949 8.17269 25.5949 8.71003V17.004H22.6309ZM29.9434 17.004V0.572028H32.9074V17.004H29.9434ZM34.8692 17.004V4.13403H37.8332V17.004H34.8692ZM36.3512 2.70403C35.9699 2.70403 35.6406 2.57403 35.3632 2.31403C35.0859 2.03669 34.9472 1.71603 34.9472 1.35203C34.9472 0.970694 35.0859 0.650028 35.3632 0.390027C35.6406 0.130027 35.9699 2.71797e-05 36.3512 2.71797e-05C36.7326 2.71797e-05 37.0619 0.130027 37.3392 0.390027C37.6339 0.650028 37.7812 0.970694 37.7812 1.35203C37.7812 1.71603 37.6339 2.03669 37.3392 2.31403C37.0619 2.57403 36.7326 2.70403 36.3512 2.70403ZM39.795 17.004V4.13403H42.317L42.577 5.64203C42.733 5.12203 43.0363 4.69736 43.487 4.36803C43.955 4.03869 44.4663 3.87403 45.021 3.87403C45.853 3.87403 46.477 4.02136 46.893 4.31603C47.309 4.59336 47.5863 4.99203 47.725 5.51203C47.881 6.01469 47.959 6.61269 47.959 7.30603V17.004H44.995V7.48803C44.995 7.28003 44.9863 7.08936 44.969 6.91603C44.9517 6.72536 44.8997 6.56069 44.813 6.42203C44.7437 6.28336 44.6397 6.17936 44.501 6.11003C44.3623 6.02336 44.1543 5.98003 43.877 5.98003C43.669 5.98003 43.487 6.02336 43.331 6.11003C43.175 6.17936 43.0537 6.26603 42.967 6.37003C42.8803 6.47403 42.811 6.56936 42.759 6.65603V17.004H39.795ZM53.5714 20.098C53.3287 20.098 53.034 20.0894 52.6874 20.072C52.3407 20.0547 51.994 20.0287 51.6474 19.994C51.318 19.9594 51.032 19.9247 50.7894 19.89C50.564 19.8727 50.4254 19.8554 50.3734 19.838V18.252C50.5987 18.2867 50.9367 18.3214 51.3874 18.356C51.838 18.408 52.2194 18.434 52.5314 18.434C52.8087 18.434 53.0687 18.408 53.3114 18.356C53.5714 18.3214 53.7967 18.2347 53.9874 18.096C54.1954 17.9747 54.36 17.784 54.4814 17.524C54.6027 17.2814 54.6634 16.952 54.6634 16.536V14.69C54.5767 14.898 54.4467 15.132 54.2734 15.392C54.1174 15.6347 53.8834 15.8427 53.5714 16.016C53.2594 16.1894 52.8174 16.276 52.2454 16.276C51.8294 16.276 51.448 16.2327 51.1014 16.146C50.772 16.042 50.486 15.86 50.2434 15.6C50.018 15.3227 49.836 14.9327 49.6974 14.43C49.5587 13.91 49.4894 13.234 49.4894 12.402V7.15003C49.4894 6.05803 49.7147 5.24336 50.1654 4.70603C50.6334 4.15136 51.3354 3.87403 52.2714 3.87403C52.826 3.87403 53.268 3.94336 53.5974 4.08203C53.944 4.22069 54.2214 4.42003 54.4294 4.68003C54.6374 4.92269 54.802 5.20869 54.9234 5.53803L54.5334 5.59003L54.9754 4.13403H57.6274V15.08C57.6274 15.704 57.5667 16.3194 57.4454 16.926C57.3414 17.5154 57.1507 18.044 56.8734 18.512C56.596 18.9974 56.1887 19.3787 55.6514 19.656C55.1314 19.9507 54.438 20.098 53.5714 20.098ZM53.5194 14.508C53.814 14.508 54.0394 14.4387 54.1954 14.3C54.3687 14.144 54.4814 13.936 54.5334 13.676C54.6027 13.3987 54.6374 13.1127 54.6374 12.818V6.44803C54.6027 6.36136 54.542 6.27469 54.4554 6.18803C54.3687 6.10136 54.2474 6.02336 54.0914 5.95403C53.9527 5.88469 53.7534 5.85003 53.4934 5.85003C53.1467 5.85003 52.8867 5.95403 52.7134 6.16203C52.54 6.35269 52.4534 6.71669 52.4534 7.25403V13.182C52.4534 13.4767 52.488 13.7194 52.5574 13.91C52.6267 14.0834 52.7134 14.2134 52.8174 14.3C52.9387 14.3867 53.06 14.4474 53.1814 14.482C53.3027 14.4994 53.4154 14.508 53.5194 14.508Z" fill="#373530"/>
+</svg>
diff --git a/frontend/editor/src/core/components/fileEditor/AddFileCard.tsx b/frontend/editor/src/core/components/fileEditor/AddFileCard.tsx
index 5491138e6b..94d2e35e47 100644
--- a/frontend/editor/src/core/components/fileEditor/AddFileCard.tsx
+++ b/frontend/editor/src/core/components/fileEditor/AddFileCard.tsx
@@ -181,11 +181,11 @@ const AddFileCard = ({
 
           {/* Instruction Text */}
           <span
-            className="text-[var(--c-primary)]"
             style={{
               fontSize: ".8rem",
               textAlign: "center",
               marginTop: "0.5rem",
+              color: "var(--c-text-muted)",
             }}
           >
             {terminology.dropFilesHere}
diff --git a/frontend/editor/src/core/components/fileEditor/FileEditor.module.css b/frontend/editor/src/core/components/fileEditor/FileEditor.module.css
index c5770f1ea7..410ade863b 100644
--- a/frontend/editor/src/core/components/fileEditor/FileEditor.module.css
+++ b/frontend/editor/src/core/components/fileEditor/FileEditor.module.css
@@ -325,13 +325,19 @@
    ========================= */
 
 .addFileCard {
-  width: 260px;
-  max-width: 260px;
-  height: calc(310px - 0.5rem);
-  margin: 0.5rem auto 0;
-  background: var(--c-bg);
-  border: 1.5px solid var(--c-border);
-  border-radius: 12px;
+  /* Fill the same slot a portrait page thumbnail does. Height: the 310px
+     .thumbWrap minus the always-reserved 26px toolchain bar (22px + 4px) that
+     sits above the page. Width: the file card's 260px minus its 10px side
+     padding. Offset 36px down (that padding-top + the bar) so the two line up.
+     A fixed size rather than an aspect-ratio, because each thumbnail derives
+     --thumb-aspect from its own PDF's page dimensions. */
+  height: calc(310px - 26px);
+  width: calc(260px - 20px);
+  max-width: 100%;
+  margin: 36px auto auto;
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: 0.625rem;
   box-shadow: var(--shadow-md);
   cursor: pointer;
   transition:
diff --git a/frontend/editor/src/core/components/shared/AppConfigModal.tsx b/frontend/editor/src/core/components/shared/AppConfigModal.tsx
index 9ad7963b6f..3805b4b912 100644
--- a/frontend/editor/src/core/components/shared/AppConfigModal.tsx
+++ b/frontend/editor/src/core/components/shared/AppConfigModal.tsx
@@ -47,6 +47,8 @@ interface AppConfigModalProps {
   initialSection?: NavKey | null;
   /** Host-specific sections appended after the build's registry sections. */
   extraSections?: ConfigNavSection[];
+  /** Registry section keys to drop, for hosts a section can't run in. */
+  hiddenSectionKeys?: NavKey[];
 }
 
 // Extract section from URL path (e.g., /settings/people -> people)
@@ -65,6 +67,7 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
   urlSync = true,
   initialSection,
   extraSections,
+  hiddenSectionKeys,
 }) => {
   const { t } = useTranslation();
   // Initialize from the URL so a deep link (`/settings/people`) lands on the
@@ -218,13 +221,17 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
     handleCloseSync,
     config?.showSettingsWhenNoLogin ?? true,
   );
-  const configNavSections = useMemo(
-    () =>
-      extraSections?.length
-        ? [...registrySections, ...extraSections]
-        : registrySections,
-    [registrySections, extraSections],
-  );
+  const configNavSections = useMemo(() => {
+    const base = hiddenSectionKeys?.length
+      ? registrySections
+          .map((s) => ({
+            ...s,
+            items: s.items.filter((i) => !hiddenSectionKeys.includes(i.key)),
+          }))
+          .filter((s) => s.items.length > 0)
+      : registrySections;
+    return extraSections?.length ? [...base, ...extraSections] : base;
+  }, [registrySections, extraSections, hiddenSectionKeys]);
 
   const activeLabel = useMemo(() => {
     for (const section of configNavSections) {
diff --git a/frontend/editor/src/core/components/shared/AppConfigModalLazy.tsx b/frontend/editor/src/core/components/shared/AppConfigModalLazy.tsx
index 1ba57618f0..6c23178219 100644
--- a/frontend/editor/src/core/components/shared/AppConfigModalLazy.tsx
+++ b/frontend/editor/src/core/components/shared/AppConfigModalLazy.tsx
@@ -20,6 +20,8 @@ interface AppConfigModalLazyProps {
   initialSection?: NavKey | null;
   /** Host-specific sections appended after the build's registry sections. */
   extraSections?: ConfigNavSection[];
+  /** Registry section keys to drop, for hosts a section can't run in. */
+  hiddenSectionKeys?: NavKey[];
 }
 
 export default function AppConfigModalLazy({
@@ -28,6 +30,7 @@ export default function AppConfigModalLazy({
   urlSync,
   initialSection,
   extraSections,
+  hiddenSectionKeys,
 }: AppConfigModalLazyProps) {
   const [shouldMount, setShouldMount] = useState(false);
 
@@ -44,6 +47,7 @@ export default function AppConfigModalLazy({
           urlSync={urlSync}
           initialSection={initialSection}
           extraSections={extraSections}
+          hiddenSectionKeys={hiddenSectionKeys}
         />
       )}
     </Suspense>
diff --git a/frontend/editor/src/core/components/shared/AppSwitch.css b/frontend/editor/src/core/components/shared/AppSwitch.css
deleted file mode 100644
index bccf8fbceb..0000000000
--- a/frontend/editor/src/core/components/shared/AppSwitch.css
+++ /dev/null
@@ -1,27 +0,0 @@
-/* Trigger: bare square icon button that blends into either sidebar's header. */
-.app-switch-btn {
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  width: 1.25rem;
-  height: 1.25rem;
-  border: none;
-  background: none;
-  cursor: pointer;
-  border-radius: var(--radius-sm);
-  color: var(--c-text-subtle);
-  transition:
-    background var(--motion-fast),
-    color var(--motion-fast);
-}
-
-.app-switch-btn:hover {
-  background: var(--c-hover);
-  color: var(--c-text-muted);
-}
-
-.app-switch-icon {
-  width: 1rem;
-  height: 1.0625rem;
-  display: block;
-}
diff --git a/frontend/editor/src/core/components/shared/AppSwitch.stories.tsx b/frontend/editor/src/core/components/shared/AppSwitch.stories.tsx
deleted file mode 100644
index 6d4449fe58..0000000000
--- a/frontend/editor/src/core/components/shared/AppSwitch.stories.tsx
+++ /dev/null
@@ -1,35 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { AppSwitch } from "@app/components/shared/AppSwitch";
-
-/** The editor ⇄ processor app switcher rendered by both the editor and portal sidebars. */
-const meta: Meta<typeof AppSwitch> = {
-  title: "Shared/AppSwitch",
-  component: AppSwitch,
-  parameters: { layout: "padded" },
-};
-export default meta;
-type Story = StoryObj<typeof meta>;
-
-export const Editor: Story = {
-  args: {
-    current: "editor",
-    theme: "light",
-    onSwitch: () => {},
-  },
-};
-
-export const Processor: Story = {
-  args: {
-    current: "processor",
-    theme: "light",
-    onSwitch: () => {},
-  },
-};
-
-export const DarkTheme: Story = {
-  args: {
-    current: "editor",
-    theme: "dark",
-    onSwitch: () => {},
-  },
-};
diff --git a/frontend/editor/src/core/components/shared/AppSwitch.tsx b/frontend/editor/src/core/components/shared/AppSwitch.tsx
index b713e75e7c..71d35ed5ad 100644
--- a/frontend/editor/src/core/components/shared/AppSwitch.tsx
+++ b/frontend/editor/src/core/components/shared/AppSwitch.tsx
@@ -1,52 +1,27 @@
 import { useTranslation } from "react-i18next";
-import { Button, Dropdown } from "@app/ui";
-import markLight from "@app/assets/brand/modern-logo/StirlingPDFLogoNoTextLight.svg";
-import markDark from "@app/assets/brand/modern-logo/StirlingPDFLogoNoTextDark.svg";
-import "@app/components/shared/AppSwitch.css";
+import { Dropdown } from "@app/ui";
+import { BrandMark } from "@app/components/shared/BrandMark";
 
 export type AppSwitchTarget = "editor" | "processor";
 
-function ChevronDownIcon() {
-  return (
-    <svg
-      xmlns="http://www.w3.org/2000/svg"
-      width={14}
-      height={14}
-      viewBox="0 0 24 24"
-      fill="none"
-      stroke="currentColor"
-      strokeWidth={1.75}
-      strokeLinecap="round"
-      strokeLinejoin="round"
-    >
-      <polyline points="6 9 12 15 18 9" />
-    </svg>
-  );
-}
-
-interface AppSwitchProps {
+interface AppSwitchMenuItemsProps {
   /** The app this switcher is rendered in (shown as active in the menu). */
   current: AppSwitchTarget;
-  /** Resolved color scheme; picks the brand mark for the menu items. */
-  theme: "light" | "dark";
   /** Invoked with the selected app; only called for apps other than `current`. */
   onSwitch: (app: AppSwitchTarget) => void;
-  className?: string;
 }
 
 /**
- * The editor ⇄ processor app switcher (chevron button → app menu). The editor
- * and portal sidebars render this same element so the two apps present one
- * identical switcher; each host supplies its own theme source and navigation.
+ * The editor / processor items for the app-switch menu. Rendered inside the
+ * BrandSwitcher's logo dropdown, which both apps use as their switcher. The
+ * mark is the shared <BrandMark>, which recolours itself from the theme
+ * tokens, so no colour-scheme prop needs threading down here.
  */
-export function AppSwitch({
+export function AppSwitchMenuItems({
   current,
-  theme,
   onSwitch,
-  className,
-}: AppSwitchProps) {
+}: AppSwitchMenuItemsProps) {
   const { t } = useTranslation();
-  const mark = theme === "dark" ? markDark : markLight;
   const apps: Array<{ id: AppSwitchTarget; label: string }> = [
     {
       id: "processor",
@@ -55,28 +30,17 @@ export function AppSwitch({
     { id: "editor", label: t("portal.shell.sidebar.appEditor", "Editor") },
   ];
   return (
-    <Dropdown.Root align="end" className={className}>
-      <Dropdown.Trigger>
-        <Button
-          variant="tertiary"
-          className="app-switch-btn"
-          aria-label={t("portal.shell.sidebar.switchApp", "Switch app")}
+    <>
+      {apps.map((app) => (
+        <Dropdown.Item
+          key={app.id}
+          active={current === app.id}
+          onSelect={app.id === current ? undefined : () => onSwitch(app.id)}
+          leading={<BrandMark height="1.125rem" />}
         >
-          <ChevronDownIcon />
-        </Button>
-      </Dropdown.Trigger>
-      <Dropdown.Menu width="11rem">
-        {apps.map((app) => (
-          <Dropdown.Item
-            key={app.id}
-            active={current === app.id}
-            onSelect={app.id === current ? undefined : () => onSwitch(app.id)}
-            leading={<img className="app-switch-icon" src={mark} alt="" />}
-          >
-            {app.label}
-          </Dropdown.Item>
-        ))}
-      </Dropdown.Menu>
-    </Dropdown.Root>
+          {app.label}
+        </Dropdown.Item>
+      ))}
+    </>
   );
 }
diff --git a/frontend/editor/src/core/components/shared/AppSwitcher.tsx b/frontend/editor/src/core/components/shared/AppSwitcher.tsx
index 298a46e1ac..aaf55148ef 100644
--- a/frontend/editor/src/core/components/shared/AppSwitcher.tsx
+++ b/frontend/editor/src/core/components/shared/AppSwitcher.tsx
@@ -1,8 +1,22 @@
+import { Logo } from "@app/ui/Logo";
+
+export interface AppSwitcherProps {
+  /** Icon-only brand mark for the collapsed rail. */
+  collapsed?: boolean;
+}
+
 /**
- * Core stub for the sidebar app switcher. Builds that bundle the admin portal
- * (proprietary/saas) shadow this with a real switcher; core has no portal, so
- * there is nothing to switch to.
+ * Sidebar brand header. Core has no admin portal to switch to, so it just
+ * shows the Stirling logo. Builds that bundle the portal (proprietary/saas)
+ * shadow this with a version whose logo doubles as the editor⇄processor
+ * switcher.
  */
-export function AppSwitcher() {
-  return null;
+export function AppSwitcher({ collapsed }: AppSwitcherProps) {
+  return (
+    <Logo
+      variant={collapsed ? "iconOnly" : "iconAndText"}
+      iconHeight="1.6rem"
+      textHeight="1.3rem"
+    />
+  );
 }
diff --git a/frontend/editor/src/core/components/shared/BrandMark.css b/frontend/editor/src/core/components/shared/BrandMark.css
new file mode 100644
index 0000000000..7ddff9b4c7
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/BrandMark.css
@@ -0,0 +1,56 @@
+/* Morphing Stirling mark. At rest: the two-tone red brand parallelograms
+   (from the `d` attributes in the markup). When an ancestor marked
+   [data-brandmark-morph] is hovered / focused / open, each parallelogram is
+   transformed into one arm of a smaller, symmetric downward chevron in the
+   primary text colour.
+
+   The morph uses a CSS `transform` (not the `d` property) so it works in every
+   browser: both the logo shape and its target chevron arm are parallelograms,
+   and an affine matrix maps one exactly onto the other. The matrices below were
+   solved to send each path's 4 corners onto the chevron-arm corners:
+     arm A (left):  M13 27 L35.5 41 L35.5 53 L13 39 Z
+     arm B (right): M35.5 41 L58 27 L58 39 L35.5 53 Z
+   (mirror images — equal area + dimensions). */
+.sui-brandmark {
+  display: block;
+  width: auto;
+  overflow: visible;
+}
+
+.sui-brandmark__a,
+.sui-brandmark__b {
+  transform-box: view-box;
+  transform-origin: 0 0;
+  transition:
+    transform var(--motion-slow),
+    fill var(--motion-slow);
+}
+
+/* Rest state — brand mark. */
+.sui-brandmark__a {
+  fill: var(--c-brand-mark-soft);
+}
+.sui-brandmark__b {
+  fill: var(--c-brand-mark);
+}
+
+/* Morphed state — the two chevron arms, both in the primary text colour. */
+[data-brandmark-morph]:hover .sui-brandmark__a,
+[data-brandmark-morph]:focus-visible .sui-brandmark__a,
+[data-brandmark-morph].is-open .sui-brandmark__a {
+  fill: var(--c-text);
+  transform: matrix(0.483871, 0.584583, 0, 0.338028, 13, 13.8169);
+}
+[data-brandmark-morph]:hover .sui-brandmark__b,
+[data-brandmark-morph]:focus-visible .sui-brandmark__b,
+[data-brandmark-morph].is-open .sui-brandmark__b {
+  fill: var(--c-text);
+  transform: matrix(0.483871, -0.017568, 0, 0.338028, 23.887097, 26.886428);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .sui-brandmark__a,
+  .sui-brandmark__b {
+    transition: none;
+  }
+}
diff --git a/frontend/editor/src/core/components/shared/BrandMark.tsx b/frontend/editor/src/core/components/shared/BrandMark.tsx
new file mode 100644
index 0000000000..f140eddf7f
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/BrandMark.tsx
@@ -0,0 +1,36 @@
+import "@app/components/shared/BrandMark.css";
+
+interface BrandMarkProps {
+  /** Height of the mark (CSS length). */
+  height?: string;
+  className?: string;
+}
+
+/**
+ * The Stirling logo mark as inline SVG so it can morph. At rest it is the
+ * two-tone red brand mark; when an ancestor marked `[data-brandmark-morph]` is
+ * hovered / focused / open (`.is-open`), the two parallelograms slide into a
+ * smaller downward chevron in the primary text colour — a self-explaining
+ * "this opens a menu" affordance. See BrandMark.css for the morph geometry.
+ */
+export function BrandMark({ height = "1.6rem", className }: BrandMarkProps) {
+  return (
+    <svg
+      className={`sui-brandmark${className ? ` ${className}` : ""}`}
+      viewBox="0 0 71 79"
+      style={{ height }}
+      role="img"
+      aria-label="Stirling"
+      xmlns="http://www.w3.org/2000/svg"
+    >
+      <path
+        className="sui-brandmark__a"
+        d="M0 39 L46.5 0 L46.5 35.5 L0 74.5 Z"
+      />
+      <path
+        className="sui-brandmark__b"
+        d="M24 43 L70.5 4 L70.5 39.5 L24 78.5 Z"
+      />
+    </svg>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/BrandSwitcher.css b/frontend/editor/src/core/components/shared/BrandSwitcher.css
new file mode 100644
index 0000000000..dc1659ea15
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/BrandSwitcher.css
@@ -0,0 +1,15 @@
+/* Logo + app-switch dropdown, shared between the editor and the processor.
+   The logo itself is the trigger (its mark morphs into a chevron on hover). */
+.sui-brand-switcher {
+  display: flex;
+  align-items: center;
+  flex: 1;
+  min-width: 0;
+}
+
+/* Tighten the ghost-button padding so the lockup sits flush like a plain logo,
+   and negative-margin it back so the hover surface still extends past the text. */
+.sui-brand-switcher__trigger.sui-btn {
+  --button-padding-x: 0.375rem;
+  margin-inline: -0.375rem;
+}
diff --git a/frontend/editor/src/core/components/shared/BrandSwitcher.stories.tsx b/frontend/editor/src/core/components/shared/BrandSwitcher.stories.tsx
new file mode 100644
index 0000000000..92deb518b2
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/BrandSwitcher.stories.tsx
@@ -0,0 +1,16 @@
+import type { Meta, StoryObj } from "@storybook/react";
+import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
+
+const meta: Meta<typeof BrandSwitcher> = {
+  title: "Brand/BrandSwitcher",
+  component: BrandSwitcher,
+  parameters: { layout: "centered" },
+  args: { current: "processor", onSwitch: () => {} },
+  argTypes: {
+    current: { control: "inline-radio", options: ["editor", "processor"] },
+  },
+};
+export default meta;
+type Story = StoryObj<typeof BrandSwitcher>;
+
+export const Playground: Story = {};
diff --git a/frontend/editor/src/core/components/shared/BrandSwitcher.tsx b/frontend/editor/src/core/components/shared/BrandSwitcher.tsx
new file mode 100644
index 0000000000..474173fee2
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/BrandSwitcher.tsx
@@ -0,0 +1,57 @@
+import { useState } from "react";
+import { useTranslation } from "react-i18next";
+import { Button, Dropdown } from "@app/ui";
+import { Logo } from "@app/ui/Logo";
+import { BrandMark } from "@app/components/shared/BrandMark";
+import {
+  AppSwitchMenuItems,
+  type AppSwitchTarget,
+} from "@app/components/shared/AppSwitch";
+import "@app/components/shared/BrandSwitcher.css";
+
+interface BrandSwitcherProps {
+  /** The app this is rendered in (shown active in the menu). */
+  current: AppSwitchTarget;
+  /** Called with the selected app (only for the non-current one). */
+  onSwitch: (app: AppSwitchTarget) => void;
+  /** Icon-only: drop the wordmark, keep the morphing mark as the trigger. */
+  collapsed?: boolean;
+  className?: string;
+}
+
+/**
+ * Brand lockup that doubles as the editor⇄processor switcher. The whole logo
+ * is the dropdown trigger: on hover / focus / open the mark morphs into a
+ * downward chevron (see BrandMark), so no separate chevron button is needed.
+ * Shared so the editor and the processor present one identical header.
+ */
+export function BrandSwitcher({
+  current,
+  onSwitch,
+  collapsed = false,
+  className,
+}: BrandSwitcherProps) {
+  const { t } = useTranslation();
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className={`sui-brand-switcher${className ? ` ${className}` : ""}`}>
+      <Dropdown.Root align="start" open={open} onOpenChange={setOpen}>
+        <Dropdown.Trigger>
+          <Button
+            variant="quiet"
+            data-brandmark-morph
+            className={`sui-brand-switcher__trigger${open ? " is-open" : ""}`}
+            aria-label={t("portal.shell.sidebar.switchApp", "Switch app")}
+            leftSection={<BrandMark height="1.6rem" />}
+          >
+            {!collapsed && <Logo variant="textOnly" textHeight="1.3rem" />}
+          </Button>
+        </Dropdown.Trigger>
+        <Dropdown.Menu width="11rem">
+          <AppSwitchMenuItems current={current} onSwitch={onSwitch} />
+        </Dropdown.Menu>
+      </Dropdown.Root>
+    </div>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/FileSidebar.css b/frontend/editor/src/core/components/shared/FileSidebar.css
index 7dce3d32b9..e2393114df 100644
--- a/frontend/editor/src/core/components/shared/FileSidebar.css
+++ b/frontend/editor/src/core/components/shared/FileSidebar.css
@@ -1,17 +1,32 @@
 /* ========== FILE SIDEBAR ========== */
 
 .file-sidebar {
-  background-color: var(--c-bg-raised);
-  border-right: 1px solid var(--c-border-subtle);
+  background-color: var(--c-bg);
   display: flex;
   flex-direction: column;
   height: 100%;
   position: relative;
-  z-index: 10;
-  /* Animating width + min-width + max-width together can leave the flex layout
-     stuck on the pre-animation size in some browsers. Snap instead and rely
-     on the inner content fade for visual smoothness. */
+  /* Above the workbench column (also z-10, but later in the DOM, so it would
+     otherwise paint over us). The brand switcher's menu is wider than the
+     collapsed rail and has to spill across that boundary intact. */
+  z-index: var(--z-dropdown);
   flex-shrink: 0;
+  /* Slide the rail between collapsed/expanded. The delayed content-fade
+     (sidebar-content-in, 0.18s) is timed against this 0.22s so labels resolve
+     only after the width has settled — no squashed text mid-animation. */
+  transition:
+    width var(--motion-spring),
+    min-width var(--motion-spring),
+    max-width var(--motion-spring);
+  /* Gap around the floating boxes. */
+  padding: var(--nav-gutter);
+  gap: var(--nav-gutter);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .file-sidebar {
+    transition: none;
+  }
 }
 
 .file-sidebar-inner {
@@ -19,8 +34,74 @@
   flex-direction: column;
   flex: 1;
   min-height: 0;
+  gap: 0.5rem;
+}
+
+/* ---- Brand header (logo / editor⇄processor switcher) ---- */
+.file-sidebar-brand {
+  display: flex;
+  align-items: center;
+  min-height: 40px;
+  padding: 0 0.375rem;
+  flex-shrink: 0;
+}
+
+.file-sidebar-collapse-toggle {
+  margin-left: auto;
+  flex-shrink: 0;
+}
+
+.file-sidebar[data-collapsed="true"] .file-sidebar-brand {
+  flex-direction: column;
+  gap: 0.25rem;
+  padding: 0;
+}
+.file-sidebar[data-collapsed="true"] .file-sidebar-collapse-toggle {
+  margin-left: 0;
+}
+
+/* ---- Three floating nav-surface boxes (controls / files / footer) ---- */
+/* Horizontal padding is 0 so row highlights bleed to the surface edges; each
+   row's own inner padding keeps its text/icon indented. */
+.file-sidebar-controls {
+  padding: 0.25rem 0;
+  flex-shrink: 0;
+}
+.file-sidebar-files-box {
+  flex: 1;
+  min-height: 0;
+  display: flex;
+  flex-direction: column;
+  padding: 0.25rem 0;
   overflow: hidden;
 }
+.file-sidebar-footer-box {
+  padding: 0.25rem 0;
+  flex-shrink: 0;
+}
+
+/* Collapsed rail: the file tree isn't rendered, so hide its (empty) box and
+   let the boxes stack at the top — controls, then the settings footer right
+   after — instead of the files box stretching to fill. */
+.file-sidebar[data-collapsed="true"] .file-sidebar-controls,
+.file-sidebar[data-collapsed="true"] .file-sidebar-footer-box {
+  padding: 0.25rem;
+}
+.file-sidebar[data-collapsed="true"] .file-sidebar-files-box {
+  display: none;
+}
+.file-sidebar[data-collapsed="true"] .file-sidebar-inner {
+  flex: 0 0 auto;
+}
+/* Centre each row's icon in the narrow rail (no side padding/margin to shove
+   it off the edge). */
+.file-sidebar[data-collapsed="true"] .file-sidebar-search-row,
+.file-sidebar[data-collapsed="true"] .file-sidebar-action-row,
+.file-sidebar[data-collapsed="true"] .file-sidebar-cloud-row {
+  justify-content: center;
+  padding-inline: 0;
+  margin: 0;
+}
 
 /* ---- Native file drag-and-drop ---- */
 .file-sidebar[data-file-drag-over] {
@@ -58,72 +139,16 @@
   color: var(--mantine-color-blue-6, var(--c-primary));
 }
 
-/* ---- Header ---- */
-.file-sidebar-header {
-  display: flex;
-  align-items: center;
-  height: 48px;
-  padding: 0 14px;
-  gap: 10px;
-  cursor: pointer;
-  border-radius: 4px;
-  margin: 4px 4px 0 4px;
-  flex-shrink: 0;
-  transition: background-color 0.15s ease;
-}
-
-/* Icons stay left-aligned during animation; overflow:hidden on inner clips text naturally */
-
-.file-sidebar-header:hover {
-  background-color: var(--c-hover);
-}
-
-.file-sidebar-menu-icon {
-  color: var(--c-text-subtle) !important;
-  font-size: 18px !important;
-  flex-shrink: 0;
-}
-
-/* Inherits font-size so swap-in icons render at 18px like the original. */
-.file-sidebar-menu-icon > svg {
-  font-size: inherit;
-  width: 1em;
-  height: 1em;
-}
-
-/* Flip directional toggle icons in RTL (skipped for the symmetric burger). */
-[dir="rtl"] .file-sidebar-menu-icon[data-toggle-flip-rtl="true"] > svg {
-  transform: scaleX(-1);
-}
-
-.file-sidebar-brand-text {
-  height: 22px;
-  width: auto;
-  flex-shrink: 0;
-}
-
-/* App switcher (portal builds only) sits at the far end of the header row.
-   The content-fade animation makes this span a stacking context, which would
-   trap the menu's z-index below later sidebar rows — elevate the span so the
-   open menu paints above them. */
-.file-sidebar-app-switch {
-  margin-inline-start: auto;
-  display: flex;
-  align-items: center;
-  position: relative;
-  z-index: var(--z-dropdown);
-}
-
 /* ---- Search row ---- */
 .file-sidebar-search-row {
   display: flex;
   align-items: center;
   min-height: 32px;
-  padding: 0 14px;
+  padding: 0 8px;
   gap: 0;
   cursor: pointer;
   border-radius: 4px;
-  margin: 0 4px;
+  margin: 0;
   flex-shrink: 0;
   transition: background-color 0.15s ease;
 }
@@ -160,7 +185,7 @@
 .file-sidebar-search-label {
   margin-left: 12px;
   font-size: 14px;
-  color: var(--c-text-muted);
+  color: var(--c-text);
 }
 
 /* ---- Scrollable content ---- */
@@ -170,7 +195,8 @@
   min-height: 0;
   display: flex;
   flex-direction: column;
-  overflow: hidden;
+  overflow-y: auto;
+  overflow-x: hidden;
 }
 
 .file-sidebar-scroll::-webkit-scrollbar {
@@ -189,10 +215,10 @@
   display: flex;
   align-items: center;
   height: 32px;
-  padding: 0 14px;
+  padding: 0 8px;
   cursor: pointer;
   border-radius: 4px;
-  margin: 0 4px;
+  margin: 0;
   gap: 0;
   transition: background-color 0.15s ease;
   flex-shrink: 0;
@@ -234,7 +260,7 @@
 .file-sidebar-action-label {
   margin-left: 12px;
   font-size: 14px;
-  color: var(--c-text-muted);
+  color: var(--c-text);
   white-space: nowrap;
 }
 
@@ -243,10 +269,10 @@
   display: flex;
   align-items: center;
   height: 32px;
-  padding: 0 14px;
+  padding: 0 8px;
   cursor: pointer;
   border-radius: 4px;
-  margin: 0 4px;
+  margin: 0;
   gap: 0;
   transition: background-color 0.15s ease;
   flex-shrink: 0;
@@ -452,18 +478,16 @@
   align-items: center;
   justify-content: space-between;
   gap: 8px;
-  padding: 10px 14px 6px 14px;
-  margin: 4px 0 0 0;
-  border-top: 1px solid var(--c-border-subtle);
+  padding: 0 6px 2px 6px;
+  margin: 0;
   flex-shrink: 0;
 }
 
 .file-sidebar-section-label {
-  font-size: 13px;
+  font-size: 0.875rem;
   font-weight: 600;
-  letter-spacing: 0.02em;
-  color: var(--c-text-subtle);
-  text-transform: uppercase;
+  letter-spacing: -0.01em;
+  color: var(--c-text);
 }
 
 /* Slim "Adding files… X/Y" progress row shown during a bulk drop's pre-scan,
@@ -570,10 +594,9 @@
   display: flex;
   align-items: center;
   gap: 8px;
-  padding: 8px 10px;
-  border-top: 1px solid var(--c-border-subtle);
+  padding: 4px 6px;
   flex-shrink: 0;
-  min-height: 48px;
+  min-height: 40px;
 }
 
 /* Bottom bar settings icon tracks the right edge during collapse animation */
diff --git a/frontend/editor/src/core/components/shared/FileSidebar.tsx b/frontend/editor/src/core/components/shared/FileSidebar.tsx
index 501c5385d1..7d09261226 100644
--- a/frontend/editor/src/core/components/shared/FileSidebar.tsx
+++ b/frontend/editor/src/core/components/shared/FileSidebar.tsx
@@ -8,6 +8,7 @@ import React, {
 } from "react";
 import { Loader, Tooltip } from "@mantine/core";
 import { ActionIcon } from "@app/ui/ActionIcon";
+import { NavSurface } from "@app/ui/NavSurface";
 import { Button } from "@app/ui/Button";
 import { useTranslation } from "react-i18next";
 import { useNavigate } from "react-router-dom";
@@ -29,10 +30,9 @@ import {
 } from "@app/contexts/IndexedDBContext";
 import { accountService } from "@app/services/accountService";
 import { GoogleDriveIcon } from "@app/components/shared/CloudStorageIcons";
-import { Wordmark } from "@app/components/shared/Wordmark";
 import { AppSwitcher } from "@app/components/shared/AppSwitcher";
+import { SidebarToggleIcon } from "@app/components/shared/SidebarToggleIcon";
 import type { StirlingFileStub } from "@app/types/fileContext";
-import MenuIcon from "@mui/icons-material/Menu";
 import SearchIcon from "@mui/icons-material/Search";
 import FolderOpenIcon from "@mui/icons-material/FolderOpen";
 import FolderSpecialIcon from "@mui/icons-material/FolderSpecial";
@@ -152,12 +152,12 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
       collapsed = false,
       onToggleCollapse,
       onOpenSettings,
-      toggleAriaLabel,
-      toggleIcon,
       onUploadFiles,
       onPickGoogleDriveFiles,
       onSearchClick,
       extraAction,
+      toggleAriaLabel,
+      toggleIcon,
     },
     ref,
   ) {
@@ -833,110 +833,78 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
           </div>
         )}
         <div className="file-sidebar-inner">
-          {/* Header: hamburger + branding */}
-          <Tooltip
-            label={toggleAriaLabel ?? t("fileSidebar.expand", "Expand sidebar")}
-            position="right"
-            withinPortal
-            disabled={!collapsed}
-          >
-            <div
-              className="file-sidebar-header"
-              onClick={() => onToggleCollapse?.()}
-              role="button"
-              tabIndex={0}
-              onKeyDown={(e) => {
-                if (e.key === "Enter" || e.key === " ") {
-                  e.preventDefault();
-                  onToggleCollapse?.();
+          <div className="file-sidebar-brand">
+            <AppSwitcher collapsed={collapsed} />
+            {onToggleCollapse && (
+              <ActionIcon
+                variant="tertiary"
+                size="md"
+                className="file-sidebar-collapse-toggle"
+                onClick={() => onToggleCollapse()}
+                aria-label={
+                  toggleAriaLabel ??
+                  (collapsed
+                    ? t("fileSidebar.expand", "Expand sidebar")
+                    : t("fileSidebar.collapse", "Collapse sidebar"))
                 }
-              }}
-              aria-label={
-                toggleAriaLabel ??
-                (collapsed
-                  ? t("fileSidebar.expand", "Expand sidebar")
-                  : t("fileSidebar.collapse", "Collapse sidebar"))
-              }
-            >
-              {/* Wrapper carries sizing; data-toggle-flip-rtl flips icon in RTL. */}
-              <span
-                className="file-sidebar-menu-icon"
-                data-toggle-flip-rtl={toggleIcon ? "true" : undefined}
               >
-                {toggleIcon ?? <MenuIcon />}
-              </span>
-              {!collapsed && (
-                <Wordmark
-                  alt="Stirling PDF"
-                  className="file-sidebar-brand-text sidebar-content-fade"
-                />
-              )}
-              {!collapsed && (
-                // The header row itself toggles collapse; stop the switcher's
-                // clicks and key presses from reaching it.
-                <span
-                  className="file-sidebar-app-switch sidebar-content-fade"
-                  onClick={(e) => e.stopPropagation()}
-                  onKeyDown={(e) => e.stopPropagation()}
-                >
-                  <AppSwitcher />
-                </span>
-              )}
-            </div>
-          </Tooltip>
+                {toggleIcon ?? <SidebarToggleIcon size={18} />}
+              </ActionIcon>
+            )}
+          </div>
 
-          {/* Search row */}
-          <Tooltip
-            label={t("fileSidebar.search", "Search")}
-            position="right"
-            withinPortal
-            disabled={!collapsed}
-          >
-            <div
-              className={`file-sidebar-search-row${searchActive && !collapsed ? " active" : ""}`}
-              onClick={!searchActive ? handleSearchClick : undefined}
-              role={!searchActive ? "button" : undefined}
-              tabIndex={!searchActive ? 0 : undefined}
-              onKeyDown={
-                !searchActive
-                  ? (e) => e.key === "Enter" && handleSearchClick()
-                  : undefined
-              }
+          {/* Box 1 — top controls (search + open / my files / cloud). No title. */}
+          <NavSurface className="file-sidebar-controls">
+            {/* Search row */}
+            <Tooltip
+              label={t("fileSidebar.search", "Search")}
+              position="right"
+              withinPortal
+              disabled={!collapsed}
             >
-              {searchActive && !collapsed ? (
-                <CloseIcon
-                  className="file-sidebar-search-icon"
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    handleSearchClose();
-                  }}
-                />
-              ) : (
-                <SearchIcon className="file-sidebar-search-icon" />
-              )}
-              {!collapsed &&
-                (searchActive ? (
-                  <input
-                    ref={searchInputRef}
-                    className="file-sidebar-search-input sidebar-content-fade"
-                    value={searchQuery}
-                    onChange={(e) => setSearchQuery(e.target.value)}
-                    placeholder={t(
-                      "fileSidebar.searchPlaceholder",
-                      "Search files...",
-                    )}
-                    onClick={(e) => e.stopPropagation()}
+              <div
+                className={`file-sidebar-search-row${searchActive && !collapsed ? " active" : ""}`}
+                onClick={!searchActive ? handleSearchClick : undefined}
+                role={!searchActive ? "button" : undefined}
+                tabIndex={!searchActive ? 0 : undefined}
+                onKeyDown={
+                  !searchActive
+                    ? (e) => e.key === "Enter" && handleSearchClick()
+                    : undefined
+                }
+              >
+                {searchActive && !collapsed ? (
+                  <CloseIcon
+                    className="file-sidebar-search-icon"
+                    onClick={(e) => {
+                      e.stopPropagation();
+                      handleSearchClose();
+                    }}
                   />
                 ) : (
-                  <span className="file-sidebar-search-label sidebar-content-fade">
-                    {t("fileSidebar.search", "Search")}
-                  </span>
-                ))}
-            </div>
-          </Tooltip>
+                  <SearchIcon className="file-sidebar-search-icon" />
+                )}
+                {!collapsed &&
+                  (searchActive ? (
+                    <input
+                      ref={searchInputRef}
+                      className="file-sidebar-search-input sidebar-content-fade"
+                      value={searchQuery}
+                      onChange={(e) => setSearchQuery(e.target.value)}
+                      placeholder={t(
+                        "fileSidebar.searchPlaceholder",
+                        "Search files...",
+                      )}
+                      onClick={(e) => e.stopPropagation()}
+                    />
+                  ) : (
+                    <span className="file-sidebar-search-label sidebar-content-fade">
+                      {t("fileSidebar.search", "Search")}
+                    </span>
+                  ))}
+              </div>
+            </Tooltip>
 
-          {/* Scrollable content */}
-          <div className="file-sidebar-scroll">
             {/* Hidden native file input - kept outside the !collapsed gate so
                 the "Open from computer" row below (always rendered) can fire
                 it in either sidebar state without a silent no-op. */}
@@ -1157,145 +1125,158 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
                 )}
               </div>
             )}
+          </NavSurface>
 
-            {/* Files section - always visible when expanded */}
-            {!collapsed && (
-              <div className="file-sidebar-files-section sidebar-content-fade">
-                <div className="file-sidebar-section-header">
-                  <span className="file-sidebar-section-label">
-                    {t("fileSidebar.files", "Files")}
-                  </span>
-                  <FileSidebarGroupControls stubs={filteredFileStubs} />
-                  <ActionIcon
-                    variant="quiet"
-                    className="file-sidebar-section-btn file-sidebar-section-btn-external"
-                    onClick={() => navigate("/files")}
-                    title={t(
-                      "fileSidebar.openFileManager",
-                      "Browse all files & folders",
-                    )}
-                    aria-label={t(
-                      "fileSidebar.openFileManager",
-                      "Browse all files & folders",
-                    )}
-                    data-testid="open-files-page"
-                  >
-                    <OpenInNewIcon sx={{ fontSize: "1rem" }} />
-                  </ActionIcon>
-                  <ActionIcon
-                    variant="quiet"
-                    className="file-sidebar-section-btn file-sidebar-section-btn-add"
-                    onClick={() => nativeFileInputRef.current?.click()}
-                    title={t("fileSidebar.addFiles", "Add files")}
-                    aria-label={t("fileSidebar.addFiles", "Add files")}
-                  >
-                    <AddIcon sx={{ fontSize: "1rem" }} />
-                  </ActionIcon>
-                </div>
-
-                <BulkAddProgressRow />
-
-                {!stubsLoaded ? (
-                  <div className="file-sidebar-loading">
-                    <Loader size="sm" color="var(--c-text-subtle)" />
+          {/* Box 2 — the file tree (this box scrolls). */}
+          <NavSurface className="file-sidebar-files-box">
+            <div className="file-sidebar-scroll">
+              {/* Files section - always visible when expanded */}
+              {!collapsed && (
+                <div className="file-sidebar-files-section sidebar-content-fade">
+                  <div className="file-sidebar-section-header">
+                    <span className="file-sidebar-section-label">
+                      {t("fileSidebar.library", "PDF Library")}
+                    </span>
+                    <FileSidebarGroupControls stubs={filteredFileStubs} />
+                    <ActionIcon
+                      variant="quiet"
+                      className="file-sidebar-section-btn file-sidebar-section-btn-external"
+                      onClick={() => navigate("/files")}
+                      title={t(
+                        "fileSidebar.openFileManager",
+                        "Browse all files & folders",
+                      )}
+                      aria-label={t(
+                        "fileSidebar.openFileManager",
+                        "Browse all files & folders",
+                      )}
+                      data-testid="open-files-page"
+                    >
+                      <OpenInNewIcon sx={{ fontSize: "1rem" }} />
+                    </ActionIcon>
+                    <ActionIcon
+                      variant="quiet"
+                      className="file-sidebar-section-btn file-sidebar-section-btn-add"
+                      onClick={() => nativeFileInputRef.current?.click()}
+                      title={t("fileSidebar.addFiles", "Add files")}
+                      aria-label={t("fileSidebar.addFiles", "Add files")}
+                    >
+                      <AddIcon sx={{ fontSize: "1rem" }} />
+                    </ActionIcon>
                   </div>
-                ) : filteredFileStubs.length > 0 ? (
-                  <div className="file-sidebar-file-list">
-                    {fileGroups ? (
-                      <>
-                        {fileGroups.map((group) => {
-                          const isOpen =
-                            groupOpen[group.id] ?? group.defaultExpanded;
-                          return (
-                            <div className="file-sidebar-group" key={group.id}>
-                              <Button
-                                variant="quiet"
-                                fullWidth
-                                justify="between"
-                                className="file-sidebar-group-header"
-                                onClick={() =>
-                                  setGroupOpenState(group.id, !isOpen)
-                                }
-                                aria-expanded={isOpen}
-                                leftSection={
-                                  <>
-                                    {isOpen ? (
-                                      <KeyboardArrowDownIcon
-                                        sx={{ fontSize: "1.1rem" }}
-                                      />
-                                    ) : (
-                                      <KeyboardArrowRightIcon
-                                        sx={{ fontSize: "1.1rem" }}
-                                      />
-                                    )}
-                                    {group.icon && (
-                                      <LocalIcon
-                                        icon={group.icon}
-                                        width="1.05rem"
-                                        className="file-sidebar-group-icon"
-                                        style={
-                                          group.color
-                                            ? { color: group.color }
-                                            : undefined
-                                        }
-                                      />
-                                    )}
-                                  </>
-                                }
-                                rightSection={
-                                  <span className="file-sidebar-group-count">
-                                    {group.stubs.length}
-                                  </span>
-                                }
-                              >
-                                <span className="file-sidebar-group-label">
-                                  {group.label}
-                                </span>
-                              </Button>
-                              <div className="file-sidebar-group-items">
-                                {isOpen && group.stubs.map(renderFileRow)}
-                              </div>
-                            </div>
-                          );
-                        })}
-                        <Button
-                          variant="quiet"
-                          fullWidth
-                          justify="between"
-                          className="file-sidebar-view-all"
-                          onClick={() => navigate("/files")}
-                          rightSection={
-                            <KeyboardArrowRightIcon sx={{ fontSize: "1rem" }} />
-                          }
-                        >
-                          {t(
-                            "fileSidebar.viewAll",
-                            "View all {{count}} files",
-                            {
-                              count: filteredFileStubs.length,
-                            },
-                          )}
-                        </Button>
-                      </>
-                    ) : (
-                      filteredFileStubs.map(renderFileRow)
-                    )}
-                  </div>
-                ) : (
-                  !searchActive && (
-                    <div className="file-sidebar-empty">
-                      <p className="file-sidebar-empty-text">
-                        {t("fileSidebar.noFiles", "No files yet")}
-                      </p>
-                      <p className="file-sidebar-empty-hint">
-                        {t("fileSidebar.dropHint", "Open files to get started")}
-                      </p>
+
+                  <BulkAddProgressRow />
+
+                  {!stubsLoaded ? (
+                    <div className="file-sidebar-loading">
+                      <Loader size="sm" color="var(--c-text-subtle)" />
                     </div>
-                  )
-                )}
-              </div>
-            )}
-          </div>
+                  ) : filteredFileStubs.length > 0 ? (
+                    <div className="file-sidebar-file-list">
+                      {fileGroups ? (
+                        <>
+                          {fileGroups.map((group) => {
+                            const isOpen =
+                              groupOpen[group.id] ?? group.defaultExpanded;
+                            return (
+                              <div
+                                className="file-sidebar-group"
+                                key={group.id}
+                              >
+                                <Button
+                                  variant="quiet"
+                                  fullWidth
+                                  justify="between"
+                                  className="file-sidebar-group-header"
+                                  onClick={() =>
+                                    setGroupOpenState(group.id, !isOpen)
+                                  }
+                                  aria-expanded={isOpen}
+                                  leftSection={
+                                    <>
+                                      {isOpen ? (
+                                        <KeyboardArrowDownIcon
+                                          sx={{ fontSize: "1.1rem" }}
+                                        />
+                                      ) : (
+                                        <KeyboardArrowRightIcon
+                                          sx={{ fontSize: "1.1rem" }}
+                                        />
+                                      )}
+                                      {group.icon && (
+                                        <LocalIcon
+                                          icon={group.icon}
+                                          width="1.05rem"
+                                          className="file-sidebar-group-icon"
+                                          style={
+                                            group.color
+                                              ? { color: group.color }
+                                              : undefined
+                                          }
+                                        />
+                                      )}
+                                    </>
+                                  }
+                                  rightSection={
+                                    <span className="file-sidebar-group-count">
+                                      {group.stubs.length}
+                                    </span>
+                                  }
+                                >
+                                  <span className="file-sidebar-group-label">
+                                    {group.label}
+                                  </span>
+                                </Button>
+                                <div className="file-sidebar-group-items">
+                                  {isOpen && group.stubs.map(renderFileRow)}
+                                </div>
+                              </div>
+                            );
+                          })}
+                          <Button
+                            variant="quiet"
+                            fullWidth
+                            justify="between"
+                            className="file-sidebar-view-all"
+                            onClick={() => navigate("/files")}
+                            rightSection={
+                              <KeyboardArrowRightIcon
+                                sx={{ fontSize: "1rem" }}
+                              />
+                            }
+                          >
+                            {t(
+                              "fileSidebar.viewAll",
+                              "View all {{count}} files",
+                              {
+                                count: filteredFileStubs.length,
+                              },
+                            )}
+                          </Button>
+                        </>
+                      ) : (
+                        filteredFileStubs.map(renderFileRow)
+                      )}
+                    </div>
+                  ) : (
+                    !searchActive && (
+                      <div className="file-sidebar-empty">
+                        <p className="file-sidebar-empty-text">
+                          {t("fileSidebar.noFiles", "No files yet")}
+                        </p>
+                        <p className="file-sidebar-empty-hint">
+                          {t(
+                            "fileSidebar.dropHint",
+                            "Open files to get started",
+                          )}
+                        </p>
+                      </div>
+                    )
+                  )}
+                </div>
+              )}
+            </div>
+          </NavSurface>
         </div>
 
         {/* Kebab "Save to cloud" upload modal (one file at a time). */}
@@ -1325,65 +1306,70 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
         {/* Getting-started checklist, floating above the footer (SaaS only). */}
         <SidebarChecklistSlot collapsed={collapsed} />
 
-        {/* Bottom bar: user name + settings */}
-        <Tooltip
-          label={
-            onOpenSettings
-              ? `${displayName} - ${t("fileSidebar.openSettings", "Open settings")}`
-              : displayName
-          }
-          position="right"
-          withinPortal
-          disabled={!collapsed}
-        >
-          <div
-            className="file-sidebar-bottom-bar"
-            onClick={onOpenSettings}
-            role={onOpenSettings ? "button" : undefined}
-            tabIndex={onOpenSettings ? 0 : undefined}
-            onKeyDown={
+        {/* Box 3 — account footer (avatar + name + settings). */}
+        <NavSurface className="file-sidebar-footer-box">
+          {/* Bottom bar: user name + settings */}
+          <Tooltip
+            label={
               onOpenSettings
-                ? (e) => e.key === "Enter" && onOpenSettings()
-                : undefined
-            }
-            data-testid={onOpenSettings ? "config-button" : undefined}
-            data-tour={onOpenSettings ? "config-button" : undefined}
-            aria-label={
-              onOpenSettings
-                ? t("fileSidebar.openSettings", "Open settings")
+                ? `${displayName} - ${t("fileSidebar.openSettings", "Open settings")}`
                 : displayName
             }
-            style={onOpenSettings ? { cursor: "pointer" } : undefined}
+            position="right"
+            withinPortal
+            disabled={!collapsed}
           >
             <div
-              className={`file-sidebar-bottom-avatar${
-                showProfilePicture ? " file-sidebar-bottom-avatar--picture" : ""
-              }`}
-              aria-label={displayName}
+              className="file-sidebar-bottom-bar"
+              onClick={onOpenSettings}
+              role={onOpenSettings ? "button" : undefined}
+              tabIndex={onOpenSettings ? 0 : undefined}
+              onKeyDown={
+                onOpenSettings
+                  ? (e) => e.key === "Enter" && onOpenSettings()
+                  : undefined
+              }
+              data-testid={onOpenSettings ? "config-button" : undefined}
+              data-tour={onOpenSettings ? "config-button" : undefined}
+              aria-label={
+                onOpenSettings
+                  ? t("fileSidebar.openSettings", "Open settings")
+                  : displayName
+              }
+              style={onOpenSettings ? { cursor: "pointer" } : undefined}
             >
-              {showProfilePicture ? (
-                <img
-                  src={profilePictureUrl}
-                  alt=""
-                  className="file-sidebar-bottom-avatar-img"
-                  onError={() => setPictureFailed(true)}
-                />
-              ) : (
-                displayName.charAt(0).toUpperCase()
+              <div
+                className={`file-sidebar-bottom-avatar${
+                  showProfilePicture
+                    ? " file-sidebar-bottom-avatar--picture"
+                    : ""
+                }`}
+                aria-label={displayName}
+              >
+                {showProfilePicture ? (
+                  <img
+                    src={profilePictureUrl}
+                    alt=""
+                    className="file-sidebar-bottom-avatar-img"
+                    onError={() => setPictureFailed(true)}
+                  />
+                ) : (
+                  displayName.charAt(0).toUpperCase()
+                )}
+              </div>
+              {!collapsed && (
+                <span className="file-sidebar-bottom-name sidebar-content-fade">
+                  {displayName}
+                </span>
+              )}
+              {onOpenSettings && !collapsed && (
+                <div className="file-sidebar-bottom-settings">
+                  <SettingsIcon sx={{ fontSize: "1.1rem" }} />
+                </div>
               )}
             </div>
-            {!collapsed && (
-              <span className="file-sidebar-bottom-name sidebar-content-fade">
-                {displayName}
-              </span>
-            )}
-            {onOpenSettings && !collapsed && (
-              <div className="file-sidebar-bottom-settings">
-                <SettingsIcon sx={{ fontSize: "1.1rem" }} />
-              </div>
-            )}
-          </div>
-        </Tooltip>
+          </Tooltip>
+        </NavSurface>
       </div>
     );
   },
diff --git a/frontend/editor/src/core/components/shared/LandingActions.tsx b/frontend/editor/src/core/components/shared/LandingActions.tsx
index ec237b0394..d69f90a1ef 100644
--- a/frontend/editor/src/core/components/shared/LandingActions.tsx
+++ b/frontend/editor/src/core/components/shared/LandingActions.tsx
@@ -33,6 +33,7 @@ export function LandingActions({
       <Group gap="sm" justify="center" wrap="wrap" mb="xs">
         <Button
           className="landing-btn-primary"
+          px="xl"
           leftSection={
             <LocalIcon icon={icons.uploadIconName} width="1rem" height="1rem" />
           }
@@ -47,6 +48,7 @@ export function LandingActions({
         <Button
           variant="secondary"
           className="landing-btn-secondary"
+          px="xl"
           leftSection={<LocalIcon icon="add" width="1rem" height="1rem" />}
           onClick={(e) => {
             e.stopPropagation();
diff --git a/frontend/editor/src/core/components/shared/LandingPage.css b/frontend/editor/src/core/components/shared/LandingPage.css
index 57729a806a..b64a7d55f9 100644
--- a/frontend/editor/src/core/components/shared/LandingPage.css
+++ b/frontend/editor/src/core/components/shared/LandingPage.css
@@ -3,6 +3,32 @@
    All custom properties are defined in theme.css.
    ============================================================ */
 
+/* ── Entrance animation (editor empty state) ─────────────────
+   Logo fades/slides up first (0.2s), then the actions after it finishes
+   (0.2s delay + 0.2s) — 0.4s total. */
+@keyframes landing-fade-up {
+  from {
+    opacity: 0;
+    transform: translateY(0.75rem);
+  }
+  to {
+    opacity: 1;
+    transform: translateY(0);
+  }
+}
+.landing-logo-enter {
+  animation: landing-fade-up 0.2s ease-out both;
+}
+.landing-actions-enter {
+  animation: landing-fade-up 0.2s ease-out 0.2s both;
+}
+@media (prefers-reduced-motion: reduce) {
+  .landing-logo-enter,
+  .landing-actions-enter {
+    animation: none;
+  }
+}
+
 /* ── Hero text ───────────────────────────────────────────── */
 .landing-title {
   margin: 1.75rem 0 1.5rem;
@@ -110,31 +136,21 @@
 }
 
 /* ── Action buttons ──────────────────────────────────────── */
-.landing-btn-primary {
-  background: var(--landing-hero-gradient) !important;
-  color: var(--c-text-on-primary) !important;
-  border: none !important;
-  border-radius: 0.75rem !important;
-  font-weight: 600 !important;
-}
-
+.landing-btn-primary,
 .landing-btn-secondary {
   border-radius: 0.75rem !important;
   font-weight: 600 !important;
-  border-color: var(--landing-button-border, var(--c-border)) !important;
-  background-color: var(--landing-button-bg, var(--c-surface)) !important;
-  color: var(--c-accent-fg, var(--c-text)) !important;
-}
-.landing-btn-secondary:hover {
-  background-color: var(
-    --landing-button-hover-bg,
-    var(--landing-button-bg, var(--c-surface))
-  ) !important;
 }
 
-/* Icon-only variant: accent colour instead of button text colour */
+.landing-btn-primary,
+.landing-btn-secondary,
 .landing-btn-icon {
-  color: var(--c-primary) !important;
+  min-height: 3rem !important;
+}
+.landing-btn-icon {
+  width: 3rem !important;
+  min-width: 3rem !important;
+  border-radius: 0.75rem !important;
 }
 
 /* Dropzone accept/reject outlines. Mantine 8 no longer supports nested
diff --git a/frontend/editor/src/core/components/shared/LandingPage.tsx b/frontend/editor/src/core/components/shared/LandingPage.tsx
index cd3042fa7d..5363e596ce 100644
--- a/frontend/editor/src/core/components/shared/LandingPage.tsx
+++ b/frontend/editor/src/core/components/shared/LandingPage.tsx
@@ -1,17 +1,15 @@
 import React, { useState } from "react";
 import { Container } from "@mantine/core";
 import { Dropzone } from "@mantine/dropzone";
-import { useTranslation } from "react-i18next";
 import { useFileHandler } from "@app/hooks/useFileHandler";
 import { useFileActionTerminology } from "@app/hooks/useFileActionTerminology";
 import MobileUploadModal from "@app/components/shared/MobileUploadModal";
 import { openFilesFromDisk } from "@app/services/openFilesFromDisk";
-import { LandingDocumentStack } from "@app/components/shared/LandingDocumentStack";
+import { Logo } from "@app/ui/Logo";
 import { LandingActions } from "@app/components/shared/LandingActions";
 import "@app/components/shared/LandingPage.css";
 
 const LandingPage = () => {
-  const { t } = useTranslation();
   const { addFiles } = useFileHandler();
   const fileInputRef = React.useRef<HTMLInputElement | null>(null);
   const terminology = useFileActionTerminology();
@@ -77,17 +75,24 @@ const LandingPage = () => {
           },
         }}
       >
-        <LandingDocumentStack />
-
-        <h3 className="landing-title">
-          {t("landing.workbenchEmptyStateHero", "Drop a PDF anywhere")}
-        </h3>
-        <LandingActions
-          fileInputRef={fileInputRef}
-          onUploadClick={() => void handleNativeUploadClick()}
-          onMobileUploadClick={() => setMobileUploadModalOpen(true)}
-          onFileSelect={handleFileSelect}
+        <Logo
+          variant="iconAndText"
+          orientation="vertical"
+          iconHeight="5rem"
+          textHeight="2.5rem"
+          gap="1rem"
+          className="landing-logo-enter"
+          style={{ marginBottom: "2.5rem" }}
         />
+
+        <div className="landing-actions-enter">
+          <LandingActions
+            fileInputRef={fileInputRef}
+            onUploadClick={() => void handleNativeUploadClick()}
+            onMobileUploadClick={() => setMobileUploadModalOpen(true)}
+            onFileSelect={handleFileSelect}
+          />
+        </div>
       </Dropzone>
 
       <MobileUploadModal
diff --git a/frontend/editor/src/core/components/shared/SidebarToggleIcon.tsx b/frontend/editor/src/core/components/shared/SidebarToggleIcon.tsx
new file mode 100644
index 0000000000..5559cf2f76
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/SidebarToggleIcon.tsx
@@ -0,0 +1,39 @@
+interface SidebarToggleIconProps {
+  /** Square size in px. */
+  size?: number;
+  /** Put the divided-off rail on the right, for a right-hand panel. */
+  mirrored?: boolean;
+  className?: string;
+}
+
+/**
+ * "Toggle sidebar" glyph — a rounded panel with a divided-off left rail —
+ * shared by the editor FileSidebar and the processor Sidebar so their
+ * collapse/expand controls read identically. Inherits colour via currentColor.
+ */
+export function SidebarToggleIcon({
+  size = 18,
+  mirrored = false,
+  className,
+}: SidebarToggleIconProps) {
+  // Mirror by moving the divider, not by flipping the whole glyph, so the
+  // rounded corners and stroke widths stay identical between the two.
+  const dividerX = mirrored ? 14.5 : 9.5;
+  return (
+    <svg
+      width={size}
+      height={size}
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth={2}
+      strokeLinecap="round"
+      strokeLinejoin="round"
+      className={className}
+      aria-hidden="true"
+    >
+      <rect x="3" y="4" width="18" height="16" rx="2.5" />
+      <line x1={dividerX} y1="4" x2={dividerX} y2="20" />
+    </svg>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/WorkbenchBar.css b/frontend/editor/src/core/components/shared/WorkbenchBar.css
index bbaf784ac6..820a7cdf46 100644
--- a/frontend/editor/src/core/components/shared/WorkbenchBar.css
+++ b/frontend/editor/src/core/components/shared/WorkbenchBar.css
@@ -8,8 +8,13 @@
   align-content: flex-start;
   min-height: 40px;
   padding: 0 8px;
-  background-color: var(--c-bg-raised);
-  border-bottom: 1px solid var(--c-border-subtle);
+  /* No left margin: the file sidebar's own 0.5rem padding already provides the
+     gutter on that side, so adding one here would double it and leave the bar
+     further from the sidebar than it is from the tool panel. */
+  margin: var(--nav-gutter) var(--nav-gutter) 0 0;
+  background-color: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-nav);
   flex-shrink: 0;
   z-index: 50;
 }
diff --git a/frontend/editor/src/core/components/tools/RightSidebar.tsx b/frontend/editor/src/core/components/tools/RightSidebar.tsx
index 73ec5db69f..34c6ab5a51 100644
--- a/frontend/editor/src/core/components/tools/RightSidebar.tsx
+++ b/frontend/editor/src/core/components/tools/RightSidebar.tsx
@@ -15,9 +15,9 @@ import { ToolPanelHeader } from "@app/components/shared/ToolPanelHeader";
 import { Tooltip as AppTooltip } from "@app/components/shared/Tooltip";
 import { ActionIcon } from "@app/ui/ActionIcon";
 import { withViewTransition } from "@app/utils/viewTransition";
-import ChevronLeftIcon from "@mui/icons-material/ChevronLeft";
-import ChevronRightIcon from "@mui/icons-material/ChevronRight";
+import { SidebarToggleIcon } from "@app/components/shared/SidebarToggleIcon";
 import CloseIcon from "@mui/icons-material/Close";
+import SearchIcon from "@mui/icons-material/Search";
 import { ToolId } from "@app/types/toolId";
 import type { ToolRegistryEntry } from "@app/data/toolsTaxonomy";
 import {
@@ -79,6 +79,7 @@ export default function RightSidebar() {
   };
 
   const [allToolsView, setAllToolsView] = useState(false);
+  const [headerSearchOpen, setHeaderSearchOpen] = useState(false);
 
   const handleShowAllTools = () => {
     withViewTransition(() => setAllToolsView(true));
@@ -96,7 +97,7 @@ export default function RightSidebar() {
   const inToolView = leftPanelView !== "toolPicker";
   // Show X (close) button only when there's somewhere to go back to.
   const showCloseButton = inToolView || allToolsView;
-  const showHeaderSearch = showCloseButton || leftPanelView === "toolPicker";
+  const showHeaderSearch = showCloseButton || headerSearchOpen;
 
   const handleHeaderBack = () => {
     if (inToolView) {
@@ -168,7 +169,7 @@ export default function RightSidebar() {
       ref={toolPanelRef}
       data-sidebar="tool-panel"
       data-tour={fullscreenExpanded ? undefined : "tool-panel"}
-      className={`tool-panel flex flex-col ${fullscreenExpanded ? "tool-panel--fullscreen-active" : "overflow-hidden"} bg-[var(--c-bg-raised)] border-l border-[var(--c-border-subtle)] transition-all duration-300 ease-out ${isMobile ? "h-full border-r-0" : "h-screen"} ${fullscreenExpanded ? "tool-panel--fullscreen" : ""}`}
+      className={`tool-panel flex flex-col ${fullscreenExpanded ? "tool-panel--fullscreen-active" : "overflow-hidden"} ${isMobile || fullscreenExpanded ? "border-l border-[var(--c-border-subtle)]" : "tool-panel--floating"} transition-all duration-300 ease-out ${isMobile ? "h-full border-r-0" : fullscreenExpanded ? "h-screen" : ""} ${fullscreenExpanded ? "tool-panel--fullscreen" : ""}`}
       style={{
         width: computedWidth(),
         padding: "0",
@@ -188,7 +189,7 @@ export default function RightSidebar() {
               className="tool-panel__expand-btn tool-panel__toggle-vt"
               onClick={handleExpand}
             >
-              <ChevronLeftIcon sx={{ fontSize: "1.1rem" }} />
+              <SidebarToggleIcon size={18} mirrored />
             </ActionIcon>
           </div>
           <div className="tool-panel__collapsed-divider" />
@@ -263,37 +264,62 @@ export default function RightSidebar() {
                       onChange={handleHeaderSearchChange}
                       toolRegistry={toolRegistry}
                       mode="filter"
-                      autoFocus={allToolsView && !inToolView}
+                      autoFocus
                     />
                   </div>
-                ) : null}
-                {showCloseButton ? (
-                  <ActionIcon
-                    variant="tertiary"
-                    size="md"
-                    shape="circle"
-                    onClick={handleHeaderBack}
-                    aria-label={
-                      inToolView
-                        ? t("toolPanel.backToAllTools", "Back to all tools")
-                        : t("toolPanel.goBack", "Go back")
-                    }
-                    className="tool-panel__expand-btn"
-                  >
-                    <CloseIcon sx={{ fontSize: "1.1rem" }} />
-                  </ActionIcon>
                 ) : (
-                  <ActionIcon
-                    variant="secondary"
-                    size="md"
-                    shape="circle"
-                    onClick={handleCollapse}
-                    aria-label={t("toolPanel.collapse", "Collapse panel")}
-                    className="tool-panel__expand-btn tool-panel__toggle-vt"
-                  >
-                    <ChevronRightIcon sx={{ fontSize: "1.1rem" }} />
-                  </ActionIcon>
+                  <span className="tool-panel__compact-title">
+                    {t("toolPanel.pdfTools", "PDF Tools")}
+                  </span>
                 )}
+                <div className="tool-panel__compact-header-actions">
+                  {!showCloseButton && (
+                    <ActionIcon
+                      variant="tertiary"
+                      size="md"
+                      shape="circle"
+                      onClick={() => {
+                        if (headerSearchOpen) handleHeaderSearchChange("");
+                        setHeaderSearchOpen((open) => !open);
+                      }}
+                      aria-label={t("toolPanel.searchTools", "Search tools")}
+                      className="tool-panel__expand-btn"
+                    >
+                      {headerSearchOpen ? (
+                        <CloseIcon sx={{ fontSize: "1.1rem" }} />
+                      ) : (
+                        <SearchIcon sx={{ fontSize: "1.1rem" }} />
+                      )}
+                    </ActionIcon>
+                  )}
+                  {showCloseButton ? (
+                    <ActionIcon
+                      variant="tertiary"
+                      size="md"
+                      shape="circle"
+                      onClick={handleHeaderBack}
+                      aria-label={
+                        inToolView
+                          ? t("toolPanel.backToAllTools", "Back to all tools")
+                          : t("toolPanel.goBack", "Go back")
+                      }
+                      className="tool-panel__expand-btn"
+                    >
+                      <CloseIcon sx={{ fontSize: "1.1rem" }} />
+                    </ActionIcon>
+                  ) : (
+                    <ActionIcon
+                      variant="secondary"
+                      size="md"
+                      shape="circle"
+                      onClick={handleCollapse}
+                      aria-label={t("toolPanel.collapse", "Collapse panel")}
+                      className="tool-panel__expand-btn tool-panel__toggle-vt"
+                    >
+                      <SidebarToggleIcon size={18} mirrored />
+                    </ActionIcon>
+                  )}
+                </div>
               </div>
             )}
 
diff --git a/frontend/editor/src/core/components/tools/ToolPanel.css b/frontend/editor/src/core/components/tools/ToolPanel.css
index 5ba31e5b86..41100bbf9f 100644
--- a/frontend/editor/src/core/components/tools/ToolPanel.css
+++ b/frontend/editor/src/core/components/tools/ToolPanel.css
@@ -11,6 +11,7 @@
 
 .tool-panel {
   position: relative;
+  background: var(--c-surface);
   transition:
     width 0.3s ease,
     max-width 0.3s ease;
@@ -18,6 +19,14 @@
   user-select: none;
 }
 
+.tool-panel--floating {
+  margin: var(--nav-gutter) var(--nav-gutter) var(--nav-gutter) 0;
+  height: calc(100vh - (var(--nav-gutter) * 2));
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-nav);
+}
+
 .tool-panel__collapsed-strip {
   display: flex;
   flex-direction: column;
@@ -151,8 +160,21 @@
   box-sizing: border-box;
 }
 
-.tool-panel__compact-header .tool-panel__expand-btn {
+.tool-panel__compact-title {
+  flex: 1 1 auto;
+  min-width: 0;
+  font-size: 0.875rem;
+  font-weight: 600;
+  letter-spacing: -0.01em;
+  color: var(--c-text);
+}
+
+.tool-panel__compact-header-actions {
+  display: flex;
+  align-items: center;
+  gap: 0.25rem;
   margin-left: auto;
+  flex-shrink: 0;
 }
 
 .tool-panel__compact-header-search {
diff --git a/frontend/editor/src/core/components/tools/ToolPicker.tsx b/frontend/editor/src/core/components/tools/ToolPicker.tsx
index 6cda34aff2..5c5ce0e261 100644
--- a/frontend/editor/src/core/components/tools/ToolPicker.tsx
+++ b/frontend/editor/src/core/components/tools/ToolPicker.tsx
@@ -50,7 +50,7 @@ const SCROLLABLE_STYLE: React.CSSProperties = {
 const CONTAINER_STYLE: React.CSSProperties = {
   display: "flex",
   flexDirection: "column",
-  background: "var(--c-bg-raised)",
+  background: "var(--c-surface)",
 };
 const toTitleCase = (s: string) =>
   s.replace(
diff --git a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
index 1e21637849..cc4a04598e 100644
--- a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
@@ -1364,9 +1364,12 @@ const EmbedPdfViewerContent = ({
       {/* Bottom Toolbar Overlay */}
       {effectiveFile && (
         <div
+          className="pdf-viewer-toolbar-dock"
           style={{
             position: "fixed",
-            bottom: 0,
+            // Gutter matching the workbench rails, so the bar reads as a
+            // floating card rather than one welded to the viewport edge.
+            bottom: "0.5rem",
             left: 0,
             right: 0,
             zIndex: 50,
diff --git a/frontend/editor/src/core/components/viewer/PdfViewerToolbar.css b/frontend/editor/src/core/components/viewer/PdfViewerToolbar.css
new file mode 100644
index 0000000000..41ab744bbd
--- /dev/null
+++ b/frontend/editor/src/core/components/viewer/PdfViewerToolbar.css
@@ -0,0 +1,35 @@
+/* Floating viewer toolbar: a nav-surface card like the workbench rails rather
+   than a slab welded to the viewport edge. Shared by both consumers (the
+   viewer's bottom dock and the file-preview modal, which puts it up top). */
+.pdf-viewer-toolbar {
+  border-radius: var(--radius-nav);
+  border: 1px solid var(--c-border-subtle);
+  background: var(--c-surface);
+  box-shadow: var(--shadow-md);
+}
+
+/* The viewer's fixed bottom dock. The reveal lives here, not on the toolbar
+   itself, so it only plays where the bar actually enters from off-screen —
+   mirroring the workbench top bar's 280ms ease, upwards instead of downwards. */
+.pdf-viewer-toolbar-dock {
+  animation: pdf-viewer-toolbar-in 280ms ease both;
+}
+
+@keyframes pdf-viewer-toolbar-in {
+  from {
+    /* The bar's own height plus its gutter, so it starts fully off-screen
+       however tall the controls wrap. */
+    transform: translateY(calc(100% + var(--nav-gutter)));
+    opacity: 0;
+  }
+  to {
+    transform: translateY(0);
+    opacity: 1;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .pdf-viewer-toolbar-dock {
+    animation: none;
+  }
+}
diff --git a/frontend/editor/src/core/components/viewer/PdfViewerToolbar.tsx b/frontend/editor/src/core/components/viewer/PdfViewerToolbar.tsx
index 8d7429eba8..453a863ee2 100644
--- a/frontend/editor/src/core/components/viewer/PdfViewerToolbar.tsx
+++ b/frontend/editor/src/core/components/viewer/PdfViewerToolbar.tsx
@@ -5,6 +5,7 @@ import { useViewer } from "@app/contexts/ViewerContext";
 import { useIsPhone } from "@app/hooks/useIsMobile";
 import { Tooltip } from "@app/components/shared/Tooltip";
 import { ActionIcon } from "@app/ui/ActionIcon";
+import "@app/components/viewer/PdfViewerToolbar.css";
 import FirstPageIcon from "@mui/icons-material/FirstPage";
 import ArrowBackIosIcon from "@mui/icons-material/ArrowBackIos";
 import ArrowForwardIosIcon from "@mui/icons-material/ArrowForwardIos";
@@ -148,8 +149,7 @@ export function PdfViewerToolbar({
 
   return (
     <Paper
-      radius="xl xl 0 0"
-      shadow="sm"
+      className="pdf-viewer-toolbar"
       p={12}
       pb={12}
       style={{
@@ -159,11 +159,6 @@ export function PdfViewerToolbar({
         rowGap: 8,
         gap: 10,
         justifyContent: "center",
-        borderTopLeftRadius: 16,
-        borderTopRightRadius: 16,
-        borderBottomLeftRadius: 0,
-        borderBottomRightRadius: 0,
-        boxShadow: "0 -2px 8px rgba(0,0,0,0.04)",
         pointerEvents: "auto",
       }}
     >
diff --git a/frontend/editor/src/core/pages/HomePage.tsx b/frontend/editor/src/core/pages/HomePage.tsx
index cd0a838421..983d5213ed 100644
--- a/frontend/editor/src/core/pages/HomePage.tsx
+++ b/frontend/editor/src/core/pages/HomePage.tsx
@@ -499,6 +499,7 @@ export default function HomePage() {
             gap={0}
             h="100%"
             className="flex-nowrap flex"
+            bg="var(--c-bg)"
           >
             <MyFilesAwareFileSidebar
               ref={quickAccessRef}
diff --git a/frontend/editor/src/core/styles/theme.css b/frontend/editor/src/core/styles/theme.css
index de6c18614e..2cfa2d70ab 100644
--- a/frontend/editor/src/core/styles/theme.css
+++ b/frontend/editor/src/core/styles/theme.css
@@ -244,6 +244,37 @@
   /* API Keys section colors (light mode) */
   --api-keys-card-shadow: rgba(0, 0, 0, 0.06);
 
+  --modal-nav-bg: var(--p-gray-100);
+  --modal-nav-section-title: var(--p-gray-500);
+  --modal-nav-item-active: var(--p-blue-500);
+  --modal-nav-item-active-bg: color-mix(
+    in srgb,
+    var(--p-blue-500) 8%,
+    transparent
+  );
+  --modal-content-bg: var(--p-white);
+  --modal-header-border: rgba(0, 0, 0, 0.06);
+  --api-keys-card-bg: var(--p-white);
+  --api-keys-card-border: var(--p-gray-200);
+  --api-keys-input-bg: var(--p-gray-50);
+  --api-keys-input-border: var(--p-gray-200);
+  --usage-inactive: var(--p-gray-200);
+  --color-orange-50: var(--p-amber-400);
+  --color-orange-100: var(--p-amber-400);
+  --color-orange-200: var(--p-red-400);
+  --color-orange-300: var(--p-red-400);
+  --color-orange-400: var(--p-red-600);
+  --color-amber-50: var(--p-amber-400);
+  --color-amber-100: var(--p-amber-400);
+  --color-amber-200: var(--p-amber-400);
+  --color-amber-300: var(--p-amber-400);
+  --color-amber-400: var(--p-amber-400);
+  --color-amber-500: var(--p-amber-500);
+  --color-amber-600: var(--p-amber-600);
+  --color-amber-700: var(--p-amber-600);
+  --color-amber-800: var(--p-amber-600);
+  --color-amber-900: var(--p-amber-600);
+
   /* PDF Report Colors (always light) */
   --pdf-light-text-muted: 100 116 139;
   --pdf-light-box-bg: 248 250 252;
@@ -472,6 +503,28 @@
   /* API Keys section colors (dark mode) */
   --api-keys-card-shadow: none;
 
+  /* Migrated from the former saas-theme.css (dark) — see the light block. */
+  --modal-nav-bg: var(--p-zinc-850);
+  --modal-nav-section-title: var(--p-zinc-300);
+  --modal-nav-item-active: var(--p-blue-500);
+  --modal-nav-item-active-bg: color-mix(
+    in srgb,
+    var(--p-blue-500) 15%,
+    transparent
+  );
+  --modal-content-bg: var(--p-zinc-800);
+  --modal-header-border: rgba(255, 255, 255, 0.05);
+  --api-keys-card-bg: var(--p-zinc-800);
+  --api-keys-card-border: var(--p-zinc-650);
+  --api-keys-input-bg: var(--p-zinc-850);
+  --api-keys-input-border: var(--p-zinc-650);
+  --usage-inactive: var(--p-zinc-650);
+  --color-orange-50: var(--p-amber-400);
+  --color-orange-100: var(--p-amber-400);
+  --color-orange-200: var(--p-red-400);
+  --color-orange-300: var(--p-red-400);
+  --color-orange-400: var(--p-red-600);
+
   /* Code token colors (dark mode - Cursor-like) */
   --code-kw-color: var(--p-blue-400); /* purple */
   --code-str-color: var(--p-green-500); /* green */
diff --git a/frontend/editor/src/core/tests/live/edge-cases-security.spec.ts b/frontend/editor/src/core/tests/live/edge-cases-security.spec.ts
index f93ddb45c2..2e308ce3e2 100644
--- a/frontend/editor/src/core/tests/live/edge-cases-security.spec.ts
+++ b/frontend/editor/src/core/tests/live/edge-cases-security.spec.ts
@@ -12,7 +12,9 @@ test.describe("20. Edge Cases and Security", () => {
     test("should prevent XSS via search input", async ({ page }) => {
       await loginAndSetup(page);
 
-      // Step 1: Enter XSS payload in the search box
+      // Step 1: Open the search box (the tool panel header shows a search
+      // toggle; the field only mounts once it's pressed) and enter the payload
+      await page.getByRole("button", { name: /search tools/i }).click();
       const searchBox = page.getByPlaceholder(/search|cari/i).first();
       await searchBox.fill('"><img src=x onerror=alert(1)>');
 
diff --git a/frontend/editor/src/core/tests/stubbed/language-localization.spec.ts b/frontend/editor/src/core/tests/stubbed/language-localization.spec.ts
index b351acb1be..30ecc8d779 100644
--- a/frontend/editor/src/core/tests/stubbed/language-localization.spec.ts
+++ b/frontend/editor/src/core/tests/stubbed/language-localization.spec.ts
@@ -54,10 +54,12 @@ test.describe("13. Language / Localization", () => {
         // Step 5: Wait for page reload (language change triggers window.location.reload())
         await page.waitForLoadState("domcontentloaded");
 
-        // Step 6: Verify the UI text is in English
-        await expect(page.getByPlaceholder(/search/i).first()).toBeVisible({
-          timeout: 10000,
-        });
+        // Step 6: Verify the UI text is in English. The tool search is a
+        // header toggle, so assert its English label rather than the field,
+        // which only mounts once the toggle is pressed.
+        await expect(
+          page.getByRole("button", { name: /search tools/i }).first(),
+        ).toBeVisible({ timeout: 10000 });
       }
     });
   });
diff --git a/frontend/editor/src/core/tests/stubbed/main-dashboard.spec.ts b/frontend/editor/src/core/tests/stubbed/main-dashboard.spec.ts
index c66f392fa1..b8efb283fc 100644
--- a/frontend/editor/src/core/tests/stubbed/main-dashboard.spec.ts
+++ b/frontend/editor/src/core/tests/stubbed/main-dashboard.spec.ts
@@ -17,6 +17,14 @@ test.describe("2. Main Dashboard / Home Page", () => {
         page.locator('[data-testid="config-button"]').first(),
       ).toBeVisible();
 
+      // Tool search sits behind a header toggle now, so assert the affordance
+      // AND that pressing it actually mounts a usable search field — dropping
+      // the second half would stop covering the input entirely.
+      const searchToggle = page
+        .getByRole("button", { name: /search tools/i })
+        .first();
+      await expect(searchToggle).toBeVisible();
+      await searchToggle.click();
       await expect(page.getByPlaceholder(/search/i).first()).toBeVisible();
 
       await expect(
@@ -74,7 +82,10 @@ test.describe("2. Main Dashboard / Home Page", () => {
 
       await page.goto("/");
 
-      await expect(page.getByPlaceholder(/search/i).first()).toBeVisible();
+      // Tool search is a header toggle; the field mounts only once pressed.
+      await expect(
+        page.getByRole("button", { name: /search tools/i }).first(),
+      ).toBeVisible();
     });
   });
 
diff --git a/frontend/editor/src/core/tests/stubbed/tool-search.spec.ts b/frontend/editor/src/core/tests/stubbed/tool-search.spec.ts
index 397c86d605..7dfda74b79 100644
--- a/frontend/editor/src/core/tests/stubbed/tool-search.spec.ts
+++ b/frontend/editor/src/core/tests/stubbed/tool-search.spec.ts
@@ -1,13 +1,24 @@
+import type { Page } from "@playwright/test";
 import { test, expect } from "@app/tests/helpers/stub-test-base";
 
+/**
+ * The tool panel header shows a search *toggle*; the field only mounts once
+ * it's pressed. Open it and hand back the focused input.
+ */
+async function openToolSearch(page: Page) {
+  await page.getByRole("button", { name: /search tools/i }).click();
+  const searchBox = page.getByPlaceholder(/search|cari/i).first();
+  await expect(searchBox).toBeVisible({ timeout: 5000 });
+  return searchBox;
+}
+
 test.describe("3. Tool Search", () => {
   test.describe("3.1 Search - Happy Path", () => {
     test("should filter tools in real time based on search input", async ({
       page,
     }) => {
-      // Step 1: Click on the search box
-      const searchBox = page.getByPlaceholder(/search|cari/i).first();
-      await searchBox.click();
+      // Step 1: Open the search box from the header toggle
+      const searchBox = await openToolSearch(page);
 
       // Step 2: Type "merge"
       await searchBox.fill("merge");
@@ -31,9 +42,8 @@ test.describe("3. Tool Search", () => {
     test("should handle queries with no matching tools gracefully", async ({
       page,
     }) => {
-      // Step 1: Click on the search box
-      const searchBox = page.getByPlaceholder(/search|cari/i).first();
-      await searchBox.click();
+      // Step 1: Open the search box from the header toggle
+      const searchBox = await openToolSearch(page);
 
       // Step 2: Type xyznonexistent123
       await searchBox.fill("xyznonexistent123");
@@ -61,7 +71,7 @@ test.describe("3. Tool Search", () => {
   test.describe("3.3 Search - Special Characters", () => {
     test("should sanitize search input against XSS", async ({ page }) => {
       // Step 1: Type XSS payload into the search box
-      const searchBox = page.getByPlaceholder(/search|cari/i).first();
+      const searchBox = await openToolSearch(page);
       await searchBox.fill("<script>alert(1)</script>");
 
       // Step 2: Verify no script execution occurs (no alert dialog)
diff --git a/frontend/editor/src/core/theme/colors.css b/frontend/editor/src/core/theme/colors.css
index ced2c5dcb6..c7b0ccb08f 100644
--- a/frontend/editor/src/core/theme/colors.css
+++ b/frontend/editor/src/core/theme/colors.css
@@ -5,9 +5,9 @@
 :root,
 [data-theme="light"],
 html[data-app-theme="light"] {
-  --c-bg: var(--p-gray-50);
+  --c-bg: var(--p-paper);
   --c-bg-raised: var(--p-white);
-  --c-surface: var(--p-white);
+  --c-surface: var(--p-snow);
   --c-surface-raised: var(--p-white);
   --c-surface-sunken: var(--p-gray-100);
   --c-input-bg: var(--p-white);
@@ -15,12 +15,17 @@ html[data-app-theme="light"] {
   --c-active: var(--p-gray-100);
   --c-overlay: rgba(0, 0, 0, 0.5);
 
-  --c-text: var(--p-gray-900);
+  --c-text: var(--p-ink);
   --c-text-muted: var(--p-gray-600);
-  --c-text-subtle: var(--p-gray-500);
+  --c-text-subtle: var(--p-gray-550);
   --c-text-on-primary: var(--p-white);
 
-  --c-border: var(--p-gray-250);
+  --c-btn-solid: var(--c-text);
+  --c-btn-inverse: var(--p-snow);
+  --c-btn-secondary: var(--c-btn-inverse);
+  --c-btn-secondary-border: var(--c-border);
+
+  --c-border: var(--p-c-f0f0f0);
   --c-border-subtle: var(--p-gray-200);
   --c-border-strong: var(--p-gray-400);
 
@@ -55,7 +60,8 @@ html[data-app-theme="light"] {
      marks, vendor colours, categorical avatar dots, static illustrations,
      and the multi-hue gradients on feature/upgrade/onboarding surfaces.
      Named here so components reference a --c-* token, never a raw --p-*. */
-  --c-brand-mark: var(--p-brand-red-650); /* Stirling logo mark fill */
+  --c-brand-mark: var(--p-brand-red-650);
+  --c-brand-mark-soft: var(--p-brand-red-400); /* Stirling logo mark fill */
   --c-accent-stripe: var(--p-periwinkle-500); /* Stripe "connect" CTA */
 
   /* Feature-accent hues (fixed) used as stops in multi-hue gradients. */
@@ -110,9 +116,9 @@ html[data-app-theme="light"] {
 /* ── MIDNIGHT (original navy) — also the default portal/Storybook dark ────── */
 [data-theme="dark"],
 html[data-app-theme="midnight"] {
-  --c-bg: var(--p-zinc-900);
+  --c-bg: var(--p-c-141416);
   --c-bg-raised: var(--p-zinc-850);
-  --c-surface: var(--p-zinc-800);
+  --c-surface: var(--p-c-1a1a1d);
   --c-surface-raised: var(--p-zinc-650);
   --c-surface-sunken: var(--p-zinc-850);
   --c-input-bg: var(--p-zinc-650);
@@ -120,12 +126,16 @@ html[data-app-theme="midnight"] {
   --c-active: var(--p-gray-800);
   --c-overlay: rgba(0, 0, 0, 0.6);
 
-  --c-text: var(--p-zinc-100);
+  --c-text: var(--p-snow);
   --c-text-muted: var(--p-zinc-200);
   --c-text-subtle: var(--p-zinc-300);
   --c-text-on-primary: var(--p-white);
+  --c-btn-solid: var(--c-text);
+  --c-btn-inverse: var(--p-ink);
+  --c-btn-secondary: var(--p-c-1a1a1d);
+  --c-btn-secondary-border: var(--p-c-343439);
 
-  --c-border: var(--p-zinc-650);
+  --c-border: var(--p-c-28282d);
   --c-border-subtle: rgba(255, 255, 255, 0.05);
   --c-border-strong: var(--p-zinc-500);
 
@@ -157,9 +167,9 @@ html[data-app-theme="custom"] {
   --c-accent-fg: var(--c-primary);
 
   /* Primary-tinted surfaces (light base). Neutralised by the default override. */
-  --c-bg: color-mix(in srgb, var(--c-primary) 7%, var(--p-gray-50));
+  --c-bg: color-mix(in srgb, var(--c-primary) 7%, var(--p-paper));
   --c-bg-raised: color-mix(in srgb, var(--c-primary) 4%, var(--p-white));
-  --c-surface: color-mix(in srgb, var(--c-primary) 3%, var(--p-white));
+  --c-surface: color-mix(in srgb, var(--c-primary) 3%, var(--p-snow));
   --c-surface-raised: color-mix(in srgb, var(--c-primary) 4%, var(--p-white));
   --c-surface-sunken: color-mix(
     in srgb,
@@ -169,7 +179,7 @@ html[data-app-theme="custom"] {
   --c-input-bg: color-mix(in srgb, var(--c-primary) 2%, var(--p-white));
   --c-hover: color-mix(in srgb, var(--c-primary) 9%, var(--p-gray-50));
   --c-active: color-mix(in srgb, var(--c-primary) 13%, var(--p-gray-100));
-  --c-border: color-mix(in srgb, var(--c-primary) 14%, var(--p-gray-250));
+  --c-border: color-mix(in srgb, var(--c-primary) 14%, var(--p-c-f0f0f0));
   --c-border-subtle: color-mix(
     in srgb,
     var(--c-primary) 10%,
@@ -270,16 +280,20 @@ html[data-app-theme="custom"] {
 /* ── DARK — editor dark theme: neutral text/borders/icons + accent-tinted surfaces (default override opts out). After :root so it wins for dark. ── */
 html[data-app-theme="custom"][data-mantine-color-scheme="dark"] {
   /* Neutral text / borders / overlay (not accent-tinted). */
-  --c-text: var(--p-zinc-100);
+  --c-text: var(--p-snow);
   --c-text-muted: var(--p-zinc-200);
   --c-text-subtle: var(--p-zinc-300);
+  --c-btn-solid: var(--c-text);
+  --c-btn-inverse: var(--p-ink);
+  --c-btn-secondary: var(--p-c-1a1a1d);
+  --c-btn-secondary-border: var(--p-c-343439);
   --c-border-strong: var(--p-zinc-500);
   --c-overlay: rgba(0, 0, 0, 0.6);
 
   /* Accent-tinted surfaces (dark base). Neutralised by the default override. */
-  --c-bg: color-mix(in srgb, var(--c-primary) 8%, var(--p-zinc-950));
+  --c-bg: color-mix(in srgb, var(--c-primary) 8%, var(--p-c-141416));
   --c-bg-raised: color-mix(in srgb, var(--c-primary) 9%, var(--p-zinc-850));
-  --c-surface: color-mix(in srgb, var(--c-primary) 8%, var(--p-zinc-800));
+  --c-surface: color-mix(in srgb, var(--c-primary) 8%, var(--p-c-1a1a1d));
   --c-surface-raised: color-mix(
     in srgb,
     var(--c-primary) 9%,
@@ -293,7 +307,7 @@ html[data-app-theme="custom"][data-mantine-color-scheme="dark"] {
   --c-input-bg: color-mix(in srgb, var(--c-primary) 7%, var(--p-zinc-900));
   --c-hover: color-mix(in srgb, var(--c-primary) 12%, var(--p-zinc-750));
   --c-active: color-mix(in srgb, var(--c-primary) 15%, var(--p-zinc-700));
-  --c-border: color-mix(in srgb, var(--c-primary) 14%, var(--p-zinc-650));
+  --c-border: color-mix(in srgb, var(--c-primary) 14%, var(--p-c-28282d));
   --c-border-subtle: color-mix(
     in srgb,
     var(--c-primary) 10%,
@@ -335,27 +349,27 @@ html[data-app-theme="custom"][data-mantine-color-scheme="dark"] {
 
 /* ── DEFAULT (no tint) — surfaces opt out of the accent tint (neutral white/grey light, zinc dark); --c-primary stays for buttons. Extra [data-accent="default"] beats the tinted blocks. ── */
 html[data-app-theme="custom"][data-accent="default"] {
-  --c-bg: var(--p-gray-50);
+  --c-bg: var(--p-paper);
   --c-bg-raised: var(--p-white);
-  --c-surface: var(--p-white);
+  --c-surface: var(--p-snow);
   --c-surface-raised: var(--p-white);
   --c-surface-sunken: var(--p-gray-100);
   --c-input-bg: var(--p-white);
   --c-hover: var(--p-gray-50);
   --c-active: var(--p-gray-100);
-  --c-border: var(--p-gray-250);
+  --c-border: var(--p-c-f0f0f0);
   --c-border-subtle: var(--p-gray-200);
 }
 
 html[data-app-theme="custom"][data-accent="default"][data-mantine-color-scheme="dark"] {
-  --c-bg: var(--p-zinc-950);
+  --c-bg: var(--p-c-141416);
   --c-bg-raised: var(--p-zinc-850);
-  --c-surface: var(--p-zinc-800);
+  --c-surface: var(--p-c-1a1a1d);
   --c-surface-raised: var(--p-zinc-775);
   --c-surface-sunken: var(--p-zinc-900);
   --c-input-bg: var(--p-zinc-900);
   --c-hover: var(--p-zinc-750);
   --c-active: var(--p-zinc-700);
-  --c-border: var(--p-zinc-650);
+  --c-border: var(--p-c-28282d);
   --c-border-subtle: var(--p-zinc-700);
 }
diff --git a/frontend/editor/src/core/theme/dimensions.css b/frontend/editor/src/core/theme/dimensions.css
index 8042fcade6..aa0a1b38cc 100644
--- a/frontend/editor/src/core/theme/dimensions.css
+++ b/frontend/editor/src/core/theme/dimensions.css
@@ -28,6 +28,10 @@
   --radius-xl: 16px;
   --radius-pill: 9999px;
 
+  --radius-nav: 0.625rem;
+  --nav-gutter: 0.5rem;
+  --nav-rail-w: 3.5rem;
+
   /* ── Layout sizing ── */
   --footer-height: 2rem;
   --landing-stack-w: 224px;
@@ -51,6 +55,7 @@
   --motion-base: 0.2s cubic-bezier(0.4, 0, 0.2, 1);
   --motion-slow: 0.3s ease;
   --motion-enter: 0.22s cubic-bezier(0.4, 0, 0.2, 1);
+  --motion-spring: 0.22s cubic-bezier(0.32, 0.72, 0, 1);
   --fullscreen-anim-duration-in: 0.28s;
   --fullscreen-anim-duration-out: 0.22s;
 
diff --git a/frontend/editor/src/core/theme/primitives.css b/frontend/editor/src/core/theme/primitives.css
index 6ea844e9ed..239658dfeb 100644
--- a/frontend/editor/src/core/theme/primitives.css
+++ b/frontend/editor/src/core/theme/primitives.css
@@ -11,6 +11,10 @@
   --p-gray-300: #d1d5db;
   --p-gray-400: #9ca3af;
   --p-gray-500: #6b7280;
+  /* Subtle body text in light mode. gray-500 clears 4.5:1 on pure white but
+     only reaches 4.39:1 on the --p-paper canvas; this is the same hue nudged
+     dark enough to pass (4.87:1) while staying lighter than gray-600. */
+  --p-gray-550: #646b76;
   --p-gray-600: #4b5563;
   --p-gray-700: #374151;
   --p-gray-800: #1f2937;
@@ -29,6 +33,10 @@
   --p-zinc-300: #71717a;
   --p-zinc-200: #a1a1aa;
   --p-zinc-100: #f4f4f5;
+  --p-c-141416: #141416;
+  --p-c-1a1a1d: #1a1a1d;
+  --p-c-28282d: #28282d;
+  --p-c-343439: #343439;
   --p-blue-400: #60a5fa;
   --p-blue-500: #3b82f6;
   --p-blue-600: #2563eb;
@@ -46,6 +54,7 @@
   /* Brand-red + ai-accent scales, consumed by core/ui/accents.css. */
   --p-brand-red-200: #d9a8a8;
   --p-brand-red-300: #d98a8a;
+  --p-brand-red-400: #ad7373;
   --p-brand-red-650: #8e3131;
   --p-brand-red-700: #7a2929;
   --p-brand-red-900: #5a2424;
@@ -84,6 +93,10 @@
   --p-tint-blue: #eef1fb;
   --p-tint-violet: #f6f4fc;
   --p-tint-pink: #fbf4f7;
+  --p-paper: #f5f4f1;
+  --p-ink: #373530;
+  --p-snow: #fafafa;
+  --p-c-f0f0f0: #f0f0f0;
 
   /* Notion-style procurement view palette. */
   --p-notion-blue: #2383e2;
@@ -92,7 +105,6 @@
   --p-notion-ink: #37352f;
   --p-notion-gray: #9b9a97;
   --p-notion-gray-strong: #787774;
-  --p-notion-paper: #f5f4f1;
   --p-notion-paper-2: #f0eee9;
   --p-notion-border: #e3e1dc;
   --p-notion-border-2: #eae8e3;
diff --git a/frontend/editor/src/core/tokens/tokens.css b/frontend/editor/src/core/tokens/tokens.css
index c36fae35fc..2fe1fc3b70 100644
--- a/frontend/editor/src/core/tokens/tokens.css
+++ b/frontend/editor/src/core/tokens/tokens.css
@@ -326,16 +326,6 @@
     opacity: 0.5;
   }
 }
-@keyframes pulseRing {
-  0% {
-    transform: scale(0.8);
-    opacity: 1;
-  }
-  100% {
-    transform: scale(2.2);
-    opacity: 0;
-  }
-}
 @keyframes spin {
   to {
     transform: rotate(360deg);
diff --git a/frontend/editor/src/core/ui/ActionIcon.tsx b/frontend/editor/src/core/ui/ActionIcon.tsx
index 682e4b41e5..ca8dd0b9ef 100644
--- a/frontend/editor/src/core/ui/ActionIcon.tsx
+++ b/frontend/editor/src/core/ui/ActionIcon.tsx
@@ -103,15 +103,22 @@ export const ActionIcon = forwardRef<HTMLButtonElement, ActionIconProps>(
               "--ai-hover-color": "var(--c-text)",
               "--ai-bd": "1px solid transparent",
             }
-          : {
-              "--ai-bg": "transparent",
-              "--ai-hover": "var(--_tint)",
-              "--ai-color": "var(--_text)",
-              "--ai-bd":
-                variant === "secondary"
-                  ? "1px solid var(--_bd)"
-                  : "1px solid transparent",
-            };
+          : variant === "secondary"
+            ? {
+                // Filled when the accent defines --_solid-2 (default = inverse
+                // ink/snow); otherwise falls back to the outlined look.
+                "--ai-bg": "var(--_solid-2, transparent)",
+                "--ai-hover": "var(--_solid-2-hover, var(--_tint))",
+                "--ai-color": "var(--_on-2, var(--_text))",
+                "--ai-bd": "1px solid var(--_bd-2, var(--_bd))",
+              }
+            : {
+                // tertiary (ghost) — neutral text + hover for the default accent.
+                "--ai-bg": "transparent",
+                "--ai-hover": "var(--_tert-tint, var(--_tint))",
+                "--ai-color": "var(--_tert-text, var(--_text))",
+                "--ai-bd": "1px solid transparent",
+              };
 
     // Loosely-typed alias so the polymorphic `component={as}` doesn't fight Mantine's typing.
     const Comp = MantineActionIcon as ElementType;
diff --git a/frontend/editor/src/core/ui/Button.tsx b/frontend/editor/src/core/ui/Button.tsx
index 7d2ff6d457..8c04aa226c 100644
--- a/frontend/editor/src/core/ui/Button.tsx
+++ b/frontend/editor/src/core/ui/Button.tsx
@@ -193,15 +193,23 @@ const ButtonRoot = forwardRef<HTMLButtonElement, ButtonProps>(
               "--button-hover-color": "var(--c-text)",
               "--button-bd": "1px solid transparent",
             }
-          : {
-              "--button-bg": "transparent",
-              "--button-hover": "var(--_tint)",
-              "--button-color": "var(--_text)",
-              "--button-bd":
-                variant === "secondary"
-                  ? "1px solid var(--_bd)"
-                  : "1px solid transparent",
-            };
+          : variant === "secondary"
+            ? {
+                // Filled when the accent defines --_solid-2 (default = inverse
+                // ink/snow); otherwise falls back to the outlined look.
+                "--button-bg": "var(--_solid-2, transparent)",
+                "--button-hover": "var(--_solid-2-hover, var(--_tint))",
+                "--button-color": "var(--_on-2, var(--_text))",
+                "--button-bd": "1px solid var(--_bd-2, var(--_bd))",
+              }
+            : {
+                // tertiary (ghost) — neutral text + hover when the accent
+                // defines --_tert-* (default); otherwise the accent link colour.
+                "--button-bg": "transparent",
+                "--button-hover": "var(--_tert-tint, var(--_tint))",
+                "--button-color": "var(--_tert-text, var(--_text))",
+                "--button-bd": "1px solid transparent",
+              };
 
     // Loosely-typed alias so the polymorphic `component={as}` doesn't fight Mantine's typing.
     const Comp = MantineButton as ElementType;
diff --git a/frontend/editor/src/core/ui/ChatFABButton.css b/frontend/editor/src/core/ui/ChatFABButton.css
index 171abf8809..b68713aa1f 100644
--- a/frontend/editor/src/core/ui/ChatFABButton.css
+++ b/frontend/editor/src/core/ui/ChatFABButton.css
@@ -5,11 +5,10 @@
   width: 56px;
   height: 56px;
   border-radius: 16px;
-  border: none;
-  background: var(--c-primary);
-  color: var(--c-text-on-primary);
+  border: 1px solid var(--c-btn-secondary-border);
+  background: var(--c-btn-secondary);
   cursor: pointer;
-  box-shadow: 0 4px 16px color-mix(in srgb, var(--c-primary) 40%, transparent);
+  box-shadow: var(--shadow-md);
   transition:
     transform 180ms cubic-bezier(0.32, 0.72, 0, 1),
     box-shadow 180ms ease;
@@ -20,7 +19,7 @@
 
 .chat-fab-btn:hover {
   transform: scale(1.09);
-  box-shadow: 0 6px 22px color-mix(in srgb, var(--c-primary) 52%, transparent);
+  box-shadow: var(--shadow-lg);
 }
 
 .chat-fab-btn:active {
diff --git a/frontend/editor/src/core/ui/ChatFABButton.tsx b/frontend/editor/src/core/ui/ChatFABButton.tsx
index 5ba3c8113b..672bd7c1c4 100644
--- a/frontend/editor/src/core/ui/ChatFABButton.tsx
+++ b/frontend/editor/src/core/ui/ChatFABButton.tsx
@@ -1,4 +1,5 @@
 import type { ButtonHTMLAttributes } from "react";
+import { BrandMark } from "@app/components/shared/BrandMark";
 import "@app/ui/ChatFABButton.css";
 
 export interface ChatFABButtonProps extends ButtonHTMLAttributes<HTMLButtonElement> {
@@ -25,20 +26,10 @@ export function ChatFABButton({
 
   return (
     <button type="button" className={classes} {...rest}>
-      <svg
-        xmlns="http://www.w3.org/2000/svg"
-        width={28}
-        height={28}
-        viewBox="0 0 192 192"
-        fill="currentColor"
-        aria-hidden="true"
-      >
-        <path
-          d="M68.48 102.4 L184.73 6.45 L184.73 96.05 L68.48 192 Z"
-          opacity="0.7"
-        />
-        <path d="M7.26 95.83 L123.37 0 L123.37 89.5 L7.26 185.33 Z" />
-      </svg>
+      {/* Decorative: the button itself carries the accessible name. */}
+      <span aria-hidden="true" style={{ display: "inline-flex" }}>
+        <BrandMark height="1.875rem" />
+      </span>
       {loading && !showTick && (
         <span className="chat-fab-btn__pulse" aria-hidden="true" />
       )}
diff --git a/frontend/editor/src/core/ui/Inline.stories.tsx b/frontend/editor/src/core/ui/Inline.stories.tsx
index 5149f36018..15d5d8c713 100644
--- a/frontend/editor/src/core/ui/Inline.stories.tsx
+++ b/frontend/editor/src/core/ui/Inline.stories.tsx
@@ -34,9 +34,7 @@ export const SpaceBetween: Story = {
       }}
     >
       <span>Pipeline name</span>
-      <StatusBadge tone="success" pulse>
-        healthy
-      </StatusBadge>
+      <StatusBadge tone="success">healthy</StatusBadge>
     </Inline>
   ),
 };
diff --git a/frontend/editor/src/core/ui/Logo.css b/frontend/editor/src/core/ui/Logo.css
new file mode 100644
index 0000000000..417275d1d8
--- /dev/null
+++ b/frontend/editor/src/core/ui/Logo.css
@@ -0,0 +1,33 @@
+/* Shared brand lockup (mark + "Stirling" wordmark). The wordmark toggles by
+   colour scheme so one component works in the editor and the portal. */
+.sui-logo {
+  display: inline-flex;
+  align-items: center;
+  line-height: 1;
+}
+
+.sui-logo--vertical {
+  flex-direction: column;
+  justify-content: center;
+}
+
+.sui-logo__mark,
+.sui-logo__wordmark {
+  display: block;
+  width: auto;
+}
+
+/* Light wordmark by default; dark wordmark only under a dark scheme. */
+.sui-logo__wordmark--dark {
+  display: none;
+}
+
+[data-mantine-color-scheme="dark"] .sui-logo__wordmark--light,
+[data-theme="dark"] .sui-logo__wordmark--light {
+  display: none;
+}
+
+[data-mantine-color-scheme="dark"] .sui-logo__wordmark--dark,
+[data-theme="dark"] .sui-logo__wordmark--dark {
+  display: block;
+}
diff --git a/frontend/editor/src/core/ui/Logo.stories.tsx b/frontend/editor/src/core/ui/Logo.stories.tsx
new file mode 100644
index 0000000000..097288f919
--- /dev/null
+++ b/frontend/editor/src/core/ui/Logo.stories.tsx
@@ -0,0 +1,48 @@
+import type { Meta, StoryObj } from "@storybook/react";
+import { Logo } from "@app/ui/Logo";
+
+const meta: Meta<typeof Logo> = {
+  title: "Brand/Logo",
+  component: Logo,
+  parameters: { layout: "centered" },
+  args: { variant: "iconAndText", orientation: "horizontal" },
+  argTypes: {
+    variant: {
+      control: "inline-radio",
+      options: ["iconOnly", "iconAndText", "textOnly"],
+    },
+    orientation: {
+      control: "inline-radio",
+      options: ["horizontal", "vertical"],
+    },
+  },
+};
+export default meta;
+type Story = StoryObj<typeof Logo>;
+
+export const Playground: Story = {};
+
+/** The three variants side by side (toggle Storybook's theme to see the
+ *  wordmark track light/dark). */
+export const Variants: Story = {
+  render: () => (
+    <div style={{ display: "flex", gap: 48, alignItems: "center" }}>
+      <Logo variant="iconOnly" />
+      <Logo variant="textOnly" />
+      <Logo variant="iconAndText" />
+    </div>
+  ),
+};
+
+/** iconAndText stacked — as used in the workbench empty state. */
+export const Stacked: Story = {
+  render: () => (
+    <Logo
+      variant="iconAndText"
+      orientation="vertical"
+      iconHeight="3.5rem"
+      textHeight="1.5rem"
+      gap="0.75rem"
+    />
+  ),
+};
diff --git a/frontend/editor/src/core/ui/Logo.tsx b/frontend/editor/src/core/ui/Logo.tsx
new file mode 100644
index 0000000000..a16d8d6001
--- /dev/null
+++ b/frontend/editor/src/core/ui/Logo.tsx
@@ -0,0 +1,89 @@
+import type { CSSProperties } from "react";
+import markUrl from "@app/assets/brand/branding-logo/logo-mark.svg";
+import wordmarkLightUrl from "@app/assets/brand/branding-logo/wordmark-light.svg";
+import wordmarkDarkUrl from "@app/assets/brand/branding-logo/wordmark-dark.svg";
+import "@app/ui/Logo.css";
+
+/** iconOnly = mark; textOnly = "Stirling" wordmark; iconAndText = both. */
+export type LogoVariant = "iconOnly" | "iconAndText" | "textOnly";
+
+interface LogoProps {
+  variant?: LogoVariant;
+  /** Layout for iconAndText: mark left of text, or stacked above it. */
+  orientation?: "horizontal" | "vertical";
+  /** Height of the mark (CSS length). */
+  iconHeight?: string;
+  /** Height of the wordmark (CSS length). */
+  textHeight?: string;
+  /** Gap between mark and wordmark. */
+  gap?: string;
+  className?: string;
+  style?: CSSProperties;
+  alt?: string;
+}
+
+/**
+ * Shared brand lockup used across editor + processor. The mark is theme-
+ * agnostic; the wordmark swaps light/dark via CSS so it tracks the active
+ * colour scheme in both the editor (data-mantine-color-scheme) and the portal
+ * (data-theme).
+ */
+export function Logo({
+  variant = "iconAndText",
+  orientation = "horizontal",
+  iconHeight = "1.75rem",
+  textHeight = "1rem",
+  gap = "0.5rem",
+  className,
+  style,
+  alt = "Stirling",
+}: LogoProps) {
+  const showIcon = variant === "iconOnly" || variant === "iconAndText";
+  const showText = variant === "textOnly" || variant === "iconAndText";
+
+  const cls = [
+    "sui-logo",
+    orientation === "vertical" ? "sui-logo--vertical" : "",
+    className ?? "",
+  ]
+    .filter(Boolean)
+    .join(" ");
+
+  // Layout set inline so a consumer's className can't restack the lockup.
+  const layoutStyle: CSSProperties = {
+    display: orientation === "vertical" ? "flex" : "inline-flex",
+    flexDirection: orientation === "vertical" ? "column" : "row",
+    alignItems: "center",
+    gap,
+  };
+
+  return (
+    <span className={cls} style={{ ...layoutStyle, ...style }}>
+      {showIcon && (
+        <img
+          className="sui-logo__mark"
+          src={markUrl}
+          alt={showText ? "" : alt}
+          aria-hidden={showText ? true : undefined}
+          style={{ height: iconHeight }}
+        />
+      )}
+      {showText && (
+        <>
+          <img
+            className="sui-logo__wordmark sui-logo__wordmark--light"
+            src={wordmarkLightUrl}
+            alt={alt}
+            style={{ height: textHeight }}
+          />
+          <img
+            className="sui-logo__wordmark sui-logo__wordmark--dark"
+            src={wordmarkDarkUrl}
+            alt={alt}
+            style={{ height: textHeight }}
+          />
+        </>
+      )}
+    </span>
+  );
+}
diff --git a/frontend/editor/src/core/ui/MetricStrip.css b/frontend/editor/src/core/ui/MetricStrip.css
index 472fce713e..8344fe1393 100644
--- a/frontend/editor/src/core/ui/MetricStrip.css
+++ b/frontend/editor/src/core/ui/MetricStrip.css
@@ -1,17 +1,79 @@
-.sui-metric-strip {
+.sui-metric-strip--grid {
   display: grid;
   grid-template-columns: repeat(4, 1fr);
   gap: 0.75rem;
 }
 
 @media (max-width: 50rem) {
-  .sui-metric-strip {
+  .sui-metric-strip--grid {
     grid-template-columns: repeat(2, 1fr);
   }
 }
 
 @media (max-width: 30rem) {
-  .sui-metric-strip {
+  .sui-metric-strip--grid {
     grid-template-columns: 1fr;
   }
 }
+
+.sui-metric-strip--row {
+  display: flex;
+  align-items: center;
+  gap: 1.75rem;
+  padding: 0.625rem 1.25rem;
+  background: var(--c-surface);
+  border: 1px solid var(--c-border);
+  border-radius: var(--radius-lg);
+  box-shadow: var(--shadow-sm);
+}
+
+.sui-metric-strip__leading {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  flex-shrink: 0;
+  padding-right: 1.25rem;
+  border-right: 1px solid var(--c-border-subtle);
+  align-self: stretch;
+  /* Neutral (ink) tint for a currentColor icon in the leading slot. */
+  color: var(--c-text);
+}
+
+.sui-metric-strip--row .sui-metric {
+  flex: 1 1 0;
+  min-width: 0;
+  padding: 0;
+  gap: 0;
+  background: none;
+  border: none;
+  box-shadow: none;
+}
+.sui-metric-strip--row .sui-metric__label {
+  font-size: 0.6875rem;
+  font-weight: 600;
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+  color: var(--c-text-subtle);
+}
+.sui-metric-strip--row .sui-metric__value {
+  font-size: 1.0625rem;
+  font-weight: 600;
+}
+.sui-metric-strip--row .sui-metric__footer {
+  font-size: 0.6875rem;
+}
+
+@media (max-width: 50rem) {
+  .sui-metric-strip--row {
+    flex-wrap: wrap;
+    gap: 1.25rem 2rem;
+  }
+  .sui-metric-strip__leading {
+    border-right: none;
+    padding-right: 0;
+    flex-basis: 100%;
+  }
+  .sui-metric-strip--row .sui-metric {
+    flex-basis: 40%;
+  }
+}
diff --git a/frontend/editor/src/core/ui/MetricStrip.stories.tsx b/frontend/editor/src/core/ui/MetricStrip.stories.tsx
index 0c1ba975f2..615af0e0e2 100644
--- a/frontend/editor/src/core/ui/MetricStrip.stories.tsx
+++ b/frontend/editor/src/core/ui/MetricStrip.stories.tsx
@@ -2,6 +2,25 @@ import type { Meta, StoryObj } from "@storybook/react-vite";
 import { MetricStrip } from "@app/ui/MetricStrip";
 import { MetricCard } from "@app/ui/MetricCard";
 
+function ShieldIcon() {
+  return (
+    <svg
+      xmlns="http://www.w3.org/2000/svg"
+      width={22}
+      height={22}
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth={1.75}
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    >
+      <path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z" />
+      <path d="m9 12 2 2 4-4" />
+    </svg>
+  );
+}
+
 const meta: Meta<typeof MetricStrip> = {
   title: "Layout/MetricStrip",
   component: MetricStrip,
@@ -22,3 +41,30 @@ export const Default: Story = {
     </MetricStrip>
   ),
 };
+
+export const Row: Story = {
+  render: () => (
+    <MetricStrip layout="row" leading={<ShieldIcon />}>
+      <MetricCard
+        label="Active policies"
+        value="2"
+        description="Enforcing on upload/export"
+      />
+      <MetricCard
+        label="Paused"
+        value="0"
+        description="Configured but not firing"
+      />
+      <MetricCard
+        label="Categories"
+        value="6"
+        description="Available to configure"
+      />
+      <MetricCard
+        label="Docs enforced"
+        value="0"
+        description="Across active policies"
+      />
+    </MetricStrip>
+  ),
+};
diff --git a/frontend/editor/src/core/ui/MetricStrip.tsx b/frontend/editor/src/core/ui/MetricStrip.tsx
index 27ca2fc30a..b9e2a03bb3 100644
--- a/frontend/editor/src/core/ui/MetricStrip.tsx
+++ b/frontend/editor/src/core/ui/MetricStrip.tsx
@@ -3,21 +3,35 @@ import "@app/ui/MetricStrip.css";
 
 export interface MetricStripProps {
   children: ReactNode;
+  layout?: "grid" | "row";
+  leading?: ReactNode;
   className?: string;
 }
 
 /**
- * Responsive grid wrapper for a row of {@link MetricCard}s — the prototype's
- * "metric strip" (Home, Sources, Usage, Infrastructure all use it). Four-up on
- * wide screens, two-up below 50rem.
+ * Wrapper for a set of {@link MetricCard}s. In the default `grid` layout it's
+ * the prototype's four-up "metric strip" (Home, Sources, Usage,
+ * Infrastructure). In `row` layout the cards render as inline columns inside a
+ * single bordered strip with an optional leading logo/title section.
  */
-export function MetricStrip({ children, className }: MetricStripProps) {
+export function MetricStrip({
+  children,
+  layout = "grid",
+  leading,
+  className,
+}: MetricStripProps) {
+  const classes = [
+    "sui-metric-strip",
+    `sui-metric-strip--${layout}`,
+    className ?? "",
+  ]
+    .filter(Boolean)
+    .join(" ");
   return (
-    <div
-      className={["sui-metric-strip", className ?? ""]
-        .filter(Boolean)
-        .join(" ")}
-    >
+    <div className={classes}>
+      {layout === "row" && leading != null && (
+        <div className="sui-metric-strip__leading">{leading}</div>
+      )}
       {children}
     </div>
   );
diff --git a/frontend/editor/src/core/ui/NavItem.tsx b/frontend/editor/src/core/ui/NavItem.tsx
index b912d1fd19..ce86503cc0 100644
--- a/frontend/editor/src/core/ui/NavItem.tsx
+++ b/frontend/editor/src/core/ui/NavItem.tsx
@@ -52,6 +52,7 @@ export function NavItem({
         .join(" ")}
       data-accent={accent}
       aria-current={isActive ? "page" : undefined}
+      aria-label={label}
     >
       {icon && (
         <span className="sui-navitem__icon" aria-hidden>
diff --git a/frontend/editor/src/core/ui/NavSurface.css b/frontend/editor/src/core/ui/NavSurface.css
new file mode 100644
index 0000000000..5424f3469a
--- /dev/null
+++ b/frontend/editor/src/core/ui/NavSurface.css
@@ -0,0 +1,5 @@
+.sui-nav-surface {
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-nav);
+}
diff --git a/frontend/editor/src/core/ui/NavSurface.stories.tsx b/frontend/editor/src/core/ui/NavSurface.stories.tsx
new file mode 100644
index 0000000000..8591887e2d
--- /dev/null
+++ b/frontend/editor/src/core/ui/NavSurface.stories.tsx
@@ -0,0 +1,62 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { NavSurface } from "@app/ui/NavSurface";
+import { NavItem } from "@app/ui/NavItem";
+
+function Dot() {
+  return (
+    <span
+      style={{
+        width: 14,
+        height: 14,
+        borderRadius: 3,
+        background: "var(--c-primary)",
+        display: "inline-block",
+      }}
+    />
+  );
+}
+
+const meta: Meta<typeof NavSurface> = {
+  title: "Primitives/NavSurface",
+  component: NavSurface,
+  parameters: { layout: "padded" },
+  decorators: [
+    (S) => (
+      <div style={{ width: "15rem", background: "var(--c-bg)", padding: 12 }}>
+        <S />
+      </div>
+    ),
+  ],
+};
+export default meta;
+type Story = StoryObj<typeof NavSurface>;
+
+/** The box a sidebar's rows sit in. NavItem's own states are covered by its
+ *  own stories - the active row's accent-on-tint contrast is a known
+ *  NavItem issue, and duplicating it here would just baseline it twice. */
+export const Default: Story = {
+  args: {
+    children: (
+      <div style={{ padding: "0.5rem 0" }}>
+        <NavItem id="home" label="Home" icon={<Dot />} />
+        <NavItem id="sources" label="Sources" icon={<Dot />} />
+        <NavItem id="documents" label="Documents" icon={<Dot />} />
+      </div>
+    ),
+  },
+};
+
+/** `as` renders a landmark element instead of a div. */
+export const AsSection: Story = {
+  args: {
+    as: "section",
+    "aria-label": "Processor",
+    children: (
+      <div style={{ padding: "0.75rem" }}>
+        <span style={{ fontSize: 13, color: "var(--c-text-muted)" }}>
+          Any content, not just nav rows.
+        </span>
+      </div>
+    ),
+  },
+};
diff --git a/frontend/editor/src/core/ui/NavSurface.tsx b/frontend/editor/src/core/ui/NavSurface.tsx
new file mode 100644
index 0000000000..38947fb91f
--- /dev/null
+++ b/frontend/editor/src/core/ui/NavSurface.tsx
@@ -0,0 +1,30 @@
+import { forwardRef, type HTMLAttributes } from "react";
+import "@app/ui/NavSurface.css";
+
+export interface NavSurfaceProps extends HTMLAttributes<HTMLDivElement> {
+  /** Element to render; `section`/`aside` when the box is a landmark. */
+  as?: "div" | "section" | "aside";
+}
+
+/**
+ * The floating box a sidebar's contents sit in: nav sections, the editor's
+ * file rail, the account footer. Surface fill, hairline border, nav radius.
+ */
+export const NavSurface = forwardRef<HTMLDivElement, NavSurfaceProps>(
+  function NavSurface(
+    { as: Component = "div", className, children, ...rest },
+    ref,
+  ) {
+    return (
+      <Component
+        ref={ref}
+        className={["sui-nav-surface", className ?? ""]
+          .filter(Boolean)
+          .join(" ")}
+        {...rest}
+      >
+        {children}
+      </Component>
+    );
+  },
+);
diff --git a/frontend/editor/src/core/ui/PanelHeader.stories.tsx b/frontend/editor/src/core/ui/PanelHeader.stories.tsx
index 715adbab65..261d98be2e 100644
--- a/frontend/editor/src/core/ui/PanelHeader.stories.tsx
+++ b/frontend/editor/src/core/ui/PanelHeader.stories.tsx
@@ -50,9 +50,7 @@ export const WithActions: Story = {
     accent: "purple",
     actions: (
       <>
-        <StatusBadge tone="success" pulse>
-          Healthy
-        </StatusBadge>
+        <StatusBadge tone="success">Healthy</StatusBadge>
         <Button size="sm" variant="secondary">
           Edit composition
         </Button>
diff --git a/frontend/editor/src/core/ui/StatusBadge.css b/frontend/editor/src/core/ui/StatusBadge.css
index 230c99b40d..4f64737b32 100644
--- a/frontend/editor/src/core/ui/StatusBadge.css
+++ b/frontend/editor/src/core/ui/StatusBadge.css
@@ -2,35 +2,21 @@
   display: inline-flex;
   align-items: center;
   gap: 0.375rem;
-  border-radius: var(--radius-pill);
   font-family: var(--font-sans);
   font-weight: 500;
   letter-spacing: 0.01em;
-  border: 1px solid transparent;
   line-height: 1;
   color: var(--sui-status-c, var(--c-text-subtle));
-  background: color-mix(
-    in srgb,
-    var(--sui-status-c, var(--c-text-subtle)) 12%,
-    transparent
-  );
-  border-color: color-mix(
-    in srgb,
-    var(--sui-status-c, var(--c-text-subtle)) 28%,
-    transparent
-  );
 }
+
 .sui-status--sm {
   font-size: 0.6875rem;
-  padding: 0.125rem 0.5rem;
 }
 .sui-status--md {
   font-size: 0.75rem;
-  padding: 0.1875rem 0.625rem;
 }
 .sui-status--lg {
   font-size: 0.8125rem;
-  padding: 0.3125rem 0.75rem;
 }
 
 .sui-status__dot {
@@ -38,25 +24,40 @@
   height: 0.375rem;
   border-radius: 50%;
   background: currentColor;
-  position: relative;
-}
-.sui-status__dot--pulse::after {
-  content: "";
-  position: absolute;
-  inset: -0.125rem;
-  border-radius: 50%;
-  border: 2px solid currentColor;
-  animation: pulseRing 1.4s ease-out infinite;
 }
 
-/* Neutral keeps the plain muted surface rather than an accent tint. */
+.sui-status--pill {
+  border-radius: var(--radius-pill);
+  border: 1px solid
+    color-mix(
+      in srgb,
+      var(--sui-status-c, var(--c-text-subtle)) 28%,
+      transparent
+    );
+  background: color-mix(
+    in srgb,
+    var(--sui-status-c, var(--c-text-subtle)) 12%,
+    transparent
+  );
+}
+.sui-status--pill.sui-status--sm {
+  padding: 0.125rem 0.5rem;
+}
+.sui-status--pill.sui-status--md {
+  padding: 0.1875rem 0.625rem;
+}
+.sui-status--pill.sui-status--lg {
+  padding: 0.3125rem 0.75rem;
+}
+
 .sui-status--neutral {
   color: var(--c-text-subtle);
+}
+.sui-status--pill.sui-status--neutral {
   background: var(--c-surface-sunken);
   border-color: var(--c-border-subtle);
 }
-/* Tones only pick the accent; the base rule builds the fill + border. `-dark`
-   is theme-adaptive, so text stays legible on the pale fill in both themes. */
+
 .sui-status--success {
   --sui-status-c: var(--color-green-dark);
 }
diff --git a/frontend/editor/src/core/ui/StatusBadge.stories.tsx b/frontend/editor/src/core/ui/StatusBadge.stories.tsx
index 8b77c58e41..9edeb00717 100644
--- a/frontend/editor/src/core/ui/StatusBadge.stories.tsx
+++ b/frontend/editor/src/core/ui/StatusBadge.stories.tsx
@@ -33,7 +33,7 @@ export const AllTones: Story = {
 };
 
 export const Live: Story = {
-  args: { tone: "success", pulse: true, children: "Live" },
+  args: { tone: "success", children: "Live" },
 };
 
 export const Sizes: Story = {
diff --git a/frontend/editor/src/core/ui/StatusBadge.tsx b/frontend/editor/src/core/ui/StatusBadge.tsx
index 5ffd5d44f9..7d80819edd 100644
--- a/frontend/editor/src/core/ui/StatusBadge.tsx
+++ b/frontend/editor/src/core/ui/StatusBadge.tsx
@@ -14,28 +14,21 @@ export type StatusSize = "sm" | "md" | "lg";
 export interface StatusBadgeProps {
   tone?: StatusTone;
   size?: StatusSize;
-  /** Show a leading coloured dot. */
   showDot?: boolean;
-  /** Render the dot with a pulse animation (active / live indicator). */
-  pulse?: boolean;
   children?: ReactNode;
   className?: string;
 }
 
-/**
- * Inline status pill used across surfaces — pipeline rows, document status,
- * deployments, audit logs. Tone maps to semantic meaning, not raw colour.
- */
 export function StatusBadge({
   tone = "neutral",
   size = "md",
   showDot = true,
-  pulse = false,
   children,
   className,
 }: StatusBadgeProps) {
   const cls = [
     "sui-status",
+    showDot ? "" : "sui-status--pill",
     `sui-status--${tone}`,
     `sui-status--${size}`,
     className ?? "",
@@ -44,12 +37,7 @@ export function StatusBadge({
     .join(" ");
   return (
     <span className={cls}>
-      {showDot && (
-        <span
-          className={`sui-status__dot${pulse ? " sui-status__dot--pulse" : ""}`}
-          aria-hidden
-        />
-      )}
+      {showDot && <span className="sui-status__dot" aria-hidden />}
       <span className="sui-status__label">{children}</span>
     </span>
   );
diff --git a/frontend/editor/src/core/ui/accents.css b/frontend/editor/src/core/ui/accents.css
index 404f98cc52..cf83edacaf 100644
--- a/frontend/editor/src/core/ui/accents.css
+++ b/frontend/editor/src/core/ui/accents.css
@@ -2,16 +2,26 @@
  * accents derive from --color-* tokens (auto dark), neutral/brand/ai are explicit. */
 
 .sui-acc-default {
-  --_solid: var(--c-primary);
-  --_solid-hover: var(--c-primary-hover);
-  --_on: #ffffff;
+  --_solid: var(--c-btn-solid);
+  --_solid-hover: color-mix(
+    in srgb,
+    var(--c-btn-solid) 85%,
+    var(--c-btn-inverse)
+  );
+  --_on: var(--c-btn-inverse);
   --_text: var(--c-primary-hover);
   --_bd: color-mix(in srgb, var(--c-primary) 38%, var(--c-surface));
   --_tint: color-mix(in srgb, var(--c-primary) 12%, transparent);
-}
-
-html[data-app-theme="custom"] .sui-acc-default {
-  --_on: var(--c-text-on-primary);
+  --_solid-2: var(--c-btn-secondary);
+  --_solid-2-hover: color-mix(
+    in srgb,
+    var(--c-btn-secondary) 92%,
+    var(--c-btn-solid)
+  );
+  --_on-2: var(--c-btn-solid);
+  --_bd-2: var(--c-btn-secondary-border);
+  --_tert-text: var(--c-text);
+  --_tert-tint: var(--c-hover);
 }
 /* Danger is pinned to a fixed deep red (not the theme-lightened coral), so the
    fill and the outline/text are the SAME red in both light and dark. */
diff --git a/frontend/editor/src/core/ui/index.ts b/frontend/editor/src/core/ui/index.ts
index d94dfab813..45212d8038 100644
--- a/frontend/editor/src/core/ui/index.ts
+++ b/frontend/editor/src/core/ui/index.ts
@@ -1,5 +1,6 @@
 export * from "@app/ui/Button";
 export * from "@app/ui/ActionIcon";
+export * from "@app/ui/Logo";
 export * from "@app/ui/FilePicker";
 export * from "@app/ui/SegmentedControl";
 export * from "@app/ui/StatusBadge";
@@ -8,6 +9,7 @@ export * from "@app/ui/ToggleSwitch";
 export * from "@app/ui/ProgressBar";
 export * from "@app/ui/MetricCard";
 export * from "@app/ui/NavItem";
+export * from "@app/ui/NavSurface";
 export * from "@app/ui/PanelHeader";
 export * from "@app/ui/CodeBlock";
 export * from "@app/ui/SectionDivider";
diff --git a/frontend/editor/src/desktop/components/shared/AppSwitcher.tsx b/frontend/editor/src/desktop/components/shared/AppSwitcher.tsx
index 9d7c2c095e..21896d9a1d 100644
--- a/frontend/editor/src/desktop/components/shared/AppSwitcher.tsx
+++ b/frontend/editor/src/desktop/components/shared/AppSwitcher.tsx
@@ -1,9 +1,18 @@
+import { Logo } from "@app/ui/Logo";
+import { type AppSwitcherProps } from "@core/components/shared/AppSwitcher";
+
 /**
  * Desktop inherits proprietary's layers but does not ship the portal (see
- * desktop/routes/adminRouteExtensions), so shadow the switcher back to empty —
- * otherwise the desktop bundle would reference @portal via the proprietary
- * switcher's imports.
+ * desktop/routes/adminRouteExtensions), so there's nothing to switch to —
+ * shadow the brand header back to a plain logo. (Also avoids the desktop
+ * bundle referencing @portal via the proprietary switcher's imports.)
  */
-export function AppSwitcher() {
-  return null;
+export function AppSwitcher({ collapsed }: AppSwitcherProps) {
+  return (
+    <Logo
+      variant={collapsed ? "iconOnly" : "iconAndText"}
+      iconHeight="1.6rem"
+      textHeight="1.3rem"
+    />
+  );
 }
diff --git a/frontend/editor/src/portal/components/AppShell.css b/frontend/editor/src/portal/components/AppShell.css
index 6535832399..152c45f7c5 100644
--- a/frontend/editor/src/portal/components/AppShell.css
+++ b/frontend/editor/src/portal/components/AppShell.css
@@ -43,9 +43,6 @@
 }
 
 .portal-shell__topbar-wordmark {
-  height: 1.375rem;
-  width: auto;
-  display: block;
   margin-right: auto;
 }
 
diff --git a/frontend/editor/src/portal/components/AppShell.tsx b/frontend/editor/src/portal/components/AppShell.tsx
index c50b4000e9..77c8f90686 100644
--- a/frontend/editor/src/portal/components/AppShell.tsx
+++ b/frontend/editor/src/portal/components/AppShell.tsx
@@ -3,11 +3,9 @@ import { useTranslation } from "react-i18next";
 import { useLocation } from "react-router-dom";
 import { ActionIcon } from "@app/ui";
 import { Sidebar } from "@portal/components/Sidebar";
-import { useTheme } from "@portal/contexts/ThemeContext";
 import { useUI } from "@portal/contexts/UIContext";
 import { MenuIcon, SearchIcon } from "@portal/components/icons";
-import wordmarkLight from "@app/assets/brand/modern-logo/StirlingProcessorLogoBlackText.svg";
-import wordmarkDark from "@app/assets/brand/modern-logo/StirlingProcessorLogoWhiteText.svg";
+import { Logo } from "@app/ui/Logo";
 import "@portal/components/AppShell.css";
 
 /**
@@ -17,7 +15,6 @@ import "@portal/components/AppShell.css";
  */
 function MobileTopbar() {
   const { t } = useTranslation();
-  const { theme } = useTheme();
   const { mobileNavOpen, toggleMobileNav, openSearch } = useUI();
   return (
     <header className="portal-shell__topbar">
@@ -30,10 +27,11 @@ function MobileTopbar() {
       >
         <MenuIcon size={20} />
       </ActionIcon>
-      <img
+      <Logo
+        variant="iconAndText"
+        iconHeight="1.6rem"
+        textHeight="1.3rem"
         className="portal-shell__topbar-wordmark"
-        src={theme === "dark" ? wordmarkDark : wordmarkLight}
-        alt={t("portal.shell.sidebar.brandSuffix")}
       />
       <ActionIcon
         variant="tertiary"
diff --git a/frontend/editor/src/portal/components/PortalSettingsHost.tsx b/frontend/editor/src/portal/components/PortalSettingsHost.tsx
index d68ad92ba5..954faeb848 100644
--- a/frontend/editor/src/portal/components/PortalSettingsHost.tsx
+++ b/frontend/editor/src/portal/components/PortalSettingsHost.tsx
@@ -75,6 +75,10 @@ export function PortalSettingsHost() {
               urlSync={false}
               initialSection={initialSection}
               extraSections={extraSections}
+              // TODO: opening Keyboard Shortcuts in the portal white-screens
+              // the app (the section expects editor-only context). Hidden here
+              // as a stopgap; fix the section properly and drop this.
+              hiddenSectionKeys={["hotkeys"]}
             />
           </ThemeProvider>
         </PreferencesProvider>
diff --git a/frontend/editor/src/portal/components/Sidebar.css b/frontend/editor/src/portal/components/Sidebar.css
index 40e1fd25f5..dfb533f8ab 100644
--- a/frontend/editor/src/portal/components/Sidebar.css
+++ b/frontend/editor/src/portal/components/Sidebar.css
@@ -2,13 +2,32 @@
   width: 15rem;
   height: 100vh;
   height: 100dvh; /* track mobile browser chrome */
-  background: var(--c-bg-raised);
-  border-right: 1px solid var(--c-border);
+  background: var(--c-bg);
   display: flex;
   flex-direction: column;
   flex-shrink: 0;
   position: sticky;
   top: 0;
+  /* Slide between the full rail and the collapsed icon rail. Overridden by the
+     drawer's transform transition under the mobile breakpoint below. */
+  transition: width var(--motion-spring);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .portal-sidebar {
+    transition: none;
+  }
+}
+
+/* Nav labels stay on one line and are clipped by the narrowing rail so they
+   reveal/hide cleanly as the width animates rather than wrapping. */
+.portal-sidebar__nav,
+.portal-sidebar__footer {
+  overflow-x: hidden;
+}
+.portal-sidebar .sui-navitem__label,
+.portal-sidebar__section-label {
+  white-space: nowrap;
 }
 
 /* Mobile close button (shared ActionIcon) — only shown inside the drawer. */
@@ -17,6 +36,11 @@
   flex-shrink: 0;
 }
 
+.portal-sidebar__collapse {
+  margin-left: auto;
+  flex-shrink: 0;
+}
+
 /* Off-canvas drawer under the shell breakpoint (keep in sync with
    AppShell.css and Sidebar.tsx). Slides from the inline-start edge so RTL
    locales get the mirrored behavior for free. */
@@ -46,58 +70,73 @@
   .portal-sidebar__close {
     display: inline-flex;
   }
+  /* Collapse is a desktop affordance; the drawer is full-width on mobile. */
+  .portal-sidebar__collapse {
+    display: none;
+  }
+}
+
+/* ---- Collapsed icon rail (desktop only) ---- */
+.portal-sidebar[data-collapsed] {
+  width: var(--nav-rail-w);
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__logo {
+  flex-direction: column;
+  height: auto;
+  padding: 0.5rem 0;
+  gap: 0.375rem;
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__collapse {
+  margin-left: 0;
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__nav {
+  padding-inline: 0.375rem;
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__section {
+  padding-inline: 0;
+  align-items: center;
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__section-label {
+  display: none;
+}
+.portal-sidebar[data-collapsed] .sui-navitem__label,
+.portal-sidebar[data-collapsed] .sui-navitem__trailing {
+  display: none;
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__navtip {
+  display: flex;
+}
+.portal-sidebar[data-collapsed] .sui-navitem {
+  justify-content: center;
+  margin-inline: 0;
+  padding-inline: 0;
+  width: 100%;
+}
+/* Neutralise the active-item edge-bar geometry (negative margins + overhang)
+   that assumes the full-width rail. */
+.portal-sidebar[data-collapsed] .sui-navitem.is-active {
+  width: 100%;
+  margin-inline: 0;
+  border-left: none;
+  border-radius: 0.5rem;
+  padding-left: 0;
+}
+.portal-sidebar[data-collapsed] .portal-sidebar__footer {
+  margin-inline: 0.375rem;
+  padding-inline: 0;
+  align-items: center;
 }
 
-/* Logo block */
 .portal-sidebar__logo {
   height: 3.1875rem; /* 51px */
   padding: 0 0.875rem;
   display: flex;
   align-items: center;
-  gap: 0.4375rem;
-  border-bottom: 1px solid var(--c-border-subtle);
+  gap: 0.5rem;
 }
 
-/* Brand mark (parallelogram icon) leading the wordmark; same in both themes. */
-.portal-sidebar__mark {
-  height: 1.5rem;
-  width: auto;
-  display: block;
-  flex-shrink: 0;
-}
-
-/* Stirling wordmark (theme-switched in Sidebar.tsx); matches the editor's
-   22px wordmark so the two apps read as one brand. */
-.portal-sidebar__wordmark {
-  height: 1.375rem;
-  width: auto;
-  display: block;
-  flex-shrink: 0;
-}
-
-/* Show the wordmark that matches the rendered scheme (black text on light,
-   white text on dark). Keyed on data-mantine-color-scheme so it follows the
-   actual theme, not the portal's separate (and sometimes stale) theme state. */
-.portal-sidebar__wordmark--dark {
-  display: none;
-}
-[data-mantine-color-scheme="dark"] .portal-sidebar__wordmark--light {
-  display: none;
-}
-[data-mantine-color-scheme="dark"] .portal-sidebar__wordmark--dark {
-  display: block;
-}
-
-/* App switcher (down-arrow → Portal / Editor); button and menu styling live
-   with the shared AppSwitch element. */
-.portal-sidebar__app-switch {
-  margin-left: auto;
-  display: flex;
-}
-
-/* Nav body */
 .portal-sidebar__nav {
-  flex: 1 1 auto;
+  flex: 0 1 auto;
   overflow-y: auto;
   padding: 0.75rem 0.625rem;
   display: flex;
@@ -105,11 +144,20 @@
   gap: 0.5rem;
 }
 
-/* Each section is a labelled card: a small header above its nav items. */
+.portal-sidebar .sui-navitem {
+  margin-inline: 0.25rem;
+  padding-inline: 0.625rem;
+}
+
+.portal-sidebar .sui-navitem.is-active {
+  width: calc(100% + 0.75rem);
+  margin-inline: -0.375rem;
+  border-radius: 0;
+  border-left: 3px solid var(--c-primary);
+  padding-left: calc(1.25rem - 3px);
+}
+
 .portal-sidebar__section {
-  background: var(--c-surface);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 0.625rem;
   padding: 0.5rem 0.375rem 0.375rem;
   display: flex;
   flex-direction: column;
@@ -119,7 +167,7 @@
 .portal-sidebar__section-label {
   margin: 0;
   padding: 0 0.5rem;
-  font-size: 0.6875rem;
+  font-size: 0.8125rem;
   font-weight: 600;
   letter-spacing: 0.02em;
   color: var(--c-text-subtle);
@@ -131,10 +179,9 @@
   gap: 0.125rem;
 }
 
-/* Footer */
 .portal-sidebar__footer {
-  border-top: 1px solid var(--c-border-subtle);
-  padding: 0.5rem 0.625rem 0.75rem;
+  margin: 0 0.625rem 0.75rem;
+  padding: 0.5rem 0.375rem;
   display: flex;
   flex-direction: column;
   gap: 0.5rem;
diff --git a/frontend/editor/src/portal/components/Sidebar.tsx b/frontend/editor/src/portal/components/Sidebar.tsx
index a6f2a97a01..54a66a8e1a 100644
--- a/frontend/editor/src/portal/components/Sidebar.tsx
+++ b/frontend/editor/src/portal/components/Sidebar.tsx
@@ -1,16 +1,14 @@
 import { useMediaQuery } from "@mantine/hooks";
-import { ActionIcon, NavItem } from "@app/ui";
-import { AppSwitch } from "@app/components/shared/AppSwitch";
+import { Tooltip } from "@mantine/core";
+import { ActionIcon, NavItem, NavSurface } from "@app/ui";
+import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
+import { SidebarToggleIcon } from "@app/components/shared/SidebarToggleIcon";
 import { useTranslation } from "react-i18next";
 import { useNavigate } from "react-router-dom";
 import { useView, type ViewId } from "@portal/contexts/ViewContext";
-import { useTheme } from "@portal/contexts/ThemeContext";
 import { useUI } from "@portal/contexts/UIContext";
 import { LinkAccountFooterItem } from "@portal/components/LinkAccountFooterItem";
 import { EDITOR_URL, EDITOR_IS_SAME_APP } from "@portal/auth/editorUrl";
-import mark from "@app/assets/brand/modern-logo/StirlingProcessorLogoNoText.svg";
-import wordmarkLight from "@app/assets/brand/modern-logo/StirlingLogoBlackText.svg";
-import wordmarkDark from "@app/assets/brand/modern-logo/StirlingLogoWhiteText.svg";
 import { CloseIcon, SettingsIcon } from "@portal/components/icons";
 import {
   GROUP_PROCESSOR,
@@ -30,14 +28,23 @@ const MOBILE_QUERY = "(max-width: 48rem)";
 
 export function Sidebar() {
   const { activeView, setActiveView } = useView();
-  const { theme } = useTheme();
-  const { openSettings, mobileNavOpen, closeMobileNav } = useUI();
+  const {
+    openSettings,
+    mobileNavOpen,
+    closeMobileNav,
+    sidebarCollapsed,
+    toggleSidebarCollapsed,
+  } = useUI();
   const { t } = useTranslation();
   const navigate = useNavigate();
   const isMobile = useMediaQuery(MOBILE_QUERY, false, {
     getInitialValueInEffect: false,
   });
 
+  // Collapse is a desktop-only affordance: on mobile the sidebar is an
+  // off-canvas drawer, so the icon-rail state never applies there.
+  const collapsed = sidebarCollapsed && !isMobile;
+
   // Editor and portal are one SPA when the editor serves this origin's root, so
   // the switch stays client-side; an absolute EDITOR_URL (dev cross-app setup)
   // needs a full page load.
@@ -50,25 +57,35 @@ export function Sidebar() {
   // a takeover modal (matching the marketing prototype).
 
   function renderGroup(entries: NavEntry[]) {
-    return entries.map((entry) => (
-      <NavItem
-        key={entry.id}
-        id={entry.id}
-        label={t(`portal.nav.${entry.id}`)}
-        icon={entry.icon}
-        isActive={activeView === entry.id}
-        onClick={(id) => {
-          // Route changes also close the drawer (AppShell), but re-selecting the
-          // active view or opening an external tab changes no route — close here.
-          closeMobileNav();
-          if (entry.externalUrl) {
-            window.open(entry.externalUrl, "_blank", "noopener,noreferrer");
-          } else {
-            setActiveView(id as ViewId);
-          }
-        }}
-      />
-    ));
+    return entries.map((entry) => {
+      const label = t(`portal.nav.${entry.id}`);
+      const item = (
+        <NavItem
+          key={entry.id}
+          id={entry.id}
+          label={label}
+          icon={entry.icon}
+          isActive={activeView === entry.id}
+          onClick={(id) => {
+            // Route changes also close the drawer (AppShell), but re-selecting the
+            // active view or opening an external tab changes no route — close here.
+            closeMobileNav();
+            if (entry.externalUrl) {
+              window.open(entry.externalUrl, "_blank", "noopener,noreferrer");
+            } else {
+              setActiveView(id as ViewId);
+            }
+          }}
+        />
+      );
+      return collapsed ? (
+        <Tooltip key={entry.id} label={label} position="right" withinPortal>
+          <div className="portal-sidebar__navtip">{item}</div>
+        </Tooltip>
+      ) : (
+        item
+      );
+    });
   }
 
   return (
@@ -76,37 +93,30 @@ export function Sidebar() {
       className={
         mobileNavOpen ? "portal-sidebar portal-sidebar--open" : "portal-sidebar"
       }
+      data-collapsed={collapsed || undefined}
       aria-label={t("portal.shell.sidebar.primaryNav")}
       // Off-canvas on mobile: remove from the tab order and accessibility tree.
       inert={isMobile && !mobileNavOpen}
     >
       <div className="portal-sidebar__logo">
-        <img
-          className="portal-sidebar__mark"
-          src={mark}
-          alt=""
-          aria-hidden="true"
-        />
-        {/* Both wordmarks render; CSS shows the right one per the actual color
-            scheme (data-mantine-color-scheme), so it tracks the rendered theme
-            rather than the portal's separate theme state. */}
-        <img
-          className="portal-sidebar__wordmark portal-sidebar__wordmark--light"
-          src={wordmarkLight}
-          alt="Stirling"
-        />
-        <img
-          className="portal-sidebar__wordmark portal-sidebar__wordmark--dark"
-          src={wordmarkDark}
-          alt="Stirling"
+        <BrandSwitcher
+          current="processor"
+          onSwitch={goToEditor}
+          collapsed={collapsed}
         />
 
-        <AppSwitch
-          className="portal-sidebar__app-switch"
-          current="processor"
-          theme={theme}
-          onSwitch={goToEditor}
-        />
+        <ActionIcon
+          variant="tertiary"
+          className="portal-sidebar__collapse"
+          aria-label={
+            collapsed
+              ? t("fileSidebar.expand", "Expand sidebar")
+              : t("fileSidebar.collapse", "Collapse sidebar")
+          }
+          onClick={toggleSidebarCollapsed}
+        >
+          <SidebarToggleIcon size={18} />
+        </ActionIcon>
 
         <ActionIcon
           variant="tertiary"
@@ -120,18 +130,22 @@ export function Sidebar() {
 
       <nav className="portal-sidebar__nav">
         {NAV_SECTIONS.map((section) => (
-          <section key={section.labelKey} className="portal-sidebar__section">
+          <NavSurface
+            key={section.labelKey}
+            as="section"
+            className="portal-sidebar__section"
+          >
             <h2 className="portal-sidebar__section-label">
               {t(section.labelKey)}
             </h2>
             <div className="portal-sidebar__group">
               {renderGroup(section.entries)}
             </div>
-          </section>
+          </NavSurface>
         ))}
       </nav>
 
-      <div className="portal-sidebar__footer">
+      <NavSurface className="portal-sidebar__footer">
         <LinkAccountFooterItem />
         <NavItem
           id="settings"
@@ -139,7 +153,7 @@ export function Sidebar() {
           icon={<SettingsIcon />}
           onClick={() => openSettings()}
         />
-      </div>
+      </NavSurface>
     </aside>
   );
 }
diff --git a/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx b/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx
index 63defa92ac..daa066bd70 100644
--- a/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx
+++ b/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx
@@ -68,7 +68,7 @@ export function LinkedInstancesTable({
             {t("portal.accountLink.instances.revoked", "Revoked")}
           </StatusBadge>
         ) : (
-          <StatusBadge tone="success" size="sm" pulse>
+          <StatusBadge tone="success" size="sm">
             {t("portal.accountLink.instances.active", "Active")}
           </StatusBadge>
         ),
diff --git a/frontend/editor/src/portal/components/editor-admin/DeploymentSummaryStrip.tsx b/frontend/editor/src/portal/components/editor-admin/DeploymentSummaryStrip.tsx
index 8546c4364b..2a23b4992a 100644
--- a/frontend/editor/src/portal/components/editor-admin/DeploymentSummaryStrip.tsx
+++ b/frontend/editor/src/portal/components/editor-admin/DeploymentSummaryStrip.tsx
@@ -1,4 +1,5 @@
 import { MetricCard, MetricStrip, Skeleton } from "@app/ui";
+import { EditorIcon } from "@portal/components/icons";
 import type { DeploymentSummary } from "@portal/api/editorDeploy";
 
 interface Props {
@@ -10,16 +11,16 @@ interface Props {
 export function DeploymentSummaryStrip({ summary, loading }: Props) {
   if (loading || !summary) {
     return (
-      <MetricStrip>
+      <MetricStrip layout="row" leading={<EditorIcon size={22} />}>
         {Array.from({ length: 4 }).map((_, i) => (
-          <Skeleton key={i} height="5.5rem" />
+          <Skeleton key={i} width="5rem" height="2rem" />
         ))}
       </MetricStrip>
     );
   }
 
   return (
-    <MetricStrip>
+    <MetricStrip layout="row" leading={<EditorIcon size={22} />}>
       {summary.metrics.map((m) => (
         <MetricCard
           key={m.label}
diff --git a/frontend/editor/src/portal/components/editor-admin/DeploymentTargets.tsx b/frontend/editor/src/portal/components/editor-admin/DeploymentTargets.tsx
index 2348b6311e..0d97441f3c 100644
--- a/frontend/editor/src/portal/components/editor-admin/DeploymentTargets.tsx
+++ b/frontend/editor/src/portal/components/editor-admin/DeploymentTargets.tsx
@@ -70,11 +70,7 @@ export function DeploymentTargets({ targets, onUpgrade }: Props) {
                   {target.tagline}
                 </p>
               </div>
-              <StatusBadge
-                tone={STATE_BADGE_TONE[target.state]}
-                size="sm"
-                pulse={target.state === "running"}
-              >
+              <StatusBadge tone={STATE_BADGE_TONE[target.state]} size="sm">
                 {t(`portal.editorAdmin.targets.state.${target.state}`)}
               </StatusBadge>
             </div>
diff --git a/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx b/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx
index a83d560038..a61193f17a 100644
--- a/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx
+++ b/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx
@@ -69,11 +69,7 @@ export function InstanceHealthTable({ instances }: Props) {
       key: "status",
       header: t("portal.editorAdmin.health.columns.status"),
       render: (i) => (
-        <StatusBadge
-          tone={INSTANCE_STATUS_TONE[i.status]}
-          size="sm"
-          pulse={i.status === "healthy"}
-        >
+        <StatusBadge tone={INSTANCE_STATUS_TONE[i.status]} size="sm">
           {t(INSTANCE_STATUS_LABEL[i.status])}
         </StatusBadge>
       ),
diff --git a/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx b/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx
index a415abf107..da9831ec4c 100644
--- a/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx
+++ b/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx
@@ -5,6 +5,7 @@ import {
   Card,
   EmptyState,
   MetricCard,
+  MetricStrip,
   StatusBadge,
   Table,
   Tabs,
@@ -140,7 +141,7 @@ export function AuditTab() {
       />
 
       {data && (
-        <section className="portal-infra__metrics">
+        <MetricStrip layout="row">
           <MetricCard
             label={t("portal.infrastructure.audit.metrics.totalEvents")}
             value={data.summary.totalEvents.toLocaleString()}
@@ -157,7 +158,7 @@ export function AuditTab() {
             label={t("portal.infrastructure.audit.metrics.config")}
             value={data.summary.config.toLocaleString()}
           />
-        </section>
+        </MetricStrip>
       )}
 
       {!forbidden && (
diff --git a/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx b/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx
index 59e4b04d54..8e96e4d997 100644
--- a/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx
+++ b/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx
@@ -74,11 +74,7 @@ export function DeploymentsTab() {
       key: "status",
       header: t("portal.infrastructure.deployments.regionColumns.status"),
       render: (r) => (
-        <StatusBadge
-          tone={REGION_TONE[r.status]}
-          size="sm"
-          pulse={r.status === "healthy"}
-        >
+        <StatusBadge tone={REGION_TONE[r.status]} size="sm">
           {t(REGION_LABEL[r.status])}
         </StatusBadge>
       ),
diff --git a/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx b/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx
index 86b563aabd..6d097b33af 100644
--- a/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx
+++ b/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx
@@ -5,6 +5,7 @@ import {
   Chip,
   EmptyState,
   MetricCard,
+  MetricStrip,
   ProgressBar,
   Select,
   StatusBadge,
@@ -65,11 +66,7 @@ export function ModelsTab() {
       key: "status",
       header: t("portal.infrastructure.models.columns.status"),
       render: (m) => (
-        <StatusBadge
-          tone={MODEL_TONE[m.status]}
-          size="sm"
-          pulse={m.status === "active"}
-        >
+        <StatusBadge tone={MODEL_TONE[m.status]} size="sm">
           {t(MODEL_LABEL[m.status])}
         </StatusBadge>
       ),
@@ -174,7 +171,7 @@ export function ModelsTab() {
       />
 
       {data && (
-        <section className="portal-infra__metrics">
+        <MetricStrip layout="row">
           <MetricCard
             label={t("portal.infrastructure.models.metrics.activeModels")}
             value={data.summary.activeModels}
@@ -193,7 +190,7 @@ export function ModelsTab() {
                 : t("portal.infrastructure.models.metrics.included")
             }
           />
-        </section>
+        </MetricStrip>
       )}
 
       <section>
diff --git a/frontend/editor/src/portal/components/pipelines/KpiStrip.tsx b/frontend/editor/src/portal/components/pipelines/KpiStrip.tsx
index 39bac738c9..a306536718 100644
--- a/frontend/editor/src/portal/components/pipelines/KpiStrip.tsx
+++ b/frontend/editor/src/portal/components/pipelines/KpiStrip.tsx
@@ -1,5 +1,6 @@
 import { useTranslation } from "react-i18next";
 import { MetricCard, MetricStrip } from "@app/ui";
+import { PipelinesIcon } from "@portal/components/icons";
 import type { PipelinesOverviewResponse } from "@portal/api/pipelines";
 
 /**
@@ -22,7 +23,7 @@ interface KpiStripProps {
 export function KpiStrip({ data, loading }: KpiStripProps) {
   const { t } = useTranslation();
   return (
-    <MetricStrip>
+    <MetricStrip layout="row" leading={<PipelinesIcon size={22} />}>
       {KPI_LABEL_KEYS.map((labelKey, i) => {
         const k = loading ? undefined : data?.kpis[i];
         return (
diff --git a/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx b/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx
index 38c46547ca..e0ac5970f6 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx
+++ b/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx
@@ -49,11 +49,7 @@ export function PipelinesTable({ pipelines, onRowClick }: PipelinesTableProps) {
         key: "status",
         header: t("portal.pipelines.table.status"),
         render: (p) => (
-          <StatusBadge
-            tone={STATUS_TONE[p.status]}
-            size="sm"
-            pulse={p.status === "active"}
-          >
+          <StatusBadge tone={STATUS_TONE[p.status]} size="sm">
             {t(`portal.pipelines.status.${p.status}`)}
           </StatusBadge>
         ),
diff --git a/frontend/editor/src/portal/components/policies/CatalogueSummary.tsx b/frontend/editor/src/portal/components/policies/CatalogueSummary.tsx
index aab40030d5..c7e2fd4f26 100644
--- a/frontend/editor/src/portal/components/policies/CatalogueSummary.tsx
+++ b/frontend/editor/src/portal/components/policies/CatalogueSummary.tsx
@@ -1,5 +1,6 @@
 import { useTranslation } from "react-i18next";
 import { MetricCard, MetricStrip } from "@app/ui";
+import { PoliciesIcon } from "@portal/components/icons";
 import type { PoliciesResponse } from "@portal/api/policies";
 
 interface CatalogueSummaryProps {
@@ -16,7 +17,7 @@ export function CatalogueSummary({ data, loading }: CatalogueSummaryProps) {
   const { t } = useTranslation();
   const s = loading ? undefined : data?.summary;
   return (
-    <MetricStrip>
+    <MetricStrip layout="row" leading={<PoliciesIcon size={22} />}>
       <MetricCard
         label={t("portal.policies.summary.active.label")}
         value={s ? s.active : "—"}
diff --git a/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx b/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx
index 6986f66f74..f8d7ea9f9d 100644
--- a/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx
+++ b/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx
@@ -100,11 +100,7 @@ export function PolicyCatalogueTable({
           if (entry.policy) {
             const paused = entry.policy.state.status === "paused";
             return (
-              <StatusBadge
-                tone={paused ? "warning" : "success"}
-                size="sm"
-                pulse={!paused}
-              >
+              <StatusBadge tone={paused ? "warning" : "success"} size="sm">
                 {paused
                   ? t("portal.policies.status.paused")
                   : t("portal.policies.status.active")}
diff --git a/frontend/editor/src/portal/components/policies/PolicyCategoryCard.tsx b/frontend/editor/src/portal/components/policies/PolicyCategoryCard.tsx
index c5169217dd..58fee82d83 100644
--- a/frontend/editor/src/portal/components/policies/PolicyCategoryCard.tsx
+++ b/frontend/editor/src/portal/components/policies/PolicyCategoryCard.tsx
@@ -87,7 +87,6 @@ export function PolicyCategoryCard({
           <StatusBadge
             tone={status === "paused" ? "warning" : "success"}
             size="sm"
-            pulse={status !== "paused"}
           >
             {status === "paused"
               ? t("portal.policies.status.paused")
diff --git a/frontend/editor/src/portal/components/policies/PolicyDetailPanel.tsx b/frontend/editor/src/portal/components/policies/PolicyDetailPanel.tsx
index e198fd92c8..336097d9fa 100644
--- a/frontend/editor/src/portal/components/policies/PolicyDetailPanel.tsx
+++ b/frontend/editor/src/portal/components/policies/PolicyDetailPanel.tsx
@@ -196,10 +196,7 @@ export function PolicyDetailPanel({
       >
         {/* Status + trigger strip */}
         <div className="portal-policies__detail-status">
-          <StatusBadge
-            tone={isPaused ? "warning" : "success"}
-            pulse={!isPaused}
-          >
+          <StatusBadge tone={isPaused ? "warning" : "success"}>
             {isPaused
               ? t("portal.policies.status.paused")
               : t("portal.policies.status.active")}
diff --git a/frontend/editor/src/portal/components/sources/KpiStrip.tsx b/frontend/editor/src/portal/components/sources/KpiStrip.tsx
index 16e8f547f3..970a0a7982 100644
--- a/frontend/editor/src/portal/components/sources/KpiStrip.tsx
+++ b/frontend/editor/src/portal/components/sources/KpiStrip.tsx
@@ -1,5 +1,6 @@
 import { useTranslation } from "react-i18next";
 import { MetricCard, MetricStrip } from "@app/ui";
+import { SourcesIcon } from "@portal/components/icons";
 import type { SourcesResponse } from "@portal/api/sources";
 
 /**
@@ -22,7 +23,7 @@ interface KpiStripProps {
 export function KpiStrip({ data, loading }: KpiStripProps) {
   const { t } = useTranslation();
   return (
-    <MetricStrip>
+    <MetricStrip layout="row" leading={<SourcesIcon size={22} />}>
       {KPI_LABEL_KEYS.map((labelKey, i) => {
         const k = loading ? undefined : data?.kpis[i];
         return (
diff --git a/frontend/editor/src/portal/components/sources/SourcesTable.tsx b/frontend/editor/src/portal/components/sources/SourcesTable.tsx
index 23017299a1..9d99a8c8ea 100644
--- a/frontend/editor/src/portal/components/sources/SourcesTable.tsx
+++ b/frontend/editor/src/portal/components/sources/SourcesTable.tsx
@@ -61,11 +61,7 @@ export function SourcesTable({ sources, onRowClick }: SourcesTableProps) {
         key: "status",
         header: t("portal.sources.table.status"),
         render: (s) => (
-          <StatusBadge
-            tone={STATUS_TONE[s.status]}
-            size="sm"
-            pulse={s.status === "active"}
-          >
+          <StatusBadge tone={STATUS_TONE[s.status]} size="sm">
             {t(`portal.sources.status.${s.status}`)}
           </StatusBadge>
         ),
diff --git a/frontend/editor/src/portal/contexts/UIContext.tsx b/frontend/editor/src/portal/contexts/UIContext.tsx
index f55c2f5ee9..fbf572d3cc 100644
--- a/frontend/editor/src/portal/contexts/UIContext.tsx
+++ b/frontend/editor/src/portal/contexts/UIContext.tsx
@@ -17,6 +17,8 @@ interface UIContextValue {
   openMobileNav: () => void;
   closeMobileNav: () => void;
   toggleMobileNav: () => void;
+  sidebarCollapsed: boolean;
+  toggleSidebarCollapsed: () => void;
 
   assistantOpen: boolean;
   openAssistant: () => void;
@@ -52,9 +54,29 @@ interface UIContextValue {
 
 const UIContext = createContext<UIContextValue | null>(null);
 
+const SIDEBAR_COLLAPSED_KEY = "stirling.portalSidebarCollapsed";
+
+function readSidebarCollapsed(): boolean {
+  try {
+    return window.localStorage.getItem(SIDEBAR_COLLAPSED_KEY) === "true";
+  } catch {
+    return false;
+  }
+}
+
+function writeSidebarCollapsed(collapsed: boolean): void {
+  try {
+    window.localStorage.setItem(SIDEBAR_COLLAPSED_KEY, String(collapsed));
+  } catch {
+    // private mode / quota: silently no-op
+  }
+}
+
 export function UIProvider({ children }: { children: ReactNode }) {
   const [searchOpen, setSearchOpen] = useState(false);
   const [mobileNavOpen, setMobileNavOpen] = useState(false);
+  const [sidebarCollapsed, setSidebarCollapsed] =
+    useState(readSidebarCollapsed);
   const [assistantOpen, setAssistantOpen] = useState(false);
   const [settingsOpen, setSettingsOpen] = useState(false);
   const [settingsInitialSection, setSettingsInitialSection] = useState<
@@ -85,6 +107,14 @@ export function UIProvider({ children }: { children: ReactNode }) {
       closeMobileNav: () => setMobileNavOpen(false),
       toggleMobileNav: () => setMobileNavOpen((o) => !o),
 
+      sidebarCollapsed,
+      toggleSidebarCollapsed: () =>
+        setSidebarCollapsed((c) => {
+          const next = !c;
+          writeSidebarCollapsed(next);
+          return next;
+        }),
+
       assistantOpen,
       openAssistant: () => setAssistantOpen(true),
       closeAssistant: () => setAssistantOpen(false),
@@ -129,6 +159,7 @@ export function UIProvider({ children }: { children: ReactNode }) {
     [
       searchOpen,
       mobileNavOpen,
+      sidebarCollapsed,
       assistantOpen,
       settingsOpen,
       settingsInitialSection,
diff --git a/frontend/editor/src/portal/views/Infrastructure.css b/frontend/editor/src/portal/views/Infrastructure.css
index 2bff218e96..cd532daeeb 100644
--- a/frontend/editor/src/portal/views/Infrastructure.css
+++ b/frontend/editor/src/portal/views/Infrastructure.css
@@ -185,25 +185,6 @@
   text-align: right;
 }
 
-/* Metric strip (audit) */
-.portal-infra__metrics {
-  display: grid;
-  grid-template-columns: repeat(4, 1fr);
-  gap: 0.75rem;
-}
-
-@media (max-width: 50rem) {
-  .portal-infra__metrics {
-    grid-template-columns: repeat(2, 1fr);
-  }
-}
-
-@media (max-width: 30rem) {
-  .portal-infra__metrics {
-    grid-template-columns: 1fr;
-  }
-}
-
 /* ── API keys ───────────────────────────────────────────────────────────── */
 .portal-infra__keys {
   display: flex;
diff --git a/frontend/editor/src/proprietary/auth/ui/AuthShell.module.css b/frontend/editor/src/proprietary/auth/ui/AuthShell.module.css
index bb0e418d88..9690a8f08f 100644
--- a/frontend/editor/src/proprietary/auth/ui/AuthShell.module.css
+++ b/frontend/editor/src/proprietary/auth/ui/AuthShell.module.css
@@ -5,7 +5,7 @@
   flex-direction: column;
   align-items: center;
   justify-content: center;
-  background-color: var(--auth-bg-color);
+  background-color: var(--c-bg);
   padding: 1.5rem 1.5rem 0;
   font-family:
     -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
diff --git a/frontend/editor/src/proprietary/auth/ui/AuthSignupPrompt.tsx b/frontend/editor/src/proprietary/auth/ui/AuthSignupPrompt.tsx
index baaad54d7b..3a9cbf45f4 100644
--- a/frontend/editor/src/proprietary/auth/ui/AuthSignupPrompt.tsx
+++ b/frontend/editor/src/proprietary/auth/ui/AuthSignupPrompt.tsx
@@ -9,7 +9,7 @@ interface AuthSignupPromptProps {
 
 /**
  * "Don't have an account? Sign up" row shown beneath the login form. The prompt
- * is muted; the action reads as a brand-coloured link.
+ * is muted; the action reads as a blue link so it pops.
  */
 export default function AuthSignupPrompt({ onSignUp }: AuthSignupPromptProps) {
   const { t } = useTranslation();
@@ -19,7 +19,7 @@ export default function AuthSignupPrompt({ onSignUp }: AuthSignupPromptProps) {
       <Button
         type="button"
         variant="quiet"
-        accent="brand"
+        accent="default"
         onClick={onSignUp}
         className="auth-signup-link"
       >
diff --git a/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.tsx b/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.tsx
index e83715a802..7cd0093a6b 100644
--- a/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.tsx
+++ b/frontend/editor/src/proprietary/auth/ui/EmailPasswordForm.tsx
@@ -136,9 +136,7 @@ export default function EmailPasswordForm({
         fontSize="sm"
         loading={isSubmitting}
         className="auth-submit"
-        // Stirling-red brand CTA; the brand accent sets the colour inline so the
-        // host app's Mantine primaryColor can't win (editor vs portal differ).
-        accent="brand"
+        accent="default"
       >
         {submitButtonText}
       </Button>
diff --git a/frontend/editor/src/proprietary/auth/ui/auth-theme.css b/frontend/editor/src/proprietary/auth/ui/auth-theme.css
index 8580d59e0b..520df4e510 100644
--- a/frontend/editor/src/proprietary/auth/ui/auth-theme.css
+++ b/frontend/editor/src/proprietary/auth/ui/auth-theme.css
@@ -2,7 +2,6 @@
 
 :root {
   /* Auth page colors (light mode) */
-  --auth-bg-color: var(--p-gray-100);
   --auth-card-bg: #ffffff;
   --auth-label-text: var(--p-gray-700);
   --auth-input-border: var(--p-gray-300);
@@ -33,7 +32,6 @@
 }
 
 [data-mantine-color-scheme="dark"] {
-  --auth-bg-color: var(--c-surface-sunken);
   --auth-card-bg: var(--c-surface);
   --auth-label-text: var(--c-text-muted);
   --auth-input-border: var(--c-border);
diff --git a/frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.stories.tsx b/frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.stories.tsx
deleted file mode 100644
index 3192b69303..0000000000
--- a/frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.stories.tsx
+++ /dev/null
@@ -1,22 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { StirlingLogoOutline } from "@app/components/agents/StirlingLogoOutline";
-
-const meta = {
-  title: "Agents/StirlingLogoOutline",
-  component: StirlingLogoOutline,
-  parameters: { layout: "centered" },
-  args: {
-    size: 20,
-  },
-} satisfies Meta<typeof StirlingLogoOutline>;
-
-export default meta;
-type Story = StoryObj<typeof meta>;
-
-export const Default: Story = {};
-
-export const Large: Story = {
-  args: {
-    size: 64,
-  },
-};
diff --git a/frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.tsx b/frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.tsx
deleted file mode 100644
index c52b40df24..0000000000
--- a/frontend/editor/src/proprietary/components/agents/StirlingLogoOutline.tsx
+++ /dev/null
@@ -1,21 +0,0 @@
-/**
- * A temp stirling logo, may change in future.
- */
-export function StirlingLogoOutline({ size = 20 }: { size?: number }) {
-  return (
-    <svg
-      xmlns="http://www.w3.org/2000/svg"
-      width={size}
-      height={size}
-      viewBox="0 0 192 192"
-      fill="currentColor"
-      aria-hidden="true"
-    >
-      <path
-        d="M68.48 102.4 L184.73 6.45 L184.73 96.05 L68.48 192 Z"
-        opacity="0.5"
-      />
-      <path d="M7.26 95.83 L123.37 0 L123.37 89.5 L7.26 185.33 Z" />
-    </svg>
-  );
-}
diff --git a/frontend/editor/src/proprietary/components/chat/ChatPanel.css b/frontend/editor/src/proprietary/components/chat/ChatPanel.css
index e95078bcdf..f301b822af 100644
--- a/frontend/editor/src/proprietary/components/chat/ChatPanel.css
+++ b/frontend/editor/src/proprietary/components/chat/ChatPanel.css
@@ -145,15 +145,11 @@
 /* Same treatment for the input pill and quick-action cards. */
 [data-mantine-color-scheme="dark"] .chat-panel-input {
   background: transparent;
-  box-shadow:
-    0 0 0 1px var(--c-border-subtle),
-    0 6px 16px rgba(0, 0, 0, 0.25);
+  box-shadow: 0 6px 16px rgba(0, 0, 0, 0.25);
 }
 
 [data-mantine-color-scheme="dark"] .chat-panel-input:focus-within {
-  box-shadow:
-    0 0 0 1px color-mix(in srgb, var(--mantine-color-blue-3) 40%, transparent),
-    0 8px 22px color-mix(in srgb, var(--mantine-color-blue-6) 18%, transparent);
+  box-shadow: 0 8px 22px color-mix(in srgb, var(--c-btn-solid) 18%, transparent);
 }
 
 [data-mantine-color-scheme="dark"] .chat-quick-action {
@@ -331,16 +327,12 @@
   border-radius: 1.1rem;
   background: var(--mantine-color-body);
   flex-shrink: 0;
-  box-shadow:
-    0 0 0 1px rgba(0, 0, 0, 0.04),
-    0 4px 14px rgba(0, 0, 0, 0.08);
+  box-shadow: 0 4px 14px rgba(0, 0, 0, 0.08);
   transition: box-shadow 160ms ease-out;
 }
 
 .chat-panel-input:focus-within {
-  box-shadow:
-    0 0 0 1px color-mix(in srgb, var(--mantine-color-blue-6) 20%, transparent),
-    0 6px 18px color-mix(in srgb, var(--mantine-color-blue-6) 12%, transparent);
+  box-shadow: 0 6px 18px color-mix(in srgb, var(--c-btn-solid) 12%, transparent);
 }
 
 /* Kill the Mantine Textarea's own border/outline — the wrapper owns the chrome. */
@@ -479,12 +471,12 @@
 }
 
 .chat-bubble-user {
-  background: var(--mantine-color-blue-filled) !important;
-  color: white !important;
+  background: var(--c-btn-solid) !important;
+  color: var(--c-btn-inverse) !important;
 }
 
 .chat-bubble-user * {
-  color: white !important;
+  color: var(--c-btn-inverse) !important;
 }
 
 /* Assistant messages: no bubble, free-flowing with side padding */
@@ -517,12 +509,23 @@
   padding: 0.2rem 0.5rem 0.35rem;
 }
 
+[data-mantine-color-scheme="dark"] .chat-panel__header .sui-panelhdr__icon,
+.chat-panel__header .sui-panelhdr__icon {
+  background: transparent;
+  border: none;
+}
+
+.chat-panel__header .chat-panel__header-mark {
+  width: auto;
+  height: 26px;
+}
+
 .chat-progress-live__logo {
   display: inline-flex;
   align-items: center;
   justify-content: center;
   flex-shrink: 0;
-  color: var(--mantine-color-blue-filled);
+  color: var(--c-brand-mark);
 }
 
 /* Shimmer: a soft highlight sweeps left-to-right across the muted label. */
diff --git a/frontend/editor/src/proprietary/components/chat/ChatPanel.tsx b/frontend/editor/src/proprietary/components/chat/ChatPanel.tsx
index d0ff7e19e3..2ff5ccfbe9 100644
--- a/frontend/editor/src/proprietary/components/chat/ChatPanel.tsx
+++ b/frontend/editor/src/proprietary/components/chat/ChatPanel.tsx
@@ -41,7 +41,8 @@ import {
 import { formatRelativeTime } from "@app/utils/timeUtils";
 import { useTranslatedToolCatalog } from "@app/data/useTranslatedToolRegistry";
 import { StirlingLogoAnimated } from "@app/components/agents/StirlingLogoAnimated";
-import { StirlingLogoOutline } from "@app/components/agents/StirlingLogoOutline";
+import { BrandMark } from "@app/components/shared/BrandMark";
+import { Logo } from "@app/ui/Logo";
 import { PanelHeader } from "@app/ui/PanelHeader";
 import { ChatQuickActions } from "@app/components/chat/ChatQuickActions";
 import "@app/components/chat/ChatPanel.css";
@@ -474,8 +475,14 @@ export function ChatPanel({ onBack, backLabel }: ChatPanelProps) {
   return (
     <Box className="chat-panel chat-panel--embedded">
       <PanelHeader
-        icon={<StirlingLogoOutline size={16} />}
-        title={t("agents.stirling_name", "Stirling")}
+        icon={<BrandMark height="26px" className="chat-panel__header-mark" />}
+        title={
+          <Logo
+            variant="textOnly"
+            textHeight="17px"
+            alt={t("agents.stirling_name", "Stirling")}
+          />
+        }
         loading={isLoading}
         className="chat-panel__header"
         barClassName="chat-panel__agent-pill-vt"
diff --git a/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx b/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx
index 8e500a0c1a..2e02db3068 100644
--- a/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx
+++ b/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx
@@ -1,28 +1,29 @@
 import { useNavigate } from "react-router-dom";
-import { useMantineColorScheme } from "@mantine/core";
 import { useAuth } from "@app/auth/context";
-import { AppSwitch } from "@app/components/shared/AppSwitch";
+import { Logo } from "@app/ui/Logo";
+import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
+import { type AppSwitcherProps } from "@core/components/shared/AppSwitcher";
 import { PORTAL_BASENAME } from "@app/routes/portalBasename";
 
-/**
- * Sidebar app switcher between the editor and the admin portal. Both are
- * route-sets of one SPA (the portal mounts at PORTAL_BASENAME), so switching
- * is a client-side navigation. Hidden for users without portal access — they
- * have nowhere to switch to. Renders the same AppSwitch element as the
- * portal's sidebar.
- */
-export function AppSwitcher() {
+export function AppSwitcher({ collapsed }: AppSwitcherProps) {
   const { portalAccess } = useAuth();
   const navigate = useNavigate();
-  const { colorScheme } = useMantineColorScheme();
 
-  if (!portalAccess) return null;
+  if (!portalAccess) {
+    return (
+      <Logo
+        variant={collapsed ? "iconOnly" : "iconAndText"}
+        iconHeight="1.6rem"
+        textHeight="1.3rem"
+      />
+    );
+  }
 
   return (
-    <AppSwitch
+    <BrandSwitcher
       current="editor"
-      theme={colorScheme === "dark" ? "dark" : "light"}
       onSwitch={() => navigate(PORTAL_BASENAME)}
+      collapsed={collapsed}
     />
   );
 }
diff --git a/frontend/editor/src/proprietary/routes/Login.tsx b/frontend/editor/src/proprietary/routes/Login.tsx
index 3e6764bf60..1686f8c795 100644
--- a/frontend/editor/src/proprietary/routes/Login.tsx
+++ b/frontend/editor/src/proprietary/routes/Login.tsx
@@ -16,10 +16,6 @@ import AuthLayout from "@app/routes/authShared/AuthLayout";
 import { useBackendProbe } from "@app/hooks/useBackendProbe";
 import { BASE_PATH, withBasePath } from "@app/constants/app";
 import { updateSupportedLanguages } from "@app/i18n";
-import {
-  DEBUG_SHOW_ALL_PROVIDERS,
-  oauthProviderConfig,
-} from "@app/auth/ui/OAuthButtons";
 import SpringLoginForm from "@app/auth/ui/SpringLoginForm";
 import AuthSignupPrompt from "@app/auth/ui/AuthSignupPrompt";
 import AuthDefaultCredentials from "@app/auth/ui/AuthDefaultCredentials";
@@ -48,10 +44,9 @@ export default function Login() {
   const { refetch } = useAppConfig();
   const { t } = useTranslation();
   const [successMessage, setSuccessMessage] = useState<string | null>(null);
-  const [showEmailForm, setShowEmailForm] = useState(false);
+  const [showEmailForm, setShowEmailForm] = useState(true);
   const [_enableLogin, setEnableLogin] = useState<boolean | null>(null);
   const [ssoAutoLogin, setSsoAutoLogin] = useState(false);
-  const [hasSSOProviders, setHasSSOProviders] = useState(false);
   const backendProbe = useBackendProbe();
   const [isFirstTimeSetup, setIsFirstTimeSetup] = useState(false);
   const [showDefaultCredentials, setShowDefaultCredentials] = useState(false);
@@ -235,26 +230,13 @@ export default function Login() {
     }
   }, [backendProbe.status, refetch]);
 
-  // Update hasSSOProviders and showEmailForm when providers or loginMethod change
+  // The email/password form is always shown when username/password auth is
+  // allowed; SSO-only mode hides it.
   useEffect(() => {
-    // In debug mode, check if any providers exist in the config
-    const hasProviders = DEBUG_SHOW_ALL_PROVIDERS
-      ? Object.keys(oauthProviderConfig).length > 0
-      : login.providers.length > 0;
-    setHasSSOProviders(hasProviders);
-
-    // Check if username/password authentication is allowed
     const userPassAllowed =
       login.loginMethod === "all" || login.loginMethod === "normal";
-
-    // Show email form if no SSO providers exist AND username/password is allowed
-    if (!hasProviders && userPassAllowed) {
-      setShowEmailForm(true);
-    } else if (!userPassAllowed) {
-      // Hide email form if username/password auth is not allowed
-      setShowEmailForm(false);
-    }
-  }, [login.providers, login.loginMethod]);
+    setShowEmailForm(userPassAllowed);
+  }, [login.loginMethod]);
 
   // Auto-login to SSO when enabled and only one SSO option exists
   useEffect(() => {
@@ -502,22 +484,6 @@ export default function Login() {
             </div>
           ) : undefined
         }
-        beforeEmailForm={
-          hasSSOProviders && !showEmailForm && isUserPassAllowed ? (
-            <div className="auth-section">
-              <Button
-                type="button"
-                variant="tertiary"
-                hover={false}
-                onClick={() => setShowEmailForm(true)}
-                disabled={login.isSubmitting}
-                className="w-full px-4 py-[0.75rem] rounded-[0.625rem] text-base font-semibold mb-2 cursor-pointer border-0 disabled:opacity-50 disabled:cursor-not-allowed auth-cta-button"
-              >
-                {t("login.useEmailInstead", "Login with email")}
-              </Button>
-            </div>
-          ) : undefined
-        }
         footer={
           <>
             {isFirstTimeSetup &&
diff --git a/frontend/editor/src/proprietary/routes/Signup.tsx b/frontend/editor/src/proprietary/routes/Signup.tsx
index 68be029969..69e2ef9929 100644
--- a/frontend/editor/src/proprietary/routes/Signup.tsx
+++ b/frontend/editor/src/proprietary/routes/Signup.tsx
@@ -135,6 +135,7 @@ export default function Signup() {
           variant="tertiary"
           onClick={() => navigate("/login")}
           className="auth-link-black"
+          style={{ color: "var(--c-primary)" }}
         >
           {t("login.logIn", "Log In")}
         </Button>
diff --git a/frontend/editor/src/saas/App.tsx b/frontend/editor/src/saas/App.tsx
index 1da92bd190..32af9a6782 100644
--- a/frontend/editor/src/saas/App.tsx
+++ b/frontend/editor/src/saas/App.tsx
@@ -25,7 +25,7 @@ import { LoginLandingRedirect } from "@app/components/LoginLandingRedirect";
 
 // Import global styles
 import "@app/styles/tailwind.css";
-import "@app/styles/saas-theme.css";
+import "@app/auth/ui/auth-theme.css";
 import "@app/styles/cookieconsent.css";
 import "@app/styles/index.css";
 
diff --git a/frontend/editor/src/saas/components/onboarding/OnboardingChecklist.module.css b/frontend/editor/src/saas/components/onboarding/OnboardingChecklist.module.css
index 344743473a..888401b47d 100644
--- a/frontend/editor/src/saas/components/onboarding/OnboardingChecklist.module.css
+++ b/frontend/editor/src/saas/components/onboarding/OnboardingChecklist.module.css
@@ -1,9 +1,12 @@
+/* Sits as a direct child of the sidebar, so the rail's own padding + gap
+   handle the spacing; a margin here would inset it narrower than the
+   sibling nav-surface boxes. Matches those boxes' surface treatment — the
+   brand mark in the header is what draws the eye, so no louder border. */
 .card {
-  margin: 0.5rem;
+  margin: 0;
   padding: 0.625rem 0.75rem 0.6875rem;
-  background: var(--mantine-color-body);
-  border: 1px solid
-    color-mix(in srgb, var(--mantine-color-default-border) 45%, transparent);
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
   border-radius: 0.625rem;
   box-shadow: none;
 }
diff --git a/frontend/editor/src/saas/components/shared/AppConfigModal.tsx b/frontend/editor/src/saas/components/shared/AppConfigModal.tsx
index 3f7b4de5ab..0d534fa088 100644
--- a/frontend/editor/src/saas/components/shared/AppConfigModal.tsx
+++ b/frontend/editor/src/saas/components/shared/AppConfigModal.tsx
@@ -33,6 +33,8 @@ interface AppConfigModalProps {
   initialSection?: NavKey | null;
   /** Host-specific sections appended after the saas registry sections. */
   extraSections?: ConfigNavSection[];
+  /** Registry section keys to drop, for hosts a section can't run in. */
+  hiddenSectionKeys?: NavKey[];
 }
 
 const AppConfigModal: React.FC<AppConfigModalProps> = ({
@@ -40,6 +42,7 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
   onClose,
   initialSection,
   extraSections,
+  hiddenSectionKeys,
 }) => {
   const isMobile = useMediaQuery("(max-width: 1024px)");
 
@@ -153,8 +156,23 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
       isAnonymous,
       t,
     });
-    return extraSections?.length ? [...sections, ...extraSections] : sections;
-  }, [openLogoutConfirm, isDev, isAnonymous, t, extraSections]);
+    const base = hiddenSectionKeys?.length
+      ? sections
+          .map((sec) => ({
+            ...sec,
+            items: sec.items.filter((i) => !hiddenSectionKeys.includes(i.key)),
+          }))
+          .filter((sec) => sec.items.length > 0)
+      : sections;
+    return extraSections?.length ? [...base, ...extraSections] : base;
+  }, [
+    openLogoutConfirm,
+    isDev,
+    isAnonymous,
+    t,
+    extraSections,
+    hiddenSectionKeys,
+  ]);
 
   const activeLabel = useMemo(() => {
     for (const section of configNavSections) {
diff --git a/frontend/editor/src/saas/components/shared/AppSwitcher.tsx b/frontend/editor/src/saas/components/shared/AppSwitcher.tsx
new file mode 100644
index 0000000000..364f094478
--- /dev/null
+++ b/frontend/editor/src/saas/components/shared/AppSwitcher.tsx
@@ -0,0 +1,41 @@
+import { useNavigate } from "react-router-dom";
+import { Logo } from "@app/ui/Logo";
+import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
+import { type AppSwitcherProps } from "@core/components/shared/AppSwitcher";
+import { usePortalAccess } from "@app/hooks/usePortalAccess";
+import { PORTAL_BASENAME } from "@app/routes/portalBasename";
+
+/**
+ * SaaS sidebar brand header. When the backend says this user can open the
+ * processor (`/api/v1/auth/me` → `portalAccess` — the exact signal the
+ * processor's own gate uses), the Stirling logo doubles as the
+ * editor⇄processor switcher: the mark morphs into a chevron and opens the
+ * switch menu (same BrandSwitcher the processor sidebar uses). Users without
+ * access get a plain logo.
+ *
+ * Deliberately NOT gated on the editor's Supabase auth context: that context
+ * never fetches /me, so it can't know about portal access (and its session
+ * state doesn't always mirror the backend login that actually grants it).
+ */
+export function AppSwitcher({ collapsed }: AppSwitcherProps) {
+  const portalAccess = usePortalAccess();
+  const navigate = useNavigate();
+
+  if (!portalAccess) {
+    return (
+      <Logo
+        variant={collapsed ? "iconOnly" : "iconAndText"}
+        iconHeight="1.6rem"
+        textHeight="1.3rem"
+      />
+    );
+  }
+
+  return (
+    <BrandSwitcher
+      current="editor"
+      onSwitch={() => navigate(PORTAL_BASENAME)}
+      collapsed={collapsed}
+    />
+  );
+}
diff --git a/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx b/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx
new file mode 100644
index 0000000000..a0e8ba618d
--- /dev/null
+++ b/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx
@@ -0,0 +1,108 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { renderHook, waitFor } from "@testing-library/react";
+
+const get = vi.fn();
+let currentUserId: string | null = null;
+
+vi.mock("@app/services/apiClient", () => ({
+  default: {
+    get: (...args: unknown[]) => get(...args),
+  },
+}));
+
+vi.mock("@app/auth/UseSession", () => ({
+  useAuth: () => ({ user: currentUserId ? { id: currentUserId } : null }),
+}));
+
+const { usePortalAccess } = await import("@app/hooks/usePortalAccess");
+
+function meReturning(portalAccess: boolean) {
+  return { data: { user: { portalAccess } } };
+}
+
+describe("usePortalAccess", () => {
+  beforeEach(() => {
+    get.mockReset();
+    currentUserId = null;
+  });
+
+  it("reports the backend's answer for the signed-in user", async () => {
+    currentUserId = "admin-1";
+    get.mockResolvedValue(meReturning(true));
+
+    const { result } = renderHook(() => usePortalAccess());
+
+    await waitFor(() => expect(result.current).toBe(true));
+  });
+
+  it("re-asks the backend when a different user signs in without a reload", async () => {
+    // An admin gets a yes...
+    currentUserId = "admin-1";
+    get.mockResolvedValue(meReturning(true));
+    const { result, rerender } = renderHook(() => usePortalAccess());
+    await waitFor(() => expect(result.current).toBe(true));
+
+    // ...then Supabase swaps the identity in place (signed out in another
+    // tab, revoked session, new sign-in) — no page load in between.
+    currentUserId = "member-2";
+    get.mockResolvedValue(meReturning(false));
+    rerender();
+
+    // The member must not inherit the admin's answer.
+    await waitFor(() => expect(result.current).toBe(false));
+    expect(get).toHaveBeenCalledTimes(2);
+  });
+
+  it("drops the answer when the user signs out", async () => {
+    currentUserId = "admin-1";
+    get.mockResolvedValue(meReturning(true));
+    const { result, rerender } = renderHook(() => usePortalAccess());
+    await waitFor(() => expect(result.current).toBe(true));
+
+    currentUserId = null;
+    rerender();
+
+    await waitFor(() => expect(result.current).toBe(false));
+  });
+
+  it("reports no access, and asks nothing, for a guest", () => {
+    currentUserId = null;
+
+    const { result } = renderHook(() => usePortalAccess());
+
+    expect(result.current).toBe(false);
+    expect(get).not.toHaveBeenCalled();
+  });
+
+  it("treats a failed lookup as no access, and a later mount asks again", async () => {
+    currentUserId = "admin-1";
+    get.mockRejectedValueOnce(new Error("401"));
+    const first = renderHook(() => usePortalAccess());
+    await waitFor(() => expect(get).toHaveBeenCalledTimes(1));
+    expect(first.result.current).toBe(false);
+    first.unmount();
+
+    // The failure isn't sticky.
+    get.mockResolvedValue(meReturning(true));
+    const second = renderHook(() => usePortalAccess());
+    await waitFor(() => expect(second.result.current).toBe(true));
+  });
+
+  it("ignores a response that lands after unmount", async () => {
+    currentUserId = "admin-1";
+    let resolveMe: (v: unknown) => void = () => {};
+    get.mockReturnValue(
+      new Promise((resolve) => {
+        resolveMe = resolve;
+      }),
+    );
+
+    const { result, unmount } = renderHook(() => usePortalAccess());
+    unmount();
+    resolveMe(meReturning(true));
+
+    // No state update on an unmounted hook (React would warn); the stale
+    // answer is simply dropped.
+    expect(result.current).toBe(false);
+  });
+});
diff --git a/frontend/editor/src/saas/hooks/usePortalAccess.ts b/frontend/editor/src/saas/hooks/usePortalAccess.ts
new file mode 100644
index 0000000000..442061cbe1
--- /dev/null
+++ b/frontend/editor/src/saas/hooks/usePortalAccess.ts
@@ -0,0 +1,52 @@
+import { useEffect, useState } from "react";
+import apiClient from "@app/services/apiClient";
+import { useAuth } from "@app/auth/UseSession";
+
+/**
+ * Whether the current user can open the processor (admin portal), straight
+ * from the backend (`/api/v1/auth/me` → `portalAccess`) — the same signal the
+ * processor's own SaasPortalGate uses. Components that must mirror processor
+ * access (e.g. the sidebar's editor⇄processor switcher) ask here.
+ *
+ * The editor's Supabase auth context can't *answer* this — it never fetches
+ * /me — so it is used only to identify who is asking. Keying the effect on
+ * that identity is what keeps the answer per-user: the SPA can swap users
+ * without a reload (Supabase fires SIGNED_OUT/SIGNED_IN in place; only the
+ * settings Logout button hard-navigates), so any answer held beyond the
+ * current identity would leak to whoever signs in next.
+ *
+ * Deliberately unmemoised beyond the mount: the one consumer (the sidebar
+ * switcher) mounts once, so a cross-mount cache would only add user-scoped
+ * state that has to be invalidated on identity change — the bug class this
+ * hook already had once. Guests skip the request entirely.
+ */
+export function usePortalAccess(): boolean {
+  const { user } = useAuth();
+  const userId = user?.id ?? null;
+  const [access, setAccess] = useState(false);
+
+  useEffect(() => {
+    // Signed out: nothing to ask, and any previous answer is void.
+    if (userId === null) {
+      setAccess(false);
+      return;
+    }
+
+    let cancelled = false;
+    apiClient
+      .get<{ user?: { portalAccess?: boolean } }>("/api/v1/auth/me")
+      .then((res) => {
+        if (!cancelled) setAccess(res.data.user?.portalAccess === true);
+      })
+      .catch(() => {
+        // Backend unreachable or guest (401): no access now; a remount or
+        // identity change asks again rather than trusting a failure.
+        if (!cancelled) setAccess(false);
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [userId]);
+
+  return access;
+}
diff --git a/frontend/editor/src/saas/routes/Login.tsx b/frontend/editor/src/saas/routes/Login.tsx
index ab75b7bb79..03f654f4d0 100644
--- a/frontend/editor/src/saas/routes/Login.tsx
+++ b/frontend/editor/src/saas/routes/Login.tsx
@@ -30,7 +30,6 @@ export default function Login() {
   const [isSigningIn, setIsSigningIn] = useState(false);
   const [error, setError] = useState<string | null>(null);
   const [showMagicLinkForm, setShowMagicLinkForm] = useState(false);
-  const [showEmailForm, setShowEmailForm] = useState(false);
   const [email, setEmail] = useState("");
   const [password, setPassword] = useState("");
   const [magicLinkEmail, setMagicLinkEmail] = useState("");
@@ -43,7 +42,6 @@ export default function Login() {
       const emailFromQuery = url.searchParams.get("email");
       if (emailFromQuery) {
         setEmail(emailFromQuery);
-        setShowEmailForm(true);
       }
     } catch (_) {
       // ignore
@@ -256,15 +254,8 @@ export default function Login() {
     }
   };
 
-  const toggleEmailForm = () => {
-    setShowEmailForm((v) => !v);
-    setShowMagicLinkForm(false);
-    setMagicLinkSent(false);
-  };
-
   const toggleMagicLink = () => {
     setShowMagicLinkForm((v) => !v);
-    setShowEmailForm(false);
     setMagicLinkSent(false);
   };
 
@@ -374,71 +365,30 @@ export default function Login() {
         </div>
       </div>
 
-      {/* Email & Password button */}
-      <Button
-        variant="secondary"
-        disabled={isSigningIn}
-        onClick={toggleEmailForm}
-        className={`oauth-button-fullwidth auth-expandable-trigger ${showEmailForm ? "auth-expandable-trigger--active" : ""}`}
-        style={{ marginBottom: "0.75rem" }}
-      >
-        <span className="oauth-btn-group">
-          <span className="auth-at-icon">@</span>
-          <span className="oauth-btn-label">{`${t("login.signInWith", "Sign in with")} email`}</span>
-        </span>
-      </Button>
-
-      {/* Email form — animated expand */}
-      <div
-        className={`auth-expand-grid ${showEmailForm ? "auth-expand-grid--open" : ""}`}
-      >
-        <div className="auth-expand-inner">
-          <div style={{ paddingBottom: "0.5rem" }}>
-            <EmailPasswordForm
-              email={email}
-              password={password}
-              setEmail={setEmail}
-              setPassword={setPassword}
-              onSubmit={signInWithEmail}
-              isSubmitting={isSigningIn}
-              submitButtonText={
-                isSigningIn ? t("login.loggingIn") : t("login.login")
-              }
-            />
-            <Button
-              variant="tertiary"
-              onClick={() => navigate("/auth/reset")}
-              className="auth-link-black"
-              style={{ fontSize: "0.8125rem", marginTop: "0.25rem" }}
-            >
-              {t("login.forgotPassword", "Forgot your password?")}
-            </Button>
-          </div>
-        </div>
-      </div>
-
-      {/* Skip */}
-      <div style={{ textAlign: "center", margin: "1rem 0" }}>
+      {/* Email + password form — always visible (no expander toggle) */}
+      <div style={{ paddingBottom: "0.5rem" }}>
+        <EmailPasswordForm
+          email={email}
+          password={password}
+          setEmail={setEmail}
+          setPassword={setPassword}
+          onSubmit={signInWithEmail}
+          isSubmitting={isSigningIn}
+          submitButtonText={
+            isSigningIn ? t("login.loggingIn") : t("login.login")
+          }
+        />
         <Button
           variant="tertiary"
-          onClick={handleAnonymousSignIn}
-          disabled={isSigningIn}
-          style={{
-            background: "none",
-            border: "none",
-            cursor: "pointer",
-            fontSize: "1rem",
-            fontWeight: 700,
-            color: "var(--c-text)",
-          }}
+          onClick={() => navigate("/auth/reset")}
+          className="auth-link-black"
+          style={{ fontSize: "0.8125rem", marginTop: "0.25rem" }}
         >
-          {isSigningIn
-            ? t("login.signingIn", "Signing in...")
-            : `${t("signup.skip", "Skip")} →`}
+          {t("login.forgotPassword", "Forgot your password?")}
         </Button>
       </div>
 
-      {/* Bottom */}
+      {/* Create an account — pushed to the bottom */}
       <div
         style={{
           textAlign: "center",
@@ -454,12 +404,33 @@ export default function Login() {
             border: "none",
             cursor: "pointer",
             fontSize: "0.875rem",
-            color: "var(--c-text-subtle)",
+            color: "var(--c-primary)",
           }}
         >
           {t("login.createAccount", "Create an account")}
         </Button>
       </div>
+
+      {/* Skip — small + muted, at the very bottom */}
+      <div style={{ textAlign: "center", margin: "0.5rem 0 0.25rem" }}>
+        <Button
+          variant="tertiary"
+          onClick={handleAnonymousSignIn}
+          disabled={isSigningIn}
+          style={{
+            background: "none",
+            border: "none",
+            cursor: "pointer",
+            fontSize: "0.8125rem",
+            fontWeight: 500,
+            color: "var(--c-text-subtle)",
+          }}
+        >
+          {isSigningIn
+            ? t("login.signingIn", "Signing in...")
+            : `${t("signup.skip", "Skip")} →`}
+        </Button>
+      </div>
     </AuthLayout>
   );
 }
diff --git a/frontend/editor/src/saas/routes/Signup.tsx b/frontend/editor/src/saas/routes/Signup.tsx
index 942cfefb5a..e9529944d6 100644
--- a/frontend/editor/src/saas/routes/Signup.tsx
+++ b/frontend/editor/src/saas/routes/Signup.tsx
@@ -29,7 +29,6 @@ export default function Signup() {
   const { t } = useTranslation();
   const [isSigningUp, setIsSigningUp] = useState(false);
   const [error, setError] = useState<string | null>(null);
-  const [showEmailForm, setShowEmailForm] = useState(false);
   const [name, setName] = useState(undefined as string | undefined);
   const [email, setEmail] = useState("");
   const [password, setPassword] = useState("");
@@ -209,67 +208,26 @@ export default function Signup() {
         />
       </div>
 
-      {/* Email & Password button */}
-      <Button
-        variant="secondary"
-        disabled={isSigningUp}
-        onClick={() => setShowEmailForm((v) => !v)}
-        className={`oauth-button-fullwidth auth-expandable-trigger ${showEmailForm ? "auth-expandable-trigger--active" : ""}`}
-        style={{ marginTop: "2.5rem", marginBottom: "0.75rem" }}
-      >
-        <span className="oauth-btn-group">
-          <span className="auth-at-icon">@</span>
-          <span className="oauth-btn-label">{`${t("signup.signUpWith", "Sign up with")} email`}</span>
-        </span>
-      </Button>
-
-      {/* Email form — animated expand */}
-      <div
-        className={`auth-expand-grid ${showEmailForm ? "auth-expand-grid--open" : ""}`}
-      >
-        <div className="auth-expand-inner">
-          <div style={{ paddingBottom: "0.5rem" }}>
-            <SignupForm
-              name={name}
-              email={email}
-              password={password}
-              confirmPassword={confirmPassword}
-              agree={agree}
-              setName={setName}
-              setEmail={setEmail}
-              setPassword={setPassword}
-              setConfirmPassword={setConfirmPassword}
-              setAgree={setAgree}
-              onSubmit={handleSignUp}
-              isSubmitting={isSigningUp}
-              fieldErrors={fieldErrors}
-            />
-          </div>
-        </div>
+      {/* Sign-up form — always visible (no expander toggle) */}
+      <div style={{ marginTop: "2.5rem", paddingBottom: "0.5rem" }}>
+        <SignupForm
+          name={name}
+          email={email}
+          password={password}
+          confirmPassword={confirmPassword}
+          agree={agree}
+          setName={setName}
+          setEmail={setEmail}
+          setPassword={setPassword}
+          setConfirmPassword={setConfirmPassword}
+          setAgree={setAgree}
+          onSubmit={handleSignUp}
+          isSubmitting={isSigningUp}
+          fieldErrors={fieldErrors}
+        />
       </div>
 
-      {/* Skip */}
-      <div style={{ textAlign: "center", margin: "1rem 0" }}>
-        <Button
-          variant="tertiary"
-          onClick={handleAnonymousSignIn}
-          disabled={isSigningUp}
-          style={{
-            background: "none",
-            border: "none",
-            cursor: "pointer",
-            fontSize: "1rem",
-            fontWeight: 700,
-            color: "var(--c-text)",
-          }}
-        >
-          {isSigningUp
-            ? t("login.signingIn", "Signing in...")
-            : `${t("signup.skip", "Skip")} →`}
-        </Button>
-      </div>
-
-      {/* Bottom */}
+      {/* Already have an account — pushed to the bottom */}
       <div
         style={{
           textAlign: "center",
@@ -285,12 +243,33 @@ export default function Signup() {
             border: "none",
             cursor: "pointer",
             fontSize: "0.875rem",
-            color: "var(--c-text-subtle)",
+            color: "var(--c-primary)",
           }}
         >
           {t("signup.alreadyHaveAccount", "I already have an account")}
         </Button>
       </div>
+
+      {/* Skip — small + muted, at the very bottom */}
+      <div style={{ textAlign: "center", margin: "0.5rem 0 0.25rem" }}>
+        <Button
+          variant="tertiary"
+          onClick={handleAnonymousSignIn}
+          disabled={isSigningUp}
+          style={{
+            background: "none",
+            border: "none",
+            cursor: "pointer",
+            fontSize: "0.8125rem",
+            fontWeight: 500,
+            color: "var(--c-text-subtle)",
+          }}
+        >
+          {isSigningUp
+            ? t("login.signingIn", "Signing in...")
+            : `${t("signup.skip", "Skip")} →`}
+        </Button>
+      </div>
     </AuthLayout>
   );
 }
diff --git a/frontend/editor/src/saas/routes/login/EmailPasswordForm.tsx b/frontend/editor/src/saas/routes/login/EmailPasswordForm.tsx
index a7435eb43b..27963cff83 100644
--- a/frontend/editor/src/saas/routes/login/EmailPasswordForm.tsx
+++ b/frontend/editor/src/saas/routes/login/EmailPasswordForm.tsx
@@ -82,7 +82,7 @@ export default function EmailPasswordForm({
       <Button
         type="submit"
         disabled={isSubmitting || !email || (showPasswordField && !password)}
-        accent="brand"
+        accent="default"
         fullWidth
       >
         {submitButtonText}
diff --git a/frontend/editor/src/saas/styles/saas-theme.css b/frontend/editor/src/saas/styles/saas-theme.css
deleted file mode 100644
index 0d6b0d4940..0000000000
--- a/frontend/editor/src/saas/styles/saas-theme.css
+++ /dev/null
@@ -1,173 +0,0 @@
-/* SaaS-specific CSS variables — imported alongside core theme.css */
-
-:root {
-  /* Orange scale (used for warning toasts) */
-  --color-orange-50: var(--p-amber-400);
-  --color-orange-100: var(--p-amber-400);
-  --color-orange-200: var(--p-red-400);
-  --color-orange-300: var(--p-red-400);
-  --color-orange-400: var(--p-red-600);
-
-  /* Amber scale (trial/warning emphasis) */
-  --color-amber-50: var(--p-amber-400);
-  --color-amber-100: var(--p-amber-400);
-  --color-amber-200: var(--p-amber-400);
-  --color-amber-300: var(--p-amber-400);
-  --color-amber-400: var(--p-amber-400);
-  --color-amber-500: var(--p-amber-500);
-  --color-amber-600: var(--p-amber-600);
-  --color-amber-700: var(--p-amber-600);
-  --color-amber-800: var(--p-amber-600);
-  --color-amber-900: var(--p-amber-600);
-
-  /* Subcategory / divider vars (light) */
-  --tool-subcategory-text-color-light: var(--p-gray-400);
-  --tool-subcategory-rule-color-light: var(--p-gray-200);
-
-  /* Auth color vars (light mode) */
-  --auth-input-bg: var(--p-gray-50);
-  --auth-input-border: var(--p-gray-200);
-  --auth-input-text: var(--p-gray-800);
-  --auth-label-text: var(--p-zinc-650);
-  --auth-button-bg: var(--p-red-600);
-  --auth-button-text: #ffffff;
-  --auth-magic-button-bg: var(--p-red-600);
-  --auth-magic-button-text: #ffffff;
-  --auth-bg-color: #ffffff;
-  --auth-card-bg: #ffffff;
-  --auth-text-primary: var(--p-zinc-650);
-  --auth-text-secondary: var(--p-gray-800);
-  --auth-border-focus: var(--p-gray-300);
-  --auth-focus-ring: color-mix(in srgb, var(--p-blue-500) 15%, transparent);
-  --auth-error-bg: color-mix(in srgb, var(--p-red-500) 8%, transparent);
-  --auth-error-border: color-mix(in srgb, var(--p-red-500) 25%, transparent);
-  --auth-error-text: var(--p-red-600);
-  --auth-success-bg: color-mix(in srgb, var(--p-green-500) 10%, transparent);
-  --auth-success-border: color-mix(
-    in srgb,
-    var(--p-green-500) 30%,
-    transparent
-  );
-  --auth-success-text: var(--p-green-600);
-
-  /* App Config Modal colors (light mode) */
-  --modal-nav-bg: var(--p-gray-100);
-  --modal-nav-section-title: var(--p-gray-500);
-  --modal-nav-item: var(--p-gray-700);
-  --modal-nav-item-active: var(--p-blue-500);
-  --modal-nav-item-active-bg: color-mix(
-    in srgb,
-    var(--p-blue-500) 8%,
-    transparent
-  );
-  --modal-content-bg: #ffffff;
-  --modal-header-border: rgba(0, 0, 0, 0.06);
-
-  /* API usage progress bar colors (light mode) */
-  --usage-inactive: var(--p-gray-200);
-
-  /* API Keys section colors (light mode) */
-  --api-keys-card-bg: #ffffff;
-  --api-keys-card-border: var(--p-gray-200);
-  --api-keys-card-shadow: rgba(0, 0, 0, 0.06);
-  --api-keys-input-bg: var(--p-gray-50);
-  --api-keys-input-border: var(--p-gray-200);
-}
-
-[data-mantine-color-scheme="dark"] {
-  /* Compare highlight colors (dark mode) */
-  --spdf-compare-removed-bg: color-mix(
-    in srgb,
-    var(--p-red-400) 45%,
-    transparent
-  );
-  --spdf-compare-added-bg: color-mix(
-    in srgb,
-    var(--p-green-500) 35%,
-    transparent
-  );
-  --spdf-compare-removed-badge-bg: color-mix(
-    in srgb,
-    var(--p-red-500) 15%,
-    transparent
-  );
-  --spdf-compare-removed-badge-fg: var(--color-red-500);
-  --spdf-compare-added-badge-bg: color-mix(
-    in srgb,
-    var(--p-green-500) 18%,
-    transparent
-  );
-  --spdf-compare-added-badge-fg: var(--color-green-500);
-  --spdf-compare-inline-removed-bg: color-mix(
-    in srgb,
-    var(--p-red-500) 25%,
-    transparent
-  );
-  --spdf-compare-inline-added-bg: color-mix(
-    in srgb,
-    var(--p-green-500) 25%,
-    transparent
-  );
-  --compare-page-label-bg: var(--p-zinc-850);
-  --compare-page-label-fg: var(--p-gray-300);
-
-  /* Orange scale (dark mode mirrors light values to match UI) */
-  --color-orange-50: var(--p-amber-400);
-  --color-orange-100: var(--p-amber-400);
-  --color-orange-200: var(--p-red-400);
-  --color-orange-300: var(--p-red-400);
-  --color-orange-400: var(--p-red-600);
-
-  /* Auth page colors (dark mode) — mirror proprietary so the auth card themes dark */
-  --auth-bg-color: var(--c-surface-sunken);
-  --auth-card-bg: var(--c-surface);
-  --auth-label-text: var(--c-text-muted);
-  --auth-input-border: var(--c-border);
-  --auth-input-bg: var(--c-surface-raised);
-  --auth-input-text: var(--c-text);
-  --auth-border-focus: var(--p-blue-500);
-  --auth-focus-ring: color-mix(in srgb, var(--p-blue-500) 20%, transparent);
-  --auth-button-bg: var(--p-red-600);
-  --auth-button-text: #ffffff;
-  --auth-magic-button-bg: var(--c-surface-raised);
-  --auth-magic-button-text: var(--c-text);
-  --auth-text-primary: var(--c-text);
-  --auth-text-secondary: var(--c-text-muted);
-  --auth-error-bg: color-mix(in srgb, var(--p-red-500) 12%, transparent);
-  --auth-error-border: color-mix(in srgb, var(--p-red-500) 35%, transparent);
-  --auth-error-text: var(--p-red-400);
-  --auth-success-bg: color-mix(in srgb, var(--p-green-500) 12%, transparent);
-  --auth-success-border: color-mix(
-    in srgb,
-    var(--p-green-500) 35%,
-    transparent
-  );
-  --auth-success-text: var(--p-green-500);
-  --text-divider-rule-rgb-light: 229, 231, 235;
-  --text-divider-label-rgb-light: 156, 163, 175;
-  --tool-subcategory-rule-color-light: var(--p-gray-200);
-  --tool-subcategory-text-color-light: var(--p-gray-400);
-
-  /* API usage progress bar colors (dark mode) */
-  --usage-inactive: var(--p-zinc-650);
-
-  /* API Keys section colors (dark mode) */
-  --api-keys-card-bg: var(--p-zinc-800);
-  --api-keys-card-border: var(--p-zinc-650);
-  --api-keys-card-shadow: none;
-  --api-keys-input-bg: var(--p-zinc-850);
-  --api-keys-input-border: var(--p-zinc-650);
-
-  /* App Config Modal colors (dark mode) */
-  --modal-nav-bg: var(--p-zinc-850);
-  --modal-nav-section-title: var(--p-zinc-300);
-  --modal-nav-item: var(--p-gray-300);
-  --modal-nav-item-active: var(--p-blue-500);
-  --modal-nav-item-active-bg: color-mix(
-    in srgb,
-    var(--p-blue-500) 15%,
-    transparent
-  );
-  --modal-content-bg: var(--p-zinc-800);
-  --modal-header-border: rgba(255, 255, 255, 0.05);
-}

From 50bc4a786686b60b1ffc684c34065d7bd589d9af Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Mon, 3 Aug 2026 17:41:56 +0100
Subject: [PATCH 058/122] fix(storage): don't query the encryption key registry
 when storage is off (unblocks backend:dev:saas) (#7265)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

Fixes a startup failure introduced by #7155 and reported against `task
backend:dev:saas`.

**What goes wrong**

`StorageProviderConfig.storageEncryptionState(...)` is created on every
startup, in every profile. When `storage.encryption.enabled` is false —
the default, and what SaaS ships — the `||` short-circuit evaluates
`fileEncryptionKeyRepository.count()`, a live query against
`file_encryption_keys`:

```java
if (writeEnabled || fileEncryptionKeyRepository.count() > 0) {   // <- always runs when the flag is off
```

That table only exists if `ddl-auto=update` managed to create it. When
it cannot — permissions on a shared Supabase branch DB, concurrent DDL
from several developers, schema ordering — **ddl-auto logs and
continues**, so the situation used to be a warning nobody noticed. Now
it is a query that throws during bean creation and takes the whole
context down.

Two things make this sting in SaaS specifically: `storage.enabled` is
false there, so before this feature nothing ever touched the table; and
`hibernate.default_schema=stirling_pdf` means the table has to exist in
a schema the app may not be able to create in.

There is a second exposure on the request path:
`suppressDirectDownloads()` also counts (60s cached), so even a
surviving boot could 500 on downloads.

**Fix**

- The boot probe runs only when `storage.enabled` is true, so a
deployment that does not use storage never touches the table.
- Registry reads are wrapped. The boot probe degrades to "no keys"
rather than propagating; `suppressDirectDownloads()` **fails safe by
suppressing** rather than issuing a presigned URL it cannot vouch for.
Losing the direct-download fast path is recoverable; serving ciphertext
is not.

**Safety is unchanged, and that is the important part.** The decorator
is still installed unconditionally, so any blob carrying the `SPDFEAR1`
magic is still decrypted via lazy materialisation or fails loudly — the
eager probe only ever bought *earlier* master-key verification. A node
that can actually serve stored files has `storage.enabled` on by
definition, which is exactly the node the drifted-node protection is
for; that test now configures it that way, and a new test pins that the
decorator remains installed even with storage off.

**Tests** — storage-disabled never calls `count()`; an unreadable
registry still boots *and* still suppresses direct downloads; the
decorator stays installed with storage off; storage-enabled still
probes. Full proprietary suite green apart from the pre-existing
Windows-symlink `FolderIdentitiesTest` failure, which is environmental
and unrelated.

**Note on scope:** deliberately minimal so it can land quickly. The
Aikido `findAll()` code-quality finding lives in #7173 only
(`rotateMasterKey` does not exist on main), so it is fixed there rather
than here. #7173 will be rebased once this merges.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../storage/config/StorageProviderConfig.java |  5 +-
 .../crypto/StorageEncryptionState.java        | 22 +++++++-
 .../config/StorageProviderConfigTest.java     | 56 +++++++++++++++++--
 3 files changed, 77 insertions(+), 6 deletions(-)

diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java
index 6bad8b487b..24814bfc69 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/config/StorageProviderConfig.java
@@ -70,7 +70,10 @@ public class StorageProviderConfig {
                                 createKeyService(
                                         configuredFileEncryptionKey, clusterEnabled, requiresNew),
                         fileEncryptionKeyRepository);
-        if (writeEnabled || fileEncryptionKeyRepository.count() > 0) {
+        // The registry table may not exist when storage is unused, so only probe if it is on.
+        boolean probeForExistingKeys =
+                !writeEnabled && applicationProperties.getStorage().isEnabled();
+        if (writeEnabled || (probeForExistingKeys && state.encryptedContentMayExist())) {
             state.initialiseEagerly();
             log.info(
                     "Storage encryption at rest active (writes {})",
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java
index fe4539332a..8fe465406b 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/crypto/StorageEncryptionState.java
@@ -1,6 +1,7 @@
 package stirling.software.proprietary.storage.crypto;
 
 import java.time.Duration;
+import java.util.Optional;
 import java.util.function.Supplier;
 
 import lombok.extern.slf4j.Slf4j;
@@ -104,9 +105,28 @@ public class StorageEncryptionState {
                 && now - keysExistCheckedAtNanos < KEYS_EXIST_CACHE_TTL.toNanos()) {
             return keysExistCached;
         }
-        keysExistCached = keyRepository.count() > 0;
+        keysExistCached = countKeys().orElse(true /* unreadable registry: fail safe */);
         keysExistCheckedAtNanos = now;
         keysExistEverChecked = true;
         return keysExistCached;
     }
+
+    /** True when key rows exist; empty when the registry could not be read. */
+    private Optional<Boolean> countKeys() {
+        try {
+            return Optional.of(keyRepository.count() > 0);
+        } catch (RuntimeException e) {
+            log.warn(
+                    "Could not read the storage encryption key registry ({}). Treating direct"
+                            + " downloads as unsafe; encrypted content is still decrypted on"
+                            + " demand.",
+                    e.getMessage());
+            return Optional.empty();
+        }
+    }
+
+    /** Whether key rows exist, for the decrypt-only startup path; false if unreadable. */
+    public boolean encryptedContentMayExist() {
+        return countKeys().orElse(false);
+    }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java
index 447354b5cb..a6fd31e9b2 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/storage/config/StorageProviderConfigTest.java
@@ -4,15 +4,19 @@ import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.assertThatCode;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
 import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.atLeastOnce;
 import static org.mockito.Mockito.doAnswer;
 import static org.mockito.Mockito.doNothing;
 import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
 import static org.mockito.Mockito.when;
 
 import java.util.Base64;
 import java.util.Optional;
 
 import org.junit.jupiter.api.Test;
+import org.springframework.dao.InvalidDataAccessResourceUsageException;
 import org.springframework.transaction.PlatformTransactionManager;
 
 import stirling.software.common.model.ApplicationProperties;
@@ -24,6 +28,7 @@ import stirling.software.proprietary.storage.crypto.EncryptingStorageProvider;
 import stirling.software.proprietary.storage.crypto.InMemoryKeyRepo;
 import stirling.software.proprietary.storage.crypto.StorageEncryptionState;
 import stirling.software.proprietary.storage.provider.StorageProvider;
+import stirling.software.proprietary.storage.repository.FileEncryptionKeyRepository;
 import stirling.software.proprietary.storage.repository.StoredFileBlobRepository;
 
 /**
@@ -66,8 +71,8 @@ class StorageProviderConfigTest {
 
     @Test
     void decorator_flagOffButKeysExist_decryptOnlyModeStillMaterialises() throws Exception {
-        // Simulate the drifted-node case: another node already created keys.
-        StorageProviderConfig seedCfg = newConfig("local", License.SERVER, true);
+        // Drifted node: keys created elsewhere; storage on, as it must be to serve files.
+        StorageProviderConfig seedCfg = newConfig("local", License.SERVER, true, true);
         StorageEncryptionState seedState = seedCfg.storageEncryptionState(MASTER, false, txManager);
         Team team = new Team();
         team.setId(1L);
@@ -75,7 +80,7 @@ class StorageProviderConfigTest {
         owner.setTeam(team);
         seedState.keyService().activeKekForOwner(owner);
 
-        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false);
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false, true);
         StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
 
         assertThat(cfg.storageProvider(state, Optional.empty()))
@@ -104,6 +109,44 @@ class StorageProviderConfigTest {
                 .hasMessageContaining("32 bytes");
     }
 
+    // ---- deployments that do not use storage (the SaaS shape) ---------------------------
+
+    @Test
+    void storageDisabled_neverQueriesTheKeyRegistry() {
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
+
+        assertThat(state.isWriteEnabled()).isFalse();
+        verify(keyRepo.mock, never()).count();
+    }
+
+    @Test
+    void storageDisabled_decoratorStillInstalledSoCiphertextIsNeverServedRaw() {
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false);
+        StorageEncryptionState state = cfg.storageEncryptionState(MASTER, false, txManager);
+
+        assertThat(cfg.storageProvider(state, Optional.empty()))
+                .isInstanceOf(EncryptingStorageProvider.class);
+    }
+
+    @Test
+    void unreadableKeyRegistry_stillStartsAndFailsSafeOnDirectDownloads() {
+        FileEncryptionKeyRepository broken = mock(FileEncryptionKeyRepository.class);
+        when(broken.count())
+                .thenThrow(new InvalidDataAccessResourceUsageException("no such table"));
+        StorageEncryptionState state = new StorageEncryptionState(false, () -> null, broken);
+
+        assertThat(state.encryptedContentMayExist()).isFalse();
+        assertThat(state.suppressDirectDownloads()).isTrue();
+    }
+
+    @Test
+    void storageEnabledWithoutEncryption_probesRegistry() {
+        StorageProviderConfig cfg = newConfig("local", License.NORMAL, false, true);
+        cfg.storageEncryptionState(MASTER, false, txManager);
+        verify(keyRepo.mock, atLeastOnce()).count();
+    }
+
     // ---- backend licence gates (unchanged behaviour) ------------------------------------
 
     @Test
@@ -161,9 +204,14 @@ class StorageProviderConfigTest {
 
     private StorageProviderConfig newConfig(
             String provider, License license, boolean encryptionEnabled) {
+        return newConfig(provider, license, encryptionEnabled, false);
+    }
+
+    private StorageProviderConfig newConfig(
+            String provider, License license, boolean encryptionEnabled, boolean storageEnabled) {
         ApplicationProperties props = new ApplicationProperties();
         props.getStorage().setProvider(provider);
-        props.getStorage().setEnabled(false); // local-fallback path skips dir creation
+        props.getStorage().setEnabled(storageEnabled);
         props.getStorage().getEncryption().setEnabled(encryptionEnabled);
         StoredFileBlobRepository repo = mock(StoredFileBlobRepository.class);
         LicenseKeyChecker checker = mock(LicenseKeyChecker.class);

From 80e4a3ae241603d1e79a3219990a9377e0a55405 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 21:16:18 +0200
Subject: [PATCH 059/122] build(deps): bump astral-sh/setup-uv from 8.2.0 to
 9.0.0 (#7238)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from
8.2.0 to 9.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/setup-uv/releases">astral-sh/setup-uv's
releases</a>.</em></p>
<blockquote>
<h2>v9.0.0 🌈 Change <code>prune-cache</code> default to
<code>false</code></h2>
<h2>Changes</h2>
<p>This release disables the default cache cache pruning to ease the
load on the PyPi infrastructure.
Since users might experience more GitHub Actions cache usage which might
result in higher costs this is marked as a breaking change. To read more
on why we did this (now) you can read the detailed analysis and
reasoning in <a
href="https://redirect.github.com/astral-sh/setup-uv/issues/967">#967</a></p>
<p>Besides this big breaking change we also have a small bugfix while
building caches for linux distributions that behave a big different than
the &quot;big ones&quot; and a speed up in version resolution by only
reading the version manifest until a matching version is found saving
runtime and network bandwith.</p>
<h2>🚨 Breaking changes</h2>
<ul>
<li>Change <code>prune-cache</code> default to <code>false</code> <a
href="https://github.com/charliermarsh"><code>@​charliermarsh</code></a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/967">#967</a>)</li>
</ul>
<h2>🐛 Bug fixes</h2>
<ul>
<li>fix: fall back to distribution ID when os-release has no version
field <a href="https://github.com/cxzhong"><code>@​cxzhong</code></a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/961">#961</a>)</li>
</ul>
<h2>🚀 Enhancements</h2>
<ul>
<li>Speed up version client by partial response reads <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/807">#807</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>chore: update known checksums for 0.11.30 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/968">#968</a>)</li>
<li>chore: update known checksums for 0.11.29 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/960">#960</a>)</li>
</ul>
<h2>📚 Documentation</h2>
<ul>
<li>docs: update version references to v8.3.2 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/949">#949</a>)</li>
</ul>
<h2>⬆️ Dependency updates</h2>
<ul>
<li>chore(deps): roll up Dependabot updates <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/970">#970</a>)</li>
<li>chore(deps): roll up Dependabot updates <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/962">#962</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/c771a70e6277c0a99b617c7a806ffedaca235ff9"><code>c771a70</code></a>
chore(deps): roll up Dependabot updates (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/970">#970</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/2f537ca87c1ffa233ca2a1b84815388e3e42d845"><code>2f537ca</code></a>
chore: update known checksums for 0.11.30 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/968">#968</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/2269552d547df6f50e57442326930d30d943afe3"><code>2269552</code></a>
Speed up version client by partial response reads (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/807">#807</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/47a7f4fb2e900d6c33a5b5f231fa21dbfaeba52f"><code>47a7f4f</code></a>
Change <code>prune-cache</code> default to <code>false</code> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/967">#967</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/71966eff34a27b0a62ed4b9f6f6e383e071b1bb5"><code>71966ef</code></a>
chore(deps): roll up Dependabot updates (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/962">#962</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/f12b1f0a84bd6dc2331b36b2bbdbb1d1e617dbcc"><code>f12b1f0</code></a>
fix: fall back to distribution ID when os-release has no version field
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/961">#961</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/ecd24dd710f2fb0dca1693a67af11fc4a5c5ec84"><code>ecd24dd</code></a>
chore: update known checksums for 0.11.29 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/960">#960</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/6a191366842ac1502ba6c07e9b5acd5c2d9d8db3"><code>6a19136</code></a>
docs: update version references to v8.3.2 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/949">#949</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/11f9893b081a58869d3b5fccaea48c9e9e46f990"><code>11f9893</code></a>
chore: roll up Dependabot updates (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/948">#948</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/f79855603231e1609d02bec6956bd0e05cbc46b5"><code>f798556</code></a>
docs: update version references to v8.3.1 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/946">#946</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/setup-uv/compare/fac544c07dec837d0ccb6301d7b5580bf5edae39...c771a70e6277c0a99b617c7a806ffedaca235ff9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=astral-sh/setup-uv&package-manager=github_actions&previous-version=8.2.0&new-version=9.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ai-engine.yml              | 2 +-
 .github/workflows/check-generated-models.yml | 2 +-
 .github/workflows/pre_commit.yml             | 2 +-
 .github/workflows/sync_files_v2.yml          | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ai-engine.yml b/.github/workflows/ai-engine.yml
index 608ac07703..194d8c1ad1 100644
--- a/.github/workflows/ai-engine.yml
+++ b/.github/workflows/ai-engine.yml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
           enable-cache: true
           cache-suffix: ai-engine
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index f108a55afc..a758c4268e 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
           enable-cache: true
           cache-suffix: generated-models
diff --git a/.github/workflows/pre_commit.yml b/.github/workflows/pre_commit.yml
index 296ed70bb7..0f78257fce 100644
--- a/.github/workflows/pre_commit.yml
+++ b/.github/workflows/pre_commit.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
           enable-cache: true
           cache-suffix: pre-commit
diff --git a/.github/workflows/sync_files_v2.yml b/.github/workflows/sync_files_v2.yml
index fdf5d7cdf1..e00624403b 100644
--- a/.github/workflows/sync_files_v2.yml
+++ b/.github/workflows/sync_files_v2.yml
@@ -62,7 +62,7 @@ jobs:
           pip install --require-hashes --only-binary=:all: -r ./.github/scripts/requirements_sync_readme.txt
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
         with:
           enable-cache: true
           cache-suffix: sync-files

From b1d03e7fbab46df9ef53509fe8f411ba08ef3368 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 21:25:17 +0200
Subject: [PATCH 060/122] build(deps): bump com.hubspot.jinjava:jinjava from
 2.8.3 to 2.8.4 (#7247)

Bumps [com.hubspot.jinjava:jinjava](https://github.com/HubSpot/jinjava)
from 2.8.3 to 2.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/HubSpot/jinjava/releases">com.hubspot.jinjava:jinjava's
releases</a>.</em></p>
<blockquote>
<h2>jinjava-2.8.4</h2>
<h3>2026-07-24 Version 2.8.4 (<a
href="https://search.maven.org/artifact/com.hubspot.jinjava/jinjava/2.8.4/jar">Maven
Central</a>)</h3>
<ul>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1305">Add
support for configurable multi-character delimiters</a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1306">Treat
backslash as an escape character only inside quoted strings, matching
Jinja2</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1311">Add
<code>keepTrailingNewline</code> option to match Python Jinja2's default
of stripping a single trailing newline</a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1308">Auto-convert
<code>Integer</code> to <code>Long</code> in set filters when the
feature is enabled</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1313">Add
a boolean parameter to <code>withUnwrapRawOverride</code></a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1289">Introduce
<code>BuiltinFeatures</code></a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1312">Preserve
block tags to maintain reconstruction and execution order</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1258">Fix
<code>RenderFilter</code>'s handling of deferred values</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1286">Use
<code>isResolvableObject</code> before building a hashcode in eager
execution</a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1285">Don't
require explicitly pushing the <code>JinjavaInterpreter</code> when
using it directly</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/HubSpot/jinjava/blob/master/CHANGES.md">com.hubspot.jinjava:jinjava's
changelog</a>.</em></p>
<blockquote>
<h3>2026-07-24 Version 2.8.4 (<a
href="https://search.maven.org/artifact/com.hubspot.jinjava/jinjava/2.8.4/jar">Maven
Central</a>)</h3>
<ul>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1305">Add
support for configurable multi-character delimiters</a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1306">Treat
backslash as an escape character only inside quoted strings, matching
Jinja2</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1311">Add
<code>keepTrailingNewline</code> option to match Python Jinja2's default
of stripping a single trailing newline</a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1308">Auto-convert
<code>Integer</code> to <code>Long</code> in set filters when the
feature is enabled</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1313">Add
a boolean parameter to <code>withUnwrapRawOverride</code></a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1289">Introduce
<code>BuiltinFeatures</code></a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1312">Preserve
block tags to maintain reconstruction and execution order</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1258">Fix
<code>RenderFilter</code>'s handling of deferred values</a></li>
<li><a href="https://redirect.github.com/HubSpot/jinjava/pull/1286">Use
<code>isResolvableObject</code> before building a hashcode in eager
execution</a></li>
<li><a
href="https://redirect.github.com/HubSpot/jinjava/pull/1285">Don't
require explicitly pushing the <code>JinjavaInterpreter</code> when
using it directly</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/HubSpot/jinjava/commit/44a958c47e4e4a7bfad7371b4114fbc09dac3d26"><code>44a958c</code></a>
[maven-release-plugin] prepare release jinjava-2.8.4</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/b65631687d1eda5d3137ff32ce9d73042c3f9534"><code>b656316</code></a>
Merge pull request <a
href="https://redirect.github.com/HubSpot/jinjava/issues/1329">#1329</a>
from HubSpot/jasmith_hubspot/jinjava-2.8.4-changelog...</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/c5916777506a3cb67ff1b609244661501a7e4d1f"><code>c591677</code></a>
docs: prepare changelog for jinjava 2.8.4 release</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/97238d530498f15c64df3737cbd18f8f462e55dd"><code>97238d5</code></a>
Merge pull request <a
href="https://redirect.github.com/HubSpot/jinjava/issues/1328">#1328</a>
from HubSpot/jasmith_hubspot/tagnode-default-scanner...</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/bab6ba338ce43b5d4fa3232be193fbb5d39c25a4"><code>bab6ba3</code></a>
fix: default null TokenScannerSymbols to DefaultTokenScannerSymbols</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/df3e3d8f7660b35d6ceaee244df1cd2325a3dc56"><code>df3e3d8</code></a>
Merge pull request <a
href="https://redirect.github.com/HubSpot/jinjava/issues/1325">#1325</a>
from HubSpot/jasmith_hubspot/backport-1305-1306-1311...</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/8511a71073288f166e032cfa88cb7b82d176a023"><code>8511a71</code></a>
Add keepTrailingNewline option to match Python Jinja2 default
behaviour</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/f9e5c21e2c89c6a7ca2a555c74d34a2549a0df84"><code>f9e5c21</code></a>
fix: treat backslash as escape character only inside quoted strings</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/f5e5b7bea7f815870731a9ce20df30411522308e"><code>f5e5b7b</code></a>
feat: add StringTokenScannerSymbols for configurable multi-character
delimiters</li>
<li><a
href="https://github.com/HubSpot/jinjava/commit/5afaece6bad6a096771396eaaddaf54da3a8609e"><code>5afaece</code></a>
Merge pull request <a
href="https://redirect.github.com/HubSpot/jinjava/issues/1309">#1309</a>
from HubSpot/2.8.x-integer-set-to-long-conversion</li>
<li>Additional commits viewable in <a
href="https://github.com/HubSpot/jinjava/compare/jinjava-2.8.3...jinjava-2.8.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.hubspot.jinjava:jinjava&package-manager=gradle&previous-version=2.8.3&new-version=2.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 3bcae55ea7..38fab663f6 100644
--- a/build.gradle
+++ b/build.gradle
@@ -36,7 +36,7 @@ ext {
     okhttpBomVersion = "5.3.2"
     gsonVersion = "2.14.0"
     guavaVersion = "33.6.0-jre"
-    jinjavaVersion = "2.8.3"
+    jinjavaVersion = "2.8.4"
     jackson2Version = "2.22.1"
     bucket4jVersion = "8.19.0"
     archunitVersion = "1.4.2"

From a8b2957b7469535d695e3fd3743c00a8c0597b08 Mon Sep 17 00:00:00 2001
From: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
Date: Tue, 4 Aug 2026 12:24:43 +0100
Subject: [PATCH 061/122] Fix preview on crop/rotate (#7266)

Preview on crop and rotate shows just the original file you uploaded, if
you switch to a new one it doesn't update.
---
 .../components/tools/crop/CropSettings.tsx    |  29 ++---
 .../tools/rotate/RotateSettings.test.tsx      |  66 ++++++++++
 .../tools/rotate/RotateSettings.tsx           |  25 ++--
 .../tools/shared/useViewScopedFiles.test.ts   | 119 ++++++++++++++++++
 .../hooks/tools/shared/useViewScopedFiles.ts  |  27 +++-
 5 files changed, 230 insertions(+), 36 deletions(-)
 create mode 100644 frontend/editor/src/core/components/tools/rotate/RotateSettings.test.tsx
 create mode 100644 frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.test.ts

diff --git a/frontend/editor/src/core/components/tools/crop/CropSettings.tsx b/frontend/editor/src/core/components/tools/crop/CropSettings.tsx
index 710391dd6c..82516059b0 100644
--- a/frontend/editor/src/core/components/tools/crop/CropSettings.tsx
+++ b/frontend/editor/src/core/components/tools/crop/CropSettings.tsx
@@ -1,4 +1,4 @@
-import { useMemo, useState, useEffect } from "react";
+import { useState, useEffect } from "react";
 import {
   Stack,
   Text,
@@ -12,7 +12,10 @@ import { ActionIcon } from "@app/ui/ActionIcon";
 import { useTranslation } from "react-i18next";
 import RestartAltIcon from "@mui/icons-material/RestartAlt";
 import { CropParametersHook } from "@app/hooks/tools/crop/useCropParameters";
-import { useAllFiles } from "@app/contexts/FileContext";
+import {
+  useViewScopedFiles,
+  useViewScopedFileStubs,
+} from "@app/hooks/tools/shared/useViewScopedFiles";
 import CropAreaSelector from "@app/components/tools/crop/CropAreaSelector";
 import CropCoordinateInputs from "@app/components/tools/crop/CropCoordinateInputs";
 import { DEFAULT_CROP_AREA } from "@app/constants/cropConstants";
@@ -34,32 +37,20 @@ const CONTAINER_SIZE = 250; // Fit within actual pane width
 
 const CropSettings = ({ parameters, disabled = false }: CropSettingsProps) => {
   const { t } = useTranslation();
-  const { files, fileStubs } = useAllFiles();
+  // Preview and measure the document the crop will actually apply to, so both
+  // follow the viewer when the user switches files with the tool open.
+  const [selectedStub = null] = useViewScopedFileStubs();
+  const [selectedFile = null] = useViewScopedFiles();
 
-  // Get the first file for preview
-  const selectedStub = useMemo(() => {
-    return fileStubs.length > 0 ? fileStubs[0] : null;
-  }, [fileStubs]);
-
-  // Get the first file for PDF processing
-  const selectedFile = useMemo(() => {
-    return files.length > 0 ? files[0] : null;
-  }, [files]);
-
-  // Get thumbnail for the selected file
-  const [thumbnail, setThumbnail] = useState<string | null>(null);
   const [pdfBounds, setPdfBounds] = useState<PDFBounds | null>(null);
 
   useEffect(() => {
     const loadPDFDimensions = async () => {
       if (!selectedStub || !selectedFile) {
         setPdfBounds(null);
-        setThumbnail(null);
         return;
       }
 
-      setThumbnail(selectedStub.thumbnailUrl || null);
-
       try {
         // Get PDF dimensions from the actual file
         const arrayBuffer = await selectedFile.arrayBuffer();
@@ -223,7 +214,7 @@ const CropSettings = ({ parameters, disabled = false }: CropSettingsProps) => {
               >
                 <DocumentThumbnail
                   file={selectedStub}
-                  thumbnail={thumbnail}
+                  thumbnail={selectedStub?.thumbnailUrl ?? null}
                   style={{
                     width: pdfBounds.thumbnailWidth,
                     height: pdfBounds.thumbnailHeight,
diff --git a/frontend/editor/src/core/components/tools/rotate/RotateSettings.test.tsx b/frontend/editor/src/core/components/tools/rotate/RotateSettings.test.tsx
new file mode 100644
index 0000000000..0730521b8e
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/rotate/RotateSettings.test.tsx
@@ -0,0 +1,66 @@
+import { describe, expect, it, vi } from "vitest";
+import { render, screen } from "@testing-library/react";
+import { MantineProvider } from "@mantine/core";
+
+const viewer = { activeFileIndex: 0 };
+const files = {
+  files: [
+    { fileId: "a", name: "alpha.pdf" },
+    { fileId: "b", name: "beta.pdf" },
+  ],
+  fileStubs: [
+    { id: "a", name: "alpha.pdf", thumbnailUrl: "alpha.png" },
+    { id: "b", name: "beta.pdf", thumbnailUrl: "beta.png" },
+  ],
+};
+
+vi.mock("@app/contexts/ViewerContext", () => ({ useViewer: () => viewer }));
+vi.mock("@app/contexts/NavigationContext", () => ({
+  useNavigationState: () => ({ workbench: "viewer" }),
+}));
+vi.mock("@app/contexts/FileContext", () => ({ useAllFiles: () => files }));
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    t: (_key: string, fallback?: string) => fallback ?? _key,
+  }),
+}));
+
+import RotateSettings from "@app/components/tools/rotate/RotateSettings";
+
+const parameters = {
+  parameters: { angle: 0 },
+  rotateClockwise: vi.fn(),
+  rotateAnticlockwise: vi.fn(),
+} as never;
+
+const renderAt = (activeFileIndex: number) => {
+  viewer.activeFileIndex = activeFileIndex;
+  return render(
+    <MantineProvider>
+      <RotateSettings parameters={parameters} />
+    </MantineProvider>,
+  );
+};
+
+describe("RotateSettings preview", () => {
+  it("previews the viewer's active file, not the first loaded one", () => {
+    renderAt(1);
+
+    expect(screen.getByAltText("Preview of beta.pdf")).toBeInTheDocument();
+    expect(screen.queryByAltText("Preview of alpha.pdf")).toBeNull();
+  });
+
+  it("follows the viewer when the active file changes", () => {
+    const { rerender } = renderAt(0);
+    expect(screen.getByAltText("Preview of alpha.pdf")).toBeInTheDocument();
+
+    viewer.activeFileIndex = 1;
+    rerender(
+      <MantineProvider>
+        <RotateSettings parameters={parameters} />
+      </MantineProvider>,
+    );
+
+    expect(screen.getByAltText("Preview of beta.pdf")).toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/core/components/tools/rotate/RotateSettings.tsx b/frontend/editor/src/core/components/tools/rotate/RotateSettings.tsx
index ba66790298..950c78ea99 100644
--- a/frontend/editor/src/core/components/tools/rotate/RotateSettings.tsx
+++ b/frontend/editor/src/core/components/tools/rotate/RotateSettings.tsx
@@ -1,11 +1,11 @@
-import { useMemo, useState, useEffect } from "react";
+import { useEffect } from "react";
 import { Stack, Text, Box, Group, Center } from "@mantine/core";
 import { ActionIcon } from "@app/ui/ActionIcon";
 import { useTranslation } from "react-i18next";
 import RotateLeftIcon from "@mui/icons-material/RotateLeft";
 import RotateRightIcon from "@mui/icons-material/RotateRight";
 import { RotateParametersHook } from "@app/hooks/tools/rotate/useRotateParameters";
-import { useAllFiles } from "@app/contexts/FileContext";
+import { useViewScopedFileStubs } from "@app/hooks/tools/shared/useViewScopedFiles";
 import DocumentThumbnail from "@app/components/shared/filePreview/DocumentThumbnail";
 
 interface RotateSettingsProps {
@@ -18,19 +18,9 @@ const RotateSettings = ({
   disabled = false,
 }: RotateSettingsProps) => {
   const { t } = useTranslation();
-  const { fileStubs } = useAllFiles();
-
-  // Get the first file for preview
-  const selectedStub = useMemo(() => {
-    return fileStubs.length > 0 ? fileStubs[0] : null;
-  }, [fileStubs]);
-
-  // Get thumbnail for the selected file
-  const [thumbnail, setThumbnail] = useState<string | null>(null);
-
-  useEffect(() => {
-    setThumbnail(selectedStub?.thumbnailUrl || null);
-  }, [selectedStub]);
+  // Preview the document the rotation will actually apply to, so it follows
+  // the viewer when the user switches files with the tool open.
+  const [previewStub = null] = useViewScopedFileStubs();
 
   // Calculate current angle display
   const currentAngle = parameters.parameters.angle;
@@ -86,7 +76,10 @@ const RotateSettings = ({
                 justifyContent: "center",
               }}
             >
-              <DocumentThumbnail file={selectedStub} thumbnail={thumbnail} />
+              <DocumentThumbnail
+                file={previewStub}
+                thumbnail={previewStub?.thumbnailUrl ?? null}
+              />
             </Box>
           </Box>
         </Center>
diff --git a/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.test.ts b/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.test.ts
new file mode 100644
index 0000000000..974782c09e
--- /dev/null
+++ b/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.test.ts
@@ -0,0 +1,119 @@
+import { describe, expect, it, vi } from "vitest";
+import { renderHook } from "@testing-library/react";
+
+const mockViewer = { activeFileIndex: 0 };
+const mockNavigation = { workbench: "viewer" };
+const mockFiles: { files: unknown[]; fileStubs: unknown[] } = {
+  files: [],
+  fileStubs: [],
+};
+
+vi.mock("@app/contexts/ViewerContext", () => ({
+  useViewer: () => mockViewer,
+}));
+
+vi.mock("@app/contexts/NavigationContext", () => ({
+  useNavigationState: () => mockNavigation,
+}));
+
+vi.mock("@app/contexts/FileContext", () => ({
+  useAllFiles: () => mockFiles,
+}));
+
+import {
+  useViewScopedFiles,
+  useViewScopedFileStubs,
+} from "@app/hooks/tools/shared/useViewScopedFiles";
+
+const file = (id: string) => ({ fileId: id, name: `${id}.pdf` });
+const stub = (id: string) => ({
+  id,
+  name: `${id}.pdf`,
+  thumbnailUrl: `${id}.png`,
+});
+
+function setState(opts: {
+  workbench?: string;
+  activeFileIndex?: number;
+  files?: unknown[];
+  fileStubs?: unknown[];
+}) {
+  mockNavigation.workbench = opts.workbench ?? "viewer";
+  mockViewer.activeFileIndex = opts.activeFileIndex ?? 0;
+  mockFiles.files = opts.files ?? [];
+  mockFiles.fileStubs = opts.fileStubs ?? [];
+}
+
+describe("useViewScopedFileStubs", () => {
+  it("follows the viewer's active file rather than the first loaded one", () => {
+    setState({
+      files: [file("a"), file("b"), file("c")],
+      fileStubs: [stub("a"), stub("b"), stub("c")],
+      activeFileIndex: 2,
+    });
+
+    const { result } = renderHook(() => useViewScopedFileStubs());
+
+    expect(result.current.map((s) => s.id)).toEqual(["c"]);
+  });
+
+  it("re-resolves when the viewer switches files", () => {
+    setState({
+      files: [file("a"), file("b")],
+      fileStubs: [stub("a"), stub("b")],
+      activeFileIndex: 0,
+    });
+
+    const { result, rerender } = renderHook(() => useViewScopedFileStubs());
+    expect(result.current.map((s) => s.id)).toEqual(["a"]);
+
+    setState({
+      files: [file("a"), file("b")],
+      fileStubs: [stub("a"), stub("b")],
+      activeFileIndex: 1,
+    });
+    rerender();
+
+    expect(result.current.map((s) => s.id)).toEqual(["b"]);
+  });
+
+  it("matches by id, not position, when the two lists are out of step", () => {
+    // A stub exists before its bytes load, so the stub list can be longer than
+    // (and offset from) the file list.
+    setState({
+      files: [file("b")],
+      fileStubs: [stub("a"), stub("b")],
+      activeFileIndex: 0,
+    });
+
+    const { result } = renderHook(() => useViewScopedFileStubs());
+
+    expect(result.current.map((s) => s.id)).toEqual(["b"]);
+  });
+
+  it("returns every stub outside the viewer, mirroring useViewScopedFiles", () => {
+    setState({
+      workbench: "fileEditor",
+      files: [file("a"), file("b")],
+      fileStubs: [stub("a"), stub("b")],
+    });
+
+    const stubs = renderHook(() => useViewScopedFileStubs()).result.current;
+    const files = renderHook(() => useViewScopedFiles()).result.current;
+
+    expect(stubs.map((s) => s.id)).toEqual(["a", "b"]);
+    expect(stubs).toHaveLength(files.length);
+  });
+
+  it("drops stubs with no loaded file instead of returning undefined holes", () => {
+    setState({
+      workbench: "fileEditor",
+      files: [file("a")],
+      fileStubs: [stub("a"), stub("orphan")],
+    });
+
+    const { result } = renderHook(() => useViewScopedFileStubs());
+
+    expect(result.current.map((s) => s.id)).toEqual(["a"]);
+  });
+});
diff --git a/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.ts b/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.ts
index 070e854700..cec039481f 100644
--- a/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/useViewScopedFiles.ts
@@ -2,7 +2,7 @@ import { useMemo } from "react";
 import { useAllFiles } from "@app/contexts/FileContext";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { useNavigationState } from "@app/contexts/NavigationContext";
-import { StirlingFile } from "@app/types/fileContext";
+import { StirlingFile, StirlingFileStub } from "@app/types/fileContext";
 
 export function useViewScopedFiles(ignoreViewerScope = false): StirlingFile[] {
   const { activeFileIndex } = useViewer();
@@ -18,3 +18,28 @@ export function useViewScopedFiles(ignoreViewerScope = false): StirlingFile[] {
     return allFiles;
   }, [workbench, allFiles, activeFileIndex, ignoreViewerScope]);
 }
+
+/**
+ * The stubs for {@link useViewScopedFiles} — the same scoping rule, for UI that
+ * needs stub-only metadata (thumbnails, page counts) rather than file bytes.
+ * A tool's preview must read from here, not from the raw file list: indexing
+ * that list pins the preview to whichever file was added first, so it keeps
+ * showing the original document after the viewer switches files.
+ *
+ * Resolved by id rather than by position, because the file and stub lists are
+ * filtered independently — a stub exists before its bytes finish loading, so
+ * the two arrays can hold different indices for the same document.
+ */
+export function useViewScopedFileStubs(
+  ignoreViewerScope = false,
+): StirlingFileStub[] {
+  const scopedFiles = useViewScopedFiles(ignoreViewerScope);
+  const { fileStubs } = useAllFiles();
+
+  return useMemo(() => {
+    const stubsById = new Map(fileStubs.map((stub) => [stub.id, stub]));
+    return scopedFiles
+      .map((file) => stubsById.get(file.fileId))
+      .filter((stub): stub is StirlingFileStub => stub != null);
+  }, [scopedFiles, fileStubs]);
+}

From cb45fb159ab6b9c97701606afdc368af34d8fed0 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Tue, 4 Aug 2026 14:02:18 +0200
Subject: [PATCH 062/122] fix(search): Fix PDF viewer search showing 0 of 0
 results (#7228)

# Description of Changes


Fixes that search always showing 0 of 0 result even when there are
multiple hits in the search.

### New

<img width="706" height="284" alt="image"
src="https://github.com/user-attachments/assets/f3507647-2a41-4e60-8c9c-eca43005a5c4"
/>


### Old

<img width="708" height="292" alt="image"
src="https://github.com/user-attachments/assets/7b0a6a66-f7c5-4df8-af89-134afef72eba"
/>


On the same PDF.

Changes:
* Refactored the effect in `SearchInterface` to fetch the latest search
state from `viewerContext` on each interval, preventing stale closure
values and ensuring up-to-date search results and active index are used.
* Updated the "previous" and "next" result buttons to be disabled
whenever there are zero search results, rather than relying on the
current index, making the UI more robust and intuitive.

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../components/viewer/SearchInterface.tsx     | 23 +++++++++++--------
 1 file changed, 14 insertions(+), 9 deletions(-)

diff --git a/frontend/editor/src/core/components/viewer/SearchInterface.tsx b/frontend/editor/src/core/components/viewer/SearchInterface.tsx
index 2c93aff17c..a32c64c33a 100644
--- a/frontend/editor/src/core/components/viewer/SearchInterface.tsx
+++ b/frontend/editor/src/core/components/viewer/SearchInterface.tsx
@@ -13,12 +13,15 @@ interface SearchInterfaceProps {
 export function SearchInterface({ visible, onClose }: SearchInterfaceProps) {
   const { t } = useTranslation();
   const viewerContext = React.useContext(ViewerContext);
+  const viewerContextRef = useRef(viewerContext);
+
+  useEffect(() => {
+    viewerContextRef.current = viewerContext;
+  }, [viewerContext]);
+
   const inputRef = useRef<HTMLInputElement>(null);
   const searchTimeoutRef = useRef<NodeJS.Timeout | null>(null);
 
-  const searchState = viewerContext?.getSearchState();
-  const searchResults = searchState?.results;
-  const searchActiveIndex = searchState?.activeIndex;
   const searchActions = viewerContext?.searchActions;
   const [searchQuery, setSearchQuery] = useState("");
   const [jumpToValue, setJumpToValue] = useState("");
@@ -89,7 +92,11 @@ export function SearchInterface({ visible, onClose }: SearchInterfaceProps) {
     if (!visible) return;
 
     const checkSearchState = () => {
-      // Use ViewerContext state instead of window APIs
+      // Fetch fresh search state from ViewerContext ref to avoid closure stale values
+      const searchState = viewerContextRef.current?.getSearchState();
+      const searchResults = searchState?.results;
+      const searchActiveIndex = searchState?.activeIndex;
+
       if (searchResults && searchResults.length > 0) {
         const activeIndex = searchActiveIndex || 1;
 
@@ -115,7 +122,7 @@ export function SearchInterface({ visible, onClose }: SearchInterfaceProps) {
     const interval = setInterval(checkSearchState, 200);
 
     return () => clearInterval(interval);
-  }, [visible, searchResults, searchActiveIndex, searchQuery]);
+  }, [visible, searchQuery]);
 
   const handleKeyDown = (event: React.KeyboardEvent<HTMLInputElement>) => {
     if (event.key === "Enter") {
@@ -279,7 +286,7 @@ export function SearchInterface({ visible, onClose }: SearchInterfaceProps) {
             variant="tertiary"
             size="sm"
             onClick={handlePrevious}
-            disabled={!resultInfo || resultInfo.currentIndex <= 1}
+            disabled={!resultInfo || resultInfo.totalResults === 0}
             aria-label={t("viewer.search.previous", "Previous result")}
           >
             <LocalIcon icon="keyboard-arrow-up" width="1rem" height="1rem" />
@@ -288,9 +295,7 @@ export function SearchInterface({ visible, onClose }: SearchInterfaceProps) {
             variant="tertiary"
             size="sm"
             onClick={handleNext}
-            disabled={
-              !resultInfo || resultInfo.currentIndex >= resultInfo.totalResults
-            }
+            disabled={!resultInfo || resultInfo.totalResults === 0}
             aria-label={t("viewer.search.next", "Next result")}
           >
             <LocalIcon icon="keyboard-arrow-down" width="1rem" height="1rem" />

From 120678260af2334fd39eeb9136184911d537d2e9 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Tue, 4 Aug 2026 14:06:31 +0200
Subject: [PATCH 063/122] docs(contributing): update CONTRIBUTING.md to include
 desktop application startup command (#7211)

# Description of Changes

May spare some headaches down the line.

Changes:

- Added desktop dev command to the contributing guide

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 CONTRIBUTING.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 79eb43f645..9092d5cd72 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -21,7 +21,7 @@ This project uses [Task](https://taskfile.dev/) as a unified command runner. Aft
 
 1. Install the `task` CLI: https://taskfile.dev/installation/
 2. Run `task install` to install all dependencies
-3. Run `task dev` to start backend + frontend
+3. Run `task dev` to start backend + frontend or `task desktop:dev` to start the desktop application
 4. Run `task check` before submitting a PR
 
 Run `task --list` to see all available commands.

From 921bdac4b78d303bbe48837eedeab75078272c7b Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Tue, 4 Aug 2026 14:40:41 +0100
Subject: [PATCH 064/122] Desktop installer fixes (#7174)

# Description of Changes

* Adds a `windows-11-arm` CI/release leg (NSIS, Microsoft JDK 25,
updater keys); JPDFium natives deliberately excluded
(`jpdfiumPlatforms=none`) until published, so don't ship ARM64
installers to users yet
* Defaults `WEBKIT_DISABLE_DMABUF_RENDERER=1` on Linux (crash switching
tools on NVIDIA)
* Strips the bundled libwayland from AppImages (blank window on Fedora
Wayland)
* Blocks off-app webview navigation + window drop guard + close failsafe
(drag-drop bricks the app)
* 120s startup grace before the backend is declared unhealthy, restart
success only announced after a real health check ("Backend stopped
unexpectedly" spam and likely the OAuth port churn)
* Verified: green `windows-arm64` build (234 MB NSIS artifact) and green
Linux run with libwayland confirmed stripped
* JPDFium fixes for multi threading issues
---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .github/workflows/multiOSReleases.yml         | 120 ++++++++++++++++--
 .github/workflows/tauri-build.yml             |  86 +++++++++++--
 .taskfiles/desktop.yml                        |   1 +
 app/common/build.gradle                       |  18 ++-
 build.gradle                                  |   2 +-
 frontend/editor/src-tauri/src/lib.rs          |  82 +++++++++++-
 .../src/desktop/components/AppProviders.tsx   |  14 ++
 .../src/desktop/hooks/useExitWarning.ts       |  11 +-
 .../desktop/services/tauriBackendService.ts   |  40 +++++-
 9 files changed, 335 insertions(+), 39 deletions(-)

diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index 75cecb7fb5..8303cf102a 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -12,13 +12,14 @@ on:
           - "true"
           - "false"
       platform:
-        description: "Platform to build (windows, macos, linux, or all)"
+        description: "Platform to build (windows, windows-arm64, macos, linux, or all)"
         required: true
         default: "all"
         type: choice
         options:
           - all
           - windows
+          - windows-arm64
           - macos
           - linux
       sign:
@@ -87,24 +88,35 @@ jobs:
       - name: Determine build matrix
         id: set-matrix
         run: |
+          # windows-arm64: NSIS only (WiX MSI has no arm64 support in Tauri) and no
+          # JPDFium natives yet - flip to windows-arm64 once JPDFium ships them.
+          WINDOWS='{"platform":"windows-latest","args":"--target x86_64-pc-windows-msvc","name":"windows-x86_64","jpdfium_platforms":"windows-x64"}'
+          WINDOWS_ARM64='{"platform":"windows-11-arm","args":"--target aarch64-pc-windows-msvc --bundles nsis","name":"windows-arm64","jpdfium_platforms":"none"}'
+          MACOS='{"platform":"macos-15","args":"--target universal-apple-darwin","name":"macos-universal","jpdfium_platforms":"darwin-arm64,darwin-x64"}'
+          LINUX='{"platform":"ubuntu-22.04","args":"","name":"linux-x86_64","jpdfium_platforms":"linux-x64"}'
+          ALL="$WINDOWS,$WINDOWS_ARM64,$MACOS,$LINUX"
+
           if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
             case "${{ github.event.inputs.platform }}" in
               "windows")
-                echo 'matrix={"include":[{"platform":"windows-latest","args":"--target x86_64-pc-windows-msvc","name":"windows-x86_64","jpdfium_platforms":"windows-x64"}]}' >> $GITHUB_OUTPUT
+                echo "matrix={\"include\":[$WINDOWS,$WINDOWS_ARM64]}" >> $GITHUB_OUTPUT
+                ;;
+              "windows-arm64")
+                echo "matrix={\"include\":[$WINDOWS_ARM64]}" >> $GITHUB_OUTPUT
                 ;;
               "macos")
-                echo 'matrix={"include":[{"platform":"macos-15","args":"--target universal-apple-darwin","name":"macos-universal","jpdfium_platforms":"darwin-arm64,darwin-x64"}]}' >> $GITHUB_OUTPUT
+                echo "matrix={\"include\":[$MACOS]}" >> $GITHUB_OUTPUT
                 ;;
               "linux")
-                echo 'matrix={"include":[{"platform":"ubuntu-22.04","args":"","name":"linux-x86_64","jpdfium_platforms":"linux-x64"}]}' >> $GITHUB_OUTPUT
+                echo "matrix={\"include\":[$LINUX]}" >> $GITHUB_OUTPUT
                 ;;
               *)
-                echo 'matrix={"include":[{"platform":"windows-latest","args":"--target x86_64-pc-windows-msvc","name":"windows-x86_64","jpdfium_platforms":"windows-x64"},{"platform":"macos-15","args":"--target universal-apple-darwin","name":"macos-universal","jpdfium_platforms":"darwin-arm64,darwin-x64"},{"platform":"ubuntu-22.04","args":"","name":"linux-x86_64","jpdfium_platforms":"linux-x64"}]}' >> $GITHUB_OUTPUT
+                echo "matrix={\"include\":[$ALL]}" >> $GITHUB_OUTPUT
                 ;;
             esac
           else
             # For push/release events, build all platforms
-            echo 'matrix={"include":[{"platform":"windows-latest","args":"--target x86_64-pc-windows-msvc","name":"windows-x86_64","jpdfium_platforms":"windows-x64"},{"platform":"macos-15","args":"--target universal-apple-darwin","name":"macos-universal","jpdfium_platforms":"darwin-arm64,darwin-x64"},{"platform":"ubuntu-22.04","args":"","name":"linux-x86_64","jpdfium_platforms":"linux-x64"}]}' >> $GITHUB_OUTPUT
+            echo "matrix={\"include\":[$ALL]}" >> $GITHUB_OUTPUT
           fi
 
   build-jars:
@@ -236,11 +248,12 @@ jobs:
         if: matrix.platform == 'macos-15'
         run: echo "X64_JAVA_HOME=$JAVA_HOME" >> "$GITHUB_ENV"
 
+      # Temurin has no windows-aarch64 JDK 25 yet; Microsoft OpenJDK does.
       - name: Set up JDK 25
         uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: "25"
-          distribution: "temurin"
+          distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
@@ -271,7 +284,7 @@ jobs:
       # DigiCert KeyLocker Setup (Cloud HSM)
       - name: Setup DigiCert KeyLocker
         id: digicert-setup
-        if: ${{ matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         uses: digicert/ssm-code-signing@1d820463733701cf1484c7eb5d7d24a15ca2c454 # v1.2.1
         env:
           SM_API_KEY: ${{ secrets.SM_API_KEY }}
@@ -281,7 +294,7 @@ jobs:
           SM_HOST: ${{ secrets.SM_HOST }}
 
       - name: Setup DigiCert KeyLocker Certificate
-        if: ${{ matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         shell: pwsh
         run: |
           Write-Host "Setting up DigiCert KeyLocker environment..."
@@ -316,7 +329,7 @@ jobs:
 
       # Traditional PFX Certificate Import (fallback if KeyLocker not configured)
       - name: Import Windows Code Signing Certificate
-        if: ${{ matrix.platform == 'windows-latest' && env.SM_API_KEY == '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY == '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         env:
           WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
           WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
@@ -384,7 +397,7 @@ jobs:
       # Without this, signCommand failures are opaque (Tauri captures but drops
       # smctl's stderr) - running these loudly surfaces auth/env/keypair issues.
       - name: Preflight smctl
-        if: ${{ matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         shell: pwsh
         env:
           KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
@@ -415,7 +428,7 @@ jobs:
       # smctl reads SM_HOST, SM_API_KEY, SM_CLIENT_CERT_FILE, SM_CLIENT_CERT_PASSWORD
       # from env (set by prior DigiCert setup step). No --config-file needed.
       - name: Configure Windows code signing
-        if: ${{ matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         shell: bash
         env:
           KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
@@ -486,6 +499,54 @@ jobs:
           args: ${{ matrix.args }}
           updaterJsonKeepUniversal: true
 
+      # Bundled libwayland conflicts with the host's on some distros (Fedora
+      # Wayland: EGL_BAD_PARAMETER, blank window - #6878). Repack without it,
+      # then regenerate the updater .sig (repack invalidates the original) and
+      # GPG-sign again when release signing is on.
+      - name: Strip bundled Wayland libs from AppImage
+        if: matrix.platform == 'ubuntu-22.04'
+        continue-on-error: true
+        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          GPG_SIGN: ${{ (env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')) && '1' || '0' }}
+          SIGN_KEY: ${{ vars.RELEASE_GPG_FINGERPRINT }}
+          APPIMAGETOOL_SIGN_PASSPHRASE: ${{ secrets.RELEASE_GPG_PASSPHRASE }}
+        run: |
+          set -euo pipefail
+          AI=$(find "$PWD/frontend/editor/src-tauri/target" -name "*.AppImage" | head -1)
+          if [ -z "$AI" ]; then echo "No AppImage found - skipping"; exit 0; fi
+          chmod +x "$AI"
+          WORK=$(mktemp -d)
+          (cd "$WORK" && "$AI" --appimage-extract >/dev/null)
+          if ! ls "$WORK/squashfs-root/usr/lib/"libwayland-* >/dev/null 2>&1; then
+            echo "No bundled libwayland - nothing to strip"
+            rm -rf "$WORK"
+            exit 0
+          fi
+          rm -f "$WORK/squashfs-root/usr/lib/"libwayland-*
+          curl -fsSL -o "$WORK/appimagetool" \
+            https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-x86_64.AppImage
+          # Pinned checksum: never execute an unverified downloaded binary. On
+          # mismatch (upstream rebuilt continuous) the step aborts and the
+          # original AppImage ships unchanged - update the pin deliberately.
+          echo "a6d71e2b6cd66f8e8d16c37ad164658985e0cf5fcaa950c90a482890cb9d13e0  $WORK/appimagetool" | sha256sum -c -
+          chmod +x "$WORK/appimagetool"
+          SIGN_ARGS=()
+          if [ "$GPG_SIGN" = "1" ] && [ -n "${SIGN_KEY:-}" ]; then
+            SIGN_ARGS=(--sign --sign-key "$SIGN_KEY")
+          fi
+          "$WORK/appimagetool" --appimage-extract-and-run "${SIGN_ARGS[@]}" "$WORK/squashfs-root" "$AI.new"
+          # Updater payload signature must match the repacked bytes. The CLI
+          # reads the key/password from env - never pass secrets as argv.
+          if [ -n "${TAURI_SIGNING_PRIVATE_KEY:-}" ]; then
+            (cd frontend && npx tauri signer sign "$AI.new")
+            mv "$AI.new.sig" "$AI.sig"
+          fi
+          mv "$AI.new" "$AI"
+          rm -rf "$WORK"
+          echo "Stripped bundled libwayland from $(basename "$AI")"
+
       - name: Clear release GPG key from runner keyring (Linux)
         if: always() && matrix.platform == 'ubuntu-22.04' && env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')
         env:
@@ -502,10 +563,31 @@ jobs:
       # artifact. Tauri signs a COPY when bundling into the MSI and leaves the raw
       # cargo output unsigned, so checking it produces false negatives.
       - name: Verify Windows Code Signature
-        if: ${{ matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         timeout-minutes: 15
         shell: pwsh
         run: |
+          # arm64 ships an NSIS installer, not an MSI. Tauri's signCommand signs the
+          # inner exe before packing and the setup exe after, so verifying the setup
+          # exe is the arm64 equivalent of the MSI + inner-exe check below.
+          if ("${{ matrix.platform }}" -eq "windows-11-arm") {
+            $setupExes = Get-ChildItem -Path "./frontend/editor/src-tauri/target" -Filter "*-setup.exe" -Recurse -File
+            if ($setupExes.Count -eq 0) {
+              Write-Host "[ERROR] No NSIS installer found under target/"
+              exit 1
+            }
+            foreach ($exe in $setupExes) {
+              $sig = Get-AuthenticodeSignature -FilePath $exe.FullName
+              Write-Host "NSIS installer: $($exe.Name) Status=$($sig.Status), Signer=$($sig.SignerCertificate.Subject)"
+              if ($sig.Status -ne "Valid") {
+                Write-Host "[ERROR] NSIS installer is not signed"
+                exit 1
+              }
+            }
+            Write-Host "[SUCCESS] NSIS installer is properly signed"
+            exit 0
+          }
+
           $allSigned = $true
 
           # Check MSI installer (outer wrapper - what users download)
@@ -569,7 +651,7 @@ jobs:
       # but drops stderr when the command exits non-zero, making failures opaque.
       # The real errors live in smctl's log files - surface them here for debugging.
       - name: Dump smctl logs on failure
-        if: ${{ failure() && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' }}
+        if: ${{ failure() && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' }}
         shell: pwsh
         run: |
           $logDir = "$env:USERPROFILE\.signingmanager\logs"
@@ -605,6 +687,11 @@ jobs:
           if [ "${{ matrix.platform }}" = "windows-latest" ]; then
             find . -name "*.msi" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}.msi" \;
             find . -name "*.msi.sig" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}.msi.sig" \;
+          elif [ "${{ matrix.platform }}" = "windows-11-arm" ]; then
+            # arm64 ships the NSIS installer (WiX MSI has no arm64 support in Tauri).
+            # The setup exe is also its own updater payload (-> sibling .sig).
+            find . -name "*-setup.exe" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}-setup.exe" \;
+            find . -name "*-setup.exe.sig" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}-setup.exe.sig" \;
           elif [ "${{ matrix.platform }}" = "macos-15" ]; then
             # DMG = manual install; .app.tar.gz (+ .sig) = updater payload.
             # Raw .app is intentionally not shipped (hundreds of MB of uncompressed input).
@@ -719,6 +806,10 @@ jobs:
                   'bundles': ['Stirling-PDF-windows-x86_64.msi'],
                   'targets': ['windows-x86_64-msi', 'windows-x86_64'],
               },
+              {
+                  'bundles': ['Stirling-PDF-windows-arm64-setup.exe'],
+                  'targets': ['windows-aarch64-nsis', 'windows-aarch64'],
+              },
               {
                   'bundles': ['Stirling-PDF-macos-universal.app.tar.gz'],
                   'targets': ['darwin-x86_64', 'darwin-aarch64'],
@@ -817,6 +908,7 @@ jobs:
           files: |
             ./artifacts/**/*.jar
             ./artifacts/**/*.msi
+            ./artifacts/**/*-setup.exe
             ./artifacts/**/*.dmg
             ./artifacts/**/*.app.tar.gz
             ./artifacts/**/*.deb
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index e504826d35..415e8be4e5 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -12,7 +12,7 @@ on:
   workflow_call:
     inputs:
       platform:
-        description: "Platform to build (windows, macos, linux, windows-macos, or all)."
+        description: "Platform to build (windows, windows-arm64, macos, linux, windows-macos, or all)."
         required: false
         type: string
         default: "all"
@@ -29,13 +29,14 @@ on:
   workflow_dispatch:
     inputs:
       platform:
-        description: "Platform to build (windows, macos, linux, windows-macos, or all)"
+        description: "Platform to build (windows, windows-arm64, macos, linux, windows-macos, or all)"
         required: true
         default: "all"
         type: choice
         options:
           - all
           - windows
+          - windows-arm64
           - macos
           - linux
           - windows-macos
@@ -73,15 +74,19 @@ jobs:
           PLATFORM: ${{ inputs.platform }}
         run: |
           WINDOWS='{"platform":"windows-latest","args":"--target x86_64-pc-windows-msvc","name":"windows-x86_64","jpdfium_platforms":"windows-x64"}'
+          # ARM64: NSIS only (WiX MSI has no arm64 support in Tauri) and no JPDFium
+          # natives yet - flip jpdfium_platforms to windows-arm64 once JPDFium ships it.
+          WINDOWS_ARM64='{"platform":"windows-11-arm","args":"--target aarch64-pc-windows-msvc --bundles nsis","name":"windows-arm64","jpdfium_platforms":"none"}'
           MACOS='{"platform":"macos-15","args":"--target universal-apple-darwin","name":"macos-universal","jpdfium_platforms":"darwin-arm64,darwin-x64"}'
           LINUX='{"platform":"ubuntu-22.04","args":"","name":"linux-x86_64","jpdfium_platforms":"linux-x64"}'
 
           case "$PLATFORM" in
-            windows)       ENTRIES=("$WINDOWS") ;;
+            windows)       ENTRIES=("$WINDOWS" "$WINDOWS_ARM64") ;;
+            windows-arm64) ENTRIES=("$WINDOWS_ARM64") ;;
             macos)         ENTRIES=("$MACOS") ;;
             linux)         ENTRIES=("$LINUX") ;;
             windows-macos) ENTRIES=("$WINDOWS" "$MACOS") ;;
-            *)             ENTRIES=("$WINDOWS" "$MACOS" "$LINUX") ;;
+            *)             ENTRIES=("$WINDOWS" "$WINDOWS_ARM64" "$MACOS" "$LINUX") ;;
           esac
 
           # Drop macOS entries when Apple certificate secret is unavailable
@@ -167,11 +172,12 @@ jobs:
         if: matrix.platform == 'macos-15'
         run: echo "X64_JAVA_HOME=$JAVA_HOME" >> "$GITHUB_ENV"
 
+      # Temurin has no windows-aarch64 JDK 25 yet; Microsoft OpenJDK does.
       - name: Set up JDK 25
         uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: "25"
-          distribution: "temurin"
+          distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
@@ -203,7 +209,7 @@ jobs:
       # DigiCert KeyLocker Setup (Cloud HSM)
       - name: Setup DigiCert KeyLocker
         id: digicert-setup
-        if: ${{ inputs.sign && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
+        if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
         uses: digicert/ssm-code-signing@1d820463733701cf1484c7eb5d7d24a15ca2c454 # v1.2.1
         env:
           SM_API_KEY: ${{ secrets.SM_API_KEY }}
@@ -213,7 +219,7 @@ jobs:
           SM_HOST: ${{ secrets.SM_HOST }}
 
       - name: Setup DigiCert KeyLocker Certificate
-        if: ${{ inputs.sign && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
+        if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
         shell: pwsh
         run: |
           Write-Host "Setting up DigiCert KeyLocker environment..."
@@ -248,7 +254,7 @@ jobs:
 
       # Traditional PFX Certificate Import (fallback if KeyLocker not configured)
       - name: Import Windows Code Signing Certificate
-        if: ${{ inputs.sign && matrix.platform == 'windows-latest' && env.SM_API_KEY == '' && github.ref == 'refs/heads/main' }}
+        if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY == '' && github.ref == 'refs/heads/main' }}
         env:
           WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
           WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
@@ -323,7 +329,7 @@ jobs:
           ls -la /usr/bin/hd* || echo "No hd* tools found"
 
       - name: Preflight smctl
-        if: ${{ inputs.sign && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
+        if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
         shell: pwsh
         env:
           KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
@@ -336,7 +342,7 @@ jobs:
           if ($LASTEXITCODE -ne 0) { Write-Host "[WARN] smctl windows certsync returned non-zero - continuing" }
 
       - name: Configure Windows code signing
-        if: ${{ inputs.sign && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
+        if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
         shell: bash
         env:
           KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
@@ -452,6 +458,37 @@ jobs:
           tauriScript: npx tauri
           args: --bundles appimage
 
+      # Bundled libwayland conflicts with the host's on some distros (Fedora
+      # Wayland: EGL_BAD_PARAMETER, blank window - #6878). The AppImage
+      # ecosystem excludelist agrees these libs must come from the system.
+      - name: Strip bundled Wayland libs from AppImage
+        if: matrix.platform == 'ubuntu-22.04' && !inputs.minimal
+        continue-on-error: true
+        run: |
+          set -euo pipefail
+          AI=$(find "$PWD/frontend/editor/src-tauri/target" -name "*.AppImage" | head -1)
+          if [ -z "$AI" ]; then echo "No AppImage found - skipping"; exit 0; fi
+          chmod +x "$AI"
+          WORK=$(mktemp -d)
+          (cd "$WORK" && "$AI" --appimage-extract >/dev/null)
+          if ! ls "$WORK/squashfs-root/usr/lib/"libwayland-* >/dev/null 2>&1; then
+            echo "No bundled libwayland - nothing to strip"
+            rm -rf "$WORK"
+            exit 0
+          fi
+          rm -f "$WORK/squashfs-root/usr/lib/"libwayland-*
+          curl -fsSL -o "$WORK/appimagetool" \
+            https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-x86_64.AppImage
+          # Pinned checksum: never execute an unverified downloaded binary. On
+          # mismatch (upstream rebuilt continuous) the step aborts and the
+          # original AppImage ships unchanged - update the pin deliberately.
+          echo "a6d71e2b6cd66f8e8d16c37ad164658985e0cf5fcaa950c90a482890cb9d13e0  $WORK/appimagetool" | sha256sum -c -
+          chmod +x "$WORK/appimagetool"
+          "$WORK/appimagetool" --appimage-extract-and-run "$WORK/squashfs-root" "$AI.new"
+          mv "$AI.new" "$AI"
+          rm -rf "$WORK"
+          echo "Stripped bundled libwayland from $(basename "$AI")"
+
       - name: Clear release GPG key from runner keyring (Linux)
         if: always() && inputs.sign && matrix.platform == 'ubuntu-22.04' && env.RELEASE_GPG_PRIVATE_KEY != '' && github.ref == 'refs/heads/main'
         env:
@@ -490,6 +527,9 @@ jobs:
             # Only ship the MSI installer. The loose exe and WiX toolset exes
             # are not the user-facing installer - the MSI contains the signed inner exe.
             find . -name "*.msi" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}.msi" \;
+          elif [ "${{ matrix.platform }}" = "windows-11-arm" ]; then
+            # arm64 ships the NSIS installer (WiX MSI has no arm64 support in Tauri).
+            find . -name "*-setup.exe" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}-setup.exe" \;
           elif [ "${{ matrix.platform }}" = "macos-15" ]; then
             find . -name "*.dmg" -exec cp {} "$DIST/Stirling-PDF-${{ matrix.name }}.dmg" \;
           else
@@ -501,9 +541,28 @@ jobs:
       # Verify the MSI AND the inner exe extracted from it are signed.
       # The inner exe is what gets installed on users' machines and what AV scans.
       - name: Verify Windows Code Signature
-        if: inputs.sign && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' && github.ref == 'refs/heads/main'
+        if: inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && github.ref == 'refs/heads/main'
         shell: pwsh
         run: |
+          # arm64 ships an NSIS installer, not an MSI. Tauri's signCommand signs the
+          # inner exe before packing and the setup exe after, so verifying the setup
+          # exe is the arm64 equivalent of the MSI + inner-exe check below.
+          if ("${{ matrix.platform }}" -eq "windows-11-arm") {
+            $exePath = "./dist/Stirling-PDF-${{ matrix.name }}-setup.exe"
+            if (-not (Test-Path $exePath)) {
+              Write-Host "[ERROR] NSIS installer not found at $exePath"
+              exit 1
+            }
+            $sig = Get-AuthenticodeSignature -FilePath $exePath
+            Write-Host "NSIS installer: Status=$($sig.Status), Signer=$($sig.SignerCertificate.Subject)"
+            if ($sig.Status -ne "Valid") {
+              Write-Host "[ERROR] NSIS installer is not signed"
+              exit 1
+            }
+            Write-Host "[SUCCESS] NSIS installer is properly signed"
+            exit 0
+          }
+
           $allSigned = $true
           $msiPath = "./dist/Stirling-PDF-${{ matrix.name }}.msi"
 
@@ -549,7 +608,7 @@ jobs:
           Write-Host "[SUCCESS] MSI and inner exe are properly signed"
 
       - name: Dump smctl logs on failure
-        if: ${{ failure() && matrix.platform == 'windows-latest' && env.SM_API_KEY != '' }}
+        if: ${{ failure() && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' }}
         shell: pwsh
         run: |
           $logDir = "$env:USERPROFILE\.signingmanager\logs"
@@ -576,7 +635,7 @@ jobs:
           cd ./frontend/editor/src-tauri/target
 
           # Check for expected artifacts based on platform
-          if [ "${{ matrix.platform }}" = "windows-latest" ]; then
+          if [ "${{ matrix.platform }}" = "windows-latest" ] || [ "${{ matrix.platform }}" = "windows-11-arm" ]; then
             echo "Checking for Windows artifacts..."
             find . -name "*.exe" -o -name "*.msi" | head -5
             if [ $(find . -name "*.exe" | wc -l) -eq 0 ]; then
@@ -655,6 +714,7 @@ jobs:
             // Map of expected artifact names to display info
             const artifactMap = {
               'Stirling-PDF-windows-x86_64': { icon: '🪟', platform: 'Windows x64', files: '.exe, .msi' },
+              'Stirling-PDF-windows-arm64': { icon: '🪟', platform: 'Windows ARM64', files: '-setup.exe (NSIS)' },
               'Stirling-PDF-macos-universal': { icon: '🍎', platform: 'macOS Universal', files: '.dmg' },
               'Stirling-PDF-linux-x86_64': { icon: '🐧', platform: 'Linux x64', files: '.deb, .rpm, .AppImage' }
             };
diff --git a/.taskfiles/desktop.yml b/.taskfiles/desktop.yml
index c80196305b..27f8dafde0 100644
--- a/.taskfiles/desktop.yml
+++ b/.taskfiles/desktop.yml
@@ -22,6 +22,7 @@ vars:
               linux-amd64)   echo "linux-x64";;
               linux-arm64)   echo "linux-arm64";;
               windows-amd64) echo "windows-x64";;
+              windows-arm64) echo "none";;  # no JPDFium windows-arm64 natives published yet
               *)             echo "all";;
           esac
       fi
diff --git a/app/common/build.gradle b/app/common/build.gradle
index 71ccbf236f..73be441940 100644
--- a/app/common/build.gradle
+++ b/app/common/build.gradle
@@ -36,18 +36,24 @@ dependencies {
 
     api "com.stirling:jpdfium:${jpdfiumVersion}"
 
-    // -PjpdfiumPlatforms=all|<csv of linux-x64,linux-arm64,darwin-x64,darwin-arm64,windows-x64>
+    // -PjpdfiumPlatforms=all|none|<csv of linux-x64,linux-arm64,darwin-x64,darwin-arm64,windows-x64>
+    // 'none' skips natives entirely (windows-arm64 builds, until JPDFium ships that platform).
     def jpdfiumPlatformsProp = (project.findProperty('jpdfiumPlatforms') ?: 'all').toString().trim()
     def jpdfiumAllPlatforms = ['linux-x64', 'linux-arm64', 'darwin-x64', 'darwin-arm64', 'windows-x64']
-    def jpdfiumPlatforms = jpdfiumPlatformsProp == 'all'
-            ? jpdfiumAllPlatforms
-            : jpdfiumPlatformsProp.split(',').collect { it.trim() }.findAll { it }
+    def jpdfiumPlatforms
+    if (jpdfiumPlatformsProp == 'all') {
+        jpdfiumPlatforms = jpdfiumAllPlatforms
+    } else if (jpdfiumPlatformsProp == 'none') {
+        jpdfiumPlatforms = []
+    } else {
+        jpdfiumPlatforms = jpdfiumPlatformsProp.split(',').collect { it.trim() }.findAll { it }
+    }
     def jpdfiumInvalid = jpdfiumPlatforms.findAll { !jpdfiumAllPlatforms.contains(it) }
     if (jpdfiumInvalid) {
         throw new GradleException("Unknown jpdfiumPlatforms value(s): ${jpdfiumInvalid.join(', ')}. " +
-                "Valid: ${jpdfiumAllPlatforms.join(', ')} or 'all'.")
+                "Valid: ${jpdfiumAllPlatforms.join(', ')}, 'all' or 'none'.")
     }
-    logger.lifecycle("JPDFium native platforms: ${jpdfiumPlatforms.join(', ')}")
+    logger.lifecycle("JPDFium native platforms: ${jpdfiumPlatforms ? jpdfiumPlatforms.join(', ') : 'none'}")
     jpdfiumPlatforms.each { platform ->
         runtimeOnly "com.stirling:jpdfium-natives-${platform}:${jpdfiumVersion}"
     }
diff --git a/build.gradle b/build.gradle
index 38fab663f6..2af5522a73 100644
--- a/build.gradle
+++ b/build.gradle
@@ -41,7 +41,7 @@ ext {
     bucket4jVersion = "8.19.0"
     archunitVersion = "1.4.2"
     batikVersion = "1.19"
-    jpdfiumVersion = "1.0.2"
+    jpdfiumVersion = "1.0.4"
     jwtVersion = "0.13.0"
     awsSdkVersion = "2.44.12"
     jschVersion = "0.2.23"
diff --git a/frontend/editor/src-tauri/src/lib.rs b/frontend/editor/src-tauri/src/lib.rs
index 8855604624..16810649fd 100644
--- a/frontend/editor/src-tauri/src/lib.rs
+++ b/frontend/editor/src-tauri/src/lib.rs
@@ -71,9 +71,43 @@ fn parse_launch_files(args: &[String]) -> Vec<String> {
     .collect()
 }
 
+// URLs the webview is allowed to show: the bundled app and dev server only.
+// Anything else (file://, https://...) must never replace the app UI.
+fn is_app_url(url: &tauri::Url) -> bool {
+  match url.scheme() {
+    "tauri" | "about" | "blob" | "data" => true,
+    "http" | "https" => matches!(
+      url.host_str(),
+      Some("tauri.localhost") | Some("localhost") | Some("127.0.0.1")
+    ),
+    _ => false,
+  }
+}
+
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
 pub fn run() {
+  // WebKitGTK's DMA-BUF renderer crashes the web process on NVIDIA and some
+  // Wayland stacks (blank window, app dying on tool switch). Opt out unless overridden.
+  #[cfg(target_os = "linux")]
+  if std::env::var_os("WEBKIT_DISABLE_DMABUF_RENDERER").is_none() {
+    std::env::set_var("WEBKIT_DISABLE_DMABUF_RENDERER", "1");
+  }
+
   tauri::Builder::default()
+    .plugin(
+      // Dropping a file outside a dropzone makes WebKit navigate the webview to
+      // that file, killing the app UI and its close handler (window becomes
+      // unclosable). Block every off-app navigation at the Rust layer.
+      tauri::plugin::Builder::<tauri::Wry, ()>::new("navigation-guard")
+        .on_navigation(|_webview, url| {
+          let allowed = is_app_url(url);
+          if !allowed {
+            add_log(format!("🚫 Blocked webview navigation to: {}", url));
+          }
+          allowed
+        })
+        .build()
+    )
     .plugin(
       tauri_plugin_log::Builder::new()
         .level(log::LevelFilter::Info)
@@ -209,10 +243,20 @@ pub fn run() {
           // Use Tauri's built-in cleanup
           app_handle.cleanup_before_exit();
         }
-        RunEvent::WindowEvent { event: WindowEvent::CloseRequested {.. }, .. } => {
+        RunEvent::WindowEvent { event: WindowEvent::CloseRequested {.. }, label, .. } => {
           add_log("🔄 Window close requested (will cleanup on actual exit)...".to_string());
           // Don't cleanup here - let JavaScript handler prevent close if needed
           // Backend cleanup happens in ExitRequested when window actually closes
+          //
+          // Failsafe: if the webview somehow left the app (JS close handler gone,
+          // window would stay open forever), destroy the window directly.
+          if let Some(window) = app_handle.get_webview_window(&label) {
+            let off_app = window.url().map(|u| !is_app_url(&u)).unwrap_or(false);
+            if off_app {
+              add_log(format!("🚨 Webview '{}' is off-app, destroying window directly", label));
+              let _ = window.destroy();
+            }
+          }
         }
         RunEvent::WindowEvent { event: WindowEvent::DragDrop(drag_drop_event), label, .. } => {
           use tauri::DragDropEvent;
@@ -267,3 +311,39 @@ pub fn run() {
       }
     });
 }
+
+#[cfg(test)]
+mod tests {
+  use super::is_app_url;
+
+  fn allows(raw: &str) -> bool {
+    is_app_url(&tauri::Url::parse(raw).expect("valid url"))
+  }
+
+  #[test]
+  fn allows_bundled_app_and_dev_server() {
+    assert!(allows("tauri://localhost/index.html"));
+    assert!(allows("http://tauri.localhost/"));
+    assert!(allows("http://localhost:5173/"));
+    assert!(allows("http://127.0.0.1:8080/api"));
+    assert!(allows("about:blank"));
+    assert!(allows("blob:http://localhost:5173/abc"));
+    assert!(allows("data:text/html,hi"));
+  }
+
+  #[test]
+  fn blocks_dropped_files() {
+    // The #6872 lockup: webview navigating to a dropped PDF.
+    assert!(!allows("file:///C:/Users/me/report.pdf"));
+    assert!(!allows("file:///home/me/report.pdf"));
+  }
+
+  #[test]
+  fn blocks_remote_origins() {
+    assert!(!allows("https://example.com/"));
+    assert!(!allows("http://evil.test/"));
+    // Look-alike hosts must not slip past the allowlist.
+    assert!(!allows("https://localhost.evil.test/"));
+    assert!(!allows("https://nottauri.localhost.evil.test/"));
+  }
+}
diff --git a/frontend/editor/src/desktop/components/AppProviders.tsx b/frontend/editor/src/desktop/components/AppProviders.tsx
index 69c258b4f6..5b00c1f4f5 100644
--- a/frontend/editor/src/desktop/components/AppProviders.tsx
+++ b/frontend/editor/src/desktop/components/AppProviders.tsx
@@ -62,6 +62,20 @@ export function AppProviders({ children }: { children: ReactNode }) {
   const [appKey, setAppKey] = useState(0);
   const hasLoadedInitialMode = useRef(false);
 
+  // Files dropped outside a dropzone must never navigate the webview to the
+  // file (Linux WebKit renders the PDF fullscreen and orphans the app UI).
+  // Dropzone-level handlers run before these window-level listeners, so
+  // in-app drag & drop is unaffected.
+  useEffect(() => {
+    const preventNavigation = (e: DragEvent) => e.preventDefault();
+    window.addEventListener("dragover", preventNavigation);
+    window.addEventListener("drop", preventNavigation);
+    return () => {
+      window.removeEventListener("dragover", preventNavigation);
+      window.removeEventListener("drop", preventNavigation);
+    };
+  }, []);
+
   // Load connection mode on mount and subscribe to future changes
   useEffect(() => {
     void connectionModeService.getCurrentMode().then((mode) => {
diff --git a/frontend/editor/src/desktop/hooks/useExitWarning.ts b/frontend/editor/src/desktop/hooks/useExitWarning.ts
index 6f19125d17..1e6b4423fc 100644
--- a/frontend/editor/src/desktop/hooks/useExitWarning.ts
+++ b/frontend/editor/src/desktop/hooks/useExitWarning.ts
@@ -21,8 +21,6 @@ export function useExitWarning() {
     const handleCloseRequested = async (event: {
       preventDefault: () => void;
     }) => {
-      event.preventDefault();
-
       if (isClosingRef.current) {
         return;
       }
@@ -30,6 +28,15 @@ export function useExitWarning() {
       const allStubs = selectorsRef.current.getStirlingFileStubs();
       const dirtyStubs = allStubs.filter((stub) => stub.isDirty);
 
+      // Nothing unsaved: don't preventDefault, so the window closes natively
+      // without depending on the JS dialog/destroy round-trip below.
+      if (dirtyStubs.length === 0) {
+        isClosingRef.current = true;
+        return;
+      }
+
+      event.preventDefault();
+
       if (dirtyStubs.length > 0) {
         const fileList = dirtyStubs.map((f) => `• ${f.name}`).join("\n");
         const saveLabel = t("confirmCloseSave", "Save and close");
diff --git a/frontend/editor/src/desktop/services/tauriBackendService.ts b/frontend/editor/src/desktop/services/tauriBackendService.ts
index dd1af3d96b..31ed0119c5 100644
--- a/frontend/editor/src/desktop/services/tauriBackendService.ts
+++ b/frontend/editor/src/desktop/services/tauriBackendService.ts
@@ -18,6 +18,11 @@ export class TauriBackendService {
   private isRecovering = false;
   private restartAttempts = 0;
   private static readonly MAX_RESTART_ATTEMPTS = 3;
+  /** Failed health checks before the first-ever success are "starting", not "unhealthy" -
+   * a slow first boot must not trigger the restart/notification loop. */
+  private hasBeenHealthy = false;
+  private startupGraceUntil = 0;
+  private static readonly STARTUP_GRACE_MS = 120_000;
 
   static getInstance(): TauriBackendService {
     if (!TauriBackendService.instance) {
@@ -115,9 +120,18 @@ export class TauriBackendService {
     // Reset started flag so startBackend() will run again
     this.backendStarted = false;
     this.startPromise = null;
+    // Fresh grace window: the restarted backend needs boot time before failed
+    // health checks may count as unhealthy again.
+    this.hasBeenHealthy = false;
     this.setStatus("starting");
     try {
       await this.startBackend();
+      // startBackend resolves once the port is known, not once Spring is up -
+      // only declare success after a real health check passes.
+      const healthy = await this.waitUntilHealthy(60_000);
+      if (!healthy) {
+        throw new Error("Backend did not become healthy after restart");
+      }
       this.restartAttempts = 0; // Reset on successful restart
       this.isRecovering = false;
       console.log("[TauriBackendService] Backend restarted successfully.");
@@ -156,6 +170,7 @@ export class TauriBackendService {
     }
 
     this.backendStarted = true; // Mark as active for health checks
+    this.startupGraceUntil = Date.now() + TauriBackendService.STARTUP_GRACE_MS;
     this.setStatus("starting");
     this.beginHealthMonitoring();
 
@@ -176,6 +191,7 @@ export class TauriBackendService {
       return this.startPromise;
     }
 
+    this.startupGraceUntil = Date.now() + TauriBackendService.STARTUP_GRACE_MS;
     this.setStatus("starting");
 
     this.startPromise = invoke("start_backend", { backendUrl })
@@ -260,7 +276,7 @@ export class TauriBackendService {
         console.warn(
           `[TauriBackendService] Health check failed: ${response.status}`,
         );
-        this.setStatus("unhealthy");
+        this.setStatus(this.isInStartupGrace() ? "starting" : "unhealthy");
         return false;
       }
 
@@ -270,15 +286,22 @@ export class TauriBackendService {
         `[TauriBackendService] dependenciesReady=${dependenciesReady}`,
       );
 
+      if (dependenciesReady) {
+        this.hasBeenHealthy = true;
+      }
       this.setStatus(dependenciesReady ? "healthy" : "starting");
       return dependenciesReady;
     } catch (error) {
       console.error("[TauriBackendService] Health check error:", error);
-      this.setStatus("unhealthy");
+      this.setStatus(this.isInStartupGrace() ? "starting" : "unhealthy");
       return false;
     }
   }
 
+  private isInStartupGrace(): boolean {
+    return !this.hasBeenHealthy && Date.now() < this.startupGraceUntil;
+  }
+
   private async waitForHealthy(): Promise<void> {
     while (true) {
       const isHealthy = await this.checkBackendHealth();
@@ -289,6 +312,17 @@ export class TauriBackendService {
     }
   }
 
+  private async waitUntilHealthy(timeoutMs: number): Promise<boolean> {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+      if (await this.checkBackendHealth()) {
+        return true;
+      }
+      await new Promise((resolve) => setTimeout(resolve, 1000));
+    }
+    return false;
+  }
+
   /**
    * Reset backend state (used when switching from external to local backend)
    */
@@ -298,6 +332,8 @@ export class TauriBackendService {
     this.isLocalBackend = false;
     this.isRecovering = false;
     this.restartAttempts = 0;
+    this.hasBeenHealthy = false;
+    this.startupGraceUntil = 0;
     if (this.recoveryTimer) {
       clearTimeout(this.recoveryTimer);
       this.recoveryTimer = null;

From 030f9f541eb4c3c533586221a1fa51f32dbbd5fe Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Tue, 4 Aug 2026 14:08:06 +0100
Subject: [PATCH 065/122] feat(editor): adopt TanStack Query, convert three
 read-only fetches (#7264)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

## The problem

The editor has no query client. ~295 `apiClient` call sites, each mount
refetching what the last one just got, and three module-level caches
reimplementing dedupe, retry and invalidation by hand — each shaped
differently.

The Processor (`frontend/editor/src/portal`) has run on TanStack Query
since #7135. The editor never got it.

## End state

The editor has a query client, and the three read-only fetch sites that
convert safely now use it. `@tanstack/react-query` is already a
dependency — no new package.

**Foundation**

| File | |
|---|---|
| `core/query/queryClient.ts` | `baseQueryOptions` + client factory. The
portal now builds its client from the same options. `networkMode:
"always"` — `navigator.onLine` describes internet reachability, which
says nothing about a bundled backend on 127.0.0.1 or a self-hosted
server on the LAN. |
| `core/query/keys.ts` | `["editor", resource, ...params]` |
| `core/query/staleTime.ts` + `desktop/query/staleTime.ts` | Config
staleTime: `Infinity` on web, 5 min on desktop |
| `core/api/config.ts`, `core/api/users.ts` | Fetch functions, mirroring
`portal/api/*` |
| `core/tests/utils/TestQueryProvider.tsx` | |
| `desktop/components/DesktopQueryCacheReset.tsx` | |

`QueryClientProvider` mounts at the top of
`core/components/AppProviders.tsx`. That diff looks large but is one
wrapper plus the reindent underneath it.

**Converted.** All three keep their existing return shape, so no
consumer changes.

| | Before |
|---|---|
| `useFooterInfo` | Fetched twice — Footer and admin legal section |
| `useGroupEnabled` | Refetched on every mount |
| `UserSelector` | Refetched the whole roster on each of two mount
sites, and again whenever `t` or `user` changed identity |

**Desktop needs more than the provider.** `operationRouter` resolves the
same relative path to the local bundled backend, a self-hosted server,
or the SaaS backend. Query caches by key, not by resolved URL, so a
cached entry can outlive the backend that filled it. `group-enabled`
routes this way, so this PR introduces the hazard and carries the fix:
`DesktopQueryCacheReset` calls `resetQueries()` when the connection mode
changes or the self-hosted server goes up or down, and
`CONFIG_STALE_TIME` is finite on desktop as a backstop.

**Behaviour changes**

- All three sites now retry once on failure (client default). None
retried before, so a failing request sits in `loading` for one extra
attempt plus backoff.
- `staleTime: Infinity` on web means admin edits to legal links no
longer appear on remount within a session. Saving those already prompts
a restart, so this is accepted rather than incidental.
- Desktop `useGroupEnabled` shows the *translated* offline reason on
first render. The old code showed raw English for one render.
- `UserSelector` drops three `console.log`s that were dumping user
records to the console.

## Decisions

**1. The foundation doesn't ship alone.** A provider nothing consumes
gives a reviewer nothing to react to and rots if the follow-up stalls,
so it lands with the cheapest safe conversions.

**2. Hooks keep their existing return shape.** The alternative is
switching to `{ data, isPending, error }` and updating consumers now.
Cost of my choice: we carry a `loading`-shaped façade indefinitely, and
consumers don't get `isFetching`/`refetch` without a second pass. Taken
because it's what keeps each later migration a one-file diff.

**3. Shared defaults, separate instances.** The editor and the Processor
mount as *sibling* routes, not nested — they never coexist in one tree.
Both clients now come from the same `baseQueryOptions`, so behaviour
can't drift. A single shared instance would only buy cache surviving
navigation between the two products, which is worth little while they
share no keys, and it breaks the contract three portal tests rely on
(`createPortalQueryClient()` returning a fresh client per test). That
belongs in the collapse PR. Consequence meanwhile: the desktop reset
covers the editor client only — harmless, since the portal isn't in
desktop builds.

**4. The desktop reset is wholesale.** A mode switch already remounts
the SaaS provider tree, so there's nothing to preserve, and an allowlist
of "mode-sensitive" keys would be a trap every new query has to remember
to join.

## Coming next

Ordered by consumers per line changed.

| PR | Scope |
|---|---|
| 2 | `AppConfigContext` + `useEndpointConfig` — ~80 consumers, deletes
~200 lines of hand-rolled cache, retry and dedupe |
| 3 | `useAdminSettings` (20 consumers) and the config sections |
| 4 | Polling loops → `refetchInterval` |
| 5 | Finish the Processor's remaining files, collapse to one client |
| 6 | Tool execution — mutation state only, narrowly scoped |

Not in scope, deliberately: `usePdfLibLinks` (its cache is a refcounted
ArrayBuffer lifetime manager), thumbnail hooks, watched-folder IndexedDB
reads, the desktop health monitors. Unifying
`endpointAvailabilityService` / `saasAppConfigService` with the query
cache would mean handing `operationRouter` a query client — its own PR
if a second reason appears.

## Testing

`task frontend:check` green: 1666 tests across 191 files, typecheck on
all five flavours, eslint `--max-warnings=0`, dpdm, prettier.

New tests cover request de-duplication, per-group key isolation, the
desktop offline short-circuit, and the cache reset. The reset test was
verified to fail against the `clear()` implementation it replaced.
`UserSelector` has no test beyond its existing stories.

One existing test needed a wrapper: `Login.test.tsx` renders `<Login />`
in isolation, and `AuthLayout` → `Footer` → `useFooterInfo` now needs a
client. The real `/login` route is already inside `AppProviders`, so
this is test isolation, not a runtime gap.

Rollback is a clean revert — nothing persists outside the React tree.
---
 frontend/editor/src/core/api/config.ts        |  32 +++++
 frontend/editor/src/core/api/users.ts         |   8 ++
 .../src/core/components/AppProviders.tsx      | 133 ++++++++---------
 .../core/components/shared/UserSelector.tsx   | 106 ++++++--------
 .../src/core/hooks/useFooterInfo.test.tsx     |  56 ++++++++
 .../editor/src/core/hooks/useFooterInfo.ts    |  64 +++------
 .../src/core/hooks/useGroupEnabled.test.tsx   |  71 ++++++++++
 .../editor/src/core/hooks/useGroupEnabled.ts  |  46 ++----
 frontend/editor/src/core/query/keys.ts        |   6 +
 frontend/editor/src/core/query/queryClient.ts |  15 ++
 frontend/editor/src/core/query/staleTime.ts   |   2 +
 .../core/tests/utils/TestQueryProvider.tsx    |  13 ++
 .../src/desktop/components/AppProviders.tsx   |   4 +
 .../DesktopQueryCacheReset.test.tsx           | 134 ++++++++++++++++++
 .../components/DesktopQueryCacheReset.tsx     |  39 +++++
 .../desktop/hooks/useGroupEnabled.test.tsx    |  64 +++++++++
 .../src/desktop/hooks/useGroupEnabled.ts      |  70 +++++----
 .../editor/src/desktop/query/staleTime.ts     |   5 +
 frontend/editor/src/portal/PortalApp.tsx      |   2 -
 frontend/editor/src/portal/queryClient.ts     |  28 +---
 .../src/proprietary/routes/Login.test.tsx     |  12 +-
 21 files changed, 638 insertions(+), 272 deletions(-)
 create mode 100644 frontend/editor/src/core/api/config.ts
 create mode 100644 frontend/editor/src/core/api/users.ts
 create mode 100644 frontend/editor/src/core/hooks/useFooterInfo.test.tsx
 create mode 100644 frontend/editor/src/core/hooks/useGroupEnabled.test.tsx
 create mode 100644 frontend/editor/src/core/query/keys.ts
 create mode 100644 frontend/editor/src/core/query/queryClient.ts
 create mode 100644 frontend/editor/src/core/query/staleTime.ts
 create mode 100644 frontend/editor/src/core/tests/utils/TestQueryProvider.tsx
 create mode 100644 frontend/editor/src/desktop/components/DesktopQueryCacheReset.test.tsx
 create mode 100644 frontend/editor/src/desktop/components/DesktopQueryCacheReset.tsx
 create mode 100644 frontend/editor/src/desktop/hooks/useGroupEnabled.test.tsx
 create mode 100644 frontend/editor/src/desktop/query/staleTime.ts

diff --git a/frontend/editor/src/core/api/config.ts b/frontend/editor/src/core/api/config.ts
new file mode 100644
index 0000000000..61f74b2330
--- /dev/null
+++ b/frontend/editor/src/core/api/config.ts
@@ -0,0 +1,32 @@
+import apiClient from "@app/services/apiClient";
+
+export interface FooterInfo {
+  analyticsEnabled?: boolean;
+  termsAndConditions?: string;
+  privacyPolicy?: string;
+  accessibilityStatement?: string;
+  cookiePolicy?: string;
+  impressum?: string;
+}
+
+/** Public — no authentication required. */
+export async function fetchFooterInfo(): Promise<FooterInfo> {
+  try {
+    const response = await apiClient.get<FooterInfo>(
+      "/api/v1/ui-data/footer-info",
+      { suppressErrorToast: true },
+    );
+    return response.data;
+  } catch (error) {
+    // Toasts are suppressed here, so the failure would otherwise be silent.
+    console.error("[api/config] footer-info failed:", error);
+    throw error;
+  }
+}
+
+export async function fetchGroupEnabled(group: string): Promise<boolean> {
+  const response = await apiClient.get<boolean>(
+    `/api/v1/config/group-enabled?group=${encodeURIComponent(group)}`,
+  );
+  return response.data;
+}
diff --git a/frontend/editor/src/core/api/users.ts b/frontend/editor/src/core/api/users.ts
new file mode 100644
index 0000000000..851757d8db
--- /dev/null
+++ b/frontend/editor/src/core/api/users.ts
@@ -0,0 +1,8 @@
+import apiClient from "@app/services/apiClient";
+import { UserSummary } from "@app/types/signingSession";
+
+export async function fetchUsers(): Promise<UserSummary[]> {
+  const response = await apiClient.get<UserSummary[]>("/api/v1/user/users");
+  // A proxy can answer 200 with an HTML login page; callers assume an array.
+  return Array.isArray(response.data) ? response.data : [];
+}
diff --git a/frontend/editor/src/core/components/AppProviders.tsx b/frontend/editor/src/core/components/AppProviders.tsx
index f050ae7f9b..01b2e42a82 100644
--- a/frontend/editor/src/core/components/AppProviders.tsx
+++ b/frontend/editor/src/core/components/AppProviders.tsx
@@ -1,4 +1,6 @@
-import { ReactNode, useEffect } from "react";
+import { ReactNode, useEffect, useState } from "react";
+import { QueryClientProvider } from "@tanstack/react-query";
+import { createAppQueryClient } from "@app/query/queryClient";
 import { ThemeProvider } from "@app/components/shared/ThemeProvider";
 import { FileContextProvider } from "@app/contexts/FileContext";
 import { NavigationProvider } from "@app/contexts/NavigationContext";
@@ -119,70 +121,73 @@ export function AppProviders({
   appConfigRetryOptions,
   appConfigProviderProps,
 }: AppProvidersProps) {
+  const [queryClient] = useState(createAppQueryClient);
   return (
-    <PreferencesProvider>
-      <ThemeProvider>
-        <ErrorBoundary>
-          <BannerProvider>
-            <AppConfigProvider
-              retryOptions={appConfigRetryOptions}
-              {...appConfigProviderProps}
-            >
-              <PosthogTrackingInitializer />
-              <ScarfTrackingInitializer />
-              <AppConfigLoader />
-              <ServerDefaultsSync />
-              {/* Auto-popup on startup when a newer Stirling-PDF release is available.
-                  No-ops inside Tauri — the desktop popup handles that flow. */}
-              <UpdateStartupPopup />
-              <FileContextProvider
-                enableUrlSync={true}
-                enablePersistence={true}
+    <QueryClientProvider client={queryClient}>
+      <PreferencesProvider>
+        <ThemeProvider>
+          <ErrorBoundary>
+            <BannerProvider>
+              <AppConfigProvider
+                retryOptions={appConfigRetryOptions}
+                {...appConfigProviderProps}
               >
-                <FolderProvider>
-                  <AppInitializer />
-                  <BrandingAssetManager />
-                  <ToolRegistryProvider>
-                    <NavigationProvider>
-                      <FilesModalProvider>
-                        <ToolWorkflowProvider>
-                          <HotkeyProvider>
-                            <SidebarProvider>
-                              <ViewerProvider>
-                                <PageEditorProvider>
-                                  <SignatureProvider>
-                                    <SigningOverlayProvider>
-                                      <RedactionProvider>
-                                        <FormFillProvider>
-                                          <AnnotationProvider>
-                                            <WorkbenchBarProvider>
-                                              <TourOrchestrationProvider>
-                                                <AdminTourOrchestrationProvider>
-                                                  <FolderFileContextProvider>
-                                                    {children}
-                                                  </FolderFileContextProvider>
-                                                </AdminTourOrchestrationProvider>
-                                              </TourOrchestrationProvider>
-                                            </WorkbenchBarProvider>
-                                          </AnnotationProvider>
-                                        </FormFillProvider>
-                                      </RedactionProvider>
-                                    </SigningOverlayProvider>
-                                  </SignatureProvider>
-                                </PageEditorProvider>
-                              </ViewerProvider>
-                            </SidebarProvider>
-                          </HotkeyProvider>
-                        </ToolWorkflowProvider>
-                      </FilesModalProvider>
-                    </NavigationProvider>
-                  </ToolRegistryProvider>
-                </FolderProvider>
-              </FileContextProvider>
-            </AppConfigProvider>
-          </BannerProvider>
-        </ErrorBoundary>
-      </ThemeProvider>
-    </PreferencesProvider>
+                <PosthogTrackingInitializer />
+                <ScarfTrackingInitializer />
+                <AppConfigLoader />
+                <ServerDefaultsSync />
+                {/* Auto-popup on startup when a newer Stirling-PDF release is available.
+                  No-ops inside Tauri — the desktop popup handles that flow. */}
+                <UpdateStartupPopup />
+                <FileContextProvider
+                  enableUrlSync={true}
+                  enablePersistence={true}
+                >
+                  <FolderProvider>
+                    <AppInitializer />
+                    <BrandingAssetManager />
+                    <ToolRegistryProvider>
+                      <NavigationProvider>
+                        <FilesModalProvider>
+                          <ToolWorkflowProvider>
+                            <HotkeyProvider>
+                              <SidebarProvider>
+                                <ViewerProvider>
+                                  <PageEditorProvider>
+                                    <SignatureProvider>
+                                      <SigningOverlayProvider>
+                                        <RedactionProvider>
+                                          <FormFillProvider>
+                                            <AnnotationProvider>
+                                              <WorkbenchBarProvider>
+                                                <TourOrchestrationProvider>
+                                                  <AdminTourOrchestrationProvider>
+                                                    <FolderFileContextProvider>
+                                                      {children}
+                                                    </FolderFileContextProvider>
+                                                  </AdminTourOrchestrationProvider>
+                                                </TourOrchestrationProvider>
+                                              </WorkbenchBarProvider>
+                                            </AnnotationProvider>
+                                          </FormFillProvider>
+                                        </RedactionProvider>
+                                      </SigningOverlayProvider>
+                                    </SignatureProvider>
+                                  </PageEditorProvider>
+                                </ViewerProvider>
+                              </SidebarProvider>
+                            </HotkeyProvider>
+                          </ToolWorkflowProvider>
+                        </FilesModalProvider>
+                      </NavigationProvider>
+                    </ToolRegistryProvider>
+                  </FolderProvider>
+                </FileContextProvider>
+              </AppConfigProvider>
+            </BannerProvider>
+          </ErrorBoundary>
+        </ThemeProvider>
+      </PreferencesProvider>
+    </QueryClientProvider>
   );
 }
diff --git a/frontend/editor/src/core/components/shared/UserSelector.tsx b/frontend/editor/src/core/components/shared/UserSelector.tsx
index 57d2a0dd76..5c25728e4a 100644
--- a/frontend/editor/src/core/components/shared/UserSelector.tsx
+++ b/frontend/editor/src/core/components/shared/UserSelector.tsx
@@ -1,12 +1,13 @@
-import { useEffect, useState } from "react";
+import { useEffect, useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
+import { useQuery } from "@tanstack/react-query";
 import { MultiSelect, Loader, Text, Stack } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { useNavigate } from "react-router-dom";
 import { alert } from "@app/components/toast";
-import { UserSummary } from "@app/types/signingSession";
-import apiClient from "@app/services/apiClient";
+import { fetchUsers } from "@app/api/users";
 import { useAuth } from "@app/auth/UseSession";
+import { qk } from "@app/query/keys";
 import { Z_INDEX_OVER_FILE_MANAGER_MODAL } from "@app/styles/zIndex";
 
 interface UserSelectorProps {
@@ -30,71 +31,51 @@ const UserSelector = ({
   const { t } = useTranslation();
   const { user } = useAuth();
   const navigate = useNavigate();
-  const [selectData, setSelectData] = useState<GroupedData[]>([]);
-  const [loading, setLoading] = useState(true);
   const [stringValue, setStringValue] = useState<string[]>([]);
 
+  const {
+    data: users,
+    isPending: loading,
+    error,
+  } = useQuery({ queryKey: qk.users(), queryFn: fetchUsers });
+
   useEffect(() => {
-    const fetchUsers = async () => {
-      try {
-        const response = await apiClient.get("/api/v1/user/users");
-        console.log("Users API response:", response.data);
-        const fetchedUsers = response.data || [];
+    if (!error) return;
+    alert({
+      alertType: "error",
+      title: t("common.error"),
+      body: t("certSign.collab.userSelector.loadError", "Failed to load users"),
+    });
+  }, [error, t]);
 
-        // Process selectData inside useEffect - group by team
-        const usersByTeam: Record<string, SelectItem[]> = {};
-        const currentUserId = user?.id ? parseInt(user.id, 10) : null;
+  const selectData = useMemo<GroupedData[]>(() => {
+    const usersByTeam: Record<string, SelectItem[]> = {};
+    const currentUserId = user?.id ? parseInt(user.id, 10) : null;
 
-        fetchedUsers
-          .filter((u: UserSummary) => u && u.userId && u.username)
-          .filter((u: UserSummary) => u.userId !== currentUserId) // Exclude current user
-          .filter((u: UserSummary) => u.teamName?.toLowerCase() !== "internal") // Exclude internal users
-          .forEach((user: UserSummary) => {
-            const teamName =
-              user.teamName ||
-              t("certSign.collab.userSelector.noTeam", "No Team");
-            if (!usersByTeam[teamName]) {
-              usersByTeam[teamName] = [];
-            }
-            const displayName = user.displayName || user.username || "Unknown";
-            const username = user.username || "unknown";
-            const label =
-              displayName !== username
-                ? `${displayName} (@${username})`
-                : displayName;
-            usersByTeam[teamName].push({
-              value: String(user.userId),
-              label,
-            });
-          });
+    (users ?? [])
+      .filter((u) => u && u.userId && u.username)
+      .filter((u) => u.userId !== currentUserId)
+      .filter((u) => u.teamName?.toLowerCase() !== "internal")
+      .forEach((u) => {
+        const teamName =
+          u.teamName || t("certSign.collab.userSelector.noTeam", "No Team");
+        if (!usersByTeam[teamName]) {
+          usersByTeam[teamName] = [];
+        }
+        const displayName = u.displayName || u.username || "Unknown";
+        const username = u.username || "unknown";
+        const label =
+          displayName !== username
+            ? `${displayName} (@${username})`
+            : displayName;
+        usersByTeam[teamName].push({ value: String(u.userId), label });
+      });
 
-        // Convert to Mantine's grouped format
-        const processed: GroupedData[] = Object.entries(usersByTeam).map(
-          ([teamName, items]) => ({
-            group: teamName,
-            items: items.sort((a, b) => a.label.localeCompare(b.label)),
-          }),
-        );
-
-        console.log("Processed selectData:", processed);
-        setSelectData(processed);
-      } catch (error) {
-        console.error("Failed to load users:", error);
-        alert({
-          alertType: "error",
-          title: t("common.error"),
-          body: t(
-            "certSign.collab.userSelector.loadError",
-            "Failed to load users",
-          ),
-        });
-      } finally {
-        setLoading(false);
-      }
-    };
-
-    fetchUsers();
-  }, [t, user]);
+    return Object.entries(usersByTeam).map(([teamName, items]) => ({
+      group: teamName,
+      items: items.sort((a, b) => a.label.localeCompare(b.label)),
+    }));
+  }, [users, user, t]);
 
   // Process stringValue when value prop changes
   useEffect(() => {
@@ -102,7 +83,6 @@ const UserSelector = ({
     const result = safeValue
       .map((id) => (id != null ? id.toString() : ""))
       .filter(Boolean);
-    console.log("stringValue for MultiSelect:", result);
     setStringValue(result);
   }, [value]);
 
diff --git a/frontend/editor/src/core/hooks/useFooterInfo.test.tsx b/frontend/editor/src/core/hooks/useFooterInfo.test.tsx
new file mode 100644
index 0000000000..e269d8c0f7
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useFooterInfo.test.tsx
@@ -0,0 +1,56 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { renderHook, waitFor } from "@testing-library/react";
+import { TestQueryProvider } from "@app/tests/utils/TestQueryProvider";
+import { useFooterInfo } from "@app/hooks/useFooterInfo";
+import { fetchFooterInfo } from "@app/api/config";
+
+vi.mock("@app/api/config", () => ({ fetchFooterInfo: vi.fn() }));
+
+const mockFetch = vi.mocked(fetchFooterInfo);
+
+describe("useFooterInfo", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("returns the server's footer config", async () => {
+    mockFetch.mockResolvedValue({
+      analyticsEnabled: true,
+      privacyPolicy: "/privacy",
+    });
+
+    const { result } = renderHook(() => useFooterInfo(), {
+      wrapper: TestQueryProvider,
+    });
+
+    expect(result.current.loading).toBe(true);
+    await waitFor(() => expect(result.current.loading).toBe(false));
+    expect(result.current.footerInfo).toEqual({
+      analyticsEnabled: true,
+      privacyPolicy: "/privacy",
+    });
+  });
+
+  it("falls back to analytics-off rather than null when the fetch fails", async () => {
+    mockFetch.mockRejectedValue(new Error("offline"));
+
+    const { result } = renderHook(() => useFooterInfo(), {
+      wrapper: TestQueryProvider,
+    });
+
+    await waitFor(() => expect(result.current.error).toBeTruthy());
+    expect(result.current.footerInfo).toEqual({ analyticsEnabled: false });
+  });
+
+  it("shares one request between the footer and the legal section", async () => {
+    mockFetch.mockResolvedValue({ analyticsEnabled: false });
+
+    const { result } = renderHook(
+      () => ({ footer: useFooterInfo(), legal: useFooterInfo() }),
+      { wrapper: TestQueryProvider },
+    );
+
+    await waitFor(() => expect(result.current.footer.loading).toBe(false));
+    expect(mockFetch).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/frontend/editor/src/core/hooks/useFooterInfo.ts b/frontend/editor/src/core/hooks/useFooterInfo.ts
index 4e0ddca2eb..021c02e0d5 100644
--- a/frontend/editor/src/core/hooks/useFooterInfo.ts
+++ b/frontend/editor/src/core/hooks/useFooterInfo.ts
@@ -1,50 +1,24 @@
-import { useState, useEffect } from "react";
-import apiClient from "@app/services/apiClient";
+import { useQuery } from "@tanstack/react-query";
+import { fetchFooterInfo, type FooterInfo } from "@app/api/config";
+import { qk } from "@app/query/keys";
+import { CONFIG_STALE_TIME } from "@app/query/staleTime";
 
-export interface FooterInfo {
-  analyticsEnabled?: boolean;
-  termsAndConditions?: string;
-  privacyPolicy?: string;
-  accessibilityStatement?: string;
-  cookiePolicy?: string;
-  impressum?: string;
-}
+export type { FooterInfo };
 
-/**
- * Hook to fetch public footer configuration data.
- * This endpoint is always accessible without authentication.
- */
+const FALLBACK: FooterInfo = { analyticsEnabled: false };
+
+/** Public footer config, shared by Footer and the admin legal section. */
 export function useFooterInfo() {
-  const [footerInfo, setFooterInfo] = useState<FooterInfo | null>(null);
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState<Error | null>(null);
+  const { data, isPending, error } = useQuery({
+    queryKey: qk.footerInfo(),
+    queryFn: fetchFooterInfo,
+    staleTime: CONFIG_STALE_TIME,
+  });
 
-  useEffect(() => {
-    const fetchFooterInfo = async () => {
-      try {
-        setLoading(true);
-        const response = await apiClient.get<FooterInfo>(
-          "/api/v1/ui-data/footer-info",
-          {
-            suppressErrorToast: true,
-          } as any,
-        );
-        setFooterInfo(response.data);
-        setError(null);
-      } catch (err) {
-        console.error("[useFooterInfo] Failed to fetch footer info:", err);
-        setError(err as Error);
-        // Set defaults on error
-        setFooterInfo({
-          analyticsEnabled: false,
-        });
-      } finally {
-        setLoading(false);
-      }
-    };
-
-    fetchFooterInfo();
-  }, []);
-
-  return { footerInfo, loading, error };
+  return {
+    // Callers render legal links off this, so a failure must still yield an object.
+    footerInfo: data ?? (error ? FALLBACK : null),
+    loading: isPending,
+    error: (error as Error | null) ?? null,
+  };
 }
diff --git a/frontend/editor/src/core/hooks/useGroupEnabled.test.tsx b/frontend/editor/src/core/hooks/useGroupEnabled.test.tsx
new file mode 100644
index 0000000000..647bcaa5b5
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useGroupEnabled.test.tsx
@@ -0,0 +1,71 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { renderHook, waitFor } from "@testing-library/react";
+import { TestQueryProvider } from "@app/tests/utils/TestQueryProvider";
+import { useGroupEnabled } from "@app/hooks/useGroupEnabled";
+import { fetchGroupEnabled } from "@app/api/config";
+
+vi.mock("@app/api/config", () => ({ fetchGroupEnabled: vi.fn() }));
+
+const mockFetch = vi.mocked(fetchGroupEnabled);
+
+describe("useGroupEnabled", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("reports null while loading, then the server's answer", async () => {
+    mockFetch.mockResolvedValue(true);
+
+    const { result } = renderHook(() => useGroupEnabled("ImageMagick"), {
+      wrapper: TestQueryProvider,
+    });
+
+    expect(result.current.enabled).toBeNull();
+    await waitFor(() => expect(result.current.enabled).toBe(true));
+    expect(mockFetch).toHaveBeenCalledWith("ImageMagick");
+  });
+
+  it("reads a failed check as disabled", async () => {
+    mockFetch.mockRejectedValue(new Error("boom"));
+
+    const { result } = renderHook(() => useGroupEnabled("ImageMagick"), {
+      wrapper: TestQueryProvider,
+    });
+
+    await waitFor(() => expect(result.current.enabled).toBe(false));
+  });
+
+  it("serves a second consumer of the same group from cache", async () => {
+    mockFetch.mockResolvedValue(true);
+
+    const { result } = renderHook(
+      () => ({
+        a: useGroupEnabled("ImageMagick"),
+        b: useGroupEnabled("ImageMagick"),
+      }),
+      { wrapper: TestQueryProvider },
+    );
+
+    await waitFor(() => expect(result.current.a.enabled).toBe(true));
+    expect(result.current.b.enabled).toBe(true);
+    expect(mockFetch).toHaveBeenCalledTimes(1);
+  });
+
+  it("keeps distinct groups on distinct keys", async () => {
+    mockFetch.mockImplementation((group: string) =>
+      Promise.resolve(group === "ImageMagick"),
+    );
+
+    const { result } = renderHook(
+      () => ({
+        magick: useGroupEnabled("ImageMagick"),
+        calibre: useGroupEnabled("Calibre"),
+      }),
+      { wrapper: TestQueryProvider },
+    );
+
+    await waitFor(() => expect(result.current.magick.enabled).toBe(true));
+    await waitFor(() => expect(result.current.calibre.enabled).toBe(false));
+    expect(mockFetch).toHaveBeenCalledTimes(2);
+  });
+});
diff --git a/frontend/editor/src/core/hooks/useGroupEnabled.ts b/frontend/editor/src/core/hooks/useGroupEnabled.ts
index df35b551a8..361b8be1af 100644
--- a/frontend/editor/src/core/hooks/useGroupEnabled.ts
+++ b/frontend/editor/src/core/hooks/useGroupEnabled.ts
@@ -1,41 +1,21 @@
-import { useState, useEffect, useRef } from "react";
-import apiClient from "@app/services/apiClient";
+import { useQuery } from "@tanstack/react-query";
+import { fetchGroupEnabled } from "@app/api/config";
+import { qk } from "@app/query/keys";
+import { CONFIG_STALE_TIME } from "@app/query/staleTime";
 import type { GroupEnabledResult } from "@app/types/groupEnabled";
 
 export type { GroupEnabledResult };
 
-/**
- * Checks whether a named feature group is enabled on the backend.
- * Returns { enabled: null } while loading, then true/false with an optional reason.
- */
+/** Null while loading; a failed check reads as disabled. */
 export function useGroupEnabled(group: string): GroupEnabledResult {
-  const [result, setResult] = useState<GroupEnabledResult>({
-    enabled: null,
-    unavailableReason: null,
+  const { data, isPending } = useQuery({
+    queryKey: qk.groupEnabled(group),
+    queryFn: () => fetchGroupEnabled(group),
+    staleTime: CONFIG_STALE_TIME,
   });
-  const isMountedRef = useRef(true);
 
-  useEffect(() => {
-    isMountedRef.current = true;
-    return () => {
-      isMountedRef.current = false;
-    };
-  }, []);
-
-  useEffect(() => {
-    apiClient
-      .get<boolean>(
-        `/api/v1/config/group-enabled?group=${encodeURIComponent(group)}`,
-      )
-      .then((res) => {
-        if (isMountedRef.current)
-          setResult({ enabled: res.data, unavailableReason: null });
-      })
-      .catch(() => {
-        if (isMountedRef.current)
-          setResult({ enabled: false, unavailableReason: null });
-      });
-  }, [group]);
-
-  return result;
+  return {
+    enabled: isPending ? null : (data ?? false),
+    unavailableReason: null,
+  };
 }
diff --git a/frontend/editor/src/core/query/keys.ts b/frontend/editor/src/core/query/keys.ts
new file mode 100644
index 0000000000..84a0206c8f
--- /dev/null
+++ b/frontend/editor/src/core/query/keys.ts
@@ -0,0 +1,6 @@
+/** Editor query keys: ["editor", <resource>, ...params]. */
+export const qk = {
+  footerInfo: () => ["editor", "footerInfo"] as const,
+  groupEnabled: (group: string) => ["editor", "groupEnabled", group] as const,
+  users: () => ["editor", "users"] as const,
+} as const;
diff --git a/frontend/editor/src/core/query/queryClient.ts b/frontend/editor/src/core/query/queryClient.ts
new file mode 100644
index 0000000000..989ebff8c5
--- /dev/null
+++ b/frontend/editor/src/core/query/queryClient.ts
@@ -0,0 +1,15 @@
+import { QueryClient, type DefaultOptions } from "@tanstack/react-query";
+
+// networkMode "always": navigator.onLine tracks the internet, not a backend on
+// 127.0.0.1 or the LAN. On the default, losing Wi-Fi strands every query.
+export const baseQueryOptions: DefaultOptions["queries"] = {
+  staleTime: 30_000,
+  gcTime: 5 * 60_000,
+  retry: 1,
+  networkMode: "always",
+  refetchOnWindowFocus: false,
+};
+
+export function createAppQueryClient(): QueryClient {
+  return new QueryClient({ defaultOptions: { queries: baseQueryOptions } });
+}
diff --git a/frontend/editor/src/core/query/staleTime.ts b/frontend/editor/src/core/query/staleTime.ts
new file mode 100644
index 0000000000..50537f66c6
--- /dev/null
+++ b/frontend/editor/src/core/query/staleTime.ts
@@ -0,0 +1,2 @@
+/** Server config, fixed for the session. Nothing auth-scoped — no login/logout invalidation exists. */
+export const CONFIG_STALE_TIME = Infinity;
diff --git a/frontend/editor/src/core/tests/utils/TestQueryProvider.tsx b/frontend/editor/src/core/tests/utils/TestQueryProvider.tsx
new file mode 100644
index 0000000000..6e8f8aee5d
--- /dev/null
+++ b/frontend/editor/src/core/tests/utils/TestQueryProvider.tsx
@@ -0,0 +1,13 @@
+import { useState, type ReactNode } from "react";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+
+/** Fresh client per test: retries off so failures surface immediately. */
+export function TestQueryProvider({ children }: { children: ReactNode }) {
+  const [client] = useState(
+    () =>
+      new QueryClient({
+        defaultOptions: { queries: { retry: false, gcTime: Infinity } },
+      }),
+  );
+  return <QueryClientProvider client={client}>{children}</QueryClientProvider>;
+}
diff --git a/frontend/editor/src/desktop/components/AppProviders.tsx b/frontend/editor/src/desktop/components/AppProviders.tsx
index 5b00c1f4f5..d7405ef83d 100644
--- a/frontend/editor/src/desktop/components/AppProviders.tsx
+++ b/frontend/editor/src/desktop/components/AppProviders.tsx
@@ -1,6 +1,7 @@
 import { ReactNode, useEffect, useRef, useState } from "react";
 import { AppProviders as ProprietaryAppProviders } from "@proprietary/components/AppProviders";
 import { DesktopConfigSync } from "@app/components/DesktopConfigSync";
+import { DesktopQueryCacheReset } from "@app/components/DesktopQueryCacheReset";
 import { DesktopBannerInitializer } from "@app/components/DesktopBannerInitializer";
 import { SaveShortcutListener } from "@app/components/SaveShortcutListener";
 import { DesktopOnboardingModal } from "@app/components/DesktopOnboardingModal";
@@ -325,6 +326,8 @@ export function AppProviders({ children }: { children: ReactNode }) {
           autoFetch: false,
         }}
       >
+        {/* Also here: the auth check below switches mode pre-authChecked. */}
+        <DesktopQueryCacheReset />
         <div style={{ minHeight: "100vh" }} />
         {updatePopupModal}
       </ProprietaryAppProviders>
@@ -350,6 +353,7 @@ export function AppProviders({ children }: { children: ReactNode }) {
             window.dispatchEvent(new CustomEvent(OPEN_SIGN_IN_EVENT)),
         }}
       >
+        <DesktopQueryCacheReset />
         <SaaSTeamProvider key={appKey}>
           <DesktopConfigSync />
           <DesktopBannerInitializer />
diff --git a/frontend/editor/src/desktop/components/DesktopQueryCacheReset.test.tsx b/frontend/editor/src/desktop/components/DesktopQueryCacheReset.test.tsx
new file mode 100644
index 0000000000..d32cf34210
--- /dev/null
+++ b/frontend/editor/src/desktop/components/DesktopQueryCacheReset.test.tsx
@@ -0,0 +1,134 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { render, waitFor } from "@testing-library/react";
+import {
+  QueryClient,
+  QueryClientProvider,
+  useQuery,
+} from "@tanstack/react-query";
+import { DesktopQueryCacheReset } from "@app/components/DesktopQueryCacheReset";
+
+type Listener = (config: { mode: string }) => void;
+type ServerListener = (state: { status: string }) => void;
+
+const modeListeners = new Set<Listener>();
+const serverListeners = new Set<ServerListener>();
+
+vi.mock("@app/services/connectionModeService", () => ({
+  connectionModeService: {
+    subscribeToModeChanges: (listener: Listener) => {
+      modeListeners.add(listener);
+      return () => modeListeners.delete(listener);
+    },
+  },
+}));
+
+vi.mock("@app/services/selfHostedServerMonitor", () => ({
+  selfHostedServerMonitor: {
+    subscribe: (listener: ServerListener) => {
+      serverListeners.add(listener);
+      listener({ status: "online" }); // matches the real replay-on-attach
+      return () => serverListeners.delete(listener);
+    },
+  },
+}));
+
+function renderWithConsumer(queryFn: () => Promise<string>) {
+  const client = new QueryClient({
+    defaultOptions: { queries: { retry: false, staleTime: Infinity } },
+  });
+  const seen: (string | undefined)[] = [];
+
+  function Consumer() {
+    const { data } = useQuery({ queryKey: ["editor", "probe"], queryFn });
+    seen.push(data);
+    return <span>{data ?? "pending"}</span>;
+  }
+
+  render(
+    <QueryClientProvider client={client}>
+      <DesktopQueryCacheReset />
+      <Consumer />
+    </QueryClientProvider>,
+  );
+  return seen;
+}
+
+describe("DesktopQueryCacheReset", () => {
+  beforeEach(() => {
+    modeListeners.clear();
+    serverListeners.clear();
+  });
+
+  it("refetches a mounted query when the connection mode changes", async () => {
+    const queryFn = vi
+      .fn<() => Promise<string>>()
+      .mockResolvedValueOnce("local-backend")
+      .mockResolvedValueOnce("self-hosted-backend");
+
+    const seen = renderWithConsumer(queryFn);
+    await waitFor(() => expect(seen).toContain("local-backend"));
+
+    modeListeners.forEach((l) => l({ mode: "selfhosted" }));
+
+    // Must refetch, not just evict — this is what clear() got wrong.
+    await waitFor(() => expect(seen).toContain("self-hosted-backend"));
+    expect(queryFn).toHaveBeenCalledTimes(2);
+  });
+
+  it("refetches when the self-hosted server flips online/offline", async () => {
+    const queryFn = vi
+      .fn<() => Promise<string>>()
+      .mockResolvedValueOnce("server")
+      .mockResolvedValueOnce("local-fallback");
+
+    const seen = renderWithConsumer(queryFn);
+    await waitFor(() => expect(seen).toContain("server"));
+
+    serverListeners.forEach((l) => l({ status: "offline" }));
+
+    await waitFor(() => expect(seen).toContain("local-fallback"));
+  });
+
+  it("ignores the replayed state the monitor emits on subscribe", async () => {
+    const queryFn = vi.fn<() => Promise<string>>().mockResolvedValue("once");
+
+    renderWithConsumer(queryFn);
+    await waitFor(() => expect(queryFn).toHaveBeenCalledTimes(1));
+
+    expect(queryFn).toHaveBeenCalledTimes(1);
+  });
+
+  it("resets on recovery, not on the checking state in between", async () => {
+    const queryFn = vi.fn<() => Promise<string>>().mockResolvedValue("x");
+
+    renderWithConsumer(queryFn);
+    await waitFor(() => expect(queryFn).toHaveBeenCalledTimes(1));
+
+    const emit = (status: string) =>
+      serverListeners.forEach((l) => l({ status }));
+
+    emit("offline");
+    await waitFor(() => expect(queryFn).toHaveBeenCalledTimes(2));
+
+    // A monitor restart while still down must not read as recovery — otherwise
+    // the reset lands here and the real online transition is skipped.
+    emit("checking");
+    expect(queryFn).toHaveBeenCalledTimes(2);
+
+    emit("online");
+    await waitFor(() => expect(queryFn).toHaveBeenCalledTimes(3));
+  });
+
+  it("does not reset when the monitor stops while offline", async () => {
+    const queryFn = vi.fn<() => Promise<string>>().mockResolvedValue("cached");
+
+    renderWithConsumer(queryFn);
+    await waitFor(() => expect(queryFn).toHaveBeenCalledTimes(1));
+
+    serverListeners.forEach((l) => l({ status: "offline" }));
+    await waitFor(() => expect(queryFn).toHaveBeenCalledTimes(2));
+
+    serverListeners.forEach((l) => l({ status: "idle" }));
+    expect(queryFn).toHaveBeenCalledTimes(2);
+  });
+});
diff --git a/frontend/editor/src/desktop/components/DesktopQueryCacheReset.tsx b/frontend/editor/src/desktop/components/DesktopQueryCacheReset.tsx
new file mode 100644
index 0000000000..d6b1fb35e6
--- /dev/null
+++ b/frontend/editor/src/desktop/components/DesktopQueryCacheReset.tsx
@@ -0,0 +1,39 @@
+import { useEffect } from "react";
+import { useQueryClient } from "@tanstack/react-query";
+import { connectionModeService } from "@app/services/connectionModeService";
+import { selfHostedServerMonitor } from "@app/services/selfHostedServerMonitor";
+
+/**
+ * Drops cached responses when the backend behind them changes. operationRouter
+ * resolves the same path to the bundled backend, a self-hosted server or SaaS,
+ * so a mode switch or the server going up/down invalidates every key.
+ */
+export function DesktopQueryCacheReset() {
+  const queryClient = useQueryClient();
+
+  useEffect(() => {
+    // resetQueries, not clear(): clear() evicts without notifying mounted
+    // observers, so a panel keeps rendering the old backend's answer.
+    const reset = () => void queryClient.resetQueries();
+    const unsubscribeMode = connectionModeService.subscribeToModeChanges(reset);
+
+    // idle/checking say nothing about reachability — treating them as "not
+    // offline" would reset on offline→checking and then skip the real recovery.
+    let wasOffline: boolean | null = null;
+    const unsubscribeServer = selfHostedServerMonitor.subscribe(
+      ({ status }) => {
+        if (status !== "online" && status !== "offline") return;
+        const isOffline = status === "offline";
+        if (wasOffline !== null && wasOffline !== isOffline) reset();
+        wasOffline = isOffline;
+      },
+    );
+
+    return () => {
+      unsubscribeMode();
+      unsubscribeServer();
+    };
+  }, [queryClient]);
+
+  return null;
+}
diff --git a/frontend/editor/src/desktop/hooks/useGroupEnabled.test.tsx b/frontend/editor/src/desktop/hooks/useGroupEnabled.test.tsx
new file mode 100644
index 0000000000..70fbc9f207
--- /dev/null
+++ b/frontend/editor/src/desktop/hooks/useGroupEnabled.test.tsx
@@ -0,0 +1,64 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { renderHook, waitFor, act } from "@testing-library/react";
+import { TestQueryProvider } from "@app/tests/utils/TestQueryProvider";
+import { useGroupEnabled } from "@app/hooks/useGroupEnabled";
+import { fetchGroupEnabled } from "@app/api/config";
+
+vi.mock("@app/api/config", () => ({ fetchGroupEnabled: vi.fn() }));
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (_k: string, fallback: string) => fallback }),
+}));
+
+let status = "online";
+const listeners = new Set<() => void>();
+
+vi.mock("@app/services/selfHostedServerMonitor", () => ({
+  selfHostedServerMonitor: {
+    getSnapshot: () => ({ status }),
+    subscribe: (listener: () => void) => {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+  },
+}));
+
+function setStatus(next: string) {
+  status = next;
+  act(() => listeners.forEach((l) => l()));
+}
+
+const mockFetch = vi.mocked(fetchGroupEnabled);
+
+describe("desktop useGroupEnabled", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    status = "online";
+  });
+
+  it("skips the request entirely when the server is offline", async () => {
+    status = "offline";
+
+    const { result } = renderHook(() => useGroupEnabled("ImageMagick"), {
+      wrapper: TestQueryProvider,
+    });
+
+    expect(result.current.enabled).toBe(false);
+    expect(result.current.unavailableReason).toBeTruthy();
+    expect(mockFetch).not.toHaveBeenCalled();
+  });
+
+  it("reflects the server going offline after a successful check", async () => {
+    mockFetch.mockResolvedValue(true);
+
+    const { result } = renderHook(() => useGroupEnabled("ImageMagick"), {
+      wrapper: TestQueryProvider,
+    });
+    await waitFor(() => expect(result.current.enabled).toBe(true));
+
+    setStatus("offline");
+
+    expect(result.current.enabled).toBe(false);
+    expect(result.current.unavailableReason).toBeTruthy();
+  });
+});
diff --git a/frontend/editor/src/desktop/hooks/useGroupEnabled.ts b/frontend/editor/src/desktop/hooks/useGroupEnabled.ts
index ec6b2523ae..a58cd2a255 100644
--- a/frontend/editor/src/desktop/hooks/useGroupEnabled.ts
+++ b/frontend/editor/src/desktop/hooks/useGroupEnabled.ts
@@ -1,50 +1,46 @@
-import { useState, useEffect } from "react";
+import { useSyncExternalStore } from "react";
+import { useQuery } from "@tanstack/react-query";
 import { useTranslation } from "react-i18next";
-import apiClient from "@app/services/apiClient";
+import { fetchGroupEnabled } from "@app/api/config";
 import { selfHostedServerMonitor } from "@app/services/selfHostedServerMonitor";
+import { qk } from "@app/query/keys";
+import { CONFIG_STALE_TIME } from "@app/query/staleTime";
 import type { GroupEnabledResult } from "@app/types/groupEnabled";
 
 const OFFLINE_REASON_FALLBACK =
   "Requires your Stirling-PDF server (currently offline)";
 
-/**
- * Desktop override: skips the network request entirely when the self-hosted
- * server is confirmed offline, returning a reason string matching the tool panel.
- */
+// A boolean, not the monitor's state object — that is reassigned every poll.
+const subscribeToMonitor = (onChange: () => void) =>
+  selfHostedServerMonitor.subscribe(onChange);
+const getIsOffline = () =>
+  selfHostedServerMonitor.getSnapshot().status === "offline";
+
+/** Desktop override: skips the request when the self-hosted server is offline. */
 export function useGroupEnabled(group: string): GroupEnabledResult {
   const { t } = useTranslation();
-  // Initialise synchronously so the first render already reflects offline state —
-  // avoids a flash where the option appears enabled before the effect runs.
-  // Use OFFLINE_REASON_FALLBACK directly so unavailableReason is non-null from
-  // the very first render when offline (t() is not available in useState initialiser).
-  const [result, setResult] = useState<GroupEnabledResult>(() => {
-    const { status } = selfHostedServerMonitor.getSnapshot();
-    if (status === "offline") {
-      return { enabled: false, unavailableReason: OFFLINE_REASON_FALLBACK };
-    }
-    return { enabled: null, unavailableReason: null };
+  const isOffline = useSyncExternalStore(subscribeToMonitor, getIsOffline);
+
+  const { data, isPending } = useQuery({
+    queryKey: qk.groupEnabled(group),
+    queryFn: () => fetchGroupEnabled(group),
+    staleTime: CONFIG_STALE_TIME,
+    enabled: !isOffline,
   });
 
-  useEffect(() => {
-    const { status } = selfHostedServerMonitor.getSnapshot();
-    if (status === "offline") {
-      setResult({
-        enabled: false,
-        unavailableReason: t(
-          "toolPanel.fullscreen.selfHostedOffline",
-          OFFLINE_REASON_FALLBACK,
-        ),
-      });
-      return;
-    }
+  // Before the query: a disabled query stays isPending, which would read as loading forever.
+  if (isOffline) {
+    return {
+      enabled: false,
+      unavailableReason: t(
+        "toolPanel.fullscreen.selfHostedOffline",
+        OFFLINE_REASON_FALLBACK,
+      ),
+    };
+  }
 
-    apiClient
-      .get<boolean>(
-        `/api/v1/config/group-enabled?group=${encodeURIComponent(group)}`,
-      )
-      .then((res) => setResult({ enabled: res.data, unavailableReason: null }))
-      .catch(() => setResult({ enabled: false, unavailableReason: null }));
-  }, [group, t]);
-
-  return result;
+  return {
+    enabled: isPending ? null : (data ?? false),
+    unavailableReason: null,
+  };
 }
diff --git a/frontend/editor/src/desktop/query/staleTime.ts b/frontend/editor/src/desktop/query/staleTime.ts
new file mode 100644
index 0000000000..7650bfefd6
--- /dev/null
+++ b/frontend/editor/src/desktop/query/staleTime.ts
@@ -0,0 +1,5 @@
+export * from "@core/query/staleTime";
+
+// Desktop keys don't pin a backend (see DesktopQueryCacheReset), so expire as a
+// backstop. 5 min matches endpointAvailabilityService and saasAppConfigService.
+export const CONFIG_STALE_TIME = 5 * 60_000;
diff --git a/frontend/editor/src/portal/PortalApp.tsx b/frontend/editor/src/portal/PortalApp.tsx
index 27fc5652cb..3122016436 100644
--- a/frontend/editor/src/portal/PortalApp.tsx
+++ b/frontend/editor/src/portal/PortalApp.tsx
@@ -30,8 +30,6 @@ function ThemedSuiProvider({ children }: { children: ReactNode }) {
  * self-hosted mounts the account-link layer, SaaS does not.
  */
 export function PortalApp() {
-  // One client for the portal's lifetime. Sits above the router so its cache
-  // survives view navigation. Cheap and inert when no query hooks are mounted.
   const [queryClient] = useState(createPortalQueryClient);
   return (
     <QueryClientProvider client={queryClient}>
diff --git a/frontend/editor/src/portal/queryClient.ts b/frontend/editor/src/portal/queryClient.ts
index 85bd449b61..5c0404f17d 100644
--- a/frontend/editor/src/portal/queryClient.ts
+++ b/frontend/editor/src/portal/queryClient.ts
@@ -1,35 +1,15 @@
 import { QueryClient } from "@tanstack/react-query";
+import { baseQueryOptions } from "@app/query/queryClient";
 
-/**
- * The portal's TanStack Query client, mounted once at the portal root
- * (PortalApp) so its cache lives above the router — data survives navigating
- * away and back. staleTime 30s: a return visit within 30s serves cache with no
- * network call, then revalidates in the background. Focus refetch is off — admin
- * screens don't need polling.
- */
 let current: QueryClient | null = null;
 
+/** Own instance, shared defaults — the portal and editor are sibling routes. */
 export function createPortalQueryClient(): QueryClient {
-  current = new QueryClient({
-    defaultOptions: {
-      queries: {
-        staleTime: 30_000,
-        gcTime: 5 * 60_000,
-        retry: 1,
-        refetchOnWindowFocus: false,
-      },
-    },
-  });
+  current = new QueryClient({ defaultOptions: { queries: baseQueryOptions } });
   return current;
 }
 
-/**
- * The client created by {@link createPortalQueryClient}, or null if none has
- * been mounted yet. Lets a non-hook module (the SaaS usersBackend's resolveTeam)
- * read/populate the shared cache via ensureQueryData when the portal is mounted,
- * while still working — via a direct fetch — when it isn't (e.g. a unit test
- * that exercises the adapter without the provider).
- */
+/** Null until the portal mounts, so resolveTeam can fall back to a direct fetch. */
 export function tryGetPortalQueryClient(): QueryClient | null {
   return current;
 }
diff --git a/frontend/editor/src/proprietary/routes/Login.test.tsx b/frontend/editor/src/proprietary/routes/Login.test.tsx
index 7a232d0fde..31e74e533b 100644
--- a/frontend/editor/src/proprietary/routes/Login.test.tsx
+++ b/frontend/editor/src/proprietary/routes/Login.test.tsx
@@ -7,6 +7,7 @@ import Login from "@app/routes/Login";
 import { useAuth } from "@app/auth/UseSession";
 import { springAuth } from "@app/auth/spring/springAuthClient";
 import { PreferencesProvider } from "@app/contexts/PreferencesContext";
+import { TestQueryProvider } from "@app/tests/utils/TestQueryProvider";
 import apiClient from "@app/services/apiClient";
 import { configureSpringAuth } from "@app/auth/config";
 import type { AxiosInstance } from "axios";
@@ -92,11 +93,14 @@ vi.mock("react-router-dom", async () => {
   };
 });
 
-// Test wrapper with MantineProvider
+// AuthLayout renders <Footer>, which reads useFooterInfo. In the real router
+// /login sits inside AppProviders, which supplies the client.
 const TestWrapper = ({ children }: { children: React.ReactNode }) => (
-  <MantineProvider>
-    <PreferencesProvider>{children}</PreferencesProvider>
-  </MantineProvider>
+  <TestQueryProvider>
+    <MantineProvider>
+      <PreferencesProvider>{children}</PreferencesProvider>
+    </MantineProvider>
+  </TestQueryProvider>
 );
 
 describe("Login", () => {

From 4d8a86ad286268453f10e1602d3c7fea2f38de4f Mon Sep 17 00:00:00 2001
From: EthanHealy01 <80844253+EthanHealy01@users.noreply.github.com>
Date: Tue, 4 Aug 2026 21:40:18 +0100
Subject: [PATCH 066/122] Fix the two nightly frontend failures (a11y contrast
 + Firefox Copy menu test) (#7286)

Fixes the two nightly frontend jobs that started failing after #7163
(new design, part one). Two unrelated causes, one small fix each.

## Accessibility scan (`--c-primary-hover`)

The full a11y scan flagged a colour-contrast violation on the portal
pipelines ToolPicker story. #7163 moved the light canvas from
`--p-gray-50` (#f9fafb) to the slightly darker `--p-paper` (#f5f4f1),
but the accent text colour stayed put. That token doubles as the label
colour for quiet and tertiary buttons, so the pairing slipped from
4.64:1 to 4.41:1 purely from the background change.

Darkening the custom-theme mix from 85% to 80% primary puts it back at
4.89:1. It is also the hover fill for primary buttons, where a
marginally deeper blue is if anything more correct.

Only the nightly caught this because PR runs scan just the stories whose
files changed, and #7163 did not touch that story file.

## Cross-browser Playwright (right-click Copy menu)

Failed in Firefox only. The feature itself is fine in every browser. The
test hit-tested a word using a fixed fraction of the page box, and the
page is auto-fit to the viewer, so the rendered text scales with the
viewport. The Firefox and WebKit projects run at 1280x720, where the
page renders about 375px wide and the first line of text is only a few
pixels tall. #7163 shrank the viewer area slightly (the rails now float
with a gutter), which shrank the auto-fit page just enough to tip that
fraction to landing below the glyphs. Nothing was selected, so no menu
appeared.

Pinning 1920x1080 for that one test makes the glyphs comfortably larger
than the click tolerance everywhere, rather than re-tuning a fraction
that was only ever a couple of pixels from failing.

A Firefox skip was considered and rejected: the sibling clipboard test
is already Chromium-only and its comment states the Copy menu is covered
cross-browser by this test, so skipping would leave the menu with no
Firefox coverage at all.

## Verification

Test pinned run is green across chromium, firefox and webkit. Contrast
checked with the theme linter's contrast report.
---
 .../stubbed/viewer-text-selection.spec.ts     | 46 +++++++++++--------
 frontend/editor/src/core/theme/colors.css     |  3 +-
 2 files changed, 29 insertions(+), 20 deletions(-)

diff --git a/frontend/editor/src/core/tests/stubbed/viewer-text-selection.spec.ts b/frontend/editor/src/core/tests/stubbed/viewer-text-selection.spec.ts
index d9a08ae9e7..55dad6e2a4 100644
--- a/frontend/editor/src/core/tests/stubbed/viewer-text-selection.spec.ts
+++ b/frontend/editor/src/core/tests/stubbed/viewer-text-selection.spec.ts
@@ -120,27 +120,35 @@ test("Ctrl+C copies selected text to the clipboard", async ({
   expect(clipboardText.trim().length).toBeGreaterThan(0);
 });
 
-test("right-click on a word auto-selects it and reveals the Copy menu", async ({
-  page,
-}) => {
-  test.setTimeout(60_000);
-  const firstPage = await loadSampleAndOpenViewer(page);
-  const box = await firstPage.boundingBox();
-  if (!box) throw new Error("no box");
+// Pinned wide: the page is auto-fit, so at the 1280x720 firefox/webkit projects
+// the text renders too small to hit-test a word reliably.
+test.describe("right-click selection", () => {
+  test.use({ viewport: { width: 1920, height: 1080 } });
 
-  // Right-click on a word in the top paragraph "Test document for word documents".
-  await page.mouse.click(box.x + box.width * 0.21, box.y + box.height * 0.105, {
-    button: "right",
+  test("right-click on a word auto-selects it and reveals the Copy menu", async ({
+    page,
+  }) => {
+    test.setTimeout(60_000);
+    const firstPage = await loadSampleAndOpenViewer(page);
+    const box = await firstPage.boundingBox();
+    if (!box) throw new Error("no box");
+
+    // Right-click a word in the top paragraph "Test document for word documents".
+    await page.mouse.click(
+      box.x + box.width * 0.21,
+      box.y + box.height * 0.105,
+      { button: "right" },
+    );
+    await page.waitForTimeout(400);
+
+    const selectionRects = firstPage.locator(
+      ".pdf-selection-layer > div:first-child > div",
+    );
+    await expect(selectionRects.first()).toBeAttached({ timeout: 5_000 });
+
+    const copyButton = page.getByRole("button", { name: "Copy" }).first();
+    await expect(copyButton).toBeVisible({ timeout: 5_000 });
   });
-  await page.waitForTimeout(400);
-
-  const selectionRects = firstPage.locator(
-    ".pdf-selection-layer > div:first-child > div",
-  );
-  await expect(selectionRects.first()).toBeAttached({ timeout: 5_000 });
-
-  const copyButton = page.getByRole("button", { name: "Copy" }).first();
-  await expect(copyButton).toBeVisible({ timeout: 5_000 });
 });
 
 test("right-click on the page does not surface the browser context menu", async ({
diff --git a/frontend/editor/src/core/theme/colors.css b/frontend/editor/src/core/theme/colors.css
index c7b0ccb08f..e79bc64c49 100644
--- a/frontend/editor/src/core/theme/colors.css
+++ b/frontend/editor/src/core/theme/colors.css
@@ -161,7 +161,8 @@ html[data-app-theme="midnight"] {
 /* ── Base accent — fixed default (blue buttons); [data-accent="default"] blocks at the end keep surfaces neutral. LIGHT base here, DARK base next. ── */
 html[data-app-theme="custom"] {
   --c-primary: var(--p-blue-500);
-  --c-primary-hover: color-mix(in srgb, var(--c-primary) 85%, var(--p-black));
+  /* Also the accent text colour (--_text), so 80% keeps 4.5:1 on the canvas. */
+  --c-primary-hover: color-mix(in srgb, var(--c-primary) 80%, var(--p-black));
   --c-primary-subtle: color-mix(in srgb, var(--c-primary) 14%, transparent);
   --c-text-on-primary: var(--p-white);
   --c-accent-fg: var(--c-primary);

From d7c130fca9ad04f912caa4c9b552229cac0b6b50 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Wed, 5 Aug 2026 12:03:12 +0100
Subject: [PATCH 067/122] Serve SPA shell for deep frontend routes (#7145)

# Description of Changes

stops the /new urls crashing page on f5


---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

---------

Co-authored-by: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
---
 .../web/ReactRoutingController.java           | 89 +++++++++++++++++++
 .../web/ReactRoutingControllerTest.java       | 89 +++++++++++++++++++
 frontend/editor/scripts/lint/theme-lint.mjs   |  6 +-
 3 files changed, 183 insertions(+), 1 deletion(-)

diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/web/ReactRoutingController.java b/app/core/src/main/java/stirling/software/SPDF/controller/web/ReactRoutingController.java
index 1e05ec17b2..7689d109fe 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/web/ReactRoutingController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/web/ReactRoutingController.java
@@ -5,17 +5,26 @@ import java.io.InputStream;
 import java.nio.charset.StandardCharsets;
 import java.nio.file.Files;
 import java.nio.file.Path;
+import java.util.List;
+import java.util.Set;
 import java.util.regex.Pattern;
 
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.core.Ordered;
 import org.springframework.core.io.ClassPathResource;
 import org.springframework.core.io.FileSystemResource;
 import org.springframework.core.io.Resource;
 import org.springframework.http.CacheControl;
 import org.springframework.http.MediaType;
 import org.springframework.http.ResponseEntity;
+import org.springframework.http.converter.StringHttpMessageConverter;
 import org.springframework.stereotype.Controller;
 import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.servlet.function.RouterFunction;
+import org.springframework.web.servlet.function.RouterFunctions;
+import org.springframework.web.servlet.function.ServerResponse;
+import org.springframework.web.servlet.function.support.RouterFunctionMapping;
 import org.springframework.web.util.HtmlUtils;
 import org.springframework.web.util.JavaScriptUtils;
 
@@ -32,6 +41,33 @@ public class ReactRoutingController {
     private static final Pattern BASE_HREF_PATTERN =
             Pattern.compile("<base href=\\\"[^\\\"]*\\\"\\s*/?>");
 
+    // First path segments owned by the backend or static assets, never SPA routes.
+    // Mirrors the exclusion regexes on forwardRootPaths/forwardNestedPaths below.
+    private static final Set<String> NON_SPA_FIRST_SEGMENTS =
+            Set.of(
+                    "api",
+                    "static",
+                    "pipeline",
+                    "pdfjs",
+                    "pdfjs-legacy",
+                    "pdfium",
+                    "vendor",
+                    "fonts",
+                    "images",
+                    "css",
+                    "js",
+                    "assets",
+                    "locales",
+                    "modern-logo",
+                    "classic-logo",
+                    "Login",
+                    "og_images",
+                    "samples");
+
+    // After the annotated controllers (order 0), before the resource chain
+    // (LOWEST_PRECEDENCE - 1).
+    private static final int SPA_FALLBACK_ORDER = Ordered.LOWEST_PRECEDENCE - 2;
+
     @Value("${server.servlet.context-path:/}")
     private String contextPath;
 
@@ -256,6 +292,59 @@ public class ReactRoutingController {
         return serveIndexHtml(request);
     }
 
+    // The regex mappings above only cover 1- and 2-segment paths (Spring path variables cannot
+    // span '/'), so deep SPA links like /processor/pipelines/new 404d on direct navigation.
+    //
+    // Registered as its own mapping rather than exposed as a bare RouterFunction @Bean:
+    // Spring's own RouterFunctionMapping is ordered -1, ahead of the annotated controllers at
+    // order 0, so a plain bean would shadow every dot-free backend route the denylist below
+    // does not name (/v1/api-docs, /error, /actuator, ...). LOWEST_PRECEDENCE - 2 puts it after
+    // the controllers and before the resource chain (LOWEST_PRECEDENCE - 1), which is the only
+    // position where a catch-all fallback is safe.
+    @Bean
+    public RouterFunctionMapping spaDeepLinkFallbackMapping() {
+        RouterFunction<ServerResponse> fallback =
+                RouterFunctions.route(
+                        request -> {
+                            HttpServletRequest servletRequest = request.servletRequest();
+                            return "GET".equals(servletRequest.getMethod())
+                                    && isSpaFallbackRoute(
+                                            stripContextPath(
+                                                    servletRequest.getContextPath(),
+                                                    servletRequest.getRequestURI()));
+                        },
+                        request ->
+                                ServerResponse.ok()
+                                        .cacheControl(CacheControl.noCache().mustRevalidate())
+                                        .contentType(MediaType.TEXT_HTML)
+                                        .body(serveIndexHtml(request.servletRequest()).getBody()));
+        RouterFunctionMapping mapping = new RouterFunctionMapping(fallback);
+        mapping.setOrder(SPA_FALLBACK_ORDER);
+        mapping.setMessageConverters(
+                List.of(new StringHttpMessageConverter(StandardCharsets.UTF_8)));
+        return mapping;
+    }
+
+    // Dot-free paths only, so requests for real files still fall through to the resource
+    // handlers. This is a denylist, so it is only safe because the mapping above runs after
+    // the annotated controllers - see spaDeepLinkFallbackMapping.
+    static boolean isSpaFallbackRoute(String path) {
+        if (path == null || path.isEmpty() || "/".equals(path) || path.indexOf('.') >= 0) {
+            return false;
+        }
+        String[] segments = (path.startsWith("/") ? path.substring(1) : path).split("/");
+        return segments.length > 0
+                && !segments[0].isEmpty()
+                && !NON_SPA_FIRST_SEGMENTS.contains(segments[0]);
+    }
+
+    private static String stripContextPath(String contextPath, String uri) {
+        if (contextPath != null && !contextPath.isBlank() && uri.startsWith(contextPath)) {
+            return uri.substring(contextPath.length());
+        }
+        return uri;
+    }
+
     private String buildFallbackHtml() {
         String baseUrl = contextPath.endsWith("/") ? contextPath : contextPath + "/";
 
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/web/ReactRoutingControllerTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/web/ReactRoutingControllerTest.java
index 2df3fb5587..41909e3e0a 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/web/ReactRoutingControllerTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/web/ReactRoutingControllerTest.java
@@ -4,12 +4,24 @@ import static org.junit.jupiter.api.Assertions.*;
 import static org.mockito.Mockito.mock;
 
 import java.lang.reflect.Field;
+import java.util.List;
+import java.util.Optional;
 
 import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
+import org.springframework.core.Ordered;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.MediaType;
 import org.springframework.http.ResponseEntity;
+import org.springframework.http.converter.StringHttpMessageConverter;
+import org.springframework.mock.web.MockHttpServletRequest;
+import org.springframework.web.servlet.function.EntityResponse;
+import org.springframework.web.servlet.function.HandlerFunction;
+import org.springframework.web.servlet.function.RouterFunction;
+import org.springframework.web.servlet.function.ServerRequest;
+import org.springframework.web.servlet.function.ServerResponse;
+import org.springframework.web.servlet.function.support.RouterFunctionMapping;
+import org.springframework.web.util.ServletRequestPathUtils;
 
 import jakarta.servlet.http.HttpServletRequest;
 
@@ -175,6 +187,83 @@ class ReactRoutingControllerTest {
         assertNotNull(response.getBody());
     }
 
+    // --- deep-link SPA fallback (router function) ---
+
+    @Test
+    void isSpaFallbackRoute_acceptsDeepSpaPaths() {
+        assertTrue(ReactRoutingController.isSpaFallbackRoute("/processor/pipelines/new"));
+        assertTrue(ReactRoutingController.isSpaFallbackRoute("/processor/pipelines/123/runs/456"));
+        assertTrue(ReactRoutingController.isSpaFallbackRoute("/workflow/sign/some-token"));
+        assertTrue(ReactRoutingController.isSpaFallbackRoute("/processor/pipelines/new/"));
+        // "pipelines" must not be swallowed by the "pipeline" exclusion
+        assertTrue(ReactRoutingController.isSpaFallbackRoute("/pipelines"));
+    }
+
+    @Test
+    void isSpaFallbackRoute_rejectsBackendStaticAndFilePaths() {
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/api/v1/some/endpoint"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/pipeline"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/pipeline/anything"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/assets/deep/path"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/processor/pipelines/file.js"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/branding/sub/logo.png"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute("/"));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute(""));
+        assertFalse(ReactRoutingController.isSpaFallbackRoute(null));
+    }
+
+    @Test
+    void spaDeepLinkFallback_servesIndexForDeepRoute() throws Exception {
+        controller.init();
+        RouterFunction<ServerResponse> router = routerOf(controller.spaDeepLinkFallbackMapping());
+
+        ServerRequest deepRequest = serverRequest("GET", "/processor/pipelines/new");
+        Optional<HandlerFunction<ServerResponse>> handler = router.route(deepRequest);
+        assertTrue(handler.isPresent());
+
+        ServerResponse response = handler.get().handle(deepRequest);
+        assertEquals(HttpStatus.OK, response.statusCode());
+        assertInstanceOf(EntityResponse.class, response);
+        Object body = ((EntityResponse<?>) response).entity();
+        assertTrue(body.toString().contains("Stirling PDF"));
+    }
+
+    @Test
+    void spaDeepLinkFallback_ignoresApiFilesAndNonGet() {
+        controller.init();
+        RouterFunction<ServerResponse> router = routerOf(controller.spaDeepLinkFallbackMapping());
+
+        assertTrue(router.route(serverRequest("GET", "/api/v1/policies/run")).isEmpty());
+        assertTrue(router.route(serverRequest("GET", "/branding/sub/logo.png")).isEmpty());
+        assertTrue(router.route(serverRequest("POST", "/processor/pipelines/new")).isEmpty());
+    }
+
+    @Test
+    void spaDeepLinkFallback_runsAfterControllersAndBeforeResources() {
+        controller.init();
+        int order = controller.spaDeepLinkFallbackMapping().getOrder();
+
+        // A catch-all denylist is only safe below every annotated controller; Spring's own
+        // RouterFunctionMapping sits at -1, which would shadow /v1/api-docs, /error and friends.
+        assertTrue(order > 0, "SPA fallback must run after annotated controllers");
+        assertTrue(
+                order < Ordered.LOWEST_PRECEDENCE - 1,
+                "SPA fallback must run before the static-resource chain");
+    }
+
+    private static RouterFunction<ServerResponse> routerOf(RouterFunctionMapping mapping) {
+        @SuppressWarnings("unchecked")
+        RouterFunction<ServerResponse> router =
+                (RouterFunction<ServerResponse>) mapping.getRouterFunction();
+        return router;
+    }
+
+    private static ServerRequest serverRequest(String method, String uri) {
+        MockHttpServletRequest servletRequest = new MockHttpServletRequest(method, uri);
+        ServletRequestPathUtils.parseAndCache(servletRequest);
+        return ServerRequest.create(servletRequest, List.of(new StringHttpMessageConverter()));
+    }
+
     // --- context path handling ---
 
     @Test
diff --git a/frontend/editor/scripts/lint/theme-lint.mjs b/frontend/editor/scripts/lint/theme-lint.mjs
index 0ae53a3ce9..42f6153119 100644
--- a/frontend/editor/scripts/lint/theme-lint.mjs
+++ b/frontend/editor/scripts/lint/theme-lint.mjs
@@ -314,6 +314,10 @@ function check() {
   const violations = [];
   const primitiveValues = new Map();
   const lineOf = (text, index) => text.slice(0, index).split("\n").length;
+  // path.relative emits backslashes on Windows; normalize so the PRIMITIVES
+  // comparison below matches and printed paths stay POSIX-style.
+  const posixRel = (name) =>
+    relative(process.cwd(), join(THEME, name)).replaceAll("\\", "/");
 
   // Fail if a theme .css exists that isn't registered above (readdir is only
   // compared here — never used to build a path passed to readFileSync).
@@ -321,7 +325,7 @@ function check() {
   for (const name of readdirSync(THEME)) {
     if (name.endsWith(".css") && !known.has(name)) {
       violations.push({
-        file: relative(process.cwd(), join(THEME, name)),
+        file: posixRel(name),
         line: 1,
         msg: `unregistered theme CSS — add "${name}" to THEME_FILES in theme-lint.mjs`,
       });

From 62e5e28039d9e3cad1e101daf175c0774dd8aa33 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Wed, 5 Aug 2026 13:10:28 +0100
Subject: [PATCH 068/122] Avoid renderer OOM when adding large PDFs to the
 workbench (#7175)

# Description of Changes

- "Out of Memory" tab crash on merge with big PDFs (Discord report) is a
WebView2 renderer OOM, not system RAM; adding files did 2 full parses +
a parallel full read per file
- IndexedDB now stores files as Blobs (by reference, no JS-side copy);
old ArrayBuffer records stay readable
- Both thumbnail variants now come from one PDFium parse instead of two
- PDFs over 100MB never get a full client-side parse: 2MB
linearized-prefix attempt, placeholder icon otherwise
- Follow-ups if placeholders aren't enough: backend-rendered thumbnails,
PDFium ranged reads in a worker

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

---------

Co-authored-by: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
---
 .../fileEditor/FileEditorThumbnail.tsx        |   4 +
 .../src/core/components/shared/FileCard.tsx   |  10 +-
 .../src/core/contexts/file/fileActions.ts     |  19 +-
 .../editor/src/core/services/fileAnalyzer.ts  |  81 ++++++--
 .../editor/src/core/services/fileStorage.ts   |   9 +-
 .../src/core/utils/thumbnailUtils.test.ts     |  53 ++++++
 .../editor/src/core/utils/thumbnailUtils.ts   | 180 +++++++++++++++++-
 7 files changed, 324 insertions(+), 32 deletions(-)
 create mode 100644 frontend/editor/src/core/utils/thumbnailUtils.test.ts

diff --git a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
index e183e45d6e..ccf07e9dea 100644
--- a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
+++ b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
@@ -45,6 +45,7 @@ import { VersionHistoryModal } from "@app/components/filesPage/VersionHistoryMod
 import { useAppConfig } from "@app/contexts/AppConfigContext";
 import { useFileThumbnail } from "@app/hooks/useFileThumbnail";
 import DocumentThumbnail from "@app/components/shared/filePreview/DocumentThumbnail";
+import { LARGE_PDF_PARSE_LIMIT } from "@app/utils/thumbnailUtils";
 import { truncateCenter } from "@app/utils/textUtils";
 import { FileEditorStatusDot } from "@app/components/fileEditor/FileEditorStatusDot";
 
@@ -553,6 +554,9 @@ const FileEditorThumbnail = ({
                 isLoading={
                   !isEncrypted &&
                   !displayThumbnail &&
+                  // No thumbnail is ever produced at/above the parse limit, so
+                  // without this the spinner has no terminal state.
+                  file.size < LARGE_PDF_PARSE_LIMIT &&
                   (isThumbGenerating ||
                     file.type?.startsWith("application/pdf") ||
                     file.type?.startsWith("image/"))
diff --git a/frontend/editor/src/core/components/shared/FileCard.tsx b/frontend/editor/src/core/components/shared/FileCard.tsx
index e43dbeeb1c..495a76a53b 100644
--- a/frontend/editor/src/core/components/shared/FileCard.tsx
+++ b/frontend/editor/src/core/components/shared/FileCard.tsx
@@ -11,6 +11,7 @@ import { StirlingFileStub } from "@app/types/fileContext";
 import { getFileSize, getFileDate } from "@app/utils/fileUtils";
 import { useFileThumbnail } from "@app/hooks/useFileThumbnail";
 import DocumentThumbnail from "@app/components/shared/filePreview/DocumentThumbnail";
+import { LARGE_PDF_PARSE_LIMIT } from "@app/utils/thumbnailUtils";
 
 interface FileCardProps {
   file: File;
@@ -44,7 +45,14 @@ const FileCard = ({
   const [isHovered, setIsHovered] = useState(false);
 
   const isPdf = file.type === "application/pdf";
-  const isHydrating = isPdf && !isEncrypted && !thumb && !isGenerating;
+  // Files at/above the parse limit never get a thumbnail, so without the size
+  // check their spinner has no terminal state and runs forever.
+  const isHydrating =
+    isPdf &&
+    file.size < LARGE_PDF_PARSE_LIMIT &&
+    !isEncrypted &&
+    !thumb &&
+    !isGenerating;
 
   return (
     <Card
diff --git a/frontend/editor/src/core/contexts/file/fileActions.ts b/frontend/editor/src/core/contexts/file/fileActions.ts
index 437c90711c..77447003f6 100644
--- a/frontend/editor/src/core/contexts/file/fileActions.ts
+++ b/frontend/editor/src/core/contexts/file/fileActions.ts
@@ -13,7 +13,7 @@ import {
   ProcessedFileMetadata,
 } from "@app/types/fileContext";
 import { FileId, ToolOperation } from "@app/types/file";
-import { generateThumbnailWithMetadata } from "@app/utils/thumbnailUtils";
+import { generateThumbnailPairWithMetadata } from "@app/utils/thumbnailUtils";
 import { FileLifecycleManager } from "@app/contexts/file/lifecycle";
 import { buildQuickKeySet } from "@app/contexts/file/fileSelectors";
 import { StirlingFile } from "@app/types/fileContext";
@@ -125,11 +125,20 @@ export async function generateProcessedFileMetadata(
   }
 
   try {
-    // Generate unrotated thumbnails for PageEditor (rotation applied via CSS)
-    const unrotatedResult = await generateThumbnailWithMetadata(file, false);
+    // One parse produces both variants: unrotated thumbnails for PageEditor
+    // (rotation applied via CSS) and the rotated one for file manager display.
+    const { unrotated: unrotatedResult, rotated: rotatedResult } =
+      await generateThumbnailPairWithMetadata(file);
 
-    // Generate rotated thumbnail for file manager display
-    const rotatedResult = await generateThumbnailWithMetadata(file, true);
+    // Large PDF whose linearized-prefix attempt failed: report "no metadata"
+    // (the tolerated failure shape) rather than a bogus zero-page document.
+    if (
+      !unrotatedResult.thumbnail &&
+      unrotatedResult.pageCount === 0 &&
+      !unrotatedResult.isEncrypted
+    ) {
+      return undefined;
+    }
 
     const processedFile = createProcessedFile(
       unrotatedResult.pageCount,
diff --git a/frontend/editor/src/core/services/fileAnalyzer.ts b/frontend/editor/src/core/services/fileAnalyzer.ts
index 4b7af9aa67..2aed740bf9 100644
--- a/frontend/editor/src/core/services/fileAnalyzer.ts
+++ b/frontend/editor/src/core/services/fileAnalyzer.ts
@@ -1,14 +1,19 @@
 import { FileAnalysis, ProcessingStrategy } from "@app/types/processing";
 import { pdfWorkerManager } from "@app/services/pdfWorkerManager";
+import { LARGE_PDF_PARSE_LIMIT } from "@app/utils/thumbnailUtils";
 import type { PDFDocumentProxy } from "pdfjs-dist";
 
-// Scan the last ~8KB of the PDF for an /Encrypt entry. The trailer lives near
-// the tail of the file, so this is enough in practice while staying cheap.
-// For files smaller than the window, the whole file is scanned.
-function hasEncryptMarker(buffer: ArrayBuffer): boolean {
-  const TAIL_BYTES = 8 * 1024;
-  const offset = Math.max(0, buffer.byteLength - TAIL_BYTES);
-  const view = new Uint8Array(buffer, offset);
+// Bounded window scanned at each end of the PDF for an /Encrypt entry. The
+// trailer sits at the tail; linearized files also keep a first-page trailer at
+// the head. Sliced, so a multi-GB file is never read into memory.
+const ENCRYPT_PROBE_BYTES = 64 * 1024;
+
+/** A pdf.js worker that dies mid-parse never settles its promise. */
+const PROBE_TIMEOUT = "pdf-probe-timeout";
+const PROBE_TIMEOUT_MS = 30_000;
+
+function bufferHasEncryptMarker(buffer: ArrayBuffer): boolean {
+  const view = new Uint8Array(buffer);
   // "/Encrypt" as ASCII bytes
   const needle = [0x2f, 0x45, 0x6e, 0x63, 0x72, 0x79, 0x70, 0x74];
   outer: for (let i = 0; i <= view.length - needle.length; i++) {
@@ -20,6 +25,17 @@ function hasEncryptMarker(buffer: ArrayBuffer): boolean {
   return false;
 }
 
+async function hasEncryptMarker(file: File): Promise<boolean> {
+  const tailStart = Math.max(0, file.size - ENCRYPT_PROBE_BYTES);
+  if (bufferHasEncryptMarker(await file.slice(tailStart).arrayBuffer())) {
+    return true;
+  }
+  if (tailStart === 0) return false;
+  return bufferHasEncryptMarker(
+    await file.slice(0, ENCRYPT_PROBE_BYTES).arrayBuffer(),
+  );
+}
+
 export class FileAnalyzer {
   private static readonly SIZE_THRESHOLDS = {
     SMALL: 10 * 1024 * 1024, // 10MB
@@ -80,32 +96,57 @@ export class FileAnalyzer {
   /**
    * Cheap encryption-only probe for the upload-time detection path.
    *
-   * Looks for a /Encrypt entry in the last 8KB of the file (where the PDF
-   * trailer lives). If absent, the file is definitely not encrypted and we
-   * can skip a full pdf.js parse. If present, falls back to pdf.js so we can
-   * distinguish user-password (blocks open) from owner-password-only (opens
-   * fine) — only the former should prompt.
+   * Looks for a /Encrypt entry in a bounded window at either end of the file
+   * (where PDF trailers live). If absent, the file is definitely not encrypted
+   * and we can skip a full pdf.js parse. If present, falls back to pdf.js so we
+   * can distinguish user-password (blocks open) from owner-password-only (opens
+   * fine); only the former should prompt.
+   *
+   * Runs inside the addFiles mutex, so it must always settle: an unbounded
+   * parse here stalls every later upload as well as this one.
    */
   static async isPDFUserPasswordProtected(file: File): Promise<boolean> {
-    const arrayBuffer = await file.arrayBuffer();
-    if (!hasEncryptMarker(arrayBuffer)) return false;
+    if (!(await hasEncryptMarker(file))) return false;
 
-    let pdf: PDFDocumentProxy | undefined;
-    try {
-      pdf = await pdfWorkerManager.createDocument(arrayBuffer, {
-        stopAtErrors: false,
-        verbosity: 0,
+    // Too big to hand pdf.js: that full-buffer parse is the renderer OOM the
+    // large-file path exists to avoid, so trust the marker instead of it.
+    if (file.size >= LARGE_PDF_PARSE_LIMIT) return true;
+
+    const arrayBuffer = await file.arrayBuffer();
+    let timedOut = false;
+    let timer: ReturnType<typeof setTimeout> | undefined;
+    const opening = pdfWorkerManager
+      .createDocument(arrayBuffer, { stopAtErrors: false, verbosity: 0 })
+      .then((pdf) => {
+        // Arrived after the timeout won the race - nothing else frees it.
+        if (timedOut) pdfWorkerManager.destroyDocument(pdf);
+        return pdf;
       });
+
+    try {
+      const pdf = await Promise.race<PDFDocumentProxy>([
+        opening,
+        new Promise<never>((_, reject) => {
+          timer = setTimeout(() => {
+            timedOut = true;
+            reject(new Error(PROBE_TIMEOUT));
+          }, PROBE_TIMEOUT_MS);
+        }),
+      ]);
+      pdfWorkerManager.destroyDocument(pdf);
       // pdf.js opened it — owner-password-only case, no prompt needed.
       return false;
     } catch (error) {
       const errorMessage =
         error instanceof Error ? error.message.toLowerCase() : "";
+      // Unconfirmed either way; the /Encrypt marker is the better guess, and a
+      // spurious prompt beats a card that never stops spinning.
+      if (errorMessage === PROBE_TIMEOUT) return true;
       return (
         errorMessage.includes("password") || errorMessage.includes("encrypted")
       );
     } finally {
-      if (pdf) pdfWorkerManager.destroyDocument(pdf);
+      clearTimeout(timer);
     }
   }
 
diff --git a/frontend/editor/src/core/services/fileStorage.ts b/frontend/editor/src/core/services/fileStorage.ts
index 4cdecca9f1..4f82af3a8f 100644
--- a/frontend/editor/src/core/services/fileStorage.ts
+++ b/frontend/editor/src/core/services/fileStorage.ts
@@ -23,7 +23,9 @@ import {
 const THUMBNAIL_TTL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
 
 export interface StoredStirlingFileRecord extends BaseFileMetadata {
-  data: ArrayBuffer;
+  // Blob since the large-file OOM fix (stored by reference, no JS-side copy);
+  // ArrayBuffer records predate it and are still readable.
+  data: ArrayBuffer | Blob;
   fileId: FileId; // Matches runtime StirlingFile.fileId exactly
   quickKey: string; // Matches runtime StirlingFile.quickKey exactly
   thumbnail?: string;
@@ -118,7 +120,6 @@ class FileStorageService {
     stub: StirlingFileStub,
   ): Promise<void> {
     const db = await this.getDatabase();
-    const arrayBuffer = await stirlingFile.arrayBuffer();
 
     const record: StoredStirlingFileRecord = {
       id: stirlingFile.fileId,
@@ -129,7 +130,9 @@ class FileStorageService {
       size: stirlingFile.size,
       lastModified: stirlingFile.lastModified,
       createdAt: stub.createdAt,
-      data: arrayBuffer,
+      // Store the File (a Blob) itself: IndexedDB persists it by reference and
+      // streams to disk, so multi-GB files never materialize in JS memory.
+      data: stirlingFile,
       thumbnail: stub.thumbnailUrl,
       thumbnailStoredAt: stub.thumbnailUrl ? Date.now() : undefined,
       isLeaf: stub.isLeaf ?? true,
diff --git a/frontend/editor/src/core/utils/thumbnailUtils.test.ts b/frontend/editor/src/core/utils/thumbnailUtils.test.ts
new file mode 100644
index 0000000000..c47bd05bdf
--- /dev/null
+++ b/frontend/editor/src/core/utils/thumbnailUtils.test.ts
@@ -0,0 +1,53 @@
+import { describe, it, expect } from "vitest";
+import { containsEncryptMarker } from "@app/utils/thumbnailUtils";
+
+/**
+ * The only signal that a PDF too large to fully parse is password-protected.
+ * Tested over raw bytes because jsdom's Blob does not return its own contents
+ * from arrayBuffer(), so the slicing wrapper cannot be exercised here.
+ */
+
+/** PDF-shaped bytes with `trailer` written at the very end. */
+function bytesEndingWith(trailer: string, size: number): Uint8Array {
+  const bytes = new Uint8Array(size).fill(0x20); // padding
+  const tail = new TextEncoder().encode(trailer);
+  bytes.set(tail, size - tail.length);
+  return bytes;
+}
+
+describe("containsEncryptMarker — trailer probe for large PDFs", () => {
+  it("detects /Encrypt in a trailer dictionary", () => {
+    const bytes = bytesEndingWith(
+      "trailer\n<< /Size 9 /Root 1 0 R /Encrypt 8 0 R >>\nstartxref\n1234\n%%EOF\n",
+      4096,
+    );
+    expect(containsEncryptMarker(bytes)).toBe(true);
+  });
+
+  it("leaves an unencrypted document alone", () => {
+    const bytes = bytesEndingWith(
+      "trailer\n<< /Size 9 /Root 1 0 R >>\nstartxref\n1234\n%%EOF\n",
+      4096,
+    );
+    expect(containsEncryptMarker(bytes)).toBe(false);
+  });
+
+  it("does not match longer keys that merely start the same way", () => {
+    const bytes = bytesEndingWith("<< /EncryptionAware true >>\n%%EOF\n", 512);
+    expect(containsEncryptMarker(bytes)).toBe(false);
+  });
+
+  it("survives binary bytes around the marker", () => {
+    // Under UTF-8 these become replacement characters and consume the marker.
+    const prefix = new Uint8Array([0xff, 0xfe, 0x80, 0x00, 0x9d]);
+    const marker = new TextEncoder().encode(" /Encrypt 8 0 R >>");
+    const bytes = new Uint8Array(prefix.length + marker.length);
+    bytes.set(prefix);
+    bytes.set(marker, prefix.length);
+    expect(containsEncryptMarker(bytes)).toBe(true);
+  });
+
+  it("reports nothing for an empty read", () => {
+    expect(containsEncryptMarker(new Uint8Array(0))).toBe(false);
+  });
+});
diff --git a/frontend/editor/src/core/utils/thumbnailUtils.ts b/frontend/editor/src/core/utils/thumbnailUtils.ts
index 838992e38b..b356b26db9 100644
--- a/frontend/editor/src/core/utils/thumbnailUtils.ts
+++ b/frontend/editor/src/core/utils/thumbnailUtils.ts
@@ -31,6 +31,37 @@ export function calculateScaleFromFileSize(fileSize: number): number {
 /** PDFium error code 4 = password required (encrypted PDF). */
 const PDFIUM_ERR_PASSWORD = 4;
 
+/** PDFs at or above this size never get a full-buffer client-side parse
+ * (renderer OOM) - only the linearized-prefix attempt below. */
+export const LARGE_PDF_PARSE_LIMIT = 100 * 1024 * 1024;
+
+/** Linearized PDFs keep page 1 + hint tables in the first bytes, so a small
+ * prefix is often enough to render a thumbnail without reading the file. */
+const LINEARIZED_PREFIX_BYTES = 2 * 1024 * 1024;
+
+/** Window at each end of the file searched for an /Encrypt entry. */
+const ENCRYPT_PROBE_BYTES = 64 * 1024;
+
+/** Decoded latin1 because the input is binary - UTF-8 replacement characters
+ * can swallow the marker. \b excludes longer keys like /Encryption. */
+export function containsEncryptMarker(bytes: Uint8Array): boolean {
+  return /\/Encrypt\b/.test(new TextDecoder("latin1").decode(bytes));
+}
+
+/** /Encrypt is referenced from a trailer, never from the page data the prefix
+ * parse sees. Linearized PDFs (most large ones) keep their first-page trailer at
+ * the head and the main one at the tail, so both windows have to be probed.
+ * Heuristic: a false positive offers unlock on a file that did not need it, a
+ * false negative leaves it unopenable. */
+async function looksEncryptedFromTrailer(file: File): Promise<boolean> {
+  const tailStart = Math.max(0, file.size - ENCRYPT_PROBE_BYTES);
+  const tail = await file.slice(tailStart).arrayBuffer();
+  if (containsEncryptMarker(new Uint8Array(tail))) return true;
+  if (tailStart === 0) return false;
+  const head = await file.slice(0, ENCRYPT_PROBE_BYTES).arrayBuffer();
+  return containsEncryptMarker(new Uint8Array(head));
+}
+
 interface PdfiumRenderResult {
   thumbnail: string;
   pageCount: number;
@@ -112,6 +143,72 @@ async function renderPdfThumbnailPdfium(
   }
 }
 
+/**
+ * Render both thumbnail variants (upright + rotation-baked) from a single
+ * document open - halves the parse and memory cost of the add-files path.
+ */
+async function renderPdfThumbnailPairPdfium(
+  data: ArrayBuffer,
+  scale: number,
+  collectAllPagesMetadata: boolean,
+): Promise<{ unrotated: PdfiumRenderResult; rotated: PdfiumRenderResult }> {
+  const m = await getPdfiumModule();
+  let docPtr: number;
+  try {
+    docPtr = await openRawDocumentSafe(data);
+  } catch (error) {
+    if (
+      error instanceof Error &&
+      new RegExp(`error ${PDFIUM_ERR_PASSWORD}`).test(error.message)
+    ) {
+      const encrypted: PdfiumRenderResult = {
+        thumbnail: "",
+        pageCount: 1,
+        pageRotations: [],
+        pageDimensions: [],
+        isEncrypted: true,
+      };
+      return { unrotated: encrypted, rotated: { ...encrypted } };
+    }
+    throw error;
+  }
+
+  try {
+    const pageCount = m.FPDF_GetPageCount(docPtr);
+    const unrotatedThumb = await renderPdfiumPageDataUrl(docPtr, 0, scale, {
+      applyRotation: false,
+    });
+    const rotatedThumb = await renderPdfiumPageDataUrl(docPtr, 0, scale, {
+      applyRotation: true,
+    });
+    if (!unrotatedThumb || !rotatedThumb) {
+      throw new Error("PDFium: failed to render page 0");
+    }
+
+    const firstMeta = await readPdfiumPageMetadata(docPtr, 0);
+    const pageRotations: number[] = [firstMeta?.rotation ?? 0];
+    const pageDimensions: Array<{ width: number; height: number }> = [
+      { width: firstMeta?.width ?? 0, height: firstMeta?.height ?? 0 },
+    ];
+    if (collectAllPagesMetadata) {
+      for (let i = 1; i < pageCount; i++) {
+        const meta = await readPdfiumPageMetadata(docPtr, i);
+        if (!meta) continue;
+        pageRotations[i] = meta.rotation;
+        pageDimensions[i] = { width: meta.width, height: meta.height };
+      }
+    }
+
+    const base = { pageCount, pageRotations, pageDimensions };
+    return {
+      unrotated: { thumbnail: unrotatedThumb, ...base },
+      rotated: { thumbnail: rotatedThumb, ...base },
+    };
+  } finally {
+    await closeRawDocument(docPtr);
+  }
+}
+
 async function generatePDFThumbnail(
   arrayBuffer: ArrayBuffer,
   scale: number,
@@ -133,7 +230,7 @@ async function generatePDFThumbnail(
  */
 export async function generateThumbnailForFile(file: File): Promise<string> {
   // Very large PDFs skip thumbnail generation — SVG icon shown in UI instead
-  if (file.size >= 100 * 1024 * 1024) {
+  if (file.size >= LARGE_PDF_PARSE_LIMIT) {
     return "";
   }
 
@@ -152,8 +249,7 @@ export async function generateThumbnailForFile(file: File): Promise<string> {
     const scale = calculateScaleFromFileSize(file.size);
 
     // Only read first 2MB for thumbnail generation to save memory
-    const chunkSize = 2 * 1024 * 1024; // 2MB
-    const chunk = file.slice(0, Math.min(chunkSize, file.size));
+    const chunk = file.slice(0, Math.min(LINEARIZED_PREFIX_BYTES, file.size));
     const arrayBuffer = await chunk.arrayBuffer();
 
     try {
@@ -193,6 +289,36 @@ export async function generateThumbnailWithMetadata(
 
   const scale = calculateScaleFromFileSize(file.size);
 
+  // Never full-parse huge PDFs client-side - the renderer process OOMs long
+  // before system RAM runs out. The prefix succeeds for linearized PDFs.
+  if (file.size >= LARGE_PDF_PARSE_LIMIT) {
+    // Probe inside the try: an unreadable file must still resolve, or the
+    // caller leaves the card with no metadata and a spinner that never stops.
+    try {
+      if (await looksEncryptedFromTrailer(file)) {
+        return { thumbnail: "", pageCount: 1, isEncrypted: true };
+      }
+      const chunk = await file.slice(0, LINEARIZED_PREFIX_BYTES).arrayBuffer();
+      const result = await renderPdfThumbnailPdfium(
+        chunk,
+        scale,
+        applyRotation,
+        false,
+      );
+      if (result.isEncrypted) {
+        return { thumbnail: "", pageCount: 1, isEncrypted: true };
+      }
+      return {
+        thumbnail: result.thumbnail,
+        pageCount: result.pageCount,
+        pageRotations: result.pageRotations,
+        pageDimensions: result.pageDimensions,
+      };
+    } catch {
+      return { thumbnail: "", pageCount: 0 };
+    }
+  }
+
   try {
     const arrayBuffer = await file.arrayBuffer();
     // Always read per-page rotation: PageEditor renders thumbnails upright and
@@ -222,3 +348,51 @@ export async function generateThumbnailWithMetadata(
     return { thumbnail: "", pageCount: 1 };
   }
 }
+
+/**
+ * Both thumbnail variants + page metadata from ONE full parse instead of two.
+ * Large PDFs only get the linearized-prefix attempt; if that fails, both
+ * variants are empty placeholders and page metadata is omitted.
+ */
+export async function generateThumbnailPairWithMetadata(file: File): Promise<{
+  unrotated: ThumbnailWithMetadata;
+  rotated: ThumbnailWithMetadata;
+}> {
+  const scale = calculateScaleFromFileSize(file.size);
+  const isLarge = file.size >= LARGE_PDF_PARSE_LIMIT;
+  try {
+    // Probe inside the try: an unreadable file must still resolve, or the
+    // caller leaves the card with no metadata and a spinner that never stops.
+    if (isLarge && (await looksEncryptedFromTrailer(file))) {
+      const encrypted: ThumbnailWithMetadata = {
+        thumbnail: "",
+        pageCount: 1,
+        isEncrypted: true,
+      };
+      return { unrotated: encrypted, rotated: { ...encrypted } };
+    }
+    const buffer = isLarge
+      ? await file.slice(0, LINEARIZED_PREFIX_BYTES).arrayBuffer()
+      : await file.arrayBuffer();
+    const pair = await renderPdfThumbnailPairPdfium(buffer, scale, !isLarge);
+
+    const toPublic = (r: PdfiumRenderResult): ThumbnailWithMetadata =>
+      r.isEncrypted
+        ? { thumbnail: "", pageCount: 1, isEncrypted: true }
+        : {
+            thumbnail: r.thumbnail,
+            pageCount: r.pageCount,
+            pageRotations: r.pageRotations,
+            pageDimensions: r.pageDimensions,
+          };
+    return {
+      unrotated: toPublic(pair.unrotated),
+      rotated: toPublic(pair.rotated),
+    };
+  } catch {
+    return {
+      unrotated: { thumbnail: "", pageCount: 0 },
+      rotated: { thumbnail: "", pageCount: 0 },
+    };
+  }
+}

From 8f5344ec7da36ff153432652ddc6c9c1c4c7d4c2 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Wed, 5 Aug 2026 16:25:44 +0200
Subject: [PATCH 069/122] build(tool-models): separate API model generation
 from Swagger setup (#7300)

# Description of Changes

- Added internal `_generate` tasks for frontend and engine tool-model
generation.
- Kept the public `tool-models` tasks responsible for dependency
installation and Swagger generation.
- Separated environment preparation from the actual model generation
commands.
- This allows higher-level tasks to prepare the OpenAPI specification
once and invoke both generators without repeating the backend setup.


---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .taskfiles/backend.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.taskfiles/backend.yml b/.taskfiles/backend.yml
index fbabd783a3..63773f61fc 100644
--- a/.taskfiles/backend.yml
+++ b/.taskfiles/backend.yml
@@ -146,6 +146,7 @@ tasks:
 
   swagger:
     desc: "Generate OpenAPI docs"
+    run: once
     cmds:
       - cmd: cmd /c ".\gradlew.bat :stirling-pdf:copySwaggerDoc"
         platforms: [windows]

From d0d197f09f84a5609aa8191dc08187f4c873b12d Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Wed, 5 Aug 2026 16:23:50 +0100
Subject: [PATCH 070/122] Procurement: draft Enterprise Agreement + signature,
 legal pages & consent, quote/agreement split (#7021)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Consolidates the enterprise procurement and legal work into one PR off
`main`. Supersedes #7020 (closed; every commit from it is contained
here). Sits on top of PAYG prepaid bundles (#7032) and the `--color-*` →
`--c-*` portal token rename.

## Why

Enterprise procurement was a mock. The stage screens read from a fake
state machine, the "agreement" was prose hardcoded in a component, and
nothing a buyer did was recorded anywhere. To actually sell to an
enterprise we need three things it didn't have: a real document they can
read and sign, a record that proves they signed that exact version, and
a licence that flips when they pay.

## What

**The agreement is a real versioned document**

- Registry at `resources/legal/manifest.json` +
`legal/<id>/<version>/*.md`. Publishing a new version is a markdown file
and a manifest bump, no code change. `@`-prefixed parts are generated
sections.
- `AgreementAssembler` builds MSA (Part A) + generated Order Form (Part
B) + DPA (Part C) as one document. Only the Order Form varies per deal.
- `AgreementPdfRenderer` goes through our own pipeline (commonmark →
`FileToPdf`/WeasyPrint), so we dogfood it.
- Immutable signature record pinning document id and version, a SHA-256
of the exact rendered markdown, the variable snapshot, typed signatory
details, timestamp and IP.

**Legal document pages and consent logging**

- `GET /api/v1/legal/{docId}` serves any registry document; a viewer
modal renders it with a draft badge. The SLA exhibit is viewable for the
first time.
- `legal_consent` + `POST /api/v1/legal/consent`. EULA clickwrap is
recorded once: at trial start, or at the quote step only if there was no
trial.

**Quote and Agreement are separate steps**

The quote step is a plain itemised review (figures, renewal, PO) with
download and "Accept quote". Accepting advances to the agreement and
does not charge Stripe. Signing the agreement is still the commitment
point.

**One quote number**

We no longer mint our own reference. The Stripe quote number is the
identifier everywhere, so the UI and the memo can't disagree.
`quote_number` is nullable until Stripe assigns it at finalisation
(`20260808000000`).

**Payment takes the deal live**

`invoice.paid` on the stripe-webhook moves the deal to live and the UI
reflects it. Nothing watched for payment before, so a paid customer sat
in "payment" forever. Needs `invoice.paid` enabled on the webhook
endpoint in the Stripe dashboard.

**Security**

Any signup could self-issue a $0 enterprise licence, from three things
compounding: leader-on-signup, no entitlement gate, and no ACV floor.
So: `startTrial` now has a stage guard (it was replacing committed
licences), the offline `.lic` is gated on entitlement, the ACV floor is
enforced before the quote persists, and the air-gap check reads the
quote's deployment rather than the deal's. Invitee emails are redacted
in logs. Dev and Storybook were hitting real Stripe; both now route
through `resolveDemoResponse`.

**Removed the dead procurement island**

The original stage-by-stage page survived the rebuild with no route and
no consumer, so it was invisible to review but still cost a reader's
time. 16 unreferenced files, 182 lines of superseded API, 53 orphaned
en-US keys, and `Procurement.css` from 1665 to 968 lines. Nothing
deleted had a live consumer.

## Screenshots

Home, deal underway (hero card footer):

<!-- home-in-procurement.png -->

Quote builder, step 1:

<!-- quote-builder.png -->

Agreement, ready to sign:

<!-- agreement-signing.png -->

Payment and live:

<!-- stage-payment.png / stage-live.png -->

## How to test

**Storybook** covers every state without a backend:

```bash
cd frontend && npm run storybook
```

Then `Portal/Procurement/*`:

| Story | What to look at |
| --- | --- |
| `DealStatusHero` — Trial / Quote / Agreement / Payment / Live | One
hero per stage: progress band, one-line status, stage CTA |
| `QuoteBuilder` — Default | 4 steps. Users + volume drive the price;
Governance and PDF size are multipliers; step 4 is the itemised review |
| `ProcurementAgreement` — Default / Signing | Header actions,
always-visible scrollbar on the paper, one-line signature row |
| `ProcurementStages` — Payment / Live / License | "View & pay invoice"
opens Stripe directly; licence key and `.lic` download |
| `Views/Home` — Subscribed In Procurement | The hero in real page
context |

Note: `ProcurementAgreement` renders "Could not load the agreement" in
Storybook because it fetches the document from the backend. The chrome
is accurate, the paper body needs the app.

**Full flow** needs SaaS running and a linked team:

1. Home → **Explore enterprise** → trial setup (deployment + seats).
EULA is recorded here.
2. **Build your quote** → 4 steps → Generate. Buyer details are required
first.
3. Review the itemised quote → **Accept quote**. Confirm Stripe was
*not* charged.
4. Agreement → tick, fill signatory, **Sign agreement**. Check
`procurement_signature` for the version and content hash.
5. **View & pay invoice** → pay in Stripe test mode → deal should move
to live on the `invoice.paid` webhook.

Worth reviewing specifically: the licence cannot be issued without
entitlement (step 3 before payment), and `startTrial` on an
already-committed deal is rejected rather than overwriting.

## Verification

- `:saas compileJava` + `spotlessJavaCheck`
- `task frontend:check:all` green end to end: 9 typecheck variants,
eslint at zero warnings, `theme-lint`, `lint:css`, prettier, build,
**1656 tests across 188 files**
- 7 deno tests on the `invoice.paid` handler, covering all four shapes
Stripe uses for the subscription reference

## Open, not addressed here

- **The commercial model contradicts itself in three places.** The Order
Form says annual-in-advance, the MSA §2.3/§3.2 implies otherwise, the
quote engine computes `tcv = annualNet × termYears` flat, and Stripe
only invoices one year. Needs a decision before this is customer-facing.
- The 25 MB data-processing increments vs the ×1.4/×2.4 size multiplier,
deferred pending Matt.
- All legal text is **draft**. It renders with a draft badge and is not
presented as executed; counsel's read is still a publish gate.
- `{{subprocessor_url}}` / `{{eula_url}}` awaiting marketing's final
links.
- `frontend-a11y` is red on pre-existing portal contrast debt, deferred
by decision.

## Schema notes

Two migrations land on the SaaS side (`v3`), both applied by that repo's
PR CI:

- `20260808000000` drops the NOT NULL on
`procurement_quote.quote_number`, which is required rather than cosmetic
— the number now comes from Stripe at finalisation, so a draft holds
NULL, and `ddl-auto` cannot drop an existing NOT NULL itself.
- `20260809000000` adds `procurement_deal.last_paid_invoice_id`,
nullable.

Nothing here needs a migration in this repo: Flyway is not on the
classpath, so the Java side only ever adds via `ddl-auto`, and Postgres
migrations run ahead of the app deploy.
---
 app/saas/build.gradle                         |    5 +
 .../software/saas/config/SaasJpaConfig.java   |    6 +-
 .../software/saas/legal/LegalConsent.java     |   62 +
 .../saas/legal/LegalConsentRepository.java    |    5 +
 .../saas/legal/LegalConsentService.java       |   47 +
 .../software/saas/legal/LegalController.java  |  133 ++
 .../saas/legal/LegalDocumentMeta.java         |   27 +
 .../saas/legal/LegalDocumentRegistry.java     |  151 ++
 .../saas/payg/bundle/PrepaidBundle.java       |   15 +-
 .../api/ProcurementController.java            |  247 ++-
 .../ProcurementConfigurationProperties.java   |   13 +
 .../procurement/legal/AgreementAssembler.java |  278 ++++
 .../legal/AgreementPdfRenderer.java           |   71 +
 .../procurement/legal/AgreementSigning.java   |   12 +
 .../procurement/legal/AssembledAgreement.java |   16 +
 .../model/ProcurementAgreementSignature.java  |   86 +
 .../procurement/model/ProcurementDeal.java    |   33 +
 .../procurement/model/ProcurementQuote.java   |    6 +-
 .../pricing/ProcurementPricingService.java    |   49 +-
 ...ocurementAgreementSignatureRepository.java |   29 +
 .../service/ProcurementService.java           |  390 ++++-
 .../legal/enterprise-agreement/0.9.1/dpa.md   |   53 +
 .../legal/enterprise-agreement/0.9.1/msa.md   |  119 ++
 .../main/resources/legal/eula/1.0.0/eula.md   |   75 +
 .../src/main/resources/legal/manifest.json    |   38 +
 .../src/main/resources/legal/sla/1.0.0/sla.md |   37 +
 .../subprocessors/1.0.0/subprocessors.md      |   19 +
 .../ProcurementTrialRestartPolicyTest.java    |   44 +
 frontend/.storybook/a11y-baseline.json        |   22 +-
 .../public/locales/en-US/translation.toml     |  241 ++-
 frontend/editor/src/portal/ViewRouter.tsx     |    2 -
 .../editor/src/portal/api/externalUrl.test.ts |   51 +
 frontend/editor/src/portal/api/externalUrl.ts |   25 +
 frontend/editor/src/portal/api/procurement.ts |  369 ++---
 .../portal/components/EditorStatusCard.css    |   99 +-
 .../components/EditorStatusCard.stories.tsx   |   30 +-
 .../portal/components/EditorStatusCard.tsx    |  179 +--
 .../portal/components/HomeHero.stories.tsx    |   21 +-
 .../editor/src/portal/components/HomeHero.tsx |   72 +-
 .../src/portal/components/SetupChecklist.css  |  122 --
 .../components/SetupChecklist.stories.tsx     |   66 -
 .../src/portal/components/SetupChecklist.tsx  |  150 --
 .../src/portal/components/WelcomeBanner.css   |  103 --
 .../components/WelcomeBanner.stories.tsx      |   41 -
 .../src/portal/components/WelcomeBanner.tsx   |   97 --
 .../billing/BundleCheckoutModal.tsx           |    4 +-
 .../components/billing/EnterpriseUpsell.tsx   |   13 +-
 .../components/billing/FreePlanView.tsx       |    1 -
 .../components/billing/LinkAccountPrompt.tsx  |    6 +-
 .../components/billing/PrepayModalHeader.tsx  |  100 +-
 .../components/billing/SpendLimitCard.tsx     |    2 +-
 .../billing/StripeCheckoutModal.tsx           |    1 -
 .../src/portal/components/billing/billing.css |   53 -
 .../editor/src/portal/components/icons.tsx    |   29 +
 .../procurement/ActionModal.stories.tsx       |   51 -
 .../components/procurement/ActionModal.tsx    |  166 --
 .../procurement/DealJourney.stories.tsx       |   30 -
 .../components/procurement/DealJourney.tsx    |   99 --
 .../procurement/DealStatusHero.stories.tsx    |    6 +-
 .../components/procurement/DealStatusHero.tsx |  311 ++--
 .../components/procurement/DocRow.stories.tsx |   62 -
 .../portal/components/procurement/DocRow.tsx  |   89 --
 .../procurement/DocumentLedger.stories.tsx    |   30 -
 .../components/procurement/DocumentLedger.tsx |  160 --
 .../procurement/LockedState.stories.tsx       |   18 -
 .../components/procurement/LockedState.tsx    |   36 -
 .../ProcurementAgreement.stories.tsx          |   14 +-
 .../procurement/ProcurementAgreement.tsx      |  369 +++--
 .../procurement/ProcurementBanner.stories.tsx |   79 -
 .../procurement/ProcurementBanner.tsx         |   65 +-
 .../procurement/ProcurementExtras.stories.tsx |    7 +-
 .../procurement/ProcurementExtras.tsx         |  542 +++++--
 .../procurement/ProcurementFlow.stories.tsx   |   10 +-
 .../procurement/ProcurementFlow.tsx           |  110 +-
 .../procurement/ProcurementHome.stories.tsx   |   18 -
 .../procurement/ProcurementHome.tsx           |   22 -
 .../procurement/ProcurementModal.stories.tsx  |    4 +-
 .../procurement/ProcurementModal.tsx          |  115 +-
 .../procurement/ProcurementStages.tsx         |  102 +-
 .../components/procurement/QuoteBuilder.tsx   |  377 ++++-
 .../procurement/StageStepper.stories.tsx      |   20 -
 .../components/procurement/StageStepper.tsx   |   52 -
 .../portal/components/procurement/format.ts   |   32 +-
 .../procurement/useProcurement.test.tsx       |  137 ++
 .../components/procurement/useProcurement.ts  |  165 +-
 .../portal/components/shared/FlowModal.css    |   52 +
 .../components/shared/FlowModal.test.tsx      |   94 ++
 .../portal/components/shared/FlowModal.tsx    |   52 +
 .../components/shared/StepModalHeader.css     |   92 ++
 .../components/shared/StepModalHeader.tsx     |  127 ++
 .../src/portal/contexts/UIContext.test.tsx    |   47 +
 .../editor/src/portal/contexts/UIContext.tsx  |   16 +
 .../src/portal/contexts/ViewContext.tsx       |    2 -
 .../src/portal/hooks/useOnboardingProgress.ts |   63 -
 .../editor/src/portal/mocks/handlers/index.ts |    3 -
 .../src/portal/mocks/handlers/procurement.ts  |   92 --
 .../portal/mocks/handlers/procurementSaas.ts  |  122 +-
 .../editor/src/portal/mocks/procurement.ts    |  307 ----
 .../portal/mocks/procurementMachine.test.ts   |   86 -
 .../src/portal/mocks/procurementMachine.ts    |  114 --
 frontend/editor/src/portal/queries/keys.ts    |    3 +
 frontend/editor/src/portal/queries/users.ts   |    5 +-
 .../editor/src/portal/views/Home.stories.tsx  |    1 +
 frontend/editor/src/portal/views/Home.tsx     |    2 +-
 .../editor/src/portal/views/Procurement.css   | 1383 ++++++-----------
 .../editor/src/portal/views/Procurement.tsx   |   15 -
 frontend/eslint.config.mjs                    |    7 +-
 107 files changed, 5347 insertions(+), 4601 deletions(-)
 create mode 100644 app/saas/src/main/java/stirling/software/saas/legal/LegalConsent.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/legal/LegalConsentRepository.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/legal/LegalConsentService.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/legal/LegalController.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentMeta.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentRegistry.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementAssembler.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementPdfRenderer.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementSigning.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/procurement/legal/AssembledAgreement.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementAgreementSignature.java
 create mode 100644 app/saas/src/main/java/stirling/software/saas/procurement/repository/ProcurementAgreementSignatureRepository.java
 create mode 100644 app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/dpa.md
 create mode 100644 app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/msa.md
 create mode 100644 app/saas/src/main/resources/legal/eula/1.0.0/eula.md
 create mode 100644 app/saas/src/main/resources/legal/manifest.json
 create mode 100644 app/saas/src/main/resources/legal/sla/1.0.0/sla.md
 create mode 100644 app/saas/src/main/resources/legal/subprocessors/1.0.0/subprocessors.md
 create mode 100644 app/saas/src/test/java/stirling/software/saas/procurement/service/ProcurementTrialRestartPolicyTest.java
 create mode 100644 frontend/editor/src/portal/api/externalUrl.test.ts
 create mode 100644 frontend/editor/src/portal/api/externalUrl.ts
 delete mode 100644 frontend/editor/src/portal/components/SetupChecklist.css
 delete mode 100644 frontend/editor/src/portal/components/SetupChecklist.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/SetupChecklist.tsx
 delete mode 100644 frontend/editor/src/portal/components/WelcomeBanner.css
 delete mode 100644 frontend/editor/src/portal/components/WelcomeBanner.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/WelcomeBanner.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/ActionModal.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/ActionModal.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/DealJourney.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/DealJourney.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/DocRow.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/DocRow.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/DocumentLedger.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/DocumentLedger.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/LockedState.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/LockedState.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/ProcurementBanner.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/ProcurementHome.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/ProcurementHome.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/StageStepper.stories.tsx
 delete mode 100644 frontend/editor/src/portal/components/procurement/StageStepper.tsx
 create mode 100644 frontend/editor/src/portal/components/procurement/useProcurement.test.tsx
 create mode 100644 frontend/editor/src/portal/components/shared/FlowModal.css
 create mode 100644 frontend/editor/src/portal/components/shared/FlowModal.test.tsx
 create mode 100644 frontend/editor/src/portal/components/shared/FlowModal.tsx
 create mode 100644 frontend/editor/src/portal/components/shared/StepModalHeader.css
 create mode 100644 frontend/editor/src/portal/components/shared/StepModalHeader.tsx
 create mode 100644 frontend/editor/src/portal/contexts/UIContext.test.tsx
 delete mode 100644 frontend/editor/src/portal/hooks/useOnboardingProgress.ts
 delete mode 100644 frontend/editor/src/portal/mocks/handlers/procurement.ts
 delete mode 100644 frontend/editor/src/portal/mocks/procurement.ts
 delete mode 100644 frontend/editor/src/portal/mocks/procurementMachine.test.ts
 delete mode 100644 frontend/editor/src/portal/mocks/procurementMachine.ts
 delete mode 100644 frontend/editor/src/portal/views/Procurement.tsx

diff --git a/app/saas/build.gradle b/app/saas/build.gradle
index 495f583a74..a954e6d05a 100644
--- a/app/saas/build.gradle
+++ b/app/saas/build.gradle
@@ -6,6 +6,11 @@ dependencies {
     implementation project(':common')
     implementation project(':proprietary')
 
+    // Markdown -> HTML for rendering versioned legal documents (agreement) to PDF via the
+    // shared FileToPdf/WeasyPrint path in :common. Same library the core Markdown-to-PDF tool uses.
+    implementation "org.commonmark:commonmark:$commonmarkVersion"
+    implementation "org.commonmark:commonmark-ext-gfm-tables:$commonmarkVersion"
+
     api 'org.springframework.boot:spring-boot-starter-security'
     api 'org.springframework.boot:spring-boot-starter-data-jpa'
     api 'org.springframework.boot:spring-boot-starter-oauth2-resource-server'
diff --git a/app/saas/src/main/java/stirling/software/saas/config/SaasJpaConfig.java b/app/saas/src/main/java/stirling/software/saas/config/SaasJpaConfig.java
index cd991cc44e..612c6e3171 100644
--- a/app/saas/src/main/java/stirling/software/saas/config/SaasJpaConfig.java
+++ b/app/saas/src/main/java/stirling/software/saas/config/SaasJpaConfig.java
@@ -20,7 +20,8 @@ import org.springframework.data.jpa.repository.config.EnableJpaRepositories;
             "stirling.software.saas.ai.repository",
             "stirling.software.saas.payg.repository",
             "stirling.software.saas.payg.bundle",
-            "stirling.software.saas.procurement.repository"
+            "stirling.software.saas.procurement.repository",
+            "stirling.software.saas.legal"
         })
 @EntityScan({
     "stirling.software.saas.accountlink",
@@ -28,6 +29,7 @@ import org.springframework.data.jpa.repository.config.EnableJpaRepositories;
     "stirling.software.saas.billing.model",
     "stirling.software.saas.ai.model",
     "stirling.software.saas.payg",
-    "stirling.software.saas.procurement.model"
+    "stirling.software.saas.procurement.model",
+    "stirling.software.saas.legal"
 })
 public class SaasJpaConfig {}
diff --git a/app/saas/src/main/java/stirling/software/saas/legal/LegalConsent.java b/app/saas/src/main/java/stirling/software/saas/legal/LegalConsent.java
new file mode 100644
index 0000000000..5698133fe8
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/legal/LegalConsent.java
@@ -0,0 +1,62 @@
+package stirling.software.saas.legal;
+
+import java.io.Serializable;
+import java.time.LocalDateTime;
+
+import org.hibernate.annotations.CreationTimestamp;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.GeneratedValue;
+import jakarta.persistence.GenerationType;
+import jakarta.persistence.Id;
+import jakarta.persistence.Table;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+/**
+ * An append-only record that a user accepted a versioned legal document at a particular moment in
+ * the product. Distinct from a signed agreement (which is a negotiated, signature-bearing artifact,
+ * see {@code ProcurementAgreementSignature}); this captures the lighter clickwrap consents — the
+ * EULA accepted at trial start and at quote generation — with the exact document version, so what
+ * was agreed is auditable even after the document versions up.
+ */
+@Entity
+@Table(name = "legal_consent")
+@NoArgsConstructor
+@Getter
+@Setter
+public class LegalConsent implements Serializable {
+
+    private static final long serialVersionUID = 1L;
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    @Column(name = "consent_id")
+    private Long consentId;
+
+    @Column(name = "team_id")
+    private Long teamId;
+
+    @Column(name = "user_id")
+    private Long userId;
+
+    @Column(name = "document_id", nullable = false, length = 64)
+    private String documentId;
+
+    @Column(name = "document_version", nullable = false, length = 32)
+    private String documentVersion;
+
+    // Where in the product the consent was given: "trial", "quote", etc.
+    @Column(name = "context", nullable = false, length = 32)
+    private String context;
+
+    @Column(name = "signer_ip", length = 64)
+    private String signerIp;
+
+    @CreationTimestamp
+    @Column(name = "consented_at", nullable = false, updatable = false)
+    private LocalDateTime consentedAt;
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/legal/LegalConsentRepository.java b/app/saas/src/main/java/stirling/software/saas/legal/LegalConsentRepository.java
new file mode 100644
index 0000000000..9d79640cd0
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/legal/LegalConsentRepository.java
@@ -0,0 +1,5 @@
+package stirling.software.saas.legal;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+
+public interface LegalConsentRepository extends JpaRepository<LegalConsent, Long> {}
diff --git a/app/saas/src/main/java/stirling/software/saas/legal/LegalConsentService.java b/app/saas/src/main/java/stirling/software/saas/legal/LegalConsentService.java
new file mode 100644
index 0000000000..c6377f35b7
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/legal/LegalConsentService.java
@@ -0,0 +1,47 @@
+package stirling.software.saas.legal;
+
+import org.springframework.context.annotation.Profile;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+/** Records clickwrap consents to versioned legal documents (see {@link LegalConsent}). */
+@Slf4j
+@Service
+@Profile("saas")
+@RequiredArgsConstructor
+public class LegalConsentService {
+
+    private final LegalDocumentRegistry registry;
+    private final LegalConsentRepository consents;
+
+    /**
+     * Record that the given user accepted the current version of {@code documentId} in {@code
+     * context} (e.g. "trial", "quote"). No-op for an unknown document. Best-effort: callers treat a
+     * failure as non-fatal so it never blocks the flow the consent accompanies.
+     */
+    @Transactional
+    public void record(Long teamId, Long userId, String documentId, String context, String ip) {
+        LegalDocumentMeta meta = registry.meta(documentId).orElse(null);
+        if (meta == null) {
+            log.warn("[legal] consent for unknown document '{}' ignored", documentId);
+            return;
+        }
+        LegalConsent consent = new LegalConsent();
+        consent.setTeamId(teamId);
+        consent.setUserId(userId);
+        consent.setDocumentId(meta.id());
+        consent.setDocumentVersion(meta.version());
+        consent.setContext(context);
+        consent.setSignerIp(ip);
+        consents.save(consent);
+        log.info(
+                "[legal] consent recorded team={} doc={} v{} context={}",
+                teamId,
+                meta.id(),
+                meta.version(),
+                context);
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/legal/LegalController.java b/app/saas/src/main/java/stirling/software/saas/legal/LegalController.java
new file mode 100644
index 0000000000..308b3e99bd
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/legal/LegalController.java
@@ -0,0 +1,133 @@
+package stirling.software.saas.legal;
+
+import java.util.Optional;
+
+import org.springframework.context.annotation.Profile;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.security.core.Authentication;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import io.swagger.v3.oas.annotations.Hidden;
+
+import jakarta.servlet.http.HttpServletRequest;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.proprietary.model.TeamMembership;
+import stirling.software.proprietary.security.database.repository.UserRepository;
+import stirling.software.proprietary.security.model.User;
+import stirling.software.proprietary.security.repository.TeamMembershipRepository;
+import stirling.software.saas.util.AuthenticationUtils;
+
+/**
+ * Serves the versioned legal documents (EULA, SLA exhibit, subprocessors) for in-product viewing,
+ * and records the lighter clickwrap consents. The enterprise agreement itself is served + signed
+ * through the procurement controller, since it needs a quote to fill its Order Form.
+ */
+@Slf4j
+@Hidden
+@RestController
+@RequestMapping("/api/v1/legal")
+@Profile("saas")
+@RequiredArgsConstructor
+public class LegalController {
+
+    private final LegalDocumentRegistry registry;
+    private final LegalConsentService consents;
+    private final TeamMembershipRepository memberRepo;
+    private final UserRepository userRepository;
+
+    /** A legal document rendered for viewing: registry metadata + the static markdown body. */
+    public record LegalDocumentResponse(
+            String docId,
+            String version,
+            String versionLabel,
+            String displayName,
+            String effectiveDate,
+            String status,
+            String markdown) {}
+
+    public record ConsentRequest(String documentId, String context) {}
+
+    /** Fetch a legal document's current version as markdown. 404 for an unknown document. */
+    @GetMapping("/{docId}")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<LegalDocumentResponse> document(@PathVariable String docId) {
+        return registry.meta(docId)
+                .<ResponseEntity<LegalDocumentResponse>>map(
+                        meta ->
+                                ResponseEntity.ok(
+                                        new LegalDocumentResponse(
+                                                meta.id(),
+                                                meta.version(),
+                                                meta.versionLabel(),
+                                                meta.displayName(),
+                                                meta.effectiveDate(),
+                                                meta.status(),
+                                                registry.staticMarkdown(docId))))
+                .orElseGet(() -> ResponseEntity.notFound().build());
+    }
+
+    /**
+     * Record a clickwrap consent (e.g. the EULA accepted at trial start or quote generation).
+     * Best-effort — a teamless caller still returns 200 so the accompanying flow is never blocked.
+     */
+    @PostMapping("/consent")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<Void> consent(
+            @RequestBody ConsentRequest request, Authentication auth, HttpServletRequest http) {
+        if (request == null || request.documentId() == null || request.context() == null) {
+            return ResponseEntity.badRequest().build();
+        }
+        Optional<TeamMembership> membership = primaryMembership(auth);
+        Long teamId = membership.map(m -> m.getTeam().getId()).orElse(null);
+        Long userId = membership.map(m -> m.getUser().getId()).orElse(null);
+        // Best-effort for real: consent is audit metadata, not an authorisation gate, so a failed
+        // write must not fail the trial start or quote generation this call accompanies. Previously
+        // that only held because the caller happened to swallow the 500.
+        try {
+            consents.record(
+                    teamId, userId, request.documentId(), request.context(), clientIp(http));
+        } catch (RuntimeException e) {
+            log.warn(
+                    "[legal] consent not recorded doc={} context={}: {}",
+                    request.documentId(),
+                    request.context(),
+                    e.getMessage());
+        }
+        return ResponseEntity.ok().build();
+    }
+
+    private Optional<TeamMembership> primaryMembership(Authentication auth) {
+        User user;
+        try {
+            user = AuthenticationUtils.getCurrentUser(auth, userRepository);
+        } catch (SecurityException e) {
+            return Optional.empty();
+        }
+        return memberRepo.findPrimaryMembership(user.getId()).stream().findFirst();
+    }
+
+    /**
+     * Best guess at the caller's address, for the audit record.
+     *
+     * <p>Informational only, and must stay that way: the first {@code X-Forwarded-For} hop is set
+     * by the client, so a stored address is trivially spoofable and is not evidence of where a
+     * consent or signature came from. Treat it as a hint when reconstructing events, never as
+     * proof.
+     */
+    private static String clientIp(HttpServletRequest request) {
+        String forwarded = request.getHeader("X-Forwarded-For");
+        if (forwarded != null && !forwarded.isBlank()) {
+            return forwarded.split(",")[0].trim();
+        }
+        return request.getRemoteAddr();
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentMeta.java b/app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentMeta.java
new file mode 100644
index 0000000000..9f35e42053
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentMeta.java
@@ -0,0 +1,27 @@
+package stirling.software.saas.legal;
+
+import java.util.List;
+
+/**
+ * One legal document's registry entry, as declared in {@code legal/manifest.json}. Immutable
+ * snapshot loaded at startup by {@link LegalDocumentRegistry}.
+ *
+ * <p>{@code parts} lists the pieces, in render order, that make up the document. A plain entry
+ * (e.g. {@code "msa.md"}) is a static markdown file under {@code legal/<id>/<version>/}; an entry
+ * prefixed with {@code "@"} (e.g. {@code "@order-form"}) is a dynamic section that a document
+ * assembler generates at render time.
+ */
+public record LegalDocumentMeta(
+        String id,
+        String label,
+        String displayName,
+        String version,
+        String effectiveDate,
+        String status,
+        List<String> parts) {
+
+    /** Fully-qualified version label shown to users and stored on signatures, e.g. "SEA v0.9.1". */
+    public String versionLabel() {
+        return label + " v" + version;
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentRegistry.java b/app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentRegistry.java
new file mode 100644
index 0000000000..ffbe030863
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/legal/LegalDocumentRegistry.java
@@ -0,0 +1,151 @@
+package stirling.software.saas.legal;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+import org.springframework.core.io.ClassPathResource;
+import org.springframework.stereotype.Service;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+
+import jakarta.annotation.PostConstruct;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * Loads the versioned legal-document registry from {@code legal/manifest.json} on startup and
+ * serves document metadata + rendered markdown from the classpath.
+ *
+ * <p>Publishing a new version of any document is a content-only change: drop the markdown under
+ * {@code legal/<id>/<newVersion>/} and bump that document's {@code version} in the manifest — no
+ * code change. Signatures pin the exact {@code {id, version, contentHash}} they were signed against
+ * (see the procurement agreement flow), so historical documents stay reproducible.
+ *
+ * <p>Token slots of the form <code>{{name}}</code> in the markdown are filled at render time. This
+ * registry fills the document-level common tokens ({@code version}, {@code version_date}, {@code
+ * subprocessor_url}, {@code eula_url}); callers that need per-quote tokens (the enterprise
+ * agreement's Order Form) fill the rest.
+ */
+@Slf4j
+@Service
+public class LegalDocumentRegistry {
+
+    private static final String MANIFEST = "legal/manifest.json";
+    private static final Pattern TOKEN = Pattern.compile("\\{\\{\\s*([a-zA-Z0-9_]+)\\s*}}");
+
+    private final ObjectMapper objectMapper = new ObjectMapper();
+
+    private final Map<String, LegalDocumentMeta> documents = new LinkedHashMap<>();
+    private String subprocessorUrl = "";
+    private String eulaUrl = "";
+
+    @PostConstruct
+    void load() throws IOException {
+        JsonNode root;
+        try (InputStream in = new ClassPathResource(MANIFEST).getInputStream()) {
+            root = objectMapper.readTree(in);
+        }
+        subprocessorUrl = root.path("subprocessorUrl").asText("");
+        eulaUrl = root.path("eulaUrl").asText("");
+        JsonNode docs = root.path("documents");
+        docs.fieldNames()
+                .forEachRemaining(
+                        id -> {
+                            JsonNode d = docs.get(id);
+                            List<String> parts =
+                                    objectMapper.convertValue(
+                                            d.path("parts"),
+                                            objectMapper
+                                                    .getTypeFactory()
+                                                    .constructCollectionType(
+                                                            List.class, String.class));
+                            documents.put(
+                                    id,
+                                    new LegalDocumentMeta(
+                                            id,
+                                            d.path("label").asText(id),
+                                            d.path("displayName").asText(id),
+                                            d.path("version").asText("0"),
+                                            d.path("effectiveDate").asText(""),
+                                            d.path("status").asText("draft"),
+                                            parts == null ? List.of() : parts));
+                        });
+        log.info("[legal] loaded {} document(s) from {}", documents.size(), MANIFEST);
+    }
+
+    public Optional<LegalDocumentMeta> meta(String docId) {
+        return Optional.ofNullable(documents.get(docId));
+    }
+
+    public String subprocessorUrl() {
+        return subprocessorUrl;
+    }
+
+    public String eulaUrl() {
+        return eulaUrl;
+    }
+
+    /** Document-level tokens available to every document (before any per-quote tokens). */
+    public Map<String, String> commonTokens(LegalDocumentMeta meta) {
+        Map<String, String> t = new LinkedHashMap<>();
+        t.put("version", meta.version());
+        t.put("version_date", meta.effectiveDate());
+        t.put("subprocessor_url", subprocessorUrl);
+        t.put("eula_url", eulaUrl);
+        return t;
+    }
+
+    /** Read one static markdown part of a document from the classpath. */
+    public String readPart(LegalDocumentMeta meta, String partFile) {
+        String path = "legal/" + meta.id() + "/" + meta.version() + "/" + partFile;
+        try (InputStream in = new ClassPathResource(path).getInputStream()) {
+            return new String(in.readAllBytes(), StandardCharsets.UTF_8);
+        } catch (IOException e) {
+            throw new IllegalStateException("Missing legal document part: " + path, e);
+        }
+    }
+
+    /**
+     * The concatenated static parts of a document (dynamic {@code @}-parts skipped), with only the
+     * common tokens filled. Use for fully-static documents (EULA, SLA, subprocessors).
+     */
+    public String staticMarkdown(String docId) {
+        LegalDocumentMeta meta =
+                meta(docId)
+                        .orElseThrow(
+                                () -> new IllegalArgumentException("Unknown document: " + docId));
+        Map<String, String> tokens = commonTokens(meta);
+        StringBuilder sb = new StringBuilder();
+        for (String part : meta.parts()) {
+            if (part.startsWith("@")) continue; // dynamic section — not part of the static body
+            if (sb.length() > 0) sb.append("\n\n");
+            sb.append(fill(readPart(meta, part), tokens));
+        }
+        return sb.toString();
+    }
+
+    /** Replace {@code {{token}}} slots; unknown tokens are left intact so gaps are visible. */
+    public static String fill(String markdown, Map<String, String> tokens) {
+        Matcher m = TOKEN.matcher(markdown);
+        StringBuilder out = new StringBuilder();
+        while (m.find()) {
+            String key = m.group(1);
+            String value = tokens.get(key);
+            m.appendReplacement(
+                    out,
+                    value == null
+                            ? Matcher.quoteReplacement(m.group(0))
+                            : Matcher.quoteReplacement(value));
+        }
+        m.appendTail(out);
+        return out.toString();
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/payg/bundle/PrepaidBundle.java b/app/saas/src/main/java/stirling/software/saas/payg/bundle/PrepaidBundle.java
index e2dff403a7..f864bf4d98 100644
--- a/app/saas/src/main/java/stirling/software/saas/payg/bundle/PrepaidBundle.java
+++ b/app/saas/src/main/java/stirling/software/saas/payg/bundle/PrepaidBundle.java
@@ -34,17 +34,22 @@ import lombok.Setter;
 @Entity
 @Table(
         name = "payg_prepaid_bundle",
-        // Declared here for ddl-auto (fresh schemas) and to document intent. The authoritative creator
-        // in production is the Supabase CLI migration 20260720000000_payg_prepaid_bundle, which builds
+        // Declared here for ddl-auto (fresh schemas) and to document intent. The authoritative
+        // creator
+        // in production is the Supabase CLI migration 20260720000000_payg_prepaid_bundle, which
+        // builds
         // the partial forms (WHERE units_remaining > 0 / WHERE stripe_ref IS NOT NULL). Flyway was
         // retired for SaaS (#7100), so there is no migration twin — names match the CLI migration.
         indexes = {
-            // Hot-path FIFO draw lookup — findDrawableForUpdate runs a locked read on every billable
-            // charge past the free grant; without it that degrades to a locked scan as the table grows.
+            // Hot-path FIFO draw lookup — findDrawableForUpdate runs a locked read on every
+            // billable
+            // charge past the free grant; without it that degrades to a locked scan as the table
+            // grows.
             @Index(
                     name = "idx_payg_prepaid_bundle_team_expiry",
                     columnList = "team_id, expires_at"),
-            // One pool per Stripe payment — the idempotency guard so a redelivered invoice.paid can't
+            // One pool per Stripe payment — the idempotency guard so a redelivered invoice.paid
+            // can't
             // credit the same purchase twice.
             @Index(
                     name = "uq_payg_prepaid_bundle_stripe_ref",
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/api/ProcurementController.java b/app/saas/src/main/java/stirling/software/saas/procurement/api/ProcurementController.java
index d67a0fddbf..1c495b3afd 100644
--- a/app/saas/src/main/java/stirling/software/saas/procurement/api/ProcurementController.java
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/api/ProcurementController.java
@@ -22,6 +22,8 @@ import com.fasterxml.jackson.databind.ObjectMapper;
 
 import io.swagger.v3.oas.annotations.Hidden;
 
+import jakarta.servlet.http.HttpServletRequest;
+
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.enumeration.TeamRole;
@@ -30,6 +32,8 @@ import stirling.software.proprietary.security.database.repository.UserRepository
 import stirling.software.proprietary.security.model.User;
 import stirling.software.proprietary.security.repository.TeamMembershipRepository;
 import stirling.software.saas.procurement.config.ProcurementConfigurationProperties;
+import stirling.software.saas.procurement.legal.AgreementSigning;
+import stirling.software.saas.procurement.model.ProcurementAgreementSignature;
 import stirling.software.saas.procurement.model.ProcurementDeal;
 import stirling.software.saas.procurement.model.ProcurementQuote;
 import stirling.software.saas.procurement.model.QuoteDetails;
@@ -178,7 +182,17 @@ public class ProcurementController {
             String taxId) {}
 
     /** Trial setup captured before the trial starts: deployment target + seat count. */
-    public record StartTrialRequest(String deployment, int users) {}
+    /**
+     * Setup step 2 collects the buying entity; all of it is optional so an older client still
+     * starts.
+     */
+    public record StartTrialRequest(
+            String deployment,
+            int users,
+            String businessName,
+            String contactName,
+            String contactEmail,
+            String inviteEmails) {}
 
     public record SnapshotResponse(
             Long dealId,
@@ -190,8 +204,33 @@ public class ProcurementController {
             int trialExtensionsUsed,
             boolean licensed,
             String licenseKey,
+            // Version label of the signed agreement PDF available for download, else null.
+            String agreementSignedVersion,
+            // Buying entity captured at trial setup; null on deals started before that step.
+            String businessName,
+            String contactName,
+            String contactEmail,
             QuoteResponse latestQuote) {}
 
+    /** The filled agreement for review: registry metadata + the rendered markdown body. */
+    public record AgreementDocumentResponse(
+            String docId,
+            String version,
+            String versionLabel,
+            String displayName,
+            String effectiveDate,
+            String status,
+            String markdown) {}
+
+    /** Buyer-supplied signing inputs from the agreement stage. */
+    public record SignAgreementRequest(
+            String customerLegalName,
+            String signatoryName,
+            String signatoryTitle,
+            boolean authorityConfirmed) {}
+
+    public record SignAgreementResponse(Long signatureId, String versionLabel, boolean pdfStored) {}
+
     // ---- endpoints ----------------------------------------------------------
 
     /**
@@ -213,7 +252,8 @@ public class ProcurementController {
     }
 
     private static final SnapshotResponse EMPTY_SNAPSHOT =
-            new SnapshotResponse(null, null, null, 0, null, null, 0, false, null, null);
+            new SnapshotResponse(
+                    null, null, null, 0, null, null, 0, false, null, null, null, null, null, null);
 
     /**
      * Download the offline / air-gapped licence file (.lic) for the team — available for an
@@ -239,6 +279,15 @@ public class ProcurementController {
                 .orElseGet(() -> ResponseEntity.notFound().build());
     }
 
+    /** Mark the account as looking at enterprise. Idempotent; never disturbs an existing deal. */
+    @PostMapping("/interest")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<SnapshotResponse> recordInterest(Authentication auth) {
+        Long teamId = requireLeader(auth);
+        if (teamId == null) return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        return ResponseEntity.ok(toSnapshot(procurement.recordInterest(teamId), true));
+    }
+
     @PostMapping("/trial/start")
     @PreAuthorize("isAuthenticated()")
     public ResponseEntity<SnapshotResponse> startTrial(
@@ -248,8 +297,30 @@ public class ProcurementController {
         // Body is optional so an older client (no setup step) still starts a cloud trial.
         String deployment = request != null ? request.deployment() : null;
         int seats = request != null ? request.users() : 0;
-        return ResponseEntity.ok(
-                toSnapshot(procurement.startTrial(teamId, deployment, seats), true));
+        ProcurementDeal deal;
+        try {
+            deal =
+                    procurement.startTrial(
+                            teamId,
+                            deployment,
+                            seats,
+                            request != null ? request.businessName() : null,
+                            request != null ? request.contactName() : null,
+                            request != null ? request.contactEmail() : null,
+                            request != null ? request.inviteEmails() : null);
+        } catch (IllegalStateException e) {
+            // Past the trial the deal holds a committed licence; restarting would replace it.
+            log.warn("[procurement] trial start rejected team={}: {}", teamId, e.getMessage());
+            return ResponseEntity.status(HttpStatus.CONFLICT).build();
+        }
+        // After the trial exists, so a rejected invite can never stop it starting.
+        if (request != null) {
+            procurement.sendTrialInvites(
+                    teamId,
+                    primaryMembership(auth).map(TeamMembership::getUser).orElse(null),
+                    request.inviteEmails());
+        }
+        return ResponseEntity.ok(toSnapshot(deal, true));
     }
 
     @PostMapping("/trial/extend")
@@ -270,8 +341,17 @@ public class ProcurementController {
             @RequestBody QuoteRequest request, Authentication auth) {
         Long teamId = requireLeader(auth);
         if (teamId == null) return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
-        return ResponseEntity.ok(
-                toQuote(procurement.buildQuote(teamId, request.toConfig(), request.toDetails())));
+        try {
+            return ResponseEntity.ok(
+                    toQuote(
+                            procurement.buildQuote(
+                                    teamId, request.toConfig(), request.toDetails())));
+        } catch (IllegalStateException e) {
+            // Below the minimum deal size, or the deal is already live. A client error, not a
+            // fault.
+            log.warn("[procurement] quote rejected team={}: {}", teamId, e.getMessage());
+            return ResponseEntity.status(HttpStatus.CONFLICT).build();
+        }
     }
 
     // Issue + accept are Supabase edge functions (they own Stripe): issue-procurement-quote turns a
@@ -293,6 +373,111 @@ public class ProcurementController {
         }
     }
 
+    /**
+     * The filled Stirling Enterprise Agreement (MSA + Order Form + DPA) for the team's current
+     * quote, as markdown, for the buyer to review before signing. 404 when there's no quote yet.
+     */
+    @GetMapping("/agreement/document")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<AgreementDocumentResponse> agreementDocument(Authentication auth) {
+        Long teamId = requireLeader(auth);
+        if (teamId == null) return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        return procurement
+                .agreementDocument(teamId)
+                .<ResponseEntity<AgreementDocumentResponse>>map(
+                        a ->
+                                ResponseEntity.ok(
+                                        new AgreementDocumentResponse(
+                                                a.docId(),
+                                                a.version(),
+                                                a.versionLabel(),
+                                                a.displayName(),
+                                                a.effectiveDate(),
+                                                a.status(),
+                                                a.markdown())))
+                .orElseGet(() -> ResponseEntity.notFound().build());
+    }
+
+    /**
+     * Record a signed agreement: capture the typed legal name / signatory / title / authority, pin
+     * the exact document version + content hash + variable snapshot, and store the rendered PDF
+     * (best-effort). The caller then proceeds to accept the quote as before.
+     */
+    @PostMapping("/agreement/sign")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<SignAgreementResponse> signAgreement(
+            @RequestBody SignAgreementRequest request,
+            Authentication auth,
+            HttpServletRequest http) {
+        Long teamId = requireLeader(auth);
+        if (teamId == null) return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        if (request == null
+                || request.signatoryName() == null
+                || request.signatoryName().isBlank()
+                || !request.authorityConfirmed()) {
+            return ResponseEntity.badRequest().build();
+        }
+        try {
+            ProcurementAgreementSignature sig =
+                    procurement.signAgreement(
+                            teamId,
+                            new AgreementSigning(
+                                    request.customerLegalName(),
+                                    request.signatoryName(),
+                                    request.signatoryTitle(),
+                                    request.authorityConfirmed()),
+                            clientIp(http));
+            return ResponseEntity.ok(
+                    new SignAgreementResponse(
+                            sig.getSignatureId(), sig.getDocumentLabel(), sig.getPdf() != null));
+        } catch (IllegalStateException e) {
+            return ResponseEntity.status(HttpStatus.CONFLICT).build();
+        }
+    }
+
+    /** Download the stored signed-agreement PDF for the team. 404 if none was rendered/stored. */
+    @GetMapping("/agreement/signature/pdf")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<byte[]> signaturePdf(Authentication auth) {
+        Long teamId = requireLeader(auth);
+        if (teamId == null) return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        return procurement
+                .signedAgreementPdf(teamId)
+                .<ResponseEntity<byte[]>>map(
+                        pdf ->
+                                ResponseEntity.ok()
+                                        .header(
+                                                HttpHeaders.CONTENT_DISPOSITION,
+                                                "attachment;"
+                                                        + " filename=\"stirling-enterprise-agreement.pdf\"")
+                                        .contentType(MediaType.APPLICATION_PDF)
+                                        .body(pdf))
+                .orElseGet(() -> ResponseEntity.notFound().build());
+    }
+
+    /**
+     * Download the current (unsigned) agreement as a PDF — the document shown at the sign step. 404
+     * when there's no quote yet or the render runtime is unavailable.
+     */
+    @GetMapping("/agreement/document/pdf")
+    @PreAuthorize("isAuthenticated()")
+    public ResponseEntity<byte[]> agreementDocumentPdf(Authentication auth) {
+        Long teamId = requireLeader(auth);
+        if (teamId == null) return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        return procurement
+                .agreementDocumentPdf(teamId)
+                .<ResponseEntity<byte[]>>map(
+                        pdf ->
+                                ResponseEntity.ok()
+                                        .header(
+                                                HttpHeaders.CONTENT_DISPOSITION,
+                                                "attachment;"
+                                                        + " filename=\"stirling-enterprise-agreement.pdf\"")
+                                        .contentType(MediaType.APPLICATION_PDF)
+                                        .body(pdf))
+                .orElseGet(() -> ResponseEntity.notFound().build());
+    }
+
     /**
      * Provision on accept: upgrade the team's licence to the committed annual term, valid
      * immediately. Called server-side by the accept edge function (ROLE_ADMIN via X-API-Key) once
@@ -311,9 +496,38 @@ public class ProcurementController {
         }
     }
 
+    /**
+     * Go live once payment settles: advance the deal to active and re-affirm the annual licence.
+     * Called server-side by the {@code invoice.paid} webhook (ROLE_ADMIN via X-API-Key), alongside
+     * {@code /provision}, which runs earlier at accept and deliberately leaves the stage alone.
+     *
+     * <p>Answers 200 when the team has no deal at all, rather than erroring: a committed
+     * subscription can be closed directly in Stripe by sales with no portal deal behind it, and a
+     * non-2xx would have Stripe retry a webhook that can never succeed.
+     *
+     * <p>{@code invoiceId} is what makes this idempotent without swallowing renewals: the same
+     * invoice twice is a redelivery, a different one is next year's payment and has to re-issue the
+     * licence. Optional so an older caller still works, at the cost of that distinction.
+     */
+    @PostMapping("/activate")
+    @PreAuthorize("hasRole('ADMIN')")
+    public ResponseEntity<Void> activate(
+            @RequestParam("teamId") long teamId,
+            @RequestParam(value = "invoiceId", required = false) String invoiceId) {
+        try {
+            procurement.markLive(teamId, invoiceId);
+        } catch (IllegalStateException e) {
+            log.info(
+                    "[procurement] activate skipped, no deal for team={}: {}",
+                    teamId,
+                    e.getMessage());
+        }
+        return ResponseEntity.ok().build();
+    }
+
     /**
      * Demo/manual stand-in for the {@code invoice.paid} webhook: mark the deal live (issue the
-     * annual licence, advance to active). The real go-live is webhook-driven once payment settles.
+     * annual licence, advance to active). Production go-live runs through {@code /activate}.
      */
     @PostMapping("/go-live")
     @PreAuthorize("isAuthenticated()")
@@ -360,6 +574,21 @@ public class ProcurementController {
                 .orElse(null);
     }
 
+    /**
+     * Best-effort client IP for the signature record: first X-Forwarded-For hop, else the peer.
+     *
+     * <p>Informational only. That header is client-set, so {@code signer_ip} is spoofable and is
+     * not evidence of where a signature came from — the document hash and version are what make the
+     * record trustworthy. Treat the address as a hint, never as proof.
+     */
+    private static String clientIp(HttpServletRequest request) {
+        String forwarded = request.getHeader("X-Forwarded-For");
+        if (forwarded != null && !forwarded.isBlank()) {
+            return forwarded.split(",")[0].trim();
+        }
+        return request.getRemoteAddr();
+    }
+
     /**
      * Build the snapshot for a deal. {@code includeLicenseKey} is true only for the team leader; a
      * member sees {@code licensed} but not the key itself (see {@link #snapshot}). Mutation
@@ -381,6 +610,10 @@ public class ProcurementController {
                 deal.getTrialExtensionsUsed(),
                 deal.getLicenseRef() != null,
                 includeLicenseKey ? deal.getLicenseRef() : null,
+                procurement.signedAgreementLabel(deal.getDealId()).orElse(null),
+                deal.getBusinessName(),
+                deal.getContactName(),
+                deal.getContactEmail(),
                 latest);
     }
 
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/config/ProcurementConfigurationProperties.java b/app/saas/src/main/java/stirling/software/saas/procurement/config/ProcurementConfigurationProperties.java
index 98ec0cd573..ad745cf5bc 100644
--- a/app/saas/src/main/java/stirling/software/saas/procurement/config/ProcurementConfigurationProperties.java
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/config/ProcurementConfigurationProperties.java
@@ -30,4 +30,17 @@ public class ProcurementConfigurationProperties {
      * /go-live is a stand-in for the invoice.paid webhook and would let a leader activate unpaid.
      */
     private boolean demoControlsEnabled = false;
+
+    /**
+     * Smallest annual fee, in minor units, that may be quoted. The pricing curve has no natural
+     * floor — a small enough committed volume rounds the meter to zero — and every registered user
+     * is the leader of their own team, so without this any signup could price a $0 enterprise
+     * quote, accept it, and be provisioned a committed licence. 12_000_00 is USD 12,000/yr, the
+     * self-hosted deploy fee, chosen so the floor cannot sit below a line item the quote itself can
+     * contain.
+     *
+     * <p>This is a commercial number, not a technical one: set it to whatever the smallest
+     * enterprise deal you will actually sign is. Zero disables the check.
+     */
+    private long minAnnualNetMinor = 12_000_00L;
 }
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementAssembler.java b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementAssembler.java
new file mode 100644
index 0000000000..c641f2e596
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementAssembler.java
@@ -0,0 +1,278 @@
+package stirling.software.saas.procurement.legal;
+
+import java.time.LocalDate;
+import java.time.format.DateTimeFormatter;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+import org.springframework.stereotype.Service;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.saas.legal.LegalDocumentMeta;
+import stirling.software.saas.legal.LegalDocumentRegistry;
+import stirling.software.saas.procurement.model.ProcurementQuote;
+import stirling.software.saas.procurement.pricing.ProcurementPricingService;
+import stirling.software.saas.procurement.pricing.QuoteConfig;
+import stirling.software.saas.procurement.pricing.QuoteLineItem;
+
+/**
+ * Builds the full Stirling Enterprise Agreement for a specific quote: the static MSA (Part A) and
+ * DPA (Part C) from the {@link LegalDocumentRegistry}, with the dynamic Order Form (Part B)
+ * generated from the quote and slotted where the manifest's {@code @order-form} part sits.
+ *
+ * <p>Only the Order Form varies per deal; the MSA and DPA bodies are rendered verbatim with token
+ * substitution. The set of values used is returned as {@code variablesJson} so a signature can pin
+ * exactly what was rendered.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class AgreementAssembler {
+
+    public static final String DOC_ID = "enterprise-agreement";
+
+    private static final DateTimeFormatter DATE =
+            DateTimeFormatter.ofPattern("MMMM d, yyyy", Locale.US);
+    private static final String BLANK = "\\_\\_\\_\\_\\_\\_\\_\\_\\_\\_";
+
+    private final LegalDocumentRegistry registry;
+    private final ProcurementPricingService pricing;
+    private final ObjectMapper objectMapper = new ObjectMapper();
+
+    /**
+     * Render the agreement for a quote. {@code signing} is null for a preview (before signing) —
+     * the effective date and signature block then read as blanks / "On signature".
+     */
+    public AssembledAgreement assemble(ProcurementQuote quote, AgreementSigning signing) {
+        LegalDocumentMeta meta =
+                registry.meta(DOC_ID)
+                        .orElseThrow(
+                                () ->
+                                        new IllegalStateException(
+                                                "Enterprise agreement not registered"));
+
+        Map<String, String> tokens = tokens(quote, signing, meta);
+
+        StringBuilder md = new StringBuilder();
+        for (String part : meta.parts()) {
+            if (md.length() > 0) md.append("\n\n");
+            if ("@order-form".equals(part)) {
+                md.append(LegalDocumentRegistry.fill(orderForm(quote, tokens), tokens));
+            } else {
+                md.append(LegalDocumentRegistry.fill(registry.readPart(meta, part), tokens));
+            }
+        }
+
+        String variablesJson;
+        try {
+            variablesJson = objectMapper.writeValueAsString(tokens);
+        } catch (Exception e) {
+            variablesJson = "{}";
+        }
+
+        return new AssembledAgreement(
+                meta.id(),
+                meta.version(),
+                meta.versionLabel(),
+                meta.displayName(),
+                meta.effectiveDate(),
+                meta.status(),
+                md.toString(),
+                variablesJson);
+    }
+
+    private Map<String, String> tokens(
+            ProcurementQuote quote, AgreementSigning signing, LegalDocumentMeta meta) {
+        QuoteConfig cfg = toConfig(quote);
+        boolean signed = signing != null;
+
+        String legalName =
+                signed && notBlank(signing.customerLegalName())
+                        ? signing.customerLegalName().trim()
+                        : (notBlank(quote.getBusinessName())
+                                ? quote.getBusinessName().trim()
+                                : "Customer");
+
+        Map<String, String> t = new LinkedHashMap<>(registry.commonTokens(meta));
+        t.put("effective_date", signed ? LocalDate.now().format(DATE) : "On signature");
+        t.put("customer_legal_name", cell(legalName));
+        t.put("quote_ref", nz(quote.getQuoteNumber()));
+        t.put("deployment", ProcurementPricingService.deploymentName(quote.getDeployment()));
+        t.put("committed_pdfs_yr", String.format(Locale.US, "%,d", Math.max(0, quote.getVolume())));
+        t.put("posture", ProcurementPricingService.postureName(quote.getIntensity()));
+        t.put("processes_per_pdf", String.valueOf(Math.max(1, quote.getIntensity())));
+        t.put("rate_per_pdf", String.format(Locale.US, "$%.4f", pricing.effectiveRatePerPdf(cfg)));
+        t.put("term_years", String.valueOf(quote.getTermYears()));
+        t.put("term_discount_pct", pricing.termDiscountPct(quote.getTermYears()) + "%");
+        t.put("sla_tier", slaTier(quote.getServiceLevel()));
+        t.put("annual_fee_y1", money(quote.getAnnualNetMinor()));
+        t.put("contract_total", money(quote.getTcvMinor()));
+        t.put("elected_or_not", quote.isIndemnification() ? "Elected" : "Not elected");
+        t.put("po_number", notBlank(quote.getPoNumber()) ? cell(quote.getPoNumber()) : "—");
+        t.put(
+                "customer_signatory",
+                signed && notBlank(signing.signatoryName())
+                        ? cell(signing.signatoryName())
+                        : BLANK);
+        t.put(
+                "customer_signatory_title",
+                signed && notBlank(signing.signatoryTitle())
+                        ? cell(signing.signatoryTitle())
+                        : BLANK);
+        return t;
+    }
+
+    /**
+     * Make a buyer-supplied value safe to slot into a markdown table cell.
+     *
+     * <p>An unescaped {@code |} or newline splits the cell and breaks the Order Form's table. That
+     * matters beyond appearance: this markdown is what gets hashed into the signature record, so a
+     * value that restructures the table means the SHA-256 we keep as proof covers a document
+     * reading differently from the one the signatory saw.
+     */
+    private static String cell(String raw) {
+        return raw.trim().replace("|", "\\|").replaceAll("\\s*\\R+\\s*", " ");
+    }
+
+    /** Part B — the Order Form. Generated from the quote; the only per-deal section. */
+    private String orderForm(ProcurementQuote quote, Map<String, String> t) {
+        String date = t.get("effective_date");
+        String signatory = t.get("customer_signatory");
+        String signatoryTitle = t.get("customer_signatory_title");
+
+        StringBuilder sb = new StringBuilder();
+        sb.append("## Part B — Order Form · {{quote_ref}}\n\n");
+        sb.append("| Term | Value |\n| --- | --- |\n");
+        row(sb, "Customer", "{{customer_legal_name}}");
+        row(sb, "Subscription", "Enterprise · {{deployment}}");
+        row(sb, "Purchase order", "{{po_number}}");
+        row(sb, "Committed Volume", "{{committed_pdfs_yr}} PDFs / year at the {{posture}} posture");
+        row(sb, "Committed rate", "{{rate_per_pdf}} per PDF");
+        row(sb, "Service level", "{{sla_tier}} (per SLA Exhibit)");
+        row(
+                sb,
+                "Term",
+                "{{term_years}} year(s) · term discount {{term_discount_pct}} on committed processing");
+        row(sb, "Itemized services", itemizedServices(quote));
+        row(sb, "Annual Fee (year 1)", "{{annual_fee_y1}}");
+        row(sb, "Total (paid in advance)", "{{contract_total}}");
+        row(sb, "Escalator", "+3% at each anniversary during the Term");
+        row(
+                sb,
+                "Payment",
+                "Full {{term_years}}-year term invoiced in advance on acceptance · net 30 · ACH,"
+                        + " wire, or check");
+        row(sb, "Overage", "Committed rate, billed quarterly in arrears");
+        row(
+                sb,
+                "Data schedule",
+                "First 25 MB per file included; each additional 25 MB or part thereof (decimal MB,"
+                        + " rounded up per file, measured once at ingestion) draws down 1 PDF Process."
+                        + " Frozen for the Term (MSA §3.5).");
+        row(
+                sb,
+                "Drawdown schedule",
+                "{{posture}}: {{processes_per_pdf}} PDF Processes per PDF (MSA §3.3, frozen for the Term)");
+        row(
+                sb,
+                "Enhanced IP Protection",
+                "{{elected_or_not}} — extends §7.3 to patent claims at the §8.2 super-cap");
+        row(sb, "Standard terms", "SSO, SCIM, RBAC, and audit logs included.");
+
+        sb.append(
+                "\n**Itemized services menu (include as elected):** Self-hosted deployment $12,000/yr"
+                        + " · Air-gapped deployment $36,000/yr · Dedicated SE/CSM $30,000/yr · Enhanced IP"
+                        + " Protection (patent coverage, Section 7.3) 5% of committed processing fees ·"
+                        + " Onboarding & training $7,500 one-time · Quarterly business reviews $8,000/yr."
+                        + " Baseline IP indemnification (copyright, trademark, trade secret) is included at"
+                        + " no charge.\n\n");
+        sb.append(
+                "**Signatures.** By signing, each signatory represents they have authority to bind"
+                        + " their Party. Signatures delivered electronically or in counterparts are"
+                        + " effective as originals.\n\n");
+        sb.append("| Provider | Customer |\n| --- | --- |\n");
+        sb.append("| Stirling PDF, Inc. | {{customer_legal_name}} |\n");
+        sb.append("| Name: Matt Joseph | Name: ").append(signatory).append(" |\n");
+        sb.append("| Title: CEO | Title: ").append(signatoryTitle).append(" |\n");
+        sb.append("| Date: ").append(date).append(" | Date: ").append(date).append(" |\n");
+        return sb.toString();
+    }
+
+    /**
+     * The elected add-on lines, taken from the quote's stored breakdown (excludes the base meter).
+     */
+    private String itemizedServices(ProcurementQuote quote) {
+        List<QuoteLineItem> lines = parseLineItems(quote.getLineItemsJson());
+        List<String> elected = new ArrayList<>();
+        for (QuoteLineItem li : lines) {
+            if (li.key().equals("usage")
+                    || li.key().equals("seats")
+                    || li.key().equals("multi-year")) {
+                continue;
+            }
+            String suffix = li.kind() == QuoteLineItem.Kind.ONE_TIME ? " (one-time)" : "/yr";
+            elected.add(li.label() + " " + money(li.amountMinor()) + suffix);
+        }
+        return elected.isEmpty() ? "None elected" : String.join(" · ", elected);
+    }
+
+    private List<QuoteLineItem> parseLineItems(String json) {
+        if (json == null || json.isBlank()) return List.of();
+        try {
+            return objectMapper.readValue(
+                    json,
+                    objectMapper
+                            .getTypeFactory()
+                            .constructCollectionType(List.class, QuoteLineItem.class));
+        } catch (Exception e) {
+            log.warn("[legal] could not parse quote line items for the order form", e);
+            return List.of();
+        }
+    }
+
+    private static QuoteConfig toConfig(ProcurementQuote q) {
+        int users = q.getSeats() == null ? 0 : q.getSeats();
+        return new QuoteConfig(
+                q.getVolume(),
+                users,
+                q.getIntensity(),
+                q.getSizeMult(),
+                q.getDeployment(),
+                q.getTermYears(),
+                q.getServiceLevel(),
+                q.isIndemnification(),
+                q.isTraining(),
+                q.isQbr(),
+                q.getCurrency());
+    }
+
+    private static void row(StringBuilder sb, String term, String value) {
+        sb.append("| ").append(term).append(" | ").append(value).append(" |\n");
+    }
+
+    private static String slaTier(String serviceLevel) {
+        if ("dedicated".equalsIgnoreCase(serviceLevel)) return "Dedicated";
+        if ("priority".equalsIgnoreCase(serviceLevel)) return "Priority";
+        return "Standard";
+    }
+
+    /** Minor units (cents) → whole-dollar display; the quote figures are whole dollars. */
+    private static String money(long minor) {
+        return String.format(Locale.US, "$%,d", minor / 100L);
+    }
+
+    private static boolean notBlank(String s) {
+        return s != null && !s.isBlank();
+    }
+
+    private static String nz(String s) {
+        return s == null ? "" : s;
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementPdfRenderer.java b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementPdfRenderer.java
new file mode 100644
index 0000000000..8204df6514
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementPdfRenderer.java
@@ -0,0 +1,71 @@
+package stirling.software.saas.procurement.legal;
+
+import java.nio.charset.StandardCharsets;
+import java.util.List;
+
+import org.commonmark.Extension;
+import org.commonmark.ext.gfm.tables.TablesExtension;
+import org.commonmark.node.Node;
+import org.commonmark.parser.Parser;
+import org.commonmark.renderer.html.HtmlRenderer;
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.common.configuration.RuntimePathConfig;
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.util.CustomHtmlSanitizer;
+import stirling.software.common.util.FileToPdf;
+import stirling.software.common.util.TempFileManager;
+
+/**
+ * Renders an assembled agreement's markdown to a PDF, dogfooding Stirling's own conversion path:
+ * commonmark (markdown → HTML) then {@link FileToPdf#convertHtmlToPdf} (HTML → PDF via WeasyPrint),
+ * the same pipeline as the product's Markdown-to-PDF tool.
+ *
+ * <p>The signed PDF is a stored artifact, but it must never block signing: {@link #tryRender}
+ * returns {@code null} if the conversion runtime (WeasyPrint) is unavailable, so the signature is
+ * still recorded and the buyer keeps the on-the-fly download.
+ */
+@Service
+@RequiredArgsConstructor
+public class AgreementPdfRenderer {
+
+    private final RuntimePathConfig runtimePathConfig;
+    private final TempFileManager tempFileManager;
+    private final CustomHtmlSanitizer customHtmlSanitizer;
+    private final CustomPDFDocumentFactory pdfDocumentFactory;
+
+    private static final List<Extension> EXTENSIONS = List.of(TablesExtension.create());
+
+    /** Render to PDF, or return null if the conversion runtime isn't available. */
+    public byte[] tryRender(String markdown) {
+        try {
+            return render(markdown);
+        } catch (Exception e) {
+            org.slf4j.LoggerFactory.getLogger(AgreementPdfRenderer.class)
+                    .warn(
+                            "[legal] agreement PDF render unavailable; recording signature without a"
+                                    + " stored PDF: {}",
+                            e.getMessage());
+            return null;
+        }
+    }
+
+    private byte[] render(String markdown) throws Exception {
+        Parser parser = Parser.builder().extensions(EXTENSIONS).build();
+        Node document = parser.parse(markdown);
+        HtmlRenderer renderer = HtmlRenderer.builder().extensions(EXTENSIONS).build();
+        String html = renderer.render(document);
+
+        byte[] pdfBytes =
+                FileToPdf.convertHtmlToPdf(
+                        runtimePathConfig.getWeasyPrintPath(),
+                        null,
+                        html.getBytes(StandardCharsets.UTF_8),
+                        "agreement.html",
+                        tempFileManager,
+                        customHtmlSanitizer);
+        return pdfDocumentFactory.createNewBytesBasedOnOldDocument(pdfBytes);
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementSigning.java b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementSigning.java
new file mode 100644
index 0000000000..600ecda415
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AgreementSigning.java
@@ -0,0 +1,12 @@
+package stirling.software.saas.procurement.legal;
+
+/**
+ * The buyer-supplied inputs captured at the moment of signing the enterprise agreement: the legal
+ * entity name, the signatory's typed name and title, and their representation of authority to bind.
+ * Null when the agreement is rendered for preview (before signing).
+ */
+public record AgreementSigning(
+        String customerLegalName,
+        String signatoryName,
+        String signatoryTitle,
+        boolean authorityConfirmed) {}
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/legal/AssembledAgreement.java b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AssembledAgreement.java
new file mode 100644
index 0000000000..3e88cf555a
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/legal/AssembledAgreement.java
@@ -0,0 +1,16 @@
+package stirling.software.saas.procurement.legal;
+
+/**
+ * A rendered enterprise agreement: the full markdown the buyer sees (MSA + Order Form + DPA, tokens
+ * filled), plus the registry metadata that pins it. {@code variablesJson} is the exact set of
+ * Order-Form values as rendered, stored alongside a signature so the document is reproducible.
+ */
+public record AssembledAgreement(
+        String docId,
+        String version,
+        String versionLabel,
+        String displayName,
+        String effectiveDate,
+        String status,
+        String markdown,
+        String variablesJson) {}
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementAgreementSignature.java b/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementAgreementSignature.java
new file mode 100644
index 0000000000..425b100ba9
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementAgreementSignature.java
@@ -0,0 +1,86 @@
+package stirling.software.saas.procurement.model;
+
+import java.io.Serializable;
+import java.time.LocalDateTime;
+
+import org.hibernate.annotations.CreationTimestamp;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.GeneratedValue;
+import jakarta.persistence.GenerationType;
+import jakarta.persistence.Id;
+import jakarta.persistence.Table;
+
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+
+/**
+ * An immutable record of a signed enterprise agreement. Each signature pins the exact legal
+ * document it was signed against — {@code documentId} + {@code documentVersion} + a SHA-256 {@code
+ * contentHash} of the rendered markdown — plus the Order-Form variable snapshot and the typed
+ * signatory details, so the agreement stays reproducible even after the templates version up. The
+ * rendered PDF is stored when the conversion runtime is available.
+ */
+@Entity
+@Table(name = "procurement_agreement_signature")
+@NoArgsConstructor
+@Getter
+@Setter
+public class ProcurementAgreementSignature implements Serializable {
+
+    private static final long serialVersionUID = 1L;
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    @Column(name = "signature_id")
+    private Long signatureId;
+
+    @Column(name = "deal_id", nullable = false)
+    private Long dealId;
+
+    @Column(name = "quote_id", nullable = false)
+    private Long quoteId;
+
+    // Which legal document, and which version of it, was signed.
+    @Column(name = "document_id", nullable = false, length = 64)
+    private String documentId;
+
+    @Column(name = "document_version", nullable = false, length = 32)
+    private String documentVersion;
+
+    @Column(name = "document_label", length = 64)
+    private String documentLabel;
+
+    // SHA-256 (hex) of the exact rendered agreement markdown the buyer accepted.
+    @Column(name = "content_hash", nullable = false, length = 64)
+    private String contentHash;
+
+    // The Order-Form variable values as rendered, so the document can be reproduced.
+    @Column(name = "variables_json", columnDefinition = "text")
+    private String variablesJson;
+
+    @Column(name = "customer_legal_name", length = 255)
+    private String customerLegalName;
+
+    @Column(name = "signatory_name", nullable = false, length = 255)
+    private String signatoryName;
+
+    @Column(name = "signatory_title", length = 255)
+    private String signatoryTitle;
+
+    @Column(name = "authority_confirmed", nullable = false)
+    private boolean authorityConfirmed;
+
+    @Column(name = "signer_ip", length = 64)
+    private String signerIp;
+
+    // The rendered PDF artifact; null when the conversion runtime was unavailable at signing.
+    @Column(name = "pdf")
+    private byte[] pdf;
+
+    @CreationTimestamp
+    @Column(name = "signed_at", nullable = false, updatable = false)
+    private LocalDateTime signedAt;
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementDeal.java b/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementDeal.java
index 3a5d3db902..f0db2fb6db 100644
--- a/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementDeal.java
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementDeal.java
@@ -34,6 +34,13 @@ public class ProcurementDeal implements Serializable {
 
     private static final long serialVersionUID = 1L;
 
+    /**
+     * Interest, before any commitment: the account asked about enterprise but has not started a
+     * trial. Kept as a real stage so intent survives a refresh, so the enterprise surface is only
+     * shown to accounts that asked for it, and so drop-off at the cheapest step is measurable.
+     */
+    public static final String STAGE_EXPLORING = "exploring";
+
     public static final String STAGE_TRIAL = "trial";
     public static final String STAGE_QUOTE = "quote";
     public static final String STAGE_AGREEMENT = "security";
@@ -69,12 +76,38 @@ public class ProcurementDeal implements Serializable {
     @Column(name = "trial_extensions_used", nullable = false)
     private int trialExtensionsUsed;
 
+    // Captured at trial setup, so the buying entity is known before any quote exists — the quote's
+    // own copies seed from these and may then diverge (a deal can change hands mid-cycle).
+    // Nullable: trials started before this step, and older clients, supply none.
+    @Column(name = "business_name", length = 255)
+    private String businessName;
+
+    @Column(name = "contact_name", length = 255)
+    private String contactName;
+
+    @Column(name = "contact_email", length = 320)
+    private String contactEmail;
+
+    // Addresses the buyer named at setup. Kept as the record of what was asked for; the invitations
+    // themselves go out through the team-invite path when the trial starts.
+    @Column(name = "invite_emails", length = 2000)
+    private String inviteEmails;
+
     @Column(name = "license_ref", length = 128)
     private String licenseRef;
 
     @Column(name = "subscription_id", length = 255)
     private String subscriptionId;
 
+    /**
+     * The last Stripe invoice whose payment was applied to this deal. Distinguishes a redelivered
+     * {@code invoice.paid} for a payment already handled from a genuine renewal, which has to
+     * re-issue: the committed licence expires term years from issue, so a renewal that doesn't
+     * re-issue leaves the licence lapsing after the customer has paid.
+     */
+    @Column(name = "last_paid_invoice_id", length = 255)
+    private String lastPaidInvoiceId;
+
     @Column(name = "accepted_quote_id")
     private Long acceptedQuoteId;
 
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementQuote.java b/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementQuote.java
index aa94128172..19e9e01004 100644
--- a/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementQuote.java
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/model/ProcurementQuote.java
@@ -47,7 +47,11 @@ public class ProcurementQuote implements Serializable {
     @Column(name = "deal_id", nullable = false)
     private Long dealId;
 
-    @Column(name = "quote_number", nullable = false, length = 64)
+    /**
+     * Stripe's quote number, the deal's one buyer-facing reference. Null until the quote is issued:
+     * Stripe assigns it at finalisation, and the issue edge function writes it back then.
+     */
+    @Column(name = "quote_number", length = 64)
     private String quoteNumber;
 
     @Column(name = "status", nullable = false, length = 24)
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/pricing/ProcurementPricingService.java b/app/saas/src/main/java/stirling/software/saas/procurement/pricing/ProcurementPricingService.java
index 08ade5a157..5d1234e9fc 100644
--- a/app/saas/src/main/java/stirling/software/saas/procurement/pricing/ProcurementPricingService.java
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/pricing/ProcurementPricingService.java
@@ -60,12 +60,7 @@ public class ProcurementPricingService {
                                 rates.discountPerDoubling()
                                         * (Math.log(runVol / (double) RUN_CURVE_KNEE) / LOG2))
                         : 0.0;
-        double rate = Math.max(rates.floorRatePerRun(), rates.listRatePerRun() * (1.0 - volDisc));
-        // File-size multiplier (D93): larger, image-heavy PDFs cost more OCR/compute/storage. Folds
-        // into the per-run rate after the floor, so it flows through the meter, TCV and renewal.
-        // QuoteConfig has already snapped it to a known tier, so a tampered request can't sneak a
-        // cheaper factor in.
-        rate *= cfg.sizeMult();
+        double rate = perRunRate(cfg, rates);
         double termDisc = rates.termDiscount(cfg.termYears());
 
         // The meter is a whole-dollar figure (the quote reads in dollars), then minor units.
@@ -160,6 +155,48 @@ public class ProcurementPricingService {
         return new QuoteBreakdown(lines, annualNet, tcv, renewalAnnual, cfg.currency());
     }
 
+    /**
+     * The per-run rate after the committed-volume curve, the half-cent floor, and the file-size
+     * multiplier — the same value {@link #price} meters against. Extracted so read-only callers
+     * (the Order Form) can quote it without re-deriving the curve.
+     */
+    private static double perRunRate(QuoteConfig cfg, PricingRates rates) {
+        long runVol = Math.max(0, cfg.volume()) * (long) Math.max(1, cfg.intensity());
+        double volDisc =
+                runVol > RUN_CURVE_KNEE
+                        ? Math.min(
+                                0.5,
+                                rates.discountPerDoubling()
+                                        * (Math.log(runVol / (double) RUN_CURVE_KNEE) / LOG2))
+                        : 0.0;
+        return Math.max(rates.floorRatePerRun(), rates.listRatePerRun() * (1.0 - volDisc))
+                * cfg.sizeMult();
+    }
+
+    /**
+     * The effective per-PDF rate at the chosen posture, in dollars (4-decimal quote figure). This
+     * is what the Order Form and quote copy speak in — never the per-run rate. Read-only; does not
+     * affect billing.
+     */
+    public double effectiveRatePerPdf(QuoteConfig cfg) {
+        return perRunRate(cfg, PricingRates.defaults()) * Math.max(1, cfg.intensity());
+    }
+
+    /** The multi-year term discount as a whole-percent figure for the Order Form (0.05 → 5). */
+    public int termDiscountPct(int termYears) {
+        return (int) Math.round(PricingRates.defaults().termDiscount(termYears) * 100.0);
+    }
+
+    /** Buyer-facing posture name (Essentials / Governed / Regulated) for the given intensity. */
+    public static String postureName(int intensity) {
+        return postureLabel(intensity);
+    }
+
+    /** Buyer-facing deployment name (Stirling Cloud / Self-hosted / Air-gapped). */
+    public static String deploymentName(String deployment) {
+        return deploymentLabel(deployment);
+    }
+
     /** The default CPI escalator (fraction) applied to the annual fee on each post-term renewal. */
     public double cpiEscalator() {
         return PricingRates.defaults().cpiEscalator();
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/repository/ProcurementAgreementSignatureRepository.java b/app/saas/src/main/java/stirling/software/saas/procurement/repository/ProcurementAgreementSignatureRepository.java
new file mode 100644
index 0000000000..419189617e
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/repository/ProcurementAgreementSignatureRepository.java
@@ -0,0 +1,29 @@
+package stirling.software.saas.procurement.repository;
+
+import java.util.List;
+import java.util.Optional;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.data.jpa.repository.Query;
+import org.springframework.data.repository.query.Param;
+
+import stirling.software.saas.procurement.model.ProcurementAgreementSignature;
+
+public interface ProcurementAgreementSignatureRepository
+        extends JpaRepository<ProcurementAgreementSignature, Long> {
+
+    Optional<ProcurementAgreementSignature> findFirstByDealIdOrderBySignedAtDesc(Long dealId);
+
+    Optional<ProcurementAgreementSignature> findFirstByQuoteIdOrderBySignedAtDesc(Long quoteId);
+
+    /**
+     * Version labels of a deal's signatures, newest first. Projects just the label column so the
+     * frequently-polled snapshot never loads the PDF bytes. A signature means the agreement is
+     * signed; the PDF is resolved (stored or re-rendered) at download time.
+     */
+    @Query(
+            "SELECT s.documentLabel FROM ProcurementAgreementSignature s"
+                    + " WHERE s.dealId = :dealId"
+                    + " ORDER BY s.signedAt DESC")
+    List<String> findSignedLabels(@Param("dealId") Long dealId);
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/procurement/service/ProcurementService.java b/app/saas/src/main/java/stirling/software/saas/procurement/service/ProcurementService.java
index cae1cf36fb..a739e538b2 100644
--- a/app/saas/src/main/java/stirling/software/saas/procurement/service/ProcurementService.java
+++ b/app/saas/src/main/java/stirling/software/saas/procurement/service/ProcurementService.java
@@ -5,7 +5,6 @@ import java.time.LocalDateTime;
 import java.util.List;
 import java.util.Locale;
 import java.util.Optional;
-import java.util.UUID;
 
 import org.springframework.context.annotation.Profile;
 import org.springframework.stereotype.Service;
@@ -20,16 +19,24 @@ import stirling.software.common.model.enumeration.TeamRole;
 import stirling.software.proprietary.model.TeamMembership;
 import stirling.software.proprietary.security.repository.TeamMembershipRepository;
 import stirling.software.saas.procurement.config.ProcurementConfigurationProperties;
+import stirling.software.saas.procurement.legal.AgreementAssembler;
+import stirling.software.saas.procurement.legal.AgreementPdfRenderer;
+import stirling.software.saas.procurement.legal.AgreementSigning;
+import stirling.software.saas.procurement.legal.AssembledAgreement;
 import stirling.software.saas.procurement.license.EnterpriseLicenseService;
 import stirling.software.saas.procurement.license.LicenseEntitlements;
+import stirling.software.saas.procurement.model.ProcurementAgreementSignature;
 import stirling.software.saas.procurement.model.ProcurementDeal;
 import stirling.software.saas.procurement.model.ProcurementQuote;
 import stirling.software.saas.procurement.model.QuoteDetails;
 import stirling.software.saas.procurement.pricing.ProcurementPricingService;
 import stirling.software.saas.procurement.pricing.QuoteBreakdown;
 import stirling.software.saas.procurement.pricing.QuoteConfig;
+import stirling.software.saas.procurement.repository.ProcurementAgreementSignatureRepository;
 import stirling.software.saas.procurement.repository.ProcurementDealRepository;
 import stirling.software.saas.procurement.repository.ProcurementQuoteRepository;
+import stirling.software.saas.service.SaasTeamService;
+import stirling.software.saas.util.LogRedactionUtils;
 
 /**
  * Orchestrates a linked team's procurement journey: start a (mock-licensed) trial, build a
@@ -52,6 +59,12 @@ public class ProcurementService {
     private final EnterpriseLicenseService licenses;
     private final ProcurementConfigurationProperties config;
     private final TeamMembershipRepository memberRepo;
+    private final AgreementAssembler agreementAssembler;
+    private final AgreementPdfRenderer agreementPdfRenderer;
+    private final ProcurementAgreementSignatureRepository signatureRepo;
+    // Trial-setup invitations run through the team-invite path, with its seat, role and
+    // rate-limit rules rather than a second implementation here.
+    private final SaasTeamService teams;
 
     public ProcurementService(
             ProcurementDealRepository dealRepo,
@@ -59,13 +72,21 @@ public class ProcurementService {
             ProcurementPricingService pricing,
             EnterpriseLicenseService licenses,
             ProcurementConfigurationProperties config,
-            TeamMembershipRepository memberRepo) {
+            TeamMembershipRepository memberRepo,
+            AgreementAssembler agreementAssembler,
+            AgreementPdfRenderer agreementPdfRenderer,
+            ProcurementAgreementSignatureRepository signatureRepo,
+            SaasTeamService teams) {
         this.dealRepo = dealRepo;
         this.quoteRepo = quoteRepo;
         this.pricing = pricing;
         this.licenses = licenses;
         this.config = config;
         this.memberRepo = memberRepo;
+        this.agreementAssembler = agreementAssembler;
+        this.agreementPdfRenderer = agreementPdfRenderer;
+        this.signatureRepo = signatureRepo;
+        this.teams = teams;
     }
 
     /**
@@ -89,11 +110,45 @@ public class ProcurementService {
         return dealRepo.findByTeamId(teamId);
     }
 
+    /**
+     * Starting a trial is only legitimate before one exists, while the buyer is still exploring, or
+     * to restart within the trial itself. A null stage is a deal that has just been constructed.
+     *
+     * <p>Package-private so the policy can be tested without the service's ten dependencies. Adding
+     * a later stage here would let a leader replace a paying customer's committed licence.
+     */
+    static boolean canStartTrial(String stage) {
+        return stage == null
+                || ProcurementDeal.STAGE_EXPLORING.equals(stage)
+                || ProcurementDeal.STAGE_TRIAL.equals(stage);
+    }
+
     @Transactional(readOnly = true)
     public List<ProcurementQuote> quotesForDeal(Long dealId) {
         return quoteRepo.findByDealIdOrderByCreatedAtDesc(dealId);
     }
 
+    /**
+     * Record that the account is looking at enterprise. Creates the deal at {@code exploring} when
+     * there is none; an existing deal is returned untouched, so this can never walk a live deal
+     * backwards or restart a trial.
+     */
+    @Transactional
+    public ProcurementDeal recordInterest(Long teamId) {
+        return dealRepo.findByTeamId(teamId)
+                .orElseGet(
+                        () -> {
+                            ProcurementDeal deal = new ProcurementDeal(teamId);
+                            deal.setStage(ProcurementDeal.STAGE_EXPLORING);
+                            ProcurementDeal saved = dealRepo.save(deal);
+                            log.info(
+                                    "[procurement] interest recorded team={} deal={}",
+                                    teamId,
+                                    saved.getDealId());
+                            return saved;
+                        });
+    }
+
     /**
      * Start (or restart) the free trial for a team: issue a mock trial licence and stamp the trial
      * window on the deal. No Stripe: a no-card trial has no subscription; the entitlement is the
@@ -101,10 +156,40 @@ public class ProcurementService {
      * ({@code cloud}/{@code selfhost}/{@code airgap}) and seat count are captured here so the quote
      * builder opens seeded to their environment; both are still editable when the quote is built.
      */
-    @Transactional
     public ProcurementDeal startTrial(Long teamId, String deployment, int seats) {
+        return startTrial(teamId, deployment, seats, null, null, null, null);
+    }
+
+    /**
+     * Start (or restart) the trial, capturing the buying entity if the setup step collected it.
+     * Blank details are ignored rather than written, so a re-run without them keeps what is there.
+     *
+     * <p>Only from before the trial or during it. Past that, {@code licenseRef} points at the
+     * committed annual licence, and this method would replace it with a fresh 14-day trial key
+     * while Stripe kept billing — the same hazard {@link #extendTrial} guards against, one step
+     * worse because it re-issues rather than re-dates. It would also rewind the stage and reset the
+     * extension counter.
+     *
+     * <p>The transaction is declared here rather than on the 3-arg overload: that one only
+     * delegates, and Spring's proxy cannot intercept a self-invocation, so an annotation there does
+     * nothing for either path. This is the method the controller calls, and it reaches out to
+     * Keygen between the read and the write.
+     */
+    @Transactional
+    public ProcurementDeal startTrial(
+            Long teamId,
+            String deployment,
+            int seats,
+            String businessName,
+            String contactName,
+            String contactEmail,
+            String inviteEmails) {
         ProcurementDeal deal =
                 dealRepo.findByTeamId(teamId).orElseGet(() -> new ProcurementDeal(teamId));
+        if (!canStartTrial(deal.getStage())) {
+            throw new IllegalStateException(
+                    "Trial cannot be started from stage " + deal.getStage());
+        }
         LocalDateTime now = LocalDateTime.now();
         LocalDateTime ends = now.plusDays(config.getTrialDurationDays());
         deal.setStage(ProcurementDeal.STAGE_TRIAL);
@@ -113,6 +198,10 @@ public class ProcurementService {
         deal.setTrialStartedAt(now);
         deal.setTrialEndsAt(ends);
         deal.setTrialExtensionsUsed(0);
+        if (isNotBlank(businessName)) deal.setBusinessName(businessName.trim());
+        if (isNotBlank(contactName)) deal.setContactName(contactName.trim());
+        if (isNotBlank(contactEmail)) deal.setContactEmail(contactEmail.trim());
+        if (isNotBlank(inviteEmails)) deal.setInviteEmails(inviteEmails.trim());
         deal.setLicenseRef(licenses.issueTrialLicense(teamId, leaderEmail(teamId), ends));
         deal = dealRepo.save(deal);
         log.info(
@@ -128,6 +217,45 @@ public class ProcurementService {
     /**
      * Constrain a caller-supplied deployment to the known set; anything else falls back to cloud.
      */
+    /**
+     * Send the invitations named at trial setup. Best-effort per address: a rejection (already a
+     * member, an invitee with their own paid plan, the hourly rate limit) must not fail the trial,
+     * so each is logged and skipped rather than propagated.
+     *
+     * <p>Note the first accepted invitation converts a personal team into a shared one with
+     * unlimited seats — that is {@code inviteUserToTeam}'s own rule, and naming teammates here is
+     * the buyer asking for exactly that.
+     */
+    public void sendTrialInvites(
+            Long teamId, stirling.software.proprietary.security.model.User inviter, String emails) {
+        if (inviter == null || !isNotBlank(emails)) return;
+        for (String raw : emails.split("[,;\s]+")) {
+            String email = raw.trim();
+            if (email.isEmpty()) continue;
+            try {
+                teams.inviteUserToTeam(teamId, email, inviter);
+                // Redacted: an invitee list is third-party PII, and these logs are the one place it
+                // would otherwise be written in full. LogRedactionUtils is what the rest of the
+                // SaaS
+                // module uses for the same reason.
+                log.info(
+                        "[procurement] trial invite sent team={} to={}",
+                        teamId,
+                        LogRedactionUtils.redactEmail(email));
+            } catch (Exception e) {
+                log.warn(
+                        "[procurement] trial invite skipped team={} to={}: {}",
+                        teamId,
+                        LogRedactionUtils.redactEmail(email),
+                        e.getMessage());
+            }
+        }
+    }
+
+    private static boolean isNotBlank(String value) {
+        return value != null && !value.isBlank();
+    }
+
     private static String normalizeDeployment(String deployment) {
         if (deployment == null) return "cloud";
         String d = deployment.trim().toLowerCase(Locale.ROOT);
@@ -172,16 +300,32 @@ public class ProcurementService {
         }
         // (Re)building a quote returns the deal to the quote stage and drops any prior acceptance,
         // so a rebuild from security/payment can't leave a stale stage or accepted-quote pointer.
+        QuoteBreakdown breakdown = pricing.price(cfg);
+        // Enforced before anything is persisted, and server-side rather than in the builder: the
+        // pricing curve has no natural floor (a small enough committed volume rounds the meter to
+        // zero) and every registered user leads their own team, so without this any signup could
+        // price a $0 enterprise quote, accept it, and be provisioned a committed licence.
+        long floor = config.getMinAnnualNetMinor();
+        if (floor > 0 && breakdown.annualNetMinor() < floor) {
+            throw new IllegalStateException(
+                    "Quoted annual fee "
+                            + breakdown.annualNetMinor()
+                            + " is below the minimum enterprise deal size "
+                            + floor);
+        }
+
         deal.setStage(ProcurementDeal.STAGE_QUOTE);
         deal.setAcceptedQuoteId(null);
         deal = dealRepo.save(deal);
 
-        QuoteBreakdown breakdown = pricing.price(cfg);
-
         ProcurementQuote quote = new ProcurementQuote();
         quote.setDealId(deal.getDealId());
-        quote.setQuoteNumber(nextQuoteNumber(deal.getDealId()));
-        // Priced but not yet issued: the edge fn creates the Stripe Quote and flips this to SENT.
+        // No quote number here: the deal's one reference is Stripe's, and Stripe does not assign it
+        // until the quote is finalised. The edge fn creates the Stripe Quote, flips this to SENT,
+        // and
+        // writes the number back. Nothing displays a reference in between — the builder only shows
+        // one
+        // for an issued quote, and the agreement is not assembled until after issue.
         quote.setStatus(ProcurementQuote.STATUS_DRAFT);
         quote.setCurrency(cfg.currency());
         quote.setVolume(cfg.volume());
@@ -210,10 +354,11 @@ public class ProcurementService {
         quote.setLineItemsJson(writeLineItems(breakdown));
         quote.setValidUntil(LocalDate.now().plusDays(30));
         quote = quoteRepo.save(quote);
+        // Logged by id, not reference: a draft has no reference until Stripe issues it.
         log.info(
                 "[procurement] quote built team={} quote={} annualNet={} tcv={}",
                 teamId,
-                quote.getQuoteNumber(),
+                quote.getQuoteId(),
                 quote.getAnnualNetMinor(),
                 quote.getTcvMinor());
         return quote;
@@ -241,6 +386,164 @@ public class ProcurementService {
         return deal;
     }
 
+    /** The quote a team is currently transacting on: its accepted quote, else the most recent. */
+    @Transactional(readOnly = true)
+    public Optional<ProcurementQuote> currentQuote(Long teamId) {
+        return dealRepo.findByTeamId(teamId)
+                .flatMap(
+                        deal -> {
+                            if (deal.getAcceptedQuoteId() != null) {
+                                Optional<ProcurementQuote> accepted =
+                                        quoteRepo.findById(deal.getAcceptedQuoteId());
+                                if (accepted.isPresent()) return accepted;
+                            }
+                            return quoteRepo
+                                    .findByDealIdOrderByCreatedAtDesc(deal.getDealId())
+                                    .stream()
+                                    .findFirst();
+                        });
+    }
+
+    /**
+     * The filled enterprise agreement for a team's current quote, rendered for review (unsigned).
+     */
+    @Transactional(readOnly = true)
+    public Optional<AssembledAgreement> agreementDocument(Long teamId) {
+        return currentQuote(teamId).map(q -> agreementAssembler.assemble(q, null));
+    }
+
+    /**
+     * The current (unsigned) agreement rendered to PDF, for download at the sign step. Empty when
+     * there's no quote yet or the render runtime is unavailable. The signed PDF (with the signature
+     * block filled) is a separate artifact recorded at signing (see {@link #latestSignature}).
+     */
+    @Transactional(readOnly = true)
+    public Optional<byte[]> agreementDocumentPdf(Long teamId) {
+        return currentQuote(teamId)
+                .map(q -> agreementAssembler.assemble(q, null))
+                .map(a -> agreementPdfRenderer.tryRender(a.markdown()));
+    }
+
+    /**
+     * Record a signed enterprise agreement: assemble the final document, hash it, render + store
+     * the PDF (best-effort), and persist an immutable signature pinned to the exact document
+     * version. Does not itself accept the quote into a subscription — the caller proceeds to accept
+     * as before.
+     *
+     * <p>Deliberately not {@code @Transactional}: rendering the PDF shells out to WeasyPrint, and
+     * holding the deal's row lock across an external process buys nothing here. The only write is a
+     * single insert, which {@code save} makes atomic on its own.
+     */
+    public ProcurementAgreementSignature signAgreement(
+            Long teamId, AgreementSigning signing, String signerIp) {
+        ProcurementDeal deal =
+                dealRepo.findByTeamId(teamId)
+                        .orElseThrow(() -> new IllegalStateException("No deal for team " + teamId));
+        ProcurementQuote quote =
+                currentQuote(teamId)
+                        .orElseThrow(
+                                () ->
+                                        new IllegalStateException(
+                                                "No quote to sign for team " + teamId));
+
+        // Signing is only meaningful against an issued quote at the agreement stage. Without this a
+        // direct API call could record a signature over a draft (whose quote_ref is still empty),
+        // or
+        // re-sign a deal that has already moved on.
+        if (!ProcurementDeal.STAGE_AGREEMENT.equals(deal.getStage())) {
+            throw new IllegalStateException(
+                    "Deal is not at the agreement stage for team " + teamId);
+        }
+        if (!ProcurementQuote.STATUS_SENT.equals(quote.getStatus())) {
+            throw new IllegalStateException("Quote is not issued for team " + teamId);
+        }
+
+        AssembledAgreement assembled = agreementAssembler.assemble(quote, signing);
+
+        ProcurementAgreementSignature sig = new ProcurementAgreementSignature();
+        sig.setDealId(deal.getDealId());
+        sig.setQuoteId(quote.getQuoteId());
+        sig.setDocumentId(assembled.docId());
+        sig.setDocumentVersion(assembled.version());
+        sig.setDocumentLabel(assembled.versionLabel());
+        sig.setContentHash(sha256(assembled.markdown()));
+        sig.setVariablesJson(assembled.variablesJson());
+        sig.setCustomerLegalName(signing.customerLegalName());
+        sig.setSignatoryName(signing.signatoryName());
+        sig.setSignatoryTitle(signing.signatoryTitle());
+        sig.setAuthorityConfirmed(signing.authorityConfirmed());
+        sig.setSignerIp(signerIp);
+        sig.setPdf(agreementPdfRenderer.tryRender(assembled.markdown()));
+        sig = signatureRepo.save(sig);
+        log.info(
+                "[procurement] agreement signed team={} quote={} doc={} pdf={}",
+                teamId,
+                quote.getQuoteId(),
+                assembled.versionLabel(),
+                sig.getPdf() != null);
+        return sig;
+    }
+
+    /** The latest recorded signature for a team's deal, if any (for the signed-PDF download). */
+    @Transactional(readOnly = true)
+    public Optional<ProcurementAgreementSignature> latestSignature(Long teamId) {
+        return dealRepo.findByTeamId(teamId)
+                .flatMap(
+                        deal ->
+                                signatureRepo.findFirstByDealIdOrderBySignedAtDesc(
+                                        deal.getDealId()));
+    }
+
+    /**
+     * The version label of the deal's latest signed agreement, if any. Used to surface the
+     * "download signed agreement" action once a signature exists; the snapshot polls this, so it
+     * deliberately avoids loading the PDF bytes.
+     *
+     * <p>Deliberately not conditional on a stored PDF: download re-renders from the pinned document
+     * version on demand, so the action works whether or not the render succeeded at signing time.
+     */
+    @Transactional(readOnly = true)
+    public Optional<String> signedAgreementLabel(Long dealId) {
+        return signatureRepo.findSignedLabels(dealId).stream().findFirst();
+    }
+
+    /**
+     * The signed agreement as a PDF for download: the artifact stored at signing, or — if the
+     * render runtime was unavailable then — re-rendered now from the signature's details. Empty
+     * when the team has no signature or the render runtime is still unavailable.
+     */
+    @Transactional(readOnly = true)
+    public Optional<byte[]> signedAgreementPdf(Long teamId) {
+        return latestSignature(teamId)
+                .flatMap(
+                        sig -> {
+                            if (sig.getPdf() != null) return Optional.of(sig.getPdf());
+                            return quoteRepo
+                                    .findById(sig.getQuoteId())
+                                    .map(
+                                            q ->
+                                                    agreementAssembler.assemble(
+                                                            q,
+                                                            new AgreementSigning(
+                                                                    sig.getCustomerLegalName(),
+                                                                    sig.getSignatoryName(),
+                                                                    sig.getSignatoryTitle(),
+                                                                    sig.isAuthorityConfirmed())))
+                                    .map(a -> agreementPdfRenderer.tryRender(a.markdown()));
+                        });
+    }
+
+    private static String sha256(String s) {
+        try {
+            byte[] digest =
+                    java.security.MessageDigest.getInstance("SHA-256")
+                            .digest(s.getBytes(java.nio.charset.StandardCharsets.UTF_8));
+            return java.util.HexFormat.of().formatHex(digest);
+        } catch (java.security.NoSuchAlgorithmException e) {
+            throw new IllegalStateException("SHA-256 unavailable", e);
+        }
+    }
+
     /**
      * Provision on accept: upgrade the team's licence to the committed annual term (valid
      * immediately), so the buyer can get going the moment they accept — before the invoice is paid.
@@ -260,22 +563,58 @@ public class ProcurementService {
     }
 
     /**
-     * Mark the deal fully live (advance to the active stage) once payment settles. In production
-     * this is the {@code invoice.paid} webhook; here it's the demo/manual stand-in. Re-affirms the
+     * Mark the deal fully live (advance to the active stage) once payment settles — driven by the
+     * {@code invoice.paid} webhook, and by the demo control when those are enabled. Re-affirms the
      * annual licence in case provisioning didn't run at accept.
+     *
+     * <p>Idempotent per invoice rather than per stage, which matters because {@code invoice.paid}
+     * carries two different meanings. Stripe redelivers events, so the <em>same</em> invoice
+     * arriving twice must do nothing. But the renewal payment a year later is also an {@code
+     * invoice.paid}, and the committed licence expires term years from issue — so a
+     * <em>different</em> invoice has to re-issue, moving the expiry out, or the customer's licence
+     * lapses after they have paid. Keying on the stage alone couldn't tell those apart and treated
+     * every renewal as a duplicate.
+     *
+     * @param paidInvoiceId the Stripe invoice that was paid, or null when the caller has no invoice
+     *     to identify the payment by (the demo control). Null keeps the old conservative behaviour:
+     *     a live deal short-circuits, since there is nothing to tell a renewal from a repeat.
      */
     @Transactional
-    public ProcurementDeal markLive(Long teamId) {
+    public ProcurementDeal markLive(Long teamId, String paidInvoiceId) {
         ProcurementDeal deal =
                 dealRepo.findByTeamId(teamId)
                         .orElseThrow(() -> new IllegalStateException("No deal for team " + teamId));
+        if (ProcurementDeal.STAGE_LIVE.equals(deal.getStage())
+                && (paidInvoiceId == null || paidInvoiceId.equals(deal.getLastPaidInvoiceId()))) {
+            log.debug(
+                    "[procurement] invoice.paid already applied team={} deal={} invoice={}",
+                    teamId,
+                    deal.getDealId(),
+                    paidInvoiceId);
+            return deal;
+        }
+        boolean renewal = ProcurementDeal.STAGE_LIVE.equals(deal.getStage());
         deal.setLicenseRef(issueOrUpgradeAnnual(deal));
+        if (paidInvoiceId != null) deal.setLastPaidInvoiceId(paidInvoiceId);
         deal.setStage(ProcurementDeal.STAGE_LIVE);
         deal = dealRepo.save(deal);
-        log.info("[procurement] deal live team={} deal={}", teamId, deal.getDealId());
+        log.info(
+                "[procurement] deal live team={} deal={} renewal={} invoice={}",
+                teamId,
+                deal.getDealId(),
+                renewal,
+                paidInvoiceId);
         return deal;
     }
 
+    /**
+     * Go live with no invoice reference — the demo control. See {@link #markLive(Long, String)}.
+     */
+    @Transactional
+    public ProcurementDeal markLive(Long teamId) {
+        return markLive(teamId, null);
+    }
+
     /**
      * Issue or upgrade the committed annual licence from the deal's accepted (else latest) quote,
      * stamping the full entitlement snapshot onto it and upgrading the trial licence in place when
@@ -327,15 +666,34 @@ public class ProcurementService {
      * before paying — that's bounded: the trial licence carries {@code expiry = trialEndsAt}, so
      * the file the verifier accepts self-expires at trial end. The buyer must re-download after
      * provisioning to get the committed-term file (the portal warns about this).
+     *
+     * <p>Once a quote exists, the quote's deployment decides — not the deal's. They are two
+     * different values: the deal's is chosen free at trial setup, the quote's is the one carrying
+     * the air-gap deploy fee. Reading the deal's here meant selecting air-gapped in the trial and
+     * then buying a cloud quote still yielded the offline file, and after provisioning it was
+     * checked out against the committed annual licence — so the self-expiry above no longer bounded
+     * it.
      */
     @Transactional(readOnly = true)
     public Optional<String> offlineLicenseFile(Long teamId) {
         ProcurementDeal deal = dealRepo.findByTeamId(teamId).orElse(null);
         if (deal == null || deal.getLicenseRef() == null) return Optional.empty();
-        if (!"airgap".equalsIgnoreCase(deal.getDeployment())) return Optional.empty();
+        if (!"airgap".equalsIgnoreCase(entitledDeployment(deal))) return Optional.empty();
         return Optional.of(licenses.checkOutLicenseFile(deal.getLicenseRef()));
     }
 
+    /**
+     * The deployment the team is actually entitled to: the priced quote's once one exists,
+     * otherwise the trial's self-selected target. Paid entitlements must follow what was quoted.
+     */
+    private String entitledDeployment(ProcurementDeal deal) {
+        ProcurementQuote quote = currentQuote(deal.getTeamId()).orElse(null);
+        if (quote != null && quote.getDeployment() != null && !quote.getDeployment().isBlank()) {
+            return quote.getDeployment();
+        }
+        return deal.getDeployment();
+    }
+
     /**
      * Reset a team's procurement: delete the deal (quotes + activity cascade). For
      * re-demos/testing.
@@ -346,12 +704,6 @@ public class ProcurementService {
         log.info("[procurement] deal reset team={}", teamId);
     }
 
-    private String nextQuoteNumber(Long dealId) {
-        int seq = quoteRepo.findByDealIdOrderByCreatedAtDesc(dealId).size() + 1;
-        String token = UUID.randomUUID().toString().substring(0, 4).toUpperCase(Locale.ROOT);
-        return String.format(Locale.ROOT, "QT-%s-%04d", token, seq);
-    }
-
     private String writeLineItems(QuoteBreakdown breakdown) {
         try {
             return OBJECT_MAPPER.writeValueAsString(breakdown.lineItems());
diff --git a/app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/dpa.md b/app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/dpa.md
new file mode 100644
index 0000000000..12cceaef65
--- /dev/null
+++ b/app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/dpa.md
@@ -0,0 +1,53 @@
+## Part C — Data Processing Addendum
+
+This DPA forms part of the Agreement and applies where Provider processes Personal Data on Customer's behalf.
+
+### C1. Roles; scope; instructions
+
+Customer is the controller (or a processor on behalf of its own controllers); Provider is a processor (or subprocessor, as applicable). Provider processes Personal Data only on Customer's documented instructions — including processing initiated by Customer's users, policies, pipelines, and API calls — unless required by law (in which case Provider informs Customer unless legally prohibited). **Provider will inform Customer without undue delay if, in Provider's opinion, an instruction infringes the GDPR, UK GDPR, or other applicable data-protection law.** Customer is responsible for the lawfulness of the Personal Data it submits and the instructions it gives; Customer's rights under this DPA include instruction, audit (C9), objection to subprocessors (C5), assistance (C6), and return or deletion of data (C10).
+
+### C2. Details of processing
+
+**Subject matter/nature:** PDF processing and governance (classification, redaction, routing, retention, conversion, signing, extraction, AI-assisted analysis). **Duration:** the Term plus the deletion period. **Categories of data:** any Personal Data contained in Customer files and metadata (names, contact details, identifiers, financial or health data if present in Customer files), account data of Customer users. **Data subjects:** Customer's employees, users, customers, and other persons appearing in Customer files. **Sensitive data:** may be present in Customer files at Customer's discretion; Customer is responsible for the lawful basis.
+
+### C3. Confidentiality; personnel
+
+Provider ensures persons authorized to process Personal Data are bound by confidentiality and receive security training. Zero-standing-access applies: content access is just-in-time, logged, and audited (MSA Section 4.2).
+
+### C4. Security measures (Annex II summary)
+
+Encryption in transit (TLS 1.2+) and at rest (AES-256); zero-standing-access with audited JIT elevation; role-based access control; SSO/SCIM; tenant isolation; vulnerability management and penetration testing; audit logging of processing events (including file name, hash, size, and operations); backup and recovery. For Self-hosted and Air-gapped deployments, Customer operates the runtime environment and is responsible for infrastructure-level controls; Provider's measures apply to license/metering services and support access.
+
+### C5. Subprocessors
+
+Customer generally authorizes the subprocessors listed at {{subprocessor_url}}: cloud infrastructure (Amazon Web Services), payment processing (Stripe, as independent controller for payment data), email delivery (Google), account infrastructure (Supabase), product telemetry (PostHog, EU-hosted; pseudonymous usage events, never file content), and AI model providers: **Anthropic** (Claude models — receives prompts and the document text or excerpts needed for the requested AI feature) and **Voyage AI** (embedding models — receives extracted text excerpts solely to generate embeddings where Customer enables Ingestion/RAG features). AI features are optional and may be disabled; where used, AI providers receive only the content needed for the requested feature. **Whole Customer files are never transmitted to any AI provider.** Neither AI provider trains on Customer data (verified against the signed provider agreements, Jul 10, 2026). Provider gives thirty (30) days' notice of new subprocessors; Customer may object on reasonable data-protection grounds, and if unresolved, may terminate the affected Services with a pro-rata refund. **Provider imposes data-protection obligations on each subprocessor by written contract that are at least as protective as this DPA, and remains fully responsible to Customer for each subprocessor's performance.**
+
+### C6. Data subject requests; assistance
+
+Taking into account the nature of the processing, Provider provides reasonable assistance (including through the Processor's search, redaction, and audit tools) for Customer's obligations under GDPR Articles 32–36: security of processing, breach notification to authorities and data subjects, data protection impact assessments, and prior consultations with supervisory authorities, as well as responses to data subject requests. Provider forwards requests received directly to Customer and does not respond except as legally required. **Provider makes available to Customer all information necessary to demonstrate compliance with this DPA and allows for and contributes to audits, including inspections, per Section C9.**
+
+### C7. Breach notification
+
+Per MSA Section 5.3: without undue delay after becoming aware of a Personal Data Breach, and in any event within forty-eight (48) hours of awareness, with information provided in phases as available — including the nature of the breach, categories and approximate volumes affected, likely consequences, and measures taken or proposed.
+
+### C8. International transfers
+
+Where Personal Data subject to GDPR/UK GDPR is transferred to countries without adequacy, the Parties incorporate the EU Standard Contractual Clauses (Commission Decision 2021/914): **Module 2** (controller-to-processor) where Customer is a controller, and **Module 3** (processor-to-processor) where Customer acts as a processor, with the following selections — Clause 7 (docking): included; Clause 9(a): Option 2 (general written authorization, 30 days' notice per C5); Clause 11(a) optional language: not used; Clause 17: the law of Ireland; Clause 18: the courts of Ireland; competent supervisory authority: the Irish Data Protection Commission (per Annex I.C). Annex I (parties, description of transfer: as per Section C2), Annex II (technical and organizational measures: as per Section C4), and Annex III (subprocessors: as per Section C5 and {{subprocessor_url}}) are completed by reference to this DPA. For UK transfers, the UK International Data Transfer Addendum applies with its Tables completed by reference to the foregoing. Provider is not certified under the EU-U.S. Data Privacy Framework; the SCCs are the transfer mechanism.
+
+**Note:** Provider does not currently offer contractual EU data residency for Stirling Cloud; residency is achieved via Self-hosted or Air-gapped deployment.
+
+### C9. Audits
+
+Provider's security reports and documentation (Section 5.1) are the ordinary means of demonstrating compliance. Customer may additionally audit — by itself or a mandated auditor — once per year on thirty (30) days' notice, and at any time where: (a) a security incident affecting Customer Personal Data has occurred; (b) provided documentation reveals a material deficiency; (c) a competent supervisory authority requires it; or (d) Customer reasonably suspects material noncompliance with this DPA. Audits are conducted during business hours, under confidentiality, at Customer's cost, with reasonable notice, without unreasonable interference with Provider's operations, and without access to other customers' data.
+
+### C10. Return & deletion
+
+On termination, at Customer's choice, Provider returns Customer file content and Personal Data (export of Customer files and the governed-record metadata) and/or deletes them — from live systems within thirty (30) days and from backups within ninety (90) days — except as retention is required by law, and certifies deletion on request. Where Customer uses HYOK, key destruction by Customer renders content cryptographically inaccessible immediately.
+
+### C11. CCPA/CPRA
+
+Provider is a "service provider" under the CCPA/CPRA. Provider: (a) processes Personal Information only for the business purposes specified in this Agreement — providing, securing, metering, and supporting the Services described in Section C2; (b) shall not sell or share Personal Information; (c) shall not retain, use, or disclose it for any purpose other than those business purposes, or outside the direct business relationship between the Parties; (d) shall not combine it with Personal Information received from other sources, except as permitted by CCPA regulations for the business purposes; (e) provides the same level of privacy protection required of businesses by the CCPA; (f) will notify Customer if it determines it can no longer meet its CCPA obligations; (g) grants Customer the right, upon reasonable notice, to take reasonable and appropriate steps to ensure Provider's use of Personal Information is consistent with Customer's obligations, and to stop and remediate any unauthorized use; and (h) flows these requirements down to its subprocessors per Section C5. Provider certifies that it understands these restrictions and will comply with them.
+
+### C12. Liability
+
+Liability under this DPA is subject to the MSA's limitations (Section 8).
diff --git a/app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/msa.md b/app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/msa.md
new file mode 100644
index 0000000000..cd3f6742eb
--- /dev/null
+++ b/app/saas/src/main/resources/legal/enterprise-agreement/0.9.1/msa.md
@@ -0,0 +1,119 @@
+# Stirling Enterprise Agreement
+
+One signature executes all three parts: the Master Services Agreement (Part A), the Order Form (Part B), and the Data Processing Addendum (Part C). The Stirling EULA & Commercial Terms is incorporated by reference.
+
+## Part A — Master Services Agreement
+
+This Master Services Agreement (the "Agreement") is entered into as of {{effective_date}} (the "Effective Date") by and between **Stirling PDF, Inc.**, a Delaware corporation with offices at 548 Market Street PMB 887643, San Francisco, CA 94104 ("Provider"), and **{{customer_legal_name}}** ("Customer"). Each a "Party," together the "Parties."
+
+### 1. Services & License
+
+1.1 **The Services.** Provider will provide the Stirling PDF Processor (the "Processor") — the hosted or customer-deployed platform for distributing PDF editors and governing PDF processing, including policies, pipelines, the Stirling Agent, API access, and the administrative console — and the Stirling PDF Editor (the "Editor"), as described in the Order Form.
+
+1.2 **License grants.** Provider grants Customer, for the Term: (a) a non-exclusive, non-transferable right to access and use the Processor for Customer's internal business operations, up to the Committed Volume; and (b) a non-exclusive right to deploy and distribute the Editor to Customer's authorized users without limit on user count. Open-source components of the Editor remain governed by their own licenses, which control for those components.
+
+1.3 **Deployment.** The Services are delivered via the deployment stated in the Order Form (Stirling Cloud, Self-hosted, or Air-gapped). Self-hosted deployments validate their license and report metering data online; Air-gapped deployments verify a signed activation bundle offline and reconcile usage periodically as described in the Documentation. Customer shall not disable, circumvent, or falsify license validation or usage metering. **The metered rate does not vary by deployment**; deployment-specific services are priced as line items in the Order Form.
+
+1.4 **Restrictions.** Customer shall not: resell or provide the Services to third parties as a service bureau; reverse engineer non-open-source components; use the Services to violate law; or exceed the scope of the Order Form other than through Overage (Section 3.4).
+
+### 2. Term & Renewal
+
+2.1 **Initial Term.** {{term_years}} year(s) from the Effective Date.
+
+2.2 **Renewal.** The Agreement auto-renews for successive periods equal to the Initial Term unless either Party gives sixty (60) days' written notice of non-renewal before the end of the then-current term. The Annual Fee for each renewal year equals the immediately preceding year's Annual Fee increased by three percent (3%) — the same formula as Section 2.3. Itemized services escalate at the same rate unless restated in a superseding Order Form.
+
+2.3 **In-term escalator.** The Annual Fee (including itemized services) increases by a fixed three percent (3%) at each anniversary of the Effective Date during the Term.
+
+### 3. Fees & Payment
+
+3.1 **Annual Fee.** Customer shall pay the Annual Fee stated in the Order Form, calculated as the Committed Volume ({{committed_pdfs_yr}} PDFs per year) at {{rate_per_pdf}} per PDF at the {{posture}} governance posture, plus the itemized services in the Order Form, less the term discount stated there.
+
+3.2 **Invoicing.** Fees are invoiced annually in advance, due net thirty (30) days. Late amounts accrue interest at 1.5% per month or the maximum permitted by law, whichever is less. Fees are exclusive of taxes; Customer is responsible for all taxes other than Provider's income taxes.
+
+3.3 **Committed Volume; measurement.** The Committed Volume is denominated in PDFs processed per year at the stated posture, and converts to a drawdown allowance in PDF Processes at the fixed conversion schedule below, which is frozen for the Term:
+
+| Posture | PDF Processes per PDF |
+| --- | --- |
+| Essentials | 2 |
+| Governed | 4 |
+| Regulated | 7 |
+
+A **"PDF Process"** is one policy execution, one pipeline run, or one Stirling Agent returned artifact, applied to one file, plus Data Processing increments under Section 3.5. For clarity: a pipeline run counts as one PDF Process regardless of the number of operations in its chain; a Stirling Agent artifact counts as one regardless of the number of messages that produced it; failed processes (those that do not complete) are not counted; reprocessing the same file and duplicate submissions are counted; counts are whole numbers (no rounding). The Processor's audit log records each PDF Process and is the system of record, subject to Section 3.7. Provider will make a per-file usage statement (file identifier, size, processes, drawdown) available for audit.
+
+**Worked example.** At the Governed posture, a commitment of 90,000,000 PDFs/year provides a drawdown allowance of 360,000,000 PDF Processes. A 60 MB file that runs the four Governed policies draws down 4 PDF Processes plus 2 Data Processing increments (Section 3.5) = 6 PDF Processes. The allowance is a purchased quantity, not a feature limit: Customer may run any number of policies or pipelines; actual consumption simply draws the allowance down faster, and consumption beyond it bills as Overage (Section 3.4).
+
+3.4 **Overage.** Consumption beyond the Committed Volume in a contract year is billed quarterly in arrears at the committed rate stated in the Order Form. Overage does not increase subsequent years' Committed Volume.
+
+3.5 **Data Processing.** Each file includes its first twenty-five (25) megabytes (decimal, 1 MB = 1,000,000 bytes) at no additional drawdown. Each additional twenty-five (25) megabytes or part thereof (rounded up per file) draws down one (1) additional PDF Process. File size is measured once per file at ingestion, on the file as submitted. This schedule is stated here in full, is frozen for the Term, and is not subject to alteration through the Documentation.
+
+3.6 **No refunds.** Except as expressly stated (Sections 7.1, 7.3, 10.3, and DPA Section C5), fees are non-refundable and Committed Volume does not roll over between contract years.
+
+3.7 **Billing disputes.** Customer may dispute any invoice or metering record in good faith within sixty (60) days of the invoice date. Provider will investigate promptly, provide the relevant audit-log extracts and usage statements, and correct confirmed errors by credit or refund. The audit log is presumptively accurate but not conclusive; Customer may rebut it with reasonable evidence. Undisputed amounts remain payable when due.
+
+### 4. Data Protection
+
+4.1 The Data Processing Addendum at Part C (the "DPA") is incorporated into this Agreement and governs Provider's processing of Customer Personal Data, in compliance with the GDPR, UK GDPR, and CCPA/CPRA to the extent applicable.
+
+4.2 **Zero-standing-access.** Customer file content is encrypted in transit and at rest. Provider personnel have no standing access to Customer file content; access is granted just-in-time under audited elevation, solely as necessary to provide the Services or as instructed by Customer. Document metadata is maintained to operate the governed record. Where the Order Form includes BYOK or HYOK key management, the key terms in the Documentation apply.
+
+### 5. Security & Availability
+
+5.1 **Security program.** Provider maintains a written information security program including access controls, encryption (TLS 1.2+ in transit, AES-256 at rest), audit logging, vulnerability management, and personnel security. Provider will provide its available security documentation (including its security program overview and penetration-test attestation) upon request under confidentiality.
+
+5.2 **Availability.** For Stirling Cloud deployments, Provider targets 99.9% monthly uptime, excluding scheduled maintenance announced at least 48 hours in advance. The uptime figure is a target, not a credited commitment, and no service credits apply. Support response commitments for the {{sla_tier}} tier are set out in the SLA Exhibit referenced by the Order Form.
+
+5.3 **Breach notice.** Provider will notify Customer without undue delay after becoming aware of a Personal Data Breach affecting Customer Personal Data, and in any event within forty-eight (48) hours of awareness. Provider may provide information in phases as it becomes available and will supplement its notice as investigation proceeds.
+
+5.4 **Updates.** Provider will make security patches and product upgrades available to Customer at no additional charge for supported versions.
+
+### 6. Confidentiality
+
+6.1 Each Party shall protect the other's Confidential Information with at least the care it uses for its own similar information and no less than reasonable care, use it solely to perform under this Agreement, and disclose it only to personnel and advisors with a need to know who are bound by confidentiality obligations at least as protective. Confidential Information excludes information that is public without breach, independently developed, or rightfully received from a third party.
+
+6.2 Compelled disclosure is permitted with prompt notice (where lawful) and reasonable cooperation to seek protective treatment.
+
+6.3 Obligations survive three (3) years after termination; trade secrets survive as long as they remain trade secrets.
+
+### 7. Warranties & Indemnification
+
+7.1 **Performance warranty.** Provider warrants the Services will perform materially in accordance with the Documentation. Customer's exclusive remedy for breach is re-performance or, if Provider cannot re-perform within thirty (30) days, termination of the affected Services and a pro-rata refund of prepaid, unused fees for those Services.
+
+7.2 **Mutual warranties.** Each Party warrants it has the authority to enter this Agreement and will comply with applicable law in its performance.
+
+7.3 **IP indemnification.** Provider shall defend Customer against third-party claims that the Services, as provided and used per this Agreement, infringe a copyright or trademark or misappropriate a trade secret, and shall indemnify Customer for resulting damages finally awarded or agreed in settlement. Where **Enhanced IP Protection** is elected on the Order Form, this obligation extends to patent claims and carries the enhanced cap stated in Section 8.2. Exclusions: combinations with non-Provider materials, Customer content, modifications not made by Provider, and use after notice to stop. Provider may procure rights, modify, or replace the Services; if none is practicable, Provider may terminate the affected Services and refund prepaid, unused fees. This section states Customer's exclusive remedy for IP claims.
+
+7.4 **Customer indemnification.** Customer shall defend and indemnify Provider against third-party claims arising from Customer content, Customer's breach of Section 1.4, or Customer's violation of law.
+
+7.5 **Disclaimer.** EXCEPT AS EXPRESSLY STATED, THE SERVICES ARE PROVIDED WITHOUT OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. AI-ASSISTED OUTPUTS (INCLUDING CLASSIFICATION, EXTRACTION, AND AGENT ARTIFACTS) ARE PROBABILISTIC; CUSTOMER IS RESPONSIBLE FOR HUMAN REVIEW WHERE OUTPUTS HAVE LEGAL OR REGULATORY EFFECT.
+
+### 8. Limitation of Liability
+
+8.1 NEITHER PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOST PROFITS OR REVENUE.
+
+8.2 **General cap.** EACH PARTY'S AGGREGATE LIABILITY IS CAPPED AT THE FEES PAID OR PAYABLE UNDER THIS AGREEMENT IN THE TWELVE (12) MONTHS PRECEDING THE FIRST EVENT GIVING RISE TO LIABILITY. **Super-cap:** for breaches of Section 6 (Confidentiality), breaches of the DPA or Section 4–5 security obligations, and IP indemnification under Section 7.3, the cap is TWO TIMES (2x) such fees. **Uncapped:** fraud, willful misconduct, Customer's payment obligations, and Customer's indemnification under Section 7.4 for claims arising from Customer's willful violation of law.
+
+8.3 All claims arising from the same event or series of connected events count as a single claim for the purposes of the caps in Section 8.2.
+
+### 9. General
+
+9.1 **Entire agreement; precedence.** This Agreement (Parts A–C, the Order Form, the SLA Exhibit, and the Standard Contractual Clauses where applicable) is the entire agreement and supersedes prior proposals and quotes, including {{quote_ref}}. Only the following provisions of the Stirling EULA & Commercial Terms are incorporated: Section 3 (Definitions), Section 8 (AI features), Section 10 (Self-hosted and desktop software), and Section 11 (Fair use). The website Terms of Service do not apply to this Agreement; without limitation, their arbitration and class-waiver provisions, online auto-renewal rules, unilateral-amendment provision, self-serve pricing, and clickwrap acceptance mechanism are expressly excluded. Precedence: Order Form → Standard Contractual Clauses (for international transfers) → DPA → MSA → SLA Exhibit → incorporated EULA sections → Documentation.
+
+9.2 **Governing law; venue.** Delaware law, excluding conflicts rules. Exclusive jurisdiction and venue in the state or federal courts located in San Francisco County, California, and the Parties consent to personal jurisdiction there.
+
+9.3 **Assignment.** Neither Party may assign without the other's consent, except to a successor in a merger, acquisition, or sale of substantially all assets, with notice.
+
+9.4 **Notices.** Written notices to the addresses on the Order Form; email permitted with confirmation of receipt.
+
+9.5 **Force majeure; independent contractors; waiver; severability.** Standard terms apply: neither Party is liable for delay caused by events beyond reasonable control; the Parties are independent contractors; failure to enforce is not waiver; unenforceable provisions are severed with the remainder in effect.
+
+9.6 **Publicity.** Neither Party may use the other's name or marks publicly without prior written consent, except Provider may identify Customer as a customer with Customer's prior approval of the specific use.
+
+9.7 **Suspension.** Provider may suspend the Services for material breach that threatens the security or integrity of the Services, with notice and opportunity to cure where practicable. Undisputed unpaid fees more than thirty (30) days late are grounds for suspension after ten (10) days' notice.
+
+### 10. Termination
+
+10.1 Either Party may terminate for material breach uncured thirty (30) days after written notice, or immediately upon the other's insolvency.
+
+10.2 On termination: Customer's access ends (self-hosted licenses expire per the license mechanism); each Party returns or destroys the other's Confidential Information; the DPA's deletion terms govern Customer Personal Data; Sections 3 (accrued fees), 6, 7, 8, 9, and 10 survive.
+
+10.3 If Customer terminates for Provider's uncured material breach, Provider refunds prepaid fees for the unused remainder of the then-current contract year.
diff --git a/app/saas/src/main/resources/legal/eula/1.0.0/eula.md b/app/saas/src/main/resources/legal/eula/1.0.0/eula.md
new file mode 100644
index 0000000000..f6dd32d5e1
--- /dev/null
+++ b/app/saas/src/main/resources/legal/eula/1.0.0/eula.md
@@ -0,0 +1,75 @@
+# Stirling EULA & Commercial Terms
+
+This document fills the EULA slot the website Terms of Service §5 already contemplates ("If a separate end-user license (EULA) accompanies software, that license governs to the extent of any conflict"). It carries the commercial terms of the actual product: the PDF Process meter, spend limits, prepaid capacity, the free allotment, trials, self-hosted licensing, and AI features. For customers under a signed Stirling Enterprise Agreement, that agreement controls.
+
+**Effective:** {{version_date}} · **Version:** {{version}}
+
+## 1. Agreement; precedence
+
+These EULA & Commercial Terms ("EULA") supplement the Stirling Terms of Service (stirling.com/legal/terms-of-service). If they conflict, this EULA controls for the software and the commercial terms below. Open-source components are governed by their own licenses, which control for those components. By clicking accept, creating a workspace, or using the software, you agree on behalf of yourself and, if applicable, the organization you represent ("you").
+
+## 2. The products
+
+**The Stirling PDF Editor** is free: manual editing, the tool catalog, and team administration (including SSO) carry no subscription fee or per-seat charge, whether used in the browser, as a desktop application, or self-hosted. Usage limits on automated processing, fair-use rules (Section 11), support levels, and the feature set may change over time, and third-party costs (such as your own hosting) are yours. The Editor's open-source components remain available under their own licenses independently of this EULA. **The Stirling PDF Processor** is the paid platform that processes PDFs automatically — policies, pipelines, the Stirling Agent, and API processing — billed on the meter below.
+
+## 3. Definitions
+
+**"PDF Process"** — one policy execution, one pipeline run (regardless of the number of operations in its chain), or one Stirling Agent returned artifact (a processed file or summary, regardless of the number of messages that produced it), applied to one file. **"Data Processing"** — the data-volume component of the meter: files carry their first 25 MB included per file; volume past that is billed per Section 4. **"file"** — a document processed by the Processor. Chatting with the Stirling Agent is free; only returned artifacts meter.
+
+## 4. Metered billing (pay as you go)
+
+4.1 **Rates.** 1¢ per PDF Process, plus Data Processing at 1¢ per 25 MB increment past the first 25 MB of each file. Megabytes are decimal (1 MB = 1,000,000 bytes); size is measured once per file as submitted; increments round up ("part thereof" counts — a 26 MB file incurs one Data Processing increment, a 60 MB file incurs two). Rates may change on thirty (30) days' notice; changes apply prospectively. **Example:** two policies on a 3 MB contract = 2¢; two policies on a 60 MB scan set = 2¢ + 2¢ data = 4¢.
+
+4.2 **Free allotment.** New workspaces receive a one-time allotment of 500 PDF Processes. A file processed by two processes consumes two of the 500. When the allotment is exhausted, processing pauses until the Processor is switched on.
+
+4.3 **Invoices.** Usage is invoiced monthly on the 1st for the prior cycle, charged to your payment method on file (card or ACH debit). You authorize these charges.
+
+4.4 **Usage records.** The Processor's audit log is the system of record, subject to Section 4.5. Your Usage & Billing page shows consumption, and a per-file usage statement (name, size, processes, charge) is available for download.
+
+4.5 **Billing disputes.** You may dispute a charge or metering record in good faith within sixty (60) days of the invoice or charge date. We will investigate, provide the relevant usage-statement detail, and correct confirmed errors by credit or refund. The audit log is presumptively accurate but not conclusive; reasonable contrary evidence will be considered. Undisputed amounts remain payable.
+
+## 5. Spend limits
+
+5.1 You may set a monthly spend limit. By default, processing pauses when usage reaches the limit; queued documents resume when you raise the limit or the cycle resets. Nothing already processed is lost.
+
+5.2 If you enable **keep-processing** ("Keep processing if you hit your limit"), usage past the limit continues to accrue and be billed per Section 4; the limit then functions as a notification threshold. You can change the limit or the toggle at any time in Usage & Billing.
+
+## 6. Cancellation; downgrade
+
+You may revert to the free Editor plan at any time from Usage & Billing. Accrued usage remains payable. Your policies, configuration, and history are retained per the Terms of Service data-retention practices.
+
+## 7. Prepaid capacity (self-serve annual)
+
+7.1 **Offer.** You may prepay twelve (12) months of processing capacity for the price of ten (10) (the "12-for-10 rate"), sized at purchase. Payment by card, or by bank transfer against a generated invoice (net 30); prepaid capacity activates when payment clears.
+
+7.2 **No renewal of prepaid capacity; automatic transition to pay-as-you-go.** Prepaid capacity does not renew for another prepaid term. At purchase, you affirmatively consent to the following transition, which is disclosed before you pay: when the term ends, metered billing (Section 4) applies automatically at then-current rates so processing does not pause. We remind you thirty (30) days before term end; the reminder states the metered rates that will apply and how to cancel or revert to the free Editor plan (one click in Usage & Billing).
+
+7.3 **Consumption; overage; expiry.** Capacity draws down in PDF Processes. If you exhaust capacity mid-term, you may top up at the same 12-for-10 rate, or metered billing applies at list rates (with a card on file) or processing pauses (without one). Unused capacity expires at term end and is not refunded and does not roll over.
+
+7.4 **Cap.** Self-serve prepaid capacity is limited to 1,000,000 PDF Processes per year; larger commitments are available under a Stirling Enterprise Agreement.
+
+## 8. AI features
+
+AI features — classification, extraction, redaction-assist, and the Stirling Agent — are optional. They run only when you invoke a feature that uses them, and an administrator can disable them for the workspace; the rest of the Processor works without them. When used, they call machine-learning models from the providers listed at {{subprocessor_url}}. Currently: **Anthropic** (Claude models), which receives prompts and the document text or excerpts needed to perform the requested task; and **Voyage AI** (embedding models), which receives extracted text excerpts solely to generate embeddings when you enable Ingestion/RAG features. Only the document text or excerpts needed for the requested feature are sent — not your whole files — and only when that feature runs. AI charges are included in the price of whatever runs — there is no separate AI surcharge. Your content is not used to train models, by us or by these providers (verified against our signed provider agreements). AI outputs are probabilistic; review outputs before relying on them where accuracy has legal effect.
+
+## 9. Evaluations and trials
+
+Enterprise trials run fourteen (14) days, require no payment method, and are provided for evaluation only, AS IS, without service level commitments. Either party may end an evaluation at any time; on expiry your workspace continues on the free Editor plan.
+
+## 10. Self-hosted and desktop software
+
+10.1 **License.** We grant you a non-exclusive, non-transferable license to install and run the Editor and, with an active plan, the self-hosted Processor, for your internal business use. Open-source components remain under their own licenses.
+
+10.2 **License validation and metering.** Self-hosted Processor deployments validate their license online and transmit usage metering data (process counts, file sizes, and file hashes for billing integrity, and diagnostic data — never file content or file names) to Stirling. File names used for unique PDF identification remain on your server and are not transmitted. Air-gapped deployments verify a signed activation bundle offline and reconcile usage periodically. You will not disable, circumvent, or falsify validation or metering. **The meter is the same regardless of where the software runs.**
+
+10.3 **Updates.** Security patches and upgrades are made available for supported versions; some updates may install automatically per Terms of Service §5.
+
+10.4 **Authorized users and administration.** "Authorized Users" are your employees, and the employees of your affiliates and contractors working on your behalf, whom you provision through your workspace. You are responsible for your users' credentials, your administrators' actions, and your users' compliance with this EULA. One workspace serves one legal entity and its affiliates; serving unrelated third parties requires a separate agreement. You may not redistribute the Processor or offer it as a hosted service to others. On termination or downgrade, self-hosted Processor licenses expire per the license mechanism; installed Editor copies remain usable under the free plan. We may verify license compliance through the validation mechanism in Section 10.2.
+
+## 11. Fair use
+
+Free-tier and flat-price features are subject to fair use: we may throttle or decline usage patterns that abuse free processing (for example, automation disguised as manual editing) after notice where practicable.
+
+## 12. Changes to this EULA
+
+We may update this EULA. Material changes take effect thirty (30) days after notice. Changes that materially increase your price or reduce your rights take effect at your next billing cycle or prepaid term start, or upon your affirmative acceptance — whichever comes first — except changes strictly necessary for legal compliance or security, which may take effect sooner with notice. Continued use after the effective date is acceptance. Version history is available at {{eula_url}}.
diff --git a/app/saas/src/main/resources/legal/manifest.json b/app/saas/src/main/resources/legal/manifest.json
new file mode 100644
index 0000000000..c34559275d
--- /dev/null
+++ b/app/saas/src/main/resources/legal/manifest.json
@@ -0,0 +1,38 @@
+{
+  "subprocessorUrl": "https://www.stirlingpdf.com/legal/subprocessors",
+  "eulaUrl": "https://www.stirlingpdf.com/legal/eula",
+  "documents": {
+    "enterprise-agreement": {
+      "label": "SEA",
+      "displayName": "Stirling Enterprise Agreement",
+      "version": "0.9.1",
+      "effectiveDate": "2026-07-10",
+      "status": "draft",
+      "parts": ["msa.md", "@order-form", "dpa.md"]
+    },
+    "eula": {
+      "label": "EULA",
+      "displayName": "Stirling EULA & Commercial Terms",
+      "version": "1.0.0",
+      "effectiveDate": "2026-07-10",
+      "status": "draft",
+      "parts": ["eula.md"]
+    },
+    "sla": {
+      "label": "SLA",
+      "displayName": "Stirling SLA Exhibit",
+      "version": "1.0.0",
+      "effectiveDate": "2026-07-10",
+      "status": "draft",
+      "parts": ["sla.md"]
+    },
+    "subprocessors": {
+      "label": "SUBP",
+      "displayName": "Stirling Subprocessors",
+      "version": "1.0.0",
+      "effectiveDate": "2026-07-10",
+      "status": "draft",
+      "parts": ["subprocessors.md"]
+    }
+  }
+}
diff --git a/app/saas/src/main/resources/legal/sla/1.0.0/sla.md b/app/saas/src/main/resources/legal/sla/1.0.0/sla.md
new file mode 100644
index 0000000000..42271171d5
--- /dev/null
+++ b/app/saas/src/main/resources/legal/sla/1.0.0/sla.md
@@ -0,0 +1,37 @@
+# SLA Exhibit — Stirling Enterprise Agreement
+
+Referenced by the Order Form's service-level row and MSA §5.2. One document, three tiers; the Order Form's tier selection determines the applicable column. Uptime is a target, not a credited commitment: no service credits apply at any tier. Tiers differentiate support response, channels, and people.
+
+## 1. Availability
+
+For Stirling Cloud deployments, Provider targets **99.9% monthly uptime**, measured at the API and console endpoints, excluding scheduled maintenance announced at least 48 hours in advance and events beyond Provider's reasonable control. Current and historical status is published at the system status page. No service credits apply; persistent material failure to meet the target is addressed through MSA §7.1 (performance warranty and remedies) and §10 (termination for material breach).
+
+Self-hosted and Air-gapped deployments: availability of the runtime is Customer's responsibility; this Section applies to Provider's license, metering, and update services.
+
+## 2. Support tiers
+
+| | **Standard** | **Priority** | **Dedicated** |
+| --- | --- | --- | --- |
+| Included with | Every Enterprise Agreement | Every Enterprise Agreement | The Dedicated SE/CSM line item ($30,000/yr) |
+| Hours | Business hours (Mon–Fri, 9:00–18:00 US Eastern, excl. US holidays) | Business hours + extended (7:00–21:00 US Eastern) | 24×7 for Severity 1 |
+| Channels | Email, in-product | Email, in-product, private Slack/Teams channel | All Priority channels + named Solutions Engineer and CSM |
+| Severity 1 first response (production down / processing halted org-wide) | 8 business hours | 4 hours | 1 hour, 24×7 |
+| Severity 2 (major feature degraded, no workaround) | Next business day | 8 business hours | 4 hours |
+| Severity 3 (minor defect, workaround exists) | 3 business days | 2 business days | Next business day |
+| Severity 4 (question, cosmetic) | 5 business days | 3 business days | 2 business days |
+| Escalation path | Support queue | Support lead | Named SE → CSM → Provider executive |
+| Business reviews | — | — | Quarterly, where the QBR line item is elected |
+
+First response = a qualified human engaging with the issue, not an acknowledgment autoresponder. Resolution times are not committed; Provider works Severity 1 issues continuously within the tier's hours until resolved or downgraded.
+
+## 3. Severity is set by Customer, subject to reasonable reclassification
+
+Customer designates severity at filing; Provider may reclassify with explanation. Severity 1 requires production impact in a live (non-evaluation) environment.
+
+## 4. Maintenance and updates
+
+Scheduled maintenance is announced at least 48 hours ahead and targeted at low-usage windows. Security patches for supported versions ship to all tiers at no charge (MSA §5.4). Trials and evaluations are provided AS IS and are outside this Exhibit (EULA §9).
+
+## 5. Exclusions
+
+This Exhibit does not apply to: issues caused by Customer's environment, modifications, or third-party systems; usage exceeding the fair-use provisions; Preview/Beta features; or Force Majeure events (MSA §9.5).
diff --git a/app/saas/src/main/resources/legal/subprocessors/1.0.0/subprocessors.md b/app/saas/src/main/resources/legal/subprocessors/1.0.0/subprocessors.md
new file mode 100644
index 0000000000..670ae53150
--- /dev/null
+++ b/app/saas/src/main/resources/legal/subprocessors/1.0.0/subprocessors.md
@@ -0,0 +1,19 @@
+# Stirling PDF — Subprocessors
+
+Referenced by DPA §C5 and Annex III, and by EULA §8. Changes to this list carry 30 days' notice per DPA §C5. Last updated: {{version_date}}.
+
+Stirling PDF, Inc. uses the following subprocessors to provide the Services. Customer files are processed within Stirling's own infrastructure. AI features are optional and can be disabled; where they are used, AI providers receive only the document text or excerpts needed for the requested feature, never whole customer files.
+
+| Subprocessor | Purpose | Data processed | Location |
+| --- | --- | --- | --- |
+| **Amazon Web Services (AWS)** | Cloud infrastructure and storage for Stirling Cloud | Customer files (encrypted at rest), account and usage data | United States (EU region availability per deployment — see DPA §C8 note) |
+| **Stripe** | Payment processing | Billing contact and transaction data. Payment card details go directly to Stripe, which acts as an independent controller for them | United States |
+| **Supabase** | Account and workspace data infrastructure | Account, workspace, and configuration data | United States |
+| **Google** | Transactional and operational email delivery | Names, email addresses, message content of service emails | United States |
+| **Anthropic** | AI models (Claude) powering the Stirling Agent and AI-assisted features | Prompts and the document text or excerpts needed for the requested feature — never whole files; only where AI features are used | United States |
+| **Voyage AI** | Embedding models for Ingestion/RAG features | Extracted text excerpts, only where the customer enables Ingestion/RAG, solely to generate embeddings — never customer files | United States |
+| **PostHog** | Product telemetry and usage analytics | Pseudonymous usage events and diagnostic data — never file content | European Union (EU-hosted) |
+
+Neither AI provider uses customer data for model training (contractually confirmed).
+
+Self-hosted and air-gapped deployments: customer files remain in the customer's environment; Stirling receives license-validation and metering data only (process counts, file sizes, file hashes — never file names or content).
diff --git a/app/saas/src/test/java/stirling/software/saas/procurement/service/ProcurementTrialRestartPolicyTest.java b/app/saas/src/test/java/stirling/software/saas/procurement/service/ProcurementTrialRestartPolicyTest.java
new file mode 100644
index 0000000000..86f361ff87
--- /dev/null
+++ b/app/saas/src/test/java/stirling/software/saas/procurement/service/ProcurementTrialRestartPolicyTest.java
@@ -0,0 +1,44 @@
+package stirling.software.saas.procurement.service;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.saas.procurement.model.ProcurementDeal;
+
+/**
+ * Which stages may (re)start a trial is a security policy, not a convenience.
+ *
+ * <p>From the agreement stage onward a deal's {@code licenseRef} points at the committed annual
+ * licence. Starting a trial replaces it with a fresh 14-day key, rewinds the stage and resets the
+ * extension counter — so an unguarded restart would downgrade a paying customer's entitlement while
+ * Stripe kept billing them. This pins the allowed set so widening it has to be deliberate.
+ */
+class ProcurementTrialRestartPolicyTest {
+
+    @Test
+    @DisplayName("allowed before a deal exists, while exploring, and within the trial")
+    void allowsOnlyPreCommitmentStages() {
+        assertThat(ProcurementService.canStartTrial(null)).isTrue();
+        assertThat(ProcurementService.canStartTrial(ProcurementDeal.STAGE_EXPLORING)).isTrue();
+        assertThat(ProcurementService.canStartTrial(ProcurementDeal.STAGE_TRIAL)).isTrue();
+    }
+
+    @Test
+    @DisplayName("refused once the deal is quoting or beyond")
+    void refusesCommittedStages() {
+        assertThat(ProcurementService.canStartTrial(ProcurementDeal.STAGE_QUOTE)).isFalse();
+        assertThat(ProcurementService.canStartTrial(ProcurementDeal.STAGE_AGREEMENT)).isFalse();
+        assertThat(ProcurementService.canStartTrial(ProcurementDeal.STAGE_PAYMENT)).isFalse();
+        assertThat(ProcurementService.canStartTrial(ProcurementDeal.STAGE_LIVE)).isFalse();
+    }
+
+    @Test
+    @DisplayName("an unrecognised stage is refused, not waved through")
+    void refusesUnknownStages() {
+        // A stage added later, or a hand-edited row, must fail closed.
+        assertThat(ProcurementService.canStartTrial("renewal")).isFalse();
+        assertThat(ProcurementService.canStartTrial("")).isFalse();
+    }
+}
diff --git a/frontend/.storybook/a11y-baseline.json b/frontend/.storybook/a11y-baseline.json
index 10fc530c77..a31d84613b 100644
--- a/frontend/.storybook/a11y-baseline.json
+++ b/frontend/.storybook/a11y-baseline.json
@@ -1707,6 +1707,9 @@
   "editor/src/portal/components/billing/InvoicesList.stories.tsx :: Default": [
     "color-contrast"
   ],
+  "editor/src/portal/components/billing/LinkAccountPrompt.stories.tsx :: Default": [
+    "color-contrast"
+  ],
   "editor/src/portal/components/billing/PrepaidCapacityCard.stories.tsx :: Bundle Healthy": [
     "aria-progressbar-name",
     "color-contrast"
@@ -2107,22 +2110,15 @@
     "color-contrast"
   ],
   "editor/src/portal/components/procurement/ProcurementExtras.stories.tsx :: License": [
-    "aria-dialog-name"
+    "color-contrast"
   ],
   "editor/src/portal/components/procurement/ProcurementExtras.stories.tsx :: License Trial": [
-    "aria-dialog-name"
-  ],
-  "editor/src/portal/components/procurement/ProcurementExtras.stories.tsx :: Schedule Call": [
-    "aria-dialog-name"
+    "color-contrast"
   ],
   "editor/src/portal/components/procurement/ProcurementExtras.stories.tsx :: Trial Manage": [
-    "aria-dialog-name"
-  ],
-  "editor/src/portal/components/procurement/ProcurementExtras.stories.tsx :: Trial Manage Maxed": [
-    "aria-dialog-name"
+    "color-contrast"
   ],
   "editor/src/portal/components/procurement/ProcurementExtras.stories.tsx :: Trial Setup": [
-    "aria-dialog-name",
     "color-contrast"
   ],
   "editor/src/portal/components/procurement/ProcurementFlow.stories.tsx :: Default": [
@@ -2135,6 +2131,9 @@
   "editor/src/portal/components/procurement/ProcurementHome.stories.tsx :: Default": [
     "color-contrast"
   ],
+  "editor/src/portal/components/procurement/ProcurementModal.stories.tsx :: Open": [
+    "color-contrast"
+  ],
   "editor/src/portal/components/procurement/ProcurementStages.stories.tsx :: License": [
     "color-contrast"
   ],
@@ -2144,6 +2143,9 @@
   "editor/src/portal/components/procurement/ProcurementStages.stories.tsx :: License Online Only": [
     "color-contrast"
   ],
+  "editor/src/portal/components/procurement/ProcurementStages.stories.tsx :: Payment": [
+    "color-contrast"
+  ],
   "editor/src/portal/components/procurement/QuoteBuilder.stories.tsx :: Default": [
     "color-contrast"
   ],
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index bf00cfd08d..33cf0ee8e1 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -7331,13 +7331,16 @@ tagline = "Native app for Microsoft Windows"
 title = "Windows"
 
 [portal.home.editor]
-activeUsers = "{{n}} active"
-install = "Install the editor"
-invite = "Invite teammates"
-name = "Stirling PDF Editor"
+activeOfDeployed = "{{active}} of {{total}} active this month"
+name = "PDF Editor"
 open = "Open in browser"
 updated = "updated {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Finish deployment"
+options = "View deployment options"
+start = "Deploy the Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -7348,25 +7351,6 @@ afternoon = "Good afternoon"
 evening = "Good evening"
 morning = "Good morning"
 
-[portal.home.onboarding.enterprise]
-body = "Org-wide SSO + SCIM + RBAC, committed volume pricing, and air-gapped deployment."
-cta = "Start Trial"
-ctaQuote = "Get Quote"
-lead = "For 250+ employees."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Install the desktop app or self-host"
-title = "Download the editor"
-
-[portal.home.onboarding.steps.invite]
-blurb = "Bring your team into the secure workspace"
-title = "Invite teammates"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} active · {{recommended}} recommended"
-title = "Confirm your policies"
-
 [portal.infrastructure]
 manageEditorDeployment = "Manage Editor deployment"
 sectionsAriaLabel = "Infrastructure sections"
@@ -7767,6 +7751,12 @@ pipelines = "Pipelines"
 policies = "Policies"
 sources = "Sources"
 
+[portal.legal]
+draft = "{{label}} · draft"
+loadError = "Could not load this document. Please try again."
+loading = "Loading…"
+title = "Legal document"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Components"
@@ -8430,19 +8420,27 @@ email = "Email intake"
 subtitle = "Get your team evaluated, contracted, and onboarded. Every document in one place."
 title = "Procurement"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Pay now"
-request = "Request"
-sign = "Review & sign"
-upload = "Upload"
-
 [portal.procurement.agreement]
-agreeCta = "Agree & subscribe"
-confirm = "I have read and agree to the Stirling Enterprise Agreement."
-eyebrow = "Agreement"
-intro = "One combined agreement covers your deal: Master Service Agreement, Order Form, EULA, and Data Processing Agreement. Review it, then agree to accept the quote into a committed subscription."
-title = "Review your enterprise agreement"
+agreeCta = "Sign agreement"
+confidential = "Confidential"
+confirm = "I have read and agree to this Agreement, and I represent that I am authorized to sign it on behalf of the organization named above."
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA and DPA, combined into one signature."
+download = "Download"
+downloadDraftError = "Could not generate the agreement PDF - the document renderer is unavailable. Please try again shortly or contact support."
+downloadError = "Could not download the signed agreement. Please try again."
+legalName = "Legal entity name"
+legalNamePlaceholder = "The legal entity that will sign"
+loadError = "Could not load the agreement. Please try again."
+loading = "Loading the agreement..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Request changes"
+scrollHint = "Scroll to review"
+signatory = "Signatory name"
+signatoryPlaceholder = "Full name"
+signatoryTitle = "Signatory title"
+signatoryTitlePlaceholder = "e.g. General Counsel"
+signError = "Could not record your signature. Please try again."
 
 [portal.procurement.builder]
 addons = "Add-ons"
@@ -8455,16 +8453,19 @@ businessName = "Business name"
 businessNamePlaceholder = "Your company"
 city = "City"
 cityPlaceholder = "San Francisco"
+completeRequired = "Please complete the required fields (marked *) with a valid email before generating the quote."
 contactEmail = "Contact email"
 contactEmailPlaceholder = "jane@acme.com"
 contactName = "Contact name"
 contactNamePlaceholder = "Jane Doe"
 continue = "Continue"
+done = "Done"
 eula = "I have read and agree to the Stirling Enterprise EULA. It governs the agreement generated from this quote."
 generate = "Generate quote"
-included = "Included"
-indemnification = "IP indemnification"
-indemnificationSub = "We defend qualifying IP claims, per the EULA"
+indemnification = "Enhanced IP Protection"
+indemnificationSub = "Extends our IP defense to patent claims. Baseline copyright, trademark and trade-secret indemnification is included free."
+paperEyebrow = "Enterprise quote"
+paperFor = "Prepared for"
 pdfSize = "PDF size"
 poNumber = "PO number"
 poNumberPlaceholder = "Optional"
@@ -8512,6 +8513,7 @@ training = "Onboarding & training"
 trainingSub = "Live sessions to get your team running"
 users = "Total users"
 usersPlaceholder = "e.g. 250"
+viewEula = "Read it"
 volEstimated = "Estimated from {{count}} users (~2,000 PDFs each, including automation). Edit if you know better."
 volManual = "Using your figure. Re-estimate from your team size any time."
 volNoUsers = "Not sure? Enter your team size and we'll estimate it."
@@ -8520,54 +8522,55 @@ volumePlaceholder = "e.g. 1,000,000"
 years_one = "{{count}} year"
 years_other = "{{count}} years"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Done"
-here = "You're here"
-hide = "Hide"
-optional = "Optional"
-paidAddon = "Paid add-on"
-show = "Show"
-subtitle = "Everything you need at each step of the journey, surfaced as the deal moves through it."
-supportingSubtitle = "SOC 2, security reviews, tax forms and more, ready when your security or procurement team asks. Some carry a one-time fee."
-supportingTitle = "Supporting your evaluation"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form and DPA in one signature."
+download = "Download"
+eula = "EULA & Commercial Terms"
+eulaSub = "The software and self-serve commercial terms."
+invoice = "Invoice"
+invoiceSub = "Your first subscription invoice."
+laterInvoice = "Available after you accept"
+laterQuote = "Available once your quote is issued"
+quote = "Quote"
+quoteSub = "Your itemised enterprise quote."
+sla = "SLA Exhibit"
+slaSub = "Support tiers and response targets."
+subprocessors = "Subprocessors"
+subprocessorsSub = "Third parties that process data on your behalf."
+subtitle = "Your deal paperwork, available any time."
 title = "Documents"
-upcoming = "Upcoming"
+view = "View"
 
 [portal.procurement.error]
 title = "Something went wrong"
 
 [portal.procurement.hero]
-company = "Your enterprise deal"
-ctaLive = "You're live"
-ctaPayment = "Add payment"
+barAria = "Stage {{current}} of {{total}}"
+ctaAgreement = "Review & sign agreement"
+ctaExploring = "Set up your trial"
 ctaQuote = "Review your quote"
+ctaReviewQuote = "Review quote"
 ctaTrial = "Build your quote"
-eyebrow = "Enterprise procurement"
+documents = "Documents"
+eyebrow = "Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Invite teammates"
 licenseKey = "Licence key"
-nextStep = "Next step: {{action}}"
-notStarted = "Not started"
+liveSub = "Your organization is provisioned and your licence is active."
+liveTitle = "You are live on Stirling Enterprise"
+next = "Next: {{stage}}"
 open = "Open procurement"
 scheduleCall = "Schedule a call"
-setup1Sub = "Invite your teammates"
-setup1Title = "Deploy the PDF Editor"
-setup2Sub = "Turn on processing across editors and other sources"
-setup2Title = "Connect the PDF Processor"
-setup3Sub = "Turn on Security, Compliance, Routing, or Retention when you need them"
-setup3Title = "Add recommended policies"
+sentenceAgreement = "review and sign the agreement"
+sentenceLive = "provisioning and rollout"
+sentencePayment = "purchase order and payment"
+sentenceQuote = "review and accept your quote"
+sentenceTrial = "set up your trial workspace"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} day left"
 daysLeft_other = "{{count}} days left"
-engineerLabel = "Your solutions engineer"
-eyebrow = "Your rollout"
-live = "You're live on Stirling Enterprise"
-nextStep = "Next step: {{action}}"
-subtitle = "Your solutions engineer is on every step. One next action at a time; the full checklist is below."
-title = "From trial to live, one guided path"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "One signature covers MSA, order form, EULA and DPA."
@@ -8616,45 +8619,26 @@ description = "Your subscription is active and your licence is issued. Your team
 eyebrow = "Live"
 title = "You're live on Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Trial keys, committed-volume quotes, the one-signature agreement, payment, and your document ledger all live here once you start an enterprise evaluation."
-eyebrow = "Enterprise only"
-talkToSales = "Talk to sales"
-title = "The procurement track opens with Enterprise"
-
 [portal.procurement.milestone]
-download = "Download PDF"
 downloadError = "Could not download the quote PDF just yet — please try again in a moment."
-edit = "Edit quote"
-
-[portal.procurement.modal]
-cancel = "Cancel"
-chooseFile = "Choose file"
-close = "Close"
-downloadBody = "Your download will begin shortly."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "No file selected"
-payBody = "Pay your committed contract by card or bank transfer through Stripe. Your workspace provisions as soon as payment clears."
-payCta = "Continue to Stripe"
-payTitle = "Confirm payment"
-requestBodyFree = "We generate this on demand. Confirm and your solutions engineer will send it across shortly."
-requestBodyPaid = "This is a paid add-on. Confirm and your solutions engineer will scope it and send the paperwork."
-requestCta = "Request"
-requestTitle = "Request this document"
-signBody = "Opens the Stirling Enterprise Agreement for e-signature: one signature covers the MSA, order form, EULA and DPA. We countersign automatically and you advance to payment."
-signCta = "Open for signature"
-signTitle = "Review and sign your agreement"
-uploadBody = "Send us your PO and we invoice against it on your terms. Drag in the PDF or pick a file below."
-uploadCta = "Upload purchase order"
-uploadTitle = "Upload your purchase order"
 
 [portal.procurement.payment]
 description = "Your quote is accepted and your licence is already active — your team can start right away. Pay the first invoice when you're ready; you can pay or download it here, no email needed."
+downloadAgreement = "Download signed agreement"
 downloadInvoice = "Download invoice"
+eyebrow = "Payment"
 title = "Subscription created"
 viewInvoice = "View & pay invoice"
 
+[portal.procurement.review]
+acceptCta = "Accept quote"
+annual = "Annual fee (year 1)"
+downloadCta = "Download quote"
+poNumber = "Purchase order: {{po}}"
+renewal = "Renews at {{amount}}/year after the term (+{{pct}}% CPI)"
+tcv = "{{years}}-year term, paid in full up front: {{tcv}}"
+validUntil = "Valid until {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Couldn't load the scheduler."
 fallbackLink = "Open scheduling in a new tab"
@@ -8664,25 +8648,33 @@ title = "Schedule a call"
 
 [portal.procurement.setup]
 airgap = "Air-gapped"
-airgapSub = "Fully offline, isolated network. Includes a downloadable licence file."
-cloud = "Cloud"
-cloudSub = "Fully managed by Stirling. Nothing for you to run."
-deployment = "Where will you run Stirling?"
-seats = "Team size"
-seatsHint = "Roughly how many people will use it. You can refine this when you build your quote."
-seatsPlaceholder = "e.g. 250"
+airgapSub = "Sealed, no outbound"
+back = "Back"
+businessName = "Business name"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Managed, fastest start"
+continue = "Continue"
+deployment = "Where should it deploy?"
+eula = "I agree to the Stirling EULA & Commercial Terms."
+fullName = "Full name"
+fullNamePlaceholder = "Your name"
+invites = "Invite teammates · optional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Schedule a call"
+seats = "People testing"
+seatsPlaceholder = "e.g. 15"
 selfhost = "Self-hosted"
-selfhostSub = "Run it in your own cloud or data centre."
+selfhostSub = "Docker or Kubernetes"
 start = "Start trial"
-subtitle = "Tell us how you plan to run Stirling so we can tailor your trial and quote. No card required."
+stepOf = "Step {{n}} of {{total}}"
+subtitle = "Free for 14 days, no card required."
+subtitleDetails = "A few details for your quote and agreement."
+talkFirst = "Prefer to talk first?"
 title = "Set up your trial"
-
-[portal.procurement.status]
-action = "Action needed"
-available = "Available"
-complete = "Complete"
-pending = "Pending"
-request = "On request"
+viewEula = "Read it"
+workEmail = "Work email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Extending adds 7 days and notifies your solutions engineer."
@@ -8693,12 +8685,6 @@ maxed = "Maxed out"
 subtitle = "Your free trial runs through {{date}}. No card required."
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Committed volume pricing, org-wide SSO + SCIM + RBAC, 90-day immutable audit, and a dedicated SE."
-homeCta = "Start Trial →"
-homeHeadline = "Process millions of PDFs."
-
 [portal.search]
 ariaLabel = "Search"
 placeholder = "Search Stirling — endpoints, pipelines, docs…"
@@ -8923,6 +8909,9 @@ name = "Name"
 namePlaceholder = "e.g. Claims intake"
 type = "Type"
 
+[portal.stepModal]
+close = "Close"
+
 [portal.usage]
 managePayment = "Manage Payment"
 subtitle = "Consumption, invoices, and plan management for every PDF Stirling has billed, in one console."
@@ -8985,14 +8974,6 @@ summary = "Owns a team — manages its members' resources and shared configs."
 limited = "{{used}} / {{limit}}"
 unlimited = "{{used}} · Unlimited"
 
-[portal.welcome]
-ariaLabel = "Welcome to Stirling PDF"
-install = "Install the editor"
-invite = "Invite teammates"
-openInBrowser = "Open in browser"
-productName = "PDF Editor"
-stats = "30M downloads · 60+ PDF operations · Free forever"
-
 [printFile]
 title = "Print File"
 
diff --git a/frontend/editor/src/portal/ViewRouter.tsx b/frontend/editor/src/portal/ViewRouter.tsx
index 76adc1ad1d..8e77c20830 100644
--- a/frontend/editor/src/portal/ViewRouter.tsx
+++ b/frontend/editor/src/portal/ViewRouter.tsx
@@ -11,7 +11,6 @@ import { Policies } from "@portal/views/Policies";
 import { EditorAdmin } from "@portal/views/EditorAdmin";
 import { Infrastructure } from "@portal/views/Infrastructure";
 import { PortalBillingGate } from "@portal/components/billing/PortalBillingGate";
-import { Procurement } from "@portal/views/Procurement";
 import { VIEW_PATHS, toPortalPath } from "@portal/contexts/ViewContext";
 
 // Lazy so the generated docs manifest (bundled JSON) lands in its own chunk.
@@ -62,7 +61,6 @@ export function ViewRouter() {
         element={<Infrastructure />}
       />
       <Route path={rel(VIEW_PATHS.usage)} element={<PortalBillingGate />} />
-      <Route path={rel(VIEW_PATHS.procurement)} element={<Procurement />} />
       <Route
         path={rel(VIEW_PATHS.docs)}
         element={
diff --git a/frontend/editor/src/portal/api/externalUrl.test.ts b/frontend/editor/src/portal/api/externalUrl.test.ts
new file mode 100644
index 0000000000..66b88d4987
--- /dev/null
+++ b/frontend/editor/src/portal/api/externalUrl.test.ts
@@ -0,0 +1,51 @@
+import { describe, expect, it, vi, afterEach } from "vitest";
+import { openApiUrl } from "@portal/api/externalUrl";
+
+function spyOpen() {
+  return vi.spyOn(window, "open").mockImplementation(() => null);
+}
+
+afterEach(() => vi.restoreAllMocks());
+
+describe("openApiUrl", () => {
+  it("opens an https URL in a new tab with noopener", () => {
+    const open = spyOpen();
+    openApiUrl("https://invoice.stripe.com/i/abc123");
+    expect(open).toHaveBeenCalledWith(
+      "https://invoice.stripe.com/i/abc123",
+      "_blank",
+      "noopener,noreferrer",
+    );
+  });
+
+  it("opens a relative URL by resolving it against the origin", () => {
+    const open = spyOpen();
+    openApiUrl("/invoices/abc.pdf");
+    expect(open).toHaveBeenCalledWith(
+      `${window.location.origin}/invoices/abc.pdf`,
+      "_blank",
+      "noopener,noreferrer",
+    );
+  });
+
+  // The reason this module exists: a navigation sink must not evaluate script.
+  it.each([
+    "javascript:alert(document.domain)",
+    "JavaScript:alert(1)",
+    "data:text/html,<script>alert(1)</script>",
+    "vbscript:msgbox(1)",
+    "file:///etc/passwd",
+  ])("refuses %s", (hostile) => {
+    const open = spyOpen();
+    openApiUrl(hostile);
+    expect(open).not.toHaveBeenCalled();
+  });
+
+  it("does nothing for an empty or missing URL", () => {
+    const open = spyOpen();
+    openApiUrl(null);
+    openApiUrl(undefined);
+    openApiUrl("");
+    expect(open).not.toHaveBeenCalled();
+  });
+});
diff --git a/frontend/editor/src/portal/api/externalUrl.ts b/frontend/editor/src/portal/api/externalUrl.ts
new file mode 100644
index 0000000000..10919e1544
--- /dev/null
+++ b/frontend/editor/src/portal/api/externalUrl.ts
@@ -0,0 +1,25 @@
+/**
+ * Open a URL that arrived from the API — a Stripe hosted-invoice page or invoice
+ * PDF — in a new tab, after checking its scheme.
+ *
+ * These values are relayed from Stripe through our own edge functions, so they
+ * are not attacker-controlled today. But a `javascript:` or `data:` URL reaching
+ * a navigation sink is an XSS primitive, and nothing between Stripe and this call
+ * promises the field can only ever hold a web address. Anything that is not plain
+ * http(s) is dropped instead of opened.
+ */
+export function openApiUrl(url: string | null | undefined): void {
+  if (!url) return;
+  let parsed: URL;
+  try {
+    parsed = new URL(url, window.location.origin);
+  } catch {
+    console.warn("[portal] refusing to open an unparseable URL");
+    return;
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    console.warn(`[portal] refusing to open a ${parsed.protocol} URL`);
+    return;
+  }
+  window.open(parsed.href, "_blank", "noopener,noreferrer");
+}
diff --git a/frontend/editor/src/portal/api/procurement.ts b/frontend/editor/src/portal/api/procurement.ts
index 4d8a28e057..b49de2f6b6 100644
--- a/frontend/editor/src/portal/api/procurement.ts
+++ b/frontend/editor/src/portal/api/procurement.ts
@@ -1,12 +1,12 @@
 import { apiClient } from "@portal/api/http";
+import { resolveDemoResponse } from "@portal/api/demoData";
+import { saasApiBase } from "@portal/api/saasApiBase";
 import { getSupabaseClient } from "@app/auth/supabase/supabaseClient";
-import type { Tier } from "@portal/contexts/TierContext";
 
 /*
- * Procurement models the enterprise commercial journey, trial → quote →
- * agreement → payment → implementation, plus the paperwork ledger that rides
- * alongside it. The journey is enterprise-only; free/pro tiers receive a
- * minimal locked payload the view renders as an upgrade prompt.
+ * Procurement models the enterprise commercial journey: trial → quote → agreement → payment →
+ * implementation. It is surfaced by the deal-status hero on Home and the takeover flow beside it;
+ * there is no separate procurement route.
  */
 
 /* ──────────────────────────────────────────────────────────────────────── */
@@ -19,11 +19,8 @@ import type { Tier } from "@portal/contexts/TierContext";
  * Payment read more plainly than the internal `security` / `procurement`).
  */
 export type DealStage =
-  | "trial"
-  | "quote"
-  | "security"
-  | "procurement"
-  | "active";
+  /** Asked about enterprise, nothing committed yet. Precedes the journey rather than joining it. */
+  "exploring" | "trial" | "quote" | "security" | "procurement" | "active";
 
 export interface JourneyStep {
   stage: DealStage;
@@ -38,9 +35,14 @@ export interface JourneyStep {
   gatingAction: string;
 }
 
-/** Ordered journey definition, the stepper renders this verbatim. */
-/** `label`/`blurb`/`gatingAction` values are i18n keys — render with t(). */
-export const JOURNEY: JourneyStep[] = [
+/**
+ * The commercial flow's stages, rendered verbatim as the hero's progress band. Quote and Agreement
+ * are distinct: the buyer accepts the quote first (no Stripe), then signs the agreement, which is
+ * what accepts into a committed subscription.
+ *
+ * <p>`label`/`blurb`/`gatingAction` are i18n keys — render with t().
+ */
+export const FLOW_JOURNEY: JourneyStep[] = [
   {
     stage: "trial",
     label: "portal.procurement.journeySteps.trial.label",
@@ -73,204 +75,9 @@ export const JOURNEY: JourneyStep[] = [
   },
 ];
 
-/**
- * The commercial flow's stepper stages. The real backend collapses quote + agreement into one
- * accept step (accepting the issued quote is accepting the agreement), so the flow shows one fewer
- * step than the mock ledger's {@link JOURNEY} — the separate "Agreement" step is dropped. Reuses
- * JOURNEY's i18n keys.
- */
-export const FLOW_JOURNEY: JourneyStep[] = JOURNEY.filter(
-  (s) => s.stage !== "security",
-);
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Deal header                                                              */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-export interface SolutionsEngineer {
-  name: string;
-  title: string;
-  email: string;
-}
-
-export interface TrialInfo {
-  /** License key seeded for the evaluation. */
-  key: string;
-  /** ISO date the trial began. */
-  startedOn: string;
-  /** ISO date the trial expires. */
-  endsOn: string;
-  /** Whole days remaining (derived in the fixture for a stable demo number). */
-  daysLeft: number;
-  extensionsUsed: number;
-  maxExtensions: number;
-}
-
-export interface QuoteInfo {
-  number: string;
-  /** Annual contract value, in USD. */
-  amount: number;
-  /** Contract term, e.g. "12 months". */
-  term: string;
-  /** ISO date the quote expires. */
-  validUntil: string;
-}
-
-export interface Deal {
-  company: string;
-  currentStage: DealStage;
-  engineer: SolutionsEngineer;
-  trial: TrialInfo;
-  quote: QuoteInfo;
-}
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Document ledger + supporting pool                                        */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-/**
- * Lifecycle of a single document.
- *   available: ready to grab now (download/sign/pay/upload as the action says)
- *   action:   waiting on the buyer to act (the gating paperwork of a stage)
- *   pending:  issued, awaiting the other side / a system step
- *   request:  not generated yet; the buyer asks for it (some carry a fee)
- *   complete: done, kept for the record
- */
-export type DocStatus =
-  | "available"
-  | "action"
-  | "pending"
-  | "request"
-  | "complete";
-
-/** What pressing the document's button does. */
-export type DocAction = "download" | "sign" | "pay" | "upload" | "request";
-
-export interface LedgerDoc {
-  id: string;
-  name: string;
-  /** Sub-line describing what the document is / what it covers. */
-  sub: string;
-  status: DocStatus;
-  action: DocAction;
-  /** Buyer-skippable paperwork (e.g. paid onboarding). */
-  optional?: boolean;
-  /** One-off fee in USD when the document/service is a paid add-on. */
-  fee?: number;
-}
-
-/** Document ledger grouped by the journey stage the paperwork belongs to. */
-export interface LedgerGroup {
-  stage: DealStage;
-  /** Buyer-facing stage name (matches JourneyStep.label). */
-  label: string;
-  docs: LedgerDoc[];
-}
-
-/** Categories the stage-agnostic supporting pool is grouped under. */
-export type SupportingCategory =
-  | "security"
-  | "legal"
-  | "corporate"
-  | "procurement";
-
-export interface SupportingGroup {
-  category: SupportingCategory;
-  label: string;
-  docs: LedgerDoc[];
-}
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Full procurement payload                                                 */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-export interface ProcurementResponse {
-  tier: Tier;
-  /** True only for enterprise, gates the whole journey + ledger. */
-  unlocked: boolean;
-  /** Present only when unlocked. */
-  deal: Deal | null;
-  journey: JourneyStep[];
-  ledger: LedgerGroup[];
-  supporting: SupportingGroup[];
-}
-
-/** GET /v1/procurement?tier=…, the deal, journey, ledger and supporting pool. */
-export async function fetchProcurement(
-  tier: Tier,
-): Promise<ProcurementResponse> {
-  return apiClient.local.json<ProcurementResponse>(
-    `/v1/procurement?tier=${encodeURIComponent(tier)}`,
-  );
-}
-
-/*
- * Commercial actions. Each mutates the deal server-side and returns the updated
- * ProcurementResponse, the new canonical state, which the view applies so the
- * journey progresses. The MSW layer answers these today; a real backend honours
- * the same contracts unchanged.
- */
-
-/** Advance the deal to the next stage (the journey's primary CTA). */
-export async function advanceStage(
-  fromStage: DealStage,
-): Promise<ProcurementResponse> {
-  return apiClient.local.json<ProcurementResponse>("/v1/procurement/advance", {
-    method: "POST",
-    body: { fromStage },
-  });
-}
-
-/** Sign the Stirling Enterprise Agreement (MSA + order form + EULA + DPA). */
-export async function signAgreement(
-  docId: string,
-): Promise<ProcurementResponse> {
-  // A real backend opens an e-signature envelope and completes on callback;
-  // here it completes immediately and advances the deal.
-  return apiClient.local.json<ProcurementResponse>("/v1/procurement/sign", {
-    method: "POST",
-    body: { docId },
-  });
-}
-
-/** Pay the contract online (card / bank transfer via Stripe). */
-export async function payOnline(): Promise<ProcurementResponse> {
-  return apiClient.local.json<ProcurementResponse>("/v1/procurement/pay", {
-    method: "POST",
-  });
-}
-
-/** Upload a purchase order to invoice against (an alternate payment path). */
-export async function uploadPurchaseOrder(
-  file: File,
-): Promise<ProcurementResponse> {
-  // A real backend takes the PO as multipart; the mock only needs the name.
-  return apiClient.local.json<ProcurementResponse>(
-    "/v1/procurement/purchase-order",
-    {
-      method: "POST",
-      body: { fileName: file.name },
-    },
-  );
-}
-
-/** Request a document that is generated on demand (some carry a one-off fee). */
-export async function requestDocument(
-  docId: string,
-  action: DocAction,
-): Promise<ProcurementResponse> {
-  return apiClient.local.json<ProcurementResponse>(
-    `/v1/procurement/documents/${encodeURIComponent(docId)}/request`,
-    { method: "POST", body: { action } },
-  );
-}
-
 // ============================================================================
-// Enterprise procurement — real SaaS backend (/api/v1/procurement).
-//
-// The journey/ledger visuals above still ride the MSW mock; the commercial spine
-// below (trial, server-priced quote, accept -> Stripe checkout) is the real thing,
-// served by the saas Java backend and gated on a linked account.
+// Enterprise procurement — the real SaaS backend (/api/v1/procurement): trial,
+// server-priced quote, agreement, accept -> Stripe. Gated on a linked account.
 // ============================================================================
 
 export type QuoteLineItemKind =
@@ -288,7 +95,11 @@ export interface QuoteLineItem {
 
 export interface QuoteResult {
   quoteId: number;
-  quoteNumber: string;
+  /**
+   * Stripe's quote number — the deal's one reference, shown on the quote, the agreement and the
+   * invoice. Null while the quote is a local draft: Stripe assigns it only at finalisation.
+   */
+  quoteNumber: string | null;
   /** draft (priced, editable) | sent (issued Stripe quote — PDF + shareable) | accepted | expired. */
   status: string;
   currency: string;
@@ -332,6 +143,12 @@ export interface ProcurementSnapshot {
   licensed: boolean;
   /** The team's Keygen licence key (present once licensed); shown in the portal to copy/install. */
   licenseKey: string | null;
+  /** Version label of the signed agreement PDF available to download (e.g. "SEA v0.9.1"), else null. */
+  agreementSignedVersion: string | null;
+  /** Buying entity captured at trial setup; null on deals started before that step existed. */
+  businessName: string | null;
+  contactName: string | null;
+  contactEmail: string | null;
   latestQuote: QuoteResult | null;
 }
 
@@ -385,13 +202,37 @@ export function fetchLicenseFile(): Promise<string> {
  * Start the trial with the buyer's chosen deployment target and seat count (captured in the setup
  * step). These seed the quote builder; both remain editable when the quote is built.
  */
+/** Details collected by trial setup's second step; every field optional server-side. */
+export interface TrialSetupDetails {
+  businessName?: string;
+  contactName?: string;
+  contactEmail?: string;
+  /**
+   * Raw comma/space/semicolon separated addresses. Recorded on the deal AND sent through the
+   * team-invite path once the trial starts; a rejected address is skipped, never fatal.
+   */
+  inviteEmails?: string;
+}
+
 export function startTrial(
   deployment: string,
   seats: number,
+  details?: TrialSetupDetails,
 ): Promise<ProcurementSnapshot> {
   return apiClient.saas.json<ProcurementSnapshot>(
     "/api/v1/procurement/trial/start",
-    { method: "POST", body: { deployment, users: seats } },
+    { method: "POST", body: { deployment, users: seats, ...details } },
+  );
+}
+
+/**
+ * Record that this account is looking at enterprise. Idempotent, and never disturbs an existing
+ * deal — so it is safe to call on every entry into the flow.
+ */
+export function recordInterest(): Promise<ProcurementSnapshot> {
+  return apiClient.saas.json<ProcurementSnapshot>(
+    "/api/v1/procurement/interest",
+    { method: "POST" },
   );
 }
 
@@ -418,12 +259,114 @@ export function buildQuote(cfg: QuoteConfigInput): Promise<QuoteResult> {
   });
 }
 
+/** The filled enterprise agreement (MSA + Order Form + DPA) for the current quote, as markdown. */
+export interface AgreementDocument {
+  docId: string;
+  version: string;
+  /** e.g. "SEA v0.9.1" — the exact document version a signature will be pinned to. */
+  versionLabel: string;
+  displayName: string;
+  effectiveDate: string;
+  /** "draft" until counsel clears it — the UI badges drafts. */
+  status: string;
+  markdown: string;
+}
+
+/** Buyer-supplied signing inputs captured on the agreement stage. */
+export interface SignAgreementInput {
+  customerLegalName: string;
+  signatoryName: string;
+  signatoryTitle: string;
+  authorityConfirmed: boolean;
+}
+
+export interface SignAgreementResult {
+  signatureId: number;
+  versionLabel: string;
+  /** Whether the signed PDF was rendered + stored (false when the render runtime was unavailable). */
+  pdfStored: boolean;
+}
+
+/** Fetch the filled agreement to review before signing. */
+export function fetchAgreementDocument(): Promise<AgreementDocument> {
+  return apiClient.saas.json<AgreementDocument>(
+    "/api/v1/procurement/agreement/document",
+  );
+}
+
+/** Record the signed agreement (pins version + hash + variable snapshot + signatory + PDF). */
+export function recordAgreementSignature(
+  input: SignAgreementInput,
+): Promise<SignAgreementResult> {
+  return apiClient.saas.json<SignAgreementResult>(
+    "/api/v1/procurement/agreement/sign",
+    { method: "POST", body: input },
+  );
+}
+
+/** Fetch a static legal document (eula, sla, subprocessors) by id for in-product viewing. */
+export function fetchLegalDocument(docId: string): Promise<AgreementDocument> {
+  return apiClient.saas.json<AgreementDocument>(`/api/v1/legal/${docId}`);
+}
+
+/** Download the stored, signed enterprise-agreement PDF for the team (post-signing). */
+export function fetchSignedAgreementPdf(): Promise<Blob> {
+  return apiClient.saas.blob("/api/v1/procurement/agreement/signature/pdf");
+}
+
+/** Download the current (unsigned) enterprise-agreement PDF — the document shown at the sign step. */
+export function fetchAgreementPdf(): Promise<Blob> {
+  return apiClient.saas.blob("/api/v1/procurement/agreement/document/pdf");
+}
+
+/**
+ * Record a clickwrap consent to a legal document (e.g. the EULA at trial start / quote generation).
+ * Best-effort — never block the flow it accompanies on a consent-logging failure.
+ */
+export function recordLegalConsent(
+  documentId: string,
+  context: string,
+): Promise<void> {
+  return apiClient.saas
+    .json<void>("/api/v1/legal/consent", {
+      method: "POST",
+      body: { documentId, context },
+    })
+    .catch(() => undefined);
+}
+
 // ---- Stripe Quote operations (Supabase edge functions) ---------------------
 // Java has no Stripe SDK, so issuing/accepting the quote and fetching its PDF run in edge functions
 // that own Stripe; they persist results back through SECURITY DEFINER RPCs. The portal invokes them
 // directly (same pattern the PAYG checkout uses).
 
+/**
+ * Fixture response for an edge function while demo data is on.
+ *
+ * These calls go out through the Supabase client rather than {@code apiClient}, which is where demo
+ * data is normally intercepted — so until this existed they were never mocked. The portal has no
+ * service worker: the MSW handlers are matched by URL inside {@link resolveDemoResponse}, so the URL
+ * has to be reconstructed here to match what mocks/handlers/procurementSaas.ts registers.
+ *
+ * This mattered rather more than a missing fixture: issue and accept create a real Stripe Quote and a
+ * real committed subscription. With a live session — the normal state when developing against the
+ * shared project — pressing "Generate quote" in dev billed nothing but left real objects behind.
+ */
+async function demoEdgeResponse(
+  fn: string,
+  quoteId: number,
+): Promise<Response | undefined> {
+  const base = saasApiBase();
+  if (!base) return undefined;
+  return resolveDemoResponse(new URL(`${base}/functions/v1/${fn}`), {
+    method: "POST",
+    body: { quote_id: quoteId },
+  });
+}
+
 async function invokeEdge<T>(fn: string, quoteId: number): Promise<T> {
+  const demo = await demoEdgeResponse(fn, quoteId);
+  if (demo) return (await demo.json()) as T;
   const supabase = getSupabaseClient();
   if (!supabase) throw new Error("No SaaS session");
   const { data, error } = await supabase.functions.invoke<T>(fn, {
@@ -446,6 +389,8 @@ export function acceptQuote(quoteId: number): Promise<AcceptResult> {
 
 /** Fetch the Stripe-generated quote PDF as a blob (for download / share). */
 export async function fetchQuotePdf(quoteId: number): Promise<Blob> {
+  const demo = await demoEdgeResponse("get-procurement-quote-pdf", quoteId);
+  if (demo) return await demo.blob();
   const supabase = getSupabaseClient();
   if (!supabase) throw new Error("No SaaS session");
   const { data, error } = await supabase.functions.invoke<Blob>(
diff --git a/frontend/editor/src/portal/components/EditorStatusCard.css b/frontend/editor/src/portal/components/EditorStatusCard.css
index e71a50bac3..692d08adc3 100644
--- a/frontend/editor/src/portal/components/EditorStatusCard.css
+++ b/frontend/editor/src/portal/components/EditorStatusCard.css
@@ -13,20 +13,18 @@
 .portal-editor-hero__row {
   display: flex;
   align-items: center;
-  gap: 1.25rem;
-  padding: 1rem 1.25rem;
-  background: color-mix(in srgb, var(--c-primary) 22%, var(--c-hero-dark));
+  gap: 0.75rem;
+  padding: 0.625rem 0.875rem;
+  background: var(--c-surface);
 }
 
 .portal-editor-hero__logo {
-  width: 3.5rem;
-  height: 3.5rem;
-  border-radius: 0.875rem;
+  width: 2rem;
+  height: 2rem;
+  border-radius: 0.5rem;
   overflow: hidden;
   flex-shrink: 0;
-  box-shadow:
-    0 2px 8px rgba(0, 0, 0, 0.1),
-    0 0 0 1px rgba(0, 0, 0, 0.06);
+  box-shadow: var(--shadow-sm);
 }
 .portal-editor-hero__mark {
   width: 100%;
@@ -39,7 +37,7 @@
   min-width: 0;
   display: flex;
   flex-direction: column;
-  gap: 0.5rem;
+  gap: 0.25rem;
 }
 
 .portal-editor-hero__title-row {
@@ -50,31 +48,36 @@
 }
 
 .portal-editor-hero__name {
-  font-size: 1.125rem;
+  font-size: 0.9375rem;
   font-weight: 700;
-  color: #fff;
+  color: var(--c-text);
   margin-right: 0.125rem;
 }
 
-.portal-editor-hero__chip {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.3125rem;
-  padding: 0.25rem 0.6875rem;
-  border-radius: var(--radius-pill);
-  border: 1px solid rgba(255, 255, 255, 0.16);
-  background: rgba(255, 255, 255, 0.08);
-  color: rgba(255, 255, 255, 0.85);
-  font-size: 0.71875rem;
-  font-weight: 600;
-  cursor: pointer;
-  transition: background var(--motion-fast);
+/* The deployment host, sat inline with the name as the rail's subject. */
+.portal-editor-hero__host {
+  font-family: var(--font-mono);
+  font-size: 0.8125rem;
+  font-weight: 500;
+  color: var(--c-text-muted);
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
 }
-.portal-editor-hero__chip:hover {
-  background: rgba(255, 255, 255, 0.16);
+
+/* Quiet separator between the host and the adoption count. */
+.portal-editor-hero__dot {
+  width: 0.3125rem;
+  height: 0.3125rem;
+  border-radius: 999px;
+  background: var(--c-border);
+  flex-shrink: 0;
 }
-.portal-editor-hero__chip svg {
-  color: rgba(255, 255, 255, 0.6);
+
+.portal-editor-hero__actives {
+  font-size: 0.75rem;
+  color: var(--c-text-muted);
+  white-space: nowrap;
 }
 
 .portal-editor-hero__meta {
@@ -83,15 +86,10 @@
   gap: 0.5rem;
   flex-wrap: wrap;
   font-size: 0.75rem;
-  color: rgba(255, 255, 255, 0.5);
-}
-.portal-editor-hero__host {
-  color: rgba(255, 255, 255, 0.92);
-  font-family: var(--font-mono);
-  font-weight: 500;
+  color: var(--c-text-subtle);
 }
 .portal-editor-hero__meta-sep {
-  color: rgba(255, 255, 255, 0.3);
+  color: var(--c-border);
 }
 
 .portal-editor-hero__action {
@@ -101,35 +99,6 @@
   gap: 0.5rem;
 }
 
-/* Icon-only actions (e.g. install) on the dark header. */
-.portal-editor-hero__icon-btn {
-  display: grid;
-  place-items: center;
-  width: 2.25rem;
-  height: 2.25rem;
-  flex-shrink: 0;
-  border-radius: var(--radius-md);
-  border: 1px solid rgba(255, 255, 255, 0.16);
-  background: rgba(255, 255, 255, 0.08);
-  color: #fff;
-  cursor: pointer;
-  transition: background var(--motion-fast);
-}
-.portal-editor-hero__icon-btn:hover {
-  background: rgba(255, 255, 255, 0.16);
-}
-
-/* White CTA on the dark header, matching the marketing card. */
-.portal-editor-hero__action .portal-editor-hero__cta.sui-btn {
-  background: #ffffff;
-  border-color: #ffffff;
-  color: var(--c-hero-dark-cta-text);
-}
-.portal-editor-hero__action .portal-editor-hero__cta.sui-btn:hover {
-  background: rgba(255, 255, 255, 0.88);
-  border-color: rgba(255, 255, 255, 0.88);
-}
-
 @media (max-width: 48rem) {
   .portal-editor-hero__row {
     flex-wrap: wrap;
diff --git a/frontend/editor/src/portal/components/EditorStatusCard.stories.tsx b/frontend/editor/src/portal/components/EditorStatusCard.stories.tsx
index 9e73983026..144ded6dc4 100644
--- a/frontend/editor/src/portal/components/EditorStatusCard.stories.tsx
+++ b/frontend/editor/src/portal/components/EditorStatusCard.stories.tsx
@@ -1,19 +1,6 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
 import { http, HttpResponse } from "msw";
 import { EditorStatusCard } from "@portal/components/EditorStatusCard";
-import { SetupChecklist } from "@portal/components/SetupChecklist";
-import type { OnboardingProgress } from "@portal/hooks/useOnboardingProgress";
-
-const progress: OnboardingProgress = {
-  loading: false,
-  deployed: true,
-  editorDone: true,
-  policiesDone: true,
-  inviteDone: false,
-  policiesActive: 3,
-  policiesRecommended: 4,
-  allComplete: false,
-};
 
 const meta: Meta<typeof EditorStatusCard> = {
   title: "Portal/Home/EditorStatusCard",
@@ -31,25 +18,14 @@ const meta: Meta<typeof EditorStatusCard> = {
 export default meta;
 type Story = StoryObj<typeof EditorStatusCard>;
 
-/** The deployed-Editor status card on its own. */
+/** The deployment rail, reporting a live deployment. */
 export const Default: Story = {};
 
-/** As it renders on the subscribed home: the setup checklist attached as the footer. */
-export const WithSetupChecklist: Story = {
-  args: {
-    footer: <SetupChecklist progress={progress} />,
-  },
-};
-
 /**
- * Backend without the editor-deployment endpoint (404): the status row is
- * skipped and the card falls back to just the footer (setup checklist). It
- * lights up automatically once /v1/editor/deployment is served.
+ * Backend without the editor-deployment endpoint (404): the rail keeps its identity and the neutral
+ * deploy ask, and states no host or adoption figure, since neither can be read.
  */
 export const DeploymentUnavailable: Story = {
-  args: {
-    footer: <SetupChecklist progress={progress} />,
-  },
   parameters: {
     msw: {
       handlers: [
diff --git a/frontend/editor/src/portal/components/EditorStatusCard.tsx b/frontend/editor/src/portal/components/EditorStatusCard.tsx
index 9726cc1009..b506a0a366 100644
--- a/frontend/editor/src/portal/components/EditorStatusCard.tsx
+++ b/frontend/editor/src/portal/components/EditorStatusCard.tsx
@@ -3,15 +3,12 @@ import { Fragment, useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Button, Skeleton } from "@app/ui";
 import { useTier } from "@portal/contexts/TierContext";
-import { useView } from "@portal/contexts/ViewContext";
-import { useEditorDeployment } from "@portal/queries/infrastructure";
-import { type EditorInstance } from "@portal/api/editorDeploy";
+import { EDITOR_URL } from "@portal/auth/editorUrl";
 import {
-  DownloadIcon,
-  ExternalLinkIcon,
-  UsersIcon,
-  UserPlusIcon,
-} from "@portal/components/icons";
+  useEditorDeployment,
+  useFleetStats,
+} from "@portal/queries/infrastructure";
+import { type EditorInstance } from "@portal/api/editorDeploy";
 import { DownloadEditorModal } from "@portal/components/DownloadEditorModal";
 import "@portal/components/EditorStatusCard.css";
 
@@ -48,41 +45,64 @@ function primaryInstance(instances: EditorInstance[]): EditorInstance | null {
   );
 }
 
+/**
+ * The rail's primary action matures with adoption rather than deployment alone (marketing note
+ * D243): the loud ask only stands while the org is still one person on an undeployed editor. Once
+ * a deployment is in flight, finishing it takes over; once teammates are in, the ask goes quiet.
+ */
+type DeployAsk = "finish" | "start" | "options";
+
+function deployAsk(
+  instances: EditorInstance[],
+  activeUsers: number,
+): DeployAsk {
+  const deployed = instances.some((i) => i.status === "healthy");
+  if (!deployed && instances.some((i) => i.status === "pairing"))
+    return "finish";
+  if (!deployed && activeUsers <= 1) return "start";
+  return "options";
+}
+
 interface EditorStatusCardProps {
-  /**
-   * Rendered as an attached footer strip inside the card (e.g. the "Finish
-   * setting up" checklist), matching the free-tier hero's footer seam.
-   */
+  /** Attached footer strip inside the card — the deal-status hero while a deal is underway. */
   footer?: ReactNode;
-  /**
-   * Hide the active-users / invite chips. Used on enterprise, where the
-   * attached procurement deal hero already owns the invite action.
-   */
-  hideChips?: boolean;
 }
 
 /**
- * Subscribed/enterprise home hero: a status card for the org's deployed PDF
- * Editor. Reads the same `/v1/editor/deployment` data as the Editor admin view
- * (host, version, live users, deployment shape) and headlines the busiest
- * instance, with a single "Open in browser" action to the workspace URL.
+ * The Home hero: the deployment rail for the org's PDF Editor. Host and build meta come from the
+ * same `/v1/editor/deployment` data as the Editor admin view, headlining the busiest instance; the
+ * adoption count is the figure Usage & Billing reports. The rail always renders — it carries the
+ * deploy ask itself — and each figure stands down independently when its source can't supply it.
  */
-export function EditorStatusCard({ footer, hideChips }: EditorStatusCardProps) {
+export function EditorStatusCard({ footer }: EditorStatusCardProps) {
   const { t } = useTranslation();
   const { tier } = useTier();
-  const { setActiveView } = useView();
   const [installOpen, setInstallOpen] = useState(false);
   const { data, loading } = useEditorDeployment(tier);
+  // The adoption figure is the same one Usage & Billing reports, read through the shared cache so
+  // the two agree and only one request is made. Either field is null when the backend can't compute
+  // it (e.g. EE auditing off), in which case the rail states no figure rather than a misleading 0.
+  const { data: fleet } = useFleetStats();
+  const adoption =
+    fleet?.activeThisMonth != null && fleet.editorsDeployed != null
+      ? { active: fleet.activeThisMonth, total: fleet.editorsDeployed }
+      : null;
 
   const view = useMemo(() => {
     if (!data) return null;
-    const primary = primaryInstance(data.instances);
-    if (!primary) return null;
     const activeUsers = data.instances.reduce((s, i) => s + i.activeUsers, 0);
+    const ask = deployAsk(data.instances, activeUsers);
+    const primary = primaryInstance(data.instances);
+    // Nothing deployed yet: the rail still shows, carrying the deploy ask. Only the host and
+    // build meta are instance-derived, so they simply stand down.
+    if (!primary) {
+      return { host: null, activeUsers, ask, meta: [] as string[] };
+    }
     const targetLabel = t(`portal.home.editor.target.${primary.target}`);
     return {
       host: primary.host,
       activeUsers,
+      ask,
       workspaceUrl: data.summary.workspaceUrl,
       meta: [
         // Skip the deployment label when it just repeats the host (e.g. the
@@ -95,21 +115,8 @@ export function EditorStatusCard({ footer, hideChips }: EditorStatusCardProps) {
     };
   }, [data, t]);
 
-  const ready = !loading && !!view;
-  // The editor-deployment endpoint isn't implemented on every backend yet.
-  // When it's unavailable (finished loading with no data — e.g. a 404), skip
-  // the status row entirely and fall back to just the footer (the setup
-  // checklist, which reads supported endpoints). It lights up automatically
-  // once the backend serves /v1/editor/deployment.
-  const unavailable = !loading && !view;
-
-  if (unavailable) {
-    return footer ? (
-      <section className="portal-editor-hero portal-editor-hero--footer-only">
-        {footer}
-      </section>
-    ) : null;
-  }
+  // Only the deploy ask can go loud; unknown deployment state keeps it quiet.
+  const loudAsk = !!view && view.ask !== "options";
 
   return (
     <section
@@ -122,7 +129,10 @@ export function EditorStatusCard({ footer, hideChips }: EditorStatusCardProps) {
         </div>
 
         <div className="portal-editor-hero__info">
-          {!ready || !view ? (
+          {/* Each figure stands down on its own: the host and build meta need the deployment
+              endpoint, the adoption count needs fleet stats. Neither absence blanks the rail, and
+              nothing is asserted that its own source could not supply. */}
+          {loading ? (
             <>
               <Skeleton width="12rem" height="1.25rem" />
               <Skeleton width="22rem" height="0.75rem" />
@@ -133,65 +143,60 @@ export function EditorStatusCard({ footer, hideChips }: EditorStatusCardProps) {
                 <span className="portal-editor-hero__name">
                   {t("portal.home.editor.name")}
                 </span>
-                {!hideChips && (
-                  <button
-                    type="button"
-                    className="portal-editor-hero__chip"
-                    onClick={() => setActiveView("users")}
-                  >
-                    <UsersIcon size={13} />
-                    {t("portal.home.editor.activeUsers", {
-                      n: view.activeUsers,
-                    })}
-                  </button>
+                {view?.host && (
+                  <span className="portal-editor-hero__host">{view.host}</span>
+                )}
+                {adoption && (
+                  <>
+                    <span className="portal-editor-hero__dot" aria-hidden />
+                    <span className="portal-editor-hero__actives">
+                      {t("portal.home.editor.activeOfDeployed", adoption)}
+                    </span>
+                  </>
                 )}
               </div>
-              <div className="portal-editor-hero__meta">
-                <span className="portal-editor-hero__host">{view.host}</span>
-                {view.meta.map((item, i) => (
-                  <Fragment key={i}>
-                    <span className="portal-editor-hero__meta-sep">·</span>
-                    <span>{item}</span>
-                  </Fragment>
-                ))}
-              </div>
+              {view && view.meta.length > 0 && (
+                <div className="portal-editor-hero__meta">
+                  {view.meta.map((item, i) => (
+                    <Fragment key={i}>
+                      {i > 0 && (
+                        <span className="portal-editor-hero__meta-sep">·</span>
+                      )}
+                      <span>{item}</span>
+                    </Fragment>
+                  ))}
+                </div>
+              )}
             </>
           )}
         </div>
 
+        {/* Open in browser is a left-seated secondary in every state, and carries no arrow
+            (marketing note D244); the deploy ask beside it is the only button that can go loud.
+            Reaching the editor never depends on deployment data — it falls back to the configured
+            editor URL — so this stays live even when the deployment endpoint is unavailable. */}
         <div className="portal-editor-hero__action">
-          {!hideChips && (
-            <button
-              type="button"
-              className="portal-editor-hero__icon-btn"
-              onClick={() => setActiveView("users")}
-              aria-label={t("portal.home.editor.invite")}
-              title={t("portal.home.editor.invite")}
-            >
-              <UserPlusIcon size={16} />
-            </button>
-          )}
-          <button
-            type="button"
-            className="portal-editor-hero__icon-btn"
-            onClick={() => setInstallOpen(true)}
-            aria-label={t("portal.home.editor.install")}
-            title={t("portal.home.editor.install")}
-          >
-            <DownloadIcon size={16} />
-          </button>
           <Button
-            variant="primary"
-            className="portal-editor-hero__cta"
-            leftSection={<ExternalLinkIcon size={13} />}
-            disabled={!ready || !view}
+            variant="secondary"
+            size="sm"
             onClick={() => {
-              if (view)
-                window.open(view.workspaceUrl, "_blank", "noopener,noreferrer");
+              window.open(
+                view?.workspaceUrl || EDITOR_URL,
+                "_blank",
+                "noopener,noreferrer",
+              );
             }}
           >
             {t("portal.home.editor.open")}
           </Button>
+          <Button
+            variant={loudAsk ? "primary" : "secondary"}
+            accent={loudAsk ? "neutral" : "default"}
+            size="sm"
+            onClick={() => setInstallOpen(true)}
+          >
+            {t(`portal.home.editor.deploy.${view?.ask ?? "options"}`)}
+          </Button>
         </div>
       </div>
 
diff --git a/frontend/editor/src/portal/components/HomeHero.stories.tsx b/frontend/editor/src/portal/components/HomeHero.stories.tsx
index dd1ea07c04..8784bde97a 100644
--- a/frontend/editor/src/portal/components/HomeHero.stories.tsx
+++ b/frontend/editor/src/portal/components/HomeHero.stories.tsx
@@ -16,17 +16,10 @@ const meta = {
 export default meta;
 type Story = StoryObj<typeof meta>;
 
-/** Pay-as-you-go tier: welcome header + setup checklist until onboarding completes. */
-export const Default: Story = {
-  args: { tier: "pro" },
-};
-
-/** Free tier renders the same welcome-header composition as pro. */
-export const FreeTier: Story = {
-  args: { tier: "free" },
-};
-
-/** Enterprise tier hides the status chips — the procurement deal hero owns the invite step. */
-export const EnterpriseTier: Story = {
-  args: { tier: "enterprise" },
-};
+/**
+ * The hero is the Editor deployment rail on every tier and in both editions — it reports its own
+ * deployment state and deploy ask, so there is nothing tier-specific left to compose. A live
+ * procurement deal attaches the deal-status hero as the rail's footer; that comes from
+ * useProcurement, so it follows the mocked backend rather than a story arg.
+ */
+export const Default: Story = {};
diff --git a/frontend/editor/src/portal/components/HomeHero.tsx b/frontend/editor/src/portal/components/HomeHero.tsx
index 03bcc17ed0..e81d42dfef 100644
--- a/frontend/editor/src/portal/components/HomeHero.tsx
+++ b/frontend/editor/src/portal/components/HomeHero.tsx
@@ -1,60 +1,50 @@
-import type { Tier } from "@portal/contexts/TierContext";
+import { useEffect } from "react";
+import { Skeleton } from "@app/ui";
 import { useUI } from "@portal/contexts/UIContext";
-import { WelcomeBanner } from "@portal/components/WelcomeBanner";
 import { EditorStatusCard } from "@portal/components/EditorStatusCard";
-import { SetupChecklist } from "@portal/components/SetupChecklist";
-import { useOnboardingProgress } from "@portal/hooks/useOnboardingProgress";
 import { ControlledDealStatusHero } from "@portal/components/procurement/ProcurementBanner";
 import { ProcurementFlow } from "@portal/components/procurement/ProcurementFlow";
 import { useProcurement } from "@portal/components/procurement/useProcurement";
 
 /**
- * The Home hero, composed with a procurement-aware, progress-aware footer:
- *
- *  - no live deployment  → welcome header (+ setup steps until complete)
- *  - deployment live     → deployed-Editor status header (+ steps until complete)
- *  - onboarding complete → header only; the setup steps collapse away
- *  - enterprise          → status header with chips hidden (the deal hero owns invite)
- *
- * The footer is the deal-status hero while a procurement deal is underway
- * (procurement is a bolt-on to any tier); otherwise the setup checklist, until
- * every step is done — then it collapses to just the header, matching the
- * deployed-status card. The procurement takeover modals render alongside.
+ * The Home hero: always the Editor deployment rail, carrying the deal-status hero as its footer
+ * while a procurement deal is underway (procurement is a bolt-on to any tier). The rail states its
+ * own deployment status and deploy ask, so there is nothing for a tier to choose between. The
+ * procurement takeover modals render alongside.
  */
-export function HomeHero({ tier }: { tier: Tier }) {
-  const { openLinkModal } = useUI();
+export function HomeHero() {
   const procurement = useProcurement();
-  const progress = useOnboardingProgress();
+  const { trialSetupRequested, clearTrialSetupRequest } = useUI();
   const dealActive =
     procurement.isLinked && procurement.started && !!procurement.data;
 
-  // Start the enterprise flow right here on Home: open the trial-setup modal when the account is
-  // linked, otherwise prompt to link first — no navigating off to the procurement view.
-  const onStartEnterprise = () => {
-    if (procurement.isLinked) procurement.onStartTrial();
-    else openLinkModal();
-  };
-
-  // Steps collapse once onboarding is complete; a live deal always keeps its
-  // hero. Otherwise the setup checklist carries the (progress-aware) steps.
-  const footer = dealActive ? (
-    <ControlledDealStatusHero controller={procurement} />
-  ) : progress.allComplete ? undefined : (
-    <SetupChecklist progress={progress} onStartEnterprise={onStartEnterprise} />
-  );
-
-  // The live-status header (EditorStatusCard) needs a real deployment to show;
-  // without one it renders nothing, so route to it only when actually deployed.
-  // Everything else — including a step completed via the local download flag —
-  // keeps the always-present welcome header, so the card never vanishes.
-  const showStatus = progress.deployed;
+  // Someone said yes to enterprise elsewhere (the billing upsell, a sales link). Open trial setup
+  // once the snapshot has landed, so a buyer who already has a deal is not asked to start another.
+  useEffect(() => {
+    if (!trialSetupRequested || procurement.loading) return;
+    clearTrialSetupRequest();
+    if (!procurement.started) procurement.onExploreEnterprise();
+  }, [trialSetupRequested, procurement, clearTrialSetupRequest]);
 
   return (
     <>
-      {showStatus ? (
-        <EditorStatusCard footer={footer} hideChips={tier === "enterprise"} />
+      {procurement.loading ? (
+        // Hold the rail's shape rather than committing to a footer: branching before the snapshot
+        // lands paints the no-deal rail first, flashing on every refresh of an active deal.
+        <section className="portal-editor-hero" aria-busy>
+          <div className="portal-editor-hero__row">
+            <Skeleton width="2rem" height="2rem" />
+            <Skeleton width="12rem" height="1rem" />
+          </div>
+        </section>
       ) : (
-        <WelcomeBanner footer={footer} />
+        <EditorStatusCard
+          footer={
+            dealActive ? (
+              <ControlledDealStatusHero controller={procurement} />
+            ) : undefined
+          }
+        />
       )}
       <ProcurementFlow controller={procurement} />
     </>
diff --git a/frontend/editor/src/portal/components/SetupChecklist.css b/frontend/editor/src/portal/components/SetupChecklist.css
deleted file mode 100644
index 0fcb71e678..0000000000
--- a/frontend/editor/src/portal/components/SetupChecklist.css
+++ /dev/null
@@ -1,122 +0,0 @@
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Getting-started steps (home-hero body)                                   */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-.portal-setup {
-  display: flex;
-  flex-direction: column;
-}
-
-.portal-setup__list {
-  list-style: none;
-  margin: 0;
-  padding: 0;
-}
-
-.portal-setup__row {
-  display: grid;
-  grid-template-columns: auto 1fr;
-  align-items: center;
-  gap: 0.875rem;
-  width: 100%;
-  padding: 0.6875rem 1.25rem;
-  border: none;
-  border-top: 1px solid var(--c-border-subtle);
-  background: transparent;
-  text-align: left;
-  cursor: pointer;
-  transition: background var(--motion-fast);
-}
-.portal-setup__item:first-child .portal-setup__row {
-  border-top: none;
-}
-.portal-setup__row:hover {
-  background: var(--c-hover);
-}
-
-/* Numbered step marker */
-.portal-setup__num {
-  display: grid;
-  place-items: center;
-  width: 1.5rem;
-  height: 1.5rem;
-  flex-shrink: 0;
-  border-radius: 50%;
-  border: 1px solid var(--c-border);
-  font-size: 0.75rem;
-  font-weight: 600;
-  color: var(--c-text-subtle);
-}
-/* Completed step: filled green check. */
-.portal-setup__num.is-done {
-  border-color: var(--color-green);
-  background: var(--color-green);
-  color: #fff;
-}
-.portal-setup__row.is-done .portal-setup__text strong {
-  color: var(--c-text-muted);
-}
-
-.portal-setup__text {
-  display: flex;
-  flex-direction: column;
-  min-width: 0;
-}
-.portal-setup__text strong {
-  font-size: 0.875rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-.portal-setup__text span {
-  font-size: 0.75rem;
-  line-height: 1.4;
-  color: var(--c-text-subtle);
-}
-
-/* ── Enterprise upsell rung ── */
-.portal-setup__enterprise {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  flex-wrap: wrap;
-  padding: 0.75rem 1.25rem;
-  border-top: 1px solid var(--c-border-subtle);
-  background: linear-gradient(
-    90deg,
-    color-mix(in srgb, var(--c-primary) 5%, transparent) 0%,
-    transparent 55%
-  );
-}
-
-.portal-setup__enterprise-copy {
-  display: flex;
-  align-items: center;
-  gap: 0.75rem;
-  min-width: 0;
-  flex: 1;
-}
-
-.portal-setup__enterprise-tag {
-  flex-shrink: 0;
-  padding: 0.1875rem 0.5625rem;
-  border-radius: var(--radius-md);
-  font-size: 0.59375rem;
-  font-weight: 700;
-  letter-spacing: 0.06em;
-  text-transform: uppercase;
-  color: var(--c-primary-hover);
-  background: var(--c-primary-tint);
-}
-
-.portal-setup__enterprise-text {
-  margin: 0;
-  font-size: 0.8125rem;
-  line-height: 1.45;
-  color: var(--c-text-subtle);
-  min-width: 0;
-}
-.portal-setup__enterprise-text strong {
-  color: var(--c-text);
-  font-weight: 700;
-}
diff --git a/frontend/editor/src/portal/components/SetupChecklist.stories.tsx b/frontend/editor/src/portal/components/SetupChecklist.stories.tsx
deleted file mode 100644
index 432be155d7..0000000000
--- a/frontend/editor/src/portal/components/SetupChecklist.stories.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { SetupChecklist } from "@portal/components/SetupChecklist";
-import type { OnboardingProgress } from "@portal/hooks/useOnboardingProgress";
-
-const base: OnboardingProgress = {
-  loading: false,
-  deployed: false,
-  editorDone: false,
-  policiesDone: false,
-  inviteDone: false,
-  policiesActive: 0,
-  policiesRecommended: 6,
-  allComplete: false,
-};
-
-const meta: Meta<typeof SetupChecklist> = {
-  title: "Portal/Home/SetupChecklist",
-  component: SetupChecklist,
-  parameters: { layout: "padded" },
-  args: { progress: base },
-  decorators: [
-    (S) => (
-      <div
-        style={{
-          maxWidth: "60rem",
-          border: "1px solid var(--c-border)",
-          borderRadius: "var(--radius-xl)",
-          overflow: "hidden",
-          background: "var(--c-surface)",
-        }}
-      >
-        <S />
-      </div>
-    ),
-  ],
-};
-export default meta;
-type Story = StoryObj<typeof SetupChecklist>;
-
-/** A fresh workspace — no step complete yet. */
-export const NotStarted: Story = {};
-
-/** Policies confirmed; editor + invite still open. */
-export const InProgress: Story = {
-  args: {
-    progress: {
-      ...base,
-      policiesDone: true,
-      policiesActive: 2,
-      policiesRecommended: 5,
-    },
-  },
-};
-
-/** Editor deployed + policies on; only the invite step remains. */
-export const AlmostDone: Story = {
-  args: {
-    progress: {
-      ...base,
-      editorDone: true,
-      policiesDone: true,
-      policiesActive: 4,
-      policiesRecommended: 3,
-    },
-  },
-};
diff --git a/frontend/editor/src/portal/components/SetupChecklist.tsx b/frontend/editor/src/portal/components/SetupChecklist.tsx
deleted file mode 100644
index d854beb771..0000000000
--- a/frontend/editor/src/portal/components/SetupChecklist.tsx
+++ /dev/null
@@ -1,150 +0,0 @@
-import { useState } from "react";
-import { useTranslation } from "react-i18next";
-import { Button } from "@app/ui";
-import { useTier } from "@portal/contexts/TierContext";
-import { useView } from "@portal/contexts/ViewContext";
-import type { OnboardingProgress } from "@portal/hooks/useOnboardingProgress";
-import { DownloadEditorModal } from "@portal/components/DownloadEditorModal";
-import CheckRounded from "@mui/icons-material/CheckRounded";
-import "@portal/components/SetupChecklist.css";
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Enterprise upsell rung                                                   */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-/**
- * Enterprise on-ramp rung. The CTA differs by tier: free orgs start a guided
- * trial, subscribed (paying) orgs jump straight to a quote — both open the
- * procurement flow. When {@code onStart} is given the CTA opens the flow's setup
- * modal over Home; otherwise it falls back to navigating to the procurement view.
- */
-function EnterpriseRung({
-  paying,
-  onStart,
-}: {
-  paying: boolean;
-  onStart?: () => void;
-}) {
-  const { t } = useTranslation();
-  const { setActiveView } = useView();
-  return (
-    <div className="portal-setup__enterprise">
-      <div className="portal-setup__enterprise-copy">
-        <span className="portal-setup__enterprise-tag">
-          {t("portal.home.onboarding.enterprise.tag")}
-        </span>
-        <p className="portal-setup__enterprise-text">
-          <strong>{t("portal.home.onboarding.enterprise.lead")}</strong>{" "}
-          {t("portal.home.onboarding.enterprise.body")}
-        </p>
-      </div>
-      <Button
-        variant="secondary"
-        size="sm"
-        onClick={onStart ?? (() => setActiveView("procurement"))}
-        rightSection={<span aria-hidden>→</span>}
-      >
-        {t(
-          paying
-            ? "portal.home.onboarding.enterprise.ctaQuote"
-            : "portal.home.onboarding.enterprise.cta",
-        )}
-      </Button>
-    </div>
-  );
-}
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Getting-started steps                                                    */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-interface Step {
-  id: string;
-  title: string;
-  blurb: string;
-  done: boolean;
-  onClick: () => void;
-}
-
-/**
- * Numbered getting-started steps, rendered as the body of the home hero. Each
- * row opens its in-app surface; a completed step (from {@link OnboardingProgress})
- * swaps its number for a check. When every step is done the parent collapses the
- * hero to the deployed-status header and stops rendering this list entirely.
- */
-export function SetupChecklist({
-  progress,
-  onStartEnterprise,
-}: {
-  progress: OnboardingProgress;
-  /** Start the enterprise flow in place (opens the setup modal over Home). Falls back to
-   * navigating to the procurement view when omitted (e.g. in isolated stories). */
-  onStartEnterprise?: () => void;
-}) {
-  const { t } = useTranslation();
-  const { tier } = useTier();
-  const { setActiveView } = useView();
-  const [downloadOpen, setDownloadOpen] = useState(false);
-
-  const steps: Step[] = [
-    {
-      id: "editor",
-      title: t("portal.home.onboarding.steps.editor.title"),
-      blurb: t("portal.home.onboarding.steps.editor.blurb"),
-      done: progress.editorDone,
-      // Downloads are per-OS, so open the install picker rather than route away.
-      onClick: () => setDownloadOpen(true),
-    },
-    {
-      id: "policies",
-      title: t("portal.home.onboarding.steps.policies.title"),
-      blurb: t("portal.home.onboarding.steps.policies.blurb", {
-        active: progress.policiesActive,
-        recommended: progress.policiesRecommended,
-      }),
-      done: progress.policiesDone,
-      onClick: () => setActiveView("policies"),
-    },
-    {
-      id: "invite",
-      title: t("portal.home.onboarding.steps.invite.title"),
-      blurb: t("portal.home.onboarding.steps.invite.blurb"),
-      done: progress.inviteDone,
-      onClick: () => setActiveView("users"),
-    },
-  ];
-
-  return (
-    <div className="portal-setup">
-      <ol className="portal-setup__list">
-        {steps.map((s, i) => (
-          <li key={s.id} className="portal-setup__item">
-            <button
-              type="button"
-              className={"portal-setup__row" + (s.done ? " is-done" : "")}
-              onClick={s.onClick}
-            >
-              <span
-                className={"portal-setup__num" + (s.done ? " is-done" : "")}
-                aria-hidden
-              >
-                {s.done ? <CheckRounded sx={{ fontSize: 16 }} /> : i + 1}
-              </span>
-              <span className="portal-setup__text">
-                <strong>{s.title}</strong>
-                <span>{s.blurb}</span>
-              </span>
-            </button>
-          </li>
-        ))}
-      </ol>
-
-      <EnterpriseRung paying={tier !== "free"} onStart={onStartEnterprise} />
-
-      <DownloadEditorModal
-        open={downloadOpen}
-        onClose={() => setDownloadOpen(false)}
-      />
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/WelcomeBanner.css b/frontend/editor/src/portal/components/WelcomeBanner.css
deleted file mode 100644
index 157ee24ac0..0000000000
--- a/frontend/editor/src/portal/components/WelcomeBanner.css
+++ /dev/null
@@ -1,103 +0,0 @@
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Free-tier welcome hero — compact product header + steps                  */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-.portal-welcome {
-  border-radius: var(--radius-xl);
-  border: 1px solid var(--c-border-subtle);
-  overflow: hidden;
-  isolation: isolate;
-  background: var(--c-surface);
-}
-
-/* ── Dark product header strip ── */
-.portal-welcome__header {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  flex-wrap: wrap;
-  padding: 0.875rem 1.25rem;
-  background: color-mix(in srgb, var(--c-primary) 22%, var(--c-hero-dark));
-}
-
-.portal-welcome__brand {
-  display: flex;
-  align-items: center;
-  gap: 0.875rem;
-  min-width: 0;
-}
-
-.portal-welcome__mark {
-  display: grid;
-  place-items: center;
-  flex-shrink: 0;
-}
-.portal-welcome__mark img {
-  display: block;
-  height: 1.75rem;
-  width: auto;
-}
-
-.portal-welcome__brand-text {
-  display: flex;
-  align-items: baseline;
-  gap: 0.625rem;
-  min-width: 0;
-  flex-wrap: wrap;
-}
-
-.portal-welcome__product {
-  font-size: 1.125rem;
-  font-weight: 700;
-  letter-spacing: -0.01em;
-  color: #fff;
-}
-
-.portal-welcome__stats {
-  min-width: 0;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-  font-size: 0.8125rem;
-  color: rgba(255, 255, 255, 0.55);
-}
-
-/* Header action group: icon buttons + the CTA. */
-.portal-welcome__actions {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-}
-.portal-welcome__icon-btn {
-  display: grid;
-  place-items: center;
-  width: 2.25rem;
-  height: 2.25rem;
-  flex-shrink: 0;
-  border-radius: var(--radius-md);
-  border: 1px solid rgba(255, 255, 255, 0.16);
-  background: rgba(255, 255, 255, 0.08);
-  color: #fff;
-  cursor: pointer;
-  transition: background var(--motion-fast);
-}
-.portal-welcome__icon-btn:hover {
-  background: rgba(255, 255, 255, 0.16);
-}
-
-/* White CTA on the dark header, matching the marketing card. */
-.portal-welcome__header .portal-welcome__cta.sui-btn {
-  background: #ffffff;
-  border-color: #ffffff;
-  color: var(--c-hero-dark-cta-text);
-}
-.portal-welcome__header .portal-welcome__cta.sui-btn:hover {
-  background: rgba(255, 255, 255, 0.88);
-  border-color: rgba(255, 255, 255, 0.88);
-}
-
-/* ── Steps + enterprise (setup checklist) sit directly under the header ── */
-.portal-welcome__footer {
-  background: var(--c-surface);
-}
diff --git a/frontend/editor/src/portal/components/WelcomeBanner.stories.tsx b/frontend/editor/src/portal/components/WelcomeBanner.stories.tsx
deleted file mode 100644
index 8dba4caf36..0000000000
--- a/frontend/editor/src/portal/components/WelcomeBanner.stories.tsx
+++ /dev/null
@@ -1,41 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { WelcomeBanner } from "@portal/components/WelcomeBanner";
-import { SetupChecklist } from "@portal/components/SetupChecklist";
-import type { OnboardingProgress } from "@portal/hooks/useOnboardingProgress";
-
-const progress: OnboardingProgress = {
-  loading: false,
-  deployed: false,
-  editorDone: false,
-  policiesDone: true,
-  inviteDone: false,
-  policiesActive: 2,
-  policiesRecommended: 5,
-  allComplete: false,
-};
-
-const meta: Meta<typeof WelcomeBanner> = {
-  title: "Portal/Home/WelcomeBanner",
-  component: WelcomeBanner,
-  parameters: { layout: "padded" },
-  decorators: [
-    (S) => (
-      <div style={{ maxWidth: "72rem" }}>
-        <S />
-      </div>
-    ),
-  ],
-};
-export default meta;
-type Story = StoryObj<typeof WelcomeBanner>;
-
-/** The hero on its own, no attached footer. */
-export const Default: Story = {};
-
-/** The hero as it renders on the free-tier home: the "Finish setting up"
- *  checklist attached as the footer strip. */
-export const WithSetupChecklist: Story = {
-  args: {
-    footer: <SetupChecklist progress={progress} />,
-  },
-};
diff --git a/frontend/editor/src/portal/components/WelcomeBanner.tsx b/frontend/editor/src/portal/components/WelcomeBanner.tsx
deleted file mode 100644
index c1d6857bdb..0000000000
--- a/frontend/editor/src/portal/components/WelcomeBanner.tsx
+++ /dev/null
@@ -1,97 +0,0 @@
-import type { ReactNode } from "react";
-import { useState } from "react";
-import { useTranslation } from "react-i18next";
-import { Button } from "@app/ui";
-import { useView } from "@portal/contexts/ViewContext";
-import { EDITOR_URL } from "@portal/auth/editorUrl";
-import {
-  DownloadIcon,
-  ExternalLinkIcon,
-  UserPlusIcon,
-} from "@portal/components/icons";
-import { DownloadEditorModal } from "@portal/components/DownloadEditorModal";
-import markDark from "@app/assets/brand/modern-logo/StirlingPDFLogoNoTextDark.svg";
-import "@portal/components/WelcomeBanner.css";
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Free-tier welcome hero                                                   */
-/*                                                                           */
-/*  A compact product header — brand mark, "PDF Editor" + social-proof       */
-/*  stats, and a single "Open in browser" CTA — over the getting-started      */
-/*  steps (passed in as {@code footer}). Deliberately lean: the onboarding    */
-/*  steps, not marketing copy, are the point of the card.                    */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-interface WelcomeBannerProps {
-  /**
-   * The getting-started steps + enterprise rung, rendered inside the card
-   * below the header. Kept as a slot so the hero stays a presentational shell.
-   */
-  footer?: ReactNode;
-}
-
-export function WelcomeBanner({ footer }: WelcomeBannerProps) {
-  const { t } = useTranslation();
-  const { setActiveView } = useView();
-  const [installOpen, setInstallOpen] = useState(false);
-
-  return (
-    <section
-      className="portal-welcome"
-      aria-label={t("portal.welcome.ariaLabel")}
-    >
-      <div className="portal-welcome__header">
-        <div className="portal-welcome__brand">
-          <span className="portal-welcome__mark" aria-hidden>
-            <img src={markDark} alt="" />
-          </span>
-          <div className="portal-welcome__brand-text">
-            <span className="portal-welcome__product">
-              {t("portal.welcome.productName")}
-            </span>
-            <span className="portal-welcome__stats">
-              {t("portal.welcome.stats")}
-            </span>
-          </div>
-        </div>
-        <div className="portal-welcome__actions">
-          <button
-            type="button"
-            className="portal-welcome__icon-btn"
-            onClick={() => setActiveView("users")}
-            aria-label={t("portal.welcome.invite")}
-            title={t("portal.welcome.invite")}
-          >
-            <UserPlusIcon size={16} />
-          </button>
-          <button
-            type="button"
-            className="portal-welcome__icon-btn"
-            onClick={() => setInstallOpen(true)}
-            aria-label={t("portal.welcome.install")}
-            title={t("portal.welcome.install")}
-          >
-            <DownloadIcon size={16} />
-          </button>
-          <Button
-            variant="primary"
-            className="portal-welcome__cta"
-            leftSection={<ExternalLinkIcon size={15} />}
-            onClick={() => {
-              window.open(EDITOR_URL, "_blank", "noopener,noreferrer");
-            }}
-          >
-            {t("portal.welcome.openInBrowser")}
-          </Button>
-        </div>
-      </div>
-
-      {footer && <div className="portal-welcome__footer">{footer}</div>}
-
-      <DownloadEditorModal
-        open={installOpen}
-        onClose={() => setInstallOpen(false)}
-      />
-    </section>
-  );
-}
diff --git a/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx b/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx
index b5d0d58a3b..7d322a7be6 100644
--- a/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx
+++ b/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx
@@ -665,7 +665,6 @@ export function BundleCheckoutModal({
           {t("portal.billing.prepaid.buy.cancel", "Cancel")}
         </Button>
         <Button
-          accent="premium"
           disabled={!canContinue || pdfBusy}
           onClick={handleContinue}
           rightSection={<span aria-hidden>›</span>}
@@ -686,7 +685,7 @@ export function BundleCheckoutModal({
         >
           {t("portal.billing.prepaid.buy.cancelPurchase", "Cancel purchase")}
         </Button>
-        <Button accent="premium" disabled={busy || pdfBusy} onClick={payOnline}>
+        <Button disabled={busy || pdfBusy} onClick={payOnline}>
           {t("portal.billing.prepaid.pay.payOnline", "Pay online")}
         </Button>
       </div>
@@ -701,7 +700,6 @@ export function BundleCheckoutModal({
           {t("portal.billing.prepaid.buy.back", "Back")}
         </Button>
         <Button
-          accent="premium"
           disabled={!canAccept || busy || pdfBusy}
           onClick={handleFinalise}
         >
diff --git a/frontend/editor/src/portal/components/billing/EnterpriseUpsell.tsx b/frontend/editor/src/portal/components/billing/EnterpriseUpsell.tsx
index 161b3bea72..55aaf89b5b 100644
--- a/frontend/editor/src/portal/components/billing/EnterpriseUpsell.tsx
+++ b/frontend/editor/src/portal/components/billing/EnterpriseUpsell.tsx
@@ -1,5 +1,6 @@
 import { useTranslation } from "react-i18next";
 import { Button, Card } from "@app/ui";
+import { useUI } from "@portal/contexts/UIContext";
 import { useView } from "@portal/contexts/ViewContext";
 
 interface Props {
@@ -9,12 +10,13 @@ interface Props {
 
 /**
  * Volume-discount / Enterprise upsell, shared by the free and subscribed billing
- * views. The CTA opens the procurement journey (/procurement auto-opens the quote
- * builder in the takeover modal).
+ * views. The CTA lands the buyer on Home with the trial-setup step raised — the deal lives there,
+ * so there is nowhere else to send them.
  */
 export function EnterpriseUpsell({ bare = false }: Props) {
   const { t } = useTranslation();
   const { setActiveView } = useView();
+  const { requestTrialSetup } = useUI();
   const body = (
     <>
       <span className="portal-billing__eyebrow">
@@ -38,7 +40,12 @@ export function EnterpriseUpsell({ bare = false }: Props) {
         <Button
           size="sm"
           variant="secondary"
-          onClick={() => setActiveView("procurement")}
+          onClick={() => {
+            // The deal lives on Home; raise the request there rather than sending the buyer to a
+            // separate view that only mirrors it.
+            requestTrialSetup();
+            setActiveView("home");
+          }}
         >
           {t("portal.billing.enterpriseUpsell.cta", "Explore Enterprise")}
         </Button>
diff --git a/frontend/editor/src/portal/components/billing/FreePlanView.tsx b/frontend/editor/src/portal/components/billing/FreePlanView.tsx
index d3a1baf036..e2bbb24a34 100644
--- a/frontend/editor/src/portal/components/billing/FreePlanView.tsx
+++ b/frontend/editor/src/portal/components/billing/FreePlanView.tsx
@@ -85,7 +85,6 @@ export function FreePlanView({ wallet, unsynced, onSubscribed }: Props) {
   const switchOnAction = isLeader ? (
     <Button
       variant="primary"
-      accent="premium"
       onClick={flow.status === "none" ? openActivation : resumeBundle}
       disabled={wallet.teamId == null}
     >
diff --git a/frontend/editor/src/portal/components/billing/LinkAccountPrompt.tsx b/frontend/editor/src/portal/components/billing/LinkAccountPrompt.tsx
index e21fec3591..394668c56b 100644
--- a/frontend/editor/src/portal/components/billing/LinkAccountPrompt.tsx
+++ b/frontend/editor/src/portal/components/billing/LinkAccountPrompt.tsx
@@ -23,11 +23,7 @@ export function LinkAccountPrompt() {
           "Manual PDF editing — view, sign, merge, split, watermark, compress, convert, manual OCR — is always free, linked or not. Link to claim 500 free PDFs of metered processing (automation, AI, and the API); when you need more, turn on the Processor plan and only pay for what you use.",
         )}
         actions={
-          <Button
-            variant="primary"
-            accent="premium"
-            onClick={() => openLinkModal()}
-          >
+          <Button variant="primary" onClick={() => openLinkModal()}>
             {t("portal.billing.linkPrompt.cta", "Link Stirling account")}
           </Button>
         }
diff --git a/frontend/editor/src/portal/components/billing/PrepayModalHeader.tsx b/frontend/editor/src/portal/components/billing/PrepayModalHeader.tsx
index c099836ee4..f07083f215 100644
--- a/frontend/editor/src/portal/components/billing/PrepayModalHeader.tsx
+++ b/frontend/editor/src/portal/components/billing/PrepayModalHeader.tsx
@@ -1,15 +1,14 @@
 import { useTranslation } from "react-i18next";
-import { Button } from "@app/ui";
-// The trademarked Stirling wordmark — the font is baked into the SVG (no brand webfont is loaded), so
-// we render the same asset the portal nav uses rather than styled text. Theme-switched in CSS.
-import wordmarkLight from "@app/assets/brand/modern-logo/StirlingProcessorLogoBlackText.svg";
-import wordmarkDark from "@app/assets/brand/modern-logo/StirlingProcessorLogoWhiteText.svg";
+import { StepModalHeader } from "@portal/components/shared/StepModalHeader";
 
 /**
- * Shared header for the prepay-flow modals — the prepaid wizard (activation → calculator → pay, of 3)
- * and the metered checkout (spend limit → payment, of 2): Stirling brand + "Step N of M" badge + close,
- * an M-segment progress bar, and the step title. Pass {@code step=undefined} to hide the badge +
- * progress (e.g. a terminal confirmation).
+ * The prepay flows' stepped header — the prepaid wizard (activation → calculator → pay, of 3) and
+ * the metered checkout (spend limit → payment, of 2).
+ *
+ * Chrome and copy only: the layout is the shared {@link StepModalHeader}, so this flow reads the
+ * same as every other stepped modal. Keeps the billing root class, which the framed-checkout rule
+ * targets to own the header's padding. Pass {@code step=undefined} to hide the badge + progress
+ * (e.g. a terminal confirmation).
  */
 export function PrepayModalHeader({
   step,
@@ -24,68 +23,27 @@ export function PrepayModalHeader({
   onClose: () => void;
 }) {
   const { t } = useTranslation();
-  const showSteps = step != null;
-  const filled = step ?? 0;
   return (
-    <div className="portal-billing__bundle-head">
-      <div className="portal-billing__bundle-head-top">
-        <div className="portal-billing__bundle-brand">
-          <img
-            src={wordmarkLight}
-            alt="Stirling"
-            className="portal-billing__bundle-wordmark wordmark-light-only"
-          />
-          <img
-            src={wordmarkDark}
-            alt=""
-            aria-hidden
-            className="portal-billing__bundle-wordmark wordmark-dark-only"
-          />
-        </div>
-        <div className="portal-billing__bundle-head-right">
-          {showSteps && (
-            <span className="portal-billing__bundle-step">
-              {t(
-                "portal.billing.prepaid.buy.step",
-                "Step {{current}} of {{total}}",
-                { current: step, total },
-              )}
-            </span>
-          )}
-          <Button
-            variant="tertiary"
-            accent="neutral"
-            size="sm"
-            shape="circle"
-            onClick={onClose}
-            aria-label={t("portal.billing.prepaid.buy.close", "Close")}
-            leftSection={
-              <svg
-                viewBox="0 0 24 24"
-                width="16"
-                height="16"
-                fill="none"
-                stroke="currentColor"
-                strokeWidth={1.75}
-                strokeLinecap="round"
-                strokeLinejoin="round"
-                aria-hidden
-              >
-                <line x1="18" y1="6" x2="6" y2="18" />
-                <line x1="6" y1="6" x2="18" y2="18" />
-              </svg>
-            }
-          />
-        </div>
-      </div>
-      {showSteps && (
-        <div className="portal-billing__bundle-progress" aria-hidden>
-          <span className={filled >= 1 ? "is-filled" : ""} />
-          <span className={filled >= 2 ? "is-filled" : ""} />
-          {total >= 3 && <span className={filled >= 3 ? "is-filled" : ""} />}
-        </div>
-      )}
-      <div className="portal-billing__bundle-head-title">{title}</div>
-    </div>
+    <StepModalHeader
+      brand
+      className="portal-billing__bundle-head"
+      title={title}
+      step={step}
+      total={total}
+      stepLabel={
+        step != null
+          ? t(
+              "portal.billing.prepaid.buy.step",
+              "Step {{current}} of {{total}}",
+              {
+                current: step,
+                total,
+              },
+            )
+          : undefined
+      }
+      closeLabel={t("portal.billing.prepaid.buy.close", "Close")}
+      onClose={onClose}
+    />
   );
 }
diff --git a/frontend/editor/src/portal/components/billing/SpendLimitCard.tsx b/frontend/editor/src/portal/components/billing/SpendLimitCard.tsx
index 9ee2fa1f5e..5c7b510618 100644
--- a/frontend/editor/src/portal/components/billing/SpendLimitCard.tsx
+++ b/frontend/editor/src/portal/components/billing/SpendLimitCard.tsx
@@ -191,7 +191,7 @@ export function SpendLimitCard({
           >
             {t("portal.billing.spendLimit.cancel", "Cancel")}
           </Button>
-          <Button accent="premium" size="sm" loading={saving} onClick={save}>
+          <Button size="sm" loading={saving} onClick={save}>
             {t("portal.billing.spendLimit.save", "Save limit")}
           </Button>
         </div>
diff --git a/frontend/editor/src/portal/components/billing/StripeCheckoutModal.tsx b/frontend/editor/src/portal/components/billing/StripeCheckoutModal.tsx
index 4787c40b37..ee76a780c2 100644
--- a/frontend/editor/src/portal/components/billing/StripeCheckoutModal.tsx
+++ b/frontend/editor/src/portal/components/billing/StripeCheckoutModal.tsx
@@ -451,7 +451,6 @@ export function StripeCheckoutModal({
                 {t("portal.billing.checkout.cap.back", "Back")}
               </Button>
               <Button
-                accent="premium"
                 loading={capBusy}
                 disabled={!capValid}
                 onClick={handleContinue}
diff --git a/frontend/editor/src/portal/components/billing/billing.css b/frontend/editor/src/portal/components/billing/billing.css
index 2f39fa0506..cb94c2316f 100644
--- a/frontend/editor/src/portal/components/billing/billing.css
+++ b/frontend/editor/src/portal/components/billing/billing.css
@@ -1478,59 +1478,6 @@
   gap: 0.875rem;
   margin-bottom: 1.25rem;
 }
-.portal-billing__bundle-head-top {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-}
-.portal-billing__bundle-brand {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  font-weight: 700;
-  font-size: 0.9375rem;
-  color: var(--c-text);
-}
-/* Trademarked wordmark SVG (theme-switched via .wordmark-light-only/.wordmark-dark-only). Height
-   matches the portal nav's 22px wordmark so the modal and app read as one brand. No `display` here —
-   the theme-switch utilities own visibility. */
-.portal-billing__bundle-wordmark {
-  height: 1.375rem;
-  width: auto;
-}
-.portal-billing__bundle-head-right {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-}
-.portal-billing__bundle-step {
-  padding: 0.1875rem 0.625rem;
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 999px;
-  font-size: 0.75rem;
-  font-weight: 600;
-  color: var(--c-text-subtle);
-  white-space: nowrap;
-}
-.portal-billing__bundle-progress {
-  display: flex;
-  gap: 0.375rem;
-}
-.portal-billing__bundle-progress > span {
-  flex: 1;
-  height: 4px;
-  border-radius: 999px;
-  background: var(--c-border-subtle);
-}
-.portal-billing__bundle-progress > span.is-filled {
-  background: var(--c-primary);
-}
-.portal-billing__bundle-head-title {
-  font-size: 1.25rem;
-  font-weight: 700;
-  color: var(--c-text);
-}
-
 /* Payment step: quote receipt + recipient fields + consent. */
 .portal-billing__bundle-pay {
   display: flex;
diff --git a/frontend/editor/src/portal/components/icons.tsx b/frontend/editor/src/portal/components/icons.tsx
index 5467995efc..5692e253d9 100644
--- a/frontend/editor/src/portal/components/icons.tsx
+++ b/frontend/editor/src/portal/components/icons.tsx
@@ -300,3 +300,32 @@ export function IntegrationsIcon(props: IconProps) {
     </Svg>
   );
 }
+
+export function CalendarIcon(props: IconProps) {
+  return (
+    <Svg {...props}>
+      <rect x="3" y="5" width="18" height="16" rx="2" />
+      <line x1="8" y1="3" x2="8" y2="7" />
+      <line x1="16" y1="3" x2="16" y2="7" />
+      <line x1="3" y1="10" x2="21" y2="10" />
+    </Svg>
+  );
+}
+
+export function KeyIcon(props: IconProps) {
+  return (
+    <Svg {...props}>
+      <circle cx="8" cy="16" r="5" />
+      <line x1="11.6" y1="12.4" x2="21" y2="3" />
+      <line x1="17" y1="7" x2="20" y2="10" />
+    </Svg>
+  );
+}
+
+export function CheckIcon(props: IconProps) {
+  return (
+    <Svg {...props}>
+      <polyline points="4,12.5 9.5,18 20,6.5" />
+    </Svg>
+  );
+}
diff --git a/frontend/editor/src/portal/components/procurement/ActionModal.stories.tsx b/frontend/editor/src/portal/components/procurement/ActionModal.stories.tsx
deleted file mode 100644
index ea767202d1..0000000000
--- a/frontend/editor/src/portal/components/procurement/ActionModal.stories.tsx
+++ /dev/null
@@ -1,51 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { ActionModal } from "@portal/components/procurement/ActionModal";
-import type { LedgerDoc } from "@portal/api/procurement";
-import "@portal/views/Procurement.css";
-
-const meta: Meta<typeof ActionModal> = {
-  title: "Portal/Procurement/ActionModal",
-  component: ActionModal,
-  parameters: { layout: "fullscreen" },
-  args: { onClose: () => {}, onDone: () => {} },
-};
-export default meta;
-type Story = StoryObj<typeof ActionModal>;
-
-const sign: LedgerDoc = {
-  id: "d1",
-  name: "Stirling Enterprise Agreement",
-  sub: "One signature: MSA + order form + EULA + DPA.",
-  status: "action",
-  action: "sign",
-};
-
-const pay: LedgerDoc = {
-  id: "d2",
-  name: "Pay online",
-  sub: "Card or bank transfer via Stripe.",
-  status: "pending",
-  action: "pay",
-};
-
-const upload: LedgerDoc = {
-  id: "d3",
-  name: "Purchase order",
-  sub: "Upload it and we invoice against it.",
-  status: "request",
-  action: "upload",
-};
-
-const requestPaid: LedgerDoc = {
-  id: "d4",
-  name: "Custom security review",
-  sub: "Dedicated session with our security team.",
-  status: "request",
-  action: "request",
-  fee: 5_000,
-};
-
-export const Sign: Story = { args: { doc: sign } };
-export const Pay: Story = { args: { doc: pay } };
-export const UploadPO: Story = { args: { doc: upload } };
-export const RequestPaid: Story = { args: { doc: requestPaid } };
diff --git a/frontend/editor/src/portal/components/procurement/ActionModal.tsx b/frontend/editor/src/portal/components/procurement/ActionModal.tsx
deleted file mode 100644
index 0a74f71370..0000000000
--- a/frontend/editor/src/portal/components/procurement/ActionModal.tsx
+++ /dev/null
@@ -1,166 +0,0 @@
-import { useRef, useState } from "react";
-import { useTranslation } from "react-i18next";
-import type { TFunction } from "i18next";
-import { Button, Modal } from "@app/ui";
-import type { LedgerDoc, ProcurementResponse } from "@portal/api/procurement";
-import {
-  payOnline,
-  requestDocument,
-  signAgreement,
-  uploadPurchaseOrder,
-} from "@portal/api/procurement";
-import { USD } from "@portal/components/procurement/format";
-
-interface ActionCopy {
-  title: string;
-  subtitle: string;
-  body: string;
-  cta: string;
-}
-
-/** Per-action confirmation copy, with the fee folded into the CTA when present. */
-function actionCopy(doc: LedgerDoc, t: TFunction): ActionCopy {
-  const fee = doc.fee !== undefined ? ` · ${USD.format(doc.fee)}` : "";
-  switch (doc.action) {
-    case "sign":
-      return {
-        title: t("portal.procurement.modal.signTitle"),
-        subtitle: doc.name,
-        body: t("portal.procurement.modal.signBody"),
-        cta: t("portal.procurement.modal.signCta"),
-      };
-    case "pay":
-      return {
-        title: t("portal.procurement.modal.payTitle"),
-        subtitle: doc.name,
-        body: t("portal.procurement.modal.payBody"),
-        cta: t("portal.procurement.modal.payCta"),
-      };
-    case "upload":
-      return {
-        title: t("portal.procurement.modal.uploadTitle"),
-        subtitle: doc.name,
-        body: t("portal.procurement.modal.uploadBody"),
-        cta: t("portal.procurement.modal.uploadCta"),
-      };
-    case "request":
-      return {
-        title: t("portal.procurement.modal.requestTitle"),
-        subtitle: doc.name,
-        body: doc.fee
-          ? t("portal.procurement.modal.requestBodyPaid")
-          : t("portal.procurement.modal.requestBodyFree"),
-        cta: `${t("portal.procurement.modal.requestCta")}${fee}`,
-      };
-    default:
-      return {
-        title: t("portal.procurement.modal.downloadTitle"),
-        subtitle: doc.name,
-        body: t("portal.procurement.modal.downloadBody"),
-        cta: t("portal.procurement.modal.downloadCta"),
-      };
-  }
-}
-
-/**
- * Confirmation modal for a document's gating action. Owns its in-flight state;
- * on success it hands the updated deal back to the caller via `onDone` so the
- * journey re-renders. Downloads are client-side and just close the modal.
- */
-export function ActionModal({
-  doc,
-  onClose,
-  onDone,
-}: {
-  doc: LedgerDoc | null;
-  onClose: () => void;
-  onDone: (next: ProcurementResponse) => void;
-}) {
-  const { t } = useTranslation();
-  const [submitting, setSubmitting] = useState(false);
-  const fileRef = useRef<HTMLInputElement>(null);
-  const [file, setFile] = useState<File | null>(null);
-
-  if (!doc) return null;
-  const copy = actionCopy(doc, t);
-  const needsFile = doc.action === "upload";
-
-  async function submit() {
-    if (!doc) return;
-    setSubmitting(true);
-    try {
-      let next: ProcurementResponse | null = null;
-      switch (doc.action) {
-        case "sign":
-          next = await signAgreement(doc.id);
-          break;
-        case "pay":
-          next = await payOnline();
-          break;
-        case "upload":
-          if (file) next = await uploadPurchaseOrder(file);
-          break;
-        case "request":
-          next = await requestDocument(doc.id, doc.action);
-          break;
-        default:
-          // download is client-side; no state change.
-          break;
-      }
-      setFile(null);
-      if (next) onDone(next);
-      else onClose();
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  return (
-    <Modal
-      open
-      onClose={onClose}
-      width="md"
-      title={copy.title}
-      subtitle={copy.subtitle}
-      footer={
-        <div className="portal-proc__modal-actions">
-          <Button variant="tertiary" onClick={onClose}>
-            {t("portal.procurement.modal.cancel")}
-          </Button>
-          <Button
-            variant="primary"
-            accent="premium"
-            loading={submitting}
-            disabled={needsFile && !file}
-            onClick={submit}
-          >
-            {copy.cta}
-          </Button>
-        </div>
-      }
-    >
-      <p className="portal-proc__modal-body">{copy.body}</p>
-      {needsFile && (
-        <div className="portal-proc__upload">
-          <input
-            ref={fileRef}
-            type="file"
-            accept=".pdf,.doc,.docx"
-            className="portal-proc__upload-input"
-            onChange={(e) => setFile(e.target.files?.[0] ?? null)}
-          />
-          <Button
-            variant="secondary"
-            size="sm"
-            onClick={() => fileRef.current?.click()}
-          >
-            {t("portal.procurement.modal.chooseFile")}
-          </Button>
-          <span className="portal-proc__upload-name">
-            {file ? file.name : t("portal.procurement.modal.noFile")}
-          </span>
-        </div>
-      )}
-    </Modal>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/DealJourney.stories.tsx b/frontend/editor/src/portal/components/procurement/DealJourney.stories.tsx
deleted file mode 100644
index a59386dc3a..0000000000
--- a/frontend/editor/src/portal/components/procurement/DealJourney.stories.tsx
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { DealJourney } from "@portal/components/procurement/DealJourney";
-import { buildProcurement } from "@portal/mocks/procurement";
-import type { Deal } from "@portal/api/procurement";
-import "@portal/views/Procurement.css";
-
-const data = buildProcurement("enterprise");
-const deal = data.deal as Deal;
-
-const meta: Meta<typeof DealJourney> = {
-  title: "Portal/Procurement/DealJourney",
-  component: DealJourney,
-  parameters: { layout: "padded" },
-  args: { deal, journey: data.journey, onAdvance: () => {} },
-};
-export default meta;
-type Story = StoryObj<typeof DealJourney>;
-
-// Mid-journey at the Agreement stage, the seeded deal state.
-export const Default: Story = {};
-
-// Evaluating: the trial strip shows runway + key; next step builds the quote.
-export const AtTrial: Story = {
-  args: { deal: { ...deal, currentStage: "trial" } },
-};
-
-// Terminal stage, provisioning, no further CTA.
-export const Live: Story = {
-  args: { deal: { ...deal, currentStage: "active" } },
-};
diff --git a/frontend/editor/src/portal/components/procurement/DealJourney.tsx b/frontend/editor/src/portal/components/procurement/DealJourney.tsx
deleted file mode 100644
index 3e8c86e58d..0000000000
--- a/frontend/editor/src/portal/components/procurement/DealJourney.tsx
+++ /dev/null
@@ -1,99 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { Button, Card } from "@app/ui";
-import type { Deal, DealStage, JourneyStep } from "@portal/api/procurement";
-import { StageStepper } from "@portal/components/procurement/StageStepper";
-
-/**
- * The deal's commercial journey in one card: who's guiding it (the solutions
- * engineer), where it sits (the stage stepper), trial runway while evaluating,
- * and the single next action that advances the deal. Mirrors "one next action
- * at a time"; the full per-stage checklist lives in the Documents card.
- */
-export function DealJourney({
-  deal,
-  journey,
-  onAdvance,
-  advancing = false,
-}: {
-  deal: Deal;
-  journey: JourneyStep[];
-  onAdvance: (stage: DealStage) => void;
-  advancing?: boolean;
-}) {
-  const { t } = useTranslation();
-  const { engineer, trial, currentStage } = deal;
-  const currentStep = journey.find((s) => s.stage === currentStage);
-  const isTerminal =
-    journey.length > 0 && journey[journey.length - 1].stage === currentStage;
-
-  return (
-    <Card padding="none" className="portal-proc__journey">
-      <div className="portal-proc__journey-head">
-        <div>
-          <span className="portal-proc__eyebrow">
-            {t("portal.procurement.journey.eyebrow")}
-          </span>
-          <h2 className="portal-proc__journey-title">
-            {t("portal.procurement.journey.title")}
-          </h2>
-          <p className="portal-proc__journey-sub">
-            {t("portal.procurement.journey.subtitle")}
-          </p>
-        </div>
-        <div className="portal-proc__se">
-          <span className="portal-proc__eyebrow">
-            {t("portal.procurement.journey.engineerLabel")}
-          </span>
-          <span className="portal-proc__se-name">{engineer.name}</span>
-          <a
-            className="portal-proc__se-email"
-            href={`mailto:${engineer.email}`}
-          >
-            {engineer.email}
-          </a>
-        </div>
-      </div>
-
-      <div className="portal-proc__journey-stepper">
-        <StageStepper journey={journey} currentStage={currentStage} />
-      </div>
-
-      {currentStage === "trial" && (
-        <div className="portal-proc__trial">
-          <span className="portal-proc__trial-title">
-            {t("portal.procurement.journey.trialTitle")}
-          </span>
-          <span className="portal-proc__trial-dim">
-            {t("portal.procurement.journey.daysLeft", {
-              count: trial.daysLeft,
-            })}
-          </span>
-          <span className="portal-proc__trial-key">{trial.key}</span>
-        </div>
-      )}
-
-      <div className="portal-proc__next">
-        <div className="portal-proc__next-label">
-          <span className="portal-proc__next-dot" data-live={isTerminal} />
-          <span>
-            {isTerminal
-              ? t("portal.procurement.journey.live")
-              : t("portal.procurement.journey.nextStep", {
-                  action: currentStep ? t(currentStep.gatingAction) : "",
-                })}
-          </span>
-        </div>
-        {!isTerminal && currentStep && (
-          <Button
-            variant="primary"
-            accent="premium"
-            loading={advancing}
-            onClick={() => onAdvance(currentStage)}
-          >
-            {t(currentStep.gatingAction)}
-          </Button>
-        )}
-      </div>
-    </Card>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/DealStatusHero.stories.tsx b/frontend/editor/src/portal/components/procurement/DealStatusHero.stories.tsx
index 9421de28bb..77c008ce41 100644
--- a/frontend/editor/src/portal/components/procurement/DealStatusHero.stories.tsx
+++ b/frontend/editor/src/portal/components/procurement/DealStatusHero.stories.tsx
@@ -12,6 +12,10 @@ const base: ProcurementSnapshot = {
   trialExtensionsUsed: 0,
   licensed: false,
   licenseKey: null,
+  businessName: null,
+  contactName: null,
+  contactEmail: null,
+  agreementSignedVersion: null,
   latestQuote: null,
 };
 
@@ -23,11 +27,11 @@ const meta: Meta<typeof DealStatusHero> = {
   args: {
     canSchedule: true,
     onExpand: () => {},
+    onAcceptQuote: () => {},
     onLicense: () => {},
     onInvite: () => {},
     onSchedule: () => {},
     onManageTrial: () => {},
-    onNavigate: () => {},
   },
 };
 export default meta;
diff --git a/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx b/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx
index 092e259bb3..ef2172bb27 100644
--- a/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx
+++ b/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx
@@ -1,31 +1,62 @@
-import { useEffect } from "react";
+import { useEffect, type ReactNode } from "react";
 import { useTranslation } from "react-i18next";
 import { Button } from "@app/ui";
-import type { ViewId } from "@portal/contexts/ViewContext";
 import {
   FLOW_JOURNEY,
+  type DealStage,
   type ProcurementSnapshot,
 } from "@portal/api/procurement";
-import { StageStepper } from "@portal/components/procurement/StageStepper";
+import {
+  CalendarIcon,
+  CheckIcon,
+  DocumentsIcon,
+  KeyIcon,
+  UserPlusIcon,
+} from "@portal/components/icons";
 import { warmCalendly } from "@portal/components/procurement/CalendlyInline";
+import { openApiUrl } from "@portal/api/externalUrl";
 import "@portal/views/Procurement.css";
 
+/** What each stage asks of the buyer, read out in the stage sentence. */
+const STAGE_SENTENCE: Record<DealStage, string> = {
+  // Exploring sits on the Trial rung: same sentence, since the ask is what differs.
+  exploring: "portal.procurement.hero.sentenceTrial",
+  trial: "portal.procurement.hero.sentenceTrial",
+  quote: "portal.procurement.hero.sentenceQuote",
+  security: "portal.procurement.hero.sentenceAgreement",
+  procurement: "portal.procurement.hero.sentencePayment",
+  active: "portal.procurement.hero.sentenceLive",
+};
+
+/** The primary action for each stage; expanding the flow runs it. */
+const STAGE_CTA: Record<DealStage, string> = {
+  exploring: "portal.procurement.hero.ctaExploring",
+  trial: "portal.procurement.hero.ctaTrial",
+  quote: "portal.procurement.hero.ctaQuote",
+  security: "portal.procurement.hero.ctaAgreement",
+  // Same label whether it links straight to Stripe or, lacking an invoice URL, opens the stage dialog
+  // where the invoice actions live — the buyer is being sent to the invoice either way.
+  procurement: "portal.procurement.payment.viewInvoice",
+  active: "portal.procurement.hero.open",
+};
+
 /**
- * The enterprise deal-status hero on Home (procurement lives here, not as a nav tab). Adapts to the
- * deal stage: quick-action chips (trial countdown → manage, licence key, invite teammates,
- * schedule a call), a rollout checklist during the trial, and a stage-specific primary CTA that
- * expands the flow into the takeover modal. Matches the marketing prototype.
+ * The enterprise deal-status hero on Home (procurement lives here, not as a nav tab) — this card IS
+ * the procurement surface. It carries the journey as a segmented progress band plus a stage
+ * sentence, and one primary action with quiet icon buttons beside it; the flow itself opens in the
+ * takeover modal. Rollout setup lives in the non-procurement setup checklist, not here.
  */
 export function DealStatusHero({
   snapshot,
   busy = false,
   canSchedule,
   onExpand,
+  onAcceptQuote,
   onLicense,
   onInvite,
   onSchedule,
   onManageTrial,
-  onNavigate,
+  onDocuments,
 }: {
   snapshot: ProcurementSnapshot;
   busy?: boolean;
@@ -33,11 +64,17 @@ export function DealStatusHero({
    * "Schedule a call" action only appears when the org has linked its account. */
   canSchedule: boolean;
   onExpand: () => void;
+  /**
+   * Accept the issued quote, which advances the deal to the agreement. Offered here rather than
+   * inside the quote review so the buyer can circulate the quote and come back to decide.
+   */
+  onAcceptQuote: () => void;
   onLicense: () => void;
   onInvite: () => void;
   onSchedule: () => void;
   onManageTrial: () => void;
-  onNavigate: (view: ViewId) => void;
+  /** Open the Documents reference (agreement, quote, invoice, EULA, SLA, subprocessors). */
+  onDocuments: () => void;
 }) {
   const { t } = useTranslation();
 
@@ -49,129 +86,181 @@ export function DealStatusHero({
 
   const stage = snapshot.stage ?? "trial";
   const inTrial = stage === "trial";
-  const cta =
-    stage === "trial"
-      ? t("portal.procurement.hero.ctaTrial")
-      : stage === "quote"
-        ? t("portal.procurement.hero.ctaQuote")
-        : stage === "procurement"
-          ? t("portal.procurement.hero.ctaPayment")
-          : t("portal.procurement.hero.ctaLive");
+  const isLive = stage === "active";
+  // A live quote is sitting with the buyer. A draft (or an expired/cancelled one) is not something to
+  // accept — that stage still means "finish building it".
+  const quoteAwaitingDecision =
+    stage === "quote" &&
+    (snapshot.latestQuote?.status === "sent" ||
+      snapshot.latestQuote?.status === "open");
+  // Paying happens on Stripe, so the card links straight there rather than opening a dialog whose only
+  // real action was the same link. Without an invoice URL there is nothing to link to, so the stage
+  // falls back to its dialog, where the signed agreement is still reachable.
+  const invoiceUrl =
+    stage === "procurement" ? snapshot.latestQuote?.invoiceUrl : null;
+  // Known from trial setup onward. The quote's own copy wins when present, since the buyer may have
+  // corrected it there; before either exists the eyebrow stands alone rather than inventing a name.
+  const company =
+    snapshot.latestQuote?.config.businessName?.trim() ||
+    snapshot.businessName?.trim();
 
-  const setupSteps: { title: string; sub: string; view: ViewId }[] = [
-    {
-      title: t("portal.procurement.hero.setup1Title"),
-      sub: t("portal.procurement.hero.setup1Sub"),
-      view: "users",
-    },
-    {
-      title: t("portal.procurement.hero.setup2Title"),
-      sub: t("portal.procurement.hero.setup2Sub"),
-      view: "sources",
-    },
-    {
-      title: t("portal.procurement.hero.setup3Title"),
-      sub: t("portal.procurement.hero.setup3Sub"),
-      view: "policies",
-    },
-  ];
+  // Exploring is presented as the Trial rung — same position, sentence and next step — because the
+  // buyer has entered the journey; only the ask differs, since no trial has actually started.
+  const journeyStage = stage === "exploring" ? "trial" : stage;
+  const currentIdx = Math.max(
+    0,
+    FLOW_JOURNEY.findIndex((s) => s.stage === journeyStage),
+  );
+  const nextStage = FLOW_JOURNEY[currentIdx + 1];
 
   return (
     <div className="portal-hero">
       <div className="portal-hero__top">
-        <div>
+        <div className="portal-hero__ident">
           <span className="portal-hero__eyebrow">
-            {t("portal.procurement.hero.eyebrow")}
+            {company
+              ? t("portal.procurement.hero.eyebrowCompany", { company })
+              : t("portal.procurement.hero.eyebrow")}
           </span>
-          <span className="portal-hero__company">
-            {t("portal.procurement.hero.company")}
-          </span>
-        </div>
-        <div className="portal-hero__chips">
+
+          <div
+            className="portal-hero__bar"
+            role="img"
+            aria-label={t("portal.procurement.hero.barAria", {
+              current: currentIdx + 1,
+              total: FLOW_JOURNEY.length,
+            })}
+          >
+            {FLOW_JOURNEY.map((s, i) => (
+              <span key={s.stage} data-on={i <= currentIdx || undefined} />
+            ))}
+          </div>
+
+          <p className="portal-hero__sentence">
+            <strong>{t(FLOW_JOURNEY[currentIdx].label)}</strong>
+            {` · ${t(STAGE_SENTENCE[stage])} `}
+            {nextStage && (
+              <span className="portal-hero__sentence-next">
+                {t("portal.procurement.hero.next", {
+                  stage: t(nextStage.label),
+                })}
+              </span>
+            )}
+          </p>
+
           {inTrial && snapshot.trialEndsAt && (
-            <button
-              type="button"
-              className="portal-hero__chip portal-hero__chip--action"
-              onClick={onManageTrial}
-            >
-              {t("portal.procurement.journey.daysLeft", {
-                count: daysLeft(snapshot.trialEndsAt),
-              })}
-            </button>
-          )}
-          {snapshot.licenseKey && (
-            <button
-              type="button"
-              className="portal-hero__chip portal-hero__chip--action"
-              onClick={onLicense}
-            >
-              {t("portal.procurement.hero.licenseKey")}
-            </button>
-          )}
-          {stage !== "active" && (
-            <button
-              type="button"
-              className="portal-hero__chip portal-hero__chip--action"
-              onClick={onInvite}
-            >
-              {t("portal.procurement.hero.inviteTeammates")}
-            </button>
-          )}
-          {canSchedule && (
-            <button
-              type="button"
-              className="portal-hero__chip portal-hero__chip--action"
-              onClick={onSchedule}
-            >
-              {t("portal.procurement.hero.scheduleCall")}
-            </button>
+            <div className="portal-hero__chips">
+              <button
+                type="button"
+                className="portal-hero__chip portal-hero__chip--action"
+                onClick={onManageTrial}
+              >
+                {t("portal.procurement.journey.daysLeft", {
+                  count: daysLeft(snapshot.trialEndsAt),
+                })}
+              </button>
+            </div>
           )}
         </div>
       </div>
 
-      <div className="portal-hero__stepper">
-        <StageStepper journey={FLOW_JOURNEY} currentStage={stage} />
-      </div>
-
-      {inTrial && (
-        <ul className="portal-hero__checklist">
-          {setupSteps.map((s) => (
-            <li key={s.title}>
-              <button type="button" onClick={() => onNavigate(s.view)}>
-                <span className="portal-hero__check-dot" aria-hidden />
-                <span className="portal-hero__check-text">
-                  <span className="portal-hero__check-title">{s.title}</span>
-                  <span className="portal-hero__check-sub">{s.sub}</span>
-                </span>
-                <span className="portal-hero__check-pill">
-                  {t("portal.procurement.hero.notStarted")}
-                </span>
-              </button>
-            </li>
-          ))}
-        </ul>
+      {isLive && (
+        <div className="portal-hero__live">
+          <span className="portal-hero__live-tile" aria-hidden>
+            <CheckIcon size={15} />
+          </span>
+          <span className="portal-hero__live-text">
+            <span className="portal-hero__live-title">
+              {t("portal.procurement.hero.liveTitle")}
+            </span>
+            <span className="portal-hero__live-sub">
+              {t("portal.procurement.hero.liveSub")}
+            </span>
+          </span>
+        </div>
       )}
 
-      <div className="portal-hero__next">
-        <span className="portal-hero__next-label">
-          <span className="portal-hero__next-dot" />
-          {t("portal.procurement.hero.nextStep", { action: cta })}
-        </span>
-        <div className="portal-hero__next-actions">
-          <Button
-            variant="primary"
-            accent="premium"
-            loading={busy}
-            onClick={onExpand}
-          >
-            {stage === "active" ? t("portal.procurement.hero.open") : cta}
+      <div className="portal-hero__cta">
+        {/* An issued quote is a decision point, so the card carries both halves of it: accept it, or
+            open it again to read and circulate first. Every other stage has one next step. */}
+        {quoteAwaitingDecision ? (
+          <>
+            <Button variant="primary" loading={busy} onClick={onAcceptQuote}>
+              {t("portal.procurement.review.acceptCta")}
+            </Button>
+            <Button variant="secondary" onClick={onExpand}>
+              {t("portal.procurement.hero.ctaReviewQuote")}
+            </Button>
+          </>
+        ) : invoiceUrl ? (
+          <Button variant="primary" onClick={() => openApiUrl(invoiceUrl)}>
+            {t("portal.procurement.payment.viewInvoice")}
           </Button>
+        ) : (
+          <Button variant="primary" loading={busy} onClick={onExpand}>
+            {t(STAGE_CTA[stage])}
+          </Button>
+        )}
+        <div className="portal-hero__icons">
+          {snapshot.licenseKey && (
+            <IconAction
+              label={t("portal.procurement.hero.licenseKey")}
+              onClick={onLicense}
+            >
+              <KeyIcon size={15} />
+            </IconAction>
+          )}
+          <IconAction
+            label={t("portal.procurement.hero.documents")}
+            onClick={onDocuments}
+          >
+            <DocumentsIcon size={15} />
+          </IconAction>
+          {!isLive && (
+            <IconAction
+              label={t("portal.procurement.hero.inviteTeammates")}
+              onClick={onInvite}
+            >
+              <UserPlusIcon size={15} />
+            </IconAction>
+          )}
+          {canSchedule && (
+            <IconAction
+              label={t("portal.procurement.hero.scheduleCall")}
+              onClick={onSchedule}
+            >
+              <CalendarIcon size={15} />
+            </IconAction>
+          )}
         </div>
       </div>
     </div>
   );
 }
 
+/** A quiet icon-only secondary action; its label carries in the tooltip and to screen readers. */
+function IconAction({
+  label,
+  onClick,
+  children,
+}: {
+  label: string;
+  onClick: () => void;
+  children: ReactNode;
+}) {
+  return (
+    <button
+      type="button"
+      className="portal-hero__iconbtn"
+      title={label}
+      aria-label={label}
+      onClick={onClick}
+    >
+      {children}
+    </button>
+  );
+}
+
 function daysLeft(iso: string): number {
   const end = new Date(iso).getTime();
   return Math.max(0, Math.ceil((end - Date.now()) / 86_400_000));
diff --git a/frontend/editor/src/portal/components/procurement/DocRow.stories.tsx b/frontend/editor/src/portal/components/procurement/DocRow.stories.tsx
deleted file mode 100644
index 695b8c6941..0000000000
--- a/frontend/editor/src/portal/components/procurement/DocRow.stories.tsx
+++ /dev/null
@@ -1,62 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { DocRow } from "@portal/components/procurement/DocRow";
-import type { LedgerDoc } from "@portal/api/procurement";
-import "@portal/views/Procurement.css";
-
-const meta: Meta<typeof DocRow> = {
-  title: "Portal/Procurement/DocRow",
-  component: DocRow,
-  parameters: { layout: "padded" },
-  args: { onAction: () => {} },
-};
-export default meta;
-type Story = StoryObj<typeof DocRow>;
-
-const sign: LedgerDoc = {
-  id: "d1",
-  name: "Stirling Enterprise Agreement",
-  sub: "One signature: MSA + order form + EULA + DPA.",
-  status: "action",
-  action: "sign",
-};
-
-const download: LedgerDoc = {
-  id: "d2",
-  name: "SOC 2 Type II report",
-  sub: "Independent audit of our security controls.",
-  status: "available",
-  action: "download",
-};
-
-const paidAddon: LedgerDoc = {
-  id: "d3",
-  name: "Onboarding & training",
-  sub: "Guided rollout and live training for your team.",
-  status: "request",
-  action: "request",
-  optional: true,
-  fee: 7_500,
-};
-
-const done: LedgerDoc = {
-  id: "d4",
-  name: "Formal quote",
-  sub: "Committed-volume pricing, term and line items.",
-  status: "complete",
-  action: "download",
-};
-
-// Deal-advancing action, filled purple CTA.
-export const SignAction: Story = { args: { doc: sign } };
-
-// Quiet outline action for a ready download.
-export const Download: Story = { args: { doc: download } };
-
-// Optional paid add-on, chips flag it and the fee folds into the CTA.
-export const PaidAddon: Story = { args: { doc: paidAddon } };
-
-// Completed paperwork keeps a record but offers no further action.
-export const Complete: Story = { args: { doc: done } };
-
-// A row in a future, not-yet-reached stage, dimmed, marked "Upcoming", inert.
-export const Locked: Story = { args: { doc: sign, locked: true } };
diff --git a/frontend/editor/src/portal/components/procurement/DocRow.tsx b/frontend/editor/src/portal/components/procurement/DocRow.tsx
deleted file mode 100644
index b4329fbfa4..0000000000
--- a/frontend/editor/src/portal/components/procurement/DocRow.tsx
+++ /dev/null
@@ -1,89 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { Button, Chip, StatusBadge } from "@app/ui";
-import type { LedgerDoc } from "@portal/api/procurement";
-import {
-  ACTION_LABEL_KEY,
-  STATUS_LABEL_KEY,
-  STATUS_TONE,
-  USD,
-} from "@portal/components/procurement/format";
-
-/** Maps a document's action to the button accent + variant. */
-function buttonStyle(doc: LedgerDoc): {
-  variant: "primary" | "secondary";
-  accent: "premium" | "default";
-} {
-  // The agreement signature and online payment are the deal-advancing actions;
-  // give them the filled premium CTA. Everything else is a quieter outline.
-  if (doc.action === "sign" || doc.action === "pay") {
-    return { variant: "primary", accent: "premium" };
-  }
-  return { variant: "secondary", accent: "default" };
-}
-
-/**
- * A single document in the ledger or supporting pool: name + sub-line on the
- * left, status badge and action button on the right. Optional/fee-bearing docs
- * carry a chip so the buyer sees a paid add-on before clicking. `locked` is for
- * rows in a future, not-yet-reached stage: dimmed, marked "Upcoming", inert.
- */
-export function DocRow({
-  doc,
-  onAction,
-  locked = false,
-}: {
-  doc: LedgerDoc;
-  onAction: (doc: LedgerDoc) => void;
-  locked?: boolean;
-}) {
-  const { t } = useTranslation();
-  const { variant, accent } = buttonStyle(doc);
-  // Locked (future-stage), in-progress (pending) and completed paperwork all
-  // offer no action; only "available", "action" and "request" docs do.
-  const actionable =
-    !locked && doc.status !== "complete" && doc.status !== "pending";
-  const label = t(ACTION_LABEL_KEY[doc.action]);
-  const actionLabel =
-    doc.fee !== undefined ? `${label} · ${USD.format(doc.fee)}` : label;
-
-  return (
-    <div className="portal-proc__doc" data-locked={locked || undefined}>
-      <div className="portal-proc__doc-text">
-        <div className="portal-proc__doc-name-row">
-          <span className="portal-proc__doc-name">{doc.name}</span>
-          {doc.optional && (
-            <Chip accent="neutral" size="sm">
-              {t("portal.procurement.docs.optional")}
-            </Chip>
-          )}
-          {doc.fee !== undefined && (
-            <Chip accent="warning" size="sm">
-              {t("portal.procurement.docs.paidAddon")}
-            </Chip>
-          )}
-        </div>
-        <p className="portal-proc__doc-sub">{doc.sub}</p>
-      </div>
-      <div className="portal-proc__doc-actions">
-        <StatusBadge
-          tone={locked ? "neutral" : STATUS_TONE[doc.status]}
-          size="sm"
-        >
-          {locked
-            ? t("portal.procurement.docs.upcoming")
-            : t(STATUS_LABEL_KEY[doc.status])}
-        </StatusBadge>
-        {actionable && (
-          <Button
-            variant={variant}
-            accent={accent}
-            size="sm"
-            onClick={() => onAction(doc)}
-          >
-            {actionLabel}
-          </Button>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/DocumentLedger.stories.tsx b/frontend/editor/src/portal/components/procurement/DocumentLedger.stories.tsx
deleted file mode 100644
index 5de6692999..0000000000
--- a/frontend/editor/src/portal/components/procurement/DocumentLedger.stories.tsx
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { DocumentLedger } from "@portal/components/procurement/DocumentLedger";
-import { buildProcurement } from "@portal/mocks/procurement";
-import "@portal/views/Procurement.css";
-
-const data = buildProcurement("enterprise");
-
-const meta: Meta<typeof DocumentLedger> = {
-  title: "Portal/Procurement/DocumentLedger",
-  component: DocumentLedger,
-  parameters: { layout: "padded" },
-  args: {
-    groups: data.ledger,
-    supporting: data.supporting,
-    journey: data.journey,
-    currentStage: data.deal?.currentStage ?? "trial",
-    onAction: () => {},
-  },
-};
-export default meta;
-type Story = StoryObj<typeof DocumentLedger>;
-
-// Mid-journey: the Agreement stage is open, earlier stages read as done, later
-// stages are locked previews, and the supporting pool sits collapsed below.
-export const Default: Story = {};
-
-// Day one: only the Trial stage has been reached; everything ahead is locked.
-export const AtTrial: Story = {
-  args: { currentStage: "trial" },
-};
diff --git a/frontend/editor/src/portal/components/procurement/DocumentLedger.tsx b/frontend/editor/src/portal/components/procurement/DocumentLedger.tsx
deleted file mode 100644
index aa9e6ae8ce..0000000000
--- a/frontend/editor/src/portal/components/procurement/DocumentLedger.tsx
+++ /dev/null
@@ -1,160 +0,0 @@
-import { useEffect, useState } from "react";
-import { useTranslation } from "react-i18next";
-import { Card, Chip, Collapsible } from "@app/ui";
-import type {
-  DealStage,
-  JourneyStep,
-  LedgerDoc,
-  LedgerGroup,
-  SupportingGroup,
-} from "@portal/api/procurement";
-import { DocRow } from "@portal/components/procurement/DocRow";
-
-/**
- * The "Documents" card: every artifact the deal needs, as a stage accordion
- * that mirrors the journey. Only the current stage is open by default; earlier
- * stages read as done, later stages are locked previews. A collapsed-by-default
- * "Supporting your evaluation" pool holds the stage-agnostic paperwork.
- */
-export function DocumentLedger({
-  groups,
-  supporting,
-  journey,
-  currentStage,
-  onAction,
-}: {
-  groups: LedgerGroup[];
-  supporting: SupportingGroup[];
-  journey: JourneyStep[];
-  currentStage: DealStage;
-  onAction: (doc: LedgerDoc) => void;
-}) {
-  const { t } = useTranslation();
-  const order = journey.map((s) => s.stage);
-  const curIdx = order.indexOf(currentStage);
-  // Follow the deal: the stage you're in opens first; any other stage can be
-  // peeked. null collapses them all. Advancing moves the open section along.
-  const [openStage, setOpenStage] = useState<DealStage | null>(currentStage);
-  const [supportingOpen, setSupportingOpen] = useState(false);
-  useEffect(() => setOpenStage(currentStage), [currentStage]);
-
-  return (
-    <Card padding="none" className="portal-proc__docs">
-      <div className="portal-proc__docs-head">
-        <h2 className="portal-proc__docs-title">
-          {t("portal.procurement.docs.title")}
-        </h2>
-        <p className="portal-proc__docs-sub">
-          {t("portal.procurement.docs.subtitle")}
-        </p>
-      </div>
-
-      <div className="portal-proc__docs-body">
-        {groups.map((group) => {
-          const idx = order.indexOf(group.stage);
-          const done = idx < curIdx;
-          const cur = group.stage === currentStage;
-          const locked = idx > curIdx;
-          const blurb = journey.find((s) => s.stage === group.stage)?.blurb;
-          const open = openStage === group.stage;
-          const count = group.docs.length;
-
-          return (
-            <Collapsible
-              key={group.stage}
-              open={open}
-              onToggle={() => setOpenStage(open ? null : group.stage)}
-              header={
-                <>
-                  <span
-                    className="portal-proc__stage-dot"
-                    data-state={done ? "done" : cur ? "current" : "upcoming"}
-                    aria-hidden
-                  />
-                  <span
-                    className="portal-proc__stage-label"
-                    data-current={cur || undefined}
-                  >
-                    {t(group.label)}
-                  </span>
-                  {blurb && (
-                    <span className="portal-proc__stage-hint">
-                      · {t(blurb)}
-                    </span>
-                  )}
-                  {cur && (
-                    <Chip accent="premium" size="sm">
-                      {t("portal.procurement.docs.here")}
-                    </Chip>
-                  )}
-                  {done && (
-                    <Chip accent="success" size="sm">
-                      {t("portal.procurement.docs.done")}
-                    </Chip>
-                  )}
-                </>
-              }
-              aside={
-                <span className="portal-proc__stage-count">
-                  {t("portal.procurement.docs.count", { count })}
-                </span>
-              }
-            >
-              <div className="portal-proc__doc-list">
-                {group.docs.map((doc) => (
-                  <DocRow
-                    key={doc.id}
-                    doc={doc}
-                    onAction={onAction}
-                    locked={locked}
-                  />
-                ))}
-              </div>
-            </Collapsible>
-          );
-        })}
-
-        {supporting.length > 0 && (
-          <Collapsible
-            className="portal-proc__supporting-acc"
-            open={supportingOpen}
-            onToggle={() => setSupportingOpen((o) => !o)}
-            header={
-              <span className="portal-proc__supporting-head">
-                <span className="portal-proc__stage-label">
-                  {t("portal.procurement.docs.supportingTitle")}
-                </span>
-                <span className="portal-proc__supporting-sub">
-                  {t("portal.procurement.docs.supportingSubtitle")}
-                </span>
-              </span>
-            }
-            aside={
-              <span className="portal-proc__acc-toggle-label">
-                {supportingOpen
-                  ? t("portal.procurement.docs.hide")
-                  : t("portal.procurement.docs.show")}
-              </span>
-            }
-          >
-            <div className="portal-proc__supporting-groups">
-              {supporting.map((group) => (
-                <div
-                  key={group.category}
-                  className="portal-proc__supporting-group"
-                >
-                  <div className="portal-proc__group-label">{group.label}</div>
-                  <div className="portal-proc__doc-list portal-proc__doc-list--boxed">
-                    {group.docs.map((doc) => (
-                      <DocRow key={doc.id} doc={doc} onAction={onAction} />
-                    ))}
-                  </div>
-                </div>
-              ))}
-            </div>
-          </Collapsible>
-        )}
-      </div>
-    </Card>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/LockedState.stories.tsx b/frontend/editor/src/portal/components/procurement/LockedState.stories.tsx
deleted file mode 100644
index eae9db4d99..0000000000
--- a/frontend/editor/src/portal/components/procurement/LockedState.stories.tsx
+++ /dev/null
@@ -1,18 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { LockedState } from "@portal/components/procurement/LockedState";
-import { JOURNEY } from "@portal/api/procurement";
-import "@portal/views/Procurement.css";
-
-const meta: Meta<typeof LockedState> = {
-  title: "Portal/Procurement/LockedState",
-  component: LockedState,
-  parameters: { layout: "padded" },
-  args: { onTalkToSales: () => {} },
-};
-export default meta;
-type Story = StoryObj<typeof LockedState>;
-
-// Shown to free/pro buyers, the journey preview behind the upgrade prompt.
-export const Default: Story = {
-  args: { journey: JOURNEY },
-};
diff --git a/frontend/editor/src/portal/components/procurement/LockedState.tsx b/frontend/editor/src/portal/components/procurement/LockedState.tsx
deleted file mode 100644
index 8e70ba18c4..0000000000
--- a/frontend/editor/src/portal/components/procurement/LockedState.tsx
+++ /dev/null
@@ -1,36 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { Button, Card, EmptyState } from "@app/ui";
-import type { JourneyStep } from "@portal/api/procurement";
-import { StageStepper } from "@portal/components/procurement/StageStepper";
-
-/**
- * Enterprise-only gate for free/pro buyers. Shows the journey as a greyed
- * preview behind an upgrade prompt so the buyer understands what the
- * commercial track looks like before they talk to sales.
- */
-export function LockedState({
-  journey,
-  onTalkToSales,
-}: {
-  journey: JourneyStep[];
-  onTalkToSales: () => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <div className="portal-proc__locked">
-      <EmptyState
-        eyebrow={t("portal.procurement.locked.eyebrow")}
-        title={t("portal.procurement.locked.title")}
-        description={t("portal.procurement.locked.description")}
-        actions={
-          <Button variant="primary" accent="premium" onClick={onTalkToSales}>
-            {t("portal.procurement.locked.talkToSales")}
-          </Button>
-        }
-      />
-      <Card padding="loose" className="portal-proc__journey-stepper">
-        <StageStepper journey={journey} currentStage="trial" locked />
-      </Card>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementAgreement.stories.tsx b/frontend/editor/src/portal/components/procurement/ProcurementAgreement.stories.tsx
index a6ca8dfcf5..fd47d867c6 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementAgreement.stories.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementAgreement.stories.tsx
@@ -69,10 +69,9 @@ const meta: Meta<typeof ProcurementAgreement> = {
   args: {
     quote,
     busy: false,
-    downloading: false,
     onAgree: () => {},
-    onDownload: () => {},
-    onEdit: () => {},
+    onRequestChanges: () => {},
+    onClose: () => {},
   },
 };
 export default meta;
@@ -81,12 +80,7 @@ type Story = StoryObj<typeof ProcurementAgreement>;
 
 export const Default: Story = {};
 
-// Agreeing: the primary CTA shows its loading state while the accept call is in flight.
-export const Agreeing: Story = {
+// Signing: the primary CTA shows its loading state while the accept call is in flight.
+export const Signing: Story = {
   args: { busy: true },
 };
-
-// Downloading: the secondary action shows its loading state instead.
-export const Downloading: Story = {
-  args: { downloading: true },
-};
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx b/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx
index 336b6af5cb..318f23aca5 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx
@@ -1,152 +1,267 @@
-import { useState } from "react";
+import { useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
-import { Button, Card } from "@app/ui";
-import type { QuoteResult } from "@portal/api/procurement";
-import { money } from "@portal/components/procurement/format";
+import Markdown from "react-markdown";
+import remarkGfm from "remark-gfm";
+import { Button } from "@app/ui";
+import {
+  fetchAgreementDocument,
+  fetchAgreementPdf,
+  recordAgreementSignature,
+  type QuoteResult,
+} from "@portal/api/procurement";
+import { DownloadIcon } from "@portal/components/icons";
+import { StepModalHeader } from "@portal/components/shared/StepModalHeader";
+import { useAsync } from "@portal/hooks/useAsync";
 import "@portal/views/Procurement.css";
 
 /**
- * The agreement (security) step: a single combined Stirling Enterprise Agreement — Master Service
- * Agreement + Order Form (from the issued quote) + EULA + Data Processing Agreement — that the buyer
- * reviews and agrees to before it's accepted into a subscription. No e-signature for now: an explicit
- * "I agree" click stands in (the terms reference the accepted quote). Document body is static legal
- * copy; the surrounding UI is translated.
+ * The agreement (security) step: the buyer reviews the full Stirling Enterprise Agreement — Master
+ * Services Agreement + Order Form (from the quote) + Data Processing Addendum, one signature — then
+ * signs it. The document body is served by the backend from the versioned legal registry (static
+ * legal copy, English only); this component renders it, gates signing behind a scroll-through, and
+ * captures the typed legal name, signatory, title, and authority. On sign it records the signature
+ * (pinned to the exact document version + a hash) and then accepts the quote into a subscription.
+ *
+ * Presented as the document itself rather than a card about it: this step names the agreement in the
+ * dialog's own header and carries its download there, so the terms are read on paper-like stock
+ * instead of in app chrome. That is why it draws its own header — see ProcurementFlow.
  */
 export function ProcurementAgreement({
   quote,
   busy,
-  downloading,
   onAgree,
-  onDownload,
-  onEdit,
+  onRequestChanges,
+  onClose,
 }: {
   quote: QuoteResult;
   busy: boolean;
-  downloading: boolean;
-  /** Accept the quote straight into a committed subscription (this is also the agreement). */
+  /** Accept the quote straight into a committed subscription (runs after the signature is saved). */
   onAgree: () => void;
-  onDownload: () => void;
-  onEdit: () => void;
+  /** Hand the buyer to their SE to negotiate terms: closes this and opens scheduling. */
+  onRequestChanges: () => void;
+  /** This step draws the dialog's header, so it carries the close too. */
+  onClose?: () => void;
 }) {
   const { t } = useTranslation();
-  const [checked, setChecked] = useState(false);
-  const annual = money(quote.annualNetMinor, quote.currency);
-  const tcv = money(quote.tcvMinor, quote.currency);
-  const renewal = money(quote.renewalAnnualNetMinor, quote.currency);
-  const years = quote.config.termYears;
+  const { data: doc, loading } = useAsync(fetchAgreementDocument, []);
+
+  const [legalName, setLegalName] = useState(quote.config.businessName ?? "");
+  const [signatory, setSignatory] = useState(quote.config.contactName ?? "");
+  const [title, setTitle] = useState("");
+  const [confirmed, setConfirmed] = useState(false);
+  const [scrolledToEnd, setScrolledToEnd] = useState(false);
+  const [signing, setSigning] = useState(false);
+  const [downloadingMsa, setDownloadingMsa] = useState(false);
+  const [error, setError] = useState(false);
+  const [downloadError, setDownloadError] = useState(false);
+  const docRef = useRef<HTMLDivElement>(null);
+
+  const downloadMsa = async () => {
+    setDownloadingMsa(true);
+    setDownloadError(false);
+    try {
+      const blob = await fetchAgreementPdf();
+      const url = URL.createObjectURL(blob);
+      const a = document.createElement("a");
+      a.href = url;
+      a.download = "stirling-enterprise-agreement.pdf";
+      document.body.appendChild(a);
+      a.click();
+      a.remove();
+      setTimeout(() => URL.revokeObjectURL(url), 60_000);
+    } catch {
+      // Surface the failure — the PDF is rendered server-side, so a failure here means the
+      // render service is unavailable rather than something the buyer can retry around.
+      setDownloadError(true);
+    } finally {
+      setDownloadingMsa(false);
+    }
+  };
+
+  const onScroll = () => {
+    const el = docRef.current;
+    if (!el) return;
+    if (el.scrollTop + el.clientHeight >= el.scrollHeight - 24) {
+      setScrolledToEnd(true);
+    }
+  };
+
+  const ready =
+    scrolledToEnd &&
+    confirmed &&
+    legalName.trim().length > 0 &&
+    signatory.trim().length > 0;
+
+  const sign = async () => {
+    setError(false);
+    setSigning(true);
+    try {
+      await recordAgreementSignature({
+        customerLegalName: legalName.trim(),
+        signatoryName: signatory.trim(),
+        signatoryTitle: title.trim(),
+        authorityConfirmed: confirmed,
+      });
+      onAgree(); // proceed into the committed subscription
+    } catch {
+      setError(true);
+    } finally {
+      // In `finally`, not only on failure: accepting can fail after the signature is recorded, and
+      // the controller deliberately keeps this dialog open on failure so the error is readable. With
+      // the flag left set, the button span the rest of the session and there was no way to retry.
+      setSigning(false);
+    }
+  };
 
   return (
-    <Card padding="loose">
-      <span className="portal-proc__eyebrow">
-        {t("portal.procurement.agreement.eyebrow")}
-      </span>
-      <h3 className="portal-proc__builder-title">
-        {t("portal.procurement.agreement.title")}
-      </h3>
-      <p className="portal-proc__subtitle">
-        {t("portal.procurement.agreement.intro")}
-      </p>
+    <div className="portal-agreement">
+      <StepModalHeader
+        title={t("portal.procurement.agreement.docName")}
+        subtitle={t("portal.procurement.agreement.docSub")}
+        onClose={onClose}
+        aside={
+          // Grouped so the two document actions read as a pair, set apart from the close.
+          <div className="portal-agreement__actions">
+            {/* On the document, like the quote's: it downloads what is on screen. */}
+            <Button
+              variant="tertiary"
+              size="sm"
+              leftSection={<DownloadIcon size={14} />}
+              loading={downloadingMsa}
+              onClick={downloadMsa}
+            >
+              {t("portal.procurement.agreement.download")}
+            </Button>
+            {/* Redlines are a conversation, not a form: this hands the buyer to their SE rather than
+                pretending the terms can be amended in the app. */}
+            <Button variant="tertiary" size="sm" onClick={onRequestChanges}>
+              {t("portal.procurement.agreement.requestChanges")}
+            </Button>
+          </div>
+        }
+      />
 
-      <div className="portal-agreement__doc">
-        <h4>1. Master Service Agreement</h4>
-        <p>
-          This Stirling Enterprise Agreement ("Agreement") is entered into
-          between Stirling PDF Inc. ("Stirling") and the customer identified on
-          the Order Form ("Customer"). It governs Customer's access to and use
-          of the Stirling enterprise platform and related services (the
-          "Service"). Stirling will provide the Service with commercially
-          reasonable skill and care and in accordance with the service levels
-          set out in the Order Form.
-        </p>
+      {/* The tray scrolls, not the paper. The paper is its natural height inside it, so mid-document it
+          runs flush to the footer with no grey beneath, and the tray's bottom padding only comes into
+          view once the buyer reaches the end — the page ending is what shows they got there. */}
+      <div
+        className="portal-agreement__tray portal-agreement__scroll"
+        ref={docRef}
+        onScroll={onScroll}
+      >
+        <div className="portal-agreement__doc">
+          {loading && <p>{t("portal.procurement.agreement.loading")}</p>}
+          {!loading && !doc && (
+            <p>{t("portal.procurement.agreement.loadError")}</p>
+          )}
+          {doc && (
+            <>
+              {/* Letterhead: the reference ties the terms to the quote they price, and the version
+                  label pins what was signed. The document's own heading follows, so this adds a
+                  masthead rather than repeating the title. */}
+              <div className="portal-agreement__letterhead">
+                <span className="portal-agreement__confidential">
+                  {t("portal.procurement.agreement.confidential")}
+                </span>
+                <span>
+                  {t("portal.procurement.agreement.ref", {
+                    ref: quote.quoteNumber,
+                    version: doc.versionLabel,
+                  })}
+                </span>
+              </div>
+              <div className="portal-agreement__md">
+                <Markdown remarkPlugins={[remarkGfm]}>{doc.markdown}</Markdown>
+              </div>
+            </>
+          )}
+        </div>
+      </div>
 
-        <h4>2. Order Form</h4>
-        <p>
-          Quote <strong>{quote.quoteNumber}</strong> forms the Order Form for
-          this Agreement. Customer commits to a {years}-year term at{" "}
-          <strong>{annual}</strong> per year (total contract value{" "}
-          <strong>{tcv}</strong>), billed annually in advance by invoice. Fees
-          are exclusive of taxes. The committed volume, service level, and
-          add-ons are itemised below:
+      {error && (
+        <p className="portal-proc__error">
+          {t("portal.procurement.agreement.signError")}
         </p>
-        <ul className="portal-qb__lines portal-agreement__lines">
-          {quote.lineItems.map((li) => (
-            <li key={li.key} data-kind={li.kind}>
-              <span>{li.label}</span>
-              <span>
-                {li.kind === "INCLUDED"
-                  ? t("portal.procurement.builder.included")
-                  : money(li.amountMinor, quote.currency)}
+      )}
+      {downloadError && (
+        <p className="portal-proc__error">
+          {t("portal.procurement.agreement.downloadDraftError")}
+        </p>
+      )}
+
+      {/* The signature block: who is bound, who signs, and the act of signing, on one line — the
+          shape of a paper signature block rather than a form above a button. The consent sits
+          directly under the fields it qualifies, with no rule between them: it is part of signing,
+          not a separate section, and boxing it cost the document a quarter of its height. */}
+      <div className="portal-qb__foot portal-agreement__signbar">
+        <div className="portal-agreement__signrow">
+          <div className="portal-qb__row portal-agreement__signfields">
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.agreement.legalName")}
               </span>
-            </li>
-          ))}
-        </ul>
+              <input
+                value={legalName}
+                placeholder={t(
+                  "portal.procurement.agreement.legalNamePlaceholder",
+                )}
+                onChange={(e) => setLegalName(e.target.value)}
+              />
+            </label>
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.agreement.signatory")}
+              </span>
+              <input
+                value={signatory}
+                placeholder={t(
+                  "portal.procurement.agreement.signatoryPlaceholder",
+                )}
+                onChange={(e) => setSignatory(e.target.value)}
+              />
+            </label>
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.agreement.signatoryTitle")}
+              </span>
+              <input
+                value={title}
+                placeholder={t(
+                  "portal.procurement.agreement.signatoryTitlePlaceholder",
+                )}
+                onChange={(e) => setTitle(e.target.value)}
+              />
+            </label>
+          </div>
+          <Button
+            variant="primary"
+            loading={busy || signing}
+            disabled={!ready}
+            onClick={sign}
+          >
+            {t("portal.procurement.agreement.agreeCta")}
+          </Button>
+        </div>
 
-        <h4>3. Term, renewal and annual fee adjustment</h4>
-        <p>
-          This Agreement runs for the committed {years}-year term set out in the
-          Order Form. It then renews automatically for successive one-year terms
-          unless either party gives written notice of non-renewal at least 30
-          days before the end of the then-current term. On each renewal the
-          annual fee increases by {quote.cpiRatePct}%, a fixed CPI adjustment.
-          Based on this quote, the first renewal year would be approximately{" "}
-          <strong>{renewal}</strong> per year; the committed term above is
-          billed at the rate in the Order Form and is not affected.
-        </p>
-
-        <h4>4. End-User License Agreement</h4>
-        <p>
-          Subject to the terms of this Agreement, Stirling grants Customer a
-          non-exclusive, non-transferable right to use the Service for its
-          internal business purposes during the term. Customer is responsible
-          for its users' compliance and for the content it processes. The
-          Service, and all intellectual property in it, remains Stirling's.
-        </p>
-
-        <h4>5. Data Processing Agreement</h4>
-        <p>
-          Where Stirling processes personal data on Customer's behalf, it does
-          so only on Customer's documented instructions and applies appropriate
-          technical and organisational measures. Sub-processors, international
-          transfers, and security commitments are as described in Stirling's
-          Data Processing Agreement and Trust Center, incorporated here by
-          reference.
-        </p>
-
-        <h4>6. Acceptance</h4>
-        <p>
-          By agreeing below, Customer accepts this Agreement and the Order Form.
-          On acceptance, Stirling will issue the committed annual subscription
-          and its first invoice. This preview stands in for e-signature during
-          the pilot.
-        </p>
+        {/* Consent under the fields it qualifies; the gate's state under the button it gates, so the
+            reason signing is unavailable sits beside the unavailable thing. */}
+        <div className="portal-agreement__signfoot">
+          <label className="portal-agreement__accept">
+            <input
+              type="checkbox"
+              checked={confirmed}
+              disabled={!scrolledToEnd}
+              onChange={(e) => setConfirmed(e.target.checked)}
+            />
+            <span>{t("portal.procurement.agreement.confirm")}</span>
+          </label>
+          {doc && !scrolledToEnd && (
+            <span className="portal-agreement__gate">
+              {t("portal.procurement.agreement.scrollHint")}
+            </span>
+          )}
+        </div>
       </div>
-
-      <label className="portal-qb__eula portal-agreement__accept">
-        <input
-          type="checkbox"
-          checked={checked}
-          onChange={(e) => setChecked(e.target.checked)}
-        />
-        <span>{t("portal.procurement.agreement.confirm")}</span>
-      </label>
-
-      <div className="portal-proc__payment-actions">
-        <Button
-          variant="primary"
-          accent="premium"
-          loading={busy}
-          disabled={!checked}
-          onClick={onAgree}
-        >
-          {t("portal.procurement.agreement.agreeCta")}
-        </Button>
-        <Button variant="secondary" loading={downloading} onClick={onDownload}>
-          {t("portal.procurement.milestone.download")}
-        </Button>
-        <Button variant="tertiary" onClick={onEdit}>
-          {t("portal.procurement.milestone.edit")}
-        </Button>
-      </div>
-    </Card>
+    </div>
   );
 }
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementBanner.stories.tsx b/frontend/editor/src/portal/components/procurement/ProcurementBanner.stories.tsx
deleted file mode 100644
index 28e9d2f99a..0000000000
--- a/frontend/editor/src/portal/components/procurement/ProcurementBanner.stories.tsx
+++ /dev/null
@@ -1,79 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { ProcurementBanner } from "@portal/components/procurement/ProcurementBanner";
-import type { ProcurementController } from "@portal/components/procurement/useProcurement";
-import type { ProcurementSnapshot } from "@portal/api/procurement";
-
-const snapshot: ProcurementSnapshot = {
-  dealId: 1,
-  stage: "trial",
-  deployment: "cloud",
-  seats: 250,
-  trialStartedAt: "2026-06-25T00:00:00Z",
-  trialEndsAt: "2026-07-09T00:00:00Z",
-  trialExtensionsUsed: 0,
-  licensed: false,
-  licenseKey: null,
-  latestQuote: null,
-};
-
-function makeController(
-  overrides: Partial<ProcurementController> = {},
-): ProcurementController {
-  return {
-    isLinked: true,
-    loading: false,
-    data: null,
-    started: false,
-    stage: undefined,
-    latest: null,
-    isIssued: false,
-    isDraft: true,
-    busy: false,
-    downloading: false,
-    downloadingLicense: false,
-    error: null,
-    setError: () => {},
-    open: false,
-    setOpen: () => {},
-    editing: false,
-    setEditing: () => {},
-    extra: null,
-    setExtra: () => {},
-    invoicePdf: null,
-    onStartTrial: () => {},
-    onConfirmSetup: () => {},
-    onExtendTrial: () => {},
-    onReset: () => {},
-    onGenerate: () => {},
-    onAgree: () => {},
-    onDownloadPdf: async () => {},
-    onDownloadOfflineLicense: async () => {},
-    ...overrides,
-  };
-}
-
-/** Deal-status hero once a deal is underway, otherwise the enterprise on-ramp. */
-const meta: Meta<typeof ProcurementBanner> = {
-  title: "Portal/Procurement/ProcurementBanner",
-  component: ProcurementBanner,
-  parameters: { layout: "padded" },
-};
-export default meta;
-
-type Story = StoryObj<typeof meta>;
-
-/** No deal yet: the enterprise on-ramp upsell. */
-export const Upsell: Story = {
-  args: { controller: makeController() },
-};
-
-/** A deal is underway: the wired deal-status hero. */
-export const DealUnderway: Story = {
-  args: {
-    controller: makeController({
-      started: true,
-      data: snapshot,
-      stage: snapshot.stage,
-    }),
-  },
-};
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementBanner.tsx b/frontend/editor/src/portal/components/procurement/ProcurementBanner.tsx
index d47ffa0b48..626cc8e9fb 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementBanner.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementBanner.tsx
@@ -1,13 +1,10 @@
-import { useTranslation } from "react-i18next";
-import { Button, Card } from "@app/ui";
 import { useView } from "@portal/contexts/ViewContext";
 import { DealStatusHero } from "@portal/components/procurement/DealStatusHero";
 import type { ProcurementController } from "@portal/components/procurement/useProcurement";
 
 /**
- * The deal-status hero, wired to a shared ProcurementController. Rendered both
- * standalone (the /procurement route) and as the Home hero card's footer once a
- * deal is underway. Assumes an active deal (controller.data present).
+ * The deal-status hero, wired to a shared ProcurementController. Rendered as the Home hero card's
+ * footer once a deal is underway; assumes an active deal (controller.data present).
  */
 export function ControlledDealStatusHero({
   controller,
@@ -21,60 +18,18 @@ export function ControlledDealStatusHero({
       snapshot={controller.data}
       busy={controller.busy}
       canSchedule={controller.isLinked}
-      onExpand={() => controller.setOpen(true)}
+      onExpand={() =>
+        // Exploring has no journey to expand into yet — its ask is to set the trial up.
+        controller.stage === "exploring"
+          ? controller.onStartTrial()
+          : controller.setOpen(true)
+      }
+      onAcceptQuote={() => void controller.onAcceptQuote()}
       onLicense={() => controller.setExtra("license")}
       onInvite={() => setActiveView("users")}
       onSchedule={() => controller.setExtra("schedule")}
       onManageTrial={() => controller.setExtra("trial")}
-      onNavigate={setActiveView}
+      onDocuments={() => controller.setExtra("documents")}
     />
   );
 }
-
-/**
- * Enterprise on-ramp shown when no deal exists yet. Only used on the dedicated
- * /procurement route — on Home the setup checklist's Enterprise rung owns the
- * on-ramp, so this doesn't render there.
- */
-export function ProcurementUpsell({
-  controller,
-}: {
-  controller: ProcurementController;
-}) {
-  const { t } = useTranslation();
-  return (
-    <Card className="portal-proc__upsell">
-      <div className="portal-proc__upsell-text">
-        <span className="portal-proc__upsell-badge">
-          {t("portal.procurement.upsell.homeBadge")}
-        </span>
-        <p className="portal-proc__upsell-copy">
-          <strong>{t("portal.procurement.upsell.homeHeadline")} </strong>
-          {t("portal.procurement.upsell.homeBody")}
-        </p>
-      </div>
-      <Button
-        variant="secondary"
-        accent="default"
-        loading={controller.busy}
-        disabled={!controller.isLinked}
-        onClick={controller.onStartTrial}
-      >
-        {t("portal.procurement.upsell.homeCta")}
-      </Button>
-    </Card>
-  );
-}
-
-/** Deal-status hero when a deal is underway, otherwise the enterprise on-ramp. */
-export function ProcurementBanner({
-  controller,
-}: {
-  controller: ProcurementController;
-}) {
-  return controller.isLinked && controller.started && controller.data ? (
-    <ControlledDealStatusHero controller={controller} />
-  ) : (
-    <ProcurementUpsell controller={controller} />
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementExtras.stories.tsx b/frontend/editor/src/portal/components/procurement/ProcurementExtras.stories.tsx
index 06361da844..7a6c6ffb18 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementExtras.stories.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementExtras.stories.tsx
@@ -31,6 +31,10 @@ const SNAPSHOT: ProcurementSnapshot = {
   trialExtensionsUsed: 0,
   licensed: false,
   licenseKey: null,
+  agreementSignedVersion: null,
+  businessName: null,
+  contactName: null,
+  contactEmail: null,
   latestQuote: null,
 };
 
@@ -72,13 +76,14 @@ export const ScheduleCall: Story = {
   ),
 };
 
-// Deployment + seat count captured before the trial starts.
+// Two steps before the trial starts: how they'll run it, then who is buying.
 export const TrialSetup: Story = {
   render: () => (
     <TrialSetupModal
       open
       onClose={() => {}}
       busy={false}
+      onScheduleCall={() => {}}
       onConfirm={() => {}}
     />
   ),
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementExtras.tsx b/frontend/editor/src/portal/components/procurement/ProcurementExtras.tsx
index 44bbea1264..10ea20ed0c 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementExtras.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementExtras.tsx
@@ -1,11 +1,20 @@
 import { useEffect, useState } from "react";
-import { createPortal } from "react-dom";
 import { useTranslation } from "react-i18next";
+import Markdown from "react-markdown";
+import remarkGfm from "remark-gfm";
 import { Button } from "@app/ui";
-import type { ProcurementSnapshot } from "@portal/api/procurement";
+import {
+  fetchLegalDocument,
+  recordLegalConsent,
+  type ProcurementSnapshot,
+  type TrialSetupDetails,
+} from "@portal/api/procurement";
+import { StepModalHeader } from "@portal/components/shared/StepModalHeader";
 import { CalendlyInline } from "@portal/components/procurement/CalendlyInline";
 import { LicensePanel } from "@portal/components/procurement/ProcurementStages";
-import { useFocusTrap } from "@portal/components/procurement/ProcurementModal";
+import { FlowModal } from "@portal/components/shared/FlowModal";
+import { useAsync } from "@portal/hooks/useAsync";
+import { openApiUrl } from "@portal/api/externalUrl";
 import "@portal/views/Procurement.css";
 
 /**
@@ -14,6 +23,8 @@ import "@portal/views/Procurement.css";
  * scheduler. The shells and wiring are real so the hero behaves like the marketing prototype.
  */
 
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+
 function SideModal({
   open,
   onClose,
@@ -21,56 +32,243 @@ function SideModal({
   subtitle,
   children,
   footer,
+  headerAside,
   wide = false,
 }: {
   open: boolean;
   onClose: () => void;
   title: string;
   subtitle?: string;
+  /** Sits on the title row, before the close button (e.g. a "Step 1 of 2" badge). */
+  headerAside?: React.ReactNode;
   children: React.ReactNode;
   footer?: React.ReactNode;
   wide?: boolean;
 }) {
-  const { t } = useTranslation();
-  const trapRef = useFocusTrap(open);
-
-  useEffect(() => {
-    if (!open) return;
-    const onKey = (e: KeyboardEvent) => e.key === "Escape" && onClose();
-    document.addEventListener("keydown", onKey);
-    return () => document.removeEventListener("keydown", onKey);
-  }, [open, onClose]);
-
-  if (!open) return null;
-  return createPortal(
-    <div
-      className="portal-sidemodal"
-      onClick={(e) => e.target === e.currentTarget && onClose()}
-    >
-      <div
-        ref={trapRef}
-        className={`portal-sidemodal__panel${wide ? " portal-sidemodal__panel--wide" : ""}`}
-        role="dialog"
-        aria-modal="true"
-        tabIndex={-1}
-      >
-        <button
-          type="button"
-          className="portal-procmodal__close"
-          onClick={onClose}
-          aria-label={t("portal.procurement.modal.close")}
-        >
-          ✕
-        </button>
-        <div className="portal-sidemodal__header">
-          <h3 className="portal-sidemodal__title">{title}</h3>
+  return (
+    <FlowModal
+      open={open}
+      onClose={onClose}
+      label={title}
+      size={wide ? "lg" : "md"}
+      footer={footer}
+      header={
+        <>
+          <div className="portal-sidemodal__title-row">
+            <h2 className="portal-sidemodal__title">{title}</h2>
+            {headerAside}
+          </div>
           {subtitle && <p className="portal-sidemodal__sub">{subtitle}</p>}
+        </>
+      }
+    >
+      {children}
+    </FlowModal>
+  );
+}
+
+/**
+ * Reader for a versioned legal document (EULA, SLA exhibit, subprocessors), fetched from the
+ * backend registry and rendered as markdown. Open when {@code docId} is set. Drafts are badged.
+ */
+export function LegalDocumentModal({
+  docId,
+  onClose,
+}: {
+  docId: string | null;
+  onClose: () => void;
+}) {
+  const { t } = useTranslation();
+  const { data, loading } = useAsync(
+    () => (docId ? fetchLegalDocument(docId) : Promise.resolve(null)),
+    [docId],
+  );
+  return (
+    <SideModal
+      open={docId !== null}
+      onClose={onClose}
+      wide
+      title={data?.displayName ?? t("portal.legal.title")}
+      subtitle={
+        data
+          ? data.status !== "final"
+            ? t("portal.legal.draft", { label: data.versionLabel })
+            : data.versionLabel
+          : undefined
+      }
+    >
+      {loading && (
+        <p className="portal-sidemodal__text">{t("portal.legal.loading")}</p>
+      )}
+      {!loading && !data && (
+        <p className="portal-sidemodal__text">{t("portal.legal.loadError")}</p>
+      )}
+      {data && (
+        <div className="portal-agreement__md">
+          <Markdown remarkPlugins={[remarkGfm]}>{data.markdown}</Markdown>
         </div>
-        <div className="portal-sidemodal__body">{children}</div>
-        {footer && <div className="portal-sidemodal__footer">{footer}</div>}
+      )}
+    </SideModal>
+  );
+}
+
+// ── Documents ────────────────────────────────────────────────────────────────
+/**
+ * The deal's paperwork in one place, reachable throughout the journey (not tied to the current
+ * stage): the enterprise agreement, the quote, the invoice, and the reference documents (EULA, SLA
+ * exhibit, subprocessors). Each row downloads or views the real artifact when it's available, and
+ * reads as "available later" until then. The per-stage download buttons remain the primary path;
+ * this is the secondary, always-on reference.
+ */
+export function DocumentsModal({
+  open,
+  onClose,
+  agreementVersion,
+  downloadingAgreement,
+  onDownloadAgreement,
+  onViewAgreement,
+  quoteAvailable,
+  downloadingQuote,
+  onDownloadQuote,
+  invoiceUrl,
+  invoicePdf,
+}: {
+  open: boolean;
+  onClose: () => void;
+  agreementVersion?: string | null;
+  downloadingAgreement?: boolean;
+  onDownloadAgreement: () => void;
+  /** Jump to the agreement/sign stage in the flow (used before it's signed). */
+  onViewAgreement: () => void;
+  quoteAvailable: boolean;
+  downloadingQuote?: boolean;
+  onDownloadQuote: () => void;
+  invoiceUrl?: string | null;
+  invoicePdf?: string | null;
+}) {
+  const { t } = useTranslation();
+  const [legalDoc, setLegalDoc] = useState<string | null>(null);
+  const invoice = invoiceUrl || invoicePdf || null;
+
+  return (
+    <>
+      <SideModal
+        open={open}
+        onClose={onClose}
+        title={t("portal.procurement.documents.title")}
+        subtitle={t("portal.procurement.documents.subtitle")}
+      >
+        <ul className="portal-docmodal">
+          <DocItem
+            name={t("portal.procurement.documents.agreement")}
+            sub={
+              agreementVersion ?? t("portal.procurement.documents.agreementSub")
+            }
+            action={
+              agreementVersion
+                ? {
+                    label: t("portal.procurement.documents.download"),
+                    onClick: onDownloadAgreement,
+                    loading: downloadingAgreement,
+                  }
+                : quoteAvailable
+                  ? {
+                      label: t("portal.procurement.documents.view"),
+                      onClick: onViewAgreement,
+                    }
+                  : {
+                      unavailable: t("portal.procurement.documents.laterQuote"),
+                    }
+            }
+          />
+          <DocItem
+            name={t("portal.procurement.documents.quote")}
+            sub={t("portal.procurement.documents.quoteSub")}
+            action={
+              quoteAvailable
+                ? {
+                    label: t("portal.procurement.documents.download"),
+                    onClick: onDownloadQuote,
+                    loading: downloadingQuote,
+                  }
+                : { unavailable: t("portal.procurement.documents.laterQuote") }
+            }
+          />
+          <DocItem
+            name={t("portal.procurement.documents.invoice")}
+            sub={t("portal.procurement.documents.invoiceSub")}
+            action={
+              invoice
+                ? {
+                    label: t("portal.procurement.documents.view"),
+                    onClick: () => openApiUrl(invoice),
+                  }
+                : {
+                    unavailable: t("portal.procurement.documents.laterInvoice"),
+                  }
+            }
+          />
+          <DocItem
+            name={t("portal.procurement.documents.eula")}
+            sub={t("portal.procurement.documents.eulaSub")}
+            action={{
+              label: t("portal.procurement.documents.view"),
+              onClick: () => setLegalDoc("eula"),
+            }}
+          />
+          <DocItem
+            name={t("portal.procurement.documents.sla")}
+            sub={t("portal.procurement.documents.slaSub")}
+            action={{
+              label: t("portal.procurement.documents.view"),
+              onClick: () => setLegalDoc("sla"),
+            }}
+          />
+          <DocItem
+            name={t("portal.procurement.documents.subprocessors")}
+            sub={t("portal.procurement.documents.subprocessorsSub")}
+            action={{
+              label: t("portal.procurement.documents.view"),
+              onClick: () => setLegalDoc("subprocessors"),
+            }}
+          />
+        </ul>
+      </SideModal>
+      <LegalDocumentModal docId={legalDoc} onClose={() => setLegalDoc(null)} />
+    </>
+  );
+}
+
+/** One row in the Documents list: name + sub on the left, an action button or a muted note. */
+function DocItem({
+  name,
+  sub,
+  action,
+}: {
+  name: string;
+  sub: string;
+  action:
+    | { label: string; onClick: () => void; loading?: boolean }
+    | { unavailable: string };
+}) {
+  return (
+    <li className="portal-docmodal__row">
+      <div className="portal-docmodal__text">
+        <span className="portal-docmodal__name">{name}</span>
+        <span className="portal-docmodal__sub">{sub}</span>
       </div>
-    </div>,
-    document.body,
+      {"unavailable" in action ? (
+        <span className="portal-docmodal__later">{action.unavailable}</span>
+      ) : (
+        <Button
+          variant="secondary"
+          loading={action.loading}
+          onClick={action.onClick}
+        >
+          {action.label}
+        </Button>
+      )}
+    </li>
   );
 }
 
@@ -154,82 +352,233 @@ export function TrialSetupModal({
   open,
   onClose,
   busy,
+  email,
+  onScheduleCall,
   onConfirm,
 }: {
   open: boolean;
   onClose: () => void;
   busy: boolean;
-  onConfirm: (deployment: string, seats: number) => void;
+  /** Linked-account email, prefilled as the work email on the details step. */
+  email?: string;
+  /** Open the scheduler — the step-1 escape hatch for buyers who want to talk first. */
+  onScheduleCall: () => void;
+  onConfirm: (
+    deployment: string,
+    seats: number,
+    details: TrialSetupDetails,
+  ) => void;
 }) {
   const { t } = useTranslation();
+  const [step, setStep] = useState(0);
   const [deployment, setDeployment] = useState<string>("cloud");
   const [seats, setSeats] = useState("");
+  const [contactName, setContactName] = useState("");
+  const [businessName, setBusinessName] = useState("");
+  const [contactEmail, setContactEmail] = useState("");
+  const [inviteEmails, setInviteEmails] = useState("");
+  const [eula, setEula] = useState(false);
+  const [legalDoc, setLegalDoc] = useState<string | null>(null);
 
   // Reset to defaults each time the dialog opens, so a cancelled setup doesn't linger.
   useEffect(() => {
     if (open) {
+      setStep(0);
       setDeployment("cloud");
       setSeats("");
+      setContactName("");
+      setBusinessName("");
+      setContactEmail(email ?? "");
+      setInviteEmails("");
+      setEula(false);
     }
-  }, [open]);
+  }, [open, email]);
+
+  // The buying entity is what the quote and agreement are drawn against, so it is required here
+  // rather than deferred to the quote; invites are genuinely optional.
+  const detailsValid =
+    contactName.trim().length > 0 &&
+    businessName.trim().length > 0 &&
+    EMAIL_RE.test(contactEmail.trim());
+
+  const confirm = () => {
+    void recordLegalConsent("eula", "trial"); // clickwrap consent, best-effort
+    onConfirm(deployment, Math.max(0, Number(seats) || 0), {
+      businessName: businessName.trim(),
+      contactName: contactName.trim(),
+      contactEmail: contactEmail.trim(),
+      inviteEmails: inviteEmails.trim(),
+    });
+  };
 
   return (
-    <SideModal
-      open={open}
-      onClose={onClose}
-      title={t("portal.procurement.setup.title")}
-      subtitle={t("portal.procurement.setup.subtitle")}
-      footer={
-        <Button
-          variant="primary"
-          accent="premium"
-          loading={busy}
-          onClick={() => onConfirm(deployment, Math.max(0, Number(seats) || 0))}
-        >
-          {t("portal.procurement.setup.start")}
-        </Button>
-      }
-    >
-      <label className="portal-qb__field">
-        <span className="portal-qb__field-label">
-          {t("portal.procurement.setup.deployment")}
-        </span>
-        <div className="portal-qb__opts">
-          {DEPLOYMENTS.map((d) => (
-            <button
-              key={d}
-              type="button"
-              className="portal-qb__opt"
-              data-on={deployment === d || undefined}
-              onClick={() => setDeployment(d)}
-            >
-              <span className="portal-qb__opt-title">
-                {t(`portal.procurement.setup.${d}`)}
+    <>
+      <SideModal
+        open={open}
+        onClose={onClose}
+        title={t("portal.procurement.setup.title")}
+        subtitle={t(
+          step === 0
+            ? "portal.procurement.setup.subtitle"
+            : "portal.procurement.setup.subtitleDetails",
+        )}
+        headerAside={
+          <span className="portal-stepmodal__step">
+            {t("portal.procurement.setup.stepOf", { n: step + 1, total: 2 })}
+          </span>
+        }
+        footer={
+          step === 0 ? (
+            <>
+              <span className="portal-sidemodal__foot-hint">
+                {t("portal.procurement.setup.talkFirst")}{" "}
+                <button
+                  type="button"
+                  className="portal-legal__link"
+                  onClick={onScheduleCall}
+                >
+                  {t("portal.procurement.setup.scheduleCall")}
+                </button>
               </span>
-              <span className="portal-qb__opt-sub">
-                {t(`portal.procurement.setup.${d}Sub`)}
-              </span>
-            </button>
-          ))}
-        </div>
-      </label>
+              <Button
+                variant="primary"
+                disabled={Number(seats) <= 0}
+                onClick={() => setStep(1)}
+              >
+                {t("portal.procurement.setup.continue")}
+              </Button>
+            </>
+          ) : (
+            <>
+              <Button variant="secondary" onClick={() => setStep(0)}>
+                {t("portal.procurement.setup.back")}
+              </Button>
+              <Button
+                variant="primary"
+                loading={busy}
+                disabled={!eula || !detailsValid}
+                onClick={confirm}
+              >
+                {t("portal.procurement.setup.start")}
+              </Button>
+            </>
+          )
+        }
+      >
+        <StepModalHeader step={step + 1} total={2} />
 
-      <label className="portal-qb__field">
-        <span className="portal-qb__field-label">
-          {t("portal.procurement.setup.seats")}
-        </span>
-        <input
-          type="number"
-          min={0}
-          placeholder={t("portal.procurement.setup.seatsPlaceholder")}
-          value={seats}
-          onChange={(e) => setSeats(e.target.value)}
-        />
-      </label>
-      <p className="portal-sidemodal__text">
-        {t("portal.procurement.setup.seatsHint")}
-      </p>
-    </SideModal>
+        {step === 0 && (
+          <>
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.setup.seats")}
+              </span>
+              <input
+                type="number"
+                min={0}
+                placeholder={t("portal.procurement.setup.seatsPlaceholder")}
+                value={seats}
+                onChange={(e) => setSeats(e.target.value)}
+              />
+            </label>
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.setup.deployment")}
+              </span>
+              <div className="portal-qb__opts portal-qb__opts--across">
+                {DEPLOYMENTS.map((d) => (
+                  <button
+                    key={d}
+                    type="button"
+                    className="portal-qb__opt"
+                    data-on={deployment === d || undefined}
+                    onClick={() => setDeployment(d)}
+                  >
+                    <span className="portal-qb__opt-title">
+                      {t(`portal.procurement.setup.${d}`)}
+                    </span>
+                    <span className="portal-qb__opt-sub">
+                      {t(`portal.procurement.setup.${d}Sub`)}
+                    </span>
+                  </button>
+                ))}
+              </div>
+            </label>
+          </>
+        )}
+
+        {step === 1 && (
+          <>
+            <div className="portal-qb__row">
+              <label className="portal-qb__field">
+                <span className="portal-qb__field-label">
+                  {t("portal.procurement.setup.fullName")}
+                </span>
+                <input
+                  value={contactName}
+                  placeholder={t(
+                    "portal.procurement.setup.fullNamePlaceholder",
+                  )}
+                  onChange={(e) => setContactName(e.target.value)}
+                />
+              </label>
+              <label className="portal-qb__field">
+                <span className="portal-qb__field-label">
+                  {t("portal.procurement.setup.businessName")}
+                </span>
+                <input
+                  value={businessName}
+                  placeholder={t(
+                    "portal.procurement.setup.businessNamePlaceholder",
+                  )}
+                  onChange={(e) => setBusinessName(e.target.value)}
+                />
+              </label>
+            </div>
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.setup.workEmail")}
+              </span>
+              <input
+                type="email"
+                value={contactEmail}
+                placeholder={t("portal.procurement.setup.workEmailPlaceholder")}
+                onChange={(e) => setContactEmail(e.target.value)}
+              />
+            </label>
+            <label className="portal-qb__field">
+              <span className="portal-qb__field-label">
+                {t("portal.procurement.setup.invites")}
+              </span>
+              <input
+                value={inviteEmails}
+                placeholder={t("portal.procurement.setup.invitesPlaceholder")}
+                onChange={(e) => setInviteEmails(e.target.value)}
+              />
+            </label>
+
+            <label className="portal-qb__eula">
+              <input
+                type="checkbox"
+                checked={eula}
+                onChange={(e) => setEula(e.target.checked)}
+              />
+              <span>
+                {t("portal.procurement.setup.eula")}{" "}
+                <button
+                  type="button"
+                  className="portal-legal__link"
+                  onClick={() => setLegalDoc("eula")}
+                >
+                  {t("portal.procurement.setup.viewEula")}
+                </button>
+              </span>
+            </label>
+          </>
+        )}
+      </SideModal>
+      <LegalDocumentModal docId={legalDoc} onClose={() => setLegalDoc(null)} />
+    </>
   );
 }
 
@@ -280,7 +629,6 @@ export function TrialManageModal({
           </button>
           <Button
             variant="primary"
-            accent="premium"
             loading={busy}
             disabled={maxed}
             onClick={onExtend}
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementFlow.stories.tsx b/frontend/editor/src/portal/components/procurement/ProcurementFlow.stories.tsx
index da5777f316..03984936c8 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementFlow.stories.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementFlow.stories.tsx
@@ -56,6 +56,10 @@ const snapshot: ProcurementSnapshot = {
   trialExtensionsUsed: 0,
   licensed: false,
   licenseKey: null,
+  agreementSignedVersion: null,
+  businessName: null,
+  contactName: null,
+  contactEmail: null,
   latestQuote: quote,
 };
 
@@ -88,10 +92,14 @@ function makeController(
     onConfirmSetup: () => {},
     onExtendTrial: () => {},
     onReset: () => {},
-    onGenerate: () => {},
+    onGenerate: async () => {},
     onAgree: () => {},
     onDownloadPdf: async () => {},
     onDownloadOfflineLicense: async () => {},
+    downloadingAgreement: false,
+    onAcceptQuote: async () => {},
+    onDownloadSignedAgreement: async () => {},
+    onExploreEnterprise: () => {},
     ...overrides,
   };
 }
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementFlow.tsx b/frontend/editor/src/portal/components/procurement/ProcurementFlow.tsx
index d1527c32bb..9dc8cd5b7e 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementFlow.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementFlow.tsx
@@ -2,9 +2,9 @@ import { useTranslation } from "react-i18next";
 import { Banner, Button, EmptyState, Skeleton } from "@app/ui";
 import { useUI } from "@portal/contexts/UIContext";
 import { useLinkedAccountEmail } from "@portal/hooks/useLinkedAccountEmail";
-import { FLOW_JOURNEY } from "@portal/api/procurement";
 import { ProcurementAgreement } from "@portal/components/procurement/ProcurementAgreement";
 import {
+  DocumentsModal,
   LicenseModal,
   ScheduleCallModal,
   TrialManageModal,
@@ -16,7 +16,6 @@ import {
   PaymentStageCard,
 } from "@portal/components/procurement/ProcurementStages";
 import { QuoteBuilder } from "@portal/components/procurement/QuoteBuilder";
-import { StageStepper } from "@portal/components/procurement/StageStepper";
 import type { ProcurementController } from "@portal/components/procurement/useProcurement";
 
 /**
@@ -42,7 +41,6 @@ export function ProcurementFlow({
     stage,
     latest,
     isIssued,
-    isDraft,
     busy,
     downloading,
     downloadingLicense,
@@ -62,8 +60,21 @@ export function ProcurementFlow({
     onAgree,
     onDownloadPdf,
     onDownloadOfflineLicense,
+    downloadingAgreement,
+    onDownloadSignedAgreement,
   } = controller;
 
+  // The builder owns the dialog's chrome while it is the visible step. It spans the whole quote
+  // stage now, not just the draft part of it: issuing turns its last step into the review of the
+  // issued paper rather than handing off to a separate card.
+  const builderShowing =
+    isLinked && started && (editing || stage === "trial" || stage === "quote");
+  const agreementShowing =
+    isLinked && started && !editing && stage === "security" && latest != null;
+  // Both of these name their own document in the header and carry its download there, so the shell
+  // must not stack a second header (nor a second close) above them.
+  const ownsHeader = builderShowing || agreementShowing;
+
   return (
     <>
       <ProcurementModal
@@ -71,6 +82,9 @@ export function ProcurementFlow({
         onClose={() => setOpen(false)}
         title={t("portal.procurement.title")}
         subtitle={t("portal.procurement.subtitle")}
+        // The builder and the agreement render their own heading and close; the payment and live
+        // steps have none, so they keep the shell's header.
+        headerless={ownsHeader}
       >
         {error && (
           <Banner
@@ -88,11 +102,7 @@ export function ProcurementFlow({
             title={t("portal.procurement.link.title")}
             description={t("portal.procurement.link.description")}
             actions={
-              <Button
-                variant="primary"
-                accent="premium"
-                onClick={() => openLinkModal()}
-              >
+              <Button variant="primary" onClick={() => openLinkModal()}>
                 {t("portal.procurement.link.cta")}
               </Button>
             }
@@ -103,46 +113,63 @@ export function ProcurementFlow({
 
         {isLinked && started && (
           <>
-            <div className="portal-proc__modal-stepper">
-              <StageStepper journey={FLOW_JOURNEY} currentStage={stage!} />
-            </div>
-
-            {(editing ||
-              (isDraft && (stage === "trial" || stage === "quote"))) && (
+            {builderShowing && (
               <QuoteBuilder
                 deployment={data?.deployment ?? "cloud"}
                 seats={data?.seats ?? 0}
+                email={scheduleEmail}
+                dealDetails={
+                  data
+                    ? {
+                        businessName: data.businessName,
+                        contactName: data.contactName,
+                        contactEmail: data.contactEmail,
+                      }
+                    : undefined
+                }
                 initial={latest?.config}
+                eulaAlreadyAgreed={data?.trialStartedAt != null}
+                onClose={() => setOpen(false)}
                 onGenerate={onGenerate}
+                // Null while re-editing: the buyer asked for the form, not the paper they just left.
+                issued={!editing && isIssued ? latest : null}
+                downloading={downloading}
+                onDownload={onDownloadPdf}
               />
             )}
 
-            {/* Quote + agreement are one step: review the itemised quote and the agreement, then
-                accept straight into a committed subscription. Once accepted you can't go back.
-                ("security" is the retired agreement stage — still handled so an older deal that
-                stopped there isn't left blank.) */}
-            {!editing &&
-              isIssued &&
-              (stage === "quote" || stage === "security") &&
-              latest && (
-                <ProcurementAgreement
-                  quote={latest}
-                  busy={busy}
-                  downloading={downloading}
-                  onAgree={onAgree}
-                  onDownload={onDownloadPdf}
-                  onEdit={() => setEditing(true)}
-                />
-              )}
+            {/* Agreement step: review and sign the enterprise agreement. Signing accepts the quote
+                into a committed subscription (Stripe). */}
+            {agreementShowing && latest && (
+              <ProcurementAgreement
+                quote={latest}
+                busy={busy}
+                onAgree={onAgree}
+                onRequestChanges={() => {
+                  setOpen(false);
+                  setExtra("schedule");
+                }}
+                onClose={() => setOpen(false)}
+              />
+            )}
 
             {!editing && stage === "procurement" && latest && (
               <PaymentStageCard
                 invoiceUrl={latest.invoiceUrl}
                 invoicePdf={latest.invoicePdf ?? invoicePdf}
+                signedAgreementVersion={data?.agreementSignedVersion}
+                downloadingAgreement={downloadingAgreement}
+                onDownloadSignedAgreement={onDownloadSignedAgreement}
               />
             )}
 
-            {!editing && stage === "active" && <LiveStageCard />}
+            {!editing && stage === "active" && (
+              <LiveStageCard
+                signedAgreementVersion={data?.agreementSignedVersion}
+                downloadingAgreement={downloadingAgreement}
+                onDownloadSignedAgreement={onDownloadSignedAgreement}
+              />
+            )}
           </>
         )}
       </ProcurementModal>
@@ -151,6 +178,8 @@ export function ProcurementFlow({
         open={extra === "setup"}
         onClose={() => setExtra(null)}
         busy={busy}
+        email={scheduleEmail ?? undefined}
+        onScheduleCall={() => setExtra("schedule")}
         onConfirm={onConfirmSetup}
       />
       {data?.licenseKey && (
@@ -185,6 +214,23 @@ export function ProcurementFlow({
           }}
         />
       )}
+      <DocumentsModal
+        open={extra === "documents"}
+        onClose={() => setExtra(null)}
+        agreementVersion={data?.agreementSignedVersion}
+        downloadingAgreement={downloadingAgreement}
+        onDownloadAgreement={onDownloadSignedAgreement}
+        onViewAgreement={() => {
+          setExtra(null);
+          setEditing(false);
+          setOpen(true);
+        }}
+        quoteAvailable={!!latest?.stripeQuoteId}
+        downloadingQuote={downloading}
+        onDownloadQuote={onDownloadPdf}
+        invoiceUrl={latest?.invoiceUrl}
+        invoicePdf={latest?.invoicePdf ?? invoicePdf}
+      />
     </>
   );
 }
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementHome.stories.tsx b/frontend/editor/src/portal/components/procurement/ProcurementHome.stories.tsx
deleted file mode 100644
index ae424922ad..0000000000
--- a/frontend/editor/src/portal/components/procurement/ProcurementHome.stories.tsx
+++ /dev/null
@@ -1,18 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { ProcurementHome } from "@portal/components/procurement/ProcurementHome";
-
-/**
- * The end-to-end procurement experience (Home hero + takeover modal), driven by the `procurementSaas`
- * MSW handlers: start trial → build quote → generate (issue Stripe Quote) → milestone (download PDF /
- * accept). `autoOpen` opens the modal so the flow is immediately clickable.
- */
-const meta: Meta<typeof ProcurementHome> = {
-  title: "Portal/Procurement/ProcurementHome",
-  component: ProcurementHome,
-  parameters: { layout: "fullscreen" },
-};
-export default meta;
-
-type Story = StoryObj<typeof ProcurementHome>;
-
-export const Default: Story = { args: { autoOpen: true } };
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementHome.tsx b/frontend/editor/src/portal/components/procurement/ProcurementHome.tsx
deleted file mode 100644
index 1877e0bc3c..0000000000
--- a/frontend/editor/src/portal/components/procurement/ProcurementHome.tsx
+++ /dev/null
@@ -1,22 +0,0 @@
-import { ProcurementBanner } from "@portal/components/procurement/ProcurementBanner";
-import { ProcurementFlow } from "@portal/components/procurement/ProcurementFlow";
-import { useProcurement } from "@portal/components/procurement/useProcurement";
-import "@portal/views/Procurement.css";
-
-/**
- * The standalone procurement experience: a deal-status hero (or enterprise
- * on-ramp when no deal exists) above the full-screen takeover flow that holds
- * the journey — build + issue a quote, review + agree to the enterprise
- * agreement, then accept into a committed subscription. Rendered at
- * /procurement (autoOpen). On Home the deal-status hero instead attaches to the
- * tier hero card's footer (see HomeHero) so this component isn't used there.
- */
-export function ProcurementHome({ autoOpen = false }: { autoOpen?: boolean }) {
-  const controller = useProcurement(autoOpen);
-  return (
-    <>
-      <ProcurementBanner controller={controller} />
-      <ProcurementFlow controller={controller} />
-    </>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementModal.stories.tsx b/frontend/editor/src/portal/components/procurement/ProcurementModal.stories.tsx
index 7fb8b865f2..14934905d6 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementModal.stories.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementModal.stories.tsx
@@ -31,9 +31,7 @@ export const Open: Story = {
           contract and go live.
         </p>
         <div style={{ display: "flex", gap: "0.6rem" }}>
-          <Button variant="primary" accent="premium">
-            Continue to checkout
-          </Button>
+          <Button variant="primary">Continue to checkout</Button>
           <Button variant="secondary">Edit quote</Button>
         </div>
       </Card>
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementModal.tsx b/frontend/editor/src/portal/components/procurement/ProcurementModal.tsx
index 852c4e68c4..881bb778ce 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementModal.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementModal.tsx
@@ -1,104 +1,49 @@
-import { useEffect, useRef } from "react";
-import { createPortal } from "react-dom";
-import { useTranslation } from "react-i18next";
+import type { ReactNode } from "react";
+import { FlowModal } from "@portal/components/shared/FlowModal";
 import "@portal/views/Procurement.css";
 
-/** Keep keyboard focus inside an open dialog: focus it on open and wrap Tab at the edges. */
-export function useFocusTrap(open: boolean) {
-  const ref = useRef<HTMLDivElement>(null);
-  useEffect(() => {
-    if (!open) return;
-    const panel = ref.current;
-    if (!panel) return;
-    const prev = document.activeElement as HTMLElement | null;
-    const focusables = () =>
-      Array.from(
-        panel.querySelectorAll<HTMLElement>(
-          'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])',
-        ),
-      ).filter((el) => !el.hasAttribute("disabled"));
-    (focusables()[0] ?? panel).focus();
-    const onKey = (e: KeyboardEvent) => {
-      if (e.key !== "Tab") return;
-      const items = focusables();
-      if (items.length === 0) return;
-      const first = items[0];
-      const last = items[items.length - 1];
-      if (e.shiftKey && document.activeElement === first) {
-        e.preventDefault();
-        last.focus();
-      } else if (!e.shiftKey && document.activeElement === last) {
-        e.preventDefault();
-        first.focus();
-      }
-    };
-    panel.addEventListener("keydown", onKey);
-    return () => {
-      panel.removeEventListener("keydown", onKey);
-      prev?.focus?.();
-    };
-  }, [open]);
-  return ref;
-}
-
 /**
- * Full-screen takeover modal for the procurement flow, copying the prototype's modal design
- * (portaled to body, dimmed + blurred backdrop, rounded panel, close button). The Home deal-status
- * hero expands into this.
+ * The procurement takeover: the shared {@link FlowModal} at takeover width. Chrome and copy only —
+ * the shell (portal, focus trap, Escape, close, header/body bands) is shared, so this dialog cannot
+ * drift from the trial and licence dialogs the way two hand-rolled shells did.
  */
 export function ProcurementModal({
   open,
   onClose,
   title,
   subtitle,
+  headerless = false,
   children,
 }: {
   open: boolean;
   onClose: () => void;
+  /** Dialog label. Omit `subtitle` (and pass `headerless`) when the step renders its own heading. */
   title: string;
   subtitle?: string;
-  children: React.ReactNode;
+  /**
+   * Skip the title block, which takes the shell's close with it: the step inside supplies the
+   * heading, step badge and its own close (see StepModalHeader), so the shell would otherwise stack
+   * a second header and leave a stray close above it. Escape and the backdrop still dismiss.
+   */
+  headerless?: boolean;
+  children: ReactNode;
 }) {
-  const { t } = useTranslation();
-  const trapRef = useFocusTrap(open);
-
-  useEffect(() => {
-    if (!open) return;
-    const onKey = (e: KeyboardEvent) => e.key === "Escape" && onClose();
-    document.addEventListener("keydown", onKey);
-    return () => document.removeEventListener("keydown", onKey);
-  }, [open, onClose]);
-
-  if (!open) return null;
-
-  return createPortal(
-    <div
-      className="portal-procmodal"
-      onClick={(e) => e.target === e.currentTarget && onClose()}
+  return (
+    <FlowModal
+      open={open}
+      onClose={onClose}
+      label={title}
+      size="lg"
+      header={
+        headerless ? undefined : (
+          <>
+            <h2 className="portal-procmodal__title">{title}</h2>
+            {subtitle && <p className="portal-procmodal__sub">{subtitle}</p>}
+          </>
+        )
+      }
     >
-      <div
-        ref={trapRef}
-        className="portal-procmodal__panel"
-        role="dialog"
-        aria-modal="true"
-        aria-label={title}
-        tabIndex={-1}
-      >
-        <button
-          type="button"
-          className="portal-procmodal__close"
-          onClick={onClose}
-          aria-label={t("portal.procurement.modal.close")}
-        >
-          ✕
-        </button>
-        <div className="portal-procmodal__header">
-          <h2 className="portal-procmodal__title">{title}</h2>
-          {subtitle && <p className="portal-procmodal__sub">{subtitle}</p>}
-        </div>
-        <div className="portal-procmodal__body">{children}</div>
-      </div>
-    </div>,
-    document.body,
+      {children}
+    </FlowModal>
   );
 }
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementStages.tsx b/frontend/editor/src/portal/components/procurement/ProcurementStages.tsx
index 35460a7ba5..fcf926f481 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementStages.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementStages.tsx
@@ -1,61 +1,92 @@
 import { useState } from "react";
 import { useTranslation } from "react-i18next";
-import { Button, Card } from "@app/ui";
+import { Button } from "@app/ui";
+import { openApiUrl } from "@portal/api/externalUrl";
 import "@portal/views/Procurement.css";
 
 /**
- * The stage-specific cards shown inside the procurement takeover modal once a quote exists: the
- * issued-quote milestone, the subscription-created payment step, and the live confirmation. Each is
- * a pure presentational view driven by props; ProcurementHome owns the state and the actions.
+ * The stage-specific views shown inside the procurement takeover modal once the agreement is signed:
+ * the subscription-created payment step and the live confirmation. Each is a pure presentational view
+ * driven by props; the controller owns the state and the actions.
+ *
+ * Neither is wrapped in a Card: the dialog is already the surface, and a card inside it drew a second
+ * border around content that filled it. Both wear the same eyebrow/title/description stack and put
+ * their actions in the flow's footer bar, so the last two steps of the journey read like the ones
+ * before them rather than like panels that wandered in.
  */
 
-/** The subscription-created step: pay or download the first invoice. */
+/** The subscription-created step: pay or download the first invoice, and the signed agreement. */
 export function PaymentStageCard({
   invoiceUrl,
   invoicePdf,
+  signedAgreementVersion,
+  downloadingAgreement,
+  onDownloadSignedAgreement,
 }: {
   invoiceUrl?: string | null;
   invoicePdf?: string | null;
+  /** Version label of the signed agreement PDF, if one is available to download. */
+  signedAgreementVersion?: string | null;
+  downloadingAgreement?: boolean;
+  onDownloadSignedAgreement?: () => void;
 }) {
   const { t } = useTranslation();
   return (
-    <Card padding="loose">
+    <div className="portal-procstage">
+      <span className="portal-proc__eyebrow">
+        {t("portal.procurement.payment.eyebrow")}
+      </span>
       <h3 className="portal-proc__builder-title">
         {t("portal.procurement.payment.title")}
       </h3>
       <p className="portal-proc__subtitle">
         {t("portal.procurement.payment.description")}
       </p>
-      {(invoiceUrl || invoicePdf) && (
-        <div className="portal-proc__payment-actions">
-          {invoiceUrl && (
-            <Button
-              variant="primary"
-              accent="premium"
-              onClick={() => window.open(invoiceUrl, "_blank", "noopener")}
-            >
-              {t("portal.procurement.payment.viewInvoice")}
-            </Button>
-          )}
-          {invoicePdf && (
-            <Button
-              variant="secondary"
-              onClick={() => window.open(invoicePdf, "_blank", "noopener")}
-            >
-              {t("portal.procurement.payment.downloadInvoice")}
-            </Button>
-          )}
+      {(invoiceUrl || invoicePdf || signedAgreementVersion) && (
+        <div className="portal-qb__foot portal-procstage__foot">
+          <div className="portal-qb__foot-btns">
+            {signedAgreementVersion && onDownloadSignedAgreement && (
+              <Button
+                variant="secondary"
+                loading={downloadingAgreement}
+                onClick={onDownloadSignedAgreement}
+              >
+                {t("portal.procurement.payment.downloadAgreement")}
+              </Button>
+            )}
+            {invoicePdf && (
+              <Button
+                variant="secondary"
+                onClick={() => openApiUrl(invoicePdf)}
+              >
+                {t("portal.procurement.payment.downloadInvoice")}
+              </Button>
+            )}
+            {invoiceUrl && (
+              <Button variant="primary" onClick={() => openApiUrl(invoiceUrl)}>
+                {t("portal.procurement.payment.viewInvoice")}
+              </Button>
+            )}
+          </div>
         </div>
       )}
-    </Card>
+    </div>
   );
 }
 
 /** The live confirmation once the deal is active. */
-export function LiveStageCard() {
+export function LiveStageCard({
+  signedAgreementVersion,
+  downloadingAgreement,
+  onDownloadSignedAgreement,
+}: {
+  signedAgreementVersion?: string | null;
+  downloadingAgreement?: boolean;
+  onDownloadSignedAgreement?: () => void;
+} = {}) {
   const { t } = useTranslation();
   return (
-    <Card padding="loose">
+    <div className="portal-procstage">
       <span className="portal-proc__eyebrow">
         {t("portal.procurement.live.eyebrow")}
       </span>
@@ -65,7 +96,20 @@ export function LiveStageCard() {
       <p className="portal-proc__subtitle">
         {t("portal.procurement.live.description")}
       </p>
-    </Card>
+      {signedAgreementVersion && onDownloadSignedAgreement && (
+        <div className="portal-qb__foot portal-procstage__foot">
+          <div className="portal-qb__foot-btns">
+            <Button
+              variant="secondary"
+              loading={downloadingAgreement}
+              onClick={onDownloadSignedAgreement}
+            >
+              {t("portal.procurement.payment.downloadAgreement")}
+            </Button>
+          </div>
+        </div>
+      )}
+    </div>
   );
 }
 
diff --git a/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx b/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx
index b392247563..98fcbd4f04 100644
--- a/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx
+++ b/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx
@@ -3,18 +3,24 @@ import { useTranslation } from "react-i18next";
 import { Button } from "@app/ui";
 import {
   DocumentsIcon,
+  DownloadIcon,
   PoliciesIcon,
   UsersIcon,
 } from "@portal/components/icons";
 import { money } from "@portal/components/procurement/format";
 import {
   buildQuote,
+  recordLegalConsent,
   type QuoteConfigInput,
   type QuoteResult,
 } from "@portal/api/procurement";
+import { LegalDocumentModal } from "@portal/components/procurement/ProcurementExtras";
+import { StepModalHeader } from "@portal/components/shared/StepModalHeader";
 import "@portal/views/Procurement.css";
 
-const STEPS = ["volume", "plan", "details"] as const;
+const STEPS = ["volume", "plan", "details", "review"] as const;
+const DETAILS_STEP = 2;
+const REVIEW_STEP = 3;
 const TERM_DISCOUNT = [0, 0.03, 0.05, 0.06, 0.07]; // 1..5 years — meter-only discount (D71)
 // Governance posture: the intensity (runs per PDF) fed to the committed-volume curve.
 const POSTURES = [
@@ -30,22 +36,57 @@ const SIZE_TIERS = [
 ] as const;
 
 /**
- * The enterprise quote builder — volume → commitment &amp; service → details. A client-side preview
- * drives the live footer total; the backend is authoritative. Completing the form generates the
- * quote directly (build + issue in one step) — the issued quote is then shown as the milestone, so
- * there's no redundant in-builder preview.
+ * The enterprise quote builder — volume → commitment &amp; service → details → review. A client-side
+ * preview drives the live footer total; the backend is authoritative. Generating builds and issues in
+ * one go, and the issued quote comes back as the fourth step: the buyer reads the real itemised paper
+ * and can download it, but does not accept here. Accepting is a decision taken from the deal card,
+ * deliberately, so circulating the quote internally is not a dead end in a modal.
  */
 export function QuoteBuilder({
   deployment,
   seats = 0,
+  email,
+  onClose,
+  dealDetails,
   initial,
+  eulaAlreadyAgreed = false,
   onGenerate,
+  issued,
+  downloading = false,
+  onDownload,
 }: {
   deployment: string;
   /** Seat count from the trial setup; seeds the users field + volume estimate on a fresh quote. */
   seats?: number;
+  /** Linked-account email; prefills the contact email on a fresh quote's details step. */
+  email?: string | null;
+  /** Dismiss the dialog. The builder draws its own header, so it carries the close too. */
+  onClose?: () => void;
+  /**
+   * The buying entity captured at trial setup. Seeds a fresh quote's details step so it confirms
+   * what is already known rather than asking twice; the buyer can still correct it here, since a
+   * deal can change hands between trial and quote.
+   */
+  dealDetails?: {
+    businessName?: string | null;
+    contactName?: string | null;
+    contactEmail?: string | null;
+  };
   /** Seed the builder from an existing quote's config (re-editing a quote). */
   initial?: QuoteConfigInput;
+  /**
+   * The issued quote, which is what the review step shows. Its arrival is also what opens that step:
+   * the parent issues the quote and it lands by snapshot refresh, so there is no synchronous result
+   * to advance on. Null while re-editing, so editing reopens the form rather than the paper.
+   */
+  issued?: QuoteResult | null;
+  downloading?: boolean;
+  onDownload?: () => void;
+  /**
+   * The buyer already accepted the EULA (e.g. at trial start). When true, the EULA clickwrap is
+   * hidden here and no consent is recorded at quote time — it's only collected once.
+   */
+  eulaAlreadyAgreed?: boolean;
   /** Called with the priced DRAFT quote; the parent issues it as a Stripe Quote. */
   onGenerate: (quote: QuoteResult) => void;
 }) {
@@ -65,9 +106,9 @@ export function QuoteBuilder({
       indemnification: false,
       training: false,
       qbr: false,
-      businessName: "",
-      contactName: "",
-      contactEmail: "",
+      businessName: dealDetails?.businessName ?? "",
+      contactName: dealDetails?.contactName ?? "",
+      contactEmail: dealDetails?.contactEmail ?? email ?? "",
       addressLine1: "",
       addressLine2: "",
       city: "",
@@ -79,29 +120,81 @@ export function QuoteBuilder({
   );
   // A seeded quote carries a volume but no user count, so treat it as manually set.
   const [manualVolume, setManualVolume] = useState(initial != null);
-  const [eula, setEula] = useState(initial != null);
+  // Never pre-ticked, even when re-editing a quote: a consent the buyer did not tick in this session
+  // is not a consent, and recordLegalConsent would have logged one as though they had.
+  const [eula, setEula] = useState(false);
+  const [legalDoc, setLegalDoc] = useState<string | null>(null);
   const [busy, setBusy] = useState(false);
+  // Only surface field errors once the buyer tries to generate — no red fields on first sight.
+  const [showErrors, setShowErrors] = useState(false);
 
   function set<K extends keyof QuoteConfigInput>(k: K, v: QuoteConfigInput[K]) {
     setCfg((c) => ({ ...c, [k]: v }));
   }
 
-  // Re-editing an existing quote: everything is seeded, so jump to the last step (details) with the
+  // Required buyer details before a quote can be generated (Order Form / invoice need these).
+  const emailOk = /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(
+    (cfg.contactEmail ?? "").trim(),
+  );
+  const valid = {
+    businessName: cfg.businessName.trim().length > 0,
+    contactName: (cfg.contactName ?? "").trim().length > 0,
+    contactEmail: emailOk,
+    addressLine1: (cfg.addressLine1 ?? "").trim().length > 0,
+    city: (cfg.city ?? "").trim().length > 0,
+    region: (cfg.region ?? "").trim().length > 0,
+    postalCode: (cfg.postalCode ?? "").trim().length > 0,
+  };
+  const detailsValid = Object.values(valid).every(Boolean);
+  const eulaOk = eulaAlreadyAgreed || eula;
+  const canGenerate = detailsValid && eulaOk;
+
+  // Re-editing an existing quote: everything is seeded, so jump to the details step with the
   // agreement pre-accepted — one click re-generates, or Back to change a field. No walking from step 1.
   // Mount-only: seed the step from `initial` once (deliberately no deps).
   useEffect(() => {
-    if (initial) setStep(STEPS.length - 1);
+    if (initial) setStep(DETAILS_STEP);
   }, []);
 
+  // Issuing lands by snapshot refresh rather than as a return value, so the arrival of the issued
+  // quote is what opens the review step. Keyed on the quote's id, not the object: React Query hands
+  // back a fresh object on every refetch, which would yank a buyer who had walked Back to the form.
+  useEffect(() => {
+    if (issued) setStep(REVIEW_STEP);
+  }, [issued?.quoteId]);
+
   const preview = previewAnnualMinor(cfg);
   const tcvPreview = preview * cfg.termYears + (cfg.training ? 750_000 : 0);
 
+  // On the review step the footer quotes the issued figures rather than the client-side preview, so
+  // the running total never disagrees with the paper directly above it.
+  const onPaper = issued != null && step === REVIEW_STEP;
+  const running = onPaper
+    ? {
+        annual: money(issued.annualNetMinor, issued.currency),
+        years: issued.config.termYears,
+        tcv: money(issued.tcvMinor, issued.currency),
+      }
+    : {
+        annual: money(preview),
+        years: cfg.termYears,
+        tcv: money(tcvPreview),
+      };
+
   // Fully filled → price + hand the draft to the parent to issue as a Stripe Quote (which then shows
   // as the milestone). No separate in-builder preview step.
   async function generate() {
+    if (!canGenerate) {
+      setShowErrors(true);
+      return;
+    }
     setBusy(true);
     try {
-      onGenerate(await buildQuote(cfg));
+      const quote = await buildQuote(cfg);
+      // Record the EULA clickwrap only when it's collected here — i.e. the buyer didn't already
+      // accept it at trial start. Best-effort.
+      if (!eulaAlreadyAgreed) void recordLegalConsent("eula", "quote");
+      onGenerate(quote);
     } finally {
       setBusy(false);
     }
@@ -109,22 +202,16 @@ export function QuoteBuilder({
 
   return (
     <div className="portal-qb">
-      <div className="portal-qb__head">
-        <h3 className="portal-qb__title">
-          {t("portal.procurement.builder.title")}
-        </h3>
-        <span className="portal-qb__stepchip">
-          {t("portal.procurement.builder.stepOf", {
-            n: step + 1,
-            total: STEPS.length,
-          })}
-        </span>
-      </div>
-      <div className="portal-qb__progress">
-        {STEPS.map((s, i) => (
-          <span key={s} data-on={i <= step || undefined} />
-        ))}
-      </div>
+      <StepModalHeader
+        title={t("portal.procurement.builder.title")}
+        step={step + 1}
+        total={STEPS.length}
+        stepLabel={t("portal.procurement.builder.stepOf", {
+          n: step + 1,
+          total: STEPS.length,
+        })}
+        onClose={onClose}
+      />
 
       <div className="portal-qb__body">
         {step === 0 && (
@@ -171,15 +258,6 @@ export function QuoteBuilder({
                   ? t("portal.procurement.builder.volManual")
                   : t("portal.procurement.builder.volNoUsers")}
             </p>
-          </Step>
-        )}
-
-        {step === 1 && (
-          <Step
-            icon={<PoliciesIcon size={22} />}
-            title={t("portal.procurement.builder.s2Title")}
-            sub={t("portal.procurement.builder.s2Sub")}
-          >
             <Field label={t("portal.procurement.builder.posture")}>
               <div className="portal-qb__opts">
                 {POSTURES.map((p) => (
@@ -209,7 +287,15 @@ export function QuoteBuilder({
                 ))}
               </div>
             </Field>
+          </Step>
+        )}
 
+        {step === 1 && (
+          <Step
+            icon={<PoliciesIcon size={22} />}
+            title={t("portal.procurement.builder.s2Title")}
+            sub={t("portal.procurement.builder.s2Sub")}
+          >
             <Field label={t("portal.procurement.builder.term")}>
               <div className="portal-qb__pills">
                 {[1, 2, 3, 4, 5].map((y) => (
@@ -287,7 +373,11 @@ export function QuoteBuilder({
             sub={t("portal.procurement.builder.s3Sub")}
           >
             <div className="portal-qb__row">
-              <Field label={t("portal.procurement.builder.businessName")}>
+              <Field
+                label={t("portal.procurement.builder.businessName")}
+                required
+                invalid={showErrors && !valid.businessName}
+              >
                 <input
                   placeholder={t(
                     "portal.procurement.builder.businessNamePlaceholder",
@@ -296,7 +386,11 @@ export function QuoteBuilder({
                   onChange={(e) => set("businessName", e.target.value)}
                 />
               </Field>
-              <Field label={t("portal.procurement.builder.contactName")}>
+              <Field
+                label={t("portal.procurement.builder.contactName")}
+                required
+                invalid={showErrors && !valid.contactName}
+              >
                 <input
                   placeholder={t(
                     "portal.procurement.builder.contactNamePlaceholder",
@@ -306,7 +400,11 @@ export function QuoteBuilder({
                 />
               </Field>
             </div>
-            <Field label={t("portal.procurement.builder.contactEmail")}>
+            <Field
+              label={t("portal.procurement.builder.contactEmail")}
+              required
+              invalid={showErrors && !valid.contactEmail}
+            >
               <input
                 type="email"
                 placeholder={t(
@@ -316,7 +414,11 @@ export function QuoteBuilder({
                 onChange={(e) => set("contactEmail", e.target.value)}
               />
             </Field>
-            <Field label={t("portal.procurement.builder.addressLine1")}>
+            <Field
+              label={t("portal.procurement.builder.addressLine1")}
+              required
+              invalid={showErrors && !valid.addressLine1}
+            >
               <input
                 placeholder={t(
                   "portal.procurement.builder.addressLine1Placeholder",
@@ -335,14 +437,22 @@ export function QuoteBuilder({
               />
             </Field>
             <div className="portal-qb__row">
-              <Field label={t("portal.procurement.builder.city")}>
+              <Field
+                label={t("portal.procurement.builder.city")}
+                required
+                invalid={showErrors && !valid.city}
+              >
                 <input
                   placeholder={t("portal.procurement.builder.cityPlaceholder")}
                   value={cfg.city ?? ""}
                   onChange={(e) => set("city", e.target.value)}
                 />
               </Field>
-              <Field label={t("portal.procurement.builder.region")}>
+              <Field
+                label={t("portal.procurement.builder.region")}
+                required
+                invalid={showErrors && !valid.region}
+              >
                 <input
                   placeholder={t(
                     "portal.procurement.builder.regionPlaceholder",
@@ -351,7 +461,11 @@ export function QuoteBuilder({
                   onChange={(e) => set("region", e.target.value)}
                 />
               </Field>
-              <Field label={t("portal.procurement.builder.postalCode")}>
+              <Field
+                label={t("portal.procurement.builder.postalCode")}
+                required
+                invalid={showErrors && !valid.postalCode}
+              >
                 <input
                   placeholder={t(
                     "portal.procurement.builder.postalCodePlaceholder",
@@ -379,25 +493,133 @@ export function QuoteBuilder({
                 />
               </Field>
             </div>
-            <label className="portal-qb__eula">
-              <input
-                type="checkbox"
-                checked={eula}
-                onChange={(e) => setEula(e.target.checked)}
-              />
-              <span>{t("portal.procurement.builder.eula")}</span>
-            </label>
+            {!eulaAlreadyAgreed && (
+              <label className="portal-qb__eula">
+                <input
+                  type="checkbox"
+                  checked={eula}
+                  onChange={(e) => setEula(e.target.checked)}
+                />
+                <span>
+                  {t("portal.procurement.builder.eula")}{" "}
+                  <button
+                    type="button"
+                    className="portal-legal__link"
+                    onClick={() => setLegalDoc("eula")}
+                  >
+                    {t("portal.procurement.builder.viewEula")}
+                  </button>
+                </span>
+              </label>
+            )}
+            {showErrors && !canGenerate && (
+              <p className="portal-qb__error">
+                {t("portal.procurement.builder.completeRequired")}
+              </p>
+            )}
           </Step>
         )}
+
+        {/* No step heading here, unlike the form steps: the quote is the content, and a heading over
+            it only repeats what the paper already says. The real issued figures, not the footer's
+            client-side preview — this is the document the buyer circulates, so it has to match the
+            PDF and the Stripe quote exactly. */}
+        {step === REVIEW_STEP && issued && (
+          <div className="portal-qb__papertray">
+            <div className="portal-qb__paper">
+              <div className="portal-qb__paper-head">
+                <div>
+                  <div className="portal-qb__paper-brand">Stirling PDF</div>
+                  <div className="portal-qb__paper-eyebrow">
+                    {t("portal.procurement.builder.paperEyebrow")}
+                  </div>
+                </div>
+                <div className="portal-qb__paper-meta">
+                  <div className="portal-qb__quote-number">
+                    {issued.quoteNumber}
+                  </div>
+                  {issued.validUntil && (
+                    <div>
+                      {t("portal.procurement.review.validUntil", {
+                        date: new Date(issued.validUntil).toLocaleDateString(),
+                      })}
+                    </div>
+                  )}
+                  {/* On the document rather than in the footer: it downloads this paper, so it
+                        belongs to it, and the footer stays the flow's own Back/Done. */}
+                  <Button
+                    variant="tertiary"
+                    size="sm"
+                    className="portal-qb__paper-download"
+                    leftSection={<DownloadIcon size={14} />}
+                    loading={downloading}
+                    onClick={onDownload}
+                  >
+                    {t("portal.procurement.review.downloadCta")}
+                  </Button>
+                </div>
+              </div>
+
+              {issued.config.businessName?.trim() && (
+                <div className="portal-qb__paper-for">
+                  <div className="portal-qb__paper-eyebrow">
+                    {t("portal.procurement.builder.paperFor")}
+                  </div>
+                  <div className="portal-qb__paper-company">
+                    {issued.config.businessName}
+                  </div>
+                </div>
+              )}
+
+              <ul className="portal-qb__lines">
+                {issued.lineItems.map((li) => (
+                  <li key={li.key} data-kind={li.kind}>
+                    <span>{li.label}</span>
+                    <span>{money(li.amountMinor, issued.currency)}</span>
+                  </li>
+                ))}
+              </ul>
+
+              <div className="portal-qb__total">
+                <div>
+                  <div className="portal-qb__total-label">
+                    {t("portal.procurement.review.annual")}
+                  </div>
+                  <div className="portal-qb__total-tcv">
+                    {t("portal.procurement.review.tcv", {
+                      years: issued.config.termYears,
+                      tcv: money(issued.tcvMinor, issued.currency),
+                    })}
+                  </div>
+                  <div className="portal-qb__total-tcv">
+                    {t("portal.procurement.review.renewal", {
+                      amount: money(
+                        issued.renewalAnnualNetMinor,
+                        issued.currency,
+                      ),
+                      pct: issued.cpiRatePct,
+                    })}
+                  </div>
+                  {issued.config.poNumber?.trim() && (
+                    <div className="portal-qb__total-tcv">
+                      {t("portal.procurement.review.poNumber", {
+                        po: issued.config.poNumber.trim(),
+                      })}
+                    </div>
+                  )}
+                </div>
+                <div className="portal-qb__total-num">
+                  {money(issued.annualNetMinor, issued.currency)}
+                </div>
+              </div>
+            </div>
+          </div>
+        )}
       </div>
 
       <div className="portal-qb__foot">
         <span className="portal-qb__running">
-          {t("portal.procurement.builder.running", {
-            annual: money(preview),
-            years: cfg.termYears,
-            tcv: money(tcvPreview),
-          })}
+          {t("portal.procurement.builder.running", running)}
         </span>
         <div className="portal-qb__foot-btns">
           {step > 0 && (
@@ -408,7 +630,6 @@ export function QuoteBuilder({
           {step === 0 && (
             <Button
               variant="primary"
-              accent="premium"
               disabled={cfg.volume <= 0}
               onClick={() => setStep(1)}
             >
@@ -416,27 +637,26 @@ export function QuoteBuilder({
             </Button>
           )}
           {step === 1 && (
-            <Button
-              variant="primary"
-              accent="premium"
-              onClick={() => setStep(2)}
-            >
+            <Button variant="primary" onClick={() => setStep(2)}>
               {t("portal.procurement.builder.continue")}
             </Button>
           )}
-          {step === 2 && (
-            <Button
-              variant="primary"
-              accent="premium"
-              loading={busy}
-              disabled={!eula}
-              onClick={generate}
-            >
+          {step === DETAILS_STEP && (
+            <Button variant="primary" loading={busy} onClick={generate}>
               {t("portal.procurement.builder.generate")}
             </Button>
           )}
+          {/* No Accept here: the review step ends on the deal card, where accepting is one of two
+              deliberate choices rather than the only way out of a modal. Download lives on the
+              document itself. */}
+          {step === REVIEW_STEP && (
+            <Button variant="primary" onClick={onClose}>
+              {t("portal.procurement.builder.done")}
+            </Button>
+          )}
         </div>
       </div>
+      <LegalDocumentModal docId={legalDoc} onClose={() => setLegalDoc(null)} />
     </div>
   );
 }
@@ -470,14 +690,25 @@ function Step({
 
 function Field({
   label,
+  required,
+  invalid,
   children,
 }: {
   label: string;
+  required?: boolean;
+  invalid?: boolean;
   children: React.ReactNode;
 }) {
   return (
-    <label className="portal-qb__field">
-      <span className="portal-qb__field-label">{label}</span>
+    <label className="portal-qb__field" data-invalid={invalid || undefined}>
+      <span className="portal-qb__field-label">
+        {label}
+        {required && (
+          <span className="portal-qb__req" aria-hidden>
+            {" *"}
+          </span>
+        )}
+      </span>
       {children}
     </label>
   );
diff --git a/frontend/editor/src/portal/components/procurement/StageStepper.stories.tsx b/frontend/editor/src/portal/components/procurement/StageStepper.stories.tsx
deleted file mode 100644
index 7adb6951fb..0000000000
--- a/frontend/editor/src/portal/components/procurement/StageStepper.stories.tsx
+++ /dev/null
@@ -1,20 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { StageStepper } from "@portal/components/procurement/StageStepper";
-import { JOURNEY } from "@portal/api/procurement";
-import "@portal/views/Procurement.css";
-
-const meta: Meta<typeof StageStepper> = {
-  title: "Portal/Procurement/StageStepper",
-  component: StageStepper,
-  parameters: { layout: "padded" },
-  args: { journey: JOURNEY },
-};
-export default meta;
-type Story = StoryObj<typeof StageStepper>;
-
-export const AtAgreement: Story = { args: { currentStage: "security" } };
-
-export const AtTrial: Story = { args: { currentStage: "trial" } };
-
-// Greyed preview for the free/pro upgrade gate, no stage is current.
-export const Locked: Story = { args: { currentStage: "trial", locked: true } };
diff --git a/frontend/editor/src/portal/components/procurement/StageStepper.tsx b/frontend/editor/src/portal/components/procurement/StageStepper.tsx
deleted file mode 100644
index 3b17f9a0d9..0000000000
--- a/frontend/editor/src/portal/components/procurement/StageStepper.tsx
+++ /dev/null
@@ -1,52 +0,0 @@
-import { Fragment } from "react";
-import { useTranslation } from "react-i18next";
-import type { DealStage, JourneyStep } from "@portal/api/procurement";
-
-/** Status of a step relative to the deal's current stage. */
-type StepState = "complete" | "current" | "upcoming";
-
-/**
- * The five-stage commercial journey as a horizontal band of labelled dots with
- * connectors between them. Purely presentational, the gating action lives in
- * the journey card's next-step row, not on the dots. `locked` greys the whole
- * band for the free/pro upgrade preview, where no stage is current.
- */
-export function StageStepper({
-  journey,
-  currentStage,
-  locked = false,
-}: {
-  journey: JourneyStep[];
-  currentStage: DealStage;
-  locked?: boolean;
-}) {
-  const { t } = useTranslation();
-  const order = journey.map((s) => s.stage);
-  const curIdx = locked ? -1 : order.indexOf(currentStage);
-
-  return (
-    <div
-      className={`portal-proc__steps${locked ? " portal-proc__steps--locked" : ""}`}
-    >
-      {journey.map((step, i) => {
-        const state: StepState =
-          i < curIdx ? "complete" : i === curIdx ? "current" : "upcoming";
-        return (
-          <Fragment key={step.stage}>
-            {i > 0 && (
-              <span
-                className="portal-proc__step-line"
-                data-filled={i <= curIdx}
-                aria-hidden
-              />
-            )}
-            <div className={`portal-proc__step portal-proc__step--${state}`}>
-              <span className="portal-proc__step-dot" aria-hidden />
-              <span className="portal-proc__step-label">{t(step.label)}</span>
-            </div>
-          </Fragment>
-        );
-      })}
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/procurement/format.ts b/frontend/editor/src/portal/components/procurement/format.ts
index c3c38f8d43..e1e8effe30 100644
--- a/frontend/editor/src/portal/components/procurement/format.ts
+++ b/frontend/editor/src/portal/components/procurement/format.ts
@@ -1,7 +1,4 @@
-/** Shared formatting + status/action mappings for the Procurement surface. */
-
-import type { StatusTone } from "@app/ui";
-import type { DocAction, DocStatus } from "@portal/api/procurement";
+/** Money formatting for the procurement surface. */
 
 export const USD = new Intl.NumberFormat(undefined, {
   style: "currency",
@@ -17,30 +14,3 @@ export function money(minor: number, currency: string = "USD"): string {
     maximumFractionDigits: 0,
   }).format(minor / 100);
 }
-
-/** Document status → badge tone. Action items lean amber to pull the eye. */
-export const STATUS_TONE: Record<DocStatus, StatusTone> = {
-  available: "success",
-  action: "warning",
-  pending: "info",
-  request: "neutral",
-  complete: "neutral",
-};
-
-/** Document status → translation key for the short badge label. */
-export const STATUS_LABEL_KEY: Record<DocStatus, string> = {
-  available: "portal.procurement.status.available",
-  action: "portal.procurement.status.action",
-  pending: "portal.procurement.status.pending",
-  request: "portal.procurement.status.request",
-  complete: "portal.procurement.status.complete",
-};
-
-/** Action → translation key for the button label (the fee, when present, is appended by the caller). */
-export const ACTION_LABEL_KEY: Record<DocAction, string> = {
-  download: "portal.procurement.action.download",
-  sign: "portal.procurement.action.sign",
-  pay: "portal.procurement.action.pay",
-  upload: "portal.procurement.action.upload",
-  request: "portal.procurement.action.request",
-};
diff --git a/frontend/editor/src/portal/components/procurement/useProcurement.test.tsx b/frontend/editor/src/portal/components/procurement/useProcurement.test.tsx
new file mode 100644
index 0000000000..c4094156a8
--- /dev/null
+++ b/frontend/editor/src/portal/components/procurement/useProcurement.test.tsx
@@ -0,0 +1,137 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { act, render, waitFor } from "@testing-library/react";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+
+/**
+ * Most deal stages are their own visit: a buyer can sit in one for days, so finishing a step hands
+ * them back to the deal card rather than gliding on to the next.
+ *
+ * Two steps are deliberately not like that, and both are easy to regress into the old behaviour.
+ * Generating a quote stays open, because the issued quote becomes the builder's review step.
+ * Accepting one opens the agreement, because the buyer just took that decision from the card and
+ * being returned to it to press a second button reads as a dead end.
+ *
+ * The failure cases matter most: closing on a failure would tear down the error banner with the
+ * modal, and *opening* on a failure would show the buyer an agreement for a deal that never left the
+ * quote stage.
+ */
+const { fetchSnapshot, startAgreement, issueQuote } = vi.hoisted(() => ({
+  fetchSnapshot: vi.fn(),
+  startAgreement: vi.fn(),
+  issueQuote: vi.fn(),
+}));
+
+vi.mock("@portal/api/procurement", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@portal/api/procurement")>()),
+  fetchSnapshot,
+  startAgreement,
+  issueQuote,
+}));
+vi.mock("@portal/contexts/usePortalLinked", () => ({
+  usePortalLinked: () => true,
+}));
+
+import {
+  useProcurement,
+  type ProcurementController,
+} from "@portal/components/procurement/useProcurement";
+import type { QuoteResult } from "@portal/api/procurement";
+
+const SNAPSHOT = {
+  dealId: 1,
+  stage: "quote" as const,
+  deployment: "cloud",
+  seats: 10,
+  trialStartedAt: "2026-07-01T00:00:00Z",
+  trialEndsAt: "2026-08-01T00:00:00Z",
+  trialExtensionsUsed: 0,
+  licensed: false,
+  licenseKey: null,
+  agreementSignedVersion: null,
+  latestQuote: null,
+};
+
+let ctl: ProcurementController;
+function Probe() {
+  ctl = useProcurement();
+  return null;
+}
+
+function mount() {
+  const client = new QueryClient({
+    defaultOptions: { queries: { retry: false } },
+  });
+  return render(
+    <QueryClientProvider client={client}>
+      <Probe />
+    </QueryClientProvider>,
+  );
+}
+
+beforeEach(() => {
+  fetchSnapshot.mockReset().mockResolvedValue(SNAPSHOT);
+  startAgreement.mockReset().mockResolvedValue(SNAPSHOT);
+  issueQuote.mockReset().mockResolvedValue(SNAPSHOT);
+});
+
+describe("useProcurement", () => {
+  it("opens the agreement once accepting the quote succeeds", async () => {
+    mount();
+    await waitFor(() => expect(ctl.started).toBe(true));
+
+    await act(async () => {
+      await ctl.onAcceptQuote();
+    });
+
+    expect(startAgreement).toHaveBeenCalledTimes(1);
+    expect(ctl.open).toBe(true);
+    expect(ctl.error).toBeNull();
+  });
+
+  it("does not open the agreement when accepting fails, and says why", async () => {
+    startAgreement.mockRejectedValue(new Error("stripe refused"));
+    const quiet = vi.spyOn(console, "error").mockImplementation(() => {});
+    mount();
+    await waitFor(() => expect(ctl.started).toBe(true));
+
+    await act(async () => {
+      await ctl.onAcceptQuote();
+    });
+
+    // The deal never left the quote stage, so there is no agreement to show.
+    expect(ctl.open).toBe(false);
+    expect(ctl.error).toBe("stripe refused");
+    quiet.mockRestore();
+  });
+
+  it("keeps an open modal open when accepting fails, so the banner survives", async () => {
+    startAgreement.mockRejectedValue(new Error("stripe refused"));
+    const quiet = vi.spyOn(console, "error").mockImplementation(() => {});
+    mount();
+    await waitFor(() => expect(ctl.started).toBe(true));
+
+    act(() => ctl.setOpen(true));
+    await act(async () => {
+      await ctl.onAcceptQuote();
+    });
+
+    expect(ctl.open).toBe(true);
+    expect(ctl.error).toBe("stripe refused");
+    quiet.mockRestore();
+  });
+
+  it("stays open after generating, so the review step can show the issued quote", async () => {
+    mount();
+    await waitFor(() => expect(ctl.started).toBe(true));
+
+    act(() => ctl.setOpen(true));
+    await act(async () => {
+      // Only the id is read on the way out; the priced quote comes back via the snapshot.
+      await ctl.onGenerate({ quoteId: "q_1" } as unknown as QuoteResult);
+    });
+
+    expect(issueQuote).toHaveBeenCalledWith("q_1");
+    expect(ctl.open).toBe(true);
+    expect(ctl.error).toBeNull();
+  });
+});
diff --git a/frontend/editor/src/portal/components/procurement/useProcurement.ts b/frontend/editor/src/portal/components/procurement/useProcurement.ts
index 94a484458a..111dcff8a6 100644
--- a/frontend/editor/src/portal/components/procurement/useProcurement.ts
+++ b/frontend/editor/src/portal/components/procurement/useProcurement.ts
@@ -1,18 +1,24 @@
-import { useEffect, useState } from "react";
+import { useState } from "react";
 import { useTranslation } from "react-i18next";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { usePortalLinked } from "@portal/contexts/usePortalLinked";
-import { useAsync } from "@portal/hooks/useAsync";
+import { qk } from "@portal/queries/keys";
+import { toAsyncState } from "@portal/queries/adapters";
 import {
   acceptQuote,
   extendTrial,
   fetchLicenseFile,
   fetchQuotePdf,
+  fetchSignedAgreementPdf,
   fetchSnapshot,
   issueQuote,
+  recordInterest,
   resetProcurement,
+  startAgreement,
   startTrial,
   type ProcurementSnapshot,
   type QuoteResult,
+  type TrialSetupDetails,
 } from "@portal/api/procurement";
 
 export type ProcurementExtra =
@@ -20,7 +26,8 @@ export type ProcurementExtra =
   | "license"
   | "schedule"
   | "trial"
-  | "setup";
+  | "setup"
+  | "documents";
 
 /**
  * Owns the procurement deal state and actions shared by the Home hero footer
@@ -40,6 +47,7 @@ export interface ProcurementController {
   busy: boolean;
   downloading: boolean;
   downloadingLicense: boolean;
+  downloadingAgreement: boolean;
   error: string | null;
   setError: (e: string | null) => void;
   open: boolean;
@@ -51,35 +59,62 @@ export interface ProcurementController {
   invoicePdf: string | null;
   /** Open the trial-setup dialog (deployment + seats) — the trial only starts once it's confirmed. */
   onStartTrial: () => void;
+  /**
+   * Record enterprise interest and open trial setup. Persisting the intent is what keeps the
+   * enterprise surface off accounts that never asked for it, and makes drop-off at this step
+   * visible; the dialog opens either way, so a failed write never blocks the buyer.
+   */
+  onExploreEnterprise: () => void;
   /** Confirm the setup dialog: start the trial with the chosen deployment/seats, then open the flow. */
-  onConfirmSetup: (deployment: string, seats: number) => void;
+  onConfirmSetup: (
+    deployment: string,
+    seats: number,
+    details: TrialSetupDetails,
+  ) => void;
   onExtendTrial: () => void;
   onReset: () => void;
-  onGenerate: (draft: QuoteResult) => void;
+  /** Issue the priced draft. Leaves the modal open: the issued quote becomes the review step. */
+  onGenerate: (draft: QuoteResult) => Promise<void>;
+  /**
+   * Accept the reviewed quote and advance to the agreement step — does NOT charge Stripe. Taken from
+   * the deal card, and opens the agreement on success.
+   */
+  onAcceptQuote: () => Promise<void>;
   onAgree: () => void;
   onDownloadPdf: () => Promise<void>;
   onDownloadOfflineLicense: () => Promise<void>;
+  /** Download the stored signed enterprise agreement (available once signed). */
+  onDownloadSignedAgreement: () => Promise<void>;
 }
 
-export function useProcurement(autoOpen = false): ProcurementController {
+export function useProcurement(): ProcurementController {
   const { t } = useTranslation();
   const isLinked = usePortalLinked();
 
-  const state = useAsync<ProcurementSnapshot | null>(
-    () => (isLinked ? fetchSnapshot() : Promise.resolve(null)),
-    [isLinked],
+  // Through the shared query cache, not a per-mount fetch: the snapshot survives navigation, so
+  // returning to Home renders the deal from cache instead of flashing the loading state again.
+  // No retry — a failing snapshot must not hold `loading` true through backoff, since the hero
+  // gates its whole card on it.
+  const queryClient = useQueryClient();
+  const snapshotKey = qk.procurement(isLinked);
+  const state = toAsyncState(
+    useQuery<ProcurementSnapshot | null>({
+      queryKey: snapshotKey,
+      queryFn: () => (isLinked ? fetchSnapshot() : Promise.resolve(null)),
+      retry: false,
+    }),
   );
-  const [snap, setSnap] = useState<ProcurementSnapshot | null>(null);
   const [open, setOpen] = useState(false);
   const [busy, setBusy] = useState(false);
   const [editing, setEditing] = useState(false);
   const [downloading, setDownloading] = useState(false);
   const [downloadingLicense, setDownloadingLicense] = useState(false);
+  const [downloadingAgreement, setDownloadingAgreement] = useState(false);
   const [invoicePdf, setInvoicePdf] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
   const [extra, setExtra] = useState<ProcurementExtra>(null);
 
-  const data = snap ?? (state.loading ? null : state.data);
+  const data = state.data;
   const started = data?.dealId != null;
   const stage = data?.stage;
   const latest = data?.latestQuote ?? null;
@@ -89,27 +124,56 @@ export function useProcurement(autoOpen = false): ProcurementController {
     !latest ||
     ["draft", "expired", "canceled", "cancelled"].includes(latest.status);
 
-  async function run(fn: () => Promise<unknown>) {
+  /**
+   * Run a deal action, then refresh the snapshot so every reader sees the new stage.
+   *
+   * `closeOnSuccess` ends the step. Each stage is its own visit — a buyer can sit in one for days —
+   * so finishing one returns them to the deal card instead of gliding into the next. Deliberately
+   * not in a `finally`: a failure has to leave the modal open, or the error banner this sets would
+   * be torn down with it and the buyer would be left with no idea what went wrong.
+   *
+   * Returns whether the action succeeded, since failures are reported through the banner rather than
+   * thrown — a caller that follows up with navigation has no other way to tell.
+   */
+  async function run(
+    fn: () => Promise<unknown>,
+    opts?: { closeOnSuccess?: boolean },
+  ): Promise<boolean> {
     setBusy(true);
     setError(null);
     try {
       await fn();
-      setSnap(await fetchSnapshot());
+      queryClient.setQueryData(snapshotKey, await fetchSnapshot());
+      if (opts?.closeOnSuccess) setOpen(false);
+      return true;
     } catch (e) {
       console.error("[procurement] action failed", e);
       setError(e instanceof Error ? e.message : String(e));
+      return false;
     } finally {
       setBusy(false);
     }
   }
 
-  // The setup dialog collects deployment + seats first; the trial starts on confirm.
+  // The setup dialog collects deployment + seats first; the trial starts on confirm. Starting the
+  // trial is a step in its own right, so it ends on the card — the buyer builds a quote when ready.
   const onStartTrial = () => setExtra("setup");
-  const onConfirmSetup = (deployment: string, seats: number) =>
+  const onExploreEnterprise = () => {
+    setExtra("setup");
+    void recordInterest()
+      .then((snap) => queryClient.setQueryData(snapshotKey, snap))
+      .catch((e) =>
+        console.error("[procurement] recording interest failed", e),
+      );
+  };
+  const onConfirmSetup = (
+    deployment: string,
+    seats: number,
+    details: TrialSetupDetails,
+  ) =>
     run(async () => {
-      await startTrial(deployment, seats);
+      await startTrial(deployment, seats, details);
       setExtra(null);
-      setOpen(true);
     });
   const onExtendTrial = () => run(extendTrial);
   const onReset = () =>
@@ -118,19 +182,40 @@ export function useProcurement(autoOpen = false): ProcurementController {
       setEditing(false);
       setInvoicePdf(null);
     });
-  const onGenerate = (draft: QuoteResult) =>
-    run(async () => {
+  // Deliberately does not close: the issued quote returns through the snapshot and becomes the
+  // builder's review step, so the buyer reads the paper they just generated instead of being dropped
+  // back on the card to find it again.
+  const onGenerate = async (draft: QuoteResult) => {
+    await run(async () => {
       await issueQuote(draft.quoteId);
       setEditing(false);
     });
-  // Quote + agreement are one step now: agreeing accepts the issued quote straight into a
-  // committed subscription (Stripe), and provisioning upgrades the licence server-side.
+  };
+
+  /**
+   * Accept the reviewed quote: advance to the agreement step only. No Stripe — the buyer can read and
+   * download the plain quote before taking on the legal documents.
+   *
+   * This is the one transition that carries straight on into the next stage rather than ending on the
+   * card. Accepting is an explicit decision the buyer has just taken from the card itself, so putting
+   * them back there to press a second button to see what they accepted reads as a dead end.
+   */
+  const onAcceptQuote = async () => {
+    if (await run(startAgreement)) setOpen(true);
+  };
+
+  // Signing the agreement is the commitment point: it accepts the issued quote into a committed
+  // subscription (Stripe), and provisioning upgrades the licence server-side. Payment itself is
+  // invoice + bank transfer, so it settles out of band — there is no in-app step to close.
   const onAgree = () =>
-    run(async () => {
-      if (!latest) return;
-      const res = await acceptQuote(latest.quoteId);
-      setInvoicePdf(res.invoicePdf);
-    });
+    run(
+      async () => {
+        if (!latest) return;
+        const res = await acceptQuote(latest.quoteId);
+        setInvoicePdf(res.invoicePdf);
+      },
+      { closeOnSuccess: true },
+    );
 
   async function onDownloadPdf() {
     if (!latest) return;
@@ -176,11 +261,25 @@ export function useProcurement(autoOpen = false): ProcurementController {
     }
   }
 
-  // A deep link (/procurement) opens the flow when a deal is already underway; if there's no deal
-  // yet it must NOT silently start a trial — leave the modal closed so the Start-trial CTA shows.
-  useEffect(() => {
-    if (autoOpen && started) setOpen(true);
-  }, [autoOpen, started]);
+  async function onDownloadSignedAgreement() {
+    setDownloadingAgreement(true);
+    try {
+      const blob = await fetchSignedAgreementPdf();
+      const url = URL.createObjectURL(blob);
+      const a = document.createElement("a");
+      a.href = url;
+      a.download = "stirling-enterprise-agreement.pdf";
+      document.body.appendChild(a);
+      a.click();
+      a.remove();
+      setTimeout(() => URL.revokeObjectURL(url), 60_000);
+    } catch (e) {
+      console.error("[procurement] signed agreement download failed", e);
+      setError(t("portal.procurement.agreement.downloadError"));
+    } finally {
+      setDownloadingAgreement(false);
+    }
+  }
 
   return {
     isLinked,
@@ -194,6 +293,7 @@ export function useProcurement(autoOpen = false): ProcurementController {
     busy,
     downloading,
     downloadingLicense,
+    downloadingAgreement,
     error,
     setError,
     open,
@@ -204,12 +304,15 @@ export function useProcurement(autoOpen = false): ProcurementController {
     setExtra,
     invoicePdf,
     onStartTrial,
+    onExploreEnterprise,
     onConfirmSetup,
     onExtendTrial,
     onReset,
     onGenerate,
+    onAcceptQuote,
     onAgree,
     onDownloadPdf,
     onDownloadOfflineLicense,
+    onDownloadSignedAgreement,
   };
 }
diff --git a/frontend/editor/src/portal/components/shared/FlowModal.css b/frontend/editor/src/portal/components/shared/FlowModal.css
new file mode 100644
index 0000000000..f5879a8d1f
--- /dev/null
+++ b/frontend/editor/src/portal/components/shared/FlowModal.css
@@ -0,0 +1,52 @@
+/* ──────────────────────────────────────────────────────────────────────── */
+/*  FlowModal — the flows' deltas on top of the shared Modal (sui-modal)     */
+/* ──────────────────────────────────────────────────────────────────────── */
+
+/* The shared Modal owns the backdrop, panel, header band and dismissal chrome. Only the flows'
+   own density and width live here, so a procurement dialog cannot drift from a billing one.
+   Every rule below pairs .portal-flowmodal with a sui-modal class so it outranks the base rule
+   regardless of which stylesheet the bundler emits first. */
+
+.portal-flowmodal {
+  /* The shell's horizontal inset, published so content that has to bleed out to the panel's edges
+     (see the quote builder's footer) reads it rather than hard-coding a copy that silently drifts.
+     Mirrors .sui-modal__body's padding. */
+  --flowmodal-inset: 1.125rem;
+  --flowmodal-body-end: 1.125rem;
+}
+
+/* The takeover needs the room for its quote tables, and Calendly's two-pane layout collapses into a
+   tall scrolling single column below roughly 680px of inner width. Sits between the shared lg
+   (48rem) and xl (64rem), so it is set here rather than bent into a shared token. */
+.sui-modal.portal-flowmodal--lg {
+  max-width: 52rem;
+}
+
+/* A flow's header is a slot, not a string: it carries its own heading, step badge and subtitle, each
+   with its own type. Neutralise the base title wrapper's weight and size so those children inherit
+   nothing from it — it is 600, which would otherwise render every flow subtitle semibold.
+   Colour is deliberately NOT inherited here: the panel sets none, so `inherit` reached past it to the
+   document and dropped the header below the contrast floor. */
+.portal-flowmodal .sui-modal__title {
+  font-size: inherit;
+  font-weight: 400;
+  color: var(--c-text);
+}
+
+/* The flows stack blocks down the body and space them evenly; the base modal leaves spacing to its
+   content. Text stays at full contrast rather than the base body's muted grey. */
+.portal-flowmodal .sui-modal__body {
+  display: flex;
+  flex-direction: column;
+  gap: 0.9rem;
+  color: var(--c-text);
+  /* So a step that fills the dialog's height (the agreement's document) can shrink to it: without
+     this a flex child refuses to go below its content height and overflows instead. */
+  min-height: 0;
+}
+
+/* One space-between row, so a step passes its two ends as siblings (Back on the left, Continue on
+   the right) instead of the base modal's right-aligned button cluster. */
+.portal-flowmodal .sui-modal__footer {
+  justify-content: space-between;
+}
diff --git a/frontend/editor/src/portal/components/shared/FlowModal.test.tsx b/frontend/editor/src/portal/components/shared/FlowModal.test.tsx
new file mode 100644
index 0000000000..8a7b701512
--- /dev/null
+++ b/frontend/editor/src/portal/components/shared/FlowModal.test.tsx
@@ -0,0 +1,94 @@
+import { describe, expect, it, vi } from "vitest";
+import { fireEvent, render, screen } from "@testing-library/react";
+import { FlowModal } from "@portal/components/shared/FlowModal";
+import { PortalTestProviders } from "@portal/test/TestQueryProvider";
+
+/**
+ * The shell backs every procurement and trial dialog, so its dismissal paths and its header
+ * branching are the highest-traffic behaviour in the portal's flows.
+ *
+ * The branching matters beyond looks: a step that draws its own stepped header carries the close
+ * beside its step badge, so the shell must draw neither. Shipping that wrong once left a band
+ * holding nothing but a stray close above the step's real heading; shipping it the other way would
+ * leave a dialog with no visible close at all. Since the shell now delegates to the shared Modal,
+ * "supplies no header" is what expresses it — the same convention the prepay checkout follows.
+ */
+function open(props: Partial<Parameters<typeof FlowModal>[0]> = {}) {
+  const onClose = vi.fn();
+  render(
+    <PortalTestProviders>
+      <FlowModal open onClose={onClose} label="Test dialog" {...props}>
+        <p>body</p>
+      </FlowModal>
+    </PortalTestProviders>,
+  );
+  return onClose;
+}
+
+describe("FlowModal", () => {
+  it("renders nothing while closed", () => {
+    const onClose = vi.fn();
+    render(
+      <PortalTestProviders>
+        <FlowModal open={false} onClose={onClose} label="Test dialog">
+          <p>body</p>
+        </FlowModal>
+      </PortalTestProviders>,
+    );
+    expect(screen.queryByRole("dialog")).toBeNull();
+  });
+
+  it("closes on Escape", () => {
+    const onClose = open();
+    fireEvent.keyDown(document, { key: "Escape" });
+    expect(onClose).toHaveBeenCalledTimes(1);
+  });
+
+  it("closes on a backdrop click but not on a click inside the panel", () => {
+    const onClose = open();
+    fireEvent.click(screen.getByRole("dialog"));
+    expect(onClose).not.toHaveBeenCalled();
+
+    const backdrop = screen.getByRole("dialog").parentElement!;
+    fireEvent.click(backdrop);
+    expect(onClose).toHaveBeenCalledTimes(1);
+  });
+
+  it("draws a header band with a working close when given a header", () => {
+    const onClose = open({ header: <h2>Heading</h2> });
+    expect(document.querySelector(".sui-modal__header")).not.toBeNull();
+    expect(screen.getByText("Heading")).toBeInTheDocument();
+
+    fireEvent.click(screen.getByRole("button", { name: /close/i }));
+    expect(onClose).toHaveBeenCalledTimes(1);
+  });
+
+  it("drops the band, close included, when the content owns its header", () => {
+    const onClose = open();
+    expect(document.querySelector(".sui-modal__header")).toBeNull();
+    expect(screen.queryByRole("button", { name: /close/i })).toBeNull();
+
+    // Never inescapable: the step's own close aside, Escape still exits.
+    fireEvent.keyDown(document, { key: "Escape" });
+    expect(onClose).toHaveBeenCalledTimes(1);
+  });
+
+  it("names the dialog from `label` when the content owns the heading", () => {
+    open();
+    expect(screen.getByRole("dialog")).toHaveAccessibleName("Test dialog");
+  });
+
+  it("names the dialog from the header once one is supplied", () => {
+    open({ header: <h2>Heading</h2> });
+    const dialog = screen.getByRole("dialog");
+    expect(dialog).not.toHaveAttribute("aria-label");
+    expect(dialog).toHaveAccessibleName("Heading");
+  });
+
+  it("renders the footer only when given one", () => {
+    open({ footer: <button type="button">Continue</button> });
+    expect(
+      screen.getByRole("button", { name: "Continue" }),
+    ).toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/portal/components/shared/FlowModal.tsx b/frontend/editor/src/portal/components/shared/FlowModal.tsx
new file mode 100644
index 0000000000..b240980b7f
--- /dev/null
+++ b/frontend/editor/src/portal/components/shared/FlowModal.tsx
@@ -0,0 +1,52 @@
+import type { ReactNode } from "react";
+import { Modal } from "@app/ui";
+import "@portal/components/shared/FlowModal.css";
+
+/**
+ * The one dialog shell for the portal's flows — procurement's takeover, the trial/licence/schedule
+ * dialogs, the legal reader.
+ *
+ * A thin wrapper over the shared {@link Modal}, which already owns the portal, focus trap, scroll
+ * lock, Escape and backdrop dismissal, and the close button. This used to reimplement all of it,
+ * which is precisely how the procurement dialogs drifted from the billing ones that were already on
+ * the shared Modal. What is left here is only what the flows genuinely add: a stacked body, a
+ * space-between footer for Back/Continue, and the takeover width.
+ *
+ * `header` is the shared Modal's title slot, so a flow can seat its own stepped header (see
+ * StepModalHeader) in the band. Omit it and the band goes entirely, close included — the convention
+ * the prepay checkout already follows for a step that draws its own heading and close. Escape and
+ * the backdrop still dismiss, so such a dialog is never inescapable.
+ */
+export function FlowModal({
+  open,
+  onClose,
+  label,
+  header,
+  footer,
+  size = "md",
+  children,
+}: {
+  open: boolean;
+  onClose: () => void;
+  /** Accessible name, used when `header` supplies no visible heading of its own. */
+  label: string;
+  header?: ReactNode;
+  footer?: ReactNode;
+  /** `md` for the task dialogs, `lg` for the procurement takeover and Calendly. */
+  size?: "md" | "lg";
+  children: ReactNode;
+}) {
+  return (
+    <Modal
+      open={open}
+      onClose={onClose}
+      ariaLabel={label}
+      width={size}
+      className={`portal-flowmodal portal-flowmodal--${size}`}
+      title={header}
+      footer={footer}
+    >
+      {children}
+    </Modal>
+  );
+}
diff --git a/frontend/editor/src/portal/components/shared/StepModalHeader.css b/frontend/editor/src/portal/components/shared/StepModalHeader.css
new file mode 100644
index 0000000000..7296e9752f
--- /dev/null
+++ b/frontend/editor/src/portal/components/shared/StepModalHeader.css
@@ -0,0 +1,92 @@
+/* ──────────────────────────────────────────────────────────────────────── */
+/*  Stepped flow-modal header (prepay wizard, metered checkout, quote builder) */
+/* ──────────────────────────────────────────────────────────────────────── */
+
+.portal-stepmodal__head {
+  display: flex;
+  flex-direction: column;
+  gap: 0.875rem;
+  /* No bottom margin: the host band owns the space beneath it (FlowModal's header padding, or
+     billing's own .portal-billing__bundle-head). Keeping one here doubled the header's inset. */
+}
+
+.portal-stepmodal__head-top {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+}
+
+.portal-stepmodal__brand {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  font-weight: 700;
+  font-size: 0.9375rem;
+  color: var(--c-text);
+}
+
+/* Trademarked wordmark SVG (theme-switched via .wordmark-light-only/.wordmark-dark-only). Height
+   matches the portal nav's 22px wordmark so the modal and app read as one brand. No `display` here —
+   the theme-switch utilities own visibility. */
+.portal-stepmodal__wordmark {
+  height: 1.375rem;
+  width: auto;
+}
+
+/* Flow title, for modals that head with their own name rather than the wordmark. */
+.portal-stepmodal__ident {
+  min-width: 0;
+}
+.portal-stepmodal__flow-title {
+  margin: 0;
+  font-size: 1.25rem;
+  font-weight: 700;
+  color: var(--c-text);
+}
+/* Qualifies the title — for a step whose heading names a document that needs saying what it covers. */
+.portal-stepmodal__flow-sub {
+  margin: 0.15rem 0 0;
+  font-size: 0.8125rem;
+  font-weight: 400;
+  color: var(--c-text-subtle);
+  line-height: 1.45;
+}
+
+.portal-stepmodal__head-right {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+.portal-stepmodal__step {
+  padding: 0.1875rem 0.625rem;
+  border: 1px solid var(--c-border-subtle);
+  border-radius: 999px;
+  font-size: 0.75rem;
+  font-weight: 600;
+  color: var(--c-text-subtle);
+  white-space: nowrap;
+}
+
+.portal-stepmodal__progress {
+  display: flex;
+  gap: 0.375rem;
+}
+
+.portal-stepmodal__progress > span {
+  flex: 1;
+  height: 4px;
+  border-radius: 999px;
+  background: var(--c-border-subtle);
+}
+
+.portal-stepmodal__progress > span.is-filled {
+  background: var(--c-primary);
+}
+
+.portal-stepmodal__title {
+  font-size: 1.25rem;
+  font-weight: 700;
+  color: var(--c-text);
+}
diff --git a/frontend/editor/src/portal/components/shared/StepModalHeader.tsx b/frontend/editor/src/portal/components/shared/StepModalHeader.tsx
new file mode 100644
index 0000000000..3156d17a9e
--- /dev/null
+++ b/frontend/editor/src/portal/components/shared/StepModalHeader.tsx
@@ -0,0 +1,127 @@
+import type { ReactNode } from "react";
+import { useTranslation } from "react-i18next";
+import { Button } from "@app/ui";
+// The trademarked Stirling wordmark — the font is baked into the SVG (no brand webfont is loaded),
+// so we render the same asset the portal nav uses rather than styled text. Theme-switched in CSS.
+import wordmarkLight from "@app/assets/brand/modern-logo/StirlingProcessorLogoBlackText.svg";
+import wordmarkDark from "@app/assets/brand/modern-logo/StirlingProcessorLogoWhiteText.svg";
+import "@portal/components/shared/StepModalHeader.css";
+
+/**
+ * Header for any stepped flow modal: an identity row (brand wordmark or the flow's own title) with a
+ * "Step N of M" badge and close, an M-segment progress bar, and the current step's title.
+ *
+ * Shared so a flow's chrome is not re-implemented per flow — the prepay wizard, the metered
+ * checkout, and the procurement quote builder all wear this. The step label is passed already
+ * translated: each flow keeps its own copy key rather than this component inventing a shared one.
+ */
+export function StepModalHeader({
+  title,
+  subtitle,
+  step,
+  total,
+  stepLabel,
+  aside,
+  brand = false,
+  className,
+  closeLabel,
+  onClose,
+}: {
+  /** The current step's heading. Omit when the host modal already renders one. */
+  title?: string;
+  /** A line under the title, for a step whose heading needs qualifying (what the document covers). */
+  subtitle?: ReactNode;
+  /** Actions belonging to what is on screen (e.g. download this document), seated before the close. */
+  aside?: ReactNode;
+  /** 1-based current step. Omit to hide the badge and the progress bar (e.g. a terminal receipt). */
+  step?: number;
+  /** Segments to draw. Any length — a flow is not limited to three steps. */
+  total?: number;
+  /** Pre-translated "Step 2 of 3"; omitted renders no badge. */
+  stepLabel?: string;
+  /** Show the Stirling wordmark instead of a plain heading, for flows that stand alone. */
+  brand?: boolean;
+  /** Extra class on the root, so a host modal can still own its padding/layout. */
+  className?: string;
+  closeLabel?: string;
+  /** Omit when the host modal already owns a close control, so there is only ever one. */
+  onClose?: () => void;
+}) {
+  const { t } = useTranslation();
+  const showSteps = step != null && total != null && total > 0;
+
+  return (
+    <div className={`portal-stepmodal__head ${className ?? ""}`.trim()}>
+      <div className="portal-stepmodal__head-top">
+        {brand ? (
+          <div className="portal-stepmodal__brand">
+            <img
+              src={wordmarkLight}
+              alt="Stirling"
+              className="portal-stepmodal__wordmark wordmark-light-only"
+            />
+            <img
+              src={wordmarkDark}
+              alt=""
+              aria-hidden
+              className="portal-stepmodal__wordmark wordmark-dark-only"
+            />
+          </div>
+        ) : title ? (
+          <div className="portal-stepmodal__ident">
+            <h3 className="portal-stepmodal__flow-title">{title}</h3>
+            {subtitle && (
+              <p className="portal-stepmodal__flow-sub">{subtitle}</p>
+            )}
+          </div>
+        ) : (
+          <span />
+        )}
+        <div className="portal-stepmodal__head-right">
+          {aside}
+          {stepLabel && (
+            <span className="portal-stepmodal__step">{stepLabel}</span>
+          )}
+          {onClose && (
+            <Button
+              variant="tertiary"
+              accent="neutral"
+              size="sm"
+              shape="circle"
+              onClick={onClose}
+              aria-label={closeLabel ?? t("portal.stepModal.close", "Close")}
+              leftSection={
+                <svg
+                  viewBox="0 0 24 24"
+                  width="16"
+                  height="16"
+                  fill="none"
+                  stroke="currentColor"
+                  strokeWidth={1.75}
+                  strokeLinecap="round"
+                  strokeLinejoin="round"
+                  aria-hidden
+                >
+                  <line x1="18" y1="6" x2="6" y2="18" />
+                  <line x1="6" y1="6" x2="18" y2="18" />
+                </svg>
+              }
+            />
+          )}
+        </div>
+      </div>
+
+      {showSteps && (
+        <div className="portal-stepmodal__progress" aria-hidden>
+          {Array.from({ length: total }, (_, i) => (
+            <span key={i} className={i < step ? "is-filled" : ""} />
+          ))}
+        </div>
+      )}
+
+      {/* With the wordmark up top the step title carries the heading; without it the flow title
+          already did, so repeating it here would say the same thing twice. */}
+      {brand && <div className="portal-stepmodal__title">{title}</div>}
+    </div>
+  );
+}
diff --git a/frontend/editor/src/portal/contexts/UIContext.test.tsx b/frontend/editor/src/portal/contexts/UIContext.test.tsx
new file mode 100644
index 0000000000..61fa11631c
--- /dev/null
+++ b/frontend/editor/src/portal/contexts/UIContext.test.tsx
@@ -0,0 +1,47 @@
+import { describe, expect, it } from "vitest";
+import { act, render } from "@testing-library/react";
+import { UIProvider, useUI } from "@portal/contexts/UIContext";
+
+/**
+ * The context value is memoised, so every piece of state it exposes has to appear in the memo's
+ * dependency array or consumers never see it change. `trialSetupRequested` was added without it and
+ * the enterprise CTA silently did nothing: the flag flipped, the memo did not, and no consumer
+ * re-rendered. There is no `react-hooks/exhaustive-deps` rule in this repo to catch that, so it gets
+ * a test instead.
+ */
+function probe() {
+  const seen: boolean[] = [];
+  let api: ReturnType<typeof useUI>;
+
+  function Probe() {
+    api = useUI();
+    seen.push(api.trialSetupRequested);
+    return null;
+  }
+
+  render(
+    <UIProvider>
+      <Probe />
+    </UIProvider>,
+  );
+  return {
+    seen,
+    get api() {
+      return api;
+    },
+  };
+}
+
+describe("UIContext — the trial-setup signal reaches consumers", () => {
+  it("re-renders consumers when the request is raised and cleared", () => {
+    const p = probe();
+    expect(p.api.trialSetupRequested).toBe(false);
+
+    act(() => p.api.requestTrialSetup());
+    expect(p.api.trialSetupRequested).toBe(true);
+    expect(p.seen).toContain(true);
+
+    act(() => p.api.clearTrialSetupRequest());
+    expect(p.api.trialSetupRequested).toBe(false);
+  });
+});
diff --git a/frontend/editor/src/portal/contexts/UIContext.tsx b/frontend/editor/src/portal/contexts/UIContext.tsx
index fbf572d3cc..ba0676ab6d 100644
--- a/frontend/editor/src/portal/contexts/UIContext.tsx
+++ b/frontend/editor/src/portal/contexts/UIContext.tsx
@@ -50,6 +50,14 @@ interface UIContextValue {
   linkModalMode: "link" | "reauth";
   openLinkModal: (mode?: "link" | "reauth") => void;
   closeLinkModal: () => void;
+  /**
+   * A request to begin the enterprise trial, raised from wherever the buyer said yes (the billing
+   * upsell, a sales link). The deal controller lives on Home, so this is a one-shot signal rather
+   * than a direct call: Home consumes it, opens trial setup, and clears it.
+   */
+  trialSetupRequested: boolean;
+  requestTrialSetup: () => void;
+  clearTrialSetupRequest: () => void;
 }
 
 const UIContext = createContext<UIContextValue | null>(null);
@@ -83,6 +91,7 @@ export function UIProvider({ children }: { children: ReactNode }) {
     string | null
   >(null);
   const [linkModalOpen, setLinkModalOpen] = useState(false);
+  const [trialSetupRequested, setTrialSetupRequested] = useState(false);
   const [linkModalMode, setLinkModalMode] = useState<"link" | "reauth">("link");
   // When the link modal is opened from inside Settings, remember the section to
   // restore so closing the modal returns the admin to where they were.
@@ -146,6 +155,12 @@ export function UIProvider({ children }: { children: ReactNode }) {
         }
         setLinkModalOpen(true);
       },
+      trialSetupRequested,
+      requestTrialSetup: () => {
+        setMobileNavOpen(false);
+        setTrialSetupRequested(true);
+      },
+      clearTrialSetupRequest: () => setTrialSetupRequested(false),
       closeLinkModal: () => {
         setLinkModalOpen(false);
         setLinkModalMode("link");
@@ -166,6 +181,7 @@ export function UIProvider({ children }: { children: ReactNode }) {
       linkModalOpen,
       linkModalMode,
       reopenSettingsAfterLink,
+      trialSetupRequested,
     ],
   );
 
diff --git a/frontend/editor/src/portal/contexts/ViewContext.tsx b/frontend/editor/src/portal/contexts/ViewContext.tsx
index dd9cf41b6c..f622eda6b6 100644
--- a/frontend/editor/src/portal/contexts/ViewContext.tsx
+++ b/frontend/editor/src/portal/contexts/ViewContext.tsx
@@ -14,7 +14,6 @@ export type ViewId =
   | "infrastructure"
   | "usage"
   | "docs"
-  | "procurement"
   | "settings";
 
 export const VIEW_PATHS: Record<ViewId, string> = {
@@ -29,7 +28,6 @@ export const VIEW_PATHS: Record<ViewId, string> = {
   infrastructure: "/infrastructure",
   usage: "/usage",
   docs: "/docs",
-  procurement: "/procurement",
   settings: "/settings",
 };
 
diff --git a/frontend/editor/src/portal/hooks/useOnboardingProgress.ts b/frontend/editor/src/portal/hooks/useOnboardingProgress.ts
deleted file mode 100644
index 0aacd87be7..0000000000
--- a/frontend/editor/src/portal/hooks/useOnboardingProgress.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { useTier } from "@portal/contexts/TierContext";
-import { useEditorInstalled } from "@portal/hooks/useEditorInstalled";
-import { useEditorDeployment } from "@portal/queries/infrastructure";
-import { usePoliciesOverview } from "@portal/queries/policies";
-import { useUsersRoster } from "@portal/queries/users";
-
-/**
- * Getting-started completion, derived live from the org's real state, composed
- * from the shared editor-deployment / policies / users queries.
- *
- * Best-effort per source: a step reads `data ?? fallback` and query errors are
- * never folded into `loading`, so an endpoint that isn't served yet (e.g.
- * editor-deployment on a bare backend) leaves its step incomplete instead of
- * breaking the card.
- */
-export interface OnboardingProgress {
-  loading: boolean;
-  /** A real deployment is reporting in (drives the live-status header). */
-  deployed: boolean;
-  /** Download step done — a real deployment OR the user's own download/Done. */
-  editorDone: boolean;
-  policiesDone: boolean;
-  /** More than just the admin on the team. */
-  inviteDone: boolean;
-  policiesActive: number;
-  policiesRecommended: number;
-  allComplete: boolean;
-}
-
-export function useOnboardingProgress(): OnboardingProgress {
-  const { tier } = useTier();
-  const editorInstalled = useEditorInstalled();
-  const deployQuery = useEditorDeployment(tier);
-  const policiesQuery = usePoliciesOverview();
-  const usersQuery = useUsersRoster(tier);
-
-  const deploy = deployQuery.data;
-  const policies = policiesQuery.data;
-  const users = usersQuery.data;
-
-  const deployed = (deploy?.instances.length ?? 0) > 0;
-  // Authoritative signal is a deployed instance; the user's own download/Done
-  // action marks it complete immediately via the persisted flag.
-  const editorDone = editorInstalled || deployed;
-  const policiesActive = policies?.summary.active ?? 0;
-  const policiesRecommended = Math.max(
-    0,
-    (policies?.summary.categories ?? 0) - policiesActive,
-  );
-  const policiesDone = policiesActive > 0;
-  const inviteDone = (users?.summary.totalMembers ?? 0) > 1;
-
-  return {
-    loading: deployQuery.loading || policiesQuery.loading || usersQuery.loading,
-    deployed,
-    editorDone,
-    policiesDone,
-    inviteDone,
-    policiesActive,
-    policiesRecommended,
-    allComplete: editorDone && policiesDone && inviteDone,
-  };
-}
diff --git a/frontend/editor/src/portal/mocks/handlers/index.ts b/frontend/editor/src/portal/mocks/handlers/index.ts
index 0600656524..95621dce44 100644
--- a/frontend/editor/src/portal/mocks/handlers/index.ts
+++ b/frontend/editor/src/portal/mocks/handlers/index.ts
@@ -5,7 +5,6 @@ import { searchHandlers } from "@portal/mocks/handlers/search";
 import { pipelinesHandlers } from "@portal/mocks/handlers/pipelines";
 import { sourcesHandlers } from "@portal/mocks/handlers/sources";
 import { infrastructureHandlers } from "@portal/mocks/handlers/infrastructure";
-import { procurementHandlers } from "@portal/mocks/handlers/procurement";
 import { procurementSaasHandlers } from "@portal/mocks/handlers/procurementSaas";
 import { docsHandlers } from "@portal/mocks/handlers/docs";
 import { usersHandlers } from "@portal/mocks/handlers/users";
@@ -26,7 +25,6 @@ export const handlers = [
   ...sourcesHandlers,
   ...infrastructureHandlers,
   ...docsHandlers,
-  ...procurementHandlers,
   ...procurementSaasHandlers,
   ...usersHandlers,
   ...teamSaasHandlers,
@@ -39,5 +37,4 @@ export const handlers = [
 ];
 
 export { resetNotificationsStore } from "@portal/mocks/handlers/notifications";
-export { resetProcurementStore } from "@portal/mocks/handlers/procurement";
 export { resetTeamSaasStore } from "@portal/mocks/handlers/teamSaas";
diff --git a/frontend/editor/src/portal/mocks/handlers/procurement.ts b/frontend/editor/src/portal/mocks/handlers/procurement.ts
deleted file mode 100644
index 37dbc2f75a..0000000000
--- a/frontend/editor/src/portal/mocks/handlers/procurement.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { http, HttpResponse, delay } from "msw";
-import type { Tier } from "@portal/contexts/TierContext";
-import {
-  JOURNEY,
-  type DealStage,
-  type ProcurementResponse,
-} from "@portal/api/procurement";
-import {
-  buildProcurement,
-  seedEnterpriseDeal,
-} from "@portal/mocks/procurement";
-import {
-  advanceDeal,
-  payDeal,
-  requestDoc,
-  signDoc,
-  uploadPurchaseOrder,
-} from "@portal/mocks/procurementMachine";
-
-/**
- * Stateful mock of the commercial backend. The write endpoints drive the
- * procurement state machine over one in-memory enterprise deal, so the journey
- * genuinely progresses within a session, advancing a stage flips the gating
- * paperwork, unlocks the next stage's documents, and the GET reflects every
- * prior write. Swapping in the real backend is just deleting these handlers;
- * the api/ contracts and the state-machine semantics stay.
- */
-let store = seedEnterpriseDeal();
-
-/** Reseed the deal to its starting (mid-journey) state, used by tests + replay. */
-export function resetProcurementStore() {
-  store = seedEnterpriseDeal();
-}
-
-function snapshot(): ProcurementResponse {
-  return {
-    tier: "enterprise",
-    unlocked: true,
-    deal: store.deal,
-    journey: JOURNEY,
-    ledger: store.ledger,
-    supporting: store.supporting,
-  };
-}
-
-export const procurementHandlers = [
-  http.get("/v1/procurement", async ({ request }) => {
-    await delay(120);
-    const tier = (new URL(request.url).searchParams.get("tier") ??
-      "pro") as Tier;
-    // Only the enterprise tenant has a live deal; others get the locked payload.
-    if (tier !== "enterprise") return HttpResponse.json(buildProcurement(tier));
-    return HttpResponse.json(snapshot());
-  }),
-
-  // POST /v1/procurement/advance, the journey's primary "next step".
-  http.post("/v1/procurement/advance", async ({ request }) => {
-    await delay(140);
-    const { fromStage } = (await request.json()) as { fromStage: DealStage };
-    advanceDeal(store, fromStage);
-    return HttpResponse.json(snapshot());
-  }),
-
-  // POST /v1/procurement/sign, e-sign the agreement, then advance.
-  http.post("/v1/procurement/sign", async ({ request }) => {
-    await delay(160);
-    const { docId } = (await request.json()) as { docId: string };
-    signDoc(store, docId);
-    return HttpResponse.json(snapshot());
-  }),
-
-  // POST /v1/procurement/pay, confirm online payment, then advance.
-  http.post("/v1/procurement/pay", async () => {
-    await delay(160);
-    payDeal(store);
-    return HttpResponse.json(snapshot());
-  }),
-
-  // POST /v1/procurement/purchase-order, upload a PO (an alternate pay path).
-  http.post("/v1/procurement/purchase-order", async () => {
-    await delay(160);
-    uploadPurchaseOrder(store);
-    return HttpResponse.json(snapshot());
-  }),
-
-  // POST /v1/procurement/documents/:docId/request, queue an on-demand doc.
-  http.post("/v1/procurement/documents/:docId/request", async ({ params }) => {
-    await delay(140);
-    requestDoc(store, String(params.docId));
-    return HttpResponse.json(snapshot());
-  }),
-];
diff --git a/frontend/editor/src/portal/mocks/handlers/procurementSaas.ts b/frontend/editor/src/portal/mocks/handlers/procurementSaas.ts
index f9d9f116a0..fe75827c2d 100644
--- a/frontend/editor/src/portal/mocks/handlers/procurementSaas.ts
+++ b/frontend/editor/src/portal/mocks/handlers/procurementSaas.ts
@@ -17,6 +17,7 @@ const EMPTY = {
   trialExtensionsUsed: 0,
   licensed: false,
   licenseKey: null,
+  agreementSignedVersion: null,
   latestQuote: null,
 };
 
@@ -161,7 +162,9 @@ export function priceQuote(cfg: Cfg) {
   seq += 1;
   return {
     quoteId: seq,
-    quoteNumber: `QT-DEMO-${String(seq).padStart(4, "0")}`,
+    // A draft has no reference: Stripe assigns the quote number at finalisation, so the mock leaves
+    // it null here and fills it when the quote is issued, exactly as the real flow does.
+    quoteNumber: null,
     status: "draft",
     currency: "USD",
     annualNetMinor,
@@ -205,10 +208,21 @@ export function resetProcurementSaasStore() {
 
 export const procurementSaasHandlers = [
   http.get(`${SAAS}/api/v1/procurement`, () => HttpResponse.json(deal)),
+  // Interest: creates the deal at `exploring` when there is none, and never disturbs one that
+  // already exists — so the enterprise surface only appears for accounts that asked for it.
+  http.post(`${SAAS}/api/v1/procurement/interest`, () => {
+    if (deal.dealId == null) {
+      deal = { ...deal, dealId: 1, stage: "exploring" };
+    }
+    return HttpResponse.json(deal);
+  }),
   http.post(`${SAAS}/api/v1/procurement/trial/start`, async ({ request }) => {
     const body = (await request.json().catch(() => ({}))) as Partial<{
       deployment: string;
       users: number;
+      businessName: string;
+      contactName: string;
+      contactEmail: string;
     }>;
     const allowed = ["cloud", "selfhost", "airgap"];
     const now = Date.now();
@@ -224,6 +238,9 @@ export const procurementSaasHandlers = [
       trialExtensionsUsed: 0,
       licensed: true,
       licenseKey: "MOCK-TRIAL-KEY-0001",
+      businessName: body.businessName ?? null,
+      contactName: body.contactName ?? null,
+      contactEmail: body.contactEmail ?? null,
       latestQuote: null,
     };
     return HttpResponse.json(deal);
@@ -257,6 +274,78 @@ export const procurementSaasHandlers = [
     (deal as Record<string, unknown>).stage = "security";
     return HttpResponse.json(deal);
   }),
+  http.get(`${SAAS}/api/v1/procurement/agreement/document`, () => {
+    const q = (deal as { latestQuote: { quoteNumber?: string } | null })
+      .latestQuote;
+    if (!q) return new HttpResponse(null, { status: 404 });
+    return HttpResponse.json({
+      docId: "enterprise-agreement",
+      version: "0.9.1",
+      versionLabel: "SEA v0.9.1",
+      displayName: "Stirling Enterprise Agreement",
+      effectiveDate: "2026-07-10",
+      status: "draft",
+      markdown: [
+        "# Stirling Enterprise Agreement",
+        "## Part A — Master Services Agreement",
+        "Provider will provide the Stirling PDF Processor and Editor as described in the Order Form.",
+        `## Part B — Order Form · ${q.quoteNumber ?? "Q-MOCK"}`,
+        "| Term | Value |",
+        "| --- | --- |",
+        "| Subscription | Enterprise · Stirling Cloud |",
+        "| Escalator | +3% at each anniversary during the Term |",
+        "## Part C — Data Processing Addendum",
+        "Provider processes Personal Data only on Customer's documented instructions.",
+      ].join("\n\n"),
+    });
+  }),
+  http.post(
+    `${SAAS}/api/v1/procurement/agreement/sign`,
+    async ({ request }) => {
+      const body = (await request.json().catch(() => ({}))) as Partial<{
+        signatoryName: string;
+        authorityConfirmed: boolean;
+      }>;
+      if (!body.signatoryName || !body.authorityConfirmed) {
+        return new HttpResponse(null, { status: 400 });
+      }
+      // Surface the signed agreement for download on the payment/live stage.
+      (deal as Record<string, unknown>).agreementSignedVersion = "SEA v0.9.1";
+      return HttpResponse.json({
+        signatureId: 1,
+        versionLabel: "SEA v0.9.1",
+        pdfStored: true,
+      });
+    },
+  ),
+  http.get(`${SAAS}/api/v1/procurement/agreement/signature/pdf`, () => {
+    const signed = (deal as { agreementSignedVersion?: string })
+      .agreementSignedVersion;
+    if (!signed) return new HttpResponse(null, { status: 404 });
+    // A minimal one-page PDF so the browser download works in mock mode.
+    const pdf =
+      "%PDF-1.4\n1 0 obj<</Type/Catalog/Pages 2 0 R>>endobj\n" +
+      "2 0 obj<</Type/Pages/Kids[3 0 R]/Count 1>>endobj\n" +
+      "3 0 obj<</Type/Page/Parent 2 0 R/MediaBox[0 0 300 120]>>endobj\n" +
+      "trailer<</Root 1 0 R>>\n%%EOF";
+    return new HttpResponse(pdf, {
+      headers: { "Content-Type": "application/pdf" },
+    });
+  }),
+  http.get(`${SAAS}/api/v1/procurement/agreement/document/pdf`, () => {
+    // The unsigned agreement PDF is available once a quote exists.
+    if (!(deal as { latestQuote: unknown }).latestQuote) {
+      return new HttpResponse(null, { status: 404 });
+    }
+    const pdf =
+      "%PDF-1.4\n1 0 obj<</Type/Catalog/Pages 2 0 R>>endobj\n" +
+      "2 0 obj<</Type/Pages/Kids[3 0 R]/Count 1>>endobj\n" +
+      "3 0 obj<</Type/Page/Parent 2 0 R/MediaBox[0 0 300 120]>>endobj\n" +
+      "trailer<</Root 1 0 R>>\n%%EOF";
+    return new HttpResponse(pdf, {
+      headers: { "Content-Type": "application/pdf" },
+    });
+  }),
   http.post(`${SAAS}/api/v1/procurement/go-live`, () => {
     const d = deal as Record<string, unknown>;
     if (d.dealId) {
@@ -281,6 +370,34 @@ export const procurementSaasHandlers = [
     resetProcurementSaasStore();
     return HttpResponse.json(EMPTY);
   }),
+  http.get(`${SAAS}/api/v1/legal/:docId`, ({ params }) => {
+    const docId = String(params.docId);
+    const titles: Record<string, string> = {
+      eula: "Stirling EULA & Commercial Terms",
+      sla: "Stirling SLA Exhibit",
+      subprocessors: "Stirling Subprocessors",
+    };
+    if (!(docId in titles)) return new HttpResponse(null, { status: 404 });
+    return HttpResponse.json({
+      docId,
+      version: "1.0.0",
+      versionLabel: `${docId.toUpperCase()} v1.0.0`,
+      displayName: titles[docId],
+      effectiveDate: "2026-07-10",
+      status: "draft",
+      markdown: `# ${titles[docId]}\n\nThis is a mock of the ${docId} document for local development.\n\n## 1. Terms\n\nThe real text is served from the backend legal registry.`,
+    });
+  }),
+  http.post(`${SAAS}/api/v1/legal/consent`, async ({ request }) => {
+    const body = (await request.json().catch(() => ({}))) as Partial<{
+      documentId: string;
+      context: string;
+    }>;
+    if (!body.documentId || !body.context) {
+      return new HttpResponse(null, { status: 400 });
+    }
+    return new HttpResponse(null, { status: 200 });
+  }),
 
   // Stripe Quote edge functions (supabase.functions.invoke → ${url}/functions/v1/{name}).
   http.post(`${SAAS}/functions/v1/issue-procurement-quote`, () => {
@@ -289,6 +406,9 @@ export const procurementSaasHandlers = [
     if (q) {
       q.status = "sent";
       q.stripeQuoteId = `qt_mock_${q.quoteId}`;
+      // Issuing is what mints the reference. Stripe's shape is
+      // QT-{customer invoice prefix}-{quote seq}-{revision}.
+      q.quoteNumber = `QT-MOCKPFX-${String(q.quoteId).padStart(4, "0")}-1`;
     }
     return HttpResponse.json(q);
   }),
diff --git a/frontend/editor/src/portal/mocks/procurement.ts b/frontend/editor/src/portal/mocks/procurement.ts
deleted file mode 100644
index 6976601d7b..0000000000
--- a/frontend/editor/src/portal/mocks/procurement.ts
+++ /dev/null
@@ -1,307 +0,0 @@
-/**
- * Procurement fixtures. Types and the journey definition live in
- * api/procurement.ts (the backend contract); this module only builds the fake
- * deal data the MSW handlers in mocks/handlers/procurement.ts serve over the
- * intercepted httpJson() calls, for Storybook and tests.
- *
- * The handlers serve Storybook and tests, so these fixtures stay in sync with
- * the api contract for as long as those need them.
- */
-
-import type { Tier } from "@portal/contexts/TierContext";
-import type {
-  Deal,
-  LedgerGroup,
-  ProcurementResponse,
-  SupportingGroup,
-} from "@portal/api/procurement";
-import { JOURNEY } from "@portal/api/procurement";
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Fixtures                                                                 */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-const ENTERPRISE_DEAL: Deal = {
-  company: "Northwind Logistics",
-  // The buyer has accepted the quote and is at the agreement signature, the
-  // mid-journey state shows the most surface area (completed + active + ahead).
-  currentStage: "security",
-  engineer: {
-    name: "Priya Raman",
-    title: "Senior Solutions Engineer",
-    email: "priya.raman@stirlingpdf.com",
-  },
-  trial: {
-    key: "TRIAL-NWND-7F3A-2C9E",
-    startedOn: daysFromNow(-23),
-    endsOn: daysFromNow(7),
-    daysLeft: 7,
-    extensionsUsed: 1,
-    maxExtensions: 2,
-  },
-  quote: {
-    number: "Q-2026-0488",
-    amount: 84_000,
-    term: "12 months",
-    validUntil: daysFromNow(14),
-  },
-};
-
-/** Document ledger for the live enterprise deal, grouped by stage. */
-const ENTERPRISE_LEDGER: LedgerGroup[] = [
-  {
-    stage: "trial",
-    label: "portal.procurement.journeySteps.trial.label",
-    docs: [
-      {
-        id: "doc-trial-quickstart",
-        name: "Trial quick-start guide",
-        sub: "Stand up the evaluation environment in under an hour.",
-        status: "available",
-        action: "download",
-      },
-      {
-        id: "doc-trial-handout",
-        name: "Evaluator handout",
-        sub: "Share Stirling's capabilities with your evaluation team.",
-        status: "available",
-        action: "download",
-      },
-    ],
-  },
-  {
-    stage: "quote",
-    label: "portal.procurement.journeySteps.quote.label",
-    docs: [
-      {
-        id: "doc-quote-formal",
-        name: "Formal quote",
-        sub: "Committed-volume pricing, term and line items, Q-2026-0488.",
-        status: "complete",
-        action: "download",
-      },
-    ],
-  },
-  {
-    stage: "security",
-    label: "portal.procurement.journeySteps.agreement.label",
-    docs: [
-      {
-        id: "doc-agreement-enterprise",
-        name: "Stirling Enterprise Agreement",
-        sub: "One signature: MSA + order form + EULA + DPA.",
-        status: "action",
-        action: "sign",
-      },
-    ],
-  },
-  {
-    stage: "procurement",
-    label: "portal.procurement.journeySteps.payment.label",
-    docs: [
-      {
-        id: "doc-pay-online",
-        name: "Pay online",
-        sub: "Card or bank transfer via Stripe.",
-        status: "pending",
-        action: "pay",
-      },
-      {
-        id: "doc-pay-wire",
-        name: "Bank transfer instructions",
-        sub: "Wire details, plus RIB for EU buyers.",
-        status: "pending",
-        action: "download",
-      },
-      {
-        id: "doc-pay-po",
-        name: "Purchase order",
-        sub: "Upload it and we invoice against it.",
-        status: "request",
-        action: "upload",
-      },
-    ],
-  },
-  {
-    stage: "active",
-    label: "portal.procurement.journeySteps.implementation.label",
-    docs: [
-      {
-        id: "doc-active-playbook",
-        name: "Go-live playbook",
-        sub: "Cut-over steps, rollback plan, and success checks.",
-        status: "pending",
-        action: "download",
-      },
-      {
-        id: "doc-active-admin",
-        name: "Administrator setup guide",
-        sub: "SSO, regions, audit export and seat provisioning.",
-        status: "pending",
-        action: "download",
-      },
-      {
-        id: "doc-active-onboarding",
-        name: "Onboarding & training",
-        sub: "Guided rollout and live training for your team.",
-        status: "request",
-        action: "request",
-        optional: true,
-        fee: 7_500,
-      },
-    ],
-  },
-];
-
-/** Stage-agnostic supporting documents, grouped by category. */
-const ENTERPRISE_SUPPORTING: SupportingGroup[] = [
-  {
-    category: "security",
-    label: "Security",
-    docs: [
-      {
-        id: "sup-soc2",
-        name: "SOC 2 Type II report",
-        sub: "Independent audit of our security controls.",
-        status: "available",
-        action: "download",
-      },
-      {
-        id: "sup-caiq",
-        name: "Security questionnaire (CAIQ)",
-        sub: "Pre-filled Consensus Assessments Initiative Questionnaire.",
-        status: "available",
-        action: "download",
-      },
-      {
-        id: "sup-pentest",
-        name: "Penetration test summary",
-        sub: "Latest third-party penetration test results.",
-        status: "available",
-        action: "download",
-      },
-      {
-        id: "sup-custom-review",
-        name: "Custom security review",
-        sub: "Dedicated session with our security team for your assessment.",
-        status: "request",
-        action: "request",
-        fee: 5_000,
-      },
-    ],
-  },
-  {
-    category: "legal",
-    label: "Legal",
-    docs: [
-      {
-        id: "sup-baa",
-        name: "Business Associate Agreement (HIPAA)",
-        sub: "Required when processing protected health information.",
-        status: "request",
-        action: "request",
-        fee: 2_500,
-      },
-    ],
-  },
-  {
-    category: "corporate",
-    label: "Corporate",
-    docs: [
-      {
-        id: "sup-w9",
-        name: "IRS Form W-9",
-        sub: "Our taxpayer identification for your records.",
-        status: "available",
-        action: "download",
-      },
-      {
-        id: "sup-incorporation",
-        name: "Certificate of Incorporation",
-        sub: "Proof of our legal entity registration.",
-        status: "available",
-        action: "download",
-      },
-      {
-        id: "sup-insurance",
-        name: "Certificate of Insurance",
-        sub: "Liability and cyber insurance coverage evidence.",
-        status: "available",
-        action: "download",
-      },
-    ],
-  },
-  {
-    category: "procurement",
-    label: "Procurement",
-    docs: [
-      {
-        id: "sup-vendor-onboarding",
-        name: "Vendor onboarding form",
-        sub: "We fill out your procurement-portal forms for you.",
-        status: "request",
-        action: "request",
-        fee: 1_500,
-      },
-    ],
-  },
-];
-
-/** Structured deep clone of plain fixture data (no functions / class instances). */
-function clone<T>(value: T): T {
-  return JSON.parse(JSON.stringify(value)) as T;
-}
-
-/**
- * A fresh, mutable copy of the live enterprise deal, deal header, stage ledger
- * and supporting pool. The MSW layer seeds its in-memory store from this so the
- * write handlers can advance the journey within a session without mutating the
- * shared fixtures. The journey definition (JOURNEY) is immutable and shared.
- */
-export function seedEnterpriseDeal(): {
-  deal: Deal;
-  ledger: LedgerGroup[];
-  supporting: SupportingGroup[];
-} {
-  return {
-    deal: clone(ENTERPRISE_DEAL),
-    ledger: clone(ENTERPRISE_LEDGER),
-    supporting: clone(ENTERPRISE_SUPPORTING),
-  };
-}
-
-/**
- * Builds the procurement payload for a tier. Enterprise gets the full live
- * deal; free/pro get a minimal locked payload the view renders as an
- * "enterprise-only" upgrade state.
- */
-export function buildProcurement(tier: Tier): ProcurementResponse {
-  if (tier !== "enterprise") {
-    // Locked tiers still receive the journey definition so the view can render
-    // a greyed preview of the steps behind the upgrade prompt.
-    return {
-      tier,
-      unlocked: false,
-      deal: null,
-      journey: JOURNEY,
-      ledger: [],
-      supporting: [],
-    };
-  }
-
-  return {
-    tier,
-    unlocked: true,
-    deal: ENTERPRISE_DEAL,
-    journey: JOURNEY,
-    ledger: ENTERPRISE_LEDGER,
-    supporting: ENTERPRISE_SUPPORTING,
-  };
-}
-
-/** ISO date (YYYY-MM-DD) `n` days from today; negative for the past. */
-function daysFromNow(n: number): string {
-  const d = new Date();
-  d.setDate(d.getDate() + n);
-  return d.toISOString().slice(0, 10);
-}
diff --git a/frontend/editor/src/portal/mocks/procurementMachine.test.ts b/frontend/editor/src/portal/mocks/procurementMachine.test.ts
deleted file mode 100644
index 6bf913b89c..0000000000
--- a/frontend/editor/src/portal/mocks/procurementMachine.test.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { beforeEach, describe, expect, it } from "vitest";
-import { seedEnterpriseDeal } from "@portal/mocks/procurement";
-import {
-  advanceDeal,
-  payDeal,
-  requestDoc,
-  signDoc,
-  uploadPurchaseOrder,
-  type ProcurementStore,
-} from "@portal/mocks/procurementMachine";
-
-let store: ProcurementStore;
-beforeEach(() => {
-  store = seedEnterpriseDeal();
-});
-
-function status(s: ProcurementStore, id: string): string | undefined {
-  return [
-    ...s.ledger.flatMap((g) => g.docs),
-    ...s.supporting.flatMap((g) => g.docs),
-  ].find((d) => d.id === id)?.status;
-}
-
-describe("seed", () => {
-  it("starts mid-journey at the agreement, awaiting signature", () => {
-    expect(store.deal.currentStage).toBe("security");
-    expect(status(store, "doc-agreement-enterprise")).toBe("action");
-  });
-
-  it("is an independent copy each call (writes never touch the fixture)", () => {
-    advanceDeal(store, "security");
-    const fresh = seedEnterpriseDeal();
-    expect(fresh.deal.currentStage).toBe("security");
-  });
-});
-
-describe("advanceDeal", () => {
-  it("completes the stage's gating doc and unlocks the next stage", () => {
-    advanceDeal(store, "security");
-    expect(store.deal.currentStage).toBe("procurement");
-    expect(status(store, "doc-agreement-enterprise")).toBe("complete");
-    // Payment paperwork becomes actionable / downloadable on entry.
-    expect(status(store, "doc-pay-online")).toBe("action");
-    expect(status(store, "doc-pay-wire")).toBe("available");
-  });
-
-  it("ignores a stale stage so a double-click can't skip ahead", () => {
-    advanceDeal(store, "security"); // → procurement
-    advanceDeal(store, "security"); // stale, no-op
-    expect(store.deal.currentStage).toBe("procurement");
-  });
-
-  it("is a no-op at the terminal stage", () => {
-    advanceDeal(store, "security"); // → procurement
-    advanceDeal(store, "procurement"); // → active
-    expect(store.deal.currentStage).toBe("active");
-    advanceDeal(store, "active"); // terminal
-    expect(store.deal.currentStage).toBe("active");
-  });
-});
-
-describe("document actions", () => {
-  it("signing completes the agreement and advances the deal", () => {
-    signDoc(store, "doc-agreement-enterprise");
-    expect(status(store, "doc-agreement-enterprise")).toBe("complete");
-    expect(store.deal.currentStage).toBe("procurement");
-  });
-
-  it("paying clears payment and advances to implementation", () => {
-    advanceDeal(store, "security"); // → procurement
-    payDeal(store);
-    expect(store.deal.currentStage).toBe("active");
-    expect(status(store, "doc-pay-online")).toBe("complete");
-  });
-
-  it("uploading a PO is an alternate payment path that also advances", () => {
-    advanceDeal(store, "security"); // → procurement
-    uploadPurchaseOrder(store);
-    expect(store.deal.currentStage).toBe("active");
-  });
-
-  it("requesting an on-demand document moves it to pending", () => {
-    requestDoc(store, "sup-custom-review");
-    expect(status(store, "sup-custom-review")).toBe("pending");
-  });
-});
diff --git a/frontend/editor/src/portal/mocks/procurementMachine.ts b/frontend/editor/src/portal/mocks/procurementMachine.ts
deleted file mode 100644
index d889691e2b..0000000000
--- a/frontend/editor/src/portal/mocks/procurementMachine.ts
+++ /dev/null
@@ -1,114 +0,0 @@
-/**
- * The procurement deal's state machine, the exact server-side semantics the
- * mock backend enforces, as pure functions over a {@link ProcurementStore}.
- *
- * Kept separate from the MSW handler (which just owns one in-memory store and
- * wires these to endpoints) so the rules are unit-testable without a network,
- * and so a real backend has a precise spec to mirror. Every function mutates
- * the store in place, there's a single instance per session.
- */
-
-import {
-  JOURNEY,
-  type Deal,
-  type DealStage,
-  type DocAction,
-  type DocStatus,
-  type LedgerDoc,
-  type LedgerGroup,
-  type SupportingGroup,
-} from "@portal/api/procurement";
-
-export interface ProcurementStore {
-  deal: Deal;
-  ledger: LedgerGroup[];
-  supporting: SupportingGroup[];
-}
-
-/** Document actions that gate a stage, completing them moves the deal forward. */
-const GATING: DocAction[] = ["sign", "pay", "upload"];
-
-function nextStage(stage: DealStage): DealStage | null {
-  const i = JOURNEY.findIndex((s) => s.stage === stage);
-  return i >= 0 && i < JOURNEY.length - 1 ? JOURNEY[i + 1].stage : null;
-}
-
-function allDocs(store: ProcurementStore): LedgerDoc[] {
-  return [
-    ...store.ledger.flatMap((g) => g.docs),
-    ...store.supporting.flatMap((g) => g.docs),
-  ];
-}
-
-function setDocStatus(store: ProcurementStore, id: string, status: DocStatus) {
-  const doc = allDocs(store).find((d) => d.id === id);
-  if (doc) doc.status = status;
-}
-
-function stageOfDoc(
-  store: ProcurementStore,
-  id: string,
-): DealStage | undefined {
-  return store.ledger.find((g) => g.docs.some((d) => d.id === id))?.stage;
-}
-
-/**
- * Advance the deal one stage. Completing a stage marks its outstanding gating
- * docs done; entering the next stage promotes that stage's paperwork from
- * "pending" to actionable (gating → action needed, downloads → available).
- * No-ops on a stale `from` so a double-click can't skip a stage.
- */
-export function advanceDeal(store: ProcurementStore, from: DealStage) {
-  if (store.deal.currentStage !== from) return;
-  const to = nextStage(from);
-  if (!to) return;
-
-  store.ledger
-    .find((g) => g.stage === from)
-    ?.docs.forEach((d) => {
-      if (d.status === "action") d.status = "complete";
-    });
-
-  store.deal.currentStage = to;
-
-  store.ledger
-    .find((g) => g.stage === to)
-    ?.docs.forEach((d) => {
-      if (d.status !== "pending") return;
-      if (GATING.includes(d.action)) d.status = "action";
-      else if (d.action === "download") d.status = "available";
-    });
-}
-
-/** Complete the current stage's doc matching an action, then advance past it. */
-function completeAndAdvance(store: ProcurementStore, action: DocAction) {
-  const stage = store.deal.currentStage;
-  store.ledger
-    .find((g) => g.stage === stage)
-    ?.docs.forEach((d) => {
-      if (d.action === action) d.status = "complete";
-    });
-  advanceDeal(store, stage);
-}
-
-/** Sign the agreement: complete the doc and advance out of its stage. */
-export function signDoc(store: ProcurementStore, docId: string) {
-  setDocStatus(store, docId, "complete");
-  const stage = stageOfDoc(store, docId);
-  if (stage && stage === store.deal.currentStage) advanceDeal(store, stage);
-}
-
-/** Confirm online payment, then advance to implementation. */
-export function payDeal(store: ProcurementStore) {
-  completeAndAdvance(store, "pay");
-}
-
-/** Upload a purchase order (an alternate payment path), then advance. */
-export function uploadPurchaseOrder(store: ProcurementStore) {
-  completeAndAdvance(store, "upload");
-}
-
-/** Queue an on-demand document, it moves to "pending" until generated. */
-export function requestDoc(store: ProcurementStore, docId: string) {
-  setDocStatus(store, docId, "pending");
-}
diff --git a/frontend/editor/src/portal/queries/keys.ts b/frontend/editor/src/portal/queries/keys.ts
index d2c3fc601a..18d9e1b0e7 100644
--- a/frontend/editor/src/portal/queries/keys.ts
+++ b/frontend/editor/src/portal/queries/keys.ts
@@ -16,6 +16,9 @@ export const qk = {
   pipelines: () => ["portal", "pipelines"] as const,
   fleetStats: () => ["portal", "fleetStats"] as const,
   appConfig: () => ["portal", "appConfig"] as const,
+  // Keyed on linkage: an unlinked account has no deal to read, so linking must not
+  // serve the unlinked (null) snapshot back from cache.
+  procurement: (linked: boolean) => ["portal", "procurement", linked] as const,
 
   // Tier-dependent
   documents: (tier: Tier) => ["portal", "documents", tier] as const,
diff --git a/frontend/editor/src/portal/queries/users.ts b/frontend/editor/src/portal/queries/users.ts
index 8f314d7fc0..137efd392f 100644
--- a/frontend/editor/src/portal/queries/users.ts
+++ b/frontend/editor/src/portal/queries/users.ts
@@ -8,9 +8,8 @@ import type { Tier } from "@portal/contexts/TierContext";
 
 /**
  * Base query: the org roster (flavor-resolved via usersBackend). Keyed the same
- * as the Users view's roster query (qk.usersRoster), so Home's onboarding read
- * and the Users page share one cache entry — the roster is fetched once across
- * both. Used by useOnboardingProgress.
+ * as the Users view's roster query (qk.usersRoster), so callers share one cache
+ * entry — the roster is fetched once across all of them.
  */
 export function useUsersRoster(tier: Tier): AsyncState<UsersResponse> {
   return toAsyncState(
diff --git a/frontend/editor/src/portal/views/Home.stories.tsx b/frontend/editor/src/portal/views/Home.stories.tsx
index 9821157fdf..7c2c81c643 100644
--- a/frontend/editor/src/portal/views/Home.stories.tsx
+++ b/frontend/editor/src/portal/views/Home.stories.tsx
@@ -34,6 +34,7 @@ export const SubscribedInProcurement: Story = {
             trialEndsAt: "2026-07-21T00:00:00.000Z",
             trialExtensionsUsed: 0,
             licensed: true,
+            agreementSignedVersion: null,
             latestQuote: null,
           }),
         ),
diff --git a/frontend/editor/src/portal/views/Home.tsx b/frontend/editor/src/portal/views/Home.tsx
index 94a5668c60..bd190e17e1 100644
--- a/frontend/editor/src/portal/views/Home.tsx
+++ b/frontend/editor/src/portal/views/Home.tsx
@@ -18,7 +18,7 @@ export function Home() {
 
       {/* Per-tier hero. Its footer is the deal-status hero while a procurement
           deal is underway (a bolt-on to any tier), otherwise the setup checklist. */}
-      <HomeHero tier={tier} />
+      <HomeHero />
       <ProcessorFlow />
     </div>
   );
diff --git a/frontend/editor/src/portal/views/Procurement.css b/frontend/editor/src/portal/views/Procurement.css
index e26fd74a31..b721768952 100644
--- a/frontend/editor/src/portal/views/Procurement.css
+++ b/frontend/editor/src/portal/views/Procurement.css
@@ -1,34 +1,10 @@
-.portal-proc {
-  display: flex;
-  flex-direction: column;
-  gap: 1.25rem;
-  padding: 1.5rem;
-  max-width: 84rem;
-  margin: 0 auto;
-}
-
-/* Page header */
-.portal-proc__header {
-  display: flex;
-  align-items: flex-start;
-  justify-content: space-between;
-  gap: 1rem;
-}
-
-.portal-proc__title {
-  margin: 0;
-  font-size: 1.375rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
 .portal-proc__subtitle {
   margin: 0.25rem 0 0;
   font-size: 0.8125rem;
   color: var(--c-text-subtle);
 }
 
-/* Eyebrow label shared by the journey header + SE block */
+/* Eyebrow label above a stage panel's heading */
 .portal-proc__eyebrow {
   display: block;
   font-size: 0.6875rem;
@@ -38,613 +14,33 @@
   color: var(--c-text-subtle);
   margin-bottom: 0.25rem;
 }
-
-/* ── Journey card ─────────────────────────────────────────────────────── */
-/* Stacked, border-divided sections: header / stepper / trial / next step. */
-.portal-proc__journey-head {
-  display: flex;
-  align-items: flex-start;
-  justify-content: space-between;
-  gap: 1rem;
-  padding: 1.25rem 1.5rem;
-  border-bottom: 1px solid var(--c-border-subtle);
-  flex-wrap: wrap;
-}
-
-.portal-proc__journey-title {
-  margin: 0;
-  font-size: 1.0625rem;
-  font-weight: 700;
-  color: var(--c-text);
-}
-
-.portal-proc__journey-sub {
-  margin: 0.25rem 0 0;
-  max-width: 36rem;
-  font-size: 0.8125rem;
-  line-height: 1.5;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__se {
-  display: flex;
-  flex-direction: column;
-  text-align: right;
-  flex-shrink: 0;
-}
-
-.portal-proc__se .portal-proc__eyebrow {
-  margin-bottom: 0.25rem;
-}
-
-.portal-proc__se-name {
-  font-size: 0.8125rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
-.portal-proc__se-email {
-  font-size: 0.75rem;
-  color: var(--c-primary);
-  text-decoration: none;
-}
-
-.portal-proc__se-email:hover {
-  text-decoration: underline;
-}
-
-/* Stepper band */
-.portal-proc__journey-stepper {
-  padding: 1.125rem 1.5rem;
-  border-bottom: 1px solid var(--c-border-subtle);
-}
-
-.portal-proc__steps {
-  display: flex;
-  align-items: flex-start;
-}
-
-.portal-proc__steps--locked {
-  opacity: 0.55;
-  filter: grayscale(0.4);
-  pointer-events: none;
-}
-
-.portal-proc__step {
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  gap: 0.4rem;
-  min-width: 4rem;
-}
-
-.portal-proc__step-dot {
-  width: 0.875rem;
-  height: 0.875rem;
-  border-radius: 50%;
-  background: var(--c-border);
-}
-
-.portal-proc__step--complete .portal-proc__step-dot {
-  background: var(--color-green);
-}
-
-.portal-proc__step--current .portal-proc__step-dot {
-  background: var(--color-purple);
-  box-shadow: 0 0 0 4px var(--color-purple-light);
-}
-
-.portal-proc__step-label {
-  font-size: 0.6875rem;
-  font-weight: 500;
-  text-align: center;
-  white-space: nowrap;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__step--complete .portal-proc__step-label {
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__step--current .portal-proc__step-label {
-  font-weight: 700;
-  color: var(--c-text);
-}
-
-/* Connector aligns with the 0.875rem dots: (14px − 2px) / 2 = 6px down */
-.portal-proc__step-line {
-  flex: 1;
-  height: 2px;
-  margin: 0.375rem 0.375rem 0;
-  background: var(--c-border-subtle);
-}
-
-.portal-proc__step-line[data-filled="true"] {
-  background: var(--color-green);
-}
-
-/* Trial status strip (shown while evaluating) */
-.portal-proc__trial {
-  display: flex;
-  align-items: center;
-  gap: 0.625rem;
-  flex-wrap: wrap;
-  padding: 0.75rem 1.5rem;
-  border-bottom: 1px solid var(--c-border-subtle);
-  background: var(--color-bg-code);
-}
-
-.portal-proc__trial-title {
-  font-size: 0.8125rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
-.portal-proc__trial-dim {
-  font-size: 0.78125rem;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__trial-key {
-  font-family:
-    ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
-  font-size: 0.6875rem;
-  color: var(--c-text-subtle);
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: 0.375rem;
-  padding: 0.1875rem 0.5rem;
-}
-
-/* Next-step row: one primary action at a time */
-.portal-proc__next {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  flex-wrap: wrap;
-  padding: 1rem 1.5rem;
-}
-
-.portal-proc__next-label {
-  display: flex;
-  align-items: center;
-  gap: 0.625rem;
-  font-size: 0.84375rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
-.portal-proc__next-dot {
-  width: 0.5rem;
-  height: 0.5rem;
-  border-radius: 50%;
-  background: var(--color-amber);
-  flex-shrink: 0;
-}
-
-.portal-proc__next-dot[data-live="true"] {
-  background: var(--color-green);
-}
-
-/* ── Documents card ───────────────────────────────────────────────────── */
-.portal-proc__docs-head {
-  padding: 1.125rem 1.5rem;
-  border-bottom: 1px solid var(--c-border-subtle);
-}
-
-.portal-proc__docs-title {
-  margin: 0;
-  font-size: 0.9375rem;
-  font-weight: 700;
-  color: var(--c-text);
-}
-
-.portal-proc__docs-sub {
-  margin: 0.25rem 0 0;
-  font-size: 0.78125rem;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__docs-body {
-  padding: 0.375rem 1.5rem 1.125rem;
-}
-
-/* Accordion spacing — the disclosure chrome itself lives in shared Collapsible
-   (.sui-collapsible); here we only space the stacked sections. */
-.portal-proc__docs-body .sui-collapsible {
-  margin-top: 0.875rem;
-}
-
-/* Stage header bits */
-.portal-proc__stage-dot {
-  width: 0.4375rem;
-  height: 0.4375rem;
-  border-radius: 50%;
-  flex-shrink: 0;
-}
-
-.portal-proc__stage-dot[data-state="done"] {
-  background: var(--color-green);
-}
-
-.portal-proc__stage-dot[data-state="current"] {
-  background: var(--color-purple);
-}
-
-.portal-proc__stage-dot[data-state="upcoming"] {
-  background: var(--c-border);
-}
-
-.portal-proc__stage-label {
-  font-size: 0.75rem;
-  font-weight: 700;
-  letter-spacing: 0.03em;
-  text-transform: uppercase;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__stage-label[data-current] {
-  color: var(--c-text);
-}
-
-.portal-proc__stage-hint {
-  font-size: 0.71875rem;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__stage-count {
-  font-size: 0.6875rem;
-  color: var(--c-text-subtle);
-}
-
-/* Document lists inside the accordion */
-.portal-proc__doc-list {
-  border-top: 1px solid var(--c-border-subtle);
-}
-
-.portal-proc__doc-list--boxed {
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 0.5rem;
-  overflow: hidden;
-}
-
-/* Supporting section — extra separation from the stage accordion above it.
-   Scoped to match the general .sui-collapsible spacing rule's specificity. */
-.portal-proc__docs-body .portal-proc__supporting-acc {
-  margin-top: 1.5rem;
-}
-
-.portal-proc__supporting-head {
-  display: flex;
-  flex-direction: column;
-  gap: 0.125rem;
-  min-width: 0;
-}
-
-.portal-proc__supporting-sub {
-  font-size: 0.71875rem;
-  font-weight: 400;
-  line-height: 1.45;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__acc-toggle-label {
-  font-size: 0.75rem;
-  font-weight: 600;
-  color: var(--c-primary);
-}
-
-.portal-proc__supporting-groups {
-  display: flex;
-  flex-direction: column;
-  gap: 1rem;
-  border-top: 1px solid var(--c-border-subtle);
-  padding: 0.875rem;
-}
-
-.portal-proc__group-label {
-  font-size: 0.6875rem;
-  font-weight: 700;
-  text-transform: uppercase;
-  letter-spacing: 0.05em;
-  color: var(--c-text-subtle);
-  margin-bottom: 0.5rem;
-}
-
-/* ── Document rows (ledger + supporting) ──────────────────────────────── */
-.portal-proc__doc {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  padding: 0.75rem 0.875rem;
-  border-bottom: 1px solid var(--c-border-subtle);
-}
-
-.portal-proc__doc:last-child {
-  border-bottom: none;
-}
-
-.portal-proc__doc[data-locked] {
-  opacity: 0.6;
-}
-
-.portal-proc__doc-text {
-  min-width: 0;
-}
-
-.portal-proc__doc-name-row {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  flex-wrap: wrap;
-}
-
-.portal-proc__doc-name {
-  font-size: 0.84375rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
-.portal-proc__doc-sub {
-  margin: 0.0625rem 0 0;
-  font-size: 0.71875rem;
-  line-height: 1.4;
-  color: var(--c-text-subtle);
-}
-
-.portal-proc__doc-actions {
-  display: flex;
-  align-items: center;
-  gap: 0.75rem;
-  flex-shrink: 0;
-}
-
-/* ── Locked state ─────────────────────────────────────────────────────── */
-.portal-proc__locked {
-  display: flex;
-  flex-direction: column;
-  gap: 1.25rem;
-}
-
-/* ── Action modal ─────────────────────────────────────────────────────── */
-.portal-proc__modal-body {
-  margin: 0 0 1rem;
-  font-size: 0.875rem;
-  line-height: 1.55;
-  color: var(--c-text-muted);
-}
-
-.portal-proc__modal-actions {
-  display: flex;
-  align-items: center;
-  justify-content: flex-end;
-  gap: 0.625rem;
-}
-
-.portal-proc__upload {
-  display: flex;
-  align-items: center;
-  gap: 0.75rem;
-}
-
-.portal-proc__upload-input {
-  display: none;
-}
-
-.portal-proc__upload-name {
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-}
-
-@media (max-width: 48rem) {
-  .portal-proc__journey-head {
-    flex-direction: column;
-  }
-
-  .portal-proc__se {
-    text-align: left;
-  }
-
-  .portal-proc__steps {
-    overflow-x: auto;
-  }
-}
-
-/* ── Enterprise upsell CTA (Home / Usage on-ramp) ─────────────────────────── */
-.portal-proc__upsell {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  flex-wrap: wrap;
-}
-.portal-proc__upsell-badge {
-  display: inline-block;
-  font-size: 0.625rem;
-  font-weight: 700;
-  text-transform: uppercase;
-  letter-spacing: 0.06em;
-  color: var(--c-primary);
-  background: var(--c-primary-subtle);
-  padding: 0.15rem 0.5rem;
-  border-radius: 0.375rem;
-  margin-bottom: 0.4rem;
-}
-.portal-proc__upsell-copy {
-  margin: 0;
-  font-size: 0.8125rem;
-  line-height: 1.45;
-  color: var(--c-text-subtle);
-  max-width: 44rem;
-}
-.portal-proc__upsell-copy strong {
-  color: var(--c-text);
-}
-
-/* ── Quote builder ────────────────────────────────────────────────────────── */
-.portal-proc__builder-head {
-  display: flex;
-  align-items: baseline;
-  justify-content: space-between;
-  margin-bottom: 1rem;
-}
 .portal-proc__builder-title {
   margin: 0;
   font-size: 1rem;
   font-weight: 650;
   color: var(--c-text);
 }
-.portal-proc__builder-step {
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-}
-.portal-proc__builder-body {
-  display: flex;
-  flex-direction: column;
-  gap: 0.85rem;
-}
-.portal-proc__field {
-  display: flex;
-  flex-direction: column;
-  gap: 0.3rem;
-  font-size: 0.8125rem;
-  color: var(--c-text-subtle);
-}
-.portal-proc__field input,
-.portal-proc__field select {
-  padding: 0.45rem 0.6rem;
-  border: 1px solid var(--c-border);
-  border-radius: 0.5rem;
-  font-size: 0.875rem;
-  background: var(--c-input-bg);
-  color: var(--c-text);
-}
-.portal-proc__builder-addons {
-  display: flex;
-  flex-direction: column;
-  gap: 0.4rem;
-  font-size: 0.8125rem;
-  color: var(--c-text-muted);
-}
-.portal-proc__builder-addons label {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-}
-.portal-proc__builder-actions {
-  display: flex;
-  justify-content: flex-end;
-  gap: 0.6rem;
-  margin-top: 0.5rem;
-}
-.portal-proc__quote-head {
-  display: flex;
-  align-items: baseline;
-  justify-content: space-between;
-  border-bottom: 1px solid var(--c-border);
-  padding-bottom: 0.5rem;
-}
-.portal-proc__quote-number {
-  font-weight: 650;
-  color: var(--c-text);
-}
-.portal-proc__quote-valid {
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-}
-.portal-proc__quote-lines {
-  list-style: none;
-  margin: 0;
-  padding: 0;
-}
-.portal-proc__quote-lines li {
-  display: flex;
-  justify-content: space-between;
-  padding: 0.4rem 0;
-  font-size: 0.8125rem;
-  color: var(--c-text-muted);
-  border-bottom: 1px solid var(--c-border-subtle);
-}
-.portal-proc__quote-lines li[data-kind="DISCOUNT"] {
-  color: var(--c-success);
-}
-.portal-proc__quote-total {
-  display: flex;
-  justify-content: space-between;
-  align-items: baseline;
-  padding: 0.6rem 0 0.2rem;
-  font-size: 0.9375rem;
-}
-.portal-proc__quote-total strong {
-  font-size: 1.25rem;
-  color: var(--c-text);
-}
-.portal-proc__quote-tcv {
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-}
 
 /* ══ Quote builder — copied from the marketing prototype (tight density) ═════ */
 .portal-qb {
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: 14px;
-  box-shadow: inset 0 0 0 1px var(--c-border-subtle);
-  overflow: hidden;
-}
-.portal-qb__head {
   display: flex;
-  align-items: center;
-  justify-content: space-between;
-  padding: 18px 24px 14px;
-  border-bottom: 1px solid var(--c-border-subtle);
-  background: linear-gradient(
-    180deg,
-    color-mix(in srgb, var(--c-primary) 5.5%, transparent) 0%,
-    transparent 100%
-  );
-}
-.portal-qb__title {
-  margin: 0;
-  font-size: 16px;
-  font-weight: 700;
-  color: var(--c-text);
-}
-.portal-qb__stepchip {
-  font-size: 11px;
-  font-weight: 700;
-  color: var(--c-text-subtle);
-  background: var(--c-surface-sunken);
-  padding: 3px 10px;
-  border-radius: 999px;
-}
-.portal-qb__progress {
-  display: flex;
-  gap: 6px;
-  padding: 12px 24px 0;
-}
-.portal-qb__progress span {
-  flex: 1;
-  height: 6px;
-  border-radius: 999px;
-  background: var(--c-surface-sunken);
-  transition: background 0.3s;
-}
-.portal-qb__progress span[data-on] {
-  background: var(--c-primary);
+  flex-direction: column;
 }
+/* No padding or scroll of its own: FlowModal's panel supplies both, and nesting a second scroll
+   container inside a scrolling panel gave the builder two scrollbars. */
+/* This gap is the builder's only vertical rhythm: the blocks inside carry no bottom margins of their
+   own, so spacing cannot double up the way a margin plus a gap did. The top margin is the breathing
+   room under the stepped header, which deliberately has no bottom margin so its host sets this. */
 .portal-qb__body {
-  padding: 20px 24px;
-  max-height: 56vh;
-  overflow-y: auto;
+  display: flex;
+  flex-direction: column;
+  gap: 0.75rem;
+  margin-top: 1.05rem;
 }
 .portal-qb__intro {
   display: flex;
   align-items: center;
   gap: 12px;
-  margin-bottom: 18px;
 }
 .portal-qb__intro-icon {
   width: 38px;
@@ -667,9 +63,10 @@
   color: var(--c-text-subtle);
   margin-top: 1px;
 }
+/* No bottom margin: inside .portal-qb__body the gap spaces these, and inside .portal-qb__row a
+   margin only reserved dead space under the inputs. */
 .portal-qb__field {
   display: block;
-  margin-bottom: 18px;
 }
 .portal-qb__field-label {
   display: block;
@@ -691,6 +88,18 @@
   background: var(--c-input-bg);
   color: var(--c-text);
 }
+.portal-qb__req {
+  color: var(--c-danger);
+}
+.portal-qb__field[data-invalid] input,
+.portal-qb__field[data-invalid] select {
+  border-color: var(--c-danger);
+}
+.portal-qb__error {
+  margin: 10px 0 0;
+  font-size: 12px;
+  color: var(--c-danger);
+}
 .portal-qb__row {
   display: flex;
   gap: 14px;
@@ -701,7 +110,7 @@
   min-width: 190px;
 }
 .portal-qb__hint {
-  margin: 7px 0 0;
+  margin: 0;
   font-size: 11.5px;
   color: var(--c-text-subtle);
   line-height: 1.4;
@@ -736,11 +145,22 @@
   gap: 10px;
   flex-wrap: wrap;
 }
+/* Short-label options that should sit across one row rather than wrapping 2 + 1. Tighter padding
+   and label size so each caption fits on a single line at three-across. Deliberately no `nowrap`:
+   a longer translation should wrap rather than clip or push the card out of the row. */
+.portal-qb__opts--across .portal-qb__opt {
+  min-width: 0;
+  padding: 11px 12px;
+}
+.portal-qb__opts--across .portal-qb__opt-sub {
+  font-size: 11px;
+  line-height: 1.35;
+}
 .portal-qb__opt {
   text-align: left;
   flex: 1;
   min-width: 150px;
-  padding: 12px 14px;
+  padding: 9px 11px;
   border-radius: 9px;
   border: 1px solid var(--c-border);
   background: var(--c-surface);
@@ -834,7 +254,11 @@
   align-items: center;
   justify-content: space-between;
   gap: 12px;
-  padding: 14px 24px;
+  /* Bleeds to the panel's edges by reading the shell's own inset, so changing FlowModal's padding
+     can no longer leave this footer stopping short of them. */
+  margin: 0.85rem calc(-1 * var(--flowmodal-inset))
+    calc(-1 * var(--flowmodal-body-end));
+  padding: 0.8rem var(--flowmodal-inset) 0.9rem;
   border-top: 1px solid var(--c-border-subtle);
   flex-wrap: wrap;
 }
@@ -846,13 +270,13 @@
   display: flex;
   gap: 10px;
 }
-/* Step 4 — the itemised quote paper */
+/* Step 4 — the itemised quote paper, on a sunken tray that runs to the panel's edges. No scroll of
+   its own: the dialog body already scrolls, and nesting a second scroller gave the builder two
+   scrollbars. The bleed reads the shell's inset rather than hard-coding a copy of it. */
 .portal-qb__papertray {
   background: var(--c-surface-sunken);
-  padding: 18px;
-  max-height: 56vh;
-  overflow-y: auto;
-  margin: -20px -24px;
+  padding: 14px var(--flowmodal-inset);
+  margin: 0 calc(-1 * var(--flowmodal-inset));
 }
 .portal-qb__paper {
   background: var(--c-surface);
@@ -880,6 +304,11 @@
 .portal-qb__paper-meta {
   text-align: right;
 }
+/* Reads as a link on the document rather than a button in a toolbar: right-aligned under the quote's
+   own metadata, with the row's padding trimmed so it sits tight to the date above it. */
+.portal-qb__paper-download {
+  margin: 0.2rem -0.5rem -0.25rem 0;
+}
 .portal-qb__quote-number {
   font-size: 12.5px;
   font-weight: 700;
@@ -955,27 +384,24 @@
   margin-top: 3px;
 }
 
-/* ── Enterprise upsell text wrapper (Home on-ramp) ────────────────────────── */
-.portal-proc__upsell-text {
-  flex: 1 1 20rem;
-}
-
 /* ── Deal-status hero (Home, active deal) ─────────────────────────────────── */
 .portal-hero {
   border: 1px solid var(--c-border);
   border-radius: 12px;
   padding: 1.1rem 1.25rem;
-  background:
-    radial-gradient(
-      120% 140% at 100% 0%,
-      color-mix(in srgb, var(--c-hue-violet) 8%, transparent),
-      transparent 55%
-    ),
-    var(--c-surface);
+  background: var(--c-surface);
   display: flex;
   flex-direction: column;
   gap: 1rem;
 }
+
+/* Attached under the editor rail the two read as one card, so the hero drops its standalone frame
+   and lets the footer's top border be the only seam. It keeps the frame on the procurement view,
+   where it stands alone. */
+.portal-editor-hero__footer .portal-hero {
+  border: none;
+  border-radius: 0;
+}
 .portal-hero__top {
   display: flex;
   align-items: flex-start;
@@ -983,25 +409,56 @@
   gap: 1rem;
   flex-wrap: wrap;
 }
+.portal-hero__ident {
+  flex: 1;
+  min-width: 0;
+}
 .portal-hero__eyebrow {
   display: block;
   font-size: 0.6875rem;
   font-weight: 700;
   text-transform: uppercase;
   letter-spacing: 0.06em;
-  color: var(--c-primary);
+  color: var(--c-text-subtle);
+  margin-bottom: 0.55rem;
 }
-.portal-hero__company {
-  display: block;
-  font-size: 1.0625rem;
-  font-weight: 650;
+/* The journey band: one segment per stage, filled through the current one. A progress indicator,
+   so it lives inside the block whose progress it reports and deliberately does not pulse. */
+.portal-hero__bar {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-bottom: 0.625rem;
+}
+.portal-hero__bar span {
+  flex: 1;
+  height: 6px;
+  border-radius: 999px;
+  background: var(--c-hover);
+  transition: background 0.3s ease;
+}
+.portal-hero__bar span[data-on] {
+  background: var(--c-primary);
+}
+/* The hero's one-line status: bold stage · what it asks, then Next: … */
+.portal-hero__sentence {
+  margin: 0;
+  font-size: 0.84375rem;
+  line-height: 1.5;
+  color: var(--c-text-muted);
+}
+.portal-hero__sentence strong {
+  font-weight: 700;
   color: var(--c-text);
-  margin-top: 0.2rem;
+}
+.portal-hero__sentence-next {
+  color: var(--c-text-subtle);
 }
 .portal-hero__chips {
   display: flex;
   gap: 0.4rem;
   flex-wrap: wrap;
+  margin-top: 0.5rem;
 }
 .portal-hero__chip {
   font-size: 0.6875rem;
@@ -1011,88 +468,74 @@
   border-radius: 999px;
   padding: 0.2rem 0.6rem;
 }
-.portal-hero__stepper {
-  overflow-x: auto;
-}
-.portal-hero__next {
+/* One action row: the stage's primary CTA leads, quiet icon actions sit beside it. No dividers. */
+.portal-hero__cta {
   display: flex;
   align-items: center;
-  justify-content: space-between;
   gap: 0.75rem;
   flex-wrap: wrap;
-  padding-top: 0.85rem;
-  border-top: 1px solid var(--c-border-subtle);
 }
-.portal-hero__next-label {
+.portal-hero__icons {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+.portal-hero__iconbtn {
+  width: 34px;
+  height: 34px;
   display: inline-flex;
   align-items: center;
-  gap: 0.45rem;
-  font-size: 0.8125rem;
-  font-weight: 600;
-  color: var(--c-text-muted);
-}
-.portal-hero__next-dot {
-  width: 0.5rem;
-  height: 0.5rem;
-  border-radius: 999px;
-  background: var(--c-primary);
-  box-shadow: 0 0 0 3px var(--c-primary-subtle);
-}
-
-/* ── Full-screen takeover modal (procurement flow) ────────────────────────── */
-.portal-procmodal {
-  position: fixed;
-  inset: 0;
-  z-index: 1000;
-  display: flex;
-  align-items: flex-start;
   justify-content: center;
-  padding: clamp(0.5rem, 4vh, 3rem) 1rem;
-  overflow-y: auto;
-  background: var(--c-overlay);
-  backdrop-filter: blur(6px) saturate(160%);
-  -webkit-backdrop-filter: blur(6px) saturate(160%);
-  animation: portal-procmodal-fade 0.15s ease-out;
-}
-@keyframes portal-procmodal-fade {
-  from {
-    opacity: 0;
-  }
-  to {
-    opacity: 1;
-  }
-}
-.portal-procmodal__panel {
-  position: relative;
-  width: 100%;
-  max-width: 62rem;
-  background: var(--c-surface);
+  border-radius: 9px;
   border: 1px solid var(--c-border);
-  border-radius: 14px;
-  box-shadow: 0 24px 64px rgba(0, 0, 0, 0.28);
-  padding: 1.5rem 1.5rem 1.75rem;
-}
-.portal-procmodal__close {
-  position: absolute;
-  top: 0.85rem;
-  right: 0.85rem;
-  border: none;
-  background: var(--c-border-subtle);
-  color: var(--c-text-subtle);
-  width: 1.9rem;
-  height: 1.9rem;
-  border-radius: 8px;
-  font-size: 0.85rem;
+  background: var(--c-surface);
+  color: var(--c-text-muted);
   cursor: pointer;
+  transition:
+    background 0.15s ease,
+    border-color 0.15s ease,
+    color 0.15s ease;
 }
-.portal-procmodal__close:hover {
-  background: var(--c-border);
+.portal-hero__iconbtn:hover {
+  background: var(--c-hover);
+  border-color: var(--c-border-strong);
   color: var(--c-text);
 }
-.portal-procmodal__header {
-  margin-bottom: 1.25rem;
-  padding-right: 2.5rem;
+/* Terminal state: the deal is done, so the row reports rather than asks. */
+.portal-hero__live {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
 }
+.portal-hero__live-tile {
+  width: 40px;
+  height: 40px;
+  flex-shrink: 0;
+  border-radius: 11px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  /* Holds a CheckIcon, which takes its stroke from `color` and its size from its own prop. */
+  color: var(--c-success);
+  background: var(--c-success-subtle);
+}
+.portal-hero__live-text {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+}
+.portal-hero__live-title {
+  font-size: 0.90625rem;
+  font-weight: 700;
+  color: var(--c-text);
+}
+.portal-hero__live-sub {
+  font-size: 0.78125rem;
+  color: var(--c-text-subtle);
+  margin-top: 1px;
+}
+
+/* ── Procurement takeover: heading type only, the shell is the shared Modal ── */
 .portal-procmodal__title {
   margin: 0;
   font-size: 1.35rem;
@@ -1104,15 +547,6 @@
   font-size: 0.875rem;
   color: var(--c-text-subtle);
 }
-.portal-procmodal__body {
-  display: flex;
-  flex-direction: column;
-  gap: 1.25rem;
-}
-
-.portal-proc__modal-stepper {
-  overflow-x: auto;
-}
 .portal-proc__payment-actions {
   display: flex;
   gap: 0.6rem;
@@ -1124,7 +558,7 @@
   padding: 1rem;
   border: 1px solid var(--c-border);
   border-radius: 0.6rem;
-  background: var(--color-surface-2, rgba(0, 0, 0, 0.02));
+  background: var(--c-surface-sunken);
 }
 .portal-proc__license-label {
   display: block;
@@ -1139,7 +573,7 @@
   margin-top: 0.4rem;
   padding: 0.55rem 0.7rem;
   border-radius: 0.4rem;
-  background: var(--color-surface-3, rgba(0, 0, 0, 0.05));
+  background: var(--c-surface-raised);
   font-family: var(--font-mono, monospace);
   font-size: 0.85rem;
   word-break: break-all;
@@ -1150,45 +584,9 @@
   font-size: 0.75rem;
   color: var(--c-text-subtle, var(--c-text-muted));
 }
-.portal-proc__milestone-for {
-  margin: 0.15rem 0 0;
-  font-size: 0.8125rem;
-  font-weight: 600;
-  color: var(--c-text-muted);
-}
-.portal-proc__milestone-lines {
-  margin: 0.85rem 0 0.5rem;
-}
-.portal-proc__milestone-totals {
-  display: flex;
-  align-items: baseline;
-  gap: 1rem;
-  flex-wrap: wrap;
-  margin: 0.75rem 0 0.25rem;
-}
-.portal-proc__milestone-annual {
-  font-size: 1.75rem;
-  font-weight: 700;
-  color: var(--c-text);
-}
-.portal-proc__milestone-annual small {
-  font-size: 0.8125rem;
-  font-weight: 500;
-  color: var(--c-text-subtle);
-}
-.portal-proc__milestone-tcv {
-  font-size: 0.8125rem;
-  color: var(--c-text-subtle);
-}
 
 /* Hero next-step action row (primary CTA + optional extend-trial). */
-.portal-hero__next-actions {
-  display: flex;
-  gap: 0.5rem;
-  flex-wrap: wrap;
-}
-
-/* Hero quick-action chips (clickable pills next to the company name). */
+/* Hero quick-action chips (the trial countdown pill under the stage sentence). */
 .portal-hero__chip--action {
   border: 1px solid var(--c-border);
   cursor: pointer;
@@ -1203,101 +601,8 @@
   transform: translateY(-1px);
 }
 
-/* Hero rollout checklist (trial): the "do this now" setup steps. */
-.portal-hero__checklist {
-  list-style: none;
-  margin: 0;
-  padding: 0;
-  border-top: 1px solid var(--c-border-subtle);
-}
-.portal-hero__checklist li {
-  border-bottom: 1px solid var(--c-border-subtle);
-}
-.portal-hero__checklist button {
-  display: flex;
-  align-items: center;
-  gap: 0.85rem;
-  width: 100%;
-  padding: 0.7rem 0.25rem;
-  background: none;
-  border: none;
-  cursor: pointer;
-  text-align: left;
-}
-.portal-hero__checklist button:hover {
-  background: var(--c-hover, var(--c-border-subtle));
-}
-.portal-hero__check-dot {
-  width: 0.5rem;
-  height: 0.5rem;
-  border-radius: 999px;
-  background: var(--c-border);
-  flex-shrink: 0;
-}
-.portal-hero__check-text {
-  flex: 1;
-  min-width: 0;
-}
-.portal-hero__check-title {
-  display: block;
-  font-size: 0.85rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-.portal-hero__check-sub {
-  display: block;
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-  margin-top: 0.05rem;
-}
-.portal-hero__check-pill {
-  font-size: 0.6875rem;
-  font-weight: 600;
-  color: var(--c-text-subtle);
-  background: var(--c-border-subtle);
-  border-radius: 999px;
-  padding: 0.15rem 0.55rem;
-  flex-shrink: 0;
-}
-
 /* ── Side dialogs (Key documents / Schedule a call / Trial) ───────────────── */
-.portal-sidemodal {
-  position: fixed;
-  inset: 0;
-  z-index: 1100;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  padding: 1rem;
-  overflow-y: auto;
-  background: var(--c-overlay);
-  backdrop-filter: blur(4px);
-  -webkit-backdrop-filter: blur(4px);
-  animation: portal-procmodal-fade 0.15s ease-out;
-  /* Portaled to <body>, outside .portal-scope, so set the portal UI font explicitly. */
-  font-family: var(--font-sans);
-}
-.portal-sidemodal__panel {
-  position: relative;
-  width: 100%;
-  max-width: 30rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: 14px;
-  box-shadow: 0 24px 64px rgba(0, 0, 0, 0.28);
-  padding: 1.35rem 1.4rem 1.4rem;
-  max-height: 86vh;
-  overflow-y: auto;
-}
-/* Wide enough for Calendly's two-pane layout (its single-column layout below ~680px inner width is
-   tall and scrolls); paired with the embed's taller fixed height so the time view needs no scroll. */
-.portal-sidemodal__panel--wide {
-  max-width: 52rem;
-}
-.portal-sidemodal__header {
-  margin-bottom: 1rem;
-  padding-right: 2rem;
-}
+/* Chrome and width come from the shared Modal via FlowModal; only type and content live here. */
 .portal-sidemodal__title {
   margin: 0;
   font-size: 1.05rem;
@@ -1316,15 +621,6 @@
   color: var(--c-text-subtle);
   line-height: 1.55;
 }
-.portal-sidemodal__footer {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 0.75rem;
-  margin-top: 1.1rem;
-  padding-top: 0.9rem;
-  border-top: 1px solid var(--c-border-subtle);
-}
 .portal-sidemodal__ghost {
   border: none;
   background: none;
@@ -1336,63 +632,6 @@
   color: var(--c-text-muted);
 }
 
-/* Key documents ledger. */
-.portal-docs__group + .portal-docs__group {
-  margin-top: 1rem;
-}
-.portal-docs__group-title {
-  font-size: 0.6875rem;
-  font-weight: 700;
-  text-transform: uppercase;
-  letter-spacing: 0.05em;
-  color: var(--c-text-subtle);
-  margin-bottom: 0.4rem;
-}
-.portal-docs__list {
-  list-style: none;
-  margin: 0;
-  padding: 0;
-}
-.portal-docs__row {
-  display: flex;
-  align-items: center;
-  gap: 0.75rem;
-  padding: 0.55rem 0;
-  border-top: 1px solid var(--c-border-subtle);
-}
-.portal-docs__row-text {
-  flex: 1;
-  min-width: 0;
-}
-.portal-docs__row-name {
-  display: block;
-  font-size: 0.8125rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-.portal-docs__row-sub {
-  display: block;
-  font-size: 0.72rem;
-  color: var(--c-text-subtle);
-  margin-top: 0.05rem;
-}
-.portal-docs__row-action {
-  font-size: 0.6875rem;
-  font-weight: 600;
-  border-radius: 999px;
-  padding: 0.2rem 0.6rem;
-  flex-shrink: 0;
-  color: var(--c-text-subtle);
-  background: var(--c-border-subtle);
-}
-.portal-docs__row-action[data-status="action"] {
-  color: var(--c-primary);
-  background: var(--c-primary-subtle);
-}
-.portal-docs__row-action[data-status="request"] {
-  color: var(--c-text-subtle);
-}
-
 /* Calendly scheduler embed (Schedule a call). The widget is always light (Calendly renders inputs on
    white), so give it a white surface — it reads as a clean card even inside the dark-mode modal. */
 .portal-calendly {
@@ -1418,17 +657,173 @@
 }
 
 /* ── Agreement (security) step ────────────────────────────────────────────── */
-.portal-agreement__doc {
-  margin: 1rem 0;
-  max-height: 22rem;
-  overflow-y: auto;
-  padding: 1rem 1.1rem;
-  border: 1px solid var(--c-border);
-  border-radius: 10px;
-  background: var(--color-bg-subtle, var(--c-bg));
-  font-size: 0.8125rem;
-  line-height: 1.55;
+/* The terminal steps (payment, live): a stacked eyebrow/title/description with the flow's own footer
+   bar beneath. No card of their own — the dialog is already the surface. */
+.portal-procstage {
+  display: flex;
+  flex-direction: column;
+  gap: 0.4rem;
+}
+/* Nothing to report on the left of these, so the actions take the whole bar. */
+.portal-procstage__foot {
+  justify-content: flex-end;
+}
+
+/* The two document actions read as a pair, close together and set apart from the close beside them. */
+.portal-agreement__actions {
+  display: flex;
+  align-items: center;
+  gap: 0.1rem;
+}
+
+/* The signature block: the three fields that name the bound party and its signatory, on the same line
+   as the act of signing, with the consent directly beneath them and no rule between. Fields shrink
+   below the row's usual floor so all three plus the button hold one line at the takeover's width;
+   they wrap rather than clip if a translation runs long. */
+/* No rule above it: the tray's grey ends where the signature block begins, which is boundary enough,
+   and a border there cut the document off from the page it sits on. */
+.portal-agreement__signbar {
+  flex-direction: column;
+  align-items: stretch;
+  gap: 0.6rem;
+  border-top: none;
+}
+/* Bottom-aligned: a field is a label above an input, so aligning to the block's centre or its top
+   leaves the button off the input row. Sharing the input's bottom edge puts its centre on theirs, both
+   being 37px. The gate note is deliberately NOT in this row — hanging it off the button would make the
+   column taller than the fields and drag the button back up off the row. */
+.portal-agreement__signrow {
+  display: flex;
+  align-items: flex-end;
+  gap: 0.9rem;
+}
+/* Consent on the left, the gate's state on the right so it lands under the button it explains. */
+.portal-agreement__signfoot {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 1rem;
+}
+.portal-agreement__gate {
+  flex: 0 0 auto;
+  font-size: 0.6875rem;
   color: var(--c-text-subtle);
+  white-space: nowrap;
+}
+.portal-agreement__signrow .portal-agreement__signfields {
+  flex: 1;
+  gap: 0.6rem;
+  min-width: 0;
+}
+.portal-agreement__signrow .portal-qb__field {
+  min-width: 8.5rem;
+}
+/* Unboxed: a line of small print under the fields, not a panel competing with the document. */
+.portal-agreement__accept {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.5rem;
+  font-size: 0.75rem;
+  line-height: 1.45;
+  color: var(--c-text-subtle);
+  cursor: pointer;
+}
+.portal-agreement__accept input {
+  margin: 0.1rem 0 0;
+  flex: 0 0 auto;
+}
+
+/* The agreement is presented as paper, not as app copy in a box: a sunken tray running to the panel's
+   edges, with the terms on white stock in a serif face. Signing is the most consequential thing a
+   buyer does here, so the document should read like the document it is. */
+/* The document takes every pixel the dialog can spare: it is what the buyer is here to read, and a
+   fixed height left it a small white box floating in a tall panel. The chain has to carry the fill —
+   each link needs min-height:0 or a flex child refuses to shrink below its content. */
+.portal-agreement {
+  display: flex;
+  flex-direction: column;
+  gap: 0.75rem;
+  flex: 1 1 auto;
+  min-height: 0;
+}
+/* The tray is the scroll container, so the paper inside it behaves like a page being scrolled past a
+   window: flush to the footer while there is more to read, and revealing the tray's bottom padding
+   only at the end. Scrolling the paper instead left a permanent grey band under it, which read as a
+   box with contents rather than a document. */
+/* `scroll`, not `auto`, and an explicitly styled bar: signing is gated on reaching the end of the
+   document, so the buyer has to be able to see there is more of it and how far through they are.
+   Overlay scrollbars fade out when idle, which hid both. Styling the bar also opts Chromium out of
+   overlay behaviour, so it stays put. Matches the treatment on the files page. */
+.portal-agreement__tray {
+  background: var(--c-surface-sunken);
+  padding: 14px var(--flowmodal-inset);
+  margin: 0 calc(-1 * var(--flowmodal-inset));
+  flex: 1 1 auto;
+  min-height: 0;
+  overflow-y: scroll;
+  scrollbar-width: thin;
+  scrollbar-color: var(--c-text-subtle) var(--c-border-subtle);
+}
+.portal-agreement__tray::-webkit-scrollbar {
+  width: 0.625rem;
+}
+.portal-agreement__tray::-webkit-scrollbar-track {
+  background: var(--c-border-subtle);
+  border-radius: 999px;
+}
+.portal-agreement__tray::-webkit-scrollbar-thumb {
+  background: var(--c-text-subtle);
+  border-radius: 999px;
+  border: 2px solid transparent;
+  background-clip: content-box;
+}
+.portal-agreement__tray::-webkit-scrollbar-thumb:hover {
+  background: var(--c-text-muted);
+  background-clip: content-box;
+}
+.portal-agreement__doc {
+  /* A floor so a short document still reads as a page; no ceiling, so a long one runs on and the tray
+     does the scrolling. */
+  min-height: 16rem;
+  padding: 1.35rem 1.6rem;
+  border: 1px solid var(--c-border-subtle);
+  border-radius: 12px;
+  background: var(--c-surface);
+  box-shadow: var(--shadow-sm);
+  /* No serif token exists in the theme — the serif is specific to rendering legal terms as paper. */
+  font-family: Georgia, "Times New Roman", "Liberation Serif", serif;
+  font-size: 0.84rem;
+  line-height: 1.62;
+  color: var(--c-text-muted);
+}
+/* Masthead above the document's own heading: confidentiality on the left, the quote reference and
+   signed version on the right, over the rule that opens the terms. */
+.portal-agreement__letterhead {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: 1rem;
+  flex-wrap: wrap;
+  padding-bottom: 0.6rem;
+  margin-bottom: 1rem;
+  border-bottom: 2px solid var(--c-text);
+  font-family: var(--font-sans);
+  font-size: 0.6875rem;
+  letter-spacing: 0.04em;
+  color: var(--c-text-subtle);
+}
+.portal-agreement__confidential {
+  font-weight: 700;
+  text-transform: uppercase;
+}
+/* The document's own title, centred like an executed agreement's. */
+.portal-agreement__md > h1:first-child,
+.portal-agreement__md > h2:first-child {
+  text-align: center;
+  font-size: 1.05rem;
+  letter-spacing: 0.02em;
+  text-transform: uppercase;
+  margin-bottom: 1rem;
 }
 .portal-agreement__doc h4 {
   margin: 1rem 0 0.35rem;
@@ -1445,29 +840,129 @@
 .portal-agreement__doc strong {
   color: var(--c-text);
 }
-.portal-agreement__accept {
-  margin-top: 0.25rem;
+.portal-agreement__md h1 {
+  font-size: 0.95rem;
+  font-weight: 700;
+  color: var(--c-text);
+  margin: 1.1rem 0 0.5rem;
 }
-.portal-agreement__lines {
-  margin: 0.4rem 0 0.6rem;
+.portal-agreement__md h2 {
+  font-size: 0.875rem;
+  font-weight: 650;
+  color: var(--c-text);
+  margin: 1rem 0 0.4rem;
 }
-.portal-proc__reset {
-  display: flex;
-  justify-content: center;
-  padding-top: 0.5rem;
+.portal-agreement__md h3 {
+  font-size: 0.8125rem;
+  font-weight: 650;
+  color: var(--c-text);
+  margin: 0.9rem 0 0.3rem;
 }
-.portal-proc__reset button {
+.portal-agreement__md h1:first-child,
+.portal-agreement__md h2:first-child {
+  margin-top: 0;
+}
+.portal-agreement__md p {
+  margin: 0 0 0.55rem;
+}
+.portal-agreement__md strong {
+  color: var(--c-text);
+}
+.portal-agreement__md ul {
+  margin: 0 0 0.6rem;
+  padding-left: 1.1rem;
+}
+.portal-agreement__md li {
+  margin-bottom: 0.2rem;
+}
+.portal-agreement__md table {
+  border-collapse: collapse;
+  width: 100%;
+  margin: 0.4rem 0 0.8rem;
+  font-size: 0.78rem;
+}
+.portal-agreement__md th,
+.portal-agreement__md td {
+  border: 1px solid var(--c-border);
+  padding: 0.35rem 0.5rem;
+  text-align: left;
+  vertical-align: top;
+}
+.portal-agreement__md th {
+  background: var(--c-bg);
+  font-weight: 650;
+  color: var(--c-text);
+}
+.portal-agreement__signfields {
+  margin-top: 0.75rem;
+}
+.portal-proc__error {
+  color: var(--c-danger);
+  font-size: 0.8125rem;
+  margin: 0.5rem 0 0;
+}
+.portal-legal__link {
   border: none;
   background: none;
+  padding: 0;
+  font: inherit;
+  color: var(--c-text);
+  text-decoration: underline;
+  cursor: pointer;
+}
+.portal-legal__link:hover {
+  color: var(--c-text);
+}
+.portal-docmodal {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+  display: flex;
+  flex-direction: column;
+}
+.portal-docmodal__row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+  padding: 0.85rem 0;
+  border-bottom: 1px solid var(--c-border);
+}
+.portal-docmodal__row:last-child {
+  border-bottom: none;
+}
+.portal-docmodal__text {
+  display: flex;
+  flex-direction: column;
+  gap: 0.15rem;
+  min-width: 0;
+}
+.portal-docmodal__name {
+  font-weight: 650;
+  font-size: 0.875rem;
+  color: var(--c-text);
+}
+.portal-docmodal__sub {
+  font-size: 0.75rem;
+  color: var(--c-text-muted);
+}
+.portal-docmodal__later {
+  flex-shrink: 0;
   font-size: 0.75rem;
   color: var(--c-text-subtle);
-  cursor: pointer;
-  text-decoration: underline;
+  white-space: nowrap;
 }
-.portal-proc__reset button:hover:not(:disabled) {
+
+/* Title row: the step badge rides beside the heading, not on a line of its own. */
+.portal-sidemodal__title-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.75rem;
+}
+
+/* Quiet hint sat opposite the primary action in a dialog footer. */
+.portal-sidemodal__foot-hint {
+  font-size: 0.75rem;
   color: var(--c-text-subtle);
 }
-.portal-proc__reset button:disabled {
-  opacity: 0.5;
-  cursor: default;
-}
diff --git a/frontend/editor/src/portal/views/Procurement.tsx b/frontend/editor/src/portal/views/Procurement.tsx
deleted file mode 100644
index 1f6e2329a9..0000000000
--- a/frontend/editor/src/portal/views/Procurement.tsx
+++ /dev/null
@@ -1,15 +0,0 @@
-import { ProcurementHome } from "@portal/components/procurement/ProcurementHome";
-import "@portal/views/Procurement.css";
-
-/**
- * /procurement — procurement is no longer a nav tab; it lives on Home as the deal-status hero.
- * This route is kept for deep links (and the Usage "Build your quote" CTA): it renders the same
- * surface, opening the takeover modal once a deal is underway.
- */
-export function Procurement() {
-  return (
-    <div className="portal-proc">
-      <ProcurementHome autoOpen />
-    </div>
-  );
-}
diff --git a/frontend/eslint.config.mjs b/frontend/eslint.config.mjs
index d2853d8f1e..256bdf640a 100644
--- a/frontend/eslint.config.mjs
+++ b/frontend/eslint.config.mjs
@@ -258,12 +258,7 @@ export default defineConfig(
   // can't represent. Exempt ONLY the raw-<button> rule; the Mantine import bans
   // stay. Migrate these alongside the procurement buttons.
   {
-    files: [
-      "editor/src/portal/components/EditorStatusCard.tsx",
-      "editor/src/portal/components/SetupChecklist.tsx",
-      "editor/src/portal/components/WelcomeBanner.tsx",
-      "editor/src/portal/components/DownloadEditorModal.tsx",
-    ],
+    files: ["editor/src/portal/components/DownloadEditorModal.tsx"],
     rules: {
       "no-restricted-syntax": ["error", ...mantineComponentImportRestrictions],
     },

From 789be2d3519d205073711882ca89d1fa2ce4431b Mon Sep 17 00:00:00 2001
From: EthanHealy01 <80844253+EthanHealy01@users.noreply.github.com>
Date: Wed, 5 Aug 2026 17:31:24 +0100
Subject: [PATCH 071/122] Non-blocking classification, pipelined batch
 enforcement, and selector-based file-state re-renders (#7085)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Goal

Three related improvements to how policies and file state behave in the
editor: classification no longer blocks the user, policy enforcement
pipelines across a batch upload instead of waiting for the whole drop,
and file-state changes no longer re-render the entire UI.

## 1. Classification never blocks (and never versions)

Classification is metadata-only — it reads a document and records
labels; it never rewrites the file. Previously it ran like an
enforcement policy: it blocked viewing/editing behind the "Enforcing
policy…" overlay, forked a new versioned child (an `automate` entry in
version history), and could run before other policies — letting the user
in, then a later enforcement policy would fork a version and drop their
edits.

Now classification:
- **Never blocks.** A classification run never marks a file `enforcing`
(badge map + viewer overlay both skip it), so the file stays fully
viewable/editable while it runs.
- **No version bump, no history entry.** Its result is stamped onto the
file's existing stub in place (workspace + IndexedDB) — the labels just
appear as tags. It targets the document's *current leaf*, so an edit
made during the async run still gets the tags; a run that completes with
no outputs settles cleanly instead of pinning in-flight.
- **Always runs last** in an enforcement chain (regardless of configured
order, pinned at persist-time too), so every enforcement policy finishes
forking versions before the user is let in.

## 2. Pipeline policy enforcement across a batch upload

Dropping ~50 files enforced policies only *after the whole drop finished
scanning* — every file got the "Enforcing policy" overlay together, then
processing began. Root cause: the chunked `ADD_FILES` dispatches in
`addFiles` were never separated by an event-loop yield, so React batched
them into a single commit and the enforcement effect fired once over the
full list.

**Fix** (`core/contexts/file/fileActions.ts`): after each chunk, `await`
that chunk's IndexedDB writes, then yield a macrotask so React commits
the rows and runs the enforcement dispatch *before* the next chunk
scans. Files start enforcing as their rows land, overlapping with the
rest of the drop. Persistence is streamed per chunk (the policy auto-run
reads bytes from IndexedDB with no in-memory fallback).

**Second fix — bounded dispatch window**
(`proprietary/components/policies/usePolicyAutoRun.ts`): even with
streamed dispatch, the drop still *looked* serial — each dispatch POSTs
the file's bytes, and firing them all at once saturates the browser's
per-origin connection pool, so the status polls and output downloads of
already-running files queued behind the pending uploads; nothing visibly
progressed until the last upload drained. Dispatch is now gated behind a
small concurrency window (4), keeping connections free so early files
run, poll, and complete while later ones are still dispatching. The
first status poll also fires at 500ms (then the normal 2s cadence) so
fresh runs show real progress immediately. The batch test asserts the
window (dispatches overlap but never exceed 4).

## 3. Selector subscriptions for file state (no more whole-UI
re-renders)

`FileContext` published `{state, selectors}` through a plain React
context, so **every** consumer re-rendered on **every** state change —
one file's new version re-rendered the entire workspace.

**Phase 1 — infra** (`file/contexts.ts`, `file/fileHooks.ts`,
`FileContext.tsx`): the state context is replaced by a stable
subscription store (`FileStoreContext`); hooks are rebuilt on
`useSyncExternalStoreWithSelector` (the `use-sync-external-store` shim
react-redux uses — new direct dep, React 19 compatible). Each consumer
now re-renders only when its selected slice changes:
- `useStirlingFileStub(id)` → only that file's record
- `useAllFiles` → file-list changes only (immune to selection/UI churn)
- `useFileSelection`/`useSelectedFiles` → selection + the *selected*
files' records only
- `useFileUI` → its three UI scalars; `useFileContext` → files + pinned
slices
- `useFileState` keeps its whole-state contract for existing broad
consumers

A render-count test (`fileHooks.selector.test.tsx`) locks the bail-out
contract.

**Phase 2 — hot-path rows**: sidebar `FileItem` is memoized (with stable
empty-array props), so one file's change re-renders one row, not the
list. Active Files thumbnails were already memoized.

**Phase 3 — narrow the hottest consumers**: always-mounted whole-state
consumers migrated to slices — `Workbench`, `EmbedPdfViewer`, `Viewer`,
`NonPdfViewer`, `WorkbenchBar`, `ViewerContext`, `ViewerShareButton`,
`ZoomAPIBridge`, `ViewerAnnotationControls`, `ConvertSettings`,
`DismissAllErrorsButton`, `FileEditorThumbnail`,
`usePageEditorDropdownState`, `useSaveShortcut`, plus a new
non-subscribing `useFileSelectors()` for event-time reads
(`ReviewToolStep`, `useViewerReadAloud`, `useExitWarning`). Net effect:
selection/UI churn no longer re-renders the viewer/workbench, and a
version landing touches only components observing the files slice.

Broad readers (`FileSidebar`, `PageEditor`, `FileEditor`, `Redact`,
`FormFill`) deliberately stay on `useFileState` — they read most of the
state anyway.

**Hardening**: store notifications run in a layout effect (subscribers
re-render before paint — no stale frames), and outside production
`useFileSelectors()` wraps its selectors to `console.error` if one is
invoked during render (those reads don't subscribe, so render-time use
would silently go stale — not statically lintable, so it's guarded at
runtime; the full test suite passes under the guard).

## 4. Policy indicators: shared icons, non-blocking run chip, no pulse

- Badges and enforcement overlays now take their glyph from the shared
`policyCategoryIcon` map (the same source the processor's catalogue
uses) — label icon for classification, shield for security — instead of
a hardcoded shield everywhere.
- A non-blocking run (classification) shows a small accent-tinted pill
in the top-right of the Active Files card (category icon + loader) and
the normal spinning badge in the sidebar, via a new `background` badge
flag that nothing gates on. When the run finishes, the tagged files keep
a plain category badge.
- The post-run pulse/glow on sidebar badges is gone (with its `recent`
plumbing): spinner while running, static category icon when done.

## Verification

Full CI gate locally: `og:check`, `typecheck:all` (all variants),
`lint`, `format:check`, `build`, `test` (1366 — incl. the render-count
contract test, the classification-order/import unit tests, and the
61-file batch integration test driving the real dispatch → poll → import
→ chain effects), `storybook:build` — all green.

## Held for follow-up (not in this PR)

- **Reuse one PDFium engine across viewer file switches** (kills the
per-open "Loading PDF Engine" rebuild). Implemented on branch
`viewer/reuse-pdfium-engine`, but review found a confirmed leak
(orphaned PDFium handles when switching files mid-load); needs an
in-flight-load teardown before shipping.
---
 .../public/locales/en-US/translation.toml     |   1 +
 .../fileEditor/FileEditorThumbnail.module.css |  13 +
 .../fileEditor/FileEditorThumbnail.tsx        |  43 ++-
 .../src/core/components/layout/Workbench.tsx  |   5 +-
 .../hooks/usePageEditorDropdownState.ts       |  20 +-
 .../shared/DismissAllErrorsButton.tsx         |   8 +-
 .../core/components/shared/FileSidebar.tsx    |   7 +-
 .../components/shared/FileSidebarFileItem.tsx |   6 +-
 .../core/components/shared/PolicyBadges.css   |  19 --
 .../shared/PolicyBadges.stories.tsx           |  30 +-
 .../core/components/shared/PolicyBadges.tsx   |  77 +++--
 .../shared/PolicyEnforcingOverlay.tsx         |   2 +
 .../core/components/shared/WorkbenchBar.tsx   |   7 +-
 .../tools/convert/ConvertSettings.tsx         |   6 +-
 .../tools/shared/ReviewToolStep.tsx           |   4 +-
 .../core/components/viewer/EmbedPdfViewer.tsx |  21 +-
 .../core/components/viewer/NonPdfViewer.tsx   |   5 +-
 .../src/core/components/viewer/Viewer.tsx     |   5 +-
 .../viewer/ViewerAnnotationControls.tsx       |  20 +-
 .../components/viewer/ViewerShareButton.tsx   |   6 +-
 .../core/components/viewer/ZoomAPIBridge.tsx  |   6 +-
 .../components/viewer/useViewerReadAloud.ts   |   4 +-
 .../editor/src/core/contexts/FileContext.tsx  |  45 ++-
 .../src/core/contexts/ViewerContext.tsx       |  22 +-
 .../src/core/contexts/file/FileReducer.ts     |  80 +++++
 .../file/classificationToolRace.test.ts       | 167 ++++++++++
 .../editor/src/core/contexts/file/contexts.ts |  22 +-
 .../src/core/contexts/file/fileActions.ts     |  96 +++---
 .../contexts/file/fileHooks.selector.test.tsx | 223 +++++++++++++
 .../src/core/contexts/file/fileHooks.ts       | 310 ++++++++++++++----
 .../file/reducerIdentityGuard.test.ts         |  78 +++++
 .../core/contexts/file/useFileIndex.test.tsx  | 128 ++++++++
 frontend/editor/src/core/tools/Convert.tsx    |   5 +-
 .../src/desktop/hooks/useExitWarning.ts       |   4 +-
 .../src/desktop/hooks/useSaveShortcut.ts      |  13 +-
 .../classificationLabelTargets.test.ts        |  44 +++
 .../policies/dispatchSemaphore.test.ts        |  47 +++
 .../components/policies/dispatchSemaphore.ts  |  42 +++
 .../policies/usePolicyAutoRun.batch.test.tsx  |  81 +++--
 .../policies/usePolicyAutoRun.race.test.tsx   | 293 +++++++++++++++++
 .../policies/usePolicyAutoRun.retry.test.tsx  |  22 +-
 .../components/policies/usePolicyAutoRun.ts   | 189 ++++++++++-
 .../shared/PolicyEnforcingOverlay.tsx         |  11 +-
 .../viewer/PolicyEnforcementOverlay.tsx       |   1 +
 .../proprietary/components/viewer/Viewer.tsx  |   3 +
 .../proprietary/data/policyCategories.test.ts |  41 +++
 .../src/proprietary/data/policyCategories.ts  |  21 ++
 .../src/proprietary/hooks/usePolicies.ts      |   8 +-
 .../hooks/usePolicyFileBadges.test.ts         | 149 +++++++--
 .../proprietary/hooks/usePolicyFileBadges.ts  |  92 ++++--
 frontend/package-lock.json                    |   2 +
 frontend/package.json                         |   2 +
 52 files changed, 2194 insertions(+), 362 deletions(-)
 create mode 100644 frontend/editor/src/core/contexts/file/classificationToolRace.test.ts
 create mode 100644 frontend/editor/src/core/contexts/file/fileHooks.selector.test.tsx
 create mode 100644 frontend/editor/src/core/contexts/file/reducerIdentityGuard.test.ts
 create mode 100644 frontend/editor/src/core/contexts/file/useFileIndex.test.tsx
 create mode 100644 frontend/editor/src/proprietary/components/policies/classificationLabelTargets.test.ts
 create mode 100644 frontend/editor/src/proprietary/components/policies/dispatchSemaphore.test.ts
 create mode 100644 frontend/editor/src/proprietary/components/policies/dispatchSemaphore.ts
 create mode 100644 frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx
 create mode 100644 frontend/editor/src/proprietary/data/policyCategories.test.ts
 create mode 100644 frontend/editor/src/proprietary/data/policyCategories.ts

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 33cf0ee8e1..feb42149f7 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -6203,6 +6203,7 @@ ssn = "Social Security numbers"
 [policy]
 badgeEnforcing = "{{name}} enforcing..."
 badgeRan = "{{name}} policy ran on this file"
+badgeRunning = "{{name}} running..."
 blockingAction = "{{action}} blocked while enforcing policy, please wait..."
 dismiss = "Dismiss overlay"
 enforcingTitle = "Enforcing policy..."
diff --git a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.module.css b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.module.css
index a148cc9fa8..1201402bf7 100644
--- a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.module.css
+++ b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.module.css
@@ -279,3 +279,16 @@
   opacity: 0.5;
   pointer-events: auto;
 }
+
+/* Non-blocking policy run (e.g. classification tagging): small top-right pill
+ * with the policy's icon + a loader. Colour is set inline to the policy accent. */
+.backgroundPolicyPill {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 4px 7px;
+  border-radius: 8px;
+  background: color-mix(in srgb, currentColor 14%, var(--c-surface));
+  box-shadow: var(--shadow-md);
+  pointer-events: auto;
+}
diff --git a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
index ccf07e9dea..1a55c53a90 100644
--- a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
+++ b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
@@ -22,6 +22,7 @@ import {
   dropTargetForElements,
 } from "@atlaskit/pragmatic-drag-and-drop/element/adapter";
 import { StirlingFileStub } from "@app/types/fileContext";
+import { policyCategoryIcon } from "@app/components/policies/policyCategoryIcon";
 import {
   PolicyBadges,
   type FileItemPolicyRef,
@@ -31,7 +32,10 @@ import { zipFileService } from "@app/services/zipFileService";
 
 import styles from "@app/components/fileEditor/FileEditorThumbnail.module.css";
 import { useFileContext } from "@app/contexts/FileContext";
-import { useFileState } from "@app/contexts/file/fileHooks";
+import {
+  useFileSelector,
+  useFileSelectors,
+} from "@app/contexts/file/fileHooks";
 import { FileId } from "@app/types/file";
 import ToolChain from "@app/components/shared/ToolChain";
 import HoverActionMenu, {
@@ -90,7 +94,7 @@ const FileEditorThumbnail = ({
     actions: fileActions,
     openEncryptedUnlockPrompt,
   } = useFileContext();
-  const { state, selectors } = useFileState();
+  const selectors = useFileSelectors();
   const isMobile = useIsMobile();
 
   const actualFile = useMemo(
@@ -101,7 +105,7 @@ const FileEditorThumbnail = ({
 
   const isZipFile = zipFileService.isZipFileStub(file);
 
-  const hasError = state.ui.errorFileIds.includes(file.id);
+  const hasError = useFileSelector((s) => s.ui.errorFileIds.includes(file.id));
   const pageCount = file.processedFile?.totalPages || 0;
   const {
     isEncrypted,
@@ -296,9 +300,12 @@ const FileEditorThumbnail = ({
   const [showVersionHistory, setShowVersionHistory] = useState(false);
 
   const policyEnforcing = policies.some((p) => p.enforcing);
-  // Accent of the policy currently enforcing, so the overlay's icon/spinner match
-  // that policy's badge instead of a fixed blue.
-  const enforcingAccent = policies.find((p) => p.enforcing)?.accentColor;
+  // The policy currently enforcing, so the overlay's icon/spinner match that
+  // policy's badge instead of a fixed blue.
+  const enforcingPolicy = policies.find((p) => p.enforcing);
+  // A non-blocking run (e.g. classification tagging) — indicated by a small
+  // top-right chip instead of the blocking overlay.
+  const backgroundPolicy = policies.find((p) => p.background && !p.enforcing);
 
   const hoverActions = useMemo<HoverAction[]>(() => {
     const uploadLabel = isUploaded
@@ -543,7 +550,8 @@ const FileEditorThumbnail = ({
               <PolicyEnforcingOverlay
                 enforcing={policyEnforcing}
                 zIndex={2}
-                accentVar={enforcingAccent}
+                accentVar={enforcingPolicy?.accentColor}
+                categoryId={enforcingPolicy?.id}
               />
 
               {/* Thumbnail image or loading state */}
@@ -568,6 +576,27 @@ const FileEditorThumbnail = ({
                 }}
               />
 
+              {backgroundPolicy && (
+                <Tooltip
+                  label={t("policy.badgeRunning", "{{name}} running...", {
+                    name: backgroundPolicy.name,
+                  })}
+                  withArrow
+                >
+                  <span className={styles.thumbBadgesRight}>
+                    <span
+                      className={styles.backgroundPolicyPill}
+                      style={{ color: backgroundPolicy.accentColor }}
+                    >
+                      {policyCategoryIcon(backgroundPolicy.id, {
+                        fontSize: 14,
+                      })}
+                      <Loader size={10} color={backgroundPolicy.accentColor} />
+                    </span>
+                  </span>
+                </Tooltip>
+              )}
+
               {/* Badges — top-left: version, pin, ownership, encrypted */}
               <div className={styles.thumbBadges}>
                 <span className={styles.versionBadgeThumb}>
diff --git a/frontend/editor/src/core/components/layout/Workbench.tsx b/frontend/editor/src/core/components/layout/Workbench.tsx
index fc5dd77226..96eb6b8d6f 100644
--- a/frontend/editor/src/core/components/layout/Workbench.tsx
+++ b/frontend/editor/src/core/components/layout/Workbench.tsx
@@ -2,7 +2,7 @@ import { useEffect, useState, Suspense, lazy } from "react";
 import { Box, Loader, Center } from "@mantine/core";
 import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import { useFileHandler } from "@app/hooks/useFileHandler";
-import { useFileState } from "@app/contexts/FileContext";
+import { useAllFiles } from "@app/contexts/FileContext";
 import {
   useNavigationState,
   useNavigationActions,
@@ -41,11 +41,10 @@ export default function Workbench() {
   useCookieConsent({ analyticsEnabled: config?.enableAnalytics === true });
 
   // Use context-based hooks to eliminate all prop drilling
-  const { selectors } = useFileState();
+  const { files: activeFiles } = useAllFiles();
   const { workbench: currentView } = useNavigationState();
   const { actions: navActions } = useNavigationActions();
   const setCurrentView = navActions.setWorkbench;
-  const activeFiles = selectors.getFiles();
   const {
     previewFile,
     pageEditorFunctions,
diff --git a/frontend/editor/src/core/components/pageEditor/hooks/usePageEditorDropdownState.ts b/frontend/editor/src/core/components/pageEditor/hooks/usePageEditorDropdownState.ts
index ac26c142dc..94ed6590ce 100644
--- a/frontend/editor/src/core/components/pageEditor/hooks/usePageEditorDropdownState.ts
+++ b/frontend/editor/src/core/components/pageEditor/hooks/usePageEditorDropdownState.ts
@@ -1,6 +1,6 @@
 import { useMemo } from "react";
 import { usePageEditor } from "@app/contexts/PageEditorContext";
-import { useFileState } from "@app/contexts/FileContext";
+import { shallowEqual, useFileSelector } from "@app/contexts/FileContext";
 import { FileId } from "@app/types/file";
 import { useFileColorMap } from "@app/components/pageEditor/hooks/useFileColorMap";
 
@@ -24,24 +24,32 @@ const isPdf = (name?: string | null) =>
   typeof name === "string" && name.toLowerCase().endsWith(".pdf");
 
 export function usePageEditorDropdownState(): PageEditorDropdownState {
-  const { state, selectors } = useFileState();
+  const selectedFileIds = useFileSelector((s) => s.ui.selectedFileIds);
   const { toggleFileSelection, reorderFiles, fileOrder } = usePageEditor();
 
+  // Subscribe to the stubs for the files in view so name/version changes
+  // re-render the dropdown. Reading via useFileSelectors() during render would
+  // not subscribe, so the displayed name/version could go stale.
+  const orderedStubs = useFileSelector(
+    (s) => fileOrder.map((fileId) => s.files.byId[fileId]),
+    shallowEqual,
+  );
+
   const pageEditorFiles = useMemo(() => {
     return fileOrder
-      .map<PageEditorDropdownFile | null>((fileId) => {
-        const stub = selectors.getStirlingFileStub(fileId);
+      .map<PageEditorDropdownFile | null>((fileId, index) => {
+        const stub = orderedStubs[index];
         if (!isPdf(stub?.name)) return null;
 
         return {
           fileId,
           name: stub?.name || "",
           versionNumber: stub?.versionNumber,
-          isSelected: state.ui.selectedFileIds.includes(fileId),
+          isSelected: selectedFileIds.includes(fileId),
         };
       })
       .filter((file): file is PageEditorDropdownFile => file !== null);
-  }, [fileOrder, selectors, state.ui.selectedFileIds]);
+  }, [fileOrder, orderedStubs, selectedFileIds]);
 
   const fileColorMap = useFileColorMap(
     pageEditorFiles.map((file) => file.fileId),
diff --git a/frontend/editor/src/core/components/shared/DismissAllErrorsButton.tsx b/frontend/editor/src/core/components/shared/DismissAllErrorsButton.tsx
index 5f3f4ada2a..ea28b78c5e 100644
--- a/frontend/editor/src/core/components/shared/DismissAllErrorsButton.tsx
+++ b/frontend/editor/src/core/components/shared/DismissAllErrorsButton.tsx
@@ -2,7 +2,7 @@ import React from "react";
 import { Group } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { useTranslation } from "react-i18next";
-import { useFileState } from "@app/contexts/FileContext";
+import { useFileSelector } from "@app/contexts/FileContext";
 import { useFileActions } from "@app/contexts/file/fileHooks";
 import { Z_INDEX_TOAST } from "@app/styles/zIndex";
 
@@ -14,11 +14,11 @@ const DismissAllErrorsButton: React.FC<DismissAllErrorsButtonProps> = ({
   className,
 }) => {
   const { t } = useTranslation();
-  const { state } = useFileState();
+  const errorFileIds = useFileSelector((s) => s.ui.errorFileIds);
   const { actions } = useFileActions();
 
   // Check if there are any files in error state
-  const hasErrors = state.ui.errorFileIds.length > 0;
+  const hasErrors = errorFileIds.length > 0;
 
   // Don't render if there are no errors
   if (!hasErrors) {
@@ -45,7 +45,7 @@ const DismissAllErrorsButton: React.FC<DismissAllErrorsButtonProps> = ({
         }}
       >
         {t("error.dismissAllErrors", "Dismiss All Errors")} (
-        {state.ui.errorFileIds.length})
+        {errorFileIds.length})
       </Button>
     </Group>
   );
diff --git a/frontend/editor/src/core/components/shared/FileSidebar.tsx b/frontend/editor/src/core/components/shared/FileSidebar.tsx
index 7d09261226..742334015c 100644
--- a/frontend/editor/src/core/components/shared/FileSidebar.tsx
+++ b/frontend/editor/src/core/components/shared/FileSidebar.tsx
@@ -81,9 +81,10 @@ const EXPANDED_WIDTH = "16.25rem"; // ~260px
 const WATCHED_FOLDER_VIEW_ID = "watchedFolder";
 const WATCHED_FOLDER_WORKBENCH_ID = "custom:watchedFolder";
 
-// Stable empty props for rows without folders, so the memoized FileItem
-// isn't re-rendered by a fresh `?? []` identity on every list render.
+// Stable empty props for rows without folders/policies, so the memoized
+// FileItem isn't re-rendered by a fresh `?? []` identity on every list render.
 const NO_FOLDERS: never[] = [];
+const NO_POLICIES: never[] = [];
 
 /** Only surface the "Adding files…" progress row for drops big enough that the
  *  pre-dispatch scan is user-visible; small adds finish before it would paint. */
@@ -790,7 +791,7 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
           onDragStart={handleWatchedFolderDragStart}
           folders={memberFolders}
           onFolderClick={openWatchedFolder}
-          policies={policyFileBadges.get(stub.id as string) ?? []}
+          policies={policyFileBadges.get(stub.id as string) ?? NO_POLICIES}
           onDelete={isWatchedFoldersActive ? undefined : handleSidebarDelete}
           onSaveToCloud={isWatchedFoldersActive ? undefined : handleSaveToCloud}
           canSaveToCloud={storageEnabled && fileOrigin !== "shared-with-me"}
diff --git a/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx b/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
index a289a245f1..c1a93594c5 100644
--- a/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
+++ b/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
@@ -167,7 +167,9 @@ export interface FileItemProps {
 
 const MAX_VISIBLE_FOLDER_TAGS = 2;
 
-export function FileItem({
+// Memoized: sidebar rows bail out unless THEIR props change, so one file's
+// update (e.g. a new version landing) re-renders one row, not the whole list.
+export const FileItem = React.memo(function FileItem({
   fileId,
   name,
   size,
@@ -509,4 +511,4 @@ export function FileItem({
         )}
     </>
   );
-}
+});
diff --git a/frontend/editor/src/core/components/shared/PolicyBadges.css b/frontend/editor/src/core/components/shared/PolicyBadges.css
index 3a919e24c9..8526de44c6 100644
--- a/frontend/editor/src/core/components/shared/PolicyBadges.css
+++ b/frontend/editor/src/core/components/shared/PolicyBadges.css
@@ -41,22 +41,3 @@
     transform: rotate(360deg);
   }
 }
-
-.policy-badge--recent {
-  animation: policy-badge-pulse 4.5s ease-in-out forwards;
-}
-@keyframes policy-badge-pulse {
-  0%,
-  24%,
-  48% {
-    box-shadow: 0 0 0 0 transparent;
-  }
-  12%,
-  36% {
-    box-shadow: 0 0 5px 2px currentColor;
-  }
-  60%,
-  100% {
-    box-shadow: 0 0 0 0 transparent;
-  }
-}
diff --git a/frontend/editor/src/core/components/shared/PolicyBadges.stories.tsx b/frontend/editor/src/core/components/shared/PolicyBadges.stories.tsx
index 81969bf615..c3646f774a 100644
--- a/frontend/editor/src/core/components/shared/PolicyBadges.stories.tsx
+++ b/frontend/editor/src/core/components/shared/PolicyBadges.stories.tsx
@@ -2,10 +2,14 @@ import type { Meta, StoryObj } from "@storybook/react-vite";
 import { PolicyBadges } from "@app/components/shared/PolicyBadges";
 import type { FileItemPolicyRef } from "@app/components/shared/PolicyBadges";
 
+// Real catalog category ids, so each badge renders its own shared glyph
+// (policyCategoryIcon) rather than the unknown-category fallback. Accents mirror
+// policyAccentVar's mapping — that lives in the proprietary layer, which a core
+// story can't import.
 const mockPolicies: FileItemPolicyRef[] = [
-  { id: "policy-1", name: "Redact PII", accentColor: "#e03131", recent: true },
-  { id: "policy-2", name: "Sanitize", accentColor: "#2f9e44", recent: false },
-  { id: "policy-3", name: "Watermark", accentColor: "#4263eb", recent: false },
+  { id: "security", name: "Redact PII", accentColor: "var(--color-purple)" },
+  { id: "compliance", name: "Sanitize", accentColor: "var(--color-green)" },
+  { id: "ingestion", name: "Watermark", accentColor: "var(--color-blue)" },
 ];
 
 const meta = {
@@ -22,15 +26,25 @@ export const Default: Story = {
   },
 };
 
+/** A blocking policy mid-run: spinner, and the file's exit points are gated. */
 export const Enforcing: Story = {
+  args: {
+    policies: [
+      { ...mockPolicies[0], enforcing: true },
+      ...mockPolicies.slice(1),
+    ],
+  },
+};
+
+/** A non-blocking run (classification tagging): same spinner, nothing gated. */
+export const Background: Story = {
   args: {
     policies: [
       {
-        id: "policy-1",
-        name: "Redact PII",
-        accentColor: "#e03131",
-        recent: false,
-        enforcing: true,
+        id: "classification",
+        name: "Classification",
+        accentColor: "var(--color-orange)",
+        background: true,
       },
       ...mockPolicies.slice(1),
     ],
diff --git a/frontend/editor/src/core/components/shared/PolicyBadges.tsx b/frontend/editor/src/core/components/shared/PolicyBadges.tsx
index f8661b9176..1fa57ca70a 100644
--- a/frontend/editor/src/core/components/shared/PolicyBadges.tsx
+++ b/frontend/editor/src/core/components/shared/PolicyBadges.tsx
@@ -1,6 +1,6 @@
 import { Tooltip } from "@mantine/core";
-import ShieldOutlinedIcon from "@mui/icons-material/ShieldOutlined";
 import AutorenewIcon from "@mui/icons-material/Autorenew";
+import { policyCategoryIcon } from "@app/components/policies/policyCategoryIcon";
 import { useTranslation } from "react-i18next";
 import "@app/components/shared/PolicyBadges.css";
 
@@ -10,20 +10,20 @@ export interface FileItemPolicyRef {
   name: string;
   /** CSS colour for the badge (matches the policy's accent). */
   accentColor: string;
-  /** True only just after the policy was applied — drives the one-off glow, so
-   *  it doesn't replay on every reload of an already-enforced file. */
-  recent: boolean;
-  /** True while the policy run is actively in-flight on this file. */
+  /** True while a BLOCKING policy run is in-flight on this file (gates actions). */
   enforcing?: boolean;
+  /** True while a non-blocking run (e.g. classification) is in-flight — shows
+   *  the same spinner but never gates anything. */
+  background?: boolean;
 }
 
 const MAX_VISIBLE = 3;
 
 /**
- * The canonical policy badge row: one accent-tinted shield per policy that has
- * run on a file, spinning while a run is in flight, glowing briefly after it
- * lands. Every surface that shows per-file policy badges (file sidebar, file
- * editor thumbnails, files page) renders this so they stay identical.
+ * The canonical policy badge row: one accent-tinted category icon per policy
+ * that has run on a file, spinning while a run is in flight. Every surface that
+ * shows per-file policy badges (file sidebar, file editor thumbnails, files
+ * page) renders this so they stay identical.
  */
 export function PolicyBadges({
   policies,
@@ -40,33 +40,40 @@ export function PolicyBadges({
       className={`policy-badges${className ? ` ${className}` : ""}`}
       data-no-select
     >
-      {policies.slice(0, MAX_VISIBLE).map((policy) => (
-        <Tooltip
-          key={policy.id}
-          label={
-            policy.enforcing
-              ? t("policy.badgeEnforcing", "{{name}} enforcing…", {
-                  name: policy.name,
-                })
-              : t("policy.badgeRan", "{{name}} policy ran on this file", {
-                  name: policy.name,
-                })
-          }
-          withArrow
-          position="top"
-        >
-          <span
-            className={`policy-badge${policy.enforcing ? " policy-badge--enforcing" : ""}${policy.recent && !policy.enforcing ? " policy-badge--recent" : ""}`}
-            style={{ color: policy.accentColor }}
+      {policies.slice(0, MAX_VISIBLE).map((policy) => {
+        const running = policy.enforcing || policy.background;
+        return (
+          <Tooltip
+            key={policy.id}
+            label={
+              policy.enforcing
+                ? t("policy.badgeEnforcing", "{{name}} enforcing...", {
+                    name: policy.name,
+                  })
+                : policy.background
+                  ? t("policy.badgeRunning", "{{name}} running...", {
+                      name: policy.name,
+                    })
+                  : t("policy.badgeRan", "{{name}} policy ran on this file", {
+                      name: policy.name,
+                    })
+            }
+            withArrow
+            position="top"
           >
-            {policy.enforcing ? (
-              <AutorenewIcon sx={{ fontSize: "0.7rem" }} />
-            ) : (
-              <ShieldOutlinedIcon sx={{ fontSize: "0.7rem" }} />
-            )}
-          </span>
-        </Tooltip>
-      ))}
+            <span
+              className={`policy-badge${running ? " policy-badge--enforcing" : ""}`}
+              style={{ color: policy.accentColor }}
+            >
+              {running ? (
+                <AutorenewIcon sx={{ fontSize: "0.7rem" }} />
+              ) : (
+                policyCategoryIcon(policy.id, { fontSize: "0.7rem" })
+              )}
+            </span>
+          </Tooltip>
+        );
+      })}
     </span>
   );
 }
diff --git a/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx b/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx
index cb9e931e80..9d5d2475b3 100644
--- a/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx
+++ b/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx
@@ -4,6 +4,8 @@ export function PolicyEnforcingOverlay(_props: {
   zIndex?: number;
   /** CSS colour var for the enforcing policy's accent; tints the icon/spinner. */
   accentVar?: string;
+  /** Category of the enforcing policy — picks its icon in the real overlay. */
+  categoryId?: string;
 }) {
   return null;
 }
diff --git a/frontend/editor/src/core/components/shared/WorkbenchBar.tsx b/frontend/editor/src/core/components/shared/WorkbenchBar.tsx
index 5cc1e6cabd..55ca01d307 100644
--- a/frontend/editor/src/core/components/shared/WorkbenchBar.tsx
+++ b/frontend/editor/src/core/components/shared/WorkbenchBar.tsx
@@ -19,7 +19,8 @@ import {
 } from "@app/components/filesPage/filesPageReturnRoute";
 import { useWorkbenchBar } from "@app/contexts/WorkbenchBarContext";
 import {
-  useFileState,
+  useAllFiles,
+  useFileSelectors,
   useFileSelection,
   useFileActions,
 } from "@app/contexts/FileContext";
@@ -121,10 +122,10 @@ export default function WorkbenchBar({
   const { sharingEnabled } = useSharingEnabled();
   const viewerContext = React.useContext(ViewerContext);
 
-  const { selectors } = useFileState();
+  const selectors = useFileSelectors();
   const { selectedFiles, selectedFileIds } = useFileSelection();
   const { actions: fileActions } = useFileActions();
-  const activeFiles = selectors.getFiles();
+  const { files: activeFiles } = useAllFiles();
   const { activeFileId, setActiveFileId } = useViewer();
   const policyFileBadges = usePolicyFileBadges();
   // Block print/export while any file the export would touch is under active
diff --git a/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx b/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx
index cc33ccbbb4..fe4a6f8e48 100644
--- a/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx
+++ b/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx
@@ -11,7 +11,7 @@ import {
 } from "@app/utils/convertUtils";
 import { getConversionEndpoints } from "@app/data/toolsTaxonomy";
 import { useFileSelection } from "@app/contexts/FileContext";
-import { useFileState } from "@app/contexts/FileContext";
+import { useFileSelector, useFileSelectors } from "@app/contexts/FileContext";
 import { detectFileExtension } from "@app/utils/fileUtils";
 import { usePreferences } from "@app/contexts/PreferencesContext";
 import { useConversionCloudStatus } from "@app/hooks/useConversionCloudStatus";
@@ -62,8 +62,8 @@ const ConvertSettings = ({
   const { t } = useTranslation();
   const theme = useMantineTheme();
   const { setSelectedFiles } = useFileSelection();
-  const { state, selectors } = useFileState();
-  const activeFiles = state.files.ids;
+  const selectors = useFileSelectors();
+  const activeFiles = useFileSelector((s) => s.files.ids);
   const { preferences } = usePreferences();
 
   const allEndpoints = useMemo(() => {
diff --git a/frontend/editor/src/core/components/tools/shared/ReviewToolStep.tsx b/frontend/editor/src/core/components/tools/shared/ReviewToolStep.tsx
index 8c89029913..7918bac7ca 100644
--- a/frontend/editor/src/core/components/tools/shared/ReviewToolStep.tsx
+++ b/frontend/editor/src/core/components/tools/shared/ReviewToolStep.tsx
@@ -11,7 +11,7 @@ import { Tooltip } from "@app/components/shared/Tooltip";
 import { useFileActionTerminology } from "@app/hooks/useFileActionTerminology";
 import { useFileActionIcons } from "@app/hooks/useFileActionIcons";
 import { saveOperationResults } from "@app/services/operationResultsSaveService";
-import { useFileActions, useFileState } from "@app/contexts/FileContext";
+import { useFileActions, useFileSelectors } from "@app/contexts/FileContext";
 import { FileId } from "@app/types/fileContext";
 import i18n from "@app/i18n";
 
@@ -40,7 +40,7 @@ function ReviewStepContent<TParams = unknown>({
   const DownloadIcon = icons.download;
   const stepRef = useRef<HTMLDivElement>(null);
   const { actions: fileActions } = useFileActions();
-  const { selectors } = useFileState();
+  const selectors = useFileSelectors();
 
   const handleUndo = async () => {
     try {
diff --git a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
index cc4a04598e..be4a4a9971 100644
--- a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
@@ -12,7 +12,12 @@ import { ActionIcon } from "@app/ui/ActionIcon";
 import CloseIcon from "@mui/icons-material/Close";
 import LockIcon from "@mui/icons-material/Lock";
 
-import { useFileState, useFileActions } from "@app/contexts/FileContext";
+import {
+  useAllFiles,
+  useFileSelector,
+  useFileSelectors,
+  useFileActions,
+} from "@app/contexts/FileContext";
 import { useFileWithUrl } from "@app/hooks/useFileWithUrl";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { LocalEmbedPDF } from "@app/components/viewer/LocalEmbedPDF";
@@ -259,9 +264,9 @@ const EmbedPdfViewerContent = ({
   const redactionTrackerRef = useRef<RedactionPendingTrackerAPI>(null);
 
   // Get current file from FileContext
-  const { selectors } = useFileState();
+  const selectors = useFileSelectors();
   const { actions } = useFileActions();
-  const activeFiles = selectors.getFiles();
+  const { files: activeFiles } = useAllFiles();
   const activeFilesRef = useRef(activeFiles);
   activeFilesRef.current = activeFiles;
   const activeFileIds = activeFiles.map((f) => f.fileId);
@@ -392,11 +397,11 @@ const EmbedPdfViewerContent = ({
   }, [previewFile, fileWithUrl]);
 
   // Check if the current file is encrypted (gate the viewer to prevent PDFium crash)
-  const isCurrentFileEncrypted = React.useMemo(() => {
-    if (!currentFile || !isStirlingFile(currentFile)) return false;
-    const stub = selectors.getStirlingFileStub(currentFile.fileId);
-    return stub?.processedFile?.isEncrypted === true;
-  }, [currentFile, selectors]);
+  const isCurrentFileEncrypted = useFileSelector((s) =>
+    currentFile && isStirlingFile(currentFile)
+      ? s.files.byId[currentFile.fileId]?.processedFile?.isEncrypted === true
+      : false,
+  );
 
   const bookmarkCacheKey = React.useMemo(() => {
     if (currentFile && isStirlingFile(currentFile)) {
diff --git a/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx b/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx
index ed4a2e2263..bd2704963a 100644
--- a/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx
@@ -4,7 +4,7 @@ import { Button } from "@app/ui/Button";
 import ArticleIcon from "@mui/icons-material/Article";
 import PictureAsPdfIcon from "@mui/icons-material/PictureAsPdf";
 
-import { useFileState } from "@app/contexts/FileContext";
+import { useAllFiles } from "@app/contexts/FileContext";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import {
@@ -126,8 +126,7 @@ export function NonPdfViewer({ file }: NonPdfViewerProps) {
 // ─── Wrapper that resolves the active file from FileContext ───────────────────
 
 export function NonPdfViewerWrapper(props: ViewerProps) {
-  const { selectors } = useFileState();
-  const activeFiles = selectors.getFiles();
+  const { files: activeFiles } = useAllFiles();
   const { activeFileIndex } = useViewer();
 
   const file =
diff --git a/frontend/editor/src/core/components/viewer/Viewer.tsx b/frontend/editor/src/core/components/viewer/Viewer.tsx
index 08103ca1f5..36a1080dbb 100644
--- a/frontend/editor/src/core/components/viewer/Viewer.tsx
+++ b/frontend/editor/src/core/components/viewer/Viewer.tsx
@@ -5,7 +5,7 @@ import {
   NonPdfViewerWrapper,
   type ViewerProps,
 } from "@app/components/viewer/NonPdfViewer";
-import { useFileState } from "@app/contexts/FileContext";
+import { useAllFiles } from "@app/contexts/FileContext";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { isStirlingFile } from "@app/types/fileContext";
 import { isPdfFile } from "@app/utils/fileUtils";
@@ -26,8 +26,7 @@ type SignatureOverlayPassThrough = Pick<
 >;
 
 const Viewer = (props: ViewerProps & SignatureOverlayPassThrough) => {
-  const { selectors } = useFileState();
-  const activeFiles = selectors.getFiles();
+  const { files: activeFiles } = useAllFiles();
   const { activeFileId } = useViewer();
 
   // Determine the active file — previewFile takes priority, then look up by stable ID
diff --git a/frontend/editor/src/core/components/viewer/ViewerAnnotationControls.tsx b/frontend/editor/src/core/components/viewer/ViewerAnnotationControls.tsx
index 32b4b1ce11..fda6c2d2a5 100644
--- a/frontend/editor/src/core/components/viewer/ViewerAnnotationControls.tsx
+++ b/frontend/editor/src/core/components/viewer/ViewerAnnotationControls.tsx
@@ -5,7 +5,11 @@ import { ActionIcon } from "@app/ui/ActionIcon";
 import { Tooltip } from "@app/components/shared/Tooltip";
 import { ViewerContext } from "@app/contexts/ViewerContext";
 import { useSignature } from "@app/contexts/SignatureContext";
-import { useFileState, useFileContext } from "@app/contexts/FileContext";
+import {
+  useAllFiles,
+  useFileSelectors,
+  useFileContext,
+} from "@app/contexts/FileContext";
 import { createStirlingFilesAndStubs } from "@app/services/fileStubHelpers";
 import {
   useNavigationState,
@@ -39,9 +43,9 @@ export default function ViewerAnnotationControls({
   const { historyApiRef, isPlacementMode } = useSignature();
 
   // File state for save functionality
-  const { state, selectors } = useFileState();
+  const selectors = useFileSelectors();
+  const { files: activeFiles, fileIds } = useAllFiles();
   const { actions: fileActions } = useFileContext();
-  const activeFiles = selectors.getFiles();
 
   // Check if we're in sign mode or redaction mode
   const { selectedTool } = useNavigationState();
@@ -83,7 +87,7 @@ export default function ViewerAnnotationControls({
       !historyApiRef?.current?.canUndo()
     )
       return;
-    if (activeFiles.length === 0 || state.files.ids.length === 0) return;
+    if (activeFiles.length === 0 || fileIds.length === 0) return;
 
     try {
       const arrayBuffer = await viewerContext.exportActions.saveAsCopy();
@@ -92,7 +96,7 @@ export default function ViewerAnnotationControls({
       const file = new File([new Blob([arrayBuffer])], activeFiles[0].name, {
         type: "application/pdf",
       });
-      const parentStub = selectors.getStirlingFileStub(state.files.ids[0]);
+      const parentStub = selectors.getStirlingFileStub(fileIds[0]);
       if (!parentStub) return;
 
       const { stirlingFiles, stubs } = await createStirlingFilesAndStubs(
@@ -100,11 +104,7 @@ export default function ViewerAnnotationControls({
         parentStub,
         "redact",
       );
-      await fileActions.consumeFiles(
-        [state.files.ids[0]],
-        stirlingFiles,
-        stubs,
-      );
+      await fileActions.consumeFiles([fileIds[0]], stirlingFiles, stubs);
 
       // Clear unsaved changes flags after successful save
       setHasUnsavedChanges(false);
diff --git a/frontend/editor/src/core/components/viewer/ViewerShareButton.tsx b/frontend/editor/src/core/components/viewer/ViewerShareButton.tsx
index f063cbffe2..4ef4b30cda 100644
--- a/frontend/editor/src/core/components/viewer/ViewerShareButton.tsx
+++ b/frontend/editor/src/core/components/viewer/ViewerShareButton.tsx
@@ -9,7 +9,7 @@ import CloudUploadIcon from "@mui/icons-material/CloudUpload";
 import { Tooltip } from "@app/components/shared/Tooltip";
 import ShareManagementModal from "@app/components/shared/ShareManagementModal";
 import { useViewer } from "@app/contexts/ViewerContext";
-import { useFileState, useFileActions } from "@app/contexts/FileContext";
+import { useAllFiles, useFileActions } from "@app/contexts/FileContext";
 import { uploadHistoryChain } from "@app/services/serverStorageUpload";
 import { fileStorage } from "@app/services/fileStorage";
 import { alert } from "@app/components/toast";
@@ -39,7 +39,7 @@ export default function ViewerShareButton({
 }: ViewerShareButtonProps) {
   const { t } = useTranslation();
   const { activeFileId } = useViewer();
-  const { selectors } = useFileState();
+  const { fileStubs } = useAllFiles();
   const { actions } = useFileActions();
   const [confirmOpen, setConfirmOpen] = useState(false);
   const [saving, setSaving] = useState(false);
@@ -49,7 +49,7 @@ export default function ViewerShareButton({
   // Resolve strictly to the file shown in the viewer. Never fall back to an
   // arbitrary file — sharing the wrong document would be worse than not
   // sharing. If there's no active file, the button is disabled (see isDisabled).
-  const stubs = selectors.getStirlingFileStubs();
+  const stubs = fileStubs;
   const stub = activeFileId
     ? stubs.find((s) => s.id === activeFileId)
     : undefined;
diff --git a/frontend/editor/src/core/components/viewer/ZoomAPIBridge.tsx b/frontend/editor/src/core/components/viewer/ZoomAPIBridge.tsx
index 2501ddfb79..0cb11837cc 100644
--- a/frontend/editor/src/core/components/viewer/ZoomAPIBridge.tsx
+++ b/frontend/editor/src/core/components/viewer/ZoomAPIBridge.tsx
@@ -3,7 +3,7 @@ import { useZoom, ZoomMode } from "@embedpdf/plugin-zoom/react";
 import { useSpread, SpreadMode } from "@embedpdf/plugin-spread/react";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { useActiveDocumentId } from "@app/components/viewer/useActiveDocumentId";
-import { useFileState } from "@app/contexts/FileContext";
+import { useAllFiles } from "@app/contexts/FileContext";
 import {
   determineAutoZoom,
   DEFAULT_FALLBACK_ZOOM,
@@ -36,7 +36,7 @@ function ZoomAPIBridgeInner({ documentId }: { documentId: string }) {
   const { provides: zoom, state: zoomState } = useZoom(documentId);
   const { spreadMode } = useSpread(documentId);
   const { registerBridge, triggerImmediateZoomUpdate } = useViewer();
-  const { selectors } = useFileState();
+  const { fileStubs } = useAllFiles();
 
   const hasSetInitialZoom = useRef(false);
   const lastSpreadMode = useRef(spreadMode ?? SpreadMode.None);
@@ -62,7 +62,7 @@ function ZoomAPIBridgeInner({ documentId }: { documentId: string }) {
     }
   }, []);
 
-  const stubs = selectors.getStirlingFileStubs();
+  const stubs = fileStubs;
   const firstFileStub = stubs[0];
   const firstFileId = firstFileStub?.id;
 
diff --git a/frontend/editor/src/core/components/viewer/useViewerReadAloud.ts b/frontend/editor/src/core/components/viewer/useViewerReadAloud.ts
index c2ccdec1be..5352ffc748 100644
--- a/frontend/editor/src/core/components/viewer/useViewerReadAloud.ts
+++ b/frontend/editor/src/core/components/viewer/useViewerReadAloud.ts
@@ -1,6 +1,6 @@
 import { useCallback, useEffect, useRef, useState } from "react";
 import { computeReadAloudHighlightRect } from "@app/components/viewer/readAloudHighlight";
-import { useFileState } from "@app/contexts/FileContext";
+import { useFileSelectors } from "@app/contexts/FileContext";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { useStopReadAloudOnNavigation } from "@app/components/viewer/useStopReadAloudOnNavigation";
 import { pdfWorkerManager } from "@app/services/pdfWorkerManager";
@@ -60,7 +60,7 @@ function createHighlightElement(
 
 export function useViewerReadAloud(defaultLanguage?: string) {
   const viewer = useViewer();
-  const { selectors } = useFileState();
+  const selectors = useFileSelectors();
 
   const [isReadingAloud, setIsReadingAloud] = useState(false);
   const [speechRate, setSpeechRate] = useState(1);
diff --git a/frontend/editor/src/core/contexts/FileContext.tsx b/frontend/editor/src/core/contexts/FileContext.tsx
index d0808665cd..a982c347ca 100644
--- a/frontend/editor/src/core/contexts/FileContext.tsx
+++ b/frontend/editor/src/core/contexts/FileContext.tsx
@@ -16,6 +16,7 @@ import {
   useReducer,
   useCallback,
   useEffect,
+  useLayoutEffect,
   useRef,
   useMemo,
   useState,
@@ -23,7 +24,6 @@ import {
 import {
   FileContextProviderProps,
   FileContextSelectors,
-  FileContextStateValue,
   FileContextActionsValue,
   FileContextActions,
   FileId,
@@ -36,6 +36,7 @@ import {
 import {
   fileContextReducer,
   initialFileContextState,
+  withReducerIdentityGuard,
 } from "@app/contexts/file/FileReducer";
 import { createFileSelectors } from "@app/contexts/file/fileSelectors";
 import {
@@ -49,8 +50,9 @@ import {
 } from "@app/contexts/file/fileActions";
 import { FileLifecycleManager } from "@app/contexts/file/lifecycle";
 import {
-  FileStateContext,
+  FileStoreContext,
   FileActionsContext,
+  type FileStateStore,
 } from "@app/contexts/file/contexts";
 import {
   IndexedDBProvider,
@@ -75,10 +77,13 @@ function FileContextInner({
   children,
   enablePersistence = true,
 }: FileContextProviderProps) {
-  const [state, dispatch] = useReducer(
-    fileContextReducer,
-    initialFileContextState,
+  // Guarded in dev: warns if a reducer case reallocates a slice without changing
+  // it, which would silently defeat the selector-subscription bail-out.
+  const guardedReducer = useMemo(
+    () => withReducerIdentityGuard(fileContextReducer),
+    [],
   );
+  const [state, dispatch] = useReducer(guardedReducer, initialFileContextState);
 
   // Always call the hook unconditionally to satisfy React's rules of hooks.
   // IndexedDB context is only used when enablePersistence is true.
@@ -657,14 +662,28 @@ function FileContextInner({
     ],
   );
 
-  // Split context values to minimize re-renders
-  const stateValue = useMemo<FileContextStateValue>(
+  // Subscription store bridge: the context value is STABLE, so consumers only
+  // re-render when the slice they select (via useFileSelector) changes — not on
+  // every state change. Listeners are notified after each committed state.
+  const listenersRef = useRef<Set<() => void>>(new Set());
+  const store = useMemo<FileStateStore>(
     () => ({
-      state,
+      getState: () => stateRef.current,
+      subscribe: (listener) => {
+        listenersRef.current.add(listener);
+        return () => {
+          listenersRef.current.delete(listener);
+        };
+      },
       selectors,
     }),
-    [state, selectors],
+    [selectors],
   );
+  // Layout effect (not passive): subscribers re-render before the browser
+  // paints, so a state change can never show a frame with stale consumers.
+  useLayoutEffect(() => {
+    for (const listener of listenersRef.current) listener();
+  }, [state]);
 
   const actionsValue = useMemo<FileContextActionsValue>(
     () => ({
@@ -698,7 +717,7 @@ function FileContextInner({
   }, [lifecycleManager]);
 
   return (
-    <FileStateContext.Provider value={stateValue}>
+    <FileStoreContext.Provider value={store}>
       <FileActionsContext.Provider value={actionsValue}>
         {children}
         <ZipWarningModal
@@ -721,7 +740,7 @@ function FileContextInner({
           onSkip={handleUnlockSkip}
         />
       </FileActionsContext.Provider>
-    </FileStateContext.Provider>
+    </FileStoreContext.Provider>
   );
 }
 
@@ -758,6 +777,10 @@ export function FileContextProvider({
 export {
   useFileState,
   useFileActions,
+  useFileSelector,
+  useFileSelectors,
+  useFileIndex,
+  shallowEqual,
   useCurrentFile,
   useFileSelection,
   useFileManagement,
diff --git a/frontend/editor/src/core/contexts/ViewerContext.tsx b/frontend/editor/src/core/contexts/ViewerContext.tsx
index 22d95606c1..5e5d08dbb4 100644
--- a/frontend/editor/src/core/contexts/ViewerContext.tsx
+++ b/frontend/editor/src/core/contexts/ViewerContext.tsx
@@ -9,7 +9,11 @@ import React, {
   useCallback,
 } from "react";
 import { useNavigation } from "@app/contexts/NavigationContext";
-import { useFileState } from "@app/contexts/FileContext";
+import {
+  useFileIndex,
+  useFileSelector,
+  useFileSelectors,
+} from "@app/contexts/FileContext";
 import { isStirlingFile } from "@app/types/fileContext";
 import type { FileId } from "@app/types/file";
 import { enforceExportPolicies } from "@app/services/policyExport";
@@ -244,25 +248,21 @@ export const ViewerProvider: React.FC<ViewerProviderProps> = ({ children }) => {
   const [activeFileId, setActiveFileId] = useState<string | null>(null);
 
   // activeFileIndex is derived from activeFileId so they can never desync.
-  // ViewerProvider sits inside FileContextProvider so useFileState is valid here.
-  const { selectors, state } = useFileState();
+  // ViewerProvider sits inside FileContextProvider so these hooks are valid here.
+  const selectors = useFileSelectors();
+  const fileIds = useFileSelector((s) => s.files.ids);
 
   // Clear activeFileId when its file is removed from the workbench.
   // Dep on state.files.ids so the effect re-runs on every add/remove.
   useEffect(() => {
     if (!activeFileId) return;
-    const stillInWorkbench = state.files.ids.some(
+    const stillInWorkbench = fileIds.some(
       (id) => (id as string) === activeFileId,
     );
     if (!stillInWorkbench) setActiveFileId(null);
-  }, [activeFileId, state.files.ids]);
+  }, [activeFileId, fileIds]);
 
-  const activeFileIndex = useMemo(() => {
-    if (!activeFileId) return 0;
-    const files = selectors.getFiles();
-    const idx = files.findIndex((f) => f.fileId === activeFileId);
-    return idx >= 0 ? idx : 0;
-  }, [activeFileId, selectors]);
+  const activeFileIndex = useFileIndex(activeFileId);
   const setActiveFileIndex = useCallback(
     (index: number) => {
       const files = selectors.getFiles();
diff --git a/frontend/editor/src/core/contexts/file/FileReducer.ts b/frontend/editor/src/core/contexts/file/FileReducer.ts
index 91bd62cf4d..2697974823 100644
--- a/frontend/editor/src/core/contexts/file/FileReducer.ts
+++ b/frontend/editor/src/core/contexts/file/FileReducer.ts
@@ -425,3 +425,83 @@ export function fileContextReducer(
       return state;
   }
 }
+
+// ── Dev-only structural-sharing guard ──────────────────────────────────────
+//
+// The file hooks bail a consumer out of re-rendering when the slice it selects
+// keeps its object identity across a dispatch. That optimisation silently
+// breaks if a reducer case returns a NEW identity for a slice it didn't
+// actually change (e.g. an unnecessary `{ ...state.files }`): every consumer of
+// that slice re-renders for nothing, with no test failure. This wrapper warns
+// when that happens. No-op in production.
+
+function idsUnchanged(a: FileId[], b: FileId[]): boolean {
+  return a.length === b.length && a.every((id, i) => id === b[i]);
+}
+
+function byIdUnchanged(
+  a: Record<FileId, StirlingFileStub>,
+  b: Record<FileId, StirlingFileStub>,
+): boolean {
+  const keysA = Object.keys(a);
+  return (
+    keysA.length === Object.keys(b).length &&
+    keysA.every((id) => a[id as FileId] === b[id as FileId])
+  );
+}
+
+function uiUnchanged(
+  a: FileContextState["ui"],
+  b: FileContextState["ui"],
+): boolean {
+  return (Object.keys(a) as Array<keyof FileContextState["ui"]>).every(
+    (k) => a[k] === b[k],
+  );
+}
+
+function setUnchanged<T>(a: Set<T>, b: Set<T>): boolean {
+  if (a.size !== b.size) return false;
+  for (const v of a) if (!b.has(v)) return false;
+  return true;
+}
+
+/**
+ * Wrap a reducer so, outside production, it warns when an action reallocates a
+ * top-level state slice without changing its contents — which would defeat the
+ * selector-subscription bail-out in the file hooks.
+ */
+export function withReducerIdentityGuard(
+  reducer: (s: FileContextState, a: FileContextAction) => FileContextState,
+): (s: FileContextState, a: FileContextAction) => FileContextState {
+  if (process.env.NODE_ENV === "production") return reducer;
+  return (state, action) => {
+    const next = reducer(state, action);
+    if (next === state) return next;
+    if (
+      next.files !== state.files &&
+      idsUnchanged(next.files.ids, state.files.ids) &&
+      byIdUnchanged(next.files.byId, state.files.byId)
+    ) {
+      console.error(
+        `[FileReducer] '${action.type}' reallocated state.files without changing it — ` +
+          "this re-renders every file consumer for nothing. Return the existing slice unchanged.",
+      );
+    }
+    if (next.ui !== state.ui && uiUnchanged(next.ui, state.ui)) {
+      console.error(
+        `[FileReducer] '${action.type}' reallocated state.ui without changing it — ` +
+          "this re-renders every UI consumer for nothing. Return the existing slice unchanged.",
+      );
+    }
+    if (
+      next.pinnedFiles !== state.pinnedFiles &&
+      setUnchanged(next.pinnedFiles, state.pinnedFiles)
+    ) {
+      console.error(
+        `[FileReducer] '${action.type}' reallocated state.pinnedFiles without changing it — ` +
+          "this re-renders every pinned-files consumer for nothing.",
+      );
+    }
+    return next;
+  };
+}
diff --git a/frontend/editor/src/core/contexts/file/classificationToolRace.test.ts b/frontend/editor/src/core/contexts/file/classificationToolRace.test.ts
new file mode 100644
index 0000000000..faf6501a0c
--- /dev/null
+++ b/frontend/editor/src/core/contexts/file/classificationToolRace.test.ts
@@ -0,0 +1,167 @@
+import { describe, it, expect } from "vitest";
+import { fileContextReducer } from "@app/contexts/file/FileReducer";
+import type {
+  FileContextAction,
+  FileContextState,
+  StirlingFileStub,
+} from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+
+/**
+ * Classification is non-blocking: while it runs, the user can manually run a
+ * tool on the same file. Classification's only write is a metadata-only,
+ * shallow-merged UPDATE_FILE_RECORD stamping `classificationLabels`; a manual
+ * tool run produces a NEW document via CONSUME_FILES (new id + version). These
+ * tests drive the REAL reducer through every interleaving (classification lands
+ * before / during / after the tool run) and prove the invariant the design
+ * relies on: the tool's output document is byte-for-byte what the tool produced,
+ * regardless of when classification lands. (Label PLACEMENT in the mid-run race
+ * is the orchestration's job — usePolicyAutoRun resolves targets at write time;
+ * see usePolicyAutoRun.race.test.tsx. Here we lock the reducer backstop.)
+ */
+
+const stub = (
+  id: string,
+  extra: Partial<StirlingFileStub> = {},
+): StirlingFileStub =>
+  ({
+    id: id as FileId,
+    name: "doc.pdf",
+    versionNumber: 1,
+    ...extra,
+  }) as StirlingFileStub;
+
+function stateWith(...stubs: StirlingFileStub[]): FileContextState {
+  return {
+    files: {
+      ids: stubs.map((s) => s.id),
+      byId: Object.fromEntries(stubs.map((s) => [s.id, s])) as Record<
+        FileId,
+        StirlingFileStub
+      >,
+    },
+    pinnedFiles: new Set<FileId>(),
+    ui: {
+      selectedFileIds: [],
+      selectedPageNumbers: [],
+      isProcessing: false,
+      processingProgress: 0,
+      hasUnsavedChanges: false,
+      errorFileIds: [],
+    },
+  };
+}
+
+const LABELS = ["Invoice"];
+
+// A manual tool run on `inputId` producing a new versioned document `outputId`.
+// Mirrors what useToolOperation dispatches: the reducer stamps provenance
+// (derivedFromTool, sourceFileIds) and inherits labels itself.
+const toolRun = (inputId: string, outputId: string): FileContextAction => ({
+  type: "CONSUME_FILES",
+  payload: {
+    inputFileIds: [inputId as FileId],
+    outputStirlingFileStubs: [stub(outputId, { versionNumber: 2 })],
+    silent: false,
+  },
+});
+
+// Classification stamping labels onto a target id (the reducer merges shallowly).
+const classify = (targetId: string): FileContextAction => ({
+  type: "UPDATE_FILE_RECORD",
+  payload: {
+    id: targetId as FileId,
+    updates: { classificationLabels: LABELS },
+  },
+});
+
+describe("classification landing vs a manually-run tool", () => {
+  it("PRE: classification lands first — tool output is correct AND inherits the label", () => {
+    let s = stateWith(stub("orig"));
+    s = fileContextReducer(s, classify("orig"));
+    s = fileContextReducer(s, toolRun("orig", "out"));
+
+    const out = s.files.byId["out" as FileId];
+    expect(out).toBeDefined();
+    expect(out.versionNumber).toBe(2); // the document the tool produced
+    expect(s.files.byId["orig" as FileId]).toBeUndefined(); // input consumed
+    // Label carried forward onto the tool's new version.
+    expect(out.classificationLabels).toEqual(LABELS);
+  });
+
+  it("POST: classification lands after the tool run, targeting the new leaf — output untouched, label applied, nothing else clobbered", () => {
+    let s = stateWith(stub("orig"));
+    s = fileContextReducer(s, toolRun("orig", "out"));
+
+    const before = s.files.byId["out" as FileId];
+    // classificationLabelTargets resolves the run's descendants: "out" matches
+    // because its sourceFileIds includes "orig".
+    expect(before.sourceFileIds).toContain("orig" as FileId);
+
+    s = fileContextReducer(s, classify("out"));
+    const after = s.files.byId["out" as FileId];
+
+    // The label write is a shallow merge: ONLY classificationLabels changes.
+    expect(after.classificationLabels).toEqual(LABELS);
+    expect({ ...after, classificationLabels: undefined }).toEqual({
+      ...before,
+      classificationLabels: undefined,
+    });
+    expect(after.versionNumber).toBe(2);
+  });
+
+  it("MID (the race): a label write aimed at an already-consumed id no-ops — output document is CORRECT, nothing is resurrected", () => {
+    // In production this stale-id write no longer happens: usePolicyAutoRun
+    // resolves the label targets AT WRITE TIME, so the labels land on the live
+    // leaf instead (see usePolicyAutoRun.race.test.tsx). This test locks the
+    // reducer-level BACKSTOP behind that: even if a stale id does get written,
+    // it cannot corrupt or resurrect anything.
+    let s = stateWith(stub("orig"));
+
+    const staleTargetId = "orig";
+
+    // During that window the user runs a tool: orig -> out. orig had no labels
+    // yet, so the new leaf inherits none.
+    s = fileContextReducer(s, toolRun("orig", "out"));
+    const out = s.files.byId["out" as FileId];
+    expect(out.versionNumber).toBe(2);
+    expect(out.classificationLabels).toBeUndefined();
+
+    // Classification's write finally lands — on the now-consumed snapshot id.
+    const beforeWrite = s;
+    s = fileContextReducer(s, classify(staleTargetId));
+
+    // No-op on a missing record: reducer returns the SAME state reference, so no
+    // zombie "orig" record is resurrected and nothing is corrupted.
+    expect(s).toBe(beforeWrite);
+    expect(s.files.byId["orig" as FileId]).toBeUndefined();
+
+    // The tool's output document is intact and exactly what the tool produced.
+    const finalOut = s.files.byId["out" as FileId];
+    expect(finalOut.versionNumber).toBe(2);
+    expect(finalOut.sourceFileIds).toContain("orig" as FileId);
+    // At the reducer level the stale write leaves the leaf unlabelled — which
+    // is why the orchestration resolves targets at write time instead. The
+    // DOCUMENT is unaffected either way.
+    expect(finalOut.classificationLabels).toBeUndefined();
+  });
+
+  it("classification can never overwrite a tool output's document fields (only the label)", () => {
+    // Tool output already carries its own state; classification must not disturb it.
+    let s = stateWith(
+      stub("out", {
+        versionNumber: 7,
+        thumbnailUrl: "blob:thumb",
+        isPinned: true,
+      } as Partial<StirlingFileStub>),
+    );
+
+    s = fileContextReducer(s, classify("out"));
+    const after = s.files.byId["out" as FileId];
+
+    expect(after.versionNumber).toBe(7);
+    expect(after.thumbnailUrl).toBe("blob:thumb");
+    expect((after as { isPinned?: boolean }).isPinned).toBe(true);
+    expect(after.classificationLabels).toEqual(LABELS);
+  });
+});
diff --git a/frontend/editor/src/core/contexts/file/contexts.ts b/frontend/editor/src/core/contexts/file/contexts.ts
index c17a178043..6bc74e11ae 100644
--- a/frontend/editor/src/core/contexts/file/contexts.ts
+++ b/frontend/editor/src/core/contexts/file/contexts.ts
@@ -4,14 +4,28 @@
 
 import { createContext } from "react";
 import {
+  FileContextState,
+  FileContextSelectors,
   FileContextStateValue,
   FileContextActionsValue,
 } from "@app/types/fileContext";
 
-// Split contexts for performance
-export const FileStateContext = createContext<
-  FileContextStateValue | undefined
->(undefined);
+/**
+ * Subscription store for file state. The context VALUE is stable — consumers
+ * subscribe and select slices (see useFileSelector), re-rendering only when
+ * their selected slice changes, instead of on every state change.
+ */
+export interface FileStateStore {
+  getState: () => FileContextState;
+  subscribe: (listener: () => void) => () => void;
+  /** Stable selector API (reads live state via refs). */
+  selectors: FileContextSelectors;
+}
+
+export const FileStoreContext = createContext<FileStateStore | undefined>(
+  undefined,
+);
+
 export const FileActionsContext = createContext<
   FileContextActionsValue | undefined
 >(undefined);
diff --git a/frontend/editor/src/core/contexts/file/fileActions.ts b/frontend/editor/src/core/contexts/file/fileActions.ts
index 77447003f6..db99e1c673 100644
--- a/frontend/editor/src/core/contexts/file/fileActions.ts
+++ b/frontend/editor/src/core/contexts/file/fileActions.ts
@@ -370,32 +370,57 @@ export async function addFiles(
 
     // Collect hydrations to schedule after dispatch so updateStirlingFileStub finds files in state.
     const pendingHydrations: Array<() => Promise<void>> = [];
+    // Per-chunk persistence promises (kicked off as chunks flush, awaited before
+    // return). See flushChunk — we stream writes instead of one batch at the end.
+    const persistPromises: Array<Promise<unknown>> = [];
 
-    // Stream the batch into the workspace in chunks. The per-file pre-scan below
-    // (dedupe, encryption sniff — which reads each PDF's bytes) takes real time
-    // for a big folder drop; a single end-of-loop dispatch would leave the UI
-    // frozen-looking for seconds and then dump hundreds of rows in one render.
-    // Chunked dispatch keeps rows (and their thumbnail hydrations) streaming in,
-    // and the progress store drives the sidebar's "Adding files…" indicator.
-    const DISPATCH_CHUNK = 25;
+    // Dispatch stubs in chunks so rows (and thumbnail hydrations) stream in
+    // rather than dumping the whole drop in one render.
+    const DISPATCH_CHUNK = 5;
     let flushedStubs = 0;
     let flushedHydrations = 0;
-    const flushChunk = () => {
-      if (
-        !options.skipWorkspaceDispatch &&
-        stirlingFileStubs.length > flushedStubs
-      ) {
-        dispatch({
-          type: "ADD_FILES",
-          payload: { stirlingFileStubs: stirlingFileStubs.slice(flushedStubs) },
-        });
+    // Flushes the pending chunk and returns this chunk's persistence promises,
+    // so the caller can await the writes (see the loop's yield) before the policy
+    // auto-run tries to read the file back from storage.
+    const flushChunk = (): Array<Promise<unknown>> => {
+      const chunkWrites: Array<Promise<unknown>> = [];
+      if (stirlingFileStubs.length > flushedStubs) {
+        const from = flushedStubs;
+        const newStubs = stirlingFileStubs.slice(from);
         flushedStubs = stirlingFileStubs.length;
+        if (!options.skipWorkspaceDispatch) {
+          dispatch({
+            type: "ADD_FILES",
+            payload: { stirlingFileStubs: newStubs },
+          });
+        }
+        // Persist each chunk as it flushes, not one batch at the end: the policy
+        // auto-run reads files from IndexedDB with no in-memory fallback.
+        if (enablePersistence) {
+          const newFiles = stirlingFiles.slice(from);
+          for (let i = 0; i < newFiles.length; i++) {
+            const sf = newFiles[i];
+            const stub = newStubs[i];
+            const write = fileStorage
+              .storeStirlingFile(sf, stub)
+              .catch((error) => {
+                console.error(
+                  "Failed to persist file to storage:",
+                  sf.name,
+                  error,
+                );
+              });
+            chunkWrites.push(write);
+            persistPromises.push(write);
+          }
+        }
       }
       // Hydrations only after their chunk is dispatched, so
       // updateStirlingFileStub finds the files in state.
       while (flushedHydrations < pendingHydrations.length) {
         scheduleMetadataHydration(pendingHydrations[flushedHydrations++]);
       }
+      return chunkWrites;
     };
 
     reportBulkAddProgress(0, filesToProcess.length);
@@ -554,38 +579,25 @@ export async function addFiles(
 
       reportBulkAddProgress(++scannedCount, filesToProcess.length);
       if (stirlingFileStubs.length - flushedStubs >= DISPATCH_CHUNK) {
-        flushChunk();
+        const chunkWrites = flushChunk();
+        // Yield a MACROTASK so React commits this chunk and runs its effects
+        // (incl. the policy-enforcement dispatch) before the next chunk scans.
+        // The per-file awaits above are only microtasks, which don't give React
+        // a turn — without this, all dispatches batch and processing can't begin
+        // until the whole drop is scanned. Awaiting the chunk's writes first means
+        // the auto-run finds each file's bytes already committed in storage.
+        await Promise.all(chunkWrites);
+        await new Promise((resolve) => setTimeout(resolve));
       }
     }
 
     // Flush the remainder (also the sole dispatch for small batches).
     flushChunk();
 
-    // Persist to storage if enabled using fileStorage service
-    if (enablePersistence && stirlingFiles.length > 0) {
-      await Promise.all(
-        stirlingFiles.map(async (stirlingFile, index) => {
-          try {
-            // Get corresponding stub with all metadata
-            const fileStub = stirlingFileStubs[index];
-
-            // Store using the cleaner signature - pass StirlingFile + StirlingFileStub directly
-            await fileStorage.storeStirlingFile(stirlingFile, fileStub);
-
-            if (DEBUG)
-              console.log(
-                `📄 addFiles: Stored file ${stirlingFile.name} with metadata:`,
-                fileStub,
-              );
-          } catch (error) {
-            console.error(
-              "Failed to persist file to storage:",
-              stirlingFile.name,
-              error,
-            );
-          }
-        }),
-      );
+    // Wait for the per-chunk writes (streamed in flushChunk) to commit, so
+    // addFiles only resolves once every file is durably stored.
+    if (enablePersistence && persistPromises.length > 0) {
+      await Promise.all(persistPromises);
     }
 
     if (!options.skipUploadTracking && stirlingFiles.length > 0) {
diff --git a/frontend/editor/src/core/contexts/file/fileHooks.selector.test.tsx b/frontend/editor/src/core/contexts/file/fileHooks.selector.test.tsx
new file mode 100644
index 0000000000..5a8f3243f9
--- /dev/null
+++ b/frontend/editor/src/core/contexts/file/fileHooks.selector.test.tsx
@@ -0,0 +1,223 @@
+import { describe, it, expect, vi } from "vitest";
+import { render, act } from "@testing-library/react";
+import { useEffect } from "react";
+import { MantineProvider } from "@mantine/core";
+import { FileContextProvider } from "@app/contexts/FileContext";
+import {
+  useAllFiles,
+  useFileContext,
+  useFileSelection,
+  useFileSelectors,
+  useStirlingFileStub,
+  useFileActions,
+} from "@app/contexts/file/fileHooks";
+import type { StirlingFileStub } from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+import type { FileContextAction } from "@app/types/fileContext";
+
+/**
+ * Proves the selector-subscription contract: a consumer re-renders only when
+ * the slice it selects changes — a single file's update doesn't re-render
+ * other files' consumers, and selection changes don't re-render list consumers.
+ */
+
+const stub = (id: string): StirlingFileStub =>
+  ({
+    id: id as FileId,
+    name: `${id}.pdf`,
+    type: "application/pdf",
+    size: 1,
+    lastModified: 0,
+  }) as StirlingFileStub;
+
+const renders: Record<string, number> = {};
+let dispatchRef: React.Dispatch<FileContextAction> | null = null;
+
+function Controller() {
+  const { dispatch } = useFileActions();
+  dispatchRef = dispatch;
+  return null;
+}
+
+function StubWatcher({ fileId }: { fileId: string }) {
+  useStirlingFileStub(fileId as FileId);
+  renders[`stub-${fileId}`] = (renders[`stub-${fileId}`] ?? 0) + 1;
+  return null;
+}
+
+function ListWatcher() {
+  useAllFiles();
+  renders.list = (renders.list ?? 0) + 1;
+  return null;
+}
+
+function SelectionWatcher() {
+  useFileSelection();
+  renders.selection = (renders.selection ?? 0) + 1;
+  return null;
+}
+
+function setup() {
+  for (const key of Object.keys(renders)) delete renders[key];
+  dispatchRef = null;
+  render(
+    <MantineProvider>
+      <FileContextProvider enableUrlSync={false}>
+        <Controller />
+        <StubWatcher fileId="a" />
+        <StubWatcher fileId="b" />
+        <ListWatcher />
+        <SelectionWatcher />
+      </FileContextProvider>
+    </MantineProvider>,
+  );
+  act(() => {
+    dispatchRef!({
+      type: "ADD_FILES",
+      payload: { stirlingFileStubs: [stub("a"), stub("b")] },
+    });
+  });
+  return { ...renders };
+}
+
+describe("file hooks — selector subscriptions", () => {
+  it("updating one file re-renders that file's consumer, not the other's", () => {
+    const before = setup();
+    act(() => {
+      dispatchRef!({
+        type: "UPDATE_FILE_RECORD",
+        payload: { id: "b" as FileId, updates: { name: "renamed.pdf" } },
+      });
+    });
+    expect(renders["stub-b"]).toBeGreaterThan(before["stub-b"]);
+    expect(renders["stub-a"]).toBe(before["stub-a"]);
+  });
+
+  it("selection changes don't re-render file-list or per-file consumers", () => {
+    const before = setup();
+    act(() => {
+      dispatchRef!({
+        type: "SET_SELECTED_FILES",
+        payload: { fileIds: ["a" as FileId] },
+      });
+    });
+    expect(renders.selection).toBeGreaterThan(before.selection);
+    expect(renders.list).toBe(before.list);
+    expect(renders["stub-a"]).toBe(before["stub-a"]);
+    expect(renders["stub-b"]).toBe(before["stub-b"]);
+  });
+
+  it("file-list changes don't re-render selection-only consumers", () => {
+    const before = setup();
+    act(() => {
+      dispatchRef!({
+        type: "UPDATE_FILE_RECORD",
+        payload: { id: "a" as FileId, updates: { name: "x.pdf" } },
+      });
+    });
+    expect(renders.selection).toBe(before.selection);
+  });
+});
+
+describe("useFileSelectors — render-phase misuse guard", () => {
+  const guardErrors = (spy: ReturnType<typeof vi.spyOn>) =>
+    spy.mock.calls.filter((args) =>
+      String(args[0]).includes("[useFileSelectors]"),
+    );
+
+  function RenderTimeMisuse() {
+    const selectors = useFileSelectors();
+    selectors.getAllFileIds(); // during render — must be flagged
+    return null;
+  }
+
+  function EffectTimeUse() {
+    const selectors = useFileSelectors();
+    useEffect(() => {
+      selectors.getAllFileIds(); // after commit — legitimate
+    }, [selectors]);
+    return null;
+  }
+
+  it("flags a selector invoked during render", () => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    render(
+      <MantineProvider>
+        <FileContextProvider enableUrlSync={false}>
+          <RenderTimeMisuse />
+        </FileContextProvider>
+      </MantineProvider>,
+    );
+    expect(guardErrors(spy).length).toBeGreaterThan(0);
+    spy.mockRestore();
+  });
+
+  it("does not flag selector reads from effects", () => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    render(
+      <MantineProvider>
+        <FileContextProvider enableUrlSync={false}>
+          <EffectTimeUse />
+        </FileContextProvider>
+      </MantineProvider>,
+    );
+    expect(guardErrors(spy)).toHaveLength(0);
+    spy.mockRestore();
+  });
+});
+
+describe("useFileContext — render-phase misuse guard", () => {
+  // useFileContext subscribes to files + pinnedFiles only, so a render-time read
+  // of the SELECTION slice through its exposed selectors would silently go
+  // stale. The guard covers exactly those selectors and nothing else.
+  const guardErrors = (spy: ReturnType<typeof vi.spyOn>) =>
+    spy.mock.calls.filter((args) =>
+      String(args[0]).includes("[useFileContext]"),
+    );
+
+  const renderWithGuard = (node: React.ReactNode) => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    render(
+      <MantineProvider>
+        <FileContextProvider enableUrlSync={false}>{node}</FileContextProvider>
+      </MantineProvider>,
+    );
+    const errors = guardErrors(spy);
+    spy.mockRestore();
+    return errors;
+  };
+
+  function SelectionReadDuringRender() {
+    const { selectors } = useFileContext();
+    selectors.getSelectedFiles(); // unsubscribed slice — must be flagged
+    return null;
+  }
+
+  function FilesReadDuringRender() {
+    const { selectors } = useFileContext();
+    selectors.getStirlingFileStubs(); // files slice IS subscribed — legitimate
+    return null;
+  }
+
+  function SelectionReadFromEffect() {
+    const { selectors } = useFileContext();
+    useEffect(() => {
+      selectors.getSelectedFiles(); // after commit — legitimate
+    }, [selectors]);
+    return null;
+  }
+
+  it("flags a selection read during render", () => {
+    expect(
+      renderWithGuard(<SelectionReadDuringRender />).length,
+    ).toBeGreaterThan(0);
+  });
+
+  it("does not flag reads of a slice it subscribes to", () => {
+    expect(renderWithGuard(<FilesReadDuringRender />)).toHaveLength(0);
+  });
+
+  it("does not flag selection reads from effects", () => {
+    expect(renderWithGuard(<SelectionReadFromEffect />)).toHaveLength(0);
+  });
+});
diff --git a/frontend/editor/src/core/contexts/file/fileHooks.ts b/frontend/editor/src/core/contexts/file/fileHooks.ts
index fcd3ba7ef7..f5c1bfc460 100644
--- a/frontend/editor/src/core/contexts/file/fileHooks.ts
+++ b/frontend/editor/src/core/contexts/file/fileHooks.ts
@@ -1,27 +1,187 @@
 /**
- * Performant file hooks - Clean API using FileContext
+ * Performant file hooks — selector subscriptions over the FileStateStore.
+ * Each hook re-renders its consumer only when the slice it selects changes,
+ * not on every file-state change.
  */
 
-import { useContext, useMemo } from "react";
+import { useContext, useLayoutEffect, useMemo, useRef } from "react";
+import { useSyncExternalStoreWithSelector } from "use-sync-external-store/shim/with-selector.js";
 import {
-  FileStateContext,
+  FileStoreContext,
   FileActionsContext,
+  FileStateStore,
   FileContextStateValue,
   FileContextActionsValue,
 } from "@app/contexts/file/contexts";
-import { StirlingFileStub, StirlingFile } from "@app/types/fileContext";
+import {
+  StirlingFileStub,
+  StirlingFile,
+  FileContextState,
+  FileContextSelectors,
+} from "@app/types/fileContext";
 import { FileId } from "@app/types/file";
 
+const GUARD_MISUSE = process.env.NODE_ENV !== "production";
+
+/** Shallow equality over object/array slices assembled by selectors. */
+export function shallowEqual(a: unknown, b: unknown): boolean {
+  if (Object.is(a, b)) return true;
+  if (
+    typeof a !== "object" ||
+    a === null ||
+    typeof b !== "object" ||
+    b === null
+  ) {
+    return false;
+  }
+  const keysA = Object.keys(a);
+  if (keysA.length !== Object.keys(b).length) return false;
+  return keysA.every((key) =>
+    Object.is(
+      (a as Record<string, unknown>)[key],
+      (b as Record<string, unknown>)[key],
+    ),
+  );
+}
+
+function useFileStore(): FileStateStore {
+  const store = useContext(FileStoreContext);
+  if (!store) {
+    throw new Error("File hooks must be used within a FileContextProvider");
+  }
+  return store;
+}
+
+/**
+ * Subscribe to a slice of file state. The component re-renders only when the
+ * selected value changes (Object.is by default; pass shallowEqual for slices
+ * assembled into fresh objects/arrays).
+ */
+export function useFileSelector<T>(
+  selector: (state: FileContextState) => T,
+  isEqual?: (a: T, b: T) => boolean,
+): T {
+  const store = useFileStore();
+  return useSyncExternalStoreWithSelector(
+    store.subscribe,
+    store.getState,
+    store.getState,
+    selector,
+    isEqual,
+  );
+}
+
+/** Selectors that read `ui.selectedFileIds`. A hook that doesn't subscribe to
+ *  that slice must not let consumers call these during render. */
+const SELECTION_SELECTORS: ReadonlyArray<keyof FileContextSelectors> = [
+  "getSelectedFiles",
+  "getSelectedStirlingFileStubs",
+];
+
+/** Wrap selectors so a call made during render logs loudly (dev/test only).
+ *  Render-time vs event-time isn't statically lintable, so this is the guard.
+ *  `keys` limits the wrap to the selectors whose slice the calling hook does NOT
+ *  subscribe to — the rest are safe to read during render and pass through. */
+function guardSelectors(
+  selectors: FileContextSelectors,
+  isRendering: () => boolean,
+  hookName: string,
+  keys?: ReadonlyArray<keyof FileContextSelectors>,
+): FileContextSelectors {
+  const guardedKeys =
+    keys ?? (Object.keys(selectors) as Array<keyof FileContextSelectors>);
+  const guarded: Record<string, unknown> = { ...selectors };
+  for (const key of guardedKeys) {
+    const original = selectors[key] as unknown as (
+      ...args: unknown[]
+    ) => unknown;
+    guarded[key] = (...args: unknown[]) => {
+      if (isRendering()) {
+        console.error(
+          `[${hookName}] ${key}() was called during render. This read doesn't ` +
+            "subscribe to the state it depends on, so the UI can go stale — use " +
+            "useFileSelector / useFileSelection / useAllFiles for render-time data.",
+        );
+      }
+      return original(...args);
+    };
+  }
+  return guarded as unknown as FileContextSelectors;
+}
+
+/**
+ * Wrap a hook's exposed selectors in the render-phase misuse guard (no-op in
+ * production). `keys` names the selectors the calling hook doesn't subscribe to;
+ * omit it to guard every selector (for hooks that subscribe to nothing).
+ */
+function useGuardedSelectors(
+  selectors: FileContextSelectors,
+  hookName: string,
+  keys?: ReadonlyArray<keyof FileContextSelectors>,
+): FileContextSelectors {
+  // True exactly while this consumer is rendering: set on every render, cleared
+  // by the layout effect once that render commits.
+  const renderPhase = useRef(false);
+  renderPhase.current = GUARD_MISUSE;
+  useLayoutEffect(() => {
+    renderPhase.current = false;
+  });
+  return useMemo(
+    () =>
+      GUARD_MISUSE
+        ? guardSelectors(selectors, () => renderPhase.current, hookName, keys)
+        : selectors,
+    [selectors, hookName, keys],
+  );
+}
+
+/**
+ * Stable selector API with NO state subscription — never re-renders. For
+ * event-time reads (callbacks/effects), which see live state when invoked.
+ * Render-time reads need a reactive hook (useAllFiles/useFileSelector) or
+ * they go stale — calling one during render logs an error outside production.
+ */
+export function useFileSelectors(): FileContextSelectors {
+  const { selectors } = useFileStore();
+  return useGuardedSelectors(selectors, "useFileSelectors");
+}
+
+/**
+ * Position of `fileId` in the resolved file list — the SAME array useAllFiles()
+ * returns, which drops ids whose bytes haven't hydrated into memory yet, so the
+ * index lines up with what consumers actually index into. 0 when unset/absent.
+ *
+ * Selects a NUMBER, so the consumer re-renders only when the index actually
+ * moves. useAllFiles() would do the job too, but it re-renders on every
+ * unrelated stub update (thumbnail hydration, labels, …) — too costly for a
+ * high-level provider whose context value isn't memoized.
+ */
+export function useFileIndex(fileId: string | null | undefined): number {
+  // Raw (unguarded) selectors: the read below runs inside the subscription
+  // selector, so it IS reactive and the render-phase guard doesn't apply.
+  const { selectors } = useFileStore();
+  return useFileSelector((s) => {
+    if (!fileId) return 0;
+    const index = selectors
+      .getFiles(s.files.ids)
+      .findIndex((file) => file.fileId === fileId);
+    return index >= 0 ? index : 0;
+  });
+}
+
 /**
  * Hook for accessing file state (will re-render on any state change)
  * Use individual selector hooks below for better performance
  */
 export function useFileState(): FileContextStateValue {
-  const context = useContext(FileStateContext);
-  if (!context) {
-    throw new Error("useFileState must be used within a FileContextProvider");
-  }
-  return context;
+  const store = useFileStore();
+  const state = useFileSelector((s) => s);
+  // Selectors are exposed unguarded on purpose: this hook subscribes to the
+  // WHOLE state, so a render-time selector read can't go stale.
+  return useMemo(
+    () => ({ state, selectors: store.selectors }),
+    [state, store.selectors],
+  );
 }
 
 /**
@@ -39,21 +199,21 @@ export function useFileActions(): FileContextActionsValue {
  * Hook for current/primary file (first in list)
  */
 export function useCurrentFile(): { file?: File; record?: StirlingFileStub } {
-  const { state, selectors } = useFileState();
-
-  const primaryFileId = state.files.ids[0];
-  const primaryFileRecord = primaryFileId
-    ? state.files.byId[primaryFileId]
-    : undefined;
+  const { selectors } = useFileStore();
+  const { primaryFileId, record } = useFileSelector(
+    (s) => ({
+      primaryFileId: s.files.ids[0],
+      record: s.files.ids[0] ? s.files.byId[s.files.ids[0]] : undefined,
+    }),
+    shallowEqual,
+  );
 
   return useMemo(
     () => ({
       file: primaryFileId ? selectors.getFile(primaryFileId) : undefined,
-      record: primaryFileId
-        ? selectors.getStirlingFileStub(primaryFileId)
-        : undefined,
+      record,
     }),
-    [primaryFileId, primaryFileRecord, selectors],
+    [primaryFileId, record, selectors],
   );
 }
 
@@ -61,27 +221,35 @@ export function useCurrentFile(): { file?: File; record?: StirlingFileStub } {
  * Hook for file selection state and actions
  */
 export function useFileSelection() {
-  const { state, selectors } = useFileState();
+  const { selectors } = useFileStore();
   const { actions } = useFileActions();
+  const selectedFileIds = useFileSelector((s) => s.ui.selectedFileIds);
+  const selectedPageNumbers = useFileSelector((s) => s.ui.selectedPageNumbers);
+  // Only the SELECTED files' records — an unrelated file's update never
+  // re-renders selection consumers.
+  const selectedStubs = useFileSelector(
+    (s) => s.ui.selectedFileIds.map((id) => s.files.byId[id]),
+    shallowEqual,
+  );
 
   // Memoize selected files to avoid recreating arrays
   const selectedFiles = useMemo(() => {
     return selectors.getSelectedFiles();
-  }, [state.ui.selectedFileIds, state.files.byId, selectors]);
+  }, [selectedFileIds, selectedStubs, selectors]);
 
   return useMemo(
     () => ({
       selectedFiles,
-      selectedFileIds: state.ui.selectedFileIds,
-      selectedPageNumbers: state.ui.selectedPageNumbers,
+      selectedFileIds,
+      selectedPageNumbers,
       setSelectedFiles: actions.setSelectedFiles,
       setSelectedPages: actions.setSelectedPages,
       clearSelections: actions.clearSelections,
     }),
     [
       selectedFiles,
-      state.ui.selectedFileIds,
-      state.ui.selectedPageNumbers,
+      selectedFileIds,
+      selectedPageNumbers,
       actions.setSelectedFiles,
       actions.setSelectedPages,
       actions.clearSelections,
@@ -111,57 +279,64 @@ export function useFileManagement() {
  * Hook for UI state
  */
 export function useFileUI() {
-  const { state } = useFileState();
   const { actions } = useFileActions();
+  const ui = useFileSelector(
+    (s) => ({
+      isProcessing: s.ui.isProcessing,
+      processingProgress: s.ui.processingProgress,
+      hasUnsavedChanges: s.ui.hasUnsavedChanges,
+    }),
+    shallowEqual,
+  );
 
   return useMemo(
     () => ({
-      isProcessing: state.ui.isProcessing,
-      processingProgress: state.ui.processingProgress,
-      hasUnsavedChanges: state.ui.hasUnsavedChanges,
+      ...ui,
       setProcessing: actions.setProcessing,
       setUnsavedChanges: actions.setHasUnsavedChanges,
     }),
-    [state.ui, actions],
+    [ui, actions],
   );
 }
 
 /**
- * Hook for specific file by ID (optimized for individual file access)
+ * Hook for specific file by ID (optimized for individual file access):
+ * re-renders only when THAT file's record changes.
  */
 export function useStirlingFileStub(fileId: FileId): {
   file?: File;
   record?: StirlingFileStub;
 } {
-  const { state, selectors } = useFileState();
-  const fileRecord = state.files.byId[fileId];
+  const { selectors } = useFileStore();
+  const record = useFileSelector((s) => s.files.byId[fileId]);
 
   return useMemo(
     () => ({
       file: selectors.getFile(fileId),
-      record: selectors.getStirlingFileStub(fileId),
+      record,
     }),
-    [fileId, fileRecord, selectors],
+    [fileId, record, selectors],
   );
 }
 
 /**
- * Hook for all files (use sparingly - causes re-renders on file list changes)
+ * Hook for all files: re-renders on file-list changes only (not selection/UI).
  */
 export function useAllFiles(): {
   files: StirlingFile[];
   fileStubs: StirlingFileStub[];
   fileIds: FileId[];
 } {
-  const { state, selectors } = useFileState();
+  const { selectors } = useFileStore();
+  const files = useFileSelector((s) => s.files);
 
   return useMemo(
     () => ({
-      files: selectors.getFiles(),
-      fileStubs: selectors.getStirlingFileStubs(),
-      fileIds: state.files.ids,
+      files: selectors.getFiles(files.ids),
+      fileStubs: selectors.getStirlingFileStubs(files.ids),
+      fileIds: files.ids,
     }),
-    [state.files.ids, state.files.byId, selectors],
+    [files, selectors],
   );
 }
 
@@ -173,30 +348,47 @@ export function useSelectedFiles(): {
   selectedFileStubs: StirlingFileStub[];
   selectedFileIds: FileId[];
 } {
-  const { state, selectors } = useFileState();
+  const { selectors } = useFileStore();
+  const selectedFileIds = useFileSelector((s) => s.ui.selectedFileIds);
+  // Only the SELECTED files' records — see useFileSelection.
+  const selectedStubs = useFileSelector(
+    (s) => s.ui.selectedFileIds.map((id) => s.files.byId[id]),
+    shallowEqual,
+  );
 
   return useMemo(
     () => ({
       selectedFiles: selectors.getSelectedFiles(),
       selectedFileStubs: selectors.getSelectedStirlingFileStubs(),
-      selectedFileIds: state.ui.selectedFileIds,
+      selectedFileIds,
     }),
-    [state.ui.selectedFileIds, state.files.byId, selectors],
+    [selectedFileIds, selectedStubs, selectors],
   );
 }
 
-// Navigation management removed - moved to NavigationContext
-
 /**
- * Primary API hook for file context operations
- * Used by tools for core file context functionality
+ * Primary API hook for file context operations. Used by tools for core file
+ * context functionality. Re-renders only when the slices it exposes reactively
+ * (files, pinned files) change — not on selection/UI changes.
  */
 export function useFileContext() {
-  const { state, selectors } = useFileState();
+  const store = useFileStore();
   const { actions } = useFileActions();
+  const { files, pinnedFiles } = useFileSelector(
+    (s) => ({ files: s.files, pinnedFiles: s.pinnedFiles }),
+    shallowEqual,
+  );
+  // This hook subscribes to files + pinnedFiles, so those selectors are safe to
+  // read during render; the SELECTION ones aren't (no subscription to
+  // ui.selectedFileIds), so they carry the misuse guard.
+  const selectors = useGuardedSelectors(
+    store.selectors,
+    "useFileContext",
+    SELECTION_SELECTORS,
+  );
 
-  return useMemo(
-    () => ({
+  return useMemo(() => {
+    return {
       // Lifecycle management
       trackBlobUrl: actions.trackBlobUrl,
       scheduleCleanup: actions.scheduleCleanup,
@@ -213,10 +405,11 @@ export function useFileContext() {
         _operationId: string,
         _error: string,
       ) => {}, // Operation tracking not implemented
-      // File ID lookup
+      // File ID lookup (reads live state at call time)
       findFileId: (file: File) => {
-        return state.files.ids.find((id) => {
-          const record = state.files.byId[id];
+        const { files: liveFiles } = store.getState();
+        return liveFiles.ids.find((id) => {
+          const record = liveFiles.byId[id];
           return (
             record &&
             record.name === file.name &&
@@ -227,19 +420,18 @@ export function useFileContext() {
       },
 
       // Pinned files
-      pinnedFiles: state.pinnedFiles,
+      pinnedFiles,
       pinFile: actions.pinFile,
       unpinFile: actions.unpinFile,
       isFilePinned: selectors.isFilePinned,
 
       // Active files
-      activeFiles: selectors.getFiles(),
+      activeFiles: selectors.getFiles(files.ids),
       openEncryptedUnlockPrompt: actions.openEncryptedUnlockPrompt,
 
       // Direct access to actions and selectors (for advanced use cases)
       actions,
       selectors,
-    }),
-    [state, selectors, actions],
-  );
+    };
+  }, [files, pinnedFiles, actions, store, selectors]);
 }
diff --git a/frontend/editor/src/core/contexts/file/reducerIdentityGuard.test.ts b/frontend/editor/src/core/contexts/file/reducerIdentityGuard.test.ts
new file mode 100644
index 0000000000..c250c3e4dc
--- /dev/null
+++ b/frontend/editor/src/core/contexts/file/reducerIdentityGuard.test.ts
@@ -0,0 +1,78 @@
+import { describe, it, expect, vi, afterEach } from "vitest";
+import { withReducerIdentityGuard } from "@app/contexts/file/FileReducer";
+import type {
+  FileContextState,
+  FileContextAction,
+  StirlingFileStub,
+} from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+
+const stub = (id: string): StirlingFileStub =>
+  ({ id: id as FileId, name: `${id}.pdf` }) as StirlingFileStub;
+
+function baseState(): FileContextState {
+  return {
+    files: { ids: ["a" as FileId], byId: { ["a" as FileId]: stub("a") } },
+    pinnedFiles: new Set<FileId>(),
+    ui: {
+      selectedFileIds: [],
+      selectedPageNumbers: [],
+      isProcessing: false,
+      processingProgress: 0,
+      hasUnsavedChanges: false,
+      errorFileIds: [],
+    },
+  };
+}
+
+const guardErrors = (spy: ReturnType<typeof vi.spyOn>) =>
+  spy.mock.calls.filter((a) => String(a[0]).includes("[FileReducer]"));
+
+afterEach(() => vi.restoreAllMocks());
+
+describe("withReducerIdentityGuard", () => {
+  it("warns when a slice is reallocated but unchanged", () => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    // Bad reducer: rebuilds `files` (new ref) with identical contents.
+    const guarded = withReducerIdentityGuard((s) => ({
+      ...s,
+      files: { ids: [...s.files.ids], byId: { ...s.files.byId } },
+    }));
+    guarded(baseState(), { type: "NOOP" } as unknown as FileContextAction);
+    expect(guardErrors(spy)).toHaveLength(1);
+    expect(String(guardErrors(spy)[0][0])).toContain("state.files");
+  });
+
+  it("stays quiet when a slice genuinely changes", () => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    const guarded = withReducerIdentityGuard((s) => ({
+      ...s,
+      files: {
+        ids: [...s.files.ids, "b" as FileId],
+        byId: { ...s.files.byId, ["b" as FileId]: stub("b") },
+      },
+    }));
+    guarded(baseState(), { type: "NOOP" } as unknown as FileContextAction);
+    expect(guardErrors(spy)).toHaveLength(0);
+  });
+
+  it("stays quiet when the reducer returns the same state reference", () => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    const guarded = withReducerIdentityGuard((s) => s);
+    const state = baseState();
+    expect(
+      guarded(state, { type: "NOOP" } as unknown as FileContextAction),
+    ).toBe(state);
+    expect(guardErrors(spy)).toHaveLength(0);
+  });
+
+  it("flags a needless ui reallocation", () => {
+    const spy = vi.spyOn(console, "error").mockImplementation(() => {});
+    const guarded = withReducerIdentityGuard((s) => ({
+      ...s,
+      ui: { ...s.ui },
+    }));
+    guarded(baseState(), { type: "NOOP" } as unknown as FileContextAction);
+    expect(String(guardErrors(spy)[0][0])).toContain("state.ui");
+  });
+});
diff --git a/frontend/editor/src/core/contexts/file/useFileIndex.test.tsx b/frontend/editor/src/core/contexts/file/useFileIndex.test.tsx
new file mode 100644
index 0000000000..e10bfed517
--- /dev/null
+++ b/frontend/editor/src/core/contexts/file/useFileIndex.test.tsx
@@ -0,0 +1,128 @@
+import { describe, it, expect } from "vitest";
+import { render, act } from "@testing-library/react";
+import {
+  FileStoreContext,
+  type FileStateStore,
+} from "@app/contexts/file/contexts";
+import { useFileIndex } from "@app/contexts/file/fileHooks";
+import type {
+  FileContextSelectors,
+  FileContextState,
+} from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+
+/**
+ * useFileIndex replaced a render-time `selectors.getFiles()` read in
+ * ViewerContext, which never re-subscribed and so survived a file-list change
+ * that moved the active file. These tests drive a hand-built store (the real one
+ * needs IndexedDB to populate its File map) and lock the two properties the fix
+ * depends on: the index tracks the RESOLVED file list, and the consumer
+ * re-renders only when the index actually moves.
+ */
+
+function makeStore(ids: string[], resolved: string[]) {
+  let state: FileContextState = {
+    files: { ids: ids as FileId[], byId: {} },
+  } as FileContextState;
+  let resolvedIds = new Set(resolved);
+  const listeners = new Set<() => void>();
+
+  // Mirrors createFileSelectors.getFiles: maps ids through the in-memory File
+  // map and DROPS the ones whose bytes haven't landed yet.
+  const selectors = {
+    getFiles: (requested?: FileId[]) =>
+      (requested ?? state.files.ids)
+        .filter((id) => resolvedIds.has(id as string))
+        .map((id) => ({ fileId: id })),
+  } as unknown as FileContextSelectors;
+
+  const store: FileStateStore = {
+    getState: () => state,
+    subscribe: (listener) => {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    selectors,
+  };
+
+  const update = (nextIds: string[], nextResolved: string[] = nextIds) => {
+    act(() => {
+      state = {
+        files: { ids: nextIds as FileId[], byId: {} },
+      } as FileContextState;
+      resolvedIds = new Set(nextResolved);
+      listeners.forEach((listener) => listener());
+    });
+  };
+
+  return { store, update };
+}
+
+function setup(ids: string[], resolved: string[], fileId: string | null) {
+  const { store, update } = makeStore(ids, resolved);
+  let renders = 0;
+  let index = -1;
+
+  function Probe() {
+    index = useFileIndex(fileId);
+    renders++;
+    return null;
+  }
+
+  render(
+    <FileStoreContext.Provider value={store}>
+      <Probe />
+    </FileStoreContext.Provider>,
+  );
+
+  return { update, get: () => index, renderCount: () => renders };
+}
+
+describe("useFileIndex", () => {
+  it("reports the active file's position in the resolved list", () => {
+    const { get } = setup(["a", "b", "c"], ["a", "b", "c"], "c");
+    expect(get()).toBe(2);
+  });
+
+  it("skips ids whose bytes haven't hydrated, matching what consumers index into", () => {
+    // "a" has no File yet, so getFiles() yields [b, c] — "c" sits at 1, not 2.
+    const { get } = setup(["a", "b", "c"], ["b", "c"], "c");
+    expect(get()).toBe(1);
+  });
+
+  it("updates when the list reorders under a stable active file", () => {
+    // The regression this fixes: activeFileId never changed, so the old
+    // useMemo kept returning the pre-reorder index.
+    const { get, update } = setup(["a", "b", "c"], ["a", "b", "c"], "c");
+    expect(get()).toBe(2);
+    update(["c", "a", "b"]);
+    expect(get()).toBe(0);
+  });
+
+  it("updates when a file ahead of the active one is removed", () => {
+    const { get, update } = setup(["a", "b", "c"], ["a", "b", "c"], "c");
+    update(["b", "c"]);
+    expect(get()).toBe(1);
+  });
+
+  it("falls back to 0 when the active file leaves the list", () => {
+    const { get, update } = setup(["a", "b"], ["a", "b"], "b");
+    update(["a"]);
+    expect(get()).toBe(0);
+  });
+
+  it("returns 0 with no active file", () => {
+    const { get } = setup(["a", "b"], ["a", "b"], null);
+    expect(get()).toBe(0);
+  });
+
+  it("does not re-render when a store change leaves the index alone", () => {
+    // Selecting a NUMBER is the point: appending after the active file, or any
+    // unrelated stub churn, must not re-render the consumer.
+    const { get, update, renderCount } = setup(["a", "b"], ["a", "b"], "a");
+    const before = renderCount();
+    update(["a", "b", "c"]);
+    expect(get()).toBe(0);
+    expect(renderCount()).toBe(before);
+  });
+});
diff --git a/frontend/editor/src/core/tools/Convert.tsx b/frontend/editor/src/core/tools/Convert.tsx
index de29e4ae94..b1d214f1a6 100644
--- a/frontend/editor/src/core/tools/Convert.tsx
+++ b/frontend/editor/src/core/tools/Convert.tsx
@@ -1,7 +1,7 @@
 import { useEffect, useRef } from "react";
 import { useTranslation } from "react-i18next";
 import { useEndpointEnabled } from "@app/hooks/useEndpointConfig";
-import { useFileState } from "@app/contexts/FileContext";
+import { useAllFiles } from "@app/contexts/FileContext";
 import { useViewScopedFiles } from "@app/hooks/tools/shared/useViewScopedFiles";
 
 import { createToolFlow } from "@app/components/tools/shared/createToolFlow";
@@ -14,8 +14,7 @@ import { BaseToolProps, ToolComponent } from "@app/types/tool";
 
 const Convert = ({ onPreviewFile, onComplete, onError }: BaseToolProps) => {
   const { t } = useTranslation();
-  const { selectors } = useFileState();
-  const activeFiles = selectors.getFiles();
+  const { files: activeFiles } = useAllFiles();
   const selectedFiles = useViewScopedFiles();
   const scrollContainerRef = useRef<HTMLDivElement>(null);
 
diff --git a/frontend/editor/src/desktop/hooks/useExitWarning.ts b/frontend/editor/src/desktop/hooks/useExitWarning.ts
index 1e6b4423fc..4a5b16fb8f 100644
--- a/frontend/editor/src/desktop/hooks/useExitWarning.ts
+++ b/frontend/editor/src/desktop/hooks/useExitWarning.ts
@@ -1,14 +1,14 @@
 import { useEffect, useRef } from "react";
 import { getCurrentWindow } from "@tauri-apps/api/window";
 import { message } from "@tauri-apps/plugin-dialog";
-import { useFileState, useFileActions } from "@app/contexts/FileContext";
+import { useFileSelectors, useFileActions } from "@app/contexts/FileContext";
 import { downloadFile } from "@app/services/downloadService";
 import type { StirlingFileStub } from "@app/types/fileContext";
 import { useTranslation } from "react-i18next";
 
 export function useExitWarning() {
   const { t } = useTranslation();
-  const { selectors } = useFileState();
+  const selectors = useFileSelectors();
   const { actions: fileActions } = useFileActions();
   const selectorsRef = useRef(selectors);
   const isClosingRef = useRef(false);
diff --git a/frontend/editor/src/desktop/hooks/useSaveShortcut.ts b/frontend/editor/src/desktop/hooks/useSaveShortcut.ts
index 927d5f06cf..b3faa64bb7 100644
--- a/frontend/editor/src/desktop/hooks/useSaveShortcut.ts
+++ b/frontend/editor/src/desktop/hooks/useSaveShortcut.ts
@@ -1,5 +1,9 @@
 import { useEffect } from "react";
-import { useFileState, useFileActions } from "@app/contexts/FileContext";
+import {
+  useFileSelector,
+  useFileSelectors,
+  useFileActions,
+} from "@app/contexts/FileContext";
 // Save through the export gateway so a "run on export" policy enforces before
 // the file is written out (no-op when no such policy is active).
 import { downloadFileWithPolicy as downloadFile } from "@app/services/exportWithPolicy";
@@ -10,7 +14,8 @@ import { downloadFileWithPolicy as downloadFile } from "@app/services/exportWith
  * Matches WorkbenchBar button behavior: saves selected files if any, otherwise all files
  */
 export function useSaveShortcut() {
-  const { selectors, state } = useFileState();
+  const selectors = useFileSelectors();
+  const currentSelectedFileIds = useFileSelector((s) => s.ui.selectedFileIds);
   const { actions: fileActions } = useFileActions();
 
   useEffect(() => {
@@ -20,7 +25,7 @@ export function useSaveShortcut() {
         event.preventDefault();
 
         // Get selected files or all files if nothing selected
-        const selectedFileIds = state.ui.selectedFileIds;
+        const selectedFileIds = currentSelectedFileIds;
         const filesToSave =
           selectedFileIds.length > 0
             ? selectors.getFiles(selectedFileIds)
@@ -63,5 +68,5 @@ export function useSaveShortcut() {
 
     document.addEventListener("keydown", handleKeyDown);
     return () => document.removeEventListener("keydown", handleKeyDown);
-  }, [selectors, state.ui.selectedFileIds, fileActions]);
+  }, [selectors, currentSelectedFileIds, fileActions]);
 }
diff --git a/frontend/editor/src/proprietary/components/policies/classificationLabelTargets.test.ts b/frontend/editor/src/proprietary/components/policies/classificationLabelTargets.test.ts
new file mode 100644
index 0000000000..74baf59006
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/policies/classificationLabelTargets.test.ts
@@ -0,0 +1,44 @@
+import { describe, it, expect } from "vitest";
+import { classificationLabelTargetStubs } from "@app/components/policies/usePolicyAutoRun";
+import type { StirlingFileStub } from "@app/types/fileContext";
+
+// Loosely-typed builder: FileId is a branded string, so accept plain string ids
+// in tests and cast — classificationLabelTargetStubs only reads id/parent/sources.
+const stub = (s: {
+  id: string;
+  parentFileId?: string;
+  sourceFileIds?: string[];
+}): StirlingFileStub => s as unknown as StirlingFileStub;
+
+const ids = (stubs: StirlingFileStub[]) => stubs.map((s) => s.id as string);
+
+describe("classificationLabelTargetStubs", () => {
+  it("targets the run's own file when it's still the leaf", () => {
+    const stubs = [stub({ id: "a" }), stub({ id: "b" })];
+    expect(ids(classificationLabelTargetStubs("a", stubs))).toEqual(["a"]);
+  });
+
+  it("targets a descendant leaf when the file was edited during the run", () => {
+    // "a" was consumed into leaf "a2" (edit forked a new version mid-run).
+    const stubs = [stub({ id: "a2", sourceFileIds: ["a"] })];
+    expect(ids(classificationLabelTargetStubs("a", stubs))).toEqual(["a2"]);
+  });
+
+  it("targets a direct child via parentFileId", () => {
+    const stubs = [stub({ id: "a2", parentFileId: "a" })];
+    expect(ids(classificationLabelTargetStubs("a", stubs))).toEqual(["a2"]);
+  });
+
+  it("returns the stubs themselves, so the caller can see what's already tagged", () => {
+    const target = stub({ id: "a" });
+    expect(classificationLabelTargetStubs("a", [target])[0]).toBe(target);
+  });
+
+  it("is empty when the document has left the workspace (file closed)", () => {
+    // No fallback to the run's own id: stamping a consumed id would no-op
+    // anyway, and an empty result lets the caller settle without downloading.
+    expect(classificationLabelTargetStubs("a", [stub({ id: "z" })])).toEqual(
+      [],
+    );
+  });
+});
diff --git a/frontend/editor/src/proprietary/components/policies/dispatchSemaphore.test.ts b/frontend/editor/src/proprietary/components/policies/dispatchSemaphore.test.ts
new file mode 100644
index 0000000000..355d8b5526
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/policies/dispatchSemaphore.test.ts
@@ -0,0 +1,47 @@
+import { describe, it, expect, beforeEach } from "vitest";
+import {
+  acquireDispatchSlot,
+  releaseDispatchSlot,
+  resetDispatchSemaphoreForTests,
+} from "@app/components/policies/dispatchSemaphore";
+
+// Drain the microtask queue so an acquire's await-resume AND the caller's .then
+// have both run.
+const flush = () => new Promise((r) => setTimeout(r, 0));
+
+beforeEach(() => resetDispatchSemaphoreForTests());
+
+describe("dispatchSemaphore", () => {
+  it("lets up to 4 acquire without waiting, then blocks the 5th", async () => {
+    for (let i = 0; i < 4; i++) await acquireDispatchSlot();
+    let fifthAcquired = false;
+    void acquireDispatchSlot().then(() => {
+      fifthAcquired = true;
+    });
+    await flush();
+    expect(fifthAcquired).toBe(false);
+    releaseDispatchSlot();
+    await flush();
+    expect(fifthAcquired).toBe(true);
+  });
+
+  it("serves a priority (chained) waiter before earlier normal waiters", async () => {
+    for (let i = 0; i < 4; i++) await acquireDispatchSlot(); // pool full
+    const order: string[] = [];
+    // Two normal (new-file) dispatches queue first…
+    void acquireDispatchSlot(false).then(() => order.push("normal-1"));
+    void acquireDispatchSlot(false).then(() => order.push("normal-2"));
+    // …then a chained dispatch arrives — it must jump ahead.
+    void acquireDispatchSlot(true).then(() => order.push("chained"));
+    await flush();
+
+    releaseDispatchSlot();
+    await flush();
+    releaseDispatchSlot();
+    await flush();
+    releaseDispatchSlot();
+    await flush();
+
+    expect(order).toEqual(["chained", "normal-1", "normal-2"]);
+  });
+});
diff --git a/frontend/editor/src/proprietary/components/policies/dispatchSemaphore.ts b/frontend/editor/src/proprietary/components/policies/dispatchSemaphore.ts
new file mode 100644
index 0000000000..d5119e5923
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/policies/dispatchSemaphore.ts
@@ -0,0 +1,42 @@
+/**
+ * Bounded concurrency for policy run-dispatch uploads.
+ *
+ * Each dispatch POSTs a file's bytes; firing a whole drop at once saturates the
+ * browser's per-origin connection pool, so status polls and output downloads of
+ * already-running files queue behind the pending uploads and nothing visibly
+ * progresses. A small window keeps connections free.
+ *
+ * `priority` (a chained/downstream dispatch) jumps to the FRONT of the queue, so
+ * a file already mid-chain finishes its whole policy flow before a brand-new
+ * file's first policy starts. Without it a chained dispatch would sit behind the
+ * entire first-policy wave (FIFO) — e.g. classification wouldn't start on any
+ * file until security had finished on all of them.
+ */
+const MAX_CONCURRENT_DISPATCHES = 4;
+
+let slotsInUse = 0;
+const waiters: Array<() => void> = [];
+
+export async function acquireDispatchSlot(priority = false): Promise<void> {
+  if (slotsInUse < MAX_CONCURRENT_DISPATCHES) {
+    slotsInUse++;
+    return;
+  }
+  await new Promise<void>((resolve) => {
+    if (priority) waiters.unshift(resolve);
+    else waiters.push(resolve);
+  });
+}
+
+export function releaseDispatchSlot(): void {
+  const next = waiters.shift();
+  // Hand the slot straight to the next waiter, else free it.
+  if (next) next();
+  else slotsInUse--;
+}
+
+/** Test-only: reset module state between cases. */
+export function resetDispatchSemaphoreForTests(): void {
+  slotsInUse = 0;
+  waiters.length = 0;
+}
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx
index 5837bfb285..bc4fa54dff 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx
@@ -2,21 +2,8 @@ import { describe, it, expect, vi, beforeEach } from "vitest";
 import { renderHook, act } from "@testing-library/react";
 
 /**
- * Batch integration test for the policy auto-run orchestration, at the scale the
- * user hit the bug: 61 files uploaded at once, two active upload policies
- * (Classification → Security) chained. Drives the REAL policyRunStore + the REAL
- * hook effects (dispatch → poll → import → chain), mocking only the IO boundaries
- * (network, storage, thumbnail/stub creation).
- *
- * Proves the invariants the user asked for:
- *  - 61 files ⇒ exactly 122 runs (61 classification, then 61 security).
- *  - Delivery is SILENT + in place (consumeFiles called with { silent: true }),
- *    never adding a second copy — the workspace never grows past 61.
- *  - No runaway: if the loop guard regressed, the run count would blow past 122
- *    (or the test would time out), so an exact 122 is a hard regression gate.
- *  - Closing all files mid-run does NOT re-open them: with the workspace emptied,
- *    outputs are delivered to storage (persistVersionedOutputs), never re-added
- *    to the workspace via consumeFiles.
+ * Batch integration test (61 files, two chained upload policies) driving the real
+ * store + hook effects, IO mocked. Classification is forced last (see the sort).
  */
 
 const FILE_COUNT = 61;
@@ -25,13 +12,15 @@ const FILE_COUNT = 61;
 // the workbench, mirrored into useAllFiles. consumeFiles mutates it in place
 // (input id → output id) exactly as the real silent reducer would.
 const mocks = vi.hoisted(() => ({
-  workspace: [] as Array<{ id: string }>,
+  workspace: [] as Array<{ id: string; classificationLabels?: string[] }>,
   consumeSilentCalls: 0,
   consumeNonSilentCalls: 0,
   persistCalls: 0,
   addFilesCalls: 0,
   stubCounter: 0,
   backendOutCounter: 0,
+  dispatchInFlight: 0,
+  maxDispatchInFlight: 0,
   bumpRevision: vi.fn(),
   runStoredPolicy: vi.fn(),
   getPolicyRun: vi.fn(),
@@ -66,7 +55,8 @@ vi.mock("@app/contexts/IndexedDBContext", () => ({
 vi.mock("@app/hooks/usePolicies", () => ({
   usePolicies: () => ({
     policies: {
-      // Classification runs first (order 0), Security second (order 1).
+      // Classification is configured first (order 0) but is FORCED to run last
+      // by the orchestrator; Security (order 1) therefore runs first.
       classification: {
         configured: true,
         status: "active",
@@ -107,7 +97,9 @@ vi.mock("@app/services/fileStubHelpers", () => ({
   createStirlingFilesAndStubs: mocks.createStirlingFilesAndStubs,
 }));
 vi.mock("@app/services/fileClassification", () => ({
-  readClassificationLabelsFromFile: vi.fn().mockResolvedValue(null),
+  // Classification always resolves labels here, so the metadata-only import path
+  // stamps them onto the stub.
+  readClassificationLabelsFromFile: vi.fn().mockResolvedValue(["Invoice"]),
 }));
 
 import { usePolicyAutoRun } from "@app/components/policies/usePolicyAutoRun";
@@ -141,6 +133,8 @@ beforeEach(() => {
   mocks.addFilesCalls = 0;
   mocks.stubCounter = 0;
   mocks.backendOutCounter = 0;
+  mocks.dispatchInFlight = 0;
+  mocks.maxDispatchInFlight = 0;
 
   mocks.workspace = Array.from({ length: FILE_COUNT }, (_, i) => ({
     id: `file-${i}`,
@@ -155,15 +149,31 @@ beforeEach(() => {
   mocks.persistVersionedOutputs.mockImplementation(async () => {
     mocks.persistCalls += 1;
   });
-  mocks.updateFileMetadata.mockResolvedValue(false);
+  mocks.updateFileMetadata.mockResolvedValue(true);
   mocks.downloadPolicyOutput.mockResolvedValue(
     new Blob(["x"], { type: "application/pdf" }),
   );
+  // Apply stub updates to the shared workspace, as the real reducer does — the
+  // label stamp's second pass reads them back to stay idempotent.
+  mocks.updateStirlingFileStub.mockImplementation(
+    (id: string, updates: Record<string, unknown>) => {
+      const stub = mocks.workspace.find((s) => s.id === id);
+      if (stub) Object.assign(stub, updates);
+    },
+  );
 
   // Each dispatch gets a unique run id; the run's single backend output likewise.
-  mocks.runStoredPolicy.mockImplementation(
-    async () => `run-${mocks.stubCounter++}`,
-  );
+  // Takes real time so overlapping dispatches are measurable (the upload window).
+  mocks.runStoredPolicy.mockImplementation(async () => {
+    mocks.dispatchInFlight++;
+    mocks.maxDispatchInFlight = Math.max(
+      mocks.maxDispatchInFlight,
+      mocks.dispatchInFlight,
+    );
+    await new Promise((resolve) => setTimeout(resolve, 2));
+    mocks.dispatchInFlight--;
+    return `run-${mocks.stubCounter++}`;
+  });
   mocks.getPolicyRun.mockImplementation(async (runId: string) => ({
     runId,
     policyId: null,
@@ -225,8 +235,8 @@ async function runUntilSettled(expectedRuns: number) {
   });
 }
 
-describe("policy auto-run — 61-file batch through a Classification → Security chain", () => {
-  it("produces exactly 122 runs (61 classification, then 61 security)", async () => {
+describe("policy auto-run — 61-file batch through a Security → Classification chain", () => {
+  it("produces exactly 122 runs (61 security, then 61 classification)", async () => {
     await runUntilSettled(FILE_COUNT * 2);
 
     const classification = latestRuns.filter(
@@ -239,15 +249,26 @@ describe("policy auto-run — 61-file batch through a Classification → Securit
     expect(latestRuns).toHaveLength(FILE_COUNT * 2);
   });
 
-  it("delivers every output SILENTLY in place — workspace never grows past 61", async () => {
+  it("bounds concurrent dispatch uploads so polls/downloads keep connections", async () => {
+    await runUntilSettled(FILE_COUNT * 2);
+    expect(mocks.maxDispatchInFlight).toBeGreaterThan(1); // still parallel…
+    expect(mocks.maxDispatchInFlight).toBeLessThanOrEqual(4); // …but windowed
+  });
+
+  it("versions on Security in place, tags on Classification — workspace never grows past 61", async () => {
     await runUntilSettled(FILE_COUNT * 2);
 
-    // 122 deliveries, all silent (background), none via the disruptive path.
-    expect(mocks.consumeSilentCalls).toBe(FILE_COUNT * 2);
+    // Only the 61 Security runs fork a version, and every one silently in place.
+    expect(mocks.consumeSilentCalls).toBe(FILE_COUNT);
     expect(mocks.consumeNonSilentCalls).toBe(0);
+    // Classification never forks a version — it only stamps labels onto the stub.
+    expect(mocks.updateStirlingFileStub).toHaveBeenCalledTimes(FILE_COUNT);
+    for (const call of mocks.updateStirlingFileStub.mock.calls) {
+      expect(call[1]).toEqual({ classificationLabels: ["Invoice"] });
+    }
     // Never added as brand-new files either.
     expect(mocks.addFilesCalls).toBe(0);
-    // In-place versioning: each file replaced twice, count unchanged.
+    // In-place versioning + metadata-only tagging: count unchanged.
     expect(mocks.workspace).toHaveLength(FILE_COUNT);
   });
 
@@ -273,8 +294,8 @@ describe("policy auto-run — 61-file batch through a Classification → Securit
       );
     });
 
-    // Still fully processed (chain intact), but delivered to STORAGE, never
-    // re-added to the workbench — the workspace stays empty.
+    // Still fully processed (chain intact), but Security's versions went to
+    // STORAGE, never re-added to the workbench — the workspace stays empty.
     expect(latestRuns).toHaveLength(FILE_COUNT * 2);
     expect(mocks.workspace).toHaveLength(0);
     expect(mocks.consumeSilentCalls).toBe(0);
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx
new file mode 100644
index 0000000000..b67648e7fc
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx
@@ -0,0 +1,293 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { renderHook, act } from "@testing-library/react";
+
+/**
+ * Mid-run race: classification is in flight (its labelled output is still
+ * downloading) when the user manually runs a tool on the same file — e.g.
+ * quickly redacting it — which consumes the input and forks a new leaf.
+ *
+ * The label targets must be resolved AT WRITE TIME (after the download/parse
+ * window), not snapshotted at run completion: a stale snapshot points at the
+ * consumed id, no-ops, and silently loses the labels — the file then shows the
+ * classification badge (provenance-resolved) but never gets its labels.
+ */
+
+const mocks = vi.hoisted(() => ({
+  workspace: [] as Array<{
+    id: string;
+    sourceFileIds?: string[];
+    derivedFromTool?: boolean;
+    classificationLabels?: string[];
+  }>,
+  runStoredPolicy: vi.fn(),
+  getPolicyRun: vi.fn(),
+  listPolicyRuns: vi.fn(),
+  downloadPolicyOutput: vi.fn(),
+  getStirlingFile: vi.fn(),
+  getStirlingFileStub: vi.fn(),
+  persistVersionedOutputs: vi.fn(),
+  updateFileMetadata: vi.fn(),
+  createStirlingFilesAndStubs: vi.fn(),
+  addFiles: vi.fn(),
+  updateStirlingFileStub: vi.fn(),
+  consumeFiles: vi.fn(),
+  bumpRevision: vi.fn(),
+}));
+
+// Classification chains server-side only when the AI engine is on (else it runs
+// client-side); this race is in the server import path, so force the engine on.
+vi.mock("@app/hooks/useAiEngineEnabled", () => ({
+  useAiEngineEnabled: () => true,
+}));
+vi.mock("@app/contexts/FileContext", () => ({
+  useAllFiles: () => ({ fileStubs: mocks.workspace }),
+  useFileManagement: () => ({
+    addFiles: mocks.addFiles,
+    updateStirlingFileStub: mocks.updateStirlingFileStub,
+  }),
+  useFileContext: () => ({ consumeFiles: mocks.consumeFiles }),
+}));
+vi.mock("@app/contexts/IndexedDBContext", () => ({
+  useIndexedDB: () => ({ bumpRevision: mocks.bumpRevision }),
+}));
+vi.mock("@app/hooks/usePolicies", () => ({
+  usePolicies: () => ({
+    policies: {
+      classification: {
+        configured: true,
+        status: "active",
+        backendId: "backend-classification",
+        runOn: "upload",
+        order: 0,
+        outputMode: "new_version",
+        outputName: "",
+      },
+    },
+  }),
+}));
+vi.mock("@app/services/policyApi", () => ({
+  runStoredPolicy: mocks.runStoredPolicy,
+  getPolicyRun: mocks.getPolicyRun,
+  listPolicyRuns: mocks.listPolicyRuns,
+  downloadPolicyOutput: mocks.downloadPolicyOutput,
+  resolvePolicyRunTarget: () => "saas",
+}));
+vi.mock("@app/services/fileStorage", () => ({
+  fileStorage: {
+    getStirlingFile: mocks.getStirlingFile,
+    getStirlingFileStub: mocks.getStirlingFileStub,
+    persistVersionedOutputs: mocks.persistVersionedOutputs,
+    updateFileMetadata: mocks.updateFileMetadata,
+  },
+}));
+vi.mock("@app/services/fileStubHelpers", () => ({
+  createStirlingFilesAndStubs: mocks.createStirlingFilesAndStubs,
+}));
+vi.mock("@app/services/fileClassification", () => ({
+  readClassificationLabelsFromFile: vi.fn().mockResolvedValue(["Invoice"]),
+}));
+
+import { usePolicyAutoRun } from "@app/components/policies/usePolicyAutoRun";
+import {
+  usePolicyRuns,
+  resetPolicyRuns,
+} from "@app/components/policies/policyRunStore";
+import type { PolicyRunRecord } from "@app/components/policies/policyRunStore";
+
+let latestRuns: PolicyRunRecord[] = [];
+function Harness() {
+  usePolicyAutoRun();
+  latestRuns = usePolicyRuns();
+  return null;
+}
+
+function deferred<T>() {
+  let resolve!: (value: T) => void;
+  const promise = new Promise<T>((r) => {
+    resolve = r;
+  });
+  return { promise, resolve };
+}
+
+beforeEach(() => {
+  localStorage.clear();
+  resetPolicyRuns();
+  vi.clearAllMocks();
+
+  mocks.workspace = [{ id: "file-0" }];
+
+  mocks.listPolicyRuns.mockResolvedValue([]);
+  mocks.getStirlingFile.mockResolvedValue(
+    new File(["x"], "doc.pdf", { type: "application/pdf" }),
+  );
+  mocks.getStirlingFileStub.mockResolvedValue(null);
+  mocks.updateFileMetadata.mockResolvedValue(true);
+  // Apply stub updates to the shared workspace, as the real reducer does — the
+  // label stamp's second pass reads them back to stay idempotent.
+  mocks.updateStirlingFileStub.mockImplementation(
+    (id: string, updates: Record<string, unknown>) => {
+      const stub = mocks.workspace.find((s) => s.id === id);
+      if (stub) Object.assign(stub, updates);
+    },
+  );
+  mocks.runStoredPolicy.mockResolvedValue("run-0");
+  mocks.getPolicyRun.mockResolvedValue({
+    runId: "run-0",
+    policyId: null,
+    status: "COMPLETED",
+    currentStep: 1,
+    stepCount: 1,
+    error: null,
+    outputs: [{ fileId: "backend-out-0", fileName: "doc.pdf" }],
+  });
+});
+
+async function settleImport(timeout = 8000) {
+  await act(async () => {
+    await vi.waitFor(
+      () => {
+        expect(latestRuns.filter((r) => r.imported)).toHaveLength(1);
+      },
+      { timeout, interval: 20 },
+    );
+  });
+}
+
+describe("classification vs a mid-run manual tool edit", () => {
+  it("labels land on the forked leaf when a tool consumes the file during the label download", async () => {
+    // The classified output's download hangs until we release it — this is the
+    // async window the user's edit slips into.
+    const download = deferred<Blob>();
+    mocks.downloadPolicyOutput.mockReturnValue(download.promise);
+
+    const { rerender } = renderHook(() => Harness());
+
+    // Run dispatched, completed, import started — now hanging in the window.
+    await act(async () => {
+      await vi.waitFor(
+        () => expect(mocks.downloadPolicyOutput).toHaveBeenCalled(),
+        { timeout: 8000, interval: 20 },
+      );
+    });
+
+    // User quickly redacts: the tool consumes file-0 and forks a new leaf.
+    // (derivedFromTool + sourceFileIds are what CONSUME_FILES stamps.)
+    act(() => {
+      mocks.workspace = [
+        {
+          id: "file-0~redacted",
+          sourceFileIds: ["file-0"],
+          derivedFromTool: true,
+        },
+      ];
+      rerender();
+    });
+
+    // The download finally lands.
+    download.resolve(new Blob(["x"], { type: "application/pdf" }));
+    await settleImport();
+
+    // Labels stamped onto the LIVE leaf, not no-oped on the consumed id.
+    const stampedIds = mocks.updateStirlingFileStub.mock.calls.map((c) => c[0]);
+    expect(stampedIds).toEqual(["file-0~redacted"]);
+    expect(mocks.updateStirlingFileStub).toHaveBeenCalledWith(
+      "file-0~redacted",
+      { classificationLabels: ["Invoice"] },
+    );
+    // Badge persists on the leaf: the run's outputFileIds are the tagged files.
+    expect(latestRuns[0].outputFileIds).toEqual(["file-0~redacted"]);
+  });
+
+  it("control: with no mid-run edit, labels land on the original file", async () => {
+    mocks.downloadPolicyOutput.mockResolvedValue(
+      new Blob(["x"], { type: "application/pdf" }),
+    );
+
+    renderHook(() => Harness());
+    await settleImport();
+
+    expect(mocks.updateStirlingFileStub).toHaveBeenCalledWith("file-0", {
+      classificationLabels: ["Invoice"],
+    });
+    expect(latestRuns[0].outputFileIds).toEqual(["file-0"]);
+  });
+
+  it("stamps the forked leaf when the consume lands in the same frame as the first stamp", async () => {
+    // Tighter than the case above: the consume is dispatched but hasn't rendered
+    // when the labels are stamped, so the workspace snapshot still shows file-0
+    // and that stamp no-ops against the real reducer. The post-commit second pass
+    // is what saves the labels.
+    mocks.downloadPolicyOutput.mockResolvedValue(
+      new Blob(["x"], { type: "application/pdf" }),
+    );
+    mocks.updateStirlingFileStub.mockImplementation((id: string) => {
+      // file-0 is already consumed, so its stamp is lost (no Object.assign) and
+      // the forked leaf only becomes visible afterwards. Mutate the workspace in
+      // place: the hook holds it by ref, which is what the second pass re-reads.
+      if (id === "file-0") {
+        mocks.workspace.splice(0, mocks.workspace.length, {
+          id: "file-0~redacted",
+          sourceFileIds: ["file-0"],
+        });
+        return;
+      }
+      const stub = mocks.workspace.find((s) => s.id === id);
+      if (stub) Object.assign(stub, { classificationLabels: ["Invoice"] });
+    });
+
+    renderHook(() => Harness());
+    await settleImport();
+
+    const stampedIds = mocks.updateStirlingFileStub.mock.calls.map((c) => c[0]);
+    expect(stampedIds).toEqual(["file-0", "file-0~redacted"]);
+    // The leaf becoming visible also queues its own classification run, so pick
+    // the settled one rather than assuming an index.
+    const imported = latestRuns.find((r) => r.imported);
+    expect(imported?.outputFileIds).toContain("file-0~redacted");
+  });
+});
+
+// The label read backs off between attempts (2s, then 4s), so these run on fake
+// timers — sleeping for real would hold a worker long enough to starve the suite.
+describe("classification label-read failures", () => {
+  beforeEach(() => vi.useFakeTimers());
+  afterEach(() => vi.useRealTimers());
+
+  async function settleOnFakeTime(maxMs = 30_000) {
+    for (let elapsed = 0; elapsed < maxMs; elapsed += 250) {
+      if (latestRuns.some((r) => r.imported)) return;
+      await act(async () => {
+        await vi.advanceTimersByTimeAsync(250);
+      });
+    }
+    throw new Error("classification run never settled");
+  }
+
+  it("retries a transient failure instead of leaving the run unsettled", async () => {
+    // The import effect only re-runs when the run store changes, so bailing out
+    // on a transient failure would leave this run "running" forever.
+    mocks.downloadPolicyOutput
+      .mockRejectedValueOnce(new Error("network blip"))
+      .mockResolvedValue(new Blob(["x"], { type: "application/pdf" }));
+
+    renderHook(() => Harness());
+    await settleOnFakeTime();
+
+    expect(mocks.downloadPolicyOutput).toHaveBeenCalledTimes(2);
+    expect(mocks.updateStirlingFileStub).toHaveBeenCalledWith("file-0", {
+      classificationLabels: ["Invoice"],
+    });
+  });
+
+  it("settles a run whose labels never become readable", async () => {
+    // Permanent failure: give up after the retry budget and settle unlabelled,
+    // rather than spinning the file's "running" pill indefinitely.
+    mocks.downloadPolicyOutput.mockRejectedValue(new Error("network down"));
+
+    renderHook(() => Harness());
+    await settleOnFakeTime();
+
+    expect(mocks.updateStirlingFileStub).not.toHaveBeenCalled();
+    expect(latestRuns.find((r) => r.imported)?.outputFileIds).toEqual([]);
+  });
+});
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx
index c25f80ce65..3c54e5cc42 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx
@@ -69,8 +69,17 @@ afterEach(() => vi.useRealTimers());
 
 describe("auto-run queue-rejection retry", () => {
   it("relabels a queue-rejected run as retrying, then re-dispatches it in place", async () => {
-    // The polled run comes back queue-rejected; the retry resolves the file + fires a fresh run.
-    getRunApi.mockResolvedValue(queueFullView);
+    // The polled run comes back queue-rejected once; the retry resolves the file
+    // and fires a fresh run, whose own polls then see it genuinely running.
+    getRunApi.mockResolvedValueOnce(queueFullView).mockResolvedValue({
+      runId: "run-2",
+      status: "RUNNING",
+      currentStep: 1,
+      stepCount: 2,
+      error: null,
+      errorCode: null,
+      outputs: [],
+    } as never);
     getFile.mockResolvedValue({ size: 1234 } as never);
     runStored.mockResolvedValue("run-2");
 
@@ -92,19 +101,20 @@ describe("auto-run queue-rejection retry", () => {
       return usePolicyRuns();
     });
 
-    // First poll (2s cadence) sees the rejection → relabel as a soft "retrying" row.
+    // First poll sees the rejection → relabel as a soft "retrying" row.
     await act(async () => {
       await vi.advanceTimersByTimeAsync(2000);
     });
     expect(getRun("run-1")?.retrying).toBe(true);
     expect(runStored).not.toHaveBeenCalled();
 
-    // After the first backoff window (BASE 4s) the rejected record is dropped and a fresh run fires.
+    // After the first backoff window (BASE 4s) the rejected record is dropped and
+    // a fresh run fires; its own first poll shows it genuinely running.
     await act(async () => {
-      await vi.advanceTimersByTimeAsync(4000);
+      await vi.advanceTimersByTimeAsync(6000);
     });
     expect(runStored).toHaveBeenCalledWith("backend-1", [{ size: 1234 }]);
     expect(getRun("run-1")).toBeUndefined();
-    expect(getRun("run-2")?.status).toBe("PENDING");
+    expect(getRun("run-2")?.status).toBe("RUNNING");
   });
 });
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
index ca096b6792..e475d784ea 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
@@ -39,6 +39,11 @@ import { dispatchPaygLimitReached } from "@app/services/usageLimitBridge";
 import type { FileId } from "@app/types/file";
 import { createStirlingFilesAndStubs } from "@app/services/fileStubHelpers";
 import { readClassificationLabelsFromFile } from "@app/services/fileClassification";
+import { isClassificationCategory } from "@app/data/policyCategories";
+import {
+  acquireDispatchSlot,
+  releaseDispatchSlot,
+} from "@app/components/policies/dispatchSemaphore";
 import type { StirlingFile, StirlingFileStub } from "@app/types/fileContext";
 import type { PoliciesByCategory } from "@app/types/policies";
 import { usePolicies } from "@app/hooks/usePolicies";
@@ -59,6 +64,10 @@ import {
 /** Status poll cadence. */
 const POLL_MS = 2000;
 
+/** First poll fires early so a fresh run shows real progress quickly instead of
+ *  sitting on an indeterminate spinner for a full poll interval. */
+const FIRST_POLL_MS = 500;
+
 /** The server aborts any single tool step that runs longer than its internal-API
  *  read timeout, then fails the run — so a run can legitimately stay in flight
  *  for up to this long per step. The client must keep polling at least that long,
@@ -175,7 +184,14 @@ export function usePolicyAutoRun(): void {
             // Classification policy out of the server chain when the AI engine is off.
             !(id === "classification" && !aiEnabled),
         )
-        .sort(([, a], [, b]) => (a.order ?? 0) - (b.order ?? 0))
+        // Classification runs last: it's non-blocking, so an enforcement policy
+        // running after it would fork a new version and drop the user's edits.
+        .sort(([idA, a], [idB, b]) => {
+          const ca = isClassificationCategory(idA) ? 1 : 0;
+          const cb = isClassificationCategory(idB) ? 1 : 0;
+          if (ca !== cb) return ca - cb;
+          return (a.order ?? 0) - (b.order ?? 0);
+        })
         .map(([id]) => id),
     [policies, aiEnabled],
   );
@@ -310,6 +326,7 @@ export function usePolicyAutoRun(): void {
           backendId,
           outputId as FileId,
           run.fileName,
+          true, // chained → jump the dispatch queue ahead of new files
         ).catch(() => {});
       }
     }
@@ -330,15 +347,33 @@ export function usePolicyAutoRun(): void {
   // so the enforced file appears in the app rather than only on the backend.
   useEffect(() => {
     for (const run of runs) {
+      const classification = isClassificationCategory(run.categoryId);
       if (
         run.status !== "COMPLETED" ||
         run.imported ||
-        !run.outputs?.length ||
-        importing.current.has(run.runId)
+        importing.current.has(run.runId) ||
+        // Classification settles even with no outputs (nothing to tag); other
+        // policies need an output to import.
+        (!run.outputs?.length && !classification)
       ) {
         continue;
       }
       importing.current.add(run.runId);
+      // Classification is metadata-only: stamp labels onto the current leaf of
+      // the file it ran on (no version fork). See importClassificationLabels.
+      if (classification) {
+        // Targets are resolved by importClassificationLabels AT WRITE TIME (not
+        // snapshotted here): its download/parse is an async window during which
+        // a manual tool run can consume the input and fork a new leaf, and a
+        // stale snapshot would no-op on the dead id and lose the labels.
+        void importClassificationLabels(
+          run,
+          () =>
+            classificationLabelTargetStubs(run.fileId, fileStubsRef.current),
+          { updateStirlingFileStub, bumpRevision },
+        ).finally(() => importing.current.delete(run.runId));
+        continue;
+      }
       // Honour the policy's output mode: a new file, or a new version of the
       // input file it ran on (needs that input's stub, still in the workspace).
       const outputMode = policies[run.categoryId]?.outputMode ?? "new_version";
@@ -501,6 +536,142 @@ function categoryForPolicy(
   )?.[0];
 }
 
+interface ClassificationImportContext {
+  updateStirlingFileStub: (
+    fileId: FileId,
+    updates: Partial<StirlingFileStub>,
+  ) => void;
+  bumpRevision: () => void;
+}
+
+/** Workspace stubs to tag with a classification run's labels: the file it ran
+ *  on plus any live descendants, so an edit made during the async run (which
+ *  forks a new leaf) still shows the tags. Empty once the document has left the
+ *  workspace (closed, or a reconciled run with no local input link). */
+export function classificationLabelTargetStubs(
+  runFileId: string,
+  stubs: ReadonlyArray<StirlingFileStub>,
+): StirlingFileStub[] {
+  return stubs.filter(
+    (s) =>
+      (s.id as string) === runFileId ||
+      s.parentFileId === runFileId ||
+      s.sourceFileIds?.includes(runFileId as FileId),
+  );
+}
+
+/** Attempts to read a completed run's labels before giving up, and the backoff
+ *  between them (delay × attempt). The import effect only re-runs when the run
+ *  store changes, so a transient read failure has to be retried HERE: bailing
+ *  out would leave the run unsettled and the file's "running" pill spinning
+ *  until unrelated policy activity happened to nudge the effect. */
+const LABEL_READ_ATTEMPTS = 3;
+const LABEL_READ_RETRY_MS = 2000;
+
+/**
+ * Read classification labels out of a completed run's output PDF. A 404 means
+ * that output aged out, so it's skipped; any other failure is transient and
+ * retried with backoff. Returns null when there are genuinely no labels to
+ * apply (including a run with no outputs), so the caller can settle the run.
+ */
+async function readRunLabels(run: PolicyRunRecord): Promise<string[] | null> {
+  for (let attempt = 0; attempt < LABEL_READ_ATTEMPTS; attempt++) {
+    if (attempt > 0) await delay(LABEL_READ_RETRY_MS * attempt);
+    let transientFailure = false;
+    for (const out of run.outputs) {
+      try {
+        const blob = await downloadPolicyOutput(out.fileId, run.target);
+        const file = new File([blob], out.fileName ?? run.fileName, {
+          type: blob.type || "application/pdf",
+        });
+        const labels = await readClassificationLabelsFromFile(file);
+        if (labels && labels.length > 0) return labels;
+      } catch (err) {
+        if (!isNotFoundError(err)) transientFailure = true;
+      }
+    }
+    // Every output was read (or had aged out): there are no labels to apply.
+    if (!transientFailure) return null;
+  }
+  // Out of attempts. Settle the run unlabelled rather than spin forever; the
+  // file keeps its classification badge, just without tags.
+  return null;
+}
+
+/**
+ * Stamp `labels` onto the run's live descendants in place (workspace + storage)
+ * — no versioned child, no history entry, only tags. Returns the tagged ids.
+ *
+ * Runs twice, because `resolveTargets` reads a rendered snapshot of the
+ * workspace: a CONSUME_FILES that was dispatched but not yet rendered when the
+ * first pass ran leaves its target already gone by the time UPDATE_FILE_RECORD
+ * is processed, so that stamp no-ops and the labels would be silently lost. The
+ * second pass sees the forked leaf and tags it. Each id is stamped at most once
+ * across both passes, so the pass costs nothing when no consume raced.
+ */
+async function stampClassificationLabels(
+  labels: string[],
+  resolveTargets: () => StirlingFileStub[],
+  ctx: ClassificationImportContext,
+): Promise<FileId[]> {
+  const updates = { classificationLabels: labels };
+  const tagged = new Set<FileId>();
+
+  for (let pass = 0; pass < 2; pass++) {
+    // Resolve and stamp the store in one synchronous block — no await between
+    // them, so a target can't be consumed in between. A consume AFTER the stamp
+    // is safe too: the CONSUME_FILES reducer carries classificationLabels onto
+    // the new leaf.
+    const fresh = resolveTargets().filter((s) => !tagged.has(s.id));
+    for (const stub of fresh) {
+      tagged.add(stub.id);
+      ctx.updateStirlingFileStub(stub.id, updates);
+    }
+
+    let mutated = false;
+    for (const stub of fresh) {
+      if (await fileStorage.updateFileMetadata(stub.id, updates))
+        mutated = true;
+    }
+    if (mutated) ctx.bumpRevision();
+
+    // Yield a macrotask so React processes this pass's stamps (and any consume
+    // that raced them) before the next pass re-resolves.
+    if (pass === 0) await new Promise((resolve) => setTimeout(resolve));
+  }
+  return Array.from(tagged);
+}
+
+/**
+ * Deliver a classification run: read its labels and tag the live document with
+ * them. Metadata-only — nothing is versioned.
+ */
+async function importClassificationLabels(
+  run: PolicyRunRecord,
+  resolveTargets: () => StirlingFileStub[],
+  ctx: ClassificationImportContext,
+): Promise<void> {
+  if (resolveTargets().length === 0) {
+    // The document left the workspace (closed, or a server-reconciled run with
+    // no local input link) — nothing to tag.
+    updateRun(run.runId, { imported: true });
+    return;
+  }
+  const labels = await readRunLabels(run);
+  const targetIds =
+    labels && labels.length > 0
+      ? await stampClassificationLabels(labels, resolveTargets, ctx)
+      : [];
+  // Settle either way so it stops re-importing. outputFileIds are the TAGGED
+  // workspace files (no forked version), so their policy badge persists. Safe
+  // to chain-key on: classification is always last, so nothing chains off it.
+  updateRun(run.runId, {
+    imported: true,
+    importedFileIds: run.outputs.map((o) => o.fileId),
+    outputFileIds: targetIds,
+  });
+}
+
 /**
  * Fetch a completed run's not-yet-imported output files and deliver them to the
  * workspace. Per-output, via allSettled: each output is tracked once delivered,
@@ -737,6 +908,9 @@ async function runPolicyOnFile(
   backendId: string,
   fileId: FileId,
   fileName: string,
+  // Chained (downstream) dispatch — jumps the dispatch queue so a file mid-chain
+  // finishes its flow before new files start (see acquireDispatchSlot).
+  priority = false,
 ): Promise<void> {
   // A freshly-uploaded file's bytes are written to IndexedDB asynchronously, so
   // its stub can appear in the file list a beat before getStirlingFile resolves
@@ -762,6 +936,9 @@ async function runPolicyOnFile(
     markDispatched(categoryId, fileId);
     return;
   }
+  // Bounded upload window — see MAX_CONCURRENT_DISPATCHES. Only the POST is
+  // gated; the IDB wait above never holds a slot.
+  await acquireDispatchSlot(priority);
   try {
     const target = resolvePolicyRunTarget();
     const runId = await runStoredPolicy(backendId, [file]);
@@ -783,6 +960,8 @@ async function runPolicyOnFile(
     // the absent run simply won't appear in the activity feed. If the backend did
     // start a run we never recorded, reconcileServerRuns rediscovers it.
     markDispatched(categoryId, fileId);
+  } finally {
+    releaseDispatchSlot();
   }
 }
 
@@ -803,8 +982,10 @@ export async function poll(
   // would quit while a long step is still legitimately running.
   let budgetMs = DEFAULT_STEP_COUNT * STEP_TIMEOUT_MS + POLL_GRACE_MS;
   const startedAt = Date.now();
+  let nextDelayMs = FIRST_POLL_MS;
   while (Date.now() - startedAt < budgetMs) {
-    await delay(POLL_MS);
+    await delay(nextDelayMs);
+    nextDelayMs = POLL_MS;
     let view;
     try {
       view = await getPolicyRun(runId);
diff --git a/frontend/editor/src/proprietary/components/shared/PolicyEnforcingOverlay.tsx b/frontend/editor/src/proprietary/components/shared/PolicyEnforcingOverlay.tsx
index 45dea92070..048bca15ac 100644
--- a/frontend/editor/src/proprietary/components/shared/PolicyEnforcingOverlay.tsx
+++ b/frontend/editor/src/proprietary/components/shared/PolicyEnforcingOverlay.tsx
@@ -11,6 +11,7 @@ import {
 import { ActionIcon } from "@app/ui/ActionIcon";
 import ShieldOutlinedIcon from "@mui/icons-material/ShieldOutlined";
 import CloseIcon from "@mui/icons-material/Close";
+import { policyCategoryIcon } from "@app/components/policies/policyCategoryIcon";
 import { useTranslation } from "react-i18next";
 
 interface PolicyEnforcingOverlayProps {
@@ -23,6 +24,9 @@ interface PolicyEnforcingOverlayProps {
   /** CSS colour var of the enforcing policy's accent (e.g. `var(--color-orange)`),
    *  so the icon/spinner match that policy's badge instead of a fixed blue. */
   accentVar?: string;
+  /** Category of the enforcing policy — picks its shared icon (shield for
+   *  security, label for classification, …); generic shield when unknown. */
+  categoryId?: string;
 }
 
 /**
@@ -35,6 +39,7 @@ export function PolicyEnforcingOverlay({
   zIndex = 200,
   onDismiss,
   accentVar,
+  categoryId,
 }: PolicyEnforcingOverlayProps) {
   const { t } = useTranslation();
   if (!enforcing) return null;
@@ -87,7 +92,11 @@ export function PolicyEnforcingOverlay({
                 : undefined
             }
           >
-            <ShieldOutlinedIcon style={{ fontSize: 26 }} />
+            {categoryId ? (
+              policyCategoryIcon(categoryId, { fontSize: 26 })
+            ) : (
+              <ShieldOutlinedIcon style={{ fontSize: 26 }} />
+            )}
           </ThemeIcon>
           <Text fw={600} size="sm">
             {t("policy.enforcingTitle", "Enforcing policy…")}
diff --git a/frontend/editor/src/proprietary/components/viewer/PolicyEnforcementOverlay.tsx b/frontend/editor/src/proprietary/components/viewer/PolicyEnforcementOverlay.tsx
index 75fa9cb952..71d5294f2d 100644
--- a/frontend/editor/src/proprietary/components/viewer/PolicyEnforcementOverlay.tsx
+++ b/frontend/editor/src/proprietary/components/viewer/PolicyEnforcementOverlay.tsx
@@ -71,6 +71,7 @@ export function PolicyEnforcementOverlay({ runs }: Props) {
       progress={progress}
       onDismiss={() => setDismissed(true)}
       accentVar={policyAccentVar(inFlight.categoryId)}
+      categoryId={inFlight.categoryId}
     />
   );
 }
diff --git a/frontend/editor/src/proprietary/components/viewer/Viewer.tsx b/frontend/editor/src/proprietary/components/viewer/Viewer.tsx
index e1d0cd96ab..1f04ea22ca 100644
--- a/frontend/editor/src/proprietary/components/viewer/Viewer.tsx
+++ b/frontend/editor/src/proprietary/components/viewer/Viewer.tsx
@@ -8,6 +8,7 @@ import {
   usePolicyRuns,
   type PolicyRunRecord,
 } from "@app/components/policies/policyRunStore";
+import { isClassificationCategory } from "@app/data/policyCategories";
 import { PolicyEnforcementOverlay } from "@app/components/viewer/PolicyEnforcementOverlay";
 
 type SignatureOverlayPassThrough = Pick<
@@ -29,6 +30,8 @@ const Viewer = (props: ViewerProps & SignatureOverlayPassThrough) => {
     ? allRuns.filter(
         (r: PolicyRunRecord) =>
           r.fileId === activeFileId &&
+          // Classification runs async and must never block the viewer.
+          !isClassificationCategory(r.categoryId) &&
           (POLICY_IN_FLIGHT_STATUSES.includes(r.status) || r.retrying === true),
       )
     : [];
diff --git a/frontend/editor/src/proprietary/data/policyCategories.test.ts b/frontend/editor/src/proprietary/data/policyCategories.test.ts
new file mode 100644
index 0000000000..4b4fca2b7e
--- /dev/null
+++ b/frontend/editor/src/proprietary/data/policyCategories.test.ts
@@ -0,0 +1,41 @@
+import { describe, it, expect } from "vitest";
+import {
+  isClassificationCategory,
+  pinClassificationLast,
+} from "@app/data/policyCategories";
+
+describe("isClassificationCategory", () => {
+  it("recognises the classification category and nothing else", () => {
+    expect(isClassificationCategory("classification")).toBe(true);
+    expect(isClassificationCategory("security")).toBe(false);
+    expect(isClassificationCategory("")).toBe(false);
+  });
+});
+
+describe("pinClassificationLast", () => {
+  it("moves classification to the end, preserving other order", () => {
+    expect(
+      pinClassificationLast(["classification", "security", "compliance"]),
+    ).toEqual(["security", "compliance", "classification"]);
+  });
+
+  it("leaves an order without classification untouched", () => {
+    expect(pinClassificationLast(["security", "compliance"])).toEqual([
+      "security",
+      "compliance",
+    ]);
+  });
+
+  it("is a no-op when classification is already last", () => {
+    expect(pinClassificationLast(["security", "classification"])).toEqual([
+      "security",
+      "classification",
+    ]);
+  });
+
+  it("handles classification as the only policy", () => {
+    expect(pinClassificationLast(["classification"])).toEqual([
+      "classification",
+    ]);
+  });
+});
diff --git a/frontend/editor/src/proprietary/data/policyCategories.ts b/frontend/editor/src/proprietary/data/policyCategories.ts
new file mode 100644
index 0000000000..820a93366b
--- /dev/null
+++ b/frontend/editor/src/proprietary/data/policyCategories.ts
@@ -0,0 +1,21 @@
+/** The classification policy's catalog category id. */
+export const CLASSIFICATION_CATEGORY_ID = "classification";
+
+/**
+ * Classification is metadata-only: it runs async (never blocks), never forks a
+ * version, and always runs last. This predicate gates that special handling.
+ */
+export function isClassificationCategory(categoryId: string): boolean {
+  return categoryId === CLASSIFICATION_CATEGORY_ID;
+}
+
+/**
+ * Move classification to the end of an execution order (others keep their order),
+ * so a persisted/displayed order can't place it anywhere but last.
+ */
+export function pinClassificationLast(orderedCategoryIds: string[]): string[] {
+  return [
+    ...orderedCategoryIds.filter((id) => !isClassificationCategory(id)),
+    ...orderedCategoryIds.filter((id) => isClassificationCategory(id)),
+  ];
+}
diff --git a/frontend/editor/src/proprietary/hooks/usePolicies.ts b/frontend/editor/src/proprietary/hooks/usePolicies.ts
index 8043e6b66a..389f98cd65 100644
--- a/frontend/editor/src/proprietary/hooks/usePolicies.ts
+++ b/frontend/editor/src/proprietary/hooks/usePolicies.ts
@@ -35,6 +35,7 @@ import {
   removePolicy,
 } from "@app/services/policyBackend";
 import { reorderPolicies as reorderBackendPolicies } from "@app/services/policyApi";
+import { pinClassificationLast } from "@app/data/policyCategories";
 import type { PolicyToStore } from "@app/services/policyPipeline";
 import type {
   PoliciesByCategory,
@@ -326,9 +327,12 @@ export function usePolicies() {
    * first for an instant re-render; the next reconcile re-reads the server order.
    */
   const reorderPolicies = useCallback((orderedCategoryIds: string[]) => {
-    persistPolicyOrder(orderedCategoryIds);
+    // Pin classification last so the persisted/server order matches execution
+    // (it always runs last — see usePolicyAutoRun).
+    const ordered = pinClassificationLast(orderedCategoryIds);
+    persistPolicyOrder(ordered);
     const current = loadPolicies();
-    const backendIds = orderedCategoryIds
+    const backendIds = ordered
       .map((categoryId) => current[categoryId]?.backendId)
       .filter((id): id is string => !!id);
     if (backendIds.length > 0) {
diff --git a/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.test.ts b/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.test.ts
index c5d8b9952b..2364321213 100644
--- a/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.test.ts
+++ b/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.test.ts
@@ -1,11 +1,14 @@
 import { describe, it, expect } from "vitest";
-import { buildPolicyBadgeMap } from "@app/hooks/usePolicyFileBadges";
+import {
+  buildPolicyBadgeMap,
+  reusePolicyBadgeArrays,
+} from "@app/hooks/usePolicyFileBadges";
 import type { PolicyRunRecord } from "@app/components/policies/policyRunStore";
 
-const NOW = 1_000_000;
 const labels = new Map([
   ["security", "Security"],
   ["watermark", "Watermark"],
+  ["classification", "Classification"],
 ]);
 
 function run(overrides: Partial<PolicyRunRecord>): PolicyRunRecord {
@@ -20,29 +23,24 @@ function run(overrides: Partial<PolicyRunRecord>): PolicyRunRecord {
     outputs: [],
     outputFileIds: ["out"],
     error: null,
-    startedAt: NOW - 1_000, // recent by default
+    startedAt: 0,
     ...overrides,
   };
 }
 
 describe("buildPolicyBadgeMap — badge follows the document onto derived files", () => {
-  it("badges a policy's direct output, and marks it recent within the window", () => {
-    const map = buildPolicyBadgeMap([run({})], [{ id: "out" }], labels, NOW);
-    const badges = map.get("out") ?? [];
-    expect(badges.map((b) => b.id)).toEqual(["security"]);
-    expect(badges[0].recent).toBe(true);
+  it("badges a policy's direct output", () => {
+    const map = buildPolicyBadgeMap([run({})], [{ id: "out" }], labels);
+    expect((map.get("out") ?? []).map((b) => b.id)).toEqual(["security"]);
   });
 
-  it("a versioned edit inherits the badge via parentFileId (never glows)", () => {
+  it("a versioned edit inherits the badge via parentFileId", () => {
     const map = buildPolicyBadgeMap(
       [run({})],
       [{ id: "out" }, { id: "edit", parentFileId: "out" }],
       labels,
-      NOW,
     );
-    const edit = map.get("edit") ?? [];
-    expect(edit.map((b) => b.id)).toEqual(["security"]);
-    expect(edit[0].recent).toBe(false);
+    expect((map.get("edit") ?? []).map((b) => b.id)).toEqual(["security"]);
   });
 
   it("SPLIT parts inherit the badge via sourceFileIds, though they have no parent", () => {
@@ -56,11 +54,9 @@ describe("buildPolicyBadgeMap — badge follows the document onto derived files"
         { id: "part2", sourceFileIds: ["out"] },
       ],
       labels,
-      NOW,
     );
     expect((map.get("part1") ?? []).map((b) => b.id)).toEqual(["security"]);
     expect((map.get("part2") ?? []).map((b) => b.id)).toEqual(["security"]);
-    expect((map.get("part1") ?? [])[0].recent).toBe(false);
   });
 
   it("resolves transitively when an intermediate edit was consumed/removed", () => {
@@ -70,7 +66,6 @@ describe("buildPolicyBadgeMap — badge follows the document onto derived files"
       [run({})],
       [{ id: "part", sourceFileIds: ["editGone", "out"] }],
       labels,
-      NOW,
     );
     expect((map.get("part") ?? []).map((b) => b.id)).toEqual(["security"]);
   });
@@ -83,7 +78,6 @@ describe("buildPolicyBadgeMap — badge follows the document onto derived files"
       ],
       [{ id: "merged", sourceFileIds: ["a", "b"] }],
       labels,
-      NOW,
     );
     expect((map.get("merged") ?? []).map((b) => b.id).sort()).toEqual([
       "security",
@@ -96,24 +90,33 @@ describe("buildPolicyBadgeMap — badge follows the document onto derived files"
       [run({})],
       [{ id: "out" }, { id: "unrelated", sourceFileIds: ["someUpload"] }],
       labels,
-      NOW,
     );
     expect(map.has("unrelated")).toBe(false);
   });
 
-  it("inherited badges never glow even when the source run is recent", () => {
+  it("a completed classification run badges the files it tagged", () => {
+    // Classification is metadata-only: its outputFileIds are the tagged
+    // workspace files (no forked version), so the label badge persists there.
     const map = buildPolicyBadgeMap(
-      [run({ startedAt: NOW })], // maximally recent
-      [{ id: "out" }, { id: "part", sourceFileIds: ["out"] }],
+      [
+        run({
+          categoryId: "classification",
+          fileId: "in",
+          outputFileIds: ["in"],
+          imported: true,
+        }),
+      ],
+      [{ id: "in" }],
       labels,
-      NOW,
     );
-    expect((map.get("out") ?? [])[0].recent).toBe(true);
-    expect((map.get("part") ?? [])[0].recent).toBe(false);
+    const badges = map.get("in") ?? [];
+    expect(badges.map((b) => b.id)).toEqual(["classification"]);
+    expect(badges[0].enforcing).toBeUndefined();
+    expect(badges[0].background).toBeUndefined();
   });
 });
 
-describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", () => {
+describe("buildPolicyBadgeMap — in-flight indicators", () => {
   const enforcingOn = (
     map: Map<string, { enforcing?: boolean }[]>,
     id: string,
@@ -124,7 +127,6 @@ describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", (
       [run({ status: "RUNNING", outputFileIds: [] })],
       [{ id: "in" }],
       labels,
-      NOW,
     );
     expect(enforcingOn(map, "in")).toBe(true);
   });
@@ -136,7 +138,6 @@ describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", (
       [run({ status: "COMPLETED" })],
       [{ id: "in" }],
       labels,
-      NOW,
     );
     expect(enforcingOn(before, "in")).toBe(true);
 
@@ -144,7 +145,6 @@ describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", (
       [run({ status: "COMPLETED", imported: true })],
       [{ id: "in" }],
       labels,
-      NOW,
     );
     expect(enforcingOn(after, "in")).toBe(false);
   });
@@ -155,7 +155,6 @@ describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", (
         [run({ status, outputFileIds: [] })],
         [{ id: "in" }],
         labels,
-        NOW,
       );
       expect(enforcingOn(map, "in")).toBe(false);
     }
@@ -166,7 +165,6 @@ describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", (
       [run({ status: "FAILED", retrying: true, outputFileIds: [] })],
       [{ id: "in" }],
       labels,
-      NOW,
     );
     expect(enforcingOn(map, "in")).toBe(true);
   });
@@ -176,8 +174,97 @@ describe("buildPolicyBadgeMap — enforcing spinner while a run is in flight", (
       [run({ status: "RUNNING", fileId: "", outputFileIds: [] })],
       [{ id: "in" }],
       labels,
-      NOW,
     );
     expect(enforcingOn(map, "in")).toBe(false);
   });
+
+  it("an in-flight classification run is background, never enforcing", () => {
+    // Non-blocking: shows a spinner but must never trip the enforcing flag
+    // that gates actions and overlays.
+    const map = buildPolicyBadgeMap(
+      [
+        run({
+          categoryId: "classification",
+          status: "RUNNING",
+          outputFileIds: [],
+        }),
+      ],
+      [{ id: "in" }],
+      labels,
+    );
+    const badges = map.get("in") ?? [];
+    expect(badges.map((b) => b.id)).toEqual(["classification"]);
+    expect(badges[0].background).toBe(true);
+    expect(enforcingOn(map, "in")).toBe(false);
+  });
+});
+
+describe("reusePolicyBadgeArrays — per-file identity across rebuilds", () => {
+  // buildPolicyBadgeMap allocates fresh arrays every call and the run store hands
+  // back a new `runs` array on every status poll, so without this the memoized
+  // sidebar rows get a new `policies` prop for EVERY badged file on each tick.
+  const build = (runs: PolicyRunRecord[], stubs: { id: string }[]) =>
+    buildPolicyBadgeMap(runs, stubs, labels);
+
+  const twoFiles = [{ id: "a" }, { id: "b" }];
+  // Settled + imported, so the badge is a plain one (a COMPLETED run keeps
+  // `enforcing` until its outputs land — see the in-flight tests above).
+  const settled = (id: string) =>
+    run({
+      runId: `r${id}`,
+      fileId: id,
+      outputFileIds: [id],
+      status: "COMPLETED",
+      imported: true,
+    });
+  const bothSettled = () => [settled("a"), settled("b")];
+
+  it("returns the same map when nothing changed", () => {
+    const first = build(bothSettled(), twoFiles);
+    const second = reusePolicyBadgeArrays(
+      first,
+      build(bothSettled(), twoFiles),
+    );
+    expect(second).toBe(first);
+  });
+
+  it("keeps the untouched file's array identity when another file changes", () => {
+    const first = build(bothSettled(), twoFiles);
+    // "a" goes in-flight; "b" is unaffected and must keep its exact array.
+    const next = build(
+      [
+        run({
+          runId: "ra",
+          fileId: "a",
+          outputFileIds: ["a"],
+          status: "RUNNING",
+        }),
+        settled("b"),
+      ],
+      twoFiles,
+    );
+    const second = reusePolicyBadgeArrays(first, next);
+    expect(second).not.toBe(first);
+    expect(second.get("b")).toBe(first.get("b"));
+    expect(second.get("a")).not.toBe(first.get("a"));
+    expect((second.get("a") ?? [])[0].enforcing).toBe(true);
+    expect((first.get("a") ?? [])[0].enforcing).toBeUndefined();
+  });
+
+  it("a new badged file doesn't disturb the existing files' arrays", () => {
+    const first = build(bothSettled(), twoFiles);
+    const next = build(
+      [...bothSettled(), settled("c")],
+      [...twoFiles, { id: "c" }],
+    );
+    const second = reusePolicyBadgeArrays(first, next);
+    expect(second.get("a")).toBe(first.get("a"));
+    expect(second.get("b")).toBe(first.get("b"));
+    expect((second.get("c") ?? []).map((b) => b.id)).toEqual(["security"]);
+  });
+
+  it("passes the fresh map straight through on the first build", () => {
+    const map = build(bothSettled(), twoFiles);
+    expect(reusePolicyBadgeArrays(null, map)).toBe(map);
+  });
 });
diff --git a/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts b/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts
index 40fcd0399e..52779b9cf8 100644
--- a/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts
+++ b/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts
@@ -1,17 +1,12 @@
-import { useMemo } from "react";
+import { useMemo, useRef } from "react";
 import { usePolicyRuns } from "@app/components/policies/policyRunStore";
 import type { PolicyRunRecord } from "@app/components/policies/policyRunStore";
 import { useAllFiles } from "@app/contexts/FileContext";
 import { loadPolicyCatalog } from "@app/services/policyCatalog";
 import { policyAccentVar } from "@app/components/policies/policyStatus";
+import { isClassificationCategory } from "@app/data/policyCategories";
 import type { FileItemPolicyRef } from "@app/components/shared/PolicyBadges";
 
-/** How long after a run a badge counts as "recent" (drives the one-off glow).
- *  Measured from run start — must exceed the longest realistic policy wall-clock
- *  time so the glow still fires after a slow run completes and imports. Old or
- *  reloaded runs fall outside this window, suppressing the glow on page reload. */
-const RECENT_MS = 5 * 60 * 1000;
-
 /** Minimal provenance shape needed to resolve a file's inherited badges. */
 type LineageStub = {
   id: string;
@@ -19,14 +14,10 @@ type LineageStub = {
   sourceFileIds?: string[];
 };
 
-/** Merge a ref into a list, deduping by policy id. A direct (recent) hit wins
- *  the glow over an inherited one for the same policy. */
+/** Merge a ref into a list, deduping by policy id. */
 function mergeRef(list: FileItemPolicyRef[], ref: FileItemPolicyRef): void {
-  const existing = list.find((p) => p.id === ref.id);
-  if (!existing) {
+  if (!list.some((p) => p.id === ref.id)) {
     list.push(ref);
-  } else if (ref.recent) {
-    existing.recent = true;
   }
 }
 
@@ -42,21 +33,18 @@ function mergeRef(list: FileItemPolicyRef[], ref: FileItemPolicyRef): void {
  * from: its transitive `sourceFileIds` (recorded at the consume boundary, so it
  * covers split/merge/convert too) plus, defensively, its `parentFileId`.
  * Because `sourceFileIds` is transitive, a flat lookup suffices — no chain walk,
- * and it survives a consumed intermediate. Inherited badges never glow
- * (recent=false): only the original application does.
+ * and it survives a consumed intermediate.
  */
 export function buildPolicyBadgeMap(
   runs: ReadonlyArray<PolicyRunRecord>,
   stubs: ReadonlyArray<LineageStub>,
   labelById: ReadonlyMap<string, string>,
-  now: number,
 ): Map<string, FileItemPolicyRef[]> {
   // Direct badges: a file that IS a policy run's output.
   const directByFile = new Map<string, FileItemPolicyRef[]>();
   for (const run of runs) {
     const name = labelById.get(run.categoryId);
     if (!name) continue;
-    const recent = now - run.startedAt < RECENT_MS;
     for (const fileId of run.outputFileIds ?? []) {
       const list = directByFile.get(fileId) ?? [];
       if (!list.some((p) => p.id === run.categoryId)) {
@@ -64,7 +52,6 @@ export function buildPolicyBadgeMap(
           id: run.categoryId,
           name,
           accentColor: policyAccentVar(run.categoryId),
-          recent,
         });
         directByFile.set(fileId, list);
       }
@@ -86,7 +73,7 @@ export function buildPolicyBadgeMap(
   // from. `sourceFileIds` is the transitive provenance set (so a flat lookup
   // catches even ancestors whose intermediate edits were consumed), and
   // `parentFileId` is included defensively for any child not created via a
-  // consume. Inherited badges are marked recent=false (carried, not applied).
+  // consume.
   for (const stub of stubs) {
     const sources = new Set<string>(stub.sourceFileIds ?? []);
     if (stub.parentFileId) sources.add(stub.parentFileId);
@@ -94,14 +81,17 @@ export function buildPolicyBadgeMap(
       const srcBadges = directByFile.get(src);
       if (!srcBadges?.length) continue;
       const list = result.get(stub.id) ?? [];
-      for (const ref of srcBadges) mergeRef(list, { ...ref, recent: false });
+      for (const ref of srcBadges) mergeRef(list, { ...ref });
       result.set(stub.id, list);
     }
   }
 
   // In-flight pass: add (or upgrade) a badge on the input file for any run that
   // is currently being processed, so the sidebar shows a spinning indicator
-  // while the policy is actively enforcing — not just after it completes.
+  // while the policy is actively running — not just after it completes.
+  // Blocking policies set `enforcing` (which gates actions/overlays);
+  // classification is non-blocking, so it sets `background` instead — same
+  // spinner, but nothing is ever gated on it.
   // Keep the spinner until `imported` is true: the status reaches COMPLETED
   // before the output files are imported into the workspace, so gating on
   // status alone would drop the badge during that async gap.
@@ -112,17 +102,19 @@ export function buildPolicyBadgeMap(
     if (settled && !run.retrying) continue;
     const name = labelById.get(run.categoryId);
     if (!name) continue;
+    const inFlightFlag = isClassificationCategory(run.categoryId)
+      ? ("background" as const)
+      : ("enforcing" as const);
     const list = result.get(run.fileId) ?? [];
     const existing = list.find((p) => p.id === run.categoryId);
     if (existing) {
-      existing.enforcing = true;
+      existing[inFlightFlag] = true;
     } else {
       list.push({
         id: run.categoryId,
         name,
         accentColor: policyAccentVar(run.categoryId),
-        recent: false,
-        enforcing: true,
+        [inFlightFlag]: true,
       });
       result.set(run.fileId, list);
     }
@@ -131,20 +123,70 @@ export function buildPolicyBadgeMap(
   return result;
 }
 
+/** Field-wise equality for a badge ref — the whole shape `PolicyBadges` renders. */
+function sameRef(a: FileItemPolicyRef, b: FileItemPolicyRef): boolean {
+  return (
+    a.id === b.id &&
+    a.name === b.name &&
+    a.accentColor === b.accentColor &&
+    !!a.enforcing === !!b.enforcing &&
+    !!a.background === !!b.background
+  );
+}
+
+function sameRefs(a: FileItemPolicyRef[], b: FileItemPolicyRef[]): boolean {
+  return a.length === b.length && a.every((ref, i) => sameRef(ref, b[i]));
+}
+
+/**
+ * Carry the previous map's array references over to files whose badges didn't
+ * change, and return the previous MAP itself when none did.
+ *
+ * {@link buildPolicyBadgeMap} allocates a fresh array per badged file on every
+ * call, and the run store hands back a new `runs` array on every status poll —
+ * so without this, one file's poll tick gives EVERY badged file a new `policies`
+ * identity, and the memoized sidebar rows can never bail out (the case the
+ * memoization exists for). `NO_POLICIES` in FileSidebar only covers the rows
+ * with no badges at all.
+ */
+export function reusePolicyBadgeArrays(
+  previous: Map<string, FileItemPolicyRef[]> | null,
+  next: Map<string, FileItemPolicyRef[]>,
+): Map<string, FileItemPolicyRef[]> {
+  if (!previous) return next;
+  let changed = previous.size !== next.size;
+  for (const [fileId, refs] of next) {
+    const before = previous.get(fileId);
+    if (before && sameRefs(before, refs)) next.set(fileId, before);
+    else changed = true;
+  }
+  return changed ? next : previous;
+}
+
 /**
  * Distinct policies that have produced each file, keyed by fileId, derived from
  * the reactive policy run store. Drives the file sidebar's shield badges. The
  * badge follows a document down its tool-edit chain — see
  * {@link buildPolicyBadgeMap}. Shadows the core stub via the {@code @app/*}
  * alias cascade.
+ *
+ * Per-file array identity is preserved across rebuilds so memoized consumers
+ * (the sidebar rows) only re-render for the file that actually changed — see
+ * {@link reusePolicyBadgeArrays}.
  */
 export function usePolicyFileBadges(): Map<string, FileItemPolicyRef[]> {
   const runs = usePolicyRuns();
   const { fileStubs } = useAllFiles();
+  const previous = useRef<Map<string, FileItemPolicyRef[]> | null>(null);
   return useMemo(() => {
     const labelById = new Map(
       loadPolicyCatalog().categories.map((c) => [c.id, c.label]),
     );
-    return buildPolicyBadgeMap(runs, fileStubs, labelById, Date.now());
+    const map = reusePolicyBadgeArrays(
+      previous.current,
+      buildPolicyBadgeMap(runs, fileStubs, labelById),
+    );
+    previous.current = map;
+    return map;
   }, [runs, fileStubs]);
 }
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 970d6703cd..7db904ddf6 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -84,6 +84,7 @@
         "signature_pad": "^5.0.4",
         "smol-toml": "^1.4.2",
         "tailwindcss": "^4.1.13",
+        "use-sync-external-store": "^1.6.0",
         "web-vitals": "^5.1.0"
       },
       "devDependencies": {
@@ -109,6 +110,7 @@
         "@types/node": "^24.5.2",
         "@types/react": "^19.2.17",
         "@types/react-dom": "^19.1.9",
+        "@types/use-sync-external-store": "^0.0.6",
         "@typescript-eslint/eslint-plugin": "^8.65.0",
         "@typescript-eslint/parser": "^8.65.0",
         "@typescript/native": "npm:typescript@^7.0.2",
diff --git a/frontend/package.json b/frontend/package.json
index 1763a2126a..dfcfa2842c 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -81,6 +81,7 @@
     "signature_pad": "^5.0.4",
     "smol-toml": "^1.4.2",
     "tailwindcss": "^4.1.13",
+    "use-sync-external-store": "^1.6.0",
     "web-vitals": "^5.1.0"
   },
   "scripts": {
@@ -131,6 +132,7 @@
     "@types/node": "^24.5.2",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.1.9",
+    "@types/use-sync-external-store": "^0.0.6",
     "@typescript-eslint/eslint-plugin": "^8.65.0",
     "@typescript-eslint/parser": "^8.65.0",
     "@typescript/native": "npm:typescript@^7.0.2",

From a2dd0298dc7931c1e7f202343a75937a4edd889a Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:00:04 +0200
Subject: [PATCH 072/122] refactor(api): replace length checks with isEmpty
 (#7214)

# Description of Changes

Stylistic problem reported by static analyzer.


Changes:
* Replaced `sb.length() > 0` and `sb.length() == 0` with `!sb.isEmpty()`
and `sb.isEmpty()` for `StringBuilder`, `String`, and collections
throughout the codebase, improving readability and aligning with modern
Java best practices.


<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../common/pdf/PdfMarkdownConverter.java       |  2 +-
 .../software/common/util/GeneralUtils.java     |  2 +-
 .../common/pdf/PdfMarkdownConverterTest.java   |  2 +-
 .../SPDF/config/ExternalAppDepConfig.java      |  2 +-
 .../SPDF/controller/api/UIDataController.java  |  2 +-
 .../api/security/PasswordController.java       |  8 ++++----
 .../api/security/RedactExecuteService.java     | 18 +++++++++---------
 .../SPDF/controller/web/MetricsController.java |  6 +++---
 .../SPDF/service/HardwareKeyStoreService.java  |  4 ++--
 .../controller/api/UserController.java         |  2 +-
 .../security/service/UserService.java          |  2 +-
 .../service/PortalInfraAuditService.java       |  2 +-
 .../service/UserLicenseSettingsService.java    |  4 ++--
 13 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/app/common/src/main/java/stirling/software/common/pdf/PdfMarkdownConverter.java b/app/common/src/main/java/stirling/software/common/pdf/PdfMarkdownConverter.java
index c19468b5ed..73f2d7f5ad 100644
--- a/app/common/src/main/java/stirling/software/common/pdf/PdfMarkdownConverter.java
+++ b/app/common/src/main/java/stirling/software/common/pdf/PdfMarkdownConverter.java
@@ -983,7 +983,7 @@ public class PdfMarkdownConverter {
         ordered.sort(Comparator.comparingDouble((Line l) -> l.y).reversed());
         StringBuilder sb = new StringBuilder();
         for (Line l : ordered) {
-            if (sb.length() > 0) {
+            if (!sb.isEmpty()) {
                 sb.append(' ');
             }
             sb.append(l.text);
diff --git a/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java b/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java
index 4a9ef0834b..52f79f733a 100644
--- a/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java
+++ b/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java
@@ -941,7 +941,7 @@ public class GeneralUtils {
             }
 
             // If no MAC address found, use hostname as fallback
-            if (sb.length() == 0) {
+            if (sb.isEmpty()) {
                 String hostname = InetAddress.getLocalHost().getHostName();
                 sb.append(hostname != null ? hostname : "unknown-host");
                 log.warn("No MAC address found, using hostname for fingerprint generation");
diff --git a/app/common/src/test/java/stirling/software/common/pdf/PdfMarkdownConverterTest.java b/app/common/src/test/java/stirling/software/common/pdf/PdfMarkdownConverterTest.java
index b3c104da85..7e1d3d2e35 100644
--- a/app/common/src/test/java/stirling/software/common/pdf/PdfMarkdownConverterTest.java
+++ b/app/common/src/test/java/stirling/software/common/pdf/PdfMarkdownConverterTest.java
@@ -154,7 +154,7 @@ class PdfMarkdownConverterTest {
                     || isTableSeparatorRow(line)) {
                 continue;
             }
-            if (sb.length() > 0) {
+            if (!sb.isEmpty()) {
                 sb.append('\n');
             }
             sb.append(line);
diff --git a/app/core/src/main/java/stirling/software/SPDF/config/ExternalAppDepConfig.java b/app/core/src/main/java/stirling/software/SPDF/config/ExternalAppDepConfig.java
index 8755dfe2ef..46b1976ca7 100644
--- a/app/core/src/main/java/stirling/software/SPDF/config/ExternalAppDepConfig.java
+++ b/app/core/src/main/java/stirling/software/SPDF/config/ExternalAppDepConfig.java
@@ -321,7 +321,7 @@ public class ExternalAppDepConfig {
                 new BufferedReader(new InputStreamReader(in, StandardCharsets.UTF_8))) {
             String line;
             while ((line = br.readLine()) != null) {
-                if (sb.length() > 0) sb.append('\n');
+                if (!sb.isEmpty()) sb.append('\n');
                 sb.append(line);
             }
         }
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/UIDataController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/UIDataController.java
index de391c7c32..a3ed09fe5d 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/UIDataController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/UIDataController.java
@@ -130,7 +130,7 @@ public class UIDataController {
                             objectMapper.readValue(
                                     config, new TypeReference<Map<String, Object>>() {});
                     String name = (String) jsonContent.get("name");
-                    if (name == null || name.length() < 1) {
+                    if (name == null || name.isEmpty()) {
                         String filename =
                                 jsonFiles
                                         .get(pipelineConfigs.indexOf(config))
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java
index 690c82ca8f..2ad494fc63 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/PasswordController.java
@@ -124,15 +124,15 @@ public class PasswordController {
             StandardProtectionPolicy spp =
                     new StandardProtectionPolicy(ownerPassword, password, ap);
 
-            if ((ownerPassword != null && ownerPassword.length() > 0)
-                    || (password != null && password.length() > 0)) {
+            if ((ownerPassword != null && !ownerPassword.isEmpty())
+                    || (password != null && !password.isEmpty())) {
                 spp.setEncryptionKeyLength(keyLength);
             }
             spp.setPermissions(ap);
             document.protect(spp);
 
-            if ((ownerPassword == null || ownerPassword.length() == 0)
-                    && (password == null || password.length() == 0))
+            if ((ownerPassword == null || ownerPassword.isEmpty())
+                    && (password == null || password.isEmpty()))
                 return WebResponseUtils.pdfDocToWebResponse(
                         document,
                         GeneralUtils.generateFilename(
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactExecuteService.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactExecuteService.java
index 4a53be97b6..c43abcf666 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactExecuteService.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/RedactExecuteService.java
@@ -760,12 +760,12 @@ class RedactExecuteService {
             char ch = raw.charAt(i);
             if (Character.isLetterOrDigit(ch)) {
                 current.append(ch);
-            } else if (current.length() > 0) {
+            } else if (!current.isEmpty()) {
                 tokens.add(current.toString());
                 current.setLength(0);
             }
         }
-        if (current.length() > 0) tokens.add(current.toString());
+        if (!current.isEmpty()) tokens.add(current.toString());
         if (tokens.size() < 2) return null;
         StringBuilder out = new StringBuilder();
         for (int i = 0; i < tokens.size(); i++) {
@@ -788,25 +788,25 @@ class RedactExecuteService {
         StringBuilder current = new StringBuilder();
         for (String token : tokens) {
             if (token.isEmpty()) {
-                if (current.length() > 0) {
-                    if (result.length() > 0) result.append(' ');
+                if (!current.isEmpty()) {
+                    if (!result.isEmpty()) result.append(' ');
                     result.append(current);
                     current.setLength(0);
                 }
             } else if (token.length() == 1) {
                 current.append(token);
             } else {
-                if (current.length() > 0) {
-                    if (result.length() > 0) result.append(' ');
+                if (!current.isEmpty()) {
+                    if (!result.isEmpty()) result.append(' ');
                     result.append(current);
                     current.setLength(0);
                 }
-                if (result.length() > 0) result.append(' ');
+                if (!result.isEmpty()) result.append(' ');
                 result.append(token);
             }
         }
-        if (current.length() > 0) {
-            if (result.length() > 0) result.append(' ');
+        if (!current.isEmpty()) {
+            if (!result.isEmpty()) result.append(' ');
             result.append(current);
         }
         return result.toString().trim();
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/web/MetricsController.java b/app/core/src/main/java/stirling/software/SPDF/controller/web/MetricsController.java
index de28d66ca9..4bbf3dfb82 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/web/MetricsController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/web/MetricsController.java
@@ -251,7 +251,7 @@ public class MetricsController {
 
                             // For GET requests, validate if we have a list of valid endpoints
                             final boolean validateGetEndpoints =
-                                    endpointInspector.getValidGetEndpoints().size() != 0;
+                                    !endpointInspector.getValidGetEndpoints().isEmpty();
                             if ("GET".equals(method)
                                     && validateGetEndpoints
                                     && !endpointInspector.isValidGetEndpoint(uri)) {
@@ -292,7 +292,7 @@ public class MetricsController {
 
                             // For GET requests, validate if we have a list of valid endpoints
                             final boolean validateGetEndpoints =
-                                    endpointInspector.getValidGetEndpoints().size() != 0;
+                                    !endpointInspector.getValidGetEndpoints().isEmpty();
                             if ("GET".equals(method)
                                     && validateGetEndpoints
                                     && !endpointInspector.isValidGetEndpoint(uri)) {
@@ -332,7 +332,7 @@ public class MetricsController {
 
                             // For GET requests, validate if we have a list of valid endpoints
                             final boolean validateGetEndpoints =
-                                    endpointInspector.getValidGetEndpoints().size() != 0;
+                                    !endpointInspector.getValidGetEndpoints().isEmpty();
                             if ("GET".equals(method)
                                     && validateGetEndpoints
                                     && !endpointInspector.isValidGetEndpoint(uri)) {
diff --git a/app/core/src/main/java/stirling/software/SPDF/service/HardwareKeyStoreService.java b/app/core/src/main/java/stirling/software/SPDF/service/HardwareKeyStoreService.java
index 988b935f27..93ca36d08e 100644
--- a/app/core/src/main/java/stirling/software/SPDF/service/HardwareKeyStoreService.java
+++ b/app/core/src/main/java/stirling/software/SPDF/service/HardwareKeyStoreService.java
@@ -237,12 +237,12 @@ public class HardwareKeyStoreService {
             combined.append(env);
         }
         if (prop != null && !prop.isBlank()) {
-            if (combined.length() > 0) {
+            if (!combined.isEmpty()) {
                 combined.append(java.io.File.pathSeparator);
             }
             combined.append(prop);
         }
-        if (combined.length() == 0) {
+        if (combined.isEmpty()) {
             return List.of();
         }
         return Arrays.stream(combined.toString().split("[,;" + java.io.File.pathSeparator + "]"))
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/UserController.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/UserController.java
index b19c052ff1..fdacda72b2 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/UserController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/UserController.java
@@ -199,7 +199,7 @@ public class UserController {
             return ResponseEntity.status(HttpStatus.CONFLICT)
                     .body(Map.of("error", "usernameExists", "message", "Username already exists"));
         }
-        if (newUsername != null && newUsername.length() > 0) {
+        if (newUsername != null && !newUsername.isEmpty()) {
             try {
                 userService.changeUsername(user, newUsername);
             } catch (IllegalArgumentException e) {
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/service/UserService.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/service/UserService.java
index 0cb4653ef1..e08dd52d07 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/service/UserService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/service/UserService.java
@@ -205,7 +205,7 @@ public class UserService implements UserServiceInterface {
         User user =
                 findByUsernameIgnoreCase(username)
                         .orElseThrow(() -> new UsernameNotFoundException("User not found"));
-        if (user.getApiKey() == null || user.getApiKey().length() == 0) {
+        if (user.getApiKey() == null || user.getApiKey().isEmpty()) {
             user = addApiKeyToUser(username);
         }
         return user.getApiKey();
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/PortalInfraAuditService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/PortalInfraAuditService.java
index c47df3649f..86f944ca9d 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/service/PortalInfraAuditService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/PortalInfraAuditService.java
@@ -224,7 +224,7 @@ public class PortalInfraAuditService {
             if (word.isEmpty()) {
                 continue;
             }
-            if (sb.length() > 0) {
+            if (!sb.isEmpty()) {
                 sb.append(' ');
             }
             String lower = word.toLowerCase(Locale.ROOT);
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/UserLicenseSettingsService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/UserLicenseSettingsService.java
index 54660a1ccb..085a9ffcf1 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/service/UserLicenseSettingsService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/UserLicenseSettingsService.java
@@ -515,7 +515,7 @@ public class UserLicenseSettingsService {
         appendIfPresent(builder, applicationProperties.getAutomaticallyGenerated().getUUID());
         appendIfPresent(builder, applicationProperties.getPremium().getKey());
 
-        if (builder.length() == 0) {
+        if (builder.isEmpty()) {
             builder.append(DEFAULT_INTEGRITY_SECRET);
         }
 
@@ -524,7 +524,7 @@ public class UserLicenseSettingsService {
 
     private void appendIfPresent(StringBuilder builder, String value) {
         if (value != null && !value.isBlank()) {
-            if (builder.length() > 0) {
+            if (!builder.isEmpty()) {
                 builder.append(SIGNATURE_SEPARATOR);
             }
             builder.append(value);

From e5c6ceedc52a3aee263ffb20ca2ff4813ca9799c Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:00:25 +0200
Subject: [PATCH 073/122] fix(ui): resolve double scrollbar issue in Sidebar
 Categories modal (#7142)

# Description of Changes

Resolves double scrollbar design bug.

### New

<img width="1036" height="990" alt="image"
src="https://github.com/user-attachments/assets/454a521c-7ccf-4ebc-98be-22f13b107abe"
/>


### Old

<img width="1036" height="984" alt="image"
src="https://github.com/user-attachments/assets/c2847698-e625-48da-a5bc-e6b68050a426"
/>


<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../proprietary/components/shared/FileSidebarGroupControls.css | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/frontend/editor/src/proprietary/components/shared/FileSidebarGroupControls.css b/frontend/editor/src/proprietary/components/shared/FileSidebarGroupControls.css
index 16712e351a..0889dfe3d1 100644
--- a/frontend/editor/src/proprietary/components/shared/FileSidebarGroupControls.css
+++ b/frontend/editor/src/proprietary/components/shared/FileSidebarGroupControls.css
@@ -3,9 +3,6 @@
   display: flex;
   flex-direction: column;
   gap: 12px;
-  max-height: 60vh;
-  overflow-y: auto;
-  padding-right: 4px;
 }
 
 .fsg-footer {

From 732a6025038edfa6250b11b32ce100f9116d5273 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:00:43 +0200
Subject: [PATCH 074/122] style(scanner-effect): remove padding from ToolButton
 of Scanner-effect (#7205)

# Description of Changes


### New
<img width="1650" height="612" alt="image"
src="https://github.com/user-attachments/assets/3046ad8e-b7a5-4fb6-b941-04ae7dcda4e4"
/>



### Old
<img width="1756" height="730" alt="image"
src="https://github.com/user-attachments/assets/e722146e-bebb-4744-9e95-4eee11444623"
/>

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [X] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../editor/src/core/components/tools/toolPicker/ToolButton.tsx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/frontend/editor/src/core/components/tools/toolPicker/ToolButton.tsx b/frontend/editor/src/core/components/tools/toolPicker/ToolButton.tsx
index 78c573bb38..4792fd721a 100644
--- a/frontend/editor/src/core/components/tools/toolPicker/ToolButton.tsx
+++ b/frontend/editor/src/core/components/tools/toolPicker/ToolButton.tsx
@@ -286,7 +286,7 @@ const ToolButton: React.FC<ToolButtonProps> = ({
       accent="neutral"
       onClick={() => handleClick(id)}
       size="sm"
-      p="sm"
+      p="none"
       fullWidth
       justify="start"
       className="tool-button"
@@ -297,6 +297,7 @@ const ToolButton: React.FC<ToolButtonProps> = ({
         borderRadius: 0,
         cursor: visuallyUnavailable ? "not-allowed" : undefined,
         overflow: "visible",
+        ...selectedBg,
       }}
     >
       {buttonContent}

From cc1c6bc9e37ecc4904b74a489fa6f0d4a6f98d4e Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:01:46 +0200
Subject: [PATCH 075/122] style(people): Fix convert dropdown single-category
 formatting and admin table header styling (#7139)

# Description of Changes

The dropdown table with the people looked out-place mainly due to the
blue, i think... this simplifies and make more consistent with the rest
of the "new" UI and not so aggresive with the colour schema.


### New:

<img width="2204" height="852" alt="image"
src="https://github.com/user-attachments/assets/0e329092-a532-445b-a27d-7afbd0a16d4c"
/>


### Old:

<img width="2210" height="838" alt="image"
src="https://github.com/user-attachments/assets/6e251d6f-f22c-4b9e-aebf-96e7fea40144"
/>



<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [X] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../config/configSections/PeopleSection.tsx   | 24 ++++---------------
 .../configSections/TeamDetailsSection.tsx     | 24 ++++---------------
 .../config/configSections/TeamsSection.tsx    |  9 +------
 3 files changed, 9 insertions(+), 48 deletions(-)

diff --git a/frontend/editor/src/proprietary/components/shared/config/configSections/PeopleSection.tsx b/frontend/editor/src/proprietary/components/shared/config/configSections/PeopleSection.tsx
index 10e9f39fb0..d955cb341b 100644
--- a/frontend/editor/src/proprietary/components/shared/config/configSections/PeopleSection.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/configSections/PeopleSection.tsx
@@ -588,38 +588,22 @@ export default function PeopleSection() {
       </Group>
 
       {/* Members Table */}
-      <Table
-        horizontalSpacing="md"
-        verticalSpacing="sm"
-        withRowBorders
-        style={
-          {
-            "--table-border-color": "var(--mantine-color-gray-3)",
-          } as React.CSSProperties
-        }
-      >
+      <Table horizontalSpacing="md" verticalSpacing="sm" withRowBorders>
         <Table.Thead>
-          <Table.Tr style={{ backgroundColor: "var(--mantine-color-gray-0)" }}>
-            <Table.Th
-              style={{ fontWeight: 600, color: "var(--mantine-color-gray-7)" }}
-              fz="sm"
-            >
+          <Table.Tr>
+            <Table.Th style={{ fontWeight: 600 }} fz="sm">
               {t("workspace.people.user")}
             </Table.Th>
             <Table.Th
               style={{
                 fontWeight: 600,
-                color: "var(--mantine-color-gray-7)",
                 whiteSpace: "nowrap",
               }}
               fz="sm"
             >
               {t("workspace.people.role")}
             </Table.Th>
-            <Table.Th
-              style={{ fontWeight: 600, color: "var(--mantine-color-gray-7)" }}
-              fz="sm"
-            >
+            <Table.Th style={{ fontWeight: 600 }} fz="sm">
               {t("workspace.people.team")}
             </Table.Th>
             <Table.Th w={50}></Table.Th>
diff --git a/frontend/editor/src/proprietary/components/shared/config/configSections/TeamDetailsSection.tsx b/frontend/editor/src/proprietary/components/shared/config/configSections/TeamDetailsSection.tsx
index cabdfb642c..d3702e7f80 100644
--- a/frontend/editor/src/proprietary/components/shared/config/configSections/TeamDetailsSection.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/configSections/TeamDetailsSection.tsx
@@ -408,29 +408,13 @@ export default function TeamDetailsSection({
       </Group>
 
       {/* Members Table */}
-      <Table
-        horizontalSpacing="md"
-        verticalSpacing="sm"
-        withRowBorders
-        style={
-          {
-            "--table-border-color": "var(--mantine-color-gray-3)",
-          } as React.CSSProperties
-        }
-      >
+      <Table horizontalSpacing="md" verticalSpacing="sm" withRowBorders>
         <Table.Thead>
-          <Table.Tr style={{ backgroundColor: "var(--mantine-color-gray-0)" }}>
-            <Table.Th
-              style={{ fontWeight: 600, color: "var(--mantine-color-gray-7)" }}
-              fz="sm"
-            >
+          <Table.Tr>
+            <Table.Th style={{ fontWeight: 600 }} fz="sm">
               {t("workspace.people.user")}
             </Table.Th>
-            <Table.Th
-              style={{ fontWeight: 600, color: "var(--mantine-color-gray-7)" }}
-              fz="sm"
-              w={100}
-            >
+            <Table.Th style={{ fontWeight: 600 }} fz="sm" w={100}>
               {t("workspace.people.role")}
             </Table.Th>
             <Table.Th w={50}></Table.Th>
diff --git a/frontend/editor/src/proprietary/components/shared/config/configSections/TeamsSection.tsx b/frontend/editor/src/proprietary/components/shared/config/configSections/TeamsSection.tsx
index 4559296afe..d4da200d59 100644
--- a/frontend/editor/src/proprietary/components/shared/config/configSections/TeamsSection.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/configSections/TeamsSection.tsx
@@ -298,19 +298,13 @@ export default function TeamsSection() {
         verticalSpacing="sm"
         withRowBorders
         highlightOnHover
-        style={
-          {
-            "--table-border-color": "var(--mantine-color-gray-3)",
-          } as React.CSSProperties
-        }
       >
         <Table.Thead>
-          <Table.Tr style={{ backgroundColor: "var(--mantine-color-gray-0)" }}>
+          <Table.Tr>
             <Table.Th
               style={{
                 fontWeight: 600,
                 fontSize: "0.875rem",
-                color: "var(--mantine-color-gray-7)",
               }}
             >
               {t("workspace.teams.teamName")}
@@ -319,7 +313,6 @@ export default function TeamsSection() {
               style={{
                 fontWeight: 600,
                 fontSize: "0.875rem",
-                color: "var(--mantine-color-gray-7)",
               }}
             >
               {t("workspace.teams.totalMembers")}

From 9aaf4173036f4ebca74c8ea8379e4362a17bd969 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:11:26 +0200
Subject: [PATCH 076/122] perf(ui): lazy-load MobileScannerPage and optimize
 bundle splitting (#7122)

# Description of Changes


This pull request improves the frontend's performance and code
organization by optimizing how certain pages are loaded and by updating
the application's bundle splitting strategy.

Changes:
* Updated the `manualChunks` configuration in `vite.config.ts` to more
granularly split vendor dependencies into separate chunks based on their
library or usage, which can improve caching and load performance.
* Updated MobileScanner code to be lazy loaded

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

---------

Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/editor/src/core/App.tsx        |  5 ++--
 frontend/editor/src/proprietary/App.tsx |  5 ++--
 frontend/editor/src/saas/App.tsx        |  5 ++--
 frontend/editor/vite.config.ts          | 33 ++++++++++++++++++++++---
 4 files changed, 39 insertions(+), 9 deletions(-)

diff --git a/frontend/editor/src/core/App.tsx b/frontend/editor/src/core/App.tsx
index 566e861520..6fd23e5510 100644
--- a/frontend/editor/src/core/App.tsx
+++ b/frontend/editor/src/core/App.tsx
@@ -1,4 +1,4 @@
-import { Suspense } from "react";
+import { Suspense, lazy } from "react";
 import { Routes, Route } from "react-router-dom";
 import { AppProviders } from "@app/components/AppProviders";
 import { AppLayout } from "@app/components/AppLayout";
@@ -6,9 +6,10 @@ import { LoadingFallback } from "@app/components/shared/LoadingFallback";
 import { ThemeProvider } from "@app/components/shared/ThemeProvider";
 import { PreferencesProvider } from "@app/contexts/PreferencesContext";
 import HomePage from "@app/pages/HomePage";
-import MobileScannerPage from "@app/pages/MobileScannerPage";
 import Onboarding from "@app/components/onboarding/Onboarding";
 
+const MobileScannerPage = lazy(() => import("@app/pages/MobileScannerPage"));
+
 // Import global styles
 import "@app/styles/tailwind.css";
 import "@app/styles/cookieconsent.css";
diff --git a/frontend/editor/src/proprietary/App.tsx b/frontend/editor/src/proprietary/App.tsx
index e98064ebc8..a2103bd60a 100644
--- a/frontend/editor/src/proprietary/App.tsx
+++ b/frontend/editor/src/proprietary/App.tsx
@@ -1,4 +1,4 @@
-import { Suspense } from "react";
+import { Suspense, lazy } from "react";
 import { Routes, Route, useParams } from "react-router-dom";
 import { AppProviders } from "@app/components/AppProviders";
 import { AppLayout } from "@app/components/AppLayout";
@@ -12,9 +12,10 @@ import AuthCallback from "@app/routes/AuthCallback";
 import InviteAccept from "@app/routes/InviteAccept";
 import ShareLinkPage from "@app/routes/ShareLinkPage";
 import ParticipantView from "@app/components/workflow/ParticipantView";
-import MobileScannerPage from "@app/pages/MobileScannerPage";
 import Onboarding from "@app/components/onboarding/Onboarding";
 import WatchedFoldersRegistration from "@app/components/watchedFolders/WatchedFoldersRegistration";
+
+const MobileScannerPage = lazy(() => import("@app/pages/MobileScannerPage"));
 import { WATCHED_FOLDERS_ENABLED } from "@app/constants/featureFlags";
 import { getAdminRouteExtensions } from "@app/routes/adminRouteExtensions";
 import { LoginLandingRedirect } from "@app/components/LoginLandingRedirect";
diff --git a/frontend/editor/src/saas/App.tsx b/frontend/editor/src/saas/App.tsx
index 32af9a6782..9509f630b0 100644
--- a/frontend/editor/src/saas/App.tsx
+++ b/frontend/editor/src/saas/App.tsx
@@ -1,4 +1,4 @@
-import { Suspense, type ReactNode } from "react";
+import { Suspense, lazy, type ReactNode } from "react";
 import { Routes, Route, useLocation } from "react-router-dom";
 import { isAuthRoute } from "@app/utils/pathUtils";
 import { AppProviders } from "@app/components/AppProviders";
@@ -16,13 +16,14 @@ import AuthCallback from "@app/routes/AuthCallback";
 import ResetPassword from "@app/routes/ResetPassword";
 import OAuthConsent from "@app/routes/OAuthConsent";
 import ShareLinkPage from "@app/routes/ShareLinkPage";
-import MobileScannerPage from "@app/pages/MobileScannerPage";
 import { getAdminRouteExtensions } from "@app/routes/adminRouteExtensions";
 import OnboardingBootstrap from "@app/components/OnboardingBootstrap";
 import SignupRequiredBootstrap from "@app/components/SignupRequiredBootstrap";
 import UsageLimitModalHost from "@app/components/UsageLimitModalHost";
 import { LoginLandingRedirect } from "@app/components/LoginLandingRedirect";
 
+const MobileScannerPage = lazy(() => import("@app/pages/MobileScannerPage"));
+
 // Import global styles
 import "@app/styles/tailwind.css";
 import "@app/auth/ui/auth-theme.css";
diff --git a/frontend/editor/vite.config.ts b/frontend/editor/vite.config.ts
index 0d367d2465..2e72d1efec 100644
--- a/frontend/editor/vite.config.ts
+++ b/frontend/editor/vite.config.ts
@@ -358,9 +358,36 @@ export default defineConfig(async ({ mode, command }) => {
       target: "esnext",
       rollupOptions: {
         output: {
-          manualChunks: {
-            "vendor-react": ["react", "react-dom"],
-            "pdf-engine": ["@embedpdf/engines", "@embedpdf/pdfium"],
+          manualChunks(id) {
+            if (id.includes("material-symbols-icons.json"))
+              return "vendor-iconset";
+            if (id.includes("node_modules")) {
+              if (id.includes("pdfjs-dist")) return "vendor-pdfjs";
+              if (id.includes("@embedpdf")) return "vendor-embedpdf";
+              if (
+                id.includes("react") ||
+                id.includes("@mantine") ||
+                id.includes("@emotion") ||
+                id.includes("@mui") ||
+                id.includes("@iconify")
+              ) {
+                return "vendor-ui";
+              }
+              if (id.includes("@supabase")) return "vendor-supabase";
+              if (id.includes("posthog-js") || id.includes("@posthog"))
+                return "vendor-posthog";
+              if (id.includes("@cantoo/pdf-lib") || id.includes("pdf-lib"))
+                return "vendor-pdflib";
+              if (
+                id.includes("recharts") ||
+                id.includes("d3") ||
+                id.includes("decimal.js")
+              )
+                return "vendor-charts";
+              if (id.includes("jszip") || id.includes("pako"))
+                return "vendor-zip";
+              if (id.includes("i18next")) return "vendor-i18n";
+            }
           },
         },
       },

From 934ad180cb9cf87aa2709c1b40f4e5ca4ee2f223 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:16:15 +0200
Subject: [PATCH 077/122] fix(ui): handle 404 policy error on upload without
 toast popup (#7254)

# Description of Changes

Fixes policy error pop-ups that sometimes happen upon upload.

Changes:
- Improved the error handling in `runPolicyOnFile` to log detailed debug
information when policy dispatch fails, making it easier to trace issues
such as missing policies or backend errors.
- Updated the `runStoredPolicy` function to pass `{ suppressErrorToast:
true }` to the API client, preventing error toasts from appearing in the
UI when the policy run fails.

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../proprietary/components/policies/usePolicyAutoRun.ts   | 8 ++++++--
 frontend/editor/src/proprietary/services/policyApi.ts     | 1 +
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
index e475d784ea..597136a32f 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
@@ -955,10 +955,14 @@ async function runPolicyOnFile(
       error: null,
       startedAt: Date.now(),
     });
-  } catch {
-    // Dispatch failed (offline / backend error). Mark dispatched so we don't hammer;
+  } catch (err) {
+    // Dispatch failed (e.g. policy deleted/404 or backend offline). Mark dispatched so we don't hammer;
     // the absent run simply won't appear in the activity feed. If the backend did
     // start a run we never recorded, reconcileServerRuns rediscovers it.
+    console.debug(
+      `[PolicyAutoRun] Failed to dispatch policy ${categoryId} (${backendId}):`,
+      err,
+    );
     markDispatched(categoryId, fileId);
   } finally {
     releaseDispatchSlot();
diff --git a/frontend/editor/src/proprietary/services/policyApi.ts b/frontend/editor/src/proprietary/services/policyApi.ts
index a10c7a8382..b0d78f36f7 100644
--- a/frontend/editor/src/proprietary/services/policyApi.ts
+++ b/frontend/editor/src/proprietary/services/policyApi.ts
@@ -73,6 +73,7 @@ export async function runStoredPolicy(
   const res = await apiClient.post<JobResponse>(
     `/api/v1/policies/${encodeURIComponent(id)}/run`,
     form,
+    { suppressErrorToast: true },
   );
   return res.data.jobId;
 }

From 7cccee4c346c5bf10058bb7e570c23f7374bb9f5 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:17:27 +0200
Subject: [PATCH 078/122] refactor(get-info): remove redundant PDF validation
 logic (#7213)

# Description of Changes

Could not get past validation, since very few endpoint have such
validation, i think redundant.

Changes:
* Removed the `validatePdfFile` method, which previously checked for
file presence, size limits, and content type, from `GetInfoOnPDF.java`.
* Deleted the invocation of `validatePdfFile` and its associated error
handling from the `getPdfInfo` method, so uploaded files are no longer
validated at this layer.

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../controller/api/security/GetInfoOnPDF.java | 28 -------
 .../api/security/GetInfoOnPDFMoreTest.java    | 15 ----
 .../api/security/GetInfoOnPDFTest.java        | 76 -------------------
 3 files changed, 119 deletions(-)

diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java
index d29480fd3c..d2775e910b 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDF.java
@@ -61,7 +61,6 @@ import stirling.software.common.model.api.PDFFile;
 import stirling.software.common.model.tool.ToolFormat;
 import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
-import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.RegexPatternUtils;
 import stirling.software.common.util.WebResponseUtils;
 
@@ -270,25 +269,6 @@ public class GetInfoOnPDF {
         }
     }
 
-    private static void validatePdfFile(MultipartFile file) {
-        if (file == null || file.isEmpty()) {
-            throw new IllegalArgumentException("PDF file is required");
-        }
-
-        if (file.getSize() > MAX_FILE_SIZE) {
-            throw ExceptionUtils.createIllegalArgumentException(
-                    "error.fileSizeLimit",
-                    "File size ({0} bytes) exceeds maximum allowed size ({1} bytes)",
-                    file.getSize(),
-                    MAX_FILE_SIZE);
-        }
-
-        String contentType = file.getContentType();
-        if (contentType != null && !"application/pdf".equals(contentType)) {
-            log.warn("File content type is {}, expected application/pdf", contentType);
-        }
-    }
-
     private static ResponseEntity<byte[]> createErrorResponse(String errorMessage) {
         try {
             ObjectNode errorNode = objectMapper.createObjectNode();
@@ -1104,14 +1084,6 @@ public class GetInfoOnPDF {
     public ResponseEntity<byte[]> getPdfInfo(@ModelAttribute PDFFile request) throws IOException {
         MultipartFile inputFile = request.getFileInput();
 
-        // Validate input
-        try {
-            validatePdfFile(inputFile);
-        } catch (IllegalArgumentException e) {
-            log.error("Invalid PDF file: {}", e.getMessage());
-            return createErrorResponse("Invalid PDF file: " + e.getMessage());
-        }
-
         List<PDFVerificationResult> verificationResults = null;
         try {
             verificationResults = veraPDFService.validatePDF(inputFile.getInputStream());
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFMoreTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFMoreTest.java
index 7e2aa388fa..1df66f739e 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFMoreTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFMoreTest.java
@@ -264,21 +264,6 @@ class GetInfoOnPDFMoreTest {
     @DisplayName("error handling")
     class Errors {
 
-        @Test
-        @DisplayName("empty file input yields an error response")
-        void emptyFile() throws Exception {
-            MockMultipartFile mf =
-                    new MockMultipartFile("fileInput", "x.pdf", "application/pdf", new byte[0]);
-            PDFFile request = new PDFFile();
-            request.setFileInput(mf);
-            ResponseEntity<byte[]> resp = getInfoOnPDF.getPdfInfo(request);
-            // createErrorResponse returns HTTP 200 with a JSON body carrying an "error" field.
-            assertThat(resp.getBody()).isNotNull();
-            JsonNode body = om.readTree(resp.getBody());
-            assertThat(body.has("error")).isTrue();
-            assertThat(body.get("error").asText("")).contains("Invalid");
-        }
-
         @Test
         @DisplayName("veraPDF failure is swallowed and a report is still produced")
         void veraPdfFailureSwallowed() throws Exception {
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFTest.java
index efc09cf190..8d17d729ea 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/security/GetInfoOnPDFTest.java
@@ -556,24 +556,6 @@ class GetInfoOnPDFTest {
     @DisplayName("Validation and Error Handling Tests")
     class ValidationErrorTests {
 
-        @Test
-        @DisplayName("Should reject null file")
-        void testValidation_NullFile() throws IOException {
-            PDFFile request = new PDFFile();
-            request.setFileInput(null);
-
-            ResponseEntity<byte[]> response = getInfoOnPDF.getPdfInfo(request);
-
-            Assertions.assertEquals(
-                    HttpStatus.OK, response.getStatusCode()); // Returns error JSON with 200
-            String jsonResponse = new String(response.getBody(), StandardCharsets.UTF_8);
-            JsonNode jsonNode = objectMapper.readTree(jsonResponse);
-
-            Assertions.assertTrue(jsonNode.has("error"));
-            Assertions.assertTrue(
-                    jsonNode.get("error").asText("").contains("PDF file is required"));
-        }
-
         @Test
         @DisplayName("Should reject empty file")
         void testValidation_EmptyFile() throws IOException {
@@ -591,64 +573,6 @@ class GetInfoOnPDFTest {
 
             Assertions.assertTrue(jsonNode.has("error"));
         }
-
-        @Test
-        @DisplayName("Should reject file that exceeds max size")
-        void testValidation_TooLargeFile() throws IOException {
-            MultipartFile largeFile =
-                    new MultipartFile() {
-                        @Override
-                        public String getName() {
-                            return "file";
-                        }
-
-                        @Override
-                        public String getOriginalFilename() {
-                            return "large.pdf";
-                        }
-
-                        @Override
-                        public String getContentType() {
-                            return MediaType.APPLICATION_PDF_VALUE;
-                        }
-
-                        @Override
-                        public boolean isEmpty() {
-                            return false;
-                        }
-
-                        @Override
-                        public long getSize() {
-                            // Report 101 MB without allocating memory
-                            return 101L * 1024L * 1024L;
-                        }
-
-                        @Override
-                        public byte[] getBytes() {
-                            return new byte[0];
-                        }
-
-                        @Override
-                        public java.io.InputStream getInputStream() {
-                            return java.io.InputStream.nullInputStream();
-                        }
-
-                        @Override
-                        public void transferTo(java.io.File dest) throws IllegalStateException {}
-                    };
-
-            PDFFile request = new PDFFile();
-            request.setFileInput(largeFile);
-
-            ResponseEntity<byte[]> response = getInfoOnPDF.getPdfInfo(request);
-
-            String jsonResponse = new String(response.getBody(), StandardCharsets.UTF_8);
-            JsonNode jsonNode = objectMapper.readTree(jsonResponse);
-
-            Assertions.assertTrue(jsonNode.has("error"));
-            Assertions.assertTrue(
-                    jsonNode.get("error").asText("").contains("exceeds maximum allowed size"));
-        }
     }
 
     @Nested

From e560ee4cc45e1bde1e71012f888e05f83add8b86 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:25:22 +0200
Subject: [PATCH 079/122] chore(deps): update junrar dependency to version
 8.0.0 (#7210)

# Description of Changes

Since this was a major version update i tested manually, afterwards
figured i'll submit as PR.

This version of junrar adds long-awaited (by me) RAR 5 support to the
library. RAR 5 is newest version of the RAR file format and was not
available in previous Junrar version, but is somewhat common for CBR
files to be RAR 5.


For junrar release notes see:
https://github.com/junrar/junrar/releases/tag/v8.0.0

Changes:
- Bumped junrar dep to version 8.0.0


<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 app/common/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/common/build.gradle b/app/common/build.gradle
index 73be441940..942dddc5fd 100644
--- a/app/common/build.gradle
+++ b/app/common/build.gradle
@@ -16,7 +16,7 @@ dependencies {
     api "org.apache.pdfbox:pdfbox-io:$pdfboxVersion"
     api "org.apache.pdfbox:xmpbox:$pdfboxVersion"
     api "org.apache.pdfbox:preflight:$pdfboxVersion"
-    api 'com.github.junrar:junrar:7.6.0' // RAR archive support for CBR files
+    api 'com.github.junrar:junrar:8.0.0' // RAR archive support for CBR files
     api 'jakarta.servlet:jakarta.servlet-api:6.1.0'
     api 'org.snakeyaml:snakeyaml-engine:3.0.1'
     api "org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.3"

From 866e56728d11a8e9e6c5313cdb860e5e814abac1 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Thu, 6 Aug 2026 13:06:16 +0200
Subject: [PATCH 080/122] fix(storage): delete share access records before
 expired share links (#7161)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

- Updated expired share-link cleanup to delete related `FileShareAccess`
records before deleting their parent `FileShare` records.
- Wrapped the cleanup operation in a transaction to ensure the deletion
order is enforced atomically.
- Prevents foreign-key constraint violations and scheduled-task failures
during cleanup.
- The full backend check was limited by a Gradle distribution
download/network error.

```cmd
[backend:dev:proprietary] 16:25:43.362 [scheduled-vt-2] WARN  org.hibernate.orm.jdbc.error - HHH000247: ErrorCode: 23503, SQLState: 23503
[backend:dev:proprietary] 16:25:43.362 [scheduled-vt-2] WARN  org.hibernate.orm.jdbc.error - Referentielle Integrität verletzt: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"
[backend:dev:proprietary] Referential integrity constraint violation: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"; SQL statement:
[backend:dev:proprietary] delete from file_shares where file_share_id=? [23503-240]
[backend:dev:proprietary] 16:25:43.380 [scheduled-vt-2] ERROR o.s.s.s.TaskUtils$LoggingErrorHandler - Unexpected error occurred in scheduled task
[backend:dev:proprietary] org.springframework.dao.DataIntegrityViolationException: could not execute statement [Referentielle Integrität verletzt: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"
[backend:dev:proprietary] Referential integrity constraint violation: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"; SQL statement:
[backend:dev:proprietary] delete from file_shares where file_share_id=? [23503-240]] [delete from file_shares where file_share_id=?]; SQL [delete from file_shares where file_share_id=?]; constraint [FKQ6V4QH5LFCAWII0ABRVSJO5SG]
[backend:dev:proprietary]       at org.springframework.orm.jpa.hibernate.HibernateExceptionTranslator.convertHibernateAccessException(HibernateExceptionTranslator.java:169)
[backend:dev:proprietary]       at org.springframework.orm.jpa.hibernate.HibernateExceptionTranslator.convertHibernateAccessException(HibernateExceptionTranslator.java:131)
[backend:dev:proprietary]       at org.springframework.orm.jpa.hibernate.HibernateExceptionTranslator.translateExceptionIfPossible(HibernateExceptionTranslator.java:105)
[backend:dev:proprietary]       at org.springframework.orm.jpa.vendor.HibernateJpaDialect.translateExceptionIfPossible(HibernateJpaDialect.java:223)
[backend:dev:proprietary]       at org.springframework.orm.jpa.JpaTransactionManager.doCommit(JpaTransactionManager.java:557)
[backend:dev:proprietary]       at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:794)
[backend:dev:proprietary]       at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:757)
[backend:dev:proprietary]       at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:687)
[backend:dev:proprietary]       at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:408)
[backend:dev:proprietary]       at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:130)
[backend:dev:proprietary]       at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
[backend:dev:proprietary]       at org.springframework.dao.support.PersistenceExceptionTranslationInterceptor.invoke(PersistenceExceptionTranslationInterceptor.java:135)
[backend:dev:proprietary]       at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
[backend:dev:proprietary]       at org.springframework.data.jpa.repository.support.CrudMethodMetadataPostProcessor$CrudMethodMetadataPopulatingMethodInterceptor.invoke(CrudMethodMetadataPostProcessor.java:166)
[backend:dev:proprietary]       at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
[backend:dev:proprietary]       at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:222)
[backend:dev:proprietary]       at jdk.proxy4/jdk.proxy4.$Proxy246.deleteAll(Unknown Source)
[backend:dev:proprietary]       at stirling.software.proprietary.storage.service.StorageCleanupService.cleanupExpiredShareLinks(StorageCleanupService.java:71)
[backend:dev:proprietary]       at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
[backend:dev:proprietary]       at java.base/java.lang.reflect.Method.invoke(Method.java:565)
[backend:dev:proprietary]       at org.springframework.scheduling.support.ScheduledMethodRunnable.runInternal(ScheduledMethodRunnable.java:128)
[backend:dev:proprietary]       at org.springframework.scheduling.support.ScheduledMethodRunnable.lambda$run$1(ScheduledMethodRunnable.java:122)
[backend:dev:proprietary]       at io.micrometer.observation.Observation.observe(Observation.java:569)
[backend:dev:proprietary]       at org.springframework.scheduling.support.ScheduledMethodRunnable.run(ScheduledMethodRunnable.java:122)
[backend:dev:proprietary]       at org.springframework.scheduling.config.Task$OutcomeTrackingRunnable.run(Task.java:88)
[backend:dev:proprietary]       at org.springframework.scheduling.support.DelegatingErrorHandlingRunnable.run(DelegatingErrorHandlingRunnable.java:54)
[backend:dev:proprietary]       at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:545)
[backend:dev:proprietary]       at java.base/java.util.concurrent.FutureTask.runAndReset(FutureTask.java:369)
[backend:dev:proprietary]       at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:310)
[backend:dev:proprietary]       at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1090)
[backend:dev:proprietary]       at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:614)
[backend:dev:proprietary]       at java.base/java.lang.VirtualThread.run(VirtualThread.java:460)
[backend:dev:proprietary] Caused by: org.hibernate.exception.ConstraintViolationException: could not execute statement [Referentielle Integrität verletzt: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"
[backend:dev:proprietary] Referential integrity constraint violation: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"; SQL statement:
[backend:dev:proprietary] delete from file_shares where file_share_id=? [23503-240]] [delete from file_shares where file_share_id=?]
[backend:dev:proprietary]       at org.hibernate.dialect.H2Dialect.lambda$buildSQLExceptionConversionDelegate$0(H2Dialect.java:840)
[backend:dev:proprietary]       at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:34)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:115)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.internal.ResultSetReturnImpl.executeUpdate(ResultSetReturnImpl.java:184)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.mutation.internal.AbstractMutationExecutor.performNonBatchedMutation(AbstractMutationExecutor.java:145)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.mutation.internal.MutationExecutorSingleNonBatched.performNonBatchedOperations(MutationExecutorSingleNonBatched.java:53)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.mutation.internal.AbstractMutationExecutor.execute(AbstractMutationExecutor.java:66)
[backend:dev:proprietary]       at org.hibernate.persister.entity.mutation.AbstractDeleteCoordinator.doStaticDelete(AbstractDeleteCoordinator.java:268)
[backend:dev:proprietary]       at org.hibernate.persister.entity.mutation.AbstractDeleteCoordinator.delete(AbstractDeleteCoordinator.java:79)
[backend:dev:proprietary]       at org.hibernate.action.internal.EntityDeleteAction.execute(EntityDeleteAction.java:119)
[backend:dev:proprietary]       at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:634)
[backend:dev:proprietary]       at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:505)
[backend:dev:proprietary]       at org.hibernate.event.internal.AbstractFlushingEventListener.performExecutions(AbstractFlushingEventListener.java:381)
[backend:dev:proprietary]       at org.hibernate.event.internal.DefaultFlushEventListener.onFlush(DefaultFlushEventListener.java:40)
[backend:dev:proprietary]       at org.hibernate.event.service.internal.EventListenerGroupImpl.fireEventOnEachListener(EventListenerGroupImpl.java:138)
[backend:dev:proprietary]       at org.hibernate.internal.SessionImpl.fireFlush(SessionImpl.java:1484)
[backend:dev:proprietary]       at org.hibernate.internal.SessionImpl.managedFlush(SessionImpl.java:481)
[backend:dev:proprietary]       at org.hibernate.internal.SessionImpl.flushBeforeTransactionCompletion(SessionImpl.java:2111)
[backend:dev:proprietary]       at org.hibernate.internal.SessionImpl.beforeTransactionCompletion(SessionImpl.java:2033)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.internal.JdbcCoordinatorImpl.beforeTransactionCompletion(JdbcCoordinatorImpl.java:410)
[backend:dev:proprietary]       at org.hibernate.resource.transaction.backend.jdbc.internal.JdbcResourceLocalTransactionCoordinatorImpl.beforeCompletionCallback(JdbcResourceLocalTransactionCoordinatorImpl.java:166)
[backend:dev:proprietary]       at org.hibernate.resource.transaction.backend.jdbc.internal.JdbcResourceLocalTransactionCoordinatorImpl$TransactionDriverControlImpl.commitNoRollbackOnly(JdbcResourceLocalTransactionCoordinatorImpl.java:248)
[backend:dev:proprietary]       at org.hibernate.resource.transaction.backend.jdbc.internal.JdbcResourceLocalTransactionCoordinatorImpl$TransactionDriverControlImpl.commit(JdbcResourceLocalTransactionCoordinatorImpl.java:242)
[backend:dev:proprietary]       at org.hibernate.engine.transaction.internal.TransactionImpl.commit(TransactionImpl.java:89)
[backend:dev:proprietary]       at org.springframework.orm.jpa.JpaTransactionManager.doCommit(JpaTransactionManager.java:553)
[backend:dev:proprietary]       ... 27 common frames omitted
[backend:dev:proprietary] Caused by: org.h2.jdbc.JdbcSQLIntegrityConstraintViolationException: Referentielle Integrität verletzt: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"
[backend:dev:proprietary] Referential integrity constraint violation: "FKQ6V4QH5LFCAWII0ABRVSJO5SG: PUBLIC.FILE_SHARE_ACCESSES FOREIGN KEY(FILE_SHARE_ID) REFERENCES PUBLIC.FILE_SHARES(FILE_SHARE_ID) (CAST(97 AS BIGINT))"; SQL statement:
[backend:dev:proprietary] delete from file_shares where file_share_id=? [23503-240]
[backend:dev:proprietary]       at org.h2.message.DbException.getJdbcSQLException(DbException.java:520)
[backend:dev:proprietary]       at org.h2.message.DbException.getJdbcSQLException(DbException.java:489)
[backend:dev:proprietary]       at org.h2.message.DbException.get(DbException.java:223)
[backend:dev:proprietary]       at org.h2.message.DbException.get(DbException.java:199)
[backend:dev:proprietary]       at org.h2.constraint.ConstraintReferential.checkRow(ConstraintReferential.java:363)
[backend:dev:proprietary]       at org.h2.constraint.ConstraintReferential.checkRowRefTable(ConstraintReferential.java:380)
[backend:dev:proprietary]       at org.h2.constraint.ConstraintReferential.checkRow(ConstraintReferential.java:254)
[backend:dev:proprietary]       at org.h2.table.Table.fireConstraints(Table.java:1208)
[backend:dev:proprietary]       at org.h2.table.Table.fireAfterRow(Table.java:1226)
[backend:dev:proprietary]       at org.h2.command.dml.Delete.update(Delete.java:81)
[backend:dev:proprietary]       at org.h2.command.dml.DataChangeStatement.update(DataChangeStatement.java:77)
[backend:dev:proprietary]       at org.h2.command.CommandContainer.update(CommandContainer.java:139)
[backend:dev:proprietary]       at org.h2.command.Command.executeUpdate(Command.java:306)
[backend:dev:proprietary]       at org.h2.command.Command.executeUpdate(Command.java:250)
[backend:dev:proprietary]       at org.h2.jdbc.JdbcPreparedStatement.executeUpdateInternal(JdbcPreparedStatement.java:213)
[backend:dev:proprietary]       at org.h2.jdbc.JdbcPreparedStatement.executeUpdate(JdbcPreparedStatement.java:172)
[backend:dev:proprietary]       at com.zaxxer.hikari.pool.ProxyPreparedStatement.executeUpdate(ProxyPreparedStatement.java:61)
[backend:dev:proprietary]       at com.zaxxer.hikari.pool.HikariProxyPreparedStatement.executeUpdate(HikariProxyPreparedStatement.java)
[backend:dev:proprietary]       at org.hibernate.engine.jdbc.internal.ResultSetReturnImpl.executeUpdate(ResultSetReturnImpl.java:181)
[backend:dev:proprietary]       ... 48 common frames omitted
```

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../proprietary/storage/service/StorageCleanupService.java   | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/StorageCleanupService.java b/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/StorageCleanupService.java
index 5ea5f28def..32c54c6298 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/StorageCleanupService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/storage/service/StorageCleanupService.java
@@ -7,12 +7,14 @@ import java.util.concurrent.TimeUnit;
 
 import org.springframework.scheduling.annotation.Scheduled;
 import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
 
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.proprietary.storage.model.StorageCleanupEntry;
 import stirling.software.proprietary.storage.provider.StorageProvider;
+import stirling.software.proprietary.storage.repository.FileShareAccessRepository;
 import stirling.software.proprietary.storage.repository.FileShareRepository;
 import stirling.software.proprietary.storage.repository.StorageCleanupEntryRepository;
 
@@ -25,6 +27,7 @@ public class StorageCleanupService {
 
     private final StorageProvider storageProvider;
     private final StorageCleanupEntryRepository cleanupEntryRepository;
+    private final FileShareAccessRepository fileShareAccessRepository;
     private final FileShareRepository fileShareRepository;
 
     @Scheduled(fixedDelay = 1, timeUnit = TimeUnit.DAYS)
@@ -62,12 +65,14 @@ public class StorageCleanupService {
     }
 
     @Scheduled(fixedDelay = 1, timeUnit = TimeUnit.DAYS)
+    @Transactional
     public void cleanupExpiredShareLinks() {
         List<stirling.software.proprietary.storage.model.FileShare> expired =
                 fileShareRepository.findByExpiresAtBeforeAndShareTokenNotNull(LocalDateTime.now());
         if (expired.isEmpty()) {
             return;
         }
+        expired.forEach(fileShareAccessRepository::deleteByFileShare);
         fileShareRepository.deleteAll(expired);
     }
 }

From b10fc1b2de79ced7e7b26d89191c27868619dd80 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Thu, 6 Aug 2026 13:06:28 +0200
Subject: [PATCH 081/122] fix(java): prevent executor, task, regex, and stream
 resource leaks (#7284)

# Description of Changes

- Added graceful shutdown handling for service-owned executors in
`JobExecutorService`, `PolicyEngine`, and `AsyncConfig`.
- Added expiration and cleanup for abandoned pending jobs in
`TaskManager`.
- Replaced the unbounded regex pattern cache with a bounded cache
limited to 512 entries.
- Ensured `Files.walk()` is closed correctly in `MobileScannerService`.
- These changes prevent unbounded heap growth, lingering virtual-thread
executors, and file-descriptor leaks.
- Added configurable pending-job expiration through
`stirling.job.pendingExpiryMinutes`, defaulting to 24 hours.

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../common/service/JobExecutorService.java    | 16 ++++++++
 .../common/service/MobileScannerService.java  | 28 +++++++------
 .../software/common/service/TaskManager.java  | 27 ++++++++++---
 .../common/util/RegexPatternUtils.java        | 40 +++++++++++++++----
 .../proprietary/config/AsyncConfig.java       | 30 ++++++++++++--
 .../policy/engine/PolicyEngine.java           | 17 ++++++++
 6 files changed, 128 insertions(+), 30 deletions(-)

diff --git a/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java b/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java
index 23a23e868b..f283f65763 100644
--- a/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java
+++ b/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java
@@ -19,6 +19,7 @@ import org.springframework.stereotype.Service;
 import org.springframework.web.multipart.MultipartFile;
 import org.springframework.web.servlet.mvc.method.annotation.StreamingResponseBody;
 
+import jakarta.annotation.PreDestroy;
 import jakarta.servlet.http.HttpServletRequest;
 
 import lombok.extern.slf4j.Slf4j;
@@ -63,6 +64,21 @@ public class JobExecutorService {
                 "Job executor configured with effective timeout of {} ms", this.effectiveTimeoutMs);
     }
 
+    /** Stop the service-owned executor when the application context is closed or restarted. */
+    @PreDestroy
+    public void shutdown() {
+        log.debug("Shutting down job executor");
+        executor.shutdown();
+        try {
+            if (!executor.awaitTermination(5, TimeUnit.SECONDS)) {
+                executor.shutdownNow();
+            }
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            executor.shutdownNow();
+        }
+    }
+
     public ResponseEntity<?> runJobGeneric(boolean async, Supplier<Object> work) {
         return runJobGeneric(async, work, -1);
     }
diff --git a/app/common/src/main/java/stirling/software/common/service/MobileScannerService.java b/app/common/src/main/java/stirling/software/common/service/MobileScannerService.java
index 7c544b6242..18958841b2 100644
--- a/app/common/src/main/java/stirling/software/common/service/MobileScannerService.java
+++ b/app/common/src/main/java/stirling/software/common/service/MobileScannerService.java
@@ -225,19 +225,21 @@ public class MobileScannerService {
                 Path sessionDir = getSafeSessionDirectory(sessionId);
                 if (Files.exists(sessionDir)) {
                     // Delete all files in session directory
-                    Files.walk(sessionDir)
-                            .sorted(
-                                    (a, b) ->
-                                            -a.compareTo(b)) // Reverse order to delete files before
-                            // directory
-                            .forEach(
-                                    path -> {
-                                        try {
-                                            Files.deleteIfExists(path);
-                                        } catch (IOException e) {
-                                            log.warn("Failed to delete file: {}", path, e);
-                                        }
-                                    });
+                    try (var paths = Files.walk(sessionDir)) {
+                        paths.sorted(
+                                        (a, b) ->
+                                                -a.compareTo(
+                                                        b)) // Reverse order to delete files before
+                                // directory
+                                .forEach(
+                                        path -> {
+                                            try {
+                                                Files.deleteIfExists(path);
+                                            } catch (IOException e) {
+                                                log.warn("Failed to delete file: {}", path, e);
+                                            }
+                                        });
+                    }
                 }
                 log.info("Deleted session: {}", sessionId);
             } catch (IllegalArgumentException e) {
diff --git a/app/common/src/main/java/stirling/software/common/service/TaskManager.java b/app/common/src/main/java/stirling/software/common/service/TaskManager.java
index 3fd9ac3fe4..f504b39395 100644
--- a/app/common/src/main/java/stirling/software/common/service/TaskManager.java
+++ b/app/common/src/main/java/stirling/software/common/service/TaskManager.java
@@ -48,6 +48,10 @@ public class TaskManager {
     @Value("${stirling.jobResultExpiryMinutes:30}")
     private int jobResultExpiryMinutes = 30;
 
+    /** Maximum age of a task that never reached a terminal state. */
+    @Value("${stirling.job.pendingExpiryMinutes:1440}")
+    private int pendingJobExpiryMinutes = 1440;
+
     private final FileStorage fileStorage;
     private final JobStore jobStore;
     private final ClusterBackplane clusterBackplane;
@@ -332,19 +336,32 @@ public class TaskManager {
         }
         LocalDateTime expiryThreshold =
                 LocalDateTime.now().minus(jobResultExpiryMinutes, ChronoUnit.MINUTES);
+        LocalDateTime pendingExpiryThreshold =
+                LocalDateTime.now().minus(pendingJobExpiryMinutes, ChronoUnit.MINUTES);
         int removedCount = 0;
 
         try {
             for (Map.Entry<String, JobResult> entry : jobResults.entrySet()) {
                 JobResult result = entry.getValue();
 
-                // Remove completed jobs that are older than the expiry threshold
-                if (result.isComplete()
-                        && result.getCompletedAt() != null
-                        && result.getCompletedAt().isBefore(expiryThreshold)) {
+                boolean expiredCompletedJob =
+                        result.isComplete()
+                                && result.getCompletedAt() != null
+                                && result.getCompletedAt().isBefore(expiryThreshold);
+                boolean abandonedPendingJob =
+                        !result.isComplete()
+                                && result.getCreatedAt() != null
+                                && result.getCreatedAt().isBefore(pendingExpiryThreshold);
+
+                // Remove old terminal results and abandoned pending jobs. Without the second
+                // branch, a client that starts a task and never completes it keeps its result in
+                // memory forever.
+                if (expiredCompletedJob || abandonedPendingJob) {
 
                     // Clean up file results
-                    cleanupJobFiles(result, entry.getKey());
+                    if (expiredCompletedJob) {
+                        cleanupJobFiles(result, entry.getKey());
+                    }
 
                     // Remove the job result
                     jobResults.remove(entry.getKey());
diff --git a/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java b/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java
index b4821edd9c..9d2d1b74db 100644
--- a/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java
+++ b/app/common/src/main/java/stirling/software/common/util/RegexPatternUtils.java
@@ -1,17 +1,22 @@
 package stirling.software.common.util;
 
 import java.util.Set;
-import java.util.concurrent.ConcurrentHashMap;
 import java.util.regex.Pattern;
 import java.util.regex.PatternSyntaxException;
 
+import com.google.common.cache.Cache;
+import com.google.common.cache.CacheBuilder;
+import com.google.common.util.concurrent.UncheckedExecutionException;
+
 import lombok.extern.slf4j.Slf4j;
 
 @Slf4j
 public final class RegexPatternUtils {
 
     private static final RegexPatternUtils INSTANCE = new RegexPatternUtils();
-    private final ConcurrentHashMap<PatternKey, Pattern> patternCache = new ConcurrentHashMap<>();
+    private static final long MAX_CACHED_PATTERNS = 512;
+    private final Cache<PatternKey, Pattern> patternCache =
+            CacheBuilder.newBuilder().maximumSize(MAX_CACHED_PATTERNS).build();
 
     private static final String WHITESPACE_REGEX = "\\s++";
     private static final String EXTENSION_REGEX = "\\.(?:[^.]*+)?$";
@@ -51,7 +56,7 @@ public final class RegexPatternUtils {
             throw new IllegalArgumentException("Regex pattern cannot be null");
         }
 
-        return patternCache.computeIfAbsent(new PatternKey(regex, 0), this::compilePattern);
+        return getOrCompile(new PatternKey(regex, 0));
     }
 
     /**
@@ -77,7 +82,7 @@ public final class RegexPatternUtils {
             throw new IllegalArgumentException("Regex pattern cannot be null");
         }
 
-        return patternCache.computeIfAbsent(new PatternKey(regex, flags), this::compilePattern);
+        return getOrCompile(new PatternKey(regex, flags));
     }
 
     /**
@@ -98,7 +103,7 @@ public final class RegexPatternUtils {
      * @return true if pattern is cached, false otherwise
      */
     public boolean isCached(String regex, int flags) {
-        return regex != null && patternCache.containsKey(new PatternKey(regex, flags));
+        return regex != null && patternCache.getIfPresent(new PatternKey(regex, flags)) != null;
     }
 
     /**
@@ -107,7 +112,7 @@ public final class RegexPatternUtils {
      * @return number of patterns currently cached
      */
     public int getCacheSize() {
-        return patternCache.size();
+        return (int) patternCache.size();
     }
 
     /**
@@ -115,7 +120,7 @@ public final class RegexPatternUtils {
      * useful for testing or memory cleanup in long-running applications.
      */
     public void clearCache() {
-        patternCache.clear();
+        patternCache.invalidateAll();
         log.debug("Regex pattern cache cleared");
     }
 
@@ -141,13 +146,32 @@ public final class RegexPatternUtils {
             return false;
         }
         PatternKey key = new PatternKey(regex, flags);
-        boolean removed = patternCache.remove(key) != null;
+        boolean removed = patternCache.getIfPresent(key) != null;
+        patternCache.invalidate(key);
         if (removed) {
             log.debug("Removed regex pattern from cache: {} (flags: {})", regex, flags);
         }
         return removed;
     }
 
+    private Pattern getOrCompile(PatternKey key) {
+        try {
+            return patternCache.get(key, () -> compilePattern(key));
+        } catch (UncheckedExecutionException e) {
+            Throwable cause = e.getCause();
+            if (cause instanceof PatternSyntaxException patternSyntaxException) {
+                throw patternSyntaxException;
+            }
+            throw e;
+        } catch (java.util.concurrent.ExecutionException e) {
+            Throwable cause = e.getCause();
+            if (cause instanceof PatternSyntaxException patternSyntaxException) {
+                throw patternSyntaxException;
+            }
+            throw new IllegalStateException("Failed to compile regex pattern", cause);
+        }
+    }
+
     /**
      * Internal method to compile a pattern and handle errors consistently.
      *
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/config/AsyncConfig.java b/app/proprietary/src/main/java/stirling/software/proprietary/config/AsyncConfig.java
index ea096a8d23..3ba4adcbee 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/config/AsyncConfig.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/config/AsyncConfig.java
@@ -2,6 +2,7 @@ package stirling.software.proprietary.config;
 
 import java.util.Map;
 import java.util.concurrent.Executor;
+import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
 
 import org.slf4j.MDC;
@@ -12,10 +13,15 @@ import org.springframework.core.task.support.TaskExecutorAdapter;
 import org.springframework.scheduling.annotation.EnableAsync;
 import org.springframework.security.concurrent.DelegatingSecurityContextExecutor;
 
+import jakarta.annotation.PreDestroy;
+
 @Configuration
 @EnableAsync
 public class AsyncConfig {
 
+    private ExecutorService auditExecutorService;
+    private ExecutorService aiStreamExecutorService;
+
     /**
      * MDC context-propagating task decorator. Copies MDC context from the caller thread to the
      * virtual thread executing the task.
@@ -44,8 +50,8 @@ public class AsyncConfig {
 
     @Bean(name = "auditExecutor")
     public Executor auditExecutor() {
-        TaskExecutorAdapter adapter =
-                new TaskExecutorAdapter(Executors.newVirtualThreadPerTaskExecutor());
+        auditExecutorService = Executors.newVirtualThreadPerTaskExecutor();
+        TaskExecutorAdapter adapter = new TaskExecutorAdapter(auditExecutorService);
         adapter.setTaskDecorator(new MDCContextTaskDecorator());
         return adapter;
     }
@@ -53,9 +59,25 @@ public class AsyncConfig {
     /** Propagates the request's SecurityContext onto background AI-orchestration threads. */
     @Bean(name = "aiStreamExecutor")
     public Executor aiStreamExecutor() {
-        TaskExecutorAdapter adapter =
-                new TaskExecutorAdapter(Executors.newVirtualThreadPerTaskExecutor());
+        aiStreamExecutorService = Executors.newVirtualThreadPerTaskExecutor();
+        TaskExecutorAdapter adapter = new TaskExecutorAdapter(aiStreamExecutorService);
         adapter.setTaskDecorator(new MDCContextTaskDecorator());
         return new DelegatingSecurityContextExecutor(adapter);
     }
+
+    /**
+     * Close the underlying executors because the exposed Spring adapters do not own their
+     * lifecycle.
+     */
+    @PreDestroy
+    void shutdown() {
+        shutdownExecutor(auditExecutorService);
+        shutdownExecutor(aiStreamExecutorService);
+    }
+
+    private void shutdownExecutor(ExecutorService executor) {
+        if (executor != null) {
+            executor.shutdownNow();
+        }
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java
index e6dce0ee7b..1f31d153a6 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java
@@ -16,6 +16,8 @@ import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.stereotype.Service;
 import org.springframework.web.client.RestClientResponseException;
 
+import jakarta.annotation.PreDestroy;
+
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
@@ -79,6 +81,21 @@ public class PolicyEngine {
 
     private final ExecutorService asyncExecutor = ExecutorFactory.newVirtualThreadExecutor();
 
+    /** Stop the service-owned executor when the application context is closed or restarted. */
+    @PreDestroy
+    void shutdown() {
+        log.debug("Shutting down policy engine executor");
+        asyncExecutor.shutdown();
+        try {
+            if (!asyncExecutor.awaitTermination(5, java.util.concurrent.TimeUnit.SECONDS)) {
+                asyncExecutor.shutdownNow();
+            }
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            asyncExecutor.shutdownNow();
+        }
+    }
+
     /**
      * Submit a pipeline to run asynchronously. The handle's run id scopes a {@link TaskManager} job
      * (status/notes/results observable via the job endpoints); its future resolves when the run

From 2265e48b3215f77a3b52cf0c6ce47f94f1dcc3c2 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Thu, 6 Aug 2026 13:43:53 +0200
Subject: [PATCH 082/122] chore(ci): optimize GitHub Actions Gradle caching
 across workflows (#7299)

# Description of Changes

This PR refactors Gradle caching across the GitHub Actions workflows to
improve cache reuse, reduce dependency resolution overhead, and shorten
CI execution times.

### What was changed

- Replaced multiple `gradle/actions/setup-gradle` steps with a unified
`actions/cache`-based Gradle User Home cache strategy.
- Standardized cache paths across workflows to include:
  - `~/.gradle/caches`
  - `~/.gradle/wrapper`
- Introduced consistent cache keys using:
  - Runner OS
  - Runner architecture
  - JDK version
- Hashes of Gradle wrapper, version catalog, Gradle build files, and
project build scripts.
- Added restore keys to maximize cache hit rates across similar
environments.
- Added a new **`gradle-cache-prime`** job in the main build workflow
that:
  - Restores or creates the shared Gradle cache.
  - Resolves backend dependencies before downstream jobs execute.
  - Makes the populated cache available to subsequent jobs.
- Updated workflow dependencies so Gradle-based jobs wait for the cache
priming job before execution.
- Simplified and unified Gradle cache handling across numerous CI
workflows, including backend builds, OpenAPI generation, database
migration tests, Docker tests, Tauri builds, Swagger generation,
enterprise builds, release workflows, and license generation.
- Updated workflow comments to reflect the new caching strategy and
shared cache behavior.

### Why the change was made

The previous workflows used a mixture of Gradle setup actions and
partial dependency caches, leading to duplicated dependency downloads,
inconsistent cache behavior, and longer CI runtimes. Consolidating all
workflows onto a shared Gradle User Home cache with a dedicated cache
priming job improves cache reuse, reduces unnecessary dependency
resolution, and makes CI execution more consistent.



---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../workflows/PR-Demo-Comment-with-react.yml  | 12 +++--
 .github/workflows/backend-build.yml           | 16 +++---
 .github/workflows/build-enterprise.yml        | 10 ++++
 .github/workflows/build.yml                   | 53 +++++++++++++++----
 .github/workflows/check-generated-models.yml  | 12 +++--
 .github/workflows/check-licence.yml           | 16 +++---
 .github/workflows/check-openapi.yml           | 16 +++---
 .github/workflows/coverage-aggregate.yml      | 22 ++++----
 .github/workflows/db-migration-test.yml       | 20 +++----
 .github/workflows/docker-compose-tests.yml    | 16 +++---
 .github/workflows/e2e-live.yml                | 17 +++---
 .../frontend-backend-licenses-update.yml      | 12 +++--
 .github/workflows/multiOSReleases.yml         | 36 ++++++++-----
 .github/workflows/push-docker.yml             | 12 ++---
 .github/workflows/swagger.yml                 | 12 +++--
 .github/workflows/tauri-build.yml             | 12 +++--
 .github/workflows/test-build-docker.yml       | 16 +++---
 .github/workflows/testdriver.yml              | 12 +++--
 18 files changed, 187 insertions(+), 135 deletions(-)

diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index e48a6170da..3826897a39 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -211,10 +211,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/backend-build.yml b/.github/workflows/backend-build.yml
index 4d133593d3..47b5591e19 100644
--- a/.github/workflows/backend-build.yml
+++ b/.github/workflows/backend-build.yml
@@ -40,20 +40,16 @@ jobs:
           java-version: ${{ matrix.jdk-version }}
           distribution: "temurin"
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-${{ matrix.jdk-version }}-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-${{ matrix.jdk-version }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-${{ matrix.jdk-version }}-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index 0fb02ad90f..398cca3144 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -60,6 +60,16 @@ jobs:
         with:
           java-version: "25"
           distribution: "temurin"
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
       - name: Set up Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9d4aee192d..4ad4b046e6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -60,8 +60,43 @@ jobs:
         with:
           filters: .github/config/.files.yaml
 
-  build:
+  gradle-cache-prime:
+    name: Prime shared Gradle cache
     needs: [files-changed]
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        with:
+          egress-policy: audit
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Set up JDK 25
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        with:
+          java-version: "25"
+          distribution: "temurin"
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
+      - name: Resolve backend dependencies
+        run: ./gradlew :stirling-pdf:classes -PnoSpotless --no-daemon
+        env:
+          STIRLING_FLAVOR: saas
+          MAVEN_USER: ${{ secrets.MAVEN_USER }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
+
+  build:
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       actions: read
       contents: read
@@ -76,7 +111,7 @@ jobs:
     # works after Hibernate's ddl-auto=update migrates the schema. Gated on
     # the `project` filter so doc-only PRs skip this ~5-minute job.
     if: needs.files-changed.outputs.project == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
     uses: ./.github/workflows/db-migration-test.yml
@@ -84,7 +119,7 @@ jobs:
 
   check-generateOpenApiDocs:
     if: needs.files-changed.outputs.openapi == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
     uses: ./.github/workflows/check-openapi.yml
@@ -120,7 +155,7 @@ jobs:
 
   playwright-e2e-live:
     if: needs.files-changed.outputs.frontend == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
     uses: ./.github/workflows/e2e-live.yml
@@ -128,7 +163,7 @@ jobs:
 
   playwright-e2e-enterprise:
     if: needs.files-changed.outputs.proprietary == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
     uses: ./.github/workflows/build-enterprise.yml
@@ -136,7 +171,7 @@ jobs:
 
   check-licence:
     if: needs.files-changed.outputs.build == 'true'
-    needs: [files-changed, build]
+    needs: [files-changed, build, gradle-cache-prime]
     permissions:
       contents: read
     uses: ./.github/workflows/check-licence.yml
@@ -144,7 +179,7 @@ jobs:
 
   docker-compose-tests:
     if: needs.files-changed.outputs.project == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       actions: write
       contents: read
@@ -156,7 +191,7 @@ jobs:
 
   test-build-docker-images:
     if: github.event_name == 'pull_request' && needs.files-changed.outputs.project == 'true'
-    needs: [files-changed, build, check-generateOpenApiDocs, check-licence]
+    needs: [files-changed, build, check-generateOpenApiDocs, check-licence, gradle-cache-prime]
     permissions:
       contents: read
       packages: read
@@ -199,7 +234,7 @@ jobs:
   # frontend filter, so a CSS-only PR does not pay for a backend build.
   generated-models:
     if: needs.files-changed.outputs.generated-models == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index a758c4268e..a8559a7d78 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -42,10 +42,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.0
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Set up Node
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
diff --git a/.github/workflows/check-licence.yml b/.github/workflows/check-licence.yml
index c9f64a0b93..61d21c0501 100644
--- a/.github/workflows/check-licence.yml
+++ b/.github/workflows/check-licence.yml
@@ -26,20 +26,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/check-openapi.yml b/.github/workflows/check-openapi.yml
index eb89d32629..c188e8ff23 100644
--- a/.github/workflows/check-openapi.yml
+++ b/.github/workflows/check-openapi.yml
@@ -27,20 +27,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/coverage-aggregate.yml b/.github/workflows/coverage-aggregate.yml
index e3a871b08e..1ece083252 100644
--- a/.github/workflows/coverage-aggregate.yml
+++ b/.github/workflows/coverage-aggregate.yml
@@ -46,20 +46,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Set up Python
         uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
@@ -81,7 +77,7 @@ jobs:
       # Each lands as a sibling dir under coverage-execs/, with the .exec
       # files preserving their original relative paths.
       - name: Download all .exec artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: jacoco-exec-*
           path: coverage-execs/
@@ -206,7 +202,7 @@ jobs:
         # absence on backend-only runs by skipping the download entirely
         # when the producer job was not part of this workflow run.
         if: inputs.frontend-validation-result == 'success'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: frontend-coverage
           path: matrix-inputs/vitest/
@@ -216,7 +212,7 @@ jobs:
         # e2e-live uploads the artifact with a stable name. Skip the
         # download entirely when the producer job did not run.
         if: inputs.playwright-e2e-live-result == 'success'
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v6.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: playwright-frontend-coverage
           path: matrix-inputs/playwright/
diff --git a/.github/workflows/db-migration-test.yml b/.github/workflows/db-migration-test.yml
index 8bd28fc060..edb2d0547c 100644
--- a/.github/workflows/db-migration-test.yml
+++ b/.github/workflows/db-migration-test.yml
@@ -30,23 +30,19 @@ jobs:
           java-version: 25
           distribution: temurin
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
-
-      # No `-PnoSpotless` here yet because the upstream cache layer matches the
-      # backend build's; reuse keeps cold-cache cost identical.
+      # Keep the normal formatting path here so this smoke test exercises the
+      # same Gradle configuration as the backend build.
       - name: Build Stirling-PDF JAR
         env:
           MAVEN_USER: ${{ secrets.MAVEN_USER }}
diff --git a/.github/workflows/docker-compose-tests.yml b/.github/workflows/docker-compose-tests.yml
index 9b81f774ef..049db8adc0 100644
--- a/.github/workflows/docker-compose-tests.yml
+++ b/.github/workflows/docker-compose-tests.yml
@@ -38,20 +38,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       # When the PR changes the base image, test.sh builds it locally
       # (stirling-pdf-base:local) into the daemon image store. A buildx
diff --git a/.github/workflows/e2e-live.yml b/.github/workflows/e2e-live.yml
index 302663cbf9..0e64b89099 100644
--- a/.github/workflows/e2e-live.yml
+++ b/.github/workflows/e2e-live.yml
@@ -25,21 +25,16 @@ jobs:
         with:
           java-version: "25"
           distribution: "temurin"
-      # Same cache layer as backend-build.yml. Without it every run resolved the
-      # whole classpath cold and eventually got HTTP 429 from Maven Central.
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
       # Gradle does not retry 429s, and a cold cache resolving the buildscript
       # classpath is exactly where Maven Central rate-limits us. Retry it here,
       # where a failure is cheap, instead of inside the backgrounded bootRun.
diff --git a/.github/workflows/frontend-backend-licenses-update.yml b/.github/workflows/frontend-backend-licenses-update.yml
index 8c852ae08f..1f901a7f05 100644
--- a/.github/workflows/frontend-backend-licenses-update.yml
+++ b/.github/workflows/frontend-backend-licenses-update.yml
@@ -350,10 +350,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index 8303cf102a..f5a99a0ef2 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -57,20 +57,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependencies
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.gradle/caches
             ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties') }}
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
           restore-keys: |
-            gradle-${{ runner.os }}-
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
@@ -151,10 +147,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Setup Node.js
         if: matrix.variant.build_frontend == true
@@ -255,10 +257,16 @@ jobs:
           java-version: "25"
           distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index 12fcd23f6c..f4416a726d 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -65,20 +65,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependencies
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.gradle/caches
             ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties') }}
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
           restore-keys: |
-            gradle-${{ runner.os }}-
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Set up Docker Buildx
         id: buildx
diff --git a/.github/workflows/swagger.yml b/.github/workflows/swagger.yml
index ffbeafdd1e..76b28c4566 100644
--- a/.github/workflows/swagger.yml
+++ b/.github/workflows/swagger.yml
@@ -39,10 +39,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Generate Swagger documentation
         run: ./gradlew :stirling-pdf:generateOpenApiDocs
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index 415e8be4e5..09422a8093 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -179,10 +179,16 @@ jobs:
           java-version: "25"
           distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Setup Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index d935cac53d..7f8c72d41e 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -84,20 +84,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle dependency artifacts
+      - name: Cache Gradle User Home
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
+            ~/.gradle/caches
             ~/.gradle/wrapper
-            ~/.gradle/caches/modules-2/files-2.1
-            ~/.gradle/caches/modules-2/metadata-2.*
-          key: gradle-deps-${{ runner.os }}-jdk-25-${{ hashFiles('**/gradle/wrapper/gradle-wrapper.properties', '**/*.gradle', '**/*.gradle.kts', 'settings.gradle', 'settings.gradle.kts', 'gradle/libs.versions.toml') }}
-
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
-        with:
-          gradle-version: 9.6.1
-          cache-disabled: true
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index a7f74df4a7..a8d777744a 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -38,10 +38,16 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
+      - name: Cache Gradle User Home
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          gradle-version: 9.6.1
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
+            gradle-${{ runner.os }}-${{ runner.arch }}-
 
       - name: Build with Gradle
         run: ./gradlew build

From 8094765babe12b96d46e5d61f1d258fa29b1eb81 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Thu, 6 Aug 2026 13:44:12 +0200
Subject: [PATCH 083/122] build(licenses): Module-specific license. Add
 dependency overrides. (#7049)

# Description of Changes

This change adds a version-scoped override mechanism for dependencies
whose published metadata does not expose a detectable license.

- Added `app/license-overrides.json` with verified Apache License 2.0
metadata for:
  - `com.hubspot.immutables:immutables-exceptions:1.9`
  - `com.hubspot:algebra:1.5`
- Added `ModuleLicenseOverrideFilter` as custom `buildSrc` logic for the
Gradle dependency license report plugin.
- Applied overrides only when the exact `group:artifact:version` matches
and no usable license metadata was detected.
- Added automatic maintenance of the override file:
  - Removes overrides when the dependency is no longer resolved.
- Removes overrides when the dependency starts publishing valid license
metadata.
- Migrates stale overrides to newer unresolved versions and clears their
metadata for re-verification.
- Adds null-valued placeholders for newly detected dependencies without
license metadata.
- Preserves populated overrides for newer versions when already present.
- Added Gradle version-aware dependency ordering for override migration.
- Registered `app/license-overrides.json` as an input for license-report
and license-check preparation tasks.
- Centralized the dependency license report plugin version in
`buildSrc`.
- Added unit tests covering override application, cleanup, migration,
exact-version matching, concurrent versions, placeholder generation, and
numeric version ordering.
- Added documentation describing the override lifecycle, verification
requirements, maintenance workflow, and validation commands.
- Replaced broad null-license allowances for the two HubSpot modules
with explicit Apache License 2.0 metadata.
- Added accepted GNU Lesser General Public License name variants
encountered in dependency metadata.

The change was made because some dependencies have known upstream
licenses but do not publish license metadata in a form detected by the
Gradle license report plugin. Previously, these dependencies were
permitted through module-specific null-license exceptions, leaving
incomplete information in the generated report. The new mechanism
supplies verified metadata without overriding valid metadata published
by dependencies.

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 app/allowed-licenses.json                     |  16 +-
 app/license-overrides.json                    |  12 +
 build.gradle                                  |  13 +-
 buildSrc/README.md                            | 168 +++++++++++
 buildSrc/build.gradle                         |  22 ++
 .../gradle/ModuleLicenseOverrideFilter.groovy | 173 ++++++++++++
 .../ModuleLicenseOverrideFilterTest.groovy    | 265 ++++++++++++++++++
 docker/backend/Dockerfile                     |   2 +
 docker/embedded/Dockerfile                    |   2 +
 docker/embedded/Dockerfile.fat                |   2 +
 docker/embedded/Dockerfile.ultra-lite         |   2 +
 11 files changed, 668 insertions(+), 9 deletions(-)
 create mode 100644 app/license-overrides.json
 create mode 100644 buildSrc/README.md
 create mode 100644 buildSrc/build.gradle
 create mode 100644 buildSrc/src/main/groovy/stirling/software/gradle/ModuleLicenseOverrideFilter.groovy
 create mode 100644 buildSrc/src/test/groovy/stirling/software/gradle/ModuleLicenseOverrideFilterTest.groovy

diff --git a/app/allowed-licenses.json b/app/allowed-licenses.json
index 9b5ef66556..033661629f 100644
--- a/app/allowed-licenses.json
+++ b/app/allowed-licenses.json
@@ -156,6 +156,14 @@
       "moduleName": ".*",
       "moduleLicense": "GNU GENERAL PUBLIC LICENSE, Version 2 + Classpath Exception"
     },
+    {
+      "moduleName": ".*",
+      "moduleLicense": "GNU Lesser Public License"
+    },
+    {
+      "moduleName": ".*",
+      "moduleLicense": "The GNU Lesser General Public License"
+    },
     {
       "moduleName": "com.martiansoftware:jsap",
       "moduleLicense": "LGPL"
@@ -224,14 +232,6 @@
       "moduleName": "com.google.re2j:re2j",
       "moduleLicense": "Go License"
     },
-    {
-      "moduleName": "com.hubspot:algebra",
-      "moduleLicense": null
-    },
-    {
-      "moduleName": "com.hubspot.immutables:immutables-exceptions",
-      "moduleLicense": null
-    },
     {
       "moduleName": ".*",
       "moduleLicense": "UnRar License"
diff --git a/app/license-overrides.json b/app/license-overrides.json
new file mode 100644
index 0000000000..0ea43fcaf9
--- /dev/null
+++ b/app/license-overrides.json
@@ -0,0 +1,12 @@
+{
+    "com.hubspot.immutables:immutables-exceptions:1.9": {
+        "name": "The Apache License, Version 2.0",
+        "url": "http://www.apache.org/licenses/LICENSE-2.0.txt",
+        "projectUrl": "https://github.com/HubSpot/hubspot-immutables/tree/58628096ac99b286fe4f8bfe12aa3cff0f0589d3"
+    },
+    "com.hubspot:algebra:1.5": {
+        "name": "The Apache License, Version 2.0",
+        "url": "http://www.apache.org/licenses/LICENSE-2.0.txt",
+        "projectUrl": "https://github.com/HubSpot/algebra/tree/5d42983fd3a26539df9ba2cbeac32a1bddce0494"
+    }
+}
diff --git a/build.gradle b/build.gradle
index 2af5522a73..31fa6b1bdb 100644
--- a/build.gradle
+++ b/build.gradle
@@ -6,7 +6,7 @@ plugins {
     id "org.springdoc.openapi-gradle-plugin" version "1.9.0"
     id "io.swagger.swaggerhub" version "1.3.2"
     id "com.diffplug.spotless" version "8.8.0"
-    id "com.github.jk1.dependency-license-report" version "3.1.2"
+    id "com.github.jk1.dependency-license-report"
     //id "nebula.lint" version "19.0.3"
     id "org.sonarqube" version "7.2.3.7755"
 }
@@ -18,6 +18,7 @@ import groovy.xml.XmlSlurper
 import org.gradle.api.JavaVersion
 import org.gradle.api.tasks.testing.Test
 import org.gradle.jvm.toolchain.JavaLanguageVersion
+import stirling.software.gradle.ModuleLicenseOverrideFilter
 
 ext {
     springBootVersion = "4.0.6"
@@ -550,6 +551,7 @@ gradle.taskGraph.whenReady { graph ->
 }
 
 def allProjects = ((subprojects as Set<Project>) + project) as Set<Project>
+def moduleLicenseOverridesFile = project.layout.projectDirectory.file("app/license-overrides.json").asFile
 
 licenseReport {
     projects = allProjects
@@ -557,6 +559,15 @@ licenseReport {
     allowedLicensesFile = project.layout.projectDirectory.file("app/allowed-licenses.json").asFile
     outputDir = project.layout.buildDirectory.dir("reports/dependency-license").get().asFile.path
     configurations = [ "productionRuntimeClasspath", "runtimeClasspath" ]
+    filters = [new ModuleLicenseOverrideFilter(moduleLicenseOverridesFile)]
+}
+
+tasks.named('generateLicenseReport') {
+    inputs.file(moduleLicenseOverridesFile)
+}
+
+tasks.named('checkLicensePreparation') {
+    inputs.file(moduleLicenseOverridesFile)
 }
 
 // Configure the forked spring boot run task to properly delegate to the stirling-pdf module
diff --git a/buildSrc/README.md b/buildSrc/README.md
new file mode 100644
index 0000000000..bbcfb0de6c
--- /dev/null
+++ b/buildSrc/README.md
@@ -0,0 +1,168 @@
+# Dependency license overrides
+
+The backend dependency license report is generated by the
+[`com.github.jk1.dependency-license-report`](https://github.com/jk1/Gradle-License-Report)
+Gradle plugin. Most license information is read from dependency POM files, manifests, or packaged
+license files. Some artifacts do not publish license metadata in a form the plugin can detect, even
+though the artifact has a known license.
+
+This directory contains the build logic used to provide narrowly scoped fallback license metadata
+for those artifacts.
+
+## Files
+
+- `build.gradle` makes version 3.1.4 of the license report plugin available to the custom build
+  logic. The root build applies that plugin without a second version declaration so both use the
+  same classpath.
+- `src/main/groovy/stirling/software/gradle/ModuleLicenseOverrideFilter.groovy` implements the
+  plugin's `DependencyFilter` interface.
+- `../app/license-overrides.json` contains the actual module-specific fallback values.
+- `../app/allowed-licenses.json` defines which detected or supplied licenses are accepted by
+  `checkLicense`.
+
+## How it works
+
+The root `build.gradle` passes `app/license-overrides.json` to
+`ModuleLicenseOverrideFilter`:
+
+```groovy
+filters = [new ModuleLicenseOverrideFilter(moduleLicenseOverridesFile)]
+```
+
+For every dependency discovered by the license plugin, the filter builds an identifier in this
+format:
+
+```text
+group:artifact:version
+```
+
+The filter applies a populated override only when both conditions are true:
+
+1. The complete identifier, including the version, exists in `app/license-overrides.json`.
+2. The plugin did not discover a non-empty license name for that dependency.
+
+When both conditions match, the filter adds the configured license as fallback manifest metadata.
+The normal report renderer and `checkLicense` then consume that metadata in the same way as
+metadata discovered from the dependency itself.
+
+An override never replaces a license that the plugin already detected. Updating a dependency also
+does not silently reuse the override because a different version produces a different identifier.
+
+Overrides are temporary fallbacks, not a permanent license catalog. If the plugin starts detecting
+the original license for an overridden module, the filter automatically removes that exact entry
+from `app/license-overrides.json` and logs the cleanup. When the overridden version is no longer
+resolved, a newer resolved version takes its place: if it declares a license, the stale entry is
+removed; otherwise the entry moves to the new exact version and its values are cleared for
+re-verification. An already populated entry for the new version is preserved. If no higher version
+is resolved, the unused override is removed instead.
+
+Because the report aggregates several projects and configurations, multiple versions of the same
+`group:artifact` can be present at once. An override is retained whenever its exact version is still
+resolved. Only when that exact version is absent may the filter treat a higher version as an update;
+version ordering then follows Gradle's own dependency version comparator. Overrides for dependency
+versions that are no longer resolved and have no higher replacement are deleted automatically.
+
+The filter also records every resolved dependency without detected license metadata that has no
+override yet. It writes a placeholder with `null` values for `name`, `url`, and `projectUrl`.
+Placeholders deliberately do not affect the generated report until `name` is filled in. This makes
+new missing metadata visible in the source-controlled override file instead of only in a generated
+report. Review and fill or remove every new placeholder before committing the resulting JSON.
+
+## Adding an override
+
+First verify the license from an authoritative source such as the upstream repository, the
+published artifact metadata, or the license file shipped inside the artifact. Do not infer a
+license from the organization name or from a related artifact.
+
+Add an entry to `app/license-overrides.json`:
+
+```json
+{
+  "com.example:example-library:1.2.3": {
+    "name": "Apache License, Version 2.0",
+    "url": "https://www.apache.org/licenses/LICENSE-2.0",
+    "projectUrl": "https://github.com/example/example-library/tree/0123456789abcdef0123456789abcdef01234567"
+  }
+}
+```
+
+The key must contain the exact resolved version. `name` must be non-empty for the override to be
+applied. `url` should point to the canonical license text. `projectUrl` must point to the immutable
+Git tree for the exact module version, using the commit hash at which that version was introduced:
+
+```text
+https://github.com/<owner>/<repository>/tree/<full-commit-hash>
+```
+
+Do not use the repository's default branch or another moving URL. See the existing entries in
+`app/license-overrides.json` for concrete examples.
+
+If the license name is not already accepted, add a suitably narrow rule to
+`app/allowed-licenses.json`. Adding an override and allowing a license are separate operations:
+
+- `license-overrides.json` supplies missing metadata for a specific artifact version.
+- `allowed-licenses.json` defines the policy enforced by `checkLicense`.
+
+## Updating a dependency
+
+When an overridden dependency changes version:
+
+1. Verify the license for the new version again.
+2. Run the license report so the filter can move the old key or add a placeholder for the new full
+   `group:artifact:version` key.
+3. Re-verify and fill the license values and the version's immutable Git-tree `projectUrl`; moved
+   values are intentionally cleared because a license conclusion for one release is not assumed
+   for another.
+4. Regenerate and inspect the report.
+
+If the new artifact publishes usable license metadata, no override is necessary. The next license
+report or license check removes the old entry from `app/license-overrides.json` automatically. The
+file must contain only overrides that are still needed.
+
+## Verification
+
+Run the filter unit tests:
+
+```powershell
+.\gradlew.bat -p buildSrc test
+```
+
+The tests use `com.example:example-library` versions 1.4 and 1.7 to cover the missing
+metadata fallback, placeholder creation, version migration, preservation of a populated newer
+override, automatic cleanup after license metadata appears, exact-version matching, and concurrent
+resolved versions. They also verify removal when a dependency version disappears. A separate `1.9`
+to `1.11.0` case verifies numeric Gradle version ordering.
+
+Run the normal backend license workflow from the repository root:
+
+```powershell
+task backend:licenses:generate
+```
+
+Then inspect:
+
+- `build/reports/dependency-license/index.json` for the rendered module, version, license name, and
+  URL.
+- `build/reports/dependency-license/dependencies-without-allowed-license.json` when `checkLicense`
+  reports a policy failure.
+
+Also run the backend quality gate after changing the filter or its build wiring:
+
+```powershell
+task backend:check
+```
+
+The override JSON is registered as an input of `generateLicenseReport` and
+`checkLicensePreparation`, so changing the file invalidates the corresponding Gradle task outputs.
+
+## What not to do
+
+- Do not use an unversioned key. It cannot match the filter and would make the intended scope
+  ambiguous.
+- Do not use an override to replace valid license metadata published by a dependency.
+- Do not add an empty license to `allowed-licenses.json` merely to silence `checkLicense`; that
+  would still leave the generated report without useful license information.
+- Do not exclude a dependency from the report solely because it is transitive. Runtime transitive
+  dependencies are still distributed components and their licenses remain relevant.
+- Do not edit generated files under `build/reports/dependency-license` or the copied static license
+  report by hand.
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
new file mode 100644
index 0000000000..25eee5c0f5
--- /dev/null
+++ b/buildSrc/build.gradle
@@ -0,0 +1,22 @@
+plugins {
+    id 'groovy'
+}
+
+repositories {
+    gradlePluginPortal()
+}
+
+dependencies {
+    implementation localGroovy()
+    implementation gradleApi()
+    implementation 'com.github.jk1:gradle-license-report:3.1.4'
+    testImplementation platform('org.junit:junit-bom:6.1.2')
+    testImplementation 'org.junit.jupiter:junit-jupiter'
+    testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
+}
+
+tasks.named('test') {
+    useJUnitPlatform()
+    jvmArgs '--add-opens=java.base/java.lang=ALL-UNNAMED'
+    testLogging.showStandardStreams = true
+}
diff --git a/buildSrc/src/main/groovy/stirling/software/gradle/ModuleLicenseOverrideFilter.groovy b/buildSrc/src/main/groovy/stirling/software/gradle/ModuleLicenseOverrideFilter.groovy
new file mode 100644
index 0000000000..df0d76158c
--- /dev/null
+++ b/buildSrc/src/main/groovy/stirling/software/gradle/ModuleLicenseOverrideFilter.groovy
@@ -0,0 +1,173 @@
+package stirling.software.gradle
+
+import com.github.jk1.license.License
+import com.github.jk1.license.ManifestData
+import com.github.jk1.license.ModuleData
+import com.github.jk1.license.ProjectData
+import com.github.jk1.license.filter.DependencyFilter
+import com.github.jk1.license.render.LicenseDataCollector
+import groovy.json.JsonOutput
+import groovy.json.JsonSlurper
+import org.gradle.api.internal.artifacts.ivyservice.ivyresolve.strategy.DefaultVersionComparator
+import org.gradle.api.internal.artifacts.ivyservice.ivyresolve.strategy.Version
+import org.gradle.api.internal.artifacts.ivyservice.ivyresolve.strategy.VersionParser
+
+class ModuleLicenseOverrideFilter implements DependencyFilter {
+    private static final VersionParser VERSION_PARSER = new VersionParser()
+    private static final Comparator<Version> VERSION_COMPARATOR =
+            new DefaultVersionComparator().asVersionComparator()
+
+    private final File overridesFile
+
+    ModuleLicenseOverrideFilter(File overridesFile) {
+        this.overridesFile = overridesFile
+    }
+
+    @Override
+    ProjectData filter(ProjectData projectData) {
+        Map<String, Map<String, String>> overrides = loadOverrides()
+        List<ModuleData> modules = projectData.configurations
+                .collectMany { configuration -> configuration.dependencies }
+        Map<String, List<ModuleData>> modulesByCoordinate = modules
+                .groupBy { module -> moduleCoordinate(module) }
+
+        boolean overridesChanged = false
+        overrides.keySet().toList().each { overrideId ->
+            ModuleCoordinates overrideModule = parseModuleId(overrideId)
+            List<ModuleData> coordinateModules = modulesByCoordinate[overrideModule.coordinate]
+            ModuleData currentModule = coordinateModules
+                    ?.find { module -> module.version == overrideModule.version }
+            if (currentModule == null) {
+                currentModule = newestModule(coordinateModules, overrideModule.version)
+            }
+            if (currentModule == null) {
+                overrides.remove(overrideId)
+                overridesChanged = true
+                projectData.project.logger.lifecycle(
+                        "Removed unused license override for ${overrideId}: "
+                                + 'dependency version is no longer resolved')
+                return
+            }
+
+            if (hasDeclaredLicense(currentModule)) {
+                overrides.remove(overrideId)
+                overridesChanged = true
+                projectData.project.logger.lifecycle(
+                        "Removed stale license override for ${overrideId}: "
+                                + "${moduleId(currentModule)} now declares a license")
+                return
+            }
+
+            if (compareVersions(currentModule.version, overrideModule.version) > 0) {
+                String currentModuleId = moduleId(currentModule)
+                overrides.remove(overrideId)
+                if (!overrides.containsKey(currentModuleId)) {
+                    overrides[currentModuleId] = [name: null, url: null, projectUrl: null]
+                }
+                overridesChanged = true
+                projectData.project.logger.lifecycle(
+                        "Updated license override from ${overrideId} to ${currentModuleId}: "
+                                + 'newer dependency still declares no license')
+            }
+        }
+
+        modules.groupBy { module -> moduleId(module) }.each { currentModuleId, matchingModules ->
+            ModuleData module = matchingModules.first()
+            if (!overrides.containsKey(currentModuleId) && !hasDeclaredLicense(module)) {
+                overrides[currentModuleId] = [name: null, url: null, projectUrl: null]
+                overridesChanged = true
+                projectData.project.logger.lifecycle(
+                        "Added missing license override for ${currentModuleId}. "
+                                + "Set 'name' and 'url' in ${overridesFile}.")
+            }
+        }
+        if (overridesChanged) {
+            saveOverrides(overrides)
+        }
+
+        projectData.configurations.each { configuration ->
+            configuration.dependencies.each { module -> applyOverride(module, overrides) }
+        }
+        return projectData
+    }
+
+    private void applyOverride(
+            ModuleData module, Map<String, Map<String, String>> overrides) {
+        String moduleId = moduleId(module)
+        Map<String, String> override = overrides[moduleId]
+        if (override == null) {
+            return
+        }
+
+        String licenseName = override.name
+        String licenseUrl = override.url
+        String projectUrl = override.projectUrl
+        if (licenseName == null || licenseName.isBlank()) {
+            return
+        }
+
+        Set<License> licenses = [new License(licenseName, licenseUrl)] as LinkedHashSet<License>
+        ManifestData manifest =
+                new ManifestData(module.name, module.version, null, null, projectUrl, licenses, false)
+        Set<ManifestData> manifests = new LinkedHashSet<>(module.manifests ?: [])
+        manifests.add(manifest)
+        module.manifests = manifests
+    }
+
+    private Map<String, Map<String, String>> loadOverrides() {
+        Object parsed = new JsonSlurper().parse(overridesFile)
+        if (!(parsed instanceof Map)) {
+            throw new IllegalArgumentException(
+                    "License overrides file ${overridesFile} must contain a JSON object")
+        }
+        return parsed as Map<String, Map<String, String>>
+    }
+
+    private void saveOverrides(Map<String, Map<String, String>> overrides) {
+        String json = JsonOutput.prettyPrint(JsonOutput.toJson(overrides)) + System.lineSeparator()
+        overridesFile.setText(json, 'UTF-8')
+    }
+
+    private static String moduleId(ModuleData module) {
+        return "${module.group}:${module.name}:${module.version}"
+    }
+
+    private static String moduleCoordinate(ModuleData module) {
+        return "${module.group}:${module.name}"
+    }
+
+    private static ModuleCoordinates parseModuleId(String moduleId) {
+        List<String> parts = moduleId.split(':', 3) as List<String>
+        if (parts.size() != 3 || parts.any { part -> part.isBlank() }) {
+            throw new IllegalArgumentException(
+                    "License override key ${moduleId} must use group:module:version")
+        }
+        return new ModuleCoordinates("${parts[0]}:${parts[1]}", parts[2])
+    }
+
+    private static ModuleData newestModule(List<ModuleData> modules, String minimumVersion) {
+        return modules
+                ?.findAll { module -> compareVersions(module.version, minimumVersion) > 0 }
+                ?.max { left, right -> compareVersions(left.version, right.version) }
+    }
+
+    private static int compareVersions(String left, String right) {
+        return VERSION_COMPARATOR.compare(
+                VERSION_PARSER.transform(left), VERSION_PARSER.transform(right))
+    }
+
+    private static boolean hasDeclaredLicense(ModuleData module) {
+        Set<License> licenses = LicenseDataCollector.multiModuleLicenseInfo(module).licenses
+        return licenses.any { license -> license.name != null && !license.name.isBlank() }
+    }
+
+    private static class ModuleCoordinates {
+        final String coordinate
+        final String version
+
+        ModuleCoordinates(String coordinate, String version) {
+            this.coordinate = coordinate
+            this.version = version
+        }
+    }
+}
diff --git a/buildSrc/src/test/groovy/stirling/software/gradle/ModuleLicenseOverrideFilterTest.groovy b/buildSrc/src/test/groovy/stirling/software/gradle/ModuleLicenseOverrideFilterTest.groovy
new file mode 100644
index 0000000000..7536d08af0
--- /dev/null
+++ b/buildSrc/src/test/groovy/stirling/software/gradle/ModuleLicenseOverrideFilterTest.groovy
@@ -0,0 +1,265 @@
+package stirling.software.gradle
+
+import com.github.jk1.license.ConfigurationData
+import com.github.jk1.license.License
+import com.github.jk1.license.ManifestData
+import com.github.jk1.license.ModuleData
+import com.github.jk1.license.ProjectData
+import com.github.jk1.license.render.LicenseDataCollector
+import groovy.json.JsonOutput
+import groovy.json.JsonSlurper
+import java.nio.file.Path
+import org.gradle.testfixtures.ProjectBuilder
+import org.junit.jupiter.api.Test
+import org.junit.jupiter.api.io.TempDir
+
+import static org.junit.jupiter.api.Assertions.assertEquals
+import static org.junit.jupiter.api.Assertions.assertFalse
+import static org.junit.jupiter.api.Assertions.assertTrue
+
+class ModuleLicenseOverrideFilterTest {
+    private static final String GROUP = 'com.example'
+    private static final String MODULE = 'example-library'
+    private static final String VERSION_WITHOUT_LICENSE = '1.4'
+    private static final String VERSION_WITH_LICENSE = '1.7'
+    private static final String APACHE_NAME = 'Apache License, Version 2.0'
+    private static final String APACHE_URL = 'https://www.apache.org/licenses/LICENSE-2.0'
+    private static final String PROJECT_URL = 'https://github.com/HubSpot/hubspot-immutables'
+
+    @TempDir
+    Path temporaryDirectory
+
+    @Test
+    void keepsOverrideForVersionWithoutLicenseMetadata() {
+        ModuleData module = createModule(VERSION_WITHOUT_LICENSE, null)
+        File overridesFile = createOverridesFile(moduleId(VERSION_WITHOUT_LICENSE))
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertTrue(overrides.containsKey(moduleId(VERSION_WITHOUT_LICENSE)))
+        assertEquals([APACHE_NAME], licenseNames(module))
+    }
+
+    @Test
+    void removesOverrideWhenLaterVersionDeclaresLicense() {
+        License publishedLicense = new License(APACHE_NAME, APACHE_URL)
+        ModuleData module = createModule(VERSION_WITH_LICENSE, publishedLicense)
+        File overridesFile = createOverridesFile(moduleId(VERSION_WITHOUT_LICENSE))
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertFalse(overrides.containsKey(moduleId(VERSION_WITHOUT_LICENSE)))
+        assertEquals([APACHE_NAME], licenseNames(module))
+    }
+
+    @Test
+    void removesOverrideWhenOnlyOlderVersionIsResolved() {
+        License publishedLicense = new License(APACHE_NAME, APACHE_URL)
+        ModuleData module = createModule(VERSION_WITHOUT_LICENSE, publishedLicense)
+        File overridesFile = createOverridesFile(moduleId(VERSION_WITH_LICENSE))
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertFalse(overrides.containsKey(moduleId(VERSION_WITH_LICENSE)))
+        assertEquals([APACHE_NAME], licenseNames(module))
+    }
+
+    @Test
+    void removesOverrideWhenModuleIsNoLongerResolved() {
+        File overridesFile = createOverridesFile(moduleId(VERSION_WITHOUT_LICENSE))
+
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData())
+
+        assertTrue(readOverrides(overridesFile).isEmpty())
+    }
+
+    @Test
+    void keepsOverrideWhenExactAndNewerVersionsAreBothResolved() {
+        ModuleData olderModule = createModule(VERSION_WITHOUT_LICENSE, null)
+        License publishedLicense = new License(APACHE_NAME, APACHE_URL)
+        ModuleData newerModule = createModule(VERSION_WITH_LICENSE, publishedLicense)
+        File overridesFile = createOverridesFile(moduleId(VERSION_WITHOUT_LICENSE))
+
+        new ModuleLicenseOverrideFilter(overridesFile)
+                .filter(createProjectData(olderModule, newerModule))
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertTrue(overrides.containsKey(moduleId(VERSION_WITHOUT_LICENSE)))
+        assertEquals([APACHE_NAME], licenseNames(olderModule))
+        assertEquals([APACHE_NAME], licenseNames(newerModule))
+    }
+
+    @Test
+    void movesOverrideUsingGradleNumericVersionOrdering() {
+        String oldVersion = '1.9'
+        String newVersion = '1.11.0'
+        ModuleData module = createModule(newVersion, null)
+        File overridesFile = createOverridesFile(moduleId(oldVersion))
+
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertFalse(overrides.containsKey(moduleId(oldVersion)))
+        assertEquals(
+                [name: null, url: null, projectUrl: null], overrides[moduleId(newVersion)])
+    }
+
+    @Test
+    void movesOverrideToLaterVersionWithoutLicenseAndClearsLicenseData() {
+        ModuleData module = createModule(VERSION_WITH_LICENSE, null)
+        File overridesFile = createOverridesFile(moduleId(VERSION_WITHOUT_LICENSE))
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertFalse(overrides.containsKey(moduleId(VERSION_WITHOUT_LICENSE)))
+        assertEquals(
+                [name: null, url: null, projectUrl: null],
+                overrides[moduleId(VERSION_WITH_LICENSE)])
+        assertTrue(licenseNames(module).isEmpty())
+    }
+
+    @Test
+    void preservesExistingOverrideWhenRemovingOlderVersion() {
+        ModuleData module = createModule(VERSION_WITH_LICENSE, null)
+        File overridesFile = createOverridesFile(
+                [
+                    (moduleId(VERSION_WITHOUT_LICENSE)): [
+                        name: APACHE_NAME, url: APACHE_URL
+                    ],
+                    (moduleId(VERSION_WITH_LICENSE)): [
+                        name: APACHE_NAME, url: APACHE_URL, projectUrl: PROJECT_URL
+                    ]
+                ])
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertFalse(overrides.containsKey(moduleId(VERSION_WITHOUT_LICENSE)))
+        assertEquals(
+                [name: APACHE_NAME, url: APACHE_URL, projectUrl: PROJECT_URL],
+                overrides[moduleId(VERSION_WITH_LICENSE)])
+        assertEquals([APACHE_NAME], licenseNames(module))
+    }
+
+    @Test
+    void addsMissingOverrideForModuleWithoutLicense() {
+        ModuleData module = createModule(VERSION_WITHOUT_LICENSE, null)
+        File overridesFile = createEmptyOverridesFile()
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        assertEquals(
+                [name: null, url: null, projectUrl: null],
+                overrides[moduleId(VERSION_WITHOUT_LICENSE)])
+        assertTrue(licenseNames(module).isEmpty())
+    }
+
+    @Test
+    void doesNotAddOverrideForModuleWithLicense() {
+        License publishedLicense = new License(APACHE_NAME, APACHE_URL)
+        ModuleData module = createModule(VERSION_WITH_LICENSE, publishedLicense)
+        File overridesFile = createEmptyOverridesFile()
+
+        debugState('before filter', module, overridesFile)
+        new ModuleLicenseOverrideFilter(overridesFile).filter(createProjectData(module))
+        debugState('after filter', module, overridesFile)
+
+        assertTrue(readOverrides(overridesFile).isEmpty())
+        assertEquals([APACHE_NAME], licenseNames(module))
+    }
+
+    private File createOverridesFile(String moduleId) {
+        Map<String, Map<String, String>> overrides = [
+            (moduleId): [name: APACHE_NAME, url: APACHE_URL]
+        ]
+        return createOverridesFile(overrides)
+    }
+
+    private File createOverridesFile(Map<String, Map<String, String>> overrides) {
+        File overridesFile = temporaryDirectory.resolve('license-overrides.json').toFile()
+        overridesFile.setText(JsonOutput.prettyPrint(JsonOutput.toJson(overrides)), 'UTF-8')
+        return overridesFile
+    }
+
+    private File createEmptyOverridesFile() {
+        File overridesFile = temporaryDirectory.resolve('license-overrides.json').toFile()
+        overridesFile.setText('{}', 'UTF-8')
+        return overridesFile
+    }
+
+    private static Map<String, Object> readOverrides(File overridesFile) {
+        return new JsonSlurper().parse(overridesFile) as Map<String, Object>
+    }
+
+    private static void debugState(String stage, ModuleData module, File overridesFile) {
+        String resolvedModuleId = "${module.group}:${module.name}:${module.version}"
+        Map<String, Object> overrides = readOverrides(overridesFile)
+        System.out.println(
+                "[license-override-test] ${stage}: module=${resolvedModuleId}, "
+                        + "licenses=${licenseNames(module)}, "
+                        + "matchingOverride=${overrides.containsKey(resolvedModuleId)}, "
+                        + "overrideKeys=${overrides.keySet().sort()}")
+    }
+
+    private static ProjectData createProjectData(ModuleData module) {
+        return createProjectData(module as ModuleData[])
+    }
+
+    private static ProjectData createProjectData(ModuleData... modules) {
+        ConfigurationData configuration =
+                new ConfigurationData(
+                        'runtimeClasspath', modules as LinkedHashSet<ModuleData>)
+        return new ProjectData(
+                ProjectBuilder.builder().build(),
+                [configuration] as LinkedHashSet<ConfigurationData>)
+    }
+
+    private static ModuleData createModule(String version, License license) {
+        Set<ManifestData> manifests = new LinkedHashSet<>()
+        if (license != null) {
+            manifests.add(
+                    new ManifestData(
+                            MODULE,
+                            version,
+                            null,
+                            null,
+                            null,
+                            [license] as LinkedHashSet<License>,
+                            false))
+        }
+        return new ModuleData(
+                GROUP,
+                MODULE,
+                version,
+                true,
+                manifests,
+                new LinkedHashSet<>(),
+                new LinkedHashSet<>())
+    }
+
+    private static String moduleId(String version) {
+        return "${GROUP}:${MODULE}:${version}"
+    }
+
+    private static List<String> licenseNames(ModuleData module) {
+        Set<License> licenses = LicenseDataCollector.multiModuleLicenseInfo(module).licenses
+        return licenses.collect { license -> license.name }.sort()
+    }
+}
diff --git a/docker/backend/Dockerfile b/docker/backend/Dockerfile
index 5c6680661f..ab79caf9f0 100644
--- a/docker/backend/Dockerfile
+++ b/docker/backend/Dockerfile
@@ -17,6 +17,8 @@ WORKDIR /app
 
 COPY build.gradle settings.gradle gradlew ./
 COPY gradle/                               gradle/
+COPY buildSrc/build.gradle                 buildSrc/
+COPY buildSrc/src/main/                    buildSrc/src/main/
 COPY app/core/build.gradle                  app/core/
 COPY app/common/build.gradle                app/common/
 COPY app/proprietary/build.gradle           app/proprietary/
diff --git a/docker/embedded/Dockerfile b/docker/embedded/Dockerfile
index 54458667be..4ae0ee81e7 100644
--- a/docker/embedded/Dockerfile
+++ b/docker/embedded/Dockerfile
@@ -30,6 +30,8 @@ WORKDIR /app
 
 COPY build.gradle settings.gradle gradlew ./
 COPY gradle/                               gradle/
+COPY buildSrc/build.gradle                 buildSrc/
+COPY buildSrc/src/main/                    buildSrc/src/main/
 COPY app/core/build.gradle                  app/core/
 COPY app/common/build.gradle                app/common/
 COPY app/proprietary/build.gradle           app/proprietary/
diff --git a/docker/embedded/Dockerfile.fat b/docker/embedded/Dockerfile.fat
index 9b2655987f..6e679b97c8 100644
--- a/docker/embedded/Dockerfile.fat
+++ b/docker/embedded/Dockerfile.fat
@@ -31,6 +31,8 @@ WORKDIR /app
 
 COPY build.gradle settings.gradle gradlew ./
 COPY gradle/                               gradle/
+COPY buildSrc/build.gradle                 buildSrc/
+COPY buildSrc/src/main/                    buildSrc/src/main/
 COPY app/core/build.gradle                  app/core/
 COPY app/common/build.gradle                app/common/
 COPY app/proprietary/build.gradle           app/proprietary/
diff --git a/docker/embedded/Dockerfile.ultra-lite b/docker/embedded/Dockerfile.ultra-lite
index bcf189e9ee..14f9e934d0 100644
--- a/docker/embedded/Dockerfile.ultra-lite
+++ b/docker/embedded/Dockerfile.ultra-lite
@@ -23,6 +23,8 @@ WORKDIR /app
 # Copy gradle files for dependency resolution
 COPY build.gradle settings.gradle gradlew ./
 COPY gradle/                               gradle/
+COPY buildSrc/build.gradle                 buildSrc/
+COPY buildSrc/src/main/                    buildSrc/src/main/
 COPY app/core/build.gradle                  app/core/
 COPY app/common/build.gradle                app/common/
 COPY app/proprietary/build.gradle           app/proprietary/

From ddc0baa41daa863c8952f071a5a275cf33f51f1a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:00:50 +0000
Subject: [PATCH 084/122] build(deps-dev): bump ip-address from 10.2.0 to
 10.4.0 in /frontend (#7278)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [ip-address](https://github.com/beaugunderson/ip-address) from
10.2.0 to 10.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/beaugunderson/ip-address/releases">ip-address's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add GitHub Actions CI by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/213">beaugunderson/ip-address#213</a></li>
<li>Keep the package loadable on node 12, and enforce it by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/216">beaugunderson/ip-address#216</a></li>
<li>Validate the byte arrays Address6 is given by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/217">beaugunderson/ip-address#217</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0">https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0</a></p>
<h2>v10.3.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1">https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1</a></p>
<h2>v10.3.0</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.2...v10.3.0">https://github.com/beaugunderson/ip-address/compare/v10.2.2...v10.3.0</a></p>
<h2>v10.2.2</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.1...v10.2.2">https://github.com/beaugunderson/ip-address/compare/v10.2.1...v10.2.2</a></p>
<h2>v10.2.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.2.1">https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/fbb8db28f1559842b7191cab7d8ea6408ed82f7b"><code>fbb8db2</code></a>
10.4.0</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/45a2b11ec254a2e5620de66e248adcb33d16e669"><code>45a2b11</code></a>
Validate the byte arrays Address6 is given (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/217">#217</a>)</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/bac8810b3935cab123316a4bc5ebaa22db140299"><code>bac8810</code></a>
Keep the package loadable on node 12, and enforce it (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/216">#216</a>)</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/9b3d8488d15e6bfe5f5503867b088ce056723e08"><code>9b3d848</code></a>
Add a security policy and a README section on security posture</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/e84a7b381d02cb97ed114023e44133efae151254"><code>e84a7b3</code></a>
Order the README API reference Address4, Address6, AddressError</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/015160b85ee60b39548219817a5de3c4e828a6d6"><code>015160b</code></a>
Collapse each class in the README API reference</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/34061a897d526b7a063c3605402cd30a8363a035"><code>34061a8</code></a>
Pin checkout and setup-node to commits in the release job</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/c5fae5d9bdfe8ded7f4ca01a3d3ea8d97f8f1277"><code>c5fae5d</code></a>
Pin action-gh-release to a commit and move it to 3.0.2</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/e0ef0484193218b0d28cfbb53795bc44ddb3cc21"><code>e0ef048</code></a>
Replace CircleCI with GitHub Actions</li>
<li><a
href="https://github.com/beaugunderson/ip-address/commit/5e3ceb779aee6ad3f33264e66225e8e7584ab612"><code>5e3ceb7</code></a>
Add GitHub Actions CI across Node 20, 22, 24 and 25 (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/213">#213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.4.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for ip-address since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ip-address&package-manager=npm_and_yarn&previous-version=10.2.0&new-version=10.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 7db904ddf6..a5abc659e3 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -10774,9 +10774,9 @@
       }
     },
     "node_modules/ip-address": {
-      "version": "10.2.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
-      "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
+      "version": "10.4.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
+      "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
       "dev": true,
       "license": "MIT",
       "engines": {

From 7aeec93032a952c78cf10e77804e71052df1dc38 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 13:01:20 +0100
Subject: [PATCH 085/122] build(deps): bump softprops/action-gh-release from
 3.0.0 to 3.0.2 (#7273)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[softprops/action-gh-release](https://github.com/softprops/action-gh-release)
from 3.0.0 to 3.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/softprops/action-gh-release/releases">softprops/action-gh-release's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.2</h2>
<p><code>3.0.2</code> is a patch release focused on release reliability
and compatibility. It
reuses existing draft releases when publishing prereleases, supports
replacing
release assets on Gitea, hardens streamed asset uploads, and provides
clearer
release-creation diagnostics. It also includes TypeScript, coverage, and
tooling
maintenance merged since <code>3.0.1</code>.</p>
<p>This release fixes <a
href="https://redirect.github.com/softprops/action-gh-release/issues/795">#795</a>,
<a
href="https://redirect.github.com/softprops/action-gh-release/issues/438">#438</a>,
and <a
href="https://redirect.github.com/softprops/action-gh-release/issues/803">#803</a>.
The upload transport hardening covers the
historical failure reported in <a
href="https://redirect.github.com/softprops/action-gh-release/issues/790">#790</a>,
although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to <a
href="https://redirect.github.com/softprops/action-gh-release/issues/786">#786</a>
and does not
claim a reproducible release-creation fix.</p>
<h2>What's Changed</h2>
<h3>Exciting New Features 🎉</h3>
<ul>
<li>feat: improve release error reporting and test coverage by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/813">softprops/action-gh-release#813</a></li>
</ul>
<h3>Bug fixes 🐛</h3>
<ul>
<li>fix: publish existing draft releases as prereleases by <a
href="https://github.com/godfengliang"><code>@​godfengliang</code></a>
in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/801">softprops/action-gh-release#801</a></li>
<li>fix: upload small checksum assets reliably by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/815">softprops/action-gh-release#815</a></li>
<li>fix: replace existing release assets on Gitea by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/816">softprops/action-gh-release#816</a></li>
<li>fix: clarify release creation 404 errors by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/817">softprops/action-gh-release#817</a></li>
</ul>
<h3>Other Changes 🔄</h3>
<ul>
<li>chore(deps): upgrade TypeScript to 7 by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/812">softprops/action-gh-release#812</a></li>
<li>chore(deps): remove unused TypeScript tooling by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/814">softprops/action-gh-release#814</a></li>
<li>dependency, Node 24 pin, and CI maintenance merged since
<code>3.0.1</code></li>
</ul>
<h2>v3.0.1</h2>
<h2>3.0.1</h2>
<ul>
<li>maintenance release with updated dependencies</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md">softprops/action-gh-release's
changelog</a>.</em></p>
<blockquote>
<h2>3.0.2</h2>
<p><code>3.0.2</code> is a patch release focused on release reliability
and compatibility. It
reuses existing draft releases when publishing prereleases, supports
replacing
release assets on Gitea, hardens streamed asset uploads, and provides
clearer
release-creation diagnostics. It also includes TypeScript, coverage, and
tooling
maintenance merged since <code>3.0.1</code>.</p>
<p>This release fixes <a
href="https://redirect.github.com/softprops/action-gh-release/issues/795">#795</a>,
<a
href="https://redirect.github.com/softprops/action-gh-release/issues/438">#438</a>,
and <a
href="https://redirect.github.com/softprops/action-gh-release/issues/803">#803</a>.
The upload transport hardening covers the
historical failure reported in <a
href="https://redirect.github.com/softprops/action-gh-release/issues/790">#790</a>,
although current hosted Node 24 runners did
not reproduce it naturally. The diagnostics work is related to <a
href="https://redirect.github.com/softprops/action-gh-release/issues/786">#786</a>
and does not
claim a reproducible release-creation fix.</p>
<h2>What's Changed</h2>
<h3>Exciting New Features 🎉</h3>
<ul>
<li>feat: improve release error reporting and test coverage by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/813">softprops/action-gh-release#813</a></li>
</ul>
<h3>Bug fixes 🐛</h3>
<ul>
<li>fix: publish existing draft releases as prereleases by <a
href="https://github.com/godfengliang"><code>@​godfengliang</code></a>
in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/801">softprops/action-gh-release#801</a></li>
<li>fix: upload small checksum assets reliably by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/815">softprops/action-gh-release#815</a></li>
<li>fix: replace existing release assets on Gitea by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/816">softprops/action-gh-release#816</a></li>
<li>fix: clarify release creation 404 errors by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/817">softprops/action-gh-release#817</a></li>
</ul>
<h3>Other Changes 🔄</h3>
<ul>
<li>chore(deps): upgrade TypeScript to 7 by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/812">softprops/action-gh-release#812</a></li>
<li>chore(deps): remove unused TypeScript tooling by <a
href="https://github.com/chenrui333"><code>@​chenrui333</code></a> in <a
href="https://redirect.github.com/softprops/action-gh-release/pull/814">softprops/action-gh-release#814</a></li>
<li>dependency, Node 24 pin, and CI maintenance merged since
<code>3.0.1</code></li>
</ul>
<h2>3.0.1</h2>
<ul>
<li>maintenance release with updated dependencies</li>
</ul>
<h2>3.0.0</h2>
<p><code>3.0.0</code> is a major release that moves the action runtime
from Node 20 to Node 24.
Use <code>v3</code> on GitHub-hosted runners and self-hosted fleets that
already support the
Node 24 Actions runtime. <code>v2.6.2</code> was the final Node
20-compatible release and is
no longer maintained or supported.</p>
<h2>What's Changed</h2>
<h3>Other Changes 🔄</h3>
<ul>
<li>Move the action runtime and bundle target to Node 24</li>
<li>Update <code>@types/node</code> to the Node 24 line and allow future
Dependabot updates</li>
<li>Keep the floating major tag on <code>v3</code>; freeze
<code>v2</code> at the final <code>v2.6.2</code> release</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/softprops/action-gh-release/commit/3d0d9888cb7fd7b750713d6e236d1fcb99157228"><code>3d0d988</code></a>
release 3.0.2 (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/818">#818</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/7e13ed4ac596a4adf801d3812be5a089356949aa"><code>7e13ed4</code></a>
fix: clarify release creation 404 errors (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/817">#817</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/e6c70a53cf67373fbff7eeebca7782b4fe8f106c"><code>e6c70a5</code></a>
fix: replace existing release assets on Gitea (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/816">#816</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/f3453378888d5ef6208e2788af1c5ba50d8a898d"><code>f345337</code></a>
fix: publish existing draft releases as prereleases (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/801">#801</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/d8a89a206684ded8435bf16d6f698bf04ab05164"><code>d8a89a2</code></a>
fix: upload small checksum assets reliably (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/815">#815</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/45ece40c3178522904ac6c51c21d8a4e3565f3c8"><code>45ece40</code></a>
chore(deps): remove unused TypeScript tooling (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/814">#814</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/f6b913c3f95302d88e8ef7cb2859c2e7656aa01e"><code>f6b913c</code></a>
feat: improve release error reporting and test coverage (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/813">#813</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/15f193d7d8aa9623b5181913a31fafceb4e8cef9"><code>15f193d</code></a>
chore(deps): upgrade TypeScript to 7 (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/812">#812</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/cc8268d46a81d57ec9b061f27b0dd68ebd7fb17f"><code>cc8268d</code></a>
chore(deps): bump actions/checkout in the github-actions group (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/810">#810</a>)</li>
<li><a
href="https://github.com/softprops/action-gh-release/commit/fd0ed1e85b6730f87f5c67d7355751c46ad513d6"><code>fd0ed1e</code></a>
chore(deps): bump the npm group with 3 updates (<a
href="https://redirect.github.com/softprops/action-gh-release/issues/811">#811</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| softprops/action-gh-release | [>= 2.2.a, < 2.3] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=softprops/action-gh-release&package-manager=github_actions&previous-version=3.0.0&new-version=3.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/multiOSReleases.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index f5a99a0ef2..ebf2585bb1 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -902,7 +902,7 @@ jobs:
       # instead of silently shipping a broken auto-update.
       - name: Upload binaries to Release
         if: (github.event_name == 'workflow_dispatch' && github.event.inputs.test_mode != 'true' && github.event.inputs.platform == 'all') || github.event_name == 'release' || github.ref == 'refs/heads/V2-master'
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           tag_name: v${{ needs.determine-matrix.outputs.version }}
           # Don't regenerate/append notes on re-runs, and don't force this into the

From 5c319f13cbbc72c48dcad93eda7a36e6cf44a4aa Mon Sep 17 00:00:00 2001
From: "posthog-eu[bot]" <226701856+posthog-eu[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:13:30 +0000
Subject: [PATCH 086/122] Fix pt-BR download label mislabeled as "Baixar
 (JSON)" (#7043)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

- **What:** Corrected the pt-BR (Brazilian Portuguese) `download`
translation from `"Baixar (JSON)"` to `"Baixar"` in
`frontend/editor/public/locales/pt-BR/translation.toml`, in both the
root table (line 32) and the `[fileManager]` section (line 3577).
- **Why:** The generic `download` key flows through
`useFileActionTerminology` (`download: t("download", "Download")`) into
the shared download button rendered on tool-result screens (e.g.
`ReviewToolStep`). Because the string was `"Baixar (JSON)"`, every
tool's Download button showed "Baixar (JSON)" for pt-BR users — implying
a JSON export regardless of the actual output format. This mislabeling
was locale-wide (all pt-BR users, all tool downloads). Session
autocapture confirmed the confusion: a pt-BR user on `/convert`
repeatedly clicked a button whose text was exactly "Baixar (JSON)", then
abandoned the flow. Nothing crashed — it's a confusing label, not a
functional break.
- **Scope / verification:** en-US uses plain `"Download"` for this key
and pt-PT already uses `"Transferir"`; no other locale carried the
`"(JSON)"` suffix on the download key, so the defect was isolated to
pt-BR. Only translation values changed — no keys added/removed, so
translation counts are unaffected.

Note: I scoped this to the mislabel — the exact symptom users observed.
The report also mentions the download being a silent anchor-click with
no success toast; that's a separate, broader UX enhancement in
`ReviewToolStep`/`WorkbenchBar`/`downloadService`, so it's intentionally
left out of this focused translation fix.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Translations (if applicable)

- [x] Only a value correction in `pt-BR`; no translation tags added or
removed.

---
*Created with [PostHog Code](https://posthog.com/code?ref=pr) from [an
inbox
report](posthog-code://inbox/019f655d-bd60-78c2-ba59-98c23243ed57).*

Co-authored-by: posthog-eu[bot] <226701856+posthog-eu[bot]@users.noreply.github.com>
---
 frontend/editor/public/locales/pt-BR/translation.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/frontend/editor/public/locales/pt-BR/translation.toml b/frontend/editor/public/locales/pt-BR/translation.toml
index 6fbc440d20..689d72b58c 100644
--- a/frontend/editor/public/locales/pt-BR/translation.toml
+++ b/frontend/editor/public/locales/pt-BR/translation.toml
@@ -29,7 +29,7 @@ customTextTooltip = "Formato personalizado opcional para os números de página.
 delete = "Apagar"
 details = "Detalhes"
 discardChanges = "Descartar alterações"
-download = "Baixar (JSON)"
+download = "Baixar"
 downloadPdf = "Baixar PDF"
 downloadUnavailable = "Download indisponível para este item"
 edit = "Editar"
@@ -3574,7 +3574,7 @@ deleteAll = "Excluir tudo"
 deleteSelected = "Apagar Selecionados"
 deselectAll = "Desselecionar Tudo"
 details = "Detalhes do arquivo"
-download = "Baixar (JSON)"
+download = "Baixar"
 downloadSelected = "Baixar selecionados"
 dropFilesHere = "Solte os arquivos aqui"
 fileFormat = "Formato"

From 94fbc74271a44f4817672e71580df45f5f8c156f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 13:20:17 +0100
Subject: [PATCH 087/122] build(deps): bump the uv group across 1 directory
 with 3 updates (#7287)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the uv group with 3 updates in the /engine directory:
[cryptography](https://github.com/pyca/cryptography),
[aiohttp](https://github.com/aio-libs/aiohttp) and
[datamodel-code-generator](https://github.com/koxudaxi/datamodel-code-generator).

Updates `cryptography` from 49.0.0 to 50.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's
changelog</a>.</em></p>
<blockquote>
<p>50.0.0 - 2026-07-31</p>
<pre><code>
* **SECURITY ISSUE**:

:func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
and its PEM and S/MIME variants no longer expose distinguishable errors
or
timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which
could
act as a Bleichenbacher oracle for callers that decrypt untrusted
messages.
A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys
or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
:class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for
constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification &lt;cryptography.x509.verification&gt;`
APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
&lt;https://c2sp.org/chunked-encryption&gt;`_ for streaming
authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
carry trailing bytes after the list or after an individual SCT, instead
of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field
type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a
non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
``GeneralizedTime`` that carries fractional seconds or another non-DER
form,
matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
:func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a
request
or response whose ``version`` field is not ``v1``, the only version
defined
by RFC 6960, matching the version validation already performed when
loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now
supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported
when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now
supported
  when building against AWS-LC.
&lt;/tr&gt;&lt;/table&gt;
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyca/cryptography/commit/dcb7050b807b00392fa9fe2eac7cb362fcf355cc"><code>dcb7050</code></a>
Prepare for 50.0.0 release (<a
href="https://redirect.github.com/pyca/cryptography/issues/15372">#15372</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f"><code>53fccd9</code></a>
Don't leak how PKCS#7 encryptedKey decryption failed (<a
href="https://redirect.github.com/pyca/cryptography/issues/15369">#15369</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/d472f978470fbefa521b86d98b2ecccbbb4d1dd8"><code>d472f97</code></a>
Add <code>from __future__ import annotations</code> to all src/ Python
files (<a
href="https://redirect.github.com/pyca/cryptography/issues/15371">#15371</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/908773d53829fb1466c6db364b31321c3cd8eb9a"><code>908773d</code></a>
Bump downstream dependencies in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/15368">#15368</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/2cc07cc948948211899bcb0cddd1fddf86e95812"><code>2cc07cc</code></a>
Bump BoringSSL, OpenSSL, AWS-LC in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/15367">#15367</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/c94ede9f040fa44942f7139772603419000acf66"><code>c94ede9</code></a>
chore(deps): bump ruff from 0.16.0 to 0.16.1 (<a
href="https://redirect.github.com/pyca/cryptography/issues/15366">#15366</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/67a8308dc9ea4cce6056e0f1438f903c208c3f35"><code>67a8308</code></a>
chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (<a
href="https://redirect.github.com/pyca/cryptography/issues/15365">#15365</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/95018ffcdbbc510fd92fc872e3a3e80aa6e58596"><code>95018ff</code></a>
Release the GIL in one-shot AEAD encrypt/decrypt (<a
href="https://redirect.github.com/pyca/cryptography/issues/15361">#15361</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/6954733eaf55a0074abf88f06f7242dfca3a5d02"><code>6954733</code></a>
Release the GIL during DH and DSA parameter generation (<a
href="https://redirect.github.com/pyca/cryptography/issues/15364">#15364</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/6893b94c33e948f6240082461424cfb5da2dacc6"><code>6893b94</code></a>
Import _serialization instead of serialization in x509/extensions (<a
href="https://redirect.github.com/pyca/cryptography/issues/15363">#15363</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyca/cryptography/compare/49.0.0...50.0.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `aiohttp` from 3.14.1 to 3.14.3
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst">aiohttp's
changelog</a>.</em></p>
<blockquote>
<h1>3.14.3 (2026-07-22)</h1>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed the client dropping only the first <code>Authorization</code>,
<code>Cookie</code> and
<code>Proxy-Authorization</code> header when a redirect crossed an
origin -- by :user:<code>arshsmith1</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>13180</code>.</p>
</li>
<li>
<p>Fixed error message construction in the C HTTP parser -- by
:user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>13222</code>.</p>
</li>
</ul>
<hr />
<h1>3.14.2 (2026-07-20)</h1>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed :py:attr:<code>~aiohttp.web.StreamResponse.last_modified</code>
rounding a
:class:<code>datetime.datetime</code> with a fractional second down.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>5303</code>.</p>
</li>
<li>
<p>Fixed resolving <code>localhost</code> on Windows to fall back
without <code>AI_ADDRCONFIG</code>
when the first lookup fails, so <code>localhost</code> still works
without an active
network.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>5357</code>.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/5e392ce0456f5235a4ee6ad46f0e806df2f15873"><code>5e392ce</code></a>
Release v3.14.3 (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13225">#13225</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d"><code>49f65d5</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13222">#13222</a>/f4866933
backport][3.14] Build C parser error message from bounded...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/240099e5216a01b32919dcd8dd5c6c0b1bf83671"><code>240099e</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13180">#13180</a>/ee53d655
backport][3.14] drop every copy of credential headers on ...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/d93f30a302f8b930074fe14a2be7b2088ba28111"><code>d93f30a</code></a>
Bump version (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13202">#13202</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/c1b9212ad3d93c24b5fc66ad0849597166bc816e"><code>c1b9212</code></a>
Release v3.14.2 (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13201">#13201</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/380d4b55e8df48dfd62f1addfb530426f6bc4106"><code>380d4b5</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13054">#13054</a>/ed8b040c
backport][3.14] escape backslashes in digest auth quoted-...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/e1e1bee363dfba04a9a75c8801717da2ed5bdcb9"><code>e1e1bee</code></a>
Make llhttp method array size dynamic (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13174">#13174</a>)
(<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13196">#13196</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/aa4cf29b6a5ad6f4d21fa1dd3f69193dc2f5d505"><code>aa4cf29</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13170">#13170</a>/2b906869
backport][3.14] Fix StreamResponse.last_modified rounding...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/71b57b40d85a0723c92b0a5a37ebdf518210d2ea"><code>71b57b4</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13172">#13172</a>/a57747ed
backport][3.14] Fix C parser folding fragment into query_...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/64a03fb620b623e5a5a1b7103c07ae3e536a0d40"><code>64a03fb</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13169">#13169</a>/1adc0cd7
backport][3.14] Upgrade http:// to https:// in README.rst...</li>
<li>Additional commits viewable in <a
href="https://github.com/aio-libs/aiohttp/compare/v3.14.1...v3.14.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `datamodel-code-generator` from 0.56.0 to 0.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/koxudaxi/datamodel-code-generator/releases">datamodel-code-generator's
releases</a>.</em></p>
<blockquote>
<h2>0.64.0</h2>
<h2>Breaking Changes</h2>
<h3>Code Generation Changes</h3>
<ul>
<li>Self-referencing fields are now quoted with
<code>--disable-future-imports</code> - When
<code>--disable-future-imports</code> is set (no <code>from __future__
import annotations</code> and no native PEP 649 deferred evaluation on
Python &lt; 3.14), self-referencing and forward-referencing field
annotations in regular <code>BaseModel</code> classes are now emitted as
quoted forward references instead of bare names. Previously such
annotations were left unquoted, producing invalid code that raised
<code>NameError</code> (Ruff F821) at class-evaluation time. Output for
the common case (with <code>from __future__ import annotations</code> or
Python 3.14 native deferred annotations) is unchanged. Users who
snapshot/golden-file generated output for the
<code>--disable-future-imports</code> configuration with
self-referencing models will see the annotation change from unquoted to
quoted, e.g. <code>children: Optional[List[Node]]</code> →
<code>children: Optional[List[&quot;Node&quot;]]</code>. (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3387">#3387</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Update CHANGELOG for 0.63.0 by <a
href="https://github.com/dcg-generated-docs"><code>@​dcg-generated-docs</code></a>[bot]
in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3345">koxudaxi/datamodel-code-generator#3345</a></li>
<li>Deduplicate module content builder by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3346">koxudaxi/datamodel-code-generator#3346</a></li>
<li>Deduplicate import reference helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3348">koxudaxi/datamodel-code-generator#3348</a></li>
<li>Refactor jsonschema root model registration by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3352">koxudaxi/datamodel-code-generator#3352</a></li>
<li>Refactor XML Schema literal helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3349">koxudaxi/datamodel-code-generator#3349</a></li>
<li>Move builtin formatter helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3351">koxudaxi/datamodel-code-generator#3351</a></li>
<li>Deduplicate Pydantic v2 config helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3350">koxudaxi/datamodel-code-generator#3350</a></li>
<li>Deduplicate DataType type hint rendering by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3354">koxudaxi/datamodel-code-generator#3354</a></li>
<li>Fix <code>constr()</code> for string fields carrying
minItems/maxItems by <a
href="https://github.com/DarkaMaul"><code>@​DarkaMaul</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3353">koxudaxi/datamodel-code-generator#3353</a></li>
<li>Cover non-finite import idempotence by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3367">koxudaxi/datamodel-code-generator#3367</a></li>
<li>Deduplicate input text detection by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3357">koxudaxi/datamodel-code-generator#3357</a></li>
<li>Remove stale protobuf coverage pragma by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3358">koxudaxi/datamodel-code-generator#3358</a></li>
<li>Cover explicit null OpenAPI media schemas by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3360">koxudaxi/datamodel-code-generator#3360</a></li>
<li>Simplify Python version feature checks by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3361">koxudaxi/datamodel-code-generator#3361</a></li>
<li>Speed up CI checks by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3378">koxudaxi/datamodel-code-generator#3378</a></li>
<li>Add maintainer link to docs footer and README by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3379">koxudaxi/datamodel-code-generator#3379</a></li>
<li>Use builtin formatter in CI by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3380">koxudaxi/datamodel-code-generator#3380</a></li>
<li>Split coverage by OS by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3381">koxudaxi/datamodel-code-generator#3381</a></li>
<li>Simplify import removal cleanup by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3362">koxudaxi/datamodel-code-generator#3362</a></li>
<li>Pin deprecation warning stacklevel by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3363">koxudaxi/datamodel-code-generator#3363</a></li>
<li>Pin public module exports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3364">koxudaxi/datamodel-code-generator#3364</a></li>
<li>Cover to_hashable branch cases by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3366">koxudaxi/datamodel-code-generator#3366</a></li>
<li>Cover stable toposort behavior by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3369">koxudaxi/datamodel-code-generator#3369</a></li>
<li>Extract registry render helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3371">koxudaxi/datamodel-code-generator#3371</a></li>
<li>Fix minItems for arrays of URI strings by <a
href="https://github.com/sjh9714"><code>@​sjh9714</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3377">koxudaxi/datamodel-code-generator#3377</a></li>
<li>Deduplicate config value validators by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3372">koxudaxi/datamodel-code-generator#3372</a></li>
<li>Cover CLI option metadata helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3374">koxudaxi/datamodel-code-generator#3374</a></li>
<li>Cover Pydantic v2 version fallback by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3368">koxudaxi/datamodel-code-generator#3368</a></li>
<li>Fix nullable JSON Schema const enums by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3355">koxudaxi/datamodel-code-generator#3355</a></li>
<li>Pin patchable generation seams by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3365">koxudaxi/datamodel-code-generator#3365</a></li>
<li>Cover utility helper behavior by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3375">koxudaxi/datamodel-code-generator#3375</a></li>
<li>Cover DefaultPutDict behavior by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3376">koxudaxi/datamodel-code-generator#3376</a></li>
<li>Cover validator config normalization by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3373">koxudaxi/datamodel-code-generator#3373</a></li>
<li>Avoid expensive runtime type checks by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3382">koxudaxi/datamodel-code-generator#3382</a></li>
<li>Avoid eager builtin formatter import by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3383">koxudaxi/datamodel-code-generator#3383</a></li>
<li>Avoid eager TOML parser import by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3384">koxudaxi/datamodel-code-generator#3384</a></li>
<li>Stabilize msgspec payload tests by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3385">koxudaxi/datamodel-code-generator#3385</a></li>
<li>Avoid eager input parser imports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3386">koxudaxi/datamodel-code-generator#3386</a></li>
<li>Avoid eager parser model imports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3388">koxudaxi/datamodel-code-generator#3388</a></li>
<li>Avoid eager AsyncAPI converter imports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3389">koxudaxi/datamodel-code-generator#3389</a></li>
<li>Dispose parser on parse errors by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3390">koxudaxi/datamodel-code-generator#3390</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/koxudaxi/datamodel-code-generator/blob/main/CHANGELOG.md">datamodel-code-generator's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.64.0">0.64.0</a>
- 2026-06-14</h2>
<h2>Breaking Changes</h2>
<h3>Code Generation Changes</h3>
<ul>
<li>Self-referencing fields are now quoted with
<code>--disable-future-imports</code> - When
<code>--disable-future-imports</code> is set (no <code>from __future__
import annotations</code> and no native PEP 649 deferred evaluation on
Python &lt; 3.14), self-referencing and forward-referencing field
annotations in regular <code>BaseModel</code> classes are now emitted as
quoted forward references instead of bare names. Previously such
annotations were left unquoted, producing invalid code that raised
<code>NameError</code> (Ruff F821) at class-evaluation time. Output for
the common case (with <code>from __future__ import annotations</code> or
Python 3.14 native deferred annotations) is unchanged. Users who
snapshot/golden-file generated output for the
<code>--disable-future-imports</code> configuration with
self-referencing models will see the annotation change from unquoted to
quoted, e.g. <code>children: Optional[List[Node]]</code> →
<code>children: Optional[List[&quot;Node&quot;]]</code>. (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3387">#3387</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Update CHANGELOG for 0.63.0 by <a
href="https://github.com/dcg-generated-docs"><code>@​dcg-generated-docs</code></a>[bot]
in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3345">koxudaxi/datamodel-code-generator#3345</a></li>
<li>Deduplicate module content builder by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3346">koxudaxi/datamodel-code-generator#3346</a></li>
<li>Deduplicate import reference helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3348">koxudaxi/datamodel-code-generator#3348</a></li>
<li>Refactor jsonschema root model registration by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3352">koxudaxi/datamodel-code-generator#3352</a></li>
<li>Refactor XML Schema literal helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3349">koxudaxi/datamodel-code-generator#3349</a></li>
<li>Move builtin formatter helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3351">koxudaxi/datamodel-code-generator#3351</a></li>
<li>Deduplicate Pydantic v2 config helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3350">koxudaxi/datamodel-code-generator#3350</a></li>
<li>Deduplicate DataType type hint rendering by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3354">koxudaxi/datamodel-code-generator#3354</a></li>
<li>Fix <code>constr()</code> for string fields carrying
minItems/maxItems by <a
href="https://github.com/DarkaMaul"><code>@​DarkaMaul</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3353">koxudaxi/datamodel-code-generator#3353</a></li>
<li>Cover non-finite import idempotence by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3367">koxudaxi/datamodel-code-generator#3367</a></li>
<li>Deduplicate input text detection by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3357">koxudaxi/datamodel-code-generator#3357</a></li>
<li>Remove stale protobuf coverage pragma by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3358">koxudaxi/datamodel-code-generator#3358</a></li>
<li>Cover explicit null OpenAPI media schemas by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3360">koxudaxi/datamodel-code-generator#3360</a></li>
<li>Simplify Python version feature checks by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3361">koxudaxi/datamodel-code-generator#3361</a></li>
<li>Speed up CI checks by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3378">koxudaxi/datamodel-code-generator#3378</a></li>
<li>Add maintainer link to docs footer and README by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3379">koxudaxi/datamodel-code-generator#3379</a></li>
<li>Use builtin formatter in CI by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3380">koxudaxi/datamodel-code-generator#3380</a></li>
<li>Split coverage by OS by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3381">koxudaxi/datamodel-code-generator#3381</a></li>
<li>Simplify import removal cleanup by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3362">koxudaxi/datamodel-code-generator#3362</a></li>
<li>Pin deprecation warning stacklevel by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3363">koxudaxi/datamodel-code-generator#3363</a></li>
<li>Pin public module exports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3364">koxudaxi/datamodel-code-generator#3364</a></li>
<li>Cover to_hashable branch cases by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3366">koxudaxi/datamodel-code-generator#3366</a></li>
<li>Cover stable toposort behavior by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3369">koxudaxi/datamodel-code-generator#3369</a></li>
<li>Extract registry render helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3371">koxudaxi/datamodel-code-generator#3371</a></li>
<li>Fix minItems for arrays of URI strings by <a
href="https://github.com/sjh9714"><code>@​sjh9714</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3377">koxudaxi/datamodel-code-generator#3377</a></li>
<li>Deduplicate config value validators by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3372">koxudaxi/datamodel-code-generator#3372</a></li>
<li>Cover CLI option metadata helpers by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3374">koxudaxi/datamodel-code-generator#3374</a></li>
<li>Cover Pydantic v2 version fallback by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3368">koxudaxi/datamodel-code-generator#3368</a></li>
<li>Fix nullable JSON Schema const enums by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3355">koxudaxi/datamodel-code-generator#3355</a></li>
<li>Pin patchable generation seams by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3365">koxudaxi/datamodel-code-generator#3365</a></li>
<li>Cover utility helper behavior by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3375">koxudaxi/datamodel-code-generator#3375</a></li>
<li>Cover DefaultPutDict behavior by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3376">koxudaxi/datamodel-code-generator#3376</a></li>
<li>Cover validator config normalization by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3373">koxudaxi/datamodel-code-generator#3373</a></li>
<li>Avoid expensive runtime type checks by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3382">koxudaxi/datamodel-code-generator#3382</a></li>
<li>Avoid eager builtin formatter import by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3383">koxudaxi/datamodel-code-generator#3383</a></li>
<li>Avoid eager TOML parser import by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3384">koxudaxi/datamodel-code-generator#3384</a></li>
<li>Stabilize msgspec payload tests by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3385">koxudaxi/datamodel-code-generator#3385</a></li>
<li>Avoid eager input parser imports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3386">koxudaxi/datamodel-code-generator#3386</a></li>
<li>Avoid eager parser model imports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3388">koxudaxi/datamodel-code-generator#3388</a></li>
<li>Avoid eager AsyncAPI converter imports by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3389">koxudaxi/datamodel-code-generator#3389</a></li>
<li>Dispose parser on parse errors by <a
href="https://github.com/koxudaxi"><code>@​koxudaxi</code></a> in <a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/pull/3390">koxudaxi/datamodel-code-generator#3390</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/53a25ab8ddb132ac68a2795247fc855b8f445d84"><code>53a25ab</code></a>
Fast path schema output (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3410">#3410</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/ee2087f32e6100f5c3642e7ea8506aa38e9df26c"><code>ee2087f</code></a>
Skip discriminator import scan (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3411">#3411</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/bdf5ddfc27f94a06ba8d289759193bb09daadd34"><code>bdf5ddf</code></a>
fix: quote self-referencing fields when --disable-future-imports is set
(<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3387">#3387</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/ad4ec877fa6708baebdaaf820171d24bfe5bf0cb"><code>ad4ec87</code></a>
Cache payload validation strategies (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3409">#3409</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/b191d52a0a1d83edeac9553119f70b2f5c131126"><code>b191d52</code></a>
Shard Python tests (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3408">#3408</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/29dd6d74c95dd7799d51f2c707db24862809eb23"><code>29dd6d7</code></a>
Cache parsed sources (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3407">#3407</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/93e2fe3cf5774d5e4d2083fac365e5bcbf0a647a"><code>93e2fe3</code></a>
Defer generation refresh (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3406">#3406</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/bb01d9c628f9077cc5dd72320ae60a18abd5b790"><code>bb01d9c</code></a>
Lazy root format exports (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3405">#3405</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/48237ed8c3af3bb58b5e6b274925ebb646412d3a"><code>48237ed</code></a>
Fast path JSON schemas (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3404">#3404</a>)</li>
<li><a
href="https://github.com/koxudaxi/datamodel-code-generator/commit/b21d106c88ac22f137cd4562389ad95a50c2e912"><code>b21d106</code></a>
Slot generation facts (<a
href="https://redirect.github.com/koxudaxi/datamodel-code-generator/issues/3403">#3403</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/koxudaxi/datamodel-code-generator/compare/0.56.0...0.64.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 engine/pyproject.toml |   2 +-
 engine/uv.lock        | 302 +++++++++++++++++++++---------------------
 2 files changed, 152 insertions(+), 152 deletions(-)

diff --git a/engine/pyproject.toml b/engine/pyproject.toml
index 8cbb94daf8..29f2dcbdf7 100644
--- a/engine/pyproject.toml
+++ b/engine/pyproject.toml
@@ -4,7 +4,7 @@ version = "0.1.0"
 description = "AI Document Engine"
 requires-python = ">=3.13"
 dependencies = [
-    "cryptography>=44.0.0",
+    "cryptography>=50.0.0",
     "fastapi>=0.116.0",
     "pgvector>=0.3.6",
     "psycopg[binary,pool]>=3.2",
diff --git a/engine/uv.lock b/engine/uv.lock
index fd10a81182..4f0ff52acd 100644
--- a/engine/uv.lock
+++ b/engine/uv.lock
@@ -41,7 +41,7 @@ wheels = [
 
 [[package]]
 name = "aiohttp"
-version = "3.14.1"
+version = "3.14.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiohappyeyeballs" },
@@ -52,72 +52,72 @@ dependencies = [
     { name = "propcache" },
     { name = "yarl" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/82/78/8ea7308cac6934de8c74a14f3d5f65d1c89287426688be79538d0e5c013d/aiohttp-3.14.1.tar.gz", hash = "sha256:307f2cff90a764d329e77040603fa032db89c5c24fdad50c4c15334cba744035", size = 7955794, upload-time = "2026-06-07T21:09:35.529Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/58/d9/22ce5786ac0c1653ae8b6c23bded02c1686d11f0dbb45b31ce128e0df985/aiohttp-3.14.3.tar.gz", hash = "sha256:9491196535a88924a60afd5b5f434b5b203b6cc616250878dbdb223a8f7844bc", size = 7971213, upload-time = "2026-07-23T01:57:27.037Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/97/bd137012dd97e1649162b099135a80e1fd59aaa807b2430fc448d1029aff/aiohttp-3.14.1-cp313-cp313-android_21_arm64_v8a.whl", hash = "sha256:b3a03285a7f9c7b016324574a6d92a1c895da6b978cb8f1deee3ac72bc6da178", size = 506882, upload-time = "2026-06-07T21:07:15.501Z" },
-    { url = "https://files.pythonhosted.org/packages/ef/79/e5cc690e9d922a66887ceeaca53a8ffd5a7b0be3816142b7abc433742d89/aiohttp-3.14.1-cp313-cp313-android_21_x86_64.whl", hash = "sha256:2a73f487ab8ef5abbb24b7aa9b73e98eaba9e9e031804ff2416f02eca315ccaf", size = 515270, upload-time = "2026-06-07T21:07:17.53Z" },
-    { url = "https://files.pythonhosted.org/packages/fe/22/a73ccbf9dbd6e26dda0b24d5fd5db7da92ee3383a79f47677ffb834c5c5b/aiohttp-3.14.1-cp313-cp313-ios_13_0_arm64_iphoneos.whl", hash = "sha256:915fbb7b41b115192259f8c9ae58f3ddc444d2b5579917270211858e606a4afd", size = 485841, upload-time = "2026-06-07T21:07:19.555Z" },
-    { url = "https://files.pythonhosted.org/packages/3b/b9/57ed8eaf596321c2ad747bd480fb1700dbd7177c60dfc9e4c187f629662e/aiohttp-3.14.1-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:7fb4bdf95b0561a79f259f9d28fbc109728c5ee7f27aff6391f0ca703a329abe", size = 492088, upload-time = "2026-06-07T21:07:21.581Z" },
-    { url = "https://files.pythonhosted.org/packages/78/c0/5ebe5270a7c140d7c6f79dcb018640225f14d406c149e4eec04a7d82fe71/aiohttp-3.14.1-cp313-cp313-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:1b9748363260121d2927704f5d4fc498150669ca3ae93625986ee89c8f80dcd4", size = 501564, upload-time = "2026-06-07T21:07:23.388Z" },
-    { url = "https://files.pythonhosted.org/packages/75/7f/8cdaa24fc7983865e0915153b96a9ac5bcdd3548d64c5a27d17cecccad2d/aiohttp-3.14.1-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:86a6dab78b0e43e2897a3bbe15745aa60dc5423ca437b7b0b164c069bf91b876", size = 751998, upload-time = "2026-06-07T21:07:25.046Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/f4/c4227aacfacc5cb0cc2d119b65301d177912a6842cd64e120c47af76064f/aiohttp-3.14.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:4dfd6e47d3c44c2279907607f73a4240b88c69eb8b90da7e2441a8045dfd21da", size = 510918, upload-time = "2026-06-07T21:07:27.28Z" },
-    { url = "https://files.pythonhosted.org/packages/ab/01/a2d5f96cd4e74424864d30bc0a7e44d0a12dacdcfa91b5b2d1bd3dca6bf3/aiohttp-3.14.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:317acd9f8602858dc7d59679812c376c7f0b97bcbbf16e0d6237f54141d8a8a6", size = 508657, upload-time = "2026-06-07T21:07:29.252Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/ed/3c0fb5c500fdd8e7ebc10d1889c04384fffa1a9163eac1356088ca9da1b1/aiohttp-3.14.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:bd869c427324e5cb15195793de951295710db28be7d818247f3097b4ab5d4b96", size = 1757907, upload-time = "2026-06-07T21:07:31.03Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/ab/d4c924d9bd5be3050c226612413ce68cb54c70d2c31b661bfc8d9a5b6a70/aiohttp-3.14.1-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:93b032b5ec3255473c143627d21a69ac74ae12f7f33974cb587c564d11b1066f", size = 1737565, upload-time = "2026-06-07T21:07:33.031Z" },
-    { url = "https://files.pythonhosted.org/packages/19/2a/37326821ff779084020cdc33224d20b19f42f4183a500ff92022a739eda7/aiohttp-3.14.1-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:f234b4deb12f3ad59127e037bc57c40c21e45b45282df7d3a55a0f409f595296", size = 1799018, upload-time = "2026-06-07T21:07:35.003Z" },
-    { url = "https://files.pythonhosted.org/packages/b3/4f/6e947ba73e4ce09070761c05ed3a8ceb7c21f5e46798671d8b2aac0e4626/aiohttp-3.14.1-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:9af6779bfb46abf124068327abcdf9ce95c9ef8287a3e8da76ccf2d0f16c28fa", size = 1894416, upload-time = "2026-06-07T21:07:36.956Z" },
-    { url = "https://files.pythonhosted.org/packages/9d/6e/dbf1d0625dc711fb2851f4f3c3055c39ed58bae92082d8c627dbe6013736/aiohttp-3.14.1-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:faccab372e66bc76d5731525e7f1143c922271725b9d38c9f97edcc66266b451", size = 1783881, upload-time = "2026-06-07T21:07:39.063Z" },
-    { url = "https://files.pythonhosted.org/packages/44/c2/5e25098a67268ed369483ae7d1a58bd0a13d03aab860d2a0e4a6eb25b046/aiohttp-3.14.1-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:f380468b09d2a81633ee863b0ec5648d364bd17bb8ecfb8c2f387f7ac1faf42c", size = 1587572, upload-time = "2026-06-07T21:07:41.058Z" },
-    { url = "https://files.pythonhosted.org/packages/2a/bd/cf9cee17e140f942a3de73e658a543aa8fbf35a5fc67a9d2538d52d77f0b/aiohttp-3.14.1-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:97e704dcd26271f5bda3fa07c3ce0fb76d6d3f8659f4baa1a24442cc9ba177ca", size = 1722137, upload-time = "2026-06-07T21:07:43.014Z" },
-    { url = "https://files.pythonhosted.org/packages/89/6d/5684f8c59045c96f81a18cefbc1fbbd79d25b88f1c622f2a5c5c08fcb632/aiohttp-3.14.1-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:269b76ac5394092b95bc4a098f4fc6c191c083c3bd12775d1e30e663132f6a09", size = 1755953, upload-time = "2026-06-07T21:07:45.933Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/40/35caf3170f8359760740a7d9aa0fff2e344bef98e1d1186f5a0f6dec17e6/aiohttp-3.14.1-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:5c0b3e614340c889d575451696374c9d17affd54cd607ca0babed8f8c37b9397", size = 1766479, upload-time = "2026-06-07T21:07:48.047Z" },
-    { url = "https://files.pythonhosted.org/packages/6d/a1/b0c61e7a137f0d81de49a82023a6df73c3c16d6fefb0f8e4a93d21639002/aiohttp-3.14.1-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:5663ee9257cfa1add7253a7da3035a02f31b6600ec48261585e1800a81533080", size = 1580077, upload-time = "2026-06-07T21:07:50.069Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/41/194ea4623693009fcefebef7aef63c141754f153e9cd0d39d3b9e36c175c/aiohttp-3.14.1-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:603a2c834142172ffddc054067f5ec0ca65d57a0aa98a71bc81952573208e345", size = 1791688, upload-time = "2026-06-07T21:07:52.106Z" },
-    { url = "https://files.pythonhosted.org/packages/ba/45/4de841f005cfe1fd63e2a2fe011262c515e2a62aa6994b15947e7d717ac9/aiohttp-3.14.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:cb21957bb8aca671c1765e32f58164cf0c50e6bf41c0bbbd16da20732ecaf588", size = 1761094, upload-time = "2026-06-07T21:07:54.113Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/ae/dbce10533d3896d544d5053939ed75b7dc31a1b0973d959b1b5ae21028d6/aiohttp-3.14.1-cp313-cp313-win32.whl", hash = "sha256:e509a55f681e6158c20f70f102f9cf61fb20fbc382272bc6d94b7343f2582780", size = 452662, upload-time = "2026-06-07T21:07:56.06Z" },
-    { url = "https://files.pythonhosted.org/packages/7b/d9/0bf1a19362c32f06229da5e7ddfcec91f93474d6307f7a2d3135e9c674dc/aiohttp-3.14.1-cp313-cp313-win_amd64.whl", hash = "sha256:1ac8531b638959718e18c2207fbfe297819875da46a740b29dfa29beba64355a", size = 479748, upload-time = "2026-06-07T21:07:58.319Z" },
-    { url = "https://files.pythonhosted.org/packages/22/0a/62e7232dc9484fbec112ceb32efb6a624cc7994ec6e2b019286f17c4e8f2/aiohttp-3.14.1-cp313-cp313-win_arm64.whl", hash = "sha256:250d14af67f6b6a1a4a811049b1afa69d61d617fca6bf33149b3ab1a6dbcf7b8", size = 447723, upload-time = "2026-06-07T21:08:00.154Z" },
-    { url = "https://files.pythonhosted.org/packages/c4/a1/5fafa04e1ca91ddb47608699d60649c1c6db3cf41c99e78fc4056f9513db/aiohttp-3.14.1-cp314-cp314-android_24_arm64_v8a.whl", hash = "sha256:7c106c26852ca1c2047c6b80384f17100b4e439af276f21ef3d4e2f450ae7e15", size = 508531, upload-time = "2026-06-07T21:08:02.093Z" },
-    { url = "https://files.pythonhosted.org/packages/fa/2e/bfa02f699d87ffc86d5959270b28f1cb410add3ccaced8ed2e0b8a5238fc/aiohttp-3.14.1-cp314-cp314-android_24_x86_64.whl", hash = "sha256:20205f7f5ade7aaec9f4b500549bbc071b046453aed72f9c06dcab87896a83e8", size = 514718, upload-time = "2026-06-07T21:08:04.476Z" },
-    { url = "https://files.pythonhosted.org/packages/85/a5/9594ad6289eebbc97d167c44213d557807f90e59115caad24de21ad2c3b1/aiohttp-3.14.1-cp314-cp314-ios_13_0_arm64_iphoneos.whl", hash = "sha256:62a759436b29e677181a9e76bab8b8f689a29cb9c535f45f7c48c9c830d3f8c3", size = 487918, upload-time = "2026-06-07T21:08:06.377Z" },
-    { url = "https://files.pythonhosted.org/packages/b4/61/16a32c36c3c49edec122a3dc811f2057df2f94d3b14aa107c8017d981618/aiohttp-3.14.1-cp314-cp314-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:2964cbf553df4d7a57348da44d961d871895fc1ee4e8c322b2a95612c7b17fba", size = 494014, upload-time = "2026-06-07T21:08:08.263Z" },
-    { url = "https://files.pythonhosted.org/packages/9b/89/3ebcf96ed99c05bec9c434aaac6963fd3cbab4a786ae739908a144d9ce44/aiohttp-3.14.1-cp314-cp314-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:237651caadc3a59badd39319c54642b5299e9cc98a3a194310e55d5bb9f5e397", size = 502398, upload-time = "2026-06-07T21:08:10.244Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/3d/b74870a0c2d40c355928cd5b96c7a11fa821b8a40fc41365e64479b151fb/aiohttp-3.14.1-cp314-cp314-macosx_10_15_universal2.whl", hash = "sha256:896e12dfdbbab9d8f7e16d2b28c6769a60126fa92095d1ebf9473d02593a2448", size = 758018, upload-time = "2026-06-07T21:08:12.447Z" },
-    { url = "https://files.pythonhosted.org/packages/d3/66/f42f5c984d99e49c6cff5f26f590750f2e2f7ef1fcfb99966ab5be1b632e/aiohttp-3.14.1-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:d03f281ed22579314ba00821ce20115a7c0ac430660b4cc05704a3f818b3e004", size = 512462, upload-time = "2026-06-07T21:08:14.624Z" },
-    { url = "https://files.pythonhosted.org/packages/e9/a7/248e1aebe0c7810b0271e021a0f2a5eb6e78a051885b3c9df49f42a5802d/aiohttp-3.14.1-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:07eabb979d236335fed927e137a928c9adfb7df3b9ec7aa31726f133a62be983", size = 512824, upload-time = "2026-06-07T21:08:16.572Z" },
-    { url = "https://files.pythonhosted.org/packages/26/97/2aa0e5ba0727dc3bd5aaebb7ccbc510f7dfb7fb961ec87497cd496635ab1/aiohttp-3.14.1-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:4fe1f1087cbadb280b5e1bb054a4f00d1423c74d6626c5e48400d871d34ecefe", size = 1749898, upload-time = "2026-06-07T21:08:18.635Z" },
-    { url = "https://files.pythonhosted.org/packages/00/8d/e97f6c96c891d457c8479d92a514ba194d0412f981d72c70341ee18488ed/aiohttp-3.14.1-cp314-cp314-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:367a9314fdc79dab0fac96e216cb41dd73c85bdca85306ce8999118ba7e0f333", size = 1710114, upload-time = "2026-06-07T21:08:20.892Z" },
-    { url = "https://files.pythonhosted.org/packages/6f/e6/aa8d7e863048c8fceb5cd6ce74017311cec3ead07847387e12265fb4444e/aiohttp-3.14.1-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:a24f677ebe83749039e7bdf862ff0bbb16818ae4193d4ef96505e269375bcce0", size = 1802541, upload-time = "2026-06-07T21:08:23.044Z" },
-    { url = "https://files.pythonhosted.org/packages/83/a8/72193137de57fda4ebfae4563182d082c8856e3b6e9871d0b46f028fb369/aiohttp-3.14.1-cp314-cp314-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:c83afe0ba876be7e943d2e0ba645809ad441575d2840c895c21ee5de93b9377a", size = 1875776, upload-time = "2026-06-07T21:08:25.288Z" },
-    { url = "https://files.pythonhosted.org/packages/a0/18/938441025db6769a3464596b2410af3afde0b21eb2f204c6f766f68af4bd/aiohttp-3.14.1-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:634e385930fb6d2d479cf3aa66515955863b77a5e3c2b5894ca259a25b308602", size = 1760329, upload-time = "2026-06-07T21:08:27.363Z" },
-    { url = "https://files.pythonhosted.org/packages/60/29/bf2496b4065e76e09fe48015aaffe5ce161d8f089b06ac6982070f653076/aiohttp-3.14.1-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:eeea07c4397bbc57719c4eed8f9c284874d4f175f9b6d57f7a1546b976d455ca", size = 1587293, upload-time = "2026-06-07T21:08:29.805Z" },
-    { url = "https://files.pythonhosted.org/packages/49/a2/2136674d52123b1354bd05dd5753c318db47dc0c927cc70b27bab3755456/aiohttp-3.14.1-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:335c0cc3e3545ce98dcb9cfcb836f40c3411f43fa03dab757597d80c89af8a35", size = 1714756, upload-time = "2026-06-07T21:08:32.094Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/b9/e5fd2e6f915503081c0f9b1e8540947037929c70c191da2e4d54b31a21a1/aiohttp-3.14.1-cp314-cp314-musllinux_1_2_armv7l.whl", hash = "sha256:ae6be797afdef264e8a84864a85b196ca06045586481b3df8a967322fd2fa844", size = 1721052, upload-time = "2026-06-07T21:08:34.167Z" },
-    { url = "https://files.pythonhosted.org/packages/63/5a/2833e324a2263e104e31e2e91bc5bbee81bc499afd32203faee048a883f0/aiohttp-3.14.1-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:8560b4d712474335d08907db7973f71912d3a9a8f1dee992ec06b5d2fe359496", size = 1766888, upload-time = "2026-06-07T21:08:36.95Z" },
-    { url = "https://files.pythonhosted.org/packages/57/fa/dea6511870913162f3b2e8c42a7614eb203a4540b8c2da43e0bfb0548f3c/aiohttp-3.14.1-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:2b7edd08e0a5deb1e8564a2fcd8f4561014a3f05252334671bbf55ddd47db0e5", size = 1581679, upload-time = "2026-06-07T21:08:39.292Z" },
-    { url = "https://files.pythonhosted.org/packages/14/bd/3cf0d55e71784b33534e9710a67d382d900598b4787fbce6cc7317f8c42a/aiohttp-3.14.1-cp314-cp314-musllinux_1_2_s390x.whl", hash = "sha256:b6ff7fcee63287ae57b5df3e4f5957ce032122802509246dec1a5bcc55904c95", size = 1782021, upload-time = "2026-06-07T21:08:41.407Z" },
-    { url = "https://files.pythonhosted.org/packages/c1/af/14bb5843eccbe234f4dfb78ab73e549d99727247e62ae5d62cbd22eaf5b0/aiohttp-3.14.1-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:6ffbb2f4ec1ceaff7e07d43922954da26b223d188bf30658e561b98e23089444", size = 1742574, upload-time = "2026-06-07T21:08:43.795Z" },
-    { url = "https://files.pythonhosted.org/packages/f2/1e/fbeb7af9210a67ac0f9c9bec0f8f4568497924e33137a3d5b48e1cf85f3f/aiohttp-3.14.1-cp314-cp314-win32.whl", hash = "sha256:a9875b46d910cff3ea2f5962f9d266b465459fe634e22556ab9bd6fc1192eea0", size = 457773, upload-time = "2026-06-07T21:08:46.168Z" },
-    { url = "https://files.pythonhosted.org/packages/f0/2b/13e8d741a9ec5db7d900c060554cf8352ab85e44e2a4469ebb9d377bda17/aiohttp-3.14.1-cp314-cp314-win_amd64.whl", hash = "sha256:af8b4b81a960eeaf1234971ac3cd0ba5901f3cd42eae42a46b4d089a8b492719", size = 485001, upload-time = "2026-06-07T21:08:48.401Z" },
-    { url = "https://files.pythonhosted.org/packages/df/30/491acfa2c4d6c3ff59c49a14fc1b50be3241e25bbb0c84c09e2da4d11395/aiohttp-3.14.1-cp314-cp314-win_arm64.whl", hash = "sha256:cf4491381b1b57425c315a56a439251b1bdac07b2275f19a8c44bc57744532ec", size = 453809, upload-time = "2026-06-07T21:08:50.7Z" },
-    { url = "https://files.pythonhosted.org/packages/34/e3/19dbe1a1f4cc6230eb9e314de7fe68053b0992f9302b27d12141a0b5db53/aiohttp-3.14.1-cp314-cp314t-macosx_10_15_universal2.whl", hash = "sha256:819c054312f1af92947e6a55883d1b66feefab11531a7fc45e0fb9b63880b5c2", size = 793320, upload-time = "2026-06-07T21:08:52.775Z" },
-    { url = "https://files.pythonhosted.org/packages/7f/20/1b7182219ba1b108430d6e4dc53d25ae02dcfcf5a045b33af4e8c5167527/aiohttp-3.14.1-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:10ee9c1753a8f706345b22496c79fbddb5be0599e0823f3738b1534058e25340", size = 529077, upload-time = "2026-06-07T21:08:55Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/c8/14ce60ec31a2e5f5274bb17d383a6f7a3aabca31ac04eee05585bbadab16/aiohttp-3.14.1-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:1601cc37baf5750ccacae618ec2daf020769581695550e3b654a911f859c563d", size = 532476, upload-time = "2026-06-07T21:08:57.176Z" },
-    { url = "https://files.pythonhosted.org/packages/7e/02/9ac85e081e53da2e061b02fa7758fe0a12d17b8ce2d1f5e6c7cb76730328/aiohttp-3.14.1-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:4d6e0ac9da31c9c04c84e1c0182ad8d6df35965a85cae29cd71d089621b3ae94", size = 1922347, upload-time = "2026-06-07T21:08:59.563Z" },
-    { url = "https://files.pythonhosted.org/packages/c0/3e/d3ba07a0ab38b5389e10bec4362d21e10a4f667cba2d79ba30837b3a5059/aiohttp-3.14.1-cp314-cp314t-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:9e8f2d660c350b3d0e259c7a7e3d9b7fc8b41210cbcc3d4a7076ff0a5e5c2fdc", size = 1786465, upload-time = "2026-06-07T21:09:01.909Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/cb/e2ee978a00cfb2df829704a69528b18154eba5939f45bc1efa8f33aee4c5/aiohttp-3.14.1-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:4691802dda97be727f79d86818acaad7eb8e9252626a1d6b519fedbb92d5e251", size = 1909423, upload-time = "2026-06-07T21:09:04.357Z" },
-    { url = "https://files.pythonhosted.org/packages/73/5d/1430334858b1022b58ae50399a918f0bd6fe8fa7fa183598d657ff61e040/aiohttp-3.14.1-cp314-cp314t-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:c389c482a7e9b9dc3ee2701ac46c4125297a3818875b9c305ddb603c04828fd1", size = 2001906, upload-time = "2026-06-07T21:09:06.722Z" },
-    { url = "https://files.pythonhosted.org/packages/66/4e/560c7472d3d198a23aa5c8b19a5115bf6a9b77b7d3e4bb363da320430ad2/aiohttp-3.14.1-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:fc0cacab7ba4e56f0f81c82a98c09bed2f39c940107b03a34b168bdf7597edd3", size = 1877095, upload-time = "2026-06-07T21:09:09.011Z" },
-    { url = "https://files.pythonhosted.org/packages/0d/f1/4745806578d447db4a784a8591e2dae3afdfc2bcb96f8f81271b13df6543/aiohttp-3.14.1-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:979ed4717f59b8bb12e3963378fa285d93d367e15bcd66c721311826d3c44a6c", size = 1676222, upload-time = "2026-06-07T21:09:11.461Z" },
-    { url = "https://files.pythonhosted.org/packages/6a/c9/48255813cca749a229ef0ab476004ec623728ad79a9c0840616f6c076325/aiohttp-3.14.1-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:38e1e7daaea81df51c952e18483f323d878499a1e2bfe564790e0f9701d6f203", size = 1842922, upload-time = "2026-06-07T21:09:14.118Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/c0/bbd054e2bee909f529523a5af3891052606af5143c09f5f183ec3b234676/aiohttp-3.14.1-cp314-cp314t-musllinux_1_2_armv7l.whl", hash = "sha256:4132e72c608fe9fecb8f409113567605915b83e9bdd3ea56538d2f9cd35002f1", size = 1825035, upload-time = "2026-06-07T21:09:16.447Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/ae/90395d4376deceb74e09ec26b6adf7d2015a6f8802d6d84446af860fef04/aiohttp-3.14.1-cp314-cp314t-musllinux_1_2_ppc64le.whl", hash = "sha256:eefd9cc9b6d4a2db5f00a26bc3e4f9acf71926a6ec557cd56c9c6f27c290b665", size = 1849512, upload-time = "2026-06-07T21:09:18.742Z" },
-    { url = "https://files.pythonhosted.org/packages/93/bd/fb25f3049957553d4ce0ba6ae480aa2f592a6985497fca590837d16c1be0/aiohttp-3.14.1-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:b165790117eea512d7f3fb22f1f6dad3d55a7189571993eb015591c1401276d1", size = 1668571, upload-time = "2026-06-07T21:09:21.458Z" },
-    { url = "https://files.pythonhosted.org/packages/3f/22/7f73303d64dd567ff3addca90b556690ed1233a47b8f55d242fb90af3681/aiohttp-3.14.1-cp314-cp314t-musllinux_1_2_s390x.whl", hash = "sha256:ed09c7eb1c391271c2ed0314a51903e72a3acb653d5ccfc264cdf3ef11f8269d", size = 1881159, upload-time = "2026-06-07T21:09:23.813Z" },
-    { url = "https://files.pythonhosted.org/packages/44/be/0474c5a8b5640e1e4aa1923430a91f4151be82e511373fe764189b89aef5/aiohttp-3.14.1-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:99abd37084b82f5830c635fddd0b4993b9742a66eb746dacf433c8590e8f9e3c", size = 1841409, upload-time = "2026-06-07T21:09:26.207Z" },
-    { url = "https://files.pythonhosted.org/packages/7b/3c/bb4a7cba26956cb3da4553cc2056cf67be5b5ff6e6d8fa4fbdff73bfb7ae/aiohttp-3.14.1-cp314-cp314t-win32.whl", hash = "sha256:47ddf841cdecc810749921d25606dee45857d12d2ad5ddb7b5bd7eab12e4b365", size = 494166, upload-time = "2026-06-07T21:09:28.505Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/84/ec80c2c1f66a952555a9f86df6b33af65108a6febfa0471b69013a12f807/aiohttp-3.14.1-cp314-cp314t-win_amd64.whl", hash = "sha256:5e78b522b7a6e27e0b25d19b247b75039ac4c94f99823e3c9e53ae1603a9f7e9", size = 530255, upload-time = "2026-06-07T21:09:30.843Z" },
-    { url = "https://files.pythonhosted.org/packages/2a/71/6e22be134a4061ada85a92951b842f2657f17d926b727f3f94c56ae963d6/aiohttp-3.14.1-cp314-cp314t-win_arm64.whl", hash = "sha256:90d53f1609c29ccc2193945ef732428382a28f78d0456ae4d3daf0d48b74f0f6", size = 469640, upload-time = "2026-06-07T21:09:33.028Z" },
+    { url = "https://files.pythonhosted.org/packages/57/be/5afd201cc0ab139029aadb75392efe85a293403d9dd3a3226161c21ce00c/aiohttp-3.14.3-cp313-cp313-android_21_arm64_v8a.whl", hash = "sha256:2e9878ae68e4a5f1c0abe4dd497dbc3d51946f5837b56759e2a02e78fa90ef86", size = 506269, upload-time = "2026-07-23T01:54:49.075Z" },
+    { url = "https://files.pythonhosted.org/packages/22/09/dec8189d62b45ade009f6792a2264b942a90cb88aeaf181239933cd72c3c/aiohttp-3.14.3-cp313-cp313-android_21_x86_64.whl", hash = "sha256:f3d2669fe7dec7fc359ecdb5984b29b50d85d5d00f8c1cb61de4f4a24ee42627", size = 515166, upload-time = "2026-07-23T01:54:51.894Z" },
+    { url = "https://files.pythonhosted.org/packages/28/24/2854869d29ed8a8b19d74f9ec6629515f7e04d02dd329d9d179201e58e47/aiohttp-3.14.3-cp313-cp313-ios_13_0_arm64_iphoneos.whl", hash = "sha256:cc7cb243a68167172f48c1fd43cee91ec4b1d40cefd190edd43369d1a6bc9c82", size = 486263, upload-time = "2026-07-23T01:54:54.223Z" },
+    { url = "https://files.pythonhosted.org/packages/d4/dd/57187c8be2a35aea65eaee3bd2c3dcbbcf0204f5106c89637e3610380cd1/aiohttp-3.14.3-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:78253b573e6ffab5028924fc98bc281aae05445969982a10864bc360dea2016c", size = 492299, upload-time = "2026-07-23T01:54:56.236Z" },
+    { url = "https://files.pythonhosted.org/packages/b9/11/06ae6ed8f0d414edf4068861e233d8fe23ee699bfd4b3ceb8663db948a62/aiohttp-3.14.3-cp313-cp313-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:7041d52c3a7fa20c9e8c182b534704abb19502c8bdcbde7ab23bfda6f642394f", size = 502235, upload-time = "2026-07-23T01:54:58.377Z" },
+    { url = "https://files.pythonhosted.org/packages/7e/a3/559639c34a345d2cf7c52dff6838119f2eaf29eb508227b5b83f573af813/aiohttp-3.14.3-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:ac74facc01463f138b0da5580329cfcc82818dea5656e83ddcd11268fc12ff80", size = 750883, upload-time = "2026-07-23T01:55:00.65Z" },
+    { url = "https://files.pythonhosted.org/packages/91/cd/41e131f13afd1e7b0172a9d9eda085ef90eb8439f41f0d279db81ed3ae60/aiohttp-3.14.3-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:d6218d92e450824e9b4881f44e8c09f1853b490f9a64130801024a4793b1b3b0", size = 508473, upload-time = "2026-07-23T01:55:02.945Z" },
+    { url = "https://files.pythonhosted.org/packages/bc/6b/e7f13410d391c6e55b4c007a8de024355389d7d459e3d64c42b2d33617e5/aiohttp-3.14.3-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:11fb37ef075669eee52ab1928fbf6e1741fada40409fa309ebde9607a962aebf", size = 509190, upload-time = "2026-07-23T01:55:05.173Z" },
+    { url = "https://files.pythonhosted.org/packages/97/21/6464573e53d69672cc1eada3e5c5cb2d2efa82701e8305a0f2047a576967/aiohttp-3.14.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:55bdcc472aafe2de4a253045cc128007a64f1e0264fb675791e132ea5edaa3bd", size = 1761478, upload-time = "2026-07-23T01:55:07.383Z" },
+    { url = "https://files.pythonhosted.org/packages/1a/81/d217043a4c17fbce360905e3b2bdd20139ebc9a2de836d035d179c4da006/aiohttp-3.14.3-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:c39846c3aad97a8530c89d7a3869a8f8e9e3762c6ac0504481e5c80948f7e807", size = 1735092, upload-time = "2026-07-23T01:55:09.803Z" },
+    { url = "https://files.pythonhosted.org/packages/a1/66/e13a02d0eeb1a9a502402a977abb4e4abff9fe4051c26f80558c57a7c975/aiohttp-3.14.3-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:5895ef58c4620afe02fa16044f023dc4dafec08158f9d08874a46a7dbc0341b8", size = 1800546, upload-time = "2026-07-23T01:55:12.012Z" },
+    { url = "https://files.pythonhosted.org/packages/26/5e/57d42fca1d18cb5acc1cad945d017fabc5d6ae71d8a08ad66be8dc3ee544/aiohttp-3.14.3-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:fa9467a8113aa69d3d7c55a70ef0b7c636010a40993f3df9d9d0d73b3eb7ef24", size = 1895250, upload-time = "2026-07-23T01:55:14.357Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/1c/7da8d08e74d56f00070822f9638ff3f1c563f8ad87d1efa996c87bfc8644/aiohttp-3.14.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:d7d2deec16eeedf55f2c7cf75b521ea3856a5177e123844f8fd0f114ce252cb5", size = 1789289, upload-time = "2026-07-23T01:55:16.668Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/0f/cf16bcf56896981c1a0319f5d5db9337994b5165730c48a8fa07e9b34be6/aiohttp-3.14.3-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:dd54d0e8717de95939766febac482ac0474d8ac3b048115f9f2b1d23a16e7db4", size = 1586706, upload-time = "2026-07-23T01:55:18.913Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/6f/76eac12a7f2480e1e304f842efdb07db33256b0d9165b866b6ef0806c202/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:df82f3787c940c94986b34222d59c9e38843fba85139f36e85255a82ad5355a9", size = 1724652, upload-time = "2026-07-23T01:55:21.296Z" },
+    { url = "https://files.pythonhosted.org/packages/39/b6/19c8c592baeeb94b75f966547d40c02ac7590902306ec5863d5c027cf506/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:42a67efc36300d052fb4508a53e8b6901b9284b599ae63945c377569c5fcc1e1", size = 1756239, upload-time = "2026-07-23T01:55:23.705Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/c9/4e9383150296f97f873b680c4de8fb2cd88608fb9f48c79edcb111611abc/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:7a75aa63cbf9b21cfaf60dc2657e19df2c2867d91707d653fee171ffeedd1371", size = 1769161, upload-time = "2026-07-23T01:55:26.082Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/1e/147bdc6cc5de5f3ab011be8bf5d6e786633249f22c20bae06f85e45f5387/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:e92eb8acc45eb6a9f4935071a77edf5b85cc6f8dfad5cd99e97653c26593cdde", size = 1578759, upload-time = "2026-07-23T01:55:28.846Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/31/78388a9d6040ece2e11df62ea229a822cf5e52d238374b220ae9975b2623/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:b014a6ed7cf912e787149fdc529166d3ceabac23f26efeea3158c9aba2354e7e", size = 1792025, upload-time = "2026-07-23T01:55:31.457Z" },
+    { url = "https://files.pythonhosted.org/packages/03/51/a3d29fdf2c25d796746af8ad6fe56a45d6256c38b0a8a2ed752e1160b3a2/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:3d4f72af88ac2474bb5bca640030320e3d38a0163a1d7533500e87be458eef71", size = 1768477, upload-time = "2026-07-23T01:55:33.87Z" },
+    { url = "https://files.pythonhosted.org/packages/29/a6/442e18b5afeade534d877a2dc3c3e392aff8d49787890b0cf84790410267/aiohttp-3.14.3-cp313-cp313-win32.whl", hash = "sha256:5f08ec777f35ee70720233b8b9811d3bb5d728137f30ac91b7457709c3261ac0", size = 451069, upload-time = "2026-07-23T01:55:36.121Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/69/3d876ac02659f271cf7f6769f14a8e3de5b6e888ed8b5a7e998086a4cec8/aiohttp-3.14.3-cp313-cp313-win_amd64.whl", hash = "sha256:dff9461ec275f22135650d5ba4b4931a11f3958df7dfbb8db630000d4dee0883", size = 476518, upload-time = "2026-07-23T01:55:38.303Z" },
+    { url = "https://files.pythonhosted.org/packages/b2/0e/50d6e6471cd31edce8b282bdec59375a3a69124d8a989a0b1313355cae52/aiohttp-3.14.3-cp313-cp313-win_arm64.whl", hash = "sha256:ddcac3c6b382e81f1dd0499199d4136b877beb4cb5ef770bbbfba56c4b8f55d2", size = 447676, upload-time = "2026-07-23T01:55:40.451Z" },
+    { url = "https://files.pythonhosted.org/packages/c8/20/887fdcf832326571b370ffc347b3e70abe101096f3720126aac161b1d872/aiohttp-3.14.3-cp314-cp314-android_24_arm64_v8a.whl", hash = "sha256:49f7325beb0f85ef4aef5f48f490269575f83e6e2acad00a1d80b807eb027062", size = 509067, upload-time = "2026-07-23T01:55:42.618Z" },
+    { url = "https://files.pythonhosted.org/packages/ad/a3/92cec936f78cc4bf0fa5554ebe593b73459d94e3c62303e1902a4cccb6f7/aiohttp-3.14.3-cp314-cp314-android_24_x86_64.whl", hash = "sha256:e3be98a7c30b8c25d573dafba7171d66dfb05ee6a9070fc46535464ff97700a6", size = 514774, upload-time = "2026-07-23T01:55:44.937Z" },
+    { url = "https://files.pythonhosted.org/packages/29/ba/2a0c38df3fc557620b6a5acd98364af050053b6285b4dc7ee74100c63c18/aiohttp-3.14.3-cp314-cp314-ios_13_0_arm64_iphoneos.whl", hash = "sha256:614c61d478b83953e261d02bb2df750f17227cd33ef8002945bf5aebbde21919", size = 488134, upload-time = "2026-07-23T01:55:47.135Z" },
+    { url = "https://files.pythonhosted.org/packages/48/d6/d51b7d4bf309af3693940d8ffd2b9ed0b682434ef85959b7c9c137f60cf8/aiohttp-3.14.3-cp314-cp314-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:1caa7b0d05f3e3a36f87788c59e970a7ee1cefcfcbb924a9f138c4a6551c9cb7", size = 494201, upload-time = "2026-07-23T01:55:49.451Z" },
+    { url = "https://files.pythonhosted.org/packages/3f/5a/8f624384e5f1efabb5229b94157eb966b021e97bdb188c62860c2ae243c2/aiohttp-3.14.3-cp314-cp314-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:dfa68deb2a443bdaa3ea5297b0699c1464f08aef3812b486d1348eee61b07dc0", size = 502766, upload-time = "2026-07-23T01:55:51.656Z" },
+    { url = "https://files.pythonhosted.org/packages/a6/26/4ff0164370deec18fb19254ee4ab10b7a73304ac0c860b13f5f84663759b/aiohttp-3.14.3-cp314-cp314-macosx_10_15_universal2.whl", hash = "sha256:e72ee89e28d907a18f46959b4eb0bb06701cc7f8cf4366e00029e2ccfaaf5924", size = 756557, upload-time = "2026-07-23T01:55:53.964Z" },
+    { url = "https://files.pythonhosted.org/packages/97/a3/7056b86dc0d9ec709ea9777eae3b0161428f943372f8b98c01c11593b682/aiohttp-3.14.3-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:ad4c8b7488d745d2ca4838ebd8ae5ba9b56341d30b1da43640e4ce87f9f49646", size = 510168, upload-time = "2026-07-23T01:55:56.22Z" },
+    { url = "https://files.pythonhosted.org/packages/85/ed/0357a015892fd68058bf2d39d3fd1958e459b997a7db30aaa6aaa434ae96/aiohttp-3.14.3-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:db332af25642007330fca8be5c4d194caf2bea7a7fc84415aff3497af5dfee6b", size = 512957, upload-time = "2026-07-23T01:55:58.437Z" },
+    { url = "https://files.pythonhosted.org/packages/47/d1/8aba53f15ccb2238405f5e9d30e2a8ca44f93878c26e7165ade00d374b1c/aiohttp-3.14.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:25bd2708db6bdf6a6630dd37bdcdfcb47c4434d22ac69c64665b802910140b30", size = 1750149, upload-time = "2026-07-23T01:56:00.856Z" },
+    { url = "https://files.pythonhosted.org/packages/49/bd/40c3fee327529284375c6701cbb0fa4600cc2e8432af1378f897e2ef7d3a/aiohttp-3.14.3-cp314-cp314-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:cef89a58e628c4efcac3275c2d68083f82426dcdc89c1492a6f654f9f7ea6ab9", size = 1707685, upload-time = "2026-07-23T01:56:03.371Z" },
+    { url = "https://files.pythonhosted.org/packages/2a/a3/ca0cc6724cca8114b05694abd916060758c79894c3aa5b012cdadc1bc28e/aiohttp-3.14.3-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:c23ec8ee9d5ab2f5421f9c7fffce208435607af27fd46d4a44e031954352838f", size = 1803911, upload-time = "2026-07-23T01:56:05.817Z" },
+    { url = "https://files.pythonhosted.org/packages/95/b5/85b099c299c3ffd38ad9b3e43694c8a346934e4a30c88c4fd5a841234f77/aiohttp-3.14.3-cp314-cp314-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:e2667f0bbe7eb6c74eae5e9691441ad186e5845ca3cff63230fc09c4e7514f5d", size = 1876929, upload-time = "2026-07-23T01:56:08.413Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/b7/1da684a04175473fa4cddbf9a2f572e79514c3fd27a74597f43057d4f3da/aiohttp-3.14.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:18cb43369747b2ae007bd2655fb8e63a099c2ff1d207962943636dac989b3147", size = 1761112, upload-time = "2026-07-23T01:56:10.918Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/16/bc4b55e3e5cb175fd69c53c90d60d2f47797cb343da5106e23863dc4dba4/aiohttp-3.14.3-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:d77640cc618c1d99fc4f8589c0f24a730adfa54eb1e57ef7bf0c8dfb78da898c", size = 1583500, upload-time = "2026-07-23T01:56:13.613Z" },
+    { url = "https://files.pythonhosted.org/packages/2a/e8/13a9d957a1ee40837f46aa30f0f4c657e673ad86a2e6362a9f9be20d26d9/aiohttp-3.14.3-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:53e5179d8abb5710f8e83ba207c41c8d1261fcffd4616500e15ca2b7a33be10a", size = 1713940, upload-time = "2026-07-23T01:56:15.969Z" },
+    { url = "https://files.pythonhosted.org/packages/38/05/d33c680c1bcf1c7e130f9cbfc1fc02fe8bb0c4af2a94a53dd5fb56131e5c/aiohttp-3.14.3-cp314-cp314-musllinux_1_2_armv7l.whl", hash = "sha256:cd817772b2fcf2b8c0905795318485f9ec16eae60b29feb7f4c77085311637f0", size = 1724413, upload-time = "2026-07-23T01:56:18.591Z" },
+    { url = "https://files.pythonhosted.org/packages/85/1d/af798d306f7a74b6a632dbcabcf62a4c91391b7582d2a8c6d7712e2cc54e/aiohttp-3.14.3-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:4e3ac92d90e92773b2362d506068e9a948192bd553e743c5b2429e28527c8661", size = 1770748, upload-time = "2026-07-23T01:56:21.074Z" },
+    { url = "https://files.pythonhosted.org/packages/a8/92/ad720d472556a995049206867765e9410969684f86ee09423ff9969044c1/aiohttp-3.14.3-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:3f42e9b78301f11c8f861746175d8b9c1ccef713fcad9eab396e2f6db8ed4a22", size = 1577564, upload-time = "2026-07-23T01:56:23.475Z" },
+    { url = "https://files.pythonhosted.org/packages/60/ad/0ed7586cbef7a884e23a752fa2bb987a122e6a5dd50dab109258d0a95193/aiohttp-3.14.3-cp314-cp314-musllinux_1_2_s390x.whl", hash = "sha256:9d9edccfe496b476db5f398d97b865e9a6752bcf8aec4eef8390ce20fb64bb41", size = 1782080, upload-time = "2026-07-23T01:56:25.994Z" },
+    { url = "https://files.pythonhosted.org/packages/97/ea/dbaed0d73e8a69aad653b045dab451c67c2454bb731a37b45a86593e9422/aiohttp-3.14.3-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:1c5ec8fb1bcc31a8466f74aaf26c345d5c386fa4bd08a3f0eb9c7a4a3fe8b5bf", size = 1745813, upload-time = "2026-07-23T01:56:28.604Z" },
+    { url = "https://files.pythonhosted.org/packages/81/1b/6893d4bc57e434fc93a6c9217c637d967a0b651d989f6e3265179375754a/aiohttp-3.14.3-cp314-cp314-win32.whl", hash = "sha256:38901a84da3ce22249f6e860bf8f90d141bcab7da090cc398f8bb58c0e44b7da", size = 455872, upload-time = "2026-07-23T01:56:31.031Z" },
+    { url = "https://files.pythonhosted.org/packages/f5/8b/c7baa1ba1eda4db6989baefe5de6d99834921b84ebd7918624febcb9f290/aiohttp-3.14.3-cp314-cp314-win_amd64.whl", hash = "sha256:8b3b60de05f3dcb6f6a00f818bb2ec781cee4de0645f59ccaf99b1d1823b6100", size = 481030, upload-time = "2026-07-23T01:56:33.365Z" },
+    { url = "https://files.pythonhosted.org/packages/22/8c/c29d067df825a2df88ca432db848aa2fe8199598359cc06c12b09320cac9/aiohttp-3.14.3-cp314-cp314-win_arm64.whl", hash = "sha256:1576145bdceeb92382d899751e12743a3a5b8e460a841e3e50543859e54864dc", size = 453669, upload-time = "2026-07-23T01:56:35.731Z" },
+    { url = "https://files.pythonhosted.org/packages/6a/a4/9c033beb355d39b6147980597ec9645e4729243f686ee4dc73945de72030/aiohttp-3.14.3-cp314-cp314t-macosx_10_15_universal2.whl", hash = "sha256:8800c996b01c2772a783e3e46f3e1abd5823029adca0df54231960de9bfefa5b", size = 791403, upload-time = "2026-07-23T01:56:37.972Z" },
+    { url = "https://files.pythonhosted.org/packages/80/ca/87c32a0a7704583cfc49660bd817889bae5b830bf53b5dcb4e92145ac2da/aiohttp-3.14.3-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:ebe8e504f058fe91223351cecd2d9d6946c9d241bb0250d898ffbdf584cc72b0", size = 526413, upload-time = "2026-07-23T01:56:40.523Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/d8/8ec0e471248c500acdce2be3f46db8fb62b5eb60efef072529cc85ee1d26/aiohttp-3.14.3-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:30402d03a7c0ff52bce290b57e564e9079fd9d0cb545c8aba73f86a103162d2e", size = 532135, upload-time = "2026-07-23T01:56:42.876Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/45/f8919fd936e8b79fcd9bda7b6d8e62613462a713f4f17987fd7c34399142/aiohttp-3.14.3-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:9fc7b5bfec6573f3ae844f457fdde5adeb713f8b8e4a81ad64fc207b49383716", size = 1922742, upload-time = "2026-07-23T01:56:45.528Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/ec/9ca76b28a27525b0cc53e20842e0228b022f301ce1f436b7d814b4aaf2df/aiohttp-3.14.3-cp314-cp314t-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:8a5fd34f7f7410d1730d5c2ba873cacb2eed3fede366feb268a70ba22581ed8f", size = 1787371, upload-time = "2026-07-23T01:56:48.045Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/04/6acdbf17315f7b55f1937e3387acb89a3cddeb4995689553d064af8e92ab/aiohttp-3.14.3-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:270d3dace9ca2f10f0da5d8ebe519b7a310fc6112ed916e32df5866df0888553", size = 1912623, upload-time = "2026-07-23T01:56:50.605Z" },
+    { url = "https://files.pythonhosted.org/packages/86/e6/438b0c79ca6f45eb9fd9817dd4c01a91919a38c0de5ee9e05e2b4dc0ece7/aiohttp-3.14.3-cp314-cp314t-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:3ae5b3a59436d089b5395d910121a390feed4d00578eb95a0fd1a329fe963100", size = 2005515, upload-time = "2026-07-23T01:56:53.153Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/6b/62cbd6577758699525f5c712d1ddef57d9875fbab0ae8d5f5a202fd598f8/aiohttp-3.14.3-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:2498f0fe69ead802f9675beca44a7c21c62fdaa4ec5145ea1c3ad6edbee29f85", size = 1879906, upload-time = "2026-07-23T01:56:55.818Z" },
+    { url = "https://files.pythonhosted.org/packages/00/95/18bcbf830a21dc3aae24d8f6b6feaf3db1d2090242d00a7868db2ffb0b67/aiohttp-3.14.3-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:a0dc483c00da8b673abbb367eb6f8d8f4bcec30eb58529ea13cb42e7fd2dfa33", size = 1675849, upload-time = "2026-07-23T01:56:58.861Z" },
+    { url = "https://files.pythonhosted.org/packages/a9/19/47f4968659c5e23606c3790c80fc624e691c153d036148449ee84d31b287/aiohttp-3.14.3-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:c7d3a97c678d34fc5b59da671ee9cd630096ddc643e7b5a30d54a2a6f3574d3f", size = 1843496, upload-time = "2026-07-23T01:57:01.591Z" },
+    { url = "https://files.pythonhosted.org/packages/64/af/38c33c4dd82fddcb4e56c4653b6f1072a8edbc6b7fa15809f14932c41e2d/aiohttp-3.14.3-cp314-cp314t-musllinux_1_2_armv7l.whl", hash = "sha256:f8fb78a83c9e5f741ca3a68cfb455c1f5bb83b4e7249a3848b3cd78d0a8563b0", size = 1827746, upload-time = "2026-07-23T01:57:05.131Z" },
+    { url = "https://files.pythonhosted.org/packages/a1/9d/0537cda4885ac8f5b7053d164dd06312f4c483a4edcb8ee5b8aaf2a989bf/aiohttp-3.14.3-cp314-cp314t-musllinux_1_2_ppc64le.whl", hash = "sha256:74ab5b6a9fb13e873e5a90946588baecaf488745e1db1a4a5c433f971f035098", size = 1853810, upload-time = "2026-07-23T01:57:08.043Z" },
+    { url = "https://files.pythonhosted.org/packages/19/fe/26f9c5e6458385aa86497836b0dea6fb2f027827d63f37c7856cce9286ee/aiohttp-3.14.3-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:bd52f811e65f6fb634b1047159657c98f52b407f8efec907bcfc09da9a4c0a25", size = 1668895, upload-time = "2026-07-23T01:57:10.837Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/4c/618b1db9b9ba079b8875d2cdf78e7c4a3bf72903bd5850fee7dd9544600a/aiohttp-3.14.3-cp314-cp314t-musllinux_1_2_s390x.whl", hash = "sha256:f0f177d1b195b9e06376cfd7d308d8a1b920909a609d03ac82a8c73bbb16d3b9", size = 1883833, upload-time = "2026-07-23T01:57:13.672Z" },
+    { url = "https://files.pythonhosted.org/packages/94/c6/bd959bd1e4771f9fd944e9e436224c48c77b018b73b519b5aad346335bcc/aiohttp-3.14.3-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:498c6c623134f8e09a3c4e60bcd607a0b4590dd7dbf08dd40851b27cbb520ccb", size = 1844251, upload-time = "2026-07-23T01:57:16.593Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/19/08d41839658bdd44a0ed2480f3891705ecb487ce28c0dde62c9040c997e0/aiohttp-3.14.3-cp314-cp314t-win32.whl", hash = "sha256:b304db572b4368edd8dda8a2274f73156fe15558fca4a917cb8a09fc47af5963", size = 474180, upload-time = "2026-07-23T01:57:19.306Z" },
+    { url = "https://files.pythonhosted.org/packages/99/5d/3cd6ef0a2b2851f7ab913b5b079334781bd50ff56a323e4454063377a080/aiohttp-3.14.3-cp314-cp314t-win_amd64.whl", hash = "sha256:b20032766aedf6261c7a566585a40867d092ac03a0d81592d5370ef9b054f99b", size = 500528, upload-time = "2026-07-23T01:57:21.762Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/37/cfd1ed540a4d318da025590d96b728e63713c09e9377950fc655dadeb856/aiohttp-3.14.3-cp314-cp314t-win_arm64.whl", hash = "sha256:2e1161602f45a54de2ce0905243a95f58cb42dcd378402f3697f5e0b21e9d2e7", size = 469280, upload-time = "2026-07-23T01:57:24.241Z" },
 ]
 
 [[package]]
@@ -473,52 +473,52 @@ wheels = [
 
 [[package]]
 name = "cryptography"
-version = "49.0.0"
+version = "50.0.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cffi", marker = "platform_python_implementation != 'PyPy'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/1f/99/d1c90d6041656cc6ee229dc99cd67fd0cd5aec3c5f7d72fffc27cc750054/cryptography-49.0.0.tar.gz", hash = "sha256:f89660a348f4f78a92366240a61404e337586ef7f5909a2fef59ca88ef505493", size = 854345, upload-time = "2026-06-12T20:02:30.512Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/de/41/6cbdcf9142d00fe82836fbb51e503e58088575cf7a0fe1dbff6695bf0840/cryptography-50.0.0.tar.gz", hash = "sha256:eeac2acb5a20ed25e0ad6d1df9891a520b78b404266b6d11778f25d5d691a6c9", size = 880201, upload-time = "2026-07-31T14:25:10.11Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/9b/22/adf66990e63584a68dfb50c24f48a125c07b1699899381c8151e63ed458c/cryptography-49.0.0-cp311-abi3-macosx_11_0_arm64.whl", hash = "sha256:966fe0e9c67490071f14c0d2b1cb2dfb3023c5ce39457343931415f08382f2db", size = 4032100, upload-time = "2026-06-12T20:02:32.143Z" },
-    { url = "https://files.pythonhosted.org/packages/09/41/3797cfaf69cae04a13ee78ebd83f0678d9c02b4779d21ce24445326f1a69/cryptography-49.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:36d1709f992593689b45bda411498d62c6e365f2ca00b84657d4dadd24de16db", size = 4692978, upload-time = "2026-06-12T20:01:21.305Z" },
-    { url = "https://files.pythonhosted.org/packages/e6/8b/43011f7ebe515a8aa20d61f290a326cd890c2e738e16e59eaff8d9c3a412/cryptography-49.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:0e959b578856a3924bc0cbb710fc12c387b9412a951389f3ca61704a9e25f325", size = 4716422, upload-time = "2026-06-12T20:01:48.566Z" },
-    { url = "https://files.pythonhosted.org/packages/4a/91/01ce7303a4579e6d3a6abef01bd322848e9ea7a219adcabc5048b9033571/cryptography-49.0.0-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:53ecee2e23f7169b6117e99fc8a944e5e50f79e69758a83b52a00cb98ab2b2d2", size = 4700503, upload-time = "2026-06-12T20:02:47.091Z" },
-    { url = "https://files.pythonhosted.org/packages/62/99/a2c95cf8293f07491e9e27c20cc4dcd18176d944e674679adeb1d0173fd6/cryptography-49.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:2eda353d8a27bcbcaa4cbed18994a74ab4d19a2ca897db188ea269ab9b71419b", size = 5309779, upload-time = "2026-06-12T20:02:08.987Z" },
-    { url = "https://files.pythonhosted.org/packages/20/2c/0622f20ff02b2ef32558733443805dc82fd4c275be01b2d19d14676f3a1b/cryptography-49.0.0-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:2afe9051da7ae7bd5905da5a949280c7d2bb75682e188f650a9d0f2756b834c6", size = 4749683, upload-time = "2026-06-12T20:02:03.335Z" },
-    { url = "https://files.pythonhosted.org/packages/a3/5b/c5246635d5fd3b64e0d45ae10e99fd32fe9676a79915ccfe5a61ba9af1a5/cryptography-49.0.0-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:0b82e28ee398a386f0807bba7884d30f25218855690f45115831bcce5d90822c", size = 4337874, upload-time = "2026-06-12T20:02:54.323Z" },
-    { url = "https://files.pythonhosted.org/packages/6d/88/05563c7fe2e914e87d1a536d06fe83e66b4e1d95cb593e05aea375531da8/cryptography-49.0.0-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:ccac2bfebc306b862133e3bb71f3f6ee8bb525240089b2d952e4144b3a6d5da7", size = 4700283, upload-time = "2026-06-12T20:01:34.822Z" },
-    { url = "https://files.pythonhosted.org/packages/c4/b6/d7696e4e890d6ae1469935164c9e5215c557671cb78d6e3f458ccceaa632/cryptography-49.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:d0527ce944105f257f605a827d6ebead966c752038b6e8656abb9c5edee6fc68", size = 5265844, upload-time = "2026-06-12T20:01:24.09Z" },
-    { url = "https://files.pythonhosted.org/packages/a9/3c/f3ad17eecc1a57b0ba236dc01f90e783c51f4a2f35f64777cc4f47a184b2/cryptography-49.0.0-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:cbc77da8c523d5abd028635ba850a6966fcee2c82e2bf65a41d1d8afe0f98be9", size = 4749290, upload-time = "2026-06-12T20:01:30.848Z" },
-    { url = "https://files.pythonhosted.org/packages/4f/01/339573cf1023163a400b0b5d16f6d507de413b9f60be6fd1b77feeaf6737/cryptography-49.0.0-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:b87e65d263b3e5d3bb92a57e2a6638e2f31110fa7aa890c7b2dbba42248d0a3f", size = 4834612, upload-time = "2026-06-12T20:01:29.246Z" },
-    { url = "https://files.pythonhosted.org/packages/71/fd/577302e213a1be9468f92d1afef66fcf1ef83d516819d9992ca547f592bd/cryptography-49.0.0-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:66ec79c3904820572d7e987abdf304281f141d37ad9a489b8e97066e7b9b6459", size = 4980804, upload-time = "2026-06-12T20:01:42.853Z" },
-    { url = "https://files.pythonhosted.org/packages/1f/09/f42b1d190c5ba75f72062a387f8030d1d75f6ab035788f1d9c4b01de6525/cryptography-49.0.0-cp311-abi3-win_amd64.whl", hash = "sha256:e5dfc1e64de5677cec922ffa8da89c546d0415bf6efdf081842e5d44c84e1f0e", size = 3810026, upload-time = "2026-06-12T20:02:39.262Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/9e/db72b3ae7fc9cfad53e630e56c6ae83b9b6ff0bf3718ffb8012d20b3aabf/cryptography-49.0.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:73a205dce83953d131a4aa1e0fd917a2fd1c5b1eef251e9d7152efefcbf5caf7", size = 4013892, upload-time = "2026-06-12T20:02:10.735Z" },
-    { url = "https://files.pythonhosted.org/packages/86/12/c48a424f38db03027be9f7ed5c7dc5de9933dbee992865f98b13727a009d/cryptography-49.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:196ecd6a36e4e9aa10270393bb98d8df88fccee0bf1e5128b91ae4eb4375896d", size = 4678835, upload-time = "2026-06-12T20:02:48.743Z" },
-    { url = "https://files.pythonhosted.org/packages/68/28/8a3ad4653662c93fc44dc4e5d8fd374c25c42e07b34bbfbadf49cf57a5a8/cryptography-49.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7abcee80084cda3f7691f3eb1ce480d8df49cec637b429aa35986c1de71738aa", size = 4697239, upload-time = "2026-06-12T20:02:56.03Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/b2/2193fc74f81aee4f9b62733133b73b5176718932ed8f2e4b03fa040480a6/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl", hash = "sha256:4ae387c9cb68ea569ca17e490d66d8142b81c3cc814bf179974b7d146e490bbb", size = 4685593, upload-time = "2026-06-12T20:02:50.666Z" },
-    { url = "https://files.pythonhosted.org/packages/47/f1/1d3eaa243bfc5de4a187b22aa8c048b3e4980bfbe830ac46e6bac2e66947/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_ppc64le.whl", hash = "sha256:f37d847238971164fdbc68ade6f6574aecc9c0af714190e2083429ff68f4ce9d", size = 5289961, upload-time = "2026-06-12T20:01:46.468Z" },
-    { url = "https://files.pythonhosted.org/packages/58/39/2d51306721330c486495853eda1c567880ff036de15a14c4b74f399934af/cryptography-49.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl", hash = "sha256:c2bc30226390d60ea19d9f82b19db005fe0452154a23c1c410c12ea801e43561", size = 4731145, upload-time = "2026-06-12T20:02:16.832Z" },
-    { url = "https://files.pythonhosted.org/packages/17/50/983e838c7fd0d87fd8c969bcdd328edaf5f756e38df5281637424c155873/cryptography-49.0.0-cp314-cp314t-manylinux_2_31_armv7l.whl", hash = "sha256:07cab27cc7b7e0fd28e5e26bb9eeedde5c135c868b46de4a27845abe94af6122", size = 4321719, upload-time = "2026-06-12T20:02:52.611Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/f5/8f571d7e27c55bce9f76f026143bcb1e040a4233149ecca0bea5fa5dd5f7/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_aarch64.whl", hash = "sha256:b20133d204d2bb56ba047642199603876c872026ca53e79c35b83772ab2cc505", size = 4685209, upload-time = "2026-06-12T20:02:07.282Z" },
-    { url = "https://files.pythonhosted.org/packages/e7/84/0e27016a6fc5a0886f797018b26aa42f40c09a82332bff77822a451deaaa/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl", hash = "sha256:b970c6da94d5bb18629db453d14f2a1300f6bf59b61e9b82377931ef95504866", size = 5246285, upload-time = "2026-06-12T20:01:32.439Z" },
-    { url = "https://files.pythonhosted.org/packages/11/2d/5e1fb307cb5931881516b464c98774b3f2c36b5d4bb9a2830253cf553cad/cryptography-49.0.0-cp314-cp314t-manylinux_2_34_x86_64.whl", hash = "sha256:d8ecde755e2e91bf773fc94e8c9d730cd7f2007004cb492263a794ec3899a1c8", size = 4730441, upload-time = "2026-06-12T20:02:01.469Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/c0/bff5a02ee731d207d6a1ed51732549d8c53d2bc8da1d10ec6f2844201d68/cryptography-49.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:e3fb64c420688e5319ae25113a354015abbd8dffbfbc41781a1ea66fc7622ac3", size = 4815869, upload-time = "2026-06-12T20:01:36.574Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/26/814681d14248d95d73d5c3eea0c39a94eb8302df966f670a2c60de90974b/cryptography-49.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:32703d93296f5c1f4b53349ad3a250c2cae0fdecd3a3dd5d47e616d8d616af27", size = 4960948, upload-time = "2026-06-12T20:02:18.688Z" },
-    { url = "https://files.pythonhosted.org/packages/4c/fe/93ecac273d3738939d023612ad12cca9a3740a5345d69fda04134c43fd96/cryptography-49.0.0-cp314-cp314t-win_amd64.whl", hash = "sha256:33cd0565932807baddb67b96dbee92f2c374b5c89dee09fd74079aeb8c8dba61", size = 3799153, upload-time = "2026-06-12T20:01:39.059Z" },
-    { url = "https://files.pythonhosted.org/packages/19/2a/5bb823f5bedcf80718cea7fbc95ec5515cca3769633c4b01a32be7f30e7c/cryptography-49.0.0-cp39-abi3-macosx_11_0_arm64.whl", hash = "sha256:ec5e529fb80935c94fe7b729f9972b50e351a0e6b50aa294fd5cabb109fcc29a", size = 4025947, upload-time = "2026-06-12T20:01:25.745Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/df/40577043ca124e17012f408ddddaeb213b856336ac82ddb3bc915f39e29f/cryptography-49.0.0-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:f78ff2c9ed8dc2d036b0f4d640e22522213d047c1b14e61205a7e55c80a494d4", size = 4692429, upload-time = "2026-06-12T20:01:53.628Z" },
-    { url = "https://files.pythonhosted.org/packages/2c/99/2d13299eb3dd27b02dcfaafcc91d6b5cb3329f7cbd6d8f51921acd566c1a/cryptography-49.0.0-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:35b151772baff2c74cba7fa290ceaff4c3b11c0c881eb93eb5dbc05a7cfbba18", size = 4700968, upload-time = "2026-06-12T20:02:45.383Z" },
-    { url = "https://files.pythonhosted.org/packages/a5/4d/9c0cd02f95e2602dd5e563da149ee0830abef3537be8b34dc56281ebe27a/cryptography-49.0.0-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:0f21641cf4b30fca7aee061ced0ec7ad7b073518088b7c9969a297c0ae796c69", size = 4697758, upload-time = "2026-06-12T20:01:41.13Z" },
-    { url = "https://files.pythonhosted.org/packages/24/01/186c825898477d77e2324d5360fefe622ff1d8d1963ec0554e2cada8ec77/cryptography-49.0.0-cp39-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:9e82dcc8e56052715fb18b2429e3bca4823b1629136a2084fc45a9a5cecb9b64", size = 5298863, upload-time = "2026-06-12T20:02:24.579Z" },
-    { url = "https://files.pythonhosted.org/packages/b8/7b/62cbbab75d0659865bf0273790031544a0b16c8072d258f9428dcd8190dc/cryptography-49.0.0-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:6f2debedf9ca60cf1d5bd466475638af5130f89965605cd818484d19987d3a21", size = 4735983, upload-time = "2026-06-12T20:01:50.14Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/72/3e798c064bc39e471008075d0f9bc9daf77a80879c092e4a8e170c585ed4/cryptography-49.0.0-cp39-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:8c25ceb16df5b9435f3f6a9829204985b0e0cbee3b48aacd432c7d2c850b44d9", size = 4334173, upload-time = "2026-06-12T20:01:44.743Z" },
-    { url = "https://files.pythonhosted.org/packages/f0/ee/6fca21d1ac73e06f8bef71940abfd4d2f6472b4bca284d770f32bd4086f6/cryptography-49.0.0-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:28d8b15e6275f12c8a207dc309dfa957903c927d08d0cc937ee3f63f200693cc", size = 4697298, upload-time = "2026-06-12T20:02:20.918Z" },
-    { url = "https://files.pythonhosted.org/packages/67/d0/a5fcd3515f0bae49a7b6d0413cc1bdccdcc1fc0047037a0d480642cdc5d6/cryptography-49.0.0-cp39-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:6fc361c34fb6aac015ce19435876635e5c6d21db31998b0920f675f131e043b8", size = 5254338, upload-time = "2026-06-12T20:02:22.737Z" },
-    { url = "https://files.pythonhosted.org/packages/a0/84/84fe36f19caf857d61cb7fc9c63035a47ffabd84ea12d1d393148efa3615/cryptography-49.0.0-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:2400ef9c9e2299a25614eb1dea3db54a69b1349efd043bfac9c67630d136df36", size = 4735650, upload-time = "2026-06-12T20:02:41.389Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/a0/db537264e234f7273a73ec020873d6d6b39dfd8a53db78b550ca8320440e/cryptography-49.0.0-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:67e1d20ad9ef3a563c59ef22e7a8a0b8210bd26604369ea4a30a7c66aefe504e", size = 4834820, upload-time = "2026-06-12T20:01:51.847Z" },
-    { url = "https://files.pythonhosted.org/packages/93/77/8df9eb486495979bccecd1062e2eaf435250e84437040295b57d09048b0b/cryptography-49.0.0-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:42b0684e0e40cf26122427802486f6d93aea593612603a94fbf260c7eb1e9c1b", size = 4967968, upload-time = "2026-06-12T20:02:12.524Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/e6/f60198ea8d9dfa15fff9ed4ca02ce362f6eadd9ba757dcc50634c4257b63/cryptography-49.0.0-cp39-abi3-win_amd64.whl", hash = "sha256:026ac7423e6fa66872d3bf889be5974507da3944f866f704fa200eadacd00001", size = 3785547, upload-time = "2026-06-12T20:02:26.847Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/5c/59086b4aac5e879d38ddbcf74e4be7ade89cebc3eb199a55da998c3bb46a/cryptography-50.0.0-cp311-abi3-macosx_11_0_arm64.whl", hash = "sha256:031e2d5dd4bb9caa3ca9c82e5a197fd8ae680232cee62603d1a813f3f07e3d03", size = 4001252, upload-time = "2026-07-31T14:23:33.331Z" },
+    { url = "https://files.pythonhosted.org/packages/57/ef/8f2df13c7216bcad3e1c74e07f6e193d93e998e114f524a53877c9af27ad/cryptography-50.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:fd9192b7b70c573d7f214eb1ae35e00d359f6f5e4b27c7e21e30de1fc6204645", size = 4719554, upload-time = "2026-07-31T14:23:35.611Z" },
+    { url = "https://files.pythonhosted.org/packages/d9/41/029086c34d91052fc3b88bcc8056f709a7c915c7a23b235a54eb800b1c97/cryptography-50.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:06a32a980526a6ab9a4b9bf8f7385800791e2bb960903cb6b530e4817509a3b7", size = 4702130, upload-time = "2026-07-31T14:23:37.635Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/ff/b6ce0954962e7f7b969f850a883744197bb3910bdfd7b6da162eab7d9f68/cryptography-50.0.0-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:a1b30560f2acc95aa8b2e06e716a13dbfc97314747b80d9707e307f77b40d6b3", size = 4725244, upload-time = "2026-07-31T14:23:39.471Z" },
+    { url = "https://files.pythonhosted.org/packages/06/1e/63a1027cb7fec360a182208e1b7767d5aa1fe57be3d6aa856e69a321edc0/cryptography-50.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:8d89f3976b10b4ce31118de72329025f70d2c6ead14a8217c5514dd2c6d5a78f", size = 5342265, upload-time = "2026-07-31T14:23:41.286Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/72/a1116d683a6d7ece94590013882515de087edf9ef0e6292aae615a44df73/cryptography-50.0.0-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:b42a28c1844fd9de8f3f7d540e36b66f3a9c83fceac7170ebc7a6a19edd9dcae", size = 4734609, upload-time = "2026-07-31T14:23:43.139Z" },
+    { url = "https://files.pythonhosted.org/packages/15/37/36a9c479bbe49acea2636c7fd3360d20f7b7e079c300352011c44850b181/cryptography-50.0.0-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:900131fafd8aead39ac7dd3a7e833be754c17a95cfd91221636949fe4eb0aa8a", size = 4356517, upload-time = "2026-07-31T14:23:44.939Z" },
+    { url = "https://files.pythonhosted.org/packages/32/98/8a151d64367204cbc63ec65d37502f1d9c53cf4bfc6ec3c532614dbec60d/cryptography-50.0.0-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:07949c449a1abcf60d1ee6e88956d89404c7df3c8258f46589e912988e551987", size = 4724529, upload-time = "2026-07-31T14:23:46.93Z" },
+    { url = "https://files.pythonhosted.org/packages/22/f6/ec13b470172126464a86bf54d2294a46d29837fc51ba3e45d4047946fb5e/cryptography-50.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:f89831ef99dd7dd169ab06d63a831adb9e20a87aac6d380266bbda5823349169", size = 5299852, upload-time = "2026-07-31T14:23:48.851Z" },
+    { url = "https://files.pythonhosted.org/packages/da/3a/f05e32c99d440c9bb891ea0e36c9091891e36be5a9a87ab2ee6ea20729f6/cryptography-50.0.0-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:82148ec5bddac30b51a5b3c1945075f896fa022cb93f8e4a01e9f6ee95292c5f", size = 4734462, upload-time = "2026-07-31T14:23:50.861Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/dc/bd72b26be8953f80625f63151efd38eee71c76ca6cf591c08ff34615a79e/cryptography-50.0.0-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:1489e263a8048bb8b6a8bac662eb2d402ea5d2b7b4699b72f385f1e2772db105", size = 4852708, upload-time = "2026-07-31T14:23:52.715Z" },
+    { url = "https://files.pythonhosted.org/packages/27/20/c930314a2ab476d15dec966ec87e2e9637bb02b06106b12c0396c57bb603/cryptography-50.0.0-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:7cec5b856506da6defb290f30c9ee687d5f5e8cb0bd3f6459dde43b0b4fa40ef", size = 5004179, upload-time = "2026-07-31T14:23:54.887Z" },
+    { url = "https://files.pythonhosted.org/packages/32/2e/c9db68a0c4bfa28e310707527c0ee3a2bd254104d2e02e68f368e197aa4c/cryptography-50.0.0-cp311-abi3-win_amd64.whl", hash = "sha256:bd1c592e4d5974f0d08d4888e432157adba757c66da0246918e43677fafa2d30", size = 3840395, upload-time = "2026-07-31T14:23:56.677Z" },
+    { url = "https://files.pythonhosted.org/packages/c3/fb/951032a3bf22a5697c83183fb6294a4843772947a70e616c57b3ff5f522e/cryptography-50.0.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:49e7d93abdbd2990caced757e5fade25302f719c3c8fb6e6fff2dde98999fc41", size = 3989258, upload-time = "2026-07-31T14:23:58.881Z" },
+    { url = "https://files.pythonhosted.org/packages/d4/67/91eb047e69c5e845f2f14b8a2e4a1aab0f283cb885531e9e22c8adb176bc/cryptography-50.0.0-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:19736989797678c6af1e55cd49055cdbcb55d8f6b5583ac5335f933aba9101dc", size = 4700648, upload-time = "2026-07-31T14:24:00.702Z" },
+    { url = "https://files.pythonhosted.org/packages/30/82/85f0f7425c856b9f96459411eb12e74ef72df9caf6f8f15bf23a33ff131f/cryptography-50.0.0-cp314-cp314t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:80b63928fa35083b33966ce1efb70e5b9607181e49dcd1c22c8c005e319f667f", size = 4682442, upload-time = "2026-07-31T14:24:02.538Z" },
+    { url = "https://files.pythonhosted.org/packages/1a/28/b555a365adff1cca2fbe7b9e487d68a40de6bc67ff2cb587473eb43de0e7/cryptography-50.0.0-cp314-cp314t-manylinux_2_28_aarch64.whl", hash = "sha256:d58c3db7cd6eed54e6c06744db55456b65ebd7492ddeae9c1e93cfca7aa857d3", size = 4707596, upload-time = "2026-07-31T14:24:04.394Z" },
+    { url = "https://files.pythonhosted.org/packages/72/d8/f52538140cc719df62a01cf87d1c7142318d235817109d6f4054d7c352d6/cryptography-50.0.0-cp314-cp314t-manylinux_2_28_ppc64le.whl", hash = "sha256:df2a58a472f332225671c35b0a830208b86d004f82baa8530fa3782c85646533", size = 5314552, upload-time = "2026-07-31T14:24:06.31Z" },
+    { url = "https://files.pythonhosted.org/packages/38/14/6120e5bd7c5aa022ad15424ba4d5c5269d0d9448ed4d55e492ea91e3c1c4/cryptography-50.0.0-cp314-cp314t-manylinux_2_28_x86_64.whl", hash = "sha256:11b74db56cdbe3cdee6e3f6982ecb70334fa10dce99ed58bf7894aaaa3b2a037", size = 4717113, upload-time = "2026-07-31T14:24:08.349Z" },
+    { url = "https://files.pythonhosted.org/packages/fa/71/190bf38c3ee2e0f8efc9860ae100c9df4169742eef274b91e7aa1cb133b9/cryptography-50.0.0-cp314-cp314t-manylinux_2_31_armv7l.whl", hash = "sha256:f59e38625469987d7ef6d495323c55e7db6c212eaf6112267e0d3b565a2e9c9f", size = 4338580, upload-time = "2026-07-31T14:24:10.227Z" },
+    { url = "https://files.pythonhosted.org/packages/3a/63/504ccfbbe61fd8aa983f7f146399cdf034c72c2fc55f5b2dfdcdcdb20c99/cryptography-50.0.0-cp314-cp314t-manylinux_2_34_aarch64.whl", hash = "sha256:ecfed7367f965a0328cfbdd70da860f15441f002f613185668c6e6ebf5a0ac11", size = 4707038, upload-time = "2026-07-31T14:24:12.169Z" },
+    { url = "https://files.pythonhosted.org/packages/01/77/2cf79bbfc4d12ca106437a6e170d6aaa01a373e93093118aaaef0e801bd4/cryptography-50.0.0-cp314-cp314t-manylinux_2_34_ppc64le.whl", hash = "sha256:9aa87839c383bdbab6ef865787a1fb877af8dd03464c4400322726feaaadfc6d", size = 5273110, upload-time = "2026-07-31T14:24:14.38Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/45/8aae2972c520145377ea3559a605a899bebe227bf070b33cdb445929a9b9/cryptography-50.0.0-cp314-cp314t-manylinux_2_34_x86_64.whl", hash = "sha256:6ba6a53445bd3cfa809ef3ef5f1589aa6ba08784a1d962bf47d0940e871dab1c", size = 4716439, upload-time = "2026-07-31T14:24:16.415Z" },
+    { url = "https://files.pythonhosted.org/packages/7b/20/4fe50b619a48c2525cc46e2dbc1ac490708d704be5d467bdaac6dc955682/cryptography-50.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:3f5735ffe4996d28b809371756219f5354864902a3b9e7c0b9ee87041209fc9c", size = 4837383, upload-time = "2026-07-31T14:24:18.553Z" },
+    { url = "https://files.pythonhosted.org/packages/92/91/3a31366e183343d3703f8995c095f5734676bd6938118047e50fcf279eb4/cryptography-50.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:1b4a266766514614f8aa60416e71f2fc6e575d36e7bdc90f644fadb2f4b75b95", size = 4985772, upload-time = "2026-07-31T14:24:20.385Z" },
+    { url = "https://files.pythonhosted.org/packages/74/9a/02ffe35b2853d121689871eb5dce862092562b3a1ed5cc98f1aaed441506/cryptography-50.0.0-cp314-cp314t-win_amd64.whl", hash = "sha256:12b9c6996425c76ea6c457ace4f3073e715b8c545add07cd1a8f3a4f90691269", size = 3816291, upload-time = "2026-07-31T14:24:22.125Z" },
+    { url = "https://files.pythonhosted.org/packages/03/37/73d005be173aff344af30e9fd2a576575cb2391a7101d9cd3842e1fa8cce/cryptography-50.0.0-cp39-abi3-macosx_11_0_arm64.whl", hash = "sha256:ccdc4a71a4dabae05de219404f9f4abc38e3b58422177ff93d0da05967dafa07", size = 4036009, upload-time = "2026-07-31T14:24:24.122Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/c6/7a6202a534e32103a285b7834a120869557fe198d51d7cfe59754c8bda9c/cryptography-50.0.0-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:910e1d2668e7de9648f2bcee30e180db2a6b15c30f887d7c4c93ddf96e3992e3", size = 4745252, upload-time = "2026-07-31T14:24:26.118Z" },
+    { url = "https://files.pythonhosted.org/packages/85/4f/0fa8c2f4428198f15d9ff8d63400e27afbf94ce833f6108da1eb3753f945/cryptography-50.0.0-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:a91296cb61e8df6f86d0c19cc4068228da256bf59bf86049fbd821084565327f", size = 4728939, upload-time = "2026-07-31T14:24:27.994Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/63/54dd723490ba2dc09b299682c10b38db38f159728bcaae8c591b8af2f22d/cryptography-50.0.0-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:e722f16708d854fe924790e051061f6704a472c3bac347b6fd88033ea8dd0dc5", size = 4748483, upload-time = "2026-07-31T14:24:30.254Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/dd/7c77d26285cc7f6991efce64a0f5b4f9383bfa5dd8c5033003eaf7db4cdb/cryptography-50.0.0-cp39-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:d764dcf130c428ef66786f866dd750f53182bc608813489915e9fc106bb0c82f", size = 5367599, upload-time = "2026-07-31T14:24:32.457Z" },
+    { url = "https://files.pythonhosted.org/packages/46/c9/f60aed34c013f317f92817b6c171c2d22a78270fa41109bd4b08af26b194/cryptography-50.0.0-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:105110f43a471dbd0060b9c9516cb8a6a79233631a04cc2ba16f28323ac6e025", size = 4762647, upload-time = "2026-07-31T14:24:34.599Z" },
+    { url = "https://files.pythonhosted.org/packages/be/f3/f9a0173b139372c3a48ed98154b45cc6b9de17c789d5ab552e621c293609/cryptography-50.0.0-cp39-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:828743d939e9629bc267b8e2d08d8bb67cd4319c771a33d4b18b22dd8fb7440a", size = 4385197, upload-time = "2026-07-31T14:24:36.647Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/36/83bb81f6e569bc38e1e4a7bc80f29b46bb9601920bc455fc8e888f5d5742/cryptography-50.0.0-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:2a8183b489dc1f7f80f135780fadc1108f14b31b8a40411c7a5b17425f65f28b", size = 4748095, upload-time = "2026-07-31T14:24:39.493Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/16/d3008eff98c764979865834c3d386d4fd041b5f52e7f34fc29ac1a5eb515/cryptography-50.0.0-cp39-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:6e7d61120573a7f2cd94cc095f9e81f6967c61ccdf194285aa143ecec8e0b708", size = 5325948, upload-time = "2026-07-31T14:24:41.556Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/f8/d97f9603efda3888187bfdb893f26c41be4735c10631d05d284ee6b047c4/cryptography-50.0.0-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:37fdb0d0111f1e2ff07139dfb79f1b49531f8e213c46f1163dd7642979b58c47", size = 4762400, upload-time = "2026-07-31T14:24:43.636Z" },
+    { url = "https://files.pythonhosted.org/packages/64/a2/4615c8f7d81a00b1d6e6afe19f694e1543582349fb5f4076f6cb5dc36485/cryptography-50.0.0-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:c87f62a3d3b9888ed0fdde100ec06aa61ca9cd44bad9057d1dff9a516b5f5bb9", size = 4878208, upload-time = "2026-07-31T14:24:45.522Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/1a/efcfb02f91407149a0dacffffab791f7e19bf6385f63b3666dc8b5e5c9c8/cryptography-50.0.0-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:65c2c3add92b45fd0709db8594536aea39c2a67af0e27ffcf049c498501140b7", size = 5037050, upload-time = "2026-07-31T14:24:47.697Z" },
+    { url = "https://files.pythonhosted.org/packages/57/30/4a22984d4f1bdfb8c054f07a92bc176b97a3134cc1d6c4b3bffb1f3688b4/cryptography-50.0.0-cp39-abi3-win_amd64.whl", hash = "sha256:d24fead1d4d076e1bfb006dcec392074a3cd8d7b4fc8a595aa64073b2b7a96ba", size = 3874135, upload-time = "2026-07-31T14:24:50.085Z" },
 ]
 
 [[package]]
@@ -538,21 +538,21 @@ wheels = [
 
 [[package]]
 name = "datamodel-code-generator"
-version = "0.56.0"
+version = "0.64.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "argcomplete" },
-    { name = "black" },
+    { name = "black", marker = "sys_platform != 'emscripten'" },
     { name = "genson" },
     { name = "inflect" },
-    { name = "isort" },
+    { name = "isort", marker = "sys_platform != 'emscripten'" },
     { name = "jinja2" },
     { name = "pydantic" },
     { name = "pyyaml" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/03/7d/7fc2bb3d8946ca45851da3f23497a2c6e252e92558ccbd89d609cf1e13d4/datamodel_code_generator-0.56.0.tar.gz", hash = "sha256:e7c003fb5421b890aabe12f66ae65b57198b04cfe1da7c40810798020835b3a8", size = 837708, upload-time = "2026-04-04T09:46:19.636Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/9c/d2/86c94a2836ed42231653a7ddaefa0a5bc23418167a876bba7376c96b3a35/datamodel_code_generator-0.64.0.tar.gz", hash = "sha256:9c592900a00b20e416494273c22435f5a9aef6ea8c7b9190747522a60497a1cb", size = 1316440, upload-time = "2026-06-14T17:24:50.528Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ed/3a/7f169ffc7a2d69a4f9158b1ac083f685b7f4a1a8a1db5d1e4abbb4e741b7/datamodel_code_generator-0.56.0-py3-none-any.whl", hash = "sha256:a0559683fbe90cdf2ce9b6637e3adae3e3a8056a8d0516df581d486e2834ead2", size = 256545, upload-time = "2026-04-04T09:46:17.582Z" },
+    { url = "https://files.pythonhosted.org/packages/23/94/71338e2f0146ac10747a5537b3a1e45256e66b7c229869eb0ee787111b41/datamodel_code_generator-0.64.0-py3-none-any.whl", hash = "sha256:b7cd8bd41a312aa997aec6150670bad781847c5b674f17e4d70e78208a0fb990", size = 374698, upload-time = "2026-06-14T17:24:48.809Z" },
 ]
 
 [package.optional-dependencies]
@@ -632,7 +632,7 @@ dev = [
 
 [package.metadata]
 requires-dist = [
-    { name = "cryptography", specifier = ">=44.0.0" },
+    { name = "cryptography", specifier = ">=50.0.0" },
     { name = "fastapi", specifier = ">=0.116.0" },
     { name = "opentelemetry-sdk", specifier = ">=1.39.0" },
     { name = "pgvector", specifier = ">=0.3.6" },
@@ -800,7 +800,7 @@ name = "ffmpeg-python"
 version = "0.2.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "future", marker = "python_full_version < '3.14'" },
+    { name = "future" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/dd/5e/d5f9105d59c1325759d838af4e973695081fbbc97182baf73afc78dec266/ffmpeg-python-0.2.0.tar.gz", hash = "sha256:65225db34627c578ef0e11c8b1eb528bb35e024752f6f10b78c011f6f64c4127", size = 21543, upload-time = "2019-07-06T00:19:08.989Z" }
 wheels = [
@@ -1346,7 +1346,7 @@ name = "jsonpatch"
 version = "1.33"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "jsonpointer", marker = "python_full_version < '3.14'" },
+    { name = "jsonpointer" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/42/78/18813351fe5d63acad16aec57f94ec2b70a09e53ca98145589e185423873/jsonpatch-1.33.tar.gz", hash = "sha256:9fcd4009c41e6d12348b4a0ff2563ba56a2923a7dfee731d004e212e1ee5030c", size = 21699, upload-time = "2023-06-26T12:07:29.144Z" }
 wheels = [
@@ -1444,15 +1444,15 @@ name = "langchain-core"
 version = "1.4.8"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "jsonpatch", marker = "python_full_version < '3.14'" },
-    { name = "langchain-protocol", marker = "python_full_version < '3.14'" },
-    { name = "langsmith", marker = "python_full_version < '3.14'" },
-    { name = "packaging", marker = "python_full_version < '3.14'" },
-    { name = "pydantic", marker = "python_full_version < '3.14'" },
-    { name = "pyyaml", marker = "python_full_version < '3.14'" },
-    { name = "tenacity", marker = "python_full_version < '3.14'" },
-    { name = "typing-extensions", marker = "python_full_version < '3.14'" },
-    { name = "uuid-utils", marker = "python_full_version < '3.14'" },
+    { name = "jsonpatch" },
+    { name = "langchain-protocol" },
+    { name = "langsmith" },
+    { name = "packaging" },
+    { name = "pydantic" },
+    { name = "pyyaml" },
+    { name = "tenacity" },
+    { name = "typing-extensions" },
+    { name = "uuid-utils" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/12/e3/bea6d0080acf183332f24dcd74c208aee5857cf8f783c3fb0bd86027d8fb/langchain_core-1.4.8.tar.gz", hash = "sha256:5bf1f8411077c904182ad8f975943d36adcbf579c4e017b3a118b719229ebf9a", size = 957974, upload-time = "2026-06-18T19:39:23.636Z" }
 wheels = [
@@ -1464,7 +1464,7 @@ name = "langchain-protocol"
 version = "0.0.18"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "typing-extensions", marker = "python_full_version < '3.14'" },
+    { name = "typing-extensions" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/d2/59/b5959aea96faa9146e2e49a7a22882b3528c62efafe9a6a95beab30c2305/langchain_protocol-0.0.18.tar.gz", hash = "sha256:ec3e11782f1ed0c9db38e5a9ed01b0e7a0d3fba406faa8aef6594b73c56a63e6", size = 6150, upload-time = "2026-06-18T17:08:26.959Z" }
 wheels = [
@@ -1476,7 +1476,7 @@ name = "langchain-text-splitters"
 version = "1.1.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "langchain-core", marker = "python_full_version < '3.14'" },
+    { name = "langchain-core" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/26/9f/6c545900fefb7b00ddfa3f16b80d61338a0ec68c31c5451eeeab99082760/langchain_text_splitters-1.1.2.tar.gz", hash = "sha256:782a723db0a4746ac91e251c7c1d57fd23636e4f38ed733074e28d7a86f41627", size = 293580, upload-time = "2026-04-16T14:20:39.162Z" }
 wheels = [
@@ -1488,20 +1488,20 @@ name = "langsmith"
 version = "0.9.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "anyio", marker = "python_full_version < '3.14'" },
-    { name = "distro", marker = "python_full_version < '3.14'" },
-    { name = "httpx", marker = "python_full_version < '3.14'" },
-    { name = "orjson", marker = "python_full_version < '3.14' and platform_python_implementation != 'PyPy'" },
-    { name = "packaging", marker = "python_full_version < '3.14'" },
-    { name = "pydantic", marker = "python_full_version < '3.14'" },
-    { name = "requests", marker = "python_full_version < '3.14'" },
-    { name = "requests-toolbelt", marker = "python_full_version < '3.14'" },
-    { name = "sniffio", marker = "python_full_version < '3.14'" },
-    { name = "typing-extensions", marker = "python_full_version < '3.14'" },
-    { name = "uuid-utils", marker = "python_full_version < '3.14'" },
-    { name = "websockets", marker = "python_full_version < '3.14'" },
-    { name = "xxhash", marker = "python_full_version < '3.14'" },
-    { name = "zstandard", marker = "python_full_version < '3.14'" },
+    { name = "anyio" },
+    { name = "distro" },
+    { name = "httpx" },
+    { name = "orjson", marker = "platform_python_implementation != 'PyPy'" },
+    { name = "packaging" },
+    { name = "pydantic" },
+    { name = "requests" },
+    { name = "requests-toolbelt" },
+    { name = "sniffio" },
+    { name = "typing-extensions" },
+    { name = "uuid-utils" },
+    { name = "websockets" },
+    { name = "xxhash" },
+    { name = "zstandard" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/5b/26/b72987d947278f63ec1e85f01ce85ca7ab2621c7efc0845d4a3a8e5d5dfb/langsmith-0.9.1.tar.gz", hash = "sha256:e5eb905224d156bcece4985285c55b51fffcb06c9353b2c4adb42e1c48b0d05d", size = 4557557, upload-time = "2026-06-23T17:04:23.233Z" }
 wheels = [
@@ -2879,7 +2879,7 @@ name = "requests-toolbelt"
 version = "1.0.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "requests", marker = "python_full_version < '3.14'" },
+    { name = "requests" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/f3/61/d7545dafb7ac2230c70d38d31cbfe4cc64f7144dc41f6e4e4b78ecd9f5bb/requests-toolbelt-1.0.0.tar.gz", hash = "sha256:7681a0a3d047012b5bdc0ee37d7f8f07ebe76ab08caeccfc3921ce23c88d5bc6", size = 206888, upload-time = "2023-05-01T04:11:33.229Z" }
 wheels = [
@@ -3343,16 +3343,16 @@ name = "voyageai"
 version = "0.3.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "aiohttp", marker = "python_full_version < '3.14'" },
-    { name = "aiolimiter", marker = "python_full_version < '3.14'" },
-    { name = "ffmpeg-python", marker = "python_full_version < '3.14'" },
-    { name = "langchain-text-splitters", marker = "python_full_version < '3.14'" },
-    { name = "numpy", marker = "python_full_version < '3.14'" },
-    { name = "pillow", marker = "python_full_version < '3.14'" },
-    { name = "pydantic", marker = "python_full_version < '3.14'" },
-    { name = "requests", marker = "python_full_version < '3.14'" },
-    { name = "tenacity", marker = "python_full_version < '3.14'" },
-    { name = "tokenizers", marker = "python_full_version < '3.14'" },
+    { name = "aiohttp" },
+    { name = "aiolimiter" },
+    { name = "ffmpeg-python" },
+    { name = "langchain-text-splitters" },
+    { name = "numpy" },
+    { name = "pillow" },
+    { name = "pydantic" },
+    { name = "requests" },
+    { name = "tenacity" },
+    { name = "tokenizers" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/94/16/1b46b3cd401e1717a68197c1fe336d7bb4e0a1833f8105e1738f5b1add05/voyageai-0.3.7.tar.gz", hash = "sha256:826cd97f97223f42b5babc5c459c9c80f3a8215ce5c0e007b0b276550f790d24", size = 26485, upload-time = "2025-12-16T18:43:05.26Z" }
 wheels = [

From 8476d3cdec02ce59a51b055c8ade1e4405a322a6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:20:27 +0000
Subject: [PATCH 088/122] build(deps-dev): bump eslint from 10.1.0 to 10.8.0 in
 /frontend in the eslint group across 1 directory (#7274)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps the eslint group with 1 update in the /frontend directory:
[eslint](https://github.com/eslint/eslint).

Updates `eslint` from 10.1.0 to 10.8.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.8.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/2fee9bb7416116cbed4d8c8100b1ae713b6356a1"><code>2fee9bb</code></a>
feat: export <code>ConfigObject</code> from <code>eslint/config</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21082">#21082</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6b8d2f7589b8a7c8b91b8ca2a2ef6d46178760d8"><code>6b8d2f7</code></a>
fix: escape reserved characters in rule id in <code>html</code>
formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21129">#21129</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/90910715011211a20d011d807d398a7005127f35"><code>9091071</code></a>
fix: prevent <code>no-unreachable-loop</code> crash when all loop types
are ignored (<a
href="https://redirect.github.com/eslint/eslint/issues/21116">#21116</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e23fafe8d4b15355adef6cdebef414c3a2019454"><code>e23fafe</code></a>
fix: prefer-object-spread add semicolon when adding parenthesis (<a
href="https://redirect.github.com/eslint/eslint/issues/21081">#21081</a>)
(synthex-byte)</li>
<li><a
href="https://github.com/eslint/eslint/commit/20b5ad052360a443786a202e94624a3f81846511"><code>20b5ad0</code></a>
fix: quadratic-time regex in <code>prefer-template</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21096">#21096</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8b6f6c0b33411f34485512456d94f221daf7321f"><code>8b6f6c0</code></a>
fix: apply ignore configs to computed methods in class-methods-use-this
(<a
href="https://redirect.github.com/eslint/eslint/issues/21094">#21094</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b2c608c014a396800a24a89343265d0616bee2d8"><code>b2c608c</code></a>
fix: NewExpression with parenthesized callee in
<code>preserve-caught-error</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21083">#21083</a>)
(Francesco Trotta)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6ddf8587e5cfeeb7328332601bb76d98b8a198ea"><code>6ddf858</code></a>
docs: fix broken Specify Parser Options anchor link (<a
href="https://redirect.github.com/eslint/eslint/issues/21106">#21106</a>)
(Minsu)</li>
<li><a
href="https://github.com/eslint/eslint/commit/784dfbe98f0222426fd200153a5ce2e5624151f0"><code>784dfbe</code></a>
docs: Clarify <code>no-eq-null</code> description (<a
href="https://redirect.github.com/eslint/eslint/issues/21120">#21120</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7ec733a3ba5acb053a73ac656030a3879aa48fda"><code>7ec733a</code></a>
docs: Fix typos and grammar in glossary (<a
href="https://redirect.github.com/eslint/eslint/issues/21095">#21095</a>)
(Marry (Subin Yang))</li>
<li><a
href="https://github.com/eslint/eslint/commit/92bb13f13065db72d62454b9830d3ae52db15c76"><code>92bb13f</code></a>
docs: replace quake link (<a
href="https://redirect.github.com/eslint/eslint/issues/21108">#21108</a>)
(Jung Hyeon Jun)</li>
<li><a
href="https://github.com/eslint/eslint/commit/68eb4a57572409dbdcfeb3bc5c92ddbba46bc770"><code>68eb4a5</code></a>
docs: fix broken Specify Globals anchor links in rule pages (<a
href="https://redirect.github.com/eslint/eslint/issues/21103">#21103</a>)
(Minsu)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d28f697e0d32d7446c825fd89c362db028450134"><code>d28f697</code></a>
docs: replace Code Climate CLI links with Qlty CLI links (<a
href="https://redirect.github.com/eslint/eslint/issues/21099">#21099</a>)
(Jung Hyeon Jun)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eccc68d42564e46bc9020d19ec52d2988f3b7bfa"><code>eccc68d</code></a>
docs: correct --suppressions-location option description (<a
href="https://redirect.github.com/eslint/eslint/issues/21093">#21093</a>)
(Ga eun Lee)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c5963f74bfa82a5b7ccc0607dcdcc695b8c97a31"><code>c5963f7</code></a>
docs: Update README (GitHub Actions Bot)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4fbf46d140120ae838db08cbe49544c985956490"><code>4fbf46d</code></a>
test: pin <code>webpack</code> version to 5.108.4 (<a
href="https://redirect.github.com/eslint/eslint/issues/21137">#21137</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2d063e224e9bb0ccb0a28c120f7e380a8d62f320"><code>2d063e2</code></a>
chore: update HTTP URLs to HTTPS in JSDoc and comments (<a
href="https://redirect.github.com/eslint/eslint/issues/21101">#21101</a>)
(Bo Hyun Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eccbe7bc9257a6c99880468e452c8dfafbf47f74"><code>eccbe7b</code></a>
test: add error locations to <code>no-class-assign</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21123">#21123</a>)
(devoil)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e7d1e4373bf626f8da76d62ce024c28928bc99bc"><code>e7d1e43</code></a>
ci: bump actions/setup-go from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21118">#21118</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/e9d66d0cde1a7752c29dee53ab7b62632835a87a"><code>e9d66d0</code></a>
ci: bump actions/setup-node from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21119">#21119</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/ee225b60c26f0cc5f4d71641888a5bd2ec5626d6"><code>ee225b6</code></a>
test: Add error location details to <code>no-eq-null</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21117">#21117</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/044a627fa3e28ee1410d515acc5378eb4b49f8ba"><code>044a627</code></a>
chore: update minimatch to ^10.2.5 (<a
href="https://redirect.github.com/eslint/eslint/issues/21107">#21107</a>)
(김채영)</li>
<li><a
href="https://github.com/eslint/eslint/commit/fb09aa8ff09730d3ccf68859e065f99666b52466"><code>fb09aa8</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21115">#21115</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5abd878740fe417fd8a910cac3741f2a0317b365"><code>5abd878</code></a>
test: add error locations to <code>no-proto</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21114">#21114</a>)
(Gihyeon Jeong / 정기현)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9715887ec94a5ff936447d7b680d039fbe2f0541"><code>9715887</code></a>
test: Add error location details to <code>no-div-regex</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21110">#21110</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a746ec6ea4a2249b1eb3f512264da5f4d5f7c886"><code>a746ec6</code></a>
test: add error locations to <code>no-new-wrappers</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21109">#21109</a>)
(Gihyeon Jeong / 정기현)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8dde64570e240f3ef8af873d59a752db6d8519aa"><code>8dde645</code></a>
test: add error locations to <code>no-ex-assign</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21102">#21102</a>)
(devoil)</li>
<li><a
href="https://github.com/eslint/eslint/commit/13ab0ec447650c079d8a5e5d67222f79e69c741e"><code>13ab0ec</code></a>
test: add error locations to <code>no-label-var</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21098">#21098</a>)
(Gihyeon Jeong / 정기현)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a99906ffb8342dde03336b5c6372b5658f21d5f2"><code>a99906f</code></a>
test: Add error location details to <code>no-delete-var</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21105">#21105</a>)
(Park Harin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c47e8dc9bbfba797430db45ae08cb6f7392cfc9d"><code>c47e8dc</code></a>
chore: add missing backticks to <code>languages/js/index.js</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21104">#21104</a>)
(beeen)</li>
<li><a
href="https://github.com/eslint/eslint/commit/0174428dd7543d118cf67a823b98dd97032fe68c"><code>0174428</code></a>
chore: add missing backticks to <code>translate-cli-options.js</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21097">#21097</a>)
(dongkyu lee)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3d36589a4917326500f0707bb41745160f387d00"><code>3d36589</code></a>
chore: add missing backticks to <code>serialization.js</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21091">#21091</a>)
(이규환)</li>
<li><a
href="https://github.com/eslint/eslint/commit/dcc9312c1081931de0fe1b555fbb6aa82fe696b9"><code>dcc9312</code></a>
test: add error locations to <code>eqeqeq</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21090">#21090</a>)
(Ga eun Lee)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2710b182472cd1a95e4aff6186cb2c4fbadb4ee0"><code>2710b18</code></a>
ci: Add explicit permissions to rebuild-docs-sites workflow (<a
href="https://redirect.github.com/eslint/eslint/issues/21089">#21089</a>)
(Marry (Subin Yang))</li>
<li><a
href="https://github.com/eslint/eslint/commit/5d2f8663ee60701e9036b0b0933a12efd9d93269"><code>5d2f866</code></a>
chore: update dependency prettier to v3.9.5 (<a
href="https://redirect.github.com/eslint/eslint/issues/21086">#21086</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/d584e31098f262563b97dc5d5f23a63a187879a0"><code>d584e31</code></a>
chore: fix failing ecosystem test for <code>eslint-plugin-unicorn</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21084">#21084</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bf3eda049bd690f1e9a5a0c4520a6329b3e4ec85"><code>bf3eda0</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21079">#21079</a>)
(ESLint Bot)</li>
</ul>
<h2>v10.7.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/cf2a9bf2d982642f760370c15f1196f4658f4e27"><code>cf2a9bf</code></a>
feat: add errorClassNames option to preserve-caught-error rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21032">#21032</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f8b873aae53610b80b5c1005606716e05ed3b91f"><code>f8b873a</code></a>
feat: max-nested-callbacks option for constructor callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/21063">#21063</a>)
(fnx)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/749dfed106f44d77bf3af2402ebfae20cdbf59ee"><code>749dfed</code></a>
10.8.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/4bd0d75b22ffd44809a92659f113c972c5be0770"><code>4bd0d75</code></a>
Build: changelog update for 10.8.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/4fbf46d140120ae838db08cbe49544c985956490"><code>4fbf46d</code></a>
test: pin <code>webpack</code> version to 5.108.4 (<a
href="https://redirect.github.com/eslint/eslint/issues/21137">#21137</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6ddf8587e5cfeeb7328332601bb76d98b8a198ea"><code>6ddf858</code></a>
docs: fix broken Specify Parser Options anchor link (<a
href="https://redirect.github.com/eslint/eslint/issues/21106">#21106</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/784dfbe98f0222426fd200153a5ce2e5624151f0"><code>784dfbe</code></a>
docs: Clarify <code>no-eq-null</code> description (<a
href="https://redirect.github.com/eslint/eslint/issues/21120">#21120</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6b8d2f7589b8a7c8b91b8ca2a2ef6d46178760d8"><code>6b8d2f7</code></a>
fix: escape reserved characters in rule id in <code>html</code>
formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21129">#21129</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2d063e224e9bb0ccb0a28c120f7e380a8d62f320"><code>2d063e2</code></a>
chore: update HTTP URLs to HTTPS in JSDoc and comments (<a
href="https://redirect.github.com/eslint/eslint/issues/21101">#21101</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eccbe7bc9257a6c99880468e452c8dfafbf47f74"><code>eccbe7b</code></a>
test: add error locations to <code>no-class-assign</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21123">#21123</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2fee9bb7416116cbed4d8c8100b1ae713b6356a1"><code>2fee9bb</code></a>
feat: export <code>ConfigObject</code> from <code>eslint/config</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21082">#21082</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e7d1e4373bf626f8da76d62ce024c28928bc99bc"><code>e7d1e43</code></a>
ci: bump actions/setup-go from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21118">#21118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.1.0...v10.8.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 65 ++++++++++++++++++++------------------
 frontend/package.json      |  2 +-
 2 files changed, 35 insertions(+), 32 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index a5abc659e3..300a409229 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -119,7 +119,7 @@
         "@vitest/coverage-v8": "^3.2.4",
         "dotenv": "^16.4.7",
         "dpdm": "^3.14.0",
-        "eslint": "^10.0.2",
+        "eslint": "^10.8.0",
         "fake-indexeddb": "^6.2.5",
         "jsdom": "^27.0.0",
         "json-schema-to-typescript": "^15.0.4",
@@ -1961,13 +1961,13 @@
       }
     },
     "node_modules/@eslint/config-array": {
-      "version": "0.23.3",
-      "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.23.3.tgz",
-      "integrity": "sha512-j+eEWmB6YYLwcNOdlwQ6L2OsptI/LO6lNBuLIqe5R7RetD658HLoF+Mn7LzYmAWWNNzdC6cqP+L6r8ujeYXWLw==",
+      "version": "0.23.5",
+      "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.23.5.tgz",
+      "integrity": "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@eslint/object-schema": "^3.0.3",
+        "@eslint/object-schema": "^3.0.5",
         "debug": "^4.3.1",
         "minimatch": "^10.2.4"
       },
@@ -1976,22 +1976,22 @@
       }
     },
     "node_modules/@eslint/config-helpers": {
-      "version": "0.5.3",
-      "resolved": "https://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.5.3.tgz",
-      "integrity": "sha512-lzGN0onllOZCGroKJmRwY6QcEHxbjBw1gwB8SgRSqK8YbbtEXMvKynsXc3553ckIEBxsbMBU7oOZXKIPGZNeZw==",
+      "version": "0.7.0",
+      "resolved": "https://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.7.0.tgz",
+      "integrity": "sha512-DObd/KKUsU+FaFv4PLxSRenpXfQWmPXXP3pPZ6/K1PCrMu2vQpMDMuQe/BqYeoLcz8ro0bVDF1RxOJgfVEdhUw==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@eslint/core": "^1.1.1"
+        "@eslint/core": "^1.2.1"
       },
       "engines": {
         "node": "^20.19.0 || ^22.13.0 || >=24"
       }
     },
     "node_modules/@eslint/core": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-1.1.1.tgz",
-      "integrity": "sha512-QUPblTtE51/7/Zhfv8BDwO0qkkzQL7P/aWWbqcf4xWLEYn1oKjdO0gglQBB4GAsu7u6wjijbCmzsUTy6mnk6oQ==",
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-1.2.1.tgz",
+      "integrity": "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -2023,9 +2023,9 @@
       }
     },
     "node_modules/@eslint/object-schema": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-3.0.3.tgz",
-      "integrity": "sha512-iM869Pugn9Nsxbh/YHRqYiqd23AmIbxJOcpUMOuWCVNdoQJ5ZtwL6h3t0bcZzJUlC3Dq9jCFCESBZnX0GTv7iQ==",
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-3.0.5.tgz",
+      "integrity": "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw==",
       "dev": true,
       "license": "Apache-2.0",
       "engines": {
@@ -2033,13 +2033,13 @@
       }
     },
     "node_modules/@eslint/plugin-kit": {
-      "version": "0.6.1",
-      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.6.1.tgz",
-      "integrity": "sha512-iH1B076HoAshH1mLpHMgwdGeTs0CYwL0SPMkGuSebZrwBp16v415e9NZXg2jtrqPVQjf6IANe2Vtlr5KswtcZQ==",
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.7.2.tgz",
+      "integrity": "sha512-+CNAzxglkrpNf/kKywqQfk74QjtceuOE7Qm+AF8miRvPF/wmmK5+OJOgVh3AVTT3RP2mH3+FOaxlE5v72owk0A==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "@eslint/core": "^1.1.1",
+        "@eslint/core": "^1.2.1",
         "levn": "^0.4.1"
       },
       "engines": {
@@ -9286,18 +9286,21 @@
       }
     },
     "node_modules/eslint": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.1.0.tgz",
-      "integrity": "sha512-S9jlY/ELKEUwwQnqWDO+f+m6sercqOPSqXM5Go94l7DOmxHVDgmSFGWEzeE/gwgTAr0W103BWt0QLe/7mabIvA==",
+      "version": "10.8.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.8.0.tgz",
+      "integrity": "sha512-nuKKvN+oIBO0koN7Tm7dlkmnkc21mtt0QJLwAKzjLq14y6lRTdVG36MZHJ8eQHwdJMwZbQNMlPOYedMq/oVJvQ==",
       "dev": true,
       "license": "MIT",
+      "workspaces": [
+        "packages/*"
+      ],
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.8.0",
         "@eslint-community/regexpp": "^4.12.2",
-        "@eslint/config-array": "^0.23.3",
-        "@eslint/config-helpers": "^0.5.3",
-        "@eslint/core": "^1.1.1",
-        "@eslint/plugin-kit": "^0.6.1",
+        "@eslint/config-array": "^0.23.5",
+        "@eslint/config-helpers": "^0.7.0",
+        "@eslint/core": "^1.2.1",
+        "@eslint/plugin-kit": "^0.7.2",
         "@humanfs/node": "^0.16.6",
         "@humanwhocodes/module-importer": "^1.0.1",
         "@humanwhocodes/retry": "^0.4.2",
@@ -9319,7 +9322,7 @@
         "imurmurhash": "^0.1.4",
         "is-glob": "^4.0.0",
         "json-stable-stringify-without-jsonify": "^1.0.1",
-        "minimatch": "^10.2.4",
+        "minimatch": "^10.2.5",
         "natural-compare": "^1.4.0",
         "optionator": "^0.9.3"
       },
@@ -12905,13 +12908,13 @@
       }
     },
     "node_modules/minimatch": {
-      "version": "10.2.4",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.4.tgz",
-      "integrity": "sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==",
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
-        "brace-expansion": "^5.0.2"
+        "brace-expansion": "^5.0.8"
       },
       "engines": {
         "node": "18 || 20 || >=22"
diff --git a/frontend/package.json b/frontend/package.json
index dfcfa2842c..1798abc6b2 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -141,7 +141,7 @@
     "@vitest/coverage-v8": "^3.2.4",
     "dotenv": "^16.4.7",
     "dpdm": "^3.14.0",
-    "eslint": "^10.0.2",
+    "eslint": "^10.8.0",
     "fake-indexeddb": "^6.2.5",
     "jsdom": "^27.0.0",
     "json-schema-to-typescript": "^15.0.4",

From de93a1b5e2685f2a6022f54ed1eb888c9b5de469 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:20:33 +0000
Subject: [PATCH 089/122] build(deps): bump org.sonarqube from 7.2.3.7755 to
 7.3.1.8318 (#7271)

Bumps org.sonarqube from 7.2.3.7755 to 7.3.1.8318.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.sonarqube&package-manager=gradle&previous-version=7.2.3.7755&new-version=7.3.1.8318)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 31fa6b1bdb..de0861d8fa 100644
--- a/build.gradle
+++ b/build.gradle
@@ -8,7 +8,7 @@ plugins {
     id "com.diffplug.spotless" version "8.8.0"
     id "com.github.jk1.dependency-license-report"
     //id "nebula.lint" version "19.0.3"
-    id "org.sonarqube" version "7.2.3.7755"
+    id "org.sonarqube" version "7.3.1.8318"
 }
 
 import com.github.jk1.license.render.*

From ad8830b6459a74fd4f6b3b3cb479b97ae8dc9df4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 12:20:38 +0000
Subject: [PATCH 090/122] build(deps): bump com.sun.xml.bind:jaxb-core from
 4.0.7 to 4.0.9 (#7270)

Bumps com.sun.xml.bind:jaxb-core from 4.0.7 to 4.0.9.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.sun.xml.bind:jaxb-core&package-manager=gradle&previous-version=4.0.7&new-version=4.0.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 app/core/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/core/build.gradle b/app/core/build.gradle
index 33aa679994..5e90672f75 100644
--- a/app/core/build.gradle
+++ b/app/core/build.gradle
@@ -57,7 +57,7 @@ dependencies {
     // veraPDF still uses javax.xml.bind, not the new jakarta namespace
     implementation 'javax.xml.bind:jaxb-api:2.3.1'
     implementation 'com.sun.xml.bind:jaxb-impl:2.3.9'
-    implementation 'com.sun.xml.bind:jaxb-core:4.0.7'
+    implementation 'com.sun.xml.bind:jaxb-core:4.0.9'
 
     // CVE-2022-25647: Explicit gson to prevent unsafe deserialization (tabula would pull 2.8.7)
     implementation "com.google.code.gson:gson:${gsonVersion}"

From 74c53001cf4e652d96d2948d0b1058a827b98e24 Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Thu, 6 Aug 2026 14:05:24 +0100
Subject: [PATCH 091/122] fix(saas): give auth-bootstrap data fetching a single
 owner (#7194)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## The problem

Three pieces of user data (pro status, avatar metadata, profile picture)
were being fetched from four different places: `initializeAuth` on
mount, the `SIGNED_IN` handler, the `TOKEN_REFRESHED` handler, and the
post-upgrade path.

On a fresh login the first two both see a session, so everything got
fetched twice. It didn't stop after login either — Supabase re-fires
`SIGNED_IN` on token refresh and tab-visibility wakeups, so a refresh
that emitted both events cost around 7 Supabase reads.

## The fix

All four call sites now go through one `loadUserData(session)` that is
idempotent per identity.

The guard key is `user.id` + `is_anonymous`:

- not the access token, which changes on every refresh and would defeat
the guard entirely
- the anonymous flag matters because a guest to authenticated upgrade
keeps the same user id, and that is the one case where the data
genuinely does need reloading

**Per login: 6 fetches to 3. A repeat `SIGNED_IN` or `TOKEN_REFRESHED`
fetches nothing.** The tests count real calls rather than asserting on
shape.

## Two behaviour changes worth naming

- `initializeAuth` now awaits the full load, so the initial spinner also
waits on the profile-picture URL. Net login is still faster, since an
entire duplicate pass is gone.
- A tab-wake `SIGNED_IN` no longer revalidates entitlements. That
revalidation was accidental rather than designed — `refreshProStatus()`
is the intended path, and post-checkout is already handled by
`CheckoutContext`.

## Scope

Supabase-origin traffic only. This does not touch the ~20 authenticated
requests hitting `SupabaseAuthenticationFilter`, because those go to the
Stirling backend rather than the hosted Supabase project. That is a
separate problem and is unmeasured, so it needs measuring before
anything is optimised. Remaining items (a double `/api/v1/team/my`
fetch, an effect keyed on `[user]` identity in `FolderContext`, the
`portalAccess` spinner flash, and caching the auth filter's per-request
Postgres round-trips) are tracked separately.

## Verification

```
npx tsc --noEmit --project editor/src/saas/tsconfig.json   # exit 0
npx eslint --max-warnings=0 editor/src/saas/auth            # exit 0
npx prettier --check editor/src/saas/auth/                  # clean
npx vitest run --project saas                               # 75 passed (20 files)
```
---
 .../src/saas/auth/AuthProvider.test.tsx       | 339 ++++++++++++++++++
 frontend/editor/src/saas/auth/UseSession.tsx  | 165 +++++----
 2 files changed, 427 insertions(+), 77 deletions(-)
 create mode 100644 frontend/editor/src/saas/auth/AuthProvider.test.tsx

diff --git a/frontend/editor/src/saas/auth/AuthProvider.test.tsx b/frontend/editor/src/saas/auth/AuthProvider.test.tsx
new file mode 100644
index 0000000000..588507d59c
--- /dev/null
+++ b/frontend/editor/src/saas/auth/AuthProvider.test.tsx
@@ -0,0 +1,339 @@
+import { act, render, waitFor } from "@testing-library/react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import type { Session, User } from "@supabase/supabase-js";
+
+/**
+ * Request-count tests for {@link AuthProvider}'s data loading. It used to fetch
+ * pro status, avatar metadata and the picture from two places at once, and
+ * Supabase re-fires SIGNED_IN on token refresh and tab wakeups, so it kept
+ * happening. These pin the call counts.
+ */
+
+type AuthCallback = (event: string, session: Session | null) => void;
+
+const rpc = vi.fn();
+const createSignedUrl = vi.fn();
+const storageFrom = vi.fn((_bucket: string) => ({ createSignedUrl }));
+const getSession = vi.fn();
+const onAuthStateChange = vi.fn();
+const unsubscribe = vi.fn();
+
+vi.mock("@app/auth/supabase", () => ({
+  supabase: {
+    auth: {
+      getSession: () => getSession(),
+      onAuthStateChange: (cb: AuthCallback) => onAuthStateChange(cb),
+      refreshSession: vi
+        .fn()
+        .mockResolvedValue({ data: { session: null }, error: null }),
+      signOut: vi.fn().mockResolvedValue({ error: null }),
+    },
+    rpc: (...args: unknown[]) => rpc(...args),
+    storage: { from: (bucket: string) => storageFrom(bucket) },
+  },
+  debugAuthEvents: vi.fn(),
+}));
+
+const syncOAuthAvatar = vi.fn();
+const getProfilePictureMetadata = vi.fn();
+
+vi.mock("@app/services/avatarSyncService", () => ({
+  syncOAuthAvatar: (...args: unknown[]) => syncOAuthAvatar(...args),
+  getProfilePictureMetadata: (...args: unknown[]) =>
+    getProfilePictureMetadata(...args),
+  getProviderAvatarUrl: () => null,
+}));
+
+const synchronizeUserUpgrade = vi.fn();
+
+vi.mock("@app/services/userService", () => ({
+  synchronizeUserUpgrade: (...args: unknown[]) =>
+    synchronizeUserUpgrade(...args),
+}));
+
+// Imported after the mocks so the provider picks them up.
+const { AuthProvider, useAuth } = await import("./UseSession");
+
+/** Surfaces `loading` so a test can assert on it rather than on the container. */
+function LoadingProbe() {
+  const { loading } = useAuth();
+  return <span data-testid="loading">{String(loading)}</span>;
+}
+
+const USER_ID = "11111111-2222-3333-4444-555555555555";
+
+function makeSession(
+  overrides: { token?: string; userId?: string; anonymous?: boolean } = {},
+): Session {
+  const user = {
+    id: overrides.userId ?? USER_ID,
+    email: "someone@example.com",
+    is_anonymous: overrides.anonymous ?? false,
+    app_metadata: { provider: "google" },
+    user_metadata: { full_name: "Some One" },
+  } as unknown as User;
+
+  return {
+    access_token: overrides.token ?? "token-1",
+    refresh_token: "refresh-1",
+    expires_in: 3600,
+    token_type: "bearer",
+    user,
+  } as unknown as Session;
+}
+
+/** Total requests the provider makes per user-data load. */
+function callCounts() {
+  return {
+    proStatus: rpc.mock.calls.length,
+    metadata: getProfilePictureMetadata.mock.calls.length,
+    picture: createSignedUrl.mock.calls.length,
+    avatarSync: syncOAuthAvatar.mock.calls.length,
+  };
+}
+
+function renderProvider() {
+  let authCallback: AuthCallback = () => {};
+  onAuthStateChange.mockImplementation((cb: AuthCallback) => {
+    authCallback = cb;
+    return { data: { subscription: { unsubscribe } } };
+  });
+
+  const utils = render(
+    <AuthProvider>
+      <LoadingProbe />
+    </AuthProvider>,
+  );
+
+  /**
+   * Deliver an auth event and let its work finish. The provider defers with
+   * setTimeout(0), so a microtask flush is not enough: without draining real
+   * macrotasks the assertions run before any refetch and prove nothing.
+   */
+  const fire = async (event: string, s: Session | null) => {
+    await act(async () => {
+      authCallback(event, s);
+      await new Promise((resolve) => setTimeout(resolve, 0));
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+  };
+
+  return { ...utils, fire };
+}
+
+describe("AuthProvider user-data loading", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    vi.useRealTimers();
+    sessionStorage.clear();
+
+    rpc.mockResolvedValue({ data: true, error: null });
+    createSignedUrl.mockResolvedValue({
+      data: { signedUrl: "https://example.test/avatar" },
+      error: null,
+    });
+    getProfilePictureMetadata.mockResolvedValue(null);
+    syncOAuthAvatar.mockResolvedValue(false);
+    synchronizeUserUpgrade.mockResolvedValue(undefined);
+    getSession.mockResolvedValue({
+      data: { session: makeSession() },
+      error: null,
+    });
+  });
+
+  it("fetches each piece of user data exactly once on login", async () => {
+    const { fire } = renderProvider();
+
+    await waitFor(() => expect(createSignedUrl).toHaveBeenCalled());
+    // The SIGNED_IN that follows a fresh login must not repeat the work.
+    await fire("SIGNED_IN", makeSession());
+
+    expect(callCounts()).toEqual({
+      proStatus: 1,
+      metadata: 1,
+      picture: 1,
+      avatarSync: 1,
+    });
+  });
+
+  it("does not refetch when SIGNED_IN repeats with a new access token", async () => {
+    const { fire } = renderProvider();
+    await waitFor(() => expect(createSignedUrl).toHaveBeenCalled());
+    const before = callCounts();
+
+    // What a tab-visibility wakeup or token refresh looks like: same user,
+    // different token.
+    await fire("SIGNED_IN", makeSession({ token: "token-2" }));
+
+    expect(callCounts()).toEqual(before);
+  });
+
+  it("does not refetch on TOKEN_REFRESHED for the same identity", async () => {
+    const { fire } = renderProvider();
+    await waitFor(() => expect(createSignedUrl).toHaveBeenCalled());
+    const before = callCounts();
+
+    await fire("TOKEN_REFRESHED", makeSession({ token: "token-3" }));
+
+    expect(callCounts()).toEqual(before);
+  });
+
+  it("keeps loading false across repeat auth events", async () => {
+    // Guards the Landing -> HomePage unmount: toggling `loading` on a wakeup
+    // would tear down the tree on every tab switch.
+    const { fire, getByTestId } = renderProvider();
+    await waitFor(() =>
+      expect(getByTestId("loading").textContent).toBe("false"),
+    );
+
+    await fire("SIGNED_IN", makeSession({ token: "token-4" }));
+    expect(getByTestId("loading").textContent).toBe("false");
+
+    await fire("TOKEN_REFRESHED", makeSession({ token: "token-5" }));
+    expect(getByTestId("loading").textContent).toBe("false");
+
+    expect(callCounts().proStatus).toBe(1);
+  });
+
+  it("clears the initial spinner without waiting for the avatar upload", async () => {
+    // syncOAuthAvatar re-uploads the provider image on a first login. Gating
+    // `loading` on it would stall account creation behind an image upload.
+    let releaseSync = () => {};
+    syncOAuthAvatar.mockImplementationOnce(
+      () =>
+        new Promise<boolean>((resolve) => {
+          releaseSync = () => resolve(false);
+        }),
+    );
+
+    const { getByTestId } = renderProvider();
+
+    await waitFor(() =>
+      expect(getByTestId("loading").textContent).toBe("false"),
+    );
+    // The picture read chains behind the sync, so it has not run yet either.
+    expect(createSignedUrl).not.toHaveBeenCalled();
+
+    await act(async () => {
+      releaseSync();
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+  });
+
+  it("refetches after a guest upgrade, which keeps the same user id", async () => {
+    // The upgrade path is the one case where the id is unchanged but the data
+    // must be reloaded - hence keying on is_anonymous, not the id alone.
+    getSession.mockResolvedValue({
+      data: { session: makeSession({ anonymous: true }) },
+      error: null,
+    });
+    sessionStorage.setItem("pendingUpgrade", "true");
+    sessionStorage.setItem("upgradeProvider", "google");
+
+    const { fire } = renderProvider();
+    await waitFor(() => expect(rpc).toHaveBeenCalledTimes(1));
+
+    await fire("USER_UPDATED", makeSession({ anonymous: false }));
+
+    await waitFor(() => expect(rpc).toHaveBeenCalledTimes(2));
+    expect(synchronizeUserUpgrade).toHaveBeenCalledWith("google");
+  });
+
+  it("does not drop an upgrade that lands while the guest load is in flight", async () => {
+    // Coalescing on "something is in flight" alone would hand the upgrade the
+    // guest's promise and never fetch the real user's data.
+    getSession.mockResolvedValue({
+      data: { session: makeSession({ anonymous: true }) },
+      error: null,
+    });
+    sessionStorage.setItem("pendingUpgrade", "true");
+    sessionStorage.setItem("upgradeProvider", "google");
+
+    let releaseGuestLoad = () => {};
+    const guestLoadBlocked = new Promise<void>((resolve) => {
+      releaseGuestLoad = resolve;
+    });
+    rpc.mockImplementationOnce(async () => {
+      await guestLoadBlocked;
+      return { data: false, error: null };
+    });
+
+    const { fire } = renderProvider();
+    await waitFor(() => expect(rpc).toHaveBeenCalledTimes(1));
+
+    // Deliver the upgrade with the guest load still deliberately unsettled, so
+    // the guard genuinely has an in-flight load to reason about.
+    await fire("USER_UPDATED", makeSession({ anonymous: false }));
+    await waitFor(() => expect(rpc).toHaveBeenCalledTimes(2), {
+      timeout: 1000,
+    });
+
+    // Let the abandoned guest load settle inside act, so its trailing state
+    // updates do not land after the test finishes.
+    await act(async () => {
+      releaseGuestLoad();
+      await new Promise((resolve) => setTimeout(resolve, 0));
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+  });
+
+  it("reloads for the same user after a sign-out", async () => {
+    const { fire } = renderProvider();
+    await waitFor(() => expect(createSignedUrl).toHaveBeenCalled());
+
+    await fire("SIGNED_OUT", null);
+    await fire("SIGNED_IN", makeSession());
+
+    await waitFor(() => expect(rpc).toHaveBeenCalledTimes(2));
+  });
+
+  it("keeps the initial spinner up when SIGNED_IN wins the race with initializeAuth", async () => {
+    // initializeAuth yields at `await getSession()`, so SIGNED_IN can land
+    // first. Marking the identity loaded up front would then clear the spinner
+    // while pro status was still in flight.
+    const session = makeSession();
+
+    let releaseSession = () => {};
+    getSession.mockReturnValueOnce(
+      new Promise<{ data: { session: Session }; error: null }>((resolve) => {
+        releaseSession = () => resolve({ data: { session }, error: null });
+      }),
+    );
+
+    let releaseProStatus = () => {};
+    rpc.mockImplementationOnce(
+      () =>
+        new Promise<{ data: boolean; error: null }>((resolve) => {
+          releaseProStatus = () => resolve({ data: true, error: null });
+        }),
+    );
+
+    const { getByTestId, fire } = renderProvider();
+
+    // SIGNED_IN lands first and starts the load; pro status stays unsettled.
+    await fire("SIGNED_IN", session);
+    expect(rpc).toHaveBeenCalledTimes(1);
+
+    // initializeAuth must now adopt that in-flight load, not short-circuit.
+    await act(async () => {
+      releaseSession();
+      await new Promise((resolve) => setTimeout(resolve, 0));
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+
+    expect(getByTestId("loading").textContent).toBe("true");
+    // Adopted, not restarted.
+    expect(rpc).toHaveBeenCalledTimes(1);
+
+    await act(async () => {
+      releaseProStatus();
+      await new Promise((resolve) => setTimeout(resolve, 0));
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+
+    await waitFor(() =>
+      expect(getByTestId("loading").textContent).toBe("false"),
+    );
+    expect(rpc).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/frontend/editor/src/saas/auth/UseSession.tsx b/frontend/editor/src/saas/auth/UseSession.tsx
index 087fa99b65..101ed58d06 100644
--- a/frontend/editor/src/saas/auth/UseSession.tsx
+++ b/frontend/editor/src/saas/auth/UseSession.tsx
@@ -2,6 +2,7 @@ import {
   createContext,
   useContext,
   useEffect,
+  useRef,
   useState,
   ReactNode,
   useCallback,
@@ -247,6 +248,78 @@ export function AuthProvider({ children }: { children: ReactNode }) {
     await fetchProfilePictureMetadata();
   }, [fetchProfilePictureMetadata]);
 
+  // Refs, not state: the auth effect below has an empty dep array.
+  const loadedForRef = useRef<string | null>(null);
+  const inFlightRef = useRef<{ key: string; promise: Promise<void> } | null>(
+    null,
+  );
+
+  /**
+   * Sole owner of the per-user data fetching: mount-time init and every auth
+   * event route through here. Idempotent per identity, since Supabase re-fires
+   * SIGNED_IN and TOKEN_REFRESHED on token refresh and tab wakeups; pass
+   * `force` for a genuine reload. The returned promise excludes the profile
+   * picture, so awaiting it never blocks on an image download.
+   */
+  const loadUserData = useCallback(
+    (
+      sessionToLoad: Session | null,
+      opts?: { force?: boolean },
+    ): Promise<void> => {
+      const user = sessionToLoad?.user;
+      if (!user) {
+        loadedForRef.current = null;
+        return Promise.resolve();
+      }
+
+      // Not the access token, which changes every refresh. The anonymous flag
+      // matters: a guest upgrade keeps the same id and must still refetch.
+      const key = `${user.id}:${Boolean(user.is_anonymous)}`;
+      if (!opts?.force && loadedForRef.current === key)
+        return Promise.resolve();
+
+      // The second of a concurrent init/SIGNED_IN pair adopts this promise so it
+      // still awaits the load. A forced reload must not: the guest upgrade
+      // would be silently dropped.
+      if (!opts?.force && inFlightRef.current?.key === key)
+        return inFlightRef.current.promise;
+
+      const run = (async () => {
+        // Off the awaited path: a first login re-uploads the provider avatar.
+        // The signed-URL read chains behind it because reading first 404s and
+        // silently falls back to the provider photo.
+        const avatarSync = syncOAuthAvatar(user).catch((err) => {
+          console.debug("[Auth Debug] Failed to sync OAuth avatar:", err);
+          return false;
+        });
+        void avatarSync
+          .then(() => fetchProfilePicture(sessionToLoad))
+          .catch((err) => {
+            console.debug("[Auth Debug] Failed to fetch profile picture:", err);
+          });
+
+        await Promise.all([
+          fetchProStatus(sessionToLoad),
+          fetchProfilePictureMetadata(sessionToLoad),
+        ]);
+        // Only on success: set up front, a concurrent caller short-circuits on
+        // it and returns to a still-empty state. Also lets a failure retry.
+        loadedForRef.current = key;
+      })()
+        .catch((err) => {
+          console.debug("[Auth Debug] Failed to load user data:", err);
+        })
+        .finally(() => {
+          // Only clear our own entry; a newer load may have superseded us.
+          if (inFlightRef.current?.promise === run) inFlightRef.current = null;
+        });
+
+      inFlightRef.current = { key, promise: run };
+      return run;
+    },
+    [fetchProStatus, fetchProfilePictureMetadata, fetchProfilePicture],
+  );
+
   const refreshSession = async () => {
     try {
       setLoading(true);
@@ -312,23 +385,8 @@ export function AuthProvider({ children }: { children: ReactNode }) {
           });
           setSession(data.session);
 
-          // Fetch pro status, profile picture metadata, and profile picture using the session from the response
-          if (data.session?.user) {
-            // Sync OAuth avatar in background; fetch the picture once the
-            // sync settles instead of guessing with a fixed delay.
-            syncOAuthAvatar(data.session.user)
-              .catch((err) => {
-                console.debug(
-                  "[Auth Debug] Failed to sync OAuth avatar on init:",
-                  err,
-                );
-                return false;
-              })
-              .then(() => fetchProfilePicture(data.session));
-
-            await fetchProStatus(data.session);
-            await fetchProfilePictureMetadata(data.session);
-          }
+          // Awaited so the spinner does not clear before pro status is known.
+          await loadUserData(data.session);
         }
       } catch (err) {
         console.error(
@@ -374,58 +432,13 @@ export function AuthProvider({ children }: { children: ReactNode }) {
             setIsPro(null);
             setProfilePictureUrl(null);
             setProfilePictureMetadata(null);
-          } else if (event === "SIGNED_IN") {
-            console.debug("[Auth Debug] User signed in successfully");
-            if (newSession?.user) {
-              // Note: we deliberately do NOT toggle `loading` here. Supabase
-              // also fires SIGNED_IN on tab visibility / token-refresh wakeups
-              // (per its docs: "SIGNED_IN is fired when a user signs in OR
-              // when the access token is refreshed"), and gating the UI on
-              // `loading` would unmount Landing -> HomePage every time the
-              // user switches tabs back. Initial-mount loading is handled by
-              // `initializeAuth` above; downstream fetches expose their own
-              // null/loading states.
-
-              // Sync OAuth avatar in background (don't block other fetches)
-              const avatarSync = syncOAuthAvatar(newSession.user).catch(
-                (err) => {
-                  console.debug(
-                    "[Auth Debug] Failed to sync OAuth avatar:",
-                    err,
-                  );
-                  return false;
-                },
-              );
-
-              // Fetch user data in parallel
-              Promise.all([
-                fetchProStatus(newSession),
-                fetchProfilePictureMetadata(newSession),
-              ]).then(() => {
-                // Fetch the picture once the avatar sync settles.
-                avatarSync.then(() => {
-                  fetchProfilePicture(newSession).finally(() => {
-                    console.debug(
-                      "[Auth Debug] User data fully loaded after sign in",
-                    );
-                  });
-                });
-              });
-            }
-          } else if (event === "TOKEN_REFRESHED") {
-            console.debug("[Auth Debug] Token refreshed");
-            // Optionally refresh pro status, profile picture metadata, and profile picture on token refresh
-            if (newSession?.user) {
-              Promise.all([
-                fetchProStatus(newSession),
-                fetchProfilePictureMetadata(newSession),
-                fetchProfilePicture(newSession),
-              ]).then(() => {
-                console.debug(
-                  "[Auth Debug] User data refreshed after token refresh",
-                );
-              });
-            }
+            loadedForRef.current = null;
+          } else if (event === "SIGNED_IN" || event === "TOKEN_REFRESHED") {
+            console.debug("[Auth Debug] Signed in or token refreshed");
+            // Deliberately does not touch `loading`: Supabase also fires
+            // SIGNED_IN on tab wakeups, and gating the UI on it would unmount
+            // Landing -> HomePage on every tab switch. Pinned by a test.
+            void loadUserData(newSession);
           } else if (event === "USER_UPDATED") {
             console.debug("[Auth Debug] User updated");
 
@@ -454,14 +467,8 @@ export function AuthProvider({ children }: { children: ReactNode }) {
                     "[Auth Debug] User upgrade synchronized successfully",
                   );
 
-                  // Refresh pro status, profile picture metadata, and profile picture after upgrade
-                  if (newSession?.user) {
-                    return Promise.all([
-                      fetchProStatus(newSession),
-                      fetchProfilePictureMetadata(newSession),
-                      fetchProfilePicture(newSession),
-                    ]);
-                  }
+                  // Forced: same user id, so the guest's data must be replaced.
+                  return loadUserData(newSession, { force: true });
                 })
                 .then(() => {
                   console.debug(
@@ -484,6 +491,10 @@ export function AuthProvider({ children }: { children: ReactNode }) {
       mounted = false;
       subscription.unsubscribe();
     };
+    // Empty and load-bearing: must subscribe once. The closures are recreated
+    // when `session` changes, so listing deps would re-subscribe on every auth
+    // event; every call above passes its session explicitly instead. No lint
+    // rule enforces this, so do not "fix" these deps.
   }, []);
 
   const { t } = useTranslation();

From 86d4a344767b183a395dc12495eda85fb10958c6 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Thu, 6 Aug 2026 15:54:44 +0200
Subject: [PATCH 092/122] deps: Upgrade posthog-js to 1.405.2 (#7115)

# Description of Changes

- Updated the frontend `posthog-js` dependency from `^1.268.0` to
`^1.405.2`.
- Refreshed `frontend/package-lock.json` and updated related PostHog
transitive dependencies.
- Removed obsolete OpenTelemetry and protobuf-related transitive
packages no longer required by the newer PostHog version.
- The existing PostHog APIs used by Stirling-PDF remain compatible.

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 frontend/package-lock.json | 46 ++++++++++++++++++++++----------------
 frontend/package.json      |  2 +-
 2 files changed, 28 insertions(+), 20 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 300a409229..546e2ef705 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -70,7 +70,7 @@
         "pdfjs-dist": "^5.4.149",
         "peerjs": "^1.5.5",
         "pixelmatch": "^7.1.0",
-        "posthog-js": "^1.268.0",
+        "posthog-js": "^1.405.2",
         "qrcode.react": "^4.2.0",
         "react": "^19.2.8",
         "react-dom": "^19.2.8",
@@ -3154,12 +3154,12 @@
       }
     },
     "node_modules/@posthog/core": {
-      "version": "1.39.3",
-      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.39.3.tgz",
-      "integrity": "sha512-oR+B8Q5O61N+W2+HVOBG9dbxAT/+OVxX+XvpNj6KYgptN2EB14JiKQ9Rm7DNpErNTLV7WApZEK/URkZgldOxfg==",
+      "version": "1.44.0",
+      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.44.0.tgz",
+      "integrity": "sha512-uE+mdKvetxNQC6gWQf4MHIH8bGt+JN6z7ho0A4G3t9G1VGQTx9wHYHNwkKf3gzi+1oAXS9ej2VVY4pjWUU2PWg==",
       "license": "MIT",
       "dependencies": {
-        "@posthog/types": "^1.392.0"
+        "@posthog/types": "^1.397.0"
       }
     },
     "node_modules/@posthog/react": {
@@ -3179,9 +3179,9 @@
       }
     },
     "node_modules/@posthog/types": {
-      "version": "1.392.0",
-      "resolved": "https://registry.npmjs.org/@posthog/types/-/types-1.392.0.tgz",
-      "integrity": "sha512-nctNujXL3FC1v99FktaTMSugSD9ZOZekEpahUSafkU2TSvW+XGKNkQZbokuJtiWvPBK208dwMJva8UfBkChqpw==",
+      "version": "1.397.1",
+      "resolved": "https://registry.npmjs.org/@posthog/types/-/types-1.397.1.tgz",
+      "integrity": "sha512-W/LpWbKVaaUnfZKuFuHa+Dg03D+fC87cM+PQbG+59JcSPW8F0JcBtSoXmpfrqbpuxUToMo+gktutrUkAb/KQBw==",
       "license": "MIT"
     },
     "node_modules/@puppeteer/browsers": {
@@ -14053,17 +14053,17 @@
       "license": "MIT"
     },
     "node_modules/posthog-js": {
-      "version": "1.396.4",
-      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.396.4.tgz",
-      "integrity": "sha512-PycBmwKQD1T7YFYrGRb8rjQET/UVnexgUy8gVe6UBEhwHXEIhZF4na5VakJbn4zu1wg4tzjt8r7PA4VLu6bDjg==",
-      "license": "SEE LICENSE IN LICENSE",
+      "version": "1.405.2",
+      "resolved": "https://registry.npmjs.org/posthog-js/-/posthog-js-1.405.2.tgz",
+      "integrity": "sha512-KPbbAX4EKM8UTU13gW/fZHyonfVee+GIj9QyiXtI2N4ooku69eZzfgk3CxQOUcnuvCz6xaQaUlvRmIsROxTCvw==",
+      "license": "(Apache-2.0 AND MIT)",
       "dependencies": {
-        "@posthog/core": "^1.39.3",
-        "@posthog/types": "^1.392.0",
-        "core-js": "^3.38.1",
+        "@posthog/core": "^1.44.0",
+        "@posthog/types": "^1.397.1",
+        "core-js": "^3.49.0",
         "dompurify": "^3.3.2",
         "fflate": "^0.4.8",
-        "preact": "^10.29.2",
+        "preact": "^10.29.3",
         "query-selector-shadow-dom": "^1.0.1",
         "web-vitals": "^5.3.0"
       }
@@ -14082,13 +14082,21 @@
       }
     },
     "node_modules/preact": {
-      "version": "10.29.3",
-      "resolved": "https://registry.npmjs.org/preact/-/preact-10.29.3.tgz",
-      "integrity": "sha512-D9NL1GAnJZhc3RndVs4gDdxEeU9TcHgywMrhhOsnpdlvFjdbx0gAsLUnH6JEhlJH5giL7Tx5biWPUSEXE/HPzw==",
+      "version": "10.29.7",
+      "resolved": "https://registry.npmjs.org/preact/-/preact-10.29.7.tgz",
+      "integrity": "sha512-DCHYrK/B10yUD3ZjLfhZ3WIE/9Vf9VFUODcRE2dRomTYDpJk6z6L9wecSfhfE6M9ZTHUdyQkoC46arIDhEV84Q==",
       "license": "MIT",
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/preact"
+      },
+      "peerDependencies": {
+        "preact-render-to-string": ">=5"
+      },
+      "peerDependenciesMeta": {
+        "preact-render-to-string": {
+          "optional": true
+        }
       }
     },
     "node_modules/prelude-ls": {
diff --git a/frontend/package.json b/frontend/package.json
index 1798abc6b2..f48fad8571 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -67,7 +67,7 @@
     "pdfjs-dist": "^5.4.149",
     "peerjs": "^1.5.5",
     "pixelmatch": "^7.1.0",
-    "posthog-js": "^1.268.0",
+    "posthog-js": "^1.405.2",
     "qrcode.react": "^4.2.0",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",

From fa2eb6712445c741ff7b5167420ed5b28505bd96 Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Thu, 6 Aug 2026 16:56:12 +0200
Subject: [PATCH 093/122] deps(frontend): align dependency scopes and remove
 redundant ESLint packages (#6991)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

This change reorganizes frontend dependencies by moving development-only
packages into `devDependencies`, removing obsolete packages, and
updating several development tooling dependencies to newer versions.

### What was changed

- Moved runtime-independent packages to `devDependencies`:
  - `@iconify/react`
  - `globals`
- Removed unused TypeScript ESLint packages:
  - `@typescript-eslint/eslint-plugin`
  - `@typescript-eslint/parser`
- Updated development dependencies:
  - `@iconify-json/material-symbols` → `1.2.83`
  - `@iconify/utils` → `3.1.4`
  - `globals` → `17.7.0`

These changes reduce redundant dependency declarations and ensure
packages are classified according to their actual usage. The main
challenge was distinguishing direct dependencies from packages already
provided transitively by frontend tooling.


---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 frontend/package-lock.json | 716 ++++++++++++++++++++++++++++++-------
 frontend/package.json      |  14 +-
 2 files changed, 594 insertions(+), 136 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 546e2ef705..6f19db35b7 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -37,7 +37,6 @@
         "@embedpdf/plugin-zoom": "^2.14.4",
         "@emotion/react": "^11.14.0",
         "@emotion/styled": "^11.14.1",
-        "@iconify/react": "^6.0.2",
         "@mantine/core": "^8.3.1",
         "@mantine/dates": "^8.3.1",
         "@mantine/dropzone": "^8.3.1",
@@ -62,7 +61,6 @@
         "autoprefixer": "^10.4.21",
         "axios": "^1.15.0",
         "d3": "^7.9.0",
-        "globals": "^17.5.0",
         "i18next": "^25.10.10",
         "i18next-browser-languagedetector": "^8.2.0",
         "jszip": "^3.10.1",
@@ -89,8 +87,9 @@
       },
       "devDependencies": {
         "@eslint/js": "^10.0.1",
-        "@iconify-json/material-symbols": "^1.2.53",
-        "@iconify/utils": "^3.1.0",
+        "@iconify-json/material-symbols": "^1.2.83",
+        "@iconify/react": "^6.0.2",
+        "@iconify/utils": "^3.1.4",
         "@playwright/test": "^1.55.0",
         "@storybook/addon-a11y": "^9.1.20",
         "@storybook/addon-docs": "^9.1.20",
@@ -115,12 +114,13 @@
         "@typescript-eslint/parser": "^8.65.0",
         "@typescript/native": "npm:typescript@^7.0.2",
         "@vitejs/plugin-react-swc": "^4.1.0",
-        "@vitest/browser": "^3.2.6",
-        "@vitest/coverage-v8": "^3.2.4",
+        "@vitest/browser": "3.2.7",
+        "@vitest/coverage-v8": "3.2.7",
         "dotenv": "^16.4.7",
         "dpdm": "^3.14.0",
         "eslint": "^10.8.0",
         "fake-indexeddb": "^6.2.5",
+        "globals": "^17.7.0",
         "jsdom": "^27.0.0",
         "json-schema-to-typescript": "^15.0.4",
         "license-checker": "^25.0.1",
@@ -142,7 +142,7 @@
         "vite-plugin-compression2": "^2.5.3",
         "vite-plugin-static-copy": "^3.1.4",
         "vite-tsconfig-paths": "^5.1.4",
-        "vitest": "^3.2.4"
+        "vitest": "3.2.7"
       }
     },
     "node_modules/@acemir/cssom": {
@@ -2170,9 +2170,9 @@
       }
     },
     "node_modules/@iconify-json/material-symbols": {
-      "version": "1.2.63",
-      "resolved": "https://registry.npmjs.org/@iconify-json/material-symbols/-/material-symbols-1.2.63.tgz",
-      "integrity": "sha512-R4PS/l8K6j+dk2P2MoYFLJgfbZ4YDo6XjCOpX6b1tvX+BhiSpSOjc1b6cnb/mvWe+JWBKlt4pcvPNiAijFLPnA==",
+      "version": "1.2.83",
+      "resolved": "https://registry.npmjs.org/@iconify-json/material-symbols/-/material-symbols-1.2.83.tgz",
+      "integrity": "sha512-4I2rfNlaoyn4zIcdJDxUMuPV1pVp8Tgwy+eJvyAZuOpmPtOsniQ8Dug6wzRD5s9KLyQA3smFvuBphVdYG7NWQA==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -2183,6 +2183,7 @@
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/@iconify/react/-/react-6.0.2.tgz",
       "integrity": "sha512-SMmC2sactfpJD427WJEDN6PMyznTFMhByK9yLW0gOTtnjzzbsi/Ke/XqsumsavFPwNiXs8jSiYeZTmLCLwO+Fg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@iconify/types": "^2.0.0"
@@ -2198,18 +2199,19 @@
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@iconify/types/-/types-2.0.0.tgz",
       "integrity": "sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/@iconify/utils": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/@iconify/utils/-/utils-3.1.0.tgz",
-      "integrity": "sha512-Zlzem1ZXhI1iHeeERabLNzBHdOa4VhQbqAcOQaMKuTuyZCpwKbC2R4Dd0Zo3g9EAc+Y4fiarO8HIHRAth7+skw==",
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/@iconify/utils/-/utils-3.1.4.tgz",
+      "integrity": "sha512-b1S7B1k9ohZ+iNTi2ATxbRYG9fTrJmUT0rc46bvVnNxqNRGW7dyo/vRREwyniI5IRN2RSJHDcm+s3BjWrSAjHw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@antfu/install-pkg": "^1.1.0",
         "@iconify/types": "^2.0.0",
-        "mlly": "^1.8.0"
+        "import-meta-resolve": "^4.2.0"
       }
     },
     "node_modules/@inquirer/ansi": {
@@ -6433,16 +6435,16 @@
       }
     },
     "node_modules/@vitest/browser": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/browser/-/browser-3.2.6.tgz",
-      "integrity": "sha512-CNjSynGBtAVOMTfQITv6Bc8da4/XTU1izorocbDStjUsynXcgx2FHVssh+10a8bKd/BxoqDdQtuSbYHfk302Wg==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/browser/-/browser-3.2.7.tgz",
+      "integrity": "sha512-gIzazUkbQfv6T1rJHOLhMMKQnplKAvvQ7QNGaFwI6oCsp4z2aSDZCojGpX3QX3+MYsvJdyy/8BRIYVEbAkMkEA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@testing-library/dom": "^10.4.0",
         "@testing-library/user-event": "^14.6.1",
-        "@vitest/mocker": "3.2.6",
-        "@vitest/utils": "3.2.6",
+        "@vitest/mocker": "3.2.7",
+        "@vitest/utils": "3.2.7",
         "magic-string": "^0.30.17",
         "sirv": "^3.0.1",
         "tinyrainbow": "^2.0.0",
@@ -6453,7 +6455,7 @@
       },
       "peerDependencies": {
         "playwright": "*",
-        "vitest": "3.2.6",
+        "vitest": "3.2.7",
         "webdriverio": "^7.0.0 || ^8.0.0 || ^9.0.0"
       },
       "peerDependenciesMeta": {
@@ -6469,13 +6471,13 @@
       }
     },
     "node_modules/@vitest/browser/node_modules/@vitest/mocker": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-3.2.6.tgz",
-      "integrity": "sha512-EZOrpDbkKotFAP7wPAQV1UIyoGOk4oX7ynWhBhLB7v+meMHbQhU16oPpIYGTTe4oFlhpryGpgpcZP/sin3hYuw==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-3.2.7.tgz",
+      "integrity": "sha512-Trr0hYO9CM3Wj6ksWHRhK9IZpIY6wTMO5u/MqXurMxT57sWBaOPEtP3Oq60ihZuh5JsiagKfz95OcxdEP6dBrA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "3.2.6",
+        "@vitest/spy": "3.2.7",
         "estree-walker": "^3.0.3",
         "magic-string": "^0.30.17"
       },
@@ -6496,9 +6498,9 @@
       }
     },
     "node_modules/@vitest/browser/node_modules/@vitest/pretty-format": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.6.tgz",
-      "integrity": "sha512-lb7XXXzmm2h2ASzFnRvQpDo6onT1NmMJA3tkGTWiBFtRJ9lxGY3d3mm/Apt36gej2bkkOVLL/yTOtufDaFa/jA==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.7.tgz",
+      "integrity": "sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -6509,9 +6511,9 @@
       }
     },
     "node_modules/@vitest/browser/node_modules/@vitest/spy": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-3.2.6.tgz",
-      "integrity": "sha512-oq6BbH68WzcWmwtBrU9nqLeaXTR4XwJF7FSLkKEZo4i6eoXcrxjcwSuTvWBIRUTC6VC72nXYunzqgZA+IKdtxg==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-3.2.7.tgz",
+      "integrity": "sha512-Q2eQGI6d2L/hBtZ0qNuKcAGid68XK6cv1xsoaIma6PaJhHPoqcEJhYpXZ/5myCMqkNgtP6UKuBhbc0nHKnrkuQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -6522,13 +6524,13 @@
       }
     },
     "node_modules/@vitest/browser/node_modules/@vitest/utils": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.6.tgz",
-      "integrity": "sha512-lI23nIs4bnT3T8NIoh+vFaz5s2/DdP0Jgt2jxwgWljvwn82cLJtyi/If+fjFyoLMGIOz0U/fKvWE0d4jsNQEfg==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.7.tgz",
+      "integrity": "sha512-x6BDOd7dyo3PFLY3I9/HJ25X/6OurhGXk2/B9gOZNPF7XDVjeBK4k01lQE5uvDpbuheErh91qYuE1E2OEjK3Rw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.6",
+        "@vitest/pretty-format": "3.2.7",
         "loupe": "^3.1.4",
         "tinyrainbow": "^2.0.0"
       },
@@ -6537,9 +6539,9 @@
       }
     },
     "node_modules/@vitest/coverage-v8": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-3.2.6.tgz",
-      "integrity": "sha512-LsAdmUapA0qSN306d8+zOyawM0hFm2m2Hg9IwVNIKBm+qJV8cijiq2c+gxKZcB1HCfIWAy+0qEZDCUQA58A1cw==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-3.2.7.tgz",
+      "integrity": "sha512-NEGWJS2XNu2PfRLQwOO3CTKj1tTETxNBdk454vDxVBhxJYhPaA/eS0nAI0c+1El1P7a60z8+i+ZrQoGESweGKg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -6561,8 +6563,8 @@
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "@vitest/browser": "3.2.6",
-        "vitest": "3.2.6"
+        "@vitest/browser": "3.2.7",
+        "vitest": "3.2.7"
       },
       "peerDependenciesMeta": {
         "@vitest/browser": {
@@ -6628,13 +6630,13 @@
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-3.2.6.tgz",
-      "integrity": "sha512-HYcoSj1w5tcgUnzoF0HcyaAQjpA1gj9ftUJ7iSJSuipc02jW9gKkigwZbjFldAfYHA1fa8UZVRftdMY5msWM9Q==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-3.2.7.tgz",
+      "integrity": "sha512-sB9y4ovltoQP+WaUPwmSxO9WIg9Ig694Di5PalVPsYHklAdE027mehpWF2SQSVq+k6sFgaivbTjTJwZLSHbedA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "3.2.6",
+        "@vitest/utils": "3.2.7",
         "pathe": "^2.0.3",
         "strip-literal": "^3.0.0"
       },
@@ -6643,9 +6645,9 @@
       }
     },
     "node_modules/@vitest/runner/node_modules/@vitest/pretty-format": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.6.tgz",
-      "integrity": "sha512-lb7XXXzmm2h2ASzFnRvQpDo6onT1NmMJA3tkGTWiBFtRJ9lxGY3d3mm/Apt36gej2bkkOVLL/yTOtufDaFa/jA==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.7.tgz",
+      "integrity": "sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -6656,13 +6658,13 @@
       }
     },
     "node_modules/@vitest/runner/node_modules/@vitest/utils": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.6.tgz",
-      "integrity": "sha512-lI23nIs4bnT3T8NIoh+vFaz5s2/DdP0Jgt2jxwgWljvwn82cLJtyi/If+fjFyoLMGIOz0U/fKvWE0d4jsNQEfg==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.7.tgz",
+      "integrity": "sha512-x6BDOd7dyo3PFLY3I9/HJ25X/6OurhGXk2/B9gOZNPF7XDVjeBK4k01lQE5uvDpbuheErh91qYuE1E2OEjK3Rw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.6",
+        "@vitest/pretty-format": "3.2.7",
         "loupe": "^3.1.4",
         "tinyrainbow": "^2.0.0"
       },
@@ -6671,13 +6673,13 @@
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-3.2.6.tgz",
-      "integrity": "sha512-H+ZjNTWGpObenh0YnlBctAPnJSI20P81PL8BPzWpx54YXLLTm8hEsWawtcYLMrwvpK48hGxLLbCS+1KRXhsKhw==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-3.2.7.tgz",
+      "integrity": "sha512-7C+MwShwtBSI5Buwoyg3s/iY1eHL9PKAf+O1wVh/TdnjXUtkoL/9YQtre90i4MtNXM6edP1wJ2zOBpfCyhIS7g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.6",
+        "@vitest/pretty-format": "3.2.7",
         "magic-string": "^0.30.17",
         "pathe": "^2.0.3"
       },
@@ -6686,9 +6688,9 @@
       }
     },
     "node_modules/@vitest/snapshot/node_modules/@vitest/pretty-format": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.6.tgz",
-      "integrity": "sha512-lb7XXXzmm2h2ASzFnRvQpDo6onT1NmMJA3tkGTWiBFtRJ9lxGY3d3mm/Apt36gej2bkkOVLL/yTOtufDaFa/jA==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.7.tgz",
+      "integrity": "sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -8078,13 +8080,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/confbox": {
-      "version": "0.1.8",
-      "resolved": "https://registry.npmjs.org/confbox/-/confbox-0.1.8.tgz",
-      "integrity": "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/convert-source-map": {
       "version": "1.9.0",
       "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz",
@@ -10193,9 +10188,10 @@
       }
     },
     "node_modules/globals": {
-      "version": "17.5.0",
-      "resolved": "https://registry.npmjs.org/globals/-/globals-17.5.0.tgz",
-      "integrity": "sha512-qoV+HK2yFl/366t2/Cb3+xxPUo5BuMynomoDmiaZBIdbs+0pYbjfZU+twLhGKp4uCZ/+NbtpVepH5bGCxRyy2g==",
+      "version": "17.7.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-17.7.0.tgz",
+      "integrity": "sha512-Czmyns5dUsq4seFBR/Kdydhmo8y9kC79hiSkPn0YcGtNnYWnrgt0vjrSjx9tspoDGWm2CMarffRuLjM4xUz8xg==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=18"
@@ -12962,17 +12958,14 @@
         "mkdirp": "bin/cmd.js"
       }
     },
-    "node_modules/mlly": {
-      "version": "1.8.2",
-      "resolved": "https://registry.npmjs.org/mlly/-/mlly-1.8.2.tgz",
-      "integrity": "sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==",
+    "node_modules/mrmime": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz",
+      "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "acorn": "^8.16.0",
-        "pathe": "^2.0.3",
-        "pkg-types": "^1.3.1",
-        "ufo": "^1.6.3"
+      "engines": {
+        "node": ">=10"
       }
     },
     "node_modules/mrmime": {
@@ -13716,18 +13709,6 @@
         "pixelmatch": "bin/pixelmatch"
       }
     },
-    "node_modules/pkg-types": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.3.1.tgz",
-      "integrity": "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "confbox": "^0.1.8",
-        "mlly": "^1.7.4",
-        "pathe": "^2.0.1"
-      }
-    },
     "node_modules/playwright": {
       "version": "1.58.2",
       "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.58.2.tgz",
@@ -17409,9 +17390,9 @@
       "license": "0BSD"
     },
     "node_modules/tsx": {
-      "version": "4.22.4",
-      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.22.4.tgz",
-      "integrity": "sha512-X8EX+XV4QR5xCsrgxaED954zTDfY8KqlDtskKEL0cHhyS/P8b4IFOvGDQpsC9Q1XnLq915wEfwwY/zzskCtmhg==",
+      "version": "4.23.1",
+      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.1.tgz",
+      "integrity": "sha512-GQHnkIfxyx1wYCOS/wonik5MVRZU9hi1TEZmzGZSCJB1y9YgoZ8H6itNE/u4suE+yLmOzuE4E5S4TZ/ZX2wcWQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -17427,6 +17408,490 @@
         "fsevents": "~2.3.3"
       }
     },
+    "node_modules/tsx/node_modules/@esbuild/aix-ppc64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.1.tgz",
+      "integrity": "sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/android-arm": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.1.tgz",
+      "integrity": "sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/android-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.1.tgz",
+      "integrity": "sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/android-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.1.tgz",
+      "integrity": "sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/darwin-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.1.tgz",
+      "integrity": "sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/darwin-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.1.tgz",
+      "integrity": "sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.1.tgz",
+      "integrity": "sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/freebsd-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.1.tgz",
+      "integrity": "sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-arm": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.1.tgz",
+      "integrity": "sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.1.tgz",
+      "integrity": "sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-ia32": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.1.tgz",
+      "integrity": "sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-loong64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.1.tgz",
+      "integrity": "sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-mips64el": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.1.tgz",
+      "integrity": "sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-ppc64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.1.tgz",
+      "integrity": "sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-riscv64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.1.tgz",
+      "integrity": "sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-s390x": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.1.tgz",
+      "integrity": "sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.1.tgz",
+      "integrity": "sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.1.tgz",
+      "integrity": "sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/netbsd-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.1.tgz",
+      "integrity": "sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.1.tgz",
+      "integrity": "sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/openbsd-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.1.tgz",
+      "integrity": "sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.1.tgz",
+      "integrity": "sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/sunos-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.1.tgz",
+      "integrity": "sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/win32-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.1.tgz",
+      "integrity": "sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/win32-ia32": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.1.tgz",
+      "integrity": "sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/win32-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.1.tgz",
+      "integrity": "sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/esbuild": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.1.tgz",
+      "integrity": "sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.28.1",
+        "@esbuild/android-arm": "0.28.1",
+        "@esbuild/android-arm64": "0.28.1",
+        "@esbuild/android-x64": "0.28.1",
+        "@esbuild/darwin-arm64": "0.28.1",
+        "@esbuild/darwin-x64": "0.28.1",
+        "@esbuild/freebsd-arm64": "0.28.1",
+        "@esbuild/freebsd-x64": "0.28.1",
+        "@esbuild/linux-arm": "0.28.1",
+        "@esbuild/linux-arm64": "0.28.1",
+        "@esbuild/linux-ia32": "0.28.1",
+        "@esbuild/linux-loong64": "0.28.1",
+        "@esbuild/linux-mips64el": "0.28.1",
+        "@esbuild/linux-ppc64": "0.28.1",
+        "@esbuild/linux-riscv64": "0.28.1",
+        "@esbuild/linux-s390x": "0.28.1",
+        "@esbuild/linux-x64": "0.28.1",
+        "@esbuild/netbsd-arm64": "0.28.1",
+        "@esbuild/netbsd-x64": "0.28.1",
+        "@esbuild/openbsd-arm64": "0.28.1",
+        "@esbuild/openbsd-x64": "0.28.1",
+        "@esbuild/openharmony-arm64": "0.28.1",
+        "@esbuild/sunos-x64": "0.28.1",
+        "@esbuild/win32-arm64": "0.28.1",
+        "@esbuild/win32-ia32": "0.28.1",
+        "@esbuild/win32-x64": "0.28.1"
+      }
+    },
     "node_modules/tsx/node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
@@ -17512,13 +17977,6 @@
         "typescript": ">=4.8.4 <6.1.0"
       }
     },
-    "node_modules/ufo": {
-      "version": "1.6.3",
-      "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.6.3.tgz",
-      "integrity": "sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/undici-types": {
       "version": "7.16.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
@@ -18097,20 +18555,20 @@
       }
     },
     "node_modules/vitest": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-3.2.6.tgz",
-      "integrity": "sha512-xejya+bT/j/+R/AGa1XOfRxLmNUlLtlwjRsFUILF+xHfzElmGcmFydy2gqqIrd62ptIEfwVMofd19uNWD9L7Nw==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-3.2.7.tgz",
+      "integrity": "sha512-KrxIJ62Fd89gfysR4WotlgZABiz2dqFPgqGzX7s+CwsqLFomRH7777ZcrOD6+WVAh7khPQP41A+BKbpcJFrdEg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@types/chai": "^5.2.2",
-        "@vitest/expect": "3.2.6",
-        "@vitest/mocker": "3.2.6",
-        "@vitest/pretty-format": "^3.2.6",
-        "@vitest/runner": "3.2.6",
-        "@vitest/snapshot": "3.2.6",
-        "@vitest/spy": "3.2.6",
-        "@vitest/utils": "3.2.6",
+        "@vitest/expect": "3.2.7",
+        "@vitest/mocker": "3.2.7",
+        "@vitest/pretty-format": "^3.2.7",
+        "@vitest/runner": "3.2.7",
+        "@vitest/snapshot": "3.2.7",
+        "@vitest/spy": "3.2.7",
+        "@vitest/utils": "3.2.7",
         "chai": "^5.2.0",
         "debug": "^4.4.1",
         "expect-type": "^1.2.1",
@@ -18140,8 +18598,8 @@
         "@edge-runtime/vm": "*",
         "@types/debug": "^4.1.12",
         "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0",
-        "@vitest/browser": "3.2.6",
-        "@vitest/ui": "3.2.6",
+        "@vitest/browser": "3.2.7",
+        "@vitest/ui": "3.2.7",
         "happy-dom": "*",
         "jsdom": "*"
       },
@@ -18170,15 +18628,15 @@
       }
     },
     "node_modules/vitest/node_modules/@vitest/expect": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-3.2.6.tgz",
-      "integrity": "sha512-1+7q9BtaKzEmO+fmNT3kYvoNn5Y71XWAx2Q5HRim4tTVRQVRv4uJFAQ5FbK0OPUeNP/WmVCpxYxoJdvuHVjzBQ==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-3.2.7.tgz",
+      "integrity": "sha512-E8eBXaKibuvH2pSZErOjdVb5vF4PbKYcrnluBTYxEk1l/VhhwZg1kZQsdtjq+CsF5CFydf2Rdkz7jDHKSisi3w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "3.2.6",
-        "@vitest/utils": "3.2.6",
+        "@vitest/spy": "3.2.7",
+        "@vitest/utils": "3.2.7",
         "chai": "^5.2.0",
         "tinyrainbow": "^2.0.0"
       },
@@ -18187,13 +18645,13 @@
       }
     },
     "node_modules/vitest/node_modules/@vitest/mocker": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-3.2.6.tgz",
-      "integrity": "sha512-EZOrpDbkKotFAP7wPAQV1UIyoGOk4oX7ynWhBhLB7v+meMHbQhU16oPpIYGTTe4oFlhpryGpgpcZP/sin3hYuw==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-3.2.7.tgz",
+      "integrity": "sha512-Trr0hYO9CM3Wj6ksWHRhK9IZpIY6wTMO5u/MqXurMxT57sWBaOPEtP3Oq60ihZuh5JsiagKfz95OcxdEP6dBrA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "3.2.6",
+        "@vitest/spy": "3.2.7",
         "estree-walker": "^3.0.3",
         "magic-string": "^0.30.17"
       },
@@ -18214,9 +18672,9 @@
       }
     },
     "node_modules/vitest/node_modules/@vitest/pretty-format": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.6.tgz",
-      "integrity": "sha512-lb7XXXzmm2h2ASzFnRvQpDo6onT1NmMJA3tkGTWiBFtRJ9lxGY3d3mm/Apt36gej2bkkOVLL/yTOtufDaFa/jA==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.7.tgz",
+      "integrity": "sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -18227,9 +18685,9 @@
       }
     },
     "node_modules/vitest/node_modules/@vitest/spy": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-3.2.6.tgz",
-      "integrity": "sha512-oq6BbH68WzcWmwtBrU9nqLeaXTR4XwJF7FSLkKEZo4i6eoXcrxjcwSuTvWBIRUTC6VC72nXYunzqgZA+IKdtxg==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-3.2.7.tgz",
+      "integrity": "sha512-Q2eQGI6d2L/hBtZ0qNuKcAGid68XK6cv1xsoaIma6PaJhHPoqcEJhYpXZ/5myCMqkNgtP6UKuBhbc0nHKnrkuQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -18240,13 +18698,13 @@
       }
     },
     "node_modules/vitest/node_modules/@vitest/utils": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.6.tgz",
-      "integrity": "sha512-lI23nIs4bnT3T8NIoh+vFaz5s2/DdP0Jgt2jxwgWljvwn82cLJtyi/If+fjFyoLMGIOz0U/fKvWE0d4jsNQEfg==",
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.7.tgz",
+      "integrity": "sha512-x6BDOd7dyo3PFLY3I9/HJ25X/6OurhGXk2/B9gOZNPF7XDVjeBK4k01lQE5uvDpbuheErh91qYuE1E2OEjK3Rw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.6",
+        "@vitest/pretty-format": "3.2.7",
         "loupe": "^3.1.4",
         "tinyrainbow": "^2.0.0"
       },
diff --git a/frontend/package.json b/frontend/package.json
index f48fad8571..bc01367cef 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -34,7 +34,6 @@
     "@embedpdf/plugin-zoom": "^2.14.4",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
-    "@iconify/react": "^6.0.2",
     "@mantine/core": "^8.3.1",
     "@mantine/dates": "^8.3.1",
     "@mantine/dropzone": "^8.3.1",
@@ -59,7 +58,6 @@
     "autoprefixer": "^10.4.21",
     "axios": "^1.15.0",
     "d3": "^7.9.0",
-    "globals": "^17.5.0",
     "i18next": "^25.10.10",
     "i18next-browser-languagedetector": "^8.2.0",
     "jszip": "^3.10.1",
@@ -111,8 +109,9 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@iconify-json/material-symbols": "^1.2.53",
-    "@iconify/utils": "^3.1.0",
+    "@iconify-json/material-symbols": "^1.2.83",
+    "@iconify/react": "^6.0.2",
+    "@iconify/utils": "^3.1.4",
     "@playwright/test": "^1.55.0",
     "@storybook/addon-a11y": "^9.1.20",
     "@storybook/addon-docs": "^9.1.20",
@@ -137,12 +136,13 @@
     "@typescript-eslint/parser": "^8.65.0",
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitejs/plugin-react-swc": "^4.1.0",
-    "@vitest/browser": "^3.2.6",
-    "@vitest/coverage-v8": "^3.2.4",
+    "@vitest/browser": "3.2.7",
+    "@vitest/coverage-v8": "3.2.7",
     "dotenv": "^16.4.7",
     "dpdm": "^3.14.0",
     "eslint": "^10.8.0",
     "fake-indexeddb": "^6.2.5",
+    "globals": "^17.7.0",
     "jsdom": "^27.0.0",
     "json-schema-to-typescript": "^15.0.4",
     "license-checker": "^25.0.1",
@@ -164,7 +164,7 @@
     "vite-plugin-compression2": "^2.5.3",
     "vite-plugin-static-copy": "^3.1.4",
     "vite-tsconfig-paths": "^5.1.4",
-    "vitest": "^3.2.4"
+    "vitest": "3.2.7"
   },
   "depcheck": {
     "ignoreMatches": [

From 2cf6db99ceb0b8321f29f4a4cde18dbb4baec1e0 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Fri, 7 Aug 2026 09:47:09 +0100
Subject: [PATCH 094/122] Fix timing-fragile Valkey rate-limit boundary test
 (#7302)

# Description of Changes

Fix timing-fragile Valkey rate-limit boundary test

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../valkey/LiveValkeyIntegrationTest.java     | 36 ++++++++++++++-----
 1 file changed, 28 insertions(+), 8 deletions(-)

diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/cluster/valkey/LiveValkeyIntegrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/cluster/valkey/LiveValkeyIntegrationTest.java
index c26528a715..0e6cb2f4de 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/cluster/valkey/LiveValkeyIntegrationTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/cluster/valkey/LiveValkeyIntegrationTest.java
@@ -298,24 +298,44 @@ class LiveValkeyIntegrationTest {
         ValkeyRateLimitStore store = newRateLimitStore(factoryA);
         String key = "boundary-" + java.util.UUID.randomUUID();
         long capacity = 5;
-        Duration window = Duration.ofMillis(500);
+        // refillGreedy tops the bucket up continuously, one token every window/capacity. A 500ms
+        // window left the drain loop only 100ms before a 6th token appeared, so a slow Valkey
+        // round-trip broke the count; 4s spaces refills 800ms apart, clear of any burst.
+        Duration window = Duration.ofSeconds(4);
+        long refillIntervalMs = window.toMillis() / capacity;
 
+        long drainStart = System.nanoTime();
         int firstAllowed = 0;
         for (int i = 0; i < 10; i++) {
             if (store.tryConsume(key, capacity, window).allowed()) firstAllowed++;
         }
-        assertEquals(capacity, firstAllowed, "must allow exactly capacity tokens initially");
+        long drainMs = (System.nanoTime() - drainStart) / 1_000_000;
+        // Refill never pauses, so a slow drain earns extra tokens honestly - allow exactly the
+        // number the elapsed time can have produced and no more.
+        long earned = drainMs / refillIntervalMs;
+        assertTrue(
+                firstAllowed >= capacity && firstAllowed <= capacity + earned,
+                "initial burst must be capacity ("
+                        + capacity
+                        + ") plus at most the "
+                        + earned
+                        + " token(s) refilled during a "
+                        + drainMs
+                        + "ms drain, got "
+                        + firstAllowed);
 
-        Thread.sleep(window.toMillis() + 50);
+        // A fixed-window limiter would hand back a whole fresh capacity at the boundary; a token
+        // bucket hands back one token per refill interval.
+        Thread.sleep(refillIntervalMs + 200);
         int secondAllowed = 0;
-        long start = System.nanoTime();
-        for (int i = 0; i < 20 && (System.nanoTime() - start) < 20_000_000L; i++) {
+        for (int i = 0; i < 10; i++) {
             if (store.tryConsume(key, capacity, window).allowed()) secondAllowed++;
         }
         assertTrue(
-                secondAllowed <= capacity,
-                "token-bucket must not let a fresh full capacity be consumed instantly across"
-                        + " the boundary; got "
+                secondAllowed >= 1 && secondAllowed < capacity,
+                "one refill interval must yield about one token, not a fresh full window of "
+                        + capacity
+                        + "; got "
                         + secondAllowed);
     }
 

From fd1c955648c8c2ba28d382d1ba0db01b260e8c93 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Fri, 7 Aug 2026 10:52:13 +0200
Subject: [PATCH 095/122] refactor(ui): redesign VersionTimeline UI (#7162)

# Description of Changes

I felt the old VersionTimeline was a bit too crowded/not very "good"
looking so i had a crack at redesigning it. Mainly aimed for:

- less info
- less crowding
- more spacing

### New


<img width="884" height="1172" alt="image"
src="https://github.com/user-attachments/assets/070eab35-80b8-408d-9917-b111c433ae4f"
/>


### Old

<img width="882" height="770" alt="image"
src="https://github.com/user-attachments/assets/a074ba2e-79e3-4a8d-9491-ad3a8c432b98"
/>


<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [X] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../public/locales/en-US/translation.toml     |   3 +-
 .../core/components/filesPage/FilesPage.css   | 174 ++++++-----
 .../filesPage/VersionHistoryModal.tsx         |  16 +-
 .../components/filesPage/VersionTimeline.tsx  | 275 +++++++++---------
 4 files changed, 256 insertions(+), 212 deletions(-)

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index feb42149f7..ea4f0399b9 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -3977,6 +3977,7 @@ refresh = "Refresh from server"
 remove = "Delete"
 removeVersion = "Remove this version"
 rename = "Rename"
+renamed = "Renamed"
 renameFolder = "Rename folder"
 resizeFolderTree = "Resize folder tree (arrow keys, Shift for bigger steps; double-click to auto-fit)"
 save = "Save"
@@ -4079,9 +4080,7 @@ count = "Files"
 folder = "Folder"
 labels = "Labels"
 modified = "Modified"
-name = "Name"
 size = "Size"
-toolHistoryAtVersion = "Cumulative tool chain"
 totalSize = "Total size"
 type = "Type"
 versionHistory = "Version journey"
diff --git a/frontend/editor/src/core/components/filesPage/FilesPage.css b/frontend/editor/src/core/components/filesPage/FilesPage.css
index 9de4a276aa..4815a1b31e 100644
--- a/frontend/editor/src/core/components/filesPage/FilesPage.css
+++ b/frontend/editor/src/core/components/filesPage/FilesPage.css
@@ -956,178 +956,204 @@
    like a commit graph; clicking a row's summary toggles its expanded
    detail (cumulative tool chain, full meta). Long chains (> 6) collapse
    the middle behind a "Show N earlier versions" button. */
+/* Version Timeline styling */
 .files-page-details-version-timeline {
   display: flex;
   flex-direction: column;
-  gap: 0.4rem;
-  padding: 0.55rem 0.7rem 0.7rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 0.5rem;
+  gap: 0.6rem;
+  padding: 0.5rem 0;
+  background: transparent;
 }
+
 .files-page-details-version-timeline-label {
   display: flex;
   align-items: center;
-  gap: 0.35rem;
-  font-size: 0.72rem;
+  gap: 0.4rem;
+  font-size: 0.75rem;
+  font-weight: 600;
   text-transform: uppercase;
   letter-spacing: 0.05em;
   color: var(--c-text-subtle);
+  margin-bottom: 0.85rem;
 }
+
 .files-page-details-version-timeline-count {
   margin-left: auto;
   font-weight: 600;
-  color: var(--c-text-muted, var(--c-text-subtle));
+  color: var(--c-primary);
   text-transform: none;
   letter-spacing: 0;
 }
+
 .files-page-details-version-timeline-list {
-  list-style: none;
-  margin: 0;
-  padding: 0;
+  list-style: none !important;
+  margin: 0 !important;
+  padding: 1.1rem 0 0 0 !important;
   display: flex;
   flex-direction: column;
+  gap: 1.25rem;
 }
+
 .files-page-details-version-timeline-row,
 .files-page-details-version-timeline-ellipsis {
   display: flex;
-  gap: 0.6rem;
-  padding: 0.15rem 0;
+  gap: 0.85rem;
+  padding: 0;
   position: relative;
+  list-style: none !important;
 }
+
+.files-page-details-version-timeline-row::before,
+.files-page-details-version-timeline-ellipsis::before {
+  content: none !important;
+}
+
 .files-page-details-version-timeline-rail {
   display: flex;
   flex-direction: column;
   align-items: center;
   flex-shrink: 0;
-  width: 0.8rem;
-  padding-top: 0.45rem;
+  width: 1rem;
+  padding-top: 0.85rem;
 }
+
 .files-page-details-version-timeline-rail-dot {
-  width: 0.55rem;
-  height: 0.55rem;
+  width: 0.65rem;
+  height: 0.65rem;
   border-radius: 50%;
   background: var(--c-bg-raised);
   border: 2px solid var(--c-border-strong, var(--c-border-subtle));
-  z-index: 1;
+  z-index: 2;
   flex-shrink: 0;
+  transition: all 0.2s ease;
 }
+
 .files-page-details-version-timeline-rail-dot.is-active {
   background: var(--c-primary);
   border-color: var(--c-primary);
-  box-shadow: 0 0 0 3px color-mix(in srgb, var(--c-primary) 25%, transparent);
+  box-shadow: 0 0 0 3px color-mix(in srgb, var(--c-primary) 30%, transparent);
 }
+
 .files-page-details-version-timeline-rail-dot.is-ellipsis {
-  width: 0.35rem;
-  height: 0.35rem;
+  width: 0.4rem;
+  height: 0.4rem;
   background: var(--c-text-subtle);
   border-color: transparent;
 }
+
 .files-page-details-version-timeline-rail-line {
   width: 2px;
   flex: 1;
   background: var(--c-border-subtle);
-  min-height: 0.6rem;
-  margin-top: 2px;
+  min-height: 1.25rem;
+  margin-top: 6px;
 }
+
 .files-page-details-version-timeline-body {
   flex: 1;
   min-width: 0;
   display: flex;
   flex-direction: column;
-  gap: 0.2rem;
-  padding: 0.25rem 0.3rem 0.4rem;
-  border-radius: 0.35rem;
-  transition: background-color 0.12s ease;
+  gap: 0.5rem;
+  padding: 1rem 1.25rem;
+  border-radius: 0.65rem;
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.04);
+  transition:
+    border-color 0.15s ease,
+    background-color 0.15s ease,
+    box-shadow 0.15s ease;
 }
+
+.files-page-details-version-timeline-body:hover {
+  border-color: var(--c-border-strong, var(--c-border-subtle));
+}
+
 .files-page-details-version-timeline-row.is-active
   .files-page-details-version-timeline-body {
-  background: color-mix(in srgb, var(--c-primary) 10%, transparent);
+  border-color: color-mix(in srgb, var(--c-primary) 40%, transparent);
+  background: color-mix(in srgb, var(--c-primary) 5%, var(--c-surface));
+  box-shadow: 0 2px 6px color-mix(in srgb, var(--c-primary) 12%, transparent);
 }
-.files-page-details-version-timeline-summary {
+
+.files-page-details-version-timeline-card-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.5rem;
+}
+
+.files-page-details-version-timeline-tool-title {
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  color: var(--c-text);
+}
+
+.files-page-details-version-timeline-card-meta {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.5rem;
+  padding-top: 0.1rem;
+}
+
+.files-page-details-version-timeline-expand-btn {
   appearance: none;
   background: none;
   border: 0;
   padding: 0;
-  margin: 0;
+  cursor: pointer;
   display: flex;
   align-items: center;
-  gap: 0.4rem;
-  cursor: pointer;
-  text-align: left;
-  color: inherit;
-  font: inherit;
 }
-.files-page-details-version-timeline-summary:hover
-  .files-page-details-version-timeline-chevron {
+
+.files-page-details-version-timeline-expand-btn:hover span {
   color: var(--c-text);
 }
-.files-page-details-version-timeline-delta {
-  font-size: 0.82rem;
-  color: var(--c-text);
-  font-weight: 500;
-  white-space: nowrap;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  display: inline-flex;
-  align-items: baseline;
-  gap: 0.25rem;
-}
-.files-page-details-version-timeline-delta.is-origin {
-  font-weight: 400;
-  color: var(--c-text-subtle);
-  font-style: italic;
-}
-.files-page-details-version-timeline-delta-plus {
-  color: var(--c-primary);
-  font-weight: 700;
-}
-.files-page-details-version-timeline-spacer {
-  flex: 1;
-}
+
 .files-page-details-version-timeline-chevron {
   color: var(--c-text-subtle);
   transition: transform 0.15s ease;
 }
+
 .files-page-details-version-timeline-chevron.is-expanded {
   transform: rotate(180deg);
-  color: var(--c-text);
-}
-.files-page-details-version-timeline-meta-line {
-  display: flex;
-  align-items: center;
-  gap: 0.35rem;
-  font-size: 0.7rem;
-  color: var(--c-text-subtle);
+  color: var(--c-primary);
 }
+
 .files-page-details-version-timeline-expanded {
   display: flex;
   flex-direction: column;
   gap: 0.4rem;
-  margin-top: 0.45rem;
+  margin-top: 0.5rem;
   padding-top: 0.5rem;
   border-top: 1px dashed var(--c-border-subtle);
 }
+
 .files-page-details-version-timeline-toolchain {
   display: flex;
   flex-direction: column;
   gap: 0.2rem;
 }
+
 .files-page-details-version-timeline-toolchain-label {
   font-size: 0.65rem;
   color: var(--c-text-subtle);
   text-transform: uppercase;
   letter-spacing: 0.05em;
 }
+
 .files-page-details-version-timeline-ellipsis-btn,
 .files-page-details-version-timeline-collapse-btn {
   appearance: none;
   background: none;
   border: 1px dashed var(--c-border-subtle);
-  border-radius: 0.3rem;
-  padding: 0.25rem 0.5rem;
+  border-radius: 0.4rem;
+  padding: 0.35rem 0.7rem;
   margin: 0.1rem 0;
-  font-size: 0.72rem;
+  font-size: 0.75rem;
   color: var(--c-text-subtle);
   cursor: pointer;
   text-align: left;
@@ -1135,11 +1161,13 @@
     border-color 0.12s ease,
     color 0.12s ease;
 }
+
 .files-page-details-version-timeline-ellipsis-btn:hover,
 .files-page-details-version-timeline-collapse-btn:hover {
   color: var(--c-text);
-  border-color: var(--c-border-strong, var(--c-text-subtle));
+  border-color: var(--c-primary);
 }
+
 .files-page-details-version-timeline-collapse-btn {
   align-self: flex-start;
   margin-top: 0.2rem;
diff --git a/frontend/editor/src/core/components/filesPage/VersionHistoryModal.tsx b/frontend/editor/src/core/components/filesPage/VersionHistoryModal.tsx
index 077924155d..2bef30c763 100644
--- a/frontend/editor/src/core/components/filesPage/VersionHistoryModal.tsx
+++ b/frontend/editor/src/core/components/filesPage/VersionHistoryModal.tsx
@@ -1,6 +1,7 @@
 import { useCallback, useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
-import { Center, Loader, Modal, Text } from "@mantine/core";
+import HistoryIcon from "@mui/icons-material/History";
+import { Center, Group, Loader, Modal, Text } from "@mantine/core";
 
 import type { FileId } from "@app/types/file";
 import type { StirlingFileStub } from "@app/types/fileContext";
@@ -99,7 +100,17 @@ export function VersionHistoryModal({
       onClose={onClose}
       centered
       size="md"
-      title={t("filesPage.field.versionHistory", "Version journey")}
+      title={
+        <Group gap="xs" align="center">
+          <HistoryIcon
+            fontSize="small"
+            style={{ color: "var(--c-accent-fg, var(--c-primary))" }}
+          />
+          <Text fw={600} size="md" c="var(--c-text)">
+            {t("filesPage.field.versionHistory", "Version journey")}
+          </Text>
+        </Group>
+      }
     >
       {loading ? (
         <Center py="lg">
@@ -111,6 +122,7 @@ export function VersionHistoryModal({
           currentId={file.id}
           onAddToWorkspace={handleAddToWorkspace}
           onRemove={handleRemove}
+          hideHeader
         />
       ) : (
         <Text size="sm" c="dimmed" py="sm">
diff --git a/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx b/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx
index 47495fe61b..049fc2365a 100644
--- a/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx
+++ b/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx
@@ -1,6 +1,6 @@
 import { useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
-import { Badge, Menu } from "@mantine/core";
+import { Badge, Group, Menu, Text } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { ActionIcon } from "@app/ui/ActionIcon";
 import OpenInNewIcon from "@mui/icons-material/OpenInNew";
@@ -8,16 +8,14 @@ import DeleteIcon from "@mui/icons-material/Delete";
 import DownloadIcon from "@mui/icons-material/Download";
 import HistoryIcon from "@mui/icons-material/History";
 import MoreVertIcon from "@mui/icons-material/MoreVert";
-import KeyboardArrowDownIcon from "@mui/icons-material/KeyboardArrowDown";
 
 import { FileId, ToolOperation } from "@app/types/file";
 import { ToolId } from "@app/types/toolId";
 import { StirlingFileStub } from "@app/types/fileContext";
 import { formatFileSize, getFileDate } from "@app/utils/fileUtils";
 import { downloadFileFromStorage } from "@app/utils/downloadUtils";
-import ToolChain from "@app/components/shared/ToolChain";
 
-/** Small label/value row; shared with FileDetailsPanel. */
+/** Small label/value row with crisp flex alignment and colon separation. */
 export function DetailField({
   label,
   value,
@@ -26,9 +24,31 @@ export function DetailField({
   value: string;
 }) {
   return (
-    <div className="files-page-details-field">
-      <span className="files-page-details-field-label">{label}</span>
-      <span className="files-page-details-field-value">{value}</span>
+    <div
+      className="files-page-details-field"
+      style={{
+        display: "flex",
+        gap: "0.5rem",
+        alignItems: "baseline",
+        wordBreak: "break-all",
+      }}
+    >
+      <span
+        className="files-page-details-field-label"
+        style={{
+          fontWeight: 500,
+          color: "var(--c-text-subtle)",
+          flexShrink: 0,
+        }}
+      >
+        {label}:
+      </span>
+      <span
+        className="files-page-details-field-value"
+        style={{ fontWeight: 600, color: "var(--c-text)" }}
+      >
+        {value}
+      </span>
     </div>
   );
 }
@@ -60,7 +80,7 @@ export interface VersionTimelineProps {
   hideHeader?: boolean;
 }
 
-/** Version timeline with per-row tool deltas and collapse-when-long. */
+/** Clean, spacious version timeline with minimal clutter. */
 export function VersionTimeline({
   chain,
   currentId,
@@ -69,7 +89,6 @@ export function VersionTimeline({
   hideHeader = false,
 }: VersionTimelineProps) {
   const { t } = useTranslation();
-  const [expandedIds, setExpandedIds] = useState<Set<FileId>>(new Set());
   const [showAllCollapsed, setShowAllCollapsed] = useState(false);
 
   // Newest-first ordering.
@@ -113,15 +132,6 @@ export function VersionTimeline({
     return [...head, { kind: "ellipsis", hidden }, ...tail];
   }, [collapsible, showAllCollapsed, ordered]);
 
-  const toggleExpand = (id: FileId) => {
-    setExpandedIds((prev) => {
-      const next = new Set(prev);
-      if (next.has(id)) next.delete(id);
-      else next.add(id);
-      return next;
-    });
-  };
-
   return (
     <div className="files-page-details-version-timeline">
       {!hideHeader && (
@@ -135,7 +145,10 @@ export function VersionTimeline({
           </span>
         </div>
       )}
-      <ol className="files-page-details-version-timeline-list">
+      <ul
+        className="files-page-details-version-timeline-list"
+        style={{ listStyle: "none", padding: 0, margin: 0 }}
+      >
         {rows.map((row, idx) => {
           const isLast = idx === rows.length - 1;
           if (row.kind === "ellipsis") {
@@ -143,6 +156,7 @@ export function VersionTimeline({
               <li
                 key="ellipsis"
                 className="files-page-details-version-timeline-ellipsis"
+                style={{ listStyle: "none" }}
               >
                 <div className="files-page-details-version-timeline-rail">
                   <span className="files-page-details-version-timeline-rail-dot is-ellipsis" />
@@ -152,7 +166,7 @@ export function VersionTimeline({
                 </div>
                 <Button
                   variant="tertiary"
-                  className="files-page-details-version-timeline-ellipsis-btn"
+                  size="sm"
                   onClick={() => setShowAllCollapsed(true)}
                 >
                   {t(
@@ -166,15 +180,18 @@ export function VersionTimeline({
           }
           const v = row.version;
           const isActive = v.id === currentId;
-          const isExpanded = expandedIds.has(v.id);
           const prior = byVersionNumber.get((v.versionNumber ?? 1) - 1) ?? null;
           const delta = deltaToolFor(v, prior);
+          const isOriginal = (v.versionNumber ?? 1) === 1;
+          const nameChanged = prior ? prior.name !== v.name : false;
+
           return (
             <li
               key={v.id}
               className={`files-page-details-version-timeline-row${
                 isActive ? " is-active" : ""
               }`}
+              style={{ listStyle: "none" }}
             >
               <div className="files-page-details-version-timeline-rail">
                 <span
@@ -187,131 +204,119 @@ export function VersionTimeline({
                 )}
               </div>
               <div className="files-page-details-version-timeline-body">
-                <Button
-                  variant="tertiary"
-                  className="files-page-details-version-timeline-summary"
-                  onClick={() => toggleExpand(v.id)}
-                  aria-expanded={isExpanded}
-                  leftSection={
-                    <Badge
-                      size="xs"
-                      variant={isActive ? "filled" : "outline"}
-                      color="blue"
-                    >
+                {/* Header row: Version Badge, Action Title + Menu */}
+                <div
+                  style={{
+                    display: "flex",
+                    alignItems: "center",
+                    justifyContent: "space-between",
+                    gap: "0.75rem",
+                    width: "100%",
+                  }}
+                >
+                  <Group
+                    gap="sm"
+                    align="center"
+                    style={{ flex: 1, minWidth: 0, flexWrap: "nowrap" }}
+                  >
+                    <Badge size="xs" variant={isActive ? "filled" : "light"}>
                       v{v.versionNumber ?? 1}
                     </Badge>
-                  }
-                  rightSection={
-                    <KeyboardArrowDownIcon
-                      className={`files-page-details-version-timeline-chevron${
-                        isExpanded ? " is-expanded" : ""
-                      }`}
-                      fontSize="small"
-                    />
-                  }
-                >
-                  {delta ? (
-                    <span className="files-page-details-version-timeline-delta">
-                      <ToolLabel toolId={delta.toolId} />
-                    </span>
-                  ) : (
-                    <span className="files-page-details-version-timeline-delta is-origin">
-                      {t("filesPage.versionOrigin", "Original upload")}
-                    </span>
-                  )}
-                </Button>
-                <div className="files-page-details-version-timeline-meta-line">
-                  <span>{formatFileSize(v.size)}</span>
-                  {v.lastModified ? (
-                    <>
-                      <span>·</span>
-                      <span>
-                        {getFileDate({ lastModified: v.lastModified })}
-                      </span>
-                    </>
-                  ) : null}
-                  {/* Kebab on every row - the original/active version also
-                      needs download + open-in-workspace. */}
-                  <span className="files-page-details-version-timeline-spacer" />
-                  <Menu position="bottom-end" withinPortal shadow="md">
-                    <Menu.Target>
-                      <ActionIcon
-                        variant="tertiary"
-                        size="sm"
-                        aria-label={t(
-                          "filesPage.versionActions",
-                          "Version actions",
-                        )}
-                        onClick={(e) => e.stopPropagation()}
-                      >
-                        <MoreVertIcon fontSize="small" />
-                      </ActionIcon>
-                    </Menu.Target>
-                    <Menu.Dropdown>
-                      <Menu.Item
-                        leftSection={<OpenInNewIcon fontSize="small" />}
-                        onClick={() => onAddToWorkspace([v.id])}
-                      >
-                        {t(
-                          "filesPage.openVersionInWorkspace",
-                          "Open in workspace",
-                        )}
-                      </Menu.Item>
-                      <Menu.Item
-                        leftSection={<DownloadIcon fontSize="small" />}
-                        onClick={() => {
-                          void downloadFileFromStorage(v);
-                        }}
-                      >
-                        {t(
-                          "filesPage.downloadVersion",
-                          "Download this version",
-                        )}
-                      </Menu.Item>
-                      <Menu.Divider />
-                      <Menu.Item
-                        color="red"
-                        leftSection={<DeleteIcon fontSize="small" />}
-                        onClick={() => onRemove([v.id])}
-                      >
-                        {t("filesPage.removeVersion", "Remove this version")}
-                      </Menu.Item>
-                    </Menu.Dropdown>
-                  </Menu>
-                </div>
-                {isExpanded && (
-                  // Filename + full cumulative tool chain.
-                  <div className="files-page-details-version-timeline-expanded">
-                    <DetailField
-                      label={t("filesPage.field.name", "Name")}
-                      value={v.name}
-                    />
-                    {v.toolHistory && v.toolHistory.length > 0 && (
-                      <div className="files-page-details-version-timeline-toolchain">
-                        <span className="files-page-details-version-timeline-toolchain-label">
-                          {t(
-                            "filesPage.field.toolHistoryAtVersion",
-                            "Cumulative tool chain",
+                    <Text
+                      fw={600}
+                      size="sm"
+                      truncate
+                      style={{ color: "var(--c-text)" }}
+                    >
+                      {delta ? (
+                        <ToolLabel toolId={delta.toolId} />
+                      ) : (
+                        t("filesPage.versionOrigin", "Original upload")
+                      )}
+                    </Text>
+                  </Group>
+
+                  {!isActive && (
+                    <Menu position="bottom-end" withinPortal shadow="md">
+                      <Menu.Target>
+                        <ActionIcon
+                          variant="tertiary"
+                          size="sm"
+                          aria-label={t(
+                            "filesPage.versionActions",
+                            "Version actions",
                           )}
-                        </span>
-                        <ToolChain
-                          toolChain={v.toolHistory}
-                          displayStyle="badges"
-                          size="xs"
-                        />
-                      </div>
-                    )}
-                  </div>
+                          onClick={(e) => e.stopPropagation()}
+                        >
+                          <MoreVertIcon fontSize="small" />
+                        </ActionIcon>
+                      </Menu.Target>
+                      <Menu.Dropdown>
+                        <Menu.Item
+                          leftSection={<OpenInNewIcon fontSize="small" />}
+                          onClick={() => onAddToWorkspace([v.id])}
+                        >
+                          {t(
+                            "filesPage.openVersionInWorkspace",
+                            "Open in workspace",
+                          )}
+                        </Menu.Item>
+                        <Menu.Item
+                          leftSection={<DownloadIcon fontSize="small" />}
+                          onClick={() => {
+                            void downloadFileFromStorage(v);
+                          }}
+                        >
+                          {t(
+                            "filesPage.downloadVersion",
+                            "Download this version",
+                          )}
+                        </Menu.Item>
+                        <Menu.Divider />
+                        <Menu.Item
+                          color="red"
+                          leftSection={<DeleteIcon fontSize="small" />}
+                          onClick={() => onRemove([v.id])}
+                        >
+                          {t("filesPage.removeVersion", "Remove this version")}
+                        </Menu.Item>
+                      </Menu.Dropdown>
+                    </Menu>
+                  )}
+                </div>
+
+                {/* Quiet Meta Line: File Size · Date */}
+                <Text size="xs" c="dimmed" style={{ marginTop: "0.15rem" }}>
+                  {formatFileSize(v.size)}
+                  {v.lastModified && (
+                    <> · {getFileDate({ lastModified: v.lastModified })}</>
+                  )}
+                </Text>
+
+                {/* Show filename ONLY if original upload or if name changed */}
+                {(isOriginal || nameChanged) && (
+                  <Text
+                    size="xs"
+                    c="dimmed"
+                    style={{ wordBreak: "break-all", marginTop: "0.2rem" }}
+                  >
+                    {nameChanged
+                      ? `${t("filesPage.renamed", "Renamed")}: `
+                      : `${t("filesPage.file", "File")}: `}
+                    <span style={{ color: "var(--c-text)", fontWeight: 500 }}>
+                      {v.name}
+                    </span>
+                  </Text>
                 )}
               </div>
             </li>
           );
         })}
-      </ol>
+      </ul>
       {collapsible && showAllCollapsed && (
         <Button
           variant="tertiary"
-          className="files-page-details-version-timeline-collapse-btn"
+          size="sm"
           onClick={() => setShowAllCollapsed(false)}
         >
           {t("filesPage.versionCollapse", "Collapse middle versions")}

From 75be29217699f668a767a221e846cc99d3eb7d62 Mon Sep 17 00:00:00 2001
From: ConnorYoh <40631091+ConnorYoh@users.noreply.github.com>
Date: Fri, 7 Aug 2026 09:53:13 +0100
Subject: [PATCH 096/122] feat(editor): move app config onto TanStack Query
 (#7283)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

> Stacked on #7264 — review that first. This diff is against its branch.

## The problem

`AppConfigContext` hand-rolled a query client: a `fetchCountRef` dedupe
guard, an exponential-backoff retry loop with its own `sleep()`, a
`hasResolvedConfig` flag, and manual 401/5xx branching. All to fetch one
endpoint that 80 files read.

## End state

Same provider, same public contract, React Query underneath. **250 lines
to 142**, and no consumer file changes.

| | Before | After |
|---|---|---|
| Dedupe | `fetchCountRef` guard | query key |
| Retry | `for` loop + `sleep()` + backoff maths | `retry` +
`retryDelay` |
| 401 | caught in the component, sets default config | `fetchAppConfig`
returns the default — the retry predicate and error state only see real
failures |
| Auth pages | early return inside the fetch | `enabled` |
| Resolved-yet tracking | `hasResolvedConfig` state | derived from the
query |

`fetchAppConfig` moves to `core/api/config.ts` with the simulation hook
and request options, so the context no longer knows how config is
fetched.

**Behaviour change:** config survives a provider remount instead of
refetching. That matters on desktop, where a connection-mode switch
remounts the tree — and #7264's cache reset already clears it on exactly
that transition.

## Testing

The existing 12-case contract test passes unchanged apart from the query
wrapper. It caught a real mistake: `failureCount` is 0-based in v5, so
`<= maxRetries` gave one attempt too many.

Four cases added — cached remount, `maxRetries` honoured, 4xx not
retried, `autoFetch` off.

`task frontend:check` green: 1672 tests across 191 files, typecheck on
all five flavours, eslint, dpdm, prettier.

## Coming next

| PR | Scope |
|---|---|
| 3 | `useEndpointConfig` — core (251 lines) plus a 482-line desktop
override with its own dependency polling. Split out of this PR;
different risk profile, and it deserves its own review. |
| 4 | `useAdminSettings` (20 consumers) and the config sections |
| 5 | Polling loops → `refetchInterval` |
| 6 | Finish the Processor, collapse to one client |
| 7 | Tool execution — mutation state only |

---------

Co-authored-by: Reece Browne <74901996+reecebrowne@users.noreply.github.com>
---
 frontend/editor/src/core/api/config.ts        |  23 ++
 .../core/contexts/AppConfigContext.test.tsx   | 233 +++++++++++++++-
 .../src/core/contexts/AppConfigContext.tsx    | 256 ++++++------------
 .../core/hooks/usePosthogTracking.test.tsx    |  33 ++-
 frontend/editor/src/core/query/keys.ts        |   1 +
 5 files changed, 357 insertions(+), 189 deletions(-)

diff --git a/frontend/editor/src/core/api/config.ts b/frontend/editor/src/core/api/config.ts
index 61f74b2330..f0ba730e8c 100644
--- a/frontend/editor/src/core/api/config.ts
+++ b/frontend/editor/src/core/api/config.ts
@@ -1,4 +1,27 @@
 import apiClient from "@app/services/apiClient";
+import { getSimulatedAppConfig } from "@app/testing/serverExperienceSimulations";
+import type { AppConfig } from "@app/types/appConfig";
+
+/** Unauthenticated and unreachable both mean "assume login is on". */
+export const DEFAULT_APP_CONFIG: AppConfig = { enableLogin: true };
+
+export async function fetchAppConfig(): Promise<AppConfig> {
+  const simulated = getSimulatedAppConfig();
+  if (simulated) return simulated;
+
+  try {
+    const response = await apiClient.get<AppConfig>(
+      "/api/v1/config/app-config",
+      { suppressErrorToast: true, skipAuthRedirect: true },
+    );
+    return response.data;
+  } catch (error) {
+    // 401 is an answer, not a failure: the app runs unauthenticated.
+    if ((error as { response?: { status?: number } })?.response?.status === 401)
+      return DEFAULT_APP_CONFIG;
+    throw error;
+  }
+}
 
 export interface FooterInfo {
   analyticsEnabled?: boolean;
diff --git a/frontend/editor/src/core/contexts/AppConfigContext.test.tsx b/frontend/editor/src/core/contexts/AppConfigContext.test.tsx
index 5e512ec69e..93c860d823 100644
--- a/frontend/editor/src/core/contexts/AppConfigContext.test.tsx
+++ b/frontend/editor/src/core/contexts/AppConfigContext.test.tsx
@@ -6,6 +6,8 @@ import {
 } from "@app/contexts/AppConfigContext";
 import apiClient from "@app/services/apiClient";
 import { allowConsole, expectConsole } from "@app/tests/failOnConsole";
+import { TestQueryProvider } from "@app/tests/utils/TestQueryProvider";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { ReactNode } from "react";
 
 // Mock apiClient
@@ -26,7 +28,9 @@ describe("AppConfigContext", () => {
   });
 
   const wrapper = ({ children }: { children: ReactNode }) => (
-    <AppConfigProvider>{children}</AppConfigProvider>
+    <TestQueryProvider>
+      <AppConfigProvider>{children}</AppConfigProvider>
+    </TestQueryProvider>
   );
 
   it("should fetch and provide app config on non-auth pages", async () => {
@@ -261,9 +265,11 @@ describe("AppConfigContext", () => {
     };
 
     const customWrapper = ({ children }: { children: ReactNode }) => (
-      <AppConfigProvider initialConfig={initialConfig}>
-        {children}
-      </AppConfigProvider>
+      <TestQueryProvider>
+        <AppConfigProvider initialConfig={initialConfig}>
+          {children}
+        </AppConfigProvider>
+      </TestQueryProvider>
     );
 
     const { result } = renderHook(() => useAppConfig(), {
@@ -279,6 +285,225 @@ describe("AppConfigContext", () => {
     expect(apiClient.get).toHaveBeenCalled();
   });
 
+  it("fetches on an auth page once a JWT arrives, flipping loading", async () => {
+    // Signing in on /login must load the config the first-login password
+    // prompt reads. useOnboardingOrchestrator keys its effect on
+    // [config?.enableLogin, configLoading] — both primitives — so the config
+    // value changing is not enough. loading has to go true then false, or the
+    // prompt never opens.
+    Object.defineProperty(window, "location", {
+      value: { pathname: "/login" },
+      writable: true,
+    });
+    let resolveFetch: (value: unknown) => void = () => {};
+    vi.mocked(apiClient.get).mockReturnValue(
+      new Promise((resolve) => {
+        resolveFetch = resolve;
+      }) as never,
+    );
+
+    const { result } = renderHook(() => useAppConfig(), { wrapper });
+    expect(apiClient.get).not.toHaveBeenCalled();
+    expect(result.current.loading).toBe(false);
+
+    await act(async () => {
+      window.dispatchEvent(new CustomEvent("jwt-available"));
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+
+    await waitFor(() => expect(result.current.loading).toBe(true));
+
+    await act(async () => {
+      resolveFetch({ status: 200, data: { enableLogin: true, isAdmin: true } });
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+
+    await waitFor(() => expect(result.current.loading).toBe(false));
+    expect(result.current.config).toEqual({
+      enableLogin: true,
+      isAdmin: true,
+    });
+  });
+
+  it("flips loading after sign-in even when a pre-login 401 already cached a config", async () => {
+    // The live sequence: the app loads on "/" while logged out, app-config 401s
+    // and resolves to the login-enabled default, then the user signs in on
+    // /login. That cached default means isPending is already false, so loading
+    // has to track isFetching or useOnboardingOrchestrator — whose effect deps
+    // are [config?.enableLogin, configLoading], both unchanged here — never
+    // re-runs, and the first-login password prompt never opens.
+    const client = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+    const sharedWrapper = ({ children }: { children: ReactNode }) => (
+      <QueryClientProvider client={client}>
+        <AppConfigProvider>{children}</AppConfigProvider>
+      </QueryClientProvider>
+    );
+
+    // Logged out on a non-auth page: 401 → default config, cached.
+    vi.mocked(apiClient.get).mockRejectedValueOnce(
+      Object.assign(new Error("Unauthorized"), {
+        response: { status: 401, data: {} },
+      }),
+    );
+    const loggedOut = renderHook(() => useAppConfig(), {
+      wrapper: sharedWrapper,
+    });
+    await waitFor(() =>
+      expect(loggedOut.result.current.config).toEqual({ enableLogin: true }),
+    );
+    expect(loggedOut.result.current.loading).toBe(false);
+    loggedOut.unmount();
+
+    // Now on /login, with that default still cached.
+    Object.defineProperty(window, "location", {
+      value: { pathname: "/login" },
+      writable: true,
+    });
+    let resolveFetch: (value: unknown) => void = () => {};
+    vi.mocked(apiClient.get).mockReturnValue(
+      new Promise((resolve) => {
+        resolveFetch = resolve;
+      }) as never,
+    );
+
+    const { result } = renderHook(() => useAppConfig(), {
+      wrapper: sharedWrapper,
+    });
+    expect(result.current.loading).toBe(false);
+
+    await act(async () => {
+      window.dispatchEvent(new CustomEvent("jwt-available"));
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+
+    await waitFor(() => expect(result.current.loading).toBe(true));
+
+    await act(async () => {
+      resolveFetch({
+        status: 200,
+        data: { enableLogin: true, isAdmin: true },
+      });
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+
+    await waitFor(() => expect(result.current.loading).toBe(false));
+    expect(result.current.config).toEqual({
+      enableLogin: true,
+      isAdmin: true,
+    });
+  });
+
+  it("serves a remounted provider from cache", async () => {
+    vi.mocked(apiClient.get).mockResolvedValue({
+      status: 200,
+      data: { enableLogin: false },
+    } as any);
+
+    const client = new QueryClient({
+      defaultOptions: { queries: { retry: false } },
+    });
+    const sharedWrapper = ({ children }: { children: ReactNode }) => (
+      <QueryClientProvider client={client}>
+        <AppConfigProvider>{children}</AppConfigProvider>
+      </QueryClientProvider>
+    );
+
+    const first = renderHook(() => useAppConfig(), { wrapper: sharedWrapper });
+    await waitFor(() => expect(first.result.current.loading).toBe(false));
+    first.unmount();
+
+    const second = renderHook(() => useAppConfig(), { wrapper: sharedWrapper });
+    // Cached, so no loading flash and no second request.
+    expect(second.result.current.loading).toBe(false);
+    expect(second.result.current.config).toEqual({ enableLogin: false });
+    expect(apiClient.get).toHaveBeenCalledTimes(1);
+  });
+
+  it("honours maxRetries for network failures", async () => {
+    expectConsole.error(/\[AppConfig\] Failed to fetch app config/);
+    vi.mocked(apiClient.get).mockRejectedValue(new Error("boom"));
+
+    const retryWrapper = ({ children }: { children: ReactNode }) => (
+      <TestQueryProvider>
+        <AppConfigProvider retryOptions={{ maxRetries: 2, initialDelay: 1 }}>
+          {children}
+        </AppConfigProvider>
+      </TestQueryProvider>
+    );
+
+    const { result } = renderHook(() => useAppConfig(), {
+      wrapper: retryWrapper,
+    });
+
+    await waitFor(() => expect(result.current.error).toBe("boom"));
+    expect(apiClient.get).toHaveBeenCalledTimes(3);
+  });
+
+  it("does not retry a 4xx", async () => {
+    expectConsole.error(/\[AppConfig\] Failed to fetch app config/);
+    vi.mocked(apiClient.get).mockRejectedValue(
+      Object.assign(new Error("nope"), { response: { status: 403, data: {} } }),
+    );
+
+    const retryWrapper = ({ children }: { children: ReactNode }) => (
+      <TestQueryProvider>
+        <AppConfigProvider retryOptions={{ maxRetries: 5, initialDelay: 1 }}>
+          {children}
+        </AppConfigProvider>
+      </TestQueryProvider>
+    );
+
+    const { result } = renderHook(() => useAppConfig(), {
+      wrapper: retryWrapper,
+    });
+
+    await waitFor(() => expect(result.current.error).toBe("nope"));
+    expect(apiClient.get).toHaveBeenCalledTimes(1);
+  });
+
+  it("stays loading when autoFetch is off and nothing seeds a config", async () => {
+    // Unresolved, not in-flight. Matches the pre-migration provider, which
+    // seeded loading from !hasResolvedConfig and never cleared it without a
+    // fetch. Reporting false here would tell consumers a null config is final.
+    const offWrapper = ({ children }: { children: ReactNode }) => (
+      <TestQueryProvider>
+        <AppConfigProvider autoFetch={false}>{children}</AppConfigProvider>
+      </TestQueryProvider>
+    );
+
+    const { result } = renderHook(() => useAppConfig(), {
+      wrapper: offWrapper,
+    });
+
+    expect(result.current.loading).toBe(true);
+    expect(result.current.config).toBeNull();
+    expect(apiClient.get).not.toHaveBeenCalled();
+  });
+
+  it("does not fetch when autoFetch is off", async () => {
+    const offWrapper = ({ children }: { children: ReactNode }) => (
+      <TestQueryProvider>
+        <AppConfigProvider
+          initialConfig={{ enableLogin: false }}
+          bootstrapMode="non-blocking"
+          autoFetch={false}
+        >
+          {children}
+        </AppConfigProvider>
+      </TestQueryProvider>
+    );
+
+    const { result } = renderHook(() => useAppConfig(), {
+      wrapper: offWrapper,
+    });
+
+    expect(result.current.loading).toBe(false);
+    expect(result.current.config).toEqual({ enableLogin: false });
+    expect(apiClient.get).not.toHaveBeenCalled();
+  });
+
   it("should use suppressErrorToast for all config requests", async () => {
     const mockConfig = { enableLogin: true };
 
diff --git a/frontend/editor/src/core/contexts/AppConfigContext.tsx b/frontend/editor/src/core/contexts/AppConfigContext.tsx
index 3672f6cdfa..112ca92bb8 100644
--- a/frontend/editor/src/core/contexts/AppConfigContext.tsx
+++ b/frontend/editor/src/core/contexts/AppConfigContext.tsx
@@ -2,23 +2,18 @@ import React, {
   createContext,
   useContext,
   useMemo,
-  useState,
   useEffect,
-  ReactNode,
   useCallback,
+  useState,
+  ReactNode,
 } from "react";
-import apiClient from "@app/services/apiClient";
-import { getSimulatedAppConfig } from "@app/testing/serverExperienceSimulations";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
+import { DEFAULT_APP_CONFIG, fetchAppConfig } from "@app/api/config";
+import { qk } from "@app/query/keys";
+import { CONFIG_STALE_TIME } from "@app/query/staleTime";
 import type { AppConfig, AppConfigBootstrapMode } from "@app/types/appConfig";
 import { useJwtConfigSync } from "@app/hooks/useJwtConfigSync";
 
-/**
- * Sleep utility for delays
- */
-function sleep(ms: number): Promise<void> {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
 export interface AppConfigRetryOptions {
   maxRetries?: number;
   initialDelay?: number;
@@ -40,10 +35,6 @@ const AppConfigContext = createContext<AppConfigContextValue | undefined>({
   refetch: async () => {},
 });
 
-/**
- * Provider component that fetches and provides app configuration
- * Should be placed at the top level of the app, before any components that need config
- */
 export interface AppConfigProviderProps {
   children: ReactNode;
   retryOptions?: AppConfigRetryOptions;
@@ -53,6 +44,22 @@ export interface AppConfigProviderProps {
   onConfigLoaded?: (config: AppConfig) => void;
 }
 
+function statusOf(error: unknown): number | undefined {
+  return (error as { response?: { status?: number } })?.response?.status;
+}
+
+function errorMessage(error: unknown): string {
+  const axiosLike = error as {
+    response?: { data?: { message?: string } };
+    message?: string;
+  };
+  return (
+    axiosLike?.response?.data?.message ||
+    axiosLike?.message ||
+    "Unknown error occurred"
+  );
+}
+
 export const AppConfigProvider: React.FC<AppConfigProviderProps> = ({
   children,
   retryOptions,
@@ -61,171 +68,84 @@ export const AppConfigProvider: React.FC<AppConfigProviderProps> = ({
   autoFetch = true,
   onConfigLoaded,
 }) => {
-  const isBlockingMode = bootstrapMode === "blocking";
-  const [config, setConfig] = useState<AppConfig | null>(initialConfig);
-  const [error, setError] = useState<string | null>(null);
-  // Track how many times we've attempted to fetch. useRef avoids re-renders that can trigger loops.
-  const fetchCountRef = React.useRef(0);
-  const [hasResolvedConfig, setHasResolvedConfig] = useState(
-    Boolean(initialConfig) && !isBlockingMode,
-  );
-  const [loading, setLoading] = useState(!hasResolvedConfig);
+  const maxRetries = retryOptions?.maxRetries ?? 0;
+  const initialDelay = retryOptions?.initialDelay ?? 1000;
+  // Non-blocking mode treats initialConfig as good enough to render on.
+  const seeded = Boolean(initialConfig) && bootstrapMode !== "blocking";
 
   const onConfigLoadedRef = React.useRef(onConfigLoaded);
   onConfigLoadedRef.current = onConfigLoaded;
 
-  const maxRetries = retryOptions?.maxRetries ?? 0;
-  const initialDelay = retryOptions?.initialDelay ?? 1000;
+  const queryClient = useQueryClient();
+  // Auth pages skip the fetch until sign-in asks for one.
+  const [signedIn, setSignedIn] = useState(false);
+  // fetchQuery, not refetchQueries: the latter skips a disabled query, and
+  // enabling one whose cache is still fresh doesn't fetch either. Sign-in has
+  // to force the request — a pre-login 401 leaves a cached default behind.
+  const refetch = useCallback(async () => {
+    setSignedIn(true);
+    await queryClient.fetchQuery({
+      queryKey: qk.appConfig(),
+      queryFn: fetchAppConfig,
+      staleTime: 0,
+    });
+  }, [queryClient]);
 
-  const fetchConfig = useCallback(
-    async (force = false) => {
-      // Prevent duplicate fetches unless forced
-      if (!force && fetchCountRef.current > 0) {
-        console.debug("[AppConfig] Already fetched, skipping");
-        return;
-      }
+  const { isAuthPage } = useJwtConfigSync(refetch);
+  const fetching = autoFetch && (!isAuthPage || signedIn);
 
-      // Mark that we've attempted a fetch to prevent repeated auto-fetch loops
-      fetchCountRef.current += 1;
-
-      const shouldBlockUI = !hasResolvedConfig || isBlockingMode;
-      if (shouldBlockUI) {
-        setLoading(true);
-      }
-      setError(null);
-
-      const startTime = performance.now();
-      for (let attempt = 0; attempt <= maxRetries; attempt++) {
-        try {
-          const testConfig = getSimulatedAppConfig();
-          if (testConfig) {
-            setConfig(testConfig);
-            setHasResolvedConfig(true);
-            setLoading(false);
-            return;
-          }
-
-          if (attempt > 0) {
-            const delay = initialDelay * Math.pow(2, attempt - 1);
-            console.debug(
-              `[AppConfig] Retry attempt ${attempt}/${maxRetries} after ${delay}ms delay...`,
-            );
-            await sleep(delay);
-          }
-
-          // apiClient automatically adds JWT header if available via interceptors
-          // Always suppress error toast - we handle 401 errors locally
-          console.debug("[AppConfig] Fetching app config", {
-            attempt,
-            force,
-            path: window.location.pathname,
-          });
-          const response = await apiClient.get<AppConfig>(
-            "/api/v1/config/app-config",
-            {
-              suppressErrorToast: true,
-              skipAuthRedirect: true,
-            } as any,
-          );
-          const data = response.data;
-
-          console.debug("[AppConfig] Config fetched successfully:", data);
-          console.debug(
-            "[AppConfig] Fetch duration ms:",
-            (performance.now() - startTime).toFixed(2),
-          );
-          setConfig(data);
-          setHasResolvedConfig(true);
-          setLoading(false);
-          onConfigLoadedRef.current?.(data);
-          return; // Success - exit function
-        } catch (err: any) {
-          const status = err?.response?.status;
-
-          // On 401 (not authenticated), use default config with login enabled
-          // This allows the app to work even without authentication
-          if (status === 401) {
-            console.debug(
-              "[AppConfig] 401 error - using default config (login enabled)",
-            );
-            console.debug(
-              "[AppConfig] Fetch duration ms:",
-              (performance.now() - startTime).toFixed(2),
-            );
-            setConfig({ enableLogin: true });
-            setHasResolvedConfig(true);
-            setLoading(false);
-            return;
-          }
-
-          // Check if we should retry (network errors or 5xx errors)
-          const shouldRetry =
-            (!status || status >= 500) && attempt < maxRetries;
-
-          if (shouldRetry) {
-            console.debug(
-              `[AppConfig] Attempt ${attempt + 1} failed (status ${status || "network error"}):`,
-              err.message,
-              "- will retry...",
-            );
-            continue;
-          }
-
-          // Final attempt failed or non-retryable error (4xx)
-          const errorMessage =
-            err?.response?.data?.message ||
-            err?.message ||
-            "Unknown error occurred";
-          setError(errorMessage);
-          console.error(
-            `[AppConfig] Failed to fetch app config after ${attempt + 1} attempts:`,
-            err,
-          );
-          console.debug(
-            "[AppConfig] Fetch duration ms:",
-            (performance.now() - startTime).toFixed(2),
-          );
-          // Preserve existing config (initial default or previous fetch). If nothing is set, assume login enabled.
-          setConfig((current) => current ?? { enableLogin: true });
-          setHasResolvedConfig(true);
-          break;
-        }
-      }
-
-      setLoading(false);
+  const { data, error, isFetching } = useQuery({
+    queryKey: qk.appConfig(),
+    queryFn: fetchAppConfig,
+    enabled: fetching,
+    staleTime: CONFIG_STALE_TIME,
+    // Network and 5xx only; failureCount is 0-based, so `<` gives maxRetries retries.
+    retry: (failureCount, err) => {
+      const status = statusOf(err);
+      return (!status || status >= 500) && failureCount < maxRetries;
     },
-    [hasResolvedConfig, isBlockingMode, maxRetries, initialDelay],
-  );
-
-  const { isAuthPage } = useJwtConfigSync(fetchConfig);
+    retryDelay: (attempt) => initialDelay * 2 ** attempt,
+  });
 
   useEffect(() => {
-    if (isAuthPage) {
-      console.debug(
-        "[AppConfig] On auth page - using default config, skipping fetch",
-        { path: window.location.pathname },
-      );
-      setConfig({ enableLogin: true });
-      setHasResolvedConfig(true);
-      setLoading(false);
-      return;
-    }
+    if (error) console.error("[AppConfig] Failed to fetch app config:", error);
+  }, [error]);
 
-    if (autoFetch) {
-      fetchConfig();
-    }
-  }, [autoFetch, fetchConfig, isAuthPage]);
-
-  const refetch = useCallback(() => fetchConfig(true), [fetchConfig]);
+  useEffect(() => {
+    if (data) onConfigLoadedRef.current?.(data);
+  }, [data]);
 
   const value = useMemo<AppConfigContextValue>(
     () => ({
-      config,
-      loading,
-      error,
+      config:
+        data ??
+        initialConfig ??
+        (isAuthPage || error ? DEFAULT_APP_CONFIG : null),
+      // "Config not settled yet": in flight, or never going to be fetched at
+      // all. isFetching rather than isPending because a pre-login 401 resolves
+      // to the default config, so isPending is already false by the time the
+      // post-sign-in fetch runs — and consumers key effects on the flip.
+      loading: seeded
+        ? false
+        : !autoFetch
+          ? true
+          : fetching
+            ? isFetching
+            : false,
+      error: error ? errorMessage(error) : null,
       refetch,
     }),
-    [config, loading, error, refetch],
+    [
+      data,
+      error,
+      isFetching,
+      initialConfig,
+      isAuthPage,
+      seeded,
+      autoFetch,
+      fetching,
+      refetch,
+    ],
   );
 
   return (
@@ -235,16 +155,10 @@ export const AppConfigProvider: React.FC<AppConfigProviderProps> = ({
   );
 };
 
-/**
- * Hook to access application configuration
- * Must be used within AppConfigProvider
- */
 export function useAppConfig(): AppConfigContextValue {
   const context = useContext(AppConfigContext);
-
   if (context === undefined) {
     throw new Error("useAppConfig must be used within AppConfigProvider");
   }
-
   return context;
 }
diff --git a/frontend/editor/src/core/hooks/usePosthogTracking.test.tsx b/frontend/editor/src/core/hooks/usePosthogTracking.test.tsx
index 41f5fad7dc..b2e88a0ddd 100644
--- a/frontend/editor/src/core/hooks/usePosthogTracking.test.tsx
+++ b/frontend/editor/src/core/hooks/usePosthogTracking.test.tsx
@@ -2,6 +2,7 @@ import { ReactNode } from "react";
 import { renderHook, waitFor } from "@testing-library/react";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { AppConfigProvider } from "@app/contexts/AppConfigContext";
+import { TestQueryProvider } from "@app/tests/utils/TestQueryProvider";
 
 const posthogState = vi.hoisted(() => ({ loaded: false }));
 const posthogMock = vi.hoisted(() => ({
@@ -40,13 +41,15 @@ describe("usePosthogTracking", () => {
 
   it("does not initialize PostHog when analytics is disabled", async () => {
     const wrapper = ({ children }: { children: ReactNode }) => (
-      <AppConfigProvider
-        initialConfig={{ enableAnalytics: false }}
-        bootstrapMode="non-blocking"
-        autoFetch={false}
-      >
-        {children}
-      </AppConfigProvider>
+      <TestQueryProvider>
+        <AppConfigProvider
+          initialConfig={{ enableAnalytics: false }}
+          bootstrapMode="non-blocking"
+          autoFetch={false}
+        >
+          {children}
+        </AppConfigProvider>
+      </TestQueryProvider>
     );
 
     renderHook(() => usePosthogTracking(), { wrapper });
@@ -58,13 +61,15 @@ describe("usePosthogTracking", () => {
 
   it("initializes PostHog when analytics is enabled", async () => {
     const wrapper = ({ children }: { children: ReactNode }) => (
-      <AppConfigProvider
-        initialConfig={{ enableAnalytics: true }}
-        bootstrapMode="non-blocking"
-        autoFetch={false}
-      >
-        {children}
-      </AppConfigProvider>
+      <TestQueryProvider>
+        <AppConfigProvider
+          initialConfig={{ enableAnalytics: true }}
+          bootstrapMode="non-blocking"
+          autoFetch={false}
+        >
+          {children}
+        </AppConfigProvider>
+      </TestQueryProvider>
     );
 
     renderHook(() => usePosthogTracking(), { wrapper });
diff --git a/frontend/editor/src/core/query/keys.ts b/frontend/editor/src/core/query/keys.ts
index 84a0206c8f..6c6bacd552 100644
--- a/frontend/editor/src/core/query/keys.ts
+++ b/frontend/editor/src/core/query/keys.ts
@@ -1,5 +1,6 @@
 /** Editor query keys: ["editor", <resource>, ...params]. */
 export const qk = {
+  appConfig: () => ["editor", "appConfig"] as const,
   footerInfo: () => ["editor", "footerInfo"] as const,
   groupEnabled: (group: string) => ["editor", "groupEnabled", group] as const,
   users: () => ["editor", "users"] as const,

From f268de8e60058175a7f732bd05e68ad47d6cec00 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 09:53:35 +0100
Subject: [PATCH 097/122] build(deps): bump tauri-apps/tauri-action from 0.6.2
 to 1.0.0 (#7236)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[tauri-apps/tauri-action](https://github.com/tauri-apps/tauri-action)
from 0.6.2 to 1.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri-action/releases">tauri-apps/tauri-action's
releases</a>.</em></p>
<blockquote>
<h2>action v1.0.0</h2>
<h2>[1.0.0]</h2>
<ul>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/db4399ef7ed597de7354e35eaa454c2e5e753d42"><code>db4399e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1194">#1194</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: <code>.app.tar.gz</code> &amp;
<code>.app.tar.gz.sig</code> files will now include the app version like
all other bundles/installers.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/53c88630c5e183c910a2810db86170b7bb4872f6"><code>53c8863</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1315">#1315</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The download urls in <code>latest.json</code> will now use the github
url instead of the browser download url.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/9b645673d58df9c322c1100484b7c535e6f26cc0"><code>9b64567</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1167">#1167</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Drop support for Tauri v1 and unstable
v2 (alpha, beta, rc) versions.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/9491f9dffcc417005d28578d4abf403196f3b56c"><code>9491f9d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1177">#1177</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: The action will now fail if
<code>draft: true</code> is set but the relevant release is not a
draft.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/ab628636a1a8bf55f0280cfbc114ca0acf9485cc"><code>ab62863</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1176">#1176</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The frontend lockfile detection will now move up the file tree to fix
issues in workspaces.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/adb8bd38d1eaf0fc5a77d959fea93813093ceab6"><code>adb8bd3</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1170">#1170</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Remove <code>includeRelease</code> and
<code>includeDebug</code>. You can switch to debug builds via
<code>args: --debug</code>. To upload release <em>and</em> debug builds,
run <code>tauri-action</code> twice, preferably in a job matrix for
concurrent builds.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/eea189090a42695c0b1c3c047210d506b1cc5dec"><code>eea1890</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1175">#1175</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Improved runner detection to prevent silent fails if runner (npm, pnpm,
yarn, bun) was not installed while a lockfile was present.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/acc588b4e23a3fbc5bfc5d77ba29df93f3e43c64"><code>acc588b</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1203">#1203</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Added initial Android &amp; iOS support. This only includes building
(=== running <code>tauri android|ios build</code>), installing
dependencies and uploading to stores must be done manually.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/2e37e06369f68e7c240ec8d4674ae3fb78c0075d"><code>2e37e06</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1174">#1174</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Use <code>npm exec</code> instead of <code>npm run</code> if
<code>@tauri-apps/cli</code> was detected with no <code>tauri</code>
script in <code>package.json</code>.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/1898cf45eec50b449c94b796371c727546611573"><code>1898cf4</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1186">#1186</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Fiixed an issue that caused outdated signatures for macos universal
builds in latest.json when re-running the action on the same release
multiple times.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/5c7403d73ff9d9aab2efc440adbacfe51071418a"><code>5c7403d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1326">#1326</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Expose <code>mainBinaryName</code> in
<code>releaseAssetNamePattern</code> and
<code>workflowArtifactNamePattern</code>.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/5d35c8e3181ba12e10be79009a6e94ee163580f4"><code>5d35c8e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1189">#1189</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The upload release assets will now have the original file as its
<code>label</code> which will show as the filename on the GitHub Release
page and will be used internally to update assets on reruns and to get
the download urls for latest.json</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/c18827ebec5e7e75f9bc306ba2d02239d012c1fb"><code>c18827e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1183">#1183</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Renamed <code>assetNamePattern</code>
to <code>releaseAssetNamePattern</code>.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/766720b094a5b1122967225a75ac244e9ebcac42"><code>766720b</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1172">#1172</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Removed the feature to automatically
initialize a Tauri project.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/25f373077afb9028b9cc3caf509eb67d86d57066"><code>25f3730</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1208">#1208</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Renamed
<code>includeUpdaterJson</code> to <code>uploadUpdaterJson</code> for
consistency with other similar options.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/3fc1c3e593927da7a12f0ae45028973d12202ef4"><code>53c8863</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1314">#1315</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Removed Gitea support.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/6d11c279be59c2d237278e856acccb1ece44d20a"><code>6d11c27</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1185">#1185</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Removed
<code>updaterJsonKeepUniversal</code>. This is now always enabled.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/7485c956ab7bbf2708a943bf07b3fefc1e230256"><code>7485c95</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1169">#1169</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Switch from unmaintained <code>@iarna/toml</code> to
<code>smol-toml</code>. No user-facing changes.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/8236c82510173ef930d644f38790c4cf3fd43cf2"><code>8236c82</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1277">#1277</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Semi-Breaking Change</strong>: The action will now update the
name and body of existing releases.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/05c1b09fe50e358ee27fa6ae2a8072b3f6e22155"><code>05c1b09</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1178">#1178</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Added built-in variant of <a
href="https://github.com/actions/upload-artifact/"><code>actions/upload-artifact</code></a>
to easily upload each bundle as a seperate archive. This may be removed
once <a
href="https://redirect.github.com/actions/upload-artifact/issues/331">actions/upload-artifact#331</a>
lands.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/6434f9aaff0a2daf202596b552c34c463d0e43ed"><code>6434f9a</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1296">#1296</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../Ludea"><code>@​Ludea</code></a>)
Added initial support for <code>vite+</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tauri-apps/tauri-action/blob/dev/CHANGELOG.md">tauri-apps/tauri-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>[1.0.0]</h2>
<ul>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/db4399ef7ed597de7354e35eaa454c2e5e753d42"><code>db4399e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1194">#1194</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: <code>.app.tar.gz</code> &amp;
<code>.app.tar.gz.sig</code> files will now include the app version like
all other bundles/installers.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/53c88630c5e183c910a2810db86170b7bb4872f6"><code>53c8863</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1315">#1315</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The download urls in <code>latest.json</code> will now use the github
url instead of the browser download url.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/9b645673d58df9c322c1100484b7c535e6f26cc0"><code>9b64567</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1167">#1167</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Drop support for Tauri v1 and unstable
v2 (alpha, beta, rc) versions.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/9491f9dffcc417005d28578d4abf403196f3b56c"><code>9491f9d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1177">#1177</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: The action will now fail if
<code>draft: true</code> is set but the relevant release is not a
draft.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/ab628636a1a8bf55f0280cfbc114ca0acf9485cc"><code>ab62863</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1176">#1176</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The frontend lockfile detection will now move up the file tree to fix
issues in workspaces.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/adb8bd38d1eaf0fc5a77d959fea93813093ceab6"><code>adb8bd3</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1170">#1170</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Remove <code>includeRelease</code> and
<code>includeDebug</code>. You can switch to debug builds via
<code>args: --debug</code>. To upload release <em>and</em> debug builds,
run <code>tauri-action</code> twice, preferably in a job matrix for
concurrent builds.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/eea189090a42695c0b1c3c047210d506b1cc5dec"><code>eea1890</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1175">#1175</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Improved runner detection to prevent silent fails if runner (npm, pnpm,
yarn, bun) was not installed while a lockfile was present.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/acc588b4e23a3fbc5bfc5d77ba29df93f3e43c64"><code>acc588b</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1203">#1203</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Added initial Android &amp; iOS support. This only includes building
(=== running <code>tauri android|ios build</code>), installing
dependencies and uploading to stores must be done manually.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/2e37e06369f68e7c240ec8d4674ae3fb78c0075d"><code>2e37e06</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1174">#1174</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Use <code>npm exec</code> instead of <code>npm run</code> if
<code>@tauri-apps/cli</code> was detected with no <code>tauri</code>
script in <code>package.json</code>.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/1898cf45eec50b449c94b796371c727546611573"><code>1898cf4</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1186">#1186</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Fiixed an issue that caused outdated signatures for macos universal
builds in latest.json when re-running the action on the same release
multiple times.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/5c7403d73ff9d9aab2efc440adbacfe51071418a"><code>5c7403d</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1326">#1326</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Expose <code>mainBinaryName</code> in
<code>releaseAssetNamePattern</code> and
<code>workflowArtifactNamePattern</code>.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/5d35c8e3181ba12e10be79009a6e94ee163580f4"><code>5d35c8e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1189">#1189</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The upload release assets will now have the original file as its
<code>label</code> which will show as the filename on the GitHub Release
page and will be used internally to update assets on reruns and to get
the download urls for latest.json</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/c18827ebec5e7e75f9bc306ba2d02239d012c1fb"><code>c18827e</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1183">#1183</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Renamed <code>assetNamePattern</code>
to <code>releaseAssetNamePattern</code>.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/766720b094a5b1122967225a75ac244e9ebcac42"><code>766720b</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1172">#1172</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Removed the feature to automatically
initialize a Tauri project.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/25f373077afb9028b9cc3caf509eb67d86d57066"><code>25f3730</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1208">#1208</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Renamed
<code>includeUpdaterJson</code> to <code>uploadUpdaterJson</code> for
consistency with other similar options.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/3fc1c3e593927da7a12f0ae45028973d12202ef4"><code>53c8863</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1314">#1315</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Removed Gitea support.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/6d11c279be59c2d237278e856acccb1ece44d20a"><code>6d11c27</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1185">#1185</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Breaking Change</strong>: Removed
<code>updaterJsonKeepUniversal</code>. This is now always enabled.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/7485c956ab7bbf2708a943bf07b3fefc1e230256"><code>7485c95</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1169">#1169</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Switch from unmaintained <code>@iarna/toml</code> to
<code>smol-toml</code>. No user-facing changes.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/8236c82510173ef930d644f38790c4cf3fd43cf2"><code>8236c82</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1277">#1277</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
<strong>Semi-Breaking Change</strong>: The action will now update the
name and body of existing releases.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/05c1b09fe50e358ee27fa6ae2a8072b3f6e22155"><code>05c1b09</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1178">#1178</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Added built-in variant of <a
href="https://github.com/actions/upload-artifact/"><code>actions/upload-artifact</code></a>
to easily upload each bundle as a seperate archive. This may be removed
once <a
href="https://redirect.github.com/actions/upload-artifact/issues/331">actions/upload-artifact#331</a>
lands.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/6434f9aaff0a2daf202596b552c34c463d0e43ed"><code>6434f9a</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1296">#1296</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../Ludea"><code>@​Ludea</code></a>)
Added initial support for <code>vite+</code>.</li>
</ul>
<h2>[0.6.2]</h2>
<ul>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/73e111f47ab8fda0af8f09997c91a9e1e83182a2"><code>73e111f</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1288">#1288</a>)
The action can now detect the workspace root correctly if the tauri
project is configured as the cargo workspace root.</li>
</ul>
<h2>[0.6.1]</h2>
<ul>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/ad5c2710e257ef83afcf261722eeaa6a33b4e0f7"><code>ad5c271</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1241">#1241</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
Fixed an issue that caused the action to only read one
<code>--config</code> arg.</li>
</ul>
<h2>[0.6.0]</h2>
<ul>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/e918a068fe65bde93e97fe0d4024e45dc568c536"><code>e918a06</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1133">#1133</a>)
Encode <code>tagName</code> option value in <code>latest.json</code>
URL.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/45acc1922a6fe824bcffed136e9b5d80660ed050"><code>45acc19</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1164">#1164</a>)
Add <code>generateReleaseNotes</code> config to use GitHub's release
notes API to auto generate the release name and/or body.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/59a1a70223956f123844e5f309cf5cf82d279685"><code>59a1a70</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1166">#1166</a>)
Fix default file name pattern to match tauri's file names again.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/08112f729df63ddc8f64de706284e8518f1b1e73"><code>08112f7</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1106">#1106</a>)
Added experimental support for Gitea hosted instances.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/08112f729df63ddc8f64de706284e8518f1b1e73"><code>08112f7</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1106">#1106</a>)
Added a config to set the GitHub API URL which should help users with
self-hosted instances and those using GitHub Enterprise.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/b0671399f144ae28a851ef8c3e0540b5d5c6cd37"><code>b067139</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1130">#1130</a>)
The action now uses node v24 which raises the minimum GitHub runner
version to <code>v2.327.1</code>.</li>
</ul>
<h2>[0.5.24]</h2>
<ul>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/c5d6ac7494763a167f5acf6e6c73664fc7360468"><code>c5d6ac7</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1152">#1152</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../FabianLars"><code>@​FabianLars</code></a>)
The <code>latest.json</code> file now contains
<code>{os}-{arch}-{installer}</code> keys as well to support multiple
installer formats per platform. This requires
<code>tauri-plugin-updater</code> version <code>2.10.0</code> or
above.</li>
<li><a
href="https://www.github.com/tauri-apps/tauri-action/commit/0085932c0f8ac87d9757582e84c0fc6fbc0f7699"><code>0085932</code></a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/pull/1141">#1141</a>
by <a
href="https://www.github.com/tauri-apps/tauri-action/../../jarjk"><code>@​jarjk</code></a>)
Added option to upload the app's binary alongside installers.</li>
</ul>
<h2>[0.5.23]</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/1deb371b0cd8bd54025b384f1cd735e725c4060f"><code>1deb371</code></a>
Apply Version Updates From Current Changes (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1191">#1191</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/35033cf3e55baf3cfc8bb7f3fdaeb41c908aa00d"><code>35033cf</code></a>
chore(deps): update dependency <code>@​vercel/ncc</code> to v0.44.0 (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1323">#1323</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/5ead4aa94ca5172c8b45b46849a512396ad5b7e4"><code>5ead4aa</code></a>
refactor: simplify createArtifact function (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1327">#1327</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/789968274b5c40e92c1081032f8d3da9be086756"><code>7899682</code></a>
ci: update actions (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1328">#1328</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/f201b79671e09564969e834a03be5dde2f6c45b8"><code>f201b79</code></a>
chore(deps): update dependency <code>@​types/node</code> to v24.13.2 (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1320">#1320</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/5c7403d73ff9d9aab2efc440adbacfe51071418a"><code>5c7403d</code></a>
feat: default naming scheme for mobile assets, closes <a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1317">#1317</a>
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1326">#1326</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/71e781de46da4143f68c4058e087bc2278b6db8b"><code>71e781d</code></a>
chore(deps): update dependency <code>@​biomejs/biome</code> to v2.5.1
(<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1318">#1318</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/f51677a4652aed7164481c63c47293a5f0da9af1"><code>f51677a</code></a>
chore(deps): update dependency smol-toml to v1.7.0 (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1324">#1324</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/61337b436e85a75347fec553393c9e2be16a0d85"><code>61337b4</code></a>
chore(deps): update dependency <code>@​types/node</code> to v24.12.3 (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1316">#1316</a>)</li>
<li><a
href="https://github.com/tauri-apps/tauri-action/commit/53c88630c5e183c910a2810db86170b7bb4872f6"><code>53c8863</code></a>
refactor: Use github api as download url in latest.json (<a
href="https://redirect.github.com/tauri-apps/tauri-action/issues/1315">#1315</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tauri-apps/tauri-action/compare/84b9d35b5fc46c1e45415bdb6144030364f7ebc5...1deb371b0cd8bd54025b384f1cd735e725c4060f">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludy <Ludy87@users.noreply.github.com>
---
 .github/workflows/multiOSReleases.yml | 3 +--
 .github/workflows/tauri-build.yml     | 6 +++---
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index ebf2585bb1..74a6e74641 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -475,7 +475,7 @@ jobs:
           fi
 
       - name: Build Tauri app
-        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0.6.2
+        uses: tauri-apps/tauri-action@1deb371b0cd8bd54025b384f1cd735e725c4060f # v1.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
@@ -505,7 +505,6 @@ jobs:
           projectPath: ./frontend/editor
           tauriScript: npx tauri
           args: ${{ matrix.args }}
-          updaterJsonKeepUniversal: true
 
       # Bundled libwayland conflicts with the host's on some distros (Fedora
       # Wayland: EGL_BAD_PARAMETER, blank window - #6878). Repack without it,
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index 09422a8093..9fca8ec994 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -386,7 +386,7 @@ jobs:
 
       - name: Build Tauri app (signed)
         if: env.SIGN_BUNDLE == 'true'
-        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0.6.2
+        uses: tauri-apps/tauri-action@1deb371b0cd8bd54025b384f1cd735e725c4060f # v1.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
@@ -421,7 +421,7 @@ jobs:
 
       - name: Build Tauri app (unsigned)
         if: env.SIGN_BUNDLE != 'true'
-        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0.6.2
+        uses: tauri-apps/tauri-action@1deb371b0cd8bd54025b384f1cd735e725c4060f # v1.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SIGN: "0"
@@ -447,7 +447,7 @@ jobs:
       - name: Build Tauri app (Linux AppImage)
         if: matrix.platform == 'ubuntu-22.04' && !inputs.minimal
         continue-on-error: true
-        uses: tauri-apps/tauri-action@84b9d35b5fc46c1e45415bdb6144030364f7ebc5 # v0.6.2
+        uses: tauri-apps/tauri-action@1deb371b0cd8bd54025b384f1cd735e725c4060f # v1.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SIGN: ${{ (inputs.sign && env.RELEASE_GPG_PRIVATE_KEY != '' && github.ref == 'refs/heads/main') && '1' || '0' }}

From be7aee3ef2f49024aa9622c66138fbb520ef297b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 09:53:48 +0100
Subject: [PATCH 098/122] build(deps): bump actions/setup-python from 6.2.0 to
 7.0.0 (#7294)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-python](https://github.com/actions/setup-python)
from 6.2.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1330">actions/setup-python#1330</a></li>
<li>Pin SHA commits and update docs with latest versions by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1338">actions/setup-python#1338</a></li>
<li>Remove the pip-install input by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1336">actions/setup-python#1336</a></li>
</ul>
<h3>Bug Fix</h3>
<ul>
<li>Fix to Classify stderr warning messages as warnings instead of
errors in annotations by <a
href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li>Validate and retry manifest fetch to prevent silent failures by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1332">actions/setup-python#1332</a></li>
</ul>
<h3>Dependency Upgrade</h3>
<ul>
<li>Bump certifi from 2020.6.20 to 2024.7.4 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1328">actions/setup-python#1328</a></li>
<li>Remove EOL Python versions and Bumps numpy text fixture by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1333">actions/setup-python#1333</a></li>
<li>Upgrade <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li><a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v7.0.0">https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add RHEL support and include Linux distro in cache keys by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1323">actions/setup-python#1323</a></li>
<li>Fix pip cache error handling on Windows by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1040">actions/setup-python#1040</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1281">actions/setup-python#1281</a></li>
<li>Upgrade actions dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1303">actions/setup-python#1303</a></li>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1324">actions/setup-python#1324</a></li>
<li>Upgrade dependency versions and test workflow configuration by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1322">actions/setup-python#1322</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Update advanced-usage.md by <a
href="https://github.com/Dunky-Z"><code>@​Dunky-Z</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/811">actions/setup-python#811</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1303">actions/setup-python#1303</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1324">actions/setup-python#1324</a></li>
<li><a href="https://github.com/Dunky-Z"><code>@​Dunky-Z</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/811">actions/setup-python#811</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0">https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97"><code>5fda3b9</code></a>
Pin SHA commits and update docs with latest versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1338">#1338</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-python/issues/1337">#1337</a>
from actions/philip-gai/bump-actions-cache-6-2-0</li>
<li><a
href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a>
Remove the pip-install input (<a
href="https://redirect.github.com/actions/setup-python/issues/1336">#1336</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932"><code>f8cf429</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-python/issues/1330">#1330</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5"><code>54baeea</code></a>
Validate and retry manifest fetch to prevent silent failures (<a
href="https://redirect.github.com/actions/setup-python/issues/1332">#1332</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a>
Annotation code fix (<a
href="https://redirect.github.com/actions/setup-python/issues/1335">#1335</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a>
remove EOL Python versions and Bumps numpy text fixture (<a
href="https://redirect.github.com/actions/setup-python/issues/1333">#1333</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a>
Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data
(<a
href="https://redirect.github.com/actions/setup-python/issues/1328">#1328</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/ece7cb06caefa5fff74198d8649806c4678c61a1"><code>ece7cb0</code></a>
Fix pip cache error handling on Windows. (<a
href="https://redirect.github.com/actions/setup-python/issues/1040">#1040</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/1d18d7af5f767c1259ede05a0a5bcc30f3dcf1cf"><code>1d18d7a</code></a>
Update advanced-usage.md (<a
href="https://redirect.github.com/actions/setup-python/issues/811">#811</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-python/compare/v6.2.0...5fda3b95a4ea91299a34e894583c3862153e4b97">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build-enterprise.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index 398cca3144..a1f521be66 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -330,7 +330,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
           cache: "pip"

From 5ef93ac1e8dd7f32b7eb4eb356a85360fb268347 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 08:53:57 +0000
Subject: [PATCH 099/122] build(deps): bump docker/metadata-action from 6.1.0
 to 6.2.0 (#7307)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[docker/metadata-action](https://github.com/docker/metadata-action) from
6.1.0 to 6.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/metadata-action/releases">docker/metadata-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<ul>
<li>Preserve names in esbuild bundle by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/metadata-action/pull/689">docker/metadata-action#689</a></li>
<li>Bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in <a
href="https://redirect.github.com/docker/metadata-action/pull/663">docker/metadata-action#663</a></li>
<li>Bump <code>@​actions/github</code> from 9.0.0 to 9.1.1 in <a
href="https://redirect.github.com/docker/metadata-action/pull/666">docker/metadata-action#666</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in
<a
href="https://redirect.github.com/docker/metadata-action/pull/672">docker/metadata-action#672</a>
<a
href="https://redirect.github.com/docker/metadata-action/pull/696">docker/metadata-action#696</a></li>
<li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a
href="https://redirect.github.com/docker/metadata-action/pull/690">docker/metadata-action#690</a></li>
<li>Bump <code>@​sigstore/verify</code> from 3.1.0 to 3.1.1 in <a
href="https://redirect.github.com/docker/metadata-action/pull/693">docker/metadata-action#693</a></li>
<li>Bump csv-parse from 6.2.1 to 7.0.0 in <a
href="https://redirect.github.com/docker/metadata-action/pull/683">docker/metadata-action#683</a></li>
<li>Bump js-yaml from 4.1.1 to 4.3.0 in <a
href="https://redirect.github.com/docker/metadata-action/pull/688">docker/metadata-action#688</a></li>
<li>Bump moment-timezone from 0.6.1 to 0.6.2 in <a
href="https://redirect.github.com/docker/metadata-action/pull/664">docker/metadata-action#664</a></li>
<li>Bump semver from 7.7.4 to 7.8.5 in <a
href="https://redirect.github.com/docker/metadata-action/pull/665">docker/metadata-action#665</a>
<a
href="https://redirect.github.com/docker/metadata-action/pull/695">docker/metadata-action#695</a></li>
<li>Bump sigstore from 4.1.0 to 4.1.1 in <a
href="https://redirect.github.com/docker/metadata-action/pull/694">docker/metadata-action#694</a></li>
<li>Bump tmp from 0.2.5 to 0.2.7 in <a
href="https://redirect.github.com/docker/metadata-action/pull/673">docker/metadata-action#673</a></li>
<li>Bump undici from 6.25.0 to 6.27.0 in <a
href="https://redirect.github.com/docker/metadata-action/pull/686">docker/metadata-action#686</a></li>
<li>Bump vite from 7.3.2 to 7.3.6 in <a
href="https://redirect.github.com/docker/metadata-action/pull/685">docker/metadata-action#685</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/metadata-action/compare/v6.1.0...v6.2.0">https://github.com/docker/metadata-action/compare/v6.1.0...v6.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/metadata-action/commit/dc802804100637a589fabce1cb79ff13a1411302"><code>dc80280</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/metadata-action/issues/696">#696</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/metadata-action/commit/2b9fe830efc58cb7b0fab7c94300b1afa01864db"><code>2b9fe83</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/metadata-action/commit/8128ce30ab370fd360c8423698dcc077f2db8087"><code>8128ce3</code></a>
chore(deps): Bump <code>@​docker/actions-toolkit</code> from 0.91.0 to
0.92.0</li>
<li><a
href="https://github.com/docker/metadata-action/commit/1d1c89551edb081628e818368680beffb2bbccee"><code>1d1c895</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/metadata-action/issues/695">#695</a>
from docker/dependabot/npm_and_yarn/semver-7.8.5</li>
<li><a
href="https://github.com/docker/metadata-action/commit/7f0c2dd4c83ea6258f78bf2fc6a02908417518ad"><code>7f0c2dd</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/metadata-action/issues/694">#694</a>
from docker/dependabot/npm_and_yarn/sigstore-4.1.1</li>
<li><a
href="https://github.com/docker/metadata-action/commit/025f8c5c8167edab853571a387d8e80ccc1e91ed"><code>025f8c5</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/metadata-action/commit/e98d63c3081990566e174100a3afaa97aefbbcf3"><code>e98d63c</code></a>
chore(deps): Bump semver from 7.8.1 to 7.8.5</li>
<li><a
href="https://github.com/docker/metadata-action/commit/37d93799507b94cf1c1885efd7278d52a0fb806a"><code>37d9379</code></a>
chore(deps): Bump sigstore from 4.1.0 to 4.1.1</li>
<li><a
href="https://github.com/docker/metadata-action/commit/a1b80728476a956a25c5eeaff91c4dc46e7ac1bc"><code>a1b8072</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/metadata-action/issues/690">#690</a>
from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1</li>
<li><a
href="https://github.com/docker/metadata-action/commit/e0e338106d6ae0da5b44537049a34620b3559a5c"><code>e0e3381</code></a>
[dependabot skip] chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/metadata-action&package-manager=github_actions&previous-version=6.1.0&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/push-docker-base.yml | 2 +-
 .github/workflows/push-docker.yml      | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index 46dd40c78f..4f19150306 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -75,7 +75,7 @@ jobs:
 
       - name: Generate tags for base image
         id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           images: |
             ${{ secrets.DOCKER_HUB_ORG_USERNAME }}/stirling-pdf-base
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index f4416a726d..d6ff9be7fe 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -125,7 +125,7 @@ jobs:
       - name: Generate tags for latest
         id: meta
         if: env.RUN_MAIN_APP == 'true'
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         with:
           images: |
             ${{ secrets.DOCKER_HUB_USERNAME }}/s-pdf
@@ -173,7 +173,7 @@ jobs:
 
       - name: Generate tags for latest-fat
         id: meta-fat
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         if: env.RUN_MAIN_APP == 'true' && github.ref != 'refs/heads/main' && github.ref != 'refs/heads/testMain'
         with:
           images: |
@@ -217,7 +217,7 @@ jobs:
 
       - name: Generate tags for ultra-lite
         id: meta-lite
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
         if: env.RUN_MAIN_APP == 'true' && github.ref != 'refs/heads/main' && github.ref != 'refs/heads/testMain'
         with:
           images: |

From 18516b88ff80d82f8235a18167a1f5f7b4a91a2b Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Fri, 7 Aug 2026 10:00:18 +0100
Subject: [PATCH 100/122] Fix hidden circular dependency in watched folders
 code (#7308)

# Description of Changes
The restructuring of the frontend PR (#7062) has highlighted a couple of
issues with the source which are currently hidden due to the structure
of the code. This PR fixes the issues in Watched Folders:
- There's a circular dependency in TS code
- The `.gitignore` file excludes the watched folders dir by accident
---
 .gitignore                                    |  3 ++
 .../watchedFolders/WatchedFolderHomePage.tsx  | 13 +------
 .../watchedFolders/WatchedFolderSection.tsx   |  2 +-
 .../WatchedFolderWorkbenchView.tsx            | 31 ++-------------
 .../WatchedFoldersRegistration.tsx            |  7 ++--
 .../watchedFolders/watchedFolderShared.ts     | 38 +++++++++++++++++++
 6 files changed, 52 insertions(+), 42 deletions(-)
 create mode 100644 frontend/editor/src/proprietary/components/watchedFolders/watchedFolderShared.ts

diff --git a/.gitignore b/.gitignore
index f47b020013..8cc854bb79 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,6 +22,9 @@ pipeline/
 customFiles/
 configs/
 watchedFolders/
+# The rule above targets the app's runtime watched-folders working dir, but it
+# also matches this frontend source component dir; keep the source tracked.
+!frontend/editor/src/proprietary/components/watchedFolders/
 clientWebUI/
 # Scratch dir used by local fixture-regeneration runs (see
 # app/proprietary/src/test/resources/db-migration-fixtures/README.md).
diff --git a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderHomePage.tsx b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderHomePage.tsx
index 0f0b2b5bd5..330ee1fdee 100644
--- a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderHomePage.tsx
+++ b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderHomePage.tsx
@@ -32,19 +32,10 @@ import { useNavigationActions } from "@app/contexts/NavigationContext";
 import {
   WATCHED_FOLDER_VIEW_ID,
   WATCHED_FOLDER_WORKBENCH_ID,
-} from "@app/components/watchedFolders/WatchedFoldersRegistration";
-import { timeAgo } from "@app/components/watchedFolders/WatchedFolderWorkbenchView";
+  timeAgo,
+} from "@app/components/watchedFolders/watchedFolderShared";
 import "@app/components/watchedFolders/WatchedFolders.css";
 
-export function humaniseOp(op: string): string {
-  return op
-    .replace(/-pdf$|-pages$|-documents?$/i, "")
-    .replace(/[-_]/g, " ")
-    .replace(/\bocr\b/gi, "OCR")
-    .replace(/\b\w/g, (c) => c.toUpperCase())
-    .trim();
-}
-
 interface FolderCardProps {
   folder: WatchedFolder;
   status: "idle" | "processing" | "done";
diff --git a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderSection.tsx b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderSection.tsx
index 94783a0929..544e8d14ef 100644
--- a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderSection.tsx
+++ b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderSection.tsx
@@ -16,7 +16,7 @@ import { automationStorage } from "@app/services/automationStorage";
 import {
   WATCHED_FOLDER_VIEW_ID,
   WATCHED_FOLDER_WORKBENCH_ID,
-} from "@app/components/watchedFolders/WatchedFoldersRegistration";
+} from "@app/components/watchedFolders/watchedFolderShared";
 
 export function WatchedFolderSection() {
   const { t } = useTranslation();
diff --git a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderWorkbenchView.tsx b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderWorkbenchView.tsx
index f77bcf0cb5..9eb1463eea 100644
--- a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderWorkbenchView.tsx
+++ b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFolderWorkbenchView.tsx
@@ -47,7 +47,9 @@ import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import {
   WATCHED_FOLDER_VIEW_ID,
   WATCHED_FOLDER_WORKBENCH_ID,
-} from "@app/components/watchedFolders/WatchedFoldersRegistration";
+  timeAgo,
+  humaniseOp,
+} from "@app/components/watchedFolders/watchedFolderShared";
 import { automationStorage } from "@app/services/automationStorage";
 import {
   useFolderAutomation,
@@ -58,10 +60,7 @@ import { AutomationConfig } from "@app/types/automation";
 import { iconMap } from "@app/components/tools/automate/iconMap";
 import { fileStorage } from "@app/services/fileStorage";
 import { FileId, StirlingFile } from "@app/types/fileContext";
-import {
-  WatchedFolderHomePage,
-  humaniseOp,
-} from "@app/components/watchedFolders/WatchedFolderHomePage";
+import { WatchedFolderHomePage } from "@app/components/watchedFolders/WatchedFolderHomePage";
 import { useNavigationActions } from "@app/contexts/NavigationContext";
 import { FilePreviewModal } from "@app/components/watchedFolders/FilePreviewModal";
 import { folderDirectoryHandleStorage } from "@app/services/folderDirectoryHandleStorage";
@@ -174,28 +173,6 @@ interface WatchedFolderWorkbenchViewProps {
   };
 }
 
-export function timeAgo(date: Date, t: TFunction): string {
-  const secs = Math.floor((Date.now() - date.getTime()) / 1000);
-  if (secs < 60) return t("watchedFolders.time.justNow", "just now");
-  const mins = Math.floor(secs / 60);
-  if (mins < 60)
-    return t("watchedFolders.time.minutesAgo", {
-      count: mins,
-      defaultValue: `${mins}m ago`,
-    });
-  const hours = Math.floor(mins / 60);
-  if (hours < 24)
-    return t("watchedFolders.time.hoursAgo", {
-      count: hours,
-      defaultValue: `${hours}h ago`,
-    });
-  const days = Math.floor(hours / 24);
-  return t("watchedFolders.time.daysAgo", {
-    count: days,
-    defaultValue: `${days}d ago`,
-  });
-}
-
 function RetryCountdown({
   nextRetryAt,
   t,
diff --git a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFoldersRegistration.tsx b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFoldersRegistration.tsx
index 36d4042f02..a0249163db 100644
--- a/frontend/editor/src/proprietary/components/watchedFolders/WatchedFoldersRegistration.tsx
+++ b/frontend/editor/src/proprietary/components/watchedFolders/WatchedFoldersRegistration.tsx
@@ -4,9 +4,10 @@ import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import { WatchedFolderWorkbenchView } from "@app/components/watchedFolders/WatchedFolderWorkbenchView";
 import { seedDefaultFolders } from "@app/data/watchedFolderPresets";
 import { useWatchedFolderUrlSync } from "@app/hooks/useWatchedFolderUrlSync";
-
-export const WATCHED_FOLDER_VIEW_ID = "watchedFolder";
-export const WATCHED_FOLDER_WORKBENCH_ID = "custom:watchedFolder" as const;
+import {
+  WATCHED_FOLDER_VIEW_ID,
+  WATCHED_FOLDER_WORKBENCH_ID,
+} from "@app/components/watchedFolders/watchedFolderShared";
 
 export default function WatchedFoldersRegistration() {
   const { t } = useTranslation();
diff --git a/frontend/editor/src/proprietary/components/watchedFolders/watchedFolderShared.ts b/frontend/editor/src/proprietary/components/watchedFolders/watchedFolderShared.ts
new file mode 100644
index 0000000000..3e8221d185
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/watchedFolders/watchedFolderShared.ts
@@ -0,0 +1,38 @@
+// Leaf module for the watched-folders trio (registration, workbench view, home
+// page): the shared view IDs plus small pure formatters. Kept dependency-free so
+// those three components don't have to import one another and form a cycle.
+import type { TFunction } from "i18next";
+
+export const WATCHED_FOLDER_VIEW_ID = "watchedFolder";
+export const WATCHED_FOLDER_WORKBENCH_ID = "custom:watchedFolder" as const;
+
+export function timeAgo(date: Date, t: TFunction): string {
+  const secs = Math.floor((Date.now() - date.getTime()) / 1000);
+  if (secs < 60) return t("watchedFolders.time.justNow", "just now");
+  const mins = Math.floor(secs / 60);
+  if (mins < 60)
+    return t("watchedFolders.time.minutesAgo", {
+      count: mins,
+      defaultValue: `${mins}m ago`,
+    });
+  const hours = Math.floor(mins / 60);
+  if (hours < 24)
+    return t("watchedFolders.time.hoursAgo", {
+      count: hours,
+      defaultValue: `${hours}h ago`,
+    });
+  const days = Math.floor(hours / 24);
+  return t("watchedFolders.time.daysAgo", {
+    count: days,
+    defaultValue: `${days}d ago`,
+  });
+}
+
+export function humaniseOp(op: string): string {
+  return op
+    .replace(/-pdf$|-pages$|-documents?$/i, "")
+    .replace(/[-_]/g, " ")
+    .replace(/\bocr\b/gi, "OCR")
+    .replace(/\b\w/g, (c) => c.toUpperCase())
+    .trim();
+}

From 84b0b69fe7109ce5ac29a0c0a64d93fd0fd8c656 Mon Sep 17 00:00:00 2001
From: kastenherri <116314318+kastenherri@users.noreply.github.com>
Date: Fri, 7 Aug 2026 11:29:13 +0200
Subject: [PATCH 101/122] Frontend: de-DE: fix inconsistent translation (#6536)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes
Change description text for hotkey settings in the german locale to
"Kürzel ändern" to match the change button.

before:
<img width="731" height="246" alt="stirling-inconsistency-shortcut"
src="https://github.com/user-attachments/assets/a0e4bcb9-d2b6-4759-a7cd-75632176eebd"
/>

after:
<img width="776" height="254" alt="hotkey-inconsistency-fix"
src="https://github.com/user-attachments/assets/e0da4d26-f923-4e15-922f-e0e5e21f062f"
/>

Closes #6535

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [x] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [x] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 frontend/editor/public/locales/de-DE/translation.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/editor/public/locales/de-DE/translation.toml b/frontend/editor/public/locales/de-DE/translation.toml
index 3736b2adae..6a2d03a1c8 100644
--- a/frontend/editor/public/locales/de-DE/translation.toml
+++ b/frontend/editor/public/locales/de-DE/translation.toml
@@ -8925,7 +8925,7 @@ capturing = "Tasten drücken… (Esc zum Abbrechen)"
 change = "Kürzel ändern"
 customBadge = "Benutzerdefiniert"
 defaultLabel = "Standard: {{shortcut}}"
-description = "Tastenkürzel für schnellen Tool-Zugriff anpassen. Klicken Sie auf \"Shortcut ändern\" und drücken Sie eine neue Tastenkombination. Drücken Sie Esc, um abzubrechen."
+description = "Tastenkürzel für schnellen Tool-Zugriff anpassen. Klicken Sie auf \"Kürzel ändern\" und drücken Sie eine neue Tastenkombination. Drücken Sie Esc, um abzubrechen."
 errorConflict = "Kürzel wird bereits von {{tool}} verwendet."
 none = "Nicht zugewiesen"
 noShortcut = "Kein Kürzel festgelegt"

From fa11034a9971c3e7c4b564e1fb059ae489585425 Mon Sep 17 00:00:00 2001
From: Matheus Saito <106726276+MattSaito@users.noreply.github.com>
Date: Fri, 7 Aug 2026 06:53:33 -0300
Subject: [PATCH 102/122] Added Measurement Scale Support for Architectural
 Drawings (#6121) (#6215)

Fix #6121
# Description of Changes

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes (#6121 )
-->
This PR expands the viewer ruler/measurement tool with real-world scale
support. Users can now apply preset scales, define custom scales,
calibrate a scale by drawing a reference measurement and entering its
known real-world distance, and view measurements with scaled real-world
values.

It also refactors PDF `/Measure` and `/VP` scale extraction out of
`EmbedPdfViewer` into a dedicated utility, centralizes ruler state
management in a dedicated hook, persists ruler measurements and selected
scales per file during the browser session, remembers the last
calibration unit locally, and updates the ruler overlay so measurements
remain aligned with the PDF page during rotation and scrolling.

**New Files**

- `RulerMeasurementLayer.tsx` - Renders ruler measurements in the SVG
overlay, including lines, points, labels, page/scaled values, delete
controls, live previews, clear controls, and label visibility modes.

- `RulerScaleSettingsButton.tsx` - Adds the scale settings
button/popover to the viewer toolbar.

- `ScaleCalibrationDialog.tsx` - Provides the calibration modal where
users enter a known real-world distance to calculate the scale
automatically.

- `ScaleSettingsPanel.tsx` - Provides preset scales, custom scale input,
calibration entry point, active scale display, and reset controls.

- `useMeasurementManager.ts` - Centralizes ruler state, custom scale
state, calibration flow, per-file measurements, session persistence, and
loading of PDF-derived scale data.

- `measurementPreferences.ts` - Persists the last calibration unit in
`localStorage`.

- `measurementTypes.ts` - Defines shared measurement, point, scale, page
scale, and viewport scale types.

- `measurementUtils.ts` - Provides unit conversion, scale calculation,
validation, formatting, calibration helpers, and session storage
helpers.

- `measurementUtils.test.ts` - Adds unit tests for scale calculations,
unit conversion, preset parsing, ratio derivation, and calibration.

- `pdfMeasurementExtraction.ts` - Moves PDF `/Measure` and `/VP` scale
extraction into a dedicated utility.


**Changed Files**

- `EmbedPdfViewer.tsx` - Removes inline PDF scale extraction and
delegates ruler/measurement state to `useMeasurementManager`; integrates
the ruler overlay, custom scale support, restored measurements, and
calibration dialog.

- `LocalEmbedPDF.tsx` - Adds page-level metadata used by the ruler
overlay, including page width, height, and native page rotation.

- `RotateAPIBridge.tsx` - Adds immediate rotation update propagation so
ruler measurements can update their page-anchored positions during
rotation changes.

- `RulerOverlay.tsx` - Refactors the ruler overlay to use shared
measurement types/utilities, support custom scales, calibration
measurements, restored measurements, measurement change listeners,
rotation-aware positioning, and scroll compensation, also holding Alt
key will activate pass-through behavior so labels do not block ruler
interactions.

- `useViewerWorkbenchBarButtons.tsx` - Adds the ruler scale settings
action and coordinates ruler, pan mode, and calibration behavior.

- `ViewerContext.tsx` - Adds immediate rotation notification support
used by ruler measurements while viewer rotation changes are applied.

- `en-GB/translation.toml` and `en-US/translation.toml` - Add UI text
for scale settings, calibration actions, ruler measurement values, and
ruler label controls.


---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [x] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [x] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [x] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

Current scale panel :

<img width="1316" height="515" alt="Captura de tela de 2026-05-31
21-57-53"
src="https://github.com/user-attachments/assets/df0ffb7d-4546-450c-8380-409658852a87"
/>

Current calibration input :

<img width="1021" height="522" alt="Captura de tela de 2026-05-31
21-59-52"
src="https://github.com/user-attachments/assets/e17c14e7-fec7-42e9-af48-33ef825acb6c"
/>

Example of usage :

<img width="1316" height="760" alt="Captura de tela de 2026-05-31
22-31-01"
src="https://github.com/user-attachments/assets/fcd3578e-1eaa-42d3-b30b-3fc87c796f90"
/>


### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

---------

Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 .../public/locales/en-GB/translation.toml     |   35 +
 .../public/locales/en-US/translation.toml     |   35 +
 .../core/components/viewer/EmbedPdfViewer.tsx |  174 +--
 .../core/components/viewer/LocalEmbedPDF.tsx  |   81 +-
 .../components/viewer/RotateAPIBridge.tsx     |   17 +-
 .../viewer/RulerMeasurementLayer.tsx          |  950 ++++++++++++
 .../core/components/viewer/RulerOverlay.tsx   | 1295 ++++++++---------
 .../viewer/RulerScaleSettingsButton.tsx       |   82 ++
 .../viewer/ScaleCalibrationDialog.tsx         |  190 +++
 .../components/viewer/ScaleSettingsPanel.tsx  |  321 ++++
 .../viewer/useViewerWorkbenchBarButtons.tsx   |   66 +
 .../src/core/contexts/ViewerContext.tsx       |   17 +
 .../src/core/hooks/useMeasurementManager.ts   |  293 ++++
 .../src/core/utils/measurementPreferences.ts  |   24 +
 .../editor/src/core/utils/measurementTypes.ts |   45 +
 .../src/core/utils/measurementUtils.test.ts   |  116 ++
 .../editor/src/core/utils/measurementUtils.ts |  398 +++++
 .../core/utils/pdfMeasurementExtraction.ts    |  215 +++
 18 files changed, 3536 insertions(+), 818 deletions(-)
 create mode 100644 frontend/editor/src/core/components/viewer/RulerMeasurementLayer.tsx
 create mode 100644 frontend/editor/src/core/components/viewer/RulerScaleSettingsButton.tsx
 create mode 100644 frontend/editor/src/core/components/viewer/ScaleCalibrationDialog.tsx
 create mode 100644 frontend/editor/src/core/components/viewer/ScaleSettingsPanel.tsx
 create mode 100644 frontend/editor/src/core/hooks/useMeasurementManager.ts
 create mode 100644 frontend/editor/src/core/utils/measurementPreferences.ts
 create mode 100644 frontend/editor/src/core/utils/measurementTypes.ts
 create mode 100644 frontend/editor/src/core/utils/measurementUtils.test.ts
 create mode 100644 frontend/editor/src/core/utils/measurementUtils.ts
 create mode 100644 frontend/editor/src/core/utils/pdfMeasurementExtraction.ts

diff --git a/frontend/editor/public/locales/en-GB/translation.toml b/frontend/editor/public/locales/en-GB/translation.toml
index fba28f6872..2bf1d347b6 100644
--- a/frontend/editor/public/locales/en-GB/translation.toml
+++ b/frontend/editor/public/locales/en-GB/translation.toml
@@ -8631,6 +8631,14 @@ text = "Rotate your PDF pages clockwise or anticlockwise in 90-degree increments
 [rotate.tooltip.header]
 title = "Rotate Settings Overview"
 
+[ruler]
+clearAll = "Clear all"
+hideAllLabels = "Hide all labels"
+hideSmallLabels = "Hide small labels"
+physicalValues = "Physical"
+scaled = "Scaled"
+showAllLabels = "Show all labels"
+
 [sanitize]
 desc = "Remove potentially harmful elements from PDF files."
 sanitizationResults = "Sanitisation Results"
@@ -8682,6 +8690,32 @@ title = "Sanitise PDF"
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Adjust page-scale"
 
+[scaleSettings]
+activeScale = "Active Scale"
+apply = "Apply Scale"
+applyCalibration = "Apply Calibration"
+calculatedScale = "Calculated scale"
+calibrate = "Calibrate"
+calibrating = "Calibrating"
+calibrationDistanceRequired = "Enter a real-world distance greater than zero"
+calibrationInvalid = "Unable to calculate scale from this measurement"
+calibrationPaperDistance = "Measured page distance: {{distance}}"
+calibrationTitle = "Calibrate Scale"
+calibrationTooltip = "Measure a known distance to calculate the scale automatically"
+customScale = "Custom Scale"
+noneSet = "No custom scale set"
+presets = "Preset Scales"
+ratio = "Scale Ratio"
+ratioHelp = "Ratio: 1 page unit = X real-world units"
+ratioPlaceholder = "e.g., 100"
+ratioPositive = "Ratio must be greater than zero"
+ratioRequired = "Ratio is required"
+realDistance = "Real-world distance"
+realDistancePlaceholder = "e.g., 5"
+reset = "Reset to Defaults"
+unit = "Unit"
+unitInvalid = "Invalid unit: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
@@ -10670,6 +10704,7 @@ redact = "Redact"
 rotateLeft = "Rotate Left"
 rotateRight = "Rotate Right"
 ruler = "Ruler / Measure"
+rulerSettings = "Scale Settings"
 save = "Save"
 saveAll = "Save All"
 saveAs = "Save As"
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index ea4f0399b9..4e4abe1ab7 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -9555,6 +9555,14 @@ text = "Rotate your PDF pages clockwise or counterclockwise in 90-degree increme
 [rotate.tooltip.header]
 title = "Rotate Settings Overview"
 
+[ruler]
+clearAll = "Clear all"
+hideAllLabels = "Hide all labels"
+hideSmallLabels = "Hide small labels"
+physicalValues = "Physical"
+scaled = "Scaled"
+showAllLabels = "Show all labels"
+
 [sanitize]
 desc = "Remove potentially harmful elements from PDF files."
 sanitizationResults = "Sanitization Results"
@@ -9606,6 +9614,32 @@ tags = "clean,secure,safe,remove-threats"
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Adjust page-scale"
 
+[scaleSettings]
+activeScale = "Active Scale"
+apply = "Apply Scale"
+applyCalibration = "Apply Calibration"
+calculatedScale = "Calculated scale"
+calibrate = "Calibrate"
+calibrating = "Calibrating"
+calibrationDistanceRequired = "Enter a real-world distance greater than zero"
+calibrationInvalid = "Unable to calculate scale from this measurement"
+calibrationPaperDistance = "Measured page distance: {{distance}}"
+calibrationTitle = "Calibrate Scale"
+calibrationTooltip = "Measure a known distance to calculate the scale automatically"
+customScale = "Custom Scale"
+noneSet = "No custom scale set"
+presets = "Preset Scales"
+ratio = "Scale Ratio"
+ratioHelp = "Ratio: 1 page unit = X real-world units"
+ratioPlaceholder = "e.g., 100"
+ratioPositive = "Ratio must be greater than zero"
+ratioRequired = "Ratio is required"
+realDistance = "Real-world distance"
+realDistancePlaceholder = "e.g., 5"
+reset = "Reset to Defaults"
+unit = "Unit"
+unitInvalid = "Invalid unit: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
@@ -11624,6 +11658,7 @@ redact = "Redact"
 rotateLeft = "Rotate Left"
 rotateRight = "Rotate Right"
 ruler = "Ruler / Measure"
+rulerSettings = "Scale Settings"
 save = "Save"
 saveAll = "Save All"
 saveAs = "Save As"
diff --git a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
index be4a4a9971..39d751790f 100644
--- a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
@@ -1,10 +1,4 @@
-import React, {
-  useCallback,
-  useEffect,
-  useLayoutEffect,
-  useRef,
-  useState,
-} from "react";
+import React, { useCallback, useEffect, useLayoutEffect, useRef } from "react";
 import { useTranslation } from "react-i18next";
 import { Box, Center, Text, Stack } from "@mantine/core";
 import { Button } from "@app/ui/Button";
@@ -43,109 +37,17 @@ import { useViewerWorkbenchBarButtons } from "@app/components/viewer/useViewerWo
 import { StampPlacementOverlay } from "@app/components/viewer/StampPlacementOverlay";
 import {
   RulerOverlay,
-  type PageMeasureScales,
-  type PageScaleInfo,
-  type ViewportScale,
+  type RulerOverlayHandle,
 } from "@app/components/viewer/RulerOverlay";
-import type { PDFDict, PDFNumber } from "@cantoo/pdf-lib";
 import { useWheelZoom } from "@app/hooks/useWheelZoom";
 import { useFormFill } from "@app/tools/formFill/FormFillContext";
 import { FormSaveBar } from "@app/tools/formFill/FormSaveBar";
 import { useViewerKeyCommand } from "@app/hooks/useViewerKeyCommand";
+import { useMeasurementManager } from "@app/hooks/useMeasurementManager";
+import { ScaleCalibrationDialog } from "@app/components/viewer/ScaleCalibrationDialog";
 import { usePolicyFileBadges } from "@app/hooks/usePolicyFileBadges";
 import { alert } from "@app/components/toast";
 
-// ─── Measure dictionary extraction ────────────────────────────────────────────
-
-async function extractPageMeasureScales(
-  file: Blob,
-): Promise<PageMeasureScales | null> {
-  try {
-    const {
-      PDFDocument,
-      PDFDict,
-      PDFName,
-      PDFArray,
-      PDFNumber,
-      PDFString,
-      PDFHexString,
-    } = await import("@cantoo/pdf-lib");
-    const pdfDoc = await PDFDocument.load(await file.arrayBuffer(), {
-      ignoreEncryption: true,
-    });
-
-    // Parse a Measure dict into a MeasureScale, or return null if malformed.
-    const parseScale = (measureObj: unknown) => {
-      if (!(measureObj instanceof PDFDict)) return null;
-      // @cantoo/pdf-lib ships without individual .d.ts files so instanceof can't narrow `unknown`
-      const m = measureObj as PDFDict;
-      const rObj = m.lookup(PDFName.of("R"));
-      const ratioLabel =
-        rObj instanceof PDFString || rObj instanceof PDFHexString
-          ? rObj.decodeText()
-          : "";
-      // D = distance array, X = x-axis fallback
-      let fmtArray = m.lookup(PDFName.of("D"));
-      if (!(fmtArray instanceof PDFArray)) fmtArray = m.lookup(PDFName.of("X"));
-      if (!(fmtArray instanceof PDFArray)) return null;
-      const firstFmt = fmtArray.lookup(0);
-      if (!(firstFmt instanceof PDFDict)) return null;
-      const cObj = firstFmt.lookup(PDFName.of("C"));
-      const uObj = firstFmt.lookup(PDFName.of("U"));
-      if (!(cObj instanceof PDFNumber) || cObj.asNumber() <= 0) return null;
-      const unit =
-        uObj instanceof PDFString || uObj instanceof PDFHexString
-          ? uObj.decodeText()
-          : "units";
-      return { factor: cObj.asNumber(), unit, ratioLabel };
-    };
-
-    const result: PageMeasureScales = new Map();
-
-    for (let i = 0; i < pdfDoc.getPageCount(); i++) {
-      const page = pdfDoc.getPage(i);
-      const pageHeight = page.getHeight();
-      const pageNode = page.node as unknown as PDFDict;
-      const viewports: ViewportScale[] = [];
-
-      // Spec-conformant: /VP array — each viewport can have its own scale and BBox
-      const vpObj = pageNode.lookup(PDFName.of("VP"));
-      if (vpObj instanceof PDFArray) {
-        for (let j = 0; j < vpObj.size(); j++) {
-          const vpEntry = vpObj.lookup(j);
-          if (!(vpEntry instanceof PDFDict)) continue;
-          const scale = parseScale(vpEntry.lookup(PDFName.of("Measure")));
-          if (!scale) continue;
-          let bbox: ViewportScale["bbox"] = null;
-          const bboxObj = vpEntry.lookup(PDFName.of("BBox"));
-          if (bboxObj instanceof PDFArray && bboxObj.size() >= 4) {
-            bbox = [
-              (bboxObj.lookup(0) as PDFNumber).asNumber(),
-              (bboxObj.lookup(1) as PDFNumber).asNumber(),
-              (bboxObj.lookup(2) as PDFNumber).asNumber(),
-              (bboxObj.lookup(3) as PDFNumber).asNumber(),
-            ];
-          }
-          viewports.push({ bbox, scale });
-        }
-      }
-
-      // Fallback: /Measure directly on page (non-conforming but seen in the wild)
-      if (viewports.length === 0) {
-        const scale = parseScale(pageNode.lookup(PDFName.of("Measure")));
-        if (scale) viewports.push({ bbox: null, scale });
-      }
-
-      if (viewports.length > 0)
-        result.set(i, { viewports, pageHeight } satisfies PageScaleInfo);
-    }
-
-    return result.size > 0 ? result : null;
-  } catch {
-    return null;
-  }
-}
-
 // ──────────────────────────────────────────────────────────────────────────────
 
 export interface EmbedPdfViewerProps {
@@ -378,6 +280,12 @@ const EmbedPdfViewerContent = ({
     return null;
   }, [previewFile, activeFiles, activeFileId]);
 
+  // Namespaced identifier for form-fill state; keep this aligned with FormFill.
+  const currentFileId = React.useMemo(
+    () => getFormFillFileId(currentFile),
+    [currentFile],
+  );
+
   // Stable id — avoids blob URL churn when FileContext recreates file objects each render.
   const currentFileStableId =
     currentFile && isStirlingFile(currentFile) ? currentFile.fileId : null;
@@ -1148,28 +1056,37 @@ const EmbedPdfViewerContent = ({
     };
   }, [applyChanges, setApplyChanges]);
 
-  // Ruler / measurement tool state
-  const [isRulerActive, setIsRulerActive] = useState(false);
-  const [pageMeasureScales, setPageMeasureScales] =
-    useState<PageMeasureScales | null>(null);
+  // Ruler / measurement tool state is handled by the dedicated hook.
+  const rulerOverlayRef = useRef<RulerOverlayHandle | null>(null);
 
-  useEffect(() => {
-    const file = effectiveFile?.file;
-    if (!file) {
-      setPageMeasureScales(null);
-      return;
-    }
-    let cancelled = false;
-    extractPageMeasureScales(file).then((scales) => {
-      if (!cancelled) setPageMeasureScales(scales);
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [effectiveFile]);
+  const {
+    isRulerActive,
+    setIsRulerActive,
+    pageMeasureScales,
+    customScale,
+    handleSetCustomScale,
+    isScaleCalibrationActive,
+    scaleCalibrationMeasurement,
+    startScaleCalibration,
+    cancelScaleCalibration,
+    handleScaleCalibrationMeasurement,
+    applyScaleCalibration,
+  } = useMeasurementManager({
+    currentFile,
+    effectiveFile,
+    rulerOverlayRef,
+  });
 
   // Register workbench bar buttons for the viewer
-  useViewerWorkbenchBarButtons(isRulerActive, setIsRulerActive);
+  useViewerWorkbenchBarButtons(
+    isRulerActive,
+    setIsRulerActive,
+    customScale,
+    handleSetCustomScale,
+    isScaleCalibrationActive,
+    startScaleCalibration,
+    cancelScaleCalibration,
+  );
 
   // Auto-fetch form fields when a PDF is loaded in the viewer.
   // In normal viewer mode, this uses PDFium WASM (frontend-only).
@@ -1178,10 +1095,6 @@ const EmbedPdfViewerContent = ({
   const formFillProviderRef = useRef(isFormFillToolActive);
 
   // Generate a unique identifier for the current file to detect file changes
-  const currentFileId = React.useMemo(() => {
-    return getFormFillFileId(currentFile);
-  }, [currentFile]);
-
   useEffect(() => {
     const fileChanged = currentFileId !== formFillFileIdRef.current;
     const providerChanged =
@@ -1358,11 +1271,22 @@ const EmbedPdfViewerContent = ({
               signatureConfig={signatureConfig}
             />
             <RulerOverlay
+              ref={rulerOverlayRef}
               containerRef={pdfContainerRef}
               isActive={isRulerActive}
               pageMeasureScales={pageMeasureScales}
+              customScale={customScale}
+              isCalibrationActive={isScaleCalibrationActive}
+              onCalibrationMeasure={handleScaleCalibrationMeasurement}
             />
           </Box>
+          <ScaleCalibrationDialog
+            opened={!!scaleCalibrationMeasurement}
+            measurement={scaleCalibrationMeasurement}
+            defaultUnit={customScale?.unit ?? "m"}
+            onApplyScale={applyScaleCalibration}
+            onClose={cancelScaleCalibration}
+          />
         </>
       )}
 
diff --git a/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx b/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx
index 547fba12e7..91c0dcf6a8 100644
--- a/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx
+++ b/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx
@@ -7,7 +7,7 @@ import React, {
 } from "react";
 import { createPluginRegistration } from "@embedpdf/core";
 import type { PluginRegistry } from "@embedpdf/core";
-import { EmbedPDF } from "@embedpdf/core/react";
+import { EmbedPDF, useDocumentState } from "@embedpdf/core/react";
 import { usePdfiumEngine } from "@embedpdf/engines/react";
 import { PrivateContent } from "@app/components/shared/PrivateContent";
 import { useAppConfig } from "@app/contexts/AppConfigContext";
@@ -147,6 +147,59 @@ interface LocalEmbedPDFProps {
   signatureOverlayApiRef?: React.RefObject<SignatureOverlayAPI | null>;
 }
 
+interface ViewerPageContainerProps {
+  documentId: string;
+  pageIndex: number;
+  width: number;
+  height: number;
+  children: React.ReactNode;
+}
+
+function normalizePageRotation(rotation: number | null | undefined): number {
+  const value =
+    typeof rotation === "number" && Number.isFinite(rotation) ? rotation : 0;
+  return ((Math.round(value) % 4) + 4) % 4;
+}
+
+function ViewerPageContainer({
+  documentId,
+  pageIndex,
+  width,
+  height,
+  children,
+}: ViewerPageContainerProps) {
+  const documentState = useDocumentState(documentId);
+  const pageRotation = normalizePageRotation(
+    documentState?.document?.pages?.[pageIndex]?.rotation,
+  );
+
+  return (
+    <div
+      data-page-index={pageIndex}
+      data-page-width={width}
+      data-page-height={height}
+      data-page-rotation={pageRotation}
+      style={{
+        width,
+        height,
+        position: "relative",
+        overflow: "hidden", // clip overlays (buttons, fields) that extend beyond the page rect
+        userSelect: "none",
+        WebkitUserSelect: "none",
+        MozUserSelect: "none",
+        msUserSelect: "none",
+        boxShadow: "0 2px 8px rgba(0, 0, 0, 0.15)",
+      }}
+      draggable={false}
+      onDragStart={(e) => e.preventDefault()}
+      onDrop={(e) => e.preventDefault()}
+      onDragOver={(e) => e.preventDefault()}
+    >
+      {children}
+    </div>
+  );
+}
+
 export function LocalEmbedPDF({
   file,
   url,
@@ -1023,25 +1076,11 @@ export function LocalEmbedPDF({
                                 documentId={documentId}
                                 pageIndex={pageIndex}
                               >
-                                <div
-                                  data-page-index={pageIndex}
-                                  data-page-width={width}
-                                  data-page-height={height}
-                                  style={{
-                                    width,
-                                    height,
-                                    position: "relative",
-                                    overflow: "hidden", // clip overlays (buttons, fields) that extend beyond the page rect
-                                    userSelect: "none",
-                                    WebkitUserSelect: "none",
-                                    MozUserSelect: "none",
-                                    msUserSelect: "none",
-                                    boxShadow: "0 2px 8px rgba(0, 0, 0, 0.15)",
-                                  }}
-                                  draggable={false}
-                                  onDragStart={(e) => e.preventDefault()}
-                                  onDrop={(e) => e.preventDefault()}
-                                  onDragOver={(e) => e.preventDefault()}
+                                <ViewerPageContainer
+                                  documentId={documentId}
+                                  pageIndex={pageIndex}
+                                  width={width}
+                                  height={height}
                                 >
                                   <div
                                     style={{
@@ -1173,7 +1212,7 @@ export function LocalEmbedPDF({
                                       onSelect={setSelectedSignatureId}
                                     />
                                   )}
-                                </div>
+                                </ViewerPageContainer>
                               </PagePointerProvider>
                             </Rotate>
                           );
diff --git a/frontend/editor/src/core/components/viewer/RotateAPIBridge.tsx b/frontend/editor/src/core/components/viewer/RotateAPIBridge.tsx
index b33b8a6819..a713aac519 100644
--- a/frontend/editor/src/core/components/viewer/RotateAPIBridge.tsx
+++ b/frontend/editor/src/core/components/viewer/RotateAPIBridge.tsx
@@ -21,7 +21,8 @@ export function RotateAPIBridge() {
 
 function RotateAPIBridgeInner({ documentId }: { documentId: string }) {
   const { provides: rotate, rotation } = useRotate(documentId);
-  const { registerBridge } = useViewer();
+  const { registerBridge, triggerImmediateRotationUpdate } = useViewer();
+  const isRotateAvailable = rotate !== null;
 
   // Keep rotate ref updated to avoid re-running effect when object reference changes
   const rotateRef = useRef(rotate);
@@ -29,6 +30,18 @@ function RotateAPIBridgeInner({ documentId }: { documentId: string }) {
     rotateRef.current = rotate;
   }, [rotate]);
 
+  // Use the plugin event directly so overlays can update in the same turn as
+  // the page rotation, instead of waiting for this bridge to re-render.
+  useEffect(() => {
+    const currentRotate = rotateRef.current;
+    if (!currentRotate) return;
+
+    triggerImmediateRotationUpdate(currentRotate.getRotation());
+    return currentRotate.onRotateChange((nextRotation) => {
+      triggerImmediateRotationUpdate(nextRotation);
+    });
+  }, [documentId, isRotateAvailable, triggerImmediateRotationUpdate]);
+
   useEffect(() => {
     const currentRotate = rotateRef.current;
     if (currentRotate) {
@@ -52,7 +65,7 @@ function RotateAPIBridgeInner({ documentId }: { documentId: string }) {
     return () => {
       registerBridge("rotation", null);
     };
-  }, [rotation, registerBridge]);
+  }, [rotation, isRotateAvailable, registerBridge]);
 
   return null;
 }
diff --git a/frontend/editor/src/core/components/viewer/RulerMeasurementLayer.tsx b/frontend/editor/src/core/components/viewer/RulerMeasurementLayer.tsx
new file mode 100644
index 0000000000..01f147ba52
--- /dev/null
+++ b/frontend/editor/src/core/components/viewer/RulerMeasurementLayer.tsx
@@ -0,0 +1,950 @@
+import React from "react";
+import { useTranslation } from "react-i18next";
+
+import type { MeasureScale, Measurement } from "@app/utils/measurementTypes";
+import {
+  POINT_TO_UNIT,
+  convertUnit,
+  generateScaleLabel,
+  isImperialUnit,
+} from "@app/utils/measurementUtils";
+
+export interface RulerPoint {
+  x: number;
+  y: number;
+}
+
+export interface RulerRenderedMeasurement {
+  measurement: Measurement;
+  startS: RulerPoint;
+  endS: RulerPoint;
+  distPts: number;
+  measureScale: MeasureScale | null;
+}
+
+export type RulerLabelVisibilityMode = "hideSmall" | "showAll" | "hideAll";
+
+interface RulerMeasurementLayerProps {
+  measurements: RulerRenderedMeasurement[];
+  zoom: number;
+  selectedId: string | null;
+  hoveredId: string | null;
+  labelVisibilityMode: RulerLabelVisibilityMode;
+  isInteractionPassthroughActive: boolean;
+  liveLine?: {
+    startS: RulerPoint;
+    endS: RulerPoint;
+    measureScale?: MeasureScale | null;
+  } | null;
+  firstPoint?: RulerPoint | null;
+  cursor?: RulerPoint | null;
+  pageContentRef?: React.Ref<SVGGElement>;
+  onSelect: (id: string | null) => void;
+  onDelete: (id: string) => void;
+  onHoverChange: (id: string | null) => void;
+  onClearAll: () => void;
+  onCycleLabelVisibilityMode: () => void;
+}
+
+interface LabelBox {
+  left: number;
+  top: number;
+  right: number;
+  bottom: number;
+}
+
+interface MeasurementLineLabels {
+  scaled: string;
+  physical: string;
+}
+
+export const RULER_DOT_RADIUS = 5;
+
+const TICK = 10;
+const LH = 26; // label height (normal, 1 line)
+const LH2 = 44; // label height (hovered, no scale, 2 lines)
+const LH3 = 62; // label height (hovered, with scale, 3 lines)
+const LP = 10; // label horizontal padding
+const DEL_R = 8;
+const IDLE_LH = 20;
+const IDLE_LP = 6;
+const IDLE_LABEL_MIN_WIDTH = 42;
+const IDLE_LABEL_MIN_LINE_LENGTH = 88;
+const IDLE_LABEL_COLLISION_GAP = 6;
+const LABEL_LINE_GAP = 8;
+const DELETE_LINE_GAP = 10;
+const DELETE_LABEL_GAP = 8;
+const LINE_HIT_WIDTH = 18;
+const LABEL_MODE_BUTTON_WIDTH = 124;
+
+function dist(a: RulerPoint, b: RulerPoint): number {
+  return Math.sqrt((b.x - a.x) ** 2 + (b.y - a.y) ** 2);
+}
+
+function midpoint(a: RulerPoint, b: RulerPoint): RulerPoint {
+  return { x: (a.x + b.x) / 2, y: (a.y + b.y) / 2 };
+}
+
+function perpUnit(a: RulerPoint, b: RulerPoint): { nx: number; ny: number } {
+  const dx = b.x - a.x;
+  const dy = b.y - a.y;
+  const len = Math.sqrt(dx * dx + dy * dy) || 1;
+  return { nx: -dy / len, ny: dx / len };
+}
+
+function angleDeg(a: RulerPoint, b: RulerPoint): number {
+  return Math.atan2(Math.abs(b.y - a.y), Math.abs(b.x - a.x)) * (180 / Math.PI);
+}
+
+function formatDist(pts: number): string {
+  const mm = (pts / 72) * 25.4;
+  if (mm < 100) return `${mm.toFixed(1)} mm`;
+  if (mm < 1000) return `${(mm / 10).toFixed(1)} cm`;
+  return `${(mm / 1000).toFixed(2)} m`;
+}
+
+function formatInches(pts: number): string {
+  const inches = pts / 72;
+  if (inches < 12) return `${inches.toFixed(2)} in`;
+  return `${(inches / 12).toFixed(2)} ft`;
+}
+
+function getDecimalPlaces(value: number): number {
+  const absVal = Math.abs(value);
+
+  const decimalRanges = [
+    { threshold: 1000000, decimals: 0 },
+    { threshold: 1000, decimals: 2 },
+    { threshold: 1, decimals: 3 },
+    { threshold: 0.1, decimals: 3 },
+    { threshold: 0.01, decimals: 4 },
+    { threshold: 0.001, decimals: 5 },
+  ];
+
+  return decimalRanges.find((r) => absVal >= r.threshold)?.decimals ?? 6;
+}
+
+function formatScaled(pts: number, scale: MeasureScale): string {
+  const val = pts * scale.factor;
+  if (val === 0) return `0 ${scale.unit}`;
+
+  const decimals = getDecimalPlaces(val);
+
+  return `${val.toFixed(decimals)} ${scale.unit}`;
+}
+
+function scaledCross(pts: number, scale: MeasureScale): string | null {
+  const unit = scale.unit.toLowerCase().trim();
+
+  if (!Object.hasOwn(POINT_TO_UNIT, unit)) return null;
+
+  const valueInUnit = pts * scale.factor;
+
+  if (isImperialUnit(scale.unit)) {
+    const meters = convertUnit(valueInUnit, scale.unit, "m");
+    if (meters === null) return null;
+    const decimals = getDecimalPlaces(meters);
+    return `${meters.toFixed(decimals)} m`;
+  } else {
+    const feet = convertUnit(valueInUnit, scale.unit, "ft");
+    if (feet === null) return null;
+    const decimals = getDecimalPlaces(feet);
+    return `${feet.toFixed(decimals)} ft`;
+  }
+}
+
+function getZoomScale(zoom: number): number {
+  return Math.max(0.6, Math.min(1.0, zoom / 1.5));
+}
+
+function getMeasurementLabel(
+  distPts: number,
+  measureScale?: MeasureScale | null,
+): string {
+  return measureScale
+    ? formatScaled(distPts, measureScale)
+    : formatDist(distPts);
+}
+
+function preferredPerpUnit(
+  a: RulerPoint,
+  b: RulerPoint,
+): { nx: number; ny: number } {
+  const normal = perpUnit(a, b);
+  if (normal.ny > 0 || (Math.abs(normal.ny) < 0.001 && normal.nx < 0)) {
+    return { nx: -normal.nx, ny: -normal.ny };
+  }
+  return normal;
+}
+
+function getLabelCenter(
+  a: RulerPoint,
+  b: RulerPoint,
+  width: number,
+  height: number,
+): RulerPoint {
+  const mid = midpoint(a, b);
+  const { nx, ny } = preferredPerpUnit(a, b);
+  const projectedHalfSize =
+    (Math.abs(nx) * width) / 2 + (Math.abs(ny) * height) / 2;
+  const offset = projectedHalfSize + RULER_DOT_RADIUS + LABEL_LINE_GAP;
+  return {
+    x: mid.x + nx * offset,
+    y: mid.y + ny * offset,
+  };
+}
+
+function getIdleLabelDimensions(label: string, zoom: number) {
+  return {
+    width: Math.max(label.length * 7 + IDLE_LP * 2, IDLE_LABEL_MIN_WIDTH),
+    height: Math.max(18, Math.round(IDLE_LH * getZoomScale(zoom))),
+  };
+}
+
+function getIdleLabelBox(
+  startS: RulerPoint,
+  endS: RulerPoint,
+  label: string,
+  zoom: number,
+): LabelBox {
+  const { width, height } = getIdleLabelDimensions(label, zoom);
+  const center = getLabelCenter(startS, endS, width, height);
+  return {
+    left: center.x - width / 2,
+    top: center.y - height / 2,
+    right: center.x + width / 2,
+    bottom: center.y + height / 2,
+  };
+}
+
+function getBoxFromCenter(
+  center: RulerPoint,
+  width: number,
+  height: number,
+): LabelBox {
+  return {
+    left: center.x - width / 2,
+    top: center.y - height / 2,
+    right: center.x + width / 2,
+    bottom: center.y + height / 2,
+  };
+}
+
+function boxesOverlap(a: LabelBox, b: LabelBox, gap: number): boolean {
+  return !(
+    a.right + gap < b.left ||
+    a.left - gap > b.right ||
+    a.bottom + gap < b.top ||
+    a.top - gap > b.bottom
+  );
+}
+
+function circleOverlapsBox(
+  center: RulerPoint,
+  radius: number,
+  box: LabelBox,
+  gap: number,
+): boolean {
+  return (
+    center.x + radius + gap >= box.left &&
+    center.x - radius - gap <= box.right &&
+    center.y + radius + gap >= box.top &&
+    center.y - radius - gap <= box.bottom
+  );
+}
+
+function lineUnit(a: RulerPoint, b: RulerPoint): { ux: number; uy: number } {
+  const dx = b.x - a.x;
+  const dy = b.y - a.y;
+  const len = Math.sqrt(dx * dx + dy * dy) || 1;
+  return { ux: dx / len, uy: dy / len };
+}
+
+function getDeleteCenter(
+  startS: RulerPoint,
+  endS: RulerPoint,
+  labelCenter: RulerPoint,
+  labelWidth: number,
+  labelHeight: number,
+): RulerPoint {
+  const { nx, ny } = preferredPerpUnit(startS, endS);
+  const endpointCenter = {
+    x: endS.x + nx * (RULER_DOT_RADIUS + DEL_R + DELETE_LINE_GAP),
+    y: endS.y + ny * (RULER_DOT_RADIUS + DEL_R + DELETE_LINE_GAP),
+  };
+  const labelBox = getBoxFromCenter(labelCenter, labelWidth, labelHeight);
+
+  if (!circleOverlapsBox(endpointCenter, DEL_R, labelBox, DELETE_LABEL_GAP)) {
+    return endpointCenter;
+  }
+
+  const { ux, uy } = lineUnit(startS, endS);
+  const projectedLabelRadius =
+    (Math.abs(ux) * labelWidth) / 2 + (Math.abs(uy) * labelHeight) / 2;
+
+  return {
+    x: labelCenter.x + ux * (projectedLabelRadius + DEL_R + DELETE_LABEL_GAP),
+    y: labelCenter.y + uy * (projectedLabelRadius + DEL_R + DELETE_LABEL_GAP),
+  };
+}
+
+function getVisibleIdleLabelIds(
+  renderedMeasurements: RulerRenderedMeasurement[],
+  zoom: number,
+): Set<string> {
+  const visibleIds = new Set<string>();
+  const occupiedBoxes: LabelBox[] = [];
+
+  renderedMeasurements
+    .map((item, index) => ({
+      item,
+      index,
+      lineLength: dist(item.startS, item.endS),
+      label: getMeasurementLabel(item.distPts, item.measureScale),
+    }))
+    .sort((a, b) => b.lineLength - a.lineLength || a.index - b.index)
+    .forEach(({ item, lineLength, label }) => {
+      const box = getIdleLabelBox(item.startS, item.endS, label, zoom);
+      const labelWidth = box.right - box.left;
+      const hasEnoughRoom =
+        lineLength >= Math.max(IDLE_LABEL_MIN_LINE_LENGTH, labelWidth + 24);
+      const collides = occupiedBoxes.some((occupiedBox) =>
+        boxesOverlap(box, occupiedBox, IDLE_LABEL_COLLISION_GAP),
+      );
+
+      if (hasEnoughRoom && !collides) {
+        visibleIds.add(item.measurement.id);
+        occupiedBoxes.push(box);
+      }
+    });
+
+  return visibleIds;
+}
+
+interface MeasurementLineProps {
+  id: string;
+  startS: RulerPoint;
+  endS: RulerPoint;
+  distPts: number;
+  isSelected: boolean;
+  isHovered: boolean;
+  onSelect: (id: string | null) => void;
+  onDelete: (id: string) => void;
+  onHoverChange: (id: string | null) => void;
+  measureScale?: MeasureScale | null;
+  zoom: number;
+  showIdleLabel: boolean;
+  expandLabelOnHover: boolean;
+  isInteractionPassthroughActive: boolean;
+  labels: MeasurementLineLabels;
+}
+
+function MeasurementLine({
+  id,
+  startS,
+  endS,
+  distPts,
+  isSelected,
+  isHovered,
+  onSelect,
+  onDelete,
+  onHoverChange,
+  measureScale,
+  zoom,
+  showIdleLabel,
+  expandLabelOnHover,
+  isInteractionPassthroughActive,
+  labels,
+}: MeasurementLineProps) {
+  const { nx, ny } = preferredPerpUnit(startS, endS);
+  const ang = angleDeg(startS, endS);
+  const angLabel = `∠ ${ang.toFixed(1)}°`;
+
+  const imperialFirst = !!measureScale && isImperialUnit(measureScale.unit);
+  const distLabel = getMeasurementLabel(distPts, measureScale);
+
+  const hoverLine1 = measureScale
+    ? (() => {
+        const primary = formatScaled(distPts, measureScale);
+        const cross = scaledCross(distPts, measureScale);
+        return cross
+          ? `${labels.scaled}: ${primary} / ${cross}`
+          : `${labels.scaled}: ${primary}`;
+      })()
+    : `${formatDist(distPts)} / ${formatInches(distPts)}`;
+
+  const hoverLine2 = measureScale
+    ? imperialFirst
+      ? `${labels.physical}: ${formatInches(distPts)} / ${formatDist(distPts)}`
+      : `${labels.physical}: ${formatDist(distPts)} / ${formatInches(distPts)}`
+    : null;
+
+  const scaleLabel = measureScale
+    ? generateScaleLabel(measureScale.ratio, measureScale.unit)
+    : null;
+  const contextLabel = scaleLabel ? `${scaleLabel}   ${angLabel}` : angLabel;
+
+  const zoomScale = getZoomScale(zoom);
+  const scaledLH = Math.round(LH * zoomScale);
+  const scaledLH2 = Math.round(LH2 * zoomScale);
+  const scaledLH3 = Math.round(LH3 * zoomScale);
+  const idleDimensions = getIdleLabelDimensions(distLabel, zoom);
+
+  const maxHoverLh = measureScale ? scaledLH3 : scaledLH2;
+  const isHoveredLabelExpanded = isHovered && expandLabelOnHover;
+  const isInspecting = isSelected || isHoveredLabelExpanded;
+  const isCompactIdle = !isInspecting;
+  const showLabel = isSelected || isHovered || showIdleLabel;
+  const showDelete = isSelected || isHovered;
+  const lh = isSelected
+    ? maxHoverLh
+    : isHoveredLabelExpanded
+      ? scaledLH
+      : idleDimensions.height;
+
+  const lwNormal = Math.max(distLabel.length * 8 + LP * 2, 80);
+  const lwHover = Math.max(
+    hoverLine1.length * 8 + LP * 2,
+    (hoverLine2?.length ?? 0) * 8 + LP * 2,
+    contextLabel.length * 8 + LP * 2,
+    80,
+  );
+  const lw = isSelected
+    ? lwHover
+    : isHoveredLabelExpanded
+      ? lwNormal
+      : idleDimensions.width;
+  const sw = isSelected ? 3 : 2;
+
+  const labelCenter = getLabelCenter(startS, endS, lw, lh);
+  const deleteCenter = getDeleteCenter(startS, endS, labelCenter, lw, lh);
+  const mono = "'Roboto Mono','Consolas',monospace";
+
+  return (
+    <g
+      data-ruler-interactive="true"
+      onPointerEnter={() => {
+        if (!isInteractionPassthroughActive) {
+          onHoverChange(id);
+        }
+      }}
+      onPointerLeave={() => onHoverChange(null)}
+      onClick={(e) => {
+        if (isInteractionPassthroughActive) {
+          return;
+        }
+
+        e.stopPropagation();
+        onSelect(isSelected ? null : id);
+      }}
+      style={{
+        pointerEvents: isInteractionPassthroughActive ? "none" : "all",
+        cursor: isInteractionPassthroughActive ? "crosshair" : "pointer",
+      }}
+    >
+      <line
+        x1={startS.x}
+        y1={startS.y}
+        x2={endS.x}
+        y2={endS.y}
+        stroke="transparent"
+        strokeWidth={LINE_HIT_WIDTH}
+        strokeLinecap="round"
+        pointerEvents="stroke"
+      />
+
+      <line
+        x1={startS.x}
+        y1={startS.y}
+        x2={endS.x}
+        y2={endS.y}
+        stroke="#1e88e5"
+        strokeWidth={sw}
+        strokeLinecap="round"
+      />
+      <line
+        x1={startS.x + (nx * TICK) / 2}
+        y1={startS.y + (ny * TICK) / 2}
+        x2={startS.x - (nx * TICK) / 2}
+        y2={startS.y - (ny * TICK) / 2}
+        stroke="#1e88e5"
+        strokeWidth={sw}
+        strokeLinecap="round"
+      />
+      <line
+        x1={endS.x + (nx * TICK) / 2}
+        y1={endS.y + (ny * TICK) / 2}
+        x2={endS.x - (nx * TICK) / 2}
+        y2={endS.y - (ny * TICK) / 2}
+        stroke="#1e88e5"
+        strokeWidth={sw}
+        strokeLinecap="round"
+      />
+      <circle
+        cx={startS.x}
+        cy={startS.y}
+        r={RULER_DOT_RADIUS}
+        fill="#1e88e5"
+        stroke="white"
+        strokeWidth={2}
+      />
+      <circle
+        cx={endS.x}
+        cy={endS.y}
+        r={RULER_DOT_RADIUS}
+        fill="#1e88e5"
+        stroke="white"
+        strokeWidth={2}
+      />
+
+      {showLabel && (
+        <g style={{ pointerEvents: "all", cursor: "pointer" }}>
+          <rect
+            x={labelCenter.x - lw / 2 - 4}
+            y={labelCenter.y - lh / 2 - 4}
+            width={lw + 8}
+            height={lh + 8}
+            fill="transparent"
+            stroke="none"
+          />
+
+          <rect
+            x={labelCenter.x - lw / 2}
+            y={labelCenter.y - lh / 2}
+            width={lw}
+            height={lh}
+            rx={isCompactIdle ? 4 : 5}
+            fill={isCompactIdle ? "rgba(255,255,255,0.94)" : "white"}
+            stroke="#1e88e5"
+            strokeWidth={isCompactIdle ? 1 : 1.5}
+            filter="url(#ruler-shadow)"
+          />
+
+          {isSelected && measureScale ? (
+            <>
+              <text
+                x={labelCenter.x}
+                y={labelCenter.y - Math.round(17 * zoomScale)}
+                textAnchor="middle"
+                dominantBaseline="middle"
+                fill="#1e88e5"
+                fontSize={12}
+                fontFamily={mono}
+                fontWeight={600}
+                style={{ userSelect: "none" }}
+              >
+                {hoverLine1}
+              </text>
+              <text
+                x={labelCenter.x}
+                y={labelCenter.y}
+                textAnchor="middle"
+                dominantBaseline="middle"
+                fill="#546e7a"
+                fontSize={11}
+                fontFamily={mono}
+                fontWeight={500}
+                style={{ userSelect: "none" }}
+              >
+                {hoverLine2}
+              </text>
+              <text
+                x={labelCenter.x}
+                y={labelCenter.y + Math.round(17 * zoomScale)}
+                textAnchor="middle"
+                dominantBaseline="middle"
+                fill="#5c6bc0"
+                fontSize={10}
+                fontFamily={mono}
+                fontWeight={500}
+                style={{ userSelect: "none" }}
+              >
+                {contextLabel}
+              </text>
+            </>
+          ) : isSelected ? (
+            <>
+              <text
+                x={labelCenter.x}
+                y={labelCenter.y - Math.round(6 * zoomScale)}
+                textAnchor="middle"
+                dominantBaseline="middle"
+                fill="#1e88e5"
+                fontSize={12}
+                fontFamily={mono}
+                fontWeight={600}
+                style={{ userSelect: "none" }}
+              >
+                {hoverLine1}
+              </text>
+              <text
+                x={labelCenter.x}
+                y={labelCenter.y + Math.round(13 * zoomScale)}
+                textAnchor="middle"
+                dominantBaseline="middle"
+                fill="#5c6bc0"
+                fontSize={11}
+                fontFamily={mono}
+                fontWeight={500}
+                style={{ userSelect: "none" }}
+              >
+                {contextLabel}
+              </text>
+            </>
+          ) : (
+            <text
+              x={labelCenter.x}
+              y={labelCenter.y + 1}
+              textAnchor="middle"
+              dominantBaseline="middle"
+              fill="#1e88e5"
+              fontSize={isCompactIdle ? 10 : 12}
+              fontFamily={mono}
+              fontWeight={600}
+              style={{ userSelect: "none" }}
+            >
+              {distLabel}
+            </text>
+          )}
+        </g>
+      )}
+
+      {showDelete && (
+        <>
+          <line
+            x1={endS.x}
+            y1={endS.y}
+            x2={deleteCenter.x}
+            y2={deleteCenter.y}
+            stroke="transparent"
+            strokeWidth={DEL_R * 2}
+            strokeLinecap="round"
+            pointerEvents="stroke"
+          />
+          <g
+            style={{ cursor: "pointer" }}
+            onClick={(e) => {
+              e.stopPropagation();
+              onDelete(id);
+            }}
+          >
+            <circle
+              cx={deleteCenter.x}
+              cy={deleteCenter.y}
+              r={DEL_R}
+              fill="#ef5350"
+              stroke="white"
+              strokeWidth={1.5}
+            />
+            <text
+              x={deleteCenter.x}
+              y={deleteCenter.y}
+              textAnchor="middle"
+              dominantBaseline="middle"
+              fill="white"
+              fontSize={12}
+              fontWeight={700}
+              style={{ userSelect: "none" }}
+            >
+              ×
+            </text>
+          </g>
+        </>
+      )}
+    </g>
+  );
+}
+
+interface LiveLineProps {
+  startS: RulerPoint;
+  endS: RulerPoint;
+  zoom: number;
+  measureScale?: MeasureScale | null;
+}
+
+function LiveLine({ startS, endS, zoom, measureScale }: LiveLineProps) {
+  const d = dist(startS, endS) / zoom;
+  const { nx, ny } = preferredPerpUnit(startS, endS);
+  const ang = angleDeg(startS, endS);
+  const distLabel = measureScale
+    ? formatScaled(d, measureScale)
+    : formatDist(d);
+  const lw = Math.max(distLabel.length * 8 + LP * 2, 80);
+  const lh = Math.round(LH2 * getZoomScale(zoom));
+  const labelCenter = getLabelCenter(startS, endS, lw, lh);
+
+  return (
+    <g>
+      <line
+        x1={startS.x}
+        y1={startS.y}
+        x2={endS.x}
+        y2={endS.y}
+        stroke="#1e88e5"
+        strokeWidth={2}
+        strokeDasharray="7 4"
+        strokeLinecap="round"
+        opacity={0.85}
+      />
+      <line
+        x1={startS.x + (nx * TICK) / 2}
+        y1={startS.y + (ny * TICK) / 2}
+        x2={startS.x - (nx * TICK) / 2}
+        y2={startS.y - (ny * TICK) / 2}
+        stroke="#1e88e5"
+        strokeWidth={2}
+        strokeLinecap="round"
+      />
+      {d > 4 && (
+        <g>
+          <rect
+            x={labelCenter.x - lw / 2}
+            y={labelCenter.y - lh / 2}
+            width={lw}
+            height={lh}
+            rx={5}
+            fill="#1e88e5"
+            stroke="white"
+            strokeWidth={1}
+          />
+          <text
+            x={labelCenter.x}
+            y={labelCenter.y - 6}
+            textAnchor="middle"
+            dominantBaseline="middle"
+            fill="white"
+            fontSize={12}
+            fontFamily="'Roboto Mono','Consolas',monospace"
+            fontWeight={600}
+            style={{ userSelect: "none" }}
+          >
+            {distLabel}
+          </text>
+          <text
+            x={labelCenter.x}
+            y={labelCenter.y + 13}
+            textAnchor="middle"
+            dominantBaseline="middle"
+            fill="rgba(255,255,255,0.85)"
+            fontSize={11}
+            fontFamily="'Roboto Mono','Consolas',monospace"
+            fontWeight={500}
+            style={{ userSelect: "none" }}
+          >
+            {`∠ ${ang.toFixed(1)}°`}
+          </text>
+        </g>
+      )}
+    </g>
+  );
+}
+
+export function RulerMeasurementLayer({
+  measurements,
+  zoom,
+  selectedId,
+  hoveredId,
+  labelVisibilityMode,
+  isInteractionPassthroughActive,
+  liveLine,
+  firstPoint,
+  cursor,
+  pageContentRef,
+  onSelect,
+  onDelete,
+  onHoverChange,
+  onClearAll,
+  onCycleLabelVisibilityMode,
+}: RulerMeasurementLayerProps) {
+  const { t } = useTranslation();
+  const measurementLineLabels = React.useMemo(
+    () => ({
+      scaled: t("ruler.scaled", "Scaled"),
+      physical: t("ruler.physicalValues", "Physical"),
+    }),
+    [t],
+  );
+  const visibleIdleLabelIds = React.useMemo(
+    () => getVisibleIdleLabelIds(measurements, zoom),
+    [measurements, zoom],
+  );
+  const orderedMeasurements = React.useMemo(() => {
+    const getRank = (item: RulerRenderedMeasurement) => {
+      if (item.measurement.id === hoveredId) {
+        return 2;
+      }
+
+      if (item.measurement.id === selectedId) {
+        return 1;
+      }
+
+      return 0;
+    };
+
+    return [...measurements].sort((a, b) => getRank(a) - getRank(b));
+  }, [hoveredId, measurements, selectedId]);
+
+  const getShouldShowIdleLabel = (measurementId: string) => {
+    if (labelVisibilityMode === "showAll") {
+      return true;
+    }
+
+    if (labelVisibilityMode === "hideAll") {
+      return false;
+    }
+
+    return visibleIdleLabelIds.has(measurementId);
+  };
+
+  const labelModeButtonLabel =
+    labelVisibilityMode === "hideSmall"
+      ? t("ruler.showAllLabels", "Show all labels")
+      : labelVisibilityMode === "showAll"
+        ? t("ruler.hideAllLabels", "Hide all labels")
+        : t("ruler.hideSmallLabels", "Hide small labels");
+
+  return (
+    <>
+      <g ref={pageContentRef}>
+        {orderedMeasurements.map((item) => {
+          const { measurement, startS, endS, distPts, measureScale } = item;
+          return (
+            <MeasurementLine
+              key={measurement.id}
+              id={measurement.id}
+              startS={startS}
+              endS={endS}
+              distPts={distPts}
+              isSelected={
+                !isInteractionPassthroughActive && selectedId === measurement.id
+              }
+              isHovered={
+                !isInteractionPassthroughActive && hoveredId === measurement.id
+              }
+              onSelect={onSelect}
+              onDelete={onDelete}
+              onHoverChange={onHoverChange}
+              measureScale={measureScale}
+              zoom={zoom}
+              showIdleLabel={getShouldShowIdleLabel(measurement.id)}
+              expandLabelOnHover={labelVisibilityMode !== "showAll"}
+              isInteractionPassthroughActive={isInteractionPassthroughActive}
+              labels={measurementLineLabels}
+            />
+          );
+        })}
+
+        {firstPoint && (
+          <circle
+            cx={firstPoint.x}
+            cy={firstPoint.y}
+            r={RULER_DOT_RADIUS}
+            fill="#1e88e5"
+            stroke="white"
+            strokeWidth={2}
+          />
+        )}
+      </g>
+
+      {liveLine && (
+        <LiveLine
+          startS={liveLine.startS}
+          endS={liveLine.endS}
+          zoom={zoom}
+          measureScale={liveLine.measureScale}
+        />
+      )}
+
+      {cursor && (
+        <g opacity={0.75}>
+          <line
+            x1={cursor.x - 12}
+            y1={cursor.y}
+            x2={cursor.x + 12}
+            y2={cursor.y}
+            stroke="#1e88e5"
+            strokeWidth={1.5}
+          />
+          <line
+            x1={cursor.x}
+            y1={cursor.y - 12}
+            x2={cursor.x}
+            y2={cursor.y + 12}
+            stroke="#1e88e5"
+            strokeWidth={1.5}
+          />
+          <circle cx={cursor.x} cy={cursor.y} r={2} fill="#1e88e5" />
+        </g>
+      )}
+
+      {measurements.length > 0 && (
+        <>
+          <g
+            data-ruler-interactive="true"
+            data-ruler-control="true"
+            style={{ pointerEvents: "all", cursor: "pointer" }}
+            onClick={(e) => {
+              e.stopPropagation();
+              onClearAll();
+            }}
+          >
+            <rect
+              x={8}
+              y={8}
+              width={88}
+              height={26}
+              rx={5}
+              fill="rgba(239,83,80,0.9)"
+              stroke="white"
+              strokeWidth={1}
+            />
+            <text
+              x={52}
+              y={25}
+              textAnchor="middle"
+              fill="white"
+              fontSize={12}
+              fontFamily="sans-serif"
+              fontWeight={600}
+              style={{ userSelect: "none" }}
+            >
+              {t("ruler.clearAll", "Clear all")}
+            </text>
+          </g>
+          <g
+            data-ruler-interactive="true"
+            data-ruler-control="true"
+            style={{ pointerEvents: "all", cursor: "pointer" }}
+            onClick={(e) => {
+              e.stopPropagation();
+              onCycleLabelVisibilityMode();
+            }}
+          >
+            <rect
+              x={8}
+              y={40}
+              width={LABEL_MODE_BUTTON_WIDTH}
+              height={26}
+              rx={5}
+              fill="rgba(30,136,229,0.9)"
+              stroke="white"
+              strokeWidth={1}
+            />
+            <text
+              x={8 + LABEL_MODE_BUTTON_WIDTH / 2}
+              y={57}
+              textAnchor="middle"
+              fill="white"
+              fontSize={12}
+              fontFamily="sans-serif"
+              fontWeight={600}
+              style={{ userSelect: "none" }}
+            >
+              {labelModeButtonLabel}
+            </text>
+          </g>
+        </>
+      )}
+    </>
+  );
+}
diff --git a/frontend/editor/src/core/components/viewer/RulerOverlay.tsx b/frontend/editor/src/core/components/viewer/RulerOverlay.tsx
index 7fa7debeb7..9f431fb628 100644
--- a/frontend/editor/src/core/components/viewer/RulerOverlay.tsx
+++ b/frontend/editor/src/core/components/viewer/RulerOverlay.tsx
@@ -1,5 +1,31 @@
-import React, { useCallback, useEffect, useRef, useState } from "react";
+import React, {
+  useCallback,
+  useEffect,
+  useLayoutEffect,
+  useRef,
+  useState,
+} from "react";
+import {
+  restorePosition,
+  transformPosition,
+  transformSize,
+  type Rotation,
+  type Size,
+} from "@embedpdf/models";
 import { useViewer } from "@app/contexts/ViewerContext";
+import type {
+  MeasureScale,
+  Measurement,
+  PageMeasureScales,
+  PagePoint,
+} from "@app/utils/measurementTypes";
+import { validateMeasurement } from "@app/utils/measurementUtils";
+import type { ScaleCalibrationMeasurement } from "@app/components/viewer/ScaleCalibrationDialog";
+import {
+  RulerMeasurementLayer,
+  type RulerLabelVisibilityMode,
+  type RulerRenderedMeasurement,
+} from "@app/components/viewer/RulerMeasurementLayer";
 
 // ─── Types ────────────────────────────────────────────────────────────────────
 
@@ -8,35 +34,32 @@ interface Point {
   y: number;
 }
 
-/**
- * A point anchored to a specific PDF page in PDF-unit space.
- * x and y are in PDF points (1/72 inch) relative to the page's top-left corner.
- *
- * This is the only truly zoom-invariant representation. Screen positions are
- * recovered at render time via getBoundingClientRect on the page element, so
- * scroll, zoom, and fixed page margins are all handled by the browser — we never
- * have to track them ourselves.
- */
-interface PagePoint {
-  pageIndex: number;
-  x: number;
-  y: number;
-}
+let rulerMeasurementIdCounter = 0;
 
-interface Measurement {
-  id: string;
-  start: PagePoint;
-  end: PagePoint;
+function createRulerMeasurementId(): string {
+  rulerMeasurementIdCounter += 1;
+  return `ruler-${Date.now().toString(36)}-${rulerMeasurementIdCounter.toString(36)}`;
 }
 
 export interface RulerOverlayHandle {
-  clearAll: () => void;
+  clearAll: (silent?: boolean) => void;
+  getMeasurements: () => Measurement[];
+  setMeasurements: (measurements: Measurement[]) => void;
+  /** Restore measurements without triggering notification */
+  restoreMeasurements: (measurements: Measurement[]) => void;
+  /** Register a callback to be notified when measurements change from user actions */
+  onMeasurementsChange: (
+    callback: (measurements: Measurement[]) => void,
+  ) => () => void;
 }
 
 interface RulerOverlayProps {
   containerRef: React.RefObject<HTMLElement | null>;
   isActive: boolean;
   pageMeasureScales?: PageMeasureScales | null;
+  customScale?: MeasureScale | null;
+  isCalibrationActive?: boolean;
+  onCalibrationMeasure?: (measurement: ScaleCalibrationMeasurement) => void;
 }
 
 // ─── Math ─────────────────────────────────────────────────────────────────────
@@ -45,69 +68,111 @@ function dist(a: Point, b: Point): number {
   return Math.sqrt((b.x - a.x) ** 2 + (b.y - a.y) ** 2);
 }
 
-function midpoint(a: Point, b: Point): Point {
-  return { x: (a.x + b.x) / 2, y: (a.y + b.y) / 2 };
+function normalizeRotation(rotation: number | null | undefined): Rotation {
+  const value =
+    typeof rotation === "number" && Number.isFinite(rotation) ? rotation : 0;
+  return (((Math.round(value) % 4) + 4) % 4) as Rotation;
 }
 
-function perpUnit(a: Point, b: Point): { nx: number; ny: number } {
-  const dx = b.x - a.x;
-  const dy = b.y - a.y;
-  const len = Math.sqrt(dx * dx + dy * dy) || 1;
-  return { nx: -dy / len, ny: dx / len };
+function getPageRotation(pageEl: HTMLElement): Rotation {
+  return normalizeRotation(Number(pageEl.dataset.pageRotation));
 }
 
-/** Angle from horizontal 0°–90°. Computed from screen-space points (same angle as PDF space). */
-function angleDeg(a: Point, b: Point): number {
-  return Math.atan2(Math.abs(b.y - a.y), Math.abs(b.x - a.x)) * (180 / Math.PI);
+function getEffectivePageRotation(
+  pageEl: HTMLElement,
+  documentRotation: Rotation,
+): Rotation {
+  return normalizeRotation(getPageRotation(pageEl) + documentRotation);
 }
 
-function formatDist(pts: number): string {
-  const mm = (pts / 72) * 25.4;
-  if (mm < 100) return `${mm.toFixed(1)} mm`;
-  if (mm < 1000) return `${(mm / 10).toFixed(1)} cm`;
-  return `${(mm / 1000).toFixed(2)} m`;
+function getPageNaturalSize(
+  pageEl: HTMLElement,
+  pageRect: DOMRect,
+  zoom: number,
+  rotation: Rotation,
+): Size {
+  const safeZoom = Number.isFinite(zoom) && zoom > 0 ? zoom : 1;
+  const dataWidth = Number(pageEl.dataset.pageWidth);
+  const dataHeight = Number(pageEl.dataset.pageHeight);
+
+  if (
+    Number.isFinite(dataWidth) &&
+    dataWidth > 0 &&
+    Number.isFinite(dataHeight) &&
+    dataHeight > 0
+  ) {
+    return {
+      width: dataWidth / safeZoom,
+      height: dataHeight / safeZoom,
+    };
+  }
+
+  const visualWidth = pageRect.width / safeZoom;
+  const visualHeight = pageRect.height / safeZoom;
+  return rotation % 2 === 0
+    ? { width: visualWidth, height: visualHeight }
+    : { width: visualHeight, height: visualWidth };
 }
 
-function formatInches(pts: number): string {
-  const inches = pts / 72;
-  if (inches < 12) return `${inches.toFixed(2)} in`;
-  return `${(inches / 12).toFixed(2)} ft`;
+function clampToPage(point: Point, pageSize: Size): Point {
+  return {
+    x: Math.max(0, Math.min(pageSize.width, point.x)),
+    y: Math.max(0, Math.min(pageSize.height, point.y)),
+  };
 }
 
-export interface MeasureScale {
-  /** real_world_value = pdf_points * factor */
-  factor: number;
-  /** e.g. "ft", "m" */
-  unit: string;
-  /** Human-readable ratio from PDF, e.g. "1 in = 10 ft" */
-  ratioLabel: string;
+function clientPointToPagePoint(
+  pageEl: HTMLElement,
+  clientX: number,
+  clientY: number,
+  zoom: number,
+  rotation: Rotation,
+): Point {
+  const safeZoom = Number.isFinite(zoom) && zoom > 0 ? zoom : 1;
+  const pageRect = pageEl.getBoundingClientRect();
+  const pageSize = getPageNaturalSize(pageEl, pageRect, safeZoom, rotation);
+  const rotatedDisplaySize = transformSize(pageSize, rotation, safeZoom);
+  const displayPoint = {
+    x: clientX - pageRect.left,
+    y: clientY - pageRect.top,
+  };
+
+  return clampToPage(
+    restorePosition(rotatedDisplaySize, displayPoint, rotation, safeZoom),
+    pageSize,
+  );
 }
 
-export interface ViewportScale {
-  /** BBox in PDF user space (bottom-left origin). null = entire page. */
-  bbox: [number, number, number, number] | null;
-  scale: MeasureScale;
+function pagePointToDisplayPoint(
+  pageEl: HTMLElement,
+  pageRect: DOMRect,
+  point: Point,
+  zoom: number,
+  rotation: Rotation,
+): Point {
+  const safeZoom = Number.isFinite(zoom) && zoom > 0 ? zoom : 1;
+  const pageSize = getPageNaturalSize(pageEl, pageRect, safeZoom, rotation);
+  return transformPosition(pageSize, point, rotation, safeZoom);
 }
 
-export interface PageScaleInfo {
-  viewports: ViewportScale[];
-  /** Page height in PDF points — used to flip screen-y (top=0) to PDF-y (bottom=0). */
-  pageHeight: number;
-}
-
-export type PageMeasureScales = Map<number, PageScaleInfo>;
-
 /**
  * Given the start/end PagePoints of a measurement, find the scale from the
- * viewport whose BBox contains the midpoint. Falls back to the first viewport
- * if none contains it (handles whole-page viewports with bbox=null).
+ * custom scale, then the viewport whose BBox contains the midpoint, then the
+ * first whole-page viewport with bbox=null.
  */
 function pickScale(
   start: PagePoint,
   end: PagePoint,
-  pageMeasureScales: PageMeasureScales,
+  pageMeasureScales: PageMeasureScales | null | undefined,
+  customScale?: MeasureScale | null,
 ): MeasureScale | null {
+  // Cross-page measurements are meaningless — reject regardless of scale source
   if (start.pageIndex !== end.pageIndex) return null;
+
+  // Priority 1: Use custom scale if provided
+  if (customScale) return customScale;
+
+  if (!pageMeasureScales) return null;
   const info = pageMeasureScales.get(start.pageIndex);
   if (!info?.viewports.length) return null;
 
@@ -116,8 +181,14 @@ function pickScale(
   // Flip y: screen y=0 is page top; PDF user space y=0 is page bottom
   const my = info.pageHeight - (start.y + end.y) / 2;
 
+  let fallbackScale: MeasureScale | null = null;
+
   for (const { bbox, scale } of info.viewports) {
-    if (!bbox) return scale; // whole-page viewport
+    if (!bbox) {
+      fallbackScale ??= scale;
+      continue;
+    }
+
     const [x0, y0, x1, y1] = bbox;
     if (
       mx >= Math.min(x0, x1) &&
@@ -128,58 +199,7 @@ function pickScale(
       return scale;
     }
   }
-  return null;
-}
-
-function formatScaled(pts: number, scale: MeasureScale): string {
-  const val = pts * scale.factor;
-  if (val >= 1000) return `${val.toFixed(0)} ${scale.unit}`;
-  if (val >= 100) return `${val.toFixed(1)} ${scale.unit}`;
-  if (val >= 10) return `${val.toFixed(2)} ${scale.unit}`;
-  return `${val.toFixed(3)} ${scale.unit}`;
-}
-
-// Conversion factors to metres for known units
-const TO_METRES: Record<string, number> = {
-  m: 1,
-  cm: 0.01,
-  mm: 0.001,
-  km: 1000,
-  ft: 0.3048,
-  in: 0.0254,
-  yd: 0.9144,
-  mi: 1609.344,
-};
-
-function isImperialUnit(unit: string): boolean {
-  return ["ft", "in", "yd", "mi"].includes(unit.toLowerCase().trim());
-}
-
-function formatMetricFromMetres(m: number): string {
-  if (m >= 1000) return `${(m / 1000).toFixed(2)} km`;
-  if (m >= 1) return `${m.toFixed(1)} m`;
-  if (m >= 0.1) return `${(m * 100).toFixed(1)} cm`;
-  return `${(m * 1000).toFixed(1)} mm`;
-}
-
-function formatImperialFromFeet(ft: number): string {
-  if (ft >= 1) return `${ft.toFixed(2)} ft`;
-  return `${(ft * 12).toFixed(2)} in`;
-}
-
-/**
- * Returns the scaled real-world value in the *other* unit system, or null if
- * the unit is not a recognised metric/imperial unit.
- * e.g. 72 pts, scale {factor:0.138889, unit:"ft"} → "3.048 m"
- *      72 pts, scale {factor:0.352778, unit:"m"}  → "1.157 ft" (approx)
- */
-function scaledCross(pts: number, scale: MeasureScale): string | null {
-  const toM = TO_METRES[scale.unit.toLowerCase().trim()];
-  if (!toM) return null;
-  const metres = pts * scale.factor * toM;
-  return isImperialUnit(scale.unit)
-    ? formatMetricFromMetres(metres)
-    : formatImperialFromFeet(metres / 0.3048);
+  return fallbackScale;
 }
 
 // ─── DOM helpers ──────────────────────────────────────────────────────────────
@@ -202,12 +222,36 @@ function findScrollEl(root: HTMLElement): HTMLElement | null {
   return null;
 }
 
-function isOverPage(e: MouseEvent): boolean {
-  return !!(e.target as Element).closest?.("[data-page-index]");
+function isEditableKeyboardTarget(target: EventTarget | null): boolean {
+  if (!(target instanceof HTMLElement)) {
+    return false;
+  }
+
+  return (
+    target.isContentEditable ||
+    target.closest("input, textarea, select") !== null
+  );
+}
+
+function findPageAtClientPoint(
+  container: HTMLElement,
+  clientX: number,
+  clientY: number,
+): HTMLElement | null {
+  const elementsAtPoint = document.elementsFromPoint(clientX, clientY);
+
+  for (const element of elementsAtPoint) {
+    const pageEl = element.closest?.("[data-page-index]");
+    if (pageEl instanceof HTMLElement && container.contains(pageEl)) {
+      return pageEl;
+    }
+  }
+
+  return null;
 }
 
 /**
- * Find the nearest point on any page boundary and return it as both
+ * Find the nearest point on the starting page boundary and return it as both
  * an SVG screen coordinate and a PagePoint (page-relative PDF units).
  * Used to clamp the live line when the cursor drifts off the page.
  */
@@ -215,421 +259,43 @@ function nearestPageDocPt(
   cursor: Point,
   container: HTMLElement,
   zoom: number,
+  documentRotation: Rotation,
+  pageIndex: number,
 ): { screenPt: Point; docPt: PagePoint } | null {
-  const pages = container.querySelectorAll("[data-page-index]");
-  if (!pages.length) return null;
+  const pageEl = container.querySelector(
+    `[data-page-index="${pageIndex}"]`,
+  ) as HTMLElement | null;
+  if (!pageEl) return null;
 
   const cr = container.getBoundingClientRect();
-  let bestDist = Infinity;
-  let best: { screenPt: Point; docPt: PagePoint } | null = null;
+  const r = pageEl.getBoundingClientRect();
+  const effectiveRotation = getEffectivePageRotation(pageEl, documentRotation);
 
-  pages.forEach((pageNode) => {
-    const pageEl = pageNode as HTMLElement;
-    const r = pageEl.getBoundingClientRect();
-    const pageIndex = parseInt(pageEl.dataset.pageIndex ?? "0", 10);
+  // Page bounds in SVG (container-relative) space
+  const left = r.left - cr.left;
+  const top = r.top - cr.top;
+  const right = r.right - cr.left;
+  const bottom = r.bottom - cr.top;
 
-    // Page bounds in SVG (container-relative) space
-    const left = r.left - cr.left;
-    const top = r.top - cr.top;
-    const right = r.right - cr.left;
-    const bottom = r.bottom - cr.top;
-
-    // Nearest point on this rect to the cursor (SVG space)
-    const cx = Math.max(left, Math.min(right, cursor.x));
-    const cy = Math.max(top, Math.min(bottom, cursor.y));
-    const d = Math.sqrt((cursor.x - cx) ** 2 + (cursor.y - cy) ** 2);
-
-    if (d < bestDist) {
-      bestDist = d;
-      // Convert SVG-space point (cx, cy) → page-relative viewport → PDF points:
-      //   viewport position of cx = cr.left + cx
-      //   page-relative position  = (cr.left + cx) - r.left
-      //   PDF units               = page-relative / zoom
-      best = {
-        screenPt: { x: cx, y: cy },
-        docPt: {
-          pageIndex,
-          x: (cr.left + cx - r.left) / zoom,
-          y: (cr.top + cy - r.top) / zoom,
-        },
-      };
-    }
-  });
-
-  return best;
-}
-
-// ─── Sub-components ───────────────────────────────────────────────────────────
-
-const TICK = 10;
-const DOT_R = 5;
-const LH = 26; // label height (normal — 1 line)
-const LH2 = 44; // label height (hovered, no scale — 2 lines)
-const LH3 = 62; // label height (hovered, with scale — 3 lines)
-const LP = 10; // label horizontal padding
-const DEL_R = 8;
-
-interface MeasurementLineProps {
-  id: string;
-  startS: Point;
-  endS: Point;
-  /** Physical distance in PDF points (= screen pixel distance / zoom). */
-  distPts: number;
-  hovered: boolean;
-  onDelete: (id: string) => void;
-  onHover: (id: string | null) => void;
-  measureScale?: MeasureScale | null;
-}
-
-function MeasurementLine({
-  id,
-  startS,
-  endS,
-  distPts,
-  hovered,
-  onDelete,
-  onHover,
-  measureScale,
-}: MeasurementLineProps) {
-  const mid = midpoint(startS, endS);
-  const { nx, ny } = perpUnit(startS, endS);
-  const ang = angleDeg(startS, endS);
-  const angLabel = `∠ ${ang.toFixed(1)}°`;
-
-  // Whether the PDF's unit is imperial — determines display order (imperial-first vs metric-first)
-  const imperialFirst = !!measureScale && isImperialUnit(measureScale.unit);
-
-  // Idle: scaled primary if scale present, else physical metric
-  const distLabel = measureScale
-    ? formatScaled(distPts, measureScale)
-    : formatDist(distPts);
-
-  // Hover line 1 — both real-world values ordered by PDF unit system:
-  //   imperial PDF: "10.000 ft / 3.048 m"
-  //   metric PDF:   "142.5 m / 467.5 ft"
-  //   no scale:     "25.4 mm / 1.00 in"  (metric first, default)
-  const hoverLine1 = measureScale
-    ? (() => {
-        const primary = formatScaled(distPts, measureScale);
-        const cross = scaledCross(distPts, measureScale);
-        return cross ? `${primary} / ${cross}` : primary;
-      })()
-    : `${formatDist(distPts)} / ${formatInches(distPts)}`;
-
-  // Hover line 2 — both physical paper values, same order as line 1:
-  //   imperial PDF: "1.00 in / 25.4 mm"
-  //   metric PDF or no scale: "25.4 mm / 1.00 in"
-  const hoverLine2 = measureScale
-    ? imperialFirst
-      ? `${formatInches(distPts)} / ${formatDist(distPts)}`
-      : `${formatDist(distPts)} / ${formatInches(distPts)}`
-    : null;
-
-  // Hover line 3 (scaled) / line 2 (no scale) — ratio label + angle
-  const contextLabel = measureScale?.ratioLabel
-    ? `${measureScale.ratioLabel}   ${angLabel}`
-    : angLabel;
-
-  const maxHoverLh = measureScale ? LH3 : LH2;
-  const lh = hovered ? maxHoverLh : LH;
-
-  const lwNormal = Math.max(distLabel.length * 8 + LP * 2, 80);
-  const lwHover = Math.max(
-    hoverLine1.length * 8 + LP * 2,
-    (hoverLine2?.length ?? 0) * 8 + LP * 2,
-    contextLabel.length * 8 + LP * 2,
-    80,
+  // Nearest point on this rect to the cursor (SVG space)
+  const cx = Math.max(left, Math.min(right, cursor.x));
+  const cy = Math.max(top, Math.min(bottom, cursor.y));
+  const docPoint = clientPointToPagePoint(
+    pageEl,
+    cr.left + cx,
+    cr.top + cy,
+    zoom,
+    effectiveRotation,
   );
-  const lw = hovered ? lwHover : lwNormal;
-  const sw = hovered ? 3 : 2;
 
-  const delX = mid.x + lwHover / 2 + DEL_R + 4;
-  const delY = mid.y;
-
-  const hitLeft = mid.x - lwHover / 2 - 4;
-  const hitTop = mid.y - maxHoverLh / 2 - 4;
-  const hitWidth = delX + DEL_R + 4 - hitLeft;
-  const hitHeight = maxHoverLh + 8;
-
-  const mono = "'Roboto Mono','Consolas',monospace";
-
-  return (
-    <g
-      onMouseEnter={() => onHover(id)}
-      onMouseLeave={() => onHover(null)}
-      style={{ pointerEvents: "all" }}
-    >
-      <rect
-        x={hitLeft}
-        y={hitTop}
-        width={hitWidth}
-        height={hitHeight}
-        fill="transparent"
-        stroke="none"
-        style={{ pointerEvents: "all" }}
-      />
-
-      <line
-        x1={startS.x}
-        y1={startS.y}
-        x2={endS.x}
-        y2={endS.y}
-        stroke="#1e88e5"
-        strokeWidth={sw}
-        strokeLinecap="round"
-      />
-      <line
-        x1={startS.x + (nx * TICK) / 2}
-        y1={startS.y + (ny * TICK) / 2}
-        x2={startS.x - (nx * TICK) / 2}
-        y2={startS.y - (ny * TICK) / 2}
-        stroke="#1e88e5"
-        strokeWidth={sw}
-        strokeLinecap="round"
-      />
-      <line
-        x1={endS.x + (nx * TICK) / 2}
-        y1={endS.y + (ny * TICK) / 2}
-        x2={endS.x - (nx * TICK) / 2}
-        y2={endS.y - (ny * TICK) / 2}
-        stroke="#1e88e5"
-        strokeWidth={sw}
-        strokeLinecap="round"
-      />
-      <circle
-        cx={startS.x}
-        cy={startS.y}
-        r={DOT_R}
-        fill="#1e88e5"
-        stroke="white"
-        strokeWidth={2}
-      />
-      <circle
-        cx={endS.x}
-        cy={endS.y}
-        r={DOT_R}
-        fill="#1e88e5"
-        stroke="white"
-        strokeWidth={2}
-      />
-
-      <g style={{ pointerEvents: "all", cursor: "default" }}>
-        <rect
-          x={mid.x - lw / 2}
-          y={mid.y - lh / 2}
-          width={lw}
-          height={lh}
-          rx={5}
-          fill="white"
-          stroke="#1e88e5"
-          strokeWidth={1.5}
-          filter="url(#ruler-shadow)"
-        />
-
-        {hovered && measureScale ? (
-          // 3-line scaled hover
-          <>
-            <text
-              x={mid.x}
-              y={mid.y - 17}
-              textAnchor="middle"
-              dominantBaseline="middle"
-              fill="#1e88e5"
-              fontSize={12}
-              fontFamily={mono}
-              fontWeight={600}
-              style={{ userSelect: "none" }}
-            >
-              {hoverLine1}
-            </text>
-            <text
-              x={mid.x}
-              y={mid.y}
-              textAnchor="middle"
-              dominantBaseline="middle"
-              fill="#546e7a"
-              fontSize={11}
-              fontFamily={mono}
-              fontWeight={500}
-              style={{ userSelect: "none" }}
-            >
-              {hoverLine2}
-            </text>
-            <text
-              x={mid.x}
-              y={mid.y + 17}
-              textAnchor="middle"
-              dominantBaseline="middle"
-              fill="#5c6bc0"
-              fontSize={10}
-              fontFamily={mono}
-              fontWeight={500}
-              style={{ userSelect: "none" }}
-            >
-              {contextLabel}
-            </text>
-          </>
-        ) : hovered ? (
-          // 2-line no-scale hover
-          <>
-            <text
-              x={mid.x}
-              y={mid.y - 6}
-              textAnchor="middle"
-              dominantBaseline="middle"
-              fill="#1e88e5"
-              fontSize={12}
-              fontFamily={mono}
-              fontWeight={600}
-              style={{ userSelect: "none" }}
-            >
-              {hoverLine1}
-            </text>
-            <text
-              x={mid.x}
-              y={mid.y + 13}
-              textAnchor="middle"
-              dominantBaseline="middle"
-              fill="#5c6bc0"
-              fontSize={11}
-              fontFamily={mono}
-              fontWeight={500}
-              style={{ userSelect: "none" }}
-            >
-              {contextLabel}
-            </text>
-          </>
-        ) : (
-          // Idle — single line
-          <text
-            x={mid.x}
-            y={mid.y + 1}
-            textAnchor="middle"
-            dominantBaseline="middle"
-            fill="#1e88e5"
-            fontSize={12}
-            fontFamily={mono}
-            fontWeight={600}
-            style={{ userSelect: "none" }}
-          >
-            {distLabel}
-          </text>
-        )}
-
-        <g
-          style={{ cursor: "pointer" }}
-          onClick={(e) => {
-            e.stopPropagation();
-            onDelete(id);
-          }}
-        >
-          <circle
-            cx={delX}
-            cy={delY}
-            r={DEL_R}
-            fill="#ef5350"
-            stroke="white"
-            strokeWidth={1.5}
-          />
-          <text
-            x={delX}
-            y={delY}
-            textAnchor="middle"
-            dominantBaseline="middle"
-            fill="white"
-            fontSize={12}
-            fontWeight={700}
-            style={{ userSelect: "none" }}
-          >
-            ×
-          </text>
-        </g>
-      </g>
-    </g>
-  );
-}
-
-interface LiveLineProps {
-  startS: Point;
-  endS: Point;
-  zoom: number;
-  measureScale?: MeasureScale | null;
-}
-
-function LiveLine({ startS, endS, zoom, measureScale }: LiveLineProps) {
-  const d = dist(startS, endS) / zoom; // PDF points from screen distance
-  const mid = midpoint(startS, endS);
-  const { nx, ny } = perpUnit(startS, endS);
-  const ang = angleDeg(startS, endS);
-  const distLabel = measureScale
-    ? formatScaled(d, measureScale)
-    : formatDist(d);
-  const lw = Math.max(distLabel.length * 8 + LP * 2, 80);
-
-  return (
-    <g>
-      <line
-        x1={startS.x}
-        y1={startS.y}
-        x2={endS.x}
-        y2={endS.y}
-        stroke="#1e88e5"
-        strokeWidth={2}
-        strokeDasharray="7 4"
-        strokeLinecap="round"
-        opacity={0.85}
-      />
-      <line
-        x1={startS.x + (nx * TICK) / 2}
-        y1={startS.y + (ny * TICK) / 2}
-        x2={startS.x - (nx * TICK) / 2}
-        y2={startS.y - (ny * TICK) / 2}
-        stroke="#1e88e5"
-        strokeWidth={2}
-        strokeLinecap="round"
-      />
-      {d > 4 && (
-        <g>
-          <rect
-            x={mid.x - lw / 2}
-            y={mid.y - LH2 / 2}
-            width={lw}
-            height={LH2}
-            rx={5}
-            fill="#1e88e5"
-            stroke="white"
-            strokeWidth={1}
-          />
-          <text
-            x={mid.x}
-            y={mid.y - 6}
-            textAnchor="middle"
-            dominantBaseline="middle"
-            fill="white"
-            fontSize={12}
-            fontFamily="'Roboto Mono','Consolas',monospace"
-            fontWeight={600}
-            style={{ userSelect: "none" }}
-          >
-            {distLabel}
-          </text>
-          <text
-            x={mid.x}
-            y={mid.y + 13}
-            textAnchor="middle"
-            dominantBaseline="middle"
-            fill="rgba(255,255,255,0.85)"
-            fontSize={11}
-            fontFamily="'Roboto Mono','Consolas',monospace"
-            fontWeight={500}
-            style={{ userSelect: "none" }}
-          >
-            {`∠ ${ang.toFixed(1)}°`}
-          </text>
-        </g>
-      )}
-    </g>
-  );
+  return {
+    screenPt: { x: cx, y: cy },
+    docPt: {
+      pageIndex,
+      x: docPoint.x,
+      y: docPoint.y,
+    },
+  };
 }
 
 // ─── Main ─────────────────────────────────────────────────────────────────────
@@ -637,14 +303,34 @@ function LiveLine({ startS, endS, zoom, measureScale }: LiveLineProps) {
 export const RulerOverlay = React.forwardRef<
   RulerOverlayHandle,
   RulerOverlayProps
->(({ containerRef, isActive, pageMeasureScales }, ref) => {
+>(function RulerOverlayImpl(
+  {
+    containerRef,
+    isActive,
+    pageMeasureScales,
+    customScale,
+    isCalibrationActive = false,
+    onCalibrationMeasure,
+  }: RulerOverlayProps,
+  ref,
+) {
   const [measurements, setMeasurements] = useState<Measurement[]>([]);
   const [firstPt, setFirstPt] = useState<PagePoint | null>(null);
   /** Current cursor in SVG screen-space — for live crosshair and live line rendering. */
   const [cursorS, setCursorS] = useState<Point | null>(null);
   /** Current cursor in page-relative PDF units — for finalising off-page clicks. */
   const [cursorDoc, setCursorDoc] = useState<PagePoint | null>(null);
+  const [selectedId, setSelectedId] = useState<string | null>(null);
   const [hoveredId, setHoveredId] = useState<string | null>(null);
+  const [labelVisibilityMode, setLabelVisibilityMode] =
+    useState<RulerLabelVisibilityMode>("hideSmall");
+  const [isDrawThroughActive, setIsDrawThroughActive] = useState(false);
+
+  // Callbacks for explicit measurement changes; restores stay silent.
+  const measurementsListenersRef = useRef<
+    Set<(measurements: Measurement[]) => void>
+  >(new Set());
+  const measurementsRef = useRef<Measurement[]>(measurements);
 
   /**
    * Incremented on scroll to trigger re-renders.
@@ -655,7 +341,13 @@ export const RulerOverlay = React.forwardRef<
 
   const scrollElRef = useRef<HTMLElement | null>(null);
   const scrollCleanupRef = useRef<(() => void) | null>(null);
-  const idCounter = useRef(0);
+  const scrollRafRef = useRef<number | null>(null);
+  const rulerPageContentRef = useRef<SVGGElement | null>(null);
+  const renderedScrollRef = useRef({ left: 0, top: 0 });
+  const isActiveRef = useRef(isActive);
+  useEffect(() => {
+    isActiveRef.current = isActive;
+  }, [isActive]);
 
   const firstPtRef = useRef<PagePoint | null>(null);
   useEffect(() => {
@@ -663,10 +355,66 @@ export const RulerOverlay = React.forwardRef<
   }, [firstPt]);
 
   const cursorDocRef = useRef<PagePoint | null>(null);
+  const wasCalibrationActiveRef = useRef(isCalibrationActive);
+  const drawThroughActiveRef = useRef(false);
+
+  const setDrawThroughMode = useCallback((isEnabled: boolean) => {
+    drawThroughActiveRef.current = isEnabled;
+    setIsDrawThroughActive(isEnabled);
+
+    if (isEnabled) {
+      setHoveredId(null);
+    }
+  }, []);
+
+  const cycleLabelVisibilityMode = useCallback(() => {
+    setLabelVisibilityMode((currentMode) => {
+      if (currentMode === "hideSmall") {
+        return "showAll";
+      }
+
+      if (currentMode === "showAll") {
+        return "hideAll";
+      }
+
+      return "hideSmall";
+    });
+  }, []);
+
+  const notifyMeasurementsChange = useCallback(
+    (nextMeasurements: Measurement[]) => {
+      measurementsListenersRef.current.forEach((listener) =>
+        listener(nextMeasurements),
+      );
+    },
+    [],
+  );
+
+  const replaceMeasurements = useCallback(
+    (nextMeasurements: Measurement[], notify = false) => {
+      measurementsRef.current = nextMeasurements;
+      setMeasurements(nextMeasurements);
+      if (notify) {
+        notifyMeasurementsChange(nextMeasurements);
+      }
+    },
+    [notifyMeasurementsChange],
+  );
+
+  const updateMeasurements = useCallback(
+    (
+      updater: (currentMeasurements: Measurement[]) => Measurement[],
+      notify = false,
+    ) => {
+      replaceMeasurements(updater(measurementsRef.current), notify);
+    },
+    [replaceMeasurements],
+  );
 
   // ── Zoom ──────────────────────────────────────────────────────────────────
   const viewer = useViewer();
-  const { registerImmediateZoomUpdate } = viewer;
+  const { registerImmediateRotationUpdate, registerImmediateZoomUpdate } =
+    viewer;
 
   const [zoom, setZoom] = useState<number>(() => {
     try {
@@ -681,6 +429,19 @@ export const RulerOverlay = React.forwardRef<
     zoomRef.current = zoom;
   }, [zoom]);
 
+  const [rotation, setRotation] = useState<Rotation>(() => {
+    try {
+      return normalizeRotation(viewer.getRotationState().rotation);
+    } catch {
+      return normalizeRotation(0);
+    }
+  });
+
+  const rotationRef = useRef<Rotation>(rotation);
+  useEffect(() => {
+    rotationRef.current = rotation;
+  }, [rotation]);
+
   useEffect(() => {
     return registerImmediateZoomUpdate((pct) => {
       const newZoom = pct / 100;
@@ -692,16 +453,88 @@ export const RulerOverlay = React.forwardRef<
     });
   }, [registerImmediateZoomUpdate]);
 
+  useEffect(() => {
+    return registerImmediateRotationUpdate((nextRotation) => {
+      const normalizedRotation = normalizeRotation(nextRotation);
+      rotationRef.current = normalizedRotation;
+      setRotation(normalizedRotation);
+      requestAnimationFrame(() => setScrollVersion((n) => n + 1));
+    });
+  }, [registerImmediateRotationUpdate]);
+
+  // ── Layout change tracking (menu close, sidebar toggle, etc.) ──────────────
+  // Monitor PDF container for layout changes and force re-render so measurements
+  // use updated getBoundingClientRect positions after layout reflow
+  useEffect(() => {
+    if (!containerRef.current) return;
+
+    const handleLayoutChange = () => {
+      // Layout changed - force re-render to recalculate coordinates from getBoundingClientRect
+      setScrollVersion((n) => n + 1);
+    };
+
+    // Use ResizeObserver if available, otherwise fall back to window resize event
+    if (typeof ResizeObserver !== "undefined") {
+      const resizeObserver = new ResizeObserver(handleLayoutChange);
+      resizeObserver.observe(containerRef.current);
+      return () => resizeObserver.disconnect();
+    } else {
+      // Fallback for environments without ResizeObserver (legacy browsers, embedded webviews)
+      window.addEventListener("resize", handleLayoutChange);
+      return () => window.removeEventListener("resize", handleLayoutChange);
+    }
+  }, [containerRef]);
+
   // ── Scroll tracking ────────────────────────────────────────────────────────
-  // We only need re-renders on scroll; getBoundingClientRect gives us accurate
-  // positions without needing to know the scroll offset ourselves.
+  // Native scrolling moves the PDF pages before React re-renders this fixed
+  // overlay. Translate page-anchored SVG content immediately, then let the next
+  // frame render exact coordinates from getBoundingClientRect.
+
+  useLayoutEffect(() => {
+    const scrollEl = scrollElRef.current;
+    if (scrollEl) {
+      renderedScrollRef.current = {
+        left: scrollEl.scrollLeft,
+        top: scrollEl.scrollTop,
+      };
+    }
+    rulerPageContentRef.current?.removeAttribute("transform");
+  });
 
   const attachScrollEl = useCallback((el: HTMLElement) => {
     scrollCleanupRef.current?.();
     scrollElRef.current = el;
-    const handler = () => setScrollVersion((n) => n + 1);
+    const handler = () => {
+      if (!isActiveRef.current && measurementsRef.current.length === 0) {
+        return;
+      }
+
+      const dx = renderedScrollRef.current.left - el.scrollLeft;
+      const dy = renderedScrollRef.current.top - el.scrollTop;
+      if (dx !== 0 || dy !== 0) {
+        rulerPageContentRef.current?.setAttribute(
+          "transform",
+          `translate(${dx} ${dy})`,
+        );
+      }
+
+      if (scrollRafRef.current !== null) {
+        return;
+      }
+
+      scrollRafRef.current = requestAnimationFrame(() => {
+        scrollRafRef.current = null;
+        setScrollVersion((n) => n + 1);
+      });
+    };
     el.addEventListener("scroll", handler, { passive: true });
-    scrollCleanupRef.current = () => el.removeEventListener("scroll", handler);
+    scrollCleanupRef.current = () => {
+      el.removeEventListener("scroll", handler);
+      if (scrollRafRef.current !== null) {
+        cancelAnimationFrame(scrollRafRef.current);
+        scrollRafRef.current = null;
+      }
+    };
   }, []);
 
   useEffect(() => {
@@ -737,22 +570,100 @@ export const RulerOverlay = React.forwardRef<
 
   // ── Imperative handle ──────────────────────────────────────────────────────
   React.useImperativeHandle(ref, () => ({
-    clearAll: () => {
-      setMeasurements([]);
+    clearAll: (silent = false) => {
+      firstPtRef.current = null;
+      cursorDocRef.current = null;
+      replaceMeasurements([], !silent);
       setFirstPt(null);
       setCursorS(null);
       setCursorDoc(null);
+      setSelectedId(null);
+      setHoveredId(null);
+    },
+    getMeasurements: () => measurementsRef.current,
+    setMeasurements: (newMeasurements: Measurement[]) => {
+      // Validate all measurements before setting state
+      const validated = newMeasurements.filter((m) => validateMeasurement(m));
+      replaceMeasurements(validated, true);
+    },
+    restoreMeasurements: (newMeasurements: Measurement[]) => {
+      replaceMeasurements(
+        newMeasurements.filter((measurement) =>
+          validateMeasurement(measurement),
+        ),
+        false,
+      );
+    },
+    onMeasurementsChange: (callback: (measurements: Measurement[]) => void) => {
+      measurementsListenersRef.current.add(callback);
+      // Return unsubscribe function
+      return () => {
+        measurementsListenersRef.current.delete(callback);
+      };
     },
   }));
 
   // ── Reset when deactivated ─────────────────────────────────────────────────
   useEffect(() => {
     if (!isActive) {
+      firstPtRef.current = null;
+      cursorDocRef.current = null;
+      setFirstPt(null);
+      setCursorS(null);
+      setCursorDoc(null);
+      setSelectedId(null);
+      setHoveredId(null);
+      setDrawThroughMode(false);
+    }
+  }, [isActive, setDrawThroughMode]);
+
+  useEffect(() => {
+    const wasCalibrationActive = wasCalibrationActiveRef.current;
+    wasCalibrationActiveRef.current = isCalibrationActive;
+
+    if (wasCalibrationActive !== isCalibrationActive) {
+      firstPtRef.current = null;
+      cursorDocRef.current = null;
       setFirstPt(null);
       setCursorS(null);
       setCursorDoc(null);
     }
-  }, [isActive]);
+  }, [isCalibrationActive]);
+
+  useEffect(() => {
+    if (!isActive) {
+      return;
+    }
+
+    const onKeyDown = (e: KeyboardEvent) => {
+      if (e.key !== "Alt" || isEditableKeyboardTarget(e.target)) {
+        return;
+      }
+
+      e.preventDefault();
+      setDrawThroughMode(true);
+    };
+
+    const onKeyUp = (e: KeyboardEvent) => {
+      if (e.key === "Alt") {
+        setDrawThroughMode(false);
+      }
+    };
+
+    const onBlur = () => {
+      setDrawThroughMode(false);
+    };
+
+    document.addEventListener("keydown", onKeyDown);
+    document.addEventListener("keyup", onKeyUp);
+    window.addEventListener("blur", onBlur);
+    return () => {
+      document.removeEventListener("keydown", onKeyDown);
+      document.removeEventListener("keyup", onKeyUp);
+      window.removeEventListener("blur", onBlur);
+      setDrawThroughMode(false);
+    };
+  }, [isActive, setDrawThroughMode]);
 
   // ── Mouse events ───────────────────────────────────────────────────────────
   useEffect(() => {
@@ -766,20 +677,28 @@ export const RulerOverlay = React.forwardRef<
 
     /**
      * Convert a mouse event to a page-relative PagePoint.
-     * Returns null if the cursor is not directly over a page element.
+     * Returns null if the cursor is not over a page.
      */
     const toDocPagePt = (e: MouseEvent): PagePoint | null => {
-      const pageEl = (e.target as Element).closest?.(
-        "[data-page-index]",
-      ) as HTMLElement | null;
+      const pageEl = findPageAtClientPoint(el, e.clientX, e.clientY);
       if (!pageEl) return null;
       const pageIndex = parseInt(pageEl.dataset.pageIndex ?? "0", 10);
-      const r = pageEl.getBoundingClientRect();
       const z = zoomRef.current;
+      const effectiveRotation = getEffectivePageRotation(
+        pageEl,
+        rotationRef.current,
+      );
+      const docPoint = clientPointToPagePoint(
+        pageEl,
+        e.clientX,
+        e.clientY,
+        z,
+        effectiveRotation,
+      );
       return {
         pageIndex,
-        x: (e.clientX - r.left) / z,
-        y: (e.clientY - r.top) / z,
+        x: docPoint.x,
+        y: docPoint.y,
       };
     };
 
@@ -791,17 +710,23 @@ export const RulerOverlay = React.forwardRef<
 
     const onMove = (e: MouseEvent) => {
       const screenPt = toScreenPt(e);
+      const docPt = toDocPagePt(e);
 
-      if (isOverPage(e)) {
+      if (docPt) {
         el.style.cursor = "crosshair";
-        const docPt = toDocPagePt(e);
         setCursorS(screenPt);
         setCursorDoc(docPt);
         cursorDocRef.current = docPt;
       } else if (firstPtRef.current !== null) {
         // First point placed, cursor wandered off page — clamp to nearest edge
         el.style.cursor = "crosshair";
-        const result = nearestPageDocPt(screenPt, el, zoomRef.current);
+        const result = nearestPageDocPt(
+          screenPt,
+          el,
+          zoomRef.current,
+          rotationRef.current,
+          firstPtRef.current.pageIndex,
+        );
         if (result) {
           setCursorS(result.screenPt);
           setCursorDoc(result.docPt);
@@ -815,25 +740,67 @@ export const RulerOverlay = React.forwardRef<
 
     const onClick = (e: MouseEvent) => {
       if (e.button !== 0) return;
-      if ((e.target as Element).closest?.("[data-ruler-interactive]")) return;
+      const target = e.target as Element;
+      if (target.closest?.("[data-ruler-control]")) return;
 
-      const overPage = isOverPage(e);
+      const hasMeasurementInProgress =
+        firstPtRef.current !== null || drawThroughActiveRef.current || e.altKey;
+      if (
+        !hasMeasurementInProgress &&
+        target.closest?.("[data-ruler-interactive]")
+      ) {
+        return;
+      }
+
+      const dp = toDocPagePt(e);
+      const overPage = dp !== null;
       if (!overPage && firstPtRef.current === null) return;
       e.preventDefault();
 
-      const dp = overPage ? toDocPagePt(e) : cursorDocRef.current;
-      if (!dp) return;
+      const nextPoint = dp ?? cursorDocRef.current;
+      if (!nextPoint) return;
 
-      setFirstPt((prev) => {
-        if (!prev) {
-          firstPtRef.current = dp;
-          return dp;
-        }
+      const prev = firstPtRef.current;
+      if (!prev) {
+        firstPtRef.current = nextPoint;
+        setFirstPt(nextPoint);
+        setSelectedId(null);
+        setHoveredId(null);
+        return;
+      }
+
+      // CRITICAL: Reject cross-page measurements
+      // Measurements must have both points on the same page
+      if (prev.pageIndex !== nextPoint.pageIndex) {
+        // Reset first point so user can start fresh on same page
         firstPtRef.current = null;
-        const id = `ruler-${++idCounter.current}`;
-        setMeasurements((m) => [...m, { id, start: prev, end: dp }]);
-        return null;
-      });
+        cursorDocRef.current = null;
+        setFirstPt(null);
+        setCursorS(null);
+        setCursorDoc(null);
+        return;
+      }
+
+      firstPtRef.current = null;
+      setFirstPt(null);
+
+      if (isCalibrationActive) {
+        const distancePts = dist(prev, nextPoint);
+        if (distancePts > 0) {
+          onCalibrationMeasure?.({
+            start: prev,
+            end: nextPoint,
+            pdfDistancePts: distancePts,
+          });
+        }
+        return;
+      }
+
+      const id = createRulerMeasurementId();
+      updateMeasurements(
+        (m) => [...m, { id, start: prev, end: nextPoint }],
+        true,
+      );
     };
 
     const onLeave = () => {
@@ -842,6 +809,8 @@ export const RulerOverlay = React.forwardRef<
     };
     const onKey = (e: KeyboardEvent) => {
       if (e.key === "Escape") {
+        firstPtRef.current = null;
+        cursorDocRef.current = null;
         setFirstPt(null);
         setCursorS(null);
         setCursorDoc(null);
@@ -859,11 +828,27 @@ export const RulerOverlay = React.forwardRef<
       document.removeEventListener("keydown", onKey);
       el.style.cursor = "";
     };
-  }, [containerRef, isActive]);
+  }, [
+    containerRef,
+    isActive,
+    isCalibrationActive,
+    onCalibrationMeasure,
+    updateMeasurements,
+  ]);
 
-  const deleteMeasurement = useCallback((id: string) => {
-    setMeasurements((prev) => prev.filter((m) => m.id !== id));
-  }, []);
+  const deleteMeasurement = useCallback(
+    (id: string) => {
+      updateMeasurements((prev) => prev.filter((m) => m.id !== id), true);
+      // Close expanded label if the deleted measurement was selected
+      if (selectedId === id) {
+        setSelectedId(null);
+      }
+      if (hoveredId === id) {
+        setHoveredId(null);
+      }
+    },
+    [hoveredId, selectedId, updateMeasurements],
+  );
 
   if (!isActive && measurements.length === 0) return null;
 
@@ -887,13 +872,60 @@ export const RulerOverlay = React.forwardRef<
     if (!pageEl) return null;
     const pageRect = pageEl.getBoundingClientRect();
     const containerRect = container.getBoundingClientRect();
+    const effectiveRotation = getEffectivePageRotation(pageEl, rotation);
+    const displayPoint = pagePointToDisplayPoint(
+      pageEl,
+      pageRect,
+      pt,
+      zoom,
+      effectiveRotation,
+    );
     return {
-      x: pageRect.left - containerRect.left + pt.x * zoom,
-      y: pageRect.top - containerRect.top + pt.y * zoom,
+      x: pageRect.left - containerRect.left + displayPoint.x,
+      y: pageRect.top - containerRect.top + displayPoint.y,
     };
   };
 
   const firstPtS = firstPt ? pagePointToScreen(firstPt) : null;
+  const renderedMeasurements = measurements.reduce<RulerRenderedMeasurement[]>(
+    (items, measurement) => {
+      const startS = pagePointToScreen(measurement.start);
+      const endS = pagePointToScreen(measurement.end);
+      if (!startS || !endS) {
+        return items;
+      }
+
+      const measureScale = pickScale(
+        measurement.start,
+        measurement.end,
+        pageMeasureScales,
+        customScale,
+      );
+
+      items.push({
+        measurement,
+        startS,
+        endS,
+        distPts: dist(measurement.start, measurement.end),
+        measureScale,
+      });
+      return items;
+    },
+    [],
+  );
+  const isMeasurementInteractionPassthroughActive =
+    firstPt !== null || isDrawThroughActive;
+  const liveLine =
+    isActive && firstPtS && cursorS
+      ? {
+          startS: firstPtS,
+          endS: cursorS,
+          measureScale:
+            !isCalibrationActive && firstPt && cursorDoc
+              ? pickScale(firstPt, cursorDoc, pageMeasureScales, customScale)
+              : null,
+        }
+      : null;
 
   return (
     <svg
@@ -907,6 +939,12 @@ export const RulerOverlay = React.forwardRef<
         overflow: "visible",
         zIndex: 100,
       }}
+      onClick={(e) => {
+        // Close expanded label if clicking on empty SVG area
+        if (e.target === e.currentTarget) {
+          setSelectedId(null);
+        }
+      }}
     >
       <defs>
         <filter id="ruler-shadow" x="-20%" y="-50%" width="140%" height="200%">
@@ -919,112 +957,29 @@ export const RulerOverlay = React.forwardRef<
         </filter>
       </defs>
 
-      {/* Completed measurements */}
-      {measurements.map((m) => {
-        const startS = pagePointToScreen(m.start);
-        const endS = pagePointToScreen(m.end);
-        if (!startS || !endS) return null;
-        const mScale = pageMeasureScales
-          ? pickScale(m.start, m.end, pageMeasureScales)
-          : null;
-        return (
-          <MeasurementLine
-            key={m.id}
-            id={m.id}
-            startS={startS}
-            endS={endS}
-            distPts={dist(startS, endS) / zoom}
-            hovered={hoveredId === m.id}
-            onDelete={deleteMeasurement}
-            onHover={setHoveredId}
-            measureScale={mScale}
-          />
-        );
-      })}
-
-      {/* Live line while drawing */}
-      {isActive && firstPtS && cursorS && (
-        <LiveLine
-          startS={firstPtS}
-          endS={cursorS}
-          zoom={zoom}
-          measureScale={
-            pageMeasureScales && firstPt && cursorDoc
-              ? pickScale(firstPt, cursorDoc, pageMeasureScales)
-              : null
-          }
-        />
-      )}
-
-      {/* First-point anchor dot */}
-      {isActive && firstPtS && (
-        <circle
-          cx={firstPtS.x}
-          cy={firstPtS.y}
-          r={DOT_R}
-          fill="#1e88e5"
-          stroke="white"
-          strokeWidth={2}
-        />
-      )}
-
-      {/* Crosshair */}
-      {isActive && cursorS && (
-        <g opacity={0.75}>
-          <line
-            x1={cursorS.x - 12}
-            y1={cursorS.y}
-            x2={cursorS.x + 12}
-            y2={cursorS.y}
-            stroke="#1e88e5"
-            strokeWidth={1.5}
-          />
-          <line
-            x1={cursorS.x}
-            y1={cursorS.y - 12}
-            x2={cursorS.x}
-            y2={cursorS.y + 12}
-            stroke="#1e88e5"
-            strokeWidth={1.5}
-          />
-          <circle cx={cursorS.x} cy={cursorS.y} r={2} fill="#1e88e5" />
-        </g>
-      )}
-
-      {/* Clear all */}
-      {measurements.length > 0 && (
-        <g
-          data-ruler-interactive="true"
-          style={{ pointerEvents: "all", cursor: "pointer" }}
-          onClick={(e) => {
-            e.stopPropagation();
-            setMeasurements([]);
-          }}
-        >
-          <rect
-            x={8}
-            y={8}
-            width={88}
-            height={26}
-            rx={5}
-            fill="rgba(239,83,80,0.9)"
-            stroke="white"
-            strokeWidth={1}
-          />
-          <text
-            x={52}
-            y={25}
-            textAnchor="middle"
-            fill="white"
-            fontSize={12}
-            fontFamily="sans-serif"
-            fontWeight={600}
-            style={{ userSelect: "none" }}
-          >
-            Clear all
-          </text>
-        </g>
-      )}
+      <RulerMeasurementLayer
+        measurements={renderedMeasurements}
+        zoom={zoom}
+        selectedId={selectedId}
+        hoveredId={hoveredId}
+        labelVisibilityMode={labelVisibilityMode}
+        isInteractionPassthroughActive={
+          isMeasurementInteractionPassthroughActive
+        }
+        liveLine={liveLine}
+        firstPoint={isActive ? firstPtS : null}
+        cursor={isActive ? cursorS : null}
+        pageContentRef={rulerPageContentRef}
+        onSelect={setSelectedId}
+        onDelete={deleteMeasurement}
+        onHoverChange={setHoveredId}
+        onClearAll={() => {
+          replaceMeasurements([], true);
+          setSelectedId(null);
+          setHoveredId(null);
+        }}
+        onCycleLabelVisibilityMode={cycleLabelVisibilityMode}
+      />
     </svg>
   );
 });
diff --git a/frontend/editor/src/core/components/viewer/RulerScaleSettingsButton.tsx b/frontend/editor/src/core/components/viewer/RulerScaleSettingsButton.tsx
new file mode 100644
index 0000000000..88b62d7520
--- /dev/null
+++ b/frontend/editor/src/core/components/viewer/RulerScaleSettingsButton.tsx
@@ -0,0 +1,82 @@
+import { useRef } from "react";
+import { Popover } from "@mantine/core";
+import SettingsIcon from "@mui/icons-material/Settings";
+import { Tooltip, type TooltipProps } from "@app/components/shared/Tooltip";
+import { ScaleSettingsPanel } from "@app/components/viewer/ScaleSettingsPanel";
+import type { MeasureScale } from "@app/utils/measurementTypes";
+import { ActionIcon } from "@app/ui/ActionIcon";
+
+interface RulerScaleSettingsButtonProps {
+  disabled?: boolean;
+  label: string;
+  tooltipPosition: NonNullable<TooltipProps["position"]>;
+  currentScale?: MeasureScale | null;
+  onApplyScale?: (scale: MeasureScale) => void;
+  onResetScale?: () => void;
+  onStartCalibration?: () => void;
+  onCancelCalibration?: () => void;
+  isCalibrationActive?: boolean;
+}
+
+export function RulerScaleSettingsButton({
+  disabled,
+  label,
+  tooltipPosition,
+  currentScale,
+  onApplyScale,
+  onResetScale,
+  onStartCalibration,
+  onCancelCalibration,
+  isCalibrationActive,
+}: RulerScaleSettingsButtonProps) {
+  const scalePopoverRef = useRef<HTMLButtonElement>(null);
+
+  return (
+    <Popover
+      position={tooltipPosition}
+      withArrow
+      shadow="md"
+      offset={8}
+      withinPortal
+    >
+      <Popover.Target>
+        <div style={{ display: "inline-flex" }}>
+          <Tooltip
+            content={label}
+            position={tooltipPosition}
+            offset={12}
+            arrow
+            portalTarget={document.body}
+          >
+            <ActionIcon
+              ref={scalePopoverRef}
+              variant="primary"
+              className="workbench-bar-action-icon"
+              disabled={disabled}
+              aria-label={label}
+            >
+              <SettingsIcon sx={{ fontSize: "1rem" }} />
+            </ActionIcon>
+          </Tooltip>
+        </div>
+      </Popover.Target>
+      <Popover.Dropdown>
+        <ScaleSettingsPanel
+          currentScale={currentScale}
+          onApplyScale={(scale) => {
+            onApplyScale?.(scale);
+          }}
+          onResetScale={() => {
+            onResetScale?.();
+          }}
+          onStartCalibration={onStartCalibration}
+          onCancelCalibration={onCancelCalibration}
+          isCalibrationActive={isCalibrationActive}
+          onClose={() => {
+            scalePopoverRef.current?.click();
+          }}
+        />
+      </Popover.Dropdown>
+    </Popover>
+  );
+}
diff --git a/frontend/editor/src/core/components/viewer/ScaleCalibrationDialog.tsx b/frontend/editor/src/core/components/viewer/ScaleCalibrationDialog.tsx
new file mode 100644
index 0000000000..3b7b54311f
--- /dev/null
+++ b/frontend/editor/src/core/components/viewer/ScaleCalibrationDialog.tsx
@@ -0,0 +1,190 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { Group, Modal, NumberInput, Select, Stack, Text } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import { Button } from "@app/ui/Button";
+import type { MeasureScale, PagePoint } from "@app/utils/measurementTypes";
+import {
+  UNIT_OPTIONS,
+  formatPaperDistance,
+  validateRealDistance,
+  calculateCalibratedScale,
+  generateScaleLabel,
+} from "@app/utils/measurementUtils";
+import {
+  getLastCalibrationUnit,
+  setLastCalibrationUnit,
+} from "@app/utils/measurementPreferences";
+
+// Result of user drawing measurement on PDF (from RulerOverlay)
+export interface ScaleCalibrationMeasurement {
+  start: PagePoint;
+  end: PagePoint;
+  pdfDistancePts: number;
+}
+
+interface ScaleCalibrationDialogProps {
+  opened: boolean;
+  measurement: ScaleCalibrationMeasurement | null;
+  defaultUnit: string;
+  onApplyScale: (scale: MeasureScale) => void;
+  onClose: () => void;
+}
+
+export function ScaleCalibrationDialog({
+  opened,
+  measurement,
+  defaultUnit,
+  onApplyScale,
+  onClose,
+}: ScaleCalibrationDialogProps) {
+  const { t } = useTranslation();
+
+  const [realDistance, setRealDistance] = useState<number | null>(null);
+  const [unit, setUnit] = useState(() => getLastCalibrationUnit(defaultUnit));
+  const [error, setError] = useState<string | null>(null);
+  const wasOpenedRef = useRef(opened);
+
+  const previewScale = useMemo(() => {
+    if (measurement == null || realDistance == null) {
+      return null;
+    }
+
+    try {
+      return calculateCalibratedScale(
+        measurement.pdfDistancePts,
+        realDistance,
+        unit,
+      );
+    } catch {
+      return null;
+    }
+  }, [measurement, realDistance, unit]);
+
+  useEffect(() => {
+    const isOpening = opened && !wasOpenedRef.current;
+    wasOpenedRef.current = opened;
+
+    if (isOpening) {
+      setRealDistance(null);
+      setUnit(getLastCalibrationUnit(defaultUnit));
+      setError(null);
+    }
+  }, [opened, defaultUnit]);
+
+  const handleRealDistanceChange = (value: number | string | null) => {
+    setError(null);
+
+    const validated = validateRealDistance(value);
+    setRealDistance(validated);
+  };
+
+  const handleUnitChange = (newUnit: string | null) => {
+    if (newUnit == null) return;
+
+    setUnit(newUnit);
+    setLastCalibrationUnit(newUnit);
+    setError(null);
+  };
+
+  const handleApply = () => {
+    if (measurement == null || realDistance == null) {
+      setError(
+        t(
+          "scaleSettings.calibrationDistanceRequired",
+          "Enter a real-world distance greater than zero",
+        ),
+      );
+      return;
+    }
+
+    try {
+      const scale = calculateCalibratedScale(
+        measurement.pdfDistancePts,
+        realDistance,
+        unit,
+      );
+
+      setLastCalibrationUnit(unit);
+      onApplyScale(scale);
+    } catch (err) {
+      console.error("[Calibration] Failed to apply:", err);
+      setError(
+        t(
+          "scaleSettings.calibrationInvalid",
+          "Unable to calculate scale from this measurement",
+        ),
+      );
+    }
+  };
+
+  return (
+    <Modal
+      opened={opened}
+      onClose={onClose}
+      title={t("scaleSettings.calibrationTitle", "Calibrate Scale")}
+      centered
+      size="sm"
+    >
+      <Stack gap="md">
+        {/* Show paper distance automatically */}
+        {measurement && (
+          <Text size="sm" c="dimmed">
+            {t(
+              "scaleSettings.calibrationPaperDistance",
+              "Measured page distance: {{distance}}",
+              {
+                distance: formatPaperDistance(measurement.pdfDistancePts),
+              },
+            )}
+          </Text>
+        )}
+
+        {/* Input: real distance + unit selector */}
+        <Group grow align="flex-start">
+          <NumberInput
+            label={t("scaleSettings.realDistance", "Real-world distance")}
+            placeholder={t(
+              "scaleSettings.realDistancePlaceholder",
+              "e.g., 5 (actual distance in {{unit}})",
+              { unit },
+            )}
+            value={realDistance ?? undefined}
+            onChange={handleRealDistanceChange}
+            min={0}
+            step={0.1}
+            decimalScale={4}
+            error={error}
+          />
+          <Select
+            label={t("scaleSettings.unit", "Unit")}
+            data={UNIT_OPTIONS}
+            value={unit}
+            onChange={handleUnitChange}
+            searchable
+          />
+        </Group>
+
+        {/* Preview: show calculated scale */}
+        {previewScale && (
+          <Text size="sm" c="blue">
+            {t(
+              "scaleSettings.calculatedScale",
+              "Calculated scale (1 page unit = X real units)",
+            )}
+            : {generateScaleLabel(previewScale.ratio, previewScale.unit)}
+          </Text>
+        )}
+
+        {/* Actions: Cancel or Apply */}
+        <Group justify="flex-end">
+          <Button variant="secondary" onClick={onClose}>
+            {t("common.cancel", "Cancel")}
+          </Button>
+          <Button onClick={handleApply}>
+            {t("scaleSettings.applyCalibration", "Apply Calibration")}
+          </Button>
+        </Group>
+      </Stack>
+    </Modal>
+  );
+}
diff --git a/frontend/editor/src/core/components/viewer/ScaleSettingsPanel.tsx b/frontend/editor/src/core/components/viewer/ScaleSettingsPanel.tsx
new file mode 100644
index 0000000000..622eeef9ae
--- /dev/null
+++ b/frontend/editor/src/core/components/viewer/ScaleSettingsPanel.tsx
@@ -0,0 +1,321 @@
+import React, { useCallback, useEffect, useState } from "react";
+import { Group, NumberInput, Select, Stack, Text, Grid } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import { Button } from "@app/ui/Button";
+import type { MeasureScale } from "@app/utils/measurementTypes";
+import {
+  generateScaleLabel,
+  parsePresetRatio,
+  calculateScaleFactor,
+  UNIT_OPTIONS,
+} from "@app/utils/measurementUtils";
+
+// ─── Constants ─────────────────────────────────────────────────────────────
+// Preset scales as architectural ratios (e.g., "1:100" = 1 page unit = 100 real-world units)
+const PRESET_SCALES = ["1:5", "1:10", "1:20", "1:50", "1:100", "1:150"];
+
+// ─── Component ────────────────────────────────────────────────────────────
+interface ScaleSettingsPanelProps {
+  onApplyScale: (scale: MeasureScale) => void;
+  onResetScale?: () => void;
+  onStartCalibration?: () => void;
+  onCancelCalibration?: () => void;
+  isCalibrationActive?: boolean;
+  currentScale?: MeasureScale | null;
+  onClose?: () => void;
+}
+
+export function ScaleSettingsPanel({
+  onApplyScale,
+  onResetScale,
+  onStartCalibration,
+  onCancelCalibration,
+  isCalibrationActive = false,
+  currentScale,
+  onClose,
+}: ScaleSettingsPanelProps) {
+  const { t } = useTranslation();
+  const [ratio, setRatio] = useState<string | number>(
+    currentScale?.ratio ?? "",
+  );
+  const [unit, setUnit] = useState<string>(currentScale?.unit || "m");
+  const [presetSelected, setPresetSelected] = useState<string | null>(null);
+  const [ratioError, setRatioError] = useState<string | null>(null);
+  const [unitError, setUnitError] = useState<string | null>(null);
+
+  // Helper functions to clear errors
+  const clearErrors = useCallback(() => {
+    setRatioError(null);
+    setUnitError(null);
+  }, []);
+
+  const clearRatioError = useCallback(() => {
+    setRatioError(null);
+  }, []);
+
+  const clearUnitError = useCallback(() => {
+    setUnitError(null);
+  }, []);
+
+  // Sync form fields when currentScale changes
+  useEffect(() => {
+    if (currentScale) {
+      // ratio can be null, so only set it if it exists
+      setRatio(currentScale.ratio ?? "");
+      setUnit(currentScale.unit);
+      clearErrors();
+
+      // Check if current scale matches any preset
+      const matchedPreset =
+        currentScale.ratio !== null
+          ? PRESET_SCALES.find(
+              (preset) => parsePresetRatio(preset) === currentScale.ratio,
+            )
+          : null;
+      setPresetSelected(matchedPreset ?? null);
+    } else {
+      // Reset to defaults when no active scale
+      setRatio("");
+      setUnit("m");
+      setPresetSelected(null);
+      clearErrors();
+    }
+  }, [currentScale, clearErrors]);
+
+  const handlePresetClick = (preset: string) => {
+    const presetRatio = parsePresetRatio(preset);
+    if (presetRatio === null) return;
+
+    setPresetSelected(preset);
+    setRatio(presetRatio);
+    clearRatioError();
+    // Live update: apply immediately for presets
+    applyScale(presetRatio, unit);
+    // Close panel after applying preset
+    onClose?.();
+  };
+
+  const handleRatioChange = (value: string | number) => {
+    clearRatioError();
+
+    if (value === "") {
+      setRatio("");
+      setPresetSelected(null);
+      return;
+    }
+
+    setRatio(value);
+    // Clear preset selection when user enters custom value
+    setPresetSelected(null);
+  };
+
+  const parseRatioValue = (value: string | number): number | null => {
+    if (typeof value === "number") return Number.isNaN(value) ? null : value;
+
+    const trimmedValue = value.trim();
+    if (!trimmedValue) return null;
+
+    const numValue = Number(trimmedValue);
+    return Number.isNaN(numValue) ? null : numValue;
+  };
+
+  const handleUnitChange = (val: string | null) => {
+    if (!val) return;
+    setUnit(val);
+    clearUnitError();
+    // Auto-apply immediately if ratio is set (better UX consistency)
+    const numValue = parseRatioValue(ratio);
+    if (numValue && numValue > 0) {
+      // Close panel after auto-applying unit change
+      applyScale(numValue, val, true);
+    }
+  };
+
+  const validateRatio = (): number | null => {
+    const numValue = parseRatioValue(ratio);
+    if (numValue === null || numValue === undefined || isNaN(numValue)) {
+      setRatioError(t("scaleSettings.ratioRequired", "Ratio is required"));
+      return null;
+    }
+    if (numValue <= 0) {
+      setRatioError(
+        t("scaleSettings.ratioPositive", "Ratio must be greater than zero"),
+      );
+      return null;
+    }
+    return numValue;
+  };
+
+  const applyScale = (
+    scaleRatio: number,
+    scaleUnit: string,
+    shouldClose = false,
+  ) => {
+    if (!scaleRatio || scaleRatio <= 0) return;
+
+    try {
+      // Calculate the raw factor from the ratio
+      const factor = calculateScaleFactor(scaleRatio, scaleUnit);
+
+      const scale: MeasureScale = {
+        factor,
+        ratio: scaleRatio,
+        unit: scaleUnit,
+      };
+
+      onApplyScale(scale);
+      clearUnitError();
+      // Close panel only if explicitly requested
+      if (shouldClose) {
+        onClose?.();
+      }
+    } catch (err) {
+      console.error("Invalid unit:", scaleUnit, err);
+      setUnitError(
+        t("scaleSettings.unitInvalid", "Invalid unit: {{scaleUnit}}", {
+          scaleUnit,
+        }),
+      );
+    }
+  };
+
+  const handleApply = () => {
+    const numValue = validateRatio();
+    if (numValue === null) return;
+    // Close panel after manual apply (if validation passed)
+    applyScale(numValue, unit, true);
+  };
+
+  const handleCalibrationToggle = () => {
+    clearErrors();
+    if (isCalibrationActive) {
+      onCancelCalibration?.();
+    } else {
+      onStartCalibration?.();
+    }
+    onClose?.();
+  };
+
+  return (
+    <Stack gap="md" style={{ padding: "0.75rem", minWidth: "300px" }}>
+      {/* Preset Scales Section */}
+      <div>
+        <Text size="sm" fw={600} mb="xs">
+          {t("scaleSettings.presets", "Preset Scales")}
+        </Text>
+        <Grid gutter="xs">
+          {PRESET_SCALES.map((preset) => (
+            <Grid.Col span={4} key={preset}>
+              <Button
+                variant={presetSelected === preset ? "primary" : "tertiary"}
+                size="sm"
+                fontSize="xs"
+                fullWidth
+                onClick={() => handlePresetClick(preset)}
+              >
+                {preset}
+              </Button>
+            </Grid.Col>
+          ))}
+        </Grid>
+      </div>
+
+      {/* Custom Scale Section */}
+      <div>
+        <Text size="sm" fw={600} mb="xs">
+          {t("scaleSettings.customScale", "Custom Scale")}
+        </Text>
+        <Group grow>
+          <div>
+            <NumberInput
+              key={`ratio-${currentScale?.ratio ?? "empty"}`}
+              label={t("scaleSettings.ratio", "Scale Ratio")}
+              placeholder={t(
+                "scaleSettings.ratioPlaceholder",
+                "e.g., 100 (1 page unit = 100 real units)",
+              )}
+              value={ratio}
+              onChange={handleRatioChange}
+              min={0.1}
+              step={1}
+              size="xs"
+              error={ratioError}
+            />
+          </div>
+          <div onMouseDown={(e) => e.stopPropagation()}>
+            <Select
+              label={t("scaleSettings.unit", "Unit")}
+              data={UNIT_OPTIONS}
+              value={unit}
+              onChange={handleUnitChange}
+              size="xs"
+              searchable
+              error={unitError}
+            />
+          </div>
+        </Group>
+        <Text size="xs" c="dimmed" mt="xs">
+          {t(
+            "scaleSettings.ratioHelp",
+            "Ratio: 1 page unit = X real-world units",
+          )}
+        </Text>
+      </div>
+
+      <Button onClick={handleApply} fullWidth size="sm">
+        {t("scaleSettings.apply", "Apply Scale")}
+      </Button>
+
+      {/* Active Scale Display */}
+      <div
+        style={{
+          padding: "0.5rem",
+          backgroundColor: currentScale
+            ? "rgba(30, 136, 229, 0.1)"
+            : "rgba(158, 158, 158, 0.1)",
+          borderRadius: "4px",
+        }}
+      >
+        <Text size="xs" c={currentScale ? "blue" : "dimmed"}>
+          <strong>{t("scaleSettings.activeScale", "Active Scale")}:</strong>{" "}
+          {currentScale && currentScale.ratio
+            ? generateScaleLabel(currentScale.ratio, currentScale.unit)
+            : currentScale && !currentScale.ratio
+              ? `${currentScale.unit} (custom)`
+              : t("scaleSettings.noneSet", "No custom scale set")}
+        </Text>
+      </div>
+
+      {/* Calibration Mode */}
+      <Button
+        onClick={handleCalibrationToggle}
+        fullWidth
+        variant={isCalibrationActive ? "primary" : "secondary"}
+        size="sm"
+        disabled={
+          isCalibrationActive ? !onCancelCalibration : !onStartCalibration
+        }
+        title={t(
+          "scaleSettings.calibrationTooltip",
+          "Measure a known distance to calculate the scale automatically",
+        )}
+      >
+        {isCalibrationActive
+          ? t("scaleSettings.calibrating", "Calibrating")
+          : t("scaleSettings.calibrate", "Calibrate")}
+      </Button>
+
+      {/* Reset Button */}
+      {currentScale && (
+        <Button
+          onClick={() => onResetScale?.()}
+          fullWidth
+          variant="secondary"
+          size="sm"
+        >
+          {t("scaleSettings.reset", "Reset to Defaults")}
+        </Button>
+      )}
+    </Stack>
+  );
+}
diff --git a/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx b/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx
index 14a308e0f3..d5d39c4c0c 100644
--- a/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx
+++ b/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx
@@ -26,11 +26,19 @@ import StraightenIcon from "@mui/icons-material/Straighten";
 import LayersIcon from "@mui/icons-material/Layers";
 import VolumeUpIcon from "@mui/icons-material/VolumeUp";
 import StopIcon from "@mui/icons-material/Stop";
+import SettingsIcon from "@mui/icons-material/Settings";
 import { useViewerReadAloud } from "@app/components/viewer/useViewerReadAloud";
+import { RulerScaleSettingsButton } from "@app/components/viewer/RulerScaleSettingsButton";
+import type { MeasureScale } from "@app/utils/measurementTypes";
 
 export function useViewerWorkbenchBarButtons(
   isRulerActive?: boolean,
   setIsRulerActive?: (v: boolean) => void,
+  customScale?: MeasureScale | null,
+  setCustomScale?: (scale: MeasureScale | null) => void,
+  isScaleCalibrationActive?: boolean,
+  startScaleCalibration?: () => void,
+  cancelScaleCalibration?: () => void,
 ) {
   const { t, i18n } = useTranslation();
   const viewer = useViewer();
@@ -118,11 +126,36 @@ export function useViewerWorkbenchBarButtons(
   const annotationsLabel = t("workbenchBar.annotations", "Annotations");
   const formFillLabel = t("workbenchBar.formFill", "Fill Form");
   const rulerLabel = t("workbenchBar.ruler", "Ruler / Measure");
+  const rulerSettingsLabel = t("workbenchBar.rulerSettings", "Scale Settings");
   const readAloudLabel = t("workbenchBar.readAloud", "Read Aloud");
   const readAloudSpeedLabel = t("workbenchBar.readAloudSpeed", "Speed");
 
   const isFormFillActive = (selectedTool as string) === "formFill";
 
+  const handleStartScaleCalibration = useCallback(() => {
+    startScaleCalibration?.();
+    setIsRulerActive?.(true);
+    if (isPanning) {
+      viewer.panActions.disablePan();
+      setIsPanning(false);
+    }
+  }, [isPanning, setIsRulerActive, startScaleCalibration, viewer.panActions]);
+
+  const handleCancelScaleCalibration = useCallback(() => {
+    cancelScaleCalibration?.();
+  }, [cancelScaleCalibration]);
+
+  const handleApplyRulerScale = useCallback(
+    (scale: MeasureScale) => {
+      setCustomScale?.(scale);
+    },
+    [setCustomScale],
+  );
+
+  const handleResetRulerScale = useCallback(() => {
+    setCustomScale?.(null);
+  }, [setCustomScale]);
+
   // Filter languages based on available voices
   const filteredLanguages = useMemo(
     () =>
@@ -234,6 +267,32 @@ export function useViewerWorkbenchBarButtons(
           }
         },
       },
+      // Ruler scale settings button - only visible when ruler is active
+      ...(isRulerActive
+        ? [
+            {
+              id: "viewer-ruler-settings",
+              icon: <SettingsIcon sx={{ fontSize: "1.5rem" }} />,
+              tooltip: rulerSettingsLabel,
+              ariaLabel: rulerSettingsLabel,
+              section: "top" as const,
+              order: 25.5,
+              render: ({ disabled }: { disabled?: boolean }) => (
+                <RulerScaleSettingsButton
+                  disabled={disabled}
+                  label={rulerSettingsLabel}
+                  tooltipPosition={tooltipPosition}
+                  currentScale={customScale}
+                  onApplyScale={handleApplyRulerScale}
+                  onResetScale={handleResetRulerScale}
+                  onStartCalibration={handleStartScaleCalibration}
+                  onCancelCalibration={handleCancelScaleCalibration}
+                  isCalibrationActive={isScaleCalibrationActive}
+                />
+              ),
+            },
+          ]
+        : []),
       {
         id: "viewer-rotate-left",
         icon: <LocalIcon icon="rotate-left" width="1rem" height="1rem" />,
@@ -553,8 +612,15 @@ export function useViewerWorkbenchBarButtons(
     formFillLabel,
     isFormFillActive,
     rulerLabel,
+    rulerSettingsLabel,
     isRulerActive,
     setIsRulerActive,
+    handleStartScaleCalibration,
+    handleCancelScaleCalibration,
+    handleApplyRulerScale,
+    handleResetRulerScale,
+    customScale,
+    isScaleCalibrationActive,
     readAloudLabel,
     readAloudSpeedLabel,
     isReadingAloud,
diff --git a/frontend/editor/src/core/contexts/ViewerContext.tsx b/frontend/editor/src/core/contexts/ViewerContext.tsx
index 5e5d08dbb4..78535b41ac 100644
--- a/frontend/editor/src/core/contexts/ViewerContext.tsx
+++ b/frontend/editor/src/core/contexts/ViewerContext.tsx
@@ -176,6 +176,9 @@ export interface ViewerContextType {
   registerImmediatePanUpdate: (
     callback: (isPanning: boolean) => void,
   ) => () => void;
+  registerImmediateRotationUpdate: (
+    callback: (rotation: number) => void,
+  ) => () => void;
 
   // Internal - for bridges to trigger immediate updates
   triggerImmediateScrollUpdate: (
@@ -188,6 +191,7 @@ export interface ViewerContextType {
     isDualPage?: boolean,
   ) => void;
   triggerImmediatePanUpdate: (isPanning: boolean) => void;
+  triggerImmediateRotationUpdate: (rotation: number) => void;
 
   // Action handlers - call EmbedPDF APIs directly
   scrollActions: ScrollActions;
@@ -310,6 +314,10 @@ export const ViewerProvider: React.FC<ViewerProviderProps> = ({ children }) => {
     register: registerImmediatePanUpdate,
     trigger: triggerImmediatePanInternal,
   } = useImmediateNotifier<[boolean]>();
+  const {
+    register: registerImmediateRotationUpdate,
+    trigger: triggerImmediateRotationInternal,
+  } = useImmediateNotifier<[number]>();
 
   const triggerImmediateZoomUpdate = useCallback(
     (percent: number) => {
@@ -339,6 +347,13 @@ export const ViewerProvider: React.FC<ViewerProviderProps> = ({ children }) => {
     [triggerImmediatePanInternal],
   );
 
+  const triggerImmediateRotationUpdate = useCallback(
+    (rotation: number) => {
+      triggerImmediateRotationInternal(rotation);
+    },
+    [triggerImmediateRotationInternal],
+  );
+
   const registerBridge = useCallback(
     <K extends BridgeKey>(
       type: K,
@@ -638,10 +653,12 @@ export const ViewerProvider: React.FC<ViewerProviderProps> = ({ children }) => {
     registerImmediateScrollUpdate,
     registerImmediateSpreadUpdate,
     registerImmediatePanUpdate,
+    registerImmediateRotationUpdate,
     triggerImmediateScrollUpdate,
     triggerImmediateZoomUpdate,
     triggerImmediateSpreadUpdate,
     triggerImmediatePanUpdate,
+    triggerImmediateRotationUpdate,
 
     // Actions
     scrollActions,
diff --git a/frontend/editor/src/core/hooks/useMeasurementManager.ts b/frontend/editor/src/core/hooks/useMeasurementManager.ts
new file mode 100644
index 0000000000..f6f6b9d6b1
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useMeasurementManager.ts
@@ -0,0 +1,293 @@
+import {
+  useCallback,
+  useEffect,
+  useRef,
+  useState,
+  type RefObject,
+} from "react";
+import type {
+  Measurement,
+  MeasureScale,
+  PageMeasureScales,
+} from "@app/utils/measurementTypes";
+import type { RulerOverlayHandle } from "@app/components/viewer/RulerOverlay";
+import {
+  loadSessionMap,
+  saveSessionMap,
+  validateMeasureScale,
+  validateMeasurement,
+} from "@app/utils/measurementUtils";
+import type { StirlingFile } from "@app/types/fileContext";
+import { isStirlingFile, getFormFillFileId } from "@app/types/fileContext";
+import { extractPageMeasureScales } from "@app/utils/pdfMeasurementExtraction";
+import type { ScaleCalibrationMeasurement } from "@app/components/viewer/ScaleCalibrationDialog";
+
+// ─── Hook: useMeasurementManager ──────────────────────────────────────────────
+
+interface EffectiveFileLike {
+  file: Blob | File;
+  url: string | null;
+}
+
+type ViewerFile = StirlingFile | File | null | undefined;
+
+interface UseMeasurementManagerProps {
+  currentFile: ViewerFile;
+  effectiveFile: EffectiveFileLike | null | undefined;
+  rulerOverlayRef: RefObject<RulerOverlayHandle | null>;
+}
+
+interface UseMeasurementManagerReturn {
+  isRulerActive: boolean;
+  setIsRulerActive: (v: boolean) => void;
+  pageMeasureScales: PageMeasureScales | null;
+  customScale: MeasureScale | null;
+  handleSetCustomScale: (scale: MeasureScale | null) => void;
+  isScaleCalibrationActive: boolean;
+  scaleCalibrationMeasurement: ScaleCalibrationMeasurement | null;
+  startScaleCalibration: () => void;
+  cancelScaleCalibration: () => void;
+  handleScaleCalibrationMeasurement: (
+    measurement: ScaleCalibrationMeasurement,
+  ) => void;
+  applyScaleCalibration: (scale: MeasureScale) => void;
+}
+
+export function useMeasurementManager({
+  currentFile,
+  effectiveFile,
+  rulerOverlayRef,
+}: UseMeasurementManagerProps): UseMeasurementManagerReturn {
+  const [isRulerActive, setIsRulerActive] = useState(false);
+  const [pageMeasureScales, setPageMeasureScales] =
+    useState<PageMeasureScales | null>(null);
+  const [customScale, setCustomScale] = useState<MeasureScale | null>(null);
+  const [isScaleCalibrationActive, setIsScaleCalibrationActive] =
+    useState(false);
+  const [scaleCalibrationMeasurement, setScaleCalibrationMeasurement] =
+    useState<ScaleCalibrationMeasurement | null>(null);
+  const [scalesByFileId, setScalesByFileId] = useState<
+    Map<string, MeasureScale | null>
+  >(new Map());
+  const [measurementsByFileId, setMeasurementsByFileId] = useState<
+    Map<string, Measurement[]>
+  >(new Map());
+
+  const restoredFileKeyRef = useRef<string | null>(null);
+
+  const getStableFileKey = useCallback((file: ViewerFile): string | null => {
+    if (!file) return null;
+    if (isStirlingFile(file)) {
+      return file.fileId;
+    }
+    return getFormFillFileId(file);
+  }, []);
+
+  const currentFileKey = getStableFileKey(currentFile);
+
+  function persistSessionValue(
+    storageKey: string,
+    fileKey: string,
+    value: MeasureScale | Measurement[] | null,
+    label: string,
+  ) {
+    try {
+      saveSessionMap(storageKey, fileKey, value);
+    } catch (error) {
+      console.error(`[Measurement] Failed to persist ${label}:`, error);
+    }
+  }
+
+  function readStoredScale(fileKey: string): MeasureScale | null | undefined {
+    const storedMap = loadSessionMap("stirling_scales");
+    if (!(fileKey in storedMap)) {
+      return undefined;
+    }
+
+    const storedValue = storedMap[fileKey];
+    return validateMeasureScale(storedValue) ? storedValue : null;
+  }
+
+  function readStoredMeasurements(fileKey: string): Measurement[] | undefined {
+    const storedMap = loadSessionMap("stirling_measurements");
+    if (!(fileKey in storedMap)) {
+      return undefined;
+    }
+
+    const storedValue = storedMap[fileKey];
+    if (!Array.isArray(storedValue)) {
+      return [];
+    }
+
+    return storedValue.filter((measurement) =>
+      validateMeasurement(measurement),
+    );
+  }
+
+  function persistScale(fileKey: string, scale: MeasureScale | null) {
+    persistSessionValue("stirling_scales", fileKey, scale, "scale");
+  }
+
+  function persistMeasurements(fileKey: string, value: Measurement[]) {
+    persistSessionValue(
+      "stirling_measurements",
+      fileKey,
+      value,
+      "measurements",
+    );
+  }
+
+  const handleSetCustomScale = useCallback(
+    (scale: MeasureScale | null) => {
+      const fileKey = currentFileKey;
+
+      if (fileKey) {
+        setScalesByFileId((prev) => new Map(prev).set(fileKey, scale));
+        persistScale(fileKey, scale);
+      }
+
+      setCustomScale(scale);
+      setScaleCalibrationMeasurement(null);
+      setIsScaleCalibrationActive(false);
+    },
+    [currentFileKey],
+  );
+
+  const handleSetRulerActive = useCallback((active: boolean) => {
+    setIsRulerActive(active);
+    if (!active) {
+      setScaleCalibrationMeasurement(null);
+      setIsScaleCalibrationActive(false);
+    }
+  }, []);
+
+  const startScaleCalibration = useCallback(() => {
+    setScaleCalibrationMeasurement(null);
+    setIsScaleCalibrationActive(true);
+    setIsRulerActive(true);
+  }, []);
+
+  const cancelScaleCalibration = useCallback(() => {
+    setScaleCalibrationMeasurement(null);
+    setIsScaleCalibrationActive(false);
+  }, []);
+
+  const handleScaleCalibrationMeasurement = useCallback(
+    (measurement: ScaleCalibrationMeasurement) => {
+      setScaleCalibrationMeasurement(measurement);
+      setIsScaleCalibrationActive(false);
+    },
+    [],
+  );
+
+  const applyScaleCalibration = useCallback(
+    (scale: MeasureScale) => {
+      handleSetCustomScale(scale);
+      setScaleCalibrationMeasurement(null);
+      setIsScaleCalibrationActive(false);
+    },
+    [handleSetCustomScale],
+  );
+
+  useEffect(() => {
+    if (!currentFileKey) {
+      setPageMeasureScales(null);
+      setCustomScale(null);
+      setScaleCalibrationMeasurement(null);
+      setIsScaleCalibrationActive(false);
+      setIsRulerActive(false);
+      rulerOverlayRef.current?.clearAll(true);
+      restoredFileKeyRef.current = null;
+      return;
+    }
+
+    if (restoredFileKeyRef.current === currentFileKey) {
+      return;
+    }
+    restoredFileKeyRef.current = currentFileKey;
+    setScaleCalibrationMeasurement(null);
+    setIsScaleCalibrationActive(false);
+
+    const storedScale = readStoredScale(currentFileKey);
+    const savedScale =
+      storedScale === undefined
+        ? (scalesByFileId.get(currentFileKey) ?? null)
+        : storedScale;
+
+    setCustomScale(savedScale);
+
+    const storedMeasurements = readStoredMeasurements(currentFileKey);
+    const savedMeasurements =
+      storedMeasurements === undefined
+        ? (measurementsByFileId.get(currentFileKey) ?? [])
+        : storedMeasurements;
+
+    rulerOverlayRef.current?.clearAll(true);
+    rulerOverlayRef.current?.restoreMeasurements(savedMeasurements);
+  }, [currentFileKey, measurementsByFileId, rulerOverlayRef, scalesByFileId]);
+
+  useEffect(() => {
+    const fileBlob = effectiveFile?.file;
+    if (!fileBlob || !currentFileKey) {
+      setPageMeasureScales(null);
+      return;
+    }
+
+    setPageMeasureScales(null);
+
+    let cancelled = false;
+    extractPageMeasureScales(fileBlob)
+      .then((scales) => {
+        if (!cancelled) {
+          setPageMeasureScales(scales);
+        }
+      })
+      .catch((error) => {
+        if (!cancelled) {
+          console.warn("[Measurement] Failed to load PDF scales", error);
+          setPageMeasureScales(null);
+        }
+      });
+
+    return () => {
+      cancelled = true;
+    };
+  }, [currentFileKey, effectiveFile?.file]);
+
+  useEffect(() => {
+    if (!rulerOverlayRef.current || !currentFileKey) return;
+
+    const unsubscribe = rulerOverlayRef.current.onMeasurementsChange(
+      (newMeasurements: Measurement[]) => {
+        const validMeasurements = newMeasurements.filter((measurement) =>
+          validateMeasurement(measurement),
+        );
+
+        setMeasurementsByFileId((prev) =>
+          new Map(prev).set(currentFileKey, validMeasurements),
+        );
+        persistMeasurements(currentFileKey, validMeasurements);
+      },
+    );
+
+    return () => {
+      if (typeof unsubscribe === "function") {
+        unsubscribe();
+      }
+    };
+  }, [currentFileKey, rulerOverlayRef]);
+
+  return {
+    isRulerActive,
+    setIsRulerActive: handleSetRulerActive,
+    pageMeasureScales,
+    customScale,
+    handleSetCustomScale,
+    isScaleCalibrationActive,
+    scaleCalibrationMeasurement,
+    startScaleCalibration,
+    cancelScaleCalibration,
+    handleScaleCalibrationMeasurement,
+    applyScaleCalibration,
+  };
+}
diff --git a/frontend/editor/src/core/utils/measurementPreferences.ts b/frontend/editor/src/core/utils/measurementPreferences.ts
new file mode 100644
index 0000000000..c339ed64f8
--- /dev/null
+++ b/frontend/editor/src/core/utils/measurementPreferences.ts
@@ -0,0 +1,24 @@
+// Persist calibration unit preference across sessions
+const STORAGE_KEY_LAST_CALIBRATION_UNIT = "stirling_calibration_last_unit";
+
+export function getLastCalibrationUnit(defaultUnit: string): string {
+  try {
+    const stored = localStorage.getItem(STORAGE_KEY_LAST_CALIBRATION_UNIT);
+    return stored && stored.trim() ? stored : defaultUnit;
+  } catch {
+    // Storage unavailable - private browsing or quota exceeded
+    return defaultUnit;
+  }
+}
+
+export function setLastCalibrationUnit(unit: string): void {
+  try {
+    localStorage.setItem(STORAGE_KEY_LAST_CALIBRATION_UNIT, unit);
+  } catch (error) {
+    // Storage unavailable - preference won't be retained
+    console.debug(
+      "[MeasurementPreferences] Unable to persist unit preference:",
+      error,
+    );
+  }
+}
diff --git a/frontend/editor/src/core/utils/measurementTypes.ts b/frontend/editor/src/core/utils/measurementTypes.ts
new file mode 100644
index 0000000000..caa47ff876
--- /dev/null
+++ b/frontend/editor/src/core/utils/measurementTypes.ts
@@ -0,0 +1,45 @@
+// Page coordinates with absolute page index
+export interface PagePoint {
+  pageIndex: number;
+  x: number;
+  y: number;
+}
+
+// Real-world units per PDF point (factor) vs. architectural ratio for display
+export interface MeasureScale {
+  factor: number; // Real-world units per PDF point
+  ratio: number | null; // Architectural ratio (e.g., 100 for "1:100") - display only
+  unit: string; // m, cm, mm, km, ft, in, yd, mi
+}
+
+export type MeasureScaleLike = MeasureScale;
+
+// Calibration result with full context for audit trail
+export interface CalibrationMetadata {
+  pdfDistancePts: number; // PDF space distance in points
+  realDistance: number; // User-specified real-world distance
+  scale: MeasureScale; // Resulting calculated scale
+  timestamp: string; // ISO 8601 format
+  unitUsed: string; // Unit active during calibration
+}
+
+// Single measurement between two page points on same page
+export interface Measurement {
+  id: string;
+  start: PagePoint;
+  end: PagePoint;
+}
+
+// Viewport area with its own scale (for multi-region PDFs)
+export interface ViewportScale {
+  bbox: [number, number, number, number] | null; // PDF user space or null for entire page
+  scale: MeasureScale;
+}
+
+// Scale information for a single page with all viewports
+export interface PageScaleInfo {
+  viewports: ViewportScale[];
+  pageHeight: number; // PDF points - used to flip screen-y to PDF-y
+}
+
+export type PageMeasureScales = Map<number, PageScaleInfo>;
diff --git a/frontend/editor/src/core/utils/measurementUtils.test.ts b/frontend/editor/src/core/utils/measurementUtils.test.ts
new file mode 100644
index 0000000000..33cf3f5c2d
--- /dev/null
+++ b/frontend/editor/src/core/utils/measurementUtils.test.ts
@@ -0,0 +1,116 @@
+import { describe, expect, test } from "vitest";
+import {
+  POINT_TO_UNIT,
+  calculateCalibratedScale,
+  calculateScaleFactor,
+  convertUnit,
+  deriveRatioFromFactor,
+  parsePresetRatio,
+} from "@app/utils/measurementUtils";
+
+describe("measurementUtils", () => {
+  describe("calculateScaleFactor", () => {
+    test("calculates real-world units per PDF point from a scale ratio", () => {
+      expect(calculateScaleFactor(100, "m")).toBeCloseTo(POINT_TO_UNIT.m * 100);
+      expect(calculateScaleFactor(50, " cm ")).toBeCloseTo(
+        POINT_TO_UNIT.cm * 50,
+      );
+      expect(calculateScaleFactor(12, "FT")).toBeCloseTo(POINT_TO_UNIT.ft * 12);
+    });
+
+    test("rejects invalid scale ratios", () => {
+      expect(() => calculateScaleFactor(0, "m")).toThrow("Invalid scale ratio");
+      expect(() => calculateScaleFactor(-1, "m")).toThrow(
+        "Invalid scale ratio",
+      );
+      expect(() => calculateScaleFactor(Number.NaN, "m")).toThrow(
+        "Invalid scale ratio",
+      );
+      expect(() => calculateScaleFactor(Number.POSITIVE_INFINITY, "m")).toThrow(
+        "Invalid scale ratio",
+      );
+    });
+
+    test("rejects unsupported units", () => {
+      expect(() => calculateScaleFactor(100, "px")).toThrow("Unsupported unit");
+    });
+  });
+
+  describe("convertUnit", () => {
+    test("converts representative metric and imperial values", () => {
+      expect(convertUnit(1, "m", "cm")).toBeCloseTo(100);
+      expect(convertUnit(12, "in", "ft")).toBeCloseTo(1);
+      expect(convertUnit(3, "ft", "yd")).toBeCloseTo(1);
+      expect(convertUnit(1, "ft", "m")).toBeCloseTo(0.3048);
+    });
+
+    test("returns null for invalid values or unsupported units", () => {
+      expect(convertUnit(Number.NaN, "m", "cm")).toBeNull();
+      expect(convertUnit(Number.POSITIVE_INFINITY, "m", "cm")).toBeNull();
+      expect(convertUnit(1, "px", "cm")).toBeNull();
+      expect(convertUnit(1, "m", "px")).toBeNull();
+    });
+  });
+
+  describe("parsePresetRatio", () => {
+    test("parses supported preset ratios", () => {
+      expect(parsePresetRatio("1:5")).toBe(5);
+      expect(parsePresetRatio("1:100")).toBe(100);
+      expect(parsePresetRatio(" 1 : 150 ")).toBe(150);
+    });
+
+    test("returns null for malformed or non-positive presets", () => {
+      expect(parsePresetRatio("2:100")).toBeNull();
+      expect(parsePresetRatio("1:0")).toBeNull();
+      expect(parsePresetRatio("1:-10")).toBeNull();
+      expect(parsePresetRatio("1:not-a-number")).toBeNull();
+      expect(parsePresetRatio("bad")).toBeNull();
+      expect(parsePresetRatio("1:10:20")).toBeNull();
+    });
+  });
+
+  describe("deriveRatioFromFactor", () => {
+    test("recovers the scale ratio from a factor and unit", () => {
+      const factor = calculateScaleFactor(100, "m");
+
+      expect(deriveRatioFromFactor(factor, "m")).toBeCloseTo(100);
+    });
+
+    test("returns null for invalid factors or unsupported units", () => {
+      expect(deriveRatioFromFactor(0, "m")).toBeNull();
+      expect(deriveRatioFromFactor(-1, "m")).toBeNull();
+      expect(deriveRatioFromFactor(Number.NaN, "m")).toBeNull();
+      expect(deriveRatioFromFactor(1, "px")).toBeNull();
+    });
+  });
+
+  describe("calculateCalibratedScale", () => {
+    test("calculates a calibrated scale from a known physical distance", () => {
+      const scale = calculateCalibratedScale(72, 1, "in");
+
+      expect(scale.factor).toBeCloseTo(POINT_TO_UNIT.in);
+      expect(scale.ratio).toBeCloseTo(1);
+      expect(scale.unit).toBe("in");
+    });
+
+    test("calculates architectural ratios for metric calibration", () => {
+      const scale = calculateCalibratedScale(72, 0.0254, "m");
+
+      expect(scale.factor).toBeCloseTo(POINT_TO_UNIT.m);
+      expect(scale.ratio).toBeCloseTo(1);
+      expect(scale.unit).toBe("m");
+    });
+
+    test("rejects invalid calibration inputs", () => {
+      expect(() => calculateCalibratedScale(0, 1, "m")).toThrow(
+        "Invalid PDF distance",
+      );
+      expect(() => calculateCalibratedScale(72, 0, "m")).toThrow(
+        "Invalid real-world distance",
+      );
+      expect(() => calculateCalibratedScale(72, 1, "px")).toThrow(
+        "Unsupported unit",
+      );
+    });
+  });
+});
diff --git a/frontend/editor/src/core/utils/measurementUtils.ts b/frontend/editor/src/core/utils/measurementUtils.ts
new file mode 100644
index 0000000000..e35645fb2b
--- /dev/null
+++ b/frontend/editor/src/core/utils/measurementUtils.ts
@@ -0,0 +1,398 @@
+// PDF point to real-world unit conversions
+
+import type {
+  Measurement,
+  MeasureScale,
+  PagePoint,
+  CalibrationMetadata,
+} from "@app/utils/measurementTypes";
+
+// 1 PDF point in meters (1/72 inch)
+const POINT_TO_METERS = 0.0254 / 72;
+
+// Conversion factors: units per PDF point
+export const POINT_TO_UNIT = {
+  m: POINT_TO_METERS,
+  cm: POINT_TO_METERS * 100,
+  mm: POINT_TO_METERS * 1000,
+  km: POINT_TO_METERS / 1000,
+  ft: POINT_TO_METERS / 0.3048,
+  in: POINT_TO_METERS / 0.0254,
+  yd: POINT_TO_METERS / 0.9144,
+  mi: POINT_TO_METERS / 1609.344,
+} as const;
+
+// Valid measurement units from POINT_TO_UNIT
+export type MeasurementUnit = keyof typeof POINT_TO_UNIT;
+
+function normalizeUnit(unit: string): string {
+  return unit.toLowerCase().trim();
+}
+
+function isMeasurementUnit(unit: string): unit is MeasurementUnit {
+  return Object.hasOwn(POINT_TO_UNIT, unit);
+}
+
+export function getUnitFactor(unit: string): number | undefined {
+  const normalized = normalizeUnit(unit);
+  if (!isMeasurementUnit(normalized)) {
+    return undefined;
+  }
+  return POINT_TO_UNIT[normalized];
+}
+
+export function calculateScaleFactor(ratio: number, unit: string): number {
+  if (!Number.isFinite(ratio) || ratio <= 0) {
+    throw new Error(`Invalid scale ratio: ${ratio}`);
+  }
+
+  const normalized = normalizeUnit(unit);
+  if (!isMeasurementUnit(normalized)) {
+    throw new Error(`Unsupported unit: ${unit}`);
+  }
+
+  return POINT_TO_UNIT[normalized] * ratio;
+}
+
+export function generateScaleLabel(ratio: number | null, unit: string): string {
+  if (ratio === null || ratio === undefined) {
+    return unit;
+  }
+  const display = Number.isInteger(ratio)
+    ? ratio.toString()
+    : ratio.toFixed(2).replace(/\.?0+$/, "");
+  return `1:${display} (${unit})`;
+}
+
+// Imperial units
+const IMPERIAL_UNITS = ["ft", "in", "yd", "mi"] as const;
+export function isImperialUnit(unit: string): boolean {
+  const normalized = normalizeUnit(unit);
+  return isMeasurementUnit(normalized)
+    ? (IMPERIAL_UNITS as readonly MeasurementUnit[]).includes(normalized)
+    : false;
+}
+
+export function convertUnit(
+  value: number,
+  sourceUnit: string,
+  targetUnit: string,
+): number | null {
+  if (!Number.isFinite(value)) {
+    return null;
+  }
+
+  const src = normalizeUnit(sourceUnit);
+  const tgt = normalizeUnit(targetUnit);
+
+  if (!isMeasurementUnit(src) || !isMeasurementUnit(tgt)) {
+    return null;
+  }
+
+  const sourceFactor = POINT_TO_UNIT[src];
+  const targetFactor = POINT_TO_UNIT[tgt];
+
+  return value * (targetFactor / sourceFactor);
+}
+
+export function parsePresetRatio(preset: string): number | null {
+  const parts = preset.split(":");
+
+  // Must have exactly 2 parts and first part must be "1"
+  if (parts.length !== 2 || parts[0].trim() !== "1") {
+    return null;
+  }
+
+  const value = Number(parts[1]);
+  return Number.isFinite(value) && value > 0 ? value : null;
+}
+
+// UI dropdown options - shared across components
+export const UNIT_OPTIONS = [
+  { value: "m", label: "Meters (m)" },
+  { value: "cm", label: "Centimeters (cm)" },
+  { value: "mm", label: "Millimeters (mm)" },
+  { value: "km", label: "Kilometers (km)" },
+  { value: "ft", label: "Feet (ft)" },
+  { value: "in", label: "Inches (in)" },
+  { value: "yd", label: "Yards (yd)" },
+  { value: "mi", label: "Miles (mi)" },
+] as const;
+
+const MAX_SESSION_ENTRIES = 50;
+const TRIMMED_SESSION_ENTRIES = 40;
+
+/**
+ * Detect quota exceeded errors across browser implementations.
+ * Handles: name "QuotaExceededError", code 22 (legacy), "NS_ERROR_DOM_QUOTA_REACHED"
+ *
+ * Note: DOMException may not be instanceof Error in all browsers,
+ * so we check by shape and properties rather than type.
+ * Note: DOMException.code is deprecated but kept for legacy browser support.
+ */
+function isQuotaExceededError(error: unknown): boolean {
+  if (error === null || error === undefined) return false;
+
+  // Check if it's a DOMException when available (standard)
+  if (typeof DOMException !== "undefined" && error instanceof DOMException) {
+    if (error.name === "QuotaExceededError") return true;
+  }
+
+  // Fallback: check by shape for any object with name/code properties
+  if (typeof error === "object") {
+    const err = error as Record<string, unknown>;
+
+    // Modern standard: check name property (works in all modern browsers)
+    if (err.name === "QuotaExceededError") return true;
+    if (err.name === "NS_ERROR_DOM_QUOTA_REACHED") return true;
+
+    // Legacy support: check deprecated code property for very old browsers
+    // Use Object.hasOwn for safe own-property check
+    if (Object.hasOwn(err, "code") && err.code === 22) return true;
+  }
+
+  return false;
+}
+
+// Load entries from sessionStorage
+export function loadSessionMap(key: string): Record<string, unknown> {
+  try {
+    const raw = sessionStorage.getItem(key);
+    if (!raw) return {};
+
+    const data = JSON.parse(raw);
+    if (typeof data !== "object" || data === null || Array.isArray(data)) {
+      return {};
+    }
+
+    return data as Record<string, unknown>;
+  } catch {
+    // Silently return empty object on parse error
+    try {
+      sessionStorage.removeItem(key);
+    } catch {
+      // Ignore cleanup errors
+    }
+    return {};
+  }
+}
+
+// Save entry to sessionStorage with quota management.
+export function saveSessionMap(
+  key: string,
+  fileKey: string,
+  value: MeasureScale | Measurement[] | null,
+): void {
+  if (!fileKey) return;
+
+  try {
+    const existing: Record<string, unknown> = {
+      ...loadSessionMap(key),
+    };
+
+    // Delete first to move fileKey to end (maintains insertion order recency)
+    delete existing[fileKey];
+    existing[fileKey] = value;
+
+    // Trim back below the max to avoid pruning again on every subsequent save.
+    const keys = Object.keys(existing);
+    if (keys.length > MAX_SESSION_ENTRIES) {
+      const entriesToDelete = keys.slice(
+        0,
+        keys.length - TRIMMED_SESSION_ENTRIES,
+      );
+      entriesToDelete.forEach((k) => delete existing[k]);
+    }
+
+    sessionStorage.setItem(key, JSON.stringify(existing));
+  } catch (e) {
+    // Quota exceeded - try clearing and retrying (handles cross-browser error variants)
+    if (isQuotaExceededError(e)) {
+      try {
+        sessionStorage.removeItem(key);
+        // Retry with fresh storage
+        const fresh: Record<string, unknown> = { [fileKey]: value };
+        sessionStorage.setItem(key, JSON.stringify(fresh));
+      } catch {
+        // Silently ignore if retry fails - data loss is acceptable
+      }
+    }
+    // Silently ignore other storage errors
+  }
+}
+
+// Validation helpers
+
+export function validatePagePoint(obj: unknown): obj is PagePoint {
+  if (typeof obj !== "object" || obj === null) return false;
+
+  const pt = obj as Record<string, unknown>;
+  return (
+    typeof pt.pageIndex === "number" &&
+    Number.isFinite(pt.pageIndex) &&
+    pt.pageIndex >= 0 &&
+    typeof pt.x === "number" &&
+    Number.isFinite(pt.x) &&
+    typeof pt.y === "number" &&
+    Number.isFinite(pt.y)
+  );
+}
+
+// MeasureScale can be null (reset) or valid object
+export function validateMeasureScale(obj: unknown): obj is MeasureScale | null {
+  // null is allowed (reset to default)
+  if (obj === null) return true;
+
+  if (typeof obj !== "object") return false;
+
+  const s = obj as Record<string, unknown>;
+
+  // Validate factor: must be positive finite number
+  if (
+    typeof s.factor !== "number" ||
+    !Number.isFinite(s.factor) ||
+    s.factor <= 0
+  ) {
+    return false;
+  }
+
+  // Validate ratio: optional, but if present must be positive finite number
+  if (
+    s.ratio !== null &&
+    (typeof s.ratio !== "number" || !Number.isFinite(s.ratio) || s.ratio <= 0)
+  ) {
+    return false;
+  }
+
+  // Validate unit: must be non-empty string and exist in POINT_TO_UNIT
+  if (typeof s.unit !== "string" || s.unit.trim().length === 0) {
+    return false;
+  }
+
+  const normalized = normalizeUnit(s.unit);
+  if (!isMeasurementUnit(normalized)) {
+    return false;
+  }
+
+  return true;
+}
+
+// Reject cross-page measurements
+export function validateMeasurement(obj: unknown): obj is Measurement {
+  if (typeof obj !== "object" || obj === null) return false;
+
+  const m = obj as Record<string, unknown>;
+
+  // Validate structure
+  if (
+    !(
+      typeof m.id === "string" &&
+      m.id.trim().length > 0 &&
+      validatePagePoint(m.start) &&
+      validatePagePoint(m.end)
+    )
+  ) {
+    return false;
+  }
+
+  // Reject cross-page measurements
+  const start = m.start as PagePoint;
+  const end = m.end as PagePoint;
+  if (start.pageIndex !== end.pageIndex) {
+    return false;
+  }
+
+  return true;
+}
+
+export function formatPaperDistance(distancePts: number): string {
+  if (!Number.isFinite(distancePts) || distancePts < 0) {
+    return "0 mm";
+  }
+
+  const inches = distancePts / 72;
+  const mm = inches * 25.4;
+
+  if (mm < 100) {
+    return `${mm.toFixed(1)} mm`;
+  }
+  if (mm < 1000) {
+    return `${(mm / 10).toFixed(1)} cm`;
+  }
+  return `${(mm / 1000).toFixed(2)} m`;
+}
+
+export function validateRealDistance(value: unknown): number | null {
+  if (value === null || value === undefined || value === "") {
+    return null;
+  }
+
+  const num = typeof value === "number" ? value : Number(value);
+
+  if (!Number.isFinite(num) || num <= 0) {
+    return null;
+  }
+
+  return num;
+}
+
+export function deriveRatioFromFactor(
+  factor: number,
+  unit: string,
+): number | null {
+  if (!Number.isFinite(factor) || factor <= 0) {
+    return null;
+  }
+
+  const baseFactor = getUnitFactor(unit);
+  if (!baseFactor) {
+    return null;
+  }
+
+  // ratio = factor / baseFactor
+  const ratio = factor / baseFactor;
+  return Number.isFinite(ratio) && ratio > 0 ? ratio : null;
+}
+
+export function calculateCalibratedScale(
+  pdfDistancePts: number,
+  realDistance: number,
+  unit: string,
+): MeasureScale {
+  if (!Number.isFinite(pdfDistancePts) || pdfDistancePts <= 0) {
+    throw new Error("Invalid PDF distance (must be positive)");
+  }
+
+  if (!Number.isFinite(realDistance) || realDistance <= 0) {
+    throw new Error("Invalid real-world distance (must be positive)");
+  }
+
+  const baseFactor = getUnitFactor(unit);
+  if (!baseFactor) {
+    throw new Error(`Unsupported unit: ${unit}`);
+  }
+
+  const factor = realDistance / pdfDistancePts;
+  const ratio = deriveRatioFromFactor(factor, unit);
+
+  return {
+    factor,
+    ratio,
+    unit,
+  };
+}
+
+export function createCalibrationMetadata(
+  pdfDistancePts: number,
+  realDistance: number,
+  scale: MeasureScale,
+  unitUsed: string,
+): CalibrationMetadata {
+  return {
+    pdfDistancePts,
+    realDistance,
+    scale,
+    timestamp: new Date().toISOString(),
+    unitUsed,
+  };
+}
diff --git a/frontend/editor/src/core/utils/pdfMeasurementExtraction.ts b/frontend/editor/src/core/utils/pdfMeasurementExtraction.ts
new file mode 100644
index 0000000000..3c40e3209f
--- /dev/null
+++ b/frontend/editor/src/core/utils/pdfMeasurementExtraction.ts
@@ -0,0 +1,215 @@
+import type {
+  PDFArray,
+  PDFDict,
+  PDFHexString,
+  PDFName,
+  PDFNumber,
+  PDFString,
+} from "@cantoo/pdf-lib";
+import type {
+  MeasureScale,
+  PageMeasureScales,
+  PageScaleInfo,
+  ViewportScale,
+} from "@app/utils/measurementTypes";
+import { getUnitFactor } from "@app/utils/measurementUtils";
+
+type PdfMeasurementObjects = Pick<
+  typeof import("@cantoo/pdf-lib"),
+  | "PDFArray"
+  | "PDFDict"
+  | "PDFHexString"
+  | "PDFName"
+  | "PDFNumber"
+  | "PDFString"
+>;
+
+function asPdfArray(
+  value: unknown,
+  { PDFArray }: PdfMeasurementObjects,
+): PDFArray | null {
+  return value instanceof PDFArray ? value : null;
+}
+
+function asPdfDict(
+  value: unknown,
+  { PDFDict }: PdfMeasurementObjects,
+): PDFDict | null {
+  return value instanceof PDFDict ? value : null;
+}
+
+function asPdfNumber(
+  value: unknown,
+  { PDFNumber }: PdfMeasurementObjects,
+): PDFNumber | null {
+  return value instanceof PDFNumber ? value : null;
+}
+
+function asPdfText(
+  value: unknown,
+  { PDFHexString, PDFName, PDFString }: PdfMeasurementObjects,
+): PDFHexString | PDFName | PDFString | null {
+  if (
+    value instanceof PDFString ||
+    value instanceof PDFHexString ||
+    value instanceof PDFName
+  ) {
+    return value;
+  }
+  return null;
+}
+
+function lookupArray(
+  dict: PDFDict,
+  key: string,
+  pdfObjects: PdfMeasurementObjects,
+): PDFArray | null {
+  return asPdfArray(dict.lookup(pdfObjects.PDFName.of(key)), pdfObjects);
+}
+
+function lookupDict(
+  dict: PDFDict,
+  key: string,
+  pdfObjects: PdfMeasurementObjects,
+): PDFDict | null {
+  return asPdfDict(dict.lookup(pdfObjects.PDFName.of(key)), pdfObjects);
+}
+
+function lookupNumber(
+  dict: PDFDict,
+  key: string,
+  pdfObjects: PdfMeasurementObjects,
+): number | null {
+  return (
+    asPdfNumber(
+      dict.lookup(pdfObjects.PDFName.of(key)),
+      pdfObjects,
+    )?.asNumber() ?? null
+  );
+}
+
+function lookupText(
+  dict: PDFDict,
+  key: string,
+  pdfObjects: PdfMeasurementObjects,
+): string | null {
+  return (
+    asPdfText(
+      dict.lookup(pdfObjects.PDFName.of(key)),
+      pdfObjects,
+    )?.decodeText() ?? null
+  );
+}
+
+function readArrayNumber(
+  array: PDFArray,
+  index: number,
+  pdfObjects: PdfMeasurementObjects,
+): number | null {
+  return asPdfNumber(array.lookup(index), pdfObjects)?.asNumber() ?? null;
+}
+
+function readBBox(
+  bboxArray: PDFArray | null,
+  pdfObjects: PdfMeasurementObjects,
+): ViewportScale["bbox"] {
+  if (!bboxArray || bboxArray.size() < 4) {
+    return null;
+  }
+
+  const x0 = readArrayNumber(bboxArray, 0, pdfObjects);
+  const y0 = readArrayNumber(bboxArray, 1, pdfObjects);
+  const x1 = readArrayNumber(bboxArray, 2, pdfObjects);
+  const y1 = readArrayNumber(bboxArray, 3, pdfObjects);
+
+  if (x0 === null || y0 === null || x1 === null || y1 === null) {
+    return null;
+  }
+
+  return [x0, y0, x1, y1];
+}
+
+function parseScale(
+  measureDict: PDFDict | null,
+  pdfObjects: PdfMeasurementObjects,
+): MeasureScale | null {
+  if (!measureDict) return null;
+
+  const fmtArray =
+    lookupArray(measureDict, "D", pdfObjects) ??
+    lookupArray(measureDict, "X", pdfObjects);
+  if (!fmtArray || fmtArray.size() === 0) return null;
+
+  const firstFmt = asPdfDict(fmtArray.lookup(0), pdfObjects);
+  if (!firstFmt) return null;
+
+  const factor = lookupNumber(firstFmt, "C", pdfObjects);
+  if (factor === null || factor <= 0) return null;
+
+  const unit = lookupText(firstFmt, "U", pdfObjects)?.trim().toLowerCase();
+  if (!unit) return null;
+
+  const baseFactor = getUnitFactor(unit);
+  if (!baseFactor) return null;
+
+  const ratio = factor / baseFactor;
+  return { factor, ratio, unit };
+}
+
+export async function extractPageMeasureScales(
+  file: Blob,
+): Promise<PageMeasureScales | null> {
+  try {
+    const pdfLib = await import("@cantoo/pdf-lib");
+    const { PDFDocument, PDFArray, PDFDict, PDFName } = pdfLib;
+    const pdfDoc = await PDFDocument.load(await file.arrayBuffer(), {
+      ignoreEncryption: true,
+    });
+
+    const result: PageMeasureScales = new Map();
+
+    for (let i = 0; i < pdfDoc.getPageCount(); i++) {
+      const page = pdfDoc.getPage(i);
+      const pageHeight = page.getHeight();
+      const viewports: ViewportScale[] = [];
+
+      const vpObj = page.node.lookup(PDFName.of("VP"));
+      if (vpObj instanceof PDFArray) {
+        for (let j = 0; j < vpObj.size(); j++) {
+          const vpEntry = vpObj.lookup(j);
+          if (!(vpEntry instanceof PDFDict)) continue;
+
+          const scale = parseScale(
+            lookupDict(vpEntry, "Measure", pdfLib),
+            pdfLib,
+          );
+          if (!scale) continue;
+
+          viewports.push({
+            bbox: readBBox(lookupArray(vpEntry, "BBox", pdfLib), pdfLib),
+            scale,
+          });
+        }
+      }
+
+      if (viewports.length === 0) {
+        const scale = parseScale(
+          lookupDict(page.node, "Measure", pdfLib),
+          pdfLib,
+        );
+        if (scale) {
+          viewports.push({ bbox: null, scale });
+        }
+      }
+
+      if (viewports.length > 0) {
+        result.set(i, { viewports, pageHeight } satisfies PageScaleInfo);
+      }
+    }
+
+    return result.size > 0 ? result : null;
+  } catch (error) {
+    console.warn("[Measurement] Failed to extract PDF scales", error);
+    return null;
+  }
+}

From 82e1bd62a2ad166312656b657f35978dbe59970a Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Fri, 7 Aug 2026 13:27:23 +0100
Subject: [PATCH 103/122] Move CODEOWNERS to review teams (#7325)

# Description of Changes

CODEOWNERS now points at review teams (`maintainers`,
`backend-reviewers`, `frontend-reviewers`, `devops-reviewers`, `all`)
instead of individual usernames, so membership is managed in the org
rather than in this file. Ludy87 and balazs-szucs stay listed by hand
since outside collaborators cannot be team members. including the deploy
and demo-comment allowlists.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .github/CODEOWNERS                            | 36 ++++++++++++-------
 .github/config/repo_devs.json                 |  1 -
 .github/workflows/PR-Auto-Deploy-V2.yml       |  2 +-
 .../workflows/PR-Demo-Comment-with-react.yml  |  1 -
 4 files changed, 24 insertions(+), 16 deletions(-)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 14f6ca750f..a2e3241c65 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,18 +1,28 @@
-# All PRs must be approved by Frooodle or Ludy87
-* @Frooodle @Ludy87 @jbrunton96 @ConnorYoh
+# Review ownership is assigned to teams where possible.
+# Teams can only contain org members, so outside collaborators are listed by hand.
+#
+#   @Stirling-Tools/maintainers          - Frooodle, jbrunton96, ConnorYoh
+#   @Stirling-Tools/backend-reviewers    - Frooodle, jbrunton96, ConnorYoh
+#   @Stirling-Tools/frontend-reviewers   - Frooodle, jbrunton96, ConnorYoh, reecebrowne, EthanHealy01
+#   @Stirling-Tools/devops-reviewers     - Frooodle, jbrunton96, ConnorYoh
+#   @Stirling-Tools/all                  - all of the above
+#
+# Outside collaborators (need Write access to count as owners): @Ludy87 @balazs-szucs
+
+# Default owners for everything
+* @Stirling-Tools/maintainers @Ludy87
 
 # Backend
-/app/** @DarioGii @Frooodle @Ludy87 @jbrunton96 @ConnorYoh @balazs-szucs
+/app/** @Stirling-Tools/backend-reviewers @Ludy87 @balazs-szucs
 
-#V2 frontend
-/frontend/** @reecebrowne @ConnorYoh @EthanHealy01 @jbrunton96 @Frooodle @balazs-szucs
-/app/core/src/main/resources/static/** @reecebrowne @ConnorYoh @EthanHealy01 @jbrunton96 @Frooodle @Ludy87 @balazs-szucs
+# V2 frontend
+/frontend/** @Stirling-Tools/frontend-reviewers @balazs-szucs
+/app/core/src/main/resources/static/** @Stirling-Tools/frontend-reviewers @Ludy87 @balazs-szucs
 
-#V2 docker
-/docker/backend/** @Frooodle @Ludy87 @DarioGii
-/docker/frontend/** @reecebrowne @ConnorYoh @EthanHealy01 @jbrunton96 @Frooodle @Ludy87
-/docker/compose/** @reecebrowne @ConnorYoh @EthanHealy01 @DarioGii @jbrunton96 @Frooodle @Ludy87
+# V2 docker
+/docker/backend/** @Stirling-Tools/devops-reviewers @Ludy87
+/docker/frontend/** @Stirling-Tools/frontend-reviewers @Stirling-Tools/devops-reviewers @Ludy87
+/docker/compose/** @Stirling-Tools/frontend-reviewers @Stirling-Tools/devops-reviewers @Ludy87
 
-
-#GHA (All users)
-/.github/** @reecebrowne @ConnorYoh @EthanHealy01 @DarioGii @jbrunton96 @Frooodle @Ludy87 @balazs-szucs
+# GHA (all users)
+/.github/** @Stirling-Tools/all @Ludy87 @balazs-szucs
diff --git a/.github/config/repo_devs.json b/.github/config/repo_devs.json
index 8b0bb97a81..597a84dade 100644
--- a/.github/config/repo_devs.json
+++ b/.github/config/repo_devs.json
@@ -11,7 +11,6 @@
     "LaserKaspar",
     "sbplat",
     "reecebrowne",
-    "DarioGii",
     "ConnorYoh",
     "EthanHealy01",
     "jbrunton96",
diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index 6b37029f90..cd99f6a4cc 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -86,7 +86,7 @@ jobs:
               fi
             fi
           else
-            auth_users=("Frooodle" "sf298" "Ludy87" "LaserKaspar" "sbplat" "reecebrowne" "DarioGii" "ConnorYoh" "EthanHealy01" "jbrunton96" "balazs-szucs")
+            auth_users=("Frooodle" "sf298" "Ludy87" "LaserKaspar" "sbplat" "reecebrowne" "ConnorYoh" "EthanHealy01" "jbrunton96" "balazs-szucs")
             is_auth=false; for u in "${auth_users[@]}"; do [ "$u" = "$PR_AUTHOR" ] && is_auth=true && break; done
             if [ "$is_auth" = true ]; then
               should=true
diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index 3826897a39..d1e2000b82 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -54,7 +54,6 @@ jobs:
             github.event.comment.user.login == 'Ludy87' ||
             github.event.comment.user.login == 'balazs-szucs' ||
             github.event.comment.user.login == 'reecebrowne' ||
-            github.event.comment.user.login == 'DarioGii' ||
             github.event.comment.user.login == 'EthanHealy01' ||
             github.event.comment.user.login == 'jbrunton96' ||
             github.event.comment.user.login == 'ConnorYoh'

From 2c74b5bf81be0853e0e8503402834e21b7508a42 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 14:01:07 +0100
Subject: [PATCH 104/122] build(deps): bump js-yaml from 4.2.0 to 4.3.1 in
 /devTools (#7323)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md">js-yaml's
changelog</a>.</em></p>
<blockquote>
<h2>4.3.1 - 2026-07-31</h2>
<h3>Security</h3>
<ul>
<li>[backport] Remove quadratic complexity from <code>!!omap</code>
duplicate key detection.</li>
</ul>
<h2>4.3.0 - 2026-06-27</h2>
<h3>Added</h3>
<ul>
<li>[backport] Added <code>maxTotalMergeKeys</code> (10000) loader
option to limit the total number of
keys processed by YAML merge (<code>&lt;&lt;</code>) across one
<code>load()</code> / <code>loadAll()</code> call.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Restore umd builds back to es5.</li>
</ul>
<h3>Removed</h3>
<ul>
<li>[backport] <code>maxMergeSeqLength</code> replaced with
<code>maxTotalMergeKeys</code> for limiting YAML merge
processing.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodeca/js-yaml/commit/86e91b815b8794c3c73a179c1770871e37ec2df8"><code>86e91b8</code></a>
4.3.1 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/c3cc4b0bb9ddb9af2dd9b61e0d56f5ce7983cd4a"><code>c3cc4b0</code></a>
Backport quadratic complexity fix for !!omap</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda"><code>33d05b5</code></a>
4.3.0 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb"><code>663bfab</code></a>
Drop demo publish, to not override new v5 one.</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986"><code>1cb8c7b</code></a>
Add v4-legacy tag for publish</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157"><code>02f27af</code></a>
Restore umd builds back to es5</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb"><code>8be84ed</code></a>
Fix es5 compatibility</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"><code>59423c6</code></a>
Replace <code>maxMergeSeqLength</code> option with
<code>maxTotalMergeKeys</code> (more robust). Ba...</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d"><code>6842ef6</code></a>
doc polish</li>
<li>See full diff in <a
href="https://github.com/nodeca/js-yaml/compare/4.2.0...4.3.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=4.2.0&new-version=4.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 devTools/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/devTools/package-lock.json b/devTools/package-lock.json
index 39db3d2046..394237a684 100644
--- a/devTools/package-lock.json
+++ b/devTools/package-lock.json
@@ -894,9 +894,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {

From 1867c8f285e92adf7fa7dc3f50c41b05cbd572e9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 14:01:11 +0100
Subject: [PATCH 105/122] build(deps): bump js-yaml from 4.2.0 to 4.3.1 in
 /frontend (#7322)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md">js-yaml's
changelog</a>.</em></p>
<blockquote>
<h2>4.3.1 - 2026-07-31</h2>
<h3>Security</h3>
<ul>
<li>[backport] Remove quadratic complexity from <code>!!omap</code>
duplicate key detection.</li>
</ul>
<h2>4.3.0 - 2026-06-27</h2>
<h3>Added</h3>
<ul>
<li>[backport] Added <code>maxTotalMergeKeys</code> (10000) loader
option to limit the total number of
keys processed by YAML merge (<code>&lt;&lt;</code>) across one
<code>load()</code> / <code>loadAll()</code> call.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Restore umd builds back to es5.</li>
</ul>
<h3>Removed</h3>
<ul>
<li>[backport] <code>maxMergeSeqLength</code> replaced with
<code>maxTotalMergeKeys</code> for limiting YAML merge
processing.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodeca/js-yaml/commit/86e91b815b8794c3c73a179c1770871e37ec2df8"><code>86e91b8</code></a>
4.3.1 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/c3cc4b0bb9ddb9af2dd9b61e0d56f5ce7983cd4a"><code>c3cc4b0</code></a>
Backport quadratic complexity fix for !!omap</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/33d05b5d29a8c21360f620f7e1c1706e24522eda"><code>33d05b5</code></a>
4.3.0 released</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/663bfab6db2b4a146a9366fd685f069345be4ddb"><code>663bfab</code></a>
Drop demo publish, to not override new v5 one.</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/1cb8c7b94bf75e15116869c1c0482dcb22785986"><code>1cb8c7b</code></a>
Add v4-legacy tag for publish</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/02f27afad532763263cd2b6be35c24ee8e1f6157"><code>02f27af</code></a>
Restore umd builds back to es5</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/8be84edaf15e7c394fa3b813179d1bcc280e87fb"><code>8be84ed</code></a>
Fix es5 compatibility</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"><code>59423c6</code></a>
Replace <code>maxMergeSeqLength</code> option with
<code>maxTotalMergeKeys</code> (more robust). Ba...</li>
<li><a
href="https://github.com/nodeca/js-yaml/commit/6842ef6a02df01ca7282ea01dc3c70787710c05d"><code>6842ef6</code></a>
doc polish</li>
<li>See full diff in <a
href="https://github.com/nodeca/js-yaml/compare/4.2.0...4.3.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=4.2.0&new-version=4.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Stirling-Tools/Stirling-PDF/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 500 +------------------------------------
 1 file changed, 3 insertions(+), 497 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 6f19db35b7..762cee13c5 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -11150,9 +11150,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {
@@ -12968,16 +12968,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/mrmime": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz",
-      "integrity": "sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -17408,490 +17398,6 @@
         "fsevents": "~2.3.3"
       }
     },
-    "node_modules/tsx/node_modules/@esbuild/aix-ppc64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.1.tgz",
-      "integrity": "sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==",
-      "cpu": [
-        "ppc64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "aix"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/android-arm": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.1.tgz",
-      "integrity": "sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/android-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.1.tgz",
-      "integrity": "sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/android-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.1.tgz",
-      "integrity": "sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/darwin-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.1.tgz",
-      "integrity": "sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/darwin-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.1.tgz",
-      "integrity": "sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/freebsd-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.1.tgz",
-      "integrity": "sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/freebsd-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.1.tgz",
-      "integrity": "sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-arm": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.1.tgz",
-      "integrity": "sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.1.tgz",
-      "integrity": "sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-ia32": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.1.tgz",
-      "integrity": "sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==",
-      "cpu": [
-        "ia32"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-loong64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.1.tgz",
-      "integrity": "sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==",
-      "cpu": [
-        "loong64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-mips64el": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.1.tgz",
-      "integrity": "sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==",
-      "cpu": [
-        "mips64el"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-ppc64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.1.tgz",
-      "integrity": "sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==",
-      "cpu": [
-        "ppc64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-riscv64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.1.tgz",
-      "integrity": "sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==",
-      "cpu": [
-        "riscv64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-s390x": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.1.tgz",
-      "integrity": "sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==",
-      "cpu": [
-        "s390x"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/linux-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.1.tgz",
-      "integrity": "sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/netbsd-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.1.tgz",
-      "integrity": "sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "netbsd"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/netbsd-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.1.tgz",
-      "integrity": "sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "netbsd"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/openbsd-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.1.tgz",
-      "integrity": "sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "openbsd"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/openbsd-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.1.tgz",
-      "integrity": "sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "openbsd"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/openharmony-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.1.tgz",
-      "integrity": "sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "openharmony"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/sunos-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.1.tgz",
-      "integrity": "sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "sunos"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/win32-arm64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.1.tgz",
-      "integrity": "sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/win32-ia32": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.1.tgz",
-      "integrity": "sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==",
-      "cpu": [
-        "ia32"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/@esbuild/win32-x64": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.1.tgz",
-      "integrity": "sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tsx/node_modules/esbuild": {
-      "version": "0.28.1",
-      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.1.tgz",
-      "integrity": "sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==",
-      "dev": true,
-      "hasInstallScript": true,
-      "license": "MIT",
-      "bin": {
-        "esbuild": "bin/esbuild"
-      },
-      "engines": {
-        "node": ">=18"
-      },
-      "optionalDependencies": {
-        "@esbuild/aix-ppc64": "0.28.1",
-        "@esbuild/android-arm": "0.28.1",
-        "@esbuild/android-arm64": "0.28.1",
-        "@esbuild/android-x64": "0.28.1",
-        "@esbuild/darwin-arm64": "0.28.1",
-        "@esbuild/darwin-x64": "0.28.1",
-        "@esbuild/freebsd-arm64": "0.28.1",
-        "@esbuild/freebsd-x64": "0.28.1",
-        "@esbuild/linux-arm": "0.28.1",
-        "@esbuild/linux-arm64": "0.28.1",
-        "@esbuild/linux-ia32": "0.28.1",
-        "@esbuild/linux-loong64": "0.28.1",
-        "@esbuild/linux-mips64el": "0.28.1",
-        "@esbuild/linux-ppc64": "0.28.1",
-        "@esbuild/linux-riscv64": "0.28.1",
-        "@esbuild/linux-s390x": "0.28.1",
-        "@esbuild/linux-x64": "0.28.1",
-        "@esbuild/netbsd-arm64": "0.28.1",
-        "@esbuild/netbsd-x64": "0.28.1",
-        "@esbuild/openbsd-arm64": "0.28.1",
-        "@esbuild/openbsd-x64": "0.28.1",
-        "@esbuild/openharmony-arm64": "0.28.1",
-        "@esbuild/sunos-x64": "0.28.1",
-        "@esbuild/win32-arm64": "0.28.1",
-        "@esbuild/win32-ia32": "0.28.1",
-        "@esbuild/win32-x64": "0.28.1"
-      }
-    },
     "node_modules/tsx/node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",

From cff6549a40340b01e8be7211af5be3ab34ee3ba6 Mon Sep 17 00:00:00 2001
From: EthanHealy01 <80844253+EthanHealy01@users.noreply.github.com>
Date: Fri, 7 Aug 2026 14:36:46 +0100
Subject: [PATCH 106/122] fix(frontend): keep file persistence working when
 IndexedDB refuses blobs (#7314)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

Fixes the WebKit nightly failures ([run
31067620195](https://github.com/Stirling-Tools/Stirling-PDF/actions/runs/31067620195/attempts/1)):
8 tests failed on `stubbed-webkit` only, and every one of them logs the
same thing in its trace:

```
IndexedDB add error: UnknownError: Error preparing Blob/File data to be stored in object store
```

## What broke

`storeStirlingFile` stores the `File` itself in IndexedDB, so multi-GB
uploads are persisted by reference and never materialize in JS memory.
That came in with #7175 (`data: stirlingFile` replacing `data: await
stirlingFile.arrayBuffer()`), which is a real memory win and worth
keeping.

WebKit refuses blob values whenever it can't write the blob's backing
file, and rejects the request with the error above. The rejection was
only `console.error`d, so on WebKit **no upload ever persisted**, and
everything that reads the bytes back behaved as if the upload never
happened:

- `file-state-across-tools` — file gone after navigating; the sidebar
shows "No files yet"
- `compare` — `FileSelectorPicker: upload failed`, so the slot stays
`data-slot-state="empty"`
- `classification-grouping` / `classification-heuristic-upload` — the
label backfill and thumbnails read from IDB (`not in IndexedDB (likely
remote-only stub)`), so files land in "Recent" with no category headers

Chromium and Firefox store blobs fine, and PR CI only runs the `stubbed`
(chromium) project, so nightly was the only gate that could catch it.

## The fix

Try the blob first, keep a fallback:

- `storeStirlingFile`'s `add` is extracted into `addFileRecord` so it
can run twice
- if the value was a Blob and the failure is `UnknownError` /
`DataCloneError`, re-add the record with an `ArrayBuffer` copy and set
`blobValuesSupported = false`, so later files in that session go
straight to the copy path instead of losing the blob attempt every time
- deliberately narrow: `QuotaExceededError` and `ConstraintError` still
propagate, because a copy would fail the same way and retrying would
hide the real cause
- dropped two internal `console.error`s: every caller already reports
(`addFiles`, `FileSelectorPicker`, `zipFileService` collects into
`result.errors`), so they were duplicate noise

Every writer goes through `storeStirlingFile` (uploads, the file picker,
zip extraction, folder automation, `IndexedDBContext`), so this one seam
covers all of them. The read paths already accept either shape (`new
Blob([record.data], ...)`).

Net effect: Chromium and Firefox keep the no-copy path; engines that
refuse blobs degrade to the pre-#7175 behaviour instead of silently
losing files. On such an engine a very large file can still exhaust
renderer memory — the fallback warns about exactly that. Fixing that
properly means chunked storage, which is out of scope here.

## Verification

Reproduced and confirmed the cause by A/B on a branch that predates
#7175: as-is 8/8 pass on WebKit, and applying only #7175's `data:
stirlingFile` line reproduces the exact CI failure set.

| Check | Result |
|---|---|
| `stubbed-webkit`: the 8 nightly failures +
`classification-heuristic-upload` | 9 passed |
| `stubbed-webkit`: `files-page`, `page-editor-rotation`,
`encrypted-pdf-unlock` | 32 passed, 1 skipped |
| `stubbed` (chromium): the same specs + `files-page` | 35 passed, 1
skipped |
| Frontend unit suite | 210 files, 1797 passed |
| `typecheck:core`, `typecheck:proprietary`, eslint, prettier | clean |

New unit coverage in `fileStorage.blobFallback.test.ts` pins the
contract over `fake-indexeddb` with `add` instrumented to count blob vs
copy attempts: blob path when accepted, blob-then-copy when refused (and
readable back), one attempt only for later files, and quota not retried.

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Testing (if applicable)

- [x] Frontend typecheck (core + proprietary), eslint, prettier, the
unit suite, and the affected Playwright specs on chromium and webkit all
pass

Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 .../services/fileStorage.blobFallback.test.ts | 146 ++++++++++++++++++
 .../editor/src/core/services/fileStorage.ts   |  57 +++++--
 2 files changed, 194 insertions(+), 9 deletions(-)
 create mode 100644 frontend/editor/src/core/services/fileStorage.blobFallback.test.ts

diff --git a/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts b/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts
new file mode 100644
index 0000000000..d8530af026
--- /dev/null
+++ b/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts
@@ -0,0 +1,146 @@
+import { describe, expect, test, afterEach, beforeEach, vi } from "vitest";
+import "fake-indexeddb/auto";
+import { expectConsole } from "@app/tests/failOnConsole";
+
+/**
+ * Regression test for the WebKit nightly breakage introduced with the
+ * large-file OOM fix (#7175): `storeStirlingFile` began putting the `File`
+ * itself into IndexedDB (persisted by reference, so multi-GB uploads never
+ * materialize in JS memory). WebKit refuses blob values whenever it can't write
+ * the blob's backing file and rejects the request with `UnknownError: Error
+ * preparing Blob/File data to be stored in object store`, so on WebKit every
+ * upload silently failed to persist: files vanished on navigation, Compare
+ * slots never filled, and the classification backfill had no bytes to read.
+ *
+ * The service now retries such a rejection with an ArrayBuffer copy and stops
+ * offering blobs for the rest of the session.
+ */
+
+const nativeAdd = IDBObjectStore.prototype.add;
+
+/** What each `add` attempt carried in `data` — the blob path or the copy path. */
+let attempts: Array<"blob" | "copy"> = [];
+
+/** An IDBRequest that fails asynchronously, the way WebKit rejects blob puts. */
+class FailingRequest extends EventTarget {
+  onerror: ((event: Event) => void) | null = null;
+  onsuccess: ((event: Event) => void) | null = null;
+
+  constructor(readonly error: DOMException) {
+    super();
+    queueMicrotask(() => this.onerror?.(new Event("error")));
+  }
+}
+
+/**
+ * Record every add attempt, optionally failing the blob-valued ones the way an
+ * engine without blob storage does.
+ */
+function instrumentAdd(options: { rejectBlobs: boolean }) {
+  IDBObjectStore.prototype.add = function (
+    this: IDBObjectStore,
+    value: unknown,
+    key?: IDBValidKey,
+  ) {
+    const isBlob = (value as { data?: unknown } | null)?.data instanceof Blob;
+    attempts.push(isBlob ? "blob" : "copy");
+    if (isBlob && options.rejectBlobs) {
+      return new FailingRequest(
+        new DOMException(
+          "Error preparing Blob/File data to be stored in object store",
+          "UnknownError",
+        ),
+      ) as unknown as IDBRequest<IDBValidKey>;
+    }
+    return key === undefined
+      ? nativeAdd.call(this, value)
+      : nativeAdd.call(this, value, key);
+  } as typeof IDBObjectStore.prototype.add;
+}
+
+/**
+ * A fresh service per test: whether the engine accepts blobs is remembered for
+ * the process lifetime by design, so tests must not inherit that decision from
+ * each other.
+ */
+async function freshFileStorage() {
+  vi.resetModules();
+  const [{ fileStorage }, { createStirlingFile, createNewStirlingFileStub }] =
+    await Promise.all([
+      import("@app/services/fileStorage"),
+      import("@app/types/fileContext"),
+    ]);
+  const store = async (name: string) => {
+    const file = new File(["%PDF-1.7 stirling"], name, {
+      type: "application/pdf",
+    });
+    const stub = createNewStirlingFileStub(file);
+    await fileStorage.storeStirlingFile(
+      createStirlingFile(file, stub.id),
+      stub,
+    );
+    return stub.id;
+  };
+  return { fileStorage, store };
+}
+
+beforeEach(() => {
+  attempts = [];
+});
+
+afterEach(() => {
+  IDBObjectStore.prototype.add = nativeAdd;
+});
+
+describe("storeStirlingFile — blob-value fallback", () => {
+  test("stores the File by reference when the engine accepts blob values", async () => {
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+
+    const id = await store("by-reference.pdf");
+
+    expect(attempts).toEqual(["blob"]);
+    expect((await fileStorage.getStirlingFile(id))?.name).toBe(
+      "by-reference.pdf",
+    );
+  });
+
+  test("falls back to a copy when the engine rejects blob values, and the file stays readable", async () => {
+    expectConsole.warn(/IndexedDB rejected a Blob value/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: true });
+
+    const id = await store("webkit.pdf");
+
+    expect(attempts).toEqual(["blob", "copy"]);
+    // Readable back is what every downstream consumer depends on: rehydration
+    // after navigation, thumbnails, the classification backfill.
+    expect((await fileStorage.getStirlingFile(id))?.name).toBe("webkit.pdf");
+  });
+
+  test("remembers the rejection, so later files skip the doomed blob attempt", async () => {
+    expectConsole.warn(/IndexedDB rejected a Blob value/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: true });
+
+    await store("first.pdf");
+    attempts = [];
+    const id = await store("second.pdf");
+
+    // Straight to the copy path — no repeated blob probe, and only the single
+    // warning expected above.
+    expect(attempts).toEqual(["copy"]);
+    expect((await fileStorage.getStirlingFile(id))?.name).toBe("second.pdf");
+  });
+
+  test("does not retry a failure a copy can't fix (quota)", async () => {
+    const { store } = await freshFileStorage();
+    IDBObjectStore.prototype.add = function (this: IDBObjectStore) {
+      attempts.push("blob");
+      throw new DOMException("no space left", "QuotaExceededError");
+    } as typeof IDBObjectStore.prototype.add;
+
+    await expect(store("too-big.pdf")).rejects.toThrow(/no space left/);
+    expect(attempts).toEqual(["blob"]);
+  });
+});
diff --git a/frontend/editor/src/core/services/fileStorage.ts b/frontend/editor/src/core/services/fileStorage.ts
index 4f82af3a8f..40f62642f0 100644
--- a/frontend/editor/src/core/services/fileStorage.ts
+++ b/frontend/editor/src/core/services/fileStorage.ts
@@ -63,9 +63,27 @@ export function legacyDerivedFromTool(
   return undefined;
 }
 
+/**
+ * Can't persist a Blob/File value, so a copy would work? WebKit reports
+ * `UnknownError` ("Error preparing Blob/File data...") when it can't write the
+ * blob's backing file; a refused structured clone is `DataCloneError`.
+ * Narrow on purpose: retrying quota or duplicate-key failures would fail again
+ * and hide the real cause.
+ */
+function isBlobValueRejection(error: unknown): boolean {
+  const name = (error as DOMException | null)?.name;
+  return name === "UnknownError" || name === "DataCloneError";
+}
+
 class FileStorageService {
   private readonly dbConfig = DATABASE_CONFIGS.FILES;
   private readonly storeName = "files";
+  /**
+   * Whether this engine accepts Blob/File values in IndexedDB. Optimistic: the
+   * blob path avoids copying multi-GB files into JS memory, so we try it and
+   * remember the answer, rather than pre-emptively degrading everywhere.
+   */
+  private blobValuesSupported = true;
 
   /**
    * Get database connection using centralized manager
@@ -132,7 +150,10 @@ class FileStorageService {
       createdAt: stub.createdAt,
       // Store the File (a Blob) itself: IndexedDB persists it by reference and
       // streams to disk, so multi-GB files never materialize in JS memory.
-      data: stirlingFile,
+      // Engines that reject blob values fall back to a copy — see addFileRecord.
+      data: this.blobValuesSupported
+        ? stirlingFile
+        : await stirlingFile.arrayBuffer(),
       thumbnail: stub.thumbnailUrl,
       thumbnailStoredAt: stub.thumbnailUrl ? Date.now() : undefined,
       isLeaf: stub.isLeaf ?? true,
@@ -160,6 +181,30 @@ class FileStorageService {
       classificationLabels: stub.classificationLabels,
     };
 
+    try {
+      await this.addFileRecord(db, record);
+    } catch (error) {
+      // Recoverable: re-add as a copy, and stop offering blobs this session.
+      // Anything else is the caller's to report.
+      if (!(record.data instanceof Blob) || !isBlobValueRejection(error)) {
+        throw error;
+      }
+      this.blobValuesSupported = false;
+      console.warn(
+        "IndexedDB rejected a Blob value; falling back to in-memory copies for this session. " +
+          "Very large files may now exhaust renderer memory.",
+        error,
+      );
+      record.data = await record.data.arrayBuffer();
+      await this.addFileRecord(db, record);
+    }
+  }
+
+  /** Single `add` of a file record. Rejects with the underlying IDB error. */
+  private addFileRecord(
+    db: IDBDatabase,
+    record: StoredStirlingFileRecord,
+  ): Promise<void> {
     return new Promise((resolve, reject) => {
       try {
         // Verify store exists before creating transaction
@@ -174,15 +219,9 @@ class FileStorageService {
 
         const request = store.add(record);
 
-        request.onerror = () => {
-          console.error("IndexedDB add error:", request.error);
-          reject(request.error);
-        };
-        request.onsuccess = () => {
-          resolve();
-        };
+        request.onerror = () => reject(request.error);
+        request.onsuccess = () => resolve();
       } catch (error) {
-        console.error("Transaction error:", error);
         reject(error);
       }
     });

From 408f9ef1488cdd6a8f70e8dec122ad2e92f9318e Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Fri, 7 Aug 2026 14:49:19 +0100
Subject: [PATCH 107/122] Fix `any` type usages in frontend code (#7326)

# Description of Changes
Continued effort towards removing all uses of the `any` type in our
frontend code. This PR fixes 10 more folders and removes them from the
exclude list. All of them were really simple fixes.
---
 .../components/pageEditor/commands/pageCommands.ts    |  1 -
 .../components/pageEditor/hooks/useEditorCommands.ts  |  9 ++++-----
 .../pageEditor/hooks/useUndoManagerState.ts           |  7 +++++--
 .../components/shared/config/SettingsSearchBar.tsx    |  2 +-
 .../shared/pageEditor/useFileItemDragDrop.ts          |  8 +++++---
 .../bookletImposition/BookletImpositionSettings.tsx   | 11 +++++++----
 .../components/tools/shared/ToolWorkflowTitle.tsx     |  3 ++-
 .../components/tools/shared/renderToolButtons.tsx     | 10 ++++++++--
 .../core/hooks/signing/useSigningSessionController.ts |  5 +++--
 .../adjustContrast/useAdjustContrastOperation.ts      |  5 +++--
 .../core/hooks/tools/convert/useConvertOperation.ts   |  4 ++--
 .../removePassword/useRemovePasswordOperation.test.ts |  2 +-
 frontend/eslint.config.mjs                            | 10 ----------
 13 files changed, 41 insertions(+), 36 deletions(-)

diff --git a/frontend/editor/src/core/components/pageEditor/commands/pageCommands.ts b/frontend/editor/src/core/components/pageEditor/commands/pageCommands.ts
index 1f80b940cd..db9385fc37 100644
--- a/frontend/editor/src/core/components/pageEditor/commands/pageCommands.ts
+++ b/frontend/editor/src/core/components/pageEditor/commands/pageCommands.ts
@@ -686,7 +686,6 @@ export class InsertFilesCommand extends DOMCommand {
   private insertedPages: PDFPage[] = [];
   private originalDocument: PDFDocument | null = null;
   private fileDataMap = new Map<FileId, ArrayBuffer>(); // Store file data for thumbnail generation
-  private originalProcessedFile: any = null; // Store original ProcessedFile for undo
   private insertedFileMap = new Map<FileId, File>(); // Store inserted files for export
 
   constructor(
diff --git a/frontend/editor/src/core/components/pageEditor/hooks/useEditorCommands.ts b/frontend/editor/src/core/components/pageEditor/hooks/useEditorCommands.ts
index a790e94085..aca8390d64 100644
--- a/frontend/editor/src/core/components/pageEditor/hooks/useEditorCommands.ts
+++ b/frontend/editor/src/core/components/pageEditor/hooks/useEditorCommands.ts
@@ -3,6 +3,7 @@ import { useCallback, useEffect, useRef } from "react";
 import {
   BulkRotateCommand,
   DeletePagesCommand,
+  DOMCommand,
   PageBreakCommand,
   ReorderPagesCommand,
   SplitCommand,
@@ -24,7 +25,7 @@ interface UsePageEditorCommandsParams {
   selectedPageIds: string[];
   setSelectedPageIds: (ids: string[]) => void;
   getPageNumbersFromIds: (pageIds: string[]) => number[];
-  executeCommandWithTracking: (command: any) => void;
+  executeCommandWithTracking: (command: DOMCommand) => void;
   updateFileOrderFromPages: (pages: PDFPage[]) => void;
   actions: FileActions;
   selectors: FileSelectors;
@@ -145,10 +146,8 @@ export const usePageEditorCommands = ({
     [executeCommandWithTracking, setSplitPositions],
   );
 
-  const executeCommand = useCallback((command: any) => {
-    if (command && typeof command.execute === "function") {
-      command.execute();
-    }
+  const executeCommand = useCallback((command: { execute: () => void }) => {
+    command.execute();
   }, []);
 
   const handleRotate = useCallback(
diff --git a/frontend/editor/src/core/components/pageEditor/hooks/useUndoManagerState.ts b/frontend/editor/src/core/components/pageEditor/hooks/useUndoManagerState.ts
index 86fdf347d2..0e11aa1e80 100644
--- a/frontend/editor/src/core/components/pageEditor/hooks/useUndoManagerState.ts
+++ b/frontend/editor/src/core/components/pageEditor/hooks/useUndoManagerState.ts
@@ -1,6 +1,9 @@
 import { useCallback, useEffect, useRef, useState } from "react";
 
-import { UndoManager } from "@app/components/pageEditor/commands/pageCommands";
+import {
+  DOMCommand,
+  UndoManager,
+} from "@app/components/pageEditor/commands/pageCommands";
 
 interface UseUndoManagerStateParams {
   setHasUnsavedChanges: (dirty: boolean) => void;
@@ -29,7 +32,7 @@ export const useUndoManagerState = ({
   }, [updateUndoRedoState]);
 
   const executeCommandWithTracking = useCallback(
-    (command: any) => {
+    (command: DOMCommand) => {
       undoManagerRef.current.executeCommand(command);
       setHasUnsavedChanges(true);
     },
diff --git a/frontend/editor/src/core/components/shared/config/SettingsSearchBar.tsx b/frontend/editor/src/core/components/shared/config/SettingsSearchBar.tsx
index ea1819dfb2..397347dcf6 100644
--- a/frontend/editor/src/core/components/shared/config/SettingsSearchBar.tsx
+++ b/frontend/editor/src/core/components/shared/config/SettingsSearchBar.tsx
@@ -138,7 +138,7 @@ export const SettingsSearchBar: React.FC<SettingsSearchBarProps> = ({
           const translationPrefixes = getTranslationPrefixesForNavKey(item.key);
           const translationContent = translationPrefixes.flatMap((prefix) =>
             flattenTranslationStrings(
-              t(prefix, { returnObjects: true, defaultValue: {} } as any),
+              t(prefix, { returnObjects: true, defaultValue: {} }),
             ),
           );
 
diff --git a/frontend/editor/src/core/components/shared/pageEditor/useFileItemDragDrop.ts b/frontend/editor/src/core/components/shared/pageEditor/useFileItemDragDrop.ts
index b51b90737a..c1f5d9aaf3 100644
--- a/frontend/editor/src/core/components/shared/pageEditor/useFileItemDragDrop.ts
+++ b/frontend/editor/src/core/components/shared/pageEditor/useFileItemDragDrop.ts
@@ -111,8 +111,7 @@ export const useFileItemDragDrop = ({
         if (!element) return;
 
         const rect = element.getBoundingClientRect();
-        const clientY =
-          (source as any).element?.getBoundingClientRect().top || 0;
+        const clientY = source.element?.getBoundingClientRect().top || 0;
         const midpoint = rect.top + rect.height / 2;
 
         setDropPosition(clientY < midpoint ? "below" : "above");
@@ -121,7 +120,10 @@ export const useFileItemDragDrop = ({
         setIsDragOver(false);
         const dropPos = dropPositionRef.current;
         setDropPosition("below");
-        const sourceData = source.data as any;
+        const sourceData = source.data as {
+          type?: string;
+          fromIndex?: number;
+        };
         if (sourceData?.type === "file-item") {
           const fromIndex = sourceData.fromIndex as number;
           let toIndex = indexRef.current;
diff --git a/frontend/editor/src/core/components/tools/bookletImposition/BookletImpositionSettings.tsx b/frontend/editor/src/core/components/tools/bookletImposition/BookletImpositionSettings.tsx
index fab1f3ff5e..1fbf447a21 100644
--- a/frontend/editor/src/core/components/tools/bookletImposition/BookletImpositionSettings.tsx
+++ b/frontend/editor/src/core/components/tools/bookletImposition/BookletImpositionSettings.tsx
@@ -14,9 +14,9 @@ import ButtonSelector from "@app/components/shared/ButtonSelector";
 
 interface BookletImpositionSettingsProps {
   parameters: BookletImpositionParameters;
-  onParameterChange: (
-    key: keyof BookletImpositionParameters,
-    value: any,
+  onParameterChange: <K extends keyof BookletImpositionParameters>(
+    key: K,
+    value: BookletImpositionParameters[K],
   ) => void;
   disabled?: boolean;
 }
@@ -214,7 +214,10 @@ const BookletImpositionSettings = ({
                   )}
                   value={parameters.gutterSize}
                   onChange={(value) =>
-                    onParameterChange("gutterSize", value || 12)
+                    onParameterChange(
+                      "gutterSize",
+                      typeof value === "number" ? value : 12,
+                    )
                   }
                   min={6}
                   max={72}
diff --git a/frontend/editor/src/core/components/tools/shared/ToolWorkflowTitle.tsx b/frontend/editor/src/core/components/tools/shared/ToolWorkflowTitle.tsx
index bc5d362666..60f7448f7e 100644
--- a/frontend/editor/src/core/components/tools/shared/ToolWorkflowTitle.tsx
+++ b/frontend/editor/src/core/components/tools/shared/ToolWorkflowTitle.tsx
@@ -2,13 +2,14 @@ import React from "react";
 import { Flex, Text, Divider } from "@mantine/core";
 import LocalIcon from "@app/components/shared/LocalIcon";
 import { Tooltip } from "@app/components/shared/Tooltip";
+import { TooltipTip } from "@app/types/tips";
 
 export interface ToolWorkflowTitleProps {
   title: string;
   description?: string;
   tooltip?: {
     content?: React.ReactNode;
-    tips?: any[];
+    tips?: TooltipTip[];
     header?: {
       title: string;
       logo?: React.ReactNode;
diff --git a/frontend/editor/src/core/components/tools/shared/renderToolButtons.tsx b/frontend/editor/src/core/components/tools/shared/renderToolButtons.tsx
index b17cad7c61..d63230914e 100644
--- a/frontend/editor/src/core/components/tools/shared/renderToolButtons.tsx
+++ b/frontend/editor/src/core/components/tools/shared/renderToolButtons.tsx
@@ -2,7 +2,10 @@ import { Box } from "@mantine/core";
 import ToolButton from "@app/components/tools/toolPicker/ToolButton";
 import SubcategoryHeader from "@app/components/tools/shared/SubcategoryHeader";
 
-import { getSubcategoryLabel } from "@app/data/toolsTaxonomy";
+import {
+  getSubcategoryLabel,
+  type ToolRegistryEntry,
+} from "@app/data/toolsTaxonomy";
 import { TFunction } from "i18next";
 import { SubcategoryGroup } from "@app/hooks/useToolSections";
 import { ToolId } from "@app/types/toolId";
@@ -15,7 +18,10 @@ export const renderToolButtons = (
   onSelect: (id: ToolId) => void,
   showSubcategoryHeader: boolean = true,
   disableNavigation: boolean = false,
-  searchResults?: Array<{ item: [string, any]; matchedText?: string }>,
+  searchResults?: Array<{
+    item: [ToolId, ToolRegistryEntry];
+    matchedText?: string;
+  }>,
   hasStars: boolean = false,
 ) => {
   // Create a map of matched text for quick lookup
diff --git a/frontend/editor/src/core/hooks/signing/useSigningSessionController.ts b/frontend/editor/src/core/hooks/signing/useSigningSessionController.ts
index 8fb1ddd5b6..e114a16f9d 100644
--- a/frontend/editor/src/core/hooks/signing/useSigningSessionController.ts
+++ b/frontend/editor/src/core/hooks/signing/useSigningSessionController.ts
@@ -1,5 +1,6 @@
 import { useCallback, useEffect, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
+import { isAxiosError } from "axios";
 import apiClient from "@app/services/apiClient";
 import { alert } from "@app/components/toast";
 import { fileStorage } from "@app/services/fileStorage";
@@ -333,8 +334,8 @@ export function useSigningSessionController(enabled: boolean) {
           pdfFile = new File([pdfResponse.data], session.documentName, {
             type: "application/pdf",
           });
-        } catch (pdfError: any) {
-          if (pdfError?.response?.status === 404) {
+        } catch (pdfError) {
+          if (isAxiosError(pdfError) && pdfError.response?.status === 404) {
             alert({
               alertType: "warning",
               title: t("certSign.sessions.pdfNotReady", "PDF Not Ready"),
diff --git a/frontend/editor/src/core/hooks/tools/adjustContrast/useAdjustContrastOperation.ts b/frontend/editor/src/core/hooks/tools/adjustContrast/useAdjustContrastOperation.ts
index 18981b58d0..858ab8c7ef 100644
--- a/frontend/editor/src/core/hooks/tools/adjustContrast/useAdjustContrastOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/adjustContrast/useAdjustContrastOperation.ts
@@ -13,9 +13,10 @@ import { pdfWorkerManager } from "@app/services/pdfWorkerManager";
 import { createFileFromApiResponse } from "@app/utils/fileResponseUtils";
 import { getPdfiumModule, saveRawDocument } from "@app/services/pdfiumService";
 import { copyRgbaToBgraHeap } from "@app/utils/pdfiumBitmapUtils";
+import type { PDFDocumentProxy } from "pdfjs-dist";
 
 async function renderPdfPageToCanvas(
-  pdf: any,
+  pdf: PDFDocumentProxy,
   pageNumber: number,
   scale: number,
 ): Promise<HTMLCanvasElement> {
@@ -26,7 +27,7 @@ async function renderPdfPageToCanvas(
   canvas.height = viewport.height;
   const ctx = canvas.getContext("2d");
   if (!ctx) throw new Error("Canvas 2D context unavailable");
-  await page.render({ canvasContext: ctx, viewport }).promise;
+  await page.render({ canvasContext: ctx, canvas, viewport }).promise;
   return canvas;
 }
 
diff --git a/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts b/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
index d6175e2b8b..d912cc4ede 100644
--- a/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
@@ -210,8 +210,8 @@ export const buildConvertFormData = (
 
 // Static function that can be used by both the hook and automation executor
 export const createFileFromResponse = (
-  responseData: any,
-  headers: any,
+  responseData: Blob,
+  headers: Record<string, unknown>,
   originalFileName: string,
   targetExtension: string,
 ): File => {
diff --git a/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.test.ts b/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.test.ts
index b60aa09762..8f2953afde 100644
--- a/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.test.ts
+++ b/frontend/editor/src/core/hooks/tools/removePassword/useRemovePasswordOperation.test.ts
@@ -85,7 +85,7 @@ describe("useRemovePasswordOperation", () => {
     const testFile = new File(["test content"], "test.pdf", {
       type: "application/pdf",
     });
-    const formData = buildFormData(testParameters, testFile as any);
+    const formData = buildFormData(testParameters, testFile);
 
     // Verify the form data contains the file
     expect(formData.get("fileInput")).toBe(testFile);
diff --git a/frontend/eslint.config.mjs b/frontend/eslint.config.mjs
index 256bdf640a..43fe732a4e 100644
--- a/frontend/eslint.config.mjs
+++ b/frontend/eslint.config.mjs
@@ -284,28 +284,18 @@ export default defineConfig(
     ignores: [
       "editor/src/core/components/annotation/**/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/pageEditor/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/pageEditor/commands/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/pageEditor/hooks/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/shared/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/shared/config/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/shared/config/configSections/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/shared/pageEditor/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/tools/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/tools/addStamp/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/tools/automate/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/bookletImposition/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/tools/certSign/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/tools/pdfTextEditor/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/shared/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/components/viewer/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/contexts/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/contexts/file/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/contexts/viewer/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/hooks/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/hooks/signing/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/hooks/tools/adjustContrast/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/hooks/tools/convert/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/hooks/tools/removePassword/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/hooks/tools/shared/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/services/*.{js,mjs,jsx,ts,tsx}",
       "editor/src/core/tools/annotate/useAnnotationSelection.ts",

From 37a48aa7a700fc0d9e33a8dad87da4a0857b3e3a Mon Sep 17 00:00:00 2001
From: James Brunton <jbrunton96@gmail.com>
Date: Fri, 7 Aug 2026 17:02:11 +0100
Subject: [PATCH 108/122] Replace ESLint and dpdm with Oxlint (#7330)

# Description of Changes
Smaller scope than #6689 to try and get this finished.

Replace ESLint and dpdm with Oxlint, a TS linter written in Rust so its
performance is dramatically better than the existing tools we use.

## Speed improvement
- Current ESLint run: 13.76s
- Current dpdm run: 3.59s
- Total time: 17.35s
- New Oxlint run: 0.90s

So Oxlint is about a 20x speed improvement.

## Differences
When I last tried to do this, we could recreate our rules identically
with Oxlint, but that's not true any more. Oxlint has no current
equivalent for ESLint's `no-restricted-syntax` rule, which we were using
to ban usages of `<button>` and stuff in specific components to try and
encourage them to use our shared UI. This is a very recent addition to
our linting config, and personally I'm willing to drop it for now at
least. We can still ban specific imports in files, so the files which we
were trying to enforce shared UI will still ban directly importing
Mantine, so that'll probably be most of the cases still caught, but I
think there are other ways we can encourage using the shared UI beyond
just using the linter for it.

I did try building a custom TS rule for it and it only slowed it down a
tiny bit (it took 1.1s) but it had to be built on an unreleased alpha
API which just sounds like a maintenance headache we don't need to deal
with for a rule that we don't really need.
---
 .github/dependabot.yml                        |    8 -
 .taskfiles/frontend.yml                       |   19 +-
 .vscode/extensions.json                       |    2 +-
 AGENTS.md                                     |    2 +-
 DeveloperGuide.md                             |    2 +-
 frontend/.storybook/vitest.setup.ts           |    2 +-
 frontend/README.md                            |    4 +-
 frontend/editor/scripts/sync-portal-docs.mts  |    2 +-
 frontend/editor/scripts/tsconfig.json         |    2 +-
 .../shared/config/configSections/Payg.tsx     |    4 +-
 .../shared/config/configSections/PaygFree.tsx |    8 +-
 .../config/configSections/SpendCapControl.tsx |    2 +-
 .../config/configSections/UpgradeModal.tsx    |    4 +-
 .../src/cloud/hooks/walletDevPreview.ts       |    2 +-
 .../src/core/components/shared/LocalIcon.tsx  |    2 +-
 .../ThirdPartyLicensesSection.tsx             |    2 +-
 .../editor/src/core/data/ogMetadata.test.ts   |    2 +-
 .../tools/compare/useCompareOperation.ts      |    2 +-
 .../src/desktop/services/tauriHttpClient.ts   |    2 +-
 frontend/editor/src/index.tsx                 |    2 +-
 .../src/portal/api/usersBackend.saas.test.ts  |    2 +-
 .../components/users/UsersDirectory.test.tsx  |    2 +-
 .../src/portal/views/Users.caching.test.tsx   |    2 +
 .../src/portal/views/Users.saas.test.tsx      |    2 +
 .../src/portal/views/teamMyCache.saas.test.ts |    1 +
 .../shared/config/configSections/ApiKeys.tsx  |    6 +-
 .../services/heuristic/heuristicEngine.ts     |    2 +-
 .../src/saas/auth/AuthProvider.test.tsx       |    2 +-
 frontend/editor/vite.config.ts                |    1 +
 frontend/eslint.config.mjs                    |  327 ----
 frontend/oxlint.config.ts                     |  423 +++++
 frontend/package-lock.json                    | 1634 ++++-------------
 frontend/package.json                         |    8 +-
 frontend/vitest.config.ts                     |    2 +-
 34 files changed, 840 insertions(+), 1649 deletions(-)
 delete mode 100644 frontend/eslint.config.mjs
 create mode 100644 frontend/oxlint.config.ts

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3ab69765a9..c584ea1f7c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -73,14 +73,6 @@ updates:
           - "react-dom"
           - "@types/react"
           - "@types/react-dom"
-      typescript-eslint:
-        patterns:
-          - "@typescript-eslint/*"
-          - "typescript-eslint"
-      eslint:
-        patterns:
-          - "eslint"
-          - "@eslint/*"
       vite:
         patterns:
           - "vite"
diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index d3ce0d86dd..edbeb9f14d 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -260,8 +260,7 @@ tasks:
     desc: "Run linting"
     deps: [install]
     cmds:
-      - task: lint:eslint
-      - task: lint:dpdm
+      - task: lint:oxlint
       - task: lint:colors
       - task: lint:css
 
@@ -290,25 +289,17 @@ tasks:
     cmds:
       - node editor/scripts/lint/theme-lint.mjs contrast
 
-  lint:eslint:
-    desc: "Run ESLint linting"
+  lint:oxlint:
+    desc: "Run oxlint linting"
     deps: [install]
     cmds:
-      - npx eslint --max-warnings=0
-
-  lint:dpdm:
-    desc: "Run circular import linting"
-    deps: [install]
-    cmds:
-      # Globs so dpdm walks the whole tree. dpdm expands the braces itself, so this is
-      # shell-agnostic. Covers the whole editor tree, including the portal layer.
-      - npx dpdm "editor/src/**/*.{ts,tsx}" --circular --no-warning --no-tree --exit-code circular:1
+      - npx oxlint --config oxlint.config.ts --max-warnings=0
 
   lint:fix:
     desc: "Auto-fix lint issues"
     deps: [install]
     cmds:
-      - npx eslint --fix
+      - npx oxlint --config oxlint.config.ts --fix
 
   format:
     desc: "Auto-fix code formatting"
diff --git a/.vscode/extensions.json b/.vscode/extensions.json
index a02437abe7..752208565c 100644
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -19,6 +19,6 @@
     "yzhang.markdown-all-in-one", // Markdown All-in-One extension for enhanced Markdown editing
     "stylelint.vscode-stylelint", // Stylelint extension for CSS and SCSS linting
     "redhat.vscode-yaml", // YAML extension for Visual Studio Code
-    "dbaeumer.vscode-eslint", // ESLint extension for TypeScript linting
+    "oxc.oxc-vscode", // Oxc (oxlint) extension for JavaScript/TypeScript linting
   ]
 }
diff --git a/AGENTS.md b/AGENTS.md
index 259729bc04..7383ab3c3d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -192,7 +192,7 @@ What goes where:
 - **saas** — web-only: Supabase web auth, AuthCallback, avatar canvas, `window.location`.
 - **desktop** — Tauri-only: keyring authService, tauriHttpClient, native files/windows, backend routing.
 
-`cloud/` MUST NOT import `@supabase/*`, `@tauri-apps/*`, raw `fetch`, `window.location`, `localStorage`, `sessionStorage`, or `import.meta.env.VITE_*` (enforced by ESLint). It reaches platform-specific things only via `@app/*` seams: `services/apiClient`, `auth/session.getAccessToken`, `auth/supabase`, `platform/openExternal`, `services/billing`, `hooks/useSaaSMode` — each provided per-platform in `saas/` and `desktop/`.
+`cloud/` MUST NOT import `@supabase/*`, `@tauri-apps/*`, raw `fetch`, `window.location`, `localStorage`, `sessionStorage`, or `import.meta.env.VITE_*` (all enforced by the linter). It reaches platform-specific things only via `@app/*` seams: `services/apiClient`, `auth/session.getAccessToken`, `auth/supabase`, `platform/openExternal`, `services/billing`, `hooks/useSaaSMode` — each provided per-platform in `saas/` and `desktop/`.
 
 Rule of thumb — **move, don't copy**: share via `cloud/`, override by shadowing the same `@app/*` path in a leaf (`saas/` or `desktop/`).
 
diff --git a/DeveloperGuide.md b/DeveloperGuide.md
index 286bf47fa5..7c2e21d5ca 100644
--- a/DeveloperGuide.md
+++ b/DeveloperGuide.md
@@ -158,7 +158,7 @@ Stirling-PDF/
 │   │   │   └── locales/       # Internationalization files (JSON)
 │   │   └── vite.config.ts     # Vite configuration
 │   ├── package.json       # Shared workspace dependencies
-│   └── eslint.config.mjs  # Shared lint config
+│   └── oxlint.config.ts   # Shared lint config
 ├── customFiles/           # Custom static files and templates (generated at runtime used to replace existing files)
 ├── docs/                  # Documentation files
 ├── exampleYmlFiles/       # Example YAML configuration files
diff --git a/frontend/.storybook/vitest.setup.ts b/frontend/.storybook/vitest.setup.ts
index 22fa4c027e..c6fe770b55 100644
--- a/frontend/.storybook/vitest.setup.ts
+++ b/frontend/.storybook/vitest.setup.ts
@@ -1,7 +1,7 @@
 import { beforeAll } from "vitest";
 import { setProjectAnnotations } from "@storybook/react-vite";
 import * as a11yAddonAnnotations from "@storybook/addon-a11y/preview";
-// eslint-disable-next-line no-restricted-imports -- Storybook-only: the sibling preview config has no @-alias.
+// oxlint-disable-next-line no-restricted-imports -- Storybook-only: the sibling preview config has no @-alias.
 import * as projectAnnotations from "./preview";
 
 // Include addon-a11y's annotations so its axe checks run under Vitest, not only
diff --git a/frontend/README.md b/frontend/README.md
index fafed9bede..ea759538e6 100644
--- a/frontend/README.md
+++ b/frontend/README.md
@@ -6,7 +6,7 @@ All frontend commands are run from the repository root using [Task](https://task
 - `task frontend:build` — production build
 - `task frontend:test` — run tests
 - `task frontend:test:watch` — run tests in watch mode
-- `task frontend:lint` — run ESLint + cycle detection
+- `task frontend:lint` — run linting
 - `task frontend:typecheck` — run TypeScript type checking
 - `task frontend:check` — run typecheck + lint + test
 - `task frontend:install` — install npm dependencies
@@ -18,7 +18,7 @@ For desktop app development, see the [Tauri](#tauri) section below.
 `frontend/` is a workspace containing one or more apps. Today it holds the
 PDF editor under `frontend/editor/`; new apps (the developer portal, etc.)
 will sit alongside it as siblings. Shared tooling — `package.json`, `node_modules`,
-`.storybook/`, ESLint, Prettier — lives at `frontend/` so every app installs
+`.storybook/`, oxlint, Prettier — lives at `frontend/` so every app installs
 once and lints with the same config.
 
 ## Environment Variables
diff --git a/frontend/editor/scripts/sync-portal-docs.mts b/frontend/editor/scripts/sync-portal-docs.mts
index 08ba00137b..96f616eb46 100644
--- a/frontend/editor/scripts/sync-portal-docs.mts
+++ b/frontend/editor/scripts/sync-portal-docs.mts
@@ -13,7 +13,7 @@ import { mkdirSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 // tsx/node16 can't resolve the @portal alias here, so import by relative .ts path.
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import {
   buildManifest,
   type CategoryMap,
diff --git a/frontend/editor/scripts/tsconfig.json b/frontend/editor/scripts/tsconfig.json
index d80666471b..9377b2c7f3 100644
--- a/frontend/editor/scripts/tsconfig.json
+++ b/frontend/editor/scripts/tsconfig.json
@@ -8,5 +8,5 @@
     // sync-portal-docs.mts imports the shared transform by its .ts path (run via tsx).
     "allowImportingTsExtensions": true
   },
-  "include": ["./**/*.ts", "./**/*.mts"]
+  "include": ["./**/*.ts", "./**/*.mts", "../../oxlint.config.ts"]
 }
diff --git a/frontend/editor/src/cloud/components/shared/config/configSections/Payg.tsx b/frontend/editor/src/cloud/components/shared/config/configSections/Payg.tsx
index 7774b6bc72..da6db6e46c 100644
--- a/frontend/editor/src/cloud/components/shared/config/configSections/Payg.tsx
+++ b/frontend/editor/src/cloud/components/shared/config/configSections/Payg.tsx
@@ -32,9 +32,9 @@ import {
   prepaidSnapshotFromWallet,
 } from "@app/components/shared/config/configSections/usageMeters";
 // Relative (not @app/*) so the co-located CSS + sibling component resolve directly.
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import "./Payg.css";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import SpendCapControl from "./SpendCapControl";
 import { useTranslation } from "react-i18next";
 import type { Wallet } from "@app/hooks/useWallet";
diff --git a/frontend/editor/src/cloud/components/shared/config/configSections/PaygFree.tsx b/frontend/editor/src/cloud/components/shared/config/configSections/PaygFree.tsx
index ae3738bd5f..0df1f56d64 100644
--- a/frontend/editor/src/cloud/components/shared/config/configSections/PaygFree.tsx
+++ b/frontend/editor/src/cloud/components/shared/config/configSections/PaygFree.tsx
@@ -33,13 +33,13 @@ import LockIcon from "@mui/icons-material/LockOutlined";
 import { useTranslation } from "react-i18next";
 import { useRenderCount } from "@app/hooks/useRenderCount";
 import { useWallet } from "@app/hooks/useWallet";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import "./Payg.css";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import "./PaygFree.css";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import UpgradeModal from "./UpgradeModal";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import { DocHelp } from "./Payg";
 import {
   FreeMeterPanel,
diff --git a/frontend/editor/src/cloud/components/shared/config/configSections/SpendCapControl.tsx b/frontend/editor/src/cloud/components/shared/config/configSections/SpendCapControl.tsx
index d6b8b336f4..6cd00b1b3e 100644
--- a/frontend/editor/src/cloud/components/shared/config/configSections/SpendCapControl.tsx
+++ b/frontend/editor/src/cloud/components/shared/config/configSections/SpendCapControl.tsx
@@ -12,7 +12,7 @@ import {
   DEFAULT_CAP_PRESETS,
   SpendCapControl as SharedSpendCapControl,
 } from "@app/billing";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import "./SpendCapControl.css";
 
 export { DEFAULT_CAP_PRESETS };
diff --git a/frontend/editor/src/cloud/components/shared/config/configSections/UpgradeModal.tsx b/frontend/editor/src/cloud/components/shared/config/configSections/UpgradeModal.tsx
index bdbd84c6bc..f5ee5054fc 100644
--- a/frontend/editor/src/cloud/components/shared/config/configSections/UpgradeModal.tsx
+++ b/frontend/editor/src/cloud/components/shared/config/configSections/UpgradeModal.tsx
@@ -25,9 +25,9 @@ import ArrowBackIcon from "@mui/icons-material/ArrowBackRounded";
 import ShieldIcon from "@mui/icons-material/ShieldOutlined";
 import CheckCircleIcon from "@mui/icons-material/CheckCircleRounded";
 import { useTranslation } from "react-i18next";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import "./UpgradeModal.css";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import SpendCapControl from "./SpendCapControl";
 
 /**
diff --git a/frontend/editor/src/cloud/hooks/walletDevPreview.ts b/frontend/editor/src/cloud/hooks/walletDevPreview.ts
index 7a1477cb4f..25bd9d261a 100644
--- a/frontend/editor/src/cloud/hooks/walletDevPreview.ts
+++ b/frontend/editor/src/cloud/hooks/walletDevPreview.ts
@@ -4,7 +4,7 @@
  * The cloud/ layer is the SHARED hosted experience consumed by BOTH the saas
  * (web) and desktop (Tauri) leaves, so it must stay platform-portable: it can't
  * read {@code import.meta.env}, {@code window.location} or web storage directly
- * (the cloud ESLint guardrail enforces this). The PAYG dev-preview route
+ * (the cloud oxlint guardrail enforces this). The PAYG dev-preview route
  * ({@code /dev/payg-preview}) is a saas-only local-design affordance that
  * synthesises a wallet from {@code localStorage} when the real backend isn't
  * mounted — all three of those banned reads. {@link useWallet} reaches that
diff --git a/frontend/editor/src/core/components/shared/LocalIcon.tsx b/frontend/editor/src/core/components/shared/LocalIcon.tsx
index fc51cb419b..cd278ff95d 100644
--- a/frontend/editor/src/core/components/shared/LocalIcon.tsx
+++ b/frontend/editor/src/core/components/shared/LocalIcon.tsx
@@ -1,6 +1,6 @@
 import React from "react";
 import { addCollection, Icon } from "@iconify/react";
-import iconSet from "../../../assets/material-symbols-icons.json"; // eslint-disable-line no-restricted-imports -- Outside app paths
+import iconSet from "../../../assets/material-symbols-icons.json"; // oxlint-disable-line no-restricted-imports -- Outside app paths
 
 // Load icons synchronously at import time - guaranteed to be ready on first render
 let iconsLoaded = false;
diff --git a/frontend/editor/src/core/components/shared/config/configSections/ThirdPartyLicensesSection.tsx b/frontend/editor/src/core/components/shared/config/configSections/ThirdPartyLicensesSection.tsx
index 334e769a74..e3f7b6b990 100644
--- a/frontend/editor/src/core/components/shared/config/configSections/ThirdPartyLicensesSection.tsx
+++ b/frontend/editor/src/core/components/shared/config/configSections/ThirdPartyLicensesSection.tsx
@@ -12,7 +12,7 @@ import {
 } from "@mantine/core";
 import { isAxiosError } from "axios";
 import apiClient from "@app/services/apiClient";
-import frontendLicenses from "../../../../../assets/3rdPartyLicenses.json"; // eslint-disable-line no-restricted-imports -- asset lives outside @app alias root
+import frontendLicenses from "../../../../../assets/3rdPartyLicenses.json"; // oxlint-disable-line no-restricted-imports -- asset lives outside @app alias root
 
 interface Dependency {
   moduleName?: string;
diff --git a/frontend/editor/src/core/data/ogMetadata.test.ts b/frontend/editor/src/core/data/ogMetadata.test.ts
index e43ef11b9e..dd19737d46 100644
--- a/frontend/editor/src/core/data/ogMetadata.test.ts
+++ b/frontend/editor/src/core/data/ogMetadata.test.ts
@@ -4,7 +4,7 @@ import path from "node:path";
 import { describe, expect, it } from "vitest";
 import { getToolOgImage } from "@app/data/ogImage";
 // Build tooling (plain ESM, node:fs only) - import the helpers for coverage.
-// eslint-disable-next-line no-restricted-imports -- build script lives outside the @app alias root
+// oxlint-disable-next-line no-restricted-imports -- build script lives outside the @app alias root
 import {
   buildOgTags,
   injectOg,
diff --git a/frontend/editor/src/core/hooks/tools/compare/useCompareOperation.ts b/frontend/editor/src/core/hooks/tools/compare/useCompareOperation.ts
index 7a43a443e4..3a40d9b699 100644
--- a/frontend/editor/src/core/hooks/tools/compare/useCompareOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/compare/useCompareOperation.ts
@@ -665,7 +665,7 @@ export const useCompareOperation = (): CompareOperationHook => {
     if (workerRef.current) {
       try {
         workerRef.current.terminate();
-        // eslint-disable-next-line no-empty
+        // oxlint-disable-next-line no-empty
       } catch {}
       workerRef.current = null;
     }
diff --git a/frontend/editor/src/desktop/services/tauriHttpClient.ts b/frontend/editor/src/desktop/services/tauriHttpClient.ts
index f3d674e7e8..ae226685cb 100644
--- a/frontend/editor/src/desktop/services/tauriHttpClient.ts
+++ b/frontend/editor/src/desktop/services/tauriHttpClient.ts
@@ -1,4 +1,4 @@
-/* eslint-disable @typescript-eslint/no-explicit-any -- Axios-compatible API requires matching axios's `any` signatures */
+/* oxlint-disable typescript/no-explicit-any -- Axios-compatible API requires matching axios's `any` signatures */
 import { fetch } from "@tauri-apps/plugin-http";
 import {
   shouldUseFastLocalTransport,
diff --git a/frontend/editor/src/index.tsx b/frontend/editor/src/index.tsx
index 6ee0f6df51..d66f092bab 100644
--- a/frontend/editor/src/index.tsx
+++ b/frontend/editor/src/index.tsx
@@ -5,7 +5,7 @@
 import "@app/utils/patchDomForTranslators";
 import "@mantine/core/styles.css";
 import "@mantine/dates/styles.css";
-import "../vite-env.d.ts"; // eslint-disable-line no-restricted-imports -- Outside app paths
+import "../vite-env.d.ts"; // oxlint-disable-line no-restricted-imports -- Outside app paths
 import "@app/styles/index.css"; // Import global styles
 import React from "react";
 import ReactDOM from "react-dom/client";
diff --git a/frontend/editor/src/portal/api/usersBackend.saas.test.ts b/frontend/editor/src/portal/api/usersBackend.saas.test.ts
index d8facade5b..aa03ae15a8 100644
--- a/frontend/editor/src/portal/api/usersBackend.saas.test.ts
+++ b/frontend/editor/src/portal/api/usersBackend.saas.test.ts
@@ -31,7 +31,7 @@ vi.mock("@portal/auth/saasSupabase", () => ({ ensureSaasSupabase: vi.fn() }));
 // The SaaS usersBackend lives under src/saas; the portal vitest project resolves
 // @app to proprietary (there's no @saas alias here), so the SaaS impl can only be
 // exercised by importing it directly by path.
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import { usersBackend } from "../../saas/portal/usersBackend";
 
 const server = setupServer(...teamSaasHandlers);
diff --git a/frontend/editor/src/portal/components/users/UsersDirectory.test.tsx b/frontend/editor/src/portal/components/users/UsersDirectory.test.tsx
index 2c047c74e2..21e68f24d4 100644
--- a/frontend/editor/src/portal/components/users/UsersDirectory.test.tsx
+++ b/frontend/editor/src/portal/components/users/UsersDirectory.test.tsx
@@ -19,7 +19,7 @@ import type { Team } from "@portal/api/teams";
 // Prove the gating against the real flavor capability files. The portal vitest
 // project resolves @app to proprietary and has no @saas alias, so the SaaS set is
 // reached by path; the self-hosted set uses the @proprietary alias.
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import { usersCapabilities as saasCaps } from "../../../saas/portal/usersCapabilities";
 import { usersCapabilities as selfHostedCaps } from "@proprietary/portal/usersCapabilities";
 
diff --git a/frontend/editor/src/portal/views/Users.caching.test.tsx b/frontend/editor/src/portal/views/Users.caching.test.tsx
index a43cd8a835..64d839ac62 100644
--- a/frontend/editor/src/portal/views/Users.caching.test.tsx
+++ b/frontend/editor/src/portal/views/Users.caching.test.tsx
@@ -37,10 +37,12 @@ vi.mock("@app/auth/supabase/supabaseClient", () => ({
 vi.mock("@portal/auth/saasSupabase", () => ({ ensureSaasSupabase: vi.fn() }));
 
 vi.mock("@app/portal/usersCapabilities", async () => ({
+  // oxlint-disable-next-line no-restricted-imports -- resolve the real SaaS module past the mocked @app alias
   usersCapabilities: (await import("../../saas/portal/usersCapabilities"))
     .usersCapabilities,
 }));
 vi.mock("@app/portal/usersBackend", async () => ({
+  // oxlint-disable-next-line no-restricted-imports -- resolve the real SaaS module past the mocked @app alias
   usersBackend: (await import("../../saas/portal/usersBackend")).usersBackend,
 }));
 
diff --git a/frontend/editor/src/portal/views/Users.saas.test.tsx b/frontend/editor/src/portal/views/Users.saas.test.tsx
index 3b63171c5d..a81dcf1c28 100644
--- a/frontend/editor/src/portal/views/Users.saas.test.tsx
+++ b/frontend/editor/src/portal/views/Users.saas.test.tsx
@@ -45,10 +45,12 @@ vi.mock("@portal/auth/saasSupabase", () => ({ ensureSaasSupabase: vi.fn() }));
 // Force the SaaS flavor: the portal vitest project resolves @app to proprietary,
 // so redirect the two flavor seams to their real SaaS implementations.
 vi.mock("@app/portal/usersCapabilities", async () => ({
+  // oxlint-disable-next-line no-restricted-imports -- resolve the real SaaS module past the mocked @app alias
   usersCapabilities: (await import("../../saas/portal/usersCapabilities"))
     .usersCapabilities,
 }));
 vi.mock("@app/portal/usersBackend", async () => ({
+  // oxlint-disable-next-line no-restricted-imports -- resolve the real SaaS module past the mocked @app alias
   usersBackend: (await import("../../saas/portal/usersBackend")).usersBackend,
 }));
 
diff --git a/frontend/editor/src/portal/views/teamMyCache.saas.test.ts b/frontend/editor/src/portal/views/teamMyCache.saas.test.ts
index f18c70dd0a..a4ba296535 100644
--- a/frontend/editor/src/portal/views/teamMyCache.saas.test.ts
+++ b/frontend/editor/src/portal/views/teamMyCache.saas.test.ts
@@ -35,6 +35,7 @@ vi.mock("@app/auth/supabase/supabaseClient", () => ({
 // The portal test project's @app points at proprietary; resolve the flavor seam
 // to the real SaaS backend (same approach as Users.saas.test).
 vi.mock("@app/portal/usersBackend", async () => ({
+  // oxlint-disable-next-line no-restricted-imports -- resolve the real SaaS module past the mocked @app alias
   usersBackend: (await import("../../saas/portal/usersBackend")).usersBackend,
 }));
 
diff --git a/frontend/editor/src/proprietary/components/shared/config/configSections/ApiKeys.tsx b/frontend/editor/src/proprietary/components/shared/config/configSections/ApiKeys.tsx
index e5ccfdd727..8a3175303f 100644
--- a/frontend/editor/src/proprietary/components/shared/config/configSections/ApiKeys.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/configSections/ApiKeys.tsx
@@ -1,10 +1,10 @@
 import React, { useState } from "react";
 import { Anchor, Group, Stack, Text, Paper, Skeleton } from "@mantine/core";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import ApiKeySection from "./apiKeys/ApiKeySection";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import RefreshModal from "./apiKeys/RefreshModal";
-// eslint-disable-next-line no-restricted-imports
+// oxlint-disable-next-line no-restricted-imports
 import useApiKey from "./apiKeys/hooks/useApiKey";
 import { useTranslation } from "react-i18next";
 import LocalIcon from "@app/components/shared/LocalIcon";
diff --git a/frontend/editor/src/proprietary/services/heuristic/heuristicEngine.ts b/frontend/editor/src/proprietary/services/heuristic/heuristicEngine.ts
index e030a9e93a..ed01b9542e 100644
--- a/frontend/editor/src/proprietary/services/heuristic/heuristicEngine.ts
+++ b/frontend/editor/src/proprietary/services/heuristic/heuristicEngine.ts
@@ -282,7 +282,7 @@ const LATIN_LETTER = /[a-z]/gi;
 const WORD = /[\p{L}']+/gu;
 
 // ASCII whitespace plus the no-break spaces pdf.js extraction commonly emits.
-// eslint-disable-next-line no-control-regex -- vertical tab is intentional ASCII whitespace
+// oxlint-disable-next-line no-control-regex -- vertical tab is intentional ASCII whitespace
 const WHITESPACE = /[\t\n\x0B\f\r \u00A0\u2007\u202F]+/g;
 
 // Structural signal patterns. Boolean-presence ones stay non-global (safe .test()),
diff --git a/frontend/editor/src/saas/auth/AuthProvider.test.tsx b/frontend/editor/src/saas/auth/AuthProvider.test.tsx
index 588507d59c..ffeca5433d 100644
--- a/frontend/editor/src/saas/auth/AuthProvider.test.tsx
+++ b/frontend/editor/src/saas/auth/AuthProvider.test.tsx
@@ -52,7 +52,7 @@ vi.mock("@app/services/userService", () => ({
 }));
 
 // Imported after the mocks so the provider picks them up.
-const { AuthProvider, useAuth } = await import("./UseSession");
+const { AuthProvider, useAuth } = await import("@app/auth/UseSession");
 
 /** Surfaces `loading` so a test can assert on it rather than on the container. */
 function LoadingProbe() {
diff --git a/frontend/editor/vite.config.ts b/frontend/editor/vite.config.ts
index 2e72d1efec..3dc3272d59 100644
--- a/frontend/editor/vite.config.ts
+++ b/frontend/editor/vite.config.ts
@@ -98,6 +98,7 @@ function prerenderOgPlugin(isSaas: boolean): PluginOption {
     name: "prerender-og",
     apply: "build" as const,
     async closeBundle() {
+      // oxlint-disable-next-line no-restricted-imports -- vite config runs before path aliases resolve, so a relative import is required here
       const { prerenderOg } = await import("./scripts/og-prerender.mjs");
       const ogBase = (
         process.env.VITE_OG_BASE_URL ||
diff --git a/frontend/eslint.config.mjs b/frontend/eslint.config.mjs
deleted file mode 100644
index 43fe732a4e..0000000000
--- a/frontend/eslint.config.mjs
+++ /dev/null
@@ -1,327 +0,0 @@
-// @ts-check
-
-import eslint from "@eslint/js";
-import globals from "globals";
-import { defineConfig } from "eslint/config";
-import tseslint from "typescript-eslint";
-
-const srcGlobs = [
-  // The portal layers live under editor/src/portal (base) and
-  // editor/src/portal-saas (saas override), so editor/src/** covers them.
-  "editor/src/**/*.{js,mjs,jsx,ts,tsx}",
-];
-const nodeGlobs = [
-  "scripts/**/*.{js,ts,mjs,mts}",
-  "editor/scripts/**/*.{js,ts,mjs,mts}",
-  // Covers editor/vite.config.ts and editor/vitest.config.ts.
-  "editor/*.config.{js,ts,mjs}",
-  "*.config.{js,ts,mjs}",
-  ".storybook/*.{js,ts,mjs,mts,tsx}",
-];
-
-const baseRestrictedImportPatterns = [
-  {
-    regex: "^\\.",
-    message:
-      "Use a workspace alias (@app/* for editor, @portal/* for portal) instead of relative imports.",
-  },
-  {
-    regex: "^src/",
-    message: "Use a workspace alias instead of absolute src/ imports.",
-  },
-];
-
-// Button/SegmentedControl/Chip must come from the shared DS (@app/ui), not Mantine.
-// If no variant fits, extend @app/ui — that layer (editor/src/core/ui) is exempt below.
-const mantineComponentImportRestrictions = [
-  {
-    selector:
-      "ImportDeclaration[source.value='@mantine/core'] > ImportSpecifier[imported.name=/^(Button|ActionIcon|UnstyledButton|CloseButton|FileButton)$/]",
-    message:
-      'Use the shared Button (@app/ui/Button) instead of the Mantine button family. variant=primary|secondary|tertiary, accent=default|neutral|brand|ai|premium|danger|success|warning; an icon-only button is `<Button leftSection={…} aria-label="…" />`. If no variant fits, extend the shared Button rather than importing Mantine.',
-  },
-  {
-    selector:
-      "ImportDeclaration[source.value='@mantine/core'] > ImportSpecifier[imported.name='SegmentedControl']",
-    message:
-      "Use the shared SegmentedControl (@app/ui/SegmentedControl) instead of Mantine's.",
-  },
-  {
-    selector:
-      "ImportDeclaration[source.value='@mantine/core'] > ImportSpecifier[imported.name=/^(Chip|Pill)$/]",
-    message:
-      "Use the shared Chip (@app/ui/Chip) instead of Mantine's Chip/Pill.",
-  },
-];
-
-// Raw <button> should be a shared Button too — but bespoke CSS-styled controls
-// (tabs, nav rows, preset chips) can be exempted from this selector alone.
-const rawButtonSyntaxRestriction = {
-  selector: "JSXOpeningElement[name.name='button']",
-  message:
-    "Use the shared Button (@app/ui/Button) instead of a raw <button> element. If no variant fits, extend the shared Button.",
-};
-
-const sharedComponentSyntaxRestrictions = [
-  ...mantineComponentImportRestrictions,
-  rawButtonSyntaxRestriction,
-];
-
-export default defineConfig(
-  {
-    // Everything that contains 3rd party code that we don't want to lint
-    ignores: [
-      "dist",
-      "dist-portal",
-      "node_modules",
-      "playwright-report",
-      "storybook-static",
-      "test-results",
-      "editor/dist",
-      "editor/public",
-      "editor/src-tauri",
-      "editor/playwright-report",
-      "editor/test-results",
-    ],
-  },
-  eslint.configs.recommended,
-  tseslint.configs.recommended,
-  {
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          patterns: baseRestrictedImportPatterns,
-        },
-      ],
-      "@typescript-eslint/no-empty-object-type": [
-        "error",
-        {
-          // Allow empty extending interfaces because there's no real reason not to, and it makes it obvious where to put extra attributes in the future
-          allowInterfaces: "with-single-extends",
-        },
-      ],
-      "@typescript-eslint/no-explicit-any": "off", // Temporarily disabled until codebase conformant
-      "@typescript-eslint/no-unused-vars": [
-        "error",
-        {
-          args: "all", // All function args must be used (or explicitly ignored)
-          argsIgnorePattern: "^_", // Allow unused variables beginning with an underscore
-          caughtErrors: "all", // Caught errors must be used (or explicitly ignored)
-          caughtErrorsIgnorePattern: "^_", // Allow unused variables beginning with an underscore
-          destructuredArrayIgnorePattern: "^_", // Allow unused variables beginning with an underscore
-          varsIgnorePattern: "^_", // Allow unused variables beginning with an underscore
-          ignoreRestSiblings: true, // Allow unused variables when removing attributes from objects (otherwise this requires explicit renaming like `({ x: _x, ...y }) => y`, which is clunky)
-        },
-      ],
-    },
-  },
-  // Desktop-only packages must not be imported from core or proprietary code.
-  // Use the stub/shadow pattern instead: define a stub in editor/src/core/ and override in editor/src/desktop/.
-  {
-    files: srcGlobs,
-    ignores: ["editor/src/desktop/**"],
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          patterns: [
-            ...baseRestrictedImportPatterns,
-            {
-              regex: "^@tauri-apps/",
-              message:
-                "Tauri APIs are desktop-only. Review frontend/editor/DeveloperGuide.md for structure advice.",
-            },
-          ],
-        },
-      ],
-    },
-  },
-  // The cloud/ layer is the SHARED hosted/SaaS experience consumed by BOTH the
-  // saas and desktop leaves, so it must stay platform-portable. It must not
-  // reach platform-specific things directly (Supabase, Tauri, raw fetch,
-  // window.location, web storage, or import.meta.env.VITE_*) — those arrive via
-  // @app/* seams (services/apiClient, auth/session, platform/openExternal, ...)
-  // that each leaf provides for its own platform.
-  {
-    files: ["editor/src/cloud/**/*.{js,mjs,jsx,ts,tsx}"],
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          patterns: [
-            ...baseRestrictedImportPatterns,
-            {
-              regex: "^@supabase/",
-              message:
-                "cloud/ must stay platform-portable. Reach Supabase via an @app/* seam (e.g. @app/auth/supabase, @app/auth/session) provided per-platform in saas/ and desktop/.",
-            },
-            {
-              regex: "^@tauri-apps/",
-              message:
-                "cloud/ must stay platform-portable. Tauri APIs are desktop-only — reach native features via an @app/* seam (e.g. @app/platform/openExternal).",
-            },
-          ],
-        },
-      ],
-      "no-restricted-globals": [
-        "error",
-        {
-          name: "fetch",
-          message:
-            "cloud/ must not call raw fetch — use @app/services/apiClient so each platform supplies its own transport.",
-        },
-        {
-          name: "localStorage",
-          message:
-            "cloud/ must not touch localStorage — use an @app/* storage seam so desktop/web can differ.",
-        },
-        {
-          name: "sessionStorage",
-          message:
-            "cloud/ must not touch sessionStorage — use an @app/* storage seam so desktop/web can differ.",
-        },
-      ],
-      "no-restricted-syntax": [
-        "error",
-        ...sharedComponentSyntaxRestrictions,
-        {
-          selector:
-            "MemberExpression[object.name='window'][property.name='location']",
-          message:
-            "cloud/ must not touch window.location — use an @app/* seam (e.g. @app/platform/openExternal) so desktop/web can differ.",
-        },
-        {
-          selector:
-            "MemberExpression[property.name='env'][object.type='MetaProperty'][object.meta.name='import'][object.property.name='meta']",
-          message:
-            "cloud/ must not read import.meta.env — use @app/constants/app / @app/platform seams so config is supplied per-platform.",
-        },
-      ],
-    },
-  },
-  // app code must use shared DS Button/SegmentedControl/Chip; cloud/ covered above.
-  {
-    files: ["editor/src/**/*.{js,mjs,jsx,ts,tsx}"],
-    ignores: [
-      "editor/src/cloud/**/*.{js,mjs,jsx,ts,tsx}", // covered by cloud/ block above
-      "editor/src/core/ui/**/*.{js,mjs,jsx,ts,tsx}", // the shared DS itself — wraps Mantine/raw elements
-      "**/*.stories.{js,mjs,jsx,ts,tsx}", // stories may demo Mantine directly
-      "**/*.test.{js,mjs,jsx,ts,tsx}", // tests may use raw elements as fixtures
-      "editor/src/prototypes/**/*.{js,mjs,jsx,ts,tsx}", // not shipped
-    ],
-    rules: {
-      "no-restricted-syntax": ["error", ...sharedComponentSyntaxRestrictions],
-    },
-  },
-  // Intentional exceptions: ARIA tablist tabs and sub-26px segmented header —
-  // semantically not buttons; shared Button sizing can't represent them.
-  // Do NOT add ordinary buttons here.
-  {
-    files: [
-      "editor/src/core/components/shared/FileSelectorPicker.tsx",
-      "editor/src/core/components/filesPage/FileManagerView.tsx",
-      "editor/src/core/pages/HomePage.tsx",
-    ],
-    rules: {
-      "no-restricted-syntax": "off",
-    },
-  },
-  // TEMPORARY: the procurement feature was merged in from main and still uses
-  // bespoke CSS-styled raw <button>s. Exempt ONLY the raw-<button> rule here —
-  // the Mantine import bans stay in force so this feature can't regress to
-  // Mantine's Button/Chip/SegmentedControl — and migrate these to the shared
-  // Button in a follow-up PR. Do NOT add other folders to this block.
-  {
-    files: [
-      "editor/src/portal/components/procurement/**/*.{js,mjs,jsx,ts,tsx}",
-    ],
-    rules: {
-      "no-restricted-syntax": ["error", ...mantineComponentImportRestrictions],
-    },
-  },
-  // TEMPORARY: the portal user-management / integrations surface predates the
-  // button consolidation and uses bespoke CSS-styled raw <button>s (kebab
-  // triggers, inline text-link actions) that the shared Button can't represent
-  // without heavy overrides. Exempt ONLY the raw-<button> rule — the Mantine
-  // import bans stay in force — and migrate these in a follow-up PR.
-  {
-    files: ["editor/src/portal/components/users/UsersDirectory.tsx"],
-    rules: {
-      "no-restricted-syntax": ["error", ...mantineComponentImportRestrictions],
-    },
-  },
-  // TEMPORARY (same rationale as procurement above): the portal home hero +
-  // install modal reuse the same bespoke CSS-styled raw <button> controls as the
-  // procurement deal hero — status/invite/icon buttons, full-width checklist and
-  // install-option rows, and link-style guide actions that the shared Button
-  // can't represent. Exempt ONLY the raw-<button> rule; the Mantine import bans
-  // stay. Migrate these alongside the procurement buttons.
-  {
-    files: ["editor/src/portal/components/DownloadEditorModal.tsx"],
-    rules: {
-      "no-restricted-syntax": ["error", ...mantineComponentImportRestrictions],
-    },
-  },
-  // TEMPORARY (same rationale as procurement above): the connection/operation catalogues render
-  // bespoke preset tiles (brand mark + two-line text), and the integrations
-  // page adds the same tiles as full-width expandable rows plus filter chips.
-  // Raw-<button> rule only; migrate later.
-  {
-    files: [
-      "editor/src/portal/components/sources/ConnectionTypePicker.tsx",
-      "editor/src/portal/components/sources/SourceModal.tsx",
-      "editor/src/portal/components/policies/PolicyExternalApiConfig.tsx",
-      "editor/src/portal/views/Integrations.tsx",
-    ],
-    rules: {
-      "no-restricted-syntax": ["error", ...mantineComponentImportRestrictions],
-    },
-  },
-  // Stricter rules that not all sub-folders are conformant to yet.
-  {
-    files: srcGlobs,
-    ignores: [
-      "editor/src/core/components/annotation/**/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/pageEditor/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/shared/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/shared/config/configSections/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/addStamp/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/automate/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/certSign/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/tools/pdfTextEditor/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/components/viewer/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/contexts/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/contexts/file/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/contexts/viewer/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/hooks/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/hooks/tools/shared/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/services/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/tools/annotate/useAnnotationSelection.ts",
-      "editor/src/core/types/*.{js,mjs,jsx,ts,tsx}",
-      "editor/src/core/utils/*.{js,mjs,jsx,ts,tsx}",
-    ],
-    rules: {
-      "@typescript-eslint/no-explicit-any": "error",
-    },
-  },
-  // Config for browser scripts
-  {
-    files: srcGlobs,
-    languageOptions: {
-      globals: {
-        ...globals.browser,
-      },
-    },
-  },
-  // Config for node scripts
-  {
-    files: nodeGlobs,
-    languageOptions: {
-      globals: {
-        ...globals.node,
-      },
-    },
-  },
-);
diff --git a/frontend/oxlint.config.ts b/frontend/oxlint.config.ts
new file mode 100644
index 0000000000..fd07f17c6d
--- /dev/null
+++ b/frontend/oxlint.config.ts
@@ -0,0 +1,423 @@
+import { defineConfig, type OxlintGlobals } from "oxlint";
+
+// Glob for all editor app source, and the two layers that need their own
+// import scope. `no-restricted-imports` is repeated per scope on purpose:
+// oxlint REPLACES (does not merge) a rule across matching overrides, so each
+// scope must restate the full set of bans that apply to it.
+const APP_SOURCE = "editor/src/**/*.{js,mjs,jsx,ts,tsx}";
+const DESKTOP_SOURCE = "editor/src/desktop/**/*.{js,mjs,jsx,ts,tsx}";
+const CLOUD_SOURCE = "editor/src/cloud/**/*.{js,mjs,jsx,ts,tsx}";
+
+// Shared import-ban building blocks -----------------------------------------
+
+const aliasOverRelative = {
+  regex: "^\\.",
+  message:
+    "Use a workspace alias (@app/* for editor, @portal/* for portal) instead of relative imports.",
+};
+const aliasOverSrc = {
+  regex: "^src/",
+  message: "Use a workspace alias instead of absolute src/ imports.",
+};
+const noTauriOutsideDesktop = {
+  regex: "^@tauri-apps/",
+  message:
+    "Tauri APIs are desktop-only. Review frontend/editor/DeveloperGuide.md for structure advice.",
+};
+const cloudNoTauri = {
+  regex: "^@tauri-apps/",
+  message:
+    "cloud/ must stay platform-portable. Tauri APIs are desktop-only — reach native features via an @app/* seam (e.g. @app/platform/openExternal).",
+};
+const cloudNoSupabase = {
+  regex: "^@supabase/",
+  message:
+    "cloud/ must stay platform-portable. Reach Supabase via an @app/* seam (e.g. @app/auth/supabase, @app/auth/session) provided per-platform in saas/ and desktop/.",
+};
+
+// Shared-DS Button/SegmentedControl/Chip family must come from @app/ui, not
+// Mantine. (The raw-<button> ban from the ESLint config used
+// no-restricted-syntax, which oxlint does not implement, so it is dropped.)
+const mantineDsPaths = [
+  {
+    name: "@mantine/core",
+    importNames: [
+      "Button",
+      "ActionIcon",
+      "UnstyledButton",
+      "CloseButton",
+      "FileButton",
+    ],
+    message:
+      'Use the shared Button (@app/ui/Button) instead of the Mantine button family. variant=primary|secondary|tertiary, accent=default|neutral|brand|ai|premium|danger|success|warning; an icon-only button is `<Button leftSection={…} aria-label="…" />`. If no variant fits, extend the shared Button rather than importing Mantine.',
+  },
+  {
+    name: "@mantine/core",
+    importNames: ["SegmentedControl"],
+    message:
+      "Use the shared SegmentedControl (@app/ui/SegmentedControl) instead of Mantine's.",
+  },
+  {
+    name: "@mantine/core",
+    importNames: ["Chip", "Pill"],
+    message:
+      "Use the shared Chip (@app/ui/Chip) instead of Mantine's Chip/Pill.",
+  },
+];
+
+// Modern JS globals not yet in oxlint's builtin env.
+const modernGlobals: OxlintGlobals = {
+  AsyncDisposableStack: "readonly",
+  DisposableStack: "readonly",
+  SuppressedError: "readonly",
+};
+
+// Folders not yet conformant to the stricter no-explicit-any rule
+const noExplicitAnyExcludes = [
+  "editor/src/core/components/annotation/**/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/pageEditor/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/shared/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/shared/config/configSections/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/tools/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/tools/addStamp/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/tools/automate/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/tools/certSign/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/tools/pdfTextEditor/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/viewer/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/contexts/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/contexts/file/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/contexts/viewer/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/hooks/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/hooks/tools/shared/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/services/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/tools/annotate/useAnnotationSelection.ts",
+  "editor/src/core/types/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/utils/*.{js,mjs,jsx,ts,tsx}",
+];
+
+export default defineConfig({
+  plugins: ["typescript", "import"],
+  categories: {
+    correctness: "off",
+  },
+  env: {
+    builtin: true,
+  },
+  ignorePatterns: [
+    "dist",
+    "dist-portal",
+    "node_modules",
+    "playwright-report",
+    "storybook-static",
+    "test-results",
+    "editor/dist",
+    "editor/public",
+    "editor/src-tauri",
+    "editor/playwright-report",
+    "editor/test-results",
+  ],
+  rules: {
+    "constructor-super": "error",
+    "for-direction": "error",
+    "getter-return": "error",
+    "no-async-promise-executor": "error",
+    "no-case-declarations": "error",
+    "no-class-assign": "error",
+    "no-compare-neg-zero": "error",
+    "no-cond-assign": "error",
+    "no-const-assign": "error",
+    "no-constant-binary-expression": "error",
+    "no-constant-condition": "error",
+    "no-control-regex": "error",
+    "no-debugger": "error",
+    "no-delete-var": "error",
+    "no-dupe-class-members": "error",
+    "no-dupe-else-if": "error",
+    "no-dupe-keys": "error",
+    "no-duplicate-case": "error",
+    "no-empty": "error",
+    "no-empty-character-class": "error",
+    "no-empty-pattern": "error",
+    "no-empty-static-block": "error",
+    "no-ex-assign": "error",
+    "no-extra-boolean-cast": "error",
+    "no-fallthrough": "error",
+    "no-func-assign": "error",
+    "no-global-assign": "error",
+    "no-import-assign": "error",
+    "no-invalid-regexp": "error",
+    "no-irregular-whitespace": "error",
+    "no-loss-of-precision": "error",
+    "no-misleading-character-class": "error",
+    "no-new-native-nonconstructor": "error",
+    "no-nonoctal-decimal-escape": "error",
+    "no-obj-calls": "error",
+    "no-prototype-builtins": "error",
+    "no-redeclare": "error",
+    "no-regex-spaces": "error",
+    "no-self-assign": "error",
+    "no-setter-return": "error",
+    "no-shadow-restricted-names": "error",
+    "no-sparse-arrays": "error",
+    "no-this-before-super": "error",
+    "no-unassigned-vars": "error",
+    "no-unexpected-multiline": "error",
+    "no-unreachable": "error",
+    "no-unsafe-finally": "error",
+    "no-unsafe-negation": "error",
+    "no-unsafe-optional-chaining": "error",
+    "no-unused-labels": "error",
+    "no-unused-private-class-members": "error",
+    "no-unused-vars": [
+      "error",
+      {
+        args: "all",
+        argsIgnorePattern: "^_",
+        caughtErrors: "all",
+        caughtErrorsIgnorePattern: "^_",
+        destructuredArrayIgnorePattern: "^_",
+        varsIgnorePattern: "^_",
+        ignoreRestSiblings: true,
+      },
+    ],
+    "no-useless-backreference": "error",
+    "no-useless-catch": "error",
+    "no-useless-escape": "error",
+    "no-with": "error",
+    "preserve-caught-error": "error",
+    "require-yield": "error",
+    "use-isnan": "error",
+    "valid-typeof": "error",
+    "no-array-constructor": "error",
+    "no-unused-expressions": "error",
+    "no-restricted-imports": [
+      "error",
+      {
+        patterns: [aliasOverRelative, aliasOverSrc],
+      },
+    ],
+    "typescript/ban-ts-comment": "error",
+    "typescript/no-duplicate-enum-values": "error",
+    "typescript/no-empty-object-type": [
+      "error",
+      {
+        allowInterfaces: "with-single-extends",
+      },
+    ],
+    "typescript/no-extra-non-null-assertion": "error",
+    "typescript/no-misused-new": "error",
+    "typescript/no-namespace": "error",
+    "typescript/no-non-null-asserted-optional-chain": "error",
+    "typescript/no-require-imports": "error",
+    "typescript/no-this-alias": "error",
+    "typescript/no-unnecessary-type-constraint": "error",
+    "typescript/no-unsafe-declaration-merging": "error",
+    "typescript/no-unsafe-function-type": "error",
+    "typescript/no-wrapper-object-types": "error",
+    "typescript/prefer-as-const": "error",
+    "typescript/prefer-namespace-keyword": "error",
+    "typescript/triple-slash-reference": "error",
+  },
+  overrides: [
+    {
+      // TS files: core JS rules superseded by the TypeScript compiler are turned
+      // off, and the TS-appropriate replacements are enabled. Mirrors
+      // typescript-eslint's recommended flat config.
+      files: ["**/*.ts", "**/*.tsx", "**/*.mts", "**/*.cts"],
+      rules: {
+        "constructor-super": "off",
+        "getter-return": "off",
+        "no-class-assign": "off",
+        "no-const-assign": "off",
+        "no-dupe-class-members": "off",
+        "no-dupe-keys": "off",
+        "no-func-assign": "off",
+        "no-import-assign": "off",
+        "no-new-native-nonconstructor": "off",
+        "no-obj-calls": "off",
+        "no-redeclare": "off",
+        "no-setter-return": "off",
+        "no-this-before-super": "off",
+        "no-unreachable": "off",
+        "no-unsafe-negation": "off",
+        "no-var": "error",
+        "no-with": "off",
+        "prefer-const": "error",
+        "prefer-rest-params": "error",
+        "prefer-spread": "error",
+      },
+    },
+    {
+      // Browser globals for all editor app source.
+      files: [APP_SOURCE],
+      env: {
+        browser: true,
+      },
+      globals: modernGlobals,
+    },
+    {
+      // Node globals for build scripts, config files, and Storybook config.
+      files: [
+        "scripts/**/*.{js,ts,mjs,mts}",
+        "editor/scripts/**/*.{js,ts,mjs,mts}",
+        "editor/*.config.{js,ts,mjs}",
+        "*.config.{js,ts,mjs}",
+        ".storybook/*.{js,ts,mjs,mts,tsx}",
+      ],
+      globals: modernGlobals,
+      env: {
+        node: true,
+      },
+    },
+    {
+      // Editor app source (excluding desktop): ban relative/src imports, ban
+      // Tauri (desktop-only), and the shared-DS Mantine import ban.
+      files: [APP_SOURCE],
+      excludeFiles: [DESKTOP_SOURCE],
+      rules: {
+        "no-restricted-imports": [
+          "error",
+          {
+            patterns: [aliasOverRelative, aliasOverSrc, noTauriOutsideDesktop],
+            paths: mantineDsPaths,
+          },
+        ],
+      },
+    },
+    {
+      // Desktop source: same DS import ban, but Tauri is allowed here (this is
+      // the only layer that may reach @tauri-apps/* directly).
+      files: [DESKTOP_SOURCE],
+      rules: {
+        "no-restricted-imports": [
+          "error",
+          {
+            patterns: [aliasOverRelative, aliasOverSrc],
+            paths: mantineDsPaths,
+          },
+        ],
+      },
+    },
+    {
+      // The cloud/ layer is the SHARED hosted/SaaS experience consumed by BOTH
+      // the saas and desktop leaves, so it must stay platform-portable: no
+      // Supabase or Tauri directly, and no raw fetch/localStorage/sessionStorage
+      // - those arrive via @app/* seams that each leaf provides for its own
+      // platform. window.location and import.meta.env are banned below via the
+      // no-restricted-properties.
+      files: [CLOUD_SOURCE],
+      rules: {
+        "no-restricted-imports": [
+          "error",
+          {
+            patterns: [
+              aliasOverRelative,
+              aliasOverSrc,
+              cloudNoTauri,
+              cloudNoSupabase,
+            ],
+            paths: mantineDsPaths,
+          },
+        ],
+        "no-restricted-globals": [
+          "error",
+          {
+            name: "fetch",
+            message:
+              "cloud/ must not call raw fetch — use @app/services/apiClient so each platform supplies its own transport.",
+          },
+          {
+            name: "localStorage",
+            message:
+              "cloud/ must not touch localStorage — use an @app/* storage seam so desktop/web can differ.",
+          },
+          {
+            name: "sessionStorage",
+            message:
+              "cloud/ must not touch sessionStorage — use an @app/* storage seam so desktop/web can differ.",
+          },
+        ],
+        "no-restricted-properties": [
+          "error",
+          {
+            object: "window",
+            property: "location",
+            message:
+              "cloud/ must not touch window.location - use an @app/* seam (e.g. @app/platform/openExternal) so desktop/web can differ.",
+          },
+          {
+            // Property-only: import.meta.env's object is a MetaProperty, which
+            // no-restricted-properties can't target, so this bans every `.env`
+            // read in cloud/ - which matches the intent (config comes via seams,
+            // never env). cloud/ has no other `.env` access today.
+            property: "env",
+            message:
+              "cloud/ must not read import.meta.env - config comes from @app/constants/app / @app/platform seams, not env.",
+          },
+        ],
+      },
+    },
+    {
+      // Exempt from the shared-DS Mantine import ban (these layers may use
+      // Mantine directly): the shared DS itself wraps Mantine, stories/tests
+      // demo it, and prototypes are not shipped. Module-path bans still apply.
+      // The three named files are ARIA tablist/segmented controls that the
+      // ESLint config exempted from the (now-dropped) raw-<button> and Mantine
+      // rules. Comes after the scoped bans above so it wins for these files;
+      // desktop/cloud keep theirs.
+      files: [
+        "editor/src/core/ui/**/*.{js,mjs,jsx,ts,tsx}",
+        "editor/src/prototypes/**/*.{js,mjs,jsx,ts,tsx}",
+        "**/*.stories.{js,mjs,jsx,ts,tsx}",
+        "**/*.test.{js,mjs,jsx,ts,tsx}",
+        "editor/src/core/components/shared/FileSelectorPicker.tsx",
+        "editor/src/core/components/filesPage/FileManagerView.tsx",
+        "editor/src/core/pages/HomePage.tsx",
+      ],
+      excludeFiles: [DESKTOP_SOURCE, CLOUD_SOURCE],
+      rules: {
+        "no-restricted-imports": [
+          "error",
+          {
+            patterns: [aliasOverRelative, aliasOverSrc, noTauriOutsideDesktop],
+          },
+        ],
+      },
+    },
+    {
+      // Desktop test/story files: like every other *.test/*.stories file they
+      // are exempt from the shared-DS Mantine import ban; being desktop they also
+      // keep the Tauri allowance.
+      files: [
+        "editor/src/desktop/**/*.test.{js,mjs,jsx,ts,tsx}",
+        "editor/src/desktop/**/*.stories.{js,mjs,jsx,ts,tsx}",
+      ],
+      rules: {
+        "no-restricted-imports": [
+          "error",
+          {
+            patterns: [aliasOverRelative, aliasOverSrc],
+          },
+        ],
+      },
+    },
+    {
+      // Stricter no-explicit-any, enabled everywhere in the editor app EXCEPT
+      // the folders that are not yet conformant (migrated incrementally).
+      files: [APP_SOURCE],
+      excludeFiles: noExplicitAnyExcludes,
+      rules: {
+        "typescript/no-explicit-any": "error",
+      },
+    },
+    {
+      // Circular-import detection across the editor app source (the import
+      // plugin resolves @app/* and the other tsconfig path aliases). Replaces
+      // the previous dpdm pass.
+      files: ["editor/src/**/*.{ts,tsx}"],
+      rules: {
+        "import/no-cycle": "error",
+      },
+    },
+  ],
+});
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 762cee13c5..f156747452 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -86,7 +86,6 @@
         "web-vitals": "^5.1.0"
       },
       "devDependencies": {
-        "@eslint/js": "^10.0.1",
         "@iconify-json/material-symbols": "^1.2.83",
         "@iconify/react": "^6.0.2",
         "@iconify/utils": "^3.1.4",
@@ -110,22 +109,18 @@
         "@types/react": "^19.2.17",
         "@types/react-dom": "^19.1.9",
         "@types/use-sync-external-store": "^0.0.6",
-        "@typescript-eslint/eslint-plugin": "^8.65.0",
-        "@typescript-eslint/parser": "^8.65.0",
         "@typescript/native": "npm:typescript@^7.0.2",
         "@vitejs/plugin-react-swc": "^4.1.0",
         "@vitest/browser": "3.2.7",
         "@vitest/coverage-v8": "3.2.7",
         "dotenv": "^16.4.7",
-        "dpdm": "^3.14.0",
-        "eslint": "^10.8.0",
         "fake-indexeddb": "^6.2.5",
-        "globals": "^17.7.0",
         "jsdom": "^27.0.0",
         "json-schema-to-typescript": "^15.0.4",
         "license-checker": "^25.0.1",
         "msw": "^2.14.6",
         "msw-storybook-addon": "^2.0.7",
+        "oxlint": "^1.77.0",
         "postcss": "^8.5.12",
         "postcss-cli": "^11.0.1",
         "postcss-preset-mantine": "^1.18.0",
@@ -137,7 +132,6 @@
         "stylelint": "^17.14.1",
         "tsx": "^4.22.4",
         "typescript": "npm:@typescript/typescript6@^6.0.2",
-        "typescript-eslint": "^8.65.0",
         "vite": "^7.3.2",
         "vite-plugin-compression2": "^2.5.3",
         "vite-plugin-static-copy": "^3.1.4",
@@ -1931,121 +1925,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@eslint-community/eslint-utils": {
-      "version": "4.9.1",
-      "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz",
-      "integrity": "sha512-phrYmNiYppR7znFEdqgfWHXR6NCkZEK7hwWDHZUjit/2/U0r6XvkDl0SYnoM51Hq7FhCGdLDT6zxCCOY1hexsQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "eslint-visitor-keys": "^3.4.3"
-      },
-      "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^6.0.0 || ^7.0.0 || >=8.0.0"
-      }
-    },
-    "node_modules/@eslint-community/regexpp": {
-      "version": "4.12.2",
-      "resolved": "https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz",
-      "integrity": "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^12.0.0 || ^14.0.0 || >=16.0.0"
-      }
-    },
-    "node_modules/@eslint/config-array": {
-      "version": "0.23.5",
-      "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.23.5.tgz",
-      "integrity": "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@eslint/object-schema": "^3.0.5",
-        "debug": "^4.3.1",
-        "minimatch": "^10.2.4"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      }
-    },
-    "node_modules/@eslint/config-helpers": {
-      "version": "0.7.0",
-      "resolved": "https://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.7.0.tgz",
-      "integrity": "sha512-DObd/KKUsU+FaFv4PLxSRenpXfQWmPXXP3pPZ6/K1PCrMu2vQpMDMuQe/BqYeoLcz8ro0bVDF1RxOJgfVEdhUw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@eslint/core": "^1.2.1"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      }
-    },
-    "node_modules/@eslint/core": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-1.2.1.tgz",
-      "integrity": "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@types/json-schema": "^7.0.15"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      }
-    },
-    "node_modules/@eslint/js": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-10.0.1.tgz",
-      "integrity": "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://eslint.org/donate"
-      },
-      "peerDependencies": {
-        "eslint": "^10.0.0"
-      },
-      "peerDependenciesMeta": {
-        "eslint": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@eslint/object-schema": {
-      "version": "3.0.5",
-      "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-3.0.5.tgz",
-      "integrity": "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      }
-    },
-    "node_modules/@eslint/plugin-kit": {
-      "version": "0.7.2",
-      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.7.2.tgz",
-      "integrity": "sha512-+CNAzxglkrpNf/kKywqQfk74QjtceuOE7Qm+AF8miRvPF/wmmK5+OJOgVh3AVTT3RP2mH3+FOaxlE5v72owk0A==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@eslint/core": "^1.2.1",
-        "levn": "^0.4.1"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      }
-    },
     "node_modules/@exodus/bytes": {
       "version": "1.15.0",
       "resolved": "https://registry.npmjs.org/@exodus/bytes/-/bytes-1.15.0.tgz",
@@ -2117,58 +1996,6 @@
       "integrity": "sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==",
       "license": "MIT"
     },
-    "node_modules/@humanfs/core": {
-      "version": "0.19.1",
-      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
-      "integrity": "sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=18.18.0"
-      }
-    },
-    "node_modules/@humanfs/node": {
-      "version": "0.16.7",
-      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.7.tgz",
-      "integrity": "sha512-/zUx+yOsIrG4Y43Eh2peDeKCxlRt/gET6aHfaKpuq267qXdYDFViVHfMaLyygZOnl0kGWxFIgsBy8QFuTLUXEQ==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@humanfs/core": "^0.19.1",
-        "@humanwhocodes/retry": "^0.4.0"
-      },
-      "engines": {
-        "node": ">=18.18.0"
-      }
-    },
-    "node_modules/@humanwhocodes/module-importer": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz",
-      "integrity": "sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=12.22"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/nzakas"
-      }
-    },
-    "node_modules/@humanwhocodes/retry": {
-      "version": "0.4.3",
-      "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.3.tgz",
-      "integrity": "sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=18.18"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/nzakas"
-      }
-    },
     "node_modules/@iconify-json/material-symbols": {
       "version": "1.2.83",
       "resolved": "https://registry.npmjs.org/@iconify-json/material-symbols/-/material-symbols-1.2.83.tgz",
@@ -3093,6 +2920,329 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@oxlint/binding-android-arm-eabi": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm-eabi/-/binding-android-arm-eabi-1.77.0.tgz",
+      "integrity": "sha512-E06sKWS6PiI6HRxS1wyQg22HvApt01hI7fV+T3wUk3OSbaaP4a3hYGY/MIQDmASqCiRjBdpRQYkgMkqH82cWmQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-android-arm64": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm64/-/binding-android-arm64-1.77.0.tgz",
+      "integrity": "sha512-NvsKz0KZxTp9cYWPLf+FXaSZwB3oO3peAjtukpOMBgse2vhQSoIIVqeO1yR0lEo/UcdZIDL18uq+kL0LzQ0ytA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-darwin-arm64": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-arm64/-/binding-darwin-arm64-1.77.0.tgz",
+      "integrity": "sha512-bgjTn6nW4bQCFBvSvuHCpDD+sONvmpo4lGI4PxzMt1quBA+xYxhczk6RiCn3GZ9gY8uhaBbwhj9MdKGfu6T9DA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-darwin-x64": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-x64/-/binding-darwin-x64-1.77.0.tgz",
+      "integrity": "sha512-aotaIttH1R6j1Rwhx0M0htgeZyGtVQqYNTVEYMN/UcgHPquGA6kmk9OyuDc3a2GKUQBC+3C3GVQCcrRPMYqAFA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-freebsd-x64": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-freebsd-x64/-/binding-freebsd-x64-1.77.0.tgz",
+      "integrity": "sha512-nNx/wta7ksRAdYvq+l4AWjXkLxEXHALhENxjj2cYbQAIR4ybaA5L+hCbE63HOmft5czQ6ks+hb8vmEAnn7YGPg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm-gnueabihf": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.77.0.tgz",
+      "integrity": "sha512-tMLLjM7xXtzXisVCzkOTXNCy9bZVId2wteNwjohlFDR/jY6WagpEDA1c1wu4xRc20Hojaxj+V6DSR7gbKxijWA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm-musleabihf": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-1.77.0.tgz",
+      "integrity": "sha512-MiAFDFaqR0tmHTAyo0YDcZ5hyLREdYw/RQhc2R3cbT+8O3tB+zqPM2th9TTQ+Uo3jn/embS+DO+HyX9ztCPkOQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm64-gnu": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.77.0.tgz",
+      "integrity": "sha512-/xqQ3B16i1T4cyt/9Mn+4CpzhUXoBXp7kVpIwzOXNFLj5JmK1bIjsbSnX296Gg8A/o7oDtKWikFgBx0SLwztkw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm64-musl": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.77.0.tgz",
+      "integrity": "sha512-LSbwuRKiNCenPDcbARqAZ5RfBy7gmj7vOvfJRLeCDU3gFtSxWbhv/+VTlaUqzUhNj1gFLHB8h7ALnxa/Az6z6g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-ppc64-gnu": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.77.0.tgz",
+      "integrity": "sha512-QWdcH31mXEUe5Nq1s0CfCpceaKjIo9uZtwDjAuL681g1axf+5x8xrg/eXWaw//4NCxYZ4V4e5Hu5tvdR+pTBlg==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-riscv64-gnu": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-1.77.0.tgz",
+      "integrity": "sha512-GnOfYgJxbcElOiPZaDFDl406ONddwvOWk2jvAAAEjwAl4GofNoHF+/HHUIBYa6bFCArlcGPi0XjC4cU1pkgF/Q==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-riscv64-musl": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-1.77.0.tgz",
+      "integrity": "sha512-AyEMTUCf0xY+hHF+IxqXFQIX0yQOIR8ykpY0lJNOw9xYqOzUX8dyZfRvlG0RfXwuQn2eonf/8NrMmDSZJjdqsA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-s390x-gnu": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.77.0.tgz",
+      "integrity": "sha512-sPLzEcNvxd/oyVQ5oZo92CiHkFkpBeRop13E/P3TPY+hZfXHKCOWKI70TE2RYwMKFJDc20EMjH16L7NZICtKTw==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-x64-gnu": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.77.0.tgz",
+      "integrity": "sha512-1Oh2ssH2L7lwyvkdSqaMUfsGfwU2Wfvew+obBUYjRVqhpBcUpwnsPSEr1IzVi9XqkuY10geiLsNKecqaZC34Dw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-x64-musl": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-musl/-/binding-linux-x64-musl-1.77.0.tgz",
+      "integrity": "sha512-0j/2wRgNGO+Qj/M1uu/p57h/hFTTWWcfie0ufkbabeus2s5+/QqkCflnMOwLLN5m2GsNeWp4xdl4cPa4n7QCOQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-openharmony-arm64": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-openharmony-arm64/-/binding-openharmony-arm64-1.77.0.tgz",
+      "integrity": "sha512-BJ/j54qS0usEnyDkLYURMj2iiD9h5Cyy+ppzeMSXBGRXaGRNWnj1Mw14NqWMR5E/PzdgB30OOCCzLzbRoduafw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-win32-arm64-msvc": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.77.0.tgz",
+      "integrity": "sha512-Yh8w+g2Lpx7StrvtYkoz9JJvXjB9wxgFChFNb85nrXm/wj/XTwGWS1hve9+900HL7llrntYB3YP+y32E3tRqzA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-win32-ia32-msvc": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-1.77.0.tgz",
+      "integrity": "sha512-zja5b7+6a7UsRFgAQSrnax5vrzliEyNPLCjfXONu/vTWswaIVZGFajJZptaeRvPE4LghtFdAzVFlexTm7MVTGA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-win32-x64-msvc": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.77.0.tgz",
+      "integrity": "sha512-+teyvPDZ2RjUvo+SuCqS/UhaJl1QtdW5fWT5NJTV61V5MIuIS90Db9LixmtEGvXixyttiK62P96MSu3UlpviBw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
     "node_modules/@pdf-lib/standard-fonts": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/@pdf-lib/standard-fonts/-/standard-fonts-1.0.0.tgz",
@@ -5542,13 +5692,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/@types/esrecurse": {
-      "version": "4.3.1",
-      "resolved": "https://registry.npmjs.org/@types/esrecurse/-/esrecurse-4.3.1.tgz",
-      "integrity": "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/@types/estree": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz",
@@ -5781,239 +5924,6 @@
         "@types/node": "*"
       }
     },
-    "node_modules/@typescript-eslint/eslint-plugin": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.65.0.tgz",
-      "integrity": "sha512-IEgob78X12rHpUmtcwFsXhZdVGJtwTVP8FiCLZkR6GlYVrl2PcuB+KhCE5BlVC/eQpQnu8WXRtkHZuPar+gCRA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@eslint-community/regexpp": "^4.12.2",
-        "@typescript-eslint/scope-manager": "8.65.0",
-        "@typescript-eslint/type-utils": "8.65.0",
-        "@typescript-eslint/utils": "8.65.0",
-        "@typescript-eslint/visitor-keys": "8.65.0",
-        "ignore": "^7.0.5",
-        "natural-compare": "^1.4.0",
-        "ts-api-utils": "^2.5.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "@typescript-eslint/parser": "^8.65.0",
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/parser": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.65.0.tgz",
-      "integrity": "sha512-CZ4nMxWwgu1HEEFNkeaCptra9QCtkmKdgf3sWh1rl1trIhmxLilgTV4cwcbQ4wemnT4sWQN8CaKOmdYx+g2gMA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/scope-manager": "8.65.0",
-        "@typescript-eslint/types": "8.65.0",
-        "@typescript-eslint/typescript-estree": "8.65.0",
-        "@typescript-eslint/visitor-keys": "8.65.0",
-        "debug": "^4.4.3"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/project-service": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.65.0.tgz",
-      "integrity": "sha512-SxnPhbTsGahizDgbu7oqFH/xVtzIqMd/s+WtnSxNxJZJpLbdT5IPdzg8EZxO3+PoKahXmwJLeNQOpKJb3/bi7Q==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/tsconfig-utils": "^8.65.0",
-        "@typescript-eslint/types": "^8.65.0",
-        "debug": "^4.4.3"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/scope-manager": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.65.0.tgz",
-      "integrity": "sha512-Esbl8OSYiVxBokYgWPf7VVWg/BE798wXhimnn9ML9Pt5qoDf8bfQlgjlKXR/k98+AcNzlLKYrpCcrcuZ9DZLgg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/types": "8.65.0",
-        "@typescript-eslint/visitor-keys": "8.65.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      }
-    },
-    "node_modules/@typescript-eslint/tsconfig-utils": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.65.0.tgz",
-      "integrity": "sha512-j6GzGqCiRdA7Qhur2VVmKZAkBLfnHFQfx4TaJGL9RMveZqCo48jSHHO0DTgizEnGhtWnqmbtCUSrqSkdiY/0Hg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/type-utils": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.65.0.tgz",
-      "integrity": "sha512-YjaZ7PRI5qY7ax2L3PbvX0rRyGtipAReCWs0mhhDBHjH/vl0g0BonaGXrKdKpMbIIsMIwDgbk/xzkBTyAltS5g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/types": "8.65.0",
-        "@typescript-eslint/typescript-estree": "8.65.0",
-        "@typescript-eslint/utils": "8.65.0",
-        "debug": "^4.4.3",
-        "ts-api-utils": "^2.5.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/types": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.65.0.tgz",
-      "integrity": "sha512-JSSwWNy+H0E/01jJEM+hrX6N0OFDzFzeIhHFSAS01tlVaevpG8cFyYRPhS5yjGOvBUx3sqQHVMjCL1CAZZMxBg==",
-      "devOptional": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      }
-    },
-    "node_modules/@typescript-eslint/typescript-estree": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.65.0.tgz",
-      "integrity": "sha512-JboAE2swaYt4tb1fHhHTABE2K+OLy09XfcTbhnk4Pw96f9dd2e9iYsJ28gBggHlo5z5x1rkyWvcPoTuNTd4oGg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/project-service": "8.65.0",
-        "@typescript-eslint/tsconfig-utils": "8.65.0",
-        "@typescript-eslint/types": "8.65.0",
-        "@typescript-eslint/visitor-keys": "8.65.0",
-        "debug": "^4.4.3",
-        "minimatch": "^10.2.2",
-        "semver": "^7.7.3",
-        "tinyglobby": "^0.2.15",
-        "ts-api-utils": "^2.5.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/utils": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.65.0.tgz",
-      "integrity": "sha512-gXiwIHsYreboxeJucHKPvgwl7dXt50mF8s1/c00cP/WoVTyWKFdtfhRWwZiXYFU5H2O8vVoSLNrexFZjYS/SGA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@eslint-community/eslint-utils": "^4.9.1",
-        "@typescript-eslint/scope-manager": "8.65.0",
-        "@typescript-eslint/types": "8.65.0",
-        "@typescript-eslint/typescript-estree": "8.65.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
-    "node_modules/@typescript-eslint/visitor-keys": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.65.0.tgz",
-      "integrity": "sha512-8C71BQkGjiMmXtop7pHVJu1l2NNShFdkCyD6a2ezzs5vU/L3LRtb69EtcteFwz0mYMPzIgOw0n6OV4VBUWZd7A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/types": "8.65.0",
-        "eslint-visitor-keys": "^5.0.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      }
-    },
-    "node_modules/@typescript-eslint/visitor-keys/node_modules/eslint-visitor-keys": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz",
-      "integrity": "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
     "node_modules/@typescript/native": {
       "name": "typescript",
       "version": "7.0.2",
@@ -6883,16 +6793,6 @@
         "node": ">=0.4.0"
       }
     },
-    "node_modules/acorn-jsx": {
-      "version": "5.3.2",
-      "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz",
-      "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==",
-      "dev": true,
-      "license": "MIT",
-      "peerDependencies": {
-        "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
-      }
-    },
     "node_modules/agent-base": {
       "version": "7.1.4",
       "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
@@ -6903,23 +6803,6 @@
         "node": ">= 14"
       }
     },
-    "node_modules/ajv": {
-      "version": "6.14.0",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.14.0.tgz",
-      "integrity": "sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "fast-deep-equal": "^3.1.1",
-        "fast-json-stable-stringify": "^2.0.0",
-        "json-schema-traverse": "^0.4.1",
-        "uri-js": "^4.2.2"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/epoberezkin"
-      }
-    },
     "node_modules/ansi-regex": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
@@ -7306,27 +7189,6 @@
         "bare-path": "^3.0.0"
       }
     },
-    "node_modules/base64-js": {
-      "version": "1.5.1",
-      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
-      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT"
-    },
     "node_modules/baseline-browser-mapping": {
       "version": "2.10.10",
       "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.10.tgz",
@@ -7448,33 +7310,6 @@
       "integrity": "sha512-PJvH288AWQhKs2v9zyfYdPzlPqf5bXbGMmhmUIY9x4dAUGIWgomO771oBQNwJnMQSnUIXhKu6sgzpBRXTlvb8Q==",
       "license": "MIT"
     },
-    "node_modules/bl": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
-      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "buffer": "^5.5.0",
-        "inherits": "^2.0.4",
-        "readable-stream": "^3.4.0"
-      }
-    },
-    "node_modules/bl/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
     "node_modules/brace-expansion": {
       "version": "5.0.9",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
@@ -7534,31 +7369,6 @@
         "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
       }
     },
-    "node_modules/buffer": {
-      "version": "5.7.1",
-      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
-      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "base64-js": "^1.3.1",
-        "ieee754": "^1.1.13"
-      }
-    },
     "node_modules/buffer-crc32": {
       "version": "0.2.13",
       "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
@@ -7746,23 +7556,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/chalk": {
-      "version": "4.1.2",
-      "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
-      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^4.1.0",
-        "supports-color": "^7.1.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/chalk?sponsor=1"
-      }
-    },
     "node_modules/change-case": {
       "version": "5.4.4",
       "resolved": "https://registry.npmjs.org/change-case/-/change-case-5.4.4.tgz",
@@ -7871,32 +7664,6 @@
         "devtools-protocol": "*"
       }
     },
-    "node_modules/cli-cursor": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-3.1.0.tgz",
-      "integrity": "sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "restore-cursor": "^3.1.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/cli-spinners": {
-      "version": "2.9.2",
-      "resolved": "https://registry.npmjs.org/cli-spinners/-/cli-spinners-2.9.2.tgz",
-      "integrity": "sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/cli-width": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/cli-width/-/cli-width-4.1.0.tgz",
@@ -7975,16 +7742,6 @@
         "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
       }
     },
-    "node_modules/clone": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz",
-      "integrity": "sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
     "node_modules/clsx": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz",
@@ -8758,13 +8515,6 @@
         "node": ">=4.0.0"
       }
     },
-    "node_modules/deep-is": {
-      "version": "0.1.4",
-      "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
-      "integrity": "sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/default-browser": {
       "version": "5.5.0",
       "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.0.tgz",
@@ -8795,19 +8545,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/defaults": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/defaults/-/defaults-1.0.4.tgz",
-      "integrity": "sha512-eFuaLoy/Rxalv2kr+lqMlUnrDWV+3j4pljOIJgLIhI058IQfWJ7vXhyEIHu+HtC738klGALYxOKDO0bQP3tg8A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "clone": "^1.0.2"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/define-lazy-prop": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz",
@@ -8978,39 +8715,6 @@
         "url": "https://dotenvx.com"
       }
     },
-    "node_modules/dpdm": {
-      "version": "3.15.1",
-      "resolved": "https://registry.npmjs.org/dpdm/-/dpdm-3.15.1.tgz",
-      "integrity": "sha512-qa+BsZAGU3BhhQ6/Fdpd9YYYa3gdF0zMY/vW5rAj/QLJQgPbTX25h7cOe12dfRZvU0/JJP/g5LRgB6lTaVwILw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "chalk": "^4.1.2",
-        "fs-extra": "^11.2.0",
-        "glob": "^10.3.10",
-        "ora": "^5.4.1",
-        "tslib": "^2.7.0",
-        "typescript": "^5.6.3",
-        "yargs": "^17.7.2"
-      },
-      "bin": {
-        "dpdm": "lib/bin/dpdm.js"
-      }
-    },
-    "node_modules/dpdm/node_modules/typescript": {
-      "version": "5.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
-      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "bin": {
-        "tsc": "bin/tsc",
-        "tsserver": "bin/tsserver"
-      },
-      "engines": {
-        "node": ">=14.17"
-      }
-    },
     "node_modules/dunder-proto": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
@@ -9280,120 +8984,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/eslint": {
-      "version": "10.8.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-10.8.0.tgz",
-      "integrity": "sha512-nuKKvN+oIBO0koN7Tm7dlkmnkc21mtt0QJLwAKzjLq14y6lRTdVG36MZHJ8eQHwdJMwZbQNMlPOYedMq/oVJvQ==",
-      "dev": true,
-      "license": "MIT",
-      "workspaces": [
-        "packages/*"
-      ],
-      "dependencies": {
-        "@eslint-community/eslint-utils": "^4.8.0",
-        "@eslint-community/regexpp": "^4.12.2",
-        "@eslint/config-array": "^0.23.5",
-        "@eslint/config-helpers": "^0.7.0",
-        "@eslint/core": "^1.2.1",
-        "@eslint/plugin-kit": "^0.7.2",
-        "@humanfs/node": "^0.16.6",
-        "@humanwhocodes/module-importer": "^1.0.1",
-        "@humanwhocodes/retry": "^0.4.2",
-        "@types/estree": "^1.0.6",
-        "ajv": "^6.14.0",
-        "cross-spawn": "^7.0.6",
-        "debug": "^4.3.2",
-        "escape-string-regexp": "^4.0.0",
-        "eslint-scope": "^9.1.2",
-        "eslint-visitor-keys": "^5.0.1",
-        "espree": "^11.2.0",
-        "esquery": "^1.7.0",
-        "esutils": "^2.0.2",
-        "fast-deep-equal": "^3.1.3",
-        "file-entry-cache": "^8.0.0",
-        "find-up": "^5.0.0",
-        "glob-parent": "^6.0.2",
-        "ignore": "^5.2.0",
-        "imurmurhash": "^0.1.4",
-        "is-glob": "^4.0.0",
-        "json-stable-stringify-without-jsonify": "^1.0.1",
-        "minimatch": "^10.2.5",
-        "natural-compare": "^1.4.0",
-        "optionator": "^0.9.3"
-      },
-      "bin": {
-        "eslint": "bin/eslint.js"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://eslint.org/donate"
-      },
-      "peerDependencies": {
-        "jiti": "*"
-      },
-      "peerDependenciesMeta": {
-        "jiti": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/eslint-scope": {
-      "version": "9.1.2",
-      "resolved": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-9.1.2.tgz",
-      "integrity": "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ==",
-      "dev": true,
-      "license": "BSD-2-Clause",
-      "dependencies": {
-        "@types/esrecurse": "^4.3.1",
-        "@types/estree": "^1.0.8",
-        "esrecurse": "^4.3.0",
-        "estraverse": "^5.2.0"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
-    "node_modules/eslint-visitor-keys": {
-      "version": "3.4.3",
-      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz",
-      "integrity": "sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": "^12.22.0 || ^14.17.0 || >=16.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
-    "node_modules/eslint/node_modules/eslint-visitor-keys": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz",
-      "integrity": "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
-    "node_modules/eslint/node_modules/ignore": {
-      "version": "5.3.2",
-      "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
-      "integrity": "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 4"
-      }
-    },
     "node_modules/esm-env": {
       "version": "1.2.2",
       "resolved": "https://registry.npmjs.org/esm-env/-/esm-env-1.2.2.tgz",
@@ -9401,37 +8991,6 @@
       "license": "MIT",
       "peer": true
     },
-    "node_modules/espree": {
-      "version": "11.2.0",
-      "resolved": "https://registry.npmjs.org/espree/-/espree-11.2.0.tgz",
-      "integrity": "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw==",
-      "dev": true,
-      "license": "BSD-2-Clause",
-      "dependencies": {
-        "acorn": "^8.16.0",
-        "acorn-jsx": "^5.3.2",
-        "eslint-visitor-keys": "^5.0.1"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
-    "node_modules/espree/node_modules/eslint-visitor-keys": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz",
-      "integrity": "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
     "node_modules/esprima": {
       "version": "4.0.1",
       "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
@@ -9446,19 +9005,6 @@
         "node": ">=4"
       }
     },
-    "node_modules/esquery": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.7.0.tgz",
-      "integrity": "sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==",
-      "dev": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "estraverse": "^5.1.0"
-      },
-      "engines": {
-        "node": ">=0.10"
-      }
-    },
     "node_modules/esrap": {
       "version": "2.2.12",
       "resolved": "https://registry.npmjs.org/esrap/-/esrap-2.2.12.tgz",
@@ -9477,19 +9023,6 @@
         }
       }
     },
-    "node_modules/esrecurse": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz",
-      "integrity": "sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==",
-      "dev": true,
-      "license": "BSD-2-Clause",
-      "dependencies": {
-        "estraverse": "^5.2.0"
-      },
-      "engines": {
-        "node": ">=4.0"
-      }
-    },
     "node_modules/estraverse": {
       "version": "5.3.0",
       "resolved": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz",
@@ -9653,20 +9186,6 @@
         "node": ">= 6"
       }
     },
-    "node_modules/fast-json-stable-stringify": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
-      "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/fast-levenshtein": {
-      "version": "2.0.6",
-      "resolved": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz",
-      "integrity": "sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/fast-string-truncated-width": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/fast-string-truncated-width/-/fast-string-truncated-width-3.0.3.tgz",
@@ -9747,19 +9266,6 @@
       "integrity": "sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==",
       "license": "MIT"
     },
-    "node_modules/file-entry-cache": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-8.0.0.tgz",
-      "integrity": "sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "flat-cache": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=16.0.0"
-      }
-    },
     "node_modules/file-selector": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/file-selector/-/file-selector-2.1.2.tgz",
@@ -9791,23 +9297,6 @@
       "integrity": "sha512-NKfW6bec6GfKc0SGx1e07QZY9PE99u0Bft/0rzSD5k3sO/vwkVUpDUKVm5Gpp5Ue3YfShPFTX2070tDs5kB9Ng==",
       "license": "MIT"
     },
-    "node_modules/find-up": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz",
-      "integrity": "sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "locate-path": "^6.0.0",
-        "path-exists": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/find-up-simple": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/find-up-simple/-/find-up-simple-1.0.1.tgz",
@@ -9820,20 +9309,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/flat-cache": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/flat-cache/-/flat-cache-4.0.1.tgz",
-      "integrity": "sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "flatted": "^3.2.9",
-        "keyv": "^4.5.4"
-      },
-      "engines": {
-        "node": ">=16"
-      }
-    },
     "node_modules/flatted": {
       "version": "3.4.2",
       "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
@@ -10093,19 +9568,6 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/glob-parent": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
-      "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "is-glob": "^4.0.3"
-      },
-      "engines": {
-        "node": ">=10.13.0"
-      }
-    },
     "node_modules/glob/node_modules/balanced-match": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
@@ -10187,19 +9649,6 @@
         "which": "bin/which"
       }
     },
-    "node_modules/globals": {
-      "version": "17.7.0",
-      "resolved": "https://registry.npmjs.org/globals/-/globals-17.7.0.tgz",
-      "integrity": "sha512-Czmyns5dUsq4seFBR/Kdydhmo8y9kC79hiSkPn0YcGtNnYWnrgt0vjrSjx9tspoDGWm2CMarffRuLjM4xUz8xg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/globby": {
       "version": "16.2.2",
       "resolved": "https://registry.npmjs.org/globby/-/globby-16.2.2.tgz",
@@ -10636,27 +10085,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/ieee754": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
-      "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "BSD-3-Clause"
-    },
     "node_modules/ignore": {
       "version": "7.0.5",
       "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz",
@@ -10710,16 +10138,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/imurmurhash": {
-      "version": "0.1.4",
-      "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
-      "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.8.19"
-      }
-    },
     "node_modules/indent-string": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz",
@@ -10941,16 +10359,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/is-interactive": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/is-interactive/-/is-interactive-1.0.0.tgz",
-      "integrity": "sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/is-node-process": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/is-node-process/-/is-node-process-1.2.0.tgz",
@@ -11022,19 +10430,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/is-unicode-supported": {
-      "version": "0.1.0",
-      "resolved": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz",
-      "integrity": "sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/is-wsl": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz",
@@ -11224,13 +10619,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/json-buffer": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz",
-      "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/json-parse-even-better-errors": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz",
@@ -11261,20 +10649,6 @@
         "node": ">=16.0.0"
       }
     },
-    "node_modules/json-schema-traverse": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
-      "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/json-stable-stringify-without-jsonify": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz",
-      "integrity": "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/json5": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
@@ -11313,16 +10687,6 @@
         "setimmediate": "^1.0.5"
       }
     },
-    "node_modules/keyv": {
-      "version": "4.5.4",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
-      "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "json-buffer": "3.0.1"
-      }
-    },
     "node_modules/kind-of": {
       "version": "6.0.3",
       "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz",
@@ -11343,20 +10707,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/levn": {
-      "version": "0.4.1",
-      "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz",
-      "integrity": "sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "prelude-ls": "^1.2.1",
-        "type-check": "~0.4.0"
-      },
-      "engines": {
-        "node": ">= 0.8.0"
-      }
-    },
     "node_modules/license-checker": {
       "version": "25.0.1",
       "resolved": "https://registry.npmjs.org/license-checker/-/license-checker-25.0.1.tgz",
@@ -11786,22 +11136,6 @@
       "license": "MIT",
       "peer": true
     },
-    "node_modules/locate-path": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
-      "integrity": "sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "p-locate": "^5.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/lodash": {
       "version": "4.18.1",
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
@@ -11816,23 +11150,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/log-symbols": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz",
-      "integrity": "sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "chalk": "^4.1.0",
-        "is-unicode-supported": "^0.1.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/longest-streak": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz",
@@ -12871,16 +12188,6 @@
         "node": ">= 0.6"
       }
     },
-    "node_modules/mimic-fn": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz",
-      "integrity": "sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/mimic-response": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-4.0.0.tgz",
@@ -13076,13 +12383,6 @@
         "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
       }
     },
-    "node_modules/natural-compare": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz",
-      "integrity": "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/netmask": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/netmask/-/netmask-2.0.2.tgz",
@@ -13206,22 +12506,6 @@
         "wrappy": "1"
       }
     },
-    "node_modules/onetime": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz",
-      "integrity": "sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "mimic-fn": "^2.1.0"
-      },
-      "engines": {
-        "node": ">=6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/open": {
       "version": "11.0.0",
       "resolved": "https://registry.npmjs.org/open/-/open-11.0.0.tgz",
@@ -13243,61 +12527,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/optionator": {
-      "version": "0.9.4",
-      "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
-      "integrity": "sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "deep-is": "^0.1.3",
-        "fast-levenshtein": "^2.0.6",
-        "levn": "^0.4.1",
-        "prelude-ls": "^1.2.1",
-        "type-check": "^0.4.0",
-        "word-wrap": "^1.2.5"
-      },
-      "engines": {
-        "node": ">= 0.8.0"
-      }
-    },
-    "node_modules/ora": {
-      "version": "5.4.1",
-      "resolved": "https://registry.npmjs.org/ora/-/ora-5.4.1.tgz",
-      "integrity": "sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "bl": "^4.1.0",
-        "chalk": "^4.1.0",
-        "cli-cursor": "^3.1.0",
-        "cli-spinners": "^2.5.0",
-        "is-interactive": "^1.0.0",
-        "is-unicode-supported": "^0.1.0",
-        "log-symbols": "^4.1.0",
-        "strip-ansi": "^6.0.0",
-        "wcwidth": "^1.0.1"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/ora/node_modules/strip-ansi": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/os-homedir": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz",
@@ -13337,6 +12566,55 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/oxlint": {
+      "version": "1.77.0",
+      "resolved": "https://registry.npmjs.org/oxlint/-/oxlint-1.77.0.tgz",
+      "integrity": "sha512-qnGh8XJHaQ0dprrDXNQZgS0FgjI6v+V3+X8DwmaV++5Aamy6jGKfDdQ1TUvhUxtmKFAbEf4/WeO5QZX+5WSngg==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "oxlint": "bin/oxlint"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/Boshen"
+      },
+      "optionalDependencies": {
+        "@oxlint/binding-android-arm-eabi": "1.77.0",
+        "@oxlint/binding-android-arm64": "1.77.0",
+        "@oxlint/binding-darwin-arm64": "1.77.0",
+        "@oxlint/binding-darwin-x64": "1.77.0",
+        "@oxlint/binding-freebsd-x64": "1.77.0",
+        "@oxlint/binding-linux-arm-gnueabihf": "1.77.0",
+        "@oxlint/binding-linux-arm-musleabihf": "1.77.0",
+        "@oxlint/binding-linux-arm64-gnu": "1.77.0",
+        "@oxlint/binding-linux-arm64-musl": "1.77.0",
+        "@oxlint/binding-linux-ppc64-gnu": "1.77.0",
+        "@oxlint/binding-linux-riscv64-gnu": "1.77.0",
+        "@oxlint/binding-linux-riscv64-musl": "1.77.0",
+        "@oxlint/binding-linux-s390x-gnu": "1.77.0",
+        "@oxlint/binding-linux-x64-gnu": "1.77.0",
+        "@oxlint/binding-linux-x64-musl": "1.77.0",
+        "@oxlint/binding-openharmony-arm64": "1.77.0",
+        "@oxlint/binding-win32-arm64-msvc": "1.77.0",
+        "@oxlint/binding-win32-ia32-msvc": "1.77.0",
+        "@oxlint/binding-win32-x64-msvc": "1.77.0"
+      },
+      "peerDependencies": {
+        "oxlint-tsgolint": ">=7.0.2001",
+        "vite-plus": "*"
+      },
+      "peerDependenciesMeta": {
+        "oxlint-tsgolint": {
+          "optional": true
+        },
+        "vite-plus": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/p-cancelable": {
       "version": "4.0.1",
       "resolved": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-4.0.1.tgz",
@@ -13346,38 +12624,6 @@
         "node": ">=14.16"
       }
     },
-    "node_modules/p-limit": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz",
-      "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "yocto-queue": "^0.1.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/p-locate": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz",
-      "integrity": "sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "p-limit": "^3.0.2"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/p-map": {
       "version": "7.0.4",
       "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.4.tgz",
@@ -13513,16 +12759,6 @@
         "url": "https://github.com/inikulin/parse5?sponsor=1"
       }
     },
-    "node_modules/path-exists": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
-      "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/path-is-absolute": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
@@ -14070,16 +13306,6 @@
         }
       }
     },
-    "node_modules/prelude-ls": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz",
-      "integrity": "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.8.0"
-      }
-    },
     "node_modules/prettier": {
       "version": "3.8.1",
       "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.8.1.tgz",
@@ -15195,27 +14421,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/restore-cursor": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-3.1.0.tgz",
-      "integrity": "sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "onetime": "^5.1.0",
-        "signal-exit": "^3.0.2"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/restore-cursor/node_modules/signal-exit": {
-      "version": "3.0.7",
-      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
-      "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/rettime": {
       "version": "0.11.11",
       "resolved": "https://registry.npmjs.org/rettime/-/rettime-0.11.11.tgz",
@@ -17335,19 +16540,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/ts-api-utils": {
-      "version": "2.5.0",
-      "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.5.0.tgz",
-      "integrity": "sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=18.12"
-      },
-      "peerDependencies": {
-        "typescript": ">=4.8.4"
-      }
-    },
     "node_modules/ts-dedent": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/ts-dedent/-/ts-dedent-2.2.0.tgz",
@@ -17413,19 +16605,6 @@
         "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
       }
     },
-    "node_modules/type-check": {
-      "version": "0.4.0",
-      "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz",
-      "integrity": "sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "prelude-ls": "^1.2.1"
-      },
-      "engines": {
-        "node": ">= 0.8.0"
-      }
-    },
     "node_modules/type-fest": {
       "version": "4.41.0",
       "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-4.41.0.tgz",
@@ -17459,30 +16638,6 @@
         "tsc6": "bin/tsc6"
       }
     },
-    "node_modules/typescript-eslint": {
-      "version": "8.65.0",
-      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.65.0.tgz",
-      "integrity": "sha512-/ggrHAwyjENDusvyxbuqxAC2dTnZg/Z8F+fgQtYIz+L6n/9HfSlEZcFGV/NsMNa6CkGk0xUjUAFwC0vHOflvIA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/eslint-plugin": "8.65.0",
-        "@typescript-eslint/parser": "8.65.0",
-        "@typescript-eslint/typescript-estree": "8.65.0",
-        "@typescript-eslint/utils": "8.65.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.1.0"
-      }
-    },
     "node_modules/undici-types": {
       "version": "7.16.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
@@ -17653,16 +16808,6 @@
         "browserslist": ">= 4.21.0"
       }
     },
-    "node_modules/uri-js": {
-      "version": "4.4.1",
-      "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
-      "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==",
-      "dev": true,
-      "license": "BSD-2-Clause",
-      "dependencies": {
-        "punycode": "^2.1.0"
-      }
-    },
     "node_modules/use-callback-ref": {
       "version": "1.3.3",
       "resolved": "https://registry.npmjs.org/use-callback-ref/-/use-callback-ref-1.3.3.tgz",
@@ -18282,16 +17427,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/wcwidth": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/wcwidth/-/wcwidth-1.0.1.tgz",
-      "integrity": "sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "defaults": "^1.0.3"
-      }
-    },
     "node_modules/web-vitals": {
       "version": "5.3.0",
       "resolved": "https://registry.npmjs.org/web-vitals/-/web-vitals-5.3.0.tgz",
@@ -18392,16 +17527,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/word-wrap": {
-      "version": "1.2.5",
-      "resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
-      "integrity": "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/wordwrapjs": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/wordwrapjs/-/wordwrapjs-5.1.1.tgz",
@@ -18679,19 +17804,6 @@
         "fd-slicer": "~1.1.0"
       }
     },
-    "node_modules/yocto-queue": {
-      "version": "0.1.0",
-      "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
-      "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/zimmerframe": {
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/zimmerframe/-/zimmerframe-1.1.4.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index bc01367cef..791a7ef585 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -108,7 +108,6 @@
     ]
   },
   "devDependencies": {
-    "@eslint/js": "^10.0.1",
     "@iconify-json/material-symbols": "^1.2.83",
     "@iconify/react": "^6.0.2",
     "@iconify/utils": "^3.1.4",
@@ -132,22 +131,18 @@
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.1.9",
     "@types/use-sync-external-store": "^0.0.6",
-    "@typescript-eslint/eslint-plugin": "^8.65.0",
-    "@typescript-eslint/parser": "^8.65.0",
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitejs/plugin-react-swc": "^4.1.0",
     "@vitest/browser": "3.2.7",
     "@vitest/coverage-v8": "3.2.7",
     "dotenv": "^16.4.7",
-    "dpdm": "^3.14.0",
-    "eslint": "^10.8.0",
     "fake-indexeddb": "^6.2.5",
-    "globals": "^17.7.0",
     "jsdom": "^27.0.0",
     "json-schema-to-typescript": "^15.0.4",
     "license-checker": "^25.0.1",
     "msw": "^2.14.6",
     "msw-storybook-addon": "^2.0.7",
+    "oxlint": "^1.77.0",
     "postcss": "^8.5.12",
     "postcss-cli": "^11.0.1",
     "postcss-preset-mantine": "^1.18.0",
@@ -159,7 +154,6 @@
     "stylelint": "^17.14.1",
     "tsx": "^4.22.4",
     "typescript": "npm:@typescript/typescript6@^6.0.2",
-    "typescript-eslint": "^8.65.0",
     "vite": "^7.3.2",
     "vite-plugin-compression2": "^2.5.3",
     "vite-plugin-static-copy": "^3.1.4",
diff --git a/frontend/vitest.config.ts b/frontend/vitest.config.ts
index f9b138bc97..0e05936482 100644
--- a/frontend/vitest.config.ts
+++ b/frontend/vitest.config.ts
@@ -3,5 +3,5 @@
 // The project definition lives in .storybook/vitest.config.ts; this re-exports
 // it from the conventional root location. The editor unit tests are separate
 // (editor/vitest.config.ts, run with `vitest --root editor`).
-// eslint-disable-next-line no-restricted-imports -- config re-export; no @-alias covers .storybook/
+// oxlint-disable-next-line no-restricted-imports -- config re-export; no @-alias covers .storybook/
 export { default } from "./.storybook/vitest.config";

From 7552fcc934fdcee7efa78cbef4a83986057dc6ce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:42:54 +0100
Subject: [PATCH 109/122] build(deps): bump ossf/scorecard-action from 2.4.3 to
 2.4.4 (#7342)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action)
from 2.4.3 to 2.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.4</h2>
<h2>What's Changed</h2>
<p>This update bumps the Scorecard version to the v5.5.0 release. For a
complete list of changes, please refer to the <a
href="https://github.com/ossf/scorecard/releases/tag/v5.4.0">Scorecard
v5.4.0 release notes</a> and the <a
href="https://github.com/ossf/scorecard/releases/tag/v5.5.0">Scorecard
v5.5.0 release notes</a>.</p>
<ul>
<li>log POST failures instead of failing entire action by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://redirect.github.com/ossf/scorecard-action/pull/1625">ossf/scorecard-action#1625</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.4.3...v2.4.4">https://github.com/ossf/scorecard-action/compare/v2.4.3...v2.4.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ossf/scorecard-action/commit/2d1146689b8cda280b9bc96326124645441f03bc"><code>2d11466</code></a>
Bump action tag for v2.4.4 release (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1688">#1688</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/1bd3285473b114fb77ed934c4ba0aea31aa0f866"><code>1bd3285</code></a>
:seedling: Bump the docker-images group across 1 directory with 2
updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1">#1</a>...</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/913edce4c1ce57261797e2ddcb74e493d9ce9700"><code>913edce</code></a>
:seedling: Bump github.com/containerd/containerd from 1.7.32 to 1.7.33
(<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1671">#1671</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/0957b8f1c327cafd868bd6bdb7e441c016628783"><code>0957b8f</code></a>
:seedling: Bump golang.org/x/net from 0.56.0 to 0.57.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1680">#1680</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/f0061eb3ff8c4d311e47276c8bcc96e96ed5dc32"><code>f0061eb</code></a>
:seedling: Bump google.golang.org/grpc from 1.81.1 to 1.82.1 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1687">#1687</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/20ee7324026c52f8d0c4b372a7bf382a01b72ff9"><code>20ee732</code></a>
:seedling: Bump github.com/sigstore/cosign/v2 from 2.6.3 to 2.6.4 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1685">#1685</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/9f295ef01b1f77f15b1647c790db825d9577a441"><code>9f295ef</code></a>
:seedling: Bump the github-actions group with 6 updates (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1686">#1686</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/69bf556cea38c0fbe034b2ce923253eca7c4d651"><code>69bf556</code></a>
:seedling: Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1681">#1681</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/94e8b9600123b21167ebf56077904fc6ca421a95"><code>94e8b96</code></a>
:seedling: Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1673">#1673</a>)</li>
<li><a
href="https://github.com/ossf/scorecard-action/commit/c7a1b37bbc88c32d53056d9071ce2ba0df381dfb"><code>c7a1b37</code></a>
:seedling: Bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6 (<a
href="https://redirect.github.com/ossf/scorecard-action/issues/1675">#1675</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ossf/scorecard-action&package-manager=github_actions&previous-version=2.4.3&new-version=2.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/scorecards.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index f7ef677359..e4f6fe5d8e 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -45,7 +45,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
         with:
           results_file: results.sarif
           results_format: sarif

From 606f4935978cfc7a86b3137f6d23be8c92e0722f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:43:11 +0100
Subject: [PATCH 110/122] build(deps): bump docker/login-action from 4.5.1 to
 4.6.0 (#7341)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [docker/login-action](https://github.com/docker/login-action) from
4.5.1 to 4.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.0</h2>
<ul>
<li>Harden buildx scoped config path handling by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1059">docker/login-action#1059</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1095.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1051">docker/login-action#1051</a></li>
<li>Bump js-yaml from 5.2.1 to 5.2.2 in <a
href="https://redirect.github.com/docker/login-action/pull/1057">docker/login-action#1057</a></li>
<li>Bump postcss from 8.5.10 to 8.5.22 in <a
href="https://redirect.github.com/docker/login-action/pull/1056">docker/login-action#1056</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.5.2...v4.6.0">https://github.com/docker/login-action/compare/v4.5.2...v4.6.0</a></p>
<h2>v4.5.2</h2>
<ul>
<li>Surface Docker Hub OIDC error responses by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1058">docker/login-action#1058</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.5.1...v4.5.2">https://github.com/docker/login-action/compare/v4.5.1...v4.5.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/dbcb813823bdd20940b903addbd779551569679f"><code>dbcb813</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1051">#1051</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li>
<li><a
href="https://github.com/docker/login-action/commit/5bcb015ee6ec720ecdeaef2dc1164122e9b209fc"><code>5bcb015</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/b30b2f2d3196c1714318ba0c3c3bec211d949752"><code>b30b2f2</code></a>
build(deps): bump the aws-sdk-dependencies group across 1 directory with
2 up...</li>
<li><a
href="https://github.com/docker/login-action/commit/9087f1e6d666fe0292409e3c819680c18526e108"><code>9087f1e</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1057">#1057</a>
from docker/dependabot/npm_and_yarn/js-yaml-5.2.2</li>
<li><a
href="https://github.com/docker/login-action/commit/0009830ea169ca16c24c0ea4cac1c325bfa3aee4"><code>0009830</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/23255232d3e43c8f0052d9a0dba82a515a88ce92"><code>2325523</code></a>
build(deps): bump js-yaml from 5.2.1 to 5.2.2</li>
<li><a
href="https://github.com/docker/login-action/commit/4ec1d4a769e8b05a89a7396551dc38b329211688"><code>4ec1d4a</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1056">#1056</a>
from docker/dependabot/npm_and_yarn/postcss-8.5.22</li>
<li><a
href="https://github.com/docker/login-action/commit/5fc99ba47bca274c5a499688f71c7ea79c0ea1b3"><code>5fc99ba</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1053">#1053</a>
from docker/dependabot/github_actions/aws-actions/co...</li>
<li><a
href="https://github.com/docker/login-action/commit/e512bd59d16c53d79ea5c0f0e345fe554453c4bb"><code>e512bd5</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1052">#1052</a>
from docker/dependabot/github_actions/codeql-actions...</li>
<li><a
href="https://github.com/docker/login-action/commit/a146c91b8f371700d323bae808af7cbdc2766ed5"><code>a146c91</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1059">#1059</a>
from crazy-max/harden-buildx-scope-paths</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/abd2ef45e78c5afb21d64d4ca52ee8550d9572c7...dbcb813823bdd20940b903addbd779551569679f">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.5.1&new-version=4.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Auto-Deploy-V2.yml          | 2 +-
 .github/workflows/PR-Demo-Comment-with-react.yml | 2 +-
 .github/workflows/deploy-on-v2-commit.yml        | 2 +-
 .github/workflows/push-docker-base.yml           | 4 ++--
 .github/workflows/push-docker.yml                | 4 ++--
 .github/workflows/rollback-latest.yml            | 4 ++--
 .github/workflows/test-build-docker.yml          | 2 +-
 .github/workflows/testdriver.yml                 | 2 +-
 8 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index cd99f6a4cc..50be9fe4cf 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -193,7 +193,7 @@ jobs:
           echo "versionNumber=$VERSION" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index d1e2000b82..cc199e5950 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -241,7 +241,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
diff --git a/.github/workflows/deploy-on-v2-commit.yml b/.github/workflows/deploy-on-v2-commit.yml
index 4a1386c6bb..c98ec8641c 100644
--- a/.github/workflows/deploy-on-v2-commit.yml
+++ b/.github/workflows/deploy-on-v2-commit.yml
@@ -85,7 +85,7 @@ jobs:
           fi
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index 4f19150306..bdc703656e 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -50,13 +50,13 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index d6ff9be7fe..848c61cb04 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -103,13 +103,13 @@ jobs:
           cosign-release: "v2.4.1"
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/rollback-latest.yml b/.github/workflows/rollback-latest.yml
index 9977fe5ec9..27141eff31 100644
--- a/.github/workflows/rollback-latest.yml
+++ b/.github/workflows/rollback-latest.yml
@@ -26,13 +26,13 @@ jobs:
         uses: imjasonh/setup-crane@31b88afe9de28ae0ffa220711af4b60be9435f6e # v0.4
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index 7f8c72d41e..3e07d0ab4f 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -61,7 +61,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index a8d777744a..c78447b8a0 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -67,7 +67,7 @@ jobs:
           echo "versionNumber=$VERSION" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_API }}

From 6d08cb2f52c579fab6bd651f05bd0c1c509bb990 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:43:28 +0100
Subject: [PATCH 111/122] build(deps): bump com.drewnoakes:metadata-extractor
 from 2.20.0 to 2.21.0 (#7338)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[com.drewnoakes:metadata-extractor](https://github.com/drewnoakes/metadata-extractor)
from 2.20.0 to 2.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/drewnoakes/metadata-extractor/releases">com.drewnoakes:metadata-extractor's
releases</a>.</em></p>
<blockquote>
<h2>2.21.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Replace custom number formatting in IccDescriptor with String.format
by <a href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/721">drewnoakes/metadata-extractor#721</a></li>
<li>Fix OOM DoS vector in BmpHeaderDescriptor.formatHex via unbounded
digits parameter by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/722">drewnoakes/metadata-extractor#722</a></li>
<li>Normalize sign to numerator in Rational.toString() by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/724">drewnoakes/metadata-extractor#724</a></li>
<li>Extract IPTC metadata from PNG text chunks by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/723">drewnoakes/metadata-extractor#723</a></li>
<li>Tolerate duplicate PNG chunks that are not allowed to appear
multiple times by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/725">drewnoakes/metadata-extractor#725</a></li>
<li>Null-check and length-guard getPowerUpTimeDescription by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/727">drewnoakes/metadata-extractor#727</a></li>
<li>Move DisposalMethod description logic to GifControlDescriptor by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/729">drewnoakes/metadata-extractor#729</a></li>
<li>Port .NET RiffReader.processChunks error checking to Java by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/728">drewnoakes/metadata-extractor#728</a></li>
<li>Fix NPE in ItemLocationBox when offset_size/length_size is 0 (valid
AVIF) by <a href="https://github.com/hanskr"><code>@​hanskr</code></a>
in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/732">drewnoakes/metadata-extractor#732</a></li>
<li>Harden ICO parsing against oversized image counts by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/734">drewnoakes/metadata-extractor#734</a></li>
<li>Support LONG8 and SLONG8 TIFF data formats by <a
href="https://github.com/dschmidt"><code>@​dschmidt</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/739">drewnoakes/metadata-extractor#739</a></li>
<li>Detect QuickTime files that lack a leading ftyp box by <a
href="https://github.com/dschmidt"><code>@​dschmidt</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/736">drewnoakes/metadata-extractor#736</a></li>
<li>Add basic MP4 udta metadata (Title, Comment, Subtitle, Rating,
Category, Mood) by <a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/740">drewnoakes/metadata-extractor#740</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/drewnoakes"><code>@​drewnoakes</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/721">drewnoakes/metadata-extractor#721</a></li>
<li><a href="https://github.com/hanskr"><code>@​hanskr</code></a> made
their first contribution in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/732">drewnoakes/metadata-extractor#732</a></li>
<li><a href="https://github.com/dschmidt"><code>@​dschmidt</code></a>
made their first contribution in <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/pull/739">drewnoakes/metadata-extractor#739</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/drewnoakes/metadata-extractor/compare/2.20.0...2.20.1">https://github.com/drewnoakes/metadata-extractor/compare/2.20.0...2.20.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/6f037943c0811799a59b0ea19896cb2b07da17be"><code>6f03794</code></a>
Merge pull request <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/issues/740">#740</a>
from drewnoakes/dev/drnoakes/mp4-metadata-pr-review</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/d01cc419eea457b8d482f864d1f1bbacee834828"><code>d01cc41</code></a>
Detect QuickTime files that lack a leading ftyp box (<a
href="https://redirect.github.com/drewnoakes/metadata-extractor/issues/736">#736</a>)</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/1b45d70723192a02bde7626d6e011081d52c3592"><code>1b45d70</code></a>
Support LONG8 and SLONG8 TIFF data formats</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/353e27c37c414702e92304a4067de96bb383def1"><code>353e27c</code></a>
Address Copilot review: align entry parsing and fix tag name casing</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/31632d2d70497333e5aa71401323f17e0f6d515a"><code>31632d2</code></a>
Clean up salvaged MP4 udta metadata code</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/845cdbab9a8f1348c52b1b4e10a6f774929ba303"><code>845cdba</code></a>
Add more UDTA metadata to MP4 parser (Title, Comment, Subtitle, Rating,
Categ...</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/5647ffd0541279bc488f6387ea91aa3c785de36b"><code>5647ffd</code></a>
Harden ICO parsing against oversized image counts (<a
href="https://redirect.github.com/drewnoakes/metadata-extractor/issues/734">#734</a>)</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/99383f6d345dfa9a72e0780c37876a8ebd31ce31"><code>99383f6</code></a>
Merge pull request <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/issues/732">#732</a>
from hanskr/fix-iloc-zero-offset-size-npe</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/35af34ae39dec240e1e0a1bded0161f6f86df38e"><code>35af34a</code></a>
Fix NPE in ItemLocationBox when offset_size/length_size is 0</li>
<li><a
href="https://github.com/drewnoakes/metadata-extractor/commit/520e07fed8167863e2245f67d2622f9bb473d017"><code>520e07f</code></a>
Merge pull request <a
href="https://redirect.github.com/drewnoakes/metadata-extractor/issues/728">#728</a>
from drewnoakes/copilot/enhance-error-checking-riffre...</li>
<li>Additional commits viewable in <a
href="https://github.com/drewnoakes/metadata-extractor/compare/2.20.0...2.21.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.drewnoakes:metadata-extractor&package-manager=gradle&previous-version=2.20.0&new-version=2.21.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 app/common/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/common/build.gradle b/app/common/build.gradle
index 942dddc5fd..f483d10c0c 100644
--- a/app/common/build.gradle
+++ b/app/common/build.gradle
@@ -10,7 +10,7 @@ dependencies {
     api 'com.fathzer:javaluator:3.0.6'
     api 'com.posthog.java:posthog:1.2.0'
     api "org.apache.commons:commons-lang3:${commonsLang3}"
-    api 'com.drewnoakes:metadata-extractor:2.20.0' // Image metadata extractor
+    api 'com.drewnoakes:metadata-extractor:2.21.0' // Image metadata extractor
     api 'com.vladsch.flexmark:flexmark-html2md-converter:0.64.8'
     api "org.apache.pdfbox:pdfbox:$pdfboxVersion"
     api "org.apache.pdfbox:pdfbox-io:$pdfboxVersion"

From fde1e5bb2afe9b9af598b407f8421a207452f308 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:43:42 +0100
Subject: [PATCH 112/122] build(deps-dev): bump the react group across 1
 directory with 2 updates (#7337)

Bumps the react group with 2 updates in the /frontend directory:
[@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)
and
[@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom).

Updates `@types/react` from 19.2.17 to 19.2.18
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/react-dom` from 19.2.3 to 19.2.4
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 16 ++++++++--------
 frontend/package.json      |  4 ++--
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f156747452..cef88f0511 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -106,8 +106,8 @@
         "@types/google.accounts": "^0.0.18",
         "@types/google.picker": "^0.0.51",
         "@types/node": "^24.5.2",
-        "@types/react": "^19.2.17",
-        "@types/react-dom": "^19.1.9",
+        "@types/react": "^19.2.18",
+        "@types/react-dom": "^19.2.4",
         "@types/use-sync-external-store": "^0.0.6",
         "@typescript/native": "npm:typescript@^7.0.2",
         "@vitejs/plugin-react-swc": "^4.1.0",
@@ -5835,18 +5835,18 @@
       "license": "MIT"
     },
     "node_modules/@types/react": {
-      "version": "19.2.17",
-      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.17.tgz",
-      "integrity": "sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw==",
+      "version": "19.2.18",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.18.tgz",
+      "integrity": "sha512-AnzbBERsrLKtk2XSfTbYRLjQPdy116Sty4q+T+Bp3IC4l6jNBvreVPAHmpq9qhXQM7CXZPjLVmGMw9sy+hxQ3w==",
       "license": "MIT",
       "dependencies": {
         "csstype": "^3.2.2"
       }
     },
     "node_modules/@types/react-dom": {
-      "version": "19.2.3",
-      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.3.tgz",
-      "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
+      "version": "19.2.4",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.4.tgz",
+      "integrity": "sha512-Bsc+QHgp+P/F02XDzNCY9jnZNCUuLki36KT7VKrTXXLdHf+vHMNZnW1rVu5DNW/rCK+fya3DATySbLM4yhtKUw==",
       "dev": true,
       "license": "MIT",
       "peerDependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 791a7ef585..ecb84e3b97 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -128,8 +128,8 @@
     "@types/google.accounts": "^0.0.18",
     "@types/google.picker": "^0.0.51",
     "@types/node": "^24.5.2",
-    "@types/react": "^19.2.17",
-    "@types/react-dom": "^19.1.9",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
     "@types/use-sync-external-store": "^0.0.6",
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitejs/plugin-react-swc": "^4.1.0",

From 039e29f780509c5ee3c9d702bd9098dcb03870e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:43:56 +0100
Subject: [PATCH 113/122] build(deps): bump actions/setup-java from 5.2.0 to
 5.7.0 (#7336)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/setup-java](https://github.com/actions/setup-java) from
5.2.0 to 5.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-java/releases">actions/setup-java's
releases</a>.</em></p>
<blockquote>
<h2>v5.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix npm audit failures on releases/v5 by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1154">actions/setup-java#1154</a></li>
<li>Backport <a
href="https://redirect.github.com/actions/setup-java/issues/1151">#1151</a>:
Fix missing wrapper cache distributions by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1153">actions/setup-java#1153</a></li>
<li>Deprecate legacy Adopt distributions in v5 by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1186">actions/setup-java#1186</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-java/compare/v5.6.0...v5.7.0">https://github.com/actions/setup-java/compare/v5.6.0...v5.7.0</a></p>
<h2>v5.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Backport to v5: Add Maven compiler problem matcher for javac
diagnostics by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1087">actions/setup-java#1087</a></li>
<li>feat: expose cache-primary-key output (<a
href="https://redirect.github.com/actions/setup-java/issues/597">#597</a>)
[v5 backport] by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1089">actions/setup-java#1089</a></li>
<li>dist: Cover Tencent Kona JDK 25 (<a
href="https://redirect.github.com/actions/setup-java/issues/1108">#1108</a>)
[v5 backport] by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1110">actions/setup-java#1110</a></li>
<li>Backport <a
href="https://redirect.github.com/actions/setup-java/issues/1111">#1111</a>:
Preserve Maven toolchains across repeated setup-java runs (<a
href="https://redirect.github.com/actions/setup-java/issues/1099">#1099</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1113">actions/setup-java#1113</a></li>
<li>Backport <a
href="https://redirect.github.com/actions/setup-java/issues/1097">#1097</a>/<a
href="https://redirect.github.com/actions/setup-java/issues/1098">#1098</a>
to v5: cache Maven and Gradle wrapper distributions separately by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1122">actions/setup-java#1122</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-java/compare/v5...v5.6.0">https://github.com/actions/setup-java/compare/v5...v5.6.0</a></p>
<h2>v5.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: enforce pre-PR validation (aggregate scripts, git hooks, PR
checklist) by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1061">actions/setup-java#1061</a></li>
<li>Bump github/codeql-action from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1069">actions/setup-java#1069</a></li>
<li>Bump actions/checkout from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1068">actions/setup-java#1068</a></li>
<li>Bump actions/setup-python from 5 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1067">actions/setup-java#1067</a></li>
<li>Bump <code>@​typescript-eslint/parser</code> from 8.61.1 to 8.62.0
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1062">actions/setup-java#1062</a></li>
<li>feat: Add verify-signature plumbing and Temurin+Microsoft
verification support by <a
href="https://github.com/johnoliver"><code>@​johnoliver</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1060">actions/setup-java#1060</a></li>
<li>Updated jetbrains test: https.request() now catches errors. This
fixes leaking tests as well by <a
href="https://github.com/jmjaffe37"><code>@​jmjaffe37</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1070">actions/setup-java#1070</a></li>
<li>Fix arm64 e2e workflow tests mislabeled as x64 by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1073">actions/setup-java#1073</a></li>
<li>feat: suppress Maven transfer progress via MAVEN_ARGS by default
(add show-download-progress input) by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1053">actions/setup-java#1053</a></li>
<li>feat: Disable interactiveMode in generated Maven settings.xml by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1052">actions/setup-java#1052</a></li>
<li>Bump prettier from 3.6.2 to 3.9.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1066">actions/setup-java#1066</a></li>
<li>chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1074">actions/setup-java#1074</a></li>
<li>fix: Maven Toolchains grows unexpectedly by <a
href="https://github.com/Okeanos"><code>@​Okeanos</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/534">actions/setup-java#534</a></li>
<li>dist: Support Tencent Kona JDK by <a
href="https://github.com/johnshajiang"><code>@​johnshajiang</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/672">actions/setup-java#672</a></li>
<li>feat: Add set-default option by <a
href="https://github.com/gsmet"><code>@​gsmet</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1017">actions/setup-java#1017</a></li>
<li>docs: document problem matcher (and how to disable it), Maven
Wrapper caching, and generated interactiveMode by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1075">actions/setup-java#1075</a></li>
<li>feat: Add distribution detection support to .sdkmanrc file by <a
href="https://github.com/lukaszgyg"><code>@​lukaszgyg</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/975">actions/setup-java#975</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jmjaffe37"><code>@​jmjaffe37</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/1070">actions/setup-java#1070</a></li>
<li><a href="https://github.com/gsmet"><code>@​gsmet</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/1017">actions/setup-java#1017</a></li>
<li><a href="https://github.com/lukaszgyg"><code>@​lukaszgyg</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-java/pull/975">actions/setup-java#975</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-java/compare/v5...v5.5.0">https://github.com/actions/setup-java/compare/v5...v5.5.0</a></p>
<h2>v5.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​typescript-eslint/parser</code> from 8.48.0 to 8.61.1
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1021">actions/setup-java#1021</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-java/commit/b6effb05e454b25005698d916606bdc6ffcbf961"><code>b6effb0</code></a>
Deprecate legacy Adopt distributions in v5 (<a
href="https://redirect.github.com/actions/setup-java/issues/1186">#1186</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/e498d2a66a953492f322542257b22125c989b422"><code>e498d2a</code></a>
Backport <a
href="https://redirect.github.com/actions/setup-java/issues/1151">#1151</a>:
Fix missing wrapper cache distributions (<a
href="https://redirect.github.com/actions/setup-java/issues/1153">#1153</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/6a3384db745932178632d0e22b2bd28cad1678e6"><code>6a3384d</code></a>
Fix npm audit failures on releases/v5 (<a
href="https://redirect.github.com/actions/setup-java/issues/1154">#1154</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/03ad4de0992f5dab5e18fcb136590ce7c4a0ac95"><code>03ad4de</code></a>
Backport <a
href="https://redirect.github.com/actions/setup-java/issues/1097">#1097</a>/<a
href="https://redirect.github.com/actions/setup-java/issues/1098">#1098</a>:
cache Maven and Gradle wrapper distributions separately...</li>
<li><a
href="https://github.com/actions/setup-java/commit/d229d2e858d9137cc0b3f118fa5184b9f0a44ac4"><code>d229d2e</code></a>
Backport <a
href="https://redirect.github.com/actions/setup-java/issues/1111">#1111</a>:
Preserve Maven toolchains across repeated setup-java runs (<a
href="https://redirect.github.com/actions/setup-java/issues/1">#1</a>...</li>
<li><a
href="https://github.com/actions/setup-java/commit/bbf0f6967066506f72571a96d5d6c67ca42ab460"><code>bbf0f69</code></a>
dist: Cover Tencent Kona JDK 25 (<a
href="https://redirect.github.com/actions/setup-java/issues/1110">#1110</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/513edc4f8710565e4ad696f3b7d8e3bda584a46c"><code>513edc4</code></a>
feat: expose cache-primary-key output (<a
href="https://redirect.github.com/actions/setup-java/issues/597">#597</a>)
[v5 backport] (<a
href="https://redirect.github.com/actions/setup-java/issues/1089">#1089</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/62df799a9c6e3022bb466697c66c36e9a2dbf347"><code>62df799</code></a>
Add Maven compiler problem matcher for javac diagnostics (<a
href="https://redirect.github.com/actions/setup-java/issues/1087">#1087</a>)</li>
<li><a
href="https://github.com/actions/setup-java/commit/176156a187714aaf460b0a3c8f21e8b4f784b978"><code>176156a</code></a>
chore: bump version to 5.6.0 for v5 release line</li>
<li><a
href="https://github.com/actions/setup-java/commit/bf7b8deac240b9cee05eb15ccdb1d2f424a54b9f"><code>bf7b8de</code></a>
build: rebuild dist for backported changes (<a
href="https://redirect.github.com/actions/setup-java/issues/1079">#1079</a>,
<a
href="https://redirect.github.com/actions/setup-java/issues/1083">#1083</a>,
<a
href="https://redirect.github.com/actions/setup-java/issues/1084">#1084</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...b6effb05e454b25005698d916606bdc6ffcbf961">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-java&package-manager=github_actions&previous-version=5.2.0&new-version=5.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/PR-Demo-Comment-with-react.yml       | 2 +-
 .github/workflows/backend-build.yml                    | 2 +-
 .github/workflows/build-enterprise.yml                 | 2 +-
 .github/workflows/build.yml                            | 2 +-
 .github/workflows/check-generated-models.yml           | 2 +-
 .github/workflows/check-licence.yml                    | 2 +-
 .github/workflows/check-openapi.yml                    | 2 +-
 .github/workflows/coverage-aggregate.yml               | 2 +-
 .github/workflows/db-migration-test.yml                | 2 +-
 .github/workflows/docker-compose-tests.yml             | 2 +-
 .github/workflows/e2e-live.yml                         | 2 +-
 .github/workflows/frontend-backend-licenses-update.yml | 2 +-
 .github/workflows/multiOSReleases.yml                  | 8 ++++----
 .github/workflows/push-docker.yml                      | 2 +-
 .github/workflows/swagger.yml                          | 2 +-
 .github/workflows/tauri-build.yml                      | 4 ++--
 .github/workflows/test-build-docker.yml                | 2 +-
 .github/workflows/testdriver.yml                       | 2 +-
 18 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index cc199e5950..fd055013a6 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -205,7 +205,7 @@ jobs:
           token: ${{ steps.setup-bot.outputs.token }}
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/backend-build.yml b/.github/workflows/backend-build.yml
index 47b5591e19..9bfd3d185b 100644
--- a/.github/workflows/backend-build.yml
+++ b/.github/workflows/backend-build.yml
@@ -35,7 +35,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK ${{ matrix.jdk-version }}
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: ${{ matrix.jdk-version }}
           distribution: "temurin"
diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index a1f521be66..3b18724bb2 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -56,7 +56,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4ad4b046e6..87d414b462 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -73,7 +73,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index a8559a7d78..af6900ed96 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -37,7 +37,7 @@ jobs:
           cache-suffix: generated-models
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/check-licence.yml b/.github/workflows/check-licence.yml
index 61d21c0501..af94d09316 100644
--- a/.github/workflows/check-licence.yml
+++ b/.github/workflows/check-licence.yml
@@ -21,7 +21,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/check-openapi.yml b/.github/workflows/check-openapi.yml
index c188e8ff23..19a047ff01 100644
--- a/.github/workflows/check-openapi.yml
+++ b/.github/workflows/check-openapi.yml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/coverage-aggregate.yml b/.github/workflows/coverage-aggregate.yml
index 1ece083252..81cac831cf 100644
--- a/.github/workflows/coverage-aggregate.yml
+++ b/.github/workflows/coverage-aggregate.yml
@@ -41,7 +41,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/db-migration-test.yml b/.github/workflows/db-migration-test.yml
index edb2d0547c..0c9500795a 100644
--- a/.github/workflows/db-migration-test.yml
+++ b/.github/workflows/db-migration-test.yml
@@ -25,7 +25,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: 25
           distribution: temurin
diff --git a/.github/workflows/docker-compose-tests.yml b/.github/workflows/docker-compose-tests.yml
index 049db8adc0..e6824f7497 100644
--- a/.github/workflows/docker-compose-tests.yml
+++ b/.github/workflows/docker-compose-tests.yml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/e2e-live.yml b/.github/workflows/e2e-live.yml
index 0e64b89099..e91ac2ff82 100644
--- a/.github/workflows/e2e-live.yml
+++ b/.github/workflows/e2e-live.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/frontend-backend-licenses-update.yml b/.github/workflows/frontend-backend-licenses-update.yml
index 1f901a7f05..23999d038a 100644
--- a/.github/workflows/frontend-backend-licenses-update.yml
+++ b/.github/workflows/frontend-backend-licenses-update.yml
@@ -345,7 +345,7 @@ jobs:
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index 74a6e74641..a3837b13f6 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -52,7 +52,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
@@ -142,7 +142,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
@@ -240,7 +240,7 @@ jobs:
       # before the second setup-java overwrites JAVA_HOME.
       - name: Set up x86_64 JDK 25 (macOS universal JRE)
         if: matrix.platform == 'macos-15'
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
@@ -252,7 +252,7 @@ jobs:
 
       # Temurin has no windows-aarch64 JDK 25 yet; Microsoft OpenJDK does.
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index 848c61cb04..81d2a7484f 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -60,7 +60,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/swagger.yml b/.github/workflows/swagger.yml
index 76b28c4566..ead800f73f 100644
--- a/.github/workflows/swagger.yml
+++ b/.github/workflows/swagger.yml
@@ -34,7 +34,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index 9fca8ec994..d90c5f7c68 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -162,7 +162,7 @@ jobs:
 
       - name: Set up x86_64 JDK 25 (macOS universal JRE)
         if: matrix.platform == 'macos-15'
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
@@ -174,7 +174,7 @@ jobs:
 
       # Temurin has no windows-aarch64 JDK 25 yet; Microsoft OpenJDK does.
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index 3e07d0ab4f..dee56dc2b3 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -79,7 +79,7 @@ jobs:
           echo "Disk space after cleanup:" && df -h
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
index c78447b8a0..458abacd25 100644
--- a/.github/workflows/testdriver.yml
+++ b/.github/workflows/testdriver.yml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up JDK 25
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"

From 4ed2f151223ad1216bdd86268bc61023a52ef3e2 Mon Sep 17 00:00:00 2001
From: "stirlingbot[bot]" <195170888+stirlingbot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:44:18 +0100
Subject: [PATCH 114/122] Update Frontend 3rd Party Licenses (#7329)

Auto-generated by stirlingbot[bot]

This PR updates the frontend license report based on changes to
package.json dependencies.

Signed-off-by: stirlingbot[bot] <stirlingbot[bot]@users.noreply.github.com>
Co-authored-by: stirlingbot[bot] <195170888+stirlingbot[bot]@users.noreply.github.com>
---
 .../editor/src/assets/3rdPartyLicenses.json   | 112 +++++++++---------
 1 file changed, 56 insertions(+), 56 deletions(-)

diff --git a/frontend/editor/src/assets/3rdPartyLicenses.json b/frontend/editor/src/assets/3rdPartyLicenses.json
index 14d2e1fa5b..110a6c88a5 100644
--- a/frontend/editor/src/assets/3rdPartyLicenses.json
+++ b/frontend/editor/src/assets/3rdPartyLicenses.json
@@ -23,186 +23,179 @@
     },
     {
       "moduleName": "@embedpdf/core",
-      "moduleUrl": "https://www.npmjs.com/package/@embedpdf/core",
-      "moduleVersion": "2.14.1",
+      "moduleUrl": "https://registry.npmjs.org/@embedpdf/core/-/core-2.15.0.tgz",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/engines",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/models",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-annotation",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-attachment",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-bookmark",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-document-manager",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-export",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-history",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-interaction-manager",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-pan",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-print",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-redaction",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-render",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-rotate",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-scroll",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-search",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-selection",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-spread",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-thumbnail",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-tiling",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-viewport",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-zoom",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.1",
+      "moduleVersion": "2.14.4",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@emotion/react",
-      "moduleUrl": "https://github.com/emotion-js/emotion/tree/main/packages/react",
+      "moduleUrl": "https://github.com/emotion-js/emotion.git#main",
       "moduleVersion": "11.14.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@emotion/styled",
-      "moduleUrl": "https://github.com/emotion-js/emotion/tree/main/packages/styled",
+      "moduleUrl": "https://github.com/emotion-js/emotion.git#main",
       "moduleVersion": "11.14.1",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
-    {
-      "moduleName": "@iconify/react",
-      "moduleUrl": "https://github.com/iconify/iconify",
-      "moduleVersion": "6.0.2",
-      "moduleLicense": "MIT",
-      "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
-    },
     {
       "moduleName": "@mantine/core",
       "moduleUrl": "https://github.com/mantinedev/mantine",
@@ -234,14 +227,14 @@
     {
       "moduleName": "@mui/icons-material",
       "moduleUrl": "https://github.com/mui/material-ui",
-      "moduleVersion": "9.0.0",
+      "moduleVersion": "9.2.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@mui/material",
       "moduleUrl": "https://github.com/mui/material-ui",
-      "moduleVersion": "9.0.0",
+      "moduleVersion": "9.2.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -287,6 +280,13 @@
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
+    {
+      "moduleName": "@tanstack/react-query",
+      "moduleUrl": "https://github.com/TanStack/query",
+      "moduleVersion": "5.101.4",
+      "moduleLicense": "MIT",
+      "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
+    },
     {
       "moduleName": "@tanstack/react-virtual",
       "moduleUrl": "https://github.com/TanStack/virtual",
@@ -345,7 +345,7 @@
     },
     {
       "moduleName": "autoprefixer",
-      "moduleUrl": "postcss/autoprefixer",
+      "moduleUrl": "https://github.com/postcss/autoprefixer",
       "moduleVersion": "10.4.27",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
@@ -353,7 +353,7 @@
     {
       "moduleName": "axios",
       "moduleUrl": "https://github.com/axios/axios",
-      "moduleVersion": "1.15.0",
+      "moduleVersion": "1.18.1",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -364,13 +364,6 @@
       "moduleLicense": "ISC",
       "moduleLicenseUrl": "https://opensource.org/licenses/ISC"
     },
-    {
-      "moduleName": "globals",
-      "moduleUrl": "sindresorhus/globals",
-      "moduleVersion": "17.5.0",
-      "moduleLicense": "MIT",
-      "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
-    },
     {
       "moduleName": "i18next",
       "moduleUrl": "https://github.com/i18next/i18next",
@@ -394,7 +387,7 @@
     },
     {
       "moduleName": "license-report",
-      "moduleUrl": "https://github.com/kessler/license-report",
+      "moduleUrl": "https://github.com/bepo65/license-report",
       "moduleVersion": "6.8.2",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
@@ -423,9 +416,9 @@
     {
       "moduleName": "posthog-js",
       "moduleUrl": "https://github.com/PostHog/posthog-js",
-      "moduleVersion": "1.363.3",
-      "moduleLicense": "SEE LICENSE IN LICENSE https://github.com/PostHog/posthog-js/blob/main/LICENSE",
-      "moduleLicenseUrl": "https://github.com/PostHog/posthog-js/blob/main/LICENSE"
+      "moduleVersion": "1.405.2",
+      "moduleLicense": "(Apache-2.0 AND MIT)",
+      "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
     },
     {
       "moduleName": "qrcode.react",
@@ -436,15 +429,15 @@
     },
     {
       "moduleName": "react",
-      "moduleUrl": "https://github.com/facebook/react",
-      "moduleVersion": "19.2.4",
+      "moduleUrl": "https://github.com/react/react",
+      "moduleVersion": "19.2.8",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "react-dom",
-      "moduleUrl": "https://github.com/facebook/react",
-      "moduleVersion": "19.2.4",
+      "moduleUrl": "https://github.com/react/react",
+      "moduleVersion": "19.2.8",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -464,7 +457,7 @@
     },
     {
       "moduleName": "react-markdown",
-      "moduleUrl": "remarkjs/react-markdown",
+      "moduleUrl": "https://github.com/remarkjs/react-markdown",
       "moduleVersion": "9.1.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
@@ -479,7 +472,7 @@
     {
       "moduleName": "react-router-dom",
       "moduleUrl": "https://github.com/remix-run/react-router",
-      "moduleVersion": "7.13.2",
+      "moduleVersion": "7.18.1",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -492,7 +485,7 @@
     },
     {
       "moduleName": "remark-gfm",
-      "moduleUrl": "remarkjs/remark-gfm",
+      "moduleUrl": "https://github.com/remarkjs/remark-gfm",
       "moduleVersion": "4.0.1",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
@@ -518,10 +511,17 @@
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
+    {
+      "moduleName": "use-sync-external-store",
+      "moduleUrl": "https://github.com/facebook/react",
+      "moduleVersion": "1.6.0",
+      "moduleLicense": "MIT",
+      "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
+    },
     {
       "moduleName": "web-vitals",
       "moduleUrl": "https://github.com/GoogleChrome/web-vitals",
-      "moduleVersion": "5.1.0",
+      "moduleVersion": "5.3.0",
       "moduleLicense": "Apache-2.0",
       "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
     }

From b7a6a969957fd413dfe6005b7a5715c3b95def39 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 8 Aug 2026 21:44:33 +0100
Subject: [PATCH 115/122] build(deps): bump docker/setup-qemu-action from 4.0.0
 to 4.2.0 (#7248)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[docker/setup-qemu-action](https://github.com/docker/setup-qemu-action)
from 4.0.0 to 4.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/setup-qemu-action/releases">docker/setup-qemu-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.0</h2>
<ul>
<li>Preserve names in esbuild bundle by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/311">docker/setup-qemu-action#311</a></li>
<li>Bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/295">docker/setup-qemu-action#295</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.91.0 to 0.92.0 in
<a
href="https://redirect.github.com/docker/setup-qemu-action/pull/315">docker/setup-qemu-action#315</a></li>
<li>Bump <code>@​sigstore/core</code> from 3.1.0 to 3.2.1 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/312">docker/setup-qemu-action#312</a></li>
<li>Bump js-yaml from 4.1.1 to 4.2.0 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/310">docker/setup-qemu-action#310</a></li>
<li>Bump tmp from 0.2.6 to 0.2.7 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/304">docker/setup-qemu-action#304</a></li>
<li>Bump undici from 6.26.0 to 6.27.0 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/308">docker/setup-qemu-action#308</a></li>
<li>Bump vite from 7.3.2 to 7.3.6 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/307">docker/setup-qemu-action#307</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-action/compare/v4.1.0...v4.2.0">https://github.com/docker/setup-qemu-action/compare/v4.1.0...v4.2.0</a></p>
<h2>v4.1.0</h2>
<ul>
<li>Add <code>reset</code> input to uninstall current emulators by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/21">docker/setup-qemu-action#21</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.77.0 to 0.91.0 in
<a
href="https://redirect.github.com/docker/setup-qemu-action/pull/250">docker/setup-qemu-action#250</a>
<a
href="https://redirect.github.com/docker/setup-qemu-action/pull/247">docker/setup-qemu-action#247</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.15 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/265">docker/setup-qemu-action#265</a></li>
<li>Bump fast-xml-builder from 1.0.0 to 1.2.0 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/286">docker/setup-qemu-action#286</a></li>
<li>Bump fast-xml-parser from 5.4.2 to 5.8.0 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/255">docker/setup-qemu-action#255</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/257">docker/setup-qemu-action#257</a></li>
<li>Bump glob from 10.3.15 to 10.5.0 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/254">docker/setup-qemu-action#254</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/262">docker/setup-qemu-action#262</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/273">docker/setup-qemu-action#273</a></li>
<li>Bump postcss from 8.5.6 to 8.5.10 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/285">docker/setup-qemu-action#285</a></li>
<li>Bump tar from 6.2.1 to 7.5.15 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/287">docker/setup-qemu-action#287</a></li>
<li>Bump tmp from 0.2.5 to 0.2.6 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/291">docker/setup-qemu-action#291</a></li>
<li>Bump undici from 6.23.0 to 6.26.0 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/251">docker/setup-qemu-action#251</a></li>
<li>Bump vite from 7.3.1 to 7.3.2 in <a
href="https://redirect.github.com/docker/setup-qemu-action/pull/271">docker/setup-qemu-action#271</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-action/compare/v4.0.0...v4.1.0">https://github.com/docker/setup-qemu-action/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/96fe6ef7f33517b61c61be40b68a1882f3264fb8"><code>96fe6ef</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-qemu-action/issues/315">#315</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/31f08d3fc9186dbe4b4550696f2e32e9aa7f9465"><code>31f08d3</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/4e7017a474d2cf3912bb0437f7fafec6d5fb6c52"><code>4e7017a</code></a>
build(deps): bump <code>@​docker/actions-toolkit</code> from 0.91.0 to
0.92.0</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/0eca235293ca1939b58c082f69bdc981ccce8c94"><code>0eca235</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-qemu-action/issues/314">#314</a>
from crazy-max/fix-yarn-preapprove-actions-toolkit</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/ea66a4130b037e7961e14a0e5b155836e797cced"><code>ea66a41</code></a>
chore: allow actions-toolkit to bypass yarn age gate</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/451542b03ae7946b7082a398b11c8c315a0e4e80"><code>451542b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-qemu-action/issues/308">#308</a>
from docker/dependabot/npm_and_yarn/undici-6.27.0</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/532ae0057542ec2102e2d19e9feccf85f1f69013"><code>532ae00</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/b6f5af659afad3f9931b782668dee4595ae7e841"><code>b6f5af6</code></a>
build(deps): bump undici from 6.26.0 to 6.27.0</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/cf96b86294b57480ac6d330bd177fca87eac95bc"><code>cf96b86</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/setup-qemu-action/issues/304">#304</a>
from docker/dependabot/npm_and_yarn/tmp-0.2.7</li>
<li><a
href="https://github.com/docker/setup-qemu-action/commit/f0ba643f78dc96bc931fb83e5dadc39628e10047"><code>f0ba643</code></a>
[dependabot skip] chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...96fe6ef7f33517b61c61be40b68a1882f3264fb8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/setup-qemu-action&package-manager=github_actions&previous-version=4.0.0&new-version=4.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
---
 .github/workflows/push-docker-base.yml  | 2 +-
 .github/workflows/push-docker.yml       | 2 +-
 .github/workflows/test-build-docker.yml | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index bdc703656e..167b71531e 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -67,7 +67,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
 
       - name: Convert repository owner to lowercase
         id: repoowner
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index 81d2a7484f..7f10d99b27 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -116,7 +116,7 @@ jobs:
           password: ${{ github.token }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
 
       - name: Convert repository owner to lowercase
         id: repoowner
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index dee56dc2b3..0d546381d8 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -107,7 +107,7 @@ jobs:
           STIRLING_PDF_DESKTOP_UI: false
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
 
       - name: Set up Docker Buildx
         id: buildx
@@ -199,7 +199,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
 
       - name: Set up Docker Buildx
         id: buildx

From 0286c716de5206af6d25a4c5dca6835bdbcb5fac Mon Sep 17 00:00:00 2001
From: albanobattistella <34811668+albanobattistella@users.noreply.github.com>
Date: Sun, 9 Aug 2026 12:38:24 +0200
Subject: [PATCH 116/122] Updated Italian translation (#7353)

---
 .../public/locales/it-IT/translation.toml     | 24 +++++++++----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/frontend/editor/public/locales/it-IT/translation.toml b/frontend/editor/public/locales/it-IT/translation.toml
index 0503fcb3c6..005bfdb22d 100644
--- a/frontend/editor/public/locales/it-IT/translation.toml
+++ b/frontend/editor/public/locales/it-IT/translation.toml
@@ -508,7 +508,7 @@ green = "Verde"
 noPreview = "Seleziona un PDF per l'anteprima"
 red = "Rosso"
 saturation = "Saturazione:"
-tags = "contrast,brightness,saturation,adjust colors,color correction,enhance,lighten,darken,improve quality,color balance,hue,vibrance"
+tags = "contrasto,luminosità,saturazione,regolazione dei colori,correzione del colore,miglioramento,schiarimento,oscuramento,miglioramento della qualità,bilanciamento del colore,tonalità,vivacità"
 title = "Regola il contrasto"
 
 [adjustContrast.error]
@@ -3491,8 +3491,8 @@ title = "Rimuovi la password per continuare"
 unlock = "Sblocca e continua"
 unlockAll = "Usa per tutti ({{count}})"
 unlockAllPartialFail = "Password errata per: {{names}}"
-unlockAllSuccess_one = "Unlocked {{count}} file."
-unlockAllSuccess_other = "Unlocked {{count}} files."
+unlockAllSuccess_one = "Sbloccato {{count}} file."
+unlockAllSuccess_other = "Sbloccato {{count}} files."
 unlockPrompt = "Sblocca il PDF per continuare"
 viewerLocked = "Questo PDF è protetto da password"
 viewerUnlock = "Sblocca"
@@ -4202,8 +4202,8 @@ location = "Località:"
 logo = "Logo:"
 logoHidden = "Nessun logo"
 logoShown = "Logo Stirling PDF visualizzato"
-participantCount_one = "{{count}} participant will sign in order"
-participantCount_other = "{{count}} participants will sign in order"
+participantCount_one = "{{count}} partecipante firmerà in ordine"
+participantCount_other = "{{count}} partecipanti firmeranno in ordine"
 participants = "Partecipanti"
 reason = "Motivo:"
 send = "Invia richieste di firma"
@@ -4221,8 +4221,8 @@ title = "Seleziona documento"
 
 [groupSigning.steps.selectParticipants]
 continue = "Continua alle impostazioni firma"
-count_one = "{{count}} participant selected"
-count_other = "{{count}} participants selected"
+count_one = "{{count}} partecipante selezionato"
+count_other = "{{count}} partecipanti selezionati"
 label = "Seleziona partecipanti"
 placeholder = "Scegli i partecipanti che devono firmare..."
 title = "Scegli partecipanti"
@@ -8374,7 +8374,7 @@ title = "Informazioni su Rimuovi annotazioni"
 
 [removeBlanks]
 submit = "Rimuovi"
-tags = "delete,clean,empty,remove blank,delete blank pages,empty pages,white pages,remove empty,clean up,cleanup blank"
+tags = "eliminare,pulire,svuotare,rimuovere pagine bianche,eliminare le pagine vuote,pagine vuote,pagine bianche,rimuovere il vuoto,pulire,pulire bianche"
 title = "Rimuovi spazi vuoti"
 
 [removeBlanks.error]
@@ -10141,10 +10141,10 @@ generatedAt = "Generato"
 noPdf = "Il report PDF sarà disponibile dopo una validazione riuscita."
 page = "Pagina"
 shortTitle = "Riepilogo firma"
-signatureCountLabel_one = "{{count}} signature"
-signatureCountLabel_other = "{{count}} signatures"
-signaturesFound_one = "{{count}} signature detected"
-signaturesFound_other = "{{count}} signatures detected"
+signatureCountLabel_one = "{{count}} firma"
+signatureCountLabel_other = "{{count}} firme"
+signaturesFound_one = "{{count}} firma rilevata"
+signaturesFound_other = "{{count}} firme rilevate"
 signaturesInvalid = "{{count}} non valide"
 signaturesUnverified_one = "{{count}} necessita verifica"
 signaturesUnverified_other = "{{count}} necessitano verifica"

From 3260f5415dba4c21a0dd9353554ea3ccb2bc2a6f Mon Sep 17 00:00:00 2001
From: kastenherri <116314318+kastenherri@users.noreply.github.com>
Date: Sun, 9 Aug 2026 13:44:16 +0200
Subject: [PATCH 117/122] localization/formFill: Improve german translation and
 add localization (#7255)

# Description of Changes
The formFill tool name and description as well as the notification popup
for forms were missing their german translations. There were also some
hardcoded text elements in the UI.

Added translations of formFill-related tags and new tags and translation
method for hardcoded strings.

<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [x] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings

### Documentation
- [x] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [x] I have run `task check` to verify linters, typechecks, and tests
pass
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.

---------

Signed-off-by: Carsten Drewes <c.drewes@stud.uni-hannover.de>
---
 .../public/locales/de-DE/translation.toml     | 25 +++++++++++--------
 .../public/locales/en-US/translation.toml     |  5 ++++
 .../src/core/tools/formFill/FieldInput.tsx    | 19 +++++++++-----
 .../src/core/tools/formFill/FormFill.tsx      | 15 +++++++----
 4 files changed, 43 insertions(+), 21 deletions(-)

diff --git a/frontend/editor/public/locales/de-DE/translation.toml b/frontend/editor/public/locales/de-DE/translation.toml
index 6a2d03a1c8..3cdf512236 100644
--- a/frontend/editor/public/locales/de-DE/translation.toml
+++ b/frontend/editor/public/locales/de-DE/translation.toml
@@ -4084,10 +4084,15 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Alles gespeichert"
+analyzingFields = "Analysiere Formularfelder..."
 extractCsvError = "CSV konnte nicht extrahiert werden"
 extractXlsxError = "XLSX konnte nicht extrahiert werden"
+filled = "ausgefüllt"
 flattenAfterFilling = "Nach dem Ausfüllen ebnen"
-requiredAbbreviation = "erf."
+noFields = "Keine ausfüllbaren Formularfelder gefunden."
+placeholderEnter = "Eingabe:"
+placeholderSelect = "Auswahl:"
+requiredAbbreviation = "erf"
 requiredFieldsError = "Bitte füllen Sie alle Pflichtfelder aus"
 rescanFields = "Felder erneut scannen"
 rescanFormFields = "Formularfelder erneut scannen"
@@ -4416,8 +4421,8 @@ tags = "vereinfachen,entfernen,interaktiv"
 title = "Abflachen"
 
 [home.formFill]
-desc = "Fill PDF form fields interactively with a visual editor"
-title = "Fill Form"
+desc = "PDF-Formularfelder interaktiv mit visuellem Editor ausfüllen"
+title = "Formular ausfüllen"
 
 [home.getPdfInfo]
 desc = "Erfasst alle möglichen Informationen in einer PDF"
@@ -10292,13 +10297,13 @@ viewComment = "Kommentar anzeigen"
 noFileProvided = "Fehler: Dem Viewer wurde keine Datei übergeben"
 
 [viewer.formBar]
-apply = "Apply Changes"
-dismiss = "Dismiss"
-download = "Download PDF"
-hasFieldsDesc = "This PDF contains fillable fields"
-title = "Form Fields"
-unsavedBadge = "Unsaved"
-unsavedDesc = "You have unsaved changes"
+apply = "Änderungen anwenden"
+dismiss = "Verwerfen"
+download = "PDF herunterladen"
+hasFieldsDesc = "Dieses PDF enthält ausfüllbare Felder"
+title = "Formularfelder"
+unsavedBadge = "Ungespeichert"
+unsavedDesc = "Sie haben ungespeicherte Änderungen"
 
 [viewer.layers]
 closeSidebar = "Seitenleiste für Ebenen schließen"
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 4e4abe1ab7..17beb2c557 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -4241,9 +4241,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "All saved"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Failed to extract CSV"
 extractXlsxError = "Failed to extract XLSX"
+filled = "filled"
 flattenAfterFilling = "Flatten after filling"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "req"
 requiredFieldsError = "Please fill in all required fields"
 rescanFields = "Re-scan fields"
diff --git a/frontend/editor/src/core/tools/formFill/FieldInput.tsx b/frontend/editor/src/core/tools/formFill/FieldInput.tsx
index dfe6b7b23c..9662298dc4 100644
--- a/frontend/editor/src/core/tools/formFill/FieldInput.tsx
+++ b/frontend/editor/src/core/tools/formFill/FieldInput.tsx
@@ -15,6 +15,7 @@ import {
   MultiSelect,
   Stack,
 } from "@mantine/core";
+import { useTranslation } from "react-i18next";
 import { useFieldValue } from "@app/tools/formFill/FormFillContext";
 import type { FormField } from "@app/tools/formFill/types";
 
@@ -31,7 +32,7 @@ function FieldInputInner({
     (v: string) => onValueChange(field.name, v),
     [onValueChange, field.name],
   );
-
+  const { t } = useTranslation();
   switch (field.type) {
     case "text":
       if (field.multiline) {
@@ -40,7 +41,10 @@ function FieldInputInner({
             size="xs"
             value={value}
             onChange={(e) => onChange(e.currentTarget.value)}
-            placeholder={field.tooltip || `Enter ${field.label}`}
+            placeholder={
+              field.tooltip ||
+              `${t("formFill.placeholderEnter", "Enter")} ${field.label}`
+            }
             disabled={field.readOnly}
             autosize
             minRows={2}
@@ -54,7 +58,10 @@ function FieldInputInner({
           size="xs"
           value={value}
           onChange={(e) => onChange(e.currentTarget.value)}
-          placeholder={field.tooltip || `Enter ${field.label}`}
+          placeholder={
+            field.tooltip ||
+            `${t("formFill.placeholderEnter", "Enter")} ${field.label}`
+          }
           disabled={field.readOnly}
           styles={{ input: { fontSize: "0.8125rem" } }}
         />
@@ -85,7 +92,7 @@ function FieldInputInner({
           data={comboData}
           value={value || null}
           onChange={(v) => onChange(v || "")}
-          placeholder={`Select ${field.label}`}
+          placeholder={`${t("formFill.placeholderSelect", "Select")} ${field.label}`}
           clearable
           searchable
           disabled={field.readOnly}
@@ -109,7 +116,7 @@ function FieldInputInner({
             data={listData}
             value={selectedValues}
             onChange={(vals) => onChange(vals.join(","))}
-            placeholder={`Select ${field.label}`}
+            placeholder={`${t("formFill.placeholderSelect", "Select")} ${field.label}`}
             searchable
             disabled={field.readOnly}
             aria-label={field.label || field.name}
@@ -124,7 +131,7 @@ function FieldInputInner({
           data={listData}
           value={value || null}
           onChange={(v) => onChange(v || "")}
-          placeholder={`Select ${field.label}`}
+          placeholder={`${t("formFill.placeholderSelect", "Select")} ${field.label}`}
           clearable
           searchable
           disabled={field.readOnly}
diff --git a/frontend/editor/src/core/tools/formFill/FormFill.tsx b/frontend/editor/src/core/tools/formFill/FormFill.tsx
index bf1a8f5fe6..599d586319 100644
--- a/frontend/editor/src/core/tools/formFill/FormFill.tsx
+++ b/frontend/editor/src/core/tools/formFill/FormFill.tsx
@@ -436,7 +436,7 @@ const FormFill = (_props: BaseToolProps) => {
                 >
                   <Loader size={14} />
                   <Text size="xs" c="dimmed">
-                    Analysing form fields...
+                    {t("formFill.analyzingFields", "Analysing form fields...")}
                   </Text>
                 </div>
                 <Skeleton height={48} radius="sm" />
@@ -464,10 +464,12 @@ const FormFill = (_props: BaseToolProps) => {
                 <div>
                   <div className={styles.progressRow}>
                     <span className={styles.progressLabel}>
-                      {filledCount} / {fillableCount} filled
+                      {filledCount} / {fillableCount}{" "}
+                      {t("formFill.filled", "filled")}
                       {requiredCount > 0 && (
                         <span style={{ marginLeft: "0.5rem", opacity: 0.7 }}>
-                          ({filledRequiredCount}/{requiredCount} req.)
+                          ({filledRequiredCount}/{requiredCount}{" "}
+                          {t("formFill.requiredAbbreviation", "req")}.)
                         </span>
                       )}
                     </span>
@@ -588,7 +590,10 @@ const FormFill = (_props: BaseToolProps) => {
                 <div className={styles.emptyState}>
                   <DescriptionIcon className={styles.emptyStateIcon} />
                   <span className={styles.emptyStateText}>
-                    No fillable form fields found in this PDF.
+                    {t(
+                      "formFill.noFields",
+                      "No fillable form fields found in this PDF.",
+                    )}
                   </span>
                 </div>
               )}
@@ -605,7 +610,7 @@ const FormFill = (_props: BaseToolProps) => {
                       style={i === 0 ? { marginTop: 0 } : undefined}
                     >
                       <Text className={styles.pageDividerLabel}>
-                        Page {pageIdx + 1}
+                        {t("page", "Page")} {pageIdx + 1}
                       </Text>
                     </div>
 

From c1275763af98e5ecc3d8fbc8f6fcb8435f638dbe Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Sun, 9 Aug 2026 13:44:39 +0200
Subject: [PATCH 118/122] chore(i18n): localize hardcoded UI strings across
 editor components (#7172)

# Description of Changes

This PR replaces multiple hardcoded English UI strings with translation
keys to improve localization consistency throughout the editor.

### What was changed

- Added new translation entries for:
  - AI chat panel header and empty state
  - Generic dropdown placeholders and empty states
  - Generic input placeholder (`Enter value`)
  - Tool renderer "tool not found" message
  - Signature pen size placeholder
- Updated shared components to use translated fallback placeholders
instead of hardcoded English text:
  - `DropdownListWithFooter`
  - `EditableSecretField`
  - `GroupedFormatDropdown`
  - `LanguagePicker`
  - `PenSizeSelector`
- Localized the AI chat panel:
  - Assistant title
  - Empty state message
  - Input placeholder
- Localized the fallback error message displayed when a tool cannot be
resolved.

### Why the change was made

Several shared UI components and the AI assistant interface contained
hardcoded English strings, preventing proper localization and creating
an inconsistent multilingual experience. Moving these strings into the
translation system ensures they can be translated alongside the rest of
the application and provides reusable defaults for shared components.


---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../editor/public/locales/en-US/translation.toml    | 13 +++++++++++++
 .../components/shared/DropdownListWithFooter.tsx    |  9 +++++----
 .../core/components/shared/EditableSecretField.tsx  |  7 ++++---
 .../src/core/components/tools/ToolRenderer.tsx      |  4 +++-
 .../tools/convert/GroupedFormatDropdown.tsx         |  9 ++++++---
 .../core/components/tools/ocr/LanguagePicker.tsx    |  5 +++--
 .../core/components/tools/sign/PenSizeSelector.tsx  |  7 +++++--
 .../src/prototypes/components/chat/ChatPanel.tsx    |  7 +++----
 8 files changed, 42 insertions(+), 19 deletions(-)

diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 17beb2c557..0fffc04dbc 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -2933,12 +2933,16 @@ text = "To make these permissions unchangeable, use the Add Password tool to set
 [chat.actions]
 copy = "Copy message"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling agent options"
+assistant = "AI Assistant"
 clearChat = "Clear chat"
 
 [chat.input]
@@ -3013,6 +3017,7 @@ continue = "Continue"
 copied = "Copied!"
 copy = "Copy"
 done = "Done"
+enterValue = "Enter value"
 error = "Error"
 expand = "Expand"
 loading = "Loading..."
@@ -3565,7 +3570,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Search..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Edit"
@@ -10135,6 +10144,7 @@ last = "Last page"
 maintainRatio = "Toggle maintain aspect ratio"
 next = "Next page"
 noSavedSigs = "No saved signatures found"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Personal Signatures"
 previous = "Previous page"
 redo = "Redo"
@@ -10829,6 +10839,9 @@ removal = "Removal"
 signing = "Signing"
 verification = "Verification"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "No tools found"
 noTools = "No tools available"
diff --git a/frontend/editor/src/core/components/shared/DropdownListWithFooter.tsx b/frontend/editor/src/core/components/shared/DropdownListWithFooter.tsx
index 8965c18af3..0816ac9a14 100644
--- a/frontend/editor/src/core/components/shared/DropdownListWithFooter.tsx
+++ b/frontend/editor/src/core/components/shared/DropdownListWithFooter.tsx
@@ -56,7 +56,7 @@ const DropdownListWithFooter: React.FC<DropdownListWithFooterProps> = ({
   value,
   onChange,
   items,
-  placeholder = "Select option",
+  placeholder,
   disabled = false,
   label,
   header,
@@ -73,6 +73,7 @@ const DropdownListWithFooter: React.FC<DropdownListWithFooterProps> = ({
   zIndex = Z_INDEX_AUTOMATE_DROPDOWN,
 }) => {
   const { t } = useTranslation();
+  const resolvedPlaceholder = placeholder ?? t("dropdownList.selectOption");
   const [searchTerm, setSearchTerm] = useState("");
 
   const isMultiValue = Array.isArray(value);
@@ -101,7 +102,7 @@ const DropdownListWithFooter: React.FC<DropdownListWithFooterProps> = ({
 
   const getDisplayText = () => {
     if (selectedValues.length === 0) {
-      return placeholder;
+      return resolvedPlaceholder;
     } else if (selectedValues.length === 1) {
       const selectedItem = items.find(
         (item) => item.value === selectedValues[0],
@@ -201,8 +202,8 @@ const DropdownListWithFooter: React.FC<DropdownListWithFooterProps> = ({
                 <Box style={{ padding: "12px", textAlign: "center" }}>
                   <Text size="sm" c="dimmed">
                     {searchable && searchTerm
-                      ? "No results found"
-                      : "No items available"}
+                      ? t("dropdownList.noResults")
+                      : t("dropdownList.noItems")}
                   </Text>
                 </Box>
               ) : (
diff --git a/frontend/editor/src/core/components/shared/EditableSecretField.tsx b/frontend/editor/src/core/components/shared/EditableSecretField.tsx
index 4168996959..a515a46cae 100644
--- a/frontend/editor/src/core/components/shared/EditableSecretField.tsx
+++ b/frontend/editor/src/core/components/shared/EditableSecretField.tsx
@@ -27,11 +27,12 @@ export default function EditableSecretField({
   description,
   value,
   onChange,
-  placeholder = "Enter value",
+  placeholder,
   disabled = false,
   error,
 }: EditableSecretFieldProps) {
   const { t } = useTranslation();
+  const resolvedPlaceholder = placeholder ?? t("common.enterValue");
   const [isEditing, setIsEditing] = useState(false);
   const [tempValue, setTempValue] = useState("");
   const inputRef = useRef<HTMLInputElement>(null);
@@ -113,7 +114,7 @@ export default function EditableSecretField({
           ref={inputRef}
           value={tempValue}
           onChange={(e) => setTempValue(e.currentTarget.value)}
-          placeholder={placeholder}
+          placeholder={resolvedPlaceholder}
           disabled={disabled}
           error={error}
           autoComplete="new-password"
@@ -127,7 +128,7 @@ export default function EditableSecretField({
         <PasswordInput
           value={value}
           onChange={(e) => onChange(e.currentTarget.value)}
-          placeholder={placeholder}
+          placeholder={resolvedPlaceholder}
           disabled={disabled}
           error={error}
           autoComplete="new-password"
diff --git a/frontend/editor/src/core/components/tools/ToolRenderer.tsx b/frontend/editor/src/core/components/tools/ToolRenderer.tsx
index 0231252f7c..1429231ab7 100644
--- a/frontend/editor/src/core/components/tools/ToolRenderer.tsx
+++ b/frontend/editor/src/core/components/tools/ToolRenderer.tsx
@@ -1,4 +1,5 @@
 import { Suspense } from "react";
+import { useTranslation } from "react-i18next";
 import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import { BaseToolProps } from "@app/types/tool";
 import { ToolId } from "@app/types/toolId";
@@ -14,6 +15,7 @@ const ToolRenderer = ({
   onComplete,
   onError,
 }: ToolRendererProps) => {
+  const { t } = useTranslation();
   // Get the tool from context (instead of direct hook call)
   const { toolRegistry } = useToolWorkflow();
   const selectedTool =
@@ -27,7 +29,7 @@ const ToolRenderer = ({
   }
 
   if (!selectedTool || !selectedTool.component) {
-    return <div>Tool not found: {selectedToolKey}</div>;
+    return <div>{t("toolRenderer.notFound", { tool: selectedToolKey })}</div>;
   }
 
   const ToolComponent = selectedTool.component;
diff --git a/frontend/editor/src/core/components/tools/convert/GroupedFormatDropdown.tsx b/frontend/editor/src/core/components/tools/convert/GroupedFormatDropdown.tsx
index 8ab2f10662..c82a9c175a 100644
--- a/frontend/editor/src/core/components/tools/convert/GroupedFormatDropdown.tsx
+++ b/frontend/editor/src/core/components/tools/convert/GroupedFormatDropdown.tsx
@@ -8,6 +8,7 @@ import {
   useMantineTheme,
 } from "@mantine/core";
 import { Button } from "@app/ui/Button";
+import { useTranslation } from "react-i18next";
 import KeyboardArrowDownIcon from "@mui/icons-material/KeyboardArrowDown";
 import CloudOutlinedIcon from "@mui/icons-material/CloudOutlined";
 import { Z_INDEX_AUTOMATE_DROPDOWN } from "@app/styles/zIndex";
@@ -34,7 +35,7 @@ interface GroupedFormatDropdownProps {
 
 const GroupedFormatDropdown = ({
   value,
-  placeholder = "Select an option",
+  placeholder,
   options,
   onChange,
   disabled = false,
@@ -43,6 +44,8 @@ const GroupedFormatDropdown = ({
   withinPortal = true,
   zIndex = Z_INDEX_AUTOMATE_DROPDOWN,
 }: GroupedFormatDropdownProps) => {
+  const { t } = useTranslation();
+  const resolvedPlaceholder = placeholder ?? t("dropdownList.selectOption");
   const [dropdownOpened, setDropdownOpened] = useState(false);
   const theme = useMantineTheme();
 
@@ -60,12 +63,12 @@ const GroupedFormatDropdown = ({
   }, [options]);
 
   const selectedLabel = useMemo(() => {
-    if (!value) return placeholder;
+    if (!value) return resolvedPlaceholder;
     const selected = options.find((opt) => opt.value === value);
     return selected
       ? `${selected.group} (${selected.label})`
       : value.toUpperCase();
-  }, [value, options, placeholder]);
+  }, [value, options, resolvedPlaceholder]);
 
   const handleOptionSelect = (selectedValue: string) => {
     onChange(selectedValue);
diff --git a/frontend/editor/src/core/components/tools/ocr/LanguagePicker.tsx b/frontend/editor/src/core/components/tools/ocr/LanguagePicker.tsx
index 78d51bcc3b..dd05e56990 100644
--- a/frontend/editor/src/core/components/tools/ocr/LanguagePicker.tsx
+++ b/frontend/editor/src/core/components/tools/ocr/LanguagePicker.tsx
@@ -29,13 +29,14 @@ export interface LanguagePickerProps {
 const LanguagePicker: React.FC<LanguagePickerProps> = ({
   value,
   onChange,
-  placeholder = "Select languages",
+  placeholder,
   disabled = false,
   label,
   languagesEndpoint = "/api/v1/ui-data/ocr-pdf",
   autoFillFromBrowserLanguage = true,
 }) => {
   const { t, i18n } = useTranslation();
+  const resolvedPlaceholder = placeholder ?? t("dropdownList.selectLanguages");
   const [availableLanguages, setAvailableLanguages] = useState<DropdownItem[]>(
     [],
   );
@@ -181,7 +182,7 @@ const LanguagePicker: React.FC<LanguagePickerProps> = ({
       value={value}
       onChange={(newValue) => onChange(newValue as string[])}
       items={availableLanguages}
-      placeholder={placeholder}
+      placeholder={resolvedPlaceholder}
       disabled={disabled}
       label={label}
       footer={footer}
diff --git a/frontend/editor/src/core/components/tools/sign/PenSizeSelector.tsx b/frontend/editor/src/core/components/tools/sign/PenSizeSelector.tsx
index 1acb1d6481..03d80012d1 100644
--- a/frontend/editor/src/core/components/tools/sign/PenSizeSelector.tsx
+++ b/frontend/editor/src/core/components/tools/sign/PenSizeSelector.tsx
@@ -1,4 +1,5 @@
 import React from "react";
+import { useTranslation } from "react-i18next";
 import { TextInput, Combobox, useCombobox } from "@mantine/core";
 
 interface PenSizeSelectorProps {
@@ -18,10 +19,12 @@ const PenSizeSelector = ({
   onValueChange,
   onInputChange,
   disabled = false,
-  placeholder = "Type or select pen size (1-200)",
+  placeholder,
   style,
   size,
 }: PenSizeSelectorProps) => {
+  const { t } = useTranslation();
+  const resolvedPlaceholder = placeholder ?? t("sign.penSizePlaceholder");
   const combobox = useCombobox();
 
   const penSizeOptions = ["1", "2", "3", "4", "5", "8", "10", "12", "15", "20"];
@@ -41,7 +44,7 @@ const PenSizeSelector = ({
     >
       <Combobox.Target>
         <TextInput
-          placeholder={placeholder}
+          placeholder={resolvedPlaceholder}
           size={size}
           value={inputValue}
           onChange={(event) => {
diff --git a/frontend/editor/src/prototypes/components/chat/ChatPanel.tsx b/frontend/editor/src/prototypes/components/chat/ChatPanel.tsx
index 356e7473a8..b67b87c951 100644
--- a/frontend/editor/src/prototypes/components/chat/ChatPanel.tsx
+++ b/frontend/editor/src/prototypes/components/chat/ChatPanel.tsx
@@ -281,7 +281,7 @@ export function ChatPanel(_props: ChatPanelProps = {}) {
             {/* Header */}
             <div className="chat-panel-header">
               <Text fw={600} size="sm">
-                AI Assistant
+                {t("chat.header.assistant")}
               </Text>
               <ActionIcon
                 variant="subtle"
@@ -298,8 +298,7 @@ export function ChatPanel(_props: ChatPanelProps = {}) {
               <Stack gap="sm" p="sm">
                 {messages.length === 0 && (
                   <Text size="sm" c="dimmed" ta="center" py="xl">
-                    Ask a question about your documents or get help with PDF
-                    tools.
+                    {t("chat.emptyState.text")}
                   </Text>
                 )}
                 {messages.map((msg) => (
@@ -337,7 +336,7 @@ export function ChatPanel(_props: ChatPanelProps = {}) {
             <div className="chat-panel-input">
               <TextInput
                 ref={inputRef}
-                placeholder="Type a message..."
+                placeholder={t("chat.input.placeholder")}
                 value={input}
                 onChange={(e) => setInput(e.currentTarget.value)}
                 onKeyDown={handleKeyDown}

From faba9f53eae8b7ca09051b12f99ea5e9f1663748 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Sun, 9 Aug 2026 12:45:32 +0100
Subject: [PATCH 119/122] Update all translations (#7380)

# Description of Changes

Update all translations

---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .../public/locales/ar-AR/translation.toml     | 2419 +++++++----
 .../public/locales/az-AZ/translation.toml     | 2419 +++++++----
 .../public/locales/bg-BG/translation.toml     | 2419 +++++++----
 .../public/locales/bo-CN/translation.toml     | 3750 +++++++++++++++--
 .../public/locales/ca-CA/translation.toml     | 2421 +++++++----
 .../public/locales/cs-CZ/translation.toml     | 2419 +++++++----
 .../public/locales/da-DK/translation.toml     | 2419 +++++++----
 .../public/locales/de-DE/translation.toml     | 2377 +++++++----
 .../public/locales/el-GR/translation.toml     | 2419 +++++++----
 .../public/locales/en-GB/translation.toml     | 2352 ++++++++---
 .../public/locales/es-ES/translation.toml     | 2421 +++++++----
 .../public/locales/eu-ES/translation.toml     | 2419 +++++++----
 .../public/locales/fa-IR/translation.toml     | 2419 +++++++----
 .../public/locales/fr-FR/translation.toml     | 2419 +++++++----
 .../public/locales/ga-IE/translation.toml     | 2421 +++++++----
 .../public/locales/hi-IN/translation.toml     | 2419 +++++++----
 .../public/locales/hr-HR/translation.toml     | 2419 +++++++----
 .../public/locales/hu-HU/translation.toml     | 2419 +++++++----
 .../public/locales/id-ID/translation.toml     | 2419 +++++++----
 .../public/locales/it-IT/translation.toml     | 2425 +++++++----
 .../public/locales/ja-JP/translation.toml     | 2421 +++++++----
 .../public/locales/ko-KR/translation.toml     | 2419 +++++++----
 .../public/locales/ml-ML/translation.toml     | 2421 +++++++----
 .../public/locales/nl-NL/translation.toml     | 2419 +++++++----
 .../public/locales/no-NB/translation.toml     | 2419 +++++++----
 .../public/locales/pl-PL/translation.toml     | 2419 +++++++----
 .../public/locales/pt-BR/translation.toml     | 2419 +++++++----
 .../public/locales/pt-PT/translation.toml     | 2421 +++++++----
 .../public/locales/ro-RO/translation.toml     | 2419 +++++++----
 .../public/locales/ru-RU/translation.toml     | 2419 +++++++----
 .../public/locales/sk-SK/translation.toml     | 2419 +++++++----
 .../public/locales/sl-SI/translation.toml     | 2419 +++++++----
 .../locales/sr-LATN-RS/translation.toml       | 2419 +++++++----
 .../public/locales/sv-SE/translation.toml     | 2419 +++++++----
 .../public/locales/th-TH/translation.toml     | 2419 +++++++----
 .../public/locales/tr-TR/translation.toml     | 2419 +++++++----
 .../public/locales/uk-UA/translation.toml     | 2419 +++++++----
 .../public/locales/vi-VN/translation.toml     | 2419 +++++++----
 .../public/locales/zh-BO/translation.toml     | 2419 +++++++----
 .../public/locales/zh-CN/translation.toml     | 2419 +++++++----
 .../public/locales/zh-TW/translation.toml     | 2419 +++++++----
 scripts/translations/auto_translate.py        |   64 +-
 42 files changed, 71936 insertions(+), 28547 deletions(-)

diff --git a/frontend/editor/public/locales/ar-AR/translation.toml b/frontend/editor/public/locales/ar-AR/translation.toml
index 8705955223..b2413fc7d6 100644
--- a/frontend/editor/public/locales/ar-AR/translation.toml
+++ b/frontend/editor/public/locales/ar-AR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "الملفات المحددة"
 font = "الخط"
 fontSizeTooltip = "حجم نص رقم الصفحة بالنقاط. الأرقام الأكبر تنتج نصًا أكبر."
 fontTypeTooltip = "عائلة الخط لأرقام الصفحات. اختر بناءً على نمط مستندك."
-genericSubmit = "إرسال"
 green = "أخضر"
 help = "مساعدة"
-imgPrompt = "اختر صورة"
 incorrectPasswordMessage = "كلمة المرور الحالية غير صحيحة."
 info = "معلومات"
 invalidUndoData = "لا يمكن التراجع: بيانات العملية غير صالحة"
@@ -62,7 +60,6 @@ loginAgreementTitle = "اتفاقية تسجيل الدخول"
 logOut = "تسجيل الخروج"
 marginTooltip = "المسافة بين رقم الصفحة وحافة الصفحة."
 moreOptions = "خيارات إضافية"
-multiPdfPrompt = "اختر ملفات PDF (2+)"
 never = "أبداً"
 no = "لا"
 noFileSelected = "لا يوجد ملف محدد. يرجى رفع واحد."
@@ -80,7 +77,6 @@ pageOrderPrompt = "ترتيب الصفحات (أدخل قائمة بأرقام 
 pages = "صفحات"
 pageSelectionPrompt = "اختيار الصفحات المخصص (أدخل قائمة بأرقام الصفحات مفصولة بفواصل 1،5،6 أو دوال مثل 2n+1):"
 password = "كلمة المرور"
-pdfPrompt = "اختر PDF"
 pin = "تثبيت الملف (إبقاؤه نشطًا بعد تشغيل الأداة)"
 pro = "محترف"
 processingComplete = "ملفك جاهز."
@@ -356,6 +352,7 @@ text = "تتحكم هذه الأذونات فيما يمكن للمستخدمي
 title = "تغيير الأذونات"
 
 [addStamp]
+preview = "معاينة الختم"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "تنزيلات يدوية: انقر على الروابط وضع
 noLanguages = "لم يتم العثور على لغات tessdata في الدليل المُكوَّن."
 permissionNotice = "مسار tessdata غير قابل للكتابة. سيتم فتح التنزيلات في المتصفح؛ يرجى حفظ ملفات .traineddata يدويًا في مجلد tessdata."
 
+[admin.settings.ai.documents]
+description = "كوّن نموذج التضمين وإعدادات الاسترجاع المستخدمة للإجابة عن الأسئلة حول المستندات. تُطبّق على محرك AI عند الحفظ."
+title = "المستندات وRAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "اتركه فارغًا لاستخدام بيانات اعتماد البيئة الخاصة بالمحرك. ينطبق على عمليات النشر ذات المحرك الواحد المستضافة ذاتيًا."
+generic = "مفتاح API للتضمين"
+openai = "مفتاح OpenAI API"
+setPlaceholder = "محفوظ - اتركه فارغًا للاحتفاظ بالمفتاح الحالي"
+voyageai = "مفتاح VoyageAI API"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL لنقطة نهاية التضمينات المتوافقة مع OpenAI / Ollama، مثل http://ollama:11434/v1. يجب أن تشير إلى نقطة نهاية داخلية موثوقة (حساسة لـ SSRF)."
+label = "Base URL للتضمين"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "اسم نموذج التضمين. نص حر؛ الاقتراحات مجرد تلميحات فقط."
+label = "نموذج التضمين"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "المزوّد المستخدم لتحويل نص المستند إلى تضمينات متجهية."
+label = "مزود التضمين"
+
+[admin.settings.ai.documents.maxSearches]
+description = "الحد الأقصى لعدد عمليات بحث الاسترجاع التي قد يشغّلها الوكيل لكل طلب."
+label = "الحد الأقصى لعمليات البحث"
+
+[admin.settings.ai.documents.reindexNote]
+body = "يسري تغيير نموذج التضمين فورًا، لكن يجب إعادة فهرسة المستندات المفهرسة بالنموذج السابق كي يعيد البحث نتائج صحيحة."
+title = "إعادة الفهرسة مطلوبة"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "إذا غيّرت نموذج التضمين، فأعد فهرسة المستندات الحالية لكي يستخدم البحث النموذج الجديد."
+
+[admin.settings.ai.documents.topK]
+description = "عدد المقاطع الأكثر صلة التي يتم استرجاعها في كل بحث."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "وصّل Stirling بمحرك Python AI واختر إمكانات AI التي ستُعرض. تُطبّق التغييرات عند إعادة التشغيل."
+title = "محرك AI"
+
+[admin.settings.ai.general.capabilities]
+description = "شغّل ميزات AI الفردية أو أوقفها. تُخفى الميزات المعطلة في التطبيق."
+title = "الإمكانات"
+
+[admin.settings.ai.general.enabled]
+description = "المفتاح الرئيسي. عند إيقافه، لن تتوفر أي أدوات AI أو وكلاء أو استدعاءات للمحرك."
+label = "تمكين AI"
+
+[admin.settings.ai.general.features.chat]
+description = "مساعد محادثة للعمل مع ملفات PDF."
+label = "مساعد المحادثة"
+
+[admin.settings.ai.general.features.classify]
+description = "تصنيف المستندات تلقائيًا حسب النوع أو المحتوى."
+label = "تصنيف المستندات"
+
+[admin.settings.ai.general.features.createPdf]
+description = "إنشاء PDF جديد (مثلًا من HTML) عبر وكيل AI."
+label = "إنشاء PDF من مطالبة"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "اطرح أسئلة واحصل على إجابات مستندة إلى مستند تم تحميله."
+label = "أسئلة المستند"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "مراجعة المستندات بحثًا عن الأخطاء الرياضية والعددية."
+label = "مدقق الرياضيات"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "إضافة تعليقات مراجعة وتعليقات توضيحية من تأليف AI إلى PDF."
+label = "وكيل تعليقات PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "مهلة عمليات الوكيل الأثقل مثل إنشاء المستندات."
+label = "مهلة العمليات طويلة التشغيل (ثوانٍ)"
+
+[admin.settings.ai.general.note]
+body = "يعمل محرك AI كخدمة منفصلة. السر المشترك الخاص به"
+body2 = "يتم تعيينه عبر متغير بيئة الحاوية. يمكن إدخال مفاتيح API للمزوّد في هذه الصفحات أو توفيرها كمتغيرات بيئة للمحرك؛ تُرسل المفاتيح المدخلة هنا إلى المحرك عند الحفظ."
+title = "حول محرك AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "مهلة ردود الدردشة المتدفقة (رمزًا برمز)."
+label = "مهلة البث (ثوانٍ)"
+
+[admin.settings.ai.general.test]
+button = "اختبار الاتصال"
+failBody = "لم يستجب محرك AI. تحقق من URL، وأن حاوية المحرك قيد التشغيل، وأن AI ممكّن (يلزم إعادة التشغيل بعد التمكين)."
+failTitle = "لا يمكن الوصول إلى محرك AI"
+okBody = "استجاب محرك AI لفحص السلامة."
+okTitle = "يمكن الوصول إلى محرك AI"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "مهلة طلبات AI القياسية إلى المحرك."
+label = "مهلة الطلب (ثوانٍ)"
+
+[admin.settings.ai.general.url]
+description = "URL الداخلي لمحرك Python AI، مثل http://stirling-pdf-engine:5001."
+label = "URL محرك AI"
+
+[admin.settings.ai.limits]
+description = "حدود حماية لمقدار العمل الذي يمكن لطلبات AI تنفيذه وعدد الطلبات التي تعمل بالتزامن. تُطبّق على محرك AI عند الحفظ."
+title = "الحدود والأداء"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "حد حماية: رفض طلبات AI التي يتجاوز نصها المستخرج هذا الطول."
+label = "الحد الأقصى للأحرف لكل طلب"
+
+[admin.settings.ai.limits.maxPages]
+description = "حد حماية: رفض طلبات AI التي تتجاوز هذا العدد من صفحات PDF."
+label = "الحد الأقصى للصفحات لكل طلب"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "الحد الأقصى لاستدعاءات النموذج المتزامنة قيد التنفيذ عبر المحرك بأكمله."
+label = "الحد الأقصى لتزامن النموذج"
+
+[admin.settings.ai.models]
+description = "اختر مزود LLM والنماذج الذكية/السريعة التي يستخدمها محرك AI. تُطبّق على محرك AI عند الحفظ."
+title = "النماذج والمزوّدون"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "مفتاح Anthropic API"
+description = "اتركه فارغًا لاستخدام بيانات اعتماد البيئة الخاصة بالمحرك. ينطبق على عمليات النشر ذات المحرك الواحد المستضافة ذاتيًا."
+generic = "مفتاح API"
+openai = "مفتاح OpenAI API"
+setPlaceholder = "محفوظ - اتركه فارغًا للاحتفاظ بالمفتاح الحالي"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL لنقطة النهاية المتوافقة مع OpenAI / Ollama، مثل http://ollama:11434/v1."
+label = "Base URL للمزوّد"
+warning = "يجب أن يشير Base URL إلى نقطة نهاية داخلية موثوقة. سيجري المحرك طلبات من جانب الخادم إليها، لذا فإن القيمة غير الموثوقة حساسة لـ SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "الحد الأقصى لرموز الإخراج للنموذج السريع."
+label = "الحد الأقصى لرموز النموذج السريع"
+
+[admin.settings.ai.models.fastModel]
+description = "نموذج أرخص وأسرع للمهام الخفيفة. نص حر؛ الاقتراحات مجرد تلميحات فقط."
+label = "النموذج السريع"
+
+[admin.settings.ai.models.provider]
+description = "مزود LLM الذي يتواصل معه المحرك."
+label = "المزوّد"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "الحد الأقصى لرموز الإخراج للنموذج الذكي."
+label = "الحد الأقصى لرموز النموذج الذكي"
+
+[admin.settings.ai.models.smartModel]
+description = "نموذج عالي القدرة للاستدلال المعقد. نص حر؛ الاقتراحات مجرد تلميحات فقط."
+label = "النموذج الذكي"
+
+[admin.settings.ai.saved]
+body = "تُرسل التغييرات إلى محرك AI تلقائيًا."
+bodyNoPush = "تم حفظ الإعدادات. ستُطبّق في المرة القادمة التي يلتقط فيها محرك AI تكوينه."
+title = "تم حفظ إعدادات AI"
+
 [admin.settings.badge]
 clickToUpgrade = "انقر لعرض تفاصيل الخطة"
 
@@ -938,6 +1094,25 @@ label = "إعادة الإنشاء عند بدء التشغيل"
 description = "عدد الأيام التي ستكون فيها الشهادة صالحة"
 label = "صلاحية الشهادة (أيام)"
 
+[admin.settings.folderAccess]
+description = "الأدلة التي يُسمح لمصادر المجلدات ومخرجات المجلدات بالقراءة منها والكتابة إليها. هذا حد أمني: لا يمكن أبدًا توجيه الأتمتة إلى مسار خادم خارج هذه القائمة."
+securityNote = "اترك هذا فارغًا لتعطيل مصادر المجلدات ومخرجاتها بالكامل. دليل تكوين Stirling الخاص يكون دائمًا محظورًا."
+title = "الوصول إلى المجلدات"
+
+[admin.settings.folderAccess.implied]
+description = "هذه الأدلة المُدارة بواسطة Stirling مسموح بها دائمًا ولا يمكن تغييرها هنا."
+serverStorage = "تخزين ملفات الخادم"
+title = "مسموح دائمًا"
+watchedFolder = "مجلد المراقبة لمسار المعالجة"
+
+[admin.settings.folderAccess.roots]
+add = "إضافة"
+empty = "لا توجد مجلدات مسموح بها. مصادر المجلدات ومخرجاتها معطلة حاليًا."
+hint = "أدخل مسارات مطلقة، مثل /data/inbox."
+label = "جذور المجلدات المسموح بها"
+placeholder = "/data/inbox"
+remove = "إزالة جذر المجلد"
+
 [admin.settings.general]
 description = "تهيئة إعدادات التطبيق على مستوى النظام بما في ذلك العلامة التجارية والسلوك الافتراضي."
 system = "النظام"
@@ -1842,6 +2017,15 @@ export = "تصدير"
 accessDenied = "تم رفض الوصول"
 insufficientPermissions = "ليست لديك صلاحية لتنفيذ هذا الإجراء."
 
+[auth.callback]
+completing = "جارٍ إكمال المصادقة"
+invalidToken = "فشل تسجيل الدخول عبر OAuth - رمز غير صالح."
+missingToken = "فشل تسجيل الدخول عبر OAuth - لم يتم استلام رمز."
+oauthFailed = "فشل تسجيل الدخول عبر OAuth. يُرجى المحاولة مرة أخرى."
+pleaseWait = "يُرجى الانتظار بينما ننهي تسجيل دخولك."
+signedOut = "تم تسجيل خروجك. يُرجى تسجيل الدخول مرة أخرى."
+windowMayClose = "يمكنك إغلاق هذه النافذة بمجرد اكتمالها."
+
 [auth.displayName]
 guest = "ضيف"
 user = "مستخدم"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "يؤمّن مستندات PDF بإزالة المحتوى
 description = "هذه الأداة ستعيد تسمية ملفات PDF تلقائيًا بناءً على محتواها. تقوم بتحليل المستند للعثور على العنوان الأنسب من النص."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "تدوير تلقائي"
+tags = "تدوير تلقائي,إصلاح الاتجاه,مقلوب,جانبي,تسوية,توجيه,اكتشاف الاتجاه,تصحيح الدوران,توجيه تلقائي,ممسوح ضوئيًا,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "حد الثقة"
+
+[autoRotate.detectionMode]
+auto = "تلقائي"
+osd = "OCR فقط"
+text = "النص فقط"
+title = "طريقة الاكتشاف"
+
+[autoRotate.error]
+failed = "حدث خطأ أثناء تدوير PDF تلقائيًا."
+
+[autoRotate.inferUndetected]
+title = "تدوير الصفحات منخفضة الثقة للمطابقة"
+
+[autoRotate.report]
+applied = "{{degrees}}° باتجاه عقارب الساعة"
+confidenceValue = "الثقة {{value}}"
+noChange = "لا تغيير"
+pageLabel = "الصفحة {{number}}"
+summary = "تم تدوير {{rotated}} من {{total}} صفحة، وتُركت {{unchanged}} كما هي"
+title = "تقرير الاكتشاف"
+
+[autoRotate.report.method]
+inferred = "مطابق"
+none = "تم التخطي"
+osd = "OCR"
+text = "النص"
+
+[autoRotate.report.note]
+belowThreshold = "أقل من الحد"
+blankPage = "الصفحة فارغة"
+inferredFromDocument = "مثل الصفحات الأخرى"
+noDominantDirection = "اتجاهات نص مختلطة"
+osdFailed = "لم يتم العثور على نص قابل للقراءة"
+osdNoVerdict = "تعذر تحديد الاتجاه الصحيح للأعلى"
+tesseractUnavailable = "OCR غير مثبت"
+tooFewGlyphs = "النص قليل جدًا"
+
+[autoRotate.results]
+title = "نتائج التدوير التلقائي"
+
+[autoRotate.settings]
+title = "الإعدادات"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "مدى التأكد المطلوب للفحص قبل تدوير الصفحة. اخفضه لتدوير صفحات أكثر، وارفعه لترك صفحات أكثر دون تغيير."
+title = "حد الثقة"
+
+[autoRotate.tooltip.description]
+text = "يحدد الاتجاه الصحيح لكل صفحة ويديرها إلى الوضع الصحيح. الصفحات القائمة بالفعل تُترك كما هي."
+
+[autoRotate.tooltip.detectionMode]
+text = "يقرأ الوضع التلقائي النص على الصفحة أولًا، ثم يفحص الصفحة كصورة إذا لم يكن ذلك كافيًا. النص فقط يتخطى فحص الصورة، وهو الأسرع للمستندات التي لم تُمسح ضوئيًا. OCR فقط يعامل كل صفحة كصورة."
+title = "طريقة الاكتشاف"
+
+[autoRotate.tooltip.header]
+title = "تدوير تلقائي"
+
+[autoRotate.tooltip.inferUndetected]
+text = "لا يمكن فحص الصفحات الفارغة أو شبه الفارغة بمفردها. عندما تحتاج كل صفحة يمكن قراءتها إلى نفس التدوير، تُدار هذه الصفحات لمطابقتها."
+title = "تدوير الصفحات منخفضة الثقة للمطابقة"
+
 [autoSizeSplitPDF]
 tags = "pdf,تقسيم,مستند,تنظيم"
 
@@ -2189,33 +2440,6 @@ keywords = "الكلمات: odd, even"
 numbers = "الأرقام/النطاقات: 5, 10-20"
 progressions = "التقدّم: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "أنواع الشهادات"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "تدار بواسطة مسؤولي النظام"
-bullet2 = "مشتركة عبر المستخدمين المخوّلين"
-bullet3 = "تمثل هوية الشركة وليس الفرد"
-bullet4 = "أفضل للاستخدام: المستندات الرسمية، تواقيع الفريق"
-description = "شهادة مشتركة توفرها مؤسستك. تُستخدم للتفويض بالتوقيع على مستوى الشركة."
-title = "شهادة المؤسسة"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "تُنشأ تلقائيًا عند أول استخدام"
-bullet2 = "مرتبطة بحساب المستخدم الخاص بك"
-bullet3 = "لا يمكن مشاركتها مع مستخدمين آخرين"
-bullet4 = "أفضل للاستخدام: المستندات الشخصية، المساءلة الفردية"
-description = "شهادة مُنشأة تلقائيًا فريدة لحساب المستخدم الخاص بك. مناسبة للتواقيع الفردية."
-title = "شهادة شخصية"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "يتطلب ملف P12/PFX وكلمة مرور"
-bullet2 = "يمكن إصدارها من جهات إصدار شهادات خارجية"
-bullet3 = "مستوى ثقة أعلى للمستندات القانونية"
-bullet4 = "أفضل للاستخدام: العقود الملزمة قانونيًا، التحقق الخارجي"
-description = "استخدم ملف شهادة PKCS#12 الخاص بك. يوفّر تحكمًا كاملاً بخصائص الشهادة."
-title = "رفع ملف P12 مخصص"
-
 [certSign]
 awaitingSignatures = "بانتظار التواقيع"
 chooseCertificate = "اختر ملف الشهادة"
@@ -2542,34 +2766,6 @@ server = "الخادم"
 stepTitle = "مصدر الشهادة"
 upload = "رفع"
 
-[certSign.tooltip.header]
-title = "حول إدارة التواقيع"
-
-[certSign.tooltip.overview]
-bullet1 = "تحقق من التواقيع القائمة وصحتها"
-bullet2 = "اعرض معلومات الموقّعين والشهادات بالتفصيل"
-bullet3 = "أضف تواقيع رقمية جديدة لتأمين مستنداتك"
-bullet4 = "يدعم ملفات متعددة مع تنقّل سهل"
-text = "تتيح لك هذه الأداة التحقق مما إذا كانت ملفات PDF موقّعة رقميًا وإضافة تواقيع رقمية جديدة. التواقيع الرقمية تثبت من أنشأ أو وافق على المستند وتكشف ما إذا تم تغييره بعد التوقيع."
-title = "ما الذي تستطيع هذه الأداة فعله؟"
-
-[certSign.tooltip.signing]
-bullet1 = "يدعم PEM وPKCS12 وJKS وشهادات الخادم"
-bullet2 = "خيار إظهار/إخفاء التوقيع على PDF"
-bullet3 = "إضافة السبب والموقع واسم الموقّع"
-bullet4 = "اختر الصفحة لوضع التواقيع المرئية"
-bullet5 = "استخدم شهادة الخادم لخيار بسيط 'وقّع مع Stirling-PDF'"
-text = "للتوقيع على PDF تحتاج إلى شهادة رقمية (مثل PEM أو PKCS12 أو JKS). يمكنك جعل التوقيع مرئيًا على المستند أو إبقاءه غير مرئي للأمان فقط."
-title = "إضافة التواقيع"
-
-[certSign.tooltip.validation]
-bullet1 = "يعرض إن كانت التواقيع صالحة أم لا"
-bullet2 = "يعرض معلومات الموقّع وتاريخ التوقيع"
-bullet3 = "يتحقق مما إذا تم تعديل المستند بعد التوقيع"
-bullet4 = "يمكن استخدام شهادات مخصّصة للتحقق"
-text = "عند التحقق من التواقيع، تُظهر الأداة صلاحيتها، ومن وقّع ومتى، وما إذا تم تعديل المستند بعد التوقيع."
-title = "التحقق من التواقيع"
-
 [changeCreds]
 changeUsername = "حدّث اسم المستخدم. سيتم تسجيل خروجك بعد التحديث."
 credsUpdated = "تم تحديث الحساب"
@@ -2824,6 +3020,7 @@ next = "التالي"
 preview = "معاينة"
 previous = "السابق"
 refresh = "تحديث"
+remaining = "المتبقي"
 retry = "إعادة المحاولة"
 save = "حفظ"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "مراقبة متقدمة"
-allInOneWorkspace = "مساحة عمل PDF شاملة (عارض، أدوات ووكيل)"
-apiSandbox = "بيئة Sandbox لـ API"
-dedicatedSupportSlas = "دعم مخصص واتفاقيات مستوى الخدمة (SLA)"
-fasterThroughput = "إنتاجية أسرع 10 مرات"
-fullyPrivateFiles = "ملفات خاصة بالكامل"
-largeFileProcessing = "معالجة الملفات الكبيرة"
-orgWideAccess = "ضوابط وصول على مستوى المؤسسة"
-premiumAiModels = "نماذج ذكاء اصطناعي متميزة"
-prioritySupport = "دعم أولوية"
-privateDocCloud = "سحابة مستندات خاصة"
-ragFineTuning = "RAG + ضبط دقيق"
-secureApiAccess = "وصول API آمن"
-standardThroughput = "إنتاجية قياسية"
-unlimitedApiAccess = "وصول API غير محدود"
-unlimitedSeats = "مقاعد غير محدودة"
-
 [crop]
 autoCrop = "اقتصاص تلقائي للمساحات البيضاء"
 noFileSelected = "حدّد ملف PDF لبدء القص"
@@ -3346,6 +3525,7 @@ message = "فشل تعيين معالج PDF الافتراضي"
 title = "خطأ"
 
 [defaultApp.prompt]
+dontRemind = "لا تذكرني مرة أخرى"
 message = "اجعل Stirling PDF التطبيق الافتراضي لفتح ملفات PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "تخصيص المجموعات"
 dropHint = "افتح ملفات للبدء"
 dropToAdd = "Drop files to add"
 expand = "توسيع الشريط الجانبي"
-files = "الملفات"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive غير مُكوَّن"
 leaveMyFiles = "مغادرة ملفاتي"
+library = "مكتبة PDF"
 myFiles = "ملفاتي"
 noFiles = "لا توجد ملفات بعد"
 openFileManager = "فتح مدير الملفات"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "إضافة"
-addLabel = "إضافة تسمية…"
-categoryIconAria = "اختر أيقونة لـ {{name}}"
-createCategory = "إنشاء فئة"
-delete = "حذف الفئة"
 done = "تم"
-hide = "إخفاء الفئة"
-newCategory = "اسم فئة جديد…"
-removeLabel = "إزالة {{name}}"
-rename = "إعادة تسمية"
 reset = "إعادة التعيين إلى الافتراضيات"
-search = "البحث في التسميات…"
-show = "إظهار الفئة"
 subtitle = "جمّع ملفاتك ضمن فئات رئيسية. أضف تسميات موجودة أو جديدة إلى فئة، أو أعد تسميتها، أو أنشئ فئتك الخاصة. تظهر الملفات غير الموجودة ضمن أي من فئاتك تحت “أخرى”."
 title = "فئات الشريط الجانبي"
 
@@ -3808,6 +3977,7 @@ refresh = "التحديث من الخادم"
 remove = "حذف"
 removeVersion = "إزالة هذا الإصدار"
 rename = "إعادة التسمية"
+renamed = "تمت إعادة التسمية"
 renameFolder = "إعادة تسمية المجلد"
 resizeFolderTree = "تغيير حجم شجرة المجلدات (مفاتيح الأسهم، مع Shift لخطوات أكبر؛ انقر مزدوجاً للملاءمة التلقائية)"
 save = "حفظ"
@@ -3910,9 +4080,7 @@ count = "ملفات"
 folder = "مجلد"
 labels = "التسميات"
 modified = "معدَّل"
-name = "الاسم"
 size = "الحجم"
-toolHistoryAtVersion = "سلسلة الأدوات التراكمية"
 totalSize = "الحجم الإجمالي"
 type = "النوع"
 versionHistory = "رحلة الإصدارات"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "تم حفظ الكل"
+extractCsvError = "فشل استخراج CSV"
+extractXlsxError = "فشل استخراج XLSX"
 flattenAfterFilling = "تسطيح بعد التعبئة"
+requiredAbbreviation = "مطلوب"
+requiredFieldsError = "يُرجى ملء جميع الحقول المطلوبة"
 rescanFields = "إعادة فحص الحقول"
 rescanFormFields = "إعادة فحص حقول النموذج"
 save = "حفظ"
+saveShortcut = "Ctrl+S للحفظ"
+unsavedChanges = "تغييرات غير محفوظة"
 
 [formFill.sidebar]
 close = "إغلاق الشريط الجانبي"
@@ -4309,6 +4484,11 @@ desc = "إعادة تسمية ملف PDF تلقائيًا استنادًا إل
 tags = "كشف تلقائي،مستند للعناوين،تنظيم،إعادة وسم"
 title = "إعادة تسمية PDF تلقائيًا"
 
+[home.autoRotate]
+desc = "اكتشف اتجاه كل صفحة ودوّرها تلقائيًا لتكون مستقيمة."
+tags = "تدوير تلقائي,إصلاح الاتجاه,مقلوب,جانبي,تسوية,توجيه,اكتشاف الاتجاه,تصحيح الدوران,توجيه تلقائي,ممسوح ضوئيًا,OSD"
+title = "تدوير تلقائي"
+
 [home.autoSizeSplitPDF]
 tags = "تلقائي،تقسيم،حجم"
 title = "تقسيم تلقائي بالحجم/العدد"
@@ -4608,13 +4788,13 @@ hint = "ارفع ملف PNG أو JPG أو SVG أو صورة أخرى لوضعه
 label = "رفع صورة"
 placeholder = "اختر ملف صورة"
 
-[imageToPdf]
-tags = "تحويل,صورة,jpg,صورة,صورة فوتوغرافية"
-
 [imageToPDF]
 header = "صورة إلى PDF"
 title = "صورة إلى PDF"
 
+[imageToPdf]
+tags = "تحويل,صورة,jpg,صورة,صورة فوتوغرافية"
+
 [infoBanner]
 dismiss = "تجاهل"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "لقد تمت دعوتك!"
 
 [landing]
 addFiles = "إضافة ملفات"
-heroSubtitle = "اسحب وافلت أو أضف ملف PDF موجودا للبدء."
 mobileUpload = "رفع من الهاتف المحمول"
 openFromComputer = "فتح من الكمبيوتر"
 uploadFromComputer = "الرفع من الكمبيوتر"
-workbenchEmptyStateHero = "أفلت ملف PDF في أي مكان"
 
 [language]
 direction = "rtl"
@@ -4696,6 +4874,7 @@ login = "تسجيل الدخول"
 magicLinkSent = "تم إرسال الرابط السحري إلى {{email}}! تفقد بريدك واضغط الرابط لتسجيل الدخول."
 mfaCode = "رمز المصادقة"
 mfaRequired = "رمز المصادقة ذات العاملين مطلوب"
+noAccount = "ليس لديك حساب؟"
 or = "أو"
 password = "كلمة المرور"
 passwordChangedSuccess = "تم تغيير كلمة المرور بنجاح! يرجى تسجيل الدخول بكلمة المرور الجديدة."
@@ -4715,26 +4894,10 @@ signInWith = "تسجيل الدخول بواسطة"
 title = "تسجيل الدخول"
 unexpectedError = "خطأ غير متوقع: {{message}}"
 updatePassword = "تحديث كلمة المرور"
-useEmailInstead = "تسجيل الدخول بالبريد الإلكتروني"
 useMagicLink = "استخدم الرابط السحري بدلًا من ذلك"
 username = "اسم المستخدم"
 youAreLoggedIn = "لقد سجّلت الدخول!"
 
-[login.slides.edit]
-alt = "تحرير ملفات PDF"
-subtitle = "مع أكثر من 12 أداة تساعدك على تنقيح ملفات PDF وتوقيعها وقراءتها ومعالجتها، ستجد بالتأكيد ما تبحث عنه."
-title = "حرّر ملفات PDF لعرض/تأمين المعلومات التي تريدها"
-
-[login.slides.overview]
-alt = "نظرة عامة على Stirling PDF"
-subtitle = "حزمة سحابية تضع الخصوصية أولاً لملفات PDF تتيح لك تحويل المستندات وتوقيعها وتنقيحها وإدارتها، إلى جانب أكثر من 50 أداة قوية أخرى."
-title = "كل ما تحتاجه لـ PDF في مكان واحد."
-
-[login.slides.secure]
-alt = "حماية ملفات PDF"
-subtitle = "أضِف كلمات مرور، ونقّح المحتوى، وأدر الشهادات بسهولة."
-title = "احمِ المعلومات الحساسة في ملفات PDF الخاصة بك"
-
 [margin]
 large = "كبير"
 medium = "متوسط"
@@ -4976,6 +5139,7 @@ pinButton = "يمكنك استخدام زر <strong>التثبيت</strong> إذ
 results = "بعد انتهاء تشغيل الأداة، ستعرض خطوة <strong>المراجعة</strong> معاينة للنتائج في هذا اللوح، وتتيح لك التراجع عن العملية أو تنزيل الملف. "
 runButton = "بعد تهيئة الأداة، يتيح لك هذا الزر تشغيلها على جميع ملفات PDF المحددة."
 selectCropTool = "لنختر أداة <strong>القص</strong> لشرح كيفية استخدام إحدى الأدوات."
+stepOf = "الخطوة {{current}} من {{total}}"
 toolInterface = "هذه هي واجهة أداة <strong>القص</strong>. كما ترى، لا يوجد الكثير هنا لأننا لم نُضِف بعد أي ملفات PDF للعمل عليها."
 workbench = "هذه هي <strong>منضدة العمل</strong> — المنطقة الرئيسية لعرض ملفات PDF وتحريرها."
 wrapUp = "أنت جاهز! تعرّفت على المناطق الرئيسية في التطبيق وكيفية استخدامها. انقر زر <strong>المساعدة</strong> متى شئت لعرض هذه الجولة مرة أخرى."
@@ -4988,6 +5152,26 @@ showMeAround = "أرني الجولة"
 skipForNow = "تخطي الآن"
 skipTheTour = "تخطي الجولة"
 
+[onboarding.checklist]
+dismiss = "تجاهل"
+title = "إعداد Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "شغّل Stirling أصليًا على جهازك"
+title = "تنزيل Stirling لسطح المكتب"
+
+[onboarding.checklist.inviteTeam]
+description = "تعاون مع فريقك"
+title = "دعوة أعضاء الفريق"
+
+[onboarding.checklist.shareAnalytics]
+description = "ساعد في تحسين Stirling"
+title = "مشاركة بيانات استخدام مجهولة"
+
+[onboarding.checklist.takeTour]
+description = "اطلع على كيفية عمل Stirling في جولة سريعة"
+title = "ابدأ الجولة"
+
 [onboarding.desktopInstall]
 body = "يعمل Stirling بشكل أفضل كتطبيق سطح مكتب. يمكنك استخدامه دون اتصال، والوصول إلى المستندات بسرعة أكبر، وإجراء التعديلات محلياً على جهازك."
 selectOs = "حدد نظام التشغيل"
@@ -4996,7 +5180,21 @@ titleWithOs = "تنزيل لـ {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "رمز المصادقة"
+description = "أمّن حسابك بربط تطبيق مصادقة. امسح QR code أو أدخل مفتاح الإعداد، ثم أكّد الرمز المكوّن من 6 أرقام للإنهاء."
+enable = "تمكين MFA"
+enableError = "تعذر تمكين المصادقة الثنائية. تحقق من الرمز وحاول مرة أخرى."
+enterCode = "أدخل الرمز المكوّن من 6 أرقام من تطبيقك."
+enterCodeError = "أدخل رمز المصادقة للمتابعة."
+logout = "تسجيل الخروج"
+openAuthenticator = "افتح Google Authenticator أو Authy أو 1Password."
 qrCodeLoading = "جارٍ إنشاء رمز QR…"
+regenerateQrCode = "إعادة إنشاء QR code"
+scanQrCode = "امسح QR code أو أدخل مفتاح الإعداد أدناه."
+setupError = "تعذر بدء إعداد المصادقة الثنائية. يُرجى المحاولة مرة أخرى."
+setupKey = "مفتاح الإعداد (إدخال يدوي)"
+stepByStep = "خطوة بخطوة"
+success = "تم تمكين MFA. يمكنك المتابعة الآن."
+title = "إعداد المصادقة متعددة العوامل"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "بمجرد تمكين وضع تسجيل الدخول، يمكنك إدارة المستخدمين، وضبط الإعدادات، ومراقبة حالة الخادم. أول <strong>{{freeTierLimit}}</strong> شخصاً على خادمك يستخدمون Stirling مجاناً."
@@ -5005,6 +5203,11 @@ adminTitle = "نظرة عامة للمشرف"
 userBody = "ادعُ زملاءك، وخصص الأدوار، واحفظ مستنداتك منظمة في مساحة عمل آمنة واحدة. فعّل وضع تسجيل الدخول عندما تكون مستعداً للتوسع بعد الاستخدام الفردي."
 userTitle = "نظرة عامة على الخطة"
 
+[onboarding.processorIntro]
+body = "يشغّل Stirling الآن <strong>السياسات</strong> — قواعد آلية تصنف كل مستند وتؤمّنه وتعالجه عند وصوله. قم بإعدادها وراقب عمليات التشغيل في <strong>المعالج</strong>."
+cta = "استكشاف المعالج"
+title = "استكشف معالج Stirling"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "سنة مدفوعة مسبقًا"
+
+[payg.prepaid.banner]
+exhausted = "تم استخدام سعتك المدفوعة مسبقًا؛ استؤنفت الفوترة المقاسة. اشحن للحفاظ على الخصم."
+expiring_one = "تنتهي سنتك المدفوعة مسبقًا خلال {{count}} يوم. تنتهي السعة غير المستخدمة — اشحن لبدء سنة جديدة."
+expiring_other = "تنتهي سنتك المدفوعة مسبقًا خلال {{count}} أيام. تنتهي السعة غير المستخدمة — اشحن لبدء سنة جديدة."
+low = "تبقى لديك {{pct}}% من سعتك المدفوعة مسبقًا. اشحن في أي وقت للحفاظ على استمرار المعالجة دون انقطاع."
+
+[payg.prepaid.card]
+subtitle = "تُستخدم قبل الفوترة المقاسة وخارج حد الإنفاق الخاص بك."
+title = "السعة المدفوعة مسبقًا"
+
+[payg.prepaid.meter]
+capSuffix = "من {{total}} رصيد مدفوع مسبقًا"
+expires = "تنتهي في {{date}}"
+
+[payg.prepaid.state]
+exhausted = "مستخدمة بالكامل"
+healthy = "متبقٍ الكثير"
+low = "توشك على النفاد"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "الصق مفتاح الترخيص من بريدك الإلك
 success = "تم تفعيل الترخيص!"
 successMessage = "تم تفعيل ترخيصك بنجاح. يمكنك الآن إغلاق هذه النافذة."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "تم الفرض"
-enforcing = "جارٍ الفرض..."
-failed = "فشل الفرض"
 outputsUnavailable = "لم تعد مخرجات السياسة متاحة للتنزيل."
 partialOutputsUnavailable = "لم تعد بعض مخرجات السياسة متاحة للتنزيل."
-retrying = "مشغول، جارٍ إعادة المحاولة..."
 runNotFound = "تعذّر العثور على تشغيل الفرض."
-step = "الخطوة {{current}}/{{total}}"
 timedOut = "انتهت مهلة الفرض قبل أن يكتمل التشغيل."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "إغلاق"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "جارٍ تطبيق {{names}}"
 applyingProgress = "جارٍ تطبيق {{names}} ({{done}} من {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} من أصل {{total}} ملف، تعذّرت معال
 failureTitle = "تم التصدير دون فرض كامل"
 printPolicyAppliedBody = "تم تحديث هذا PDF ليتوافق مع سياسة. راجِع التغييرات، ثم اطبع مجددًا."
 printPolicyAppliedTitle = "تم تطبيق السياسة قبل الطباعة"
-queued = "+{{count}} في قائمة الانتظار"
 successTitle = "تم تطبيق {{names}}"
 summaryMore = "{{first}}، {{second}} و{{more}} أخرى"
 summaryTwo = "{{first}} و{{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "فرض قبل التحويل"
-default = "فرض"
-export = "فرض قبل التصدير"
-input = "فرض عند الاستيراد"
-print = "فرض قبل الطباعة"
-
-[policies.field]
-accessLog = "سجل الوصول"
-archiveAfter = "الأرشفة بعد"
-auditTrail = "مسار التدقيق"
-belowThreshold = "أقل من الحد"
-destination = "الوجهة"
-frameworks = "الأطر"
-immutableHold = "احتجاز غير قابل للتغيير"
-keepFor = "الاحتفاظ لمدة"
-minConfidence = "الحد الأدنى للثقة"
-notify = "إشعار عند التوجيه"
-onViolation = "عند عدم الامتثال"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "إضافة"
-addPlaceholder = "إضافة تسمية…"
-customNote = "مخصص لفريقك."
-defaultNote = "يتم استخدام الإعداد الافتراضي المدمج، والمشترك مع فريقك."
-duplicate = "\"{{name}}\" موجود بالفعل."
-edit = "تعديل التسميات"
-empty = "لا توجد تسميات بعد."
-export = "تصدير JSON"
-iconAria = "اختر أيقونة لـ {{name}}"
-import = "استيراد JSON"
-importError = "تعذر استيراد ذلك الملف."
-managedNote = "تتم إدارة تسميات الفريق بواسطة قائد فريقك."
-modalSubtitle = "مشتركة مع فريقك بالكامل. يختار المصنّف التسميات المناسبة لكل مستند."
-modalTitle = "تسميات التصنيف"
-pickIcon = "استخدام أيقونة {{label}}"
-removeAria = "إزالة {{name}}"
-resetToDefault = "إعادة التعيين إلى الافتراضي"
-saveForTeam = "حفظ للفريق"
-saving = "جارٍ الحفظ…"
-sectionLabel = "تسميات التصنيف"
-startFromScratch = "البدء من الصفر"
-teamCount = "تسميات الفريق"
-tooLong = "يمكن أن تتكون التسميات من {{max}} حرفًا كحد أقصى."
-ungrouped = "غير مجمعة"
-view = "عرض التسميات"
+categoryCount = "فئات"
+hideCategory = "إخفاء الفئة"
+labelCount = "تسميات"
+sharedNote = "هذه التسميات مدمجة ومشتركة عبر فريقك بأكمله."
+showCategory = "إظهار الفئة"
 
 [policies.pii]
 account = "أرقام الحسابات (موسومة)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "أرقام التوجيه الأمريكية (ABA)"
 ssn = "أرقام الضمان الاجتماعي"
 
-[policies.settings]
-noneExport = "لا توجد سياسات تعمل حاليًا عند التصدير."
-noneUpload = "لا توجد سياسات تعمل حاليًا عند الرفع."
-onExport = "عند التصدير"
-onUpload = "عند الرفع"
-reorderHandle = "اسحب لإعادة الترتيب"
-runOrderDesc = "عند تشغيل أكثر من سياسة على نفس المشغّل، يتم تشغيلها بهذا الترتيب — كل منها على مخرجات السياسة السابقة. اسحب لإعادة الترتيب."
-title = "إعدادات السياسة"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "خيارات السياسة"
-policySettings = "إعدادات السياسة"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "إعادة محاولة السياسات الفاشلة ({{count}})"
-rowProgress = "تمت معالجة {{completed}} من {{total}} ملفات"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "ما هي السياسة؟"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "يعثر تلقائيًا ويحجب التفاصيل الحساسة — مثل أرقام الضمان الاجتماعي وأرقام البطاقات — حتى لا يمكن قراءتها في المستند."
-sanitize = "يزيل JavaScript المخفي من الملف، بحيث لا يعمل أي شيء تلقائيًا عند فتحه."
-watermark = "يضع علامة مرئية (مثل \"سري\") عبر كل صفحة."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "إغلاق"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "جارٍ فرض {{name}}..."
 badgeRan = "تم تشغيل سياسة {{name}} على هذا الملف"
+badgeRunning = "{{name}} قيد التشغيل..."
 blockingAction = "تم حظر {{action}} أثناء فرض السياسة، يرجى الانتظار..."
 dismiss = "إغلاق التراكب"
 enforcingTitle = "جارٍ فرض السياسة..."
@@ -6151,6 +6211,7 @@ viewAnyway = "عرض الملف (لا تزال السياسة قيد الفرض)
 [policyOption]
 autoRedactPhi = "تنقيح PHI تلقائيًا"
 blockExport = "حظر التصدير"
+ccpa = "CCPA"
 contracts = "العقود"
 documents = "المستندات"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "خطة Editor"
 subscribed = "خطة Processor"
 unlinked = "غير مرتبط"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "التمهيد من مستند"
-sectionsAriaLabel = "أقسام منشئ الوكيل"
-selectorAriaLabel = "الوكلاء"
-subtitle = "صمّم واختبر وانشر وكلاء AI الذين يصنفون مستنداتك ويستخرجون منها ويوجهونها. عرّف السيناريوهات، وقيّد وصول الأدوات، وشغّل مجموعة ذهبية، وانشر إصدارًا."
-title = "منشئ الوكلاء"
-
-[portal.agentBuilder.bootstrap]
-cancel = "إلغاء"
-dropzoneText = "اختر مستندًا نموذجيًا (PDF أو صورة)"
-lead = "أفلت مستندًا نموذجيًا وسنقترح سيناريوهات ومخطط استخراج يمكنك تنقيحه. لا يتم نشر أي شيء حتى تراجعه."
-submit = "تمهيد الوكيل"
-subtitle = "ابدأ وكيلًا جديدًا من ملف تمثيلي واحد"
-title = "التمهيد من مستند"
-
-[portal.agentBuilder.empty]
-description = "مهّد وكيلًا من مستند نموذجي لبدء سيناريوهاته ومخطط الاستخراج، ثم نقّحه وانشره."
-title = "لا توجد وكلاء بعد"
-
-[portal.agentBuilder.evals]
-casesPassing = "الحالات الناجحة"
-columnCase = "حالة التقييم"
-columnLatency = "زمن الاستجابة"
-columnResult = "النتيجة"
-fail = "فشل"
-goldenSetPassRate = "معدل نجاح المجموعة الذهبية"
-latencyMs = "{{ms}} ms"
-notRun = "لم يتم التشغيل"
-pass = "نجاح"
-passRate = "معدل النجاح"
-runEvals = "تشغيل التقييمات"
-
-[portal.agentBuilder.evals.empty]
-description = "تحوّل التقييمات سيناريوهاتك إلى مجموعة ذهبية قابلة للتكرار. قم بالترقية لالتقاط معدل النجاح عبر الوقت والتحكم في النشر بناءً عليه."
-title = "لا توجد مجموعة ذهبية بعد"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "عبر المجموعات الذهبية"
-activeAgents = "الوكلاء النشطون"
-avgPassRate = "متوسط معدل نجاح التقييم"
-fleetWide = "على مستوى الأسطول"
-latestPublished = "آخر منشور"
-scenarios = "السيناريوهات"
-testCases = "حالات اختبار"
-totalDescription_one = "{{count}} إجمالًا"
-totalDescription_other = "{{count}} إجمالًا"
-
-[portal.agentBuilder.scenarios]
-add = "إضافة"
-addScenario = "إضافة سيناريو"
-enable = "تمكين"
-expectationLabel = "السلوك المتوقع"
-expectationPlaceholder = "ما يجب أن يفعله الوكيل"
-inEval = "في التقييم"
-mute = "كتم"
-muted = "مكتوم"
-nameLabel = "الاسم"
-namePlaceholder = "مثال: تصعيد الامتثال"
-
-[portal.agentBuilder.tabs]
-evals = "التقييمات"
-scenarios = "السيناريوهات"
-tools = "الأدوات"
-versions = "الإصدارات"
-
-[portal.agentBuilder.tools]
-broadAccess = "وصول واسع"
-deniedHint = "الأدوات المحددة محظورة. كل ما عدا ذلك يبقى قابلًا للاستدعاء."
-deniedTools = "الأدوات المرفوضة"
-governanceGate = "حوكمة الأدوات متاحة في خطة Enterprise."
-restricted = "مقيّد"
-restrictedAccess = "وصول مقيّد للأدوات"
-restrictedDescription = "اسمح بكل أداة باستثناء الأدوات التي ترفضها أدناه."
-
-[portal.agentBuilder.versions]
-current = "الحالي"
-historyGate = "سجل الإصدارات الكامل والرجوع متاحان في خطة Enterprise."
-publish = "نشر"
-rollBack = "رجوع"
-
 [portal.assistant]
 close = "إغلاق المساعد"
 error = "تعذر الوصول إلى المساعد."
@@ -6365,9 +6346,21 @@ typing = "يكتب"
 loading = "جارٍ التحميل"
 redirectingToEditor = "جارٍ إعادة التوجيه إلى المحرر..."
 
+[portal.billing.activation]
+maybeLater = "ربما لاحقًا"
+title = "تشغيل المعالج"
+
+[portal.billing.activation.payg]
+sub = "عيّن حدًا شهريًا. ادفع مقابل ما تشغّله."
+title = "الدفع حسب الاستخدام"
+
+[portal.billing.activation.prepay]
+badge = "شهران مجانًا"
+sub = "فاتورة واحدة، ببطاقة أو تحويل بنكي."
+title = "ادفع سنة مقدمًا"
+
 [portal.billing.checkout]
 noClientSecret = "أعادت Edge function قيمة client_secret غير موجودة."
-subtitle = "أضف بطاقة للمتابعة بعد منحة خطة Editor المجانية. يتولى Stripe الباقي."
 title = "تشغيل خطة Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "تم الدفع بنجاح، لكن التفعيل يستغرق وقتً
 close = "إغلاق"
 title = "كدنا ننتهي"
 
+[portal.billing.checkout.cap]
+amountAria = "حد الإنفاق الشهري"
+back = "رجوع"
+continue = "المتابعة إلى الدفع"
+error = "تعذر تعيين حد الإنفاق الخاص بك"
+finePrint = "تُصدر الفواتير شهريًا. يمكنك الإلغاء في أي وقت."
+noLimit = "بلا حد"
+note = "لن تُفرض عليك رسوم تتجاوز حدك أبدًا. تتوقف المعالجة مؤقتًا فقط."
+perMonth = "/ شهر"
+title = "عيّن حد الإنفاق الخاص بك"
+
+[portal.billing.checkout.card]
+fields = "رقم البطاقة · MM / YY · CVC · ZIP"
+label = "تفاصيل البطاقة"
+note = "تجمع Stripe تفاصيل البطاقة. لا يخزن Stirling أبدًا PAN أو CVC."
+
 [portal.billing.checkout.error]
 title = "تعذر بدء الدفع"
 
@@ -6383,10 +6392,9 @@ body = "تمت عملية الدفع. نحن نشغّل المعالجة الم
 hint = "يرجى إبقاء هذه النافذة مفتوحة."
 title = "جارٍ تفعيل خطة Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "في بيئة البوابة لتمكين الدفع داخل التطبيق."
-bodyBefore = "عيّن"
-title = "لم يتم تكوين Stripe"
+[portal.billing.checkout.pay]
+limit = "حد الإنفاق الشهري {{amount}}/شهر. تتوقف المعالجة مؤقتًا عند الحد."
+limitNoCap = "لا يوجد حد للإنفاق. لن تتوقف المعالجة مؤقتًا. تُصدر الفواتير شهريًا."
 
 [portal.billing.enterpriseUpsell]
 cta = "أنشئ عرض سعر Enterprise الخاص بك"
@@ -6409,10 +6417,12 @@ currentPlan = "الخطة الحالية"
 freeForever = "مجاني إلى الأبد"
 noTeamResolved = "لم يتم تحديد فريق في محفظتك بعد — حدّث وحاول مرة أخرى."
 ownerOnly = "يمكن لمالك الفريق فقط تشغيل خطة Processor."
+payInvoice = "ادفع الفاتورة للإكمال"
 planName = "Editor"
 ssoIncluded = "SSO مضمن"
 switchOnProcessor = "تشغيل Processor ←"
 unlimitedUsers = "مستخدمون غير محدودين"
+viewQuote = "عرض عرض السعر"
 
 [portal.billing.invoices]
 columnAmount = "المبلغ"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "طلبات API مباشرة"
 segmentApiLabel = "API"
 segmentAutomationDesc = "الأتمتة ومسارات المعالجة"
 segmentAutomationLabel = "الأتمتة"
+sizeMultiplier = "استخدم {{formatted}} من ملفات PDF مضاعف حجم"
+summary = "{{unique}} فريد · {{units}} وحدة قياس · متوسط {{avg}} لكل PDF"
+summaryNoRate = "{{unique}} فريد · {{units}} وحدة قياس"
 unit = "ملفات PDF مقاسة"
+unitsPending_one = "{{units}} وحدة قياس بانتظار المزامنة من المثيلات المرتبطة"
+unitsPending_other = "{{units}} وحدات قياس بانتظار المزامنة من المثيلات المرتبطة"
+
+[portal.billing.prepaid]
+capSuffix = "من {{total}} رصيد مدفوع مسبقًا"
+expires = "تنتهي في {{date}}"
+eyebrow = "السعة المدفوعة مسبقًا"
+note = "تُستخدم قبل الفوترة المقاسة وخارج حد الإنفاق الخاص بك."
+topUp = "شحن"
+
+[portal.billing.prepaid.buy]
+back = "رجوع"
+calcTitle = "احسب دفعتك السنوية"
+cancel = "إلغاء"
+cancelPurchase = "إلغاء الشراء"
+close = "إغلاق"
+continueToPayment = "المتابعة إلى الدفع"
+finalise = "إنهاء"
+invoiceErrorTitle = "تعذر إنشاء الفاتورة"
+loadingTitle = "جارٍ تحميل عرض السعر"
+payTitle = "ادفع مقابل سنتك"
+step = "الخطوة {{current}} من {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "تغيير"
+deployRow = "النشر"
+done = "تم"
+enterpriseHint = "هذا نطاق مؤسسي. عند هذا الحجم، تتفوق أسعار المؤسسات على أي خصم خدمة ذاتية. تثبيت السعر والشروط وعرض سعر خلال دقائق."
+governanceRow = "الحوكمة"
+governanceValue = "{{label}} · {{count}} سياسة"
+handlesLabel = "المعالج الخاص بك"
+handlesValue = "يعالج {{volume}} رصيد / شهر"
+pipelinesLabel = "مسارات المعالجة"
+policiesMeta = "{{count}} سياسة"
+poolCaption = "مجموعة واحدة من {{credits}} رصيد للسنة. الأشهر الثقيلة تستعير من الأشهر الخفيفة."
+priceLabel = "سنتك · 12 شهرًا بسعر 10"
+rateUnknown = "سنعرض السعر الدقيق عند الدفع."
+savings = "توفر {{amount}} · شهران مجانًا."
+sizingRow = "التحجيم"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "إجمالي المستخدمين"
+
+[portal.billing.prepaid.consent]
+label = "أفهم أنه عند استخدام سعتى المدفوعة مسبقًا بالكامل أو انتهاء صلاحيتها بعد 12 شهرًا، تستمر المعالجة تلقائيًا بالسعر القياسي المقاس للدفع حسب الاستخدام (حتى حد الإنفاق الخاص بي) ما لم ألغِ، وأنني أستطيع الإلغاء في أي وقت من بوابة الفوترة."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "تديره Stirling. يعمل خلال دقائق."
+cloudValue = "Stirling Cloud · مُدار"
+selfhost = "مستضاف ذاتيًا"
+selfhostDesc = "يعمل على بنية تحتية خاصة. نفس السعر."
+selfhostValue = "مستضاف ذاتيًا · بنية تحتية خاصة"
+
+[portal.billing.prepaid.offer]
+cta = "مراجعة العرض"
+subtitle = "ادفع مسبقًا سنة من معالجة PDF واحصل على شهرين مجانًا، تُستخدم قبل الفوترة المقاسة وخارج حد الإنفاق الخاص بك."
+title = "احصل على 12 شهرًا بسعر 10"
+
+[portal.billing.prepaid.pay]
+accountName = "اسم صاحب الحساب"
+accountNamePlaceholder = "مثلًا Jane Smith"
+companyName = "اسم الشركة (اختياري)"
+companyNamePlaceholder = "مثلًا Acme Inc."
+downloadInvoice = "تنزيل الفاتورة"
+payOnline = "الدفع عبر الإنترنت"
+poNumber = "رقم PO (اختياري)"
+poNumberPlaceholder = "مثلًا PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "متقدم"
+advancedDesc = "تقود مسارات المعالجة معظم معالجتك."
+none = "لا شيء"
+noneDesc = "لم تشغّل مسارات معالجة بعد. يمكنك تشغيلها في أي وقت."
+standard = "قياسي"
+standardDesc = "بعض مسارات المعالجة تعيد معالجة ملفات PDF الواردة."
+
+[portal.billing.prepaid.posture]
+essentials = "الأساسيات"
+essentialsDesc = "التصنيف، الافتراضي، بالإضافة إلى المشاركة"
+governed = "محكوم"
+governedDesc = "يضيف الأمان والتوجيه"
+regulated = "منظّم"
+regulatedDesc = "كل فئة، بما في ذلك الامتثال والاحتفاظ والاستيعاب"
+
+[portal.billing.prepaid.review]
+download = "تنزيل عرض السعر (PDF)"
+downloading = "جارٍ التحضير…"
+share = "مشاركة للموافقة"
+
+[portal.billing.prepaid.size]
+compact = "مضغوط"
+compactDesc = "ملفات أقل من 25 MB، بدون رسوم بيانات"
+heavy = "ثقيل"
+heavyDesc = "ممسوح ضوئيًا أو كثيف الصور، عادةً 50 MB+"
+standard = "قياسي"
+standardDesc = "غالبًا صغيرة، وبعض عمليات المسح تتجاوز 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "مستخدمة بالكامل"
+healthy = "متبقٍ الكثير"
+low = "توشك على النفاد"
 
 [portal.billing.spendLimit]
 adjustLimit = "تعديل الحد"
@@ -6494,6 +6608,8 @@ label = "متوقع تجاوزه."
 
 [portal.billing.spendThisMonth]
 eyebrow = "الإنفاق هذا الشهر"
+freeRemaining_one = "متبقٍ {{formatted}} PDF مجاني"
+freeRemaining_other = "متبقٍ {{formatted}} ملفات PDF مجانية"
 processed_one = "تمت معالجة {{formattedCount}} ملف PDF."
 processed_other = "تمت معالجة {{formattedCount}} ملفات PDF."
 processedWithRate_one = "تمت معالجة {{formattedCount}} ملف PDF، بسعر {{rate}} لكل واحد."
@@ -6534,6 +6650,350 @@ signature = "توقيع"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "اتصال جديد"
+createTitleFor = "اتصال {{name}}"
+delete = "حذف"
+edit = "تعديل"
+editTitle = "تعديل الاتصال"
+unsupportedType = "لا يمكن تعديل نوع الاتصال هذا هنا."
+
+[portal.connections.categories.advanced]
+description = "لخدمة لا ندعمها بعد."
+label = "متقدم"
+
+[portal.connections.categories.audit]
+description = "سجّل ما حدث للمستند حيث ينظر المدققون لديك بالفعل."
+label = "تسجيل التدقيق والامتثال"
+
+[portal.connections.categories.notify]
+description = "أخبر نظامًا آخر بأن شيئًا ما حدث."
+label = "الإشعار وسير العمل"
+
+[portal.connections.categories.security]
+description = "افحص مستندًا أو ضع عليه تسمية قبل أن ينتقل."
+label = "الأمان والتصنيف"
+
+[portal.connections.categories.signing]
+description = "أرسل مستندًا للتوقيع أو التوثيق."
+label = "التوقيع الإلكتروني والتوثيق"
+
+[portal.connections.categories.storage]
+description = "حيث تنتهي المستندات المعالجة - حاوية أو محرك أقراص أو تذكرة أو صفحة."
+label = "ملف وإرفاق"
+
+[portal.connections.commonFields.accessToken]
+helperText = "يخزن Stirling هذا مشفرًا ولا يعرضه مرة أخرى أبدًا."
+label = "رمز الوصول"
+
+[portal.connections.commonFields.apiKey]
+label = "مفتاح API"
+
+[portal.connections.commonFields.apiToken]
+label = "رمز API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "يمكن للخطوات التي تستخدم هذا الاتصال استدعاء المسارات ضمن URL هذا فقط، وليس مضيفًا آخر أبدًا."
+label = "URL الخادم"
+
+[portal.connections.commonFields.email]
+label = "البريد الإلكتروني"
+
+[portal.connections.commonFields.host]
+label = "المضيف"
+
+[portal.connections.commonFields.password]
+label = "كلمة المرور"
+
+[portal.connections.commonFields.port]
+label = "المنفذ"
+
+[portal.connections.commonFields.username]
+label = "اسم المستخدم"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "الصق URL الذي أعطتك إياه الخدمة. لا يمكن استدعاء إلا المسارات الموجودة تحته."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "اسم الاتصال"
+namePlaceholder = "مثلًا الإنتاج"
+
+[portal.connections.picker]
+cancel = "إلغاء"
+createNew = "اتصال جديد..."
+placeholder = "حدد اتصالًا"
+save = "حفظ الاتصال"
+
+[portal.connections.picker2]
+back = "تغيير التكامل"
+heading = "ما الذي تريد توصيله؟"
+noResultsBody = "لا ندعمه بعد - أخبرنا عنه وسننظر في إضافته."
+noResultsTitle = "لا شيء يطابق \"{{query}}\""
+searchPlaceholder = "ابحث في التكاملات - جرّب \"sign\" أو \"ocr\" أو اسم منتج"
+
+[portal.connections.types.api]
+description = "استدعِ أي HTTP API من سياسة. أنت تختار URL والمصادقة والحمولة."
+label = "API مخصص"
+
+[portal.connections.types.api.fields.authType]
+label = "المصادقة"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "اسم المستخدم وكلمة المرور"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "رمز في ترويسة مخصصة"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "لا شيء"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "تسجيل الدخول للحصول على رمز"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "يمكن للخطوات التي تستخدم هذا الاتصال استدعاء المسارات ضمن URL هذا فقط، وليس مضيفًا آخر أبدًا."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "اسم الترويسة"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "مسار تسجيل الدخول"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "كلمة المرور"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "إذا ردّت API برابط تنزيل، فلا يمكن جلب إلا هؤلاء المضيفين. افصل بينها بفواصل. اتركه فارغًا للسماح بمضيف Base URL نفسه فقط."
+label = "مضيفو النتائج المسموح بهم"
+
+[portal.connections.types.api.fields.token]
+label = "الرمز"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "إرسال الرمز بهذه الترويسة"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "ترويسة الاستجابة التي يعيدها استدعاء تسجيل الدخول وفيها الرمز، مثل X-Auth-Token."
+label = "ترويسة استجابة الرمز"
+
+[portal.connections.types.api.fields.username]
+label = "اسم المستخدم"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "افحص المستندات بحثًا عن البرامج الضارة على خادم تقوم بتشغيله - لا يغادر شيء شبكتك."
+label = "ClamAV (مستضاف ذاتيًا)"
+
+[portal.connections.types.cloudmersive]
+description = "فحص الفيروسات والمحتوى للمستندات في سياسة."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "احظر المستندات التي تحتوي على وحدات ماكرو أو ملفات تنفيذية أو نصوص برمجية أو كائنات مضمنة - وليس فقط البرامج الضارة المعروفة."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "إرفاق المستندات المعالجة بصفحة Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "أرسل المستندات إلى ConsignO Cloud (Notarius) للتوقيع الإلكتروني والتوثيق."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "بيئة ConsignO Cloud الخاصة بك، بما في ذلك /api/v1."
+label = "URL الخادم"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "مفتاح API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "سر API"
+
+[portal.connections.types.consigno.fields.password]
+label = "كلمة المرور"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "مطلوب فقط إذا كانت مؤسستك تستخدم مستأجرين."
+label = "المستأجر"
+
+[portal.connections.types.consigno.fields.username]
+label = "اسم المستخدم"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "انشر رسالة إلى Discord عندما تعالج سياسة مستندًا."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "فهرس حدث تدقيق في Elasticsearch في كل مرة تتعامل فيها سياسة مع مستند."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "استطلع خادم FTP أو FTPS بحثًا عن مستندات جديدة."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "وضع الاتصال"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "نشط"
+passive = "سلبي (موصى به)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "يرسل FTP العادي بيانات الاعتماد والملفات دون تشفير؛ اختر FTPS إذا كان الخادم يدعمه."
+label = "التشفير"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (صريح / AUTH TLS)"
+implicit = "FTPS (ضمني)"
+none = "لا شيء (FTP عادي)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "انشر رسالة إلى مساحة Google Chat عندما تعمل سياسة."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "إرفاق المستندات المعالجة بمشكلة Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "أرسل مستندًا أو إشعارًا بالبريد الإلكتروني عندما تعمل سياسة."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "حفظ المستندات المعالجة في Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "كلمة مرور التطبيق"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "اكتشف البيانات الشخصية في نص المستند باستخدام خادم Presidio تقوم بتشغيله."
+label = "Presidio (مستضاف ذاتيًا)"
+
+[portal.connections.types.purview]
+description = "قراءة وتطبيق تسميات حساسية Microsoft Purview على ملفات PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "اختياري. مطلوب فقط لاختيار التسميات بالاسم؛ يعمل وضع التسميات بدونه."
+label = "معرّف التطبيق (العميل)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "سر العميل"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "يُختم على كل تسمية باعتباره SiteId الخاص بها، حتى تعرف الأدوات المتوافقة مع Purview أي مؤسسة طبقتها."
+label = "معرّف الدليل (المستأجر)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "حاوية S3 يمكن للمصادر القراءة منها ويمكن لمخرجات مسار المعالجة الكتابة إليها."
+label = "تخزين S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "معرّف مفتاح الوصول"
+
+[portal.connections.types.s3.fields.bucket]
+label = "الحاوية"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "اتركه فارغًا لـ AWS. عيّنه لـ MinIO أو مخزن آخر متوافق مع S3."
+label = "نقطة النهاية"
+
+[portal.connections.types.s3.fields.region]
+label = "المنطقة"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "مفتاح الوصول السري"
+
+[portal.connections.types.sendgrid]
+description = "أرسل مستندًا أو إشعارًا بالبريد الإلكتروني عندما تعمل سياسة."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "استطلع خادم SFTP (SSH) بحثًا عن مستندات جديدة."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "اختياري. بصمة مفتاح مضيف SHA-256 للخادم (من `ssh-keyscan host | ssh-keygen -lf -`). عند تعيينها، لا يُقبل إلا خادم يقدم هذا المفتاح؛ وعند تركها فارغة، يتم تثبيت المفتاح الذي يظهر عند أول اتصال وتُرفض التغييرات اللاحقة."
+label = "بصمة مفتاح المضيف"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "عبارة مرور المفتاح"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "اتركه فارغًا إذا كنت تصادق باستخدام مفتاح خاص بدلًا من ذلك."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "اختياري. الصق مفتاح OpenSSH خاصًا للمصادقة بمفتاح بدلًا من كلمة مرور."
+label = "المفتاح الخاص"
+
+[portal.connections.types.slack]
+description = "انشر رسالة إلى Slack عندما تعالج سياسة مستندًا."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "راقب مشاركة شبكة SMB / CIFS (Windows أو Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / مشاركة شبكة"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "اختياري. نطاق Windows أو مجموعة العمل، إذا كان خادمك يستخدم أحدهما."
+label = "النطاق"
+
+[portal.connections.types.smb.fields.share]
+label = "المشاركة"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "أرسل حدث تدقيق إلى Splunk في كل مرة تتعامل فيها سياسة مع مستند."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "أرسل حدث تدقيق إلى جامع HTTP في Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "انشر رسالة إلى قناة Teams عندما تعمل سياسة."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "انشر كل مستند، أو التفاصيل فقط، إلى URL تختاره."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "شغّل سيناريو Zap أو Make من سياسة."
+label = "Zapier وMake"
+
+[portal.docs]
+browse = "تصفح المستندات"
+viewSource = "عرض المصدر على GitHub"
+
 [portal.docs.authentication]
 codeCaption = "كل طلب"
 eyebrow = "البدء"
@@ -6619,11 +7079,19 @@ title = "SDKs الرسمية"
 beta = "Beta"
 deprecated = "مهمل"
 
+[portal.docs.search]
+empty = "لا توجد مستندات مطابقة"
+placeholder = "بحث في المستندات"
+results = "{{count}} نتيجة"
+
 [portal.docs.skills]
 eyebrow = "المهارات"
 lead = "قدرات مدمجة ومسمّاة يستدعيها وكيلك كأداة واحدة. كل مهارة هي سلسلة عمليات حتمية مع تقييمات مرفقة."
 title = "مهارات الوكيل"
 
+[portal.docs.toc]
+title = "في هذه الصفحة"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "مرجع API"
@@ -6697,6 +7165,8 @@ type = "النوع"
 user = "المستخدم"
 
 [portal.documents.queue.empty]
+connectSource = "توصيل مصدر"
+createPipeline = "إنشاء مسار معالجة"
 description = "عندما تغذي المصادر المستندات إلى مسارات العمل لديك، ستظهر هنا للمراجعة."
 title = "لا توجد مستندات في قائمة الانتظار"
 
@@ -6806,13 +7276,71 @@ description = "واجه هذا العرض خطأً غير متوقع. حاول 
 retry = "حاول مرة أخرى"
 title = "حدث خطأ ما في هذه الصفحة"
 
+[portal.home.download]
+back = "رجوع"
+body = "نزّل تطبيق سطح المكتب أو استضف الخادم ذاتيًا."
+done = "تم"
+guide = "افتح دليل {{name}}"
+openInBrowser = "افتح في المتصفح بدلًا من ذلك"
+sectionDesktop = "تطبيق سطح المكتب"
+sectionSelfHosted = "مستضاف ذاتيًا"
+title = "تثبيت محرر Stirling PDF"
+
+[portal.home.download.docker]
+detailBody = "شغّل الصورة الرسمية على خادمك."
+note = "يفتح على :8080. تسجيل الدخول الافتراضي: admin / stirling."
+tagline = "شغّل الخادم في حاوية"
+title = "Docker"
+variantFat = "كامل"
+variantLite = "فائق الخفة"
+variantStandard = "قياسي"
+
+[portal.home.download.kubernetes]
+detailBody = "ثبّت مخطط Helm الرسمي."
+note = "أضف PVC لـ /configs للاحتفاظ بالإعدادات."
+tagline = "انشر إلى عنقود باستخدام Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "إصدارات أصلية لتوزيعتك."
+guideBtn = "عرض خيارات تثبيت Linux"
+note = "تتوفر إصدارات AppImage و.deb و.rpm للتوزيعات الشائعة."
+tagline = "تطبيق سطح مكتب أصلي لتوزيعتك"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "أو عبر Homebrew"
+detailBody = "شغّل المثبّت، أو استخدم Homebrew."
+downloadBtn = "تنزيل لـ macOS"
+tagline = "تطبيق أصلي لـ Apple silicon وIntel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "شغّل ملف .jar على خادم مادي مباشر."
+downloadBtn = "تنزيل ملف .jar"
+note = "يتطلب Java 21+. يفتح على :8080؛ تسجيل الدخول الافتراضي admin / stirling."
+runLabel = "ثم شغّله"
+tagline = "شغّل ملف .jar على خادم مادي مباشر"
+title = "إعداد خادم يدوي"
+
+[portal.home.download.windows]
+altLabel = "أو عبر winget"
+detailBody = "شغّل المثبّت، أو استخدم مدير حزم."
+downloadBtn = "تنزيل المثبّت"
+tagline = "تطبيق أصلي لـ Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} نشط"
-invite = "دعوة زملاء الفريق"
+activeOfDeployed = "{{active}} من {{total}} نشط هذا الشهر"
 name = "Stirling PDF Editor"
 open = "فتح في المتصفح"
 updated = "تم التحديث {{time}}"
 
+[portal.home.editor.deploy]
+finish = "إنهاء النشر"
+options = "عرض خيارات النشر"
+start = "نشر المحرر"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "مستضاف ذاتيًا · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "مساء الخير"
 evening = "مساء الخير"
 morning = "صباح الخير"
 
-[portal.home.onboarding]
-dismiss = "تجاهل الإعداد"
-notStarted = "لم يبدأ"
-progress = "تم إنجاز {{done}} من {{total}}"
-title = "إكمال الإعداد"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC على مستوى المؤسسة، وتسعير حجم ملتزم، ونشر معزول عن الشبكة."
-cta = "بدء التجربة"
-ctaQuote = "الحصول على عرض سعر"
-lead = "لأكثر من 250 موظفًا."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "انشر تطبيق سطح المكتب، مجاني للأبد."
-title = "تنزيل PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} نشطة · {{recommended}} موصى بها"
-chip = "{{active}} نشطة"
-title = "تشغيل السياسات"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} متصلة · كل PDF محكوم أينما وصل"
-chip = "{{connected}} متصلة"
-title = "ربط مصادرك"
-
-[portal.home.quickActions]
-subtitle = "أهم مهام اليوم"
-title = "إجراءات سريعة"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "منشئ من 3 خطوات فوق مكتبة العمليات المصنفة"
-title = "إنشاء مسار عمل"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3، وكلاء، webhooks، مجلدات مراقبة"
-title = "ربط مصدر"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "مفتاح محدد النطاق مع حدود معدل وقائمة سماح IP"
-title = "إصدار مفتاح API"
-
 [portal.infrastructure]
 manageEditorDeployment = "إدارة نشر Editor"
 sectionsAriaLabel = "أقسام البنية التحتية"
@@ -6878,13 +7363,9 @@ heading = "مفاتيح API"
 subheading = "بيانات اعتماد محددة النطاق مع حدود معدل لكل مفتاح وأذونات وقوائم سماح IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "عناوين IP المسموح بها"
-anyIp = "أي IP (بدون قائمة سماح)"
 created = "تم الإنشاء"
 lastUsed = "آخر استخدام"
-permissions = "الأذونات"
-rateLimit = "حد المعدل"
-rateLimitValue = "{{value}} طلب/دقيقة"
+revoke = "إبطال المفتاح"
 usageMonth = "الاستخدام هذا الشهر"
 usageToday = "الاستخدام اليوم"
 
@@ -6892,6 +7373,20 @@ usageToday = "الاستخدام اليوم"
 description = "أنشئ مفتاحًا محدد النطاق للبدء في استدعاء Stirling API."
 title = "لا توجد مفاتيح API بعد"
 
+[portal.infrastructure.apiKeys.error]
+load = "تعذر تحميل مفاتيح API الخاصة بك. يُرجى المحاولة مرة أخرى."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "هل تريد إبطال \"{{name}}\"؟ أي تكامل لا يزال يستخدم هذا المفتاح سيبدأ فورًا بتلقي أخطاء 401. لا يمكن التراجع عن ذلك."
+cancel = "إلغاء"
+confirm = "إبطال المفتاح"
+title = "إبطال مفتاح API"
+
+[portal.infrastructure.attestationLabel]
+attested = "مُصدق عليه"
+inScope = "ضمن النطاق"
+notApplicable = "غير منطبق"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "تصفية أحداث التدقيق حسب الفئة"
 heading = "سجلات التدقيق"
@@ -6935,6 +7430,7 @@ all = "الكل"
 auth = "المصادقة"
 config = "التكوين"
 elevation = "رفع الصلاحية"
+policy = "السياسة"
 processing = "المعالجة"
 security = "الأمان"
 
@@ -6944,19 +7440,35 @@ title = "ليس لديك وصول"
 
 [portal.infrastructure.audit.metrics]
 config = "التكوين"
-elevation = "رفع الصلاحية"
+policy = "السياسة"
 processing = "المعالجة"
 totalEvents = "إجمالي الأحداث · 24 ساعة"
 
+[portal.infrastructure.auditCatLabel]
+auth = "المصادقة"
+config = "التكوين"
+elevation = "رفع الصلاحيات"
+policy = "السياسة"
+processing = "المعالجة"
+security = "الأمان"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "خطأ"
+info = "معلومات"
+success = "نجاح"
+warning = "تحذير"
+
+[portal.infrastructure.certLabel]
+certified = "معتمد"
+inProgress = "قيد التقدم"
+notStarted = "لم يبدأ"
+
 [portal.infrastructure.createKey]
 cancel = "إلغاء"
 createKey = "إنشاء مفتاح"
 done = "تم"
-ipAllowlistHelper = "نطاقات CIDR مفصولة بفواصل. اتركه فارغًا للسماح بأي IP."
-ipAllowlistLabel = "قائمة سماح IP"
 keyNameLabel = "اسم المفتاح"
 keyNamePlaceholder = "مثال: الإنتاج · الاستيعاب"
-permissionsLabel = "الأذونات"
 secretKeyCaption = "المفتاح السري"
 secretWarning = "خزّن هذا في مدير أسرار. لا يخزن Stirling إلا تجزئة — ولا توجد طريقة لاستعادته لاحقًا."
 subtitle = "حدد نطاق المفتاح إلى الحد الأدنى الذي يحتاجه. يمكنك تدويره أو إلغاؤه في أي وقت."
@@ -6964,6 +7476,12 @@ subtitleCreated = "انسخ هذا السر الآن — لن يتم عرضه م
 title = "إنشاء مفتاح API"
 titleCreated = "تم إنشاء المفتاح"
 
+[portal.infrastructure.deployLabel]
+live = "مباشر"
+queued = "في قائمة الانتظار"
+rolledBack = "تم التراجع"
+rolling = "جارٍ النشر"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/دقيقة"
@@ -6999,6 +7517,15 @@ subheading = "صحة حية لكل منطقة Stirling منشورة — زمن 
 description = "ستظهر المناطق المنشورة هنا بمجرد تزويد مساحة عملك."
 title = "لا توجد مناطق منشورة"
 
+[portal.infrastructure.keyLabel]
+active = "نشط"
+revoked = "مُبطل"
+
+[portal.infrastructure.modelLabel]
+active = "نشط"
+degraded = "متدهور"
+disabled = "معطل"
+
 [portal.infrastructure.models]
 heading = "النماذج"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "الحالة"
 type = "النوع"
 version = "الإصدار"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/استدعاء"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "النماذج النشطة"
 avgLatency = "متوسط زمن الاستجابة"
@@ -7049,6 +7580,17 @@ modelForAria = "نموذج لـ {{operation}}"
 operation = "العملية"
 routedTo = "موجّه إلى"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "التصنيف"
+extraction = "الاستخراج"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "متدهور"
+down = "متوقف"
+healthy = "سليم"
+
 [portal.infrastructure.security.access.byok]
 description = "قدّم مفتاحًا من KMS الخاص بك. يقوم Stirling بالتشفير به لكنه لا يزال قادرًا على القراءة."
 label = "أحضر مفتاحك الخاص (BYOK)"
@@ -7174,6 +7716,47 @@ models = "النماذج"
 security = "الأمان"
 storage = "التخزين"
 
+[portal.integrations]
+addAnother = "إضافة آخر"
+availableHeading = "متاح"
+comingSoonHeading = "قريبًا"
+connect = "اتصال"
+connectedHeading = "متصل"
+connectionCount_one = "{{count}} اتصال"
+connectionCount_other = "{{count}} اتصالات"
+customApi = "API مخصص"
+searchPlaceholder = "البحث في التكاملات"
+subtitle = "كل ما يمكن لـ Stirling التواصل معه. تُنشأ بيانات الاعتماد هنا مرة واحدة، ثم تُستخدم في المصادر والسياسات وخطوط المعالجة."
+title = "التكاملات"
+typedName = "اسم {{tool}}"
+
+[portal.integrations.filters]
+all = "الكل"
+audit = "التدقيق"
+connected = "متصل"
+notify = "إشعار"
+security = "الأمان"
+signing = "التوقيع"
+storage = "التخزين"
+
+[portal.integrations.status]
+connected = "متصل"
+
+[portal.integrations.table]
+integration = "التكامل"
+worksWith = "يعمل مع"
+
+[portal.integrations.worksWith]
+pipelines = "خطوط المعالجة"
+policies = "السياسات"
+sources = "المصادر"
+
+[portal.legal]
+draft = "{{label}} · مسودة"
+loadError = "تعذر تحميل هذا المستند. يُرجى المحاولة مرة أخرى."
+loading = "جارٍ التحميل…"
+title = "مستند قانوني"
+
 [portal.nav]
 agent-builder = "منشئ الوكلاء"
 components = "المكونات"
@@ -7182,6 +7765,7 @@ documents = "المستندات"
 editor = "المحرر"
 home = "الرئيسية"
 infrastructure = "البنية التحتية"
+integrations = "التكاملات"
 pipelines = "مسارات العمل"
 policies = "السياسات"
 procurement = "المشتريات"
@@ -7190,25 +7774,9 @@ sources = "المصادر"
 usage = "الاستخدام والفوترة"
 users = "المستخدمون"
 
-[portal.notifications]
-markAllRead = "وضع علامة على الكل كمقروء"
-title = "الإشعارات"
-viewAll = "عرض الكل"
-
-[portal.notifications.ariaLabel]
-none = "الإشعارات، لا توجد غير مقروءة"
-unread_one = "الإشعارات، {{count}} غير مقروء"
-unread_other = "الإشعارات، {{count}} غير مقروءة"
-
-[portal.notifications.count]
-allRead = "الكل مقروء"
-loading = "جارٍ التحميل"
-new_one = "{{count}} جديد"
-new_other = "{{count}} جديدة"
-
-[portal.notifications.empty]
-description = "لا توجد إشعارات جديدة."
-title = "أنت مطّلع على كل شيء"
+[portal.nav.section]
+platform = "منصة PDF"
+processor = "معالج PDF"
 
 [portal.pipelines]
 subtitle = "كل مسار عمل مستندات آلي على الواجهة الخلفية: سلسلة مرتبة من العمليات على مجموعة من المصادر، تعمل عند مشغّل. انقر على صف لرؤية خطواته ومصادره."
@@ -7220,15 +7788,28 @@ newPipeline = "مسار عمل جديد"
 [portal.pipelines.builder]
 addStep = "إضافة أداة"
 back = "العودة إلى مسارات العمل"
+cannotFollow = "لا يمكن أخذ {{produced}}"
+chooseAccount = "اختر حسابًا"
+chooseDestination = "اختر وجهة"
+chooseOperation = "اختر ما تفعله هذه الخطوة"
+chooseSource = "اختر مصدرًا"
 discard = "تجاهل التغييرات"
 enabled = "مفعّل"
+inputs = "الإدخال"
+inputSource = "مصدر الإدخال"
+inputTrigger = "المشغّل"
 keepEditing = "متابعة التحرير"
+needsConfiguring = "يحتاج إلى إعداد"
 needsUpload = "يحتاج إلى ملف مرفوع"
+noSources = "لا توجد مصادر متصلة بعد. أنشئ واحدًا لاستخدامه كإدخال."
 noToolMatches = "لا توجد أدوات تطابق بحثك."
 pipelineSettings = "إعدادات مسار العمل"
 searchTools = "البحث في الأدوات"
 selectToolBody = "أضف أداة لإنشاء مسار عملك."
 selectToolTitle = "لا توجد أدوات بعد"
+sendToSystem = "إرسال إلى نظام آخر"
+stepsIncompatible = "لا يمكن تشغيل هذه الخطوات على ما تنتجه الخطوة السابقة: {{tools}}."
+stepsNeedSetup = "لا تزال هذه الخطوات بحاجة إلى إعداد قبل الحفظ: {{tools}}."
 toolSettings = "إعدادات الأداة"
 unknownStep = "عملية غير معروفة، تم الإبقاء عليها كما هي."
 unsavedBody = "لديك تغييرات غير محفوظة. احفظها قبل المغادرة، أم تتجاهلها؟"
@@ -7236,19 +7817,24 @@ unsavedTitle = "تغييرات غير محفوظة"
 uploadUnsupported = "الملفات المرفوعة غير مدعومة في مسارات العمل بعد، لذلك لا يمكن حفظ هذه الخطوات: {{tools}}."
 usesDefaults = "يعمل بالإعدادات الافتراضية"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "يجمع كل ملف من الخطوة السابقة"
+fan-out = "يعمل مرة واحدة لكل ملف من الخطوة السابقة"
+format-mismatch = "يحتاج إلى {{accepts}}، لكن الخطوة السابقة تنتج {{produced}}"
+output-uncertain = "قد لا يعمل: يعتمد ناتج الخطوة السابقة على كيفية إعدادها"
+source-mismatch = "يحتاج إلى {{accepts}}، لكن إدخال خط المعالجة هذا هو {{produced}}"
+undeclared-operation = "لا يمكن التحقق مما تقبله هذه الخطوة"
+
 [portal.pipelines.composer]
 addTool = "إضافة أداة"
 cancel = "إلغاء"
 chainEmpty = "أضف أداة لبدء إنشاء مسار عملك."
 create = "إنشاء مسار عمل"
-directory = "مجلد الإخراج"
-directoryHelp = "مسار مطلق على الخادم. يجب أن يكون ضمن المجلدات المسموح بها المكوّنة."
 editingUnsupported = "عرض معاملات هذه الأداة للتحرير غير مدعوم بعد."
 moveDown = "نقل إلى الأسفل"
 moveUp = "نقل إلى الأعلى"
 name = "الاسم"
 namePlaceholder = "مثال: مسح التنقيح"
-noSources = "لا توجد مصادر متصلة بعد. لا يزال بإمكان مسار العمل العمل على الملفات المقدمة إليه مباشرة."
 noToolSettings = "لا تحتوي هذه الأداة على إعدادات قابلة للتكوين."
 operations_one = "عملية ({{count}})"
 operations_other = "عمليات ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "حذف"
 title = "حذف مسار العمل؟"
 
 [portal.pipelines.detail]
+clearHistory = "مسح السجل"
 delete = "حذف مسار العمل"
 run = "تشغيل الآن"
 
 [portal.pipelines.empty]
 action = "إنشاء مسار عمل"
+connectSource = "اتصال بمصدر"
 description = "أنشئ مسار عملك الأول: اختر المصادر التي يعمل عليها، وسلسلة العمليات، ومكان انتقال الإخراج."
 title = "لا توجد مسارات عمل بعد"
 
@@ -7286,15 +7874,17 @@ active = "نشطة"
 paused = "متوقفة مؤقتًا"
 total = "مسارات العمل"
 
-[portal.pipelines.output]
-folder = "كتابة إلى مجلد"
-inline = "إرجاع الملفات"
-
 [portal.pipelines.run]
+allProcessed_one = "لا يوجد ما يمكن تشغيله: تمّت معالجة مستند {{count}} الخاص بالمصدر بالفعل."
+allProcessed_other = "لا يوجد ما يمكن تشغيله: تمّت معالجة جميع المستندات وعددها {{count}} في المصادر بالفعل."
 completed_one = "اكتمل التشغيل."
 completed_other = "اكتملت كل عمليات التشغيل البالغ عددها {{count}}."
 empty = "لا يوجد شيء لتشغيله: لم تكن لدى المصادر مستندات للمعالجة."
 failed = "فشل التشغيل: {{error}}"
+historyCleared = "تم مسح السجل. ستعيد عملية التشغيل التالية معالجة كل ما هو موجود حاليًا في المصادر."
+inFlight = "لا يوجد شيء جديد لتشغيله: لا تزال المستندات قيد المعالجة من عملية تشغيل سابقة."
+parked_one = "لا يوجد ما يمكن تشغيله: فشل مستند {{count}} سابقًا وتم إيقافه. أصلح السبب، ثم امسح السجل لإعادة المحاولة."
+parked_other = "لا يوجد ما يمكن تشغيله: فشلت مستندات عددها {{count}} سابقًا وتم إيقافها. أصلح السبب، ثم امسح السجل لإعادة المحاولة."
 running = "بدأ التشغيل؛ لا يزال قيد التقدم."
 timeout = "يستغرق التشغيل وقتًا أطول من المتوقع؛ قد يظل ينتهي في الخلفية."
 
@@ -7314,12 +7904,18 @@ manual = "يدوي"
 schedule = "مجدول"
 
 [portal.policies]
+defaultName = "سياسة {{category}}"
 subtitle = "أتمتات دائمة تفرض مسار أدوات على كل مستند. يتم تشغيل كل سياسة عند الرفع أو التصدير، وتشغّل سلسلة أدواتها، وتحفظ النسخة المفروضة بجانب الأصل."
 title = "السياسات"
 
 [portal.policies.card]
 comingSoon = "الترقية إلى Enterprise"
 notSetUp = "غير معدّة"
+requiresAiEngine = "يتطلب محرك AI"
+
+[portal.policies.categories.classification]
+desc = "تعرّف على نوع كل مستند عند الرفع ووسم بياناته الوصفية للأرشفة والبحث."
+label = "التصنيف"
 
 [portal.policies.categories.compliance]
 desc = "فرض متطلبات HIPAA أو GDPR أو SOC 2 أو FedRAMP على كل مستند."
@@ -7344,6 +7940,13 @@ label = "الأمان"
 [portal.policies.config]
 scopeAll = "كل المستندات"
 
+[portal.policies.config.classification]
+summary = "يصنّف كل مستند مرفوع وفق تسميات فريقك ويوسم بياناته الوصفية."
+
+[portal.policies.config.classification.rules]
+0 = "تصنيف"
+1 = "وسم البيانات الوصفية"
+
 [portal.policies.config.compliance]
 summary = "يتحقق من المستندات مقابل الأطر التنظيمية قبل مغادرتها النظام."
 
@@ -7371,6 +7974,29 @@ minConfidence = "الحد الأدنى للثقة"
 2 = "تسمية"
 3 = "تطبيع"
 
+[portal.policies.config.purview]
+label = "تطبيق تسمية حساسية Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "مستأجر Purview"
+labelId = "معرّف التسمية"
+labelIdHelp = "GUID الخاص بالتسمية، من بوابة Purview. يؤدي تطبيق تسمية إلى كتابة بياناتها الوصفية على PDF؛ ولا يمكنه التشفير، إذ يتطلب ذلك عميل Microsoft."
+labelName = "اسم التسمية (اختياري)"
+labelNameHelp = "يُسجل إلى جانب المعرّف كي يتمكن الأشخاص والأدوات من التعرف على التسمية."
+
+[portal.policies.config.purview.fields.method]
+help = "يميز Purview بين تسمية طبقتها سياسة وتسمية اختارها شخص."
+label = "كيفية تسجيل التسمية"
+privileged = "كما اختارها شخص"
+standard = "كما طُبقت تلقائيًا"
+
+[portal.policies.config.purviewRead]
+label = "قراءة تسمية Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "مستأجر Purview"
+connectionHelp = "يقرأ التسمية التي يحملها المستند بالفعل، لتتمكن الخطوات اللاحقة من التصرف بناءً عليها."
+
 [portal.policies.config.retention]
 summary = "يفرض مدة الاحتفاظ بالمستندات، ومتى تُؤرشف، ومتى تُحذف."
 
@@ -7438,6 +8064,7 @@ title = "لا يوجد نشاط بعد"
 [portal.policies.endpoints]
 addWatermark = "علامة مائية"
 autoRedact = "تنقيح PII"
+classifyAndLabel = "تصنيف"
 compressPdf = "ضغط"
 flatten = "تسطيح"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "تم حفظ سياساتك وستظهر بمجرد استعادة
 retry = "إعادة المحاولة"
 title = "الخلفية غير متاحة"
 
+[portal.policies.operations]
+change = "تغيير ما تفعله هذه الخطوة"
+noResults = "لا توجد خطوة مطابقة. جرّب اسم منتج، أو \"scan\" أو \"notify\" أو \"attach\"."
+searchPlaceholder = "ابحث عن الخطوات - جرّب \"scan\" أو \"attach\" أو اسم منتج"
+
+[portal.policies.operations.bodyMode]
+binary = "بايتات الملف الخام"
+json = "داخل حمولة JSON"
+multipart = "كرَفع ملف (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "يفحص خادم ClamAV الخاص بك المستند؛ لا يغادر شيء شبكتك."
+label = "فحص الفيروسات (مستضاف ذاتيًا)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "يرفض المستندات التي تحتوي على وحدات ماكرو أو ملفات تنفيذية أو نصوص برمجية أو كائنات مضمنة."
+label = "حظر المحتوى النشط"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "يفحص Cloudmersive المستند وتتوقف العملية إذا لم يكن نظيفًا."
+label = "فحص الفيروسات"
+
+[portal.policies.operations.confluenceAttach]
+description = "يُودع المستند المعالج في صفحة."
+label = "إرفاق بصفحة Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "يرسل المستند إلى ConsignO Cloud للتوقيع."
+label = "إرسال للتوقيع (ConsignO)"
+note = "يرسل المستند. استرداد النسخة الموقعة غير مدعوم بعد، لأن الخطوة لا يمكنها تمرير نتيجة إلى خطوة لاحقة."
+
+[portal.policies.operations.customApiCall]
+description = "أنشئ الاستدعاء بنفسك: المسار والطريقة والجسم ومعالجة الاستجابة."
+label = "استدعاء API مخصص"
+
+[portal.policies.operations.discordNotify]
+description = "يخبر قناة بأن السياسة عالجت مستندًا."
+label = "نشر رسالة إلى Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "يسجل ما فعلته السياسة كمستند قابل للبحث."
+label = "فهرسة حدث تدقيق في Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "يناسب Multipart واجهات API الخاصة بالرفع؛ ويناسب JSON واجهات API التي تريد الملف داخل حمولة؛ ويرسل binary البايتات الخام."
+label = "كيفية إرسال المستند"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "جسم JSON يُرسل كما هو. يحمل {{document.base64}} الملف؛ ويتم ملء {{document.*}} و{{run.*}} لكل مستند."
+label = "جسم JSON"
+
+[portal.policies.operations.fields.connection]
+label = "الحساب"
+
+[portal.policies.operations.fields.domain]
+label = "نطاق Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "حقل النموذج الذي تتوقع API وجود المستند تحته."
+label = "اسم حقل الملف"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "من"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "كائن JSON من أزواج اسم/قيمة للترويسات. تتم إضافة بيانات اعتماد الاتصال نيابةً عنك."
+label = "الترويسات"
+
+[portal.policies.operations.fields.index]
+label = "الفهرس"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "مفتاح المشكلة"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "يُرسل كنص الرسالة. يتم ملء {{document.*}} و{{run.*}} لكل مستند."
+label = "الرسالة"
+
+[portal.policies.operations.fields.method]
+label = "الطريقة"
+
+[portal.policies.operations.fields.pageId]
+label = "معرّف الصفحة"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "يُضاف إلى URL الأساسي للاتصال. لا يمكنه مطلقًا الوصول إلى مضيف آخر."
+label = "المسار"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "المكان في محرك الأقراص لكتابته. يتم ملء {{document.filename}} لكل مستند."
+label = "مسار الوجهة"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "يترك التقرير المستند دون تغيير. أما الاستبدال فيبدله بما يعود في الرد."
+label = "ما الذي يجب فعله بالرد"
+
+[portal.policies.operations.fields.signerEmail]
+label = "البريد الإلكتروني للموقّع"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "الموضوع"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "يحلل Presidio هذا النص. استخدم {{document.title}} أو الصق النص الذي تريد فحصه."
+label = "النص المطلوب فحصه"
+
+[portal.policies.operations.fields.to]
+label = "إلى"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "اسم مستخدم Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "يخبر مساحة بأن السياسة عالجت مستندًا."
+label = "نشر رسالة إلى Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "يُودع المستند المعالج في مشكلة."
+label = "إرفاق بمشكلة Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "يرسل المستند المعالج كمرفق."
+label = "إرسال المستند بالبريد الإلكتروني (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "يكتب المستند المعالج في مجلد."
+label = "رفع إلى Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "يبلغ خادم Presidio الخاص بك عن البيانات الشخصية التي يجدها."
+label = "اكتشاف البيانات الشخصية"
+note = "يقرأ Presidio النصوص، وليس الملفات. أعطه النص الذي تريد فحصه — لا يتم رفع المستند نفسه."
+
+[portal.policies.operations.responseMode]
+replace = "استبدال المستند بالرد"
+report = "الاحتفاظ بالمستند وتسجيل الرد"
+
+[portal.policies.operations.sendgridEmail]
+description = "يرسل المستند المعالج كمرفق."
+label = "إرسال المستند بالبريد الإلكتروني (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "يخبر قناة بأن السياسة عالجت مستندًا."
+label = "نشر رسالة إلى Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "يسجل ما فعلته السياسة حيث يبحث المدققون لديك بالفعل."
+label = "إرسال حدث تدقيق إلى Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "يسجل ما فعلته السياسة إلى مجمّع HTTP."
+label = "إرسال حدث تدقيق إلى Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "يخبر قناة بأن السياسة عالجت مستندًا."
+label = "نشر رسالة إلى Teams"
+
+[portal.policies.operations.webhookPost]
+description = "يرسل المستند نفسه إلى URL تختاره."
+label = "نشر المستند إلى webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "يمرر تفاصيل التشغيل إلى أتمتتك."
+label = "تشغيل سيناريو Zap أو Make"
+
 [portal.policies.stats]
 activeFor = "نشطة"
 dataProcessed = "البيانات المعالجة"
@@ -7473,6 +8277,13 @@ label = "المستندات المطبقة"
 description = "مكوّنة لكنها لا تعمل"
 label = "متوقفة مؤقتًا"
 
+[portal.policies.table]
+appliesTo = "ينطبق على"
+docs = "المستندات المطبقة"
+enforces = "يفرض"
+policy = "السياسة"
+status = "الحالة"
+
 [portal.policies.wizard.actions]
 back = "رجوع"
 cancel = "إلغاء"
@@ -7480,6 +8291,10 @@ continue = "متابعة"
 enablePolicy = "تفعيل السياسة"
 saveChanges = "حفظ التغييرات"
 
+[portal.policies.wizard.capability.classify]
+desc = "يحدد نوع المستند من تسميات فريقك ويوسمه، بحيث تتم أرشفته والبحث عنه حسب الفئة."
+label = "تصنيف المستند"
+
 [portal.policies.wizard.capability.compress]
 desc = "يضغط المستند إلى حجم ملف أصغر."
 label = "تقليل حجم الملف"
@@ -7500,10 +8315,18 @@ label = "تنقيح المعلومات الحساسة"
 desc = "يزيل JavaScript المخفي حتى لا يتم تشغيل أي شيء تلقائيًا عند فتح المستند."
 label = "إزالة المحتوى النشط"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "يثبت أن المستند كان موجودًا بهذا الشكل الدقيق في وقت معين، باستخدام جهة ختم زمني مستقلة. يتم إرسال hash فقط - ولا يغادر المستند خادمك أبدًا."
+label = "إضافة ختم زمني موثوق"
+
 [portal.policies.wizard.capability.watermark]
 desc = "يضع علامة مرئية (مثل “سري”) على كل صفحة."
 label = "تطبيق علامة مائية"
 
+[portal.policies.wizard.classification]
+description = "يتم تصنيف كل مستند مرفوع وفق التسميات المضمنة ووسمه بالأنواع المناسبة. تتم مشاركة مجموعة التسميات عبر فريقك بالكامل."
+labelsHeading = "تسميات التصنيف"
+
 [portal.policies.wizard.errors]
 noTools = "فعّل أداة واحدة على الأقل في سير العمل أولًا."
 saveFailed = "تعذّر حفظ السياسة. يُرجى المحاولة مرة أخرى."
@@ -7548,73 +8371,118 @@ setUp = "إعداد سياسة {{category}}"
 [portal.policies.wizard.workflow]
 description = "اختر ما تفعله هذه السياسة بكل مستند تعالجه."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} نشطة"
-noRule = "لم يتم تطبيق أي قاعدة بعد"
-subtitle = "أتمتة دائمة يمر عبرها كل مستند، بغض النظر عن مسار المعالجة الذي يتولاه."
-title = "ما يعمل على ملفات PDF الخاصة بك"
-
 [portal.policySummary.action]
-comingSoon = "الترقية إلى Enterprise"
-configure = "تكوين"
 setUp = "إعداد"
 
-[portal.policySummary.column]
-activeRule = "القاعدة النشطة"
-policy = "السياسة"
-status = "الحالة"
+[portal.processorFlow]
+footnote = "الأعداد محسوبة خلال آخر 24 ساعة. سرعة التدفق توضيحية."
+liveBadge = "مباشر"
+stats = "{{connected}} متصل · تمت معالجة {{processed}} ملفات PDF"
+title = "معالج PDF"
 
-[portal.policySummary.empty]
-description = "بمجرد تكوين السياسات، ستظهر الفئات هنا."
-title = "لا توجد سياسات بعد"
+[portal.processorFlow.lens]
+ariaLabel = "وضع العرض"
+flow = "التدفق"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "نشطة"
-off = "متوقفة"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 ساعة"
+failed = "فشل"
+heading = "النتائج"
+success = "تم التسليم"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} نشط"
+count = "{{n}} · 24 ساعة"
+heading = "السياسات"
+setUp = "إعداد"
 soon = "قريبًا"
 
-[portal.processingStatus]
-managePlan = "إدارة الخطة"
-volumeSuffix = "ملفات PDF تمت معالجتها · آخر 30 يومًا"
+[portal.processorFlow.sankey]
+waist = "السياسات · {{n}} نشط"
+
+[portal.processorFlow.sankey.empty]
+description = "اتصل بمصدر وشغّل سياسة لمشاهدة تدفق المستندات عبر المعالج."
+title = "لا يوجد تدفق بعد"
+
+[portal.processorFlow.sources]
+comingSoonTag = "اتصال"
+editor = "محرر Stirling PDF"
+heading = "المصادر"
+perDay = "{{n}} / 24 ساعة"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "استقبال البريد الإلكتروني"
 
 [portal.procurement]
-reset = "إعادة ضبط المشتريات (تجريبي)"
 subtitle = "احصل على تقييم فريقك، والتعاقد معه، وتهيئته. كل مستند في مكان واحد."
 title = "المشتريات"
 
-[portal.procurement.action]
-download = "تنزيل"
-pay = "ادفع الآن"
-request = "طلب"
-sign = "مراجعة وتوقيع"
-upload = "رفع"
-
 [portal.procurement.agreement]
 agreeCta = "الموافقة والاشتراك"
+confidential = "سري"
 confirm = "لقد قرأت ووافقت على اتفاقية Stirling Enterprise."
-eyebrow = "الاتفاقية"
-intro = "تغطي اتفاقية واحدة مدمجة صفقتك: اتفاقية الخدمة الرئيسية، ونموذج الطلب، وEULA، واتفاقية معالجة البيانات. راجعها، ثم وافق لقبول عرض السعر ضمن اشتراك ملتزم."
-title = "راجع اتفاقية المؤسسة الخاصة بك"
+docName = "اتفاقية Stirling Enterprise"
+docSub = "MSA ونموذج الطلب وEULA وDPA، مدمجة في توقيع واحد."
+download = "تنزيل"
+downloadDraftError = "تعذر إنشاء PDF الاتفاقية - عارض المستندات غير متاح. يُرجى المحاولة قريبًا أو الاتصال بالدعم."
+downloadError = "تعذر تنزيل الاتفاقية الموقعة. يُرجى المحاولة مرة أخرى."
+legalName = "اسم الكيان القانوني"
+legalNamePlaceholder = "الكيان القانوني الذي سيوقّع"
+loadError = "تعذر تحميل الاتفاقية. يُرجى المحاولة مرة أخرى."
+loading = "جارٍ تحميل الاتفاقية..."
+ref = "مرجع {{ref}} · {{version}}"
+requestChanges = "طلب تغييرات"
+scrollHint = "مرّر للمراجعة"
+signatory = "اسم الموقّع"
+signatoryPlaceholder = "الاسم الكامل"
+signatoryTitle = "المسمى الوظيفي للموقّع"
+signatoryTitlePlaceholder = "مثلًا: المستشار القانوني العام"
+signError = "تعذر تسجيل توقيعك. يُرجى المحاولة مرة أخرى."
 
 [portal.procurement.builder]
 addons = "الإضافات"
+addressLine1 = "سطر العنوان 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "سطر العنوان 2"
+addressLine2Placeholder = "الجناح، الطابق، المبنى"
 back = "رجوع"
 businessName = "اسم النشاط التجاري"
 businessNamePlaceholder = "شركتك"
+city = "المدينة"
+cityPlaceholder = "San Francisco"
+completeRequired = "يرجى إكمال الحقول المطلوبة (المميزة بـ *) باستخدام بريد إلكتروني صالح قبل إنشاء عرض السعر."
+contactEmail = "البريد الإلكتروني لجهة الاتصال"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "اسم جهة الاتصال"
+contactNamePlaceholder = "Jane Doe"
 continue = "متابعة"
-country = "الدولة"
-countryEuro = "منطقة اليورو (EUR €)"
-countryUK = "المملكة المتحدة (GBP £)"
-countryUS = "الولايات المتحدة (USD $)"
+done = "تم"
 eula = "لقد قرأت ووافقت على Stirling Enterprise EULA. وهي تحكم الاتفاقية التي يتم إنشاؤها من عرض السعر هذا."
 generate = "إنشاء عرض سعر"
-included = "مضمن"
 indemnification = "تعويض IP"
 indemnificationSub = "ندافع عن مطالبات IP المؤهلة، وفقًا لـ EULA"
-offlineLicense = "ترخيص Offline / air-gapped"
-offlineLicenseSub = "ملف ترخيص قابل للتنزيل لمثيل self-hosted معزول air-gapped"
+paperEyebrow = "عرض سعر للمؤسسات"
+paperFor = "مُعدّ لـ"
+pdfSize = "حجم PDF"
+poNumber = "رقم أمر الشراء"
+poNumberPlaceholder = "اختياري"
+postalCode = "الرمز البريدي"
+postalCodePlaceholder = "94105"
+posture = "الحوكمة"
+posture_count = "~{{count}} سياسات"
+posture_essentials = "الأساسيات"
+posture_essentialsSub = "التصنيف + المشاركة — الإعدادات الافتراضية"
+posture_governed = "محكوم"
+posture_governedSub = "يضيف الأمان والتوجيه"
+posture_regulated = "منظم"
+posture_regulatedSub = "كل فئة — الامتثال، الاحتفاظ، الإدخال"
 qbr = "مراجعات أعمال ربع سنوية"
 qbrSub = "يراجع SE الخاص بك الاستخدام وخريطة الطريق كل ربع سنة"
+region = "الولاية / المنطقة"
+regionPlaceholder = "California"
 running = "{{annual}} / سنة · {{years}}-سنة {{tcv}}"
 s1Sub = "فريقك وملفات PDF التي تتوقع تشغيلها كل عام."
 s1Title = "كم ستعالج؟"
@@ -7623,6 +8491,12 @@ s2Title = "الالتزام والخدمة"
 s3Sub = "لعرض السعر والاتفاقية التي ينشئها."
 s3Title = "تفاصيلك"
 serviceLevel = "مستوى الخدمة"
+size_compact = "مضغوط"
+size_compactSub = "نص في الغالب، أقل من 1 MB"
+size_heavy = "ثقيل"
+size_heavySub = "ممسوح ضوئيًا أو كثيف الصور، 5 MB+"
+size_standard = "قياسي"
+size_standardSub = "نصوص وصور مختلطة، من 1 إلى 5 MB"
 slDedicated = "مخصص"
 slDedicatedSub = "4 ساعات عمل · مدير حساب مخصص · +30%"
 slPriority = "أولوية"
@@ -7630,6 +8504,8 @@ slPrioritySub = "نفس يوم العمل · CSM مُسمّى · +15%"
 slStandard = "قياسي"
 slStandardSub = "يوم العمل التالي · CSM مشترك · مضمن"
 stepOf = "الخطوة {{n}} من {{total}}"
+taxId = "VAT / المعرّف الضريبي"
+taxIdPlaceholder = "اختياري"
 term = "المدة"
 termDiscount = "تم تطبيق خصم {{pct}}% لالتزام متعدد السنوات"
 title = "أنشئ عرض السعر الخاص بك"
@@ -7637,6 +8513,7 @@ training = "التهيئة والتدريب"
 trainingSub = "جلسات مباشرة لتشغيل فريقك"
 users = "إجمالي المستخدمين"
 usersPlaceholder = "مثال: 250"
+viewEula = "اقرأها"
 volEstimated = "مقدّر من {{count}} مستخدمين (~2,000 ملف PDF لكل منهم، بما في ذلك الأتمتة). عدّل إذا كنت تعرف رقمًا أدق."
 volManual = "باستخدام الرقم الذي أدخلته. أعد التقدير من حجم فريقك في أي وقت."
 volNoUsers = "لست متأكدًا؟ أدخل حجم فريقك وسنقدّره."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "مثال: 1,000,000"
 years_one = "{{count}} سنة"
 years_other = "{{count}} سنوات"
 
-[portal.procurement.docs]
-count_one = "{{count}} مستند"
-count_other = "{{count}} مستندات"
-done = "تم"
-here = "أنت هنا"
-hide = "إخفاء"
-optional = "اختياري"
-paidAddon = "إضافة مدفوعة"
-show = "إظهار"
-subtitle = "كل ما تحتاجه في كل خطوة من الرحلة، يظهر مع تقدم الصفقة خلالها."
-supportingSubtitle = "SOC 2، ومراجعات الأمان، ونماذج الضرائب والمزيد، جاهزة عندما يطلبها فريق الأمان أو المشتريات لديك. بعضها يتضمن رسومًا لمرة واحدة."
-supportingTitle = "دعم تقييمك"
+[portal.procurement.documents]
+agreement = "اتفاقية المؤسسات"
+agreementSub = "MSA ونموذج الطلب وDPA في توقيع واحد."
+download = "تنزيل"
+eula = "EULA والشروط التجارية"
+eulaSub = "البرنامج والشروط التجارية للخدمة الذاتية."
+invoice = "الفاتورة"
+invoiceSub = "فاتورة اشتراكك الأولى."
+laterInvoice = "متاح بعد قبولك"
+laterQuote = "متاح بمجرد إصدار عرض السعر الخاص بك"
+quote = "عرض السعر"
+quoteSub = "عرض السعر المفصل للمؤسسات الخاص بك."
+sla = "ملحق SLA"
+slaSub = "مستويات الدعم وأهداف الاستجابة."
+subprocessors = "المعالِجون الفرعيون"
+subprocessorsSub = "جهات خارجية تعالج البيانات نيابةً عنك."
+subtitle = "مستندات صفقتك، متاحة في أي وقت."
 title = "المستندات"
-upcoming = "قادم"
+view = "عرض"
 
 [portal.procurement.error]
 title = "حدث خطأ ما"
 
 [portal.procurement.hero]
-company = "صفقة المؤسسة الخاصة بك"
+barAria = "المرحلة {{current}} من {{total}}"
 ctaAgreement = "مراجعة الاتفاقية وتوقيعها"
-ctaLive = "أنت جاهز للعمل"
-ctaPayment = "إضافة الدفع"
+ctaExploring = "إعداد نسختك التجريبية"
 ctaQuote = "مراجعة عرض السعر"
+ctaReviewQuote = "مراجعة عرض السعر"
 ctaTrial = "أنشئ عرض السعر"
+documents = "المستندات"
 eyebrow = "مشتريات Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "دعوة زملاء الفريق"
-keyDocs = "المستندات الرئيسية"
-nextStep = "الخطوة التالية: {{action}}"
-notStarted = "لم يبدأ"
+licenseKey = "مفتاح الترخيص"
+liveSub = "تم توفير مؤسستك وترخيصك نشط."
+liveTitle = "أنت الآن مباشر على Stirling Enterprise"
+next = "التالي: {{stage}}"
 open = "فتح المشتريات"
 scheduleCall = "جدولة مكالمة"
-setup1Sub = "ادعُ زملاء فريقك"
-setup1Title = "نشر محرر PDF"
-setup2Sub = "تشغيل المعالجة عبر المحررين والمصادر الأخرى"
-setup2Title = "توصيل معالج PDF"
-setup3Sub = "فعّل الأمان أو الامتثال أو التوجيه أو الاحتفاظ عند الحاجة إليها"
-setup3Title = "إضافة السياسات الموصى بها"
+sentenceAgreement = "مراجعة الاتفاقية وتوقيعها"
+sentenceLive = "التوفير والطرح"
+sentencePayment = "أمر الشراء والدفع"
+sentenceQuote = "مراجعة عرض السعر الخاص بك وقبوله"
+sentenceTrial = "إعداد مساحة العمل التجريبية الخاصة بك"
 
 [portal.procurement.journey]
 daysLeft_one = "باقي {{count}} يوم"
 daysLeft_other = "باقي {{count}} أيام"
-engineerLabel = "مهندس الحلول الخاص بك"
-eyebrow = "إطلاقك"
-live = "أنت جاهز للعمل على Stirling Enterprise"
-nextStep = "الخطوة التالية: {{action}}"
-subtitle = "مهندس الحلول الخاص بك معك في كل خطوة. إجراء تالٍ واحد في كل مرة؛ وقائمة التحقق الكاملة أدناه."
-title = "من التجربة إلى التشغيل، مسار موجه واحد"
-trialTitle = "تجربة Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "توقيع واحد يغطي MSA، ونموذج الطلب، وEULA، وDPA."
@@ -7727,6 +8604,9 @@ downloadError = "تعذّر إنشاء ملف الترخيص Offline الآن 
 downloadOffline = "تنزيل ترخيص Offline (.lic)"
 hint = "الصق هذا المفتاح في مثيل self-hosted لتفعيله، أو احتفظ به لسجلاتك. حافظ عليه آمنًا."
 label = "مفتاح الترخيص الخاص بك"
+subtitle = "فعّل نسخة مستضافة ذاتيًا باستخدام هذا المفتاح، أو احتفظ به في سجلاتك."
+title = "مفتاح الترخيص الخاص بك"
+trialFileHint = "هذا ملف الترخيص التجريبي الخاص بك. بمجرد اكتمال اتفاقيتك، عُد ونزّله مرة أخرى — فعلى عكس مفتاح الترخيص عبر الإنترنت، لن يتم تحديث ملف .lic من تلقاء نفسه."
 
 [portal.procurement.link]
 cta = "ربط الحساب"
@@ -7739,65 +8619,62 @@ description = "اشتراكك نشط وتم إصدار ترخيصك. تم توف
 eyebrow = "مباشر"
 title = "أنت جاهز للعمل على Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "مفاتيح التجربة، وعروض الأسعار للحجم الملتزم، والاتفاقية ذات التوقيع الواحد، والدفع، وسجل مستنداتك كلها هنا بمجرد بدء تقييم Enterprise."
-eyebrow = "Enterprise فقط"
-talkToSales = "تحدث إلى المبيعات"
-title = "يفتح مسار المشتريات مع Enterprise"
-
 [portal.procurement.milestone]
-accept = "قبول ومتابعة"
-description = "نزّل PDF لمشاركته مع فريقك، وعد لقبوله عندما تكون جاهزًا، أو أجرِ تغييرات."
-download = "تنزيل PDF"
 downloadError = "تعذّر تنزيل عرض السعر PDF الآن — يُرجى المحاولة مرة أخرى بعد قليل."
-edit = "تعديل عرض السعر"
-eyebrow = "عرض السعر {{number}}"
-perYear = " / سنة"
-preparedFor = "مُعدّ لـ {{company}}"
-tcv = "{{value}} إجمالي قيمة العقد"
-title = "عرض السعر الخاص بك جاهز"
-
-[portal.procurement.modal]
-cancel = "إلغاء"
-chooseFile = "اختيار ملف"
-close = "إغلاق"
-downloadBody = "سيبدأ التنزيل بعد قليل."
-downloadCta = "تنزيل"
-downloadTitle = "تنزيل"
-noFile = "لم يتم تحديد ملف"
-payBody = "ادفع عقدك الملتزم بالبطاقة أو التحويل البنكي عبر Stripe. يتم توفير مساحة العمل الخاصة بك بمجرد تسوية الدفع."
-payCta = "المتابعة إلى Stripe"
-payTitle = "تأكيد الدفع"
-requestBodyFree = "سننشئ هذا عند الطلب. أكّد وسيقوم مهندس الحلول الخاص بك بإرساله قريبًا."
-requestBodyPaid = "هذه إضافة مدفوعة. أكّد وسيحدد مهندس الحلول الخاص بك نطاقها ويرسل المستندات."
-requestCta = "طلب"
-requestTitle = "طلب هذا المستند"
-signBody = "يفتح اتفاقية Stirling Enterprise للتوقيع الإلكتروني: توقيع واحد يغطي MSA، ونموذج الطلب، وEULA، وDPA. نوقّع بالمقابل تلقائيًا وتنتقل إلى الدفع."
-signCta = "فتح للتوقيع"
-signTitle = "راجع اتفاقيتك ووقّعها"
-uploadBody = "أرسل لنا PO الخاص بك وسنصدر فاتورة مقابله وفق شروطك. اسحب PDF أو اختر ملفًا أدناه."
-uploadCta = "رفع أمر الشراء"
-uploadTitle = "رفع أمر الشراء الخاص بك"
 
 [portal.procurement.payment]
 description = "تم قبول عرض السعر الخاص بك وترخيصك نشط بالفعل — يمكن لفريقك البدء فورًا. ادفع الفاتورة الأولى عندما تكون جاهزًا؛ يمكنك الدفع أو تنزيلها هنا، دون الحاجة إلى بريد إلكتروني."
+downloadAgreement = "تنزيل الاتفاقية الموقعة"
 downloadInvoice = "تنزيل الفاتورة"
-simulate = "محاكاة استلام الدفع (تجريبي)"
+eyebrow = "الدفع"
 title = "تم إنشاء الاشتراك"
 viewInvoice = "عرض الفاتورة ودفعها"
 
+[portal.procurement.review]
+acceptCta = "قبول عرض السعر"
+annual = "الرسوم السنوية (السنة 1)"
+downloadCta = "تنزيل عرض السعر"
+poNumber = "أمر الشراء: {{po}}"
+renewal = "يتجدد بقيمة {{amount}}/سنة بعد المدة (+{{pct}}% CPI)"
+tcv = "مدة {{years}} سنوات، مدفوعة بالكامل مقدمًا: {{tcv}}"
+validUntil = "صالح حتى {{date}}"
+
 [portal.procurement.schedule]
 fallback = "تعذّر تحميل المجدول."
 fallbackLink = "فتح الجدولة في تبويب جديد"
+loading = "جارٍ تحميل المجدول..."
 subtitle = "سيرشد مهندس الحلول الخاص بك فريقك خلال الإطلاق. اختر وقتًا يناسبك."
 title = "جدولة مكالمة"
 
-[portal.procurement.status]
-action = "إجراء مطلوب"
-available = "متاح"
-complete = "مكتمل"
-pending = "معلّق"
-request = "عند الطلب"
+[portal.procurement.setup]
+airgap = "معزول شبكيًا"
+airgapSub = "مغلق، دون اتصال صادر"
+back = "رجوع"
+businessName = "اسم النشاط التجاري"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "مُدار، أسرع بداية"
+continue = "متابعة"
+deployment = "أين يجب نشره؟"
+eula = "أوافق على Stirling EULA والشروط التجارية."
+fullName = "الاسم الكامل"
+fullNamePlaceholder = "اسمك"
+invites = "دعوة زملاء الفريق · اختياري"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "جدولة مكالمة"
+seats = "الأشخاص الذين يختبرون"
+seatsPlaceholder = "مثلًا: 15"
+selfhost = "مستضاف ذاتيًا"
+selfhostSub = "Docker أو Kubernetes"
+start = "بدء التجربة"
+stepOf = "الخطوة {{n}} من {{total}}"
+subtitle = "مجاني لمدة 14 يومًا، دون الحاجة إلى بطاقة."
+subtitleDetails = "بعض التفاصيل لعرض السعر والاتفاقية الخاصة بك."
+talkFirst = "تفضل التحدث أولًا؟"
+title = "إعداد نسختك التجريبية"
+viewEula = "اقرأها"
+workEmail = "البريد الإلكتروني للعمل"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "يضيف التمديد 7 أيام ويُخطر مهندس الحلول الخاص بك."
@@ -7808,20 +8685,6 @@ maxed = "بلغ الحد الأقصى"
 subtitle = "تستمر تجربتك المجانية حتى {{date}}. لا حاجة إلى بطاقة."
 title = "تجربة Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "تسعير حجم ملتزم، وSSO + SCIM + RBAC على مستوى المؤسسة، وتدقيق غير قابل للتغيير لمدة 90 يومًا، وSE مخصص."
-homeCta = "بدء التجربة →"
-homeHeadline = "عالج ملايين ملفات PDF."
-
-[portal.recentActivity]
-title = "النشاط الأخير"
-viewAll = "عرض الكل"
-
-[portal.recentActivity.empty]
-description = "ستظهر هنا عمليات تشغيل المسارات وعمليات النشر وأحداث الوكلاء."
-title = "لا شيء هنا بعد"
-
 [portal.search]
 ariaLabel = "بحث"
 placeholder = "ابحث في Stirling — endpoints، المسارات، المستندات…"
@@ -7838,58 +8701,50 @@ admin = "المسؤول"
 [portal.settings.sections]
 account-link = "ربط الحساب"
 
-[portal.shell.header]
-accountFallback = "الحساب"
-accountMenu = "قائمة الحساب"
-darkMode = "الوضع الداكن"
-lightMode = "الوضع الفاتح"
-search = "بحث"
-searchPlaceholder = "بحث…"
-signOut = "تسجيل الخروج"
-switchToDark = "التبديل إلى السمة الداكنة"
-switchToLight = "التبديل إلى السمة الفاتحة"
-
 [portal.shell.sidebar]
 appEditor = "المحرر"
 appProcessor = "المعالج"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} مستند"
 linkAccount = "ربط حساب Stirling"
-planEditor = "خطة المحرر"
-planEnterprise = "خطة Enterprise"
-planProcessor = "خطة المعالج"
 primaryNav = "التنقل الرئيسي"
 switchApp = "تبديل التطبيق"
 
+[portal.shell.topbar]
+closeNav = "إغلاق التنقل"
+openNav = "فتح التنقل"
+search = "بحث"
+
 [portal.sources]
 subtitle = "اتصالات إدخال قابلة لإعادة الاستخدام تغذي المستندات إلى Stirling. كوّن الاتصال مرة واحدة، ثم أشر إليه من أي عدد من السياسات. انقر على صف لمعرفة تكوينه والسياسات التي تستخدمه."
 title = "المصادر"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "توصيل مصدر"
 
+[portal.sources.builder]
+back = "العودة إلى المصادر"
+backToTypes = "كل أنواع المصادر"
+cancel = "إلغاء"
+chooseHint = "اختر من أين تأتي المستندات. الموصلات باللون الرمادي قادمة قريبًا."
+comingSoon = "قريبًا"
+comingSoonHeading = "قريبًا"
+create = "إنشاء مصدر"
+createTitle = "اتصال بمصدر"
+delete = "حذف"
+editTitle = "تعديل المصدر"
+enabled = "مفعل"
+save = "حفظ التغييرات"
+
+[portal.sources.builder.folderAccess]
+description = "لا يمكن لأتمتة المجلدات استخدام إلا المجلدات التي سمح بها مسؤول. أضفه ضمن إعدادات الوصول إلى المجلد، ثم حاول مرة أخرى."
+openSettings = "إعدادات الوصول إلى المجلد"
+title = "هذا المجلد غير مسموح به"
+
 [portal.sources.delete]
 body = "حذف \"{{name}}\"؟ لا يمكن التراجع عن ذلك. يجب تحديث السياسات التي تشير إليه."
 cancel = "إلغاء"
 confirm = "حذف"
 title = "حذف المصدر؟"
 
-[portal.sources.detail]
-closeAriaLabel = "إغلاق التفاصيل"
-delete = "حذف المصدر"
-docs24h = "آخر 24 ساعة"
-docs30d = "آخر 30 يومًا"
-docsTotal = "الإجمالي المشاهَد"
-docsTrend = "المستندات خلال آخر 30 يومًا"
-documents = "المستندات"
-edit = "تعديل"
-notReferenced = "لا تتم الإشارة إليه من أي سياسة، لذا من الآمن حذفه."
-pause = "إيقاف مؤقت"
-resume = "استئناف"
-subtitle = "{{type}} · {{status}}"
-usedBy = "مستخدم بواسطة"
-
 [portal.sources.empty]
 description = "وصّل مجلدًا (وقريبًا، التخزين السحابي) حتى يكون لدى سياساتك مكان تسحب منه المستندات."
 title = "لا توجد مصادر متصلة بعد"
@@ -7899,18 +8754,57 @@ inUse = "قيد الاستخدام"
 total = "الاتصالات"
 unused = "غير مستخدم"
 
+[portal.sources.networkFields.connection]
+helperText = "الاتصال المخزن مع عنوان الخادم وبيانات الاعتماد. يُعاد استخدامه بواسطة كل مصدر يشير إليه."
+label = "الاتصال"
+
+[portal.sources.networkFields.directory]
+helperText = "مجلد على الخادم للاستطلاع، نسبةً إلى مجلد تسجيل الدخول الرئيسي أو جذر المشاركة. اتركه فارغًا للجذر."
+label = "المجلد"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "يزيل وضع الاستهلاك كل ملف من الخادم بمجرد أن تعالجه كل سياسة."
+label = "وضع القراءة"
+
+[portal.sources.networkFields.mode.options]
+consume = "استهلاك: معالجة كل ملف مرة واحدة"
+snapshot = "لقطة: إعادة قراءة المجلد في كل تشغيل"
+
+[portal.sources.networkFields.recursive]
+label = "عمق المجلد"
+
+[portal.sources.networkFields.recursive.options]
+all = "تضمين المجلدات الفرعية"
+top = "المستوى العلوي فقط"
+
 [portal.sources.status]
 active = "نشط"
 disabled = "معطل"
 unused = "غير مستخدم"
 
 [portal.sources.table]
+documents = "المستندات"
 source = "المصدر"
 status = "الحالة"
 usedBy = "السياسات"
 
+[portal.sources.types.box]
+description = "اسحب المستندات من مجلدات Box التي يشاركها فريقك بالفعل."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "اسحب المستندات من مجلد Dropbox مشترك."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "المستندات التي عالجها فريقك في المحرر، عبر تشغيلات السياسات وAI."
 label = "المحرر"
+noPolicies = "لم يتم تشغيل أي سياسات من المحرر بعد."
+
+[portal.sources.types.email]
+description = "حوّل المرفقات المرسلة إلى صندوق بريد مخصص إلى مستندات."
+label = "صندوق وارد البريد الإلكتروني"
 
 [portal.sources.types.folder]
 description = "مراقبة دليل على الخادم للمستندات الجديدة."
@@ -7943,25 +8837,80 @@ label = "عمق المجلد"
 all = "تضمين المجلدات الفرعية"
 top = "المستوى الأعلى فقط"
 
+[portal.sources.types.ftp]
+description = "استطلع مجلد خادم FTP أو FTPS بحثًا عن مستندات جديدة."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "اسحب المستندات من مجلدات Google Drive المشتركة."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "راقب مشاركة شبكة SMB بحثًا عن مستندات جديدة."
+label = "محرك أقراص الشبكة"
+
+[portal.sources.types.onedrive]
+description = "راقب مجلدات OneDrive بحثًا عن مستندات جديدة."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "اسحب المستندات من حاوية Amazon S3 أو حاوية متوافقة مع S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "الاتصال المخزن الذي يحتوي على الحاوية وبيانات الاعتماد. يُعاد استخدامه بواسطة كل مصدر ومخرج خط معالجة يشير إليه."
+label = "الاتصال"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "يزيل وضع الاستهلاك كل كائن من الحاوية بمجرد أن تعالجه كل سياسة."
+label = "وضع القراءة"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "استهلاك: معالجة كل كائن مرة واحدة"
+snapshot = "لقطة: إعادة قراءة الحاوية في كل تشغيل"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "تتم معالجة الكائنات التي تبدأ مفاتيحها بهذه البادئة فقط."
+label = "بادئة المفتاح"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "استطلع مجلد إسقاط SFTP بحثًا عن مستندات جديدة."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "اسحب المستندات من مكتبات مستندات SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "المصدر"
 
+[portal.sources.types.webhook]
+createNote = "يتم إنشاء URL للتسليم وسر توقيع عند إنشاء هذا webhook. يرسل المرسلون المستندات باستخدام POST إلى ذلك URL وتعمل السياسات المرجعية عند الوصول."
+description = "استلم المستندات عبر HTTP POST موقّع من أي نظام خارجي."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL التسليم"
+secretNote = "يُعرض سر التوقيع مرة واحدة عند إنشاء webhook. أعد إنشاء المصدر لتغييره."
+
+[portal.sources.types.webhook.reveal]
+copy = "نسخ"
+done = "تم"
+secret = "سر التوقيع"
+secretHelp = "وقّع الجسم الخام لكل تسليم بهذا المفتاح (HMAC-SHA256) وأرسله كترويسة X-Stirling-Signature."
+secretWarning = "انسخ سر التوقيع الآن. لأمانك، يُعرض مرة واحدة فقط ولا يمكن استرداده لاحقًا."
+title = "تم إنشاء Webhook"
+url = "URL التسليم"
+usage = "أرسل كل مستند باستخدام POST كجسم الطلب الخام إلى URL التسليم مع نوع محتوى binary (application/pdf أو application/octet-stream). تعمل السياسات المرجعية تلقائيًا عند الوصول."
+
 [portal.sources.wizard]
-back = "رجوع"
-cancel = "إلغاء"
-continue = "متابعة"
-editTitle = "تعديل المصدر"
 name = "الاسم"
 namePlaceholder = "مثال: استقبال المطالبات"
-save = "حفظ التغييرات"
-subtitle = "الخطوة {{current}} من {{total}} · {{label}}"
-title = "توصيل مصدر"
 type = "النوع"
 
-[portal.sources.wizard.steps]
-chooseType = "اختيار النوع"
-configure = "تكوين"
-review = "مراجعة وتوصيل"
+[portal.stepModal]
+close = "إغلاق"
 
 [portal.usage]
 managePayment = "إدارة الدفع"
@@ -8021,16 +8970,9 @@ summary = "يمتلك فريقًا — يدير موارد أعضائه والت
 2 = "الوصول إلى البوابة عبر السياسة الافتراضية"
 3 = "كل ما يمكن للعضو القيام به"
 
-[portal.welcome]
-ariaLabel = "مرحبًا بك في Stirling PDF"
-badge = "Open-source"
-installEditor = "تثبيت المحرر"
-inviteTeammates = "دعوة زملاء الفريق"
-openInBrowser = "فتح في المتصفح"
-perks = "مجاني للأبد · قابل للاستضافة الذاتية"
-subtitle = "محرر PDF الأكثر أمانًا في العالم مجاني للفرق بجميع أحجامها. يتضمن أكثر من 60 عملية PDF وSSO."
-title = "مرحبًا بك في"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · غير محدود"
 
 [printFile]
 title = "طباعة ملف"
@@ -8613,6 +9555,14 @@ text = "دوّر صفحات PDF بزيادات 90 درجة مع أو عكس عق
 [rotate.tooltip.header]
 title = "نظرة عامة على إعدادات التدوير"
 
+[ruler]
+clearAll = "مسح الكل"
+hideAllLabels = "إخفاء كل التسميات"
+hideSmallLabels = "إخفاء التسميات الصغيرة"
+physicalValues = "فعلي"
+scaled = "مقاس"
+showAllLabels = "إظهار كل التسميات"
+
 [sanitize]
 desc = "إزالة العناصر المحتملة الضرر من ملفات PDF."
 sanitizationResults = "نتائج التنقية"
@@ -8654,31 +9604,45 @@ label = "إزالة بيانات XMP الوصفية"
 [sanitize.steps]
 settings = "إعدادات"
 
-[sanitizePdf]
-tags = "تنظيف,تأمين,آمن,إزالة التهديدات"
-
 [sanitizePDF]
 title = "تنظيف PDF"
 
+[sanitizePdf]
+tags = "تنظيف,تأمين,آمن,إزالة التهديدات"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "ضبط مقياس الصفحة"
 
+[scaleSettings]
+activeScale = "المقياس النشط"
+apply = "تطبيق المقياس"
+applyCalibration = "تطبيق المعايرة"
+calculatedScale = "المقياس المحسوب"
+calibrate = "معايرة"
+calibrating = "جارٍتتم المعايرة"
+calibrationDistanceRequired = "أدخل مسافة فعلية أكبر من صفر"
+calibrationInvalid = "تعذّر حساب المقياس من هذا القياس"
+calibrationPaperDistance = "مسافة الصفحة المقاسة: {{distance}}"
+calibrationTitle = "معايرة المقياس"
+calibrationTooltip = "قس مسافة معروفة لحساب المقياس تلقائيًا"
+customScale = "مقياس مخصص"
+noneSet = "لم يتم تعيين مقياس مخصص"
+presets = "المقاييس المعدّة مسبقًا"
+ratio = "نسبة المقياس"
+ratioHelp = "النسبة: 1 وحدة صفحة = X وحدات فعلية"
+ratioPlaceholder = "مثال: 100"
+ratioPositive = "يجب أن تكون النسبة أكبر من صفر"
+ratioRequired = "النسبة مطلوبة"
+realDistance = "المسافة الفعلية"
+realDistancePlaceholder = "مثال: 5"
+reset = "إعادة التعيين إلى الافتراضيات"
+unit = "الوحدة"
+unitInvalid = "وحدة غير صالحة: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "عتبة الزاوية:"
-10 = "يضبط حجم الحدود المضافة والمزالة لمنع الحدود البيضاء في الإخراج (الافتراضي: 1)."
-2 = "تعيين الحد الأدنى للزاوية المطلقة المطلوبة لتدوير الصورة (الافتراضي: 10)."
-3 = "التسامح:"
-4 = "يحدد نطاق تباين اللون حول لون الخلفية المقدر (الافتراضي: 30)."
-5 = "أدنى مساحة:"
-6 = "تعيين الحد الأدنى لمنطقة الصورة (الافتراضي: 10000)."
-7 = "الحد الأدنى لمنطقة المحيط:"
-8 = "تعيين الحد الأدنى لمنطقة المحيط للصورة"
-9 = "حجم الحدود:"
-
 [scannerImageSplit]
 submit = "استخراج صور المسح"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "ما الذي تفعله"
 whatThisDoesDesc = "يعثر تلقائيًا على كل صورة ويستخرجها من صفحة ممسوحة أو صورة مركبة—دون قص يدوي."
 whenToUse = "متى تُستخدم"
 
+[ScannerImageSplit.selectText]
+1 = "عتبة الزاوية:"
+10 = "يضبط حجم الحدود المضافة والمزالة لمنع الحدود البيضاء في الإخراج (الافتراضي: 1)."
+2 = "تعيين الحد الأدنى للزاوية المطلقة المطلوبة لتدوير الصورة (الافتراضي: 10)."
+3 = "التسامح:"
+4 = "يحدد نطاق تباين اللون حول لون الخلفية المقدر (الافتراضي: 30)."
+5 = "أدنى مساحة:"
+6 = "تعيين الحد الأدنى لمنطقة الصورة (الافتراضي: 10000)."
+7 = "الحد الأدنى لمنطقة المحيط:"
+8 = "تعيين الحد الأدنى لمنطقة المحيط للصورة"
+9 = "حجم الحدود:"
+
 [search]
 noResults = "لا توجد نتائج"
 placeholder = "أدخل مصطلح البحث..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "خادم Stirling-PDF الخاص بك غير متصل
 [session]
 expired = "لقد انتهت جلستك. يرجى تحديث الصفحة والمحاولة مرة أخرى"
 
-[sessionManagement.tooltip]
-header = "إدارة جلسات التوقيع"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "يُضاف المشاركون الجدد إلى نهاية ترتيب التوقيع"
-bullet2 = "لا يمكن إضافة مشاركين بعد إنهاء الجلسة"
-bullet3 = "يتلقى كل مشارك إشعارًا عندما يحين دوره"
-description = "يمكنك إضافة المزيد من المشاركين إلى جلسة نشطة في أي وقت قبل الإنهاء."
-title = "إضافة مشاركين"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>إنهاء كامل</b>: وقّع جميع المشاركين"
-bullet2 = "<b>إنهاء جزئي</b>: لم يوقّع بعض المشاركين بعد"
-bullet3 = "سيتم استبعاد المشاركين غير الموقّعين من المستند النهائي"
-bullet4 = "بعد الإنهاء، يمكنك تحميل ملف PDF الموقّع إلى الملفات النشطة"
-description = "يجمع الإنهاء جميع التواقيع في ملف PDF واحد موقّع. لا يمكن التراجع عن هذا الإجراء."
-title = "إنهاء الجلسة"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "لا يمكن إزالة المشاركين الذين قاموا بالتوقيع بالفعل"
-bullet2 = "لن يتلقى المشاركون الذين تمت إزالتهم إشعارات بعد ذلك"
-bullet3 = "يُعدل ترتيب التوقيع تلقائيًا"
-description = "يمكن إزالة المشاركين من الجلسات قبل أن يوقّعوا."
-title = "إزالة المشاركين"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "يُطبَّق كل توقيع بالتسلسل على ملف PDF"
-bullet2 = "يمكن للموقّعين اللاحقين رؤية التواقيع السابقة"
-bullet3 = "أمر حاسم لتدفقات الموافقات والسلاسل القانونية للحيازة"
-description = "الترتيب الذي تحدده عند إنشاء الجلسة يحدد من يوقّع أولًا."
-title = "ترتيب التوقيع"
-
 [settings]
 close = "إغلاق"
 
+[settings.ai]
+documents = "المستندات و RAG"
+general = "عام"
+limits = "الحدود والأداء"
+models = "النماذج والمزوّدون"
+title = "الذكاء الاصطناعي"
+
 [settings.configuration]
 advanced = "متقدم"
 database = "قاعدة البيانات"
 endpoints = "نقاط النهاية"
 features = "الميزات"
+folderAccess = "الوصول إلى المجلد"
 mcp = "MCP Server"
 storageSharing = "تخزين الملفات والمشاركة"
 systemSettings = "إعدادات النظام"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "محرر PDF الافتراضي"
 defaultPdfEditorActive = "Stirling PDF هو محرر PDF الافتراضي لديك"
 defaultPdfEditorChecking = "جارٍ الفحص..."
 defaultPdfEditorInactive = "تطبيق آخر معيّن كافتراضي"
+defaultPdfEditorRemind = "ذكّرني بتعيينه كافتراضي"
+defaultPdfEditorRemindDescription = "اعرض لافتة عندما لا يكون Stirling PDF هو تطبيق PDF الافتراضي لديك."
 defaultPdfEditorSet = "افتراضي بالفعل"
 defaultStartupView = "العرض الافتراضي عند التشغيل"
 defaultStartupViewDescription = "اختر أي تبويب يكون نشطا في العمود الأيسر عند بدء التطبيق"
@@ -8817,9 +9771,18 @@ languageDescription = "اختر لغة العرض"
 logout = "تسجيل الخروج"
 setAsDefault = "تعيين كافتراضي"
 theme = "السمة"
+themeAccent = "لون التمييز"
+themeAccentCustom = "لون مخصص"
+themeAccentCustomHint = "مخصص (يوصى بالافتراضيات)"
+themeAccentDark = "لون التمييز للوضع الداكن"
+themeAccentDefault = "افتراضي"
+themeAccentDefaultHint = "السمة الافتراضية (موصى بها)"
+themeAccentDescription = "تتبعه الأزرار والروابط والتمييزات، كما يلوّن التطبيق بشكل خفيف. لكل من الوضع الفاتح والداكن لون خاص به. يستخدم النظام أيهما نشط."
+themeAccentLight = "لون التمييز للوضع الفاتح"
 themeDark = "داكنة"
 themeDescription = "التبديل بين الوضع الفاتح والداكن"
 themeLight = "فاتحة"
+themeReset = "استعادة السمة إلى الافتراضية"
 themeSystem = "System"
 title = "عام"
 user = "المستخدم"
@@ -8833,6 +9796,12 @@ intro = "فعّل مصادقة المستخدمين وإدارة الفرق وم
 learnMore = "تعرّف أكثر في التوثيق"
 title = "لمدراء النظام"
 
+[settings.general.loginLanding]
+description = "اختر التطبيق الذي يفتح عند تسجيل الدخول إلى Stirling Cloud."
+editor = "المحرر"
+processor = "المعالج"
+title = "بعد تسجيل الدخول"
+
 [settings.general.mode]
 fullscreen = "ملء الشاشة"
 sidebar = "الشريط الجانبي"
@@ -9041,6 +10010,11 @@ security = "الأمان"
 telegram = "Telegram"
 title = "الأمان والمصادقة"
 
+[settings.signOut]
+confirm = "هل أنت متأكد من رغبتك في تسجيل الخروج؟"
+submit = "تسجيل الخروج"
+title = "تسجيل الخروج"
+
 [settings.team]
 title = "الفريق"
 
@@ -9657,6 +10631,9 @@ uploadButton = "تحميل إلى الخادم"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "انقر هنا"
+fallback = "إذا لم يفتح تلقائيًا،"
+opening = "جارٍ فتح Swagger UI في علامة تبويب جديدة..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "توثيق API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "حدد الملفات في الملفات النشطة لتش
 singleFileScope = "سيطبق فقط على: {{fileName}}"
 viewerMode = "انتقل إلى محرر الملفات لاختيار عدة ملفات."
 
+[toolFormat]
+ANY = "أي ملف"
+CBR = "أرشيف قصص مصورة (CBR)"
+CBZ = "أرشيف قصص مصورة (CBZ)"
+CSV = "ملف CSV"
+EBOOK = "كتاب إلكتروني"
+EMAIL = "رسالة بريد إلكتروني"
+EXCEL = "جدول بيانات"
+HTML = "صفحة ويب"
+IMAGE = "صور"
+JAVASCRIPT = "ملف JavaScript"
+JSON = "ملف JSON"
+MARKDOWN = "ملف Markdown"
+NONE = "لا يوجد ملف"
+PCL = "ملف طباعة PCL"
+PDF = "ملف PDF"
+PDF_ENCRYPTED = "ملف PDF محمي بكلمة مرور"
+POSTSCRIPT = "ملف PostScript"
+PPT = "عرض تقديمي"
+TEXT = "ملف نصي"
+VIDEO = "فيديو"
+WORD = "مستند Word"
+XML = "ملف XML"
+XPS = "مستند XPS"
+ZIP = "أرشيف ZIP"
+
 [toolPanel]
 alpha = "ألفا"
 backToAllTools = "العودة إلى كل الأدوات"
 collapse = "طيّ اللوحة"
 expand = "توسيع اللوحة"
 goBack = "رجوع"
+pdfTools = "أدوات PDF"
 placeholder = "اختر أداة للبدء"
 premiumFeature = "ميزة Premium:"
+searchTools = "البحث في الأدوات"
 toolsHeader = "الأدوات"
 viewAllTools = "عرض كل الأدوات"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "لم يتم العثور على أدوات"
 quickAccess = "وصول سريع"
 searchPlaceholder = "ابحث عن الأدوات..."
 
-[toolPicker.categories]
-advancedTools = "أدوات متقدمة"
-recommendedTools = "أدوات موصى بها"
-standardTools = "أدوات قياسية"
-
 [toolPicker.subcategories]
 advancedFormatting = "تنسيق متقدم"
 automation = "أتمتة"
@@ -9950,16 +10950,31 @@ title = "المستخدمون"
 you = "(أنت)"
 
 [users.action]
+cancelInvite = "إلغاء الدعوة"
 deleteTeam = "حذف الفريق"
 disableMfa = "إعادة ضبط MFA"
 move = "نقل إلى فريق"
 reinstate = "إعادة التفعيل"
 remove = "إزالة من المؤسسة"
+removeTeam = "إزالة من الفريق"
 rename = "إعادة تسمية الفريق"
 resetPw = "إعادة ضبط كلمة المرور"
 suspend = "تعليق"
 unlock = "فتح الحساب"
 
+[users.activity]
+daysAgo = "قبل {{count}} يوم"
+hoursAgo = "قبل {{count}} ساعة"
+justNow = "الآن"
+minutesAgo = "قبل {{count}} دقيقة"
+monthsAgo_one = "قبل شهر واحد"
+monthsAgo_other = "قبل {{count}} أشهر"
+never = "أبدًا"
+weeksAgo_one = "قبل أسبوع واحد"
+weeksAgo_other = "قبل {{count}} أسابيع"
+yearsAgo_one = "قبل سنة واحدة"
+yearsAgo_other = "قبل {{count}} سنوات"
+
 [users.cap]
 addProcessor = "+ المعالج"
 approver = "يعتمد السياسة"
@@ -9967,11 +10982,14 @@ editor = "المحرر"
 processor = "المعالج"
 
 [users.confirm]
+cancelInviteBody = "إلغاء الدعوة إلى {{email}}؟ لن يتمكنوا من الانضمام باستخدام الرابط الحالي."
+cancelInviteTitle = "إلغاء الدعوة"
 deleteTeamBody = "حذف فريق {{name}}؟ يجب أن يكون الفريق فارغًا أولًا - انقل أعضاءه إلى فريق آخر، ولا يمكن أن يظل مالكًا لأي تكوينات تكامل."
 deleteTeamTitle = "حذف الفريق"
 disableMfaBody = "إزالة تسجيل MFA الخاص بـ {{name}}؟ سيقوم بإعداده مرة أخرى عند تسجيل الدخول التالي إذا كان مطلوبًا."
 disableMfaTitle = "إعادة ضبط MFA"
 removeBody = "هل تريد إزالة {{name}} نهائيًا من المؤسسة؟ لا يمكن التراجع عن ذلك."
+removeTeamBody = "إزالة {{name}} من الفريق؟ سيحتفظون بحسابهم لكنهم سيفقدون الوصول إلى موارد هذا الفريق."
 removeTitle = "إزالة العضو"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "اسم المستخدم"
 usernameError = "يجب أن يتكون اسم المستخدم من 3 أحرف على الأقل"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "تمت الدعوة بواسطة {{who}}"
+cancel = "إلغاء"
+count = "{{count}} معلقة"
+desc = "الأشخاص المدعوون الذين لم ينضموا بعد. يحتفظون بمقعد حتى يقبلوا."
+expiresInDays_one = "تنتهي خلال يوم واحد"
+expiresInDays_other = "تنتهي خلال {{count}} أيام"
+expiresToday = "تنتهي اليوم"
+title = "الدعوات المعلقة"
+
 [users.loadError]
 description = "حدث خطأ ما أثناء الوصول إلى الخادم الخلفي، أو ليس لديك صلاحية الوصول. حاول مرة أخرى."
 title = "تعذر تحميل الأعضاء"
@@ -10212,9 +11240,11 @@ title = "المرفقات"
 
 [viewer.bookmarks]
 bookmarkTitle = "عنوان الإشارة المرجعية"
+bookmarkTitleRequired = "عنوان الإشارة المرجعية مطلوب"
 closeSidebar = "إغلاق الشريط الجانبي للإشارات المرجعية"
 collapseAll = "طي جميع الإشارات المرجعية"
 expandAll = "توسيع جميع الإشارات المرجعية"
+searchPlaceholder = "البحث في الإشارات المرجعية"
 
 [viewer.comments]
 addComment = "إضافة تعليق"
@@ -10605,30 +11635,6 @@ title = "نص العلامة المائية"
 image = "صورة"
 text = "نص"
 
-[wetSignature.tooltip]
-header = "طرق إنشاء التوقيع"
-
-[wetSignature.tooltip.draw]
-bullet1 = "تخصيص لون القلم وسماكته"
-bullet2 = "امسح وأعد الرسم حتى ترضى"
-bullet3 = "يعمل على أجهزة اللمس (الأجهزة اللوحية، الهواتف)"
-description = "أنشئ توقيعًا بخط اليد باستخدام الماوس أو شاشة اللمس. الأفضل للتوقيعات الشخصية الأصيلة."
-title = "رسم التوقيع"
-
-[wetSignature.tooltip.type]
-bullet1 = "اختر من عدة خطوط"
-bullet2 = "خصص حجم النص ولونه"
-bullet3 = "مثالي للتوقيعات الموحّدة"
-description = "أنشئ توقيعًا من نص مكتوب. سريع ومتّسق، ومناسب للمستندات التجارية."
-title = "كتابة التوقيع"
-
-[wetSignature.tooltip.upload]
-bullet1 = "يدعم PNG وJPG وغيرها من صيغ الصور"
-bullet2 = "يُوصى بالخلفيات الشفافة للحصول على أفضل النتائج"
-bullet3 = "سيتم تغيير حجم الصورة لتناسب مساحة التوقيع"
-description = "حمّل صورة توقيع مُنشأة مسبقًا. مثالي إذا كان لديك توقيع ممسوح ضوئيًا أو شعار شركة."
-title = "تحميل صورة التوقيع"
-
 [workbenchBar]
 activeFiles = "الملفات النشطة"
 annotations = "الشروح"
@@ -10652,6 +11658,7 @@ redact = "تنقيح"
 rotateLeft = "تدوير لليسار"
 rotateRight = "تدوير لليمين"
 ruler = "مسطرة / قياس"
+rulerSettings = "إعدادات المقياس"
 save = "حفظ"
 saveAll = "حفظ الكل"
 saveAs = "حفظ باسم"
diff --git a/frontend/editor/public/locales/az-AZ/translation.toml b/frontend/editor/public/locales/az-AZ/translation.toml
index 0add38451a..edb1a2091b 100644
--- a/frontend/editor/public/locales/az-AZ/translation.toml
+++ b/frontend/editor/public/locales/az-AZ/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "seçilmiş fayllar"
 font = "Şrift"
 fontSizeTooltip = "Səhifə nömrəsi mətninin ölçüsü (pt). Daha böyük rəqəmlər daha böyük mətn yaradır."
 fontTypeTooltip = "Səhifə nömrələri üçün şrift ailəsi. Sənəd üslubunuza uyğun seçin."
-genericSubmit = "Təsdiq Et"
 green = "Yaşıl"
 help = "Yardım"
-imgPrompt = "Şəkil(lər)i Seç"
 incorrectPasswordMessage = "Cari şifr yanlışdır."
 info = "Məlumat"
 invalidUndoData = "Geri alma mümkün deyil: etibarsız əməliyyat məlumatı"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Giriş razılaşması"
 logOut = "Hesabdan çıx"
 marginTooltip = "Səhifə nömrəsi ilə səhifənin kənarı arasındakı məsafə."
 moreOptions = "Daha çox seçim"
-multiPdfPrompt = "PDFləri Seç (2+)"
 never = "Heç vaxt"
 no = "Xeyr"
 noFileSelected = "Fayl seçilməyib. Zəhmət olmasa bir fayl yükləyin."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Xüsusi Səhifə Ardıcıllığı (Vergüllə ayrılmış sə
 pages = "Səhifələr"
 pageSelectionPrompt = "Xüsusi Səhifə Seçimi (1, 5, 6 tərzində vergüllə ayrılmış səhifə nömrələri listini və ya 2n+1 tərzində Funksiyalar daxil edin) :"
 password = "Şifr"
-pdfPrompt = "PDF(lər)i Seç"
 pin = "Faylı bərkid (alət icrasından sonra aktiv saxla)"
 pro = "Pro"
 processingComplete = "Faylınız hazırdır."
@@ -356,6 +352,7 @@ text = "Bu icazələr istifadəçilərin PDF ilə nə edə biləcəyini idarə e
 title = "İcazələri Dəyişdir"
 
 [addStamp]
+preview = "Möhürə önbaxış"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Əl ilə endirmələr: keçidlərə klikləyin və faylları tess
 noLanguages = "Konfiqurasiya edilmiş qovluqda tessdata dilləri tapılmadı."
 permissionNotice = "tessdata yolu yazıla bilən deyil. Endirmələr brauzerdə açılacaq; .traineddata fayllarını əl ilə tessdata qovluğuna yadda saxlayın."
 
+[admin.settings.ai.documents]
+description = "Sənədlər üzrə suallara cavab vermək üçün istifadə olunan embedding modeli və axtarış parametrlərini konfiqurasiya edin. Saxlanıldıqda AI mühərrikinə tətbiq olunur."
+title = "Sənədlər və RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Mühərrikin öz mühit etimad məlumatından istifadə etmək üçün boş buraxın. Özünüzdə yerləşdirilən tək mühərrikli quraşdırmalara tətbiq olunur."
+generic = "Embedding API açarı"
+openai = "OpenAI API açarı"
+setPlaceholder = "Saxlanılıb - cari açarı saxlamaq üçün boş buraxın"
+voyageai = "VoyageAI API açarı"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI-uyğun / Ollama embeddings endpoint-in baza URL-i, məsələn http://ollama:11434/v1. Etibarlı daxili endpoint-ə yönəlməlidir (SSRF-həssas)."
+label = "Embedding baza URL-i"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding modelinin adı. Sərbəst mətn; təkliflər yalnız ipucudur."
+label = "Embedding modeli"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Sənəd mətnini vektor embedding-lərə çevirmək üçün istifadə olunan provayder."
+label = "Embedding provayderi"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Agentin hər sorğu üçün işlədə biləcəyi maksimum axtarış sayı."
+label = "Maks. axtarışlar"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Embedding modelinin dəyişdirilməsi dərhal qüvvəyə minir, lakin əvvəlki modellə indekslənmiş sənədlər axtarışın düzgün nəticə qaytarması üçün yenidən indekslənməlidir."
+title = "Yenidən indeksləmə tələb olunur"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Embedding modelini dəyişmisinizsə, axtarışın yeni modeldən istifadə etməsi üçün mövcud sənədləri yenidən indeksləyin."
+
+[admin.settings.ai.documents.topK]
+description = "Hər axtarış üçün əldə edilən ən uyğun fraqmentlərin sayı."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling-i Python AI mühərrikinə qoşun və hansı AI imkanlarının göstəriləcəyini seçin. Dəyişikliklər yenidən başladıldıqda tətbiq olunur."
+title = "AI mühərriki"
+
+[admin.settings.ai.general.capabilities]
+description = "Ayrı-ayrı AI funksiyalarını aktiv və ya deaktiv edin. Deaktiv funksiyalar tətbiqdə gizlədilir."
+title = "İmkanlar"
+
+[admin.settings.ai.general.enabled]
+description = "Əsas açar. Söndürülü olduqda heç bir AI aləti, agenti və ya mühərrik çağırışı əlçatan deyil."
+label = "AI-ni aktiv et"
+
+[admin.settings.ai.general.features.chat]
+description = "PDF-lərlə işləmək üçün danışıq köməkçisi."
+label = "Çat köməkçisi"
+
+[admin.settings.ai.general.features.classify]
+description = "Sənədləri növünə və ya məzmununa görə avtomatik kateqoriyalaşdırın."
+label = "Sənəd təsnifatı"
+
+[admin.settings.ai.general.features.createPdf]
+description = "AI agenti vasitəsilə yeni PDF yaradın (məsələn, HTML-dən)."
+label = "Sorğudan PDF yarat"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Yüklənmiş sənədə əsaslanan suallar verin və cavablar alın."
+label = "Sənəd sualları"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Sənədləri riyazi və ədədi səhvlərə görə yoxlayın."
+label = "Riyaziyyat auditoru"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "PDF-ə AI tərəfindən yazılmış rəy şərhləri və annotasiyalar əlavə edin."
+label = "PDF şərh agenti"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Sənəd yaratma kimi daha ağır agent əməliyyatları üçün vaxt limiti."
+label = "Uzunmüddətli vaxt limiti (saniyə)"
+
+[admin.settings.ai.general.note]
+body = "AI mühərriki ayrıca xidmət kimi işləyir. Onun paylaşılan sirri"
+body2 = "konteyner mühiti dəyişəni vasitəsilə təyin olunur. Provayder API açarları bu səhifələrdə daxil edilə və ya mühərrik mühiti dəyişənləri kimi verilə bilər; burada daxil edilən açarlar saxlanıldıqda mühərrikə göndərilir."
+title = "AI mühərriki haqqında"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Axınla (token-token) verilən çat cavabları üçün vaxt limiti."
+label = "Axın vaxt limiti (saniyə)"
+
+[admin.settings.ai.general.test]
+button = "Bağlantını test et"
+failBody = "AI mühərriki cavab vermədi. URL-i, mühərrik konteynerinin işlədiyini və AI-nin aktiv olduğunu yoxlayın (aktiv etdikdən sonra yenidən başlatmaq lazımdır)."
+failTitle = "AI mühərrikinə çatmaq olmur"
+okBody = "AI mühərriki sağlamlıq yoxlamasına cavab verdi."
+okTitle = "AI mühərrikinə çatmaq olur"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Mühərrikə standart AI sorğuları üçün vaxt limiti."
+label = "Sorğu vaxt limiti (saniyə)"
+
+[admin.settings.ai.general.url]
+description = "Python AI mühərrikinin daxili URL-i, məsələn http://stirling-pdf-engine:5001."
+label = "AI mühərriki URL-i"
+
+[admin.settings.ai.limits]
+description = "AI sorğularının nə qədər iş görə biləcəyi və eyni vaxtda neçə sorğunun işləyə biləcəyi üçün qoruyucu limitlər. Saxlanıldıqda AI mühərrikinə tətbiq olunur."
+title = "Limitlər və performans"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Qoruyucu limit: çıxarılan mətni bu uzunluğu aşan AI sorğularını rədd edin."
+label = "Sorğu başına maks. simvol"
+
+[admin.settings.ai.limits.maxPages]
+description = "Qoruyucu limit: bu qədər PDF səhifəsindən çox olan AI sorğularını rədd edin."
+label = "Sorğu başına maks. səhifə"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Bütün mühərrik üzrə eyni vaxtda işləyən model çağırışlarının maksimum sayı."
+label = "Modelin maks. paralelliyi"
+
+[admin.settings.ai.models]
+description = "LLM provayderini və AI mühərrikinin istifadə etdiyi ağıllı/sürətli modelləri seçin. Saxlanıldıqda AI mühərrikinə tətbiq olunur."
+title = "Modellər və provayderlər"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API açarı"
+description = "Mühərrikin öz mühit etimad məlumatından istifadə etmək üçün boş buraxın. Özünüzdə yerləşdirilən tək mühərrikli quraşdırmalara tətbiq olunur."
+generic = "API açarı"
+openai = "OpenAI API açarı"
+setPlaceholder = "Saxlanılıb - cari açarı saxlamaq üçün boş buraxın"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI-uyğun / Ollama endpoint-in baza URL-i, məsələn http://ollama:11434/v1."
+label = "Provayder baza URL-i"
+warning = "Baza URL etibarlı daxili endpoint-ə yönəlməlidir. Mühərrik ona server tərəfli sorğular göndərəcək, buna görə etibarsız dəyər SSRF-həssasdır."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Sürətli model üçün maksimum çıxış tokenləri."
+label = "Sürətli model maks. tokenləri"
+
+[admin.settings.ai.models.fastModel]
+description = "Yüngül tapşırıqlar üçün daha ucuz, daha sürətli model. Sərbəst mətn; təkliflər yalnız ipucudur."
+label = "Sürətli model"
+
+[admin.settings.ai.models.provider]
+description = "Mühərrikin hansı LLM provayderi ilə əlaqə saxlaması."
+label = "Provayder"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Ağıllı model üçün maksimum çıxış tokenləri."
+label = "Ağıllı model maks. tokenləri"
+
+[admin.settings.ai.models.smartModel]
+description = "Mürəkkəb əsaslandırma üçün yüksək imkanlı model. Sərbəst mətn; təkliflər yalnız ipucudur."
+label = "Ağıllı model"
+
+[admin.settings.ai.saved]
+body = "Dəyişikliklər avtomatik olaraq AI mühərrikinə göndərilir."
+bodyNoPush = "Parametrlər saxlanıldı. AI mühərriki konfiqurasiyasını növbəti dəfə götürəndə tətbiq olunacaq."
+title = "AI parametrləri saxlanıldı"
+
 [admin.settings.badge]
 clickToUpgrade = "Plan detalları üçün klikləyin"
 
@@ -938,6 +1094,25 @@ label = "Başlanğıcda yenidən yarat"
 description = "Sertifikatın etibarlı olacağı gün sayı"
 label = "Sertifikatın etibarlılığı (gün)"
 
+[admin.settings.folderAccess]
+description = "Qovluq mənbələri və qovluq çıxışlarının oxuya və yaza biləcəyi direktoriyalar. Bu təhlükəsizlik sərhədidir: avtomatlaşdırmalar heç vaxt bu siyahıdan kənar server yoluna yönəldilə bilməz."
+securityNote = "Qovluq mənbələri və çıxışlarını tamamilə deaktiv etmək üçün bunu boş buraxın. Stirling-in öz konfiqurasiya direktoriyası həmişə qadağandır."
+title = "Qovluq girişi"
+
+[admin.settings.folderAccess.implied]
+description = "Stirling tərəfindən idarə olunan bu direktoriyalara həmişə icazə verilir və burada dəyişdirilə bilməz."
+serverStorage = "Server fayl yaddaşı"
+title = "Həmişə icazəlidir"
+watchedFolder = "Pipeline izlənən qovluğu"
+
+[admin.settings.folderAccess.roots]
+add = "Əlavə et"
+empty = "Heç bir qovluğa icazə verilmir. Qovluq mənbələri və çıxışları hazırda deaktivdir."
+hint = "Mütləq yollar daxil edin, məsələn /data/inbox."
+label = "İcazə verilən qovluq kökləri"
+placeholder = "/data/inbox"
+remove = "Qovluq kökünü sil"
+
 [admin.settings.general]
 description = "Brendinq və standart davranış daxil olmaqla sistem üzrə tətbiq ayarlarını konfiqurasiya edin."
 system = "Sistem"
@@ -1842,6 +2017,15 @@ export = "İxrac"
 accessDenied = "Giriş rədd edildi"
 insufficientPermissions = "Bu əməliyyatı yerinə yetirmək üçün icazəniz yoxdur."
 
+[auth.callback]
+completing = "Autentifikasiya tamamlanır"
+invalidToken = "OAuth girişi uğursuz oldu - etibarsız token."
+missingToken = "OAuth girişi uğursuz oldu - token alınmadı."
+oauthFailed = "OAuth girişi uğursuz oldu. Yenidən cəhd edin."
+pleaseWait = "Girişinizi tamamlayana qədər gözləyin."
+signedOut = "Siz hesabdan çıxmısınız. Yenidən daxil olun."
+windowMayClose = "Tamamlandıqdan sonra bu pəncərəni bağlaya bilərsiniz."
+
 [auth.displayName]
 guest = "Qonaq"
 user = "İstifadəçi"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "PDF sənədlərini JavaScript və daxil edilmiş fayllar k
 description = "Bu alət məzmununa əsasən PDF fayllarını avtomatik olaraq yenidən adlandırır. Sənədi analiz edərək mətndən ən uyğun başlığı tapır."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Avtomatik döndər"
+tags = "avtomatik döndər,orientasiyanı düzəlt,tərsinə,yan tərəfə,düzləndir,orientasiya,orientasiyanı aşkar et,dönməni düzəlt,avtomatik orientasiya,skan edilmiş,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Etibar həddi"
+
+[autoRotate.detectionMode]
+auto = "Avtomatik"
+osd = "Yalnız OCR"
+text = "Yalnız mətn"
+title = "Aşkarlama üsulu"
+
+[autoRotate.error]
+failed = "PDF avtomatik döndərilərkən xəta baş verdi."
+
+[autoRotate.inferUndetected]
+title = "Aşağı etibarlı səhifələri uyğunlaşdırmaq üçün döndər"
+
+[autoRotate.report]
+applied = "{{degrees}}° saat əqrəbi istiqamətində"
+confidenceValue = "Etibar {{value}}"
+noChange = "Dəyişiklik yoxdur"
+pageLabel = "Səhifə {{number}}"
+summary = "{{total}} səhifədən {{rotated}} döndərildi, {{unchanged}} olduğu kimi saxlanıldı"
+title = "Aşkarlama hesabatı"
+
+[autoRotate.report.method]
+inferred = "Uyğunlaşdırıldı"
+none = "Buraxıldı"
+osd = "OCR"
+text = "Mətn"
+
+[autoRotate.report.note]
+belowThreshold = "Həddən aşağı"
+blankPage = "Səhifə boşdur"
+inferredFromDocument = "Digər səhifələrlə eyni"
+noDominantDirection = "Qarışıq mətn istiqamətləri"
+osdFailed = "Oxuna bilən mətn tapılmadı"
+osdNoVerdict = "Hansı tərəfin yuxarı olduğunu müəyyən etmək olmadı"
+tesseractUnavailable = "OCR quraşdırılmayıb"
+tooFewGlyphs = "Çox az mətn"
+
+[autoRotate.results]
+title = "Avtomatik döndərmə nəticələri"
+
+[autoRotate.settings]
+title = "Parametrlər"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Səhifə döndərilməzdən əvvəl yoxlamanın nə qədər əmin olmalı olduğu. Daha çox səhifə döndərmək üçün azaldın, daha çox səhifəni toxunulmaz saxlamaq üçün artırın."
+title = "Etibar həddi"
+
+[autoRotate.tooltip.description]
+text = "Hər səhifənin hansı tərəfinin yuxarı olmalı olduğunu müəyyən edir və onu düzgün istiqamətə döndərir. Artıq düz olan səhifələrə toxunulmur."
+
+[autoRotate.tooltip.detectionMode]
+text = "Avtomatik əvvəlcə səhifədəki mətni oxuyur, bu kifayət etməzsə səhifəyə şəkil kimi baxır. Yalnız mətn şəkil yoxlamasını buraxır və heç vaxt skan edilməmiş sənədlər üçün ən sürətlisidir. Yalnız OCR hər səhifəni şəkil kimi qəbul edir."
+title = "Aşkarlama üsulu"
+
+[autoRotate.tooltip.header]
+title = "Avtomatik döndər"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Boş və ya demək olar ki, boş səhifələr təkbaşına yoxlanıla bilməz. Oxuna bilən bütün səhifələr eyni döndərməni tələb edirsə, bu səhifələr də onlara uyğun döndərilir."
+title = "Aşağı etibarlı səhifələri uyğunlaşdırmaq üçün döndər"
+
 [autoSizeSplitPDF]
 tags = "pdf,ayır,sənəd,nizamla"
 
@@ -2189,33 +2440,6 @@ keywords = "Açar sözlər: odd, even"
 numbers = "Nömrələr/aralıqlar: 5, 10-20"
 progressions = "Proqressiyalar: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Sertifikat Növləri"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Sistem administratorları tərəfindən idarə olunur"
-bullet2 = "Avtorizə olunmuş istifadəçilər arasında paylaşılır"
-bullet3 = "Fərdi deyil, şirkət kimliyini təmsil edir"
-bullet4 = "Ən uyğunu: Rəsmi sənədlər, komanda imzaları"
-description = "Təşkilatınız tərəfindən təqdim olunan paylaşılmış sertifikat. Şirkət miqyasında imzalama səlahiyyəti üçün istifadə olunur."
-title = "Təşkilat Sertifikatı"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "İlk istifadə zamanı avtomatik yaradılır"
-bullet2 = "İstifadəçi hesabınızla bağlıdır"
-bullet3 = "Başqa istifadəçilərlə paylaşıla bilməz"
-bullet4 = "Ən uyğunu: Şəxsi sənədlər, fərdi məsuliyyət"
-description = "İstifadəçi hesabınız üçün unikal, avtomatik yaradılan sertifikat. Fərdi imzalar üçün uyğundur."
-title = "Şəxsi Sertifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX faylı və şifrə tələb edir"
-bullet2 = "Xarici Sertifikat Orqanları tərəfindən verilə bilər"
-bullet3 = "Hüquqi sənədlər üçün daha yüksək etibar səviyyəsi"
-bullet4 = "Ən uyğunu: Hüquqi qüvvəli müqavilələr, xarici təsdiqləmə"
-description = "Öz PKCS#12 sertifikat faylınızdan istifadə edin. Sertifikat xüsusiyyətlərinə tam nəzarət verir."
-title = "Fərdi P12 yüklə"
-
 [certSign]
 awaitingSignatures = "İmzalar gözlənir"
 chooseCertificate = "Sertifikat faylını seçin"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Sertifikat mənbəyi"
 upload = "Yüklə"
 
-[certSign.tooltip.header]
-title = "İmzaların idarə olunması haqqında"
-
-[certSign.tooltip.overview]
-bullet1 = "Mövcud imzaları və onların etibarlılığını yoxlayın"
-bullet2 = "İmzalayanlar və sertifikatlar haqqında ətraflı məlumatı görün"
-bullet3 = "Sənədlərinizi qorumaq üçün yeni rəqəmsal imzalar əlavə edin"
-bullet4 = "Bir neçə fayl dəstəyi və asan naviqasiya"
-text = "Bu alət PDF-lərinizin rəqəmsal imza ilə imzalanıb-imzalanmadığını yoxlamağa və yeni rəqəmsal imzalar əlavə etməyə imkan verir. Rəqəmsal imzalar sənədi kimin yaratdığını və ya təsdiqlədiyini sübut edir və imzadan sonra dəyişdirilib-dəyişdirilmədiyini göstərir."
-title = "Bu alət nə edə bilər?"
-
-[certSign.tooltip.signing]
-bullet1 = "PEM, PKCS12, JKS və server sertifikatı formatlarını dəstəkləyir"
-bullet2 = "PDF-də imzanı göstərmək və ya gizlətmək seçimi"
-bullet3 = "Səbəb, məkan və imzalayanın adını əlavə edin"
-bullet4 = "Görünən imzaların yerləşdiriləcəyi səhifəni seçin"
-bullet5 = "Sadə 'Stirling-PDF ilə imzala' seçimi üçün server sertifikatından istifadə edin"
-text = "PDF-i imzalamaq üçün rəqəmsal sertifikat lazımdır (məsələn, PEM, PKCS12 və ya JKS). İmzanı sənəddə görünən etmək və ya yalnız təhlükəsizlik məqsədi ilə görünməz saxlamaq seçiminiz var."
-title = "İmzaların əlavə edilməsi"
-
-[certSign.tooltip.validation]
-bullet1 = "İmzaların etibarlı və ya etibarsız olduğunu göstərir"
-bullet2 = "İmzalayan barədə məlumatı və imzalama tarixini göstərir"
-bullet3 = "Sənədin imzadan sonra dəyişdirilib-dəyişdirilməsini yoxlayır"
-bullet4 = "Doğrulama üçün xüsusi sertifikatlardan istifadə edə bilər"
-text = "İmzaları yoxladıqda alət onların etibarlı olub-olmadığını, sənədi kimin və nə vaxt imzaladığını və imzadan sonra sənədin dəyişdirilib-dəyişdirilmədiyini bildirir."
-title = "İmzaların yoxlanması"
-
 [changeCreds]
 changeUsername = "İstifadəçi adınızı yeniləyin. Yenilədikdən sonra çıxış ediləcəksiniz."
 credsUpdated = "Hesab yeniləndi"
@@ -2824,6 +3020,7 @@ next = "Növbəti"
 preview = "Önizləmə"
 previous = "Əvvəlki"
 refresh = "Yenilə"
+remaining = "Qalıb"
 retry = "Yenidən cəhd et"
 save = "Yadda saxla"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analitika"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Qabaqcıl monitorinq"
-allInOneWorkspace = "Hər şey bir yerdə PDF iş məkanı (baxış, alətlər və agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Ayrı-ayrı dəstək və SLA-lar"
-fasterThroughput = "10x daha sürətli işləmə"
-fullyPrivateFiles = "Tam məxfi fayllar"
-largeFileProcessing = "Böyük faylların emalı"
-orgWideAccess = "Təşkilat üzrə giriş nəzarətləri"
-premiumAiModels = "Premium AI modelləri"
-prioritySupport = "Prioritet dəstək"
-privateDocCloud = "Məxfi Sənəd Buludu"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Təhlükəsiz API giriş"
-standardThroughput = "Standart işləmə"
-unlimitedApiAccess = "Limitsiz API girişi"
-unlimitedSeats = "Limitsiz istifadəçi yerləri"
-
 [crop]
 autoCrop = "Boşluqları avtomatik qırp"
 noFileSelected = "Kəsməyə başlamaq üçün bir PDF faylı seçin"
@@ -3346,6 +3525,7 @@ message = "Standart PDF işləyicisini təyin etmək alınmadı"
 title = "Xəta"
 
 [defaultApp.prompt]
+dontRemind = "Mənə bir daha xatırlatma"
 message = "PDF fayllarını açmaq üçün Stirling PDF-i standart tətbiqiniz edin."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Qrupları fərdiləşdir"
 dropHint = "Başlamaq üçün faylları açın"
 dropToAdd = "Drop files to add"
 expand = "Yan paneli genişləndir"
-files = "Fayllar"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive konfiqurasiya edilməyib"
 leaveMyFiles = "Mənim Fayllarımdan çıx"
+library = "PDF kitabxanası"
 myFiles = "Mənim Fayllarım"
 noFiles = "Hələ fayl yoxdur"
 openFileManager = "Fayl menecerini aç"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Əlavə et"
-addLabel = "Etiket əlavə et…"
-categoryIconAria = "{{name}} üçün ikon seç"
-createCategory = "Kateqoriya yarat"
-delete = "Kateqoriyanı sil"
 done = "Hazırdır"
-hide = "Kateqoriyanı gizlət"
-newCategory = "Yeni kateqoriya adı…"
-removeLabel = "{{name}} sil"
-rename = "Adını dəyiş"
 reset = "Defoltlara sıfırla"
-search = "Etiketləri axtar…"
-show = "Kateqoriyanı göstər"
 subtitle = "Fayllarınızı əsas kateqoriyalara qruplaşdırın. Kateqoriyaya mövcud və ya yeni etiketlər əlavə edin, adını dəyişin və ya özünüz yaradın. Kateqoriyalarınızdan heç birində olmayan fayllar “Digər” altında görünür."
 title = "Yan panel kateqoriyaları"
 
@@ -3808,6 +3977,7 @@ refresh = "Serverdən yenilə"
 remove = "Sil"
 removeVersion = "Bu versiyanı sil"
 rename = "Yenidən adlandır"
+renamed = "Adı dəyişdirildi"
 renameFolder = "Qovluğu yenidən adlandır"
 resizeFolderTree = "Qovluq ağacının ölçüsünü dəyiş (ox düymələri, daha böyük addımlar üçün Shift; avto-uyğunlaşdırmaq üçün iki dəfə kliklə)"
 save = "Saxla"
@@ -3910,9 +4080,7 @@ count = "Fayllar"
 folder = "Qovluq"
 labels = "Etiketlər"
 modified = "Dəyişdirilib"
-name = "Ad"
 size = "Ölçü"
-toolHistoryAtVersion = "Toplam alət zənciri"
 totalSize = "Ümumi ölçü"
 type = "Növ"
 versionHistory = "Versiya yolu"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Hamısı saxlanıldı"
+extractCsvError = "CSV çıxarmaq alınmadı"
+extractXlsxError = "XLSX çıxarmaq alınmadı"
 flattenAfterFilling = "Doldurduqdan sonra yastılaşdır"
+requiredAbbreviation = "təl."
+requiredFieldsError = "Bütün tələb olunan sahələri doldurun"
 rescanFields = "Sahələri yenidən skan et"
 rescanFormFields = "Forma sahələrini yenidən skan et"
 save = "Saxla"
+saveShortcut = "Saxlamaq üçün Ctrl+S"
+unsavedChanges = "Saxlanılmamış dəyişikliklər"
 
 [formFill.sidebar]
 close = "Yan paneli bağla"
@@ -4309,6 +4484,11 @@ desc = "Aşkarlanmış başlığa əsasən PDF faylını avtomatik adlandırır"
 tags = "avto-aşkarlama,başlığa əsasən,təşkil et,yenidən adlandır"
 title = "PDF faylını avtomatik adlandır"
 
+[home.autoRotate]
+desc = "Hər səhifənin orientasiyasını aşkar edin və avtomatik olaraq düz vəziyyətə döndərin."
+tags = "avtomatik döndər,orientasiyanı düzəlt,tərsinə,yan tərəfə,düzləndir,orientasiya,orientasiyanı aşkar et,dönməni düzəlt,avtomatik orientasiya,skan edilmiş,OSD"
+title = "Avtomatik döndər"
+
 [home.autoSizeSplitPDF]
 tags = "avto,böl,ölçü"
 title = "Say/Ölçüyə Əsasən Avtomatik Ayır"
@@ -4608,13 +4788,13 @@ hint = "PDF üzərinə yerləşdirmək üçün PNG, JPG, SVG və ya başqa şək
 label = "Şəkil yüklə"
 placeholder = "Şəkil faylını seç"
 
-[imageToPdf]
-tags = "çevirmə,şəkil,jpg,fotoşəkil,foto"
-
 [imageToPDF]
 header = "Şəkli PDF-ə"
 title = "Şəkli PDF-ə"
 
+[imageToPdf]
+tags = "çevirmə,şəkil,jpg,fotoşəkil,foto"
+
 [infoBanner]
 dismiss = "Bağla"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Siz dəvət olunmusunuz!"
 
 [landing]
 addFiles = "Fayllar əlavə et"
-heroSubtitle = "Başlamaq üçün mövcud PDF-i sürüyüb buraxın və ya əlavə edin."
 mobileUpload = "Mobil cihazdan yüklə"
 openFromComputer = "Komputerdən aç"
 uploadFromComputer = "Kompüterdən yüklə"
-workbenchEmptyStateHero = "PDF-i istənilən yerə buraxın"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Daxil ol"
 magicLinkSent = "Sehrli link {{email}} ünvanına göndərildi! Zəhmət olmasa e-poçtunuzu yoxlayın və daxil olmaq üçün linkə klikləyin."
 mfaCode = "Doğrulama kodu"
 mfaRequired = "İki faktorlu doğrulama kodu tələb olunur"
+noAccount = "Hesabınız yoxdur?"
 or = "Və ya"
 password = "Parol"
 passwordChangedSuccess = "Parol uğurla dəyişdirildi! Zəhmət olmasa yeni parolunuzla daxil olun."
@@ -4715,26 +4894,10 @@ signInWith = "Bununla daxil ol"
 title = "Daxil olun"
 unexpectedError = "Gözlənilməz xəta: {{message}}"
 updatePassword = "Şifrəni yenilə"
-useEmailInstead = "E-poçt ilə daxil olun"
 useMagicLink = "Sehrli linkdən istifadə et"
 username = "İstifadəçi adı"
 youAreLoggedIn = "Daxil oldunuz!"
 
-[login.slides.edit]
-alt = "PDF-ləri redaktə et"
-subtitle = "PDF-ləri məxfiləşdirmək, imzalamaq, oxumaq və onlarla işləmək üçün onlarla alətlə axtardığınızı tapacaqsınız."
-title = "İstədiyiniz məlumatı göstərmək/qorumaq üçün PDF-ləri redaktə edin"
-
-[login.slides.overview]
-alt = "Stirling PDF icmalı"
-subtitle = "PDF-lər üçün məxfilik-öncəli bulud paketi: sənədləri çevirməyə, imzalamağa, məzmunu məxfiləşdirməyə və idarə etməyə, üstəlik 50+ güclü alət."
-title = "PDF ehtiyaclarınız üçün tək ünvan."
-
-[login.slides.secure]
-alt = "PDF-ləri qoruyun"
-subtitle = "Şifrələr əlavə edin, məzmunu məxfiləşdirin və sertifikatları asanlıqla idarə edin."
-title = "PDF-lərinizdə həssas məlumatları qoruyun"
-
 [margin]
 large = "Böyük"
 medium = "Orta"
@@ -4976,6 +5139,7 @@ pinButton = "Alətlər işləndikdən sonra fayllarınızın aktiv qalmasını i
 results = "Alət işləməyi bitirdikdən sonra, <strong>Baxış</strong> addımı nəticələrin önizləməsini bu paneldə göstərəcək və əməliyyatı geri almağa və ya faylı endirməyə imkan verəcək."
 runButton = "Alət tənzimləndikdən sonra, bu düymə seçilmiş bütün PDF-lərdə aləti işə salmağa imkan verir."
 selectCropTool = "Gəlin, <strong>Kəsmə</strong> alətini seçərək alətlərdən birinin istifadəsini nümayiş etdirək."
+stepOf = "Addım {{current}} / {{total}}"
 toolInterface = "Bu, <strong>Kəsmə</strong> alətinin interfeysidir. Gördüyünüz kimi, hələ işləmək üçün PDF faylı əlavə etmədiyimiz üçün burada çox şey yoxdur."
 workbench = "Bu, <strong>İş Masası</strong>dır - PDF-lərinizi gördüyünüz və redaktə etdiyiniz əsas sahə."
 wrapUp = "Hər şey hazırdır! Tətbiqin əsas sahələri və onlardan necə istifadə etməyi öyrəndiniz. Bu turu yenidən görmək istədiyiniz zaman <strong>Kömək</strong> düyməsini klikləyin."
@@ -4988,6 +5152,26 @@ showMeAround = "Turu göstər"
 skipForNow = "Hələlik ötür"
 skipTheTour = "Turu keç"
 
+[onboarding.checklist]
+dismiss = "Bağla"
+title = "Stirling PDF-i qurun"
+
+[onboarding.checklist.downloadDesktop]
+description = "Stirling-i kompüterinizdə yerli olaraq işlədin"
+title = "Stirling for Desktop yüklə"
+
+[onboarding.checklist.inviteTeam]
+description = "Komandanızla əməkdaşlıq edin"
+title = "Komanda üzvlərini dəvət et"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling-i yaxşılaşdırmağa kömək edin"
+title = "Anonim istifadə məlumatlarını paylaş"
+
+[onboarding.checklist.takeTour]
+description = "Qısa bələdçi ilə Stirling-in necə işlədiyini görün"
+title = "Tura başlayın"
+
 [onboarding.desktopInstall]
 body = "Stirling masaüstü tətbiq kimi ən yaxşı işləyir. Onu oflayn istifadə edə, sənədlərə daha sürətli baxa və düzəlişləri yerli olaraq kompüterinizdə edə bilərsiniz."
 selectOs = "Əməliyyat sistemini seçin"
@@ -4996,7 +5180,21 @@ titleWithOs = "{{osLabel}} üçün yüklə"
 
 [onboarding.mfa]
 authenticationCode = "Təsdiqləmə kodu"
+description = "Autentifikator tətbiqini əlaqələndirərək hesabınızı qoruyun. QR kodunu skan edin və ya quraşdırma açarını daxil edin, sonra tamamlanması üçün 6 rəqəmli kodu təsdiqləyin."
+enable = "MFA-ni aktiv et"
+enableError = "İkifaktorlu autentifikasiyanı aktiv etmək mümkün olmadı. Kodu yoxlayın və yenidən cəhd edin."
+enterCode = "Tətbiqinizdən 6 rəqəmli kodu daxil edin."
+enterCodeError = "Davam etmək üçün autentifikasiya kodunu daxil edin."
+logout = "Çıxış"
+openAuthenticator = "Google Authenticator, Authy və ya 1Password açın."
 qrCodeLoading = "QR kodunuz yaradılır…"
+regenerateQrCode = "QR kodunu yenidən yarat"
+scanQrCode = "QR kodunu skan edin və ya aşağıdakı quraşdırma açarını daxil edin."
+setupError = "İkifaktorlu quraşdırmanı başlatmaq mümkün olmadı. Yenidən cəhd edin."
+setupKey = "Quraşdırma açarı (əllə daxil etmə)"
+stepByStep = "Addım-addım"
+success = "MFA aktiv edildi. İndi davam edə bilərsiniz."
+title = "Çoxfaktorlu autentifikasiya quraşdırması"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Giriş rejimini aktivləşdirdikdən sonra istifadəçiləri idarə edə, ayarları konfiqurasiya edə və serverin vəziyyətini izləyə bilərsiniz. Serverinizdə ilk <strong>{{freeTierLimit}}</strong> nəfər Stirling-dən pulsuz istifadə edir."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin icmalı"
 userBody = "Komanda yoldaşlarını dəvət edin, rollar təyin edin və sənədlərinizi bir təhlükəsiz iş mühitində səliqəli saxlayın. Tək istifadədən böyüməyə hazır olduqda giriş rejimini aktivləşdirin."
 userTitle = "Plan icmalı"
 
+[onboarding.processorIntro]
+body = "Stirling indi <strong>Siyasətlər</strong> işlədir — hər sənəd daxil olduqda onu təsnif edən, qoruyan və emal edən avtomatlaşdırılmış qaydalar. Onları qurun və icraları <strong>Processor</strong>-də izləyin."
+cta = "Processor-ə baxın"
+title = "Stirling Processor-ə baxın"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Öncədən ödənilmiş il"
+
+[payg.prepaid.banner]
+exhausted = "Öncədən ödənilmiş tutumunuz bitib; ölçülü hesablaşma yenidən başladı. Endirimi saxlamaq üçün balansı artırın."
+expiring_one = "Öncədən ödənilmiş iliniz {{count}} günə bitir. İstifadə olunmamış tutumun müddəti bitəcək — yeni il başlatmaq üçün balansı artırın."
+expiring_other = "Öncədən ödənilmiş iliniz {{count}} günə bitir. İstifadə olunmamış tutumun müddəti bitəcək — yeni il başlatmaq üçün balansı artırın."
+low = "Öncədən ödənilmiş tutumunuzun {{pct}}%-i qalıb. Emalı fasiləsiz saxlamaq üçün istənilən vaxt balansı artırın."
+
+[payg.prepaid.card]
+subtitle = "Ölçülü hesablaşmadan əvvəl və xərc limitinizdən kənar istifadə olunur."
+title = "Öncədən ödənilmiş tutum"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} öncədən ödənilmiş kreditdən"
+expires = "Bitmə tarixi {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Bitib"
+healthy = "Kifayət qədər qalıb"
+low = "Azalır"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "E-poçtunuzdakı lisenziya açarını yapışdırın"
 success = "Lisenziya aktivləşdirildi!"
 successMessage = "Lisenziyanız uğurla aktivləşdirildi. Bu pəncərəni indi bağlaya bilərsiniz."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "tətbiq edildi"
-enforcing = "Tətbiq edilir..."
-failed = "Tətbiq etmə uğursuz oldu"
 outputsUnavailable = "Siyasət çıxışlarını yükləmək artıq mümkün deyil."
 partialOutputsUnavailable = "Bəzi siyasət çıxışlarını yükləmək artıq mümkün deyil."
-retrying = "Məşğuldur, yenidən cəhd edilir..."
 runNotFound = "Tətbiq etmə icrası artıq tapılmır."
-step = "addım {{current}}/{{total}}"
 timedOut = "Tətbiq etmə, icra tamamlanmadan vaxt aşımı oldu."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Bağla"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} tətbiq edilir"
 applyingProgress = "{{names}} tətbiq edilir ({{done}}/{{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} fayldan {{failures}} fayl işlənə bilmədi və olduğ
 failureTitle = "Tam tətbiq edilmədən ixrac edildi"
 printPolicyAppliedBody = "Bu PDF siyasətə uyğunlaşdırmaq üçün yeniləndi. Dəyişiklikləri yoxlayın, sonra yenidən çap edin."
 printPolicyAppliedTitle = "Çapdan əvvəl siyasət tətbiq edildi"
-queued = "+{{count}} növbədə"
 successTitle = "{{names}} tətbiq edildi"
 summaryMore = "{{first}}, {{second}} və daha {{more}}"
 summaryTwo = "{{first}} və {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Çevirmədən əvvəl tətbiq edilir"
-default = "Tətbiq edilir"
-export = "İxracdan əvvəl tətbiq edilir"
-input = "İdxal zamanı tətbiq edilir"
-print = "Çapdan əvvəl tətbiq edilir"
-
-[policies.field]
-accessLog = "Giriş jurnalı"
-archiveAfter = "Sonra arxivlə"
-auditTrail = "Audit izi"
-belowThreshold = "Həddən aşağı"
-destination = "Təyinat"
-frameworks = "Çərçivələr"
-immutableHold = "Dəyişdirilməz saxlama"
-keepFor = "Bu müddət saxla"
-minConfidence = "Min etibar"
-notify = "Yönləndirmədə bildir"
-onViolation = "Uyğunsuzluq olduqda"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Əlavə et"
-addPlaceholder = "Etiket əlavə et…"
-customNote = "Komandanız üçün fərdiləşdirilib."
-defaultNote = "Daxili defolt istifadə olunur, komandanızla paylaşılır."
-duplicate = "\"{{name}}\" artıq mövcuddur."
-edit = "Etiketləri redaktə et"
-empty = "Hələ etiket yoxdur."
-export = "JSON eksport et"
-iconAria = "{{name}} üçün ikon seç"
-import = "JSON import et"
-importError = "Həmin faylı import etmək mümkün olmadı."
-managedNote = "Komanda etiketləri komanda rəhbəriniz tərəfindən idarə olunur."
-modalSubtitle = "Bütün komandanızla paylaşılır. Təsnifatçı hər sənədə uyğun etiketləri seçir."
-modalTitle = "Təsnifat etiketləri"
-pickIcon = "{{label}} ikonundan istifadə et"
-removeAria = "{{name}} sil"
-resetToDefault = "Defolta sıfırla"
-saveForTeam = "Komanda üçün saxla"
-saving = "Saxlanılır…"
-sectionLabel = "Təsnifat etiketləri"
-startFromScratch = "Sıfırdan başla"
-teamCount = "komanda etiketləri"
-tooLong = "Etiketlər ən çox {{max}} simvol ola bilər."
-ungrouped = "Qruplaşdırılmamış"
-view = "Etiketləri göstər"
+categoryCount = "kateqoriyalar"
+hideCategory = "Kateqoriyanı gizlət"
+labelCount = "etiketlər"
+sharedNote = "Bu etiketlər daxili quruludur və bütün komandanızla paylaşılır."
+showCategory = "Kateqoriyanı göstər"
 
 [policies.pii]
 account = "Hesab nömrələri (etiketlənmiş)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "ABŞ routing nömrələri (ABA)"
 ssn = "Sosial Təminat nömrələri"
 
-[policies.settings]
-noneExport = "Hazırda eksport zamanı heç bir siyasət işləmir."
-noneUpload = "Hazırda yükləmə zamanı heç bir siyasət işləmir."
-onExport = "Eksport zamanı"
-onUpload = "Yükləmə zamanı"
-reorderHandle = "Sıralamaq üçün sürüklə"
-runOrderDesc = "Eyni tetikləyicidə birdən çox siyasət işlədikdə, onlar bu ardıcıllıqla işləyir — hər biri əvvəlki siyasətin çıxışında. Sıralamaq üçün sürükləyin."
-title = "Siyasət ayarları"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Siyasət seçimləri"
-policySettings = "Siyasət ayarları"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Uğursuz siyasətləri yenidən cəhd et ({{count}})"
-rowProgress = "{{total}} fayldan {{completed}} emal edildi"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Siyasət nədir?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Sosial Təminat və kart nömrələri kimi həssas detalları avtomatik tapır və qaraldır ki, sənəddə oxunmasın."
-sanitize = "Fayldan gizli JavaScript-i silir ki, kimsə onu açanda heç nə avtomatik işləməsin."
-watermark = "Hər səhifənin üzərinə görünən bir işarə (məs., \"Confidential\") qoyur."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Bağla"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} tətbiq edilir..."
 badgeRan = "{{name}} siyasəti bu faylda işlədi"
+badgeRunning = "{{name}} işləyir..."
 blockingAction = "Siyasət tətbiq edilərkən {{action}} bloklandı, lütfən gözləyin..."
 dismiss = "Örtüyü bağla"
 enforcingTitle = "Siyasət tətbiq edilir..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Faylı göstər (siyasət hələ tətbiq edilir)"
 [policyOption]
 autoRedactPhi = "PHI-ni avtomatik redaktə et"
 blockExport = "Eksportu blokla"
+ccpa = "CCPA"
 contracts = "Müqavilələr"
 documents = "Sənədlər"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor planı"
 subscribed = "Processor planı"
 unlinked = "Bağlanmayıb"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Sənəddən başlat"
-sectionsAriaLabel = "Agent qurucusu bölmələri"
-selectorAriaLabel = "Agentlər"
-subtitle = "Sənədlərinizi təsnif edən, onlardan çıxarış edən və yönləndirən AI agentlərini dizayn edin, test edin və yayımlayın. Ssenarilər müəyyən edin, alət girişini məhdudlaşdırın, qızıl dəst işlədin və versiya dərc edin."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Ləğv et"
-dropzoneText = "Nümunə sənəd seçin (PDF və ya şəkil)"
-lead = "Nümunə sənəd buraxın, biz isə təkmilləşdirə biləcəyiniz ssenarilər və çıxarış sxemi təklif edək. Siz nəzərdən keçirməyənə qədər heç nə dərc edilmir."
-submit = "Agenti başlat"
-subtitle = "Bir təmsilçi fayldan yeni agent üçün əsas yaradın"
-title = "Sənəddən başlat"
-
-[portal.agentBuilder.empty]
-description = "Nümunə sənəddən agenti başladın ki, ssenariləri və çıxarış sxemi üçün əsas yaransın, sonra təkmilləşdirib dərc edin."
-title = "Hələ agent yoxdur"
-
-[portal.agentBuilder.evals]
-casesPassing = "Keçən hallar"
-columnCase = "Qiymətləndirmə halı"
-columnLatency = "Gecikmə"
-columnResult = "Nəticə"
-fail = "uğursuz"
-goldenSetPassRate = "Qızıl dəst keçid faizi"
-latencyMs = "{{ms}} ms"
-notRun = "işlədilməyib"
-pass = "keçdi"
-passRate = "Keçid faizi"
-runEvals = "Qiymətləndirmələri işə sal"
-
-[portal.agentBuilder.evals.empty]
-description = "Qiymətləndirmələr ssenarilərinizi təkrarlana bilən qızıl dəstə çevirir. Keçid faizini zamanla izləmək və dərc etmələri onunla məhdudlaşdırmaq üçün yüksəldin."
-title = "Hələ qızıl dəst yoxdur"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "qızıl dəstlər üzrə"
-activeAgents = "Aktiv agentlər"
-avgPassRate = "Orta qiymətləndirmə keçid faizi"
-fleetWide = "bütün park üzrə"
-latestPublished = "Son dərc edilən"
-scenarios = "Ssenarilər"
-testCases = "test halları"
-totalDescription_one = "cəmi {{count}}"
-totalDescription_other = "cəmi {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Əlavə et"
-addScenario = "Ssenari əlavə et"
-enable = "Aktiv et"
-expectationLabel = "Gözlənilən davranış"
-expectationPlaceholder = "Agent nə etməlidir"
-inEval = "qiymətləndirmədə"
-mute = "Səssizə al"
-muted = "səssizə alınıb"
-nameLabel = "Ad"
-namePlaceholder = "məs. Uyğunluq eskalasiyası"
-
-[portal.agentBuilder.tabs]
-evals = "Qiymətləndirmələr"
-scenarios = "Ssenarilər"
-tools = "Alətlər"
-versions = "Versiyalar"
-
-[portal.agentBuilder.tools]
-broadAccess = "Geniş giriş"
-deniedHint = "Seçilmiş alətlər bloklanıb. Qalan hər şey çağırıla bilər."
-deniedTools = "Rədd edilmiş alətlər"
-governanceGate = "Alət idarəetməsi Enterprise planında mövcuddur."
-restricted = "Məhdudlaşdırılıb"
-restrictedAccess = "Məhdud alət girişi"
-restrictedDescription = "Aşağıda rədd etdiklərinizdən başqa bütün alətlərə icazə verin."
-
-[portal.agentBuilder.versions]
-current = "cari"
-historyGate = "Tam versiya tarixçəsi və geri qaytarma Enterprise planında mövcuddur."
-publish = "Dərc et"
-rollBack = "Geri qaytar"
-
 [portal.assistant]
 close = "Köməkçini bağla"
 error = "Köməkçiyə çatmaq mümkün olmadı."
@@ -6365,9 +6346,21 @@ typing = "Yazır"
 loading = "Yüklənir"
 redirectingToEditor = "Redaktora yönləndirilir..."
 
+[portal.billing.activation]
+maybeLater = "Bəlkə sonra"
+title = "Processor-i aktiv edin"
+
+[portal.billing.activation.payg]
+sub = "Aylıq limit təyin edin. İşlətdiyiniz qədər ödəyin."
+title = "İstifadə etdikcə ödə"
+
+[portal.billing.activation.prepay]
+badge = "2 ay pulsuz"
+sub = "Bir faktura, kart və ya bank köçürməsi."
+title = "Bir ili öncədən ödə"
+
 [portal.billing.checkout]
 noClientSecret = "Edge funksiyası client_secret qaytarmadı."
-subtitle = "Pulsuz Editor planı limitinizi keçdikdən sonra davam etmək üçün kart əlavə edin. Qalanını Stripe idarə edir."
 title = "Processor planını aktiv edin"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Ödənişiniz uğurlu oldu, lakin aktivləşdirmə adətən olduğundan
 close = "Bağla"
 title = "Demək olar hazırdır"
 
+[portal.billing.checkout.cap]
+amountAria = "Aylıq xərc limiti"
+back = "Geri"
+continue = "Ödənişə davam et"
+error = "Xərc limitinizi təyin etmək alınmadı"
+finePrint = "Fakturalar aylıq göndərilir. İstənilən vaxt ləğv edin."
+noLimit = "Limitsiz"
+note = "Heç vaxt limitinizdən artıq hesablanmır. Emal sadəcə dayandırılır."
+perMonth = "/ ay"
+title = "Xərc limitinizi təyin edin"
+
+[portal.billing.checkout.card]
+fields = "Kart nömrəsi · MM / YY · CVC · ZIP"
+label = "Kart məlumatları"
+note = "Kart məlumatları Stripe tərəfindən toplanır. Stirling heç vaxt PAN və ya CVC saxlamır."
+
 [portal.billing.checkout.error]
 title = "Checkout başlatmaq mümkün olmadı"
 
@@ -6383,10 +6392,9 @@ body = "Ödənişiniz keçdi. Bağlanmış instansiyalarınızda ölçülü emal
 hint = "Lütfən, bu pəncərəni açıq saxlayın."
 title = "Processor planınız aktivləşdirilir..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "portal env-də tətbiqdaxili checkout-u aktivləşdirmək üçün."
-bodyBefore = "Ayarla"
-title = "Stripe konfiqurasiya edilməyib"
+[portal.billing.checkout.pay]
+limit = "Aylıq xərc limiti {{amount}}/ay. Limitə çatdıqda emal dayandırılır."
+limitNoCap = "Xərc limiti yoxdur. Emal dayandırılmayacaq. Fakturalar aylıq göndərilir."
 
 [portal.billing.enterpriseUpsell]
 cta = "Enterprise təklifinizi qurun"
@@ -6409,10 +6417,12 @@ currentPlan = "Cari plan"
 freeForever = "Həmişə pulsuz"
 noTeamResolved = "Pul kisənizdə hələ komanda müəyyən edilməyib — yeniləyin və yenidən cəhd edin."
 ownerOnly = "Yalnız komanda sahibi Processor planını aktiv edə bilər."
+payInvoice = "Tamamlamaq üçün fakturanı ödə"
 planName = "Editor"
 ssoIncluded = "SSO daxildir"
 switchOnProcessor = "Processor-u aktiv et →"
 unlimitedUsers = "Limitsiz istifadəçi"
+viewQuote = "Təklifi göstər"
 
 [portal.billing.invoices]
 columnAmount = "Məbləğ"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Birbaşa API sorğuları"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Avtomatlaşdırmalar və boru xətləri"
 segmentAutomationLabel = "Avtomatlaşdırma"
+sizeMultiplier = "{{formatted}} PDF ölçü çarpanından istifadə etdi"
+summary = "{{unique}} unikal · {{units}} sayğac vahidi · PDF başına orta {{avg}}"
+summaryNoRate = "{{unique}} unikal · {{units}} sayğac vahidi"
 unit = "ölçülü PDF-lər"
+unitsPending_one = "{{units}} sayğac vahidi əlaqələndirilmiş instansiyalardan sinxronizasiya gözləyir"
+unitsPending_other = "{{units}} sayğac vahidi əlaqələndirilmiş instansiyalardan sinxronizasiya gözləyir"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} öncədən ödənilmiş kreditdən"
+expires = "Bitmə tarixi {{date}}"
+eyebrow = "Öncədən ödənilmiş tutum"
+note = "Ölçülü hesablaşmadan əvvəl və xərc limitinizdən kənar istifadə olunur."
+topUp = "Balansı artır"
+
+[portal.billing.prepaid.buy]
+back = "Geri"
+calcTitle = "İllik ödənişinizi hesablayın"
+cancel = "Ləğv et"
+cancelPurchase = "Alışı ləğv et"
+close = "Bağla"
+continueToPayment = "Ödənişə davam et"
+finalise = "Tamamla"
+invoiceErrorTitle = "Fakturanı yaratmaq alınmadı"
+loadingTitle = "Təklifiniz yüklənir"
+payTitle = "İliniz üçün ödəniş edin"
+step = "Addım {{current}} / {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Dəyiş"
+deployRow = "Yerləşdirmə"
+done = "Hazır"
+enterpriseHint = "Bu, enterprise miqyasındadır. Bu həcmdə enterprise tarifləri istənilən özünəxidmət endirimindən daha sərfəlidir. Tarif kilidi, şərtlər və dəqiqələr ərzində təklif."
+governanceRow = "İdarəetmə"
+governanceValue = "{{label}} · {{count}} siyasət"
+handlesLabel = "Processor-iniz"
+handlesValue = "{{volume}} kredit / ay emal edir"
+pipelinesLabel = "Pipeline-lar"
+policiesMeta = "{{count}} siyasət"
+poolCaption = "İl üçün {{credits}} kreditdən ibarət bir hovuz. Ağır aylar yüngül aylardan borc götürür."
+priceLabel = "İliniz · 10 ay qiymətinə 12 ay"
+rateUnknown = "Dəqiq qiyməti checkout-da göstərəcəyik."
+savings = "{{amount}} qənaət edirsiniz · 2 ay pulsuz."
+sizingRow = "Ölçüləndirmə"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Ümumi istifadəçilər"
+
+[portal.billing.prepaid.consent]
+label = "Anlayıram ki, öncədən ödənilmiş tutumum bitdikdə və ya 12 aydan sonra müddəti başa çatdıqda, ləğv etməsəm, emal standart ölçülü istifadə etdikcə ödə tarifi ilə (xərc limitimə qədər) avtomatik davam edəcək və istənilən vaxt billing portalından ləğv edə bilərəm."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling tərəfindən idarə olunur. Dəqiqələr ərzində hazırdır."
+cloudValue = "Stirling Cloud · İdarə olunur"
+selfhost = "Self-hosted"
+selfhostDesc = "Şəxsi infrastrukturda işləyir. Eyni tarif."
+selfhostValue = "Self-hosted · Şəxsi infrastruktur"
+
+[portal.billing.prepaid.offer]
+cta = "Təklifi nəzərdən keçir"
+subtitle = "PDF emalının bir ilini öncədən ödəyin və iki ay pulsuz əldə edin; ölçülü hesablaşmadan əvvəl, xərc limitinizdən kənar istifadə olunur."
+title = "10 ay qiymətinə 12 ay əldə edin"
+
+[portal.billing.prepaid.pay]
+accountName = "Hesab sahibinin adı"
+accountNamePlaceholder = "məs. Jane Smith"
+companyName = "Şirkət adı (istəyə bağlı)"
+companyNamePlaceholder = "məs. Acme Inc."
+downloadInvoice = "Fakturanı yüklə"
+payOnline = "Onlayn ödə"
+poNumber = "PO nömrəsi (istəyə bağlı)"
+poNumberPlaceholder = "məs. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Təkmil"
+advancedDesc = "Pipeline-lar emalınızın çoxunu idarə edir."
+none = "Heç biri"
+noneDesc = "Hələ Pipeline işlətmirsiniz. İstənilən vaxt aktiv edin."
+standard = "Standart"
+standardDesc = "Bir neçə Pipeline daxil olan PDF-ləri yenidən emal edir."
+
+[portal.billing.prepaid.posture]
+essentials = "Əsaslar"
+essentialsDesc = "Təsnifat, standart olaraq, üstəlik Paylaşım"
+governed = "İdarə olunan"
+governedDesc = "Təhlükəsizlik və Marşrutlaşdırma əlavə edir"
+regulated = "Tənzimlənən"
+regulatedDesc = "Bütün kateqoriyalar, o cümlədən Uyğunluq, Saxlama, Daxiletmə"
+
+[portal.billing.prepaid.review]
+download = "Təklifi yüklə (PDF)"
+downloading = "Hazırlanır…"
+share = "təsdiq üçün paylaş"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "25 MB-dan kiçik fayllar, məlumat haqqı yoxdur"
+heavy = "Ağır"
+heavyDesc = "Skan edilmiş və ya şəkil-ağırlıqlı, adətən 50 MB+"
+standard = "Standart"
+standardDesc = "Əsasən kiçik, bəzi skanlar 25 MB-dan yuxarı"
+
+[portal.billing.prepaid.state]
+exhausted = "Bitib"
+healthy = "Kifayət qədər qalıb"
+low = "Azalır"
 
 [portal.billing.spendLimit]
 adjustLimit = "Limiti tənzimlə"
@@ -6494,6 +6608,8 @@ label = "Aşacağı proqnozlaşdırılır."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Bu ay xərc"
+freeRemaining_one = "{{formatted}} pulsuz PDF qalıb"
+freeRemaining_other = "{{formatted}} pulsuz PDF qalıb"
 processed_one = "{{formattedCount}} PDF emal edildi."
 processed_other = "{{formattedCount}} PDF emal edildi."
 processedWithRate_one = "{{formattedCount}} PDF emal edildi, hər biri {{rate}}."
@@ -6534,6 +6650,350 @@ signature = "imza"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Yeni bağlantı"
+createTitleFor = "{{name}} qoş"
+delete = "Sil"
+edit = "Redaktə et"
+editTitle = "Bağlantını redaktə et"
+unsupportedType = "Bu bağlantı növü burada redaktə edilə bilməz."
+
+[portal.connections.categories.advanced]
+description = "Hələ dəstəkləmədiyimiz xidmət üçün."
+label = "Təkmil"
+
+[portal.connections.categories.audit]
+description = "Sənədlə nə baş verdiyini auditorlarınızın artıq baxdığı yerdə qeyd edin."
+label = "Audit və uyğunluq jurnalı"
+
+[portal.connections.categories.notify]
+description = "Başqa sistemə nəyinsə baş verdiyini bildirin."
+label = "Bildiriş və iş axını"
+
+[portal.connections.categories.security]
+description = "Sənəd hərəkət etməzdən əvvəl onu skan edin və ya etiketləyin."
+label = "Təhlükəsizlik və təsnifat"
+
+[portal.connections.categories.signing]
+description = "Sənədi imzalanmaq və ya notarial təsdiq üçün göndərin."
+label = "Elektron imza və notarial təsdiq"
+
+[portal.connections.categories.storage]
+description = "Emal edilmiş sənədlərin getdiyi yer - bucket, drive, ticket və ya səhifə."
+label = "Fayl və əlavə"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling bunu şifrəli saxlayır və bir daha göstərmir."
+label = "Giriş tokeni"
+
+[portal.connections.commonFields.apiKey]
+label = "API açarı"
+
+[portal.connections.commonFields.apiToken]
+label = "API tokeni"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Bu bağlantıdan istifadə edən addımlar yalnız bu URL altındakı yollara müraciət edə bilər, başqa host-a yox."
+label = "Server URL-i"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Şifrə"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "İstifadəçi adı"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Xidmətin sizə verdiyi URL-i yapışdırın. Yalnız onun altındakı yollara müraciət edilə bilər."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Bağlantı adı"
+namePlaceholder = "məs. Production"
+
+[portal.connections.picker]
+cancel = "Ləğv et"
+createNew = "Yeni bağlantı..."
+placeholder = "Bağlantı seçin"
+save = "Bağlantını saxla"
+
+[portal.connections.picker2]
+back = "İnteqrasiyanı dəyiş"
+heading = "Nəyə qoşulmaq istəyirsiniz?"
+noResultsBody = "Bunu hələ dəstəkləmirik - bizə bu barədə məlumat verin və əlavə etməyi nəzərdən keçirək."
+noResultsTitle = "\"{{query}}\" ilə uyğun heç nə yoxdur"
+searchPlaceholder = "İnteqrasiyaları axtarın - \"sign\", \"ocr\" və ya məhsul adı sınayın"
+
+[portal.connections.types.api]
+description = "Siyasətdən istənilən HTTP API-ni çağırın. URL-i, autentifikasiyanı və payload-u siz seçirsiniz."
+label = "Fərdi API"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentifikasiya"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "İstifadəçi adı və şifrə"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Fərdi header-də token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Heç biri"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Token üçün daxil ol"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Bu bağlantıdan istifadə edən addımlar yalnız bu URL altındakı yollara müraciət edə bilər, başqa host-a yox."
+label = "Baza URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header adı"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Giriş yolu"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Şifrə"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "API yükləmə linki ilə cavab verərsə, yalnız bu host-lar əldə edilə bilər. Vergüllə ayırın. Yalnız baza URL-in öz host-una icazə vermək üçün boş buraxın."
+label = "İcazə verilən nəticə host-ları"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Tokeni bu header kimi göndər"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Giriş çağırışının tokeni qaytardığı cavab header-i, məsələn X-Auth-Token."
+label = "Token cavab header-i"
+
+[portal.connections.types.api.fields.username]
+label = "İstifadəçi adı"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "İşlətdiyiniz serverdə sənədləri zərərli proqramlara görə skan edin - heç nə şəbəkənizdən çıxmır."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Siyasətdə sənədlər üçün virus və məzmun skanı."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Yalnız məlum zərərli proqramları deyil, makroslar, icra edilə bilən fayllar, skriptlər və ya daxil edilmiş obyektlər olan sənədləri bloklayın."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Emal edilmiş sənədləri Confluence səhifəsinə əlavə edin."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Sənədləri elektron imza və notarial təsdiq üçün ConsignO Cloud (Notarius)-a göndərin."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "/api/v1 daxil olmaqla ConsignO Cloud mühitiniz."
+label = "Server URL-i"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API açarı"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API sirri"
+
+[portal.connections.types.consigno.fields.password]
+label = "Şifrə"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Yalnız təşkilatınız tenant-lardan istifadə edirsə lazımdır."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "İstifadəçi adı"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Siyasət sənədi emal etdikdə Discord-a mesaj göndərin."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Siyasət hər sənədi işlədikdə Elasticsearch-də audit hadisəsini indeksləyin."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Yeni sənədlər üçün FTP və ya FTPS serverini yoxlayın."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Bağlantı rejimi"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktiv"
+passive = "Passiv (tövsiyə olunur)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Adi FTP etimad məlumatlarını və faylları şifrələmədən göndərir; server dəstəkləyirsə FTPS seçin."
+label = "Şifrələmə"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (açıq / AUTH TLS)"
+implicit = "FTPS (gizli)"
+none = "Heç biri (adi FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Siyasət işlədikdə Google Chat məkanına mesaj göndərin."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Emal edilmiş sənədləri Jira məsələsinə əlavə edin."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Siyasət işlədikdə sənəd və ya bildirişi email ilə göndərin."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Emal edilmiş sənədləri Nextcloud-a yerləşdirin."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Tətbiq şifrəsi"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "İşlətdiyiniz Presidio serverindən istifadə edərək sənəd mətnində şəxsi məlumatları aşkar edin."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "PDF-lərdə Microsoft Purview həssaslıq etiketlərini oxuyun və tətbiq edin."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "İstəyə bağlı. Yalnız etiketləri adla seçmək üçün lazımdır; etiketləmə onsuz da işləyir."
+label = "Tətbiq (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client sirri"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Hər etiketə SiteId kimi vurulur ki, Purview-uyğun alətlər onu hansı təşkilatın tətbiq etdiyini bilsin."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Mənbələrin oxuya və pipeline çıxışlarının yaza biləcəyi S3 bucket."
+label = "S3 yaddaş"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Giriş açarı ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS üçün boş buraxın. MinIO və ya başqa S3-uyğun yaddaş üçün bunu təyin edin."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Gizli giriş açarı"
+
+[portal.connections.types.sendgrid]
+description = "Siyasət işlədikdə sənəd və ya bildirişi email ilə göndərin."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Yeni sənədlər üçün SFTP (SSH) serverini yoxlayın."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "İstəyə bağlı. Serverin SHA-256 host açarı barmaq izi (`ssh-keyscan host | ssh-keygen -lf -` nəticəsindən). Təyin edildikdə yalnız bu açarı təqdim edən server qəbul olunur; boş olduqda ilk qoşulmada görünən açar sabitlənir və sonrakı dəyişikliklər rədd edilir."
+label = "Host açarı barmaq izi"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Açar passphrase-i"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Əvəzində private key ilə autentifikasiya edirsinizsə boş buraxın."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "İstəyə bağlı. Şifrə əvəzinə açarla autentifikasiya etmək üçün OpenSSH private key yapışdırın."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Siyasət sənədi emal etdikdə Slack-ə mesaj göndərin."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS şəbəkə paylaşımını izləyin (Windows və ya Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Şəbəkə paylaşımı"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "İstəyə bağlı. Serveriniz istifadə edirsə Windows domain-i və ya iş qrupu."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Paylaşım"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Siyasət hər sənədi işlədikdə Splunk-a audit hadisəsi göndərin."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Sumo Logic HTTP kollektoruna audit hadisəsi göndərin."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Siyasət işlədikdə Teams kanalına mesaj göndərin."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Hər sənədi və ya sadəcə detalları seçdiyiniz URL-ə göndərin."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Siyasətdən Zap və ya Make ssenarisini tetikləyin."
+label = "Zapier və Make"
+
+[portal.docs]
+browse = "Sənədlərə bax"
+viewSource = "Mənbəni GitHub-da göstər"
+
 [portal.docs.authentication]
 codeCaption = "hər sorğu"
 eyebrow = "BAŞLANĞIC"
@@ -6619,11 +7079,19 @@ title = "Rəsmi SDK-lar"
 beta = "Beta"
 deprecated = "Köhnəlmiş"
 
+[portal.docs.search]
+empty = "Uyğun sənəd yoxdur"
+placeholder = "Sənədlərdə axtar"
+results = "{{count}} nəticə"
+
 [portal.docs.skills]
 eyebrow = "BACARIQLAR"
 lead = "Agentinizin tək alət kimi çağırdığı paketlənmiş, adlandırılmış imkanlar. Hər bacarıq əlavə edilmiş qiymətləndirmələri olan deterministik əməliyyat zənciridir."
 title = "Agent bacarıqları"
 
+[portal.docs.toc]
+title = "Bu səhifədə"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API İSTİNADI"
@@ -6697,6 +7165,8 @@ type = "Növ"
 user = "İstifadəçi"
 
 [portal.documents.queue.empty]
+connectSource = "Mənbə qoş"
+createPipeline = "Pipeline yarat"
 description = "Mənbələr sənədləri pipeline-larınıza ötürdükcə onlar nəzərdən keçirmək üçün burada görünəcək."
 title = "Növbədə sənəd yoxdur"
 
@@ -6806,13 +7276,71 @@ description = "Bu görünüşdə gözlənilməz xəta baş verdi. Yenidən cəhd
 retry = "Yenidən cəhd et"
 title = "Bu səhifədə nəsə səhv getdi"
 
+[portal.home.download]
+back = "Geri"
+body = "Desktop tətbiqini yükləyin və ya serveri self-host edin."
+done = "Hazır"
+guide = "{{name}} bələdçisini aç"
+openInBrowser = "Əvəzinə brauzerdə aç"
+sectionDesktop = "Desktop tətbiqi"
+sectionSelfHosted = "Self-hosted"
+title = "Stirling PDF Editor quraşdır"
+
+[portal.home.download.docker]
+detailBody = "Rəsmi image-i serverinizdə işlədin."
+note = ":8080-da açılır. Standart giriş: admin / stirling."
+tagline = "Serveri konteynerdə işlədin"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standart"
+
+[portal.home.download.kubernetes]
+detailBody = "Rəsmi Helm chart-ını quraşdırın."
+note = "Ayarları saxlamaq üçün /configs üçün PVC əlavə edin."
+tagline = "Helm ilə cluster-ə yerləşdirin"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Distribusiyanız üçün native build-lər."
+guideBtn = "Linux quraşdırma seçimlərinə baxın"
+note = "Ümumi distro-lar üçün AppImage, .deb və .rpm build-ləri mövcuddur."
+tagline = "Distro-nuz üçün native desktop tətbiqi"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Və ya Homebrew vasitəsilə"
+detailBody = "Quraşdırıcını işə salın və ya Homebrew istifadə edin."
+downloadBtn = "macOS üçün endir"
+tagline = "Apple silicon və Intel üçün native tətbiq"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = ".jar faylını bare metal serverdə işə salın."
+downloadBtn = ".jar faylını endir"
+note = "Java 21+ tələb olunur. :8080-də açılır; standart giriş admin / stirling."
+runLabel = "Sonra bunu işə salın"
+tagline = ".jar faylını bare metal serverdə işə salın"
+title = "Manual server quraşdırması"
+
+[portal.home.download.windows]
+altLabel = "Və ya winget vasitəsilə"
+detailBody = "Quraşdırıcını işə salın və ya paket meneceri istifadə edin."
+downloadBtn = "Quraşdırıcını endir"
+tagline = "Microsoft Windows üçün native tətbiq"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktiv"
-invite = "Komanda yoldaşlarını dəvət et"
+activeOfDeployed = "Bu ay {{total}}-dən {{active}} aktivdir"
 name = "Stirling PDF Editor"
 open = "Brauzerdə aç"
 updated = "{{time}} yeniləndi"
 
+[portal.home.editor.deploy]
+finish = "Yerləşdirməni tamamla"
+options = "Yerləşdirmə seçimlərinə bax"
+start = "Editor-u yerləşdir"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Öz hostinqinizdə · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Günortanız xeyir"
 evening = "Axşamınız xeyir"
 morning = "Sabahınız xeyir"
 
-[portal.home.onboarding]
-dismiss = "Quraşdırmanı bağla"
-notStarted = "Başlanmayıb"
-progress = "{{total}} tapşırıqdan {{done}} tamamlandı"
-title = "Quraşdırmanı tamamlayın"
-
-[portal.home.onboarding.enterprise]
-body = "Təşkilat üzrə SSO + SCIM + RBAC, öhdəlikli həcm qiymətləri və şəbəkədən təcrid olunmuş yerləşdirmə."
-cta = "Sınağa başla"
-ctaQuote = "Qiymət təklifi al"
-lead = "250+ əməkdaş üçün."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Desktop tətbiqini yerləşdirin, həmişəlik pulsuz."
-title = "PDF Editor endirin"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktiv · {{recommended}} tövsiyə olunur"
-chip = "{{active}} aktiv"
-title = "Siyasətləri aktivləşdirin"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} qoşulub · hər PDF düşdüyü yerdə idarə olunur"
-chip = "{{connected}} qoşulub"
-title = "Mənbələrinizi qoşun"
-
-[portal.home.quickActions]
-subtitle = "Bu gün üçün əsas tapşırıqlar"
-title = "Sürətli əməliyyatlar"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Tipli əməliyyat kitabxanası üzərində 3 addımlı konstruktor"
-title = "Pipeline qur"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agentlər, webhooks, izlənən qovluqlar"
-title = "Mənbə qoş"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Tezlik limitləri və IP allowlist ilə əhatəli açar"
-title = "API açarı ver"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor yerləşdirilməsini idarə et"
 sectionsAriaLabel = "İnfrastruktur bölmələri"
@@ -6878,13 +7363,9 @@ heading = "API açarları"
 subheading = "Hər açar üzrə tezlik limitləri, icazələr və IP allowlist-ləri olan əhatəli giriş məlumatları."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "İcazəli IP-lər"
-anyIp = "İstənilən IP (allowlist yoxdur)"
 created = "Yaradılıb"
 lastUsed = "Son istifadə"
-permissions = "İcazələr"
-rateLimit = "Tezlik limiti"
-rateLimitValue = "{{value}} sorğu/dəq"
+revoke = "Açarı ləğv et"
 usageMonth = "Bu ay istifadə"
 usageToday = "Bu gün istifadə"
 
@@ -6892,6 +7373,20 @@ usageToday = "Bu gün istifadə"
 description = "Stirling API çağırmağa başlamaq üçün əhatəli açar yaradın."
 title = "Hələ API açarı yoxdur"
 
+[portal.infrastructure.apiKeys.error]
+load = "API açarlarınızı yükləmək mümkün olmadı. Zəhmət olmasa, yenidən cəhd edin."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" ləğv edilsin? Bu açarı hələ də istifadə edən hər hansı inteqrasiya dərhal 401 xətaları almağa başlayacaq. Bunu geri qaytarmaq mümkün deyil."
+cancel = "Ləğv et"
+confirm = "Açarı ləğv et"
+title = "API açarını ləğv et"
+
+[portal.infrastructure.attestationLabel]
+attested = "Təsdiqlənib"
+inScope = "Əhatə dairəsində"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Audit hadisələrini kateqoriyaya görə filtrlə"
 heading = "Audit jurnalları"
@@ -6935,6 +7430,7 @@ all = "Hamısı"
 auth = "Auth"
 config = "Konfiqurasiya"
 elevation = "Səlahiyyət artırımı"
+policy = "Siyasət"
 processing = "Emal"
 security = "Təhlükəsizlik"
 
@@ -6944,19 +7440,35 @@ title = "Girişiniz yoxdur"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiqurasiya"
-elevation = "Səlahiyyət artırımı"
+policy = "Siyasət"
 processing = "Emal"
 totalEvents = "Ümumi hadisələr · 24s"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Konfiqurasiya"
+elevation = "Səlahiyyət artırma"
+policy = "Siyasət"
+processing = "Emal"
+security = "Təhlükəsizlik"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Xəta"
+info = "Məlumat"
+success = "Uğur"
+warning = "Xəbərdarlıq"
+
+[portal.infrastructure.certLabel]
+certified = "Sertifikatlaşdırılıb"
+inProgress = "Davam edir"
+notStarted = "Başlamayıb"
+
 [portal.infrastructure.createKey]
 cancel = "Ləğv et"
 createKey = "Açar yarat"
 done = "Hazırdır"
-ipAllowlistHelper = "Vergüllə ayrılmış CIDR aralıqları. İstənilən IP-yə icazə vermək üçün boş buraxın."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Açar adı"
 keyNamePlaceholder = "məs. Production · ingest"
-permissionsLabel = "İcazələr"
 secretKeyCaption = "Gizli açar"
 secretWarning = "Bunu secrets manager-də saxlayın. Stirling yalnız hash saxlayır — onu sonradan bərpa etmək mümkün deyil."
 subtitle = "Açarı lazım olan minimum əhatə ilə məhdudlaşdırın. İstənilən vaxt dövr edə və ya ləğv edə bilərsiniz."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Bu sirri indi kopyalayın — bir daha göstərilməyəcək."
 title = "API açarı yarat"
 titleCreated = "Açar yaradıldı"
 
+[portal.infrastructure.deployLabel]
+live = "Canlı"
+queued = "Növbədə"
+rolledBack = "Geri qaytarılıb"
+rolling = "Yayılır"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/dəq"
@@ -6999,6 +7517,15 @@ subheading = "Hər yerləşdirilmiş Stirling regionu üçün canlı sağlamlıq
 description = "İş sahəniz təmin edildikdən sonra yerləşdirilmiş regionlar burada görünəcək."
 title = "Yerləşdirilmiş region yoxdur"
 
+[portal.infrastructure.keyLabel]
+active = "Aktiv"
+revoked = "Ləğv edilib"
+
+[portal.infrastructure.modelLabel]
+active = "Aktiv"
+degraded = "Zəifləmiş"
+disabled = "Deaktiv edilib"
+
 [portal.infrastructure.models]
 heading = "Modellər"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Növ"
 version = "Versiya"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/zəng"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktiv modellər"
 avgLatency = "Orta gecikmə"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} üçün model"
 operation = "Əməliyyat"
 routedTo = "Yönləndirilib"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Təsnifat"
+extraction = "Çıxarma"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Zəifləmiş"
+down = "İşləmir"
+healthy = "Sağlam"
+
 [portal.infrastructure.security.access.byok]
 description = "Öz KMS-inizdən açar təqdim edin. Stirling onunla şifrələyir, lakin yenə də oxuya bilir."
 label = "Öz açarınızı gətirin (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modellər"
 security = "Təhlükəsizlik"
 storage = "Saxlama"
 
+[portal.integrations]
+addAnother = "Başqasını əlavə et"
+availableHeading = "Mövcud"
+comingSoonHeading = "Tezliklə"
+connect = "Qoşul"
+connectedHeading = "Qoşulub"
+connectionCount_one = "{{count}} bağlantı"
+connectionCount_other = "{{count}} bağlantı"
+customApi = "Xüsusi API"
+searchPlaceholder = "İnteqrasiyaları axtar"
+subtitle = "Stirling-in danışa bildiyi hər şey. Məlumatlar burada bir dəfə yaradılır, sonra mənbələr, siyasətlər və pipeline-lar tərəfindən istinad edilir."
+title = "İnteqrasiyalar"
+typedName = "{{tool}} adı"
+
+[portal.integrations.filters]
+all = "Hamısı"
+audit = "Audit"
+connected = "Qoşulub"
+notify = "Bildiriş"
+security = "Təhlükəsizlik"
+signing = "İmzalama"
+storage = "Yaddaş"
+
+[portal.integrations.status]
+connected = "Qoşulub"
+
+[portal.integrations.table]
+integration = "İnteqrasiya"
+worksWith = "Bununla işləyir"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline-lar"
+policies = "Siyasətlər"
+sources = "Mənbələr"
+
+[portal.legal]
+draft = "{{label}} · qaralama"
+loadError = "Bu sənədi yükləmək mümkün olmadı. Zəhmət olmasa, yenidən cəhd edin."
+loading = "Yüklənir…"
+title = "Hüquqi sənəd"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponentlər"
@@ -7182,6 +7765,7 @@ documents = "Sənədlər"
 editor = "Editor"
 home = "Əsas səhifə"
 infrastructure = "İnfrastruktur"
+integrations = "İnteqrasiyalar"
 pipelines = "Pipeline-lar"
 policies = "Siyasətlər"
 procurement = "Satınalma"
@@ -7190,25 +7774,9 @@ sources = "Mənbələr"
 usage = "İstifadə və fakturalama"
 users = "İstifadəçilər"
 
-[portal.notifications]
-markAllRead = "Hamısını oxunmuş kimi işarələ"
-title = "Bildirişlər"
-viewAll = "Hamısına bax"
-
-[portal.notifications.ariaLabel]
-none = "Bildirişlər, oxunmamış yoxdur"
-unread_one = "Bildirişlər, {{count}} oxunmamış"
-unread_other = "Bildirişlər, {{count}} oxunmamış"
-
-[portal.notifications.count]
-allRead = "hamısı oxunub"
-loading = "yüklənir"
-new_one = "{{count}} yeni"
-new_other = "{{count}} yeni"
-
-[portal.notifications.empty]
-description = "Yeni bildiriş yoxdur."
-title = "Hər şey qaydasındadır"
+[portal.nav.section]
+platform = "PDF Platforması"
+processor = "PDF Prosessoru"
 
 [portal.pipelines]
 subtitle = "Backend-də hər avtomatlaşdırılmış sənəd pipeline-ı: mənbələr dəsti üzərində əməliyyatların sıralı zənciri, trigger ilə işə salınır. Addımlarını və mənbələrini görmək üçün sətirə klikləyin."
@@ -7220,15 +7788,28 @@ newPipeline = "Yeni pipeline"
 [portal.pipelines.builder]
 addStep = "Alət əlavə et"
 back = "Pipeline-lara qayıt"
+cannotFollow = "{{produced}} qəbul edə bilmir"
+chooseAccount = "Hesab seçin"
+chooseDestination = "Təyinat seçin"
+chooseOperation = "Bu addımın nə edəcəyini seçin"
+chooseSource = "Mənbə seçin"
 discard = "Dəyişiklikləri at"
 enabled = "Aktivdir"
+inputs = "Giriş"
+inputSource = "Giriş mənbəyi"
+inputTrigger = "Trigger"
 keepEditing = "Redaktəyə davam et"
+needsConfiguring = "Quraşdırma tələb olunur"
 needsUpload = "Yüklənmiş fayl tələb olunur"
+noSources = "Hələ heç bir mənbə qoşulmayıb. Onu giriş kimi istifadə etmək üçün birini yaradın."
 noToolMatches = "Axtarışınıza uyğun alət yoxdur."
 pipelineSettings = "Pipeline parametrləri"
 searchTools = "Alətləri axtar"
 selectToolBody = "Pipeline qurmaq üçün alət əlavə edin."
 selectToolTitle = "Hələ alət yoxdur"
+sendToSystem = "Başqa sistemə göndər"
+stepsIncompatible = "Bu addımlar əvvəlki addımın yaratdığı ilə işləyə bilmir: {{tools}}."
+stepsNeedSetup = "Saxlamadan əvvəl bu addımların hələ quraşdırılması lazımdır: {{tools}}."
 toolSettings = "Alət parametrləri"
 unknownStep = "Tanınmayan əməliyyat, olduğu kimi saxlanıldı."
 unsavedBody = "Saxlanmamış dəyişiklikləriniz var. Çıxmadan əvvəl onları saxlayırsınız, yoxsa atırsınız?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Saxlanmamış dəyişikliklər"
 uploadUnsupported = "Yüklənmiş fayllar hələ pipeline-larda dəstəklənmir, buna görə bu addımlar saxlanıla bilməz: {{tools}}."
 usesDefaults = "Standart parametrlərlə işləyir"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Əvvəlki addımdan bütün faylları birləşdirir"
+fan-out = "Əvvəlki addımdan hər fayl üçün bir dəfə işləyir"
+format-mismatch = "{{accepts}} tələb olunur, lakin əvvəlki addım {{produced}} yaradır"
+output-uncertain = "İşləməyə bilər: əvvəlki addımın çıxışı onun necə quraşdırılmasından asılıdır"
+source-mismatch = "{{accepts}} tələb olunur, lakin bu pipeline-ın girişi {{produced}}-dir"
+undeclared-operation = "Bu addımın nə qəbul etdiyini yoxlamaq olmur"
+
 [portal.pipelines.composer]
 addTool = "Alət əlavə et"
 cancel = "Ləğv et"
 chainEmpty = "Pipeline qurmağa başlamaq üçün alət əlavə edin."
 create = "Pipeline yarat"
-directory = "Çıxış qovluğu"
-directoryHelp = "Serverdə mütləq yol. Konfiqurasiya edilmiş icazəli qovluqlar daxilində olmalıdır."
 editingUnsupported = "Bu alət parametrlərinin redaktə üçün göstərilməsi hələ dəstəklənmir."
 moveDown = "Aşağı köçür"
 moveUp = "Yuxarı köçür"
 name = "Ad"
 namePlaceholder = "məs. Redaction sweep"
-noSources = "Hələ mənbə qoşulmayıb. Pipeline yenə də birbaşa təqdim edilən fayllar üzərində işləyə bilər."
 noToolSettings = "Bu alətin konfiqurasiya edilə bilən parametri yoxdur."
 operations_one = "Əməliyyat ({{count}})"
 operations_other = "Əməliyyatlar ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Sil"
 title = "Pipeline silinsin?"
 
 [portal.pipelines.detail]
+clearHistory = "Tarixçəni təmizlə"
 delete = "Pipeline-ı sil"
 run = "İndi işə sal"
 
 [portal.pipelines.empty]
 action = "Pipeline yarat"
+connectSource = "Mənbə qoş"
 description = "İlk pipeline-ınızı yaradın: işləyəcəyi mənbələri seçin, əməliyyatları zəncirləyin və çıxışın hara gedəcəyini seçin."
 title = "Hələ pipeline yoxdur"
 
@@ -7286,15 +7874,17 @@ active = "Aktiv"
 paused = "Dayandırılıb"
 total = "Pipeline-lar"
 
-[portal.pipelines.output]
-folder = "Qovluğa yaz"
-inline = "Faylları qaytar"
-
 [portal.pipelines.run]
+allProcessed_one = "İşlədiləcək heç nə yoxdur: mənbənin {{count}} sənədi artıq emal edilib."
+allProcessed_other = "İşlədiləcək heç nə yoxdur: mənbələrdəki bütün {{count}} sənəd artıq emal edilib."
 completed_one = "İşlətmə tamamlandı."
 completed_other = "Bütün {{count}} işlətmə tamamlandı."
 empty = "İşlətmək üçün heç nə yoxdur: mənbələrdə emal ediləcək sənəd yox idi."
 failed = "İşlətmə alınmadı: {{error}}"
+historyCleared = "Tarixçə təmizləndi. Növbəti işə salma hazırda mənbələrdə olan hər şeyi yenidən emal edir."
+inFlight = "İşlədiləcək yeni heç nə yoxdur: sənədlər əvvəlki işə salmadan hələ də emal olunur."
+parked_one = "İşlədiləcək heç nə yoxdur: {{count}} sənəd əvvəl uğursuz olub və gözləməyə qoyulub. Səbəbi düzəldin, sonra yenidən cəhd etmək üçün tarixçəni təmizləyin."
+parked_other = "İşlədiləcək heç nə yoxdur: {{count}} sənəd əvvəl uğursuz olub və gözləməyə qoyulub. Səbəbi düzəldin, sonra yenidən cəhd etmək üçün tarixçəni təmizləyin."
 running = "İşlətmə başladı; hələ davam edir."
 timeout = "İşlətmə gözləniləndən uzun çəkir; arxa planda hələ tamamlana bilər."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Planlaşdırılmış"
 
 [portal.policies]
+defaultName = "{{category}} Siyasəti"
 subtitle = "Hər sənədə alət pipeline-ını tətbiq edən daimi avtomatlaşdırmalar. Hər siyasət upload və ya export zamanı işə düşür, alət zəncirini icra edir və tətbiq edilmiş versiyanı orijinalın yanında saxlayır."
 title = "Siyasətlər"
 
 [portal.policies.card]
 comingSoon = "Enterprise-ə yüksəldin"
 notSetUp = "Qurulmayıb"
+requiresAiEngine = "AI mühərriki tələb olunur"
+
+[portal.policies.categories.classification]
+desc = "Yükləmə zamanı hər sənədin növünü müəyyən edin və arxivləşdirmə və axtarış üçün metadatasını etiketləyin."
+label = "Təsnifat"
 
 [portal.policies.categories.compliance]
 desc = "Hər sənəddə HIPAA, GDPR, SOC 2 və ya FedRAMP tələblərini tətbiq edin."
@@ -7344,6 +7940,13 @@ label = "Təhlükəsizlik"
 [portal.policies.config]
 scopeAll = "Bütün sənədlər"
 
+[portal.policies.config.classification]
+summary = "Hər yüklənmiş sənədi komandanızın etiketlərinə görə təsnif edir və metadatasını etiketləyir."
+
+[portal.policies.config.classification.rules]
+0 = "Təsnif et"
+1 = "Metadatanı etiketlə"
+
 [portal.policies.config.compliance]
 summary = "Sənədlər sistemi tərk etməzdən əvvəl onları tənzimləyici framework-lərə qarşı yoxlayır."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Minimum etibarlılıq"
 2 = "Adlandır"
 3 = "Normallaşdır"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview həssaslıq etiketi tətbiq et"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Etiket ID-si"
+labelIdHelp = "Purview portalından etiketin GUID-i. Etiketin tətbiqi onun metadatasını PDF üzərinə yazır; şifrələyə bilməz, bunun üçün Microsoft müştərisi lazımdır."
+labelName = "Etiket adı (istəyə bağlı)"
+labelNameHelp = "ID ilə yanaşı qeyd olunur ki, insanlar və alətlər etiketi tanıya bilsin."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview siyasətin tətbiq etdiyi etiketi şəxsin seçdiyi etiketdən fərqləndirir."
+label = "Etiket necə qeyd olunur"
+privileged = "Şəxs tərəfindən seçilmiş kimi"
+standard = "Avtomatik tətbiq edilmiş kimi"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview etiketini oxu"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Sənədin artıq daşıdığı etiketi oxuyur ki, sonrakı addımlar ona görə hərəkət edə bilsin."
+
 [portal.policies.config.retention]
 summary = "Sənədlərin nə qədər saxlanacağını, nə vaxt arxivləşdiriləcəyini və nə vaxt silinəcəyini tətbiq edir."
 
@@ -7438,6 +8064,7 @@ title = "Hələ fəaliyyət yoxdur"
 [portal.policies.endpoints]
 addWatermark = "Su nişanı"
 autoRedact = "PII redaktə et"
+classifyAndLabel = "Təsnif et"
 compressPdf = "Sıxışdır"
 flatten = "Yastılaşdır"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Siyasətləriniz saxlanılıb və bağlantı bərpa olunanda gör
 retry = "Yenidən cəhd et"
 title = "Backend əlçatan deyil"
 
+[portal.policies.operations]
+change = "Bu addımın nə edəcəyini dəyiş"
+noResults = "Heç bir addım buna uyğun gəlmir. Məhsul adı və ya \"scan\", \"notify\", \"attach\" sınayın."
+searchPlaceholder = "Addımları axtarın - \"scan\", \"attach\" və ya məhsul adı sınayın"
+
+[portal.policies.operations.bodyMode]
+binary = "Xam fayl baytları"
+json = "JSON payload daxilində"
+multipart = "Fayl yükləməsi kimi (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Öz ClamAV serveriniz sənədi yoxlayır; şəbəkənizdən heç nə çıxmır."
+label = "Viruslara görə yoxla (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Makrolar, icra edilə bilən fayllar, skriptlər və ya yerləşdirilmiş obyektlər daşıyan sənədləri rədd edir."
+label = "Aktiv məzmunu blokla"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive sənədi yoxlayır və təmiz deyilsə, icra dayanır."
+label = "Viruslara görə yoxla"
+
+[portal.policies.operations.confluenceAttach]
+description = "Emal edilmiş sənədi səhifəyə yerləşdirir."
+label = "Confluence səhifəsinə əlavə et"
+
+[portal.policies.operations.consignoSubmit]
+description = "Sənədi imzalamaq üçün ConsignO Cloud-a təqdim edir."
+label = "İmzaya göndər (ConsignO)"
+note = "Sənədi təqdim edir. İmzalanmış nüsxənin əldə edilməsi hələ dəstəklənmir, çünki addım nəticəni sonrakı addıma ötürə bilmir."
+
+[portal.policies.operations.customApiCall]
+description = "Zəngi özünüz hazırlayın: path, method, body və cavabın emalı."
+label = "Xüsusi API çağır"
+
+[portal.policies.operations.discordNotify]
+description = "Siyasətin sənədi emal etdiyini kanala bildirir."
+label = "Discord-a mesaj göndər"
+
+[portal.policies.operations.elasticIndex]
+description = "Siyasətin nə etdiyini axtarıla bilən sənəd kimi qeyd edir."
+label = "Audit hadisəsini Elasticsearch-də indekslə"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart upload API-lərinə uyğundur; JSON faylı payload daxilində istəyən API-lərə uyğundur; binary xam baytları göndərir."
+label = "Sənədi necə göndərmək"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Olduğu kimi göndərilən JSON body. {{document.base64}} faylı daşıyır; {{document.*}} və {{run.*}} hər sənəd üçün doldurulur."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Hesab"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API-nin sənədi altında gözlədiyi forma sahəsi."
+label = "Fayl sahəsinin adı"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Kimdən"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Header adı/dəyəri cütlərindən ibarət JSON obyekt. Bağlantının credential-ı sizin üçün əlavə olunur."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "İndeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue açarı"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Mesaj body-si kimi göndərilir. {{document.*}} və {{run.*}} hər sənəd üçün doldurulur."
+label = "Mesaj"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Səhifə ID-si"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Bağlantının əsas URL-nə əlavə olunur. Heç vaxt başqa host-a çata bilməz."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Drive-da hara yazılacağı. {{document.filename}} hər sənəd üçün doldurulur."
+label = "Təyinat yolu"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Hesabat sənədə toxunmur. Əvəz et qayıdanla dəyişdirir."
+label = "Cavabla nə etmək"
+
+[portal.policies.operations.fields.signerEmail]
+label = "İmzalayanın email-i"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Mövzu"
+placeholder = "Emal edildi: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio bu mətni təhlil edir. {{document.title}} istifadə edin və ya yoxlanmasını istədiyiniz mətni yapışdırın."
+label = "Yoxlanacaq mətn"
+
+[portal.policies.operations.fields.to]
+label = "Kimə"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud istifadəçi adı"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Siyasətin sənədi emal etdiyini space-ə bildirir."
+label = "Google Chat-a mesaj göndər"
+
+[portal.policies.operations.jiraAttach]
+description = "Emal edilmiş sənədi issue-ya yerləşdirir."
+label = "Jira issue-suna əlavə et"
+
+[portal.policies.operations.mailgunEmail]
+description = "Emal edilmiş sənədi əlavə kimi göndərir."
+label = "Sənədi email ilə göndər (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Emal edilmiş sənədi qovluğa yazır."
+label = "Nextcloud-a yüklə"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Öz Presidio serveriniz tapdığı şəxsi məlumatları bildirir."
+label = "Şəxsi məlumatları aşkar et"
+note = "Presidio faylları deyil, mətni oxuyur. Yoxlanmasını istədiyiniz mətni verin — sənədin özü yüklənmir."
+
+[portal.policies.operations.responseMode]
+replace = "Sənədi cavabla əvəz et"
+report = "Sənədi saxla, cavabı qeyd et"
+
+[portal.policies.operations.sendgridEmail]
+description = "Emal edilmiş sənədi əlavə kimi göndərir."
+label = "Sənədi email ilə göndər (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Siyasətin sənədi emal etdiyini kanala bildirir."
+label = "Slack-ə mesaj göndər"
+
+[portal.policies.operations.splunkEvent]
+description = "Siyasətin nə etdiyini auditorlarınızın artıq baxdığı yerdə qeyd edir."
+label = "Audit hadisəsini Splunk-a göndər"
+
+[portal.policies.operations.sumologicEvent]
+description = "Siyasətin nə etdiyini HTTP collector-a qeyd edir."
+label = "Audit hadisəsini Sumo Logic-ə göndər"
+
+[portal.policies.operations.teamsNotify]
+description = "Siyasətin sənədi emal etdiyini kanala bildirir."
+label = "Teams-ə mesaj göndər"
+
+[portal.policies.operations.webhookPost]
+description = "Sənədin özünü seçdiyiniz URL-ə göndərir."
+label = "Sənədi webhook-a göndər"
+
+[portal.policies.operations.zapierNotify]
+description = "İcra detalları avtomatlaşdırmanıza ötürür."
+label = "Zap və ya Make ssenarisini trigger et"
+
 [portal.policies.stats]
 activeFor = "Aktiv"
 dataProcessed = "Emal edilmiş data"
@@ -7473,6 +8277,13 @@ label = "Tətbiq edilmiş sənədlər"
 description = "Konfiqurasiya edilib, lakin işə düşmür"
 label = "Fasilədə"
 
+[portal.policies.table]
+appliesTo = "Buna tətbiq olunur"
+docs = "Tətbiq edilmiş sənədlər"
+enforces = "Tətbiq edir"
+policy = "Siyasət"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Geri"
 cancel = "Ləğv et"
@@ -7480,6 +8291,10 @@ continue = "Davam et"
 enablePolicy = "Siyasəti aktiv et"
 saveChanges = "Dəyişiklikləri saxla"
 
+[portal.policies.wizard.capability.classify]
+desc = "Komandanızın etiketlərindən sənədin növünü müəyyən edir və onu etiketləyir ki, kateqoriyaya görə arxivlənsin və axtarılsın."
+label = "Sənədi təsnif et"
+
 [portal.policies.wizard.capability.compress]
 desc = "Sənədi daha kiçik fayl ölçüsünə sıxışdırır."
 label = "Fayl ölçüsünü azalt"
@@ -7500,10 +8315,18 @@ label = "Həssas məlumatları redaktə et"
 desc = "Gizli JavaScript-i silir ki, sənəd açıldıqda heç nə avtomatik işləməsin."
 label = "Aktiv məzmunu çıxar"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Müstəqil timestamp authority istifadə edərək sənədin müəyyən vaxtda məhz bu formada mövcud olduğunu sübut edir. Yalnız hash göndərilir - sənəd serverinizi heç vaxt tərk etmir."
+label = "Etibarlı timestamp əlavə et"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Hər səhifəyə görünən nişan (məs. “Məxfi”) vurur."
 label = "Su nişanı tətbiq et"
 
+[portal.policies.wizard.classification]
+description = "Hər yüklənmiş sənəd daxili etiketlərə görə təsnif edilir və uyğun növlərlə etiketlənir. Etiket dəsti bütün komandanız üzrə paylaşılır."
+labelsHeading = "Təsnifat etiketləri"
+
 [portal.policies.wizard.errors]
 noTools = "Əvvəlcə iş axınında ən azı bir aləti aktiv edin."
 saveFailed = "Siyasəti saxlamaq mümkün olmadı. Lütfən, yenidən cəhd edin."
@@ -7548,73 +8371,118 @@ setUp = "{{category}} siyasətini qur"
 [portal.policies.wizard.workflow]
 description = "Bu siyasətin emal etdiyi hər sənədə nə edəcəyini seçin."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktiv"
-noRule = "Hələ heç bir qayda tətbiq edilmir"
-subtitle = "Hansı pipeline-ın idarə etməsindən asılı olmayaraq, hər sənədin keçdiyi daimi avtomatlaşdırmalar."
-title = "PDF-lərinizdə nə işləyir"
-
 [portal.policySummary.action]
-comingSoon = "Enterprise-ə yüksəldin"
-configure = "Konfiqurasiya et"
 setUp = "Qur"
 
-[portal.policySummary.column]
-activeRule = "Aktiv qayda"
-policy = "Siyasət"
-status = "Status"
+[portal.processorFlow]
+footnote = "Saylar son 24 saat üzrədir. Axın sürəti illüstrativdir."
+liveBadge = "Canlı"
+stats = "{{connected}} qoşulub · {{processed}} PDF emal edilib"
+title = "PDF Prosessoru"
 
-[portal.policySummary.empty]
-description = "Siyasətlər konfiqurasiya edildikdən sonra kateqoriyalar burada görünəcək."
-title = "Hələ siyasət yoxdur"
+[portal.processorFlow.lens]
+ariaLabel = "Baxış rejimi"
+flow = "Axın"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktiv"
-off = "Söndürülü"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24s"
+failed = "Uğursuz"
+heading = "Nəticələr"
+success = "Çatdırılıb"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktiv"
+count = "{{n}} · 24s"
+heading = "Siyasətlər"
+setUp = "Quraşdır"
 soon = "Tezliklə"
 
-[portal.processingStatus]
-managePlan = "Planı idarə et"
-volumeSuffix = "emal edilmiş PDF-lər · son 30 gün"
+[portal.processorFlow.sankey]
+waist = "Siyasətlər · {{n}} aktiv"
+
+[portal.processorFlow.sankey.empty]
+description = "Sənədlərin prosessordan keçən axınını izləmək üçün mənbə qoşun və siyasəti aktiv edin."
+title = "Hələ axın yoxdur"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Qoş"
+editor = "Stirling PDF Editor"
+heading = "Mənbələr"
+perDay = "{{n}} / 24s"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email qəbulu"
 
 [portal.procurement]
-reset = "Satınalmanı sıfırla (demo)"
 subtitle = "Komandanızın qiymətləndirilməsi, müqavilələşdirilməsi və işə qoşulmasını təmin edin. Hər sənəd bir yerdə."
 title = "Satınalma"
 
-[portal.procurement.action]
-download = "Endir"
-pay = "İndi ödə"
-request = "Sorğu göndər"
-sign = "Nəzərdən keçir və imzala"
-upload = "Yüklə"
-
 [portal.procurement.agreement]
 agreeCta = "Razılaş və abunə ol"
+confidential = "Məxfi"
 confirm = "Stirling Enterprise Agreement-i oxudum və razıyam."
-eyebrow = "Razılaşma"
-intro = "Bir birləşdirilmiş razılaşma sövdələşmənizi əhatə edir: Master Service Agreement, Order Form, EULA və Data Processing Agreement. Onu nəzərdən keçirin, sonra təklifi öhdəlikli abunəliyə qəbul etmək üçün razılaşın."
-title = "Enterprise razılaşmanızı nəzərdən keçirin"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA və DPA bir imzada birləşdirilib."
+download = "Endir"
+downloadDraftError = "Razılaşma PDF-i yaratmaq mümkün olmadı - sənəd renderer-i əlçatan deyil. Zəhmət olmasa, bir az sonra yenidən cəhd edin və ya dəstək ilə əlaqə saxlayın."
+downloadError = "İmzalanmış razılaşmanı endirmək mümkün olmadı. Zəhmət olmasa, yenidən cəhd edin."
+legalName = "Hüquqi şəxsin adı"
+legalNamePlaceholder = "İmzalayacaq hüquqi şəxs"
+loadError = "Razılaşmanı yükləmək mümkün olmadı. Zəhmət olmasa, yenidən cəhd edin."
+loading = "Razılaşma yüklənir..."
+ref = "İstinad {{ref}} · {{version}}"
+requestChanges = "Dəyişikliklər istə"
+scrollHint = "Nəzərdən keçirmək üçün sürüşdürün"
+signatory = "İmzalayanın adı"
+signatoryPlaceholder = "Tam ad"
+signatoryTitle = "İmzalayanın vəzifəsi"
+signatoryTitlePlaceholder = "məs. Baş hüquqşünas"
+signError = "İmzanızı qeyd etmək mümkün olmadı. Zəhmət olmasa, yenidən cəhd edin."
 
 [portal.procurement.builder]
 addons = "Əlavələr"
+addressLine1 = "Ünvan sətri 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Ünvan sətri 2"
+addressLine2Placeholder = "Suite, mərtəbə, bina"
 back = "Geri"
 businessName = "Biznes adı"
 businessNamePlaceholder = "Şirkətiniz"
+city = "Şəhər"
+cityPlaceholder = "San Francisco"
+completeRequired = "Zəhmət olmasa, təklif yaratmadan əvvəl tələb olunan sahələri ( * ilə işarələnmiş) etibarlı email ilə tamamlayın."
+contactEmail = "Əlaqə email-i"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Əlaqə şəxsi"
+contactNamePlaceholder = "Jane Doe"
 continue = "Davam et"
-country = "Ölkə"
-countryEuro = "Avrozona (EUR €)"
-countryUK = "Birləşmiş Krallıq (GBP £)"
-countryUS = "Amerika Birləşmiş Ştatları (USD $)"
+done = "Hazır"
 eula = "Stirling Enterprise EULA-nı oxudum və razıyam. O, bu təklifdən yaradılan razılaşmanı tənzimləyir."
 generate = "Təklif yarat"
-included = "Daxildir"
 indemnification = "IP kompensasiyası"
 indemnificationSub = "EULA-ya əsasən uyğun IP iddialarını müdafiə edirik"
-offlineLicense = "Offline / air-gapped lisenziya"
-offlineLicenseSub = "Air-gapped self-hosted instansiya üçün endirilə bilən lisenziya faylı"
+paperEyebrow = "Enterprise təklifi"
+paperFor = "Bunun üçün hazırlanıb"
+pdfSize = "PDF ölçüsü"
+poNumber = "PO nömrəsi"
+poNumberPlaceholder = "İstəyə bağlı"
+postalCode = "Poçt indeksi"
+postalCodePlaceholder = "94105"
+posture = "İdarəetmə"
+posture_count = "~{{count}} siyasət"
+posture_essentials = "Əsaslar"
+posture_essentialsSub = "Təsnifat + Paylaşım — standartlar"
+posture_governed = "İdarə olunan"
+posture_governedSub = "Təhlükəsizlik və Yönləndirmə əlavə edir"
+posture_regulated = "Tənzimlənən"
+posture_regulatedSub = "Hər kateqoriya — Uyğunluq, Saxlama, Qəbul"
 qbr = "Rüblük biznes icmalları"
 qbrSub = "SE-niz hər rüb istifadəni və yol xəritəsini nəzərdən keçirir"
+region = "Ştat / region"
+regionPlaceholder = "California"
 running = "{{annual}} / il · {{years}} illik {{tcv}}"
 s1Sub = "Komandanız və hər il emal etməyi gözlədiyiniz PDF-lər."
 s1Title = "Nə qədər emal edəcəksiniz?"
@@ -7623,6 +8491,12 @@ s2Title = "Öhdəlik və xidmət"
 s3Sub = "Təklif və onun yaratdığı razılaşma üçün."
 s3Title = "Məlumatlarınız"
 serviceLevel = "Xidmət səviyyəsi"
+size_compact = "Yığcam"
+size_compactSub = "Əsasən mətn, 1 MB-dan az"
+size_heavy = "Ağır"
+size_heavySub = "Skan edilmiş və ya şəkil ağırlıqlı, 5 MB+"
+size_standard = "Standart"
+size_standardSub = "Qarışıq mətn və şəkillər, 1–5 MB"
 slDedicated = "Ayrılmış"
 slDedicatedSub = "4 iş saatı · ayrılmış hesab meneceri · +30%"
 slPriority = "Prioritet"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Eyni iş günü · adlı CSM · +15%"
 slStandard = "Standart"
 slStandardSub = "Növbəti iş günü · paylaşılan CSM · daxildir"
 stepOf = "Addım {{n}} / {{total}}"
+taxId = "VAT / Vergi ID-si"
+taxIdPlaceholder = "İstəyə bağlı"
 term = "Müddət"
 termDiscount = "{{pct}}% çoxillik öhdəlik endirimi tətbiq edildi"
 title = "Təklifinizi qurun"
@@ -7637,6 +8513,7 @@ training = "İşə qoşulma və təlim"
 trainingSub = "Komandanızı işə salmaq üçün canlı sessiyalar"
 users = "Ümumi istifadəçilər"
 usersPlaceholder = "məs. 250"
+viewEula = "Oxu"
 volEstimated = "{{count}} istifadəçidən təxmin edilib (hər biri ~2,000 PDF, avtomatlaşdırma daxil). Daha yaxşı bilirsinizsə, redaktə edin."
 volManual = "Sizin rəqəminiz istifadə olunur. İstənilən vaxt komanda ölçüsündən yenidən təxmin edin."
 volNoUsers = "Əmin deyilsiniz? Komanda ölçüsünü daxil edin, biz təxmin edək."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "məs. 1,000,000"
 years_one = "{{count}} il"
 years_other = "{{count}} il"
 
-[portal.procurement.docs]
-count_one = "{{count}} sənəd"
-count_other = "{{count}} sənəd"
-done = "Tamamlandı"
-here = "Siz buradasınız"
-hide = "Gizlət"
-optional = "İstəyə bağlı"
-paidAddon = "Ödənişli əlavə"
-show = "Göstər"
-subtitle = "Səyahətin hər addımında sizə lazım olan hər şey, sövdələşmə irəlilədikcə üzə çıxarılır."
-supportingSubtitle = "SOC 2, təhlükəsizlik icmalları, vergi formaları və daha çoxu, təhlükəsizlik və ya satınalma komandanız soruşduqda hazırdır. Bəziləri birdəfəlik rüsum tələb edir."
-supportingTitle = "Qiymətləndirmənizi dəstəkləyir"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form və DPA bir imzada."
+download = "Endir"
+eula = "EULA və Kommersiya Şərtləri"
+eulaSub = "Proqram təminatı və self-serve kommersiya şərtləri."
+invoice = "Faktura"
+invoiceSub = "İlk abunə fakturanız."
+laterInvoice = "Qəbul etdikdən sonra əlçatan olacaq"
+laterQuote = "Təklifiniz verildikdən sonra əlçatan olacaq"
+quote = "Təklif"
+quoteSub = "Maddələnmiş enterprise təklifiniz."
+sla = "SLA Əlavəsi"
+slaSub = "Dəstək səviyyələri və cavab hədəfləri."
+subprocessors = "Subprocessor-lar"
+subprocessorsSub = "Sizin adınıza məlumatları emal edən üçüncü tərəflər."
+subtitle = "Sövdələşmə sənədləriniz, istənilən vaxt əlçatan."
 title = "Sənədlər"
-upcoming = "Qarşıdan gələn"
+view = "Bax"
 
 [portal.procurement.error]
 title = "Nəsə səhv getdi"
 
 [portal.procurement.hero]
-company = "Enterprise sövdələşməniz"
+barAria = "Mərhələ {{current}} / {{total}}"
 ctaAgreement = "Razılaşmanı nəzərdən keçir və imzala"
-ctaLive = "Siz canlıdasınız"
-ctaPayment = "Ödəniş əlavə et"
+ctaExploring = "Sınağınızı quraşdırın"
 ctaQuote = "Təklifinizi nəzərdən keçirin"
+ctaReviewQuote = "Təklifi nəzərdən keçir"
 ctaTrial = "Təklifinizi qurun"
+documents = "Sənədlər"
 eyebrow = "Enterprise satınalması"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Komanda yoldaşlarını dəvət et"
-keyDocs = "Əsas sənədlər"
-nextStep = "Növbəti addım: {{action}}"
-notStarted = "Başlanmayıb"
+licenseKey = "Lisenziya açarı"
+liveSub = "Təşkilatınız təmin edilib və lisenziyanız aktivdir."
+liveTitle = "Stirling Enterprise-də canlıdasınız"
+next = "Növbəti: {{stage}}"
 open = "Satınalmanı aç"
 scheduleCall = "Zəng planlaşdır"
-setup1Sub = "Komanda yoldaşlarınızı dəvət edin"
-setup1Title = "PDF Editor-u yerləşdirin"
-setup2Sub = "Redaktorlar və digər mənbələr üzrə emalı aktiv edin"
-setup2Title = "PDF Processor-u qoşun"
-setup3Sub = "Ehtiyac olduqda Təhlükəsizlik, Uyğunluq, Yönləndirmə və ya Saxlama funksiyalarını aktiv edin"
-setup3Title = "Tövsiyə olunan siyasətləri əlavə edin"
+sentenceAgreement = "razılaşmanı nəzərdən keçirin və imzalayın"
+sentenceLive = "təminetmə və yayım"
+sentencePayment = "satınalma sifarişi və ödəniş"
+sentenceQuote = "təklifinizi nəzərdən keçirin və qəbul edin"
+sentenceTrial = "sınaq iş məkanınızı quraşdırın"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} gün qalıb"
 daysLeft_other = "{{count}} gün qalıb"
-engineerLabel = "Həllər mühəndisiniz"
-eyebrow = "Yayımınız"
-live = "Stirling Enterprise-də canlıdasınız"
-nextStep = "Növbəti addım: {{action}}"
-subtitle = "Həllər mühəndisiniz hər addımdadır. Hər dəfə bir növbəti əməliyyat; tam yoxlama siyahısı aşağıdadır."
-title = "Sınaqdan canlıya, bir yönləndirilmiş yol"
-trialTitle = "Enterprise sınağı"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Bir imza MSA, order form, EULA və DPA-nı əhatə edir."
@@ -7727,6 +8604,9 @@ downloadError = "Offline lisenziya faylını hələ yaratmaq mümkün olmadı 
 downloadOffline = "Offline lisenziyanı endir (.lic)"
 hint = "Aktivləşdirmək üçün bu açarı self-hosted instansiyaya yapışdırın və ya qeydləriniz üçün saxlayın. Onu təhlükəsiz saxlayın."
 label = "Lisenziya açarınız"
+subtitle = "Bu açarla self-hosted instansiyanı aktivləşdirin və ya qeydləriniz üçün saxlayın."
+title = "Lisenziya açarınız"
+trialFileHint = "Bu, sınaq lisenziya faylınızdır. Razılaşmanız qüvvəyə mindikdən sonra qayıdıb onu yenidən endirin — onlayn lisenziya açarından fərqli olaraq, .lic faylı öz-özünə yenilənməyəcək."
 
 [portal.procurement.link]
 cta = "Hesabı əlaqələndir"
@@ -7739,65 +8619,62 @@ description = "Abunəliyiniz aktivdir və lisenziyanız verilib. Komandanız tə
 eyebrow = "Canlı"
 title = "Stirling Enterprise-də canlıdasınız"
 
-[portal.procurement.locked]
-description = "Sınaq açarları, öhdəlikli həcm təklifləri, bir imzalı razılaşma, ödəniş və sənəd reyestriniz Enterprise qiymətləndirməsinə başladıqdan sonra hamısı burada olur."
-eyebrow = "Yalnız Enterprise"
-talkToSales = "Satışla danışın"
-title = "Satınalma xətti Enterprise ilə açılır"
-
 [portal.procurement.milestone]
-accept = "Qəbul et və davam et"
-description = "PDF-i komandanızla paylaşmaq üçün endirin, hazır olanda qəbul etmək üçün geri qayıdın və ya dəyişiklik edin."
-download = "PDF endir"
 downloadError = "Təklif PDF-ini hələ endirmək mümkün olmadı — lütfən, bir azdan yenidən cəhd edin."
-edit = "Təklifi redaktə et"
-eyebrow = "Təklif {{number}}"
-perYear = " / il"
-preparedFor = "{{company}} üçün hazırlanıb"
-tcv = "{{value}} ümumi müqavilə dəyəri"
-title = "Təklifiniz hazırdır"
-
-[portal.procurement.modal]
-cancel = "Ləğv et"
-chooseFile = "Fayl seç"
-close = "Bağla"
-downloadBody = "Endirməniz qısa müddətdə başlayacaq."
-downloadCta = "Endir"
-downloadTitle = "Endir"
-noFile = "Fayl seçilməyib"
-payBody = "Öhdəlikli müqavilənizi Stripe vasitəsilə kart və ya bank köçürməsi ilə ödəyin. Ödəniş təsdiqlənən kimi iş sahəniz təmin edilir."
-payCta = "Stripe-a davam et"
-payTitle = "Ödənişi təsdiqlə"
-requestBodyFree = "Bunu tələb əsasında yaradırıq. Təsdiqləyin və həllər mühəndisiniz qısa müddətdə göndərəcək."
-requestBodyPaid = "Bu ödənişli əlavədir. Təsdiqləyin və həllər mühəndisiniz onun əhatəsini müəyyən edib sənədləri göndərəcək."
-requestCta = "Sorğu göndər"
-requestTitle = "Bu sənədi tələb et"
-signBody = "Stirling Enterprise Agreement-i e-imza üçün açır: bir imza MSA, order form, EULA və DPA-nı əhatə edir. Biz avtomatik qarşı imzalayırıq və siz ödənişə keçirsiniz."
-signCta = "İmza üçün aç"
-signTitle = "Razılaşmanızı nəzərdən keçirin və imzalayın"
-uploadBody = "PO-nuzu bizə göndərin və şərtlərinizə uyğun olaraq ona əsasən faktura yazırıq. PDF-i sürükləyin və ya aşağıdan fayl seçin."
-uploadCta = "Satınalma sifarişini yüklə"
-uploadTitle = "Satınalma sifarişinizi yükləyin"
 
 [portal.procurement.payment]
 description = "Təklifiniz qəbul edilib və lisenziyanız artıq aktivdir — komandanız dərhal başlaya bilər. Hazır olanda ilk fakturanı ödəyin; onu burada ödəyə və ya endirə bilərsiniz, email lazım deyil."
+downloadAgreement = "İmzalanmış razılaşmanı endir"
 downloadInvoice = "Fakturanı endir"
-simulate = "Ödənişin alındığını simulyasiya et (demo)"
+eyebrow = "Ödəniş"
 title = "Abunəlik yaradıldı"
 viewInvoice = "Fakturaya bax və ödə"
 
+[portal.procurement.review]
+acceptCta = "Təklifi qəbul et"
+annual = "İllik haqq (1-ci il)"
+downloadCta = "Təklifi endir"
+poNumber = "Satınalma sifarişi: {{po}}"
+renewal = "Müddətdən sonra {{amount}}/il ilə yenilənir (+{{pct}}% CPI)"
+tcv = "{{years}} illik müddət, əvvəlcədən tam ödənilib: {{tcv}}"
+validUntil = "{{date}} tarixinədək etibarlıdır"
+
 [portal.procurement.schedule]
 fallback = "Planlaşdırıcını yükləmək mümkün olmadı."
 fallbackLink = "Planlaşdırmanı yeni tabda aç"
+loading = "Planlayıcı yüklənir..."
 subtitle = "Həllər mühəndisiniz komandanızı yayım boyunca yönləndirəcək. Sizə uyğun vaxt seçin."
 title = "Zəng planlaşdır"
 
-[portal.procurement.status]
-action = "Əməliyyat tələb olunur"
-available = "Əlçatandır"
-complete = "Tamamlandı"
-pending = "Gözləmədə"
-request = "Sorğu əsasında"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Bağlı, outbound yoxdur"
+back = "Geri"
+businessName = "Biznes adı"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "İdarə olunan, ən sürətli başlanğıc"
+continue = "Davam et"
+deployment = "Harada yerləşdirilməlidir?"
+eula = "Stirling EULA və Kommersiya Şərtləri ilə razıyam."
+fullName = "Tam ad"
+fullNamePlaceholder = "Adınız"
+invites = "Komanda yoldaşlarını dəvət et · istəyə bağlı"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Zəng planlaşdır"
+seats = "Test edən insanlar"
+seatsPlaceholder = "məs. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker və ya Kubernetes"
+start = "Sınağa başla"
+stepOf = "Addım {{n}} / {{total}}"
+subtitle = "14 gün pulsuz, kart tələb olunmur."
+subtitleDetails = "Təklifiniz və razılaşmanız üçün bir neçə detal."
+talkFirst = "Əvvəlcə danışmağa üstünlük verirsiniz?"
+title = "Sınağınızı quraşdırın"
+viewEula = "Oxu"
+workEmail = "İş email-i"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Uzatma 7 gün əlavə edir və həllər mühəndisinizi xəbərdar edir."
@@ -7808,20 +8685,6 @@ maxed = "Limitə çatıb"
 subtitle = "Pulsuz sınağınız {{date}} tarixinə qədər davam edir. Kart tələb olunmur."
 title = "Enterprise sınağı"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Öhdəlikli həcm qiymətləndirməsi, təşkilat üzrə SSO + SCIM + RBAC, 90 günlük dəyişməz audit və ayrılmış SE."
-homeCta = "Sınağa başla →"
-homeHeadline = "Milyonlarla PDF emal edin."
-
-[portal.recentActivity]
-title = "Son fəaliyyət"
-viewAll = "Hamısına bax"
-
-[portal.recentActivity.empty]
-description = "Pipeline işləri, deploy-lar və agent hadisələri burada görünəcək."
-title = "Hələ burada heç nə yoxdur"
-
 [portal.search]
 ariaLabel = "Axtar"
 placeholder = "Stirling-də axtar — son nöqtələr, pipeline-lar, sənədlər…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Hesab bağlantısı"
 
-[portal.shell.header]
-accountFallback = "Hesab"
-accountMenu = "Hesab menyusu"
-darkMode = "Qaranlıq rejim"
-lightMode = "İşıqlı rejim"
-search = "Axtar"
-searchPlaceholder = "Axtar…"
-signOut = "Çıxış et"
-switchToDark = "Qaranlıq mövzuya keç"
-switchToLight = "İşıqlı mövzuya keç"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} sənəd"
 linkAccount = "Stirling hesabını əlaqələndir"
-planEditor = "Editor planı"
-planEnterprise = "Enterprise planı"
-planProcessor = "Processor planı"
 primaryNav = "Əsas naviqasiya"
 switchApp = "Tətbiqi dəyiş"
 
+[portal.shell.topbar]
+closeNav = "Naviqasiyanı bağla"
+openNav = "Naviqasiyanı aç"
+search = "Axtar"
+
 [portal.sources]
 subtitle = "Sənədləri Stirling-ə ötürən təkrar istifadə edilə bilən giriş bağlantıları. Bağlantını bir dəfə konfiqurasiya edin, sonra istənilən sayda siyasətdə ona istinad edin. Konfiqurasiyası və hansı siyasətlərin istifadə etməsi üçün sətrə klikləyin."
 title = "Mənbələr"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Mənbə qoş"
 
+[portal.sources.builder]
+back = "Mənbələrə qayıt"
+backToTypes = "Bütün mənbə növləri"
+cancel = "Ləğv et"
+chooseHint = "Sənədlərin haradan gələcəyini seçin. Bozlaşdırılmış connector-lar yoldadır."
+comingSoon = "Tezliklə"
+comingSoonHeading = "Tezliklə"
+create = "Mənbə yarat"
+createTitle = "Mənbə qoş"
+delete = "Sil"
+editTitle = "Mənbəni redaktə et"
+enabled = "Aktivləşdirilib"
+save = "Dəyişiklikləri saxla"
+
+[portal.sources.builder.folderAccess]
+description = "Qovluq avtomatlaşdırmaları yalnız administratorun icazə verdiyi qovluqlardan istifadə edə bilər. Onu Qovluq Girişi ayarlarına əlavə edin, sonra yenidən cəhd edin."
+openSettings = "Qovluq Girişi ayarları"
+title = "Bu qovluğa icazə verilmir"
+
 [portal.sources.delete]
 body = "\"{{name}}\" silinsin? Bu əməliyyatı geri qaytarmaq mümkün deyil. Ona istinad edən siyasətlər yenilənməlidir."
 cancel = "Ləğv et"
 confirm = "Sil"
 title = "Mənbə silinsin?"
 
-[portal.sources.detail]
-closeAriaLabel = "Detalı bağla"
-delete = "Mənbəni sil"
-docs24h = "Son 24 saat"
-docs30d = "Son 30 gün"
-docsTotal = "Ümumi görülən"
-docsTrend = "Son 30 gündə sənədlər"
-documents = "Sənədlər"
-edit = "Redaktə et"
-notReferenced = "Heç bir siyasət tərəfindən istinad edilmir, buna görə silmək təhlükəsizdir."
-pause = "Fasilə ver"
-resume = "Davam etdir"
-subtitle = "{{type}} · {{status}}"
-usedBy = "İstifadə edən"
-
 [portal.sources.empty]
 description = "Qovluğu (və tezliklə cloud storage-i) qoşun ki, siyasətlərinizin sənədləri götürəcəyi yer olsun."
 title = "Hələ heç bir mənbə qoşulmayıb"
@@ -7899,18 +8754,57 @@ inUse = "İstifadədə"
 total = "Bağlantılar"
 unused = "İstifadə olunmur"
 
+[portal.sources.networkFields.connection]
+helperText = "Server ünvanı və credential-ları olan saxlanmış bağlantı. Ona istinad edən hər mənbə tərəfindən təkrar istifadə olunur."
+label = "Bağlantı"
+
+[portal.sources.networkFields.directory]
+helperText = "Serverdə yoxlanılacaq qovluq, login home və ya share root-a nisbətən. Root üçün boş buraxın."
+label = "Qovluq"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume hər siyasət onu emal etdikdən sonra hər faylı serverdən silir."
+label = "Oxuma rejimi"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: hər faylı bir dəfə emal et"
+snapshot = "Snapshot: hər icrada qovluğu yenidən oxu"
+
+[portal.sources.networkFields.recursive]
+label = "Qovluq dərinliyi"
+
+[portal.sources.networkFields.recursive.options]
+all = "Alt qovluqları daxil et"
+top = "Yalnız üst səviyyə"
+
 [portal.sources.status]
 active = "Aktiv"
 disabled = "Deaktiv"
 unused = "İstifadə olunmur"
 
 [portal.sources.table]
+documents = "Sənədlər"
 source = "Mənbə"
 status = "Status"
 usedBy = "Siyasətlər"
 
+[portal.sources.types.box]
+description = "Komandanızın artıq paylaşdığı Box qovluqlarından sənədləri çəkin."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Paylaşılan Dropbox qovluğundan sənədləri çəkin."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Komandanızın editorda, siyasət və AI icraları üzrə emal etdiyi sənədlər."
 label = "Editor"
+noPolicies = "Editordan hələ heç bir siyasət işə salınmayıb."
+
+[portal.sources.types.email]
+description = "Xüsusi mailbox-a göndərilən əlavələri sənədlərə çevirin."
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "Yeni sənədlər üçün serverdəki kataloqu izləyin."
@@ -7943,25 +8837,80 @@ label = "Qovluq dərinliyi"
 all = "Alt qovluqları daxil et"
 top = "Yalnız üst səviyyə"
 
+[portal.sources.types.ftp]
+description = "Yeni sənədlər üçün FTP və ya FTPS server qovluğunu yoxlayın."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Paylaşılan Google Drive qovluqlarından sənədləri çəkin."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Yeni sənədlər üçün SMB network share-i izləyin."
+label = "Şəbəkə drive-ı"
+
+[portal.sources.types.onedrive]
+description = "Yeni sənədlər üçün OneDrive qovluqlarını izləyin."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Amazon S3 və ya S3-uyğun bucket-dən sənədləri çəkin."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Bucket və credential-ları saxlayan bağlantı. Ona istinad edən hər mənbə və pipeline çıxışı tərəfindən təkrar istifadə olunur."
+label = "Bağlantı"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume hər siyasət onu emal etdikdən sonra hər object-i bucket-dən silir."
+label = "Oxuma rejimi"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: hər object-i bir dəfə emal et"
+snapshot = "Snapshot: hər icrada bucket-i yenidən oxu"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Yalnız açarları bu prefix ilə başlayan object-lər emal olunur."
+label = "Açar prefix-i"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Yeni sənədlər üçün SFTP drop qovluğunu yoxlayın."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint sənəd kitabxanalarından sənədləri çəkin."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Mənbə"
 
+[portal.sources.types.webhook]
+createNote = "Bu webhook-u yaratdığınız zaman delivery URL və signing secret yaradılır. Göndərənlər sənədləri həmin URL-ə POST edir və istinad edən siyasətlər gəlişdə işləyir."
+description = "İstənilən xarici sistemdən imzalanmış HTTP POST ilə sənədləri qəbul edin."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Signing secret webhook yaradıldıqda bir dəfə göstərilir. Onu dəyişmək üçün mənbəni yenidən yaradın."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopyala"
+done = "Hazır"
+secret = "Signing secret"
+secretHelp = "Hər delivery-nin raw body-sini bu açarla imzalayın (HMAC-SHA256) və X-Stirling-Signature header-i kimi göndərin."
+secretWarning = "Signing secret-i indi kopyalayın. Təhlükəsizliyiniz üçün o yalnız bir dəfə göstərilir və sonra əldə edilə bilməz."
+title = "Webhook yaradıldı"
+url = "Delivery URL"
+usage = "Hər sənədi binary content type (application/pdf və ya application/octet-stream) ilə raw request body kimi delivery URL-ə POST edin. İstinad edən siyasətlər gəlişdə avtomatik işləyir."
+
 [portal.sources.wizard]
-back = "Geri"
-cancel = "Ləğv et"
-continue = "Davam et"
-editTitle = "Mənbəni redaktə et"
 name = "Ad"
 namePlaceholder = "məs. İddiaların qəbulu"
-save = "Dəyişiklikləri saxla"
-subtitle = "Addım {{current}} / {{total}} · {{label}}"
-title = "Mənbə qoş"
 type = "Növ"
 
-[portal.sources.wizard.steps]
-chooseType = "Növ seç"
-configure = "Konfiqurasiya et"
-review = "Nəzərdən keçir və qoş"
+[portal.stepModal]
+close = "Bağla"
 
 [portal.usage]
 managePayment = "Ödənişi idarə et"
@@ -8021,16 +8970,9 @@ summary = "Komandaya sahibdir — onun üzvlərinin resurslarını və paylaşı
 2 = "Defolt siyasət vasitəsilə portal girişi"
 3 = "Member-in edə bildiyi hər şey"
 
-[portal.welcome]
-ariaLabel = "Stirling PDF-ə xoş gəlmisiniz"
-badge = "Open-source"
-installEditor = "Editor-u quraşdır"
-inviteTeammates = "Komanda yoldaşlarını dəvət et"
-openInBrowser = "Brauzerdə aç"
-perks = "Həmişə pulsuz · Self-hostable"
-subtitle = "Dünyanın ən təhlükəsiz PDF Editor-u bütün ölçülü komandalar üçün pulsuzdur. 60+ PDF əməliyyatı və SSO daxildir."
-title = "Xoş gəlmisiniz"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Limitsiz"
 
 [printFile]
 title = "Faylı çap edin"
@@ -8613,6 +9555,14 @@ text = "PDF səhifələrinizi 90 dərəcəlik addımlarla saat istiqamətində v
 [rotate.tooltip.header]
 title = "Döndürmə parametrlərinin icmalı"
 
+[ruler]
+clearAll = "Hamısını təmizlə"
+hideAllLabels = "Bütün etiketləri gizlət"
+hideSmallLabels = "Kiçik etiketləri gizlət"
+physicalValues = "Fiziki"
+scaled = "Miqyaslı"
+showAllLabels = "Bütün etiketləri göstər"
+
 [sanitize]
 desc = "PDF fayllarından potensial zərərli elementləri silin."
 sanitizationResults = "Sanitizasiya Nəticələri"
@@ -8654,31 +9604,45 @@ label = "XMP Metaməlumatını sil"
 [sanitize.steps]
 settings = "Parametrlər"
 
-[sanitizePdf]
-tags = "təmiz,təhlükəsiz,güvənli,sil"
-
 [sanitizePDF]
 title = "PDF-i Təmizlə"
 
+[sanitizePdf]
+tags = "təmiz,təhlükəsiz,güvənli,sil"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Səhifə miqyasını tənzimləyin"
 
+[scaleSettings]
+activeScale = "Aktiv miqyas"
+apply = "Miqyası tətbiq et"
+applyCalibration = "Kalibrləməni tətbiq et"
+calculatedScale = "Hesablanmış miqyas"
+calibrate = "Kalibrlə"
+calibrating = "Kalibrlənir"
+calibrationDistanceRequired = "Sıfırdan böyük həqiqi məsafə daxil edin"
+calibrationInvalid = "Bu ölçmədən miqyası hesablamaq mümkün deyil"
+calibrationPaperDistance = "Ölçülmüş səhifə məsafəsi: {{distance}}"
+calibrationTitle = "Miqyası kalibrləyin"
+calibrationTooltip = "Miqyası avtomatik hesablamaq üçün məlum məsafəni ölçün"
+customScale = "Fərdi miqyas"
+noneSet = "Fərdi miqyas təyin edilməyib"
+presets = "Hazır miqyaslar"
+ratio = "Miqyas nisbəti"
+ratioHelp = "Nisbət: 1 səhifə vahidi = X həqiqi vahid"
+ratioPlaceholder = "məs., 100"
+ratioPositive = "Nisbət sıfırdan böyük olmalıdır"
+ratioRequired = "Nisbət tələb olunur"
+realDistance = "Həqiqi məsafə"
+realDistancePlaceholder = "məs., 5"
+reset = "Defolt ayarlara sıfırla"
+unit = "Vahid"
+unitInvalid = "Yanlış vahid: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Bucaq Aşağı Limiti:"
-10 = "Faylda ağ sərhədlərin olmasının qarşısını almaq üçün əlavə ediləcək sərhədin ölçüsünü təyin edir (defolt: 1)."
-2 = "Şəklin fırladılması üçün lazım olan minimal mütləq bucağı təyin edir (defolt: 10)."
-3 = "Rəng Toleransı:"
-4 = "Təxmin olunan arxaplan rənginin ətrafındakı rəng fərqliliyi intervalını təyin edir (defolt: 30)."
-5 = "Minimal Sahə:"
-6 = "Foto üçün minimal sahənin aşağı limitini təyin edir (defolt: 10000)."
-7 = "Minimal Kontur Sahəsi:"
-8 = "Fotonun kontur sahəsi üçün minimal aşağı limiti təyin edir"
-9 = "Sərhəd Ölçüsü:"
-
 [scannerImageSplit]
 submit = "Şəkil skanlarını çıxar"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Nə edir"
 whatThisDoesDesc = "Skan edilmiş səhifə və ya kompozit şəkildəki hər fotonu avtomatik aşkar edib çıxarır — əl ilə kəsmə tələb olunmur."
 whenToUse = "Nə zaman istifadə etməli"
 
+[ScannerImageSplit.selectText]
+1 = "Bucaq Aşağı Limiti:"
+10 = "Faylda ağ sərhədlərin olmasının qarşısını almaq üçün əlavə ediləcək sərhədin ölçüsünü təyin edir (defolt: 1)."
+2 = "Şəklin fırladılması üçün lazım olan minimal mütləq bucağı təyin edir (defolt: 10)."
+3 = "Rəng Toleransı:"
+4 = "Təxmin olunan arxaplan rənginin ətrafındakı rəng fərqliliyi intervalını təyin edir (defolt: 30)."
+5 = "Minimal Sahə:"
+6 = "Foto üçün minimal sahənin aşağı limitini təyin edir (defolt: 10000)."
+7 = "Minimal Kontur Sahəsi:"
+8 = "Fotonun kontur sahəsi üçün minimal aşağı limiti təyin edir"
+9 = "Sərhəd Ölçüsü:"
+
 [search]
 noResults = "Nəticə tapılmadı"
 placeholder = "Axtarış sözünü daxil edin..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Sizin Stirling-PDF serveriniz oflayndır və \"{{endp
 [session]
 expired = "Sessiyanızın vaxtı bitdi. Səhifəni yeniləyin və yenidən cəhd edin."
 
-[sessionManagement.tooltip]
-header = "İmzalama sessiyalarının idarə edilməsi"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Yeni iştirakçılar imzalama sırasının sonuna əlavə olunur"
-bullet2 = "Sessiya yekunlaşdırıldıqdan sonra iştirakçı əlavə etmək olmaz"
-bullet3 = "Növbəsi çatanda hər iştirakçıya bildiriş göndərilir"
-description = "Yekunlaşdırmadan əvvəl istənilən vaxt aktiv sessiyaya daha çox iştirakçı əlavə edə bilərsiniz."
-title = "İştirakçıların əlavə edilməsi"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Tam yekunlaşdırma</b>: Bütün iştirakçılar imzalayıb"
-bullet2 = "<b>Qismən yekunlaşdırma</b>: Bəzi iştirakçılar hələ imzalamayıb"
-bullet3 = "İmzalamayan iştirakçılar yekun sənəddən çıxarılacaq"
-bullet4 = "Yekunlaşdırdıqdan sonra imzalanmış PDF-i aktiv fayllara yükləyə bilərsiniz"
-description = "Yekunlaşdırma bütün imzaları tək imzalanmış PDF-də birləşdirir. Bu əməliyyatı geri qaytarmaq olmaz."
-title = "Sessiyanın Yekunlaşdırılması"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Artıq imzalamış iştirakçıları silmək olmaz"
-bullet2 = "Silinən iştirakçılar artıq bildiriş almayacaq"
-bullet3 = "İmzalama sırası avtomatik tənzimlənir"
-description = "İştirakçılar imzalamadan əvvəl sessiyalardan silinə bilər."
-title = "İştirakçıların Silinməsi"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Hər imza PDF-ə ardıcıllıqla tətbiq olunur"
-bullet2 = "Sonrakı imzalayanlar əvvəlki imzaları görə bilir"
-bullet3 = "Təsdiq axınları və hüquqi nəzarət zəncirləri üçün vacibdir"
-description = "Sessiyanı yaradan zaman göstərdiyiniz sıra birincinin kim olacağını müəyyən edir."
-title = "İmza Sırası"
-
 [settings]
 close = "Bağla"
 
+[settings.ai]
+documents = "Sənədlər və RAG"
+general = "Ümumi"
+limits = "Limitlər və performans"
+models = "Modellər və təminatçılar"
+title = "AI"
+
 [settings.configuration]
 advanced = "Qabaqcıl"
 database = "Məlumat bazası"
 endpoints = "Endpointlər"
 features = "Funksiyalar"
+folderAccess = "Qovluğa giriş"
 mcp = "MCP Server"
 storageSharing = "Fayl Saxlama və Paylaşma"
 systemSettings = "Sistem parametrləri"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Standart PDF redaktoru"
 defaultPdfEditorActive = "Stirling PDF standart PDF redaktorunuzdur"
 defaultPdfEditorChecking = "Yoxlanılır..."
 defaultPdfEditorInactive = "Başqa tətbiq standart kimi təyin edilib"
+defaultPdfEditorRemind = "Defolt olaraq təyin etməyi xatırlat"
+defaultPdfEditorRemindDescription = "Stirling PDF defolt PDF tətbiqiniz olmadıqda banner göstər."
 defaultPdfEditorSet = "Artıq standartdır"
 defaultStartupView = "Başlanğıcda standart görünüş"
 defaultStartupViewDescription = "Tətbiq işə düşəndə sol sütunda hansı vərəqin aktiv olacağını seçin"
@@ -8817,9 +9771,18 @@ languageDescription = "Görüntüləmə dilini seçin"
 logout = "Hesabdan çıx"
 setAsDefault = "Standart et"
 theme = "Mövzu"
+themeAccent = "Vurğu rəngi"
+themeAccentCustom = "Fərdi rəng"
+themeAccentCustomHint = "Fərdi (defolt tövsiyə olunur)"
+themeAccentDark = "Qaranlıq rejim vurğu rəngi"
+themeAccentDefault = "Defolt"
+themeAccentDefaultHint = "Defolt tema (tövsiyə olunur)"
+themeAccentDescription = "Düymələr, linklər və vurğulamalar ona uyğunlaşır və o, tətbiqə incə rəng çaları verir. Açıq və qaranlıq rejimlərin hərəsinin öz rəngi var. Sistem hansı aktivdirsə, ondan istifadə edir."
+themeAccentLight = "Açıq rejim vurğu rəngi"
 themeDark = "Tünd"
 themeDescription = "Açıq və tünd rejim arasında keçid et"
 themeLight = "Açıq"
+themeReset = "Temanı defolt vəziyyətə bərpa et"
 themeSystem = "System"
 title = "Ümumi"
 user = "İstifadəçi"
@@ -8833,6 +9796,12 @@ intro = "Təşkilatınız üçün istifadəçi identifikasiyası, komanda idarə
 learnMore = "Daha çoxu üçün sənədlərə baxın"
 title = "Sistem administratorları üçün"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud-a daxil olduğunuzda hansı tətbiqin açılacağını seçin."
+editor = "Redaktor"
+processor = "Prosessor"
+title = "Daxil olduqdan sonra"
+
 [settings.general.mode]
 fullscreen = "Tam ekran"
 sidebar = "Yan panel"
@@ -9041,6 +10010,11 @@ security = "Təhlükəsizlik"
 telegram = "Telegram"
 title = "Təhlükəsizlik və Autentifikasiya"
 
+[settings.signOut]
+confirm = "Çıxış etmək istədiyinizə əminsiniz?"
+submit = "Çıxış et"
+title = "Çıxış"
+
 [settings.team]
 title = "Komanda"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Serverə yüklə"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "buraya klikləyin"
+fallback = "Əgər avtomatik açılmadısa,"
+opening = "Swagger UI yeni tabda açılır..."
 tags = "api,sənədləşmə,swagger,endpointlər,inkişaf"
 title = "API sənədləşməsi"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Bu aləti işə salmaq üçün Aktiv Fayllarda faylları seç
 singleFileScope = "Yalnız buna tətbiq olunur: {{fileName}}"
 viewerMode = "Bir neçə fayl seçmək üçün fayl redaktoruna keçin."
 
+[toolFormat]
+ANY = "istənilən fayl"
+CBR = "komiks arxivi (CBR)"
+CBZ = "komiks arxivi (CBZ)"
+CSV = "CSV faylı"
+EBOOK = "elektron kitab"
+EMAIL = "e-poçt"
+EXCEL = "elektron cədvəl"
+HTML = "veb səhifə"
+IMAGE = "şəkillər"
+JAVASCRIPT = "JavaScript faylı"
+JSON = "JSON faylı"
+MARKDOWN = "Markdown faylı"
+NONE = "fayl yoxdur"
+PCL = "PCL çap faylı"
+PDF = "PDF"
+PDF_ENCRYPTED = "parolla qorunan PDF"
+POSTSCRIPT = "PostScript faylı"
+PPT = "təqdimat"
+TEXT = "mətn faylı"
+VIDEO = "video"
+WORD = "Word sənədi"
+XML = "XML faylı"
+XPS = "XPS sənədi"
+ZIP = "ZIP arxivi"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Bütün alətlərə qayıt"
 collapse = "Paneli yığ"
 expand = "Paneli genişləndir"
 goBack = "Geri qayıt"
+pdfTools = "PDF alətləri"
 placeholder = "Başlamaq üçün alət seçin"
 premiumFeature = "Premium xüsusiyyət:"
+searchTools = "Alətləri axtar"
 toolsHeader = "Alətlər"
 viewAllTools = "Bütün alətlərə bax"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Alət tapılmadı"
 quickAccess = "TEZ GİRİŞ"
 searchPlaceholder = "Alətlərdə axtar..."
 
-[toolPicker.categories]
-advancedTools = "Qabaqcıl Alətlər"
-recommendedTools = "Tövsiyə olunan Alətlər"
-standardTools = "Standart Alətlər"
-
 [toolPicker.subcategories]
 advancedFormatting = "Qabaqcıl Formatlama"
 automation = "Avtomatlaşdırma"
@@ -9950,16 +10950,31 @@ title = "İstifadəçilər"
 you = "(siz)"
 
 [users.action]
+cancelInvite = "Dəvəti ləğv et"
 deleteTeam = "Komandanı sil"
 disableMfa = "MFA sıfırla"
 move = "Komandaya köçür"
 reinstate = "Bərpa et"
 remove = "Təşkilatdan çıxar"
+removeTeam = "Komandadan sil"
 rename = "Komandanın adını dəyiş"
 resetPw = "Şifrəni sıfırla"
 suspend = "Dayandır"
 unlock = "Hesabı kiliddən çıxar"
 
+[users.activity]
+daysAgo = "{{count}}g əvvəl"
+hoursAgo = "{{count}}s əvvəl"
+justNow = "Elə indi"
+minutesAgo = "{{count}}dəq əvvəl"
+monthsAgo_one = "{{count}} ay əvvəl"
+monthsAgo_other = "{{count}} ay əvvəl"
+never = "Heç vaxt"
+weeksAgo_one = "{{count}} həftə əvvəl"
+weeksAgo_other = "{{count}} həftə əvvəl"
+yearsAgo_one = "{{count}} il əvvəl"
+yearsAgo_other = "{{count}} il əvvəl"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Siyasəti təsdiqləyir"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "{{email}} ünvanına dəvət ləğv edilsin? Onlar cari linklə qoşula bilməyəcəklər."
+cancelInviteTitle = "Dəvəti ləğv et"
 deleteTeamBody = "{{name}} komandası silinsin? Komanda əvvəlcə boş olmalıdır - üzvlərini başqa komandaya köçürün və o, hələ də heç bir inteqrasiya konfiqurasiyasına sahib olmamalıdır."
 deleteTeamTitle = "Komandanı sil"
 disableMfaBody = "{{name}} üçün MFA qeydiyyatı silinsin? Tələb olunarsa, növbəti girişdə yenidən quracaqlar."
 disableMfaTitle = "MFA sıfırla"
 removeBody = "{{name}} təşkilatdan həmişəlik çıxarılsın? Bu əməliyyatı geri qaytarmaq mümkün deyil."
+removeTeamBody = "{{name}} komandadan silinsin? Hesabı qalacaq, lakin bu komandanın resurslarına girişini itirəcək."
 removeTitle = "Üzvü çıxar"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "İstifadəçi adı"
 usernameError = "İstifadəçi adı ən azı 3 simvoldan ibarət olmalıdır"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "{{who}} tərəfindən dəvət olunub"
+cancel = "Ləğv et"
+count = "{{count}} gözləmədə"
+desc = "Hələ qoşulmamış dəvət olunan şəxslər. Qəbul edənədək yer tuturlar."
+expiresInDays_one = "Müddəti {{count}} gün sonra bitir"
+expiresInDays_other = "Müddəti {{count}} gün sonra bitir"
+expiresToday = "Müddəti bu gün bitir"
+title = "Gözləmədə olan dəvətlər"
+
 [users.loadError]
 description = "Backend-ə qoşularkən xəta baş verdi və ya giriş icazəniz yoxdur. Yenidən cəhd edin."
 title = "Üzvlər yüklənə bilmədi"
@@ -10212,9 +11240,11 @@ title = "Qoşmalar"
 
 [viewer.bookmarks]
 bookmarkTitle = "Əlfəcin başlığı"
+bookmarkTitleRequired = "Əlfəcin başlığı tələb olunur"
 closeSidebar = "Əlfəcinlər yan panelini bağla"
 collapseAll = "Bütün əlfəcinləri yığ"
 expandAll = "Bütün əlfəcinləri genişləndir"
+searchPlaceholder = "Əlfəcinləri axtar"
 
 [viewer.comments]
 addComment = "Şərh əlavə et"
@@ -10605,30 +11635,6 @@ title = "Filigran mətni"
 image = "Şəkil"
 text = "Yazı"
 
-[wetSignature.tooltip]
-header = "İmza yaratma üsulları"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Qələm rəngini və qalınlığını fərdiləşdirin"
-bullet2 = "Bəyənənədək silin və yenidən çəkin"
-bullet3 = "Sensor qurğularda işləyir (planşetlər, telefonlar)"
-description = "Siçan və ya sensor ekran vasitəsilə əl yazısı imza yaradın. Şəxsi, autentik imzalar üçün ən uyğundur."
-title = "İmzanı çək"
-
-[wetSignature.tooltip.type]
-bullet1 = "Bir neçə şriftdən seçin"
-bullet2 = "Mətn ölçüsünü və rəngini fərdiləşdirin"
-bullet3 = "Standartlaşdırılmış imzalar üçün idealdır"
-description = "Yazılmış mətndən imza yaradın. Sürətli və ardıcıl, iş sənədləri üçün uyğundur."
-title = "İmzanı yaz"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG və digər şəkil formatlarını dəstəkləyir"
-bullet2 = "Ən yaxşı nəticə üçün şəffaf fon məsləhətdir"
-bullet3 = "Şəkil imza sahəsinə uyğun ölçüləndiriləcək"
-description = "Öncədən yaradılmış imza şəklini yükləyin. Skan edilmiş imzanız və ya şirkət loqonuz varsa idealdır."
-title = "İmza şəklini yüklə"
-
 [workbenchBar]
 activeFiles = "Aktiv fayllar"
 annotations = "Annotasiyalar"
@@ -10652,6 +11658,7 @@ redact = "Gizlət"
 rotateLeft = "Sola çevir"
 rotateRight = "Sağa çevir"
 ruler = "Xətkeş / Ölçmə"
+rulerSettings = "Miqyas ayarları"
 save = "Yadda saxla"
 saveAll = "Hamısını yadda saxla"
 saveAs = "Fərqli yadda saxla"
diff --git a/frontend/editor/public/locales/bg-BG/translation.toml b/frontend/editor/public/locales/bg-BG/translation.toml
index ea0e46cd1d..984127bd2a 100644
--- a/frontend/editor/public/locales/bg-BG/translation.toml
+++ b/frontend/editor/public/locales/bg-BG/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "избрани файлове"
 font = "Шрифт"
 fontSizeTooltip = "Размер на текста за номера на страници в точки. По-големите числа правят по-голям текст."
 fontTypeTooltip = "Семейство шрифтове за номерата на страниците. Изберете спрямо стила на документа."
-genericSubmit = "Подайте"
 green = "Зелено"
 help = "Помощ"
-imgPrompt = "Изберете изображение(я)"
 incorrectPasswordMessage = "Текущата парола е неправилна."
 info = "Информация"
 invalidUndoData = "Не може да се отмени: невалидни данни за операцията"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Споразумение за влизане"
 logOut = "Изход"
 marginTooltip = "Разстоянието между номера на страницата и ръба на страницата."
 moreOptions = "Още опции"
-multiPdfPrompt = "Изберете PDF (2+)"
 never = "Никога"
 no = "Не"
 noFileSelected = "Няма избран файл. Моля, качете един."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Персонализиран ред на страниците
 pages = "Страници"
 pageSelectionPrompt = "Персонализиран избор на страница (Въведете списък с номера на страници 1,5,6, разделени със запетая, или функции като 2n+1) :"
 password = "Парола"
-pdfPrompt = "Изберете PDF(и)"
 pin = "Закачи файл (запазва активен след изпълнение на инструмента)"
 pro = "Pro"
 processingComplete = "Вашият файл е готов."
@@ -356,6 +352,7 @@ text = "Тези разрешения контролират какво мога
 title = "Промяна на правата"
 
 [addStamp]
+preview = "Преглед на печата"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ръчни изтегляния: щракнете върху вр
 noLanguages = "Няма намерени tessdata езици в конфигурираната директория."
 permissionNotice = "Пътят към tessdata няма права за запис. Изтеглянията ще се отварят в браузъра; моля, запишете файловете .traineddata ръчно в папката tessdata."
 
+[admin.settings.ai.documents]
+description = "Конфигурирайте модела за вграждания и настройките за извличане, използвани за отговаряне на въпроси по документи. Прилага се към AI engine при запазване."
+title = "Документи и RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Оставете празно, за да използвате собствените идентификационни данни от средата на engine. Прилага се за self-hosted внедрявания с един engine."
+generic = "API key за вграждания"
+openai = "OpenAI API key"
+setPlaceholder = "Запазено - оставете празно, за да запазите текущия ключ"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Базов URL на OpenAI-съвместимия / Ollama endpoint за вграждания, напр. http://ollama:11434/v1. Трябва да сочи към доверен вътрешен endpoint (чувствително към SSRF)."
+label = "Базов URL за вграждания"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Име на модела за вграждания. Свободен текст; предложенията са само подсказки."
+label = "Модел за вграждания"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Доставчик, използван за превръщане на текста от документа във векторни вграждания."
+label = "Доставчик на вграждания"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Максимален брой търсения за извличане, които агентът може да изпълни за заявка."
+label = "Макс. търсения"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Промяната на модела за вграждания влиза в сила незабавно, но документите, индексирани с предишния модел, трябва да бъдат преиндексирани, за да връща търсенето правилни резултати."
+title = "Изисква се преиндексиране"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Ако сте променили модела за вграждания, преиндексирайте съществуващите документи, за да използва търсенето новия модел."
+
+[admin.settings.ai.documents.topK]
+description = "Брой най-релевантни фрагменти, извлечени при търсене."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Свържете Stirling с Python AI engine и изберете кои AI възможности да са достъпни. Промените се прилагат при рестартиране."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Включвайте или изключвайте отделни AI функции. Изключените функции са скрити в приложението."
+title = "Възможности"
+
+[admin.settings.ai.general.enabled]
+description = "Главен превключвател. Когато е изключен, няма достъпни AI инструменти, агенти или извиквания към engine."
+label = "Активиране на AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Разговорен асистент за работа с PDF файлове."
+label = "Чат асистент"
+
+[admin.settings.ai.general.features.classify]
+description = "Автоматично категоризиране на документи по тип или съдържание."
+label = "Класификация на документи"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Генериране на нов PDF (напр. от HTML) чрез AI агент."
+label = "Създаване на PDF от prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Задавайте въпроси и получавайте отговори, основани на качен документ."
+label = "Въпроси по документ"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Преглед на документи за математически и числови грешки."
+label = "Математически одитор"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Добавяне на коментари за преглед и анотации, написани от AI, към PDF."
+label = "PDF агент за коментари"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Време за изчакване за по-тежки операции на агента, като генериране на документи."
+label = "Време за изчакване при дълги операции (секунди)"
+
+[admin.settings.ai.general.note]
+body = "AI engine работи като отделна услуга. Неговата споделена тайна"
+body2 = "се задава чрез променлива на средата в container. API keys на доставчиците могат да бъдат въведени на тези страници или предоставени като променливи на средата за engine; въведените тук ключове се изпращат към engine при запазване."
+title = "Относно AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Време за изчакване за streaming (token-by-token) чат отговори."
+label = "Време за изчакване на stream (секунди)"
+
+[admin.settings.ai.general.test]
+button = "Тест на връзката"
+failBody = "AI engine не отговори. Проверете URL, дали container-ът на engine работи и дали AI е активиран (след активиране е нужно рестартиране)."
+failTitle = "AI engine е недостъпен"
+okBody = "AI engine отговори на health check."
+okTitle = "AI engine е достъпен"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Време за изчакване за стандартни AI заявки към engine."
+label = "Време за изчакване на заявка (секунди)"
+
+[admin.settings.ai.general.url]
+description = "Вътрешен URL на Python AI engine, напр. http://stirling-pdf-engine:5001."
+label = "URL на AI engine"
+
+[admin.settings.ai.limits]
+description = "Предпазни ограничения за това колко работа могат да извършват AI заявките и колко да се изпълняват едновременно. Прилага се към AI engine при запазване."
+title = "Ограничения и производителност"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Предпазно ограничение: отхвърля AI заявки, чийто извлечен текст надвишава тази дължина."
+label = "Макс. знаци на заявка"
+
+[admin.settings.ai.limits.maxPages]
+description = "Предпазно ограничение: отхвърля AI заявки над толкова PDF страници."
+label = "Макс. страници на заявка"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Максимален брой едновременни активни извиквания на модели в целия engine."
+label = "Макс. едновременност на модела"
+
+[admin.settings.ai.models]
+description = "Изберете LLM доставчика и smart/fast моделите, които AI engine използва. Прилага се към AI engine при запазване."
+title = "Модели и доставчици"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Оставете празно, за да използвате собствените идентификационни данни от средата на engine. Прилага се за self-hosted внедрявания с един engine."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Запазено - оставете празно, за да запазите текущия ключ"
+
+[admin.settings.ai.models.baseUrl]
+description = "Базов URL на OpenAI-съвместимия / Ollama endpoint, напр. http://ollama:11434/v1."
+label = "Базов URL на доставчика"
+warning = "Базовият URL трябва да сочи към доверен вътрешен endpoint. Engine ще прави server-side заявки към него, затова недоверена стойност е чувствителна към SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Максимален брой изходни tokens за бързия модел."
+label = "Макс. tokens за бърз модел"
+
+[admin.settings.ai.models.fastModel]
+description = "По-евтин, по-бърз модел за леки задачи. Свободен текст; предложенията са само подсказки."
+label = "Бърз модел"
+
+[admin.settings.ai.models.provider]
+description = "С кой LLM доставчик комуникира engine."
+label = "Доставчик"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Максимален брой изходни tokens за smart модела."
+label = "Макс. tokens за smart модел"
+
+[admin.settings.ai.models.smartModel]
+description = "Модел с високи възможности за сложно разсъждение. Свободен текст; предложенията са само подсказки."
+label = "Smart модел"
+
+[admin.settings.ai.saved]
+body = "Промените се изпращат автоматично към AI engine."
+bodyNoPush = "Настройките са запазени. Те ще се приложат следващия път, когато AI engine зареди конфигурацията си."
+title = "AI настройките са запазени"
+
 [admin.settings.badge]
 clickToUpgrade = "Щракнете, за да видите подробности за плана"
 
@@ -938,6 +1094,25 @@ label = "Генерирай наново при стартиране"
 description = "Брой дни, през които сертификатът ще е валиден"
 label = "Валидност на сертификата (дни)"
 
+[admin.settings.folderAccess]
+description = "Директории, от които папковите източници и папковите изходи могат да четат и в които могат да записват. Това е граница за сигурност: автоматизациите никога не могат да бъдат насочени към server път извън този списък."
+securityNote = "Оставете това празно, за да деактивирате напълно папковите източници и изходи. Собствената конфигурационна директория на Stirling винаги е забранена."
+title = "Достъп до папки"
+
+[admin.settings.folderAccess.implied]
+description = "Тези управлявани от Stirling директории са винаги разрешени и не могат да бъдат променяни тук."
+serverStorage = "Съхранение на файлове на server"
+title = "Винаги разрешени"
+watchedFolder = "Наблюдавана папка на pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Добавяне"
+empty = "Няма разрешени папки. Папковите източници и изходи в момента са деактивирани."
+hint = "Въведете абсолютни пътища, например /data/inbox."
+label = "Разрешени корени на папки"
+placeholder = "/data/inbox"
+remove = "Премахване на корен на папка"
+
 [admin.settings.general]
 description = "Конфигурирайте настройки на приложението за цялата система, включително брандиране и поведение по подразбиране."
 system = "Система"
@@ -1842,6 +2017,15 @@ export = "Експорт"
 accessDenied = "Достъпът е отказан"
 insufficientPermissions = "Нямате разрешение да извършите това действие."
 
+[auth.callback]
+completing = "Завършване на удостоверяването"
+invalidToken = "OAuth входът не бе успешен - невалиден token."
+missingToken = "OAuth входът не бе успешен - не е получен token."
+oauthFailed = "OAuth входът не бе успешен. Моля, опитайте отново."
+pleaseWait = "Моля, изчакайте, докато завършим влизането ви."
+signedOut = "Излязохте от профила си. Моля, влезте отново."
+windowMayClose = "Можете да затворите този прозорец, след като завърши."
+
 [auth.displayName]
 guest = "Гост"
 user = "Потребител"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Защитава PDF документи чрез прем
 description = "Този инструмент автоматично ще преименува PDF файлове според тяхното съдържание. Анализира документа, за да намери най-подходящото заглавие от текста."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Автоматично завъртане"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Праг на увереност"
+
+[autoRotate.detectionMode]
+auto = "Автоматично"
+osd = "Само OCR"
+text = "Само текст"
+title = "Метод на откриване"
+
+[autoRotate.error]
+failed = "Възникна грешка при автоматичното завъртане на PDF."
+
+[autoRotate.inferUndetected]
+title = "Завъртане на страници с ниска увереност за съвпадение"
+
+[autoRotate.report]
+applied = "{{degrees}}° по часовниковата стрелка"
+confidenceValue = "Увереност {{value}}"
+noChange = "Без промяна"
+pageLabel = "Страница {{number}}"
+summary = "{{rotated}} от {{total}} страници завъртени, {{unchanged}} оставени без промяна"
+title = "Отчет за откриването"
+
+[autoRotate.report.method]
+inferred = "Съвпаднато"
+none = "Пропуснато"
+osd = "OCR"
+text = "Текст"
+
+[autoRotate.report.note]
+belowThreshold = "Под прага"
+blankPage = "Страницата е празна"
+inferredFromDocument = "Същото като другите страници"
+noDominantDirection = "Смесени посоки на текста"
+osdFailed = "Не е намерен четим текст"
+osdNoVerdict = "Не може да се определи правилната ориентация"
+tesseractUnavailable = "OCR не е инсталиран"
+tooFewGlyphs = "Твърде малко текст"
+
+[autoRotate.results]
+title = "Резултати от автоматичното завъртане"
+
+[autoRotate.settings]
+title = "Настройки"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Колко сигурна трябва да е проверката, преди страница да бъде завъртяна. Намалете го, за да завъртате повече страници, или го увеличете, за да оставяте повече страници непроменени."
+title = "Праг на увереност"
+
+[autoRotate.tooltip.description]
+text = "Определя коя страна на всяка страница трябва да е нагоре и я завърта правилно. Страниците, които вече са изправени, се оставят без промяна."
+
+[autoRotate.tooltip.detectionMode]
+text = "Автоматично първо чете текста на страницата, след което разглежда страницата като изображение, ако това не е достатъчно. Само текст пропуска проверката на изображение, което е най-бързо за документи, които никога не са били сканирани. Само OCR третира всяка страница като изображение."
+title = "Метод на откриване"
+
+[autoRotate.tooltip.header]
+title = "Автоматично завъртане"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Празни или почти празни страници не могат да бъдат проверени самостоятелно. Когато всяка прочетена страница се нуждае от едно и също завъртане, тези страници се завъртат, за да съвпаднат с тях."
+title = "Завъртане на страници с ниска увереност за съвпадение"
+
 [autoSizeSplitPDF]
 tags = "pdf,разделяне,документ,организация"
 
@@ -2189,33 +2440,6 @@ keywords = "Ключови думи: odd, even"
 numbers = "Числа/диапазони: 5, 10-20"
 progressions = "Прогресии: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Видове сертификати"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Управляван от системни администратори"
-bullet2 = "Споделян между оторизирани потребители"
-bullet3 = "Представлява идентичността на компанията, а не на индивида"
-bullet4 = "Най-подходящ за: Официални документи, екипни подписи"
-description = "Споделен сертификат, предоставен от вашата организация. Използва се за подписване от името на компанията."
-title = "Сертификат на организацията"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Генерира се автоматично при първа употреба"
-bullet2 = "Привързан към вашия потребителски акаунт"
-bullet3 = "Не може да се споделя с други потребители"
-bullet4 = "Най-подходящ за: Лични документи, индивидуална отговорност"
-description = "Автоматично генериран сертификат, уникален за вашия акаунт. Подходящ за индивидуални подписи."
-title = "Личен сертификат"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Изисква P12/PFX файл и парола"
-bullet2 = "Може да бъде издаден от външни сертифициращи органи"
-bullet3 = "По-високо ниво на доверие за правни документи"
-bullet4 = "Най-подходящ за: Правно обвързващи договори, външна валидация"
-description = "Използвайте собствен PKCS#12 сертификатен файл. Осигурява пълен контрол върху свойствата на сертификата."
-title = "Качване на потребителски P12"
-
 [certSign]
 awaitingSignatures = "Изчакват се подписи"
 chooseCertificate = "Изберете файл със сертификат"
@@ -2542,34 +2766,6 @@ server = "Сървър"
 stepTitle = "Източник на сертификата"
 upload = "Качване"
 
-[certSign.tooltip.header]
-title = "За управлението на подписи"
-
-[certSign.tooltip.overview]
-bullet1 = "Проверявайте съществуващи подписи и тяхната валидност"
-bullet2 = "Вижте детайлна информация за подписващи и сертификати"
-bullet3 = "Добавяйте нови цифрови подписи за защита на документите"
-bullet4 = "Поддържа множество файлове с лесна навигация"
-text = "Този инструмент ви позволява да проверявате дали вашите PDF-и са цифрово подписани и да добавяте нови цифрови подписи. Цифровите подписи доказват кой е създал или одобрил документ и показват дали е променян след подписване."
-title = "Какво може този инструмент?"
-
-[certSign.tooltip.signing]
-bullet1 = "Поддържа формати PEM, PKCS12, JKS и сървърен сертификат"
-bullet2 = "Опция за показване или скриване на подписа в PDF"
-bullet3 = "Добавете причина, местоположение и име на подписващия"
-bullet4 = "Изберете на коя страница да поставите видими подписи"
-bullet5 = "Използвайте сървърния сертификат за простата опция 'Sign with Stirling-PDF'"
-text = "За да подпишете PDF, ви е необходим цифров сертификат (като PEM, PKCS12 или JKS). Можете да изберете подписът да е видим в документа или да остане невидим само за сигурност."
-title = "Добавяне на подписи"
-
-[certSign.tooltip.validation]
-bullet1 = "Показва дали подписите са валидни или невалидни"
-bullet2 = "Показва информация за подписващия и дата на подписване"
-bullet3 = "Проверява дали документът е модифициран след подписване"
-bullet4 = "Може да използва потребителски сертификати за проверка"
-text = "При проверка инструментът показва дали подписите са валидни, кой е подписал документа, кога е подписан и дали документът е променян след подписване."
-title = "Проверка на подписи"
-
 [changeCreds]
 changeUsername = "Актуализирайте потребителското си име. След актуализиране ще бъдете изведени от профила."
 credsUpdated = "Акаунтът е актуализиран"
@@ -2824,6 +3020,7 @@ next = "Напред"
 preview = "Преглед"
 previous = "Назад"
 refresh = "Опресни"
+remaining = "Оставащи"
 retry = "Повтори"
 save = "Запазване"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Разширено наблюдение"
-allInOneWorkspace = "Всичко-в-едно работно място за PDF (преглед, инструменти и агент)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Специализирана поддръжка и SLA"
-fasterThroughput = "10x по-висока пропускателност"
-fullyPrivateFiles = "Напълно частни файлове"
-largeFileProcessing = "Обработка на големи файлове"
-orgWideAccess = "Контроли за достъп на ниво организация"
-premiumAiModels = "Премиум AI модели"
-prioritySupport = "Приоритетна поддръжка"
-privateDocCloud = "Частен облак за документи"
-ragFineTuning = "RAG + фина настройка"
-secureApiAccess = "Сигурен достъп до API"
-standardThroughput = "Стандартна пропускателност"
-unlimitedApiAccess = "Неограничен достъп до API"
-unlimitedSeats = "Неограничени места"
-
 [crop]
 autoCrop = "Автоматично изрязване на бели полета"
 noFileSelected = "Изберете PDF файл, за да започнете изрязването"
@@ -3346,6 +3525,7 @@ message = "Неуспешно задаване на обработчик на PD
 title = "Грешка"
 
 [defaultApp.prompt]
+dontRemind = "Не ми напомняй отново"
 message = "Направете Stirling PDF приложение по подразбиране за отваряне на PDF файлове."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Персонализиране на групи"
 dropHint = "Отворете файлове, за да започнете"
 dropToAdd = "Drop files to add"
 expand = "Разгъване на страничната лента"
-files = "Файлове"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive не е конфигуриран"
 leaveMyFiles = "Напуснете Моите файлове"
+library = "PDF библиотека"
 myFiles = "Моите файлове"
 noFiles = "Все още няма файлове"
 openFileManager = "Отваряне на мениджъра на файлове"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Добави"
-addLabel = "Добавяне на етикет…"
-categoryIconAria = "Изберете икона за {{name}}"
-createCategory = "Създай категория"
-delete = "Изтрий категория"
 done = "Готово"
-hide = "Скрий категория"
-newCategory = "Име на нова категория…"
-removeLabel = "Премахни {{name}}"
-rename = "Преименувай"
 reset = "Възстанови по подразбиране"
-search = "Търсене на етикети…"
-show = "Покажи категория"
 subtitle = "Групирайте файловете си в родителски категории. Добавете съществуващи или нови етикети към категория, преименувайте я или създайте своя. Файловете, които не са в нито една от вашите категории, се показват под „Други“."
 title = "Категории в страничната лента"
 
@@ -3808,6 +3977,7 @@ refresh = "Опреснете от сървъра"
 remove = "Изтриване"
 removeVersion = "Премахнете тази версия"
 rename = "Преименувайте"
+renamed = "Преименувано"
 renameFolder = "Преименувайте папката"
 resizeFolderTree = "Преоразмерете дървото на папките (клавиши със стрелки, Shift за по-големи стъпки; двойно щракване за авто-побиране)"
 save = "Запазете"
@@ -3910,9 +4080,7 @@ count = "Файлове"
 folder = "Папка"
 labels = "Етикети"
 modified = "Променен"
-name = "Име"
 size = "Размер"
-toolHistoryAtVersion = "Кумулативна верига от инструменти"
 totalSize = "Общ размер"
 type = "Тип"
 versionHistory = "Път на версиите"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Всичко е запазено"
+extractCsvError = "Неуспешно извличане на CSV"
+extractXlsxError = "Неуспешно извличане на XLSX"
 flattenAfterFilling = "Фиксиране след попълване"
+requiredAbbreviation = "зад."
+requiredFieldsError = "Моля, попълнете всички задължителни полета"
 rescanFields = "Пресканирайте полетата"
 rescanFormFields = "Пресканирайте полетата на формуляра"
 save = "Запазете"
+saveShortcut = "Ctrl+S за запазване"
+unsavedChanges = "Незапазени промени"
 
 [formFill.sidebar]
 close = "Затворете страничната лента"
@@ -4309,6 +4484,11 @@ desc = "Автоматично преименува PDF файл според о
 tags = "авто-откриване,по заглавие,организиране,преименуване"
 title = "Авто преименуване на PDF"
 
+[home.autoRotate]
+desc = "Открива ориентацията на всяка страница и автоматично я завърта изправена."
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "Автоматично завъртане"
+
 [home.autoSizeSplitPDF]
 tags = "авто,разделяне,размер"
 title = "Авто делене по размер/брой"
@@ -4608,13 +4788,13 @@ hint = "Качете PNG, JPG, SVG или друг файл с изображе
 label = "Качване на изображение"
 placeholder = "Изберете файл с изображение"
 
-[imageToPdf]
-tags = "преобразуване,img,jpg,изображение,снимка"
-
 [imageToPDF]
 header = "Изображение към PDF"
 title = "Изображение към PDF"
 
+[imageToPdf]
+tags = "преобразуване,img,jpg,изображение,снимка"
+
 [infoBanner]
 dismiss = "Отхвърлете"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Поканени сте!"
 
 [landing]
 addFiles = "Добавяне на файлове"
-heroSubtitle = "Плъзнете и пуснете или добавете съществуващ PDF, за да започнете."
 mobileUpload = "Качване от мобилно устройство"
 openFromComputer = "Отвори от компютър"
 uploadFromComputer = "Качване от компютър"
-workbenchEmptyStateHero = "Пуснете PDF навсякъде"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Вход"
 magicLinkSent = "Магическа връзка е изпратена до {{email}}! Проверете пощата си и щракнете върху връзката, за да влезете."
 mfaCode = "Код за удостоверяване"
 mfaRequired = "Изисква се двуфакторен код"
+noAccount = "Нямате акаунт?"
 or = "Или"
 password = "Парола"
 passwordChangedSuccess = "Паролата е променена успешно! Моля, влезте с новата парола."
@@ -4715,26 +4894,10 @@ signInWith = "Вход с"
 title = "Вход"
 unexpectedError = "Неочаквана грешка: {{message}}"
 updatePassword = "Актуализиране на парола"
-useEmailInstead = "Вход с имейл"
 useMagicLink = "Използвай магическа връзка"
 username = "Потребителско име"
 youAreLoggedIn = "Успешно влязохте!"
 
-[login.slides.edit]
-alt = "Редактиране на PDF"
-subtitle = "С над дузина инструменти за зачертаване, подписване, четене и обработка на PDF, със сигурност ще намерите това, което търсите."
-title = "Редактирайте PDF, за да показвате/защитавате желаната информация"
-
-[login.slides.overview]
-alt = "Преглед на Stirling PDF"
-subtitle = "Облачна платформа с приоритет на поверителността за PDF, която позволява да конвертирате, подписвате, зачертавате и управлявате документи, плюс 50+ други мощни инструменти."
-title = "Всичко за PDF на едно място."
-
-[login.slides.secure]
-alt = "Защита на PDF"
-subtitle = "Добавяйте пароли, зачертавайте съдържание и управлявайте сертификати с лекота."
-title = "Защитете чувствителна информация в PDF файловете си"
-
 [margin]
 large = "Голямо"
 medium = "Средно"
@@ -4976,6 +5139,7 @@ pinButton = "Можете да използвате бутона <strong>Зак
 results = "След като инструментът приключи, стъпката <strong>Преглед</strong> ще покаже предварителен изглед на резултатите в този панел и ще ви позволи да отмените операцията или да изтеглите файла. "
 runButton = "След като инструментът е конфигуриран, този бутон позволява да го пуснете върху всички избрани PDF файлове."
 selectCropTool = "Нека изберем инструмента <strong>Изрязване</strong>, за да демонстрираме как се използва инструмент."
+stepOf = "Стъпка {{current}} от {{total}}"
 toolInterface = "Това е интерфейсът на инструмента <strong>Изрязване</strong>. Както виждате, няма много неща, защото още не сме добавили PDF файлове за работа."
 workbench = "Това е <strong>Работната зона</strong> – основната област, където преглеждате и редактирате вашите PDF файлове."
 wrapUp = "Готови сте! Научихте за основните области на приложението и как да ги използвате. Кликнете бутона <strong>Помощ</strong> по всяко време, за да видите обиколката отново."
@@ -4988,6 +5152,26 @@ showMeAround = "Разходи ме из новото"
 skipForNow = "Пропусни засега"
 skipTheTour = "Пропусни обиколката"
 
+[onboarding.checklist]
+dismiss = "Отхвърляне"
+title = "Настройте Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Стартирайте Stirling нативно на вашата машина"
+title = "Изтеглете Stirling за Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Сътрудничете с екипа си"
+title = "Поканете членове на екипа"
+
+[onboarding.checklist.shareAnalytics]
+description = "Помогнете за подобряването на Stirling"
+title = "Споделяне на анонимни данни за употреба"
+
+[onboarding.checklist.takeTour]
+description = "Вижте как работи Stirling в кратка обиколка"
+title = "Направете обиколката"
+
 [onboarding.desktopInstall]
 body = "Stirling работи най-добре като десктоп приложение. Можете да го ползвате офлайн, да отваряте документите по-бързо и да правите промени локално на компютъра си."
 selectOs = "Изберете операционна система"
@@ -4996,7 +5180,21 @@ titleWithOs = "Изтегляне за {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Код за удостоверяване"
+description = "Защитете акаунта си, като свържете приложение за удостоверяване. Сканирайте QR кода или въведете ключа за настройка, след което потвърдете 6-цифрения код, за да завършите."
+enable = "Активиране на MFA"
+enableError = "Неуспешно активиране на двуфакторно удостоверяване. Проверете кода и опитайте отново."
+enterCode = "Въведете 6-цифрения код от приложението си."
+enterCodeError = "Въведете кода за удостоверяване, за да продължите."
+logout = "Изход"
+openAuthenticator = "Отворете Google Authenticator, Authy или 1Password."
 qrCodeLoading = "Генериране на вашия QR код…"
+regenerateQrCode = "Генериране на QR код отново"
+scanQrCode = "Сканирайте QR кода или въведете ключа за настройка по-долу."
+setupError = "Неуспешно стартиране на настройката за двуфакторно удостоверяване. Моля, опитайте отново."
+setupKey = "Ключ за настройка (ръчно въвеждане)"
+stepByStep = "Стъпка по стъпка"
+success = "MFA е активирано. Сега можете да продължите."
+title = "Настройка на многофакторно удостоверяване"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "След като активирате режим вход, ще можете да управлявате потребители, да конфигурирате настройки и да следите състоянието на сървъра. Първите <strong>{{freeTierLimit}}</strong> души на вашия сървър използват Stirling безплатно."
@@ -5005,6 +5203,11 @@ adminTitle = "Админ преглед"
 userBody = "Поканете колеги, задавайте роли и поддържайте документите си организирани в едно защитено работно пространство. Активирайте режима за вход, когато сте готови да надскочите самостоятелното ползване."
 userTitle = "Преглед на плана"
 
+[onboarding.processorIntro]
+body = "Stirling вече изпълнява <strong>Правила</strong> — автоматизирани правила, които класифицират, защитават и обработват всеки документ при пристигането му. Настройте ги и наблюдавайте изпълненията в <strong>Processor</strong>."
+cta = "Вижте Processor"
+title = "Вижте Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Предплатена година"
+
+[payg.prepaid.banner]
+exhausted = "Вашият предплатен капацитет е изчерпан; таксуването по измерване е възобновено. Допълнете, за да запазите отстъпката."
+expiring_one = "Вашата предплатена година приключва след {{count}} ден. Неизползваният капацитет изтича — допълнете, за да започнете нова година."
+expiring_other = "Вашата предплатена година приключва след {{count}} дни. Неизползваният капацитет изтича — допълнете, за да започнете нова година."
+low = "Остават ви {{pct}}% от предплатения капацитет. Допълнете по всяко време, за да продължи обработката без прекъсване."
+
+[payg.prepaid.card]
+subtitle = "Използва се преди таксуването по измерване и извън лимита ви за разходи."
+title = "Предплатен капацитет"
+
+[payg.prepaid.meter]
+capSuffix = "от {{total}} предплатени кредита"
+expires = "Изтича {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Изчерпан"
+healthy = "Остава много"
+low = "На изчерпване"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Поставете лицензионния ключ от им
 success = "Лицензът е активиран!"
 successMessage = "Лицензът ви беше активиран успешно. Можете да затворите този прозорец."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "приложено"
-enforcing = "Прилагане..."
-failed = "Прилагането е неуспешно"
 outputsUnavailable = "Резултатите от политиките вече не са налични за изтегляне."
 partialOutputsUnavailable = "Някои резултати от политиките вече не са налични за изтегляне."
-retrying = "Заето, нов опит..."
 runNotFound = "Процесът по прилагане вече не може да бъде намерен."
-step = "стъпка {{current}}/{{total}}"
 timedOut = "Времето за прилагане изтече, преди процесът да приключи."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Затвори"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Прилагане на {{names}}"
 applyingProgress = "Прилагане на {{names}} ({{done}} от {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} от {{total}} файл(а) не можаха да 
 failureTitle = "Експортирано без пълно прилагане"
 printPolicyAppliedBody = "Този PDF беше актуализиран, за да отговаря на политика. Прегледайте промените и след това отпечатайте отново."
 printPolicyAppliedTitle = "Политика приложена преди печат"
-queued = "+{{count}} в опашката"
 successTitle = "{{names}} приложени"
 summaryMore = "{{first}}, {{second}} и още {{more}}"
 summaryTwo = "{{first}} и {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Прилагане преди конвертиране"
-default = "Прилагане"
-export = "Прилагане преди експортиране"
-input = "Прилагане при импортиране"
-print = "Прилагане преди печат"
-
-[policies.field]
-accessLog = "Дневник за достъп"
-archiveAfter = "Архивирай след"
-auditTrail = "Одитна следа"
-belowThreshold = "Под прага"
-destination = "Дестинация"
-frameworks = "Рамки"
-immutableHold = "Неизменяемо задържане"
-keepFor = "Запази за"
-minConfidence = "Мин. увереност"
-notify = "Уведоми при маршрутизиране"
-onViolation = "При несъответствие"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Добави"
-addPlaceholder = "Добавяне на етикет…"
-customNote = "Персонализирано за вашия екип."
-defaultNote = "Използва се вградената настройка по подразбиране, споделена с вашия екип."
-duplicate = "\"{{name}}\" вече съществува."
-edit = "Редактирай етикети"
-empty = "Все още няма етикети."
-export = "Експортирай JSON"
-iconAria = "Изберете икона за {{name}}"
-import = "Импортирай JSON"
-importError = "Този файл не можа да бъде импортиран."
-managedNote = "Екипните етикети се управляват от ръководителя на екипа."
-modalSubtitle = "Споделено с целия ви екип. Класификаторът избира етикетите, които съответстват на всеки документ."
-modalTitle = "Етикети за класификация"
-pickIcon = "Използвай иконата {{label}}"
-removeAria = "Премахни {{name}}"
-resetToDefault = "Възстанови по подразбиране"
-saveForTeam = "Запази за екипа"
-saving = "Запазване…"
-sectionLabel = "Етикети за класификация"
-startFromScratch = "Започни отначало"
-teamCount = "екипни етикети"
-tooLong = "Етикетите могат да бъдат най-много {{max}} знака."
-ungrouped = "Негрупирани"
-view = "Виж етикети"
+categoryCount = "категории"
+hideCategory = "Скриване на категория"
+labelCount = "етикети"
+sharedNote = "Тези етикети са вградени и споделени в целия ви екип."
+showCategory = "Показване на категория"
 
 [policies.pii]
 account = "Номера на сметки (с етикет)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Номера за маршрутизация в САЩ (ABA)"
 ssn = "Социалноосигурителни номера"
 
-[policies.settings]
-noneExport = "В момента няма политики, които се изпълняват при експортиране."
-noneUpload = "В момента няма политики, които се изпълняват при качване."
-onExport = "При експортиране"
-onUpload = "При качване"
-reorderHandle = "Плъзнете за пренареждане"
-runOrderDesc = "Когато повече от една политика се изпълнява при един и същ тригер, те се изпълняват в този ред — всяка върху изхода от предишната политика. Плъзнете за пренареждане."
-title = "Настройки на политики"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Опции за политики"
-policySettings = "Настройки на политики"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Повтори неуспешните политики ({{count}})"
-rowProgress = "Обработени {{completed}} от {{total}} файла"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Какво е политика?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Автоматично открива и зачернява чувствителни данни — като социалноосигурителни и номера на карти — за да не могат да се четат в документа."
-sanitize = "Премахва скрит JavaScript от файла, така че нищо да не се изпълнява автоматично при отваряне."
-watermark = "Поставя видим воден знак (напр. „Поверително“) върху всяка страница."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Затвори"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} се прилага..."
 badgeRan = "Политиката {{name}} е изпълнена върху този файл"
+badgeRunning = "{{name}} се изпълнява..."
 blockingAction = "{{action}} е блокирано, докато се прилага политиката, моля изчакайте..."
 dismiss = "Скрий наслагването"
 enforcingTitle = "Прилагане на политика..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Виж файла (политиката все още се при
 [policyOption]
 autoRedactPhi = "Автоматично заличаване на PHI"
 blockExport = "Блокирай експортирането"
+ccpa = "CCPA"
 contracts = "Договори"
 documents = "Документи"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "План Editor"
 subscribed = "План Processor"
 unlinked = "Не е свързан"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap от документ"
-sectionsAriaLabel = "Секции на Agent Builder"
-selectorAriaLabel = "Агенти"
-subtitle = "Проектирайте, тествайте и публикувайте AI агенти, които класифицират, извличат от и маршрутизират вашите документи. Дефинирайте сценарии, ограничете достъпа до инструменти, изпълнете golden set и публикувайте версия."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Отказ"
-dropzoneText = "Изберете примерен документ (PDF или изображение)"
-lead = "Пуснете примерен документ и ще предложим сценарии и схема за извличане, които можете да прецизирате. Нищо не се публикува, докато не го прегледате."
-submit = "Bootstrap агент"
-subtitle = "Създайте основа за нов агент от един представителен файл"
-title = "Bootstrap от документ"
-
-[portal.agentBuilder.empty]
-description = "Направете bootstrap на агент от примерен документ, за да създадете основа за неговите сценарии и схема за извличане, след което прецизирайте и публикувайте."
-title = "Все още няма агенти"
-
-[portal.agentBuilder.evals]
-casesPassing = "Успешни случаи"
-columnCase = "Eval случай"
-columnLatency = "Закъснение"
-columnResult = "Резултат"
-fail = "неуспех"
-goldenSetPassRate = "Процент на успех за golden set"
-latencyMs = "{{ms}} ms"
-notRun = "не е изпълнено"
-pass = "успех"
-passRate = "Процент на успех"
-runEvals = "Изпълни evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals превръщат вашите сценарии в повторяем golden set. Надстройте, за да проследявате процента на успех във времето и да ограничавате публикуванията според него."
-title = "Все още няма golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "в golden sets"
-activeAgents = "Активни агенти"
-avgPassRate = "Среден процент на успех на eval"
-fleetWide = "за целия fleet"
-latestPublished = "Последно публикувано"
-scenarios = "Сценарии"
-testCases = "тестови случаи"
-totalDescription_one = "общо {{count}}"
-totalDescription_other = "общо {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Добави"
-addScenario = "Добави сценарий"
-enable = "Активирай"
-expectationLabel = "Очаквано поведение"
-expectationPlaceholder = "Какво трябва да направи агентът"
-inEval = "в eval"
-mute = "Заглуши"
-muted = "заглушен"
-nameLabel = "Име"
-namePlaceholder = "напр. ескалация за съответствие"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Сценарии"
-tools = "Инструменти"
-versions = "Версии"
-
-[portal.agentBuilder.tools]
-broadAccess = "Широк достъп"
-deniedHint = "Избраните инструменти са блокирани. Всичко останало остава достъпно за извикване."
-deniedTools = "Забранени инструменти"
-governanceGate = "Управлението на инструменти е налично в план Enterprise."
-restricted = "Ограничен"
-restrictedAccess = "Ограничен достъп до инструменти"
-restrictedDescription = "Разрешете всеки инструмент освен тези, които забранявате по-долу."
-
-[portal.agentBuilder.versions]
-current = "текуща"
-historyGate = "Пълна история на версиите и връщане назад са налични в план Enterprise."
-publish = "Публикувай"
-rollBack = "Върни назад"
-
 [portal.assistant]
 close = "Затвори асистента"
 error = "Асистентът не можа да бъде достигнат."
@@ -6365,9 +6346,21 @@ typing = "Писане"
 loading = "Зареждане"
 redirectingToEditor = "Пренасочване към редактора..."
 
+[portal.billing.activation]
+maybeLater = "Може би по-късно"
+title = "Включете Processor"
+
+[portal.billing.activation.payg]
+sub = "Задайте месечен лимит. Плащате за това, което изпълнявате."
+title = "Плащане според употребата"
+
+[portal.billing.activation.prepay]
+badge = "2 месеца безплатно"
+sub = "Една фактура, карта или банков превод."
+title = "Предплатете година"
+
 [portal.billing.checkout]
 noClientSecret = "Edge функцията не върна client_secret."
-subtitle = "Добавете карта, за да продължите след безплатния грант за план Editor. Stripe ще се погрижи за останалото."
 title = "Включете план Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Плащането ви е успешно, но активирането
 close = "Затвори"
 title = "Почти готово"
 
+[portal.billing.checkout.cap]
+amountAria = "Месечен лимит за разходи"
+back = "Назад"
+continue = "Продължи към плащане"
+error = "Неуспешно задаване на лимита ви за разходи"
+finePrint = "Фактурите се издават месечно. Отмяна по всяко време."
+noLimit = "Без лимит"
+note = "Никога няма да бъдете таксувани над лимита си. Обработката просто спира на пауза."
+perMonth = "/ мес."
+title = "Задайте лимита си за разходи"
+
+[portal.billing.checkout.card]
+fields = "Номер на карта · MM / YY · CVC · ZIP"
+label = "Данни за карта"
+note = "Данните за картата се събират от Stripe. Stirling никога не съхранява PAN или CVC."
+
 [portal.billing.checkout.error]
 title = "Checkout не можа да стартира"
 
@@ -6383,10 +6392,9 @@ body = "Плащането ви премина. Включваме измерв
 hint = "Моля, оставете този прозорец отворен."
 title = "Активиране на вашия план Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "в portal env, за да активирате checkout в приложението."
-bodyBefore = "Задайте"
-title = "Stripe не е конфигуриран"
+[portal.billing.checkout.pay]
+limit = "Месечен лимит за разходи {{amount}}/мес. Обработката спира на пауза при достигане на лимита."
+limitNoCap = "Без лимит за разходи. Обработката няма да спира на пауза. Фактурите се издават месечно."
 
 [portal.billing.enterpriseUpsell]
 cta = "Създайте своята Enterprise оферта"
@@ -6409,10 +6417,12 @@ currentPlan = "Текущ план"
 freeForever = "Безплатно завинаги"
 noTeamResolved = "Все още няма определен екип за вашия портфейл — обновете и опитайте отново."
 ownerOnly = "Само собственикът на екипа може да включи план Processor."
+payInvoice = "Платете фактурата, за да завършите"
 planName = "Editor"
 ssoIncluded = "SSO включено"
 switchOnProcessor = "Включи Processor →"
 unlimitedUsers = "Неограничени потребители"
+viewQuote = "Преглед на оферта"
 
 [portal.billing.invoices]
 columnAmount = "Сума"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Директни API заявки"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Автоматизации и pipelines"
 segmentAutomationLabel = "Автоматизация"
+sizeMultiplier = "{{formatted}} PDF файла използваха множител за размер"
+summary = "{{unique}} уникални · {{units}} мерни единици · {{avg}} средно на PDF"
+summaryNoRate = "{{unique}} уникални · {{units}} мерни единици"
 unit = "измервани PDF"
+unitsPending_one = "{{units}} мерна единица очаква синхронизация от свързани instances"
+unitsPending_other = "{{units}} мерни единици очакват синхронизация от свързани instances"
+
+[portal.billing.prepaid]
+capSuffix = "от {{total}} предплатени кредита"
+expires = "Изтича {{date}}"
+eyebrow = "Предплатен капацитет"
+note = "Използва се преди таксуването по измерване и извън лимита ви за разходи."
+topUp = "Допълване"
+
+[portal.billing.prepaid.buy]
+back = "Назад"
+calcTitle = "Изчислете годишното си плащане"
+cancel = "Отказ"
+cancelPurchase = "Отказ на покупката"
+close = "Затваряне"
+continueToPayment = "Продължи към плащане"
+finalise = "Финализиране"
+invoiceErrorTitle = "Неуспешно генериране на фактурата"
+loadingTitle = "Зареждане на офертата ви"
+payTitle = "Платете за годината си"
+step = "Стъпка {{current}} от {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Промяна"
+deployRow = "Внедряване"
+done = "Готово"
+enterpriseHint = "Това е enterprise мащаб. При този обем enterprise тарифите са по-добри от всяка self-serve отстъпка. Заключване на тарифата, условия и оферта за минути."
+governanceRow = "Управление"
+governanceValue = "{{label}} · {{count}} правила"
+handlesLabel = "Вашият Processor"
+handlesValue = "обработва {{volume}} кредита / мес."
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} правила"
+poolCaption = "Един пул от {{credits}} кредита за годината. Натоварените месеци заемат от по-леките."
+priceLabel = "Вашата година · 12 месеца на цената на 10"
+rateUnknown = "Ще покажем точната цена при checkout."
+savings = "Спестявате {{amount}} · 2 месеца безплатно."
+sizingRow = "Оразмеряване"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Общо потребители"
+
+[portal.billing.prepaid.consent]
+label = "Разбирам, че когато предплатеният ми капацитет бъде изчерпан или изтече след 12 месеца, обработката автоматично продължава по стандартната такса за pay-as-you-go според измерването (до лимита ми за разходи), освен ако не отменя, и че мога да отменя по всяко време от billing portal."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Управлявано от Stirling. Активно за минути."
+cloudValue = "Stirling Cloud · Управлявано"
+selfhost = "Self-hosted"
+selfhostDesc = "Работи върху частна инфраструктура. Същата тарифа."
+selfhostValue = "Self-hosted · Частна инфраструктура"
+
+[portal.billing.prepaid.offer]
+cta = "Преглед на офертата"
+subtitle = "Предплатете година PDF обработка и получете два месеца безплатно, използвани преди таксуването по измерване, извън лимита ви за разходи."
+title = "Вземете 12 месеца на цената на 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Име на титуляр на акаунта"
+accountNamePlaceholder = "напр. Jane Smith"
+companyName = "Име на компания (по избор)"
+companyNamePlaceholder = "напр. Acme Inc."
+downloadInvoice = "Изтегляне на фактура"
+payOnline = "Плащане онлайн"
+poNumber = "PO номер (по избор)"
+poNumberPlaceholder = "напр. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Разширени"
+advancedDesc = "Pipelines управляват по-голямата част от обработката ви."
+none = "Няма"
+noneDesc = "Все още не изпълнявате pipelines. Включете ги по всяко време."
+standard = "Стандартни"
+standardDesc = "Няколко pipelines преобработват пристигащи PDF файлове."
+
+[portal.billing.prepaid.posture]
+essentials = "Основни"
+essentialsDesc = "Класификация, по подразбиране, плюс Споделяне"
+governed = "Управлявани"
+governedDesc = "Добавя Сигурност и Маршрутизиране"
+regulated = "Регулирани"
+regulatedDesc = "Всяка категория, вкл. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Изтегляне на оферта (PDF)"
+downloading = "Подготовка…"
+share = "споделяне за одобрение"
+
+[portal.billing.prepaid.size]
+compact = "Компактни"
+compactDesc = "Файлове под 25 MB, без такси за данни"
+heavy = "Тежки"
+heavyDesc = "Сканирани или с много изображения, редовно 50 MB+"
+standard = "Стандартни"
+standardDesc = "Предимно малки, някои сканирания над 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Изчерпан"
+healthy = "Остава много"
+low = "На изчерпване"
 
 [portal.billing.spendLimit]
 adjustLimit = "Коригирай лимита"
@@ -6494,6 +6608,8 @@ label = "Прогнозира се надвишаване."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Разходи този месец"
+freeRemaining_one = "Остава {{formatted}} безплатен PDF"
+freeRemaining_other = "Остават {{formatted}} безплатни PDF файла"
 processed_one = "Обработен {{formattedCount}} PDF."
 processed_other = "Обработени {{formattedCount}} PDF."
 processedWithRate_one = "Обработен {{formattedCount}} PDF, по {{rate}} всеки."
@@ -6534,6 +6650,350 @@ signature = "подпис"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Нова връзка"
+createTitleFor = "Свързване на {{name}}"
+delete = "Изтриване"
+edit = "Редактиране"
+editTitle = "Редактиране на връзка"
+unsupportedType = "Този тип връзка не може да се редактира тук."
+
+[portal.connections.categories.advanced]
+description = "За услуга, която все още не поддържаме."
+label = "Разширени"
+
+[portal.connections.categories.audit]
+description = "Записвайте какво се е случило с документ там, където вашите одитори вече проверяват."
+label = "Одит и compliance logging"
+
+[portal.connections.categories.notify]
+description = "Уведомете друга система, че нещо се е случило."
+label = "Известяване и workflow"
+
+[portal.connections.categories.security]
+description = "Сканирайте или етикетирайте документ, преди да продължи."
+label = "Сигурност и класификация"
+
+[portal.connections.categories.signing]
+description = "Изпратете документ за подписване или нотариална заверка."
+label = "Електронен подпис и нотариална заверка"
+
+[portal.connections.categories.storage]
+description = "Къде попадат обработените документи - bucket, drive, ticket или page."
+label = "Файл и прикачване"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling съхранява това криптирано и никога не го показва отново."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Стъпките, използващи тази връзка, могат да извикват само пътища под този URL, никога друг host."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Поставете URL, който услугата ви е дала. Могат да се извикват само пътища под него."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Име на връзка"
+namePlaceholder = "напр. Production"
+
+[portal.connections.picker]
+cancel = "Отказ"
+createNew = "Нова връзка..."
+placeholder = "Изберете връзка"
+save = "Запазване на връзка"
+
+[portal.connections.picker2]
+back = "Промяна на интеграция"
+heading = "Какво искате да свържете?"
+noResultsBody = "Все още не го поддържаме - кажете ни за него и ще разгледаме добавянето му."
+noResultsTitle = "Нищо не съвпада с \"{{query}}\""
+searchPlaceholder = "Търсене на интеграции - опитайте \"sign\", \"ocr\" или име на продукт"
+
+[portal.connections.types.api]
+description = "Извикайте произволен HTTP API от правило. Вие избирате URL, удостоверяването и payload."
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "Удостоверяване"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username и password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token в custom header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Няма"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Вход за token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Стъпките, използващи тази връзка, могат да извикват само пътища под този URL, никога друг host."
+label = "Базов URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Име на header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Път за вход"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Ако API отговори с връзка за изтегляне, могат да се извличат само тези hosts. Разделете със запетаи. Оставете празно, за да разрешите само собствения host на базовия URL."
+label = "Разрешени hosts за резултати"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Изпращане на token като този header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Header-ът на отговора, в който login извикването връща token, напр. X-Auth-Token."
+label = "Header за token в отговора"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Сканирайте документи за malware на server, който управлявате - нищо не напуска мрежата ви."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Сканиране за вируси и съдържание за документи в правило."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Блокирайте документи, съдържащи macros, executables, scripts или embedded objects - не само познат malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Прикачване на обработени документи към Confluence page."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Изпращайте документи към ConsignO Cloud (Notarius) за електронен подпис и нотариална заверка."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Вашата ConsignO Cloud среда, включително /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Необходимо само ако организацията ви използва tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Публикувайте съобщение в Discord, когато правило обработи документ."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Индексирайте audit event в Elasticsearch всеки път, когато правило обработи документ."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Проверявайте FTP или FTPS server за нови документи."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Режим на връзка"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Активен"
+passive = "Пасивен (препоръчително)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Обикновеният FTP изпраща идентификационни данни и файлове некриптирани; изберете FTPS, ако server го поддържа."
+label = "Криптиране"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Няма (обикновен FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Публикувайте съобщение в Google Chat space, когато правило се изпълнява."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Прикачване на обработени документи към Jira issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Изпратете документ или известие по email, когато правило се изпълнява."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Записвайте обработени документи в Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Откривайте лични данни в текста на документа чрез Presidio server, който управлявате."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Четете и прилагайте Microsoft Purview sensitivity labels върху PDF файлове."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "По избор. Нужно само за избор на етикети по име; етикетирането работи и без него."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Поставя се върху всеки етикет като негов SiteId, така че Purview-aware tools да знаят коя организация го е приложила."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket, от който източниците могат да четат и в който pipeline изходите могат да записват."
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Оставете празно за AWS. Задайте това за MinIO или друго S3-съвместимо хранилище."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Изпратете документ или известие по email, когато правило се изпълнява."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Проверявайте SFTP (SSH) server за нови документи."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "По избор. SHA-256 fingerprint на host key на server-а (от `ssh-keyscan host | ssh-keygen -lf -`). Когато е зададен, се приема само server, представящ този ключ; когато е празно, ключът, видян при първото свързване, се pin-ва и по-късни промени се отказват."
+label = "Fingerprint на host key"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Passphrase за ключ"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Оставете празно, ако се удостоверявате с private key вместо това."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "По избор. Поставете OpenSSH private key, за да се удостоверите с ключ вместо с password."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Публикувайте съобщение в Slack, когато правило обработи документ."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Наблюдавайте SMB / CIFS network share (Windows или Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "По избор. Windows domain или workgroup, ако server-ът ви използва такъв."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Изпращайте audit event към Splunk всеки път, когато правило обработи документ."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Изпращайте audit event към Sumo Logic HTTP collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Публикувайте съобщение в Teams channel, когато правило се изпълнява."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Публикувайте всеки документ или само детайлите към URL, който изберете."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Задействайте Zap или Make scenario от правило."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Преглед на документи"
+viewSource = "Преглед на source в GitHub"
+
 [portal.docs.authentication]
 codeCaption = "всяка заявка"
 eyebrow = "GETTING STARTED"
@@ -6619,11 +7079,19 @@ title = "Официални SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
+[portal.docs.search]
+empty = "Няма съвпадащи документи"
+placeholder = "Търсене в документи"
+results = "{{count}} резултата"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Включени, именувани способности, които вашият агент извиква като един инструмент. Всяко skill е детерминирана верига от операции с прикачени evals."
 title = "Умения на агент"
 
+[portal.docs.toc]
+title = "На тази страница"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "Тип"
 user = "Потребител"
 
 [portal.documents.queue.empty]
+connectSource = "Свързване на източник"
+createPipeline = "Създаване на pipeline"
 description = "Когато източниците подават документи към вашите pipelines, те ще се появят тук за преглед."
 title = "Няма документи в опашката"
 
@@ -6806,13 +7276,71 @@ description = "Този изглед срещна неочаквана греш
 retry = "Опитайте отново"
 title = "Нещо се обърка на тази страница"
 
+[portal.home.download]
+back = "Назад"
+body = "Изтеглете desktop app или self-host-нете server-а."
+done = "Готово"
+guide = "Отворете ръководството за {{name}}"
+openInBrowser = "Отваряне в browser вместо това"
+sectionDesktop = "Desktop app"
+sectionSelfHosted = "Self-hosted"
+title = "Инсталирайте Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Стартирайте официалния image на вашия server."
+note = "Отваря се на :8080. Вход по подразбиране: admin / stirling."
+tagline = "Стартирайте server-а в container"
+title = "Docker"
+variantFat = "Пълен"
+variantLite = "Ultra-Lite"
+variantStandard = "Стандартен"
+
+[portal.home.download.kubernetes]
+detailBody = "Инсталирайте официалния Helm chart."
+note = "Добавете PVC за /configs, за да запазвате настройките."
+tagline = "Разположете в клъстер с Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Нативни компилации за вашата дистрибуция."
+guideBtn = "Вижте опциите за инсталиране на Linux"
+note = "Налични са AppImage, .deb и .rpm компилации за популярни дистрибуции."
+tagline = "Нативно настолно приложение за вашата дистрибуция"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Или чрез Homebrew"
+detailBody = "Стартирайте инсталатора или използвайте Homebrew."
+downloadBtn = "Изтегляне за macOS"
+tagline = "Нативно приложение за Apple silicon и Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Стартирайте .jar на bare metal сървър."
+downloadBtn = "Изтегляне на .jar"
+note = "Изисква Java 21+. Отваря се на :8080; вход по подразбиране admin / stirling."
+runLabel = "След това го стартирайте"
+tagline = "Стартирайте .jar на bare metal сървър"
+title = "Ръчна настройка на сървър"
+
+[portal.home.download.windows]
+altLabel = "Или чрез winget"
+detailBody = "Стартирайте инсталатора или използвайте мениджър на пакети."
+downloadBtn = "Изтегляне на инсталатор"
+tagline = "Нативно приложение за Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} активни"
-invite = "Поканете съотборници"
+activeOfDeployed = "{{active}} от {{total}} активни този месец"
 name = "Stirling PDF Editor"
 open = "Отвори в браузър"
 updated = "актуализирано {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Завършете разполагането"
+options = "Вижте опциите за разполагане"
+start = "Разполагане на Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Самостоятелно хостван · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Добър ден"
 evening = "Добър вечер"
 morning = "Добро утро"
 
-[portal.home.onboarding]
-dismiss = "Отхвърли настройката"
-notStarted = "Не е започнато"
-progress = "{{done}} от {{total}} завършени"
-title = "Завършете настройката"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC за цялата организация, ангажирано обемно ценообразуване и разгръщане в изолирана мрежа."
-cta = "Започнете пробен период"
-ctaQuote = "Получете оферта"
-lead = "За 250+ служители."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Разгърнете desktop app, безплатно завинаги."
-title = "Изтеглете PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} активни · {{recommended}} препоръчани"
-chip = "{{active}} активни"
-title = "Включете политики"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} свързани · всеки PDF се управлява там, където попадне"
-chip = "{{connected}} свързани"
-title = "Свържете вашите източници"
-
-[portal.home.quickActions]
-subtitle = "Основни задачи за днес"
-title = "Бързи действия"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Композитор в 3 стъпки върху библиотеката с типизирани операции"
-title = "Създайте pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, наблюдавани папки"
-title = "Свържете източник"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Ограничен ключ с лимити на заявките и IP allowlist"
-title = "Издай API ключ"
-
 [portal.infrastructure]
 manageEditorDeployment = "Управление на разгръщането на Editor"
 sectionsAriaLabel = "Секции на инфраструктурата"
@@ -6878,13 +7363,9 @@ heading = "API ключове"
 subheading = "Ограничени удостоверения с лимити на заявките за всеки ключ, разрешения и IP allowlists."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Разрешени IP адреси"
-anyIp = "Всеки IP (без allowlist)"
 created = "Създаден"
 lastUsed = "Последно използван"
-permissions = "Разрешения"
-rateLimit = "Лимит на заявките"
-rateLimitValue = "{{value}} req/min"
+revoke = "Отмяна на ключ"
 usageMonth = "Използване този месец"
 usageToday = "Използване днес"
 
@@ -6892,6 +7373,20 @@ usageToday = "Използване днес"
 description = "Създайте ограничен ключ, за да започнете да извиквате Stirling API."
 title = "Все още няма API ключове"
 
+[portal.infrastructure.apiKeys.error]
+load = "API ключовете ви не можаха да бъдат заредени. Моля, опитайте отново."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Да се отмени ли „{{name}}“? Всяка интеграция, която все още използва този ключ, веднага ще започне да получава грешки 401. Това не може да бъде отменено."
+cancel = "Отказ"
+confirm = "Отмяна на ключ"
+title = "Отмяна на API ключ"
+
+[portal.infrastructure.attestationLabel]
+attested = "Удостоверено"
+inScope = "В обхвата"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Филтриране на одитни събития по категория"
 heading = "Одитни logs"
@@ -6935,6 +7430,7 @@ all = "Всички"
 auth = "Auth"
 config = "Config"
 elevation = "Повишаване на достъпа"
+policy = "Политика"
 processing = "Обработка"
 security = "Сигурност"
 
@@ -6944,19 +7440,35 @@ title = "Нямате достъп"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Повишаване на достъпа"
+policy = "Политика"
 processing = "Обработка"
 totalEvents = "Общо събития · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Удостоверяване"
+config = "Конфигурация"
+elevation = "Повишаване"
+policy = "Политика"
+processing = "Обработка"
+security = "Сигурност"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Грешка"
+info = "Информация"
+success = "Успех"
+warning = "Предупреждение"
+
+[portal.infrastructure.certLabel]
+certified = "Сертифицирано"
+inProgress = "В процес"
+notStarted = "Не е започнато"
+
 [portal.infrastructure.createKey]
 cancel = "Отказ"
 createKey = "Създай ключ"
 done = "Готово"
-ipAllowlistHelper = "CIDR диапазони, разделени със запетая. Оставете празно, за да разрешите всеки IP."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Име на ключ"
 keyNamePlaceholder = "напр. Production · ingest"
-permissionsLabel = "Разрешения"
 secretKeyCaption = "Secret key"
 secretWarning = "Съхранявайте това в secrets manager. Stirling винаги съхранява само hash — няма начин да го възстановите по-късно."
 subtitle = "Ограничете ключа до минимално необходимото. Можете да го ротирате или отнемете по всяко време."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Копирайте тази тайна сега — няма
 title = "Създай API ключ"
 titleCreated = "Ключът е създаден"
 
+[portal.infrastructure.deployLabel]
+live = "На живо"
+queued = "На опашка"
+rolledBack = "Върнато назад"
+rolling = "Разгръща се"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Здраве на живо за всеки разгърнат Stir
 description = "Разгърнатите региони ще се появят тук, след като работното ви пространство бъде provisioned."
 title = "Няма разгърнати региони"
 
+[portal.infrastructure.keyLabel]
+active = "Активен"
+revoked = "Отменен"
+
+[portal.infrastructure.modelLabel]
+active = "Активен"
+degraded = "Влошен"
+disabled = "Деактивиран"
+
 [portal.infrastructure.models]
 heading = "Модели"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Статус"
 type = "Тип"
 version = "Версия"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/извикване"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Активни модели"
 avgLatency = "Средна латентност"
@@ -7049,6 +7580,17 @@ modelForAria = "Модел за {{operation}}"
 operation = "Операция"
 routedTo = "Насочено към"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Класификация"
+extraction = "Извличане"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Влошен"
+down = "Недостъпен"
+healthy = "Здрав"
+
 [portal.infrastructure.security.access.byok]
 description = "Предоставете ключ от вашия собствен KMS. Stirling криптира с него, но все още може да чете."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Модели"
 security = "Сигурност"
 storage = "Storage"
 
+[portal.integrations]
+addAnother = "Добавяне на още една"
+availableHeading = "Налични"
+comingSoonHeading = "Очаквайте скоро"
+connect = "Свързване"
+connectedHeading = "Свързани"
+connectionCount_one = "{{count}} връзка"
+connectionCount_other = "{{count}} връзки"
+customApi = "Персонализиран API"
+searchPlaceholder = "Търсене на интеграции"
+subtitle = "Всичко, с което Stirling може да комуникира. Идентификационните данни се създават веднъж тук, след което се използват от източници, политики и конвейери."
+title = "Интеграции"
+typedName = "Име на {{tool}}"
+
+[portal.integrations.filters]
+all = "Всички"
+audit = "Одит"
+connected = "Свързани"
+notify = "Известяване"
+security = "Сигурност"
+signing = "Подписване"
+storage = "Съхранение"
+
+[portal.integrations.status]
+connected = "Свързано"
+
+[portal.integrations.table]
+integration = "Интеграция"
+worksWith = "Работи с"
+
+[portal.integrations.worksWith]
+pipelines = "Конвейери"
+policies = "Политики"
+sources = "Източници"
+
+[portal.legal]
+draft = "{{label}} · чернова"
+loadError = "Този документ не можа да бъде зареден. Моля, опитайте отново."
+loading = "Зареждане…"
+title = "Правен документ"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Компоненти"
@@ -7182,6 +7765,7 @@ documents = "Документи"
 editor = "Editor"
 home = "Начало"
 infrastructure = "Инфраструктура"
+integrations = "Интеграции"
 pipelines = "Pipelines"
 policies = "Политики"
 procurement = "Снабдяване"
@@ -7190,25 +7774,9 @@ sources = "Източници"
 usage = "Използване и фактуриране"
 users = "Потребители"
 
-[portal.notifications]
-markAllRead = "Маркирай всички като прочетени"
-title = "Известия"
-viewAll = "Виж всички"
-
-[portal.notifications.ariaLabel]
-none = "Известия, няма непрочетени"
-unread_one = "Известия, {{count}} непрочетено"
-unread_other = "Известия, {{count}} непрочетени"
-
-[portal.notifications.count]
-allRead = "всички прочетени"
-loading = "зареждане"
-new_one = "{{count}} ново"
-new_other = "{{count}} нови"
-
-[portal.notifications.empty]
-description = "Няма нови известия."
-title = "Всичко е наваксано"
+[portal.nav.section]
+platform = "PDF платформа"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Всеки автоматизиран document pipeline на backend: подредена верига от операции върху набор от източници, стартирана от trigger. Щракнете върху ред за неговите стъпки и източници."
@@ -7220,15 +7788,28 @@ newPipeline = "Нов pipeline"
 [portal.pipelines.builder]
 addStep = "Добави инструмент"
 back = "Назад към pipelines"
+cannotFollow = "Не може да приеме {{produced}}"
+chooseAccount = "Изберете акаунт"
+chooseDestination = "Изберете дестинация"
+chooseOperation = "Изберете какво прави тази стъпка"
+chooseSource = "Изберете източник"
 discard = "Отхвърли промените"
 enabled = "Активирано"
+inputs = "Вход"
+inputSource = "Входен източник"
+inputTrigger = "Тригер"
 keepEditing = "Продължи редактирането"
+needsConfiguring = "Нуждае се от настройка"
 needsUpload = "Нуждае се от качен файл"
+noSources = "Все още няма свързани източници. Създайте такъв, за да го използвате като вход."
 noToolMatches = "Няма инструменти, отговарящи на търсенето ви."
 pipelineSettings = "Настройки на pipeline"
 searchTools = "Търсене на инструменти"
 selectToolBody = "Добавете инструмент, за да изградите вашия pipeline."
 selectToolTitle = "Все още няма инструменти"
+sendToSystem = "Изпращане към друга система"
+stepsIncompatible = "Тези стъпки не могат да се изпълнят върху това, което произвежда предишната им стъпка: {{tools}}."
+stepsNeedSetup = "Тези стъпки все още трябва да бъдат настроени преди запазване: {{tools}}."
 toolSettings = "Настройки на инструмента"
 unknownStep = "Неразпозната операция, запазена както е."
 unsavedBody = "Имате незапазени промени. Запазете ги преди да напуснете или ги отхвърлете?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Незапазени промени"
 uploadUnsupported = "Качените файлове все още не се поддържат в pipelines, затова тези стъпки не могат да бъдат запазени: {{tools}}."
 usesDefaults = "Изпълнява се с настройки по подразбиране"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Комбинира всеки файл от предишната стъпка"
+fan-out = "Изпълнява се веднъж за всеки файл от предишната стъпка"
+format-mismatch = "Нуждае се от {{accepts}}, но предишната стъпка произвежда {{produced}}"
+output-uncertain = "Може да не се изпълни: изходът на предишната стъпка зависи от начина, по който е настроена"
+source-mismatch = "Нуждае се от {{accepts}}, но входът на този конвейер е {{produced}}"
+undeclared-operation = "Не може да се провери какво приема тази стъпка"
+
 [portal.pipelines.composer]
 addTool = "Добави инструмент"
 cancel = "Отказ"
 chainEmpty = "Добавете инструмент, за да започнете да изграждате вашия pipeline."
 create = "Създай pipeline"
-directory = "Изходна папка"
-directoryHelp = "Абсолютен път на сървъра. Трябва да е в рамките на конфигурираните разрешени папки."
 editingUnsupported = "Показването на тези параметри на инструмента за редактиране все още не се поддържа."
 moveDown = "Премести надолу"
 moveUp = "Премести нагоре"
 name = "Име"
 namePlaceholder = "напр. Redaction sweep"
-noSources = "Все още няма свързани източници. Pipeline все още може да се изпълнява върху файлове, подадени директно към него."
 noToolSettings = "Този инструмент няма конфигурируеми настройки."
 operations_one = "Операция ({{count}})"
 operations_other = "Операции ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Изтрий"
 title = "Изтриване на pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Изчистване на историята"
 delete = "Изтрий pipeline"
 run = "Изпълни сега"
 
 [portal.pipelines.empty]
 action = "Създай pipeline"
+connectSource = "Свързване на източник"
 description = "Създайте първия си pipeline: изберете източниците, върху които се изпълнява, свържете операциите и изберете къде да отива изходът."
 title = "Все още няма pipelines"
 
@@ -7286,15 +7874,17 @@ active = "Активни"
 paused = "Поставени на пауза"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Запис в папка"
-inline = "Върни файлове"
-
 [portal.pipelines.run]
+allProcessed_one = "Няма нищо за изпълнение: {{count}} документът на източника вече е обработен."
+allProcessed_other = "Няма нищо за изпълнение: всички {{count}} документа в източниците вече са обработени."
 completed_one = "Изпълнението завърши."
 completed_other = "Всички {{count}} изпълнения завършиха."
 empty = "Няма какво да се изпълни: източниците нямаха документи за обработка."
 failed = "Изпълнението не бе успешно: {{error}}"
+historyCleared = "Историята е изчистена. Следващото изпълнение ще обработи отново всичко, което в момента е в източниците."
+inFlight = "Няма нищо ново за изпълнение: документи все още се обработват от предишно изпълнение."
+parked_one = "Няма нищо за изпълнение: {{count}} документ е бил неуспешен преди и е паркиран. Отстранете причината, след това изчистете историята, за да опитате отново."
+parked_other = "Няма нищо за изпълнение: {{count}} документа са били неуспешни преди и са паркирани. Отстранете причината, след това изчистете историята, за да опитате отново."
 running = "Изпълнението започна; все още е в ход."
 timeout = "Изпълнението отнема повече от очакваното; може все още да завърши във фонов режим."
 
@@ -7314,12 +7904,18 @@ manual = "Ръчно"
 schedule = "По график"
 
 [portal.policies]
+defaultName = "Политика за {{category}}"
 subtitle = "Постоянни автоматизации, които налагат tool pipeline върху всеки документ. Всяка политика се задейства при качване или експорт, изпълнява веригата си от инструменти и запазва наложената версия до оригинала."
 title = "Политики"
 
 [portal.policies.card]
 comingSoon = "Надстройте до Enterprise"
 notSetUp = "Не е настроено"
+requiresAiEngine = "Изисква AI engine"
+
+[portal.policies.categories.classification]
+desc = "Идентифицирайте типа на всеки документ при качване и маркирайте метаданните му за архивиране и търсене."
+label = "Класификация"
 
 [portal.policies.categories.compliance]
 desc = "Налагайте изискванията на HIPAA, GDPR, SOC 2 или FedRAMP върху всеки документ."
@@ -7344,6 +7940,13 @@ label = "Сигурност"
 [portal.policies.config]
 scopeAll = "Всички документи"
 
+[portal.policies.config.classification]
+summary = "Класифицира всеки качен документ спрямо етикетите на вашия екип и маркира метаданните му."
+
+[portal.policies.config.classification.rules]
+0 = "Класифициране"
+1 = "Маркиране на метаданни"
+
 [portal.policies.config.compliance]
 summary = "Валидира документи спрямо регулаторни рамки, преди да напуснат системата."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Минимална увереност"
 2 = "Именуване"
 3 = "Нормализиране"
 
+[portal.policies.config.purview]
+label = "Прилагане на етикет за чувствителност на Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "GUID на етикета от портала Purview. Прилагането на етикет записва метаданните му върху PDF; не може да криптира, за което е нужен Microsoft клиентът."
+labelName = "Име на етикет (по избор)"
+labelNameHelp = "Записва се заедно с ID, за да могат хората и инструментите да разпознаят етикета."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview различава етикет, приложен от политика, от такъв, избран от човек."
+label = "Как се записва етикетът"
+privileged = "Като избран от човек"
+standard = "Като приложен автоматично"
+
+[portal.policies.config.purviewRead]
+label = "Четене на етикет на Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Чете етикета, който документът вече носи, така че следващите стъпки да могат да действат според него."
+
 [portal.policies.config.retention]
 summary = "Налага колко дълго се пазят документите, кога да се архивират и кога да се изтриват."
 
@@ -7438,6 +8064,7 @@ title = "Все още няма активност"
 [portal.policies.endpoints]
 addWatermark = "Воден знак"
 autoRedact = "Редактиране на PII"
+classifyAndLabel = "Класифициране"
 compressPdf = "Компресиране"
 flatten = "Изравняване"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Вашите политики са запазени и ще се
 retry = "Повторен опит"
 title = "Backend не е наличен"
 
+[portal.policies.operations]
+change = "Промяна на това, което прави тази стъпка"
+noResults = "Няма стъпка, която да съвпада с това. Опитайте име на продукт или \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Търсене на стъпки - опитайте \"scan\", \"attach\" или име на продукт"
+
+[portal.policies.operations.bodyMode]
+binary = "Сурови байтове на файла"
+json = "Вътре в JSON payload"
+multipart = "Като качване на файл (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Вашият собствен ClamAV сървър проверява документа; нищо не напуска мрежата ви."
+label = "Сканиране за вируси (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Отхвърля документи, съдържащи макроси, изпълними файлове, скриптове или вградени обекти."
+label = "Блокиране на активно съдържание"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive проверява документа и изпълнението спира, ако той не е чист."
+label = "Сканиране за вируси"
+
+[portal.policies.operations.confluenceAttach]
+description = "Архивира обработения документ на страница."
+label = "Прикачване към Confluence страница"
+
+[portal.policies.operations.consignoSubmit]
+description = "Изпраща документа към ConsignO Cloud за подписване."
+label = "Изпращане за подпис (ConsignO)"
+note = "Изпраща документа. Получаването на подписаното копие все още не се поддържа, защото стъпка не може да предаде резултат към следваща стъпка."
+
+[portal.policies.operations.customApiCall]
+description = "Създайте извикването сами: път, метод, тяло и обработка на отговора."
+label = "Извикване на персонализиран API"
+
+[portal.policies.operations.discordNotify]
+description = "Уведомява канал, че политиката е обработила документ."
+label = "Публикуване на съобщение в Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Записва какво е направила политиката като документ с възможност за търсене."
+label = "Индексиране на одитно събитие в Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart е подходящ за API за качване; JSON е подходящ за API, които искат файла вътре в payload; binary изпраща суровите байтове."
+label = "Как да се изпрати документът"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON body, изпратено както е. {{document.base64}} съдържа файла; {{document.*}} и {{run.*}} се попълват за всеки документ."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Акаунт"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Полето във формуляра, под което API очаква документа."
+label = "Име на поле за файл"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "От"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON обект с двойки име/стойност на headers. Идентификационните данни на връзката се добавят автоматично."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Индекс"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ключ на issue"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Изпраща се като тяло на съобщението. {{document.*}} и {{run.*}} се попълват за всеки документ."
+label = "Съобщение"
+
+[portal.policies.operations.fields.method]
+label = "Метод"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Добавя се към базовия URL на връзката. Никога не може да достигне друг host."
+label = "Път"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Къде в drive да бъде записано. {{document.filename}} се попълва за всеки документ."
+label = "Път на дестинацията"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Отчетът оставя документа непроменен. Замяната го сменя с това, което се върне."
+label = "Какво да се направи с отговора"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Имейл на подписващия"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Тема"
+placeholder = "Обработено: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio анализира този текст. Използвайте {{document.title}} или поставете текста, който искате да бъде проверен."
+label = "Текст за проверка"
+
+[portal.policies.operations.fields.to]
+label = "До"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud потребителско име"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Уведомява пространство, че политиката е обработила документ."
+label = "Публикуване на съобщение в Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Архивира обработения документ към issue."
+label = "Прикачване към Jira issue"
+
+[portal.policies.operations.mailgunEmail]
+description = "Изпраща обработения документ като прикачен файл."
+label = "Изпращане на документа по имейл (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Записва обработения документ в папка."
+label = "Качване в Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Вашият собствен Presidio сървър отчита личните данни, които намира."
+label = "Откриване на лични данни"
+note = "Presidio чете текст, не файлове. Дайте му текста, който искате да бъде проверен — самият документ не се качва."
+
+[portal.policies.operations.responseMode]
+replace = "Замяна на документа с отговора"
+report = "Запазване на документа, записване на отговора"
+
+[portal.policies.operations.sendgridEmail]
+description = "Изпраща обработения документ като прикачен файл."
+label = "Изпращане на документа по имейл (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Уведомява канал, че политиката е обработила документ."
+label = "Публикуване на съобщение в Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Записва какво е направила политиката там, където вашите одитори вече проверяват."
+label = "Изпращане на одитно събитие към Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Записва какво е направила политиката към HTTP collector."
+label = "Изпращане на одитно събитие към Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Уведомява канал, че политиката е обработила документ."
+label = "Публикуване на съобщение в Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Изпраща самия документ към URL, който изберете."
+label = "Публикуване на документа към webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Предава детайлите за изпълнението към вашата автоматизация."
+label = "Задействане на Zap или Make сценарий"
+
 [portal.policies.stats]
 activeFor = "Активна"
 dataProcessed = "Обработени данни"
@@ -7473,6 +8277,13 @@ label = "Приложени документи"
 description = "Конфигурирани, но не се задействат"
 label = "На пауза"
 
+[portal.policies.table]
+appliesTo = "Прилага се за"
+docs = "Наложени документи"
+enforces = "Налага"
+policy = "Политика"
+status = "Състояние"
+
 [portal.policies.wizard.actions]
 back = "Назад"
 cancel = "Отказ"
@@ -7480,6 +8291,10 @@ continue = "Продължи"
 enablePolicy = "Активиране на политика"
 saveChanges = "Запазване на промените"
 
+[portal.policies.wizard.capability.classify]
+desc = "Идентифицира типа на документа от етикетите на вашия екип и го маркира, така че да се архивира и търси по категория."
+label = "Класифициране на документа"
+
 [portal.policies.wizard.capability.compress]
 desc = "Компресира документа до по-малък размер на файла."
 label = "Намаляване на размера на файла"
@@ -7500,10 +8315,18 @@ label = "Заличаване на чувствителна информация
 desc = "Премахва скрит JavaScript, така че нищо да не може да се стартира автоматично при отваряне на документа."
 label = "Премахване на активно съдържание"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Доказва, че документът е съществувал в точно тази форма в даден момент, използвайки независим орган за timestamp. Изпраща се само hash - документът никога не напуска вашия сървър."
+label = "Добавяне на доверен timestamp"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Поставя видим знак (напр. „Поверително“) върху всяка страница."
 label = "Прилагане на воден знак"
 
+[portal.policies.wizard.classification]
+description = "Всеки качен документ се класифицира спрямо вградените етикети и се маркира с типовете, които му подхождат. Наборът от етикети е споделен за целия ви екип."
+labelsHeading = "Етикети за класификация"
+
 [portal.policies.wizard.errors]
 noTools = "Първо активирайте поне един инструмент в работния процес."
 saveFailed = "Политиката не можа да бъде запазена. Моля, опитайте отново."
@@ -7548,73 +8371,118 @@ setUp = "Настройване на политика за {{category}}"
 [portal.policies.wizard.workflow]
 description = "Изберете какво прави тази политика с всеки документ, който обработва."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} активни"
-noRule = "Все още няма приложено правило"
-subtitle = "Постоянни автоматизации, през които преминава всеки документ, независимо кой pipeline го обработва."
-title = "Какво се изпълнява върху вашите PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Надстройка до Enterprise"
-configure = "Конфигуриране"
 setUp = "Настройване"
 
-[portal.policySummary.column]
-activeRule = "Активно правило"
-policy = "Политика"
-status = "Статус"
+[portal.processorFlow]
+footnote = "Броят е за последните 24 часа. Скоростта на потока е илюстративна."
+liveBadge = "На живо"
+stats = "{{connected}} свързани · {{processed}} PDF обработени"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "След като политиките бъдат конфигурирани, категориите ще се появят тук."
-title = "Все още няма политики"
+[portal.processorFlow.lens]
+ariaLabel = "Режим на преглед"
+flow = "Поток"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Активна"
-off = "Изключена"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Неуспешни"
+heading = "Резултати"
+success = "Доставени"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} активни"
+count = "{{n}} · 24h"
+heading = "Политики"
+setUp = "Настройване"
 soon = "Скоро"
 
-[portal.processingStatus]
-managePlan = "Управление на план"
-volumeSuffix = "Обработени PDFs · последните 30 дни"
+[portal.processorFlow.sankey]
+waist = "Политики · {{n}} активни"
+
+[portal.processorFlow.sankey.empty]
+description = "Свържете източник и включете политика, за да наблюдавате как документите преминават през processor."
+title = "Все още няма поток"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Свързване"
+editor = "Stirling PDF Editor"
+heading = "Източници"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Приемане по имейл"
 
 [portal.procurement]
-reset = "Нулиране на procurement (demo)"
 subtitle = "Оценете, договорете и въведете екипа си в работа. Всеки документ на едно място."
 title = "Procurement"
 
-[portal.procurement.action]
-download = "Изтегляне"
-pay = "Плати сега"
-request = "Заявка"
-sign = "Преглед и подпис"
-upload = "Качване"
-
 [portal.procurement.agreement]
 agreeCta = "Съгласие и абониране"
+confidential = "Поверително"
 confirm = "Прочетох и приемам Stirling Enterprise Agreement."
-eyebrow = "Споразумение"
-intro = "Едно обединено споразумение покрива вашата сделка: Master Service Agreement, Order Form, EULA и Data Processing Agreement. Прегледайте го, след което се съгласете, за да приемете офертата като ангажиран абонамент."
-title = "Прегледайте вашето enterprise споразумение"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA и DPA, комбинирани в един подпис."
+download = "Изтегляне"
+downloadDraftError = "Не можа да бъде генериран PDF на споразумението - renderer-ът на документа не е наличен. Моля, опитайте отново след малко или се свържете с поддръжката."
+downloadError = "Подписаното споразумение не можа да бъде изтеглено. Моля, опитайте отново."
+legalName = "Име на юридическото лице"
+legalNamePlaceholder = "Юридическото лице, което ще подпише"
+loadError = "Споразумението не можа да бъде заредено. Моля, опитайте отново."
+loading = "Зареждане на споразумението..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Заявка за промени"
+scrollHint = "Превъртете за преглед"
+signatory = "Име на подписващия"
+signatoryPlaceholder = "Пълно име"
+signatoryTitle = "Длъжност на подписващия"
+signatoryTitlePlaceholder = "напр. главен юрисконсулт"
+signError = "Подписът ви не можа да бъде записан. Моля, опитайте отново."
 
 [portal.procurement.builder]
 addons = "Добавки"
+addressLine1 = "Адресен ред 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Адресен ред 2"
+addressLine2Placeholder = "Офис, етаж, сграда"
 back = "Назад"
 businessName = "Име на фирмата"
 businessNamePlaceholder = "Вашата компания"
+city = "Град"
+cityPlaceholder = "San Francisco"
+completeRequired = "Моля, попълнете задължителните полета (маркирани с *) с валиден имейл, преди да генерирате офертата."
+contactEmail = "Имейл за контакт"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Име за контакт"
+contactNamePlaceholder = "Jane Doe"
 continue = "Продължи"
-country = "Държава"
-countryEuro = "Еврозона (EUR €)"
-countryUK = "Обединено кралство (GBP £)"
-countryUS = "Съединени щати (USD $)"
+done = "Готово"
 eula = "Прочетох и приемам Stirling Enterprise EULA. Тя урежда споразумението, генерирано от тази оферта."
 generate = "Генериране на оферта"
-included = "Включено"
 indemnification = "Обезщетение за IP"
 indemnificationSub = "Ние защитаваме квалифицирани IP претенции съгласно EULA"
-offlineLicense = "Офлайн / air-gapped лиценз"
-offlineLicenseSub = "Файл с лиценз за изтегляне за air-gapped self-hosted инстанция"
+paperEyebrow = "Enterprise оферта"
+paperFor = "Подготвено за"
+pdfSize = "Размер на PDF"
+poNumber = "PO number"
+poNumberPlaceholder = "По избор"
+postalCode = "Пощенски код"
+postalCodePlaceholder = "94105"
+posture = "Управление"
+posture_count = "~{{count}} политики"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Класификация + споделяне — настройките по подразбиране"
+posture_governed = "Governed"
+posture_governedSub = "Добавя сигурност и маршрутизиране"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Всяка категория — съответствие, задържане, приемане"
 qbr = "Тримесечни бизнес прегледи"
 qbrSub = "Вашият SE преглежда употребата и roadmap всяко тримесечие"
+region = "Щат / регион"
+regionPlaceholder = "California"
 running = "{{annual}} / год. · {{years}}-год. {{tcv}}"
 s1Sub = "Вашият екип и PDFs, които очаквате да обработвате всяка година."
 s1Title = "Колко ще обработвате?"
@@ -7623,6 +8491,12 @@ s2Title = "Ангажимент и обслужване"
 s3Sub = "За офертата и споразумението, което тя генерира."
 s3Title = "Вашите данни"
 serviceLevel = "Ниво на обслужване"
+size_compact = "Компактен"
+size_compactSub = "Предимно текст, под 1 MB"
+size_heavy = "Тежък"
+size_heavySub = "Сканиран или с много изображения, 5 MB+"
+size_standard = "Стандартен"
+size_standardSub = "Смес от текст и изображения, 1 до 5 MB"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 работни часа · dedicated account manager · +30%"
 slPriority = "Priority"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Същия работен ден · named CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Следващ работен ден · shared CSM · включено"
 stepOf = "Стъпка {{n}} от {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "По избор"
 term = "Срок"
 termDiscount = "Приложена е {{pct}}% отстъпка за многогодишен ангажимент"
 title = "Създайте вашата оферта"
@@ -7637,6 +8513,7 @@ training = "Въвеждане и обучение"
 trainingSub = "Сесии на живо, за да може екипът ви да започне работа"
 users = "Общо потребители"
 usersPlaceholder = "напр. 250"
+viewEula = "Прочетете го"
 volEstimated = "Оценено от {{count}} потребители (~2 000 PDFs всеки, включително автоматизация). Редактирайте, ако имате по-точна информация."
 volManual = "Използваме вашата стойност. Можете по всяко време да преизчислите по размера на екипа си."
 volNoUsers = "Не сте сигурни? Въведете размера на екипа си и ще го оценим."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "напр. 1 000 000"
 years_one = "{{count}} година"
 years_other = "{{count}} години"
 
-[portal.procurement.docs]
-count_one = "{{count}} документ"
-count_other = "{{count}} документа"
-done = "Готово"
-here = "Вие сте тук"
-hide = "Скриване"
-optional = "По избор"
-paidAddon = "Платена добавка"
-show = "Показване"
-subtitle = "Всичко необходимо на всяка стъпка от процеса, показвано според напредъка на сделката."
-supportingSubtitle = "SOC 2, прегледи на сигурността, данъчни формуляри и други, готови когато вашият екип по сигурност или procurement ги поиска. Някои имат еднократна такса."
-supportingTitle = "Подкрепа за вашата оценка"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form и DPA в един подпис."
+download = "Изтегляне"
+eula = "EULA & Commercial Terms"
+eulaSub = "Софтуерът и условията за самостоятелно търговско обслужване."
+invoice = "Фактура"
+invoiceSub = "Вашата първа фактура за абонамент."
+laterInvoice = "Налично, след като приемете"
+laterQuote = "Налично, след като офертата ви бъде издадена"
+quote = "Оферта"
+quoteSub = "Вашата детайлизирана enterprise оферта."
+sla = "SLA Exhibit"
+slaSub = "Нива на поддръжка и целеви времена за отговор."
+subprocessors = "Подобработващи"
+subprocessorsSub = "Трети страни, които обработват данни от ваше име."
+subtitle = "Вашите документи по сделката, налични по всяко време."
 title = "Документи"
-upcoming = "Предстоящи"
+view = "Преглед"
 
 [portal.procurement.error]
 title = "Нещо се обърка"
 
 [portal.procurement.hero]
-company = "Вашата enterprise сделка"
+barAria = "Етап {{current}} от {{total}}"
 ctaAgreement = "Преглед и подпис на споразумението"
-ctaLive = "Вече сте на живо"
-ctaPayment = "Добавяне на плащане"
+ctaExploring = "Настройте пробния си период"
 ctaQuote = "Преглед на офертата"
+ctaReviewQuote = "Преглед на офертата"
 ctaTrial = "Създайте офертата си"
+documents = "Документи"
 eyebrow = "Enterprise procurement"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Поканете съотборници"
-keyDocs = "Ключови документи"
-nextStep = "Следваща стъпка: {{action}}"
-notStarted = "Не е започнато"
+licenseKey = "Лицензионен ключ"
+liveSub = "Вашата организация е осигурена и лицензът ви е активен."
+liveTitle = "Вече сте на живо със Stirling Enterprise"
+next = "Следващо: {{stage}}"
 open = "Отваряне на procurement"
 scheduleCall = "Насрочване на разговор"
-setup1Sub = "Поканете съотборниците си"
-setup1Title = "Внедряване на PDF Editor"
-setup2Sub = "Включете обработката в редакторите и други източници"
-setup2Title = "Свързване на PDF Processor"
-setup3Sub = "Включете Security, Compliance, Routing или Retention, когато са ви необходими"
-setup3Title = "Добавяне на препоръчани политики"
+sentenceAgreement = "преглед и подписване на споразумението"
+sentenceLive = "осигуряване и внедряване"
+sentencePayment = "поръчка за покупка и плащане"
+sentenceQuote = "преглед и приемане на вашата оферта"
+sentenceTrial = "настройване на пробното ви работно пространство"
 
 [portal.procurement.journey]
 daysLeft_one = "Остава {{count}} ден"
 daysLeft_other = "Остават {{count}} дни"
-engineerLabel = "Вашият solutions engineer"
-eyebrow = "Вашето внедряване"
-live = "Вече сте на живо със Stirling Enterprise"
-nextStep = "Следваща стъпка: {{action}}"
-subtitle = "Вашият solutions engineer е с вас на всяка стъпка. По едно следващо действие наведнъж; пълният списък е по-долу."
-title = "От trial до live, един насочван път"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Един подпис покрива MSA, order form, EULA и DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Файлът за офлайн лиценз все още не
 downloadOffline = "Изтегляне на офлайн лиценз (.lic)"
 hint = "Поставете този ключ в self-hosted инстанция, за да я активирате, или го запазете за вашите записи. Пазете го на сигурно място."
 label = "Вашият лицензен ключ"
+subtitle = "Активирайте self-hosted инстанция с този ключ или го запазете за архив."
+title = "Вашият лицензионен ключ"
+trialFileHint = "Това е вашият пробен лицензионен файл. След като споразумението ви е в сила, върнете се и го изтеглете отново — за разлика от онлайн лицензионния ключ, .lic файлът няма да се актуализира сам."
 
 [portal.procurement.link]
 cta = "Свързване на акаунт"
@@ -7739,65 +8619,62 @@ description = "Вашият абонамент е активен и лиценз
 eyebrow = "Live"
 title = "Вече сте на живо със Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Trial ключове, оферти за ангажиран обем, споразумение с един подпис, плащане и вашият регистър на документи са тук, след като започнете enterprise оценка."
-eyebrow = "Само Enterprise"
-talkToSales = "Свържете се с продажби"
-title = "Procurement пътят се отваря с Enterprise"
-
 [portal.procurement.milestone]
-accept = "Приемане и продължаване"
-description = "Изтеглете PDF, за да го споделите с екипа си, върнете се да приемете, когато сте готови, или направете промени."
-download = "Изтегляне на PDF"
 downloadError = "PDF офертата все още не можа да бъде изтеглена — моля, опитайте отново след малко."
-edit = "Редактиране на оферта"
-eyebrow = "Оферта {{number}}"
-perYear = " / год."
-preparedFor = "Подготвено за {{company}}"
-tcv = "{{value}} обща стойност на договора"
-title = "Вашата оферта е готова"
-
-[portal.procurement.modal]
-cancel = "Отказ"
-chooseFile = "Избор на файл"
-close = "Затваряне"
-downloadBody = "Изтеглянето ви ще започне скоро."
-downloadCta = "Изтегляне"
-downloadTitle = "Изтегляне"
-noFile = "Няма избран файл"
-payBody = "Платете ангажирания си договор с карта или банков превод чрез Stripe. Работното ви пространство се осигурява веднага щом плащането бъде изчистено."
-payCta = "Продължи към Stripe"
-payTitle = "Потвърждаване на плащането"
-requestBodyFree = "Генерираме това при поискване. Потвърдете и вашият solutions engineer ще го изпрати скоро."
-requestBodyPaid = "Това е платена добавка. Потвърдете и вашият solutions engineer ще определи обхвата и ще изпрати документите."
-requestCta = "Заявка"
-requestTitle = "Заявка за този документ"
-signBody = "Отваря Stirling Enterprise Agreement за електронен подпис: един подпис покрива MSA, order form, EULA и DPA. Ние подписваме насрещно автоматично и преминавате към плащане."
-signCta = "Отваряне за подпис"
-signTitle = "Прегледайте и подпишете споразумението си"
-uploadBody = "Изпратете ни вашата PO и ние ще фактурираме спрямо нея по вашите условия. Плъзнете PDF или изберете файл по-долу."
-uploadCta = "Качване на purchase order"
-uploadTitle = "Качете вашата purchase order"
 
 [portal.procurement.payment]
 description = "Вашата оферта е приета и лицензът ви вече е активен — екипът ви може да започне веднага. Платете първата фактура, когато сте готови; можете да я платите или изтеглите тук, без да е нужен email."
+downloadAgreement = "Изтегляне на подписаното споразумение"
 downloadInvoice = "Изтегляне на фактура"
-simulate = "Симулиране на получено плащане (demo)"
+eyebrow = "Плащане"
 title = "Абонаментът е създаден"
 viewInvoice = "Преглед и плащане на фактура"
 
+[portal.procurement.review]
+acceptCta = "Приемане на офертата"
+annual = "Годишна такса (година 1)"
+downloadCta = "Изтегляне на офертата"
+poNumber = "Поръчка за покупка: {{po}}"
+renewal = "Подновява се на {{amount}}/година след срока (+{{pct}}% CPI)"
+tcv = "{{years}}-годишен срок, платен изцяло предварително: {{tcv}}"
+validUntil = "Валидно до {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Планировчикът не можа да бъде зареден."
 fallbackLink = "Отваряне на планирането в нов раздел"
+loading = "Зареждане на планировчика..."
 subtitle = "Вашият solutions engineer ще преведе екипа ви през внедряването. Изберете удобно за вас време."
 title = "Насрочване на разговор"
 
-[portal.procurement.status]
-action = "Необходимо е действие"
-available = "Налично"
-complete = "Завършено"
-pending = "В изчакване"
-request = "При заявка"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Изолирано, без изходяща връзка"
+back = "Назад"
+businessName = "Име на фирмата"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Управлявано, най-бърз старт"
+continue = "Продължи"
+deployment = "Къде трябва да бъде разположено?"
+eula = "Съгласен/съгласна съм със Stirling EULA & Commercial Terms."
+fullName = "Пълно име"
+fullNamePlaceholder = "Вашето име"
+invites = "Поканете съотборници · по избор"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Насрочване на разговор"
+seats = "Хора, които тестват"
+seatsPlaceholder = "напр. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker или Kubernetes"
+start = "Стартиране на пробен период"
+stepOf = "Стъпка {{n}} от {{total}}"
+subtitle = "Безплатно за 14 дни, без карта."
+subtitleDetails = "Няколко детайла за вашата оферта и споразумение."
+talkFirst = "Предпочитате първо да поговорим?"
+title = "Настройте пробния си период"
+viewEula = "Прочетете го"
+workEmail = "Служебен имейл"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Удължаването добавя 7 дни и уведомява вашия solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Достигнат максимум"
 subtitle = "Вашият безплатен trial продължава до {{date}}. Не се изисква карта."
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Ценообразуване за ангажиран обем, SSO + SCIM + RBAC за цялата организация, 90-дневен неизменяем одит и dedicated SE."
-homeCta = "Стартиране на Trial →"
-homeHeadline = "Обработвайте милиони PDFs."
-
-[portal.recentActivity]
-title = "Скорошна активност"
-viewAll = "Преглед на всички"
-
-[portal.recentActivity.empty]
-description = "Изпълнения на pipeline, внедрявания и събития от агенти ще се появят тук."
-title = "Тук все още няма нищо"
-
 [portal.search]
 ariaLabel = "Търсене"
 placeholder = "Търсене в Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Администратор"
 [portal.settings.sections]
 account-link = "Свързване на акаунт"
 
-[portal.shell.header]
-accountFallback = "Акаунт"
-accountMenu = "Меню на акаунта"
-darkMode = "Тъмен режим"
-lightMode = "Светъл режим"
-search = "Търсене"
-searchPlaceholder = "Търсене…"
-signOut = "Изход"
-switchToDark = "Превключване към тъмна тема"
-switchToLight = "Превключване към светла тема"
-
 [portal.shell.sidebar]
 appEditor = "Редактор"
 appProcessor = "Процесор"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} документа"
 linkAccount = "Свързване на Stirling акаунт"
-planEditor = "План Editor"
-planEnterprise = "План Enterprise"
-planProcessor = "План Processor"
 primaryNav = "Основна навигация"
 switchApp = "Превключване на приложение"
 
+[portal.shell.topbar]
+closeNav = "Затваряне на навигацията"
+openNav = "Отваряне на навигацията"
+search = "Търсене"
+
 [portal.sources]
 subtitle = "Повторно използваеми входни връзки, които подават документи към Stirling. Конфигурирайте връзка веднъж, след това я използвайте в произволен брой политики. Щракнете върху ред за конфигурацията ѝ и кои политики я използват."
 title = "Източници"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Свързване на източник"
 
+[portal.sources.builder]
+back = "Назад към източниците"
+backToTypes = "Всички типове източници"
+cancel = "Отказ"
+chooseHint = "Изберете откъде идват документите. Конекторите в сиво са в процес на разработка."
+comingSoon = "Очаквайте скоро"
+comingSoonHeading = "Очаквайте скоро"
+create = "Създаване на източник"
+createTitle = "Свързване на източник"
+delete = "Изтриване"
+editTitle = "Редактиране на източник"
+enabled = "Активирано"
+save = "Запазване на промените"
+
+[portal.sources.builder.folderAccess]
+description = "Автоматизациите за папки могат да използват само папки, разрешени от администратор. Добавете я в настройките за достъп до папки, след това опитайте отново."
+openSettings = "Настройки за достъп до папки"
+title = "Тази папка не е разрешена"
+
 [portal.sources.delete]
 body = "Да се изтрие ли „{{name}}“? Това не може да бъде отменено. Политиките, които го използват, ще трябва да бъдат актуализирани."
 cancel = "Отказ"
 confirm = "Изтриване"
 title = "Да се изтрие ли източникът?"
 
-[portal.sources.detail]
-closeAriaLabel = "Затваряне на детайлите"
-delete = "Изтриване на източник"
-docs24h = "Последните 24 ч."
-docs30d = "Последните 30 дни"
-docsTotal = "Общо видени"
-docsTrend = "Документи през последните 30 дни"
-documents = "Документи"
-edit = "Редактиране"
-notReferenced = "Не се използва от никоя политика, така че е безопасно да бъде изтрит."
-pause = "Пауза"
-resume = "Възобновяване"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Използва се от"
-
 [portal.sources.empty]
 description = "Свържете папка (а скоро и cloud storage), така че вашите политики да имат откъде да вземат документи."
 title = "Все още няма свързани източници"
@@ -7899,18 +8754,57 @@ inUse = "В употреба"
 total = "Връзки"
 unused = "Неизползвани"
 
+[portal.sources.networkFields.connection]
+helperText = "Запазената връзка със сървърния адрес и идентификационните данни. Използва се повторно от всеки източник, който я посочва."
+label = "Връзка"
+
+[portal.sources.networkFields.directory]
+helperText = "Папка на сървъра за проверка, относително към home при вход или корена на споделянето. Оставете празно за корена."
+label = "Папка"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume премахва всеки файл от сървъра, след като всяка политика го обработи."
+label = "Режим на четене"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: обработване на всеки файл веднъж"
+snapshot = "Snapshot: повторно четене на папката при всяко изпълнение"
+
+[portal.sources.networkFields.recursive]
+label = "Дълбочина на папката"
+
+[portal.sources.networkFields.recursive.options]
+all = "Включване на подпапки"
+top = "Само най-горно ниво"
+
 [portal.sources.status]
 active = "Активен"
 disabled = "Деактивиран"
 unused = "Неизползван"
 
 [portal.sources.table]
+documents = "Документи"
 source = "Източник"
 status = "Статус"
 usedBy = "Политики"
 
+[portal.sources.types.box]
+description = "Изтегляйте документи от Box папки, които екипът ви вече споделя."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Изтегляйте документи от споделена Dropbox папка."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Документи, които екипът ви е обработил в editor, в изпълнения на политики и AI."
 label = "Редактор"
+noPolicies = "Все още няма политики, изпълнени от editor."
+
+[portal.sources.types.email]
+description = "Превръщайте прикачени файлове, изпратени до специална пощенска кутия, в документи."
+label = "Имейл входяща кутия"
 
 [portal.sources.types.folder]
 description = "Наблюдава директория на сървъра за нови документи."
@@ -7943,25 +8837,80 @@ label = "Дълбочина на папката"
 all = "Включване на подпапки"
 top = "Само най-горно ниво"
 
+[portal.sources.types.ftp]
+description = "Проверявайте папка на FTP или FTPS сървър за нови документи."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Изтегляйте документи от споделени Google Drive папки."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Наблюдавайте SMB network share за нови документи."
+label = "Мрежово устройство"
+
+[portal.sources.types.onedrive]
+description = "Наблюдавайте OneDrive папки за нови документи."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Изтегляйте документи от Amazon S3 или S3-съвместим bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Запазената връзка, съдържаща bucket и идентификационните данни. Използва се повторно от всеки източник и изход на конвейер, който я посочва."
+label = "Връзка"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume премахва всеки object от bucket, след като всяка политика го обработи."
+label = "Режим на четене"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: обработване на всеки object веднъж"
+snapshot = "Snapshot: повторно четене на bucket при всяко изпълнение"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Обработват се само object-и, чиито ключове започват с този prefix."
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Проверявайте SFTP drop папка за нови документи."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Изтегляйте документи от библиотеки с документи на SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Източник"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL и тайна за подписване се генерират, когато създадете този webhook. Подателите изпращат POST документи към този URL и посочващите политики се изпълняват при пристигане."
+description = "Получавайте документи чрез подписан HTTP POST от всяка външна система."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Тайната за подписване се показва веднъж, когато webhook бъде създаден. Създайте източника отново, за да я смените."
+
+[portal.sources.types.webhook.reveal]
+copy = "Копиране"
+done = "Готово"
+secret = "Тайна за подписване"
+secretHelp = "Подписвайте суровото тяло на всяка доставка с този ключ (HMAC-SHA256) и го изпращайте като X-Stirling-Signature header."
+secretWarning = "Копирайте тайната за подписване сега. За ваша сигурност тя се показва само веднъж и не може да бъде извлечена по-късно."
+title = "Webhook създаден"
+url = "Delivery URL"
+usage = "POST всеки документ като сурово тяло на заявката към delivery URL с binary content type (application/pdf или application/octet-stream). Посочващите политики се изпълняват автоматично при пристигане."
+
 [portal.sources.wizard]
-back = "Назад"
-cancel = "Отказ"
-continue = "Продължи"
-editTitle = "Редактиране на източник"
 name = "Име"
 namePlaceholder = "напр. Прием на искове"
-save = "Запазване на промените"
-subtitle = "Стъпка {{current}} от {{total}} · {{label}}"
-title = "Свързване на източник"
 type = "Тип"
 
-[portal.sources.wizard.steps]
-chooseType = "Избор на тип"
-configure = "Конфигуриране"
-review = "Преглед и свързване"
+[portal.stepModal]
+close = "Затваряне"
 
 [portal.usage]
 managePayment = "Управление на плащане"
@@ -8021,16 +8970,9 @@ summary = "Притежава екип — управлява ресурсите
 2 = "Достъп до портала чрез политиката по подразбиране"
 3 = "Всичко, което може членът"
 
-[portal.welcome]
-ariaLabel = "Добре дошли в Stirling PDF"
-badge = "Open-source"
-installEditor = "Инсталиране на редактора"
-inviteTeammates = "Поканете съотборници"
-openInBrowser = "Отваряне в браузър"
-perks = "Безплатно завинаги · Self-hostable"
-subtitle = "Най-сигурният PDF редактор в света е безплатен за екипи от всякакъв размер. Включва 60+ PDF операции и SSO."
-title = "Добре дошли в"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Неограничено"
 
 [printFile]
 title = "Печат на файл"
@@ -8613,6 +9555,14 @@ text = "Завъртете страниците на вашия PDF по или
 [rotate.tooltip.header]
 title = "Преглед на настройките за завъртане"
 
+[ruler]
+clearAll = "Изчистване на всички"
+hideAllLabels = "Скриване на всички етикети"
+hideSmallLabels = "Скриване на малките етикети"
+physicalValues = "Физически"
+scaled = "Мащабирани"
+showAllLabels = "Показване на всички етикети"
+
 [sanitize]
 desc = "Премахнете потенциално вредни елементи от PDF файлове."
 sanitizationResults = "Резултати от санирането"
@@ -8654,31 +9604,45 @@ label = "Премахни XMP метаданни"
 [sanitize.steps]
 settings = "Настройки"
 
-[sanitizePdf]
-tags = "чисти,сигурни,безопасни,премахване-заплахи"
-
 [sanitizePDF]
 title = "Дезинфектирай PDF"
 
+[sanitizePdf]
+tags = "чисти,сигурни,безопасни,премахване-заплахи"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Коригиране на мащаба на страницата"
 
+[scaleSettings]
+activeScale = "Активен мащаб"
+apply = "Прилагане на мащаб"
+applyCalibration = "Прилагане на калибриране"
+calculatedScale = "Изчислен мащаб"
+calibrate = "Калибриране"
+calibrating = "Калибриране"
+calibrationDistanceRequired = "Въведете реално разстояние, по-голямо от нула"
+calibrationInvalid = "Не може да се изчисли мащабът от това измерване"
+calibrationPaperDistance = "Измерено разстояние на страницата: {{distance}}"
+calibrationTitle = "Калибриране на мащаба"
+calibrationTooltip = "Измерете известно разстояние, за да изчислите мащаба автоматично"
+customScale = "Персонализиран мащаб"
+noneSet = "Няма зададен персонализиран мащаб"
+presets = "Предварително зададени мащаби"
+ratio = "Съотношение на мащаба"
+ratioHelp = "Съотношение: 1 единица на страницата = X реални единици"
+ratioPlaceholder = "напр. 100"
+ratioPositive = "Съотношението трябва да е по-голямо от нула"
+ratioRequired = "Съотношението е задължително"
+realDistance = "Реално разстояние"
+realDistancePlaceholder = "напр. 5"
+reset = "Нулиране до стойности по подразбиране"
+unit = "Единица"
+unitInvalid = "Невалидна единица: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Праг на ъгъла:"
-10 = "Задава размера на добавената и премахната граница, за да предотврати бели граници към изхода (по подразбиране: 1)."
-2 = "Задава минималния абсолютен ъгъл, необходим за завъртане на изображението (по подразбиране: 10)."
-3 = "Толеранс:"
-4 = "Определя обхвата на цветовата вариация около предполагаемия фонов цвят (по подразбиране: 30)."
-5 = "Минимална площ:"
-6 = "Задава минималния праг на площ за изображение (по подразбиране: 10000)."
-7 = "Минимална контурна площ:"
-8 = "Задава минималния праг на контурната площ за изображение"
-9 = "Размер на рамката:"
-
 [scannerImageSplit]
 submit = "Извлечи сканирани изображения"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Какво прави"
 whatThisDoesDesc = "Автоматично открива и извлича всяка снимка от сканирана страница или композитно изображение—без ръчно изрязване."
 whenToUse = "Кога да се използва"
 
+[ScannerImageSplit.selectText]
+1 = "Праг на ъгъла:"
+10 = "Задава размера на добавената и премахната граница, за да предотврати бели граници към изхода (по подразбиране: 1)."
+2 = "Задава минималния абсолютен ъгъл, необходим за завъртане на изображението (по подразбиране: 10)."
+3 = "Толеранс:"
+4 = "Определя обхвата на цветовата вариация около предполагаемия фонов цвят (по подразбиране: 30)."
+5 = "Минимална площ:"
+6 = "Задава минималния праг на площ за изображение (по подразбиране: 10000)."
+7 = "Минимална контурна площ:"
+8 = "Задава минималния праг на контурната площ за изображение"
+9 = "Размер на рамката:"
+
 [search]
 noResults = "Няма намерени резултати"
 placeholder = "Въведете търсен термин..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Вашият Stirling-PDF сървър е офлай
 [session]
 expired = "Вашата сесия е изтекла. Моля, опреснете страницата и опитайте отново."
 
-[sessionManagement.tooltip]
-header = "Управление на сесиите за подписване"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Новите участници се добавят в края на реда за подписване"
-bullet2 = "Не могат да се добавят участници след финализиране на сесията"
-bullet3 = "Всеки участник получава известие, когато му дойде редът"
-description = "Можете да добавяте още участници към активна сесия по всяко време преди финализиране."
-title = "Добавяне на участници"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Пълно финализиране</b>: Всички участници са подписали"
-bullet2 = "<b>Частично финализиране</b>: Някои участници все още не са подписали"
-bullet3 = "Неподписалите участници ще бъдат изключени от крайния документ"
-bullet4 = "След финализиране можете да заредите подписания PDF в активните файлове"
-description = "Финализирането комбинира всички подписи в един подписан PDF. Това действие не може да бъде отменено."
-title = "Финализиране на сесия"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Не могат да бъдат премахнати участници, които вече са подписали"
-bullet2 = "Премахнатите участници повече няма да получават известия"
-bullet3 = "Редът за подписване се коригира автоматично"
-description = "Участниците могат да бъдат премахнати от сесии преди да подпишат."
-title = "Премахване на участници"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Всеки подпис се прилага последователно върху PDF"
-bullet2 = "По-късните подписващи виждат по-ранните подписи"
-bullet3 = "Критично за процеси по одобрение и правни вериги на отговорност"
-description = "Редът, който посочвате при създаване на сесията, определя кой подписва първи."
-title = "Ред на подписите"
-
 [settings]
 close = "Затворете"
 
+[settings.ai]
+documents = "Документи и RAG"
+general = "Общи"
+limits = "Ограничения и производителност"
+models = "Модели и доставчици"
+title = "AI"
+
 [settings.configuration]
 advanced = "Разширени"
 database = "База данни"
 endpoints = "Крайни точки"
 features = "Функции"
+folderAccess = "Достъп до папки"
 mcp = "MCP Server"
 storageSharing = "Съхранение на файлове и споделяне"
 systemSettings = "Системни настройки"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Редактор на PDF по подразбиране"
 defaultPdfEditorActive = "Stirling PDF е вашият редактор на PDF по подразбиране"
 defaultPdfEditorChecking = "Проверка..."
 defaultPdfEditorInactive = "Друго приложение е зададено по подразбиране"
+defaultPdfEditorRemind = "Напомняне за задаване по подразбиране"
+defaultPdfEditorRemindDescription = "Показване на банер, когато Stirling PDF не е вашето PDF приложение по подразбиране."
 defaultPdfEditorSet = "Вече е по подразбиране"
 defaultStartupView = "Начален изглед по подразбиране"
 defaultStartupViewDescription = "Изберете кой раздел в лявата колона да е активен при стартиране на приложението"
@@ -8817,9 +9771,18 @@ languageDescription = "Изберете езика на показване"
 logout = "Изход"
 setAsDefault = "Задай като по подразбиране"
 theme = "Тема"
+themeAccent = "Акцентен цвят"
+themeAccentCustom = "Персонализиран цвят"
+themeAccentCustomHint = "Персонализиран (препоръчват се стойностите по подразбиране)"
+themeAccentDark = "Акцентен цвят за тъмен режим"
+themeAccentDefault = "По подразбиране"
+themeAccentDefaultHint = "Тема по подразбиране (препоръчително)"
+themeAccentDescription = "Бутоните, връзките и акцентите го следват и той леко оцветява приложението. Светлият и тъмният режим имат свои собствени. Системният използва активния."
+themeAccentLight = "Акцентен цвят за светъл режим"
 themeDark = "Тъмна"
 themeDescription = "Превключвайте между светъл и тъмен режим"
 themeLight = "Светла"
+themeReset = "Възстановяване на темата по подразбиране"
 themeSystem = "System"
 title = "Общи"
 user = "Потребител"
@@ -8833,6 +9796,12 @@ intro = "Активирайте удостоверяване на потреби
 learnMore = "Научете повече в документацията"
 title = "За системни администратори"
 
+[settings.general.loginLanding]
+description = "Изберете кое приложение да се отваря, когато влизате в Stirling Cloud."
+editor = "Редактор"
+processor = "Обработчик"
+title = "След влизане"
+
 [settings.general.mode]
 fullscreen = "Цял екран"
 sidebar = "Странична лента"
@@ -9041,6 +10010,11 @@ security = "Сигурност"
 telegram = "Telegram"
 title = "Сигурност и удостоверяване"
 
+[settings.signOut]
+confirm = "Сигурни ли сте, че искате да излезете?"
+submit = "Изход"
+title = "Изход"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Качване на сървъра"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "щракнете тук"
+fallback = "Ако не се отвори автоматично,"
+opening = "Отваряне на Swagger UI в нов раздел..."
 tags = "api,документация,swagger,крайни точки,разработка"
 title = "API документация"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Изберете файлове в Активни файло
 singleFileScope = "Прилага се само за: {{fileName}}"
 viewerMode = "Преминете към редактора на файлове, за да изберете няколко файла."
 
+[toolFormat]
+ANY = "всякакъв файл"
+CBR = "архив с комикси (CBR)"
+CBZ = "архив с комикси (CBZ)"
+CSV = "CSV файл"
+EBOOK = "електронна книга"
+EMAIL = "имейл"
+EXCEL = "електронна таблица"
+HTML = "уеб страница"
+IMAGE = "изображения"
+JAVASCRIPT = "JavaScript файл"
+JSON = "JSON файл"
+MARKDOWN = "Markdown файл"
+NONE = "няма файл"
+PCL = "PCL файл за печат"
+PDF = "PDF"
+PDF_ENCRYPTED = "защитен с парола PDF"
+POSTSCRIPT = "PostScript файл"
+PPT = "презентация"
+TEXT = "текстов файл"
+VIDEO = "видео"
+WORD = "Word документ"
+XML = "XML файл"
+XPS = "XPS документ"
+ZIP = "ZIP архив"
+
 [toolPanel]
 alpha = "Алфа"
 backToAllTools = "Назад към всички инструменти"
 collapse = "Свиване на панела"
 expand = "Разгъване на панела"
 goBack = "Върнете се"
+pdfTools = "PDF инструменти"
 placeholder = "Изберете инструмент, за да започнете"
 premiumFeature = "Премиум функция:"
+searchTools = "Търсене на инструменти"
 toolsHeader = "Инструменти"
 viewAllTools = "Виж всички инструменти"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Няма намерени инструменти"
 quickAccess = "БЪРЗ ДОСТЪП"
 searchPlaceholder = "Търсене на инструменти..."
 
-[toolPicker.categories]
-advancedTools = "Разширени инструменти"
-recommendedTools = "Препоръчани инструменти"
-standardTools = "Стандартни инструменти"
-
 [toolPicker.subcategories]
 advancedFormatting = "Разширено форматиране"
 automation = "Автоматизация"
@@ -9950,16 +10950,31 @@ title = "Потребители"
 you = "(вие)"
 
 [users.action]
+cancelInvite = "Отмяна на поканата"
 deleteTeam = "Изтриване на екип"
 disableMfa = "Нулиране на MFA"
 move = "Преместване в екип"
 reinstate = "Възстановяване"
 remove = "Премахване от организацията"
+removeTeam = "Премахване от екипа"
 rename = "Преименуване на екип"
 resetPw = "Нулиране на парола"
 suspend = "Спиране"
 unlock = "Отключване на акаунт"
 
+[users.activity]
+daysAgo = "преди {{count}} д."
+hoursAgo = "преди {{count}} ч."
+justNow = "Току-що"
+minutesAgo = "преди {{count}} мин."
+monthsAgo_one = "преди {{count}} месец"
+monthsAgo_other = "преди {{count}} месеца"
+never = "Никога"
+weeksAgo_one = "преди {{count}} седмица"
+weeksAgo_other = "преди {{count}} седмици"
+yearsAgo_one = "преди {{count}} година"
+yearsAgo_other = "преди {{count}} години"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Одобрява политика"
@@ -9967,11 +10982,14 @@ editor = "Редактор"
 processor = "Процесор"
 
 [users.confirm]
+cancelInviteBody = "Да се отмени ли поканата до {{email}}? Те няма да могат да се присъединят с текущата връзка."
+cancelInviteTitle = "Отмяна на поканата"
 deleteTeamBody = "Да се изтрие ли екипът {{name}}? Екипът първо трябва да е празен - преместете членовете му в друг екип и той не трябва все още да притежава конфигурации на интеграции."
 deleteTeamTitle = "Изтриване на екип"
 disableMfaBody = "Да се премахне ли MFA регистрацията на {{name}}? Ако се изисква, ще я настроят отново при следващото влизане."
 disableMfaTitle = "Нулиране на MFA"
 removeBody = "Да се премахне ли окончателно {{name}} от организацията? Това не може да бъде отменено."
+removeTeamBody = "Да се премахне ли {{name}} от екипа? Те запазват акаунта си, но губят достъп до ресурсите на този екип."
 removeTitle = "Премахване на член"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Потребителско име"
 usernameError = "Потребителското име трябва да е поне 3 знака"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Поканен от {{who}}"
+cancel = "Отказ"
+count = "{{count}} чакащи"
+desc = "Поканени хора, които още не са се присъединили. Те заемат място, докато не приемат."
+expiresInDays_one = "Изтича след {{count}} ден"
+expiresInDays_other = "Изтича след {{count}} дни"
+expiresToday = "Изтича днес"
+title = "Чакащи покани"
+
 [users.loadError]
 description = "Нещо се обърка при свързването със сървърната част или нямате достъп. Опитайте отново."
 title = "Членовете не можаха да бъдат заредени"
@@ -10212,9 +11240,11 @@ title = "Прикачени файлове"
 
 [viewer.bookmarks]
 bookmarkTitle = "Заглавие на отметката"
+bookmarkTitleRequired = "Заглавието на отметката е задължително"
 closeSidebar = "Затвори страничната лента с отметки"
 collapseAll = "Свий всички отметки"
 expandAll = "Разгъни всички отметки"
+searchPlaceholder = "Търсене в отметките"
 
 [viewer.comments]
 addComment = "Добавяне на коментар"
@@ -10605,30 +11635,6 @@ title = "Текст на водния знак"
 image = "Изображение"
 text = "Текст"
 
-[wetSignature.tooltip]
-header = "Методи за създаване на подпис"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Персонализирайте цвета и дебелината на писалката"
-bullet2 = "Изтрийте и начертайте отново, докато сте доволни"
-bullet3 = "Работи на устройства с докосване (таблети, телефони)"
-description = "Създайте подпис на ръка, използвайки мишка или сензорен екран. Най-подходящ за лични, автентични подписи."
-title = "Нарисувайте подпис"
-
-[wetSignature.tooltip.type]
-bullet1 = "Изберете от множество шрифтове"
-bullet2 = "Персонализирайте размера и цвета на текста"
-bullet3 = "Идеално за стандартизирани подписи"
-description = "Генерирайте подпис от въведен текст. Бърз и последователен, подходящ за бизнес документи."
-title = "Въведете подпис"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Поддържа PNG, JPG и други формати на изображения"
-bullet2 = "Препоръчват се прозрачни фонове за най-добри резултати"
-bullet3 = "Изображението ще бъде преоразмерено, за да пасне в областта за подпис"
-description = "Качете предварително създадено изображение на подпис. Идеално, ако имате сканиран подпис или фирмено лого."
-title = "Качване на изображение на подпис"
-
 [workbenchBar]
 activeFiles = "Активни файлове"
 annotations = "Анотации"
@@ -10652,6 +11658,7 @@ redact = "Заличаване"
 rotateLeft = "Завъртане наляво"
 rotateRight = "Завъртане надясно"
 ruler = "Линийка / Измерване"
+rulerSettings = "Настройки на мащаба"
 save = "Запазване"
 saveAll = "Запазване на всички"
 saveAs = "Запазване като"
diff --git a/frontend/editor/public/locales/bo-CN/translation.toml b/frontend/editor/public/locales/bo-CN/translation.toml
index 4e73822bf5..9d717e97bc 100644
--- a/frontend/editor/public/locales/bo-CN/translation.toml
+++ b/frontend/editor/public/locales/bo-CN/translation.toml
@@ -7,6 +7,7 @@ black = "ནག་པོ"
 blue = "སྔོན་པོ"
 cancel = "འདོར་བ"
 chooseFile = "ཡིག་ཆ་འདེམས།"
+clear = "གཙང་སེལ"
 close = "སྒོ་རྒྱག"
 comingSoon = "འབྱོར་ལ་ཉེ"
 confirm = "གཏན་འཁེལ"
@@ -45,10 +46,8 @@ filesSelected = "{{count}} ཡིག་ཆ་བདམས་པ།"
 font = "ཡིག་གཟུགས་པ།"
 fontSizeTooltip = "ཤོག་ངོས་ཨང་གྲངས་ཀྱི་ཚིག་ཡིག་གི་ཚད་གཞི། ཨང་གྲངས་ཆེ་བ་དེས་ཡིག་ཆ་ཆེ་བ་བཟོས།"
 fontTypeTooltip = "ཤོག་ངོས་ཨང་གྲངས་ལ་ཁྱིམ་ཚང་། ཁྱེད་རང་གི་ཡིག་ཆའི་རྣམ་པ་ལ་བརྟེན་ནས་འདེམས།"
-genericSubmit = "སྤྲོད་པ"
 green = "ལྗང་ཁུ"
 help = "རོགས་རམ"
-imgPrompt = "པར་རིས་འདེམས།"
 incorrectPasswordMessage = "ད་ལྟའི་གསང་གྲངས་ནོར་འཁྲུལ་རེད།"
 info = "གནས་ཚུལ།"
 invalidUndoData = "ཕྱིར་འཐེན་བྱེད་མི་ཐུབ་པ། ནུས་མེད་བཀོལ་སྤྱོད་ཀྱི་གཞི་གྲངས་མེད་པ།"
@@ -61,7 +60,6 @@ loginAgreementTitle = "ཐོ་འགོད་གྲོས་ཆིངས"
 logOut = "ཕྱིར་ཐོན།"
 marginTooltip = "ཤོག་ངོས་ཨང་གྲངས་དང་ཤོག་ངོས་ཀྱི་མཐའ་མཚམས་བར་ཐག་རིང་།"
 moreOptions = "གདམ་ག་མང་བ།"
-multiPdfPrompt = "PDF ༢ ཡང་ན་མང་བ་འདེམས།"
 never = "གཏན་ནས"
 no = "མིན"
 noFileSelected = "ཡིག་ཆ་མི་འདེམས་པ། ཡར་བསྐུར་རོགས་གནང་།"
@@ -79,7 +77,6 @@ pageOrderPrompt = "སྲོལ་རྒྱུན་གྱི་ཤོག་ང
 pages = "ཤོག་ངོས།"
 pageSelectionPrompt = "སྲོལ་རྒྱུན་གྱི་ཤོག་ངོས་འདེམས་སྒྲུག (ཤོག་ངོས་ཨང་གྲངས་ ༡,༥,༦ ཡང་ན་ 2n+1 ལྟ་བུའི་ལས་འགན་གྱི་ཐོ་འགོད་ཐོ་གཞུང་ནང་འཇུག་བྱེད།)"
 password = "གསང་གྲངས"
-pdfPrompt = "PDF(s) འདེམས།"
 pin = "སྦྱར་ཡིག་(ལག་ཆའི་རྒྱུག་རྗེས་ཤུགས་ལྡན་)"
 pro = "མཁས་པ།"
 processingComplete = "ཁྱེད་ཀྱི་ཡིག་ཆ་གྲ་སྒྲིག་ཟིན།"
@@ -87,6 +84,7 @@ processingCompleteMultiple = "{{count}} ཡིག་ཆ་གྲ་སྒྲི
 property = "རྒྱུ་ནོམ"
 quickPosition = "མགྱོགས་མྱུར་གནས་སྟངས།"
 red = "དམར་པོ"
+remove = "འདོར"
 reset = "བསྐྱར་འཛུགས།"
 review = "བསྐྱར་ཞིབ"
 save = "སྲུང་བ།"
@@ -180,6 +178,7 @@ addMoreFiles = "ཡིག་ཆ་མང་བ་ཁ་སྣོན་བྱེ
 attachments = "མཉམ་སྦྲེལ་འདེམས།"
 info = "ཁྱེད་རང་གི་PDFལ་མཐུད་པའི་ཡིག་ཆ་འདེམས། ཡིག་ཆ་འདི་དག་PDFཡི་མཐུད་སྣེ་བརྒྱུད་ནས་བཙུགས་ནས་འཛུལ་ཐུབ།"
 placeholder = "ཡིག་ཆ་འདེམས་དགོས།"
+removeFile = "ཡིག་སྣོད་འདོར"
 selectedFiles = "འདེམས་སྒྲུག་བྱས་པའི་ཡིག་ཆ།"
 submit = "སྦྲེལ་མཐུད་ཁ་སྣོན།"
 
@@ -353,6 +352,7 @@ text = "ཆོག་མཆན་འདི་དག་གིས་བེད་ས
 title = "འཕོ་འགྱུར།"
 
 [addStamp]
+preview = "ཐམ་གའི་སྔོན་ལྟ"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -688,6 +688,165 @@ manualLinks = "ལག་ཐོག་ཕབ་ལེན: འབྲེལ་མཐ
 noLanguages = "སྒྲིག་བཀོད་ཟིན་པའི་སྣོད་འཛིན་ནང་ tessdata སྐད་ཡིག་མ་རྙེད།"
 permissionNotice = "tessdata འགྲུལ་ལམ་འུར་བྱེད་མི་ཐུབ། ཕབ་ལེན་ཚུལ་དེ་བརྡ་འཚོལ་ཆས་ནས་ཁ་ཕྱེའོ། .traineddata ཡིག་ཆ་དེ་རང་ལས་ tessdata སྣོད་འཛིན་ནང་ཉར་ཚགས་བྱོས།"
 
+[admin.settings.ai.documents]
+description = "ཡིག་ཆའི་ཐོག་དྲི་བར་ལན་འདེབས་པར་སྤྱོད་པའི embedding model དང retrieval སྒྲིག་འགོད་སྒྲིག་སྦྱོར་བྱོས། ཉར་ཚགས་བྱས་རྗེས AI engine ལ་སྤྱོད་འཐུས།"
+title = "ཡིག་ཆ་དང RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "engine རང་གི environment credential སྤྱོད་དགོས་ན་སྟོང་པར་བཞག རང་གིས་གཉེར་བའི single-engine deployments ལ་སྤྱོད་འཐུས།"
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "ཉར་ཚགས་བྱས་ཟིན - ད་ལྟའི key ཉར་དགོས་ན་སྟོང་པར་བཞག"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI-compatible / Ollama embeddings endpoint གི Base URL, དཔེར་ན http://ollama:11434/v1. ཡིད་ཆེས་རུང་བའི་ནང་ཁུལ endpoint ལ་ངེས་པར་དུ་སྟོན་དགོས (SSRF-sensitive)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding model གྱི་མིང་། རང་མོས་ཡི་གེ; འོས་སྦྱོར་ནི་གསལ་བརྡ་ཙམ་ཡིན།"
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "ཡིག་ཆའི་ཡི་གེ་དེ vector embeddings ལ་སྒྱུར་བར་སྤྱོད་པའི provider།"
+label = "Embedding provider"
+
+[admin.settings.ai.documents.maxSearches]
+description = "རེ་ཞུ་རེར agent གིས་སྤེལ་ཆོག་པའི retrieval འཚོལ་ཞིབ་ཀྱི་གྲངས་མང་ཤོས།"
+label = "འཚོལ་ཞིབ་མང་ཤོས"
+
+[admin.settings.ai.documents.reindexNote]
+body = "embedding model བསྒྱུར་བ་དེ་འཕྲལ་དུ་ནུས་པ་འཐོན་ཡང་། སྔོན་མའི model གྱིས indexed བྱས་པའི་ཡིག་ཆ་རྣམས་ལ་འཚོལ་ཞིབ་ཀྱིས་འབྲས་བུ་ཡང་དག་སློག་པར re-index བྱ་དགོས།"
+title = "Re-index དགོས"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "གལ་ཏེ embedding model བསྒྱུར་ཡོད་ན། འཚོལ་ཞིབ་ཀྱིས model གསར་པ་སྤྱོད་པར་ད་ཡོད་ཡིག་ཆ་རྣམས re-index བྱོས།"
+
+[admin.settings.ai.documents.topK]
+description = "འཚོལ་ཞིབ་རེར་ལེན་པའི་འབྲེལ་ཆེ་ཤོས chunks ཀྱི་གྲངས།"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling དེ Python AI engine དང་མཐུད་ནས AI ནུས་པ་གང་དག་སྟོན་དགོས་འདེམས། བསྒྱུར་བ་རྣམས restart སྐབས་ནུས་པ་འཐོན།"
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "AI ཁྱད་ནུས་རེ་རེ་སྒོ་ཕྱེའམ་སྒོ་རྒྱོབ། སྒོ་བརྒྱབ་པའི་ཁྱད་ནུས་རྣམས app ནང་སྦས་ཡོད།"
+title = "ནུས་པ"
+
+[admin.settings.ai.general.enabled]
+description = "སྤྱིའི་སྒོ་འབྱེད། སྒོ་བརྒྱབ་སྐབས AI tools, agents, ཡང་ན engine calls གང་ཡང་མི་རུང་།"
+label = "AI སྒོ་ཕྱེ"
+
+[admin.settings.ai.general.features.chat]
+description = "PDFs དང་ལས་ཀ་བྱེད་པའི་གླེང་མོལ་རོགས་རམ་པ།"
+label = "གླེང་མོལ་རོགས་རམ་པ"
+
+[admin.settings.ai.general.features.classify]
+description = "ཡིག་ཆ་རྣམས་རིགས་སམ་ནང་དོན་ལྟར་རང་འགུལ་གྱིས་རིགས་དབྱེ་བྱེད།"
+label = "ཡིག་ཆའི་རིགས་དབྱེ"
+
+[admin.settings.ai.general.features.createPdf]
+description = "AI agent བརྒྱུད་ནས PDF གསར་པ་བཟོ (དཔེར་ན HTML ནས)།"
+label = "prompt ནས PDF བཟོ"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "དྲི་བ་འདྲི་ཞིང་ཡར་སྤྲད་པའི་ཡིག་ཆར་གཞི་བཅོལ་བའི་ལན་ལེན།"
+label = "ཡིག་ཆའི་དྲི་བ"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "ཡིག་ཆ་རྣམས་ལ་རྩིས་རིག་དང་གྲངས་ཀའི་ནོར་འཁྲུལ་ཡོད་མེད་ཞིབ་བཤེར།"
+label = "རྩིས་རིག་ཞིབ་བཤེར་པ"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "PDF ལ AI ཡིས་བྲིས་པའི་ཞིབ་བཤེར་མཆན་དང་མཆན་འགྲེལ་སྣོན།"
+label = "PDF མཆན་འགྲེལ་ agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "ཡིག་ཆ་བཟོ་བ་ལྟ་བུའི་ལྕི་བའི agent བཀོལ་སྤྱོད་ཀྱི timeout།"
+label = "དུས་ཡུན་རིང་བའི timeout (སྐར་ཆ)"
+
+[admin.settings.ai.general.note]
+body = "AI engine ནི་ཞབས་ཞུ་ཁག་ཅིག་ལྟར་འགྲོ། དེའི་མཉམ་སྤྱོད་གསང་བ"
+body2 = "container environment variable བརྒྱུད་ནས་སྒྲིག་ཡོད། Provider API keys རྣམས་ཤོག་ངོས་འདི་དག་ཏུ་འཇུག་ཆོག ཡང་ན engine environment variables ལྟར་མཁོ་སྤྲོད་བྱ་ཆོག; འདིར་བཅུག་པའི keys རྣམས་ཉར་ཚགས་བྱས་སྐབས engine ལ་སྐྱེལ་ཡོང་།"
+title = "AI engine སྐོར"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "streamed (token-by-token) གླེང་མོལ་ལན་གྱི timeout།"
+label = "Stream timeout (སྐར་ཆ)"
+
+[admin.settings.ai.general.test]
+button = "མཐུད་འབྲེལ་ཚོད་ལྟ"
+failBody = "AI engine གིས་ལན་མ་སྤྲད། URL དང་། engine container འགྲོ་བཞིན་ཡོད་མེད། AI སྒོ་ཕྱེ་ཡོད་མེད་བརྟག (སྒོ་ཕྱེས་རྗེས restart དགོས)།"
+failTitle = "AI engine ལ་སླེབས་མི་ཐུབ"
+okBody = "AI engine གིས health check ལ་ལན་སྤྲད།"
+okTitle = "AI engine ལ་སླེབས་ཐུབ"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "engine ལ་སྐྱེལ་བའི་ཚད་ལྡན AI རེ་ཞུའི timeout།"
+label = "Request timeout (སྐར་ཆ)"
+
+[admin.settings.ai.general.url]
+description = "Python AI engine གི་ནང་ཁུལ URL, དཔེར་ན http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "AI རེ་ཞུས་ལས་ཀ་ག་ཚོད་བྱེད་ཆོག་པ་དང་མཉམ་དུ་ག་ཚོད་འགྲོ་ཆོག་པའི་སྲུང་ར། ཉར་ཚགས་བྱས་རྗེས AI engine ལ་སྤྱོད་འཐུས།"
+title = "ཚད་བཀག་དང་ལས་ཆོད"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "སྲུང་ར: ཕྱུང་བའི་ཡི་གེ་རིང་ཚད་འདི་ལས་བརྒལ་བའི AI རེ་ཞུ་དང་ལེན་མི་བྱེད།"
+label = "རེ་ཞུ་རེར་ཡིག་འབྲུ་མང་ཤོས"
+
+[admin.settings.ai.limits.maxPages]
+description = "སྲུང་ར: PDF ཤོག་ངོས་འདི་ཙམ་ལས་མང་བའི AI རེ་ཞུ་དང་ལེན་མི་བྱེད།"
+label = "རེ་ཞུ་རེར་ཤོག་ངོས་མང་ཤོས"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "engine ཡོངས་ཀྱི་དུས་མཉམ་དུ་འགྲོ་བཞིན་པའི model calls མང་ཤོས།"
+label = "Model max concurrency"
+
+[admin.settings.ai.models]
+description = "AI engine གིས་སྤྱོད་པའི LLM provider དང smart/fast models འདེམས། ཉར་ཚགས་བྱས་རྗེས AI engine ལ་སྤྱོད་འཐུས།"
+title = "Models & Providers"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "engine རང་གི environment credential སྤྱོད་དགོས་ན་སྟོང་པར་བཞག རང་གིས་གཉེར་བའི single-engine deployments ལ་སྤྱོད་འཐུས།"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "ཉར་ཚགས་བྱས་ཟིན - ད་ལྟའི key ཉར་དགོས་ན་སྟོང་པར་བཞག"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI-compatible / Ollama endpoint གི Base URL, དཔེར་ན http://ollama:11434/v1."
+label = "Provider base URL"
+warning = "base URL དེ་ཡིད་ཆེས་རུང་བའི་ནང་ཁུལ endpoint ལ་ངེས་པར་དུ་སྟོན་དགོས། engine གིས་དེར server-side རེ་ཞུ་བྱེད་པས། ཡིད་མི་ཆེས་པའི་ཐང་ནི SSRF-sensitive ཡིན།"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "fast model གྱི་ཕྱིར་འདོན tokens མང་ཤོས།"
+label = "Fast model max tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "ལས་འགན་ཡང་བར་རིན་ཆུང་ཞིང་མགྱོགས་པའི model། རང་མོས་ཡི་གེ; འོས་སྦྱོར་ནི་གསལ་བརྡ་ཙམ་ཡིན།"
+label = "Fast model"
+
+[admin.settings.ai.models.provider]
+description = "engine གིས་གང་གི LLM provider དང་འབྲེལ་བ་བྱེད་མིན།"
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "smart model གྱི་ཕྱིར་འདོན tokens མང་ཤོས།"
+label = "Smart model max tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "རྙོག་འཛིང་ཆེ་བའི་རིགས་འདེད་ལ་ནུས་པ་མཐོ་བའི model། རང་མོས་ཡི་གེ; འོས་སྦྱོར་ནི་གསལ་བརྡ་ཙམ་ཡིན།"
+label = "Smart model"
+
+[admin.settings.ai.saved]
+body = "བསྒྱུར་བ་རྣམས AI engine ལ་རང་འགུལ་གྱིས་སྐྱེལ་ཡོང་།"
+bodyNoPush = "སྒྲིག་འགོད་ཉར་ཚགས་བྱས་ཟིན། AI engine གིས་རང་གི་སྒྲིག་འགོད་ལེན་སྐབས་རྗེས་མ་ནས་ནུས་པ་འཐོན་ཡོང་།"
+title = "AI སྒྲིག་འགོད་ཉར་ཚགས་བྱས་ཟིན"
+
 [admin.settings.badge]
 clickToUpgrade = "མནན་ནས་པར་འཆར་ཞིབ་ལྟ"
 
@@ -935,6 +1094,25 @@ label = "འགོ་འཛུགས་སྐབས་བསྐྱར་གས
 description = "ཉིན་གྲངས་ཀྱི་གྲངས་འབོར། ལག་འཁྱེར་དེ་ནུས་ལྡན་ཡིན།"
 label = "ལག་འཁྱེར་ནུས་ལྡན་(ཉིན་མོ།)།"
 
+[admin.settings.folderAccess]
+description = "folder sources དང folder outputs ཀྱིས་ཀློག་པ་དང་འབྲི་བ་ཆོག་པའི་དཀར་ཆག འདི་ནི་བདེ་འཇགས་མཚམས་ཤིག་ཡིན: automations ནམ་ཡང་ཐོ་གཞུང་འདིའི་ཕྱི་ཡི server path ལ་སྟོན་མི་ཐུབ།"
+securityNote = "folder sources དང outputs རྣམས་ཡོངས་སུ་སྒོ་རྒྱག་དགོས་ན་འདི་སྟོང་པར་བཞག Stirling རང་གི་སྒྲིག་འགོད་དཀར་ཆག་ནམ་ཡང་འགྲོ་མི་ཆོག་པ་ཡིན།"
+title = "Folder Access"
+
+[admin.settings.folderAccess.implied]
+description = "Stirling གིས་དོ་དམ་བྱས་པའི་དཀར་ཆག་འདི་དག་ནམ་ཡང་ཆོག་མཆན་ཡོད་ཅིང་འདིར་བསྒྱུར་མི་ཐུབ།"
+serverStorage = "Server ཡིག་སྣོད་གསོག་ཉར"
+title = "ནམ་ཡང་ཆོག"
+watchedFolder = "Pipeline གྱིས་ལྟ་སྲུང་བྱས་པའི་ཡིག་ཁུག"
+
+[admin.settings.folderAccess.roots]
+add = "སྣོན"
+empty = "ཆོག་མཆན་ཡོད་པའི་ཡིག་ཁུག་མེད། folder sources དང outputs ད་ལྟ་སྒོ་བརྒྱབ་ཡོད།"
+hint = "absolute paths འཇུག དཔེར་ན /data/inbox."
+label = "ཆོག་མཆན་ཡོད་པའི folder roots"
+placeholder = "/data/inbox"
+remove = "folder root འདོར"
+
 [admin.settings.general]
 description = "ཚོང་རྟགས་བཟོ་སྟངས་དང་སྔོན་སྒྲིག་སྤྱོད་ཚུལ་ཚུད་པའི་མ་ལག་ཆ་ཚང་གི་བཀོལ་སྤྱོད་སྒྲིག་སྟངས་སྒྲིག་བཀོད་བྱེད།"
 system = "མ་ལག"
@@ -1628,6 +1806,9 @@ title = "ཁྱེད་རང་གིས་སི་ཊར་ལིང་PDF
 tags = "annotate,highlight,draw,markup,comment,notes,review,redline,feedback,markup tools,sticky notes,shapes,arrows,text box,freehand"
 
 [annotation]
+alignCenter = "དཀྱིལ་སྒྲིག"
+alignLeft = "གཡོན་སྒྲིག"
+alignRight = "གཡས་སྒྲིག"
 annotationStyle = "མཆན་བཟོ་སྒྲིག"
 backgroundColor = "རྒྱབ་ལྗོངས་ཁ་དོག།"
 borderOff = "ས་མཚམས། ཁ་བརྒྱབ་པ།"
@@ -1836,6 +2017,15 @@ export = "ཕྱི་ཚོང"
 accessDenied = "འཛུལ་སྤྱོད་ཁས་མ་བླངས་པ།"
 insufficientPermissions = "ཁྱེད་ལ་བྱ་སྤྱོད་འདི་སྒྲུབ་པའི་ཆོག་མཆན་མེད།"
 
+[auth.callback]
+completing = "ཐོབ་ཐང་ར་སྤྲོད་ལེགས་སྒྲུབ་བྱེད་བཞིན"
+invalidToken = "OAuth ནང་འཛུལ་ཕམ - token མི་འགྲིག"
+missingToken = "OAuth ནང་འཛུལ་ཕམ - token འབྱོར་མ་བྱུང་།"
+oauthFailed = "OAuth ནང་འཛུལ་ཕམ། ཡང་བསྐྱར་ཚོད་ལྟ་གནང་།"
+pleaseWait = "ཁྱེད་རང་ནང་འཛུལ་ལེགས་སྒྲུབ་བྱེད་རིང་སྒུག་རོགས།"
+signedOut = "ཁྱེད་ཕྱིར་འཐོན་བྱས་ཟིན། ཡང་བསྐྱར་ནང་འཛུལ་གནང་།"
+windowMayClose = "ལེགས་སྒྲུབ་བྱས་རྗེས་སྒེའུ་ཁུང་འདི་ཁ་རྒྱག་ཆོག"
+
 [auth.displayName]
 guest = "མགྲོན་པོ"
 user = "སྤྱོད་མཁན"
@@ -1981,6 +2171,73 @@ secureWorkflowDesc = "ཇ་ཝ་སི་ཁི་རིཔ་ཊི་དང
 description = "ལག་ཆ་འདིས་རང་འགུལ་གྱིས་PDFཡིག་ཆ་དེ་ཚོའི་ནང་དོན་ལ་གཞི་བཅོལ་ནས་མིང་བསྒྱུར་བྱེད། དེས་ཡིག་ཆ་དེ་དབྱེ་ཞིབ་བྱས་ནས་ཡིག་ཆ་ལས་འཚམ་ཤོས་ཀྱི་མིང་འཚོལ་ཐུབ།"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "རང་འགུལ་སྐོར"
+tags = "རང་འགུལ་སྐོར,ཁ་ཕྱོགས་བཅོས,མགོ་མཇུག་ལོག་པ,ཟུར་ཕྱོགས,དྲང་བཟོ,ཁ་ཕྱོགས,ཁ་ཕྱོགས་ངོས་འཛིན,སྐོར་བ་བཅོས,རང་འགུལ་ཁ་ཕྱོགས,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "ཡིད་ཆེས་ཚད་ཐིག"
+
+[autoRotate.detectionMode]
+auto = "རང་འགུལ"
+osd = "OCR ཁོ་ན"
+text = "ཡི་གེ་ཁོ་ན"
+title = "ངོས་འཛིན་ཐབས"
+
+[autoRotate.error]
+failed = "PDF རང་འགུལ་སྐོར་སྐབས་ནོར་འཁྲུལ་བྱུང་།"
+
+[autoRotate.inferUndetected]
+title = "ཡིད་ཆེས་དམའ་བའི་ཤོག་ངོས་མཐུན་པར་སྐོར"
+
+[autoRotate.report]
+applied = "{{degrees}}° གཡས་སྐོར"
+confidenceValue = "ཡིད་ཆེས {{value}}"
+noChange = "བསྒྱུར་བ་མེད"
+pageLabel = "ཤོག་ངོས {{number}}"
+summary = "ཤོག་ངོས {{total}} ལས {{rotated}} སྐོར་ཟིན། {{unchanged}} སྔར་བཞིན་བཞག"
+title = "ངོས་འཛིན་སྙན་ཐོ"
+
+[autoRotate.report.method]
+inferred = "མཐུན་སྒྲིག"
+none = "མཆོངས"
+osd = "OCR"
+text = "ཡི་གེ"
+
+[autoRotate.report.note]
+belowThreshold = "ཚད་ཐིག་ལས་དམའ"
+blankPage = "ཤོག་ངོས་སྟོང་པ་ཡིན"
+inferredFromDocument = "ཤོག་ངོས་གཞན་དང་འདྲ"
+noDominantDirection = "ཡི་གེའི་ཁ་ཕྱོགས་འདྲེས་མ"
+osdFailed = "ཀློག་ཐུབ་པའི་ཡི་གེ་མ་རྙེད"
+osdNoVerdict = "གང་ཕྱོགས་སྟེང་ཡིན་མིན་ཤེས་མ་ཐུབ"
+tesseractUnavailable = "OCR སྒྲིག་འཇུག་མ་བྱས"
+tooFewGlyphs = "ཡི་གེ་ཉུང་དྲགས"
+
+[autoRotate.results]
+title = "རང་འགུལ་སྐོར་འབྲས་བུ"
+
+[autoRotate.settings]
+title = "སྒྲིག་འགོད"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "ཤོག་ངོས་སྐོར་བའི་སྔོན་ལ་ཞིབ་བཤེར་གྱི་ངེས་ཤེས་ག་ཚོད་དགོས་མིན། ཤོག་ངོས་མང་ཙམ་སྐོར་དགོས་ན་དམའ་རུ་གཏོང་། ཤོག་ངོས་མང་ཙམ་མ་རེག་པར་བཞག་དགོས་ན་མཐོ་རུ་གཏོང་།"
+title = "ཡིད་ཆེས་ཚད་ཐིག"
+
+[autoRotate.tooltip.description]
+text = "ཤོག་ངོས་རེ་རེ་གང་ཕྱོགས་སྟེང་ཡིན་དགོས་མིན་རྩིས་བརྒྱབ་ནས་དྲང་པོར་སྐོར། སྔར་ནས་དྲང་པོ་ཡིན་པའི་ཤོག་ངོས་རྣམས་མ་རེག་པར་བཞག"
+
+[autoRotate.tooltip.detectionMode]
+text = "རང་འགུལ་གྱིས་ཐོག་མར་ཤོག་ངོས་ཀྱི་ཡི་གེ་ཀློག དེས་མ་འདང་ན་ཤོག་ངོས་དེ་དཔར་རིས་ལྟར་བལྟ། ཡི་གེ་ཁོ་ནས་དཔར་རིས་ཞིབ་བཤེར་མཆོངས་པས། ནམ་ཡང scanned མ་བྱས་པའི་ཡིག་ཆར་མགྱོགས་ཤོས་ཡིན། OCR ཁོ་ནས་ཤོག་ངོས་རེ་རེ་དཔར་རིས་ལྟར་འཛིན།"
+title = "ངོས་འཛིན་ཐབས"
+
+[autoRotate.tooltip.header]
+title = "རང་འགུལ་སྐོར"
+
+[autoRotate.tooltip.inferUndetected]
+text = "སྟོང་པའམ་སྟོང་པར་ཉེ་བའི་ཤོག་ངོས་རྣམས་རང་ཉིད་ཁོ་ནས་ཞིབ་བཤེར་བྱ་མི་ཐུབ། ཀློག་ཐུབ་པའི་ཤོག་ངོས་ཚང་མ་སྐོར་ཕྱོགས་གཅིག་དགོས་སྐབས། ཤོག་ངོས་འདི་དག་ཀྱང་དེ་དང་མཐུན་པར་སྐོར།"
+title = "ཡིད་ཆེས་དམའ་བའི་ཤོག་ངོས་མཐུན་པར་སྐོར"
+
 [autoSizeSplitPDF]
 tags = "pdf,split, ཡིག་ཆ། སྒྲིག་འཛུགས།"
 
@@ -2183,33 +2440,6 @@ keywords = "འབྲེལ་ཡོད་ཚིག: ཁྱད་མཚར་བ
 numbers = "ཨང་གྲངས།/ཁྱབ་ཁོངས།: ༥, ༡༠-༢༠"
 progressions = "ཡར་རྒྱས། 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "ལག་འཁྱེར་རིགས་གྲས"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "རིམ་སྤྱོད་སྐྱོང་བ་ཚོས་དོ་དམ"
-bullet2 = "དབང་ཚད་ཡོད་པའི་མི་ཚུལ་དང་མཉམ་སྤྱོད"
-bullet3 = "མི་སྒེར་མིན་པ། ཚོགས་སྡེའི་ངོ་སྤྲོད"
-bullet4 = "ལེགས་པ: གཞུང་མིང་ཡིག་ཆ། ཚོགས་མི་མཛུབ་འགན"
-description = "ཁྱེད་ཀྱི་ཚོགས་སྡེས་བྱིན་པའི་མཉམ་སྤྱོད་ལག་འཁྱེར། ཚོགས་སྡེ་ཡོངས་ཀྱི་མཛུབ་འགན་དབང་ཆེད་སྤྱོད།"
-title = "སྒྲིག་སྡེའི་ལག་འཁྱེར"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "ཐེངས་དང་པོ་སྤྱོད་སྐབས་རང་འགུལ་བཟོས"
-bullet2 = "ཁྱེད་ཀྱི་ཁ་བྱང་ལ་འབྲེལ"
-bullet3 = "མི་སྣ་གཞན་དང་མཉམ་སྤྱོད་མི་ཐུབ"
-bullet4 = "ལེགས་པ: མི་སྒེར་ཡིག་ཆ། སོ་སོའི་ཁྲིམས་འཁྲིལ"
-description = "ཁྱེད་ཀྱི་ཁ་བྱང་ལ་དམིགས་བཀོད་བྱས་པའི་རང་འགུལ་ལག་འཁྱེར། སོ་སོའི་མཛུབ་འགན་ལ་འཚམ།"
-title = "མི་དབང་ལག་འཁྱེར"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX ཡིག་ཆ་དང་གསང་ཨང་དགོས"
-bullet2 = "ཕྱིས་ཀྱི Certificate Authorities ཡིས་ཁྱབས་སྤྲོད་ཆོག"
-bullet3 = "ཁྲིམས་འཁྲིན་ཡིག་ཆའི་མཐོ་རིམ་བློ་གྲོས"
-bullet4 = "ལེགས་པ: ཁྲིམས་ལྡན་དམ་ཚིག ཕྱིས་ཀྱི་བདེན་བསྟན"
-description = "ཁྱེད་རང་གི PKCS#12 ལག་འཁྱེར་ཡིག་ཆ་སྤྱོད། ལག་འཁྱེར་གཏོགས་སྒྲིག་ལ་ཚད་བཟོ་ཆོག."
-title = "P12 སྲོལ་གསར་ཡར་འཇུག"
-
 [certSign]
 awaitingSignatures = "མཛུབ་འགན་བསྒུག་བཞིན"
 chooseCertificate = "ལག་འཁྱེར་ཡིག་ཆ་འདེམས།"
@@ -2531,38 +2761,11 @@ title = "མཐེ་བོང་གི་སྒྲིག་གཞི།"
 
 [certSign.source]
 device = "ཐབས་འཕྲུལ་འདི"
+noOtherSources = "ལག་ཁྱེར་འབྱུང་ཁུངས་གཞན་མེད།"
 server = "སར་བར"
 stepTitle = "དཔང་ཡིག་ཁུངས"
 upload = "ཡར་འཇུག"
 
-[certSign.tooltip.header]
-title = "མཚན་རྟགས་འཛིན་སྐྱོང་སྐོར།"
-
-[certSign.tooltip.overview]
-bullet1 = "ད་ཡོད་ཀྱི་མཚན་རྟགས་དང་དེའི་ནུས་ལྡན་ལ་ཞིབ་བཤེར་བྱེད་པ།"
-bullet2 = "མིང་རྟགས་བཀོད་མཁན་དང་ལག་འཁྱེར་སྐོར་གྱི་ཞིབ་ཕྲའི་གནས་ཚུལ་ལ་གཟིགས།"
-bullet3 = "ཁྱེད་རང་གི་ཡིག་ཆ་བདེ་འཇགས་ཆེད་དུ་དྲ་རྒྱའི་མིང་རྟགས་གསར་པ་ཁ་སྣོན་བྱས།"
-bullet4 = "འགྲིམ་འགྲུལ་སྟབས་བདེ་བའི་ཐོག་ནས་རྒྱབ་སྐྱོར་བྱེད་པའི་ཡིག་ཆ་སྣ་ཚོགས་ཡོད།"
-text = "ལག་ཆ་འདིས་ཁྱེད་ཀྱི་PDFs ལ་དྲ་རྒྱའི་ཐོག་ནས་མིང་རྟགས་བཀོད་ཡོད་མེད་བརྟག་དཔྱད་བྱེད་ཐུབ་པ་དང་དྲ་རྒྱའི་མིང་རྟགས་གསར་པ་ཁ་སྣོན་བྱེད་ཐུབ། དྲ་རྒྱའི་མིང་རྟགས་ཀྱིས་ཡིག་ཆ་ཞིག་བཟོས་པའམ་ཡང་ན་ཆོག་མཆན་སྤྲད་ནས་མིང་རྟགས་བཀོད་རྗེས་བསྒྱུར་ཡོད་མེད་སྟོན་ཡོད།"
-title = "ལག་ཆ་འདིས་ཅི་ཞིག་བྱེད་ཐུབ་བམ།"
-
-[certSign.tooltip.signing]
-bullet1 = "PEMདང་། PKCS12། JKS། སར་བར་གྱི་ལག་འཁྱེར་རྣམ་གཞག་ལ་རྒྱབ་སྐྱོར་བྱེད།"
-bullet2 = "PDF ཐོག་མིང་རྟགས་སྟོན་པའམ་ཡང་ན་སྦས་སྐུང་བྱེད་པའི་གདམ་ག།"
-bullet3 = "རྒྱུ་མཚན་དང་ས་གནས་དང་མིང་རྟགས་བཀོད་པའི་མིང་ཁ་སྣོན་བྱེད།"
-bullet4 = "མཐོང་ཐུབ་པའི་མཚན་རྟགས་བཀོད་དགོས་མིན་ཤོག་ལྷེ་གང་འདེམས་དགོས།"
-bullet5 = "'Sign with Stirling-PDF' གདམ་ཁ་སྟབས་བདེ་ལ་སར་བར་གྱི་ལག་འཁྱེར་བེད་སྤྱོད་བྱེད་དགོས།"
-text = "PDF ལ་མིང་རྟགས་བཀོད་པར་ཁྱེད་ལ་དྲ་རྒྱའི་ལག་ཁྱེར་དགོས། (དཔེར་ན། PEM, PKCS12, ཡང་ན་ JKS ལྟ་བུ) ཁྱེད་ཀྱིས་མིང་རྟགས་དེ་ཡིག་ཆའི་སྟེང་མཐོང་ཐུབ་པ་བྱ་ཆོག་པའམ་ཡང་ན་བདེ་འཇགས་ཆེད་དུ་མཐོང་མི་ཐུབ་པའི་གནས་སུ་འཇོག་ཐུབ།"
-title = "མཚན་རྟགས་ཁ་སྣོན་བྱེད་པ།"
-
-[certSign.tooltip.validation]
-bullet1 = "མཚན་རྟགས་ནུས་པའམ་ནུས་མེད་ཡིན་ན་མངོན་ཚུལ་ནི།"
-bullet2 = "མིང་རྟགས་བཀོད་མཁན་གྱི་ཆ་འཕྲིན་དང་མིང་རྟགས་བཀོད་པའི་ཚེས་གྲངས།"
-bullet3 = "ཡིག་ཆ་དེ་མིང་རྟགས་བཀོད་རྗེས་བསྒྱུར་བཅོས་བྱས་ཡོད་མེད་ཞིབ་བཤེར།"
-bullet4 = "བདེན་དཔང་ཆེད་རང་སྒྲིག་ལག་འཁྱེར་བེད་སྤྱོད་གཏོང་ཐུབ།"
-text = "ཁྱེད་ཀྱིས་མིང་རྟགས་བརྟག་དཔྱད་བྱེད་སྐབས་ལག་ཆ་དེས་ཁྱེད་ལ་དེ་དག་ནུས་ལྡན་ཡིན་མིན་དང་། ཡིག་ཆ་དེ་ལ་མིང་རྟགས་བཀོད་པ། མིང་རྟགས་བཀོད་པ།"
-title = "མཚན་རྟགས་ལ་ཞིབ་བཤེར་བྱེད་པ།"
-
 [changeCreds]
 changeUsername = "ཁྱེད་རང་གི་སྤྱོད་མཁན་གྱི་མིང་གསར་བརྗེ། ཁྱེད་རང་གསར་བརྗེ་བྱས་རྗེས་ཕྱིར་ཐོན་འགྲོ་གི་རེད།"
 credsUpdated = "རྩིས་ཁྲ་གསར་བརྗེ་བྱས།"
@@ -2805,6 +3008,7 @@ back = "རྒྱབ་ངོས"
 cancel = "འདོར་བ"
 close = "གཏན་པ"
 collapse = "རྡིབ་པ"
+confirm = "གཏན་འཁེལ"
 continue = "མུ་མཐུད"
 copied = "འདྲ་བཤུས་བྱས།"
 copy = "འདྲ་བཤུས།"
@@ -2816,6 +3020,7 @@ next = "རྗེས་མ"
 preview = "སྔོན་ལྟ།"
 previous = "སྔོན་ཆད་ཀྱི"
 refresh = "གསར་སྐྲུན་བྱེད་པ།"
+remaining = "ལྷག་མ"
 retry = "ངལ་གསོ་ཡང་བསྐྱར་བྱེད་པ།"
 save = "སྐྱོབ་པ"
 
@@ -3256,24 +3461,6 @@ description = "ཀུ་ཀི་འདི་དག་དྲ་ཚིགས་
 posthog = "རྗེས་ཀྱི་ཧོག་དབྱེ་ཞིབ།"
 scarf = "སི་ཀར་ཕི་པིག་སེལ།"
 
-[credits.modal]
-advancedMonitoring = "མཐོ་རིམ་ལྟ་སྲུང་"
-allInOneWorkspace = "ཡོངས་ཀྱིས་སྒྲུབ་པའི PDF ལས་གནས (viewer, ལག་ཆ & agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "དམིགས་བསལ་རོགས་རམ་ & SLAs"
-fasterThroughput = "མགྱོགས་ཚད 10x མགྱོགས་པ"
-fullyPrivateFiles = "གང་གིས་ཀྱང་སྒེར་དབང་ཡིག་ཆ"
-largeFileProcessing = "ཡིག་ཆ་ཆེན་པོ་ལས་སྦྱོར"
-orgWideAccess = "སྤྱི་ཚོགས་ཡོངས་ཁྱབ་དོན་སྤྱོད་ཚད"
-premiumAiModels = "མཐོ་རིམ AI དཔེ་མཚོན"
-prioritySupport = "གཙོ་རིམ་རོགས་རམ"
-privateDocCloud = "སྒེར་དབང་ཡིག་ཆ Cloud"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "བདེ་འཇགས API དོན་སྤྱོད"
-standardThroughput = "ཚད་ལྡན་མགྱོགས་ཚད"
-unlimitedApiAccess = "API དོན་སྤྱོད་ཚད་མེད"
-unlimitedSeats = "ཚོགས་མི་ཚད་མེད"
-
 [crop]
 autoCrop = "རང་འགུལ་གྱིས་ས་ཞིང་དཀར་པོའི་བར་སྟོང་།"
 noFileSelected = "འདེབས་འཛུགས་བྱེད་འགོ་ཚུགས་པར་PDFཡིག་ཆ་འདེམས།"
@@ -3338,6 +3525,7 @@ message = "སྔོན་སྒྲིག་PDFའཛིན་སྐྱོང་
 title = "ནོར་འཁྲུལ"
 
 [defaultApp.prompt]
+dontRemind = "ཡང་བསྐྱར་དྲན་སྐུལ་མ་བྱེད"
 message = "ཁྱེད་རང་གི་སྔོན་སྒྲིག་མཉེན་ཆས་PDFཡིག་ཆ་ཁ་ཕྱེ་བའི་ཆེད་དུ་PDF stirling PDF བཟོས།"
 
 [defaultApp.settingsOpened]
@@ -3595,7 +3783,9 @@ makeCopy = "པར་འདེབས་བྱེད"
 mobileShort = "ཁ་པར"
 mobileUpload = "ཁ་པར་ཡར་འཇུག"
 mobileUploadNotAvailable = "ཁ་པར་ཡར་འཇུག་མ་འགོ་སློངས།"
+moreOptions = "འདེམས་ཚན་དེ་བས་མང་བ"
 myFiles = "ངའི་ཡིག་ཆ།"
+nextFile = "ཡིག་ཆ་རྗེས་མ"
 noFiles = "ཡིག་ཆ་མེད།"
 noFilesFound = "ཁྱེད་རང་གི་འཚོལ་ཞིབ་ལ་མཐུན་པའི་ཡིག་ཆ་གང་ཡང་མཐོང་མ་བྱུང་།"
 noRecentFiles = "ཉེ་ཆར་ཡིག་ཆ་གང་ཡང་མཐོང་མ་བྱུང་།"
@@ -3605,6 +3795,7 @@ openInFileEditor = "ཡིག་ཆའི་རྩོམ་སྒྲིག་པ
 openInPageEditor = "ཤོག་ངོས་རྩོམ་སྒྲིག་པར་ཁ་ཕྱེ།"
 owner = "བདག་པོ"
 ownerUnknown = "མ་ཤེས"
+previousFile = "ཡིག་ཆ་སྔོན་མ"
 recent = "ཉེ་ཆར"
 removeBoth = "གཉིས་ཀ་ནས་བསུབ"
 removeFilePrompt = "ཡིག་ཆ་འདི་ཐབས་འཕྲུལ་འདི་དང་ཁྱེད་ཀྱི་སར་བར་གཉིས་ཀ་ལ་ཉར་ཡོད། གནས་ས་གང་ནས་བསུབ་དགོས?"
@@ -3680,21 +3871,26 @@ workbench = "ལས་ལག་གནས"
 
 [fileSidebar]
 addFiles = "ཡིག་ཆ་ཁ་སྣོན"
+addingFiles = "ཡིག་ཆ་སྣོན་བཞིན་པ…"
 collapse = "ཟུར་པང་བསྡམས"
+customizeGroups = "ཚོགས་པ་རང་སྒྲིག"
 dropHint = "འགོ་རྩོམ་བྱེད་པར་ཡིག་ཆ་ཁ་ཕྱེ"
 dropToAdd = "Drop files to add"
 expand = "ཟུར་པང་རྒྱས"
-files = "ཡིག་ཆ"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive སྒྲིག་འགོད་མ་བྱས"
 leaveMyFiles = "ངའི་ཡིག་ཆ་ནས་ཕྱིར་འདོན"
+library = "PDF དཔེ་མཛོད"
 myFiles = "ངའི་ཡིག་ཆ"
 noFiles = "ད་ཚུན་ཡིག་ཆ་མེད"
 openFileManager = "ཡིག་ཆ་དོ་དམ་ཁ་ཕྱེ"
 openFromComputer = "གློག་ཀླད་ནས་ཁ་ཕྱེ"
 openSettings = "སྒྲིག་སྟངས་ཁ་ཕྱེ"
+other = "གཞན"
+recent = "ཉེ་ཆར"
 search = "འཚོལ"
 searchPlaceholder = "ཡིག་ཆ་འཚོལ..."
+viewAll = "{{count}} ཡིག་ཆ་ཚང་མ་ལྟ"
 
 [fileSidebar.fileItem]
 closeViewer = "མཐོང་ཆས་ཁ་རྒྱག"
@@ -3706,6 +3902,12 @@ updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
+[fileSidebar.groupsModal]
+done = "ཚར"
+reset = "ཚང་མ་སྟོན"
+subtitle = "ཡིག་ཆའི་ཟུར་སྟོན་ནང་གི་རིགས་དབྱེ་སྟོན་པའམ་སྦས་པ།"
+title = "ཟུར་སྟོན་རིགས་དབྱེ"
+
 [filesPage]
 addToWorkspace = "ལས་གནས་ལ་ཁ་སྣོན"
 addToWorkspaceCount = "{{count}} ལས་གནས་ལ་ཁ་སྣོན"
@@ -3715,6 +3917,7 @@ backToFolder = "{{folder}} ལ་ཕྱིར་ལོག"
 backToMyFiles = "ངའི་ཡིག་ཆར་ཕྱིར་ལོག"
 breadcrumbs = "སྣོད་ཁུངས་ལམ"
 cancel = "འདོར"
+classification = "རིགས་དབྱེ"
 clearSearch = "འཚོལ་བཤོལ"
 clearSelection = "འདེམས་བཤོལ"
 closeDetails = "ཞིབ་ཕྲ་ཁ་རྒྱག"
@@ -3774,6 +3977,7 @@ refresh = "སར་བར་ནས་གསར་སྒྱུར"
 remove = "སུབ"
 removeVersion = "པར་གཞི་སུབ"
 rename = "མིང་བསྐྱར་བཏགས"
+renamed = "མིང་བསྐྱར་བཏགས"
 renameFolder = "སྣོད་འགེངས་མིང་བསྐྱར་བཏགས"
 resizeFolderTree = "སྣོད་འགེངས་རྩ་འབྲེལ་ཆེ་ཆུང་བཟོ (arrow keys, Shift ཕལ་ཆེར་གོམ་པ; ཐེབས་ཚར་གཉིས་གནོན་ནས་རང་འགུལ་སྒྲིག)"
 save = "སྲུངས"
@@ -3874,11 +4078,9 @@ uploadFilesFailedDetail = "ཡིག་ཆ་ཡར་འཇུག་མ་ཐ
 added = "ཁ་སྣོན"
 count = "ཡིག་ཆ"
 folder = "སྣོད་འགེངས"
+labels = "ཤོ་བྱང"
 modified = "བཟོ་བཅོས"
-name = "མིང"
 size = "ཆེ་ཆུང"
-toolHistory = "ལག་ཆས་ལོ་རྒྱུས"
-toolHistoryAtVersion = "ལག་ཆས་བརྒྱུད་ལས་བསྡུས"
 totalSize = "སྤྱི་ཆེ་ཆུང"
 type = "རིགས"
 versionHistory = "པར་གཞིའི་འགྲོ་ལམ"
@@ -4038,10 +4240,17 @@ discord = "མི་མཐུན་པ།"
 issues = "གྷི་ཊི་ཧབ།"
 
 [formFill]
+allSaved = "ཚང་མ་ཉར་ཚགས་བྱས་ཟིན"
+extractCsvError = "CSV ཕྱིར་འདོན་མ་ཐུབ"
+extractXlsxError = "XLSX ཕྱིར་འདོན་མ་ཐུབ"
 flattenAfterFilling = "བཀངས་རྗེས་རྡོག་བཟོ"
+requiredAbbreviation = "དགོས"
+requiredFieldsError = "ངེས་པར་དགོས་པའི་ས་སྒོ་ཚང་མ་སྐོང་རོགས"
 rescanFields = "ས་ཁོངས་བསྐྱར་ཞིབ"
 rescanFormFields = "ཐོ་འགོད་ས་ཁོངས་བསྐྱར་ཞིབ"
 save = "སྲུངས"
+saveShortcut = "Ctrl+S སྤྱད་ནས་ཉར་ཚགས"
+unsavedChanges = "ཉར་ཚགས་མ་བྱས་པའི་འགྱུར་བ"
 
 [formFill.sidebar]
 close = "ཟུར་ཚན་ཁ་རྒྱག"
@@ -4275,6 +4484,11 @@ desc = "རང་འགུལ་གྱིས་མགོ་ཡིག་ཤེས
 tags = "རང་འགུལ་ཤེས་རྟོགས། མགོ་བརྗོད་ལ་གཞི་བཅོལ་བ། གོ་སྒྲིག་བྱས་པ། རེ་ལེ་བེལ།"
 title = "རང་འགུལ་གྱིས་མིང་བསྒྱུར་བའི་PDFཡིག་ཆ།"
 
+[home.autoRotate]
+desc = "ཤོག་ངོས་རེ་རེའི་ཁ་ཕྱོགས་ངོས་འཛིན་བྱས་ནས་རང་འགུལ་གྱིས་དྲང་པོར་བསྐོར།"
+tags = "རང་འགུལ་བསྐོར་བ,ཁ་ཕྱོགས་བཅོས,མགོ་མཇུག་ལོག་པ,ཟུར་ཕྱོགས,དྲང་བཟོ,ཁ་ཕྱོགས,ཁ་ཕྱོགས་ངོས་འཛིན,བསྐོར་བ་བཅོས,རང་འགུལ་ཁ་ཕྱོགས,སྐེན་བྱས་པ,OSD"
+title = "རང་འགུལ་བསྐོར་བ"
+
 [home.autoSizeSplitPDF]
 tags = "རང་འགུལ་གྱིས་ཁ་ཕྲལ་དང་ཆེ་ཆུང་།"
 title = "ཆེ་ཆུང་/གྲངས་ཚད་ཀྱིས་རང་འགུལ་ཆ་བགོས་བྱས།"
@@ -4574,13 +4788,13 @@ hint = "PDF སྟེང་དུ་བཞག་ནིའི་ PNG, JPG, SVG 
 label = "བརྙན་པ་ཡར་འཇུག"
 placeholder = "བརྙན་པའི་ཡིག་ཆ་འདེམས"
 
-[imageToPdf]
-tags = "སྒྱུར་བཅོས། ཨམ་གྷི་,jpg, པར་རིས། པར་རིས།"
-
 [imageToPDF]
 header = "PDF ནས་པར་རིས།"
 title = "PDF ནས་པར་རིས།"
 
+[imageToPdf]
+tags = "སྒྱུར་བཅོས། ཨམ་གྷི་,jpg, པར་རིས། པར་རིས།"
+
 [infoBanner]
 dismiss = "འདོར"
 
@@ -4613,8 +4827,6 @@ welcomeTitle = "ཁྱེད་རང་གདན་འདྲེན་ཞུས
 
 [landing]
 addFiles = "ཡིག་ཆ་ཁ་སྣོན་བྱེད།"
-heroSubtitle = "འགོ་སློང་བྱེད་དུ PDF ཞིག་འདྲུད་ནས་བཙུགས་ ཡང་ན་ ཡོད་པའི་ PDF ཞུགས་སྣོན་བྱས།"
-heroTitle = "Stirling PDF"
 mobileUpload = "ཁ་པར་ནས་ཡར་འཇུག"
 openFromComputer = "གློག་ཀླད་ནས་ཁ་ཕྱེ་བ།"
 uploadFromComputer = "གློག་ཀླད་ནས་ཡར་བླངས།"
@@ -4662,6 +4874,7 @@ login = "ནང་འཇུག"
 magicLinkSent = "མེ་ཇིག་དྲ་སྦྲེལ་དེ་{{email}} ལ་བཏང་ཡོད། གློག་འཕྲིན་ལ་ལྟས་ཏེ་སྦྲེལ་མཐུད་སྣུན་ནས་ནང་འཇུག་གནང་རོགས།"
 mfaCode = "ངོས་འཛིན་ཨང་རྟགས"
 mfaRequired = "ཆ་རྐྱེན་གཉིས་ཨང་རྟགས་དགོས"
+noAccount = "རྩིས་ཐོ་མེད་དམ?"
 or = "ཡང་ན"
 password = "གསང་གྲངས"
 passwordChangedSuccess = "གསང་གྲངས་ལེགས་འགྲུབ་བྱུང་བ། ཁྱེད་རང་གི་གསང་གྲངས་གསར་པས་ནང་འཇུག་གནང་རོགས།"
@@ -4681,26 +4894,10 @@ signInWith = "ནང་དུ་ཞུགས་པ།"
 title = "མཚན་རྟགས་བཀོད་པ།"
 unexpectedError = "རྗེས་འགྲོ་མ་ངེས་པའི་ནོར་འཁྲུལ: {{message}}"
 updatePassword = "གསང་ཨང་གསར་སྒྱུར"
-useEmailInstead = "གློག་འཕྲིན་བརྒྱུད་ནས་ནང་འཛུལ་བྱེད་པ།"
 useMagicLink = "དེའི་ཚབ་ཏུ་མུན་ནག་གི་སྦྲེལ་མཐུད་བེད་སྤྱོད་བྱེད།"
 username = "མིང་།"
 youAreLoggedIn = "ཁྱེད་རང་ནང་འཛུལ་འདུག"
 
-[login.slides.edit]
-alt = "PDF རྩོམ་སྒྲིག་བྱས།"
-subtitle = "ཁྱེད་རང་ལ་PDFs བསྐྱར་བཟོ་དང་། རྟགས་མཚན། ཀློག་པ། བཀོལ་སྤྱོད་བྱེད་པར་རོགས་བྱེད་པའི་ལག་ཆ་བཅུ་ཕྲག་ལྷག་ཙམ་ཡོད་ན།"
-title = "ཁྱེད་ལ་དགོས་པའི་ཆ་འཕྲིན་དེ་བསྟན་/བརྟན་པོར་ཡོང་བར་PDFsརྩོམ་སྒྲིག་བྱེད།"
-
-[login.slides.overview]
-alt = "PDF སྤྱི་བསྡོམས།"
-subtitle = "ཡིག་ཆ་སྒྱུར་བ་དང་། རྟགས་བཀོད། གསར་བརྗེ། དོ་དམ་བཅས་བྱེད་པའི་PDFཡི་སྒེར་གྱི་གནས་ཚུལ་གྱི་སྤྲིན་པའི་ཁང་མིག་གཅིག་དང་། དེ་བཞིན་ལག་ཆ་གཞན་༥༠ལྷག་ཡོད།"
-title = "ཁྱེད་རང་གི་PDFདགོས་མཁོ་ཚང་མར་ཁྱེད་རང་གི་ཚོང་ཁང་གཅིག་གིས་ཉོ་ཆ་རྒྱག་དགོས།"
-
-[login.slides.secure]
-alt = "བདེ་འཇགས་ཀྱི་PDFs"
-subtitle = "གསང་གྲངས་ཁ་སྣོན་དང་། ནང་དོན་གསར་བརྗེ། ལག་འཁྱེར་ལ་སྟབས་བདེ་པོའི་ངང་འཛིན་སྐྱོང་བྱེད།"
-title = "ཁྱེད་རང་གི་PDFནང་དུ་ཚོར་ཤུགས་ཆེ་བའི་ཆ་འཕྲིན་སྲུང་སྐྱོབ་བྱེད་དགོས།"
-
 [margin]
 large = "ཤིན་ཏུ་ཆེན་པོ"
 medium = "འབྲིང"
@@ -4930,6 +5127,7 @@ title = "ཐོན་འབྲས།"
 [onboarding]
 activeFiles = "<strong>Active Files</strong> མཐོང་སྣང་གིས་ཁྱེད་ཀྱིས་ལག་ཆའི་ནང་དུ་བླུགས་པའི་PDF ཚང་མ་སྟོན་པ་དང་།"
 allTools = "འདི་ནི་<strong>ལག་ཆ</strong> གྱི་སྒྲོམ་གཞི་ཡིན། དེར་ཁྱེད་ཀྱིས་ཡོད་པའི་PDFལག་ཆ་ཚང་མ་ནས་བལྟ་ཐུབ་པ་དང་འདེམས་ཐུབ།"
+close = "ཁ་རྒྱག"
 cropSettings = "ད་ལྟ་ང་ཚོས་ང་ཚོར་སྟོན་ཐོག་དགོས་པའི་ཡིག་ཆ་དེ་འདེམས་སྒྲུག་བྱས་པས་ང་ཚོས་PDFདེ་བསྡུ་རུབ་བྱེད་འདོད་པའི་ས་ཁུལ་དེ་འདེམས་རྒྱུའི་ཆེད་དུ་Cropལག་ཆ་སྒྲིག་བཀོད་བྱེད་ཐུབ།"
 fileCheckbox = "ཡིག་ཆ་གཅིག་ལ་སྣུན་ན་ལས་སྣོན་ཆེད་དུ་དེ་འདེམས་སྒྲུག་བྱེད། ཁྱེད་ཀྱིས་སྡེ་ཚན་བཀོལ་སྤྱོད་ཀྱི་ཆེད་དུ་ཡིག་ཆ་སྣ་ཚོགས་འདེམས་ཐུབ།"
 fileReplacement = "བསྒྱུར་བཅོས་བྱས་པའི་ཡིག་ཆ་དེས་ལས་ཀའི་སྟེགས་བུའི་ནང་དུ་ཡིག་ཆ་ངོ་མ་དེ་རང་འགུལ་གྱིས་ཚབ་བྱེད་པ་དང་།"
@@ -4941,6 +5139,7 @@ pinButton = "གལ་ཏེ་ཁྱེད་རང་གིས་ཁྱེད
 results = "ལག་ཆ་དེ་བཀོལ་སྤྱོད་བྱེད་ཚར་བའི་རྗེས་སུ་<strong>Review</strong> རིམ་པ་དེས་པར་རིས་འདིའི་ནང་གྲུབ་འབྲས་ཀྱི་སྔོན་ལྟ་སྟོན་ནས་བཀོལ་སྤྱོད་དེ་ཕྱིར་འཐེན་བྱེད་པའམ་ཡང་ན་ཡིག་ཆ་ཕབ་ལེན་བྱེད་ཐུབ།"
 runButton = "ལག་ཆ་དེ་སྒྲིག་བཀོད་བྱས་ཚར་རྗེས། མཐེབ་འདིས་འདེམས་པའི་PDFཚང་མའི་སྟེང་ལ་ལག་ཆ་དེ་བཀོལ་སྤྱོད་བྱེད་ཐུབ།"
 selectCropTool = "ལག་ཆ་གཅིག་བེད་སྤྱོད་གཏོང་སྟངས་སྟོན་པའི་ཆེད་དུ་<strong>Copp</strong> ལག་ཆ་འདེམས་དགོས།"
+stepOf = "{{total}} ལས་གོམ་པ་ {{current}}"
 toolInterface = "འདི་ནི་<strong>Crop</strong>ལག་ཆའི་ངོས་འདྲ་བ་ཡིན། ཁྱེད་ཀྱིས་མཐོང་བ་ལྟར། དེར་མང་པོ་མེད། རྒྱུ་མཚན་ནི་ང་ཚོས་ད་དུང་PDFཡིག་ཆ་གང་ཡང་ཁ་སྣོན་བྱས་མེད།"
 workbench = "འདི་ནི་<strong>Workbench</strong> ཞེས་པའི་ས་ཁུལ་གཙོ་བོ་ཡིན།"
 wrapUp = "ཁྱེད་ཚོ་ཚང་མ་སྒྲིག་ཟིན་འདུག ཁྱེད་ཀྱིས་མཉེན་ཆས་དེའི་ཁྱབ་ཁོངས་གཙོ་བོ་དང་དེ་དག་བེད་སྤྱོད་བྱེད་སྟངས་ཤེས་ཡོད། ཁྱེད་རང་ལྟ་སྐོར་འདི་ཡང་བསྐྱར་མཐོང་འདོད་ཡོད་པའི་སྐབས་ལ་<strong>རོགས་རམ་</strong> མཐེབ་གཞོང་ལ་སྣུན་རོགས།"
@@ -4953,14 +5152,49 @@ showMeAround = "ང་ལ་སྟོན་དང་།"
 skipForNow = "ད་ལྟ་མཆོང་།"
 skipTheTour = "སྐོར་སྐྱོད་ལ་བསྐྱོད་པ།"
 
+[onboarding.checklist]
+dismiss = "སེལ"
+title = "Stirling PDF སྒྲིག"
+
+[onboarding.checklist.downloadDesktop]
+description = "Stirling ཁྱེད་ཀྱི་འཕྲུལ་ཆས་ཐོག་ཐད་ཀར་སྤེལ"
+title = "Desktop ལ་སྤྱོད་པའི Stirling ཕབ་ལེན"
+
+[onboarding.checklist.inviteTeam]
+description = "ཁྱེད་ཀྱི་ཚོགས་ཆུང་དང་མཉམ་ལས་བྱེད"
+title = "ཚོགས་ཆུང་ཁོངས་མི་གདན་འདྲེན"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling ལེགས་བཅོས་ལ་རོགས་བྱེད"
+title = "མིང་མེད་སྤྱོད་སྟངས་གཞི་གྲངས་མཉམ་སྤྱོད"
+
+[onboarding.checklist.takeTour]
+description = "མགྱོགས་པོའི་སྟོན་སྐོར་ནང Stirling ཇི་ལྟར་ལས་ཀ་བྱེད་པ་ལྟ"
+title = "སྟོན་སྐོར་ལ་ཞུགས"
+
 [onboarding.desktopInstall]
 body = "སི་ཊར་ལིང་གིས་ཀམ་པུ་ཊར་གྱི་མཉེན་ཆས་ལྟར་ལས་ཀ་ཡག་ཤོས་བྱེད་ཀྱི་ཡོད། ཁྱེད་ཀྱིས་དེ་དྲ་རྒྱ་ལས་ཕྱིར་སྤྱོད་ཐུབ་པ་དང་། ཡིག་ཆ་མགྱོགས་པོ་འཛུལ་ཐུབ་པ། དེ་བཞིན་ཁྱེད་རང་གི་གློག་ཀླད་ཐོག་ས་གནས་སུ་རྩོམ་སྒྲིག་བྱེད་ཐུབ།"
+selectOs = "བཀོལ་སྤྱོད་མ་ལག་འདེམས"
 title = "ཕབ་ལེན"
 titleWithOs = "{{osLabel}} ལ་ཕབ་ལེན།"
 
 [onboarding.mfa]
 authenticationCode = "ར་སྤྲོད་ཨང་རྟགས"
+description = "བདེན་སྦྱོར་ཉེར་སྤྱོད་ཅིག་སྦྲེལ་ནས་ཁྱེད་ཀྱི་རྩིས་ཐོ་སྲུང་སྐྱོབ་བྱེད། QR code སྐེན་བྱེད་པའམ་སྒྲིག་སྟངས་ལྡེ་མིག་ནང་འཇུག་བྱས་ནས། མཇུག་སྒྲིལ་ཆེད་ཨང་གྲངས་ 6 ཅན་གྱི་ཨང་རྟགས་གཏན་འཁེལ་བྱེད།"
+enable = "MFA སྤྱོད་འགོ་འཛུགས"
+enableError = "རྐྱེན་གཉིས་བདེན་སྦྱོར་སྤྱོད་འགོ་འཛུགས་མ་ཐུབ། ཨང་རྟགས་བརྟག་ནས་ཡང་བསྐྱར་ཚོད་ལྟ་བྱེད།"
+enterCode = "ཁྱེད་ཀྱི་ཉེར་སྤྱོད་ནས་ཨང་གྲངས་ 6 ཅན་གྱི་ཨང་རྟགས་ནང་འཇུག་བྱེད།"
+enterCodeError = "མུ་མཐུད་ཆེད་བདེན་སྦྱོར་ཨང་རྟགས་ནང་འཇུག་བྱེད།"
+logout = "ཕྱིར་འཐོན"
+openAuthenticator = "Google Authenticator, Authy, ཡང་ན 1Password ཁ་ཕྱེ།"
 qrCodeLoading = "ཁྱེད་ཀྱི QR ཨང་རྟགས་བསྐྲུན་བཞིན་པ…"
+regenerateQrCode = "QR code བསྐྱར་སྐྱེད"
+scanQrCode = "QR code སྐེན་བྱེད་པའམ་གཤམ་གྱི་སྒྲིག་སྟངས་ལྡེ་མིག་ནང་འཇུག་བྱེད།"
+setupError = "རྐྱེན་གཉིས་སྒྲིག་སྟངས་འགོ་འཛུགས་མ་ཐུབ། ཡང་བསྐྱར་ཚོད་ལྟ་བྱེད་རོགས།"
+setupKey = "སྒྲིག་སྟངས་ལྡེ་མིག (ལག་པས་ནང་འཇུག)"
+stepByStep = "གོམ་པ་རེ་རེ"
+success = "MFA སྤྱོད་འགོ་བཙུགས་ཟིན། ད་ཁྱེད་མུ་མཐུད་ཐུབ།"
+title = "Multi-Factor Authentication སྒྲིག་སྟངས"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "ནང་འཇུག་ཐབས་ལམ་ལྕོགས་ཅན་བཟོ་རྗེས་སྤྱོད་མཁན་དོ་དམ་, སྒྲིག་བཀོད་དང་སར་བར་གྱི་བདེ་འཇགས་གནས་བབ་ལ་ལྟ་ཞིབ་བྱེད་ཐུབ། ཁྱེད་ཀྱི་སར་བར་ནང་གི་མི་དང་པོ <strong>{{freeTierLimit}}</strong> ལ་སི་ཊར་ལིང་དེ་རིན་མེད་དུ་བཀོལ་ཆོག"
@@ -4969,6 +5203,11 @@ adminTitle = "འཛིན་སྐྱོང་སྤྱི་བསྡོམས
 userBody = "རུ་མི་གདན་འདྲེན་ཞུ་བ་དང་། ལས་འགན་སྤྲོད་པ། ཁྱེད་ཀྱི་ཡིག་ཆ་བདེ་འཇགས་ལྡན་པའི་ལས་ཀའི་ས་ཆ་གཅིག་ཏུ་སྒྲིག་འཛུགས་བྱེད་དགོས། ཁྱེད་རང་གཅིག་པོ་བེད་སྤྱོད་ལས་བརྒལ་བར་འཕེལ་རྒྱས་འགྲོ་རྒྱུར་གྲ་སྒྲིག་ཡོད་པའི་སྐབས་ལ་ནང་འཇུག་ཐབས་ལམ་ལ་ནུས་ཤུགས་སྤྲོད་དགོས།"
 userTitle = "འཆར་གཞིའི་སྤྱི་བསྡོམས།"
 
+[onboarding.processorIntro]
+body = "Stirling ད་ལྟ <strong>སྲིད་ཇུས</strong> སྤེལ་བཞིན་ཡོད — ཡིག་ཆ་རེ་རེ་འབྱོར་སྐབས་དེ་དག་རིགས་དབྱེ། བདེ་འཇགས་སྲུང་སྐྱོབ། དང་ལས་སྣོན་བྱེད་པའི་རང་འགུལ་སྒྲིག་སྲོལ་ཡིན། དེ་དག་སྒྲིག་ནས <strong>ལས་སྣོན་ཆས</strong> ནང་སྤེལ་བ་ལྟ་ཞིབ་བྱེད།"
+cta = "ལས་སྣོན་ཆས་ལ་ལྟ"
+title = "Stirling Processor ལ་ལྟ"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5365,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "སྔོན་སྤྲོད་ལོ"
+
+[payg.prepaid.banner]
+exhausted = "ཁྱེད་ཀྱི་སྔོན་སྤྲོད་ནུས་ཚད་སྤྱད་ཚར་འདུག ཚད་འཇལ་རྩིས་འབུལ་བསྐྱར་སྤེལ་བྱས་ཟིན། ཆག་ཡང་མུ་མཐུད་ཉར་ཆེད་ཁ་སྣོན་བྱེད།"
+expiring_one = "ཁྱེད་ཀྱི་སྔོན་སྤྲོད་ལོ་ཉིན་ {{count}} ནང་ཚར་རྒྱུ་རེད། མ་སྤྱད་པའི་ནུས་ཚད་དུས་ཡོལ་འགྲོ་རྒྱུ་རེད — ལོ་གསར་པ་འགོ་འཛུགས་ཆེད་ཁ་སྣོན་བྱེད།"
+expiring_other = "ཁྱེད་ཀྱི་སྔོན་སྤྲོད་ལོ་ཉིན་ {{count}} ནང་ཚར་རྒྱུ་རེད། མ་སྤྱད་པའི་ནུས་ཚད་དུས་ཡོལ་འགྲོ་རྒྱུ་རེད — ལོ་གསར་པ་འགོ་འཛུགས་ཆེད་ཁ་སྣོན་བྱེད།"
+low = "ཁྱེད་ཀྱི་སྔོན་སྤྲོད་ནུས་ཚད་ {{pct}}% ཙམ་ལས་མི་འདུག ལས་སྣོན་མ་ཆད་པར་མུ་མཐུད་ཆེད་དུས་ནམ་ཡང་ཁ་སྣོན་བྱེད།"
+
+[payg.prepaid.card]
+subtitle = "ཚད་འཇལ་རྩིས་འབུལ་གྱི་སྔོན་དང་། ཁྱེད་ཀྱི་འགྲོ་གྲོན་ཚད་ཀྱི་ཕྱི་རོལ་དུ་སྤྱོད།"
+title = "སྔོན་སྤྲོད་ནུས་ཚད"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} སྔོན་སྤྲོད་སྤྱོད་ཐོབ་ལས"
+expires = "{{date}} ལ་དུས་ཡོལ"
+
+[payg.prepaid.state]
+exhausted = "སྤྱད་ཚར"
+healthy = "མང་པོ་ལྷག"
+low = "ཉུང་དུ་འགྲོ་བཞིན"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5566,7 +5827,9 @@ viewLabel = "PDF རྩོམ་སྒྲིག་པ།"
 
 [pdfTextEditor.actions]
 applyChanges = "འགྱུར་བ་འཇུག་པ།"
+clearText = "ཡི་གེ་གཙང་སེལ"
 downloadCopy = "འདྲ་བཤུས་ཕབ་ལེན།"
+moreOptions = "འདེམས་ཚན་དེ་བས་མང་བ"
 reset = "བསྐྱར་སྒྲིག་བསྐྱར་སྒྲིག་བྱེད་པ།"
 
 [pdfTextEditor.badges]
@@ -5899,49 +6162,12 @@ keyDescription = "ཁྱེད་རང་གི་གློག་འཕྲི
 success = "ལག་འཁྱེར་སྒུལ་ཤུགས་ལྡན་པ།"
 successMessage = "ཁྱེད་ཀྱི་ཆོག་མཆན་དེ་ལེགས་འགྲུབ་བྱུང་ཡོད། ཁྱོད་ཀྱིས་ད་ལྟ་སྒེའུ་ཁུང་འདི་ཁ་རྒྱག་ཐུབ།"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "བཀོལ་སྤྱོད་ཚར།"
-enforcing = "བཀོལ་སྤྱོད་བཞིན..."
-failed = "བཀོལ་སྤྱོད་ཕམ་པ།"
 outputsUnavailable = "སྲིད་བྱང་མཇུག་འབྲས་དེ་རྣམས་ད་དུང་ཕབ་ལེན་མི་ཐུབ།"
 partialOutputsUnavailable = "སྲིད་བྱང་མཇུག་འབྲས་ཁ་ཤས་ད་དུང་ཕབ་ལེན་མི་ཐུབ།"
-retrying = "ཁོམ་མེད་པས་ ཡང་བསྐྱར་ཚོད་ལྟ་བཞིན..."
 runNotFound = "བཀོལ་སྤྱོད་འགུལ་སྐྱོད་དེ་ད་དུང་མ་རྙེད།"
-step = "རིམ་པ {{current}}/{{total}}"
 timedOut = "མཇུག་མ་བསྡུ་བའི་སྔོན་དུ་ བཀོལ་སྤྱོད་དུས་ཚོད་ཡོལ་བ།"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "སྒོ་བསྡམས"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} བཀོལ་སྤྱོད་བཞིན"
 applyingProgress = "{{names}} བཀོལ་སྤྱོད་བཞིན ({{done}}/{{total}})"
@@ -5951,20 +6177,16 @@ failureBody = "{{total}} ཡིག་ཆ་ནས་ {{failures}} དག་བ
 failureTitle = "བཀོལ་སྤྱོད་ཆ་ཚང་མེད་པར་ཕྱིར་འདྲེན་བཟོ།"
 printPolicyAppliedBody = "འདི་ PDF ཞིག་སྲིད་བྱང་གཅིག་ལ་འཚམ་པར་གསར་བཅོས་བྱས་ཟིན། བཟོ་བཅོས་ལ་བསྐྱར་ཞིབ་བྱས་ནས་ ཡང་བསྐྱར་དཔར་བྱེད།"
 printPolicyAppliedTitle = "དཔར་བྱེད་སྔོན་ལ་ སྲིད་བྱང་བཀོལ་སྤྱོད"
-queued = "+{{count}} གྲལ་ཐོ་ནང་བཞག"
 successTitle = "{{names}} བཀོལ་སྤྱོད་ཚར།"
 summaryMore = "{{first}} དང་ {{second}} དེ་ལས་མང་བ་ {{more}}"
 summaryTwo = "{{first}} དང་ {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "བརྗེ་སྒྱུར་སྔོན་ལ་ བཀོལ་སྤྱོད"
-default = "བཀོལ་སྤྱོད"
-export = "ཕྱིར་འདྲེན་བཟོ་སྔོན་ལ་ བཀོལ་སྤྱོད"
-input = "ནང་འདྲེན་སྐབས་ བཀོལ་སྤྱོད"
-print = "དཔར་བྱེད་སྔོན་ལ་ བཀོལ་སྤྱོད"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
+[policies.labels]
+categoryCount = "རིགས་དབྱེ"
+hideCategory = "རིགས་དབྱེ་སྦས"
+labelCount = "ཤོ་བྱང"
+sharedNote = "ཤོ་བྱང་འདི་དག་ནང་སྒྲིག་ཡིན་ཞིང་ཁྱེད་ཀྱི་ཚོགས་ཆུང་ཡོངས་དང་མཉམ་སྤྱོད་བྱས་ཡོད།"
+showCategory = "རིགས་དབྱེ་སྟོན"
 
 [policies.pii]
 account = "རྩིས་ཐོའི་ཨང་ (མཚོན་བྱེད་ཡོད་པ)"
@@ -5977,76 +6199,2780 @@ placeholder = "Select PII types"
 routing = "US routing numbers (ABA)"
 ssn = "Social Security ཨང་"
 
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoAriaLabel = "What is a policy?"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
+[policy]
+badgeEnforcing = "{{name}} ལག་བསྟར་བཞིན..."
+badgeRan = "{{name}} སྲིད་ཇུས་ཡིག་ཆ་འདིའི་ཐོག་སྤེལ་ཟིན"
+badgeRunning = "{{name}} སྤེལ་བཞིན..."
+blockingAction = "སྲིད་ཇུས་ལག་བསྟར་སྐབས་ {{action}} འགོག་བྱས། སྒུག་རོགས..."
+dismiss = "ཁེབས་རིས་སེལ"
+enforcingTitle = "སྲིད་ཇུས་ལག་བསྟར་བཞིན..."
+viewAnyway = "ཡིག་ཆ་ལྟ (སྲིད་ཇུས་ད་དུང་ལག་བསྟར་བཞིན)"
 
-[policies.status]
+[policyOption]
+autoRedactPhi = "PHI རང་འགུལ་ནག་བསུབ"
+blockExport = "ཕྱིར་འདོན་འགོག"
+ccpa = "CCPA"
+contracts = "གན་རྒྱ"
+documents = "ཡིག་ཆ"
+fedramp = "FedRAMP"
+financialReports = "དངུལ་རྩིས་སྙན་ཐོ"
+flagForReview = "བསྐྱར་ཞིབ་ཆེད་རྟགས་འགོད"
+gdpr = "GDPR"
+hipaa = "HIPAA"
+hold = "ཉར་འཇོག"
+hrRecords = "HR ཟིན་ཐོ"
+indefinite = "དུས་ཚད་མེད་པ"
+insurance = "འགན་བཅོལ"
+invoices = "འཛིན་ཤོག"
+iso27001 = "ISO 27001"
+legalFilings = "ཁྲིམས་ལུགས་འབུལ་ཡིག"
+medicalPhi = "སྨན་བཅོས / PHI"
+never = "ནམ་ཡང་མིན"
+ninetyDays = "ཉིན་ 90"
+oneYear = "ལོ་ 1"
+p60 = "60%"
+p70 = "70%"
+p80 = "80%"
+p90 = "90%"
+p95 = "95%"
+pciDss = "PCI DSS"
+quarantineDocument = "ཡིག་ཆ་ཟུར་འཇོག"
+routeToBucket = "bucket ལ་ལམ་སྒྲིག"
+s3Bucket = "S3 bucket"
+sevenYears = "ལོ་ 7"
+sharePoint = "SharePoint"
+soc2 = "SOC 2"
+taxDocuments = "ཁྲལ་ཡིག་ཆ"
+thirtyDays = "ཉིན་ 30"
+threeYears = "ལོ་ 3"
+webhook = "Webhook"
+
+[portal]
+comingSoon = "མགྱོགས་པོར་ཡོང་རྒྱུ"
+
+[portal.accountLink.card]
+billingNote = "ལྟ་སྐྱོང་མེད་པའི་ལས་སྣོན་གྱི་རིན་འབབ་ཁྱེད་ཀྱི་ཚོགས་པའི་དངུལ་ཁུག་ནས་རྩིས་འབུལ་བྱེད།"
+eyebrow = "རྩིས་ཐོ་སྦྲེལ་མཐུད"
+linkButton = "ཁྱེད་ཀྱི Stirling རྩིས་ཐོ་སྦྲེལ"
+linked = "སྦྲེལ་ཟིན"
+linkedAs = "{{name}} ཡི་མིང་ཐོག་སྦྲེལ་ཟིན།"
+linkedGeneric = "དཔེ་མཚོན་འདི་སྦྲེལ་ཟིན།"
+notLinked = "སྦྲེལ་མེད"
+title = "ཚོགས་པ་འདི་དེའི Stirling རྩིས་ཐོ་དང་སྦྲེལ"
+unlink = "སྦྲེལ་མཐུད་གཅོད"
+
+[portal.accountLink.card.error]
+title = "སྦྲེལ་མ་ཐུབ"
+
+[portal.accountLink.card.loginNotConfigured]
+after = "hosted Stirling རྩིས་ཐོ་དང་རྩིས་ཐོ་སྦྲེལ་མཐུད་སྤྱོད་ཐུབ་པར། dev ནང་ཁྱེད་ཀྱིས་སྦྲེལ་མཐུད་གླེང་སྒྲོམ་ནས་ནང་འཛུལ་དཔེ་སྟོན་བྱེད་ཐུབ།"
+before = "སྒྲིག"
+title = "SaaS ནང་འཛུལ་སྒྲིག་མེད"
+
+[portal.accountLink.gate]
+action = "རྩིས་ཐོ་སྦྲེལ"
+description = "རིན་འབབ་ཡོད་པའི་ཁྱད་ཆོས་སྤྱོད་ཆེད་ཚོགས་པ་འདིའི Stirling རྩིས་ཐོ་སྦྲེལ།"
+title = "སྦྲེལ་ནས་སྒོ་འབྱེད"
+titleFeature = "{{feature}} སྒོ་འབྱེད་ཆེད་སྦྲེལ"
+
+[portal.accountLink.instances]
+active = "འགུལ་སྐྱོད"
+revoke = "ཕྱིར་འཐེན"
+revoked = "ཕྱིར་འཐེན་ཟིན"
+unnamed = "མིང་མེད་དཔེ་མཚོན"
+
+[portal.accountLink.instances.columns]
+instance = "དཔེ་མཚོན"
+lastSeen = "མཐའ་མར་མཐོང་བ"
+linked = "སྦྲེལ་ཟིན"
+status = "གནས་ཚུལ"
+
+[portal.accountLink.instances.empty]
+description = "ཚོགས་པ་འདིའི་རྩིས་ཐོ་སྦྲེལ་ནས། དེ་རྗེས་ཁྱེད་ཀྱི་རང་གིས་གནས་སྤེལ་བྱས་པའི་དཔེ་མཚོན་ཐོ་འགོད་བྱས་ན་འདིར་མཐོང་ཐུབ།"
+title = "སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་མེད"
+
+[portal.accountLink.instances.time]
+daysAgo_one = "{{count}} ཉིན་སྔོན"
+daysAgo_other = "{{count}} ཉིན་སྔོན"
+hoursAgo_one = "{{count}} ཆུ་ཚོད་སྔོན"
+hoursAgo_other = "{{count}} ཆུ་ཚོད་སྔོན"
+justNow = "ད་ལྟ་རང"
+minutesAgo_one = "{{count}} སྐར་མ་སྔོན"
+minutesAgo_other = "{{count}} སྐར་མ་སྔོན"
+never = "ནམ་ཡང་མིན"
+
+[portal.accountLink.modal]
+linkSubtitle = "server འདིས་རིན་འབབ་བསྡུ་དགོས་པའི་རྩིས་ཐོར་ནང་འཛུལ་བྱོས།"
+linkTitle = "ཁྱེད་ཀྱི Stirling རྩིས་ཐོ་སྦྲེལ"
+reauthSubtitle = "ཁྱེད་ཀྱི་ལས་ཡུན་དུས་ཡོལ་སོང་ — ཁྱེད་ཀྱི Stirling རྩིས་ཐོར་ཡང་བསྐྱར་ནང་འཛུལ་བྱོས། ཁྱེད་ཀྱི་དཔེ་མཚོན་སྦྲེལ་ཟིན་པར་གནས་ཡོད།"
+reauthTitle = "ཡང་བསྐྱར་ནང་འཛུལ"
+simulateSignIn = "ནང་འཛུལ་དཔེ་བཟོ (dev)"
+
+[portal.accountLink.modal.loginNotConfigured]
+after = "hosted Stirling རྩིས་ཐོ་དང app ནང་སྦྲེལ་བ་ནུས་སྤེལ་བྱེད་པར།"
+and = "དང"
+before = "སྒྲིག"
+title = "SaaS ནང་འཛུལ་སྒྲིག་མེད"
+
+[portal.accountLink.panel]
+instancesSub = "ཚོགས་པ་འདིར་ཐོ་འགོད་བྱས་པའི་རང་གིས་གཉེར་བའི་དཔེ་མཚོན་ཚང་མ། དེའི་ལྟ་མེད་འཛུལ་སྤྱོད་འཕྲལ་དུ་གཅོད་པར་དཔང་ཡིག་ཕྱིར་འཐེན་བྱོས།"
+instancesTitle = "སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན"
+revokeError = "དཔེ་མཚོན་ཕྱིར་འཐེན་མ་ཐུབ"
+sub = "རང་གིས་གཉེར་བའི་ཚོགས་པ་འདི་དེའི Stirling རྩིས་ཐོ་དང་སྦྲེལ་ནས། ལྟ་མེད་ལས་སྒྲུབ་ཀྱི་རིན་འབབ་ཁྱེད་ཀྱི་ཚོགས་པའི་དངུལ་ཁུག་ལ་བརྩི་རུ་འཇུག"
+
+[portal.accountLink.panel.loadError]
+forbidden = "ཚོགས་པའི་བདག་པོ་ཁོ་ནས་ཚོགས་པའི་སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་ལྟ་ཐུབ།"
+generic = "རུ་ཁག་གི་སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་འཇུག་ལེན་མ་ཐུབ། སྐབས་ཤིག་རྗེས་ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
+title = "སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་འཇུག་ལེན་མ་ཐུབ"
+
+[portal.accountLink.state]
+free = "རྩོམ་སྒྲིག་འཆར་གཞི"
+subscribed = "Processor འཆར་གཞི"
+unlinked = "སྦྲེལ་མེད"
+
+[portal.assistant]
+close = "Assistant ཁ་རྒྱག"
+error = "Assistant ལ་འབྲེལ་མ་ཐུབ།"
+errorWithDetail = "Assistant ལ་འབྲེལ་མ་ཐུབ། {{detail}}"
+inputAriaLabel = "Assistant ལ་དྲིས"
+inputPlaceholder = "Stirling སྐོར་དྲིས…"
+open = "Assistant ཁ་འབྱེད"
+send = "སྐུར"
+title = "Assistant"
+tryAsking = "དྲི་བ་ཚོད་ལྟ་བྱོས"
+typing = "ཡིག་འཇུག་བྱེད་བཞིན"
+
+[portal.auth]
+loading = "འཇུག་ལེན་བྱེད་བཞིན"
+redirectingToEditor = "རྩོམ་སྒྲིག་ཆས་ལ་ཕྱོགས་སྒྱུར་བྱེད་བཞིན..."
+
+[portal.billing.activation]
+maybeLater = "ཕྱིས་སུ་འགྲིག"
+title = "Processor སྤོར"
+
+[portal.billing.activation.payg]
+sub = "ཟླ་རེའི་ཚད་བཀོད། ཁྱེད་ཀྱིས་སྤེལ་བའི་ལས་ཀར་རིན་སྤྲོད།"
+title = "སྤྱད་ཚད་ལྟར་རིན་སྤྲོད"
+
+[portal.billing.activation.prepay]
+badge = "ཟླ་བ 2 རིན་མེད"
+sub = "འཛིན་ཤོག་གཅིག གཱ་ཡང་ན་དངུལ་ཁང་བརྒྱུད་སྤོ་བ།"
+title = "ལོ་གཅིག་སྔོན་སྤྲོད"
+
+[portal.billing.checkout]
+noClientSecret = "Edge function གིས client_secret ཕྱིར་སློག་མ་བྱས།"
+title = "སྤྲོད་ཐབས་ཁ་སྣོན"
+
+[portal.billing.checkout.activationSlow]
+body = "ཁྱེད་ཀྱི་སྤྲོད་དངུལ་ལེགས་གྲུབ་བྱུང་ཡང་། ནུས་སྤེལ་དེ་རྒྱུན་ལས་ཅུང་རིང་ཙམ་འགོར་བཞིན་འདུག དེ་རང་འགུལ་གྱིས་སྤོར་རྒྱུ་ཡིན — འདི་ཁ་རྒྱག་ན། མི་རིང་བར་འདིར་མངོན་ཡོང་།"
+close = "ཁ་རྒྱག"
+title = "ཧ་ལམ་འགྲུབ་ཚར"
+
+[portal.billing.checkout.cap]
+amountAria = "ཟླ་རེའི་སྤྱོད་འགྲོ་ཚད"
+back = "ཕྱིར"
+continue = "སྤྲོད་དངུལ་ལ་མུ་མཐུད"
+error = "ཁྱེད་ཀྱི་སྤྱོད་འགྲོ་ཚད་སྒྲིག་མ་ཐུབ"
+finePrint = "འཛིན་ཤོག་ཟླ་རེར་སྤེལ་ཡོང་། དུས་ནམ་ཡང་མེད་པར་བཟོ་ཆོག"
+noLimit = "ཚད་མེད"
+note = "ཁྱེད་ལ་ཚད་ལས་བརྒལ་ནས་རིན་འབབ་ནམ་ཡང་མི་བསྡུ། ལས་སྒྲུབ་ཙམ་མཚམས་འཇོག་བྱེད།"
+perMonth = "/ ཟླ"
+title = "ཁྱེད་ཀྱི་སྤྱོད་འགྲོ་ཚད་སྒྲིག"
+
+[portal.billing.checkout.card]
+fields = "གཱ་ཨང་ · MM / YY · CVC · ZIP"
+label = "གཱ་ཞིབ་ཆ"
+note = "གཱ་ཞིབ་ཆ་ Stripe ཡིས་བསྡུ་ལེན་བྱེད། Stirling གིས PAN ཡང་ན CVC ནམ་ཡང་ཉར་མི་བྱེད།"
+
+[portal.billing.checkout.error]
+title = "checkout འགོ་འཛུགས་མ་ཐུབ"
+
+[portal.billing.checkout.finalizing]
+body = "ཁྱེད་ཀྱི་སྤྲོད་དངུལ་འགྲུབ་སོང་། ང་ཚོས་ཁྱེད་ཀྱི་སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་ཚང་མར་ཚད་འཇལ་ལས་སྒྲུབ་སྤོར་བཞིན་ཡོད — འདི་ལ་སྤྱིར་བཏང་སྐར་ཆ་འགའ་ལས་མི་འགོར།"
+hint = "སྒེའུ་ཁུང་འདི་ཁ་མ་རྒྱག་པར་ཉར་རོགས།"
+title = "ཁྱེད་ཀྱི Processor འཆར་གཞི་ནུས་སྤེལ་བྱེད་བཞིན..."
+
+[portal.billing.checkout.pay]
+limit = "ཟླ་རེའི་སྤྱོད་འགྲོ་ཚད {{amount}}/mo། ཚད་ལ་སླེབས་དུས་ལས་སྒྲུབ་མཚམས་འཇོག"
+limitNoCap = "སྤྱོད་འགྲོ་ཚད་མེད། ལས་སྒྲུབ་མཚམས་མི་འཇོག འཛིན་ཤོག་ཟླ་རེར་སྤེལ་ཡོང་།"
+
+[portal.billing.enterpriseUpsell]
+cta = "Enterprise ལ་ཞིབ་ལྟ"
+description = "ཁས་ལེན་བྱས་པའི་སྤྱོད་ཚད་ཀྱི་ཆག་ཡང་། air-gapped deployment། མངགས་བཟོ MSA དང་བདེ་འཇགས་ཞིབ་བཤེར། 3rd-party བཀྲམ་སྤེལ་མཉམ་ལས།"
+eyebrow = "སྤྱོད་ཚད་ཆག་ཡང་ · 1M+ PDFs"
+title = "Stirling Enterprise"
+
+[portal.billing.freeEditors]
+activeThisMonth = "ཟླ་འདིར་སྤྱོད་བཞིན"
+cost = "རིན་གོང"
+editorsDeployed = "བཀོད་སྤེལ་བྱས་པའི་རྩོམ་སྒྲིག་ཆས"
+inviteTeammates = "རུ་གྲོགས་གདན་འདྲེན"
+pdfsEdited = "རྩོམ་སྒྲིག་བྱས་པའི PDFs"
+subtitle = "གང་དུ་ཡང་བཀོད་སྤེལ་བྱོས། ཁྱེད་ཀྱི་རུ་ཁག་ཚང་མའི་ཆེད།"
+title = "རིན་མེད PDF རྩོམ་སྒྲིག་ཆས"
+
+[portal.billing.freePlan]
+checkoutErrorTitle = "checkout འགོ་འཛུགས་མ་ཐུབ"
+currentPlan = "མིག་སྔའི་འཆར་གཞི"
+freeForever = "རྟག་ཏུ་རིན་མེད"
+noTeamResolved = "ཁྱེད་ཀྱི་དངུལ་ཁུག་སྟེང་རུ་ཁག་ད་དུང་གཏན་འཁེལ་མ་བྱུང་ — བསྐྱར་གསོ་བྱས་ནས་ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
+ownerOnly = "རུ་ཁག་གི་བདག་པོ་ཁོ་ནས Processor འཆར་གཞི་སྤོར་ཐུབ།"
+payInvoice = "མཇུག་སྒྲུབ་ཆེད་འཛིན་ཤོག་སྤྲོད"
+planName = "Editor"
+ssoIncluded = "SSO ཚུད་ཡོད"
+switchOnProcessor = "Processor སྤོར →"
+unlimitedUsers = "སྤྱོད་མཁན་ཚད་མེད"
+viewQuote = "རིན་གོང་ལྟ"
+
+[portal.billing.invoices]
+columnAmount = "དངུལ་འབོར"
+columnDate = "ཚེས་གྲངས"
+columnDescription = "འགྲེལ་བཤད"
+columnPdfsProcessed = "ལས་སྒྲུབ་བྱས་པའི PDFs"
+columnStatus = "གནས་ཚུལ"
+descriptionFallback = "འཛིན་ཤོག"
+downloadAriaLabel = "འཛིན་ཤོག {{number}} PDF ལྟར་ཕབ་ལེན"
+emptyDescription = "ཁྱེད་ཀྱི་རུ་ཁག་གིས་མངགས་ཉོ་བྱས་ནས་འཁོར་ཡུན་དང་པོ་མཇུག་སྒྲིལ་རྗེས། ཁྱེད་ཀྱི་འཛིན་ཤོག་འདིར་མངོན་ཡོང་།"
+emptyTitle = "ད་དུང་འཛིན་ཤོག་མེད"
+fetchLimitNote_one = "ཁྱེད་ཀྱི་ཉེ་ཆར་གྱི་འཛིན་ཤོག {{count}} སྟོན་བཞིན་ཡོད། འཛིན་ཤོག་རྙིང་པ་རྣམས་ Stripe portal ནང་ཡོད།"
+fetchLimitNote_other = "ཁྱེད་ཀྱི་ཉེ་ཆར་གྱི་འཛིན་ཤོག {{count}} སྟོན་བཞིན་ཡོད། འཛིན་ཤོག་རྙིང་པ་རྣམས་ Stripe portal ནང་ཡོད།"
+loadError = "འཛིན་ཤོག་འཇུག་ལེན་མ་ཐུབ། {{error}}"
+pdfLink = "PDF ↓"
+showAll_one = "ཚང་མ {{count}} སྟོན"
+showAll_other = "ཚང་མ {{count}} སྟོན"
+showFewer_one = "ཉུང་ཙམ་སྟོན (མགོའི {{count}})"
+showFewer_other = "ཉུང་ཙམ་སྟོན (མགོའི {{count}})"
+showMostRecent_one = "ཉེ་ཆར་གྱི {{count}} སྟོན"
+showMostRecent_other = "ཉེ་ཆར་གྱི {{count}} སྟོན"
+title = "འཛིན་ཤོག་ལོ་རྒྱུས"
+viewAriaLabel = "Stripe ནང་འཛིན་ཤོག {{number}} ལྟ"
+viewLink = "ལྟ ↗"
+
+[portal.billing.linkPrompt]
+cta = "Stirling རྩིས་ཐོ་སྦྲེལ"
+description = "ལག་སྒུལ PDF རྩོམ་སྒྲིག — ལྟ་བ། མིང་རྟགས་འགོད་པ། མཉམ་སྒྲིལ། དབྱེ་བ། ཆུ་རྟགས། སྡུད་བཙིར། བསྒྱུར་བ། ལག་སྒུལ OCR — ནམ་ཡང་རིན་མེད་ཡིན། སྦྲེལ་ཡོད་མེད་གང་ཡང་འདྲ། ཚད་འཇལ་ལས་སྒྲུབ (automation, AI, དང API) གི་རིན་མེད PDFs 500 ལེན་པར་སྦྲེལ། དེ་ལས་མང་བ་དགོས་དུས། Processor འཆར་གཞི་སྤོར་ནས་ཁྱེད་ཀྱིས་སྤྱད་པ་ཁོ་ནར་རིན་སྤྲོད།"
+title = "ཁྱེད་ཀྱི Stirling རྩིས་ཐོ་སྦྲེལ"
+
+[portal.billing.paymentMethod]
+billedMonthly = "ཟླ་རེར་རིན་འབབ་བསྡུ"
+cardEnding = "{{brand}} མཇུག་ཨང་ {{last4}}"
+cardFallback = "གཱ"
+expiresBilledMonthly = "དུས་ཚོད {{expiry}} ལ་ཟད · ཟླ་རེར་རིན་འབབ་བསྡུ"
+eyebrow = "སྤྲོད་ཐབས"
+managedSub = "ཁྱེད་ཀྱི་གཱ་དང་རིན་འབབ་ཞིབ་ཆ་ Stripe ཡི་མཁོ་མཁན portal ནང་བདེ་འཇགས་ངང་ཉར་ཡོད།"
+managedTitle = "Stripe ནང་དོ་དམ་བྱས"
+update = "གསར་སྒྱུར"
+
+[portal.billing.pdfsProcessed]
+emptyPeriod = "དུས་ཡུན་འདིར་ད་དུང་ལས་སྒྲུབ་མེད།"
+eyebrow = "དུས་ཡུན་འདིར་ལས་སྒྲུབ་བྱས་པའི PDFs"
+legendValue_one = "{{formatted}} PDFs"
+legendValue_other = "{{formatted}} PDFs"
+segbarAriaLabel = "PDFs རིགས་དབྱེ་ལྟར་དབྱེ་བ"
+segmentAgentsDesc = "AI agent བྱ་སྤྱོད"
+segmentAgentsLabel = "Agents"
+segmentApiDesc = "ཐད་ཀར API རེ་ཞུ"
+segmentApiLabel = "API"
+segmentAutomationDesc = "Automations & pipelines"
+segmentAutomationLabel = "Automation"
+sizeMultiplier = "{{formatted}} PDFs ལ་ཆེ་ཆུང་སྒྱུར་རྟེན་སྤྱད་ཡོད"
+summary = "{{unique}} ཁེར་རྐྱང་ · {{units}} meter units · PDF རེར་ཆ་སྙོམས {{avg}}"
+summaryNoRate = "{{unique}} ཁེར་རྐྱང་ · {{units}} meter units"
+unit = "PDFs"
+unitsPending_one = "{{units}} meter unit སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་ནས་མཉམ་སྒྲིག་སྒུག་བཞིན"
+unitsPending_other = "{{units}} meter units སྦྲེལ་ཟིན་པའི་དཔེ་མཚོན་ནས་མཉམ་སྒྲིག་སྒུག་བཞིན"
+
+[portal.billing.prepaid]
+capSuffix = "སྔོན་སྤྲོད་དངུལ་ལྷག {{total}} ནས"
+expires = "དུས་ཚོད {{date}} ལ་ཟད"
+eyebrow = "སྔོན་སྤྲོད་ཤོང་ཚད"
+note = "ཚད་འཇལ་རིན་འབབ་དང་ཁྱེད་ཀྱི་སྤྱོད་འགྲོ་ཚད་ཕྱིར་སྔོན་ལ་སྤྱོད།"
+topUp = "ཁ་སྣོན"
+
+[portal.billing.prepaid.buy]
+back = "ཕྱིར"
+calcTitle = "ཁྱེད་ཀྱི་ལོ་འཁོར་སྤྲོད་དངུལ་རྩིས་རྒྱག"
+cancel = "མེད་པར་བཟོ"
+cancelPurchase = "ཉོ་སྒྲུབ་རྩིས་མེད་གཏོང་"
+close = "ཁ་རྒྱག"
+continueToPayment = "དངུལ་སྤྲོད་ལ་མུ་མཐུད་"
+finalise = "མཐའ་མཇུག་སྒྲུབ་"
+invoiceErrorTitle = "འཛིན་ཤོག་བཟོ་མ་ཐུབ་"
+loadingTitle = "ཁྱེད་ཀྱི་རིན་གོང་གསལ་ཐོ་འཇུག་བཞིན་"
+payTitle = "ཁྱེད་ཀྱི་ལོ་གཅིག་ལ་དངུལ་སྤྲོད་"
+step = "གོམ་རིམ་ {{current}} / {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "བསྒྱུར་"
+deployRow = "བཀོད་འཇོག"
+done = "ཚར་"
+enterpriseHint = "འདི་ནི་ཁེ་ལས་རིམ་པའི་ཚད་རྒྱ་ཡིན། བོངས་ཚད་འདིར་ཁེ་ལས་རིན་ཚད་ཀྱིས་རང་ཞབས་ཆག་ཡང་གང་ལས་ཀྱང་ལེགས། སྐར་མ་འགའི་ནང་རིན་ཚད་གཏན་འཇགས། ཆ་རྐྱེན། དང་རིན་གོང་གསལ་ཐོ།"
+governanceRow = "དོ་དམ"
+governanceValue = "{{label}} · སྲིད་ཇུས་ {{count}}"
+handlesLabel = "ཁྱེད་ཀྱི་སྒྲིག་གཅོད་ཆས་"
+handlesValue = "ཟླ་རེར {{volume}} credits སྒྲིག་གཅོད་བྱེད་"
+pipelinesLabel = "Pipelines"
+policiesMeta = "སྲིད་ཇུས་ {{count}}"
+poolCaption = "ལོ་གཅིག་ལ་ {{credits}} credits ཀྱི་མཉམ་སྤྱོད་མཛོད་གཅིག བེད་སྤྱོད་མང་བའི་ཟླ་བས་ཉུང་བའི་ཟླ་བ་ནས་གཡར་སྤྱོད་བྱེད།"
+priceLabel = "ཁྱེད་ཀྱི་ལོ་གཅིག · ཟླ་ 10 ཡི་རིན་གོང་ལ་ཟླ་ 12"
+rateUnknown = "རྩིས་སྤྲོད་སྐབས་ང་ཚོས་རིན་གོང་ཏག་ཏག་སྟོན་རྒྱུ་ཡིན།"
+savings = "ཁྱེད་ཀྱིས་ {{amount}} གྲོན་ཆུང་བྱེད · ཟླ་ 2 རིན་མེད།"
+sizingRow = "ཆེ་ཆུང་ཚད་འཛིན་"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "སྤྱོད་མཁན་ཁྱོན་བསྡོམས་"
+
+[portal.billing.prepaid.consent]
+label = "ངས་ཤེས་རྟོགས་བྱས་པ་ནི། ངའི་སྔོན་སྤྲོད་ཤོང་ཚད་ཚར་བའམ་ཟླ་ 12 རྗེས་དུས་ཡོལ་བྱུང་ན། ངས་རྩིས་མེད་མ་བཏང་ཚེ་སྒྲིག་གཅོད་རང་འགུལ་གྱིས་ཚད་ལྡན་ཚད་རྩིས་སྤྱད་ཚད་ལྟར་སྤྲོད་པའི་རིན་ཚད་ལྟར་(ངའི་འགྲོ་གྲོན་ཚད་བཀག་བར) མུ་མཐུད་འགྲོ་རྒྱུ་དང་། ངས་དུས་ནམ་ཡང་དངུལ་རྩིས་སྒོ་མོ་ནས་རྩིས་མེད་གཏོང་ཐུབ།"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling གིས་དོ་དམ་བྱེད། སྐར་མ་འགའི་ནང་སྤྱོད་ཐུབ།"
+cloudValue = "Stirling Cloud · དོ་དམ་བྱས་པ"
+selfhost = "རང་གིས་གནས་སྐྱོང་"
+selfhostDesc = "སྒེར་གྱི་རྨང་གཞིའི་སྟེང་འཁོར། རིན་ཚད་གཅིག་པ།"
+selfhostValue = "རང་གིས་གནས་སྐྱོང་ · སྒེར་གྱི་རྨང་གཞི་"
+
+[portal.billing.prepaid.offer]
+cta = "མཁོ་འདོན་ལ་བསྐྱར་ཞིབ་"
+subtitle = "PDF སྒྲིག་གཅོད་ལ་ལོ་གཅིག་སྔོན་སྤྲོད་བྱས་ནས་ཟླ་གཉིས་རིན་མེད་ཐོབ། དེ་ཚད་རྩིས་དངུལ་རྩིས་སྔོན་ལ་སྤྱོད་པ་དང་། ཁྱེད་ཀྱི་འགྲོ་གྲོན་ཚད་བཀག་ཕྱི་རོལ་དུ་ཡིན།"
+title = "ཟླ་ 10 ཡི་རིན་གོང་ལ་ཟླ་ 12 ཐོབ་"
+
+[portal.billing.prepaid.pay]
+accountName = "རྩིས་ཐོ་བདག་པོའི་མིང་"
+accountNamePlaceholder = "དཔེར་ན། Jane Smith"
+companyName = "ཀུང་སིའི་མིང་ (འདེམས་རུང)"
+companyNamePlaceholder = "དཔེར་ན། Acme Inc."
+downloadInvoice = "འཛིན་ཤོག་ཕབ་ལེན་"
+payOnline = "དྲ་ཐོག་ནས་དངུལ་སྤྲོད་"
+poNumber = "PO ཨང་རྟགས་ (འདེམས་རུང)"
+poNumberPlaceholder = "དཔེར་ན། PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "མཐོ་རིམ་"
+advancedDesc = "Pipelines ཀྱིས་ཁྱེད་ཀྱི་སྒྲིག་གཅོད་མང་ཆེ་བ་སྐུལ་སློང་བྱེད།"
+none = "མེད་"
+noneDesc = "ད་དུང Pipelines འཁོར་གཏོང་བྱེད་མེད། དུས་ནམ་ཡང་སྒོ་ཕྱེ་ཆོག"
+standard = "Standard"
+standardDesc = "Pipelines འགའ་ཞིག་གིས་འབྱོར་བའི PDFs བསྐྱར་སྒྲིག་གཅོད་བྱེད།"
+
+[portal.billing.prepaid.posture]
+essentials = "གཞི་རྩ་"
+essentialsDesc = "དབྱེ་སྡེ་འབྱེད་པ། སྔོན་སྒྲིག དེ་མིན་མཉམ་སྤྱོད་"
+governed = "དོ་དམ་བྱས་པ་"
+governedDesc = "བདེ་འཇགས་དང་ལམ་སྟོན་ཁ་སྣོན་བྱེད་"
+regulated = "སྒྲིག་སྲོལ་ཅན་"
+regulatedDesc = "དབྱེ་སྡེ་ཚང་མ། མཐུན་སྒྲིག ཉར་ཚགས། འཇུག་ལེན་བཅས་ཚུད་"
+
+[portal.billing.prepaid.review]
+download = "རིན་གོང་གསལ་ཐོ་ཕབ་ལེན་ (PDF)"
+downloading = "སྒྲིག་བཞིན…"
+share = "ཆོག་མཆན་ཆེད་མཉམ་སྤྱོད་"
+
+[portal.billing.prepaid.size]
+compact = "ཆུང་བསྡུས་"
+compactDesc = "ཡིག་ཆ་ 25 MB འོག གཞི་གྲངས་རིན་འཐུས་མེད་"
+heavy = "ལྗིད་པོ་"
+heavyDesc = "བཤེར་འབེབས་བྱས་པའམ་པར་མང་བ། རྒྱུན་དུ་ 50 MB+"
+standard = "Standard"
+standardDesc = "མང་ཆེ་བ་ཆུང་ངུ་། བཤེར་འབེབས་ཁ་ཤས་ 25 MB ལས་བརྒལ་"
+
+[portal.billing.prepaid.state]
+exhausted = "སྤྱད་ཚར་"
+healthy = "མང་པོ་ལྷག་"
+low = "ཉུང་དུ་འགྲོ་བཞིན་"
+
+[portal.billing.spendLimit]
+adjustLimit = "ཚད་བཀག་སྒྲིག་"
+cancel = "རྩིས་མེད་"
+capControlNote = "བསྒྱུར་བ་འཕྲལ་དུ་ནུས་པ་ཐོན་ — དུས་ནམ་ཡང་མཐོ་ཚད་སྤར་རམ་དམའ་རུ་གཏོང་།"
+capSuffix = "/ ཟླ་རེར"
+capSuffixWithDocs = "/ ཟླ་རེར · ≈ ཡིག་ཆ་ {{documents}}"
+displaySub = "ཁྱེད་ཀྱིས་རང་འགུལ་སྒྲིག་གཅོད་བྱས་པ་ཙམ་ལ་རིན་འཐུས་བསྡུ་བ་ཡིན — མཐོ་ཚད་ནས་ནམ་ཡང་མི་བརྒལ།"
+editTitle = "ཁྱེད་ཀྱི་ཟླ་རེའི་མཐོ་ཚད་སྒྲིག་"
+eyebrow = "འགྲོ་གྲོན་ཚད་བཀག་"
+guardrailBody = "མཐོ་ཚད་གཏན་པོ་ཞིག ཁྱེད་ལ་དེ་ལས་བརྒལ་ནས་ནམ་ཡང་རིན་འཐུས་མི་བསྡུ། ཚད་བཀག་ལ་སླེབས་སྐབས། ཁྱེད་ཀྱིས་དེ་སྤར་བའམ་འཁོར་ཡུན་བསྐྱར་སྒྲིག་བྱེད་པ་བར་ཚད་རྩིས་སྒྲིག་གཅོད་སྐབས་འཇོག་བྱེད་ (PDF རྩོམ་སྒྲིག་ཚད་མེད་མུ་མཐུད་ལས་ཀ་བྱེད)། གང་ཡང་བརླག་མི་འགྲོ།"
+guardrailLabel = "ཁྱེད་ཀྱི་སྲུང་ཚད།"
+noCap = "མཐོ་ཚད་མེད་"
+pctUsed = "{{pct}}% སྤྱད་ཟིན་"
+remaining = "{{amount}} ལྷག་"
+save = "ཚད་བཀག་ཉར་"
+saveError = "ཚད་བཀག་ཉར་མ་ཐུབ་"
+thisPeriodUncapped = "དུས་ཡུན་འདིར་ {{amount}} · མཐོ་ཚད་མེད་"
+usedThisMonth = "ཟླ་འདིར་ {{amount}} སྤྱད་"
+useSuggested = "འོས་སྦྱོར་སྤྱོད་ · {{amount}} / ཟླ་རེར"
+
+[portal.billing.spendLimit.projection]
+body_one = "{{rate}}/ཉིན་རེར་ལྟར་ན། ཁྱེད་ ~{{count}} ཉིན་ནང་ཚད་བཀག་ལ་སླེབས་ (~{{monthEnd}} ཟླ་མཇུག)། འོས་སྦྱོར་ཚད་བཀག་ ~{{suggested}}།"
+body_other = "{{rate}}/ཉིན་རེར་ལྟར་ན། ཁྱེད་ ~{{count}} ཉིན་ནང་ཚད་བཀག་ལ་སླེབས་ (~{{monthEnd}} ཟླ་མཇུག)། འོས་སྦྱོར་ཚད་བཀག་ ~{{suggested}}།"
+label = "བརྒལ་རྒྱུར་སྔོན་དཔག་བྱས་པ།"
+
+[portal.billing.spendThisMonth]
+eyebrow = "ཟླ་འདིའི་འགྲོ་གྲོན་"
+freeRemaining_one = "རིན་མེད PDF {{formatted}} ལྷག་"
+freeRemaining_other = "རིན་མེད PDFs {{formatted}} ལྷག་"
+processed_one = "PDF {{formattedCount}} སྒྲིག་གཅོད་བྱས།"
+processed_other = "PDFs {{formattedCount}} སྒྲིག་གཅོད་བྱས།"
+processedWithRate_one = "PDF {{formattedCount}} སྒྲིག་གཅོད་བྱས། རེ་རེར་ {{rate}}།"
+processedWithRate_other = "PDFs {{formattedCount}} སྒྲིག་གཅོད་བྱས། རེ་རེར་ {{rate}}།"
+
+[portal.billing.subscribedPlan.capWarn]
+approachingBody = "རང་འགུལ་སྒྲིག་གཅོད་ནམ་ཡང་མཚམས་མི་འཇོག་པའི་ཆེད་ད་ལྟ་དེ་སྤར།"
+approachingTitle = "ཁྱེད་ཟླ་རེའི་འགྲོ་གྲོན་ཚད་བཀག་གི་ {{pct}}% ལ་སླེབས་འདུག"
+raiseLimit = "ཚད་བཀག་སྤར་"
+reachedBody = "ཁྱེད་ཀྱིས་ཚད་བཀག་སྤར་བའམ་འཁོར་ཡུན་བསྐྱར་སྒྲིག་བྱེད་པ་བར། ཚད་རྩིས་སྒྲིག་གཅོད་སྐབས་འཇོག་བྱས་ཡོད། PDF རྩོམ་སྒྲིག་ཚད་མེད་མུ་མཐུད་ལས་ཀ་བྱེད།"
+reachedTitle = "ཟླ་རེའི་འགྲོ་གྲོན་ཚད་བཀག་ལ་སླེབས་ཟིན་"
+
+[portal.billing.subscribedPlan.portalError]
+title = "Stripe སྒོ་མོ་ཁ་ཕྱེ་མ་ཐུབ་"
+
+[portal.billing.walletMeter]
+capSuffix_one = "རིན་མེད PDFs {{allowance}} ནས་སྤྱད་པ་"
+capSuffix_other = "རིན་མེད PDFs {{allowance}} ནས་སྤྱད་པ་"
+eyebrow = "སྒྲིག་གཅོད་ཆས་ཚོད་སྤྱོད་"
+statusLabel_one = "{{remaining}} ལྷག་"
+statusLabel_other = "{{remaining}} ལྷག་"
+sub = "PDF རྩོམ་སྒྲིག་ཆས་རིན་མེད་སྤྱོད། PDFs རང་འགུལ་སྒྲིག་གཅོད་ལ་དངུལ་སྤྲོད།"
+title_one = "PDFs {{allowance}} རིན་མེད་སྒྲིག་གཅོད་"
+title_other = "PDFs {{allowance}} རིན་མེད་སྒྲིག་གཅོད་"
+titleWithRate_one = "PDFs {{allowance}} རིན་མེད་སྒྲིག་གཅོད། དེ་རྗེས་ {{rate}}/PDF"
+titleWithRate_other = "PDFs {{allowance}} རིན་མེད་སྒྲིག་གཅོད། དེ་རྗེས་ {{rate}}/PDF"
+
+[portal.components.billingUnit]
+approval = "ཆོག་མཆན་"
+check = "ཞིབ་བཤེར་"
+event = "དོན་རྐྱེན་"
+render = "འཆར་སྟོན་"
+review = "བསྐྱར་ཞིབ་"
+session = "གླེང་མོལ་དུས་ཡུན་"
+signature = "མིང་རྟགས་"
+
+[portal.components.maturity]
+beta = "Beta"
+ga = "GA"
+
+[portal.connections]
+createTitle = "མཐུད་སྦྲེལ་གསར་པ་"
+createTitleFor = "{{name}} མཐུད་སྦྲེལ་"
+delete = "སུབ་"
+edit = "རྩོམ་སྒྲིག་"
+editTitle = "མཐུད་སྦྲེལ་རྩོམ་སྒྲིག་"
+unsupportedType = "མཐུད་སྦྲེལ་རིགས་འདི་འདིར་རྩོམ་སྒྲིག་བྱེད་མི་ཐུབ།"
+
+[portal.connections.categories.advanced]
+description = "ང་ཚོས་ད་དུང་རྒྱབ་སྐྱོར་མ་བྱས་པའི་ཞབས་ཞུའི་ཆེད།"
+label = "མཐོ་རིམ་"
+
+[portal.connections.categories.audit]
+description = "ཡིག་ཆ་ལ་གང་བྱུང་བ་ཟིན་ཐོར་འགོད། ཁྱེད་ཀྱི་རྩིས་ཞིབ་པས་སྔར་ནས་ལྟ་སའི་གནས་སུ།"
+label = "རྩིས་ཞིབ་དང་མཐུན་སྒྲིག་ཟིན་ཐོ་"
+
+[portal.connections.categories.notify]
+description = "དོན་རྐྱེན་ཞིག་བྱུང་བ་མ་ལག་གཞན་ཞིག་ལ་བརྡ་སྤྲོད།"
+label = "བརྡ་ཐོ་དང་ལས་རིམ་"
+
+[portal.connections.categories.security]
+description = "ཡིག་ཆ་མུ་མཐུད་སྤོ་བའི་སྔོན་ལ་བཤེར་འབེབས་སམ་མཚོན་རྟགས་འགོད།"
+label = "བདེ་འཇགས་དང་དབྱེ་སྡེ་འབྱེད་པ་"
+
+[portal.connections.categories.signing]
+description = "མིང་རྟགས་འགོད་པའམ་གཞུང་དཔང་བྱེད་པའི་ཆེད་ཡིག་ཆ་ཕྱིར་གཏོང་།"
+label = "གློག་རྡུལ་མིང་རྟགས་དང་གཞུང་དཔང་"
+
+[portal.connections.categories.storage]
+description = "སྒྲིག་གཅོད་བྱས་པའི་ཡིག་ཆ་མཐར་སླེབས་ས་གནས་ - སྣོད་གཅིག སྐུལ་ཆས་གཅིག འཛིན་བྱང་གཅིག་གམ་ཤོག་ངོས་གཅིག"
+label = "ཡིག་ཆ་དང་ཟུར་སྦྱར་"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling གིས་འདི་གསང་སྡོམ་བྱས་ནས་ཉར་བ་དང་སླར་ཡང་མི་སྟོན།"
+label = "འཛུལ་སྤྱོད token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "མཐུད་སྦྲེལ་འདི་སྤྱོད་པའི་གོམ་རིམ་གྱིས URL འདིའི་འོག་གི་ལམ་ཁ་ཁོ་ནར་འབོད་ཐུབ། host གཞན་ནམ་ཡང་མིན།"
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "སྤྱོད་མཁན་མིང་"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "ཞབས་ཞུས་ཁྱེད་ལ་སྤྲད་པའི URL སྦྱར། དེའི་འོག་གི་ལམ་ཁ་ཁོ་ནར་འབོད་ཐུབ།"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "འབྲེལ་མཐུད་མིང་།"
+namePlaceholder = "དཔེར་ན། Production"
+
+[portal.connections.picker]
+cancel = "འདོར།"
+createNew = "འབྲེལ་མཐུད་གསར་པ་..."
+placeholder = "འབྲེལ་མཐུད་ཞིག་འདེམས།"
+save = "འབྲེལ་མཐུད་ཉར།"
+
+[portal.connections.picker2]
+back = "མཉམ་སྒྲིལ་བསྒྱུར།"
+heading = "ཁྱེད་ཀྱིས་གང་ཞིག་འབྲེལ་མཐུད་བྱེད་འདོད་དམ།"
+noResultsBody = "ང་ཚོས་ད་དུང་དེ་ལ་རྒྱབ་སྐྱོར་མི་བྱེད་ — དེའི་སྐོར་ང་ཚོར་བཤད་རོགས། ང་ཚོས་དེ་སྣོན་རྒྱུར་བལྟ་ངེས།"
+noResultsTitle = "\"{{query}}\" དང་མཐུན་པ་ཅི་ཡང་མེད།"
+searchPlaceholder = "མཉམ་སྒྲིལ་འཚོལ། — \"sign\", \"ocr\" ཡང་ན་ཐོན་རྫས་མིང་ཞིག་ཚོད་ལྟ་བྱོས།"
+
+[portal.connections.types.api]
+description = "སྲིད་ཇུས་ནས HTTP API གང་རུང་འབོད། URL, བདེན་སྦྱོར་དང payload ཁྱེད་ཀྱིས་འདེམས།"
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "བདེན་སྦྱོར།"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "སྤྱོད་མཁན་མིང་དང་གསང་ཚིག"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "header རང་སྒྲིག་ནང་གི Token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "མེད།"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Token ཐོབ་ཆེད་ནང་འཛུལ།"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "འབྲེལ་མཐུད་འདི་སྤྱོད་པའི་གོམ་སྟབས་ཀྱིས URL འདིའི་འོག་གི་ལམ་ཁོ་ན་འབོད་ཐུབ། host གཞན་ནམ་ཡང་མིན།"
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header མིང་།"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "ནང་འཛུལ་ལམ།"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "གསང་ཚིག"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "API ཡིས་ཕབ་ལེན་སྦྲེལ་ཐག་ཞིག་ལན་སྤྲད་ན། host འདི་ཚོ་ཁོ་ན་ལེན་ཆོག འབྲིང་རྟགས་ཀྱིས་ཁ་ཕྲལ། སྟོང་པར་བཞག་ན Base URL རང་གི host ཁོ་ན་ཆོག"
+label = "ཆོག་པའི་མཇུག་འབྲས host"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Token འདི header འདི་ལྟར་སྐུར།"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "ནང་འཛུལ་འབོད་སྐབས Token ཕྱིར་སྤྲོད་པའི་ལན་གྱི header, དཔེར་ན X-Auth-Token."
+label = "Token ལན་གྱི header"
+
+[portal.connections.types.api.fields.username]
+label = "སྤྱོད་མཁན་མིང་།"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "ཁྱེད་ཀྱིས་གཉེར་བའི་ཞབས་ཞུ་ཆས་ཐོག་ཡིག་ཆར malware འཚོལ་ཞིབ་བྱེད། — ཅི་ཡང་ཁྱེད་ཀྱི་དྲ་རྒྱ་ལས་ཕྱིར་མི་འགྲོ།"
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "སྲིད་ཇུས་ནང་ཡིག་ཆའི་ནད་དུག་དང་ནང་དོན་འཚོལ་ཞིབ།"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "ངོས་ཟིན་ཟིན་པའི malware ཙམ་མ་ཡིན་པར། macros, executables, scripts ཡང་ན་ནང་འཇུག་བྱ་ཡུལ་ཡོད་པའི་ཡིག་ཆ་འགོག"
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ Confluence ཤོག་ངོས་ལ་ཟུར་སྣོན་བྱེད།"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "ཡིག་ཆ་ ConsignO Cloud (Notarius) ལ་གློག་རྡུལ་མཚན་རྟགས་དང་གཞུང་འཛིན་ལག་ཁྱེར་ཆེད་སྐུར།"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "ཁྱེད་ཀྱི ConsignO Cloud ཁོར་ཡུག, /api/v1 ཚུད་པ།"
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "གསང་ཚིག"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "ཁྱེད་ཀྱི་ཚོགས་པས tenant སྤྱོད་ན་ཁོ་ན་དགོས།"
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "སྤྱོད་མཁན་མིང་།"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ལས་སྣོན་བྱེད་སྐབས Discord ལ་བརྡ་འཕྲིན་ཞིག་སྤེལ།"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ཞིག་སྒྲིག་སྦྱོར་བྱེད་ཐེངས་རེར Elasticsearch ནང་ཞིབ་རྩིས་བྱུང་རིམ་ཞིག་དཀར་ཆག་བཟོ།"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "ཡིག་ཆ་གསར་པའི་ཆེད FTP ཡང་ན FTPS ཞབས་ཞུ་ཆས་ལ་འཚོལ་ཞིབ་བྱེད།"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "འབྲེལ་མཐུད་རྣམ་པ།"
+
+[portal.connections.types.ftp.fields.passive.options]
 active = "Active"
-paused = "Paused"
-setup = "Set up"
+passive = "Passive (འོས་སྦྱོར)"
 
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
+[portal.connections.types.ftp.fields.security]
+helperText = "Plain FTP ཡིས་དཔང་ཡིག་དང་ཡིག་ཆ་གསང་སྡོམ་མེད་པར་སྐུར། ཞབས་ཞུ་ཆས་ཀྱིས་རྒྱབ་སྐྱོར་བྱེད་ན FTPS འདེམས།"
+label = "གསང་སྡོམ།"
 
-[policies.toolConfig.info]
-redact = "Social Security དང་དངུལ་ཤོག་ཨང་ལྟ་བུ་ལྟ་བུའི་གསང་བའི་ཞིབ་ཕྲ་རང་འགུལ་གྱིས་འཚོལ་ཏེ་ནག་པོར་སྒྲིག་པས་ ཡིག་ཆ་ནང་ལྟ་མི་ཐུབ།"
-sanitize = "ཡིག་ཆ་ནས་སྦས་པའི JavaScript བསུབ་པས་ མི་ཞིག་ཁ་ཕྱེས་སྐབས་རང་འགུལ་ངང་གང་ཡང་འགུལ་བྱེད་མི་ཚུགས།"
-watermark = "ཤོག་ངོས་རེ་རེ་ལ་མཐོང་ཐུབ་པའི་མཚོན་རྟགས་ (e.g. \"Confidential\") བཀོད་བཀྲམ་བྱེད།"
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "མེད། (plain FTP)"
 
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "སྒོ་བསྡམས"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "སྲིད་ཇུས་འཁོར་སྐབས Google Chat སྟོང་ཆ་ལ་བརྡ་འཕྲིན་ཞིག་སྤེལ།"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ Jira issue ལ་ཟུར་སྣོན་བྱེད།"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "སྲིད་ཇུས་འཁོར་སྐབས་ཡིག་ཆ་ཞིག་ཡང་ན་བརྡ་ཐོ་ཞིག་གློག་འཕྲིན་གྱིས་སྐུར།"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ Nextcloud ནང་ཉར།"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App གསང་ཚིག"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "ཁྱེད་ཀྱིས་གཉེར་བའི Presidio ཞབས་ཞུ་ཆས་སྤྱད་ནས་ཡིག་ཆའི་ཡི་གེའི་ནང་སྒེར་གྱི་གནས་ཚུལ་ངོས་འཛིན།"
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "PDFs ཐོག Microsoft Purview sensitivity labels ཀློག་དང་སྤྱོད།"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "གདམ་རུང་། མིང་གིས label འདེམས་དགོས་ན་ཁོ་ན་དགོས། དེ་མེད་ཀྱང labelling ལས་ཀ་བྱེད།"
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "label རེ་རེའི SiteId ལ་ཐམ་འགོད་བྱེད་པས། Purview-aware ལག་ཆས་ཀྱིས་ཚོགས་པ་གང་གིས་སྤྱད་པ་ཤེས་ཐུབ།"
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "source ཀྱིས་ཀློག་ཐུབ་པ་དང pipeline ཐོན་འབྲས་ཀྱིས་འབྲི་ཐུབ་པའི S3 bucket ཞིག"
+label = "S3 ཉར་ཚགས།"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS ཆེད་སྟོང་པར་བཞག MinIO ཡང་ན S3-compatible ཉར་ཁང་གཞན་ཆེད་འདི་སྒྲིག"
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "ས་ཁུལ།"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "སྲིད་ཇུས་འཁོར་སྐབས་ཡིག་ཆ་ཞིག་ཡང་ན་བརྡ་ཐོ་ཞིག་གློག་འཕྲིན་གྱིས་སྐུར།"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "ཡིག་ཆ་གསར་པའི་ཆེད SFTP (SSH) ཞབས་ཞུ་ཆས་ལ་འཚོལ་ཞིབ་བྱེད།"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "གདམ་རུང་། ཞབས་ཞུ་ཆས་ཀྱི SHA-256 host key fingerprint (`ssh-keyscan host | ssh-keygen -lf -` ནས)། སྒྲིག་ན་ལྡེ་མིག་འདི་སྟོན་པའི་ཞབས་ཞུ་ཆས་ཁོ་ན་དང་ལེན་བྱེད། སྟོང་པ་ཡིན་ན་ཐོག་མར་འབྲེལ་སྐབས་མཐོང་བའི་ལྡེ་མིག་དེ་བརྟན་འཛིན་བྱས་ཏེ་རྗེས་ཀྱི་འགྱུར་བ་དང་ལེན་མི་བྱེད།"
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "སྒེར་ལྡེ་མིག་གིས་བདེན་སྦྱོར་བྱེད་ན་སྟོང་པར་བཞག"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "གདམ་རུང་། གསང་ཚིག་གི་ཚབ་ཏུ་ལྡེ་མིག་གིས་བདེན་སྦྱོར་བྱེད་ཆེད OpenSSH སྒེར་ལྡེ་མིག་སྦྱར།"
+label = "སྒེར་ལྡེ་མིག"
+
+[portal.connections.types.slack]
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ལས་སྣོན་བྱེད་སྐབས Slack ལ་བརྡ་འཕྲིན་ཞིག་སྤེལ།"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS དྲ་རྒྱ་མཉམ་སྤྱོད (Windows ཡང་ན Samba) ལ་ལྟ་ཞིབ་བྱེད།"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "གདམ་རུང་། ཁྱེད་ཀྱི་ཞབས་ཞུ་ཆས་ཀྱིས་སྤྱོད་ན Windows domain ཡང་ན workgroup།"
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ཞིག་སྒྲིག་སྦྱོར་བྱེད་ཐེངས་རེར Splunk ལ་ཞིབ་རྩིས་བྱུང་རིམ་ཞིག་སྐུར།"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Sumo Logic HTTP བསྡུ་ལེན་པ་ལ་ཞིབ་རྩིས་བྱུང་རིམ་ཞིག་སྐུར།"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "སྲིད་ཇུས་འཁོར་སྐབས Teams channel ལ་བརྡ་འཕྲིན་ཞིག་སྤེལ།"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "ཡིག་ཆ་རེ་རེ་ཡང་ན་ཞིབ་ཕྲ་ཁོ་ན་ཁྱེད་ཀྱིས་འདེམས་པའི URL ལ་སྤེལ།"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "སྲིད་ཇུས་ནས Zap ཡང་ན Make scenario སྐུལ་སློང་བྱེད།"
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "ཡིག་ཚགས་ལ་ལྟ།"
+viewSource = "GitHub ཐོག source ལ་ལྟ།"
+
+[portal.docs.authentication]
+codeCaption = "རེ་ཞུ་རེ་རེ།"
+eyebrow = "འགོ་འཛུགས།"
+lead = "རེ་ཞུ་ཡོངས་ཀྱིས bearer token གྱིས་བདེན་སྦྱོར་བྱེད། Key རྣམས་ཁོར་ཡུག་རེ་རེའི་ཁྱབ་ཁོངས་ཡིན་ཞིང་། rotate མ་བྱས་ན་ནམ་ཡང་དུས་ཚོད་མི་ཡོལ།"
+liveKey = "Production keys — རིན་འབབ་བསྡུ་བ། ཁྱེད་ཀྱི plan ལྟར rate-limited།"
+testKey = "Sandbox keys — རིན་མེད། synthetic fixtures ཕྱིར་སྤྲོད།"
+title = "བདེན་སྦྱོར།"
+
+[portal.docs.components]
+codeCaption = "viewer ནང་འཇུག"
+eyebrow = "COMPONENTS"
+lead = "བསྐྱར་ཞིབ་གྲལ་སྒྲིག་དང་ཡིག་ཆ་ཞིབ་བཤེར་ལ་འཇུག་སྒྲིལ་ཆོག་པའི UI། རང་གི་བཟོ་ལྟ་སྤྱོད་པའམ་མཉམ་སྐྱེལ་བྱས་པའི theme སྤྱོད།"
+title = "ཐད་ཀར་སྤྱོད་ཆོག་པའི་ལྟ་ཆས"
+
+[portal.docs.endpoints]
+eyebrow = "API ཟུར་བལྟ"
+fieldCount_one = "{{count}} ས་ཁོངས"
+fieldCount_other = "{{count}} ས་ཁོངས"
+filterAll = "ཚང་མ"
+filterAriaLabel = "vertical ལྟར endpoints འཚག"
+lead = "ཡིག་ཆའི་རིགས་ཚང་མ་རིགས་ཅན endpoint ཡིན། ཡིག་ཆ POST བྱས་ནས schema ཡིས་ར་སྤྲོད་ཟིན་པའི JSON ལེན། གཤམ་ནས vertical ལྟར་འཚག"
+title = "Endpoints"
+
+[portal.docs.errors]
+codeCaption = "422 Unprocessable Entity"
+eyebrow = "API ཟུར་བལྟ"
+lead = "ནོར་འཁྲུལ་གྱིས་བརྟན་པའི་འཕྲུལ་ཆས་ཀྱིས་ཀློག་ཐུབ་པའི code དང་མིའི་འཕྲིན་ཐུང་ཕྱིར་སྤྲོད་བྱེད། རམ་འདེགས་ཆེད་4xx body ནང་རྟག་ཏུ request_id ཚུད་ཡོད།"
+title = "ནོར་འཁྲུལ"
+
+[portal.docs.nav]
+ariaLabel = "ཡིག་ཚགས"
+
+[portal.docs.nav.empty]
+description = "ཡིག་ཚགས་དཀར་ཆག་འགེལ་མ་ཐུབ།"
+title = "Docs སྤྱོད་མི་ཐུབ"
+
+[portal.docs.quickstart]
+eyebrow = "འགོ་འཛུགས"
+lead = "རང་གི་ཡིག་ཆ་ཐོག་མ་རིགས་ཅན endpoint ལ་སྐུར་ནས་གོམ་པ་གསུམ་ནང་སྒྲིག་འགོད་ཅན JSON ཕྱིར་ལེན། དཔེ་གཞི་སྦྱོང་བརྡར་མེད། prompt engineering མེད།"
+title = "མྱུར་འགོ"
+
+[portal.docs.quickstart.callout]
+bodyAfterLink = "ལྟོས།"
+bodyBeforeLink = "validation, redaction, delivery བཅས་སྦྲེལ་བར་འབོད་སྐུར་གཅིག་པ་དེ pipeline ནང་མཐུད་པའམ MCP ཐོག agent ལ་མངོན་པར་བྱོས — copy-paste recipes ཆེད་"
+label = "རྗེས་མ:"
+link = "Playbooks"
+
+[portal.docs.quickstart.step1]
+body = "Infrastructure tab ནས scoped key ཞིག་བཟོས། Keys ལ rate limits དང་གདམ་གསེས་ཅན IP allowlist ཡོད། དེ་རང་གི shell ནང་ཕྱིར་འདྲེན་བྱོས:"
+title = "API key སྤྲོད"
+
+[portal.docs.quickstart.step2]
+body = "ཡིག་ཆ་ཞིག་རིགས་ཅན endpoint གང་རུང་ལ POST བྱོས། endpoint ཡིས་ཁྱེད་ལ་ཕྱིར་འཐོབ་པའི schema གཏན་འཁེལ་བྱེད — འདིར་འཛིན་ཤོག་འདོན་ཆས་ཡིན།"
+snippetCaption = "འཛིན་ཤོག་འདོན"
+title = "ཡིག་ཆ་སྐུར"
+
+[portal.docs.quickstart.step3]
+body = "ལན་ཚང་མ endpoint schema ལ་བསྡུར་ནས་ར་སྤྲོད་བྱེད་པ་དང་། confidence score དང་ས་ཁོངས་རེ་རེའི་ཁུངས་རྗེས་ཡོད།"
+codeCaption = "200 OK"
+title = "སྒྲིག་འགོད་ཅན་གྲུབ་འབྲས་ཀློག"
+
+[portal.docs.rateLimits]
+burst = "Burst"
+codeCaption = "429 Too Many Requests"
+concurrency = "Concurrency"
+eyebrow = "འགོ་འཛུགས"
+lead = "ཚད་བཀག་ཁྱེད་ཀྱི plan དང་མཉམ་དུ་རྒྱ་སྐྱེད། 429 ལན་ནང Retry-After header ཚུད་ཡོད། SDKs རང་འགུལ་གྱིས་ཕྱིར་འཐེན་བྱེད།"
+requestsPerMinute = "སྐར་མ་རེའི་རེ་ཞུ"
+title = "Rate limits དང quotas"
+
+[portal.docs.recipes]
+cloneButton = "Recipe clone བྱོས"
+eyebrow = "PLAYBOOKS"
+lead = "འབྱུང་ཁུངས། operations དང་དམིགས་ས་སྦྲེལ་བའི་མགོ་ནས་མཇུག་བར་གྱི patterns། རེ་རེ་ཁྱེད་ཀྱིས clone བྱེད་ཐུབ་པའི pipeline ཞིག་ལ་སྦྱོར།"
+title = "Recipes"
+
+[portal.docs.sdks]
+eyebrow = "SDKS"
+lead = "typed responses, automatic retries དང streaming uploads ཡོད་པའི first-party clients། ཚང་མས endpoint catalogue གཅིག་པ་རྗེས་འདེད་བྱེད།"
+title = "དངོས་གཞི SDKs"
+
+[portal.docs.sdks.status]
+beta = "Beta"
+deprecated = "Deprecated"
+
+[portal.docs.search]
+empty = "མཐུན་པའི docs མེད"
+placeholder = "Docs འཚོལ"
+results = "{{count}} གྲུབ་འབྲས"
+
+[portal.docs.skills]
+eyebrow = "SKILLS"
+lead = "ཁྱེད་ཀྱི agent གིས་ལག་ཆ་གཅིག་ལྟར་འབོད་སྤྱོད་བྱེད་པའི་མཉམ་སྒྲིལ་དང་མིང་ཅན་ནུས་པ། skill རེ་རེ་ནི evals མཐུད་པའི་གཏན་འཁེལ་ཅན op chain ཡིན།"
+title = "Agent skills"
+
+[portal.docs.toc]
+title = "ཤོག་ངོས་འདིར"
+
+[portal.docs.webhooks]
+codeCaption = "document.processed"
+eyebrow = "API ཟུར་བལྟ"
+lead = "document.processed, pipeline.completed, དང quota.threshold བྱུང་རྐྱེན་ལ subscribe བྱོས། Payloads ལ HMAC-SHA256 ཡིས་མིང་རྟགས་བཀོད་ཡོད།"
+title = "Webhooks"
+
+[portal.docs.webhooks.callout]
+afterHelper = "helper མཉམ་སྐྱེལ་བྱེད།"
+beforeHelper = " header དེ་ཁྱེད་ཀྱི signing secret དང་བསྡུར་ནས་ར་སྤྲོད་བྱོས། SDKs ཡིས་"
+beforeSignature = "payload ལ་ཡིད་མ་ཆེས་གོང་"
+
+[portal.documents]
+exportCsv = "CSV ཕྱིར་འདྲེན"
+search = "ཡིག་ཆའི་མིང་། ID... ལྟར་འཚོལ"
+subtitle = "ཁྱེད་ཀྱི org གིས་ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ཚང་མ། དེའི་ལས་སྣོན་ཟིན་ཐོ་ཆ་ཚང་དང་བཅས། ནང་དོན་ཐོབ་དབང་ནི་རེ་ཞུ་དགོས་པས་བཀག་ཡོད།"
+title = "ཡིག་ཆ"
+
+[portal.documents.audit]
+approved = "ཆོག་མཆན་ཐོབ་པ"
+archived = "ཡིག་མཛོད་དུ་བཅུག་པ"
+elevation = "ཐོབ་དབང་སྤར་བ"
+empty = "ད་དུང་བྱུང་རྐྱེན་ཟིན་ཐོ་མེད།"
+extracted = "ལས་སྣོན་ཟིན་པ"
+flagged = "བསྐྱར་ཞིབ་དགོས"
+ingested = "ནང་འཇུག་ཟིན་པ"
+reviewed = "བསྐྱར་ཞིབ་ནང"
+
+[portal.documents.drawer]
+sectionsAriaLabel = "ཡིག་ཆའི་ཞིབ་ཕྲའི་སྡེ་ཚན"
+
+[portal.documents.drawer.tabs]
+audit = "Audit"
+extractions = "འདོན་ལེན"
+overview = "སྤྱི་བཤད"
+
+[portal.documents.elevation]
+requestAccess = "ཐོབ་དབང་རེ་ཞུ"
+
+[portal.documents.elevation.active]
+description = "གནས་སྐབས་ཆོག་མཆན — ཐོབ་དབང་ཟིན་ཐོར་འགོད་ཅིང་དུས་ཚད་ཡོད།"
+descriptionFourEyes = "གནས་སྐབས་ཆོག་མཆན — ལས་རོགས་བསྐྱར་ཞིབ་པར་བརྡ་ཐོ་བཏང་ཟིན (four-eyes)།"
+title = "ཐོབ་དབང {{time}} ནང་དུ་དུས་ཡོལ་འགྲོ"
+
+[portal.documents.elevation.gated]
+description = "ནང་དོན་ནི zero-standing-access ཡིས་བཀག་ཡོད། རེ་ཞུ་བྱས་ན་དུས་ཚད་ཅན་གྱི་ཆོག་མཆན་འགོ་འཛུགས།"
+descriptionFourEyes = "ནང་དོན་ནི zero-standing-access ཡིས་བཀག་ཡོད། རེ་ཞུ་བྱས་ན་དུས་ཚད་ཅན་གྱི་ཆོག་མཆན་འགོ་འཛུགས་ཤིང་ལས་རོགས་བསྐྱར་ཞིབ་པར་བརྡ་ཐོ་གཏོང (four-eyes)།"
+title = "ཚོར་སླའི་ཡིག་ཆ"
+
+[portal.documents.extractions]
+empty = "ཡིག་ཆ་འདི་ནས་ས་ཁོངས་གང་ཡང་འདོན་ལེན་མ་བྱས།"
+masked = "འདོན་ལེན་བྱས་པའི་ས་ཁོངས་སྦས་ཡོད། ཡིག་ཆ་འདིའི་ནང་དོན་ལྟ་བར་དུས་ཚད་ཅན་གྱི་ཐོབ་དབང་རེ་ཞུ་བྱོས།"
+
+[portal.documents.extractions.columns]
+confidence = "ཡིད་ཆེས་ཚད"
+field = "ས་ཁོངས"
+value = "རིན་ཐང"
+
+[portal.documents.filters]
+all = "ཚང་མ"
+ariaLabel = "གནས་ཚུལ་ལྟར་ཡིག་ཆ་འཚག"
+flagged = "རྟགས་བཀོད་པ"
+inReview = "བསྐྱར་ཞིབ་ནང"
+processed = "ལས་སྣོན་ཟིན་པ"
+
+[portal.documents.overview]
+action = "Pipeline / བྱ་སྤྱོད"
+product = "ཐོན་རྫས"
+received = "དུས་ཚོད"
+status = "གནས་ཚུལ"
+type = "རིགས"
+user = "སྤྱོད་མཁན"
+
+[portal.documents.queue.empty]
+connectSource = "འབྱུང་ཁུངས་མཐུད"
+createPipeline = "Pipeline བཟོ"
+description = "འབྱུང་ཁུངས་ཀྱིས་ཡིག་ཆ་ཁྱེད་ཀྱི pipelines ནང་མཁོ་སྤྲོད་བྱས་ན་དེ་ཚོ་བསྐྱར་ཞིབ་ཆེད་འདིར་མངོན།"
+title = "གྲལ་སྒྲིག་ནང་ཡིག་ཆ་མེད"
+
+[portal.documents.status]
+error = "ནོར་འཁྲུལ"
+flagged = "བསྐྱར་ཞིབ་དགོས"
+inReview = "བསྐྱར་ཞིབ་ནང"
+processed = "ལས་སྣོན་ཟིན་པ"
+
+[portal.documents.table]
+auto = "Auto"
+editorAction = "Editor"
+empty = "ཡིག་ཆ་གང་ཡང་འཚག་ཆས་འདི་དང་མི་མཐུན།"
+rowActions = "ཕྲེང་བྱ་སྤྱོད"
+sensitiveLabel = "ཚོར་སླ"
+sensitiveTitle = "ཚོར་སླ — ཐོབ་དབང་དགོས"
+
+[portal.documents.table.columns]
+action = "Pipeline / བྱ་སྤྱོད"
+document = "ཡིག་ཆ"
+product = "ཐོན་རྫས"
+status = "གནས་ཚུལ"
+time = "དུས་ཚོད"
+user = "སྤྱོད་མཁན"
+
+[portal.editorAdmin]
+subtitle = "Stirling PDF Editor འགྲེམ་སྤེལ་བྱོས། self-hosted instances རང་གི org དང་སྦྱོར། གནས་གཅིག་ནས་འཁོར་བཞིན་པའི fleet — targets, health, credentials དང offline activation སྐྱོང་།"
+title = "Editor འགྲེམ་སྤེལ"
+
+[portal.editorAdmin.health.columns]
+activeUsers = "འགུལ་སྐྱོད་སྤྱོད་མཁན"
+host = "Host"
+lastSeen = "མཐའ་མར་མཐོང་བ"
+region = "ས་ཁུལ"
+status = "གནས་ཚུལ"
+version = "Version"
+
+[portal.editorAdmin.health.empty]
+description = "Target ཞིག་འགྲེམ་སྤེལ་དང་སྦྱོར་བ་བྱས་ནས་འདིར live instance health ལྟོས།"
+title = "ཡར་ཞུ་བྱེད་པའི instances མེད"
+
+[portal.editorAdmin.offlineActivation]
+enterpriseTag = "Enterprise"
+generateButton = "Offline bundle བཟོ"
+lockCopy = "Offline དང on-prem activation ནི Enterprise ཡི་ཆ་ཤས་ཡིན།"
+subtitle = "ཕྱིར་འབྲེལ་དྲ་ལམ་མེད་པའི offline ཡང་ན on-prem install ཆེད་མིང་རྟགས་བཀོད་པའི activation bundle བཟོ། དེ instance ལ་སྤོ་བཤུད་བྱས་ནས first-run setup སྐབས་སྤྱོད།"
+talkToSales = "Sales ལ་འབྲེལ་གཏུག"
+title = "Air-gapped activation"
+
+[portal.editorAdmin.offlineActivation.readyBanner]
+description = "{{file}} ལ་མིང་རྟགས་བཀོད་ཟིན་ཞིང་སྤོ་བཤུད་བྱེད་རུང་ཡིན། དེས instance གཅིག་སྐུལ་སློང་བྱེད་ཅིང་ཉིན་14 ནང་དུ་དུས་ཡོལ་འགྲོ"
+title = "Bundle གྲ་སྒྲིག"
+
+[portal.editorAdmin.pairing]
+generated = "བཟོས་ཟིན ✓"
+generateNewCode = "Code གསར་པ་བཟོ"
+lockCopy = "IaC provisioning ནི Enterprise ཡི་ཆ་ཤས་ཡིན།"
+rotate = "Rotate"
+talkToSales = "Sales ལ་འབྲེལ་གཏུག"
+
+[portal.editorAdmin.sections.health]
+sub = "Editor instance ཚང་མས་ཡར་ཞུ་བྱེད — version, region, status, last seen དང active users།"
+title = "Instance health"
+
+[portal.editorAdmin.sections.pairing]
+sub = "Self-hosted editor ཞིག org འདི་དང་མཐུད། token བཟོ། code ཐུང་ངུ་སྤྲོད། ཡང་ན IaC བརྒྱུད་མཐུད།"
+title = "Pairing"
+
+[portal.editorAdmin.sections.targets]
+sub = "Editor འཁོར་ས། self-hosted instance སློང་བར snippet འདྲ་བཤུས་བྱོས། ཡང་ན ops མེད་པའི Managed Cloud སྤྱོད།"
+title = "Deployment targets"
+
+[portal.editorAdmin.serviceToken]
+currentToken = "ད་ལྟའི token"
+lastRotated = "མཐའ་མཇུག་ཏུ་བསྐོར་བ"
+rotateButton = "ཞབས་ཞུའི་མཚོན་རྟགས་བསྐོར་བ"
+subtitle = "དཔེ་གཞི་ཁག་གིས་དཔང་ཡིག་འདི་སྤྱད་ནས་རྩ་འཛུགས་ལ་ཐོབ་ཐང་ར་སྤྲོད་བྱེད། དུས་བཀག་ལྟར་བསྐོར་བའམ། ཕྱིར་ཤོར་བ་དོགས་པའི་རྗེས་སུ་འཕྲལ་མར་བསྐོར་བྱོས།"
+title = "ཞབས་ཞུའི་མཚོན་རྟགས"
+
+[portal.editorAdmin.serviceToken.rotatedBanner]
+description = "མཚོན་རྟགས་གསར་པ་སྤྲད་ཟིན། ཆུ་ཚོད་24ཡི་བར་ཡངས་ནང་རང་གིས་གནས་སྡོད་བྱས་པའི་དཔེ་གཞི་རེ་རེའི STIRLING_SERVICE_TOKEN གསར་སྒྱུར་བྱོས། དེ་མིན་ན་དེ་དག་དྲ་ཕྱིར་ལྷུང་སྲིད།"
+title = "འཁོར་སྐྱོད་ཀྱི་དཔེ་གཞི་བསྐོར་བ"
+
+[portal.editorAdmin.status]
+degraded = "སྤུས་ཚད་ཉམས་པ"
+healthy = "བདེ་ཐང"
+offline = "དྲ་ཕྱི"
+pairing = "ཆ་སྒྲིག་བཞིན"
+
+[portal.editorAdmin.targets]
+instanceCount_one = "{{count}} དཔེ་གཞི"
+instanceCount_other = "{{count}} དཔེ་གཞི"
+talkToSales = "ཚོང་འཚོང་ཚན་པར་འབྲེལ་བ་བྱོས"
+upgradePlan = "འཆར་གཞི་རིམ་སྤར"
+
+[portal.editorAdmin.targets.lock]
+enterprise = "On-prem དང Kubernetes རང་གིས་གནས་སྡོད་བྱེད་པ་ནི Enterprise ཡི་ཆ་ཤས་ཡིན།"
+paid = "Docker དང Kubernetes སྤྱད་པའི་རང་གིས་གནས་སྡོད་བྱེད་པ་ནི་སྤྲོད་དངུལ་འཆར་གཞི་ཐོག་ནས་ཁ་ཕྱེ་ཐུབ།"
+
+[portal.editorAdmin.targets.state]
+available = "སྤྱོད་རུང"
+locked = "བསྡམས་པ"
+running = "འཁོར་སྐྱོད་བཞིན"
+
+[portal.errorBoundary]
+description = "མཐོང་ངོས་འདིར་མ་བསམ་པའི་ནོར་འཁྲུལ་ཞིག་བྱུང་། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས། ཡང་ན་ཟུར་གྱི་དཀར་ཆག་ནས་སྡེ་ཚན་གཞན་ཞིག་འདེམས།"
+retry = "ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས"
+title = "ཤོག་ངོས་འདིར་གནད་དོན་ཞིག་བྱུང་།"
+
+[portal.home.download]
+back = "ཕྱིར་ལོག"
+body = "ཅོག་ངོས་ཉེར་སྤྱོད་ཕབ་ལེན་བྱོས། ཡང་ན server རང་གིས་གནས་སྡོད་བྱོས།"
+done = "ལེགས་གྲུབ"
+guide = "{{name}} ལམ་སྟོན་ཁ་ཕྱེ"
+openInBrowser = "དེའི་ཚབ་ཏུ་བཤེར་ཆས་ནང་ཁ་ཕྱེ"
+sectionDesktop = "ཅོག་ངོས་ཉེར་སྤྱོད"
+sectionSelfHosted = "རང་གིས་གནས་སྡོད"
+title = "Stirling PDF Editor སྒྲིག་འཇུག"
+
+[portal.home.download.docker]
+detailBody = "ཁྱེད་ཀྱི server ཐོག་དངོས་སུ་འགྲེམས་པའི image འཁོར་སྐྱོད་བྱོས།"
+note = " :8080 ལ་ཁ་ཕྱེ། སྔོན་སྒྲིག་ནང་འཛུལ: admin / stirling."
+tagline = "server དེ container ནང་འཁོར་སྐྱོད་བྱོས"
+title = "Docker"
+variantFat = "ཆེན་པོ"
+variantLite = "ཤིན་ཏུ་ཡང་མོ"
+variantStandard = "ཚད་ལྡན"
+
+[portal.home.download.kubernetes]
+detailBody = "དངོས་སུ་འགྲེམས་པའི Helm chart སྒྲིག་འཇུག་བྱོས།"
+note = "སྒྲིག་འགོད་རྒྱུན་ཉར་བྱེད་པར /configs ལ PVC ཁ་སྣོན་བྱོས།"
+tagline = "Helm སྤྱད་ནས cluster ལ་འགྲེམས་སྤེལ་བྱོས"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "ཁྱེད་ཀྱི distribution ཆེད་ཀྱི native builds།"
+guideBtn = "Linux སྒྲིག་འཇུག་གདམ་གསེས་ལྟ་བ"
+note = "སྤྱིར་བཏང distros ལ AppImage, .deb དང .rpm builds ཡོད།"
+tagline = "ཁྱེད་ཀྱི distro ཆེད་ཀྱི native desktop app"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "ཡང་ན Homebrew བརྒྱུད་ནས"
+detailBody = "installer འཁོར་སྐྱོད་བྱོས། ཡང་ན Homebrew སྤྱོད།"
+downloadBtn = "macOS ཆེད་ཕབ་ལེན"
+tagline = "Apple silicon དང Intel ཆེད་ཀྱི native app"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "bare metal server ཐོག .jar འཁོར་སྐྱོད་བྱོས།"
+downloadBtn = ".jar ཕབ་ལེན"
+note = "Java 21+ དགོས། :8080 ལ་ཁ་ཕྱེ། སྔོན་སྒྲིག་ནང་འཛུལ admin / stirling།"
+runLabel = "དེ་ནས་འཁོར་སྐྱོད་བྱོས"
+tagline = "bare metal server ཐོག .jar འཁོར་སྐྱོད་བྱོས"
+title = "ལག་སྒྲིག server སྒྲིག་འགོད"
+
+[portal.home.download.windows]
+altLabel = "ཡང་ན winget བརྒྱུད་ནས"
+detailBody = "installer འཁོར་སྐྱོད་བྱོས། ཡང་ན package manager སྤྱོད།"
+downloadBtn = "installer ཕབ་ལེན"
+tagline = "Microsoft Windows ཆེད་ཀྱི native app"
+title = "Windows"
+
+[portal.home.editor]
+activeOfDeployed = "ཟླ་འདིར {{total}} ནས {{active}} སྤྱོད་བཞིན"
+name = "PDF Editor"
+open = "བཤེར་ཆས་ནང་ཁ་ཕྱེ"
+updated = "{{time}} ལ་གསར་སྒྱུར་བྱས"
+
+[portal.home.editor.deploy]
+finish = "འགྲེམས་སྤེལ་མཇུག་སྒྲིལ"
+options = "འགྲེམས་སྤེལ་གདམ་གསེས་ལྟ་བ"
+start = "Editor འགྲེམས་སྤེལ་བྱོས"
+
+[portal.home.editor.target]
+cloud = "དོ་དམ་བྱས་པའི Cloud"
+docker = "རང་གིས་གནས་སྡོད · Docker"
+kubernetes = "རང་གིས་གནས་སྡོད · Kubernetes"
+
+[portal.home.greeting]
+afternoon = "ཉིན་གུང་བདེ་ལེགས"
+evening = "དགོང་དྲོ་བདེ་ལེགས"
+morning = "སྔ་དྲོ་བདེ་ལེགས"
+
+[portal.infrastructure]
+manageEditorDeployment = "Editor འགྲེམས་སྤེལ་དོ་དམ"
+sectionsAriaLabel = "རྨང་གཞི་སྒྲིག་བཀོད་སྡེ་ཚན"
+subtitle = "ཁྱེད་ཀྱི Stirling ལས་ཁུལ་གྱི་འགྲེམས་སྤེལ། དཔང་ཡིག བདེ་འཇགས་གནས་བབ། གསོག་ཉར། དང་ཞིབ་བཤེར་རྗེས་ཤུལ།"
+title = "རྨང་གཞི་སྒྲིག་བཀོད"
+
+[portal.infrastructure.apiKeys]
+createKey = "ལྡེ་མིག་གསར་བཟོ"
+heading = "API ལྡེ་མིག"
+subheading = "རེ་རེར་རང་གི་སྤྱོད་ཚད་རྗེས་འདེད་ཡོད་པའི་མི་སྒེར་གྱི་དཔང་ཡིག"
+
+[portal.infrastructure.apiKeys.card]
+created = "བཟོས་པ"
+lastUsed = "མཐའ་མཇུག་སྤྱད་པ"
+revoke = "ལྡེ་མིག་ཕྱིར་འཐེན"
+usageMonth = "ཟླ་འདིའི་སྤྱོད་ཚད"
+usageToday = "དེ་རིང་གི་སྤྱོད་ཚད"
+
+[portal.infrastructure.apiKeys.empty]
+description = "Stirling API འབོད་འགོ་འཛུགས་པར་ལྡེ་མིག་ཅིག་གསར་བཟོ་བྱོས།"
+title = "ད་དུང API ལྡེ་མིག་མེད"
+
+[portal.infrastructure.apiKeys.error]
+load = "ཁྱེད་ཀྱི API ལྡེ་མིག་འཇུག་མ་ཐུབ། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" ཕྱིར་འཐེན་ནམ? ལྡེ་མིག་འདི་ད་དུང་སྤྱོད་བཞིན་པའི integration གང་ཡིན་ཡང་འཕྲལ་མར 401 ནོར་འཁྲུལ་འབྱོར་འགོ་འཛུགས་སྲིད། འདི་ཕྱིར་སློག་མི་ཐུབ།"
+cancel = "དོར་བ"
+confirm = "ལྡེ་མིག་ཕྱིར་འཐེན"
+title = "API ལྡེ་མིག་ཕྱིར་འཐེན"
+
+[portal.infrastructure.attestationLabel]
+attested = "དཔང་འདོན་བྱས་པ"
+inScope = "ཁྱབ་ཁོངས་ནང"
+notApplicable = "N/A"
+
+[portal.infrastructure.audit]
+filterAriaLabel = "རིགས་དབྱེ་ལྟར་ཞིབ་བཤེར་དོན་རྐྱེན་འཚག་བྱོས"
+heading = "ཞིབ་བཤེར་ཉིན་ཐོ"
+latencyValue = "{{value}} ms"
+noEventsInCategory = "རིགས་དབྱེ་འདིར་དོན་རྐྱེན་མེད།"
+subheading = "ཁྱེད་ཀྱི་ལས་ཁུལ་ཡོངས་ཀྱི་ཐོབ་ཐང་ར་སྤྲོད། སྒྲིག་འགོད། དང་ལས་སྒྲུབ་དོན་རྐྱེན་ཚང་མ།"
+
+[portal.infrastructure.audit.columns]
+actor = "བྱེད་པ་པོ"
+event = "དོན་རྐྱེན"
+latency = "དུས་འགྱངས"
+status = "གནས་ཚུལ"
+target = "ཐོན་ཁུངས"
+timestamp = "དུས་ཐམ"
+
+[portal.infrastructure.audit.empty]
+description = "ལས་ཁུལ་གྱི་བྱེད་སྒོ་བྱུང་བ་དང་ལྷན་འདིར་མངོན་ཡོང་།"
+title = "ཞིབ་བཤེར་དོན་རྐྱེན་མེད"
+
+[portal.infrastructure.audit.export]
+cancel = "དོར་བ"
+error = "ཕྱིར་འདྲེན་ཕམ་པ། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
+exportButton = "ཕྱིར་འདྲེན"
+exporting = "ཕྱིར་འདྲེན་བཞིན…"
+fieldsLegend = "ཀ་ཐིག"
+format = "Format"
+open = "ཕྱིར་འདྲེན"
+subtitle = "ཞིབ་བཤེར་དོན་རྐྱེན CSV ཡང་ན JSON དུ་ཕབ་ལེན་བྱོས། ཚུད་དགོས་པའི་ཀ་ཐིག་འདེམས།"
+title = "ཞིབ་བཤེར་ཉིན་ཐོ་ཕྱིར་འདྲེན"
+
+[portal.infrastructure.audit.export.fields]
+date = "ཚེས་གྲངས"
+documentName = "ཡིག་ཆའི་མིང"
+ipAddress = "IP address"
+outcome = "མཇུག་འབྲས"
+tool = "Tool"
+username = "སྤྱོད་མཁན་མིང"
+
+[portal.infrastructure.audit.filters]
+all = "ཚང་མ"
+auth = "ཐོབ་ཐང་ར་སྤྲོད"
+config = "སྒྲིག་འགོད"
+elevation = "དབང་ཚད་སྤར་བ"
+policy = "སྲིད་ཇུས"
+processing = "ལས་སྒྲུབ"
+security = "བདེ་འཇགས"
+
+[portal.infrastructure.audit.forbidden]
+description = "ཞིབ་བཤེར་ཉིན་ཐོ་ནི་རུ་ཁག་འགོ་ཁྲིད་དང admin ལ་སྤྱོད་རུང་། ཐོབ་ཐང་ཆེད་ཁྱེད་ཀྱི་རུ་ཁག་འགོ་ཁྲིད་དམ admin ལ་ཞུས།"
+title = "ཁྱེད་ལ་སྤྱོད་ཐོབ་མེད"
+
+[portal.infrastructure.audit.metrics]
+config = "སྒྲིག་འགོད"
+policy = "སྲིད་ཇུས"
+processing = "ལས་སྒྲུབ"
+totalEvents = "དོན་རྐྱེན་སྤྱི་བསྡོམས · 24h"
+
+[portal.infrastructure.auditCatLabel]
+auth = "ཐོབ་ཐང་ར་སྤྲོད"
+config = "སྒྲིག་འགོད"
+elevation = "དབང་ཚད་སྤར་བ"
+policy = "སྲིད་ཇུས"
+processing = "ལས་སྒྲུབ"
+security = "བདེ་འཇགས"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "ནོར་འཁྲུལ"
+info = "ཆ་འཕྲིན"
+success = "ལེགས་གྲུབ"
+warning = "ཉེན་བརྡ"
+
+[portal.infrastructure.certLabel]
+certified = "ལག་ཁྱེར་ཐོབ་པ"
+inProgress = "ལས་སྒྲུབ་བཞིན"
+notStarted = "འགོ་བཙུགས་མེད་པ"
+
+[portal.infrastructure.createKey]
+cancel = "དོར་བ"
+createKey = "ལྡེ་མིག་གསར་སྐྲུན"
+done = "ལེགས་གྲུབ"
+keyNameLabel = "ལྡེ་མིག་གི་མིང་"
+keyNamePlaceholder = "དཔེར་ན། ཐོན་སྐྱེད་ནང་འཇུག"
+secretKeyCaption = "གསང་བའི་ལྡེ་མིག"
+secretWarning = "འདི་གསང་བའི་དོ་དམ་ཆས་ནང་ཉར་ཚགས་བྱོས། Stirling གིས་ནམ་ཡང་ཧེ་ཤ་ཁོ་ན་ཉར་བས། རྗེས་སུ་དེ་སླར་གསོ་བྱེད་ཐབས་མེད།"
+subtitle = "རྗེས་སུ་ངོས་འཛིན་ཐུབ་པའི་ཆེད་ལྡེ་མིག་ལ་མིང་ཞིག་སྤྲོད། ཁྱེད་ཀྱིས་དུས་ནམ་ཡང་དེ་ཕྱིར་འཐེན་བྱེད་ཆོག"
+subtitleCreated = "ད་ལྟ་གསང་བ་འདི་འདྲ་བཤུས་བྱོས — འདི་ཡང་བསྐྱར་མི་སྟོན།"
+title = "API ལྡེ་མིག་གསར་སྐྲུན"
+titleCreated = "ལྡེ་མིག་གསར་སྐྲུན་ཟིན་པ"
+
+[portal.infrastructure.deployLabel]
+live = "ད་ལྟ་འཁོར་སྐྱོད"
+queued = "གྲལ་དུ་བསྒུགས་པ"
+rolledBack = "ཕྱིར་ལོག་བྱས་པ"
+rolling = "ཁྱབ་སྤེལ་བྱེད་བཞིན་པ"
+
+[portal.infrastructure.deployments]
+msValue = "{{value}} ms"
+throughputValue = "{{value}}/min"
+
+[portal.infrastructure.deployments.deployColumns]
+deployedBy = "བཀོད་སྤྱོད་བྱེད་མཁན"
+environment = "ཁོར་ཡུག"
+product = "ཐོན་རྫས"
+status = "གནས་ཚུལ"
+version = "པར་གཞི"
+when = "དུས་ཚོད"
+
+[portal.infrastructure.deployments.recent]
+heading = "ཉེ་ཆར་གྱི་བཀོད་སྤྱོད"
+subheading = "ཐོན་རྫས་དང་ཁོར་ཡུག་ཁག་གི་ཁྱབ་སྤེལ་གསར་ཤོས།"
+
+[portal.infrastructure.deployments.regionColumns]
+instances = "དཔེ་ཚན"
+latency = "འགོར་འགྱངས"
+load = "ཁུར་པོ"
+p99 = "P99"
+region = "ས་ཁུལ"
+status = "གནས་ཚུལ"
+throughput = "ཐོན་ཚད"
+uptime = "འཁོར་སྐྱོད་དུས་ཡུན"
+version = "པར་གཞི"
+
+[portal.infrastructure.deployments.regions]
+heading = "ས་ཁུལ"
+subheading = "བཀོད་སྤྱོད་ཟིན་པའི Stirling ས་ཁུལ་རེ་རེའི་དངོས་སྐབས་བདེ་ཐང་ — འགོར་འགྱངས། ཁུར་པོ། ཁྱབ་སྤེལ་པར་གཞི།"
+
+[portal.infrastructure.deployments.regions.empty]
+description = "ཁྱེད་ཀྱི་ལས་ས་མཁོ་སྒྲུབ་ཟིན་རྗེས། བཀོད་སྤྱོད་ཟིན་པའི་ས་ཁུལ་འདིར་མངོན་ཡོང་།"
+title = "ས་ཁུལ་གང་ཡང་བཀོད་སྤྱོད་བྱས་མེད"
+
+[portal.infrastructure.keyLabel]
+active = "ཤུགས་ལྡན"
+revoked = "ཕྱིར་འཐེན་བྱས་པ"
+
+[portal.infrastructure.modelLabel]
+active = "ཤུགས་ལྡན"
+degraded = "ཉམས་པ"
+disabled = "ནུས་མེད"
+
+[portal.infrastructure.models]
+heading = "མོ་ཌེལ"
+msValue = "{{value}} ms"
+subheading = "ཁྱེད་ཀྱི་ལས་ས་ཡོངས་སུ་ཡིག་ཆ་ལས་སྣོན་ལ་ནུས་ཤུགས་སྤྲོད་པའི་མོ་ཌེལ་དཀར་ཆག་དང་ལམ་སྟོན།"
+
+[portal.infrastructure.models.byom]
+description = "ས་གནས་ནང་གི་ཡང་ན་རང་སྐྱོང་གི་མོ་ཌེལ་ཞིག་ཐོ་འགོད་བྱས་ནས། གཞི་གྲངས་གནས་སྡོད་ཚད་བཀག་ལྡན་པའི་ལས་སྣོན་ཆེད་ས་ཁུལ་ཞིག་ལ་གཏན་འཛིན་བྱོས།"
+title = "རང་གི་མོ་ཌེལ་འཁྱེར་ཡོང་"
+
+[portal.infrastructure.models.catalogue]
+heading = "དཀར་ཆག"
+sub = "དངོས་སྐབས་འགོར་འགྱངས་དང་རིན་གོང་ལྡན་པའི། ཁྱེད་ཀྱི་ལས་ས་ལ་སྤྱོད་རུང་བའི་དོ་དམ་མོ་ཌེལ།"
+subEnterprise = "དོ་དམ་མོ་ཌེལ། རང་གི་མོ་ཌེལ། ས་གནས་ནང་གི་མོ་ཌེལ་ — ས་ཁུལ་རེ་རེར་གཏན་འཛིན་བྱེད་ནུས་ལྡན།"
+
+[portal.infrastructure.models.catalogue.empty]
+description = "ཁྱེད་ཀྱི་ལས་སའི་དཀར་ཆག་ནང་གི་མོ་ཌེལ་འདིར་མངོན་ཡོང་།"
+title = "མོ་ཌེལ་སྤྱོད་རུང་གང་ཡང་མེད"
+
+[portal.infrastructure.models.columns]
+cost = "རིན་གོང"
+latency = "འགོར་འགྱངས"
+load = "ཁུར་པོ"
+model = "མོ་ཌེལ"
+status = "གནས་ཚུལ"
+type = "རིགས"
+version = "པར་གཞི"
+
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/འབོད་ཐེངས"
+perThousand = "{{price}}/1k"
+
+[portal.infrastructure.models.metrics]
+activeModels = "ཤུགས་ལྡན་མོ་ཌེལ"
+avgLatency = "ཆ་སྙོམས་འགོར་འགྱངས"
+included = "ཚུད་པ"
+monthlySpend = "ཟླ་རེའི་མོ་ཌེལ་འགྲོ་སོང་"
+
+[portal.infrastructure.models.routing]
+empty = "ལམ་སྟོན་སྒྲིག་སྲོལ་གང་ཡང་སྒྲིག་མེད།"
+heading = "ལམ་སྟོན་སྒྲིག་སྲོལ"
+sub = "བཀོལ་སྤྱོད་རེ་རེ་གང་གིས་མོ་ཌེལ་གང་སྤྱོད་པ། སྔོན་སྒྲིག་ནི་དེ་ལས་ཞིབ་ཚགས་པའི་སྒྲིག་སྲོལ་མ་འཚམས་སྐབས་སྤྱོད།"
+subLocked = "བཀོལ་སྤྱོད་རྣམས་མོ་ཌེལ་ངེས་ཅན་ལ་ལམ་སྟོན་བྱོས — རིན་སྤྲོད་འཆར་གཞི་ཐོག་སྤྱོད་རུང་།"
+
+[portal.infrastructure.models.routing.lockedBanner]
+description = "Pro ལ་རིམ་སྤར་བྱས་ནས་བཀོལ་སྤྱོད་དང་ཡིག་ཆའི་རིགས་རེ་རེ་གང་གིས་མོ་ཌེལ་གང་སྤྱོད་པ་ཚོད་འཛིན་བྱོས།"
+title = "མོ་ཌེལ་ལམ་སྟོན་ནི་རིན་སྤྲོད་ཁྱད་ཆོས་ཡིན"
+
+[portal.infrastructure.models.routingColumns]
+default = "སྔོན་སྒྲིག"
+docType = "ཡིག་ཆའི་རིགས"
+modelForAria = "{{operation}} ཆེད་ཀྱི་མོ་ཌེལ"
+operation = "བཀོལ་སྤྱོད"
+routedTo = "ལམ་སྟོན་བྱས་ཡུལ"
+
+[portal.infrastructure.modelTypeLabel]
+classification = "དབྱེ་སྒྲིག"
+extraction = "འདོན་ལེན"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "ཉམས་པ"
+down = "འཁོར་སྐྱོད་མེད་པ"
+healthy = "བདེ་ཐང"
+
+[portal.infrastructure.security.access.byok]
+description = "རང་གི KMS ནས་ལྡེ་མིག་ཞིག་མཁོ་འདོན་བྱོས། Stirling གིས་དེས་གསང་སྡོམ་བྱེད་ཀྱང་ད་དུང་ཀློག་ཐུབ།"
+label = "རང་གི་ལྡེ་མིག་འཁྱེར་ཡོང་ (BYOK)"
+
+[portal.infrastructure.security.access.hyok]
+description = "ལྡེ་མིག་རྣམས་ཁྱེད་ཀྱི KMS ནས་ནམ་ཡང་མི་ཐོན། Stirling གིས་གསང་ཡིག་ཁོ་ན་ཉར།"
+label = "རང་གི་ལྡེ་མིག་རང་ཉར་ (HYOK)"
+
+[portal.infrastructure.security.access.stirling]
+description = "Stirling གིས་གསང་སྡོམ་ལྡེ་མིག་དོ་དམ་བྱེད། སྟབས་བདེ་ཤོས་ — ཁྱེད་ཕྱོགས་ནས་ལྡེ་མིག་ལས་སྒོ་གང་ཡང་མེད།"
+label = "Stirling གིས་ཉར་བའི་ལྡེ་མིག"
+
+[portal.infrastructure.security.accessPolicy]
+heading = "ཡིག་ཆའི་འཛུལ་སྤྱོད་སྲིད་ཇུས"
+subheading = "འཇགས་གནས་སྐབས་སུ་ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་སུས་གསང་འགྲོལ་བྱེད་ཐུབ་པ་ཚོད་འཛིན་བྱེད།"
+
+[portal.infrastructure.security.attestations]
+heading = "མཐུན་སྒྲིག་དཔང་འཛིན"
+noReport = "སྙན་ཐོ་སྤྱོད་རུང་མེད"
+subheading = "སྒྲོམ་གཞི་རེ་རེའི་ཞིབ་བཤེར་གནས་བབ། དཔང་འཛིན་ཟིན་པའི་ཚོད་འཛིན་ཐོག་སྙན་ཐོ་སྤྱོད་རུང་།"
+viewReport = "སྙན་ཐོ་ལྟ་བ →"
+
+[portal.infrastructure.security.compliance]
+heading = "མཐུན་སྒྲིག"
+subheading = "Stirling སྟེགས་བུར་ཁྱབ་པའི་དཔང་འཛིན་དང་ལག་ཁྱེར།"
+
+[portal.infrastructure.security.empty]
+description = "ཁྱེད་ཀྱི་ལས་སའི་བདེ་འཇགས་སྒྲིག་བཀོད་འདིར་མངོན་ཡོང་།"
+title = "བདེ་འཇགས་གནས་བབ་སྤྱོད་རུང་མེད"
+
+[portal.infrastructure.security.hyokBanner]
+description = "HYOK སྤྱད་ན། གསང་སྡོམ་ལྡེ་མིག་རྣམས་ཁྱེད་ཀྱི KMS ནས་ནམ་ཡང་མི་ཐོན། Stirling གིས་ཁྱེད་ཀྱིས་དུས་ནམ་ཡང་ཕྱིར་འཐེན་བྱེད་ཐུབ་པའི་གསང་ཡིག་ཁོ་ན་ཉར་ཞིང་ལས་སྣོན་བྱེད།"
+title = "Stirling གིས་ཁྱེད་ཀྱི་ཡིག་ཆ་གསང་འགྲོལ་བྱེད་མི་ཐུབ"
+
+[portal.infrastructure.security.ipAllowlist]
+empty = "IP ཁྱབ་ཁོངས་གང་ཡང་སྒྲིག་མེད་ — IP ཚང་མ་ཆོག"
+heading = "IP ཆོག་ཐོ"
+sub = "API འཛུལ་སྤྱོད་ནི CIDR ཁྱབ་ཁོངས་འདི་དག་ལ་ཚད་བཀག་བྱས་ཡོད།"
+subLocked = "ངོ་ཤེས་པའི IP ཁྱབ་ཁོངས་ལ API འཛུལ་སྤྱོད་ཚད་བཀག་བྱོས — རིན་སྤྲོད་འཆར་གཞི་ཐོག་སྤྱོད་རུང་།"
+
+[portal.infrastructure.security.ipAllowlist.lockedBanner]
+description = "Pro ལ་རིམ་སྤར་བྱས་ནས API འཛུལ་སྤྱོད་དྲ་རྒྱ་ངེས་ཅན་ལ་ཚད་བཀག་བྱོས།"
+title = "IP ཆོག་ཐོ་ནི་རིན་སྤྲོད་ཁྱད་ཆོས་ཡིན"
+
+[portal.infrastructure.security.ipColumns]
+added = "ཁ་སྣོན་བྱས་པ"
+addedBy = "ཁ་སྣོན་བྱེད་མཁན"
+cidr = "CIDR"
+label = "མཚོན་རྟགས"
+
+[portal.infrastructure.security.keyManagement]
+algorithm = "རྩིས་ཐབས"
+heading = "གསང་སྡོམ་ལྡེ་མིག་དོ་དམ"
+keyId = "ལྡེ་མིག་ངོས་འཛིན་རྟགས"
+lastRotated = "མཐའ་མར་བསྐོར་བ"
+rotateKey = "ལྡེ་མིག་བསྐོར་སྤོར"
+rotationPolicy = "བསྐོར་སྤོར་སྲིད་ཇུས"
+subheading = "འཇགས་གནས་སྐབས་ཡིག་ཆ་གསང་སྡོམ་བྱེད་པའི་ལྡེ་མིག་གི་ཉར་དབང་ — སུས་གསང་འགྲོལ་བྱེད་ཐུབ་པ་དང་། ལྡེ་མིག་ཇི་ལྟར་བསྐོར་སྤོར་བྱེད་པ།"
+
+[portal.infrastructure.security.managedBanner]
+description = "རང་གི་ལྡེ་མིག་འཁྱེར་ཡོང་ (BYOK) དང་རང་གི་ལྡེ་མིག་རང་ཉར་ (HYOK) ཉར་དབང་ནི Enterprise ཐོག་སྤྱོད་རུང་། རང་གི KMS ནས་ལྡེ་མིག་མཁོ་འདོན་བྱེད་ཆེད་རིམ་སྤར་བྱོས།"
+title = "ཁྱེད་ཀྱི་འཆར་གཞི་ཐོག་ལྡེ་མིག་རྣམས Stirling གིས་དོ་དམ་བྱེད།"
+
+[portal.infrastructure.security.residency.apac]
+description = "ap-southeast-1"
+label = "ཨེ་ཤེ་ཡ་པ་སི་ཕིག"
+
+[portal.infrastructure.security.residency.eu]
+description = "eu-west-1 · GDPR གཞི་གྲངས་མཚམས་མངའ"
+label = "ཡོ་རོབ་མཉམ་འབྲེལ"
+
+[portal.infrastructure.security.residency.us]
+description = "us-east-1 · us-west-2"
+label = "ཨ་རི"
+
+[portal.infrastructure.security.residencyHeader]
+heading = "གཞི་གྲངས་གནས་སྡོད"
+subheading = "ཡིག་ཆ་གང་དུ་ཉར་བ་དང་ལས་སྣོན་བྱེད་པ།"
+
+[portal.infrastructure.storage]
+gbValue = "{{value}} GB"
+percentUsed = "{{value}} སྤྱད་པ"
+
+[portal.infrastructure.storage.empty]
+description = "མཐུད་ཟིན་པའི་ཉར་མཛོད་དང་སྤྱོད་ཚད་འདིར་མངོན་ཡོང་།"
+title = "ཉར་མཛོད་གང་ཡང་སྒྲིག་མེད"
+
+[portal.infrastructure.storage.lifecycle]
+active = "ཤུགས་ལྡན"
+activeRange = "0–{{value}}d"
+archived = "ཡིག་ཚགས་སུ་ཉར་བ"
+coldStorage = "གྲང་ཉར"
+deleted = "སུབ་ཟིན་པ"
+never = "ནམ་ཡང་མིན"
+purged = "གཙང་སེལ་བྱས་པ"
+
+[portal.infrastructure.storage.providers]
+connect = "མཐུད་པ"
+connected = "མཐུད་ཟིན་པ"
+heading = "མཐུད་ཟིན་པའི་མཁོ་འདོན་པ"
+subheading = "ལས་སྣོན་བྱས་པའི་འབྲས་ཆས་འབྲི་ས།"
+
+[portal.infrastructure.storage.retention]
+heading = "ཉར་འཇོག"
+subheading = "འཚོ་རིམ་སུབ་པའི་སྔོན་ལ་འབྲས་ཆས་དུས་ཡུན་ག་ཚོད་ཉར་བ།"
+windowLabel = "སྔོན་སྒྲིག་ཉར་འཇོག་དུས་ཡུན"
+
+[portal.infrastructure.storage.retentionOption]
+days_one = "{{count}} ཉིན"
+days_other = "{{count}} ཉིན"
+never = "ནམ་ཡང་མ་སུབ"
+
+[portal.infrastructure.storage.totalUsage]
+heading = "བེད་སྤྱོད་ཁྱོན་བསྡོམས"
+progressLabel = "སྤྱད་ཟིན་པའི་གསོག་ཉར"
+subheading = "འབྲེལ་མཐུད་བྱས་པའི་མཁོ་སྤྲོད་པ་ཚང་མའི་ནང་སྤྱད་པའི་གསོག་ཉར།"
+
+[portal.infrastructure.tabs]
+apiKeys = "API ལྡེ་མིག"
+audit = "རྩིས་བཤེར་ཉིན་ཐོ"
+deployments = "སྤེལ་འཇོག"
+models = "དཔེ་དབྱིབས"
+security = "བདེ་འཇགས"
+storage = "གསོག་ཉར"
+
+[portal.integrations]
+addAnother = "གཞན་ཞིག་ཁ་སྣོན"
+availableHeading = "སྤྱོད་རུང"
+comingSoonHeading = "མི་འགྱངས་པར་འཐོན་རྒྱུ"
+connect = "འབྲེལ་མཐུད"
+connectedHeading = "འབྲེལ་མཐུད་ཟིན"
+connectionCount_one = "{{count}} འབྲེལ་མཐུད"
+connectionCount_other = "{{count}} འབྲེལ་མཐུད"
+customApi = "རང་སྒྲིག API"
+searchPlaceholder = "མཉམ་འདྲེས་འཚོལ"
+subtitle = "Stirling གིས་འབྲེལ་བ་བྱེད་ཐུབ་པ་ཚང་མ། དཔང་ཡིག་འདིར་ཐེངས་གཅིག་བཟོས་རྗེས། ཁུངས། སྲིད་ཇུས། ལས་རིམ་རྒྱུན་བཅས་ཀྱིས་དེ་ལ་གཞི་འཛིན་བྱེད།"
+title = "མཉམ་འདྲེས"
+typedName = "{{tool}} མིང"
+
+[portal.integrations.filters]
+all = "ཚང་མ"
+audit = "རྩིས་བཤེར"
+connected = "འབྲེལ་མཐུད་ཟིན"
+notify = "བརྡ་ཐོ"
+security = "བདེ་འཇགས"
+signing = "མིང་རྟགས་འགོད་པ"
+storage = "གསོག་ཉར"
+
+[portal.integrations.status]
+connected = "འབྲེལ་མཐུད་ཟིན"
+
+[portal.integrations.table]
+integration = "མཉམ་འདྲེས"
+worksWith = "མཉམ་དུ་ལས་ཀ་བྱེད་པ"
+
+[portal.integrations.worksWith]
+pipelines = "ལས་རིམ་རྒྱུན"
+policies = "སྲིད་ཇུས"
+sources = "ཁུངས"
+
+[portal.legal]
+draft = "{{label}} · ཟིན་བྲིས"
+loadError = "ཡིག་ཆ་འདི་འཇུག་མ་ཐུབ། ཡང་བསྐྱར་ཚོད་ལྟ་གནང་རོགས།"
+loading = "འཇུག་བཞིན…"
+title = "ཁྲིམས་འབྲེལ་ཡིག་ཆ"
+
+[portal.nav]
+agent-builder = "ལས་ཚབ་བཟོ་ཆས"
+components = "གྲུབ་ཆ"
+docs = "ཡིག་ཚགས"
+documents = "ཡིག་ཆ"
+editor = "རྩོམ་སྒྲིག་ཆས"
+home = "གཙོ་ངོས"
+infrastructure = "གཞི་རྟེན་སྒྲིག་བཀོད"
+integrations = "མཉམ་འདྲེས"
+pipelines = "ལས་རིམ་རྒྱུན"
+policies = "སྲིད་ཇུས"
+procurement = "ཉོ་སྒྲུབ"
+settings = "སྒྲིག་འགོད"
+sources = "ཁུངས"
+usage = "བེད་སྤྱོད་དང་རྩིས་འབོར"
+users = "སྤྱོད་མཁན"
+
+[portal.nav.section]
+platform = "PDF སྟེགས་བུ"
+processor = "PDF སྒྲིག་གཅོད་ཆས"
+
+[portal.pipelines]
+subtitle = "རྒྱབ་སྣེའི་ཡིག་ཆ་རང་འགུལ་ལས་རིམ་རྒྱུན་ཚང་མ། སྐུལ་རྐྱེན་སྟེང་འཁོར་བའི་ཁུངས་ཚོགས་ཤིག་སྟེང་གི་བཀོལ་སྤྱོད་རིམ་པ་ཅན་གྱི་ཕྲེང་བ་ཞིག དེའི་གོམ་པ་དང་ཁུངས་ལ་ལྟ་ཕྱིར་ཕྲེང་ཐིག་ཅིག་ལ་གནོན།"
+title = "ལས་རིམ་རྒྱུན"
+
+[portal.pipelines.actions]
+newPipeline = "ལས་རིམ་རྒྱུན་གསར་པ"
+
+[portal.pipelines.builder]
+addStep = "ལག་ཆ་ཁ་སྣོན"
+back = "ལས་རིམ་རྒྱུན་ལ་ཕྱིར་ལོག"
+cannotFollow = "{{produced}} ལེན་མི་ཐུབ"
+chooseAccount = "རྩིས་ཐོ་ཞིག་འདེམས"
+chooseDestination = "དམིགས་ས་ཞིག་འདེམས"
+chooseOperation = "གོམ་པ་འདིས་ཅི་བྱེད་འདེམས"
+chooseSource = "ཁུངས་ཤིག་འདེམས"
+discard = "འགྱུར་བ་དོར"
+enabled = "ནུས་སྤེལ་ཟིན"
+inputs = "ནང་འཇུག"
+inputSource = "ནང་འཇུག་ཁུངས"
+inputTrigger = "སྐུལ་རྐྱེན"
+keepEditing = "རྩོམ་སྒྲིག་མུ་མཐུད"
+needsConfiguring = "སྒྲིག་སྦྱོར་དགོས"
+needsUpload = "ཡར་སྤྲོད་བྱས་པའི་ཡིག་ཆ་དགོས"
+noSources = "ད་དུང་ཁུངས་གང་ཡང་འབྲེལ་མཐུད་མ་བྱས། དེ་ནང་འཇུག་ལ་སྤྱོད་ཕྱིར་གཅིག་བཟོས།"
+noToolMatches = "ཁྱེད་ཀྱི་འཚོལ་བཤེར་དང་མཐུན་པའི་ལག་ཆ་མེད།"
+pipelineSettings = "ལས་རིམ་རྒྱུན་སྒྲིག་འགོད"
+searchTools = "ལག་ཆ་འཚོལ"
+selectToolBody = "ཁྱེད་ཀྱི་ལས་རིམ་རྒྱུན་བཟོ་ཕྱིར་ལག་ཆ་ཞིག་ཁ་སྣོན།"
+selectToolTitle = "ད་དུང་ལག་ཆ་མེད"
+sendToSystem = "མ་ལག་གཞན་ཞིག་ལ་སྐུར"
+stepsIncompatible = "གོམ་པ་འདི་དག་དེའི་གོམ་པ་སྔོན་མས་བཟོས་པའི་ཐོན་འབྲས་སྟེང་འཁོར་མི་ཐུབ། {{tools}}"
+stepsNeedSetup = "གོམ་པ་འདི་དག་ཉར་ཚགས་མ་བྱས་གོང་ད་དུང་སྒྲིག་སྦྱོར་དགོས། {{tools}}"
+toolSettings = "ལག་ཆ་སྒྲིག་འགོད"
+unknownStep = "ངོས་འཛིན་མ་ཐུབ་པའི་བཀོལ་སྤྱོད། རང་འཇགས་ཉར་ཡོད།"
+unsavedBody = "ཁྱེད་ལ་ཉར་ཚགས་མ་བྱས་པའི་འགྱུར་བ་ཡོད། ཕྱིར་མ་ཐོན་གོང་དེ་དག་ཉར་ཚགས་བྱེད་དམ། ཡང་ན་དོར་རམ།"
+unsavedTitle = "ཉར་ཚགས་མ་བྱས་པའི་འགྱུར་བ"
+uploadUnsupported = "ལས་རིམ་རྒྱུན་ནང་ད་དུང་ཡར་སྤྲོད་བྱས་པའི་ཡིག་ཆ་རྒྱབ་སྐྱོར་མེད་པས། གོམ་པ་འདི་དག་ཉར་ཚགས་བྱེད་མི་ཐུབ། {{tools}}"
+usesDefaults = "སྔོན་སྒྲིག་སྒྲིག་འགོད་ཀྱིས་འཁོར"
+
+[portal.pipelines.builder.diagnostic]
+fan-in = "གོམ་པ་སྔོན་མ་ནས་ཡིག་ཆ་ཚང་མ་ཟླ་སྒྲིལ་བྱེད"
+fan-out = "གོམ་པ་སྔོན་མ་ནས་ཡིག་ཆ་རེ་རེར་ཐེངས་རེ་འཁོར"
+format-mismatch = "{{accepts}} དགོས། འོན་ཀྱང་གོམ་པ་སྔོན་མས་{{produced}} བཟོ་བཞིན་ཡོད"
+output-uncertain = "འཁོར་མི་སྲིད། གོམ་པ་སྔོན་མའི་ཐོན་འབྲས་ནི་དེ་ཇི་ལྟར་སྒྲིག་པར་རག་ལས"
+source-mismatch = "{{accepts}} དགོས། འོན་ཀྱང་ལས་རིམ་རྒྱུན་འདིའི་ནང་འཇུག་ནི་{{produced}} ཡིན"
+undeclared-operation = "གོམ་པ་འདིས་གང་ལེན་ཐུབ་མིན་ཞིབ་བཤེར་བྱེད་མི་ཐུབ"
+
+[portal.pipelines.composer]
+addTool = "ལག་ཆ་ཁ་སྣོན"
+cancel = "དོར"
+chainEmpty = "ཁྱེད་ཀྱི་ལས་རིམ་རྒྱུན་བཟོ་འགོ་ཚུགས་ཕྱིར་ལག་ཆ་ཞིག་ཁ་སྣོན།"
+create = "ལས་རིམ་རྒྱུན་བཟོ"
+editingUnsupported = "རྩོམ་སྒྲིག་ཆེད་ལག་ཆ་འདི་དག་གི་ཞུགས་གྲངས་སྟོན་པ་ད་དུང་རྒྱབ་སྐྱོར་མེད།"
+moveDown = "མར་སྤོ"
+moveUp = "ཡར་སྤོ"
+name = "མིང"
+namePlaceholder = "དཔེར་ན། ནག་སུབ་བཤེར་བ"
+noToolSettings = "ལག་ཆ་འདིར་སྒྲིག་སྦྱོར་བྱ་རུང་གི་སྒྲིག་འགོད་མེད།"
+operations_one = "བཀོལ་སྤྱོད ({{count}})"
+operations_other = "བཀོལ་སྤྱོད ({{count}})"
+output = "དམིགས་ས"
+removeStep = "བཀོལ་སྤྱོད་སུབ"
+save = "འགྱུར་བ་ཉར་ཚགས"
+scheduleEvery = "འཁོར་ཚད"
+sources = "ཁུངས"
+sourcesLoading = "ཁུངས་འཇུག་བཞིན..."
+trigger = "སྐུལ་རྐྱེན"
+triggerManual = "ལག་བཟོ་ཁོ་ན"
+
+[portal.pipelines.composer.unit]
+days = "ཉིན"
+hours = "ཆུ་ཚོད"
+minutes = "སྐར་མ"
+
+[portal.pipelines.delete]
+body = "\"{{name}}\" སུབ་བམ། འདི་ཕྱིར་ལྡོག་བྱེད་མི་ཐུབ།"
+cancel = "དོར"
+confirm = "སུབ"
+title = "ལས་རིམ་རྒྱུན་སུབ་བམ།"
+
+[portal.pipelines.detail]
+clearHistory = "ལོ་རྒྱུས་གཙང་སེལ"
+delete = "ལས་རིམ་རྒྱུན་སུབ"
+run = "ད་ལྟ་འཁོར"
+
+[portal.pipelines.empty]
+action = "ལས་རིམ་རྒྱུན་ཞིག་བཟོ"
+connectSource = "ཁུངས་ཤིག་འབྲེལ་མཐུད"
+description = "ཁྱེད་ཀྱི་ལས་རིམ་རྒྱུན་དང་པོ་བཟོ། དེ་འཁོར་སའི་ཁུངས་འདེམས། བཀོལ་སྤྱོད་ཕྲེང་བར་སྦྲེལ། དེ་ནས་ཐོན་འབྲས་གང་དུ་འགྲོ་བ་འདེམས།"
+title = "ད་དུང་ལས་རིམ་རྒྱུན་མེད"
+
+[portal.pipelines.kpi]
+active = "འཁོར་བཞིན"
+paused = "མཚམས་བཞག"
+total = "ལས་རིམ་རྒྱུན"
+
+[portal.pipelines.run]
+allProcessed_one = "འཁོར་རྒྱུ་མེད། ཁུངས་ཀྱི་ཡིག་ཆ་{{count}} སྔོན་ནས་སྒྲིག་གཅོད་ཟིན།"
+allProcessed_other = "འཁོར་རྒྱུ་མེད། ཁུངས་ནང་གི་ཡིག་ཆ་{{count}} ཚང་མ་སྔོན་ནས་སྒྲིག་གཅོད་ཟིན།"
+completed_one = "འཁོར་བ་ལེགས་གྲུབ།"
+completed_other = "འཁོར་བ་{{count}} ཚང་མ་ལེགས་གྲུབ།"
+empty = "འཁོར་རྒྱུ་མེད། ཁུངས་ནང་སྒྲིག་གཅོད་བྱ་རྒྱུའི་ཡིག་ཆ་མེད།"
+failed = "འཁོར་བ་ཕམ་སོང་། {{error}}"
+historyCleared = "ལོ་རྒྱུས་གཙང་སེལ་བྱས་ཟིན། འཁོར་ཐེངས་རྗེས་མས་ད་ལྟ་ཁུངས་ནང་ཡོད་པ་ཚང་མ་ཡང་བསྐྱར་སྒྲིག་གཅོད་བྱེད།"
+inFlight = "འཁོར་རྒྱུ་གསར་པ་མེད། སྔོན་གྱི་འཁོར་ཐེངས་ཤིག་ནས་ཡིག་ཆ་ད་དུང་སྒྲིག་གཅོད་བྱེད་བཞིན་ཡོད།"
+parked_one = "འཁོར་རྒྱུ་མེད། ཡིག་ཆ་{{count}} སྔོན་མར་ཕམ་སོང་ནས་ཟུར་དུ་བཞག་ཡོད། རྒྱུ་རྐྱེན་བཅོས་རྗེས། ཡང་བསྐྱར་ཚོད་ལྟ་བྱ་ཕྱིར་ལོ་རྒྱུས་གཙང་སེལ་བྱོས།"
+parked_other = "འཁོར་རྒྱུ་མེད། ཡིག་ཆ་{{count}} སྔོན་མར་ཕམ་སོང་ནས་ཟུར་དུ་བཞག་ཡོད། རྒྱུ་རྐྱེན་བཅོས་རྗེས། ཡང་བསྐྱར་ཚོད་ལྟ་བྱ་ཕྱིར་ལོ་རྒྱུས་གཙང་སེལ་བྱོས།"
+running = "འཁོར་བ་འགོ་ཚུགས་ཟིན། ད་དུང་འགྲོ་བཞིན་ཡོད།"
+timeout = "འཁོར་བར་སྔོན་དཔག་ལས་དུས་ཚོད་རིང་བ་འགོར་བཞིན་ཡོད། དེ་རྒྱབ་ལྗོངས་སུ་མུ་མཐུད་མཇུག་སྒྲིལ་སྲིད།"
+
+[portal.pipelines.status]
+active = "འཁོར་བཞིན"
+paused = "མཚམས་བཞག"
+
+[portal.pipelines.table]
+name = "ལས་རིམ་རྒྱུན"
+sources = "ཁུངས"
+status = "གནས་ཚུལ"
+steps = "གོམ་པ"
+
+[portal.pipelines.trigger]
+folder-watch = "ཡིག་ཁུག་ལྟ་སྲུང"
+manual = "ལག་སྒུལ"
+schedule = "དུས་ཚོད་བཀོད་པ"
+
+[portal.policies]
+defaultName = "{{category}} སྲིད་ཇུས"
+subtitle = "ཡིག་ཆ་རེ་རེའི་ཐོག་ལག་ཆའི་རྒྱུད་རིམ་བཙན་སྐུལ་ལག་བསྟར་བྱེད་པའི་རྒྱུན་གནས་རང་འགུལ་ལས་རིམ། སྲིད་ཇུས་རེ་རེ་ཡར་སྐུར་རམ་ཕྱིར་འདོན་སྐབས་འགོ་སློང་བྱེད་ཅིང་། ལག་ཆའི་རྒྱུད་རིམ་སྒྲུབ་ནས་བཙན་སྐུལ་བྱས་པའི་པར་གཞི་དེ་མ་ཡིག་དང་མཉམ་དུ་ཉར་ཚགས་བྱེད།"
+title = "སྲིད་ཇུས"
+
+[portal.policies.card]
+comingSoon = "Enterprise ལ་རིམ་སྤར་བྱེད"
+notSetUp = "སྒྲིག་འགོད་བྱས་མེད"
+requiresAiEngine = "AI engine དགོས"
+
+[portal.policies.categories.classification]
+desc = "ཡར་སྐུར་སྐབས་ཡིག་ཆ་རེ་རེའི་རིགས་ངོས་འཛིན་བྱས་ཏེ། ཡིག་ཚགས་དང་འཚོལ་ཞིབ་ཆེད་དེའི་མེ་ཊ་གཞི་གྲངས་ལ་རྟགས་འདེབས་བྱེད།"
+label = "རིགས་དབྱེ"
+
+[portal.policies.categories.compliance]
+desc = "ཡིག་ཆ་རེ་རེའི་ཐོག HIPAA, GDPR, SOC 2, ཡང་ན FedRAMP དགོས་མཁོ་བཙན་སྐུལ་ལག་བསྟར་བྱེད།"
+label = "ཚད་མཐུན"
+
+[portal.policies.categories.ingestion]
+desc = "ཡིག་ཆ་རིགས་དབྱེ་བྱེད། སྒྲིག་ཡོད་གཞི་གྲངས་འདོན། མིང་འདོགས་སྲོལ་བཙན་སྐུལ་བྱེད། ཤོག་ངོས་ཚད་ལྡན་བཟོ།"
+label = "ནང་འཇུག"
+
+[portal.policies.categories.retention]
+desc = "ཡིག་ཆ་ཇི་ཙམ་ཉར་དགོས་པ། ག་དུས་ཡིག་ཚགས་སུ་ཉར་དགོས་པ། ག་དུས་སུབ་དགོས་པ་སྒྲིག"
+label = "ཉར་ཚགས"
+
+[portal.policies.categories.routing]
+desc = "ཡིག་ཆ་རང་འགུལ་གྱིས་ཚོགས་པ། ཡིག་ཁུག ཡང་ན་མ་ལག་འོས་འཚམ་ལ་སྐྱེལ།"
+label = "ལམ་སྟོན"
+
+[portal.policies.categories.security]
+desc = "PII འཚོལ་རྙེད་བྱེད། སྦས་འགེབས་བྱེད། འགུལ་སྐྱོད་ནང་དོན་སེལ། ཡིག་ཆ་ལ་ཆུ་རྟགས་འཇོག"
+label = "བདེ་འཇགས"
+
+[portal.policies.config]
+scopeAll = "ཡིག་ཆ་ཚང་མ"
+
+[portal.policies.config.classification]
+summary = "ཡར་སྐུར་བྱས་པའི་ཡིག་ཆ་ཚང་མ་ཁྱེད་ཀྱི་ཚོགས་པའི་ཤོག་བྱང་དང་བསྡུར་ནས་རིགས་དབྱེ་བྱེད་ཅིང་། དེའི་མེ་ཊ་གཞི་གྲངས་ལ་རྟགས་འདེབས་བྱེད།"
+
+[portal.policies.config.classification.rules]
+0 = "རིགས་དབྱེ"
+1 = "མེ་ཊ་གཞི་གྲངས་ལ་རྟགས་འདེབས"
+
+[portal.policies.config.compliance]
+summary = "ཡིག་ཆ་མ་ལག་ནས་མ་ཐོན་གོང་སྒྲིག་ཁྲིམས་སྒྲོམ་གཞི་དང་བསྡུར་ནས་ར་སྤྲོད་བྱེད།"
+
+[portal.policies.config.compliance.fields]
+accessLog = "འཛུལ་སྤྱོད་ཟིན་ཐོ"
+auditTrail = "རྩིས་ཞིབ་ཤུལ་ལམ"
+frameworks = "སྒྲོམ་གཞི"
+onViolation = "ཚད་མི་མཐུན་སྐབས"
+
+[portal.policies.config.compliance.rules]
+0 = "སྒྲོམ་གཞི་བཤེར་འབེབས"
+1 = "བྱ་ཐབས་བཙན་སྐུལ"
+2 = "རྩིས་ཞིབ་ཤུལ་ལམ"
+
+[portal.policies.config.ingestion]
+summary = "ཡིག་ཆ་རིགས་དབྱེ་བྱེད། སྒྲིག་ཡོད་གཞི་གྲངས་འདོན། མིང་འདོགས་བཙན་སྐུལ་བྱེད། ཤོག་ངོས་ཚད་ལྡན་བཟོ།"
+
+[portal.policies.config.ingestion.fields]
+belowThreshold = "མཚམས་ཐང་ལས་དམའ་བ"
+minConfidence = "ཡིད་ཆེས་ཉུང་མཐའ"
+
+[portal.policies.config.ingestion.rules]
+0 = "རིགས་དབྱེ"
+1 = "འདོན"
+2 = "མིང་འདོགས"
+3 = "ཚད་ལྡན་བཟོ"
+
+[portal.policies.config.purview]
+label = "Microsoft Purview ཚོར་སྐྱེན་ཤོག་བྱང་སྦྱར"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "Purview portal ནས་ཐོབ་པའི་ཤོག་བྱང་གི GUID། ཤོག་བྱང་སྦྱར་བས་དེའི་མེ་ཊ་གཞི་གྲངས་PDF ཐོག་འབྲི་བ་ཡིན། དེས་གསང་སྡོམ་བྱེད་མི་ཐུབ། དེ་ལ Microsoft client དགོས།"
+labelName = "ཤོག་བྱང་མིང་། (འདམ་ག)"
+labelNameHelp = "མི་དང་ལག་ཆས་ཤོག་བྱང་ངོས་འཛིན་ཐུབ་པའི་ཆེད ID དང་མཉམ་དུ་ཐོ་འགོད་བྱེད།"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview ཡིས་སྲིད་ཇུས་ཀྱིས་སྦྱར་བའི་ཤོག་བྱང་དང་མི་ཞིག་གིས་འདམས་པའི་ཤོག་བྱང་གཉིས་དབྱེ་འབྱེད་བྱེད།"
+label = "ཤོག་བྱང་ཇི་ལྟར་ཐོ་འགོད་བྱེད"
+privileged = "མི་ཞིག་གིས་འདམས་པ་ལྟར"
+standard = "རང་འགུལ་གྱིས་སྦྱར་བ་ལྟར"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview ཤོག་བྱང་ཀློག"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "ཡིག་ཆ་ལ་སྔོན་ནས་ཡོད་པའི་ཤོག་བྱང་ཀློག་སྟེ། རྗེས་ཀྱི་གོམ་པས་དེའི་ཐོག་བྱ་སྤྱོད་བྱེད་ཐུབ།"
+
+[portal.policies.config.retention]
+summary = "ཡིག་ཆ་ཇི་ཙམ་ཉར་དགོས་པ། ག་དུས་ཡིག་ཚགས་སུ་ཉར་དགོས་པ། ག་དུས་སུབ་དགོས་པ་བཙན་སྐུལ་བྱེད།"
+
+[portal.policies.config.retention.fields]
+archiveAfter = "རྗེས་སུ་ཡིག་ཚགས་སུ་ཉར"
+immutableHold = "བསྒྱུར་མི་རུང་བའི་འཛིན་ཉར"
+keepFor = "ཉར་ཡུན"
+
+[portal.policies.config.retention.rules]
+0 = "ཉར་ཚགས་འཛིན་ཉར"
+1 = "རང་འགུལ་ཡིག་ཚགས་སུ་ཉར"
+2 = "སུབ་པ་འགོག"
+
+[portal.policies.config.routing]
+summary = "རིགས་དང་རིགས་དབྱེ་ལ་གཞིགས་ནས་ཡིག་ཆ་འོས་འཚམ་གྱི་དམིགས་ཡུལ་ལ་སྐྱེལ།"
+
+[portal.policies.config.routing.fields]
+destination = "དམིགས་ཡུལ"
+notify = "ལམ་སྟོན་སྐབས་བརྡ་ཐོངས"
+webhookUrl = "Webhook URL"
+
+[portal.policies.config.routing.rules]
+0 = "རང་འགུལ་རིགས་དབྱེ"
+1 = "ཡིག་ཁུག་ལ་སྐྱེལ"
+2 = "Webhook བརྡ་ཐོངས"
+
+[portal.policies.config.security]
+summary = "PII འཚོལ་རྙེད་དང་སྦས་འགེབས་བྱེད། འགུལ་སྐྱོད་ནང་དོན་(JavaScript) སེལ། ཡིག་ཆ་ལ་ཆུ་རྟགས་འཇོག"
+
+[portal.policies.config.security.rules]
+0 = "PII སྦས་འགེབས"
+1 = "JavaScript སེལ"
+2 = "ཆུ་རྟགས"
+
+[portal.policies.detail]
+enforces = "བཙན་སྐུལ་ལག་བསྟར"
+onEveryExport = "ཕྱིར་འདོན་རེ་རེའི་སྐབས"
+onEveryUpload = "ཡར་སྐུར་རེ་རེའི་སྐབས"
+outputAsNewFile = "ཡིག་ཆ་གསར་པ་ཞིག་ཏུ"
+outputAsNewVersion = "པར་གཞི་གསར་པ་ཞིག་ཏུ"
+recentActivity = "ཉེ་ཆར་གྱི་བྱ་འགུལ"
+retry = "ཡང་བསྐྱར་ཚོད་ལྟ"
+showLess = "ཉུང་ཙམ་སྟོན"
+showMore = "མང་ཙམ་སྟོན"
+sources = "ཁུངས"
+
+[portal.policies.detail.actions]
+clearHistory = "སྒྲིག་གཅོད་ཟིན་པའི་ལོ་རྒྱུས་གཙང་སེལ"
+delete = "སུབ"
+editSettings = "སྒྲིག་འགོད་རྩོམ་སྒྲིག"
+pause = "གནས་སྐབས་མཚམས་འཇོག"
+resume = "མུ་མཐུད"
+runNow = "ད་ལྟ་སྒྲུབ"
+
+[portal.policies.detail.clearHistory]
+body = "སྲིད་ཇུས་འདིས་སྔོན་མ་སྒྲིག་གཅོད་བྱས་ཟིན་པའི་ཡིག་ཆ་ཚང་མ་བརྗེད་ནས། རྗེས་མའི་སྒྲུབ་ཐེངས་སུ་ད་ལྟ་དེའི་ཁུངས་ནང་ཡོད་པ་ཚང་མ་ཡང་བསྐྱར་སྒྲིག་གཅོད་བྱེད། ཡིག་ཆ་རང་ཉིད་ལ་འགྱུར་བ་མེད། འདི་ཕྱིར་ལོག་བྱེད་མི་ཐུབ།"
+cancel = "དོར"
+confirm = "ལོ་རྒྱུས་གཙང་སེལ"
+title = "སྒྲིག་གཅོད་ཟིན་པའི་ལོ་རྒྱུས་གཙང་སེལ་བྱེད་དམ།"
+
+[portal.policies.detail.emptyActivity]
+description = "སྲིད་ཇུས་འདི་སྒྲུབ་རྗེས་ཡིག་ཆ་འདིར་མངོན་ཡོང་།"
+title = "ད་དུང་བྱ་འགུལ་མེད"
+
+[portal.policies.endpoints]
+addWatermark = "ཆུ་རྟགས"
+autoRedact = "PII སྦས་འགེབས"
+classifyAndLabel = "རིགས་དབྱེ"
+compressPdf = "སྡུད་སྐུང"
+flatten = "ལེབ་བཟོ"
+ocrPdf = "OCR"
+sanitizePdf = "JavaScript སེལ"
+
+[portal.policies.offline]
+description = "ཁྱེད་ཀྱི་སྲིད་ཇུས་ཉར་ཚགས་བྱས་ཟིན་པས། འབྲེལ་མཐུད་སླར་གསོ་བྱས་རྗེས་མངོན་ཡོང་།"
+retry = "ཡང་བསྐྱར་ཚོད་ལྟ"
+title = "Backend སྤྱོད་མི་ཐུབ"
+
+[portal.policies.operations]
+change = "གོམ་པ་འདིས་ཅི་བྱེད་པ་བསྒྱུར"
+noResults = "དེ་དང་མཐུན་པའི་གོམ་པ་མེད། ཐོན་རྫས་མིང་། ཡང་ན \"scan\", \"notify\", \"attach\" ཚོད་ལྟ་བྱེད།"
+searchPlaceholder = "གོམ་པ་འཚོལ - \"scan\", \"attach\" ཡང་ན་ཐོན་རྫས་མིང་ཚོད་ལྟ་བྱེད"
+
+[portal.policies.operations.bodyMode]
+binary = "ཡིག་ཆའི bytes རྗེན་པ"
+json = "JSON payload ནང་"
+multipart = "ཡིག་ཆ་ཡར་སྐུར་(multipart) ལྟར"
+
+[portal.policies.operations.clamavScan]
+description = "ཁྱེད་རང་གི ClamAV server ཡིས་ཡིག་ཆ་ཞིབ་བཤེར་བྱེད། ཁྱེད་ཀྱི་དྲ་རྒྱ་ནས་གང་ཡང་ཕྱིར་མི་འགྲོ"
+label = "ནད་དུག་བཤེར་འབེབས་(རང་གིས་གཉེར་བ)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "macros, executables, scripts ཡང་ན་ནང་འཇུག་དངོས་པོ་ཡོད་པའི་ཡིག་ཆ་དང་ལེན་མི་བྱེད།"
+label = "འགུལ་སྐྱོད་ནང་དོན་འགོག"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive ཡིས་ཡིག་ཆ་ཞིབ་བཤེར་བྱེད་ཅིང་། དེ་གཙང་མ་མིན་ན་སྒྲུབ་ཐེངས་མཚམས་འཇོག་བྱེད།"
+label = "ནད་དུག་བཤེར་འབེབས"
+
+[portal.policies.operations.confluenceAttach]
+description = "སྒྲིག་གཅོད་ཟིན་པའི་ཡིག་ཆ་ཤོག་ངོས་ཤིག་ལ་བསྣན་འཇོག་བྱེད།"
+label = "Confluence ཤོག་ངོས་ཤིག་ལ་ཟུར་སྣོན་བྱེད"
+
+[portal.policies.operations.consignoSubmit]
+description = "མཚན་རྟགས་ཆེད་ཡིག་ཆ་ConsignO Cloud ལ་སྤྲོད།"
+label = "མཚན་རྟགས་ཆེད་སྐུར་(ConsignO)"
+note = "ཡིག་ཆ་སྤྲོད། མཚན་རྟགས་བཀོད་པའི་འདྲ་བཤུས་ཕྱིར་ལེན་པ་ད་དུང་རྒྱབ་སྐྱོར་མེད། རྒྱུ་མཚན་ནི་གོམ་པ་ཞིག་གིས་འབྲས་བུ་རྗེས་ཀྱི་གོམ་པ་ལ་སྤྲོད་མི་ཐུབ་པས་ཡིན།"
+
+[portal.policies.operations.customApiCall]
+description = "འབོད་སྐུལ་ཁྱེད་རང་གིས་བཟོ། path, method, body དང་ལན་སྒྲིག་གཅོད།"
+label = "རང་སྒྲིག API འབོད"
+
+[portal.policies.operations.discordNotify]
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ཞིག་སྒྲིག་གཅོད་བྱས་པ་རྒྱུ་ལམ་ཞིག་ལ་བརྡ་སྤྲོད།"
+label = "Discord ལ་འཕྲིན་ཐུང་སྤེལ"
+
+[portal.policies.operations.elasticIndex]
+description = "སྲིད་ཇུས་ཀྱིས་བྱས་པ་དེ་འཚོལ་ཐུབ་པའི་ཡིག་ཆ་ཞིག་ལྟར་ཐོ་འགོད་བྱེད།"
+label = "Elasticsearch ནང་རྩིས་ཞིབ་བྱུང་རིམ Index བྱེད"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "multipart ནི་ཡར་སྐུར API ལ་འཚམ། JSON ནི་ཡིག་ཆ་payload ནང་དགོས་པའི API ལ་འཚམ། binary ཡིས bytes རྗེན་པ་སྐུར།"
+label = "ཡིག་ཆ་ཇི་ལྟར་སྐུར་དགོས"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON body ཇི་ཡོད་ལྟར་སྐུར། {{document.base64}} ཡིས་ཡིག་ཆ་འཁྱེར། {{document.*}} དང་ {{run.*}} ནི་ཡིག་ཆ་རེ་རེར་ཁ་སྐོང་བྱེད།"
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "རྩིས་ཁྲ"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API ཡིས་ཡིག་ཆ་འཇོག་སའི form field།"
+label = "File field མིང་"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "From"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "header མིང་/ཐང་ཆ་ཚན་གྱི JSON object། འབྲེལ་མཐུད་ཀྱི credential ཁྱེད་ཆེད་ཁ་སྣོན་བྱེད།"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "འཕྲིན་ཐུང་གི body ལྟར་སྐུར། {{document.*}} དང་ {{run.*}} ནི་ཡིག་ཆ་རེ་རེར་ཁ་སྐོང་བྱེད།"
+label = "འཕྲིན་ཐུང"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "འབྲེལ་མཐུད་ཀྱི base URL ལ་མཇུག་སྣོན་བྱེད། དེས host གཞན་ཞིག་ལ་ནམ་ཡང་སླེབས་མི་ཐུབ།"
+label = "ལམ"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "drive ནང་གི་གང་དུ་འབྲི་དགོས་པ། {{document.filename}} ནི་ཡིག་ཆ་རེ་རེར་བསྐང་རྒྱུ་ཡིན།"
+label = "དམིགས་ཡུལ་ལམ"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "སྙན་ཐོས་ཡིག་ཆ་ལ་འགྱུར་བ་མི་གཏོང་། ཚབ་བརྗེས་ཀྱིས་ཕྱིར་ལན་གང་ཡོད་པ་དེས་ཚབ་བརྗེ་བྱེད།"
+label = "ཕྱིར་ལན་ལ་གང་བྱེད་དགོས་པ"
+
+[portal.policies.operations.fields.signerEmail]
+label = "མིང་རྟགས་འགོད་མཁན་གྱི email"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "བརྗོད་དོན"
+placeholder = "ལས་སྣོན་བྱས་པ། {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio ཡིས་ཡི་གེ་འདི་དབྱེ་ཞིབ་བྱེད། {{document.title}} སྤྱོད་པའམ་ཞིབ་བཤེར་བྱ་དགོས་པའི་ཡི་གེ་སྦྱར་རོགས།"
+label = "ཞིབ་བཤེར་བྱ་རྒྱུའི་ཡི་གེ"
+
+[portal.policies.operations.fields.to]
+label = "ལ"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud སྤྱོད་མཁན་མིང"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ཞིག་ལས་སྣོན་བྱས་པ་སྟོང་ཆ་ཞིག་ལ་བརྡ་སྤྲོད།"
+label = "Google Chat ལ་འཕྲིན་ཐུང་སྤེལ"
+
+[portal.policies.operations.jiraAttach]
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་དོན་ཚན་ཞིག་ལ་སྦྱར།"
+label = "Jira དོན་ཚན་ཞིག་ལ་སྦྱར"
+
+[portal.policies.operations.mailgunEmail]
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ཟུར་སྦྱར་ལྟར་སྐུར།"
+label = "ཡིག་ཆ email སྐུར (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ཡིག་ཁུག་ཞིག་ནང་འབྲི།"
+label = "Nextcloud ལ་ཡར་འཇུག"
+
+[portal.policies.operations.presidioAnalyze]
+description = "ཁྱེད་ཀྱི Presidio server རང་གིས་རྙེད་པའི་མི་སྒེར་གཞི་གྲངས་སྙན་ཞུ་བྱེད།"
+label = "མི་སྒེར་གཞི་གྲངས་རྟོགས་འཛིན"
+note = "Presidio ཡིས་ཡི་གེ་ཀློག་པ་ལས་ཡིག་ཆ་མི་ཀློག ཞིབ་བཤེར་བྱ་འདོད་པའི་ཡི་གེ་སྤྲོད་རོགས — ཡིག་ཆ་རང་ཉིད་ཡར་འཇུག་མི་བྱེད།"
+
+[portal.policies.operations.responseMode]
+replace = "ཕྱིར་ལན་གྱིས་ཡིག་ཆ་ཚབ་བརྗེ་བྱེད"
+report = "ཡིག་ཆ་ཉར་ནས་ཕྱིར་ལན་ཐོ་འགོད་བྱེད"
+
+[portal.policies.operations.sendgridEmail]
+description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ཟུར་སྦྱར་ལྟར་སྐུར།"
+label = "ཡིག་ཆ email སྐུར (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ཞིག་ལས་སྣོན་བྱས་པ་རྒྱུ་ལམ་ཞིག་ལ་བརྡ་སྤྲོད།"
+label = "Slack ལ་འཕྲིན་ཐུང་སྤེལ"
+
+[portal.policies.operations.splunkEvent]
+description = "ཁྱེད་ཀྱི་རྩིས་ཞིབ་པས་སྔར་ནས་ལྟ་སའི་གནས་སུ་སྲིད་ཇུས་ཀྱིས་གང་བྱས་པ་ཐོ་འགོད་བྱེད།"
+label = "Splunk ལ་རྩིས་ཞིབ་དོན་རྐྱེན་སྐུར"
+
+[portal.policies.operations.sumologicEvent]
+description = "སྲིད་ཇུས་ཀྱིས་གང་བྱས་པ་དེ HTTP བསྡུ་ལེན་ཆས་ཤིག་ལ་ཐོ་འགོད་བྱེད།"
+label = "Sumo Logic ལ་རྩིས་ཞིབ་དོན་རྐྱེན་སྐུར"
+
+[portal.policies.operations.teamsNotify]
+description = "སྲིད་ཇུས་ཀྱིས་ཡིག་ཆ་ཞིག་ལས་སྣོན་བྱས་པ་རྒྱུ་ལམ་ཞིག་ལ་བརྡ་སྤྲོད།"
+label = "Teams ལ་འཕྲིན་ཐུང་སྤེལ"
+
+[portal.policies.operations.webhookPost]
+description = "ཁྱེད་ཀྱིས་འདེམས་པའི URL ཞིག་ལ་ཡིག་ཆ་རང་ཉིད་སྐུར།"
+label = "webhook ལ་ཡིག་ཆ་སྤེལ"
+
+[portal.policies.operations.zapierNotify]
+description = "འཁོར་སྐྱོད་ཀྱི་ཞིབ་ཕྲ་ཁྱེད་ཀྱི་རང་འགུལ་ལ་སྤྲོད།"
+label = "Zap ཡང་ན Make scenario སྐུལ་སློང"
+
+[portal.policies.stats]
+activeFor = "བེད་སྤྱོད་ནང"
+dataProcessed = "ལས་སྣོན་བྱས་པའི་གཞི་གྲངས"
+docsEnforced = "ལག་བསྟར་བྱས་པའི་ཡིག་ཆ"
+
+[portal.policies.status]
+active = "བེད་སྤྱོད་ནང"
+paused = "མཚམས་བཞག"
+
+[portal.policies.summary.active]
+description = "ཡར་འཇུག/ཕྱིར་འདྲེན་སྐབས་ལག་བསྟར"
+label = "བེད་སྤྱོད་ནང་གི་སྲིད་ཇུས"
+
+[portal.policies.summary.categories]
+description = "སྒྲིག་འགོད་ལ་སྤྱོད་རུང"
+label = "རིགས་དབྱེ"
+
+[portal.policies.summary.docsEnforced]
+description = "བེད་སྤྱོད་ནང་གི་སྲིད་ཇུས་ཡོངས་སུ"
+label = "ལག་བསྟར་བྱས་པའི་ཡིག་ཆ"
+
+[portal.policies.summary.paused]
+description = "སྒྲིག་འགོད་བྱས་ཡོད་ཀྱང་སྤེལ་མེད"
+label = "མཚམས་བཞག"
+
+[portal.policies.table]
+appliesTo = "ལ་ཁྱབ"
+docs = "ལག་བསྟར་བྱས་པའི་ཡིག་ཆ"
+enforces = "ལག་བསྟར་བྱེད"
+policy = "སྲིད་ཇུས"
+status = "གནས་ཚུལ"
+
+[portal.policies.wizard.actions]
+back = "ཕྱིར་ལོག"
+cancel = "འདོར་བ"
+continue = "མུ་མཐུད"
+enablePolicy = "སྲིད་ཇུས་སྤེལ"
+saveChanges = "འགྱུར་བ་ཉར"
+
+[portal.policies.wizard.capability.classify]
+desc = "ཁྱེད་ཀྱི་ཚོགས་པའི་མཚོན་རྟགས་དང་ཤོག་བྱང་ནས་ཡིག་ཆའི་རིགས་ངོས་འཛིན་བྱས་ཏེ་ཤོག་བྱང་འགོད་པས། རིགས་དབྱེ་ལྟར་ཡིག་ཚགས་དང་འཚོལ་བྱེད་ཐུབ།"
+label = "ཡིག་ཆ་རིགས་དབྱེ"
+
+[portal.policies.wizard.capability.compress]
+desc = "ཡིག་ཆ་སྔར་ལས་ཆུང་བའི་ཡིག་ཆའི་ཆེ་ཆུང་ལ་བསྡུ་གནོན་བྱེད།"
+label = "ཡིག་ཆའི་ཆེ་ཆུང་ཉུང་དུ་གཏོང"
+
+[portal.policies.wizard.capability.flatten]
+desc = "འགེངས་ཤོག་གི་ཡིག་སྒམ་དང་མཆན་འགྲེལ་ཤོག་ངོས་ནང་སྒྲིལ་ནས་རྩོམ་སྒྲིག་མི་ཐུབ་པར་བྱེད།"
+label = "ཡིག་ཆ་ཁོད་སྙོམས་བྱེད"
+
+[portal.policies.wizard.capability.ocr]
+desc = "OCR སྤེལ་ནས་བཤར་འབེབས་ཤོག་ངོས་རྣམས་འདེམས་ཐུབ་དང་འཚོལ་ཐུབ་པའི་ཡི་གེར་འགྱུར།"
+label = "ཡི་གེ་འཚོལ་ཐུབ་པར་བྱེད"
+
+[portal.policies.wizard.capability.redact]
+desc = "སྤྱི་ཚོགས་བདེ་སྲུང་ཨང་གྲངས་དང་བྱང་བུའི་ཨང་གྲངས་ལྟ་བུའི་ཚོར་སྐྱེན་ཞིབ་ཕྲ་རྙེད་ནས་ནག་པོས་བཀག་པས་ཀློག་མི་ཐུབ།"
+label = "ཚོར་སྐྱེན་ཆ་འཕྲིན་གསང་བསྒྲིབ"
+
+[portal.policies.wizard.capability.sanitize]
+desc = "སྦས་པའི JavaScript སུབ་ནས་ཡིག་ཆ་ཁ་ཕྱེ་སྐབས་ཅི་ཡང་རང་འགུལ་གྱིས་འཁོར་མི་ཐུབ་པར་བྱེད།"
+label = "འགུལ་ཡོད་ནང་དོན་འདོར"
+
+[portal.policies.wizard.capability.timestampPdf]
+desc = "རང་བཙན་དུས་ཐམ་དབང་ཚད་སྤྱད་ནས། དུས་ཚོད་གཅིག་ཏུ་ཡིག་ཆ་འདི་རྣམ་པ་འདི་རང་གིས་གནས་ཡོད་པ་བདེན་སྤྲོད་བྱེད། hash ཁོ་ན་སྐུར་བ་ཡིན - ཡིག་ཆ་ཁྱེད་ཀྱི server ནས་ནམ་ཡང་མི་འཐོན།"
+label = "ཡིད་ཆེས་རུང་བའི་དུས་ཐམ་སྣོན"
+
+[portal.policies.wizard.capability.watermark]
+desc = "ཤོག་ངོས་རེ་རེའི་སྟེང་མཐོང་ཐུབ་པའི་རྟགས་ཤིག དཔེར་ན “གསང་བ” འདེབས།"
+label = "ཆུ་རྟགས་སྤྱོད"
+
+[portal.policies.wizard.classification]
+description = "ཡར་འཇུག་བྱས་པའི་ཡིག་ཆ་རེ་རེ་ནང་སྒྲིག་མཚོན་རྟགས་ལ་བསྡུར་ནས་རིགས་དབྱེ་བྱེད་ཅིང་། འཚམ་པའི་རིགས་དབྱེ་རྣམས་ཀྱི་ཤོག་བྱང་འགོད། མཚོན་རྟགས་ཚོགས་ཁྱེད་ཀྱི་ཚོགས་པ་ཡོངས་དང་མཉམ་སྤྱོད་ཡིན།"
+labelsHeading = "རིགས་དབྱེ་མཚོན་རྟགས"
+
+[portal.policies.wizard.errors]
+noTools = "སྔོན་ལ workflow ནང་ལག་ཆ་ཉུང་མཐར་གཅིག་སྤེལ།"
+saveFailed = "སྲིད་ཇུས་ཉར་མ་ཐུབ། སླར་ཚོད་ལྟ་གནང་རོགས།"
+
+[portal.policies.wizard.output]
+heading = "ཐོན་སྐྱེད་དང་འཁོར་སྐྱོད"
+
+[portal.policies.wizard.output.filenameRule]
+autoNumber = "རང་འགུལ་ཨང་འགོད"
+label = "ཡིག་ཆའི་མིང་སྒྲིག་སྲོལ"
+placeholder = "སྣོན་རྒྱུའི་ཡི་གེ (འདེམས་རུང)"
+prefix = "སྔོན་འཇུག"
+suffix = "རྗེས་འཇུག"
+
+[portal.policies.wizard.output.outputAs]
+label = "ཐོན་སྐྱེད་རྣམ་པ"
+newFile = "ཡིག་ཆ་གསར་པ"
+newVersion = "པར་གཞི་གསར་པ"
+
+[portal.policies.wizard.output.runOn]
+export = "ཕྱིར་འདྲེན"
+helper = "སྲིད་ཇུས་སྤེལ་སྐབས། ཡར་འཇུག་སྐབས་སམ་ཕྱིར་འདྲེན་གོང་།"
+label = "གང་དུ་འཁོར་སྐྱོད"
+upload = "ཡར་འཇུག"
+
+[portal.policies.wizard.settings]
+heading = "སྒྲིག་འགོད"
+
+[portal.policies.wizard.sources]
+heading = "ཁུངས"
+loading = "ཁུངས་འགེལ་བཞིན་པ…"
+
+[portal.policies.wizard.tabs]
+ariaLabel = "སྒྲིག་འགོད་གོམ་སྟབས"
+settings = "སྒྲིག་འགོད"
+workflow = "བྱ་སྤྱོད"
+
+[portal.policies.wizard.title]
+edit = "{{category}} སྲིད་ཇུས་རྩོམ་སྒྲིག"
+setUp = "{{category}} སྲིད་ཇུས་སྒྲིག"
+
+[portal.policies.wizard.workflow]
+description = "སྲིད་ཇུས་འདིས་ལས་སྣོན་བྱེད་པའི་ཡིག་ཆ་རེ་རེར་གང་བྱེད་པ་འདེམས།"
+
+[portal.policySummary.action]
+setUp = "སྒྲིག"
+
+[portal.processorFlow]
+footnote = "གྲངས་ཀ་ནི་ཆུ་ཚོད་24 མཐའ་མ་ལ་བརྩིས་པ་ཡིན། རྒྱུན་རིམ་མྱུར་ཚད་ནི་མཚོན་བྱེད་ཙམ་ཡིན།"
+liveBadge = "Live"
+stats = "{{connected}} མཐུད་ཡོད · PDF {{processed}} ལས་སྣོན་བྱས"
+title = "PDF ལས་སྣོན་ཆས"
+
+[portal.processorFlow.lens]
+ariaLabel = "ལྟ་སྟངས"
+flow = "རྒྱུན་རིམ"
+sankey = "Sankey"
+
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "ཕམ"
+heading = "འབྲས་བུ"
+success = "འབྱོར་ཟིན"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} བེད་སྤྱོད་ནང"
+count = "{{n}} · 24h"
+heading = "སྲིད་ཇུས"
+setUp = "སྒྲིག"
+soon = "མི་འགྱངས་པར"
+
+[portal.processorFlow.sankey]
+waist = "སྲིད་ཇུས · {{n}} བེད་སྤྱོད་ནང"
+
+[portal.processorFlow.sankey.empty]
+description = "ཁུངས་ཤིག་མཐུད་ནས་སྲིད་ཇུས་ཤིག་སྤེལ་ཏེ། ཡིག་ཆ་ལས་སྣོན་ཆས་བརྒྱུད་རྒྱུ་བར་ལྟོས།"
+title = "ད་དུང་རྒྱུན་རིམ་མེད"
+
+[portal.processorFlow.sources]
+comingSoonTag = "མཐུད"
+editor = "Stirling PDF Editor"
+heading = "ཁུངས"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email ལེན་འཇུག"
+
+[portal.procurement]
+subtitle = "ཁྱེད་ཀྱི་ཚོགས་པ་དཔྱད་ཞིབ། གན་རྒྱ་འཇོག་པ། དང་འགོ་འཛུགས་བྱེད། ཡིག་ཆ་ཡོངས་གནས་གཅིག་ཏུ།"
+title = "ཉོ་སྒྲུབ"
+
+[portal.procurement.agreement]
+agreeCta = "གྲོས་མཐུན་ལ་མིང་རྟགས་འགོད"
+confidential = "གསང་བ"
+confirm = "ངས་གྲོས་མཐུན་འདི་ཀློག་ཟིན་ཞིང་མོས་མཐུན་ཡོད། དེ་མ་ཟད་གོང་དུ་མིང་འཁོད་པའི་ཚོགས་པའི་ཚབ་ཏུ་མིང་རྟགས་འགོད་དབང་ཡོད་པར་ངས་མཚོན།"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA དང DPA བཅས་མིང་རྟགས་གཅིག་ཏུ་མཉམ་སྒྲིལ།"
+download = "ཕབ་ལེན"
+downloadDraftError = "གྲོས་མཐུན PDF བཟོ་མ་ཐུབ - ཡིག་ཆ་མངོན་འགྱུར་ཆས་སྤྱོད་མི་ཐུབ། ཏོག་ཙམ་རྗེས་སླར་ཚོད་ལྟ་གནང་བའམ་རྒྱབ་སྐྱོར་ལ་འབྲེལ་བ་གནང་རོགས།"
+downloadError = "མིང་རྟགས་བཀོད་པའི་གྲོས་མཐུན་ཕབ་ལེན་བྱ་མ་ཐུབ། སླར་ཚོད་ལྟ་གནང་རོགས།"
+legalName = "ཁྲིམས་མཐུན་ཚོགས་པའི་མིང"
+legalNamePlaceholder = "མིང་རྟགས་འགོད་རྒྱུའི་ཁྲིམས་མཐུན་ཚོགས་པ"
+loadError = "གྲོས་མཐུན་འགེལ་མ་ཐུབ། སླར་ཚོད་ལྟ་གནང་རོགས།"
+loading = "གྲོས་མཐུན་འགེལ་བཞིན་པ..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "བསྒྱུར་བ་ཞུ་བ"
+scrollHint = "ཞིབ་བཤེར་ཆེད་འདྲིལ་སྒུལ་བྱེད"
+signatory = "མིང་རྟགས་འགོད་མཁན་གྱི་མིང"
+signatoryPlaceholder = "མིང་ཆ་ཚང"
+signatoryTitle = "མིང་རྟགས་འགོད་མཁན་གྱི་གོ་གནས"
+signatoryTitlePlaceholder = "དཔེར་ན། ཁྲིམས་དོན་སྤྱི་ཁྱབ་བློ་འདོན་པ"
+signError = "ཁྱེད་ཀྱི་མིང་རྟགས་ཟིན་ཐོར་འགོད་མ་ཐུབ། སླར་ཚོད་ལྟ་གནང་རོགས།"
+
+[portal.procurement.builder]
+addons = "ཁ་སྣོན"
+addressLine1 = "ཁ་བྱང་ཕྲེང་ 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "ཁ་བྱང་ཕྲེང་ 2"
+addressLine2Placeholder = "ཁང་མིག་། ཐོག་རྩེག ཁང་པ"
+back = "ཕྱིར་ལོག"
+businessName = "ཚོང་ལས་མིང"
+businessNamePlaceholder = "ཁྱེད་ཀྱི་ཀུང་སི"
+city = "གྲོང་ཁྱེར"
+cityPlaceholder = "San Francisco"
+completeRequired = "རིན་གོང་འདྲེན་ཡིག་བཟོ་སྔོན། དགོས་ངེས་ཀྱི་ས་སྟོང་ (* རྟགས་ཅན) རྣམས་ནུས་ལྡན་གྱི email དང་བཅས་ཆ་ཚང་སྐོང་རོགས།"
+contactEmail = "འབྲེལ་གཏུག email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "འབྲེལ་གཏུག་མིང"
+contactNamePlaceholder = "Jane Doe"
+continue = "མུ་མཐུད"
+done = "ལེགས་གྲུབ"
+eula = "ངས Stirling Enterprise EULA ཀློག་ཟིན་ཞིང་དེར་མོས་མཐུན་བྱེད། དེས་རིན་གོང་འདྲེན་ཡིག་འདི་ནས་བཟོས་པའི་གྲོས་མཐུན་ལ་སྟངས་འཛིན་བྱེད།"
+generate = "རིན་གོང་འདྲེན་ཡིག་བཟོ"
+indemnification = "IP སྲུང་སྐྱོབ་ཇེ་ལེགས"
+indemnificationSub = "ང་ཚོའི IP སྲུང་སྐྱོབ་དེ་པེ་ཊེན་ཊི་རེ་འདུན་བར་རྒྱ་བསྐྱེད་བྱེད། པར་དབང་། ཚོང་རྟགས། ཚོང་ལས་གསང་བའི་རྩ་བའི་གུན་གསབ་ནི་རིན་མེད་དུ་ཚུད་ཡོད།"
+paperEyebrow = "ཁེ་ལས་རིམ་པའི་རིན་གོང་འདྲེན་ཡིག"
+paperFor = "གྲ་སྒྲིག་བྱས་ཡུལ"
+pdfSize = "PDF ཆེ་ཆུང"
+poNumber = "PO ཨང་གྲངས"
+poNumberPlaceholder = "འདེམས་རུང"
+postalCode = "སྦྲག་ཨང"
+postalCodePlaceholder = "94105"
+posture = "སྐྱོང་སྡོམ"
+posture_count = "~{{count}} སྲིད་ཇུས"
+posture_essentials = "གལ་ཆེའི་ཆ་ཤས"
+posture_essentialsSub = "རིགས་དབྱེ + མཉམ་སྤྱོད — སྔོན་སྒྲིག"
+posture_governed = "སྐྱོང་སྡོམ་བྱས་པ"
+posture_governedSub = "བདེ་འཇགས་དང་ལམ་སྟོན་ཁ་སྣོན་བྱེད"
+posture_regulated = "སྒྲིག་སྲོལ་འོག"
+posture_regulatedSub = "རིགས་ཚན་ཚང་མ — མཐུན་སྒྲུབ། ཉར་ཚགས། ནང་འཇུག"
+qbr = "དུས་ཚིགས་རེའི་ཚོང་ལས་ཞིབ་བཤེར"
+qbrSub = "ཁྱེད་ཀྱི SE ཡིས་དུས་ཚིགས་རེར་སྤྱོད་ཚུལ་དང་ལམ་དཀར་ཞིབ་བཤེར་བྱེད"
+region = "མངའ་སྡེ / ས་ཁུལ"
+regionPlaceholder = "California"
+running = "{{annual}} / ལོ · {{years}}-ལོ {{tcv}}"
+s1Sub = "ཁྱེད་ཀྱི་ཚོགས་པ་དང་། ལོ་རེར་སྒྲུབ་རྒྱུར་རེ་བ་ཡོད་པའི PDF རྣམས།"
+s1Title = "ཁྱེད་ཀྱིས་ག་ཚོད་ལས་སྣོན་བྱེད་རྒྱུ་ཡིན།"
+s2Sub = "དུས་ཡུན་རིང་བས་རིན་ཚད་ལ་ཆག་ཡང་ཡོད། ཁྱེད་ཀྱི་ཞབས་ཞུའི་རིམ་པས་རམ་འདེགས་གཏན་འཁེལ་བྱེད།"
+s2Title = "ཁས་ལེན་དང་ཞབས་ཞུ"
+s3Sub = "རིན་གོང་འདྲེན་ཡིག་དང་དེས་བཟོ་བའི་གྲོས་མཐུན་ཆེད།"
+s3Title = "ཁྱེད་ཀྱི་ཞིབ་ཕྲ"
+serviceLevel = "ཞབས་ཞུའི་རིམ་པ"
+size_compact = "ཆུང་བསྡུས"
+size_compactSub = "གཙོ་བོ་ཡི་གེ། 1 MB འོག"
+size_heavy = "ལྗིད་པ"
+size_heavySub = "བསྐྱར་པར་བྱས་པའམ་པར་རིས་མང་བ། 5 MB+"
+size_standard = "ཚད་ལྡན"
+size_standardSub = "ཡི་གེ་དང་པར་རིས་མཉམ་བསྲེས། 1 ནས 5 MB བར"
+slDedicated = "ཆེད་སྤྱོད"
+slDedicatedSub = "ལས་ཀའི་ཆུ་ཚོད་ 4 · ཆེད་སྤྱོད SE / CSM · +$30,000/ལོ"
+slPriority = "གཙོ་རིམ"
+slPrioritySub = "ལས་ཀའི་ཉིན་དེ་རང · མིང་འཁོད་ CSM · ཚུད་ཡོད"
+slStandard = "ཚད་ལྡན"
+slStandardSub = "ལས་ཀའི་ཉིན་རྗེས་མ · མཉམ་སྤྱོད་ CSM · ཚུད་ཡོད"
+stepOf = "གོམ་པ་ {{n}} / {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "འདེམས་རུང"
+term = "དུས་ཡུན"
+termDiscount = "ལོ་མང་ཁས་ལེན་གྱི་ཆག་ཡང་ {{pct}}% སྤྱད་ཟིན"
+title = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་བཟོ"
+training = "འགོ་འཛུགས་དང་སྦྱོང་བརྡར"
+trainingSub = "ཁྱེད་ཀྱི་ཚོགས་པ་འགོ་འཛུགས་ཐུབ་པར་དངོས་ཐོག་སློབ་ཚན"
+users = "སྤྱོད་མཁན་ཁྱོན"
+usersPlaceholder = "དཔེར་ན། 250"
+viewEula = "ཀློག"
+volEstimated = "{{count}} སྤྱོད་མཁན་ལས་ཚོད་དཔག་བྱས་པ (~PDF རེ་ 2,000 རེ། རང་འགུལ་ཚུད)། ཁྱེད་ཀྱིས་དེ་ལས་གསལ་བར་ཤེས་ན་རྩོམ་སྒྲིག་གནང་།"
+volManual = "ཁྱེད་ཀྱི་གྲངས་ཀ་སྤྱོད་བཞིན་ཡོད། དུས་གང་རུང་ལ་ཚོགས་པའི་ཆེ་ཆུང་ནས་སླར་ཚོད་དཔག་བྱེད་ཆོག"
+volNoUsers = "གསལ་མེད་དམ། ཁྱེད་ཀྱི་ཚོགས་པའི་ཆེ་ཆུང་ནང་འཇུག་གནང་ན། ང་ཚོས་ཚོད་དཔག་བྱེད།"
+volume = "ལོ་རེའི PDF འབོར་ཚད"
+volumePlaceholder = "དཔེར་ན། 1,000,000"
+years_one = "ལོ་ {{count}}"
+years_other = "ལོ་ {{count}}"
+
+[portal.procurement.documents]
+agreement = "ཁེ་ལས་རིམ་པའི་གྲོས་མཐུན"
+agreementSub = "MSA, མངགས་ཐོ་དང DPA མིང་རྟགས་གཅིག་ནང་།"
+download = "ཕབ་ལེན"
+eula = "EULA དང་ཚོང་ལས་ཆ་རྐྱེན"
+eulaSub = "software དང་རང་ཞབས་ཚོང་ལས་ཆ་རྐྱེན།"
+invoice = "འཛིན་ཤོག"
+invoiceSub = "ཁྱེད་ཀྱི་དང་པོའི་མངགས་ཉོའི་འཛིན་ཤོག"
+laterInvoice = "ཁྱེད་ཀྱིས་ད स्वीकार་བྱས་རྗེས་ཐོབ་ཐུབ"
+laterQuote = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་སྤྲད་རྗེས་ཐོབ་ཐུབ"
+quote = "རིན་གོང་འདྲེན་ཡིག"
+quoteSub = "ཁྱེད་ཀྱི་རྣམ་གྲངས་བགོས་པའི་ཁེ་ལས་རིམ་པའི་རིན་གོང་འདྲེན་ཡིག"
+sla = "SLA ཟུར་སྦྱར"
+slaSub = "རམ་འདེགས་རིམ་པ་དང་ལན་འདེབས་དམིགས་ཚད།"
+subprocessors = "ཡན་ལག་ལས་སྣོན་པ"
+subprocessorsSub = "ཁྱེད་ཀྱི་ཚབ་ཏུ་གནས་སྡུད་ལས་སྣོན་བྱེད་པའི་ཕྱི་ཕྱོགས་གསུམ་པ།"
+subtitle = "ཁྱེད་ཀྱི་ཚོང་འབྲེལ་ཡིག་ཆ། དུས་གང་རུང་ཐོབ་ཐུབ།"
+title = "ཡིག་ཆ"
+view = "ལྟ"
+
+[portal.procurement.error]
+title = "གནད་དོན་ཞིག་བྱུང་སོང"
+
+[portal.procurement.hero]
+barAria = "གོ་རིམ་ {{current}} / {{total}}"
+ctaAgreement = "གྲོས་མཐུན་ཞིབ་བཤེར་དང་མིང་རྟགས་འགོད"
+ctaExploring = "ཁྱེད་ཀྱི་ཚོད་ལྟ་སྒྲིག་སྦྱོར"
+ctaQuote = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་ཞིབ་བཤེར"
+ctaReviewQuote = "རིན་གོང་འདྲེན་ཡིག་ཞིབ་བཤེར"
+ctaTrial = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་བཟོ"
+documents = "ཡིག་ཆ"
+eyebrow = "ཁེ་ལས་རིམ་པ"
+eyebrowCompany = "{{company}} Enterprise"
+inviteTeammates = "ཚོགས་གྲོགས་གདན་འདྲེན"
+licenseKey = "ཆོག་མཆན་ལྡེ་མིག"
+liveSub = "ཁྱེད་ཀྱི་ཚོགས་སྡེ་མཁོ་སྤྲོད་ཟིན་ཞིང་ཆོག་མཆན་ནུས་ལྡན་ཡིན།"
+liveTitle = "ཁྱེད་ Stirling Enterprise ཐོག་དངོས་སུ་སྤྱོད་བཞིན་ཡོད"
+next = "རྗེས་མ། {{stage}}"
+open = "ཉོ་སྒྲུབ་ཁ་ཕྱེ"
+scheduleCall = "ཁ་པར་གྲོས་མོལ་དུས་བཀག"
+sentenceAgreement = "གྲོས་མཐུན་ཞིབ་བཤེར་དང་མིང་རྟགས་འགོད"
+sentenceLive = "མཁོ་སྤྲོད་དང་ཁྱབ་སྤེལ"
+sentencePayment = "ཉོ་སྒྲུབ་མངགས་ཐོ་དང་དངུལ་སྤྲོད"
+sentenceQuote = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་ཞིབ་བཤེར་དང་དང་ལེན"
+sentenceTrial = "ཁྱེད་ཀྱི་ཚོད་ལྟའི་ལས་ཁུལ་སྒྲིག་སྦྱོར"
+
+[portal.procurement.journey]
+daysLeft_one = "{{count}} ཉིན་ལྷག་ཡོད"
+daysLeft_other = "{{count}} ཉིན་ལྷག་ཡོད"
+
+[portal.procurement.journeySteps.agreement]
+blurb = "མིང་རྟགས་གཅིག་གིས MSA, མངགས་ཐོ། EULA དང DPA ཚང་མ་ཁེབས།"
+gatingAction = "ཁྱེད་ཀྱི་གྲོས་མཐུན་ཞིབ་བཤེར་དང་མིང་རྟགས་འགོད"
+label = "གྲོས་མཐུན"
+
+[portal.procurement.journeySteps.implementation]
+blurb = "ཁྱེད་ཀྱི་ལས་ཁུལ་མཁོ་སྤྲོད་དང go-live playbook སྒྲུབ།"
+gatingAction = "ཁྱེད་ཀྱི་ལས་ཁུལ་མཁོ་སྤྲོད་བྱེད་བཞིན"
+label = "ལག་བསྟར"
+
+[portal.procurement.journeySteps.payment]
+blurb = "བྱང་བུ། དངུལ་ཁང་བརྒྱུད་སྤོ། ཡང་ན་ཉོ་སྒྲུབ་མངགས་ཐོ་ལྟར་དངུལ་སྤྲོད།"
+gatingAction = "དངུལ་སྤྲོད་གཏན་འཁེལ"
+label = "དངུལ་སྤྲོད"
+
+[portal.procurement.journeySteps.quote]
+blurb = "ཁས་ལེན་འབོར་ཚད་ཀྱི་རིན་གོང་དང་གན་རྒྱའི་དུས་ཡུན་ཞིབ་བཤེར།"
+gatingAction = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་དང་ལེན"
+label = "རིན་གོང་འདྲེན་ཡིག"
+
+[portal.procurement.journeySteps.trial]
+blurb = "ཁྱེད་ཀྱི་ཡིག་ཆ་དང་ལས་རིམ་ཐོག Stirling ཚོད་དཔག་བྱེད།"
+gatingAction = "ཁྱེད་ཀྱི་རིན་གོང་འདྲེན་ཡིག་བཟོ"
+label = "ཚོད་ལྟ"
+
+[portal.procurement.license]
+copied = "འདྲ་བཤུས་བྱས་ཟིན"
+copy = "ལྡེ་མིག་འདྲ་བཤུས"
+downloadError = "ད་ལྟ་དྲ་མེད་ཆོག་མཆན་ཡིག་ཆ་བཟོ་མ་ཐུབ — ཅུང་ཙམ་རྗེས་སླར་ཚོད་ལྟ་གནང་རོགས།"
+downloadOffline = "དྲ་མེད་ཆོག་མཆན་ཕབ་ལེན (.lic)"
+hint = "ལྡེ་མིག་འདི་རང་སྐྱོང་དཔེ་མཚོན་ནང་སྦྱར་ནས་ནུས་སློང་བྱེད་ཆོག ཡང་ན་ཁྱེད་ཀྱི་ཟིན་ཐོའི་ཆེད་ཉར་ཆོག དེ་བདེ་འཇགས་སུ་ཉར་རོགས།"
+label = "ཁྱེད་ཀྱི་ཆོག་མཆན་ལྡེ་མིག"
+subtitle = "ལྡེ་མིག་འདིས་རང་སྐྱོང་དཔེ་མཚོན་ནུས་སློང་བྱེད་ཆོག ཡང་ན་ཁྱེད་ཀྱི་ཟིན་ཐོའི་ཆེད་ཉར་ཆོག"
+title = "ཁྱེད་ཀྱི་ཆོག་མཆན་ལྡེ་མིག"
+trialFileHint = "འདི་ནི་ཁྱེད་ཀྱི་ཚོད་སྤྱོད་ཆོག་མཆན་ཡིག་ཆ་ཡིན། གྲོས་མཐུན་གཏན་འཁེལ་བྱས་རྗེས། ཕྱིར་ལོག་ནས་ཡང་བསྐྱར་ཕབ་ལེན་བྱོས — དྲ་ཐོག་ཆོག་མཆན་ལྡེ་མིག་དང་མི་འདྲ་བར། .lic ཡིག་ཆ་རང་འགུལ་གྱིས་གསར་སྒྱུར་མི་བྱེད།"
+
+[portal.procurement.link]
+cta = "རྩིས་ཐོ་འབྲེལ་མཐུད"
+description = "ཉོ་སྒྲུབ་ནི་ཁྱེད་ཀྱི་འབྲེལ་མཐུད་བྱས་པའི Stirling རྩིས་ཐོ་ཐོག་འགྲོ་སྐྱོང་བྱེད། འདིས་ང་ཚོས་ཚོད་སྤྱོད་སྤྲོད་པ། གོང་འབོལ་རིན་གོང་རྩིས་པ། དང་རྩིས་བསྡུ་འགོ་འཛུགས་པའི་ཐབས་ཡིན། འགོ་འཛུགས་ཆེད་རྩིས་ཐོ་ཞིག་འབྲེལ་མཐུད་བྱོས།"
+eyebrow = "ཁེ་ལས"
+title = "འགོ་འཛུགས་ཆེད་ཁྱེད་ཀྱི་རྩིས་ཐོ་འབྲེལ་མཐུད་བྱོས"
+
+[portal.procurement.live]
+description = "ཁྱེད་ཀྱི་མངགས་ཉོ་འགུལ་སྤྱོད་ནང་ཡོད་ཅིང་ཆོག་མཆན་སྤྲད་ཟིན། ཁྱེད་ཀྱི་ཚོགས་པ་སྤྲོད་སྒྲིག་བྱས་ཟིན་ཞིང་རྩིས་བསྡུ་འགོ་ཚུགས་ཟིན།"
+eyebrow = "དངོས་སྤྱོད"
+title = "ཁྱེད་རང Stirling Enterprise ཐོག་དངོས་སྤྱོད་ལ་ཞུགས་ཟིན"
+
+[portal.procurement.milestone]
+downloadError = "ད་ལྟ་གོང་འབོལ PDF ཕབ་ལེན་མ་ཐུབ — སྐད་ཅིག་རྗེས་སླར་ཚོད་ལྟ་བྱོས།"
+
+[portal.procurement.payment]
+description = "ཁྱེད་ཀྱི་གོང་འབོལ་དང་ལེན་བྱས་ཟིན་ཞིང་ཆོག་མཆན་ཡང་ད་སྔ་ནས་འགུལ་སྤྱོད་ནང་ཡོད — ཁྱེད་ཀྱི་ཚོགས་པས་འཕྲལ་དུ་འགོ་འཛུགས་ཆོག གྲ་སྒྲིག་ཡོད་སྐབས་རྩིས་ཤོག་དང་པོ་སྤྲོད། འདི་ནས་སྤྲོད་པའམ་ཕབ་ལེན་བྱེད་ཆོག་ཅིང་། email མི་དགོས།"
+downloadAgreement = "མིང་རྟགས་བཀོད་པའི་གྲོས་མཐུན་ཕབ་ལེན"
+downloadInvoice = "རྩིས་ཤོག་ཕབ་ལེན"
+eyebrow = "དངུལ་སྤྲོད"
+title = "མངགས་ཉོ་བཟོས་ཟིན"
+viewInvoice = "རྩིས་ཤོག་ལྟ་བ་དང་སྤྲོད་པ"
+
+[portal.procurement.review]
+acceptCta = "གོང་འབོལ་དང་ལེན"
+annual = "ལོ་རེའི་རིན་གླ་། (ལོ་ 1)"
+downloadCta = "གོང་འབོལ་ཕབ་ལེན"
+poNumber = "ཉོ་སྒྲུབ་མངགས་ཐོ། {{po}}"
+renewal = "དུས་ཡུན་རྗེས་སུ {{amount}}/ལོ ཐོག་སླར་གསོ་བྱེད། (+{{pct}}% CPI)"
+tcv = "{{years}}-ལོའི་དུས་ཡུན། སྔོན་ནས་ཆ་ཚང་སྤྲད་པ། {{tcv}}"
+validUntil = "{{date}} བར་གོ་ཆོད།"
+
+[portal.procurement.schedule]
+fallback = "དུས་ཚོད་སྒྲིག་ཆས་འཇུག་མ་ཐུབ།"
+fallbackLink = "དུས་ཚོད་སྒྲིག་པ་མཆོང་ལྡེ་གསར་པའི་ནང་ཁ་ཕྱེ"
+loading = "དུས་ཚོད་སྒྲིག་ཆས་འཇུག་བཞིན་པ..."
+subtitle = "ཁྱེད་ཀྱི་ཐབས་ལམ་བཟོ་འགོད་པས་ཁྱེད་ཀྱི་ཚོགས་པར་འགྲེམས་སྤེལ་གོ་རིམ་འགྲེལ་བཤད་བྱེད། ཁྱེད་ལ་འཚམ་པའི་དུས་ཚོད་ཞིག་འདེམས།"
+title = "ཁ་པར་གྲོས་མོལ་དུས་ཚོད་སྒྲིག"
+
+[portal.procurement.setup]
+airgap = "དྲ་བ་ལས་ཆོད་པ"
+airgapSub = "བཀག་སྡོམ་བྱས་པ། ཕྱིར་འབྲེལ་མེད"
+back = "ཕྱིར"
+businessName = "ཚོང་ལས་མིང"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "དོ་དམ་བྱས་པ། འགོ་འཛུགས་མགྱོགས་ཤོས"
+continue = "མུ་མཐུད"
+deployment = "གང་དུ་འགྲེམས་སྤེལ་བྱ་དགོས།"
+eula = "ངས Stirling EULA & Commercial Terms ལ་མོས་མཐུན་བྱེད།"
+fullName = "མིང་ཆ་ཚང"
+fullNamePlaceholder = "ཁྱེད་ཀྱི་མིང"
+invites = "ཚོགས་གཏོགས་གདན་འདྲེན · འདེམས་རུང"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "ཁ་པར་གྲོས་མོལ་དུས་ཚོད་སྒྲིག"
+seats = "ཚོད་སྤྱོད་མི་གྲངས"
+seatsPlaceholder = "དཔེར་ན། 15"
+selfhost = "རང་ཉིད་ཀྱིས་གཙོ་སྐྱོང"
+selfhostSub = "Docker ཡང་ན Kubernetes"
+start = "ཚོད་སྤྱོད་འགོ་འཛུགས"
+stepOf = "གོམ་པ {{n}} / {{total}}"
+subtitle = "ཉིན་ 14 རིང་རིན་མེད། སྤྱོད་བྱང་མི་དགོས།"
+subtitleDetails = "ཁྱེད་ཀྱི་གོང་འབོལ་དང་གྲོས་མཐུན་ཆེད་ཞིབ་ཕྲ་འགའ།"
+talkFirst = "སྔོན་ལ་གྲོས་མོལ་བྱ་འདོད་དམ།"
+title = "ཁྱེད་ཀྱི་ཚོད་སྤྱོད་སྒྲིག"
+viewEula = "ཀློག"
+workEmail = "ལས་ཀའི email"
+workEmailPlaceholder = "you@company.com"
+
+[portal.procurement.trial]
+body = "དུས་འགྱངས་བྱས་ན་ཉིན་ 7 ཁ་སྣོན་བྱེད་ཅིང་ཁྱེད་ཀྱི་ཐབས་ལམ་བཟོ་འགོད་པར་བརྡ་ཐོ་གཏོང་།"
+bodyMaxed = "ཁྱེད་ཀྱིས་དུས་འགྱངས་ཚང་མ་སྤྱད་ཟིན — དུས་ཚོད་མང་བ་དགོས་ན་ཁྱེད་ཀྱི་ཐབས་ལམ་བཟོ་འགོད་པར་གྲོས་མོལ་བྱོས།"
+cancel = "ཚོད་སྤྱོད་འདོར"
+extend = "ཉིན་ 7 དུས་འགྱངས"
+maxed = "མཐོ་ཚད་ལ་སླེབས"
+subtitle = "ཁྱེད་ཀྱི་རིན་མེད་ཚོད་སྤྱོད {{date}} བར་འགྲོ སྤྱོད་བྱང་མི་དགོས།"
+title = "ཁེ་ལས་ཚོད་སྤྱོད"
+
+[portal.search]
+ariaLabel = "འཚོལ"
+placeholder = "Stirling ནང་འཚོལ — endpoints, pipelines, docs…"
+
+[portal.search.empty]
+noActionsDescription = "མགྱོགས་བྱ་སྤྱོད་ཆོག་པ་ཆགས་སྐབས་འདིར་མངོན་ཡོང་།"
+noActionsTitle = "མགྱོགས་བྱ་མེད"
+noMatches = "\"{{query}}\" ལ་མཐུན་པ་མེད"
+noMatchesDescription = "ལྡེ་ཚིག་གཞན་ཞིག་ཚོད་ལྟ་བྱོས་སམ་དཀར་ཆག་ལ་ལྟོས།"
+
+[portal.settings.groups]
+admin = "དོ་དམ་པ"
+
+[portal.settings.sections]
+account-link = "རྩིས་ཐོ་འབྲེལ་མཐུད"
+
+[portal.shell.sidebar]
+appEditor = "རྩོམ་སྒྲིག་ཆས"
+appProcessor = "ལས་སྒྲུབ་ཆས"
+linkAccount = "Stirling རྩིས་ཐོ་འབྲེལ་མཐུད"
+primaryNav = "གཙོ་བོའི་ཁ་ཕྱོགས་འདྲེན"
+switchApp = "app བརྗེ"
+
+[portal.shell.topbar]
+closeNav = "ཁ་ཕྱོགས་འདྲེན་ཁ་རྒྱག"
+openNav = "ཁ་ཕྱོགས་འདྲེན་ཁ་ཕྱེ"
+search = "འཚོལ"
+
+[portal.sources]
+subtitle = "ཡིག་ཆ་རྣམས Stirling ནང་འཇུག་པའི་བསྐྱར་སྤྱོད་ཆོག་པའི་ནང་འཇུག་འབྲེལ་མཐུད། ཁུངས་ཞིག་ཐེངས་གཅིག་སྒྲིག་རྗེས། ལས་རིམ་རྒྱུན་གྲངས་མང་ནས་དེ་ལ་གཞི་བཅོལ་བྱེད་ཆོག"
+title = "ཁུངས"
+
+[portal.sources.actions]
+connectSource = "ཁུངས་འབྲེལ་མཐུད"
+
+[portal.sources.builder]
+back = "ཁུངས་ལ་ཕྱིར་ལོག"
+backToTypes = "ཁུངས་རིགས་ཚང་མ"
+cancel = "འདོར"
+chooseHint = "ཡིག་ཆ་གང་ནས་ཡོང་བ་འདེམས། སྐྱ་མདོག་གི connectors རྣམས་འོང་བཞིན་པ་ཡིན།"
+comingSoon = "མགྱོགས་པོ་འོང་རྒྱུ"
+comingSoonHeading = "མགྱོགས་པོ་འོང་རྒྱུ"
+create = "ཁུངས་བཟོ"
+createTitle = "ཁུངས་ཞིག་འབྲེལ་མཐུད"
+delete = "སུབ"
+editTitle = "ཁུངས་རྩོམ་སྒྲིག"
+enabled = "ནུས་ཡོད"
+save = "འགྱུར་བ་ཉར"
+
+[portal.sources.builder.folderAccess]
+description = "ཡིག་སྣོད་རང་འགུལ་བྱ་རིམ་གྱིས་དོ་དམ་པས་ཆོག་མཆན་སྤྲད་པའི་ཡིག་སྣོད་ཁོ་ན་སྤྱོད་ཐུབ། དེ་ཡིག་སྣོད་འཛུལ་སྤྱོད་སྒྲིག་འགོད་འོག་ཁ་སྣོན་བྱས་ནས། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
+openSettings = "ཡིག་སྣོད་འཛུལ་སྤྱོད་སྒྲིག་འགོད"
+title = "ཡིག་སྣོད་འདི་ལ་ཆོག་མཆན་མེད"
+
+[portal.sources.delete]
+body = "\"{{name}}\" སུབ་བམ། འདི་ཕྱིར་འཐེན་མི་ཐུབ། དེ་ལ་གཞི་བཅོལ་བྱེད་པའི་སྲིད་ཇུས་རྣམས་གསར་སྒྱུར་དགོས་སྲིད།"
+cancel = "འདོར"
+confirm = "སུབ"
+title = "ཁུངས་སུབ་བམ།"
+
+[portal.sources.empty]
+description = "ཁྱེད་ཀྱི་སྲིད་ཇུས་ལ་གཞི་གྲངས་འཐེན་ས་ཡོད་པའི་ཆེད་ཉར་ཚགས་གནས་ཤིག་འབྲེལ་མཐུད་བྱོས།"
+title = "ད་དུང་ཁུངས་འབྲེལ་མཐུད་བྱས་མེད"
+
+[portal.sources.kpi]
+inUse = "སྤྱོད་བཞིན"
+total = "འབྲེལ་མཐུད"
+unused = "སྤྱོད་མེད"
+
+[portal.sources.networkFields.connection]
+helperText = "server ཁ་བྱང་དང་དཔང་ཡིག་ཡོད་པའི་ཉར་ཚགས་འབྲེལ་མཐུད། དེ་ལ་གཞི་བཅོལ་བྱེད་པའི་ཁུངས་ཚང་མས་བསྐྱར་སྤྱོད་བྱེད།"
+label = "འབྲེལ་མཐུད"
+
+[portal.sources.networkFields.directory]
+helperText = "server ཐོག་བསྐོར་ཞིབ་བྱ་སའི་ཡིག་སྣོད། ནང་འཛུལ་ཁྱིམ་མམ་མཉམ་སྤྱོད་རྩ་བ་ལ་ལྟོས་པའི་ལམ་བུ། རྩ་བའི་ཆེད་སྟོང་བཞག"
+label = "ཡིག་སྣོད"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume ཡིས་སྲིད་ཇུས་ཚང་མས་བཟོ་སྦྱོར་བྱས་རྗེས་ཡིག་ཆ་རེ་རེ server ནས་སུབ་སྐྱེལ་བྱེད།"
+label = "ཀློག་སྟངས"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: ཡིག་ཆ་རེ་རེ་ཐེངས་གཅིག་བཟོ་སྦྱོར"
+snapshot = "Snapshot: འཁོར་རེར་ཡིག་སྣོད་སླར་ཀློག"
+
+[portal.sources.networkFields.recursive]
+label = "ཡིག་སྣོད་གཏིང་ཚད"
+
+[portal.sources.networkFields.recursive.options]
+all = "ཡན་ལག་ཡིག་སྣོད་ཚུད"
+top = "རིམ་པ་མཐོ་ཤོས་ཁོ་ན"
+
+[portal.sources.status]
+active = "འགུལ་སྤྱོད"
+disabled = "སྤྱོད་མི་ཐུབ"
+unused = "སྤྱོད་མེད"
+
+[portal.sources.table]
+documents = "ཡིག་ཆ"
+source = "ཁུངས"
+status = "གནས་ཚུལ"
+usedBy = "སྲིད་ཇུས"
+
+[portal.sources.types.box]
+description = "ཁྱེད་ཀྱི་ཚོགས་པས་སྔ་ནས་མཉམ་སྤྱོད་བྱེད་པའི Box ཡིག་སྣོད་ནས་ཡིག་ཆ་འཐེན།"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "མཉམ་སྤྱོད Dropbox ཡིག་སྣོད་ནས་ཡིག་ཆ་འཐེན།"
+label = "Dropbox"
+
+[portal.sources.types.editor]
+description = "སྲིད་ཇུས་དང AI འཁོར་སྐྱོད་ཁྱབ་ཁོངས་སུ། ཁྱེད་ཀྱི་ཚོགས་པས་རྩོམ་སྒྲིག་ཆས་ནང་བཟོ་སྦྱོར་བྱས་པའི་ཡིག་ཆ།"
+label = "རྩོམ་སྒྲིག་ཆས"
+noPolicies = "ད་དུང་རྩོམ་སྒྲིག་ཆས་ནས་སྲིད་ཇུས་འཁོར་སྐྱོད་བྱས་མེད།"
+
+[portal.sources.types.email]
+description = "ཆེད་སྤྱོད email སྒམ་ལ་བསྐུར་བའི་ཟུར་སྦྱར་རྣམས་ཡིག་ཆར་སྒྱུར།"
+label = "Email འབྱོར་སྒམ"
+
+[portal.sources.types.folder]
+description = "server ཐོག་གི་ཡིག་སྣོད་ཞིག་ལ་ཡིག་ཆ་གསར་པ་ཡོད་མེད་ལྟ་སྲུང་བྱོས།"
+label = "ཡིག་སྣོད"
+
+[portal.sources.types.folder.fields.directory]
+helperText = "Stirling གིས་བཟོ་སྦྱོར་བྱ་རྒྱུའི་ཡིག་ཆ་ལྟ་སྲུང་བྱ་སའི་ལམ་བུ་ཆ་ཚང་།"
+label = "དཀར་ཆག་ལམ་བུ"
+placeholder = "/data/incoming"
+
+[portal.sources.types.folder.fields.identity]
+helperText = "ནང་དོན་ཞིབ་བཤེར་གྱིས་འགྱུར་བ་བྱུང་བའི་ཡིག་ཆ་རེ་རེ་ཀློག་པས། ནང་དོན་མི་འགྱུར་བའི་མིང་བསྒྱུར་དང་རེག་པ་རྣམས་སླར་བཟོ་སྦྱོར་མི་བྱེད།"
+label = "འགྱུར་བ་ངོས་འཛིན"
+
+[portal.sources.types.folder.fields.identity.options]
+hash = "ཆེ་ཆུང་། ཚེས་གྲངས་དང་ནང་དོན་ཞིབ་བཤེར"
+stat = "ཆེ་ཆུང་དང་བཟོ་བཅོས་ཚེས་གྲངས"
+
+[portal.sources.types.folder.fields.mode]
+label = "ཀློག་སྟངས"
+
+[portal.sources.types.folder.fields.mode.options]
+consume = "Consume: ཡིག་ཆ་རེ་རེ་ཐེངས་གཅིག་བཟོ་སྦྱོར"
+snapshot = "Snapshot: འཁོར་རེར་ཡིག་སྣོད་སླར་ཀློག"
+
+[portal.sources.types.folder.fields.recursive]
+label = "ཡིག་སྣོད་གཏིང་ཚད"
+
+[portal.sources.types.folder.fields.recursive.options]
+all = "ཡན་ལག་ཡིག་སྣོད་ཚུད"
+top = "རིམ་པ་མཐོ་ཤོས་ཁོ་ན"
+
+[portal.sources.types.ftp]
+description = "FTP ཡང་ན FTPS server ཡིག་སྣོད་ལ་ཡིག་ཆ་གསར་པ་ཡོད་མེད་བསྐོར་ཞིབ་བྱོས།"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "མཉམ་སྤྱོད་ Google Drive ཡིག་ཁུག་ནས་ཡིག་ཆ་འཐེན་ལེན་བྱེད།"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "ཡིག་ཆ་གསར་པའི་ཆེད་ SMB དྲ་རྒྱ་མཉམ་སྤྱོད་ལ་ལྟ་ཞིབ་བྱེད།"
+label = "དྲ་རྒྱའི drive"
+
+[portal.sources.types.onedrive]
+description = "ཡིག་ཆ་གསར་པའི་ཆེད་ OneDrive ཡིག་ཁུག་ལ་ལྟ་ཞིབ་བྱེད།"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Amazon S3 ཡང་ན་ S3-compatible bucket ནས་ཡིག་ཆ་འཐེན་ལེན་བྱེད།"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "bucket དང་དཔང་ཡིག་ཉར་ཚགས་བྱས་པའི་འབྲེལ་མཐུད། དེ་ལ་ཟུར་སྟོན་བྱེད་པའི་འབྱུང་ཁུངས་དང pipeline ཕྱིར་འདོན་ཚང་མས་བསྐྱར་སྤྱོད་བྱེད།"
+label = "འབྲེལ་མཐུད"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume ཡིས་སྲིད་ཇུས་ཚང་མས་བ处理་བྱས་རྗེས bucket ནས object རེ་རེ་འདོར་བ་ཡིན།"
+label = "ཀློག་སྟངས"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: object རེ་རེ་ཐེངས་གཅིག་བ处理་བྱེད"
+snapshot = "Snapshot: འཁོར་ཐེངས་རེར bucket བསྐྱར་ཀློག་བྱེད"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "གཙོ་ཚིག་འདིས་འགོ་ཚུགས་པའི་ལྡེ་མིག་ཡོད་པའི object ཁོ་ན་བ处理་བྱེད།"
+label = "ལྡེ་མིག་གི་སྔོན་ཚིག"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "ཡིག་ཆ་གསར་པའི་ཆེད་ SFTP drop ཡིག་ཁུག་ལ་དུས་བཅད་འདྲི་ཞིབ་བྱེད།"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint ཡིག་ཆ་དཔེ་མཛོད་ནས་ཡིག་ཆ་འཐེན་ལེན་བྱེད།"
+label = "SharePoint"
+
+[portal.sources.types.unknown]
+label = "འབྱུང་ཁུངས"
+
+[portal.sources.types.webhook]
+createNote = "webhook འདི་གསར་སྐྲུན་བྱེད་སྐབས delivery URL དང signing secret བង្កើត་འོང་། སྐུར་མཁན་ཚོས URL དེར་ཡིག་ཆ་ POST བྱེད་ཅིང་། ཟུར་སྟོན་སྲིད་ཇུས་རྣམས་འབྱོར་སྐབས་འཁོར་སྐྱོད་བྱེད།"
+description = "ཕྱིའི་མ་ལག་གང་རུང་ནས་མིང་རྟགས་ཅན་ HTTP POST བརྒྱུད་ཡིག་ཆ་ལེན།"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "webhook བង្កើត་སྐབས་ signing secret ཐེངས་གཅིག་སྟོན། དེ་བསྒྱུར་དགོས་ན་འབྱུང་ཁུངས་བསྐྱར་སྐྲུན་བྱེད།"
+
+[portal.sources.types.webhook.reveal]
+copy = "འདྲ་བཤུས"
+done = "ཚར"
+secret = "Signing secret"
+secretHelp = "ལྡེ་མིག་འདིས་སྐྱེལ་སྤྲོད་རེ་རེའི raw body ལ་མིང་རྟགས་རྒྱོབ (HMAC-SHA256) ཏེ X-Stirling-Signature header ལྟར་སྐུར།"
+secretWarning = "ད་ལྟ་ signing secret འདྲ་བཤུས་བྱེད། ཁྱེད་ཀྱི་བདེ་འཇགས་ཆེད་དེ་ཐེངས་གཅིག་ཁོ་ན་སྟོན་པ་དང་རྗེས་སུ་ཕྱིར་ལེན་མི་ཐུབ།"
+title = "Webhook བង្កើត་ཟིན"
+url = "Delivery URL"
+usage = "ཡིག་ཆ་རེ་རེ raw request body ལྟར delivery URL ལ་ POST བྱེད། binary content type (application/pdf or application/octet-stream) སྤྱོད། ཟུར་སྟོན་སྲིད་ཇུས་རྣམས་འབྱོར་སྐབས་རང་འགུལ་འཁོར་སྐྱོད་བྱེད།"
+
+[portal.sources.wizard]
+name = "མིང་།"
+namePlaceholder = "དཔེར་ན། Claims intake"
+type = "རིགས"
+
+[portal.stepModal]
+close = "ཁ་རྒྱག"
+
+[portal.usage]
+managePayment = "དངུལ་སྤྲོད་དོ་དམ"
+subtitle = "PDF ཚང་མར Stirling གིས་རིན་བསྡུས་པའི་སྤྱོད་ཚད། འཛིན་ཤོག དང་འཆར་གཞི་དོ་དམ་ཚང་མ་འཛིན་སྟེགས་གཅིག་ནང་།"
+title = "སྤྱོད་ཚད་ & རིན་བསྡུ"
+
+[portal.usage.error]
+loadWallet = "wallet འཇུག་མ་ཐུབ"
+openStripePortal = "Stripe portal ཁ་འབྱེད་མ་ཐུབ"
+walletUnavailable = "wallet མེད་པ། {{status}} {{statusText}}"
+
+[portal.usage.sessionExpired]
+action = "ཡང་བསྐྱར་ནང་འཛུལ"
+body = "ཁྱེད་ཀྱི Stirling རྩིས་ཁྲའི session དུས་ཡོལ་ཟིན། རིན་བསྡུ་ལྟ་བར་ཡང་བསྐྱར་ནང་འཛུལ་བྱེད — ཁྱེད་ཀྱི instance འབྲེལ་མཐུད་རང་སོར་གནས།"
+title = "Session དུས་ཡོལ"
+
+[portal.users]
+title = "སྤྱོད་མཁན"
+
+[portal.users.roles.admin]
+label = "དོ་དམ་པ (Org owner)"
+summary = "ལས་གནས། སྒྲིག་འགོད། དང་ཚོགས་མི་ཐོག་ལ་སྤྱི་ཡོངས་དོ་དམ་དབང་ཆ།"
+
+[portal.users.roles.admin.permissions]
+0 = "སྤྱོད་མཁན། རུ་ཁག དང་འགན་དབང་དོ་དམ"
+1 = "S3 འབྲེལ་མཐུད་ཚུད་པའི integration ཚང་མ་དོ་དམ"
+2 = "portal འཛུལ་སྤྱོད་སྤྲོད་པའམ་ཕྱིར་འཐེན"
+3 = "Team Owner གྱིས་བྱེད་ཐུབ་པ་ཚང་མ"
+
+[portal.users.roles.guest]
+label = "མགྲོན་པོ"
+summary = "ཚད་བཀག་ཡོད་པའམ web-only འཛུལ་སྤྱོད། སྒེར་གྱི configs ཉར་མི་ཐུབ།"
+
+[portal.users.roles.guest.permissions]
+0 = "Web-only / demo སྤྱོད་སྟངས"
+1 = "API ལྡེ་མིག་ཡང་ན integration མེད"
+2 = "portal འཛུལ་སྤྱོད་མེད"
+3 = "མཉམ་སྤྱོད་ས་ཁུལ་དུ་ཀློག་ཙམ"
+
+[portal.users.roles.member]
+label = "ཚོགས་མི"
+summary = "སྤྱིར་བཏང་སྤྱོད་མཁན — མཉམ་སྤྱོད་ཐོན་ཁུངས་དང་རང་གི configs དང་མཉམ་ལས་བྱེད།"
+
+[portal.users.roles.member.permissions]
+0 = "editor དང་མཉམ་སྤྱོད integration སྤྱོད"
+1 = "སྒེར་གྱི API & MCP configs བង្កើត"
+2 = "ཁོང་ཚོར་མཉམ་སྤྱོད་བྱས་པའི་རུ་ཁག configs མཐོང"
+3 = "S3 ཡང་ན་ལས་གནས་དོ་དམ་མེད"
+
+[portal.users.roles.team_owner]
+label = "རུ་ཁག་བདག་པོ"
+summary = "རུ་ཁག་ཅིག་བདག་སྐྱོང་བྱེད — དེའི་ཚོགས་མིའི་ཐོན་ཁུངས་དང་མཉམ་སྤྱོད configs དོ་དམ་བྱེད།"
+
+[portal.users.roles.team_owner.permissions]
+0 = "རུ་ཁག་གི S3 འབྲེལ་མཐུད་བង្កើត་ & དོ་དམ"
+1 = "རུ་ཁག་བདག་དབང་གི integration configs དོ་དམ"
+2 = "སྔོན་སྒྲིག་སྲིད་ཇུས་བརྒྱུད portal འཛུལ་སྤྱོད"
+3 = "Member གྱིས་བྱེད་ཐུབ་པ་ཚང་མ"
+
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · ཚད་མེད"
 
 [printFile]
 title = "པར་སྐྲུན།"
@@ -6629,6 +9555,14 @@ text = "ཁྱེད་རང་གི་PDFཤོག་ངོས་ཆུ་ཚ
 [rotate.tooltip.header]
 title = "འཁོར་སྐྱོད་སྒྲིག་སྟངས་ཀྱི་སྤྱི་བསྡོམས།"
 
+[ruler]
+clearAll = "ཚང་མ་གསལ་བཤིག"
+hideAllLabels = "མཚན་བྱང་ཚང་མ་སྦེད"
+hideSmallLabels = "མཚན་བྱང་ཆུང་བ་སྦེད"
+physicalValues = "དངོས་གཟུགས"
+scaled = "ཚད་བསྒྱུར་ཟིན"
+showAllLabels = "མཚན་བྱང་ཚང་མ་སྟོན"
+
 [sanitize]
 desc = "PDFཡིག་ཆ་ནས་གནོད་འཚེ་ཅན་གྱི་འབྱུང་བ་རྣམས་མེད་པར་བཟོ་དགོས།"
 sanitizationResults = "གཙང་སྦྲའི་གྲུབ་འབྲས།"
@@ -6670,31 +9604,45 @@ label = "XMP མེ་ཊ་ཌ་ཊ་མེད་པར་བཟོས།"
 [sanitize.steps]
 settings = "སྒྲིག་སྟངས།"
 
-[sanitizePdf]
-tags = "གཙང་མ་དང་བདེ་འཇགས་དང་བདེ་འཇགས་དང་སེལ་བའི་ཉེན་ཁ།"
-
 [sanitizePDF]
 title = "PDF གཙང་བཟོ་བྱེད་དགོས།"
 
+[sanitizePdf]
+tags = "གཙང་མ་དང་བདེ་འཇགས་དང་བདེ་འཇགས་དང་སེལ་བའི་ཉེན་ཁ།"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "ཤོག་ངོས་གཞི་ཁྱོན་སྙོམ་སྒྲིག་བྱེད་པ།"
 
+[scaleSettings]
+activeScale = "ལས་འགུལ་ཚད་ཤིང"
+apply = "ཚད་ཤིང་སྤྱོད"
+applyCalibration = "Calibration སྤྱོད"
+calculatedScale = "རྩིས་རྒྱག་ཟིན་པའི་ཚད་ཤིང"
+calibrate = "Calibrate"
+calibrating = "Calibrating"
+calibrationDistanceRequired = "དངོས་ཡོད་རྒྱང་ཐག་ཀླད་ཀོར་ལས་ཆེ་བ་ཞིག་འཇུག"
+calibrationInvalid = "ཚད་འཇལ་འདི་ནས་ཚད་ཤིང་རྩིས་རྒྱག་མི་ཐུབ"
+calibrationPaperDistance = "ཚད་འཇལ་བྱས་པའི་ཤོག་ངོས་རྒྱང་ཐག: {{distance}}"
+calibrationTitle = "ཚད་ཤིང Calibrate"
+calibrationTooltip = "ཤེས་ཟིན་པའི་རྒྱང་ཐག་ཅིག་ཚད་འཇལ་བྱས་ནས་ཚད་ཤིང་རང་འགུལ་རྩིས་རྒྱག"
+customScale = "རང་སྒྲིག་ཚད་ཤིང"
+noneSet = "རང་སྒྲིག་ཚད་ཤིང་སྒྲིག་མེད"
+presets = "སྔོན་སྒྲིག་ཚད་ཤིང"
+ratio = "ཚད་ཤིང་བསྡུར་ཚད"
+ratioHelp = "བསྡུར་ཚད: ཤོག་ངོས་འཇལ་ཚད་ 1 = དངོས་ཡོད་འཇལ་ཚད་ X"
+ratioPlaceholder = "དཔེར་ན། 100"
+ratioPositive = "བསྡུར་ཚད་ཀླད་ཀོར་ལས་ཆེ་དགོས"
+ratioRequired = "བསྡུར་ཚད་དགོས་ངེས"
+realDistance = "དངོས་ཡོད་རྒྱང་ཐག"
+realDistancePlaceholder = "དཔེར་ན། 5"
+reset = "སྔོན་སྒྲིག་ཐང་ལ་སླར་སྒྲིག"
+unit = "འཇལ་ཚད"
+unitInvalid = "ནུས་མེད་འཇལ་ཚད: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "ཟུར་ཚད་ཚད་གཞི།"
-10 = "བཀག་སྡོམ་བྱས་པའི་པར་རིས་རེ་རེའི་མཐའ་འཁོར་དུ་(པིག་སེལ་ནང་) མཐའ་མཚམས་གཅོད་མི་དགོས།"
-2 = "ང་ཚོས་པར་ཞིག་རང་འགུལ་གྱིས་ཐད་ཀར་མ་བརྒྱབ་གོང་ལ་གཡོ་འགུལ་(ཚད་གཞི་ནང་)དགོས།"
-3 = "བཟོད་སྲན:"
-4 = "ཚོས་གཞི་གང་འདྲའི་ཉེ་པོ་དེ་ཤོག་ངོས་རྒྱབ་ལྗོངས་ལ་མཐུན་དགོས། རྒྱབ་ལྗོངས་སུ་བརྩི་དགོས། མཐོ་བ་ = ལྷོད་པོ། དམའ་བ། = དམ་དྲག་ཅན།"
-5 = "ཆུང་ཤོས་ས་ཁུལ།"
-6 = "པར་རིས་ཀྱི་ཚད་གཞི་ཆུང་ཤོས་དེ་(པར་རིས་༢ནང་)ང་ཚོས་ཆ་ཤས་ཆུང་ཆུང་ལས་གཡོལ་ཐབས་བྱེད།"
-7 = "ཆེས་ཆུང་བའི་བར་མཚམས་ཀྱི་ས་ཁུལ།"
-8 = "མཐའ་ཆུང་ཤོས་དང་བཟོ་ལྟ་ནི་ང་ཚོས་པར་རིས་འཚོལ་སྐབས་བསམ་གཞིག་བྱེད་ཀྱི་ཡོད།"
-9 = "མཐའ་མཚམས་ཀྱི་ཚད་གཞི།"
-
 [scannerImageSplit]
 submit = "པར་རིས་པར་ལེན་འདོན་པ།"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -6726,6 +9674,18 @@ whatThisDoes = "འདིས་ཅི་ཞིག་བྱེད་ཀྱིན
 whatThisDoesDesc = "རང་འགུལ་གྱིས་པར་ལེན་བྱས་པའི་ཤོག་ངོས་ཡང་ན་མཉམ་སྦྱོར་གྱི་པར་རིས་ནས་པར་རེ་རེ་འཚོལ་བ་དང་འདོན་ཐུབ།"
 whenToUse = "བེད་སྤྱོད་གཏོང་བའི་དུས་ཚོད།"
 
+[ScannerImageSplit.selectText]
+1 = "ཟུར་ཚད་ཚད་གཞི།"
+10 = "བཀག་སྡོམ་བྱས་པའི་པར་རིས་རེ་རེའི་མཐའ་འཁོར་དུ་(པིག་སེལ་ནང་) མཐའ་མཚམས་གཅོད་མི་དགོས།"
+2 = "ང་ཚོས་པར་ཞིག་རང་འགུལ་གྱིས་ཐད་ཀར་མ་བརྒྱབ་གོང་ལ་གཡོ་འགུལ་(ཚད་གཞི་ནང་)དགོས།"
+3 = "བཟོད་སྲན:"
+4 = "ཚོས་གཞི་གང་འདྲའི་ཉེ་པོ་དེ་ཤོག་ངོས་རྒྱབ་ལྗོངས་ལ་མཐུན་དགོས། རྒྱབ་ལྗོངས་སུ་བརྩི་དགོས། མཐོ་བ་ = ལྷོད་པོ། དམའ་བ། = དམ་དྲག་ཅན།"
+5 = "ཆུང་ཤོས་ས་ཁུལ།"
+6 = "པར་རིས་ཀྱི་ཚད་གཞི་ཆུང་ཤོས་དེ་(པར་རིས་༢ནང་)ང་ཚོས་ཆ་ཤས་ཆུང་ཆུང་ལས་གཡོལ་ཐབས་བྱེད།"
+7 = "ཆེས་ཆུང་བའི་བར་མཚམས་ཀྱི་ས་ཁུལ།"
+8 = "མཐའ་ཆུང་ཤོས་དང་བཟོ་ལྟ་ནི་ང་ཚོས་པར་རིས་འཚོལ་སྐབས་བསམ་གཞིག་བྱེད་ཀྱི་ཡོད།"
+9 = "མཐའ་མཚམས་ཀྱི་ཚད་གཞི།"
+
 [search]
 noResults = "གྲུབ་འབྲས་མ་ཐོབ།"
 placeholder = "མིང་ཚིག་འཚོལ་ཞིབ་ནང་འཇུག་དགོས།"
@@ -6743,46 +9703,22 @@ toolNotAvailableLocally = "ཁྱེད་ཀྱི Stirling-PDF ཞབས་ཞ
 [session]
 expired = "ཁྱེད་རང་གི་ཚོགས་ཐུན་དུས་ཚོད་རྫོགས་ཡོད། ཤོག་བུ་གསར་བཟོ་བྱས་ནས་བསྐྱར་དུ་ཚོད་ལྟ་གནང་རོགས།"
 
-[sessionManagement.tooltip]
-header = "མཛུབ་འགན་ལས་འཁུར་དོ་དམ"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "ཞུགས་མཁན་གསར་པ་ཚོས་མཛུབ་འགན་རིམ་པའི་མཇུག་ཏུ་ཁ་སྣོན"
-bullet2 = "ལས་འཁུར་མཇུག་བསྡུས་རྗེས་ཞུགས་མཁན་ཁ་སྣོན་མི་ཐུབ"
-bullet3 = "ཞུགས་མཁན་རེ་རེ་ལ་ཁོང་ཚོའི་རྗེས་རུ་གསར་བརྡ་འབྱོར"
-description = "མཇུག་བསྡུ་སྔོན་ལ་དུས་གང་རུང་ལས་ལས་འཁུར་ན་ཞུགས་མཁན་ཁ་སྣོན་ཆོག."
-title = "ཞུགས་མཁན་ཁ་སྣོན"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>མཇུག་བསྡུས་པ་ཡོངས</b>: ཞུགས་མཁན་ཚང་མ་མཛུབ་འགན་བཀལ་ཟིན"
-bullet2 = "<b>མཇུག་བསྡུས་པ་ཕྱོགས་མེད</b>: ཞུགས་མཁན་ཁ་ཤས་ད་མ་མཛུབ་འགན"
-bullet3 = "མཛུབ་འགན་མི་བཀལ་མི་ཚོ་མཇུག་ཡིག་ཆ་ནས་བུ་གཏོར་བྱེད"
-bullet4 = "མཇུག་བསྡུས་རྗེས མཛུབ་འགན་PDF འགུལ་སྤྱོད་ཡིག་ཆ་ནང་འཇུག་ཆོག"
-description = "མཇུག་བསྡུས་པས་མཛུབ་འགན་ཡོངས་ཀྱིས་གཅིག་པའི་མཛུབ་འགན་PDF བཟོ་བྱེད། འདི་བསྐྱར་མེད།"
-title = "ལས་འཁུར་མཇུག་བསྡུས"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "མཛུབ་འགན་བཀལ་ཟིན་པའི་ཞུགས་མཁན་བསུབ་མི་ཐུབ"
-bullet2 = "བསུབ་ཟིན་པའི་ཞུགས་མཁན་ལ་གསར་བརྡ་མི་འབྱོར"
-bullet3 = "མཛུབ་འགན་རིམ་པ་རང་འགུལ་གྱིས་བཅོས"
-description = "ཞུགས་མཁན་ཚོ་མཛུབ་འགན་བཀལ་མ་སྔོན་ལས་ལས་འཁུར་ནས་བསུབ་ཆོག."
-title = "ཞུགས་མཁན་བསུབ"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "མཛུབ་འགན་རེ་རེ་བསྟུན་པར PDF ལ་འཇུག"
-bullet2 = "རྗེས་མའི་མཛུབ་འགན་པས་སྔོན་མའི་མཛུབ་འགན་ལྟ་ཆོག"
-bullet3 = "ཁྲིམས་ལྡན་གྲོས་མཐུན་དང་ལག་ལེན་ལ་གལ་ཆེ།"
-description = "ཁྱེད་ཀྱིས་ལས་འཁུར་བཟོས་སྐབས་བཀོད་པའི་རིམ་པས་སོ་སོ་ཇི་ལྟར་མཛུབ་འགན་བཀལ་དགོས་ཆེད་གཏན་འཁེལ།"
-title = "མཛུབ་འགན་རིམ་པ"
-
 [settings]
 close = "ཁ་རྒྱག"
 
+[settings.ai]
+documents = "ཡིག་ཆ་ & RAG"
+general = "སྤྱིར་བཏང"
+limits = "ཚད་བཀག་ & ལས་ཆོད"
+models = "དཔེ་གཞི་ & མཁོ་སྤྲོད་པ"
+title = "AI"
+
 [settings.configuration]
 advanced = "ཡན་ཐོན་ཅན"
 database = "གཞི་གྲངས་རྟེན་གཞི།"
 endpoints = "མཇུག་སྡོམ།"
 features = "ཁྱད་ཆོས"
+folderAccess = "ཡིག་ཁུག་འཛུལ་སྤྱོད"
 mcp = "MCP Server"
 storageSharing = "ཡིག་ཆའི་གསོག་འཇོག་དང་མཉམ་སྤྱོད"
 systemSettings = "མ་ལག་སྒྲིག་བཀོད།"
@@ -6816,6 +9752,8 @@ defaultPdfEditor = "སྔོན་སྒྲིག་PDFརྩོམ་སྒྲ
 defaultPdfEditorActive = "སི་ཊར་ལིང་PDFནི་ཁྱེད་ཀྱི་སྔོན་སྒྲིག་PDFརྩོམ་སྒྲིག་པ་ཡིན།"
 defaultPdfEditorChecking = "ཞིབ་བཤེར་བྱེད་པ་..."
 defaultPdfEditorInactive = "མཉེན་ཆས་གཞན་ཞིག་ནི་སྔོན་སྒྲིག་ལྟར་སྒྲིག་ཡོད།"
+defaultPdfEditorRemind = "སྔོན་སྒྲིག་ལྟར་སྒྲིག་དགོས་པ་དྲན་སྐུལ"
+defaultPdfEditorRemindDescription = "Stirling PDF ཁྱེད་ཀྱི་སྔོན་སྒྲིག PDF ཉེར་སྤྱོད་མིན་སྐབས་བརྡ་ཁྱབ་ཤར་སྟོན།"
 defaultPdfEditorSet = "ད་ལྟ་སྔོན་སྒྲིག་བྱས་ཟིན།"
 defaultStartupView = "མཉེན་ཆས་འགོ་སློང་སྐབས་སྔོན་སྒྲིག་མཐོང་རིས"
 defaultStartupViewDescription = "མཉེན་ཆས་འགོ་སློང་སྐབས་གཡོན་ཕྱོགས་ཀྱི་མཆོང་ལྡེ་གང་ཞིག་འགུལ་སྐྱོད་ཡོད་པར་བཟོ་ནའི་གདམ་གསེས་བྱ།"
@@ -6833,9 +9771,18 @@ languageDescription = "མངོན་འཆར་སྐད་ཡིག་འད
 logout = "ཕྱིར་ཐོབ།"
 setAsDefault = "སྔོན་སྒྲིག་ལྟར་སྒྲིག་དགོས།"
 theme = "དབྱིབས"
+themeAccent = "ནན་སྟོན་ཁ་དོག"
+themeAccentCustom = "རང་སྒྲིག་ཁ་དོག"
+themeAccentCustomHint = "རང་སྒྲིག (སྔོན་སྒྲིག་འོས་སྦྱོར)"
+themeAccentDark = "མདོག་ནག་རྣམ་པའི་ནན་སྟོན་ཁ་དོག"
+themeAccentDefault = "སྔོན་སྒྲིག"
+themeAccentDefaultHint = "སྔོན་སྒྲིག་བརྗོད་གཞི (འོས་སྦྱོར)"
+themeAccentDescription = "མཐེབ་གནོན། link དང་ནན་སྟོན་ཁག་དེ་ལ་བསྟུན་ཞིང་། app ལ་འཇམ་པོའི་མདོག་སྣོན་བྱེད། མདོག་སྐྱ་དང་མདོག་ནག་རེ་རེར་རང་སོའི་ཁ་དོག་ཡོད། System གིས་ལས་འགུལ་ཡོད་པ་དེ་སྤྱོད།"
+themeAccentLight = "མདོག་སྐྱ་རྣམ་པའི་ནན་སྟོན་ཁ་དོག"
 themeDark = "ནག་པོ"
 themeDescription = "དཀར་པོའི་ཐབས་ལམ་དང་ནག་པོའི་ཐབས་ལམ་བར་བསྒྱུར"
 themeLight = "དཀར་པོ"
+themeReset = "བརྗོད་གཞི་སྔོན་སྒྲིག་ལ་སླར་གསོ"
 themeSystem = "System"
 title = "སྤྱིར་བཏང་གི"
 user = "བེད་སྤྱོད།"
@@ -6849,6 +9796,12 @@ intro = "ཁྱེད་རང་གི་སྒྲིག་འཛུགས་
 learnMore = "ཡིག་ཚགས་ནང་དུ་མང་ཙམ་ཤེས་དགོས།"
 title = "མ་ལག་འཛིན་སྐྱོང་པ་ལ།"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud ལ་ནང་འཛུལ་བྱས་རྗེས app གང་ཁ་འབྱེད་དགོས་འདེམས།"
+editor = "Editor"
+processor = "Processor"
+title = "ནང་འཛུལ་རྗེས"
+
 [settings.general.mode]
 fullscreen = "བརྙན་ཤེལ་ཆ་ཚང་།"
 sidebar = "ཟུར་པར།"
@@ -6934,6 +9887,21 @@ manage = "Manage"
 description = "Policies and legal information for this service."
 title = "Legal Documents"
 
+[settings.licenses]
+backendDescription = "server འདིར་མཉམ་སྡེབ་བྱས་པའི backend dependencies ཡི licenses།"
+backendLabel = "Backend Licenses"
+backendTitle = "Backend 3rd Party Licenses"
+empty = "dependencies མ་རྙེད།"
+frontendDescription = "release build ནང་མཉམ་སྡེབ་བྱས་པའི frontend dependencies ཡི licenses།"
+frontendLabel = "Frontend Licenses"
+frontendTitle = "Frontend 3rd Party Licenses"
+license = "License"
+listDescription = "ཐོ་འདི release bundle ཡང་ན backend endpoint ནས UI ནང་ཐད་ཀར་སྟོན།"
+listTitle = "མཉམ་སྡེབ dependencies"
+loadError = "third-party licenses འཇུག་མ་ཐུབ"
+module = "Module"
+version = "Version"
+
 [settings.licensingAnalytics]
 audit = "རྩིས་ཞིབ་པ།"
 plan = "འཆར་གཞི"
@@ -7042,6 +10010,11 @@ security = "ཉེན་སྲུང"
 telegram = "Telegram"
 title = "བདེ་འཇགས་དང་བདེན་དཔང་།"
 
+[settings.signOut]
+confirm = "ཁྱེད་རང་ཕྱིར་འཐོན་བྱེད་གཏན་འཁེལ་ཡིན་ནམ།"
+submit = "ཕྱིར་འཐོན"
+title = "ཕྱིར་འཐོན"
+
 [settings.team]
 title = "ཚོགས་པ"
 
@@ -7658,6 +10631,9 @@ uploadButton = "སར་བར་ལ་ཡར་བསྐུར།"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "འདིར་གནོན"
+fallback = "གལ་ཏེ་རང་འགུལ་ཁ་མ་ཕྱེ་ན།"
+opening = "Swagger UI འདི tab གསར་པར་ཁ་འབྱེད་བཞིན་པ..."
 tags = "api, ཡིག་ཆ། ཐང་ག། མཐའ་སྟོན། འཕེལ་རྒྱས།"
 title = "APIཡིག་ཆ།"
 
@@ -7686,7 +10662,9 @@ memberRemoved = "སྡེ་ཚོགས་མི་སུབ་ལེགས་
 namePlaceholder = "ཚོགས་པའི་མིང་འཇུག"
 personal = "རང་དོན"
 removeError = "སྡེ་ཚོགས་མི་སུབ་མ་ཐུབ"
+renameCancel = "མིང་བསྐྱར་འདོགས་དོར"
 renameError = "ཚོགས་པའི་མིང་བསྐྱར་བཏགས་ཕམ་པ"
+renameSubmit = "རུ་ཁག་མིང་ཉར"
 renameSuccess = "ཚོགས་པའི་མིང་བསྐྱར་བཏགས་ལེགས་པར།"
 
 [team.invitationBanner]
@@ -7702,6 +10680,7 @@ sendButton = "འདྲེན་བརྡ་གཏོང་"
 title = "ཚོགས་མི་འདྲེན་བརྡ"
 
 [team.members]
+actions = "ཚོགས་མིའི་བྱ་སྤྱོད"
 emailColumn = "Email"
 empty = "ཚོགས་མི་ད་དུང་མེད"
 nameColumn = "མིང་"
@@ -7762,14 +10741,42 @@ selectFilesHint = "ལག་ཆ་འདི་སྒྲུབ་བར Active Fi
 singleFileScope = "འཇུག་སྤྱོད་: {{fileName}} ཁོ་ན"
 viewerMode = "ཡིག་ཆ་མང་པོ་སེལ་བར་ཡིག་ཆ་ཞུན་དག་ཆས་ལ་བསྒྱུར།"
 
+[toolFormat]
+ANY = "ཡིག་ཆ་གང་རུང"
+CBR = "འདྲ་རིས་དེབ་ཀྱི་ཉར་ཚགས་ (CBR)"
+CBZ = "འདྲ་རིས་དེབ་ཀྱི་ཉར་ཚགས་ (CBZ)"
+CSV = "CSV ཡིག་ཆ་ཞིག"
+EBOOK = "གློག་དེབ་ཅིག"
+EMAIL = "གློག་ཡིག་ཅིག"
+EXCEL = "རེའུ་མིག་ཡིག་ཆ་ཞིག"
+HTML = "དྲ་ངོས་ཤིག"
+IMAGE = "པར་རིས།"
+JAVASCRIPT = "JavaScript ཡིག་ཆ་ཞིག"
+JSON = "JSON ཡིག་ཆ་ཞིག"
+MARKDOWN = "Markdown ཡིག་ཆ་ཞིག"
+NONE = "ཡིག་ཆ་མེད།"
+PCL = "PCL པར་འདེབས་ཡིག་ཆ་ཞིག"
+PDF = "PDF ཞིག"
+PDF_ENCRYPTED = "གསང་ཨང་གིས་སྲུང་བའི PDF ཞིག"
+POSTSCRIPT = "PostScript ཡིག་ཆ་ཞིག"
+PPT = "གསལ་སྟོན་ཡིག་ཆ་ཞིག"
+TEXT = "ཡིག་རྐྱང་ཡིག་ཆ་ཞིག"
+VIDEO = "བརྙན་ཞིག"
+WORD = "Word ཡིག་ཆ་ཞིག"
+XML = "XML ཡིག་ཆ་ཞིག"
+XPS = "XPS ཡིག་ཆ་ཞིག"
+ZIP = "ZIP ཉར་ཚགས་ཤིག"
+
 [toolPanel]
 alpha = "ཨལ་ཕ།"
 backToAllTools = "ལག་ཆས་ཚང་མར་ཕྱིར་ལོག"
 collapse = "པང་གཞི་བསྡམས"
 expand = "པང་གཞི་རྒྱས"
 goBack = "ཕྱིར་ལོག"
+pdfTools = "PDF ལག་ཆ།"
 placeholder = "འགོ་འཛུགས་བྱེད་པའི་ལག་ཆ་ཞིག་འདེམས།"
 premiumFeature = "གོང་ཚད་མཐོ་བའི་ཁྱད་ཆོས།"
+searchTools = "ལག་ཆ་འཚོལ།"
 toolsHeader = "ལག་ཆས"
 viewAllTools = "ལག་ཆས་ཡོངས་ལྟ"
 
@@ -7804,11 +10811,6 @@ noToolsFound = "ལག་ཆ་གང་ཡང་མཐོང་མ་བྱུ
 quickAccess = "མགྱོགས་མྱུར་ངང་འགྲོ་འོང་།"
 searchPlaceholder = "འཚོལ་ཞིབ་ལག་ཆ།"
 
-[toolPicker.categories]
-advancedTools = "ཡར་ཐོན་ལག་ཆ།"
-recommendedTools = "འོས་སྦྱོར་བྱས་པའི་ལག་ཆ།"
-standardTools = "ཚད་ལྡན་གྱི་ལག་ཆ།"
-
 [toolPicker.subcategories]
 advancedFormatting = "ཡར་ཐོན་རྣམ་གཞག་བཟོ་བ།"
 automation = "རང་འགུལ་ཅན།"
@@ -7933,6 +10935,174 @@ title = "ཞིབ་ཕྲའི་གྲངས་གཞི།"
 unknownEndpoint = "མཇུག་སྣེ་མི་ཤེས"
 visits = "གཟིགས་སྐོར་བ།"
 
+[users]
+lastActive = "མཐའ་མའི་བྱ་འགུལ།"
+learnMore = "འགན་འཁྲི་དང་འཛུལ་སྤྱོད་སྐོར་སྔར་ལས་མང་བ་ཤེས་པ།"
+locked = "སྒོ་བརྒྱབ་ཟིན།"
+roleFor = "{{name}} ཡི་འགན་འཁྲི།"
+rowActions = "{{name}} ཡི་བྱ་སྤྱོད།"
+showAll = "{{count}} ཚང་མ་སྟོན།"
+showLess = "ཉུང་ཙམ་སྟོན།"
+subtitle2 = "ཁྱེད་ཀྱི་མི་སྣ། ཚོགས་ཆུང་། དང་འཛུལ་སྤྱོད་རིམ་པ།"
+suspended = "གནས་སྐབས་མཚམས་བཞག་ཟིན།"
+teamActions = "ཚོགས་ཆུང་བྱ་སྤྱོད།"
+title = "སྤྱོད་མཁན།"
+you = "(ཁྱེད།)"
+
+[users.action]
+cancelInvite = "གདན་ཞུ་མེད་པར་བཟོ།"
+deleteTeam = "ཚོགས་ཆུང་སུབ།"
+disableMfa = "MFA བསྐྱར་སྒྲིག"
+move = "ཚོགས་ཆུང་ལ་སྤོ།"
+reinstate = "བསྐྱར་སྐྱར་སྤྱོད།"
+remove = "རྩ་འཛུགས་ནས་སྤོར།"
+removeTeam = "ཚོགས་ཆུང་ནས་སྤོར།"
+rename = "ཚོགས་ཆུང་གི་མིང་བསྐྱར་འདོགས།"
+resetPw = "གསང་ཨང་བསྐྱར་སྒྲིག"
+suspend = "གནས་སྐབས་མཚམས་འཇོག"
+unlock = "རྩིས་ཁྲའི་སྒོ་ཕྱེ།"
+
+[users.activity]
+daysAgo = "ཉིན་{{count}} སྔོན།"
+hoursAgo = "ཆུ་ཚོད་{{count}} སྔོན།"
+justNow = "ད་ལྟ་རང་།"
+minutesAgo = "སྐར་མ་{{count}} སྔོན།"
+monthsAgo_one = "ཟླ་{{count}} སྔོན།"
+monthsAgo_other = "ཟླ་{{count}} སྔོན།"
+never = "གཏན་ནས་མེད།"
+weeksAgo_one = "གཟའ་འཁོར་{{count}} སྔོན།"
+weeksAgo_other = "གཟའ་འཁོར་{{count}} སྔོན།"
+yearsAgo_one = "ལོ་{{count}} སྔོན།"
+yearsAgo_other = "ལོ་{{count}} སྔོན།"
+
+[users.cap]
+addProcessor = "+ ལས་སྣོན་པ།"
+approver = "སྲིད་ཇུས་ཆོག་མཆན་སྤྲོད་པ།"
+editor = "རྩོམ་སྒྲིག་པ།"
+processor = "ལས་སྣོན་པ།"
+
+[users.confirm]
+cancelInviteBody = "{{email}} ལ་བསྐུར་བའི་གདན་ཞུ་མེད་པར་བཟོ་དགོས་སམ། ཁོང་ཚོས་ད་ལྟའི་སྦྲེལ་ཐག་སྤྱད་ནས་ཞུགས་མི་ཐུབ།"
+cancelInviteTitle = "གདན་ཞུ་མེད་པར་བཟོ།"
+deleteTeamBody = "{{name}} ཚོགས་ཆུང་སུབ་དགོས་སམ། སྔོན་ལ་ཚོགས་ཆུང་དེ་སྟོང་པ་ཡིན་དགོས་ - ཁོང་གི་ཁོངས་མི་རྣམས་ཚོགས་ཆུང་གཞན་ལ་སྤོས། ད་དུང་མཉམ་སྦྲེལ་སྒྲིག་འགོད་གང་ཡང་བདག་བཟུང་བྱས་མི་ཆོག"
+deleteTeamTitle = "ཚོགས་ཆུང་སུབ།"
+disableMfaBody = "{{name}} ཡི MFA ཐོ་འགོད་སུབ་དགོས་སམ། དགོས་མཁོ་ཡོད་ན། ཁོང་ཚོས་ཐེངས་རྗེས་མར་ནང་འཛུལ་སྐབས་ཡང་བསྐྱར་སྒྲིག་དགོས།"
+disableMfaTitle = "MFA བསྐྱར་སྒྲིག"
+removeBody = "{{name}} རྩ་འཛུགས་ནས་གཏན་འཇགས་སུ་སྤོར་དགོས་སམ། འདི་ཕྱིར་བསྒྱུར་མི་ཐུབ།"
+removeTeamBody = "{{name}} ཚོགས་ཆུང་ནས་སྤོར་དགོས་སམ། ཁོང་ཚོས་རྩིས་ཁྲ་ཉར་བ་ཡིན་ཡང་། ཚོགས་ཆུང་འདིའི་ཐོན་ཁུངས་ལ་འཛུལ་སྤྱོད་དབང་ཚད་ཤོར་འགྲོ"
+removeTitle = "ཁོངས་མི་སྤོར།"
+
+[users.empty]
+description = "མཉམ་ལས་འགོ་འཛུགས་ཆེད་ཁྱེད་ཀྱི་ཚོགས་ཆུང་ལ་གདན་ཞུ་བྱོས།"
+title = "ད་དུང་ཁོངས་མི་མེད།"
+
+[users.group]
+addToTeam = "ཚོགས་ཆུང་ལ་སྣོན།"
+guestCount = "མགྲོན་པོ་{{count}}"
+guests = "མགྲོན་པོ།"
+guestsDesc = "ཕྱི་ཁུལ་མཉམ་ལས་པ། ཁྱེད་ཀྱིས་མཉམ་སྤྱོད་བྱས་པའི་ཁྱབ་ཁོངས་ནང་ཚད་བཀག་ཡོད། རྩོམ་སྒྲིག་པ་ཁོ་ན།"
+ledBy = "{{owner}} ཡིས་འགོ་ཁྲིད་བྱས།"
+org = "རྩ་འཛུགས།"
+orgDesc = "རྩ་འཛུགས་ཡོངས་ཀྱི་དབང་ཚད་དང་སྲིད་ཇུས་ཆོག་མཆན་ཡོད་པའི་བདག་པོ།"
+owners = "བདག་པོ་{{count}}"
+team = "{{name}} ཚོགས་ཆུང་།"
+teamMeta = "མི་{{count}}"
+
+[users.invite]
+access = "འཛུལ་སྤྱོད་དབང་ཚད།"
+action = "མི་སྣ་གདན་ཞུ།"
+authOauth = "OAuth2 / SSO"
+authSaml = "SAML 2.0"
+authType = "ནང་འཛུལ་ཐབས་ལམ།"
+authWeb = "གསང་ཨང་།"
+create = "རྩིས་ཁྲ་བཟོ།"
+createSubtitle = "གསང་ཨང་ངམ SSO སྤྱད་ནས་རང་གིས་སྐྱོང་བའི་རྩིས་ཁྲ་བཟོ།"
+createTitle = "རྩིས་ཁྲ་བཟོ།"
+editorDesc = "Stirling PDF Editor ནང PDF རྩོམ་སྒྲིག་བྱོས། མི་ཚང་མར་འདི་ཐོབ།"
+email = "གློག་ཡིག་ཁ་བྱང་།"
+emailError = "ནུས་ལྡན་གློག་ཡིག་ཁ་བྱང་ཞིག་འཇུག་རོགས།"
+emailPlaceholder2 = "name@company.com"
+forceChange = "ཐེངས་དང་པོར་ནང་འཛུལ་སྐབས་གསང་ཨང་བརྗེ་དགོས་པར་བཟོ།"
+forceMfa = "ཐེངས་དང་པོར་ནང་འཛུལ་སྐབས MFA སྒྲིག་དགོས་པར་བཟོ།"
+method = "ཁོང་ཚོ་ཇི་ལྟར་སྣོན་པ།"
+methodDirect = "ཐད་ཀར་རྩིས་ཁྲ་བཟོ།"
+methodEmail = "གློག་ཡིག་བརྒྱུད་གདན་ཞུ།"
+password = "གསང་ཨང་།"
+passwordError = "གསང་ཨང་ཉུང་མཐར་ཡིག་འབྲུ་8 ཡིན་དགོས།"
+processorDeferred = "གདན་ཞུ་བསྐུར་ཟིན། འོན་ཀྱང་ལས་སྣོན་པའི་འཛུལ་སྤྱོད་ད་དུང་སྤྲོད་མ་ཐུབ་ - ཁོང་ཚོ་ཞུགས་རྗེས་མིང་ཐོ་ནས་སྒྲིག་རོགས།"
+processorDesc = "སྐྱོང་སྡོམ་ངོས། pipelines འཁོར་སྐྱོད། agents དང API།"
+role = "འགན་འཁྲི།"
+send2 = "གདན་ཞུ་བསྐུར།"
+subtitle2 = "ཁོང་ཚོས་ཁྱེད་ཀྱི Stirling ལས་ཁུལ་ལ་ཞུགས་ཆེད་གློག་ཡིག་ཞིག་འཐོབ།"
+team = "ཚོགས་ཆུང་།"
+title = "མི་སྣ་གདན་ཞུ།"
+username = "སྤྱོད་མིང་།"
+usernameError = "སྤྱོད་མིང་ཉུང་མཐར་ཡིག་འབྲུ་3 ཡིན་དགོས།"
+usernamePlaceholder = "jsmith"
+
+[users.invites]
+by = "{{who}} ཡིས་གདན་ཞུ་བྱས།"
+cancel = "མེད་པར་བཟོ།"
+count = "ངང་སྒུག་{{count}}"
+desc = "ད་དུང་མ་ཞུགས་པའི་གདན་ཞུ་བྱས་པའི་མི་སྣ། ཁོང་ཚོས་དང་ལེན་མ་བྱས་བར་སྡོད་ས་ཞིག་ཉར་ཡོད།"
+expiresInDays_one = "ཉིན་{{count}} ནང་དུས་ཚོད་ཡོལ།"
+expiresInDays_other = "ཉིན་{{count}} ནང་དུས་ཚོད་ཡོལ།"
+expiresToday = "དེ་རིང་དུས་ཚོད་ཡོལ།"
+title = "ངང་སྒུག་གདན་ཞུ།"
+
+[users.loadError]
+description = "backend ལ་འབྲེལ་སྐབས་གནད་དོན་ཞིག་བྱུང་ངམ། ཡང་ན་ཁྱེད་ལ་འཛུལ་སྤྱོད་དབང་ཚད་མེད། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
+title = "ཁོངས་མི་འཇུག་མ་ཐུབ།"
+
+[users.moveTeam]
+apply = "སྤོ།"
+team = "ཚོགས་ཆུང་།"
+title = "ཚོགས་ཆུང་ལ་སྤོ།"
+
+[users.newTeam]
+action = "+ ཚོགས་ཆུང་གསར་པ།"
+create = "ཚོགས་ཆུང་བཟོ།"
+emailError = "ནུས་ལྡན་གློག་ཡིག་ཁ་བྱང་ཞིག་འཇུག་རོགས།"
+name = "ཚོགས་ཆུང་མིང་།"
+namePlaceholder = "དཔེར་ན། དངུལ་རྩིས།"
+nameRequired = "ཚོགས་ཆུང་མིང་དགོས་ངེས་ཡིན།"
+owner = "ཚོགས་ཆུང་བདག་པོ།"
+ownerFailed = "ཚོགས་ཆུང་བཟོས་ཟིན། འོན་ཀྱང་བདག་པོ་གདན་ཞུ་བྱ་མ་ཐུབ། མིང་ཐོ་ནས་གཅིག་བསྐོ་རོགས།"
+ownerHelper = "ཚོགས་ཆུང་རེ་རེར་འགོ་ཁྲིད་མཁན་ཞིག་ཡོད། ཁོང་ཚོ་ཚོགས་ཆུང་བདག་པོར་གདན་ཞུ་བྱེད། ལས་སྣོན་པ་སྤྱོད་ནུས་ཡོད། དེས་གཞན་རྣམས་སྣོན་ཐུབ། རྗེས་སུ་བསྐྱར་བསྐོ་བྱ་ཐུབ།"
+ownerPlaceholder = "owner@company.com"
+subtitle = "ཁོང་ཚོའི་འཛུལ་སྤྱོད་སྐྱོང་མཁན་ཚོགས་ཆུང་བདག་པོའི་འོག་མི་སྣ་སྡེབ་སྒྲིག་བྱོས།"
+title = "ཚོགས་ཆུང་གསར་པ།"
+
+[users.renameTeam]
+apply = "མིང་བསྐྱར་འདོགས།"
+name = "ཚོགས་ཆུང་མིང་།"
+title = "ཚོགས་ཆུང་གི་མིང་བསྐྱར་འདོགས།"
+
+[users.resetPw]
+apply = "གསང་ཨང་བསྐྱར་སྒྲིག"
+confirm = "གསང་ཨང་གཏན་འཁེལ།"
+copied = "དྲས་སྦྱར་པང་ལ་འདྲ་བཤུས་ཟིན།"
+copyHint = "ད་ལྟ་འདི་འདྲ་བཤུས་བྱོས་ - ཡང་བསྐྱར་མི་སྟོན།"
+email = "བསྐྱར་སྒྲིག་སྐོར་སྤྱོད་མཁན་ལ་གློག་ཡིག་བསྐུར།"
+forceChange = "ཐེངས་རྗེས་མར་ནང་འཛུལ་སྐབས་གསང་ཨང་བརྗེ་དགོས་པར་བཟོ།"
+generate = "བདེ་འཇགས་གསང་ཨང་ཞིག་སྐྱེད་སྐྲུན།"
+includePw = "གློག་ཡིག་ནང་གསང་ཨང་གསར་པ་ཚུད་པར་བྱོས།"
+mismatch = "གསང་ཚིག་མི་མཐུན།"
+newPassword = "གསང་ཚིག་གསར་པ"
+regen = "བསྐྱར་སྐྲུན"
+title = "གསང་ཚིག་བསྐྱར་སྒྲིག"
+tooShort = "གསང་ཚིག་ལ་ཉུང་མཐར་ཡིག་འབྲུ་8 ཡོད་དགོས།"
+
+[users.role]
+guest = "མགྲོན་པོ"
+member = "ཚོགས་མི"
+orgOwner = "རྩ་འཛུགས་བདག་པོ"
+teamOwner = "རུ་ཁག་བདག་པོ"
+
+[users.team]
+grantProcessor = "རུ་ཁག་ལ་ལས་སྒྲིག་པའི་དབང་ཚད་སྤྲོད"
+revokeProcessor = "རུ་ཁག་ནས་ལས་སྒྲིག་པའི་དབང་ཚད་ཕྱིར་འཐེན"
+
 [validateSignature]
 date = "ཚེས་པ"
 downloadCsv = "CSV ཕབ་ལེན་བྱེད་པ།"
@@ -8057,14 +11227,25 @@ zoomOut = "ཆུང་དུ་བཟོ།"
 [viewer.attachments]
 addAttachment = "ཟུར་སྣོན་ཁ་སྣོན"
 close = "ཟུར་སྣོན་ཁ་རྒྱག"
+closeSidebar = "ཟུར་སྦྱར་ཡིག་ཆའི་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
+download = "ཟུར་སྦྱར་ཡིག་ཆ་ཕབ་ལེན"
 empty = "ཡིག་ཆ་འདིར་ཟུར་སྣོན་མེད།"
 loading = "ཟུར་སྣོན་ཡར་འཇུག་བཞིན..."
 noDocument = "PDF ཞིག་ཁ་ཕྱེས་ནས་ཟུར་སྣོན་ལ་ལྟ།"
 noMatch = "ཁྱེད་ཀྱི་འཚོལ་བ་དང་མཐུན་པའི་ཟུར་སྣོན་མེད།"
 noSupport = "སྟོན་ཆས་འདིའི་དོན་ལ་ཟུར་སྣོན་རྒྱབ་སྐྱོར་མེད།"
+retry = "ཡང་བསྐྱར་ཚོད་ལྟ"
 searchPlaceholder = "ཟུར་སྣོན་འཚོལ"
 title = "ཟུར་སྣོན"
 
+[viewer.bookmarks]
+bookmarkTitle = "དཔེ་རྟགས་ཁ་བྱང"
+bookmarkTitleRequired = "དཔེ་རྟགས་ཁ་བྱང་དགོས་ངེས་ཡིན།"
+closeSidebar = "དཔེ་རྟགས་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
+collapseAll = "དཔེ་རྟགས་ཚང་མ་བསྡུ"
+expandAll = "དཔེ་རྟགས་ཚང་མ་རྒྱ་སྐྱེད"
+searchPlaceholder = "དཔེ་རྟགས་འཚོལ"
+
 [viewer.comments]
 addComment = "བསམ་བཀོད་ཁ་སྣོན"
 addCommentPlaceholder = "བསམ་བཀོད་ཁ་སྣོན..."
@@ -8075,6 +11256,7 @@ clearAll = "མཆན་འགྲེལ་ཡོངས་སུ་བསལ"
 clearAllDescription = "ཟུར་སྟེགས་ནས་མཆན་འགྲེལ་དང་ལན་ཚང་མ་བསལ་བྱེད་པ་དང་ ཡིག་ཆ་ནང་ཟུར་སྣོན་བྱས་པའི་དཔྱད་མཆན་ནི་བཞག་ཡོད།"
 clearAllTitle = "མཆན་འགྲེལ་ཡོངས་སུ་བསལ་དམ།"
 close = "མཆན་འགྲེལ་ཁ་རྒྱག"
+closeSidebar = "མཆན་འགྲེལ་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
 deleteAnnotationAndComment = "མཆན་དང་བསམ་བཀོད་ཀུན་སུབ"
 deleteDescription = "མཆན་འདི་ལ་བསམ་བཀོད་ཞིག་སྦྲེལ་ཡོད། ཟུར་ཁྲམ་ནས་བསམ་བཀོད་ཙམ་སུབ་ནས་མཆན་བཞག་ཡང་ན་ཀུན་སུབ་ཆོག"
 deleteTitle = "བསམ་བཀོད་ནས་མཆན་སུབ་དམ?"
@@ -8106,6 +11288,11 @@ title = "གཞུང་འགྲེམས་ས་ཁོངས"
 unsavedBadge = "མ་ཉར"
 unsavedDesc = "ཁྱེད་ལ་མ་ཉར་པའི་བཟོ་བཅོས་ཡོད།"
 
+[viewer.layers]
+closeSidebar = "རིམ་པ་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
+hideAll = "རིམ་པ་ཚང་མ་སྦས"
+showAll = "རིམ་པ་ཚང་མ་སྟོན"
+
 [viewer.link]
 delete = "འབྲེལ་མཐུད་སུབ"
 
@@ -8136,6 +11323,9 @@ resultsOf = "{{total}} ནས"
 [viewer.signature]
 delete = "མཛད་རྟགས་སུབ"
 
+[viewer.thumbnails]
+closeSidebar = "རིས་ཆུང་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
+
 [viewPdf]
 tags = "མཐོང་སྣང་། ཀློག་པ། མཆན་འགྲེལ། ཚིག་ཕྲན། པར་རིས་དང་། འོད་མདངས།"
 title = "ལྟ་ཚུལ།/རྩོམ་སྒྲིག་པ། PDF"
@@ -8445,30 +11635,6 @@ title = "ཆུའི་མཚོན་རྟགས་ཡིག་གནས།"
 image = "པར་རིས"
 text = "ཡིག་གཞི"
 
-[wetSignature.tooltip]
-header = "མིང་འགོད་བཟོ་ཐབས།"
-
-[wetSignature.tooltip.draw]
-bullet1 = "སྨྱུག་གུའི་ཁ་དོག་དང་ཞེང་ཚད་སྲོལ་སྒྲིག"
-bullet2 = "གནོན་སུབས་བྱས་ནས་དགའ་ཚུལ་དེ་བྱེད་ཚར་བའི་བར་བསྐྱར་འབྲི།"
-bullet3 = "touch སྒྲིག་ཆས་(tablet, phone) ལ་བཀོལ་ཐུབ།"
-description = "mouse ཡང་ན་ touchscreen སྤྱོད་ནས་ལག་འབྲིའི་མིང་འགོད་གསར་བཟོ། རང་སོའི་དངོས་མཐོང་ཡོད་པའི་མིང་འགོད་ལ་མོས་ཆེ།"
-title = "མིང་འགོད་འབྲི།"
-
-[wetSignature.tooltip.type]
-bullet1 = "ཡིག་གཟུགས་མང་པོ་ནས་བདམས།"
-bullet2 = "ཡི་གེའི་ཆེ་ཆུང་དང་ཁ་དོག་སྲོལ་སྒྲིག"
-bullet3 = "ཚད་ལྡན་མིང་འགོད་ལ་འོས་འཚམ།"
-description = "ཡིག་འབྲུས་བྱས་པའི་ཚིག་ཡིག་ནས་མིང་འགོད་གསར་བཟོ། མགྱོགས་དྲག་དང་མཐུན་མོང་ ཚོང་ལས་ཡིག་ཆར་འཚམ།"
-title = "ཡིག་འབྲུས་ཀྱི་མིང་འགོད།"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG དང་གཞན་དག་བརྙན་རྣམ་གྱི་རྣམ་གཞག་རྒྱབ་སྐྱོར།"
-bullet2 = "འབྲས་བུ་ཡག་པོ་དགོས་པས་རྒྱབ་ལྗོངས་དྭངས་པོ་སྤྱོད་དགོས།"
-bullet3 = "མིང་འགོད་ཁོངས་ལ་མཚུངས་པར་པར་རིས་ཀྱི་ཆེ་ཆུང་བསྐྱར་བཟོ་བྱེད།"
-description = "སྔོན་བཟོས་པའི་མིང་འགོད་པར་ཡར་བསྐུར། མིང་འགོད་བཤར་འབེབས་ཡང་ན་ཚོང་ལས་ལས་རྟགས་ཡོད་ན་འོས་འཚམ།"
-title = "མིང་འགོད་པར་ཡར་བསྐུར།"
-
 [workbenchBar]
 activeFiles = "སྐྱོད་བཞིན་པའི་ཡིག་ཆ"
 annotations = "མཆན་བཀོད"
@@ -8492,6 +11658,7 @@ redact = "སྦ་བཅོས"
 rotateLeft = "གཡོན་སྐོར"
 rotateRight = "གཡས་སྐོར"
 ruler = "འཇལ་ཆས / ཚད་འཇལ"
+rulerSettings = "བསྡུར་ཚད་སྒྲིག་འགོད"
 save = "སྲུངས"
 saveAll = "ཚང་མ་སྲུངས"
 saveAs = "མིང་གསར་པས་སྲུངས"
@@ -8562,6 +11729,7 @@ loading = "མི་ལ་སྐྱེལ་འདྲེན་བྱེད་པ
 locked = "བཀག་ཡོད"
 lockedBadge = "བཀག་ཡོད"
 loginRequired = "ནང་འཇུག་ཐབས་ལམ་ཐོག་མར་ལྕོགས་ཅན་བཟོ་བ།"
+memberActions = "ཚོགས་མིའི་བྱ་སྤྱོད"
 noMembersFound = "འཐུས་མི་གང་ཡང་མ་ཐོབ།"
 role = "འཁྲབ་ཚན"
 searchMembers = "འཚོལ་ཞིབ་ཚོགས་མི།..."
@@ -8571,6 +11739,7 @@ unlockAccount = "རྩིས་ཁྲོད་ཕྱེ"
 unlockUserError = "སྤྱོད་པའི་རྩིས་ཁྲོད་ཕྱེ་མི་ཐུབ།"
 unlockUserSuccess = "སྤྱོད་པའི་རྩིས་ཁྲོད་ཕྱེ་ཚར་བ།"
 user = "བེད་སྤྱོད།"
+userInfo = "སྤྱོད་མཁན་ཆ་འཕྲིན"
 
 [workspace.people.actions]
 upgrade = "ལེགས་བཅོས"
@@ -8716,6 +11885,7 @@ removeMemberError = "སྤྱོད་མཁན་རུ་ཁག་ནས་
 removeMemberSuccess = "བེད་སྤྱོད་པ་རུ་ཁག་ནས་ཕྱིར་འཐེན་བྱས།"
 renameTeamLabel = "མིང་བསྒྱུར་བའི་རུ་ཁག"
 system = "མ་ལག"
+teamActions = "རུ་ཁག་གི་བྱ་སྤྱོད"
 teamName = "རུ་ཁག་གི་མིང་།"
 teamNotFound = "རུ་ཁག་མ་རྙེད་པ།"
 title = "རུ་ཁག"
diff --git a/frontend/editor/public/locales/ca-CA/translation.toml b/frontend/editor/public/locales/ca-CA/translation.toml
index 6efadcd4ec..3c4e1405eb 100644
--- a/frontend/editor/public/locales/ca-CA/translation.toml
+++ b/frontend/editor/public/locales/ca-CA/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "fitxers seleccionats"
 font = "Tipus de lletra"
 fontSizeTooltip = "Mida del text del número de pàgina en punts. Valors més alts generen text més gran."
 fontTypeTooltip = "Família del tipus de lletra per als números de pàgina. Tria-la segons l'estil del teu document."
-genericSubmit = "Envia"
 green = "Verd"
 help = "Ajuda"
-imgPrompt = "Selecciona Imatge(s)"
 incorrectPasswordMessage = "La contrasenya actual és incorrecta."
 info = "Informació"
 invalidUndoData = "No es pot desfer: dades d’operació no vàlides"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Acord d'inici de sessió"
 logOut = "Tanca la sessió"
 marginTooltip = "Distància entre el número de pàgina i la vora de la pàgina."
 moreOptions = "Més opcions"
-multiPdfPrompt = "Selecciona PDFs (2+)"
 never = "Mai"
 no = "No"
 noFileSelected = "No s'ha seleccionat cap fitxer. Puja'n un."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordre de Pàgines (Llista separada per comes) :"
 pages = "Pàgines"
 pageSelectionPrompt = "Selecció de pàgines personalitzada (Introdueix una llista separada per comes de números de pàgina, 1,5,6 o funcions com 2n+1):"
 password = "Contrasenya"
-pdfPrompt = "Selecciona PDF(s)"
 pin = "Fixa el fitxer (mantén-lo actiu després d'executar l'eina)"
 pro = "Pro"
 processingComplete = "El fitxer està llest."
@@ -356,6 +352,7 @@ text = "Aquests permisos controlen què poden fer els usuaris amb el PDF. Són m
 title = "Canviar Permissos"
 
 [addStamp]
+preview = "Previsualitza el segell"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Descàrregues manuals: feu clic als enllaços i col·loqueu els f
 noLanguages = "No s'ha trobat cap idioma de tessdata al directori configurat."
 permissionNotice = "El camí de tessdata no té permisos d'escriptura. Les descàrregues s'obriran al navegador; deseu manualment els fitxers .traineddata a la carpeta tessdata."
 
+[admin.settings.ai.documents]
+description = "Configura el model d'embeddings i els paràmetres de recuperació utilitzats per respondre preguntes sobre documents. S'aplica al motor d'IA en desar."
+title = "Documents i RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Deixa-ho en blanc per utilitzar la credencial d'entorn pròpia del motor. S'aplica a desplegaments autoallotjats d'un sol motor."
+generic = "Clau API d'embeddings"
+openai = "Clau API d'OpenAI"
+setPlaceholder = "Desada - deixa-ho en blanc per conservar la clau actual"
+voyageai = "Clau API de VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL base de l'endpoint d'embeddings compatible amb OpenAI / Ollama, p. ex. http://ollama:11434/v1. Ha d'apuntar a un endpoint intern de confiança (sensible a SSRF)."
+label = "URL base d'embeddings"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nom del model d'embeddings. Text lliure; els suggeriments només són orientatius."
+label = "Model d'embeddings"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Proveïdor utilitzat per convertir el text del document en embeddings vectorials."
+label = "Proveïdor d'embeddings"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Nombre màxim de cerques de recuperació que l'agent pot executar per sol·licitud."
+label = "Cerques màximes"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Canviar el model d'embeddings té efecte immediatament, però els documents indexats amb el model anterior s'han de tornar a indexar perquè la cerca retorni resultats correctes."
+title = "Cal tornar a indexar"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Si has canviat el model d'embeddings, torna a indexar els documents existents perquè la cerca utilitzi el nou model."
+
+[admin.settings.ai.documents.topK]
+description = "Nombre de fragments més rellevants recuperats per cerca."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Connecta Stirling al motor d'IA de Python i tria quines capacitats d'IA s'exposen. Els canvis s'apliquen en reiniciar."
+title = "Motor d'IA"
+
+[admin.settings.ai.general.capabilities]
+description = "Activa o desactiva funcions d'IA individuals. Les funcions desactivades s'amaguen a l'aplicació."
+title = "Capacitats"
+
+[admin.settings.ai.general.enabled]
+description = "Interruptor principal. Quan està desactivat, no hi ha eines d'IA, agents ni crides al motor disponibles."
+label = "Activa la IA"
+
+[admin.settings.ai.general.features.chat]
+description = "Assistent conversacional per treballar amb PDFs."
+label = "Assistent de xat"
+
+[admin.settings.ai.general.features.classify]
+description = "Categoritza automàticament els documents per tipus o contingut."
+label = "Classificació de documents"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Genera un PDF nou (p. ex. des d'HTML) mitjançant un agent d'IA."
+label = "Crea un PDF a partir d'una indicació"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Fes preguntes i obtén respostes basades en un document pujat."
+label = "Preguntes sobre documents"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Revisa documents per detectar errors matemàtics i numèrics."
+label = "Auditor matemàtic"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Afegeix comentaris de revisió i anotacions escrits per IA a un PDF."
+label = "Agent de comentaris PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Temps d'espera per a operacions d'agent més pesades, com ara la generació de documents."
+label = "Temps d'espera d'operacions llargues (segons)"
+
+[admin.settings.ai.general.note]
+body = "El motor d'IA s'executa com un servei separat. El seu secret compartit"
+body2 = "s'estableix mitjançant una variable d'entorn del contenidor. Les claus API del proveïdor es poden introduir en aquestes pàgines o proporcionar com a variables d'entorn del motor; les claus introduïdes aquí s'envien al motor en desar."
+title = "Sobre el motor d'IA"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Temps d'espera per a respostes de xat en streaming (token per token)."
+label = "Temps d'espera de streaming (segons)"
+
+[admin.settings.ai.general.test]
+button = "Prova la connexió"
+failBody = "El motor d'IA no ha respost. Comprova la URL, que el contenidor del motor estigui en execució i que la IA estigui activada (cal reiniciar després d'activar-la)."
+failTitle = "Motor d'IA inaccessible"
+okBody = "El motor d'IA ha respost a una comprovació d'estat."
+okTitle = "Motor d'IA accessible"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Temps d'espera per a sol·licituds d'IA estàndard al motor."
+label = "Temps d'espera de sol·licitud (segons)"
+
+[admin.settings.ai.general.url]
+description = "URL interna del motor d'IA de Python, p. ex. http://stirling-pdf-engine:5001."
+label = "URL del motor d'IA"
+
+[admin.settings.ai.limits]
+description = "Límits de seguretat per a la quantitat de feina que poden fer les sol·licituds d'IA i quantes s'executen simultàniament. S'apliquen al motor d'IA en desar."
+title = "Límits i rendiment"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Límit de seguretat: rebutja les sol·licituds d'IA el text extret de les quals superi aquesta longitud."
+label = "Caràcters màxims per sol·licitud"
+
+[admin.settings.ai.limits.maxPages]
+description = "Límit de seguretat: rebutja les sol·licituds d'IA amb més d'aquest nombre de pàgines PDF."
+label = "Pàgines màximes per sol·licitud"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Nombre màxim de crides simultànies al model en curs a tot el motor."
+label = "Concurrència màxima del model"
+
+[admin.settings.ai.models]
+description = "Tria el proveïdor LLM i els models intel·ligent/ràpid que utilitza el motor d'IA. S'aplica al motor d'IA en desar."
+title = "Models i proveïdors"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Clau API d'Anthropic"
+description = "Deixa-ho en blanc per utilitzar la credencial d'entorn pròpia del motor. S'aplica a desplegaments autoallotjats d'un sol motor."
+generic = "Clau API"
+openai = "Clau API d'OpenAI"
+setPlaceholder = "Desada - deixa-ho en blanc per conservar la clau actual"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL base de l'endpoint compatible amb OpenAI / Ollama, p. ex. http://ollama:11434/v1."
+label = "URL base del proveïdor"
+warning = "La URL base ha d'apuntar a un endpoint intern de confiança. El motor hi farà sol·licituds del costat del servidor, de manera que un valor no fiable és sensible a SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Tokens de sortida màxims per al model ràpid."
+label = "Tokens màxims del model ràpid"
+
+[admin.settings.ai.models.fastModel]
+description = "Model més barat i ràpid per a tasques lleugeres. Text lliure; els suggeriments només són orientatius."
+label = "Model ràpid"
+
+[admin.settings.ai.models.provider]
+description = "Amb quin proveïdor LLM es comunica el motor."
+label = "Proveïdor"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Tokens de sortida màxims per al model intel·ligent."
+label = "Tokens màxims del model intel·ligent"
+
+[admin.settings.ai.models.smartModel]
+description = "Model d'alta capacitat per a raonaments complexos. Text lliure; els suggeriments només són orientatius."
+label = "Model intel·ligent"
+
+[admin.settings.ai.saved]
+body = "Els canvis s'envien automàticament al motor d'IA."
+bodyNoPush = "Configuració desada. S'aplicarà la propera vegada que el motor d'IA reculli la seva configuració."
+title = "Configuració d'IA desada"
+
 [admin.settings.badge]
 clickToUpgrade = "Fes clic per veure els detalls del pla"
 
@@ -938,6 +1094,25 @@ label = "Regenera a l'arrencada"
 description = "Nombre de dies que el certificat serà vàlid"
 label = "Validesa del certificat (dies)"
 
+[admin.settings.folderAccess]
+description = "Directoris des dels quals les fonts de carpetes i les sortides de carpetes poden llegir i als quals poden escriure. Això és un límit de seguretat: les automatitzacions mai no poden apuntar a una ruta del servidor fora d'aquesta llista."
+securityNote = "Deixa-ho buit per desactivar completament les fonts i sortides de carpetes. El directori de configuració propi de Stirling sempre està fora de límits."
+title = "Accés a carpetes"
+
+[admin.settings.folderAccess.implied]
+description = "Aquests directoris gestionats per Stirling sempre estan permesos i no es poden canviar aquí."
+serverStorage = "Emmagatzematge de fitxers del servidor"
+title = "Sempre permès"
+watchedFolder = "Carpeta vigilada de pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Afegeix"
+empty = "No hi ha carpetes permeses. Les fonts i sortides de carpetes estan desactivades actualment."
+hint = "Introdueix rutes absolutes, per exemple /data/inbox."
+label = "Arrels de carpeta permeses"
+placeholder = "/data/inbox"
+remove = "Elimina l'arrel de carpeta"
+
 [admin.settings.general]
 description = "Configureu els paràmetres de l'aplicació a nivell de sistema, incloent-hi la marca i el comportament per defecte."
 system = "Sistema"
@@ -1842,6 +2017,15 @@ export = "Exporta"
 accessDenied = "Accés denegat"
 insufficientPermissions = "No tens permís per fer aquesta acció."
 
+[auth.callback]
+completing = "S'està completant l'autenticació"
+invalidToken = "L'inici de sessió OAuth ha fallat - token no vàlid."
+missingToken = "L'inici de sessió OAuth ha fallat - no s'ha rebut cap token."
+oauthFailed = "L'inici de sessió OAuth ha fallat. Torna-ho a provar."
+pleaseWait = "Espera mentre acabem d'iniciar la sessió."
+signedOut = "S'ha tancat la sessió. Torna a iniciar-la."
+windowMayClose = "Pots tancar aquesta finestra un cop es completi."
+
 [auth.displayName]
 guest = "Convidat"
 user = "Usuari"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Assegura els documents PDF eliminant contingut potencialme
 description = "Aquesta eina canviarà automàticament el nom dels fitxers PDF segons el seu contingut. Analitza el document per trobar el títol més adequat a partir del text."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Gira automàticament"
+tags = "gir automàtic,corregir orientació,cap per avall,de costat,redreçar,orientar,detectar orientació,corregir rotació,orientació automàtica,escanejat,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Llindar de confiança"
+
+[autoRotate.detectionMode]
+auto = "Automàtic"
+osd = "Només OCR"
+text = "Només text"
+title = "Mètode de detecció"
+
+[autoRotate.error]
+failed = "S'ha produït un error en girar automàticament el PDF."
+
+[autoRotate.inferUndetected]
+title = "Gira les pàgines de baixa confiança perquè coincideixin"
+
+[autoRotate.report]
+applied = "{{degrees}}° en sentit horari"
+confidenceValue = "Confiança {{value}}"
+noChange = "Sense canvis"
+pageLabel = "Pàgina {{number}}"
+summary = "{{rotated}} de {{total}} pàgines girades, {{unchanged}} deixades tal com estan"
+title = "Informe de detecció"
+
+[autoRotate.report.method]
+inferred = "Coincident"
+none = "Omesa"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Per sota del llindar"
+blankPage = "La pàgina és en blanc"
+inferredFromDocument = "Igual que les altres pàgines"
+noDominantDirection = "Direccions de text mixtes"
+osdFailed = "No s'ha trobat text llegible"
+osdNoVerdict = "No s'ha pogut determinar l'orientació"
+tesseractUnavailable = "OCR no instal·lat"
+tooFewGlyphs = "Massa poc text"
+
+[autoRotate.results]
+title = "Resultats del gir automàtic"
+
+[autoRotate.settings]
+title = "Configuració"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Com de segura ha de ser la comprovació abans de girar una pàgina. Redueix-lo per girar més pàgines, augmenta'l per deixar-ne més sense tocar."
+title = "Llindar de confiança"
+
+[autoRotate.tooltip.description]
+text = "Determina quina orientació hauria de tenir cada pàgina i la gira correctament. Les pàgines que ja estan dretes es deixen igual."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automàtic llegeix primer el text de la pàgina i després mira la pàgina com a imatge si no n'hi ha prou. Només text omet la comprovació d'imatge, que és més ràpida per a documents que mai no s'han escanejat. Només OCR tracta cada pàgina com una imatge."
+title = "Mètode de detecció"
+
+[autoRotate.tooltip.header]
+title = "Gir automàtic"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Les pàgines en blanc o gairebé en blanc no es poden comprovar per si soles. Quan totes les pàgines que es poden llegir necessiten el mateix gir, aquestes pàgines es giren perquè coincideixin."
+title = "Gira les pàgines de baixa confiança perquè coincideixin"
+
 [autoSizeSplitPDF]
 tags = "pdf,dividir,document,organització"
 
@@ -2189,33 +2440,6 @@ keywords = "Paraules clau: odd, even"
 numbers = "Números/intervals: 5, 10-20"
 progressions = "Progressions: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipus de certificat"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Gestionat pels administradors del sistema"
-bullet2 = "Compartit entre els usuaris autoritzats"
-bullet3 = "Representa la identitat de l'empresa, no la individual"
-bullet4 = "Ideal per a: documents oficials, signatures d'equip"
-description = "Un certificat compartit proporcionat per la teva organització. S'utilitza per a la signatura a nivell d'empresa."
-title = "Certificat de l'organització"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Es genera automàticament en el primer ús"
-bullet2 = "Vinculat al teu compte d'usuari"
-bullet3 = "No es pot compartir amb altres usuaris"
-bullet4 = "Ideal per a: documents personals, responsabilitat individual"
-description = "Un certificat generat automàticament i únic per al teu compte d'usuari. Adequat per a signatures individuals."
-title = "Certificat personal"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Requereix fitxer P12/PFX i contrasenya"
-bullet2 = "Pot ser emès per Autoritats de Certificació externes"
-bullet3 = "Nivell de confiança més alt per a documents legals"
-bullet4 = "Ideal per a: contractes legalment vinculants, validació externa"
-description = "Utilitza el teu propi fitxer de certificat PKCS#12. Proporciona control total sobre les propietats del certificat."
-title = "Puja P12 personalitzat"
-
 [certSign]
 awaitingSignatures = "En espera de signatures"
 chooseCertificate = "Trieu el fitxer de certificat"
@@ -2542,34 +2766,6 @@ server = "Servidor"
 stepTitle = "Origen del certificat"
 upload = "Puja"
 
-[certSign.tooltip.header]
-title = "Sobre la gestió de signatures"
-
-[certSign.tooltip.overview]
-bullet1 = "Comprova les signatures existents i la seva validesa"
-bullet2 = "Mostra informació detallada sobre signants i certificats"
-bullet3 = "Afegeix noves signatures digitals per protegir els documents"
-bullet4 = "S'admeten múltiples fitxers amb navegació senzilla"
-text = "Aquesta eina us permet comprovar si els vostres PDFs estan signats digitalment i afegir noves signatures digitals. Les signatures digitals proven qui ha creat o aprovat un document i indiquen si ha estat modificat des que es va signar."
-title = "Què pot fer aquesta eina?"
-
-[certSign.tooltip.signing]
-bullet1 = "Admet formats PEM, PKCS12, JKS i certificats de servidor"
-bullet2 = "Opció per mostrar o amagar la signatura al PDF"
-bullet3 = "Afegeix motiu, ubicació i nom del signant"
-bullet4 = "Trieu en quina pàgina col·locar les signatures visibles"
-bullet5 = "Utilitza el certificat del servidor per a l'opció senzilla 'Sign with Stirling-PDF'"
-text = "Per signar un PDF, necessiteu un certificat digital (com PEM, PKCS12 o JKS). Podeu triar fer visible la signatura al document o mantenir-la invisible només per a seguretat."
-title = "Afegir signatures"
-
-[certSign.tooltip.validation]
-bullet1 = "Mostra si les signatures són vàlides o no vàlides"
-bullet2 = "Mostra la informació del signant i la data de signatura"
-bullet3 = "Comprova si el document s'ha modificat després de signar"
-bullet4 = "Pot usar certificats personalitzats per a la verificació"
-text = "Quan comproveu les signatures, l'eina us indica si són vàlides, qui ha signat el document, quan es va signar i si el document s'ha modificat des de la signatura."
-title = "Comprovació de signatures"
-
 [changeCreds]
 changeUsername = "Actualitza el nom d'usuari. Es tancarà la sessió després d’actualitzar."
 credsUpdated = "Compte actualitzat"
@@ -2824,6 +3020,7 @@ next = "Següent"
 preview = "Vista prèvia"
 previous = "Anterior"
 refresh = "Actualitza"
+remaining = "Restant"
 retry = "Reintenta"
 save = "Desa"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Monitoratge avançat"
-allInOneWorkspace = "Espai de treball PDF tot en un (visualitzador, eines i agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Suport dedicat i SLA"
-fasterThroughput = "Rendiment 10x més ràpid"
-fullyPrivateFiles = "Fitxers totalment privats"
-largeFileProcessing = "Processament de fitxers grans"
-orgWideAccess = "Controls d'accés per a tota l'organització"
-premiumAiModels = "Models d'IA premium"
-prioritySupport = "Suport prioritari"
-privateDocCloud = "Núvol de documents privat"
-ragFineTuning = "RAG + afinament"
-secureApiAccess = "Accés d'API segur"
-standardThroughput = "Rendiment estàndard"
-unlimitedApiAccess = "Accés d'API il·limitat"
-unlimitedSeats = "Usuaris il·limitats"
-
 [crop]
 autoCrop = "Retalla automàticament els espais en blanc"
 noFileSelected = "Seleccioneu un fitxer PDF per començar a retallar"
@@ -3346,6 +3525,7 @@ message = "No s'ha pogut establir el gestor PDF per defecte"
 title = "Error"
 
 [defaultApp.prompt]
+dontRemind = "No m'ho tornis a recordar"
 message = "Fes que Stirling PDF sigui l'aplicació per defecte per obrir fitxers PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Personalitza els grups"
 dropHint = "Obre fitxers per començar"
 dropToAdd = "Drop files to add"
 expand = "Amplia la barra lateral"
-files = "Fitxers"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive no està configurat"
 leaveMyFiles = "Surt de Els meus fitxers"
+library = "Biblioteca de PDF"
 myFiles = "Els meus fitxers"
 noFiles = "Encara no hi ha fitxers"
 openFileManager = "Obre el gestor de fitxers"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Afegeix"
-addLabel = "Afegeix una etiqueta…"
-categoryIconAria = "Tria una icona per a {{name}}"
-createCategory = "Crea una categoria"
-delete = "Elimina la categoria"
 done = "Fet"
-hide = "Amaga la categoria"
-newCategory = "Nom de la categoria nova…"
-removeLabel = "Elimina {{name}}"
-rename = "Canvia el nom"
 reset = "Restableix els valors predeterminats"
-search = "Cerca etiquetes…"
-show = "Mostra la categoria"
 subtitle = "Agrupa els teus fitxers en categories principals. Afegeix etiquetes existents o noves a una categoria, canvia'n el nom o crea'n una de pròpia. Els fitxers que no pertanyen a cap de les teves categories apareixen a “Altres”."
 title = "Categories de la barra lateral"
 
@@ -3808,6 +3977,7 @@ refresh = "Actualitza des del servidor"
 remove = "Suprimeix"
 removeVersion = "Suprimeix aquesta versió"
 rename = "Canvia el nom"
+renamed = "Reanomenat"
 renameFolder = "Canvia el nom de la carpeta"
 resizeFolderTree = "Canvia la mida de l'arbre de carpetes (tecles de fletxa, Maj per a passos més grans; doble clic per ajustar automàticament)"
 save = "Desa"
@@ -3910,9 +4080,7 @@ count = "Fitxers"
 folder = "Carpeta"
 labels = "Etiquetes"
 modified = "Modificat"
-name = "Nom"
 size = "Mida"
-toolHistoryAtVersion = "Cadena d'eines acumulada"
 totalSize = "Mida total"
 type = "Tipus"
 versionHistory = "Recorregut de versions"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Tot desat"
+extractCsvError = "No s'ha pogut extreure el CSV"
+extractXlsxError = "No s'ha pogut extreure l'XLSX"
 flattenAfterFilling = "Aplana després d'emplenar"
+requiredAbbreviation = "obl."
+requiredFieldsError = "Emplena tots els camps obligatoris"
 rescanFields = "Torna a analitzar els camps"
 rescanFormFields = "Torna a analitzar els camps del formulari"
 save = "Desa"
+saveShortcut = "Ctrl+S per desar"
+unsavedChanges = "Canvis no desats"
 
 [formFill.sidebar]
 close = "Tanca la barra lateral"
@@ -4309,6 +4484,11 @@ desc = "Canvia automàticament el nom d'un fitxer PDF en funció de la capçaler
 tags = "detecció automàtica,basat en capçalera,organitza,reenomena"
 title = "Reanomena PDF automàticament"
 
+[home.autoRotate]
+desc = "Detecta l'orientació de cada pàgina i la gira automàticament perquè quedi dreta."
+tags = "gir automàtic,corregir orientació,cap per avall,de costat,redreçar,orientar,detectar orientació,corregir rotació,orientació automàtica,escanejat,OSD"
+title = "Gir automàtic"
+
 [home.autoSizeSplitPDF]
 tags = "automàtic,separa,mida"
 title = "Divideix auto per mida/pàg."
@@ -4608,13 +4788,13 @@ hint = "Puja un PNG, JPG, SVG o un altre fitxer d'imatge per col·locar-lo al PD
 label = "Puja imatge"
 placeholder = "Selecciona el fitxer d'imatge"
 
-[imageToPdf]
-tags = "conversió,img,jpg,imatge,foto"
-
 [imageToPDF]
 header = "Imatge a PDF"
 title = "Imatge a PDF"
 
+[imageToPdf]
+tags = "conversió,img,jpg,imatge,foto"
+
 [infoBanner]
 dismiss = "Descarta"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Heu estat convidats!"
 
 [landing]
 addFiles = "Afegeix fitxers"
-heroSubtitle = "Arrossega i deixa anar o afegeix un PDF existent per començar."
 mobileUpload = "Puja des del mòbil"
 openFromComputer = "Obre des de l'ordinador"
 uploadFromComputer = "Puja des de l'ordinador"
-workbenchEmptyStateHero = "Deixa anar un PDF a qualsevol lloc"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Inicia sessió"
 magicLinkSent = "Enllaç màgic enviat a {{email}}! Reviseu el vostre correu i feu clic a l'enllaç per iniciar sessió."
 mfaCode = "Codi d'autenticació"
 mfaRequired = "Es requereix un codi de dos factors"
+noAccount = "No tens cap compte?"
 or = "O"
 password = "Contrasenya"
 passwordChangedSuccess = "Contrasenya canviada correctament! Inicieu sessió amb la nova contrasenya."
@@ -4715,26 +4894,10 @@ signInWith = "Inicia sessió amb"
 title = "Accedir"
 unexpectedError = "Error inesperat: {{message}}"
 updatePassword = "Actualitza la contrasenya"
-useEmailInstead = "Inicia sessió amb correu"
 useMagicLink = "Utilitza un enllaç màgic"
 username = "Nom d'usuari"
 youAreLoggedIn = "Heu iniciat sessió!"
 
-[login.slides.edit]
-alt = "Edita PDF"
-subtitle = "Amb més d'una dotzena d'eines per censurar, signar, llegir i manipular PDF, segur que hi trobaràs el que busques."
-title = "Edita PDF per mostrar/protegir la informació que vulguis"
-
-[login.slides.overview]
-alt = "Visió general de Stirling PDF"
-subtitle = "Una suite al núvol centrada en la privadesa per a PDF que et permet convertir, signar, censurar i gestionar documents, amb més de 50 eines potents."
-title = "Tot el que necessites per als teus PDF en un sol lloc."
-
-[login.slides.secure]
-alt = "Protegeix PDF"
-subtitle = "Afegeix contrasenyes, censura contingut i gestiona certificats amb facilitat."
-title = "Protegeix la informació sensible dels teus PDF"
-
 [margin]
 large = "Gran"
 medium = "Mitjana"
@@ -4976,6 +5139,7 @@ pinButton = "Podeu utilitzar el botó de <strong>Fixar</strong> si preferiu que
 results = "Després que l’eina hagi acabat d’executar-se, el pas de <strong>Revisió</strong> mostrarà una previsualització dels resultats en aquest panell i us permetrà desfer l’operació o descarregar el fitxer. "
 runButton = "Un cop configurada l’eina, aquest botó us permet executar-la en tots els PDF seleccionats."
 selectCropTool = "Seleccionem l’eina de <strong>Retalla</strong> per demostrar com utilitzar una de les eines."
+stepOf = "Pas {{current}} de {{total}}"
 toolInterface = "Aquesta és la interfície de l’eina de <strong>Retalla</strong>. Com podeu veure, no hi ha gaire res perquè encara no hem afegit cap fitxer PDF per treballar-hi."
 workbench = "Aquesta és la <strong>Taula de treball</strong> - l’àrea principal on visualitzeu i editeu els vostres PDF."
 wrapUp = "Ja està tot! Heu après les àrees principals de l’aplicació i com utilitzar-les. Feu clic al botó <strong>Ajuda</strong> quan vulgueu per tornar a veure aquesta visita."
@@ -4988,6 +5152,26 @@ showMeAround = "Fes-me un recorregut"
 skipForNow = "Omet per ara"
 skipTheTour = "Omet la visita guiada"
 
+[onboarding.checklist]
+dismiss = "Descarta"
+title = "Configura Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Executa Stirling de manera nativa al teu equip"
+title = "Baixa Stirling per a escriptori"
+
+[onboarding.checklist.inviteTeam]
+description = "Col·labora amb el teu equip"
+title = "Convida membres de l'equip"
+
+[onboarding.checklist.shareAnalytics]
+description = "Ajuda a millorar Stirling"
+title = "Comparteix dades d'ús anònimes"
+
+[onboarding.checklist.takeTour]
+description = "Mira com funciona Stirling en una visita guiada ràpida"
+title = "Fes la visita guiada"
+
 [onboarding.desktopInstall]
 body = "Stirling funciona millor com a aplicació d'escriptori. Pots usar-la fora de línia, accedir als documents més ràpid i fer edicions localment a l'ordinador."
 selectOs = "Selecciona el sistema operatiu"
@@ -4996,7 +5180,21 @@ titleWithOs = "Baixa per a {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Codi d'autenticació"
+description = "Protegeix el teu compte enllaçant una aplicació d'autenticació. Escaneja el codi QR o introdueix la clau de configuració i després confirma el codi de 6 dígits per acabar."
+enable = "Activa MFA"
+enableError = "No s'ha pogut activar l'autenticació de dos factors. Comprova el codi i torna-ho a provar."
+enterCode = "Introdueix el codi de 6 dígits de la teva aplicació."
+enterCodeError = "Introdueix el codi d'autenticació per continuar."
+logout = "Tanca la sessió"
+openAuthenticator = "Obre Google Authenticator, Authy o 1Password."
 qrCodeLoading = "Generant el codi QR…"
+regenerateQrCode = "Regenera el codi QR"
+scanQrCode = "Escaneja el codi QR o introdueix la clau de configuració de sota."
+setupError = "No s'ha pogut iniciar la configuració de dos factors. Torna-ho a provar."
+setupKey = "Clau de configuració (entrada manual)"
+stepByStep = "Pas a pas"
+success = "MFA s'ha activat. Ara pots continuar."
+title = "Configuració de l'autenticació multifactor"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Quan habilitis el mode d'inici de sessió, podràs gestionar usuaris, configurar paràmetres i supervisar la salut del servidor. Les primeres <strong>{{freeTierLimit}}</strong> persones del teu servidor poden usar Stirling gratuïtament."
@@ -5005,6 +5203,11 @@ adminTitle = "Resum d'administració"
 userBody = "Convida companys, assigna rols i mantén els documents organitzats en un espai de treball segur. Habilita el mode d'inici de sessió quan estiguis llest per anar més enllà de l'ús individual."
 userTitle = "Resum del pla"
 
+[onboarding.processorIntro]
+body = "Stirling ara executa <strong>Polítiques</strong> — regles automatitzades que classifiquen, protegeixen i processen cada document quan arriba. Configura-les i supervisa les execucions al <strong>Processador</strong>."
+cta = "Consulta el Processador"
+title = "Consulta el Processador de Stirling"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Any prepagat"
+
+[payg.prepaid.banner]
+exhausted = "La teva capacitat prepagada s'ha esgotat; la facturació per ús s'ha reprès. Recarrega per mantenir el descompte."
+expiring_one = "El teu any prepagat acaba d'aquí a {{count}} dia. La capacitat no utilitzada caduca — recarrega per començar un any nou."
+expiring_other = "El teu any prepagat acaba d'aquí a {{count}} dies. La capacitat no utilitzada caduca — recarrega per començar un any nou."
+low = "Et queda el {{pct}}% de la teva capacitat prepagada. Recarrega en qualsevol moment per mantenir el processament sense interrupcions."
+
+[payg.prepaid.card]
+subtitle = "S'utilitza abans de la facturació per ús i fora del teu límit de despesa."
+title = "Capacitat prepagada"
+
+[payg.prepaid.meter]
+capSuffix = "de {{total}} crèdits prepagats"
+expires = "Caduca el {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Esgotada"
+healthy = "En queda força"
+low = "S'està esgotant"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Enganxa la clau de llicència del correu electrònic"
 success = "Llicència activada!"
 successMessage = "La llicència s'ha activat correctament. Ara pots tancar aquesta finestra."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "aplicada"
-enforcing = "Aplicant..."
-failed = "Ha fallat l'aplicació"
 outputsUnavailable = "Els resultats de la política ja no estan disponibles per a descarregar."
 partialOutputsUnavailable = "Alguns resultats de la política ja no estan disponibles per a descarregar."
-retrying = "Ocupat, reintentant..."
 runNotFound = "Ja no s'ha pogut trobar l'execució de l'aplicació."
-step = "pas {{current}}/{{total}}"
 timedOut = "S'ha esgotat el temps d'aplicació abans que l'execució pogués finalitzar."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Tanca"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Aplicant {{names}}"
 applyingProgress = "Aplicant {{names}} ({{done}} de {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} de {{total}} fitxer(s) no s'han pogut processar i s'
 failureTitle = "Exportat sense aplicació completa"
 printPolicyAppliedBody = "S'ha actualitzat aquest PDF per complir una política. Reviseu els canvis i torneu a imprimir."
 printPolicyAppliedTitle = "Política aplicada abans d'imprimir"
-queued = "+{{count}} en cua"
 successTitle = "S'ha aplicat {{names}}"
 summaryMore = "{{first}}, {{second}} i {{more}} més"
 summaryTwo = "{{first}} i {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Aplicant abans de convertir"
-default = "Aplicant"
-export = "Aplicant abans d'exportar"
-input = "Aplicant en importar"
-print = "Aplicant abans d'imprimir"
-
-[policies.field]
-accessLog = "Registre d'accés"
-archiveAfter = "Arxiva després de"
-auditTrail = "Traça d'auditoria"
-belowThreshold = "Per sota del llindar"
-destination = "Destinació"
-frameworks = "Frameworks"
-immutableHold = "Retenció immutable"
-keepFor = "Conserva durant"
-minConfidence = "Confiança mínima"
-notify = "Notifica en encaminar"
-onViolation = "Quan no compleix"
-webhookUrl = "URL del webhook"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Afegeix"
-addPlaceholder = "Afegeix una etiqueta…"
-customNote = "Personalitzat per al teu equip."
-defaultNote = "S'està utilitzant el valor predeterminat integrat, compartit amb el teu equip."
-duplicate = "\"{{name}}\" ja existeix."
-edit = "Edita les etiquetes"
-empty = "Encara no hi ha etiquetes."
-export = "Exporta JSON"
-iconAria = "Tria una icona per a {{name}}"
-import = "Importa JSON"
-importError = "No s'ha pogut importar aquest fitxer."
-managedNote = "Les etiquetes d'equip les gestiona el líder de l'equip."
-modalSubtitle = "Compartides amb tot l'equip. El classificador tria les etiquetes que s'ajusten a cada document."
-modalTitle = "Etiquetes de classificació"
-pickIcon = "Utilitza la icona {{label}}"
-removeAria = "Elimina {{name}}"
-resetToDefault = "Restableix el valor predeterminat"
-saveForTeam = "Desa per a l'equip"
-saving = "S'està desant…"
-sectionLabel = "Etiquetes de classificació"
-startFromScratch = "Comença des de zero"
-teamCount = "etiquetes d'equip"
-tooLong = "Les etiquetes poden tenir com a màxim {{max}} caràcters."
-ungrouped = "Sense agrupar"
-view = "Mostra les etiquetes"
+categoryCount = "categories"
+hideCategory = "Amaga la categoria"
+labelCount = "etiquetes"
+sharedNote = "Aquestes etiquetes són integrades i compartides amb tot el teu equip."
+showCategory = "Mostra la categoria"
 
 [policies.pii]
 account = "Números de compte (etiquetats)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Números d'encaminament bancari dels EUA (ABA)"
 ssn = "Números de la Seguretat Social"
 
-[policies.settings]
-noneExport = "Actualment no s'executa cap política en exportar."
-noneUpload = "Actualment no s'executa cap política en carregar."
-onExport = "En exportar"
-onUpload = "En carregar"
-reorderHandle = "Arrossega per reordenar"
-runOrderDesc = "Quan s'executa més d'una política amb el mateix activador, s'executen en aquest ordre: cadascuna sobre la sortida de la política anterior. Arrossega per reordenar."
-title = "Configuració de polítiques"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opcions de política"
-policySettings = "Configuració de polítiques"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Torna a intentar les polítiques fallides ({{count}})"
-rowProgress = "{{completed}} de {{total}} fitxers processats"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Què és una política?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Troba i ennegreix automàticament detalls sensibles — com números de la Seguretat Social i de targetes — perquè no es puguin llegir al document."
-sanitize = "Elimina JavaScript ocult del fitxer, perquè no s'executi res automàticament quan algú l'obri."
-watermark = "Estampa una marca visible (p. ex., \"Confidencial\") a cada pàgina."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Tanca"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "S'està aplicant {{name}}..."
 badgeRan = "La política {{name}} s'ha executat en aquest fitxer"
+badgeRunning = "{{name}} s'està executant..."
 blockingAction = "{{action}} bloquejat mentre s'aplica la política; espera, si us plau..."
 dismiss = "Descarta la superposició"
 enforcingTitle = "S'està aplicant la política..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Mostra el fitxer (la política encara s'està aplicant)"
 [policyOption]
 autoRedactPhi = "Oculta automàticament PHI"
 blockExport = "Bloqueja l'exportació"
+ccpa = "CCPA"
 contracts = "Contractes"
 documents = "Documents"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Pla Editor"
 subscribed = "Pla Processor"
 unlinked = "No enllaçat"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Inicialitza des d'un document"
-sectionsAriaLabel = "Seccions del constructor d'agents"
-selectorAriaLabel = "Agents"
-subtitle = "Dissenya, prova i publica agents d'AI que classifiquen, extreuen informació i encaminen els teus documents. Defineix escenaris, limita l'accés a eines, executa un conjunt de referència i publica'n una versió."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Cancel·la"
-dropzoneText = "Tria un document de mostra (PDF o imatge)"
-lead = "Deixa anar un document de mostra i proposarem escenaris i un esquema d'extracció que podràs refinar. No es publica res fins que ho revisis."
-submit = "Inicialitza l'agent"
-subtitle = "Crea la base d'un agent nou a partir d'un fitxer representatiu"
-title = "Inicialitza des d'un document"
-
-[portal.agentBuilder.empty]
-description = "Inicialitza un agent a partir d'un document de mostra per crear la base dels seus escenaris i l'esquema d'extracció, i després refina'l i publica'l."
-title = "Encara no hi ha agents"
-
-[portal.agentBuilder.evals]
-casesPassing = "Casos aprovats"
-columnCase = "Cas d'avaluació"
-columnLatency = "Latència"
-columnResult = "Resultat"
-fail = "fallida"
-goldenSetPassRate = "Percentatge d'aprovació del conjunt de referència"
-latencyMs = "{{ms}} ms"
-notRun = "no executat"
-pass = "aprovat"
-passRate = "Percentatge d'aprovació"
-runEvals = "Executa avaluacions"
-
-[portal.agentBuilder.evals.empty]
-description = "Les avaluacions converteixen els escenaris en un conjunt de referència repetible. Actualitza per capturar el percentatge d'aprovació al llarg del temps i condicionar-hi les publicacions."
-title = "Encara no hi ha cap conjunt de referència"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "entre conjunts de referència"
-activeAgents = "Agents actius"
-avgPassRate = "Percentatge mitjà d'aprovació d'avaluacions"
-fleetWide = "a tota la flota"
-latestPublished = "Darrer publicat"
-scenarios = "Escenaris"
-testCases = "casos de prova"
-totalDescription_one = "{{count}} en total"
-totalDescription_other = "{{count}} en total"
-
-[portal.agentBuilder.scenarios]
-add = "Afegeix"
-addScenario = "Afegeix un escenari"
-enable = "Activa"
-expectationLabel = "Comportament esperat"
-expectationPlaceholder = "Què hauria de fer l'agent"
-inEval = "en avaluació"
-mute = "Silencia"
-muted = "silenciat"
-nameLabel = "Nom"
-namePlaceholder = "p. ex. Escalada de compliment"
-
-[portal.agentBuilder.tabs]
-evals = "Avaluacions"
-scenarios = "Escenaris"
-tools = "Eines"
-versions = "Versions"
-
-[portal.agentBuilder.tools]
-broadAccess = "Accés ampli"
-deniedHint = "Les eines seleccionades estan bloquejades. Tota la resta continua disponible per cridar."
-deniedTools = "Eines denegades"
-governanceGate = "La governança d'eines està disponible al pla Enterprise."
-restricted = "Restringit"
-restrictedAccess = "Accés restringit a eines"
-restrictedDescription = "Permet totes les eines excepte les que deneguis a continuació."
-
-[portal.agentBuilder.versions]
-current = "actual"
-historyGate = "L'historial complet de versions i la reversió estan disponibles al pla Enterprise."
-publish = "Publica"
-rollBack = "Reverteix"
-
 [portal.assistant]
 close = "Tanca l'assistent"
 error = "No s'ha pogut contactar amb l'assistent."
@@ -6365,9 +6346,21 @@ typing = "Escrivint"
 loading = "S'està carregant"
 redirectingToEditor = "S'està redirigint a l'editor..."
 
+[portal.billing.activation]
+maybeLater = "Potser més tard"
+title = "Activa el Processador"
+
+[portal.billing.activation.payg]
+sub = "Estableix un límit mensual. Paga pel que executis."
+title = "Paga per ús"
+
+[portal.billing.activation.prepay]
+badge = "2 mesos gratis"
+sub = "Una factura, targeta o transferència bancària."
+title = "Prepaga un any"
+
 [portal.billing.checkout]
 noClientSecret = "La funció Edge no ha retornat cap client_secret."
-subtitle = "Afegeix una targeta per continuar més enllà de la concessió gratuïta del pla Editor. Stripe s'encarrega de la resta."
 title = "Activa el pla Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "El pagament s'ha efectuat correctament, però l'activació triga una mic
 close = "Tanca"
 title = "Ja gairebé hi som"
 
+[portal.billing.checkout.cap]
+amountAria = "Límit de despesa mensual"
+back = "Enrere"
+continue = "Continua al pagament"
+error = "No s'ha pogut establir el teu límit de despesa"
+finePrint = "Les factures s'emeten mensualment. Cancel·la en qualsevol moment."
+noLimit = "Sense límit"
+note = "Mai no se't factura més enllà del teu límit. El processament simplement es pausa."
+perMonth = "/ mes"
+title = "Estableix el teu límit de despesa"
+
+[portal.billing.checkout.card]
+fields = "Número de targeta · MM / YY · CVC · ZIP"
+label = "Dades de la targeta"
+note = "Les dades de la targeta les recull Stripe. Stirling mai no emmagatzema PAN ni CVC."
+
 [portal.billing.checkout.error]
 title = "No s'ha pogut iniciar el pagament"
 
@@ -6383,10 +6392,9 @@ body = "El pagament s'ha efectuat. Estem activant el processament mesurat a tote
 hint = "Mantén aquesta finestra oberta."
 title = "S'està activant el pla Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "a l'env del portal per habilitar el pagament dins de l'aplicació."
-bodyBefore = "Defineix"
-title = "Stripe no està configurat"
+[portal.billing.checkout.pay]
+limit = "Límit de despesa mensual {{amount}}/mes. El processament es pausa en arribar al límit."
+limitNoCap = "Sense límit de despesa. El processament no es pausarà. Les factures s'emeten mensualment."
 
 [portal.billing.enterpriseUpsell]
 cta = "Crea el teu pressupost Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Pla actual"
 freeForever = "Gratuït per sempre"
 noTeamResolved = "Encara no s'ha resolt cap equip al teu moneder: actualitza i torna-ho a provar."
 ownerOnly = "Només el propietari de l'equip pot activar el pla Processor."
+payInvoice = "Paga la factura per completar"
 planName = "Editor"
 ssoIncluded = "SSO inclòs"
 switchOnProcessor = "Activa el Processor →"
 unlimitedUsers = "Usuaris il·limitats"
+viewQuote = "Mostra el pressupost"
 
 [portal.billing.invoices]
 columnAmount = "Import"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Sol·licituds directes a l'API"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatitzacions i pipelines"
 segmentAutomationLabel = "Automatització"
+sizeMultiplier = "{{formatted}} PDFs han utilitzat un multiplicador de mida"
+summary = "{{unique}} únics · {{units}} unitats de mesurador · {{avg}} mitjana per PDF"
+summaryNoRate = "{{unique}} únics · {{units}} unitats de mesurador"
 unit = "PDF mesurats"
+unitsPending_one = "{{units}} unitat de mesurador pendent de sincronització des d'instàncies enllaçades"
+unitsPending_other = "{{units}} unitats de mesurador pendents de sincronització des d'instàncies enllaçades"
+
+[portal.billing.prepaid]
+capSuffix = "de {{total}} crèdits prepagats"
+expires = "Caduca el {{date}}"
+eyebrow = "Capacitat prepagada"
+note = "S'utilitza abans de la facturació per ús i fora del teu límit de despesa."
+topUp = "Recarrega"
+
+[portal.billing.prepaid.buy]
+back = "Enrere"
+calcTitle = "Calcula el teu pagament anual"
+cancel = "Cancel·la"
+cancelPurchase = "Cancel·la la compra"
+close = "Tanca"
+continueToPayment = "Continua al pagament"
+finalise = "Finalitza"
+invoiceErrorTitle = "No s'ha pogut generar la factura"
+loadingTitle = "S'està carregant el teu pressupost"
+payTitle = "Paga el teu any"
+step = "Pas {{current}} de {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Canvia"
+deployRow = "Desplegament"
+done = "Fet"
+enterpriseHint = "Això és escala empresarial. Amb aquest volum, les tarifes empresarials superen qualsevol descompte d'autoservei. Bloqueig de tarifa, condicions i un pressupost en minuts."
+governanceRow = "Governança"
+governanceValue = "{{label}} · {{count}} polítiques"
+handlesLabel = "El teu Processador"
+handlesValue = "gestiona {{volume}} crèdits / mes"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} polítiques"
+poolCaption = "Un sol fons de {{credits}} crèdits per a l'any. Els mesos intensius prenen crèdits dels més lleugers."
+priceLabel = "El teu any · 12 mesos pel preu de 10"
+rateUnknown = "Mostrarem el preu exacte en finalitzar la compra."
+savings = "Estalvies {{amount}} · 2 mesos gratis."
+sizingRow = "Dimensionament"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Usuaris totals"
+
+[portal.billing.prepaid.consent]
+label = "Entenc que quan la meva capacitat prepagada s'esgoti o caduqui al cap de 12 mesos, el processament continuarà automàticament a la tarifa estàndard per ús mesurat (fins al meu límit de despesa) tret que cancel·li, i que puc cancel·lar en qualsevol moment des del portal de facturació."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Gestionat per Stirling. Actiu en minuts."
+cloudValue = "Stirling Cloud · Gestionat"
+selfhost = "Autoallotjat"
+selfhostDesc = "S'executa en infraestructura privada. Mateixa tarifa."
+selfhostValue = "Autoallotjat · Infraestructura privada"
+
+[portal.billing.prepaid.offer]
+cta = "Revisa l'oferta"
+subtitle = "Prepaga un any de processament de PDF i obtén dos mesos gratis, utilitzats abans de la facturació per ús i fora del teu límit de despesa."
+title = "Aconsegueix 12 mesos pel preu de 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nom del titular del compte"
+accountNamePlaceholder = "p. ex. Jane Smith"
+companyName = "Nom de l'empresa (opcional)"
+companyNamePlaceholder = "p. ex. Acme Inc."
+downloadInvoice = "Baixa la factura"
+payOnline = "Paga en línia"
+poNumber = "Número de comanda (opcional)"
+poNumberPlaceholder = "p. ex. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avançat"
+advancedDesc = "Els pipelines impulsen la major part del teu processament."
+none = "Cap"
+noneDesc = "Encara no executes pipelines. Activa'ls en qualsevol moment."
+standard = "Estàndard"
+standardDesc = "Alguns pipelines tornen a processar els PDFs entrants."
+
+[portal.billing.prepaid.posture]
+essentials = "Essencials"
+essentialsDesc = "Classificació, per defecte, més Compartició"
+governed = "Governat"
+governedDesc = "Afegeix Seguretat i Encaminament"
+regulated = "Regulat"
+regulatedDesc = "Totes les categories, incl. Compliment, Retenció, Ingestió"
+
+[portal.billing.prepaid.review]
+download = "Baixa el pressupost (PDF)"
+downloading = "S'està preparant…"
+share = "comparteix per a aprovació"
+
+[portal.billing.prepaid.size]
+compact = "Compacte"
+compactDesc = "Fitxers de menys de 25 MB, sense càrrecs per dades"
+heavy = "Pesat"
+heavyDesc = "Escanejat o amb moltes imatges, habitualment 50 MB+"
+standard = "Estàndard"
+standardDesc = "Majoritàriament petit, alguns escanejos per sobre de 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Esgotada"
+healthy = "En queda força"
+low = "S'està esgotant"
 
 [portal.billing.spendLimit]
 adjustLimit = "Ajusta el límit"
@@ -6494,6 +6608,8 @@ label = "Es preveu que se superi."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Despesa aquest mes"
+freeRemaining_one = "{{formatted}} PDF gratuït restant"
+freeRemaining_other = "{{formatted}} PDFs gratuïts restants"
 processed_one = "{{formattedCount}} PDF processat."
 processed_other = "{{formattedCount}} PDF processats."
 processedWithRate_one = "{{formattedCount}} PDF processat, a {{rate}} cadascun."
@@ -6534,6 +6650,350 @@ signature = "signatura"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Connexió nova"
+createTitleFor = "Connecta {{name}}"
+delete = "Suprimeix"
+edit = "Edita"
+editTitle = "Edita la connexió"
+unsupportedType = "Aquest tipus de connexió no es pot editar aquí."
+
+[portal.connections.categories.advanced]
+description = "Per a un servei que encara no admetem."
+label = "Avançat"
+
+[portal.connections.categories.audit]
+description = "Registra què ha passat a un document, on els teus auditors ja ho consulten."
+label = "Registre d'auditoria i compliment"
+
+[portal.connections.categories.notify]
+description = "Informa un altre sistema que ha passat alguna cosa."
+label = "Notificació i workflow"
+
+[portal.connections.categories.security]
+description = "Escaneja o etiqueta un document abans que continuï."
+label = "Seguretat i classificació"
+
+[portal.connections.categories.signing]
+description = "Envia un document perquè se signi o es notaritzi."
+label = "Signatura electrònica i notarització"
+
+[portal.connections.categories.storage]
+description = "On acaben els documents processats - un bucket, una unitat, un tiquet o una pàgina."
+label = "Fitxer i adjunt"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling ho emmagatzema xifrat i no ho torna a mostrar mai."
+label = "Token d'accés"
+
+[portal.connections.commonFields.apiKey]
+label = "Clau API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Els passos que utilitzen aquesta connexió només poden cridar rutes sota aquesta URL, mai un altre host."
+label = "URL del servidor"
+
+[portal.connections.commonFields.email]
+label = "Correu electrònic"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Contrasenya"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Nom d'usuari"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Enganxa la URL que t'ha donat el servei. Només es poden cridar rutes sota aquesta URL."
+label = "URL de Webhook"
+
+[portal.connections.fields]
+name = "Nom de la connexió"
+namePlaceholder = "p. ex. Producció"
+
+[portal.connections.picker]
+cancel = "Cancel·la"
+createNew = "Connexió nova..."
+placeholder = "Selecciona una connexió"
+save = "Desa la connexió"
+
+[portal.connections.picker2]
+back = "Canvia la integració"
+heading = "Què vols connectar?"
+noResultsBody = "Encara no ho admetem - explica'ns-ho i mirarem d'afegir-ho."
+noResultsTitle = "No coincideix res amb \"{{query}}\""
+searchPlaceholder = "Cerca integracions - prova \"sign\", \"ocr\" o el nom d'un producte"
+
+[portal.connections.types.api]
+description = "Crida qualsevol HTTP API des d'una política. Tries la URL, l'autenticació i la càrrega útil."
+label = "API personalitzada"
+
+[portal.connections.types.api.fields.authType]
+label = "Autenticació"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nom d'usuari i contrasenya"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token en una capçalera personalitzada"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Cap"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Inicia sessió per obtenir un token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Els passos que utilitzen aquesta connexió només poden cridar rutes sota aquesta URL, mai un altre host."
+label = "URL base"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nom de la capçalera"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Ruta d'inici de sessió"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Contrasenya"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Si l'API respon amb un enllaç de baixada, només es poden obtenir aquests hosts. Separa'ls amb comes. Deixa-ho en blanc per permetre només el host propi de la URL base."
+label = "Hosts de resultat permesos"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Envia el token com aquesta capçalera"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "La capçalera de resposta en què la crida d'inici de sessió retorna el token, p. ex. X-Auth-Token."
+label = "Capçalera de resposta del token"
+
+[portal.connections.types.api.fields.username]
+label = "Nom d'usuari"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Escaneja documents per detectar malware en un servidor que executes - res no surt de la teva xarxa."
+label = "ClamAV (autoallotjat)"
+
+[portal.connections.types.cloudmersive]
+description = "Escaneig de virus i contingut per a documents en una política."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Bloqueja documents que contenen macros, executables, scripts o objectes incrustats - no només malware conegut."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Adjunta documents processats a una pàgina de Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Envia documents a ConsignO Cloud (Notarius) per a signatura electrònica i notarització."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "El teu entorn ConsignO Cloud, incloent /api/v1."
+label = "URL del servidor"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Clau API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Secret API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Contrasenya"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Només cal si la teva organització utilitza tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nom d'usuari"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publica un missatge a Discord quan una política processi un document."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexa un esdeveniment d'auditoria a Elasticsearch cada vegada que una política gestiona un document."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Consulta un servidor FTP o FTPS per trobar documents nous."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Mode de connexió"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Actiu"
+passive = "Passiu (recomanat)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP sense xifrar envia credencials i fitxers sense xifratge; tria FTPS si el servidor ho admet."
+label = "Xifratge"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explícit / AUTH TLS)"
+implicit = "FTPS (implícit)"
+none = "Cap (FTP sense xifrar)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publica un missatge en un espai de Google Chat quan s'executi una política."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Adjunta documents processats a una incidència de Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Envia un document o una notificació per correu electrònic quan s'executi una política."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Arxiva documents processats a Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Contrasenya de l'aplicació"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detecta dades personals en el text del document utilitzant un servidor Presidio que executes."
+label = "Presidio (autoallotjat)"
+
+[portal.connections.types.purview]
+description = "Llegeix i aplica etiquetes de sensibilitat de Microsoft Purview als PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opcional. Només cal per triar etiquetes pel nom; l'etiquetatge funciona sense això."
+label = "ID d'aplicació (client)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Secret de client"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Estampat a cada etiqueta com el seu SiteId, perquè les eines compatibles amb Purview sàpiguen quina organització l'ha aplicat."
+label = "ID de directori (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Un bucket S3 del qual les fonts poden llegir i al qual les sortides de pipeline poden escriure."
+label = "Emmagatzematge S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID de clau d'accés"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Deixa-ho en blanc per a AWS. Estableix-ho per a MinIO o un altre emmagatzematge compatible amb S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Regió"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Clau d'accés secreta"
+
+[portal.connections.types.sendgrid]
+description = "Envia un document o una notificació per correu electrònic quan s'executi una política."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Consulta un servidor SFTP (SSH) per trobar documents nous."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opcional. L'empremta digital SHA-256 de la clau de host del servidor (de `ssh-keyscan host | ssh-keygen -lf -`). Quan s'estableix, només s'accepta un servidor que presenti aquesta clau; quan és en blanc, la clau vista a la primera connexió queda fixada i es rebutgen canvis posteriors."
+label = "Empremta digital de la clau de host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Frase de pas de la clau"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Deixa-ho en blanc si t'autentiques amb una clau privada."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opcional. Enganxa una clau privada OpenSSH per autenticar-te amb una clau en lloc d'una contrasenya."
+label = "Clau privada"
+
+[portal.connections.types.slack]
+description = "Publica un missatge a Slack quan una política processi un document."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Vigila un recurs compartit de xarxa SMB / CIFS (Windows o Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Recurs compartit de xarxa"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opcional. El domini o grup de treball de Windows, si el teu servidor n'utilitza un."
+label = "Domini"
+
+[portal.connections.types.smb.fields.share]
+label = "Recurs compartit"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Envia un esdeveniment d'auditoria a Splunk cada vegada que una política gestiona un document."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Envia un esdeveniment d'auditoria a un col·lector HTTP de Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publica un missatge en un canal de Teams quan s'executi una política."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publica cada document, o només els detalls, a una URL que triïs."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Activa un escenari de Zap o Make des d'una política."
+label = "Zapier i Make"
+
+[portal.docs]
+browse = "Explora la documentació"
+viewSource = "Mostra el codi font a GitHub"
+
 [portal.docs.authentication]
 codeCaption = "cada sol·licitud"
 eyebrow = "PRIMERS PASSOS"
@@ -6619,11 +7079,19 @@ title = "SDK oficials"
 beta = "Beta"
 deprecated = "Obsolet"
 
+[portal.docs.search]
+empty = "No hi ha documentació coincident"
+placeholder = "Cerca a la documentació"
+results = "{{count}} resultats"
+
 [portal.docs.skills]
 eyebrow = "HABILITATS"
 lead = "Capacitats incloses i amb nom que el teu agent invoca com una sola eina. Cada habilitat és una cadena d'operacions determinista amb avaluacions associades."
 title = "Habilitats d'agent"
 
+[portal.docs.toc]
+title = "En aquesta pàgina"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "REFERÈNCIA DE L'API"
@@ -6697,6 +7165,8 @@ type = "Tipus"
 user = "Usuari"
 
 [portal.documents.queue.empty]
+connectSource = "Connecta una font"
+createPipeline = "Crea un pipeline"
 description = "Quan les fonts introdueixin documents a les teves canalitzacions, apareixeran aquí per revisar-los."
 title = "No hi ha documents a la cua"
 
@@ -6806,13 +7276,71 @@ description = "Aquesta vista ha trobat un error inesperat. Torna-ho a provar o t
 retry = "Torna-ho a provar"
 title = "Alguna cosa ha anat malament en aquesta pàgina"
 
+[portal.home.download]
+back = "Enrere"
+body = "Baixa l'aplicació d'escriptori o autoallotja el servidor."
+done = "Fet"
+guide = "Obre la guia de {{name}}"
+openInBrowser = "Obre al navegador en lloc d'això"
+sectionDesktop = "Aplicació d'escriptori"
+sectionSelfHosted = "Autoallotjat"
+title = "Instal·la l'editor Stirling PDF"
+
+[portal.home.download.docker]
+detailBody = "Executa la imatge oficial al teu servidor."
+note = "S'obre a :8080. Inici de sessió predeterminat: admin / stirling."
+tagline = "Executa el servidor en un contenidor"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Estàndard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instal·la el chart oficial de Helm."
+note = "Afegeix un PVC per a /configs per conservar la configuració."
+tagline = "Desplega en un clúster amb Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Compilacions natives per a la teva distribució."
+guideBtn = "Mostra les opcions d'instal·lació de Linux"
+note = "Hi ha compilacions AppImage, .deb i .rpm disponibles per a distribucions habituals."
+tagline = "Aplicació d'escriptori nativa per a la teva distribució"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "O mitjançant Homebrew"
+detailBody = "Executa l'instal·lador o utilitza Homebrew."
+downloadBtn = "Descarrega per a macOS"
+tagline = "Aplicació nativa per a Apple silicon i Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Executa el .jar en un servidor físic."
+downloadBtn = "Descarrega el .jar"
+note = "Requereix Java 21+. S'obre a :8080; inici de sessió predeterminat admin / stirling."
+runLabel = "Després executa'l"
+tagline = "Executa el .jar en un servidor físic"
+title = "Configuració manual del servidor"
+
+[portal.home.download.windows]
+altLabel = "O mitjançant winget"
+detailBody = "Executa l'instal·lador o utilitza un gestor de paquets."
+downloadBtn = "Descarrega l'instal·lador"
+tagline = "Aplicació nativa per a Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} actius"
-invite = "Convida companys d'equip"
+activeOfDeployed = "{{active}} de {{total}} actius aquest mes"
 name = "Stirling PDF Editor"
 open = "Obre al navegador"
 updated = "actualitzat {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Finalitza el desplegament"
+options = "Mostra les opcions de desplegament"
+start = "Desplega l'Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Bona tarda"
 evening = "Bon vespre"
 morning = "Bon dia"
 
-[portal.home.onboarding]
-dismiss = "Descarta la configuració"
-notStarted = "No iniciat"
-progress = "{{done}} de {{total}} fet"
-title = "Acaba la configuració"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC a tota l'organització, preus per volum compromès i desplegament air-gapped."
-cta = "Inicia la prova"
-ctaQuote = "Obtén un pressupost"
-lead = "Per a més de 250 empleats."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Desplega l'aplicació d'escriptori, gratuïta per sempre."
-title = "Descarrega l'Editor PDF"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} actives · {{recommended}} recomanades"
-chip = "{{active}} actives"
-title = "Activa les polítiques"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} connectades · cada PDF governat allà on arriba"
-chip = "{{connected}} connectades"
-title = "Connecta les teves fonts"
-
-[portal.home.quickActions]
-subtitle = "Tasques principals per a avui"
-title = "Accions ràpides"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Compositor de 3 passos sobre la biblioteca d'operacions tipades"
-title = "Crea una canalització"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, carpetes supervisades"
-title = "Connecta una font"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Clau amb abast amb límits de velocitat i llista d'IP permeses"
-title = "Emet una clau API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gestiona el desplegament de l'Editor"
 sectionsAriaLabel = "Seccions d'infraestructura"
@@ -6878,13 +7363,9 @@ heading = "Claus API"
 subheading = "Credencials amb abast amb límits de velocitat per clau, permisos i llistes d'IP permeses."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP permeses"
-anyIp = "Qualsevol IP (sense llista de permeses)"
 created = "Creada"
 lastUsed = "Utilitzada per última vegada"
-permissions = "Permisos"
-rateLimit = "Límit de velocitat"
-rateLimitValue = "{{value}} req/min"
+revoke = "Revoca la clau"
 usageMonth = "Ús aquest mes"
 usageToday = "Ús avui"
 
@@ -6892,6 +7373,20 @@ usageToday = "Ús avui"
 description = "Crea una clau amb abast per començar a cridar la Stirling API."
 title = "Encara no hi ha claus API"
 
+[portal.infrastructure.apiKeys.error]
+load = "No s'han pogut carregar les teves claus API. Torna-ho a provar."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Vols revocar \"{{name}}\"? Qualsevol integració que encara utilitzi aquesta clau començarà a rebre errors 401 immediatament. Això no es pot desfer."
+cancel = "Cancel·la"
+confirm = "Revoca la clau"
+title = "Revoca la clau API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestat"
+inScope = "Dins de l'abast"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtra esdeveniments d'auditoria per categoria"
 heading = "Registres d'auditoria"
@@ -6935,6 +7430,7 @@ all = "Tots"
 auth = "Autenticació"
 config = "Configuració"
 elevation = "Elevació"
+policy = "Política"
 processing = "Processament"
 security = "Seguretat"
 
@@ -6944,19 +7440,35 @@ title = "No tens accés"
 
 [portal.infrastructure.audit.metrics]
 config = "Configuració"
-elevation = "Elevació"
+policy = "Política"
 processing = "Processament"
 totalEvents = "Esdeveniments totals · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autenticació"
+config = "Configuració"
+elevation = "Elevació"
+policy = "Política"
+processing = "Processament"
+security = "Seguretat"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Error"
+info = "Info"
+success = "Correcte"
+warning = "Advertiment"
+
+[portal.infrastructure.certLabel]
+certified = "Certificat"
+inProgress = "En curs"
+notStarted = "No iniciat"
+
 [portal.infrastructure.createKey]
 cancel = "Cancel·la"
 createKey = "Crea una clau"
 done = "Fet"
-ipAllowlistHelper = "Intervals CIDR separats per comes. Deixa-ho en blanc per permetre qualsevol IP."
-ipAllowlistLabel = "Llista d'IP permeses"
 keyNameLabel = "Nom de la clau"
 keyNamePlaceholder = "p. ex. Producció · ingestió"
-permissionsLabel = "Permisos"
 secretKeyCaption = "Clau secreta"
 secretWarning = "Desa-ho en un gestor de secrets. Stirling només emmagatzema un hash — no hi ha manera de recuperar-ho més tard."
 subtitle = "Limita la clau al mínim que necessita. La pots rotar o revocar en qualsevol moment."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Copia aquest secret ara — no es tornarà a mostrar."
 title = "Crea una clau API"
 titleCreated = "Clau creada"
 
+[portal.infrastructure.deployLabel]
+live = "En directe"
+queued = "A la cua"
+rolledBack = "Revertit"
+rolling = "Desplegant"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Salut en directe de cada regió Stirling desplegada — latència,
 description = "Les regions desplegades apareixen aquí un cop s'hagi proveït el teu espai de treball."
 title = "No hi ha regions desplegades"
 
+[portal.infrastructure.keyLabel]
+active = "Activa"
+revoked = "Revocada"
+
+[portal.infrastructure.modelLabel]
+active = "Actiu"
+degraded = "Degradat"
+disabled = "Desactivat"
+
 [portal.infrastructure.models]
 heading = "Models"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Estat"
 type = "Tipus"
 version = "Versió"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/crida"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Models actius"
 avgLatency = "Latència mitjana"
@@ -7049,6 +7580,17 @@ modelForAria = "Model per a {{operation}}"
 operation = "Operació"
 routedTo = "Encaminat a"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classificació"
+extraction = "Extracció"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradat"
+down = "Caigut"
+healthy = "Correcte"
+
 [portal.infrastructure.security.access.byok]
 description = "Proporciona una clau del teu propi KMS. Stirling hi xifra però encara pot llegir."
 label = "Porta la teva pròpia clau (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Models"
 security = "Seguretat"
 storage = "Emmagatzematge"
 
+[portal.integrations]
+addAnother = "Afegeix-ne una altra"
+availableHeading = "Disponibles"
+comingSoonHeading = "Properament"
+connect = "Connecta"
+connectedHeading = "Connectades"
+connectionCount_one = "{{count}} connexió"
+connectionCount_other = "{{count}} connexions"
+customApi = "API personalitzada"
+searchPlaceholder = "Cerca integracions"
+subtitle = "Tot allò amb què Stirling es pot comunicar. Les credencials es creen aquí una sola vegada i després es referencien des de fonts, polítiques i pipelines."
+title = "Integracions"
+typedName = "Nom de {{tool}}"
+
+[portal.integrations.filters]
+all = "Totes"
+audit = "Auditoria"
+connected = "Connectades"
+notify = "Notifica"
+security = "Seguretat"
+signing = "Signatura"
+storage = "Emmagatzematge"
+
+[portal.integrations.status]
+connected = "Connectada"
+
+[portal.integrations.table]
+integration = "Integració"
+worksWith = "Funciona amb"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Polítiques"
+sources = "Fonts"
+
+[portal.legal]
+draft = "{{label}} · esborrany"
+loadError = "No s'ha pogut carregar aquest document. Torna-ho a provar."
+loading = "S'està carregant…"
+title = "Document legal"
+
 [portal.nav]
 agent-builder = "Constructor d'agents"
 components = "Components"
@@ -7182,6 +7765,7 @@ documents = "Documents"
 editor = "Editor"
 home = "Inici"
 infrastructure = "Infraestructura"
+integrations = "Integracions"
 pipelines = "Canalitzacions"
 policies = "Polítiques"
 procurement = "Compres"
@@ -7190,25 +7774,9 @@ sources = "Fonts"
 usage = "Ús i facturació"
 users = "Usuaris"
 
-[portal.notifications]
-markAllRead = "Marca-ho tot com a llegit"
-title = "Notificacions"
-viewAll = "Mostra-ho tot"
-
-[portal.notifications.ariaLabel]
-none = "Notificacions, cap sense llegir"
-unread_one = "Notificacions, {{count}} sense llegir"
-unread_other = "Notificacions, {{count}} sense llegir"
-
-[portal.notifications.count]
-allRead = "tot llegit"
-loading = "carregant"
-new_one = "{{count}} nova"
-new_other = "{{count}} noves"
-
-[portal.notifications.empty]
-description = "No hi ha notificacions noves."
-title = "Estàs al dia"
+[portal.nav.section]
+platform = "Plataforma PDF"
+processor = "Processador PDF"
 
 [portal.pipelines]
 subtitle = "Cada canalització de documents automatitzada al backend: una cadena ordenada d'operacions sobre un conjunt de fonts, executada amb un disparador. Fes clic en una fila per veure'n els passos i les fonts."
@@ -7220,15 +7788,28 @@ newPipeline = "Canalització nova"
 [portal.pipelines.builder]
 addStep = "Afegeix una eina"
 back = "Torna a les canalitzacions"
+cannotFollow = "No es pot prendre {{produced}}"
+chooseAccount = "Tria un compte"
+chooseDestination = "Tria una destinació"
+chooseOperation = "Tria què fa aquest pas"
+chooseSource = "Tria una font"
 discard = "Descarta els canvis"
 enabled = "Activat"
+inputs = "Entrada"
+inputSource = "Font d'entrada"
+inputTrigger = "Activador"
 keepEditing = "Continua editant"
+needsConfiguring = "Cal configurar-ho"
 needsUpload = "Cal un fitxer pujat"
+noSources = "Encara no hi ha cap font connectada. Crea'n una per utilitzar-la com a entrada."
 noToolMatches = "Cap eina coincideix amb la cerca."
 pipelineSettings = "Configuració de la canalització"
 searchTools = "Cerca eines"
 selectToolBody = "Afegeix una eina per construir la teva canalització."
 selectToolTitle = "Encara no hi ha eines"
+sendToSystem = "Envia a un altre sistema"
+stepsIncompatible = "Aquests passos no es poden executar amb el que produeix el pas anterior: {{tools}}."
+stepsNeedSetup = "Aquests passos encara s'han de configurar abans de desar: {{tools}}."
 toolSettings = "Configuració de l'eina"
 unknownStep = "Operació no reconeguda, conservada tal com està."
 unsavedBody = "Tens canvis sense desar. Desa'ls abans de sortir o els vols descartar?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Canvis sense desar"
 uploadUnsupported = "Els fitxers pujats encara no són compatibles amb les canalitzacions, així que aquests passos no es poden desar: {{tools}}."
 usesDefaults = "S'executa amb la configuració predeterminada"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combina tots els fitxers del pas anterior"
+fan-out = "S'executa una vegada per cada fitxer del pas anterior"
+format-mismatch = "Necessita {{accepts}}, però el pas anterior produeix {{produced}}"
+output-uncertain = "Pot ser que no s'executi: la sortida del pas anterior depèn de com estigui configurat"
+source-mismatch = "Necessita {{accepts}}, però l'entrada d'aquest pipeline és {{produced}}"
+undeclared-operation = "No es pot comprovar què accepta aquest pas"
+
 [portal.pipelines.composer]
 addTool = "Afegeix una eina"
 cancel = "Cancel·la"
 chainEmpty = "Afegeix una eina per començar a construir la teva canalització."
 create = "Crea una canalització"
-directory = "Carpeta de sortida"
-directoryHelp = "Camí absolut al servidor. Ha d'estar dins de les carpetes permeses configurades."
 editingUnsupported = "Encara no és compatible mostrar aquests paràmetres d'eina per editar-los."
 moveDown = "Mou avall"
 moveUp = "Mou amunt"
 name = "Nom"
 namePlaceholder = "p. ex. Revisió de redacció"
-noSources = "Encara no hi ha fonts connectades. La canalització encara es pot executar sobre fitxers proporcionats directament."
 noToolSettings = "Aquesta eina no té configuració ajustable."
 operations_one = "Operació ({{count}})"
 operations_other = "Operacions ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Elimina"
 title = "Vols eliminar la canalització?"
 
 [portal.pipelines.detail]
+clearHistory = "Esborra l'historial"
 delete = "Elimina la canalització"
 run = "Executa ara"
 
 [portal.pipelines.empty]
 action = "Crea una canalització"
+connectSource = "Connecta una font"
 description = "Crea la teva primera canalització: tria les fonts sobre les quals s'executa, encadena les operacions i tria on va la sortida."
 title = "Encara no hi ha canalitzacions"
 
@@ -7286,15 +7874,17 @@ active = "Actives"
 paused = "En pausa"
 total = "Canalitzacions"
 
-[portal.pipelines.output]
-folder = "Escriu a la carpeta"
-inline = "Retorna fitxers"
-
 [portal.pipelines.run]
+allProcessed_one = "No hi ha res per executar: el document {{count}} de la font ja s'ha processat."
+allProcessed_other = "No hi ha res per executar: tots els {{count}} documents de les fonts ja s'han processat."
 completed_one = "Execució completada."
 completed_other = "Totes les {{count}} execucions completades."
 empty = "No hi ha res per executar: les fonts no tenien documents per processar."
 failed = "L'execució ha fallat: {{error}}"
+historyCleared = "Historial esborrat. La propera execució tornarà a processar tot el que hi hagi actualment a les fonts."
+inFlight = "No hi ha res nou per executar: encara s'estan processant documents d'una execució anterior."
+parked_one = "No hi ha res per executar: {{count}} document ha fallat anteriorment i està aparcat. Corregeix-ne la causa i després esborra l'historial per tornar-ho a provar."
+parked_other = "No hi ha res per executar: {{count}} documents han fallat anteriorment i estan aparcats. Corregeix-ne la causa i després esborra l'historial per tornar-ho a provar."
 running = "Execució iniciada; encara està en curs."
 timeout = "L'execució triga més del previst; pot ser que encara acabi en segon pla."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Programat"
 
 [portal.policies]
+defaultName = "Política de {{category}}"
 subtitle = "Automatitzacions permanents que apliquen una canalització d'eines a cada document. Cada política s'activa en pujar o exportar, executa la seva cadena d'eines i desa la versió aplicada al costat de l'original."
 title = "Polítiques"
 
 [portal.policies.card]
 comingSoon = "Actualitza a Enterprise"
 notSetUp = "No configurat"
+requiresAiEngine = "Requereix motor d'IA"
+
+[portal.policies.categories.classification]
+desc = "Identifica el tipus de cada document en pujar-lo i etiqueta'n les metadades per arxivar-lo i cercar-lo."
+label = "Classificació"
 
 [portal.policies.categories.compliance]
 desc = "Aplica requisits HIPAA, GDPR, SOC 2 o FedRAMP a cada document."
@@ -7344,6 +7940,13 @@ label = "Seguretat"
 [portal.policies.config]
 scopeAll = "Tots els documents"
 
+[portal.policies.config.classification]
+summary = "Classifica cada document pujat segons les etiquetes del teu equip i n'etiqueta les metadades."
+
+[portal.policies.config.classification.rules]
+0 = "Classifica"
+1 = "Etiqueta les metadades"
+
 [portal.policies.config.compliance]
 summary = "Valida documents contra marcs reguladors abans que surtin del sistema."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Confiança mínima"
 2 = "Anomena"
 3 = "Normalitza"
 
+[portal.policies.config.purview]
+label = "Aplica una etiqueta de sensibilitat de Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Tenant de Purview"
+labelId = "ID de l'etiqueta"
+labelIdHelp = "El GUID de l'etiqueta, del portal de Purview. En aplicar una etiqueta, s'escriuen les seves metadades al PDF; no el pot xifrar, això requereix el client de Microsoft."
+labelName = "Nom de l'etiqueta (opcional)"
+labelNameHelp = "S'enregistra juntament amb l'ID perquè les persones i les eines puguin reconèixer l'etiqueta."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview distingeix una etiqueta aplicada per una política d'una triada per una persona."
+label = "Com s'enregistra l'etiqueta"
+privileged = "Com a triada per una persona"
+standard = "Com a aplicada automàticament"
+
+[portal.policies.config.purviewRead]
+label = "Llegeix una etiqueta de Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tenant de Purview"
+connectionHelp = "Llegeix l'etiqueta que el document ja porta, perquè els passos posteriors hi puguin actuar."
+
 [portal.policies.config.retention]
 summary = "Aplica quant de temps es conserven els documents, quan s'arxiven i quan s'eliminen."
 
@@ -7438,6 +8064,7 @@ title = "Encara no hi ha activitat"
 [portal.policies.endpoints]
 addWatermark = "Marca d'aigua"
 autoRedact = "Censura PII"
+classifyAndLabel = "Classifica"
 compressPdf = "Comprimeix"
 flatten = "Aplana"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Les teves polítiques s'han desat i apareixeran quan es restablei
 retry = "Torna-ho a provar"
 title = "Backend no disponible"
 
+[portal.policies.operations]
+change = "Canvia què fa aquest pas"
+noResults = "Cap pas no coincideix amb això. Prova amb un nom de producte, o \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Cerca passos: prova \"scan\", \"attach\" o un nom de producte"
+
+[portal.policies.operations.bodyMode]
+binary = "Bytes de fitxer en brut"
+json = "Dins d'una càrrega JSON"
+multipart = "Com a pujada de fitxer (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "El teu propi servidor ClamAV comprova el document; res no surt de la teva xarxa."
+label = "Escaneja per detectar virus (autoallotjat)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rebutja documents que continguin macros, executables, scripts o objectes incrustats."
+label = "Bloqueja el contingut actiu"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive comprova el document i l'execució s'atura si no està net."
+label = "Escaneja per detectar virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arxiva el document processat en una pàgina."
+label = "Adjunta a una pàgina de Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Envia el document a ConsignO Cloud per signar-lo."
+label = "Envia per a signatura (ConsignO)"
+note = "Envia el document. Encara no s'admet recuperar la còpia signada, perquè un pas no pot passar un resultat a un pas posterior."
+
+[portal.policies.operations.customApiCall]
+description = "Defineix tu mateix la crida: camí, mètode, cos i gestió de la resposta."
+label = "Crida una API personalitzada"
+
+[portal.policies.operations.discordNotify]
+description = "Indica a un canal que la política ha gestionat un document."
+label = "Publica un missatge a Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Enregistra el que ha fet la política com a document cercable."
+label = "Indexa un esdeveniment d'auditoria a Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart és adient per a API de pujada; JSON és adient per a API que volen el fitxer dins d'una càrrega; binary envia els bytes en brut."
+label = "Com enviar el document"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Un cos JSON enviat tal qual. {{document.base64}} porta el fitxer; {{document.*}} i {{run.*}} s'emplenen per document."
+label = "Cos JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Compte"
+
+[portal.policies.operations.fields.domain]
+label = "Domini de Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "El camp del formulari sota el qual l'API espera el document."
+label = "Nom del camp de fitxer"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "De"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Un objecte JSON de parells nom/valor de capçaleres. La credencial de la connexió s'afegeix automàticament."
+label = "Capçaleres"
+
+[portal.policies.operations.fields.index]
+label = "Índex"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Clau de la incidència"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "S'envia com a cos del missatge. {{document.*}} i {{run.*}} s'emplenen per document."
+label = "Missatge"
+
+[portal.policies.operations.fields.method]
+label = "Mètode"
+
+[portal.policies.operations.fields.pageId]
+label = "ID de pàgina"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "S'afegeix a l'URL base de la connexió. Mai no pot arribar a un altre host."
+label = "Camí"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "On escriure'l a la unitat. {{document.filename}} s'emplena per document."
+label = "Camí de destinació"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report deixa el document intacte. Replace el substitueix pel que torni."
+label = "Què fer amb la resposta"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Correu electrònic del signant"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Assumpte"
+placeholder = "Processat: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analitza aquest text. Utilitza {{document.title}} o enganxa el text que vols comprovar."
+label = "Text per comprovar"
+
+[portal.policies.operations.fields.to]
+label = "A"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nom d'usuari de Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Indica a un espai que la política ha gestionat un document."
+label = "Publica un missatge a Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arxiva el document processat en una incidència."
+label = "Adjunta a una incidència de Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Envia el document processat com a fitxer adjunt."
+label = "Envia el document per correu electrònic (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Escriu el document processat en una carpeta."
+label = "Puja a Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "El teu propi servidor Presidio informa de les dades personals que troba."
+label = "Detecta dades personals"
+note = "Presidio llegeix text, no fitxers. Dona-li el text que vols comprovar; el document en si no es puja."
+
+[portal.policies.operations.responseMode]
+replace = "Substitueix el document per la resposta"
+report = "Mantén el document, enregistra la resposta"
+
+[portal.policies.operations.sendgridEmail]
+description = "Envia el document processat com a fitxer adjunt."
+label = "Envia el document per correu electrònic (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Indica a un canal que la política ha gestionat un document."
+label = "Publica un missatge a Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Enregistra el que ha fet la política on els teus auditors ja ho consulten."
+label = "Envia un esdeveniment d'auditoria a Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Enregistra el que ha fet la política en un col·lector HTTP."
+label = "Envia un esdeveniment d'auditoria a Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Indica a un canal que la política ha gestionat un document."
+label = "Publica un missatge a Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Envia el document en si a una URL que triïs."
+label = "Publica el document en un webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Passa els detalls de l'execució a la teva automatització."
+label = "Activa un Zap o un escenari de Make"
+
 [portal.policies.stats]
 activeFor = "Activa"
 dataProcessed = "Dades processades"
@@ -7473,6 +8277,13 @@ label = "Documents aplicats"
 description = "Configurades però sense executar-se"
 label = "En pausa"
 
+[portal.policies.table]
+appliesTo = "S'aplica a"
+docs = "Docs aplicats"
+enforces = "Aplica"
+policy = "Política"
+status = "Estat"
+
 [portal.policies.wizard.actions]
 back = "Enrere"
 cancel = "Cancel·la"
@@ -7480,6 +8291,10 @@ continue = "Continua"
 enablePolicy = "Activa la política"
 saveChanges = "Desa els canvis"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifica el tipus del document a partir de les etiquetes del teu equip i l'etiqueta, perquè s'arxivi i es cerqui per categoria."
+label = "Classifica el document"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprimeix el document per reduir la mida del fitxer."
 label = "Redueix la mida del fitxer"
@@ -7500,10 +8315,18 @@ label = "Censura informació sensible"
 desc = "Elimina JavaScript ocult perquè no es pugui executar res automàticament quan s'obri el document."
 label = "Elimina contingut actiu"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Demostra que el document existia exactament en aquesta forma en un moment determinat, utilitzant una autoritat de segell de temps independent. Només s'envia un hash: el document no surt mai del teu servidor."
+label = "Afegeix un segell de temps de confiança"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Estampa una marca visible (p. ex. “Confidencial”) a totes les pàgines."
 label = "Aplica una marca d'aigua"
 
+[portal.policies.wizard.classification]
+description = "Cada document pujat es classifica segons les etiquetes integrades i s'etiqueta amb els tipus que hi encaixen. El conjunt d'etiquetes es comparteix amb tot el teu equip."
+labelsHeading = "Etiquetes de classificació"
+
 [portal.policies.wizard.errors]
 noTools = "Activa primer almenys una eina al flux de treball."
 saveFailed = "No s'ha pogut desar la política. Torna-ho a provar."
@@ -7548,73 +8371,118 @@ setUp = "Configura la política de {{category}}"
 [portal.policies.wizard.workflow]
 description = "Tria què fa aquesta política a cada document que processa."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} actives"
-noRule = "Encara no s'ha aplicat cap regla"
-subtitle = "Automatitzacions permanents per les quals passa cada document, independentment de quin pipeline el gestioni."
-title = "Què s'executa als teus PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Actualitza a Enterprise"
-configure = "Configura"
 setUp = "Configura"
 
-[portal.policySummary.column]
-activeRule = "Regla activa"
-policy = "Política"
-status = "Estat"
+[portal.processorFlow]
+footnote = "Els recomptes són de les darreres 24 hores. La velocitat del flux és il·lustrativa."
+liveBadge = "En directe"
+stats = "{{connected}} connectats · {{processed}} PDFs processats"
+title = "Processador PDF"
 
-[portal.policySummary.empty]
-description = "Quan es configurin les polítiques, les categories apareixeran aquí."
-title = "Encara no hi ha polítiques"
+[portal.processorFlow.lens]
+ariaLabel = "Mode de visualització"
+flow = "Flux"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Activa"
-off = "Desactivada"
-soon = "Aviat"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Fallits"
+heading = "Resultats"
+success = "Lliurats"
 
-[portal.processingStatus]
-managePlan = "Gestiona el pla"
-volumeSuffix = "PDFs processats · darrers 30 dies"
+[portal.processorFlow.policies]
+activeCount = "{{n}} actives"
+count = "{{n}} · 24 h"
+heading = "Polítiques"
+setUp = "Configura"
+soon = "Properament"
+
+[portal.processorFlow.sankey]
+waist = "Polítiques · {{n}} actives"
+
+[portal.processorFlow.sankey.empty]
+description = "Connecta una font i activa una política per veure com els documents flueixen pel processador."
+title = "Encara no hi ha flux"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Connecta"
+editor = "Editor de Stirling PDF"
+heading = "Fonts"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Entrada de correu electrònic"
 
 [portal.procurement]
-reset = "Restableix la contractació (demo)"
 subtitle = "Aconsegueix que el teu equip sigui avaluat, contractat i incorporat. Tots els documents en un sol lloc."
 title = "Contractació"
 
-[portal.procurement.action]
-download = "Baixa"
-pay = "Paga ara"
-request = "Sol·licita"
-sign = "Revisa i signa"
-upload = "Carrega"
-
 [portal.procurement.agreement]
 agreeCta = "Accepta i subscriu-te"
+confidential = "Confidencial"
 confirm = "He llegit i accepto el Stirling Enterprise Agreement."
-eyebrow = "Acord"
-intro = "Un únic acord combinat cobreix el teu tracte: Master Service Agreement, Order Form, EULA i Data Processing Agreement. Revisa'l i després accepta per convertir el pressupost en una subscripció compromesa."
-title = "Revisa el teu acord enterprise"
+docName = "Acord de Stirling Enterprise"
+docSub = "MSA, formulari de comanda, EULA i DPA, combinats en una sola signatura."
+download = "Descarrega"
+downloadDraftError = "No s'ha pogut generar el PDF de l'acord: el renderitzador de documents no està disponible. Torna-ho a provar d'aquí a poc o contacta amb el suport."
+downloadError = "No s'ha pogut descarregar l'acord signat. Torna-ho a provar."
+legalName = "Nom de l'entitat legal"
+legalNamePlaceholder = "L'entitat legal que signarà"
+loadError = "No s'ha pogut carregar l'acord. Torna-ho a provar."
+loading = "S'està carregant l'acord..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Sol·licita canvis"
+scrollHint = "Desplaça't per revisar"
+signatory = "Nom del signant"
+signatoryPlaceholder = "Nom complet"
+signatoryTitle = "Càrrec del signant"
+signatoryTitlePlaceholder = "p. ex. director jurídic"
+signError = "No s'ha pogut enregistrar la teva signatura. Torna-ho a provar."
 
 [portal.procurement.builder]
 addons = "Complements"
+addressLine1 = "Línia d'adreça 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Línia d'adreça 2"
+addressLine2Placeholder = "Suite, planta, edifici"
 back = "Enrere"
 businessName = "Nom de l'empresa"
 businessNamePlaceholder = "La teva empresa"
+city = "Ciutat"
+cityPlaceholder = "San Francisco"
+completeRequired = "Completa els camps obligatoris (marcats amb *) amb un correu electrònic vàlid abans de generar el pressupost."
+contactEmail = "Correu electrònic de contacte"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nom de contacte"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continua"
-country = "País"
-countryEuro = "Eurozona (EUR €)"
-countryUK = "Regne Unit (GBP £)"
-countryUS = "Estats Units (USD $)"
+done = "Fet"
 eula = "He llegit i accepto l'EULA de Stirling Enterprise. Regeix l'acord generat a partir d'aquest pressupost."
 generate = "Genera pressupost"
-included = "Inclòs"
 indemnification = "Indemnització de PI"
 indemnificationSub = "Defensem les reclamacions de PI que compleixin els requisits, segons l'EULA"
-offlineLicense = "Llicència offline / air-gapped"
-offlineLicenseSub = "Un fitxer de llicència descarregable per a una instància autoallotjada air-gapped"
+paperEyebrow = "Pressupost Enterprise"
+paperFor = "Preparat per a"
+pdfSize = "Mida del PDF"
+poNumber = "Número de PO"
+poNumberPlaceholder = "Opcional"
+postalCode = "Codi postal"
+postalCodePlaceholder = "94105"
+posture = "Governança"
+posture_count = "~{{count}} polítiques"
+posture_essentials = "Essencials"
+posture_essentialsSub = "Classificació + Compartició — els valors predeterminats"
+posture_governed = "Governat"
+posture_governedSub = "Afegeix Seguretat i Encaminament"
+posture_regulated = "Regulat"
+posture_regulatedSub = "Totes les categories — Compliment, Retenció, Ingesta"
 qbr = "Revisions empresarials trimestrals"
 qbrSub = "El teu SE revisa l'ús i el full de ruta cada trimestre"
+region = "Estat / regió"
+regionPlaceholder = "Califòrnia"
 running = "{{annual}} / any · {{years}} anys {{tcv}}"
 s1Sub = "El teu equip i els PDFs que preveus processar cada any."
 s1Title = "Quant processareu?"
@@ -7623,6 +8491,12 @@ s2Title = "Compromís i servei"
 s3Sub = "Per al pressupost i l'acord que genera."
 s3Title = "Les teves dades"
 serviceLevel = "Nivell de servei"
+size_compact = "Compacte"
+size_compactSub = "Principalment text, menys d'1 MB"
+size_heavy = "Pesant"
+size_heavySub = "Escanejat o amb moltes imatges, 5 MB+"
+size_standard = "Estàndard"
+size_standardSub = "Text i imatges barrejats, d'1 a 5 MB"
 slDedicated = "Dedicat"
 slDedicatedSub = "4 hores laborables · gestor de compte dedicat · +30%"
 slPriority = "Prioritari"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Mateix dia laborable · CSM assignat · +15%"
 slStandard = "Estàndard"
 slStandardSub = "Següent dia laborable · CSM compartit · inclòs"
 stepOf = "Pas {{n}} de {{total}}"
+taxId = "IVA / ID fiscal"
+taxIdPlaceholder = "Opcional"
 term = "Termini"
 termDiscount = "S'ha aplicat un descompte del {{pct}}% per compromís multianual"
 title = "Crea el teu pressupost"
@@ -7637,6 +8513,7 @@ training = "Incorporació i formació"
 trainingSub = "Sessions en directe perquè el teu equip comenci a treballar"
 users = "Usuaris totals"
 usersPlaceholder = "p. ex. 250"
+viewEula = "Llegeix-ho"
 volEstimated = "Estimació a partir de {{count}} usuaris (~2,000 PDFs cadascun, incloent-hi automatització). Edita-ho si tens una dada millor."
 volManual = "S'utilitza la teva xifra. Pots tornar a estimar-ho a partir de la mida del teu equip en qualsevol moment."
 volNoUsers = "No n'estàs segur? Introdueix la mida del teu equip i ho estimarem."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "p. ex. 1,000,000"
 years_one = "{{count}} any"
 years_other = "{{count}} anys"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Fet"
-here = "Ets aquí"
-hide = "Amaga"
-optional = "Opcional"
-paidAddon = "Complement de pagament"
-show = "Mostra"
-subtitle = "Tot el que necessites a cada pas del recorregut, presentat a mesura que el tracte avança."
-supportingSubtitle = "SOC 2, revisions de seguretat, formularis fiscals i més, a punt quan el teu equip de seguretat o contractació els demani. Alguns tenen una tarifa única."
-supportingTitle = "Suport a la teva avaluació"
+[portal.procurement.documents]
+agreement = "Acord Enterprise"
+agreementSub = "MSA, formulari de comanda i DPA en una sola signatura."
+download = "Descarrega"
+eula = "EULA i termes comercials"
+eulaSub = "El programari i els termes comercials d'autoservei."
+invoice = "Factura"
+invoiceSub = "La factura de la teva primera subscripció."
+laterInvoice = "Disponible després que acceptis"
+laterQuote = "Disponible un cop s'emeti el teu pressupost"
+quote = "Pressupost"
+quoteSub = "El teu pressupost enterprise detallat."
+sla = "Annex SLA"
+slaSub = "Nivells de suport i objectius de resposta."
+subprocessors = "Subencarregats"
+subprocessorsSub = "Tercers que processen dades en nom teu."
+subtitle = "La documentació del teu acord, disponible en qualsevol moment."
 title = "Documents"
-upcoming = "Properament"
+view = "Mostra"
 
 [portal.procurement.error]
 title = "Alguna cosa ha anat malament"
 
 [portal.procurement.hero]
-company = "El teu tracte enterprise"
+barAria = "Etapa {{current}} de {{total}}"
 ctaAgreement = "Revisa i signa l'acord"
-ctaLive = "Ja estàs en producció"
-ctaPayment = "Afegeix pagament"
+ctaExploring = "Configura la teva prova"
 ctaQuote = "Revisa el teu pressupost"
+ctaReviewQuote = "Revisa el pressupost"
 ctaTrial = "Crea el teu pressupost"
+documents = "Documents"
 eyebrow = "Contractació enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Convida companys d'equip"
-keyDocs = "Documents clau"
-nextStep = "Pas següent: {{action}}"
-notStarted = "No iniciat"
+licenseKey = "Clau de llicència"
+liveSub = "La teva organització està provisionada i la teva llicència és activa."
+liveTitle = "Ja estàs en directe a Stirling Enterprise"
+next = "Següent: {{stage}}"
 open = "Obre la contractació"
 scheduleCall = "Programa una trucada"
-setup1Sub = "Convida els teus companys d'equip"
-setup1Title = "Desplega l'editor PDF"
-setup2Sub = "Activa el processament en editors i altres fonts"
-setup2Title = "Connecta el processador PDF"
-setup3Sub = "Activa Seguretat, Compliment, Encaminament o Retenció quan els necessitis"
-setup3Title = "Afegeix polítiques recomanades"
+sentenceAgreement = "revisar i signar l'acord"
+sentenceLive = "provisionament i desplegament"
+sentencePayment = "ordre de compra i pagament"
+sentenceQuote = "revisar i acceptar el teu pressupost"
+sentenceTrial = "configurar el teu espai de prova"
 
 [portal.procurement.journey]
 daysLeft_one = "Queda {{count}} dia"
 daysLeft_other = "Queden {{count}} dies"
-engineerLabel = "El teu enginyer de solucions"
-eyebrow = "El teu desplegament"
-live = "Ja estàs en producció amb Stirling Enterprise"
-nextStep = "Pas següent: {{action}}"
-subtitle = "El teu enginyer de solucions és present en cada pas. Una acció següent cada vegada; la llista completa és a sota."
-title = "De la prova a producció, un camí guiat"
-trialTitle = "Prova Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Una signatura cobreix MSA, formulari de comanda, EULA i DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Encara no s'ha pogut generar el fitxer de llicència offline 
 downloadOffline = "Baixa la llicència offline (.lic)"
 hint = "Enganxa aquesta clau en una instància autoallotjada per activar-la, o conserva-la per als teus registres. Guarda-la en un lloc segur."
 label = "La teva clau de llicència"
+subtitle = "Activa una instància autoallotjada amb aquesta clau o conserva-la per als teus registres."
+title = "La teva clau de llicència"
+trialFileHint = "Aquest és el teu fitxer de llicència de prova. Quan l'acord estigui en vigor, torna i descarrega'l de nou; a diferència de la clau de llicència en línia, el fitxer .lic no s'actualitzarà tot sol."
 
 [portal.procurement.link]
 cta = "Enllaça el compte"
@@ -7739,65 +8619,62 @@ description = "La teva subscripció és activa i la teva llicència s'ha emès.
 eyebrow = "En producció"
 title = "Ja estàs en producció amb Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Les claus de prova, els pressupostos per volum compromès, l'acord d'una sola signatura, el pagament i el teu registre de documents seran aquí quan iniciïs una avaluació enterprise."
-eyebrow = "Només Enterprise"
-talkToSales = "Parla amb vendes"
-title = "El recorregut de contractació s'obre amb Enterprise"
-
 [portal.procurement.milestone]
-accept = "Accepta i continua"
-description = "Baixa el PDF per compartir-lo amb el teu equip, torna per acceptar-lo quan estiguis a punt o fes-hi canvis."
-download = "Baixa el PDF"
 downloadError = "Encara no s'ha pogut baixar el PDF del pressupost — torna-ho a provar d'aquí a un moment."
-edit = "Edita el pressupost"
-eyebrow = "Pressupost {{number}}"
-perYear = " / any"
-preparedFor = "Preparat per a {{company}}"
-tcv = "{{value}} de valor total del contracte"
-title = "El teu pressupost està a punt"
-
-[portal.procurement.modal]
-cancel = "Cancel·la"
-chooseFile = "Tria un fitxer"
-close = "Tanca"
-downloadBody = "La baixada començarà aviat."
-downloadCta = "Baixa"
-downloadTitle = "Baixa"
-noFile = "No s'ha seleccionat cap fitxer"
-payBody = "Paga el teu contracte compromès amb targeta o transferència bancària a través de Stripe. El teu espai de treball s'aprovisiona tan bon punt es liquida el pagament."
-payCta = "Continua a Stripe"
-payTitle = "Confirma el pagament"
-requestBodyFree = "Ho generem sota demanda. Confirma-ho i el teu enginyer de solucions t'ho enviarà aviat."
-requestBodyPaid = "Aquest és un complement de pagament. Confirma-ho i el teu enginyer de solucions el dimensionarà i t'enviarà la documentació."
-requestCta = "Sol·licita"
-requestTitle = "Sol·licita aquest document"
-signBody = "Obre el Stirling Enterprise Agreement per a signatura electrònica: una signatura cobreix l'MSA, el formulari de comanda, l'EULA i el DPA. Contrasignem automàticament i avances al pagament."
-signCta = "Obre per signar"
-signTitle = "Revisa i signa el teu acord"
-uploadBody = "Envia'ns la teva PO i emetrem la factura segons les teves condicions. Arrossega el PDF o tria un fitxer a sota."
-uploadCta = "Carrega l'ordre de compra"
-uploadTitle = "Carrega la teva ordre de compra"
 
 [portal.procurement.payment]
 description = "El teu pressupost s'ha acceptat i la teva llicència ja és activa — el teu equip pot començar de seguida. Paga la primera factura quan estiguis a punt; pots pagar-la o baixar-la aquí, sense correu electrònic."
+downloadAgreement = "Descarrega l'acord signat"
 downloadInvoice = "Baixa la factura"
-simulate = "Simula el pagament rebut (demo)"
+eyebrow = "Pagament"
 title = "Subscripció creada"
 viewInvoice = "Mostra i paga la factura"
 
+[portal.procurement.review]
+acceptCta = "Accepta el pressupost"
+annual = "Quota anual (any 1)"
+downloadCta = "Descarrega el pressupost"
+poNumber = "Ordre de compra: {{po}}"
+renewal = "Es renova a {{amount}}/any després del termini (+{{pct}}% IPC)"
+tcv = "Termini de {{years}} anys, pagat íntegrament per avançat: {{tcv}}"
+validUntil = "Vàlid fins a {{date}}"
+
 [portal.procurement.schedule]
 fallback = "No s'ha pogut carregar el planificador."
 fallbackLink = "Obre la programació en una pestanya nova"
+loading = "S'està carregant el planificador..."
 subtitle = "El teu enginyer de solucions guiarà el teu equip pel desplegament. Tria una hora que et vagi bé."
 title = "Programa una trucada"
 
-[portal.procurement.status]
-action = "Acció necessària"
-available = "Disponible"
-complete = "Complet"
-pending = "Pendent"
-request = "A petició"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Segellat, sense sortida"
+back = "Enrere"
+businessName = "Nom de l'empresa"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Gestionat, inici més ràpid"
+continue = "Continua"
+deployment = "On s'ha de desplegar?"
+eula = "Accepto l'EULA i els termes comercials de Stirling."
+fullName = "Nom complet"
+fullNamePlaceholder = "El teu nom"
+invites = "Convida companys d'equip · opcional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Programa una trucada"
+seats = "Persones que ho provaran"
+seatsPlaceholder = "p. ex. 15"
+selfhost = "Autoallotjat"
+selfhostSub = "Docker o Kubernetes"
+start = "Inicia la prova"
+stepOf = "Pas {{n}} de {{total}}"
+subtitle = "Gratuït durant 14 dies, sense targeta."
+subtitleDetails = "Alguns detalls per al teu pressupost i acord."
+talkFirst = "Prefereixes parlar abans?"
+title = "Configura la teva prova"
+viewEula = "Llegeix-ho"
+workEmail = "Correu electrònic de feina"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "L'extensió afegeix 7 dies i notifica el teu enginyer de solucions."
@@ -7808,20 +8685,6 @@ maxed = "Límit assolit"
 subtitle = "La teva prova gratuïta dura fins al {{date}}. No cal targeta."
 title = "Prova Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Preus per volum compromès, SSO + SCIM + RBAC per a tota l'organització, auditoria immutable de 90 dies i un SE dedicat."
-homeCta = "Inicia la prova →"
-homeHeadline = "Processa milions de PDFs."
-
-[portal.recentActivity]
-title = "Activitat recent"
-viewAll = "Mostra-ho tot"
-
-[portal.recentActivity.empty]
-description = "Les execucions de pipeline, els desplegaments i els esdeveniments d'agent apareixeran aquí."
-title = "Encara no hi ha res aquí"
-
 [portal.search]
 ariaLabel = "Cerca"
 placeholder = "Cerca a Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Administració"
 [portal.settings.sections]
 account-link = "Enllaç del compte"
 
-[portal.shell.header]
-accountFallback = "Compte"
-accountMenu = "Menú del compte"
-darkMode = "Mode fosc"
-lightMode = "Mode clar"
-search = "Cerca"
-searchPlaceholder = "Cerca…"
-signOut = "Tanca la sessió"
-switchToDark = "Canvia al tema fosc"
-switchToLight = "Canvia al tema clar"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processador"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Enllaça el compte de Stirling"
-planEditor = "Pla Editor"
-planEnterprise = "Pla Enterprise"
-planProcessor = "Pla Processor"
 primaryNav = "Navegació principal"
 switchApp = "Canvia d'aplicació"
 
+[portal.shell.topbar]
+closeNav = "Tanca la navegació"
+openNav = "Obre la navegació"
+search = "Cerca"
+
 [portal.sources]
 subtitle = "Connexions d'entrada reutilitzables que alimenten documents a Stirling. Configura una connexió una vegada i després referencia-la des de qualsevol nombre de polítiques. Fes clic en una fila per veure'n la configuració i quines polítiques la utilitzen."
 title = "Fonts"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Connecta una font"
 
+[portal.sources.builder]
+back = "Torna a les fonts"
+backToTypes = "Tots els tipus de font"
+cancel = "Cancel·la"
+chooseHint = "Tria d'on venen els documents. Els connectors en gris estan en camí."
+comingSoon = "Properament"
+comingSoonHeading = "Properament"
+create = "Crea una font"
+createTitle = "Connecta una font"
+delete = "Suprimeix"
+editTitle = "Edita la font"
+enabled = "Activada"
+save = "Desa els canvis"
+
+[portal.sources.builder.folderAccess]
+description = "Les automatitzacions de carpetes només poden utilitzar carpetes que un administrador hagi permès. Afegeix-la a la configuració d'accés a carpetes i torna-ho a provar."
+openSettings = "Configuració d'accés a carpetes"
+title = "Aquesta carpeta no està permesa"
+
 [portal.sources.delete]
 body = "Vols suprimir \"{{name}}\"? Això no es pot desfer. Les polítiques que hi fan referència s'haurien d'actualitzar."
 cancel = "Cancel·la"
 confirm = "Suprimeix"
 title = "Vols suprimir la font?"
 
-[portal.sources.detail]
-closeAriaLabel = "Tanca el detall"
-delete = "Suprimeix la font"
-docs24h = "Darreres 24 h"
-docs30d = "Darrers 30 dies"
-docsTotal = "Total vist"
-docsTrend = "Documents dels darrers 30 dies"
-documents = "Documents"
-edit = "Edita"
-notReferenced = "No la referencia cap política, així que és segur suprimir-la."
-pause = "Posa en pausa"
-resume = "Reprèn"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Utilitzada per"
-
 [portal.sources.empty]
 description = "Connecta una carpeta (i, aviat, emmagatzematge al núvol) perquè les teves polítiques tinguin un lloc d'on obtenir documents."
 title = "Encara no hi ha fonts connectades"
@@ -7899,18 +8754,57 @@ inUse = "En ús"
 total = "Connexions"
 unused = "Sense utilitzar"
 
+[portal.sources.networkFields.connection]
+helperText = "La connexió desada amb l'adreça del servidor i les credencials. Es reutilitza per cada font que la referencia."
+label = "Connexió"
+
+[portal.sources.networkFields.directory]
+helperText = "Carpeta del servidor a consultar, relativa a l'inici de sessió o a l'arrel de la compartició. Deixa-ho en blanc per a l'arrel."
+label = "Carpeta"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume elimina cada fitxer del servidor un cop totes les polítiques l'han processat."
+label = "Mode de lectura"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: processa cada fitxer una vegada"
+snapshot = "Snapshot: torna a llegir la carpeta a cada execució"
+
+[portal.sources.networkFields.recursive]
+label = "Profunditat de carpeta"
+
+[portal.sources.networkFields.recursive.options]
+all = "Inclou subcarpetes"
+top = "Només el nivell superior"
+
 [portal.sources.status]
 active = "Activa"
 disabled = "Desactivada"
 unused = "Sense utilitzar"
 
 [portal.sources.table]
+documents = "Documents"
 source = "Font"
 status = "Estat"
 usedBy = "Polítiques"
 
+[portal.sources.types.box]
+description = "Extreu documents de carpetes de Box que el teu equip ja comparteix."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Extreu documents d'una carpeta compartida de Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documents que el teu equip ha processat a l'editor, entre polítiques i execucions d'IA."
 label = "Editor"
+noPolicies = "Encara no s'ha executat cap política des de l'editor."
+
+[portal.sources.types.email]
+description = "Converteix els adjunts enviats a una bústia dedicada en documents."
+label = "Safata d'entrada de correu electrònic"
 
 [portal.sources.types.folder]
 description = "Vigila un directori del servidor per detectar documents nous."
@@ -7943,25 +8837,80 @@ label = "Profunditat de carpeta"
 all = "Inclou subcarpetes"
 top = "Només nivell superior"
 
+[portal.sources.types.ftp]
+description = "Consulta una carpeta d'un servidor FTP o FTPS per detectar documents nous."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Extreu documents de carpetes compartides de Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Supervisa una compartició de xarxa SMB per detectar documents nous."
+label = "Unitat de xarxa"
+
+[portal.sources.types.onedrive]
+description = "Supervisa carpetes de OneDrive per detectar documents nous."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Extreu documents d'un bucket Amazon S3 o compatible amb S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "La connexió desada que conté el bucket i les credencials. Es reutilitza per cada font i sortida de pipeline que la referencia."
+label = "Connexió"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume elimina cada objecte del bucket un cop totes les polítiques l'han processat."
+label = "Mode de lectura"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: processa cada objecte una vegada"
+snapshot = "Snapshot: torna a llegir el bucket a cada execució"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Només es processen els objectes les claus dels quals comencen amb aquest prefix."
+label = "Prefix de clau"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Consulta una carpeta de lliurament SFTP per detectar documents nous."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Extreu documents de biblioteques de documents de SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Font"
 
+[portal.sources.types.webhook]
+createNote = "Es generen una URL de lliurament i un secret de signatura quan crees aquest webhook. Els remitents fan POST de documents a aquesta URL i les polítiques que el referencien s'executen en arribar."
+description = "Rep documents mitjançant HTTP POST signat des de qualsevol sistema extern."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL de lliurament"
+secretNote = "El secret de signatura es mostra una vegada, quan es crea el webhook. Torna a crear la font per renovar-lo."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copia"
+done = "Fet"
+secret = "Secret de signatura"
+secretHelp = "Signa el cos en brut de cada lliurament amb aquesta clau (HMAC-SHA256) i envia'l com a capçalera X-Stirling-Signature."
+secretWarning = "Copia ara el secret de signatura. Per seguretat, es mostra només una vegada i no es podrà recuperar més endavant."
+title = "Webhook creat"
+url = "URL de lliurament"
+usage = "Fes POST de cada document com a cos de sol·licitud en brut a la URL de lliurament amb un tipus de contingut binari (application/pdf o application/octet-stream). Les polítiques que el referencien s'executen automàticament en arribar."
+
 [portal.sources.wizard]
-back = "Enrere"
-cancel = "Cancel·la"
-continue = "Continua"
-editTitle = "Edita la font"
 name = "Nom"
 namePlaceholder = "p. ex. Entrada de reclamacions"
-save = "Desa els canvis"
-subtitle = "Pas {{current}} de {{total}} · {{label}}"
-title = "Connecta una font"
 type = "Tipus"
 
-[portal.sources.wizard.steps]
-chooseType = "Tria el tipus"
-configure = "Configura"
-review = "Revisa i connecta"
+[portal.stepModal]
+close = "Tanca"
 
 [portal.usage]
 managePayment = "Gestiona el pagament"
@@ -8021,16 +8970,9 @@ summary = "Posseeix un equip — en gestiona els recursos dels membres i les con
 2 = "Accés al portal mitjançant la política predeterminada"
 3 = "Tot el que pot fer un membre"
 
-[portal.welcome]
-ariaLabel = "Benvingut a Stirling PDF"
-badge = "Open-source"
-installEditor = "Instal·la l'editor"
-inviteTeammates = "Convida companys d'equip"
-openInBrowser = "Obre al navegador"
-perks = "Gratuït per sempre · Autoallotjable"
-subtitle = "L'editor PDF més segur del món és gratuït per a equips de totes les mides. Inclou més de 60 operacions PDF i SSO."
-title = "Benvingut a"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Il·limitat"
 
 [printFile]
 title = "Imprimir Fitxer"
@@ -8613,6 +9555,14 @@ text = "Gira les pàgines del teu PDF en sentit horari o antihorari en increment
 [rotate.tooltip.header]
 title = "Resum de la configuració de rotació"
 
+[ruler]
+clearAll = "Esborra-ho tot"
+hideAllLabels = "Amaga totes les etiquetes"
+hideSmallLabels = "Amaga les etiquetes petites"
+physicalValues = "Físic"
+scaled = "Escalat"
+showAllLabels = "Mostra totes les etiquetes"
+
 [sanitize]
 desc = "Elimina elements potencialment nocius dels fitxers PDF."
 sanitizationResults = "Resultats de la sanitització"
@@ -8654,31 +9604,45 @@ label = "Elimina metadades XMP"
 [sanitize.steps]
 settings = "Opcions"
 
-[sanitizePdf]
-tags = "netejar,segur,sense riscos,eliminar amenaces"
-
 [sanitizePDF]
 title = "Neteja PDF"
 
+[sanitizePdf]
+tags = "netejar,segur,sense riscos,eliminar amenaces"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Ajusta l'escala de la pàgina"
 
+[scaleSettings]
+activeScale = "Escala activa"
+apply = "Aplica l'escala"
+applyCalibration = "Aplica la calibració"
+calculatedScale = "Escala calculada"
+calibrate = "Calibra"
+calibrating = "S'està calibrant"
+calibrationDistanceRequired = "Introdueix una distància real superior a zero"
+calibrationInvalid = "No s'ha pogut calcular l'escala a partir d'aquesta mesura"
+calibrationPaperDistance = "Distància mesurada a la pàgina: {{distance}}"
+calibrationTitle = "Calibra l'escala"
+calibrationTooltip = "Mesura una distància coneguda per calcular l'escala automàticament"
+customScale = "Escala personalitzada"
+noneSet = "No s'ha definit cap escala personalitzada"
+presets = "Escales predefinides"
+ratio = "Relació d'escala"
+ratioHelp = "Relació: 1 unitat de pàgina = X unitats reals"
+ratioPlaceholder = "p. ex., 100"
+ratioPositive = "La relació ha de ser superior a zero"
+ratioRequired = "La relació és obligatòria"
+realDistance = "Distància real"
+realDistancePlaceholder = "p. ex., 5"
+reset = "Restableix els valors predeterminats"
+unit = "Unitat"
+unitInvalid = "Unitat no vàlida: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Llindar d'angle:"
-10 = "Estableix la mida de la vora afegida i eliminada per evitar vores blanques a la sortida (per defecte: 1)."
-2 = "Estableix l'angle mínim absolut necessari perquè la imatge es giri (per defecte: 10)."
-3 = "Tolerància:"
-4 = "Determina l'interval de variació de color al voltant del color de fons estimat (per defecte: 30)."
-5 = "Àrea Mínima:"
-6 = "Estableix el llindar d'àrea mínima per a una foto (per defecte: 10000)."
-7 = "Àrea de contorn mínima:"
-8 = "Estableix el llindar mínim de l'àrea de contorn per a una foto"
-9 = "Mida de Vora:"
-
 [scannerImageSplit]
 submit = "Extreu escanejos d'imatge"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Què fa"
 whatThisDoesDesc = "Troba i extreu automàticament cada foto d'una pàgina escanejada o d'una imatge composta, sense retall manual."
 whenToUse = "Quan utilitzar-lo"
 
+[ScannerImageSplit.selectText]
+1 = "Llindar d'angle:"
+10 = "Estableix la mida de la vora afegida i eliminada per evitar vores blanques a la sortida (per defecte: 1)."
+2 = "Estableix l'angle mínim absolut necessari perquè la imatge es giri (per defecte: 10)."
+3 = "Tolerància:"
+4 = "Determina l'interval de variació de color al voltant del color de fons estimat (per defecte: 30)."
+5 = "Àrea Mínima:"
+6 = "Estableix el llindar d'àrea mínima per a una foto (per defecte: 10000)."
+7 = "Àrea de contorn mínima:"
+8 = "Estableix el llindar mínim de l'àrea de contorn per a una foto"
+9 = "Mida de Vora:"
+
 [search]
 noResults = "No s'ha trobat cap resultat"
 placeholder = "Escriu el terme de cerca..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "El teu servidor de Stirling-PDF és fora de línia i
 [session]
 expired = "La teva sessió ha expirat. Si us plau, actualitza la pàgina i torna a intentar-ho."
 
-[sessionManagement.tooltip]
-header = "Gestió de sessions de signatura"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Nous participants afegits al final de l'ordre de signatura"
-bullet2 = "No es poden afegir participants després que la sessió estigui finalitzada"
-bullet3 = "Cada participant rep una notificació quan és el seu torn"
-description = "Pots afegir més participants a una sessió activa en qualsevol moment abans de la finalització."
-title = "Afegir participants"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalització completa</b>: Tots els participants han signat"
-bullet2 = "<b>Finalització parcial</b>: Alguns participants encara no han signat"
-bullet3 = "Els participants sense signar s'exclouran del document final"
-bullet4 = "Un cop finalitzada, pots carregar el PDF signat als fitxers actius"
-description = "La finalització combina totes les signatures en un únic PDF signat. Aquesta acció no es pot desfer."
-title = "Finalització de la sessió"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "No es poden eliminar participants que ja hagin signat"
-bullet2 = "Els participants eliminats ja no rebran notificacions"
-bullet3 = "L'ordre de signatura s'ajusta automàticament"
-description = "Els participants es poden eliminar de les sessions abans que signin."
-title = "Eliminació de participants"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Cada signatura s'aplica de manera seqüencial al PDF"
-bullet2 = "Els signants posteriors poden veure les signatures anteriors"
-bullet3 = "Crític per a fluxos d'aprovació i cadenes de custòdia legals"
-description = "L'ordre que especifiquis en crear la sessió determina qui signa primer."
-title = "Ordre de signatura"
-
 [settings]
 close = "Tanca"
 
+[settings.ai]
+documents = "Documents i RAG"
+general = "General"
+limits = "Límits i rendiment"
+models = "Models i proveïdors"
+title = "IA"
+
 [settings.configuration]
 advanced = "Avançat"
 database = "Base de dades"
 endpoints = "Endpoints"
 features = "Funcions"
+folderAccess = "Accés a carpetes"
 mcp = "MCP Server"
 storageSharing = "Emmagatzematge i compartició de fitxers"
 systemSettings = "Configuració del sistema"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Editor PDF per defecte"
 defaultPdfEditorActive = "Stirling PDF és el teu editor PDF per defecte"
 defaultPdfEditorChecking = "Comprovant..."
 defaultPdfEditorInactive = "Una altra aplicació està establerta per defecte"
+defaultPdfEditorRemind = "Recorda'm que l'estableixi com a predeterminada"
+defaultPdfEditorRemindDescription = "Mostra un bàner quan Stirling PDF no sigui la teva aplicació PDF predeterminada."
 defaultPdfEditorSet = "Ja és per defecte"
 defaultStartupView = "Vista predeterminada en iniciar"
 defaultStartupViewDescription = "Tria quina pestanya està activa a la columna esquerra quan s'inicia l'aplicació"
@@ -8817,9 +9771,18 @@ languageDescription = "Tria l’idioma de visualització"
 logout = "Tanca la sessió"
 setAsDefault = "Estableix per defecte"
 theme = "Tema"
+themeAccent = "Color d'accent"
+themeAccentCustom = "Color personalitzat"
+themeAccentCustomHint = "Personalitzat (es recomanen els valors predeterminats)"
+themeAccentDark = "Color d'accent del mode fosc"
+themeAccentDefault = "Predeterminat"
+themeAccentDefaultHint = "Tema predeterminat (recomanat)"
+themeAccentDescription = "Els botons, els enllaços i els ressaltats el segueixen, i tenyeix subtilment l'aplicació. El mode clar i el mode fosc en tenen un de propi. El sistema fa servir el que estigui actiu."
+themeAccentLight = "Color d'accent del mode clar"
 themeDark = "Fosc"
 themeDescription = "Canvia entre el mode clar i el mode fosc"
 themeLight = "Clar"
+themeReset = "Restaura el tema predeterminat"
 themeSystem = "System"
 title = "General"
 user = "Usuari"
@@ -8833,6 +9796,12 @@ intro = "Habilita l'autenticació d'usuaris, la gestió d'equips i funcions d'es
 learnMore = "Més informació a la documentació"
 title = "Per als administradors del sistema"
 
+[settings.general.loginLanding]
+description = "Tria quina aplicació s'obre quan inicies la sessió a Stirling Cloud."
+editor = "Editor"
+processor = "Processador"
+title = "Després d'iniciar la sessió"
+
 [settings.general.mode]
 fullscreen = "Pantalla completa"
 sidebar = "Barra lateral"
@@ -9041,6 +10010,11 @@ security = "Seguretat"
 telegram = "Telegram"
 title = "Seguretat i autenticació"
 
+[settings.signOut]
+confirm = "Segur que vols tancar la sessió?"
+submit = "Tanca la sessió"
+title = "Tanca la sessió"
+
 [settings.team]
 title = "Equip"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Puja al servidor"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "fes clic aquí"
+fallback = "Si no s'ha obert automàticament,"
+opening = "S'està obrint Swagger UI en una pestanya nova..."
 tags = "api,documentació,swagger,endpoints,desenvolupament"
 title = "Documentació de l'API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Selecciona fitxers a Fitxers actius per executar aquesta eina
 singleFileScope = "S'aplica només a: {{fileName}}"
 viewerMode = "Canvia a l'editor de fitxers per seleccionar diversos fitxers."
 
+[toolFormat]
+ANY = "qualsevol fitxer"
+CBR = "un arxiu de còmic (CBR)"
+CBZ = "un arxiu de còmic (CBZ)"
+CSV = "un fitxer CSV"
+EBOOK = "un llibre electrònic"
+EMAIL = "un correu electrònic"
+EXCEL = "un full de càlcul"
+HTML = "una pàgina web"
+IMAGE = "imatges"
+JAVASCRIPT = "un fitxer JavaScript"
+JSON = "un fitxer JSON"
+MARKDOWN = "un fitxer Markdown"
+NONE = "cap fitxer"
+PCL = "un fitxer d'impressió PCL"
+PDF = "un PDF"
+PDF_ENCRYPTED = "un PDF protegit amb contrasenya"
+POSTSCRIPT = "un fitxer PostScript"
+PPT = "una presentació"
+TEXT = "un fitxer de text"
+VIDEO = "un vídeo"
+WORD = "un document Word"
+XML = "un fitxer XML"
+XPS = "un document XPS"
+ZIP = "un arxiu ZIP"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Torna a totes les eines"
 collapse = "Redueix el panell"
 expand = "Amplia el panell"
 goBack = "Torna enrere"
+pdfTools = "Eines PDF"
 placeholder = "Tria una eina per començar"
 premiumFeature = "Funció premium:"
+searchTools = "Cerca eines"
 toolsHeader = "Eines"
 viewAllTools = "Mostra totes les eines"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "No s'ha trobat cap eina"
 quickAccess = "ACCÉS RÀPID"
 searchPlaceholder = "Cerca eines..."
 
-[toolPicker.categories]
-advancedTools = "Eines avançades"
-recommendedTools = "Eines recomanades"
-standardTools = "Eines estàndard"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formatació avançada"
 automation = "Automatització"
@@ -9950,16 +10950,31 @@ title = "Usuaris"
 you = "(tu)"
 
 [users.action]
+cancelInvite = "Cancel·la la invitació"
 deleteTeam = "Suprimeix l'equip"
 disableMfa = "Restableix MFA"
 move = "Mou a l'equip"
 reinstate = "Restableix"
 remove = "Elimina de l'org"
+removeTeam = "Elimina de l'equip"
 rename = "Canvia el nom de l'equip"
 resetPw = "Restableix la contrasenya"
 suspend = "Suspèn"
 unlock = "Desbloqueja el compte"
 
+[users.activity]
+daysAgo = "fa {{count}} d"
+hoursAgo = "fa {{count}} h"
+justNow = "Ara mateix"
+minutesAgo = "fa {{count}} min"
+monthsAgo_one = "fa {{count}} mes"
+monthsAgo_other = "fa {{count}} mesos"
+never = "Mai"
+weeksAgo_one = "fa {{count}} setmana"
+weeksAgo_other = "fa {{count}} setmanes"
+yearsAgo_one = "fa {{count}} any"
+yearsAgo_other = "fa {{count}} anys"
+
 [users.cap]
 addProcessor = "+ Processador"
 approver = "Aprova la política"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processador"
 
 [users.confirm]
+cancelInviteBody = "Vols cancel·lar la invitació a {{email}}? No es podrà unir amb l'enllaç actual."
+cancelInviteTitle = "Cancel·la la invitació"
 deleteTeamBody = "Vols suprimir l'equip {{name}}? Primer l'equip ha d'estar buit: mou-ne els membres a un altre equip, i no pot continuar posseint cap configuració d'integració."
 deleteTeamTitle = "Suprimeix l'equip"
 disableMfaBody = "Vols eliminar la inscripció MFA de {{name}}? La tornarà a configurar en el proper inici de sessió si és necessari."
 disableMfaTitle = "Restableix MFA"
 removeBody = "Vols eliminar permanentment {{name}} de l'organització? Això no es pot desfer."
+removeTeamBody = "Vols eliminar {{name}} de l'equip? Mantindrà el compte, però perdrà l'accés als recursos d'aquest equip."
 removeTitle = "Elimina el membre"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nom d'usuari"
 usernameError = "El nom d'usuari ha de tenir com a mínim 3 caràcters"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Convidat per {{who}}"
+cancel = "Cancel·la"
+count = "{{count}} pendents"
+desc = "Persones convidades que encara no s'han unit. Ocupen una plaça fins que acceptin."
+expiresInDays_one = "Caduca d'aquí a {{count}} dia"
+expiresInDays_other = "Caduca d'aquí a {{count}} dies"
+expiresToday = "Caduca avui"
+title = "Invitacions pendents"
+
 [users.loadError]
 description = "S'ha produït un error en contactar amb el backend, o no hi tens accés. Torna-ho a provar."
 title = "No s'han pogut carregar els membres"
@@ -10212,9 +11240,11 @@ title = "Adjunts"
 
 [viewer.bookmarks]
 bookmarkTitle = "Títol del marcador"
+bookmarkTitleRequired = "El títol del marcador és obligatori"
 closeSidebar = "Tanca la barra lateral de marcadors"
 collapseAll = "Replega tots els marcadors"
 expandAll = "Desplega tots els marcadors"
+searchPlaceholder = "Cerca marcadors"
 
 [viewer.comments]
 addComment = "Afegeix un comentari"
@@ -10605,30 +11635,6 @@ title = "Text de la marca d'aigua"
 image = "Imatge"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Mètodes de creació de signatura"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Personalitzeu el color i el gruix del traç"
-bullet2 = "Esborreu i torneu a dibuixar fins que estigueu satisfets"
-bullet3 = "Funciona en dispositius tàctils (tauletes, telèfons)"
-description = "Creeu una signatura manuscrita amb el ratolí o la pantalla tàctil. Ideal per a signatures personals i autèntiques."
-title = "Dibuixar la signatura"
-
-[wetSignature.tooltip.type]
-bullet1 = "Trieu entre diversos tipus de lletra"
-bullet2 = "Personalitzeu la mida i el color del text"
-bullet3 = "Perfecte per a signatures estandarditzades"
-description = "Genereu una signatura a partir de text teclejat. Ràpid i coherent, adequat per a documents empresarials."
-title = "Escriure la signatura"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Admet PNG, JPG i altres formats d'imatge"
-bullet2 = "Es recomana fons transparents per obtenir els millors resultats"
-bullet3 = "La imatge es redimensionarà per ajustar-se a l'àrea de la signatura"
-description = "Pugeu una imatge de signatura ja creada. Ideal si teniu una signatura escanejada o el logotip de l'empresa."
-title = "Pujar imatge de la signatura"
-
 [workbenchBar]
 activeFiles = "Fitxers actius"
 annotations = "Anotacions"
@@ -10652,6 +11658,7 @@ redact = "Censura"
 rotateLeft = "Gira a l’esquerra"
 rotateRight = "Gira a la dreta"
 ruler = "Regle / Mesura"
+rulerSettings = "Configuració de l'escala"
 save = "Desa"
 saveAll = "Desa-ho tot"
 saveAs = "Desa com a"
diff --git a/frontend/editor/public/locales/cs-CZ/translation.toml b/frontend/editor/public/locales/cs-CZ/translation.toml
index 7ff170eff4..e00da02579 100644
--- a/frontend/editor/public/locales/cs-CZ/translation.toml
+++ b/frontend/editor/public/locales/cs-CZ/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "vybraných souborů"
 font = "Písmo"
 fontSizeTooltip = "Velikost textu čísla stránky v bodech. Větší čísla znamenají větší text."
 fontTypeTooltip = "Rodina písma pro čísla stránek. Zvolte podle stylu dokumentu."
-genericSubmit = "Odeslat"
 green = "Zelená"
 help = "Nápověda"
-imgPrompt = "Vyberte obrázek(y)"
 incorrectPasswordMessage = "Současné heslo není správné."
 info = "Informace"
 invalidUndoData = "Nelze vrátit: neplatná data operace"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Přihlašovací ujednání"
 logOut = "Odhlásit se"
 marginTooltip = "Vzdálenost mezi číslem stránky a okrajem stránky."
 moreOptions = "Další možnosti"
-multiPdfPrompt = "Vyberte PDF soubory (2+)"
 never = "Nikdy"
 no = "Ne"
 noFileSelected = "Není vybrán žádný soubor. Nahrajte soubor."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Vlastní pořadí stránek (Zadejte seznam čísel stránek o
 pages = "Stránky"
 pageSelectionPrompt = "Vlastní výběr stránek (Zadejte seznam čísel stránek oddělených čárkou jako 1,5,6 nebo funkci jako např. 2n+1):"
 password = "Heslo"
-pdfPrompt = "Vyberte PDF soubor(y)"
 pin = "Připnout soubor (ponechat aktivní po spuštění nástroje)"
 pro = "Pro"
 processingComplete = "Váš soubor je připraven."
@@ -356,6 +352,7 @@ text = "Tato oprávnění určují, co mohou uživatelé s PDF dělat. Nejlépe
 title = "Změnit oprávnění"
 
 [addStamp]
+preview = "Náhled razítka"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ruční stažení: klikněte na odkazy a umístěte soubory do sl
 noLanguages = "V nakonfigurovaném adresáři nebyly nalezeny žádné jazyky tessdata."
 permissionNotice = "Cesta k tessdata není zapisovatelná. Stažení se otevře v prohlížeči; soubory .traineddata prosím uložte ručně do složky tessdata."
 
+[admin.settings.ai.documents]
+description = "Nakonfigurujte embedding model a nastavení vyhledávání používané k odpovídání na otázky nad dokumenty. Po uložení se použije pro AI engine."
+title = "Dokumenty a RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Ponechte prázdné, chcete-li použít vlastní přihlašovací údaj prostředí enginu. Platí pro self-hosted nasazení s jedním enginem."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Uloženo – ponechte prázdné pro zachování aktuálního klíče"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Základní URL endpointu embeddingů kompatibilního s OpenAI / Ollama, např. http://ollama:11434/v1. Musí odkazovat na důvěryhodný interní endpoint (citlivé na SSRF)."
+label = "Základní URL embeddingů"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Název embedding modelu. Volný text; návrhy jsou pouze nápovědou."
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Poskytovatel používaný k převodu textu dokumentu na vektorové embeddingy."
+label = "Poskytovatel embeddingů"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maximální počet vyhledávání, která může agent spustit na jeden požadavek."
+label = "Max. počet vyhledávání"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Změna embedding modelu se projeví okamžitě, ale dokumenty indexované předchozím modelem musí být znovu indexovány, aby vyhledávání vracelo správné výsledky."
+title = "Vyžadována opětovná indexace"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Pokud jste změnili embedding model, znovu indexujte existující dokumenty, aby vyhledávání používalo nový model."
+
+[admin.settings.ai.documents.topK]
+description = "Počet nejrelevantnějších částí načtených na jedno vyhledávání."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Připojte Stirling k Python AI enginu a zvolte, které AI schopnosti budou dostupné. Změny se projeví po restartu."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Zapněte nebo vypněte jednotlivé AI funkce. Vypnuté funkce jsou v aplikaci skryté."
+title = "Schopnosti"
+
+[admin.settings.ai.general.enabled]
+description = "Hlavní přepínač. Když je vypnutý, nejsou dostupné žádné AI nástroje, agenti ani volání enginu."
+label = "Povolit AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Konverzační asistent pro práci s PDF."
+label = "Chatovací asistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Automaticky kategorizovat dokumenty podle typu nebo obsahu."
+label = "Klasifikace dokumentů"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Vygenerovat nové PDF (např. z HTML) pomocí AI agenta."
+label = "Vytvořit PDF z promptu"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Pokládejte otázky a získávejte odpovědi založené na nahraném dokumentu."
+label = "Otázky k dokumentu"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Kontrolovat dokumenty na matematické a číselné chyby."
+label = "Matematický auditor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Přidat do PDF komentáře a anotace k revizi vytvořené AI."
+label = "Agent pro komentáře PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Časový limit pro náročnější operace agenta, například generování dokumentů."
+label = "Časový limit dlouhých operací (sekundy)"
+
+[admin.settings.ai.general.note]
+body = "AI engine běží jako samostatná služba. Jeho sdílené tajemství"
+body2 = "se nastavuje pomocí proměnné prostředí kontejneru. Provider API keys lze zadat na těchto stránkách nebo dodat jako proměnné prostředí enginu; zde zadané klíče se po uložení odešlou do enginu."
+title = "O AI enginu"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Časový limit pro streamované (token po tokenu) odpovědi chatu."
+label = "Časový limit streamu (sekundy)"
+
+[admin.settings.ai.general.test]
+button = "Otestovat připojení"
+failBody = "AI engine neodpověděl. Zkontrolujte URL, zda kontejner enginu běží a zda je AI povolena (po povolení je nutný restart)."
+failTitle = "AI engine je nedostupný"
+okBody = "AI engine odpověděl na kontrolu stavu."
+okTitle = "AI engine je dostupný"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Časový limit pro standardní AI požadavky na engine."
+label = "Časový limit požadavku (sekundy)"
+
+[admin.settings.ai.general.url]
+description = "Interní URL Python AI enginu, např. http://stirling-pdf-engine:5001."
+label = "URL AI enginu"
+
+[admin.settings.ai.limits]
+description = "Ochranné limity určující, kolik práce mohou AI požadavky vykonat a kolik jich může běžet současně. Po uložení se použije pro AI engine."
+title = "Limity a výkon"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Ochranný limit: odmítnout AI požadavky, jejichž extrahovaný text překročí tuto délku."
+label = "Max. znaků na požadavek"
+
+[admin.settings.ai.limits.maxPages]
+description = "Ochranný limit: odmítnout AI požadavky s více než tímto počtem PDF stránek."
+label = "Max. stránek na požadavek"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maximální počet současných probíhajících volání modelu v celém enginu."
+label = "Max. souběžnost modelu"
+
+[admin.settings.ai.models]
+description = "Vyberte poskytovatele LLM a chytré/rychlé modely, které AI engine používá. Po uložení se použije pro AI engine."
+title = "Modely a poskytovatelé"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Ponechte prázdné, chcete-li použít vlastní přihlašovací údaj prostředí enginu. Platí pro self-hosted nasazení s jedním enginem."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Uloženo – ponechte prázdné pro zachování aktuálního klíče"
+
+[admin.settings.ai.models.baseUrl]
+description = "Základní URL endpointu kompatibilního s OpenAI / Ollama, např. http://ollama:11434/v1."
+label = "Základní URL poskytovatele"
+warning = "Základní URL musí odkazovat na důvěryhodný interní endpoint. Engine na něj bude odesílat požadavky ze serveru, takže nedůvěryhodná hodnota je citlivá na SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maximální počet výstupních tokenů pro rychlý model."
+label = "Max. tokenů rychlého modelu"
+
+[admin.settings.ai.models.fastModel]
+description = "Levnější, rychlejší model pro lehčí úlohy. Volný text; návrhy jsou pouze nápovědou."
+label = "Rychlý model"
+
+[admin.settings.ai.models.provider]
+description = "Se kterým poskytovatelem LLM engine komunikuje."
+label = "Poskytovatel"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maximální počet výstupních tokenů pro chytrý model."
+label = "Max. tokenů chytrého modelu"
+
+[admin.settings.ai.models.smartModel]
+description = "Vysoce schopný model pro složité uvažování. Volný text; návrhy jsou pouze nápovědou."
+label = "Chytrý model"
+
+[admin.settings.ai.saved]
+body = "Změny se automaticky odesílají do AI enginu."
+bodyNoPush = "Nastavení uložena. Použijí se při příštím načtení konfigurace AI enginem."
+title = "Nastavení AI uložena"
+
 [admin.settings.badge]
 clickToUpgrade = "Klikněte pro zobrazení detailů tarifu"
 
@@ -938,6 +1094,25 @@ label = "Znovu vygenerovat při startu"
 description = "Počet dní, po které bude certifikát platný"
 label = "Platnost certifikátu (dny)"
 
+[admin.settings.folderAccess]
+description = "Adresáře, ze kterých mohou zdroje složek a výstupy složek číst a do kterých mohou zapisovat. Toto je bezpečnostní hranice: automatizace nikdy nelze nasměrovat na cestu na serveru mimo tento seznam."
+securityNote = "Ponechte prázdné, chcete-li zdroje složek a výstupy úplně zakázat. Vlastní konfigurační adresář Stirling je vždy nepřístupný."
+title = "Přístup ke složkám"
+
+[admin.settings.folderAccess.implied]
+description = "Tyto adresáře spravované Stirling jsou vždy povolené a zde je nelze změnit."
+serverStorage = "Úložiště souborů serveru"
+title = "Vždy povoleno"
+watchedFolder = "Sledovaná složka pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Přidat"
+empty = "Nejsou povoleny žádné složky. Zdroje složek a výstupy jsou aktuálně zakázány."
+hint = "Zadejte absolutní cesty, například /data/inbox."
+label = "Povolené kořenové složky"
+placeholder = "/data/inbox"
+remove = "Odebrat kořenovou složku"
+
 [admin.settings.general]
 description = "Nakonfigurujte celosystémová nastavení aplikace včetně brandingu a výchozího chování."
 system = "Systém"
@@ -1842,6 +2017,15 @@ export = "Export"
 accessDenied = "Přístup odepřen"
 insufficientPermissions = "Nemáte oprávnění k provedení této akce."
 
+[auth.callback]
+completing = "Dokončování ověření"
+invalidToken = "Přihlášení přes OAuth selhalo – neplatný token."
+missingToken = "Přihlášení přes OAuth selhalo – nebyl přijat žádný token."
+oauthFailed = "Přihlášení přes OAuth selhalo. Zkuste to prosím znovu."
+pleaseWait = "Počkejte prosím, než dokončíme vaše přihlášení."
+signedOut = "Byli jste odhlášeni. Přihlaste se prosím znovu."
+windowMayClose = "Po dokončení můžete toto okno zavřít."
+
 [auth.displayName]
 guest = "Host"
 user = "Uživatel"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Zabezpečí PDF dokumenty odstraněním potenciálně ško
 description = "Tento nástroj automaticky přejmenuje PDF soubory podle jejich obsahu. Analyzuje dokument a najde nejvhodnější název z textu."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automaticky otočit"
+tags = "automatické otočení,opravit orientaci,vzhůru nohama,na bok,narovnat,orientovat,detekovat orientaci,opravit otočení,automatická orientace,skenované,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Práh spolehlivosti"
+
+[autoRotate.detectionMode]
+auto = "Automaticky"
+osd = "Pouze OCR"
+text = "Pouze text"
+title = "Metoda detekce"
+
+[autoRotate.error]
+failed = "Při automatickém otáčení PDF došlo k chybě."
+
+[autoRotate.inferUndetected]
+title = "Otočit stránky s nízkou spolehlivostí podle ostatních"
+
+[autoRotate.report]
+applied = "{{degrees}}° po směru hodinových ručiček"
+confidenceValue = "Spolehlivost {{value}}"
+noChange = "Beze změny"
+pageLabel = "Stránka {{number}}"
+summary = "Otočeno {{rotated}} z {{total}} stránek, {{unchanged}} ponecháno beze změny"
+title = "Zpráva o detekci"
+
+[autoRotate.report.method]
+inferred = "Sladěno"
+none = "Přeskočeno"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Pod prahem"
+blankPage = "Stránka je prázdná"
+inferredFromDocument = "Stejně jako ostatní stránky"
+noDominantDirection = "Smíšené směry textu"
+osdFailed = "Nebyl nalezen čitelný text"
+osdNoVerdict = "Nelze určit správnou orientaci"
+tesseractUnavailable = "OCR není nainstalováno"
+tooFewGlyphs = "Příliš málo textu"
+
+[autoRotate.results]
+title = "Výsledky automatického otočení"
+
+[autoRotate.settings]
+title = "Nastavení"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Jak jistá musí kontrola být, než se stránka otočí. Snižte hodnotu pro otočení více stránek, zvyšte ji pro ponechání více stránek beze změny."
+title = "Práh spolehlivosti"
+
+[autoRotate.tooltip.description]
+text = "Určí, jak má být každá stránka správně orientována, a otočí ji správným směrem. Stránky, které už jsou správně, ponechá beze změny."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automaticky nejdříve čte text na stránce a poté se podívá na stránku jako na obrázek, pokud to nestačí. Pouze text přeskočí kontrolu obrázku, což je nejrychlejší pro dokumenty, které nikdy nebyly skenovány. Pouze OCR považuje každou stránku za obrázek."
+title = "Metoda detekce"
+
+[autoRotate.tooltip.header]
+title = "Automatické otočení"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Prázdné nebo téměř prázdné stránky nelze samostatně zkontrolovat. Když všechny čitelné stránky vyžadují stejné otočení, tyto stránky se otočí podle nich."
+title = "Otočit stránky s nízkou spolehlivostí podle ostatních"
+
 [autoSizeSplitPDF]
 tags = "pdf,rozdělit,dokument,organizace"
 
@@ -2189,33 +2440,6 @@ keywords = "Klíčová slova: odd, even"
 numbers = "Čísla/rozsahy: 5, 10-20"
 progressions = "Progrese: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Typy certifikátů"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Spravováno správci systému"
-bullet2 = "Sdíleno mezi oprávněnými uživateli"
-bullet3 = "Reprezentuje identitu společnosti, nikoli jednotlivce"
-bullet4 = "Vhodné pro: Oficiální dokumenty, týmové podpisy"
-description = "Sdílený certifikát poskytovaný vaší organizací. Používá se pro firemní oprávnění k podepisování."
-title = "Certifikát organizace"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Vygenerován automaticky při prvním použití"
-bullet2 = "Navázán na váš uživatelský účet"
-bullet3 = "Nelze sdílet s jinými uživateli"
-bullet4 = "Vhodné pro: Osobní dokumenty, individuální odpovědnost"
-description = "Automaticky generovaný certifikát jedinečný pro váš uživatelský účet. Vhodný pro individuální podpisy."
-title = "Osobní certifikát"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Vyžaduje soubor P12/PFX a heslo"
-bullet2 = "Může být vydán externími certifikačními autoritami"
-bullet3 = "Vyšší úroveň důvěry pro právní dokumenty"
-bullet4 = "Vhodné pro: Právně závazné smlouvy, externí ověření"
-description = "Použijte svůj vlastní certifikát PKCS#12. Poskytuje plnou kontrolu nad vlastnostmi certifikátu."
-title = "Nahrát vlastní P12"
-
 [certSign]
 awaitingSignatures = "Čeká na podpisy"
 chooseCertificate = "Vyberte soubor s certifikátem"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Zdroj certifikátu"
 upload = "Nahrát"
 
-[certSign.tooltip.header]
-title = "O správě podpisů"
-
-[certSign.tooltip.overview]
-bullet1 = "Kontrolujte existující podpisy a jejich platnost"
-bullet2 = "Zobrazujte podrobné informace o podepisujících a certifikátech"
-bullet3 = "Přidávejte nové digitální podpisy pro zabezpečení dokumentů"
-bullet4 = "Podpora více souborů s jednoduchou navigací"
-text = "Tento nástroj umožňuje zjistit, zda jsou vaše PDF digitálně podepsaná, a přidat nové digitální podpisy. Digitální podpisy prokazují, kdo dokument vytvořil nebo schválil, a ukazují, zda byl po podpisu změněn."
-title = "Co tento nástroj umí?"
-
-[certSign.tooltip.signing]
-bullet1 = "Podporuje formáty PEM, PKCS12, JKS a serverové certifikáty"
-bullet2 = "Možnost zobrazit nebo skrýt podpis v PDF"
-bullet3 = "Přidat důvod, místo a jméno podepisujícího"
-bullet4 = "Vyberte, na kterou stránku umístit viditelné podpisy"
-bullet5 = "Použijte serverový certifikát pro jednoduchou možnost 'Podepsat pomocí Stirling-PDF'"
-text = "K podepsání PDF potřebujete digitální certifikát (např. PEM, PKCS12 nebo JKS). Můžete zvolit, zda bude podpis na dokumentu viditelný, nebo zůstane neviditelný pouze pro ověření."
-title = "Přidávání podpisů"
-
-[certSign.tooltip.validation]
-bullet1 = "Zobrazuje, zda jsou podpisy platné či neplatné"
-bullet2 = "Zobrazuje informace o podepisujícím a datum podpisu"
-bullet3 = "Kontroluje, zda byl dokument po podpisu upraven"
-bullet4 = "Může použít vlastní certifikáty k ověření"
-text = "Při kontrole podpisů nástroj sdělí, zda jsou platné, kdo dokument podepsal, kdy byl podepsán a zda byl po podpisu změněn."
-title = "Kontrola podpisů"
-
 [changeCreds]
 changeUsername = "Update your username. You will be logged out after updating."
 credsUpdated = "Account updated"
@@ -2824,6 +3020,7 @@ next = "Další"
 preview = "Náhled"
 previous = "Předchozí"
 refresh = "Obnovit"
+remaining = "Zbývá"
 retry = "Zkusit znovu"
 save = "Save"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Pokročilé monitorování"
-allInOneWorkspace = "Vše v jednom: pracovní prostor pro PDF (prohlížeč, nástroje a agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Vyhrazená podpora a SLA"
-fasterThroughput = "10× rychlejší propustnost"
-fullyPrivateFiles = "Plně soukromé soubory"
-largeFileProcessing = "Zpracování velkých souborů"
-orgWideAccess = "Řízení přístupu napříč organizací"
-premiumAiModels = "Prémiové AI modely"
-prioritySupport = "Prioritní podpora"
-privateDocCloud = "Soukromé úložiště dokumentů"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Zabezpečený přístup k API"
-standardThroughput = "Standardní propustnost"
-unlimitedApiAccess = "Neomezený přístup k API"
-unlimitedSeats = "Neomezený počet uživatelů"
-
 [crop]
 autoCrop = "Auto-crop whitespace"
 noFileSelected = "Vyberte soubor PDF pro zahájení ořezu"
@@ -3346,6 +3525,7 @@ message = "Nepodařilo se nastavit výchozí aplikaci pro PDF"
 title = "Chyba"
 
 [defaultApp.prompt]
+dontRemind = "Už mi to nepřipomínat"
 message = "Nastavte Stirling PDF jako výchozí aplikaci pro otevírání souborů PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Přizpůsobit skupiny"
 dropHint = "Otevřete soubory a začněte"
 dropToAdd = "Drop files to add"
 expand = "Rozbalit postranní panel"
-files = "Soubory"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive není nakonfigurován"
 leaveMyFiles = "Opustit Moje soubory"
+library = "Knihovna PDF"
 myFiles = "Moje soubory"
 noFiles = "Zatím žádné soubory"
 openFileManager = "Otevřít správce souborů"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Přidat"
-addLabel = "Přidat štítek…"
-categoryIconAria = "Vyberte ikonu pro {{name}}"
-createCategory = "Vytvořit kategorii"
-delete = "Smazat kategorii"
 done = "Hotovo"
-hide = "Skrýt kategorii"
-newCategory = "Název nové kategorie…"
-removeLabel = "Odebrat {{name}}"
-rename = "Přejmenovat"
 reset = "Obnovit výchozí nastavení"
-search = "Hledat štítky…"
-show = "Zobrazit kategorii"
 subtitle = "Seskupte soubory do nadřazených kategorií. Přidejte do kategorie existující nebo nové štítky, přejmenujte ji nebo si vytvořte vlastní. Soubory, které nejsou v žádné z vašich kategorií, se zobrazí pod „Ostatní“."
 title = "Kategorie postranního panelu"
 
@@ -3808,6 +3977,7 @@ refresh = "Obnovit ze serveru"
 remove = "Smazat"
 removeVersion = "Odebrat tuto verzi"
 rename = "Přejmenovat"
+renamed = "Přejmenováno"
 renameFolder = "Přejmenovat složku"
 resizeFolderTree = "Změnit velikost stromu složek (šipky, Shift pro větší kroky; dvojklik pro automatické přizpůsobení)"
 save = "Uložit"
@@ -3910,9 +4080,7 @@ count = "Soubory"
 folder = "Složka"
 labels = "Štítky"
 modified = "Změněno"
-name = "Název"
 size = "Velikost"
-toolHistoryAtVersion = "Kumulativní řetězec nástrojů"
 totalSize = "Celková velikost"
 type = "Typ"
 versionHistory = "Vývoj verzí"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Vše uloženo"
+extractCsvError = "Nepodařilo se extrahovat CSV"
+extractXlsxError = "Nepodařilo se extrahovat XLSX"
 flattenAfterFilling = "Zploštit po vyplnění"
+requiredAbbreviation = "pov."
+requiredFieldsError = "Vyplňte prosím všechna povinná pole"
 rescanFields = "Znovu detekovat pole"
 rescanFormFields = "Znovu detekovat pole formuláře"
 save = "Uložit"
+saveShortcut = "Ctrl+S pro uložení"
+unsavedChanges = "Neuložené změny"
 
 [formFill.sidebar]
 close = "Zavřít postranní panel"
@@ -4309,6 +4484,11 @@ desc = "Automaticky přejmenuje soubor PDF podle detekovaného záhlaví"
 tags = "automatická detekce,na základě záhlaví,uspořádat,přejmenovat"
 title = "Automaticky přejmenovat soubor PDF"
 
+[home.autoRotate]
+desc = "Detekujte orientaci každé stránky a automaticky ji otočte do správné polohy."
+tags = "automatické otočení,opravit orientaci,vzhůru nohama,na bok,narovnat,orientovat,detekovat orientaci,opravit otočení,automatická orientace,skenované,OSD"
+title = "Automatické otočení"
+
 [home.autoSizeSplitPDF]
 tags = "auto,rozdělit,velikost"
 title = "Automaticky rozdělit podle velikosti/počtu"
@@ -4608,13 +4788,13 @@ hint = "Nahrajte PNG, JPG, SVG nebo jiný obrazový soubor pro vložení do PDF.
 label = "Nahrát obrázek"
 placeholder = "Vyberte soubor obrázku"
 
-[imageToPdf]
-tags = "převod,img,jpg,obrázek,fotka"
-
 [imageToPDF]
 header = "Obrázek na PDF"
 title = "Obrázek na PDF"
 
+[imageToPdf]
+tags = "převod,img,jpg,obrázek,fotka"
+
 [infoBanner]
 dismiss = "Zavřít"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Byli jste pozváni!"
 
 [landing]
 addFiles = "Přidat soubory"
-heroSubtitle = "Pro začátek přetáhněte nebo přidejte existující PDF."
 mobileUpload = "Nahrát z mobilu"
 openFromComputer = "Otevřít z počítače"
 uploadFromComputer = "Nahrát z počítače"
-workbenchEmptyStateHero = "Přetáhněte PDF kamkoli"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Přihlášení"
 magicLinkSent = "Magický odkaz byl odeslán na {{email}}! Zkontrolujte e-mail a kliknutím na odkaz se přihlaste."
 mfaCode = "Ověřovací kód"
 mfaRequired = "Je vyžadován kód pro dvoufázové ověření"
+noAccount = "Nemáte účet?"
 or = "Nebo"
 password = "Heslo"
 passwordChangedSuccess = "Heslo bylo úspěšně změněno! Přihlaste se novým heslem."
@@ -4715,26 +4894,10 @@ signInWith = "Přihlásit se pomocí"
 title = "Přihlášení"
 unexpectedError = "Neočekávaná chyba: {{message}}"
 updatePassword = "Aktualizovat heslo"
-useEmailInstead = "Přihlásit pomocí e-mailu"
 useMagicLink = "Použít místo toho magický odkaz"
 username = "Uživatelské jméno"
 youAreLoggedIn = "Jste přihlášeni!"
 
-[login.slides.edit]
-alt = "Úprava PDF"
-subtitle = "Více než desítka nástrojů pro začerňování, podepisování, čtení a manipulaci s PDF — najdete, co potřebujete."
-title = "Upravujte PDF pro zobrazení/ochranu požadovaných informací"
-
-[login.slides.overview]
-alt = "Přehled Stirling PDF"
-subtitle = "Cloudová sada s důrazem na soukromí pro práci s PDF, která umožňuje konvertovat, podepisovat, začerňovat a spravovat dokumenty, a nabízí přes 50 dalších užitečných nástrojů."
-title = "Vše pro práci s PDF na jednom místě."
-
-[login.slides.secure]
-alt = "Zabezpečení PDF"
-subtitle = "Snadno přidávejte hesla, začerňujte obsah a spravujte certifikáty."
-title = "Chraňte citlivé informace ve svých PDF"
-
 [margin]
 large = "Velké"
 medium = "Střední"
@@ -4976,6 +5139,7 @@ pinButton = "Můžete použít tlačítko <strong>Připnout</strong>, pokud chce
 results = "Po dokončení nástroje zobrazí krok <strong>Kontrola</strong> v tomto panelu náhled výsledků a umožní vám operaci vrátit nebo soubor stáhnout."
 runButton = "Jakmile je nástroj nakonfigurován, tímto tlačítkem jej spustíte na všech vybraných PDF."
 selectCropTool = "Vyberme nástroj <strong>Oříznout</strong>, abychom ukázali, jak nástroje používat."
+stepOf = "Krok {{current}} z {{total}}"
 toolInterface = "Toto je rozhraní nástroje <strong>Oříznout</strong>. Jak vidíte, zatím tu toho moc není, protože jsme ještě nepřidali žádné PDF k úpravám."
 workbench = "Toto je <strong>Pracovní plocha</strong> – hlavní oblast, kde prohlížíte a upravujete svá PDF."
 wrapUp = "Máte hotovo! Seznámili jste se s hlavními oblastmi aplikace a jejich použitím. Kdykoli klikněte na tlačítko <strong>Nápověda</strong> a prohlídku si zobrazíte znovu."
@@ -4988,6 +5152,26 @@ showMeAround = "Proveďte mě"
 skipForNow = "Zatím přeskočit"
 skipTheTour = "Přeskočit průvodce"
 
+[onboarding.checklist]
+dismiss = "Zavřít"
+title = "Nastavte Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Spusťte Stirling nativně na svém počítači"
+title = "Stáhnout Stirling pro Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Spolupracujte se svým týmem"
+title = "Pozvat členy týmu"
+
+[onboarding.checklist.shareAnalytics]
+description = "Pomozte zlepšit Stirling"
+title = "Sdílet anonymní údaje o používání"
+
+[onboarding.checklist.takeTour]
+description = "Podívejte se v krátké prohlídce, jak Stirling funguje"
+title = "Spustit prohlídku"
+
 [onboarding.desktopInstall]
 body = "Stirling nejlépe funguje jako desktopová aplikace. Můžete ji používat offline, rychleji přistupovat k dokumentům a provádět úpravy lokálně ve svém počítači."
 selectOs = "Vyberte operační systém"
@@ -4996,7 +5180,21 @@ titleWithOs = "Stáhnout pro {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Ověřovací kód"
+description = "Zabezpečte svůj účet propojením s autentizační aplikací. Naskenujte QR kód nebo zadejte klíč nastavení a poté dokončete potvrzením 6místného kódu."
+enable = "Povolit MFA"
+enableError = "Nelze povolit dvoufaktorové ověření. Zkontrolujte kód a zkuste to znovu."
+enterCode = "Zadejte 6místný kód ze své aplikace."
+enterCodeError = "Zadejte ověřovací kód pro pokračování."
+logout = "Odhlásit se"
+openAuthenticator = "Otevřete Google Authenticator, Authy nebo 1Password."
 qrCodeLoading = "Generování vašeho QR kódu…"
+regenerateQrCode = "Znovu vygenerovat QR kód"
+scanQrCode = "Naskenujte QR kód nebo zadejte níže uvedený klíč nastavení."
+setupError = "Nelze spustit nastavení dvoufaktorového ověření. Zkuste to prosím znovu."
+setupKey = "Klíč nastavení (ruční zadání)"
+stepByStep = "Krok za krokem"
+success = "MFA bylo povoleno. Nyní můžete pokračovat."
+title = "Nastavení vícefaktorového ověření"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Po povolení režimu přihlášení můžete spravovat uživatele, konfigurovat nastavení a sledovat stav serveru. Prvních <strong>{{freeTierLimit}}</strong> uživatelů na vašem serveru může Stirling používat zdarma."
@@ -5005,6 +5203,11 @@ adminTitle = "Přehled pro správce"
 userBody = "Pozvěte kolegy, přiřazujte role a udržujte dokumenty uspořádané v jednom zabezpečeném prostoru. Režim přihlášení zapněte, jakmile budete chtít růst nad rámec sólo použití."
 userTitle = "Přehled plánu"
 
+[onboarding.processorIntro]
+body = "Stirling nyní spouští <strong>Zásady</strong> — automatizovaná pravidla, která klasifikují, zabezpečují a zpracovávají každý dokument při jeho příchodu. Nastavte je a sledujte běhy v <strong>Processoru</strong>."
+cta = "Podívat se na Processor"
+title = "Podívejte se na Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Předplacený rok"
+
+[payg.prepaid.banner]
+exhausted = "Vaše předplacená kapacita je vyčerpána; účtování podle spotřeby bylo obnoveno. Doplňte kapacitu, abyste si zachovali slevu."
+expiring_one = "Váš předplacený rok končí za {{count}} den. Nevyužitá kapacita vyprší — doplňte ji a začněte nový rok."
+expiring_other = "Váš předplacený rok končí za {{count}} dní. Nevyužitá kapacita vyprší — doplňte ji a začněte nový rok."
+low = "Zbývá vám {{pct}} % předplacené kapacity. Doplňte ji kdykoli, aby zpracování pokračovalo bez přerušení."
+
+[payg.prepaid.card]
+subtitle = "Používá se před účtováním podle spotřeby a mimo váš limit výdajů."
+title = "Předplacená kapacita"
+
+[payg.prepaid.meter]
+capSuffix = "z {{total}} předplacených kreditů"
+expires = "Vyprší {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Vyčerpáno"
+healthy = "Zbývá dost"
+low = "Dochází"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Paste the license key from your email"
 success = "License Activated!"
 successMessage = "Your license has been successfully activated. You can now close this window."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "vynuceno"
-enforcing = "Probíhá vynucování..."
-failed = "Vynucení selhalo"
 outputsUnavailable = "Výstupy zásad již nejsou k dispozici ke stažení."
 partialOutputsUnavailable = "Některé výstupy zásad již nejsou k dispozici ke stažení."
-retrying = "Zaneprázdněno, opakuji..."
 runNotFound = "Běh vynucení již nelze najít."
-step = "krok {{current}}/{{total}}"
 timedOut = "Časový limit vynucení vypršel dříve, než se běh mohl dokončit."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Zavřít"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Probíhá použití {{names}}"
 applyingProgress = "Probíhá použití {{names}} ({{done}} z {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} z {{total}} souborů se nepodařilo zpracovat a byly
 failureTitle = "Exportováno bez úplného vynucení"
 printPolicyAppliedBody = "Tento soubor PDF byl upraven tak, aby vyhověl zásadě. Zkontrolujte změny a poté znovu vytiskněte."
 printPolicyAppliedTitle = "Zásada použita před tiskem"
-queued = "+{{count}} ve frontě"
 successTitle = "{{names}} použito"
 summaryMore = "{{first}}, {{second}} a dalších {{more}}"
 summaryTwo = "{{first}} a {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Vynucování před převodem"
-default = "Vynucování"
-export = "Vynucování před exportem"
-input = "Vynucování při importu"
-print = "Vynucování před tiskem"
-
-[policies.field]
-accessLog = "Protokol přístupů"
-archiveAfter = "Archivovat po"
-auditTrail = "Auditní stopa"
-belowThreshold = "Pod prahem"
-destination = "Cíl"
-frameworks = "Frameworks"
-immutableHold = "Neměnné zadržení"
-keepFor = "Uchovat po dobu"
-minConfidence = "Min. spolehlivost"
-notify = "Upozornit při směrování"
-onViolation = "Při nesouladu"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Přidat"
-addPlaceholder = "Přidat štítek…"
-customNote = "Přizpůsobeno pro váš tým."
-defaultNote = "Používá se vestavěné výchozí nastavení sdílené s vaším týmem."
-duplicate = "„{{name}}“ již existuje."
-edit = "Upravit štítky"
-empty = "Zatím žádné štítky."
-export = "Exportovat JSON"
-iconAria = "Vyberte ikonu pro {{name}}"
-import = "Importovat JSON"
-importError = "Tento soubor se nepodařilo importovat."
-managedNote = "Týmové štítky spravuje vedoucí vašeho týmu."
-modalSubtitle = "Sdíleno s celým vaším týmem. Klasifikátor vybere štítky, které odpovídají každému dokumentu."
-modalTitle = "Klasifikační štítky"
-pickIcon = "Použít ikonu {{label}}"
-removeAria = "Odebrat {{name}}"
-resetToDefault = "Obnovit výchozí"
-saveForTeam = "Uložit pro tým"
-saving = "Ukládání…"
-sectionLabel = "Klasifikační štítky"
-startFromScratch = "Začít od začátku"
-teamCount = "týmové štítky"
-tooLong = "Štítky mohou mít nejvýše {{max}} znaků."
-ungrouped = "Neseskupené"
-view = "Zobrazit štítky"
+categoryCount = "kategorie"
+hideCategory = "Skrýt kategorii"
+labelCount = "štítky"
+sharedNote = "Tyto štítky jsou vestavěné a sdílené napříč celým vaším týmem."
+showCategory = "Zobrazit kategorii"
 
 [policies.pii]
 account = "Čísla účtů (označená)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Směrovací čísla v USA (ABA)"
 ssn = "Čísla sociálního zabezpečení"
 
-[policies.settings]
-noneExport = "Při exportu aktuálně neběží žádné zásady."
-noneUpload = "Při nahrávání aktuálně neběží žádné zásady."
-onExport = "Při exportu"
-onUpload = "Při nahrávání"
-reorderHandle = "Přetažením změňte pořadí"
-runOrderDesc = "Když se při stejné spouštěcí události spustí více než jedna zásada, běží v tomto pořadí — každá na výstupu předchozí zásady. Přetažením změňte pořadí."
-title = "Nastavení zásad"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Možnosti zásad"
-policySettings = "Nastavení zásad"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Opakovat neúspěšné zásady ({{count}})"
-rowProgress = "Zpracováno {{completed}} z {{total}} souborů"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Co je zásada?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automaticky najde a začerní citlivé údaje — například čísla sociálního zabezpečení a karet — aby je v dokumentu nešlo přečíst."
-sanitize = "Odstraní skrytý JavaScript ze souboru, aby se při otevření někým nic nespouštělo automaticky."
-watermark = "Označí viditelnou značkou (např. \"Důvěrné\") přes každou stránku."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Zavřít"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} se vynucuje..."
 badgeRan = "Na tomto souboru proběhla zásada {{name}}"
+badgeRunning = "{{name}} běží..."
 blockingAction = "{{action}} je blokováno během vynucování zásady, počkejte prosím..."
 dismiss = "Zavřít překryvnou vrstvu"
 enforcingTitle = "Vynucování zásady..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Zobrazit soubor (zásada se stále vynucuje)"
 [policyOption]
 autoRedactPhi = "Automaticky redigovat PHI"
 blockExport = "Blokovat export"
+ccpa = "CCPA"
 contracts = "Smlouvy"
 documents = "Dokumenty"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plán Editor"
 subscribed = "Plán Processor"
 unlinked = "Nepropojeno"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap z dokumentu"
-sectionsAriaLabel = "Sekce nástroje Agent Builder"
-selectorAriaLabel = "Agenti"
-subtitle = "Navrhujte, testujte a nasazujte AI agenty, kteří klasifikují, extrahují z dokumentů a směrují je. Definujte scénáře, omezte přístup k nástrojům, spusťte golden set a publikujte verzi."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Zrušit"
-dropzoneText = "Vyberte ukázkový dokument (PDF nebo obrázek)"
-lead = "Přetáhněte ukázkový dokument a navrhneme scénáře a extrakční schéma, které můžete doladit. Nic nebude publikováno, dokud to nezkontrolujete."
-submit = "Bootstrap agenta"
-subtitle = "Vytvořit základ nového agenta z jednoho reprezentativního souboru"
-title = "Bootstrap z dokumentu"
-
-[portal.agentBuilder.empty]
-description = "Vytvořte bootstrap agenta z ukázkového dokumentu, abyste založili jeho scénáře a extrakční schéma, poté jej dolaďte a publikujte."
-title = "Zatím žádní agenti"
-
-[portal.agentBuilder.evals]
-casesPassing = "Úspěšné případy"
-columnCase = "Eval případ"
-columnLatency = "Latence"
-columnResult = "Výsledek"
-fail = "neúspěch"
-goldenSetPassRate = "Míra úspěšnosti golden-set"
-latencyMs = "{{ms}} ms"
-notRun = "nespuštěno"
-pass = "úspěch"
-passRate = "Míra úspěšnosti"
-runEvals = "Spustit evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals promění vaše scénáře v opakovatelný golden set. Upgradujte, abyste mohli sledovat míru úspěšnosti v čase a podmiňovat jí publikování."
-title = "Zatím žádný golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "napříč golden sety"
-activeAgents = "Aktivní agenti"
-avgPassRate = "Průměrná míra úspěšnosti eval"
-fleetWide = "v rámci celé flotily"
-latestPublished = "Naposledy publikováno"
-scenarios = "Scénáře"
-testCases = "testovací případy"
-totalDescription_one = "{{count}} celkem"
-totalDescription_other = "{{count}} celkem"
-
-[portal.agentBuilder.scenarios]
-add = "Přidat"
-addScenario = "Přidat scénář"
-enable = "Povolit"
-expectationLabel = "Očekávané chování"
-expectationPlaceholder = "Co má agent udělat"
-inEval = "v eval"
-mute = "Ztlumit"
-muted = "ztlumeno"
-nameLabel = "Název"
-namePlaceholder = "např. eskalace souladu"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scénáře"
-tools = "Nástroje"
-versions = "Verze"
-
-[portal.agentBuilder.tools]
-broadAccess = "Široký přístup"
-deniedHint = "Vybrané nástroje jsou blokovány. Vše ostatní zůstává volatelné."
-deniedTools = "Zakázané nástroje"
-governanceGate = "Správa nástrojů je dostupná v plánu Enterprise."
-restricted = "Omezeno"
-restrictedAccess = "Omezený přístup k nástrojům"
-restrictedDescription = "Povolit všechny nástroje kromě těch, které níže zakážete."
-
-[portal.agentBuilder.versions]
-current = "aktuální"
-historyGate = "Úplná historie verzí a rollback jsou dostupné v plánu Enterprise."
-publish = "Publikovat"
-rollBack = "Vrátit zpět"
-
 [portal.assistant]
 close = "Zavřít asistenta"
 error = "Asistenta se nepodařilo kontaktovat."
@@ -6365,9 +6346,21 @@ typing = "Píše"
 loading = "Načítání"
 redirectingToEditor = "Přesměrování do editoru..."
 
+[portal.billing.activation]
+maybeLater = "Možná později"
+title = "Zapnout Processor"
+
+[portal.billing.activation.payg]
+sub = "Nastavte měsíční limit. Plaťte za to, co spustíte."
+title = "Platba podle využití"
+
+[portal.billing.activation.prepay]
+badge = "2 měsíce zdarma"
+sub = "Jedna faktura, karta nebo bankovní převod."
+title = "Předplatit rok"
+
 [portal.billing.checkout]
 noClientSecret = "Edge funkce nevrátila client_secret."
-subtitle = "Přidejte kartu, abyste mohli pokračovat po vyčerpání bezplatného grantu plánu Editor. O zbytek se postará Stripe."
 title = "Zapnout plán Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Platba proběhla úspěšně, ale aktivace trvá o něco déle než obvy
 close = "Zavřít"
 title = "Už jsme skoro hotovi"
 
+[portal.billing.checkout.cap]
+amountAria = "Měsíční limit výdajů"
+back = "Zpět"
+continue = "Pokračovat k platbě"
+error = "Nepodařilo se nastavit váš limit výdajů"
+finePrint = "Faktury se vystavují měsíčně. Zrušit můžete kdykoli."
+noLimit = "Bez limitu"
+note = "Nikdy vám nebude účtováno více než váš limit. Zpracování se pouze pozastaví."
+perMonth = "/ měs."
+title = "Nastavte svůj limit výdajů"
+
+[portal.billing.checkout.card]
+fields = "Číslo karty · MM / RR · CVC · ZIP"
+label = "Údaje o kartě"
+note = "Údaje o kartě shromažďuje Stripe. Stirling nikdy neukládá PAN ani CVC."
+
 [portal.billing.checkout.error]
 title = "Nepodařilo se spustit checkout"
 
@@ -6383,10 +6392,9 @@ body = "Vaše platba proběhla. Zapínáme měřené zpracování ve vašich pro
 hint = "Nechte prosím toto okno otevřené."
 title = "Aktivace plánu Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "v env portálu pro povolení checkoutu v aplikaci."
-bodyBefore = "Nastavte"
-title = "Stripe není nakonfigurován"
+[portal.billing.checkout.pay]
+limit = "Měsíční limit výdajů {{amount}}/měs. Zpracování se na limitu pozastaví."
+limitNoCap = "Bez limitu výdajů. Zpracování se nepozastaví. Faktury se vystavují měsíčně."
 
 [portal.billing.enterpriseUpsell]
 cta = "Vytvořit nabídku Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Aktuální plán"
 freeForever = "Navždy zdarma"
 noTeamResolved = "Ve vaší peněžence ještě není vyřešen žádný tým — obnovte stránku a zkuste to znovu."
 ownerOnly = "Plán Processor může zapnout pouze vlastník týmu."
+payInvoice = "Zaplatit fakturu pro dokončení"
 planName = "Editor"
 ssoIncluded = "SSO zahrnuto"
 switchOnProcessor = "Zapnout Processor →"
 unlimitedUsers = "Neomezený počet uživatelů"
+viewQuote = "Zobrazit nabídku"
 
 [portal.billing.invoices]
 columnAmount = "Částka"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Přímé API požadavky"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizace a pipelines"
 segmentAutomationLabel = "Automatizace"
+sizeMultiplier = "{{formatted}} PDF použilo násobitel velikosti"
+summary = "{{unique}} jedinečných · {{units}} účtovacích jednotek · průměr {{avg}} na PDF"
+summaryNoRate = "{{unique}} jedinečných · {{units}} účtovacích jednotek"
 unit = "měřené PDFs"
+unitsPending_one = "{{units}} účtovací jednotka čeká na synchronizaci z propojených instancí"
+unitsPending_other = "{{units}} účtovacích jednotek čeká na synchronizaci z propojených instancí"
+
+[portal.billing.prepaid]
+capSuffix = "z {{total}} předplacených kreditů"
+expires = "Vyprší {{date}}"
+eyebrow = "Předplacená kapacita"
+note = "Používá se před účtováním podle spotřeby a mimo váš limit výdajů."
+topUp = "Doplnit"
+
+[portal.billing.prepaid.buy]
+back = "Zpět"
+calcTitle = "Spočítejte si roční platbu"
+cancel = "Zrušit"
+cancelPurchase = "Zrušit nákup"
+close = "Zavřít"
+continueToPayment = "Pokračovat k platbě"
+finalise = "Dokončit"
+invoiceErrorTitle = "Nepodařilo se vygenerovat fakturu"
+loadingTitle = "Načítání vaší nabídky"
+payTitle = "Zaplaťte za svůj rok"
+step = "Krok {{current}} z {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Změnit"
+deployRow = "Nasazení"
+done = "Hotovo"
+enterpriseHint = "Toto je podnikové měřítko. Při tomto objemu jsou podnikové sazby výhodnější než jakákoli samoobslužná sleva. Zafixování sazby, podmínky a nabídka během několika minut."
+governanceRow = "Správa"
+governanceValue = "{{label}} · {{count}} zásad"
+handlesLabel = "Váš Processor"
+handlesValue = "zpracuje {{volume}} kreditů / měs."
+pipelinesLabel = "Pipeline"
+policiesMeta = "{{count}} zásad"
+poolCaption = "Jeden fond {{credits}} kreditů na rok. Náročné měsíce čerpají z lehčích."
+priceLabel = "Váš rok · 12 měsíců za cenu 10"
+rateUnknown = "Přesnou cenu zobrazíme při dokončení objednávky."
+savings = "Ušetříte {{amount}} · 2 měsíce zdarma."
+sizingRow = "Velikost"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Celkem uživatelů"
+
+[portal.billing.prepaid.consent]
+label = "Rozumím, že když se moje předplacená kapacita vyčerpá nebo po 12 měsících vyprší, zpracování bude automaticky pokračovat za standardní účtovanou sazbu pay-as-you-go (až do mého limitu výdajů), pokud službu nezruším, a že ji mohu kdykoli zrušit z fakturačního portálu."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Spravováno Stirling. Spuštěno během minut."
+cloudValue = "Stirling Cloud · Spravováno"
+selfhost = "Self-hosted"
+selfhostDesc = "Běží na soukromé infrastruktuře. Stejná sazba."
+selfhostValue = "Self-hosted · Soukromá infrastruktura"
+
+[portal.billing.prepaid.offer]
+cta = "Zkontrolovat nabídku"
+subtitle = "Předplaťte si rok zpracování PDF a získejte dva měsíce zdarma, použité před účtováním podle spotřeby, mimo váš limit výdajů."
+title = "Získejte 12 měsíců za cenu 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Jméno držitele účtu"
+accountNamePlaceholder = "např. Jana Nováková"
+companyName = "Název společnosti (volitelné)"
+companyNamePlaceholder = "např. Acme Inc."
+downloadInvoice = "Stáhnout fakturu"
+payOnline = "Zaplatit online"
+poNumber = "Číslo objednávky (volitelné)"
+poNumberPlaceholder = "např. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Pokročilé"
+advancedDesc = "Pipeline zajišťují většinu vašeho zpracování."
+none = "Žádné"
+noneDesc = "Pipeline zatím neběží. Můžete je kdykoli zapnout."
+standard = "Standardní"
+standardDesc = "Několik pipeline znovu zpracovává příchozí PDF."
+
+[portal.billing.prepaid.posture]
+essentials = "Základní"
+essentialsDesc = "Klasifikace, výchozí nastavení, plus sdílení"
+governed = "Řízené"
+governedDesc = "Přidává zabezpečení a směrování"
+regulated = "Regulované"
+regulatedDesc = "Každá kategorie, včetně Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Stáhnout nabídku (PDF)"
+downloading = "Připravuje se…"
+share = "sdílet ke schválení"
+
+[portal.billing.prepaid.size]
+compact = "Kompaktní"
+compactDesc = "Soubory do 25 MB, bez poplatků za data"
+heavy = "Náročné"
+heavyDesc = "Skenované nebo obrazově náročné, běžně 50 MB+"
+standard = "Standardní"
+standardDesc = "Většinou malé, některé skeny přes 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Vyčerpáno"
+healthy = "Zbývá dost"
+low = "Dochází"
 
 [portal.billing.spendLimit]
 adjustLimit = "Upravit limit"
@@ -6494,6 +6608,8 @@ label = "Očekává se překročení."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Výdaje tento měsíc"
+freeRemaining_one = "Zbývá {{formatted}} bezplatné PDF"
+freeRemaining_other = "Zbývá {{formatted}} bezplatných PDF"
 processed_one = "Zpracováno {{formattedCount}} PDF."
 processed_other = "Zpracováno {{formattedCount}} PDFs."
 processedWithRate_one = "Zpracováno {{formattedCount}} PDF, za {{rate}} za kus."
@@ -6534,6 +6650,350 @@ signature = "podpis"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nové připojení"
+createTitleFor = "Připojit {{name}}"
+delete = "Smazat"
+edit = "Upravit"
+editTitle = "Upravit připojení"
+unsupportedType = "Tento typ připojení zde nelze upravit."
+
+[portal.connections.categories.advanced]
+description = "Pro službu, kterou zatím nepodporujeme."
+label = "Pokročilé"
+
+[portal.connections.categories.audit]
+description = "Zaznamenat, co se s dokumentem stalo, tam, kde už vaši auditoři hledají."
+label = "Audit a protokolování compliance"
+
+[portal.connections.categories.notify]
+description = "Informovat jiný systém, že se něco stalo."
+label = "Oznámení a workflow"
+
+[portal.connections.categories.security]
+description = "Naskenovat nebo označit dokument předtím, než pokračuje dál."
+label = "Zabezpečení a klasifikace"
+
+[portal.connections.categories.signing]
+description = "Odeslat dokument k podpisu nebo notářskému ověření."
+label = "Elektronický podpis a notářské ověření"
+
+[portal.connections.categories.storage]
+description = "Kam zpracované dokumenty skončí – bucket, disk, tiket nebo stránka."
+label = "Soubor a příloha"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling to ukládá šifrovaně a už to nikdy nezobrazí."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Kroky používající toto připojení mohou volat pouze cesty pod touto URL, nikdy jiného hostitele."
+label = "URL serveru"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Heslo"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Uživatelské jméno"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Vložte URL, kterou vám služba poskytla. Volat lze pouze cesty pod ní."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Název připojení"
+namePlaceholder = "např. Produkce"
+
+[portal.connections.picker]
+cancel = "Zrušit"
+createNew = "Nové připojení..."
+placeholder = "Vyberte připojení"
+save = "Uložit připojení"
+
+[portal.connections.picker2]
+back = "Změnit integraci"
+heading = "Co chcete připojit?"
+noResultsBody = "Zatím to nepodporujeme – řekněte nám o tom a podíváme se na přidání podpory."
+noResultsTitle = "Nic neodpovídá „{{query}}“"
+searchPlaceholder = "Hledat integrace – zkuste „sign“, „ocr“ nebo název produktu"
+
+[portal.connections.types.api]
+description = "Volejte libovolné HTTP API ze zásady. Vyberete URL, ověření a payload."
+label = "Vlastní API"
+
+[portal.connections.types.api.fields.authType]
+label = "Ověření"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Uživatelské jméno a heslo"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token ve vlastním záhlaví"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Žádné"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Přihlásit se pro token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Kroky používající toto připojení mohou volat pouze cesty pod touto URL, nikdy jiného hostitele."
+label = "Základní URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Název záhlaví"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Cesta pro přihlášení"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Heslo"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Pokud API odpoví odkazem ke stažení, mohou se načíst pouze tito hostitelé. Oddělte čárkami. Ponechte prázdné, chcete-li povolit pouze vlastního hostitele základní URL."
+label = "Povolení hostitelé výsledků"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Odeslat token jako toto záhlaví"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Záhlaví odpovědi, ve kterém přihlašovací volání vrací token, např. X-Auth-Token."
+label = "Záhlaví odpovědi s tokenem"
+
+[portal.connections.types.api.fields.username]
+label = "Uživatelské jméno"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skenujte dokumenty na malware na serveru, který provozujete – nic neopustí vaši síť."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Skenování virů a obsahu pro dokumenty v zásadě."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokujte dokumenty obsahující makra, spustitelné soubory, skripty nebo vložené objekty – nejen známý malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Připojit zpracované dokumenty ke stránce Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Odesílejte dokumenty do ConsignO Cloud (Notarius) k elektronickému podpisu a notářskému ověření."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Vaše prostředí ConsignO Cloud, včetně /api/v1."
+label = "URL serveru"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Heslo"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Potřebné pouze v případě, že vaše organizace používá tenanty."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Uživatelské jméno"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Odeslat zprávu do Discord, když zásada zpracuje dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexovat auditní událost v Elasticsearch pokaždé, když zásada zpracuje dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Kontrolovat FTP nebo FTPS server pro nové dokumenty."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Režim připojení"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktivní"
+passive = "Pasivní (doporučeno)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Prosté FTP odesílá přihlašovací údaje a soubory nešifrovaně; zvolte FTPS, pokud ho server podporuje."
+label = "Šifrování"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicitní / AUTH TLS)"
+implicit = "FTPS (implicitní)"
+none = "Žádné (prosté FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Odeslat zprávu do prostoru Google Chat, když se spustí zásada."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Připojit zpracované dokumenty k Jira issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Odeslat dokument nebo oznámení e-mailem, když se spustí zásada."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Ukládat zpracované dokumenty do Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Heslo aplikace"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detekujte osobní údaje v textu dokumentu pomocí serveru Presidio, který provozujete."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Číst a používat štítky citlivosti Microsoft Purview na PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Volitelné. Potřebné pouze pro výběr štítků podle názvu; označování funguje i bez něj."
+label = "ID aplikace (klienta)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Otiskne se do každého štítku jako jeho SiteId, aby nástroje kompatibilní s Purview věděly, která organizace ho použila."
+label = "ID adresáře (tenanta)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket, ze kterého mohou zdroje číst a do kterého mohou výstupy pipeline zapisovat."
+label = "S3 úložiště"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Pro AWS ponechte prázdné. Nastavte pro MinIO nebo jiné úložiště kompatibilní s S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Odeslat dokument nebo oznámení e-mailem, když se spustí zásada."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Kontrolovat SFTP (SSH) server pro nové dokumenty."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Volitelné. Otisk klíče hostitele serveru SHA-256 (z `ssh-keyscan host | ssh-keygen -lf -`). Pokud je nastaven, přijme se pouze server předkládající tento klíč; pokud je prázdný, klíč zjištěný při prvním připojení se připne a pozdější změny budou odmítnuty."
+label = "Otisk klíče hostitele"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Přístupová fráze klíče"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Ponechte prázdné, pokud se místo hesla ověřujete soukromým klíčem."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Volitelné. Vložte soukromý klíč OpenSSH pro ověření klíčem místo hesla."
+label = "Soukromý klíč"
+
+[portal.connections.types.slack]
+description = "Odeslat zprávu do Slack, když zásada zpracuje dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Sledovat síťové sdílení SMB / CIFS (Windows nebo Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Síťové sdílení"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Volitelné. Windows doména nebo pracovní skupina, pokud ji váš server používá."
+label = "Doména"
+
+[portal.connections.types.smb.fields.share]
+label = "Sdílení"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Odeslat auditní událost do Splunk pokaždé, když zásada zpracuje dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Odeslat auditní událost do HTTP kolektoru Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Odeslat zprávu do kanálu Teams, když se spustí zásada."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Odeslat každý dokument, nebo jen jeho údaje, na vámi zvolenou URL."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Spustit Zap nebo scénář Make ze zásady."
+label = "Zapier a Make"
+
+[portal.docs]
+browse = "Procházet dokumentaci"
+viewSource = "Zobrazit zdroj na GitHub"
+
 [portal.docs.authentication]
 codeCaption = "každý požadavek"
 eyebrow = "ZAČÍNÁME"
@@ -6619,11 +7079,19 @@ title = "Oficiální SDKs"
 beta = "Beta"
 deprecated = "Zastaralé"
 
+[portal.docs.search]
+empty = "Žádná odpovídající dokumentace"
+placeholder = "Hledat v dokumentaci"
+results = "{{count}} výsledků"
+
 [portal.docs.skills]
 eyebrow = "DOVEDNOSTI"
 lead = "Přibalené pojmenované schopnosti, které váš agent vyvolává jako jeden nástroj. Každá dovednost je deterministický řetězec operací s připojenými evals."
 title = "Dovednosti agenta"
 
+[portal.docs.toc]
+title = "Na této stránce"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "Typ"
 user = "Uživatel"
 
 [portal.documents.queue.empty]
+connectSource = "Připojit zdroj"
+createPipeline = "Vytvořit pipeline"
 description = "Jakmile zdroje předají dokumenty do vašich pipeline, zobrazí se zde ke kontrole."
 title = "Ve frontě nejsou žádné dokumenty"
 
@@ -6806,13 +7276,71 @@ description = "V tomto zobrazení došlo k neočekávané chybě. Zkuste to znov
 retry = "Zkusit znovu"
 title = "Na této stránce se něco pokazilo"
 
+[portal.home.download]
+back = "Zpět"
+body = "Stáhněte si desktopovou aplikaci nebo provozujte server self-hosted."
+done = "Hotovo"
+guide = "Otevřít průvodce {{name}}"
+openInBrowser = "Místo toho otevřít v prohlížeči"
+sectionDesktop = "Desktopová aplikace"
+sectionSelfHosted = "Self-hosted"
+title = "Nainstalovat Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Spusťte oficiální image na svém serveru."
+note = "Otevře se na :8080. Výchozí přihlášení: admin / stirling."
+tagline = "Spusťte server v kontejneru"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Nainstalujte oficiální Helm chart."
+note = "Přidejte PVC pro /configs, aby se nastavení zachovala."
+tagline = "Nasaďte do clusteru pomocí Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Nativní sestavení pro vaši distribuci."
+guideBtn = "Zobrazit možnosti instalace pro Linux"
+note = "Pro běžné distribuce jsou k dispozici sestavení AppImage, .deb a .rpm."
+tagline = "Nativní desktopová aplikace pro vaši distribuci"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Nebo přes Homebrew"
+detailBody = "Spusťte instalátor nebo použijte Homebrew."
+downloadBtn = "Stáhnout pro macOS"
+tagline = "Nativní aplikace pro Apple silicon a Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Spusťte .jar na bare metal serveru."
+downloadBtn = "Stáhnout .jar"
+note = "Vyžaduje Java 21+. Otevře se na :8080; výchozí přihlášení admin / stirling."
+runLabel = "Poté jej spusťte"
+tagline = "Spusťte .jar na bare metal serveru"
+title = "Ruční nastavení serveru"
+
+[portal.home.download.windows]
+altLabel = "Nebo přes winget"
+detailBody = "Spusťte instalátor nebo použijte správce balíčků."
+downloadBtn = "Stáhnout instalátor"
+tagline = "Nativní aplikace pro Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktivních"
-invite = "Pozvat členy týmu"
+activeOfDeployed = "{{active}} z {{total}} aktivních tento měsíc"
 name = "Stirling PDF Editor"
 open = "Otevřít v prohlížeči"
 updated = "aktualizováno {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Dokončit nasazení"
+options = "Zobrazit možnosti nasazení"
+start = "Nasadit Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Dobré odpoledne"
 evening = "Dobrý večer"
 morning = "Dobré ráno"
 
-[portal.home.onboarding]
-dismiss = "Zavřít nastavení"
-notStarted = "Nezahájeno"
-progress = "{{done}} z {{total}} hotovo"
-title = "Dokončete nastavení"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC v rámci organizace, závazkové objemové ceny a nasazení v izolované síti."
-cta = "Zahájit zkušební verzi"
-ctaQuote = "Získat nabídku"
-lead = "Pro 250+ zaměstnanců."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Nasaďte desktopovou aplikaci, navždy zdarma."
-title = "Stáhnout PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktivních · {{recommended}} doporučeno"
-chip = "{{active}} aktivních"
-title = "Zapnout zásady"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} připojeno · každý PDF je řízen tam, kam dorazí"
-chip = "{{connected}} připojeno"
-title = "Připojte své zdroje"
-
-[portal.home.quickActions]
-subtitle = "Hlavní úkoly na dnešek"
-title = "Rychlé akce"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Tříkrokový návrhář nad knihovnou typovaných operací"
-title = "Vytvořit pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenti, webhooky, sledované složky"
-title = "Připojit zdroj"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Klíč s vymezeným rozsahem, limity rychlosti a IP allowlist"
-title = "Vydat API klíč"
-
 [portal.infrastructure]
 manageEditorDeployment = "Spravovat nasazení Editoru"
 sectionsAriaLabel = "Sekce infrastruktury"
@@ -6878,13 +7363,9 @@ heading = "API klíče"
 subheading = "Přihlašovací údaje s vymezeným rozsahem, limity rychlosti pro jednotlivé klíče, oprávněními a IP allowlisty."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Povolené IP"
-anyIp = "Jakákoli IP (bez allowlistu)"
 created = "Vytvořeno"
 lastUsed = "Naposledy použito"
-permissions = "Oprávnění"
-rateLimit = "Limit rychlosti"
-rateLimitValue = "{{value}} pož./min"
+revoke = "Odvolat klíč"
 usageMonth = "Využití tento měsíc"
 usageToday = "Využití dnes"
 
@@ -6892,6 +7373,20 @@ usageToday = "Využití dnes"
 description = "Vytvořte klíč s vymezeným rozsahem a začněte volat Stirling API."
 title = "Zatím žádné API klíče"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nepodařilo se načíst vaše API klíče. Zkuste to prosím znovu."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Odvolat „{{name}}“? Každá integrace, která tento klíč stále používá, začne okamžitě dostávat chyby 401. Tuto akci nelze vrátit zpět."
+cancel = "Zrušit"
+confirm = "Odvolat klíč"
+title = "Odvolat API klíč"
+
+[portal.infrastructure.attestationLabel]
+attested = "Ověřeno"
+inScope = "V rozsahu"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrovat auditní události podle kategorie"
 heading = "Auditní protokoly"
@@ -6935,6 +7430,7 @@ all = "Vše"
 auth = "Ověření"
 config = "Konfigurace"
 elevation = "Zvýšení oprávnění"
+policy = "Zásada"
 processing = "Zpracování"
 security = "Zabezpečení"
 
@@ -6944,19 +7440,35 @@ title = "Nemáte přístup"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfigurace"
-elevation = "Zvýšení oprávnění"
+policy = "Zásada"
 processing = "Zpracování"
 totalEvents = "Celkem událostí · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Konfigurace"
+elevation = "Zvýšení oprávnění"
+policy = "Zásada"
+processing = "Zpracování"
+security = "Zabezpečení"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Chyba"
+info = "Info"
+success = "Úspěch"
+warning = "Varování"
+
+[portal.infrastructure.certLabel]
+certified = "Certifikováno"
+inProgress = "Probíhá"
+notStarted = "Nezahájeno"
+
 [portal.infrastructure.createKey]
 cancel = "Zrušit"
 createKey = "Vytvořit klíč"
 done = "Hotovo"
-ipAllowlistHelper = "CIDR rozsahy oddělené čárkami. Ponechte prázdné pro povolení jakékoli IP."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Název klíče"
 keyNamePlaceholder = "např. Produkce · ingest"
-permissionsLabel = "Oprávnění"
 secretKeyCaption = "Tajný klíč"
 secretWarning = "Uložte jej do správce tajemství. Stirling vždy ukládá pouze hash — později jej nelze obnovit."
 subtitle = "Omezte rozsah klíče na minimum, které potřebuje. Můžete jej kdykoli rotovat nebo odvolat."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Zkopírujte si toto tajemství nyní — znovu se nezobrazí.
 title = "Vytvořit API klíč"
 titleCreated = "Klíč vytvořen"
 
+[portal.infrastructure.deployLabel]
+live = "Živě"
+queued = "Ve frontě"
+rolledBack = "Vráceno zpět"
+rolling = "Nasazuje se"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Živý stav každého nasazeného regionu Stirling — latence, za
 description = "Nasazené regiony se zde zobrazí, jakmile bude váš pracovní prostor zřízen."
 title = "Žádné regiony nejsou nasazeny"
 
+[portal.infrastructure.keyLabel]
+active = "Aktivní"
+revoked = "Odvoláno"
+
+[portal.infrastructure.modelLabel]
+active = "Aktivní"
+degraded = "Zhoršené"
+disabled = "Zakázáno"
+
 [portal.infrastructure.models]
 heading = "Modely"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Stav"
 type = "Typ"
 version = "Verze"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/volání"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktivní modely"
 avgLatency = "Průměrná latence"
@@ -7049,6 +7580,17 @@ modelForAria = "Model pro {{operation}}"
 operation = "Operace"
 routedTo = "Směrováno na"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasifikace"
+extraction = "Extrakce"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Zhoršené"
+down = "Mimo provoz"
+healthy = "V pořádku"
+
 [portal.infrastructure.security.access.byok]
 description = "Poskytněte klíč z vlastního KMS. Stirling s ním šifruje, ale stále může číst."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modely"
 security = "Zabezpečení"
 storage = "Úložiště"
 
+[portal.integrations]
+addAnother = "Přidat další"
+availableHeading = "Dostupné"
+comingSoonHeading = "Již brzy"
+connect = "Připojit"
+connectedHeading = "Připojeno"
+connectionCount_one = "{{count}} připojení"
+connectionCount_other = "{{count}} připojení"
+customApi = "Vlastní API"
+searchPlaceholder = "Hledat integrace"
+subtitle = "Vše, s čím může Stirling komunikovat. Přihlašovací údaje se vytvoří jednou zde a poté se na ně odkazuje ve zdrojích, zásadách a pipeline."
+title = "Integrace"
+typedName = "Název {{tool}}"
+
+[portal.integrations.filters]
+all = "Vše"
+audit = "Audit"
+connected = "Připojeno"
+notify = "Oznámení"
+security = "Zabezpečení"
+signing = "Podepisování"
+storage = "Úložiště"
+
+[portal.integrations.status]
+connected = "Připojeno"
+
+[portal.integrations.table]
+integration = "Integrace"
+worksWith = "Funguje s"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline"
+policies = "Zásady"
+sources = "Zdroje"
+
+[portal.legal]
+draft = "{{label}} · koncept"
+loadError = "Tento dokument se nepodařilo načíst. Zkuste to prosím znovu."
+loading = "Načítání…"
+title = "Právní dokument"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponenty"
@@ -7182,6 +7765,7 @@ documents = "Dokumenty"
 editor = "Editor"
 home = "Domů"
 infrastructure = "Infrastruktura"
+integrations = "Integrace"
 pipelines = "Pipeline"
 policies = "Zásady"
 procurement = "Nákup"
@@ -7190,25 +7774,9 @@ sources = "Zdroje"
 usage = "Využití a fakturace"
 users = "Uživatelé"
 
-[portal.notifications]
-markAllRead = "Označit vše jako přečtené"
-title = "Oznámení"
-viewAll = "Zobrazit vše"
-
-[portal.notifications.ariaLabel]
-none = "Oznámení, žádná nepřečtená"
-unread_one = "Oznámení, {{count}} nepřečtené"
-unread_other = "Oznámení, {{count}} nepřečtených"
-
-[portal.notifications.count]
-allRead = "vše přečteno"
-loading = "načítání"
-new_one = "{{count}} nové"
-new_other = "{{count}} nových"
-
-[portal.notifications.empty]
-description = "Žádná nová oznámení."
-title = "Vše máte vyřízeno"
+[portal.nav.section]
+platform = "Platforma PDF"
+processor = "Procesor PDF"
 
 [portal.pipelines]
 subtitle = "Každá automatizovaná dokumentová pipeline na backendu: seřazený řetězec operací nad sadou zdrojů, spuštěný triggerem. Klikněte na řádek pro zobrazení jejích kroků a zdrojů."
@@ -7220,15 +7788,28 @@ newPipeline = "Nová pipeline"
 [portal.pipelines.builder]
 addStep = "Přidat nástroj"
 back = "Zpět na pipeline"
+cannotFollow = "Nelze přijmout {{produced}}"
+chooseAccount = "Vyberte účet"
+chooseDestination = "Vyberte cíl"
+chooseOperation = "Vyberte, co tento krok provede"
+chooseSource = "Vyberte zdroj"
 discard = "Zahodit změny"
 enabled = "Povoleno"
+inputs = "Vstup"
+inputSource = "Vstupní zdroj"
+inputTrigger = "Spouštěč"
 keepEditing = "Pokračovat v úpravách"
+needsConfiguring = "Vyžaduje nastavení"
 needsUpload = "Vyžaduje nahraný soubor"
+noSources = "Zatím nejsou připojeny žádné zdroje. Vytvořte jeden, abyste jej mohli použít jako vstup."
 noToolMatches = "Vašemu hledání neodpovídají žádné nástroje."
 pipelineSettings = "Nastavení pipeline"
 searchTools = "Hledat nástroje"
 selectToolBody = "Přidejte nástroj a vytvořte svou pipeline."
 selectToolTitle = "Zatím žádné nástroje"
+sendToSystem = "Odeslat do jiného systému"
+stepsIncompatible = "Tyto kroky nelze spustit nad tím, co vytváří jejich předchozí krok: {{tools}}."
+stepsNeedSetup = "Tyto kroky je před uložením stále nutné nastavit: {{tools}}."
 toolSettings = "Nastavení nástroje"
 unknownStep = "Nerozpoznaná operace, ponechána beze změny."
 unsavedBody = "Máte neuložené změny. Uložte je před odchodem, nebo je zahoďte?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Neuložené změny"
 uploadUnsupported = "Nahrané soubory zatím nejsou v pipeline podporovány, takže tyto kroky nelze uložit: {{tools}}."
 usesDefaults = "Spouští se s výchozím nastavením"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinuje každý soubor z předchozího kroku"
+fan-out = "Spustí se jednou pro každý soubor z předchozího kroku"
+format-mismatch = "Vyžaduje {{accepts}}, ale předchozí krok vytváří {{produced}}"
+output-uncertain = "Nemusí se spustit: výstup předchozího kroku závisí na jeho nastavení"
+source-mismatch = "Vyžaduje {{accepts}}, ale vstup této pipeline je {{produced}}"
+undeclared-operation = "Nelze zkontrolovat, co tento krok přijímá"
+
 [portal.pipelines.composer]
 addTool = "Přidat nástroj"
 cancel = "Zrušit"
 chainEmpty = "Přidejte nástroj a začněte vytvářet svou pipeline."
 create = "Vytvořit pipeline"
-directory = "Výstupní složka"
-directoryHelp = "Absolutní cesta na serveru. Musí být v rámci nakonfigurovaných povolených složek."
 editingUnsupported = "Zobrazení těchto parametrů nástroje pro úpravy zatím není podporováno."
 moveDown = "Přesunout dolů"
 moveUp = "Přesunout nahoru"
 name = "Název"
 namePlaceholder = "např. Kontrola redakcí"
-noSources = "Zatím nejsou připojeny žádné zdroje. Pipeline může stále běžet na souborech dodaných přímo do ní."
 noToolSettings = "Tento nástroj nemá žádná konfigurovatelná nastavení."
 operations_one = "Operace ({{count}})"
 operations_other = "Operace ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Smazat"
 title = "Smazat pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Vymazat historii"
 delete = "Smazat pipeline"
 run = "Spustit nyní"
 
 [portal.pipelines.empty]
 action = "Vytvořit pipeline"
+connectSource = "Připojit zdroj"
 description = "Vytvořte svou první pipeline: vyberte zdroje, nad kterými běží, zřetězte operace a zvolte, kam půjde výstup."
 title = "Zatím žádné pipeline"
 
@@ -7286,15 +7874,17 @@ active = "Aktivní"
 paused = "Pozastaveno"
 total = "Pipeline"
 
-[portal.pipelines.output]
-folder = "Zapsat do složky"
-inline = "Vrátit soubory"
-
 [portal.pipelines.run]
+allProcessed_one = "Není co spustit: {{count}} dokument ze zdroje již byl zpracován."
+allProcessed_other = "Není co spustit: všech {{count}} dokumentů ve zdrojích již bylo zpracováno."
 completed_one = "Běh dokončen."
 completed_other = "Všech {{count}} běhů dokončeno."
 empty = "Není co spustit: zdroje neměly žádné dokumenty ke zpracování."
 failed = "Běh selhal: {{error}}"
+historyCleared = "Historie vymazána. Příští spuštění znovu zpracuje vše, co je aktuálně ve zdrojích."
+inFlight = "Není co nového spustit: dokumenty se stále zpracovávají z dřívějšího spuštění."
+parked_one = "Není co spustit: {{count}} dokument dříve selhal a je odložen. Opravte příčinu a poté vymažte historii, abyste jej zkusili znovu."
+parked_other = "Není co spustit: {{count}} dokumentů dříve selhalo a jsou odloženy. Opravte příčinu a poté vymažte historii, abyste je zkusili znovu."
 running = "Běh zahájen; stále probíhá."
 timeout = "Běh trvá déle, než se očekávalo; může se stále dokončit na pozadí."
 
@@ -7314,12 +7904,18 @@ manual = "Ruční"
 schedule = "Naplánováno"
 
 [portal.policies]
+defaultName = "Zásada {{category}}"
 subtitle = "Trvalé automatizace, které vynucují pipeline nástrojů na každém dokumentu. Každá zásada se spustí při nahrání nebo exportu, provede svůj řetězec nástrojů a uloží vynucenou verzi vedle originálu."
 title = "Zásady"
 
 [portal.policies.card]
 comingSoon = "Upgradovat na Enterprise"
 notSetUp = "Nenastaveno"
+requiresAiEngine = "Vyžaduje AI engine"
+
+[portal.policies.categories.classification]
+desc = "Identifikujte typ každého dokumentu při nahrání a označte jeho metadata pro zařazení a vyhledávání."
+label = "Klasifikace"
 
 [portal.policies.categories.compliance]
 desc = "Vynucujte požadavky HIPAA, GDPR, SOC 2 nebo FedRAMP na každém dokumentu."
@@ -7344,6 +7940,13 @@ label = "Zabezpečení"
 [portal.policies.config]
 scopeAll = "Všechny dokumenty"
 
+[portal.policies.config.classification]
+summary = "Klasifikuje každý nahraný dokument podle štítků vašeho týmu a označí jeho metadata."
+
+[portal.policies.config.classification.rules]
+0 = "Klasifikovat"
+1 = "Označit metadata"
+
 [portal.policies.config.compliance]
 summary = "Ověřuje dokumenty vůči regulatorním rámcům předtím, než opustí systém."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. spolehlivost"
 2 = "Pojmenovat"
 3 = "Normalizovat"
 
+[portal.policies.config.purview]
+label = "Použít štítek citlivosti Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "ID štítku"
+labelIdHelp = "GUID štítku z portálu Purview. Použití štítku zapíše jeho metadata do PDF; nedokáže jej zašifrovat, k tomu je potřeba klient Microsoft."
+labelName = "Název štítku (volitelné)"
+labelNameHelp = "Uloženo spolu s ID, aby lidé a nástroje mohli štítek rozpoznat."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview rozlišuje štítek použitý zásadou od štítku vybraného osobou."
+label = "Jak je štítek zaznamenán"
+privileged = "Jako vybraný osobou"
+standard = "Jako použitý automaticky"
+
+[portal.policies.config.purviewRead]
+label = "Přečíst štítek Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Přečte štítek, který dokument již nese, aby na něj mohly navazující kroky reagovat."
+
 [portal.policies.config.retention]
 summary = "Vynucuje, jak dlouho se dokumenty uchovávají, kdy se archivují a kdy se mažou."
 
@@ -7438,6 +8064,7 @@ title = "Zatím žádná aktivita"
 [portal.policies.endpoints]
 addWatermark = "Vodoznak"
 autoRedact = "Redigovat PII"
+classifyAndLabel = "Klasifikovat"
 compressPdf = "Komprimovat"
 flatten = "Sloučit vrstvy"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Vaše zásady jsou uloženy a zobrazí se po obnovení připojen
 retry = "Zkusit znovu"
 title = "Backend není dostupný"
 
+[portal.policies.operations]
+change = "Změnit, co tento krok provede"
+noResults = "Žádný krok tomu neodpovídá. Zkuste název produktu nebo „scan“, „notify“, „attach“."
+searchPlaceholder = "Hledat kroky – zkuste „scan“, „attach“ nebo název produktu"
+
+[portal.policies.operations.bodyMode]
+binary = "Nezpracované bajty souboru"
+json = "Uvnitř JSON payload"
+multipart = "Jako nahrání souboru (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Váš vlastní ClamAV server zkontroluje dokument; nic neopustí vaši síť."
+label = "Vyhledat viry (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Odmítá dokumenty obsahující makra, spustitelné soubory, skripty nebo vložené objekty."
+label = "Blokovat aktivní obsah"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive zkontroluje dokument a běh se zastaví, pokud není čistý."
+label = "Vyhledat viry"
+
+[portal.policies.operations.confluenceAttach]
+description = "Uloží zpracovaný dokument na stránku."
+label = "Připojit ke stránce Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Odešle dokument do ConsignO Cloud k podpisu."
+label = "Odeslat k podpisu (ConsignO)"
+note = "Odešle dokument. Načtení podepsané kopie zatím není podporováno, protože krok nemůže předat výsledek pozdějšímu kroku."
+
+[portal.policies.operations.customApiCall]
+description = "Vytvořte volání sami: cestu, metodu, tělo a zpracování odpovědi."
+label = "Volat vlastní API"
+
+[portal.policies.operations.discordNotify]
+description = "Informuje kanál, že zásada zpracovala dokument."
+label = "Odeslat zprávu do Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Zaznamená, co zásada provedla, jako prohledávatelný dokument."
+label = "Indexovat auditní událost v Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart se hodí pro upload API; JSON se hodí pro API, která chtějí soubor uvnitř payload; binary odesílá nezpracované bajty."
+label = "Jak odeslat dokument"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON tělo odeslané beze změny. {{document.base64}} obsahuje soubor; {{document.*}} a {{run.*}} se vyplní pro každý dokument."
+label = "JSON tělo"
+
+[portal.policies.operations.fields.connection]
+label = "Účet"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun doména"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Pole formuláře, pod kterým API očekává dokument."
+label = "Název pole souboru"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Od"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON objekt dvojic název/hodnota hlavičky. Přihlašovací údaje připojení se přidají automaticky."
+label = "Hlavičky"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Klíč issue"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Odesláno jako tělo zprávy. {{document.*}} a {{run.*}} se vyplní pro každý dokument."
+label = "Zpráva"
+
+[portal.policies.operations.fields.method]
+label = "Metoda"
+
+[portal.policies.operations.fields.pageId]
+label = "ID stránky"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Připojí se k základní URL připojení. Nikdy nemůže dosáhnout na jiného hostitele."
+label = "Cesta"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Kam jej na disku zapsat. {{document.filename}} se vyplní pro každý dokument."
+label = "Cílová cesta"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report ponechá dokument beze změny. Replace jej nahradí tím, co se vrátí."
+label = "Co udělat s odpovědí"
+
+[portal.policies.operations.fields.signerEmail]
+label = "E-mail podepisující osoby"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Předmět"
+placeholder = "Zpracováno: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyzuje tento text. Použijte {{document.title}} nebo vložte text, který chcete zkontrolovat."
+label = "Text ke kontrole"
+
+[portal.policies.operations.fields.to]
+label = "Komu"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Uživatelské jméno Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informuje prostor, že zásada zpracovala dokument."
+label = "Odeslat zprávu do Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Uloží zpracovaný dokument k issue."
+label = "Připojit k issue Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Odešle zpracovaný dokument jako přílohu."
+label = "Odeslat dokument e-mailem (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Zapíše zpracovaný dokument do složky."
+label = "Nahrát do Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Váš vlastní Presidio server nahlásí osobní údaje, které najde."
+label = "Detekovat osobní údaje"
+note = "Presidio čte text, ne soubory. Zadejte text, který chcete zkontrolovat — samotný dokument se nenahrává."
+
+[portal.policies.operations.responseMode]
+replace = "Nahradit dokument odpovědí"
+report = "Ponechat dokument, zaznamenat odpověď"
+
+[portal.policies.operations.sendgridEmail]
+description = "Odešle zpracovaný dokument jako přílohu."
+label = "Odeslat dokument e-mailem (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informuje kanál, že zásada zpracovala dokument."
+label = "Odeslat zprávu do Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Zaznamená, co zásada provedla, tam, kde vaši auditoři už hledají."
+label = "Odeslat auditní událost do Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Zaznamená, co zásada provedla, do HTTP kolektoru."
+label = "Odeslat auditní událost do Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Informuje kanál, že zásada zpracovala dokument."
+label = "Odeslat zprávu do Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Odešle samotný dokument na URL, kterou zvolíte."
+label = "Odeslat dokument do webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Předá podrobnosti běhu vaší automatizaci."
+label = "Spustit Zap nebo scénář Make"
+
 [portal.policies.stats]
 activeFor = "Aktivní"
 dataProcessed = "Zpracovaná data"
@@ -7473,6 +8277,13 @@ label = "Vynucené dokumenty"
 description = "Nakonfigurováno, ale nespouští se"
 label = "Pozastaveno"
 
+[portal.policies.table]
+appliesTo = "Platí pro"
+docs = "Vynucené dokumenty"
+enforces = "Vynucuje"
+policy = "Zásada"
+status = "Stav"
+
 [portal.policies.wizard.actions]
 back = "Zpět"
 cancel = "Zrušit"
@@ -7480,6 +8291,10 @@ continue = "Pokračovat"
 enablePolicy = "Povolit zásadu"
 saveChanges = "Uložit změny"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifikuje typ dokumentu podle štítků vašeho týmu a označí jej, aby se zařazoval a vyhledával podle kategorie."
+label = "Klasifikovat dokument"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimuje dokument na menší velikost souboru."
 label = "Zmenšit velikost souboru"
@@ -7500,10 +8315,18 @@ label = "Redigovat citlivé informace"
 desc = "Odstraní skrytý JavaScript, aby se při otevření dokumentu nemohlo nic automaticky spustit."
 label = "Odstranit aktivní obsah"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Prokazuje, že dokument existoval přesně v této podobě v daném okamžiku, pomocí nezávislé autority časových razítek. Odešle se pouze hash – dokument nikdy neopustí váš server."
+label = "Přidat důvěryhodné časové razítko"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Přidá viditelné označení (např. „Důvěrné“) přes každou stránku."
 label = "Použít vodoznak"
 
+[portal.policies.wizard.classification]
+description = "Každý nahraný dokument je klasifikován podle vestavěných štítků a označen typy, které odpovídají. Sada štítků je sdílena napříč celým vaším týmem."
+labelsHeading = "Klasifikační štítky"
+
 [portal.policies.wizard.errors]
 noTools = "Nejprve povolte ve workflow alespoň jeden nástroj."
 saveFailed = "Zásadu se nepodařilo uložit. Zkuste to prosím znovu."
@@ -7548,73 +8371,118 @@ setUp = "Nastavit zásadu {{category}}"
 [portal.policies.wizard.workflow]
 description = "Vyberte, co tato zásada provede s každým dokumentem, který zpracuje."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktivních"
-noRule = "Zatím není vynuceno žádné pravidlo"
-subtitle = "Trvalé automatizace, kterými prochází každý dokument bez ohledu na to, která pipeline jej zpracovává."
-title = "Co se spouští na vašich PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Upgradovat na Enterprise"
-configure = "Konfigurovat"
 setUp = "Nastavit"
 
-[portal.policySummary.column]
-activeRule = "Aktivní pravidlo"
-policy = "Zásada"
-status = "Stav"
+[portal.processorFlow]
+footnote = "Počty jsou za posledních 24 hodin. Rychlost toku je ilustrační."
+liveBadge = "Živě"
+stats = "{{connected}} připojeno · zpracováno {{processed}} PDF souborů"
+title = "Procesor PDF"
 
-[portal.policySummary.empty]
-description = "Jakmile budou zásady nakonfigurovány, kategorie se zobrazí zde."
-title = "Zatím žádné zásady"
+[portal.processorFlow.lens]
+ariaLabel = "Režim zobrazení"
+flow = "Tok"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktivní"
-off = "Vypnuto"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Selhalo"
+heading = "Výsledky"
+success = "Doručeno"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktivní"
+count = "{{n}} · 24 h"
+heading = "Zásady"
+setUp = "Nastavit"
 soon = "Brzy"
 
-[portal.processingStatus]
-managePlan = "Spravovat plán"
-volumeSuffix = "PDFs zpracováno · posledních 30 dní"
+[portal.processorFlow.sankey]
+waist = "Zásady · {{n}} aktivní"
+
+[portal.processorFlow.sankey.empty]
+description = "Připojte zdroj a zapněte zásadu, abyste mohli sledovat tok dokumentů procesorem."
+title = "Zatím žádný tok"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Připojit"
+editor = "Stirling PDF Editor"
+heading = "Zdroje"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Příjem e-mailů"
 
 [portal.procurement]
-reset = "Resetovat pořízení (demo)"
 subtitle = "Nechte svůj tým vyhodnotit, uzavřít smlouvu a zahájit používání. Každý dokument na jednom místě."
 title = "Pořízení"
 
-[portal.procurement.action]
-download = "Stáhnout"
-pay = "Zaplatit nyní"
-request = "Vyžádat"
-sign = "Zkontrolovat a podepsat"
-upload = "Nahrát"
-
 [portal.procurement.agreement]
 agreeCta = "Souhlasit a předplatit"
+confidential = "Důvěrné"
 confirm = "Přečetl(a) jsem si smlouvu Stirling Enterprise Agreement a souhlasím s ní."
-eyebrow = "Smlouva"
-intro = "Jedna kombinovaná smlouva pokrývá vaši dohodu: hlavní servisní smlouvu, objednávkový formulář, EULA a smlouvu o zpracování dat. Zkontrolujte ji a poté souhlasem přijměte nabídku jako závazné předplatné."
-title = "Zkontrolujte svou enterprise smlouvu"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA a DPA, sloučené do jednoho podpisu."
+download = "Stáhnout"
+downloadDraftError = "Nepodařilo se vygenerovat PDF dohody – renderer dokumentů není dostupný. Zkuste to prosím brzy znovu nebo kontaktujte podporu."
+downloadError = "Nepodařilo se stáhnout podepsanou dohodu. Zkuste to prosím znovu."
+legalName = "Název právnické osoby"
+legalNamePlaceholder = "Právnická osoba, která bude podepisovat"
+loadError = "Dohodu se nepodařilo načíst. Zkuste to prosím znovu."
+loading = "Načítání dohody..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Požádat o změny"
+scrollHint = "Posuňte pro kontrolu"
+signatory = "Jméno podepisující osoby"
+signatoryPlaceholder = "Celé jméno"
+signatoryTitle = "Funkce podepisující osoby"
+signatoryTitlePlaceholder = "např. General Counsel"
+signError = "Nepodařilo se zaznamenat váš podpis. Zkuste to prosím znovu."
 
 [portal.procurement.builder]
 addons = "Doplňky"
+addressLine1 = "Řádek adresy 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Řádek adresy 2"
+addressLine2Placeholder = "Apartmá, patro, budova"
 back = "Zpět"
 businessName = "Název firmy"
 businessNamePlaceholder = "Vaše společnost"
+city = "Město"
+cityPlaceholder = "San Francisco"
+completeRequired = "Před vygenerováním nabídky prosím vyplňte povinná pole (označená *) platným e-mailem."
+contactEmail = "Kontaktní e-mail"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kontaktní jméno"
+contactNamePlaceholder = "Jane Doe"
 continue = "Pokračovat"
-country = "Země"
-countryEuro = "Eurozóna (EUR €)"
-countryUK = "Spojené království (GBP £)"
-countryUS = "Spojené státy (USD $)"
+done = "Hotovo"
 eula = "Přečetl(a) jsem si Stirling Enterprise EULA a souhlasím s ní. Řídí smlouvu vygenerovanou z této nabídky."
 generate = "Vygenerovat nabídku"
-included = "Zahrnuto"
 indemnification = "Odškodnění za IP nároky"
 indemnificationSub = "Bráníme kvalifikované IP nároky podle EULA"
-offlineLicense = "Offline / air-gapped licence"
-offlineLicenseSub = "Stažitelný licenční soubor pro air-gapped self-hosted instanci"
+paperEyebrow = "Enterprise nabídka"
+paperFor = "Připraveno pro"
+pdfSize = "Velikost PDF"
+poNumber = "Číslo PO"
+poNumberPlaceholder = "Volitelné"
+postalCode = "PSČ"
+postalCodePlaceholder = "94105"
+posture = "Správa"
+posture_count = "~{{count}} zásad"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Klasifikace + sdílení — výchozí nastavení"
+posture_governed = "Governed"
+posture_governedSub = "Přidává zabezpečení a směrování"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Každá kategorie — Compliance, Retention, Ingestion"
 qbr = "Čtvrtletní obchodní hodnocení"
 qbrSub = "Váš SE každý kvartál zkontroluje používání a roadmapu"
+region = "Stát / region"
+regionPlaceholder = "California"
 running = "{{annual}} / rok · {{years}}leté {{tcv}}"
 s1Sub = "Váš tým a PDFs, které očekáváte zpracovat každý rok."
 s1Title = "Kolik toho budete zpracovávat?"
@@ -7623,6 +8491,12 @@ s2Title = "Závazek a služba"
 s3Sub = "Pro nabídku a smlouvu, kterou vygeneruje."
 s3Title = "Vaše údaje"
 serviceLevel = "Úroveň služby"
+size_compact = "Kompaktní"
+size_compactSub = "Převážně text, méně než 1 MB"
+size_heavy = "Velké"
+size_heavySub = "Skenované nebo s velkým množstvím obrázků, 5 MB+"
+size_standard = "Standardní"
+size_standardSub = "Smíšený text a obrázky, 1 až 5 MB"
 slDedicated = "Dedikovaná"
 slDedicatedSub = "4 pracovní hodiny · dedikovaný account manager · +30 %"
 slPriority = "Prioritní"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Stejný pracovní den · jmenovaný CSM · +15 %"
 slStandard = "Standardní"
 slStandardSub = "Následující pracovní den · sdílený CSM · zahrnuto"
 stepOf = "Krok {{n}} z {{total}}"
+taxId = "DIČ / Tax ID"
+taxIdPlaceholder = "Volitelné"
 term = "Období"
 termDiscount = "Uplatněna sleva {{pct}} % za víceletý závazek"
 title = "Sestavte svou nabídku"
@@ -7637,6 +8513,7 @@ training = "Onboarding a školení"
 trainingSub = "Živé relace, aby se váš tým rychle rozběhl"
 users = "Celkový počet uživatelů"
 usersPlaceholder = "např. 250"
+viewEula = "Přečíst"
 volEstimated = "Odhadnuto z {{count}} uživatelů (~2 000 PDFs na každého, včetně automatizace). Upravte, pokud máte přesnější údaj."
 volManual = "Používá se váš údaj. Kdykoli můžete znovu odhadnout podle velikosti týmu."
 volNoUsers = "Nejste si jisti? Zadejte velikost týmu a my to odhadneme."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "např. 1 000 000"
 years_one = "{{count}} rok"
 years_other = "{{count}} let"
 
-[portal.procurement.docs]
-count_one = "{{count}} dok."
-count_other = "{{count}} dok."
-done = "Hotovo"
-here = "Jste zde"
-hide = "Skrýt"
-optional = "Volitelné"
-paidAddon = "Placený doplněk"
-show = "Zobrazit"
-subtitle = "Vše, co potřebujete v každém kroku cesty, zobrazené podle toho, jak se dohoda posouvá."
-supportingSubtitle = "SOC 2, bezpečnostní prověrky, daňové formuláře a další, připravené, když se váš bezpečnostní nebo nákupní tým zeptá. Některé mají jednorázový poplatek."
-supportingTitle = "Podpora vašeho vyhodnocení"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form a DPA v jednom podpisu."
+download = "Stáhnout"
+eula = "EULA a obchodní podmínky"
+eulaSub = "Software a samoobslužné obchodní podmínky."
+invoice = "Faktura"
+invoiceSub = "Vaše první faktura za předplatné."
+laterInvoice = "Dostupné po přijetí"
+laterQuote = "Dostupné po vystavení vaší nabídky"
+quote = "Nabídka"
+quoteSub = "Vaše položková enterprise nabídka."
+sla = "SLA příloha"
+slaSub = "Úrovně podpory a cílové doby odezvy."
+subprocessors = "Subprocesory"
+subprocessorsSub = "Třetí strany, které zpracovávají data vaším jménem."
+subtitle = "Vaše dokumentace k obchodu, dostupná kdykoli."
 title = "Dokumenty"
-upcoming = "Nadcházející"
+view = "Zobrazit"
 
 [portal.procurement.error]
 title = "Něco se pokazilo"
 
 [portal.procurement.hero]
-company = "Vaše enterprise dohoda"
+barAria = "Fáze {{current}} z {{total}}"
 ctaAgreement = "Zkontrolovat a podepsat smlouvu"
-ctaLive = "Jste live"
-ctaPayment = "Přidat platbu"
+ctaExploring = "Nastavit zkušební verzi"
 ctaQuote = "Zkontrolovat nabídku"
+ctaReviewQuote = "Zkontrolovat nabídku"
 ctaTrial = "Sestavit nabídku"
+documents = "Dokumenty"
 eyebrow = "Enterprise pořízení"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Pozvat členy týmu"
-keyDocs = "Klíčové dokumenty"
-nextStep = "Další krok: {{action}}"
-notStarted = "Nezahájeno"
+licenseKey = "Licenční klíč"
+liveSub = "Vaše organizace je zprovozněna a vaše licence je aktivní."
+liveTitle = "Jste živě na Stirling Enterprise"
+next = "Další: {{stage}}"
 open = "Otevřít pořízení"
 scheduleCall = "Naplánovat hovor"
-setup1Sub = "Pozvěte členy svého týmu"
-setup1Title = "Nasadit PDF Editor"
-setup2Sub = "Zapněte zpracování napříč editory a dalšími zdroji"
-setup2Title = "Připojit PDF Processor"
-setup3Sub = "Zapněte zabezpečení, soulad, směrování nebo uchovávání, když je potřebujete"
-setup3Title = "Přidat doporučené zásady"
+sentenceAgreement = "zkontrolujte a podepište dohodu"
+sentenceLive = "zprovoznění a nasazení"
+sentencePayment = "objednávka a platba"
+sentenceQuote = "zkontrolujte a přijměte svou nabídku"
+sentenceTrial = "nastavte svůj zkušební pracovní prostor"
 
 [portal.procurement.journey]
 daysLeft_one = "Zbývá {{count}} den"
 daysLeft_other = "Zbývá {{count}} dní"
-engineerLabel = "Váš solutions engineer"
-eyebrow = "Vaše zavádění"
-live = "Jste live na Stirling Enterprise"
-nextStep = "Další krok: {{action}}"
-subtitle = "Váš solutions engineer je u každého kroku. Vždy jedna další akce; úplný kontrolní seznam je níže."
-title = "Od trialu po live provoz, jedna vedená cesta"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Jeden podpis pokrývá MSA, objednávkový formulář, EULA a DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Offline licenční soubor zatím nešlo vygenerovat — zkuste
 downloadOffline = "Stáhnout offline licenci (.lic)"
 hint = "Vložte tento klíč do self-hosted instance pro její aktivaci, nebo si ho ponechte pro své záznamy. Uchovejte ho v bezpečí."
 label = "Váš licenční klíč"
+subtitle = "Aktivujte self-hosted instanci tímto klíčem nebo si jej ponechte pro své záznamy."
+title = "Váš licenční klíč"
+trialFileHint = "Toto je váš soubor zkušební licence. Jakmile bude vaše dohoda uzavřena, vraťte se a stáhněte si jej znovu — na rozdíl od online licenčního klíče se soubor .lic sám neaktualizuje."
 
 [portal.procurement.link]
 cta = "Propojit účet"
@@ -7739,65 +8619,62 @@ description = "Vaše předplatné je aktivní a licence byla vydána. Váš tým
 eyebrow = "Live"
 title = "Jste live na Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Trial klíče, nabídky se závazným objemem, smlouva s jedním podpisem, platba a váš registr dokumentů budou všechny zde, jakmile zahájíte enterprise vyhodnocení."
-eyebrow = "Pouze Enterprise"
-talkToSales = "Kontaktovat prodej"
-title = "Proces pořízení se otevírá s Enterprise"
-
 [portal.procurement.milestone]
-accept = "Přijmout a pokračovat"
-description = "Stáhněte PDF a sdílejte ho se svým týmem, vraťte se přijmout nabídku, až budete připraveni, nebo proveďte změny."
-download = "Stáhnout PDF"
 downloadError = "PDF nabídky zatím nešlo stáhnout — zkuste to prosím za chvíli znovu."
-edit = "Upravit nabídku"
-eyebrow = "Nabídka {{number}}"
-perYear = " / rok"
-preparedFor = "Připraveno pro {{company}}"
-tcv = "{{value}} celková hodnota smlouvy"
-title = "Vaše nabídka je připravena"
-
-[portal.procurement.modal]
-cancel = "Zrušit"
-chooseFile = "Vybrat soubor"
-close = "Zavřít"
-downloadBody = "Stahování brzy začne."
-downloadCta = "Stáhnout"
-downloadTitle = "Stáhnout"
-noFile = "Není vybrán žádný soubor"
-payBody = "Zaplaťte svůj závazný kontrakt kartou nebo bankovním převodem přes Stripe. Váš workspace se zřídí, jakmile bude platba připsána."
-payCta = "Pokračovat na Stripe"
-payTitle = "Potvrdit platbu"
-requestBodyFree = "Vygenerujeme to na vyžádání. Potvrďte a váš solutions engineer vám to brzy pošle."
-requestBodyPaid = "Toto je placený doplněk. Potvrďte a váš solutions engineer ho nacení a pošle dokumenty."
-requestCta = "Vyžádat"
-requestTitle = "Vyžádat tento dokument"
-signBody = "Otevře Stirling Enterprise Agreement pro e-podpis: jeden podpis pokrývá MSA, objednávkový formulář, EULA a DPA. Automaticky připojíme podpis za nás a postoupíte k platbě."
-signCta = "Otevřít k podpisu"
-signTitle = "Zkontrolujte a podepište svou smlouvu"
-uploadBody = "Pošlete nám svou PO a vystavíme fakturu podle vašich podmínek. Přetáhněte PDF nebo vyberte soubor níže."
-uploadCta = "Nahrát nákupní objednávku"
-uploadTitle = "Nahrát nákupní objednávku"
 
 [portal.procurement.payment]
 description = "Vaše nabídka je přijata a vaše licence je už aktivní — váš tým může začít hned. Zaplaťte první fakturu, až budete připraveni; můžete ji zaplatit nebo stáhnout zde, bez nutnosti e-mailu."
+downloadAgreement = "Stáhnout podepsanou dohodu"
 downloadInvoice = "Stáhnout fakturu"
-simulate = "Simulovat přijetí platby (demo)"
+eyebrow = "Platba"
 title = "Předplatné vytvořeno"
 viewInvoice = "Zobrazit a zaplatit fakturu"
 
+[portal.procurement.review]
+acceptCta = "Přijmout nabídku"
+annual = "Roční poplatek (rok 1)"
+downloadCta = "Stáhnout nabídku"
+poNumber = "Objednávka: {{po}}"
+renewal = "Obnovuje se za {{amount}}/rok po skončení období (+{{pct}} % CPI)"
+tcv = "{{years}}leté období, zaplaceno celé předem: {{tcv}}"
+validUntil = "Platné do {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Plánovač se nepodařilo načíst."
 fallbackLink = "Otevřít plánování v nové kartě"
+loading = "Načítání plánovače..."
 subtitle = "Váš solutions engineer provede váš tým zavedením. Vyberte čas, který vám vyhovuje."
 title = "Naplánovat hovor"
 
-[portal.procurement.status]
-action = "Vyžadována akce"
-available = "Dostupné"
-complete = "Dokončeno"
-pending = "Čeká"
-request = "Na vyžádání"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Uzavřené, bez odchozí komunikace"
+back = "Zpět"
+businessName = "Název firmy"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Spravované, nejrychlejší start"
+continue = "Pokračovat"
+deployment = "Kam se má nasadit?"
+eula = "Souhlasím se Stirling EULA a obchodními podmínkami."
+fullName = "Celé jméno"
+fullNamePlaceholder = "Vaše jméno"
+invites = "Pozvat spolupracovníky · volitelné"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Naplánovat hovor"
+seats = "Testující osoby"
+seatsPlaceholder = "např. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker nebo Kubernetes"
+start = "Spustit zkušební verzi"
+stepOf = "Krok {{n}} z {{total}}"
+subtitle = "Zdarma na 14 dní, karta není potřeba."
+subtitleDetails = "Několik údajů pro vaši nabídku a dohodu."
+talkFirst = "Chcete si nejdřív promluvit?"
+title = "Nastavte svou zkušební verzi"
+viewEula = "Přečíst"
+workEmail = "Pracovní e-mail"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Prodloužení přidá 7 dní a upozorní vašeho solutions engineera."
@@ -7808,20 +8685,6 @@ maxed = "Vyčerpáno"
 subtitle = "Váš bezplatný trial běží do {{date}}. Karta není vyžadována."
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Ceny podle závazného objemu, SSO + SCIM + RBAC v celé organizaci, 90denní neměnný audit a dedikovaný SE."
-homeCta = "Spustit Trial →"
-homeHeadline = "Zpracovávejte miliony PDFs."
-
-[portal.recentActivity]
-title = "Nedávná aktivita"
-viewAll = "Zobrazit vše"
-
-[portal.recentActivity.empty]
-description = "Zde se zobrazí běhy pipeline, nasazení a události agentů."
-title = "Zatím zde nic není"
-
 [portal.search]
 ariaLabel = "Hledat"
 placeholder = "Hledat ve Stirling — endpointy, pipeline, dokumentace…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Propojení účtu"
 
-[portal.shell.header]
-accountFallback = "Účet"
-accountMenu = "Nabídka účtu"
-darkMode = "Tmavý režim"
-lightMode = "Světlý režim"
-search = "Hledat"
-searchPlaceholder = "Hledat…"
-signOut = "Odhlásit se"
-switchToDark = "Přepnout na tmavé téma"
-switchToLight = "Přepnout na světlé téma"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dok."
 linkAccount = "Propojit účet Stirling"
-planEditor = "Plán Editor"
-planEnterprise = "Plán Enterprise"
-planProcessor = "Plán Processor"
 primaryNav = "Primární navigace"
 switchApp = "Přepnout aplikaci"
 
+[portal.shell.topbar]
+closeNav = "Zavřít navigaci"
+openNav = "Otevřít navigaci"
+search = "Hledat"
+
 [portal.sources]
 subtitle = "Opakovaně použitelná vstupní připojení, která posílají dokumenty do Stirling. Nakonfigurujte připojení jednou a poté ho použijte v libovolném počtu zásad. Kliknutím na řádek zobrazíte jeho konfiguraci a zásady, které ho používají."
 title = "Zdroje"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Připojit zdroj"
 
+[portal.sources.builder]
+back = "Zpět na zdroje"
+backToTypes = "Všechny typy zdrojů"
+cancel = "Zrušit"
+chooseHint = "Vyberte, odkud dokumenty pocházejí. Zašedlé konektory jsou na cestě."
+comingSoon = "Již brzy"
+comingSoonHeading = "Již brzy"
+create = "Vytvořit zdroj"
+createTitle = "Připojit zdroj"
+delete = "Smazat"
+editTitle = "Upravit zdroj"
+enabled = "Povoleno"
+save = "Uložit změny"
+
+[portal.sources.builder.folderAccess]
+description = "Automatizace složek mohou používat pouze složky, které povolil správce. Přidejte ji v nastavení přístupu ke složkám a zkuste to znovu."
+openSettings = "Nastavení přístupu ke složkám"
+title = "Tato složka není povolena"
+
 [portal.sources.delete]
 body = "Odstranit „{{name}}“? Tuto akci nelze vrátit zpět. Zásady, které na něj odkazují, bude potřeba aktualizovat."
 cancel = "Zrušit"
 confirm = "Odstranit"
 title = "Odstranit zdroj?"
 
-[portal.sources.detail]
-closeAriaLabel = "Zavřít detail"
-delete = "Odstranit zdroj"
-docs24h = "Posledních 24 h"
-docs30d = "Posledních 30 dní"
-docsTotal = "Celkem viděno"
-docsTrend = "Dokumenty za posledních 30 dní"
-documents = "Dokumenty"
-edit = "Upravit"
-notReferenced = "Neodkazuje na něj žádná zásada, takže je bezpečné ho odstranit."
-pause = "Pozastavit"
-resume = "Obnovit"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Používáno v"
-
 [portal.sources.empty]
 description = "Připojte složku (a brzy i cloudové úložiště), aby vaše zásady měly odkud dokumenty načítat."
 title = "Zatím nejsou připojeny žádné zdroje"
@@ -7899,18 +8754,57 @@ inUse = "Používá se"
 total = "Připojení"
 unused = "Nepoužito"
 
+[portal.sources.networkFields.connection]
+helperText = "Uložené připojení s adresou serveru a přihlašovacími údaji. Znovu se používá každým zdrojem, který na něj odkazuje."
+label = "Připojení"
+
+[portal.sources.networkFields.directory]
+helperText = "Složka na serveru ke kontrole, relativní k domovské složce přihlášení nebo kořeni sdílení. Pro kořen ponechte prázdné."
+label = "Složka"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume odstraní každý soubor ze serveru poté, co jej zpracuje každá zásada."
+label = "Režim čtení"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: zpracovat každý soubor jednou"
+snapshot = "Snapshot: znovu načíst složku při každém spuštění"
+
+[portal.sources.networkFields.recursive]
+label = "Hloubka složky"
+
+[portal.sources.networkFields.recursive.options]
+all = "Zahrnout podsložky"
+top = "Pouze nejvyšší úroveň"
+
 [portal.sources.status]
 active = "Aktivní"
 disabled = "Zakázáno"
 unused = "Nepoužito"
 
 [portal.sources.table]
+documents = "Dokumenty"
 source = "Zdroj"
 status = "Stav"
 usedBy = "Zásady"
 
+[portal.sources.types.box]
+description = "Načítejte dokumenty ze složek Box, které váš tým již sdílí."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Načítejte dokumenty ze sdílené složky Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenty, které váš tým zpracoval v editoru, napříč běhy zásad a AI."
 label = "Editor"
+noPolicies = "Z editoru zatím neběžely žádné zásady."
+
+[portal.sources.types.email]
+description = "Převádějte přílohy odeslané do vyhrazené schránky na dokumenty."
+label = "E-mailová schránka"
 
 [portal.sources.types.folder]
 description = "Sledovat adresář na serveru pro nové dokumenty."
@@ -7943,25 +8837,80 @@ label = "Hloubka složky"
 all = "Zahrnout podsložky"
 top = "Pouze nejvyšší úroveň"
 
+[portal.sources.types.ftp]
+description = "Kontrolujte složku FTP nebo FTPS serveru na nové dokumenty."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Načítejte dokumenty ze sdílených složek Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Sledujte SMB síťové sdílení pro nové dokumenty."
+label = "Síťový disk"
+
+[portal.sources.types.onedrive]
+description = "Sledujte složky OneDrive pro nové dokumenty."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Načítejte dokumenty z bucketu Amazon S3 nebo S3-kompatibilního bucketu."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Uložené připojení obsahující bucket a přihlašovací údaje. Znovu se používá každým zdrojem a výstupem pipeline, který na něj odkazuje."
+label = "Připojení"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume odstraní každý objekt z bucketu poté, co jej zpracuje každá zásada."
+label = "Režim čtení"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: zpracovat každý objekt jednou"
+snapshot = "Snapshot: znovu načíst bucket při každém spuštění"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Zpracují se pouze objekty, jejichž klíče začínají tímto prefixem."
+label = "Prefix klíče"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Kontrolujte SFTP drop složku na nové dokumenty."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Načítejte dokumenty z knihoven dokumentů SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Zdroj"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL a podpisový tajný klíč se vygenerují při vytvoření tohoto webhook. Odesílatelé POST dokumenty na tuto URL a odkazující zásady se spustí při přijetí."
+description = "Přijímejte dokumenty podepsaným HTTP POST z libovolného externího systému."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Podpisový tajný klíč se zobrazí jednou, při vytvoření webhook. Pro jeho obměnu zdroj znovu vytvořte."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopírovat"
+done = "Hotovo"
+secret = "Podpisový tajný klíč"
+secretHelp = "Podepište nezpracované tělo každého doručení tímto klíčem (HMAC-SHA256) a odešlete jej jako hlavičku X-Stirling-Signature."
+secretWarning = "Zkopírujte podpisový tajný klíč nyní. Kvůli vaší bezpečnosti se zobrazí pouze jednou a později jej nelze získat."
+title = "Webhook vytvořen"
+url = "Delivery URL"
+usage = "Odešlete každý dokument metodou POST jako nezpracované tělo požadavku na delivery URL s binárním typem obsahu (application/pdf nebo application/octet-stream). Odkazující zásady se při přijetí spustí automaticky."
+
 [portal.sources.wizard]
-back = "Zpět"
-cancel = "Zrušit"
-continue = "Pokračovat"
-editTitle = "Upravit zdroj"
 name = "Název"
 namePlaceholder = "např. Příjem škodních událostí"
-save = "Uložit změny"
-subtitle = "Krok {{current}} z {{total}} · {{label}}"
-title = "Připojit zdroj"
 type = "Typ"
 
-[portal.sources.wizard.steps]
-chooseType = "Vybrat typ"
-configure = "Konfigurovat"
-review = "Zkontrolovat a připojit"
+[portal.stepModal]
+close = "Zavřít"
 
 [portal.usage]
 managePayment = "Spravovat platbu"
@@ -8021,16 +8970,9 @@ summary = "Vlastní tým — spravuje prostředky jeho členů a sdílené konfi
 2 = "Přístup k portálu přes výchozí zásadu"
 3 = "Vše, co může člen"
 
-[portal.welcome]
-ariaLabel = "Vítejte ve Stirling PDF"
-badge = "Open-source"
-installEditor = "Nainstalovat Editor"
-inviteTeammates = "Pozvat členy týmu"
-openInBrowser = "Otevřít v prohlížeči"
-perks = "Navždy zdarma · Self-hostable"
-subtitle = "Nejbezpečnější PDF Editor na světě je zdarma pro týmy všech velikostí. Zahrnuje 60+ PDF operací a SSO."
-title = "Vítejte v"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Neomezeně"
 
 [printFile]
 title = "Tisk souboru"
@@ -8613,6 +9555,14 @@ text = "Otočte stránky PDF po nebo proti směru hodinových ručiček v krocí
 [rotate.tooltip.header]
 title = "Přehled nastavení otáčení"
 
+[ruler]
+clearAll = "Vymazat vše"
+hideAllLabels = "Skrýt všechny popisky"
+hideSmallLabels = "Skrýt malé popisky"
+physicalValues = "Fyzické"
+scaled = "Škálované"
+showAllLabels = "Zobrazit všechny popisky"
+
 [sanitize]
 desc = "Odstraňte potenciálně škodlivé prvky ze souborů PDF."
 sanitizationResults = "Výsledky vyčištění"
@@ -8654,31 +9604,45 @@ label = "Odstranit metadata XMP"
 [sanitize.steps]
 settings = "Nastavení"
 
-[sanitizePdf]
-tags = "vyčistit,zabezpečit,bezpečný,odstranit-hrozby"
-
 [sanitizePDF]
 title = "Sanitizovat PDF"
 
+[sanitizePdf]
+tags = "vyčistit,zabezpečit,bezpečný,odstranit-hrozby"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Upravit měřítko stránky"
 
+[scaleSettings]
+activeScale = "Aktivní měřítko"
+apply = "Použít měřítko"
+applyCalibration = "Použít kalibraci"
+calculatedScale = "Vypočtené měřítko"
+calibrate = "Kalibrovat"
+calibrating = "Kalibrace"
+calibrationDistanceRequired = "Zadejte skutečnou vzdálenost větší než nula"
+calibrationInvalid = "Z tohoto měření nelze vypočítat měřítko"
+calibrationPaperDistance = "Naměřená vzdálenost na stránce: {{distance}}"
+calibrationTitle = "Kalibrovat měřítko"
+calibrationTooltip = "Změřte známou vzdálenost pro automatický výpočet měřítka"
+customScale = "Vlastní měřítko"
+noneSet = "Není nastaveno žádné vlastní měřítko"
+presets = "Přednastavená měřítka"
+ratio = "Poměr měřítka"
+ratioHelp = "Poměr: 1 jednotka stránky = X skutečných jednotek"
+ratioPlaceholder = "např. 100"
+ratioPositive = "Poměr musí být větší než nula"
+ratioRequired = "Poměr je povinný"
+realDistance = "Skutečná vzdálenost"
+realDistancePlaceholder = "např. 5"
+reset = "Obnovit výchozí nastavení"
+unit = "Jednotka"
+unitInvalid = "Neplatná jednotka: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Prahová hodnota úhlu:"
-10 = "Nastaví velikost okraje přidaného a odebraného k zabránění bílých okrajů ve výstupu (výchozí: 1)."
-2 = "Nastaví minimální absolutní úhel požadovaný pro otočení obrázku (výchozí: 10)."
-3 = "Tolerance:"
-4 = "Určuje rozsah barevné variace kolem odhadované barvy pozadí (výchozí: 30)."
-5 = "Minimální plocha:"
-6 = "Nastaví minimální prahovou hodnotu plochy pro fotografii (výchozí: 10000)."
-7 = "Minimální plocha obrysu:"
-8 = "Nastaví minimální prahovou hodnotu plochy obrysu pro fotografii"
-9 = "Velikost okraje:"
-
 [scannerImageSplit]
 submit = "Extrahovat obrazové skeny"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Co to dělá"
 whatThisDoesDesc = "Automaticky najde a vyextrahuje každou fotografii ze skenované stránky nebo složeného obrázku — bez ručního ořezávání."
 whenToUse = "Kdy použít"
 
+[ScannerImageSplit.selectText]
+1 = "Prahová hodnota úhlu:"
+10 = "Nastaví velikost okraje přidaného a odebraného k zabránění bílých okrajů ve výstupu (výchozí: 1)."
+2 = "Nastaví minimální absolutní úhel požadovaný pro otočení obrázku (výchozí: 10)."
+3 = "Tolerance:"
+4 = "Určuje rozsah barevné variace kolem odhadované barvy pozadí (výchozí: 30)."
+5 = "Minimální plocha:"
+6 = "Nastaví minimální prahovou hodnotu plochy pro fotografii (výchozí: 10000)."
+7 = "Minimální plocha obrysu:"
+8 = "Nastaví minimální prahovou hodnotu plochy obrysu pro fotografii"
+9 = "Velikost okraje:"
+
 [search]
 noResults = "Nebyly nalezeny žádné výsledky"
 placeholder = "Zadejte hledaný výraz..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Váš server Stirling-PDF je offline a \"{{endpoint}}
 [session]
 expired = "Vaše relace vypršela. Obnovte prosím stránku a zkuste to znovu."
 
-[sessionManagement.tooltip]
-header = "Správa relací podepisování"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Noví účastníci jsou přidáni na konec pořadí podpisů"
-bullet2 = "Po dokončení relace nelze účastníky přidávat"
-bullet3 = "Každý účastník dostane oznámení, když je na řadě"
-description = "Do aktivní relace můžete kdykoli před dokončením přidat další účastníky."
-title = "Přidávání účastníků"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Plné dokončení</b>: Všichni účastníci podepsali"
-bullet2 = "<b>Částečné dokončení</b>: Někteří účastníci ještě nepodepsali"
-bullet3 = "Nepodepsaní účastníci budou z finálního dokumentu vynecháni"
-bullet4 = "Po dokončení můžete načíst podepsané PDF mezi aktivní soubory"
-description = "Dokončení sloučí všechny podpisy do jednoho podepsaného PDF. Tuto akci nelze vrátit."
-title = "Dokončení relace"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Nelze odebrat účastníky, kteří již podepsali"
-bullet2 = "Odebraní účastníci již nebudou dostávat oznámení"
-bullet3 = "Pořadí podpisů se automaticky upraví"
-description = "Účastníky lze z relací odebrat předtím, než podepíší."
-title = "Odebírání účastníků"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Každý podpis je na PDF aplikován postupně"
-bullet2 = "Pozdější podepisující vidí dřívější podpisy"
-bullet3 = "Zásadní pro schvalovací procesy a právní řetězce předání"
-description = "Pořadí, které určíte při vytvoření relace, určuje, kdo podepisuje jako první."
-title = "Pořadí podpisů"
-
 [settings]
 close = "Zavřít"
 
+[settings.ai]
+documents = "Dokumenty a RAG"
+general = "Obecné"
+limits = "Limity a výkon"
+models = "Modely a poskytovatelé"
+title = "AI"
+
 [settings.configuration]
 advanced = "Pokročilé"
 database = "Databáze"
 endpoints = "Endpoints"
 features = "Funkce"
+folderAccess = "Přístup ke složkám"
 mcp = "MCP Server"
 storageSharing = "Ukládání souborů a sdílení"
 systemSettings = "Systémová nastavení"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Výchozí editor PDF"
 defaultPdfEditorActive = "Stirling PDF je váš výchozí editor PDF"
 defaultPdfEditorChecking = "Kontrola..."
 defaultPdfEditorInactive = "Jiná aplikace je nastavena jako výchozí"
+defaultPdfEditorRemind = "Připomenout nastavení jako výchozí"
+defaultPdfEditorRemindDescription = "Zobrazit banner, když Stirling PDF není vaše výchozí aplikace pro PDF."
 defaultPdfEditorSet = "Již výchozí"
 defaultStartupView = "Výchozí zobrazení při spuštění"
 defaultStartupViewDescription = "Zvolte, která karta bude při spuštění aplikace aktivní v levém sloupci"
@@ -8817,9 +9771,18 @@ languageDescription = "Zvolte zobrazovaný jazyk"
 logout = "Odhlásit se"
 setAsDefault = "Nastavit jako výchozí"
 theme = "Motiv"
+themeAccent = "Barva zvýraznění"
+themeAccentCustom = "Vlastní barva"
+themeAccentCustomHint = "Vlastní (doporučeno výchozí)"
+themeAccentDark = "Barva zvýraznění tmavého režimu"
+themeAccentDefault = "Výchozí"
+themeAccentDefaultHint = "Výchozí motiv (doporučeno)"
+themeAccentDescription = "Tlačítka, odkazy a zvýraznění ji používají a jemně zabarvuje aplikaci. Světlý a tmavý režim mají každý svou vlastní. Systém použije tu, která je aktivní."
+themeAccentLight = "Barva zvýraznění světlého režimu"
 themeDark = "Tmavý"
 themeDescription = "Přepínejte mezi světlým a tmavým režimem"
 themeLight = "Světlý"
+themeReset = "Obnovit motiv na výchozí"
 themeSystem = "System"
 title = "Obecné"
 user = "Uživatel"
@@ -8833,6 +9796,12 @@ intro = "Povolte ověřování uživatelů, správu týmů a funkce pracovního
 learnMore = "Více v dokumentaci"
 title = "Pro správce systému"
 
+[settings.general.loginLanding]
+description = "Vyberte, která aplikace se otevře po přihlášení do Stirling Cloud."
+editor = "Editor"
+processor = "Procesor"
+title = "Po přihlášení"
+
 [settings.general.mode]
 fullscreen = "Celá obrazovka"
 sidebar = "Postranní panel"
@@ -9041,6 +10010,11 @@ security = "Zabezpečení"
 telegram = "Telegram"
 title = "Zabezpečení a ověřování"
 
+[settings.signOut]
+confirm = "Opravdu se chcete odhlásit?"
+submit = "Odhlásit se"
+title = "Odhlásit se"
+
 [settings.team]
 title = "Tým"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Nahrát na server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "klikněte sem"
+fallback = "Pokud se neotevřelo automaticky,"
+opening = "Otevírání Swagger UI v nové kartě..."
 tags = "api,dokumentace,swagger,endpointy,vývoj"
 title = "API Dokumentace"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Vyberte soubory v Aktivních souborech pro spuštění tohoto
 singleFileScope = "Použije se pouze pro: {{fileName}}"
 viewerMode = "Chcete-li vybrat více souborů, přepněte do editoru souborů."
 
+[toolFormat]
+ANY = "libovolný soubor"
+CBR = "archiv komiksu (CBR)"
+CBZ = "archiv komiksu (CBZ)"
+CSV = "soubor CSV"
+EBOOK = "e-kniha"
+EMAIL = "e-mail"
+EXCEL = "tabulka"
+HTML = "webová stránka"
+IMAGE = "obrázky"
+JAVASCRIPT = "soubor JavaScript"
+JSON = "soubor JSON"
+MARKDOWN = "soubor Markdown"
+NONE = "žádný soubor"
+PCL = "tiskový soubor PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF chráněný heslem"
+POSTSCRIPT = "soubor PostScript"
+PPT = "prezentace"
+TEXT = "textový soubor"
+VIDEO = "video"
+WORD = "dokument Word"
+XML = "soubor XML"
+XPS = "dokument XPS"
+ZIP = "archiv ZIP"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Zpět na všechny nástroje"
 collapse = "Sbalit panel"
 expand = "Rozbalit panel"
 goBack = "Vrátit se"
+pdfTools = "Nástroje PDF"
 placeholder = "Vyberte nástroj pro začátek"
 premiumFeature = "Prémiová funkce:"
+searchTools = "Hledat nástroje"
 toolsHeader = "Nástroje"
 viewAllTools = "Zobrazit všechny nástroje"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nebyly nalezeny žádné nástroje"
 quickAccess = "RYCHLÝ PŘÍSTUP"
 searchPlaceholder = "Hledat nástroje..."
 
-[toolPicker.categories]
-advancedTools = "Pokročilé nástroje"
-recommendedTools = "Doporučené nástroje"
-standardTools = "Standardní nástroje"
-
 [toolPicker.subcategories]
 advancedFormatting = "Pokročilé formátování"
 automation = "Automatizace"
@@ -9950,16 +10950,31 @@ title = "Uživatelé"
 you = "(vy)"
 
 [users.action]
+cancelInvite = "Zrušit pozvánku"
 deleteTeam = "Odstranit tým"
 disableMfa = "Resetovat MFA"
 move = "Přesunout do týmu"
 reinstate = "Obnovit"
 remove = "Odebrat z org."
+removeTeam = "Odebrat z týmu"
 rename = "Přejmenovat tým"
 resetPw = "Resetovat heslo"
 suspend = "Pozastavit"
 unlock = "Odemknout účet"
 
+[users.activity]
+daysAgo = "před {{count}} d"
+hoursAgo = "před {{count}} h"
+justNow = "Právě teď"
+minutesAgo = "před {{count}} min"
+monthsAgo_one = "před {{count}} měsícem"
+monthsAgo_other = "před {{count}} měsíci"
+never = "Nikdy"
+weeksAgo_one = "před {{count}} týdnem"
+weeksAgo_other = "před {{count}} týdny"
+yearsAgo_one = "před {{count}} rokem"
+yearsAgo_other = "před {{count}} lety"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Schvaluje zásadu"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Zrušit pozvánku pro {{email}}? S aktuálním odkazem se nebudou moci připojit."
+cancelInviteTitle = "Zrušit pozvánku"
 deleteTeamBody = "Odstranit tým {{name}}? Tým musí být nejprve prázdný – přesuňte jeho členy do jiného týmu a nesmí stále vlastnit žádné integrační konfigurace."
 deleteTeamTitle = "Odstranit tým"
 disableMfaBody = "Odebrat MFA registraci uživatele {{name}}? Pokud je vyžadována, nastaví ji znovu při příštím přihlášení."
 disableMfaTitle = "Resetovat MFA"
 removeBody = "Trvale odebrat {{name}} z organizace? Tuto akci nelze vrátit zpět."
+removeTeamBody = "Odebrat {{name}} z týmu? Účet jim zůstane, ale ztratí přístup ke zdrojům tohoto týmu."
 removeTitle = "Odebrat člena"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Uživatelské jméno"
 usernameError = "Uživatelské jméno musí mít alespoň 3 znaky"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Pozval(a) {{who}}"
+cancel = "Zrušit"
+count = "{{count}} čeká"
+desc = "Pozvaní lidé, kteří se ještě nepřipojili. Drží místo, dokud pozvánku nepřijmou."
+expiresInDays_one = "Vyprší za {{count}} den"
+expiresInDays_other = "Vyprší za {{count}} dní"
+expiresToday = "Vyprší dnes"
+title = "Čekající pozvánky"
+
 [users.loadError]
 description = "Při spojení s backendem došlo k chybě, nebo nemáte přístup. Zkuste to znovu."
 title = "Členy se nepodařilo načíst"
@@ -10212,9 +11240,11 @@ title = "Přílohy"
 
 [viewer.bookmarks]
 bookmarkTitle = "Název záložky"
+bookmarkTitleRequired = "Název záložky je povinný"
 closeSidebar = "Zavřít postranní panel záložek"
 collapseAll = "Sbalit všechny záložky"
 expandAll = "Rozbalit všechny záložky"
+searchPlaceholder = "Hledat záložky"
 
 [viewer.comments]
 addComment = "Přidat komentář"
@@ -10605,30 +11635,6 @@ title = "Text vodoznaku"
 image = "Obrázek"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Způsoby vytvoření podpisu"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Přizpůsobte barvu a tloušťku pera"
-bullet2 = "Vymažte a nakreslete znovu, dokud nebudete spokojeni"
-bullet3 = "Funguje na dotykových zařízeních (tablety, telefony)"
-description = "Vytvořte vlastnoruční podpis pomocí myši nebo dotykové obrazovky. Nejvhodnější pro osobní, autentické podpisy."
-title = "Nakreslit podpis"
-
-[wetSignature.tooltip.type]
-bullet1 = "Vyberte si z několika písem"
-bullet2 = "Přizpůsobte velikost a barvu textu"
-bullet3 = "Ideální pro standardizované podpisy"
-description = "Vygenerujte podpis z napsaného textu. Rychlé a konzistentní, vhodné pro obchodní dokumenty."
-title = "Napsat podpis"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Podporuje PNG, JPG a další obrazové formáty"
-bullet2 = "Pro nejlepší výsledek se doporučuje průhledné pozadí"
-bullet3 = "Obrázek bude velikostně přizpůsoben oblasti podpisu"
-description = "Nahrajte předem vytvořený obrázek podpisu. Ideální, pokud máte naskenovaný podpis nebo firemní logo."
-title = "Nahrát obrázek podpisu"
-
 [workbenchBar]
 activeFiles = "Aktivní soubory"
 annotations = "Anotace"
@@ -10652,6 +11658,7 @@ redact = "Začernit"
 rotateLeft = "Otočit doleva"
 rotateRight = "Otočit doprava"
 ruler = "Pravítko / měření"
+rulerSettings = "Nastavení měřítka"
 save = "Uložit"
 saveAll = "Uložit vše"
 saveAs = "Uložit jako"
diff --git a/frontend/editor/public/locales/da-DK/translation.toml b/frontend/editor/public/locales/da-DK/translation.toml
index e758a10c5f..18e97d1e5b 100644
--- a/frontend/editor/public/locales/da-DK/translation.toml
+++ b/frontend/editor/public/locales/da-DK/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "Filer valgt"
 font = "Skrifttype"
 fontSizeTooltip = "Størrelse på sidetalsteksten i punkter. Større tal giver større tekst."
 fontTypeTooltip = "Skrifttypefamilie til sidetal. Vælg efter din dokuments stil."
-genericSubmit = "Indsend"
 green = "Grøn"
 help = "Hjælp"
-imgPrompt = "Vælg Billede(r)"
 incorrectPasswordMessage = "Nuværende adgangskode er forkert."
 info = "Info"
 invalidUndoData = "Kan ikke fortryde: ugyldige handlingsdata"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Login-aftale"
 logOut = "Log ud"
 marginTooltip = "Afstand mellem sidetallet og sidens kant."
 moreOptions = "Flere muligheder"
-multiPdfPrompt = "Vælg PDF-filerne (2+)"
 never = "Aldrig"
 no = "Nej"
 noFileSelected = "Ingen fil valgt. Upload venligst en."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Brugerdefineret siderækkefølge (Indtast en kommasepareret l
 pages = "Sideantal"
 pageSelectionPrompt = "Brugerdefineret sidevalg (Indtast en kommasepareret liste af sidenumre 1,5,6 eller funktioner som 2n+1) :"
 password = "Adgangskode"
-pdfPrompt = "Vælg PDF-fil(er)"
 pin = "Fastgør fil (behold aktiv efter værktøjskørsel)"
 pro = "Pro"
 processingComplete = "Din fil er klar."
@@ -356,6 +352,7 @@ text = "Disse tilladelser styrer, hvad brugere kan gøre med PDF'en. Mest effekt
 title = "Ændre Tilladelser"
 
 [addStamp]
+preview = "Forhåndsvis stempel"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Manuelle downloads: klik på linkene og placer filerne i tessdata
 noLanguages = "Ingen tessdata-sprog fundet i den konfigurerede mappe."
 permissionNotice = "Stien til tessdata er ikke skrivbar. Downloads åbnes i browseren; gem venligst .traineddata-filerne manuelt i tessdata-mappen."
 
+[admin.settings.ai.documents]
+description = "Konfigurer embedding-modellen og indstillingerne for hentning, der bruges til at besvare spørgsmål om dokumenter. Anvendes på AI-motoren, når der gemmes."
+title = "Dokumenter og RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Lad stå tomt for at bruge motorens egne miljølegitimationsoplysninger. Gælder for selvhostede single-engine-installationer."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Gemt - lad stå tomt for at beholde den aktuelle nøgle"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL for det OpenAI-kompatible / Ollama embeddings-endpoint, f.eks. http://ollama:11434/v1. Skal pege på et betroet internt endpoint (SSRF-følsomt)."
+label = "Embedding-base-URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Navn på embedding-model. Fri tekst; forslag er kun tips."
+label = "Embedding-model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Udbyder, der bruges til at omdanne dokumenttekst til vector embeddings."
+label = "Embedding-udbyder"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maksimalt antal hentningssøgninger, agenten må køre pr. anmodning."
+label = "Maks. søgninger"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Ændring af embedding-modellen træder i kraft med det samme, men dokumenter, der er indekseret med den tidligere model, skal genindekseres, for at søgning returnerer korrekte resultater."
+title = "Genindeksering påkrævet"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Hvis du ændrede embedding-modellen, skal du genindeksere eksisterende dokumenter, så søgning bruger den nye model."
+
+[admin.settings.ai.documents.topK]
+description = "Antal mest relevante bidder, der hentes pr. søgning."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Forbind Stirling med Python AI-motoren, og vælg hvilke AI-funktioner der vises. Ændringer anvendes ved genstart."
+title = "AI-motor"
+
+[admin.settings.ai.general.capabilities]
+description = "Slå individuelle AI-funktioner til eller fra. Deaktiverede funktioner skjules i appen."
+title = "Funktioner"
+
+[admin.settings.ai.general.enabled]
+description = "Hovedafbryder. Når den er slået fra, er ingen AI-værktøjer, agenter eller motorkald tilgængelige."
+label = "Aktivér AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Samtaleassistent til arbejde med PDFs."
+label = "Chatassistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Kategoriser automatisk dokumenter efter type eller indhold."
+label = "Dokumentklassificering"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generér en ny PDF (f.eks. fra HTML) via en AI-agent."
+label = "Opret PDF fra prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Stil spørgsmål, og få svar baseret på et uploadet dokument."
+label = "Dokumentspørgsmål"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Gennemgå dokumenter for matematiske og numeriske fejl."
+label = "Matematikrevisor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Tilføj AI-skrevne gennemgangskommentarer og annoteringer til en PDF."
+label = "PDF-kommentaragent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Timeout for tungere agentoperationer såsom dokumentgenerering."
+label = "Timeout for langvarige handlinger (sekunder)"
+
+[admin.settings.ai.general.note]
+body = "AI-motoren kører som en separat tjeneste. Dens delte hemmelighed"
+body2 = "indstilles via en container-miljøvariabel. Udbyderens API keys kan indtastes på disse sider eller leveres som motorens miljøvariabler; nøgler, der indtastes her, sendes til motoren, når der gemmes."
+title = "Om AI-motoren"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Timeout for streamede (token-for-token) chatsvar."
+label = "Stream-timeout (sekunder)"
+
+[admin.settings.ai.general.test]
+button = "Test forbindelse"
+failBody = "AI-motoren svarede ikke. Kontrollér URL'en, at motor-containeren kører, og at AI er aktiveret (en genstart er nødvendig efter aktivering)."
+failTitle = "AI-motoren kan ikke nås"
+okBody = "AI-motoren svarede på et sundhedstjek."
+okTitle = "AI-motoren kan nås"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Timeout for standard AI-anmodninger til motoren."
+label = "Anmodningstimeout (sekunder)"
+
+[admin.settings.ai.general.url]
+description = "Intern URL for Python AI-motoren, f.eks. http://stirling-pdf-engine:5001."
+label = "AI-motor-URL"
+
+[admin.settings.ai.limits]
+description = "Sikkerhedsgrænser for hvor meget arbejde AI-anmodninger må udføre, og hvor mange der kører samtidigt. Anvendes på AI-motoren, når der gemmes."
+title = "Grænser og ydeevne"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Sikkerhedsgrænse: afvis AI-anmodninger, hvis udtrukne tekst overstiger denne længde."
+label = "Maks. tegn pr. anmodning"
+
+[admin.settings.ai.limits.maxPages]
+description = "Sikkerhedsgrænse: afvis AI-anmodninger over så mange PDF-sider."
+label = "Maks. sider pr. anmodning"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maksimalt antal samtidige igangværende modelkald på tværs af hele motoren."
+label = "Maks. samtidighed for model"
+
+[admin.settings.ai.models]
+description = "Vælg LLM-udbyderen og de smarte/hurtige modeller, AI-motoren bruger. Anvendes på AI-motoren, når der gemmes."
+title = "Modeller og udbydere"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Lad stå tomt for at bruge motorens egne miljølegitimationsoplysninger. Gælder for selvhostede single-engine-installationer."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Gemt - lad stå tomt for at beholde den aktuelle nøgle"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL for det OpenAI-kompatible / Ollama-endpoint, f.eks. http://ollama:11434/v1."
+label = "Udbyderens base-URL"
+warning = "Base URL'en skal pege på et betroet internt endpoint. Motoren foretager server-side-anmodninger til den, så en ikke-betroet værdi er SSRF-følsom."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maksimalt antal output-tokens for den hurtige model."
+label = "Maks. tokens for hurtig model"
+
+[admin.settings.ai.models.fastModel]
+description = "Billigere, hurtigere model til lette opgaver. Fri tekst; forslag er kun tips."
+label = "Hurtig model"
+
+[admin.settings.ai.models.provider]
+description = "Hvilken LLM-udbyder motoren kommunikerer med."
+label = "Udbyder"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maksimalt antal output-tokens for den smarte model."
+label = "Maks. tokens for smart model"
+
+[admin.settings.ai.models.smartModel]
+description = "Model med høj kapacitet til kompleks ræsonnering. Fri tekst; forslag er kun tips."
+label = "Smart model"
+
+[admin.settings.ai.saved]
+body = "Ændringer sendes automatisk til AI-motoren."
+bodyNoPush = "Indstillinger gemt. De anvendes næste gang AI-motoren indlæser sin konfiguration."
+title = "AI-indstillinger gemt"
+
 [admin.settings.badge]
 clickToUpgrade = "Klik for at se plandetaljer"
 
@@ -938,6 +1094,25 @@ label = "Genskab ved opstart"
 description = "Antal dage certifikatet er gyldigt"
 label = "Certifikatgyldighed (dage)"
 
+[admin.settings.folderAccess]
+description = "Mapper, som mappekilder og mappeoutput har tilladelse til at læse fra og skrive til. Dette er en sikkerhedsgrænse: automatiseringer kan aldrig peges mod en serversti uden for denne liste."
+securityNote = "Lad dette stå tomt for at deaktivere mappekilder og output helt. Stirlings egen konfigurationsmappe er altid forbudt område."
+title = "Mappeadgang"
+
+[admin.settings.folderAccess.implied]
+description = "Disse Stirling-administrerede mapper er altid tilladt og kan ikke ændres her."
+serverStorage = "Serverfillager"
+title = "Altid tilladt"
+watchedFolder = "Pipeline-overvåget mappe"
+
+[admin.settings.folderAccess.roots]
+add = "Tilføj"
+empty = "Ingen mapper tilladt. Mappekilder og output er i øjeblikket deaktiveret."
+hint = "Indtast absolutte stier, for eksempel /data/inbox."
+label = "Tilladte mapperødder"
+placeholder = "/data/inbox"
+remove = "Fjern mapperod"
+
 [admin.settings.general]
 description = "Konfigurer programindstillinger for hele systemet, herunder branding og standardadfærd."
 system = "System"
@@ -1842,6 +2017,15 @@ export = "Eksport"
 accessDenied = "Adgang nægtet"
 insufficientPermissions = "Du har ikke tilladelse til at udføre denne handling."
 
+[auth.callback]
+completing = "Fuldfører godkendelse"
+invalidToken = "OAuth-login mislykkedes - ugyldigt token."
+missingToken = "OAuth-login mislykkedes - intet token modtaget."
+oauthFailed = "OAuth-login mislykkedes. Prøv igen."
+pleaseWait = "Vent venligst, mens vi afslutter din loginproces."
+signedOut = "Du er blevet logget ud. Log ind igen."
+windowMayClose = "Du kan lukke dette vindue, når det er færdigt."
+
 [auth.displayName]
 guest = "Gæst"
 user = "Bruger"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Sikrer PDF-dokumenter ved at fjerne potentielt ondsindet i
 description = "Dette værktøj omdøber automatisk PDF-filer baseret på deres indhold. Det analyserer dokumentet for at finde den mest passende titel fra teksten."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatisk rotation"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Tærskel for sikkerhed"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Kun OCR"
+text = "Kun tekst"
+title = "Detektionsmetode"
+
+[autoRotate.error]
+failed = "Der opstod en fejl under automatisk rotation af PDF'en."
+
+[autoRotate.inferUndetected]
+title = "Rotér sider med lav sikkerhed, så de matcher"
+
+[autoRotate.report]
+applied = "{{degrees}}° med uret"
+confidenceValue = "Sikkerhed {{value}}"
+noChange = "Ingen ændring"
+pageLabel = "Side {{number}}"
+summary = "{{rotated}} af {{total}} sider roteret, {{unchanged}} efterladt som de er"
+title = "Detektionsrapport"
+
+[autoRotate.report.method]
+inferred = "Matchet"
+none = "Sprunget over"
+osd = "OCR"
+text = "Tekst"
+
+[autoRotate.report.note]
+belowThreshold = "Under tærskel"
+blankPage = "Siden er tom"
+inferredFromDocument = "Samme som de andre sider"
+noDominantDirection = "Blandede tekstretninger"
+osdFailed = "Ingen læsbar tekst fundet"
+osdNoVerdict = "Kunne ikke afgøre, hvilken vej der vender op"
+tesseractUnavailable = "OCR ikke installeret"
+tooFewGlyphs = "For lidt tekst"
+
+[autoRotate.results]
+title = "Resultater for automatisk rotation"
+
+[autoRotate.settings]
+title = "Indstillinger"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Hvor sikker kontrollen skal være, før en side vendes. Sænk den for at rotere flere sider, hæv den for at lade flere sider være urørte."
+title = "Tærskel for sikkerhed"
+
+[autoRotate.tooltip.description]
+text = "Finder ud af, hvilken vej hver side skal vende, og drejer den korrekt. Sider, der allerede vender rigtigt, efterlades uændrede."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto læser først teksten på siden og ser derefter på siden som et billede, hvis det ikke er nok. Kun tekst springer billedkontrollen over, hvilket er hurtigst for dokumenter, der aldrig er blevet scannet. Kun OCR behandler hver side som et billede."
+title = "Detektionsmetode"
+
+[autoRotate.tooltip.header]
+title = "Automatisk rotation"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Tomme eller næsten tomme sider kan ikke kontrolleres alene. Når hver side, der kunne læses, kræver samme rotation, roteres disse sider, så de matcher."
+title = "Rotér sider med lav sikkerhed, så de matcher"
+
 [autoSizeSplitPDF]
 tags = "pdf,opdel,dokument,organisation"
 
@@ -2189,33 +2440,6 @@ keywords = "Nøgleord: odd, even"
 numbers = "Tal/intervaller: 5, 10-20"
 progressions = "Progressioner: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Certifikattyper"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Administreres af systemadministratorer"
-bullet2 = "Deles mellem autoriserede brugere"
-bullet3 = "Repræsenterer virksomhedens identitet, ikke en person"
-bullet4 = "Bedst til: Officielle dokumenter, teamunderskrifter"
-description = "Et delt certifikat leveret af din organisation. Bruges til underskriftsfuldmagt på tværs af virksomheden."
-title = "Organisationscertifikat"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Genereres automatisk ved første brug"
-bullet2 = "Knyttet til din brugerkonto"
-bullet3 = "Kan ikke deles med andre brugere"
-bullet4 = "Bedst til: Personlige dokumenter, individuel ansvarlighed"
-description = "Et automatisk genereret certifikat, der er unikt for din brugerkonto. Velegnet til individuelle underskrifter."
-title = "Personligt certifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Kræver P12/PFX-fil og adgangskode"
-bullet2 = "Kan udstedes af eksterne Certificate Authorities"
-bullet3 = "Højere tillidsniveau til juridiske dokumenter"
-bullet4 = "Bedst til: Juridisk bindende kontrakter, ekstern validering"
-description = "Brug din egen PKCS#12-certifikatfil. Giver fuld kontrol over certifikategenskaber."
-title = "Upload brugerdefineret P12"
-
 [certSign]
 awaitingSignatures = "Afventer underskrifter"
 chooseCertificate = "Vælg certifikatfil"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Certifikatkilde"
 upload = "Upload"
 
-[certSign.tooltip.header]
-title = "Om håndtering af signaturer"
-
-[certSign.tooltip.overview]
-bullet1 = "Tjek eksisterende signaturer og deres gyldighed"
-bullet2 = "Se detaljerede oplysninger om underskrivere og certifikater"
-bullet3 = "Tilføj nye digitale signaturer for at sikre dine dokumenter"
-bullet4 = "Flere filer understøttes med nem navigation"
-text = "Dette værktøj lader dig tjekke, om dine PDF'er er digitalt underskrevet, og tilføje nye digitale signaturer. Digitale signaturer beviser, hvem der oprettede eller godkendte et dokument, og viser, om det er ændret siden underskriften."
-title = "Hvad kan dette værktøj?"
-
-[certSign.tooltip.signing]
-bullet1 = "Understøtter PEM, PKCS12, JKS og servercertifikatformater"
-bullet2 = "Mulighed for at vise eller skjule signatur på PDF'en"
-bullet3 = "Tilføj årsag, sted og underskrivers navn"
-bullet4 = "Vælg hvilken side synlige signaturer skal placeres på"
-bullet5 = "Brug servercertifikat for en enkel 'Sign with Stirling-PDF'-mulighed"
-text = "For at signere en PDF skal du bruge et digitalt certifikat (som PEM, PKCS12 eller JKS). Du kan vælge at gøre signaturen synlig i dokumentet eller holde den usynlig kun af sikkerhedshensyn."
-title = "Tilføjelse af signaturer"
-
-[certSign.tooltip.validation]
-bullet1 = "Viser om signaturer er gyldige eller ugyldige"
-bullet2 = "Viser oplysninger om underskriver og underskrivningsdato"
-bullet3 = "Tjekker om dokumentet blev ændret efter underskrivning"
-bullet4 = "Kan bruge brugerdefinerede certifikater til verifikation"
-text = "Når du tjekker signaturer, fortæller værktøjet, om de er gyldige, hvem der underskrev dokumentet, hvornår det blev underskrevet, og om dokumentet er ændret siden underskrivning."
-title = "Kontrol af signaturer"
-
 [changeCreds]
 changeUsername = "Opdater dit brugernavn. Du bliver logget ud efter opdatering."
 credsUpdated = "Konto opdateret"
@@ -2824,6 +3020,7 @@ next = "Næste"
 preview = "Forhåndsvisning"
 previous = "Forrige"
 refresh = "Opdatér"
+remaining = "Resterende"
 retry = "Prøv igen"
 save = "Gem"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Avanceret overvågning"
-allInOneWorkspace = "Alt-i-én PDF-arbejdsområde (fremviser, værktøjer og agent)"
-apiSandbox = "API-sandkasse"
-dedicatedSupportSlas = "Dedikeret support og SLA'er"
-fasterThroughput = "10x hurtigere gennemløb"
-fullyPrivateFiles = "Fuldt private filer"
-largeFileProcessing = "Behandling af store filer"
-orgWideAccess = "Organisationsdækkende adgangskontrol"
-premiumAiModels = "Premium AI-modeller"
-prioritySupport = "Prioriteret support"
-privateDocCloud = "Privat dokumentcloud"
-ragFineTuning = "RAG + finjustering"
-secureApiAccess = "Sikker API-adgang"
-standardThroughput = "Standard gennemløb"
-unlimitedApiAccess = "Ubegrænset API-adgang"
-unlimitedSeats = "Ubegrænsede pladser"
-
 [crop]
 autoCrop = "Auto-beskær hvidt område"
 noFileSelected = "Vælg en PDF for at begynde beskæring"
@@ -3346,6 +3525,7 @@ message = "Kunne ikke angive standard PDF-håndterer"
 title = "Fejl"
 
 [defaultApp.prompt]
+dontRemind = "Påmind mig ikke igen"
 message = "Gør Stirling PDF til din standardapp til at åbne PDF-filer."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Tilpas grupper"
 dropHint = "Åbn filer for at komme i gang"
 dropToAdd = "Drop files to add"
 expand = "Udvid sidepanel"
-files = "Filer"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive er ikke konfigureret"
 leaveMyFiles = "Forlad Mine filer"
+library = "PDF-bibliotek"
 myFiles = "Mine filer"
 noFiles = "Ingen filer endnu"
 openFileManager = "Åbn filhåndtering"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Tilføj"
-addLabel = "Tilføj en etiket…"
-categoryIconAria = "Vælg et ikon for {{name}}"
-createCategory = "Opret kategori"
-delete = "Slet kategori"
 done = "Færdig"
-hide = "Skjul kategori"
-newCategory = "Nyt kategorinavn…"
-removeLabel = "Fjern {{name}}"
-rename = "Omdøb"
 reset = "Nulstil til standarder"
-search = "Søg efter etiketter…"
-show = "Vis kategori"
 subtitle = "Gruppér dine filer i overordnede kategorier. Føj eksisterende eller nye etiketter til en kategori, omdøb den, eller opret din egen. Filer, der ikke er i nogen af dine kategorier, vises under “Andet”."
 title = "Sidebjælkekategorier"
 
@@ -3808,6 +3977,7 @@ refresh = "Opdatér fra server"
 remove = "Slet"
 removeVersion = "Fjern denne version"
 rename = "Omdøb"
+renamed = "Omdøbt"
 renameFolder = "Omdøb mappe"
 resizeFolderTree = "Ændr størrelse på mappetræ (piletaster, Shift for større trin; dobbeltklik for auto-tilpas)"
 save = "Gem"
@@ -3910,9 +4080,7 @@ count = "Filer"
 folder = "Mappe"
 labels = "Etiketter"
 modified = "Ændret"
-name = "Navn"
 size = "Størrelse"
-toolHistoryAtVersion = "Kumulativ værktøjskæde"
 totalSize = "Samlet størrelse"
 type = "Type"
 versionHistory = "Versionsrejse"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Alt gemt"
+extractCsvError = "Kunne ikke udtrække CSV"
+extractXlsxError = "Kunne ikke udtrække XLSX"
 flattenAfterFilling = "Fladgør efter udfyldning"
+requiredAbbreviation = "obl"
+requiredFieldsError = "Udfyld alle obligatoriske felter"
 rescanFields = "Scan felter igen"
 rescanFormFields = "Scan formularfelter igen"
 save = "Gem"
+saveShortcut = "Ctrl+S for at gemme"
+unsavedChanges = "Ikke-gemte ændringer"
 
 [formFill.sidebar]
 close = "Luk sidepanel"
@@ -4309,6 +4484,11 @@ desc = "Omdøber automatisk en PDF-fil baseret på dens detekterede overskrift"
 tags = "auto-detektér,header-baseret,organiser,omdøb"
 title = "Omdøb PDF-fil automatisk"
 
+[home.autoRotate]
+desc = "Registrér hver sides retning, og rotér den automatisk opret."
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "Automatisk rotation"
+
 [home.autoSizeSplitPDF]
 tags = "auto,opdel,størrelse"
 title = "Auto-opdel størrelse/antal"
@@ -4608,13 +4788,13 @@ hint = "Upload en PNG, JPG, SVG eller anden billedfil for at placere på PDF'en.
 label = "Upload billede"
 placeholder = "Vælg billedfil"
 
-[imageToPdf]
-tags = "konvertering,img,jpg,billede,foto"
-
 [imageToPDF]
 header = "Billede til PDF"
 title = "Billede til PDF"
 
+[imageToPdf]
+tags = "konvertering,img,jpg,billede,foto"
+
 [infoBanner]
 dismiss = "Afvis"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Du er blevet inviteret!"
 
 [landing]
 addFiles = "Tilføj filer"
-heroSubtitle = "Træk en PDF ind eller tilføj en eksisterende PDF for at komme i gang."
 mobileUpload = "Upload fra mobil"
 openFromComputer = "Åbn fra computer"
 uploadFromComputer = "Upload fra computer"
-workbenchEmptyStateHero = "Slip en PDF hvor som helst"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Log ind"
 magicLinkSent = "Magisk link sendt til {{email}}! Tjek din e-mail og klik på linket for at logge ind."
 mfaCode = "Godkendelseskode"
 mfaRequired = "Tofaktorkode påkrævet"
+noAccount = "Har du ikke en konto?"
 or = "Eller"
 password = "Adgangskode"
 passwordChangedSuccess = "Adgangskoden blev ændret! Log ind med din nye adgangskode."
@@ -4715,26 +4894,10 @@ signInWith = "Log ind med"
 title = "Log ind"
 unexpectedError = "Uventet fejl: {{message}}"
 updatePassword = "Opdater adgangskode"
-useEmailInstead = "Log ind med e-mail"
 useMagicLink = "Brug i stedet magisk link"
 username = "Brugernavn"
 youAreLoggedIn = "Du er logget ind!"
 
-[login.slides.edit]
-alt = "Rediger PDF'er"
-subtitle = "Med over et dusin værktøjer til at redigere, signere, læse og manipulere PDF'er skal du nok finde det, du leder efter."
-title = "Rediger PDF'er for at vise/beskytte de oplysninger, du ønsker"
-
-[login.slides.overview]
-alt = "Stirling PDF oversigt"
-subtitle = "En privacy-first cloud suite til PDF'er, der lader dig konvertere, signere, redigere og administrere dokumenter samt 50+ andre kraftfulde værktøjer."
-title = "Din alt-i-en-løsning til alle dine PDF-behov."
-
-[login.slides.secure]
-alt = "Sikr PDF'er"
-subtitle = "Tilføj adgangskoder, slør indhold, og håndter certifikater nemt."
-title = "Beskyt følsomme oplysninger i dine PDF'er"
-
 [margin]
 large = "Stor"
 medium = "Mellem"
@@ -4976,6 +5139,7 @@ pinButton = "Du kan bruge knappen <strong>Fastgør</strong>, hvis du hellere vil
 results = "Når værktøjet er færdigt, viser trinnet <strong>Gennemse</strong> en forhåndsvisning af resultaterne i dette panel og giver dig mulighed for at fortryde handlingen eller downloade filen."
 runButton = "Når værktøjet er konfigureret, kan du køre det på alle de valgte PDF'er med denne knap."
 selectCropTool = "Lad os vælge <strong>Beskær</strong>-værktøjet for at demonstrere, hvordan man bruger et af værktøjerne."
+stepOf = "Trin {{current}} af {{total}}"
 toolInterface = "Dette er <strong>Beskær</strong>-værktøjets grænseflade. Som du kan se, er der ikke meget at se, fordi vi endnu ikke har tilføjet nogen PDF-filer at arbejde med."
 workbench = "Dette er <strong>Arbejdsbordet</strong> – hovedområdet, hvor du ser og redigerer dine PDF'er."
 wrapUp = "Så er du klar! Du har lært om appens hovedområder og hvordan du bruger dem. Klik på knappen <strong>Hjælp</strong>, når som helst du vil se denne rundtur igen."
@@ -4988,6 +5152,26 @@ showMeAround = "Vis mig rundt"
 skipForNow = "Spring over for nu"
 skipTheTour = "Spring rundvisningen over"
 
+[onboarding.checklist]
+dismiss = "Afvis"
+title = "Opsæt Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Kør Stirling lokalt på din maskine"
+title = "Download Stirling til desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Samarbejd med dit team"
+title = "Inviter teammedlemmer"
+
+[onboarding.checklist.shareAnalytics]
+description = "Hjælp med at forbedre Stirling"
+title = "Del anonyme brugsdata"
+
+[onboarding.checklist.takeTour]
+description = "Se, hvordan Stirling fungerer, i en hurtig gennemgang"
+title = "Tag rundvisningen"
+
 [onboarding.desktopInstall]
 body = "Stirling fungerer bedst som desktop-app. Du kan bruge den offline, få hurtigere adgang til dokumenter og redigere lokalt på din computer."
 selectOs = "Vælg operativsystem"
@@ -4996,7 +5180,21 @@ titleWithOs = "Download til {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Godkendelseskode"
+description = "Sikr din konto ved at tilknytte en authenticator-app. Scan QR-koden, eller indtast opsætningsnøglen, og bekræft derefter den 6-cifrede kode for at afslutte."
+enable = "Aktivér MFA"
+enableError = "Kunne ikke aktivere tofaktorgodkendelse. Kontrollér koden, og prøv igen."
+enterCode = "Indtast den 6-cifrede kode fra din app."
+enterCodeError = "Indtast godkendelseskoden for at fortsætte."
+logout = "Log ud"
+openAuthenticator = "Åbn Google Authenticator, Authy eller 1Password."
 qrCodeLoading = "Genererer din QR-kode…"
+regenerateQrCode = "Generér QR-kode igen"
+scanQrCode = "Scan QR-koden, eller indtast opsætningsnøglen nedenfor."
+setupError = "Kunne ikke starte tofaktoropsætning. Prøv igen."
+setupKey = "Opsætningsnøgle (manuel indtastning)"
+stepByStep = "Trin for trin"
+success = "MFA er blevet aktiveret. Du kan nu fortsætte."
+title = "Opsætning af multifaktorgodkendelse"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Når du aktiverer login-tilstand, kan du administrere brugere, konfigurere indstillinger og overvåge serverens tilstand. De første <strong>{{freeTierLimit}}</strong> personer på din server kan bruge Stirling gratis."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin-overblik"
 userBody = "Invitér teammedlemmer, tildel roller, og hold dine dokumenter organiseret i ét sikkert arbejdsområde. Aktiver login-tilstand, når du er klar til at vokse ud over solo-brug."
 userTitle = "Plan-overblik"
 
+[onboarding.processorIntro]
+body = "Stirling kører nu <strong>Politikker</strong> — automatiserede regler, der klassificerer, sikrer og behandler hvert dokument, når det ankommer. Opsæt dem, og overvåg kørsler i <strong>Processor</strong>."
+cta = "Se Processor"
+title = "Se Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Forudbetalt år"
+
+[payg.prepaid.banner]
+exhausted = "Din forudbetalte kapacitet er brugt op; målt fakturering er genoptaget. Fyld op for at beholde rabatten."
+expiring_one = "Dit forudbetalte år slutter om {{count}} dag. Ubrugt kapacitet udløber — fyld op for at starte et nyt år."
+expiring_other = "Dit forudbetalte år slutter om {{count}} dage. Ubrugt kapacitet udløber — fyld op for at starte et nyt år."
+low = "Du er nede på {{pct}}% af din forudbetalte kapacitet. Fyld op når som helst for at fortsætte behandlingen uden afbrydelser."
+
+[payg.prepaid.card]
+subtitle = "Bruges før målt fakturering og uden for din forbrugsgrænse."
+title = "Forudbetalt kapacitet"
+
+[payg.prepaid.meter]
+capSuffix = "af {{total}} forudbetalte credits"
+expires = "Udløber {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Brugt op"
+healthy = "Rigeligt tilbage"
+low = "Ved at løbe tør"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Indsæt licensnøglen fra din e-mail"
 success = "Licens aktiveret!"
 successMessage = "Din licens er aktiveret. Du kan nu lukke dette vindue."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "håndhævet"
-enforcing = "Håndhæver..."
-failed = "Håndhævelsen mislykkedes"
 outputsUnavailable = "Politikoutput er ikke længere tilgængelige til download."
 partialOutputsUnavailable = "Nogle politikoutput er ikke længere tilgængelige til download."
-retrying = "Optaget, prøver igen..."
 runNotFound = "Håndhævelseskørslen kunne ikke længere findes."
-step = "trin {{current}}/{{total}}"
 timedOut = "Håndhævelsen fik timeout, før kørslen kunne afsluttes."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Luk"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Anvender {{names}}"
 applyingProgress = "Anvender {{names}} ({{done}} af {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} af {{total}} fil(er) kunne ikke behandles og blev ek
 failureTitle = "Eksporteret uden fuld håndhævelse"
 printPolicyAppliedBody = "Denne PDF blev opdateret for at opfylde en politik. Gennemse ændringerne, og udskriv derefter igen."
 printPolicyAppliedTitle = "Politik anvendt før udskrivning"
-queued = "+{{count}} i kø"
 successTitle = "{{names}} anvendt"
 summaryMore = "{{first}}, {{second}} og {{more}} mere"
 summaryTwo = "{{first}} og {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Håndhæver før konvertering"
-default = "Håndhæver"
-export = "Håndhæver før eksport"
-input = "Håndhæver ved import"
-print = "Håndhæver før udskrivning"
-
-[policies.field]
-accessLog = "Adgangslog"
-archiveAfter = "Arkivér efter"
-auditTrail = "Revisionsspor"
-belowThreshold = "Under tærskel"
-destination = "Destination"
-frameworks = "Frameworks"
-immutableHold = "Uforanderlig tilbageholdelse"
-keepFor = "Behold i"
-minConfidence = "Min. tillid"
-notify = "Giv besked ved routing"
-onViolation = "Når ikke-kompatibel"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Tilføj"
-addPlaceholder = "Tilføj en etiket…"
-customNote = "Tilpasset til dit team."
-defaultNote = "Bruger den indbyggede standard, delt med dit team."
-duplicate = "\"{{name}}\" findes allerede."
-edit = "Rediger etiketter"
-empty = "Ingen etiketter endnu."
-export = "Eksportér JSON"
-iconAria = "Vælg et ikon for {{name}}"
-import = "Importér JSON"
-importError = "Kunne ikke importere den fil."
-managedNote = "Teametiketter administreres af din teamleder."
-modalSubtitle = "Delt med hele dit team. Klassifikatoren vælger de etiketter, der passer til hvert dokument."
-modalTitle = "Klassifikationsetiketter"
-pickIcon = "Brug {{label}}-ikon"
-removeAria = "Fjern {{name}}"
-resetToDefault = "Nulstil til standard"
-saveForTeam = "Gem for team"
-saving = "Gemmer…"
-sectionLabel = "Klassifikationsetiketter"
-startFromScratch = "Start fra bunden"
-teamCount = "teametiketter"
-tooLong = "Etiketter må højst være {{max}} tegn."
-ungrouped = "Ikke grupperet"
-view = "Vis etiketter"
+categoryCount = "kategorier"
+hideCategory = "Skjul kategori"
+labelCount = "etiketter"
+sharedNote = "Disse etiketter er indbyggede og deles på tværs af hele dit team."
+showCategory = "Vis kategori"
 
 [policies.pii]
 account = "Kontonumre (mærkede)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US routingnumre (ABA)"
 ssn = "Social Security-numre"
 
-[policies.settings]
-noneExport = "Ingen politikker kører i øjeblikket ved eksport."
-noneUpload = "Ingen politikker kører i øjeblikket ved upload."
-onExport = "Ved eksport"
-onUpload = "Ved upload"
-reorderHandle = "Træk for at ændre rækkefølge"
-runOrderDesc = "Når mere end én politik kører på den samme trigger, kører de i denne rækkefølge — hver på den forrige politiks output. Træk for at ændre rækkefølge."
-title = "Politikindstillinger"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Politikindstillinger"
-policySettings = "Politikindstillinger"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Prøv mislykkede politikker igen ({{count}})"
-rowProgress = "{{completed}} af {{total}} filer behandlet"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Hvad er en politik?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Finder og maskerer automatisk følsomme oplysninger — som Social Security- og kortnumre — så de ikke kan læses i dokumentet."
-sanitize = "Fjerner skjult JavaScript fra filen, så intet kan køre automatisk, når nogen åbner den."
-watermark = "Sætter et synligt mærke (f.eks. \"Fortroligt\") på hver side."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Luk"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} håndhæves..."
 badgeRan = "{{name}}-politikken kørte på denne fil"
+badgeRunning = "{{name}} kører..."
 blockingAction = "{{action}} blokeret under håndhævelse af politik, vent venligst..."
 dismiss = "Afvis overlay"
 enforcingTitle = "Håndhæver politik..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Vis fil (politik håndhæves stadig)"
 [policyOption]
 autoRedactPhi = "Auto-rediger PHI"
 blockExport = "Bloker eksport"
+ccpa = "CCPA"
 contracts = "Kontrakter"
 documents = "Dokumenter"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor-plan"
 subscribed = "Processor-plan"
 unlinked = "Ikke linket"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap fra dokument"
-sectionsAriaLabel = "Agent Builder-sektioner"
-selectorAriaLabel = "Agenter"
-subtitle = "Design, test og udgiv de AI-agenter, der klassificerer, udtrækker fra og router dine dokumenter. Definér scenarier, afgræns værktøjsadgang, kør et golden set, og udgiv en version."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Annuller"
-dropzoneText = "Vælg et eksempeldokument (PDF eller billede)"
-lead = "Slip et eksempeldokument, så foreslår vi scenarier og et udtræksskema, du kan finpudse. Intet udgives, før du har gennemgået det."
-submit = "Bootstrap agent"
-subtitle = "Start en ny agent fra én repræsentativ fil"
-title = "Bootstrap fra et dokument"
-
-[portal.agentBuilder.empty]
-description = "Bootstrap en agent fra et eksempeldokument for at starte dens scenarier og udtræksskema, og finpuds og udgiv derefter."
-title = "Ingen agenter endnu"
-
-[portal.agentBuilder.evals]
-casesPassing = "Cases bestået"
-columnCase = "Eval-case"
-columnLatency = "Ventetid"
-columnResult = "Resultat"
-fail = "fejl"
-goldenSetPassRate = "Beståelsesrate for golden set"
-latencyMs = "{{ms}} ms"
-notRun = "ikke kørt"
-pass = "bestået"
-passRate = "Beståelsesrate"
-runEvals = "Kør evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals gør dine scenarier til et gentageligt golden set. Opgrader for at registrere beståelsesrate over tid og styre udgivelser efter den."
-title = "Intet golden set endnu"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "på tværs af golden sets"
-activeAgents = "Aktive agenter"
-avgPassRate = "Gns. eval-beståelsesrate"
-fleetWide = "på tværs af flåden"
-latestPublished = "Senest udgivet"
-scenarios = "Scenarier"
-testCases = "testcases"
-totalDescription_one = "{{count}} i alt"
-totalDescription_other = "{{count}} i alt"
-
-[portal.agentBuilder.scenarios]
-add = "Tilføj"
-addScenario = "Tilføj scenarie"
-enable = "Aktivér"
-expectationLabel = "Forventet adfærd"
-expectationPlaceholder = "Hvad agenten skal gøre"
-inEval = "i eval"
-mute = "Slå fra"
-muted = "slået fra"
-nameLabel = "Navn"
-namePlaceholder = "f.eks. Compliance-eskalering"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenarier"
-tools = "Værktøjer"
-versions = "Versioner"
-
-[portal.agentBuilder.tools]
-broadAccess = "Bred adgang"
-deniedHint = "Valgte værktøjer er blokeret. Alt andet kan stadig kaldes."
-deniedTools = "Afviste værktøjer"
-governanceGate = "Værktøjsstyring er tilgængelig på Enterprise-planen."
-restricted = "Begrænset"
-restrictedAccess = "Begrænset værktøjsadgang"
-restrictedDescription = "Tillad alle værktøjer undtagen dem, du afviser nedenfor."
-
-[portal.agentBuilder.versions]
-current = "aktuel"
-historyGate = "Fuld versionshistorik og rollback er tilgængelige på Enterprise-planen."
-publish = "Udgiv"
-rollBack = "Rul tilbage"
-
 [portal.assistant]
 close = "Luk assistent"
 error = "Kunne ikke nå assistenten."
@@ -6365,9 +6346,21 @@ typing = "Skriver"
 loading = "Indlæser"
 redirectingToEditor = "Omdirigerer til editoren..."
 
+[portal.billing.activation]
+maybeLater = "Måske senere"
+title = "Slå Processor til"
+
+[portal.billing.activation.payg]
+sub = "Angiv en månedlig grænse. Betal for det, du kører."
+title = "Betal efter forbrug"
+
+[portal.billing.activation.prepay]
+badge = "2 måneder gratis"
+sub = "Én faktura, kort eller bankoverførsel."
+title = "Forudbetal et år"
+
 [portal.billing.checkout]
 noClientSecret = "Edge-funktionen returnerede ingen client_secret."
-subtitle = "Tilføj et kort for at fortsætte efter din gratis Editor-planbevilling. Stripe håndterer resten."
 title = "Slå Processor-planen til"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Din betaling lykkedes, men aktiveringen tager lidt længere end normalt.
 close = "Luk"
 title = "Næsten færdig"
 
+[portal.billing.checkout.cap]
+amountAria = "Månedlig forbrugsgrænse"
+back = "Tilbage"
+continue = "Fortsæt til betaling"
+error = "Kunne ikke angive din forbrugsgrænse"
+finePrint = "Fakturaer udsendes månedligt. Annullér når som helst."
+noLimit = "Ingen grænse"
+note = "Du faktureres aldrig over din grænse. Behandling sættes blot på pause."
+perMonth = "/ md."
+title = "Angiv din forbrugsgrænse"
+
+[portal.billing.checkout.card]
+fields = "Kortnummer · MM / ÅÅ · CVC · ZIP"
+label = "Kortoplysninger"
+note = "Kortoplysninger indsamles af Stripe. Stirling gemmer aldrig PAN eller CVC."
+
 [portal.billing.checkout.error]
 title = "Kunne ikke starte checkout"
 
@@ -6383,10 +6392,9 @@ body = "Din betaling gik igennem. Vi slår målt behandling til på tværs af di
 hint = "Hold venligst dette vindue åbent."
 title = "Aktiverer din Processor-plan..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "i portal env for at aktivere checkout i appen."
-bodyBefore = "Indstil"
-title = "Stripe er ikke konfigureret"
+[portal.billing.checkout.pay]
+limit = "Månedlig forbrugsgrænse {{amount}}/md. Behandling sættes på pause ved grænsen."
+limitNoCap = "Ingen forbrugsgrænse. Behandling sættes ikke på pause. Fakturaer udsendes månedligt."
 
 [portal.billing.enterpriseUpsell]
 cta = "Byg dit Enterprise-tilbud"
@@ -6409,10 +6417,12 @@ currentPlan = "Nuværende plan"
 freeForever = "Gratis for altid"
 noTeamResolved = "Intet team er endnu knyttet til din wallet — opdater, og prøv igen."
 ownerOnly = "Kun teamejeren kan slå Processor-planen til."
+payInvoice = "Betal faktura for at fuldføre"
 planName = "Editor"
 ssoIncluded = "SSO inkluderet"
 switchOnProcessor = "Slå Processor til →"
 unlimitedUsers = "Ubegrænsede brugere"
+viewQuote = "Vis tilbud"
 
 [portal.billing.invoices]
 columnAmount = "Beløb"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Direkte API-forespørgsler"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatiseringer og pipelines"
 segmentAutomationLabel = "Automatisering"
+sizeMultiplier = "{{formatted}} PDFs brugte en størrelsesmultiplikator"
+summary = "{{unique}} unikke · {{units}} måleenheder · {{avg}} gns. pr. PDF"
+summaryNoRate = "{{unique}} unikke · {{units}} måleenheder"
 unit = "målte PDFs"
+unitsPending_one = "{{units}} måleenhed afventer synkronisering fra tilknyttede instanser"
+unitsPending_other = "{{units}} måleenheder afventer synkronisering fra tilknyttede instanser"
+
+[portal.billing.prepaid]
+capSuffix = "af {{total}} forudbetalte credits"
+expires = "Udløber {{date}}"
+eyebrow = "Forudbetalt kapacitet"
+note = "Bruges før målt fakturering og uden for din forbrugsgrænse."
+topUp = "Fyld op"
+
+[portal.billing.prepaid.buy]
+back = "Tilbage"
+calcTitle = "Beregn din årlige betaling"
+cancel = "Annullér"
+cancelPurchase = "Annullér køb"
+close = "Luk"
+continueToPayment = "Fortsæt til betaling"
+finalise = "Færdiggør"
+invoiceErrorTitle = "Kunne ikke generere fakturaen"
+loadingTitle = "Indlæser dit tilbud"
+payTitle = "Betal for dit år"
+step = "Trin {{current}} af {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Skift"
+deployRow = "Udrulning"
+done = "Færdig"
+enterpriseHint = "Dette er enterprise-skala. Ved denne volumen slår enterprise-priser enhver selvbetjeningsrabat. Prisfastlåsning, vilkår og et tilbud på få minutter."
+governanceRow = "Styring"
+governanceValue = "{{label}} · {{count}} politikker"
+handlesLabel = "Din Processor"
+handlesValue = "håndterer {{volume}} credits / md."
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} politikker"
+poolCaption = "Én pulje på {{credits}} credits for året. Tunge måneder låner fra lette."
+priceLabel = "Dit år · 12 måneder til prisen for 10"
+rateUnknown = "Vi viser den nøjagtige pris ved checkout."
+savings = "Du sparer {{amount}} · 2 måneder gratis."
+sizingRow = "Dimensionering"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Samlet antal brugere"
+
+[portal.billing.prepaid.consent]
+label = "Jeg forstår, at når min forudbetalte kapacitet er brugt op eller udløber efter 12 måneder, fortsætter behandlingen automatisk til den almindelige målte pay-as-you-go-pris (op til min forbrugsgrænse), medmindre jeg annullerer, og at jeg kan annullere når som helst fra faktureringsportalen."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Administreret af Stirling. Live på få minutter."
+cloudValue = "Stirling Cloud · Administreret"
+selfhost = "Selvhostet"
+selfhostDesc = "Kører på privat infrastruktur. Samme pris."
+selfhostValue = "Selvhostet · Privat infrastruktur"
+
+[portal.billing.prepaid.offer]
+cta = "Gennemgå tilbud"
+subtitle = "Forudbetal et år med PDF-behandling og få to måneder gratis, brugt før målt fakturering, uden for din forbrugsgrænse."
+title = "Få 12 måneder til prisen for 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Kontohavers navn"
+accountNamePlaceholder = "f.eks. Jane Smith"
+companyName = "Firmanavn (valgfrit)"
+companyNamePlaceholder = "f.eks. Acme Inc."
+downloadInvoice = "Download faktura"
+payOnline = "Betal online"
+poNumber = "PO-nummer (valgfrit)"
+poNumberPlaceholder = "f.eks. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avanceret"
+advancedDesc = "Pipelines driver det meste af din behandling."
+none = "Ingen"
+noneDesc = "Kører ikke pipelines endnu. Slå dem til når som helst."
+standard = "Standard"
+standardDesc = "Nogle få pipelines genbehandler ankommende PDFs."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Klassificering, standarden, plus deling"
+governed = "Governed"
+governedDesc = "Tilføjer sikkerhed og routing"
+regulated = "Regulated"
+regulatedDesc = "Hver kategori, inkl. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Download tilbud (PDF)"
+downloading = "Forbereder…"
+share = "del til godkendelse"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "Filer under 25 MB, ingen dataafgifter"
+heavy = "Tung"
+heavyDesc = "Scannet eller billedtung, rutinemæssigt 50 MB+"
+standard = "Standard"
+standardDesc = "Mest små, nogle scanninger over 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Brugt op"
+healthy = "Rigeligt tilbage"
+low = "Ved at løbe tør"
 
 [portal.billing.spendLimit]
 adjustLimit = "Juster grænse"
@@ -6494,6 +6608,8 @@ label = "Forventes at blive overskredet."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Forbrug denne måned"
+freeRemaining_one = "{{formatted}} gratis PDF tilbage"
+freeRemaining_other = "{{formatted}} gratis PDFs tilbage"
 processed_one = "{{formattedCount}} PDF behandlet."
 processed_other = "{{formattedCount}} PDFs behandlet."
 processedWithRate_one = "{{formattedCount}} PDF behandlet, til {{rate}} hver."
@@ -6534,6 +6650,350 @@ signature = "signatur"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Ny forbindelse"
+createTitleFor = "Forbind {{name}}"
+delete = "Slet"
+edit = "Rediger"
+editTitle = "Rediger forbindelse"
+unsupportedType = "Denne forbindelsestype kan ikke redigeres her."
+
+[portal.connections.categories.advanced]
+description = "Til en tjeneste, vi endnu ikke understøtter."
+label = "Avanceret"
+
+[portal.connections.categories.audit]
+description = "Registrér, hvad der skete med et dokument, hvor dine revisorer allerede kigger."
+label = "Audit- og compliance-logning"
+
+[portal.connections.categories.notify]
+description = "Fortæl et andet system, at noget er sket."
+label = "Notifikation og workflow"
+
+[portal.connections.categories.security]
+description = "Scan eller mærk et dokument, før det går videre."
+label = "Sikkerhed og klassificering"
+
+[portal.connections.categories.signing]
+description = "Send et dokument ud til signering eller notarbekræftelse."
+label = "E-signatur og notarbekræftelse"
+
+[portal.connections.categories.storage]
+description = "Hvor behandlede dokumenter ender - en bucket, et drev, en ticket eller en side."
+label = "Fil og vedhæft"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling gemmer dette krypteret og viser det aldrig igen."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Trin, der bruger denne forbindelse, kan kun kalde stier under denne URL, aldrig en anden host."
+label = "Server-URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Adgangskode"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Brugernavn"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Indsæt den URL, tjenesten gav dig. Kun stier under den kan kaldes."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Forbindelsesnavn"
+namePlaceholder = "f.eks. Produktion"
+
+[portal.connections.picker]
+cancel = "Annullér"
+createNew = "Ny forbindelse..."
+placeholder = "Vælg en forbindelse"
+save = "Gem forbindelse"
+
+[portal.connections.picker2]
+back = "Skift integration"
+heading = "Hvad vil du forbinde?"
+noResultsBody = "Vi understøtter det ikke endnu - fortæl os om det, så ser vi på at tilføje det."
+noResultsTitle = "Intet matcher \"{{query}}\""
+searchPlaceholder = "Søg i integrationer - prøv \"sign\", \"ocr\" eller et produktnavn"
+
+[portal.connections.types.api]
+description = "Kald enhver HTTP API fra en politik. Du vælger URL'en, godkendelse og payload."
+label = "Brugerdefineret API"
+
+[portal.connections.types.api.fields.authType]
+label = "Godkendelse"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Brugernavn og adgangskode"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token i en brugerdefineret header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Ingen"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Log ind for et token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Trin, der bruger denne forbindelse, kan kun kalde stier under denne URL, aldrig en anden host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Headernavn"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Login-sti"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Adgangskode"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Hvis API'en svarer med et downloadlink, må kun disse hosts hentes. Adskil med kommaer. Lad stå tomt for kun at tillade base URL'ens egen host."
+label = "Tilladte resultat-hosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Send tokenet som denne header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Response-headeren, som login-kaldet returnerer tokenet i, f.eks. X-Auth-Token."
+label = "Token-response-header"
+
+[portal.connections.types.api.fields.username]
+label = "Brugernavn"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Scan dokumenter for malware på en server, du kører - intet forlader dit netværk."
+label = "ClamAV (selvhostet)"
+
+[portal.connections.types.cloudmersive]
+description = "Virus- og indholdsscanning for dokumenter i en politik."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Bloker dokumenter, der indeholder makroer, eksekverbare filer, scripts eller indlejrede objekter - ikke kun kendt malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Vedhæft behandlede dokumenter til en Confluence-side."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Send dokumenter til ConsignO Cloud (Notarius) til elektronisk signatur og notarbekræftelse."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Dit ConsignO Cloud-miljø, inklusive /api/v1."
+label = "Server-URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Adgangskode"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Kun nødvendigt, hvis din organisation bruger tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Brugernavn"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Send en besked til Discord, når en politik behandler et dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indekser en audit-hændelse i Elasticsearch, hver gang en politik håndterer et dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Poll en FTP- eller FTPS-server for nye dokumenter."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Forbindelsestilstand"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktiv"
+passive = "Passiv (anbefalet)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Almindelig FTP sender legitimationsoplysninger og filer ukrypteret; vælg FTPS, hvis serveren understøtter det."
+label = "Kryptering"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (eksplicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Ingen (almindelig FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Send en besked til et Google Chat-rum, når en politik kører."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Vedhæft behandlede dokumenter til en Jira-issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Send et dokument eller en notifikation via email, når en politik kører."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Arkivér behandlede dokumenter i Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App-adgangskode"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Registrér persondata i dokumenttekst ved hjælp af en Presidio-server, du kører."
+label = "Presidio (selvhostet)"
+
+[portal.connections.types.purview]
+description = "Læs og anvend Microsoft Purview-følsomhedsetiketter på PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Valgfrit. Kun nødvendigt for at vælge etiketter efter navn; mærkning fungerer uden det."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Stemples på hver etiket som dens SiteId, så Purview-aware-værktøjer ved, hvilken organisation der anvendte den."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "En S3 bucket, som kilder kan læse fra, og pipeline-output kan skrive til."
+label = "S3-lager"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Lad stå tomt for AWS. Angiv dette for MinIO eller et andet S3-kompatibelt lager."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Send et dokument eller en notifikation via email, når en politik kører."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Poll en SFTP-server (SSH) for nye dokumenter."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Valgfrit. Serverens SHA-256 host key fingerprint (fra `ssh-keyscan host | ssh-keygen -lf -`). Når det er angivet, accepteres kun en server, der præsenterer denne nøgle; når det er tomt, fastgøres nøglen, der ses ved første forbindelse, og senere ændringer afvises."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Nøgle-passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Lad stå tomt, hvis du i stedet godkender med en privat nøgle."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Valgfrit. Indsæt en OpenSSH privat nøgle for at godkende med en nøgle i stedet for en adgangskode."
+label = "Privat nøgle"
+
+[portal.connections.types.slack]
+description = "Send en besked til Slack, når en politik behandler et dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Overvåg en SMB / CIFS-netværksdeling (Windows eller Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Netværksdeling"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Valgfrit. Windows-domænet eller arbejdsgruppen, hvis din server bruger en."
+label = "Domæne"
+
+[portal.connections.types.smb.fields.share]
+label = "Deling"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Send en audit-hændelse til Splunk, hver gang en politik håndterer et dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Send en audit-hændelse til en Sumo Logic HTTP-collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Send en besked til en Teams-kanal, når en politik kører."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Send hvert dokument, eller kun detaljerne, til en URL, du vælger."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Udløs et Zap- eller Make-scenarie fra en politik."
+label = "Zapier og Make"
+
+[portal.docs]
+browse = "Gennemse docs"
+viewSource = "Vis kilde på GitHub"
+
 [portal.docs.authentication]
 codeCaption = "hver forespørgsel"
 eyebrow = "KOM GODT I GANG"
@@ -6619,11 +7079,19 @@ title = "Officielle SDKs"
 beta = "Beta"
 deprecated = "Forældet"
 
+[portal.docs.search]
+empty = "Ingen matchende docs"
+placeholder = "Søg i docs"
+results = "{{count}} resultater"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Medfølgende, navngivne kapabiliteter, som din agent kalder som ét enkelt værktøj. Hver skill er en deterministisk operationskæde med evals tilknyttet."
 title = "Agent-skills"
 
+[portal.docs.toc]
+title = "På denne side"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "Type"
 user = "Bruger"
 
 [portal.documents.queue.empty]
+connectSource = "Forbind en kilde"
+createPipeline = "Opret en pipeline"
 description = "Når kilder sender dokumenter ind i dine pipelines, vises de her til gennemgang."
 title = "Ingen dokumenter i køen"
 
@@ -6806,13 +7276,71 @@ description = "Denne visning ramte en uventet fejl. Prøv igen, eller vælg en a
 retry = "Prøv igen"
 title = "Noget gik galt på denne side"
 
+[portal.home.download]
+back = "Tilbage"
+body = "Download desktop-appen, eller self-host serveren."
+done = "Færdig"
+guide = "Åbn {{name}}-guiden"
+openInBrowser = "Åbn i browser i stedet"
+sectionDesktop = "Desktop-app"
+sectionSelfHosted = "Selvhostet"
+title = "Installer Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Kør det officielle image på din server."
+note = "Åbner på :8080. Standardlogin: admin / stirling."
+tagline = "Kør serveren i en container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installer det officielle Helm chart."
+note = "Tilføj en PVC til /configs for at bevare indstillinger."
+tagline = "Udrul til en cluster med Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Native builds til din distribution."
+guideBtn = "Se Linux-installationsmuligheder"
+note = "AppImage, .deb og .rpm builds er tilgængelige til almindelige distros."
+tagline = "Native desktop-app til din distro"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Eller via Homebrew"
+detailBody = "Kør installationsprogrammet, eller brug Homebrew."
+downloadBtn = "Download til macOS"
+tagline = "Native app til Apple silicon og Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Kør .jar på en bare metal-server."
+downloadBtn = "Download .jar"
+note = "Kræver Java 21+. Åbner på :8080; standardlogin admin / stirling."
+runLabel = "Kør den derefter"
+tagline = "Kør .jar på en bare metal-server"
+title = "Manuel serveropsætning"
+
+[portal.home.download.windows]
+altLabel = "Eller via winget"
+detailBody = "Kør installationsprogrammet, eller brug en pakkehåndtering."
+downloadBtn = "Download installationsprogram"
+tagline = "Native app til Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktive"
-invite = "Inviter teammedlemmer"
+activeOfDeployed = "{{active}} af {{total}} aktive denne måned"
 name = "Stirling PDF Editor"
 open = "Åbn i browser"
 updated = "opdateret {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Afslut udrulning"
+options = "Se udrulningsmuligheder"
+start = "Udrul Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Selvhostet · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "God eftermiddag"
 evening = "God aften"
 morning = "God morgen"
 
-[portal.home.onboarding]
-dismiss = "Afvis opsætning"
-notStarted = "Ikke startet"
-progress = "{{done}} af {{total}} færdig"
-title = "Færdiggør opsætning"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC på organisationsniveau, forpligtende volumenpriser og air-gapped udrulning."
-cta = "Start prøveperiode"
-ctaQuote = "Få tilbud"
-lead = "For 250+ medarbejdere."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Udrul desktopappen, gratis for altid."
-title = "Download PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktive · {{recommended}} anbefalede"
-chip = "{{active}} aktive"
-title = "Slå politikker til"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} forbundne · hver PDF styres, hvor den lander"
-chip = "{{connected}} forbundne"
-title = "Forbind dine kilder"
-
-[portal.home.quickActions]
-subtitle = "Vigtigste opgaver i dag"
-title = "Hurtige handlinger"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-trins composer over det typede op-bibliotek"
-title = "Byg en pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenter, webhooks, overvågede mapper"
-title = "Forbind en kilde"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Afgrænset nøgle med hastighedsgrænser og IP allowlist"
-title = "Udsted en API-nøgle"
-
 [portal.infrastructure]
 manageEditorDeployment = "Administrer Editor-udrulning"
 sectionsAriaLabel = "Infrastruktursektorer"
@@ -6878,13 +7363,9 @@ heading = "API-nøgler"
 subheading = "Afgrænsede legitimationsoplysninger med hastighedsgrænser pr. nøgle, tilladelser og IP allowlists."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Tilladte IP'er"
-anyIp = "Enhver IP (ingen allowlist)"
 created = "Oprettet"
 lastUsed = "Sidst brugt"
-permissions = "Tilladelser"
-rateLimit = "Hastighedsgrænse"
-rateLimitValue = "{{value}} req/min"
+revoke = "Tilbagekald nøgle"
 usageMonth = "Forbrug denne måned"
 usageToday = "Forbrug i dag"
 
@@ -6892,6 +7373,20 @@ usageToday = "Forbrug i dag"
 description = "Opret en afgrænset nøgle for at begynde at kalde Stirling API."
 title = "Ingen API-nøgler endnu"
 
+[portal.infrastructure.apiKeys.error]
+load = "Kunne ikke indlæse dine API-nøgler. Prøv igen."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Tilbagekald \"{{name}}\"? Enhver integration, der stadig bruger denne nøgle, vil straks begynde at modtage 401-fejl. Dette kan ikke fortrydes."
+cancel = "Annuller"
+confirm = "Tilbagekald nøgle"
+title = "Tilbagekald API-nøgle"
+
+[portal.infrastructure.attestationLabel]
+attested = "Attesteret"
+inScope = "Inden for scope"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrer revisionshændelser efter kategori"
 heading = "Revisionslogge"
@@ -6935,6 +7430,7 @@ all = "Alle"
 auth = "Godkendelse"
 config = "Konfiguration"
 elevation = "Forhøjet adgang"
+policy = "Politik"
 processing = "Behandling"
 security = "Sikkerhed"
 
@@ -6944,19 +7440,35 @@ title = "Du har ikke adgang"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguration"
-elevation = "Forhøjet adgang"
+policy = "Politik"
 processing = "Behandling"
 totalEvents = "Hændelser i alt · 24 t"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Godkendelse"
+config = "Konfiguration"
+elevation = "Ophøjelse"
+policy = "Politik"
+processing = "Behandling"
+security = "Sikkerhed"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Fejl"
+info = "Info"
+success = "Succes"
+warning = "Advarsel"
+
+[portal.infrastructure.certLabel]
+certified = "Certificeret"
+inProgress = "I gang"
+notStarted = "Ikke startet"
+
 [portal.infrastructure.createKey]
 cancel = "Annuller"
 createKey = "Opret nøgle"
 done = "Færdig"
-ipAllowlistHelper = "Kommaseparerede CIDR-intervaller. Lad stå tomt for at tillade enhver IP."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Nøglenavn"
 keyNamePlaceholder = "f.eks. Produktion · ingest"
-permissionsLabel = "Tilladelser"
 secretKeyCaption = "Hemmelig nøgle"
 secretWarning = "Gem dette i en secrets manager. Stirling gemmer kun nogensinde en hash — der er ingen måde at gendanne den senere på."
 subtitle = "Afgræns nøglen til det minimum, den behøver. Du kan rotere eller tilbagekalde den når som helst."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopiér denne hemmelighed nu — den vises ikke igen."
 title = "Opret API-nøgle"
 titleCreated = "Nøgle oprettet"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "I kø"
+rolledBack = "Rullet tilbage"
+rolling = "Udrulles"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Live tilstand for hver udrullet Stirling-region — latens, belast
 description = "Udrullede regioner vises her, når dit arbejdsområde er provisioneret."
 title = "Ingen regioner udrullet"
 
+[portal.infrastructure.keyLabel]
+active = "Aktiv"
+revoked = "Tilbagekaldt"
+
+[portal.infrastructure.modelLabel]
+active = "Aktiv"
+degraded = "Forringet"
+disabled = "Deaktiveret"
+
 [portal.infrastructure.models]
 heading = "Modeller"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Type"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/kald"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktive modeller"
 avgLatency = "Gns. latens"
@@ -7049,6 +7580,17 @@ modelForAria = "Model for {{operation}}"
 operation = "Operation"
 routedTo = "Routet til"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klassifikation"
+extraction = "Udtrækning"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Forringet"
+down = "Nede"
+healthy = "Sund"
+
 [portal.infrastructure.security.access.byok]
 description = "Lever en nøgle fra dit eget KMS. Stirling krypterer med den, men kan stadig læse."
 label = "Brug din egen nøgle (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeller"
 security = "Sikkerhed"
 storage = "Lager"
 
+[portal.integrations]
+addAnother = "Tilføj en mere"
+availableHeading = "Tilgængelige"
+comingSoonHeading = "Kommer snart"
+connect = "Forbind"
+connectedHeading = "Forbundet"
+connectionCount_one = "{{count}} forbindelse"
+connectionCount_other = "{{count}} forbindelser"
+customApi = "Brugerdefineret API"
+searchPlaceholder = "Søg efter integrationer"
+subtitle = "Alt, Stirling kan tale med. Legitimationsoplysninger oprettes én gang her og refereres derefter af kilder, politikker og pipelines."
+title = "Integrationer"
+typedName = "{{tool}}-navn"
+
+[portal.integrations.filters]
+all = "Alle"
+audit = "Audit"
+connected = "Forbundet"
+notify = "Giv besked"
+security = "Sikkerhed"
+signing = "Signering"
+storage = "Lager"
+
+[portal.integrations.status]
+connected = "Forbundet"
+
+[portal.integrations.table]
+integration = "Integration"
+worksWith = "Fungerer med"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Politikker"
+sources = "Kilder"
+
+[portal.legal]
+draft = "{{label}} · udkast"
+loadError = "Kunne ikke indlæse dette dokument. Prøv igen."
+loading = "Indlæser…"
+title = "Juridisk dokument"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponenter"
@@ -7182,6 +7765,7 @@ documents = "Dokumenter"
 editor = "Editor"
 home = "Hjem"
 infrastructure = "Infrastruktur"
+integrations = "Integrationer"
 pipelines = "Pipelines"
 policies = "Politikker"
 procurement = "Indkøb"
@@ -7190,25 +7774,9 @@ sources = "Kilder"
 usage = "Forbrug og fakturering"
 users = "Brugere"
 
-[portal.notifications]
-markAllRead = "Markér alle som læst"
-title = "Notifikationer"
-viewAll = "Vis alle"
-
-[portal.notifications.ariaLabel]
-none = "Notifikationer, ingen ulæste"
-unread_one = "Notifikationer, {{count}} ulæst"
-unread_other = "Notifikationer, {{count}} ulæste"
-
-[portal.notifications.count]
-allRead = "alle læst"
-loading = "indlæser"
-new_one = "{{count}} ny"
-new_other = "{{count}} nye"
-
-[portal.notifications.empty]
-description = "Ingen nye notifikationer."
-title = "Du er helt ajour"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Hver automatiseret dokumentpipeline på backenden: en ordnet kæde af operationer over et sæt kilder, kørt på en trigger. Klik på en række for dens trin og kilder."
@@ -7220,15 +7788,28 @@ newPipeline = "Ny pipeline"
 [portal.pipelines.builder]
 addStep = "Tilføj værktøj"
 back = "Tilbage til pipelines"
+cannotFollow = "Kan ikke tage {{produced}}"
+chooseAccount = "Vælg en konto"
+chooseDestination = "Vælg en destination"
+chooseOperation = "Vælg, hvad dette trin gør"
+chooseSource = "Vælg en kilde"
 discard = "Kassér ændringer"
 enabled = "Aktiveret"
+inputs = "Input"
+inputSource = "Inputkilde"
+inputTrigger = "Trigger"
 keepEditing = "Fortsæt redigering"
+needsConfiguring = "Skal opsættes"
 needsUpload = "Kræver en uploadet fil"
+noSources = "Ingen kilder er forbundet endnu. Opret en for at bruge den som input."
 noToolMatches = "Ingen værktøjer matcher din søgning."
 pipelineSettings = "Pipelineindstillinger"
 searchTools = "Søg i værktøjer"
 selectToolBody = "Tilføj et værktøj for at bygge din pipeline."
 selectToolTitle = "Ingen værktøjer endnu"
+sendToSystem = "Send til et andet system"
+stepsIncompatible = "Disse trin kan ikke køre på det, deres forrige trin producerer: {{tools}}."
+stepsNeedSetup = "Disse trin skal stadig opsættes før lagring: {{tools}}."
 toolSettings = "Værktøjsindstillinger"
 unknownStep = "Ukendt operation, bevaret som den er."
 unsavedBody = "Du har ændringer, der ikke er gemt. Gem dem, før du forlader siden, eller kassér dem?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Ikke-gemte ændringer"
 uploadUnsupported = "Uploadede filer understøttes endnu ikke i pipelines, så disse trin kan ikke gemmes: {{tools}}."
 usesDefaults = "Kører med standardindstillinger"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinerer alle filer fra det forrige trin"
+fan-out = "Kører én gang pr. fil fra det forrige trin"
+format-mismatch = "Kræver {{accepts}}, men det forrige trin producerer {{produced}}"
+output-uncertain = "Kører måske ikke: outputtet fra det forrige trin afhænger af, hvordan det er opsat"
+source-mismatch = "Kræver {{accepts}}, men denne pipelines input er {{produced}}"
+undeclared-operation = "Kan ikke kontrollere, hvad dette trin accepterer"
+
 [portal.pipelines.composer]
 addTool = "Tilføj værktøj"
 cancel = "Annuller"
 chainEmpty = "Tilføj et værktøj for at begynde at bygge din pipeline."
 create = "Opret pipeline"
-directory = "Outputmappe"
-directoryHelp = "Absolut sti på serveren. Skal være inden for de konfigurerede tilladte mapper."
 editingUnsupported = "Visning af disse værktøjsparametre til redigering understøttes endnu ikke."
 moveDown = "Flyt ned"
 moveUp = "Flyt op"
 name = "Navn"
 namePlaceholder = "f.eks. Redaction sweep"
-noSources = "Ingen kilder forbundet endnu. Pipelinen kan stadig køre på filer, der leveres direkte til den."
 noToolSettings = "Dette værktøj har ingen konfigurerbare indstillinger."
 operations_one = "Operation ({{count}})"
 operations_other = "Operationer ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Slet"
 title = "Slet pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Ryd historik"
 delete = "Slet pipeline"
 run = "Kør nu"
 
 [portal.pipelines.empty]
 action = "Opret en pipeline"
+connectSource = "Forbind en kilde"
 description = "Opret din første pipeline: vælg de kilder, den kører over, kæd operationerne sammen, og vælg, hvor output skal placeres."
 title = "Ingen pipelines endnu"
 
@@ -7286,15 +7874,17 @@ active = "Aktive"
 paused = "Sat på pause"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Skriv til mappe"
-inline = "Returner filer"
-
 [portal.pipelines.run]
+allProcessed_one = "Intet at køre: kildens {{count}} dokument er allerede behandlet."
+allProcessed_other = "Intet at køre: alle {{count}} dokumenter i kilderne er allerede behandlet."
 completed_one = "Kørsel fuldført."
 completed_other = "Alle {{count}} kørsler fuldført."
 empty = "Intet at køre: kilderne havde ingen dokumenter at behandle."
 failed = "Kørsel mislykkedes: {{error}}"
+historyCleared = "Historik ryddet. Næste kørsel genbehandler alt, der aktuelt er i kilderne."
+inFlight = "Intet nyt at køre: dokumenter behandles stadig fra en tidligere kørsel."
+parked_one = "Intet at køre: {{count}} dokument fejlede tidligere og er parkeret. Ret årsagen, og ryd derefter historikken for at prøve igen."
+parked_other = "Intet at køre: {{count}} dokumenter fejlede tidligere og er parkeret. Ret årsagen, og ryd derefter historikken for at prøve igen."
 running = "Kørsel startet; stadig i gang."
 timeout = "Kørslen tager længere end forventet; den kan stadig blive færdig i baggrunden."
 
@@ -7314,12 +7904,18 @@ manual = "Manuel"
 schedule = "Planlagt"
 
 [portal.policies]
+defaultName = "{{category}}-politik"
 subtitle = "Faste automatiseringer, der håndhæver en værktøjspipeline på hvert dokument. Hver politik udløses ved upload eller eksport, kører sin værktøjskæde og gemmer den håndhævede version ved siden af originalen."
 title = "Politikker"
 
 [portal.policies.card]
 comingSoon = "Opgrader til Enterprise"
 notSetUp = "Ikke opsat"
+requiresAiEngine = "Kræver AI-motor"
+
+[portal.policies.categories.classification]
+desc = "Identificer hvert dokuments type ved upload, og tag dets metadata til arkivering og søgning."
+label = "Klassifikation"
 
 [portal.policies.categories.compliance]
 desc = "Håndhæv HIPAA-, GDPR-, SOC 2- eller FedRAMP-krav på hvert dokument."
@@ -7344,6 +7940,13 @@ label = "Sikkerhed"
 [portal.policies.config]
 scopeAll = "Alle dokumenter"
 
+[portal.policies.config.classification]
+summary = "Klassificerer hvert uploadet dokument mod dit teams labels og tagger dets metadata."
+
+[portal.policies.config.classification.rules]
+0 = "Klassificer"
+1 = "Tag metadata"
+
 [portal.policies.config.compliance]
 summary = "Validerer dokumenter mod regulatoriske frameworks, før de forlader systemet."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. konfidens"
 2 = "Navngiv"
 3 = "Normaliser"
 
+[portal.policies.config.purview]
+label = "Anvend en Microsoft Purview-følsomhedslabel"
+
+[portal.policies.config.purview.fields]
+connection = "Purview-tenant"
+labelId = "Label ID"
+labelIdHelp = "Labelens GUID fra Purview-portalen. Anvendelse af en label skriver dens metadata på PDF'en; den kan ikke kryptere, hvilket kræver Microsoft-klienten."
+labelName = "Labelnavn (valgfrit)"
+labelNameHelp = "Registreres sammen med ID'et, så personer og værktøjer kan genkende labelen."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview skelner mellem en label, som en politik anvendte, og en, som en person valgte."
+label = "Hvordan labelen registreres"
+privileged = "Som valgt af en person"
+standard = "Som anvendt automatisk"
+
+[portal.policies.config.purviewRead]
+label = "Læs en Microsoft Purview-label"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview-tenant"
+connectionHelp = "Læser den label, dokumentet allerede har, så senere trin kan handle på den."
+
 [portal.policies.config.retention]
 summary = "Håndhæver, hvor længe dokumenter bevares, hvornår de arkiveres, og hvornår de slettes."
 
@@ -7438,6 +8064,7 @@ title = "Ingen aktivitet endnu"
 [portal.policies.endpoints]
 addWatermark = "Vandmærke"
 autoRedact = "Rediger PII"
+classifyAndLabel = "Klassificer"
 compressPdf = "Komprimer"
 flatten = "Udflad"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Dine politikker er gemt og vises, når forbindelsen er gendannet.
 retry = "Prøv igen"
 title = "Backend utilgængelig"
 
+[portal.policies.operations]
+change = "Ændr, hvad dette trin gør"
+noResults = "Ingen trin matcher det. Prøv et produktnavn eller \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Søg efter trin - prøv \"scan\", \"attach\" eller et produktnavn"
+
+[portal.policies.operations.bodyMode]
+binary = "Rå filbytes"
+json = "Inde i en JSON-payload"
+multipart = "Som en filupload (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Din egen ClamAV-server kontrollerer dokumentet; intet forlader dit netværk."
+label = "Scan for virus (selvhostet)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Afviser dokumenter, der indeholder makroer, eksekverbare filer, scripts eller indlejrede objekter."
+label = "Bloker aktivt indhold"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive kontrollerer dokumentet, og kørslen stopper, hvis det ikke er rent."
+label = "Scan for virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arkiverer det behandlede dokument på en side."
+label = "Vedhæft til en Confluence-side"
+
+[portal.policies.operations.consignoSubmit]
+description = "Indsender dokumentet til ConsignO Cloud til signering."
+label = "Send til signatur (ConsignO)"
+note = "Indsender dokumentet. Hentning af den signerede kopi understøttes endnu ikke, fordi et trin ikke kan videregive et resultat til et senere trin."
+
+[portal.policies.operations.customApiCall]
+description = "Udform selv kaldet: sti, metode, body og håndtering af svar."
+label = "Kald en brugerdefineret API"
+
+[portal.policies.operations.discordNotify]
+description = "Fortæller en kanal, at politikken håndterede et dokument."
+label = "Post en besked til Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Registrerer, hvad politikken gjorde, som et søgbart dokument."
+label = "Indekser en audit-hændelse i Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart passer til upload-API'er; JSON passer til API'er, der vil have filen inde i en payload; binær sender de rå bytes."
+label = "Sådan sendes dokumentet"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "En JSON-body sendt som den er. {{document.base64}} indeholder filen; {{document.*}} og {{run.*}} udfyldes pr. dokument."
+label = "JSON-body"
+
+[portal.policies.operations.fields.connection]
+label = "Konto"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun-domæne"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Formularfeltet, som API'en forventer dokumentet under."
+label = "Filfeltnavn"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Fra"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Et JSON-objekt med header-navn/værdi-par. Forbindelsens legitimationsoplysninger tilføjes for dig."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Sagsnøgle"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Sendes som beskedens body. {{document.*}} og {{run.*}} udfyldes pr. dokument."
+label = "Besked"
+
+[portal.policies.operations.fields.method]
+label = "Metode"
+
+[portal.policies.operations.fields.pageId]
+label = "Side-ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Tilføjes til forbindelsens base-URL. Den kan aldrig nå en anden host."
+label = "Sti"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Hvor på drevet den skal skrives. {{document.filename}} udfyldes pr. dokument."
+label = "Destinationssti"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Rapport efterlader dokumentet urørt. Erstatning bytter det ud med det, der kommer tilbage."
+label = "Hvad der skal gøres med svaret"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Underskriverens email"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Emne"
+placeholder = "Behandlet: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyserer denne tekst. Brug {{document.title}}, eller indsæt den tekst, du vil have kontrolleret."
+label = "Tekst til kontrol"
+
+[portal.policies.operations.fields.to]
+label = "Til"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud-brugernavn"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Fortæller et space, at politikken håndterede et dokument."
+label = "Post en besked til Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arkiverer det behandlede dokument på en sag."
+label = "Vedhæft til en Jira-sag"
+
+[portal.policies.operations.mailgunEmail]
+description = "Sender det behandlede dokument som en vedhæftning."
+label = "Send dokumentet via email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Skriver det behandlede dokument til en mappe."
+label = "Upload til Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Din egen Presidio-server rapporterer de persondata, den finder."
+label = "Registrer persondata"
+note = "Presidio læser tekst, ikke filer. Giv den den tekst, du vil have kontrolleret — selve dokumentet uploades ikke."
+
+[portal.policies.operations.responseMode]
+replace = "Erstat dokumentet med svaret"
+report = "Behold dokumentet, registrer svaret"
+
+[portal.policies.operations.sendgridEmail]
+description = "Sender det behandlede dokument som en vedhæftning."
+label = "Send dokumentet via email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Fortæller en kanal, at politikken håndterede et dokument."
+label = "Post en besked til Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Registrerer, hvad politikken gjorde, hvor dine auditører allerede kigger."
+label = "Send en audit-hændelse til Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Registrerer, hvad politikken gjorde, til en HTTP-collector."
+label = "Send en audit-hændelse til Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Fortæller en kanal, at politikken håndterede et dokument."
+label = "Post en besked til Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Sender selve dokumentet til en URL, du vælger."
+label = "Post dokumentet til en webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Overdrager kørselsdetaljerne til din automatisering."
+label = "Udløs et Zap- eller Make-scenarie"
+
 [portal.policies.stats]
 activeFor = "Aktiv"
 dataProcessed = "Data behandlet"
@@ -7473,6 +8277,13 @@ label = "Dokumenter håndhævet"
 description = "Konfigureret, men ikke aktiv"
 label = "Sat på pause"
 
+[portal.policies.table]
+appliesTo = "Gælder for"
+docs = "Docs håndhævet"
+enforces = "Håndhæver"
+policy = "Politik"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Tilbage"
 cancel = "Annuller"
@@ -7480,6 +8291,10 @@ continue = "Fortsæt"
 enablePolicy = "Aktivér politik"
 saveChanges = "Gem ændringer"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identificerer dokumentets type ud fra dit teams labels og tagger det, så det arkiveres og søges efter kategori."
+label = "Klassificer dokumentet"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimerer dokumentet til en mindre filstørrelse."
 label = "Reducer filstørrelse"
@@ -7500,10 +8315,18 @@ label = "Rediger følsomme oplysninger"
 desc = "Fjerner skjult JavaScript, så intet kan køre automatisk, når dokumentet åbnes."
 label = "Fjern aktivt indhold"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Beviser, at dokumentet fandtes i præcis denne form på et bestemt tidspunkt, ved hjælp af en uafhængig tidsstempelmyndighed. Kun en hash sendes - dokumentet forlader aldrig din server."
+label = "Tilføj et betroet tidsstempel"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Sætter et synligt mærke (f.eks. “Fortroligt”) på hver side."
 label = "Anvend et vandmærke"
 
+[portal.policies.wizard.classification]
+description = "Hvert uploadet dokument klassificeres mod de indbyggede labels og tagges med de typer, der passer. Labelsættet deles på tværs af hele dit team."
+labelsHeading = "Klassifikationslabels"
+
 [portal.policies.wizard.errors]
 noTools = "Aktivér først mindst ét værktøj i workflowet."
 saveFailed = "Kunne ikke gemme politikken. Prøv igen."
@@ -7548,73 +8371,118 @@ setUp = "Opsæt {{category}}-politik"
 [portal.policies.wizard.workflow]
 description = "Vælg, hvad denne politik gør ved hvert dokument, den behandler."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktive"
-noRule = "Ingen regel håndhævet endnu"
-subtitle = "Faste automatiseringer, som hvert dokument passerer gennem, uanset hvilken pipeline der håndterer det."
-title = "Hvad der kører på dine PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Opgrader til Enterprise"
-configure = "Konfigurer"
 setUp = "Opsæt"
 
-[portal.policySummary.column]
-activeRule = "Aktiv regel"
-policy = "Politik"
-status = "Status"
+[portal.processorFlow]
+footnote = "Optællinger er for de seneste 24 timer. Flowhastighed er illustrativ."
+liveBadge = "Live"
+stats = "{{connected}} forbundet · {{processed}} PDF'er behandlet"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Når politikker er konfigureret, vises kategorierne her."
-title = "Ingen politikker endnu"
+[portal.processorFlow.lens]
+ariaLabel = "Visningstilstand"
+flow = "Flow"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktiv"
-off = "Fra"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 t"
+failed = "Mislykkedes"
+heading = "Resultater"
+success = "Leveret"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktive"
+count = "{{n}} · 24 t"
+heading = "Politikker"
+setUp = "Opsæt"
 soon = "Snart"
 
-[portal.processingStatus]
-managePlan = "Administrer abonnement"
-volumeSuffix = "PDFs behandlet · sidste 30 dage"
+[portal.processorFlow.sankey]
+waist = "Politikker · {{n}} aktive"
+
+[portal.processorFlow.sankey.empty]
+description = "Forbind en kilde, og slå en politik til for at se dokumenter flyde gennem processoren."
+title = "Intet flow endnu"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Forbind"
+editor = "Stirling PDF Editor"
+heading = "Kilder"
+perDay = "{{n}} / 24 t"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email-indtag"
 
 [portal.procurement]
-reset = "Nulstil indkøb (demo)"
 subtitle = "Få dit team evalueret, kontraheret og onboardet. Alle dokumenter samlet ét sted."
 title = "Indkøb"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Betal nu"
-request = "Anmod"
-sign = "Gennemgå og underskriv"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Accepter og abonnér"
+confidential = "Fortroligt"
 confirm = "Jeg har læst og accepterer Stirling Enterprise Agreement."
-eyebrow = "Aftale"
-intro = "Én samlet aftale dækker din aftale: Master Service Agreement, Order Form, EULA og Data Processing Agreement. Gennemgå den, og accepter derefter tilbuddet som et bindende abonnement."
-title = "Gennemgå din enterprise-aftale"
+docName = "Stirling Enterprise-aftale"
+docSub = "MSA, Order Form, EULA og DPA, samlet i én signatur."
+download = "Download"
+downloadDraftError = "Kunne ikke generere aftale-PDF'en - dokumentrendereren er utilgængelig. Prøv igen om lidt, eller kontakt support."
+downloadError = "Kunne ikke downloade den signerede aftale. Prøv igen."
+legalName = "Juridisk enhedsnavn"
+legalNamePlaceholder = "Den juridiske enhed, der skal underskrive"
+loadError = "Kunne ikke indlæse aftalen. Prøv igen."
+loading = "Indlæser aftalen..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Anmod om ændringer"
+scrollHint = "Rul for at gennemgå"
+signatory = "Underskriverens navn"
+signatoryPlaceholder = "Fulde navn"
+signatoryTitle = "Underskriverens titel"
+signatoryTitlePlaceholder = "f.eks. General Counsel"
+signError = "Kunne ikke registrere din signatur. Prøv igen."
 
 [portal.procurement.builder]
 addons = "Tilføjelser"
+addressLine1 = "Adresselinje 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresselinje 2"
+addressLine2Placeholder = "Suite, etage, bygning"
 back = "Tilbage"
 businessName = "Virksomhedsnavn"
 businessNamePlaceholder = "Din virksomhed"
+city = "By"
+cityPlaceholder = "San Francisco"
+completeRequired = "Udfyld de påkrævede felter (markeret *) med en gyldig email, før tilbuddet genereres."
+contactEmail = "Kontakt-email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kontaktnavn"
+contactNamePlaceholder = "Jane Doe"
 continue = "Fortsæt"
-country = "Land"
-countryEuro = "Eurozonen (EUR €)"
-countryUK = "Storbritannien (GBP £)"
-countryUS = "USA (USD $)"
+done = "Færdig"
 eula = "Jeg har læst og accepterer Stirling Enterprise EULA. Den regulerer den aftale, der genereres ud fra dette tilbud."
 generate = "Generer tilbud"
-included = "Inkluderet"
 indemnification = "IP-skadesløsholdelse"
 indemnificationSub = "Vi forsvarer kvalificerende IP-krav i henhold til EULA"
-offlineLicense = "Offline / air-gapped licens"
-offlineLicenseSub = "En downloadbar licensfil til en air-gapped self-hosted instans"
+paperEyebrow = "Enterprise-tilbud"
+paperFor = "Udarbejdet til"
+pdfSize = "PDF-størrelse"
+poNumber = "PO-nummer"
+poNumberPlaceholder = "Valgfrit"
+postalCode = "Postnummer"
+postalCodePlaceholder = "94105"
+posture = "Governance"
+posture_count = "~{{count}} politikker"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Klassifikation + Deling — standardindstillingerne"
+posture_governed = "Governed"
+posture_governedSub = "Tilføjer Sikkerhed og Routing"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Hver kategori — Compliance, Retention, Ingestion"
 qbr = "Kvartalsvise forretningsgennemgange"
 qbrSub = "Din SE gennemgår brug og roadmap hvert kvartal"
+region = "Stat / region"
+regionPlaceholder = "California"
 running = "{{annual}} / år · {{years}} år {{tcv}}"
 s1Sub = "Dit team og de PDFs, I forventer at køre hvert år."
 s1Title = "Hvor meget vil I behandle?"
@@ -7623,6 +8491,12 @@ s2Title = "Forpligtelse og service"
 s3Sub = "Til tilbuddet og den aftale, det genererer."
 s3Title = "Dine oplysninger"
 serviceLevel = "Serviceniveau"
+size_compact = "Kompakt"
+size_compactSub = "Mest tekst, under 1 MB"
+size_heavy = "Tung"
+size_heavySub = "Scannet eller billedtung, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Blandet tekst og billeder, 1 til 5 MB"
 slDedicated = "Dedikeret"
 slDedicatedSub = "4 arbejdstimer · dedikeret account manager · +30%"
 slPriority = "Prioritet"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Samme arbejdsdag · navngiven CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Næste arbejdsdag · delt CSM · inkluderet"
 stepOf = "Trin {{n}} af {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Valgfrit"
 term = "Periode"
 termDiscount = "{{pct}}% rabat for flerårig forpligtelse anvendt"
 title = "Byg dit tilbud"
@@ -7637,6 +8513,7 @@ training = "Onboarding og træning"
 trainingSub = "Live-sessioner til at få dit team i gang"
 users = "Samlet antal brugere"
 usersPlaceholder = "f.eks. 250"
+viewEula = "Læs den"
 volEstimated = "Estimeret ud fra {{count}} brugere (~2.000 PDFs hver, inklusive automatisering). Rediger, hvis du ved bedre."
 volManual = "Bruger dit tal. Genberegn ud fra teamstørrelsen når som helst."
 volNoUsers = "Ikke sikker? Indtast din teamstørrelse, så estimerer vi det."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "f.eks. 1.000.000"
 years_one = "{{count}} år"
 years_other = "{{count}} år"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokument"
-count_other = "{{count}} dokumenter"
-done = "Færdig"
-here = "Du er her"
-hide = "Skjul"
-optional = "Valgfrit"
-paidAddon = "Betalt tilføjelse"
-show = "Vis"
-subtitle = "Alt, hvad du har brug for på hvert trin af rejsen, vises efterhånden som aftalen bevæger sig gennem den."
-supportingSubtitle = "SOC 2, sikkerhedsgennemgange, skatteformularer og mere, klar når dit sikkerheds- eller indkøbsteam spørger. Nogle har et engangsgebyr."
-supportingTitle = "Understøtter din evaluering"
+[portal.procurement.documents]
+agreement = "Enterprise-aftale"
+agreementSub = "MSA, Order Form og DPA i én signatur."
+download = "Download"
+eula = "EULA & Commercial Terms"
+eulaSub = "Softwaren og de kommercielle self-serve-vilkår."
+invoice = "Faktura"
+invoiceSub = "Din første abonnementsfaktura."
+laterInvoice = "Tilgængelig efter du accepterer"
+laterQuote = "Tilgængelig når dit tilbud er udstedt"
+quote = "Tilbud"
+quoteSub = "Dit specificerede enterprise-tilbud."
+sla = "SLA-bilag"
+slaSub = "Supportniveauer og svartidsmål."
+subprocessors = "Underdatabehandlere"
+subprocessorsSub = "Tredjeparter, der behandler data på dine vegne."
+subtitle = "Din aftaledokumentation, tilgængelig når som helst."
 title = "Dokumenter"
-upcoming = "Kommende"
+view = "Vis"
 
 [portal.procurement.error]
 title = "Noget gik galt"
 
 [portal.procurement.hero]
-company = "Din enterprise-aftale"
+barAria = "Fase {{current}} af {{total}}"
 ctaAgreement = "Gennemgå og underskriv aftale"
-ctaLive = "Du er live"
-ctaPayment = "Tilføj betaling"
+ctaExploring = "Opsæt din prøveperiode"
 ctaQuote = "Gennemgå dit tilbud"
+ctaReviewQuote = "Gennemgå tilbud"
 ctaTrial = "Byg dit tilbud"
+documents = "Dokumenter"
 eyebrow = "Enterprise-indkøb"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Inviter teammedlemmer"
-keyDocs = "Nøgledokumenter"
-nextStep = "Næste trin: {{action}}"
-notStarted = "Ikke startet"
+licenseKey = "Licensnøgle"
+liveSub = "Din organisation er provisioneret, og din licens er aktiv."
+liveTitle = "Du er live på Stirling Enterprise"
+next = "Næste: {{stage}}"
 open = "Åbn indkøb"
 scheduleCall = "Planlæg et opkald"
-setup1Sub = "Inviter dine teammedlemmer"
-setup1Title = "Udrul PDF Editor"
-setup2Sub = "Slå behandling til på tværs af editorer og andre kilder"
-setup2Title = "Forbind PDF Processor"
-setup3Sub = "Slå Sikkerhed, Compliance, Routing eller Opbevaring til, når du har brug for dem"
-setup3Title = "Tilføj anbefalede politikker"
+sentenceAgreement = "gennemgå og underskrive aftalen"
+sentenceLive = "provisionering og udrulning"
+sentencePayment = "købsordre og betaling"
+sentenceQuote = "gennemgå og acceptere dit tilbud"
+sentenceTrial = "opsætte dit prøvearbejdsområde"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} dag tilbage"
 daysLeft_other = "{{count}} dage tilbage"
-engineerLabel = "Din solutions engineer"
-eyebrow = "Din udrulning"
-live = "Du er live på Stirling Enterprise"
-nextStep = "Næste trin: {{action}}"
-subtitle = "Din solutions engineer er med på hvert trin. Én næste handling ad gangen; den fulde tjekliste er nedenfor."
-title = "Fra prøveperiode til live, én guidet vej"
-trialTitle = "Enterprise-prøveperiode"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Én underskrift dækker MSA, order form, EULA og DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Kunne ikke generere offline licensfilen endnu — prøv igen om
 downloadOffline = "Download offline licens (.lic)"
 hint = "Indsæt denne nøgle i en self-hosted instans for at aktivere den, eller gem den til dine optegnelser. Opbevar den sikkert."
 label = "Din licensnøgle"
+subtitle = "Aktivér en selvhostet instans med denne nøgle, eller gem den til dine optegnelser."
+title = "Din licensnøgle"
+trialFileHint = "Dette er din prøvelicensfil. Når din aftale er på plads, skal du komme tilbage og downloade den igen — i modsætning til den online licensnøgle opdateres .lic-filen ikke af sig selv."
 
 [portal.procurement.link]
 cta = "Tilknyt konto"
@@ -7739,65 +8619,62 @@ description = "Dit abonnement er aktivt, og din licens er udstedt. Dit team er k
 eyebrow = "Live"
 title = "Du er live på Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Prøvenøgler, committed-volume-tilbud, aftalen med én underskrift, betaling og din dokumentoversigt ligger alle her, når du starter en enterprise-evaluering."
-eyebrow = "Kun Enterprise"
-talkToSales = "Tal med salg"
-title = "Indkøbssporet åbner med Enterprise"
-
 [portal.procurement.milestone]
-accept = "Accepter og fortsæt"
-description = "Download PDF'en for at dele den med dit team, kom tilbage for at acceptere, når du er klar, eller foretag ændringer."
-download = "Download PDF"
 downloadError = "Kunne ikke downloade tilbuds-PDF'en endnu — prøv igen om lidt."
-edit = "Rediger tilbud"
-eyebrow = "Tilbud {{number}}"
-perYear = " / år"
-preparedFor = "Udarbejdet til {{company}}"
-tcv = "{{value}} samlet kontraktværdi"
-title = "Dit tilbud er klar"
-
-[portal.procurement.modal]
-cancel = "Annuller"
-chooseFile = "Vælg fil"
-close = "Luk"
-downloadBody = "Din download begynder om kort tid."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "Ingen fil valgt"
-payBody = "Betal din bindende kontrakt med kort eller bankoverførsel via Stripe. Dit workspace klargøres, så snart betalingen er gået igennem."
-payCta = "Fortsæt til Stripe"
-payTitle = "Bekræft betaling"
-requestBodyFree = "Vi genererer dette efter behov. Bekræft, og din solutions engineer sender det snart videre."
-requestBodyPaid = "Dette er en betalt tilføjelse. Bekræft, og din solutions engineer vurderer omfanget og sender papirarbejdet."
-requestCta = "Anmod"
-requestTitle = "Anmod om dette dokument"
-signBody = "Åbner Stirling Enterprise Agreement til e-signatur: Én underskrift dækker MSA, order form, EULA og DPA. Vi medunderskriver automatisk, og du går videre til betaling."
-signCta = "Åbn til underskrift"
-signTitle = "Gennemgå og underskriv din aftale"
-uploadBody = "Send os din PO, så fakturerer vi mod den på dine vilkår. Træk PDF'en ind, eller vælg en fil nedenfor."
-uploadCta = "Upload indkøbsordre"
-uploadTitle = "Upload din indkøbsordre"
 
 [portal.procurement.payment]
 description = "Dit tilbud er accepteret, og din licens er allerede aktiv — dit team kan starte med det samme. Betal den første faktura, når du er klar; du kan betale eller downloade den her, ingen e-mail nødvendig."
+downloadAgreement = "Download signeret aftale"
 downloadInvoice = "Download faktura"
-simulate = "Simuler modtaget betaling (demo)"
+eyebrow = "Betaling"
 title = "Abonnement oprettet"
 viewInvoice = "Se og betal faktura"
 
+[portal.procurement.review]
+acceptCta = "Accepter tilbud"
+annual = "Årligt gebyr (år 1)"
+downloadCta = "Download tilbud"
+poNumber = "Købsordre: {{po}}"
+renewal = "Fornys til {{amount}}/år efter perioden (+{{pct}}% CPI)"
+tcv = "{{years}}-års periode, betalt fuldt ud på forhånd: {{tcv}}"
+validUntil = "Gyldig indtil {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Kunne ikke indlæse planlæggeren."
 fallbackLink = "Åbn planlægning i en ny fane"
+loading = "Indlæser planlægger..."
 subtitle = "Din solutions engineer guider dit team gennem udrulningen. Vælg et tidspunkt, der passer dig."
 title = "Planlæg et opkald"
 
-[portal.procurement.status]
-action = "Handling krævet"
-available = "Tilgængelig"
-complete = "Fuldført"
-pending = "Afventer"
-request = "På anmodning"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Forseglet, ingen udgående"
+back = "Tilbage"
+businessName = "Virksomhedsnavn"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Administreret, hurtigste start"
+continue = "Fortsæt"
+deployment = "Hvor skal det udrulles?"
+eula = "Jeg accepterer Stirling EULA & Commercial Terms."
+fullName = "Fulde navn"
+fullNamePlaceholder = "Dit navn"
+invites = "Inviter teammedlemmer · valgfrit"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Planlæg et opkald"
+seats = "Personer, der tester"
+seatsPlaceholder = "f.eks. 15"
+selfhost = "Selvhostet"
+selfhostSub = "Docker eller Kubernetes"
+start = "Start prøveperiode"
+stepOf = "Trin {{n}} af {{total}}"
+subtitle = "Gratis i 14 dage, intet kort kræves."
+subtitleDetails = "Et par oplysninger til dit tilbud og din aftale."
+talkFirst = "Foretrækker du at tale først?"
+title = "Opsæt din prøveperiode"
+viewEula = "Læs den"
+workEmail = "Arbejdsemail"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Forlængelse tilføjer 7 dage og underretter din solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Maksimum nået"
 subtitle = "Din gratis prøveperiode løber til {{date}}. Intet kort kræves."
 title = "Enterprise-prøveperiode"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Committed volume-priser, organisationsdækkende SSO + SCIM + RBAC, 90 dages uforanderlig audit og en dedikeret SE."
-homeCta = "Start prøveperiode →"
-homeHeadline = "Behandl millioner af PDFs."
-
-[portal.recentActivity]
-title = "Seneste aktivitet"
-viewAll = "Vis alle"
-
-[portal.recentActivity.empty]
-description = "Pipeline-kørsler, udrulninger og agenthændelser vises her."
-title = "Intet her endnu"
-
 [portal.search]
 ariaLabel = "Søg"
 placeholder = "Søg i Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Kontotilknytning"
 
-[portal.shell.header]
-accountFallback = "Konto"
-accountMenu = "Kontomenu"
-darkMode = "Mørk tilstand"
-lightMode = "Lys tilstand"
-search = "Søg"
-searchPlaceholder = "Søg…"
-signOut = "Log ud"
-switchToDark = "Skift til mørkt tema"
-switchToLight = "Skift til lyst tema"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Tilknyt Stirling-konto"
-planEditor = "Editor-abonnement"
-planEnterprise = "Enterprise-abonnement"
-planProcessor = "Processor-abonnement"
 primaryNav = "Primær navigation"
 switchApp = "Skift app"
 
+[portal.shell.topbar]
+closeNav = "Luk navigation"
+openNav = "Åbn navigation"
+search = "Søg"
+
 [portal.sources]
 subtitle = "Genanvendelige inputforbindelser, der sender dokumenter ind i Stirling. Konfigurer en forbindelse én gang, og referer derefter til den fra et vilkårligt antal politikker. Klik på en række for dens konfiguration og hvilke politikker, der bruger den."
 title = "Kilder"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Forbind kilde"
 
+[portal.sources.builder]
+back = "Tilbage til kilder"
+backToTypes = "Alle kildetyper"
+cancel = "Annuller"
+chooseHint = "Vælg, hvor dokumenter kommer fra. Nedtonede connectors er på vej."
+comingSoon = "Kommer snart"
+comingSoonHeading = "Kommer snart"
+create = "Opret kilde"
+createTitle = "Forbind en kilde"
+delete = "Slet"
+editTitle = "Rediger kilde"
+enabled = "Aktiveret"
+save = "Gem ændringer"
+
+[portal.sources.builder.folderAccess]
+description = "Mappeautomatiseringer kan kun bruge mapper, som en administrator har tilladt. Tilføj den under indstillinger for Mappeadgang, og prøv derefter igen."
+openSettings = "Indstillinger for Mappeadgang"
+title = "Denne mappe er ikke tilladt"
+
 [portal.sources.delete]
 body = "Slet \"{{name}}\"? Dette kan ikke fortrydes. Politikker, der refererer til den, skal opdateres."
 cancel = "Annuller"
 confirm = "Slet"
 title = "Slet kilde?"
 
-[portal.sources.detail]
-closeAriaLabel = "Luk detaljer"
-delete = "Slet kilde"
-docs24h = "Sidste 24 t."
-docs30d = "Sidste 30 dage"
-docsTotal = "Set i alt"
-docsTrend = "Dokumenter over de sidste 30 dage"
-documents = "Dokumenter"
-edit = "Rediger"
-notReferenced = "Ikke refereret af nogen politik, så den er sikker at slette."
-pause = "Sæt på pause"
-resume = "Genoptag"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Brugt af"
-
 [portal.sources.empty]
 description = "Forbind en mappe (og snart cloud storage), så dine politikker har et sted at hente dokumenter fra."
 title = "Ingen kilder forbundet endnu"
@@ -7899,18 +8754,57 @@ inUse = "I brug"
 total = "Forbindelser"
 unused = "Ubrugte"
 
+[portal.sources.networkFields.connection]
+helperText = "Den gemte forbindelse med serveradressen og legitimationsoplysninger. Genbruges af hver kilde, der refererer til den."
+label = "Forbindelse"
+
+[portal.sources.networkFields.directory]
+helperText = "Mappe på serveren, der skal poll'es, relativt til login-hjemmet eller share-roden. Lad være tom for roden."
+label = "Mappe"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume fjerner hver fil fra serveren, når hver politik har behandlet den."
+label = "Læsningstilstand"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: behandl hver fil én gang"
+snapshot = "Snapshot: genlæs mappen ved hver kørsel"
+
+[portal.sources.networkFields.recursive]
+label = "Mappedybde"
+
+[portal.sources.networkFields.recursive.options]
+all = "Inkluder undermapper"
+top = "Kun øverste niveau"
+
 [portal.sources.status]
 active = "Aktiv"
 disabled = "Deaktiveret"
 unused = "Ubrugt"
 
 [portal.sources.table]
+documents = "Dokumenter"
 source = "Kilde"
 status = "Status"
 usedBy = "Politikker"
 
+[portal.sources.types.box]
+description = "Hent dokumenter fra Box-mapper, som dit team allerede deler."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Hent dokumenter fra en delt Dropbox-mappe."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenter, som dit team har behandlet i editoren, på tværs af politik- og AI-kørsler."
 label = "Editor"
+noPolicies = "Ingen politikker er kørt fra editoren endnu."
+
+[portal.sources.types.email]
+description = "Gør vedhæftninger sendt til en dedikeret mailboks til dokumenter."
+label = "Email-indbakke"
 
 [portal.sources.types.folder]
 description = "Overvåg en mappe på serveren for nye dokumenter."
@@ -7943,25 +8837,80 @@ label = "Mappedybde"
 all = "Medtag undermapper"
 top = "Kun øverste niveau"
 
+[portal.sources.types.ftp]
+description = "Poll en FTP- eller FTPS-servermappe for nye dokumenter."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Hent dokumenter fra delte Google Drive-mapper."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Overvåg et SMB-netværksshare for nye dokumenter."
+label = "Netværksdrev"
+
+[portal.sources.types.onedrive]
+description = "Overvåg OneDrive-mapper for nye dokumenter."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Hent dokumenter fra en Amazon S3- eller S3-kompatibel bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Den gemte forbindelse, der indeholder bucket og legitimationsoplysninger. Genbruges af hver kilde og pipeline-output, der refererer til den."
+label = "Forbindelse"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume fjerner hvert objekt fra bucket'en, når hver politik har behandlet det."
+label = "Læsningstilstand"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: behandl hvert objekt én gang"
+snapshot = "Snapshot: genlæs bucket'en ved hver kørsel"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Kun objekter, hvis nøgler starter med dette præfiks, behandles."
+label = "Nøglepræfiks"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Poll en SFTP-dropmappe for nye dokumenter."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Hent dokumenter fra SharePoint-dokumentbiblioteker."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Kilde"
 
+[portal.sources.types.webhook]
+createNote = "En leverings-URL og signing secret genereres, når du opretter denne webhook. Afsendere POST'er dokumenter til den URL, og de refererende politikker kører ved ankomst."
+description = "Modtag dokumenter via signeret HTTP POST fra ethvert eksternt system."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Leverings-URL"
+secretNote = "Signing secret vises én gang, når webhooken oprettes. Genskab kilden for at rotere den."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiér"
+done = "Færdig"
+secret = "Signing secret"
+secretHelp = "Signer hver leverings rå body med denne nøgle (HMAC-SHA256), og send den som X-Stirling-Signature header."
+secretWarning = "Kopiér signing secret nu. Af hensyn til din sikkerhed vises den kun én gang og kan ikke hentes senere."
+title = "Webhook oprettet"
+url = "Leverings-URL"
+usage = "POST hvert dokument som den rå request body til leverings-URL'en med en binær indholdstype (application/pdf eller application/octet-stream). Refererende politikker kører automatisk ved ankomst."
+
 [portal.sources.wizard]
-back = "Tilbage"
-cancel = "Annuller"
-continue = "Fortsæt"
-editTitle = "Rediger kilde"
 name = "Navn"
 namePlaceholder = "f.eks. Skadesmodtagelse"
-save = "Gem ændringer"
-subtitle = "Trin {{current}} af {{total}} · {{label}}"
-title = "Forbind en kilde"
 type = "Type"
 
-[portal.sources.wizard.steps]
-chooseType = "Vælg type"
-configure = "Konfigurer"
-review = "Gennemgå og forbind"
+[portal.stepModal]
+close = "Luk"
 
 [portal.usage]
 managePayment = "Administrer betaling"
@@ -8021,16 +8970,9 @@ summary = "Ejer et team — administrerer dets medlemmers ressourcer og delte ko
 2 = "Portaladgang via standardpolitikken"
 3 = "Alt, hvad medlem kan gøre"
 
-[portal.welcome]
-ariaLabel = "Velkommen til Stirling PDF"
-badge = "Open-source"
-installEditor = "Installer Editor"
-inviteTeammates = "Inviter teammedlemmer"
-openInBrowser = "Åbn i browser"
-perks = "Gratis for evigt · Kan hostes selv"
-subtitle = "Verdens mest sikre PDF Editor er gratis for teams i alle størrelser. Inkluderer 60+ PDF-handlinger og SSO."
-title = "Velkommen til"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Ubegrænset"
 
 [printFile]
 title = "Udskriv Fil"
@@ -8613,6 +9555,14 @@ text = "Rotér dine PDF-sider med eller mod uret i intervaller af 90 grader. All
 [rotate.tooltip.header]
 title = "Oversigt over rotationsindstillinger"
 
+[ruler]
+clearAll = "Ryd alle"
+hideAllLabels = "Skjul alle labels"
+hideSmallLabels = "Skjul små labels"
+physicalValues = "Fysisk"
+scaled = "Skaleret"
+showAllLabels = "Vis alle labels"
+
 [sanitize]
 desc = "Fjern potentielt skadelige elementer fra PDF-filer."
 sanitizationResults = "Saniteringsresultater"
@@ -8654,31 +9604,45 @@ label = "Fjern XMP-metadata"
 [sanitize.steps]
 settings = "Indstillinger"
 
-[sanitizePdf]
-tags = "rens,sikker,sikker,fjern-trusler"
-
 [sanitizePDF]
 title = "Rens PDF"
 
+[sanitizePdf]
+tags = "rens,sikker,sikker,fjern-trusler"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Justér sidestørrelse"
 
+[scaleSettings]
+activeScale = "Aktiv skala"
+apply = "Anvend skala"
+applyCalibration = "Anvend kalibrering"
+calculatedScale = "Beregnet skala"
+calibrate = "Kalibrer"
+calibrating = "Kalibrerer"
+calibrationDistanceRequired = "Angiv en virkelig afstand større end nul"
+calibrationInvalid = "Kan ikke beregne målestok ud fra denne måling"
+calibrationPaperDistance = "Målt sideafstand: {{distance}}"
+calibrationTitle = "Kalibrer målestok"
+calibrationTooltip = "Mål en kendt afstand for automatisk at beregne målestokken"
+customScale = "Brugerdefineret målestok"
+noneSet = "Ingen brugerdefineret målestok angivet"
+presets = "Forudindstillede målestokke"
+ratio = "Målestoksforhold"
+ratioHelp = "Forhold: 1 sideenhed = X virkelige enheder"
+ratioPlaceholder = "f.eks. 100"
+ratioPositive = "Forholdet skal være større end nul"
+ratioRequired = "Forhold er påkrævet"
+realDistance = "Virkelig afstand"
+realDistancePlaceholder = "f.eks. 5"
+reset = "Nulstil til standarder"
+unit = "Enhed"
+unitInvalid = "Ugyldig enhed: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Vinkeltærskel:"
-10 = "Indstiller størrelsen på kanten, der tilføjes og fjernes for at forhindre hvide kanter i outputtet (standard: 1)."
-2 = "Indstiller den minimale absolutte vinkel, der kræves for at billedet roteres (standard: 10)."
-3 = "Tolerancen:"
-4 = "Bestemmer området for farvevariation omkring den estimerede baggrundsfarve (standard: 30)."
-5 = "Minimum Areal:"
-6 = "Indstiller den minimale arealtærskel for et foto (standard: 10000)."
-7 = "Minimum Kontur Areal:"
-8 = "Indstiller den minimale kontur arealtærskel for et foto"
-9 = "Kantstørrelse:"
-
 [scannerImageSplit]
 submit = "Udtræk billedscanninger"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Hvad dette gør"
 whatThisDoesDesc = "Finder og udtrækker automatisk hvert foto fra en scannet side eller et sammensat billede—ingen manuel beskæring."
 whenToUse = "Hvornår det bruges"
 
+[ScannerImageSplit.selectText]
+1 = "Vinkeltærskel:"
+10 = "Indstiller størrelsen på kanten, der tilføjes og fjernes for at forhindre hvide kanter i outputtet (standard: 1)."
+2 = "Indstiller den minimale absolutte vinkel, der kræves for at billedet roteres (standard: 10)."
+3 = "Tolerancen:"
+4 = "Bestemmer området for farvevariation omkring den estimerede baggrundsfarve (standard: 30)."
+5 = "Minimum Areal:"
+6 = "Indstiller den minimale arealtærskel for et foto (standard: 10000)."
+7 = "Minimum Kontur Areal:"
+8 = "Indstiller den minimale kontur arealtærskel for et foto"
+9 = "Kantstørrelse:"
+
 [search]
 noResults = "Ingen resultater fundet"
 placeholder = "Indtast søgeord..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Din Stirling-PDF-server er offline, og \"{{endpoint}}
 [session]
 expired = "Din sesions tid har udløbet. Genlad siden og prøv igen."
 
-[sessionManagement.tooltip]
-header = "Administration af underskriftssessioner"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Nye deltagere tilføjes i slutningen af underskriftsrækkefølgen"
-bullet2 = "Kan ikke tilføje deltagere, efter sessionen er færdiggjort"
-bullet3 = "Hver deltager modtager en meddelelse, når det er deres tur"
-description = "Du kan tilføje flere deltagere til en aktiv session når som helst før færdiggørelse."
-title = "Tilføjelse af deltagere"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Fuld færdiggørelse</b>: Alle deltagere har underskrevet"
-bullet2 = "<b>Delvis færdiggørelse</b>: Nogle deltagere har ikke underskrevet endnu"
-bullet3 = "Ikke-underskrevne deltagere udelukkes fra det endelige dokument"
-bullet4 = "Når den er færdiggjort, kan du indlæse den underskrevne PDF i aktive filer"
-description = "Færdiggørelse kombinerer alle underskrifter i én underskrevet PDF. Denne handling kan ikke fortrydes."
-title = "Færdiggørelse af session"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Kan ikke fjerne deltagere, der allerede har underskrevet"
-bullet2 = "Fjernede deltagere modtager ikke længere meddelelser"
-bullet3 = "Underskriftsrækkefølge justeres automatisk"
-description = "Deltagere kan fjernes fra sessioner, før de underskriver."
-title = "Fjernelse af deltagere"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Hver underskrift anvendes sekventielt på PDF'en"
-bullet2 = "Senere underskrivere kan se tidligere underskrifter"
-bullet3 = "Afgørende for godkendelsesarbejdsgange og juridiske beviskæder"
-description = "Den rækkefølge, du angiver, når du opretter sessionen, bestemmer, hvem der underskriver først."
-title = "Underskriftsrækkefølge"
-
 [settings]
 close = "Luk"
 
+[settings.ai]
+documents = "Dokumenter & RAG"
+general = "Generelt"
+limits = "Grænser & ydeevne"
+models = "Modeller & udbydere"
+title = "AI"
+
 [settings.configuration]
 advanced = "Avanceret"
 database = "Database"
 endpoints = "Endpoints"
 features = "Funktioner"
+folderAccess = "Mappeadgang"
 mcp = "MCP Server"
 storageSharing = "Fillagring og deling"
 systemSettings = "Systemindstillinger"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Standard PDF-editor"
 defaultPdfEditorActive = "Stirling PDF er din standard PDF-editor"
 defaultPdfEditorChecking = "Tjekker..."
 defaultPdfEditorInactive = "En anden app er sat som standard"
+defaultPdfEditorRemind = "Mind mig om at angive som standard"
+defaultPdfEditorRemindDescription = "Vis et banner, når Stirling PDF ikke er din standard PDF-applikation."
 defaultPdfEditorSet = "Allerede standard"
 defaultStartupView = "Standardvisning ved start"
 defaultStartupViewDescription = "Vælg hvilken fane der er aktiv i venstre kolonne, når appen starter"
@@ -8817,9 +9771,18 @@ languageDescription = "Vælg visningssprog"
 logout = "Log ud"
 setAsDefault = "Sæt som standard"
 theme = "Tema"
+themeAccent = "Accentfarve"
+themeAccentCustom = "Brugerdefineret farve"
+themeAccentCustomHint = "Brugerdefineret (standardindstillinger anbefales)"
+themeAccentDark = "Accentfarve for mørk tilstand"
+themeAccentDefault = "Standard"
+themeAccentDefaultHint = "Standardtema (anbefales)"
+themeAccentDescription = "Knapper, links og fremhævninger følger den, og den toner appen subtilt. Lys og mørk har hver sin. System bruger den, der er aktiv."
+themeAccentLight = "Accentfarve for lys tilstand"
 themeDark = "Mørkt"
 themeDescription = "Skift mellem lyst og mørkt tema"
 themeLight = "Lyst"
+themeReset = "Gendan tema til standard"
 themeSystem = "System"
 title = "Generelt"
 user = "Bruger"
@@ -8833,6 +9796,12 @@ intro = "Aktivér brugergodkendelse, teamstyring og arbejdsområdefunktioner for
 learnMore = "Læs mere i dokumentationen"
 title = "For systemadministratorer"
 
+[settings.general.loginLanding]
+description = "Vælg hvilken app der åbnes, når du logger ind på Stirling Cloud."
+editor = "Editor"
+processor = "Processor"
+title = "Efter login"
+
 [settings.general.mode]
 fullscreen = "Fuldskærm"
 sidebar = "Sidepanel"
@@ -9041,6 +10010,11 @@ security = "Sikkerhed"
 telegram = "Telegram"
 title = "Sikkerhed og autentificering"
 
+[settings.signOut]
+confirm = "Er du sikker på, at du vil logge ud?"
+submit = "Log ud"
+title = "Log ud"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Upload til server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "klik her"
+fallback = "Hvis det ikke åbnede automatisk,"
+opening = "Åbner Swagger UI i en ny fane..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API-dokumentation"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Vælg filer i Aktive filer for at køre dette værktøj"
 singleFileScope = "Anvendes kun på: {{fileName}}"
 viewerMode = "Skift til filredigeringsværktøjet for at vælge flere filer."
 
+[toolFormat]
+ANY = "enhver fil"
+CBR = "et tegneseriearkiv (CBR)"
+CBZ = "et tegneseriearkiv (CBZ)"
+CSV = "en CSV-fil"
+EBOOK = "en e-bog"
+EMAIL = "en e-mail"
+EXCEL = "et regneark"
+HTML = "en webside"
+IMAGE = "billeder"
+JAVASCRIPT = "en JavaScript-fil"
+JSON = "en JSON-fil"
+MARKDOWN = "en Markdown-fil"
+NONE = "ingen fil"
+PCL = "en PCL-printfil"
+PDF = "en PDF"
+PDF_ENCRYPTED = "en adgangskodebeskyttet PDF"
+POSTSCRIPT = "en PostScript-fil"
+PPT = "en præsentation"
+TEXT = "en tekstfil"
+VIDEO = "en video"
+WORD = "et Word-dokument"
+XML = "en XML-fil"
+XPS = "et XPS-dokument"
+ZIP = "et ZIP-arkiv"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Tilbage til alle værktøjer"
 collapse = "Sammenfold panel"
 expand = "Udvid panel"
 goBack = "Gå tilbage"
+pdfTools = "PDF-værktøjer"
 placeholder = "Vælg et værktøj for at komme i gang"
 premiumFeature = "Premium-funktion:"
+searchTools = "Søg i værktøjer"
 toolsHeader = "Værktøjer"
 viewAllTools = "Vis alle værktøjer"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Ingen værktøjer fundet"
 quickAccess = "HURTIG ADGANG"
 searchPlaceholder = "Søg i værktøjer..."
 
-[toolPicker.categories]
-advancedTools = "Avancerede værktøjer"
-recommendedTools = "Anbefalede værktøjer"
-standardTools = "Standardværktøjer"
-
 [toolPicker.subcategories]
 advancedFormatting = "Avanceret formatering"
 automation = "Automatisering"
@@ -9950,16 +10950,31 @@ title = "Brugere"
 you = "(dig)"
 
 [users.action]
+cancelInvite = "Annuller invitation"
 deleteTeam = "Slet team"
 disableMfa = "Nulstil MFA"
 move = "Flyt til team"
 reinstate = "Genindsæt"
 remove = "Fjern fra org"
+removeTeam = "Fjern fra team"
 rename = "Omdøb team"
 resetPw = "Nulstil adgangskode"
 suspend = "Suspender"
 unlock = "Lås konto op"
 
+[users.activity]
+daysAgo = "{{count}} d siden"
+hoursAgo = "{{count}} t siden"
+justNow = "Lige nu"
+minutesAgo = "{{count}} min siden"
+monthsAgo_one = "{{count}} måned siden"
+monthsAgo_other = "{{count}} måneder siden"
+never = "Aldrig"
+weeksAgo_one = "{{count}} uge siden"
+weeksAgo_other = "{{count}} uger siden"
+yearsAgo_one = "{{count}} år siden"
+yearsAgo_other = "{{count}} år siden"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Godkender politik"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Annuller invitationen til {{email}}? De vil ikke kunne deltage med det aktuelle link."
+cancelInviteTitle = "Annuller invitation"
 deleteTeamBody = "Slet {{name}}-teamet? Teamet skal først være tomt - flyt dets medlemmer til et andet team, og det må ikke stadig eje integrationskonfigurationer."
 deleteTeamTitle = "Slet team"
 disableMfaBody = "Fjern {{name}}s MFA-tilmelding? De sætter den op igen ved næste login, hvis det kræves."
 disableMfaTitle = "Nulstil MFA"
 removeBody = "Fjern {{name}} permanent fra organisationen? Dette kan ikke fortrydes."
+removeTeamBody = "Fjern {{name}} fra teamet? De beholder deres konto, men mister adgang til dette teams ressourcer."
 removeTitle = "Fjern medlem"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Brugernavn"
 usernameError = "Brugernavnet skal være på mindst 3 tegn"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Inviteret af {{who}}"
+cancel = "Annuller"
+count = "{{count}} afventende"
+desc = "Inviterede personer, som ikke har tilmeldt sig endnu. De optager en plads, indtil de accepterer."
+expiresInDays_one = "Udløber om {{count}} dag"
+expiresInDays_other = "Udløber om {{count}} dage"
+expiresToday = "Udløber i dag"
+title = "Afventende invitationer"
+
 [users.loadError]
 description = "Noget gik galt ved kontakt til backend, eller du har ikke adgang. Prøv igen."
 title = "Kunne ikke indlæse medlemmer"
@@ -10212,9 +11240,11 @@ title = "Vedhæftninger"
 
 [viewer.bookmarks]
 bookmarkTitle = "Bogmærketitel"
+bookmarkTitleRequired = "Bogmærketitel er påkrævet"
 closeSidebar = "Luk sidepanelet for bogmærker"
 collapseAll = "Skjul alle bogmærker"
 expandAll = "Udvid alle bogmærker"
+searchPlaceholder = "Søg i bogmærker"
 
 [viewer.comments]
 addComment = "Tilføj kommentar"
@@ -10605,30 +11635,6 @@ title = "Vandmærketekst"
 image = "Billede"
 text = "Tekst"
 
-[wetSignature.tooltip]
-header = "Metoder til oprettelse af underskrift"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Tilpas pennens farve og tykkelse"
-bullet2 = "Ryd og tegn igen, indtil du er tilfreds"
-bullet3 = "Fungerer på touch-enheder (tablets, telefoner)"
-description = "Opret en håndskrevet underskrift med din mus eller touchscreen. Bedst til personlige, autentiske underskrifter."
-title = "Tegn underskrift"
-
-[wetSignature.tooltip.type]
-bullet1 = "Vælg mellem flere skrifttyper"
-bullet2 = "Tilpas tekststørrelse og farve"
-bullet3 = "Perfekt til standardiserede underskrifter"
-description = "Generér en underskrift ud fra indtastet tekst. Hurtig og ensartet, velegnet til forretningsdokumenter."
-title = "Skriv underskrift"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Understøtter PNG, JPG og andre billedformater"
-bullet2 = "Gennemsigtige baggrunde anbefales for bedste resultat"
-bullet3 = "Billedet ændres i størrelse, så det passer til underskriftsområdet"
-description = "Upload et på forhånd oprettet underskriftsbillede. Ideelt, hvis du har en scannet underskrift eller firmalogo."
-title = "Upload underskriftsbillede"
-
 [workbenchBar]
 activeFiles = "Aktive filer"
 annotations = "Anmærkninger"
@@ -10652,6 +11658,7 @@ redact = "Maskér"
 rotateLeft = "Roter til venstre"
 rotateRight = "Roter til højre"
 ruler = "Lineal / Måling"
+rulerSettings = "Målestoksindstillinger"
 save = "Gem"
 saveAll = "Gem alle"
 saveAs = "Gem som"
diff --git a/frontend/editor/public/locales/de-DE/translation.toml b/frontend/editor/public/locales/de-DE/translation.toml
index 3cdf512236..6c143f4d1f 100644
--- a/frontend/editor/public/locales/de-DE/translation.toml
+++ b/frontend/editor/public/locales/de-DE/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "Dateien ausgewählt"
 font = "Schriftart"
 fontSizeTooltip = "Größe des Seitenzahl-Texts in Punkten. Größere Werte erzeugen größeren Text."
 fontTypeTooltip = "Schriftfamilie für die Seitenzahlen. Wählen Sie passend zum Dokumentstil."
-genericSubmit = "Absenden"
 green = "Grün"
 help = "Hilfe"
-imgPrompt = "Wählen Sie ein Bild"
 incorrectPasswordMessage = "Das Passwort ist falsch."
 info = "Informationen"
 invalidUndoData = "Rückgängig nicht möglich: ungültige Vorgangsdaten"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Anmeldevereinbarung"
 logOut = "Abmelden"
 marginTooltip = "Abstand zwischen der Seitenzahl und dem Seitenrand."
 moreOptions = "Weitere Optionen"
-multiPdfPrompt = "PDFs auswählen (2+)"
 never = "Nie"
 no = "Nein"
 noFileSelected = "Keine Datei ausgewählt. Bitte laden Sie eine hoch."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Seitenreihenfolge (Geben Sie eine durch Komma getrennte Liste
 pages = "Seiten"
 pageSelectionPrompt = "Benutzerdefinierte Seitenauswahl (Geben Sie eine durch Kommas getrennte Liste von Seitenzahlen 1,5,6 oder Funktionen wie 2n+1 ein):"
 password = "Passwort"
-pdfPrompt = "PDF(s) auswählen"
 pin = "Datei anheften (nach Tool-Ausführung aktiv halten)"
 pro = "Pro"
 processingComplete = "Ihre Datei ist bereit."
@@ -692,6 +688,165 @@ manualLinks = "Manuelle Downloads: Links anklicken und die Dateien in den tessda
 noLanguages = "Keine tessdata-Sprachen im konfigurierten Verzeichnis gefunden."
 permissionNotice = "Der tessdata-Pfad ist nicht beschreibbar. Downloads werden im Browser geöffnet; bitte die .traineddata-Dateien manuell in den tessdata-Ordner speichern."
 
+[admin.settings.ai.documents]
+description = "Konfigurieren Sie das Embedding-Modell und die Retrieval-Einstellungen, die zum Beantworten von Fragen zu Dokumenten verwendet werden. Wird beim Speichern auf die KI-Engine angewendet."
+title = "Dokumente & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Leer lassen, um die eigene Umgebungs-Anmeldeinformation der Engine zu verwenden. Gilt für selbst gehostete Single-Engine-Bereitstellungen."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Gespeichert – leer lassen, um den aktuellen Schlüssel beizubehalten"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL des OpenAI-kompatiblen / Ollama-Embeddings-Endpunkts, z. B. http://ollama:11434/v1. Muss auf einen vertrauenswürdigen internen Endpunkt verweisen (SSRF-sensibel)."
+label = "Embedding-Base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Name des Embedding-Modells. Freitext; Vorschläge sind nur Hinweise."
+label = "Embedding-Modell"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Anbieter, der zum Umwandeln von Dokumenttext in Vektor-Embeddings verwendet wird."
+label = "Embedding-Anbieter"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maximale Anzahl von Retrieval-Suchen, die der Agent pro Anfrage ausführen darf."
+label = "Max. Suchen"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Eine Änderung des Embedding-Modells wird sofort wirksam, aber Dokumente, die mit dem vorherigen Modell indexiert wurden, müssen neu indexiert werden, damit die Suche korrekte Ergebnisse liefert."
+title = "Neuindexierung erforderlich"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Wenn Sie das Embedding-Modell geändert haben, indexieren Sie vorhandene Dokumente neu, damit die Suche das neue Modell verwendet."
+
+[admin.settings.ai.documents.topK]
+description = "Anzahl der relevantesten Chunks, die pro Suche abgerufen werden."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Verbinden Sie Stirling mit der Python-KI-Engine und wählen Sie aus, welche KI-Funktionen verfügbar sind. Änderungen werden nach einem Neustart wirksam."
+title = "KI-Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Schalten Sie einzelne KI-Funktionen ein oder aus. Deaktivierte Funktionen werden in der App ausgeblendet."
+title = "Funktionen"
+
+[admin.settings.ai.general.enabled]
+description = "Hauptschalter. Wenn ausgeschaltet, sind keine KI-Tools, Agenten oder Engine-Aufrufe verfügbar."
+label = "KI aktivieren"
+
+[admin.settings.ai.general.features.chat]
+description = "Konversationsassistent für die Arbeit mit PDFs."
+label = "Chat-Assistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Dokumente automatisch nach Typ oder Inhalt kategorisieren."
+label = "Dokumentklassifizierung"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Eine neue PDF (z. B. aus HTML) über einen KI-Agenten erstellen."
+label = "PDF aus Prompt erstellen"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Fragen stellen und Antworten erhalten, die auf einem hochgeladenen Dokument basieren."
+label = "Dokumentfragen"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Dokumente auf mathematische und numerische Fehler prüfen."
+label = "Mathematik-Prüfer"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "KI-erstellte Prüfkommentare und Anmerkungen zu einer PDF hinzufügen."
+label = "PDF-Kommentaragent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Timeout für umfangreichere Agentenoperationen wie Dokumenterstellung."
+label = "Timeout für lange Vorgänge (Sekunden)"
+
+[admin.settings.ai.general.note]
+body = "Die KI-Engine läuft als separater Dienst. Ihr gemeinsames Secret"
+body2 = "wird über eine Container-Umgebungsvariable festgelegt. Anbieter-API keys können auf diesen Seiten eingegeben oder als Engine-Umgebungsvariablen bereitgestellt werden; hier eingegebene Schlüssel werden beim Speichern an die Engine übertragen."
+title = "Über die KI-Engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Timeout für gestreamte Chat-Antworten (Token für Token)."
+label = "Stream-Timeout (Sekunden)"
+
+[admin.settings.ai.general.test]
+button = "Verbindung testen"
+failBody = "Die KI-Engine hat nicht geantwortet. Prüfen Sie die URL, ob der Engine-Container läuft und ob KI aktiviert ist (nach dem Aktivieren ist ein Neustart erforderlich)."
+failTitle = "KI-Engine nicht erreichbar"
+okBody = "Die KI-Engine hat auf einen Health Check geantwortet."
+okTitle = "KI-Engine erreichbar"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Timeout für Standard-KI-Anfragen an die Engine."
+label = "Anfrage-Timeout (Sekunden)"
+
+[admin.settings.ai.general.url]
+description = "Interne URL der Python-KI-Engine, z. B. http://stirling-pdf-engine:5001."
+label = "KI-Engine-URL"
+
+[admin.settings.ai.limits]
+description = "Schutzgrenzen dafür, wie viel Arbeit KI-Anfragen ausführen dürfen und wie viele gleichzeitig laufen. Wird beim Speichern auf die KI-Engine angewendet."
+title = "Limits & Leistung"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Schutzgrenze: KI-Anfragen ablehnen, deren extrahierter Text diese Länge überschreitet."
+label = "Max. Zeichen pro Anfrage"
+
+[admin.settings.ai.limits.maxPages]
+description = "Schutzgrenze: KI-Anfragen mit mehr als dieser Anzahl von PDF-Seiten ablehnen."
+label = "Max. Seiten pro Anfrage"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maximale Anzahl gleichzeitiger laufender Modellaufrufe in der gesamten Engine."
+label = "Max. Modell-Parallelität"
+
+[admin.settings.ai.models]
+description = "Wählen Sie den LLM-Anbieter und die Smart/Fast-Modelle aus, die die KI-Engine verwendet. Wird beim Speichern auf die KI-Engine angewendet."
+title = "Modelle & Anbieter"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Leer lassen, um die eigene Umgebungs-Anmeldeinformation der Engine zu verwenden. Gilt für selbst gehostete Single-Engine-Bereitstellungen."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Gespeichert – leer lassen, um den aktuellen Schlüssel beizubehalten"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL des OpenAI-kompatiblen / Ollama-Endpunkts, z. B. http://ollama:11434/v1."
+label = "Anbieter-Base URL"
+warning = "Die Base URL muss auf einen vertrauenswürdigen internen Endpunkt verweisen. Die Engine führt serverseitige Anfragen daran aus, daher ist ein nicht vertrauenswürdiger Wert SSRF-sensibel."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maximale Ausgabe-Token für das Fast-Modell."
+label = "Max. Token für Fast-Modell"
+
+[admin.settings.ai.models.fastModel]
+description = "Günstigeres, schnelleres Modell für leichte Aufgaben. Freitext; Vorschläge sind nur Hinweise."
+label = "Fast-Modell"
+
+[admin.settings.ai.models.provider]
+description = "Mit welchem LLM-Anbieter die Engine kommuniziert."
+label = "Anbieter"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maximale Ausgabe-Token für das Smart-Modell."
+label = "Max. Token für Smart-Modell"
+
+[admin.settings.ai.models.smartModel]
+description = "Leistungsstarkes Modell für komplexes Schlussfolgern. Freitext; Vorschläge sind nur Hinweise."
+label = "Smart-Modell"
+
+[admin.settings.ai.saved]
+body = "Änderungen werden automatisch an die KI-Engine übertragen."
+bodyNoPush = "Einstellungen gespeichert. Sie werden angewendet, wenn die KI-Engine das nächste Mal ihre Konfiguration übernimmt."
+title = "KI-Einstellungen gespeichert"
+
 [admin.settings.badge]
 clickToUpgrade = "Klicken Sie, um Plandetails anzuzeigen"
 
@@ -939,6 +1094,25 @@ label = "Beim Start neu erzeugen"
 description = "Anzahl der Tage, für die das Zertifikat gültig ist"
 label = "Zertifikatsgültigkeit (Tage)"
 
+[admin.settings.folderAccess]
+description = "Verzeichnisse, aus denen Ordnerquellen und Ordnerausgaben lesen und in die sie schreiben dürfen. Dies ist eine Sicherheitsgrenze: Automatisierungen können niemals auf einen Serverpfad außerhalb dieser Liste verweisen."
+securityNote = "Leer lassen, um Ordnerquellen und -ausgaben vollständig zu deaktivieren. Das eigene Konfigurationsverzeichnis von Stirling ist immer tabu."
+title = "Ordnerzugriff"
+
+[admin.settings.folderAccess.implied]
+description = "Diese von Stirling verwalteten Verzeichnisse sind immer erlaubt und können hier nicht geändert werden."
+serverStorage = "Server-Dateispeicher"
+title = "Immer erlaubt"
+watchedFolder = "Überwachter Pipeline-Ordner"
+
+[admin.settings.folderAccess.roots]
+add = "Hinzufügen"
+empty = "Keine Ordner erlaubt. Ordnerquellen und -ausgaben sind derzeit deaktiviert."
+hint = "Geben Sie absolute Pfade ein, zum Beispiel /data/inbox."
+label = "Erlaubte Ordner-Stammverzeichnisse"
+placeholder = "/data/inbox"
+remove = "Ordner-Stammverzeichnis entfernen"
+
 [admin.settings.general]
 description = "Systemweite Anwendungseinstellungen einschließlich Branding und Standardverhalten konfigurieren."
 system = "System"
@@ -1997,6 +2171,73 @@ secureWorkflowDesc = "Sichert PDF-Dokumente durch Entfernen potenziell schädlic
 description = "Dieses Tool benennt PDF-Dateien automatisch basierend auf ihrem Inhalt um. Es analysiert das Dokument, um den geeignetsten Titel aus dem Text zu finden."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatisch drehen"
+tags = "automatisch drehen,Ausrichtung korrigieren,auf dem Kopf,seitlich,begradigen,ausrichten,Ausrichtung erkennen,Drehung korrigieren,automatisch ausrichten,gescannt,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Konfidenzschwelle"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Nur OCR"
+text = "Nur Text"
+title = "Erkennungsmethode"
+
+[autoRotate.error]
+failed = "Beim automatischen Drehen der PDF ist ein Fehler aufgetreten."
+
+[autoRotate.inferUndetected]
+title = "Seiten mit niedriger Konfidenz passend drehen"
+
+[autoRotate.report]
+applied = "{{degrees}}° im Uhrzeigersinn"
+confidenceValue = "Konfidenz {{value}}"
+noChange = "Keine Änderung"
+pageLabel = "Seite {{number}}"
+summary = "{{rotated}} von {{total}} Seiten gedreht, {{unchanged}} unverändert belassen"
+title = "Erkennungsbericht"
+
+[autoRotate.report.method]
+inferred = "Angepasst"
+none = "Übersprungen"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Unterhalb der Schwelle"
+blankPage = "Seite ist leer"
+inferredFromDocument = "Wie die anderen Seiten"
+noDominantDirection = "Gemischte Textrichtungen"
+osdFailed = "Kein lesbarer Text gefunden"
+osdNoVerdict = "Ausrichtung konnte nicht bestimmt werden"
+tesseractUnavailable = "OCR nicht installiert"
+tooFewGlyphs = "Zu wenig Text"
+
+[autoRotate.results]
+title = "Ergebnisse der automatischen Drehung"
+
+[autoRotate.settings]
+title = "Einstellungen"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Wie sicher die Prüfung sein muss, bevor eine Seite gedreht wird. Senken Sie den Wert, um mehr Seiten zu drehen, erhöhen Sie ihn, um mehr Seiten unverändert zu lassen."
+title = "Konfidenzschwelle"
+
+[autoRotate.tooltip.description]
+text = "Ermittelt, wie herum jede Seite ausgerichtet sein sollte, und dreht sie richtig. Seiten, die bereits aufrecht sind, bleiben unverändert."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto liest zuerst den Text auf der Seite und betrachtet die Seite dann als Bild, wenn das nicht ausreicht. Nur Text überspringt die Bildprüfung, was für Dokumente, die nie gescannt wurden, am schnellsten ist. Nur OCR behandelt jede Seite als Bild."
+title = "Erkennungsmethode"
+
+[autoRotate.tooltip.header]
+title = "Automatisch drehen"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Leere oder fast leere Seiten können nicht eigenständig geprüft werden. Wenn jede lesbare Seite dieselbe Drehung benötigt, werden diese Seiten passend dazu gedreht."
+title = "Seiten mit niedriger Konfidenz passend drehen"
+
 [autoSizeSplitPDF]
 tags = "pdf,teilen,dokument,organisation"
 
@@ -2199,33 +2440,6 @@ keywords = "Schlüsselwörter: odd, even"
 numbers = "Zahlen/Bereiche: 5, 10-20"
 progressions = "Progressionen: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Zertifikatstypen"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Von Systemadministratoren verwaltet"
-bullet2 = "Für berechtigte Benutzer freigegeben"
-bullet3 = "Repräsentiert die Unternehmensidentität, nicht die eines Einzelnen"
-bullet4 = "Am besten geeignet für: Offizielle Dokumente, Team-Signaturen"
-description = "Ein gemeinsames Zertifikat Ihrer Organisation. Wird für unternehmensweite Signierberechtigungen verwendet."
-title = "Organisationszertifikat"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Bei der ersten Nutzung automatisch erzeugt"
-bullet2 = "An Ihr Benutzerkonto gebunden"
-bullet3 = "Kann nicht mit anderen Benutzern geteilt werden"
-bullet4 = "Am besten geeignet für: Persönliche Dokumente, individuelle Verantwortlichkeit"
-description = "Ein automatisch generiertes Zertifikat, das Ihrem Benutzerkonto eindeutig zugeordnet ist. Geeignet für individuelle Signaturen."
-title = "Persönliches Zertifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Erfordert P12/PFX-Datei und Passwort"
-bullet2 = "Kann von externen Zertifizierungsstellen ausgestellt werden"
-bullet3 = "Höheres Vertrauensniveau für juristische Dokumente"
-bullet4 = "Am besten geeignet für: Rechtsverbindliche Verträge, externe Validierung"
-description = "Verwenden Sie Ihre eigene PKCS#12-Zertifikatsdatei. Bietet vollständige Kontrolle über die Zertifikateigenschaften."
-title = "Eigenes P12 hochladen"
-
 [certSign]
 awaitingSignatures = "Warten auf Signaturen"
 chooseCertificate = "Zertifikatdatei auswählen"
@@ -2552,34 +2766,6 @@ server = "Server"
 stepTitle = "Zertifikatsquelle"
 upload = "Hochladen"
 
-[certSign.tooltip.header]
-title = "Über die Signatur-Verwaltung"
-
-[certSign.tooltip.overview]
-bullet1 = "Vorhandene Signaturen und deren Gültigkeit prüfen"
-bullet2 = "Detaillierte Informationen über Signierer und Zertifikate anzeigen"
-bullet3 = "Neue digitale Signaturen hinzufügen, um Ihre Dokumente zu sichern"
-bullet4 = "Mehrere Dateien unterstützt mit einfacher Navigation"
-text = "Dieses Tool ermöglicht es Ihnen zu prüfen, ob Ihre PDFs digital signiert sind, und neue digitale Signaturen hinzuzufügen. Digitale Signaturen beweisen, wer ein Dokument erstellt oder genehmigt hat und zeigen, ob es seit der Signierung geändert wurde."
-title = "Was kann dieses Tool?"
-
-[certSign.tooltip.signing]
-bullet1 = "Unterstützt PEM, PKCS12, JKS und Server-Zertifikatformate"
-bullet2 = "Option, Signatur auf der PDF zu zeigen oder zu verstecken"
-bullet3 = "Grund, Ort und Signierername hinzufügen"
-bullet4 = "Wählen Sie, auf welcher Seite sichtbare Signaturen platziert werden sollen"
-bullet5 = "Server-Zertifikat für einfache 'Mit Stirling-PDF signieren'-Option verwenden"
-text = "Um eine PDF zu signieren, benötigen Sie ein digitales Zertifikat (wie PEM, PKCS12 oder JKS). Sie können wählen, ob Sie die Signatur auf dem Dokument sichtbar machen oder nur für die Sicherheit unsichtbar belassen."
-title = "Signaturen hinzufügen"
-
-[certSign.tooltip.validation]
-bullet1 = "Zeigt, ob Signaturen gültig oder ungültig sind"
-bullet2 = "Zeigt Signiererinformationen und Signierdatum an"
-bullet3 = "Prüft, ob das Dokument nach der Signierung geändert wurde"
-bullet4 = "Kann benutzerdefinierte Zertifikate für die Verifizierung verwenden"
-text = "Wenn Sie Signaturen prüfen, zeigt Ihnen das Tool, ob sie gültig sind, wer das Dokument signiert hat, wann es signiert wurde und ob das Dokument seit der Signierung geändert wurde."
-title = "Signaturen überprüfen"
-
 [changeCreds]
 changeUsername = "Aktualisieren Sie Ihren Benutzernamen. Nach dem Update werden Sie abgemeldet."
 credsUpdated = "Konto aktualisiert"
@@ -3275,24 +3461,6 @@ description = "Diese Cookies sind für das ordnungsgemäße Funktionieren der We
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Erweitertes Monitoring"
-allInOneWorkspace = "All-in-one PDF-Arbeitsbereich (Viewer, Tools & Agent)"
-apiSandbox = "API-Sandbox"
-dedicatedSupportSlas = "Dedizierter Support & SLAs"
-fasterThroughput = "10x schnellerer Durchsatz"
-fullyPrivateFiles = "Vollständig private Dateien"
-largeFileProcessing = "Verarbeitung großer Dateien"
-orgWideAccess = "Organisationsweite Zugriffskontrollen"
-premiumAiModels = "Premium-KI-Modelle"
-prioritySupport = "Priorisierter Support"
-privateDocCloud = "Private Dokumenten-Cloud"
-ragFineTuning = "RAG + Fine-Tuning"
-secureApiAccess = "Sicherer API-Zugriff"
-standardThroughput = "Standard-Durchsatz"
-unlimitedApiAccess = "Unbegrenzter API-Zugriff"
-unlimitedSeats = "Unbegrenzte Plätze"
-
 [crop]
 autoCrop = "Auto-crop whitespace"
 noFileSelected = "Wählen Sie eine PDF-Datei aus, um mit dem Zuschneiden zu beginnen"
@@ -3357,6 +3525,7 @@ message = "Standard-PDF-Handler konnte nicht festgelegt werden"
 title = "Fehler"
 
 [defaultApp.prompt]
+dontRemind = "Nicht erneut erinnern"
 message = "Stellen Sie Stirling PDF als Standardanwendung zum Öffnen von PDF-Dateien ein."
 
 [defaultApp.settingsOpened]
@@ -3708,10 +3877,10 @@ customizeGroups = "Gruppen anpassen"
 dropHint = "Öffnen Sie Dateien, um zu beginnen"
 dropToAdd = "Drop files to add"
 expand = "Seitenleiste ausklappen"
-files = "Dateien"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ist nicht konfiguriert"
 leaveMyFiles = "Meine Dateien verlassen"
+library = "PDF-Bibliothek"
 myFiles = "Meine Dateien"
 noFiles = "Noch keine Dateien"
 openFileManager = "Dateimanager öffnen"
@@ -3734,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Hinzufügen"
-addLabel = "Label hinzufügen…"
-categoryIconAria = "Symbol für {{name}} auswählen"
-createCategory = "Kategorie erstellen"
-delete = "Kategorie löschen"
 done = "Fertig"
-hide = "Kategorie ausblenden"
-newCategory = "Neuer Kategoriename…"
-removeLabel = "{{name}} entfernen"
-rename = "Umbenennen"
 reset = "Auf Standardwerte zurücksetzen"
-search = "Labels suchen…"
-show = "Kategorie anzeigen"
 subtitle = "Gruppieren Sie Ihre Dateien in übergeordnete Kategorien. Fügen Sie vorhandene oder neue Labels zu einer Kategorie hinzu, benennen Sie sie um oder erstellen Sie eine eigene. Dateien, die in keiner Ihrer Kategorien sind, erscheinen unter „Andere“."
 title = "Seitenleisten-Kategorien"
 
@@ -3819,6 +3977,7 @@ refresh = "Vom Server aktualisieren"
 remove = "Löschen"
 removeVersion = "Diese Version entfernen"
 rename = "Umbenennen"
+renamed = "Umbenannt"
 renameFolder = "Ordner umbenennen"
 resizeFolderTree = "Ordnerbaum skalieren (Pfeiltasten, Umschalt für größere Schritte; Doppelklick zum automatischen Anpassen)"
 save = "Speichern"
@@ -3921,9 +4080,7 @@ count = "Dateien"
 folder = "Ordner"
 labels = "Labels"
 modified = "Geändert"
-name = "Name"
 size = "Größe"
-toolHistoryAtVersion = "Kumulative Toolkette"
 totalSize = "Gesamtgröße"
 type = "Typ"
 versionHistory = "Versionsverlauf"
@@ -4332,6 +4489,11 @@ desc = "Benennt eine PDF-Datei automatisch basierend auf der erkannten Überschr
 tags = "auto-erkennung,kopfzeilen-basiert,organisieren,umbenennen"
 title = "PDF automatisch umbenennen"
 
+[home.autoRotate]
+desc = "Erkennt die Ausrichtung jeder Seite und dreht sie automatisch aufrecht."
+tags = "automatisch drehen,Ausrichtung korrigieren,auf dem Kopf,seitlich,begradigen,ausrichten,Ausrichtung erkennen,Drehung korrigieren,automatisch ausrichten,gescannt,OSD"
+title = "Automatisch drehen"
+
 [home.autoSizeSplitPDF]
 tags = "auto,teilen,größe"
 title = "Teilen nach Größe/Anzahl"
@@ -4631,13 +4793,13 @@ hint = "Laden Sie eine PNG-, JPG-, SVG- oder andere Bilddatei hoch, um sie im PD
 label = "Bild hochladen"
 placeholder = "Bilddatei auswählen"
 
-[imageToPdf]
-tags = "konvertierung,img,jpg,bild,foto"
-
 [imageToPDF]
 header = "Bild zu PDF"
 title = "Bild zu PDF"
 
+[imageToPdf]
+tags = "konvertierung,img,jpg,bild,foto"
+
 [infoBanner]
 dismiss = "Ausblenden"
 
@@ -4670,11 +4832,9 @@ welcomeTitle = "Sie wurden eingeladen!"
 
 [landing]
 addFiles = "Dateien hinzufügen"
-heroSubtitle = "Ziehen Sie eine PDF hierher oder fügen Sie eine vorhandene hinzu, um zu beginnen."
 mobileUpload = "Von Mobilgerät hochladen"
 openFromComputer = "Vom Computer öffnen"
 uploadFromComputer = "Vom Computer hochladen"
-workbenchEmptyStateHero = "PDF irgendwo ablegen"
 
 [language]
 direction = "ltr"
@@ -4719,6 +4879,7 @@ login = "Anmelden"
 magicLinkSent = "Magic Link wurde an {{email}} gesendet! Prüfen Sie Ihre E-Mails und klicken Sie auf den Link zur Anmeldung."
 mfaCode = "Authentifizierungscode"
 mfaRequired = "Zwei-Faktor-Code erforderlich"
+noAccount = "Noch kein Konto?"
 or = "Oder"
 password = "Passwort"
 passwordChangedSuccess = "Passwort erfolgreich geändert! Bitte melden Sie sich mit Ihrem neuen Passwort an."
@@ -4738,26 +4899,10 @@ signInWith = "Anmelden mit"
 title = "Anmelden"
 unexpectedError = "Unerwarteter Fehler: {{message}}"
 updatePassword = "Passwort aktualisieren"
-useEmailInstead = "Mit E-Mail anmelden"
 useMagicLink = "Stattdessen Magic Link verwenden"
 username = "Benutzername"
 youAreLoggedIn = "Sie sind angemeldet!"
 
-[login.slides.edit]
-alt = "PDFs bearbeiten"
-subtitle = "Mit über einem Dutzend Tools zum Schwärzen, Signieren, Lesen und Bearbeiten von PDFs finden Sie sicher, was Sie suchen."
-title = "PDFs bearbeiten, um gewünschte Informationen anzuzeigen/zu schützen"
-
-[login.slides.overview]
-alt = "Stirling PDF Übersicht"
-subtitle = "Eine Privacy-First-Cloud-Suite für PDFs, mit der Sie Dokumente konvertieren, signieren, schwärzen und verwalten – plus 50+ weitere leistungsstarke Tools."
-title = "Ihr One-Stop-Shop für alle PDF-Anforderungen."
-
-[login.slides.secure]
-alt = "PDFs schützen"
-subtitle = "Fügen Sie Passwörter hinzu, schwärzen Sie Inhalte und verwalten Sie Zertifikate mühelos."
-title = "Schützen Sie sensible Informationen in Ihren PDFs"
-
 [margin]
 large = "Groß"
 medium = "Mittel"
@@ -4999,6 +5144,7 @@ pinButton = "Mit der Schaltfläche <strong>Anheften</strong> können Sie dafür
 results = "Nachdem das Tool fertig ist, zeigt der Schritt <strong>Überprüfen</strong> in diesem Bereich eine Vorschau der Ergebnisse und ermöglicht es Ihnen, den Vorgang rückgängig zu machen oder die Datei herunterzuladen."
 runButton = "Sobald das Tool konfiguriert ist, können Sie mit dieser Schaltfläche das Tool auf alle ausgewählten PDFs ausführen."
 selectCropTool = "Wählen wir das Tool <strong>Zuschneiden</strong> aus, um zu zeigen, wie eines der Tools verwendet wird."
+stepOf = "Schritt {{current}} von {{total}}"
 toolInterface = "Dies ist die Oberfläche des Tools <strong>Zuschneiden</strong>. Wie Sie sehen, ist hier noch nicht viel zu sehen, da wir noch keine PDF-Dateien hinzugefügt haben."
 workbench = "Dies ist der <strong>Arbeitsbereich</strong> – der Hauptbereich, in dem Sie Ihre PDFs ansehen und bearbeiten."
 wrapUp = "Alles fertig! Sie haben die Hauptbereiche der App und deren Verwendung kennengelernt. Klicken Sie jederzeit auf die Schaltfläche <strong>Hilfe</strong>, um diese Tour erneut zu sehen."
@@ -5011,6 +5157,26 @@ showMeAround = "Rundgang starten"
 skipForNow = "Für jetzt überspringen"
 skipTheTour = "Rundgang überspringen"
 
+[onboarding.checklist]
+dismiss = "Ausblenden"
+title = "Stirling PDF einrichten"
+
+[onboarding.checklist.downloadDesktop]
+description = "Stirling nativ auf Ihrem Gerät ausführen"
+title = "Stirling für Desktop herunterladen"
+
+[onboarding.checklist.inviteTeam]
+description = "Mit Ihrem Team zusammenarbeiten"
+title = "Teammitglieder einladen"
+
+[onboarding.checklist.shareAnalytics]
+description = "Helfen Sie, Stirling zu verbessern"
+title = "Anonyme Nutzungsdaten teilen"
+
+[onboarding.checklist.takeTour]
+description = "In einer kurzen Einführung sehen, wie Stirling funktioniert"
+title = "Tour starten"
+
 [onboarding.desktopInstall]
 body = "Stirling funktioniert am besten als Desktop-App. Sie können es offline nutzen, schneller auf Dokumente zugreifen und lokal auf Ihrem Computer bearbeiten."
 selectOs = "Betriebssystem auswählen"
@@ -5042,6 +5208,11 @@ adminTitle = "Admin-Übersicht"
 userBody = "Laden Sie Teammitglieder ein, weisen Sie Rollen zu und halten Sie Ihre Dokumente in einem sicheren Arbeitsbereich organisiert. Aktivieren Sie den Login-Modus, wenn Sie über die Einzelnutzung hinaus wachsen möchten."
 userTitle = "Plan-Übersicht"
 
+[onboarding.processorIntro]
+body = "Stirling führt jetzt <strong>Richtlinien</strong> aus — automatisierte Regeln, die jedes Dokument beim Eintreffen klassifizieren, schützen und verarbeiten. Richten Sie sie ein und überwachen Sie Ausführungen im <strong>Processor</strong>."
+cta = "Processor ansehen"
+title = "Stirling Processor ansehen"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5438,6 +5609,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Vorausbezahltes Jahr"
+
+[payg.prepaid.banner]
+exhausted = "Ihre vorausbezahlte Kapazität ist aufgebraucht; die verbrauchsabhängige Abrechnung wurde fortgesetzt. Laden Sie auf, um den Rabatt zu behalten."
+expiring_one = "Ihr vorausbezahltes Jahr endet in {{count}} Tag. Ungenutzte Kapazität verfällt — laden Sie auf, um ein neues Jahr zu starten."
+expiring_other = "Ihr vorausbezahltes Jahr endet in {{count}} Tagen. Ungenutzte Kapazität verfällt — laden Sie auf, um ein neues Jahr zu starten."
+low = "Sie haben nur noch {{pct}}% Ihrer vorausbezahlten Kapazität. Laden Sie jederzeit auf, damit die Verarbeitung ohne Unterbrechung weiterläuft."
+
+[payg.prepaid.card]
+subtitle = "Wird vor der verbrauchsabhängigen Abrechnung und außerhalb Ihres Ausgabenlimits verwendet."
+title = "Vorausbezahlte Kapazität"
+
+[payg.prepaid.meter]
+capSuffix = "von {{total}} vorausbezahlten Credits"
+expires = "Läuft ab am {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Aufgebraucht"
+healthy = "Reichlich übrig"
+low = "Wird knapp"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5974,49 +6167,12 @@ keyDescription = "Fügen Sie den Lizenzschlüssel aus Ihrer E-Mail ein"
 success = "Lizenz aktiviert!"
 successMessage = "Ihre Lizenz wurde erfolgreich aktiviert. Sie können dieses Fenster nun schließen."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "durchgesetzt"
-enforcing = "Wird durchgesetzt..."
-failed = "Durchsetzung fehlgeschlagen"
 outputsUnavailable = "Richtlinienergebnisse stehen nicht mehr zum Download bereit."
 partialOutputsUnavailable = "Einige Richtlinienergebnisse stehen nicht mehr zum Download bereit."
-retrying = "Ausgelastet, versuche es erneut..."
 runNotFound = "Der Durchsetzungsdurchlauf konnte nicht mehr gefunden werden."
-step = "Schritt {{current}}/{{total}}"
 timedOut = "Zeitüberschreitung bei der Durchsetzung, bevor der Durchlauf abgeschlossen werden konnte."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Schließen"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Wende {{names}} an"
 applyingProgress = "Wende {{names}} an ({{done}} von {{total}})"
@@ -6026,61 +6182,16 @@ failureBody = "{{failures}} von {{total}} Datei(en) konnten nicht verarbeitet we
 failureTitle = "Ohne vollständige Durchsetzung exportiert"
 printPolicyAppliedBody = "Dieses PDF wurde aktualisiert, um eine Richtlinie zu erfüllen. Prüfen Sie die Änderungen und drucken Sie anschließend erneut."
 printPolicyAppliedTitle = "Richtlinie vor dem Drucken angewendet"
-queued = "+{{count}} in Warteschlange"
 successTitle = "{{names}} angewendet"
 summaryMore = "{{first}}, {{second}} und {{more}} weitere"
 summaryTwo = "{{first}} und {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Durchsetzen vor dem Konvertieren"
-default = "Durchsetzen"
-export = "Durchsetzen vor dem Export"
-input = "Durchsetzen beim Import"
-print = "Durchsetzen vor dem Drucken"
-
-[policies.field]
-accessLog = "Zugriffsprotokoll"
-archiveAfter = "Archivieren nach"
-auditTrail = "Audit-Trail"
-belowThreshold = "Unter Schwellenwert"
-destination = "Ziel"
-frameworks = "Frameworks"
-immutableHold = "Unveränderliche Sperre"
-keepFor = "Aufbewahren für"
-minConfidence = "Min. Konfidenz"
-notify = "Bei Weiterleitung benachrichtigen"
-onViolation = "Bei Nichteinhaltung"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Hinzufügen"
-addPlaceholder = "Label hinzufügen…"
-customNote = "Für Ihr Team angepasst."
-defaultNote = "Verwendet den integrierten Standard, der mit Ihrem Team geteilt wird."
-duplicate = "\"{{name}}\" existiert bereits."
-edit = "Labels bearbeiten"
-empty = "Noch keine Labels."
-export = "JSON exportieren"
-iconAria = "Symbol für {{name}} auswählen"
-import = "JSON importieren"
-importError = "Diese Datei konnte nicht importiert werden."
-managedNote = "Team-Labels werden von Ihrer Teamleitung verwaltet."
-modalSubtitle = "Mit Ihrem gesamten Team geteilt. Der Klassifizierer wählt die Labels aus, die zu jedem Dokument passen."
-modalTitle = "Klassifizierungslabels"
-pickIcon = "Symbol {{label}} verwenden"
-removeAria = "{{name}} entfernen"
-resetToDefault = "Auf Standard zurücksetzen"
-saveForTeam = "Für Team speichern"
-saving = "Wird gespeichert…"
-sectionLabel = "Klassifizierungslabels"
-startFromScratch = "Von Grund auf neu beginnen"
-teamCount = "Team-Labels"
-tooLong = "Labels dürfen höchstens {{max}} Zeichen lang sein."
-ungrouped = "Nicht gruppiert"
-view = "Labels anzeigen"
+categoryCount = "Kategorien"
+hideCategory = "Kategorie ausblenden"
+labelCount = "Labels"
+sharedNote = "Diese Labels sind integriert und werden von Ihrem gesamten Team gemeinsam genutzt."
+showCategory = "Kategorie anzeigen"
 
 [policies.pii]
 account = "Kontonummern (beschriftet)"
@@ -6093,93 +6204,10 @@ placeholder = "Select PII types"
 routing = "US-Routingnummern (ABA)"
 ssn = "Sozialversicherungsnummern"
 
-[policies.settings]
-noneExport = "Derzeit werden beim Export keine Richtlinien ausgeführt."
-noneUpload = "Derzeit werden beim Upload keine Richtlinien ausgeführt."
-onExport = "Beim Export"
-onUpload = "Beim Upload"
-reorderHandle = "Ziehen, um neu anzuordnen"
-runOrderDesc = "Wenn mehrere Richtlinien durch denselben Auslöser ausgeführt werden, laufen sie in dieser Reihenfolge — jede auf der Ausgabe der vorherigen Richtlinie. Ziehen Sie, um neu anzuordnen."
-title = "Richtlinieneinstellungen"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Richtlinienoptionen"
-policySettings = "Richtlinieneinstellungen"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Fehlgeschlagene Richtlinien erneut versuchen ({{count}})"
-rowProgress = "{{completed}} von {{total}} Dateien verarbeitet"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Was ist eine Richtlinie?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Findet automatisch sensible Daten – wie Sozialversicherungs- und Kartennummern – und schwärzt sie, sodass sie im Dokument nicht gelesen werden können."
-sanitize = "Entfernt verstecktes JavaScript aus der Datei, sodass beim Öffnen nichts automatisch ausgeführt wird."
-watermark = "Bringt einen sichtbaren Vermerk (z. B. \"Vertraulich\") über jede Seite auf."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Schließen"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} wird durchgesetzt..."
 badgeRan = "Richtlinie {{name}} wurde für diese Datei ausgeführt"
+badgeRunning = "{{name}} läuft..."
 blockingAction = "{{action}} blockiert, während die Richtlinie durchgesetzt wird. Bitte warten..."
 dismiss = "Overlay ausblenden"
 enforcingTitle = "Richtlinie wird durchgesetzt..."
@@ -6188,6 +6216,7 @@ viewAnyway = "Datei anzeigen (Richtlinie wird noch durchgesetzt)"
 [policyOption]
 autoRedactPhi = "PHI automatisch schwärzen"
 blockExport = "Export blockieren"
+ccpa = "CCPA"
 contracts = "Verträge"
 documents = "Dokumente"
 fedramp = "FedRAMP"
@@ -6306,86 +6335,6 @@ free = "Editor-Tarif"
 subscribed = "Processor-Tarif"
 unlinked = "Nicht verknüpft"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Aus Dokument initialisieren"
-sectionsAriaLabel = "Agent-Builder-Abschnitte"
-selectorAriaLabel = "Agents"
-subtitle = "Entwerfen, testen und veröffentlichen Sie KI-Agenten, die Ihre Dokumente klassifizieren, Inhalte extrahieren und weiterleiten. Definieren Sie Szenarien, begrenzen Sie den Tool-Zugriff, führen Sie ein Golden Set aus und veröffentlichen Sie eine Version."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Abbrechen"
-dropzoneText = "Beispieldokument auswählen (PDF oder Bild)"
-lead = "Legen Sie ein Beispieldokument ab, und wir schlagen Szenarien sowie ein Extraktionsschema vor, das Sie verfeinern können. Nichts wird veröffentlicht, bevor Sie es geprüft haben."
-submit = "Agent initialisieren"
-subtitle = "Einen neuen Agent aus einer repräsentativen Datei erstellen"
-title = "Aus einem Dokument initialisieren"
-
-[portal.agentBuilder.empty]
-description = "Initialisieren Sie einen Agent aus einem Beispieldokument, um seine Szenarien und sein Extraktionsschema anzulegen, und verfeinern und veröffentlichen Sie ihn anschließend."
-title = "Noch keine Agents"
-
-[portal.agentBuilder.evals]
-casesPassing = "Bestandene Fälle"
-columnCase = "Eval-Fall"
-columnLatency = "Latenz"
-columnResult = "Ergebnis"
-fail = "fehlgeschlagen"
-goldenSetPassRate = "Golden-Set-Erfolgsrate"
-latencyMs = "{{ms}} ms"
-notRun = "nicht ausgeführt"
-pass = "bestanden"
-passRate = "Erfolgsrate"
-runEvals = "Evals ausführen"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals machen aus Ihren Szenarien ein wiederholbares Golden Set. Führen Sie ein Upgrade durch, um die Erfolgsrate über die Zeit zu erfassen und Veröffentlichungen davon abhängig zu machen."
-title = "Noch kein Golden Set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "über Golden Sets hinweg"
-activeAgents = "Aktive Agents"
-avgPassRate = "Durchschn. Eval-Erfolgsrate"
-fleetWide = "flottenweit"
-latestPublished = "Zuletzt veröffentlicht"
-scenarios = "Szenarien"
-testCases = "Testfälle"
-totalDescription_one = "{{count}} insgesamt"
-totalDescription_other = "{{count}} insgesamt"
-
-[portal.agentBuilder.scenarios]
-add = "Hinzufügen"
-addScenario = "Szenario hinzufügen"
-enable = "Aktivieren"
-expectationLabel = "Erwartetes Verhalten"
-expectationPlaceholder = "Was der Agent tun soll"
-inEval = "in Eval"
-mute = "Stummschalten"
-muted = "stummgeschaltet"
-nameLabel = "Name"
-namePlaceholder = "z. B. Compliance-Eskalation"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Szenarien"
-tools = "Tools"
-versions = "Versionen"
-
-[portal.agentBuilder.tools]
-broadAccess = "Breiter Zugriff"
-deniedHint = "Ausgewählte Tools sind blockiert. Alles andere bleibt aufrufbar."
-deniedTools = "Abgelehnte Tools"
-governanceGate = "Tool-Governance ist im Enterprise-Tarif verfügbar."
-restricted = "Eingeschränkt"
-restrictedAccess = "Eingeschränkter Tool-Zugriff"
-restrictedDescription = "Alle Tools außer den unten abgelehnten zulassen."
-
-[portal.agentBuilder.versions]
-current = "aktuell"
-historyGate = "Vollständiger Versionsverlauf und Rollback sind im Enterprise-Tarif verfügbar."
-publish = "Veröffentlichen"
-rollBack = "Zurücksetzen"
-
 [portal.assistant]
 close = "Assistent schließen"
 error = "Der Assistent konnte nicht erreicht werden."
@@ -6402,9 +6351,21 @@ typing = "Schreibt"
 loading = "Wird geladen"
 redirectingToEditor = "Weiterleitung zum Editor..."
 
+[portal.billing.activation]
+maybeLater = "Vielleicht später"
+title = "Processor einschalten"
+
+[portal.billing.activation.payg]
+sub = "Legen Sie ein monatliches Limit fest. Zahlen Sie für das, was Sie ausführen."
+title = "Pay-as-you-go"
+
+[portal.billing.activation.prepay]
+badge = "2 Monate kostenlos"
+sub = "Eine Rechnung, Karte oder Banküberweisung."
+title = "Ein Jahr im Voraus bezahlen"
+
 [portal.billing.checkout]
 noClientSecret = "Edge-Funktion hat kein client_secret zurückgegeben."
-subtitle = "Fügen Sie eine Karte hinzu, um nach Ihrem kostenlosen Editor-Tarif-Guthaben fortzufahren. Stripe erledigt den Rest."
 title = "Processor-Tarif aktivieren"
 
 [portal.billing.checkout.activationSlow]
@@ -6412,6 +6373,22 @@ body = "Ihre Zahlung war erfolgreich, aber die Aktivierung dauert etwas länger
 close = "Schließen"
 title = "Fast geschafft"
 
+[portal.billing.checkout.cap]
+amountAria = "Monatliches Ausgabenlimit"
+back = "Zurück"
+continue = "Weiter zur Zahlung"
+error = "Ihr Ausgabenlimit konnte nicht festgelegt werden"
+finePrint = "Rechnungen werden monatlich erstellt. Jederzeit kündbar."
+noLimit = "Kein Limit"
+note = "Ihnen wird nie mehr als Ihr Limit berechnet. Die Verarbeitung pausiert einfach."
+perMonth = "/ Monat"
+title = "Ausgabenlimit festlegen"
+
+[portal.billing.checkout.card]
+fields = "Kartennummer · MM / JJ · CVC · ZIP"
+label = "Kartendetails"
+note = "Kartendetails werden von Stripe erfasst. Stirling speichert niemals PAN oder CVC."
+
 [portal.billing.checkout.error]
 title = "Checkout konnte nicht gestartet werden"
 
@@ -6420,10 +6397,9 @@ body = "Ihre Zahlung wurde verarbeitet. Wir aktivieren die nutzungsbasierte Vera
 hint = "Bitte lassen Sie dieses Fenster geöffnet."
 title = "Ihr Processor-Tarif wird aktiviert..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "in der Portal-Env fest, um den In-App-Checkout zu aktivieren."
-bodyBefore = "Legen Sie"
-title = "Stripe nicht konfiguriert"
+[portal.billing.checkout.pay]
+limit = "Monatliches Ausgabenlimit {{amount}}/Monat. Die Verarbeitung pausiert am Limit."
+limitNoCap = "Kein Ausgabenlimit. Die Verarbeitung pausiert nicht. Rechnungen werden monatlich erstellt."
 
 [portal.billing.enterpriseUpsell]
 cta = "Enterprise-Angebot erstellen"
@@ -6446,10 +6422,12 @@ currentPlan = "Aktueller Tarif"
 freeForever = "Für immer kostenlos"
 noTeamResolved = "Für Ihr Wallet wurde noch kein Team ermittelt — aktualisieren Sie und versuchen Sie es erneut."
 ownerOnly = "Nur der Teambesitzer kann den Processor-Tarif aktivieren."
+payInvoice = "Rechnung bezahlen, um abzuschließen"
 planName = "Editor"
 ssoIncluded = "SSO enthalten"
 switchOnProcessor = "Processor aktivieren →"
 unlimitedUsers = "Unbegrenzte Benutzer"
+viewQuote = "Angebot ansehen"
 
 [portal.billing.invoices]
 columnAmount = "Betrag"
@@ -6502,7 +6480,111 @@ segmentApiDesc = "Direkte API-Anfragen"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatisierungen & Pipelines"
 segmentAutomationLabel = "Automatisierung"
+sizeMultiplier = "{{formatted}} PDFs verwendeten einen Größenmultiplikator"
+summary = "{{unique}} eindeutig · {{units}} Zählereinheiten · {{avg}} Durchschnitt pro PDF"
+summaryNoRate = "{{unique}} eindeutig · {{units}} Zählereinheiten"
 unit = "nutzungsbasierte PDFs"
+unitsPending_one = "{{units}} Zählereinheit wartet auf Synchronisierung von verknüpften Instanzen"
+unitsPending_other = "{{units}} Zählereinheiten warten auf Synchronisierung von verknüpften Instanzen"
+
+[portal.billing.prepaid]
+capSuffix = "von {{total}} vorausbezahlten Credits"
+expires = "Läuft ab am {{date}}"
+eyebrow = "Vorausbezahlte Kapazität"
+note = "Wird vor der verbrauchsabhängigen Abrechnung und außerhalb Ihres Ausgabenlimits verwendet."
+topUp = "Aufladen"
+
+[portal.billing.prepaid.buy]
+back = "Zurück"
+calcTitle = "Jahreszahlung berechnen"
+cancel = "Abbrechen"
+cancelPurchase = "Kauf abbrechen"
+close = "Schließen"
+continueToPayment = "Weiter zur Zahlung"
+finalise = "Abschließen"
+invoiceErrorTitle = "Die Rechnung konnte nicht erstellt werden"
+loadingTitle = "Ihr Angebot wird geladen"
+payTitle = "Für Ihr Jahr bezahlen"
+step = "Schritt {{current}} von {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Ändern"
+deployRow = "Bereitstellung"
+done = "Fertig"
+enterpriseHint = "Dies ist Enterprise-Maßstab. Bei diesem Volumen sind Enterprise-Tarife besser als jeder Self-Service-Rabatt. Preisbindung, Konditionen und ein Angebot in wenigen Minuten."
+governanceRow = "Governance"
+governanceValue = "{{label}} · {{count}} Richtlinien"
+handlesLabel = "Ihr Processor"
+handlesValue = "verarbeitet {{volume}} Credits / Monat"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} Richtlinien"
+poolCaption = "Ein Pool mit {{credits}} Credits für das Jahr. Starke Monate leihen sich von schwachen Monaten."
+priceLabel = "Ihr Jahr · 12 Monate zum Preis von 10"
+rateUnknown = "Wir zeigen den genauen Preis beim Checkout an."
+savings = "Sie sparen {{amount}} · 2 Monate kostenlos."
+sizingRow = "Größe"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Benutzer insgesamt"
+
+[portal.billing.prepaid.consent]
+label = "Ich verstehe, dass die Verarbeitung automatisch zum standardmäßigen verbrauchsabhängigen Pay-as-you-go-Tarif fortgesetzt wird (bis zu meinem Ausgabenlimit), wenn meine vorausbezahlte Kapazität aufgebraucht ist oder nach 12 Monaten abläuft, sofern ich nicht kündige, und dass ich jederzeit über das Abrechnungsportal kündigen kann."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Von Stirling verwaltet. In wenigen Minuten live."
+cloudValue = "Stirling Cloud · Verwaltet"
+selfhost = "Selbst gehostet"
+selfhostDesc = "Läuft auf privater Infrastruktur. Gleicher Tarif."
+selfhostValue = "Selbst gehostet · Private Infrastruktur"
+
+[portal.billing.prepaid.offer]
+cta = "Angebot prüfen"
+subtitle = "Bezahlen Sie ein Jahr PDF-Verarbeitung im Voraus und erhalten Sie zwei Monate kostenlos, verwendet vor der verbrauchsabhängigen Abrechnung, außerhalb Ihres Ausgabenlimits."
+title = "12 Monate zum Preis von 10 erhalten"
+
+[portal.billing.prepaid.pay]
+accountName = "Name des Kontoinhabers"
+accountNamePlaceholder = "z. B. Jane Smith"
+companyName = "Firmenname (optional)"
+companyNamePlaceholder = "z. B. Acme Inc."
+downloadInvoice = "Rechnung herunterladen"
+payOnline = "Online bezahlen"
+poNumber = "Bestellnummer (optional)"
+poNumberPlaceholder = "z. B. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Erweitert"
+advancedDesc = "Pipelines treiben den Großteil Ihrer Verarbeitung an."
+none = "Keine"
+noneDesc = "Noch keine Pipelines aktiv. Sie können sie jederzeit einschalten."
+standard = "Standard"
+standardDesc = "Einige Pipelines verarbeiten eingehende PDFs erneut."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Klassifizierung, Standard, plus Teilen"
+governed = "Gesteuert"
+governedDesc = "Fügt Sicherheit und Routing hinzu"
+regulated = "Reguliert"
+regulatedDesc = "Jede Kategorie, inkl. Compliance, Aufbewahrung, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Angebot herunterladen (PDF)"
+downloading = "Wird vorbereitet…"
+share = "zur Genehmigung teilen"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "Dateien unter 25 MB, keine Datengebühren"
+heavy = "Schwer"
+heavyDesc = "Gescannt oder bildlastig, regelmäßig 50 MB+"
+standard = "Standard"
+standardDesc = "Überwiegend klein, einige Scans über 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Aufgebraucht"
+healthy = "Reichlich übrig"
+low = "Wird knapp"
 
 [portal.billing.spendLimit]
 adjustLimit = "Limit anpassen"
@@ -6531,6 +6613,8 @@ label = "Voraussichtlich überschritten."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Ausgaben diesen Monat"
+freeRemaining_one = "{{formatted}} kostenlose PDF verbleibend"
+freeRemaining_other = "{{formatted}} kostenlose PDFs verbleibend"
 processed_one = "{{formattedCount}} PDF verarbeitet."
 processed_other = "{{formattedCount}} PDFs verarbeitet."
 processedWithRate_one = "{{formattedCount}} PDF verarbeitet, zu je {{rate}}."
@@ -6571,6 +6655,350 @@ signature = "Signatur"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Neue Verbindung"
+createTitleFor = "{{name}} verbinden"
+delete = "Löschen"
+edit = "Bearbeiten"
+editTitle = "Verbindung bearbeiten"
+unsupportedType = "Dieser Verbindungstyp kann hier nicht bearbeitet werden."
+
+[portal.connections.categories.advanced]
+description = "Für einen Dienst, den wir noch nicht unterstützen."
+label = "Erweitert"
+
+[portal.connections.categories.audit]
+description = "Aufzeichnen, was mit einem Dokument passiert ist, dort, wo Ihre Prüfer bereits nachsehen."
+label = "Audit- & Compliance-Protokollierung"
+
+[portal.connections.categories.notify]
+description = "Ein anderes System benachrichtigen, dass etwas passiert ist."
+label = "Benachrichtigung & Workflow"
+
+[portal.connections.categories.security]
+description = "Ein Dokument scannen oder labeln, bevor es weitergeleitet wird."
+label = "Sicherheit & Klassifizierung"
+
+[portal.connections.categories.signing]
+description = "Ein Dokument zum Signieren oder Beglaubigen versenden."
+label = "E-Signatur & Beglaubigung"
+
+[portal.connections.categories.storage]
+description = "Wo verarbeitete Dokumente landen – ein Bucket, ein Laufwerk, ein Ticket oder eine Seite."
+label = "Datei & Anhang"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling speichert dies verschlüsselt und zeigt es nie wieder an."
+label = "Access Token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Schritte, die diese Verbindung verwenden, können nur Pfade unter dieser URL aufrufen, niemals einen anderen Host."
+label = "Server-URL"
+
+[portal.connections.commonFields.email]
+label = "E-Mail"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Passwort"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Benutzername"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Fügen Sie die URL ein, die Ihnen der Dienst gegeben hat. Nur Pfade darunter können aufgerufen werden."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Verbindungsname"
+namePlaceholder = "z. B. Produktion"
+
+[portal.connections.picker]
+cancel = "Abbrechen"
+createNew = "Neue Verbindung..."
+placeholder = "Verbindung auswählen"
+save = "Verbindung speichern"
+
+[portal.connections.picker2]
+back = "Integration ändern"
+heading = "Was möchten Sie verbinden?"
+noResultsBody = "Wir unterstützen es noch nicht – erzählen Sie uns davon, und wir prüfen, ob wir es hinzufügen können."
+noResultsTitle = "Nichts passt zu \"{{query}}\""
+searchPlaceholder = "Integrationen suchen – versuchen Sie \"sign\", \"ocr\" oder einen Produktnamen"
+
+[portal.connections.types.api]
+description = "Beliebige HTTP API aus einer Richtlinie aufrufen. Sie wählen URL, Authentifizierung und Payload."
+label = "Benutzerdefinierte API"
+
+[portal.connections.types.api.fields.authType]
+label = "Authentifizierung"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Benutzername und Passwort"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token in einem benutzerdefinierten Header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Keine"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Für einen Token anmelden"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Schritte, die diese Verbindung verwenden, können nur Pfade unter dieser URL aufrufen, niemals einen anderen Host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header-Name"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Anmeldepfad"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Passwort"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Wenn die API mit einem Download-Link antwortet, dürfen nur diese Hosts abgerufen werden. Mit Kommas trennen. Leer lassen, um nur den eigenen Host der Base URL zu erlauben."
+label = "Erlaubte Ergebnis-Hosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Token als diesen Header senden"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Der Antwort-Header, in dem der Anmeldeaufruf den Token zurückgibt, z. B. X-Auth-Token."
+label = "Token-Antwort-Header"
+
+[portal.connections.types.api.fields.username]
+label = "Benutzername"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Dokumente auf einem von Ihnen betriebenen Server auf Malware scannen – nichts verlässt Ihr Netzwerk."
+label = "ClamAV (selbst gehostet)"
+
+[portal.connections.types.cloudmersive]
+description = "Viren- und Inhalts-Scanning für Dokumente in einer Richtlinie."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Dokumente blockieren, die Makros, ausführbare Dateien, Skripte oder eingebettete Objekte enthalten – nicht nur bekannte Malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Verarbeitete Dokumente an eine Confluence-Seite anhängen."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Dokumente zur elektronischen Signatur und Beglaubigung an ConsignO Cloud (Notarius) senden."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Ihre ConsignO Cloud-Umgebung, einschließlich /api/v1."
+label = "Server-URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Passwort"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Nur erforderlich, wenn Ihre Organisation Tenants verwendet."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Benutzername"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Eine Nachricht an Discord posten, wenn eine Richtlinie ein Dokument verarbeitet."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Jedes Mal ein Audit-Ereignis in Elasticsearch indexieren, wenn eine Richtlinie ein Dokument verarbeitet."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Einen FTP- oder FTPS-Server auf neue Dokumente abfragen."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Verbindungsmodus"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktiv"
+passive = "Passiv (empfohlen)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Einfaches FTP sendet Anmeldedaten und Dateien unverschlüsselt; wählen Sie FTPS, wenn der Server es unterstützt."
+label = "Verschlüsselung"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explizit / AUTH TLS)"
+implicit = "FTPS (implizit)"
+none = "Keine (einfaches FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Eine Nachricht in einen Google Chat-Bereich posten, wenn eine Richtlinie ausgeführt wird."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Verarbeitete Dokumente an ein Jira-Issue anhängen."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Ein Dokument oder eine Benachrichtigung per E-Mail senden, wenn eine Richtlinie ausgeführt wird."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Verarbeitete Dokumente in Nextcloud ablegen."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App-Passwort"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Personenbezogene Daten in Dokumenttext mit einem von Ihnen betriebenen Presidio-Server erkennen."
+label = "Presidio (selbst gehostet)"
+
+[portal.connections.types.purview]
+description = "Microsoft Purview-Vertraulichkeitslabels auf PDFs lesen und anwenden."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Optional. Nur erforderlich, um Labels nach Name auszuwählen; Labeling funktioniert auch ohne."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Wird auf jedes Label als SiteId gestempelt, damit Purview-fähige Tools wissen, welche Organisation es angewendet hat."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Ein S3-Bucket, aus dem Quellen lesen und in den Pipeline-Ausgaben schreiben können."
+label = "S3-Speicher"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Für AWS leer lassen. Für MinIO oder einen anderen S3-kompatiblen Speicher festlegen."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Ein Dokument oder eine Benachrichtigung per E-Mail senden, wenn eine Richtlinie ausgeführt wird."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Einen SFTP (SSH)-Server auf neue Dokumente abfragen."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Optional. Der SHA-256-Hostschlüssel-Fingerabdruck des Servers (von `ssh-keyscan host | ssh-keygen -lf -`). Wenn festgelegt, wird nur ein Server akzeptiert, der diesen Schlüssel präsentiert; wenn leer, wird der beim ersten Verbinden gesehene Schlüssel gepinnt und spätere Änderungen werden abgelehnt."
+label = "Hostschlüssel-Fingerabdruck"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Schlüssel-Passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Leer lassen, wenn Sie sich stattdessen mit einem privaten Schlüssel authentifizieren."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Optional. Fügen Sie einen OpenSSH-Privatschlüssel ein, um sich mit einem Schlüssel statt mit einem Passwort zu authentifizieren."
+label = "Privater Schlüssel"
+
+[portal.connections.types.slack]
+description = "Eine Nachricht an Slack posten, wenn eine Richtlinie ein Dokument verarbeitet."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Eine SMB / CIFS-Netzwerkfreigabe überwachen (Windows oder Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Netzwerkfreigabe"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Optional. Die Windows-Domain oder Arbeitsgruppe, falls Ihr Server eine verwendet."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Freigabe"
+placeholder = "Dokumente"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Jedes Mal ein Audit-Ereignis an Splunk senden, wenn eine Richtlinie ein Dokument verarbeitet."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Ein Audit-Ereignis an einen Sumo Logic HTTP Collector senden."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Eine Nachricht in einen Teams-Kanal posten, wenn eine Richtlinie ausgeführt wird."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Jedes Dokument oder nur die Details an eine von Ihnen gewählte URL posten."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Einen Zap oder ein Make-Szenario aus einer Richtlinie auslösen."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Dokumentation durchsuchen"
+viewSource = "Quelle auf GitHub ansehen"
+
 [portal.docs.authentication]
 codeCaption = "jede Anfrage"
 eyebrow = "ERSTE SCHRITTE"
@@ -6656,11 +7084,19 @@ title = "Offizielle SDKs"
 beta = "Beta"
 deprecated = "Veraltet"
 
+[portal.docs.search]
+empty = "Keine passenden Dokumente"
+placeholder = "Dokumentation suchen"
+results = "{{count}} Ergebnisse"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Gebündelte, benannte Fähigkeiten, die Ihr Agent als einzelnes Tool aufruft. Jeder Skill ist eine deterministische Operationskette mit angehängten Evals."
 title = "Agent-Skills"
 
+[portal.docs.toc]
+title = "Auf dieser Seite"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API-REFERENZ"
@@ -6734,6 +7170,8 @@ type = "Typ"
 user = "Benutzer"
 
 [portal.documents.queue.empty]
+connectSource = "Quelle verbinden"
+createPipeline = "Pipeline erstellen"
 description = "Wenn Quellen Dokumente in Ihre Pipelines einspeisen, erscheinen sie hier zur Überprüfung."
 title = "Keine Dokumente in der Warteschlange"
 
@@ -6843,13 +7281,71 @@ description = "In dieser Ansicht ist ein unerwarteter Fehler aufgetreten. Versuc
 retry = "Erneut versuchen"
 title = "Auf dieser Seite ist etwas schiefgelaufen"
 
+[portal.home.download]
+back = "Zurück"
+body = "Laden Sie die Desktop-App herunter oder hosten Sie den Server selbst."
+done = "Fertig"
+guide = "{{name}}-Anleitung öffnen"
+openInBrowser = "Stattdessen im Browser öffnen"
+sectionDesktop = "Desktop-App"
+sectionSelfHosted = "Selbst gehostet"
+title = "Stirling PDF Editor installieren"
+
+[portal.home.download.docker]
+detailBody = "Führen Sie das offizielle Image auf Ihrem Server aus."
+note = "Öffnet auf :8080. Standard-Login: admin / stirling."
+tagline = "Server in einem Container ausführen"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installieren Sie das offizielle Helm-Chart."
+note = "Fügen Sie ein PVC für /configs hinzu, um Einstellungen dauerhaft zu speichern."
+tagline = "Mit Helm in einem Cluster bereitstellen"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Native Builds für Ihre Distribution."
+guideBtn = "Linux-Installationsoptionen anzeigen"
+note = "AppImage-, .deb- und .rpm-Builds sind für gängige Distributionen verfügbar."
+tagline = "Native Desktop-App für Ihre Distribution"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Oder über Homebrew"
+detailBody = "Führen Sie den Installer aus oder verwenden Sie Homebrew."
+downloadBtn = "Für macOS herunterladen"
+tagline = "Native App für Apple Silicon und Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Führen Sie die .jar auf einem Bare-Metal-Server aus."
+downloadBtn = ".jar herunterladen"
+note = "Erfordert Java 21+. Öffnet auf :8080; Standard-Login admin / stirling."
+runLabel = "Dann ausführen"
+tagline = "Die .jar auf einem Bare-Metal-Server ausführen"
+title = "Manuelle Servereinrichtung"
+
+[portal.home.download.windows]
+altLabel = "Oder über winget"
+detailBody = "Führen Sie den Installer aus oder verwenden Sie einen Paketmanager."
+downloadBtn = "Installer herunterladen"
+tagline = "Native App für Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktiv"
-invite = "Teammitglieder einladen"
+activeOfDeployed = "{{active}} von {{total}} diesen Monat aktiv"
 name = "Stirling PDF Editor"
 open = "Im Browser öffnen"
 updated = "aktualisiert {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Bereitstellung abschließen"
+options = "Bereitstellungsoptionen anzeigen"
+start = "Editor bereitstellen"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Selbst gehostet · Docker"
@@ -6860,49 +7356,6 @@ afternoon = "Guten Tag"
 evening = "Guten Abend"
 morning = "Guten Morgen"
 
-[portal.home.onboarding]
-dismiss = "Einrichtung ausblenden"
-notStarted = "Nicht gestartet"
-progress = "{{done}} von {{total}} erledigt"
-title = "Einrichtung abschließen"
-
-[portal.home.onboarding.enterprise]
-body = "Organisationsweites SSO + SCIM + RBAC, feste Volumenpreise und Air-gapped-Bereitstellung."
-cta = "Testversion starten"
-ctaQuote = "Angebot anfordern"
-lead = "Für 250+ Mitarbeitende."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Stellen Sie die Desktop-App bereit, dauerhaft kostenlos."
-title = "PDF Editor herunterladen"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktiv · {{recommended}} empfohlen"
-chip = "{{active}} aktiv"
-title = "Richtlinien aktivieren"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} verbunden · jedes PDF wird dort gesteuert, wo es landet"
-chip = "{{connected}} verbunden"
-title = "Quellen verbinden"
-
-[portal.home.quickActions]
-subtitle = "Wichtigste Aufgaben für heute"
-title = "Schnellaktionen"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-Schritt-Composer über der typisierten Op-Bibliothek"
-title = "Pipeline erstellen"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, Agents, Webhooks, überwachte Ordner"
-title = "Quelle verbinden"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Eingeschränkter Schlüssel mit Ratenlimits und IP-Allowlist"
-title = "API-Schlüssel ausstellen"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor-Bereitstellung verwalten"
 sectionsAriaLabel = "Infrastrukturbereiche"
@@ -6915,13 +7368,9 @@ heading = "API-Schlüssel"
 subheading = "Eingeschränkte Zugangsdaten mit Ratenlimits pro Schlüssel, Berechtigungen und IP-Allowlists."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Erlaubte IPs"
-anyIp = "Beliebige IP (keine Allowlist)"
 created = "Erstellt"
 lastUsed = "Zuletzt verwendet"
-permissions = "Berechtigungen"
-rateLimit = "Ratenlimit"
-rateLimitValue = "{{value}} Anfragen/min"
+revoke = "Schlüssel widerrufen"
 usageMonth = "Nutzung diesen Monat"
 usageToday = "Nutzung heute"
 
@@ -6929,6 +7378,20 @@ usageToday = "Nutzung heute"
 description = "Erstellen Sie einen eingeschränkten Schlüssel, um die Stirling API aufzurufen."
 title = "Noch keine API-Schlüssel"
 
+[portal.infrastructure.apiKeys.error]
+load = "Ihre API-Schlüssel konnten nicht geladen werden. Bitte versuchen Sie es erneut."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" widerrufen? Jede Integration, die diesen Schlüssel noch verwendet, erhält sofort 401-Fehler. Dies kann nicht rückgängig gemacht werden."
+cancel = "Abbrechen"
+confirm = "Schlüssel widerrufen"
+title = "API-Schlüssel widerrufen"
+
+[portal.infrastructure.attestationLabel]
+attested = "Bestätigt"
+inScope = "Im Geltungsbereich"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Audit-Ereignisse nach Kategorie filtern"
 heading = "Audit-Protokolle"
@@ -6972,6 +7435,7 @@ all = "Alle"
 auth = "Auth"
 config = "Konfiguration"
 elevation = "Berechtigungserweiterung"
+policy = "Richtlinie"
 processing = "Verarbeitung"
 security = "Sicherheit"
 
@@ -6981,19 +7445,35 @@ title = "Sie haben keinen Zugriff"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguration"
-elevation = "Berechtigungserweiterung"
+policy = "Richtlinie"
 processing = "Verarbeitung"
 totalEvents = "Ereignisse gesamt · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Konfiguration"
+elevation = "Erhöhung"
+policy = "Richtlinie"
+processing = "Verarbeitung"
+security = "Sicherheit"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Fehler"
+info = "Info"
+success = "Erfolg"
+warning = "Warnung"
+
+[portal.infrastructure.certLabel]
+certified = "Zertifiziert"
+inProgress = "In Bearbeitung"
+notStarted = "Nicht gestartet"
+
 [portal.infrastructure.createKey]
 cancel = "Abbrechen"
 createKey = "Schlüssel erstellen"
 done = "Fertig"
-ipAllowlistHelper = "Durch Kommas getrennte CIDR-Bereiche. Leer lassen, um beliebige IPs zu erlauben."
-ipAllowlistLabel = "IP-Allowlist"
 keyNameLabel = "Schlüsselname"
 keyNamePlaceholder = "z. B. Produktion · Aufnahme"
-permissionsLabel = "Berechtigungen"
 secretKeyCaption = "Geheimer Schlüssel"
 secretWarning = "Speichern Sie dies in einem Secrets-Manager. Stirling speichert immer nur einen Hash — es gibt keine Möglichkeit, ihn später wiederherzustellen."
 subtitle = "Beschränken Sie den Schlüssel auf das Minimum, das er benötigt. Sie können ihn jederzeit rotieren oder widerrufen."
@@ -7001,6 +7481,12 @@ subtitleCreated = "Kopieren Sie dieses Secret jetzt — es wird nicht erneut ang
 title = "API-Schlüssel erstellen"
 titleCreated = "Schlüssel erstellt"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "In Warteschlange"
+rolledBack = "Zurückgesetzt"
+rolling = "Wird ausgerollt"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -7036,6 +7522,15 @@ subheading = "Live-Zustand für jede bereitgestellte Stirling-Region — Latenz,
 description = "Bereitgestellte Regionen erscheinen hier, sobald Ihr Arbeitsbereich bereitgestellt ist."
 title = "Keine Regionen bereitgestellt"
 
+[portal.infrastructure.keyLabel]
+active = "Aktiv"
+revoked = "Widerrufen"
+
+[portal.infrastructure.modelLabel]
+active = "Aktiv"
+degraded = "Beeinträchtigt"
+disabled = "Deaktiviert"
+
 [portal.infrastructure.models]
 heading = "Modelle"
 msValue = "{{value}} ms"
@@ -7063,6 +7558,10 @@ status = "Status"
 type = "Typ"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/Aufruf"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktive Modelle"
 avgLatency = "Durchschn. Latenz"
@@ -7086,6 +7585,17 @@ modelForAria = "Modell für {{operation}}"
 operation = "Operation"
 routedTo = "Weitergeleitet an"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klassifizierung"
+extraction = "Extraktion"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Beeinträchtigt"
+down = "Ausgefallen"
+healthy = "Fehlerfrei"
+
 [portal.infrastructure.security.access.byok]
 description = "Stellen Sie einen Schlüssel aus Ihrem eigenen KMS bereit. Stirling verschlüsselt damit, kann aber weiterhin lesen."
 label = "Bring your own key (BYOK)"
@@ -7211,6 +7721,47 @@ models = "Modelle"
 security = "Sicherheit"
 storage = "Speicher"
 
+[portal.integrations]
+addAnother = "Weitere hinzufügen"
+availableHeading = "Verfügbar"
+comingSoonHeading = "Demnächst"
+connect = "Verbinden"
+connectedHeading = "Verbunden"
+connectionCount_one = "{{count}} Verbindung"
+connectionCount_other = "{{count}} Verbindungen"
+customApi = "Benutzerdefinierte API"
+searchPlaceholder = "Integrationen suchen"
+subtitle = "Alles, womit Stirling kommunizieren kann. Anmeldedaten werden hier einmal erstellt und anschließend von Quellen, Richtlinien und Pipelines referenziert."
+title = "Integrationen"
+typedName = "Name von {{tool}}"
+
+[portal.integrations.filters]
+all = "Alle"
+audit = "Audit"
+connected = "Verbunden"
+notify = "Benachrichtigen"
+security = "Sicherheit"
+signing = "Signieren"
+storage = "Speicher"
+
+[portal.integrations.status]
+connected = "Verbunden"
+
+[portal.integrations.table]
+integration = "Integration"
+worksWith = "Funktioniert mit"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Richtlinien"
+sources = "Quellen"
+
+[portal.legal]
+draft = "{{label}} · Entwurf"
+loadError = "Dieses Dokument konnte nicht geladen werden. Bitte versuchen Sie es erneut."
+loading = "Wird geladen…"
+title = "Rechtsdokument"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponenten"
@@ -7219,6 +7770,7 @@ documents = "Dokumente"
 editor = "Editor"
 home = "Startseite"
 infrastructure = "Infrastruktur"
+integrations = "Integrationen"
 pipelines = "Pipelines"
 policies = "Richtlinien"
 procurement = "Beschaffung"
@@ -7227,25 +7779,9 @@ sources = "Quellen"
 usage = "Nutzung & Abrechnung"
 users = "Benutzer"
 
-[portal.notifications]
-markAllRead = "Alle als gelesen markieren"
-title = "Benachrichtigungen"
-viewAll = "Alle anzeigen"
-
-[portal.notifications.ariaLabel]
-none = "Benachrichtigungen, keine ungelesenen"
-unread_one = "Benachrichtigungen, {{count}} ungelesen"
-unread_other = "Benachrichtigungen, {{count}} ungelesen"
-
-[portal.notifications.count]
-allRead = "alle gelesen"
-loading = "wird geladen"
-new_one = "{{count}} neu"
-new_other = "{{count}} neu"
-
-[portal.notifications.empty]
-description = "Keine neuen Benachrichtigungen."
-title = "Sie sind auf dem neuesten Stand"
+[portal.nav.section]
+platform = "PDF-Plattform"
+processor = "PDF-Prozessor"
 
 [portal.pipelines]
 subtitle = "Jede automatisierte Dokument-Pipeline im Backend: eine geordnete Kette von Operationen über eine Reihe von Quellen, ausgeführt durch einen Trigger. Klicken Sie auf eine Zeile, um ihre Schritte und Quellen anzuzeigen."
@@ -7257,15 +7793,28 @@ newPipeline = "Neue Pipeline"
 [portal.pipelines.builder]
 addStep = "Tool hinzufügen"
 back = "Zurück zu Pipelines"
+cannotFollow = "Kann {{produced}} nicht übernehmen"
+chooseAccount = "Konto auswählen"
+chooseDestination = "Ziel auswählen"
+chooseOperation = "Auswählen, was dieser Schritt tut"
+chooseSource = "Quelle auswählen"
 discard = "Änderungen verwerfen"
 enabled = "Aktiviert"
+inputs = "Eingabe"
+inputSource = "Eingabequelle"
+inputTrigger = "Trigger"
 keepEditing = "Weiter bearbeiten"
+needsConfiguring = "Einrichtung erforderlich"
 needsUpload = "Benötigt eine hochgeladene Datei"
+noSources = "Noch keine Quellen verbunden. Erstellen Sie eine, um sie als Eingabe zu verwenden."
 noToolMatches = "Keine Tools entsprechen Ihrer Suche."
 pipelineSettings = "Pipeline-Einstellungen"
 searchTools = "Tools suchen"
 selectToolBody = "Fügen Sie ein Tool hinzu, um Ihre Pipeline zu erstellen."
 selectToolTitle = "Noch keine Tools"
+sendToSystem = "An ein anderes System senden"
+stepsIncompatible = "Diese Schritte können nicht mit dem ausgeführt werden, was der vorherige Schritt erzeugt: {{tools}}."
+stepsNeedSetup = "Diese Schritte müssen vor dem Speichern noch eingerichtet werden: {{tools}}."
 toolSettings = "Tool-Einstellungen"
 unknownStep = "Nicht erkannte Operation, unverändert beibehalten."
 unsavedBody = "Sie haben ungespeicherte Änderungen. Speichern Sie sie vor dem Verlassen oder verwerfen Sie sie?"
@@ -7273,19 +7822,24 @@ unsavedTitle = "Ungespeicherte Änderungen"
 uploadUnsupported = "Hochgeladene Dateien werden in Pipelines noch nicht unterstützt, daher können diese Schritte nicht gespeichert werden: {{tools}}."
 usesDefaults = "Läuft mit Standardeinstellungen"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombiniert jede Datei aus dem vorherigen Schritt"
+fan-out = "Wird einmal pro Datei aus dem vorherigen Schritt ausgeführt"
+format-mismatch = "Benötigt {{accepts}}, aber der vorherige Schritt erzeugt {{produced}}"
+output-uncertain = "Wird möglicherweise nicht ausgeführt: Die Ausgabe des vorherigen Schritts hängt davon ab, wie er eingerichtet ist"
+source-mismatch = "Benötigt {{accepts}}, aber die Eingabe dieser Pipeline ist {{produced}}"
+undeclared-operation = "Kann nicht prüfen, was dieser Schritt akzeptiert"
+
 [portal.pipelines.composer]
 addTool = "Tool hinzufügen"
 cancel = "Abbrechen"
 chainEmpty = "Fügen Sie ein Tool hinzu, um mit dem Erstellen Ihrer Pipeline zu beginnen."
 create = "Pipeline erstellen"
-directory = "Ausgabeordner"
-directoryHelp = "Absoluter Pfad auf dem Server. Muss innerhalb der konfigurierten erlaubten Ordner liegen."
 editingUnsupported = "Die Anzeige dieser Tool-Parameter zur Bearbeitung wird noch nicht unterstützt."
 moveDown = "Nach unten verschieben"
 moveUp = "Nach oben verschieben"
 name = "Name"
 namePlaceholder = "z. B. Schwärzungsprüfung"
-noSources = "Noch keine Quellen verbunden. Die Pipeline kann weiterhin auf Dateien ausgeführt werden, die ihr direkt bereitgestellt werden."
 noToolSettings = "Dieses Tool hat keine konfigurierbaren Einstellungen."
 operations_one = "Operation ({{count}})"
 operations_other = "Operationen ({{count}})"
@@ -7310,11 +7864,13 @@ confirm = "Löschen"
 title = "Pipeline löschen?"
 
 [portal.pipelines.detail]
+clearHistory = "Verlauf löschen"
 delete = "Pipeline löschen"
 run = "Jetzt ausführen"
 
 [portal.pipelines.empty]
 action = "Pipeline erstellen"
+connectSource = "Quelle verbinden"
 description = "Erstellen Sie Ihre erste Pipeline: Wählen Sie die Quellen aus, über die sie läuft, verketten Sie die Operationen und wählen Sie, wohin die Ausgabe geht."
 title = "Noch keine Pipelines"
 
@@ -7323,15 +7879,17 @@ active = "Aktiv"
 paused = "Pausiert"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "In Ordner schreiben"
-inline = "Dateien zurückgeben"
-
 [portal.pipelines.run]
+allProcessed_one = "Nichts auszuführen: Das {{count}} Dokument der Quelle wurde bereits verarbeitet."
+allProcessed_other = "Nichts auszuführen: Alle {{count}} Dokumente in den Quellen wurden bereits verarbeitet."
 completed_one = "Ausführung abgeschlossen."
 completed_other = "Alle {{count}} Ausführungen abgeschlossen."
 empty = "Nichts auszuführen: Die Quellen hatten keine zu verarbeitenden Dokumente."
 failed = "Ausführung fehlgeschlagen: {{error}}"
+historyCleared = "Verlauf gelöscht. Der nächste Lauf verarbeitet alles erneut, was sich derzeit in den Quellen befindet."
+inFlight = "Nichts Neues auszuführen: Dokumente werden noch aus einem früheren Lauf verarbeitet."
+parked_one = "Nichts auszuführen: {{count}} Dokument ist zuvor fehlgeschlagen und geparkt. Beheben Sie die Ursache und löschen Sie dann den Verlauf, um es erneut zu versuchen."
+parked_other = "Nichts auszuführen: {{count}} Dokumente sind zuvor fehlgeschlagen und geparkt. Beheben Sie die Ursache und löschen Sie dann den Verlauf, um sie erneut zu versuchen."
 running = "Ausführung gestartet; noch in Bearbeitung."
 timeout = "Die Ausführung dauert länger als erwartet; sie kann im Hintergrund noch abgeschlossen werden."
 
@@ -7351,12 +7909,18 @@ manual = "Manuell"
 schedule = "Geplant"
 
 [portal.policies]
+defaultName = "{{category}}-Richtlinie"
 subtitle = "Dauerhafte Automatisierungen, die eine Tool-Pipeline auf jedes Dokument anwenden. Jede Richtlinie wird beim Hochladen oder Exportieren ausgelöst, führt ihre Tool-Kette aus und speichert die erzwungene Version neben dem Original."
 title = "Richtlinien"
 
 [portal.policies.card]
 comingSoon = "Upgrade auf Enterprise"
 notSetUp = "Nicht eingerichtet"
+requiresAiEngine = "Erfordert AI-Engine"
+
+[portal.policies.categories.classification]
+desc = "Erkennt den Typ jedes Dokuments beim Hochladen und markiert seine Metadaten für Ablage und Suche."
+label = "Klassifizierung"
 
 [portal.policies.categories.compliance]
 desc = "Erzwingen Sie HIPAA-, GDPR-, SOC 2- oder FedRAMP-Anforderungen für jedes Dokument."
@@ -7381,6 +7945,13 @@ label = "Sicherheit"
 [portal.policies.config]
 scopeAll = "Alle Dokumente"
 
+[portal.policies.config.classification]
+summary = "Klassifiziert jedes hochgeladene Dokument anhand der Labels Ihres Teams und markiert seine Metadaten."
+
+[portal.policies.config.classification.rules]
+0 = "Klassifizieren"
+1 = "Metadaten markieren"
+
 [portal.policies.config.compliance]
 summary = "Validiert Dokumente anhand regulatorischer Frameworks, bevor sie das System verlassen."
 
@@ -7408,6 +7979,29 @@ minConfidence = "Min. Konfidenz"
 2 = "Benennen"
 3 = "Normalisieren"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview-Sensitivitätslabel anwenden"
+
+[portal.policies.config.purview.fields]
+connection = "Purview-Mandant"
+labelId = "Label-ID"
+labelIdHelp = "Die GUID des Labels aus dem Purview-Portal. Das Anwenden eines Labels schreibt seine Metadaten in die PDF; es kann nicht verschlüsseln, dafür ist der Microsoft-Client erforderlich."
+labelName = "Label-Name (optional)"
+labelNameHelp = "Wird neben der ID aufgezeichnet, damit Personen und Tools das Label erkennen können."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview unterscheidet ein von einer Richtlinie angewendetes Label von einem Label, das eine Person ausgewählt hat."
+label = "Wie das Label aufgezeichnet wird"
+privileged = "Als von einer Person ausgewählt"
+standard = "Als automatisch angewendet"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview-Label lesen"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview-Mandant"
+connectionHelp = "Liest das Label, das das Dokument bereits trägt, damit spätere Schritte darauf reagieren können."
+
 [portal.policies.config.retention]
 summary = "Erzwingt, wie lange Dokumente aufbewahrt werden, wann sie archiviert und wann sie gelöscht werden."
 
@@ -7475,6 +8069,7 @@ title = "Noch keine Aktivität"
 [portal.policies.endpoints]
 addWatermark = "Wasserzeichen"
 autoRedact = "PII schwärzen"
+classifyAndLabel = "Klassifizieren"
 compressPdf = "Komprimieren"
 flatten = "Reduzieren"
 ocrPdf = "OCR"
@@ -7485,6 +8080,183 @@ description = "Ihre Richtlinien sind gespeichert und werden angezeigt, sobald di
 retry = "Erneut versuchen"
 title = "Backend nicht verfügbar"
 
+[portal.policies.operations]
+change = "Ändern, was dieser Schritt tut"
+noResults = "Kein Schritt passt dazu. Versuchen Sie es mit einem Produktnamen oder mit \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Schritte suchen – versuchen Sie \"scan\", \"attach\" oder einen Produktnamen"
+
+[portal.policies.operations.bodyMode]
+binary = "Rohdaten der Datei"
+json = "In einer JSON-Payload"
+multipart = "Als Datei-Upload (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Ihr eigener ClamAV-Server prüft das Dokument; nichts verlässt Ihr Netzwerk."
+label = "Auf Viren scannen (selbst gehostet)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Lehnt Dokumente ab, die Makros, ausführbare Dateien, Skripte oder eingebettete Objekte enthalten."
+label = "Aktive Inhalte blockieren"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive prüft das Dokument, und der Lauf stoppt, wenn es nicht sauber ist."
+label = "Auf Viren scannen"
+
+[portal.policies.operations.confluenceAttach]
+description = "Legt das verarbeitete Dokument auf einer Seite ab."
+label = "An eine Confluence-Seite anhängen"
+
+[portal.policies.operations.consignoSubmit]
+description = "Übermittelt das Dokument zum Signieren an ConsignO Cloud."
+label = "Zur Signatur senden (ConsignO)"
+note = "Übermittelt das Dokument. Das Abrufen der signierten Kopie wird noch nicht unterstützt, da ein Schritt kein Ergebnis an einen späteren Schritt weitergeben kann."
+
+[portal.policies.operations.customApiCall]
+description = "Erstellen Sie den Aufruf selbst: Pfad, Methode, Body und Antwortverarbeitung."
+label = "Benutzerdefinierte API aufrufen"
+
+[portal.policies.operations.discordNotify]
+description = "Informiert einen Kanal, dass die Richtlinie ein Dokument verarbeitet hat."
+label = "Nachricht in Discord posten"
+
+[portal.policies.operations.elasticIndex]
+description = "Zeichnet auf, was die Richtlinie getan hat, als durchsuchbares Dokument."
+label = "Audit-Ereignis in Elasticsearch indexieren"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart eignet sich für Upload-APIs; JSON eignet sich für APIs, die die Datei in einer Payload erwarten; Binär sendet die Rohdaten."
+label = "So wird das Dokument gesendet"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Ein JSON-Body, der unverändert gesendet wird. {{document.base64}} enthält die Datei; {{document.*}} und {{run.*}} werden pro Dokument ausgefüllt."
+label = "JSON-Body"
+
+[portal.policies.operations.fields.connection]
+label = "Konto"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun-Domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Das Formularfeld, unter dem die API das Dokument erwartet."
+label = "Name des Dateifelds"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Von"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Ein JSON-Objekt mit Header-Namen/Wert-Paaren. Die Anmeldedaten der Verbindung werden für Sie hinzugefügt."
+label = "Header"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue-Schlüssel"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Wird als Nachrichtentext gesendet. {{document.*}} und {{run.*}} werden pro Dokument ausgefüllt."
+label = "Nachricht"
+
+[portal.policies.operations.fields.method]
+label = "Methode"
+
+[portal.policies.operations.fields.pageId]
+label = "Seiten-ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Wird an die Basis-URL der Verbindung angehängt. Er kann niemals einen anderen Host erreichen."
+label = "Pfad"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Wohin im Drive geschrieben werden soll. {{document.filename}} wird pro Dokument ausgefüllt."
+label = "Zielpfad"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Bericht lässt das Dokument unverändert. Ersetzen tauscht es gegen das aus, was zurückkommt."
+label = "Was mit der Antwort geschehen soll"
+
+[portal.policies.operations.fields.signerEmail]
+label = "E-Mail des Unterzeichners"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Betreff"
+placeholder = "Verarbeitet: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analysiert diesen Text. Verwenden Sie {{document.title}} oder fügen Sie den Text ein, den Sie prüfen möchten."
+label = "Zu prüfender Text"
+
+[portal.policies.operations.fields.to]
+label = "An"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud-Benutzername"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informiert einen Space, dass die Richtlinie ein Dokument verarbeitet hat."
+label = "Nachricht in Google Chat posten"
+
+[portal.policies.operations.jiraAttach]
+description = "Legt das verarbeitete Dokument in einem Issue ab."
+label = "An einen Jira-Issue anhängen"
+
+[portal.policies.operations.mailgunEmail]
+description = "Sendet das verarbeitete Dokument als Anhang."
+label = "Dokument per E-Mail senden (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Schreibt das verarbeitete Dokument in einen Ordner."
+label = "In Nextcloud hochladen"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Ihr eigener Presidio-Server meldet die personenbezogenen Daten, die er findet."
+label = "Personenbezogene Daten erkennen"
+note = "Presidio liest Text, keine Dateien. Geben Sie den Text an, den Sie prüfen möchten — das Dokument selbst wird nicht hochgeladen."
+
+[portal.policies.operations.responseMode]
+replace = "Dokument durch die Antwort ersetzen"
+report = "Dokument behalten, Antwort aufzeichnen"
+
+[portal.policies.operations.sendgridEmail]
+description = "Sendet das verarbeitete Dokument als Anhang."
+label = "Dokument per E-Mail senden (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informiert einen Kanal, dass die Richtlinie ein Dokument verarbeitet hat."
+label = "Nachricht in Slack posten"
+
+[portal.policies.operations.splunkEvent]
+description = "Zeichnet auf, was die Richtlinie getan hat, dort, wo Ihre Auditoren bereits nachsehen."
+label = "Audit-Ereignis an Splunk senden"
+
+[portal.policies.operations.sumologicEvent]
+description = "Zeichnet auf, was die Richtlinie getan hat, an einen HTTP-Collector."
+label = "Audit-Ereignis an Sumo Logic senden"
+
+[portal.policies.operations.teamsNotify]
+description = "Informiert einen Kanal, dass die Richtlinie ein Dokument verarbeitet hat."
+label = "Nachricht in Teams posten"
+
+[portal.policies.operations.webhookPost]
+description = "Sendet das Dokument selbst an eine URL Ihrer Wahl."
+label = "Dokument an einen Webhook posten"
+
+[portal.policies.operations.zapierNotify]
+description = "Übergibt die Details des Laufs an Ihre Automatisierung."
+label = "Zap oder Make-Szenario auslösen"
+
 [portal.policies.stats]
 activeFor = "Aktiv"
 dataProcessed = "Verarbeitete Daten"
@@ -7510,6 +8282,13 @@ label = "Dokumente erzwungen"
 description = "Konfiguriert, aber nicht aktiv"
 label = "Pausiert"
 
+[portal.policies.table]
+appliesTo = "Gilt für"
+docs = "Durchgesetzte Dokumente"
+enforces = "Setzt durch"
+policy = "Richtlinie"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Zurück"
 cancel = "Abbrechen"
@@ -7517,6 +8296,10 @@ continue = "Weiter"
 enablePolicy = "Richtlinie aktivieren"
 saveChanges = "Änderungen speichern"
 
+[portal.policies.wizard.capability.classify]
+desc = "Erkennt den Dokumenttyp anhand der Labels Ihres Teams und markiert ihn, damit Ablage und Suche nach Kategorie erfolgen."
+label = "Dokument klassifizieren"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimiert das Dokument auf eine kleinere Dateigröße."
 label = "Dateigröße reduzieren"
@@ -7537,10 +8320,18 @@ label = "Vertrauliche Informationen schwärzen"
 desc = "Entfernt verstecktes JavaScript, damit beim Öffnen des Dokuments nichts automatisch ausgeführt werden kann."
 label = "Aktive Inhalte entfernen"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Beweist mithilfe einer unabhängigen Zeitstempelstelle, dass das Dokument zu einem bestimmten Zeitpunkt in genau dieser Form existierte. Es wird nur ein Hash gesendet – das Dokument verlässt niemals Ihren Server."
+label = "Vertrauenswürdigen Zeitstempel hinzufügen"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Stempelt eine sichtbare Markierung (z. B. „Vertraulich“) auf jede Seite."
 label = "Wasserzeichen anwenden"
 
+[portal.policies.wizard.classification]
+description = "Jedes hochgeladene Dokument wird anhand der integrierten Labels klassifiziert und mit den passenden Typen markiert. Der Label-Satz wird in Ihrem gesamten Team geteilt."
+labelsHeading = "Klassifizierungslabels"
+
 [portal.policies.wizard.errors]
 noTools = "Aktivieren Sie zuerst mindestens ein Tool im Workflow."
 saveFailed = "Die Richtlinie konnte nicht gespeichert werden. Bitte versuchen Sie es erneut."
@@ -7585,73 +8376,118 @@ setUp = "{{category}}-Richtlinie einrichten"
 [portal.policies.wizard.workflow]
 description = "Wählen Sie aus, was diese Richtlinie mit jedem Dokument macht, das sie verarbeitet."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktiv"
-noRule = "Noch keine Regel erzwungen"
-subtitle = "Ständige Automatisierungen, die jedes Dokument durchläuft, unabhängig davon, welche Pipeline es verarbeitet."
-title = "Was für Ihre PDFs ausgeführt wird"
-
 [portal.policySummary.action]
-comingSoon = "Auf Enterprise upgraden"
-configure = "Konfigurieren"
 setUp = "Einrichten"
 
-[portal.policySummary.column]
-activeRule = "Aktive Regel"
-policy = "Richtlinie"
-status = "Status"
+[portal.processorFlow]
+footnote = "Zählungen beziehen sich auf die letzten 24 Stunden. Die Flussgeschwindigkeit dient der Veranschaulichung."
+liveBadge = "Live"
+stats = "{{connected}} verbunden · {{processed}} PDFs verarbeitet"
+title = "PDF-Prozessor"
 
-[portal.policySummary.empty]
-description = "Sobald Richtlinien konfiguriert sind, erscheinen die Kategorien hier."
-title = "Noch keine Richtlinien"
+[portal.processorFlow.lens]
+ariaLabel = "Ansichtsmodus"
+flow = "Fluss"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktiv"
-off = "Aus"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Fehlgeschlagen"
+heading = "Ergebnisse"
+success = "Ausgeliefert"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktiv"
+count = "{{n}} · 24 h"
+heading = "Richtlinien"
+setUp = "Einrichten"
 soon = "Bald"
 
-[portal.processingStatus]
-managePlan = "Plan verwalten"
-volumeSuffix = "Verarbeitete PDFs · letzte 30 Tage"
+[portal.processorFlow.sankey]
+waist = "Richtlinien · {{n}} aktiv"
+
+[portal.processorFlow.sankey.empty]
+description = "Verbinden Sie eine Quelle und schalten Sie eine Richtlinie ein, um zu sehen, wie Dokumente durch den Prozessor fließen."
+title = "Noch kein Fluss"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Verbinden"
+editor = "Stirling PDF Editor"
+heading = "Quellen"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "E-Mail-Eingang"
 
 [portal.procurement]
-reset = "Beschaffung zurücksetzen (Demo)"
 subtitle = "Lassen Sie Ihr Team evaluieren, vertraglich binden und einrichten. Jedes Dokument an einem Ort."
 title = "Beschaffung"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Jetzt bezahlen"
-request = "Anfordern"
-sign = "Prüfen & unterschreiben"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Zustimmen & abonnieren"
+confidential = "Vertraulich"
 confirm = "Ich habe die Stirling Enterprise Agreement gelesen und stimme ihr zu."
-eyebrow = "Vereinbarung"
-intro = "Eine kombinierte Vereinbarung deckt Ihren Deal ab: Master Service Agreement, Bestellformular, EULA und Data Processing Agreement. Prüfen Sie sie und stimmen Sie dann zu, um das Angebot als verbindliches Abonnement anzunehmen."
-title = "Ihre Enterprise-Vereinbarung prüfen"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Bestellformular, EULA und DPA, zusammengefasst in einer Signatur."
+download = "Herunterladen"
+downloadDraftError = "Die Vereinbarungs-PDF konnte nicht erstellt werden – der Dokument-Renderer ist nicht verfügbar. Bitte versuchen Sie es in Kürze erneut oder kontaktieren Sie den Support."
+downloadError = "Die signierte Vereinbarung konnte nicht heruntergeladen werden. Bitte versuchen Sie es erneut."
+legalName = "Name der juristischen Person"
+legalNamePlaceholder = "Die juristische Person, die unterschreiben wird"
+loadError = "Die Vereinbarung konnte nicht geladen werden. Bitte versuchen Sie es erneut."
+loading = "Vereinbarung wird geladen..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Änderungen anfordern"
+scrollHint = "Zum Prüfen scrollen"
+signatory = "Name des Unterzeichners"
+signatoryPlaceholder = "Vollständiger Name"
+signatoryTitle = "Titel des Unterzeichners"
+signatoryTitlePlaceholder = "z. B. General Counsel"
+signError = "Ihre Signatur konnte nicht erfasst werden. Bitte versuchen Sie es erneut."
 
 [portal.procurement.builder]
 addons = "Add-ons"
+addressLine1 = "Adresszeile 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresszeile 2"
+addressLine2Placeholder = "Suite, Etage, Gebäude"
 back = "Zurück"
 businessName = "Unternehmensname"
 businessNamePlaceholder = "Ihr Unternehmen"
+city = "Stadt"
+cityPlaceholder = "San Francisco"
+completeRequired = "Bitte füllen Sie die Pflichtfelder (mit * markiert) mit einer gültigen E-Mail-Adresse aus, bevor Sie das Angebot erstellen."
+contactEmail = "Kontakt-E-Mail"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kontaktname"
+contactNamePlaceholder = "Jane Doe"
 continue = "Weiter"
-country = "Land"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "Vereinigtes Königreich (GBP £)"
-countryUS = "Vereinigte Staaten (USD $)"
+done = "Fertig"
 eula = "Ich habe die Stirling Enterprise EULA gelesen und stimme ihr zu. Sie regelt die Vereinbarung, die aus diesem Angebot generiert wird."
 generate = "Angebot erstellen"
-included = "Enthalten"
 indemnification = "IP-Freistellung"
 indemnificationSub = "Wir verteidigen qualifizierende IP-Ansprüche gemäß der EULA"
-offlineLicense = "Offline-/Air-Gapped-Lizenz"
-offlineLicenseSub = "Eine herunterladbare Lizenzdatei für eine air-gapped, selbst gehostete Instanz"
+paperEyebrow = "Enterprise-Angebot"
+paperFor = "Erstellt für"
+pdfSize = "PDF-Größe"
+poNumber = "Bestellnummer"
+poNumberPlaceholder = "Optional"
+postalCode = "Postleitzahl"
+postalCodePlaceholder = "94105"
+posture = "Governance"
+posture_count = "~{{count}} Richtlinien"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Klassifizierung + Freigabe — die Standardwerte"
+posture_governed = "Governed"
+posture_governedSub = "Fügt Sicherheit und Routing hinzu"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Jede Kategorie — Compliance, Aufbewahrung, Ingestion"
 qbr = "Quartalsweise Geschäftsbesprechungen"
 qbrSub = "Ihr SE prüft Nutzung und Roadmap jedes Quartal"
+region = "Bundesland / Region"
+regionPlaceholder = "Kalifornien"
 running = "{{annual}} / Jahr · {{years}} Jahre {{tcv}}"
 s1Sub = "Ihr Team und die PDFs, die Sie voraussichtlich jedes Jahr verarbeiten."
 s1Title = "Wie viel werden Sie verarbeiten?"
@@ -7660,6 +8496,12 @@ s2Title = "Verpflichtung und Service"
 s3Sub = "Für das Angebot und die Vereinbarung, die daraus generiert wird."
 s3Title = "Ihre Angaben"
 serviceLevel = "Service-Level"
+size_compact = "Kompakt"
+size_compactSub = "Hauptsächlich Text, unter 1 MB"
+size_heavy = "Schwer"
+size_heavySub = "Gescannt oder bildlastig, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Gemischter Text und Bilder, 1 bis 5 MB"
 slDedicated = "Dediziert"
 slDedicatedSub = "4 Geschäftsstunden · dedizierter Account-Manager · +30 %"
 slPriority = "Priority"
@@ -7667,6 +8509,8 @@ slPrioritySub = "Gleicher Geschäftstag · benannter CSM · +15 %"
 slStandard = "Standard"
 slStandardSub = "Nächster Geschäftstag · geteilter CSM · enthalten"
 stepOf = "Schritt {{n}} von {{total}}"
+taxId = "USt-IdNr. / Steuernummer"
+taxIdPlaceholder = "Optional"
 term = "Laufzeit"
 termDiscount = "{{pct}} % Rabatt für mehrjährige Verpflichtung angewendet"
 title = "Ihr Angebot erstellen"
@@ -7674,6 +8518,7 @@ training = "Onboarding & Schulung"
 trainingSub = "Live-Sitzungen, damit Ihr Team starten kann"
 users = "Benutzer insgesamt"
 usersPlaceholder = "z. B. 250"
+viewEula = "Lesen"
 volEstimated = "Geschätzt anhand von {{count}} Benutzern (~2.000 PDFs pro Person, einschließlich Automatisierung). Bearbeiten Sie dies, wenn Sie es genauer wissen."
 volManual = "Ihre Angabe wird verwendet. Sie können jederzeit anhand Ihrer Teamgröße neu schätzen."
 volNoUsers = "Nicht sicher? Geben Sie Ihre Teamgröße ein, und wir schätzen sie."
@@ -7682,55 +8527,55 @@ volumePlaceholder = "z. B. 1.000.000"
 years_one = "{{count}} Jahr"
 years_other = "{{count}} Jahre"
 
-[portal.procurement.docs]
-count_one = "{{count}} Dokument"
-count_other = "{{count}} Dokumente"
-done = "Erledigt"
-here = "Sie sind hier"
-hide = "Ausblenden"
-optional = "Optional"
-paidAddon = "Kostenpflichtiges Add-on"
-show = "Anzeigen"
-subtitle = "Alles, was Sie in jedem Schritt benötigen, erscheint passend zum Fortschritt des Deals."
-supportingSubtitle = "SOC 2, Sicherheitsprüfungen, Steuerformulare und mehr, bereit, wenn Ihr Sicherheits- oder Beschaffungsteam danach fragt. Einige sind mit einer einmaligen Gebühr verbunden."
-supportingTitle = "Unterstützung Ihrer Evaluation"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Bestellformular und DPA in einer Signatur."
+download = "Herunterladen"
+eula = "EULA & Commercial Terms"
+eulaSub = "Die Software- und Self-Service-Geschäftsbedingungen."
+invoice = "Rechnung"
+invoiceSub = "Ihre erste Abonnementrechnung."
+laterInvoice = "Verfügbar, nachdem Sie akzeptiert haben"
+laterQuote = "Verfügbar, sobald Ihr Angebot ausgestellt wurde"
+quote = "Angebot"
+quoteSub = "Ihr aufgeschlüsseltes Enterprise-Angebot."
+sla = "SLA-Anlage"
+slaSub = "Supportstufen und Reaktionsziele."
+subprocessors = "Unterauftragsverarbeiter"
+subprocessorsSub = "Dritte, die Daten in Ihrem Auftrag verarbeiten."
+subtitle = "Ihre Vertragsunterlagen, jederzeit verfügbar."
 title = "Dokumente"
-upcoming = "Bevorstehend"
+view = "Anzeigen"
 
 [portal.procurement.error]
 title = "Etwas ist schiefgelaufen"
 
 [portal.procurement.hero]
-company = "Ihr Enterprise-Deal"
+barAria = "Phase {{current}} von {{total}}"
 ctaAgreement = "Vereinbarung prüfen & unterschreiben"
-ctaLive = "Sie sind live"
-ctaPayment = "Zahlung hinzufügen"
+ctaExploring = "Testversion einrichten"
 ctaQuote = "Ihr Angebot prüfen"
+ctaReviewQuote = "Angebot prüfen"
 ctaTrial = "Ihr Angebot erstellen"
+documents = "Dokumente"
 eyebrow = "Enterprise-Beschaffung"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Teammitglieder einladen"
-keyDocs = "Wichtige Dokumente"
-nextStep = "Nächster Schritt: {{action}}"
-notStarted = "Nicht gestartet"
+licenseKey = "Lizenzschlüssel"
+liveSub = "Ihre Organisation ist bereitgestellt und Ihre Lizenz ist aktiv."
+liveTitle = "Sie sind live auf Stirling Enterprise"
+next = "Weiter: {{stage}}"
 open = "Beschaffung öffnen"
 scheduleCall = "Anruf planen"
-setup1Sub = "Laden Sie Ihre Teammitglieder ein"
-setup1Title = "PDF Editor bereitstellen"
-setup2Sub = "Aktivieren Sie die Verarbeitung über Editoren und andere Quellen hinweg"
-setup2Title = "PDF Processor verbinden"
-setup3Sub = "Aktivieren Sie Sicherheit, Compliance, Routing oder Aufbewahrung, wenn Sie sie benötigen"
-setup3Title = "Empfohlene Richtlinien hinzufügen"
+sentenceAgreement = "die Vereinbarung prüfen und unterschreiben"
+sentenceLive = "Bereitstellung und Rollout"
+sentencePayment = "Bestellung und Zahlung"
+sentenceQuote = "Ihr Angebot prüfen und akzeptieren"
+sentenceTrial = "Ihren Test-Workspace einrichten"
 
 [portal.procurement.journey]
 daysLeft_one = "Noch {{count}} Tag"
 daysLeft_other = "Noch {{count}} Tage"
-engineerLabel = "Ihr Solutions Engineer"
-eyebrow = "Ihr Rollout"
-live = "Sie sind live auf Stirling Enterprise"
-nextStep = "Nächster Schritt: {{action}}"
-subtitle = "Ihr Solutions Engineer ist bei jedem Schritt dabei. Immer nur die nächste Aktion; die vollständige Checkliste finden Sie unten."
-title = "Vom Test bis zum Live-Betrieb, ein geführter Weg"
-trialTitle = "Enterprise-Testversion"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Eine Unterschrift deckt MSA, Bestellformular, EULA und DPA ab."
@@ -7764,6 +8609,9 @@ downloadError = "Die Offline-Lizenzdatei konnte noch nicht generiert werden —
 downloadOffline = "Offline-Lizenz herunterladen (.lic)"
 hint = "Fügen Sie diesen Schlüssel in eine selbst gehostete Instanz ein, um sie zu aktivieren, oder bewahren Sie ihn für Ihre Unterlagen auf. Bewahren Sie ihn sicher auf."
 label = "Ihr Lizenzschlüssel"
+subtitle = "Aktivieren Sie mit diesem Schlüssel eine selbst gehostete Instanz oder bewahren Sie ihn für Ihre Unterlagen auf."
+title = "Ihr Lizenzschlüssel"
+trialFileHint = "Dies ist Ihre Testlizenzdatei. Sobald Ihre Vereinbarung abgeschlossen ist, kommen Sie zurück und laden Sie sie erneut herunter — im Gegensatz zum Online-Lizenzschlüssel aktualisiert sich die .lic-Datei nicht von selbst."
 
 [portal.procurement.link]
 cta = "Konto verknüpfen"
@@ -7776,65 +8624,62 @@ description = "Ihr Abonnement ist aktiv und Ihre Lizenz wurde ausgestellt. Ihr T
 eyebrow = "Live"
 title = "Sie sind live auf Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Testschlüssel, Angebote mit verbindlichem Volumen, die Ein-Signatur-Vereinbarung, Zahlung und Ihr Dokumentenregister befinden sich alle hier, sobald Sie eine Enterprise-Evaluation starten."
-eyebrow = "Nur Enterprise"
-talkToSales = "Mit Vertrieb sprechen"
-title = "Der Beschaffungspfad öffnet sich mit Enterprise"
-
 [portal.procurement.milestone]
-accept = "Akzeptieren & fortfahren"
-description = "Laden Sie das PDF herunter, um es mit Ihrem Team zu teilen, kommen Sie zurück, um es zu akzeptieren, wenn Sie bereit sind, oder nehmen Sie Änderungen vor."
-download = "PDF herunterladen"
 downloadError = "Das Angebots-PDF konnte noch nicht heruntergeladen werden — bitte versuchen Sie es gleich erneut."
-edit = "Angebot bearbeiten"
-eyebrow = "Angebot {{number}}"
-perYear = " / Jahr"
-preparedFor = "Erstellt für {{company}}"
-tcv = "{{value}} Gesamtvertragswert"
-title = "Ihr Angebot ist bereit"
-
-[portal.procurement.modal]
-cancel = "Abbrechen"
-chooseFile = "Datei auswählen"
-close = "Schließen"
-downloadBody = "Ihr Download beginnt in Kürze."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "Keine Datei ausgewählt"
-payBody = "Bezahlen Sie Ihren verbindlichen Vertrag per Karte oder Banküberweisung über Stripe. Ihr Workspace wird bereitgestellt, sobald die Zahlung eingegangen ist."
-payCta = "Weiter zu Stripe"
-payTitle = "Zahlung bestätigen"
-requestBodyFree = "Wir generieren dies auf Anfrage. Bestätigen Sie, und Ihr Solutions Engineer sendet es Ihnen in Kürze zu."
-requestBodyPaid = "Dies ist ein kostenpflichtiges Add-on. Bestätigen Sie, und Ihr Solutions Engineer wird den Umfang festlegen und die Unterlagen senden."
-requestCta = "Anfordern"
-requestTitle = "Dieses Dokument anfordern"
-signBody = "Öffnet die Stirling Enterprise Agreement zur elektronischen Signatur: Eine Unterschrift deckt MSA, Bestellformular, EULA und DPA ab. Wir gegenzeichnen automatisch, und Sie fahren mit der Zahlung fort."
-signCta = "Zur Unterschrift öffnen"
-signTitle = "Ihre Vereinbarung prüfen und unterschreiben"
-uploadBody = "Senden Sie uns Ihre Bestellung, und wir stellen sie Ihnen zu Ihren Bedingungen in Rechnung. Ziehen Sie das PDF hinein oder wählen Sie unten eine Datei aus."
-uploadCta = "Bestellung hochladen"
-uploadTitle = "Ihre Bestellung hochladen"
 
 [portal.procurement.payment]
 description = "Ihr Angebot wurde akzeptiert und Ihre Lizenz ist bereits aktiv — Ihr Team kann sofort starten. Bezahlen Sie die erste Rechnung, wenn Sie bereit sind; Sie können sie hier bezahlen oder herunterladen, keine E-Mail erforderlich."
+downloadAgreement = "Signierte Vereinbarung herunterladen"
 downloadInvoice = "Rechnung herunterladen"
-simulate = "Zahlungseingang simulieren (Demo)"
+eyebrow = "Zahlung"
 title = "Abonnement erstellt"
 viewInvoice = "Rechnung anzeigen & bezahlen"
 
+[portal.procurement.review]
+acceptCta = "Angebot akzeptieren"
+annual = "Jahresgebühr (Jahr 1)"
+downloadCta = "Angebot herunterladen"
+poNumber = "Bestellung: {{po}}"
+renewal = "Verlängert sich nach der Laufzeit zu {{amount}}/Jahr (+{{pct}} % VPI)"
+tcv = "{{years}}-Jahres-Laufzeit, vollständig im Voraus bezahlt: {{tcv}}"
+validUntil = "Gültig bis {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Der Planer konnte nicht geladen werden."
 fallbackLink = "Terminplanung in einem neuen Tab öffnen"
+loading = "Planer wird geladen..."
 subtitle = "Ihr Solutions Engineer führt Ihr Team durch den Rollout. Wählen Sie eine passende Zeit aus."
 title = "Anruf planen"
 
-[portal.procurement.status]
-action = "Aktion erforderlich"
-available = "Verfügbar"
-complete = "Abgeschlossen"
-pending = "Ausstehend"
-request = "Auf Anfrage"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Abgeschlossen, keine ausgehenden Verbindungen"
+back = "Zurück"
+businessName = "Firmenname"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Verwaltet, schnellster Start"
+continue = "Weiter"
+deployment = "Wo soll es bereitgestellt werden?"
+eula = "Ich stimme der Stirling EULA & Commercial Terms zu."
+fullName = "Vollständiger Name"
+fullNamePlaceholder = "Ihr Name"
+invites = "Teammitglieder einladen · optional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Anruf planen"
+seats = "Testende Personen"
+seatsPlaceholder = "z. B. 15"
+selfhost = "Selbst gehostet"
+selfhostSub = "Docker oder Kubernetes"
+start = "Testversion starten"
+stepOf = "Schritt {{n}} von {{total}}"
+subtitle = "14 Tage kostenlos, keine Karte erforderlich."
+subtitleDetails = "Ein paar Details für Ihr Angebot und Ihre Vereinbarung."
+talkFirst = "Möchten Sie lieber zuerst sprechen?"
+title = "Testversion einrichten"
+viewEula = "Lesen"
+workEmail = "Geschäftliche E-Mail"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Durch Verlängern werden 7 Tage hinzugefügt und Ihr Solutions Engineer wird benachrichtigt."
@@ -7845,20 +8690,6 @@ maxed = "Ausgeschöpft"
 subtitle = "Ihre kostenlose Testversion läuft bis {{date}}. Keine Karte erforderlich."
 title = "Enterprise-Testversion"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Preise für verbindliches Volumen, organisationsweites SSO + SCIM + RBAC, 90 Tage unveränderliches Audit und ein dedizierter SE."
-homeCta = "Testversion starten →"
-homeHeadline = "Verarbeiten Sie Millionen von PDFs."
-
-[portal.recentActivity]
-title = "Letzte Aktivität"
-viewAll = "Alle anzeigen"
-
-[portal.recentActivity.empty]
-description = "Pipeline-Läufe, Deployments und Agent-Ereignisse werden hier angezeigt."
-title = "Hier ist noch nichts"
-
 [portal.search]
 ariaLabel = "Suchen"
 placeholder = "Stirling durchsuchen — Endpoints, Pipelines, Dokumente…"
@@ -7875,58 +8706,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Kontoverknüpfung"
 
-[portal.shell.header]
-accountFallback = "Konto"
-accountMenu = "Kontomenü"
-darkMode = "Dunkelmodus"
-lightMode = "Hellmodus"
-search = "Suchen"
-searchPlaceholder = "Suchen…"
-signOut = "Abmelden"
-switchToDark = "Zum dunklen Theme wechseln"
-switchToLight = "Zum hellen Theme wechseln"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} Dokumente"
 linkAccount = "Stirling-Konto verknüpfen"
-planEditor = "Editor-Plan"
-planEnterprise = "Enterprise-Plan"
-planProcessor = "Processor-Plan"
 primaryNav = "Primäre Navigation"
 switchApp = "App wechseln"
 
+[portal.shell.topbar]
+closeNav = "Navigation schließen"
+openNav = "Navigation öffnen"
+search = "Suchen"
+
 [portal.sources]
 subtitle = "Wiederverwendbare Eingabeverbindungen, die Dokumente in Stirling einspeisen. Konfigurieren Sie eine Verbindung einmal und referenzieren Sie sie dann in beliebig vielen Richtlinien. Klicken Sie auf eine Zeile, um ihre Konfiguration und die Richtlinien anzuzeigen, die sie verwenden."
 title = "Quellen"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Quelle verbinden"
 
+[portal.sources.builder]
+back = "Zurück zu Quellen"
+backToTypes = "Alle Quellentypen"
+cancel = "Abbrechen"
+chooseHint = "Wählen Sie aus, woher Dokumente kommen. Ausgegraute Connectors sind in Vorbereitung."
+comingSoon = "Demnächst"
+comingSoonHeading = "Demnächst"
+create = "Quelle erstellen"
+createTitle = "Quelle verbinden"
+delete = "Löschen"
+editTitle = "Quelle bearbeiten"
+enabled = "Aktiviert"
+save = "Änderungen speichern"
+
+[portal.sources.builder.folderAccess]
+description = "Ordnerautomatisierungen können nur Ordner verwenden, die ein Administrator zugelassen hat. Fügen Sie ihn in den Einstellungen für Ordnerzugriff hinzu und versuchen Sie es dann erneut."
+openSettings = "Einstellungen für Ordnerzugriff"
+title = "Dieser Ordner ist nicht erlaubt"
+
 [portal.sources.delete]
 body = "„{{name}}“ löschen? Dies kann nicht rückgängig gemacht werden. Richtlinien, die sie referenzieren, müssten aktualisiert werden."
 cancel = "Abbrechen"
 confirm = "Löschen"
 title = "Quelle löschen?"
 
-[portal.sources.detail]
-closeAriaLabel = "Details schließen"
-delete = "Quelle löschen"
-docs24h = "Letzte 24 Std."
-docs30d = "Letzte 30 Tage"
-docsTotal = "Insgesamt gesehen"
-docsTrend = "Dokumente in den letzten 30 Tagen"
-documents = "Dokumente"
-edit = "Bearbeiten"
-notReferenced = "Von keiner Richtlinie referenziert, daher kann sie sicher gelöscht werden."
-pause = "Pausieren"
-resume = "Fortsetzen"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Verwendet von"
-
 [portal.sources.empty]
 description = "Verbinden Sie einen Ordner (und bald Cloud-Speicher), damit Ihre Richtlinien einen Ort haben, von dem sie Dokumente abrufen können."
 title = "Noch keine Quellen verbunden"
@@ -7936,18 +8759,57 @@ inUse = "In Verwendung"
 total = "Verbindungen"
 unused = "Unbenutzt"
 
+[portal.sources.networkFields.connection]
+helperText = "Die gespeicherte Verbindung mit Serveradresse und Anmeldedaten. Wird von jeder Quelle wiederverwendet, die sie referenziert."
+label = "Verbindung"
+
+[portal.sources.networkFields.directory]
+helperText = "Ordner auf dem Server, der abgefragt werden soll, relativ zum Login-Home oder zum Stamm der Freigabe. Für den Stamm leer lassen."
+label = "Ordner"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Verbrauchen entfernt jede Datei vom Server, sobald jede Richtlinie sie verarbeitet hat."
+label = "Lesemodus"
+
+[portal.sources.networkFields.mode.options]
+consume = "Verbrauchen: Jede Datei einmal verarbeiten"
+snapshot = "Snapshot: Ordner bei jedem Lauf erneut lesen"
+
+[portal.sources.networkFields.recursive]
+label = "Ordnertiefe"
+
+[portal.sources.networkFields.recursive.options]
+all = "Unterordner einschließen"
+top = "Nur oberste Ebene"
+
 [portal.sources.status]
 active = "Aktiv"
 disabled = "Deaktiviert"
 unused = "Unbenutzt"
 
 [portal.sources.table]
+documents = "Dokumente"
 source = "Quelle"
 status = "Status"
 usedBy = "Richtlinien"
 
+[portal.sources.types.box]
+description = "Dokumente aus Box-Ordnern abrufen, die Ihr Team bereits teilt."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Dokumente aus einem freigegebenen Dropbox-Ordner abrufen."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumente, die Ihr Team im Editor verarbeitet hat, über Richtlinien- und AI-Läufe hinweg."
 label = "Editor"
+noPolicies = "Noch keine Richtlinien aus dem Editor ausgeführt."
+
+[portal.sources.types.email]
+description = "Anhänge, die an ein dediziertes Postfach gesendet werden, in Dokumente umwandeln."
+label = "E-Mail-Posteingang"
 
 [portal.sources.types.folder]
 description = "Überwacht ein Verzeichnis auf dem Server auf neue Dokumente."
@@ -7980,25 +8842,80 @@ label = "Ordnertiefe"
 all = "Unterordner einschließen"
 top = "Nur oberste Ebene"
 
+[portal.sources.types.ftp]
+description = "Einen FTP- oder FTPS-Serverordner auf neue Dokumente abfragen."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Dokumente aus freigegebenen Google Drive-Ordnern abrufen."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Eine SMB-Netzwerkfreigabe auf neue Dokumente überwachen."
+label = "Netzlaufwerk"
+
+[portal.sources.types.onedrive]
+description = "OneDrive-Ordner auf neue Dokumente überwachen."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Dokumente aus einem Amazon S3- oder S3-kompatiblen Bucket abrufen."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Die gespeicherte Verbindung mit Bucket und Anmeldedaten. Wird von jeder Quelle und Pipeline-Ausgabe wiederverwendet, die sie referenziert."
+label = "Verbindung"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Verbrauchen entfernt jedes Objekt aus dem Bucket, sobald jede Richtlinie es verarbeitet hat."
+label = "Lesemodus"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Verbrauchen: Jedes Objekt einmal verarbeiten"
+snapshot = "Snapshot: Bucket bei jedem Lauf erneut lesen"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Nur Objekte, deren Schlüssel mit diesem Präfix beginnen, werden verarbeitet."
+label = "Schlüsselpräfix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Einen SFTP-Drop-Ordner auf neue Dokumente abfragen."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Dokumente aus SharePoint-Dokumentbibliotheken abrufen."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Quelle"
 
+[portal.sources.types.webhook]
+createNote = "Eine Zustell-URL und ein Signaturgeheimnis werden generiert, wenn Sie diesen Webhook erstellen. Absender senden Dokumente per POST an diese URL, und die referenzierenden Richtlinien werden bei Ankunft ausgeführt."
+description = "Dokumente per signiertem HTTP POST von einem beliebigen externen System empfangen."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Zustell-URL"
+secretNote = "Das Signaturgeheimnis wird einmal angezeigt, wenn der Webhook erstellt wird. Erstellen Sie die Quelle neu, um es zu rotieren."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopieren"
+done = "Fertig"
+secret = "Signaturgeheimnis"
+secretHelp = "Signieren Sie den Roh-Body jeder Zustellung mit diesem Schlüssel (HMAC-SHA256) und senden Sie ihn als X-Stirling-Signature-Header."
+secretWarning = "Kopieren Sie das Signaturgeheimnis jetzt. Zu Ihrer Sicherheit wird es nur einmal angezeigt und kann später nicht abgerufen werden."
+title = "Webhook erstellt"
+url = "Zustell-URL"
+usage = "Senden Sie jedes Dokument per POST als rohen Request-Body an die Zustell-URL mit einem binären Content-Type (application/pdf oder application/octet-stream). Referenzierende Richtlinien werden bei Ankunft automatisch ausgeführt."
+
 [portal.sources.wizard]
-back = "Zurück"
-cancel = "Abbrechen"
-continue = "Weiter"
-editTitle = "Quelle bearbeiten"
 name = "Name"
 namePlaceholder = "z. B. Schadenaufnahme"
-save = "Änderungen speichern"
-subtitle = "Schritt {{current}} von {{total}} · {{label}}"
-title = "Quelle verbinden"
 type = "Typ"
 
-[portal.sources.wizard.steps]
-chooseType = "Typ auswählen"
-configure = "Konfigurieren"
-review = "Prüfen & verbinden"
+[portal.stepModal]
+close = "Schließen"
 
 [portal.usage]
 managePayment = "Zahlung verwalten"
@@ -8058,16 +8975,9 @@ summary = "Besitzt ein Team — verwaltet die Ressourcen seiner Mitglieder und f
 2 = "Portalzugriff über die Standardrichtlinie"
 3 = "Alles, was Member tun kann"
 
-[portal.welcome]
-ariaLabel = "Willkommen bei Stirling PDF"
-badge = "Open-source"
-installEditor = "Editor installieren"
-inviteTeammates = "Teammitglieder einladen"
-openInBrowser = "Im Browser öffnen"
-perks = "Für immer kostenlos · Selbst hostbar"
-subtitle = "Der weltweit sicherste PDF Editor ist kostenlos für Teams jeder Größe. Enthält 60+ PDF-Operationen und SSO."
-title = "Willkommen bei"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Unbegrenzt"
 
 [printFile]
 title = "Datei drucken"
@@ -8650,6 +9560,14 @@ text = "Drehen Sie Ihre PDF-Seiten im oder gegen den Uhrzeigersinn in 90-Grad-Sc
 [rotate.tooltip.header]
 title = "Übersicht der Rotationseinstellungen"
 
+[ruler]
+clearAll = "Alle löschen"
+hideAllLabels = "Alle Beschriftungen ausblenden"
+hideSmallLabels = "Kleine Beschriftungen ausblenden"
+physicalValues = "Physisch"
+scaled = "Skaliert"
+showAllLabels = "Alle Beschriftungen anzeigen"
+
 [sanitize]
 desc = "Potentiell schädliche Elemente aus PDF-Dateien entfernen."
 sanitizationResults = "Bereinigungsergebnisse"
@@ -8691,31 +9609,45 @@ label = "XMP-Metadaten entfernen"
 [sanitize.steps]
 settings = "Einstellungen"
 
-[sanitizePdf]
-tags = "sauber,sicher,sicher,bedrohungen entfernen"
-
 [sanitizePDF]
 title = "PDF Bereinigen"
 
+[sanitizePdf]
+tags = "sauber,sicher,sicher,bedrohungen entfernen"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Seitengröße anpassen"
 
+[scaleSettings]
+activeScale = "Aktiver Maßstab"
+apply = "Maßstab anwenden"
+applyCalibration = "Kalibrierung anwenden"
+calculatedScale = "Berechneter Maßstab"
+calibrate = "Kalibrieren"
+calibrating = "Kalibrieren"
+calibrationDistanceRequired = "Geben Sie eine reale Entfernung größer als null ein"
+calibrationInvalid = "Maßstab kann aus dieser Messung nicht berechnet werden"
+calibrationPaperDistance = "Gemessene Seitenentfernung: {{distance}}"
+calibrationTitle = "Maßstab kalibrieren"
+calibrationTooltip = "Messen Sie eine bekannte Entfernung, um den Maßstab automatisch zu berechnen"
+customScale = "Benutzerdefinierter Maßstab"
+noneSet = "Kein benutzerdefinierter Maßstab festgelegt"
+presets = "Voreingestellte Maßstäbe"
+ratio = "Maßstabsverhältnis"
+ratioHelp = "Verhältnis: 1 Seiteneinheit = X reale Einheiten"
+ratioPlaceholder = "z. B. 100"
+ratioPositive = "Verhältnis muss größer als null sein"
+ratioRequired = "Verhältnis ist erforderlich"
+realDistance = "Reale Entfernung"
+realDistancePlaceholder = "z. B. 5"
+reset = "Auf Standardwerte zurücksetzen"
+unit = "Einheit"
+unitInvalid = "Ungültige Einheit: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Winkelschwelle:"
-10 = "Legt die Größe des hinzugefügten und entfernten Randes fest, um weiße Ränder in der Ausgabe zu verhindern (Standard: 1)."
-2 = "Legt den minimalen absoluten Winkel fest, der erforderlich ist, damit das Bild gedreht werden kann (Standard: 10)."
-3 = "Toleranz:"
-4 = "Bestimmt den Bereich der Farbvariation um die geschätzte Hintergrundfarbe herum (Standard: 30)."
-5 = "Mindestbereich:"
-6 = "Legt den minimalen Bereichsschwellenwert für ein Foto fest (Standard: 10000)."
-7 = "Minimaler Konturbereich:"
-8 = "Legt den minimalen Konturbereichsschwellenwert für ein Foto fest"
-9 = "Randgröße:"
-
 [scannerImageSplit]
 submit = "Bild-Scans extrahieren"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8747,6 +9679,18 @@ whatThisDoes = "Was dies tut"
 whatThisDoesDesc = "Findet und extrahiert automatisch jedes Foto von einer gescannten Seite oder einem zusammengesetzten Bild - kein manuelles Zuschneiden erforderlich."
 whenToUse = "Wann zu verwenden"
 
+[ScannerImageSplit.selectText]
+1 = "Winkelschwelle:"
+10 = "Legt die Größe des hinzugefügten und entfernten Randes fest, um weiße Ränder in der Ausgabe zu verhindern (Standard: 1)."
+2 = "Legt den minimalen absoluten Winkel fest, der erforderlich ist, damit das Bild gedreht werden kann (Standard: 10)."
+3 = "Toleranz:"
+4 = "Bestimmt den Bereich der Farbvariation um die geschätzte Hintergrundfarbe herum (Standard: 30)."
+5 = "Mindestbereich:"
+6 = "Legt den minimalen Bereichsschwellenwert für ein Foto fest (Standard: 10000)."
+7 = "Minimaler Konturbereich:"
+8 = "Legt den minimalen Konturbereichsschwellenwert für ein Foto fest"
+9 = "Randgröße:"
+
 [search]
 noResults = "Keine Ergebnisse gefunden"
 placeholder = "Suchbegriff eingeben..."
@@ -8764,46 +9708,22 @@ toolNotAvailableLocally = "Ihr Stirling-PDF-Server ist offline und „{{endpoint
 [session]
 expired = "Ihre Sitzung ist abgelaufen. Bitte laden Sie die Seite neu und versuchen Sie es erneut."
 
-[sessionManagement.tooltip]
-header = "Signiersitzungen verwalten"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Neue Teilnehmer werden am Ende der Signierreihenfolge hinzugefügt"
-bullet2 = "Teilnehmer können nach der Finalisierung nicht mehr hinzugefügt werden"
-bullet3 = "Jeder Teilnehmer erhält eine Benachrichtigung, wenn er an der Reihe ist"
-description = "Sie können einer aktiven Sitzung jederzeit vor der Finalisierung weitere Teilnehmer hinzufügen."
-title = "Teilnehmer hinzufügen"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Vollständige Finalisierung</b>: Alle Teilnehmer haben signiert"
-bullet2 = "<b>Teilweise Finalisierung</b>: Einige Teilnehmer haben noch nicht signiert"
-bullet3 = "Nicht signierte Teilnehmer werden aus dem endgültigen Dokument ausgeschlossen"
-bullet4 = "Nach der Finalisierung können Sie das signierte PDF in aktive Dateien laden"
-description = "Die Finalisierung kombiniert alle Signaturen zu einem einzigen signierten PDF. Diese Aktion kann nicht rückgängig gemacht werden."
-title = "Sitzungsfinalisierung"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Teilnehmer, die bereits signiert haben, können nicht entfernt werden"
-bullet2 = "Entfernte Teilnehmer erhalten keine Benachrichtigungen mehr"
-bullet3 = "Die Signierreihenfolge passt sich automatisch an"
-description = "Teilnehmer können aus Sitzungen entfernt werden, bevor sie signieren."
-title = "Teilnehmer entfernen"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Jede Signatur wird nacheinander auf das PDF angewendet"
-bullet2 = "Spätere Unterzeichner können frühere Signaturen sehen"
-bullet3 = "Wichtig für Genehmigungs-Workflows und rechtliche Nachweisketten"
-description = "Die von Ihnen bei der Erstellung der Sitzung festgelegte Reihenfolge bestimmt, wer zuerst signiert."
-title = "Signaturreihenfolge"
-
 [settings]
 close = "Schließen"
 
+[settings.ai]
+documents = "Dokumente & RAG"
+general = "Allgemein"
+limits = "Limits & Performance"
+models = "Modelle & Anbieter"
+title = "AI"
+
 [settings.configuration]
 advanced = "Erweitert"
 database = "Datenbank"
 endpoints = "Endpunkte"
 features = "Funktionen"
+folderAccess = "Ordnerzugriff"
 mcp = "MCP Server"
 storageSharing = "Dateispeicher & Freigabe"
 systemSettings = "Systemeinstellungen"
@@ -8837,6 +9757,8 @@ defaultPdfEditor = "Standard-PDF-Editor"
 defaultPdfEditorActive = "Stirling PDF ist Ihr Standard-PDF-Editor"
 defaultPdfEditorChecking = "Prüfen..."
 defaultPdfEditorInactive = "Eine andere Anwendung ist als Standard festgelegt"
+defaultPdfEditorRemind = "Mich daran erinnern, als Standard festzulegen"
+defaultPdfEditorRemindDescription = "Banner anzeigen, wenn Stirling PDF nicht Ihre Standard-PDF-Anwendung ist."
 defaultPdfEditorSet = "Bereits Standard"
 defaultStartupView = "Standardansicht beim Start"
 defaultStartupViewDescription = "Wählen Sie, welche Registerkarte in der linken Spalte aktiv ist, wenn die App startet"
@@ -8854,9 +9776,18 @@ languageDescription = "Anzeigesprache auswählen"
 logout = "Abmelden"
 setAsDefault = "Als Standard festlegen"
 theme = "Design"
+themeAccent = "Akzentfarbe"
+themeAccentCustom = "Benutzerdefinierte Farbe"
+themeAccentCustomHint = "Benutzerdefiniert (Standardwerte empfohlen)"
+themeAccentDark = "Akzentfarbe für den Dunkelmodus"
+themeAccentDefault = "Standard"
+themeAccentDefaultHint = "Standard-Theme (empfohlen)"
+themeAccentDescription = "Schaltflächen, Links und Hervorhebungen folgen ihr, und sie färbt die App dezent ein. Hell und Dunkel haben jeweils ihre eigene. System verwendet die jeweils aktive."
+themeAccentLight = "Akzentfarbe für den Hellmodus"
 themeDark = "Dunkel"
 themeDescription = "Zwischen hellem und dunklem Modus wechseln"
 themeLight = "Hell"
+themeReset = "Theme auf Standard zurücksetzen"
 themeSystem = "System"
 title = "Allgemein"
 user = "Benutzer"
@@ -8870,6 +9801,12 @@ intro = "Aktivieren Sie Benutzer-Authentifizierung, Teamverwaltung und Arbeitsbe
 learnMore = "Mehr in der Dokumentation erfahren"
 title = "Für Systemadministratoren"
 
+[settings.general.loginLanding]
+description = "Wählen Sie, welche App geöffnet wird, wenn Sie sich bei Stirling Cloud anmelden."
+editor = "Editor"
+processor = "Processor"
+title = "Nach der Anmeldung"
+
 [settings.general.mode]
 fullscreen = "Vollbild"
 sidebar = "Seitenleiste"
@@ -9809,14 +10746,42 @@ selectFilesHint = "Wählen Sie Dateien in Aktive Dateien aus, um dieses Tool aus
 singleFileScope = "Wird nur angewendet auf: {{fileName}}"
 viewerMode = "Zum Datei-Editor wechseln, um mehrere Dateien auszuwählen."
 
+[toolFormat]
+ANY = "beliebige Datei"
+CBR = "ein Comic-Archiv (CBR)"
+CBZ = "ein Comic-Archiv (CBZ)"
+CSV = "eine CSV-Datei"
+EBOOK = "ein E-Book"
+EMAIL = "eine E-Mail"
+EXCEL = "eine Tabellenkalkulation"
+HTML = "eine Webseite"
+IMAGE = "Bilder"
+JAVASCRIPT = "eine JavaScript-Datei"
+JSON = "eine JSON-Datei"
+MARKDOWN = "eine Markdown-Datei"
+NONE = "keine Datei"
+PCL = "eine PCL-Druckdatei"
+PDF = "eine PDF"
+PDF_ENCRYPTED = "eine passwortgeschützte PDF"
+POSTSCRIPT = "eine PostScript-Datei"
+PPT = "eine Präsentation"
+TEXT = "eine Textdatei"
+VIDEO = "ein Video"
+WORD = "ein Word-Dokument"
+XML = "eine XML-Datei"
+XPS = "ein XPS-Dokument"
+ZIP = "ein ZIP-Archiv"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Zurück zu allen Tools"
 collapse = "Bereich einklappen"
 expand = "Bereich ausklappen"
 goBack = "Zurück"
+pdfTools = "PDF-Tools"
 placeholder = "Wählen Sie ein Tool, um zu starten"
 premiumFeature = "Premium-Funktion:"
+searchTools = "Tools suchen"
 toolsHeader = "Tools"
 viewAllTools = "Alle Tools anzeigen"
 
@@ -9851,11 +10816,6 @@ noToolsFound = "Keine Werkzeuge gefunden"
 quickAccess = "SCHNELLZUGRIFF"
 searchPlaceholder = "Werkzeuge suchen..."
 
-[toolPicker.categories]
-advancedTools = "Erweiterte Werkzeuge"
-recommendedTools = "Empfohlene Werkzeuge"
-standardTools = "Standard-Werkzeuge"
-
 [toolPicker.subcategories]
 advancedFormatting = "Erweiterte Formatierung"
 automation = "Automatisierung"
@@ -9995,16 +10955,31 @@ title = "Benutzer"
 you = "(Sie)"
 
 [users.action]
+cancelInvite = "Einladung zurückziehen"
 deleteTeam = "Team löschen"
 disableMfa = "MFA zurücksetzen"
 move = "In Team verschieben"
 reinstate = "Wiederherstellen"
 remove = "Aus Org entfernen"
+removeTeam = "Aus dem Team entfernen"
 rename = "Team umbenennen"
 resetPw = "Passwort zurücksetzen"
 suspend = "Suspendieren"
 unlock = "Konto entsperren"
 
+[users.activity]
+daysAgo = "vor {{count}} T."
+hoursAgo = "vor {{count}} Std."
+justNow = "Gerade eben"
+minutesAgo = "vor {{count}} Min."
+monthsAgo_one = "vor {{count}} Monat"
+monthsAgo_other = "vor {{count}} Monaten"
+never = "Nie"
+weeksAgo_one = "vor {{count}} Woche"
+weeksAgo_other = "vor {{count}} Wochen"
+yearsAgo_one = "vor {{count}} Jahr"
+yearsAgo_other = "vor {{count}} Jahren"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Genehmigt Richtlinie"
@@ -10012,11 +10987,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Einladung an {{email}} zurückziehen? Diese Person kann dem Team mit dem aktuellen Link nicht mehr beitreten."
+cancelInviteTitle = "Einladung zurückziehen"
 deleteTeamBody = "Das Team {{name}} löschen? Das Team muss zuerst leer sein - verschieben Sie seine Mitglieder in ein anderes Team, und es darf keine Integrationskonfigurationen mehr besitzen."
 deleteTeamTitle = "Team löschen"
 disableMfaBody = "MFA-Registrierung von {{name}} entfernen? Sie richten sie beim nächsten Login erneut ein, falls erforderlich."
 disableMfaTitle = "MFA zurücksetzen"
 removeBody = "{{name}} dauerhaft aus der Organisation entfernen? Dies kann nicht rückgängig gemacht werden."
+removeTeamBody = "{{name}} aus dem Team entfernen? Das Konto bleibt erhalten, aber der Zugriff auf die Ressourcen dieses Teams geht verloren."
 removeTitle = "Mitglied entfernen"
 
 [users.empty]
@@ -10067,6 +11045,16 @@ username = "Benutzername"
 usernameError = "Der Benutzername muss mindestens 3 Zeichen lang sein"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Eingeladen von {{who}}"
+cancel = "Zurückziehen"
+count = "{{count}} ausstehend"
+desc = "Eingeladene Personen, die noch nicht beigetreten sind. Sie belegen einen Platz, bis sie die Einladung annehmen."
+expiresInDays_one = "Läuft in {{count}} Tag ab"
+expiresInDays_other = "Läuft in {{count}} Tagen ab"
+expiresToday = "Läuft heute ab"
+title = "Ausstehende Einladungen"
+
 [users.loadError]
 description = "Beim Zugriff auf das Backend ist etwas schiefgelaufen, oder Sie haben keinen Zugriff. Versuchen Sie es erneut."
 title = "Mitglieder konnten nicht geladen werden"
@@ -10652,30 +11640,6 @@ title = "Wasserzeichen-Text"
 image = "Bild"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Methoden zur Signaturerstellung"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Stiftfarbe und -stärke anpassen"
-bullet2 = "Löschen und neu zeichnen, bis Sie zufrieden sind"
-bullet3 = "Funktioniert auf Touch-Geräten (Tablets, Smartphones)"
-description = "Erstellen Sie eine handschriftliche Signatur mit Ihrer Maus oder dem Touchscreen. Am besten für persönliche, authentische Signaturen."
-title = "Signatur zeichnen"
-
-[wetSignature.tooltip.type]
-bullet1 = "Aus mehreren Schriftarten wählen"
-bullet2 = "Textgröße und -farbe anpassen"
-bullet3 = "Ideal für standardisierte Signaturen"
-description = "Erzeugen Sie eine Signatur aus eingegebenem Text. Schnell und einheitlich, geeignet für Geschäftsdokumente."
-title = "Signatur eingeben"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Unterstützt PNG, JPG und andere Bildformate"
-bullet2 = "Transparente Hintergründe für beste Ergebnisse empfohlen"
-bullet3 = "Das Bild wird an den Signaturbereich angepasst"
-description = "Laden Sie ein bereits erstelltes Signaturbild hoch. Ideal, wenn Sie eine eingescannte Unterschrift oder ein Firmenlogo haben."
-title = "Signaturbild hochladen"
-
 [workbenchBar]
 activeFiles = "Aktive Dateien"
 annotations = "Anmerkungen"
@@ -10699,6 +11663,7 @@ redact = "Schwärzen"
 rotateLeft = "Nach links drehen"
 rotateRight = "Nach rechts drehen"
 ruler = "Lineal / Messen"
+rulerSettings = "Skaleneinstellungen"
 save = "Speichern"
 saveAll = "Alle speichern"
 saveAs = "Speichern unter"
diff --git a/frontend/editor/public/locales/el-GR/translation.toml b/frontend/editor/public/locales/el-GR/translation.toml
index 06c35bc059..ccd5b6bc90 100644
--- a/frontend/editor/public/locales/el-GR/translation.toml
+++ b/frontend/editor/public/locales/el-GR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "αρχεία επιλεγμένα"
 font = "Γραμματοσειρά"
 fontSizeTooltip = "Μέγεθος του κειμένου του αριθμού σελίδας σε σημεία. Μεγαλύτεροι αριθμοί δημιουργούν μεγαλύτερο κείμενο."
 fontTypeTooltip = "Οικογένεια γραμματοσειράς για τους αριθμούς σελίδων. Επιλέξτε σύμφωνα με το στυλ του εγγράφου σας."
-genericSubmit = "Υποβολή"
 green = "Πράσινο"
 help = "Βοήθεια"
-imgPrompt = "Επιλέξτε εικόνα(ες)"
 incorrectPasswordMessage = "Ο τρέχων κωδικός είναι λανθασμένος."
 info = "Πληροφορίες"
 invalidUndoData = "Αδύνατη η αναίρεση: μη έγκυρα δεδομένα ενέργειας"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Συμφωνία σύνδεσης"
 logOut = "Αποσύνδεση"
 marginTooltip = "Απόσταση μεταξύ του αριθμού σελίδας και του άκρου της σελίδας."
 moreOptions = "Περισσότερες επιλογές"
-multiPdfPrompt = "Επιλέξτε PDFs (2+)"
 never = "Ποτέ"
 no = "Όχι"
 noFileSelected = "Δεν επιλέχθηκε αρχείο. Παρακαλώ ανεβάστε ένα."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Προσαρμοσμένη σειρά σελίδων (Εισ
 pages = "Σελίδες"
 pageSelectionPrompt = "Προσαρμοσμένη επιλογή σελίδων (Εισάγετε μια λίστα αριθμών σελίδων χωρισμένη με κόμματα 1,5,6 ή συναρτήσεις όπως 2n+1):"
 password = "Κωδικός"
-pdfPrompt = "Επιλέξτε PDF(s)"
 pin = "Καρφίτσωμα αρχείου (παραμένει ενεργό μετά την εκτέλεση εργαλείου)"
 pro = "Pro"
 processingComplete = "Το αρχείο σας είναι έτοιμο."
@@ -356,6 +352,7 @@ text = "Αυτά τα δικαιώματα ελέγχουν τι μπορούν
 title = "Αλλαγή δικαιωμάτων"
 
 [addStamp]
+preview = "Προεπισκόπηση σφραγίδας"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Χειροκίνητες λήψεις: κάντε κλικ στο
 noLanguages = "Δεν βρέθηκαν γλώσσες tessdata στον ρυθμισμένο κατάλογο."
 permissionNotice = "Η διαδρομή tessdata δεν είναι εγγράψιμη. Οι λήψεις θα ανοίγουν στο πρόγραμμα περιήγησης. Αποθηκεύστε χειροκίνητα τα αρχεία .traineddata στον φάκελο tessdata."
 
+[admin.settings.ai.documents]
+description = "Ρυθμίστε το μοντέλο embedding και τις ρυθμίσεις ανάκτησης που χρησιμοποιούνται για απαντήσεις σε ερωτήσεις πάνω σε έγγραφα. Εφαρμόζεται στη μηχανή AI όταν αποθηκευτεί."
+title = "Έγγραφα & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Αφήστε το κενό για να χρησιμοποιηθεί το διαπιστευτήριο περιβάλλοντος της ίδιας της μηχανής. Ισχύει για αυτοφιλοξενούμενες αναπτύξεις μίας μηχανής."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Αποθηκεύτηκε - αφήστε κενό για να διατηρήσετε το τρέχον key"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Βασικό URL του endpoint embeddings συμβατού με OpenAI / Ollama, π.χ. http://ollama:11434/v1. Πρέπει να δείχνει σε αξιόπιστο εσωτερικό endpoint (ευαίσθητο σε SSRF)."
+label = "Βασικό URL embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Όνομα μοντέλου embedding. Ελεύθερο κείμενο· οι προτάσεις είναι μόνο υποδείξεις."
+label = "Μοντέλο embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Πάροχος που χρησιμοποιείται για τη μετατροπή κειμένου εγγράφων σε vector embeddings."
+label = "Πάροχος embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Μέγιστος αριθμός αναζητήσεων ανάκτησης που μπορεί να εκτελέσει ο agent ανά αίτημα."
+label = "Μέγιστες αναζητήσεις"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Η αλλαγή του μοντέλου embedding τίθεται σε ισχύ αμέσως, αλλά τα έγγραφα που έχουν ευρετηριαστεί με το προηγούμενο μοντέλο πρέπει να ευρετηριαστούν ξανά ώστε η αναζήτηση να επιστρέφει σωστά αποτελέσματα."
+title = "Απαιτείται επανευρετηρίαση"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Αν αλλάξατε το μοντέλο embedding, επανευρετηριάστε τα υπάρχοντα έγγραφα ώστε η αναζήτηση να χρησιμοποιεί το νέο μοντέλο."
+
+[admin.settings.ai.documents.topK]
+description = "Αριθμός των πιο σχετικών τμημάτων που ανακτώνται ανά αναζήτηση."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Συνδέστε το Stirling με τη μηχανή Python AI και επιλέξτε ποιες δυνατότητες AI είναι διαθέσιμες. Οι αλλαγές εφαρμόζονται με επανεκκίνηση."
+title = "Μηχανή AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Ενεργοποιήστε ή απενεργοποιήστε μεμονωμένες λειτουργίες AI. Οι απενεργοποιημένες λειτουργίες αποκρύπτονται στην εφαρμογή."
+title = "Δυνατότητες"
+
+[admin.settings.ai.general.enabled]
+description = "Κεντρικός διακόπτης. Όταν είναι απενεργοποιημένος, δεν είναι διαθέσιμα εργαλεία AI, agents ή κλήσεις μηχανής."
+label = "Ενεργοποίηση AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Βοηθός συνομιλίας για εργασία με PDFs."
+label = "Βοηθός συνομιλίας"
+
+[admin.settings.ai.general.features.classify]
+description = "Αυτόματη κατηγοριοποίηση εγγράφων κατά τύπο ή περιεχόμενο."
+label = "Ταξινόμηση εγγράφων"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Δημιουργία νέου PDF (π.χ. από HTML) μέσω AI agent."
+label = "Δημιουργία PDF από prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Κάντε ερωτήσεις και λάβετε απαντήσεις βασισμένες σε ένα μεταφορτωμένο έγγραφο."
+label = "Ερωτήσεις εγγράφου"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Έλεγχος εγγράφων για μαθηματικά και αριθμητικά σφάλματα."
+label = "Ελεγκτής μαθηματικών"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Προσθήκη σχολίων αξιολόγησης και επισημάνσεων γραμμένων από AI σε ένα PDF."
+label = "PDF comment agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Χρονικό όριο για πιο βαριές λειτουργίες agent, όπως η δημιουργία εγγράφων."
+label = "Χρονικό όριο μακράς διάρκειας (δευτερόλεπτα)"
+
+[admin.settings.ai.general.note]
+body = "Η μηχανή AI εκτελείται ως ξεχωριστή υπηρεσία. Το κοινό μυστικό της"
+body2 = "ορίζεται μέσω μεταβλητής περιβάλλοντος container. Τα Provider API keys μπορούν να εισαχθούν σε αυτές τις σελίδες ή να δοθούν ως μεταβλητές περιβάλλοντος της μηχανής· τα keys που εισάγονται εδώ προωθούνται στη μηχανή όταν αποθηκευτούν."
+title = "Σχετικά με τη μηχανή AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Χρονικό όριο για streaming απαντήσεις συνομιλίας (token προς token)."
+label = "Χρονικό όριο stream (δευτερόλεπτα)"
+
+[admin.settings.ai.general.test]
+button = "Δοκιμή σύνδεσης"
+failBody = "Η μηχανή AI δεν ανταποκρίθηκε. Ελέγξτε το URL, ότι το container της μηχανής εκτελείται και ότι το AI είναι ενεργοποιημένο (απαιτείται επανεκκίνηση μετά την ενεργοποίηση)."
+failTitle = "Η μηχανή AI δεν είναι προσβάσιμη"
+okBody = "Η μηχανή AI ανταποκρίθηκε σε έλεγχο υγείας."
+okTitle = "Η μηχανή AI είναι προσβάσιμη"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Χρονικό όριο για τυπικά αιτήματα AI προς τη μηχανή."
+label = "Χρονικό όριο αιτήματος (δευτερόλεπτα)"
+
+[admin.settings.ai.general.url]
+description = "Εσωτερικό URL της μηχανής Python AI, π.χ. http://stirling-pdf-engine:5001."
+label = "URL μηχανής AI"
+
+[admin.settings.ai.limits]
+description = "Προστατευτικά όρια για το πόση εργασία μπορούν να κάνουν τα αιτήματα AI και πόσα εκτελούνται ταυτόχρονα. Εφαρμόζονται στη μηχανή AI όταν αποθηκευτούν."
+title = "Όρια & Απόδοση"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Προστατευτικό όριο: απόρριψη αιτημάτων AI των οποίων το εξαγόμενο κείμενο υπερβαίνει αυτό το μήκος."
+label = "Μέγιστοι χαρακτήρες ανά αίτημα"
+
+[admin.settings.ai.limits.maxPages]
+description = "Προστατευτικό όριο: απόρριψη αιτημάτων AI πάνω από τόσες σελίδες PDF."
+label = "Μέγιστες σελίδες ανά αίτημα"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Μέγιστες ταυτόχρονες εκκρεμείς κλήσεις μοντέλου σε όλη τη μηχανή."
+label = "Μέγιστη ταυτόχρονη εκτέλεση μοντέλου"
+
+[admin.settings.ai.models]
+description = "Επιλέξτε τον πάροχο LLM και τα smart/fast μοντέλα που χρησιμοποιεί η μηχανή AI. Εφαρμόζεται στη μηχανή AI όταν αποθηκευτεί."
+title = "Μοντέλα & Πάροχοι"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Αφήστε το κενό για να χρησιμοποιηθεί το διαπιστευτήριο περιβάλλοντος της ίδιας της μηχανής. Ισχύει για αυτοφιλοξενούμενες αναπτύξεις μίας μηχανής."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Αποθηκεύτηκε - αφήστε κενό για να διατηρήσετε το τρέχον key"
+
+[admin.settings.ai.models.baseUrl]
+description = "Βασικό URL του endpoint συμβατού με OpenAI / Ollama, π.χ. http://ollama:11434/v1."
+label = "Βασικό URL παρόχου"
+warning = "Το βασικό URL πρέπει να δείχνει σε αξιόπιστο εσωτερικό endpoint. Η μηχανή θα κάνει server-side αιτήματα προς αυτό, επομένως μια μη αξιόπιστη τιμή είναι ευαίσθητη σε SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Μέγιστος αριθμός output tokens για το fast μοντέλο."
+label = "Μέγιστα tokens fast μοντέλου"
+
+[admin.settings.ai.models.fastModel]
+description = "Φθηνότερο, ταχύτερο μοντέλο για ελαφριές εργασίες. Ελεύθερο κείμενο· οι προτάσεις είναι μόνο υποδείξεις."
+label = "Fast μοντέλο"
+
+[admin.settings.ai.models.provider]
+description = "Με ποιον πάροχο LLM επικοινωνεί η μηχανή."
+label = "Πάροχος"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Μέγιστος αριθμός output tokens για το smart μοντέλο."
+label = "Μέγιστα tokens smart μοντέλου"
+
+[admin.settings.ai.models.smartModel]
+description = "Μοντέλο υψηλών δυνατοτήτων για σύνθετη συλλογιστική. Ελεύθερο κείμενο· οι προτάσεις είναι μόνο υποδείξεις."
+label = "Smart μοντέλο"
+
+[admin.settings.ai.saved]
+body = "Οι αλλαγές προωθούνται αυτόματα στη μηχανή AI."
+bodyNoPush = "Οι ρυθμίσεις αποθηκεύτηκαν. Θα εφαρμοστούν την επόμενη φορά που η μηχανή AI θα λάβει τη διαμόρφωσή της."
+title = "Οι ρυθμίσεις AI αποθηκεύτηκαν"
+
 [admin.settings.badge]
 clickToUpgrade = "Κάντε κλικ για προβολή λεπτομερειών πλάνου"
 
@@ -938,6 +1094,25 @@ label = "Επαναδημιουργία κατά την εκκίνηση"
 description = "Αριθμός ημερών που θα ισχύει το πιστοποιητικό"
 label = "Ισχύς πιστοποιητικού (ημέρες)"
 
+[admin.settings.folderAccess]
+description = "Κατάλογοι από τους οποίους οι πηγές φακέλων και οι έξοδοι φακέλων επιτρέπεται να διαβάζουν και στους οποίους επιτρέπεται να γράφουν. Αυτό είναι όριο ασφαλείας: οι αυτοματισμοί δεν μπορούν ποτέ να δείχνουν σε διαδρομή server εκτός αυτής της λίστας."
+securityNote = "Αφήστε το κενό για να απενεργοποιήσετε πλήρως τις πηγές φακέλων και τις εξόδους. Ο κατάλογος διαμόρφωσης του Stirling είναι πάντα εκτός ορίων."
+title = "Πρόσβαση σε φακέλους"
+
+[admin.settings.folderAccess.implied]
+description = "Αυτοί οι κατάλογοι που διαχειρίζεται το Stirling επιτρέπονται πάντα και δεν μπορούν να αλλάξουν εδώ."
+serverStorage = "Αποθήκευση αρχείων server"
+title = "Πάντα επιτρεπόμενα"
+watchedFolder = "Παρακολουθούμενος φάκελος pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Προσθήκη"
+empty = "Δεν επιτρέπονται φάκελοι. Οι πηγές φακέλων και οι έξοδοι είναι προς το παρόν απενεργοποιημένες."
+hint = "Εισαγάγετε απόλυτες διαδρομές, για παράδειγμα /data/inbox."
+label = "Επιτρεπόμενες ρίζες φακέλων"
+placeholder = "/data/inbox"
+remove = "Αφαίρεση ρίζας φακέλου"
+
 [admin.settings.general]
 description = "Ρυθμίστε καθολικές ρυθμίσεις εφαρμογής, όπως επωνυμία και προεπιλεγμένη συμπεριφορά."
 system = "Σύστημα"
@@ -1842,6 +2017,15 @@ export = "Εξαγωγή"
 accessDenied = "Απαγορεύεται η πρόσβαση"
 insufficientPermissions = "Δεν έχετε άδεια για αυτή την ενέργεια."
 
+[auth.callback]
+completing = "Ολοκλήρωση ελέγχου ταυτότητας"
+invalidToken = "Η σύνδεση OAuth απέτυχε - μη έγκυρο token."
+missingToken = "Η σύνδεση OAuth απέτυχε - δεν λήφθηκε token."
+oauthFailed = "Η σύνδεση OAuth απέτυχε. Δοκιμάστε ξανά."
+pleaseWait = "Περιμένετε όσο ολοκληρώνουμε τη σύνδεσή σας."
+signedOut = "Έχετε αποσυνδεθεί. Συνδεθείτε ξανά."
+windowMayClose = "Μπορείτε να κλείσετε αυτό το παράθυρο μόλις ολοκληρωθεί."
+
 [auth.displayName]
 guest = "Επισκέπτης"
 user = "Χρήστης"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Ασφαλίζει έγγραφα PDF αφαιρώντας
 description = "Αυτό το εργαλείο θα μετονομάζει αυτόματα αρχεία PDF με βάση το περιεχόμενό τους. Αναλύει το έγγραφο για να βρει τον καταλληλότερο τίτλο από το κείμενο."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Αυτόματη περιστροφή"
+tags = "αυτόματη περιστροφή,διόρθωση προσανατολισμού,ανάποδα,πλάγια,ίσιωμα,προσανατολισμός,ανίχνευση προσανατολισμού,διόρθωση περιστροφής,αυτόματος προσανατολισμός,σαρωμένο,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Όριο εμπιστοσύνης"
+
+[autoRotate.detectionMode]
+auto = "Αυτόματα"
+osd = "Μόνο OCR"
+text = "Μόνο κείμενο"
+title = "Μέθοδος ανίχνευσης"
+
+[autoRotate.error]
+failed = "Παρουσιάστηκε σφάλμα κατά την αυτόματη περιστροφή του PDF."
+
+[autoRotate.inferUndetected]
+title = "Περιστροφή σελίδων χαμηλής εμπιστοσύνης ώστε να ταιριάζουν"
+
+[autoRotate.report]
+applied = "{{degrees}}° δεξιόστροφα"
+confidenceValue = "Εμπιστοσύνη {{value}}"
+noChange = "Καμία αλλαγή"
+pageLabel = "Σελίδα {{number}}"
+summary = "Περιστράφηκαν {{rotated}} από {{total}} σελίδες, {{unchanged}} έμειναν ως έχουν"
+title = "Αναφορά ανίχνευσης"
+
+[autoRotate.report.method]
+inferred = "Αντιστοιχίστηκε"
+none = "Παραλείφθηκε"
+osd = "OCR"
+text = "Κείμενο"
+
+[autoRotate.report.note]
+belowThreshold = "Κάτω από το όριο"
+blankPage = "Η σελίδα είναι κενή"
+inferredFromDocument = "Ίδια με τις άλλες σελίδες"
+noDominantDirection = "Μικτές κατευθύνσεις κειμένου"
+osdFailed = "Δεν βρέθηκε αναγνώσιμο κείμενο"
+osdNoVerdict = "Δεν ήταν δυνατό να προσδιοριστεί ο σωστός προσανατολισμός"
+tesseractUnavailable = "Το OCR δεν είναι εγκατεστημένο"
+tooFewGlyphs = "Πολύ λίγο κείμενο"
+
+[autoRotate.results]
+title = "Αποτελέσματα αυτόματης περιστροφής"
+
+[autoRotate.settings]
+title = "Ρυθμίσεις"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Πόσο βέβαιος πρέπει να είναι ο έλεγχος πριν περιστραφεί μια σελίδα. Μειώστε το για να περιστρέφονται περισσότερες σελίδες, αυξήστε το για να μένουν περισσότερες σελίδες ανέπαφες."
+title = "Όριο εμπιστοσύνης"
+
+[autoRotate.tooltip.description]
+text = "Υπολογίζει ποιος πρέπει να είναι ο σωστός προσανατολισμός κάθε σελίδας και τη γυρίζει σωστά. Οι σελίδες που είναι ήδη όρθιες μένουν ως έχουν."
+
+[autoRotate.tooltip.detectionMode]
+text = "Το Αυτόματα διαβάζει πρώτα το κείμενο στη σελίδα και μετά εξετάζει τη σελίδα ως εικόνα αν αυτό δεν είναι αρκετό. Το Μόνο κείμενο παραλείπει τον έλεγχο εικόνας, που είναι ταχύτερο για έγγραφα που δεν σαρώθηκαν ποτέ. Το Μόνο OCR αντιμετωπίζει κάθε σελίδα ως εικόνα."
+title = "Μέθοδος ανίχνευσης"
+
+[autoRotate.tooltip.header]
+title = "Αυτόματη περιστροφή"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Οι κενές ή σχεδόν κενές σελίδες δεν μπορούν να ελεγχθούν από μόνες τους. Όταν κάθε σελίδα που μπορούσε να διαβαστεί χρειάζεται την ίδια περιστροφή, αυτές οι σελίδες περιστρέφονται ώστε να ταιριάζουν."
+title = "Περιστροφή σελίδων χαμηλής εμπιστοσύνης ώστε να ταιριάζουν"
+
 [autoSizeSplitPDF]
 tags = "pdf,διαχωρισμός,έγγραφο,οργάνωση"
 
@@ -2189,33 +2440,6 @@ keywords = "Λέξεις-κλειδιά: odd, even"
 numbers = "Αριθμοί/εύρη: 5, 10-20"
 progressions = "Πρόοδοι: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Τύποι πιστοποιητικών"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Διαχειρίζεται από διαχειριστές συστήματος"
-bullet2 = "Κοινόχρηστο μεταξύ εξουσιοδοτημένων χρηστών"
-bullet3 = "Αντιπροσωπεύει την ταυτότητα της εταιρείας, όχι του ατόμου"
-bullet4 = "Κατάλληλο για: Επίσημα έγγραφα, ομαδικές υπογραφές"
-description = "Ένα κοινόχρηστο πιστοποιητικό που παρέχεται από τον οργανισμό σας. Χρησιμοποιείται για εταιρική εξουσιοδότηση υπογραφών."
-title = "Πιστοποιητικό οργανισμού"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Δημιουργείται αυτόματα κατά την πρώτη χρήση"
-bullet2 = "Συνδέεται με τον λογαριασμό χρήστη σας"
-bullet3 = "Δεν μπορεί να κοινοποιηθεί σε άλλους χρήστες"
-bullet4 = "Κατάλληλο για: Προσωπικά έγγραφα, ατομική υπευθυνότητα"
-description = "Ένα αυτόματα δημιουργημένο πιστοποιητικό, μοναδικό για τον λογαριασμό χρήστη σας. Κατάλληλο για ατομικές υπογραφές."
-title = "Προσωπικό πιστοποιητικό"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Απαιτεί αρχείο P12/PFX και κωδικό πρόσβασης"
-bullet2 = "Μπορεί να εκδοθεί από εξωτερικές Αρχές Πιστοποίησης"
-bullet3 = "Υψηλότερο επίπεδο εμπιστοσύνης για νομικά έγγραφα"
-bullet4 = "Κατάλληλο για: Νομικά δεσμευτικά συμβόλαια, εξωτερική επικύρωση"
-description = "Χρησιμοποιήστε το δικό σας αρχείο πιστοποιητικού PKCS#12. Παρέχει πλήρη έλεγχο στις ιδιότητες του πιστοποιητικού."
-title = "Μεταφόρτωση προσαρμοσμένου P12"
-
 [certSign]
 awaitingSignatures = "Αναμονή υπογραφών"
 chooseCertificate = "Επιλέξτε αρχείο πιστοποιητικού"
@@ -2542,34 +2766,6 @@ server = "Διακομιστής"
 stepTitle = "Πηγή πιστοποιητικού"
 upload = "Μεταφόρτωση"
 
-[certSign.tooltip.header]
-title = "Σχετικά με τη διαχείριση υπογραφών"
-
-[certSign.tooltip.overview]
-bullet1 = "Ελέγξτε υπάρχουσες υπογραφές και την εγκυρότητά τους"
-bullet2 = "Προβάλετε λεπτομερείς πληροφορίες για υπογράφοντες και πιστοποιητικά"
-bullet3 = "Προσθέστε νέες ψηφιακές υπογραφές για να ασφαλίσετε τα έγγραφά σας"
-bullet4 = "Υποστήριξη πολλών αρχείων με εύκολη πλοήγηση"
-text = "Αυτό το εργαλείο σάς επιτρέπει να ελέγξετε αν τα PDF σας είναι ψηφιακά υπογεγραμμένα και να προσθέσετε νέες ψηφιακές υπογραφές. Οι ψηφιακές υπογραφές αποδεικνύουν ποιος δημιούργησε ή ενέκρινε ένα έγγραφο και αν έχει αλλάξει από την υπογραφή."
-title = "Τι μπορεί να κάνει αυτό το εργαλείο;"
-
-[certSign.tooltip.signing]
-bullet1 = "Υποστηρίζει μορφές PEM, PKCS12, JKS και πιστοποιητικό διακομιστή"
-bullet2 = "Επιλογή εμφάνισης ή απόκρυψης της υπογραφής στο PDF"
-bullet3 = "Προσθέστε λόγο, τοποθεσία και όνομα υπογράφοντος"
-bullet4 = "Επιλέξτε σε ποια σελίδα θα τοποθετηθούν οι ορατές υπογραφές"
-bullet5 = "Χρήση πιστοποιητικού διακομιστή για την απλή επιλογή 'Sign with Stirling-PDF'"
-text = "Για να υπογράψετε ένα PDF, χρειάζεστε ένα ψηφιακό πιστοποιητικό (όπως PEM, PKCS12 ή JKS). Μπορείτε να επιλέξετε να κάνετε την υπογραφή ορατή στο έγγραφο ή να την κρατήσετε αόρατη μόνο για λόγους ασφάλειας."
-title = "Προσθήκη υπογραφών"
-
-[certSign.tooltip.validation]
-bullet1 = "Εμφανίζει αν οι υπογραφές είναι έγκυρες ή άκυρες"
-bullet2 = "Προβάλλει πληροφορίες υπογράφοντος και ημερομηνία υπογραφής"
-bullet3 = "Ελέγχει αν το έγγραφο τροποποιήθηκε μετά την υπογραφή"
-bullet4 = "Μπορεί να χρησιμοποιήσει προσαρμοσμένα πιστοποιητικά για επαλήθευση"
-text = "Όταν ελέγχετε υπογραφές, το εργαλείο σας λέει αν είναι έγκυρες, ποιος υπέγραψε το έγγραφο, πότε υπογράφηκε και αν το έγγραφο έχει αλλάξει από τότε που υπογράφηκε."
-title = "Έλεγχος υπογραφών"
-
 [changeCreds]
 changeUsername = "Ενημερώστε το όνομα χρήστη σας. Θα αποσυνδεθείτε μετά την ενημέρωση."
 credsUpdated = "Ο λογαριασμός ενημερώθηκε"
@@ -2824,6 +3020,7 @@ next = "Επόμενο"
 preview = "Προεπισκόπηση"
 previous = "Προηγούμενο"
 refresh = "Ανανέωση"
+remaining = "Απομένουν"
 retry = "Επανάληψη"
 save = "Αποθήκευση"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Προηγμένη παρακολούθηση"
-allInOneWorkspace = "Ενιαίος χώρος εργασίας PDF (προβολέας, εργαλεία & agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Αφοσιωμένη υποστήριξη & SLA"
-fasterThroughput = "10x ταχύτερος ρυθμός επεξεργασίας"
-fullyPrivateFiles = "Πλήρως ιδιωτικά αρχεία"
-largeFileProcessing = "Επεξεργασία μεγάλων αρχείων"
-orgWideAccess = "Έλεγχοι πρόσβασης σε όλο τον οργανισμό"
-premiumAiModels = "Premium μοντέλα AI"
-prioritySupport = "Υποστήριξη προτεραιότητας"
-privateDocCloud = "Ιδιωτικό Document Cloud"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Ασφαλής πρόσβαση API"
-standardThroughput = "Τυπικός ρυθμός επεξεργασίας"
-unlimitedApiAccess = "Απεριόριστη πρόσβαση API"
-unlimitedSeats = "Απεριόριστες θέσεις"
-
 [crop]
 autoCrop = "Αυτόματη περικοπή κενού"
 noFileSelected = "Επιλέξτε ένα αρχείο PDF για να ξεκινήσετε την περικοπή"
@@ -3346,6 +3525,7 @@ message = "Αποτυχία ορισμού προεπιλεγμένου χειρ
 title = "Σφάλμα"
 
 [defaultApp.prompt]
+dontRemind = "Να μην μου το υπενθυμίσεις ξανά"
 message = "Κάντε το Stirling PDF την προεπιλεγμένη εφαρμογή για άνοιγμα αρχείων PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Προσαρμογή ομάδων"
 dropHint = "Ανοίξτε αρχεία για να ξεκινήσετε"
 dropToAdd = "Drop files to add"
 expand = "Ανάπτυξη πλευρικής στήλης"
-files = "Αρχεία"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Το Google Drive δεν έχει ρυθμιστεί"
 leaveMyFiles = "Έξοδος από Τα αρχεία μου"
+library = "Βιβλιοθήκη PDF"
 myFiles = "Τα αρχεία μου"
 noFiles = "Ακόμη δεν υπάρχουν αρχεία"
 openFileManager = "Άνοιγμα διαχείρισης αρχείων"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Προσθήκη"
-addLabel = "Προσθήκη ετικέτας…"
-categoryIconAria = "Επιλέξτε εικονίδιο για {{name}}"
-createCategory = "Δημιουργία κατηγορίας"
-delete = "Διαγραφή κατηγορίας"
 done = "Τέλος"
-hide = "Απόκρυψη κατηγορίας"
-newCategory = "Νέο όνομα κατηγορίας…"
-removeLabel = "Αφαίρεση {{name}}"
-rename = "Μετονομασία"
 reset = "Επαναφορά προεπιλογών"
-search = "Αναζήτηση ετικετών…"
-show = "Εμφάνιση κατηγορίας"
 subtitle = "Ομαδοποιήστε τα αρχεία σας σε γονικές κατηγορίες. Προσθέστε υπάρχουσες ή νέες ετικέτες σε μια κατηγορία, μετονομάστε την ή δημιουργήστε τη δική σας. Τα αρχεία που δεν ανήκουν σε καμία από τις κατηγορίες σας εμφανίζονται στην ενότητα «Άλλα»."
 title = "Κατηγορίες πλαϊνής γραμμής"
 
@@ -3808,6 +3977,7 @@ refresh = "Ανανέωση από τον διακομιστή"
 remove = "Διαγραφή"
 removeVersion = "Αφαίρεση αυτής της έκδοσης"
 rename = "Μετονομασία"
+renamed = "Μετονομάστηκε"
 renameFolder = "Μετονομασία φακέλου"
 resizeFolderTree = "Αλλαγή μεγέθους δέντρου φακέλων (πλήκτρα βελών, Shift για μεγαλύτερα βήματα· διπλό κλικ για αυτόματη προσαρμογή)"
 save = "Αποθήκευση"
@@ -3910,9 +4080,7 @@ count = "Αρχεία"
 folder = "Φάκελος"
 labels = "Ετικέτες"
 modified = "Τροποποιήθηκε"
-name = "Όνομα"
 size = "Μέγεθος"
-toolHistoryAtVersion = "Σωρευτική αλυσίδα εργαλείων"
 totalSize = "Συνολικό μέγεθος"
 type = "Τύπος"
 versionHistory = "Πορεία εκδόσεων"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Όλα αποθηκεύτηκαν"
+extractCsvError = "Απέτυχε η εξαγωγή CSV"
+extractXlsxError = "Απέτυχε η εξαγωγή XLSX"
 flattenAfterFilling = "Επιπεδοποίηση μετά τη συμπλήρωση"
+requiredAbbreviation = "απαιτ."
+requiredFieldsError = "Συμπληρώστε όλα τα απαιτούμενα πεδία"
 rescanFields = "Επανασάρωση πεδίων"
 rescanFormFields = "Επανασάρωση πεδίων φόρμας"
 save = "Αποθήκευση"
+saveShortcut = "Ctrl+S για αποθήκευση"
+unsavedChanges = "Μη αποθηκευμένες αλλαγές"
 
 [formFill.sidebar]
 close = "Κλείσιμο πλευρικής γραμμής"
@@ -4309,6 +4484,11 @@ desc = "Μετονομάζει αυτόματα ένα αρχείο PDF βάσε
 tags = "αυτόματος εντοπισμός,βασισμένο σε κεφαλίδα,οργάνωση,επαναονομασία"
 title = "Αυτόματη μετονομασία PDF"
 
+[home.autoRotate]
+desc = "Ανίχνευση του προσανατολισμού κάθε σελίδας και αυτόματη περιστροφή της σε όρθια θέση."
+tags = "αυτόματη περιστροφή,διόρθωση προσανατολισμού,ανάποδα,πλάγια,ίσιωμα,προσανατολισμός,ανίχνευση προσανατολισμού,διόρθωση περιστροφής,αυτόματος προσανατολισμός,σαρωμένο,OSD"
+title = "Αυτόματη περιστροφή"
+
 [home.autoSizeSplitPDF]
 tags = "αυτόματο,διάσπαση,μέγεθος"
 title = "Αυτόματο σπάσιμο με μέγεθος/σελ."
@@ -4608,13 +4788,13 @@ hint = "Μεταφορτώστε ένα PNG, JPG, SVG ή άλλο αρχείο 
 label = "Μεταφόρτωση εικόνας"
 placeholder = "Επιλέξτε αρχείο εικόνας"
 
-[imageToPdf]
-tags = "μετατροπή,εικόνα,jpg,φωτογραφία"
-
 [imageToPDF]
 header = "Εικόνα σε PDF"
 title = "Εικόνα σε PDF"
 
+[imageToPdf]
+tags = "μετατροπή,εικόνα,jpg,φωτογραφία"
+
 [infoBanner]
 dismiss = "Απόρριψη"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Έχετε προσκληθεί!"
 
 [landing]
 addFiles = "Προσθήκη αρχείων"
-heroSubtitle = "Σύρετε εδώ ή προσθέστε ένα υπάρχον PDF για να ξεκινήσετε."
 mobileUpload = "Μεταφόρτωση από κινητό"
 openFromComputer = "Άνοιγμα από τον υπολογιστή"
 uploadFromComputer = "Μεταφόρτωση από υπολογιστή"
-workbenchEmptyStateHero = "Αφήστε ένα PDF οπουδήποτε"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Σύνδεση"
 magicLinkSent = "Στάλθηκε μαγικός σύνδεσμος στο {{email}}! Ελέγξτε το email σας και κάντε κλικ στον σύνδεσμο για να συνδεθείτε."
 mfaCode = "Κωδικός ελέγχου ταυτότητας"
 mfaRequired = "Απαιτείται κωδικός δύο παραγόντων"
+noAccount = "Δεν έχετε λογαριασμό;"
 or = "Ή"
 password = "Κωδικός πρόσβασης"
 passwordChangedSuccess = "Ο κωδικός άλλαξε με επιτυχία! Συνδεθείτε με τον νέο σας κωδικό."
@@ -4715,26 +4894,10 @@ signInWith = "Σύνδεση με"
 title = "Σύνδεση"
 unexpectedError = "Απρόσμενο σφάλμα: {{message}}"
 updatePassword = "Ενημέρωση κωδικού πρόσβασης"
-useEmailInstead = "Σύνδεση με email"
 useMagicLink = "Χρησιμοποιήστε μαγικό σύνδεσμο"
 username = "Όνομα χρήστη"
 youAreLoggedIn = "Έχετε συνδεθεί!"
 
-[login.slides.edit]
-alt = "Επεξεργασία PDF"
-subtitle = "Με πάνω από δώδεκα εργαλεία για απόκρυψη, υπογραφή, ανάγνωση και χειρισμό PDF, θα βρείτε σίγουρα αυτό που ψάχνετε."
-title = "Επεξεργαστείτε PDF για να προβάλετε/προστατεύσετε τις πληροφορίες που θέλετε"
-
-[login.slides.overview]
-alt = "Επισκόπηση του Stirling PDF"
-subtitle = "Σουίτα cloud με προτεραιότητα το απόρρητο για PDF που σας επιτρέπει να μετατρέπετε, να υπογράφετε, να αποκρύπτετε και να διαχειρίζεστε έγγραφα, μαζί με 50+ ακόμη ισχυρά εργαλεία."
-title = "Ό,τι χρειάζεστε για τα PDF σε ένα σημείο."
-
-[login.slides.secure]
-alt = "Ασφάλεια PDF"
-subtitle = "Προσθέστε κωδικούς, αποκρύψτε περιεχόμενο και διαχειριστείτε πιστοποιητικά με ευκολία."
-title = "Προστατέψτε ευαίσθητες πληροφορίες στα PDF σας"
-
 [margin]
 large = "Μεγάλο"
 medium = "Μεσαίο"
@@ -4976,6 +5139,7 @@ pinButton = "Μπορείτε να χρησιμοποιήσετε το κουμ
 results = "Αφού ολοκληρωθεί η εκτέλεση του εργαλείου, το βήμα <strong>Ανασκόπηση</strong> θα εμφανίσει προεπισκόπηση των αποτελεσμάτων σε αυτό το πάνελ και θα σας επιτρέψει να αναιρέσετε την ενέργεια ή να κατεβάσετε το αρχείο."
 runButton = "Αφού ρυθμιστεί το εργαλείο, αυτό το κουμπί σάς επιτρέπει να το εκτελέσετε σε όλα τα επιλεγμένα PDF."
 selectCropTool = "Ας επιλέξουμε το εργαλείο <strong>Περικοπή</strong> για να δείξουμε πώς να χρησιμοποιείτε ένα από τα εργαλεία."
+stepOf = "Βήμα {{current}} από {{total}}"
 toolInterface = "Αυτή είναι η διεπαφή του εργαλείου <strong>Περικοπή</strong>. Όπως βλέπετε, δεν υπάρχει ακόμη πολλά, επειδή δεν έχουμε προσθέσει αρχεία PDF για εργασία."
 workbench = "Αυτή είναι η <strong>Επιφάνεια εργασίας</strong> - ο κεντρικός χώρος όπου βλέπετε και επεξεργάζεστε τα PDF σας."
 wrapUp = "Είστε έτοιμοι! Μάθατε για τις κύριες περιοχές της εφαρμογής και πώς να τις χρησιμοποιείτε. Κάντε κλικ στο κουμπί <strong>Βοήθεια</strong> οποτεδήποτε για να δείτε ξανά αυτή την περιήγηση."
@@ -4988,6 +5152,26 @@ showMeAround = "Ξεναγήστε με"
 skipForNow = "Παράλειψη προς το παρόν"
 skipTheTour = "Παράλειψη ξενάγησης"
 
+[onboarding.checklist]
+dismiss = "Παράβλεψη"
+title = "Ρύθμιση του Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Εκτελέστε το Stirling εγγενώς στον υπολογιστή σας"
+title = "Λήψη του Stirling για Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Συνεργαστείτε με την ομάδα σας"
+title = "Προσκαλέστε μέλη ομάδας"
+
+[onboarding.checklist.shareAnalytics]
+description = "Βοηθήστε στη βελτίωση του Stirling"
+title = "Κοινή χρήση ανώνυμων δεδομένων χρήσης"
+
+[onboarding.checklist.takeTour]
+description = "Δείτε πώς λειτουργεί το Stirling σε μια γρήγορη περιήγηση"
+title = "Κάντε την περιήγηση"
+
 [onboarding.desktopInstall]
 body = "Το Stirling λειτουργεί καλύτερα ως εφαρμογή για υπολογιστή. Μπορείτε να το χρησιμοποιείτε offline, να έχετε ταχύτερη πρόσβαση στα έγγραφα και να κάνετε επεξεργασίες τοπικά στον υπολογιστή σας."
 selectOs = "Επιλέξτε λειτουργικό σύστημα"
@@ -4996,7 +5180,21 @@ titleWithOs = "Λήψη για {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Κωδικός ελέγχου ταυτότητας"
+description = "Ασφαλίστε τον λογαριασμό σας συνδέοντας μια εφαρμογή ελέγχου ταυτότητας. Σαρώστε τον QR code ή εισαγάγετε το setup key και μετά επιβεβαιώστε τον 6ψήφιο κωδικό για να ολοκληρώσετε."
+enable = "Ενεργοποίηση MFA"
+enableError = "Δεν είναι δυνατή η ενεργοποίηση του ελέγχου ταυτότητας δύο παραγόντων. Ελέγξτε τον κωδικό και δοκιμάστε ξανά."
+enterCode = "Εισαγάγετε τον 6ψήφιο κωδικό από την εφαρμογή σας."
+enterCodeError = "Εισαγάγετε τον κωδικό ελέγχου ταυτότητας για να συνεχίσετε."
+logout = "Αποσύνδεση"
+openAuthenticator = "Ανοίξτε το Google Authenticator, Authy ή 1Password."
 qrCodeLoading = "Δημιουργία του QR κωδικού σας…"
+regenerateQrCode = "Αναδημιουργία QR code"
+scanQrCode = "Σαρώστε τον QR code ή εισαγάγετε το setup key παρακάτω."
+setupError = "Δεν είναι δυνατή η έναρξη ρύθμισης δύο παραγόντων. Δοκιμάστε ξανά."
+setupKey = "Setup key (χειροκίνητη εισαγωγή)"
+stepByStep = "Βήμα προς βήμα"
+success = "Το MFA έχει ενεργοποιηθεί. Μπορείτε τώρα να συνεχίσετε."
+title = "Ρύθμιση ελέγχου ταυτότητας πολλαπλών παραγόντων"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Μόλις ενεργοποιήσετε τη λειτουργία σύνδεσης, μπορείτε να διαχειρίζεστε χρήστες, να ρυθμίζετε επιλογές και να παρακολουθείτε την υγεία του διακομιστή. Τα πρώτα <strong>{{freeTierLimit}}</strong> άτομα στον διακομιστή σας χρησιμοποιούν το Stirling δωρεάν."
@@ -5005,6 +5203,11 @@ adminTitle = "Επισκόπηση διαχειριστή"
 userBody = "Προσκαλέστε συνεργάτες, αναθέστε ρόλους και κρατήστε τα έγγραφα οργανωμένα σε έναν ασφαλή χώρο εργασίας. Ενεργοποιήστε τη λειτουργία σύνδεσης όταν είστε έτοιμοι να ξεπεράσετε τη μονοπρόσωπη χρήση."
 userTitle = "Επισκόπηση πλάνου"
 
+[onboarding.processorIntro]
+body = "Το Stirling εκτελεί πλέον <strong>Πολιτικές</strong> — αυτοματοποιημένους κανόνες που ταξινομούν, ασφαλίζουν και επεξεργάζονται κάθε έγγραφο όταν φτάνει. Ρυθμίστε τις και παρακολουθήστε τις εκτελέσεις στον <strong>Processor</strong>."
+cta = "Δείτε τον Processor"
+title = "Δείτε τον Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Προπληρωμένο έτος"
+
+[payg.prepaid.banner]
+exhausted = "Η προπληρωμένη χωρητικότητά σας εξαντλήθηκε· η χρέωση βάσει χρήσης συνεχίστηκε. Συμπληρώστε για να διατηρήσετε την έκπτωση."
+expiring_one = "Το προπληρωμένο έτος σας λήγει σε {{count}} ημέρα. Η αχρησιμοποίητη χωρητικότητα λήγει — συμπληρώστε για να ξεκινήσετε ένα νέο έτος."
+expiring_other = "Το προπληρωμένο έτος σας λήγει σε {{count}} ημέρες. Η αχρησιμοποίητη χωρητικότητα λήγει — συμπληρώστε για να ξεκινήσετε ένα νέο έτος."
+low = "Έχετε πέσει στο {{pct}}% της προπληρωμένης χωρητικότητάς σας. Συμπληρώστε οποιαδήποτε στιγμή για να διατηρήσετε την επεξεργασία χωρίς διακοπές."
+
+[payg.prepaid.card]
+subtitle = "Χρησιμοποιείται πριν από τη χρέωση βάσει χρήσης και εκτός του ορίου δαπανών σας."
+title = "Προπληρωμένη χωρητικότητα"
+
+[payg.prepaid.meter]
+capSuffix = "από {{total}} προπληρωμένες πιστώσεις"
+expires = "Λήγει στις {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Εξαντλήθηκε"
+healthy = "Απομένουν πολλά"
+low = "Εξαντλείται"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Επικολλήστε το κλειδί άδειας από 
 success = "Η άδεια ενεργοποιήθηκε!"
 successMessage = "Η άδειά σας ενεργοποιήθηκε με επιτυχία. Μπορείτε τώρα να κλείσετε αυτό το παράθυρο."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "επιβλήθηκε"
-enforcing = "Γίνεται επιβολή..."
-failed = "Η επιβολή απέτυχε"
 outputsUnavailable = "Τα αποτελέσματα πολιτικής δεν είναι πλέον διαθέσιμα για λήψη."
 partialOutputsUnavailable = "Ορισμένα αποτελέσματα πολιτικής δεν είναι πλέον διαθέσιμα για λήψη."
-retrying = "Απασχολημένο, επαναπροσπάθεια..."
 runNotFound = "Δεν ήταν πλέον δυνατή η εύρεση της εκτέλεσης επιβολής."
-step = "βήμα {{current}}/{{total}}"
 timedOut = "Η επιβολή έληξε λόγω χρονικού ορίου πριν ολοκληρωθεί η εκτέλεση."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Κλείσιμο"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Εφαρμογή {{names}}"
 applyingProgress = "Εφαρμογή {{names}} ({{done}} από {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} από {{total}} αρχείο(α) δεν ήταν δ
 failureTitle = "Εξαγωγή χωρίς πλήρη επιβολή"
 printPolicyAppliedBody = "Αυτό το PDF ενημερώθηκε για να συμμορφωθεί με μια πολιτική. Ελέγξτε τις αλλαγές και εκτυπώστε ξανά."
 printPolicyAppliedTitle = "Εφαρμόστηκε πολιτική πριν από την εκτύπωση"
-queued = "+{{count}} στην ουρά"
 successTitle = "{{names}} εφαρμόστηκαν"
 summaryMore = "{{first}}, {{second}} και {{more}} ακόμη"
 summaryTwo = "{{first}} και {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Επιβολή πριν από τη μετατροπή"
-default = "Επιβολή"
-export = "Επιβολή πριν από την εξαγωγή"
-input = "Επιβολή κατά την εισαγωγή"
-print = "Επιβολή πριν από την εκτύπωση"
-
-[policies.field]
-accessLog = "Αρχείο καταγραφής πρόσβασης"
-archiveAfter = "Αρχειοθέτηση μετά από"
-auditTrail = "Ίχνος ελέγχου"
-belowThreshold = "Κάτω από το όριο"
-destination = "Προορισμός"
-frameworks = "Πλαίσια"
-immutableHold = "Αμετάβλητη διατήρηση"
-keepFor = "Διατήρηση για"
-minConfidence = "Ελάχιστη εμπιστοσύνη"
-notify = "Ειδοποίηση κατά τη δρομολόγηση"
-onViolation = "Όταν δεν συμμορφώνεται"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Προσθήκη"
-addPlaceholder = "Προσθήκη ετικέτας…"
-customNote = "Προσαρμοσμένο για την ομάδα σας."
-defaultNote = "Χρήση της ενσωματωμένης προεπιλογής, κοινόχρηστης με την ομάδα σας."
-duplicate = "\"{{name}}\" υπάρχει ήδη."
-edit = "Επεξεργασία ετικετών"
-empty = "Δεν υπάρχουν ακόμα ετικέτες."
-export = "Εξαγωγή JSON"
-iconAria = "Επιλέξτε εικονίδιο για {{name}}"
-import = "Εισαγωγή JSON"
-importError = "Δεν ήταν δυνατή η εισαγωγή αυτού του αρχείου."
-managedNote = "Οι ετικέτες ομάδας διαχειρίζονται από τον επικεφαλής της ομάδας σας."
-modalSubtitle = "Κοινόχρηστο με ολόκληρη την ομάδα σας. Ο ταξινομητής επιλέγει τις ετικέτες που ταιριάζουν σε κάθε έγγραφο."
-modalTitle = "Ετικέτες ταξινόμησης"
-pickIcon = "Χρήση εικονιδίου {{label}}"
-removeAria = "Αφαίρεση {{name}}"
-resetToDefault = "Επαναφορά στην προεπιλογή"
-saveForTeam = "Αποθήκευση για την ομάδα"
-saving = "Αποθήκευση…"
-sectionLabel = "Ετικέτες ταξινόμησης"
-startFromScratch = "Έναρξη από την αρχή"
-teamCount = "ετικέτες ομάδας"
-tooLong = "Οι ετικέτες μπορούν να έχουν το πολύ {{max}} χαρακτήρες."
-ungrouped = "Μη ομαδοποιημένα"
-view = "Προβολή ετικετών"
+categoryCount = "κατηγορίες"
+hideCategory = "Απόκρυψη κατηγορίας"
+labelCount = "ετικέτες"
+sharedNote = "Αυτές οι ετικέτες είναι ενσωματωμένες και κοινές σε όλη την ομάδα σας."
+showCategory = "Εμφάνιση κατηγορίας"
 
 [policies.pii]
 account = "Αριθμοί λογαριασμών (με ετικέτα)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Αριθμοί δρομολόγησης ΗΠΑ (ABA)"
 ssn = "Αριθμοί κοινωνικής ασφάλισης"
 
-[policies.settings]
-noneExport = "Καμία πολιτική δεν εκτελείται επί του παρόντος κατά την εξαγωγή."
-noneUpload = "Καμία πολιτική δεν εκτελείται επί του παρόντος κατά τη μεταφόρτωση."
-onExport = "Κατά την εξαγωγή"
-onUpload = "Κατά τη μεταφόρτωση"
-reorderHandle = "Σύρετε για αναδιάταξη"
-runOrderDesc = "Όταν περισσότερες από μία πολιτικές εκτελούνται στο ίδιο έναυσμα, εκτελούνται με αυτήν τη σειρά — καθεμία στο αποτέλεσμα της προηγούμενης πολιτικής. Σύρετε για αναδιάταξη."
-title = "Ρυθμίσεις πολιτικής"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Επιλογές πολιτικής"
-policySettings = "Ρυθμίσεις πολιτικής"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Επανάληψη αποτυχημένων πολιτικών ({{count}})"
-rowProgress = "{{completed}} από {{total}} αρχεία επεξεργάστηκαν"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Τι είναι μια πολιτική;"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Εντοπίζει αυτόματα και μαυρίζει ευαίσθητα στοιχεία — όπως αριθμούς κοινωνικής ασφάλισης και καρτών — ώστε να μην μπορούν να διαβαστούν στο έγγραφο."
-sanitize = "Αφαιρεί κρυφό JavaScript από το αρχείο, ώστε να μην εκτελείται αυτόματα τίποτα όταν κάποιος το ανοίγει."
-watermark = "Τοποθετεί ορατή σήμανση (π.χ. \"Εμπιστευτικό\") σε κάθε σελίδα."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Κλείσιμο"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} σε επιβολή..."
 badgeRan = "Η πολιτική {{name}} εκτελέστηκε σε αυτό το αρχείο"
+badgeRunning = "{{name}} εκτελείται..."
 blockingAction = "Η ενέργεια {{action}} αποκλείστηκε κατά την επιβολή πολιτικής, περιμένετε..."
 dismiss = "Απόρριψη επικάλυψης"
 enforcingTitle = "Επιβολή πολιτικής..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Προβολή αρχείου (η πολιτική εξακολο
 [policyOption]
 autoRedactPhi = "Αυτόματη απόκρυψη PHI"
 blockExport = "Αποκλεισμός εξαγωγής"
+ccpa = "CCPA"
 contracts = "Συμβάσεις"
 documents = "Έγγραφα"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Πλάνο Editor"
 subscribed = "Πλάνο Processor"
 unlinked = "Μη συνδεδεμένο"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap από έγγραφο"
-sectionsAriaLabel = "Ενότητες δημιουργού πρακτόρων"
-selectorAriaLabel = "Πράκτορες"
-subtitle = "Σχεδιάστε, δοκιμάστε και διαθέστε τους πράκτορες AI που ταξινομούν, εξάγουν από και δρομολογούν τα έγγραφά σας. Ορίστε σενάρια, περιορίστε την πρόσβαση σε εργαλεία, εκτελέστε ένα golden set και δημοσιεύστε μια έκδοση."
-title = "Δημιουργός πρακτόρων"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Ακύρωση"
-dropzoneText = "Επιλέξτε ένα δείγμα εγγράφου (PDF ή εικόνα)"
-lead = "Αφήστε ένα δείγμα εγγράφου και θα προτείνουμε σενάρια και ένα σχήμα εξαγωγής που μπορείτε να βελτιώσετε. Τίποτα δεν δημοσιεύεται μέχρι να το ελέγξετε."
-submit = "Bootstrap πράκτορα"
-subtitle = "Ξεκινήστε έναν νέο πράκτορα από ένα αντιπροσωπευτικό αρχείο"
-title = "Bootstrap από έγγραφο"
-
-[portal.agentBuilder.empty]
-description = "Κάντε bootstrap ενός πράκτορα από ένα δείγμα εγγράφου για να ξεκινήσετε τα σενάρια και το σχήμα εξαγωγής του και, στη συνέχεια, βελτιώστε και δημοσιεύστε."
-title = "Δεν υπάρχουν ακόμα πράκτορες"
-
-[portal.agentBuilder.evals]
-casesPassing = "Περιπτώσεις που περνούν"
-columnCase = "Περίπτωση eval"
-columnLatency = "Καθυστέρηση"
-columnResult = "Αποτέλεσμα"
-fail = "αποτυχία"
-goldenSetPassRate = "Ποσοστό επιτυχίας golden-set"
-latencyMs = "{{ms}} ms"
-notRun = "δεν εκτελέστηκε"
-pass = "επιτυχία"
-passRate = "Ποσοστό επιτυχίας"
-runEvals = "Εκτέλεση evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Τα evals μετατρέπουν τα σενάριά σας σε ένα επαναλήψιμο golden set. Αναβαθμίστε για να καταγράφετε το ποσοστό επιτυχίας με την πάροδο του χρόνου και να ελέγχετε τις δημοσιεύσεις βάσει αυτού."
-title = "Δεν υπάρχει ακόμα golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "σε όλα τα golden sets"
-activeAgents = "Ενεργοί πράκτορες"
-avgPassRate = "Μέσο ποσοστό επιτυχίας eval"
-fleetWide = "σε όλο τον στόλο"
-latestPublished = "Τελευταία δημοσιευμένη"
-scenarios = "Σενάρια"
-testCases = "περιπτώσεις δοκιμών"
-totalDescription_one = "{{count}} συνολικά"
-totalDescription_other = "{{count}} συνολικά"
-
-[portal.agentBuilder.scenarios]
-add = "Προσθήκη"
-addScenario = "Προσθήκη σεναρίου"
-enable = "Ενεργοποίηση"
-expectationLabel = "Αναμενόμενη συμπεριφορά"
-expectationPlaceholder = "Τι πρέπει να κάνει ο πράκτορας"
-inEval = "σε eval"
-mute = "Σίγαση"
-muted = "σε σίγαση"
-nameLabel = "Όνομα"
-namePlaceholder = "π.χ. Κλιμάκωση συμμόρφωσης"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Σενάρια"
-tools = "Εργαλεία"
-versions = "Εκδόσεις"
-
-[portal.agentBuilder.tools]
-broadAccess = "Ευρεία πρόσβαση"
-deniedHint = "Τα επιλεγμένα εργαλεία είναι αποκλεισμένα. Όλα τα υπόλοιπα παραμένουν διαθέσιμα για κλήση."
-deniedTools = "Αποκλεισμένα εργαλεία"
-governanceGate = "Η διακυβέρνηση εργαλείων είναι διαθέσιμη στο πλάνο Enterprise."
-restricted = "Περιορισμένο"
-restrictedAccess = "Περιορισμένη πρόσβαση σε εργαλεία"
-restrictedDescription = "Επιτρέψτε κάθε εργαλείο εκτός από αυτά που απορρίπτετε παρακάτω."
-
-[portal.agentBuilder.versions]
-current = "τρέχουσα"
-historyGate = "Το πλήρες ιστορικό εκδόσεων και η επαναφορά είναι διαθέσιμα στο πλάνο Enterprise."
-publish = "Δημοσίευση"
-rollBack = "Επαναφορά"
-
 [portal.assistant]
 close = "Κλείσιμο βοηθού"
 error = "Δεν ήταν δυνατή η επικοινωνία με τον βοηθό."
@@ -6365,9 +6346,21 @@ typing = "Πληκτρολογεί"
 loading = "Φόρτωση"
 redirectingToEditor = "Ανακατεύθυνση στον editor..."
 
+[portal.billing.activation]
+maybeLater = "Ίσως αργότερα"
+title = "Ενεργοποίηση του Processor"
+
+[portal.billing.activation.payg]
+sub = "Ορίστε μηνιαίο όριο. Πληρώνετε για ό,τι εκτελείτε."
+title = "Πληρωμή ανά χρήση"
+
+[portal.billing.activation.prepay]
+badge = "2 μήνες δωρεάν"
+sub = "Ένα τιμολόγιο, κάρτα ή τραπεζικό έμβασμα."
+title = "Προπληρώστε ένα έτος"
+
 [portal.billing.checkout]
 noClientSecret = "Η edge function δεν επέστρεψε client_secret."
-subtitle = "Προσθέστε μια κάρτα για να συνεχίσετε πέρα από τη δωρεάν παροχή του πλάνου Editor. Το Stripe αναλαμβάνει τα υπόλοιπα."
 title = "Ενεργοποίηση του πλάνου Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Η πληρωμή σας πέτυχε, αλλά η ενεργοποίη
 close = "Κλείσιμο"
 title = "Σχεδόν έτοιμο"
 
+[portal.billing.checkout.cap]
+amountAria = "Μηνιαίο όριο δαπανών"
+back = "Πίσω"
+continue = "Συνέχεια στην πληρωμή"
+error = "Δεν ήταν δυνατό να οριστεί το όριο δαπανών σας"
+finePrint = "Τα τιμολόγια εκδίδονται μηνιαία. Ακύρωση οποιαδήποτε στιγμή."
+noLimit = "Χωρίς όριο"
+note = "Δεν χρεώνεστε ποτέ πέρα από το όριό σας. Η επεξεργασία απλώς παύει."
+perMonth = "/ μήνα"
+title = "Ορίστε το όριο δαπανών σας"
+
+[portal.billing.checkout.card]
+fields = "Αριθμός κάρτας · MM / YY · CVC · ZIP"
+label = "Στοιχεία κάρτας"
+note = "Τα στοιχεία κάρτας συλλέγονται από το Stripe. Το Stirling δεν αποθηκεύει ποτέ PAN ή CVC."
+
 [portal.billing.checkout.error]
 title = "Δεν ήταν δυνατή η έναρξη του checkout"
 
@@ -6383,10 +6392,9 @@ body = "Η πληρωμή σας ολοκληρώθηκε. Ενεργοποιο
 hint = "Κρατήστε αυτό το παράθυρο ανοιχτό."
 title = "Ενεργοποίηση του πλάνου Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "στο portal env για να ενεργοποιήσετε το checkout εντός εφαρμογής."
-bodyBefore = "Ορίστε"
-title = "Το Stripe δεν έχει διαμορφωθεί"
+[portal.billing.checkout.pay]
+limit = "Μηνιαίο όριο δαπανών {{amount}}/μήνα. Η επεξεργασία παύει στο όριο."
+limitNoCap = "Χωρίς όριο δαπανών. Η επεξεργασία δεν θα παύει. Τα τιμολόγια εκδίδονται μηνιαία."
 
 [portal.billing.enterpriseUpsell]
 cta = "Δημιουργήστε την προσφορά σας για Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Τρέχον πλάνο"
 freeForever = "Δωρεάν για πάντα"
 noTeamResolved = "Δεν έχει επιλυθεί ακόμα ομάδα στο πορτοφόλι σας — ανανεώστε και δοκιμάστε ξανά."
 ownerOnly = "Μόνο ο κάτοχος της ομάδας μπορεί να ενεργοποιήσει το πλάνο Processor."
+payInvoice = "Πληρώστε το τιμολόγιο για ολοκλήρωση"
 planName = "Editor"
 ssoIncluded = "SSO περιλαμβάνεται"
 switchOnProcessor = "Ενεργοποίηση Processor →"
 unlimitedUsers = "Απεριόριστοι χρήστες"
+viewQuote = "Προβολή προσφοράς"
 
 [portal.billing.invoices]
 columnAmount = "Ποσό"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Άμεσα API αιτήματα"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Αυτοματισμοί και pipelines"
 segmentAutomationLabel = "Αυτοματισμός"
+sizeMultiplier = "{{formatted}} PDFs χρησιμοποίησαν πολλαπλασιαστή μεγέθους"
+summary = "{{unique}} μοναδικά · {{units}} μονάδες μέτρησης · {{avg}} μέσος όρος ανά PDF"
+summaryNoRate = "{{unique}} μοναδικά · {{units}} μονάδες μέτρησης"
 unit = "μετρημένα PDFs"
+unitsPending_one = "{{units}} μονάδα μέτρησης εκκρεμεί για συγχρονισμό από συνδεδεμένες παρουσίες"
+unitsPending_other = "{{units}} μονάδες μέτρησης εκκρεμούν για συγχρονισμό από συνδεδεμένες παρουσίες"
+
+[portal.billing.prepaid]
+capSuffix = "από {{total}} προπληρωμένες πιστώσεις"
+expires = "Λήγει στις {{date}}"
+eyebrow = "Προπληρωμένη χωρητικότητα"
+note = "Χρησιμοποιείται πριν από τη χρέωση βάσει χρήσης και εκτός του ορίου δαπανών σας."
+topUp = "Συμπλήρωση"
+
+[portal.billing.prepaid.buy]
+back = "Πίσω"
+calcTitle = "Υπολογίστε την ετήσια πληρωμή σας"
+cancel = "Ακύρωση"
+cancelPurchase = "Ακύρωση αγοράς"
+close = "Κλείσιμο"
+continueToPayment = "Συνέχεια στην πληρωμή"
+finalise = "Οριστικοποίηση"
+invoiceErrorTitle = "Δεν ήταν δυνατή η δημιουργία του τιμολογίου"
+loadingTitle = "Φόρτωση της προσφοράς σας"
+payTitle = "Πληρώστε για το έτος σας"
+step = "Βήμα {{current}} από {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Αλλαγή"
+deployRow = "Ανάπτυξη"
+done = "Τέλος"
+enterpriseHint = "Αυτό είναι επίπεδο enterprise. Σε αυτόν τον όγκο, οι enterprise τιμές ξεπερνούν οποιαδήποτε έκπτωση self-serve. Κλείδωμα τιμής, όροι και προσφορά σε λίγα λεπτά."
+governanceRow = "Διακυβέρνηση"
+governanceValue = "{{label}} · {{count}} πολιτικές"
+handlesLabel = "Ο Processor σας"
+handlesValue = "διαχειρίζεται {{volume}} πιστώσεις / μήνα"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} πολιτικές"
+poolCaption = "Μία δεξαμενή {{credits}} πιστώσεων για το έτος. Οι βαριοί μήνες δανείζονται από τους ελαφριούς."
+priceLabel = "Το έτος σας · 12 μήνες στην τιμή των 10"
+rateUnknown = "Θα εμφανίσουμε την ακριβή τιμή στο checkout."
+savings = "Εξοικονομείτε {{amount}} · 2 μήνες δωρεάν."
+sizingRow = "Μέγεθος"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Σύνολο χρηστών"
+
+[portal.billing.prepaid.consent]
+label = "Κατανοώ ότι όταν η προπληρωμένη χωρητικότητά μου εξαντληθεί ή λήξει μετά από 12 μήνες, η επεξεργασία συνεχίζεται αυτόματα με την τυπική μετρημένη τιμή πληρωμής ανά χρήση (έως το όριο δαπανών μου) εκτός αν ακυρώσω, και ότι μπορώ να ακυρώσω οποιαδήποτε στιγμή από την πύλη χρεώσεων."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Διαχειρίζεται από το Stirling. Ζωντανό σε λίγα λεπτά."
+cloudValue = "Stirling Cloud · Διαχειριζόμενο"
+selfhost = "Self-hosted"
+selfhostDesc = "Εκτελείται σε ιδιωτική υποδομή. Ίδια τιμή."
+selfhostValue = "Self-hosted · Ιδιωτική υποδομή"
+
+[portal.billing.prepaid.offer]
+cta = "Έλεγχος προσφοράς"
+subtitle = "Προπληρώστε ένα έτος επεξεργασίας PDF και λάβετε δύο μήνες δωρεάν, που χρησιμοποιούνται πριν από τη χρέωση βάσει χρήσης, εκτός του ορίου δαπανών σας."
+title = "Πάρτε 12 μήνες στην τιμή των 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Όνομα κατόχου λογαριασμού"
+accountNamePlaceholder = "π.χ. Jane Smith"
+companyName = "Όνομα εταιρείας (προαιρετικό)"
+companyNamePlaceholder = "π.χ. Acme Inc."
+downloadInvoice = "Λήψη τιμολογίου"
+payOnline = "Πληρωμή online"
+poNumber = "Αριθμός PO (προαιρετικό)"
+poNumberPlaceholder = "π.χ. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Προχωρημένο"
+advancedDesc = "Τα pipelines οδηγούν το μεγαλύτερο μέρος της επεξεργασίας σας."
+none = "Κανένα"
+noneDesc = "Δεν εκτελείτε pipelines ακόμη. Ενεργοποιήστε τα οποιαδήποτε στιγμή."
+standard = "Τυπικό"
+standardDesc = "Μερικά pipelines επανεπεξεργάζονται τα εισερχόμενα PDFs."
+
+[portal.billing.prepaid.posture]
+essentials = "Βασικά"
+essentialsDesc = "Ταξινόμηση, η προεπιλογή, συν Κοινή χρήση"
+governed = "Με διακυβέρνηση"
+governedDesc = "Προσθέτει Ασφάλεια και Δρομολόγηση"
+regulated = "Ρυθμιζόμενο"
+regulatedDesc = "Κάθε κατηγορία, συμπ. Συμμόρφωση, Διατήρηση, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Λήψη προσφοράς (PDF)"
+downloading = "Προετοιμασία…"
+share = "κοινή χρήση για έγκριση"
+
+[portal.billing.prepaid.size]
+compact = "Συμπαγές"
+compactDesc = "Αρχεία κάτω από 25 MB, χωρίς χρεώσεις δεδομένων"
+heavy = "Βαρύ"
+heavyDesc = "Σαρωμένα ή με πολλές εικόνες, συνήθως 50 MB+"
+standard = "Τυπικό"
+standardDesc = "Κυρίως μικρά, μερικές σαρώσεις πάνω από 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Εξαντλήθηκε"
+healthy = "Απομένουν πολλά"
+low = "Εξαντλείται"
 
 [portal.billing.spendLimit]
 adjustLimit = "Προσαρμογή ορίου"
@@ -6494,6 +6608,8 @@ label = "Προβλέπεται υπέρβαση."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Δαπάνη αυτόν τον μήνα"
+freeRemaining_one = "Απομένει {{formatted}} δωρεάν PDF"
+freeRemaining_other = "Απομένουν {{formatted}} δωρεάν PDFs"
 processed_one = "{{formattedCount}} PDF επεξεργάστηκε."
 processed_other = "{{formattedCount}} PDFs επεξεργάστηκαν."
 processedWithRate_one = "{{formattedCount}} PDF επεξεργάστηκε, με {{rate}} το καθένα."
@@ -6534,6 +6650,350 @@ signature = "υπογραφή"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Νέα σύνδεση"
+createTitleFor = "Σύνδεση {{name}}"
+delete = "Διαγραφή"
+edit = "Επεξεργασία"
+editTitle = "Επεξεργασία σύνδεσης"
+unsupportedType = "Αυτός ο τύπος σύνδεσης δεν μπορεί να επεξεργαστεί εδώ."
+
+[portal.connections.categories.advanced]
+description = "Για μια υπηρεσία που δεν υποστηρίζουμε ακόμη."
+label = "Προχωρημένα"
+
+[portal.connections.categories.audit]
+description = "Καταγράψτε τι συνέβη σε ένα έγγραφο, εκεί όπου ήδη κοιτούν οι ελεγκτές σας."
+label = "Καταγραφή ελέγχου & συμμόρφωσης"
+
+[portal.connections.categories.notify]
+description = "Ενημερώστε ένα άλλο σύστημα ότι κάτι συνέβη."
+label = "Ειδοποίηση & ροή εργασίας"
+
+[portal.connections.categories.security]
+description = "Σαρώστε ή επισημάνετε ένα έγγραφο πριν προχωρήσει."
+label = "Ασφάλεια & ταξινόμηση"
+
+[portal.connections.categories.signing]
+description = "Στείλτε ένα έγγραφο για υπογραφή ή συμβολαιογραφική επικύρωση."
+label = "Ηλεκτρονική υπογραφή & συμβολαιογραφική επικύρωση"
+
+[portal.connections.categories.storage]
+description = "Πού καταλήγουν τα επεξεργασμένα έγγραφα - ένα bucket, ένα drive, ένα ticket ή μια σελίδα."
+label = "Αρχείο & επισύναψη"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Το Stirling το αποθηκεύει κρυπτογραφημένο και δεν το εμφανίζει ποτέ ξανά."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Τα βήματα που χρησιμοποιούν αυτή τη σύνδεση μπορούν να καλούν μόνο διαδρομές κάτω από αυτό το URL, ποτέ άλλο host."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Κωδικός πρόσβασης"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Όνομα χρήστη"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Επικολλήστε το URL που σας έδωσε η υπηρεσία. Μόνο διαδρομές κάτω από αυτό μπορούν να καλούνται."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Όνομα σύνδεσης"
+namePlaceholder = "π.χ. Παραγωγή"
+
+[portal.connections.picker]
+cancel = "Ακύρωση"
+createNew = "Νέα σύνδεση..."
+placeholder = "Επιλέξτε σύνδεση"
+save = "Αποθήκευση σύνδεσης"
+
+[portal.connections.picker2]
+back = "Αλλαγή ενσωμάτωσης"
+heading = "Τι θέλετε να συνδέσετε;"
+noResultsBody = "Δεν το υποστηρίζουμε ακόμη - πείτε μας γι' αυτό και θα εξετάσουμε την προσθήκη του."
+noResultsTitle = "Δεν ταιριάζει τίποτα με \"{{query}}\""
+searchPlaceholder = "Αναζήτηση ενσωματώσεων - δοκιμάστε \"sign\", \"ocr\" ή ένα όνομα προϊόντος"
+
+[portal.connections.types.api]
+description = "Καλέστε οποιοδήποτε HTTP API από μια πολιτική. Επιλέγετε το URL, τον έλεγχο ταυτότητας και το payload."
+label = "Προσαρμοσμένο API"
+
+[portal.connections.types.api.fields.authType]
+label = "Έλεγχος ταυτότητας"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Όνομα χρήστη και κωδικός πρόσβασης"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token σε προσαρμοσμένο header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Κανένα"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Σύνδεση για token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Τα βήματα που χρησιμοποιούν αυτή τη σύνδεση μπορούν να καλούν μόνο διαδρομές κάτω από αυτό το URL, ποτέ άλλο host."
+label = "Βασικό URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Όνομα header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Διαδρομή σύνδεσης"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Κωδικός πρόσβασης"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Αν το API απαντήσει με σύνδεσμο λήψης, μόνο αυτοί οι hosts μπορούν να ανακτηθούν. Διαχωρίστε με κόμματα. Αφήστε κενό για να επιτρέπεται μόνο ο ίδιος host του βασικού URL."
+label = "Επιτρεπόμενοι hosts αποτελεσμάτων"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Στείλτε το token ως αυτό το header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Το response header στο οποίο η κλήση σύνδεσης επιστρέφει το token, π.χ. X-Auth-Token."
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "Όνομα χρήστη"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Σάρωση εγγράφων για malware σε server που εκτελείτε - τίποτα δεν φεύγει από το δίκτυό σας."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Σάρωση ιών και περιεχομένου για έγγραφα σε μια πολιτική."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Αποκλεισμός εγγράφων που περιέχουν macros, εκτελέσιμα, scripts ή ενσωματωμένα αντικείμενα - όχι μόνο γνωστό malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Επισύναψη επεξεργασμένων εγγράφων σε σελίδα Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Στείλτε έγγραφα στο ConsignO Cloud (Notarius) για ηλεκτρονική υπογραφή και συμβολαιογραφική επικύρωση."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Το περιβάλλον ConsignO Cloud σας, συμπεριλαμβανομένου του /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Κωδικός πρόσβασης"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Απαιτείται μόνο αν ο οργανισμός σας χρησιμοποιεί tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Όνομα χρήστη"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Δημοσίευση μηνύματος στο Discord όταν μια πολιτική επεξεργάζεται ένα έγγραφο."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Ευρετηρίαση audit event στο Elasticsearch κάθε φορά που μια πολιτική χειρίζεται ένα έγγραφο."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Έλεγχος ενός FTP ή FTPS server για νέα έγγραφα."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Λειτουργία σύνδεσης"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Ενεργή"
+passive = "Παθητική (συνιστάται)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Το απλό FTP στέλνει διαπιστευτήρια και αρχεία χωρίς κρυπτογράφηση· επιλέξτε FTPS αν το υποστηρίζει ο server."
+label = "Κρυπτογράφηση"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Κανένα (απλό FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Δημοσίευση μηνύματος σε χώρο Google Chat όταν εκτελείται μια πολιτική."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Επισύναψη επεξεργασμένων εγγράφων σε ζήτημα Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Αποστολή email με έγγραφο ή ειδοποίηση όταν εκτελείται μια πολιτική."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Αρχειοθέτηση επεξεργασμένων εγγράφων στο Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Κωδικός πρόσβασης εφαρμογής"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Ανίχνευση προσωπικών δεδομένων σε κείμενο εγγράφου χρησιμοποιώντας έναν Presidio server που εκτελείτε."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Ανάγνωση και εφαρμογή ετικετών ευαισθησίας Microsoft Purview σε PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Προαιρετικό. Απαιτείται μόνο για επιλογή ετικετών με βάση το όνομα· η επισήμανση λειτουργεί χωρίς αυτό."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Σφραγίζεται σε κάθε ετικέτα ως SiteId, ώστε τα εργαλεία που γνωρίζουν το Purview να ξέρουν ποιος οργανισμός την εφάρμοσε."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Ένα S3 bucket από το οποίο οι πηγές μπορούν να διαβάζουν και στο οποίο οι έξοδοι pipeline μπορούν να γράφουν."
+label = "Αποθήκευση S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Αφήστε κενό για AWS. Ορίστε το για MinIO ή άλλο αποθηκευτικό χώρο συμβατό με S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Αποστολή email με έγγραφο ή ειδοποίηση όταν εκτελείται μια πολιτική."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Έλεγχος ενός SFTP (SSH) server για νέα έγγραφα."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Προαιρετικό. Το SHA-256 host key fingerprint του server (από `ssh-keyscan host | ssh-keygen -lf -`). Όταν οριστεί, γίνεται αποδεκτός μόνο server που παρουσιάζει αυτό το key· όταν είναι κενό, το key που εμφανίζεται στην πρώτη σύνδεση καρφιτσώνεται και μεταγενέστερες αλλαγές απορρίπτονται."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Αφήστε κενό αν κάνετε έλεγχο ταυτότητας με private key αντί για κωδικό πρόσβασης."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Προαιρετικό. Επικολλήστε ένα OpenSSH private key για έλεγχο ταυτότητας με key αντί για κωδικό πρόσβασης."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Δημοσίευση μηνύματος στο Slack όταν μια πολιτική επεξεργάζεται ένα έγγραφο."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Παρακολούθηση ενός SMB / CIFS network share (Windows ή Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Προαιρετικό. Το Windows domain ή workgroup, αν ο server σας χρησιμοποιεί κάποιο."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Αποστολή audit event στο Splunk κάθε φορά που μια πολιτική χειρίζεται ένα έγγραφο."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Αποστολή audit event σε Sumo Logic HTTP collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Δημοσίευση μηνύματος σε κανάλι Teams όταν εκτελείται μια πολιτική."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Δημοσίευση κάθε εγγράφου, ή μόνο των λεπτομερειών, σε URL που επιλέγετε."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Ενεργοποίηση Zap ή Make scenario από μια πολιτική."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Περιήγηση στα docs"
+viewSource = "Προβολή πηγαίου κώδικα στο GitHub"
+
 [portal.docs.authentication]
 codeCaption = "κάθε αίτημα"
 eyebrow = "ΞΕΚΙΝΩΝΤΑΣ"
@@ -6619,11 +7079,19 @@ title = "Επίσημα SDKs"
 beta = "Beta"
 deprecated = "Καταργημένο"
 
+[portal.docs.search]
+empty = "Δεν υπάρχουν αντίστοιχα docs"
+placeholder = "Αναζήτηση docs"
+results = "{{count}} αποτελέσματα"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Συσκευασμένες, ονομασμένες δυνατότητες που ο πράκτοράς σας καλεί ως ένα ενιαίο εργαλείο. Κάθε skill είναι μια ντετερμινιστική αλυσίδα λειτουργιών με συνδεδεμένα evals."
 title = "Agent skills"
 
+[portal.docs.toc]
+title = "Σε αυτήν τη σελίδα"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "Τύπος"
 user = "Χρήστης"
 
 [portal.documents.queue.empty]
+connectSource = "Σύνδεση πηγής"
+createPipeline = "Δημιουργία pipeline"
 description = "Καθώς οι πηγές τροφοδοτούν έγγραφα στις ροές εργασίας σας, θα εμφανίζονται εδώ για έλεγχο."
 title = "Δεν υπάρχουν έγγραφα στην ουρά"
 
@@ -6806,13 +7276,71 @@ description = "Αυτή η προβολή αντιμετώπισε ένα απρ
 retry = "Δοκιμάστε ξανά"
 title = "Κάτι πήγε στραβά σε αυτήν τη σελίδα"
 
+[portal.home.download]
+back = "Πίσω"
+body = "Κατεβάστε την εφαρμογή desktop ή φιλοξενήστε μόνοι σας τον server."
+done = "Τέλος"
+guide = "Άνοιγμα του οδηγού {{name}}"
+openInBrowser = "Άνοιγμα στο browser αντί γι' αυτό"
+sectionDesktop = "Εφαρμογή desktop"
+sectionSelfHosted = "Self-hosted"
+title = "Εγκατάσταση του Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Εκτελέστε την επίσημη image στον server σας."
+note = "Ανοίγει στο :8080. Προεπιλεγμένη σύνδεση: admin / stirling."
+tagline = "Εκτελέστε τον server σε container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Εγκαταστήστε το επίσημο Helm chart."
+note = "Προσθέστε ένα PVC για το /configs ώστε να διατηρούνται οι ρυθμίσεις."
+tagline = "Αναπτύξτε σε cluster με Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Native builds για τη διανομή σας."
+guideBtn = "Προβολή επιλογών εγκατάστασης Linux"
+note = "Διατίθενται AppImage, .deb και .rpm builds για κοινές διανομές."
+tagline = "Native εφαρμογή desktop για τη διανομή σας"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ή μέσω Homebrew"
+detailBody = "Εκτελέστε το πρόγραμμα εγκατάστασης ή χρησιμοποιήστε Homebrew."
+downloadBtn = "Λήψη για macOS"
+tagline = "Native εφαρμογή για Apple silicon και Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Εκτελέστε το .jar σε bare metal server."
+downloadBtn = "Λήψη του .jar"
+note = "Απαιτεί Java 21+. Ανοίγει στο :8080· προεπιλεγμένη σύνδεση admin / stirling."
+runLabel = "Έπειτα εκτελέστε το"
+tagline = "Εκτελέστε το .jar σε bare metal server"
+title = "Χειροκίνητη ρύθμιση server"
+
+[portal.home.download.windows]
+altLabel = "Ή μέσω winget"
+detailBody = "Εκτελέστε το πρόγραμμα εγκατάστασης ή χρησιμοποιήστε package manager."
+downloadBtn = "Λήψη προγράμματος εγκατάστασης"
+tagline = "Native εφαρμογή για Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} ενεργοί"
-invite = "Προσκαλέστε συνεργάτες"
+activeOfDeployed = "{{active}} από {{total}} ενεργά αυτόν τον μήνα"
 name = "Stirling PDF Editor"
 open = "Άνοιγμα σε browser"
 updated = "ενημερώθηκε {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Ολοκλήρωση ανάπτυξης"
+options = "Προβολή επιλογών ανάπτυξης"
+start = "Ανάπτυξη του Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Καλό απόγευμα"
 evening = "Καλό βράδυ"
 morning = "Καλημέρα"
 
-[portal.home.onboarding]
-dismiss = "Παράβλεψη ρύθμισης"
-notStarted = "Δεν ξεκίνησε"
-progress = "{{done}} από {{total}} ολοκληρώθηκαν"
-title = "Ολοκληρώστε τη ρύθμιση"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC σε επίπεδο οργανισμού, δεσμευμένη τιμολόγηση όγκου και air-gapped ανάπτυξη."
-cta = "Έναρξη δοκιμής"
-ctaQuote = "Λήψη προσφοράς"
-lead = "Για 250+ εργαζομένους."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Αναπτύξτε την εφαρμογή desktop, δωρεάν για πάντα."
-title = "Λήψη του PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} ενεργές · {{recommended}} προτεινόμενες"
-chip = "{{active}} ενεργές"
-title = "Ενεργοποίηση πολιτικών"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} συνδεδεμένες · κάθε PDF ελεγχόμενο όπου κι αν καταλήγει"
-chip = "{{connected}} συνδεδεμένες"
-title = "Συνδέστε τις πηγές σας"
-
-[portal.home.quickActions]
-subtitle = "Κορυφαίες εργασίες για σήμερα"
-title = "Γρήγορες ενέργειες"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Συνθέτης 3 βημάτων πάνω στη βιβλιοθήκη typed op"
-title = "Δημιουργία ροής εργασίας"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, παρακολουθούμενοι φάκελοι"
-title = "Σύνδεση πηγής"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Scoped key με όρια ρυθμού και IP allowlist"
-title = "Έκδοση API key"
-
 [portal.infrastructure]
 manageEditorDeployment = "Διαχείριση ανάπτυξης Editor"
 sectionsAriaLabel = "Ενότητες υποδομής"
@@ -6878,13 +7363,9 @@ heading = "API keys"
 subheading = "Scoped διαπιστευτήρια με όρια ρυθμού ανά key, δικαιώματα και IP allowlists."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Επιτρεπόμενες IPs"
-anyIp = "Οποιαδήποτε IP (χωρίς allowlist)"
 created = "Δημιουργήθηκε"
 lastUsed = "Τελευταία χρήση"
-permissions = "Δικαιώματα"
-rateLimit = "Όριο ρυθμού"
-rateLimitValue = "{{value}} αιτ./λεπτό"
+revoke = "Ανάκληση κλειδιού"
 usageMonth = "Χρήση αυτόν τον μήνα"
 usageToday = "Χρήση σήμερα"
 
@@ -6892,6 +7373,20 @@ usageToday = "Χρήση σήμερα"
 description = "Δημιουργήστε ένα scoped key για να αρχίσετε να καλείτε το Stirling API."
 title = "Δεν υπάρχουν API keys ακόμα"
 
+[portal.infrastructure.apiKeys.error]
+load = "Δεν ήταν δυνατή η φόρτωση των API κλειδιών σας. Δοκιμάστε ξανά."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Να ανακληθεί το \"{{name}}\"; Οποιαδήποτε ενσωμάτωση εξακολουθεί να χρησιμοποιεί αυτό το κλειδί θα αρχίσει αμέσως να λαμβάνει σφάλματα 401. Αυτό δεν μπορεί να αναιρεθεί."
+cancel = "Ακύρωση"
+confirm = "Ανάκληση κλειδιού"
+title = "Ανάκληση API κλειδιού"
+
+[portal.infrastructure.attestationLabel]
+attested = "Βεβαιωμένο"
+inScope = "Εντός πεδίου"
+notApplicable = "Δ/Υ"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Φιλτράρισμα συμβάντων ελέγχου κατά κατηγορία"
 heading = "Αρχεία καταγραφής ελέγχου"
@@ -6935,6 +7430,7 @@ all = "Όλα"
 auth = "Auth"
 config = "Config"
 elevation = "Αναβάθμιση πρόσβασης"
+policy = "Πολιτική"
 processing = "Επεξεργασία"
 security = "Ασφάλεια"
 
@@ -6944,19 +7440,35 @@ title = "Δεν έχετε πρόσβαση"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Αναβάθμιση πρόσβασης"
+policy = "Πολιτική"
 processing = "Επεξεργασία"
 totalEvents = "Συνολικά συμβάντα · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Έλεγχος ταυτότητας"
+config = "Ρύθμιση"
+elevation = "Αναβάθμιση δικαιωμάτων"
+policy = "Πολιτική"
+processing = "Επεξεργασία"
+security = "Ασφάλεια"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Σφάλμα"
+info = "Πληροφορίες"
+success = "Επιτυχία"
+warning = "Προειδοποίηση"
+
+[portal.infrastructure.certLabel]
+certified = "Πιστοποιημένο"
+inProgress = "Σε εξέλιξη"
+notStarted = "Δεν έχει ξεκινήσει"
+
 [portal.infrastructure.createKey]
 cancel = "Ακύρωση"
 createKey = "Δημιουργία key"
 done = "Τέλος"
-ipAllowlistHelper = "CIDR ranges χωρισμένα με κόμματα. Αφήστε κενό για να επιτρέψετε οποιαδήποτε IP."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Όνομα key"
 keyNamePlaceholder = "π.χ. Production · ingest"
-permissionsLabel = "Δικαιώματα"
 secretKeyCaption = "Secret key"
 secretWarning = "Αποθηκεύστε το σε secrets manager. Το Stirling αποθηκεύει πάντα μόνο hash — δεν υπάρχει τρόπος ανάκτησής του αργότερα."
 subtitle = "Περιορίστε το key στο ελάχιστο που χρειάζεται. Μπορείτε να το περιστρέψετε ή να το ανακαλέσετε ανά πάσα στιγμή."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Αντιγράψτε αυτό το secret τώρα — δεν
 title = "Δημιουργία API key"
 titleCreated = "Το key δημιουργήθηκε"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "Σε ουρά"
+rolledBack = "Έγινε rollback"
+rolling = "Σε ανάπτυξη"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/λεπτό"
@@ -6999,6 +7517,15 @@ subheading = "Ζωντανή υγεία για κάθε αναπτυγμένη 
 description = "Οι αναπτυγμένες περιοχές εμφανίζονται εδώ μόλις γίνει provision ο χώρος εργασίας σας."
 title = "Δεν έχουν αναπτυχθεί περιοχές"
 
+[portal.infrastructure.keyLabel]
+active = "Ενεργό"
+revoked = "Ανακλημένο"
+
+[portal.infrastructure.modelLabel]
+active = "Ενεργό"
+degraded = "Υποβαθμισμένο"
+disabled = "Απενεργοποιημένο"
+
 [portal.infrastructure.models]
 heading = "Μοντέλα"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Κατάσταση"
 type = "Τύπος"
 version = "Έκδοση"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/κλήση"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Ενεργά μοντέλα"
 avgLatency = "Μέση καθυστέρηση"
@@ -7049,6 +7580,17 @@ modelForAria = "Μοντέλο για {{operation}}"
 operation = "Λειτουργία"
 routedTo = "Δρομολογείται σε"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Ταξινόμηση"
+extraction = "Εξαγωγή"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Υποβαθμισμένη"
+down = "Εκτός λειτουργίας"
+healthy = "Υγιής"
+
 [portal.infrastructure.security.access.byok]
 description = "Παρέχετε ένα key από το δικό σας KMS. Το Stirling κρυπτογραφεί με αυτό αλλά μπορεί ακόμα να διαβάζει."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Μοντέλα"
 security = "Ασφάλεια"
 storage = "Αποθήκευση"
 
+[portal.integrations]
+addAnother = "Προσθήκη άλλου"
+availableHeading = "Διαθέσιμες"
+comingSoonHeading = "Προσεχώς"
+connect = "Σύνδεση"
+connectedHeading = "Συνδεδεμένες"
+connectionCount_one = "{{count}} σύνδεση"
+connectionCount_other = "{{count}} συνδέσεις"
+customApi = "Προσαρμοσμένο API"
+searchPlaceholder = "Αναζήτηση ενσωματώσεων"
+subtitle = "Όλα με τα οποία μπορεί να επικοινωνήσει το Stirling. Τα διαπιστευτήρια δημιουργούνται μία φορά εδώ και στη συνέχεια αναφέρονται από πηγές, πολιτικές και pipelines."
+title = "Ενσωματώσεις"
+typedName = "Όνομα {{tool}}"
+
+[portal.integrations.filters]
+all = "Όλα"
+audit = "Έλεγχος"
+connected = "Συνδεδεμένες"
+notify = "Ειδοποίηση"
+security = "Ασφάλεια"
+signing = "Υπογραφή"
+storage = "Αποθήκευση"
+
+[portal.integrations.status]
+connected = "Συνδεδεμένο"
+
+[portal.integrations.table]
+integration = "Ενσωμάτωση"
+worksWith = "Λειτουργεί με"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Πολιτικές"
+sources = "Πηγές"
+
+[portal.legal]
+draft = "{{label}} · πρόχειρο"
+loadError = "Δεν ήταν δυνατή η φόρτωση αυτού του εγγράφου. Δοκιμάστε ξανά."
+loading = "Φόρτωση…"
+title = "Νομικό έγγραφο"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Components"
@@ -7182,6 +7765,7 @@ documents = "Έγγραφα"
 editor = "Editor"
 home = "Αρχική"
 infrastructure = "Υποδομή"
+integrations = "Ενσωματώσεις"
 pipelines = "Ροές εργασίας"
 policies = "Πολιτικές"
 procurement = "Προμήθειες"
@@ -7190,25 +7774,9 @@ sources = "Πηγές"
 usage = "Χρήση & Χρέωση"
 users = "Χρήστες"
 
-[portal.notifications]
-markAllRead = "Σήμανση όλων ως αναγνωσμένων"
-title = "Ειδοποιήσεις"
-viewAll = "Προβολή όλων"
-
-[portal.notifications.ariaLabel]
-none = "Ειδοποιήσεις, καμία μη αναγνωσμένη"
-unread_one = "Ειδοποιήσεις, {{count}} μη αναγνωσμένη"
-unread_other = "Ειδοποιήσεις, {{count}} μη αναγνωσμένες"
-
-[portal.notifications.count]
-allRead = "όλες αναγνωσμένες"
-loading = "φόρτωση"
-new_one = "{{count}} νέα"
-new_other = "{{count}} νέες"
-
-[portal.notifications.empty]
-description = "Δεν υπάρχουν νέες ειδοποιήσεις."
-title = "Είστε ενήμεροι"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Κάθε αυτοματοποιημένη ροή εργασίας εγγράφων στο backend: μια διατεταγμένη αλυσίδα λειτουργιών πάνω σε ένα σύνολο πηγών, που εκτελείται με trigger. Κάντε κλικ σε μια γραμμή για τα βήματα και τις πηγές της."
@@ -7220,15 +7788,28 @@ newPipeline = "Νέα ροή εργασίας"
 [portal.pipelines.builder]
 addStep = "Προσθήκη εργαλείου"
 back = "Πίσω στις ροές εργασίας"
+cannotFollow = "Δεν μπορεί να δεχτεί {{produced}}"
+chooseAccount = "Επιλέξτε λογαριασμό"
+chooseDestination = "Επιλέξτε προορισμό"
+chooseOperation = "Επιλέξτε τι κάνει αυτό το βήμα"
+chooseSource = "Επιλέξτε πηγή"
 discard = "Απόρριψη αλλαγών"
 enabled = "Ενεργό"
+inputs = "Είσοδος"
+inputSource = "Πηγή εισόδου"
+inputTrigger = "Trigger"
 keepEditing = "Συνέχιση επεξεργασίας"
+needsConfiguring = "Χρειάζεται ρύθμιση"
 needsUpload = "Χρειάζεται μεταφορτωμένο αρχείο"
+noSources = "Δεν έχουν συνδεθεί ακόμα πηγές. Δημιουργήστε μία για να τη χρησιμοποιήσετε ως είσοδο."
 noToolMatches = "Κανένα εργαλείο δεν ταιριάζει στην αναζήτησή σας."
 pipelineSettings = "Ρυθμίσεις ροής εργασίας"
 searchTools = "Αναζήτηση εργαλείων"
 selectToolBody = "Προσθέστε ένα εργαλείο για να δημιουργήσετε τη ροή εργασίας σας."
 selectToolTitle = "Δεν υπάρχουν εργαλεία ακόμα"
+sendToSystem = "Αποστολή σε άλλο σύστημα"
+stepsIncompatible = "Αυτά τα βήματα δεν μπορούν να εκτελεστούν σε αυτό που παράγει το προηγούμενο βήμα τους: {{tools}}."
+stepsNeedSetup = "Αυτά τα βήματα χρειάζονται ακόμα ρύθμιση πριν από την αποθήκευση: {{tools}}."
 toolSettings = "Ρυθμίσεις εργαλείου"
 unknownStep = "Μη αναγνωρισμένη λειτουργία, διατηρήθηκε ως έχει."
 unsavedBody = "Έχετε μη αποθηκευμένες αλλαγές. Αποθηκεύστε τις πριν φύγετε ή απορρίψτε τις;"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Μη αποθηκευμένες αλλαγές"
 uploadUnsupported = "Τα μεταφορτωμένα αρχεία δεν υποστηρίζονται ακόμα στις ροές εργασίας, επομένως αυτά τα βήματα δεν μπορούν να αποθηκευτούν: {{tools}}."
 usesDefaults = "Εκτελείται με προεπιλεγμένες ρυθμίσεις"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Συνδυάζει κάθε αρχείο από το προηγούμενο βήμα"
+fan-out = "Εκτελείται μία φορά ανά αρχείο από το προηγούμενο βήμα"
+format-mismatch = "Χρειάζεται {{accepts}}, αλλά το προηγούμενο βήμα παράγει {{produced}}"
+output-uncertain = "Ενδέχεται να μην εκτελεστεί: η έξοδος του προηγούμενου βήματος εξαρτάται από τον τρόπο ρύθμισής του"
+source-mismatch = "Χρειάζεται {{accepts}}, αλλά η είσοδος αυτού του pipeline είναι {{produced}}"
+undeclared-operation = "Δεν μπορεί να ελεγχθεί τι δέχεται αυτό το βήμα"
+
 [portal.pipelines.composer]
 addTool = "Προσθήκη εργαλείου"
 cancel = "Ακύρωση"
 chainEmpty = "Προσθέστε ένα εργαλείο για να αρχίσετε να δημιουργείτε τη ροή εργασίας σας."
 create = "Δημιουργία ροής εργασίας"
-directory = "Φάκελος εξόδου"
-directoryHelp = "Απόλυτη διαδρομή στον server. Πρέπει να βρίσκεται μέσα στους διαμορφωμένους επιτρεπόμενους φακέλους."
 editingUnsupported = "Η εμφάνιση αυτών των παραμέτρων εργαλείου για επεξεργασία δεν υποστηρίζεται ακόμα."
 moveDown = "Μετακίνηση κάτω"
 moveUp = "Μετακίνηση πάνω"
 name = "Όνομα"
 namePlaceholder = "π.χ. Redaction sweep"
-noSources = "Δεν έχουν συνδεθεί πηγές ακόμα. Η ροή εργασίας μπορεί ακόμα να εκτελείται σε αρχεία που παρέχονται απευθείας σε αυτήν."
 noToolSettings = "Αυτό το εργαλείο δεν έχει διαμορφώσιμες ρυθμίσεις."
 operations_one = "Λειτουργία ({{count}})"
 operations_other = "Λειτουργίες ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Διαγραφή"
 title = "Διαγραφή ροής εργασίας;"
 
 [portal.pipelines.detail]
+clearHistory = "Εκκαθάριση ιστορικού"
 delete = "Διαγραφή ροής εργασίας"
 run = "Εκτέλεση τώρα"
 
 [portal.pipelines.empty]
 action = "Δημιουργία ροής εργασίας"
+connectSource = "Σύνδεση πηγής"
 description = "Δημιουργήστε την πρώτη σας ροή εργασίας: επιλέξτε τις πηγές πάνω στις οποίες εκτελείται, συνδέστε τις λειτουργίες σε αλυσίδα και επιλέξτε πού πηγαίνει η έξοδος."
 title = "Δεν υπάρχουν ροές εργασίας ακόμα"
 
@@ -7286,15 +7874,17 @@ active = "Ενεργές"
 paused = "Σε παύση"
 total = "Ροές εργασίας"
 
-[portal.pipelines.output]
-folder = "Εγγραφή σε φάκελο"
-inline = "Επιστροφή αρχείων"
-
 [portal.pipelines.run]
+allProcessed_one = "Δεν υπάρχει τίποτα για εκτέλεση: το {{count}} έγγραφο της πηγής έχει ήδη υποβληθεί σε επεξεργασία."
+allProcessed_other = "Δεν υπάρχει τίποτα για εκτέλεση: όλα τα {{count}} έγγραφα στις πηγές έχουν ήδη υποβληθεί σε επεξεργασία."
 completed_one = "Η εκτέλεση ολοκληρώθηκε."
 completed_other = "Και οι {{count}} εκτελέσεις ολοκληρώθηκαν."
 empty = "Δεν υπάρχει τίποτα για εκτέλεση: οι πηγές δεν είχαν έγγραφα για επεξεργασία."
 failed = "Η εκτέλεση απέτυχε: {{error}}"
+historyCleared = "Το ιστορικό εκκαθαρίστηκε. Η επόμενη εκτέλεση επεξεργάζεται ξανά όλα όσα βρίσκονται τώρα στις πηγές."
+inFlight = "Δεν υπάρχει κάτι νέο για εκτέλεση: τα έγγραφα εξακολουθούν να επεξεργάζονται από προηγούμενη εκτέλεση."
+parked_one = "Δεν υπάρχει τίποτα για εκτέλεση: {{count}} έγγραφο απέτυχε προηγουμένως και έχει τεθεί σε αναμονή. Διορθώστε την αιτία και έπειτα εκκαθαρίστε το ιστορικό για να το δοκιμάσετε ξανά."
+parked_other = "Δεν υπάρχει τίποτα για εκτέλεση: {{count}} έγγραφα απέτυχαν προηγουμένως και έχουν τεθεί σε αναμονή. Διορθώστε την αιτία και έπειτα εκκαθαρίστε το ιστορικό για να τα δοκιμάσετε ξανά."
 running = "Η εκτέλεση ξεκίνησε· βρίσκεται ακόμα σε εξέλιξη."
 timeout = "Η εκτέλεση διαρκεί περισσότερο από το αναμενόμενο· μπορεί ακόμα να ολοκληρωθεί στο παρασκήνιο."
 
@@ -7314,12 +7904,18 @@ manual = "Χειροκίνητο"
 schedule = "Προγραμματισμένο"
 
 [portal.policies]
+defaultName = "Πολιτική {{category}}"
 subtitle = "Μόνιμοι αυτοματισμοί που επιβάλλουν μια ροή εργασίας εργαλείων σε κάθε έγγραφο. Κάθε πολιτική ενεργοποιείται κατά τη μεταφόρτωση ή την εξαγωγή, εκτελεί την αλυσίδα εργαλείων της και αποθηκεύει την επιβεβλημένη έκδοση μαζί με το πρωτότυπο."
 title = "Πολιτικές"
 
 [portal.policies.card]
 comingSoon = "Αναβάθμιση σε Enterprise"
 notSetUp = "Δεν έχει ρυθμιστεί"
+requiresAiEngine = "Απαιτεί AI engine"
+
+[portal.policies.categories.classification]
+desc = "Αναγνωρίστε τον τύπο κάθε εγγράφου κατά τη μεταφόρτωση και προσθέστε ετικέτες στα μεταδεδομένα του για αρχειοθέτηση και αναζήτηση."
+label = "Ταξινόμηση"
 
 [portal.policies.categories.compliance]
 desc = "Επιβάλλετε απαιτήσεις HIPAA, GDPR, SOC 2 ή FedRAMP σε κάθε έγγραφο."
@@ -7344,6 +7940,13 @@ label = "Ασφάλεια"
 [portal.policies.config]
 scopeAll = "Όλα τα έγγραφα"
 
+[portal.policies.config.classification]
+summary = "Ταξινομεί κάθε μεταφορτωμένο έγγραφο με βάση τις ετικέτες της ομάδας σας και προσθέτει ετικέτες στα μεταδεδομένα του."
+
+[portal.policies.config.classification.rules]
+0 = "Ταξινόμηση"
+1 = "Προσθήκη ετικέτας στα μεταδεδομένα"
+
 [portal.policies.config.compliance]
 summary = "Επικυρώνει έγγραφα έναντι κανονιστικών πλαισίων πριν φύγουν από το σύστημα."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Ελάχιστη βεβαιότητα"
 2 = "Ονομασία"
 3 = "Κανονικοποίηση"
 
+[portal.policies.config.purview]
+label = "Εφαρμογή ετικέτας ευαισθησίας Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "Το GUID της ετικέτας, από το portal Purview. Η εφαρμογή ετικέτας γράφει τα μεταδεδομένα της στο PDF· δεν μπορεί να κρυπτογραφήσει, κάτι που απαιτεί τον Microsoft client."
+labelName = "Όνομα ετικέτας (προαιρετικό)"
+labelNameHelp = "Καταγράφεται μαζί με το ID ώστε οι χρήστες και τα εργαλεία να μπορούν να αναγνωρίζουν την ετικέτα."
+
+[portal.policies.config.purview.fields.method]
+help = "Το Purview διακρίνει μια ετικέτα που εφαρμόστηκε από πολιτική από μία που επέλεξε κάποιος χρήστης."
+label = "Πώς καταγράφεται η ετικέτα"
+privileged = "Ως επιλεγμένη από χρήστη"
+standard = "Ως εφαρμοσμένη αυτόματα"
+
+[portal.policies.config.purviewRead]
+label = "Ανάγνωση ετικέτας Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Διαβάζει την ετικέτα που φέρει ήδη το έγγραφο, ώστε τα επόμενα βήματα να μπορούν να ενεργήσουν βάσει αυτής."
+
 [portal.policies.config.retention]
 summary = "Επιβάλλει πόσο καιρό διατηρούνται τα έγγραφα, πότε αρχειοθετούνται και πότε διαγράφονται."
 
@@ -7438,6 +8064,7 @@ title = "Δεν υπάρχει ακόμη δραστηριότητα"
 [portal.policies.endpoints]
 addWatermark = "Υδατογράφημα"
 autoRedact = "Απόκρυψη PII"
+classifyAndLabel = "Ταξινόμηση"
 compressPdf = "Συμπίεση"
 flatten = "Επιπεδοποίηση"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Οι πολιτικές σας αποθηκεύτηκαν και
 retry = "Επανάληψη"
 title = "Το Backend δεν είναι διαθέσιμο"
 
+[portal.policies.operations]
+change = "Αλλαγή του τι κάνει αυτό το βήμα"
+noResults = "Κανένα βήμα δεν ταιριάζει με αυτό. Δοκιμάστε ένα όνομα προϊόντος ή \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Αναζήτηση βημάτων - δοκιμάστε \"scan\", \"attach\" ή ένα όνομα προϊόντος"
+
+[portal.policies.operations.bodyMode]
+binary = "Ακατέργαστα bytes αρχείου"
+json = "Μέσα σε JSON payload"
+multipart = "Ως μεταφόρτωση αρχείου (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Ο δικός σας ClamAV server ελέγχει το έγγραφο· τίποτα δεν φεύγει από το δίκτυό σας."
+label = "Σάρωση για ιούς (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Απορρίπτει έγγραφα που περιέχουν macros, εκτελέσιμα, scripts ή ενσωματωμένα αντικείμενα."
+label = "Αποκλεισμός ενεργού περιεχομένου"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Το Cloudmersive ελέγχει το έγγραφο και η εκτέλεση σταματά αν δεν είναι καθαρό."
+label = "Σάρωση για ιούς"
+
+[portal.policies.operations.confluenceAttach]
+description = "Αρχειοθετεί το επεξεργασμένο έγγραφο σε μια σελίδα."
+label = "Επισύναψη σε σελίδα Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Υποβάλλει το έγγραφο στο ConsignO Cloud για υπογραφή."
+label = "Αποστολή για υπογραφή (ConsignO)"
+note = "Υποβάλλει το έγγραφο. Η ανάκτηση του υπογεγραμμένου αντιγράφου δεν υποστηρίζεται ακόμα, επειδή ένα βήμα δεν μπορεί να περάσει αποτέλεσμα σε επόμενο βήμα."
+
+[portal.policies.operations.customApiCall]
+description = "Συντάξτε την κλήση μόνοι σας: path, method, body και διαχείριση απόκρισης."
+label = "Κλήση προσαρμοσμένου API"
+
+[portal.policies.operations.discordNotify]
+description = "Ενημερώνει ένα κανάλι ότι η πολιτική χειρίστηκε ένα έγγραφο."
+label = "Δημοσίευση μηνύματος στο Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Καταγράφει αυτό που έκανε η πολιτική ως έγγραφο με δυνατότητα αναζήτησης."
+label = "Ευρετηρίαση συμβάντος ελέγχου στο Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Το multipart ταιριάζει σε upload APIs· το JSON ταιριάζει σε APIs που θέλουν το αρχείο μέσα σε payload· το binary στέλνει τα ακατέργαστα bytes."
+label = "Πώς να σταλεί το έγγραφο"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Ένα JSON body που αποστέλλεται ως έχει. Το {{document.base64}} μεταφέρει το αρχείο· τα {{document.*}} και {{run.*}} συμπληρώνονται ανά έγγραφο."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Λογαριασμός"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Το πεδίο φόρμας κάτω από το οποίο το API αναμένει το έγγραφο."
+label = "Όνομα πεδίου αρχείου"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Από"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Ένα JSON object με ζεύγη ονόματος/τιμής header. Το διαπιστευτήριο της σύνδεσης προστίθεται για εσάς."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Κλειδί ζητήματος"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Αποστέλλεται ως σώμα μηνύματος. Τα {{document.*}} και {{run.*}} συμπληρώνονται ανά έγγραφο."
+label = "Μήνυμα"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Προστίθεται στο base URL της σύνδεσης. Δεν μπορεί ποτέ να φτάσει σε άλλον host."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Πού στο drive να γραφτεί. Το {{document.filename}} συμπληρώνεται ανά έγγραφο."
+label = "Διαδρομή προορισμού"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Η αναφορά αφήνει το έγγραφο ανέπαφο. Η αντικατάσταση το ανταλλάσσει με ό,τι επιστρέφεται."
+label = "Τι να γίνει με την απάντηση"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email υπογράφοντος"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Θέμα"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Το Presidio αναλύει αυτό το κείμενο. Χρησιμοποιήστε {{document.title}} ή επικολλήστε το κείμενο που θέλετε να ελεγχθεί."
+label = "Κείμενο προς έλεγχο"
+
+[portal.policies.operations.fields.to]
+label = "Προς"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Όνομα χρήστη Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Ενημερώνει έναν χώρο ότι η πολιτική χειρίστηκε ένα έγγραφο."
+label = "Δημοσίευση μηνύματος στο Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Αρχειοθετεί το επεξεργασμένο έγγραφο σε ένα ζήτημα."
+label = "Επισύναψη σε ζήτημα Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Στέλνει το επεξεργασμένο έγγραφο ως συνημμένο."
+label = "Αποστολή του εγγράφου με email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Γράφει το επεξεργασμένο έγγραφο σε έναν φάκελο."
+label = "Μεταφόρτωση στο Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Ο δικός σας Presidio server αναφέρει τα προσωπικά δεδομένα που βρίσκει."
+label = "Εντοπισμός προσωπικών δεδομένων"
+note = "Το Presidio διαβάζει κείμενο, όχι αρχεία. Δώστε του το κείμενο που θέλετε να ελεγχθεί — το ίδιο το έγγραφο δεν μεταφορτώνεται."
+
+[portal.policies.operations.responseMode]
+replace = "Αντικατάσταση του εγγράφου με την απάντηση"
+report = "Διατήρηση του εγγράφου, καταγραφή της απάντησης"
+
+[portal.policies.operations.sendgridEmail]
+description = "Στέλνει το επεξεργασμένο έγγραφο ως συνημμένο."
+label = "Αποστολή του εγγράφου με email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Ενημερώνει ένα κανάλι ότι η πολιτική χειρίστηκε ένα έγγραφο."
+label = "Δημοσίευση μηνύματος στο Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Καταγράφει αυτό που έκανε η πολιτική, εκεί όπου ήδη αναζητούν οι ελεγκτές σας."
+label = "Αποστολή συμβάντος ελέγχου στο Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Καταγράφει αυτό που έκανε η πολιτική σε έναν HTTP collector."
+label = "Αποστολή συμβάντος ελέγχου στο Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Ενημερώνει ένα κανάλι ότι η πολιτική χειρίστηκε ένα έγγραφο."
+label = "Δημοσίευση μηνύματος στο Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Στέλνει το ίδιο το έγγραφο σε ένα URL που επιλέγετε."
+label = "Δημοσίευση του εγγράφου σε webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Παραδίδει τις λεπτομέρειες της εκτέλεσης στον αυτοματισμό σας."
+label = "Trigger ενός Zap ή Make scenario"
+
 [portal.policies.stats]
 activeFor = "Ενεργό"
 dataProcessed = "Δεδομένα που επεξεργάστηκαν"
@@ -7473,6 +8277,13 @@ label = "Έγγραφα που επιβλήθηκαν"
 description = "Διαμορφωμένες αλλά δεν ενεργοποιούνται"
 label = "Σε παύση"
 
+[portal.policies.table]
+appliesTo = "Ισχύει για"
+docs = "Έγγραφα επιβληθέντα"
+enforces = "Επιβάλλει"
+policy = "Πολιτική"
+status = "Κατάσταση"
+
 [portal.policies.wizard.actions]
 back = "Πίσω"
 cancel = "Ακύρωση"
@@ -7480,6 +8291,10 @@ continue = "Συνέχεια"
 enablePolicy = "Ενεργοποίηση πολιτικής"
 saveChanges = "Αποθήκευση αλλαγών"
 
+[portal.policies.wizard.capability.classify]
+desc = "Αναγνωρίζει τον τύπο του εγγράφου από τις ετικέτες της ομάδας σας και το επισημαίνει, ώστε να αρχειοθετείται και να αναζητείται ανά κατηγορία."
+label = "Ταξινόμηση του εγγράφου"
+
 [portal.policies.wizard.capability.compress]
 desc = "Συμπιέζει το έγγραφο σε μικρότερο μέγεθος αρχείου."
 label = "Μείωση μεγέθους αρχείου"
@@ -7500,10 +8315,18 @@ label = "Απόκρυψη ευαίσθητων πληροφοριών"
 desc = "Αφαιρεί κρυφό JavaScript ώστε τίποτα να μην μπορεί να εκτελεστεί αυτόματα όταν ανοίγει το έγγραφο."
 label = "Αφαίρεση ενεργού περιεχομένου"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Αποδεικνύει ότι το έγγραφο υπήρχε σε αυτήν ακριβώς τη μορφή σε μια συγκεκριμένη χρονική στιγμή, χρησιμοποιώντας ανεξάρτητη αρχή χρονοσήμανσης. Αποστέλλεται μόνο ένα hash - το έγγραφο δεν φεύγει ποτέ από τον server σας."
+label = "Προσθήκη αξιόπιστης χρονοσήμανσης"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Τοποθετεί ένα ορατό σημάδι (π.χ. «Εμπιστευτικό») σε κάθε σελίδα."
 label = "Εφαρμογή υδατογραφήματος"
 
+[portal.policies.wizard.classification]
+description = "Κάθε μεταφορτωμένο έγγραφο ταξινομείται με βάση τις ενσωματωμένες ετικέτες και επισημαίνεται με τους τύπους που ταιριάζουν. Το σύνολο ετικετών είναι κοινό για όλη την ομάδα σας."
+labelsHeading = "Ετικέτες ταξινόμησης"
+
 [portal.policies.wizard.errors]
 noTools = "Ενεργοποιήστε πρώτα τουλάχιστον ένα εργαλείο στη ροή εργασίας."
 saveFailed = "Δεν ήταν δυνατή η αποθήκευση της πολιτικής. Δοκιμάστε ξανά."
@@ -7548,73 +8371,118 @@ setUp = "Ρύθμιση πολιτικής {{category}}"
 [portal.policies.wizard.workflow]
 description = "Επιλέξτε τι κάνει αυτή η πολιτική σε κάθε έγγραφο που επεξεργάζεται."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} ενεργές"
-noRule = "Δεν έχει επιβληθεί ακόμη κανόνας"
-subtitle = "Μόνιμοι αυτοματισμοί από τους οποίους περνά κάθε έγγραφο, ανεξάρτητα από το ποιο pipeline το χειρίζεται."
-title = "Τι εκτελείται στα PDF σας"
-
 [portal.policySummary.action]
-comingSoon = "Αναβάθμιση σε Enterprise"
-configure = "Διαμόρφωση"
 setUp = "Ρύθμιση"
 
-[portal.policySummary.column]
-activeRule = "Ενεργός κανόνας"
-policy = "Πολιτική"
-status = "Κατάσταση"
+[portal.processorFlow]
+footnote = "Οι μετρήσεις αφορούν τις τελευταίες 24 ώρες. Η ταχύτητα ροής είναι ενδεικτική."
+liveBadge = "Live"
+stats = "{{connected}} συνδεδεμένα · {{processed}} PDF επεξεργασμένα"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Μόλις διαμορφωθούν οι πολιτικές, οι κατηγορίες θα εμφανιστούν εδώ."
-title = "Δεν υπάρχουν ακόμη πολιτικές"
+[portal.processorFlow.lens]
+ariaLabel = "Λειτουργία προβολής"
+flow = "Ροή"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Ενεργό"
-off = "Ανενεργό"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Απέτυχαν"
+heading = "Αποτελέσματα"
+success = "Παραδόθηκαν"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} ενεργές"
+count = "{{n}} · 24h"
+heading = "Πολιτικές"
+setUp = "Ρύθμιση"
 soon = "Σύντομα"
 
-[portal.processingStatus]
-managePlan = "Διαχείριση πλάνου"
-volumeSuffix = "PDF που επεξεργάστηκαν · τελευταίες 30 ημέρες"
+[portal.processorFlow.sankey]
+waist = "Πολιτικές · {{n}} ενεργές"
+
+[portal.processorFlow.sankey.empty]
+description = "Συνδέστε μια πηγή και ενεργοποιήστε μια πολιτική για να παρακολουθήσετε τα έγγραφα να ρέουν μέσω του processor."
+title = "Δεν υπάρχει ροή ακόμα"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Σύνδεση"
+editor = "Stirling PDF Editor"
+heading = "Πηγές"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Λήψη email"
 
 [portal.procurement]
-reset = "Επαναφορά προμηθειών (demo)"
 subtitle = "Αξιολογήστε, συμβασιοποιήστε και εντάξτε την ομάδα σας. Κάθε έγγραφο σε ένα μέρος."
 title = "Προμήθειες"
 
-[portal.procurement.action]
-download = "Λήψη"
-pay = "Πληρωμή τώρα"
-request = "Αίτημα"
-sign = "Έλεγχος & υπογραφή"
-upload = "Μεταφόρτωση"
-
 [portal.procurement.agreement]
 agreeCta = "Συμφωνία & συνδρομή"
+confidential = "Εμπιστευτικό"
 confirm = "Έχω διαβάσει και συμφωνώ με τη Stirling Enterprise Agreement."
-eyebrow = "Σύμβαση"
-intro = "Μία συνδυασμένη σύμβαση καλύπτει τη συμφωνία σας: Master Service Agreement, Order Form, EULA και Data Processing Agreement. Ελέγξτε τη και μετά συμφωνήστε για να αποδεχτείτε την προσφορά σε δεσμευτική συνδρομή."
-title = "Ελέγξτε την εταιρική σας σύμβαση"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA και DPA, συνδυασμένα σε μία υπογραφή."
+download = "Λήψη"
+downloadDraftError = "Δεν ήταν δυνατή η δημιουργία του PDF συμφωνίας - ο renderer εγγράφων δεν είναι διαθέσιμος. Δοκιμάστε ξανά σύντομα ή επικοινωνήστε με την υποστήριξη."
+downloadError = "Δεν ήταν δυνατή η λήψη της υπογεγραμμένης συμφωνίας. Δοκιμάστε ξανά."
+legalName = "Όνομα νομικής οντότητας"
+legalNamePlaceholder = "Η νομική οντότητα που θα υπογράψει"
+loadError = "Δεν ήταν δυνατή η φόρτωση της συμφωνίας. Δοκιμάστε ξανά."
+loading = "Φόρτωση της συμφωνίας..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Αίτημα αλλαγών"
+scrollHint = "Κάντε κύλιση για έλεγχο"
+signatory = "Όνομα υπογράφοντος"
+signatoryPlaceholder = "Πλήρες όνομα"
+signatoryTitle = "Τίτλος υπογράφοντος"
+signatoryTitlePlaceholder = "π.χ. General Counsel"
+signError = "Δεν ήταν δυνατή η καταγραφή της υπογραφής σας. Δοκιμάστε ξανά."
 
 [portal.procurement.builder]
 addons = "Πρόσθετα"
+addressLine1 = "Γραμμή διεύθυνσης 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Γραμμή διεύθυνσης 2"
+addressLine2Placeholder = "Σουίτα, όροφος, κτίριο"
 back = "Πίσω"
 businessName = "Επωνυμία επιχείρησης"
 businessNamePlaceholder = "Η εταιρεία σας"
+city = "Πόλη"
+cityPlaceholder = "San Francisco"
+completeRequired = "Συμπληρώστε τα απαιτούμενα πεδία (σημειωμένα με *) με έγκυρο email πριν δημιουργήσετε την προσφορά."
+contactEmail = "Email επικοινωνίας"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Όνομα επικοινωνίας"
+contactNamePlaceholder = "Jane Doe"
 continue = "Συνέχεια"
-country = "Χώρα"
-countryEuro = "Ευρωζώνη (EUR €)"
-countryUK = "Ηνωμένο Βασίλειο (GBP £)"
-countryUS = "Ηνωμένες Πολιτείες (USD $)"
+done = "Τέλος"
 eula = "Έχω διαβάσει και συμφωνώ με το Stirling Enterprise EULA. Διέπει τη σύμβαση που δημιουργείται από αυτήν την προσφορά."
 generate = "Δημιουργία προσφοράς"
-included = "Περιλαμβάνεται"
 indemnification = "Αποζημίωση IP"
 indemnificationSub = "Υπερασπιζόμαστε επιλέξιμες αξιώσεις IP, σύμφωνα με το EULA"
-offlineLicense = "Offline / air-gapped άδεια"
-offlineLicenseSub = "Ένα αρχείο άδειας με δυνατότητα λήψης για μια air-gapped self-hosted παρουσία"
+paperEyebrow = "Enterprise προσφορά"
+paperFor = "Προετοιμάστηκε για"
+pdfSize = "Μέγεθος PDF"
+poNumber = "Αριθμός PO"
+poNumberPlaceholder = "Προαιρετικό"
+postalCode = "Ταχυδρομικός κώδικας"
+postalCodePlaceholder = "94105"
+posture = "Διακυβέρνηση"
+posture_count = "~{{count}} πολιτικές"
+posture_essentials = "Βασικά"
+posture_essentialsSub = "Ταξινόμηση + Κοινή χρήση — οι προεπιλογές"
+posture_governed = "Με διακυβέρνηση"
+posture_governedSub = "Προσθέτει Ασφάλεια και Δρομολόγηση"
+posture_regulated = "Ρυθμιζόμενο"
+posture_regulatedSub = "Κάθε κατηγορία — Συμμόρφωση, Διατήρηση, Ingestion"
 qbr = "Τριμηνιαίες επιχειρηματικές ανασκοπήσεις"
 qbrSub = "Ο SE σας ανασκοπεί τη χρήση και τον οδικό χάρτη κάθε τρίμηνο"
+region = "Πολιτεία / περιοχή"
+regionPlaceholder = "California"
 running = "{{annual}} / έτος · {{years}} έτη {{tcv}}"
 s1Sub = "Η ομάδα σας και τα PDF που αναμένετε να εκτελείτε κάθε χρόνο."
 s1Title = "Πόσο θα επεξεργάζεστε;"
@@ -7623,6 +8491,12 @@ s2Title = "Δέσμευση και υπηρεσία"
 s3Sub = "Για την προσφορά και τη σύμβαση που δημιουργεί."
 s3Title = "Τα στοιχεία σας"
 serviceLevel = "Επίπεδο υπηρεσίας"
+size_compact = "Συμπαγές"
+size_compactSub = "Κυρίως κείμενο, κάτω από 1 MB"
+size_heavy = "Βαρύ"
+size_heavySub = "Σαρωμένο ή με πολλές εικόνες, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Μικτό κείμενο και εικόνες, 1 έως 5 MB"
 slDedicated = "Αποκλειστικό"
 slDedicatedSub = "4 εργάσιμες ώρες · αποκλειστικός διαχειριστής λογαριασμού · +30%"
 slPriority = "Προτεραιότητα"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Ίδια εργάσιμη ημέρα · ονομαστικός
 slStandard = "Τυπικό"
 slStandardSub = "Επόμενη εργάσιμη ημέρα · κοινόχρηστος CSM · περιλαμβάνεται"
 stepOf = "Βήμα {{n}} από {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Προαιρετικό"
 term = "Διάρκεια"
 termDiscount = "Εφαρμόστηκε έκπτωση {{pct}}% για πολυετή δέσμευση"
 title = "Δημιουργήστε την προσφορά σας"
@@ -7637,6 +8513,7 @@ training = "Onboarding & εκπαίδευση"
 trainingSub = "Ζωντανές συνεδρίες για να ξεκινήσει η ομάδα σας"
 users = "Σύνολο χρηστών"
 usersPlaceholder = "π.χ. 250"
+viewEula = "Διαβάστε το"
 volEstimated = "Εκτιμήθηκε από {{count}} χρήστες (~2.000 PDF ο καθένας, συμπεριλαμβανομένου του αυτοματισμού). Επεξεργαστείτε το αν γνωρίζετε καλύτερα."
 volManual = "Χρήση του αριθμού σας. Επανεκτιμήστε από το μέγεθος της ομάδας σας οποιαδήποτε στιγμή."
 volNoUsers = "Δεν είστε σίγουροι; Εισαγάγετε το μέγεθος της ομάδας σας και θα το εκτιμήσουμε."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "π.χ. 1.000.000"
 years_one = "{{count}} έτος"
 years_other = "{{count}} έτη"
 
-[portal.procurement.docs]
-count_one = "{{count}} έγγραφο"
-count_other = "{{count}} έγγραφα"
-done = "Ολοκληρώθηκε"
-here = "Είστε εδώ"
-hide = "Απόκρυψη"
-optional = "Προαιρετικό"
-paidAddon = "Πληρωμένο πρόσθετο"
-show = "Εμφάνιση"
-subtitle = "Όλα όσα χρειάζεστε σε κάθε βήμα της διαδρομής, εμφανίζονται καθώς η συμφωνία προχωρά."
-supportingSubtitle = "SOC 2, έλεγχοι ασφαλείας, φορολογικά έντυπα και άλλα, έτοιμα όταν τα ζητήσει η ομάδα ασφάλειας ή προμηθειών σας. Ορισμένα έχουν εφάπαξ χρέωση."
-supportingTitle = "Υποστήριξη της αξιολόγησής σας"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form και DPA σε μία υπογραφή."
+download = "Λήψη"
+eula = "EULA & Εμπορικοί Όροι"
+eulaSub = "Οι εμπορικοί όροι λογισμικού και self-serve."
+invoice = "Τιμολόγιο"
+invoiceSub = "Το πρώτο τιμολόγιο συνδρομής σας."
+laterInvoice = "Διαθέσιμο αφού αποδεχτείτε"
+laterQuote = "Διαθέσιμο μόλις εκδοθεί η προσφορά σας"
+quote = "Προσφορά"
+quoteSub = "Η αναλυτική enterprise προσφορά σας."
+sla = "SLA Exhibit"
+slaSub = "Επίπεδα υποστήριξης και στόχοι απόκρισης."
+subprocessors = "Subprocessors"
+subprocessorsSub = "Τρίτα μέρη που επεξεργάζονται δεδομένα για λογαριασμό σας."
+subtitle = "Τα έγγραφα της συμφωνίας σας, διαθέσιμα ανά πάσα στιγμή."
 title = "Έγγραφα"
-upcoming = "Προσεχώς"
+view = "Προβολή"
 
 [portal.procurement.error]
 title = "Κάτι πήγε στραβά"
 
 [portal.procurement.hero]
-company = "Η εταιρική σας συμφωνία"
+barAria = "Στάδιο {{current}} από {{total}}"
 ctaAgreement = "Έλεγχος & υπογραφή σύμβασης"
-ctaLive = "Είστε live"
-ctaPayment = "Προσθήκη πληρωμής"
+ctaExploring = "Ρύθμιση της δοκιμής σας"
 ctaQuote = "Ελέγξτε την προσφορά σας"
+ctaReviewQuote = "Έλεγχος προσφοράς"
 ctaTrial = "Δημιουργήστε την προσφορά σας"
+documents = "Έγγραφα"
 eyebrow = "Enterprise προμήθειες"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Πρόσκληση συμπαικτών"
-keyDocs = "Βασικά έγγραφα"
-nextStep = "Επόμενο βήμα: {{action}}"
-notStarted = "Δεν ξεκίνησε"
+licenseKey = "Κλειδί άδειας"
+liveSub = "Ο οργανισμός σας έχει provisioned και η άδειά σας είναι ενεργή."
+liveTitle = "Είστε live στο Stirling Enterprise"
+next = "Επόμενο: {{stage}}"
 open = "Άνοιγμα προμηθειών"
 scheduleCall = "Προγραμματισμός κλήσης"
-setup1Sub = "Προσκαλέστε τους συμπαίκτες σας"
-setup1Title = "Αναπτύξτε το PDF Editor"
-setup2Sub = "Ενεργοποιήστε την επεξεργασία σε editors και άλλες πηγές"
-setup2Title = "Συνδέστε το PDF Processor"
-setup3Sub = "Ενεργοποιήστε Security, Compliance, Routing ή Retention όταν τα χρειαστείτε"
-setup3Title = "Προσθήκη προτεινόμενων πολιτικών"
+sentenceAgreement = "ελέγξτε και υπογράψτε τη συμφωνία"
+sentenceLive = "provisioning και rollout"
+sentencePayment = "purchase order και πληρωμή"
+sentenceQuote = "ελέγξτε και αποδεχτείτε την προσφορά σας"
+sentenceTrial = "ρυθμίστε τον δοκιμαστικό χώρο εργασίας σας"
 
 [portal.procurement.journey]
 daysLeft_one = "Απομένει {{count}} ημέρα"
 daysLeft_other = "Απομένουν {{count}} ημέρες"
-engineerLabel = "Ο μηχανικός λύσεών σας"
-eyebrow = "Η διάθεσή σας"
-live = "Είστε live στο Stirling Enterprise"
-nextStep = "Επόμενο βήμα: {{action}}"
-subtitle = "Ο μηχανικός λύσεών σας είναι σε κάθε βήμα. Μία επόμενη ενέργεια τη φορά· η πλήρης λίστα ελέγχου είναι παρακάτω."
-title = "Από τη δοκιμή στο live, μία καθοδηγούμενη διαδρομή"
-trialTitle = "Enterprise δοκιμή"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Μία υπογραφή καλύπτει MSA, φόρμα παραγγελίας, EULA και DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Δεν ήταν δυνατή η δημιουργία του off
 downloadOffline = "Λήψη offline άδειας (.lic)"
 hint = "Επικολλήστε αυτό το κλειδί σε μια self-hosted παρουσία για να την ενεργοποιήσετε ή κρατήστε το για τα αρχεία σας. Φυλάξτε το με ασφάλεια."
 label = "Το κλειδί άδειάς σας"
+subtitle = "Ενεργοποιήστε μια self-hosted εγκατάσταση με αυτό το κλειδί ή κρατήστε το για τα αρχεία σας."
+title = "Το κλειδί άδειάς σας"
+trialFileHint = "Αυτό είναι το αρχείο δοκιμαστικής άδειάς σας. Μόλις τεθεί σε ισχύ η συμφωνία σας, επιστρέψτε και κατεβάστε το ξανά — σε αντίθεση με το online κλειδί άδειας, το αρχείο .lic δεν θα ενημερωθεί μόνο του."
 
 [portal.procurement.link]
 cta = "Σύνδεση λογαριασμού"
@@ -7739,65 +8619,62 @@ description = "Η συνδρομή σας είναι ενεργή και η άδ
 eyebrow = "Live"
 title = "Είστε live στο Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Τα δοκιμαστικά κλειδιά, οι προσφορές δεσμευμένου όγκου, η σύμβαση μίας υπογραφής, η πληρωμή και το καθολικό εγγράφων σας βρίσκονται όλα εδώ μόλις ξεκινήσετε μια Enterprise αξιολόγηση."
-eyebrow = "Μόνο Enterprise"
-talkToSales = "Μιλήστε με τις πωλήσεις"
-title = "Η διαδρομή προμηθειών ανοίγει με το Enterprise"
-
 [portal.procurement.milestone]
-accept = "Αποδοχή & συνέχεια"
-description = "Κατεβάστε το PDF για να το μοιραστείτε με την ομάδα σας, επιστρέψτε για αποδοχή όταν είστε έτοιμοι ή κάντε αλλαγές."
-download = "Λήψη PDF"
 downloadError = "Δεν ήταν δυνατή η λήψη του PDF προσφοράς ακόμη — δοκιμάστε ξανά σε λίγο."
-edit = "Επεξεργασία προσφοράς"
-eyebrow = "Προσφορά {{number}}"
-perYear = " / έτος"
-preparedFor = "Ετοιμάστηκε για {{company}}"
-tcv = "{{value}} συνολική αξία σύμβασης"
-title = "Η προσφορά σας είναι έτοιμη"
-
-[portal.procurement.modal]
-cancel = "Ακύρωση"
-chooseFile = "Επιλογή αρχείου"
-close = "Κλείσιμο"
-downloadBody = "Η λήψη σας θα ξεκινήσει σύντομα."
-downloadCta = "Λήψη"
-downloadTitle = "Λήψη"
-noFile = "Δεν επιλέχθηκε αρχείο"
-payBody = "Πληρώστε τη δεσμευμένη σύμβασή σας με κάρτα ή τραπεζική μεταφορά μέσω Stripe. Ο χώρος εργασίας σας παρέχεται μόλις εκκαθαριστεί η πληρωμή."
-payCta = "Συνέχεια στο Stripe"
-payTitle = "Επιβεβαίωση πληρωμής"
-requestBodyFree = "Το δημιουργούμε κατόπιν αιτήματος. Επιβεβαιώστε και ο μηχανικός λύσεών σας θα σας το στείλει σύντομα."
-requestBodyPaid = "Αυτό είναι πληρωμένο πρόσθετο. Επιβεβαιώστε και ο μηχανικός λύσεών σας θα το οριοθετήσει και θα στείλει τα έγγραφα."
-requestCta = "Αίτημα"
-requestTitle = "Αίτημα για αυτό το έγγραφο"
-signBody = "Ανοίγει τη Stirling Enterprise Agreement για ηλεκτρονική υπογραφή: μία υπογραφή καλύπτει το MSA, τη φόρμα παραγγελίας, το EULA και το DPA. Συνυπογράφουμε αυτόματα και προχωράτε στην πληρωμή."
-signCta = "Άνοιγμα για υπογραφή"
-signTitle = "Ελέγξτε και υπογράψτε τη σύμβασή σας"
-uploadBody = "Στείλτε μας το PO σας και θα εκδώσουμε τιμολόγιο βάσει αυτού με τους όρους σας. Σύρετε το PDF ή επιλέξτε ένα αρχείο παρακάτω."
-uploadCta = "Μεταφόρτωση εντολής αγοράς"
-uploadTitle = "Μεταφόρτωση της εντολής αγοράς σας"
 
 [portal.procurement.payment]
 description = "Η προσφορά σας έγινε αποδεκτή και η άδειά σας είναι ήδη ενεργή — η ομάδα σας μπορεί να ξεκινήσει αμέσως. Πληρώστε το πρώτο τιμολόγιο όταν είστε έτοιμοι· μπορείτε να το πληρώσετε ή να το κατεβάσετε εδώ, χωρίς να χρειάζεται email."
+downloadAgreement = "Λήψη υπογεγραμμένης συμφωνίας"
 downloadInvoice = "Λήψη τιμολογίου"
-simulate = "Προσομοίωση λήψης πληρωμής (demo)"
+eyebrow = "Πληρωμή"
 title = "Η συνδρομή δημιουργήθηκε"
 viewInvoice = "Προβολή & πληρωμή τιμολογίου"
 
+[portal.procurement.review]
+acceptCta = "Αποδοχή προσφοράς"
+annual = "Ετήσια χρέωση (έτος 1)"
+downloadCta = "Λήψη προσφοράς"
+poNumber = "Purchase order: {{po}}"
+renewal = "Ανανεώνεται στα {{amount}}/έτος μετά τη διάρκεια (+{{pct}}% CPI)"
+tcv = "Διάρκεια {{years}} ετών, πλήρως προπληρωμένη: {{tcv}}"
+validUntil = "Ισχύει έως {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Δεν ήταν δυνατή η φόρτωση του scheduler."
 fallbackLink = "Άνοιγμα προγραμματισμού σε νέα καρτέλα"
+loading = "Φόρτωση scheduler..."
 subtitle = "Ο μηχανικός λύσεών σας θα καθοδηγήσει την ομάδα σας στη διάθεση. Επιλέξτε μια ώρα που σας βολεύει."
 title = "Προγραμματισμός κλήσης"
 
-[portal.procurement.status]
-action = "Απαιτείται ενέργεια"
-available = "Διαθέσιμο"
-complete = "Ολοκληρωμένο"
-pending = "Σε εκκρεμότητα"
-request = "Κατόπιν αιτήματος"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Σφραγισμένο, χωρίς outbound"
+back = "Πίσω"
+businessName = "Επωνυμία επιχείρησης"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Managed, ταχύτερη εκκίνηση"
+continue = "Συνέχεια"
+deployment = "Πού πρέπει να αναπτυχθεί;"
+eula = "Συμφωνώ με το Stirling EULA & Commercial Terms."
+fullName = "Πλήρες όνομα"
+fullNamePlaceholder = "Το όνομά σας"
+invites = "Προσκαλέστε teammates · προαιρετικό"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Προγραμματισμός κλήσης"
+seats = "Άτομα που δοκιμάζουν"
+seatsPlaceholder = "π.χ. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker ή Kubernetes"
+start = "Έναρξη δοκιμής"
+stepOf = "Βήμα {{n}} από {{total}}"
+subtitle = "Δωρεάν για 14 ημέρες, χωρίς κάρτα."
+subtitleDetails = "Μερικά στοιχεία για την προσφορά και τη συμφωνία σας."
+talkFirst = "Προτιμάτε να μιλήσουμε πρώτα;"
+title = "Ρύθμιση της δοκιμής σας"
+viewEula = "Διαβάστε το"
+workEmail = "Επαγγελματικό email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Η επέκταση προσθέτει 7 ημέρες και ειδοποιεί τον μηχανικό λύσεών σας."
@@ -7808,20 +8685,6 @@ maxed = "Εξαντλήθηκε"
 subtitle = "Η δωρεάν δοκιμή σας διαρκεί έως {{date}}. Δεν απαιτείται κάρτα."
 title = "Enterprise δοκιμή"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Τιμολόγηση δεσμευμένου όγκου, SSO + SCIM + RBAC σε όλο τον οργανισμό, αμετάβλητος έλεγχος 90 ημερών και αποκλειστικός SE."
-homeCta = "Έναρξη δοκιμής →"
-homeHeadline = "Επεξεργαστείτε εκατομμύρια PDF."
-
-[portal.recentActivity]
-title = "Πρόσφατη δραστηριότητα"
-viewAll = "Προβολή όλων"
-
-[portal.recentActivity.empty]
-description = "Εκτελέσεις pipeline, αναπτύξεις και συμβάντα agent θα εμφανιστούν εδώ."
-title = "Δεν υπάρχει ακόμη τίποτα εδώ"
-
 [portal.search]
 ariaLabel = "Αναζήτηση"
 placeholder = "Αναζήτηση στο Stirling — endpoints, pipelines, έγγραφα…"
@@ -7838,58 +8701,50 @@ admin = "Διαχειριστής"
 [portal.settings.sections]
 account-link = "Σύνδεση λογαριασμού"
 
-[portal.shell.header]
-accountFallback = "Λογαριασμός"
-accountMenu = "Μενού λογαριασμού"
-darkMode = "Σκοτεινή λειτουργία"
-lightMode = "Φωτεινή λειτουργία"
-search = "Αναζήτηση"
-searchPlaceholder = "Αναζήτηση…"
-signOut = "Αποσύνδεση"
-switchToDark = "Μετάβαση σε σκοτεινό θέμα"
-switchToLight = "Μετάβαση σε φωτεινό θέμα"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} έγγραφα"
 linkAccount = "Σύνδεση λογαριασμού Stirling"
-planEditor = "Πλάνο Editor"
-planEnterprise = "Πλάνο Enterprise"
-planProcessor = "Πλάνο Processor"
 primaryNav = "Κύρια πλοήγηση"
 switchApp = "Αλλαγή εφαρμογής"
 
+[portal.shell.topbar]
+closeNav = "Κλείσιμο πλοήγησης"
+openNav = "Άνοιγμα πλοήγησης"
+search = "Αναζήτηση"
+
 [portal.sources]
 subtitle = "Επαναχρησιμοποιήσιμες συνδέσεις εισόδου που τροφοδοτούν έγγραφα στο Stirling. Διαμορφώστε μια σύνδεση μία φορά και μετά αναφέρετέ τη από οποιονδήποτε αριθμό πολιτικών. Κάντε κλικ σε μια γραμμή για τη διαμόρφωσή της και για το ποιες πολιτικές τη χρησιμοποιούν."
 title = "Πηγές"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Σύνδεση πηγής"
 
+[portal.sources.builder]
+back = "Πίσω στις πηγές"
+backToTypes = "Όλοι οι τύποι πηγών"
+cancel = "Ακύρωση"
+chooseHint = "Επιλέξτε από πού προέρχονται τα έγγραφα. Οι γκριζαρισμένοι connectors έρχονται σύντομα."
+comingSoon = "Προσεχώς"
+comingSoonHeading = "Προσεχώς"
+create = "Δημιουργία πηγής"
+createTitle = "Σύνδεση πηγής"
+delete = "Διαγραφή"
+editTitle = "Επεξεργασία πηγής"
+enabled = "Ενεργοποιημένο"
+save = "Αποθήκευση αλλαγών"
+
+[portal.sources.builder.folderAccess]
+description = "Οι αυτοματισμοί φακέλων μπορούν να χρησιμοποιούν μόνο φακέλους που έχει επιτρέψει ένας διαχειριστής. Προσθέστε τον στις ρυθμίσεις Folder Access και δοκιμάστε ξανά."
+openSettings = "Ρυθμίσεις Folder Access"
+title = "Αυτός ο φάκελος δεν επιτρέπεται"
+
 [portal.sources.delete]
 body = "Διαγραφή του \"{{name}}\"; Αυτό δεν μπορεί να αναιρεθεί. Οι πολιτικές που το αναφέρουν θα πρέπει να ενημερωθούν."
 cancel = "Ακύρωση"
 confirm = "Διαγραφή"
 title = "Διαγραφή πηγής;"
 
-[portal.sources.detail]
-closeAriaLabel = "Κλείσιμο λεπτομερειών"
-delete = "Διαγραφή πηγής"
-docs24h = "Τελευταίες 24 ώρες"
-docs30d = "Τελευταίες 30 ημέρες"
-docsTotal = "Σύνολο που εντοπίστηκαν"
-docsTrend = "Έγγραφα τις τελευταίες 30 ημέρες"
-documents = "Έγγραφα"
-edit = "Επεξεργασία"
-notReferenced = "Δεν αναφέρεται από καμία πολιτική, οπότε είναι ασφαλές να διαγραφεί."
-pause = "Παύση"
-resume = "Συνέχιση"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Χρησιμοποιείται από"
-
 [portal.sources.empty]
 description = "Συνδέστε έναν φάκελο (και, σύντομα, cloud storage) ώστε οι πολιτικές σας να έχουν από πού να αντλούν έγγραφα."
 title = "Δεν έχουν συνδεθεί ακόμη πηγές"
@@ -7899,18 +8754,57 @@ inUse = "Σε χρήση"
 total = "Συνδέσεις"
 unused = "Αχρησιμοποίητες"
 
+[portal.sources.networkFields.connection]
+helperText = "Η αποθηκευμένη σύνδεση με τη διεύθυνση server και τα διαπιστευτήρια. Επαναχρησιμοποιείται από κάθε πηγή που την αναφέρει."
+label = "Σύνδεση"
+
+[portal.sources.networkFields.directory]
+helperText = "Φάκελος στον server για polling, σχετικός με το αρχικό home σύνδεσης ή τη ρίζα του share. Αφήστε κενό για τη ρίζα."
+label = "Φάκελος"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Η κατανάλωση αφαιρεί κάθε αρχείο από τον server μόλις κάθε πολιτική το έχει επεξεργαστεί."
+label = "Λειτουργία ανάγνωσης"
+
+[portal.sources.networkFields.mode.options]
+consume = "Κατανάλωση: επεξεργασία κάθε αρχείου μία φορά"
+snapshot = "Snapshot: επανάγνωση του φακέλου σε κάθε εκτέλεση"
+
+[portal.sources.networkFields.recursive]
+label = "Βάθος φακέλου"
+
+[portal.sources.networkFields.recursive.options]
+all = "Συμπερίληψη υποφακέλων"
+top = "Μόνο ανώτερο επίπεδο"
+
 [portal.sources.status]
 active = "Ενεργό"
 disabled = "Απενεργοποιημένο"
 unused = "Αχρησιμοποίητο"
 
 [portal.sources.table]
+documents = "Έγγραφα"
 source = "Πηγή"
 status = "Κατάσταση"
 usedBy = "Πολιτικές"
 
+[portal.sources.types.box]
+description = "Τραβήξτε έγγραφα από φακέλους Box που ήδη μοιράζεται η ομάδα σας."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Τραβήξτε έγγραφα από κοινόχρηστο φάκελο Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Έγγραφα που έχει επεξεργαστεί η ομάδα σας στον editor, σε εκτελέσεις πολιτικών και AI."
 label = "Editor"
+noPolicies = "Δεν έχουν εκτελεστεί ακόμα πολιτικές από τον editor."
+
+[portal.sources.types.email]
+description = "Μετατρέψτε συνημμένα που αποστέλλονται σε dedicated mailbox σε έγγραφα."
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "Παρακολουθήστε έναν κατάλογο στον server για νέα έγγραφα."
@@ -7943,25 +8837,80 @@ label = "Βάθος φακέλου"
 all = "Συμπερίληψη υποφακέλων"
 top = "Μόνο ανώτατο επίπεδο"
 
+[portal.sources.types.ftp]
+description = "Κάντε polling σε φάκελο FTP ή FTPS server για νέα έγγραφα."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Τραβήξτε έγγραφα από κοινόχρηστους φακέλους Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Παρακολουθήστε ένα SMB network share για νέα έγγραφα."
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "Παρακολουθήστε φακέλους OneDrive για νέα έγγραφα."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Τραβήξτε έγγραφα από Amazon S3 ή S3-compatible bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Η αποθηκευμένη σύνδεση που περιέχει το bucket και τα διαπιστευτήρια. Επαναχρησιμοποιείται από κάθε πηγή και έξοδο pipeline που την αναφέρει."
+label = "Σύνδεση"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Η κατανάλωση αφαιρεί κάθε object από το bucket μόλις κάθε πολιτική το έχει επεξεργαστεί."
+label = "Λειτουργία ανάγνωσης"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Κατανάλωση: επεξεργασία κάθε object μία φορά"
+snapshot = "Snapshot: επανάγνωση του bucket σε κάθε εκτέλεση"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Επεξεργάζονται μόνο objects των οποίων τα keys ξεκινούν με αυτό το prefix."
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Κάντε polling σε SFTP drop folder για νέα έγγραφα."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Τραβήξτε έγγραφα από βιβλιοθήκες εγγράφων SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Πηγή"
 
+[portal.sources.types.webhook]
+createNote = "Ένα delivery URL και signing secret δημιουργούνται όταν δημιουργείτε αυτό το webhook. Οι αποστολείς κάνουν POST έγγραφα σε αυτό το URL και οι πολιτικές που το αναφέρουν εκτελούνται κατά την άφιξη."
+description = "Λάβετε έγγραφα μέσω υπογεγραμμένου HTTP POST από οποιοδήποτε εξωτερικό σύστημα."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Το signing secret εμφανίζεται μία φορά, όταν δημιουργείται το webhook. Δημιουργήστε ξανά την πηγή για να το αλλάξετε."
+
+[portal.sources.types.webhook.reveal]
+copy = "Αντιγραφή"
+done = "Τέλος"
+secret = "Signing secret"
+secretHelp = "Υπογράψτε το raw body κάθε παράδοσης με αυτό το κλειδί (HMAC-SHA256) και στείλτε το ως X-Stirling-Signature header."
+secretWarning = "Αντιγράψτε τώρα το signing secret. Για την ασφάλειά σας εμφανίζεται μόνο μία φορά και δεν μπορεί να ανακτηθεί αργότερα."
+title = "Το webhook δημιουργήθηκε"
+url = "Delivery URL"
+usage = "Κάντε POST κάθε έγγραφο ως raw request body στο delivery URL με binary content type (application/pdf ή application/octet-stream). Οι πολιτικές που το αναφέρουν εκτελούνται αυτόματα κατά την άφιξη."
+
 [portal.sources.wizard]
-back = "Πίσω"
-cancel = "Ακύρωση"
-continue = "Συνέχεια"
-editTitle = "Επεξεργασία πηγής"
 name = "Όνομα"
 namePlaceholder = "π.χ. Εισαγωγή αιτήσεων"
-save = "Αποθήκευση αλλαγών"
-subtitle = "Βήμα {{current}} από {{total}} · {{label}}"
-title = "Σύνδεση πηγής"
 type = "Τύπος"
 
-[portal.sources.wizard.steps]
-chooseType = "Επιλογή τύπου"
-configure = "Διαμόρφωση"
-review = "Έλεγχος & σύνδεση"
+[portal.stepModal]
+close = "Κλείσιμο"
 
 [portal.usage]
 managePayment = "Διαχείριση πληρωμής"
@@ -8021,16 +8970,9 @@ summary = "Κατέχει μια ομάδα — διαχειρίζεται το
 2 = "Πρόσβαση στο portal μέσω της προεπιλεγμένης πολιτικής"
 3 = "Όλα όσα μπορεί να κάνει το Μέλος"
 
-[portal.welcome]
-ariaLabel = "Καλώς ήρθατε στο Stirling PDF"
-badge = "Ανοικτού κώδικα"
-installEditor = "Εγκατάσταση του Editor"
-inviteTeammates = "Πρόσκληση συμπαικτών"
-openInBrowser = "Άνοιγμα στο πρόγραμμα περιήγησης"
-perks = "Δωρεάν για πάντα · Self-hostable"
-subtitle = "Ο πιο ασφαλής PDF Editor στον κόσμο είναι δωρεάν για ομάδες κάθε μεγέθους. Περιλαμβάνει 60+ λειτουργίες PDF και SSO."
-title = "Καλώς ήρθατε στο"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Απεριόριστα"
 
 [printFile]
 title = "Εκτύπωση αρχείου"
@@ -8613,6 +9555,14 @@ text = "Περιστρέψτε τις σελίδες του PDF σας δεξι
 [rotate.tooltip.header]
 title = "Επισκόπηση ρυθμίσεων περιστροφής"
 
+[ruler]
+clearAll = "Εκκαθάριση όλων"
+hideAllLabels = "Απόκρυψη όλων των ετικετών"
+hideSmallLabels = "Απόκρυψη μικρών ετικετών"
+physicalValues = "Φυσικές"
+scaled = "Σε κλίμακα"
+showAllLabels = "Εμφάνιση όλων των ετικετών"
+
 [sanitize]
 desc = "Αφαιρέστε πιθανά επιβλαβή στοιχεία από αρχεία PDF."
 sanitizationResults = "Αποτελέσματα καθαρισμού"
@@ -8654,31 +9604,45 @@ label = "Αφαίρεση μεταδεδομένων XMP"
 [sanitize.steps]
 settings = "Ρυθμίσεις"
 
-[sanitizePdf]
-tags = "καθαρισμός,ασφάλεια,ασφαλές,αφαίρεση-απειλών"
-
 [sanitizePDF]
 title = "Εξυγίανση PDF"
 
+[sanitizePdf]
+tags = "καθαρισμός,ασφάλεια,ασφαλές,αφαίρεση-απειλών"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Προσαρμογή κλίμακας σελίδας"
 
+[scaleSettings]
+activeScale = "Ενεργή κλίμακα"
+apply = "Εφαρμογή κλίμακας"
+applyCalibration = "Εφαρμογή βαθμονόμησης"
+calculatedScale = "Υπολογισμένη κλίμακα"
+calibrate = "Βαθμονόμηση"
+calibrating = "Γίνεται βαθμονόμηση"
+calibrationDistanceRequired = "Εισαγάγετε μια πραγματική απόσταση μεγαλύτερη από το μηδέν"
+calibrationInvalid = "Δεν είναι δυνατός ο υπολογισμός της κλίμακας από αυτή τη μέτρηση"
+calibrationPaperDistance = "Μετρημένη απόσταση σελίδας: {{distance}}"
+calibrationTitle = "Βαθμονόμηση κλίμακας"
+calibrationTooltip = "Μετρήστε μια γνωστή απόσταση για να υπολογιστεί αυτόματα η κλίμακα"
+customScale = "Προσαρμοσμένη κλίμακα"
+noneSet = "Δεν έχει οριστεί προσαρμοσμένη κλίμακα"
+presets = "Προκαθορισμένες κλίμακες"
+ratio = "Αναλογία κλίμακας"
+ratioHelp = "Αναλογία: 1 μονάδα σελίδας = X πραγματικές μονάδες"
+ratioPlaceholder = "π.χ., 100"
+ratioPositive = "Η αναλογία πρέπει να είναι μεγαλύτερη από το μηδέν"
+ratioRequired = "Η αναλογία απαιτείται"
+realDistance = "Πραγματική απόσταση"
+realDistancePlaceholder = "π.χ., 5"
+reset = "Επαναφορά στις προεπιλογές"
+unit = "Μονάδα"
+unitInvalid = "Μη έγκυρη μονάδα: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Όριο γωνίας:"
-10 = "Ορίζει το μέγεθος του περιγράμματος που προστίθεται και αφαιρείται για την αποφυγή λευκών περιγραμμάτων στο αποτέλεσμα (προεπιλογή: 1)."
-2 = "Ορίζει την ελάχιστη απόλυτη γωνία που απαιτείται για την περιστροφή της εικόνας (προεπιλογή: 10)."
-3 = "Ανοχή:"
-4 = "Καθορίζει το εύρος της χρωματικής διακύμανσης γύρω από το εκτιμώμενο χρώμα φόντου (προεπιλογή: 30)."
-5 = "Ελάχιστη περιοχή:"
-6 = "Ορίζει το ελάχιστο όριο περιοχής για μια φωτογραφία (προεπιλογή: 10000)."
-7 = "Ελάχιστη περιοχή περιγράμματος:"
-8 = "Ορίζει το ελάχιστο όριο περιοχής περιγράμματος για μια φωτογραφία"
-9 = "Μέγεθος περιγράμματος:"
-
 [scannerImageSplit]
 submit = "Εξαγωγή σαρώσεων εικόνων"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Τι κάνει αυτό"
 whatThisDoesDesc = "Εντοπίζει και εξάγει αυτόματα κάθε φωτογραφία από μια σαρωμένη σελίδα ή σύνθετη εικόνα—χωρίς χειροκίνητο κόψιμο."
 whenToUse = "Πότε να το χρησιμοποιείτε"
 
+[ScannerImageSplit.selectText]
+1 = "Όριο γωνίας:"
+10 = "Ορίζει το μέγεθος του περιγράμματος που προστίθεται και αφαιρείται για την αποφυγή λευκών περιγραμμάτων στο αποτέλεσμα (προεπιλογή: 1)."
+2 = "Ορίζει την ελάχιστη απόλυτη γωνία που απαιτείται για την περιστροφή της εικόνας (προεπιλογή: 10)."
+3 = "Ανοχή:"
+4 = "Καθορίζει το εύρος της χρωματικής διακύμανσης γύρω από το εκτιμώμενο χρώμα φόντου (προεπιλογή: 30)."
+5 = "Ελάχιστη περιοχή:"
+6 = "Ορίζει το ελάχιστο όριο περιοχής για μια φωτογραφία (προεπιλογή: 10000)."
+7 = "Ελάχιστη περιοχή περιγράμματος:"
+8 = "Ορίζει το ελάχιστο όριο περιοχής περιγράμματος για μια φωτογραφία"
+9 = "Μέγεθος περιγράμματος:"
+
 [search]
 noResults = "Δεν βρέθηκαν αποτελέσματα"
 placeholder = "Εισαγάγετε όρο αναζήτησης..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Ο διακομιστής σας Stirling-PDF είν
 [session]
 expired = "Η συνεδρία σας έληξε. Παρακαλώ ανανεώστε τη σελίδα και προσπαθήστε ξανά."
 
-[sessionManagement.tooltip]
-header = "Διαχείριση συνεδριών υπογραφής"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Νέοι συμμετέχοντες προστίθενται στο τέλος της σειράς υπογραφών"
-bullet2 = "Δεν μπορούν να προστεθούν συμμετέχοντες μετά την οριστικοποίηση της συνεδρίας"
-bullet3 = "Κάθε συμμετέχων λαμβάνει ειδοποίηση όταν είναι η σειρά του"
-description = "Μπορείτε να προσθέσετε περισσότερους συμμετέχοντες σε μια ενεργή συνεδρία οποτεδήποτε πριν από την οριστικοποίηση."
-title = "Προσθήκη συμμετεχόντων"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Πλήρης οριστικοποίηση</b>: Όλοι οι συμμετέχοντες έχουν υπογράψει"
-bullet2 = "<b>Μερική οριστικοποίηση</b>: Ορισμένοι συμμετέχοντες δεν έχουν υπογράψει ακόμα"
-bullet3 = "Οι μη υπογεγραμμένοι συμμετέχοντες θα εξαιρεθούν από το τελικό έγγραφο"
-bullet4 = "Μόλις οριστικοποιηθεί, μπορείτε να φορτώσετε το υπογεγραμμένο PDF στα ενεργά αρχεία"
-description = "Η οριστικοποίηση συνδυάζει όλες τις υπογραφές σε ένα ενιαίο υπογεγραμμένο PDF. Αυτή η ενέργεια δεν μπορεί να αναιρεθεί."
-title = "Οριστικοποίηση συνεδρίας"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Δεν μπορούν να αφαιρεθούν συμμετέχοντες που έχουν ήδη υπογράψει"
-bullet2 = "Οι αφαιρεθέντες συμμετέχοντες δεν λαμβάνουν πλέον ειδοποιήσεις"
-bullet3 = "Η σειρά υπογραφών προσαρμόζεται αυτόματα"
-description = "Οι συμμετέχοντες μπορούν να αφαιρεθούν από τις συνεδρίες πριν υπογράψουν."
-title = "Αφαίρεση συμμετεχόντων"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Κάθε υπογραφή εφαρμόζεται διαδοχικά στο PDF"
-bullet2 = "Οι μεταγενέστεροι υπογράφοντες μπορούν να δουν προηγούμενες υπογραφές"
-bullet3 = "Κρίσιμο για ροές έγκρισης και νομικές αλυσίδες φύλαξης"
-description = "Η σειρά που ορίζετε κατά τη δημιουργία της συνεδρίας καθορίζει ποιος υπογράφει πρώτος."
-title = "Σειρά υπογραφών"
-
 [settings]
 close = "Κλείσιμο"
 
+[settings.ai]
+documents = "Έγγραφα & RAG"
+general = "Γενικά"
+limits = "Όρια & Απόδοση"
+models = "Μοντέλα & Πάροχοι"
+title = "AI"
+
 [settings.configuration]
 advanced = "Προχωρημένα"
 database = "Βάση δεδομένων"
 endpoints = "Endpoints"
 features = "Δυνατότητες"
+folderAccess = "Πρόσβαση σε φακέλους"
 mcp = "MCP Server"
 storageSharing = "Αποθήκευση Αρχείων & Κοινή Χρήση"
 systemSettings = "Ρυθμίσεις συστήματος"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Προεπιλεγμένος επεξεργαστής PDF"
 defaultPdfEditorActive = "Το Stirling PDF είναι ο προεπιλεγμένος επεξεργαστής PDF"
 defaultPdfEditorChecking = "Έλεγχος..."
 defaultPdfEditorInactive = "Έχει οριστεί άλλη εφαρμογή ως προεπιλογή"
+defaultPdfEditorRemind = "Υπενθύμιση να ορίσω ως προεπιλογή"
+defaultPdfEditorRemindDescription = "Εμφάνιση banner όταν το Stirling PDF δεν είναι η προεπιλεγμένη εφαρμογή PDF σας."
 defaultPdfEditorSet = "Ήδη προεπιλογή"
 defaultStartupView = "Προεπιλεγμένη προβολή κατά την εκκίνηση"
 defaultStartupViewDescription = "Επιλέξτε ποια καρτέλα θα είναι ενεργή στην αριστερή στήλη κατά την εκκίνηση της εφαρμογής"
@@ -8817,9 +9771,18 @@ languageDescription = "Επιλέξτε τη γλώσσα εμφάνισης"
 logout = "Αποσύνδεση"
 setAsDefault = "Ορισμός ως προεπιλογή"
 theme = "Θέμα"
+themeAccent = "Χρώμα έμφασης"
+themeAccentCustom = "Προσαρμοσμένο χρώμα"
+themeAccentCustomHint = "Προσαρμοσμένο (συνιστώνται οι προεπιλογές)"
+themeAccentDark = "Χρώμα έμφασης σκοτεινής λειτουργίας"
+themeAccentDefault = "Προεπιλογή"
+themeAccentDefaultHint = "Προεπιλεγμένο θέμα (συνιστάται)"
+themeAccentDescription = "Τα κουμπιά, οι σύνδεσμοι και οι επισημάνσεις το ακολουθούν, και χρωματίζει διακριτικά την εφαρμογή. Η φωτεινή και η σκοτεινή λειτουργία έχουν η καθεμία το δικό της. Το σύστημα χρησιμοποιεί όποιο είναι ενεργό."
+themeAccentLight = "Χρώμα έμφασης φωτεινής λειτουργίας"
 themeDark = "Σκούρο"
 themeDescription = "Εναλλαγή μεταξύ φωτεινής και σκοτεινής λειτουργίας"
 themeLight = "Φωτεινό"
+themeReset = "Επαναφορά θέματος στην προεπιλογή"
 themeSystem = "System"
 title = "Γενικά"
 user = "Χρήστης"
@@ -8833,6 +9796,12 @@ intro = "Ενεργοποιήστε τον έλεγχο ταυτότητας χ
 learnMore = "Μάθετε περισσότερα στην τεκμηρίωση"
 title = "Για διαχειριστές συστήματος"
 
+[settings.general.loginLanding]
+description = "Επιλέξτε ποια εφαρμογή ανοίγει όταν συνδέεστε στο Stirling Cloud."
+editor = "Πρόγραμμα επεξεργασίας"
+processor = "Επεξεργαστής"
+title = "Μετά τη σύνδεση"
+
 [settings.general.mode]
 fullscreen = "Πλήρης οθόνη"
 sidebar = "Πλευρική γραμμή"
@@ -9041,6 +10010,11 @@ security = "Ασφάλεια"
 telegram = "Telegram"
 title = "Ασφάλεια & Αυθεντικοποίηση"
 
+[settings.signOut]
+confirm = "Είστε βέβαιοι ότι θέλετε να αποσυνδεθείτε;"
+submit = "Αποσύνδεση"
+title = "Αποσύνδεση"
+
 [settings.team]
 title = "Ομάδα"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Μεταφόρτωση στον διακομιστή"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "κάντε κλικ εδώ"
+fallback = "Αν δεν άνοιξε αυτόματα,"
+opening = "Άνοιγμα του Swagger UI σε νέα καρτέλα..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "Τεκμηρίωση API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Επιλέξτε αρχεία στα Ενεργά Αρχεί
 singleFileScope = "Εφαρμογή μόνο σε: {{fileName}}"
 viewerMode = "Μεταβείτε στον επεξεργαστή αρχείων για να επιλέξετε πολλά αρχεία."
 
+[toolFormat]
+ANY = "οποιοδήποτε αρχείο"
+CBR = "ένα αρχείο κόμικ (CBR)"
+CBZ = "ένα αρχείο κόμικ (CBZ)"
+CSV = "ένα αρχείο CSV"
+EBOOK = "ένα ηλεκτρονικό βιβλίο"
+EMAIL = "ένα email"
+EXCEL = "ένα υπολογιστικό φύλλο"
+HTML = "μια ιστοσελίδα"
+IMAGE = "εικόνες"
+JAVASCRIPT = "ένα αρχείο JavaScript"
+JSON = "ένα αρχείο JSON"
+MARKDOWN = "ένα αρχείο Markdown"
+NONE = "κανένα αρχείο"
+PCL = "ένα αρχείο εκτύπωσης PCL"
+PDF = "ένα PDF"
+PDF_ENCRYPTED = "ένα PDF προστατευμένο με κωδικό πρόσβασης"
+POSTSCRIPT = "ένα αρχείο PostScript"
+PPT = "μια παρουσίαση"
+TEXT = "ένα αρχείο κειμένου"
+VIDEO = "ένα βίντεο"
+WORD = "ένα έγγραφο Word"
+XML = "ένα αρχείο XML"
+XPS = "ένα έγγραφο XPS"
+ZIP = "ένα αρχείο ZIP"
+
 [toolPanel]
 alpha = "Άλφα"
 backToAllTools = "Πίσω σε όλα τα εργαλεία"
 collapse = "Σύμπτυξη πάνελ"
 expand = "Ανάπτυξη πάνελ"
 goBack = "Επιστροφή"
+pdfTools = "Εργαλεία PDF"
 placeholder = "Επιλέξτε ένα εργαλείο για να ξεκινήσετε"
 premiumFeature = "Premium λειτουργία:"
+searchTools = "Αναζήτηση εργαλείων"
 toolsHeader = "Εργαλεία"
 viewAllTools = "Προβολή όλων των εργαλείων"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Δεν βρέθηκαν εργαλεία"
 quickAccess = "ΓΡΗΓΟΡΗ ΠΡΟΣΒΑΣΗ"
 searchPlaceholder = "Αναζήτηση εργαλείων..."
 
-[toolPicker.categories]
-advancedTools = "Προχωρημένα εργαλεία"
-recommendedTools = "Προτεινόμενα εργαλεία"
-standardTools = "Τυπικά εργαλεία"
-
 [toolPicker.subcategories]
 advancedFormatting = "Προχωρημένη μορφοποίηση"
 automation = "Αυτοματοποίηση"
@@ -9950,16 +10950,31 @@ title = "Χρήστες"
 you = "(εσείς)"
 
 [users.action]
+cancelInvite = "Ακύρωση πρόσκλησης"
 deleteTeam = "Διαγραφή ομάδας"
 disableMfa = "Επαναφορά MFA"
 move = "Μετακίνηση σε ομάδα"
 reinstate = "Επαναφορά"
 remove = "Αφαίρεση από τον οργανισμό"
+removeTeam = "Αφαίρεση από την ομάδα"
 rename = "Μετονομασία ομάδας"
 resetPw = "Επαναφορά κωδικού πρόσβασης"
 suspend = "Αναστολή"
 unlock = "Ξεκλείδωμα λογαριασμού"
 
+[users.activity]
+daysAgo = "{{count}}ημ. πριν"
+hoursAgo = "{{count}}ώ. πριν"
+justNow = "Μόλις τώρα"
+minutesAgo = "{{count}}λ. πριν"
+monthsAgo_one = "πριν από {{count}} μήνα"
+monthsAgo_other = "πριν από {{count}} μήνες"
+never = "Ποτέ"
+weeksAgo_one = "πριν από {{count}} εβδομάδα"
+weeksAgo_other = "πριν από {{count}} εβδομάδες"
+yearsAgo_one = "πριν από {{count}} έτος"
+yearsAgo_other = "πριν από {{count}} έτη"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Εγκρίνει πολιτική"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Να ακυρωθεί η πρόσκληση προς {{email}}; Δεν θα μπορούν να συμμετάσχουν με τον τρέχοντα σύνδεσμο."
+cancelInviteTitle = "Ακύρωση πρόσκλησης"
 deleteTeamBody = "Διαγραφή της ομάδας {{name}}; Η ομάδα πρέπει πρώτα να είναι άδεια - μετακινήστε τα μέλη της σε άλλη ομάδα και δεν μπορεί ακόμη να κατέχει διαμορφώσεις integration."
 deleteTeamTitle = "Διαγραφή ομάδας"
 disableMfaBody = "Αφαίρεση της εγγραφής MFA του {{name}}; Θα τη ρυθμίσουν ξανά στην επόμενη σύνδεση, αν απαιτείται."
 disableMfaTitle = "Επαναφορά MFA"
 removeBody = "Οριστική αφαίρεση του {{name}} από τον οργανισμό; Αυτό δεν μπορεί να αναιρεθεί."
+removeTeamBody = "Να αφαιρεθεί ο/η {{name}} από την ομάδα; Θα διατηρήσει τον λογαριασμό του/της, αλλά θα χάσει την πρόσβαση στους πόρους αυτής της ομάδας."
 removeTitle = "Αφαίρεση μέλους"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Όνομα χρήστη"
 usernameError = "Το όνομα χρήστη πρέπει να έχει τουλάχιστον 3 χαρακτήρες"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Προσκλήθηκε από {{who}}"
+cancel = "Ακύρωση"
+count = "{{count}} σε εκκρεμότητα"
+desc = "Προσκεκλημένα άτομα που δεν έχουν συμμετάσχει ακόμη. Καταλαμβάνουν μια θέση μέχρι να αποδεχτούν."
+expiresInDays_one = "Λήγει σε {{count}} ημέρα"
+expiresInDays_other = "Λήγει σε {{count}} ημέρες"
+expiresToday = "Λήγει σήμερα"
+title = "Εκκρεμείς προσκλήσεις"
+
 [users.loadError]
 description = "Κάτι πήγε στραβά κατά την επικοινωνία με το backend ή δεν έχετε πρόσβαση. Δοκιμάστε ξανά."
 title = "Δεν ήταν δυνατή η φόρτωση των μελών"
@@ -10212,9 +11240,11 @@ title = "Συνημμένα"
 
 [viewer.bookmarks]
 bookmarkTitle = "Τίτλος σελιδοδείκτη"
+bookmarkTitleRequired = "Απαιτείται τίτλος σελιδοδείκτη"
 closeSidebar = "Κλείσιμο πλαϊνής γραμμής σελιδοδεικτών"
 collapseAll = "Σύμπτυξη όλων των σελιδοδεικτών"
 expandAll = "Ανάπτυξη όλων των σελιδοδεικτών"
+searchPlaceholder = "Αναζήτηση σελιδοδεικτών"
 
 [viewer.comments]
 addComment = "Προσθήκη σχολίου"
@@ -10605,30 +11635,6 @@ title = "Κείμενο υδατογραφήματος"
 image = "Εικόνα"
 text = "Κείμενο"
 
-[wetSignature.tooltip]
-header = "Μέθοδοι δημιουργίας υπογραφής"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Προσαρμόστε το χρώμα και το πάχος της πένας"
-bullet2 = "Καθαρίστε και ξανασχεδιάστε μέχρι να είστε ικανοποιημένοι"
-bullet3 = "Λειτουργεί σε συσκευές αφής (tablet, τηλέφωνα)"
-description = "Δημιουργήστε χειρόγραφη υπογραφή με το ποντίκι ή την οθόνη αφής. Ιδανική για προσωπικές, αυθεντικές υπογραφές."
-title = "Σχεδίαση υπογραφής"
-
-[wetSignature.tooltip.type]
-bullet1 = "Επιλέξτε ανάμεσα σε πολλές γραμματοσειρές"
-bullet2 = "Προσαρμόστε μέγεθος και χρώμα κειμένου"
-bullet3 = "Ιδανικό για τυποποιημένες υπογραφές"
-description = "Δημιουργήστε υπογραφή από πληκτρολογημένο κείμενο. Γρήγορη και συνεπής, κατάλληλη για επαγγελματικά έγγραφα."
-title = "Πληκτρολόγηση υπογραφής"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Υποστηρίζει PNG, JPG και άλλες μορφές εικόνας"
-bullet2 = "Συνιστώνται διαφανή φόντα για καλύτερα αποτελέσματα"
-bullet3 = "Η εικόνα θα αλλάξει μέγεθος ώστε να ταιριάζει στην περιοχή υπογραφής"
-description = "Μεταφορτώστε μια προδημιουργημένη εικόνα υπογραφής. Ιδανική αν έχετε σαρωμένη υπογραφή ή εταιρικό λογότυπο."
-title = "Μεταφόρτωση εικόνας υπογραφής"
-
 [workbenchBar]
 activeFiles = "Ενεργά αρχεία"
 annotations = "Σχολιασμοί"
@@ -10652,6 +11658,7 @@ redact = "Απόκρυψη"
 rotateLeft = "Περιστροφή αριστερά"
 rotateRight = "Περιστροφή δεξιά"
 ruler = "Χάρακας / Μέτρηση"
+rulerSettings = "Ρυθμίσεις κλίμακας"
 save = "Αποθήκευση"
 saveAll = "Αποθήκευση όλων"
 saveAs = "Αποθήκευση ως"
diff --git a/frontend/editor/public/locales/en-GB/translation.toml b/frontend/editor/public/locales/en-GB/translation.toml
index 2bf1d347b6..71bdbd1cd8 100644
--- a/frontend/editor/public/locales/en-GB/translation.toml
+++ b/frontend/editor/public/locales/en-GB/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "{{count}} files"
 font = "Font"
 fontSizeTooltip = "Size of the page number text in points. Larger numbers create bigger text."
 fontTypeTooltip = "Font family for the page numbers. Choose based on your document style."
-genericSubmit = "Submit"
 green = "Green"
 help = "Help"
-imgPrompt = "Select Image(s)"
 incorrectPasswordMessage = "Current password is incorrect."
 info = "Info"
 invalidUndoData = "Cannot undo: invalid operation data"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Login Agreement"
 logOut = "Log out"
 marginTooltip = "Distance between the page number and the edge of the page."
 moreOptions = "More Options"
-multiPdfPrompt = "Select PDFs (2+)"
 never = "Never"
 no = "No"
 noFileSelected = "No file loaded. Please upload one."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Custom Page Order (Enter a comma-separated list of page numbe
 pages = "Pages"
 pageSelectionPrompt = "Custom Page Selection (Enter a comma-separated list of page numbers 1,5,6 or Functions like 2n+1)"
 password = "Password"
-pdfPrompt = "Select PDF(s)"
 pin = "Pin File (keep active after tool run)"
 pro = "Pro"
 processingComplete = "Your file is ready."
@@ -356,6 +352,7 @@ text = "These permissions control what users can do with the PDF. Most effective
 title = "Change Permissions"
 
 [addStamp]
+preview = "Preview stamp"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Manual downloads: click the links and place the files into the te
 noLanguages = "No tessdata languages found in the configured directory."
 permissionNotice = "The tessdata path is not writable. Downloads will be opened in the browser; please save the .traineddata files manually into the tessdata folder."
 
+[admin.settings.ai.documents]
+description = "Configure the embedding model and retrieval settings used to answer questions over documents. Applied to the AI engine when saved."
+title = "Documents & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Leave blank to use the engine's own environment credential. Applies to self-hosted single-engine deployments."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Saved - leave blank to keep the current key"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL of the OpenAI-compatible / Ollama embeddings endpoint, e.g. http://ollama:11434/v1. Must point at a trusted internal endpoint (SSRF-sensitive)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding model name. Free text; suggestions are hints only."
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Provider used to turn document text into vector embeddings."
+label = "Embedding provider"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maximum number of retrieval searches the agent may run per request."
+label = "Max searches"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Changing the embedding model takes effect immediately, but documents indexed with the previous model must be re-indexed for search to return correct results."
+title = "Re-index required"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "If you changed the embedding model, re-index existing documents so search uses the new model."
+
+[admin.settings.ai.documents.topK]
+description = "Number of most relevant chunks retrieved per search."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Connect Stirling to the Python AI engine and choose which AI capabilities are exposed. Changes apply on restart."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Turn individual AI features on or off. Disabled features are hidden in the app."
+title = "Capabilities"
+
+[admin.settings.ai.general.enabled]
+description = "Master switch. When off, no AI tools, agents, or engine calls are available."
+label = "Enable AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Conversational assistant for working with PDFs."
+label = "Chat assistant"
+
+[admin.settings.ai.general.features.classify]
+description = "Automatically categorise documents by type or content."
+label = "Document classification"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generate a new PDF (e.g. from HTML) via an AI agent."
+label = "Create PDF from prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Ask questions and get answers grounded in an uploaded document."
+label = "Document questions"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Review documents for mathematical and numerical errors."
+label = "Maths auditor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Add AI-authored review comments and annotations to a PDF."
+label = "PDF comment agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Timeout for heavier agent operations such as document generation."
+label = "Long-running timeout (seconds)"
+
+[admin.settings.ai.general.note]
+body = "The AI engine runs as a separate service. Its shared secret"
+body2 = "is set via a container environment variable. Provider API keys can be entered on these pages or supplied as engine environment variables; keys entered here are pushed to the engine when saved."
+title = "About the AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Timeout for streamed (token-by-token) chat responses."
+label = "Stream timeout (seconds)"
+
+[admin.settings.ai.general.test]
+button = "Test connection"
+failBody = "The AI engine did not respond. Check the URL, that the engine container is running, and that AI is enabled (a restart is needed after enabling)."
+failTitle = "AI engine unreachable"
+okBody = "The AI engine responded to a health check."
+okTitle = "AI engine reachable"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Timeout for standard AI requests to the engine."
+label = "Request timeout (seconds)"
+
+[admin.settings.ai.general.url]
+description = "Internal URL of the Python AI engine, e.g. http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "Guardrails for how much work AI requests may do and how many run concurrently. Applied to the AI engine when saved."
+title = "Limits & Performance"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Guardrail: reject AI requests whose extracted text exceeds this length."
+label = "Max characters per request"
+
+[admin.settings.ai.limits.maxPages]
+description = "Guardrail: reject AI requests over this many PDF pages."
+label = "Max pages per request"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maximum simultaneous in-flight model calls across the whole engine."
+label = "Model max concurrency"
+
+[admin.settings.ai.models]
+description = "Choose the LLM provider and the smart/fast models the AI engine uses. Applied to the AI engine when saved."
+title = "Models & Providers"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Leave blank to use the engine's own environment credential. Applies to self-hosted single-engine deployments."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Saved - leave blank to keep the current key"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL of the OpenAI-compatible / Ollama endpoint, e.g. http://ollama:11434/v1."
+label = "Provider base URL"
+warning = "The base URL must point at a trusted internal endpoint. The engine will make server-side requests to it, so an untrusted value is SSRF-sensitive."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maximum output tokens for the fast model."
+label = "Fast model max tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "Cheaper, faster model for lightweight tasks. Free text; suggestions are hints only."
+label = "Fast model"
+
+[admin.settings.ai.models.provider]
+description = "Which LLM provider the engine talks to."
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maximum output tokens for the smart model."
+label = "Smart model max tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "High-capability model for complex reasoning. Free text; suggestions are hints only."
+label = "Smart model"
+
+[admin.settings.ai.saved]
+body = "Changes are pushed to the AI engine automatically."
+bodyNoPush = "Settings saved. They will apply the next time the AI engine picks up its configuration."
+title = "AI settings saved"
+
 [admin.settings.badge]
 clickToUpgrade = "Click to view plan details"
 
@@ -938,6 +1094,25 @@ label = "Regenerate on Startup"
 description = "Number of days the certificate will be valid"
 label = "Certificate Validity (days)"
 
+[admin.settings.folderAccess]
+description = "Directories that folder sources and folder outputs are allowed to read from and write to. This is a security boundary: automations can never be pointed at a server path outside this list."
+securityNote = "Leave this empty to disable folder sources and outputs entirely. Stirling's own configuration directory is always off-limits."
+title = "Folder Access"
+
+[admin.settings.folderAccess.implied]
+description = "These Stirling-managed directories are always permitted and can't be changed here."
+serverStorage = "Server file storage"
+title = "Always allowed"
+watchedFolder = "Pipeline watched folder"
+
+[admin.settings.folderAccess.roots]
+add = "Add"
+empty = "No folders allowed. Folder sources and outputs are currently disabled."
+hint = "Enter absolute paths, for example /data/inbox."
+label = "Allowed folder roots"
+placeholder = "/data/inbox"
+remove = "Remove folder root"
+
 [admin.settings.general]
 description = "Configure system-wide application settings including branding and default behaviour."
 system = "System"
@@ -1842,6 +2017,15 @@ export = "Export"
 accessDenied = "Access Denied"
 insufficientPermissions = "You do not have permission to perform this action."
 
+[auth.callback]
+completing = "Completing authentication"
+invalidToken = "OAuth login failed - invalid token."
+missingToken = "OAuth login failed - no token received."
+oauthFailed = "OAuth login failed. Please try again."
+pleaseWait = "Please wait while we finish signing you in."
+signedOut = "You have been signed out. Please sign in again."
+windowMayClose = "You can close this window once it completes."
+
 [auth.displayName]
 guest = "Guest"
 user = "User"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Secures PDF documents by removing potentially malicious co
 description = "This tool will automatically rename PDF files based on their content. It analyzes the document to find the most suitable title from the text."
 tags = "auto-detect,header-based,organise,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Auto Rotate"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Confidence threshold"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "OCR only"
+text = "Text only"
+title = "Detection method"
+
+[autoRotate.error]
+failed = "An error occurred while auto-rotating the PDF."
+
+[autoRotate.inferUndetected]
+title = "Rotate low-confidence pages to match"
+
+[autoRotate.report]
+applied = "{{degrees}}° CW"
+confidenceValue = "Confidence {{value}}"
+noChange = "No change"
+pageLabel = "Page {{number}}"
+summary = "{{rotated}} of {{total}} pages rotated, {{unchanged}} left as they are"
+title = "Detection report"
+
+[autoRotate.report.method]
+inferred = "Matched"
+none = "Skipped"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Below threshold"
+blankPage = "Page is blank"
+inferredFromDocument = "Same as the other pages"
+noDominantDirection = "Mixed text directions"
+osdFailed = "No readable text found"
+osdNoVerdict = "Could not tell which way up"
+tesseractUnavailable = "OCR not installed"
+tooFewGlyphs = "Too little text"
+
+[autoRotate.results]
+title = "Auto Rotate Results"
+
+[autoRotate.settings]
+title = "Settings"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "How certain the check has to be before a page is turned. Lower it to rotate more pages, raise it to leave more pages untouched."
+title = "Confidence threshold"
+
+[autoRotate.tooltip.description]
+text = "Works out which way up each page should be and turns it the right way round. Pages that are already upright are left alone."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto reads the text on the page first, then looks at the page as an image if that is not enough. Text only skips the image check, which is quickest for documents that were never scanned. OCR only treats every page as an image."
+title = "Detection method"
+
+[autoRotate.tooltip.header]
+title = "Auto Rotate"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Blank or nearly blank pages cannot be checked on their own. When every page that could be read needs the same turn, these pages are turned to match them."
+title = "Rotate low-confidence pages to match"
+
 [autoSizeSplitPDF]
 tags = "pdf,split,document,organisation"
 
@@ -2189,33 +2440,6 @@ keywords = "Keywords: odd, even"
 numbers = "Numbers/ranges: 5, 10-20"
 progressions = "Progressions: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Certificate Types"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Managed by system administrators"
-bullet2 = "Shared across authorised users"
-bullet3 = "Represents company identity, not individual"
-bullet4 = "Best for: Official documents, team signatures"
-description = "A shared certificate provided by your organisation. Used for company-wide signing authority."
-title = "Organisation Certificate"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generated automatically on first use"
-bullet2 = "Tied to your user account"
-bullet3 = "Cannot be shared with other users"
-bullet4 = "Best for: Personal documents, individual accountability"
-description = "An auto-generated certificate unique to your user account. Suitable for individual signatures."
-title = "Personal Certificate"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Requires P12/PFX file and password"
-bullet2 = "Can be issued by external Certificate Authorities"
-bullet3 = "Higher trust level for legal documents"
-bullet4 = "Best for: Legally binding contracts, external validation"
-description = "Use your own PKCS#12 certificate file. Provides full control over certificate properties."
-title = "Upload Custom P12"
-
 [certSign]
 awaitingSignatures = "Awaiting signatures"
 chooseCertificate = "Choose Certificate File"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Certificate source"
 upload = "Upload"
 
-[certSign.tooltip.header]
-title = "About Managing Signatures"
-
-[certSign.tooltip.overview]
-bullet1 = "Check existing signatures and their validity"
-bullet2 = "View detailed information about signers and certificates"
-bullet3 = "Add new digital signatures to secure your documents"
-bullet4 = "Multiple files supported with easy navigation"
-text = "This tool lets you check if your PDFs are digitally signed and add new digital signatures. Digital signatures prove who created or approved a document and show if it has been changed since signing."
-title = "What can this tool do?"
-
-[certSign.tooltip.signing]
-bullet1 = "Supports PEM, PKCS12, JKS, and server certificate formats"
-bullet2 = "Option to show or hide signature on the PDF"
-bullet3 = "Add reason, location, and signer name"
-bullet4 = "Choose which page to place visible signatures"
-bullet5 = "Use server certificate for simple 'Sign with Stirling-PDF' option"
-text = "To sign a PDF, you need a digital certificate (like PEM, PKCS12, or JKS). You can choose to make the signature visible on the document or keep it invisible for security only."
-title = "Adding Signatures"
-
-[certSign.tooltip.validation]
-bullet1 = "Shows if signatures are valid or invalid"
-bullet2 = "Displays signer information and signing date"
-bullet3 = "Checks if the document was modified after signing"
-bullet4 = "Can use custom certificates for verification"
-text = "When you check signatures, the tool tells you if they're valid, who signed the document, when it was signed, and whether the document has been changed since signing."
-title = "Checking Signatures"
-
 [changeCreds]
 changeUsername = "Update your username. You will be logged out after updating."
 credsUpdated = "Account updated"
@@ -2824,6 +3020,7 @@ next = "Next"
 preview = "Preview"
 previous = "Previous"
 refresh = "Refresh"
+remaining = "Remaining"
 retry = "Retry"
 save = "Save"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Advanced monitoring"
-allInOneWorkspace = "All-in-one PDF workspace (viewer, tools & agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Dedicated support & SLAs"
-fasterThroughput = "10x faster throughput"
-fullyPrivateFiles = "Fully private files"
-largeFileProcessing = "Large file processing"
-orgWideAccess = "Org-wide access controls"
-premiumAiModels = "Premium AI models"
-prioritySupport = "Priority support"
-privateDocCloud = "Private Document Cloud"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Secure API access"
-standardThroughput = "Standard throughput"
-unlimitedApiAccess = "Unlimited API access"
-unlimitedSeats = "Unlimited seats"
-
 [crop]
 autoCrop = "Auto-crop whitespace"
 noFileSelected = "Add a PDF file to begin cropping"
@@ -3346,6 +3525,7 @@ message = "Failed to set default PDF handler"
 title = "Error"
 
 [defaultApp.prompt]
+dontRemind = "Don't remind me again"
 message = "Make Stirling PDF your default application for opening PDF files."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Customise groups"
 dropHint = "Open files to get started"
 dropToAdd = "Drop files to add"
 expand = "Expand sidebar"
-files = "Files"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive is not configured"
 leaveMyFiles = "Leave My Files"
+library = "PDF Library"
 myFiles = "My Files"
 noFiles = "No files yet"
 openFileManager = "Browse all files & folders"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Add"
-addLabel = "Add a label…"
-categoryIconAria = "Choose an icon for {{name}}"
-createCategory = "Create category"
-delete = "Delete category"
 done = "Done"
-hide = "Hide category"
-newCategory = "New category name…"
-removeLabel = "Remove {{name}}"
-rename = "Rename"
 reset = "Reset to defaults"
-search = "Search labels…"
-show = "Show category"
 subtitle = "Group your files into parent categories. Add existing or new labels to a category, rename it, or create your own. Files in none of your categories appear under “Other”."
 title = "Sidebar categories"
 
@@ -3808,6 +3977,7 @@ refresh = "Refresh from server"
 remove = "Delete"
 removeVersion = "Remove this version"
 rename = "Rename"
+renamed = "Renamed"
 renameFolder = "Rename folder"
 resizeFolderTree = "Resize folder tree (arrow keys, Shift for bigger steps; double-click to auto-fit)"
 save = "Save"
@@ -3910,9 +4080,7 @@ count = "Files"
 folder = "Folder"
 labels = "Labels"
 modified = "Modified"
-name = "Name"
 size = "Size"
-toolHistoryAtVersion = "Cumulative tool chain"
 totalSize = "Total size"
 type = "Type"
 versionHistory = "Version journey"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "All saved"
+extractCsvError = "Failed to extract CSV"
+extractXlsxError = "Failed to extract XLSX"
 flattenAfterFilling = "Flatten after filling"
+requiredAbbreviation = "req"
+requiredFieldsError = "Please fill in all required fields"
 rescanFields = "Re-scan fields"
 rescanFormFields = "Re-scan form fields"
 save = "Save"
+saveShortcut = "Ctrl+S to save"
+unsavedChanges = "Unsaved changes"
 
 [formFill.sidebar]
 close = "Close sidebar"
@@ -4309,6 +4484,11 @@ desc = "Auto renames a PDF file based on its detected header"
 tags = "auto-detect,header-based,organise,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 title = "Auto Rename PDF File"
 
+[home.autoRotate]
+desc = "Detect each page's orientation and rotate it upright automatically."
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "Auto Rotate"
+
 [home.autoSizeSplitPDF]
 tags = "auto,split,size"
 title = "Auto Split by Size/Count"
@@ -4608,13 +4788,13 @@ hint = "Upload a PNG, JPG, SVG, or other image file to place on the PDF. SVG fil
 label = "Upload Image"
 placeholder = "Select image file"
 
-[imageToPdf]
-tags = "conversion,img,jpg,picture,photo"
-
 [imageToPDF]
 header = "Image to PDF"
 title = "Image to PDF"
 
+[imageToPdf]
+tags = "conversion,img,jpg,picture,photo"
+
 [infoBanner]
 dismiss = "Dismiss"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "You've been invited!"
 
 [landing]
 addFiles = "Add Files"
-heroSubtitle = "Drop in or add an existing PDF to get started."
 mobileUpload = "Upload from Mobile"
 openFromComputer = "Open from computer"
 uploadFromComputer = "Upload from computer"
-workbenchEmptyStateHero = "Drop a PDF anywhere"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Login"
 magicLinkSent = "Magic link sent to {{email}}! Check your email and click the link to sign in."
 mfaCode = "Authentication Code"
 mfaRequired = "Two-factor code required"
+noAccount = "Don't have an account?"
 or = "Or"
 password = "Password"
 passwordChangedSuccess = "Password changed successfully! Please sign in with your new password."
@@ -4715,26 +4894,10 @@ signInWith = "Sign in with"
 title = "Sign in"
 unexpectedError = "Unexpected error: {{message}}"
 updatePassword = "Update password"
-useEmailInstead = "Login with email"
 useMagicLink = "Use magic link instead"
 username = "Username"
 youAreLoggedIn = "You are logged in!"
 
-[login.slides.edit]
-alt = "Edit PDFs"
-subtitle = "With over a dozen tools to help you redact, sign, read and manipulate PDFs, you will be sure to find what you are looking for."
-title = "Edit PDFs to display/secure the information you want"
-
-[login.slides.overview]
-alt = "Stirling PDF overview"
-subtitle = "A privacy-first cloud suite for PDFs that lets you convert, sign, redact, and manage documents, along with 50+ other powerful tools."
-title = "Your one-stop-shop for all your PDF needs."
-
-[login.slides.secure]
-alt = "Secure PDFs"
-subtitle = "Add passwords, redact content, and manage certificates with ease."
-title = "Protect sensitive information in your PDFs"
-
 [margin]
 large = "Large"
 medium = "Medium"
@@ -4976,6 +5139,7 @@ pinButton = "You can use the <strong>Pin</strong> button if you'd rather your fi
 results = "After the tool has finished running, the <strong>Review</strong> step will show a preview of the results in this panel, and allow you to undo the operation or download the file. "
 runButton = "Once the tool has been configured, this button allows you to run the tool on all the selected PDFs."
 selectCropTool = "Let's select the <strong>Crop</strong> tool to demonstrate how to use one of the tools."
+stepOf = "Step {{current}} of {{total}}"
 toolInterface = "This is the <strong>Crop</strong> tool interface. As you can see, there's not much there because we haven't added any PDF files to work with yet."
 workbench = "This is the <strong>Workbench</strong> - the main area where you view and edit your PDFs."
 wrapUp = "You're all set! You can replay this tour anytime - just open <strong>Settings</strong> and find it here in the <strong>Tours</strong> section under Help."
@@ -4988,6 +5152,26 @@ showMeAround = "Show me around"
 skipForNow = "Skip for now"
 skipTheTour = "Skip the tour"
 
+[onboarding.checklist]
+dismiss = "Dismiss"
+title = "Set up Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Run Stirling natively on your machine"
+title = "Download Stirling for Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Collaborate with your team"
+title = "Invite team members"
+
+[onboarding.checklist.shareAnalytics]
+description = "Help improve Stirling"
+title = "Share anonymous usage data"
+
+[onboarding.checklist.takeTour]
+description = "See how Stirling works in a quick walkthrough"
+title = "Take the tour"
+
 [onboarding.desktopInstall]
 body = "Stirling works best as a desktop app. You can use it offline, access documents faster, and make edits locally on your computer."
 selectOs = "Select operating system"
@@ -4996,7 +5180,21 @@ titleWithOs = "Download for {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Authentication code"
+description = "Secure your account by linking an authenticator app. Scan the QR code or enter the setup key, then confirm the 6-digit code to finish."
+enable = "Enable MFA"
+enableError = "Unable to enable two-factor authentication. Check the code and try again."
+enterCode = "Enter the 6-digit code from your app."
+enterCodeError = "Enter the authentication code to continue."
+logout = "Log out"
+openAuthenticator = "Open Google Authenticator, Authy or 1Password."
 qrCodeLoading = "Generating your QR code…"
+regenerateQrCode = "Regenerate QR code"
+scanQrCode = "Scan the QR code or enter the setup key below."
+setupError = "Unable to start two-factor setup. Please try again."
+setupKey = "Setup key (manual entry)"
+stepByStep = "Step-by-step"
+success = "MFA has been enabled. You can now continue."
+title = "Multi-Factor Authentication Setup"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Once you enable login mode, you can manage users, configure settings, and monitor server health. The first <strong>{{freeTierLimit}}</strong> people on your server get to use Stirling free of charge."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin Overview"
 userBody = "Invite teammates, assign roles, and keep your documents organised in one secure workspace. Enable login mode whenever you're ready to grow beyond solo use."
 userTitle = "Plan Overview"
 
+[onboarding.processorIntro]
+body = "Stirling now runs <strong>Policies</strong> — automated rules that classify, secure and process every document as it arrives. Set them up and monitor runs in the <strong>Processor</strong>."
+cta = "Check out the Processor"
+title = "Check out the Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Prepaid year"
+
+[payg.prepaid.banner]
+exhausted = "Your prepaid capacity is used up; metered billing has resumed. Top up to keep the discount."
+expiring_one = "Your prepaid year ends in {{count}} day. Unused capacity expires — top up to start a fresh year."
+expiring_other = "Your prepaid year ends in {{count}} days. Unused capacity expires — top up to start a fresh year."
+low = "You're down to {{pct}}% of your prepaid capacity. Top up any time to keep processing uninterrupted."
+
+[payg.prepaid.card]
+subtitle = "Used before metered billing and outside your spend cap."
+title = "Prepaid capacity"
+
+[payg.prepaid.meter]
+capSuffix = "of {{total}} prepaid credits"
+expires = "Expires {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Used up"
+healthy = "Plenty left"
+low = "Running low"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Paste the licence key from your email"
 success = "Licence Activated!"
 successMessage = "Your licence has been successfully activated. You can now close this window."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "enforced"
-enforcing = "Enforcing..."
-failed = "Enforcement failed"
 outputsUnavailable = "Policy outputs are no longer available to download."
 partialOutputsUnavailable = "Some policy outputs are no longer available to download."
-retrying = "Busy, retrying..."
 runNotFound = "The enforcement run could no longer be found."
-step = "step {{current}}/{{total}}"
 timedOut = "Enforcement timed out before the run could finish."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Close"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Applying {{names}}"
 applyingProgress = "Applying {{names}} ({{done}} of {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} of {{total}} file(s) couldn't be processed and were
 failureTitle = "Exported without full enforcement"
 printPolicyAppliedBody = "This PDF was updated to meet a policy. Review the changes, then print again."
 printPolicyAppliedTitle = "Policy applied before printing"
-queued = "+{{count}} queued"
 successTitle = "{{names}} applied"
 summaryMore = "{{first}}, {{second}} and {{more}} more"
 summaryTwo = "{{first}} and {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Enforcing before convert"
-default = "Enforcing"
-export = "Enforcing before export"
-input = "Enforcing on import"
-print = "Enforcing before print"
-
-[policies.field]
-accessLog = "Access log"
-archiveAfter = "Archive after"
-auditTrail = "Audit trail"
-belowThreshold = "Below threshold"
-destination = "Destination"
-frameworks = "Frameworks"
-immutableHold = "Immutable hold"
-keepFor = "Keep for"
-minConfidence = "Min confidence"
-notify = "Notify on route"
-onViolation = "When non-compliant"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Add"
-addPlaceholder = "Add a label…"
-customNote = "Customised for your team."
-defaultNote = "Using the built-in default, shared with your team."
-duplicate = "\"{{name}}\" already exists."
-edit = "Edit labels"
-empty = "No labels yet."
-export = "Export JSON"
-iconAria = "Choose an icon for {{name}}"
-import = "Import JSON"
-importError = "Couldn't import that file."
-managedNote = "Team labels are managed by your team leader."
-modalSubtitle = "Shared with your whole team. The classifier picks the labels that fit each document."
-modalTitle = "Classification labels"
-pickIcon = "Use {{label}} icon"
-removeAria = "Remove {{name}}"
-resetToDefault = "Reset to default"
-saveForTeam = "Save for team"
-saving = "Saving…"
-sectionLabel = "Classification labels"
-startFromScratch = "Start from scratch"
-teamCount = "team labels"
-tooLong = "Labels can be at most {{max}} characters."
-ungrouped = "Ungrouped"
-view = "View labels"
+categoryCount = "categories"
+hideCategory = "Hide category"
+labelCount = "labels"
+sharedNote = "These labels are built in and shared across your whole team."
+showCategory = "Show category"
 
 [policies.pii]
 account = "Account numbers (labelled)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US routing numbers (ABA)"
 ssn = "Social Security numbers"
 
-[policies.settings]
-noneExport = "No policies currently run on export."
-noneUpload = "No policies currently run on upload."
-onExport = "On export"
-onUpload = "On upload"
-reorderHandle = "Drag to reorder"
-runOrderDesc = "When more than one policy runs on the same trigger, they run in this order — each on the previous policy's output. Drag to reorder."
-title = "Policy settings"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Policy options"
-policySettings = "Policy settings"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Retry failed policies ({{count}})"
-rowProgress = "{{completed}} of {{total}} files processed"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "What is a policy?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automatically finds and blacks out sensitive details — like Social Security and card numbers — so they can't be read in the document."
-sanitize = "Removes hidden JavaScript from the file, so nothing can run automatically when someone opens it."
-watermark = "Stamps a visible mark (e.g. \"Confidential\") across every page."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Close"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} enforcing..."
 badgeRan = "{{name}} policy ran on this file"
+badgeRunning = "{{name}} running..."
 blockingAction = "{{action}} blocked while enforcing policy, please wait..."
 dismiss = "Dismiss overlay"
 enforcingTitle = "Enforcing policy..."
@@ -6151,6 +6211,7 @@ viewAnyway = "View file (policy still enforcing)"
 [policyOption]
 autoRedactPhi = "Auto-redact PHI"
 blockExport = "Block export"
+ccpa = "CCPA"
 contracts = "Contracts"
 documents = "Documents"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor plan"
 subscribed = "Processor plan"
 unlinked = "Not linked"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap from document"
-sectionsAriaLabel = "Agent builder sections"
-selectorAriaLabel = "Agents"
-subtitle = "Design, test and ship the AI agents that classify, extract from and route your documents. Define scenarios, fence tool access, run a golden set, and publish a version."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Cancel"
-dropzoneText = "Choose a sample document (PDF or image)"
-lead = "Drop a sample document and we'll propose scenarios and an extraction schema you can refine. Nothing is published until you review it."
-submit = "Bootstrap agent"
-subtitle = "Seed a new agent from one representative file"
-title = "Bootstrap from a document"
-
-[portal.agentBuilder.empty]
-description = "Bootstrap an agent from a sample document to seed its scenarios and extraction schema, then refine and publish."
-title = "No agents yet"
-
-[portal.agentBuilder.evals]
-casesPassing = "Cases passing"
-columnCase = "Eval case"
-columnLatency = "Latency"
-columnResult = "Result"
-fail = "fail"
-goldenSetPassRate = "Golden-set pass rate"
-latencyMs = "{{ms}} ms"
-notRun = "not run"
-pass = "pass"
-passRate = "Pass rate"
-runEvals = "Run evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals turn your scenarios into a repeatable golden set. Upgrade to capture pass-rate over time and gate publishes on it."
-title = "No golden set yet"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "across golden sets"
-activeAgents = "Active agents"
-avgPassRate = "Avg eval pass rate"
-fleetWide = "fleet-wide"
-latestPublished = "Latest published"
-scenarios = "Scenarios"
-testCases = "test cases"
-totalDescription_one = "{{count}} total"
-totalDescription_other = "{{count}} total"
-
-[portal.agentBuilder.scenarios]
-add = "Add"
-addScenario = "Add scenario"
-enable = "Enable"
-expectationLabel = "Expected behaviour"
-expectationPlaceholder = "What the agent should do"
-inEval = "in eval"
-mute = "Mute"
-muted = "muted"
-nameLabel = "Name"
-namePlaceholder = "e.g. Compliance escalation"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenarios"
-tools = "Tools"
-versions = "Versions"
-
-[portal.agentBuilder.tools]
-broadAccess = "Broad access"
-deniedHint = "Selected tools are blocked. Everything else stays callable."
-deniedTools = "Denied tools"
-governanceGate = "Tool governance is available on the Enterprise plan."
-restricted = "Restricted"
-restrictedAccess = "Restricted tool access"
-restrictedDescription = "Allow every tool except the ones you deny below."
-
-[portal.agentBuilder.versions]
-current = "current"
-historyGate = "Full version history and rollback are available on the Enterprise plan."
-publish = "Publish"
-rollBack = "Roll back"
-
 [portal.assistant]
 close = "Close assistant"
 error = "Couldn't reach the assistant."
@@ -6365,9 +6346,21 @@ typing = "Typing"
 loading = "Loading"
 redirectingToEditor = "Redirecting to the editor..."
 
+[portal.billing.activation]
+maybeLater = "Maybe later"
+title = "Switch on the Processor"
+
+[portal.billing.activation.payg]
+sub = "Set a monthly limit. Pay for what you run."
+title = "Pay as you go"
+
+[portal.billing.activation.prepay]
+badge = "2 months free"
+sub = "One invoice, card or bank transfer."
+title = "Prepay for a year"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function returned no client_secret."
-subtitle = "Add a card to keep going past your free Editor-plan grant. Stripe handles the rest."
 title = "Turn on the Processor plan"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Your payment succeeded, but activation is taking a little longer than us
 close = "Close"
 title = "Almost there"
 
+[portal.billing.checkout.cap]
+amountAria = "Monthly spend limit"
+back = "Back"
+continue = "Continue to payment"
+error = "Couldn't set your spend limit"
+finePrint = "Invoices are posted monthly. Cancel anytime."
+noLimit = "No limit"
+note = "You're never billed past your limit. Processing just pauses."
+perMonth = "/ mo"
+title = "Set your spend limit"
+
+[portal.billing.checkout.card]
+fields = "Card number · MM / YY · CVC · ZIP"
+label = "Card details"
+note = "Card details collected by Stripe. Stirling never stores PAN or CVC."
+
 [portal.billing.checkout.error]
 title = "Couldn't start checkout"
 
@@ -6383,10 +6392,9 @@ body = "Your payment went through. We're switching on metered processing across
 hint = "Please keep this window open."
 title = "Activating your Processor plan..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "in the portal env to enable in-app checkout."
-bodyBefore = "Set"
-title = "Stripe not configured"
+[portal.billing.checkout.pay]
+limit = "Monthly spend limit {{amount}}/mo. Processing pauses at the limit."
+limitNoCap = "No spend limit. Processing won't pause. Invoices are posted monthly."
 
 [portal.billing.enterpriseUpsell]
 cta = "Build your Enterprise quote"
@@ -6409,10 +6417,12 @@ currentPlan = "Current plan"
 freeForever = "Free forever"
 noTeamResolved = "No team is resolved on your wallet yet — refresh and try again."
 ownerOnly = "Only the team owner can switch on the Processor plan."
+payInvoice = "Pay invoice to complete"
 planName = "Editor"
 ssoIncluded = "SSO included"
 switchOnProcessor = "Switch on the Processor →"
 unlimitedUsers = "Unlimited users"
+viewQuote = "View quote"
 
 [portal.billing.invoices]
 columnAmount = "Amount"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Direct API requests"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automations & pipelines"
 segmentAutomationLabel = "Automation"
+sizeMultiplier = "{{formatted}} PDFs used a size multiplier"
+summary = "{{unique}} unique · {{units}} meter units · {{avg}} avg per PDF"
+summaryNoRate = "{{unique}} unique · {{units}} meter units"
 unit = "metered PDFs"
+unitsPending_one = "{{units}} meter unit pending sync from linked instances"
+unitsPending_other = "{{units}} meter units pending sync from linked instances"
+
+[portal.billing.prepaid]
+capSuffix = "of {{total}} prepaid credits"
+expires = "Expires {{date}}"
+eyebrow = "Prepaid capacity"
+note = "Used before metered billing and outside your spend limit."
+topUp = "Top up"
+
+[portal.billing.prepaid.buy]
+back = "Back"
+calcTitle = "Calculate your annual payment"
+cancel = "Cancel"
+cancelPurchase = "Cancel purchase"
+close = "Close"
+continueToPayment = "Continue to payment"
+finalise = "Finalise"
+invoiceErrorTitle = "Couldn't generate the invoice"
+loadingTitle = "Loading your quote"
+payTitle = "Pay for your year"
+step = "Step {{current}} of {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Change"
+deployRow = "Deployment"
+done = "Done"
+enterpriseHint = "This is enterprise scale. At this volume, enterprise rates beat any self-service discount. Rate lock, terms and a quote in minutes."
+governanceRow = "Governance"
+governanceValue = "{{label}} · {{count}} policies"
+handlesLabel = "Your Processor"
+handlesValue = "handles {{volume}} credits / mo"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policies"
+poolCaption = "One pool of {{credits}} credits for the year. Heavy months borrow from light ones."
+priceLabel = "Your year · 12 months for the price of 10"
+rateUnknown = "We'll show the exact price at checkout."
+savings = "You save {{amount}} · 2 months free."
+sizingRow = "Sizing"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Total users"
+
+[portal.billing.prepaid.consent]
+label = "I understand that when my prepaid capacity is used up or expires after 12 months, processing automatically continues at the standard metered pay-as-you-go rate (up to my spend limit) unless I cancel, and that I can cancel anytime from the billing portal."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Managed by Stirling. Live in minutes."
+cloudValue = "Stirling Cloud · Managed"
+selfhost = "Self-hosted"
+selfhostDesc = "Runs on private infrastructure. Same rate."
+selfhostValue = "Self-hosted · Private infrastructure"
+
+[portal.billing.prepaid.offer]
+cta = "Review offer"
+subtitle = "Prepay for a year of PDF processing and get two months free, used before metered billing, outside your spend limit."
+title = "Get 12 months for the price of 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Account holder name"
+accountNamePlaceholder = "e.g. Jane Smith"
+companyName = "Company name (optional)"
+companyNamePlaceholder = "e.g. Acme Inc."
+downloadInvoice = "Download invoice"
+payOnline = "Pay online"
+poNumber = "PO number (optional)"
+poNumberPlaceholder = "e.g. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Advanced"
+advancedDesc = "Pipelines drive most of your processing."
+none = "None"
+noneDesc = "Not running pipelines yet. Turn them on any time."
+standard = "Standard"
+standardDesc = "A few pipelines re-process arriving PDFs."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Classification, the default, plus Sharing"
+governed = "Governed"
+governedDesc = "Adds Security and Routing"
+regulated = "Regulated"
+regulatedDesc = "Every category, incl. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Download quote (PDF)"
+downloading = "Preparing…"
+share = "share for approval"
+
+[portal.billing.prepaid.size]
+compact = "Compact"
+compactDesc = "Files under 25 MB, no data charges"
+heavy = "Heavy"
+heavyDesc = "Scanned or image-heavy, routinely 50 MB+"
+standard = "Standard"
+standardDesc = "Mostly small, some scans past 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Used up"
+healthy = "Plenty left"
+low = "Running low"
 
 [portal.billing.spendLimit]
 adjustLimit = "Adjust limit"
@@ -6494,6 +6608,8 @@ label = "Projected to exceed."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Spend this month"
+freeRemaining_one = "{{formatted}} free PDF remaining"
+freeRemaining_other = "{{formatted}} free PDFs remaining"
 processed_one = "{{formattedCount}} PDF processed."
 processed_other = "{{formattedCount}} PDFs processed."
 processedWithRate_one = "{{formattedCount}} PDF processed, at {{rate}} each."
@@ -6534,6 +6650,346 @@ signature = "signature"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "New connection"
+createTitleFor = "Connect {{name}}"
+delete = "Delete"
+edit = "Edit"
+editTitle = "Edit connection"
+unsupportedType = "This connection type cannot be edited here."
+
+[portal.connections.categories.advanced]
+description = "For a service we do not support yet."
+label = "Advanced"
+
+[portal.connections.categories.audit]
+description = "Record what happened to a document, where your auditors already look."
+label = "Audit & compliance logging"
+
+[portal.connections.categories.notify]
+description = "Tell another system that something happened."
+label = "Notify & workflow"
+
+[portal.connections.categories.security]
+description = "Scan or label a document before it moves on."
+label = "Security & classification"
+
+[portal.connections.categories.signing]
+description = "Send a document out to be signed or notarised."
+label = "E-signature & notarisation"
+
+[portal.connections.categories.storage]
+description = "Where processed documents end up - a bucket, a drive, a ticket or a page."
+label = "File & attach"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling stores this encrypted and never shows it again."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Steps using this connection can only call paths under this URL, never another host."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Paste the URL the service gave you. Only paths under it can be called."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Connection name"
+namePlaceholder = "e.g. Production"
+
+[portal.connections.picker]
+cancel = "Cancel"
+createNew = "New connection..."
+placeholder = "Select a connection"
+save = "Save connection"
+
+[portal.connections.picker2]
+back = "Change integration"
+heading = "What do you want to connect?"
+noResultsBody = "We do not support it yet - tell us about it and we will look at adding it."
+noResultsTitle = "Nothing matches \"{{query}}\""
+searchPlaceholder = "Search integrations - try \"sign\", \"ocr\" or a product name"
+
+[portal.connections.types.api]
+description = "Call any HTTP API from a policy. You choose the URL, authentication and payload."
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "Authentication"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username and password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token in a custom header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Log in for a token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Steps using this connection can only call paths under this URL, never another host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header name"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Login path"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "If the API replies with a download link, only these hosts may be fetched. Separate with commas. Leave blank to allow only the base URL's own host."
+label = "Allowed result hosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Send the token as this header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "The response header the login call returns the token in, e.g. X-Auth-Token."
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Scan documents for malware on a server you run - nothing leaves your network."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Virus and content scanning for documents in a policy."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Block documents containing macros, executables, scripts or embedded objects - not just known malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Attach processed documents to a Confluence page."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Send documents to ConsignO Cloud (Notarius) for electronic signature and notarisation."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Your ConsignO Cloud environment, including /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Only needed if your organisation uses tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Post a message to Discord when a policy processes a document."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Index an audit event in Elasticsearch each time a policy handles a document."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Poll an FTP or FTPS server for new documents."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Connection mode"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (recommended)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Plain FTP sends credentials and files unencrypted; choose FTPS if the server supports it."
+label = "Encryption"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "None (plain FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Post a message to a Google Chat space when a policy runs."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Attach processed documents to a Jira issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Email a document or a notification when a policy runs."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "File processed documents into Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detect personal data in document text using a Presidio server you run."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Read and apply Microsoft Purview sensitivity labels on PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Optional. Only needed to pick labels by name; labelling works without it."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Stamped onto every label as its SiteId, so Purview-aware tools know which organisation applied it."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "An S3 bucket that sources can read from and pipeline outputs can write to."
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Leave blank for AWS. Set this for MinIO or another S3-compatible store."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Email a document or a notification when a policy runs."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Poll an SFTP (SSH) server for new documents."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Optional. The server's SHA-256 host key fingerprint (from `ssh-keyscan host | ssh-keygen -lf -`). When set, only a server presenting this key is accepted; when blank, the key seen on first connect is pinned and later changes are refused."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Leave blank if you authenticate with a private key instead."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Optional. Paste an OpenSSH private key to authenticate with a key instead of a password."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Post a message to Slack when a policy processes a document."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Watch an SMB / CIFS network share (Windows or Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Optional. The Windows domain or workgroup, if your server uses one."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Send an audit event to Splunk each time a policy handles a document."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Send an audit event to a Sumo Logic HTTP collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Post a message to a Teams channel when a policy runs."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Post each document, or just the details, to a URL you choose."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Trigger a Zap or Make scenario from a policy."
+label = "Zapier & Make"
+
 [portal.docs]
 browse = "Browse docs"
 viewSource = "View source on GitHub"
@@ -6709,6 +7165,8 @@ type = "Type"
 user = "User"
 
 [portal.documents.queue.empty]
+connectSource = "Connect a source"
+createPipeline = "Create a pipeline"
 description = "As sources feed documents into your pipelines they'll appear here for review."
 title = "No documents in the queue"
 
@@ -6818,13 +7276,71 @@ description = "This view hit an unexpected error. Try again, or pick another sec
 retry = "Try again"
 title = "Something went wrong on this page"
 
+[portal.home.download]
+back = "Back"
+body = "Download the desktop app or self-host the server."
+done = "Done"
+guide = "Open the {{name}} guide"
+openInBrowser = "Open in browser instead"
+sectionDesktop = "Desktop app"
+sectionSelfHosted = "Self-hosted"
+title = "Install the Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Run the official image on your server."
+note = "Opens at :8080. Default login: admin / stirling."
+tagline = "Run the server in a container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Install the official Helm chart."
+note = "Add a PVC for /configs to persist settings."
+tagline = "Deploy to a cluster with Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Native builds for your distribution."
+guideBtn = "View Linux install options"
+note = "AppImage, .deb and .rpm builds are available for common distros."
+tagline = "Native desktop app for your distro"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Or via Homebrew"
+detailBody = "Run the installer, or use Homebrew."
+downloadBtn = "Download for macOS"
+tagline = "Native app for Apple silicon and Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Run the .jar on a bare-metal server."
+downloadBtn = "Download the .jar"
+note = "Requires Java 21+. Opens at :8080; default login admin / stirling."
+runLabel = "Then run it"
+tagline = "Run the .jar on a bare-metal server"
+title = "Manual server set-up"
+
+[portal.home.download.windows]
+altLabel = "Or via winget"
+detailBody = "Run the installer, or use a package manager."
+downloadBtn = "Download installer"
+tagline = "Native app for Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} active"
-invite = "Invite teammates"
+activeOfDeployed = "{{active}} of {{total}} active this month"
 name = "Stirling PDF Editor"
 open = "Open in browser"
 updated = "updated {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Finish deployment"
+options = "View deployment options"
+start = "Deploy the Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6835,49 +7351,6 @@ afternoon = "Good afternoon"
 evening = "Good evening"
 morning = "Good morning"
 
-[portal.home.onboarding]
-dismiss = "Dismiss setup"
-notStarted = "Not started"
-progress = "{{done}} of {{total}} done"
-title = "Finish setting up"
-
-[portal.home.onboarding.enterprise]
-body = "Org-wide SSO + SCIM + RBAC, committed volume pricing, and air-gapped deployment."
-cta = "Start Trial"
-ctaQuote = "Get Quote"
-lead = "For 250+ employees."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Deploy the desktop app, free forever."
-title = "Download the PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} active · {{recommended}} recommended"
-chip = "{{active}} active"
-title = "Turn on policies"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} connected · every PDF governed where it lands"
-chip = "{{connected}} connected"
-title = "Connect your sources"
-
-[portal.home.quickActions]
-subtitle = "Top tasks for today"
-title = "Quick actions"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-step composer over the typed op library"
-title = "Build a pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, watched folders"
-title = "Connect a source"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Scoped key with rate limits and IP allowlist"
-title = "Issue an API key"
-
 [portal.infrastructure]
 manageEditorDeployment = "Manage Editor deployment"
 sectionsAriaLabel = "Infrastructure sections"
@@ -6909,6 +7382,11 @@ cancel = "Cancel"
 confirm = "Revoke key"
 title = "Revoke API key"
 
+[portal.infrastructure.attestationLabel]
+attested = "Attested"
+inScope = "In scope"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filter audit events by category"
 heading = "Audit logs"
@@ -6952,6 +7430,7 @@ all = "All"
 auth = "Auth"
 config = "Config"
 elevation = "Elevation"
+policy = "Policy"
 processing = "Processing"
 security = "Security"
 
@@ -6961,10 +7440,29 @@ title = "You don't have access"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Elevation"
+policy = "Policy"
 processing = "Processing"
 totalEvents = "Total events · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Config"
+elevation = "Elevation"
+policy = "Policy"
+processing = "Processing"
+security = "Security"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Error"
+info = "Info"
+success = "Success"
+warning = "Warning"
+
+[portal.infrastructure.certLabel]
+certified = "Certified"
+inProgress = "In progress"
+notStarted = "Not started"
+
 [portal.infrastructure.createKey]
 cancel = "Cancel"
 createKey = "Create key"
@@ -6978,6 +7476,12 @@ subtitleCreated = "Copy this secret now — it won't be shown again."
 title = "Create API key"
 titleCreated = "Key created"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "Queued"
+rolledBack = "Rolled back"
+rolling = "Rolling out"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -7013,6 +7517,15 @@ subheading = "Live health for every deployed Stirling region — latency, load,
 description = "Deployed regions appear here once your workspace is provisioned."
 title = "No regions deployed"
 
+[portal.infrastructure.keyLabel]
+active = "Active"
+revoked = "Revoked"
+
+[portal.infrastructure.modelLabel]
+active = "Active"
+degraded = "Degraded"
+disabled = "Disabled"
+
 [portal.infrastructure.models]
 heading = "Models"
 msValue = "{{value}} ms"
@@ -7040,6 +7553,10 @@ status = "Status"
 type = "Type"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/call"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Active models"
 avgLatency = "Avg latency"
@@ -7063,6 +7580,17 @@ modelForAria = "Model for {{operation}}"
 operation = "Operation"
 routedTo = "Routed to"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classification"
+extraction = "Extraction"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degraded"
+down = "Down"
+healthy = "Healthy"
+
 [portal.infrastructure.security.access.byok]
 description = "Supply a key from your own KMS. Stirling encrypts with it but can still read."
 label = "Bring your own key (BYOK)"
@@ -7188,6 +7716,47 @@ models = "Models"
 security = "Security"
 storage = "Storage"
 
+[portal.integrations]
+addAnother = "Add another"
+availableHeading = "Available"
+comingSoonHeading = "Coming soon"
+connect = "Connect"
+connectedHeading = "Connected"
+connectionCount_one = "{{count}} connection"
+connectionCount_other = "{{count}} connections"
+customApi = "Custom API"
+searchPlaceholder = "Search integrations"
+subtitle = "Everything Stirling can talk to. Credentials are created once here, then referenced by sources, policies and pipelines."
+title = "Integrations"
+typedName = "{{tool}} name"
+
+[portal.integrations.filters]
+all = "All"
+audit = "Audit"
+connected = "Connected"
+notify = "Notify"
+security = "Security"
+signing = "Signing"
+storage = "Storage"
+
+[portal.integrations.status]
+connected = "Connected"
+
+[portal.integrations.table]
+integration = "Integration"
+worksWith = "Works with"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Policies"
+sources = "Sources"
+
+[portal.legal]
+draft = "{{label}} · draft"
+loadError = "Could not load this document. Please try again."
+loading = "Loading…"
+title = "Legal document"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Components"
@@ -7196,6 +7765,7 @@ documents = "Documents"
 editor = "Editor"
 home = "Home"
 infrastructure = "Infrastructure"
+integrations = "Integrations"
 pipelines = "Pipelines"
 policies = "Policies"
 procurement = "Procurement"
@@ -7208,26 +7778,6 @@ users = "Users"
 platform = "PDF Platform"
 processor = "PDF Processor"
 
-[portal.notifications]
-markAllRead = "Mark all read"
-title = "Notifications"
-viewAll = "View all"
-
-[portal.notifications.ariaLabel]
-none = "Notifications, no unread"
-unread_one = "Notifications, {{count}} unread"
-unread_other = "Notifications, {{count}} unread"
-
-[portal.notifications.count]
-allRead = "all read"
-loading = "loading"
-new_one = "{{count}} new"
-new_other = "{{count}} new"
-
-[portal.notifications.empty]
-description = "No new notifications."
-title = "You're all caught up"
-
 [portal.pipelines]
 subtitle = "Every automated document pipeline on the backend: an ordered chain of operations over a set of sources, run on a trigger. Click a row for its steps and sources."
 title = "Pipelines"
@@ -7238,15 +7788,28 @@ newPipeline = "New pipeline"
 [portal.pipelines.builder]
 addStep = "Add tool"
 back = "Back to pipelines"
+cannotFollow = "Can't take {{produced}}"
+chooseAccount = "Choose an account"
+chooseDestination = "Choose a destination"
+chooseOperation = "Choose what this step does"
+chooseSource = "Choose a source"
 discard = "Discard changes"
 enabled = "Enabled"
+inputs = "Input"
+inputSource = "Input source"
+inputTrigger = "Trigger"
 keepEditing = "Keep editing"
+needsConfiguring = "Needs setting up"
 needsUpload = "Needs an uploaded file"
+noSources = "No sources connected yet. Create one to use it as an input."
 noToolMatches = "No tools match your search."
 pipelineSettings = "Pipeline settings"
 searchTools = "Search tools"
 selectToolBody = "Add a tool to build your pipeline."
 selectToolTitle = "No tools yet"
+sendToSystem = "Send to another system"
+stepsIncompatible = "These steps can't run on what their prior step produces: {{tools}}."
+stepsNeedSetup = "These steps still need setting up before saving: {{tools}}."
 toolSettings = "Tool settings"
 unknownStep = "Unrecognised operation, kept as-is."
 unsavedBody = "You have unsaved changes. Save them before leaving, or discard them?"
@@ -7254,19 +7817,24 @@ unsavedTitle = "Unsaved changes"
 uploadUnsupported = "Uploaded files aren't supported in pipelines yet, so these steps can't be saved: {{tools}}."
 usesDefaults = "Runs with default settings"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combines every file from the previous step"
+fan-out = "Runs once per file from the previous step"
+format-mismatch = "Needs {{accepts}}, but the previous step produces {{produced}}"
+output-uncertain = "May not run: the previous step's output depends on how it's set up"
+source-mismatch = "Needs {{accepts}}, but this pipeline's input is {{produced}}"
+undeclared-operation = "Can't check what this step accepts"
+
 [portal.pipelines.composer]
 addTool = "Add tool"
 cancel = "Cancel"
 chainEmpty = "Add a tool to start building your pipeline."
 create = "Create pipeline"
-directory = "Output folder"
-directoryHelp = "Absolute path on the server. Must be within the configured allowed folders."
 editingUnsupported = "Displaying these tool params for editing is not supported yet."
 moveDown = "Move down"
 moveUp = "Move up"
 name = "Name"
 namePlaceholder = "e.g. Redaction sweep"
-noSources = "No sources connected yet. The pipeline can still run on files supplied to it directly."
 noToolSettings = "This tool has no configurable settings."
 operations_one = "Operation ({{count}})"
 operations_other = "Operations ({{count}})"
@@ -7291,11 +7859,13 @@ confirm = "Delete"
 title = "Delete pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Clear history"
 delete = "Delete pipeline"
 run = "Run now"
 
 [portal.pipelines.empty]
 action = "Create a pipeline"
+connectSource = "Connect a source"
 description = "Create your first pipeline: pick the sources it runs over, chain the operations, and choose where output goes."
 title = "No pipelines yet"
 
@@ -7304,15 +7874,17 @@ active = "Active"
 paused = "Paused"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Write to folder"
-inline = "Return files"
-
 [portal.pipelines.run]
+allProcessed_one = "Nothing to run: the source's {{count}} document has already been processed."
+allProcessed_other = "Nothing to run: all {{count}} documents in the sources have already been processed."
 completed_one = "Run completed."
 completed_other = "All {{count}} runs completed."
 empty = "Nothing to run: the sources had no documents to process."
 failed = "Run failed: {{error}}"
+historyCleared = "History cleared. The next run reprocesses everything currently in the sources."
+inFlight = "Nothing new to run: documents are still being processed from an earlier run."
+parked_one = "Nothing to run: {{count}} document failed previously and is parked. Fix the cause, then clear history to retry it."
+parked_other = "Nothing to run: {{count}} documents failed previously and are parked. Fix the cause, then clear history to retry them."
 running = "Run started; still in progress."
 timeout = "Run is taking longer than expected; it may still finish in the background."
 
@@ -7332,12 +7904,18 @@ manual = "Manual"
 schedule = "Scheduled"
 
 [portal.policies]
+defaultName = "{{category}} Policy"
 subtitle = "Standing automations that enforce a tool pipeline on every document. Each policy fires on upload or export, runs its tool chain, and saves the enforced version alongside the original."
 title = "Policies"
 
 [portal.policies.card]
 comingSoon = "Upgrade to Enterprise"
 notSetUp = "Not set up"
+requiresAiEngine = "Requires AI engine"
+
+[portal.policies.categories.classification]
+desc = "Identify each document's type on upload and tag its metadata for filing and search."
+label = "Classification"
 
 [portal.policies.categories.compliance]
 desc = "Enforce HIPAA, GDPR, SOC 2, or FedRAMP requirements on every document."
@@ -7362,6 +7940,13 @@ label = "Security"
 [portal.policies.config]
 scopeAll = "All documents"
 
+[portal.policies.config.classification]
+summary = "Classifies every uploaded document against your team's labels and tags its metadata."
+
+[portal.policies.config.classification.rules]
+0 = "Classify"
+1 = "Tag metadata"
+
 [portal.policies.config.compliance]
 summary = "Validates documents against regulatory frameworks before they leave the system."
 
@@ -7389,6 +7974,29 @@ minConfidence = "Min confidence"
 2 = "Name"
 3 = "Normalise"
 
+[portal.policies.config.purview]
+label = "Apply a Microsoft Purview sensitivity label"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "The label's GUID, from the Purview portal. Applying a label writes its metadata onto the PDF; it cannot encrypt, which needs the Microsoft client."
+labelName = "Label name (optional)"
+labelNameHelp = "Recorded alongside the ID so people and tools can recognise the label."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview distinguishes a label a policy applied from one a person chose."
+label = "How the label is recorded"
+privileged = "As chosen by a person"
+standard = "As applied automatically"
+
+[portal.policies.config.purviewRead]
+label = "Read a Microsoft Purview label"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Reads the label the document already carries, so later steps can act on it."
+
 [portal.policies.config.retention]
 summary = "Enforces how long documents are kept, when to archive, and when to delete."
 
@@ -7456,6 +8064,7 @@ title = "No activity yet"
 [portal.policies.endpoints]
 addWatermark = "Watermark"
 autoRedact = "Redact PII"
+classifyAndLabel = "Classify"
 compressPdf = "Compress"
 flatten = "Flatten"
 ocrPdf = "OCR"
@@ -7466,6 +8075,183 @@ description = "Your policies are saved and will appear once the connection is re
 retry = "Retry"
 title = "Backend unavailable"
 
+[portal.policies.operations]
+change = "Change what this step does"
+noResults = "No step matches that. Try a product name, or \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Search steps - try \"scan\", \"attach\" or a product name"
+
+[portal.policies.operations.bodyMode]
+binary = "Raw file bytes"
+json = "Inside a JSON payload"
+multipart = "As a file upload (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Your own ClamAV server checks the document; nothing leaves your network."
+label = "Scan for viruses (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rejects documents carrying macros, executables, scripts or embedded objects."
+label = "Block active content"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive checks the document and the run stops if it is not clean."
+label = "Scan for viruses"
+
+[portal.policies.operations.confluenceAttach]
+description = "Files the processed document onto a page."
+label = "Attach to a Confluence page"
+
+[portal.policies.operations.consignoSubmit]
+description = "Submits the document to ConsignO Cloud for signing."
+label = "Send for signature (ConsignO)"
+note = "Submits the document. Retrieving the signed copy is not yet supported, because a step cannot pass a result to a later step."
+
+[portal.policies.operations.customApiCall]
+description = "Author the call yourself: path, method, body and response handling."
+label = "Call a custom API"
+
+[portal.policies.operations.discordNotify]
+description = "Tells a channel that the policy handled a document."
+label = "Post a message to Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Records what the policy did as a searchable document."
+label = "Index an audit event in Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart suits upload APIs; JSON suits APIs that want the file inside a payload; binary sends the raw bytes."
+label = "How to send the document"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "A JSON body sent as-is. {{document.base64}} carries the file; {{document.*}} and {{run.*}} are filled in per document."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Account"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "The form field the API expects the document under."
+label = "File field name"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "From"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "A JSON object of header name/value pairs. The connection's credential is added for you."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Sent as the message body. {{document.*}} and {{run.*}} are filled in per document."
+label = "Message"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Appended to the connection's base URL. It can never reach another host."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Where in the drive to write it. {{document.filename}} is filled in per document."
+label = "Destination path"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report leaves the document untouched. Replace swaps it for whatever comes back."
+label = "What to do with the reply"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Signer's email"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Subject"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyses this text. Use {{document.title}} or paste the text you want checked."
+label = "Text to check"
+
+[portal.policies.operations.fields.to]
+label = "To"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud username"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Tells a space that the policy handled a document."
+label = "Post a message to Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Files the processed document onto an issue."
+label = "Attach to a Jira issue"
+
+[portal.policies.operations.mailgunEmail]
+description = "Sends the processed document as an attachment."
+label = "Email the document (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Writes the processed document into a folder."
+label = "Upload to Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Your own Presidio server reports the personal data it finds."
+label = "Detect personal data"
+note = "Presidio reads text, not files. Give it the text you want checked — the document itself is not uploaded."
+
+[portal.policies.operations.responseMode]
+replace = "Replace the document with the reply"
+report = "Keep the document, record the reply"
+
+[portal.policies.operations.sendgridEmail]
+description = "Sends the processed document as an attachment."
+label = "Email the document (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Tells a channel that the policy handled a document."
+label = "Post a message to Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Records what the policy did, where your auditors already look."
+label = "Send an audit event to Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Records what the policy did to an HTTP collector."
+label = "Send an audit event to Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Tells a channel that the policy handled a document."
+label = "Post a message to Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Sends the document itself to a URL you choose."
+label = "Post the document to a webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Hands the run's details to your automation."
+label = "Trigger a Zap or Make scenario"
+
 [portal.policies.stats]
 activeFor = "Active"
 dataProcessed = "Data processed"
@@ -7491,6 +8277,13 @@ label = "Docs enforced"
 description = "Configured but not running"
 label = "Paused"
 
+[portal.policies.table]
+appliesTo = "Applies to"
+docs = "Docs enforced"
+enforces = "Enforces"
+policy = "Policy"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Back"
 cancel = "Cancel"
@@ -7498,6 +8291,10 @@ continue = "Continue"
 enablePolicy = "Enable policy"
 saveChanges = "Save changes"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifies the document's type from your team's labels and tags it, so it files and searches by category."
+label = "Classify the document"
+
 [portal.policies.wizard.capability.compress]
 desc = "Compresses the document to a smaller file size."
 label = "Reduce file size"
@@ -7518,10 +8315,18 @@ label = "Redact sensitive information"
 desc = "Removes hidden JavaScript so nothing can run automatically when the document is opened."
 label = "Strip active content"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Proves the document existed in this exact form at a point in time, using an independent timestamp authority. Only a hash is sent - the document never leaves your server."
+label = "Add a trusted timestamp"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Stamps a visible mark (e.g. “Confidential”) across every page."
 label = "Apply a watermark"
 
+[portal.policies.wizard.classification]
+description = "Every uploaded document is classified against the built-in labels and tagged with the types that fit. The label set is shared across your whole team."
+labelsHeading = "Classification labels"
+
 [portal.policies.wizard.errors]
 noTools = "Enable at least one tool in the workflow first."
 saveFailed = "Couldn't save the policy. Please try again."
@@ -7566,73 +8371,118 @@ setUp = "Set up {{category}} policy"
 [portal.policies.wizard.workflow]
 description = "Choose what this policy does to every document it processes."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} active"
-noRule = "No rule enforced yet"
-subtitle = "Standing automations every document passes through, regardless of which pipeline handles it."
-title = "What runs on your PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Upgrade to Enterprise"
-configure = "Configure"
 setUp = "Set up"
 
-[portal.policySummary.column]
-activeRule = "Active rule"
-policy = "Policy"
-status = "Status"
+[portal.processorFlow]
+footnote = "Counts are over the last 24 hours. Flow speed is illustrative."
+liveBadge = "Live"
+stats = "{{connected}} connected · {{processed}} PDFs processed"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Once policies are configured, the categories appear here."
-title = "No policies yet"
+[portal.processorFlow.lens]
+ariaLabel = "View mode"
+flow = "Flow"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Active"
-off = "Off"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Failed"
+heading = "Outcomes"
+success = "Delivered"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} active"
+count = "{{n}} · 24h"
+heading = "Policies"
+setUp = "Set up"
 soon = "Soon"
 
-[portal.processingStatus]
-managePlan = "Manage plan"
-volumeSuffix = "PDFs processed · last 30 days"
+[portal.processorFlow.sankey]
+waist = "Policies · {{n}} active"
+
+[portal.processorFlow.sankey.empty]
+description = "Connect a source and switch on a policy to watch documents flow through the processor."
+title = "No flow yet"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Connect"
+editor = "Stirling PDF Editor"
+heading = "Sources"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email intake"
 
 [portal.procurement]
-reset = "Reset procurement (demo)"
 subtitle = "Get your team evaluated, contracted and onboarded. Every document in one place."
 title = "Procurement"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Pay now"
-request = "Request"
-sign = "Review & sign"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Agree & subscribe"
+confidential = "Confidential"
 confirm = "I have read and agree to the Stirling Enterprise Agreement."
-eyebrow = "Agreement"
-intro = "One combined agreement covers your deal: Master Service Agreement, Order Form, EULA and Data Processing Agreement. Review it, then agree to accept the quote into a committed subscription."
-title = "Review your enterprise agreement"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA and DPA, combined into one signature."
+download = "Download"
+downloadDraftError = "Could not generate the agreement PDF - the document renderer is unavailable. Please try again shortly or contact support."
+downloadError = "Could not download the signed agreement. Please try again."
+legalName = "Legal entity name"
+legalNamePlaceholder = "The legal entity that will sign"
+loadError = "Could not load the agreement. Please try again."
+loading = "Loading the agreement..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Request changes"
+scrollHint = "Scroll to review"
+signatory = "Signatory name"
+signatoryPlaceholder = "Full name"
+signatoryTitle = "Signatory title"
+signatoryTitlePlaceholder = "e.g. General Counsel"
+signError = "Could not record your signature. Please try again."
 
 [portal.procurement.builder]
 addons = "Add-ons"
+addressLine1 = "Address line 1"
+addressLine1Placeholder = "10 High Street"
+addressLine2 = "Address line 2"
+addressLine2Placeholder = "Suite, floor, building"
 back = "Back"
 businessName = "Business name"
 businessNamePlaceholder = "Your company"
+city = "Town or city"
+cityPlaceholder = "London"
+completeRequired = "Please complete the required fields (marked *) with a valid email before generating the quote."
+contactEmail = "Contact email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Contact name"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continue"
-country = "Country"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "United Kingdom (GBP £)"
-countryUS = "United States (USD $)"
+done = "Done"
 eula = "I have read and agree to the Stirling Enterprise EULA. It governs the agreement generated from this quote."
 generate = "Generate quote"
-included = "Included"
 indemnification = "IP indemnification"
 indemnificationSub = "We defend qualifying IP claims, as per the EULA"
-offlineLicense = "Offline / air-gapped licence"
-offlineLicenseSub = "A downloadable licence file for an air-gapped self-hosted instance"
+paperEyebrow = "Enterprise quote"
+paperFor = "Prepared for"
+pdfSize = "PDF size"
+poNumber = "PO number"
+poNumberPlaceholder = "Optional"
+postalCode = "Postcode"
+postalCodePlaceholder = "SW1A 1AA"
+posture = "Governance"
+posture_count = "~{{count}} policies"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Classification + Sharing — the defaults"
+posture_governed = "Governed"
+posture_governedSub = "Adds Security and Routing"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Every category — Compliance, Retention, Ingestion"
 qbr = "Quarterly business reviews"
 qbrSub = "Your SE reviews usage and roadmap each quarter"
+region = "County / region"
+regionPlaceholder = "Greater London"
 running = "{{annual}} / yr · {{years}}-yr {{tcv}}"
 s1Sub = "Your team, and the PDFs you expect to run each year."
 s1Title = "How much will you process?"
@@ -7641,6 +8491,12 @@ s2Title = "Commitment and service"
 s3Sub = "For the quote and the agreement it generates."
 s3Title = "Your details"
 serviceLevel = "Service level"
+size_compact = "Compact"
+size_compactSub = "Mostly text, under 1 MB"
+size_heavy = "Heavy"
+size_heavySub = "Scanned or image-heavy, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Mixed text and images, 1 to 5 MB"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 business hours · dedicated account manager · +30%"
 slPriority = "Priority"
@@ -7648,6 +8504,8 @@ slPrioritySub = "Same business day · named CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Next business day · shared CSM · included"
 stepOf = "Step {{n}} of {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Optional"
 term = "Term"
 termDiscount = "{{pct}}% multi-year commitment discount applied"
 title = "Build your quote"
@@ -7655,6 +8513,7 @@ training = "Onboarding & training"
 trainingSub = "Live sessions to get your team running"
 users = "Total users"
 usersPlaceholder = "e.g. 250"
+viewEula = "Read it"
 volEstimated = "Estimated from {{count}} users (~2,000 PDFs each, including automation). Edit if you know better."
 volManual = "Using your figure. Re-estimate from your team size any time."
 volNoUsers = "Not sure? Enter your team size and we'll estimate it."
@@ -7663,55 +8522,55 @@ volumePlaceholder = "e.g. 1,000,000"
 years_one = "{{count}} year"
 years_other = "{{count}} years"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Done"
-here = "You're here"
-hide = "Hide"
-optional = "Optional"
-paidAddon = "Paid add-on"
-show = "Show"
-subtitle = "Everything you need at each step of the journey, surfaced as the deal moves through it."
-supportingSubtitle = "SOC 2, security reviews, tax forms and more, ready when your security or procurement team asks. Some carry a one-time fee."
-supportingTitle = "Supporting your evaluation"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form and DPA in one signature."
+download = "Download"
+eula = "EULA & Commercial Terms"
+eulaSub = "The software and self-serve commercial terms."
+invoice = "Invoice"
+invoiceSub = "Your first subscription invoice."
+laterInvoice = "Available after you accept"
+laterQuote = "Available once your quote is issued"
+quote = "Quote"
+quoteSub = "Your itemised enterprise quote."
+sla = "SLA Exhibit"
+slaSub = "Support tiers and response targets."
+subprocessors = "Subprocessors"
+subprocessorsSub = "Third parties that process data on your behalf."
+subtitle = "Your deal paperwork, available any time."
 title = "Documents"
-upcoming = "Upcoming"
+view = "View"
 
 [portal.procurement.error]
 title = "Something went wrong"
 
 [portal.procurement.hero]
-company = "Your enterprise deal"
+barAria = "Stage {{current}} of {{total}}"
 ctaAgreement = "Review & sign agreement"
-ctaLive = "You're live"
-ctaPayment = "Add payment"
+ctaExploring = "Set up your trial"
 ctaQuote = "Review your quote"
+ctaReviewQuote = "Review quote"
 ctaTrial = "Build your quote"
+documents = "Documents"
 eyebrow = "Enterprise procurement"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Invite teammates"
-keyDocs = "Key documents"
-nextStep = "Next step: {{action}}"
-notStarted = "Not started"
+licenseKey = "Licence key"
+liveSub = "Your organisation is provisioned and your licence is active."
+liveTitle = "You are live on Stirling Enterprise"
+next = "Next: {{stage}}"
 open = "Open procurement"
 scheduleCall = "Schedule a call"
-setup1Sub = "Invite your teammates"
-setup1Title = "Deploy the PDF Editor"
-setup2Sub = "Turn on processing across editors and other sources"
-setup2Title = "Connect the PDF Processor"
-setup3Sub = "Turn on Security, Compliance, Routing or Retention when you need them"
-setup3Title = "Add recommended policies"
+sentenceAgreement = "review and sign the agreement"
+sentenceLive = "provisioning and rollout"
+sentencePayment = "purchase order and payment"
+sentenceQuote = "review and accept your quote"
+sentenceTrial = "set up your trial workspace"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} day left"
 daysLeft_other = "{{count}} days left"
-engineerLabel = "Your solutions engineer"
-eyebrow = "Your rollout"
-live = "You're live on Stirling Enterprise"
-nextStep = "Next step: {{action}}"
-subtitle = "Your solutions engineer is on every step. One next action at a time; the full checklist is below."
-title = "From trial to live, one guided path"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "One signature covers MSA, order form, EULA and DPA."
@@ -7745,6 +8604,9 @@ downloadError = "Could not generate the offline licence file just yet — please
 downloadOffline = "Download offline licence (.lic)"
 hint = "Paste this key into a self-hosted instance to activate it, or keep it for your records. Keep it safe."
 label = "Your licence key"
+subtitle = "Activate a self-hosted instance with this key, or keep it for your records."
+title = "Your licence key"
+trialFileHint = "This is your trial licence file. Once your agreement is in place, come back and download it again — unlike the online licence key, the .lic file won't update on its own."
 
 [portal.procurement.link]
 cta = "Link account"
@@ -7757,65 +8619,62 @@ description = "Your subscription is active and your licence is issued. Your team
 eyebrow = "Live"
 title = "You're live on Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Trial keys, committed-volume quotes, the one-signature agreement, payment and your document ledger all live here once you start an enterprise evaluation."
-eyebrow = "Enterprise only"
-talkToSales = "Talk to sales"
-title = "The procurement track opens with Enterprise"
-
 [portal.procurement.milestone]
-accept = "Accept & continue"
-description = "Download the PDF to share it with your team, come back to accept when you're ready or make changes."
-download = "Download PDF"
 downloadError = "Could not download the quote PDF just yet — please try again in a moment."
-edit = "Edit quote"
-eyebrow = "Quote {{number}}"
-perYear = " / yr"
-preparedFor = "Prepared for {{company}}"
-tcv = "{{value}} total contract value"
-title = "Your quote is ready"
-
-[portal.procurement.modal]
-cancel = "Cancel"
-chooseFile = "Choose file"
-close = "Close"
-downloadBody = "Your download will begin shortly."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "No file selected"
-payBody = "Pay your committed contract by card or bank transfer through Stripe. Your workspace provisions as soon as payment clears."
-payCta = "Continue to Stripe"
-payTitle = "Confirm payment"
-requestBodyFree = "We generate this on demand. Confirm and your solutions engineer will send it across shortly."
-requestBodyPaid = "This is a paid add-on. Confirm and your solutions engineer will scope it and send the paperwork."
-requestCta = "Request"
-requestTitle = "Request this document"
-signBody = "Opens the Stirling Enterprise Agreement for e-signature: one signature covers the MSA, order form, EULA and DPA. We countersign automatically and you advance to payment."
-signCta = "Open for signature"
-signTitle = "Review and sign your agreement"
-uploadBody = "Send us your PO and we invoice against it on your terms. Drag in the PDF or pick a file below."
-uploadCta = "Upload purchase order"
-uploadTitle = "Upload your purchase order"
 
 [portal.procurement.payment]
 description = "Your quote is accepted and your licence is already active — your team can start right away. Pay the first invoice when you're ready; you can pay or download it here, no email needed."
+downloadAgreement = "Download signed agreement"
 downloadInvoice = "Download invoice"
-simulate = "Simulate payment received (demo)"
+eyebrow = "Payment"
 title = "Subscription created"
 viewInvoice = "View & pay invoice"
 
+[portal.procurement.review]
+acceptCta = "Accept quote"
+annual = "Annual fee (year 1)"
+downloadCta = "Download quote"
+poNumber = "Purchase order: {{po}}"
+renewal = "Renews at {{amount}}/year after the term (+{{pct}}% CPI)"
+tcv = "{{years}}-year term, paid in full up front: {{tcv}}"
+validUntil = "Valid until {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Couldn't load the scheduler."
 fallbackLink = "Open scheduling in a new tab"
+loading = "Loading scheduler..."
 subtitle = "Your solutions engineer will walk your team through the rollout. Pick a time that suits you."
 title = "Schedule a call"
 
-[portal.procurement.status]
-action = "Action needed"
-available = "Available"
-complete = "Complete"
-pending = "Pending"
-request = "On request"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Sealed, no outbound"
+back = "Back"
+businessName = "Business name"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Managed, fastest start"
+continue = "Continue"
+deployment = "Where should it deploy?"
+eula = "I agree to the Stirling EULA & Commercial Terms."
+fullName = "Full name"
+fullNamePlaceholder = "Your name"
+invites = "Invite teammates · optional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Schedule a call"
+seats = "People testing"
+seatsPlaceholder = "e.g. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker or Kubernetes"
+start = "Start trial"
+stepOf = "Step {{n}} of {{total}}"
+subtitle = "Free for 14 days, no card required."
+subtitleDetails = "A few details for your quote and agreement."
+talkFirst = "Prefer to talk first?"
+title = "Set up your trial"
+viewEula = "Read it"
+workEmail = "Work email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Extending adds 7 days and notifies your solutions engineer."
@@ -7826,20 +8685,6 @@ maxed = "Maxed out"
 subtitle = "Your free trial runs through {{date}}. No card required."
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Committed volume pricing, org-wide SSO + SCIM + RBAC, 90-day immutable audit and a dedicated SE."
-homeCta = "Start Trial →"
-homeHeadline = "Process millions of PDFs."
-
-[portal.recentActivity]
-title = "Recent activity"
-viewAll = "View all"
-
-[portal.recentActivity.empty]
-description = "Pipeline runs, deploys and agent events will appear here."
-title = "Nothing here yet"
-
 [portal.search]
 ariaLabel = "Search"
 placeholder = "Search Stirling — endpoints, pipelines, docs…"
@@ -7856,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Account link"
 
-[portal.shell.header]
-accountFallback = "Account"
-accountMenu = "Account menu"
-darkMode = "Dark mode"
-lightMode = "Light mode"
-search = "Search"
-searchPlaceholder = "Search…"
-signOut = "Sign out"
-switchToDark = "Switch to dark theme"
-switchToLight = "Switch to light theme"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Link Stirling account"
-planEditor = "Editor plan"
-planEnterprise = "Enterprise plan"
-planProcessor = "Processor plan"
 primaryNav = "Primary navigation"
 switchApp = "Switch app"
 
+[portal.shell.topbar]
+closeNav = "Close navigation"
+openNav = "Open navigation"
+search = "Search"
+
 [portal.sources]
 subtitle = "Reusable input connections that feed documents into Stirling. Configure a connection once, then reference it from any number of policies. Click a row for its config and which policies use it."
 title = "Sources"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Connect source"
 
+[portal.sources.builder]
+back = "Back to sources"
+backToTypes = "All source types"
+cancel = "Cancel"
+chooseHint = "Choose where documents come from. Greyed-out connectors are on the way."
+comingSoon = "Coming soon"
+comingSoonHeading = "Coming soon"
+create = "Create source"
+createTitle = "Connect a source"
+delete = "Delete"
+editTitle = "Edit source"
+enabled = "Enabled"
+save = "Save changes"
+
+[portal.sources.builder.folderAccess]
+description = "Folder automations can only use folders an administrator has allowed. Add it under Folder Access settings, then try again."
+openSettings = "Folder Access settings"
+title = "This folder isn't allowed"
+
 [portal.sources.delete]
 body = "Delete \"{{name}}\"? This can't be undone. Policies that reference it would need to be updated."
 cancel = "Cancel"
 confirm = "Delete"
 title = "Delete source?"
 
-[portal.sources.detail]
-closeAriaLabel = "Close detail"
-delete = "Delete source"
-docs24h = "Last 24h"
-docs30d = "Last 30 days"
-docsTotal = "Total seen"
-docsTrend = "Documents over the last 30 days"
-documents = "Documents"
-edit = "Edit"
-notReferenced = "Not referenced by any policy, so it's safe to delete."
-pause = "Pause"
-resume = "Resume"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Used by"
-
 [portal.sources.empty]
 description = "Connect a folder (and, soon, cloud storage) so your policies have somewhere to pull documents from."
 title = "No sources connected yet"
@@ -7917,18 +8754,57 @@ inUse = "In use"
 total = "Connections"
 unused = "Unused"
 
+[portal.sources.networkFields.connection]
+helperText = "The stored connection with the server address and credentials. Reused by every source that references it."
+label = "Connection"
+
+[portal.sources.networkFields.directory]
+helperText = "Folder on the server to poll, relative to the login home or share root. Leave blank for the root."
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume removes each file from the server once every policy has processed it."
+label = "Read mode"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: process each file once"
+snapshot = "Snapshot: re-read the folder every run"
+
+[portal.sources.networkFields.recursive]
+label = "Folder depth"
+
+[portal.sources.networkFields.recursive.options]
+all = "Include subfolders"
+top = "Top level only"
+
 [portal.sources.status]
 active = "Active"
 disabled = "Disabled"
 unused = "Unused"
 
 [portal.sources.table]
+documents = "Documents"
 source = "Source"
 status = "Status"
 usedBy = "Policies"
 
+[portal.sources.types.box]
+description = "Pull documents from Box folders your team already shares."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Pull documents from a shared Dropbox folder."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documents your team has processed in the editor, across policy and AI runs."
 label = "Editor"
+noPolicies = "No policies run from the editor yet."
+
+[portal.sources.types.email]
+description = "Turn attachments sent to a dedicated mailbox into documents."
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "Watch a directory on the server for new documents."
@@ -7961,25 +8837,80 @@ label = "Folder depth"
 all = "Include subfolders"
 top = "Top level only"
 
+[portal.sources.types.ftp]
+description = "Poll an FTP or FTPS server folder for new documents."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Pull documents from shared Google Drive folders."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Watch an SMB network share for new documents."
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "Watch OneDrive folders for new documents."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Pull documents from an Amazon S3 or S3-compatible bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "The stored connection holding the bucket and credentials. Reused by every source and pipeline output that references it."
+label = "Connection"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume removes each object from the bucket once every policy has processed it."
+label = "Read mode"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: process each object once"
+snapshot = "Snapshot: re-read the bucket every run"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Only objects whose keys start with this prefix are processed."
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Poll an SFTP drop folder for new documents."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Pull documents from SharePoint document libraries."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Source"
 
+[portal.sources.types.webhook]
+createNote = "A delivery URL and signing secret are generated when you create this webhook. Senders POST documents to that URL and the referencing policies run on arrival."
+description = "Receive documents by signed HTTP POST from any external system."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "The signing secret is shown once, when the webhook is created. Recreate the source to roll it."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copy"
+done = "Done"
+secret = "Signing secret"
+secretHelp = "Sign each delivery's raw body with this key (HMAC-SHA256) and send it as the X-Stirling-Signature header."
+secretWarning = "Copy the signing secret now. For your security it is shown only once and cannot be retrieved later."
+title = "Webhook created"
+url = "Delivery URL"
+usage = "POST each document as the raw request body to the delivery URL with a binary content type (application/pdf or application/octet-stream). Referencing policies run automatically on arrival."
+
 [portal.sources.wizard]
-back = "Back"
-cancel = "Cancel"
-continue = "Continue"
-editTitle = "Edit source"
 name = "Name"
 namePlaceholder = "e.g. Claims intake"
-save = "Save changes"
-subtitle = "Step {{current}} of {{total}} · {{label}}"
-title = "Connect a source"
 type = "Type"
 
-[portal.sources.wizard.steps]
-chooseType = "Choose type"
-configure = "Configure"
-review = "Review & connect"
+[portal.stepModal]
+close = "Close"
 
 [portal.usage]
 managePayment = "Manage payment"
@@ -8039,16 +8970,9 @@ summary = "Owns a team — manages its members' resources and shared configs."
 2 = "Portal access via the default policy"
 3 = "Everything Member can do"
 
-[portal.welcome]
-ariaLabel = "Welcome to Stirling PDF"
-badge = "Open-source"
-installEditor = "Install the Editor"
-inviteTeammates = "Invite teammates"
-openInBrowser = "Open in browser"
-perks = "Free forever · Self-hostable"
-subtitle = "The world's most secure PDF Editor is free for teams of all sizes. Includes 60+ PDF operations and SSO."
-title = "Welcome to"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Unlimited"
 
 [printFile]
 title = "Print File"
@@ -8680,12 +9604,12 @@ label = "Remove XMP Metadata"
 [sanitize.steps]
 settings = "Settings"
 
-[sanitizePdf]
-tags = "clean,secure,safe,remove-threats"
-
 [sanitizePDF]
 title = "Sanitise PDF"
 
+[sanitizePdf]
+tags = "clean,secure,safe,remove-threats"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Adjust page-scale"
@@ -8719,18 +9643,6 @@ unitInvalid = "Invalid unit: {{scaleUnit}}"
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Angle Threshold:"
-10 = "Extra padding (in pixels) around each saved photo so edges aren't cut."
-2 = "Tilt (in degrees) needed before we auto-straighten a photo."
-3 = "Tolerance:"
-4 = "How closely a colour must match the page background to count as background. Higher = looser, lower = stricter."
-5 = "Minimum Area:"
-6 = "Smallest photo size (in pixels²) we'll keep to avoid tiny fragments."
-7 = "Minimum Contour Area:"
-8 = "Smallest edge/shape we consider when finding photos (filters dust and specks)."
-9 = "Border Size:"
-
 [scannerImageSplit]
 submit = "Extract Image Scans"
 tags = "separate,auto-detect,scans,multi-photo,organise"
@@ -8762,6 +9674,18 @@ whatThisDoes = "What this does"
 whatThisDoesDesc = "Automatically finds and extracts each photo from a scanned page or composite image-no manual cropping."
 whenToUse = "When to use"
 
+[ScannerImageSplit.selectText]
+1 = "Angle Threshold:"
+10 = "Extra padding (in pixels) around each saved photo so edges aren't cut."
+2 = "Tilt (in degrees) needed before we auto-straighten a photo."
+3 = "Tolerance:"
+4 = "How closely a colour must match the page background to count as background. Higher = looser, lower = stricter."
+5 = "Minimum Area:"
+6 = "Smallest photo size (in pixels²) we'll keep to avoid tiny fragments."
+7 = "Minimum Contour Area:"
+8 = "Smallest edge/shape we consider when finding photos (filters dust and specks)."
+9 = "Border Size:"
+
 [search]
 noResults = "No results found"
 placeholder = "Enter search term..."
@@ -8779,46 +9703,22 @@ toolNotAvailableLocally = "Your Stirling-PDF server is offline and \"{{endpoint}
 [session]
 expired = "Your session has expired. Please refresh the page and try again."
 
-[sessionManagement.tooltip]
-header = "Managing Signing Sessions"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "New participants added to the end of signing order"
-bullet2 = "Cannot add participants after session is finalised"
-bullet3 = "Each participant receives a notification when it's their turn"
-description = "You can add more participants to an active session at any time before finalisation."
-title = "Adding Participants"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Full finalisation</b>: All participants have signed"
-bullet2 = "<b>Partial finalisation</b>: Some participants haven't signed yet"
-bullet3 = "Unsigned participants will be excluded from the final document"
-bullet4 = "Once finalised, you can load the signed PDF into active files"
-description = "Finalisation combines all signatures into a single signed PDF. This action cannot be undone."
-title = "Session Finalisation"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Cannot remove participants who have already signed"
-bullet2 = "Removed participants no longer receive notifications"
-bullet3 = "Signing order adjusts automatically"
-description = "Participants can be removed from sessions before they sign."
-title = "Removing Participants"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Each signature is applied sequentially to the PDF"
-bullet2 = "Later signers can see earlier signatures"
-bullet3 = "Critical for approval workflows and legal chains of custody"
-description = "The order you specify when creating the session determines who signs first."
-title = "Signature Order"
-
 [settings]
 close = "Close"
 
+[settings.ai]
+documents = "Documents & RAG"
+general = "General"
+limits = "Limits & Performance"
+models = "Models & Providers"
+title = "AI"
+
 [settings.configuration]
 advanced = "Advanced"
 database = "Database"
 endpoints = "Endpoints"
 features = "Features"
+folderAccess = "Folder Access"
 mcp = "MCP Server"
 storageSharing = "File Storage & Sharing"
 systemSettings = "System Settings"
@@ -8852,6 +9752,8 @@ defaultPdfEditor = "Default PDF editor"
 defaultPdfEditorActive = "Stirling PDF is your default PDF editor"
 defaultPdfEditorChecking = "Checking..."
 defaultPdfEditorInactive = "Another application is set as default"
+defaultPdfEditorRemind = "Remind me to set as default"
+defaultPdfEditorRemindDescription = "Show a banner when Stirling PDF is not your default PDF application."
 defaultPdfEditorSet = "Already Default"
 defaultStartupView = "Default view on launch"
 defaultStartupViewDescription = "Choose which view is active when the app starts"
@@ -8869,9 +9771,18 @@ languageDescription = "Choose the display language"
 logout = "Log out"
 setAsDefault = "Set as Default"
 theme = "Theme"
+themeAccent = "Accent colour"
+themeAccentCustom = "Custom colour"
+themeAccentCustomHint = "Custom (defaults recommended)"
+themeAccentDark = "Dark mode accent colour"
+themeAccentDefault = "Default"
+themeAccentDefaultHint = "Default theme (recommended)"
+themeAccentDescription = "Buttons, links and highlights follow it, and it subtly tints the app. Light and dark each have their own. System uses whichever is active."
+themeAccentLight = "Light mode accent colour"
 themeDark = "Dark"
 themeDescription = "Switch between light and dark mode"
 themeLight = "Light"
+themeReset = "Restore theme to default"
 themeSystem = "System"
 title = "General"
 user = "User"
@@ -8885,6 +9796,12 @@ intro = "Enable user authentication, team management, and workspace features for
 learnMore = "Learn more in documentation"
 title = "For System Administrators"
 
+[settings.general.loginLanding]
+description = "Choose which app opens when you sign in to Stirling Cloud."
+editor = "Editor"
+processor = "Processor"
+title = "After signing in"
+
 [settings.general.mode]
 fullscreen = "Fullscreen"
 sidebar = "Sidebar"
@@ -9093,6 +10010,11 @@ security = "Security"
 telegram = "Telegram"
 title = "Security & Authentication"
 
+[settings.signOut]
+confirm = "Are you sure you want to sign out?"
+submit = "Sign out"
+title = "Sign out"
+
 [settings.team]
 title = "Team"
 
@@ -9709,6 +10631,9 @@ uploadButton = "Upload to Server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "click here"
+fallback = "If it didn't open automatically,"
+opening = "Opening Swagger UI in a new tab..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API Documentation"
 
@@ -9816,14 +10741,42 @@ selectFilesHint = "Select files in Active Files to run this tool"
 singleFileScope = "Only applying to: {{fileName}}"
 viewerMode = "Switch to the file editor to add multiple files."
 
+[toolFormat]
+ANY = "any file"
+CBR = "a comic book archive (CBR)"
+CBZ = "a comic book archive (CBZ)"
+CSV = "a CSV file"
+EBOOK = "an ebook"
+EMAIL = "an email"
+EXCEL = "a spreadsheet"
+HTML = "a web page"
+IMAGE = "images"
+JAVASCRIPT = "a JavaScript file"
+JSON = "a JSON file"
+MARKDOWN = "a Markdown file"
+NONE = "no file"
+PCL = "a PCL print file"
+PDF = "a PDF"
+PDF_ENCRYPTED = "a password-protected PDF"
+POSTSCRIPT = "a PostScript file"
+PPT = "a presentation"
+TEXT = "a text file"
+VIDEO = "a video"
+WORD = "a Word document"
+XML = "an XML file"
+XPS = "an XPS document"
+ZIP = "a ZIP archive"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Back to all tools"
 collapse = "Collapse panel"
 expand = "Expand panel"
 goBack = "Go back"
+pdfTools = "PDF Tools"
 placeholder = "Choose a tool to get started"
 premiumFeature = "Premium feature:"
+searchTools = "Search tools"
 toolsHeader = "Tools"
 viewAllTools = "View all tools"
 
@@ -9858,11 +10811,6 @@ noToolsFound = "No tools found"
 quickAccess = "QUICK ACCESS"
 searchPlaceholder = "Search tools..."
 
-[toolPicker.categories]
-advancedTools = "Advanced Tools"
-recommendedTools = "Recommended Tools"
-standardTools = "Standard Tools"
-
 [toolPicker.subcategories]
 advancedFormatting = "Advanced Formatting"
 automation = "Automation"
@@ -10002,16 +10950,31 @@ title = "Users"
 you = "(you)"
 
 [users.action]
+cancelInvite = "Cancel invitation"
 deleteTeam = "Delete team"
 disableMfa = "Reset MFA"
 move = "Move to team"
 reinstate = "Reinstate"
 remove = "Remove from org"
+removeTeam = "Remove from team"
 rename = "Rename team"
 resetPw = "Reset password"
 suspend = "Suspend"
 unlock = "Unlock account"
 
+[users.activity]
+daysAgo = "{{count}}d ago"
+hoursAgo = "{{count}}h ago"
+justNow = "Just now"
+minutesAgo = "{{count}}m ago"
+monthsAgo_one = "{{count}} month ago"
+monthsAgo_other = "{{count}} months ago"
+never = "Never"
+weeksAgo_one = "{{count}} week ago"
+weeksAgo_other = "{{count}} weeks ago"
+yearsAgo_one = "{{count}} year ago"
+yearsAgo_other = "{{count}} years ago"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Approves policy"
@@ -10019,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Cancel the invitation to {{email}}? They won't be able to join with the current link."
+cancelInviteTitle = "Cancel invitation"
 deleteTeamBody = "Delete the {{name}} team? The team must be empty first - move its members to another team, and it can't still own any integration configs."
 deleteTeamTitle = "Delete team"
 disableMfaBody = "Remove {{name}}'s MFA enrolment? They'll set it up again on next login if required."
 disableMfaTitle = "Reset MFA"
 removeBody = "Permanently remove {{name}} from the organisation? This cannot be undone."
+removeTeamBody = "Remove {{name}} from the team? They keep their account but lose access to this team's resources."
 removeTitle = "Remove member"
 
 [users.empty]
@@ -10074,6 +11040,16 @@ username = "Username"
 usernameError = "Username must be at least 3 characters"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Invited by {{who}}"
+cancel = "Cancel"
+count = "{{count}} pending"
+desc = "Invited people who haven't joined yet. They hold a seat until they accept."
+expiresInDays_one = "Expires in {{count}} day"
+expiresInDays_other = "Expires in {{count}} days"
+expiresToday = "Expires today"
+title = "Pending invitations"
+
 [users.loadError]
 description = "Something went wrong reaching the back end, or you don't have access. Try again."
 title = "Couldn't load members"
@@ -10264,9 +11240,11 @@ title = "Attachments"
 
 [viewer.bookmarks]
 bookmarkTitle = "Bookmark title"
+bookmarkTitleRequired = "Bookmark title is required"
 closeSidebar = "Close bookmarks sidebar"
 collapseAll = "Collapse all bookmarks"
 expandAll = "Expand all bookmarks"
+searchPlaceholder = "Search bookmarks"
 
 [viewer.comments]
 addComment = "Add comment"
@@ -10657,30 +11635,6 @@ title = "Watermark Text"
 image = "Image"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Signature Creation Methods"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Customise pen colour and thickness"
-bullet2 = "Clear and redraw until satisfied"
-bullet3 = "Works on touch devices (tablets, phones)"
-description = "Create a handwritten signature using your mouse or touchscreen. Best for personal, authentic signatures."
-title = "Draw Signature"
-
-[wetSignature.tooltip.type]
-bullet1 = "Choose from multiple fonts"
-bullet2 = "Customise text size and colour"
-bullet3 = "Perfect for standardised signatures"
-description = "Generate a signature from typed text. Fast and consistent, suitable for business documents."
-title = "Type Signature"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Supports PNG, JPG, and other image formats"
-bullet2 = "Transparent backgrounds recommended for best results"
-bullet3 = "Image will be resized to fit signature area"
-description = "Upload a pre-created signature image. Ideal if you have a scanned signature or company logo."
-title = "Upload Signature Image"
-
 [workbenchBar]
 activeFiles = "Active Files"
 annotations = "Annotations"
diff --git a/frontend/editor/public/locales/es-ES/translation.toml b/frontend/editor/public/locales/es-ES/translation.toml
index 19d4cd6fcd..d7d9518076 100644
--- a/frontend/editor/public/locales/es-ES/translation.toml
+++ b/frontend/editor/public/locales/es-ES/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "{{count}} archivos seleccionados"
 font = "Fuente"
 fontSizeTooltip = "Tamaño del texto del número de página en puntos. Números mayores generan texto más grande."
 fontTypeTooltip = "Familia de fuente para los números de página. Elige según el estilo de tu documento."
-genericSubmit = "Procesar"
 green = "Verde"
 help = "Ayuda"
-imgPrompt = "Seleccionar Imagen(es)"
 incorrectPasswordMessage = "La contraseña actual no es correcta."
 info = "Información"
 invalidUndoData = "No se puede deshacer: datos de la operación no válidos"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Acuerdo de acceso"
 logOut = "Cerrar sesión"
 marginTooltip = "Distancia entre el número de página y el borde de la página."
 moreOptions = "Más Opciones"
-multiPdfPrompt = "Seleccionar PDFs (2+)"
 never = "Nunca"
 no = "No"
 noFileSelected = "No has seleccionado ningún archivo. Por favor, carga uno."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Orden personalizado de páginas (Introduce una lista de núme
 pages = "Páginas"
 pageSelectionPrompt = "Selección personalizada de páginas (Introduce una lista de números de página separados por comas 1,5,6 o funciones como 2n+1):"
 password = "Contraseña"
-pdfPrompt = "Seleccionar PDF(s)"
 pin = "Fijar archivo (mantener activo tras ejecutar la herramienta)"
 pro = "Pro"
 processingComplete = "Tu archivo está listo."
@@ -356,6 +352,7 @@ text = "Estos permisos controlan lo que los usuarios pueden hacer con el PDF. So
 title = "Cambiar permisos"
 
 [addStamp]
+preview = "Vista previa del sello"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Descargas manuales: haz clic en los enlaces y coloca los archivos
 noLanguages = "No se han encontrado idiomas de tessdata en el directorio configurado."
 permissionNotice = "La ruta de tessdata no tiene permisos de escritura. Las descargas se abrirán en el navegador; guarda los archivos .traineddata manualmente en la carpeta tessdata."
 
+[admin.settings.ai.documents]
+description = "Configura el modelo de embedding y los ajustes de recuperación utilizados para responder preguntas sobre documentos. Se aplica al motor de AI al guardar."
+title = "Documentos y RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Déjalo en blanco para usar la credencial de entorno propia del motor. Se aplica a despliegues autoalojados de un solo motor."
+generic = "Clave de API de embedding"
+openai = "Clave de API de OpenAI"
+setPlaceholder = "Guardada: déjalo en blanco para mantener la clave actual"
+voyageai = "Clave de API de VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL base del endpoint de embeddings compatible con OpenAI / Ollama, p. ej. http://ollama:11434/v1. Debe apuntar a un endpoint interno de confianza (sensible a SSRF)."
+label = "URL base de embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nombre del modelo de embedding. Texto libre; las sugerencias son solo orientativas."
+label = "Modelo de embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Proveedor utilizado para convertir el texto del documento en embeddings vectoriales."
+label = "Proveedor de embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Número máximo de búsquedas de recuperación que el agente puede ejecutar por solicitud."
+label = "Máx. búsquedas"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Cambiar el modelo de embedding surte efecto inmediatamente, pero los documentos indexados con el modelo anterior deben reindexarse para que la búsqueda devuelva resultados correctos."
+title = "Reindexación requerida"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Si has cambiado el modelo de embedding, reindexa los documentos existentes para que la búsqueda use el nuevo modelo."
+
+[admin.settings.ai.documents.topK]
+description = "Número de fragmentos más relevantes recuperados por búsqueda."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Conecta Stirling al motor de AI de Python y elige qué capacidades de AI se exponen. Los cambios se aplican al reiniciar."
+title = "Motor de AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Activa o desactiva funciones individuales de AI. Las funciones desactivadas se ocultan en la aplicación."
+title = "Capacidades"
+
+[admin.settings.ai.general.enabled]
+description = "Interruptor principal. Cuando está desactivado, no hay herramientas, agentes ni llamadas al motor de AI disponibles."
+label = "Activar AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Asistente conversacional para trabajar con PDFs."
+label = "Asistente de chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Categoriza documentos automáticamente por tipo o contenido."
+label = "Clasificación de documentos"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Genera un nuevo PDF (p. ej., desde HTML) mediante un agente de AI."
+label = "Crear PDF desde una petición"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Haz preguntas y obtén respuestas basadas en un documento subido."
+label = "Preguntas sobre documentos"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Revisa documentos en busca de errores matemáticos y numéricos."
+label = "Auditor matemático"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Añade comentarios de revisión y anotaciones redactados por AI a un PDF."
+label = "Agente de comentarios de PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Tiempo de espera para operaciones de agente más pesadas, como la generación de documentos."
+label = "Tiempo de espera de larga duración (segundos)"
+
+[admin.settings.ai.general.note]
+body = "El motor de AI se ejecuta como un servicio independiente. Su secreto compartido"
+body2 = "se establece mediante una variable de entorno del contenedor. Las claves de API de proveedores pueden introducirse en estas páginas o suministrarse como variables de entorno del motor; las claves introducidas aquí se envían al motor al guardar."
+title = "Acerca del motor de AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Tiempo de espera para respuestas de chat transmitidas (token a token)."
+label = "Tiempo de espera de stream (segundos)"
+
+[admin.settings.ai.general.test]
+button = "Probar conexión"
+failBody = "El motor de AI no ha respondido. Comprueba la URL, que el contenedor del motor esté en ejecución y que la AI esté activada (se necesita reiniciar después de activarla)."
+failTitle = "Motor de AI inaccesible"
+okBody = "El motor de AI ha respondido a una comprobación de estado."
+okTitle = "Motor de AI accesible"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Tiempo de espera para solicitudes estándar de AI al motor."
+label = "Tiempo de espera de solicitud (segundos)"
+
+[admin.settings.ai.general.url]
+description = "URL interna del motor de AI de Python, p. ej. http://stirling-pdf-engine:5001."
+label = "URL del motor de AI"
+
+[admin.settings.ai.limits]
+description = "Límites de seguridad para cuánto trabajo pueden realizar las solicitudes de AI y cuántas se ejecutan simultáneamente. Se aplica al motor de AI al guardar."
+title = "Límites y rendimiento"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Límite de seguridad: rechaza solicitudes de AI cuyo texto extraído supere esta longitud."
+label = "Máx. caracteres por solicitud"
+
+[admin.settings.ai.limits.maxPages]
+description = "Límite de seguridad: rechaza solicitudes de AI que superen este número de páginas PDF."
+label = "Máx. páginas por solicitud"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Número máximo de llamadas simultáneas al modelo en curso en todo el motor."
+label = "Concurrencia máx. del modelo"
+
+[admin.settings.ai.models]
+description = "Elige el proveedor de LLM y los modelos inteligente/rápido que usa el motor de AI. Se aplica al motor de AI al guardar."
+title = "Modelos y proveedores"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Clave de API de Anthropic"
+description = "Déjalo en blanco para usar la credencial de entorno propia del motor. Se aplica a despliegues autoalojados de un solo motor."
+generic = "Clave de API"
+openai = "Clave de API de OpenAI"
+setPlaceholder = "Guardada: déjalo en blanco para mantener la clave actual"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL base del endpoint compatible con OpenAI / Ollama, p. ej. http://ollama:11434/v1."
+label = "URL base del proveedor"
+warning = "La URL base debe apuntar a un endpoint interno de confianza. El motor realizará solicitudes del lado del servidor a ella, por lo que un valor no fiable es sensible a SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Tokens de salida máximos para el modelo rápido."
+label = "Máx. tokens del modelo rápido"
+
+[admin.settings.ai.models.fastModel]
+description = "Modelo más barato y rápido para tareas ligeras. Texto libre; las sugerencias son solo orientativas."
+label = "Modelo rápido"
+
+[admin.settings.ai.models.provider]
+description = "Proveedor de LLM con el que se comunica el motor."
+label = "Proveedor"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Tokens de salida máximos para el modelo inteligente."
+label = "Máx. tokens del modelo inteligente"
+
+[admin.settings.ai.models.smartModel]
+description = "Modelo de alta capacidad para razonamiento complejo. Texto libre; las sugerencias son solo orientativas."
+label = "Modelo inteligente"
+
+[admin.settings.ai.saved]
+body = "Los cambios se envían automáticamente al motor de AI."
+bodyNoPush = "Ajustes guardados. Se aplicarán la próxima vez que el motor de AI recoja su configuración."
+title = "Ajustes de AI guardados"
+
 [admin.settings.badge]
 clickToUpgrade = "Haz clic para ver los detalles del plan"
 
@@ -938,6 +1094,25 @@ label = "Regenerar al inicio"
 description = "Número de días que el certificado será válido"
 label = "Validez del certificado (días)"
 
+[admin.settings.folderAccess]
+description = "Directorios desde los que las fuentes de carpeta y las salidas de carpeta pueden leer y en los que pueden escribir. Esto es un límite de seguridad: las automatizaciones nunca pueden apuntar a una ruta del servidor fuera de esta lista."
+securityNote = "Déjalo vacío para desactivar por completo las fuentes y salidas de carpeta. El directorio de configuración propio de Stirling siempre está fuera de los límites."
+title = "Acceso a carpetas"
+
+[admin.settings.folderAccess.implied]
+description = "Estos directorios gestionados por Stirling siempre están permitidos y no se pueden cambiar aquí."
+serverStorage = "Almacenamiento de archivos del servidor"
+title = "Siempre permitido"
+watchedFolder = "Carpeta vigilada del pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Añadir"
+empty = "No hay carpetas permitidas. Las fuentes y salidas de carpeta están desactivadas actualmente."
+hint = "Introduce rutas absolutas, por ejemplo /data/inbox."
+label = "Raíces de carpeta permitidas"
+placeholder = "/data/inbox"
+remove = "Eliminar raíz de carpeta"
+
 [admin.settings.general]
 description = "Configura la configuración global de la aplicación, incluida la marca y el comportamiento predeterminado."
 system = "Sistema"
@@ -1842,6 +2017,15 @@ export = "Exportar"
 accessDenied = "Acceso denegado"
 insufficientPermissions = "No tienes permiso para realizar esta acción."
 
+[auth.callback]
+completing = "Completando autenticación"
+invalidToken = "Error de inicio de sesión con OAuth: token no válido."
+missingToken = "Error de inicio de sesión con OAuth: no se ha recibido ningún token."
+oauthFailed = "Error de inicio de sesión con OAuth. Inténtalo de nuevo."
+pleaseWait = "Espera mientras terminamos de iniciar tu sesión."
+signedOut = "Se ha cerrado tu sesión. Inicia sesión de nuevo."
+windowMayClose = "Puedes cerrar esta ventana cuando se complete."
+
 [auth.displayName]
 guest = "Invitado"
 user = "Usuario"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Asegura documentos PDF eliminando contenido potencialmente
 description = "Esta herramienta renombrará automáticamente los archivos PDF en función de su contenido. Analiza el documento para encontrar el título más adecuado a partir del texto."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Rotar automáticamente"
+tags = "rotar automáticamente,corregir orientación,boca abajo,de lado,enderezar,orientar,detectar orientación,corregir rotación,orientar automáticamente,escaneado,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Umbral de confianza"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Solo OCR"
+text = "Solo texto"
+title = "Método de detección"
+
+[autoRotate.error]
+failed = "Se ha producido un error al rotar automáticamente el PDF."
+
+[autoRotate.inferUndetected]
+title = "Rotar páginas de baja confianza para que coincidan"
+
+[autoRotate.report]
+applied = "{{degrees}}° horario"
+confidenceValue = "Confianza {{value}}"
+noChange = "Sin cambios"
+pageLabel = "Página {{number}}"
+summary = "{{rotated}} de {{total}} páginas rotadas, {{unchanged}} se dejaron como estaban"
+title = "Informe de detección"
+
+[autoRotate.report.method]
+inferred = "Coincidencia"
+none = "Omitida"
+osd = "OCR"
+text = "Texto"
+
+[autoRotate.report.note]
+belowThreshold = "Por debajo del umbral"
+blankPage = "La página está en blanco"
+inferredFromDocument = "Igual que las otras páginas"
+noDominantDirection = "Direcciones de texto mixtas"
+osdFailed = "No se ha encontrado texto legible"
+osdNoVerdict = "No se pudo determinar la orientación"
+tesseractUnavailable = "OCR no instalado"
+tooFewGlyphs = "Muy poco texto"
+
+[autoRotate.results]
+title = "Resultados de rotación automática"
+
+[autoRotate.settings]
+title = "Ajustes"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Qué grado de certeza debe tener la comprobación antes de girar una página. Bájalo para rotar más páginas; súbelo para dejar más páginas intactas."
+title = "Umbral de confianza"
+
+[autoRotate.tooltip.description]
+text = "Determina en qué orientación debe estar cada página y la gira correctamente. Las páginas que ya están derechas se dejan igual."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto lee primero el texto de la página y luego analiza la página como imagen si no es suficiente. Solo texto omite la comprobación de imagen, lo más rápido para documentos que nunca se escanearon. Solo OCR trata cada página como una imagen."
+title = "Método de detección"
+
+[autoRotate.tooltip.header]
+title = "Rotar automáticamente"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Las páginas en blanco o casi en blanco no se pueden comprobar por sí solas. Cuando todas las páginas que pudieron leerse necesitan el mismo giro, estas páginas se giran para coincidir con ellas."
+title = "Rotar páginas de baja confianza para que coincidan"
+
 [autoSizeSplitPDF]
 tags = "pdf,dividir,documento,organización"
 
@@ -2189,33 +2440,6 @@ keywords = "Palabras clave: odd, even"
 numbers = "Números/rangos: 5, 10-20"
 progressions = "Progresiones: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipos de certificado"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Gestionado por administradores del sistema"
-bullet2 = "Compartido entre usuarios autorizados"
-bullet3 = "Representa la identidad de la empresa, no la individual"
-bullet4 = "Ideal para: Documentos oficiales, firmas de equipo"
-description = "Un certificado compartido proporcionado por tu organización. Se usa para la autoridad de firma a nivel de empresa."
-title = "Certificado de la organización"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Se genera automáticamente en el primer uso"
-bullet2 = "Vinculado a tu cuenta de usuario"
-bullet3 = "No se puede compartir con otros usuarios"
-bullet4 = "Ideal para: Documentos personales, responsabilidad individual"
-description = "Un certificado autogenerado único para tu cuenta de usuario. Adecuado para firmas individuales."
-title = "Certificado personal"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Requiere archivo P12/PFX y contraseña"
-bullet2 = "Puede ser emitido por Autoridades de Certificación externas"
-bullet3 = "Mayor nivel de confianza para documentos legales"
-bullet4 = "Ideal para: Contratos legalmente vinculantes, validación externa"
-description = "Usa tu propio archivo de certificado PKCS#12. Proporciona control total sobre las propiedades del certificado."
-title = "Cargar P12 personalizado"
-
 [certSign]
 awaitingSignatures = "A la espera de firmas"
 chooseCertificate = "Elegir archivo de certificado"
@@ -2542,34 +2766,6 @@ server = "Servidor"
 stepTitle = "Origen del certificado"
 upload = "Subir"
 
-[certSign.tooltip.header]
-title = "Acerca de la gestión de firmas"
-
-[certSign.tooltip.overview]
-bullet1 = "Verificar firmas existentes y su validez"
-bullet2 = "Ver información detallada sobre firmantes y certificados"
-bullet3 = "Añadir nuevas firmas digitales para asegurar tus documentos"
-bullet4 = "Múltiples archivos compatibles con navegación fácil"
-text = "Esta herramienta te permite verificar si tus PDF están firmados digitalmente y añadir nuevas firmas digitales. Las firmas digitales demuestran quién creó o aprobó un documento y muestran si se ha cambiado desde la firma."
-title = "¿Qué puede hacer esta herramienta?"
-
-[certSign.tooltip.signing]
-bullet1 = "Compatible con formatos PEM, PKCS12, JKS y certificado de servidor"
-bullet2 = "Opción de mostrar u ocultar firma en el PDF"
-bullet3 = "Añadir motivo, ubicación y nombre del firmante"
-bullet4 = "Elegir en qué página colocar firmas visibles"
-bullet5 = "Usar certificado de servidor para la opción simple 'Firmar con Stirling-PDF'"
-text = "Para firmar un PDF, necesita un certificado digital (como PEM, PKCS12 o JKS). Puede elegir hacer visible la firma en el documento o mantenerla invisible solo para seguridad."
-title = "Añadir firmas"
-
-[certSign.tooltip.validation]
-bullet1 = "Muestra si las firmas son válidas o inválidas"
-bullet2 = "Muestra información del firmante y fecha de firma"
-bullet3 = "Verifica si el documento fue modificado después de firmar"
-bullet4 = "Puede usar certificados personalizados para verificación"
-text = "Cuando verificas firmas, la herramienta te indica si son válidas, quién firmó el documento, cuándo se firmó y si el documento se ha cambiado desde la firma."
-title = "Verificar firmas"
-
 [changeCreds]
 changeUsername = "Actualiza tu nombre de usuario. Se cerrará tu sesión tras actualizar."
 credsUpdated = "Cuenta actualizada"
@@ -2824,6 +3020,7 @@ next = "Siguiente"
 preview = "Vista previa"
 previous = "Anterior"
 refresh = "Actualizar"
+remaining = "Restante"
 retry = "Reintentar"
 save = "Guardar"
 
@@ -3264,24 +3461,6 @@ description = "Estas cookies son esenciales para que el sitio web funcione corre
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Supervisión avanzada"
-allInOneWorkspace = "Espacio de trabajo PDF todo en uno (visor, herramientas y agente)"
-apiSandbox = "Entorno de pruebas de API"
-dedicatedSupportSlas = "Soporte dedicado y SLA"
-fasterThroughput = "10x más rendimiento"
-fullyPrivateFiles = "Archivos totalmente privados"
-largeFileProcessing = "Procesamiento de archivos grandes"
-orgWideAccess = "Controles de acceso para toda la organización"
-premiumAiModels = "Modelos de IA premium"
-prioritySupport = "Soporte prioritario"
-privateDocCloud = "Nube de documentos privada"
-ragFineTuning = "RAG + ajuste fino"
-secureApiAccess = "Acceso seguro a la API"
-standardThroughput = "Rendimiento estándar"
-unlimitedApiAccess = "Acceso ilimitado a la API"
-unlimitedSeats = "Usuarios ilimitados"
-
 [crop]
 autoCrop = "Recortar automáticamente espacios en blanco"
 noFileSelected = "Seleccione un archivo PDF para comenzar a recortar"
@@ -3346,6 +3525,7 @@ message = "No se pudo establecer el gestor de PDF predeterminado"
 title = "Error"
 
 [defaultApp.prompt]
+dontRemind = "No volver a recordármelo"
 message = "Haga que Stirling PDF sea su aplicación predeterminada para abrir archivos PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Personalizar grupos"
 dropHint = "Abre archivos para empezar"
 dropToAdd = "Drop files to add"
 expand = "Expandir barra lateral"
-files = "Archivos"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive no está configurado"
 leaveMyFiles = "Salir de Mis archivos"
+library = "Biblioteca de PDF"
 myFiles = "Mis archivos"
 noFiles = "Aún no hay archivos"
 openFileManager = "Abrir gestor de archivos"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Añadir"
-addLabel = "Añadir una etiqueta…"
-categoryIconAria = "Elegir un icono para {{name}}"
-createCategory = "Crear categoría"
-delete = "Eliminar categoría"
 done = "Hecho"
-hide = "Ocultar categoría"
-newCategory = "Nombre de nueva categoría…"
-removeLabel = "Eliminar {{name}}"
-rename = "Cambiar nombre"
 reset = "Restablecer valores predeterminados"
-search = "Buscar etiquetas…"
-show = "Mostrar categoría"
 subtitle = "Agrupa tus archivos en categorías principales. Añade etiquetas existentes o nuevas a una categoría, cámbiale el nombre o crea la tuya propia. Los archivos que no estén en ninguna de tus categorías aparecen en “Otros”."
 title = "Categorías de la barra lateral"
 
@@ -3808,6 +3977,7 @@ refresh = "Actualizar desde el servidor"
 remove = "Eliminar"
 removeVersion = "Eliminar esta versión"
 rename = "Renombrar"
+renamed = "Renombrado"
 renameFolder = "Renombrar carpeta"
 resizeFolderTree = "Redimensionar árbol de carpetas (teclas de flecha, Mayús para pasos más grandes; doble clic para ajustar automáticamente)"
 save = "Guardar"
@@ -3910,9 +4080,7 @@ count = "Archivos"
 folder = "Carpeta"
 labels = "Etiquetas"
 modified = "Modificado"
-name = "Nombre"
 size = "Tamaño"
-toolHistoryAtVersion = "Cadena de herramientas acumulada"
 totalSize = "Tamaño total"
 type = "Tipo"
 versionHistory = "Evolución de versiones"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Todo guardado"
+extractCsvError = "No se pudo extraer CSV"
+extractXlsxError = "No se pudo extraer XLSX"
 flattenAfterFilling = "Aplanar después de rellenar"
+requiredAbbreviation = "oblig."
+requiredFieldsError = "Rellena todos los campos obligatorios"
 rescanFields = "Volver a escanear campos"
 rescanFormFields = "Volver a escanear campos del formulario"
 save = "Guardar"
+saveShortcut = "Ctrl+S para guardar"
+unsavedChanges = "Cambios sin guardar"
 
 [formFill.sidebar]
 close = "Cerrar barra lateral"
@@ -4309,6 +4484,11 @@ desc = "Renombra automáticamente un archivo PDF basándose en su encabezado det
 tags = "auto-detectar,basado-en-encabezado,organizar,reetiquetar"
 title = "Renombrar Automáticamente Archivo PDF"
 
+[home.autoRotate]
+desc = "Detecta la orientación de cada página y la gira automáticamente para dejarla derecha."
+tags = "rotar automáticamente,corregir orientación,boca abajo,de lado,enderezar,orientar,detectar orientación,corregir rotación,orientar automáticamente,escaneado,OSD"
+title = "Rotar automáticamente"
+
 [home.autoSizeSplitPDF]
 tags = "auto,dividir,tamaño"
 title = "Auto dividir por tamaño/conteo"
@@ -4608,13 +4788,13 @@ hint = "Sube un PNG, JPG, SVG u otro archivo de imagen para colocarlo en el PDF.
 label = "Subir imagen"
 placeholder = "Seleccionar archivo de imagen"
 
-[imageToPdf]
-tags = "conversión,img,jpg,imagen,fotografía"
-
 [imageToPDF]
 header = "Imagen a PDF"
 title = "Imagen a PDF"
 
+[imageToPdf]
+tags = "conversión,img,jpg,imagen,fotografía"
+
 [infoBanner]
 dismiss = "Descartar"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "¡Has sido invitado!"
 
 [landing]
 addFiles = "Agregar Archivos"
-heroSubtitle = "Suelte o añada un PDF existente para empezar."
 mobileUpload = "Subir desde el móvil"
 openFromComputer = "Abrir desde el ordenador"
 uploadFromComputer = "Cargar desde el ordenador"
-workbenchEmptyStateHero = "Suelta un PDF en cualquier lugar"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Iniciar sesión"
 magicLinkSent = "¡Enlace mágico enviado a {{email}}! Revisa tu correo electrónico y haz clic en el enlace para iniciar sesión."
 mfaCode = "Código de autenticación"
 mfaRequired = "Se requiere código de dos factores"
+noAccount = "¿No tienes una cuenta?"
 or = "O"
 password = "Contraseña"
 passwordChangedSuccess = "¡Contraseña cambiada correctamente! Inicia sesión con tu nueva contraseña."
@@ -4715,26 +4894,10 @@ signInWith = "Iniciar sesión con"
 title = "Iniciar sesión"
 unexpectedError = "Error inesperado: {{message}}"
 updatePassword = "Actualizar contraseña"
-useEmailInstead = "Iniciar sesión con correo electrónico"
 useMagicLink = "Usar enlace mágico en su lugar"
 username = "Nombre de usuario"
 youAreLoggedIn = "¡Has iniciado sesión!"
 
-[login.slides.edit]
-alt = "Editar PDFs"
-subtitle = "Con más de una docena de herramientas para ocultar, firmar, leer y manipular PDFs, seguro que encuentra lo que busca."
-title = "Edite PDFs para mostrar/proteger la información que quiera"
-
-[login.slides.overview]
-alt = "Vista general de Stirling PDF"
-subtitle = "Una suite en la nube centrada en la privacidad para PDF que le permite convertir, firmar, ocultar y gestionar documentos, junto con 50+ herramientas potentes."
-title = "Su solución integral para todas sus necesidades de PDF."
-
-[login.slides.secure]
-alt = "Proteger PDFs"
-subtitle = "Añada contraseñas, oculte contenido y gestione certificados con facilidad."
-title = "Proteja la información sensible en sus PDFs"
-
 [margin]
 large = "Grande"
 medium = "Mediano"
@@ -4976,6 +5139,7 @@ pinButton = "Puedes usar el botón <strong>Fijar</strong> si prefieres que tus a
 results = "Después de que la herramienta haya terminado, el paso de <strong>Revisión</strong> mostrará una vista previa de los resultados en este panel y te permitirá deshacer la operación o descargar el archivo. "
 runButton = "Una vez configurada la herramienta, este botón te permite ejecutar la herramienta en todos los PDFs seleccionados."
 selectCropTool = "Seleccionemos la herramienta <strong>Recortar</strong> para mostrar cómo usar una de las herramientas."
+stepOf = "Paso {{current}} de {{total}}"
 toolInterface = "Esta es la interfaz de la herramienta <strong>Recortar</strong>. Como puedes ver, no hay mucho porque aún no hemos añadido ningún archivo PDF con el que trabajar."
 workbench = "Este es el <strong>Workbench</strong> - el área principal donde ves y editas tus PDFs."
 wrapUp = "¡Todo listo! Has aprendido sobre las áreas principales de la aplicación y cómo usarlas. Haz clic en el botón <strong>Ayuda</strong> cuando quieras para ver este recorrido de nuevo."
@@ -4988,6 +5152,26 @@ showMeAround = "Muéstreme el recorrido"
 skipForNow = "Omitir por ahora"
 skipTheTour = "Saltar el recorrido"
 
+[onboarding.checklist]
+dismiss = "Descartar"
+title = "Configurar Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Ejecuta Stirling de forma nativa en tu equipo"
+title = "Descargar Stirling para escritorio"
+
+[onboarding.checklist.inviteTeam]
+description = "Colabora con tu equipo"
+title = "Invitar a miembros del equipo"
+
+[onboarding.checklist.shareAnalytics]
+description = "Ayuda a mejorar Stirling"
+title = "Compartir datos de uso anónimos"
+
+[onboarding.checklist.takeTour]
+description = "Descubre cómo funciona Stirling con una visita rápida"
+title = "Hacer la visita guiada"
+
 [onboarding.desktopInstall]
 body = "Stirling funciona mejor como aplicación de escritorio. Puede usarla sin conexión, acceder a los documentos más rápido y editar localmente en su ordenador."
 selectOs = "Seleccionar sistema operativo"
@@ -4996,7 +5180,21 @@ titleWithOs = "Descargar para {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Código de autenticación"
+description = "Protege tu cuenta vinculando una aplicación de autenticación. Escanea el código QR o introduce la clave de configuración y, a continuación, confirma el código de 6 dígitos para finalizar."
+enable = "Activar MFA"
+enableError = "No se ha podido activar la autenticación de dos factores. Comprueba el código e inténtalo de nuevo."
+enterCode = "Introduce el código de 6 dígitos de tu aplicación."
+enterCodeError = "Introduce el código de autenticación para continuar."
+logout = "Cerrar sesión"
+openAuthenticator = "Abre Google Authenticator, Authy o 1Password."
 qrCodeLoading = "Generando tu código QR…"
+regenerateQrCode = "Regenerar código QR"
+scanQrCode = "Escanea el código QR o introduce la clave de configuración a continuación."
+setupError = "No se ha podido iniciar la configuración de dos factores. Inténtalo de nuevo."
+setupKey = "Clave de configuración (entrada manual)"
+stepByStep = "Paso a paso"
+success = "MFA se ha activado. Ya puedes continuar."
+title = "Configuración de autenticación multifactor"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Cuando habilite el modo de inicio de sesión, podrá gestionar usuarios, configurar ajustes y supervisar la salud del servidor. Las primeras <strong>{{freeTierLimit}}</strong> personas de su servidor pueden usar Stirling gratis."
@@ -5005,6 +5203,11 @@ adminTitle = "Resumen de administrador"
 userBody = "Invite a sus compañeros, asigne roles y mantenga sus documentos organizados en un espacio de trabajo seguro. Active el modo de inicio de sesión cuando esté listo para pasar del uso individual."
 userTitle = "Resumen del plan"
 
+[onboarding.processorIntro]
+body = "Stirling ahora ejecuta <strong>Políticas</strong>: reglas automatizadas que clasifican, protegen y procesan cada documento cuando llega. Configúralas y supervisa las ejecuciones en el <strong>Procesador</strong>."
+cta = "Ver el Procesador"
+title = "Descubre el Procesador de Stirling"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Año prepago"
+
+[payg.prepaid.banner]
+exhausted = "Tu capacidad prepago se ha agotado; se ha reanudado la facturación medida. Recarga para mantener el descuento."
+expiring_one = "Tu año prepago termina en {{count}} día. La capacidad no utilizada caduca; recarga para iniciar un año nuevo."
+expiring_other = "Tu año prepago termina en {{count}} días. La capacidad no utilizada caduca; recarga para iniciar un año nuevo."
+low = "Te queda el {{pct}}% de tu capacidad prepago. Recarga en cualquier momento para mantener el procesamiento sin interrupciones."
+
+[payg.prepaid.card]
+subtitle = "Se usa antes de la facturación medida y fuera de tu límite de gasto."
+title = "Capacidad prepago"
+
+[payg.prepaid.meter]
+capSuffix = "de {{total}} créditos prepago"
+expires = "Caduca el {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Agotada"
+healthy = "Queda bastante"
+low = "Queda poco"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Pega la clave de licencia de tu correo"
 success = "¡Licencia activada!"
 successMessage = "Tu licencia se ha activado correctamente. Ya puedes cerrar esta ventana."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "aplicado"
-enforcing = "Aplicando..."
-failed = "Error en la aplicación"
 outputsUnavailable = "Los resultados de la política ya no están disponibles para descargar."
 partialOutputsUnavailable = "Algunos resultados de la política ya no están disponibles para descargar."
-retrying = "Ocupado, reintentando..."
 runNotFound = "No se pudo encontrar la ejecución de la aplicación."
-step = "paso {{current}}/{{total}}"
 timedOut = "La aplicación agotó el tiempo de espera antes de que la ejecución pudiera finalizar."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Cerrar"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Aplicando {{names}}"
 applyingProgress = "Aplicando {{names}} ({{done}} de {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} de {{total}} archivo(s) no se pudieron procesar y se
 failureTitle = "Exportado sin aplicación completa"
 printPolicyAppliedBody = "Este PDF se actualizó para cumplir una política. Revisa los cambios y vuelve a imprimir."
 printPolicyAppliedTitle = "Política aplicada antes de imprimir"
-queued = "+{{count}} en cola"
 successTitle = "{{names}} aplicadas"
 summaryMore = "{{first}}, {{second}} y {{more}} más"
 summaryTwo = "{{first}} y {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Aplicando antes de convertir"
-default = "Aplicando"
-export = "Aplicando antes de exportar"
-input = "Aplicando al importar"
-print = "Aplicando antes de imprimir"
-
-[policies.field]
-accessLog = "Registro de acceso"
-archiveAfter = "Archivar después de"
-auditTrail = "Pista de auditoría"
-belowThreshold = "Por debajo del umbral"
-destination = "Destino"
-frameworks = "Marcos"
-immutableHold = "Retención inmutable"
-keepFor = "Conservar durante"
-minConfidence = "Confianza mín."
-notify = "Notificar al enrutar"
-onViolation = "Cuando no cumple"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Añadir"
-addPlaceholder = "Añadir una etiqueta…"
-customNote = "Personalizado para tu equipo."
-defaultNote = "Usando el valor predeterminado integrado, compartido con tu equipo."
-duplicate = "\"{{name}}\" ya existe."
-edit = "Editar etiquetas"
-empty = "Aún no hay etiquetas."
-export = "Exportar JSON"
-iconAria = "Elegir un icono para {{name}}"
-import = "Importar JSON"
-importError = "No se ha podido importar ese archivo."
-managedNote = "Las etiquetas de equipo las gestiona el líder de tu equipo."
-modalSubtitle = "Compartido con todo tu equipo. El clasificador elige las etiquetas que encajan con cada documento."
-modalTitle = "Etiquetas de clasificación"
-pickIcon = "Usar el icono de {{label}}"
-removeAria = "Eliminar {{name}}"
-resetToDefault = "Restablecer al valor predeterminado"
-saveForTeam = "Guardar para el equipo"
-saving = "Guardando…"
-sectionLabel = "Etiquetas de clasificación"
-startFromScratch = "Empezar desde cero"
-teamCount = "etiquetas de equipo"
-tooLong = "Las etiquetas pueden tener como máximo {{max}} caracteres."
-ungrouped = "Sin agrupar"
-view = "Ver etiquetas"
+categoryCount = "categorías"
+hideCategory = "Ocultar categoría"
+labelCount = "etiquetas"
+sharedNote = "Estas etiquetas están integradas y se comparten con todo tu equipo."
+showCategory = "Mostrar categoría"
 
 [policies.pii]
 account = "Números de cuenta (etiquetados)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Números de enrutamiento de EE. UU. (ABA)"
 ssn = "Números de la Seguridad Social"
 
-[policies.settings]
-noneExport = "Actualmente no se ejecuta ninguna política al exportar."
-noneUpload = "Actualmente no se ejecuta ninguna política al subir."
-onExport = "Al exportar"
-onUpload = "Al subir"
-reorderHandle = "Arrastrar para reordenar"
-runOrderDesc = "Cuando se ejecuta más de una política en el mismo activador, se ejecutan en este orden: cada una sobre la salida de la política anterior. Arrastra para reordenar."
-title = "Configuración de políticas"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opciones de política"
-policySettings = "Configuración de políticas"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Reintentar políticas fallidas ({{count}})"
-rowProgress = "{{completed}} de {{total}} archivos procesados"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "¿Qué es una política?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Encuentra y oculta automáticamente detalles sensibles —como números de la Seguridad Social y de tarjetas— para que no puedan leerse en el documento."
-sanitize = "Elimina JavaScript oculto del archivo, para que nada se ejecute automáticamente cuando alguien lo abra."
-watermark = "Estampa una marca visible (p. ej., \"Confidential\") en cada página."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Cerrar"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "Aplicando {{name}}..."
 badgeRan = "La política {{name}} se ejecutó en este archivo"
+badgeRunning = "{{name}} en ejecución..."
 blockingAction = "{{action}} bloqueada mientras se aplica la política, espera..."
 dismiss = "Descartar superposición"
 enforcingTitle = "Aplicando política..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Ver archivo (la política aún se está aplicando)"
 [policyOption]
 autoRedactPhi = "Censurar PHI automáticamente"
 blockExport = "Bloquear exportación"
+ccpa = "CCPA"
 contracts = "Contratos"
 documents = "Documentos"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plan Editor"
 subscribed = "Plan Processor"
 unlinked = "No vinculada"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap desde documento"
-sectionsAriaLabel = "Secciones del creador de agentes"
-selectorAriaLabel = "Agentes"
-subtitle = "Diseña, prueba y lanza los agentes de IA que clasifican, extraen y enrutan tus documentos. Define escenarios, delimita el acceso a herramientas, ejecuta un conjunto de referencia y publica una versión."
-title = "Creador de agentes"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Cancelar"
-dropzoneText = "Elegir un documento de muestra (PDF o imagen)"
-lead = "Suelta un documento de muestra y propondremos escenarios y un esquema de extracción que podrás perfeccionar. No se publica nada hasta que lo revises."
-submit = "Hacer bootstrap del agente"
-subtitle = "Inicializa un nuevo agente a partir de un archivo representativo"
-title = "Bootstrap desde un documento"
-
-[portal.agentBuilder.empty]
-description = "Haz bootstrap de un agente desde un documento de muestra para inicializar sus escenarios y su esquema de extracción; luego perfila y publica."
-title = "Aún no hay agentes"
-
-[portal.agentBuilder.evals]
-casesPassing = "Casos aprobados"
-columnCase = "Caso de evaluación"
-columnLatency = "Latencia"
-columnResult = "Resultado"
-fail = "fallo"
-goldenSetPassRate = "Tasa de aprobación del conjunto de referencia"
-latencyMs = "{{ms}} ms"
-notRun = "no ejecutado"
-pass = "aprobado"
-passRate = "Tasa de aprobación"
-runEvals = "Ejecutar evaluaciones"
-
-[portal.agentBuilder.evals.empty]
-description = "Las evaluaciones convierten tus escenarios en un conjunto de referencia repetible. Actualiza para capturar la tasa de aprobación a lo largo del tiempo y condicionar las publicaciones a ella."
-title = "Aún no hay conjunto de referencia"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "entre conjuntos de referencia"
-activeAgents = "Agentes activos"
-avgPassRate = "Tasa media de aprobación de evaluaciones"
-fleetWide = "en toda la flota"
-latestPublished = "Última publicada"
-scenarios = "Escenarios"
-testCases = "casos de prueba"
-totalDescription_one = "{{count}} en total"
-totalDescription_other = "{{count}} en total"
-
-[portal.agentBuilder.scenarios]
-add = "Añadir"
-addScenario = "Añadir escenario"
-enable = "Habilitar"
-expectationLabel = "Comportamiento esperado"
-expectationPlaceholder = "Qué debe hacer el agente"
-inEval = "en evaluación"
-mute = "Silenciar"
-muted = "silenciado"
-nameLabel = "Nombre"
-namePlaceholder = "p. ej., Escalada de cumplimiento"
-
-[portal.agentBuilder.tabs]
-evals = "Evaluaciones"
-scenarios = "Escenarios"
-tools = "Herramientas"
-versions = "Versiones"
-
-[portal.agentBuilder.tools]
-broadAccess = "Acceso amplio"
-deniedHint = "Las herramientas seleccionadas están bloqueadas. Todo lo demás sigue siendo invocable."
-deniedTools = "Herramientas denegadas"
-governanceGate = "La gobernanza de herramientas está disponible en el plan Enterprise."
-restricted = "Restringido"
-restrictedAccess = "Acceso restringido a herramientas"
-restrictedDescription = "Permite todas las herramientas excepto las que deniegues abajo."
-
-[portal.agentBuilder.versions]
-current = "actual"
-historyGate = "El historial completo de versiones y la reversión están disponibles en el plan Enterprise."
-publish = "Publicar"
-rollBack = "Revertir"
-
 [portal.assistant]
 close = "Cerrar asistente"
 error = "No se ha podido contactar con el asistente."
@@ -6365,9 +6346,21 @@ typing = "Escribiendo"
 loading = "Cargando"
 redirectingToEditor = "Redirigiendo al editor..."
 
+[portal.billing.activation]
+maybeLater = "Quizá más tarde"
+title = "Activar el Procesador"
+
+[portal.billing.activation.payg]
+sub = "Establece un límite mensual. Paga por lo que ejecutes."
+title = "Pago por uso"
+
+[portal.billing.activation.prepay]
+badge = "2 meses gratis"
+sub = "Una factura, tarjeta o transferencia bancaria."
+title = "Prepaga un año"
+
 [portal.billing.checkout]
 noClientSecret = "La función Edge no devolvió client_secret."
-subtitle = "Añade una tarjeta para continuar tras tu concesión gratuita del plan Editor. Stripe se encarga del resto."
 title = "Activar el plan Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Tu pago se ha realizado correctamente, pero la activación está tardand
 close = "Cerrar"
 title = "Ya casi está"
 
+[portal.billing.checkout.cap]
+amountAria = "Límite de gasto mensual"
+back = "Atrás"
+continue = "Continuar al pago"
+error = "No se pudo establecer tu límite de gasto"
+finePrint = "Las facturas se emiten mensualmente. Cancela en cualquier momento."
+noLimit = "Sin límite"
+note = "Nunca se te facturará por encima de tu límite. El procesamiento simplemente se pausa."
+perMonth = "/ mes"
+title = "Establece tu límite de gasto"
+
+[portal.billing.checkout.card]
+fields = "Número de tarjeta · MM / AA · CVC · ZIP"
+label = "Datos de la tarjeta"
+note = "Datos de tarjeta recopilados por Stripe. Stirling nunca almacena PAN ni CVC."
+
 [portal.billing.checkout.error]
 title = "No se ha podido iniciar el pago"
 
@@ -6383,10 +6392,9 @@ body = "Tu pago se ha procesado. Estamos activando el procesamiento medido en tu
 hint = "Mantén esta ventana abierta."
 title = "Activando tu plan Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "en el env del portal para habilitar el pago en la aplicación."
-bodyBefore = "Configura"
-title = "Stripe no configurado"
+[portal.billing.checkout.pay]
+limit = "Límite de gasto mensual {{amount}}/mes. El procesamiento se pausa al alcanzar el límite."
+limitNoCap = "Sin límite de gasto. El procesamiento no se pausará. Las facturas se emiten mensualmente."
 
 [portal.billing.enterpriseUpsell]
 cta = "Crear tu presupuesto Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Plan actual"
 freeForever = "Gratis para siempre"
 noTeamResolved = "Aún no se ha resuelto ningún equipo en tu cartera; actualiza e inténtalo de nuevo."
 ownerOnly = "Solo el propietario del equipo puede activar el plan Processor."
+payInvoice = "Pagar factura para completar"
 planName = "Editor"
 ssoIncluded = "SSO incluido"
 switchOnProcessor = "Activar Processor →"
 unlimitedUsers = "Usuarios ilimitados"
+viewQuote = "Ver presupuesto"
 
 [portal.billing.invoices]
 columnAmount = "Importe"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Solicitudes directas de API"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizaciones y pipelines"
 segmentAutomationLabel = "Automatización"
+sizeMultiplier = "{{formatted}} PDFs usaron un multiplicador de tamaño"
+summary = "{{unique}} únicos · {{units}} unidades de contador · {{avg}} media por PDF"
+summaryNoRate = "{{unique}} únicos · {{units}} unidades de contador"
 unit = "PDFs medidos"
+unitsPending_one = "{{units}} unidad de contador pendiente de sincronización desde instancias vinculadas"
+unitsPending_other = "{{units}} unidades de contador pendientes de sincronización desde instancias vinculadas"
+
+[portal.billing.prepaid]
+capSuffix = "de {{total}} créditos prepago"
+expires = "Caduca el {{date}}"
+eyebrow = "Capacidad prepago"
+note = "Se usa antes de la facturación medida y fuera de tu límite de gasto."
+topUp = "Recargar"
+
+[portal.billing.prepaid.buy]
+back = "Atrás"
+calcTitle = "Calcula tu pago anual"
+cancel = "Cancelar"
+cancelPurchase = "Cancelar compra"
+close = "Cerrar"
+continueToPayment = "Continuar al pago"
+finalise = "Finalizar"
+invoiceErrorTitle = "No se pudo generar la factura"
+loadingTitle = "Cargando tu presupuesto"
+payTitle = "Paga tu año"
+step = "Paso {{current}} de {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Cambiar"
+deployRow = "Despliegue"
+done = "Hecho"
+enterpriseHint = "Esto es escala empresarial. Con este volumen, las tarifas empresariales superan cualquier descuento de autoservicio. Precio fijo, condiciones y presupuesto en minutos."
+governanceRow = "Gobernanza"
+governanceValue = "{{label}} · {{count}} políticas"
+handlesLabel = "Tu Procesador"
+handlesValue = "gestiona {{volume}} créditos / mes"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} políticas"
+poolCaption = "Un fondo de {{credits}} créditos para el año. Los meses de mayor uso toman prestado de los meses de menor uso."
+priceLabel = "Tu año · 12 meses por el precio de 10"
+rateUnknown = "Mostraremos el precio exacto al pagar."
+savings = "Ahorras {{amount}} · 2 meses gratis."
+sizingRow = "Dimensionamiento"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Usuarios totales"
+
+[portal.billing.prepaid.consent]
+label = "Entiendo que, cuando mi capacidad prepago se agote o caduque después de 12 meses, el procesamiento continuará automáticamente a la tarifa estándar medida de pago por uso (hasta mi límite de gasto) salvo que cancele, y que puedo cancelar en cualquier momento desde el portal de facturación."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Gestionado por Stirling. En funcionamiento en minutos."
+cloudValue = "Stirling Cloud · Gestionado"
+selfhost = "Autoalojado"
+selfhostDesc = "Se ejecuta en infraestructura privada. Misma tarifa."
+selfhostValue = "Autoalojado · Infraestructura privada"
+
+[portal.billing.prepaid.offer]
+cta = "Revisar oferta"
+subtitle = "Prepaga un año de procesamiento de PDF y obtén dos meses gratis, usados antes de la facturación medida, fuera de tu límite de gasto."
+title = "Consigue 12 meses por el precio de 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nombre del titular de la cuenta"
+accountNamePlaceholder = "p. ej. Jane Smith"
+companyName = "Nombre de la empresa (opcional)"
+companyNamePlaceholder = "p. ej. Acme Inc."
+downloadInvoice = "Descargar factura"
+payOnline = "Pagar online"
+poNumber = "Número de pedido (opcional)"
+poNumberPlaceholder = "p. ej. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avanzado"
+advancedDesc = "Los pipelines impulsan la mayor parte de tu procesamiento."
+none = "Ninguno"
+noneDesc = "Aún no ejecutas pipelines. Actívalos en cualquier momento."
+standard = "Estándar"
+standardDesc = "Algunos pipelines reprocesan los PDFs entrantes."
+
+[portal.billing.prepaid.posture]
+essentials = "Esenciales"
+essentialsDesc = "Clasificación, la predeterminada, más uso compartido"
+governed = "Gobernado"
+governedDesc = "Añade seguridad y enrutamiento"
+regulated = "Regulado"
+regulatedDesc = "Todas las categorías, incl. cumplimiento, retención e ingesta"
+
+[portal.billing.prepaid.review]
+download = "Descargar presupuesto (PDF)"
+downloading = "Preparando…"
+share = "compartir para aprobación"
+
+[portal.billing.prepaid.size]
+compact = "Compacto"
+compactDesc = "Archivos de menos de 25 MB, sin cargos por datos"
+heavy = "Pesado"
+heavyDesc = "Escaneados o con muchas imágenes, normalmente 50 MB+"
+standard = "Estándar"
+standardDesc = "Principalmente pequeños, algunos escaneos por encima de 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Agotada"
+healthy = "Queda bastante"
+low = "Queda poco"
 
 [portal.billing.spendLimit]
 adjustLimit = "Ajustar límite"
@@ -6494,6 +6608,8 @@ label = "Proyectado para superar."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Gasto este mes"
+freeRemaining_one = "Queda {{formatted}} PDF gratis"
+freeRemaining_other = "Quedan {{formatted}} PDFs gratis"
 processed_one = "{{formattedCount}} PDF procesado."
 processed_other = "{{formattedCount}} PDFs procesados."
 processedWithRate_one = "{{formattedCount}} PDF procesado, a {{rate}} cada uno."
@@ -6534,6 +6650,350 @@ signature = "firma"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nueva conexión"
+createTitleFor = "Conectar {{name}}"
+delete = "Eliminar"
+edit = "Editar"
+editTitle = "Editar conexión"
+unsupportedType = "Este tipo de conexión no se puede editar aquí."
+
+[portal.connections.categories.advanced]
+description = "Para un servicio que aún no admitimos."
+label = "Avanzado"
+
+[portal.connections.categories.audit]
+description = "Registra lo que le ocurrió a un documento, donde tus auditores ya miran."
+label = "Registro de auditoría y cumplimiento"
+
+[portal.connections.categories.notify]
+description = "Informa a otro sistema de que ha ocurrido algo."
+label = "Notificación y flujo de trabajo"
+
+[portal.connections.categories.security]
+description = "Escanea o etiqueta un documento antes de que avance."
+label = "Seguridad y clasificación"
+
+[portal.connections.categories.signing]
+description = "Envía un documento para que se firme o notarice."
+label = "Firma electrónica y notarización"
+
+[portal.connections.categories.storage]
+description = "Dónde acaban los documentos procesados: un bucket, una unidad, un ticket o una página."
+label = "Archivo y adjuntar"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling lo almacena cifrado y nunca vuelve a mostrarlo."
+label = "Token de acceso"
+
+[portal.connections.commonFields.apiKey]
+label = "Clave de API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token de API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Los pasos que usan esta conexión solo pueden llamar a rutas bajo esta URL, nunca a otro host."
+label = "URL del servidor"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Contraseña"
+
+[portal.connections.commonFields.port]
+label = "Puerto"
+
+[portal.connections.commonFields.username]
+label = "Nombre de usuario"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Pega la URL que te proporcionó el servicio. Solo se pueden llamar rutas bajo ella."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Nombre de la conexión"
+namePlaceholder = "p. ej. Producción"
+
+[portal.connections.picker]
+cancel = "Cancelar"
+createNew = "Nueva conexión..."
+placeholder = "Selecciona una conexión"
+save = "Guardar conexión"
+
+[portal.connections.picker2]
+back = "Cambiar integración"
+heading = "¿Qué quieres conectar?"
+noResultsBody = "Aún no lo admitimos; cuéntanoslo y estudiaremos añadirlo."
+noResultsTitle = "Nada coincide con \"{{query}}\""
+searchPlaceholder = "Buscar integraciones: prueba \"sign\", \"ocr\" o un nombre de producto"
+
+[portal.connections.types.api]
+description = "Llama a cualquier HTTP API desde una política. Tú eliges la URL, la autenticación y la carga útil."
+label = "API personalizada"
+
+[portal.connections.types.api.fields.authType]
+label = "Autenticación"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nombre de usuario y contraseña"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token en una cabecera personalizada"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Ninguna"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Iniciar sesión para obtener un token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Los pasos que usan esta conexión solo pueden llamar a rutas bajo esta URL, nunca a otro host."
+label = "URL base"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nombre de la cabecera"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Ruta de inicio de sesión"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Contraseña"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Si la API responde con un enlace de descarga, solo se podrán obtener estos hosts. Sepáralos con comas. Déjalo en blanco para permitir solo el host propio de la URL base."
+label = "Hosts de resultado permitidos"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Enviar el token como esta cabecera"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "La cabecera de respuesta en la que la llamada de inicio de sesión devuelve el token, p. ej. X-Auth-Token."
+label = "Cabecera de respuesta del token"
+
+[portal.connections.types.api.fields.username]
+label = "Nombre de usuario"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Escanea documentos en busca de malware en un servidor que tú ejecutas; nada sale de tu red."
+label = "ClamAV (autoalojado)"
+
+[portal.connections.types.cloudmersive]
+description = "Escaneo de virus y contenido para documentos en una política."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Bloquea documentos que contengan macros, ejecutables, scripts u objetos incrustados, no solo malware conocido."
+label = "Escaneo avanzado de Cloudmersive"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Adjunta documentos procesados a una página de Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Envía documentos a ConsignO Cloud (Notarius) para firma electrónica y notarización."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Tu entorno de ConsignO Cloud, incluido /api/v1."
+label = "URL del servidor"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Clave de API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Secreto de API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Contraseña"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Solo necesario si tu organización usa tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nombre de usuario"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publica un mensaje en Discord cuando una política procese un documento."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexa un evento de auditoría en Elasticsearch cada vez que una política gestiona un documento."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Consulta un servidor FTP o FTPS en busca de nuevos documentos."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Modo de conexión"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Activo"
+passive = "Pasivo (recomendado)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP sin cifrar envía credenciales y archivos sin cifrado; elige FTPS si el servidor lo admite."
+label = "Cifrado"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explícito / AUTH TLS)"
+implicit = "FTPS (implícito)"
+none = "Ninguno (FTP sin cifrar)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publica un mensaje en un espacio de Google Chat cuando se ejecute una política."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Adjunta documentos procesados a una incidencia de Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Envía por email un documento o una notificación cuando se ejecute una política."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Archiva documentos procesados en Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Contraseña de la aplicación"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detecta datos personales en el texto de documentos usando un servidor Presidio que tú ejecutas."
+label = "Presidio (autoalojado)"
+
+[portal.connections.types.purview]
+description = "Lee y aplica etiquetas de sensibilidad de Microsoft Purview en PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opcional. Solo necesario para elegir etiquetas por nombre; el etiquetado funciona sin él."
+label = "ID de aplicación (cliente)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Secreto de cliente"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Se estampa en cada etiqueta como su SiteId, para que las herramientas compatibles con Purview sepan qué organización la aplicó."
+label = "ID de directorio (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Un bucket S3 desde el que las fuentes pueden leer y en el que las salidas de pipeline pueden escribir."
+label = "Almacenamiento S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID de clave de acceso"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Déjalo en blanco para AWS. Establécelo para MinIO u otro almacén compatible con S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Región"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Clave de acceso secreta"
+
+[portal.connections.types.sendgrid]
+description = "Envía por email un documento o una notificación cuando se ejecute una política."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Consulta un servidor SFTP (SSH) en busca de nuevos documentos."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opcional. La huella de clave de host SHA-256 del servidor (de `ssh-keyscan host | ssh-keygen -lf -`). Cuando se establece, solo se acepta un servidor que presente esta clave; cuando está en blanco, la clave vista en la primera conexión queda fijada y se rechazan cambios posteriores."
+label = "Huella de clave de host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Frase de contraseña de la clave"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Déjalo en blanco si te autenticas con una clave privada en su lugar."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opcional. Pega una clave privada OpenSSH para autenticarte con una clave en lugar de una contraseña."
+label = "Clave privada"
+
+[portal.connections.types.slack]
+description = "Publica un mensaje en Slack cuando una política procese un documento."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Vigila un recurso compartido de red SMB / CIFS (Windows o Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Recurso compartido de red"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opcional. El dominio o grupo de trabajo de Windows, si tu servidor usa uno."
+label = "Dominio"
+
+[portal.connections.types.smb.fields.share]
+label = "Recurso compartido"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Envía un evento de auditoría a Splunk cada vez que una política gestiona un documento."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Envía un evento de auditoría a un recopilador HTTP de Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publica un mensaje en un canal de Teams cuando se ejecute una política."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publica cada documento, o solo los detalles, en una URL que elijas."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Activa un escenario de Zap o Make desde una política."
+label = "Zapier y Make"
+
+[portal.docs]
+browse = "Explorar documentación"
+viewSource = "Ver código fuente en GitHub"
+
 [portal.docs.authentication]
 codeCaption = "cada solicitud"
 eyebrow = "PRIMEROS PASOS"
@@ -6619,11 +7079,19 @@ title = "SDKs oficiales"
 beta = "Beta"
 deprecated = "Obsoleto"
 
+[portal.docs.search]
+empty = "No hay documentación coincidente"
+placeholder = "Buscar en documentación"
+results = "{{count}} resultados"
+
 [portal.docs.skills]
 eyebrow = "HABILIDADES"
 lead = "Capacidades incluidas y con nombre que tu agente invoca como una sola herramienta. Cada habilidad es una cadena de operaciones determinista con evaluaciones adjuntas."
 title = "Habilidades de agente"
 
+[portal.docs.toc]
+title = "En esta página"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "REFERENCIA DE API"
@@ -6697,6 +7165,8 @@ type = "Tipo"
 user = "Usuario"
 
 [portal.documents.queue.empty]
+connectSource = "Conectar una fuente"
+createPipeline = "Crear un pipeline"
 description = "A medida que los orígenes envíen documentos a tus pipelines, aparecerán aquí para su revisión."
 title = "No hay documentos en la cola"
 
@@ -6806,13 +7276,71 @@ description = "Esta vista ha encontrado un error inesperado. Inténtalo de nuevo
 retry = "Intentarlo de nuevo"
 title = "Algo ha salido mal en esta página"
 
+[portal.home.download]
+back = "Atrás"
+body = "Descarga la aplicación de escritorio o autoaloja el servidor."
+done = "Hecho"
+guide = "Abrir la guía de {{name}}"
+openInBrowser = "Abrir en el navegador en su lugar"
+sectionDesktop = "Aplicación de escritorio"
+sectionSelfHosted = "Autoalojado"
+title = "Instalar el editor de Stirling PDF"
+
+[portal.home.download.docker]
+detailBody = "Ejecuta la imagen oficial en tu servidor."
+note = "Se abre en :8080. Inicio de sesión predeterminado: admin / stirling."
+tagline = "Ejecuta el servidor en un contenedor"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instala el chart oficial de Helm."
+note = "Añade un PVC para /configs para conservar la configuración."
+tagline = "Despliega en un clúster con Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Compilaciones nativas para tu distribución."
+guideBtn = "Ver opciones de instalación para Linux"
+note = "Hay compilaciones AppImage, .deb y .rpm disponibles para distribuciones comunes."
+tagline = "Aplicación de escritorio nativa para tu distribución"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "O mediante Homebrew"
+detailBody = "Ejecuta el instalador o usa Homebrew."
+downloadBtn = "Descargar para macOS"
+tagline = "Aplicación nativa para Apple silicon e Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Ejecuta el .jar en un servidor físico."
+downloadBtn = "Descargar el .jar"
+note = "Requiere Java 21+. Se abre en :8080; inicio de sesión predeterminado admin / stirling."
+runLabel = "Después ejecútalo"
+tagline = "Ejecuta el .jar en un servidor físico"
+title = "Configuración manual del servidor"
+
+[portal.home.download.windows]
+altLabel = "O mediante winget"
+detailBody = "Ejecuta el instalador o usa un gestor de paquetes."
+downloadBtn = "Descargar instalador"
+tagline = "Aplicación nativa para Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} activos"
-invite = "Invitar a compañeros"
+activeOfDeployed = "{{active}} de {{total}} activos este mes"
 name = "Stirling PDF Editor"
 open = "Abrir en el navegador"
 updated = "actualizado {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Finalizar despliegue"
+options = "Ver opciones de despliegue"
+start = "Desplegar el Editor"
+
 [portal.home.editor.target]
 cloud = "Cloud gestionado"
 docker = "Autoalojado · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Buenas tardes"
 evening = "Buenas noches"
 morning = "Buenos días"
 
-[portal.home.onboarding]
-dismiss = "Descartar configuración"
-notStarted = "No iniciado"
-progress = "{{done}} de {{total}} completado"
-title = "Terminar la configuración"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC para toda la organización, precios por volumen comprometido y despliegue aislado de red."
-cta = "Iniciar prueba"
-ctaQuote = "Solicitar presupuesto"
-lead = "Para más de 250 empleados."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Despliega la aplicación de escritorio, gratis para siempre."
-title = "Descargar el PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} activas · {{recommended}} recomendadas"
-chip = "{{active}} activas"
-title = "Activar políticas"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} conectados · cada PDF gobernado donde llega"
-chip = "{{connected}} conectados"
-title = "Conectar tus orígenes"
-
-[portal.home.quickActions]
-subtitle = "Tareas principales para hoy"
-title = "Acciones rápidas"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Compositor de 3 pasos sobre la biblioteca de operaciones tipadas"
-title = "Crear un pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agentes, webhooks, carpetas supervisadas"
-title = "Conectar un origen"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Clave con alcance, límites de tasa y lista de permitidos IP"
-title = "Emitir una clave API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gestionar despliegue del Editor"
 sectionsAriaLabel = "Secciones de infraestructura"
@@ -6878,13 +7363,9 @@ heading = "Claves API"
 subheading = "Credenciales con alcance, límites de tasa por clave, permisos y listas de IP permitidas."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP permitidas"
-anyIp = "Cualquier IP (sin lista de permitidos)"
 created = "Creada"
 lastUsed = "Último uso"
-permissions = "Permisos"
-rateLimit = "Límite de tasa"
-rateLimitValue = "{{value}} req/min"
+revoke = "Revocar clave"
 usageMonth = "Uso este mes"
 usageToday = "Uso hoy"
 
@@ -6892,6 +7373,20 @@ usageToday = "Uso hoy"
 description = "Crea una clave con alcance para empezar a llamar a Stirling API."
 title = "Aún no hay claves API"
 
+[portal.infrastructure.apiKeys.error]
+load = "No se han podido cargar tus claves de API. Inténtalo de nuevo."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "¿Revocar \"{{name}}\"? Cualquier integración que siga usando esta clave empezará a recibir errores 401 inmediatamente. Esta acción no se puede deshacer."
+cancel = "Cancelar"
+confirm = "Revocar clave"
+title = "Revocar clave de API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestiguado"
+inScope = "Dentro del alcance"
+notApplicable = "N/D"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrar eventos de auditoría por categoría"
 heading = "Registros de auditoría"
@@ -6935,6 +7430,7 @@ all = "Todos"
 auth = "Autenticación"
 config = "Configuración"
 elevation = "Elevación"
+policy = "Política"
 processing = "Procesamiento"
 security = "Seguridad"
 
@@ -6944,19 +7440,35 @@ title = "No tienes acceso"
 
 [portal.infrastructure.audit.metrics]
 config = "Configuración"
-elevation = "Elevación"
+policy = "Política"
 processing = "Procesamiento"
 totalEvents = "Eventos totales · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autenticación"
+config = "Configuración"
+elevation = "Elevación"
+policy = "Política"
+processing = "Procesamiento"
+security = "Seguridad"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Error"
+info = "Información"
+success = "Correcto"
+warning = "Advertencia"
+
+[portal.infrastructure.certLabel]
+certified = "Certificado"
+inProgress = "En curso"
+notStarted = "No iniciado"
+
 [portal.infrastructure.createKey]
 cancel = "Cancelar"
 createKey = "Crear clave"
 done = "Hecho"
-ipAllowlistHelper = "Rangos CIDR separados por comas. Déjalo en blanco para permitir cualquier IP."
-ipAllowlistLabel = "Lista de IP permitidas"
 keyNameLabel = "Nombre de clave"
 keyNamePlaceholder = "p. ej. Producción · ingesta"
-permissionsLabel = "Permisos"
 secretKeyCaption = "Clave secreta"
 secretWarning = "Guárdala en un gestor de secretos. Stirling solo almacena un hash — no hay forma de recuperarla más tarde."
 subtitle = "Limita la clave a lo mínimo que necesita. Puedes rotarla o revocarla en cualquier momento."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Copia este secreto ahora — no se volverá a mostrar."
 title = "Crear clave API"
 titleCreated = "Clave creada"
 
+[portal.infrastructure.deployLabel]
+live = "En vivo"
+queued = "En cola"
+rolledBack = "Revertido"
+rolling = "Desplegando"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Estado en vivo de cada región Stirling desplegada — latencia, c
 description = "Las regiones desplegadas aparecerán aquí cuando se aprovisione tu espacio de trabajo."
 title = "No hay regiones desplegadas"
 
+[portal.infrastructure.keyLabel]
+active = "Activa"
+revoked = "Revocada"
+
+[portal.infrastructure.modelLabel]
+active = "Activo"
+degraded = "Degradado"
+disabled = "Deshabilitado"
+
 [portal.infrastructure.models]
 heading = "Modelos"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Estado"
 type = "Tipo"
 version = "Versión"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/llamada"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modelos activos"
 avgLatency = "Latencia media"
@@ -7049,6 +7580,17 @@ modelForAria = "Modelo para {{operation}}"
 operation = "Operación"
 routedTo = "Enrutado a"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Clasificación"
+extraction = "Extracción"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradado"
+down = "Caído"
+healthy = "Correcto"
+
 [portal.infrastructure.security.access.byok]
 description = "Proporciona una clave de tu propio KMS. Stirling cifra con ella, pero aún puede leer."
 label = "Trae tu propia clave (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modelos"
 security = "Seguridad"
 storage = "Almacenamiento"
 
+[portal.integrations]
+addAnother = "Añadir otra"
+availableHeading = "Disponibles"
+comingSoonHeading = "Próximamente"
+connect = "Conectar"
+connectedHeading = "Conectadas"
+connectionCount_one = "{{count}} conexión"
+connectionCount_other = "{{count}} conexiones"
+customApi = "API personalizada"
+searchPlaceholder = "Buscar integraciones"
+subtitle = "Todo con lo que Stirling puede comunicarse. Las credenciales se crean una vez aquí y luego se referencian desde orígenes, políticas y canalizaciones."
+title = "Integraciones"
+typedName = "Nombre de {{tool}}"
+
+[portal.integrations.filters]
+all = "Todas"
+audit = "Auditoría"
+connected = "Conectadas"
+notify = "Notificación"
+security = "Seguridad"
+signing = "Firma"
+storage = "Almacenamiento"
+
+[portal.integrations.status]
+connected = "Conectada"
+
+[portal.integrations.table]
+integration = "Integración"
+worksWith = "Funciona con"
+
+[portal.integrations.worksWith]
+pipelines = "Canalizaciones"
+policies = "Políticas"
+sources = "Orígenes"
+
+[portal.legal]
+draft = "{{label}} · borrador"
+loadError = "No se ha podido cargar este documento. Inténtalo de nuevo."
+loading = "Cargando…"
+title = "Documento legal"
+
 [portal.nav]
 agent-builder = "Constructor de agentes"
 components = "Componentes"
@@ -7182,6 +7765,7 @@ documents = "Documentos"
 editor = "Editor"
 home = "Inicio"
 infrastructure = "Infraestructura"
+integrations = "Integraciones"
 pipelines = "Pipelines"
 policies = "Políticas"
 procurement = "Compras"
@@ -7190,25 +7774,9 @@ sources = "Orígenes"
 usage = "Uso y facturación"
 users = "Usuarios"
 
-[portal.notifications]
-markAllRead = "Marcar todo como leído"
-title = "Notificaciones"
-viewAll = "Ver todo"
-
-[portal.notifications.ariaLabel]
-none = "Notificaciones, ninguna sin leer"
-unread_one = "Notificaciones, {{count}} sin leer"
-unread_other = "Notificaciones, {{count}} sin leer"
-
-[portal.notifications.count]
-allRead = "todo leído"
-loading = "cargando"
-new_one = "{{count}} nueva"
-new_other = "{{count}} nuevas"
-
-[portal.notifications.empty]
-description = "No hay notificaciones nuevas."
-title = "Estás al día"
+[portal.nav.section]
+platform = "Plataforma PDF"
+processor = "Procesador PDF"
 
 [portal.pipelines]
 subtitle = "Cada pipeline automatizado de documentos en el backend: una cadena ordenada de operaciones sobre un conjunto de orígenes, ejecutada con un desencadenador. Haz clic en una fila para ver sus pasos y orígenes."
@@ -7220,15 +7788,28 @@ newPipeline = "Nuevo pipeline"
 [portal.pipelines.builder]
 addStep = "Añadir herramienta"
 back = "Volver a pipelines"
+cannotFollow = "No puede tomar {{produced}}"
+chooseAccount = "Elige una cuenta"
+chooseDestination = "Elige un destino"
+chooseOperation = "Elige qué hace este paso"
+chooseSource = "Elige un origen"
 discard = "Descartar cambios"
 enabled = "Activado"
+inputs = "Entrada"
+inputSource = "Origen de entrada"
+inputTrigger = "Disparador"
 keepEditing = "Seguir editando"
+needsConfiguring = "Necesita configuración"
 needsUpload = "Necesita un archivo subido"
+noSources = "Aún no hay orígenes conectados. Crea uno para usarlo como entrada."
 noToolMatches = "Ninguna herramienta coincide con tu búsqueda."
 pipelineSettings = "Configuración del pipeline"
 searchTools = "Buscar herramientas"
 selectToolBody = "Añade una herramienta para crear tu pipeline."
 selectToolTitle = "Aún no hay herramientas"
+sendToSystem = "Enviar a otro sistema"
+stepsIncompatible = "Estos pasos no se pueden ejecutar sobre lo que produce su paso anterior: {{tools}}."
+stepsNeedSetup = "Estos pasos aún necesitan configuración antes de guardar: {{tools}}."
 toolSettings = "Configuración de la herramienta"
 unknownStep = "Operación no reconocida, conservada tal cual."
 unsavedBody = "Tienes cambios sin guardar. ¿Guardarlos antes de salir o descartarlos?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Cambios sin guardar"
 uploadUnsupported = "Los archivos subidos aún no son compatibles con pipelines, por lo que estos pasos no se pueden guardar: {{tools}}."
 usesDefaults = "Se ejecuta con la configuración predeterminada"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combina todos los archivos del paso anterior"
+fan-out = "Se ejecuta una vez por archivo del paso anterior"
+format-mismatch = "Necesita {{accepts}}, pero el paso anterior produce {{produced}}"
+output-uncertain = "Puede que no se ejecute: la salida del paso anterior depende de cómo esté configurado"
+source-mismatch = "Necesita {{accepts}}, pero la entrada de esta canalización es {{produced}}"
+undeclared-operation = "No se puede comprobar qué acepta este paso"
+
 [portal.pipelines.composer]
 addTool = "Añadir herramienta"
 cancel = "Cancelar"
 chainEmpty = "Añade una herramienta para empezar a crear tu pipeline."
 create = "Crear pipeline"
-directory = "Carpeta de salida"
-directoryHelp = "Ruta absoluta en el servidor. Debe estar dentro de las carpetas permitidas configuradas."
 editingUnsupported = "Aún no se admite mostrar estos parámetros de herramienta para editarlos."
 moveDown = "Mover abajo"
 moveUp = "Mover arriba"
 name = "Nombre"
 namePlaceholder = "p. ej. Barrido de censura"
-noSources = "Aún no hay orígenes conectados. El pipeline aún puede ejecutarse con archivos suministrados directamente."
 noToolSettings = "Esta herramienta no tiene ajustes configurables."
 operations_one = "Operación ({{count}})"
 operations_other = "Operaciones ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Eliminar"
 title = "¿Eliminar pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Borrar historial"
 delete = "Eliminar pipeline"
 run = "Ejecutar ahora"
 
 [portal.pipelines.empty]
 action = "Crear un pipeline"
+connectSource = "Conectar un origen"
 description = "Crea tu primer pipeline: elige los orígenes sobre los que se ejecuta, encadena las operaciones y elige dónde va la salida."
 title = "Aún no hay pipelines"
 
@@ -7286,15 +7874,17 @@ active = "Activos"
 paused = "Pausados"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Escribir en carpeta"
-inline = "Devolver archivos"
-
 [portal.pipelines.run]
+allProcessed_one = "Nada que ejecutar: el {{count}} documento del origen ya se ha procesado."
+allProcessed_other = "Nada que ejecutar: los {{count}} documentos de los orígenes ya se han procesado."
 completed_one = "Ejecución completada."
 completed_other = "Las {{count}} ejecuciones se han completado."
 empty = "Nada que ejecutar: los orígenes no tenían documentos que procesar."
 failed = "La ejecución ha fallado: {{error}}"
+historyCleared = "Historial borrado. La próxima ejecución vuelve a procesar todo lo que haya actualmente en los orígenes."
+inFlight = "Nada nuevo que ejecutar: todavía se están procesando documentos de una ejecución anterior."
+parked_one = "Nada que ejecutar: {{count}} documento falló anteriormente y está aparcado. Corrige la causa y luego borra el historial para reintentarlo."
+parked_other = "Nada que ejecutar: {{count}} documentos fallaron anteriormente y están aparcados. Corrige la causa y luego borra el historial para reintentarlos."
 running = "Ejecución iniciada; aún en curso."
 timeout = "La ejecución está tardando más de lo esperado; puede que aún termine en segundo plano."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Programado"
 
 [portal.policies]
+defaultName = "Política de {{category}}"
 subtitle = "Automatizaciones permanentes que aplican un pipeline de herramientas a cada documento. Cada política se activa al subir o exportar, ejecuta su cadena de herramientas y guarda la versión aplicada junto al original."
 title = "Políticas"
 
 [portal.policies.card]
 comingSoon = "Mejorar a Enterprise"
 notSetUp = "No configurado"
+requiresAiEngine = "Requiere motor de IA"
+
+[portal.policies.categories.classification]
+desc = "Identifica el tipo de cada documento al subirlo y etiqueta sus metadatos para el archivado y la búsqueda."
+label = "Clasificación"
 
 [portal.policies.categories.compliance]
 desc = "Aplica requisitos HIPAA, GDPR, SOC 2 o FedRAMP a cada documento."
@@ -7344,6 +7940,13 @@ label = "Seguridad"
 [portal.policies.config]
 scopeAll = "Todos los documentos"
 
+[portal.policies.config.classification]
+summary = "Clasifica cada documento subido según las etiquetas de tu equipo y etiqueta sus metadatos."
+
+[portal.policies.config.classification.rules]
+0 = "Clasificar"
+1 = "Etiquetar metadatos"
+
 [portal.policies.config.compliance]
 summary = "Valida documentos frente a marcos normativos antes de que salgan del sistema."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Confianza mínima"
 2 = "Nombrar"
 3 = "Normalizar"
 
+[portal.policies.config.purview]
+label = "Aplicar una etiqueta de sensibilidad de Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Inquilino de Purview"
+labelId = "ID de etiqueta"
+labelIdHelp = "El GUID de la etiqueta, desde el portal de Purview. Al aplicar una etiqueta, se escriben sus metadatos en el PDF; no puede cifrar, ya que eso requiere el cliente de Microsoft."
+labelName = "Nombre de etiqueta (opcional)"
+labelNameHelp = "Se registra junto al ID para que las personas y las herramientas puedan reconocer la etiqueta."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview distingue una etiqueta aplicada por una política de una elegida por una persona."
+label = "Cómo se registra la etiqueta"
+privileged = "Como elegida por una persona"
+standard = "Como aplicada automáticamente"
+
+[portal.policies.config.purviewRead]
+label = "Leer una etiqueta de Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Inquilino de Purview"
+connectionHelp = "Lee la etiqueta que el documento ya lleva, para que los pasos posteriores puedan actuar sobre ella."
+
 [portal.policies.config.retention]
 summary = "Aplica cuánto tiempo se conservan los documentos, cuándo archivarlos y cuándo eliminarlos."
 
@@ -7438,6 +8064,7 @@ title = "Aún no hay actividad"
 [portal.policies.endpoints]
 addWatermark = "Marca de agua"
 autoRedact = "Censurar PII"
+classifyAndLabel = "Clasificar"
 compressPdf = "Comprimir"
 flatten = "Aplanar"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Tus políticas están guardadas y aparecerán cuando se restablez
 retry = "Reintentar"
 title = "Backend no disponible"
 
+[portal.policies.operations]
+change = "Cambiar lo que hace este paso"
+noResults = "Ningún paso coincide con eso. Prueba con un nombre de producto, o \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Buscar pasos: prueba con \"scan\", \"attach\" o un nombre de producto"
+
+[portal.policies.operations.bodyMode]
+binary = "Bytes de archivo sin procesar"
+json = "Dentro de una carga útil JSON"
+multipart = "Como subida de archivo (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Tu propio servidor ClamAV comprueba el documento; nada sale de tu red."
+label = "Buscar virus (autoalojado)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rechaza documentos que contengan macros, ejecutables, scripts u objetos incrustados."
+label = "Bloquear contenido activo"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive comprueba el documento y la ejecución se detiene si no está limpio."
+label = "Buscar virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Archiva el documento procesado en una página."
+label = "Adjuntar a una página de Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Envía el documento a ConsignO Cloud para su firma."
+label = "Enviar para firma (ConsignO)"
+note = "Envía el documento. La recuperación de la copia firmada aún no es compatible, porque un paso no puede pasar un resultado a un paso posterior."
+
+[portal.policies.operations.customApiCall]
+description = "Crea tú mismo la llamada: ruta, método, cuerpo y gestión de la respuesta."
+label = "Llamar a una API personalizada"
+
+[portal.policies.operations.discordNotify]
+description = "Informa a un canal de que la política ha gestionado un documento."
+label = "Publicar un mensaje en Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Registra lo que hizo la política como un documento consultable."
+label = "Indexar un evento de auditoría en Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart es adecuado para API de subida; JSON es adecuado para API que quieren el archivo dentro de una carga útil; binario envía los bytes sin procesar."
+label = "Cómo enviar el documento"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Un cuerpo JSON enviado tal cual. {{document.base64}} contiene el archivo; {{document.*}} y {{run.*}} se rellenan por documento."
+label = "Cuerpo JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Cuenta"
+
+[portal.policies.operations.fields.domain]
+label = "Dominio de Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "El campo del formulario en el que la API espera el documento."
+label = "Nombre del campo de archivo"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "De"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Un objeto JSON de pares nombre/valor de encabezado. La credencial de la conexión se añade por ti."
+label = "Encabezados"
+
+[portal.policies.operations.fields.index]
+label = "Índice"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Clave de incidencia"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Se envía como cuerpo del mensaje. {{document.*}} y {{run.*}} se rellenan por documento."
+label = "Mensaje"
+
+[portal.policies.operations.fields.method]
+label = "Método"
+
+[portal.policies.operations.fields.pageId]
+label = "ID de página"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Se añade a la URL base de la conexión. Nunca puede llegar a otro host."
+label = "Ruta"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Dónde escribirlo en la unidad. {{document.filename}} se rellena por documento."
+label = "Ruta de destino"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Informe deja el documento intacto. Reemplazar lo cambia por lo que se devuelva."
+label = "Qué hacer con la respuesta"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Correo electrónico del firmante"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Asunto"
+placeholder = "Procesado: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analiza este texto. Usa {{document.title}} o pega el texto que quieras comprobar."
+label = "Texto que comprobar"
+
+[portal.policies.operations.fields.to]
+label = "Para"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nombre de usuario de Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informa a un espacio de que la política ha gestionado un documento."
+label = "Publicar un mensaje en Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Archiva el documento procesado en una incidencia."
+label = "Adjuntar a una incidencia de Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Envía el documento procesado como adjunto."
+label = "Enviar el documento por correo electrónico (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Escribe el documento procesado en una carpeta."
+label = "Subir a Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Tu propio servidor Presidio informa de los datos personales que encuentra."
+label = "Detectar datos personales"
+note = "Presidio lee texto, no archivos. Proporciónale el texto que quieras comprobar; el documento en sí no se sube."
+
+[portal.policies.operations.responseMode]
+replace = "Reemplazar el documento por la respuesta"
+report = "Conservar el documento, registrar la respuesta"
+
+[portal.policies.operations.sendgridEmail]
+description = "Envía el documento procesado como adjunto."
+label = "Enviar el documento por correo electrónico (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informa a un canal de que la política ha gestionado un documento."
+label = "Publicar un mensaje en Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Registra lo que hizo la política donde tus auditores ya consultan."
+label = "Enviar un evento de auditoría a Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Registra lo que hizo la política en un recopilador HTTP."
+label = "Enviar un evento de auditoría a Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Informa a un canal de que la política ha gestionado un documento."
+label = "Publicar un mensaje en Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Envía el propio documento a una URL que elijas."
+label = "Publicar el documento en un webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Entrega los detalles de la ejecución a tu automatización."
+label = "Activar un Zap o un escenario de Make"
+
 [portal.policies.stats]
 activeFor = "Activa"
 dataProcessed = "Datos procesados"
@@ -7473,6 +8277,13 @@ label = "Docs aplicados"
 description = "Configuradas pero sin activarse"
 label = "Pausadas"
 
+[portal.policies.table]
+appliesTo = "Se aplica a"
+docs = "Docs aplicados"
+enforces = "Aplica"
+policy = "Política"
+status = "Estado"
+
 [portal.policies.wizard.actions]
 back = "Atrás"
 cancel = "Cancelar"
@@ -7480,6 +8291,10 @@ continue = "Continuar"
 enablePolicy = "Activar política"
 saveChanges = "Guardar cambios"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifica el tipo del documento a partir de las etiquetas de tu equipo y lo etiqueta, para que se archive y se busque por categoría."
+label = "Clasificar el documento"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprime el documento para reducir el tamaño del archivo."
 label = "Reducir tamaño del archivo"
@@ -7500,10 +8315,18 @@ label = "Censurar información confidencial"
 desc = "Elimina JavaScript oculto para que nada pueda ejecutarse automáticamente al abrir el documento."
 label = "Quitar contenido activo"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Demuestra que el documento existía con esta forma exacta en un momento determinado, usando una autoridad de sellado de tiempo independiente. Solo se envía un hash: el documento nunca sale de tu servidor."
+label = "Añadir un sello de tiempo de confianza"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Estampa una marca visible (p. ej., “Confidencial”) en cada página."
 label = "Aplicar una marca de agua"
 
+[portal.policies.wizard.classification]
+description = "Cada documento subido se clasifica según las etiquetas integradas y se etiqueta con los tipos que encajan. El conjunto de etiquetas se comparte en todo tu equipo."
+labelsHeading = "Etiquetas de clasificación"
+
 [portal.policies.wizard.errors]
 noTools = "Activa al menos una herramienta en el flujo de trabajo primero."
 saveFailed = "No se ha podido guardar la política. Inténtalo de nuevo."
@@ -7548,73 +8371,118 @@ setUp = "Configurar política de {{category}}"
 [portal.policies.wizard.workflow]
 description = "Elige qué hace esta política con cada documento que procesa."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} activas"
-noRule = "Aún no se aplica ninguna regla"
-subtitle = "Automatizaciones permanentes por las que pasa cada documento, independientemente de qué pipeline lo gestione."
-title = "Qué se ejecuta en tus PDF"
-
 [portal.policySummary.action]
-comingSoon = "Actualizar a Enterprise"
-configure = "Configurar"
 setUp = "Configurar"
 
-[portal.policySummary.column]
-activeRule = "Regla activa"
-policy = "Política"
-status = "Estado"
+[portal.processorFlow]
+footnote = "Los recuentos corresponden a las últimas 24 horas. La velocidad del flujo es ilustrativa."
+liveBadge = "En vivo"
+stats = "{{connected}} conectados · {{processed}} PDFs procesados"
+title = "Procesador PDF"
 
-[portal.policySummary.empty]
-description = "Cuando se configuren políticas, las categorías aparecerán aquí."
-title = "Aún no hay políticas"
+[portal.processorFlow.lens]
+ariaLabel = "Modo de vista"
+flow = "Flujo"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Activa"
-off = "Desactivada"
-soon = "Próximamente"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Fallidos"
+heading = "Resultados"
+success = "Entregados"
 
-[portal.processingStatus]
-managePlan = "Gestionar plan"
-volumeSuffix = "PDF procesados · últimos 30 días"
+[portal.processorFlow.policies]
+activeCount = "{{n}} activas"
+count = "{{n}} · 24 h"
+heading = "Políticas"
+setUp = "Configurar"
+soon = "Pronto"
+
+[portal.processorFlow.sankey]
+waist = "Políticas · {{n}} activas"
+
+[portal.processorFlow.sankey.empty]
+description = "Conecta un origen y activa una política para ver cómo los documentos fluyen por el procesador."
+title = "Aún no hay flujo"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Conectar"
+editor = "Editor de Stirling PDF"
+heading = "Orígenes"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Entrada de correo electrónico"
 
 [portal.procurement]
-reset = "Restablecer compras (demo)"
 subtitle = "Evalúa, contrata e incorpora a tu equipo. Cada documento en un solo lugar."
 title = "Compras"
 
-[portal.procurement.action]
-download = "Descargar"
-pay = "Pagar ahora"
-request = "Solicitar"
-sign = "Revisar y firmar"
-upload = "Subir"
-
 [portal.procurement.agreement]
 agreeCta = "Aceptar y suscribirse"
+confidential = "Confidencial"
 confirm = "He leído y acepto el Acuerdo de Stirling Enterprise."
-eyebrow = "Acuerdo"
-intro = "Un acuerdo combinado cubre tu operación: Acuerdo Marco de Servicios, Formulario de pedido, EULA y Acuerdo de tratamiento de datos. Revísalo y luego acéptalo para convertir el presupuesto en una suscripción comprometida."
-title = "Revisa tu acuerdo Enterprise"
+docName = "Acuerdo Enterprise de Stirling"
+docSub = "MSA, formulario de pedido, EULA y DPA, combinados en una sola firma."
+download = "Descargar"
+downloadDraftError = "No se ha podido generar el PDF del acuerdo: el renderizador de documentos no está disponible. Inténtalo de nuevo en breve o contacta con soporte."
+downloadError = "No se ha podido descargar el acuerdo firmado. Inténtalo de nuevo."
+legalName = "Nombre de la entidad legal"
+legalNamePlaceholder = "La entidad legal que firmará"
+loadError = "No se ha podido cargar el acuerdo. Inténtalo de nuevo."
+loading = "Cargando el acuerdo..."
+ref = "Ref. {{ref}} · {{version}}"
+requestChanges = "Solicitar cambios"
+scrollHint = "Desplázate para revisar"
+signatory = "Nombre del firmante"
+signatoryPlaceholder = "Nombre completo"
+signatoryTitle = "Cargo del firmante"
+signatoryTitlePlaceholder = "p. ej., asesor jurídico general"
+signError = "No se ha podido registrar tu firma. Inténtalo de nuevo."
 
 [portal.procurement.builder]
 addons = "Complementos"
+addressLine1 = "Dirección, línea 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Dirección, línea 2"
+addressLine2Placeholder = "Suite, planta, edificio"
 back = "Atrás"
 businessName = "Nombre de la empresa"
 businessNamePlaceholder = "Tu empresa"
+city = "Ciudad"
+cityPlaceholder = "San Francisco"
+completeRequired = "Completa los campos obligatorios (marcados con *) con un correo electrónico válido antes de generar el presupuesto."
+contactEmail = "Correo electrónico de contacto"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nombre de contacto"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continuar"
-country = "País"
-countryEuro = "Eurozona (EUR €)"
-countryUK = "Reino Unido (GBP £)"
-countryUS = "Estados Unidos (USD $)"
+done = "Hecho"
 eula = "He leído y acepto el EULA de Stirling Enterprise. Rige el acuerdo generado a partir de este presupuesto."
 generate = "Generar presupuesto"
-included = "Incluido"
 indemnification = "Indemnización de IP"
 indemnificationSub = "Defendemos reclamaciones de IP que cumplan los requisitos, según el EULA"
-offlineLicense = "Licencia sin conexión / aislada"
-offlineLicenseSub = "Un archivo de licencia descargable para una instancia self-hosted aislada"
+paperEyebrow = "Presupuesto Enterprise"
+paperFor = "Preparado para"
+pdfSize = "Tamaño del PDF"
+poNumber = "Número de pedido"
+poNumberPlaceholder = "Opcional"
+postalCode = "Código postal"
+postalCodePlaceholder = "94105"
+posture = "Gobernanza"
+posture_count = "~{{count}} políticas"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Clasificación + Uso compartido: los valores predeterminados"
+posture_governed = "Governed"
+posture_governedSub = "Añade Seguridad y Enrutamiento"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Todas las categorías: Cumplimiento, Retención, Ingesta"
 qbr = "Revisiones trimestrales de negocio"
 qbrSub = "Tu SE revisa el uso y la hoja de ruta cada trimestre"
+region = "Estado / región"
+regionPlaceholder = "California"
 running = "{{annual}} / año · {{years}} años {{tcv}}"
 s1Sub = "Tu equipo y los PDF que esperas procesar cada año."
 s1Title = "¿Cuánto vas a procesar?"
@@ -7623,6 +8491,12 @@ s2Title = "Compromiso y servicio"
 s3Sub = "Para el presupuesto y el acuerdo que genera."
 s3Title = "Tus datos"
 serviceLevel = "Nivel de servicio"
+size_compact = "Compacto"
+size_compactSub = "Principalmente texto, menos de 1 MB"
+size_heavy = "Pesado"
+size_heavySub = "Escaneado o con muchas imágenes, 5 MB+"
+size_standard = "Estándar"
+size_standardSub = "Texto e imágenes mezclados, de 1 a 5 MB"
 slDedicated = "Dedicado"
 slDedicatedSub = "4 horas laborables · gestor de cuenta dedicado · +30%"
 slPriority = "Prioritario"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Mismo día laborable · CSM asignado · +15%"
 slStandard = "Estándar"
 slStandardSub = "Siguiente día laborable · CSM compartido · incluido"
 stepOf = "Paso {{n}} de {{total}}"
+taxId = "IVA / ID fiscal"
+taxIdPlaceholder = "Opcional"
 term = "Plazo"
 termDiscount = "Descuento del {{pct}}% por compromiso plurianual aplicado"
 title = "Crea tu presupuesto"
@@ -7637,6 +8513,7 @@ training = "Onboarding y formación"
 trainingSub = "Sesiones en directo para poner en marcha a tu equipo"
 users = "Usuarios totales"
 usersPlaceholder = "p. ej., 250"
+viewEula = "Leerlo"
 volEstimated = "Estimado a partir de {{count}} usuarios (~2000 PDF cada uno, incluida la automatización). Edítalo si tienes un dato mejor."
 volManual = "Usando tu cifra. Puedes volver a estimarla a partir del tamaño de tu equipo en cualquier momento."
 volNoUsers = "¿No lo sabes? Introduce el tamaño de tu equipo y lo estimaremos."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "p. ej., 1.000.000"
 years_one = "{{count}} año"
 years_other = "{{count}} años"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Hecho"
-here = "Estás aquí"
-hide = "Ocultar"
-optional = "Opcional"
-paidAddon = "Complemento de pago"
-show = "Mostrar"
-subtitle = "Todo lo que necesitas en cada paso del recorrido, mostrado a medida que la operación avanza."
-supportingSubtitle = "SOC 2, revisiones de seguridad, formularios fiscales y más, listos cuando tu equipo de seguridad o compras los solicite. Algunos tienen una tarifa única."
-supportingTitle = "Apoyo a tu evaluación"
+[portal.procurement.documents]
+agreement = "Acuerdo Enterprise"
+agreementSub = "MSA, formulario de pedido y DPA en una sola firma."
+download = "Descargar"
+eula = "EULA y condiciones comerciales"
+eulaSub = "El software y las condiciones comerciales de autoservicio."
+invoice = "Factura"
+invoiceSub = "La factura de tu primera suscripción."
+laterInvoice = "Disponible después de aceptar"
+laterQuote = "Disponible una vez emitido tu presupuesto"
+quote = "Presupuesto"
+quoteSub = "Tu presupuesto Enterprise desglosado."
+sla = "Anexo SLA"
+slaSub = "Niveles de soporte y objetivos de respuesta."
+subprocessors = "Subencargados del tratamiento"
+subprocessorsSub = "Terceros que procesan datos en tu nombre."
+subtitle = "La documentación de tu acuerdo, disponible en cualquier momento."
 title = "Documentos"
-upcoming = "Próximos"
+view = "Ver"
 
 [portal.procurement.error]
 title = "Algo ha ido mal"
 
 [portal.procurement.hero]
-company = "Tu operación Enterprise"
+barAria = "Etapa {{current}} de {{total}}"
 ctaAgreement = "Revisar y firmar acuerdo"
-ctaLive = "Ya estás en directo"
-ctaPayment = "Añadir pago"
+ctaExploring = "Configura tu prueba"
 ctaQuote = "Revisar tu presupuesto"
+ctaReviewQuote = "Revisar presupuesto"
 ctaTrial = "Crear tu presupuesto"
+documents = "Documentos"
 eyebrow = "Compras Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Invitar a compañeros"
-keyDocs = "Documentos clave"
-nextStep = "Siguiente paso: {{action}}"
-notStarted = "No iniciado"
+licenseKey = "Clave de licencia"
+liveSub = "Tu organización está aprovisionada y tu licencia está activa."
+liveTitle = "Ya estás en vivo en Stirling Enterprise"
+next = "Siguiente: {{stage}}"
 open = "Abrir compras"
 scheduleCall = "Programar una llamada"
-setup1Sub = "Invita a tus compañeros"
-setup1Title = "Implementa el Editor de PDF"
-setup2Sub = "Activa el procesamiento en editores y otras fuentes"
-setup2Title = "Conecta el Procesador de PDF"
-setup3Sub = "Activa Seguridad, Cumplimiento, Enrutamiento o Retención cuando los necesites"
-setup3Title = "Añadir políticas recomendadas"
+sentenceAgreement = "revisar y firmar el acuerdo"
+sentenceLive = "aprovisionamiento y despliegue"
+sentencePayment = "orden de compra y pago"
+sentenceQuote = "revisar y aceptar tu presupuesto"
+sentenceTrial = "configurar tu espacio de trabajo de prueba"
 
 [portal.procurement.journey]
 daysLeft_one = "Queda {{count}} día"
 daysLeft_other = "Quedan {{count}} días"
-engineerLabel = "Tu ingeniero de soluciones"
-eyebrow = "Tu despliegue"
-live = "Ya estás en directo en Stirling Enterprise"
-nextStep = "Siguiente paso: {{action}}"
-subtitle = "Tu ingeniero de soluciones está en cada paso. Una acción siguiente cada vez; la lista completa está abajo."
-title = "De la prueba a la puesta en marcha, un camino guiado"
-trialTitle = "Prueba Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Una firma cubre MSA, formulario de pedido, EULA y DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Aún no se ha podido generar el archivo de licencia sin conexi
 downloadOffline = "Descargar licencia sin conexión (.lic)"
 hint = "Pega esta clave en una instancia self-hosted para activarla, o guárdala para tus registros. Mantenla a salvo."
 label = "Tu clave de licencia"
+subtitle = "Activa una instancia autoalojada con esta clave o guárdala para tus registros."
+title = "Tu clave de licencia"
+trialFileHint = "Este es tu archivo de licencia de prueba. Una vez que el acuerdo esté en vigor, vuelve y descárgalo de nuevo; a diferencia de la clave de licencia online, el archivo .lic no se actualizará por sí solo."
 
 [portal.procurement.link]
 cta = "Vincular cuenta"
@@ -7739,65 +8619,62 @@ description = "Tu suscripción está activa y tu licencia se ha emitido. Tu equi
 eyebrow = "En directo"
 title = "Ya estás en directo en Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Las claves de prueba, los presupuestos por volumen comprometido, el acuerdo de una sola firma, el pago y tu libro de documentos estarán aquí cuando inicies una evaluación Enterprise."
-eyebrow = "Solo Enterprise"
-talkToSales = "Hablar con ventas"
-title = "El flujo de compras se abre con Enterprise"
-
 [portal.procurement.milestone]
-accept = "Aceptar y continuar"
-description = "Descarga el PDF para compartirlo con tu equipo, vuelve para aceptarlo cuando estés listo o haz cambios."
-download = "Descargar PDF"
 downloadError = "Aún no se ha podido descargar el PDF del presupuesto — inténtalo de nuevo en un momento."
-edit = "Editar presupuesto"
-eyebrow = "Presupuesto {{number}}"
-perYear = " / año"
-preparedFor = "Preparado para {{company}}"
-tcv = "Valor total del contrato {{value}}"
-title = "Tu presupuesto está listo"
-
-[portal.procurement.modal]
-cancel = "Cancelar"
-chooseFile = "Elegir archivo"
-close = "Cerrar"
-downloadBody = "Tu descarga comenzará en breve."
-downloadCta = "Descargar"
-downloadTitle = "Descargar"
-noFile = "No se ha seleccionado ningún archivo"
-payBody = "Paga tu contrato comprometido con tarjeta o transferencia bancaria a través de Stripe. Tu espacio de trabajo se provisiona en cuanto se confirme el pago."
-payCta = "Continuar a Stripe"
-payTitle = "Confirmar pago"
-requestBodyFree = "Lo generamos bajo demanda. Confirma y tu ingeniero de soluciones lo enviará en breve."
-requestBodyPaid = "Este es un complemento de pago. Confirma y tu ingeniero de soluciones lo dimensionará y enviará la documentación."
-requestCta = "Solicitar"
-requestTitle = "Solicitar este documento"
-signBody = "Abre el Acuerdo de Stirling Enterprise para firma electrónica: una firma cubre el MSA, el formulario de pedido, el EULA y el DPA. Lo contrafirmamos automáticamente y avanzas al pago."
-signCta = "Abrir para firmar"
-signTitle = "Revisa y firma tu acuerdo"
-uploadBody = "Envíanos tu PO y facturaremos contra él según tus condiciones. Arrastra el PDF o elige un archivo abajo."
-uploadCta = "Subir pedido de compra"
-uploadTitle = "Sube tu pedido de compra"
 
 [portal.procurement.payment]
 description = "Tu presupuesto está aceptado y tu licencia ya está activa — tu equipo puede empezar de inmediato. Paga la primera factura cuando estés listo; puedes pagarla o descargarla aquí, sin necesidad de email."
+downloadAgreement = "Descargar acuerdo firmado"
 downloadInvoice = "Descargar factura"
-simulate = "Simular pago recibido (demo)"
+eyebrow = "Pago"
 title = "Suscripción creada"
 viewInvoice = "Ver y pagar factura"
 
+[portal.procurement.review]
+acceptCta = "Aceptar presupuesto"
+annual = "Cuota anual (año 1)"
+downloadCta = "Descargar presupuesto"
+poNumber = "Orden de compra: {{po}}"
+renewal = "Se renueva a {{amount}}/año después del plazo (+{{pct}}% IPC)"
+tcv = "Plazo de {{years}} años, pagado íntegramente por adelantado: {{tcv}}"
+validUntil = "Válido hasta {{date}}"
+
 [portal.procurement.schedule]
 fallback = "No se ha podido cargar el planificador."
 fallbackLink = "Abrir planificación en una pestaña nueva"
+loading = "Cargando planificador..."
 subtitle = "Tu ingeniero de soluciones guiará a tu equipo durante el despliegue. Elige una hora que te venga bien."
 title = "Programar una llamada"
 
-[portal.procurement.status]
-action = "Acción necesaria"
-available = "Disponible"
-complete = "Completado"
-pending = "Pendiente"
-request = "Bajo solicitud"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Sellado, sin salida"
+back = "Atrás"
+businessName = "Nombre de la empresa"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Gestionado, inicio más rápido"
+continue = "Continuar"
+deployment = "¿Dónde debe desplegarse?"
+eula = "Acepto el EULA y las condiciones comerciales de Stirling."
+fullName = "Nombre completo"
+fullNamePlaceholder = "Tu nombre"
+invites = "Invitar compañeros · opcional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Programar una llamada"
+seats = "Personas que prueban"
+seatsPlaceholder = "p. ej., 15"
+selfhost = "Autoalojado"
+selfhostSub = "Docker o Kubernetes"
+start = "Iniciar prueba"
+stepOf = "Paso {{n}} de {{total}}"
+subtitle = "Gratis durante 14 días, sin tarjeta."
+subtitleDetails = "Algunos datos para tu presupuesto y acuerdo."
+talkFirst = "¿Prefieres hablar primero?"
+title = "Configura tu prueba"
+viewEula = "Leerlo"
+workEmail = "Correo electrónico de trabajo"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Ampliar añade 7 días y avisa a tu ingeniero de soluciones."
@@ -7808,20 +8685,6 @@ maxed = "Agotadas"
 subtitle = "Tu prueba gratuita se extiende hasta {{date}}. No se requiere tarjeta."
 title = "Prueba Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Precios por volumen comprometido, SSO + SCIM + RBAC para toda la organización, auditoría inmutable de 90 días y un SE dedicado."
-homeCta = "Iniciar prueba →"
-homeHeadline = "Procesa millones de PDF."
-
-[portal.recentActivity]
-title = "Actividad reciente"
-viewAll = "Ver todo"
-
-[portal.recentActivity.empty]
-description = "Las ejecuciones de pipelines, despliegues y eventos de agentes aparecerán aquí."
-title = "Aún no hay nada aquí"
-
 [portal.search]
 ariaLabel = "Buscar"
 placeholder = "Buscar en Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Vinculación de cuenta"
 
-[portal.shell.header]
-accountFallback = "Cuenta"
-accountMenu = "Menú de cuenta"
-darkMode = "Modo oscuro"
-lightMode = "Modo claro"
-search = "Buscar"
-searchPlaceholder = "Buscar…"
-signOut = "Cerrar sesión"
-switchToDark = "Cambiar al tema oscuro"
-switchToLight = "Cambiar al tema claro"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Procesador"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Vincular cuenta de Stirling"
-planEditor = "Plan Editor"
-planEnterprise = "Plan Enterprise"
-planProcessor = "Plan Processor"
 primaryNav = "Navegación principal"
 switchApp = "Cambiar aplicación"
 
+[portal.shell.topbar]
+closeNav = "Cerrar navegación"
+openNav = "Abrir navegación"
+search = "Buscar"
+
 [portal.sources]
 subtitle = "Conexiones de entrada reutilizables que alimentan documentos en Stirling. Configura una conexión una vez y luego haz referencia a ella desde cualquier número de políticas. Haz clic en una fila para ver su configuración y qué políticas la usan."
 title = "Fuentes"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Conectar fuente"
 
+[portal.sources.builder]
+back = "Volver a orígenes"
+backToTypes = "Todos los tipos de origen"
+cancel = "Cancelar"
+chooseHint = "Elige de dónde proceden los documentos. Los conectores atenuados están en camino."
+comingSoon = "Próximamente"
+comingSoonHeading = "Próximamente"
+create = "Crear origen"
+createTitle = "Conectar un origen"
+delete = "Eliminar"
+editTitle = "Editar origen"
+enabled = "Habilitado"
+save = "Guardar cambios"
+
+[portal.sources.builder.folderAccess]
+description = "Las automatizaciones de carpetas solo pueden usar carpetas que un administrador haya permitido. Añádela en la configuración de Acceso a carpetas y vuelve a intentarlo."
+openSettings = "Configuración de Acceso a carpetas"
+title = "Esta carpeta no está permitida"
+
 [portal.sources.delete]
 body = "¿Eliminar \"{{name}}\"? Esto no se puede deshacer. Las políticas que la referencian tendrían que actualizarse."
 cancel = "Cancelar"
 confirm = "Eliminar"
 title = "¿Eliminar fuente?"
 
-[portal.sources.detail]
-closeAriaLabel = "Cerrar detalle"
-delete = "Eliminar fuente"
-docs24h = "Últimas 24 h"
-docs30d = "Últimos 30 días"
-docsTotal = "Total vistos"
-docsTrend = "Documentos durante los últimos 30 días"
-documents = "Documentos"
-edit = "Editar"
-notReferenced = "No está referenciada por ninguna política, por lo que es seguro eliminarla."
-pause = "Pausar"
-resume = "Reanudar"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Usada por"
-
 [portal.sources.empty]
 description = "Conecta una carpeta (y, pronto, almacenamiento en la nube) para que tus políticas tengan de dónde extraer documentos."
 title = "Aún no hay fuentes conectadas"
@@ -7899,18 +8754,57 @@ inUse = "En uso"
 total = "Conexiones"
 unused = "Sin usar"
 
+[portal.sources.networkFields.connection]
+helperText = "La conexión almacenada con la dirección del servidor y las credenciales. La reutiliza cada origen que la referencia."
+label = "Conexión"
+
+[portal.sources.networkFields.directory]
+helperText = "Carpeta en el servidor que sondear, relativa al inicio de sesión o a la raíz del recurso compartido. Déjala en blanco para la raíz."
+label = "Carpeta"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consumir elimina cada archivo del servidor una vez que cada política lo ha procesado."
+label = "Modo de lectura"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consumir: procesar cada archivo una vez"
+snapshot = "Instantánea: volver a leer la carpeta en cada ejecución"
+
+[portal.sources.networkFields.recursive]
+label = "Profundidad de carpeta"
+
+[portal.sources.networkFields.recursive.options]
+all = "Incluir subcarpetas"
+top = "Solo nivel superior"
+
 [portal.sources.status]
 active = "Activa"
 disabled = "Desactivada"
 unused = "Sin usar"
 
 [portal.sources.table]
+documents = "Documentos"
 source = "Fuente"
 status = "Estado"
 usedBy = "Políticas"
 
+[portal.sources.types.box]
+description = "Extrae documentos de carpetas de Box que tu equipo ya comparte."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Extrae documentos de una carpeta compartida de Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documentos que tu equipo ha procesado en el editor, en ejecuciones de políticas e IA."
 label = "Editor"
+noPolicies = "Aún no se ha ejecutado ninguna política desde el editor."
+
+[portal.sources.types.email]
+description = "Convierte los adjuntos enviados a un buzón dedicado en documentos."
+label = "Bandeja de entrada de correo electrónico"
 
 [portal.sources.types.folder]
 description = "Vigila un directorio en el servidor para detectar documentos nuevos."
@@ -7943,25 +8837,80 @@ label = "Profundidad de carpeta"
 all = "Incluir subcarpetas"
 top = "Solo nivel superior"
 
+[portal.sources.types.ftp]
+description = "Sondea una carpeta de servidor FTP o FTPS en busca de documentos nuevos."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Extrae documentos de carpetas compartidas de Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Vigila un recurso compartido de red SMB en busca de documentos nuevos."
+label = "Unidad de red"
+
+[portal.sources.types.onedrive]
+description = "Vigila carpetas de OneDrive en busca de documentos nuevos."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Extrae documentos de un bucket de Amazon S3 o compatible con S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "La conexión almacenada que contiene el bucket y las credenciales. La reutilizan todos los orígenes y salidas de canalización que la referencian."
+label = "Conexión"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consumir elimina cada objeto del bucket una vez que cada política lo ha procesado."
+label = "Modo de lectura"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consumir: procesar cada objeto una vez"
+snapshot = "Instantánea: volver a leer el bucket en cada ejecución"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Solo se procesan los objetos cuyas claves empiezan por este prefijo."
+label = "Prefijo de clave"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Sondea una carpeta de entrega SFTP en busca de documentos nuevos."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Extrae documentos de bibliotecas de documentos de SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Fuente"
 
+[portal.sources.types.webhook]
+createNote = "Se generan una URL de entrega y un secreto de firma al crear este webhook. Los remitentes hacen POST de documentos a esa URL y las políticas que lo referencian se ejecutan al llegar."
+description = "Recibe documentos mediante HTTP POST firmado desde cualquier sistema externo."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL de entrega"
+secretNote = "El secreto de firma se muestra una vez, al crear el webhook. Vuelve a crear el origen para rotarlo."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copiar"
+done = "Hecho"
+secret = "Secreto de firma"
+secretHelp = "Firma el cuerpo sin procesar de cada entrega con esta clave (HMAC-SHA256) y envíalo como encabezado X-Stirling-Signature."
+secretWarning = "Copia ahora el secreto de firma. Por tu seguridad, se muestra solo una vez y no se puede recuperar más tarde."
+title = "Webhook creado"
+url = "URL de entrega"
+usage = "Haz POST de cada documento como cuerpo de solicitud sin procesar a la URL de entrega con un tipo de contenido binario (application/pdf o application/octet-stream). Las políticas que lo referencian se ejecutan automáticamente al llegar."
+
 [portal.sources.wizard]
-back = "Atrás"
-cancel = "Cancelar"
-continue = "Continuar"
-editTitle = "Editar fuente"
 name = "Nombre"
 namePlaceholder = "p. ej., Entrada de reclamaciones"
-save = "Guardar cambios"
-subtitle = "Paso {{current}} de {{total}} · {{label}}"
-title = "Conectar una fuente"
 type = "Tipo"
 
-[portal.sources.wizard.steps]
-chooseType = "Elegir tipo"
-configure = "Configurar"
-review = "Revisar y conectar"
+[portal.stepModal]
+close = "Cerrar"
 
 [portal.usage]
 managePayment = "Gestionar pago"
@@ -8021,16 +8970,9 @@ summary = "Posee un equipo — gestiona los recursos de sus miembros y las confi
 2 = "Acceso al portal mediante la política predeterminada"
 3 = "Todo lo que puede hacer un miembro"
 
-[portal.welcome]
-ariaLabel = "Bienvenido a Stirling PDF"
-badge = "Open-source"
-installEditor = "Instalar el Editor"
-inviteTeammates = "Invitar a compañeros"
-openInBrowser = "Abrir en el navegador"
-perks = "Gratis para siempre · Self-hostable"
-subtitle = "El Editor de PDF más seguro del mundo es gratis para equipos de todos los tamaños. Incluye más de 60 operaciones PDF y SSO."
-title = "Bienvenido a"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Ilimitado"
 
 [printFile]
 title = "Imprimir archivo"
@@ -8613,6 +9555,14 @@ text = "Rote las páginas de su PDF en sentido horario o antihorario en incremen
 [rotate.tooltip.header]
 title = "Resumen de Configuración de Rotación"
 
+[ruler]
+clearAll = "Borrar todo"
+hideAllLabels = "Ocultar todas las etiquetas"
+hideSmallLabels = "Ocultar etiquetas pequeñas"
+physicalValues = "Físico"
+scaled = "Escalado"
+showAllLabels = "Mostrar todas las etiquetas"
+
 [sanitize]
 desc = "Eliminar elementos potencialmente dañinos de archivos PDF."
 sanitizationResults = "Resultados de Desinfección"
@@ -8654,31 +9604,45 @@ label = "Eliminar metadatos XMP"
 [sanitize.steps]
 settings = "Configuración"
 
-[sanitizePdf]
-tags = "limpiar,asegurar,seguro,quitar amenazas"
-
 [sanitizePDF]
 title = "Limpiar archivo PDF"
 
+[sanitizePdf]
+tags = "limpiar,asegurar,seguro,quitar amenazas"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Ajustar escala de la página"
 
+[scaleSettings]
+activeScale = "Escala activa"
+apply = "Aplicar escala"
+applyCalibration = "Aplicar calibración"
+calculatedScale = "Escala calculada"
+calibrate = "Calibrar"
+calibrating = "Calibrando"
+calibrationDistanceRequired = "Introduce una distancia real mayor que cero"
+calibrationInvalid = "No se puede calcular la escala a partir de esta medida"
+calibrationPaperDistance = "Distancia medida en la página: {{distance}}"
+calibrationTitle = "Calibrar escala"
+calibrationTooltip = "Mide una distancia conocida para calcular la escala automáticamente"
+customScale = "Escala personalizada"
+noneSet = "No se ha establecido ninguna escala personalizada"
+presets = "Escalas predefinidas"
+ratio = "Relación de escala"
+ratioHelp = "Relación: 1 unidad de página = X unidades reales"
+ratioPlaceholder = "p. ej., 100"
+ratioPositive = "La relación debe ser mayor que cero"
+ratioRequired = "La relación es obligatoria"
+realDistance = "Distancia real"
+realDistancePlaceholder = "p. ej., 5"
+reset = "Restablecer valores predeterminados"
+unit = "Unidad"
+unitInvalid = "Unidad no válida: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Umbral de ángulo:"
-10 = "Establece el tamaño del borde agregado y eliminado para evitar bordes blancos en la salida (predeterminado: 1)."
-2 = "Establecer el ángulo absoluto mínimo requerido para rotar la imagen (predeterminado: 10)."
-3 = "Tolerancia:"
-4 = "Determinar el rango de variación de color alrededor del color de fondo estimado (predeterminado: 30)."
-5 = "Área mínima:"
-6 = "Establecer el umbral mínimo de área para una foto (predeterminado: 10000)."
-7 = "Área mínima de contorno:"
-8 = "Establecer el umbral mínimo del área de contorno para una foto"
-9 = "Tamaño del borde:"
-
 [scannerImageSplit]
 submit = "Extraer Escaneos de Imágenes"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Qué hace esto"
 whatThisDoesDesc = "Encuentra y extrae automáticamente cada foto de una página escaneada o imagen compuesta, sin recorte manual."
 whenToUse = "Cuándo usar"
 
+[ScannerImageSplit.selectText]
+1 = "Umbral de ángulo:"
+10 = "Establece el tamaño del borde agregado y eliminado para evitar bordes blancos en la salida (predeterminado: 1)."
+2 = "Establecer el ángulo absoluto mínimo requerido para rotar la imagen (predeterminado: 10)."
+3 = "Tolerancia:"
+4 = "Determinar el rango de variación de color alrededor del color de fondo estimado (predeterminado: 30)."
+5 = "Área mínima:"
+6 = "Establecer el umbral mínimo de área para una foto (predeterminado: 10000)."
+7 = "Área mínima de contorno:"
+8 = "Establecer el umbral mínimo del área de contorno para una foto"
+9 = "Tamaño del borde:"
+
 [search]
 noResults = "No se encontraron resultados"
 placeholder = "Ingrese término de búsqueda..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Tu servidor Stirling-PDF está sin conexión y \"{{en
 [session]
 expired = "Su sesión ha caducado. Actualice la página e inténtelo de nuevo."
 
-[sessionManagement.tooltip]
-header = "Gestión de sesiones de firma"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Los nuevos participantes se añaden al final del orden de firma"
-bullet2 = "No se pueden añadir participantes después de finalizar la sesión"
-bullet3 = "Cada participante recibe una notificación cuando sea su turno"
-description = "Puedes añadir más participantes a una sesión activa en cualquier momento antes de la finalización."
-title = "Añadir participantes"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalización completa</b>: Todos los participantes han firmado"
-bullet2 = "<b>Finalización parcial</b>: Algunos participantes aún no han firmado"
-bullet3 = "Los participantes sin firmar serán excluidos del documento final"
-bullet4 = "Una vez finalizada, puedes cargar el PDF firmado en archivos activos"
-description = "La finalización combina todas las firmas en un único PDF firmado. Esta acción no se puede deshacer."
-title = "Finalización de la sesión"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "No se pueden eliminar participantes que ya hayan firmado"
-bullet2 = "Los participantes eliminados ya no recibirán notificaciones"
-bullet3 = "El orden de firma se ajusta automáticamente"
-description = "Se puede eliminar a los participantes de las sesiones antes de que firmen."
-title = "Eliminar participantes"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Cada firma se aplica secuencialmente al PDF"
-bullet2 = "Los firmantes posteriores pueden ver las firmas anteriores"
-bullet3 = "Crucial para flujos de aprobación y cadenas de custodia legales"
-description = "El orden que especifiques al crear la sesión determina quién firma primero."
-title = "Orden de firmas"
-
 [settings]
 close = "Cerrar"
 
+[settings.ai]
+documents = "Documentos y RAG"
+general = "General"
+limits = "Límites y rendimiento"
+models = "Modelos y proveedores"
+title = "IA"
+
 [settings.configuration]
 advanced = "Avanzado"
 database = "Base de datos"
 endpoints = "Endpoints"
 features = "Funciones"
+folderAccess = "Acceso a carpetas"
 mcp = "MCP Server"
 storageSharing = "Almacenamiento y uso compartido de archivos"
 systemSettings = "Ajustes del sistema"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Editor de PDF predeterminado"
 defaultPdfEditorActive = "Stirling PDF es su editor de PDF predeterminado"
 defaultPdfEditorChecking = "Comprobando..."
 defaultPdfEditorInactive = "Otra aplicación está establecida como predeterminada"
+defaultPdfEditorRemind = "Recordarme que lo establezca como predeterminado"
+defaultPdfEditorRemindDescription = "Mostrar un banner cuando Stirling PDF no sea tu aplicación PDF predeterminada."
 defaultPdfEditorSet = "Ya es predeterminado"
 defaultStartupView = "Vista predeterminada al iniciar"
 defaultStartupViewDescription = "Elija qué pestaña estará activa en la columna izquierda cuando se inicie la aplicación"
@@ -8817,9 +9771,18 @@ languageDescription = "Elige el idioma de la interfaz"
 logout = "Cerrar sesión"
 setAsDefault = "Establecer como predeterminado"
 theme = "Tema"
+themeAccent = "Color de acento"
+themeAccentCustom = "Color personalizado"
+themeAccentCustomHint = "Personalizado (se recomiendan los valores predeterminados)"
+themeAccentDark = "Color de acento del modo oscuro"
+themeAccentDefault = "Predeterminado"
+themeAccentDefaultHint = "Tema predeterminado (recomendado)"
+themeAccentDescription = "Los botones, enlaces y resaltados lo siguen, y tiñe sutilmente la aplicación. Los modos claro y oscuro tienen cada uno el suyo. El sistema utiliza el que esté activo."
+themeAccentLight = "Color de acento del modo claro"
 themeDark = "Oscuro"
 themeDescription = "Cambia entre el modo claro y oscuro"
 themeLight = "Claro"
+themeReset = "Restaurar tema predeterminado"
 themeSystem = "System"
 title = "General"
 user = "Usuario"
@@ -8833,6 +9796,12 @@ intro = "Activa la autenticación de usuarios, la gestión de equipos y las func
 learnMore = "Más información en la documentación"
 title = "Para administradores del sistema"
 
+[settings.general.loginLanding]
+description = "Elige qué aplicación se abre cuando inicias sesión en Stirling Cloud."
+editor = "Editor"
+processor = "Procesador"
+title = "Después de iniciar sesión"
+
 [settings.general.mode]
 fullscreen = "Pantalla completa"
 sidebar = "Barra lateral"
@@ -9041,6 +10010,11 @@ security = "Seguridad"
 telegram = "Telegram"
 title = "Seguridad y autenticación"
 
+[settings.signOut]
+confirm = "¿Seguro que quieres cerrar sesión?"
+submit = "Cerrar sesión"
+title = "Cerrar sesión"
+
 [settings.team]
 title = "Equipo"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Subir al servidor"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "haz clic aquí"
+fallback = "Si no se ha abierto automáticamente,"
+opening = "Abriendo Swagger UI en una nueva pestaña..."
 tags = "api,documentación,swagger,endpoints,desarrollo"
 title = "Documentación de API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Seleccione archivos en Archivos activos para ejecutar esta he
 singleFileScope = "Solo se aplica a: {{fileName}}"
 viewerMode = "Cambie al editor de archivos para seleccionar varios archivos."
 
+[toolFormat]
+ANY = "cualquier archivo"
+CBR = "un archivo de cómic (CBR)"
+CBZ = "un archivo de cómic (CBZ)"
+CSV = "un archivo CSV"
+EBOOK = "un libro electrónico"
+EMAIL = "un correo electrónico"
+EXCEL = "una hoja de cálculo"
+HTML = "una página web"
+IMAGE = "imágenes"
+JAVASCRIPT = "un archivo JavaScript"
+JSON = "un archivo JSON"
+MARKDOWN = "un archivo Markdown"
+NONE = "ningún archivo"
+PCL = "un archivo de impresión PCL"
+PDF = "un PDF"
+PDF_ENCRYPTED = "un PDF protegido con contraseña"
+POSTSCRIPT = "un archivo PostScript"
+PPT = "una presentación"
+TEXT = "un archivo de texto"
+VIDEO = "un vídeo"
+WORD = "un documento Word"
+XML = "un archivo XML"
+XPS = "un documento XPS"
+ZIP = "un archivo ZIP"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Volver a todas las herramientas"
 collapse = "Contraer panel"
 expand = "Expandir panel"
 goBack = "Volver"
+pdfTools = "Herramientas PDF"
 placeholder = "Elige una herramienta para empezar"
 premiumFeature = "Función Premium:"
+searchTools = "Buscar herramientas"
 toolsHeader = "Herramientas"
 viewAllTools = "Ver todas las herramientas"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "No se encontraron herramientas"
 quickAccess = "ACCESO RÁPIDO"
 searchPlaceholder = "Buscar herramientas..."
 
-[toolPicker.categories]
-advancedTools = "Herramientas Avanzadas"
-recommendedTools = "Herramientas Recomendadas"
-standardTools = "Herramientas Estándar"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formato Avanzado"
 automation = "Automatización"
@@ -9950,16 +10950,31 @@ title = "Usuarios"
 you = "(tú)"
 
 [users.action]
+cancelInvite = "Cancelar invitación"
 deleteTeam = "Eliminar equipo"
 disableMfa = "Restablecer MFA"
 move = "Mover a equipo"
 reinstate = "Readmitir"
 remove = "Eliminar de la org"
+removeTeam = "Quitar del equipo"
 rename = "Cambiar nombre del equipo"
 resetPw = "Restablecer contraseña"
 suspend = "Suspender"
 unlock = "Desbloquear cuenta"
 
+[users.activity]
+daysAgo = "hace {{count}} d"
+hoursAgo = "hace {{count}} h"
+justNow = "Ahora mismo"
+minutesAgo = "hace {{count}} min"
+monthsAgo_one = "hace {{count}} mes"
+monthsAgo_other = "hace {{count}} meses"
+never = "Nunca"
+weeksAgo_one = "hace {{count}} semana"
+weeksAgo_other = "hace {{count}} semanas"
+yearsAgo_one = "hace {{count}} año"
+yearsAgo_other = "hace {{count}} años"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Aprueba política"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "¿Cancelar la invitación a {{email}}? No podrá unirse con el enlace actual."
+cancelInviteTitle = "Cancelar invitación"
 deleteTeamBody = "¿Eliminar el equipo {{name}}? El equipo debe estar vacío primero: mueve sus miembros a otro equipo y no puede seguir siendo propietario de ninguna configuración de integración."
 deleteTeamTitle = "Eliminar equipo"
 disableMfaBody = "¿Eliminar la inscripción MFA de {{name}}? La configurará de nuevo en el próximo inicio de sesión si es necesario."
 disableMfaTitle = "Restablecer MFA"
 removeBody = "¿Eliminar permanentemente a {{name}} de la organización? Esto no se puede deshacer."
+removeTeamBody = "¿Quitar a {{name}} del equipo? Mantendrá su cuenta, pero perderá el acceso a los recursos de este equipo."
 removeTitle = "Eliminar miembro"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nombre de usuario"
 usernameError = "El nombre de usuario debe tener al menos 3 caracteres"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Invitado por {{who}}"
+cancel = "Cancelar"
+count = "{{count}} pendientes"
+desc = "Personas invitadas que aún no se han unido. Ocupan una plaza hasta que acepten."
+expiresInDays_one = "Caduca en {{count}} día"
+expiresInDays_other = "Caduca en {{count}} días"
+expiresToday = "Caduca hoy"
+title = "Invitaciones pendientes"
+
 [users.loadError]
 description = "Algo ha fallado al contactar con el backend, o no tienes acceso. Inténtalo de nuevo."
 title = "No se han podido cargar los miembros"
@@ -10212,9 +11240,11 @@ title = "Adjuntos"
 
 [viewer.bookmarks]
 bookmarkTitle = "Título del marcador"
+bookmarkTitleRequired = "El título del marcador es obligatorio"
 closeSidebar = "Cerrar barra lateral de marcadores"
 collapseAll = "Contraer todos los marcadores"
 expandAll = "Expandir todos los marcadores"
+searchPlaceholder = "Buscar marcadores"
 
 [viewer.comments]
 addComment = "Añadir comentario"
@@ -10605,30 +11635,6 @@ title = "Texto de Marca de Agua"
 image = "Imagen"
 text = "Texto"
 
-[wetSignature.tooltip]
-header = "Métodos de creación de firma"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Personaliza el color y el grosor del trazo"
-bullet2 = "Borra y vuelve a dibujar hasta que quedes conforme"
-bullet3 = "Funciona en dispositivos táctiles (tabletas, teléfonos)"
-description = "Crea una firma manuscrita con el ratón o la pantalla táctil. Ideal para firmas personales y auténticas."
-title = "Dibujar firma"
-
-[wetSignature.tooltip.type]
-bullet1 = "Elige entre varias tipografías"
-bullet2 = "Personaliza el tamaño y el color del texto"
-bullet3 = "Perfecto para firmas estandarizadas"
-description = "Genera una firma a partir de texto escrito. Rápida y coherente, adecuada para documentos empresariales."
-title = "Escribir firma"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Compatible con PNG, JPG y otros formatos de imagen"
-bullet2 = "Se recomiendan fondos transparentes para mejores resultados"
-bullet3 = "La imagen se ajustará para encajar en el área de la firma"
-description = "Sube una imagen de firma ya creada. Ideal si tienes una firma escaneada o el logotipo de la empresa."
-title = "Subir imagen de la firma"
-
 [workbenchBar]
 activeFiles = "Archivos activos"
 annotations = "Anotaciones"
@@ -10652,6 +11658,7 @@ redact = "Redactar"
 rotateLeft = "Girar a la izquierda"
 rotateRight = "Girar a la derecha"
 ruler = "Regla / Medir"
+rulerSettings = "Ajustes de escala"
 save = "Guardar"
 saveAll = "Guardar todo"
 saveAs = "Guardar como"
diff --git a/frontend/editor/public/locales/eu-ES/translation.toml b/frontend/editor/public/locales/eu-ES/translation.toml
index 704f1fb43c..0b3c97598a 100644
--- a/frontend/editor/public/locales/eu-ES/translation.toml
+++ b/frontend/editor/public/locales/eu-ES/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "Hautatutako fitxategiak"
 font = "Letra-tipoa"
 fontSizeTooltip = "Orri-zenbakiaren testuaren tamaina puntutan. Zenbaki handiagoek testu handiagoa sortzen dute."
 fontTypeTooltip = "Orri-zenbakientzako letra-familia. Aukeratu zure dokumentuaren estiloaren arabera."
-genericSubmit = "Bidali"
 green = "Berdea"
 help = "Laguntza"
-imgPrompt = "Hautatu Irudia(k)"
 incorrectPasswordMessage = "Uneko pasahitza ez da zuzena."
 info = "Info"
 invalidUndoData = "Ezin da desegin: eragiketaren datuak baliogabeak dira"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Saio-hasierako hitzarmena"
 logOut = "Saioa itxi"
 marginTooltip = "Orri-zenbakiaren eta orrialdearen ertzen arteko distantzia."
 moreOptions = "Aukera gehiago"
-multiPdfPrompt = "Hautatu PDFak (2+)"
 never = "Inoiz ez"
 no = "Ez"
 noFileSelected = "Ez da fitxategirik hautatu. Mesedez, igo bat."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Orrialdeen ordena (sartu komaz bereizitako orrialde-zenbakien
 pages = "Orrialdeak"
 pageSelectionPrompt = "Custom Page Selection (Enter a comma-separated list of page numbers 1,5,6 or Functions like 2n+1) :"
 password = "Pasahitza"
-pdfPrompt = "Hautatu PDFa(k)"
 pin = "Ainguratu fitxategia (aktibo mantendu tresna exekutatu ondoren)"
 pro = "Pro"
 processingComplete = "Zure fitxategia prest dago."
@@ -356,6 +352,7 @@ text = "Baimen hauek erabiltzaileek PDFarekin egin dezaketena kontrolatzen dute.
 title = "Aldatu baimenak"
 
 [addStamp]
+preview = "Zigiluaren aurrebista"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Deskarga manualak: egin klik esteketan eta jarri fitxategiak tess
 noLanguages = "Ez da tessdata hizkuntzarik aurkitu konfiguratutako direktorioan."
 permissionNotice = "tessdata bidea ez da idazgarria. Deskargak nabigatzailean irekiko dira; gorde .traineddata fitxategiak eskuz tessdata direktorioan."
 
+[admin.settings.ai.documents]
+description = "Konfiguratu dokumentuei buruzko galderei erantzuteko erabiltzen diren embedding eredua eta berreskuratze-ezarpenak. Gordetzean AI motorrari aplikatzen zaio."
+title = "Dokumentuak eta RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Utzi hutsik motorraren inguruneko kredentziala erabiltzeko. Motor bakarreko self-hosted inplementazioei aplikatzen zaie."
+generic = "Embedding API gakoa"
+openai = "OpenAI API gakoa"
+setPlaceholder = "Gordeta - utzi hutsik uneko gakoa mantentzeko"
+voyageai = "VoyageAI API gakoa"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI-rekin bateragarria den / Ollama embeddings endpoint-aren oinarrizko URL, adib. http://ollama:11434/v1. Fidagarria den barne-endpoint batera apuntatu behar du (SSRFarekiko sentikorra)."
+label = "Embedding oinarrizko URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding ereduaren izena. Testu librea; iradokizunak pistak baino ez dira."
+label = "Embedding eredua"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Dokumentuaren testua bektore-embedding bihurtzeko erabiltzen den hornitzailea."
+label = "Embedding hornitzailea"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Agenteak eskaera bakoitzeko exekuta ditzakeen berreskuratze-bilaketen gehieneko kopurua."
+label = "Gehieneko bilaketak"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Embedding eredua aldatzeak berehala du eragina, baina aurreko ereduarekin indexatutako dokumentuak berriro indexatu behar dira bilaketak emaitza zuzenak itzul ditzan."
+title = "Berrindexatzea beharrezkoa da"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Embedding eredua aldatu baduzu, berrindexatu dauden dokumentuak bilaketak eredu berria erabil dezan."
+
+[admin.settings.ai.documents.topK]
+description = "Bilaketa bakoitzean berreskuratzen diren zatirik garrantzitsuenen kopurua."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Konektatu Stirling Python AI motorrarekin eta aukeratu zein AI gaitasun erakutsiko diren. Aldaketak berrabiaraztean aplikatzen dira."
+title = "AI motorra"
+
+[admin.settings.ai.general.capabilities]
+description = "Aktibatu edo desaktibatu AI eginbide bakoitza. Desaktibatutako eginbideak aplikazioan ezkutatzen dira."
+title = "Gaitasunak"
+
+[admin.settings.ai.general.enabled]
+description = "Etengailu nagusia. Desaktibatuta dagoenean, ez dago AI tresnarik, agenterik edo motor-deirik erabilgarri."
+label = "Gaitu AI"
+
+[admin.settings.ai.general.features.chat]
+description = "PDFekin lan egiteko elkarrizketa-laguntzailea."
+label = "Txat-laguntzailea"
+
+[admin.settings.ai.general.features.classify]
+description = "Sailkatu dokumentuak automatikoki motaren edo edukiaren arabera."
+label = "Dokumentuen sailkapena"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Sortu PDF berri bat (adib. HTMLtik) AI agente baten bidez."
+label = "Sortu PDF gonbitetik"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Egin galderak eta jaso igotako dokumentu batean oinarritutako erantzunak."
+label = "Dokumentu-galderak"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Berrikusi dokumentuak akats matematiko eta numerikoak aurkitzeko."
+label = "Matematika-auditorea"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Gehitu AI-k idatzitako berrikuspen-iruzkinak eta oharrak PDF bati."
+label = "PDF iruzkin-agentea"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Agente-eragiketa astunagoetarako denbora-muga, hala nola dokumentuen sorkuntza."
+label = "Iraupen luzeko denbora-muga (segundoak)"
+
+[admin.settings.ai.general.note]
+body = "AI motorra aparteko zerbitzu gisa exekutatzen da. Bere sekretu partekatua"
+body2 = "edukiontziaren ingurune-aldagai baten bidez ezartzen da. Hornitzaileen API gakoak orri hauetan sar daitezke edo motorraren ingurune-aldagai gisa eman; hemen sartutako gakoak motorra bidaltzen dira gordetzean."
+title = "AI motorrari buruz"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Streaming bidezko (tokenetik tokenera) txat-erantzunetarako denbora-muga."
+label = "Stream denbora-muga (segundoak)"
+
+[admin.settings.ai.general.test]
+button = "Probatu konexioa"
+failBody = "AI motorrak ez du erantzun. Egiaztatu URL, motorraren edukiontzia martxan dagoela eta AI gaituta dagoela (gaitu ondoren berrabiaraztea behar da)."
+failTitle = "AI motorra ezin da atzitu"
+okBody = "AI motorrak osasun-egiaztapen bati erantzun dio."
+okTitle = "AI motorra atzigarria da"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Motorra bidaltzen diren AI eskaera estandarretarako denbora-muga."
+label = "Eskaeraren denbora-muga (segundoak)"
+
+[admin.settings.ai.general.url]
+description = "Python AI motorraren barne-URL, adib. http://stirling-pdf-engine:5001."
+label = "AI motorraren URL"
+
+[admin.settings.ai.limits]
+description = "AI eskaerek zenbat lan egin dezaketen eta zenbat exekuta daitezkeen aldi berean mugatzeko babesak. Gordetzean AI motorrari aplikatzen zaio."
+title = "Mugak eta errendimendua"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Babesa: baztertu erauzitako testuak luzera hau gainditzen duten AI eskaerak."
+label = "Gehieneko karaktereak eskaera bakoitzeko"
+
+[admin.settings.ai.limits.maxPages]
+description = "Babesa: baztertu PDF orri kopuru hau gainditzen duten AI eskaerak."
+label = "Gehieneko orriak eskaera bakoitzeko"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Motor osoan aldi berean martxan egon daitezkeen eredu-deien gehieneko kopurua."
+label = "Ereduaren gehieneko aldiberekotasuna"
+
+[admin.settings.ai.models]
+description = "Aukeratu AI motorrak erabiltzen dituen LLM hornitzailea eta eredu adimentsu/azkarrak. Gordetzean AI motorrari aplikatzen zaio."
+title = "Ereduak eta hornitzaileak"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API gakoa"
+description = "Utzi hutsik motorraren inguruneko kredentziala erabiltzeko. Motor bakarreko self-hosted inplementazioei aplikatzen zaie."
+generic = "API gakoa"
+openai = "OpenAI API gakoa"
+setPlaceholder = "Gordeta - utzi hutsik uneko gakoa mantentzeko"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI-rekin bateragarria den / Ollama endpoint-aren oinarrizko URL, adib. http://ollama:11434/v1."
+label = "Hornitzailearen oinarrizko URL"
+warning = "Oinarrizko URLak fidagarria den barne-endpoint batera apuntatu behar du. Motorrak zerbitzariaren aldetik eskaerak egingo dizkio; beraz, balio ez-fidagarria SSRFarekiko sentikorra da."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Eredu azkarraren irteerako token gehieneko kopurua."
+label = "Eredu azkarraren gehieneko tokenak"
+
+[admin.settings.ai.models.fastModel]
+description = "Zeregin arinetarako eredu merkeagoa eta azkarragoa. Testu librea; iradokizunak pistak baino ez dira."
+label = "Eredu azkarra"
+
+[admin.settings.ai.models.provider]
+description = "Motorrak zein LLM hornitzailerekin komunikatzen den."
+label = "Hornitzailea"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Eredu adimentsuaren irteerako token gehieneko kopurua."
+label = "Eredu adimentsuaren gehieneko tokenak"
+
+[admin.settings.ai.models.smartModel]
+description = "Arrazonamendu konplexurako gaitasun handiko eredua. Testu librea; iradokizunak pistak baino ez dira."
+label = "Eredu adimentsua"
+
+[admin.settings.ai.saved]
+body = "Aldaketak automatikoki bidaltzen zaizkio AI motorrari."
+bodyNoPush = "Ezarpenak gordeta. AI motorrak bere konfigurazioa hurrengoan hartzen duenean aplikatuko dira."
+title = "AI ezarpenak gordeta"
+
 [admin.settings.badge]
 clickToUpgrade = "Egin klik planaren xehetasunak ikusteko"
 
@@ -938,6 +1094,25 @@ label = "Abiokoan birsortu"
 description = "Ziurtagiria balioz egongo den egun kopurua"
 label = "Ziurtagiriaren balio-epea (egunak)"
 
+[admin.settings.folderAccess]
+description = "Karpeta-iturriek eta karpeta-irteerek irakurri eta idatz ditzaketen direktorioak. Hau segurtasun-muga bat da: automatizazioak ezin dira inoiz zerrenda honetatik kanpoko zerbitzari-bide batera zuzendu."
+securityNote = "Utzi hau hutsik karpeta-iturriak eta irteerak erabat desgaitzeko. Stirling-en konfigurazio-direktorioa beti dago mugaz kanpo."
+title = "Karpeta-sarbidea"
+
+[admin.settings.folderAccess.implied]
+description = "Stirling-ek kudeatutako direktorio hauek beti baimenduta daude eta ezin dira hemen aldatu."
+serverStorage = "Zerbitzariko fitxategi-biltegia"
+title = "Beti baimenduta"
+watchedFolder = "Pipelinearen zaindutako karpeta"
+
+[admin.settings.folderAccess.roots]
+add = "Gehitu"
+empty = "Ez dago karpetarik baimenduta. Karpeta-iturriak eta irteerak desgaituta daude une honetan."
+hint = "Sartu bide absolutuak, adibidez /data/inbox."
+label = "Baimendutako karpeta-erroak"
+placeholder = "/data/inbox"
+remove = "Kendu karpeta-erroa"
+
 [admin.settings.general]
 description = "Aplikazioaren sistema mailako ezarpenak konfiguratu, marka eta portaera lehenetsia barne."
 system = "Sistema"
@@ -1842,6 +2017,15 @@ export = "Esportatu"
 accessDenied = "Sarbidea ukatuta"
 insufficientPermissions = "Ez duzu ekintza hau egiteko baimenik."
 
+[auth.callback]
+completing = "Autentifikazioa osatzen"
+invalidToken = "OAuth saioa hasteak huts egin du - token baliogabea."
+missingToken = "OAuth saioa hasteak huts egin du - ez da tokenik jaso."
+oauthFailed = "OAuth saioa hasteak huts egin du. Saiatu berriro."
+pleaseWait = "Itxaron saioa hasten amaitzen dugun bitartean."
+signedOut = "Saioa amaitu duzu. Hasi saioa berriro."
+windowMayClose = "Leiho hau itxi dezakezu osatzen denean."
+
 [auth.displayName]
 guest = "Gonbidatua"
 user = "Erabiltzailea"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "PDF dokumentuak seguru bihurtzen ditu eduki gaizto potentz
 description = "Tresna honek PDF fitxategiak automatikoki birizendatuko ditu haien edukian oinarrituta. Dokumentua aztertzen du testutik titulu egokiena aurkitzeko."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Biratu automatikoki"
+tags = "biratu automatikoki,konpondu orientazioa,buruz behera,alboz,zuzen jarri,orientatu,detektatu orientazioa,zuzendu biraketa,orientatu automatikoki,eskaneatua,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Konfiantza-atalasea"
+
+[autoRotate.detectionMode]
+auto = "Automatikoa"
+osd = "OCR bakarrik"
+text = "Testua bakarrik"
+title = "Detekzio-metodoa"
+
+[autoRotate.error]
+failed = "Errore bat gertatu da PDFa automatikoki biratzean."
+
+[autoRotate.inferUndetected]
+title = "Biratu konfiantza txikiko orriak bat etor daitezen"
+
+[autoRotate.report]
+applied = "{{degrees}}° erlojuaren noranzkoan"
+confidenceValue = "Konfiantza {{value}}"
+noChange = "Aldaketarik ez"
+pageLabel = "{{number}}. orria"
+summary = "{{total}} orritik {{rotated}} biratu dira, {{unchanged}} bere horretan utzi dira"
+title = "Detekzio-txostena"
+
+[autoRotate.report.method]
+inferred = "Bat etorria"
+none = "Saltatuta"
+osd = "OCR"
+text = "Testua"
+
+[autoRotate.report.note]
+belowThreshold = "Atalasearen azpitik"
+blankPage = "Orria hutsik dago"
+inferredFromDocument = "Beste orrien berdina"
+noDominantDirection = "Testu-norabide nahasiak"
+osdFailed = "Ez da testu irakurgarririk aurkitu"
+osdNoVerdict = "Ezin izan da jakin zein den goiko aldea"
+tesseractUnavailable = "OCR ez dago instalatuta"
+tooFewGlyphs = "Testu gutxiegi"
+
+[autoRotate.results]
+title = "Biraketa automatikoaren emaitzak"
+
+[autoRotate.settings]
+title = "Ezarpenak"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Egiaztapenak zenbaterainoko ziurtasuna izan behar duen orri bat biratu aurretik. Jaitsi orri gehiago biratzeko; igo orri gehiago ukitu gabe uzteko."
+title = "Konfiantza-atalasea"
+
+[autoRotate.tooltip.description]
+text = "Orri bakoitzaren goiko aldea zein den kalkulatzen du eta norabide egokira biratzen du. Dagoeneko tente dauden orriak bere horretan uzten dira."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automatikoak lehenik orriko testua irakurtzen du, eta hori nahikoa ez bada, orria irudi gisa aztertzen du. Testua bakarrik aukerak irudi-egiaztapena saltatzen du, eta azkarrena da inoiz eskaneatu ez diren dokumentuetarako. OCR bakarrik aukerak orri guztiak irudi gisa tratatzen ditu."
+title = "Detekzio-metodoa"
+
+[autoRotate.tooltip.header]
+title = "Biratu automatikoki"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Orri hutsak edo ia hutsak ezin dira bere kabuz egiaztatu. Irakur daitezkeen orri guztiek biraketa bera behar dutenean, orri hauek haiekin bat etortzeko biratzen dira."
+title = "Biratu konfiantza txikiko orriak bat etor daitezen"
+
 [autoSizeSplitPDF]
 tags = "pdf,banatu,dokumentua,antolaketa"
 
@@ -2189,33 +2440,6 @@ keywords = "Gako‑hitzak: odd, even"
 numbers = "Zenbakiak/barrutiak: 5, 10-20"
 progressions = "Progresioak: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Ziurtagiri motak"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Sistema-administratzaileek kudeatua"
-bullet2 = "Baimendutako erabiltzaileen artean partekatua"
-bullet3 = "Enpresaren nortasuna ordezkatzen du, ez pertsonarena"
-bullet4 = "Egokiena: dokumentu ofizialak, talde-sinadurak"
-description = "Zure erakundeak emandako ziurtagiri partekatua. Enpresa-mailako sinadura-agintaritzarako erabiltzen da."
-title = "Erakundeko ziurtagiria"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Lehen erabileran automatikoki sortua"
-bullet2 = "Zure erabiltzaile-kontuari lotua"
-bullet3 = "Ezin da beste erabiltzaileekin partekatu"
-bullet4 = "Egokiena: dokumentu pertsonalak, erantzukizun indibiduala"
-description = "Zure erabiltzaile-kontuarentzat berez sortutako ziurtagiri bakarra. Sinadura indibidualetarako egokia."
-title = "Ziurtagiri pertsonala"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX fitxategia eta pasahitza behar ditu"
-bullet2 = "Kanpoko Ziurtagiri Agintariek eman dezakete"
-bullet3 = "Fidagarritasun-maila handiagoa agiri juridikoetarako"
-bullet4 = "Egokiena: legez lotesleak diren kontratuak, kanpo-balidazioa"
-description = "Erabili zure PKCS#12 ziurtagiri-fitxategia. Ziurtagiriaren propietateen gaineko kontrol osoa ematen du."
-title = "Igo P12 pertsonalizatua"
-
 [certSign]
 awaitingSignatures = "Sinaduren zain"
 chooseCertificate = "Aukeratu ziurtagiri-fitxategia"
@@ -2542,34 +2766,6 @@ server = "Zerbitzaria"
 stepTitle = "Ziurtagiriaren iturburua"
 upload = "Igo"
 
-[certSign.tooltip.header]
-title = "Sinadurak kudeatzeari buruz"
-
-[certSign.tooltip.overview]
-bullet1 = "Egiaztatu dauden sinadurak eta haien baliozkotasuna"
-bullet2 = "Ikusi sinatzaileen eta ziurtagirien informazio zehatza"
-bullet3 = "Gehitu sinadura digital berriak zure dokumentuak babesteko"
-bullet4 = "Hainbat fitxategi onartzen dira nabigazio errazaarekin"
-text = "Tresna honek zure PDFak digitalki sinatuta dauden egiaztatzen eta sinadura digital berriak gehitzen uzten dizu. Sinadura digitalek nor sortu edo onartu duen frogatzen dute eta sinatu zenetik aldaketarik egon den erakusten dute."
-title = "Zer egin dezake tresna honek?"
-
-[certSign.tooltip.signing]
-bullet1 = "Onartzen ditu PEM, PKCS12, JKS eta zerbitzariaren ziurtagiri formatuak"
-bullet2 = "Aukera sinadura PDFan erakusteko edo ezkutatzeko"
-bullet3 = "Gehitu arrazoia, kokapena eta sinatzailearen izena"
-bullet4 = "Aukeratu zein orritan jarri sinadura ikusgarriak"
-bullet5 = "Erabili zerbitzariaren ziurtagiria 'Sinatu Stirling-PDF-rekin' aukera errazarentzat"
-text = "PDF bat sinatzeko, ziurtagiri digital bat behar duzu (PEM, PKCS12 edo JKS modukoa). Sinadura dokumentuan ikusgai egitea edo segurtasunerako ikusezin mantentzea aukera dezakezu."
-title = "Sinadurak gehitzea"
-
-[certSign.tooltip.validation]
-bullet1 = "Erakusten du sinadurak baliozkoak edo baliogabeak diren"
-bullet2 = "Bistaratzen du sinatzailearen informazioa eta sinadura-data"
-bullet3 = "Egiaztatzen du dokumentua sinatu ondoren aldatu den ala ez"
-bullet4 = "Egiaztapenerako ziurtagiri pertsonalizatuak erabil ditzake"
-text = "Sinadurak egiaztatzean, tresnak baliozkoak diren edo ez, nork sinatu duen, noiz sinatu zen, eta dokumentua sinatu ondoren aldatu den ala ez esaten dizu."
-title = "Sinadurak egiaztatzea"
-
 [changeCreds]
 changeUsername = "Eguneratu zure erabiltzaile-izena. Eguneratu ondoren saioa itxiko da."
 credsUpdated = "Kontua eguneratu da"
@@ -2824,6 +3020,7 @@ next = "Hurrengoa"
 preview = "Aurrebista"
 previous = "Aurrekoa"
 refresh = "Freskatu"
+remaining = "Geratzen dena"
 retry = "Saiatu berriro"
 save = "Gorde"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Monitorizazio aurreratua"
-allInOneWorkspace = "PDF lanerako ingurune osoa (ikusgailua, tresnak eta agentea)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Laguntza dedikatua eta SLAak"
-fasterThroughput = "10x azkarragoa"
-fullyPrivateFiles = "Fitxategi erabat pribatuak"
-largeFileProcessing = "Fitxategi handien prozesamendua"
-orgWideAccess = "Erakunde osoko sarbide-kontrolak"
-premiumAiModels = "Premium IA ereduak"
-prioritySupport = "Lehentasunezko laguntza"
-privateDocCloud = "Dokumentu-hodei pribatua"
-ragFineTuning = "RAG + fintzea"
-secureApiAccess = "API sarbide segurua"
-standardThroughput = "Errendimendu estandarra"
-unlimitedApiAccess = "API sarbide mugagabea"
-unlimitedSeats = "Eserleku mugagabeak"
-
 [crop]
 autoCrop = "Moztu automatikoki zuriuneak"
 noFileSelected = "Hautatu PDF fitxategi bat mozten hasteko"
@@ -3346,6 +3525,7 @@ message = "Ezin izan da PDF kudeatzaile lehenetsia ezarri"
 title = "Errorea"
 
 [defaultApp.prompt]
+dontRemind = "Ez gogorarazi berriro"
 message = "Egin Stirling PDF PDF fitxategiak irekitzeko zure aplikazio lehenetsia."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Pertsonalizatu taldeak"
 dropHint = "Ireki fitxategiak hasteko"
 dropToAdd = "Drop files to add"
 expand = "Zabaldu alboko barra"
-files = "Fitxategiak"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ez dago konfiguratuta"
 leaveMyFiles = "Irten Nire Fitxategietatik"
+library = "PDF liburutegia"
 myFiles = "Nire Fitxategiak"
 noFiles = "Oraindik ez dago fitxategirik"
 openFileManager = "Ireki fitxategi-kudeatzailea"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Gehitu"
-addLabel = "Gehitu etiketa bat…"
-categoryIconAria = "Aukeratu ikono bat {{name}}(r)entzat"
-createCategory = "Sortu kategoria"
-delete = "Ezabatu kategoria"
 done = "Eginda"
-hide = "Ezkutatu kategoria"
-newCategory = "Kategoria-izen berria…"
-removeLabel = "Kendu {{name}}"
-rename = "Aldatu izena"
 reset = "Berrezarri lehenetsietara"
-search = "Bilatu etiketak…"
-show = "Erakutsi kategoria"
 subtitle = "Taldekatu zure fitxategiak kategoria nagusietan. Gehitu kategoria bati lehendik dauden edo etiketa berriak, aldatu izena edo sortu zurea. Zure kategorietako batean ez dauden fitxategiak “Besteak” atalean agertuko dira."
 title = "Alboko barrako kategoriak"
 
@@ -3808,6 +3977,7 @@ refresh = "Freskatu zerbitzaritik"
 remove = "Ezabatu"
 removeVersion = "Kendu bertsio hau"
 rename = "Aldatu izena"
+renamed = "Berrizendatua"
 renameFolder = "Aldatu karpetaren izena"
 resizeFolderTree = "Aldatu karpeta-zuhaitzaren tamaina (gezi-teklak, Shift pauso handiagoetarako; klik bikoitza doitzeko)"
 save = "Gorde"
@@ -3910,9 +4080,7 @@ count = "Fitxategiak"
 folder = "Karpeta"
 labels = "Etiketak"
 modified = "Aldatuta"
-name = "Izena"
 size = "Tamaina"
-toolHistoryAtVersion = "Tresna-kate metatua"
 totalSize = "Tamaina osoa"
 type = "Mota"
 versionHistory = "Bertsioen ibilbidea"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Dena gordeta"
+extractCsvError = "Ezin izan da CSV erauzi"
+extractXlsxError = "Ezin izan da XLSX erauzi"
 flattenAfterFilling = "Lautu betetze ondoren"
+requiredAbbreviation = "behar."
+requiredFieldsError = "Bete beharrezko eremu guztiak"
 rescanFields = "Eremuak berriro eskaneatu"
 rescanFormFields = "Inprimaki-eremuak berriro eskaneatu"
 save = "Gorde"
+saveShortcut = "Ctrl+S gordetzeko"
+unsavedChanges = "Gorde gabeko aldaketak"
 
 [formFill.sidebar]
 close = "Itxi alboko barra"
@@ -4309,6 +4484,11 @@ desc = "PDF fitxategi bat automatikoki berrizendatzen du detektatutako goiburuar
 tags = "auto-detektatu,goiburuetan oinarritua,antolatu,berrerrotulatu"
 title = "Automatikoki berrizendatu PDF"
 
+[home.autoRotate]
+desc = "Detektatu orri bakoitzaren orientazioa eta biratu automatikoki tente jartzeko."
+tags = "biratu automatikoki,konpondu orientazioa,buruz behera,alboz,zuzen jarri,orientatu,detektatu orientazioa,zuzendu biraketa,orientatu automatikoki,eskaneatua,OSD"
+title = "Biratu automatikoki"
+
 [home.autoSizeSplitPDF]
 tags = "auto,banatu,tamaina"
 title = "Autom. zatitu tamaina/kop."
@@ -4608,13 +4788,13 @@ hint = "Igo PNG, JPG, SVG edo bestelako irudi-fitxategi bat PDFan kokatzeko. SVG
 label = "Igo irudia"
 placeholder = "Hautatu irudi-fitxategia"
 
-[imageToPdf]
-tags = "conversion,img,jpg,picture,photo,psd,photoshop"
-
 [imageToPDF]
 header = "Irudia PDF bihurtu"
 title = "Irudia PDF bihurtu"
 
+[imageToPdf]
+tags = "conversion,img,jpg,picture,photo,psd,photoshop"
+
 [infoBanner]
 dismiss = "Baztertu"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Gonbidapena jaso duzu!"
 
 [landing]
 addFiles = "Gehitu fitxategiak"
-heroSubtitle = "Jaregin edo gehitu dagoen PDF bat hasteko."
 mobileUpload = "Kargatu mugikorretik"
 openFromComputer = "Ireki ordenagailutik"
 uploadFromComputer = "Igo ordenagailutik"
-workbenchEmptyStateHero = "Jaregin PDF bat edonon"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Saioa hasi"
 magicLinkSent = "Esteka magikoa bidali zaio {{email}} helbidera! Egiaztatu zure e-posta eta egin klik estekan saioa hasteko."
 mfaCode = "Autentifikazio-kodea"
 mfaRequired = "Bi faktoreko kodea behar da"
+noAccount = "Ez duzu konturik?"
 or = "Edo"
 password = "Pasahitza"
 passwordChangedSuccess = "Pasahitza ongi aldatu da! Hasi saioa pasahitz berriarekin."
@@ -4715,26 +4894,10 @@ signInWith = "Hasi saioa honekin"
 title = "Saioa hasi"
 unexpectedError = "Ustekabeko errorea: {{message}}"
 updatePassword = "Pasahitza eguneratu"
-useEmailInstead = "Hasi saioa e-postarekin"
 useMagicLink = "Erabili esteka magikoa"
 username = "Erabiltzaile-izena"
 youAreLoggedIn = "Saioa hasita daukazu!"
 
-[login.slides.edit]
-alt = "PDFak editatu"
-subtitle = "Dozenaka tresnarekin PDFak zentsuratu, sinatu, irakurri eta manipulatzeko, bilatzen ari zarena aurkituko duzu."
-title = "Editatu PDFak nahi duzun informazioa bistaratu edo babesteko"
-
-[login.slides.overview]
-alt = "Stirling PDF ikuspegi orokorra"
-subtitle = "Pribatutasuna lehenesten duen hodeiko suitea, PDFak bihurtu, sinatu, zentsuratu eta kudeatzeko, eta 50+ tresna indartsu gehiagorekin."
-title = "Zure PDF behar guztietarako gune bakarra."
-
-[login.slides.secure]
-alt = "PDFak segurtatu"
-subtitle = "Gehitu pasahitzak, zentsuratu edukia eta kudeatu ziurtagiriak erraz."
-title = "Babestu informazio sentikorra zure PDFetan"
-
 [margin]
 large = "Handia"
 medium = "Ertaina"
@@ -4976,6 +5139,7 @@ pinButton = "<strong>Finkatu</strong> botoia erabil dezakezu fitxategiak aktibo
 results = "Tresnak exekutatzea amaitutakoan, <strong>Berrikusi</strong> urratsak emaitzen aurrebista erakutsiko du panel honetan, eta eragiketa desegiteko edo fitxategia deskargatzeko aukera emango dizu. "
 runButton = "Tresna konfiguratu ondoren, botoi honek hautatutako PDF guztietan tresna exekutatzeko aukera ematen du."
 selectCropTool = "Hauta dezagun <strong>Moztu</strong> tresna tresnetako bat nola erabili erakusteko."
+stepOf = "{{current}}/{{total}} urratsa"
 toolInterface = "Hau da <strong>Moztu</strong> tresnaren interfazea. Ikusten duzunez, ez dago asko oraindik, lantzeko PDF fitxategirik ez dugulako gehitu."
 workbench = "Hau da <strong>Lan-mahaia</strong> - zure PDFak ikusi eta editatzeko eremu nagusia."
 wrapUp = "Dena prest! Aplikazioaren eremu nagusiak eta nola erabili ikasi dituzu. Egin klik <strong>Laguntza</strong> botoian bira hau berriro ikusteko nahi duzunean."
@@ -4988,6 +5152,26 @@ showMeAround = "Erakutsi ingurunea"
 skipForNow = "Utzi oraingoz"
 skipTheTour = "Utzi bisita gidatua"
 
+[onboarding.checklist]
+dismiss = "Baztertu"
+title = "Konfiguratu Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Exekutatu Stirling modu natiboan zure makinan"
+title = "Deskargatu Stirling mahaigainerako"
+
+[onboarding.checklist.inviteTeam]
+description = "Kolaboratu zure taldearekin"
+title = "Gonbidatu taldeko kideak"
+
+[onboarding.checklist.shareAnalytics]
+description = "Lagundu Stirling hobetzen"
+title = "Partekatu erabilera-datu anonimoak"
+
+[onboarding.checklist.takeTour]
+description = "Ikusi Stirling nola dabilen ibilbide azkar batean"
+title = "Egin ibilbidea"
+
 [onboarding.desktopInstall]
 body = "Stirling hobekien funtzionatzen du mahaigaineko aplikazio gisa. Offline erabil dezakezu, dokumentuak azkarrago atzitu, eta editatu tokian bertan zure ordenagailuan."
 selectOs = "Hautatu sistema eragilea"
@@ -4996,7 +5180,21 @@ titleWithOs = "Deskargatu {{osLabel}}-rako"
 
 [onboarding.mfa]
 authenticationCode = "Autentifikazio-kodea"
+description = "Babestu zure kontua autentifikazio-aplikazio bat lotuz. Eskaneatu QR kodea edo sartu konfigurazio-gakoa, eta ondoren berretsi 6 digituko kodea amaitzeko."
+enable = "Gaitu MFA"
+enableError = "Ezin da bi faktoreko autentifikazioa gaitu. Egiaztatu kodea eta saiatu berriro."
+enterCode = "Sartu zure aplikazioko 6 digituko kodea."
+enterCodeError = "Sartu autentifikazio-kodea jarraitzeko."
+logout = "Amaitu saioa"
+openAuthenticator = "Ireki Google Authenticator, Authy edo 1Password."
 qrCodeLoading = "Zure QR kodea sortzen…"
+regenerateQrCode = "Birsortu QR kodea"
+scanQrCode = "Eskaneatu QR kodea edo sartu beheko konfigurazio-gakoa."
+setupError = "Ezin da bi faktoreko konfigurazioa hasi. Saiatu berriro."
+setupKey = "Konfigurazio-gakoa (eskuzko sarrera)"
+stepByStep = "Urratsez urrats"
+success = "MFA gaituta dago. Orain jarrai dezakezu."
+title = "Faktore anitzeko autentifikazioaren konfigurazioa"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Saio-hasiera modua gaitzen duzunean, erabiltzaileak kudeatu, ezarpenak konfiguratu eta zerbitzariaren osasuna monitorizatu ahal izango dituzu. Zure zerbitzariko lehen <strong>{{freeTierLimit}}</strong> pertsonek doan erabil dezakete Stirling."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin ikuspegi orokorra"
 userBody = "Gonbidatu taldekideak, esleitu rolak eta mantendu dokumentuak antolatuta lan-espazio seguruan. Gaitu saio-hasiera modua bakarkako erabileratik harago hazteko prest zaudenean."
 userTitle = "Planaren ikuspegi orokorra"
 
+[onboarding.processorIntro]
+body = "Stirling-ek orain <strong>Politikak</strong> exekutatzen ditu — dokumentu bakoitza iristen denean sailkatu, babestu eta prozesatzen duten arau automatizatuak. Konfiguratu eta monitorizatu exekuzioak <strong>Processor</strong>-en."
+cta = "Ikusi Processor"
+title = "Ikusi Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Aurrez ordaindutako urtea"
+
+[payg.prepaid.banner]
+exhausted = "Zure aurrez ordaindutako edukiera agortu da; erabileraren araberako fakturazioa berriro hasi da. Kargatu gehiago deskontua mantentzeko."
+expiring_one = "Zure aurrez ordaindutako urtea {{count}} egun barru amaituko da. Erabili gabeko edukiera iraungiko da — kargatu gehiago urte berri bat hasteko."
+expiring_other = "Zure aurrez ordaindutako urtea {{count}} egun barru amaituko da. Erabili gabeko edukiera iraungiko da — kargatu gehiago urte berri bat hasteko."
+low = "Zure aurrez ordaindutako edukieraren %{{pct}} geratzen zaizu. Kargatu gehiago edonoiz prozesamendua eten gabe mantentzeko."
+
+[payg.prepaid.card]
+subtitle = "Erabileraren araberako fakturazioaren aurretik eta zure gastu-mugatik kanpo erabilia."
+title = "Aurrez ordaindutako edukiera"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} aurrez ordaindutako kreditutik"
+expires = "Iraungitze-data: {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Agortuta"
+healthy = "Asko geratzen da"
+low = "Gutxi geratzen da"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Itsatsi lizentzia-gakoa zure postatik"
 success = "Lizentzia aktibatuta!"
 successMessage = "Zure lizentzia ongi aktibatu da. Orain leiho hau itxi dezakezu."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "betearazita"
-enforcing = "Betearazten..."
-failed = "Betearazteak huts egin du"
 outputsUnavailable = "Politikaren emaitzak ez daude jada deskargatzeko eskuragarri."
 partialOutputsUnavailable = "Politikaren emaitza batzuk ez daude jada deskargatzeko eskuragarri."
-retrying = "Lanpetuta, berriz saiatzen..."
 runNotFound = "Betearazte-exekuzioa ezin da jada aurkitu."
-step = "urratsa {{current}}/{{total}}"
 timedOut = "Betearazteak denbora-muga gainditu du exekuzioa amaitu aurretik."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Itxi"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} aplikatzen"
 applyingProgress = "{{names}} aplikatzen ({{done}}/{{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} fitxategitatik {{failures}} ezin izan dira prozesatu et
 failureTitle = "Betearazpen osorik gabe esportatuta"
 printPolicyAppliedBody = "PDF hau politika bat betetzeko eguneratu da. Aldaketak berrikusi eta, ondoren, inprimatu berriro."
 printPolicyAppliedTitle = "Inprimatu aurretik politika aplikatuta"
-queued = "+{{count}} ilaran"
 successTitle = "{{names}} aplikatuta"
 summaryMore = "{{first}}, {{second}} eta {{more}} gehiago"
 summaryTwo = "{{first}} eta {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Bihurtu aurretik betearazten"
-default = "Betearazten"
-export = "Esportatu aurretik betearazten"
-input = "Inportatzean betearazten"
-print = "Inprimatu aurretik betearazten"
-
-[policies.field]
-accessLog = "Sarbide-erregistroa"
-archiveAfter = "Artxibatu honen ondoren"
-auditTrail = "Auditoria-arrastoa"
-belowThreshold = "Atalasearen azpitik"
-destination = "Helmuga"
-frameworks = "Esparruak"
-immutableHold = "Eutsi aldaezina"
-keepFor = "Mantendu honetarako"
-minConfidence = "Gutxieneko konfiantza"
-notify = "Jakinarazi bideratzean"
-onViolation = "Betetzen ez denean"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Gehitu"
-addPlaceholder = "Gehitu etiketa bat…"
-customNote = "Zure talderako pertsonalizatua."
-defaultNote = "Lehenetsi integratua erabiltzen, zure taldearekin partekatua."
-duplicate = "\"{{name}}\" lehendik badago."
-edit = "Editatu etiketak"
-empty = "Oraindik ez dago etiketarik."
-export = "Esportatu JSON"
-iconAria = "Aukeratu ikono bat {{name}}(r)entzat"
-import = "Inportatu JSON"
-importError = "Ezin izan da fitxategi hori inportatu."
-managedNote = "Taldeko etiketak zure talde-buruak kudeatzen ditu."
-modalSubtitle = "Zure talde osoarekin partekatua. Sailkatzaileak dokumentu bakoitzari dagozkion etiketak aukeratzen ditu."
-modalTitle = "Sailkapen-etiketak"
-pickIcon = "Erabili {{label}} ikonoa"
-removeAria = "Kendu {{name}}"
-resetToDefault = "Berrezarri lehenetsira"
-saveForTeam = "Gorde taldearentzat"
-saving = "Gordetzen…"
-sectionLabel = "Sailkapen-etiketak"
-startFromScratch = "Hasi hutsetik"
-teamCount = "taldeko etiketak"
-tooLong = "Etiketek gehienez {{max}} karaktere izan ditzakete."
-ungrouped = "Taldekatu gabe"
-view = "Ikusi etiketak"
+categoryCount = "kategoriak"
+hideCategory = "Ezkutatu kategoria"
+labelCount = "etiketak"
+sharedNote = "Etiketa hauek barnean datoz eta zure talde osoan partekatzen dira."
+showCategory = "Erakutsi kategoria"
 
 [policies.pii]
 account = "Kontu-zenbakiak (etiketatuak)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "AEBetako bideratze-zenbakiak (ABA)"
 ssn = "Gizarte Segurantzako zenbakiak"
 
-[policies.settings]
-noneExport = "Une honetan ez da politikarik exekutatzen esportatzean."
-noneUpload = "Une honetan ez da politikarik exekutatzen kargatzean."
-onExport = "Esportatzean"
-onUpload = "Kargatzean"
-reorderHandle = "Arrastatu berrordenatzeko"
-runOrderDesc = "Politika bat baino gehiago abiarazle berean exekutatzen denean, ordena honetan exekutatzen dira — bakoitza aurreko politikaren irteeran. Arrastatu berrordenatzeko."
-title = "Politika-ezarpenak"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Politika-aukerak"
-policySettings = "Politika-ezarpenak"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Saiatu berriro huts egindako politikak ({{count}})"
-rowProgress = "{{completed}} / {{total}} fitxategi prozesatuta"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Zer da politika bat?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automatikoki aurkitzen eta beltzez estaltzen ditu datu sentikorrak — adibidez, Gizarte Segurantzako eta txartel-zenbakiak —, dokumentuan irakurri ez daitezen."
-sanitize = "Fitxategitik ezkutuko JavaScript kentzen du, norbaitek irekitzean ezer ez dadin automatikoki exekutatu."
-watermark = "Orri bakoitzean marka ikusgai bat jartzen du (adib., \"Confidential\")."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Itxi"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} betearazten..."
 badgeRan = "{{name}} politika fitxategi honetan exekutatu da"
+badgeRunning = "{{name}} exekutatzen..."
 blockingAction = "{{action}} blokeatuta politika betearazten den bitartean; itxaron, mesedez..."
 dismiss = "Baztertu gainjartzea"
 enforcingTitle = "Politika betearazten..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Ikusi fitxategia (politika oraindik betearazten ari da)"
 [policyOption]
 autoRedactPhi = "Automatikoki ezkutatu PHI"
 blockExport = "Blokeatu esportazioa"
+ccpa = "CCPA"
 contracts = "Kontratuak"
 documents = "Dokumentuak"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor plana"
 subscribed = "Processor plana"
 unlinked = "Lotu gabe"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Hasieratu dokumentutik"
-sectionsAriaLabel = "Agente-eraikitzailearen atalak"
-selectorAriaLabel = "Agenteak"
-subtitle = "Diseinatu, probatu eta argitaratu dokumentuak sailkatu, haietatik erauzi eta bideratzen dituzten AI agenteak. Definitu agertokiak, mugatu tresnen sarbidea, exekutatu urrezko multzo bat eta argitaratu bertsio bat."
-title = "Agente-eraikitzailea"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Utzi"
-dropzoneText = "Aukeratu lagin-dokumentu bat (PDF edo irudia)"
-lead = "Jaregin lagin-dokumentu bat eta findu dezakezun agertokiak eta erauzketa-eskema bat proposatuko dizkizugu. Ez da ezer argitaratuko zuk berrikusi arte."
-submit = "Hasieratu agentea"
-subtitle = "Sortu agente berri baten oinarria fitxategi adierazgarri batetik"
-title = "Hasieratu dokumentu batetik"
-
-[portal.agentBuilder.empty]
-description = "Hasieratu agente bat lagin-dokumentu batetik bere agertokiak eta erauzketa-eskema sortzeko; gero, findu eta argitaratu."
-title = "Oraindik ez dago agenterik"
-
-[portal.agentBuilder.evals]
-casesPassing = "Gainditzen duten kasuak"
-columnCase = "Ebaluazio-kasua"
-columnLatency = "Latentzia"
-columnResult = "Emaitza"
-fail = "huts egin"
-goldenSetPassRate = "Urrezko multzoaren gainditze-tasa"
-latencyMs = "{{ms}} ms"
-notRun = "exekutatu gabe"
-pass = "gainditu"
-passRate = "Gainditze-tasa"
-runEvals = "Exekutatu ebaluazioak"
-
-[portal.agentBuilder.evals.empty]
-description = "Ebaluazioek zure agertokiak urrezko multzo errepikagarri bihurtzen dituzte. Eguneratu plana denboran zehar gainditze-tasa jasotzeko eta argitalpenak horren arabera baldintzatzeko."
-title = "Oraindik ez dago urrezko multzorik"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "urrezko multzoetan zehar"
-activeAgents = "Agente aktiboak"
-avgPassRate = "Batez besteko ebaluazioen gainditze-tasa"
-fleetWide = "flota osoan"
-latestPublished = "Azken argitaratua"
-scenarios = "Agertokiak"
-testCases = "proba-kasuak"
-totalDescription_one = "{{count}} guztira"
-totalDescription_other = "{{count}} guztira"
-
-[portal.agentBuilder.scenarios]
-add = "Gehitu"
-addScenario = "Gehitu agertokia"
-enable = "Gaitu"
-expectationLabel = "Espero den portaera"
-expectationPlaceholder = "Agenteak egin beharko lukeena"
-inEval = "ebaluazioan"
-mute = "Isilarazi"
-muted = "isilarazita"
-nameLabel = "Izena"
-namePlaceholder = "adib. Betetze-eskalatzea"
-
-[portal.agentBuilder.tabs]
-evals = "Ebaluazioak"
-scenarios = "Agertokiak"
-tools = "Tresnak"
-versions = "Bertsioak"
-
-[portal.agentBuilder.tools]
-broadAccess = "Sarbide zabala"
-deniedHint = "Hautatutako tresnak blokeatuta daude. Gainerako guztia deigarria izaten jarraitzen du."
-deniedTools = "Ukatutako tresnak"
-governanceGate = "Tresnen gobernantza Enterprise planean dago erabilgarri."
-restricted = "Murriztua"
-restrictedAccess = "Tresnen sarbide murriztua"
-restrictedDescription = "Baimendu tresna guztiak, behean ukatzen dituzunak izan ezik."
-
-[portal.agentBuilder.versions]
-current = "uneko"
-historyGate = "Bertsio-historia osoa eta atzera egitea Enterprise planean daude erabilgarri."
-publish = "Argitaratu"
-rollBack = "Itzuli atzera"
-
 [portal.assistant]
 close = "Itxi laguntzailea"
 error = "Ezin izan da laguntzailearekin konektatu."
@@ -6365,9 +6346,21 @@ typing = "Idazten"
 loading = "Kargatzen"
 redirectingToEditor = "Editorera birbideratzen..."
 
+[portal.billing.activation]
+maybeLater = "Agian geroago"
+title = "Aktibatu Processor"
+
+[portal.billing.activation.payg]
+sub = "Ezarri hileko muga. Ordaindu exekutatzen duzuna."
+title = "Erabili ahala ordaindu"
+
+[portal.billing.activation.prepay]
+badge = "2 hilabete doan"
+sub = "Faktura bakarra, txartela edo banku-transferentzia."
+title = "Ordaindu urte bat aurrez"
+
 [portal.billing.checkout]
 noClientSecret = "Edge funtzioak ez du client_secret itzuli."
-subtitle = "Gehitu txartel bat doako Editor planaren baimenetik harago jarraitzeko. Stripe-k gainerakoa kudeatzen du."
 title = "Aktibatu Processor plana"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Ordainketa ondo egin da, baina aktibazioa ohikoa baino pixka bat gehiago
 close = "Itxi"
 title = "Ia prest"
 
+[portal.billing.checkout.cap]
+amountAria = "Hileko gastu-muga"
+back = "Atzera"
+continue = "Jarraitu ordainketara"
+error = "Ezin izan da zure gastu-muga ezarri"
+finePrint = "Fakturak hilero igortzen dira. Ezeztatu edonoiz."
+noLimit = "Mugarik ez"
+note = "Ez zaizu inoiz zure mugatik gora fakturatuko. Prozesamendua pausatu besterik ez da egingo."
+perMonth = "/ hil"
+title = "Ezarri zure gastu-muga"
+
+[portal.billing.checkout.card]
+fields = "Txartel-zenbakia · HH / UU · CVC · ZIP"
+label = "Txartelaren xehetasunak"
+note = "Txartelaren xehetasunak Stripe-k biltzen ditu. Stirling-ek ez du inoiz PAN edo CVC gordetzen."
+
 [portal.billing.checkout.error]
 title = "Ezin izan da ordainketa-prozesua hasi"
 
@@ -6383,10 +6392,9 @@ body = "Zure ordainketa gauzatu da. Neurtutako prozesamendua aktibatzen ari gara
 hint = "Mantendu leiho hau irekita, mesedez."
 title = "Zure Processor plana aktibatzen..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "portaleko env-en aplikazio barruko ordainketa gaitzeko."
-bodyBefore = "Ezarri"
-title = "Stripe ez dago konfiguratuta"
+[portal.billing.checkout.pay]
+limit = "Hileko gastu-muga {{amount}}/hil. Prozesamendua mugan pausatuko da."
+limitNoCap = "Gastu-mugarik ez. Prozesamendua ez da pausatuko. Fakturak hilero igortzen dira."
 
 [portal.billing.enterpriseUpsell]
 cta = "Sortu zure Enterprise aurrekontua"
@@ -6409,10 +6417,12 @@ currentPlan = "Uneko plana"
 freeForever = "Doan betiko"
 noTeamResolved = "Zure zorroan oraindik ez da talderik ebatzi — freskatu eta saiatu berriro."
 ownerOnly = "Taldearen jabeak bakarrik aktiba dezake Processor plana."
+payInvoice = "Ordaindu faktura osatzeko"
 planName = "Editor"
 ssoIncluded = "SSO barne"
 switchOnProcessor = "Aktibatu Processor →"
 unlimitedUsers = "Erabiltzaile mugagabeak"
+viewQuote = "Ikusi aurrekontua"
 
 [portal.billing.invoices]
 columnAmount = "Zenbatekoa"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "API eskaera zuzenak"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizazioak eta pipeline-ak"
 segmentAutomationLabel = "Automatizazioa"
+sizeMultiplier = "{{formatted}} PDFek tamaina-biderkatzailea erabili dute"
+summary = "{{unique}} bakar · {{units}} neurgailu-unitate · {{avg}} batez beste PDF bakoitzeko"
+summaryNoRate = "{{unique}} bakar · {{units}} neurgailu-unitate"
 unit = "neurtutako PDFak"
+unitsPending_one = "{{units}} neurgailu-unitate sinkronizatu gabe dago lotutako instantzietatik"
+unitsPending_other = "{{units}} neurgailu-unitate sinkronizatu gabe daude lotutako instantzietatik"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} aurrez ordaindutako kreditutik"
+expires = "Iraungitze-data: {{date}}"
+eyebrow = "Aurrez ordaindutako edukiera"
+note = "Erabileraren araberako fakturazioaren aurretik eta zure gastu-mugatik kanpo erabilia."
+topUp = "Kargatu gehiago"
+
+[portal.billing.prepaid.buy]
+back = "Atzera"
+calcTitle = "Kalkulatu zure urteko ordainketa"
+cancel = "Utzi"
+cancelPurchase = "Ezeztatu erosketa"
+close = "Itxi"
+continueToPayment = "Jarraitu ordainketara"
+finalise = "Amaitu"
+invoiceErrorTitle = "Ezin izan da faktura sortu"
+loadingTitle = "Zure aurrekontua kargatzen"
+payTitle = "Ordaindu zure urtea"
+step = "{{current}}/{{total}} urratsa"
+
+[portal.billing.prepaid.calc]
+change = "Aldatu"
+deployRow = "Inplementazioa"
+done = "Eginda"
+enterpriseHint = "Hau enpresa-mailako eskala da. Bolumen honetan, enpresa-tarifek autoservizioko edozein deskontu gainditzen dute. Tarifa-blokeoa, baldintzak eta aurrekontua minutu gutxitan."
+governanceRow = "Gobernantza"
+governanceValue = "{{label}} · {{count}} politika"
+handlesLabel = "Zure Processor"
+handlesValue = "{{volume}} kreditu / hil kudeatzen ditu"
+pipelinesLabel = "Pipelineak"
+policiesMeta = "{{count}} politika"
+poolCaption = "Urterako {{credits}} kredituko multzo bakarra. Hilabete astunek arinetatik mailegatzen dute."
+priceLabel = "Zure urtea · 12 hilabete 10en prezioan"
+rateUnknown = "Prezio zehatza checkout-ean erakutsiko dugu."
+savings = "{{amount}} aurrezten duzu · 2 hilabete doan."
+sizingRow = "Tamainaketa"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Erabiltzaileak guztira"
+
+[portal.billing.prepaid.consent]
+label = "Ulertzen dut nire aurrez ordaindutako edukiera agortzen denean edo 12 hilabeteren ondoren iraungitzen denean, prozesamenduak automatikoki jarraituko duela erabileraren araberako tarifa estandar neurtuan (nire gastu-mugaraino), ezeztatzen ez badut, eta edonoiz ezezta dezakedala fakturazio-ataritik."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling-ek kudeatua. Martxan minutu gutxitan."
+cloudValue = "Stirling Cloud · Kudeatua"
+selfhost = "Self-hosted"
+selfhostDesc = "Azpiegitura pribatuan exekutatzen da. Tarifa bera."
+selfhostValue = "Self-hosted · Azpiegitura pribatua"
+
+[portal.billing.prepaid.offer]
+cta = "Berrikusi eskaintza"
+subtitle = "Ordaindu aurrez PDF prozesamenduko urte bat eta lortu bi hilabete doan, erabileraren araberako fakturazioaren aurretik eta zure gastu-mugatik kanpo erabilita."
+title = "Lortu 12 hilabete 10en prezioan"
+
+[portal.billing.prepaid.pay]
+accountName = "Kontuaren titularraren izena"
+accountNamePlaceholder = "adib. Jane Smith"
+companyName = "Enpresaren izena (aukerakoa)"
+companyNamePlaceholder = "adib. Acme Inc."
+downloadInvoice = "Deskargatu faktura"
+payOnline = "Ordaindu online"
+poNumber = "PO zenbakia (aukerakoa)"
+poNumberPlaceholder = "adib. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Aurreratua"
+advancedDesc = "Pipelineek zure prozesamenduaren zatirik handiena gidatzen dute."
+none = "Bat ere ez"
+noneDesc = "Oraindik ez duzu pipelinerik exekutatzen. Aktibatu edonoiz."
+standard = "Estandarra"
+standardDesc = "Pipeline gutxi batzuek iristen diren PDFak berriro prozesatzen dituzte."
+
+[portal.billing.prepaid.posture]
+essentials = "Oinarrizkoak"
+essentialsDesc = "Sailkapena, lehenetsia, gehi Partekatzea"
+governed = "Gobernatua"
+governedDesc = "Segurtasuna eta bideratzea gehitzen ditu"
+regulated = "Arautua"
+regulatedDesc = "Kategoria guztiak, barne Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Deskargatu aurrekontua (PDF)"
+downloading = "Prestatzen…"
+share = "partekatu onarpenerako"
+
+[portal.billing.prepaid.size]
+compact = "Trinkoa"
+compactDesc = "25 MB baino gutxiagoko fitxategiak, datu-kargurik gabe"
+heavy = "Astuna"
+heavyDesc = "Eskaneatuak edo irudi askokoak, normalean 50 MB+"
+standard = "Estandarra"
+standardDesc = "Gehienbat txikiak, eskaneatu batzuk 25 MBtik gorakoak"
+
+[portal.billing.prepaid.state]
+exhausted = "Agortuta"
+healthy = "Asko geratzen da"
+low = "Gutxi geratzen da"
 
 [portal.billing.spendLimit]
 adjustLimit = "Doitu muga"
@@ -6494,6 +6608,8 @@ label = "Gainditzea aurreikusten da."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Hilabete honetako gastua"
+freeRemaining_one = "Doako {{formatted}} PDF geratzen da"
+freeRemaining_other = "Doako {{formatted}} PDF geratzen dira"
 processed_one = "{{formattedCount}} PDF prozesatuta."
 processed_other = "{{formattedCount}} PDF prozesatuta."
 processedWithRate_one = "{{formattedCount}} PDF prozesatuta, bakoitza {{rate}}."
@@ -6534,6 +6650,350 @@ signature = "sinadura"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Konexio berria"
+createTitleFor = "Konektatu {{name}}"
+delete = "Ezabatu"
+edit = "Editatu"
+editTitle = "Editatu konexioa"
+unsupportedType = "Konexio mota hau ezin da hemen editatu."
+
+[portal.connections.categories.advanced]
+description = "Oraindik onartzen ez dugun zerbitzu baterako."
+label = "Aurreratua"
+
+[portal.connections.categories.audit]
+description = "Erregistratu dokumentu bati zer gertatu zaion, zure auditoreek dagoeneko begiratzen duten tokian."
+label = "Auditoria eta betetze-erregistroa"
+
+[portal.connections.categories.notify]
+description = "Jakinarazi beste sistema bati zerbait gertatu dela."
+label = "Jakinarazpena eta lan-fluxua"
+
+[portal.connections.categories.security]
+description = "Eskaneatu edo etiketatu dokumentu bat aurrera mugitu aurretik."
+label = "Segurtasuna eta sailkapena"
+
+[portal.connections.categories.signing]
+description = "Bidali dokumentu bat sinatzeko edo notario bidez egiaztatzeko."
+label = "Sinadura elektronikoa eta notarizazioa"
+
+[portal.connections.categories.storage]
+description = "Prozesatutako dokumentuak non amaitzen diren - bucket bat, drive bat, ticket bat edo orri bat."
+label = "Fitxategia eta erantsi"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling-ek hau zifratuta gordetzen du eta ez du berriro erakusten."
+label = "Sarbide-tokena"
+
+[portal.connections.commonFields.apiKey]
+label = "API gakoa"
+
+[portal.connections.commonFields.apiToken]
+label = "API tokena"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Konexio hau erabiltzen duten urratsek URL honen azpiko bideak soilik dei ditzakete, inoiz ez beste host bat."
+label = "Zerbitzariaren URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Pasahitza"
+
+[portal.connections.commonFields.port]
+label = "Ataka"
+
+[portal.connections.commonFields.username]
+label = "Erabiltzaile-izena"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Itsatsi zerbitzuak eman dizun URL. Haren azpiko bideak soilik dei daitezke."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Konexioaren izena"
+namePlaceholder = "adib. Produkzioa"
+
+[portal.connections.picker]
+cancel = "Utzi"
+createNew = "Konexio berria..."
+placeholder = "Hautatu konexio bat"
+save = "Gorde konexioa"
+
+[portal.connections.picker2]
+back = "Aldatu integrazioa"
+heading = "Zer konektatu nahi duzu?"
+noResultsBody = "Oraindik ez dugu onartzen - esan iezaguzu eta gehitzea aztertuko dugu."
+noResultsTitle = "Ez dago bat datorren ezer: \"{{query}}\""
+searchPlaceholder = "Bilatu integrazioak - saiatu \"sign\", \"ocr\" edo produktu-izen batekin"
+
+[portal.connections.types.api]
+description = "Deitu edozein HTTP API politika batetik. Zuk aukeratzen dituzu URL, autentifikazioa eta payload-a."
+label = "API pertsonalizatua"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentifikazioa"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Erabiltzaile-izena eta pasahitza"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer tokena"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Tokena goiburu pertsonalizatu batean"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Bat ere ez"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Hasi saioa token bat lortzeko"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Konexio hau erabiltzen duten urratsek URL honen azpiko bideak soilik dei ditzakete, inoiz ez beste host bat."
+label = "Oinarrizko URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Goiburuaren izena"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Saioa hasteko bidea"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Pasahitza"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "APIak deskarga-esteka batekin erantzuten badu, host hauek bakarrik eskuratu ahal izango dira. Bereizi komaz. Utzi hutsik oinarrizko URLaren host propioa bakarrik baimentzeko."
+label = "Baimendutako emaitza-hostak"
+
+[portal.connections.types.api.fields.token]
+label = "Tokena"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Bidali tokena goiburu honekin"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Saio-hasierako deiak tokena itzultzen duen erantzun-goiburua, adib. X-Auth-Token."
+label = "Token-erantzunaren goiburua"
+
+[portal.connections.types.api.fields.username]
+label = "Erabiltzaile-izena"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Eskaneatu dokumentuak malware bila zuk exekutatzen duzun zerbitzari batean - ezer ez da zure saretik ateratzen."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Dokumentuen birus- eta eduki-eskaneatzea politika batean."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokeatu makroak, exekutagarriak, scriptak edo txertatutako objektuak dituzten dokumentuak - ez bakarrik malware ezaguna."
+label = "Cloudmersive eskaneatze aurreratua"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Erantsi prozesatutako dokumentuak Confluence orri bati."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Bidali dokumentuak ConsignO Cloud-era (Notarius) sinadura elektronikorako eta notarizaziorako."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Zure ConsignO Cloud ingurunea, /api/v1 barne."
+label = "Zerbitzariaren URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API gakoa"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API sekretua"
+
+[portal.connections.types.consigno.fields.password]
+label = "Pasahitza"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Zure erakundeak maizterrak erabiltzen baditu bakarrik behar da."
+label = "Maizterra"
+
+[portal.connections.types.consigno.fields.username]
+label = "Erabiltzaile-izena"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Bidali mezu bat Discord-era politika batek dokumentu bat prozesatzen duenean."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexatu auditoria-gertaera bat Elasticsearch-en politika batek dokumentu bat kudeatzen duen bakoitzean."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Kontsultatu FTP edo FTPS zerbitzari bat dokumentu berrien bila."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Konexio modua"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktiboa"
+passive = "Pasiboa (gomendatua)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP arruntak kredentzialak eta fitxategiak zifratu gabe bidaltzen ditu; aukeratu FTPS zerbitzariak onartzen badu."
+label = "Zifratzea"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (esplizitua / AUTH TLS)"
+implicit = "FTPS (inplizitua)"
+none = "Bat ere ez (FTP arrunta)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Bidali mezu bat Google Chat espazio batera politika bat exekutatzen denean."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Erantsi prozesatutako dokumentuak Jira issue bati."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Bidali dokumentu bat edo jakinarazpen bat email bidez politika bat exekutatzen denean."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Gorde prozesatutako dokumentuak Nextcloud-en."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Aplikazioaren pasahitza"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detektatu datu pertsonalak dokumentuaren testuan zuk exekutatzen duzun Presidio zerbitzari bat erabiliz."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Irakurri eta aplikatu Microsoft Purview sentsibilitate-etiketak PDFetan."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Aukerakoa. Etiketak izenaren arabera hautatzeko bakarrik behar da; etiketatzeak hori gabe funtzionatzen du."
+label = "Aplikazioaren (bezeroaren) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Bezero-sekretua"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Etiketa guztietan SiteId gisa zigilatzen da, Purview-rekin bateragarriak diren tresnek zein erakundek aplikatu duen jakin dezaten."
+label = "Direktorioaren (maizterraren) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Iturriek irakurri eta pipeline-irteerek idatzi dezaketen S3 bucket bat."
+label = "S3 biltegia"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Sarbide-gakoaren ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Utzi hutsik AWS-erako. Ezarri hau MinIO edo S3-rekin bateragarria den beste biltegi baterako."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Eskualdea"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Sarbide-gako sekretua"
+
+[portal.connections.types.sendgrid]
+description = "Bidali dokumentu bat edo jakinarazpen bat email bidez politika bat exekutatzen denean."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Kontsultatu SFTP (SSH) zerbitzari bat dokumentu berrien bila."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Aukerakoa. Zerbitzariaren SHA-256 host-gakoaren fingerprint-a (`ssh-keyscan host | ssh-keygen -lf -` bidez). Ezarrita dagoenean, gako hau aurkezten duen zerbitzaria bakarrik onartzen da; hutsik dagoenean, lehen konexioan ikusitako gakoa finkatzen da eta geroagoko aldaketak ukatzen dira."
+label = "Host-gakoaren fingerprint-a"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Gakoaren pasaesaldia"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Utzi hutsik pasahitzaren ordez gako pribatu batekin autentifikatzen bazara."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Aukerakoa. Itsatsi OpenSSH gako pribatu bat pasahitzaren ordez gako batekin autentifikatzeko."
+label = "Gako pribatua"
+
+[portal.connections.types.slack]
+description = "Bidali mezu bat Slack-era politika batek dokumentu bat prozesatzen duenean."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Monitorizatu SMB / CIFS sare-partekatze bat (Windows edo Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Sare-partekatzea"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Aukerakoa. Windows domeinua edo lan-taldea, zure zerbitzariak bat erabiltzen badu."
+label = "Domeinua"
+
+[portal.connections.types.smb.fields.share]
+label = "Partekatzea"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Bidali auditoria-gertaera bat Splunk-era politika batek dokumentu bat kudeatzen duen bakoitzean."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Bidali auditoria-gertaera bat Sumo Logic HTTP collector batera."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Bidali mezu bat Teams kanal batera politika bat exekutatzen denean."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Bidali dokumentu bakoitza, edo xehetasunak bakarrik, zuk aukeratutako URL batera."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Abiarazi Zap edo Make eszenario bat politika batetik."
+label = "Zapier eta Make"
+
+[portal.docs]
+browse = "Arakatu dokumentazioa"
+viewSource = "Ikusi iturburua GitHub-en"
+
 [portal.docs.authentication]
 codeCaption = "eskaera bakoitza"
 eyebrow = "HASTEN"
@@ -6619,11 +7079,19 @@ title = "SDK ofizialak"
 beta = "Beta"
 deprecated = "Zaharkitua"
 
+[portal.docs.search]
+empty = "Ez dago bat datorren dokumentaziorik"
+placeholder = "Bilatu dokumentazioan"
+results = "{{count}} emaitza"
+
 [portal.docs.skills]
 eyebrow = "TREBETASUNAK"
 lead = "Agenteak tresna bakar gisa deitzen dituen gaitasun integratu eta izendatuak. Trebetasun bakoitza ebaluazioak lotuta dituen eragiketa-kate determinista bat da."
 title = "Agente-trebetasunak"
 
+[portal.docs.toc]
+title = "Orri honetan"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API ERREFERENTZIA"
@@ -6697,6 +7165,8 @@ type = "Mota"
 user = "Erabiltzailea"
 
 [portal.documents.queue.empty]
+connectSource = "Konektatu iturri bat"
+createPipeline = "Sortu pipeline bat"
 description = "Iturburuek dokumentuak zure pipelineetara bidali ahala, hemen agertuko dira berrikusteko."
 title = "Ez dago dokumenturik ilaran"
 
@@ -6806,13 +7276,71 @@ description = "Ikuspegi honek ustekabeko errore bat izan du. Saiatu berriro, edo
 retry = "Saiatu berriro"
 title = "Zerbait gaizki atera da orri honetan"
 
+[portal.home.download]
+back = "Atzera"
+body = "Deskargatu mahaigaineko aplikazioa edo egin zerbitzaria self-hosted."
+done = "Eginda"
+guide = "Ireki {{name}} gida"
+openInBrowser = "Ireki arakatzailean ordez"
+sectionDesktop = "Mahaigaineko aplikazioa"
+sectionSelfHosted = "Self-hosted"
+title = "Instalatu Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Exekutatu irudi ofiziala zure zerbitzarian."
+note = "Irekitzen da :8080 atakan. Saio-hasiera lehenetsia: admin / stirling."
+tagline = "Exekutatu zerbitzaria edukiontzi batean"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instalatu Helm chart ofiziala."
+note = "Gehitu PVC bat /configs-erako ezarpenak mantentzeko."
+tagline = "Zabaldu kluster batean Helm erabiliz"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Zure banaketarako build natiboak."
+guideBtn = "Ikusi Linux instalazio-aukerak"
+note = "AppImage, .deb eta .rpm build-ak eskuragarri daude ohiko distroetarako."
+tagline = "Zure distrorako mahaigaineko aplikazio natiboa"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Edo Homebrew bidez"
+detailBody = "Exekutatu instalatzailea, edo erabili Homebrew."
+downloadBtn = "Deskargatu macOS-erako"
+tagline = "Apple silicon eta Intel-erako aplikazio natiboa"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Exekutatu .jar bare metal zerbitzari batean."
+downloadBtn = "Deskargatu .jar"
+note = "Java 21+ behar du. :8080-n irekitzen da; saio-hasiera lehenetsia admin / stirling."
+runLabel = "Ondoren exekutatu"
+tagline = "Exekutatu .jar bare metal zerbitzari batean"
+title = "Eskuzko zerbitzari-konfigurazioa"
+
+[portal.home.download.windows]
+altLabel = "Edo winget bidez"
+detailBody = "Exekutatu instalatzailea, edo erabili pakete-kudeatzaile bat."
+downloadBtn = "Deskargatu instalatzailea"
+tagline = "Microsoft Windows-erako aplikazio natiboa"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktibo"
-invite = "Gonbidatu taldekideak"
+activeOfDeployed = "{{active}} / {{total}} aktibo hilabete honetan"
 name = "Stirling PDF Editor"
 open = "Ireki arakatzailean"
 updated = "eguneratua {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Amaitu zabalkundea"
+options = "Ikusi zabalkunde-aukerak"
+start = "Zabaldu editorea"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Norberak ostatatua · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Arratsalde on"
 evening = "Gabon"
 morning = "Egun on"
 
-[portal.home.onboarding]
-dismiss = "Baztertu konfigurazioa"
-notStarted = "Hasi gabe"
-progress = "{{done}} / {{total}} eginda"
-title = "Amaitu konfigurazioa"
-
-[portal.home.onboarding.enterprise]
-body = "Erakunde osoko SSO + SCIM + RBAC, konprometitutako bolumen-prezioak eta sarez isolatutako hedapena."
-cta = "Hasi proba"
-ctaQuote = "Eskatu aurrekontua"
-lead = "250+ langilerentzat."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Hedatu mahaigaineko aplikazioa, betiko doan."
-title = "Deskargatu PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktibo · {{recommended}} gomendatu"
-chip = "{{active}} aktibo"
-title = "Aktibatu gidalerroak"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} konektatuta · PDF bakoitza gobernatuta iristen den tokian"
-chip = "{{connected}} konektatuta"
-title = "Konektatu zure iturburuak"
-
-[portal.home.quickActions]
-subtitle = "Gaurko zeregin nagusiak"
-title = "Ekintza azkarrak"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3 urratseko konposatzailea idatzitako eragiketa-liburutegiaren gainean"
-title = "Eraiki pipeline bat"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenteak, webhooks, zaindutako karpetak"
-title = "Konektatu iturburu bat"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Esparru mugatuko gakoa, tasa-mugekin eta IP baimen-zerrendarekin"
-title = "Jaulki API gako bat"
-
 [portal.infrastructure]
 manageEditorDeployment = "Kudeatu Editorearen hedapena"
 sectionsAriaLabel = "Azpiegitura-atalak"
@@ -6878,13 +7363,9 @@ heading = "API gakoak"
 subheading = "Esparru mugatuko kredentzialak, gako bakoitzeko tasa-mugekin, baimenekin eta IP baimen-zerrendekin."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Baimendutako IPak"
-anyIp = "Edozein IP (baimen-zerrendarik gabe)"
 created = "Sortuta"
 lastUsed = "Azken erabilera"
-permissions = "Baimenak"
-rateLimit = "Tasa-muga"
-rateLimitValue = "{{value}} eskaera/min"
+revoke = "Ezeztatu gakoa"
 usageMonth = "Hilabete honetako erabilera"
 usageToday = "Gaurko erabilera"
 
@@ -6892,6 +7373,20 @@ usageToday = "Gaurko erabilera"
 description = "Sortu esparru mugatuko gako bat Stirling API deitzen hasteko."
 title = "Oraindik ez dago API gakorik"
 
+[portal.infrastructure.apiKeys.error]
+load = "Ezin izan dira zure API gakoak kargatu. Saiatu berriro."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Ezeztatu \"{{name}}\"? Gako hau oraindik erabiltzen duen edozein integrazio berehala hasiko da 401 erroreak jasotzen. Ezin da desegin."
+cancel = "Utzi"
+confirm = "Ezeztatu gakoa"
+title = "Ezeztatu API gakoa"
+
+[portal.infrastructure.attestationLabel]
+attested = "Egiaztatuta"
+inScope = "Eremuan"
+notApplicable = "E/E"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Iragazi auditoria-gertaerak kategoriaren arabera"
 heading = "Auditoria-erregistroak"
@@ -6935,6 +7430,7 @@ all = "Guztiak"
 auth = "Auth"
 config = "Konfig."
 elevation = "Sarbide-igoera"
+policy = "Politika"
 processing = "Prozesamendua"
 security = "Segurtasuna"
 
@@ -6944,19 +7440,35 @@ title = "Ez duzu sarbiderik"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfig."
-elevation = "Sarbide-igoera"
+policy = "Politika"
 processing = "Prozesamendua"
 totalEvents = "Gertaerak guztira · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentifikazioa"
+config = "Konfigurazioa"
+elevation = "Goratzea"
+policy = "Politika"
+processing = "Prozesatzea"
+security = "Segurtasuna"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Errorea"
+info = "Informazioa"
+success = "Arrakasta"
+warning = "Abisua"
+
+[portal.infrastructure.certLabel]
+certified = "Ziurtatuta"
+inProgress = "Abian"
+notStarted = "Hasi gabe"
+
 [portal.infrastructure.createKey]
 cancel = "Utzi"
 createKey = "Sortu gakoa"
 done = "Eginda"
-ipAllowlistHelper = "Komaz bereizitako CIDR barrutiak. Utzi hutsik edozein IP baimentzeko."
-ipAllowlistLabel = "IP baimen-zerrenda"
 keyNameLabel = "Gakoaren izena"
 keyNamePlaceholder = "adib. Ekoizpena · ingestioa"
-permissionsLabel = "Baimenak"
 secretKeyCaption = "Gako sekretua"
 secretWarning = "Gorde hau sekretuen kudeatzaile batean. Stirling-ek hash bat baino ez du gordetzen — ez dago gero berreskuratzeko modurik."
 subtitle = "Mugatu gakoa behar duen gutxienekora. Edonoiz biratu edo baliogabetu dezakezu."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopiatu sekretu hau orain — ez da berriro erakutsiko."
 title = "Sortu API gakoa"
 titleCreated = "Gakoa sortuta"
 
+[portal.infrastructure.deployLabel]
+live = "Martxan"
+queued = "Ilaran"
+rolledBack = "Atzera itzulita"
+rolling = "Zabaltzen"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Hedatutako Stirling eskualde bakoitzaren zuzeneko osasuna — late
 description = "Hedatutako eskualdeak hemen agertuko dira zure lan-eremua hornitu ondoren."
 title = "Ez dago eskualderik hedatuta"
 
+[portal.infrastructure.keyLabel]
+active = "Aktibo"
+revoked = "Ezeztatuta"
+
+[portal.infrastructure.modelLabel]
+active = "Aktibo"
+degraded = "Degradatuta"
+disabled = "Desgaituta"
+
 [portal.infrastructure.models]
 heading = "Modeloak"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Egoera"
 type = "Mota"
 version = "Bertsioa"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/dei"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modelo aktiboak"
 avgLatency = "Batez besteko latentzia"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} eragiketarako modeloa"
 operation = "Eragiketa"
 routedTo = "Hona bideratua"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Sailkapena"
+extraction = "Erauzketa"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradatuta"
+down = "Erorita"
+healthy = "Osasuntsu"
+
 [portal.infrastructure.security.access.byok]
 description = "Eman zure KMS propioaren gako bat. Stirling-ek harekin zifratzen du, baina oraindik irakur dezake."
 label = "Ekarri zure gakoa (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeloak"
 security = "Segurtasuna"
 storage = "Biltegiratzea"
 
+[portal.integrations]
+addAnother = "Gehitu beste bat"
+availableHeading = "Eskuragarri"
+comingSoonHeading = "Laster"
+connect = "Konektatu"
+connectedHeading = "Konektatuta"
+connectionCount_one = "{{count}} konexio"
+connectionCount_other = "{{count}} konexio"
+customApi = "API pertsonalizatua"
+searchPlaceholder = "Bilatu integrazioak"
+subtitle = "Stirling-ek komunikatu dezakeen guztia. Kredentzialak behin sortzen dira hemen, eta gero iturburu, politika eta pipeline-ek erreferentziatzen dituzte."
+title = "Integrazioak"
+typedName = "{{tool}} izena"
+
+[portal.integrations.filters]
+all = "Guztiak"
+audit = "Auditoria"
+connected = "Konektatuta"
+notify = "Jakinarazi"
+security = "Segurtasuna"
+signing = "Sinatzea"
+storage = "Biltegiratzea"
+
+[portal.integrations.status]
+connected = "Konektatuta"
+
+[portal.integrations.table]
+integration = "Integrazioa"
+worksWith = "Honekin funtzionatzen du"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline-ak"
+policies = "Politikak"
+sources = "Iturburuak"
+
+[portal.legal]
+draft = "{{label}} · zirriborroa"
+loadError = "Ezin izan da dokumentu hau kargatu. Saiatu berriro."
+loading = "Kargatzen…"
+title = "Dokumentu juridikoa"
+
 [portal.nav]
 agent-builder = "Agente-eraikitzailea"
 components = "Osagaiak"
@@ -7182,6 +7765,7 @@ documents = "Dokumentuak"
 editor = "Editorea"
 home = "Hasiera"
 infrastructure = "Azpiegitura"
+integrations = "Integrazioak"
 pipelines = "Pipelineak"
 policies = "Gidalerroak"
 procurement = "Erosketak"
@@ -7190,25 +7774,9 @@ sources = "Iturburuak"
 usage = "Erabilera eta fakturazioa"
 users = "Erabiltzaileak"
 
-[portal.notifications]
-markAllRead = "Markatu guztiak irakurrita"
-title = "Jakinarazpenak"
-viewAll = "Ikusi guztiak"
-
-[portal.notifications.ariaLabel]
-none = "Jakinarazpenak, irakurri gabekorik ez"
-unread_one = "Jakinarazpenak, {{count}} irakurri gabe"
-unread_other = "Jakinarazpenak, {{count}} irakurri gabe"
-
-[portal.notifications.count]
-allRead = "guztiak irakurrita"
-loading = "kargatzen"
-new_one = "{{count}} berri"
-new_other = "{{count}} berri"
-
-[portal.notifications.empty]
-description = "Ez dago jakinarazpen berririk."
-title = "Dena eguneratuta duzu"
+[portal.nav.section]
+platform = "PDF plataforma"
+processor = "PDF prozesadorea"
 
 [portal.pipelines]
 subtitle = "Backend-eko dokumentu-pipeline automatizatu guztiak: iturburu multzo baten gaineko eragiketa-kate ordenatua, abiarazle batek exekutatua. Egin klik errenkada batean haren urratsak eta iturburuak ikusteko."
@@ -7220,15 +7788,28 @@ newPipeline = "Pipeline berria"
 [portal.pipelines.builder]
 addStep = "Gehitu tresna"
 back = "Itzuli pipelineetara"
+cannotFollow = "Ezin du {{produced}} hartu"
+chooseAccount = "Aukeratu kontu bat"
+chooseDestination = "Aukeratu helmuga bat"
+chooseOperation = "Aukeratu urrats honek zer egiten duen"
+chooseSource = "Aukeratu iturburu bat"
 discard = "Baztertu aldaketak"
 enabled = "Gaituta"
+inputs = "Sarrera"
+inputSource = "Sarrera-iturburua"
+inputTrigger = "Abiarazlea"
 keepEditing = "Jarraitu editatzen"
+needsConfiguring = "Konfiguratu behar da"
 needsUpload = "Kargatutako fitxategi bat behar du"
+noSources = "Oraindik ez dago iturbururik konektatuta. Sortu bat sarrera gisa erabiltzeko."
 noToolMatches = "Ez dago zure bilaketarekin bat datorren tresnarik."
 pipelineSettings = "Pipelinearen ezarpenak"
 searchTools = "Bilatu tresnak"
 selectToolBody = "Gehitu tresna bat zure pipelinea eraikitzeko."
 selectToolTitle = "Oraindik ez dago tresnarik"
+sendToSystem = "Bidali beste sistema batera"
+stepsIncompatible = "Urrats hauek ezin dira exekutatu aurreko urratsak sortzen duenarekin: {{tools}}."
+stepsNeedSetup = "Urrats hauek oraindik konfiguratu behar dira gorde aurretik: {{tools}}."
 toolSettings = "Tresnaren ezarpenak"
 unknownStep = "Eragiketa ezezaguna, bere horretan mantendu da."
 unsavedBody = "Gorde gabeko aldaketak dituzu. Gorde irten aurretik, edo baztertu?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Gorde gabeko aldaketak"
 uploadUnsupported = "Kargatutako fitxategiak oraindik ez dira onartzen pipelineetan; beraz, urrats hauek ezin dira gorde: {{tools}}."
 usesDefaults = "Ezarpen lehenetsiekin exekutatzen da"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Aurreko urratseko fitxategi guztiak konbinatzen ditu"
+fan-out = "Aurreko urratseko fitxategi bakoitzeko behin exekutatzen da"
+format-mismatch = "{{accepts}} behar du, baina aurreko urratsak {{produced}} sortzen du"
+output-uncertain = "Baliteke ez exekutatzea: aurreko urratsaren irteera konfigurazioaren araberakoa da"
+source-mismatch = "{{accepts}} behar du, baina pipeline honen sarrera {{produced}} da"
+undeclared-operation = "Ezin da egiaztatu urrats honek zer onartzen duen"
+
 [portal.pipelines.composer]
 addTool = "Gehitu tresna"
 cancel = "Utzi"
 chainEmpty = "Gehitu tresna bat zure pipelinea eraikitzen hasteko."
 create = "Sortu pipelinea"
-directory = "Irteera-karpeta"
-directoryHelp = "Zerbitzariko bide absolutua. Konfiguratutako baimendutako karpeten barruan egon behar du."
 editingUnsupported = "Tresna-parametro hauek editatzeko bistaratzea oraindik ez da onartzen."
 moveDown = "Mugitu behera"
 moveUp = "Mugitu gora"
 name = "Izena"
 namePlaceholder = "adib. Erredakzio-ekorketa"
-noSources = "Oraindik ez dago iturbururik konektatuta. Pipelinea zuzenean emandako fitxategietan exekuta daiteke hala ere."
 noToolSettings = "Tresna honek ez du ezarpen konfiguragarririk."
 operations_one = "Eragiketa ({{count}})"
 operations_other = "Eragiketak ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Ezabatu"
 title = "Ezabatu pipelinea?"
 
 [portal.pipelines.detail]
+clearHistory = "Garbitu historia"
 delete = "Ezabatu pipelinea"
 run = "Exekutatu orain"
 
 [portal.pipelines.empty]
 action = "Sortu pipeline bat"
+connectSource = "Konektatu iturburu bat"
 description = "Sortu zure lehen pipelinea: aukeratu zein iturburutan exekutatuko den, kateatu eragiketak eta aukeratu irteera nora joango den."
 title = "Oraindik ez dago pipelinerik"
 
@@ -7286,15 +7874,17 @@ active = "Aktibo"
 paused = "Pausatuta"
 total = "Pipelineak"
 
-[portal.pipelines.output]
-folder = "Idatzi karpetara"
-inline = "Itzuli fitxategiak"
-
 [portal.pipelines.run]
+allProcessed_one = "Ez dago exekutatzeko ezer: iturburuko {{count}} dokumentua dagoeneko prozesatu da."
+allProcessed_other = "Ez dago exekutatzeko ezer: iturburuetako {{count}} dokumentu guztiak dagoeneko prozesatu dira."
 completed_one = "Exekuzioa osatu da."
 completed_other = "{{count}} exekuzio guztiak osatu dira."
 empty = "Ez dago exekutatzeko ezer: iturburuek ez zuten prozesatzeko dokumenturik."
 failed = "Exekuzioak huts egin du: {{error}}"
+historyCleared = "Historia garbitu da. Hurrengo exekuzioak une honetan iturburuetan dagoen guztia berriro prozesatuko du."
+inFlight = "Ez dago exekutatzeko ezer berririk: dokumentuak oraindik aurreko exekuzio batetik prozesatzen ari dira."
+parked_one = "Ez dago exekutatzeko ezer: {{count}} dokumentuk huts egin zuen lehenago eta aparkatuta dago. Konpondu arrazoia, eta gero garbitu historia berriro saiatzeko."
+parked_other = "Ez dago exekutatzeko ezer: {{count}} dokumentuk huts egin zuten lehenago eta aparkatuta daude. Konpondu arrazoia, eta gero garbitu historia berriro saiatzeko."
 running = "Exekuzioa hasi da; oraindik martxan dago."
 timeout = "Exekuzioa espero baino gehiago luzatzen ari da; baliteke atzeko planoan amaitzea."
 
@@ -7314,12 +7904,18 @@ manual = "Eskuzkoa"
 schedule = "Programatua"
 
 [portal.policies]
+defaultName = "{{category}} politika"
 subtitle = "Dokumentu bakoitzean tresna-pipeline bat betearazten duten automatizazio iraunkorrak. Gidalerro bakoitza kargatzean edo esportatzean aktibatzen da, bere tresna-katea exekutatzen du eta betearazitako bertsioa jatorrizkoaren alboan gordetzen du."
 title = "Gidalerroak"
 
 [portal.policies.card]
 comingSoon = "Berritu Enterprise planera"
 notSetUp = "Konfiguratu gabe"
+requiresAiEngine = "AI motorra behar du"
+
+[portal.policies.categories.classification]
+desc = "Identifikatu dokumentu bakoitzaren mota igotzean eta etiketatu haren metadatuak artxibatzeko eta bilatzeko."
+label = "Sailkapena"
 
 [portal.policies.categories.compliance]
 desc = "Betearazi HIPAA, GDPR, SOC 2 edo FedRAMP eskakizunak dokumentu bakoitzean."
@@ -7344,6 +7940,13 @@ label = "Segurtasuna"
 [portal.policies.config]
 scopeAll = "Dokumentu guztiak"
 
+[portal.policies.config.classification]
+summary = "Igotako dokumentu guztiak zure taldearen etiketa multzoaren arabera sailkatzen ditu eta haien metadatuak etiketatzen ditu."
+
+[portal.policies.config.classification.rules]
+0 = "Sailkatu"
+1 = "Etiketatu metadatuak"
+
 [portal.policies.config.compliance]
 summary = "Dokumentuak arau-esparruen arabera baliozkotzen ditu sistematik irten aurretik."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Gutxieneko konfiantza"
 2 = "Izena"
 3 = "Normalizatu"
 
+[portal.policies.config.purview]
+label = "Aplikatu Microsoft Purview sentikortasun-etiketa bat"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant-a"
+labelId = "Etiketa ID"
+labelIdHelp = "Etiketaren GUID-a, Purview ataritik. Etiketa bat aplikatzeak haren metadatuak PDF-ean idazten ditu; ezin du zifratu, horretarako Microsoft bezeroa behar da."
+labelName = "Etiketaren izena (aukerakoa)"
+labelNameHelp = "ID-arekin batera erregistratzen da, pertsonek eta tresnek etiketa ezagut dezaten."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview-ek bereizten du politika batek aplikatutako etiketa eta pertsona batek aukeratutakoa."
+label = "Etiketa nola erregistratzen den"
+privileged = "Pertsona batek aukeratu bezala"
+standard = "Automatikoki aplikatu bezala"
+
+[portal.policies.config.purviewRead]
+label = "Irakurri Microsoft Purview etiketa bat"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant-a"
+connectionHelp = "Dokumentuak dagoeneko daraman etiketa irakurtzen du, ondorengo urratsek haren arabera jardun dezaten."
+
 [portal.policies.config.retention]
 summary = "Dokumentuak zenbat denboraz mantentzen diren, noiz artxibatu eta noiz ezabatu betearazten du."
 
@@ -7438,6 +8064,7 @@ title = "Oraindik ez dago jarduerarik"
 [portal.policies.endpoints]
 addWatermark = "Ur-marka"
 autoRedact = "PII erredaktatu"
+classifyAndLabel = "Sailkatu"
 compressPdf = "Konprimitu"
 flatten = "Lautu"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Zure politikak gordeta daude eta konexioa leheneratzen denean age
 retry = "Saiatu berriro"
 title = "Backend ez dago erabilgarri"
 
+[portal.policies.operations]
+change = "Aldatu urrats honek zer egiten duen"
+noResults = "Ez dago horrekin bat datorren urratsik. Saiatu produktu-izen batekin, edo \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Bilatu urratsak - saiatu \"scan\", \"attach\" edo produktu-izen batekin"
+
+[portal.policies.operations.bodyMode]
+binary = "Fitxategi-byte gordinak"
+json = "JSON karga baten barruan"
+multipart = "Fitxategi-igoera gisa (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Zure ClamAV zerbitzari propioak dokumentua egiaztatzen du; ezer ez da zure saretik ateratzen."
+label = "Eskaneatu birusen bila (autoostatatua)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Makroak, exekutagarriak, script-ak edo txertatutako objektuak dituzten dokumentuak baztertzen ditu."
+label = "Blokeatu eduki aktiboa"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive-k dokumentua egiaztatzen du eta exekuzioa gelditzen da garbi ez badago."
+label = "Eskaneatu birusen bila"
+
+[portal.policies.operations.confluenceAttach]
+description = "Prozesatutako dokumentua orri batean artxibatzen du."
+label = "Erantsi Confluence orri bati"
+
+[portal.policies.operations.consignoSubmit]
+description = "Dokumentua ConsignO Cloud-era bidaltzen du sinatzeko."
+label = "Bidali sinatzeko (ConsignO)"
+note = "Dokumentua bidaltzen du. Sinatutako kopia eskuratzea oraindik ez dago onartuta, urrats batek ezin diolako emaitzarik pasa ondorengo urrats bati."
+
+[portal.policies.operations.customApiCall]
+description = "Sortu deia zuk zeuk: path, method, body eta erantzunaren kudeaketa."
+label = "Deitu API pertsonalizatu bati"
+
+[portal.policies.operations.discordNotify]
+description = "Kanal bati jakinarazten dio politikak dokumentu bat kudeatu duela."
+label = "Argitaratu mezu bat Discord-en"
+
+[portal.policies.operations.elasticIndex]
+description = "Politikak egindakoa dokumentu bilagarri gisa erregistratzen du."
+label = "Indexatu auditoria-gertaera bat Elasticsearch-en"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart egokia da igoera-API-etarako; JSON egokia da fitxategia karga baten barruan nahi duten API-etarako; binary-k byte gordinak bidaltzen ditu."
+label = "Dokumentua nola bidali"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Bere horretan bidalitako JSON body bat. {{document.base64}} fitxategia darama; {{document.*}} eta {{run.*}} dokumentu bakoitzeko betetzen dira."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Kontua"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domeinua"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API-ak dokumentua jasotzea espero duen formulario-eremua."
+label = "Fitxategi-eremuaren izena"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Nork"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Goiburukoen izen/balio bikoteen JSON objektu bat. Konexioaren kredentziala zuretzat gehitzen da."
+label = "Goiburukoak"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Mezuaren gorputz gisa bidaltzen da. {{document.*}} eta {{run.*}} dokumentu bakoitzeko betetzen dira."
+label = "Mezua"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Orri ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Konexioaren oinarrizko URL-ari eransten zaio. Ezin da inoiz beste host batera iritsi."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Unitatean non idatziko den. {{document.filename}} dokumentu bakoitzeko betetzen da."
+label = "Helmuga-path"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Txostenak dokumentua aldatu gabe uzten du. Ordezteak itzultzen denarekin trukatzen du."
+label = "Zer egin erantzunarekin"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Sinatzailearen emaila"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Gaia"
+placeholder = "Prozesatuta: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio-k testu hau aztertzen du. Erabili {{document.title}} edo itsatsi egiaztatu nahi duzun testua."
+label = "Egiaztatu beharreko testua"
+
+[portal.policies.operations.fields.to]
+label = "Nori"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud erabiltzaile-izena"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Espazio bati jakinarazten dio politikak dokumentu bat kudeatu duela."
+label = "Argitaratu mezu bat Google Chat-en"
+
+[portal.policies.operations.jiraAttach]
+description = "Prozesatutako dokumentua issue bati eransten dio."
+label = "Erantsi Jira issue bati"
+
+[portal.policies.operations.mailgunEmail]
+description = "Prozesatutako dokumentua eranskin gisa bidaltzen du."
+label = "Bidali dokumentua email bidez (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Prozesatutako dokumentua karpeta batean idazten du."
+label = "Igo Nextcloud-era"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Zure Presidio zerbitzari propioak aurkitzen dituen datu pertsonalak jakinarazten ditu."
+label = "Detektatu datu pertsonalak"
+note = "Presidio-k testua irakurtzen du, ez fitxategiak. Eman egiaztatu nahi duzun testua — dokumentua bera ez da igotzen."
+
+[portal.policies.operations.responseMode]
+replace = "Ordeztu dokumentua erantzunarekin"
+report = "Mantendu dokumentua, erregistratu erantzuna"
+
+[portal.policies.operations.sendgridEmail]
+description = "Prozesatutako dokumentua eranskin gisa bidaltzen du."
+label = "Bidali dokumentua email bidez (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Kanal bati jakinarazten dio politikak dokumentu bat kudeatu duela."
+label = "Argitaratu mezu bat Slack-en"
+
+[portal.policies.operations.splunkEvent]
+description = "Politikak egindakoa erregistratzen du, zure auditoreek dagoeneko begiratzen duten tokian."
+label = "Bidali auditoria-gertaera bat Splunk-era"
+
+[portal.policies.operations.sumologicEvent]
+description = "Politikak HTTP collector bati egindakoa erregistratzen du."
+label = "Bidali auditoria-gertaera bat Sumo Logic-era"
+
+[portal.policies.operations.teamsNotify]
+description = "Kanal bati jakinarazten dio politikak dokumentu bat kudeatu duela."
+label = "Argitaratu mezu bat Teams-en"
+
+[portal.policies.operations.webhookPost]
+description = "Dokumentua bera zuk aukeratutako URL batera bidaltzen du."
+label = "Argitaratu dokumentua webhook batean"
+
+[portal.policies.operations.zapierNotify]
+description = "Exekuzioaren xehetasunak zure automatizazioari ematen dizkio."
+label = "Abiarazi Zap edo Make eszenario bat"
+
 [portal.policies.stats]
 activeFor = "Aktibo"
 dataProcessed = "Prozesatutako datuak"
@@ -7473,6 +8277,13 @@ label = "Betearazitako dok."
 description = "Konfiguratuta baina ez da abiarazten"
 label = "Pausatuta"
 
+[portal.policies.table]
+appliesTo = "Honi aplikatzen zaio"
+docs = "Betearazitako dokumentuak"
+enforces = "Betearazten du"
+policy = "Politika"
+status = "Egoera"
+
 [portal.policies.wizard.actions]
 back = "Atzera"
 cancel = "Utzi"
@@ -7480,6 +8291,10 @@ continue = "Jarraitu"
 enablePolicy = "Gaitu politika"
 saveChanges = "Gorde aldaketak"
 
+[portal.policies.wizard.capability.classify]
+desc = "Dokumentuaren mota identifikatzen du zure taldearen etiketetatik eta etiketatu egiten du, kategoriaren arabera artxibatu eta bilatu dadin."
+label = "Sailkatu dokumentua"
+
 [portal.policies.wizard.capability.compress]
 desc = "Dokumentua konprimitu fitxategi-tamaina txikiagoa izan dezan."
 label = "Murriztu fitxategiaren tamaina"
@@ -7500,10 +8315,18 @@ label = "Erredaktatu informazio sentikorra"
 desc = "Ezkutuko JavaScript kentzen du, dokumentua irekitzean ezer automatikoki exekuta ez dadin."
 label = "Kendu eduki aktiboa"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dokumentua une jakin batean forma zehatz honetan existitzen zela frogatzen du, denbora-zigilu autoritate independente bat erabiliz. Hash bat bakarrik bidaltzen da - dokumentua ez da inoiz zure zerbitzaritik ateratzen."
+label = "Gehitu denbora-zigilu fidagarri bat"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Marka ikusgarri bat jartzen du (adib. “Konfidentziala”) orri guztietan."
 label = "Aplikatu ur-marka"
 
+[portal.policies.wizard.classification]
+description = "Igotako dokumentu guztiak barneko etiketen arabera sailkatzen dira eta egokitzen zaizkien motekin etiketatzen dira. Etiketa multzoa zure talde osoan partekatzen da."
+labelsHeading = "Sailkapen-etiketak"
+
 [portal.policies.wizard.errors]
 noTools = "Gaitu gutxienez tresna bat lan-fluxuan lehenik."
 saveFailed = "Ezin izan da politika gorde. Saiatu berriro."
@@ -7548,73 +8371,118 @@ setUp = "Konfiguratu {{category}} politika"
 [portal.policies.wizard.workflow]
 description = "Aukeratu politika honek zer egiten dion prozesatzen duen dokumentu bakoitzari."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktibo"
-noRule = "Oraindik ez da araurik betearazi"
-subtitle = "Dokumentu bakoitzak zeharkatzen dituen automatizazio iraunkorrak, hura zein pipeline-k kudeatzen duen kontuan hartu gabe."
-title = "Zer exekutatzen den zure PDFetan"
-
 [portal.policySummary.action]
-comingSoon = "Eguneratu Enterprise-ra"
-configure = "Konfiguratu"
 setUp = "Konfiguratu"
 
-[portal.policySummary.column]
-activeRule = "Arau aktiboa"
-policy = "Politika"
-status = "Egoera"
+[portal.processorFlow]
+footnote = "Kontaketak azken 24 orduetakoak dira. Fluxuaren abiadura adierazgarria da."
+liveBadge = "Zuzenean"
+stats = "{{connected}} konektatuta · {{processed}} PDF prozesatuta"
+title = "PDF prozesadorea"
 
-[portal.policySummary.empty]
-description = "Politikak konfiguratu ondoren, kategoriak hemen agertuko dira."
-title = "Oraindik ez dago politikarik"
+[portal.processorFlow.lens]
+ariaLabel = "Ikuspegi modua"
+flow = "Fluxua"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktibo"
-off = "Desaktibatuta"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Huts eginda"
+heading = "Emaitzak"
+success = "Entregatuta"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktibo"
+count = "{{n}} · 24h"
+heading = "Politikak"
+setUp = "Konfiguratu"
 soon = "Laster"
 
-[portal.processingStatus]
-managePlan = "Kudeatu plana"
-volumeSuffix = "Prozesatutako PDFak · azken 30 egunak"
+[portal.processorFlow.sankey]
+waist = "Politikak · {{n}} aktibo"
+
+[portal.processorFlow.sankey.empty]
+description = "Konektatu iturburu bat eta aktibatu politika bat dokumentuak prozesadorean zehar nola dabiltzan ikusteko."
+title = "Oraindik ez dago fluxurik"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Konektatu"
+editor = "Stirling PDF editorea"
+heading = "Iturburuak"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email sarrera"
 
 [portal.procurement]
-reset = "Berrezarri erosketa (demo)"
 subtitle = "Lortu zure taldea ebaluatzea, kontratatzea eta martxan jartzea. Dokumentu guztiak leku bakarrean."
 title = "Erosketa"
 
-[portal.procurement.action]
-download = "Deskargatu"
-pay = "Ordaindu orain"
-request = "Eskatu"
-sign = "Berrikusi eta sinatu"
-upload = "Kargatu"
-
 [portal.procurement.agreement]
 agreeCta = "Adostu eta harpidetu"
+confidential = "Konfidentziala"
 confirm = "Stirling Enterprise Agreement irakurri dut eta ados nago."
-eyebrow = "Akordioa"
-intro = "Akordio bateratu batek zure tratua estaltzen du: Master Service Agreement, Order Form, EULA eta Data Processing Agreement. Berrikusi, eta gero adostu aurrekontua harpidetza konprometitu gisa onartzeko."
-title = "Berrikusi zure enpresa-akordioa"
+docName = "Stirling Enterprise akordioa"
+docSub = "MSA, Order Form, EULA eta DPA, sinadura bakarrean konbinatuta."
+download = "Deskargatu"
+downloadDraftError = "Ezin izan da akordioaren PDF-a sortu - dokumentu-errendatzailea ez dago erabilgarri. Saiatu berriro laster edo jarri harremanetan laguntzarekin."
+downloadError = "Ezin izan da sinatutako akordioa deskargatu. Saiatu berriro."
+legalName = "Entitate juridikoaren izena"
+legalNamePlaceholder = "Sinatuko duen entitate juridikoa"
+loadError = "Ezin izan da akordioa kargatu. Saiatu berriro."
+loading = "Akordioa kargatzen..."
+ref = "Erref. {{ref}} · {{version}}"
+requestChanges = "Eskatu aldaketak"
+scrollHint = "Korritu berrikusteko"
+signatory = "Sinatzailearen izena"
+signatoryPlaceholder = "Izen-abizenak"
+signatoryTitle = "Sinatzailearen kargua"
+signatoryTitlePlaceholder = "adib. Aholkulari juridiko nagusia"
+signError = "Ezin izan da zure sinadura erregistratu. Saiatu berriro."
 
 [portal.procurement.builder]
 addons = "Gehigarriak"
+addressLine1 = "Helbidearen 1. lerroa"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Helbidearen 2. lerroa"
+addressLine2Placeholder = "Suitea, solairua, eraikina"
 back = "Atzera"
 businessName = "Enpresaren izena"
 businessNamePlaceholder = "Zure enpresa"
+city = "Hiria"
+cityPlaceholder = "San Francisco"
+completeRequired = "Osatu derrigorrezko eremuak (* markatuta) baliozko email batekin aurrekontua sortu aurretik."
+contactEmail = "Harremanetarako emaila"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Harremanetarako izena"
+contactNamePlaceholder = "Jane Doe"
 continue = "Jarraitu"
-country = "Herrialdea"
-countryEuro = "Eurogunea (EUR €)"
-countryUK = "Erresuma Batua (GBP £)"
-countryUS = "Estatu Batuak (USD $)"
+done = "Eginda"
 eula = "Stirling Enterprise EULA irakurri dut eta ados nago. Aurrekontu honetatik sortutako akordioa arautzen du."
 generate = "Sortu aurrekontua"
-included = "Barne"
 indemnification = "IP kalte-ordaina"
 indemnificationSub = "EULAren arabera, IP erreklamazio kalifikatuak defendatzen ditugu"
-offlineLicense = "Offline / air-gapped lizentzia"
-offlineLicenseSub = "Air-gapped self-hosted instantzia baterako deskarga daitekeen lizentzia-fitxategia"
+paperEyebrow = "Enterprise aurrekontua"
+paperFor = "Honentzat prestatua"
+pdfSize = "PDF tamaina"
+poNumber = "PO zenbakia"
+poNumberPlaceholder = "Aukerakoa"
+postalCode = "Posta-kodea"
+postalCodePlaceholder = "94105"
+posture = "Gobernantza"
+posture_count = "~{{count}} politika"
+posture_essentials = "Oinarrizkoak"
+posture_essentialsSub = "Sailkapena + Partekatzea — lehenetsiak"
+posture_governed = "Gobernatua"
+posture_governedSub = "Segurtasuna eta bideratzea gehitzen ditu"
+posture_regulated = "Arautua"
+posture_regulatedSub = "Kategoria guztiak — Betetzea, Atxikipena, Ingestioa"
 qbr = "Hiruhileko negozio-berrikuspenak"
 qbrSub = "Zure SEk erabilera eta roadmap-a berrikusten ditu hiruhileko bakoitzean"
+region = "Estatua / eskualdea"
+regionPlaceholder = "California"
 running = "{{annual}} / urte · {{years}} urteko {{tcv}}"
 s1Sub = "Zure taldea eta urtero exekutatzea espero dituzun PDFak."
 s1Title = "Zenbat prozesatuko duzu?"
@@ -7623,6 +8491,12 @@ s2Title = "Konpromisoa eta zerbitzua"
 s3Sub = "Aurrekonturako eta horrek sortzen duen akordiorako."
 s3Title = "Zure datuak"
 serviceLevel = "Zerbitzu-maila"
+size_compact = "Trinkoa"
+size_compactSub = "Gehienbat testua, 1 MB baino gutxiago"
+size_heavy = "Astuna"
+size_heavySub = "Eskaneatua edo irudi askokoa, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Testu eta irudi mistoak, 1 eta 5 MB artean"
 slDedicated = "Dedikatua"
 slDedicatedSub = "4 lanordu · kontu-kudeatzaile dedikatua · +30%"
 slPriority = "Lehentasunezkoa"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Lanegun berean · izendatutako CSM · +15%"
 slStandard = "Estandarra"
 slStandardSub = "Hurrengo laneguna · partekatutako CSM · barne"
 stepOf = "{{total}} urratsetatik {{n}}."
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Aukerakoa"
 term = "Epea"
 termDiscount = "{{pct}}% urte anitzeko konpromiso-deskontua aplikatuta"
 title = "Eraiki zure aurrekontua"
@@ -7637,6 +8513,7 @@ training = "Onboarding eta prestakuntza"
 trainingSub = "Zuzeneko saioak zure taldea martxan jartzeko"
 users = "Erabiltzaileak guztira"
 usersPlaceholder = "adib. 250"
+viewEula = "Irakurri"
 volEstimated = "{{count}} erabiltzaileren arabera kalkulatua (~2.000 PDF bakoitzeko, automatizazioa barne). Editatu hobeto badakizu."
 volManual = "Zure kopurua erabiltzen. Berriro kalkulatu zure taldearen tamainaren arabera nahi duzunean."
 volNoUsers = "Ez zaude ziur? Sartu zure taldearen tamaina eta guk kalkulatuko dugu."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "adib. 1.000.000"
 years_one = "{{count}} urte"
 years_other = "{{count}} urte"
 
-[portal.procurement.docs]
-count_one = "{{count}} dok."
-count_other = "{{count}} dok."
-done = "Eginda"
-here = "Hemen zaude"
-hide = "Ezkutatu"
-optional = "Aukerakoa"
-paidAddon = "Ordainpeko gehigarria"
-show = "Erakutsi"
-subtitle = "Ibilbideko urrats bakoitzean behar duzun guztia, tratua aurrera doan heinean agertuta."
-supportingSubtitle = "SOC 2, segurtasun-berrikuspenak, zerga-inprimakiak eta gehiago, zure segurtasun- edo erosketa-taldeak eskatzen duenean prest. Batzuek behin bakarrik ordaintzeko kuota dute."
-supportingTitle = "Zure ebaluazioari euskarria ematen"
+[portal.procurement.documents]
+agreement = "Enterprise akordioa"
+agreementSub = "MSA, Order Form eta DPA sinadura bakarrean."
+download = "Deskargatu"
+eula = "EULA eta merkataritza-baldintzak"
+eulaSub = "Softwarea eta autozerbitzuko merkataritza-baldintzak."
+invoice = "Faktura"
+invoiceSub = "Zure lehen harpidetza-faktura."
+laterInvoice = "Onartu ondoren eskuragarri"
+laterQuote = "Zure aurrekontua jaulki ondoren eskuragarri"
+quote = "Aurrekontua"
+quoteSub = "Zure enterprise aurrekontu xehatua."
+sla = "SLA eranskina"
+slaSub = "Laguntza-mailak eta erantzun-helburuak."
+subprocessors = "Azpiprozesadoreak"
+subprocessorsSub = "Zure izenean datuak prozesatzen dituzten hirugarrenak."
+subtitle = "Zure akordioaren dokumentazioa, edozein unetan eskuragarri."
 title = "Dokumentuak"
-upcoming = "Datozenak"
+view = "Ikusi"
 
 [portal.procurement.error]
 title = "Zerbait gaizki joan da"
 
 [portal.procurement.hero]
-company = "Zure enpresa-tratua"
+barAria = "{{current}}. etapa {{total}}(e)tik"
 ctaAgreement = "Berrikusi eta sinatu akordioa"
-ctaLive = "Martxan zaude"
-ctaPayment = "Gehitu ordainketa"
+ctaExploring = "Konfiguratu zure proba"
 ctaQuote = "Berrikusi zure aurrekontua"
+ctaReviewQuote = "Berrikusi aurrekontua"
 ctaTrial = "Eraiki zure aurrekontua"
+documents = "Dokumentuak"
 eyebrow = "Enterprise erosketa"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Gonbidatu taldekideak"
-keyDocs = "Dokumentu nagusiak"
-nextStep = "Hurrengo urratsa: {{action}}"
-notStarted = "Hasi gabe"
+licenseKey = "Lizentzia-gakoa"
+liveSub = "Zure erakundea hornituta dago eta zure lizentzia aktibo dago."
+liveTitle = "Stirling Enterprise martxan duzu"
+next = "Hurrengoa: {{stage}}"
 open = "Ireki erosketa"
 scheduleCall = "Programatu dei bat"
-setup1Sub = "Gonbidatu zure taldekideak"
-setup1Title = "Hedatu PDF Editor"
-setup2Sub = "Aktibatu prozesamendua editoreetan eta beste iturburu batzuetan"
-setup2Title = "Konektatu PDF Processor"
-setup3Sub = "Aktibatu Security, Compliance, Routing edo Retention behar dituzunean"
-setup3Title = "Gehitu gomendatutako politikak"
+sentenceAgreement = "berrikusi eta sinatu akordioa"
+sentenceLive = "hornidura eta zabalkundea"
+sentencePayment = "erosketa-agindua eta ordainketa"
+sentenceQuote = "berrikusi eta onartu zure aurrekontua"
+sentenceTrial = "konfiguratu zure proba-laneko gunea"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} egun geratzen da"
 daysLeft_other = "{{count}} egun geratzen dira"
-engineerLabel = "Zure solutions engineer"
-eyebrow = "Zure hedapena"
-live = "Stirling Enterprise-n martxan zaude"
-nextStep = "Hurrengo urratsa: {{action}}"
-subtitle = "Zure solutions engineer urrats guztietan dago. Hurrengo ekintza bat aldi berean; kontrol-zerrenda osoa behean dago."
-title = "Probalditik martxan egotera, bide gidatu bakarra"
-trialTitle = "Enterprise probaldia"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Sinadura batek MSA, order form, EULA eta DPA estaltzen ditu."
@@ -7727,6 +8604,9 @@ downloadError = "Oraindik ezin izan da offline lizentzia-fitxategia sortu — sa
 downloadOffline = "Deskargatu offline lizentzia (.lic)"
 hint = "Itsatsi gako hau self-hosted instantzia batean aktibatzeko, edo gorde zure erregistroetarako. Gorde seguru."
 label = "Zure lizentzia-gakoa"
+subtitle = "Aktibatu autoostatatutako instantzia bat gako honekin, edo gorde zure erregistroetarako."
+title = "Zure lizentzia-gakoa"
+trialFileHint = "Hau zure proba-lizentziaren fitxategia da. Zure akordioa indarrean dagoenean, itzuli eta deskargatu berriro — online lizentzia-gakoa ez bezala, .lic fitxategia ez da berez eguneratuko."
 
 [portal.procurement.link]
 cta = "Lotu kontua"
@@ -7739,65 +8619,62 @@ description = "Zure harpidetza aktibo dago eta zure lizentzia jaulkita dago. Zur
 eyebrow = "Martxan"
 title = "Stirling Enterprise-n martxan zaude"
 
-[portal.procurement.locked]
-description = "Probaldi-gakoak, bolumen konprometituaren aurrekontuak, sinadura bakarreko akordioa, ordainketa eta zure dokumentu-liburua hemen egongo dira enterprise ebaluazioa hasten duzunean."
-eyebrow = "Enterprise soilik"
-talkToSales = "Hitz egin salmentekin"
-title = "Erosketa-bidea Enterprise-rekin irekitzen da"
-
 [portal.procurement.milestone]
-accept = "Onartu eta jarraitu"
-description = "Deskargatu PDFa zure taldearekin partekatzeko, itzuli prest zaudenean onartzera edo egin aldaketak."
-download = "Deskargatu PDF"
 downloadError = "Oraindik ezin izan da aurrekontuaren PDFa deskargatu — saiatu berriro une batean."
-edit = "Editatu aurrekontua"
-eyebrow = "{{number}} aurrekontua"
-perYear = " / urte"
-preparedFor = "{{company}}-rentzat prestatua"
-tcv = "{{value}} kontratuaren balio osoa"
-title = "Zure aurrekontua prest dago"
-
-[portal.procurement.modal]
-cancel = "Utzi"
-chooseFile = "Aukeratu fitxategia"
-close = "Itxi"
-downloadBody = "Zure deskarga laster hasiko da."
-downloadCta = "Deskargatu"
-downloadTitle = "Deskargatu"
-noFile = "Ez da fitxategirik hautatu"
-payBody = "Ordaindu zure kontratu konprometitua txartelarekin edo banku-transferentziaz Stripe bidez. Zure lan-eremua ordainketa garbitu bezain laster hornituko da."
-payCta = "Jarraitu Stripe-ra"
-payTitle = "Berretsi ordainketa"
-requestBodyFree = "Eskariaren arabera sortzen dugu. Berretsi eta zure solutions engineer-ek laster bidaliko dizu."
-requestBodyPaid = "Hau ordainpeko gehigarria da. Berretsi eta zure solutions engineer-ek irismena zehaztu eta dokumentazioa bidaliko du."
-requestCta = "Eskatu"
-requestTitle = "Eskatu dokumentu hau"
-signBody = "Stirling Enterprise Agreement irekitzen du e-sinadurarako: sinadura batek MSA, order form, EULA eta DPA estaltzen ditu. Guk automatikoki kontrassinatu eta ordainketara aurreratzen zara."
-signCta = "Ireki sinatzeko"
-signTitle = "Berrikusi eta sinatu zure akordioa"
-uploadBody = "Bidali zure PO eta haren kontra fakturatuko dizugu zure baldintzetan. Arrastatu PDFa edo aukeratu fitxategi bat behean."
-uploadCta = "Kargatu erosketa-agindua"
-uploadTitle = "Kargatu zure erosketa-agindua"
 
 [portal.procurement.payment]
 description = "Zure aurrekontua onartuta dago eta zure lizentzia dagoeneko aktibo dago — zure taldea berehala has daiteke. Ordaindu lehen faktura prest zaudenean; hemen ordaindu edo deskarga dezakezu, emailik behar gabe."
+downloadAgreement = "Deskargatu sinatutako akordioa"
 downloadInvoice = "Deskargatu faktura"
-simulate = "Simulatu ordainketa jasota (demo)"
+eyebrow = "Ordainketa"
 title = "Harpidetza sortuta"
 viewInvoice = "Ikusi eta ordaindu faktura"
 
+[portal.procurement.review]
+acceptCta = "Onartu aurrekontua"
+annual = "Urteko kuota (1. urtea)"
+downloadCta = "Deskargatu aurrekontua"
+poNumber = "Erosketa-agindua: {{po}}"
+renewal = "{{amount}}/urtean berritzen da epearen ondoren (+{{pct}}% CPI)"
+tcv = "{{years}} urteko epea, osorik aurrez ordaindua: {{tcv}}"
+validUntil = "Baliozkoa {{date}} arte"
+
 [portal.procurement.schedule]
 fallback = "Ezin izan da programatzailea kargatu."
 fallbackLink = "Ireki programazioa fitxa berri batean"
+loading = "Programatzailea kargatzen..."
 subtitle = "Zure solutions engineer-ek hedapenean zehar gidatuko du zure taldea. Aukeratu ondo datorkizun ordua."
 title = "Programatu dei bat"
 
-[portal.procurement.status]
-action = "Ekintza behar da"
-available = "Erabilgarri"
-complete = "Osatuta"
-pending = "Zain"
-request = "Eskatuta"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Zigilatua, irteerarik gabe"
+back = "Atzera"
+businessName = "Enpresaren izena"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Kudeatua, hasiera azkarrena"
+continue = "Jarraitu"
+deployment = "Non zabaldu behar da?"
+eula = "Stirling EULA eta merkataritza-baldintzak onartzen ditut."
+fullName = "Izen-abizenak"
+fullNamePlaceholder = "Zure izena"
+invites = "Gonbidatu taldekideak · aukerakoa"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Programatu dei bat"
+seats = "Probatzen ari diren pertsonak"
+seatsPlaceholder = "adib. 15"
+selfhost = "Autoostatatua"
+selfhostSub = "Docker edo Kubernetes"
+start = "Hasi proba"
+stepOf = "{{n}}. urratsa {{total}}(e)tik"
+subtitle = "Doan 14 egunez, txartelik gabe."
+subtitleDetails = "Xehetasun batzuk zure aurrekontu eta akordiorako."
+talkFirst = "Nahiago duzu lehenik hitz egin?"
+title = "Konfiguratu zure proba"
+viewEula = "Irakurri"
+workEmail = "Laneko emaila"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Luzatzeak 7 egun gehitzen ditu eta zure solutions engineer-i jakinarazten dio."
@@ -7808,20 +8685,6 @@ maxed = "Mugara iritsita"
 subtitle = "Zure doako probaldia {{date}} arte doa. Ez da txartelik behar."
 title = "Enterprise probaldia"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Bolumen konprometituaren prezioak, erakunde osorako SSO + SCIM + RBAC, 90 eguneko auditoretza aldaezina eta SE dedikatua."
-homeCta = "Hasi probaldia →"
-homeHeadline = "Prozesatu milioika PDF."
-
-[portal.recentActivity]
-title = "Azken jarduera"
-viewAll = "Ikusi dena"
-
-[portal.recentActivity.empty]
-description = "Pipeline exekuzioak, hedapenak eta agente-gertaerak hemen agertuko dira."
-title = "Oraindik ez dago ezer hemen"
-
 [portal.search]
 ariaLabel = "Bilatu"
 placeholder = "Bilatu Stirling — endpointak, pipelineak, dokumentuak…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Kontu-lotura"
 
-[portal.shell.header]
-accountFallback = "Kontua"
-accountMenu = "Kontu-menua"
-darkMode = "Modu iluna"
-lightMode = "Modu argia"
-search = "Bilatu"
-searchPlaceholder = "Bilatu…"
-signOut = "Amaitu saioa"
-switchToDark = "Aldatu gai ilunera"
-switchToLight = "Aldatu gai argira"
-
 [portal.shell.sidebar]
 appEditor = "Editorea"
 appProcessor = "Prozesadorea"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dok."
 linkAccount = "Lotu Stirling kontua"
-planEditor = "Editor plana"
-planEnterprise = "Enterprise plana"
-planProcessor = "Processor plana"
 primaryNav = "Nabigazio nagusia"
 switchApp = "Aldatu aplikazioa"
 
+[portal.shell.topbar]
+closeNav = "Itxi nabigazioa"
+openNav = "Ireki nabigazioa"
+search = "Bilatu"
+
 [portal.sources]
 subtitle = "Stirling-era dokumentuak elikatzen dituzten sarrera-konexio berrerabilgarriak. Konfiguratu konexio bat behin, eta erreferentziatu nahi adina politikatan. Egin klik errenkada batean haren konfigurazioa eta zein politikek erabiltzen duten ikusteko."
 title = "Iturburuak"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Konektatu iturburua"
 
+[portal.sources.builder]
+back = "Itzuli iturburuetara"
+backToTypes = "Iturburu mota guztiak"
+cancel = "Utzi"
+chooseHint = "Aukeratu dokumentuak nondik datozen. Grisez dauden konektoreak bidean daude."
+comingSoon = "Laster"
+comingSoonHeading = "Laster"
+create = "Sortu iturburua"
+createTitle = "Konektatu iturburu bat"
+delete = "Ezabatu"
+editTitle = "Editatu iturburua"
+enabled = "Gaituta"
+save = "Gorde aldaketak"
+
+[portal.sources.builder.folderAccess]
+description = "Karpeta-automatizazioek administratzaileak baimendutako karpetak bakarrik erabil ditzakete. Gehitu Folder Access ezarpenetan, eta saiatu berriro."
+openSettings = "Folder Access ezarpenak"
+title = "Karpeta hau ez dago baimenduta"
+
 [portal.sources.delete]
 body = "Ezabatu \"{{name}}\"? Hau ezin da desegin. Hura erreferentziatzen duten politikak eguneratu beharko lirateke."
 cancel = "Utzi"
 confirm = "Ezabatu"
 title = "Ezabatu iturburua?"
 
-[portal.sources.detail]
-closeAriaLabel = "Itxi xehetasuna"
-delete = "Ezabatu iturburua"
-docs24h = "Azken 24 h"
-docs30d = "Azken 30 egunak"
-docsTotal = "Ikusitakoak guztira"
-docsTrend = "Azken 30 egunetako dokumentuak"
-documents = "Dokumentuak"
-edit = "Editatu"
-notReferenced = "Ez du politikak erreferentziatzen; beraz, seguru ezaba daiteke."
-pause = "Pausatu"
-resume = "Berrekin"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Honek erabilia"
-
 [portal.sources.empty]
 description = "Konektatu karpeta bat (eta, laster, hodeiko biltegiratzea), zure politikek dokumentuak nondik hartu izan dezaten."
 title = "Oraindik ez dago iturbururik konektatuta"
@@ -7899,18 +8754,57 @@ inUse = "Erabiltzen"
 total = "Konexioak"
 unused = "Erabili gabe"
 
+[portal.sources.networkFields.connection]
+helperText = "Zerbitzariaren helbidea eta kredentzialak dituen gordetako konexioa. Erreferentzia egiten dion iturburu bakoitzak berrerabiltzen du."
+label = "Konexioa"
+
+[portal.sources.networkFields.directory]
+helperText = "Zerbitzarian kontsultatu beharreko karpeta, saio-hasierako home-arekiko edo partekatze-erroarekiko erlatiboa. Utzi hutsik errorako."
+label = "Karpeta"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Kontsumitzeak fitxategi bakoitza zerbitzaritik kentzen du politika guztiek prozesatu ondoren."
+label = "Irakurketa modua"
+
+[portal.sources.networkFields.mode.options]
+consume = "Kontsumitu: prozesatu fitxategi bakoitza behin"
+snapshot = "Snapshot: berrirakurri karpeta exekuzio bakoitzean"
+
+[portal.sources.networkFields.recursive]
+label = "Karpetaren sakonera"
+
+[portal.sources.networkFields.recursive.options]
+all = "Sartu azpikarpetak"
+top = "Goiko maila bakarrik"
+
 [portal.sources.status]
 active = "Aktibo"
 disabled = "Desgaituta"
 unused = "Erabili gabe"
 
 [portal.sources.table]
+documents = "Dokumentuak"
 source = "Iturburua"
 status = "Egoera"
 usedBy = "Politikak"
 
+[portal.sources.types.box]
+description = "Ekarri dokumentuak zure taldeak dagoeneko partekatzen dituen Box karpetetatik."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Ekarri dokumentuak partekatutako Dropbox karpeta batetik."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Zure taldeak editorean prozesatutako dokumentuak, politika eta AI exekuzioetan zehar."
 label = "Editorea"
+noPolicies = "Oraindik ez da politikarik exekutatu editoretik."
+
+[portal.sources.types.email]
+description = "Bihurtu dedikatutako postontzi batera bidalitako eranskinak dokumentu."
+label = "Email sarrera-ontzia"
 
 [portal.sources.types.folder]
 description = "Begiratu zerbitzariko direktorio bat dokumentu berriak detektatzeko."
@@ -7943,25 +8837,80 @@ label = "Karpetaren sakonera"
 all = "Sartu azpikarpetak"
 top = "Goiko maila soilik"
 
+[portal.sources.types.ftp]
+description = "Kontsultatu FTP edo FTPS zerbitzari-karpeta bat dokumentu berrien bila."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Ekarri dokumentuak partekatutako Google Drive karpetetatik."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Zaindu SMB sare-partekatze bat dokumentu berrien bila."
+label = "Sare-unitatea"
+
+[portal.sources.types.onedrive]
+description = "Zaindu OneDrive karpetak dokumentu berrien bila."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Ekarri dokumentuak Amazon S3 edo S3 bateragarri den bucket batetik."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Bucket-a eta kredentzialak dituen gordetako konexioa. Erreferentzia egiten dion iturburu eta pipeline irteera bakoitzak berrerabiltzen du."
+label = "Konexioa"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Kontsumitzeak objektu bakoitza bucket-etik kentzen du politika guztiek prozesatu ondoren."
+label = "Irakurketa modua"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Kontsumitu: prozesatu objektu bakoitza behin"
+snapshot = "Snapshot: berrirakurri bucket-a exekuzio bakoitzean"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Aurrizki honekin hasten diren gakoak dituzten objektuak bakarrik prozesatzen dira."
+label = "Gako-aurrizkia"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Kontsultatu SFTP drop karpeta bat dokumentu berrien bila."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Ekarri dokumentuak SharePoint dokumentu-liburutegietatik."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Iturburua"
 
+[portal.sources.types.webhook]
+createNote = "Bidalketa-URL bat eta sinadura-sekretu bat sortzen dira webhook hau sortzen duzunean. Bidaltzaileek dokumentuak URL horretara POST bidez bidaltzen dituzte eta erreferentziatzen duten politikak iristean exekutatzen dira."
+description = "Jaso dokumentuak sinatutako HTTP POST bidez edozein kanpoko sistematik."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Bidalketa-URL"
+secretNote = "Sinadura-sekretua behin erakusten da, webhook-a sortzen denean. Iturburua berriro sortu aldatzeko."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiatu"
+done = "Eginda"
+secret = "Sinadura-sekretua"
+secretHelp = "Sinatu bidalketa bakoitzaren gorputz gordina gako honekin (HMAC-SHA256) eta bidali X-Stirling-Signature goiburu gisa."
+secretWarning = "Kopiatu sinadura-sekretua orain. Zure segurtasunerako behin bakarrik erakusten da eta ezin da gero berreskuratu."
+title = "Webhook sortuta"
+url = "Bidalketa-URL"
+usage = "Bidali dokumentu bakoitza POST bidez eskaeraren gorputz gordin gisa bidalketa-URL-ra eduki mota bitar batekin (application/pdf edo application/octet-stream). Erreferentzia egiten duten politikak automatikoki exekutatzen dira iristean."
+
 [portal.sources.wizard]
-back = "Atzera"
-cancel = "Utzi"
-continue = "Jarraitu"
-editTitle = "Editatu iturburua"
 name = "Izena"
 namePlaceholder = "adib. Erreklamazioen sarrera"
-save = "Gorde aldaketak"
-subtitle = "{{total}} urratsetatik {{current}} · {{label}}"
-title = "Konektatu iturburu bat"
 type = "Mota"
 
-[portal.sources.wizard.steps]
-chooseType = "Aukeratu mota"
-configure = "Konfiguratu"
-review = "Berrikusi eta konektatu"
+[portal.stepModal]
+close = "Itxi"
 
 [portal.usage]
 managePayment = "Kudeatu ordainketa"
@@ -8021,16 +8970,9 @@ summary = "Talde baten jabea da — kideen baliabideak eta partekatutako konfigu
 2 = "Atarirako sarbidea politika lehenetsiaren bidez"
 3 = "Member-ek egin dezakeen guztia"
 
-[portal.welcome]
-ariaLabel = "Ongi etorri Stirling PDF-ra"
-badge = "Open-source"
-installEditor = "Instalatu editorea"
-inviteTeammates = "Gonbidatu taldekideak"
-openInBrowser = "Ireki arakatzailean"
-perks = "Doan betiko · Self-hostable"
-subtitle = "Munduko PDF Editor seguruena doakoa da tamaina guztietako taldeentzat. 60+ PDF eragiketa eta SSO barne."
-title = "Ongi etorri"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Mugagabea"
 
 [printFile]
 title = "Inprimatu fitxategia"
@@ -8613,6 +9555,14 @@ text = "Biratu zure PDF orrialdeak erlojuaren noranzkoan edo kontrakoan 90 gradu
 [rotate.tooltip.header]
 title = "Biraketa ezarpenen ikuspegi orokorra"
 
+[ruler]
+clearAll = "Garbitu dena"
+hideAllLabels = "Ezkutatu etiketa guztiak"
+hideSmallLabels = "Ezkutatu etiketa txikiak"
+physicalValues = "Fisikoa"
+scaled = "Eskalatua"
+showAllLabels = "Erakutsi etiketa guztiak"
+
 [sanitize]
 desc = "Kaltegarriak izan daitezkeen elementuak kendu PDF fitxategietatik."
 sanitizationResults = "Saneatze-emaitzak"
@@ -8654,31 +9604,45 @@ label = "XMP metadatuak kendu"
 [sanitize.steps]
 settings = "Ezarpenak"
 
-[sanitizePdf]
-tags = "garbitu,seguru,segurtasuna,mehatxuak-kendu"
-
 [sanitizePDF]
 title = "PDF-a desinfektatu"
 
+[sanitizePdf]
+tags = "garbitu,seguru,segurtasuna,mehatxuak-kendu"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Doitu orrialdearen eskala"
 
+[scaleSettings]
+activeScale = "Eskala aktiboa"
+apply = "Aplikatu eskala"
+applyCalibration = "Aplikatu kalibrazioa"
+calculatedScale = "Kalkulatutako eskala"
+calibrate = "Kalibratu"
+calibrating = "Kalibratzen"
+calibrationDistanceRequired = "Sartu zero baino handiagoa den mundu errealeko distantzia bat"
+calibrationInvalid = "Ezin da eskala kalkulatu neurketa honetatik"
+calibrationPaperDistance = "Neurtutako orrialdeko distantzia: {{distance}}"
+calibrationTitle = "Kalibratu eskala"
+calibrationTooltip = "Neurtu distantzia ezagun bat eskala automatikoki kalkulatzeko"
+customScale = "Eskala pertsonalizatua"
+noneSet = "Ez da eskala pertsonalizaturik ezarri"
+presets = "Aurrez ezarritako eskalak"
+ratio = "Eskala-ratioa"
+ratioHelp = "Ratioa: orrialde-unitate 1 = mundu errealeko X unitate"
+ratioPlaceholder = "adib., 100"
+ratioPositive = "Ratioak zero baino handiagoa izan behar du"
+ratioRequired = "Ratioa beharrezkoa da"
+realDistance = "Mundu errealeko distantzia"
+realDistancePlaceholder = "adib., 5"
+reset = "Berrezarri lehenetsietara"
+unit = "Unitatea"
+unitInvalid = "Unitate baliogabea: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Angeluaren gutxieneko balioa:"
-10 = "Ezarri gehitutako eta ezabatutako ertzaren tamaina irteeran ertz zuriak saihesteko (lehenetsia: 1)."
-2 = "Ezarri eskatutako gutxieneko angelu absolutua irudia biratzeko (lehenetsia: 10)."
-3 = "Tolerantzia:"
-4 = "Ezarri kalkulatutako atzeko kolorearen inguruko kolorearen aldakuntza tartea (lehenetsia: 30)."
-5 = "Gutxieneko area:"
-6 = "Ezarri arearen gutxieneko balioa argazki batentzat (lehenetsia: 10000)."
-7 = "Inguruko area gutxienekoa:"
-8 = "Ezarri inguruko arearen gutxieneko balioa argazki batentzat"
-9 = "Ertzaren tamaina:"
-
 [scannerImageSplit]
 submit = "Irudi-eskaneoak erauzi"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Zer egiten duen"
 whatThisDoesDesc = "Automatikoki aurkitu eta erauzten du orri eskaneatu edo irudi konposatu bateko argazki bakoitza—eskuzko mozketarik gabe."
 whenToUse = "Noiz erabili"
 
+[ScannerImageSplit.selectText]
+1 = "Angeluaren gutxieneko balioa:"
+10 = "Ezarri gehitutako eta ezabatutako ertzaren tamaina irteeran ertz zuriak saihesteko (lehenetsia: 1)."
+2 = "Ezarri eskatutako gutxieneko angelu absolutua irudia biratzeko (lehenetsia: 10)."
+3 = "Tolerantzia:"
+4 = "Ezarri kalkulatutako atzeko kolorearen inguruko kolorearen aldakuntza tartea (lehenetsia: 30)."
+5 = "Gutxieneko area:"
+6 = "Ezarri arearen gutxieneko balioa argazki batentzat (lehenetsia: 10000)."
+7 = "Inguruko area gutxienekoa:"
+8 = "Ezarri inguruko arearen gutxieneko balioa argazki batentzat"
+9 = "Ertzaren tamaina:"
+
 [search]
 noResults = "Ez da emaitzarik aurkitu"
 placeholder = "Idatzi bilaketa-terminoa..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Zure Stirling-PDF zerbitzaria lineaz kanpo dago eta \
 [session]
 expired = "Zure saioa iraungi da. Freskatu orria eta saiatu berriro."
 
-[sessionManagement.tooltip]
-header = "Sinatze-saioen kudeaketa"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Parte-hartzaile berriak sinadura-ordenaren amaieran gehitzen dira"
-bullet2 = "Ezin dira parte-hartzaileak gehitu saioa amaitu ondoren"
-bullet3 = "Parte-hartzaile bakoitzak jakinarazpena jasotzen du bere txanda denean"
-description = "Saio aktibo batera parte-hartzaile gehiago gehi ditzakezu edozein unetan amaitu aurretik."
-title = "Parte-hartzaileak gehitzea"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Amaiera osoa</b>: Parte-hartzaile guztiek sinatu dute"
-bullet2 = "<b>Amaiera partziala</b>: Parte-hartzaile batzuek oraindik ez dute sinatu"
-bullet3 = "Sinatu gabe dauden parte-hartzaileak ez dira azken dokumentuan sartuko"
-bullet4 = "Behin amaituta, sinatutako PDFa fitxategi aktiboetan kargatu dezakezu"
-description = "Amaitzeak sinadura guztiak PDF sinatu bakarrean konbinatzen ditu. Ekintza hau ezin da desegin."
-title = "Saioaren amaiera"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Ezin dira sinatu duten parte-hartzaileak kendu"
-bullet2 = "Kendutako parte-hartzaileek ez dute gehiago jakinarazpenik jasoko"
-bullet3 = "Sinadura-ordena automatikoki doitzen da"
-description = "Parte-hartzaileak ken daitezke sinatu aurretik."
-title = "Parte-hartzaileak kentzea"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Sinadura bakoitza sekuentzialki aplikatzen da PDFari"
-bullet2 = "Beranduago sinatzen dutenek aurreko sinadurak ikus ditzakete"
-bullet3 = "Funtsezkoa da onarpen-fluxuetarako eta zaintza-kate legaletarako"
-description = "Saioa sortzean zehazten duzun ordenak zein sinatuko duen lehenik ezartzen du."
-title = "Sinadura-ordena"
-
 [settings]
 close = "Itxi"
 
+[settings.ai]
+documents = "Dokumentuak eta RAG"
+general = "Orokorra"
+limits = "Mugak eta errendimendua"
+models = "Ereduak eta hornitzaileak"
+title = "AI"
+
 [settings.configuration]
 advanced = "Aurreratua"
 database = "Datu-basea"
 endpoints = "Endpoints"
 features = "Eginbideak"
+folderAccess = "Karpetetarako sarbidea"
 mcp = "MCP Server"
 storageSharing = "Fitxategi biltegiratzea eta partekatzea"
 systemSettings = "Sistemaren ezarpenak"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "PDF editore lehenetsia"
 defaultPdfEditorActive = "Stirling PDF zure PDF editore lehenetsia da"
 defaultPdfEditorChecking = "Egiaztatzen..."
 defaultPdfEditorInactive = "Beste aplikazio bat dago lehenetsi gisa"
+defaultPdfEditorRemind = "Gogorarazi lehenetsi gisa ezartzea"
+defaultPdfEditorRemindDescription = "Erakutsi banner bat Stirling PDF zure PDF aplikazio lehenetsia ez denean."
 defaultPdfEditorSet = "Dagoeneko lehenetsia"
 defaultStartupView = "Abioan ikuspegi lehenetsia"
 defaultStartupViewDescription = "Aukeratu aplikazioa abiatzean ezkerreko zutabeko zein fitxa egongo den aktibo"
@@ -8817,9 +9771,18 @@ languageDescription = "Aukeratu bistaratze-hizkuntza"
 logout = "Amaitu saioa"
 setAsDefault = "Ezarri lehenetsia"
 theme = "Gaia"
+themeAccent = "Azentu-kolorea"
+themeAccentCustom = "Kolore pertsonalizatua"
+themeAccentCustomHint = "Pertsonalizatua (lehenetsiak gomendatzen dira)"
+themeAccentDark = "Modu iluneko azentu-kolorea"
+themeAccentDefault = "Lehenetsia"
+themeAccentDefaultHint = "Gai lehenetsia (gomendatua)"
+themeAccentDescription = "Botoiek, estekek eta nabarmentzeek hari jarraitzen diote, eta aplikazioa sotilki tindatzen du. Modu argiak eta ilunak bakoitzak berea dute. Sistemak aktibo dagoena erabiltzen du."
+themeAccentLight = "Modu argiko azentu-kolorea"
 themeDark = "Iluna"
 themeDescription = "Aldatu modu argi eta ilunaren artean"
 themeLight = "Argia"
+themeReset = "Berrezarri gaia lehenetsira"
 themeSystem = "System"
 title = "Orokorra"
 user = "Erabiltzailea"
@@ -8833,6 +9796,12 @@ intro = "Gaitu erabiltzaileen autentifikazioa, talde-kudeaketa eta lan-eremuaren
 learnMore = "Ikasi gehiago dokumentazioan"
 title = "Sistemako administratzaileentzat"
 
+[settings.general.loginLanding]
+description = "Aukeratu zein aplikazio irekitzen den Stirling Cloud-en saioa hasten duzunean."
+editor = "Editorea"
+processor = "Prozesadorea"
+title = "Saioa hasi ondoren"
+
 [settings.general.mode]
 fullscreen = "Pantaila osoa"
 sidebar = "Alboko barra"
@@ -9041,6 +10010,11 @@ security = "Segurtasuna"
 telegram = "Telegram"
 title = "Segurtasuna eta Autentifikazioa"
 
+[settings.signOut]
+confirm = "Ziur saioa amaitu nahi duzula?"
+submit = "Amaitu saioa"
+title = "Amaitu saioa"
+
 [settings.team]
 title = "Taldea"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Igo zerbitzarira"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "egin klik hemen"
+fallback = "Automatikoki ireki ez bada,"
+opening = "Swagger UI fitxa berri batean irekitzen..."
 tags = "api,dokumentazioa,swagger,endpointak,garapena"
 title = "API Dokumentazioa"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Tresna hau exekutatzeko, hautatu fitxategiak Fitxategi aktibo
 singleFileScope = "Honetara soilik aplikatzen da: {{fileName}}"
 viewerMode = "Aldatu fitxategi editoreara hainbat fitxategi hautatzeko."
 
+[toolFormat]
+ANY = "edozein fitxategi"
+CBR = "komiki-artxibo bat (CBR)"
+CBZ = "komiki-artxibo bat (CBZ)"
+CSV = "CSV fitxategi bat"
+EBOOK = "liburu elektroniko bat"
+EMAIL = "mezu elektroniko bat"
+EXCEL = "kalkulu-orri bat"
+HTML = "web-orri bat"
+IMAGE = "irudiak"
+JAVASCRIPT = "JavaScript fitxategi bat"
+JSON = "JSON fitxategi bat"
+MARKDOWN = "Markdown fitxategi bat"
+NONE = "fitxategirik ez"
+PCL = "PCL inprimatze-fitxategi bat"
+PDF = "PDF bat"
+PDF_ENCRYPTED = "pasahitzez babestutako PDF bat"
+POSTSCRIPT = "PostScript fitxategi bat"
+PPT = "aurkezpen bat"
+TEXT = "testu-fitxategi bat"
+VIDEO = "bideo bat"
+WORD = "Word dokumentu bat"
+XML = "XML fitxategi bat"
+XPS = "XPS dokumentu bat"
+ZIP = "ZIP artxibo bat"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Itzuli tresna guztietara"
 collapse = "Tolestu panela"
 expand = "Zabaldu panela"
 goBack = "Itzuli atzera"
+pdfTools = "PDF tresnak"
 placeholder = "Aukeratu tresna bat hasteko"
 premiumFeature = "Premium ezaugarria:"
+searchTools = "Bilatu tresnak"
 toolsHeader = "Tresnak"
 viewAllTools = "Ikusi tresna guztiak"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Ez da tresnarik aurkitu"
 quickAccess = "SARBIDE AZKARRA"
 searchPlaceholder = "Bilatu tresnak..."
 
-[toolPicker.categories]
-advancedTools = "Tresna aurreratuak"
-recommendedTools = "Gomendatutako tresnak"
-standardTools = "Tresna estandarrak"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formateatze aurreratua"
 automation = "Automatizazioa"
@@ -9950,16 +10950,31 @@ title = "Erabiltzaileak"
 you = "(zu)"
 
 [users.action]
+cancelInvite = "Utzi gonbidapena bertan behera"
 deleteTeam = "Ezabatu taldea"
 disableMfa = "Berrezarri MFA"
 move = "Mugitu taldera"
 reinstate = "Berrezarri"
 remove = "Kendu erakundetik"
+removeTeam = "Kendu taldetik"
 rename = "Aldatu taldearen izena"
 resetPw = "Berrezarri pasahitza"
 suspend = "Eten"
 unlock = "Desblokeatu kontua"
 
+[users.activity]
+daysAgo = "Duela {{count}} egun"
+hoursAgo = "Duela {{count}} ordu"
+justNow = "Oraintxe bertan"
+minutesAgo = "Duela {{count}} min"
+monthsAgo_one = "Duela {{count}} hilabete"
+monthsAgo_other = "Duela {{count}} hilabete"
+never = "Inoiz ez"
+weeksAgo_one = "Duela {{count}} aste"
+weeksAgo_other = "Duela {{count}} aste"
+yearsAgo_one = "Duela {{count}} urte"
+yearsAgo_other = "Duela {{count}} urte"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Politika onartzen du"
@@ -9967,11 +10982,14 @@ editor = "Editorea"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "{{email}} helbiderako gonbidapena bertan behera utzi? Ezingo dute uneko estekarekin bat egin."
+cancelInviteTitle = "Utzi gonbidapena bertan behera"
 deleteTeamBody = "Ezabatu {{name}} taldea? Taldeak hutsik egon behar du lehenik - mugitu kideak beste talde batera, eta ezin du integrazio-konfiguraziorik oraindik bere jabetzan eduki."
 deleteTeamTitle = "Ezabatu taldea"
 disableMfaBody = "Kendu {{name}}-ren MFA erregistroa? Hurrengo saio-hasieran berriro konfiguratuko du, beharrezkoa bada."
 disableMfaTitle = "Berrezarri MFA"
 removeBody = "Betiko kendu {{name}} erakundetik? Hau ezin da desegin."
+removeTeamBody = "{{name}} taldetik kendu? Kontua mantenduko dute, baina talde honen baliabideetarako sarbidea galduko dute."
 removeTitle = "Kendu kidea"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Erabiltzaile-izena"
 usernameError = "Erabiltzaile-izenak gutxienez 3 karaktere izan behar ditu"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "{{who}} erabiltzaileak gonbidatua"
+cancel = "Utzi bertan behera"
+count = "{{count}} zain"
+desc = "Oraindik sartu ez diren gonbidatuak. Eserleku bat mantentzen dute onartu arte."
+expiresInDays_one = "{{count}} egun barru iraungiko da"
+expiresInDays_other = "{{count}} egun barru iraungiko da"
+expiresToday = "Gaur iraungiko da"
+title = "Zain dauden gonbidapenak"
+
 [users.loadError]
 description = "Zerbait gaizki joan da backend-era konektatzean, edo ez duzu sarbiderik. Saiatu berriro."
 title = "Ezin izan dira kideak kargatu"
@@ -10212,9 +11240,11 @@ title = "Eranskinak"
 
 [viewer.bookmarks]
 bookmarkTitle = "Laster-markaren izenburua"
+bookmarkTitleRequired = "Laster-markaren izenburua beharrezkoa da"
 closeSidebar = "Itxi laster-marken alboko barra"
 collapseAll = "Tolestu laster-marka guztiak"
 expandAll = "Zabaldu laster-marka guztiak"
+searchPlaceholder = "Bilatu laster-markak"
 
 [viewer.comments]
 addComment = "Gehitu iruzkina"
@@ -10605,30 +11635,6 @@ title = "Ur‑markaren testua"
 image = "Irudia"
 text = "Testua"
 
-[wetSignature.tooltip]
-header = "Sinadura sortzeko metodoak"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Pertsonalizatu arkatzaren kolorea eta lodiera"
-bullet2 = "Garbitu eta berriz marraztu gustura geratu arte"
-bullet3 = "Ukipen-gailuetan funtzionatzen du (tabletak, telefonuak)"
-description = "Sortu eskuz idatzitako sinadura saguarekin edo ukipen-pantailarekin. Pertsonal eta egiazko sinaduretarako egokiena."
-title = "Marraztu sinadura"
-
-[wetSignature.tooltip.type]
-bullet1 = "Aukeratu letra-tipo anitzen artetik"
-bullet2 = "Pertsonalizatu testuaren tamaina eta kolorea"
-bullet3 = "Estandarizatutako sinaduretarako aproposa"
-description = "Sortu sinadura idatzitako testutik. Azkarra eta koherentea, enpresa-dokumentuetarako egokia."
-title = "Idatzi sinadura"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG eta bestelako irudi-formatuak onartzen ditu"
-bullet2 = "Atzeko plano gardenak gomendatzen dira emaitza onenak lortzeko"
-bullet3 = "Irudia sinadura-eremura egokitzeko tamainaz aldatuko da"
-description = "Igo aldez aurretik sortutako sinadura-irudia. Ideala sinadura eskaneatua edo enpresako logotipoa baduzu."
-title = "Igo sinadura-irudia"
-
 [workbenchBar]
 activeFiles = "Fitxategi aktiboak"
 annotations = "Anotazioak"
@@ -10652,6 +11658,7 @@ redact = "Zentsuratu"
 rotateLeft = "Biratu ezkerrera"
 rotateRight = "Biratu eskuinera"
 ruler = "Erregela / Neurtu"
+rulerSettings = "Eskala-ezarpenak"
 save = "Gorde"
 saveAll = "Gorde dena"
 saveAs = "Gorde honela"
diff --git a/frontend/editor/public/locales/fa-IR/translation.toml b/frontend/editor/public/locales/fa-IR/translation.toml
index b7519bc879..e1a11b82c3 100644
--- a/frontend/editor/public/locales/fa-IR/translation.toml
+++ b/frontend/editor/public/locales/fa-IR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "فایل‌ها انتخاب شدند"
 font = "فونت"
 fontSizeTooltip = "اندازه متن شماره صفحه بر حسب پوینت. اعداد بزرگ‌تر متن بزرگ‌تری ایجاد می‌کنند."
 fontTypeTooltip = "خانواده فونت برای شماره صفحات. بر اساس سبک سند خود انتخاب کنید."
-genericSubmit = "ارسال"
 green = "سبز"
 help = "راهنما"
-imgPrompt = "انتخاب تصویر(ها)"
 incorrectPasswordMessage = "رمز عبور فعلی نادرست است."
 info = "اطلاعات"
 invalidUndoData = "امکان واگردانی نیست: داده‌های عملیات نامعتبر است"
@@ -62,7 +60,6 @@ loginAgreementTitle = "توافق‌نامهٔ ورود"
 logOut = "خروج از حساب"
 marginTooltip = "فاصله بین شماره صفحه و لبه صفحه."
 moreOptions = "گزینه‌های بیشتر"
-multiPdfPrompt = "انتخاب فایل‌های PDF (دو یا بیشتر)"
 never = "هرگز"
 no = "خیر"
 noFileSelected = "هیچ فایلی انتخاب نشده است. لطفاً یک فایل بارگذاری کنید."
@@ -80,7 +77,6 @@ pageOrderPrompt = "ترتیب صفحات سفارشی (یک لیست از شما
 pages = "صفحات"
 pageSelectionPrompt = "انتخاب صفحات سفارشی (یک لیست از شماره صفحات به صورت جدا شده با کاما وارد کنید مانند 1,5,6 یا از توابعی مانند 2n+1 استفاده کنید):"
 password = "رمز عبور"
-pdfPrompt = "انتخاب فایل(های) PDF"
 pin = "سنجاق کردن فایل (پس از اجرای ابزار فعال بماند)"
 pro = "نسخه حرفه‌ای"
 processingComplete = "فایل شما آماده است."
@@ -356,6 +352,7 @@ text = "این مجوزها کنترل می‌کنند کاربران چه کا
 title = "تغییر مجوزها"
 
 [addStamp]
+preview = "پیش‌نمایش مهر"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "دانلود دستی: روی پیوندها کلیک کنید و
 noLanguages = "هیچ زبان tessdata در پوشهٔ پیکربندی‌شده یافت نشد."
 permissionNotice = "مسیر tessdata قابل نوشتن نیست. دانلودها در مرورگر باز می‌شوند؛ لطفاً فایل‌های .traineddata را به‌صورت دستی در پوشهٔ tessdata ذخیره کنید."
 
+[admin.settings.ai.documents]
+description = "مدل embedding و تنظیمات بازیابی مورد استفاده برای پاسخ به پرسش‌ها درباره اسناد را پیکربندی کنید. پس از ذخیره، روی موتور AI اعمال می‌شود."
+title = "اسناد و RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "برای استفاده از اعتبارنامه محیطی خود موتور، خالی بگذارید. برای استقرارهای خودمیزبان تک‌موتوره اعمال می‌شود."
+generic = "کلید API embedding"
+openai = "کلید OpenAI API"
+setPlaceholder = "ذخیره شده - برای نگه داشتن کلید فعلی خالی بگذارید"
+voyageai = "کلید VoyageAI API"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL پایه endpoint embedding سازگار با OpenAI / Ollama، مانند http://ollama:11434/v1. باید به یک endpoint داخلی قابل اعتماد اشاره کند (حساس به SSRF)."
+label = "URL پایه embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "نام مدل embedding. متن آزاد؛ پیشنهادها فقط راهنما هستند."
+label = "مدل embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "ارائه‌دهنده‌ای که برای تبدیل متن سند به embeddingهای برداری استفاده می‌شود."
+label = "ارائه‌دهنده embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "حداکثر تعداد جست‌وجوهای بازیابی که عامل می‌تواند در هر درخواست اجرا کند."
+label = "حداکثر جست‌وجوها"
+
+[admin.settings.ai.documents.reindexNote]
+body = "تغییر مدل embedding بلافاصله اعمال می‌شود، اما اسنادی که با مدل قبلی ایندکس شده‌اند باید دوباره ایندکس شوند تا جست‌وجو نتایج درست برگرداند."
+title = "ایندکس‌سازی دوباره لازم است"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "اگر مدل embedding را تغییر داده‌اید، اسناد موجود را دوباره ایندکس کنید تا جست‌وجو از مدل جدید استفاده کند."
+
+[admin.settings.ai.documents.topK]
+description = "تعداد مرتبط‌ترین بخش‌های بازیابی‌شده در هر جست‌وجو."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling را به موتور Python AI متصل کنید و قابلیت‌های AI قابل ارائه را انتخاب کنید. تغییرات پس از راه‌اندازی مجدد اعمال می‌شوند."
+title = "موتور AI"
+
+[admin.settings.ai.general.capabilities]
+description = "ویژگی‌های جداگانه AI را روشن یا خاموش کنید. ویژگی‌های غیرفعال در برنامه پنهان می‌شوند."
+title = "قابلیت‌ها"
+
+[admin.settings.ai.general.enabled]
+description = "کلید اصلی. وقتی خاموش باشد، هیچ ابزار، عامل یا فراخوانی موتور AI در دسترس نیست."
+label = "فعال‌سازی AI"
+
+[admin.settings.ai.general.features.chat]
+description = "دستیار گفت‌وگویی برای کار با PDFها."
+label = "دستیار چت"
+
+[admin.settings.ai.general.features.classify]
+description = "اسناد را به‌طور خودکار بر اساس نوع یا محتوا دسته‌بندی کنید."
+label = "دسته‌بندی سند"
+
+[admin.settings.ai.general.features.createPdf]
+description = "ایجاد یک PDF جدید (مثلاً از HTML) از طریق یک عامل AI."
+label = "ایجاد PDF از prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "پرسش بپرسید و پاسخ‌هایی دریافت کنید که بر اساس یک سند بارگذاری‌شده هستند."
+label = "پرسش‌های سند"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "اسناد را برای خطاهای ریاضی و عددی بررسی کنید."
+label = "بازرس ریاضی"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "افزودن دیدگاه‌های بازبینی و یادداشت‌های نوشته‌شده توسط AI به یک PDF."
+label = "عامل دیدگاه PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "مهلت زمانی برای عملیات سنگین‌تر عامل، مانند ایجاد سند."
+label = "مهلت زمانی عملیات طولانی‌مدت (ثانیه)"
+
+[admin.settings.ai.general.note]
+body = "موتور AI به‌عنوان یک سرویس جداگانه اجرا می‌شود. راز مشترک آن"
+body2 = "از طریق یک متغیر محیطی کانتینر تنظیم می‌شود. کلیدهای API ارائه‌دهنده را می‌توان در این صفحات وارد کرد یا به‌عنوان متغیرهای محیطی موتور ارائه داد؛ کلیدهای واردشده در اینجا هنگام ذخیره به موتور ارسال می‌شوند."
+title = "درباره موتور AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "مهلت زمانی برای پاسخ‌های چت جریانی (توکن‌به‌توکن)."
+label = "مهلت زمانی جریان (ثانیه)"
+
+[admin.settings.ai.general.test]
+button = "آزمایش اتصال"
+failBody = "موتور AI پاسخ نداد. URL را بررسی کنید، مطمئن شوید کانتینر موتور در حال اجراست و AI فعال است (پس از فعال‌سازی، راه‌اندازی مجدد لازم است)."
+failTitle = "موتور AI در دسترس نیست"
+okBody = "موتور AI به بررسی سلامت پاسخ داد."
+okTitle = "موتور AI در دسترس است"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "مهلت زمانی برای درخواست‌های استاندارد AI به موتور."
+label = "مهلت زمانی درخواست (ثانیه)"
+
+[admin.settings.ai.general.url]
+description = "URL داخلی موتور Python AI، مانند http://stirling-pdf-engine:5001."
+label = "URL موتور AI"
+
+[admin.settings.ai.limits]
+description = "محافظ‌هایی برای میزان کاری که درخواست‌های AI می‌توانند انجام دهند و تعداد اجرای هم‌زمان آن‌ها. پس از ذخیره، روی موتور AI اعمال می‌شود."
+title = "محدودیت‌ها و عملکرد"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "محافظ: درخواست‌های AI را که متن استخراج‌شده آن‌ها از این طول بیشتر است رد کنید."
+label = "حداکثر نویسه در هر درخواست"
+
+[admin.settings.ai.limits.maxPages]
+description = "محافظ: درخواست‌های AI با بیش از این تعداد صفحه PDF را رد کنید."
+label = "حداکثر صفحات در هر درخواست"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "حداکثر فراخوانی‌های هم‌زمان مدل در حال اجرا در کل موتور."
+label = "حداکثر هم‌زمانی مدل"
+
+[admin.settings.ai.models]
+description = "ارائه‌دهنده LLM و مدل‌های هوشمند/سریع مورد استفاده موتور AI را انتخاب کنید. پس از ذخیره، روی موتور AI اعمال می‌شود."
+title = "مدل‌ها و ارائه‌دهندگان"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "کلید Anthropic API"
+description = "برای استفاده از اعتبارنامه محیطی خود موتور، خالی بگذارید. برای استقرارهای خودمیزبان تک‌موتوره اعمال می‌شود."
+generic = "کلید API"
+openai = "کلید OpenAI API"
+setPlaceholder = "ذخیره شده - برای نگه داشتن کلید فعلی خالی بگذارید"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL پایه endpoint سازگار با OpenAI / Ollama، مانند http://ollama:11434/v1."
+label = "URL پایه ارائه‌دهنده"
+warning = "URL پایه باید به یک endpoint داخلی قابل اعتماد اشاره کند. موتور درخواست‌های سمت سرور را به آن ارسال می‌کند، بنابراین مقدار غیرقابل اعتماد حساس به SSRF است."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "حداکثر توکن‌های خروجی برای مدل سریع."
+label = "حداکثر توکن‌های مدل سریع"
+
+[admin.settings.ai.models.fastModel]
+description = "مدل ارزان‌تر و سریع‌تر برای کارهای سبک. متن آزاد؛ پیشنهادها فقط راهنما هستند."
+label = "مدل سریع"
+
+[admin.settings.ai.models.provider]
+description = "موتور با کدام ارائه‌دهنده LLM ارتباط برقرار می‌کند."
+label = "ارائه‌دهنده"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "حداکثر توکن‌های خروجی برای مدل هوشمند."
+label = "حداکثر توکن‌های مدل هوشمند"
+
+[admin.settings.ai.models.smartModel]
+description = "مدل با قابلیت بالا برای استدلال پیچیده. متن آزاد؛ پیشنهادها فقط راهنما هستند."
+label = "مدل هوشمند"
+
+[admin.settings.ai.saved]
+body = "تغییرات به‌طور خودکار به موتور AI ارسال می‌شوند."
+bodyNoPush = "تنظیمات ذخیره شد. دفعه بعد که موتور AI پیکربندی خود را دریافت کند، اعمال می‌شوند."
+title = "تنظیمات AI ذخیره شد"
+
 [admin.settings.badge]
 clickToUpgrade = "برای مشاهده جزئیات طرح کلیک کنید"
 
@@ -938,6 +1094,25 @@ label = "تولید مجدد هنگام راه‌اندازی"
 description = "تعداد روزهای اعتبار گواهی"
 label = "اعتبار گواهی (روز)"
 
+[admin.settings.folderAccess]
+description = "دایرکتوری‌هایی که منابع پوشه و خروجی‌های پوشه اجازه خواندن از آن‌ها و نوشتن در آن‌ها را دارند. این یک مرز امنیتی است: اتوماسیون‌ها هرگز نمی‌توانند به مسیر سروری خارج از این فهرست اشاره کنند."
+securityNote = "برای غیرفعال‌سازی کامل منابع و خروجی‌های پوشه، این را خالی بگذارید. دایرکتوری پیکربندی خود Stirling همیشه ممنوع است."
+title = "دسترسی پوشه"
+
+[admin.settings.folderAccess.implied]
+description = "این دایرکتوری‌های مدیریت‌شده توسط Stirling همیشه مجاز هستند و اینجا قابل تغییر نیستند."
+serverStorage = "ذخیره‌سازی فایل سرور"
+title = "همیشه مجاز"
+watchedFolder = "پوشه تحت‌نظر پایپ‌لاین"
+
+[admin.settings.folderAccess.roots]
+add = "افزودن"
+empty = "هیچ پوشه‌ای مجاز نیست. منابع و خروجی‌های پوشه در حال حاضر غیرفعال هستند."
+hint = "مسیرهای مطلق را وارد کنید، برای مثال /data/inbox."
+label = "ریشه‌های پوشه مجاز"
+placeholder = "/data/inbox"
+remove = "حذف ریشه پوشه"
+
 [admin.settings.general]
 description = "پیکربندی تنظیمات سراسری برنامه شامل برندینگ و رفتار پیش‌فرض."
 system = "سیستم"
@@ -1842,6 +2017,15 @@ export = "برون‌بری"
 accessDenied = "دسترسی رد شد"
 insufficientPermissions = "شما مجوز انجام این اقدام را ندارید."
 
+[auth.callback]
+completing = "در حال تکمیل احراز هویت"
+invalidToken = "ورود OAuth ناموفق بود - توکن نامعتبر است."
+missingToken = "ورود OAuth ناموفق بود - توکنی دریافت نشد."
+oauthFailed = "ورود OAuth ناموفق بود. لطفاً دوباره تلاش کنید."
+pleaseWait = "لطفاً صبر کنید تا ورود شما را تکمیل کنیم."
+signedOut = "از سیستم خارج شده‌اید. لطفاً دوباره وارد شوید."
+windowMayClose = "پس از تکمیل، می‌توانید این پنجره را ببندید."
+
 [auth.displayName]
 guest = "مهمان"
 user = "کاربر"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "اسناد PDF را با حذف محتوای بالقوه
 description = "این ابزار فایل‌های PDF را بر اساس محتوایشان به‌صورت خودکار تغییر نام می‌دهد. سند را تحلیل می‌کند تا مناسب‌ترین عنوان را از متن بیابد."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "چرخش خودکار"
+tags = "چرخش خودکار،اصلاح جهت،وارونه،افقی،صاف کردن،جهت‌دهی،تشخیص جهت،تصحیح چرخش،جهت‌دهی خودکار،اسکن‌شده،OSD"
+
+[autoRotate.confidenceThreshold]
+title = "آستانه اطمینان"
+
+[autoRotate.detectionMode]
+auto = "خودکار"
+osd = "فقط OCR"
+text = "فقط متن"
+title = "روش تشخیص"
+
+[autoRotate.error]
+failed = "هنگام چرخش خودکار PDF خطایی رخ داد."
+
+[autoRotate.inferUndetected]
+title = "چرخاندن صفحات با اطمینان پایین برای همسان‌سازی"
+
+[autoRotate.report]
+applied = "{{degrees}}° ساعتگرد"
+confidenceValue = "اطمینان {{value}}"
+noChange = "بدون تغییر"
+pageLabel = "صفحه {{number}}"
+summary = "{{rotated}} از {{total}} صفحه چرخانده شد، {{unchanged}} بدون تغییر باقی ماند"
+title = "گزارش تشخیص"
+
+[autoRotate.report.method]
+inferred = "همسان‌سازی شد"
+none = "نادیده گرفته شد"
+osd = "OCR"
+text = "متن"
+
+[autoRotate.report.note]
+belowThreshold = "کمتر از آستانه"
+blankPage = "صفحه خالی است"
+inferredFromDocument = "همانند سایر صفحات"
+noDominantDirection = "جهت‌های متنی ترکیبی"
+osdFailed = "متن قابل خواندن یافت نشد"
+osdNoVerdict = "مشخص نشد کدام سمت بالا است"
+tesseractUnavailable = "OCR نصب نیست"
+tooFewGlyphs = "متن بسیار کم است"
+
+[autoRotate.results]
+title = "نتایج چرخش خودکار"
+
+[autoRotate.settings]
+title = "تنظیمات"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "این بررسی باید تا چه حد مطمئن باشد تا صفحه چرخانده شود. برای چرخاندن صفحات بیشتر آن را کاهش دهید، و برای دست‌نخورده ماندن صفحات بیشتر آن را افزایش دهید."
+title = "آستانه اطمینان"
+
+[autoRotate.tooltip.description]
+text = "تشخیص می‌دهد هر صفحه باید به کدام سمت باشد و آن را به جهت درست می‌چرخاند. صفحاتی که از قبل درست هستند، بدون تغییر باقی می‌مانند."
+
+[autoRotate.tooltip.detectionMode]
+text = "خودکار ابتدا متن روی صفحه را می‌خواند، سپس اگر کافی نباشد صفحه را به‌عنوان تصویر بررسی می‌کند. فقط متن بررسی تصویر را رد می‌کند که برای اسنادی که هرگز اسکن نشده‌اند سریع‌تر است. فقط OCR هر صفحه را به‌عنوان تصویر در نظر می‌گیرد."
+title = "روش تشخیص"
+
+[autoRotate.tooltip.header]
+title = "چرخش خودکار"
+
+[autoRotate.tooltip.inferUndetected]
+text = "صفحات خالی یا تقریباً خالی به‌تنهایی قابل بررسی نیستند. وقتی همه صفحاتی که قابل خواندن بوده‌اند به یک چرخش یکسان نیاز داشته باشند، این صفحات نیز برای همسان‌سازی با آن‌ها چرخانده می‌شوند."
+title = "چرخاندن صفحات با اطمینان پایین برای همسان‌سازی"
+
 [autoSizeSplitPDF]
 tags = "PDF، تقسیم، سند، سازماندهی"
 
@@ -2189,33 +2440,6 @@ keywords = "کلیدواژه‌ها: odd, even"
 numbers = "اعداد/بازه‌ها: 5, 10-20"
 progressions = "پیشروی‌ها: 3n، 4n+1"
 
-[certificateChoice.tooltip]
-header = "انواع گواهی"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "مدیریت‌شده توسط مدیران سیستم"
-bullet2 = "مشترک بین کاربران مجاز"
-bullet3 = "نمایانگر هویت شرکت، نه فرد"
-bullet4 = "مناسب برای: اسناد رسمی، امضاهای تیمی"
-description = "یک گواهی مشترک که توسط سازمان شما ارائه می‌شود. برای اختیار امضای سراسری شرکت استفاده می‌شود."
-title = "گواهی سازمان"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "در اولین استفاده به‌طور خودکار ایجاد می‌شود"
-bullet2 = "به حساب کاربری شما متصل است"
-bullet3 = "قابل اشتراک با دیگر کاربران نیست"
-bullet4 = "مناسب برای: اسناد شخصی، پاسخ‌گویی فردی"
-description = "یک گواهی منحصربه‌فرد که به‌طور خودکار برای حساب کاربری شما ایجاد می‌شود. مناسب برای امضاهای فردی."
-title = "گواهی شخصی"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "نیازمند فایل و گذرواژه P12/PFX"
-bullet2 = "می‌تواند توسط مراجع صدور گواهی خارجی صادر شود"
-bullet3 = "سطح اعتماد بالاتر برای اسناد حقوقی"
-bullet4 = "مناسب برای: قراردادهای الزام‌آور قانونی، اعتبارسنجی خارجی"
-description = "از فایل گواهی PKCS#12 خود استفاده کنید. کنترل کامل روی ویژگی‌های گواهی را فراهم می‌کند."
-title = "بارگذاری P12 سفارشی"
-
 [certSign]
 awaitingSignatures = "در انتظار امضاها"
 chooseCertificate = "انتخاب فایل گواهی"
@@ -2542,34 +2766,6 @@ server = "سرور"
 stepTitle = "منبع گواهی"
 upload = "بارگذاری"
 
-[certSign.tooltip.header]
-title = "درباره مدیریت امضاها"
-
-[certSign.tooltip.overview]
-bullet1 = "بررسی امضاهای موجود و اعتبار آن‌ها"
-bullet2 = "مشاهده اطلاعات دقیق درباره امضاکنندگان و گواهی‌ها"
-bullet3 = "افزودن امضاهای دیجیتال جدید برای ایمن‌سازی اسناد شما"
-bullet4 = "پشتیبانی از چندین فایل با پیمایش آسان"
-text = "این ابزار به شما امکان می‌دهد بررسی کنید آیا PDFهای شما به‌صورت دیجیتال امضا شده‌اند و امضاهای دیجیتال جدید اضافه کنید. امضاهای دیجیتال ثابت می‌کنند چه کسی سند را ایجاد یا تأیید کرده است و نشان می‌دهند از زمان امضا تغییر کرده یا نه."
-title = "این ابزار چه می‌کند؟"
-
-[certSign.tooltip.signing]
-bullet1 = "پشتیبانی از فرمت‌های PEM، PKCS12، JKS و گواهی سرور"
-bullet2 = "گزینه‌ای برای نمایش یا پنهان کردن امضا روی PDF"
-bullet3 = "افزودن دلیل، موقعیت و نام امضاکننده"
-bullet4 = "انتخاب صفحه‌ای که امضای قابل‌نمایش روی آن قرار می‌گیرد"
-bullet5 = "استفاده از گواهی سرور برای گزینه ساده 'Sign with Stirling-PDF'"
-text = "برای امضای یک PDF، به یک گواهی دیجیتال (مانند PEM، PKCS12 یا JKS) نیاز دارید. می‌توانید امضا را روی سند قابل‌نمایش کنید یا آن را فقط برای امنیت نامرئی نگه دارید."
-title = "افزودن امضاها"
-
-[certSign.tooltip.validation]
-bullet1 = "نمایش معتبر یا نامعتبر بودن امضاها"
-bullet2 = "نمایش اطلاعات امضاکننده و تاریخ امضا"
-bullet3 = "بررسی اینکه آیا سند پس از امضا ویرایش شده است یا خیر"
-bullet4 = "امکان استفاده از گواهی‌های سفارشی برای اعتبارسنجی"
-text = "وقتی امضاها را بررسی می‌کنید، ابزار به شما می‌گوید آیا معتبرند، چه کسی سند را امضا کرده، چه زمانی امضا شده و اینکه آیا سند از زمان امضا تغییر کرده است یا نه."
-title = "بررسی امضاها"
-
 [changeCreds]
 changeUsername = "نام کاربری خود را به‌روزرسانی کنید. پس از به‌روزرسانی از حساب خارج خواهید شد."
 credsUpdated = "حساب به‌روزرسانی شد"
@@ -2824,6 +3020,7 @@ next = "بعدی"
 preview = "پیش‌نمایش"
 previous = "قبلی"
 refresh = "تازه‌سازی"
+remaining = "باقی‌مانده"
 retry = "تلاش مجدد"
 save = "ذخیره"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "پایش پیشرفته"
-allInOneWorkspace = "فضای کاری یکپارچه PDF (نمایشگر، ابزارها و عامل)"
-apiSandbox = "محیط آزمایشی API"
-dedicatedSupportSlas = "پشتیبانی اختصاصی و SLAها"
-fasterThroughput = "توان عبوری ۱۰ برابری"
-fullyPrivateFiles = "فایل‌ها کاملاً خصوصی"
-largeFileProcessing = "پردازش فایل‌های بزرگ"
-orgWideAccess = "کنترل‌های دسترسی در سطح سازمان"
-premiumAiModels = "مدل‌های هوش مصنوعی پریمیوم"
-prioritySupport = "پشتیبانی اولویت‌دار"
-privateDocCloud = "ابر اسناد خصوصی"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "دسترسی امن API"
-standardThroughput = "توان عبوری استاندارد"
-unlimitedApiAccess = "دسترسی نامحدود به API"
-unlimitedSeats = "کاربران نامحدود"
-
 [crop]
 autoCrop = "برش خودکار فضاهای خالی"
 noFileSelected = "برای شروع برش یک فایل PDF انتخاب کنید"
@@ -3346,6 +3525,7 @@ message = "تنظیم برنامه پیش‌فرض PDF ناموفق بود"
 title = "خطا"
 
 [defaultApp.prompt]
+dontRemind = "دیگر به من یادآوری نکن"
 message = "Stirling PDF را برنامه پیش‌فرض خود برای باز کردن فایل‌های PDF کنید."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "سفارشی‌سازی گروه‌ها"
 dropHint = "برای شروع فایل‌ها را باز کنید"
 dropToAdd = "Drop files to add"
 expand = "گسترش نوار کناری"
-files = "فایل‌ها"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive پیکربندی نشده است"
 leaveMyFiles = "خروج از فایل‌های من"
+library = "کتابخانه PDF"
 myFiles = "فایل‌های من"
 noFiles = "هنوز فایلی نیست"
 openFileManager = "باز کردن مدیریت فایل"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "افزودن"
-addLabel = "افزودن برچسب…"
-categoryIconAria = "انتخاب آیکون برای {{name}}"
-createCategory = "ایجاد دسته"
-delete = "حذف دسته"
 done = "انجام شد"
-hide = "پنهان کردن دسته"
-newCategory = "نام دسته جدید…"
-removeLabel = "حذف {{name}}"
-rename = "تغییر نام"
 reset = "بازنشانی به پیش‌فرض‌ها"
-search = "جستجوی برچسب‌ها…"
-show = "نمایش دسته"
 subtitle = "فایل‌های خود را در دسته‌های والد گروه‌بندی کنید. برچسب‌های موجود یا جدید را به یک دسته اضافه کنید، نام آن را تغییر دهید، یا دسته خودتان را بسازید. فایل‌هایی که در هیچ‌یک از دسته‌های شما نیستند زیر «سایر» نمایش داده می‌شوند."
 title = "دسته‌های نوار کناری"
 
@@ -3808,6 +3977,7 @@ refresh = "نوسازی از سرور"
 remove = "حذف"
 removeVersion = "حذف این نسخه"
 rename = "تغییر نام"
+renamed = "تغییر نام داده شد"
 renameFolder = "تغییر نام پوشه"
 resizeFolderTree = "تغییر اندازهٔ درخت پوشه‌ها (کلیدهای جهت، Shift برای گام‌های بزرگ‌تر؛ دوبار کلیک برای برازش خودکار)"
 save = "ذخیره"
@@ -3910,9 +4080,7 @@ count = "فایل‌ها"
 folder = "پوشه"
 labels = "برچسب‌ها"
 modified = "تغییر یافته"
-name = "نام"
 size = "حجم"
-toolHistoryAtVersion = "زنجیرهٔ ابزار تجمیعی"
 totalSize = "حجم کل"
 type = "نوع"
 versionHistory = "سفر نسخه"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "همه ذخیره شد"
+extractCsvError = "استخراج CSV ناموفق بود"
+extractXlsxError = "استخراج XLSX ناموفق بود"
 flattenAfterFilling = "مسطح‌سازی پس از پرکردن"
+requiredAbbreviation = "الزامی"
+requiredFieldsError = "لطفاً همه فیلدهای الزامی را پر کنید"
 rescanFields = "اسکن دوبارهٔ فیلدها"
 rescanFormFields = "اسکن دوبارهٔ فیلدهای فرم"
 save = "ذخیره"
+saveShortcut = "Ctrl+S برای ذخیره"
+unsavedChanges = "تغییرات ذخیره‌نشده"
 
 [formFill.sidebar]
 close = "بستن نوار کناری"
@@ -4309,6 +4484,11 @@ desc = "به‌طور خودکار نام فایل PDF را بر اساس سرب
 tags = "تشخیص خودکار,بر پایه سربرگ,سازمان‌دهی,نام‌گذاری مجدد"
 title = "تغییر نام خودکار فایل PDF"
 
+[home.autoRotate]
+desc = "جهت هر صفحه را تشخیص دهید و آن را به‌طور خودکار راست‌قامت بچرخانید."
+tags = "چرخش خودکار،اصلاح جهت،وارونه،افقی،صاف کردن،جهت‌دهی،تشخیص جهت،تصحیح چرخش،جهت‌دهی خودکار،اسکن‌شده،OSD"
+title = "چرخش خودکار"
+
 [home.autoSizeSplitPDF]
 tags = "خودکار,تفکیک,اندازه"
 title = "تقسیم خودکار بر اساس اندازه/تعداد"
@@ -4608,13 +4788,13 @@ hint = "یک فایل تصویر PNG، JPG، SVG یا تصویر دیگر را 
 label = "بارگذاری تصویر"
 placeholder = "انتخاب فایل تصویر"
 
-[imageToPdf]
-tags = "تبدیل،عکس،jpg،تصویر،عکس"
-
 [imageToPDF]
 header = "تبدیل تصویر به PDF"
 title = "تبدیل تصویر به PDF"
 
+[imageToPdf]
+tags = "تبدیل،عکس،jpg،تصویر،عکس"
+
 [infoBanner]
 dismiss = "بستن"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "شما دعوت شده‌اید!"
 
 [landing]
 addFiles = "افزودن فایل‌ها"
-heroSubtitle = "برای شروع یک PDF موجود را بکشید و رها کنید یا اضافه کنید."
 mobileUpload = "آپلود از موبایل"
 openFromComputer = "باز کردن از رایانه"
 uploadFromComputer = "بارگذاری از رایانه"
-workbenchEmptyStateHero = "یک PDF را هرجا رها کنید"
 
 [language]
 direction = "rtl"
@@ -4696,6 +4874,7 @@ login = "ورود"
 magicLinkSent = "لینک جادویی به {{email}} ارسال شد! ایمیل خود را بررسی کرده و برای ورود روی لینک کلیک کنید."
 mfaCode = "کد احراز هویت"
 mfaRequired = "کد احراز هویت دومرحله‌ای لازم است"
+noAccount = "حساب کاربری ندارید؟"
 or = "یا"
 password = "گذرواژه"
 passwordChangedSuccess = "گذرواژه با موفقیت تغییر کرد! لطفاً با گذرواژه جدید خود وارد شوید."
@@ -4715,26 +4894,10 @@ signInWith = "ورود با"
 title = "ورود"
 unexpectedError = "خطای غیرمنتظره: {{message}}"
 updatePassword = "به‌روزرسانی گذرواژه"
-useEmailInstead = "ورود با ایمیل"
 useMagicLink = "به‌جای آن از لینک جادویی استفاده کنید"
 username = "نام کاربری"
 youAreLoggedIn = "وارد شده‌اید!"
 
-[login.slides.edit]
-alt = "ویرایش PDFها"
-subtitle = "با بیش از دوازده ابزار برای پنهان‌سازی، امضا، خواندن و دستکاری PDFها، مطمئناً آنچه می‌خواهید را پیدا می‌کنید."
-title = "ویرایش PDFها برای نمایش/ایمن‌سازی اطلاعات موردنظر شما"
-
-[login.slides.overview]
-alt = "نمای کلی Stirling PDF"
-subtitle = "یک مجموعه ابری با اولویت حریم خصوصی برای PDFها که امکان تبدیل، امضا، پنهان‌سازی و مدیریت اسناد را به‌همراه 50+ ابزار قدرتمند دیگر فراهم می‌کند."
-title = "همه نیازهای PDF شما در یک‌جا."
-
-[login.slides.secure]
-alt = "ایمن‌سازی PDFها"
-subtitle = "به‌سادگی گذرواژه اضافه کنید، محتوا را پنهان‌سازی کنید و گواهی‌ها را مدیریت کنید."
-title = "از اطلاعات حساس در PDFهای خود محافظت کنید"
-
 [margin]
 large = "بزرگ"
 medium = "متوسط"
@@ -4976,6 +5139,7 @@ pinButton = "اگر می‌خواهید فایل‌ها پس از اجرای ا
 results = "پس از پایان اجرای ابزار، گام <strong>Review</strong> پیش‌نمایشی از نتایج را در این پنل نشان می‌دهد و به شما اجازه می‌دهد عملیات را واگردانی یا فایل را دانلود کنید."
 runButton = "پس از پیکربندی ابزار، این دکمه اجازه می‌دهد ابزار را روی همه PDFهای انتخاب‌شده اجرا کنید."
 selectCropTool = "بیایید ابزار <strong>Crop</strong> را انتخاب کنیم تا نحوه استفاده از یکی از ابزارها را نشان دهیم."
+stepOf = "مرحله {{current}} از {{total}}"
 toolInterface = "این رابط ابزار <strong>Crop</strong> است. همان‌طور که می‌بینید فعلاً چیز زیادی آن‌جا نیست چون هنوز فایل‌های PDF برای کار اضافه نکرده‌ایم."
 workbench = "این <strong>Workbench</strong> است - ناحیه اصلی که در آن PDFهای خود را مشاهده و ویرایش می‌کنید."
 wrapUp = "همه‌چیز آماده است! شما با نواحی اصلی برنامه و نحوه استفاده از آن‌ها آشنا شدید. هر زمان خواستید برای مشاهده دوباره این تور روی دکمه <strong>راهنما</strong> کلیک کنید."
@@ -4988,6 +5152,26 @@ showMeAround = "راهنمایی کن"
 skipForNow = "فعلاً رد کن"
 skipTheTour = "از تور بگذر"
 
+[onboarding.checklist]
+dismiss = "رد کردن"
+title = "راه‌اندازی Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Stirling را به‌صورت بومی روی دستگاه خود اجرا کنید"
+title = "دانلود Stirling برای دسکتاپ"
+
+[onboarding.checklist.inviteTeam]
+description = "با تیم خود همکاری کنید"
+title = "دعوت از اعضای تیم"
+
+[onboarding.checklist.shareAnalytics]
+description = "به بهبود Stirling کمک کنید"
+title = "اشتراک‌گذاری داده‌های استفاده ناشناس"
+
+[onboarding.checklist.takeTour]
+description = "در یک مرور سریع ببینید Stirling چگونه کار می‌کند"
+title = "شروع تور"
+
 [onboarding.desktopInstall]
 body = "Stirling به‌صورت برنامه دسکتاپ بهترین عملکرد را دارد. می‌توانید آفلاین از آن استفاده کنید، سریع‌تر به اسناد دسترسی داشته باشید و ویرایش‌ها را به‌صورت محلی روی رایانه انجام دهید."
 selectOs = "انتخاب سیستم‌عامل"
@@ -4996,7 +5180,21 @@ titleWithOs = "دانلود برای {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "کد احراز هویت"
+description = "با اتصال یک برنامه authenticator، حساب خود را ایمن کنید. QR code را اسکن کنید یا کلید راه‌اندازی را وارد کنید، سپس برای پایان، کد ۶ رقمی را تأیید کنید."
+enable = "فعال‌سازی MFA"
+enableError = "فعال‌سازی احراز هویت دومرحله‌ای ممکن نیست. کد را بررسی کنید و دوباره تلاش کنید."
+enterCode = "کد ۶ رقمی برنامه خود را وارد کنید."
+enterCodeError = "برای ادامه، کد احراز هویت را وارد کنید."
+logout = "خروج"
+openAuthenticator = "Google Authenticator، Authy یا 1Password را باز کنید."
 qrCodeLoading = "در حال تولید کد QR شما…"
+regenerateQrCode = "تولید دوباره QR code"
+scanQrCode = "QR code را اسکن کنید یا کلید راه‌اندازی زیر را وارد کنید."
+setupError = "شروع راه‌اندازی احراز هویت دومرحله‌ای ممکن نیست. لطفاً دوباره تلاش کنید."
+setupKey = "کلید راه‌اندازی (ورود دستی)"
+stepByStep = "گام‌به‌گام"
+success = "MFA فعال شده است. اکنون می‌توانید ادامه دهید."
+title = "راه‌اندازی احراز هویت چندعاملی"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "وقتی حالت لاگین را فعال کنید، می‌توانید کاربران را مدیریت کنید، تنظیمات را پیکربندی کنید و سلامت سرور را پایش کنید. نخستین <strong>{{freeTierLimit}}</strong> نفر روی سرور شما به‌صورت رایگان از Stirling استفاده می‌کنند."
@@ -5005,6 +5203,11 @@ adminTitle = "نمای کلی ادمین"
 userBody = "هم‌تیمی‌ها را دعوت کنید، نقش‌ها را اختصاص دهید و اسناد را در یک فضای کار امن منسجم نگه دارید. هر زمان آماده رشد فراتر از استفاده فردی بودید، حالت لاگین را فعال کنید."
 userTitle = "نمای کلی پلن"
 
+[onboarding.processorIntro]
+body = "Stirling اکنون <strong>خط‌مشی‌ها</strong> را اجرا می‌کند — قوانین خودکاری که هر سند را هنگام ورود دسته‌بندی، ایمن و پردازش می‌کنند. آن‌ها را تنظیم کنید و اجراها را در <strong>پردازشگر</strong> پایش کنید."
+cta = "مشاهده پردازشگر"
+title = "پردازشگر Stirling را بررسی کنید"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "سال پیش‌پرداخت‌شده"
+
+[payg.prepaid.banner]
+exhausted = "ظرفیت پیش‌پرداخت شما مصرف شده است؛ صورت‌حساب بر اساس مصرف از سر گرفته شده است. برای حفظ تخفیف، شارژ کنید."
+expiring_one = "سال پیش‌پرداخت شما تا {{count}} روز دیگر پایان می‌یابد. ظرفیت استفاده‌نشده منقضی می‌شود — برای شروع یک سال تازه، شارژ کنید."
+expiring_other = "سال پیش‌پرداخت شما تا {{count}} روز دیگر پایان می‌یابد. ظرفیت استفاده‌نشده منقضی می‌شود — برای شروع یک سال تازه، شارژ کنید."
+low = "شما به {{pct}}% از ظرفیت پیش‌پرداخت خود رسیده‌اید. هر زمان شارژ کنید تا پردازش بدون وقفه ادامه یابد."
+
+[payg.prepaid.card]
+subtitle = "قبل از صورت‌حساب بر اساس مصرف و خارج از سقف هزینه شما استفاده می‌شود."
+title = "ظرفیت پیش‌پرداخت"
+
+[payg.prepaid.meter]
+capSuffix = "از {{total}} اعتبار پیش‌پرداخت"
+expires = "انقضا {{date}}"
+
+[payg.prepaid.state]
+exhausted = "مصرف شده"
+healthy = "مقدار زیادی باقی مانده"
+low = "رو به اتمام"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "کلید لایسنس موجود در ایمیل خود را 
 success = "لایسنس فعال شد!"
 successMessage = "لایسنس شما با موفقیت فعال شد. اکنون می‌توانید این پنجره را ببندید."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "اعمال شد"
-enforcing = "در حال اعمال..."
-failed = "اعمال ناموفق بود"
 outputsUnavailable = "خروجی‌های خط‌مشی دیگر برای دانلود در دسترس نیستند."
 partialOutputsUnavailable = "برخی از خروجی‌های خط‌مشی دیگر برای دانلود در دسترس نیستند."
-retrying = "مشغول است، تلاش مجدد..."
 runNotFound = "اجرای اعمال دیگر یافت نمی‌شود."
-step = "مرحله {{current}}/{{total}}"
 timedOut = "مهلت اعمال پیش از پایان اجرا به اتمام رسید."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "بستن"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "در حال اعمال {{names}}"
 applyingProgress = "در حال اعمال {{names}} ({{done}} از {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} از {{total}} فایل پردازش نشدند و 
 failureTitle = "صدور بدون اعمال کامل"
 printPolicyAppliedBody = "این PDF برای برآورده‌کردن یک خط‌مشی به‌روزرسانی شد. تغییرات را بررسی کرده و سپس دوباره چاپ کنید."
 printPolicyAppliedTitle = "خط‌مشی پیش از چاپ اعمال شد"
-queued = "+{{count}} در صف"
 successTitle = "{{names}} اعمال شد"
 summaryMore = "{{first}}، {{second}} و {{more}} مورد دیگر"
 summaryTwo = "{{first}} و {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "اعمال پیش از تبدیل"
-default = "در حال اعمال"
-export = "اعمال پیش از صدور"
-input = "اعمال هنگام وارد کردن"
-print = "اعمال پیش از چاپ"
-
-[policies.field]
-accessLog = "گزارش دسترسی"
-archiveAfter = "بایگانی پس از"
-auditTrail = "ردیابی حسابرسی"
-belowThreshold = "زیر آستانه"
-destination = "مقصد"
-frameworks = "چارچوب‌ها"
-immutableHold = "نگهداری تغییرناپذیر"
-keepFor = "نگهداری برای"
-minConfidence = "حداقل اطمینان"
-notify = "اعلان هنگام مسیریابی"
-onViolation = "هنگام عدم انطباق"
-webhookUrl = "URL Webhook"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "افزودن"
-addPlaceholder = "افزودن برچسب…"
-customNote = "برای تیم شما سفارشی شده است."
-defaultNote = "استفاده از پیش‌فرض داخلی، مشترک با تیم شما."
-duplicate = "\"{{name}}\" از قبل وجود دارد."
-edit = "ویرایش برچسب‌ها"
-empty = "هنوز برچسبی وجود ندارد."
-export = "خروجی JSON"
-iconAria = "انتخاب آیکون برای {{name}}"
-import = "وارد کردن JSON"
-importError = "امکان وارد کردن آن فایل وجود نداشت."
-managedNote = "برچسب‌های تیم توسط رهبر تیم شما مدیریت می‌شوند."
-modalSubtitle = "با کل تیم شما مشترک است. طبقه‌بند برچسب‌هایی را انتخاب می‌کند که با هر سند مطابقت دارند."
-modalTitle = "برچسب‌های طبقه‌بندی"
-pickIcon = "استفاده از آیکون {{label}}"
-removeAria = "حذف {{name}}"
-resetToDefault = "بازنشانی به پیش‌فرض"
-saveForTeam = "ذخیره برای تیم"
-saving = "در حال ذخیره…"
-sectionLabel = "برچسب‌های طبقه‌بندی"
-startFromScratch = "شروع از ابتدا"
-teamCount = "برچسب‌های تیم"
-tooLong = "برچسب‌ها حداکثر می‌توانند {{max}} نویسه باشند."
-ungrouped = "گروه‌بندی‌نشده"
-view = "مشاهده برچسب‌ها"
+categoryCount = "دسته‌ها"
+hideCategory = "پنهان کردن دسته"
+labelCount = "برچسب‌ها"
+sharedNote = "این برچسب‌ها داخلی هستند و در سراسر تیم شما مشترک‌اند."
+showCategory = "نمایش دسته"
 
 [policies.pii]
 account = "شماره‌های حساب (برچسب‌دار)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "شماره‌های مسیریابی بانکی ایالات متحده (ABA)"
 ssn = "شماره‌های تأمین اجتماعی"
 
-[policies.settings]
-noneExport = "در حال حاضر هیچ خط‌مشی‌ای هنگام خروجی اجرا نمی‌شود."
-noneUpload = "در حال حاضر هیچ خط‌مشی‌ای هنگام بارگذاری اجرا نمی‌شود."
-onExport = "هنگام خروجی"
-onUpload = "هنگام بارگذاری"
-reorderHandle = "برای تغییر ترتیب بکشید"
-runOrderDesc = "وقتی بیش از یک خط‌مشی روی یک ماشه اجرا می‌شود، به این ترتیب اجرا می‌شوند — هرکدام روی خروجی خط‌مشی قبلی. برای تغییر ترتیب بکشید."
-title = "تنظیمات خط‌مشی"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "گزینه‌های خط‌مشی"
-policySettings = "تنظیمات خط‌مشی"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "تلاش دوباره برای خط‌مشی‌های ناموفق ({{count}})"
-rowProgress = "{{completed}} از {{total}} فایل پردازش شد"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "خط‌مشی چیست؟"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "به‌طور خودکار جزئیات حساس — مانند شماره‌های تأمین اجتماعی و کارت — را پیدا کرده و سیاه می‌کند تا در سند قابل خواندن نباشند."
-sanitize = "کدهای JavaScript پنهان را از فایل حذف می‌کند تا هنگام باز کردن فایل، هیچ‌چیز به‌صورت خودکار اجرا نشود."
-watermark = "یک نشان قابل مشاهده (مثلاً \"Confidential\") را روی هر صفحه درج می‌کند."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "בستن"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} در حال اعمال..."
 badgeRan = "خط‌مشی {{name}} روی این فایل اجرا شد"
+badgeRunning = "{{name}} در حال اجرا..."
 blockingAction = "{{action}} هنگام اعمال خط‌مشی مسدود شد، لطفاً صبر کنید..."
 dismiss = "بستن پوشش"
 enforcingTitle = "در حال اعمال خط‌مشی..."
@@ -6151,6 +6211,7 @@ viewAnyway = "مشاهده فایل (خط‌مشی همچنان در حال اع
 [policyOption]
 autoRedactPhi = "حذف خودکار PHI"
 blockExport = "مسدود کردن خروجی"
+ccpa = "CCPA"
 contracts = "قراردادها"
 documents = "اسناد"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "طرح Editor"
 subscribed = "طرح Processor"
 unlinked = "پیوند داده نشده"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "راه‌اندازی اولیه از سند"
-sectionsAriaLabel = "بخش‌های سازنده عامل"
-selectorAriaLabel = "عامل‌ها"
-subtitle = "عامل‌های AI را طراحی، آزمایش و منتشر کنید که اسناد شما را طبقه‌بندی می‌کنند، از آن‌ها استخراج می‌کنند و مسیریابی می‌کنند. سناریوها را تعریف کنید، دسترسی ابزار را محدود کنید، یک مجموعه طلایی اجرا کنید و یک نسخه منتشر کنید."
-title = "سازنده عامل"
-
-[portal.agentBuilder.bootstrap]
-cancel = "لغو"
-dropzoneText = "یک سند نمونه انتخاب کنید (PDF یا تصویر)"
-lead = "یک سند نمونه رها کنید تا سناریوها و یک شِمای استخراج پیشنهاد کنیم که بتوانید اصلاحش کنید. تا زمانی که آن را بازبینی نکنید چیزی منتشر نمی‌شود."
-submit = "راه‌اندازی اولیه عامل"
-subtitle = "آغاز یک عامل جدید از یک فایل نماینده"
-title = "راه‌اندازی اولیه از یک سند"
-
-[portal.agentBuilder.empty]
-description = "یک عامل را از یک سند نمونه راه‌اندازی اولیه کنید تا سناریوها و شِمای استخراج آن آغاز شود، سپس اصلاح و منتشر کنید."
-title = "هنوز عاملی وجود ندارد"
-
-[portal.agentBuilder.evals]
-casesPassing = "موارد موفق"
-columnCase = "مورد ارزیابی"
-columnLatency = "تأخیر"
-columnResult = "نتیجه"
-fail = "ناموفق"
-goldenSetPassRate = "نرخ موفقیت مجموعه طلایی"
-latencyMs = "{{ms}} ms"
-notRun = "اجرا نشده"
-pass = "موفق"
-passRate = "نرخ موفقیت"
-runEvals = "اجرای ارزیابی‌ها"
-
-[portal.agentBuilder.evals.empty]
-description = "ارزیابی‌ها سناریوهای شما را به یک مجموعه طلایی تکرارپذیر تبدیل می‌کنند. ارتقا دهید تا نرخ موفقیت را در طول زمان ثبت کنید و انتشارها را بر اساس آن کنترل کنید."
-title = "هنوز مجموعه طلایی وجود ندارد"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "در سراسر مجموعه‌های طلایی"
-activeAgents = "عامل‌های فعال"
-avgPassRate = "میانگین نرخ موفقیت ارزیابی"
-fleetWide = "در کل ناوگان"
-latestPublished = "آخرین منتشرشده"
-scenarios = "سناریوها"
-testCases = "موارد آزمون"
-totalDescription_one = "در مجموع {{count}}"
-totalDescription_other = "در مجموع {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "افزودن"
-addScenario = "افزودن سناریو"
-enable = "فعال‌سازی"
-expectationLabel = "رفتار مورد انتظار"
-expectationPlaceholder = "عامل باید چه کاری انجام دهد"
-inEval = "در ارزیابی"
-mute = "بی‌صدا کردن"
-muted = "بی‌صدا شده"
-nameLabel = "نام"
-namePlaceholder = "مثلاً تشدید انطباق"
-
-[portal.agentBuilder.tabs]
-evals = "ارزیابی‌ها"
-scenarios = "سناریوها"
-tools = "ابزارها"
-versions = "نسخه‌ها"
-
-[portal.agentBuilder.tools]
-broadAccess = "دسترسی گسترده"
-deniedHint = "ابزارهای انتخاب‌شده مسدود هستند. همه موارد دیگر همچنان قابل فراخوانی می‌مانند."
-deniedTools = "ابزارهای ردشده"
-governanceGate = "حاکمیت ابزار در طرح Enterprise در دسترس است."
-restricted = "محدود"
-restrictedAccess = "دسترسی محدود به ابزار"
-restrictedDescription = "همه ابزارها را به‌جز مواردی که در زیر رد می‌کنید مجاز کنید."
-
-[portal.agentBuilder.versions]
-current = "فعلی"
-historyGate = "تاریخچه کامل نسخه‌ها و بازگشت به عقب در طرح Enterprise در دسترس است."
-publish = "انتشار"
-rollBack = "بازگشت به عقب"
-
 [portal.assistant]
 close = "بستن دستیار"
 error = "امکان دسترسی به دستیار وجود نداشت."
@@ -6365,9 +6346,21 @@ typing = "در حال تایپ"
 loading = "در حال بارگیری"
 redirectingToEditor = "در حال هدایت به ویرایشگر..."
 
+[portal.billing.activation]
+maybeLater = "شاید بعداً"
+title = "روشن کردن پردازشگر"
+
+[portal.billing.activation.payg]
+sub = "یک محدودیت ماهانه تعیین کنید. برای آنچه اجرا می‌کنید پرداخت کنید."
+title = "پرداخت به‌ازای مصرف"
+
+[portal.billing.activation.prepay]
+badge = "۲ ماه رایگان"
+sub = "یک فاکتور، کارت یا انتقال بانکی."
+title = "پیش‌پرداخت یک سال"
+
 [portal.billing.checkout]
 noClientSecret = "تابع Edge مقدار client_secret برنگرداند."
-subtitle = "برای ادامه پس از اعتبار رایگان طرح Editor، یک کارت اضافه کنید. Stripe بقیه کارها را انجام می‌دهد."
 title = "فعال کردن طرح Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "پرداخت شما موفق بود، اما فعال‌سازی کمی
 close = "بستن"
 title = "تقریباً تمام شد"
 
+[portal.billing.checkout.cap]
+amountAria = "محدودیت هزینه ماهانه"
+back = "بازگشت"
+continue = "ادامه به پرداخت"
+error = "امکان تنظیم محدودیت هزینه شما نبود"
+finePrint = "فاکتورها ماهانه صادر می‌شوند. هر زمان لغو کنید."
+noLimit = "بدون محدودیت"
+note = "هرگز بیش از محدودیت خود صورتحساب نمی‌شوید. پردازش فقط متوقف می‌شود."
+perMonth = "/ ماه"
+title = "محدودیت هزینه خود را تنظیم کنید"
+
+[portal.billing.checkout.card]
+fields = "شماره کارت · MM / YY · CVC · ZIP"
+label = "جزئیات کارت"
+note = "جزئیات کارت توسط Stripe جمع‌آوری می‌شود. Stirling هرگز PAN یا CVC را ذخیره نمی‌کند."
+
 [portal.billing.checkout.error]
 title = "امکان شروع پرداخت وجود نداشت"
 
@@ -6383,10 +6392,9 @@ body = "پرداخت شما انجام شد. ما در حال فعال‌ساز
 hint = "لطفاً این پنجره را باز نگه دارید."
 title = "در حال فعال‌سازی طرح Processor شما..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "در env پورتال تنظیم کنید تا پرداخت درون‌برنامه‌ای فعال شود."
-bodyBefore = "تنظیم کنید"
-title = "Stripe پیکربندی نشده است"
+[portal.billing.checkout.pay]
+limit = "محدودیت هزینه ماهانه {{amount}}/ماه. پردازش در حد محدودیت متوقف می‌شود."
+limitNoCap = "بدون محدودیت هزینه. پردازش متوقف نمی‌شود. فاکتورها ماهانه صادر می‌شوند."
 
 [portal.billing.enterpriseUpsell]
 cta = "پیشنهاد قیمت Enterprise خود را بسازید"
@@ -6409,10 +6417,12 @@ currentPlan = "طرح فعلی"
 freeForever = "برای همیشه رایگان"
 noTeamResolved = "هنوز هیچ تیمی در کیف پول شما شناسایی نشده است — تازه‌سازی کنید و دوباره تلاش کنید."
 ownerOnly = "فقط مالک تیم می‌تواند طرح Processor را فعال کند."
+payInvoice = "پرداخت فاکتور برای تکمیل"
 planName = "Editor"
 ssoIncluded = "SSO شامل است"
 switchOnProcessor = "فعال کردن Processor →"
 unlimitedUsers = "کاربران نامحدود"
+viewQuote = "مشاهده پیش‌فاکتور"
 
 [portal.billing.invoices]
 columnAmount = "مبلغ"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "درخواست‌های مستقیم API"
 segmentApiLabel = "API"
 segmentAutomationDesc = "اتوماسیون‌ها و خط لوله‌ها"
 segmentAutomationLabel = "اتوماسیون"
+sizeMultiplier = "{{formatted}} PDF از ضریب اندازه استفاده کردند"
+summary = "{{unique}} یکتا · {{units}} واحد کنتور · میانگین {{avg}} برای هر PDF"
+summaryNoRate = "{{unique}} یکتا · {{units}} واحد کنتور"
 unit = "PDFهای اندازه‌گیری‌شده"
+unitsPending_one = "{{units}} واحد کنتور در انتظار همگام‌سازی از نمونه‌های متصل"
+unitsPending_other = "{{units}} واحد کنتور در انتظار همگام‌سازی از نمونه‌های متصل"
+
+[portal.billing.prepaid]
+capSuffix = "از {{total}} اعتبار پیش‌پرداخت"
+expires = "انقضا {{date}}"
+eyebrow = "ظرفیت پیش‌پرداخت"
+note = "قبل از صورت‌حساب بر اساس مصرف و خارج از محدودیت هزینه شما استفاده می‌شود."
+topUp = "شارژ"
+
+[portal.billing.prepaid.buy]
+back = "بازگشت"
+calcTitle = "محاسبه پرداخت سالانه شما"
+cancel = "لغو"
+cancelPurchase = "لغو خرید"
+close = "بستن"
+continueToPayment = "ادامه به پرداخت"
+finalise = "نهایی‌سازی"
+invoiceErrorTitle = "امکان ایجاد فاکتور نبود"
+loadingTitle = "در حال بارگذاری پیش‌فاکتور شما"
+payTitle = "پرداخت برای سال شما"
+step = "مرحله {{current}} از {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "تغییر"
+deployRow = "استقرار"
+done = "انجام شد"
+enterpriseHint = "این در مقیاس سازمانی است. در این حجم، نرخ‌های سازمانی از هر تخفیف سلف‌سرویس بهتر هستند. قفل نرخ، شرایط و پیش‌فاکتور در چند دقیقه."
+governanceRow = "حاکمیت"
+governanceValue = "{{label}} · {{count}} خط‌مشی"
+handlesLabel = "پردازشگر شما"
+handlesValue = "{{volume}} اعتبار / ماه را پردازش می‌کند"
+pipelinesLabel = "پایپ‌لاین‌ها"
+policiesMeta = "{{count}} خط‌مشی"
+poolCaption = "یک مخزن از {{credits}} اعتبار برای سال. ماه‌های سنگین از ماه‌های سبک قرض می‌گیرند."
+priceLabel = "سال شما · ۱۲ ماه به قیمت ۱۰ ماه"
+rateUnknown = "قیمت دقیق را در پرداخت نشان می‌دهیم."
+savings = "شما {{amount}} صرفه‌جویی می‌کنید · ۲ ماه رایگان."
+sizingRow = "اندازه‌بندی"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "کل کاربران"
+
+[portal.billing.prepaid.consent]
+label = "می‌دانم که وقتی ظرفیت پیش‌پرداخت من مصرف شود یا پس از ۱۲ ماه منقضی شود، پردازش به‌طور خودکار با نرخ استاندارد پرداخت به‌ازای مصرف بر اساس کنتور ادامه می‌یابد (تا سقف محدودیت هزینه من) مگر اینکه لغو کنم، و می‌توانم هر زمان از پورتال صورت‌حساب لغو کنم."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "مدیریت‌شده توسط Stirling. فعال در چند دقیقه."
+cloudValue = "Stirling Cloud · مدیریت‌شده"
+selfhost = "خودمیزبان"
+selfhostDesc = "روی زیرساخت خصوصی اجرا می‌شود. همان نرخ."
+selfhostValue = "خودمیزبان · زیرساخت خصوصی"
+
+[portal.billing.prepaid.offer]
+cta = "بررسی پیشنهاد"
+subtitle = "یک سال پردازش PDF را پیش‌پرداخت کنید و دو ماه رایگان دریافت کنید؛ پیش از صورت‌حساب بر اساس مصرف و خارج از محدودیت هزینه شما استفاده می‌شود."
+title = "۱۲ ماه را به قیمت ۱۰ ماه دریافت کنید"
+
+[portal.billing.prepaid.pay]
+accountName = "نام صاحب حساب"
+accountNamePlaceholder = "مثلاً Jane Smith"
+companyName = "نام شرکت (اختیاری)"
+companyNamePlaceholder = "مثلاً Acme Inc."
+downloadInvoice = "دانلود فاکتور"
+payOnline = "پرداخت آنلاین"
+poNumber = "شماره PO (اختیاری)"
+poNumberPlaceholder = "مثلاً PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "پیشرفته"
+advancedDesc = "پایپ‌لاین‌ها بیشتر پردازش شما را انجام می‌دهند."
+none = "هیچ‌کدام"
+noneDesc = "هنوز پایپ‌لاین‌ها اجرا نمی‌شوند. هر زمان آن‌ها را روشن کنید."
+standard = "استاندارد"
+standardDesc = "چند پایپ‌لاین PDFهای ورودی را دوباره پردازش می‌کنند."
+
+[portal.billing.prepaid.posture]
+essentials = "ضروریات"
+essentialsDesc = "دسته‌بندی، حالت پیش‌فرض، به‌علاوه اشتراک‌گذاری"
+governed = "تحت حاکمیت"
+governedDesc = "امنیت و مسیریابی را اضافه می‌کند"
+regulated = "تحت مقررات"
+regulatedDesc = "هر دسته، شامل Compliance، Retention، Ingestion"
+
+[portal.billing.prepaid.review]
+download = "دانلود پیش‌فاکتور (PDF)"
+downloading = "در حال آماده‌سازی…"
+share = "اشتراک‌گذاری برای تأیید"
+
+[portal.billing.prepaid.size]
+compact = "فشرده"
+compactDesc = "فایل‌های کمتر از ۲۵ MB، بدون هزینه داده"
+heavy = "سنگین"
+heavyDesc = "اسکن‌شده یا پر از تصویر، معمولاً ۵۰ MB+"
+standard = "استاندارد"
+standardDesc = "عمدتاً کوچک، برخی اسکن‌ها بیش از ۲۵ MB"
+
+[portal.billing.prepaid.state]
+exhausted = "مصرف شده"
+healthy = "مقدار زیادی باقی مانده"
+low = "رو به اتمام"
 
 [portal.billing.spendLimit]
 adjustLimit = "تنظیم حد"
@@ -6494,6 +6608,8 @@ label = "پیش‌بینی می‌شود از حد عبور کند."
 
 [portal.billing.spendThisMonth]
 eyebrow = "هزینه این ماه"
+freeRemaining_one = "{{formatted}} PDF رایگان باقی مانده"
+freeRemaining_other = "{{formatted}} PDF رایگان باقی مانده"
 processed_one = "{{formattedCount}} PDF پردازش شد."
 processed_other = "{{formattedCount}} PDF پردازش شد."
 processedWithRate_one = "{{formattedCount}} PDF پردازش شد، هرکدام با {{rate}}."
@@ -6534,6 +6650,350 @@ signature = "امضا"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "اتصال جدید"
+createTitleFor = "اتصال {{name}}"
+delete = "حذف"
+edit = "ویرایش"
+editTitle = "ویرایش اتصال"
+unsupportedType = "این نوع اتصال از اینجا قابل ویرایش نیست."
+
+[portal.connections.categories.advanced]
+description = "برای سرویسی که هنوز پشتیبانی نمی‌کنیم."
+label = "پیشرفته"
+
+[portal.connections.categories.audit]
+description = "ثبت کنید چه اتفاقی برای یک سند افتاده است، همان‌جایی که حسابرسان شما از قبل بررسی می‌کنند."
+label = "ثبت ممیزی و انطباق"
+
+[portal.connections.categories.notify]
+description = "به سیستم دیگری اطلاع دهید که اتفاقی افتاده است."
+label = "اعلان و گردش‌کار"
+
+[portal.connections.categories.security]
+description = "قبل از انتقال سند، آن را اسکن یا برچسب‌گذاری کنید."
+label = "امنیت و دسته‌بندی"
+
+[portal.connections.categories.signing]
+description = "سند را برای امضا یا ثبت رسمی ارسال کنید."
+label = "امضای الکترونیکی و ثبت رسمی"
+
+[portal.connections.categories.storage]
+description = "جایی که اسناد پردازش‌شده در آن قرار می‌گیرند - یک bucket، یک drive، یک ticket یا یک page."
+label = "فایل و پیوست"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling این را رمزگذاری‌شده ذخیره می‌کند و دیگر هرگز نشان نمی‌دهد."
+label = "توکن دسترسی"
+
+[portal.connections.commonFields.apiKey]
+label = "کلید API"
+
+[portal.connections.commonFields.apiToken]
+label = "توکن API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "مراحلی که از این اتصال استفاده می‌کنند فقط می‌توانند مسیرهای زیر این URL را فراخوانی کنند، نه میزبان دیگری را."
+label = "URL سرور"
+
+[portal.connections.commonFields.email]
+label = "ایمیل"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "رمز عبور"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "نام کاربری"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "URL ارائه‌شده توسط سرویس را جای‌گذاری کنید. فقط مسیرهای زیر آن قابل فراخوانی هستند."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "نام اتصال"
+namePlaceholder = "مثلاً Production"
+
+[portal.connections.picker]
+cancel = "لغو"
+createNew = "اتصال جدید..."
+placeholder = "یک اتصال انتخاب کنید"
+save = "ذخیره اتصال"
+
+[portal.connections.picker2]
+back = "تغییر یکپارچه‌سازی"
+heading = "می‌خواهید چه چیزی را متصل کنید؟"
+noResultsBody = "هنوز از آن پشتیبانی نمی‌کنیم - درباره آن به ما بگویید تا افزودنش را بررسی کنیم."
+noResultsTitle = "هیچ موردی با «{{query}}» مطابقت ندارد"
+searchPlaceholder = "جست‌وجوی یکپارچه‌سازی‌ها - «sign»، «ocr» یا نام محصول را امتحان کنید"
+
+[portal.connections.types.api]
+description = "هر HTTP API را از یک خط‌مشی فراخوانی کنید. شما URL، احراز هویت و payload را انتخاب می‌کنید."
+label = "API سفارشی"
+
+[portal.connections.types.api.fields.authType]
+label = "احراز هویت"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "نام کاربری و رمز عبور"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "توکن در header سفارشی"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "هیچ‌کدام"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "ورود برای دریافت توکن"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "مراحلی که از این اتصال استفاده می‌کنند فقط می‌توانند مسیرهای زیر این URL را فراخوانی کنند، نه میزبان دیگری را."
+label = "URL پایه"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "نام header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "مسیر ورود"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "رمز عبور"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "اگر API با یک لینک دانلود پاسخ دهد، فقط این hostها می‌توانند دریافت شوند. با کاما جدا کنید. برای اجازه فقط به host خود URL پایه، خالی بگذارید."
+label = "hostهای مجاز نتیجه"
+
+[portal.connections.types.api.fields.token]
+label = "توکن"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "ارسال توکن به‌عنوان این header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "header پاسخی که فراخوانی ورود توکن را در آن برمی‌گرداند، مانند X-Auth-Token."
+label = "header پاسخ توکن"
+
+[portal.connections.types.api.fields.username]
+label = "نام کاربری"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "اسناد را برای بدافزار روی سروری که خودتان اجرا می‌کنید اسکن کنید - هیچ‌چیز از شبکه شما خارج نمی‌شود."
+label = "ClamAV (خودمیزبان)"
+
+[portal.connections.types.cloudmersive]
+description = "اسکن ویروس و محتوا برای اسناد در یک خط‌مشی."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "اسنادی را که شامل ماکروها، فایل‌های اجرایی، اسکریپت‌ها یا اشیای جاسازی‌شده هستند مسدود کنید - نه فقط بدافزارهای شناخته‌شده."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "اسناد پردازش‌شده را به یک صفحه Confluence پیوست کنید."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "اسناد را برای امضای الکترونیکی و ثبت رسمی به ConsignO Cloud (Notarius) ارسال کنید."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "محیط ConsignO Cloud شما، شامل /api/v1."
+label = "URL سرور"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "کلید API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "راز API"
+
+[portal.connections.types.consigno.fields.password]
+label = "رمز عبور"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "فقط اگر سازمان شما از tenantها استفاده می‌کند لازم است."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "نام کاربری"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "وقتی یک خط‌مشی سندی را پردازش می‌کند، پیامی در Discord ارسال کنید."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "هر بار که یک خط‌مشی سندی را مدیریت می‌کند، یک رویداد ممیزی را در Elasticsearch ایندکس کنید."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "یک سرور FTP یا FTPS را برای اسناد جدید پایش کنید."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "حالت اتصال"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (توصیه‌شده)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP ساده اعتبارنامه‌ها و فایل‌ها را بدون رمزگذاری ارسال می‌کند؛ اگر سرور پشتیبانی می‌کند، FTPS را انتخاب کنید."
+label = "رمزگذاری"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "هیچ‌کدام (FTP ساده)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "وقتی یک خط‌مشی اجرا می‌شود، پیامی به فضای Google Chat ارسال کنید."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "اسناد پردازش‌شده را به یک issue در Jira پیوست کنید."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "وقتی یک خط‌مشی اجرا می‌شود، سند یا اعلان را ایمیل کنید."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "اسناد پردازش‌شده را در Nextcloud قرار دهید."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "رمز عبور برنامه"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "با استفاده از یک سرور Presidio که خودتان اجرا می‌کنید، داده‌های شخصی را در متن سند تشخیص دهید."
+label = "Presidio (خودمیزبان)"
+
+[portal.connections.types.purview]
+description = "برچسب‌های حساسیت Microsoft Purview را روی PDFها بخوانید و اعمال کنید."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "اختیاری. فقط برای انتخاب برچسب‌ها با نام لازم است؛ برچسب‌گذاری بدون آن هم کار می‌کند."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "راز client"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "روی هر برچسب به‌عنوان SiteId آن درج می‌شود تا ابزارهای آگاه از Purview بدانند کدام سازمان آن را اعمال کرده است."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "یک bucket در S3 که منابع می‌توانند از آن بخوانند و خروجی‌های پایپ‌لاین می‌توانند در آن بنویسند."
+label = "ذخیره‌سازی S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "برای AWS خالی بگذارید. برای MinIO یا ذخیره‌ساز سازگار با S3 دیگر، این را تنظیم کنید."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "وقتی یک خط‌مشی اجرا می‌شود، سند یا اعلان را ایمیل کنید."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "یک سرور SFTP (SSH) را برای اسناد جدید پایش کنید."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "اختیاری. اثرانگشت کلید host سرور با SHA-256 (از `ssh-keyscan host | ssh-keygen -lf -`). وقتی تنظیم شود، فقط سروری که این کلید را ارائه دهد پذیرفته می‌شود؛ وقتی خالی باشد، کلیدی که در اولین اتصال دیده می‌شود pin می‌شود و تغییرات بعدی رد می‌شوند."
+label = "اثر انگشت کلید host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "عبارت عبور کلید"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "اگر به‌جای آن با کلید خصوصی احراز هویت می‌کنید، خالی بگذارید."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "اختیاری. برای احراز هویت با کلید به‌جای رمز عبور، یک کلید خصوصی OpenSSH را جای‌گذاری کنید."
+label = "کلید خصوصی"
+
+[portal.connections.types.slack]
+description = "وقتی یک خط‌مشی سندی را پردازش می‌کند، پیامی در Slack ارسال کنید."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "یک SMB / CIFS network share را زیر نظر بگیرید (Windows یا Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / اشتراک شبکه"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "اختیاری. اگر سرور شما از آن استفاده می‌کند، domain یا workgroup ویندوز."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "هر بار که یک خط‌مشی سندی را مدیریت می‌کند، یک رویداد ممیزی به Splunk ارسال کنید."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "یک رویداد ممیزی را به یک HTTP collector در Sumo Logic ارسال کنید."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "وقتی یک خط‌مشی اجرا می‌شود، پیامی به کانال Teams ارسال کنید."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "هر سند، یا فقط جزئیات را به URL انتخابی خود ارسال کنید."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "یک سناریوی Zap یا Make را از یک خط‌مشی فعال کنید."
+label = "Zapier و Make"
+
+[portal.docs]
+browse = "مرور مستندات"
+viewSource = "مشاهده منبع در GitHub"
+
 [portal.docs.authentication]
 codeCaption = "هر درخواست"
 eyebrow = "شروع به کار"
@@ -6619,11 +7079,19 @@ title = "SDKهای رسمی"
 beta = "Beta"
 deprecated = "منسوخ‌شده"
 
+[portal.docs.search]
+empty = "مستندات مطابقی وجود ندارد"
+placeholder = "جست‌وجوی مستندات"
+results = "{{count}} نتیجه"
+
 [portal.docs.skills]
 eyebrow = "مهارت‌ها"
 lead = "قابلیت‌های بسته‌بندی‌شده و نام‌دار که عامل شما به‌عنوان یک ابزار واحد فراخوانی می‌کند. هر مهارت یک زنجیره عملیات قطعی با ارزیابی‌های پیوست‌شده است."
 title = "مهارت‌های عامل"
 
+[portal.docs.toc]
+title = "در این صفحه"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "مرجع API"
@@ -6697,6 +7165,8 @@ type = "نوع"
 user = "کاربر"
 
 [portal.documents.queue.empty]
+connectSource = "اتصال یک منبع"
+createPipeline = "ایجاد یک پایپ‌لاین"
 description = "وقتی منابع اسناد را وارد پایپ‌لاین‌های شما کنند، برای بازبینی اینجا نمایش داده می‌شوند."
 title = "هیچ سندی در صف نیست"
 
@@ -6806,13 +7276,71 @@ description = "این نما با خطای غیرمنتظره‌ای روبه‌
 retry = "دوباره تلاش کنید"
 title = "در این صفحه مشکلی پیش آمد"
 
+[portal.home.download]
+back = "بازگشت"
+body = "برنامه دسکتاپ را دانلود کنید یا سرور را خودمیزبان کنید."
+done = "انجام شد"
+guide = "باز کردن راهنمای {{name}}"
+openInBrowser = "به‌جای آن در مرورگر باز کنید"
+sectionDesktop = "برنامه دسکتاپ"
+sectionSelfHosted = "خودمیزبان"
+title = "نصب ویرایشگر Stirling PDF"
+
+[portal.home.download.docker]
+detailBody = "image رسمی را روی سرور خود اجرا کنید."
+note = "در :8080 باز می‌شود. ورود پیش‌فرض: admin / stirling."
+tagline = "اجرای سرور در یک کانتینر"
+title = "Docker"
+variantFat = "کامل"
+variantLite = "فوق‌سبک"
+variantStandard = "استاندارد"
+
+[portal.home.download.kubernetes]
+detailBody = "نمودار رسمی Helm را نصب کنید."
+note = "برای /configs یک PVC اضافه کنید تا تنظیمات پایدار بمانند."
+tagline = "استقرار در یک کلاستر با Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "بیلدهای بومی برای توزیع شما."
+guideBtn = "مشاهده گزینه‌های نصب Linux"
+note = "بیلدهای AppImage، .deb و .rpm برای توزیع‌های رایج در دسترس هستند."
+tagline = "برنامه دسکتاپ بومی برای توزیع شما"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "یا از طریق Homebrew"
+detailBody = "نصب‌کننده را اجرا کنید، یا از Homebrew استفاده کنید."
+downloadBtn = "دانلود برای macOS"
+tagline = "برنامه بومی برای Apple silicon و Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "فایل .jar را روی یک سرور bare metal اجرا کنید."
+downloadBtn = "دانلود .jar"
+note = "به Java 21+ نیاز دارد. در :8080 باز می‌شود؛ ورود پیش‌فرض admin / stirling است."
+runLabel = "سپس آن را اجرا کنید"
+tagline = "اجرای .jar روی یک سرور bare metal"
+title = "راه‌اندازی دستی سرور"
+
+[portal.home.download.windows]
+altLabel = "یا از طریق winget"
+detailBody = "نصب‌کننده را اجرا کنید، یا از یک مدیر بسته استفاده کنید."
+downloadBtn = "دانلود نصب‌کننده"
+tagline = "برنامه بومی برای Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} فعال"
-invite = "دعوت از هم‌تیمی‌ها"
+activeOfDeployed = "{{active}} از {{total}} در این ماه فعال"
 name = "Stirling PDF Editor"
 open = "باز کردن در مرورگر"
 updated = "به‌روزرسانی‌شده {{time}}"
 
+[portal.home.editor.deploy]
+finish = "پایان استقرار"
+options = "مشاهده گزینه‌های استقرار"
+start = "استقرار ویرایشگر"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "خودمیزبان · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "عصر بخیر"
 evening = "شب بخیر"
 morning = "صبح بخیر"
 
-[portal.home.onboarding]
-dismiss = "رد کردن راه‌اندازی"
-notStarted = "شروع‌نشده"
-progress = "{{done}} از {{total}} انجام شد"
-title = "تکمیل راه‌اندازی"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC در سطح سازمان، قیمت‌گذاری حجمی تعهدی، و استقرار air-gapped."
-cta = "شروع دوره آزمایشی"
-ctaQuote = "دریافت پیش‌فاکتور"
-lead = "برای بیش از ۲۵۰ کارمند."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "برنامه دسکتاپ را مستقر کنید، برای همیشه رایگان."
-title = "دانلود PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} فعال · {{recommended}} پیشنهادی"
-chip = "{{active}} فعال"
-title = "فعال کردن سیاست‌ها"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} متصل · هر PDF در محل ورود تحت حاکمیت است"
-chip = "{{connected}} متصل"
-title = "اتصال منابع"
-
-[portal.home.quickActions]
-subtitle = "کارهای اصلی امروز"
-title = "اقدامات سریع"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "سازنده ۳ مرحله‌ای روی کتابخانه عملیات تایپ‌شده"
-title = "ساخت یک پایپ‌لاین"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3، agentها، webhookها، پوشه‌های پایش‌شده"
-title = "اتصال یک منبع"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "کلید محدودشده با rate limit و IP allowlist"
-title = "صدور کلید API"
-
 [portal.infrastructure]
 manageEditorDeployment = "مدیریت استقرار ویرایشگر"
 sectionsAriaLabel = "بخش‌های زیرساخت"
@@ -6878,13 +7363,9 @@ heading = "کلیدهای API"
 subheading = "اعتبارنامه‌های محدودشده با rate limit، مجوزها و IP allowlist برای هر کلید."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IPهای مجاز"
-anyIp = "هر IP (بدون allowlist)"
 created = "ایجادشده"
 lastUsed = "آخرین استفاده"
-permissions = "مجوزها"
-rateLimit = "Rate limit"
-rateLimitValue = "{{value}} درخواست/دقیقه"
+revoke = "لغو کلید"
 usageMonth = "مصرف این ماه"
 usageToday = "مصرف امروز"
 
@@ -6892,6 +7373,20 @@ usageToday = "مصرف امروز"
 description = "برای شروع فراخوانی Stirling API یک کلید محدودشده ایجاد کنید."
 title = "هنوز کلید API وجود ندارد"
 
+[portal.infrastructure.apiKeys.error]
+load = "بارگذاری کلیدهای API شما ممکن نشد. لطفاً دوباره تلاش کنید."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "کلید \"{{name}}\" لغو شود؟ هر یکپارچه‌سازی که هنوز از این کلید استفاده می‌کند، بلافاصله خطاهای 401 دریافت خواهد کرد. این کار قابل بازگشت نیست."
+cancel = "لغو"
+confirm = "لغو کلید"
+title = "لغو کلید API"
+
+[portal.infrastructure.attestationLabel]
+attested = "تأییدشده"
+inScope = "در محدوده"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "فیلتر کردن رویدادهای حسابرسی بر اساس دسته"
 heading = "گزارش‌های حسابرسی"
@@ -6935,6 +7430,7 @@ all = "همه"
 auth = "احراز هویت"
 config = "پیکربندی"
 elevation = "ارتقای دسترسی"
+policy = "خط‌مشی"
 processing = "پردازش"
 security = "امنیت"
 
@@ -6944,19 +7440,35 @@ title = "شما دسترسی ندارید"
 
 [portal.infrastructure.audit.metrics]
 config = "پیکربندی"
-elevation = "ارتقای دسترسی"
+policy = "خط‌مشی"
 processing = "پردازش"
 totalEvents = "کل رویدادها · ۲۴ ساعت"
 
+[portal.infrastructure.auditCatLabel]
+auth = "احراز هویت"
+config = "پیکربندی"
+elevation = "ارتقا"
+policy = "خط‌مشی"
+processing = "پردازش"
+security = "امنیت"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "خطا"
+info = "اطلاعات"
+success = "موفقیت"
+warning = "هشدار"
+
+[portal.infrastructure.certLabel]
+certified = "گواهی‌شده"
+inProgress = "در حال انجام"
+notStarted = "شروع نشده"
+
 [portal.infrastructure.createKey]
 cancel = "لغو"
 createKey = "ایجاد کلید"
 done = "انجام شد"
-ipAllowlistHelper = "محدوده‌های CIDR جداشده با ویرگول. برای مجاز بودن هر IP خالی بگذارید."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "نام کلید"
 keyNamePlaceholder = "مثلاً Production · ingest"
-permissionsLabel = "مجوزها"
 secretKeyCaption = "کلید محرمانه"
 secretWarning = "این را در یک secrets manager ذخیره کنید. Stirling فقط یک hash ذخیره می‌کند — هیچ راهی برای بازیابی آن در آینده وجود ندارد."
 subtitle = "دامنه کلید را به حداقل نیاز آن محدود کنید. هر زمان می‌توانید آن را بچرخانید یا لغو کنید."
@@ -6964,6 +7476,12 @@ subtitleCreated = "این secret را اکنون کپی کنید — دوبار
 title = "ایجاد کلید API"
 titleCreated = "کلید ایجاد شد"
 
+[portal.infrastructure.deployLabel]
+live = "فعال"
+queued = "در صف"
+rolledBack = "بازگردانی‌شده"
+rolling = "در حال انتشار"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/دقیقه"
@@ -6999,6 +7517,15 @@ subheading = "سلامت زنده برای هر Stirling region مستقرشده
 description = "پس از تأمین فضای کاری شما، regionهای مستقرشده اینجا نمایش داده می‌شوند."
 title = "هیچ regionی مستقر نشده است"
 
+[portal.infrastructure.keyLabel]
+active = "فعال"
+revoked = "لغوشده"
+
+[portal.infrastructure.modelLabel]
+active = "فعال"
+degraded = "دارای اختلال"
+disabled = "غیرفعال"
+
 [portal.infrastructure.models]
 heading = "مدل‌ها"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "وضعیت"
 type = "نوع"
 version = "نسخه"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/فراخوانی"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "مدل‌های فعال"
 avgLatency = "میانگین latency"
@@ -7049,6 +7580,17 @@ modelForAria = "مدل برای {{operation}}"
 operation = "عملیات"
 routedTo = "هدایت‌شده به"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "طبقه‌بندی"
+extraction = "استخراج"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "دارای اختلال"
+down = "از کار افتاده"
+healthy = "سالم"
+
 [portal.infrastructure.security.access.byok]
 description = "یک کلید از KMS خودتان ارائه دهید. Stirling با آن رمزنگاری می‌کند اما همچنان می‌تواند بخواند."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "مدل‌ها"
 security = "امنیت"
 storage = "ذخیره‌سازی"
 
+[portal.integrations]
+addAnother = "افزودن مورد دیگر"
+availableHeading = "در دسترس"
+comingSoonHeading = "به‌زودی"
+connect = "متصل کردن"
+connectedHeading = "متصل‌شده"
+connectionCount_one = "{{count}} اتصال"
+connectionCount_other = "{{count}} اتصال"
+customApi = "API سفارشی"
+searchPlaceholder = "جستجوی یکپارچه‌سازی‌ها"
+subtitle = "هر چیزی که Stirling می‌تواند با آن ارتباط برقرار کند. اعتبارنامه‌ها یک‌بار اینجا ساخته می‌شوند، سپس توسط منابع، خط‌مشی‌ها و Pipelineها ارجاع داده می‌شوند."
+title = "یکپارچه‌سازی‌ها"
+typedName = "نام {{tool}}"
+
+[portal.integrations.filters]
+all = "همه"
+audit = "ممیزی"
+connected = "متصل‌شده"
+notify = "اعلان"
+security = "امنیت"
+signing = "امضا"
+storage = "ذخیره‌سازی"
+
+[portal.integrations.status]
+connected = "متصل‌شده"
+
+[portal.integrations.table]
+integration = "یکپارچه‌سازی"
+worksWith = "کار می‌کند با"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelineها"
+policies = "خط‌مشی‌ها"
+sources = "منابع"
+
+[portal.legal]
+draft = "{{label}} · پیش‌نویس"
+loadError = "بارگذاری این سند ممکن نشد. لطفاً دوباره تلاش کنید."
+loading = "در حال بارگذاری…"
+title = "سند حقوقی"
+
 [portal.nav]
 agent-builder = "سازنده Agent"
 components = "کامپوننت‌ها"
@@ -7182,6 +7765,7 @@ documents = "اسناد"
 editor = "ویرایشگر"
 home = "خانه"
 infrastructure = "زیرساخت"
+integrations = "یکپارچه‌سازی‌ها"
 pipelines = "پایپ‌لاین‌ها"
 policies = "سیاست‌ها"
 procurement = "تدارکات"
@@ -7190,25 +7774,9 @@ sources = "منابع"
 usage = "مصرف و صورت‌حساب"
 users = "کاربران"
 
-[portal.notifications]
-markAllRead = "علامت‌گذاری همه به‌عنوان خوانده‌شده"
-title = "اعلان‌ها"
-viewAll = "مشاهده همه"
-
-[portal.notifications.ariaLabel]
-none = "اعلان‌ها، خوانده‌نشده‌ای نیست"
-unread_one = "اعلان‌ها، {{count}} خوانده‌نشده"
-unread_other = "اعلان‌ها، {{count}} خوانده‌نشده"
-
-[portal.notifications.count]
-allRead = "همه خوانده‌شده"
-loading = "در حال بارگذاری"
-new_one = "{{count}} جدید"
-new_other = "{{count}} جدید"
-
-[portal.notifications.empty]
-description = "اعلان جدیدی وجود ندارد."
-title = "همه چیز به‌روز است"
+[portal.nav.section]
+platform = "پلتفرم PDF"
+processor = "پردازشگر PDF"
 
 [portal.pipelines]
 subtitle = "هر پایپ‌لاین سند خودکار در backend: زنجیره‌ای مرتب از عملیات روی مجموعه‌ای از منابع که با یک trigger اجرا می‌شود. برای دیدن مراحل و منابع، روی یک ردیف کلیک کنید."
@@ -7220,15 +7788,28 @@ newPipeline = "پایپ‌لاین جدید"
 [portal.pipelines.builder]
 addStep = "افزودن ابزار"
 back = "بازگشت به پایپ‌لاین‌ها"
+cannotFollow = "نمی‌تواند {{produced}} را بگیرد"
+chooseAccount = "یک حساب انتخاب کنید"
+chooseDestination = "یک مقصد انتخاب کنید"
+chooseOperation = "انتخاب کنید این مرحله چه کاری انجام دهد"
+chooseSource = "یک منبع انتخاب کنید"
 discard = "دور انداختن تغییرات"
 enabled = "فعال"
+inputs = "ورودی"
+inputSource = "منبع ورودی"
+inputTrigger = "محرک"
 keepEditing = "ادامه ویرایش"
+needsConfiguring = "نیاز به راه‌اندازی دارد"
 needsUpload = "به یک فایل آپلودشده نیاز دارد"
+noSources = "هنوز هیچ منبعی متصل نشده است. یکی بسازید تا از آن به‌عنوان ورودی استفاده کنید."
 noToolMatches = "هیچ ابزاری با جستجوی شما مطابقت ندارد."
 pipelineSettings = "تنظیمات پایپ‌لاین"
 searchTools = "جستجوی ابزارها"
 selectToolBody = "برای ساخت پایپ‌لاین خود، یک ابزار اضافه کنید."
 selectToolTitle = "هنوز ابزاری وجود ندارد"
+sendToSystem = "ارسال به سیستم دیگر"
+stepsIncompatible = "این مراحل نمی‌توانند روی خروجی مرحله قبلی خود اجرا شوند: {{tools}}."
+stepsNeedSetup = "این مراحل پیش از ذخیره هنوز به راه‌اندازی نیاز دارند: {{tools}}."
 toolSettings = "تنظیمات ابزار"
 unknownStep = "عملیات ناشناخته، بدون تغییر نگه داشته شد."
 unsavedBody = "تغییرات ذخیره‌نشده دارید. پیش از خروج آن‌ها را ذخیره می‌کنید یا دور می‌اندازید؟"
@@ -7236,19 +7817,24 @@ unsavedTitle = "تغییرات ذخیره‌نشده"
 uploadUnsupported = "فایل‌های آپلودشده هنوز در پایپ‌لاین‌ها پشتیبانی نمی‌شوند، بنابراین این مراحل قابل ذخیره نیستند: {{tools}}."
 usesDefaults = "با تنظیمات پیش‌فرض اجرا می‌شود"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "همه فایل‌های مرحله قبلی را ترکیب می‌کند"
+fan-out = "برای هر فایل از مرحله قبلی یک‌بار اجرا می‌شود"
+format-mismatch = "به {{accepts}} نیاز دارد، اما مرحله قبلی {{produced}} تولید می‌کند"
+output-uncertain = "ممکن است اجرا نشود: خروجی مرحله قبلی به نحوه راه‌اندازی آن بستگی دارد"
+source-mismatch = "به {{accepts}} نیاز دارد، اما ورودی این Pipeline برابر {{produced}} است"
+undeclared-operation = "نمی‌توان بررسی کرد این مرحله چه چیزی را می‌پذیرد"
+
 [portal.pipelines.composer]
 addTool = "افزودن ابزار"
 cancel = "لغو"
 chainEmpty = "برای شروع ساخت پایپ‌لاین خود، یک ابزار اضافه کنید."
 create = "ایجاد پایپ‌لاین"
-directory = "پوشه خروجی"
-directoryHelp = "مسیر مطلق روی سرور. باید داخل پوشه‌های مجاز پیکربندی‌شده باشد."
 editingUnsupported = "نمایش این params ابزار برای ویرایش هنوز پشتیبانی نمی‌شود."
 moveDown = "انتقال به پایین"
 moveUp = "انتقال به بالا"
 name = "نام"
 namePlaceholder = "مثلاً Redaction sweep"
-noSources = "هنوز هیچ منبعی متصل نیست. پایپ‌لاین همچنان می‌تواند روی فایل‌هایی که مستقیماً به آن داده می‌شوند اجرا شود."
 noToolSettings = "این ابزار تنظیمات قابل پیکربندی ندارد."
 operations_one = "عملیات ({{count}})"
 operations_other = "عملیات ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "حذف"
 title = "پایپ‌لاین حذف شود؟"
 
 [portal.pipelines.detail]
+clearHistory = "پاک کردن تاریخچه"
 delete = "حذف پایپ‌لاین"
 run = "اکنون اجرا کن"
 
 [portal.pipelines.empty]
 action = "ایجاد یک پایپ‌لاین"
+connectSource = "اتصال یک منبع"
 description = "اولین پایپ‌لاین خود را ایجاد کنید: منابعی را که روی آن‌ها اجرا می‌شود انتخاب کنید، عملیات را زنجیره کنید و محل خروجی را انتخاب کنید."
 title = "هنوز پایپ‌لاینی وجود ندارد"
 
@@ -7286,15 +7874,17 @@ active = "فعال"
 paused = "متوقف‌شده"
 total = "پایپ‌لاین‌ها"
 
-[portal.pipelines.output]
-folder = "نوشتن در پوشه"
-inline = "بازگرداندن فایل‌ها"
-
 [portal.pipelines.run]
+allProcessed_one = "چیزی برای اجرا نیست: {{count}} سند منبع قبلاً پردازش شده است."
+allProcessed_other = "چیزی برای اجرا نیست: همه {{count}} سند در منابع قبلاً پردازش شده‌اند."
 completed_one = "اجرا کامل شد."
 completed_other = "همه {{count}} اجرا کامل شد."
 empty = "چیزی برای اجرا نیست: منابع سندی برای پردازش نداشتند."
 failed = "اجرا ناموفق بود: {{error}}"
+historyCleared = "تاریخچه پاک شد. اجرای بعدی همه موارد فعلی در منابع را دوباره پردازش می‌کند."
+inFlight = "مورد جدیدی برای اجرا نیست: اسناد هنوز از اجرای قبلی در حال پردازش هستند."
+parked_one = "چیزی برای اجرا نیست: {{count}} سند قبلاً ناموفق بوده و کنار گذاشته شده است. علت را رفع کنید، سپس برای تلاش مجدد تاریخچه را پاک کنید."
+parked_other = "چیزی برای اجرا نیست: {{count}} سند قبلاً ناموفق بوده‌اند و کنار گذاشته شده‌اند. علت را رفع کنید، سپس برای تلاش مجدد تاریخچه را پاک کنید."
 running = "اجرا شروع شد؛ هنوز در حال پیشرفت است."
 timeout = "اجرا بیشتر از حد انتظار طول می‌کشد؛ ممکن است همچنان در پس‌زمینه کامل شود."
 
@@ -7314,12 +7904,18 @@ manual = "دستی"
 schedule = "زمان‌بندی‌شده"
 
 [portal.policies]
+defaultName = "خط‌مشی {{category}}"
 subtitle = "اتوماسیون‌های دائمی که یک پایپ‌لاین ابزار را روی هر سند اعمال می‌کنند. هر سیاست هنگام آپلود یا export اجرا می‌شود، زنجیره ابزار خود را اجرا می‌کند و نسخه اعمال‌شده را کنار نسخه اصلی ذخیره می‌کند."
 title = "سیاست‌ها"
 
 [portal.policies.card]
 comingSoon = "ارتقا به Enterprise"
 notSetUp = "راه‌اندازی نشده"
+requiresAiEngine = "به موتور AI نیاز دارد"
+
+[portal.policies.categories.classification]
+desc = "نوع هر سند را هنگام آپلود شناسایی کنید و فراداده آن را برای بایگانی و جستجو برچسب‌گذاری کنید."
+label = "طبقه‌بندی"
 
 [portal.policies.categories.compliance]
 desc = "الزامات HIPAA، GDPR، SOC 2 یا FedRAMP را روی هر سند اعمال کنید."
@@ -7344,6 +7940,13 @@ label = "امنیت"
 [portal.policies.config]
 scopeAll = "همه اسناد"
 
+[portal.policies.config.classification]
+summary = "هر سند آپلودشده را بر اساس برچسب‌های تیم شما طبقه‌بندی می‌کند و فراداده آن را برچسب‌گذاری می‌کند."
+
+[portal.policies.config.classification.rules]
+0 = "طبقه‌بندی"
+1 = "برچسب‌گذاری فراداده"
+
 [portal.policies.config.compliance]
 summary = "اسناد را پیش از خروج از سیستم در برابر چارچوب‌های مقرراتی اعتبارسنجی می‌کند."
 
@@ -7371,6 +7974,29 @@ minConfidence = "حداقل اطمینان"
 2 = "نام‌گذاری"
 3 = "نرمال‌سازی"
 
+[portal.policies.config.purview]
+label = "اعمال برچسب حساسیت Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "مستأجر Purview"
+labelId = "شناسه برچسب"
+labelIdHelp = "GUID برچسب، از پرتال Purview. اعمال یک برچسب، فراداده آن را روی PDF می‌نویسد؛ نمی‌تواند رمزگذاری کند، که به کلاینت Microsoft نیاز دارد."
+labelName = "نام برچسب (اختیاری)"
+labelNameHelp = "در کنار شناسه ثبت می‌شود تا افراد و ابزارها بتوانند برچسب را تشخیص دهند."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview بین برچسبی که یک خط‌مشی اعمال کرده و برچسبی که یک شخص انتخاب کرده تفاوت قائل می‌شود."
+label = "نحوه ثبت برچسب"
+privileged = "همان‌طور که توسط یک شخص انتخاب شده"
+standard = "همان‌طور که به‌صورت خودکار اعمال شده"
+
+[portal.policies.config.purviewRead]
+label = "خواندن برچسب Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "مستأجر Purview"
+connectionHelp = "برچسبی را می‌خواند که سند از قبل همراه دارد، تا مراحل بعدی بتوانند بر اساس آن عمل کنند."
+
 [portal.policies.config.retention]
 summary = "مدت نگه‌داری اسناد، زمان آرشیو و زمان حذف را اعمال می‌کند."
 
@@ -7438,6 +8064,7 @@ title = "هنوز فعالیتی وجود ندارد"
 [portal.policies.endpoints]
 addWatermark = "واترمارک"
 autoRedact = "حذف PII"
+classifyAndLabel = "طبقه‌بندی"
 compressPdf = "فشرده‌سازی"
 flatten = "تخت کردن"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "خط‌مشی‌های شما ذخیره شده‌اند و پس
 retry = "تلاش دوباره"
 title = "Backend در دسترس نیست"
 
+[portal.policies.operations]
+change = "تغییر کاری که این مرحله انجام می‌دهد"
+noResults = "هیچ مرحله‌ای با آن مطابقت ندارد. یک نام محصول، یا \"scan\"، \"notify\"، \"attach\" را امتحان کنید."
+searchPlaceholder = "جستجوی مراحل - \"scan\"، \"attach\" یا نام محصول را امتحان کنید"
+
+[portal.policies.operations.bodyMode]
+binary = "بایت‌های خام فایل"
+json = "داخل یک payload از نوع JSON"
+multipart = "به‌عنوان آپلود فایل (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "سرور ClamAV خودتان سند را بررسی می‌کند؛ چیزی از شبکه شما خارج نمی‌شود."
+label = "اسکن برای ویروس‌ها (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "اسناد دارای ماکرو، فایل اجرایی، اسکریپت یا اشیای تعبیه‌شده را رد می‌کند."
+label = "مسدود کردن محتوای فعال"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive سند را بررسی می‌کند و اگر پاک نباشد، اجرا متوقف می‌شود."
+label = "اسکن برای ویروس‌ها"
+
+[portal.policies.operations.confluenceAttach]
+description = "سند پردازش‌شده را روی یک صفحه بایگانی می‌کند."
+label = "پیوست به یک صفحه Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "سند را برای امضا به ConsignO Cloud ارسال می‌کند."
+label = "ارسال برای امضا (ConsignO)"
+note = "سند را ارسال می‌کند. دریافت نسخه امضاشده هنوز پشتیبانی نمی‌شود، چون یک مرحله نمی‌تواند نتیجه را به مرحله بعدی منتقل کند."
+
+[portal.policies.operations.customApiCall]
+description = "فراخوانی را خودتان بسازید: مسیر، روش، بدنه و مدیریت پاسخ."
+label = "فراخوانی یک API سفارشی"
+
+[portal.policies.operations.discordNotify]
+description = "به یک کانال اطلاع می‌دهد که خط‌مشی یک سند را رسیدگی کرده است."
+label = "ارسال پیام به Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "آنچه خط‌مشی انجام داده را به‌عنوان یک سند قابل جستجو ثبت می‌کند."
+label = "ایندکس کردن یک رویداد ممیزی در Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart برای APIهای آپلود مناسب است؛ JSON برای APIهایی مناسب است که فایل را داخل یک payload می‌خواهند؛ binary بایت‌های خام را ارسال می‌کند."
+label = "نحوه ارسال سند"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "یک بدنه JSON که همان‌طور که هست ارسال می‌شود. {{document.base64}} فایل را حمل می‌کند؛ {{document.*}} و {{run.*}} برای هر سند پر می‌شوند."
+label = "بدنه JSON"
+
+[portal.policies.operations.fields.connection]
+label = "حساب"
+
+[portal.policies.operations.fields.domain]
+label = "دامنه Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "فیلد فرمی که API انتظار دارد سند زیر آن باشد."
+label = "نام فیلد فایل"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "از"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "یک شیء JSON از جفت‌های نام/مقدار header. اعتبارنامه اتصال برای شما اضافه می‌شود."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "کلید issue"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "به‌عنوان بدنه پیام ارسال می‌شود. {{document.*}} و {{run.*}} برای هر سند پر می‌شوند."
+label = "پیام"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "شناسه صفحه"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "به URL پایه اتصال افزوده می‌شود. هرگز نمی‌تواند به میزبان دیگری برسد."
+label = "مسیر"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "محل نوشتن آن در drive. {{document.filename}} برای هر سند پر می‌شود."
+label = "مسیر مقصد"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report سند را دست‌نخورده می‌گذارد. Replace آن را با هرچه برمی‌گردد جایگزین می‌کند."
+label = "با پاسخ چه کار شود"
+
+[portal.policies.operations.fields.signerEmail]
+label = "ایمیل امضاکننده"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "موضوع"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio این متن را تحلیل می‌کند. از {{document.title}} استفاده کنید یا متنی را که می‌خواهید بررسی شود جای‌گذاری کنید."
+label = "متن برای بررسی"
+
+[portal.policies.operations.fields.to]
+label = "به"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "نام کاربری Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "به یک فضا اطلاع می‌دهد که خط‌مشی یک سند را رسیدگی کرده است."
+label = "ارسال پیام به Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "سند پردازش‌شده را روی یک issue بایگانی می‌کند."
+label = "پیوست به یک issue در Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "سند پردازش‌شده را به‌عنوان پیوست ارسال می‌کند."
+label = "ایمیل کردن سند (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "سند پردازش‌شده را داخل یک پوشه می‌نویسد."
+label = "آپلود به Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "سرور Presidio خودتان داده‌های شخصی‌ای را که پیدا می‌کند گزارش می‌دهد."
+label = "تشخیص داده‌های شخصی"
+note = "Presidio متن را می‌خواند، نه فایل‌ها را. متنی را که می‌خواهید بررسی شود به آن بدهید — خود سند آپلود نمی‌شود."
+
+[portal.policies.operations.responseMode]
+replace = "جایگزینی سند با پاسخ"
+report = "نگه داشتن سند، ثبت پاسخ"
+
+[portal.policies.operations.sendgridEmail]
+description = "سند پردازش‌شده را به‌عنوان پیوست ارسال می‌کند."
+label = "ایمیل کردن سند (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "به یک کانال اطلاع می‌دهد که خط‌مشی یک سند را رسیدگی کرده است."
+label = "ارسال پیام به Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "آنچه خط‌مشی انجام داده را در جایی ثبت می‌کند که ممیزان شما از قبل بررسی می‌کنند."
+label = "ارسال رویداد ممیزی به Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "آنچه خط‌مشی انجام داده را در یک گردآورنده HTTP ثبت می‌کند."
+label = "ارسال رویداد ممیزی به Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "به یک کانال اطلاع می‌دهد که خط‌مشی یک سند را رسیدگی کرده است."
+label = "ارسال پیام به Teams"
+
+[portal.policies.operations.webhookPost]
+description = "خود سند را به URL انتخابی شما ارسال می‌کند."
+label = "ارسال سند به یک webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "جزئیات اجرا را به اتوماسیون شما می‌دهد."
+label = "راه‌اندازی یک Zap یا سناریوی Make"
+
 [portal.policies.stats]
 activeFor = "فعال"
 dataProcessed = "داده پردازش‌شده"
@@ -7473,6 +8277,13 @@ label = "اسناد اعمال‌شده"
 description = "پیکربندی شده اما اجرا نمی‌شود"
 label = "متوقف"
 
+[portal.policies.table]
+appliesTo = "اعمال می‌شود به"
+docs = "اسناد اعمال‌شده"
+enforces = "اعمال می‌کند"
+policy = "خط‌مشی"
+status = "وضعیت"
+
 [portal.policies.wizard.actions]
 back = "بازگشت"
 cancel = "لغو"
@@ -7480,6 +8291,10 @@ continue = "ادامه"
 enablePolicy = "فعال کردن خط‌مشی"
 saveChanges = "ذخیره تغییرات"
 
+[portal.policies.wizard.capability.classify]
+desc = "نوع سند را از برچسب‌های تیم شما شناسایی و آن را برچسب‌گذاری می‌کند، تا بر اساس دسته‌بندی بایگانی و جستجو شود."
+label = "طبقه‌بندی سند"
+
 [portal.policies.wizard.capability.compress]
 desc = "سند را به اندازه فایل کوچک‌تر فشرده می‌کند."
 label = "کاهش اندازه فایل"
@@ -7500,10 +8315,18 @@ label = "حذف اطلاعات حساس"
 desc = "JavaScript پنهان را حذف می‌کند تا هنگام باز شدن سند چیزی به‌صورت خودکار اجرا نشود."
 label = "حذف محتوای فعال"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "با استفاده از یک مرجع timestamp مستقل ثابت می‌کند سند در این شکل دقیق، در یک نقطه زمانی وجود داشته است. فقط یک hash ارسال می‌شود - سند هرگز سرور شما را ترک نمی‌کند."
+label = "افزودن timestamp مورد اعتماد"
+
 [portal.policies.wizard.capability.watermark]
 desc = "یک نشان قابل مشاهده (مثلاً «محرمانه») را روی همه صفحات درج می‌کند."
 label = "اعمال واترمارک"
 
+[portal.policies.wizard.classification]
+description = "هر سند آپلودشده بر اساس برچسب‌های داخلی طبقه‌بندی و با انواع مناسب برچسب‌گذاری می‌شود. مجموعه برچسب‌ها در سراسر تیم شما مشترک است."
+labelsHeading = "برچسب‌های طبقه‌بندی"
+
 [portal.policies.wizard.errors]
 noTools = "ابتدا حداقل یک ابزار را در گردش کار فعال کنید."
 saveFailed = "خط‌مشی ذخیره نشد. لطفاً دوباره تلاش کنید."
@@ -7548,73 +8371,118 @@ setUp = "راه‌اندازی خط‌مشی {{category}}"
 [portal.policies.wizard.workflow]
 description = "انتخاب کنید این خط‌مشی با هر سندی که پردازش می‌کند چه کاری انجام دهد."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} فعال"
-noRule = "هنوز هیچ قاعده‌ای اعمال نشده است"
-subtitle = "اتوماسیون‌های دائمی که هر سند از آن‌ها عبور می‌کند، فارغ از اینکه کدام پایپ‌لاین آن را مدیریت می‌کند."
-title = "آنچه روی PDFهای شما اجرا می‌شود"
-
 [portal.policySummary.action]
-comingSoon = "ارتقا به Enterprise"
-configure = "پیکربندی"
 setUp = "راه‌اندازی"
 
-[portal.policySummary.column]
-activeRule = "قاعده فعال"
-policy = "خط‌مشی"
-status = "وضعیت"
+[portal.processorFlow]
+footnote = "شمارش‌ها مربوط به 24 ساعت گذشته هستند. سرعت جریان نمایشی است."
+liveBadge = "زنده"
+stats = "{{connected}} متصل · {{processed}} PDF پردازش‌شده"
+title = "پردازشگر PDF"
 
-[portal.policySummary.empty]
-description = "پس از پیکربندی خط‌مشی‌ها، دسته‌ها اینجا نمایش داده می‌شوند."
-title = "هنوز خط‌مشی‌ای وجود ندارد"
+[portal.processorFlow.lens]
+ariaLabel = "حالت نمایش"
+flow = "جریان"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "فعال"
-off = "خاموش"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "ناموفق"
+heading = "نتایج"
+success = "تحویل‌شده"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} فعال"
+count = "{{n}} · 24h"
+heading = "خط‌مشی‌ها"
+setUp = "راه‌اندازی"
 soon = "به‌زودی"
 
-[portal.processingStatus]
-managePlan = "مدیریت طرح"
-volumeSuffix = "PDFهای پردازش‌شده · ۳۰ روز گذشته"
+[portal.processorFlow.sankey]
+waist = "خط‌مشی‌ها · {{n}} فعال"
+
+[portal.processorFlow.sankey.empty]
+description = "یک منبع متصل کنید و یک خط‌مشی را روشن کنید تا جریان اسناد در پردازشگر را ببینید."
+title = "هنوز جریانی وجود ندارد"
+
+[portal.processorFlow.sources]
+comingSoonTag = "اتصال"
+editor = "ویرایشگر Stirling PDF"
+heading = "منابع"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "دریافت Email"
 
 [portal.procurement]
-reset = "بازنشانی خرید سازمانی (دمو)"
 subtitle = "تیم خود را ارزیابی، قراردادبندی و راه‌اندازی کنید. همه اسناد در یک مکان."
 title = "خرید سازمانی"
 
-[portal.procurement.action]
-download = "دانلود"
-pay = "اکنون پرداخت کنید"
-request = "درخواست"
-sign = "بررسی و امضا"
-upload = "آپلود"
-
 [portal.procurement.agreement]
 agreeCta = "موافقت و اشتراک"
+confidential = "محرمانه"
 confirm = "من توافق‌نامه Stirling Enterprise را خوانده‌ام و با آن موافقم."
-eyebrow = "توافق‌نامه"
-intro = "یک توافق‌نامه ترکیبی معامله شما را پوشش می‌دهد: Master Service Agreement، Order Form، EULA و Data Processing Agreement. آن را بررسی کنید، سپس موافقت کنید تا پیشنهاد قیمت را به‌عنوان یک اشتراک متعهد بپذیرید."
-title = "توافق‌نامه Enterprise خود را بررسی کنید"
+docName = "توافق‌نامه سازمانی Stirling"
+docSub = "MSA، Order Form، EULA و DPA، ترکیب‌شده در یک امضا."
+download = "دانلود"
+downloadDraftError = "تولید PDF توافق‌نامه ممکن نشد - renderer سند در دسترس نیست. لطفاً کمی بعد دوباره تلاش کنید یا با پشتیبانی تماس بگیرید."
+downloadError = "دانلود توافق‌نامه امضاشده ممکن نشد. لطفاً دوباره تلاش کنید."
+legalName = "نام شخصیت حقوقی"
+legalNamePlaceholder = "شخصیت حقوقی که امضا خواهد کرد"
+loadError = "بارگذاری توافق‌نامه ممکن نشد. لطفاً دوباره تلاش کنید."
+loading = "در حال بارگذاری توافق‌نامه..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "درخواست تغییرات"
+scrollHint = "برای بازبینی پیمایش کنید"
+signatory = "نام امضاکننده"
+signatoryPlaceholder = "نام کامل"
+signatoryTitle = "عنوان امضاکننده"
+signatoryTitlePlaceholder = "مثلاً مشاور حقوقی ارشد"
+signError = "ثبت امضای شما ممکن نشد. لطفاً دوباره تلاش کنید."
 
 [portal.procurement.builder]
 addons = "افزونه‌ها"
+addressLine1 = "خط آدرس 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "خط آدرس 2"
+addressLine2Placeholder = "سوئیت، طبقه، ساختمان"
 back = "بازگشت"
 businessName = "نام کسب‌وکار"
 businessNamePlaceholder = "شرکت شما"
+city = "شهر"
+cityPlaceholder = "San Francisco"
+completeRequired = "لطفاً پیش از تولید پیش‌فاکتور، فیلدهای الزامی (مشخص‌شده با *) را با یک ایمیل معتبر تکمیل کنید."
+contactEmail = "ایمیل تماس"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "نام تماس"
+contactNamePlaceholder = "Jane Doe"
 continue = "ادامه"
-country = "کشور"
-countryEuro = "منطقه یورو (EUR €)"
-countryUK = "بریتانیا (GBP £)"
-countryUS = "ایالات متحده (USD $)"
+done = "انجام شد"
 eula = "من EULA مربوط به Stirling Enterprise را خوانده‌ام و با آن موافقم. این سند بر توافق‌نامه‌ای که از این پیشنهاد قیمت ایجاد می‌شود حاکم است."
 generate = "ایجاد پیشنهاد قیمت"
-included = "شامل"
 indemnification = "غرامت IP"
 indemnificationSub = "طبق EULA، از ادعاهای واجد شرایط IP دفاع می‌کنیم"
-offlineLicense = "مجوز آفلاین / air-gapped"
-offlineLicenseSub = "یک فایل مجوز قابل دانلود برای یک نمونه self-hosted و air-gapped"
+paperEyebrow = "پیش‌فاکتور سازمانی"
+paperFor = "تهیه‌شده برای"
+pdfSize = "اندازه PDF"
+poNumber = "شماره PO"
+poNumberPlaceholder = "اختیاری"
+postalCode = "کد پستی"
+postalCodePlaceholder = "94105"
+posture = "حاکمیت"
+posture_count = "حدود {{count}} خط‌مشی"
+posture_essentials = "ضروریات"
+posture_essentialsSub = "طبقه‌بندی + اشتراک‌گذاری — پیش‌فرض‌ها"
+posture_governed = "حاکمیت‌یافته"
+posture_governedSub = "امنیت و مسیریابی را اضافه می‌کند"
+posture_regulated = "تنظیم‌شده"
+posture_regulatedSub = "هر دسته — Compliance، Retention، Ingestion"
 qbr = "بازبینی‌های فصلی کسب‌وکار"
 qbrSub = "SE شما هر فصل استفاده و نقشه راه را بررسی می‌کند"
+region = "ایالت / منطقه"
+regionPlaceholder = "California"
 running = "{{annual}} / سال · {{years}} ساله {{tcv}}"
 s1Sub = "تیم شما و PDFهایی که انتظار دارید هر سال اجرا شوند."
 s1Title = "چه مقدار پردازش خواهید کرد؟"
@@ -7623,6 +8491,12 @@ s2Title = "تعهد و سرویس"
 s3Sub = "برای پیشنهاد قیمت و توافق‌نامه‌ای که ایجاد می‌کند."
 s3Title = "جزئیات شما"
 serviceLevel = "سطح سرویس"
+size_compact = "فشرده"
+size_compactSub = "بیشتر متن، کمتر از 1 MB"
+size_heavy = "سنگین"
+size_heavySub = "اسکن‌شده یا پرتصویر، 5 MB+"
+size_standard = "استاندارد"
+size_standardSub = "متن و تصاویر ترکیبی، 1 تا 5 MB"
 slDedicated = "اختصاصی"
 slDedicatedSub = "۴ ساعت کاری · مدیر حساب اختصاصی · +۳۰٪"
 slPriority = "اولویت‌دار"
@@ -7630,6 +8504,8 @@ slPrioritySub = "همان روز کاری · CSM مشخص · +۱۵٪"
 slStandard = "استاندارد"
 slStandardSub = "روز کاری بعد · CSM مشترک · شامل"
 stepOf = "مرحله {{n}} از {{total}}"
+taxId = "VAT / شناسه مالیاتی"
+taxIdPlaceholder = "اختیاری"
 term = "دوره"
 termDiscount = "{{pct}}٪ تخفیف تعهد چندساله اعمال شد"
 title = "ساخت پیشنهاد قیمت"
@@ -7637,6 +8513,7 @@ training = "راه‌اندازی و آموزش"
 trainingSub = "جلسات زنده برای شروع کار تیم شما"
 users = "کل کاربران"
 usersPlaceholder = "مثلاً 250"
+viewEula = "خواندن آن"
 volEstimated = "برآورد شده از {{count}} کاربر (حدود ۲٬۰۰۰ PDF برای هر نفر، شامل اتوماسیون). اگر عدد دقیق‌تری می‌دانید ویرایش کنید."
 volManual = "از عدد شما استفاده می‌شود. هر زمان می‌توانید بر اساس اندازه تیم دوباره برآورد کنید."
 volNoUsers = "مطمئن نیستید؟ اندازه تیم خود را وارد کنید تا برایتان برآورد کنیم."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "مثلاً 1,000,000"
 years_one = "{{count}} سال"
 years_other = "{{count}} سال"
 
-[portal.procurement.docs]
-count_one = "{{count}} سند"
-count_other = "{{count}} سند"
-done = "انجام شد"
-here = "اینجا هستید"
-hide = "پنهان کردن"
-optional = "اختیاری"
-paidAddon = "افزونه پولی"
-show = "نمایش"
-subtitle = "هر چیزی که در هر مرحله از مسیر نیاز دارید، هم‌زمان با پیشرفت معامله نمایش داده می‌شود."
-supportingSubtitle = "SOC 2، بازبینی‌های امنیتی، فرم‌های مالیاتی و موارد بیشتر، آماده زمانی که تیم امنیت یا خرید شما درخواست کند. برخی هزینه یک‌باره دارند."
-supportingTitle = "پشتیبانی از ارزیابی شما"
+[portal.procurement.documents]
+agreement = "توافق‌نامه سازمانی"
+agreementSub = "MSA، Order Form و DPA در یک امضا."
+download = "دانلود"
+eula = "EULA و شرایط تجاری"
+eulaSub = "نرم‌افزار و شرایط تجاری self-serve."
+invoice = "فاکتور"
+invoiceSub = "اولین فاکتور اشتراک شما."
+laterInvoice = "پس از پذیرش شما در دسترس است"
+laterQuote = "پس از صدور پیش‌فاکتور شما در دسترس است"
+quote = "پیش‌فاکتور"
+quoteSub = "پیش‌فاکتور سازمانی ریزاقلام شما."
+sla = "پیوست SLA"
+slaSub = "سطوح پشتیبانی و اهداف زمان پاسخ."
+subprocessors = "پردازشگران فرعی"
+subprocessorsSub = "اشخاص ثالثی که داده‌ها را از طرف شما پردازش می‌کنند."
+subtitle = "مدارک معامله شما، در هر زمان در دسترس."
 title = "اسناد"
-upcoming = "پیش‌رو"
+view = "مشاهده"
 
 [portal.procurement.error]
 title = "مشکلی پیش آمد"
 
 [portal.procurement.hero]
-company = "معامله Enterprise شما"
+barAria = "مرحله {{current}} از {{total}}"
 ctaAgreement = "بررسی و امضای توافق‌نامه"
-ctaLive = "شما فعال هستید"
-ctaPayment = "افزودن پرداخت"
+ctaExploring = "راه‌اندازی نسخه آزمایشی شما"
 ctaQuote = "بررسی پیشنهاد قیمت"
+ctaReviewQuote = "بازبینی پیش‌فاکتور"
 ctaTrial = "ساخت پیشنهاد قیمت"
+documents = "اسناد"
 eyebrow = "خرید سازمانی Enterprise"
+eyebrowCompany = "{{company}} سازمانی"
 inviteTeammates = "دعوت از هم‌تیمی‌ها"
-keyDocs = "اسناد کلیدی"
-nextStep = "مرحله بعد: {{action}}"
-notStarted = "شروع نشده"
+licenseKey = "کلید مجوز"
+liveSub = "سازمان شما آماده‌سازی شده و مجوز شما فعال است."
+liveTitle = "شما روی Stirling Enterprise فعال هستید"
+next = "بعدی: {{stage}}"
 open = "باز کردن خرید سازمانی"
 scheduleCall = "زمان‌بندی تماس"
-setup1Sub = "هم‌تیمی‌های خود را دعوت کنید"
-setup1Title = "استقرار ویرایشگر PDF"
-setup2Sub = "پردازش را در ویرایشگرها و منابع دیگر فعال کنید"
-setup2Title = "اتصال پردازشگر PDF"
-setup3Sub = "در صورت نیاز، Security، Compliance، Routing یا Retention را فعال کنید"
-setup3Title = "افزودن خط‌مشی‌های پیشنهادی"
+sentenceAgreement = "بازبینی و امضای توافق‌نامه"
+sentenceLive = "آماده‌سازی و عرضه"
+sentencePayment = "سفارش خرید و پرداخت"
+sentenceQuote = "بازبینی و پذیرش پیش‌فاکتور شما"
+sentenceTrial = "راه‌اندازی فضای کاری آزمایشی شما"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} روز باقی مانده"
 daysLeft_other = "{{count}} روز باقی مانده"
-engineerLabel = "مهندس راهکارهای شما"
-eyebrow = "استقرار شما"
-live = "شما در Stirling Enterprise فعال هستید"
-nextStep = "مرحله بعد: {{action}}"
-subtitle = "مهندس راهکارهای شما در همه مراحل همراه است. هر بار یک اقدام بعدی؛ فهرست کامل در پایین آمده است."
-title = "از دوره آزمایشی تا اجرا، یک مسیر هدایت‌شده"
-trialTitle = "دوره آزمایشی Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "یک امضا MSA، فرم سفارش، EULA و DPA را پوشش می‌دهد."
@@ -7727,6 +8604,9 @@ downloadError = "هنوز امکان ایجاد فایل مجوز آفلاین 
 downloadOffline = "دانلود مجوز آفلاین (.lic)"
 hint = "این کلید را برای فعال‌سازی در یک نمونه self-hosted وارد کنید، یا برای سوابق خود نگه دارید. آن را امن نگه دارید."
 label = "کلید مجوز شما"
+subtitle = "یک نمونه self-hosted را با این کلید فعال کنید، یا آن را برای سوابق خود نگه دارید."
+title = "کلید مجوز شما"
+trialFileHint = "این فایل مجوز آزمایشی شماست. وقتی توافق‌نامه شما برقرار شد، برگردید و دوباره آن را دانلود کنید — برخلاف کلید مجوز آنلاین، فایل .lic به‌خودی‌خود به‌روزرسانی نمی‌شود."
 
 [portal.procurement.link]
 cta = "پیوند دادن حساب"
@@ -7739,65 +8619,62 @@ description = "اشتراک شما فعال است و مجوز شما صادر 
 eyebrow = "فعال"
 title = "شما در Stirling Enterprise فعال هستید"
 
-[portal.procurement.locked]
-description = "کلیدهای آزمایشی، پیشنهادهای قیمت با حجم متعهد، توافق‌نامه تک‌امضایی، پرداخت و دفتر اسناد شما پس از شروع ارزیابی Enterprise همه اینجا قرار می‌گیرند."
-eyebrow = "فقط Enterprise"
-talkToSales = "صحبت با فروش"
-title = "مسیر خرید سازمانی با Enterprise باز می‌شود"
-
 [portal.procurement.milestone]
-accept = "پذیرش و ادامه"
-description = "PDF را دانلود کنید تا با تیم خود به اشتراک بگذارید، وقتی آماده بودید برای پذیرش برگردید، یا تغییرات ایجاد کنید."
-download = "دانلود PDF"
 downloadError = "هنوز امکان دانلود PDF پیشنهاد قیمت وجود ندارد — لطفاً چند لحظه دیگر دوباره تلاش کنید."
-edit = "ویرایش پیشنهاد قیمت"
-eyebrow = "پیشنهاد قیمت {{number}}"
-perYear = " / سال"
-preparedFor = "تهیه‌شده برای {{company}}"
-tcv = "{{value}} ارزش کل قرارداد"
-title = "پیشنهاد قیمت شما آماده است"
-
-[portal.procurement.modal]
-cancel = "لغو"
-chooseFile = "انتخاب فایل"
-close = "بستن"
-downloadBody = "دانلود شما به‌زودی آغاز می‌شود."
-downloadCta = "دانلود"
-downloadTitle = "دانلود"
-noFile = "هیچ فایلی انتخاب نشده است"
-payBody = "قرارداد متعهد خود را از طریق Stripe با کارت یا انتقال بانکی پرداخت کنید. فضای کاری شما به‌محض تسویه پرداخت آماده می‌شود."
-payCta = "ادامه به Stripe"
-payTitle = "تأیید پرداخت"
-requestBodyFree = "ما این مورد را بنا به درخواست ایجاد می‌کنیم. تأیید کنید تا مهندس راهکارهای شما به‌زودی آن را ارسال کند."
-requestBodyPaid = "این یک افزونه پولی است. تأیید کنید تا مهندس راهکارهای شما آن را برآورد کرده و مدارک را ارسال کند."
-requestCta = "درخواست"
-requestTitle = "درخواست این سند"
-signBody = "توافق‌نامه Stirling Enterprise را برای امضای الکترونیکی باز می‌کند: یک امضا MSA، فرم سفارش، EULA و DPA را پوشش می‌دهد. ما به‌صورت خودکار امضای متقابل می‌کنیم و شما به مرحله پرداخت می‌روید."
-signCta = "باز کردن برای امضا"
-signTitle = "توافق‌نامه خود را بررسی و امضا کنید"
-uploadBody = "PO خود را برای ما بفرستید و ما مطابق شرایط شما فاکتور صادر می‌کنیم. PDF را بکشید و رها کنید یا از پایین یک فایل انتخاب کنید."
-uploadCta = "آپلود سفارش خرید"
-uploadTitle = "آپلود سفارش خرید شما"
 
 [portal.procurement.payment]
 description = "پیشنهاد قیمت شما پذیرفته شده و مجوز شما از قبل فعال است — تیم شما می‌تواند بلافاصله شروع کند. هر زمان آماده بودید اولین فاکتور را پرداخت کنید؛ می‌توانید آن را اینجا پرداخت یا دانلود کنید، بدون نیاز به ایمیل."
+downloadAgreement = "دانلود توافق‌نامه امضاشده"
 downloadInvoice = "دانلود فاکتور"
-simulate = "شبیه‌سازی دریافت پرداخت (دمو)"
+eyebrow = "پرداخت"
 title = "اشتراک ایجاد شد"
 viewInvoice = "مشاهده و پرداخت فاکتور"
 
+[portal.procurement.review]
+acceptCta = "پذیرش پیش‌فاکتور"
+annual = "هزینه سالانه (سال 1)"
+downloadCta = "دانلود پیش‌فاکتور"
+poNumber = "سفارش خرید: {{po}}"
+renewal = "پس از دوره با {{amount}}/سال تمدید می‌شود (+{{pct}}% CPI)"
+tcv = "دوره {{years}} ساله، پرداخت کامل از پیش: {{tcv}}"
+validUntil = "معتبر تا {{date}}"
+
 [portal.procurement.schedule]
 fallback = "زمان‌بند بارگیری نشد."
 fallbackLink = "باز کردن زمان‌بندی در برگه جدید"
+loading = "در حال بارگذاری زمان‌بند..."
 subtitle = "مهندس راهکارهای شما تیم‌تان را در طول استقرار راهنمایی می‌کند. زمانی را انتخاب کنید که برای شما مناسب است."
 title = "زمان‌بندی تماس"
 
-[portal.procurement.status]
-action = "اقدام لازم است"
-available = "در دسترس"
-complete = "کامل"
-pending = "در انتظار"
-request = "در صورت درخواست"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "مهروموم‌شده، بدون خروجی"
+back = "بازگشت"
+businessName = "نام کسب‌وکار"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "مدیریت‌شده، سریع‌ترین شروع"
+continue = "ادامه"
+deployment = "کجا باید مستقر شود؟"
+eula = "با Stirling EULA و شرایط تجاری موافقم."
+fullName = "نام کامل"
+fullNamePlaceholder = "نام شما"
+invites = "دعوت از هم‌تیمی‌ها · اختیاری"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "زمان‌بندی تماس"
+seats = "افراد آزمایش‌کننده"
+seatsPlaceholder = "مثلاً 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker یا Kubernetes"
+start = "شروع نسخه آزمایشی"
+stepOf = "مرحله {{n}} از {{total}}"
+subtitle = "14 روز رایگان، بدون نیاز به کارت."
+subtitleDetails = "چند جزئیات برای پیش‌فاکتور و توافق‌نامه شما."
+talkFirst = "ترجیح می‌دهید ابتدا صحبت کنید؟"
+title = "راه‌اندازی نسخه آزمایشی شما"
+viewEula = "خواندن آن"
+workEmail = "ایمیل کاری"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "تمدید، ۷ روز اضافه می‌کند و به مهندس راهکارهای شما اطلاع می‌دهد."
@@ -7808,20 +8685,6 @@ maxed = "به سقف رسیده"
 subtitle = "دوره آزمایشی رایگان شما تا {{date}} ادامه دارد. کارت لازم نیست."
 title = "دوره آزمایشی Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "قیمت‌گذاری حجم متعهد، SSO + SCIM + RBAC در سطح سازمان، ممیزی تغییرناپذیر ۹۰ روزه و SE اختصاصی."
-homeCta = "شروع دوره آزمایشی →"
-homeHeadline = "میلیون‌ها PDF را پردازش کنید."
-
-[portal.recentActivity]
-title = "فعالیت اخیر"
-viewAll = "مشاهده همه"
-
-[portal.recentActivity.empty]
-description = "اجرای پایپ‌لاین‌ها، استقرارها و رویدادهای عامل اینجا نمایش داده می‌شوند."
-title = "هنوز چیزی اینجا نیست"
-
 [portal.search]
 ariaLabel = "جستجو"
 placeholder = "جستجو در Stirling — endpoints، پایپ‌لاین‌ها، مستندات…"
@@ -7838,58 +8701,50 @@ admin = "مدیر"
 [portal.settings.sections]
 account-link = "پیوند حساب"
 
-[portal.shell.header]
-accountFallback = "حساب"
-accountMenu = "منوی حساب"
-darkMode = "حالت تاریک"
-lightMode = "حالت روشن"
-search = "جستجو"
-searchPlaceholder = "جستجو…"
-signOut = "خروج"
-switchToDark = "تغییر به پوسته تاریک"
-switchToLight = "تغییر به پوسته روشن"
-
 [portal.shell.sidebar]
 appEditor = "ویرایشگر"
 appProcessor = "پردازشگر"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} سند"
 linkAccount = "پیوند حساب Stirling"
-planEditor = "طرح ویرایشگر"
-planEnterprise = "طرح Enterprise"
-planProcessor = "طرح پردازشگر"
 primaryNav = "ناوبری اصلی"
 switchApp = "تغییر برنامه"
 
+[portal.shell.topbar]
+closeNav = "بستن ناوبری"
+openNav = "باز کردن ناوبری"
+search = "جستجو"
+
 [portal.sources]
 subtitle = "اتصالات ورودی قابل استفاده مجدد که اسناد را به Stirling وارد می‌کنند. یک اتصال را یک‌بار پیکربندی کنید، سپس از آن در هر تعداد خط‌مشی استفاده کنید. برای پیکربندی و دیدن خط‌مشی‌هایی که از آن استفاده می‌کنند، روی یک ردیف کلیک کنید."
 title = "منابع"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "اتصال منبع"
 
+[portal.sources.builder]
+back = "بازگشت به منابع"
+backToTypes = "همه انواع منبع"
+cancel = "لغو"
+chooseHint = "انتخاب کنید اسناد از کجا می‌آیند. اتصال‌دهنده‌های خاکستری‌شده در راه هستند."
+comingSoon = "به‌زودی"
+comingSoonHeading = "به‌زودی"
+create = "ایجاد منبع"
+createTitle = "اتصال یک منبع"
+delete = "حذف"
+editTitle = "ویرایش منبع"
+enabled = "فعال"
+save = "ذخیره تغییرات"
+
+[portal.sources.builder.folderAccess]
+description = "اتوماسیون‌های پوشه فقط می‌توانند از پوشه‌هایی استفاده کنند که یک مدیر مجاز کرده است. آن را در تنظیمات دسترسی پوشه اضافه کنید، سپس دوباره تلاش کنید."
+openSettings = "تنظیمات دسترسی پوشه"
+title = "این پوشه مجاز نیست"
+
 [portal.sources.delete]
 body = "«{{name}}» حذف شود؟ این کار قابل بازگشت نیست. خط‌مشی‌هایی که به آن ارجاع می‌دهند باید به‌روزرسانی شوند."
 cancel = "لغو"
 confirm = "حذف"
 title = "منبع حذف شود؟"
 
-[portal.sources.detail]
-closeAriaLabel = "بستن جزئیات"
-delete = "حذف منبع"
-docs24h = "۲۴ ساعت گذشته"
-docs30d = "۳۰ روز گذشته"
-docsTotal = "کل مشاهده‌شده"
-docsTrend = "اسناد در ۳۰ روز گذشته"
-documents = "اسناد"
-edit = "ویرایش"
-notReferenced = "هیچ خط‌مشی‌ای به آن ارجاع نمی‌دهد، بنابراین حذف آن امن است."
-pause = "مکث"
-resume = "ادامه"
-subtitle = "{{type}} · {{status}}"
-usedBy = "استفاده‌شده توسط"
-
 [portal.sources.empty]
 description = "یک پوشه (و به‌زودی فضای ذخیره‌سازی ابری) را متصل کنید تا خط‌مشی‌های شما جایی برای دریافت اسناد داشته باشند."
 title = "هنوز هیچ منبعی متصل نشده است"
@@ -7899,18 +8754,57 @@ inUse = "در حال استفاده"
 total = "اتصالات"
 unused = "استفاده‌نشده"
 
+[portal.sources.networkFields.connection]
+helperText = "اتصال ذخیره‌شده با آدرس سرور و اعتبارنامه‌ها. توسط هر منبعی که به آن ارجاع می‌دهد دوباره استفاده می‌شود."
+label = "اتصال"
+
+[portal.sources.networkFields.directory]
+helperText = "پوشه‌ای روی سرور برای poll کردن، نسبت به خانه ورود یا ریشه share. برای ریشه خالی بگذارید."
+label = "پوشه"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume هر فایل را پس از اینکه هر خط‌مشی آن را پردازش کرد، از سرور حذف می‌کند."
+label = "حالت خواندن"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: پردازش هر فایل فقط یک‌بار"
+snapshot = "Snapshot: خواندن دوباره پوشه در هر اجرا"
+
+[portal.sources.networkFields.recursive]
+label = "عمق پوشه"
+
+[portal.sources.networkFields.recursive.options]
+all = "شامل زیرپوشه‌ها"
+top = "فقط سطح بالا"
+
 [portal.sources.status]
 active = "فعال"
 disabled = "غیرفعال"
 unused = "استفاده‌نشده"
 
 [portal.sources.table]
+documents = "اسناد"
 source = "منبع"
 status = "وضعیت"
 usedBy = "خط‌مشی‌ها"
 
+[portal.sources.types.box]
+description = "اسناد را از پوشه‌های Box که تیم شما از قبل به اشتراک گذاشته است بیرون بکشید."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "اسناد را از یک پوشه مشترک Dropbox بیرون بکشید."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "اسنادی که تیم شما در ویرایشگر پردازش کرده است، در اجراهای خط‌مشی و AI."
 label = "ویرایشگر"
+noPolicies = "هنوز هیچ خط‌مشی‌ای از ویرایشگر اجرا نشده است."
+
+[portal.sources.types.email]
+description = "پیوست‌های ارسال‌شده به یک mailbox اختصاصی را به سند تبدیل کنید."
+label = "صندوق ورودی Email"
 
 [portal.sources.types.folder]
 description = "یک دایرکتوری روی سرور را برای اسناد جدید پایش کنید."
@@ -7943,25 +8837,80 @@ label = "عمق پوشه"
 all = "شامل زیرپوشه‌ها"
 top = "فقط سطح بالا"
 
+[portal.sources.types.ftp]
+description = "یک پوشه سرور FTP یا FTPS را برای اسناد جدید poll کنید."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "اسناد را از پوشه‌های مشترک Google Drive بیرون بکشید."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "یک SMB network share را برای اسناد جدید پایش کنید."
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "پوشه‌های OneDrive را برای اسناد جدید پایش کنید."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "اسناد را از یک bucket در Amazon S3 یا سازگار با S3 بیرون بکشید."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "اتصال ذخیره‌شده‌ای که bucket و اعتبارنامه‌ها را نگه می‌دارد. توسط هر منبع و خروجی Pipeline که به آن ارجاع می‌دهد دوباره استفاده می‌شود."
+label = "اتصال"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume هر object را پس از اینکه هر خط‌مشی آن را پردازش کرد، از bucket حذف می‌کند."
+label = "حالت خواندن"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: پردازش هر object فقط یک‌بار"
+snapshot = "Snapshot: خواندن دوباره bucket در هر اجرا"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "فقط objectهایی که key آن‌ها با این prefix شروع می‌شود پردازش می‌شوند."
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "یک پوشه drop در SFTP را برای اسناد جدید poll کنید."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "اسناد را از کتابخانه‌های سند SharePoint بیرون بکشید."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "منبع"
 
+[portal.sources.types.webhook]
+createNote = "هنگام ایجاد این webhook، یک URL تحویل و secret امضا تولید می‌شود. فرستنده‌ها اسناد را با POST به آن URL ارسال می‌کنند و خط‌مشی‌های ارجاع‌دهنده هنگام ورود اجرا می‌شوند."
+description = "دریافت اسناد با HTTP POST امضاشده از هر سیستم خارجی."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL تحویل"
+secretNote = "secret امضا هنگام ایجاد webhook فقط یک‌بار نمایش داده می‌شود. برای تغییر آن، منبع را دوباره بسازید."
+
+[portal.sources.types.webhook.reveal]
+copy = "کپی"
+done = "انجام شد"
+secret = "secret امضا"
+secretHelp = "بدنه خام هر تحویل را با این کلید امضا کنید (HMAC-SHA256) و آن را به‌عنوان header با نام X-Stirling-Signature ارسال کنید."
+secretWarning = "secret امضا را همین حالا کپی کنید. برای امنیت شما فقط یک‌بار نمایش داده می‌شود و بعداً قابل بازیابی نیست."
+title = "Webhook ایجاد شد"
+url = "URL تحویل"
+usage = "هر سند را به‌عنوان بدنه خام درخواست با POST به URL تحویل ارسال کنید، با نوع محتوای binary (application/pdf یا application/octet-stream). خط‌مشی‌های ارجاع‌دهنده هنگام ورود به‌صورت خودکار اجرا می‌شوند."
+
 [portal.sources.wizard]
-back = "بازگشت"
-cancel = "لغو"
-continue = "ادامه"
-editTitle = "ویرایش منبع"
 name = "نام"
 namePlaceholder = "مثلاً دریافت ادعاها"
-save = "ذخیره تغییرات"
-subtitle = "مرحله {{current}} از {{total}} · {{label}}"
-title = "اتصال یک منبع"
 type = "نوع"
 
-[portal.sources.wizard.steps]
-chooseType = "انتخاب نوع"
-configure = "پیکربندی"
-review = "بررسی و اتصال"
+[portal.stepModal]
+close = "بستن"
 
 [portal.usage]
 managePayment = "مدیریت پرداخت"
@@ -8021,16 +8970,9 @@ summary = "مالک یک تیم است — منابع اعضا و پیکربند
 2 = "دسترسی پورتال از طریق خط‌مشی پیش‌فرض"
 3 = "هر کاری که عضو می‌تواند انجام دهد"
 
-[portal.welcome]
-ariaLabel = "به Stirling PDF خوش آمدید"
-badge = "Open-source"
-installEditor = "نصب ویرایشگر"
-inviteTeammates = "دعوت از هم‌تیمی‌ها"
-openInBrowser = "باز کردن در مرورگر"
-perks = "همیشه رایگان · قابل self-host"
-subtitle = "امن‌ترین ویرایشگر PDF جهان برای تیم‌ها با هر اندازه‌ای رایگان است. شامل بیش از ۶۰ عملیات PDF و SSO."
-title = "خوش آمدید به"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · نامحدود"
 
 [printFile]
 title = "چاپ فایل"
@@ -8613,6 +9555,14 @@ text = "صفحات PDF خود را در گام‌های ۹۰ درجه‌ای ب
 [rotate.tooltip.header]
 title = "نمای کلی تنظیمات چرخش"
 
+[ruler]
+clearAll = "پاک کردن همه"
+hideAllLabels = "پنهان کردن همه برچسب‌ها"
+hideSmallLabels = "پنهان کردن برچسب‌های کوچک"
+physicalValues = "فیزیکی"
+scaled = "مقیاس‌شده"
+showAllLabels = "نمایش همه برچسب‌ها"
+
 [sanitize]
 desc = "حذف عناصر بالقوه مضر از فایل‌های PDF."
 sanitizationResults = "نتایج پاک‌سازی"
@@ -8654,31 +9604,45 @@ label = "حذف فراداده XMP"
 [sanitize.steps]
 settings = "تنظیمات"
 
-[sanitizePdf]
-tags = "پاکسازی،امن،ایمن،حذف تهدیدها"
-
 [sanitizePDF]
 title = "پاکسازی PDF"
 
+[sanitizePdf]
+tags = "پاکسازی،امن،ایمن،حذف تهدیدها"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "تنظیم مقیاس صفحه"
 
+[scaleSettings]
+activeScale = "مقیاس فعال"
+apply = "اعمال مقیاس"
+applyCalibration = "اعمال کالیبراسیون"
+calculatedScale = "مقیاس محاسبه‌شده"
+calibrate = "کالیبره کردن"
+calibrating = "در حال کالیبره‌کردن"
+calibrationDistanceRequired = "یک فاصله واقعی بزرگ‌تر از صفر وارد کنید"
+calibrationInvalid = "محاسبه مقیاس از این اندازه‌گیری ممکن نیست"
+calibrationPaperDistance = "فاصله اندازه‌گیری‌شده در صفحه: {{distance}}"
+calibrationTitle = "کالیبره‌کردن مقیاس"
+calibrationTooltip = "برای محاسبه خودکار مقیاس، یک فاصله معلوم را اندازه‌گیری کنید"
+customScale = "مقیاس سفارشی"
+noneSet = "هیچ مقیاس سفارشی تنظیم نشده است"
+presets = "مقیاس‌های از پیش تنظیم‌شده"
+ratio = "نسبت مقیاس"
+ratioHelp = "نسبت: 1 واحد صفحه = X واحد واقعی"
+ratioPlaceholder = "مثلاً 100"
+ratioPositive = "نسبت باید بزرگ‌تر از صفر باشد"
+ratioRequired = "نسبت الزامی است"
+realDistance = "فاصله واقعی"
+realDistancePlaceholder = "مثلاً 5"
+reset = "بازنشانی به پیش‌فرض‌ها"
+unit = "واحد"
+unitInvalid = "واحد نامعتبر: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "آستانه زاویه:"
-10 = "اندازه حاشیه اضافه‌شده و حذف‌شده برای جلوگیری از حاشیه‌های سفید در خروجی را تنظیم می‌کند (پیش‌فرض: ۱)."
-2 = "حداقل زاویه مطلق مورد نیاز برای چرخاندن تصویر را تنظیم می‌کند (پیش‌فرض: ۱۰)."
-3 = "تحمل‌پذیری:"
-4 = "دامنه تغییر رنگ در اطراف رنگ پس‌زمینه تخمین‌زده‌شده را تعیین می‌کند (پیش‌فرض: ۳۰)."
-5 = "حداقل ناحیه:"
-6 = "آستانه حداقل ناحیه برای یک عکس را تنظیم می‌کند (پیش‌فرض: ۱۰۰۰۰)."
-7 = "حداقل ناحیه کانتور:"
-8 = "آستانه حداقل ناحیه کانتور برای یک عکس را تنظیم می‌کند"
-9 = "اندازه حاشیه:"
-
 [scannerImageSplit]
 submit = "استخراج اسکن‌های تصویر"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "این ابزار چه می‌کند"
 whatThisDoesDesc = "به‌صورت خودکار هر عکس را از یک صفحه اسکن‌شده یا تصویر مرکب پیدا و استخراج می‌کند—بدون برش دستی."
 whenToUse = "زمان استفاده"
 
+[ScannerImageSplit.selectText]
+1 = "آستانه زاویه:"
+10 = "اندازه حاشیه اضافه‌شده و حذف‌شده برای جلوگیری از حاشیه‌های سفید در خروجی را تنظیم می‌کند (پیش‌فرض: ۱)."
+2 = "حداقل زاویه مطلق مورد نیاز برای چرخاندن تصویر را تنظیم می‌کند (پیش‌فرض: ۱۰)."
+3 = "تحمل‌پذیری:"
+4 = "دامنه تغییر رنگ در اطراف رنگ پس‌زمینه تخمین‌زده‌شده را تعیین می‌کند (پیش‌فرض: ۳۰)."
+5 = "حداقل ناحیه:"
+6 = "آستانه حداقل ناحیه برای یک عکس را تنظیم می‌کند (پیش‌فرض: ۱۰۰۰۰)."
+7 = "حداقل ناحیه کانتور:"
+8 = "آستانه حداقل ناحیه کانتور برای یک عکس را تنظیم می‌کند"
+9 = "اندازه حاشیه:"
+
 [search]
 noResults = "هیچ نتیجه‌ای یافت نشد"
 placeholder = "عبارت جستجو را وارد کنید..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "سرور Stirling-PDF شما آفلاین است و \
 [session]
 expired = "نشست شما به پایان رسیده است. لطفاً صفحه را تازه‌سازی کرده و دوباره تلاش کنید."
 
-[sessionManagement.tooltip]
-header = "مدیریت نشست‌های امضا"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "شرکت‌کنندگان جدید به انتهای ترتیب امضا اضافه می‌شوند"
-bullet2 = "پس از نهایی‌سازی نشست، نمی‌توان شرکت‌کننده اضافه کرد"
-bullet3 = "هر شرکت‌کننده وقتی نوبتش شود اعلان دریافت می‌کند"
-description = "می‌توانید هر زمان پیش از نهایی‌سازی، شرکت‌کنندگان بیشتری به یک نشست فعال اضافه کنید."
-title = "افزودن شرکت‌کنندگان"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>نهایی‌سازی کامل</b>: همه شرکت‌کنندگان امضا کرده‌اند"
-bullet2 = "<b>نهایی‌سازی جزئی</b>: برخی شرکت‌کنندگان هنوز امضا نکرده‌اند"
-bullet3 = "شرکت‌کنندگان امضانشده از سند نهایی حذف می‌شوند"
-bullet4 = "پس از نهایی‌سازی، می‌توانید PDF امضاشده را در فایل‌های فعال بارگذاری کنید"
-description = "نهایی‌سازی، همه امضاها را در یک PDF امضاشده واحد ترکیب می‌کند. این اقدام قابل بازگشت نیست."
-title = "نهایی‌سازی نشست"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "نمی‌توان شرکت‌کنندگانی را که قبلاً امضا کرده‌اند حذف کرد"
-bullet2 = "شرکت‌کنندگان حذف‌شده دیگر اعلان دریافت نخواهند کرد"
-bullet3 = "ترتیب امضا به‌صورت خودکار تنظیم می‌شود"
-description = "پیش از امضا می‌توان شرکت‌کنندگان را از نشست‌ها حذف کرد."
-title = "حذف شرکت‌کنندگان"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "هر امضا به‌صورت ترتیبی روی PDF اعمال می‌شود"
-bullet2 = "امضاکنندگان بعدی می‌توانند امضاهای قبلی را ببینند"
-bullet3 = "برای فرایندهای تأیید و زنجیره‌های حفظ و انتقال قانونی حیاتی است"
-description = "ترتیبی که هنگام ایجاد نشست مشخص می‌کنید، تعیین می‌کند چه کسی ابتدا امضا کند."
-title = "ترتیب امضا"
-
 [settings]
 close = "بستن"
 
+[settings.ai]
+documents = "اسناد و RAG"
+general = "عمومی"
+limits = "محدودیت‌ها و عملکرد"
+models = "مدل‌ها و ارائه‌دهندگان"
+title = "هوش مصنوعی"
+
 [settings.configuration]
 advanced = "پیشرفته"
 database = "پایگاه داده"
 endpoints = "نقاط پایانی"
 features = "قابلیت‌ها"
+folderAccess = "دسترسی به پوشه"
 mcp = "MCP Server"
 storageSharing = "ذخیره‌سازی فایل و اشتراک‌گذاری"
 systemSettings = "تنظیمات سیستم"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "ویرایشگر پیش‌فرض PDF"
 defaultPdfEditorActive = "Stirling PDF ویرایشگر پیش‌فرض PDF شماست"
 defaultPdfEditorChecking = "در حال بررسی..."
 defaultPdfEditorInactive = "برنامه دیگری به‌عنوان پیش‌فرض تنظیم شده است"
+defaultPdfEditorRemind = "یادآوری برای تنظیم به‌عنوان پیش‌فرض"
+defaultPdfEditorRemindDescription = "وقتی Stirling PDF برنامه پیش‌فرض PDF شما نیست، یک بنر نمایش داده شود."
 defaultPdfEditorSet = "از پیش پیش‌فرض است"
 defaultStartupView = "نمای پیش‌فرض هنگام اجرا"
 defaultStartupViewDescription = "انتخاب کنید هنگام شروع برنامه کدام زبانه در ستون چپ فعال باشد"
@@ -8817,9 +9771,18 @@ languageDescription = "زبان نمایش را انتخاب کنید"
 logout = "خروج"
 setAsDefault = "تنظیم به‌عنوان پیش‌فرض"
 theme = "تم"
+themeAccent = "رنگ تأکیدی"
+themeAccentCustom = "رنگ سفارشی"
+themeAccentCustomHint = "سفارشی (پیش‌فرض‌ها توصیه می‌شوند)"
+themeAccentDark = "رنگ تأکیدی حالت تاریک"
+themeAccentDefault = "پیش‌فرض"
+themeAccentDefaultHint = "تم پیش‌فرض (توصیه می‌شود)"
+themeAccentDescription = "دکمه‌ها، لینک‌ها و برجسته‌سازی‌ها از آن پیروی می‌کنند و به‌طور نامحسوس به برنامه رنگ می‌دهند. حالت روشن و تاریک هرکدام رنگ مخصوص خود را دارند. سیستم از هرکدام که فعال باشد استفاده می‌کند."
+themeAccentLight = "رنگ تأکیدی حالت روشن"
 themeDark = "تیره"
 themeDescription = "میان حالت روشن و تیره جابه‌جا شوید"
 themeLight = "روشن"
+themeReset = "بازگرداندن تم به پیش‌فرض"
 themeSystem = "System"
 title = "عمومی"
 user = "کاربر"
@@ -8833,6 +9796,12 @@ intro = "احراز هویت کاربر، مدیریت تیم و قابلیت‌
 learnMore = "بیشتر در مستندات بیاموزید"
 title = "برای مدیران سیستم"
 
+[settings.general.loginLanding]
+description = "انتخاب کنید هنگام ورود به Stirling Cloud کدام برنامه باز شود."
+editor = "ویرایشگر"
+processor = "پردازشگر"
+title = "پس از ورود"
+
 [settings.general.mode]
 fullscreen = "تمام‌صفحه"
 sidebar = "نوار کناری"
@@ -9041,6 +10010,11 @@ security = "امنیت"
 telegram = "Telegram"
 title = "امنیت و احراز هویت"
 
+[settings.signOut]
+confirm = "مطمئن هستید که می‌خواهید خارج شوید؟"
+submit = "خروج"
+title = "خروج"
+
 [settings.team]
 title = "تیم"
 
@@ -9657,6 +10631,9 @@ uploadButton = "بارگذاری در سرور"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "اینجا کلیک کنید"
+fallback = "اگر به‌صورت خودکار باز نشد،"
+opening = "در حال باز کردن Swagger UI در یک تب جدید..."
 tags = "api,مستندات,swagger,پایانه‌ها,توسعه"
 title = "مستندات API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "برای اجرای این ابزار، پرونده‌ها 
 singleFileScope = "فقط اعمال می‌شود روی: {{fileName}}"
 viewerMode = "برای انتخاب چندین پرونده به ویرایشگر پرونده بروید."
 
+[toolFormat]
+ANY = "هر فایل"
+CBR = "یک آرشیو کتاب کمیک (CBR)"
+CBZ = "یک آرشیو کتاب کمیک (CBZ)"
+CSV = "یک فایل CSV"
+EBOOK = "یک کتاب الکترونیکی"
+EMAIL = "یک ایمیل"
+EXCEL = "یک صفحه گسترده"
+HTML = "یک صفحه وب"
+IMAGE = "تصاویر"
+JAVASCRIPT = "یک فایل JavaScript"
+JSON = "یک فایل JSON"
+MARKDOWN = "یک فایل Markdown"
+NONE = "بدون فایل"
+PCL = "یک فایل چاپ PCL"
+PDF = "یک PDF"
+PDF_ENCRYPTED = "یک PDF محافظت‌شده با گذرواژه"
+POSTSCRIPT = "یک فایل PostScript"
+PPT = "یک ارائه"
+TEXT = "یک فایل متنی"
+VIDEO = "یک ویدیو"
+WORD = "یک سند Word"
+XML = "یک فایل XML"
+XPS = "یک سند XPS"
+ZIP = "یک آرشیو ZIP"
+
 [toolPanel]
 alpha = "آلفا"
 backToAllTools = "بازگشت به همهٔ ابزارها"
 collapse = "جمع کردن پنل"
 expand = "گسترش پنل"
 goBack = "بازگشت"
+pdfTools = "ابزارهای PDF"
 placeholder = "برای شروع یک ابزار انتخاب کنید"
 premiumFeature = "ویژگی پرمیوم:"
+searchTools = "جستجوی ابزارها"
 toolsHeader = "ابزارها"
 viewAllTools = "مشاهدهٔ همهٔ ابزارها"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "ابزاری یافت نشد"
 quickAccess = "دسترسی سریع"
 searchPlaceholder = "جستجوی ابزارها..."
 
-[toolPicker.categories]
-advancedTools = "ابزارهای پیشرفته"
-recommendedTools = "ابزارهای پیشنهادی"
-standardTools = "ابزارهای استاندارد"
-
 [toolPicker.subcategories]
 advancedFormatting = "قالب‌بندی پیشرفته"
 automation = "اتوماسیون"
@@ -9950,16 +10950,31 @@ title = "کاربران"
 you = "(شما)"
 
 [users.action]
+cancelInvite = "لغو دعوت"
 deleteTeam = "حذف تیم"
 disableMfa = "بازنشانی MFA"
 move = "انتقال به تیم"
 reinstate = "بازگردانی"
 remove = "حذف از سازمان"
+removeTeam = "حذف از تیم"
 rename = "تغییر نام تیم"
 resetPw = "بازنشانی رمز عبور"
 suspend = "تعلیق"
 unlock = "باز کردن قفل حساب"
 
+[users.activity]
+daysAgo = "{{count}} روز پیش"
+hoursAgo = "{{count}} ساعت پیش"
+justNow = "همین حالا"
+minutesAgo = "{{count}} دقیقه پیش"
+monthsAgo_one = "{{count}} ماه پیش"
+monthsAgo_other = "{{count}} ماه پیش"
+never = "هرگز"
+weeksAgo_one = "{{count}} هفته پیش"
+weeksAgo_other = "{{count}} هفته پیش"
+yearsAgo_one = "{{count}} سال پیش"
+yearsAgo_other = "{{count}} سال پیش"
+
 [users.cap]
 addProcessor = "+ پردازشگر"
 approver = "تأیید خط‌مشی"
@@ -9967,11 +10982,14 @@ editor = "ویرایشگر"
 processor = "پردازشگر"
 
 [users.confirm]
+cancelInviteBody = "دعوت به {{email}} لغو شود؟ آن‌ها دیگر نمی‌توانند با لینک فعلی بپیوندند."
+cancelInviteTitle = "لغو دعوت"
 deleteTeamBody = "تیم {{name}} حذف شود؟ ابتدا تیم باید خالی باشد - اعضای آن را به تیم دیگری منتقل کنید و نباید همچنان مالک هیچ پیکربندی یکپارچه‌سازی باشد."
 deleteTeamTitle = "حذف تیم"
 disableMfaBody = "ثبت‌نام MFA برای {{name}} حذف شود؟ اگر لازم باشد، در ورود بعدی دوباره آن را راه‌اندازی می‌کنند."
 disableMfaTitle = "بازنشانی MFA"
 removeBody = "{{name}} برای همیشه از سازمان حذف شود؟ این کار قابل بازگشت نیست."
+removeTeamBody = "{{name}} از تیم حذف شود؟ حساب کاربری خود را حفظ می‌کنند اما دسترسی به منابع این تیم را از دست می‌دهند."
 removeTitle = "حذف عضو"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "نام کاربری"
 usernameError = "نام کاربری باید حداقل ۳ نویسه باشد"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "دعوت‌شده توسط {{who}}"
+cancel = "لغو"
+count = "{{count}} در انتظار"
+desc = "افراد دعوت‌شده‌ای که هنوز نپیوسته‌اند. تا زمانی که دعوت را بپذیرند، یک جایگاه را اشغال می‌کنند."
+expiresInDays_one = "{{count}} روز دیگر منقضی می‌شود"
+expiresInDays_other = "{{count}} روز دیگر منقضی می‌شود"
+expiresToday = "امروز منقضی می‌شود"
+title = "دعوت‌های در انتظار"
+
 [users.loadError]
 description = "در برقراری ارتباط با بک‌اند مشکلی پیش آمد، یا شما دسترسی ندارید. دوباره تلاش کنید."
 title = "امکان بارگیری اعضا نبود"
@@ -10212,9 +11240,11 @@ title = "پیوست‌ها"
 
 [viewer.bookmarks]
 bookmarkTitle = "عنوان نشانک"
+bookmarkTitleRequired = "عنوان نشانک الزامی است"
 closeSidebar = "بستن نوار کناری نشانک‌ها"
 collapseAll = "جمع کردن همه نشانک‌ها"
 expandAll = "باز کردن همه نشانک‌ها"
+searchPlaceholder = "جستجوی نشانک‌ها"
 
 [viewer.comments]
 addComment = "افزودن نظر"
@@ -10605,30 +11635,6 @@ title = "متن واترمارک"
 image = "تصویر"
 text = "متن"
 
-[wetSignature.tooltip]
-header = "روش‌های ایجاد امضا"
-
-[wetSignature.tooltip.draw]
-bullet1 = "سفارشی‌سازی رنگ و ضخامت قلم"
-bullet2 = "پاک کنید و تا رسیدن به نتیجه مطلوب دوباره رسم کنید"
-bullet3 = "روی دستگاه‌های لمسی (تبلت‌ها، گوشی‌ها) کار می‌کند"
-description = "با استفاده از ماوس یا صفحه‌نمایش لمسی یک امضای دست‌نویس بسازید. بهترین گزینه برای امضاهای شخصی و اصیل."
-title = "رسم امضا"
-
-[wetSignature.tooltip.type]
-bullet1 = "انتخاب از میان چندین فونت"
-bullet2 = "سفارشی‌سازی اندازه و رنگ متن"
-bullet3 = "مناسب برای امضاهای استاندارد"
-description = "از متن تایپ‌شده امضا تولید کنید. سریع و یکنواخت، مناسب اسناد تجاری."
-title = "تایپ امضا"
-
-[wetSignature.tooltip.upload]
-bullet1 = "از PNG، JPG و سایر فرمت‌های تصویری پشتیبانی می‌کند"
-bullet2 = "برای بهترین نتیجه پس‌زمینه‌های شفاف توصیه می‌شود"
-bullet3 = "تصویر برای تناسب با ناحیه امضا تغییر اندازه می‌یابد"
-description = "یک تصویر امضای ازپیش‌ساخته را بارگذاری کنید. ایده‌آل اگر امضای اسکن‌شده یا نشان شرکت دارید."
-title = "بارگذاری تصویر امضا"
-
 [workbenchBar]
 activeFiles = "فایل‌های فعال"
 annotations = "حاشیه‌نویسی‌ها"
@@ -10652,6 +11658,7 @@ redact = "پنهان‌سازی"
 rotateLeft = "چرخش به چپ"
 rotateRight = "چرخش به راست"
 ruler = "خط‌کش / اندازه‌گیری"
+rulerSettings = "تنظیمات مقیاس"
 save = "ذخیره"
 saveAll = "ذخیره همه"
 saveAs = "ذخیره به‌عنوان"
diff --git a/frontend/editor/public/locales/fr-FR/translation.toml b/frontend/editor/public/locales/fr-FR/translation.toml
index 0c17c3b375..fa4626c5df 100644
--- a/frontend/editor/public/locales/fr-FR/translation.toml
+++ b/frontend/editor/public/locales/fr-FR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "fichiers sélectionnés"
 font = "Police"
 fontSizeTooltip = "Taille du texte du numéro de page en points. Une valeur plus élevée crée un texte plus grand."
 fontTypeTooltip = "Famille de police pour les numéros de page. Choisissez selon le style de votre document."
-genericSubmit = "Envoyer"
 green = "Vert"
 help = "Aide"
-imgPrompt = "Choisir une image"
 incorrectPasswordMessage = "Le mot de passe actuel est incorrect."
 info = "Informations"
 invalidUndoData = "Impossible d’annuler : données d’opération invalides"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Accord de connexion"
 logOut = "Se déconnecter"
 marginTooltip = "Distance entre le numéro de page et le bord de la page."
 moreOptions = "Plus d’options"
-multiPdfPrompt = "Sélectionnez les PDF"
 never = "Jamais"
 no = "Non"
 noFileSelected = "Aucun fichier sélectionné. Veuillez en télécharger un."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordre des pages (entrez une liste de numéros de page sépar
 pages = "Pages"
 pageSelectionPrompt = "Sélection des pages (entrez une liste de numéros de page séparés par des virgules ou des fonctions telles que 2n+1) :"
 password = "Mot de passe"
-pdfPrompt = "Sélectionnez le(s) PDF"
 pin = "Épingler le fichier (le garder actif après l’exécution de l’outil)"
 pro = "Pro"
 processingComplete = "Votre fichier est prêt."
@@ -356,6 +352,7 @@ text = "Ces permissions contrôlent ce que les utilisateurs peuvent faire avec l
 title = "Modifier les permissions"
 
 [addStamp]
+preview = "Aperçu du tampon"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Téléchargements manuels : cliquez sur les liens et placez les f
 noLanguages = "Aucune langue tessdata trouvée dans le répertoire configuré."
 permissionNotice = "Le chemin tessdata n’est pas accessible en écriture. Les téléchargements seront ouverts dans le navigateur ; veuillez enregistrer manuellement les fichiers .traineddata dans le dossier tessdata."
 
+[admin.settings.ai.documents]
+description = "Configurez le modèle d’embedding et les paramètres de récupération utilisés pour répondre aux questions sur les documents. Appliqué au moteur IA lors de l’enregistrement."
+title = "Documents et RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Laissez vide pour utiliser l’identifiant d’environnement propre au moteur. S’applique aux déploiements auto-hébergés à moteur unique."
+generic = "Clé API d’embedding"
+openai = "Clé API OpenAI"
+setPlaceholder = "Enregistrée - laissez vide pour conserver la clé actuelle"
+voyageai = "Clé API VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL de base du endpoint d’embeddings compatible OpenAI / Ollama, p. ex. http://ollama:11434/v1. Doit pointer vers un endpoint interne de confiance (sensible au SSRF)."
+label = "URL de base d’embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nom du modèle d’embedding. Texte libre ; les suggestions sont uniquement indicatives."
+label = "Modèle d’embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Fournisseur utilisé pour convertir le texte des documents en embeddings vectoriels."
+label = "Fournisseur d’embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Nombre maximal de recherches de récupération que l’agent peut exécuter par requête."
+label = "Recherches max"
+
+[admin.settings.ai.documents.reindexNote]
+body = "La modification du modèle d’embedding prend effet immédiatement, mais les documents indexés avec le modèle précédent doivent être réindexés pour que la recherche renvoie des résultats corrects."
+title = "Réindexation requise"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Si vous avez modifié le modèle d’embedding, réindexez les documents existants afin que la recherche utilise le nouveau modèle."
+
+[admin.settings.ai.documents.topK]
+description = "Nombre de segments les plus pertinents récupérés par recherche."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Connectez Stirling au moteur IA Python et choisissez les fonctionnalités IA exposées. Les modifications s’appliquent au redémarrage."
+title = "Moteur IA"
+
+[admin.settings.ai.general.capabilities]
+description = "Activez ou désactivez les fonctionnalités IA individuellement. Les fonctionnalités désactivées sont masquées dans l’application."
+title = "Fonctionnalités"
+
+[admin.settings.ai.general.enabled]
+description = "Interrupteur principal. Lorsqu’il est désactivé, aucun outil, agent ni appel au moteur IA n’est disponible."
+label = "Activer l’IA"
+
+[admin.settings.ai.general.features.chat]
+description = "Assistant conversationnel pour travailler avec des PDFs."
+label = "Assistant de chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Catégoriser automatiquement les documents par type ou contenu."
+label = "Classification des documents"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Générer un nouveau PDF (p. ex. depuis HTML) via un agent IA."
+label = "Créer un PDF à partir d’une invite"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Posez des questions et obtenez des réponses basées sur un document téléversé."
+label = "Questions sur le document"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Examiner les documents pour détecter les erreurs mathématiques et numériques."
+label = "Auditeur mathématique"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Ajouter des commentaires de révision et des annotations rédigés par l’IA à un PDF."
+label = "Agent de commentaires PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Délai d’expiration pour les opérations d’agent plus lourdes, comme la génération de documents."
+label = "Délai d’expiration des opérations longues (secondes)"
+
+[admin.settings.ai.general.note]
+body = "Le moteur IA s’exécute comme un service séparé. Son secret partagé"
+body2 = "est défini via une variable d’environnement du conteneur. Les clés API des fournisseurs peuvent être saisies sur ces pages ou fournies comme variables d’environnement du moteur ; les clés saisies ici sont envoyées au moteur lors de l’enregistrement."
+title = "À propos du moteur IA"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Délai d’expiration pour les réponses de chat diffusées (token par token)."
+label = "Délai d’expiration du flux (secondes)"
+
+[admin.settings.ai.general.test]
+button = "Tester la connexion"
+failBody = "Le moteur IA n’a pas répondu. Vérifiez l’URL, que le conteneur du moteur est en cours d’exécution et que l’IA est activée (un redémarrage est nécessaire après l’activation)."
+failTitle = "Moteur IA inaccessible"
+okBody = "Le moteur IA a répondu à une vérification d’état."
+okTitle = "Moteur IA accessible"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Délai d’expiration pour les requêtes IA standard vers le moteur."
+label = "Délai d’expiration des requêtes (secondes)"
+
+[admin.settings.ai.general.url]
+description = "URL interne du moteur IA Python, p. ex. http://stirling-pdf-engine:5001."
+label = "URL du moteur IA"
+
+[admin.settings.ai.limits]
+description = "Garde-fous concernant la quantité de travail que les requêtes IA peuvent effectuer et le nombre pouvant s’exécuter simultanément. Appliqué au moteur IA lors de l’enregistrement."
+title = "Limites et performances"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Garde-fou : rejeter les requêtes IA dont le texte extrait dépasse cette longueur."
+label = "Caractères max par requête"
+
+[admin.settings.ai.limits.maxPages]
+description = "Garde-fou : rejeter les requêtes IA dépassant ce nombre de pages PDF."
+label = "Pages max par requête"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Nombre maximal d’appels de modèle simultanés en cours sur l’ensemble du moteur."
+label = "Concurrence max du modèle"
+
+[admin.settings.ai.models]
+description = "Choisissez le fournisseur LLM ainsi que les modèles intelligent/rapide utilisés par le moteur IA. Appliqué au moteur IA lors de l’enregistrement."
+title = "Modèles et fournisseurs"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Clé API Anthropic"
+description = "Laissez vide pour utiliser l’identifiant d’environnement propre au moteur. S’applique aux déploiements auto-hébergés à moteur unique."
+generic = "Clé API"
+openai = "Clé API OpenAI"
+setPlaceholder = "Enregistrée - laissez vide pour conserver la clé actuelle"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL de base du endpoint compatible OpenAI / Ollama, p. ex. http://ollama:11434/v1."
+label = "URL de base du fournisseur"
+warning = "L’URL de base doit pointer vers un endpoint interne de confiance. Le moteur effectuera des requêtes côté serveur vers celle-ci ; une valeur non fiable est donc sensible au SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Nombre maximal de tokens de sortie pour le modèle rapide."
+label = "Tokens max du modèle rapide"
+
+[admin.settings.ai.models.fastModel]
+description = "Modèle moins coûteux et plus rapide pour les tâches légères. Texte libre ; les suggestions sont uniquement indicatives."
+label = "Modèle rapide"
+
+[admin.settings.ai.models.provider]
+description = "Fournisseur LLM avec lequel le moteur communique."
+label = "Fournisseur"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Nombre maximal de tokens de sortie pour le modèle intelligent."
+label = "Tokens max du modèle intelligent"
+
+[admin.settings.ai.models.smartModel]
+description = "Modèle à hautes capacités pour les raisonnements complexes. Texte libre ; les suggestions sont uniquement indicatives."
+label = "Modèle intelligent"
+
+[admin.settings.ai.saved]
+body = "Les modifications sont envoyées automatiquement au moteur IA."
+bodyNoPush = "Paramètres enregistrés. Ils s’appliqueront la prochaine fois que le moteur IA récupérera sa configuration."
+title = "Paramètres IA enregistrés"
+
 [admin.settings.badge]
 clickToUpgrade = "Cliquez pour voir les détails de l’abonnement"
 
@@ -938,6 +1094,25 @@ label = "Régénérer au démarrage"
 description = "Nombre de jours pendant lesquels le certificat sera valide"
 label = "Validité du certificat (jours)"
 
+[admin.settings.folderAccess]
+description = "Répertoires depuis lesquels les sources de dossiers et sorties de dossiers sont autorisées à lire et vers lesquels elles peuvent écrire. Il s’agit d’une limite de sécurité : les automatisations ne peuvent jamais être dirigées vers un chemin serveur en dehors de cette liste."
+securityNote = "Laissez vide pour désactiver entièrement les sources et sorties de dossiers. Le répertoire de configuration propre à Stirling est toujours interdit."
+title = "Accès aux dossiers"
+
+[admin.settings.folderAccess.implied]
+description = "Ces répertoires gérés par Stirling sont toujours autorisés et ne peuvent pas être modifiés ici."
+serverStorage = "Stockage de fichiers serveur"
+title = "Toujours autorisés"
+watchedFolder = "Dossier surveillé du pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Ajouter"
+empty = "Aucun dossier autorisé. Les sources et sorties de dossiers sont actuellement désactivées."
+hint = "Saisissez des chemins absolus, par exemple /data/inbox."
+label = "Racines de dossiers autorisées"
+placeholder = "/data/inbox"
+remove = "Supprimer la racine de dossier"
+
 [admin.settings.general]
 description = "Configurer les paramètres applicatifs à l’échelle du système, y compris l’image de marque et le comportement par défaut."
 system = "Système"
@@ -1842,6 +2017,15 @@ export = "Exporter"
 accessDenied = "Accès refusé"
 insufficientPermissions = "Vous n'avez pas l'autorisation d'effectuer cette action."
 
+[auth.callback]
+completing = "Finalisation de l’authentification"
+invalidToken = "Connexion OAuth échouée - token invalide."
+missingToken = "Connexion OAuth échouée - aucun token reçu."
+oauthFailed = "Connexion OAuth échouée. Veuillez réessayer."
+pleaseWait = "Veuillez patienter pendant que nous terminons votre connexion."
+signedOut = "Vous avez été déconnecté. Veuillez vous reconnecter."
+windowMayClose = "Vous pouvez fermer cette fenêtre une fois l’opération terminée."
+
 [auth.displayName]
 guest = "Invité"
 user = "Utilisateur"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Sécurise les documents PDF en supprimant les contenus pot
 description = "Cet outil renommera automatiquement les fichiers PDF en fonction de leur contenu. Il analyse le document pour trouver le titre le plus approprié à partir du texte."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Rotation automatique"
+tags = "rotation automatique,corriger orientation,à l’envers,de côté,redresser,orienter,détecter orientation,corriger rotation,orientation automatique,numérisé,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Seuil de confiance"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "OCR uniquement"
+text = "Texte uniquement"
+title = "Méthode de détection"
+
+[autoRotate.error]
+failed = "Une erreur s’est produite lors de la rotation automatique du PDF."
+
+[autoRotate.inferUndetected]
+title = "Faire correspondre les pages à faible confiance"
+
+[autoRotate.report]
+applied = "{{degrees}}° horaire"
+confidenceValue = "Confiance {{value}}"
+noChange = "Aucun changement"
+pageLabel = "Page {{number}}"
+summary = "{{rotated}} page(s) sur {{total}} pivotée(s), {{unchanged}} laissée(s) telle(s) quelle(s)"
+title = "Rapport de détection"
+
+[autoRotate.report.method]
+inferred = "Correspondance"
+none = "Ignorée"
+osd = "OCR"
+text = "Texte"
+
+[autoRotate.report.note]
+belowThreshold = "Sous le seuil"
+blankPage = "La page est vide"
+inferredFromDocument = "Identique aux autres pages"
+noDominantDirection = "Directions de texte mixtes"
+osdFailed = "Aucun texte lisible trouvé"
+osdNoVerdict = "Impossible de déterminer le sens"
+tesseractUnavailable = "OCR non installé"
+tooFewGlyphs = "Trop peu de texte"
+
+[autoRotate.results]
+title = "Résultats de la rotation automatique"
+
+[autoRotate.settings]
+title = "Paramètres"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Niveau de certitude requis avant qu’une page soit tournée. Diminuez-le pour faire pivoter plus de pages, augmentez-le pour laisser plus de pages intactes."
+title = "Seuil de confiance"
+
+[autoRotate.tooltip.description]
+text = "Détermine le sens dans lequel chaque page doit être orientée et la pivote correctement. Les pages déjà à l’endroit restent inchangées."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto lit d’abord le texte sur la page, puis examine la page comme une image si cela ne suffit pas. Texte uniquement ignore la vérification d’image, ce qui est le plus rapide pour les documents qui n’ont jamais été numérisés. OCR uniquement traite chaque page comme une image."
+title = "Méthode de détection"
+
+[autoRotate.tooltip.header]
+title = "Rotation automatique"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Les pages vides ou presque vides ne peuvent pas être vérifiées seules. Lorsque toutes les pages lisibles nécessitent la même rotation, ces pages sont pivotées pour correspondre."
+title = "Faire correspondre les pages à faible confiance"
+
 [autoSizeSplitPDF]
 tags = "pdf, découpage, document, organisation"
 
@@ -2189,33 +2440,6 @@ keywords = "Mots-clés : impair, pair"
 numbers = "Nombres/plages : 5, 10-20"
 progressions = "Progressions : 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Types de certificats"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Géré par les administrateurs système"
-bullet2 = "Partagé entre les utilisateurs autorisés"
-bullet3 = "Représente l’identité de l’entreprise, pas celle d’un individu"
-bullet4 = "Idéal pour : documents officiels, signatures d’équipe"
-description = "Un certificat partagé fourni par votre organisation. Utilisé pour l’autorité de signature à l’échelle de l’entreprise."
-title = "Certificat d’organisation"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Généré automatiquement lors de la première utilisation"
-bullet2 = "Lié à votre compte utilisateur"
-bullet3 = "Ne peut pas être partagé avec d’autres utilisateurs"
-bullet4 = "Idéal pour : documents personnels, responsabilité individuelle"
-description = "Un certificat généré automatiquement et propre à votre compte utilisateur. Adapté aux signatures individuelles."
-title = "Certificat personnel"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Nécessite un fichier P12/PFX et un mot de passe"
-bullet2 = "Peut être délivré par des autorités de certification externes"
-bullet3 = "Niveau de confiance supérieur pour les documents juridiques"
-bullet4 = "Idéal pour : contrats juridiquement contraignants, validation externe"
-description = "Utilisez votre propre fichier de certificat PKCS#12. Offre un contrôle total des propriétés du certificat."
-title = "Téléverser un P12 personnalisé"
-
 [certSign]
 awaitingSignatures = "En attente de signatures"
 chooseCertificate = "Choisir le fichier de certificat"
@@ -2542,34 +2766,6 @@ server = "Serveur"
 stepTitle = "Source du certificat"
 upload = "Téléverser"
 
-[certSign.tooltip.header]
-title = "À propos de la gestion des signatures"
-
-[certSign.tooltip.overview]
-bullet1 = "Vérifiez les signatures existantes et leur validité"
-bullet2 = "Affichez des informations détaillées sur les signataires et certificats"
-bullet3 = "Ajoutez de nouvelles signatures numériques pour sécuriser vos documents"
-bullet4 = "Plusieurs fichiers pris en charge avec navigation facilitée"
-text = "Cet outil vous permet de vérifier si vos PDF sont signés numériquement et d’ajouter de nouvelles signatures. Les signatures numériques prouvent l’auteur ou l’approbateur d’un document et indiquent s’il a été modifié depuis la signature."
-title = "Que peut faire cet outil ?"
-
-[certSign.tooltip.signing]
-bullet1 = "Prend en charge les formats PEM, PKCS12, JKS et le certificat serveur"
-bullet2 = "Option pour afficher ou masquer la signature sur le PDF"
-bullet3 = "Ajoutez la raison, le lieu et le nom du signataire"
-bullet4 = "Choisissez la page où placer les signatures visibles"
-bullet5 = "Utilisez le certificat serveur pour l’option simple « Signer avec Stirling-PDF »"
-text = "Pour signer un PDF, vous avez besoin d’un certificat numérique (comme PEM, PKCS12 ou JKS). Vous pouvez choisir d’afficher la signature sur le document ou de la garder invisible pour la sécurité uniquement."
-title = "Ajout de signatures"
-
-[certSign.tooltip.validation]
-bullet1 = "Indique si les signatures sont valides ou invalides"
-bullet2 = "Affiche les informations sur le signataire et la date de signature"
-bullet3 = "Vérifie si le document a été modifié après la signature"
-bullet4 = "Peut utiliser des certificats personnalisés pour la vérification"
-text = "Lors de la vérification des signatures, l’outil indique si elles sont valides, qui a signé le document, quand il a été signé et s’il a été modifié depuis."
-title = "Vérification des signatures"
-
 [changeCreds]
 changeUsername = "Mettre à jour votre nom d’utilisateur. Vous serez déconnecté après la mise à jour."
 credsUpdated = "Compte mis à jour"
@@ -2824,6 +3020,7 @@ next = "Suivant"
 preview = "Aperçu"
 previous = "Précédent"
 refresh = "Actualiser"
+remaining = "Restant"
 retry = "Réessayer"
 save = "Enregistrer"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Surveillance avancée"
-allInOneWorkspace = "Espace de travail PDF tout-en-un (visionneuse, outils et agent)"
-apiSandbox = "Bac à sable API"
-dedicatedSupportSlas = "Support dédié et SLA"
-fasterThroughput = "Débit 10x plus rapide"
-fullyPrivateFiles = "Fichiers entièrement privés"
-largeFileProcessing = "Traitement de gros fichiers"
-orgWideAccess = "Contrôles d’accès à l’échelle de l’organisation"
-premiumAiModels = "Modèles IA premium"
-prioritySupport = "Support prioritaire"
-privateDocCloud = "Cloud de documents privé"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Accès API sécurisé"
-standardThroughput = "Débit standard"
-unlimitedApiAccess = "Accès API illimité"
-unlimitedSeats = "Postes illimités"
-
 [crop]
 autoCrop = "Recadrer automatiquement les marges blanches"
 noFileSelected = "Sélectionnez un fichier PDF pour commencer le recadrage"
@@ -3346,6 +3525,7 @@ message = "Échec de la définition du gestionnaire PDF par défaut"
 title = "Erreur"
 
 [defaultApp.prompt]
+dontRemind = "Ne plus me le rappeler"
 message = "Définissez Stirling PDF comme application par défaut pour ouvrir les fichiers PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Personnaliser les groupes"
 dropHint = "Ouvrez des fichiers pour commencer"
 dropToAdd = "Drop files to add"
 expand = "Développer la barre latérale"
-files = "Fichiers"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive n’est pas configuré"
 leaveMyFiles = "Quitter Mes fichiers"
+library = "Bibliothèque PDF"
 myFiles = "Mes fichiers"
 noFiles = "Aucun fichier pour le moment"
 openFileManager = "Ouvrir le gestionnaire de fichiers"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Ajouter"
-addLabel = "Ajouter une étiquette…"
-categoryIconAria = "Choisir une icône pour {{name}}"
-createCategory = "Créer une catégorie"
-delete = "Supprimer la catégorie"
 done = "Terminé"
-hide = "Masquer la catégorie"
-newCategory = "Nom de la nouvelle catégorie…"
-removeLabel = "Supprimer {{name}}"
-rename = "Renommer"
 reset = "Réinitialiser aux valeurs par défaut"
-search = "Rechercher des étiquettes…"
-show = "Afficher la catégorie"
 subtitle = "Regroupez vos fichiers dans des catégories parentes. Ajoutez des étiquettes existantes ou nouvelles à une catégorie, renommez-la ou créez la vôtre. Les fichiers qui ne figurent dans aucune de vos catégories apparaissent sous « Autre »."
 title = "Catégories de la barre latérale"
 
@@ -3808,6 +3977,7 @@ refresh = "Actualiser depuis le serveur"
 remove = "Supprimer"
 removeVersion = "Supprimer cette version"
 rename = "Renommer"
+renamed = "Renommé"
 renameFolder = "Renommer le dossier"
 resizeFolderTree = "Redimensionner l’arborescence des dossiers (touches fléchées, Maj pour des pas plus grands ; double-clic pour ajuster automatiquement)"
 save = "Enregistrer"
@@ -3910,9 +4080,7 @@ count = "Fichiers"
 folder = "Dossier"
 labels = "Étiquettes"
 modified = "Modifié"
-name = "Nom"
 size = "Taille"
-toolHistoryAtVersion = "Chaîne d’outils cumulative"
 totalSize = "Taille totale"
 type = "Type"
 versionHistory = "Parcours de version"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Tout est enregistré"
+extractCsvError = "Échec de l’extraction du CSV"
+extractXlsxError = "Échec de l’extraction du XLSX"
 flattenAfterFilling = "Aplatir après remplissage"
+requiredAbbreviation = "obl."
+requiredFieldsError = "Veuillez remplir tous les champs obligatoires"
 rescanFields = "Réanalyser les champs"
 rescanFormFields = "Réanalyser les champs du formulaire"
 save = "Enregistrer"
+saveShortcut = "Ctrl+S pour enregistrer"
+unsavedChanges = "Modifications non enregistrées"
 
 [formFill.sidebar]
 close = "Fermer la barre latérale"
@@ -4309,6 +4484,11 @@ desc = "Renomme automatiquement un fichier PDF sur la base de son en-tête déte
 tags = "détection automatique,basé-en-tête,organiser,renommer"
 title = "Renommer PDF auto"
 
+[home.autoRotate]
+desc = "Détectez l’orientation de chaque page et remettez-la automatiquement à l’endroit."
+tags = "rotation automatique,corriger orientation,à l’envers,de côté,redresser,orienter,détecter orientation,corriger rotation,orientation automatique,numérisé,OSD"
+title = "Rotation automatique"
+
 [home.autoSizeSplitPDF]
 tags = "auto,diviser,taille"
 title = "Scinder auto taille/pages"
@@ -4608,13 +4788,13 @@ hint = "Téléversez une image PNG, JPG, SVG ou autre à placer sur le PDF. Les
 label = "Téléverser une image"
 placeholder = "Sélectionner un fichier image"
 
-[imageToPdf]
-tags = "pdf,conversion,img,jpg,image,photo"
-
 [imageToPDF]
 header = "Image en PDF"
 title = "Image en PDF"
 
+[imageToPdf]
+tags = "pdf,conversion,img,jpg,image,photo"
+
 [infoBanner]
 dismiss = "Fermer"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Vous avez été invité !"
 
 [landing]
 addFiles = "Ajouter des fichiers"
-heroSubtitle = "Déposez ou ajoutez un PDF existant pour commencer."
 mobileUpload = "Téléverser depuis un mobile"
 openFromComputer = "Ouvrir depuis l’ordinateur"
 uploadFromComputer = "Téléverser depuis l’ordinateur"
-workbenchEmptyStateHero = "Déposez un PDF n’importe où"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Se connecter"
 magicLinkSent = "Lien magique envoyé à {{email}} ! Consultez votre e-mail et cliquez sur le lien pour vous connecter."
 mfaCode = "Code d'authentification"
 mfaRequired = "Code à deux facteurs requis"
+noAccount = "Vous n’avez pas de compte ?"
 or = "Ou"
 password = "Mot de passe"
 passwordChangedSuccess = "Mot de passe modifié avec succès ! Veuillez vous connecter avec votre nouveau mot de passe."
@@ -4715,26 +4894,10 @@ signInWith = "Se connecter avec"
 title = "Connexion"
 unexpectedError = "Erreur inattendue : {{message}}"
 updatePassword = "Mise à jour du mot de passe"
-useEmailInstead = "Se connecter avec l’e‑mail"
 useMagicLink = "Utiliser plutôt le lien magique"
 username = "Nom d’utilisateur"
 youAreLoggedIn = "Vous êtes connecté !"
 
-[login.slides.edit]
-alt = "Modifier des PDF"
-subtitle = "Avec plus d’une douzaine d’outils pour caviarder, signer, lire et manipuler des PDF, vous trouverez forcément ce que vous cherchez."
-title = "Modifiez des PDF pour afficher/sécuriser les informations que vous souhaitez"
-
-[login.slides.overview]
-alt = "Aperçu de Stirling PDF"
-subtitle = "Une suite cloud axée sur la confidentialité pour les PDF, qui vous permet de convertir, signer, caviarder et gérer des documents, avec plus de 50 autres outils puissants."
-title = "Votre solution tout-en-un pour tous vos besoins PDF."
-
-[login.slides.secure]
-alt = "Sécuriser des PDF"
-subtitle = "Ajoutez des mots de passe, caviardez du contenu et gérez des certificats en toute simplicité."
-title = "Protégez les informations sensibles de vos PDF"
-
 [margin]
 large = "Grande"
 medium = "Moyenne"
@@ -4976,6 +5139,7 @@ pinButton = "Vous pouvez utiliser le bouton <strong>Épingler</strong> si vous p
 results = "Après l’exécution de l’outil, l’étape de <strong>Revue</strong> affichera un aperçu des résultats dans ce panneau et vous permettra d’annuler l’opération ou de télécharger le fichier."
 runButton = "Une fois l’outil configuré, ce bouton vous permet d’exécuter l’outil sur tous les PDF sélectionnés."
 selectCropTool = "Sélectionnons l’outil <strong>Rogner</strong> pour montrer comment utiliser l’un des outils."
+stepOf = "Étape {{current}} sur {{total}}"
 toolInterface = "Voici l’interface de l’outil <strong>Rogner</strong>. Comme vous pouvez le voir, il n’y a pas grand-chose pour l’instant car nous n’avons pas encore ajouté de fichiers PDF sur lesquels travailler."
 workbench = "Voici le <strong>Workbench</strong> - la zone principale où vous visualisez et modifiez vos PDF."
 wrapUp = "Tout est prêt ! Vous avez appris les principales zones de l’application et comment les utiliser. Cliquez sur le bouton <strong>Aide</strong> quand vous le souhaitez pour revoir cette visite."
@@ -4988,6 +5152,26 @@ showMeAround = "Faites-moi faire le tour"
 skipForNow = "Passer pour l’instant"
 skipTheTour = "Passer la visite"
 
+[onboarding.checklist]
+dismiss = "Ignorer"
+title = "Configurer Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Exécutez Stirling nativement sur votre machine"
+title = "Télécharger Stirling pour ordinateur"
+
+[onboarding.checklist.inviteTeam]
+description = "Collaborez avec votre équipe"
+title = "Inviter des membres de l’équipe"
+
+[onboarding.checklist.shareAnalytics]
+description = "Aidez à améliorer Stirling"
+title = "Partager des données d’utilisation anonymes"
+
+[onboarding.checklist.takeTour]
+description = "Découvrez le fonctionnement de Stirling avec une visite rapide"
+title = "Faire la visite guidée"
+
 [onboarding.desktopInstall]
 body = "Stirling fonctionne mieux en application de bureau. Vous pouvez l’utiliser hors ligne, accéder plus rapidement aux documents et effectuer des modifications en local sur votre ordinateur."
 selectOs = "Sélectionner le système d’exploitation"
@@ -4996,7 +5180,21 @@ titleWithOs = "Télécharger pour {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Code d’authentification"
+description = "Sécurisez votre compte en associant une application d’authentification. Scannez le code QR ou saisissez la clé de configuration, puis confirmez le code à 6 chiffres pour terminer."
+enable = "Activer la MFA"
+enableError = "Impossible d’activer l’authentification à deux facteurs. Vérifiez le code et réessayez."
+enterCode = "Saisissez le code à 6 chiffres de votre application."
+enterCodeError = "Saisissez le code d’authentification pour continuer."
+logout = "Déconnexion"
+openAuthenticator = "Ouvrez Google Authenticator, Authy ou 1Password."
 qrCodeLoading = "Génération de votre code QR…"
+regenerateQrCode = "Regénérer le code QR"
+scanQrCode = "Scannez le code QR ou saisissez la clé de configuration ci-dessous."
+setupError = "Impossible de démarrer la configuration à deux facteurs. Veuillez réessayer."
+setupKey = "Clé de configuration (saisie manuelle)"
+stepByStep = "Étape par étape"
+success = "La MFA a été activée. Vous pouvez maintenant continuer."
+title = "Configuration de l’authentification multifacteur"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Une fois le mode connexion activé, vous pourrez gérer les utilisateurs, configurer les paramètres et surveiller la santé du serveur. Les <strong>{{freeTierLimit}}</strong> premières personnes sur votre serveur utilisent Stirling gratuitement."
@@ -5005,6 +5203,11 @@ adminTitle = "Aperçu admin"
 userBody = "Invitez des coéquipiers, assignez des rôles et gardez vos documents organisés dans un espace de travail sécurisé. Activez le mode connexion quand vous êtes prêt à aller au‑delà d’un usage solo."
 userTitle = "Aperçu du plan"
 
+[onboarding.processorIntro]
+body = "Stirling exécute désormais des <strong>politiques</strong> — des règles automatisées qui classent, sécurisent et traitent chaque document à son arrivée. Configurez-les et surveillez les exécutions dans le <strong>Processor</strong>."
+cta = "Découvrir le Processor"
+title = "Découvrez le Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Année prépayée"
+
+[payg.prepaid.banner]
+exhausted = "Votre capacité prépayée est épuisée ; la facturation à l’usage a repris. Rechargez pour conserver la remise."
+expiring_one = "Votre année prépayée se termine dans {{count}} jour. La capacité inutilisée expire — rechargez pour démarrer une nouvelle année."
+expiring_other = "Votre année prépayée se termine dans {{count}} jours. La capacité inutilisée expire — rechargez pour démarrer une nouvelle année."
+low = "Il ne vous reste plus que {{pct}} % de votre capacité prépayée. Rechargez à tout moment pour continuer le traitement sans interruption."
+
+[payg.prepaid.card]
+subtitle = "Utilisée avant la facturation à l’usage et en dehors de votre plafond de dépenses."
+title = "Capacité prépayée"
+
+[payg.prepaid.meter]
+capSuffix = "sur {{total}} crédits prépayés"
+expires = "Expire le {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Épuisée"
+healthy = "Il en reste beaucoup"
+low = "Bientôt épuisée"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Collez la clé de licence depuis votre e-mail"
 success = "Licence activée !"
 successMessage = "Votre licence a été activée avec succès. Vous pouvez maintenant fermer cette fenêtre."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "application effectuée"
-enforcing = "Application en cours..."
-failed = "Échec de l'application"
 outputsUnavailable = "Les résultats des politiques ne sont plus disponibles au téléchargement."
 partialOutputsUnavailable = "Certains résultats des politiques ne sont plus disponibles au téléchargement."
-retrying = "Occupé, nouvelle tentative..."
 runNotFound = "L'exécution de l'application est introuvable."
-step = "étape {{current}}/{{total}}"
 timedOut = "Délai d'application dépassé avant la fin de l'exécution."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Fermer"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Application de {{names}}"
 applyingProgress = "Application de {{names}} ({{done}} sur {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} fichier(s) sur {{total}} n'ont pas pu être traités
 failureTitle = "Exporté sans application complète"
 printPolicyAppliedBody = "Ce PDF a été mis à jour pour respecter une politique. Vérifiez les modifications, puis réimprimez."
 printPolicyAppliedTitle = "Politique appliquée avant l'impression"
-queued = "+{{count}} en file d'attente"
 successTitle = "{{names}} appliquées"
 summaryMore = "{{first}}, {{second}} et {{more}} de plus"
 summaryTwo = "{{first}} et {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Application avant conversion"
-default = "Application"
-export = "Application avant exportation"
-input = "Application lors de l'importation"
-print = "Application avant impression"
-
-[policies.field]
-accessLog = "Journal d’accès"
-archiveAfter = "Archiver après"
-auditTrail = "Piste d’audit"
-belowThreshold = "Sous le seuil"
-destination = "Destination"
-frameworks = "Frameworks"
-immutableHold = "Conservation immuable"
-keepFor = "Conserver pendant"
-minConfidence = "Confiance min."
-notify = "Notifier lors du routage"
-onViolation = "En cas de non-conformité"
-webhookUrl = "URL du webhook"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Ajouter"
-addPlaceholder = "Ajouter une étiquette…"
-customNote = "Personnalisé pour votre équipe."
-defaultNote = "Utilisation du réglage intégré par défaut, partagé avec votre équipe."
-duplicate = "\"{{name}}\" existe déjà."
-edit = "Modifier les étiquettes"
-empty = "Aucune étiquette pour le moment."
-export = "Exporter JSON"
-iconAria = "Choisir une icône pour {{name}}"
-import = "Importer JSON"
-importError = "Impossible d’importer ce fichier."
-managedNote = "Les étiquettes d’équipe sont gérées par votre responsable d’équipe."
-modalSubtitle = "Partagées avec toute votre équipe. Le classificateur choisit les étiquettes qui correspondent à chaque document."
-modalTitle = "Étiquettes de classification"
-pickIcon = "Utiliser l’icône {{label}}"
-removeAria = "Supprimer {{name}}"
-resetToDefault = "Réinitialiser par défaut"
-saveForTeam = "Enregistrer pour l’équipe"
-saving = "Enregistrement…"
-sectionLabel = "Étiquettes de classification"
-startFromScratch = "Repartir de zéro"
-teamCount = "étiquettes d’équipe"
-tooLong = "Les étiquettes peuvent contenir au maximum {{max}} caractères."
-ungrouped = "Non groupé"
-view = "Voir les étiquettes"
+categoryCount = "catégories"
+hideCategory = "Masquer la catégorie"
+labelCount = "libellés"
+sharedNote = "Ces libellés sont intégrés et partagés avec toute votre équipe."
+showCategory = "Afficher la catégorie"
 
 [policies.pii]
 account = "Numéros de compte (étiquetés)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Numéros d'acheminement américains (ABA)"
 ssn = "Numéros de sécurité sociale"
 
-[policies.settings]
-noneExport = "Aucune politique n’est actuellement exécutée lors de l’exportation."
-noneUpload = "Aucune politique n’est actuellement exécutée lors de l’importation."
-onExport = "Lors de l’exportation"
-onUpload = "Lors de l’importation"
-reorderHandle = "Faire glisser pour réorganiser"
-runOrderDesc = "Lorsque plusieurs politiques s’exécutent sur le même déclencheur, elles s’exécutent dans cet ordre — chacune sur la sortie de la politique précédente. Faites glisser pour réorganiser."
-title = "Paramètres des politiques"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Options des politiques"
-policySettings = "Paramètres des politiques"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Réessayer les politiques en échec ({{count}})"
-rowProgress = "{{completed}} fichiers sur {{total}} traités"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Qu’est-ce qu’une politique ?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Détecte automatiquement et noircit les informations sensibles — comme les numéros de sécurité sociale et de carte — afin qu'elles ne puissent pas être lues dans le document."
-sanitize = "Supprime le JavaScript caché du fichier, afin que rien ne puisse s'exécuter automatiquement à l'ouverture."
-watermark = "Appose une marque visible (p. ex. \"Confidentiel\") sur chaque page."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Fermer"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} en cours d’application..."
 badgeRan = "La politique {{name}} a été exécutée sur ce fichier"
+badgeRunning = "{{name}} en cours d’exécution..."
 blockingAction = "{{action}} bloquée pendant l’application de la politique, veuillez patienter..."
 dismiss = "Fermer la superposition"
 enforcingTitle = "Application de la politique..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Voir le fichier (politique toujours en cours d’application)"
 [policyOption]
 autoRedactPhi = "Masquer automatiquement les PHI"
 blockExport = "Bloquer l’exportation"
+ccpa = "CCPA"
 contracts = "Contrats"
 documents = "Documents"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plan Editor"
 subscribed = "Plan Processor"
 unlinked = "Non lié"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Initialiser à partir d’un document"
-sectionsAriaLabel = "Sections du créateur d’agents"
-selectorAriaLabel = "Agents"
-subtitle = "Concevez, testez et déployez les agents AI qui classifient, extraient et acheminent vos documents. Définissez des scénarios, encadrez l’accès aux outils, exécutez un jeu de référence et publiez une version."
-title = "Créateur d’agents"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Annuler"
-dropzoneText = "Choisir un document d’exemple (PDF ou image)"
-lead = "Déposez un document d’exemple et nous proposerons des scénarios et un schéma d’extraction que vous pourrez affiner. Rien n’est publié tant que vous ne l’avez pas examiné."
-submit = "Initialiser l’agent"
-subtitle = "Créer un nouvel agent à partir d’un fichier représentatif"
-title = "Initialiser à partir d’un document"
-
-[portal.agentBuilder.empty]
-description = "Initialisez un agent à partir d’un document d’exemple pour créer ses scénarios et son schéma d’extraction, puis affinez-le et publiez-le."
-title = "Aucun agent pour le moment"
-
-[portal.agentBuilder.evals]
-casesPassing = "Cas réussis"
-columnCase = "Cas d’évaluation"
-columnLatency = "Latence"
-columnResult = "Résultat"
-fail = "échec"
-goldenSetPassRate = "Taux de réussite du jeu de référence"
-latencyMs = "{{ms}} ms"
-notRun = "non exécuté"
-pass = "réussite"
-passRate = "Taux de réussite"
-runEvals = "Exécuter les évaluations"
-
-[portal.agentBuilder.evals.empty]
-description = "Les évaluations transforment vos scénarios en un jeu de référence reproductible. Passez à un niveau supérieur pour capturer le taux de réussite dans le temps et conditionner les publications à celui-ci."
-title = "Aucun jeu de référence pour le moment"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "sur les jeux de référence"
-activeAgents = "Agents actifs"
-avgPassRate = "Taux de réussite moyen des évaluations"
-fleetWide = "sur toute la flotte"
-latestPublished = "Dernière publication"
-scenarios = "Scénarios"
-testCases = "cas de test"
-totalDescription_one = "{{count}} au total"
-totalDescription_other = "{{count}} au total"
-
-[portal.agentBuilder.scenarios]
-add = "Ajouter"
-addScenario = "Ajouter un scénario"
-enable = "Activer"
-expectationLabel = "Comportement attendu"
-expectationPlaceholder = "Ce que l’agent doit faire"
-inEval = "en évaluation"
-mute = "Désactiver"
-muted = "désactivé"
-nameLabel = "Nom"
-namePlaceholder = "p. ex. Escalade de conformité"
-
-[portal.agentBuilder.tabs]
-evals = "Évaluations"
-scenarios = "Scénarios"
-tools = "Outils"
-versions = "Versions"
-
-[portal.agentBuilder.tools]
-broadAccess = "Accès étendu"
-deniedHint = "Les outils sélectionnés sont bloqués. Tout le reste reste appelable."
-deniedTools = "Outils refusés"
-governanceGate = "La gouvernance des outils est disponible avec le plan Enterprise."
-restricted = "Restreint"
-restrictedAccess = "Accès restreint aux outils"
-restrictedDescription = "Autoriser tous les outils sauf ceux que vous refusez ci-dessous."
-
-[portal.agentBuilder.versions]
-current = "actuelle"
-historyGate = "L’historique complet des versions et la restauration sont disponibles avec le plan Enterprise."
-publish = "Publier"
-rollBack = "Restaurer"
-
 [portal.assistant]
 close = "Fermer l’assistant"
 error = "Impossible de joindre l’assistant."
@@ -6365,9 +6346,21 @@ typing = "Saisie en cours"
 loading = "Chargement"
 redirectingToEditor = "Redirection vers l’éditeur..."
 
+[portal.billing.activation]
+maybeLater = "Peut-être plus tard"
+title = "Activer le Processor"
+
+[portal.billing.activation.payg]
+sub = "Définissez une limite mensuelle. Payez ce que vous exécutez."
+title = "Paiement à l’usage"
+
+[portal.billing.activation.prepay]
+badge = "2 mois gratuits"
+sub = "Une seule facture, par carte ou virement bancaire."
+title = "Prépayez une année"
+
 [portal.billing.checkout]
 noClientSecret = "La fonction Edge n’a renvoyé aucun client_secret."
-subtitle = "Ajoutez une carte pour continuer après votre allocation gratuite du plan Editor. Stripe s’occupe du reste."
 title = "Activer le plan Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Votre paiement a réussi, mais l’activation prend un peu plus de temps
 close = "Fermer"
 title = "Presque terminé"
 
+[portal.billing.checkout.cap]
+amountAria = "Limite de dépenses mensuelle"
+back = "Retour"
+continue = "Continuer vers le paiement"
+error = "Impossible de définir votre limite de dépenses"
+finePrint = "Factures émises mensuellement. Annulation possible à tout moment."
+noLimit = "Aucune limite"
+note = "Vous n’êtes jamais facturé au-delà de votre limite. Le traitement est simplement mis en pause."
+perMonth = "/ mois"
+title = "Définissez votre limite de dépenses"
+
+[portal.billing.checkout.card]
+fields = "Numéro de carte · MM / AA · CVC · ZIP"
+label = "Détails de la carte"
+note = "Détails de la carte collectés par Stripe. Stirling ne stocke jamais le PAN ni le CVC."
+
 [portal.billing.checkout.error]
 title = "Impossible de démarrer le paiement"
 
@@ -6383,10 +6392,9 @@ body = "Votre paiement est passé. Nous activons le traitement mesuré sur vos i
 hint = "Veuillez garder cette fenêtre ouverte."
 title = "Activation de votre plan Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "dans l’environnement du portail pour activer le paiement dans l’application."
-bodyBefore = "Définir"
-title = "Stripe non configuré"
+[portal.billing.checkout.pay]
+limit = "Limite de dépenses mensuelle {{amount}}/mois. Le traitement s’interrompt à la limite."
+limitNoCap = "Aucune limite de dépenses. Le traitement ne s’interrompra pas. Les factures sont émises mensuellement."
 
 [portal.billing.enterpriseUpsell]
 cta = "Créer votre devis Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Plan actuel"
 freeForever = "Gratuit pour toujours"
 noTeamResolved = "Aucune équipe n’est encore résolue sur votre portefeuille — actualisez et réessayez."
 ownerOnly = "Seul le propriétaire de l’équipe peut activer le plan Processor."
+payInvoice = "Payer la facture pour terminer"
 planName = "Editor"
 ssoIncluded = "SSO inclus"
 switchOnProcessor = "Activer Processor →"
 unlimitedUsers = "Utilisateurs illimités"
+viewQuote = "Voir le devis"
 
 [portal.billing.invoices]
 columnAmount = "Montant"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Requêtes API directes"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatisations et pipelines"
 segmentAutomationLabel = "Automatisation"
+sizeMultiplier = "{{formatted}} PDFs ont utilisé un multiplicateur de taille"
+summary = "{{unique}} uniques · {{units}} unités de compteur · {{avg}} moy. par PDF"
+summaryNoRate = "{{unique}} uniques · {{units}} unités de compteur"
 unit = "PDF mesurés"
+unitsPending_one = "{{units}} unité de compteur en attente de synchronisation depuis les instances liées"
+unitsPending_other = "{{units}} unités de compteur en attente de synchronisation depuis les instances liées"
+
+[portal.billing.prepaid]
+capSuffix = "sur {{total}} crédits prépayés"
+expires = "Expire le {{date}}"
+eyebrow = "Capacité prépayée"
+note = "Utilisée avant la facturation à l’usage et en dehors de votre limite de dépenses."
+topUp = "Recharger"
+
+[portal.billing.prepaid.buy]
+back = "Retour"
+calcTitle = "Calculez votre paiement annuel"
+cancel = "Annuler"
+cancelPurchase = "Annuler l’achat"
+close = "Fermer"
+continueToPayment = "Continuer vers le paiement"
+finalise = "Finaliser"
+invoiceErrorTitle = "Impossible de générer la facture"
+loadingTitle = "Chargement de votre devis"
+payTitle = "Payez votre année"
+step = "Étape {{current}} sur {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Modifier"
+deployRow = "Déploiement"
+done = "Terminé"
+enterpriseHint = "Il s’agit d’une échelle entreprise. À ce volume, les tarifs entreprise surpassent toute remise en libre-service. Tarif verrouillé, conditions et devis en quelques minutes."
+governanceRow = "Gouvernance"
+governanceValue = "{{label}} · {{count}} politiques"
+handlesLabel = "Votre Processor"
+handlesValue = "gère {{volume}} crédits / mois"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} politiques"
+poolCaption = "Une réserve de {{credits}} crédits pour l’année. Les mois chargés empruntent aux mois plus légers."
+priceLabel = "Votre année · 12 mois pour le prix de 10"
+rateUnknown = "Nous afficherons le prix exact lors du paiement."
+savings = "Vous économisez {{amount}} · 2 mois gratuits."
+sizingRow = "Dimensionnement"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Utilisateurs au total"
+
+[portal.billing.prepaid.consent]
+label = "Je comprends que lorsque ma capacité prépayée est épuisée ou expire après 12 mois, le traitement continue automatiquement au tarif standard de paiement à l’usage (jusqu’à ma limite de dépenses), sauf si j’annule, et que je peux annuler à tout moment depuis le portail de facturation."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Géré par Stirling. Opérationnel en quelques minutes."
+cloudValue = "Stirling Cloud · Géré"
+selfhost = "Auto-hébergé"
+selfhostDesc = "Fonctionne sur une infrastructure privée. Même tarif."
+selfhostValue = "Auto-hébergé · Infrastructure privée"
+
+[portal.billing.prepaid.offer]
+cta = "Examiner l’offre"
+subtitle = "Prépayez une année de traitement PDF et obtenez deux mois gratuits, utilisés avant la facturation à l’usage, en dehors de votre limite de dépenses."
+title = "Obtenez 12 mois pour le prix de 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nom du titulaire du compte"
+accountNamePlaceholder = "p. ex. Jane Smith"
+companyName = "Nom de l’entreprise (facultatif)"
+companyNamePlaceholder = "p. ex. Acme Inc."
+downloadInvoice = "Télécharger la facture"
+payOnline = "Payer en ligne"
+poNumber = "Numéro de commande (facultatif)"
+poNumberPlaceholder = "p. ex. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avancé"
+advancedDesc = "Les pipelines assurent l’essentiel de votre traitement."
+none = "Aucun"
+noneDesc = "Aucun pipeline en cours pour l’instant. Activez-les à tout moment."
+standard = "Standard"
+standardDesc = "Quelques pipelines retraitent les PDFs entrants."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentiels"
+essentialsDesc = "Classification, par défaut, plus Partage"
+governed = "Gouverné"
+governedDesc = "Ajoute Sécurité et Routage"
+regulated = "Réglementé"
+regulatedDesc = "Toutes les catégories, incl. Conformité, Conservation, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Télécharger le devis (PDF)"
+downloading = "Préparation…"
+share = "partager pour approbation"
+
+[portal.billing.prepaid.size]
+compact = "Compact"
+compactDesc = "Fichiers de moins de 25 MB, sans frais de données"
+heavy = "Lourd"
+heavyDesc = "Numérisés ou riches en images, régulièrement 50 MB+"
+standard = "Standard"
+standardDesc = "Principalement petits, quelques scans au-delà de 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Épuisée"
+healthy = "Il en reste beaucoup"
+low = "Bientôt épuisée"
 
 [portal.billing.spendLimit]
 adjustLimit = "Ajuster la limite"
@@ -6494,6 +6608,8 @@ label = "Dépassement prévu."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Dépenses ce mois-ci"
+freeRemaining_one = "{{formatted}} PDF gratuit restant"
+freeRemaining_other = "{{formatted}} PDFs gratuits restants"
 processed_one = "{{formattedCount}} PDF traité."
 processed_other = "{{formattedCount}} PDF traités."
 processedWithRate_one = "{{formattedCount}} PDF traité, à {{rate}} chacun."
@@ -6534,6 +6650,350 @@ signature = "signature"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nouvelle connexion"
+createTitleFor = "Connecter {{name}}"
+delete = "Supprimer"
+edit = "Modifier"
+editTitle = "Modifier la connexion"
+unsupportedType = "Ce type de connexion ne peut pas être modifié ici."
+
+[portal.connections.categories.advanced]
+description = "Pour un service que nous ne prenons pas encore en charge."
+label = "Avancé"
+
+[portal.connections.categories.audit]
+description = "Enregistrez ce qui est arrivé à un document, là où vos auditeurs consultent déjà."
+label = "Journalisation d’audit et de conformité"
+
+[portal.connections.categories.notify]
+description = "Informer un autre système qu’un événement s’est produit."
+label = "Notification et workflow"
+
+[portal.connections.categories.security]
+description = "Analyser ou étiqueter un document avant qu’il ne poursuive son chemin."
+label = "Sécurité et classification"
+
+[portal.connections.categories.signing]
+description = "Envoyer un document pour signature ou notarisation."
+label = "Signature électronique et notarisation"
+
+[portal.connections.categories.storage]
+description = "Où les documents traités aboutissent - un bucket, un drive, un ticket ou une page."
+label = "Fichier et pièce jointe"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling stocke ceci chiffré et ne l’affiche plus jamais."
+label = "Token d’accès"
+
+[portal.connections.commonFields.apiKey]
+label = "Clé API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Les étapes utilisant cette connexion ne peuvent appeler que des chemins sous cette URL, jamais un autre hôte."
+label = "URL du serveur"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Hôte"
+
+[portal.connections.commonFields.password]
+label = "Mot de passe"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Nom d’utilisateur"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Collez l’URL fournie par le service. Seuls les chemins sous celle-ci peuvent être appelés."
+label = "URL Webhook"
+
+[portal.connections.fields]
+name = "Nom de la connexion"
+namePlaceholder = "p. ex. Production"
+
+[portal.connections.picker]
+cancel = "Annuler"
+createNew = "Nouvelle connexion..."
+placeholder = "Sélectionner une connexion"
+save = "Enregistrer la connexion"
+
+[portal.connections.picker2]
+back = "Changer d’intégration"
+heading = "Que voulez-vous connecter ?"
+noResultsBody = "Nous ne le prenons pas encore en charge - dites-nous de quoi il s’agit et nous envisagerons de l’ajouter."
+noResultsTitle = "Aucun résultat ne correspond à \"{{query}}\""
+searchPlaceholder = "Rechercher des intégrations - essayez \"sign\", \"ocr\" ou un nom de produit"
+
+[portal.connections.types.api]
+description = "Appelez n’importe quelle API HTTP depuis une politique. Vous choisissez l’URL, l’authentification et la charge utile."
+label = "API personnalisée"
+
+[portal.connections.types.api.fields.authType]
+label = "Authentification"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nom d’utilisateur et mot de passe"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Token Bearer"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token dans un en-tête personnalisé"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Aucune"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Se connecter pour obtenir un token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Les étapes utilisant cette connexion ne peuvent appeler que des chemins sous cette URL, jamais un autre hôte."
+label = "URL de base"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nom de l’en-tête"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Chemin de connexion"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Mot de passe"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Si l’API répond avec un lien de téléchargement, seuls ces hôtes peuvent être récupérés. Séparez-les par des virgules. Laissez vide pour autoriser uniquement l’hôte propre à l’URL de base."
+label = "Hôtes de résultat autorisés"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Envoyer le token avec cet en-tête"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "L’en-tête de réponse dans lequel l’appel de connexion renvoie le token, p. ex. X-Auth-Token."
+label = "En-tête de réponse du token"
+
+[portal.connections.types.api.fields.username]
+label = "Nom d’utilisateur"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Analysez les documents à la recherche de malwares sur un serveur que vous exploitez - rien ne quitte votre réseau."
+label = "ClamAV (auto-hébergé)"
+
+[portal.connections.types.cloudmersive]
+description = "Analyse antivirus et de contenu pour les documents dans une politique."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Bloquez les documents contenant des macros, exécutables, scripts ou objets intégrés - pas seulement les malwares connus."
+label = "Analyse avancée Cloudmersive"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Joindre des documents traités à une page Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Envoyez des documents à ConsignO Cloud (Notarius) pour signature électronique et notarisation."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Votre environnement ConsignO Cloud, incluant /api/v1."
+label = "URL du serveur"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Clé API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Secret API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Mot de passe"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Nécessaire uniquement si votre organisation utilise des tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nom d’utilisateur"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publier un message sur Discord lorsqu’une politique traite un document."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexer un événement d’audit dans Elasticsearch chaque fois qu’une politique traite un document."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Interroger un serveur FTP ou FTPS pour récupérer de nouveaux documents."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Mode de connexion"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Actif"
+passive = "Passif (recommandé)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Le FTP simple envoie les identifiants et les fichiers sans chiffrement ; choisissez FTPS si le serveur le prend en charge."
+label = "Chiffrement"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicite / AUTH TLS)"
+implicit = "FTPS (implicite)"
+none = "Aucun (FTP simple)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publier un message dans un espace Google Chat lorsqu’une politique s’exécute."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Joindre des documents traités à un ticket Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Envoyer un document ou une notification par email lorsqu’une politique s’exécute."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Classer les documents traités dans Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Mot de passe d’application"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Détecter les données personnelles dans le texte des documents à l’aide d’un serveur Presidio que vous exploitez."
+label = "Presidio (auto-hébergé)"
+
+[portal.connections.types.purview]
+description = "Lire et appliquer des libellés de sensibilité Microsoft Purview sur les PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Facultatif. Nécessaire uniquement pour choisir les libellés par nom ; l’étiquetage fonctionne sans cela."
+label = "ID d’application (client)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Secret client"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Apposé sur chaque libellé comme SiteId, afin que les outils compatibles Purview sachent quelle organisation l’a appliqué."
+label = "ID d’annuaire (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Un bucket S3 depuis lequel les sources peuvent lire et vers lequel les sorties de pipeline peuvent écrire."
+label = "Stockage S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID de clé d’accès"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Laissez vide pour AWS. Définissez ceci pour MinIO ou un autre stockage compatible S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Région"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Clé d’accès secrète"
+
+[portal.connections.types.sendgrid]
+description = "Envoyer un document ou une notification par email lorsqu’une politique s’exécute."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Interroger un serveur SFTP (SSH) pour récupérer de nouveaux documents."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Facultatif. L’empreinte SHA-256 de la clé d’hôte du serveur (depuis `ssh-keyscan host | ssh-keygen -lf -`). Lorsqu’elle est définie, seul un serveur présentant cette clé est accepté ; lorsqu’elle est vide, la clé vue à la première connexion est épinglée et les changements ultérieurs sont refusés."
+label = "Empreinte de clé d’hôte"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Phrase secrète de la clé"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Laissez vide si vous vous authentifiez avec une clé privée à la place."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Facultatif. Collez une clé privée OpenSSH pour vous authentifier avec une clé plutôt qu’un mot de passe."
+label = "Clé privée"
+
+[portal.connections.types.slack]
+description = "Publier un message sur Slack lorsqu’une politique traite un document."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Surveiller un partage réseau SMB / CIFS (Windows ou Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Partage réseau"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Facultatif. Le domaine ou groupe de travail Windows, si votre serveur en utilise un."
+label = "Domaine"
+
+[portal.connections.types.smb.fields.share]
+label = "Partage"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Envoyer un événement d’audit à Splunk chaque fois qu’une politique traite un document."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Envoyer un événement d’audit à un collecteur HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publier un message dans un canal Teams lorsqu’une politique s’exécute."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publier chaque document, ou seulement les détails, vers une URL de votre choix."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Déclencher un scénario Zap ou Make depuis une politique."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Parcourir les docs"
+viewSource = "Voir la source sur GitHub"
+
 [portal.docs.authentication]
 codeCaption = "chaque requête"
 eyebrow = "BIEN DÉMARRER"
@@ -6619,11 +7079,19 @@ title = "SDK officiels"
 beta = "Beta"
 deprecated = "Obsolète"
 
+[portal.docs.search]
+empty = "Aucune doc correspondante"
+placeholder = "Rechercher dans les docs"
+results = "{{count}} résultats"
+
 [portal.docs.skills]
 eyebrow = "COMPÉTENCES"
 lead = "Capacités nommées et groupées que votre agent invoque comme un seul outil. Chaque compétence est une chaîne d’opérations déterministe avec des évaluations associées."
 title = "Compétences d’agent"
 
+[portal.docs.toc]
+title = "Sur cette page"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "RÉFÉRENCE API"
@@ -6697,6 +7165,8 @@ type = "Type"
 user = "Utilisateur"
 
 [portal.documents.queue.empty]
+connectSource = "Connecter une source"
+createPipeline = "Créer un pipeline"
 description = "À mesure que les sources alimentent vos pipelines en documents, ils apparaîtront ici pour vérification."
 title = "Aucun document dans la file d’attente"
 
@@ -6806,13 +7276,71 @@ description = "Cette vue a rencontré une erreur inattendue. Réessayez ou chois
 retry = "Réessayer"
 title = "Un problème est survenu sur cette page"
 
+[portal.home.download]
+back = "Retour"
+body = "Téléchargez l’application de bureau ou auto-hébergez le serveur."
+done = "Terminé"
+guide = "Ouvrir le guide {{name}}"
+openInBrowser = "Ouvrir dans le navigateur à la place"
+sectionDesktop = "Application de bureau"
+sectionSelfHosted = "Auto-hébergé"
+title = "Installer l’éditeur Stirling PDF"
+
+[portal.home.download.docker]
+detailBody = "Exécutez l’image officielle sur votre serveur."
+note = "S’ouvre sur :8080. Connexion par défaut : admin / stirling."
+tagline = "Exécuter le serveur dans un conteneur"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installez le chart Helm officiel."
+note = "Ajoutez un PVC pour /configs afin de conserver les paramètres."
+tagline = "Déployer sur un cluster avec Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Versions natives pour votre distribution."
+guideBtn = "Voir les options d’installation Linux"
+note = "Des versions AppImage, .deb et .rpm sont disponibles pour les distributions courantes."
+tagline = "Application de bureau native pour votre distribution"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ou via Homebrew"
+detailBody = "Exécutez l’installateur ou utilisez Homebrew."
+downloadBtn = "Télécharger pour macOS"
+tagline = "Application native pour Apple silicon et Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Exécutez le .jar sur un serveur bare metal."
+downloadBtn = "Télécharger le .jar"
+note = "Nécessite Java 21+. S’ouvre sur :8080 ; identifiant par défaut admin / stirling."
+runLabel = "Puis exécutez-le"
+tagline = "Exécutez le .jar sur un serveur bare metal"
+title = "Configuration manuelle du serveur"
+
+[portal.home.download.windows]
+altLabel = "Ou via winget"
+detailBody = "Exécutez l’installateur ou utilisez un gestionnaire de paquets."
+downloadBtn = "Télécharger l’installateur"
+tagline = "Application native pour Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} actifs"
-invite = "Inviter des coéquipiers"
+activeOfDeployed = "{{active}} sur {{total}} actifs ce mois-ci"
 name = "Stirling PDF Editor"
 open = "Ouvrir dans le navigateur"
 updated = "mis à jour {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Terminer le déploiement"
+options = "Voir les options de déploiement"
+start = "Déployer l’éditeur"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Auto-hébergé · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Bon après-midi"
 evening = "Bonsoir"
 morning = "Bonjour"
 
-[portal.home.onboarding]
-dismiss = "Ignorer la configuration"
-notStarted = "Non démarré"
-progress = "{{done}} sur {{total}} terminés"
-title = "Terminer la configuration"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC à l’échelle de l’organisation, tarification au volume engagé et déploiement air-gapped."
-cta = "Démarrer l’essai"
-ctaQuote = "Obtenir un devis"
-lead = "Pour plus de 250 employés."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Déployez l’application de bureau, gratuite pour toujours."
-title = "Télécharger l’éditeur PDF"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} actives · {{recommended}} recommandées"
-chip = "{{active}} actives"
-title = "Activer les politiques"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} connectées · chaque PDF gouverné là où il arrive"
-chip = "{{connected}} connectées"
-title = "Connecter vos sources"
-
-[portal.home.quickActions]
-subtitle = "Tâches principales pour aujourd’hui"
-title = "Actions rapides"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Compositeur en 3 étapes sur la bibliothèque d’opérations typées"
-title = "Créer un pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, dossiers surveillés"
-title = "Connecter une source"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Clé délimitée avec limites de débit et liste d’autorisation IP"
-title = "Émettre une clé API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gérer le déploiement de l’éditeur"
 sectionsAriaLabel = "Sections d’infrastructure"
@@ -6878,13 +7363,9 @@ heading = "Clés API"
 subheading = "Identifiants délimités avec limites de débit par clé, permissions et listes d’autorisation IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP autorisées"
-anyIp = "Toute IP (aucune liste d’autorisation)"
 created = "Créée"
 lastUsed = "Dernière utilisation"
-permissions = "Permissions"
-rateLimit = "Limite de débit"
-rateLimitValue = "{{value}} req/min"
+revoke = "Révoquer la clé"
 usageMonth = "Utilisation ce mois-ci"
 usageToday = "Utilisation aujourd’hui"
 
@@ -6892,6 +7373,20 @@ usageToday = "Utilisation aujourd’hui"
 description = "Créez une clé délimitée pour commencer à appeler l’API Stirling."
 title = "Aucune clé API pour le moment"
 
+[portal.infrastructure.apiKeys.error]
+load = "Impossible de charger vos clés API. Veuillez réessayer."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Révoquer \"{{name}}\" ? Toute intégration utilisant encore cette clé commencera immédiatement à recevoir des erreurs 401. Cette action est irréversible."
+cancel = "Annuler"
+confirm = "Révoquer la clé"
+title = "Révoquer la clé API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Attesté"
+inScope = "Dans le périmètre"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrer les événements d’audit par catégorie"
 heading = "Journaux d’audit"
@@ -6935,6 +7430,7 @@ all = "Tous"
 auth = "Auth"
 config = "Config"
 elevation = "Élévation"
+policy = "Stratégie"
 processing = "Traitement"
 security = "Sécurité"
 
@@ -6944,19 +7440,35 @@ title = "Vous n’avez pas accès"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Élévation"
+policy = "Stratégie"
 processing = "Traitement"
 totalEvents = "Événements totaux · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Authentification"
+config = "Config"
+elevation = "Élévation"
+policy = "Stratégie"
+processing = "Traitement"
+security = "Sécurité"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Erreur"
+info = "Info"
+success = "Succès"
+warning = "Avertissement"
+
+[portal.infrastructure.certLabel]
+certified = "Certifié"
+inProgress = "En cours"
+notStarted = "Non démarré"
+
 [portal.infrastructure.createKey]
 cancel = "Annuler"
 createKey = "Créer une clé"
 done = "Terminé"
-ipAllowlistHelper = "Plages CIDR séparées par des virgules. Laissez vide pour autoriser toute IP."
-ipAllowlistLabel = "Liste d’autorisation IP"
 keyNameLabel = "Nom de la clé"
 keyNamePlaceholder = "p. ex. Production · ingestion"
-permissionsLabel = "Permissions"
 secretKeyCaption = "Clé secrète"
 secretWarning = "Stockez-la dans un gestionnaire de secrets. Stirling ne stocke jamais qu’un hash — il n’y a aucun moyen de la récupérer plus tard."
 subtitle = "Limitez la clé au minimum nécessaire. Vous pouvez la faire tourner ou la révoquer à tout moment."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Copiez ce secret maintenant — il ne sera plus affiché."
 title = "Créer une clé API"
 titleCreated = "Clé créée"
 
+[portal.infrastructure.deployLabel]
+live = "En ligne"
+queued = "En file d’attente"
+rolledBack = "Restauré"
+rolling = "Déploiement en cours"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Santé en direct de chaque région Stirling déployée — latence
 description = "Les régions déployées apparaissent ici une fois votre espace de travail provisionné."
 title = "Aucune région déployée"
 
+[portal.infrastructure.keyLabel]
+active = "Active"
+revoked = "Révoquée"
+
+[portal.infrastructure.modelLabel]
+active = "Actif"
+degraded = "Dégradé"
+disabled = "Désactivé"
+
 [portal.infrastructure.models]
 heading = "Modèles"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Statut"
 type = "Type"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/appel"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modèles actifs"
 avgLatency = "Latence moy."
@@ -7049,6 +7580,17 @@ modelForAria = "Modèle pour {{operation}}"
 operation = "Opération"
 routedTo = "Acheminé vers"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classification"
+extraction = "Extraction"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Dégradé"
+down = "Indisponible"
+healthy = "Sain"
+
 [portal.infrastructure.security.access.byok]
 description = "Fournissez une clé depuis votre propre KMS. Stirling chiffre avec celle-ci mais peut toujours lire."
 label = "Apportez votre propre clé (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modèles"
 security = "Sécurité"
 storage = "Stockage"
 
+[portal.integrations]
+addAnother = "Ajouter un autre"
+availableHeading = "Disponible"
+comingSoonHeading = "Bientôt disponible"
+connect = "Connecter"
+connectedHeading = "Connecté"
+connectionCount_one = "{{count}} connexion"
+connectionCount_other = "{{count}} connexions"
+customApi = "API personnalisée"
+searchPlaceholder = "Rechercher des intégrations"
+subtitle = "Tout ce avec quoi Stirling peut communiquer. Les identifiants sont créés une fois ici, puis référencés par les sources, les stratégies et les pipelines."
+title = "Intégrations"
+typedName = "Nom de {{tool}}"
+
+[portal.integrations.filters]
+all = "Tous"
+audit = "Audit"
+connected = "Connecté"
+notify = "Notification"
+security = "Sécurité"
+signing = "Signature"
+storage = "Stockage"
+
+[portal.integrations.status]
+connected = "Connecté"
+
+[portal.integrations.table]
+integration = "Intégration"
+worksWith = "Fonctionne avec"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Stratégies"
+sources = "Sources"
+
+[portal.legal]
+draft = "{{label}} · brouillon"
+loadError = "Impossible de charger ce document. Veuillez réessayer."
+loading = "Chargement…"
+title = "Document juridique"
+
 [portal.nav]
 agent-builder = "Constructeur d’agents"
 components = "Composants"
@@ -7182,6 +7765,7 @@ documents = "Documents"
 editor = "Éditeur"
 home = "Accueil"
 infrastructure = "Infrastructure"
+integrations = "Intégrations"
 pipelines = "Pipelines"
 policies = "Politiques"
 procurement = "Achats"
@@ -7190,25 +7774,9 @@ sources = "Sources"
 usage = "Utilisation et facturation"
 users = "Utilisateurs"
 
-[portal.notifications]
-markAllRead = "Tout marquer comme lu"
-title = "Notifications"
-viewAll = "Tout voir"
-
-[portal.notifications.ariaLabel]
-none = "Notifications, aucune non lue"
-unread_one = "Notifications, {{count}} non lue"
-unread_other = "Notifications, {{count}} non lues"
-
-[portal.notifications.count]
-allRead = "tout lu"
-loading = "chargement"
-new_one = "{{count}} nouvelle"
-new_other = "{{count}} nouvelles"
-
-[portal.notifications.empty]
-description = "Aucune nouvelle notification."
-title = "Vous êtes à jour"
+[portal.nav.section]
+platform = "Plateforme PDF"
+processor = "Processeur PDF"
 
 [portal.pipelines]
 subtitle = "Chaque pipeline de documents automatisé sur le backend : une chaîne ordonnée d’opérations sur un ensemble de sources, exécutée sur un déclencheur. Cliquez sur une ligne pour voir ses étapes et sources."
@@ -7220,15 +7788,28 @@ newPipeline = "Nouveau pipeline"
 [portal.pipelines.builder]
 addStep = "Ajouter un outil"
 back = "Retour aux pipelines"
+cannotFollow = "Impossible d’accepter {{produced}}"
+chooseAccount = "Choisir un compte"
+chooseDestination = "Choisir une destination"
+chooseOperation = "Choisir l’action de cette étape"
+chooseSource = "Choisir une source"
 discard = "Abandonner les modifications"
 enabled = "Activé"
+inputs = "Entrée"
+inputSource = "Source d’entrée"
+inputTrigger = "Déclencheur"
 keepEditing = "Continuer à modifier"
+needsConfiguring = "Configuration requise"
 needsUpload = "Nécessite un fichier téléversé"
+noSources = "Aucune source connectée pour le moment. Créez-en une pour l’utiliser comme entrée."
 noToolMatches = "Aucun outil ne correspond à votre recherche."
 pipelineSettings = "Paramètres du pipeline"
 searchTools = "Rechercher des outils"
 selectToolBody = "Ajoutez un outil pour construire votre pipeline."
 selectToolTitle = "Aucun outil pour le moment"
+sendToSystem = "Envoyer vers un autre système"
+stepsIncompatible = "Ces étapes ne peuvent pas s’exécuter sur ce que produit leur étape précédente : {{tools}}."
+stepsNeedSetup = "Ces étapes doivent encore être configurées avant l’enregistrement : {{tools}}."
 toolSettings = "Paramètres de l’outil"
 unknownStep = "Opération non reconnue, conservée telle quelle."
 unsavedBody = "Vous avez des modifications non enregistrées. Enregistrez-les avant de quitter ou abandonnez-les ?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Modifications non enregistrées"
 uploadUnsupported = "Les fichiers téléversés ne sont pas encore pris en charge dans les pipelines, ces étapes ne peuvent donc pas être enregistrées : {{tools}}."
 usesDefaults = "S’exécute avec les paramètres par défaut"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combine tous les fichiers de l’étape précédente"
+fan-out = "S’exécute une fois par fichier de l’étape précédente"
+format-mismatch = "Nécessite {{accepts}}, mais l’étape précédente produit {{produced}}"
+output-uncertain = "Peut ne pas s’exécuter : la sortie de l’étape précédente dépend de sa configuration"
+source-mismatch = "Nécessite {{accepts}}, mais l’entrée de ce pipeline est {{produced}}"
+undeclared-operation = "Impossible de vérifier ce que cette étape accepte"
+
 [portal.pipelines.composer]
 addTool = "Ajouter un outil"
 cancel = "Annuler"
 chainEmpty = "Ajoutez un outil pour commencer à construire votre pipeline."
 create = "Créer le pipeline"
-directory = "Dossier de sortie"
-directoryHelp = "Chemin absolu sur le serveur. Doit se trouver dans les dossiers autorisés configurés."
 editingUnsupported = "L’affichage de ces paramètres d’outil pour modification n’est pas encore pris en charge."
 moveDown = "Déplacer vers le bas"
 moveUp = "Déplacer vers le haut"
 name = "Nom"
 namePlaceholder = "p. ex. Passage de caviardage"
-noSources = "Aucune source connectée pour le moment. Le pipeline peut toujours s’exécuter sur des fichiers qui lui sont fournis directement."
 noToolSettings = "Cet outil n’a aucun paramètre configurable."
 operations_one = "Opération ({{count}})"
 operations_other = "Opérations ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Supprimer"
 title = "Supprimer le pipeline ?"
 
 [portal.pipelines.detail]
+clearHistory = "Effacer l’historique"
 delete = "Supprimer le pipeline"
 run = "Exécuter maintenant"
 
 [portal.pipelines.empty]
 action = "Créer un pipeline"
+connectSource = "Connecter une source"
 description = "Créez votre premier pipeline : choisissez les sources sur lesquelles il s’exécute, enchaînez les opérations et choisissez où va la sortie."
 title = "Aucun pipeline pour le moment"
 
@@ -7286,15 +7874,17 @@ active = "Actifs"
 paused = "En pause"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Écrire dans un dossier"
-inline = "Renvoyer les fichiers"
-
 [portal.pipelines.run]
+allProcessed_one = "Rien à exécuter : le {{count}} document de la source a déjà été traité."
+allProcessed_other = "Rien à exécuter : les {{count}} documents des sources ont déjà été traités."
 completed_one = "Exécution terminée."
 completed_other = "Les {{count}} exécutions sont terminées."
 empty = "Rien à exécuter : les sources n’avaient aucun document à traiter."
 failed = "Échec de l’exécution : {{error}}"
+historyCleared = "Historique effacé. La prochaine exécution retraitera tout ce qui se trouve actuellement dans les sources."
+inFlight = "Rien de nouveau à exécuter : des documents sont encore en cours de traitement depuis une exécution précédente."
+parked_one = "Rien à exécuter : {{count}} document a échoué précédemment et est mis en attente. Corrigez la cause, puis effacez l’historique pour le réessayer."
+parked_other = "Rien à exécuter : {{count}} documents ont échoué précédemment et sont mis en attente. Corrigez la cause, puis effacez l’historique pour les réessayer."
 running = "Exécution démarrée ; toujours en cours."
 timeout = "L’exécution prend plus de temps que prévu ; elle peut encore se terminer en arrière-plan."
 
@@ -7314,12 +7904,18 @@ manual = "Manuel"
 schedule = "Planifié"
 
 [portal.policies]
+defaultName = "Stratégie {{category}}"
 subtitle = "Automatisations permanentes qui appliquent un pipeline d’outils à chaque document. Chaque politique se déclenche lors du téléversement ou de l’exportation, exécute sa chaîne d’outils et enregistre la version appliquée à côté de l’original."
 title = "Politiques"
 
 [portal.policies.card]
 comingSoon = "Passer à Enterprise"
 notSetUp = "Non configuré"
+requiresAiEngine = "Nécessite le moteur AI"
+
+[portal.policies.categories.classification]
+desc = "Identifiez le type de chaque document lors du téléversement et marquez ses métadonnées pour le classement et la recherche."
+label = "Classification"
 
 [portal.policies.categories.compliance]
 desc = "Appliquez les exigences HIPAA, GDPR, SOC 2 ou FedRAMP à chaque document."
@@ -7344,6 +7940,13 @@ label = "Sécurité"
 [portal.policies.config]
 scopeAll = "Tous les documents"
 
+[portal.policies.config.classification]
+summary = "Classe chaque document téléversé selon les étiquettes de votre équipe et marque ses métadonnées."
+
+[portal.policies.config.classification.rules]
+0 = "Classer"
+1 = "Marquer les métadonnées"
+
 [portal.policies.config.compliance]
 summary = "Valide les documents par rapport aux cadres réglementaires avant qu’ils ne quittent le système."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Confiance min."
 2 = "Nommer"
 3 = "Normaliser"
 
+[portal.policies.config.purview]
+label = "Appliquer une étiquette de sensibilité Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Tenant Purview"
+labelId = "ID de l’étiquette"
+labelIdHelp = "Le GUID de l’étiquette, depuis le portail Purview. L’application d’une étiquette écrit ses métadonnées sur le PDF ; elle ne peut pas chiffrer, ce qui nécessite le client Microsoft."
+labelName = "Nom de l’étiquette (facultatif)"
+labelNameHelp = "Enregistré avec l’ID afin que les personnes et les outils puissent reconnaître l’étiquette."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview distingue une étiquette appliquée par une stratégie d’une étiquette choisie par une personne."
+label = "Mode d’enregistrement de l’étiquette"
+privileged = "Comme choisie par une personne"
+standard = "Comme appliquée automatiquement"
+
+[portal.policies.config.purviewRead]
+label = "Lire une étiquette Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tenant Purview"
+connectionHelp = "Lit l’étiquette que le document porte déjà, afin que les étapes ultérieures puissent agir en conséquence."
+
 [portal.policies.config.retention]
 summary = "Applique la durée de conservation des documents, quand les archiver et quand les supprimer."
 
@@ -7438,6 +8064,7 @@ title = "Aucune activité pour le moment"
 [portal.policies.endpoints]
 addWatermark = "Filigrane"
 autoRedact = "Masquer les PII"
+classifyAndLabel = "Classer"
 compressPdf = "Compresser"
 flatten = "Aplatir"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Vos politiques sont enregistrées et apparaîtront une fois la co
 retry = "Réessayer"
 title = "Backend indisponible"
 
+[portal.policies.operations]
+change = "Changer l’action de cette étape"
+noResults = "Aucune étape ne correspond. Essayez un nom de produit, ou \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Rechercher des étapes — essayez \"scan\", \"attach\" ou un nom de produit"
+
+[portal.policies.operations.bodyMode]
+binary = "Octets bruts du fichier"
+json = "Dans une charge utile JSON"
+multipart = "Comme téléversement de fichier (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Votre propre serveur ClamAV vérifie le document ; rien ne quitte votre réseau."
+label = "Rechercher des virus (auto-hébergé)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rejette les documents contenant des macros, exécutables, scripts ou objets intégrés."
+label = "Bloquer le contenu actif"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive vérifie le document et l’exécution s’arrête s’il n’est pas sans menace."
+label = "Rechercher des virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Classe le document traité sur une page."
+label = "Joindre à une page Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Soumet le document à ConsignO Cloud pour signature."
+label = "Envoyer pour signature (ConsignO)"
+note = "Soumet le document. La récupération de la copie signée n’est pas encore prise en charge, car une étape ne peut pas transmettre un résultat à une étape ultérieure."
+
+[portal.policies.operations.customApiCall]
+description = "Définissez vous-même l’appel : chemin, méthode, corps et traitement de la réponse."
+label = "Appeler une API personnalisée"
+
+[portal.policies.operations.discordNotify]
+description = "Informe un canal que la stratégie a traité un document."
+label = "Publier un message sur Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Enregistre ce que la stratégie a fait sous forme de document consultable."
+label = "Indexer un événement d’audit dans Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart convient aux API de téléversement ; JSON convient aux API qui veulent le fichier dans une charge utile ; binary envoie les octets bruts."
+label = "Comment envoyer le document"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Un corps JSON envoyé tel quel. {{document.base64}} contient le fichier ; {{document.*}} et {{run.*}} sont renseignés pour chaque document."
+label = "Corps JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Compte"
+
+[portal.policies.operations.fields.domain]
+label = "Domaine Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Le champ de formulaire sous lequel l’API attend le document."
+label = "Nom du champ de fichier"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "De"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Un objet JSON de paires nom/valeur d’en-tête. L’identifiant de la connexion est ajouté pour vous."
+label = "En-têtes"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Clé du ticket"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Envoyé comme corps du message. {{document.*}} et {{run.*}} sont renseignés pour chaque document."
+label = "Message"
+
+[portal.policies.operations.fields.method]
+label = "Méthode"
+
+[portal.policies.operations.fields.pageId]
+label = "ID de page"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Ajouté à l’URL de base de la connexion. Il ne peut jamais atteindre un autre hôte."
+label = "Chemin"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Emplacement où l’écrire dans le lecteur. {{document.filename}} est renseigné pour chaque document."
+label = "Chemin de destination"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Rapport laisse le document intact. Remplacer l’échange contre ce qui est renvoyé."
+label = "Que faire de la réponse"
+
+[portal.policies.operations.fields.signerEmail]
+label = "E-mail du signataire"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Objet"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyse ce texte. Utilisez {{document.title}} ou collez le texte que vous souhaitez vérifier."
+label = "Texte à vérifier"
+
+[portal.policies.operations.fields.to]
+label = "À"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nom d’utilisateur Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informe un espace que la stratégie a traité un document."
+label = "Publier un message sur Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Classe le document traité dans un ticket."
+label = "Joindre à un ticket Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Envoie le document traité en pièce jointe."
+label = "Envoyer le document par e-mail (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Écrit le document traité dans un dossier."
+label = "Téléverser vers Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Votre propre serveur Presidio signale les données personnelles qu’il trouve."
+label = "Détecter les données personnelles"
+note = "Presidio lit du texte, pas des fichiers. Fournissez-lui le texte que vous souhaitez vérifier — le document lui-même n’est pas téléversé."
+
+[portal.policies.operations.responseMode]
+replace = "Remplacer le document par la réponse"
+report = "Conserver le document, enregistrer la réponse"
+
+[portal.policies.operations.sendgridEmail]
+description = "Envoie le document traité en pièce jointe."
+label = "Envoyer le document par e-mail (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informe un canal que la stratégie a traité un document."
+label = "Publier un message sur Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Enregistre ce que la stratégie a fait, là où vos auditeurs consultent déjà."
+label = "Envoyer un événement d’audit à Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Enregistre ce que la stratégie a fait dans un collecteur HTTP."
+label = "Envoyer un événement d’audit à Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Informe un canal que la stratégie a traité un document."
+label = "Publier un message sur Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Envoie le document lui-même à l’URL de votre choix."
+label = "Publier le document vers un webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Transmet les détails de l’exécution à votre automatisation."
+label = "Déclencher un Zap ou un scénario Make"
+
 [portal.policies.stats]
 activeFor = "Actif"
 dataProcessed = "Données traitées"
@@ -7473,6 +8277,13 @@ label = "Docs appliqués"
 description = "Configurées mais non déclenchées"
 label = "En pause"
 
+[portal.policies.table]
+appliesTo = "S’applique à"
+docs = "Docs appliqués"
+enforces = "Applique"
+policy = "Stratégie"
+status = "Statut"
+
 [portal.policies.wizard.actions]
 back = "Retour"
 cancel = "Annuler"
@@ -7480,6 +8291,10 @@ continue = "Continuer"
 enablePolicy = "Activer la politique"
 saveChanges = "Enregistrer les modifications"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifie le type du document à partir des étiquettes de votre équipe et le marque, afin qu’il soit classé et recherché par catégorie."
+label = "Classer le document"
+
 [portal.policies.wizard.capability.compress]
 desc = "Compresse le document pour réduire la taille du fichier."
 label = "Réduire la taille du fichier"
@@ -7500,10 +8315,18 @@ label = "Masquer les informations sensibles"
 desc = "Supprime le JavaScript masqué afin que rien ne puisse s’exécuter automatiquement à l’ouverture du document."
 label = "Retirer le contenu actif"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Prouve que le document existait sous cette forme exacte à un moment donné, à l’aide d’une autorité d’horodatage indépendante. Seul un hash est envoyé - le document ne quitte jamais votre serveur."
+label = "Ajouter un horodatage de confiance"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Appose une marque visible (p. ex. « Confidentiel ») sur chaque page."
 label = "Appliquer un filigrane"
 
+[portal.policies.wizard.classification]
+description = "Chaque document téléversé est classé selon les étiquettes intégrées et marqué avec les types qui conviennent. L’ensemble d’étiquettes est partagé par toute votre équipe."
+labelsHeading = "Étiquettes de classification"
+
 [portal.policies.wizard.errors]
 noTools = "Activez d’abord au moins un outil dans le flux de travail."
 saveFailed = "Impossible d’enregistrer la politique. Veuillez réessayer."
@@ -7548,73 +8371,118 @@ setUp = "Configurer la politique {{category}}"
 [portal.policies.wizard.workflow]
 description = "Choisissez ce que cette politique fait à chaque document qu’elle traite."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} actifs"
-noRule = "Aucune règle appliquée pour le moment"
-subtitle = "Automatisations permanentes par lesquelles passe chaque document, quel que soit le pipeline qui le gère."
-title = "Ce qui s’exécute sur vos PDF"
-
 [portal.policySummary.action]
-comingSoon = "Passer à Enterprise"
-configure = "Configurer"
 setUp = "Configurer"
 
-[portal.policySummary.column]
-activeRule = "Règle active"
-policy = "Politique"
-status = "Statut"
+[portal.processorFlow]
+footnote = "Les compteurs portent sur les dernières 24 heures. La vitesse du flux est illustrative."
+liveBadge = "En direct"
+stats = "{{connected}} connectés · {{processed}} PDF traités"
+title = "Processeur PDF"
 
-[portal.policySummary.empty]
-description = "Une fois les politiques configurées, les catégories apparaissent ici."
-title = "Aucune politique pour le moment"
+[portal.processorFlow.lens]
+ariaLabel = "Mode d’affichage"
+flow = "Flux"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Actif"
-off = "Désactivé"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Échec"
+heading = "Résultats"
+success = "Livrés"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} actives"
+count = "{{n}} · 24 h"
+heading = "Stratégies"
+setUp = "Configurer"
 soon = "Bientôt"
 
-[portal.processingStatus]
-managePlan = "Gérer le plan"
-volumeSuffix = "PDF traités · 30 derniers jours"
+[portal.processorFlow.sankey]
+waist = "Stratégies · {{n}} actives"
+
+[portal.processorFlow.sankey.empty]
+description = "Connectez une source et activez une stratégie pour voir les documents circuler dans le processeur."
+title = "Aucun flux pour le moment"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Connecter"
+editor = "Éditeur Stirling PDF"
+heading = "Sources"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Réception des e-mails"
 
 [portal.procurement]
-reset = "Réinitialiser les achats (démo)"
 subtitle = "Faites évaluer, contractualiser et intégrer votre équipe. Chaque document au même endroit."
 title = "Achats"
 
-[portal.procurement.action]
-download = "Télécharger"
-pay = "Payer maintenant"
-request = "Demander"
-sign = "Vérifier et signer"
-upload = "Uploader"
-
 [portal.procurement.agreement]
 agreeCta = "Accepter et s’abonner"
+confidential = "Confidentiel"
 confirm = "J’ai lu et j’accepte le Stirling Enterprise Agreement."
-eyebrow = "Contrat"
-intro = "Un contrat combiné couvre votre accord : Master Service Agreement, Order Form, EULA et Data Processing Agreement. Relisez-le, puis acceptez pour transformer le devis en abonnement engagé."
-title = "Vérifiez votre contrat Enterprise"
+docName = "Contrat Stirling Enterprise"
+docSub = "MSA, bon de commande, EULA et DPA, combinés en une seule signature."
+download = "Télécharger"
+downloadDraftError = "Impossible de générer le PDF du contrat - le moteur de rendu des documents est indisponible. Veuillez réessayer sous peu ou contacter le support."
+downloadError = "Impossible de télécharger le contrat signé. Veuillez réessayer."
+legalName = "Nom de l’entité juridique"
+legalNamePlaceholder = "L’entité juridique qui signera"
+loadError = "Impossible de charger le contrat. Veuillez réessayer."
+loading = "Chargement du contrat..."
+ref = "Réf. {{ref}} · {{version}}"
+requestChanges = "Demander des modifications"
+scrollHint = "Faites défiler pour examiner"
+signatory = "Nom du signataire"
+signatoryPlaceholder = "Nom complet"
+signatoryTitle = "Fonction du signataire"
+signatoryTitlePlaceholder = "p. ex. Directeur juridique"
+signError = "Impossible d’enregistrer votre signature. Veuillez réessayer."
 
 [portal.procurement.builder]
 addons = "Modules complémentaires"
+addressLine1 = "Adresse ligne 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresse ligne 2"
+addressLine2Placeholder = "Suite, étage, bâtiment"
 back = "Retour"
 businessName = "Nom de l’entreprise"
 businessNamePlaceholder = "Votre entreprise"
+city = "Ville"
+cityPlaceholder = "San Francisco"
+completeRequired = "Veuillez renseigner les champs obligatoires (marqués *) avec une adresse e-mail valide avant de générer le devis."
+contactEmail = "E-mail du contact"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nom du contact"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continuer"
-country = "Pays"
-countryEuro = "Zone euro (EUR €)"
-countryUK = "Royaume-Uni (GBP £)"
-countryUS = "États-Unis (USD $)"
+done = "Terminé"
 eula = "J’ai lu et j’accepte le Stirling Enterprise EULA. Il régit le contrat généré à partir de ce devis."
 generate = "Générer le devis"
-included = "Inclus"
 indemnification = "Indemnisation IP"
 indemnificationSub = "Nous défendons les réclamations IP éligibles, conformément au EULA"
-offlineLicense = "Licence hors ligne / air-gapped"
-offlineLicenseSub = "Un fichier de licence téléchargeable pour une instance auto-hébergée air-gapped"
+paperEyebrow = "Devis Entreprise"
+paperFor = "Préparé pour"
+pdfSize = "Taille du PDF"
+poNumber = "Numéro de bon de commande"
+poNumberPlaceholder = "Facultatif"
+postalCode = "Code postal"
+postalCodePlaceholder = "94105"
+posture = "Gouvernance"
+posture_count = "~{{count}} stratégies"
+posture_essentials = "Essentiels"
+posture_essentialsSub = "Classification + Partage — les valeurs par défaut"
+posture_governed = "Gouverné"
+posture_governedSub = "Ajoute Sécurité et Routage"
+posture_regulated = "Réglementé"
+posture_regulatedSub = "Chaque catégorie — Conformité, Conservation, Ingestion"
 qbr = "Revues d’activité trimestrielles"
 qbrSub = "Votre SE examine l’utilisation et la feuille de route chaque trimestre"
+region = "État / région"
+regionPlaceholder = "California"
 running = "{{annual}} / an · {{years}} an(s) {{tcv}}"
 s1Sub = "Votre équipe et les PDF que vous prévoyez de traiter chaque année."
 s1Title = "Quel volume allez-vous traiter ?"
@@ -7623,6 +8491,12 @@ s2Title = "Engagement et service"
 s3Sub = "Pour le devis et le contrat qu’il génère."
 s3Title = "Vos informations"
 serviceLevel = "Niveau de service"
+size_compact = "Compact"
+size_compactSub = "Principalement du texte, moins de 1 MB"
+size_heavy = "Lourd"
+size_heavySub = "Scanné ou riche en images, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Texte et images mixtes, 1 à 5 MB"
 slDedicated = "Dédié"
 slDedicatedSub = "4 heures ouvrées · gestionnaire de compte dédié · +30 %"
 slPriority = "Prioritaire"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Même jour ouvré · CSM nommé · +15 %"
 slStandard = "Standard"
 slStandardSub = "Jour ouvré suivant · CSM partagé · inclus"
 stepOf = "Étape {{n}} sur {{total}}"
+taxId = "N° de TVA / identifiant fiscal"
+taxIdPlaceholder = "Facultatif"
 term = "Durée"
 termDiscount = "Remise d’engagement pluriannuel de {{pct}} % appliquée"
 title = "Créez votre devis"
@@ -7637,6 +8513,7 @@ training = "Intégration et formation"
 trainingSub = "Sessions en direct pour lancer votre équipe"
 users = "Nombre total d’utilisateurs"
 usersPlaceholder = "p. ex. 250"
+viewEula = "Lire"
 volEstimated = "Estimé à partir de {{count}} utilisateurs (~2 000 PDF chacun, automatisation incluse). Modifiez si vous avez une meilleure estimation."
 volManual = "Utilisation de votre chiffre. Réestimez à partir de la taille de votre équipe à tout moment."
 volNoUsers = "Vous n’êtes pas sûr ? Saisissez la taille de votre équipe et nous l’estimerons."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "p. ex. 1 000 000"
 years_one = "{{count}} an"
 years_other = "{{count}} ans"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Terminé"
-here = "Vous êtes ici"
-hide = "Masquer"
-optional = "Facultatif"
-paidAddon = "Module complémentaire payant"
-show = "Afficher"
-subtitle = "Tout ce dont vous avez besoin à chaque étape du parcours, mis en avant à mesure que l’accord progresse."
-supportingSubtitle = "SOC 2, revues de sécurité, formulaires fiscaux et plus encore, prêts lorsque votre équipe sécurité ou achats les demande. Certains entraînent des frais ponctuels."
-supportingTitle = "Soutenir votre évaluation"
+[portal.procurement.documents]
+agreement = "Contrat Entreprise"
+agreementSub = "MSA, bon de commande et DPA en une seule signature."
+download = "Télécharger"
+eula = "EULA et conditions commerciales"
+eulaSub = "Les conditions du logiciel et commerciales en libre-service."
+invoice = "Facture"
+invoiceSub = "Votre première facture d’abonnement."
+laterInvoice = "Disponible après votre acceptation"
+laterQuote = "Disponible une fois votre devis émis"
+quote = "Devis"
+quoteSub = "Votre devis Entreprise détaillé."
+sla = "Annexe SLA"
+slaSub = "Niveaux de support et objectifs de réponse."
+subprocessors = "Sous-traitants"
+subprocessorsSub = "Tiers qui traitent des données pour votre compte."
+subtitle = "Vos documents contractuels, disponibles à tout moment."
 title = "Documents"
-upcoming = "À venir"
+view = "Voir"
 
 [portal.procurement.error]
 title = "Une erreur s’est produite"
 
 [portal.procurement.hero]
-company = "Votre accord Enterprise"
+barAria = "Étape {{current}} sur {{total}}"
 ctaAgreement = "Vérifier et signer le contrat"
-ctaLive = "Vous êtes en ligne"
-ctaPayment = "Ajouter un paiement"
+ctaExploring = "Configurer votre essai"
 ctaQuote = "Vérifier votre devis"
+ctaReviewQuote = "Examiner le devis"
 ctaTrial = "Créer votre devis"
+documents = "Documents"
 eyebrow = "Achats Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Inviter des coéquipiers"
-keyDocs = "Documents clés"
-nextStep = "Étape suivante : {{action}}"
-notStarted = "Non commencé"
+licenseKey = "Clé de licence"
+liveSub = "Votre organisation est provisionnée et votre licence est active."
+liveTitle = "Vous êtes en production sur Stirling Enterprise"
+next = "Suivant : {{stage}}"
 open = "Ouvrir les achats"
 scheduleCall = "Planifier un appel"
-setup1Sub = "Invitez vos coéquipiers"
-setup1Title = "Déployer le PDF Editor"
-setup2Sub = "Activez le traitement dans les éditeurs et autres sources"
-setup2Title = "Connecter le PDF Processor"
-setup3Sub = "Activez Security, Compliance, Routing ou Retention lorsque vous en avez besoin"
-setup3Title = "Ajouter les politiques recommandées"
+sentenceAgreement = "examiner et signer le contrat"
+sentenceLive = "provisionnement et déploiement"
+sentencePayment = "bon de commande et paiement"
+sentenceQuote = "examiner et accepter votre devis"
+sentenceTrial = "configurer votre espace d’essai"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} jour restant"
 daysLeft_other = "{{count}} jours restants"
-engineerLabel = "Votre solutions engineer"
-eyebrow = "Votre déploiement"
-live = "Vous êtes en ligne sur Stirling Enterprise"
-nextStep = "Étape suivante : {{action}}"
-subtitle = "Votre solutions engineer est présent à chaque étape. Une action suivante à la fois ; la liste complète est ci-dessous."
-title = "De l’essai à la mise en ligne, un parcours guidé"
-trialTitle = "Essai Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Une seule signature couvre MSA, order form, EULA et DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Impossible de générer le fichier de licence hors ligne pour l
 downloadOffline = "Télécharger la licence hors ligne (.lic)"
 hint = "Collez cette clé dans une instance auto-hébergée pour l’activer, ou conservez-la pour vos dossiers. Gardez-la en sécurité."
 label = "Votre clé de licence"
+subtitle = "Activez une instance auto-hébergée avec cette clé, ou conservez-la pour vos dossiers."
+title = "Votre clé de licence"
+trialFileHint = "Ceci est votre fichier de licence d’essai. Une fois votre contrat en place, revenez le télécharger à nouveau — contrairement à la clé de licence en ligne, le fichier .lic ne se mettra pas à jour tout seul."
 
 [portal.procurement.link]
 cta = "Lier le compte"
@@ -7739,65 +8619,62 @@ description = "Votre abonnement est actif et votre licence est émise. Votre éq
 eyebrow = "En ligne"
 title = "Vous êtes en ligne sur Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Les clés d’essai, les devis à volume engagé, le contrat à signature unique, le paiement et votre registre de documents se trouvent tous ici une fois que vous démarrez une évaluation Enterprise."
-eyebrow = "Enterprise uniquement"
-talkToSales = "Contacter l’équipe commerciale"
-title = "Le parcours d’achats s’ouvre avec Enterprise"
-
 [portal.procurement.milestone]
-accept = "Accepter et continuer"
-description = "Téléchargez le PDF pour le partager avec votre équipe, revenez pour accepter lorsque vous serez prêt, ou apportez des modifications."
-download = "Télécharger le PDF"
 downloadError = "Impossible de télécharger le PDF du devis pour le moment — veuillez réessayer dans un instant."
-edit = "Modifier le devis"
-eyebrow = "Devis {{number}}"
-perYear = " / an"
-preparedFor = "Préparé pour {{company}}"
-tcv = "{{value}} valeur totale du contrat"
-title = "Votre devis est prêt"
-
-[portal.procurement.modal]
-cancel = "Annuler"
-chooseFile = "Choisir un fichier"
-close = "Fermer"
-downloadBody = "Votre téléchargement va bientôt commencer."
-downloadCta = "Télécharger"
-downloadTitle = "Télécharger"
-noFile = "Aucun fichier sélectionné"
-payBody = "Payez votre contrat engagé par carte ou virement bancaire via Stripe. Votre espace de travail est provisionné dès que le paiement est validé."
-payCta = "Continuer vers Stripe"
-payTitle = "Confirmer le paiement"
-requestBodyFree = "Nous générons cela à la demande. Confirmez et votre solutions engineer vous l’enverra sous peu."
-requestBodyPaid = "Il s’agit d’un module complémentaire payant. Confirmez et votre solutions engineer en définira le périmètre et enverra les documents."
-requestCta = "Demander"
-requestTitle = "Demander ce document"
-signBody = "Ouvre le Stirling Enterprise Agreement pour signature électronique : une seule signature couvre le MSA, l’order form, le EULA et le DPA. Nous contresignons automatiquement et vous passez au paiement."
-signCta = "Ouvrir pour signature"
-signTitle = "Vérifier et signer votre contrat"
-uploadBody = "Envoyez-nous votre PO et nous le facturons selon vos conditions. Déposez le PDF ou choisissez un fichier ci-dessous."
-uploadCta = "Uploader le bon de commande"
-uploadTitle = "Uploader votre bon de commande"
 
 [portal.procurement.payment]
 description = "Votre devis est accepté et votre licence est déjà active — votre équipe peut commencer immédiatement. Payez la première facture lorsque vous êtes prêt ; vous pouvez la payer ou la télécharger ici, sans email."
+downloadAgreement = "Télécharger le contrat signé"
 downloadInvoice = "Télécharger la facture"
-simulate = "Simuler la réception du paiement (démo)"
+eyebrow = "Paiement"
 title = "Abonnement créé"
 viewInvoice = "Voir et payer la facture"
 
+[portal.procurement.review]
+acceptCta = "Accepter le devis"
+annual = "Frais annuels (année 1)"
+downloadCta = "Télécharger le devis"
+poNumber = "Bon de commande : {{po}}"
+renewal = "Renouvellement à {{amount}}/an après la durée (+{{pct}} % IPC)"
+tcv = "Durée de {{years}} ans, payée intégralement d’avance : {{tcv}}"
+validUntil = "Valable jusqu’au {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Impossible de charger le planificateur."
 fallbackLink = "Ouvrir la planification dans un nouvel onglet"
+loading = "Chargement du planificateur..."
 subtitle = "Votre solutions engineer guidera votre équipe tout au long du déploiement. Choisissez un créneau qui vous convient."
 title = "Planifier un appel"
 
-[portal.procurement.status]
-action = "Action requise"
-available = "Disponible"
-complete = "Terminé"
-pending = "En attente"
-request = "Sur demande"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Fermé, sans trafic sortant"
+back = "Retour"
+businessName = "Nom de l’entreprise"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Géré, démarrage le plus rapide"
+continue = "Continuer"
+deployment = "Où doit-il être déployé ?"
+eula = "J’accepte l’EULA et les conditions commerciales de Stirling."
+fullName = "Nom complet"
+fullNamePlaceholder = "Votre nom"
+invites = "Inviter des coéquipiers · facultatif"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Planifier un appel"
+seats = "Personnes testant"
+seatsPlaceholder = "p. ex. 15"
+selfhost = "Auto-hébergé"
+selfhostSub = "Docker ou Kubernetes"
+start = "Démarrer l’essai"
+stepOf = "Étape {{n}} sur {{total}}"
+subtitle = "Gratuit pendant 14 jours, aucune carte requise."
+subtitleDetails = "Quelques détails pour votre devis et votre contrat."
+talkFirst = "Vous préférez d’abord en parler ?"
+title = "Configurer votre essai"
+viewEula = "Lire"
+workEmail = "E-mail professionnel"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "La prolongation ajoute 7 jours et informe votre solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Limite atteinte"
 subtitle = "Votre essai gratuit est valable jusqu’au {{date}}. Aucune carte requise."
 title = "Essai Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Tarification au volume engagé, SSO + SCIM + RBAC à l’échelle de l’organisation, audit immuable de 90 jours et SE dédié."
-homeCta = "Démarrer l’essai →"
-homeHeadline = "Traitez des millions de PDF."
-
-[portal.recentActivity]
-title = "Activité récente"
-viewAll = "Voir tout"
-
-[portal.recentActivity.empty]
-description = "Les exécutions de pipeline, les déploiements et les événements d’agent apparaîtront ici."
-title = "Rien ici pour le moment"
-
 [portal.search]
 ariaLabel = "Rechercher"
 placeholder = "Rechercher dans Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Lien du compte"
 
-[portal.shell.header]
-accountFallback = "Compte"
-accountMenu = "Menu du compte"
-darkMode = "Mode sombre"
-lightMode = "Mode clair"
-search = "Rechercher"
-searchPlaceholder = "Rechercher…"
-signOut = "Se déconnecter"
-switchToDark = "Passer au thème sombre"
-switchToLight = "Passer au thème clair"
-
 [portal.shell.sidebar]
 appEditor = "Éditeur"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Lier un compte Stirling"
-planEditor = "Plan Editor"
-planEnterprise = "Plan Enterprise"
-planProcessor = "Plan Processor"
 primaryNav = "Navigation principale"
 switchApp = "Changer d’application"
 
+[portal.shell.topbar]
+closeNav = "Fermer la navigation"
+openNav = "Ouvrir la navigation"
+search = "Rechercher"
+
 [portal.sources]
 subtitle = "Connexions d’entrée réutilisables qui fournissent des documents à Stirling. Configurez une connexion une fois, puis référencez-la depuis autant de politiques que nécessaire. Cliquez sur une ligne pour voir sa configuration et les politiques qui l’utilisent."
 title = "Sources"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Connecter une source"
 
+[portal.sources.builder]
+back = "Retour aux sources"
+backToTypes = "Tous les types de sources"
+cancel = "Annuler"
+chooseHint = "Choisissez d’où viennent les documents. Les connecteurs grisés arrivent bientôt."
+comingSoon = "Bientôt disponible"
+comingSoonHeading = "Bientôt disponible"
+create = "Créer une source"
+createTitle = "Connecter une source"
+delete = "Supprimer"
+editTitle = "Modifier la source"
+enabled = "Activé"
+save = "Enregistrer les modifications"
+
+[portal.sources.builder.folderAccess]
+description = "Les automatisations de dossiers ne peuvent utiliser que les dossiers autorisés par un administrateur. Ajoutez-le dans les paramètres d’accès aux dossiers, puis réessayez."
+openSettings = "Paramètres d’accès aux dossiers"
+title = "Ce dossier n’est pas autorisé"
+
 [portal.sources.delete]
 body = "Supprimer \"{{name}}\" ? Cette action est irréversible. Les politiques qui y font référence devront être mises à jour."
 cancel = "Annuler"
 confirm = "Supprimer"
 title = "Supprimer la source ?"
 
-[portal.sources.detail]
-closeAriaLabel = "Fermer le détail"
-delete = "Supprimer la source"
-docs24h = "Dernières 24 h"
-docs30d = "30 derniers jours"
-docsTotal = "Total vus"
-docsTrend = "Documents sur les 30 derniers jours"
-documents = "Documents"
-edit = "Modifier"
-notReferenced = "Référencée par aucune politique, elle peut donc être supprimée en toute sécurité."
-pause = "Mettre en pause"
-resume = "Reprendre"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Utilisé par"
-
 [portal.sources.empty]
 description = "Connectez un dossier (et bientôt un stockage cloud) afin que vos politiques disposent d’un emplacement où récupérer des documents."
 title = "Aucune source connectée pour le moment"
@@ -7899,18 +8754,57 @@ inUse = "En cours d’utilisation"
 total = "Connexions"
 unused = "Inutilisées"
 
+[portal.sources.networkFields.connection]
+helperText = "La connexion enregistrée avec l’adresse du serveur et les identifiants. Réutilisée par chaque source qui la référence."
+label = "Connexion"
+
+[portal.sources.networkFields.directory]
+helperText = "Dossier du serveur à interroger, relatif au dossier personnel de connexion ou à la racine du partage. Laissez vide pour la racine."
+label = "Dossier"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consommer supprime chaque fichier du serveur une fois que chaque stratégie l’a traité."
+label = "Mode de lecture"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consommer : traiter chaque fichier une seule fois"
+snapshot = "Instantané : relire le dossier à chaque exécution"
+
+[portal.sources.networkFields.recursive]
+label = "Profondeur du dossier"
+
+[portal.sources.networkFields.recursive.options]
+all = "Inclure les sous-dossiers"
+top = "Niveau supérieur uniquement"
+
 [portal.sources.status]
 active = "Actif"
 disabled = "Désactivé"
 unused = "Inutilisé"
 
 [portal.sources.table]
+documents = "Documents"
 source = "Source"
 status = "Statut"
 usedBy = "Politiques"
 
+[portal.sources.types.box]
+description = "Récupérez des documents depuis les dossiers Box que votre équipe partage déjà."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Récupérez des documents depuis un dossier Dropbox partagé."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documents que votre équipe a traités dans l’éditeur, à travers les exécutions de stratégies et AI."
 label = "Éditeur"
+noPolicies = "Aucune stratégie exécutée depuis l’éditeur pour le moment."
+
+[portal.sources.types.email]
+description = "Transformez les pièces jointes envoyées à une boîte dédiée en documents."
+label = "Boîte de réception e-mail"
 
 [portal.sources.types.folder]
 description = "Surveille un répertoire sur le serveur pour les nouveaux documents."
@@ -7943,25 +8837,80 @@ label = "Profondeur du dossier"
 all = "Inclure les sous-dossiers"
 top = "Niveau supérieur uniquement"
 
+[portal.sources.types.ftp]
+description = "Interrogez un dossier de serveur FTP ou FTPS pour détecter de nouveaux documents."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Récupérez des documents depuis des dossiers Google Drive partagés."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Surveillez un partage réseau SMB pour détecter de nouveaux documents."
+label = "Lecteur réseau"
+
+[portal.sources.types.onedrive]
+description = "Surveillez des dossiers OneDrive pour détecter de nouveaux documents."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Récupérez des documents depuis un bucket Amazon S3 ou compatible S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "La connexion enregistrée contenant le bucket et les identifiants. Réutilisée par chaque source et sortie de pipeline qui la référence."
+label = "Connexion"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consommer supprime chaque objet du bucket une fois que chaque stratégie l’a traité."
+label = "Mode de lecture"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consommer : traiter chaque objet une seule fois"
+snapshot = "Instantané : relire le bucket à chaque exécution"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Seuls les objets dont les clés commencent par ce préfixe sont traités."
+label = "Préfixe de clé"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Interrogez un dossier de dépôt SFTP pour détecter de nouveaux documents."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Récupérez des documents depuis des bibliothèques de documents SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Source"
 
+[portal.sources.types.webhook]
+createNote = "Une URL de livraison et un secret de signature sont générés lorsque vous créez ce webhook. Les expéditeurs envoient les documents en POST à cette URL et les stratégies référencées s’exécutent à l’arrivée."
+description = "Recevez des documents via HTTP POST signé depuis n’importe quel système externe."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL de livraison"
+secretNote = "Le secret de signature est affiché une seule fois, lors de la création du webhook. Recréez la source pour le renouveler."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copier"
+done = "Terminé"
+secret = "Secret de signature"
+secretHelp = "Signez le corps brut de chaque livraison avec cette clé (HMAC-SHA256) et envoyez-le comme en-tête X-Stirling-Signature."
+secretWarning = "Copiez le secret de signature maintenant. Pour votre sécurité, il n’est affiché qu’une seule fois et ne pourra pas être récupéré ultérieurement."
+title = "Webhook créé"
+url = "URL de livraison"
+usage = "Envoyez chaque document en POST comme corps brut de la requête vers l’URL de livraison avec un type de contenu binaire (application/pdf ou application/octet-stream). Les stratégies référencées s’exécutent automatiquement à l’arrivée."
+
 [portal.sources.wizard]
-back = "Retour"
-cancel = "Annuler"
-continue = "Continuer"
-editTitle = "Modifier la source"
 name = "Nom"
 namePlaceholder = "p. ex. Réception des demandes"
-save = "Enregistrer les modifications"
-subtitle = "Étape {{current}} sur {{total}} · {{label}}"
-title = "Connecter une source"
 type = "Type"
 
-[portal.sources.wizard.steps]
-chooseType = "Choisir le type"
-configure = "Configurer"
-review = "Vérifier et connecter"
+[portal.stepModal]
+close = "Fermer"
 
 [portal.usage]
 managePayment = "Gérer le paiement"
@@ -8021,16 +8970,9 @@ summary = "Possède une équipe — gère les ressources de ses membres et les c
 2 = "Accès au portail via la politique par défaut"
 3 = "Tout ce qu’un Membre peut faire"
 
-[portal.welcome]
-ariaLabel = "Bienvenue dans Stirling PDF"
-badge = "Open-source"
-installEditor = "Installer l’éditeur"
-inviteTeammates = "Inviter des coéquipiers"
-openInBrowser = "Ouvrir dans le navigateur"
-perks = "Gratuit pour toujours · Auto-hébergeable"
-subtitle = "L’éditeur PDF le plus sécurisé au monde est gratuit pour les équipes de toutes tailles. Inclut plus de 60 opérations PDF et SSO."
-title = "Bienvenue dans"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Illimité"
 
 [printFile]
 title = "Imprimer le fichier"
@@ -8613,6 +9555,14 @@ text = "Faites pivoter les pages de votre PDF dans le sens horaire ou antihorair
 [rotate.tooltip.header]
 title = "Aperçu des paramètres de rotation"
 
+[ruler]
+clearAll = "Tout effacer"
+hideAllLabels = "Masquer toutes les étiquettes"
+hideSmallLabels = "Masquer les petites étiquettes"
+physicalValues = "Physique"
+scaled = "À l’échelle"
+showAllLabels = "Afficher toutes les étiquettes"
+
 [sanitize]
 desc = "Supprimer les éléments potentiellement nuisibles des fichiers PDF."
 sanitizationResults = "Résultats de l’assainissement"
@@ -8654,31 +9604,45 @@ label = "Supprimer les métadonnées XMP"
 [sanitize.steps]
 settings = "Paramètres"
 
-[sanitizePdf]
-tags = "assainir,sécurisé,clean,secure,safe,remove-threats"
-
 [sanitizePDF]
 title = "Assainir"
 
+[sanitizePdf]
+tags = "assainir,sécurisé,clean,secure,safe,remove-threats"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Ajuster la taille ou l'échelle"
 
+[scaleSettings]
+activeScale = "Échelle active"
+apply = "Appliquer l’échelle"
+applyCalibration = "Appliquer l’étalonnage"
+calculatedScale = "Échelle calculée"
+calibrate = "Étalonner"
+calibrating = "Étalonnage"
+calibrationDistanceRequired = "Saisissez une distance réelle supérieure à zéro"
+calibrationInvalid = "Impossible de calculer l’échelle à partir de cette mesure"
+calibrationPaperDistance = "Distance mesurée sur la page : {{distance}}"
+calibrationTitle = "Étalonner l’échelle"
+calibrationTooltip = "Mesurez une distance connue pour calculer automatiquement l’échelle"
+customScale = "Échelle personnalisée"
+noneSet = "Aucune échelle personnalisée définie"
+presets = "Échelles prédéfinies"
+ratio = "Rapport d’échelle"
+ratioHelp = "Rapport : 1 unité de page = X unités réelles"
+ratioPlaceholder = "p. ex., 100"
+ratioPositive = "Le rapport doit être supérieur à zéro"
+ratioRequired = "Le rapport est requis"
+realDistance = "Distance réelle"
+realDistancePlaceholder = "p. ex., 5"
+reset = "Réinitialiser aux valeurs par défaut"
+unit = "Unité"
+unitInvalid = "Unité non valide : {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Seuil de rotation"
-10 = "Définit la taille de la bordure ajoutée et supprimée pour éviter les bordures blanches dans la sortie (par défaut : 1)."
-2 = "Définit l'angle absolu minimum requis pour la rotation de l'image (par défaut : 10)."
-3 = "Tolérance"
-4 = "Détermine la plage de variation de couleur autour de la couleur d'arrière-plan estimée (par défaut : 20)."
-5 = "Surface minimale"
-6 = "Définit la surface minimale pour une photo (par défaut : 8 000)."
-7 = "Surface de contour minimale"
-8 = "Définit la surface de contour minimale pour une photo (par défaut : 500)."
-9 = "Taille de la bordure"
-
 [scannerImageSplit]
 submit = "Extraire les photos scannées"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Ce que fait cet outil"
 whatThisDoesDesc = "Détecte et extrait automatiquement chaque photo d’une page scannée ou d’une image composite — sans recadrage manuel."
 whenToUse = "Quand l’utiliser"
 
+[ScannerImageSplit.selectText]
+1 = "Seuil de rotation"
+10 = "Définit la taille de la bordure ajoutée et supprimée pour éviter les bordures blanches dans la sortie (par défaut : 1)."
+2 = "Définit l'angle absolu minimum requis pour la rotation de l'image (par défaut : 10)."
+3 = "Tolérance"
+4 = "Détermine la plage de variation de couleur autour de la couleur d'arrière-plan estimée (par défaut : 20)."
+5 = "Surface minimale"
+6 = "Définit la surface minimale pour une photo (par défaut : 8 000)."
+7 = "Surface de contour minimale"
+8 = "Définit la surface de contour minimale pour une photo (par défaut : 500)."
+9 = "Taille de la bordure"
+
 [search]
 noResults = "Aucun résultat trouvé"
 placeholder = "Saisir un terme de recherche…"
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Your Stirling-PDF server is offline and \"{{endpoint}
 [session]
 expired = "Votre session a expiré. Veuillez recharger la page et réessayer."
 
-[sessionManagement.tooltip]
-header = "Gestion des sessions de signature"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Les nouveaux participants sont ajoutés à la fin de l’ordre de signature"
-bullet2 = "Impossible d’ajouter des participants après la finalisation de la session"
-bullet3 = "Chaque participant reçoit une notification lorsqu’arrive son tour"
-description = "Vous pouvez ajouter d’autres participants à une session active à tout moment avant la finalisation."
-title = "Ajout de participants"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalisation complète</b> : Tous les participants ont signé"
-bullet2 = "<b>Finalisation partielle</b> : Certains participants n’ont pas encore signé"
-bullet3 = "Les participants n’ayant pas signé seront exclus du document final"
-bullet4 = "Une fois finalisée, vous pouvez charger le PDF signé dans les fichiers actifs"
-description = "La finalisation combine toutes les signatures en un seul PDF signé. Cette action est irréversible."
-title = "Finalisation de la session"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Impossible de supprimer les participants ayant déjà signé"
-bullet2 = "Les participants supprimés ne reçoivent plus de notifications"
-bullet3 = "L’ordre de signature s’ajuste automatiquement"
-description = "Les participants peuvent être retirés des sessions avant de signer."
-title = "Suppression de participants"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Chaque signature est appliquée séquentiellement au PDF"
-bullet2 = "Les signataires suivants peuvent voir les signatures précédentes"
-bullet3 = "Critique pour les flux d’approbation et les chaînes de conservation légales"
-description = "L’ordre que vous spécifiez lors de la création de la session détermine qui signe en premier."
-title = "Ordre des signatures"
-
 [settings]
 close = "Fermer"
 
+[settings.ai]
+documents = "Documents et RAG"
+general = "Général"
+limits = "Limites et performances"
+models = "Modèles et fournisseurs"
+title = "IA"
+
 [settings.configuration]
 advanced = "Avancé"
 database = "Base de données"
 endpoints = "Endpoints"
 features = "Fonctionnalités"
+folderAccess = "Accès aux dossiers"
 mcp = "MCP Server"
 storageSharing = "Stockage et partage de fichiers"
 systemSettings = "Paramètres système"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Éditeur PDF par défaut"
 defaultPdfEditorActive = "Stirling PDF est votre éditeur PDF par défaut"
 defaultPdfEditorChecking = "Vérification…"
 defaultPdfEditorInactive = "Une autre application est définie par défaut"
+defaultPdfEditorRemind = "Me rappeler de définir par défaut"
+defaultPdfEditorRemindDescription = "Afficher une bannière lorsque Stirling PDF n’est pas votre application PDF par défaut."
 defaultPdfEditorSet = "Déjà par défaut"
 defaultStartupView = "Vue par défaut au démarrage"
 defaultStartupViewDescription = "Choisissez quel onglet est actif dans la colonne de gauche au démarrage de l'application"
@@ -8817,9 +9771,18 @@ languageDescription = "Choisir la langue d’affichage"
 logout = "Se déconnecter"
 setAsDefault = "Définir par défaut"
 theme = "Thème"
+themeAccent = "Couleur d’accentuation"
+themeAccentCustom = "Couleur personnalisée"
+themeAccentCustomHint = "Personnalisée (valeurs par défaut recommandées)"
+themeAccentDark = "Couleur d’accentuation du mode sombre"
+themeAccentDefault = "Par défaut"
+themeAccentDefaultHint = "Thème par défaut (recommandé)"
+themeAccentDescription = "Les boutons, liens et surlignages l’utilisent, et elle teinte subtilement l’application. Les modes clair et sombre ont chacun la leur. Le système utilise celle qui est active."
+themeAccentLight = "Couleur d’accentuation du mode clair"
 themeDark = "Sombre"
 themeDescription = "Basculer entre le mode clair et le mode sombre"
 themeLight = "Clair"
+themeReset = "Restaurer le thème par défaut"
 themeSystem = "System"
 title = "Général"
 user = "Utilisateur"
@@ -8833,6 +9796,12 @@ intro = "Activer l’authentification des utilisateurs, la gestion des équipes
 learnMore = "En savoir plus dans la documentation"
 title = "Pour les administrateurs système"
 
+[settings.general.loginLanding]
+description = "Choisissez quelle application s’ouvre lorsque vous vous connectez à Stirling Cloud."
+editor = "Éditeur"
+processor = "Processeur"
+title = "Après la connexion"
+
 [settings.general.mode]
 fullscreen = "Plein écran"
 sidebar = "Barre latérale"
@@ -9041,6 +10010,11 @@ security = "Sécurité"
 telegram = "Telegram"
 title = "Sécurité et authentification"
 
+[settings.signOut]
+confirm = "Voulez-vous vraiment vous déconnecter ?"
+submit = "Se déconnecter"
+title = "Déconnexion"
+
 [settings.team]
 title = "Équipe"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Téléverser sur le serveur"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "cliquez ici"
+fallback = "Si cela ne s’est pas ouvert automatiquement,"
+opening = "Ouverture de Swagger UI dans un nouvel onglet..."
 tags = "api,documentation,swagger,points de terminaison,développement"
 title = "Documentation de l’API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Sélectionnez des fichiers dans Fichiers actifs pour exécute
 singleFileScope = "Application uniquement à : {{fileName}}"
 viewerMode = "Passez à l'éditeur de fichiers pour sélectionner plusieurs fichiers."
 
+[toolFormat]
+ANY = "n’importe quel fichier"
+CBR = "une archive de bande dessinée (CBR)"
+CBZ = "une archive de bande dessinée (CBZ)"
+CSV = "un fichier CSV"
+EBOOK = "un livre numérique"
+EMAIL = "un e-mail"
+EXCEL = "une feuille de calcul"
+HTML = "une page web"
+IMAGE = "des images"
+JAVASCRIPT = "un fichier JavaScript"
+JSON = "un fichier JSON"
+MARKDOWN = "un fichier Markdown"
+NONE = "aucun fichier"
+PCL = "un fichier d’impression PCL"
+PDF = "un PDF"
+PDF_ENCRYPTED = "un PDF protégé par mot de passe"
+POSTSCRIPT = "un fichier PostScript"
+PPT = "une présentation"
+TEXT = "un fichier texte"
+VIDEO = "une vidéo"
+WORD = "un document Word"
+XML = "un fichier XML"
+XPS = "un document XPS"
+ZIP = "une archive ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Retour à tous les outils"
 collapse = "Réduire le panneau"
 expand = "Développer le panneau"
 goBack = "Revenir en arrière"
+pdfTools = "Outils PDF"
 placeholder = "Choisissez un outil pour commencer"
 premiumFeature = "Fonctionnalité Premium :"
+searchTools = "Rechercher des outils"
 toolsHeader = "Outils"
 viewAllTools = "Voir tous les outils"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Aucun outil trouvé"
 quickAccess = "ACCÈS RAPIDE"
 searchPlaceholder = "Rechercher des outils…"
 
-[toolPicker.categories]
-advancedTools = "Outils avancés"
-recommendedTools = "Outils recommandés"
-standardTools = "Outils standards"
-
 [toolPicker.subcategories]
 advancedFormatting = "Mise en forme avancée"
 automation = "Automatisation"
@@ -9950,16 +10950,31 @@ title = "Utilisateurs"
 you = "(vous)"
 
 [users.action]
+cancelInvite = "Annuler l’invitation"
 deleteTeam = "Supprimer l’équipe"
 disableMfa = "Réinitialiser MFA"
 move = "Déplacer vers une équipe"
 reinstate = "Réintégrer"
 remove = "Supprimer de l’organisation"
+removeTeam = "Retirer de l’équipe"
 rename = "Renommer l’équipe"
 resetPw = "Réinitialiser le mot de passe"
 suspend = "Suspendre"
 unlock = "Déverrouiller le compte"
 
+[users.activity]
+daysAgo = "il y a {{count}} j"
+hoursAgo = "il y a {{count}} h"
+justNow = "À l’instant"
+minutesAgo = "il y a {{count}} min"
+monthsAgo_one = "il y a {{count}} mois"
+monthsAgo_other = "il y a {{count}} mois"
+never = "Jamais"
+weeksAgo_one = "il y a {{count}} semaine"
+weeksAgo_other = "il y a {{count}} semaines"
+yearsAgo_one = "il y a {{count}} an"
+yearsAgo_other = "il y a {{count}} ans"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Approuve la politique"
@@ -9967,11 +10982,14 @@ editor = "Éditeur"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Annuler l’invitation envoyée à {{email}} ? Cette personne ne pourra pas rejoindre avec le lien actuel."
+cancelInviteTitle = "Annuler l’invitation"
 deleteTeamBody = "Supprimer l’équipe {{name}} ? L’équipe doit d’abord être vide : déplacez ses membres vers une autre équipe, et elle ne doit plus posséder aucune configuration d’intégration."
 deleteTeamTitle = "Supprimer l’équipe"
 disableMfaBody = "Supprimer l’inscription MFA de {{name}} ? Elle sera configurée à nouveau lors de la prochaine connexion si nécessaire."
 disableMfaTitle = "Réinitialiser MFA"
 removeBody = "Supprimer définitivement {{name}} de l’organisation ? Cette action est irréversible."
+removeTeamBody = "Retirer {{name}} de l’équipe ? Cette personne conserve son compte, mais perd l’accès aux ressources de cette équipe."
 removeTitle = "Supprimer le membre"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nom d’utilisateur"
 usernameError = "Le nom d’utilisateur doit comporter au moins 3 caractères"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Invité par {{who}}"
+cancel = "Annuler"
+count = "{{count}} en attente"
+desc = "Personnes invitées qui n’ont pas encore rejoint. Elles occupent une place jusqu’à leur acceptation."
+expiresInDays_one = "Expire dans {{count}} jour"
+expiresInDays_other = "Expire dans {{count}} jours"
+expiresToday = "Expire aujourd’hui"
+title = "Invitations en attente"
+
 [users.loadError]
 description = "Une erreur s’est produite lors de l’accès au backend, ou vous n’avez pas accès. Réessayez."
 title = "Impossible de charger les membres"
@@ -10212,9 +11240,11 @@ title = "Pièces jointes"
 
 [viewer.bookmarks]
 bookmarkTitle = "Titre du signet"
+bookmarkTitleRequired = "Le titre du signet est requis"
 closeSidebar = "Fermer le panneau latéral des signets"
 collapseAll = "Réduire tous les signets"
 expandAll = "Développer tous les signets"
+searchPlaceholder = "Rechercher des signets"
 
 [viewer.comments]
 addComment = "Ajouter un commentaire"
@@ -10605,30 +11635,6 @@ title = "Texte du filigrane"
 image = "Image"
 text = "Texte"
 
-[wetSignature.tooltip]
-header = "Méthodes de création de signature"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Personnaliser la couleur et l’épaisseur du trait"
-bullet2 = "Effacer et redessiner jusqu’à ce que vous soyez satisfait"
-bullet3 = "Fonctionne sur les appareils tactiles (tablettes, téléphones)"
-description = "Créez une signature manuscrite à l’aide de votre souris ou de votre écran tactile. Idéal pour des signatures personnelles et authentiques."
-title = "Dessiner la signature"
-
-[wetSignature.tooltip.type]
-bullet1 = "Choisir parmi plusieurs polices"
-bullet2 = "Personnaliser la taille et la couleur du texte"
-bullet3 = "Parfait pour des signatures standardisées"
-description = "Générez une signature à partir d’un texte saisi. Rapide et cohérent, adapté aux documents professionnels."
-title = "Saisir la signature"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Prend en charge PNG, JPG et autres formats d’image"
-bullet2 = "Arrière-plans transparents recommandés pour de meilleurs résultats"
-bullet3 = "L’image sera redimensionnée pour s’adapter à la zone de signature"
-description = "Téléversez une image de signature préalablement créée. Idéal si vous avez une signature numérisée ou un logo d’entreprise."
-title = "Téléverser une image de signature"
-
 [workbenchBar]
 activeFiles = "Fichiers actifs"
 annotations = "Annotations"
@@ -10652,6 +11658,7 @@ redact = "Caviarder"
 rotateLeft = "Pivoter à gauche"
 rotateRight = "Pivoter à droite"
 ruler = "Règle / Mesure"
+rulerSettings = "Paramètres d’échelle"
 save = "Enregistrer"
 saveAll = "Tout enregistrer"
 saveAs = "Enregistrer sous"
diff --git a/frontend/editor/public/locales/ga-IE/translation.toml b/frontend/editor/public/locales/ga-IE/translation.toml
index 24d4de5d37..7cbc37dbfb 100644
--- a/frontend/editor/public/locales/ga-IE/translation.toml
+++ b/frontend/editor/public/locales/ga-IE/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "comhaid roghnaithe"
 font = "Cló"
 fontSizeTooltip = "Méid téacs na huimhreach leathanaigh i bpointí. Cruthaíonn méideanna níos mó téacs níos mó."
 fontTypeTooltip = "Clannchló don uimhriú leathanaigh. Roghnaigh bunaithe ar stíl do cháipéis."
-genericSubmit = "Cuir isteach"
 green = "Glas"
 help = "Cabhrú"
-imgPrompt = "Roghnaigh Íomhá(í)"
 incorrectPasswordMessage = "Tá an pasfhocal reatha mícheart."
 info = "Eolas"
 invalidUndoData = "Ní féidir a chealú: sonraí oibríochta neamhbhailí"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Comhaontú Logála Isteach"
 logOut = "Logáil amach"
 marginTooltip = "Fad idir an uimhir leathanaigh agus imeall na leathanaigh."
 moreOptions = "Tuilleadh Roghanna"
-multiPdfPrompt = "Roghnaigh PDFs (2+)"
 never = "Riamh"
 no = "Níl"
 noFileSelected = "Níl aon chomhad roghnaithe. Uaslódáil ceann, le do thoil."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordú Leathanach Saincheaptha (Iontráil liosta uimhreacha le
 pages = "Leathanaigh"
 pageSelectionPrompt = "Roghnú Leathanach Saincheaptha (Iontráil liosta leathanach scartha le camóg d'uimhreacha 1,5,6 nó Feidhmeanna ar nós 2n+1):"
 password = "Pasfhocal"
-pdfPrompt = "Roghnaigh PDF(anna)"
 pin = "Pionnáil Comhad (coinnigh gníomhach tar éis rith na huirlise)"
 pro = "Pro"
 processingComplete = "Tá do chomhad réidh."
@@ -356,6 +352,7 @@ text = "Rialaíonn na ceadanna seo cad is féidir le húsáideoirí a dhéanamh
 title = "Athrú Ceadanna"
 
 [addStamp]
+preview = "Réamhamharc ar Stampa"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Íoslódálacha láimhe: cliceáil ar na naisc agus cuir na comha
 noLanguages = "Níor aimsíodh teangacha tessdata sa chomhadlann chumraithe."
 permissionNotice = "Níl cosán an tessdata inscríofa. Osclófar íoslódálacha sa bhrabhsálaí; sábháil na comhaid .traineddata de láimh sa chomhadlann tessdata le do thoil."
 
+[admin.settings.ai.documents]
+description = "Cumraigh an tsamhail leabaithe agus na socruithe aisghabhála a úsáidtear chun ceisteanna faoi dhoiciméid a fhreagairt. Cuirtear i bhfeidhm ar an inneall AI nuair a shábháiltear iad."
+title = "Doiciméid & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Fág bán é chun dintiúr timpeallachta an innill féin a úsáid. Baineann sé le himscaradh féin-óstáilte aon-innill."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Sábháilte - fág bán é chun an eochair reatha a choinneáil"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL an chríochphointe leabaithe OpenAI-comhoiriúnach / Ollama, m.sh. http://ollama:11434/v1. Caithfidh sé pointeáil chuig críochphointe inmheánach iontaofa (íogair do SSRF)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Ainm na samhla leabaithe. Téacs saor; leideanna amháin atá sna moltaí."
+label = "Samhail leabaithe"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Soláthraí a úsáidtear chun téacs doiciméid a thiontú ina leabuithe veicteora."
+label = "Soláthraí leabaithe"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Uaslíon cuardaigh aisghabhála is féidir leis an ngníomhaire a rith in aghaidh an iarratais."
+label = "Uasmhéid cuardach"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Tagann athrú ar an tsamhail leabaithe i bhfeidhm láithreach, ach caithfear doiciméid a innéacsaíodh leis an tsamhail roimhe seo a ath-innéacsú chun torthaí cearta a fháil sa chuardach."
+title = "Ath-innéacsú riachtanach"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Má d'athraigh tú an tsamhail leabaithe, ath-innéacsaigh na doiciméid atá ann cheana ionas go n-úsáidfidh an cuardach an tsamhail nua."
+
+[admin.settings.ai.documents.topK]
+description = "Líon na míreanna is ábhartha a aisghabhtar in aghaidh an chuardaigh."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Ceangail Stirling leis an inneall Python AI agus roghnaigh cé na cumais AI atá le nochtadh. Cuirtear athruithe i bhfeidhm ar atosú."
+title = "Inneall AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Cas gnéithe AI aonair air nó as. Bíonn gnéithe díchumasaithe i bhfolach san aip."
+title = "Cumais"
+
+[admin.settings.ai.general.enabled]
+description = "Príomhlasc. Nuair atá sé as, níl aon uirlisí AI, gníomhairí ná glaonna innill ar fáil."
+label = "Cumasaigh AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Cúntóir comhrá chun obair le PDFs."
+label = "Cúntóir comhrá"
+
+[admin.settings.ai.general.features.classify]
+description = "Catagóirigh doiciméid go huathoibríoch de réir cineáil nó ábhair."
+label = "Aicmiú doiciméad"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Gin PDF nua (m.sh. ó HTML) trí ghníomhaire AI."
+label = "Cruthaigh PDF ó leid"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Cuir ceisteanna agus faigh freagraí bunaithe ar dhoiciméad uaslódáilte."
+label = "Ceisteanna doiciméid"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Athbhreithnigh doiciméid le haghaidh earráidí matamaiticiúla agus uimhriúla."
+label = "Iniúchóir matamaitice"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Cuir nótaí athbhreithnithe agus anótálacha scríofa ag AI le PDF."
+label = "Gníomhaire tráchta PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Teorainn ama d'oibríochtaí gníomhaire níos troime amhail giniúint doiciméad."
+label = "Teorainn ama fhada (soicindí)"
+
+[admin.settings.ai.general.note]
+body = "Ritheann an t-inneall AI mar sheirbhís ar leith. A rún comhroinnte"
+body2 = "socraítear é trí athróg timpeallachta coimeádáin. Is féidir API keys soláthraithe a iontráil ar na leathanaigh seo nó a sholáthar mar athróga timpeallachta innill; brúitear eochracha a iontráiltear anseo chuig an inneall nuair a shábháiltear iad."
+title = "Maidir leis an inneall AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Teorainn ama do fhreagraí comhrá sruthaithe (token ar token)."
+label = "Teorainn ama srutha (soicindí)"
+
+[admin.settings.ai.general.test]
+button = "Tástáil ceangal"
+failBody = "Níor fhreagair an t-inneall AI. Seiceáil an URL, go bhfuil coimeádán an innill ag rith, agus go bhfuil AI cumasaithe (tá atosú ag teastáil tar éis cumasaithe)."
+failTitle = "Ní féidir an t-inneall AI a bhaint amach"
+okBody = "D'fhreagair an t-inneall AI do sheiceáil sláinte."
+okTitle = "Is féidir an t-inneall AI a bhaint amach"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Teorainn ama d'iarratais chaighdeánacha AI chuig an inneall."
+label = "Teorainn ama iarratais (soicindí)"
+
+[admin.settings.ai.general.url]
+description = "URL inmheánach an innill Python AI, m.sh. http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "Cosaintí maidir leis an méid oibre is féidir le hiarratais AI a dhéanamh agus cé mhéad atá ag rith ag an am céanna. Cuirtear i bhfeidhm ar an inneall AI nuair a shábháiltear iad."
+title = "Teorainneacha & Feidhmíocht"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Cosaint: diúltaigh d'iarratais AI a bhfuil a dtéacs eastósctha níos faide ná seo."
+label = "Uasmhéid carachtar in aghaidh an iarratais"
+
+[admin.settings.ai.limits.maxPages]
+description = "Cosaint: diúltaigh d'iarratais AI os cionn an líon seo de leathanaigh PDF."
+label = "Uasmhéid leathanach in aghaidh an iarratais"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Uasmhéid glaonna samhla comhuaineacha ar siúl ar fud an innill ar fad."
+label = "Uasmhéid comhthráthachta samhla"
+
+[admin.settings.ai.models]
+description = "Roghnaigh an soláthraí LLM agus na samhlacha cliste/tapa a úsáideann an t-inneall AI. Cuirtear i bhfeidhm ar an inneall AI nuair a shábháiltear iad."
+title = "Samhlacha & Soláthraithe"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Fág bán é chun dintiúr timpeallachta an innill féin a úsáid. Baineann sé le himscaradh féin-óstáilte aon-innill."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Sábháilte - fág bán é chun an eochair reatha a choinneáil"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL an chríochphointe OpenAI-comhoiriúnach / Ollama, m.sh. http://ollama:11434/v1."
+label = "Provider base URL"
+warning = "Caithfidh an base URL pointeáil chuig críochphointe inmheánach iontaofa. Déanfaidh an t-inneall iarratais taobh an fhreastalaí chuige, mar sin tá luach neamhiontaofa íogair do SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Uasmhéid token aschuir don tsamhail thapa."
+label = "Uasmhéid token don tsamhail thapa"
+
+[admin.settings.ai.models.fastModel]
+description = "Samhail níos saoire agus níos tapúla do thascanna éadroma. Téacs saor; leideanna amháin atá sna moltaí."
+label = "Samhail thapa"
+
+[admin.settings.ai.models.provider]
+description = "Cén soláthraí LLM a labhraíonn an t-inneall leis."
+label = "Soláthraí"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Uasmhéid token aschuir don tsamhail chliste."
+label = "Uasmhéid token don tsamhail chliste"
+
+[admin.settings.ai.models.smartModel]
+description = "Samhail ardchumais le haghaidh réasúnaíocht chasta. Téacs saor; leideanna amháin atá sna moltaí."
+label = "Samhail chliste"
+
+[admin.settings.ai.saved]
+body = "Brúitear athruithe chuig an inneall AI go huathoibríoch."
+bodyNoPush = "Sábháladh na socruithe. Cuirfear i bhfeidhm iad an chéad uair eile a phiocfaidh an t-inneall AI suas a chumraíocht."
+title = "Sábháladh socruithe AI"
+
 [admin.settings.badge]
 clickToUpgrade = "Cliceáil chun sonraí an phlean a fheiceáil"
 
@@ -938,6 +1094,25 @@ label = "Athghin ar Thosach"
 description = "Líon na laethanta a bheidh an deimhniú bailí"
 label = "Bailíocht an Deimhnithe (laethanta)"
 
+[admin.settings.folderAccess]
+description = "Comhadlanna a bhfuil cead ag foinsí fillteáin agus aschuir fillteáin léamh uathu agus scríobh chucu. Is teorainn slándála í seo: ní féidir uathoibrithe a dhíriú riamh ar chonair freastalaí lasmuigh den liosta seo."
+securityNote = "Fág folamh é seo chun foinsí agus aschuir fillteáin a dhíchumasú go hiomlán. Bíonn comhadlann chumraíochta Stirling féin i gcónaí as teorainn."
+title = "Rochtain Fillteáin"
+
+[admin.settings.folderAccess.implied]
+description = "Ceadaítear na comhadlanna seo atá á mbainistiú ag Stirling i gcónaí agus ní féidir iad a athrú anseo."
+serverStorage = "Stóráil comhad freastalaí"
+title = "Ceadaithe i gcónaí"
+watchedFolder = "Fillteán faire Pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Cuir leis"
+empty = "Níl aon fhillteáin ceadaithe. Tá foinsí agus aschuir fillteáin díchumasaithe faoi láthair."
+hint = "Iontráil conairí iomlána, mar shampla /data/inbox."
+label = "Fréamhacha fillteáin ceadaithe"
+placeholder = "/data/inbox"
+remove = "Bain fréamh fillteáin"
+
 [admin.settings.general]
 description = "Cumraigh socruithe feidhmchláir ar leibhéal an chórais lena n‑áirítear brandaíocht agus iompar réamhshocraithe."
 system = "Córas"
@@ -1842,6 +2017,15 @@ export = "Easpórtáil"
 accessDenied = "Rochtain diúltaithe"
 insufficientPermissions = "Níl cead agat an gníomh seo a dhéanamh."
 
+[auth.callback]
+completing = "Fíordheimhniú á chríochnú"
+invalidToken = "Theip ar logáil isteach OAuth - token neamhbhailí."
+missingToken = "Theip ar logáil isteach OAuth - ní bhfuarthas token."
+oauthFailed = "Theip ar logáil isteach OAuth. Bain triail eile as."
+pleaseWait = "Fan le do thoil agus muid ag críochnú do shínithe isteach."
+signedOut = "Síníodh amach thú. Sínigh isteach arís le do thoil."
+windowMayClose = "Is féidir leat an fhuinneog seo a dhúnadh nuair a bheidh sé críochnaithe."
+
 [auth.displayName]
 guest = "Aoi"
 user = "Úsáideoir"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Slánaíonn sé doiciméid PDF trí ábhar dainséarach f
 description = "Athainmneoidh an uirlis seo comhaid PDF go huathoibríoch bunaithe ar a n-ábhar. Déanann sí an doiciméad a anailísiú chun an teideal is oiriúnaí ón téacs a aimsiú."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Rothlaigh go hUathoibríoch"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Tairseach muiníne"
+
+[autoRotate.detectionMode]
+auto = "Uathoibríoch"
+osd = "OCR amháin"
+text = "Téacs amháin"
+title = "Modh braite"
+
+[autoRotate.error]
+failed = "Tharla earráid agus an PDF á rothlú go huathoibríoch."
+
+[autoRotate.inferUndetected]
+title = "Rothlaigh leathanaigh le muinín íseal chun iad a mheaitseáil"
+
+[autoRotate.report]
+applied = "{{degrees}}° deiseal"
+confidenceValue = "Muinín {{value}}"
+noChange = "Gan athrú"
+pageLabel = "Leathanach {{number}}"
+summary = "Rothlaíodh {{rotated}} as {{total}} leathanach, fágadh {{unchanged}} mar atá siad"
+title = "Tuairisc braite"
+
+[autoRotate.report.method]
+inferred = "Meaitseáilte"
+none = "Scipeáilte"
+osd = "OCR"
+text = "Téacs"
+
+[autoRotate.report.note]
+belowThreshold = "Faoi bhun na tairsí"
+blankPage = "Tá an leathanach bán"
+inferredFromDocument = "Mar an gcéanna leis na leathanaigh eile"
+noDominantDirection = "Treonna téacs measctha"
+osdFailed = "Níor aimsíodh téacs inléite"
+osdNoVerdict = "Níorbh fhéidir a rá cén taobh atá suas"
+tesseractUnavailable = "Níl OCR suiteáilte"
+tooFewGlyphs = "Ró-bheagán téacs"
+
+[autoRotate.results]
+title = "Torthaí Rothlaithe Uathoibríoch"
+
+[autoRotate.settings]
+title = "Socruithe"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Cé chomh cinnte is gá don tseiceáil a bheith sula rothlaítear leathanach. Ísligh é chun níos mó leathanach a rothlú, ardaigh é chun níos mó leathanach a fhágáil gan teagmháil."
+title = "Tairseach muiníne"
+
+[autoRotate.tooltip.description]
+text = "Oibríonn sé amach cén taobh suas ba chóir a bheith ar gach leathanach agus rothlaíonn sé sa treo ceart é. Fágtar leathanaigh atá díreach cheana féin mar atá siad."
+
+[autoRotate.tooltip.detectionMode]
+text = "Léann Uathoibríoch an téacs ar an leathanach ar dtús, ansin breathnaíonn sé ar an leathanach mar íomhá mura leor é sin. Scipeálann Téacs amháin an tseiceáil íomhá, arb é sin an ceann is tapúla do dhoiciméid nár scanadh riamh. Déileálann OCR amháin le gach leathanach mar íomhá."
+title = "Modh braite"
+
+[autoRotate.tooltip.header]
+title = "Rothlaigh go hUathoibríoch"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Ní féidir leathanaigh bhána nó beagnach bán a sheiceáil leo féin. Nuair a theastaíonn an rothlú céanna ó gach leathanach a d'fhéadfaí a léamh, rothlaítear na leathanaigh seo chun iad a mheaitseáil."
+title = "Rothlaigh leathanaigh le muinín íseal chun iad a mheaitseáil"
+
 [autoSizeSplitPDF]
 tags = "pdf, scoilt, doiciméad, eagraíocht"
 
@@ -2189,33 +2440,6 @@ keywords = "Eochairfhocail: odd, even"
 numbers = "Uimhreacha/raonta: 5, 10-20"
 progressions = "Forásanna: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Cineálacha Teastais"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Á bhainistiú ag riarthóirí an chórais"
-bullet2 = "Roinnte i measc úsáideoirí údaraithe"
-bullet3 = "Léiríonn sé aitheantas na cuideachta, ní duine aonair"
-bullet4 = "Is fearr do: Doiciméid oifigiúla, sínithe foirne"
-description = "Teastas roinnte a sholáthraíonn d’eagraíocht. Úsáidtear le haghaidh údarás sínithe ar fud na cuideachta."
-title = "Teastas Eagraíochta"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Ginte go huathoibríoch ag an gcéad úsáid"
-bullet2 = "Ceangailte le do chuntas úsáideora"
-bullet3 = "Ní féidir a roinnt le húsáideoirí eile"
-bullet4 = "Is fearr do: Doiciméid phearsanta, cuntasacht aonair"
-description = "Teastas uathghinte uathúil do do chuntas úsáideora. Oiriúnach do shínithe aonair."
-title = "Teastas Pearsanta"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Éilíonn comhad P12/PFX agus focal faire"
-bullet2 = "Is féidir le hÚdaráis Teastais sheachtracha é a eisiúint"
-bullet3 = "Leibhéal mhuiníne níos airde do dhoiciméid dhlíthiúla"
-bullet4 = "Is fearr do: Conarthaí dlíthiúla ceangailteacha, bailíochtú seachtrach"
-description = "Úsáid do chomhad teastais PKCS#12 féin. Soláthraíonn sé smacht iomlán ar airíonna an teastais."
-title = "Uasluchtaigh P12 Saincheaptha"
-
 [certSign]
 awaitingSignatures = "Ag feitheamh le sínithe"
 chooseCertificate = "Roghnaigh Comhad Teastais"
@@ -2542,34 +2766,6 @@ server = "Freastalaí"
 stepTitle = "Foinse an teastais"
 upload = "Uaslódáil"
 
-[certSign.tooltip.header]
-title = "Maidir le Bainistiú Sínithe"
-
-[certSign.tooltip.overview]
-bullet1 = "Seiceáil sínithe atá ann cheana agus a bhailíocht"
-bullet2 = "Féach faisnéis mhionsonraithe faoi shínitheoirí agus theastais"
-bullet3 = "Cuir sínithe digiteacha nua leis chun do dhoiciméid a dhaingniú"
-bullet4 = "Tacaítear le comhaid iolracha le nascleanúint éasca"
-text = "Ligeann an uirlis seo duit a sheiceáil an bhfuil do PDFanna sínithe go digiteach agus sínithe digiteacha nua a chur leis. Dearbhaíonn sínithe digiteacha cé a chruthaigh nó a cheadaigh doiciméad agus taispeánann siad an ndearnadh athrú air ó shíníodh é."
-title = "Cad is féidir leis an uirlis seo a dhéanamh?"
-
-[certSign.tooltip.signing]
-bullet1 = "Tacaíonn sé le formáidí PEM, PKCS12, JKS agus teastas an fhreastalaí"
-bullet2 = "Rogha an síniú a thaispeáint nó a cheilt ar an PDF"
-bullet3 = "Cuir cúis, suíomh, agus ainm an tsíní leis"
-bullet4 = "Roghnaigh cén leathanach a gcuirfear sínithe infheicthe air"
-bullet5 = "Úsáid teastas an fhreastalaí don rogha shimplí 'Sign with Stirling-PDF'"
-text = "Chun PDF a shíniú, teastaíonn teastas digiteach uait (mar PEM, PKCS12, nó JKS). Is féidir leat an síniú a dhéanamh infheicthe ar an doiciméad nó é a choinneáil dofheicthe ar mhaithe le slándáil amháin."
-title = "Sínithe a Chur Leis"
-
-[certSign.tooltip.validation]
-bullet1 = "Taispeánann sé an bhfuil sínithe bailí nó neamhbhailí"
-bullet2 = "Taispeánann sé faisnéis faoin síní agus an dáta sínithe"
-bullet3 = "Seiceálann sé an ndearnadh modhnú ar an doiciméad i ndiaidh a shínithe"
-bullet4 = "Is féidir teastais shaincheaptha a úsáid le haghaidh fíoraithe"
-text = "Nuair a sheiceálann tú sínithe, deir an uirlis leat an bhfuil siad bailí, cé a shínigh an doiciméad, cathain a síníodh é, agus an ndearnadh aon athrú ar an doiciméad ó síníodh é."
-title = "Sínithe á Seiceáil"
-
 [changeCreds]
 changeUsername = "Nuashonraigh d'ainm úsáideora. Logálfar amach thú tar éis an nuashonraithe."
 credsUpdated = "Cuntas nuashonraithe"
@@ -2824,6 +3020,7 @@ next = "Ar Aghaidh"
 preview = "Réamhamharc"
 previous = "Roimhe Seo"
 refresh = "Athnuaigh"
+remaining = "Fágtha"
 retry = "Bain triail eile as"
 save = "Sábháil"
 
@@ -3264,24 +3461,6 @@ description = "Tá na fianáin seo riachtanach chun go bhfeidhmeoidh an suíomh
 posthog = "Anailísíocht PostHog"
 scarf = "Scairf Picteilín"
 
-[credits.modal]
-advancedMonitoring = "Monatóireacht ardleibhéil"
-allInOneWorkspace = "Spás oibre uile-i-aon PDF (amharcán, uirlisí & gníomhaire)"
-apiSandbox = "Bosca gainimh API"
-dedicatedSupportSlas = "Tacaíocht thiomnaithe & SLAanna"
-fasterThroughput = "Ráta próiseála 10x níos tapúla"
-fullyPrivateFiles = "Comhaid go hiomlán príobháideacha"
-largeFileProcessing = "Próiseáil comhad mór"
-orgWideAccess = "Rialuithe rochtana ar fud na heagraíochta"
-premiumAiModels = "Samhlacha AI préimhe"
-prioritySupport = "Tacaíocht tosaíochta"
-privateDocCloud = "Scamall Doiciméad Príobháideach"
-ragFineTuning = "RAG + mionchoigeartú"
-secureApiAccess = "Rochtain API shlán"
-standardThroughput = "Ráta próiseála caighdeánach"
-unlimitedApiAccess = "Rochtain API neamhtheoranta"
-unlimitedSeats = "Suíocháin neamhtheoranta"
-
 [crop]
 autoCrop = "Spás bán a bhearradh go huathoibríoch"
 noFileSelected = "Roghnaigh comhad PDF chun tosú ar bhearradh"
@@ -3346,6 +3525,7 @@ message = "Theip ar shocrú láimhseálaí PDF réamhshocraithe"
 title = "Earráid"
 
 [defaultApp.prompt]
+dontRemind = "Ná cuir i gcuimhne dom arís"
 message = "Déan Stirling PDF mar d’fheidhmchlár réamhshocraithe chun comhaid PDF a oscailt."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Saincheap grúpaí"
 dropHint = "Oscail comhaid chun tosú"
 dropToAdd = "Drop files to add"
 expand = "Leathnaigh an barra taoibh"
-files = "Comhaid"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Níl Google Drive cumraithe"
 leaveMyFiles = "Fág Mo Chomhaid"
+library = "Leabharlann PDF"
 myFiles = "Mo Chomhaid"
 noFiles = "Níl aon chomhaid go fóill"
 openFileManager = "Oscail bainisteoir comhad"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Cuir leis"
-addLabel = "Cuir lipéad leis…"
-categoryIconAria = "Roghnaigh deilbhín do {{name}}"
-createCategory = "Cruthaigh catagóir"
-delete = "Scrios catagóir"
 done = "Déanta"
-hide = "Folaigh catagóir"
-newCategory = "Ainm catagóire nua…"
-removeLabel = "Bain {{name}}"
-rename = "Athainmnigh"
 reset = "Athshocraigh go réamhshocruithe"
-search = "Cuardaigh lipéid…"
-show = "Taispeáin catagóir"
 subtitle = "Cuir do chuid comhad i ngrúpaí mar mháthairchatagóirí. Cuir lipéid atá ann cheana nó lipéid nua le catagóir, athainmnigh í, nó cruthaigh do cheann féin. Taispeántar comhaid nach bhfuil in aon cheann de do chatagóirí faoi “Eile”."
 title = "Catagóirí an bharra taoibh"
 
@@ -3808,6 +3977,7 @@ refresh = "Athnuaigh ón bhfreastalaí"
 remove = "Scrios"
 removeVersion = "Bain an leagan seo"
 rename = "Athainmnigh"
+renamed = "Athainmnithe"
 renameFolder = "Athainmnigh an fillteán"
 resizeFolderTree = "Athraigh méid chrann na bhfillteán (eochracha saigheada, Shift le haghaidh céimeanna níos mó; déchliceáil le huath-oiriúnú)"
 save = "Sábháil"
@@ -3910,9 +4080,7 @@ count = "Comhaid"
 folder = "Fillteán"
 labels = "Lipéid"
 modified = "Athraithe"
-name = "Ainm"
 size = "Méid"
-toolHistoryAtVersion = "Slabhra uirlisí carntha"
 totalSize = "Méid iomlán"
 type = "Cineál"
 versionHistory = "Turas an leagain"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Sábháilte go léir"
+extractCsvError = "Theip ar eastóscadh CSV"
+extractXlsxError = "Theip ar eastóscadh XLSX"
 flattenAfterFilling = "Cothromaigh tar éis líonadh"
+requiredAbbreviation = "riach"
+requiredFieldsError = "Líon isteach gach réimse riachtanach le do thoil"
 rescanFields = "Athscan na réimsí"
 rescanFormFields = "Athscan réimsí an fhoirme"
 save = "Sábháil"
+saveShortcut = "Ctrl+S chun sábháil"
+unsavedChanges = "Athruithe gan sábháil"
 
 [formFill.sidebar]
 close = "Dún an barra taoibh"
@@ -4309,6 +4484,11 @@ desc = "Athainmníonn comhad PDF go huathoibríoch bunaithe ar a cheannteideal b
 tags = "uathbhraite,bunaithe ar cheannteideal,eagraigh,athlipéadaigh"
 title = "Athainmnigh Comhad PDF go hUathoibríoch"
 
+[home.autoRotate]
+desc = "Braith treoshuíomh gach leathanaigh agus rothlaigh go díreach é go huathoibríoch."
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "Rothlaigh go hUathoibríoch"
+
 [home.autoSizeSplitPDF]
 tags = "uathoibríoch,roinn,méid"
 title = "Scoilt auto: méid/líon"
@@ -4608,13 +4788,13 @@ hint = "Uaslódáil PNG, JPG, SVG, nó comhad íomhá eile le cur ar an PDF. Tio
 label = "Uaslódáil Íomhá"
 placeholder = "Roghnaigh comhad íomhá"
 
-[imageToPdf]
-tags = "comhshó, img, jpg, pictiúr, grianghraf"
-
 [imageToPDF]
 header = "Íomhá go PDF"
 title = "Íomhá go PDF"
 
+[imageToPdf]
+tags = "comhshó, img, jpg, pictiúr, grianghraf"
+
 [infoBanner]
 dismiss = "Díchuir"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Tugadh cuireadh duit!"
 
 [landing]
 addFiles = "Cuir Comhaid Leis"
-heroSubtitle = "Scaoil isteach nó cuir PDF atá ann cheana leis chun tosú."
 mobileUpload = "Uaslódáil ó Shoghluaiste"
 openFromComputer = "Oscail ón ríomhaire"
 uploadFromComputer = "Uaslódáil ón ríomhaire"
-workbenchEmptyStateHero = "Scaoil PDF áit ar bith"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Logáil isteach"
 magicLinkSent = "Seoladh nasc draíochta chuig {{email}}! Seiceáil do ríomhphost agus cliceáil an nasc chun logáil isteach."
 mfaCode = "Cód Fíordheimhnithe"
 mfaRequired = "Cód dhá fhachtóir de dhíth"
+noAccount = "Nach bhfuil cuntas agat?"
 or = "Nó"
 password = "Focal faire"
 passwordChangedSuccess = "Athraíodh an focal faire go rathúil! Logáil isteach le do fhocal faire nua, le do thoil."
@@ -4715,26 +4894,10 @@ signInWith = "Logáil isteach le"
 title = "Sínigh isteach"
 unexpectedError = "Earráid gan choinne: {{message}}"
 updatePassword = "Nuashonraigh focal faire"
-useEmailInstead = "Logáil isteach le ríomhphost"
 useMagicLink = "Úsáid nasc draíochta ina ionad"
 username = "Ainm úsáideora"
 youAreLoggedIn = "Tá tú logáilte isteach!"
 
-[login.slides.edit]
-alt = "Cuir PDFanna in eagar"
-subtitle = "Le breis agus dosaen uirlis chun cabhrú leat PDFanna a dhubhú, a shíniú, a léamh agus a ionramháil, gheobhaidh tú go cinnte an rud atá uait."
-title = "Cuir PDFanna in eagar chun an t-eolas is mian leat a thaispeáint nó a dhaingniú"
-
-[login.slides.overview]
-alt = "Forbhreathnú Stirling PDF"
-subtitle = "Sraith néal-bhunaithe le príobháideachas ar dtús do PDFanna a ligeann duit tiontú, síniú, dubhú agus bainistiú a dhéanamh ar cháipéisí, móide 50+ uirlis chumhachtach eile."
-title = "Do shiopa aon-stad do gach riachtanas PDF."
-
-[login.slides.secure]
-alt = "Daingnigh PDFanna"
-subtitle = "Cuir focail fhaire leis, dubhaigh ábhar, agus bainistigh teastais go héasca."
-title = "Cosain eolas íogair i do PDFanna"
-
 [margin]
 large = "Mór"
 medium = "Meánach"
@@ -4976,6 +5139,7 @@ pinButton = "Is féidir leat an cnaipe <strong>Pionnáil</strong> a úsáid más
 results = "Tar éis don uirlis rith, taispeánfaidh an chéim <strong>Athbhreithnithe</strong> réamhamharc de na torthaí sa phainéal seo, agus ligfidh sé duit an oibríocht a chealú nó an comhad a íoslódáil."
 runButton = "Nuair a bheidh an uirlis cumraithe, ligfidh an cnaipe seo duit an uirlis a rith ar na PDFanna roghnaithe go léir."
 selectCropTool = "Roghnaímis an uirlis <strong>Bearradh</strong> chun a léiriú conas ceann de na huirlisí a úsáid."
+stepOf = "Céim {{current}} as {{total}}"
 toolInterface = "Seo comhéadan na huirlise <strong>Bearradh</strong>. Mar a fheiceann tú, níl mórán ann fós mar nár chuir muid aon chomhaid PDF leis le hoibriú leo go fóill."
 workbench = "Seo é an <strong>Binse Oibre</strong> - an príomhlimistéar ina bhfeiceann agus ina n-eagraíonn tú do PDFanna."
 wrapUp = "Tá gach rud réidh agat! D'fhoghlaim tú faoin bpríomhlimistéir den aip agus conas iad a úsáid. Cliceáil an cnaipe <strong>Cabhair</strong> aon uair is mian leat an turas seo a fheiceáil arís."
@@ -4988,6 +5152,26 @@ showMeAround = "Taispeáin timpeall dom"
 skipForNow = "Scipeáil faoi láthair"
 skipTheTour = "Scipeáil an turas"
 
+[onboarding.checklist]
+dismiss = "Ruaig"
+title = "Socraigh Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Rith Stirling go dúchasach ar do mheaisín"
+title = "Íoslódáil Stirling don Deasc"
+
+[onboarding.checklist.inviteTeam]
+description = "Comhoibrigh le do fhoireann"
+title = "Tabhair cuireadh do bhaill foirne"
+
+[onboarding.checklist.shareAnalytics]
+description = "Cuidigh le Stirling a fheabhsú"
+title = "Comhroinn sonraí úsáide anaithnide"
+
+[onboarding.checklist.takeTour]
+description = "Féach conas a oibríonn Stirling i dtreoir thapa"
+title = "Tóg an turas"
+
 [onboarding.desktopInstall]
 body = "Oibríonn Stirling is fearr mar aip deisce. Is féidir leat é a úsáid as líne, rochtain níos tapúla a fháil ar dhoiciméid, agus eagarthóireacht a dhéanamh go háitiúil ar do ríomhaire."
 selectOs = "Roghnaigh córas oibriúcháin"
@@ -4996,7 +5180,21 @@ titleWithOs = "Íoslódáil do {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Cód fíordheimhnithe"
+description = "Cosain do chuntas trí aip fíordheimhnitheora a nascadh. Scan an QR code nó iontráil an eochair socraithe, ansin dearbhaigh an cód 6 dhigit chun críochnú."
+enable = "Cumasaigh MFA"
+enableError = "Ní féidir fíordheimhniú dhá fhachtóir a chumasú. Seiceáil an cód agus bain triail eile as."
+enterCode = "Iontráil an cód 6 dhigit ó d'aip."
+enterCodeError = "Iontráil an cód fíordheimhnithe chun leanúint ar aghaidh."
+logout = "Logáil amach"
+openAuthenticator = "Oscail Google Authenticator, Authy, nó 1Password."
 qrCodeLoading = "Cód QR á ghiniúint…"
+regenerateQrCode = "Athghin QR code"
+scanQrCode = "Scan an QR code nó iontráil an eochair socraithe thíos."
+setupError = "Ní féidir socrú dhá fhachtóir a thosú. Bain triail eile as le do thoil."
+setupKey = "Eochair socraithe (iontráil láimhe)"
+stepByStep = "Céim ar chéim"
+success = "Cumasaíodh MFA. Is féidir leat leanúint ar aghaidh anois."
+title = "Socrú Fíordheimhnithe Ilfhachtóra"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Nuair a chumasaíonn tú mód logála isteach, is féidir leat úsáideoirí a bhainistiú, socruithe a chumrú, agus sláinte an fhreastalaí a mheas. Faigheann an chéad <strong>{{freeTierLimit}}</strong> duine ar do fhreastalaí Stirling saor in aisce."
@@ -5005,6 +5203,11 @@ adminTitle = "Forbhreathnú Riarthóra"
 userBody = "Tabhair cuireadh do chomhoibrithe, sann róil, agus coinnigh do dhoiciméid eagraithe in aon spás oibre slán amháin. Cumasaigh mód logála isteach aon uair is mian leat dul thar úsáid aonair."
 userTitle = "Forbhreathnú Plean"
 
+[onboarding.processorIntro]
+body = "Ritheann Stirling <strong>Polasaithe</strong> anois — rialacha uathoibrithe a aicmíonn, a dhaingníonn agus a phróiseálann gach doiciméad de réir mar a thagann sé isteach. Socraigh iad agus déan monatóireacht ar rith sa <strong>Processor</strong>."
+cta = "Féach ar an Processor"
+title = "Féach ar an Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Bliain réamhíoctha"
+
+[payg.prepaid.banner]
+exhausted = "Tá do chumas réamhíoctha ídithe; tá billeáil mhéadraithe atosaithe. Breisigh chun an lascaine a choinneáil."
+expiring_one = "Críochnaíonn do bhliain réamhíoctha i gceann {{count}} lá. Rachaidh cumas neamhúsáidte in éag — breisigh chun bliain úr a thosú."
+expiring_other = "Críochnaíonn do bhliain réamhíoctha i gceann {{count}} lá. Rachaidh cumas neamhúsáidte in éag — breisigh chun bliain úr a thosú."
+low = "Tá tú síos go {{pct}}% de do chumas réamhíoctha. Breisigh am ar bith chun próiseáil gan bhriseadh a choinneáil."
+
+[payg.prepaid.card]
+subtitle = "Úsáidtear roimh bhilleáil mhéadraithe agus lasmuigh de do theorainn chaiteachais."
+title = "Cumas réamhíoctha"
+
+[payg.prepaid.meter]
+capSuffix = "as {{total}} creidmheas réamhíoctha"
+expires = "Éagann {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Ídithe"
+healthy = "Neart fágtha"
+low = "Ag ísliú"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Greamaigh an eochair cheadúnais ó do ríomhphost"
 success = "Ceadúnas Gníomhachtaithe!"
 successMessage = "Tá do cheadúnas gníomhachtaithe go rathúil. Is féidir leat an fhuinneog seo a dhúnadh anois."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "curtha i bhfeidhm"
-enforcing = "Á chur i bhfeidhm..."
-failed = "Theip ar an bhforfheidhmiú"
 outputsUnavailable = "Níl aschuir na beartais ar fáil le híoslódáil a thuilleadh."
 partialOutputsUnavailable = "Níl cuid d'aschuir na beartais ar fáil le híoslódáil a thuilleadh."
-retrying = "Gnóthach, ag iarraidh arís..."
 runNotFound = "Ní raibh an rith forfheidhmithe le fáil a thuilleadh."
-step = "céim {{current}}/{{total}}"
 timedOut = "Chuaigh an forfheidhmiú thar am sular fhéad an rith críochnú."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Dún"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Á chur {{names}} i bhfeidhm"
 applyingProgress = "Á chur {{names}} i bhfeidhm ({{done}} as {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "Níor próiseáladh {{failures}} as {{total}} comhad agus easpór
 failureTitle = "Easpórtáladh gan fhorfheidhmiú iomlán"
 printPolicyAppliedBody = "Nuashonraíodh an PDF seo chun beartas a chomhlíonadh. Athbhreithnigh na hathruithe, ansin priontáil arís."
 printPolicyAppliedTitle = "Beartas curtha i bhfeidhm roimh phriontáil"
-queued = "+{{count}} sa scuaine"
 successTitle = "Cuireadh {{names}} i bhfeidhm"
 summaryMore = "{{first}}, {{second}} agus {{more}} eile"
 summaryTwo = "{{first}} agus {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Forfheidhmiú roimh thiontú"
-default = "Forfheidhmiú"
-export = "Forfheidhmiú roimh easpórtáil"
-input = "Forfheidhmiú ar iompórtáil"
-print = "Forfheidhmiú roimh phriontáil"
-
-[policies.field]
-accessLog = "Loga rochtana"
-archiveAfter = "Cartlannaigh tar éis"
-auditTrail = "Rian iniúchta"
-belowThreshold = "Faoi bhun na tairsí"
-destination = "Ceann scríbe"
-frameworks = "Creataí"
-immutableHold = "Coinneáil dho-athraithe"
-keepFor = "Coinnigh ar feadh"
-minConfidence = "Muinín íosta"
-notify = "Cuir ar an eolas ar ródú"
-onViolation = "Nuair nach bhfuil sé comhlíontach"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Cuir leis"
-addPlaceholder = "Cuir lipéad leis…"
-customNote = "Saincheaptha do d’fhoireann."
-defaultNote = "Ag úsáid an réamhshocraithe ionsuite, roinnte le d’fhoireann."
-duplicate = "Tá \"{{name}}\" ann cheana."
-edit = "Cuir lipéid in eagar"
-empty = "Níl aon lipéid fós."
-export = "Easpórtáil JSON"
-iconAria = "Roghnaigh deilbhín do {{name}}"
-import = "Iompórtáil JSON"
-importError = "Níorbh fhéidir an comhad sin a iompórtáil."
-managedNote = "Bainistíonn ceannaire d’fhoirne lipéid foirne."
-modalSubtitle = "Roinnte le d’fhoireann iomlán. Roghnaíonn an t-aicmitheoir na lipéid a oireann do gach doiciméad."
-modalTitle = "Lipéid aicmithe"
-pickIcon = "Úsáid deilbhín {{label}}"
-removeAria = "Bain {{name}}"
-resetToDefault = "Athshocraigh go réamhshocrú"
-saveForTeam = "Sábháil don fhoireann"
-saving = "Á shábháil…"
-sectionLabel = "Lipéid aicmithe"
-startFromScratch = "Tosaigh ón tús"
-teamCount = "lipéid foirne"
-tooLong = "Ní féidir le lipéid a bheith níos faide ná {{max}} carachtar."
-ungrouped = "Gan ghrúpáil"
-view = "Amharc ar lipéid"
+categoryCount = "catagóirí"
+hideCategory = "Folaigh catagóir"
+labelCount = "lipéid"
+sharedNote = "Tá na lipéid seo ionsuite agus comhroinnte ar fud d'fhoirne ar fad."
+showCategory = "Taispeáin catagóir"
 
 [policies.pii]
 account = "Uimhreacha cuntais (lipéadaithe)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Uimhreacha ródaithe SAM (ABA)"
 ssn = "Uimhreacha Slándála Sóisialta"
 
-[policies.settings]
-noneExport = "Níl aon pholasaithe ag rith ar easpórtáil faoi láthair."
-noneUpload = "Níl aon pholasaithe ag rith ar uaslódáil faoi láthair."
-onExport = "Ar easpórtáil"
-onUpload = "Ar uaslódáil"
-reorderHandle = "Tarraing chun athordú"
-runOrderDesc = "Nuair a ritheann níos mó ná polasaí amháin ar an truicear céanna, ritheann siad san ord seo — gach ceann ar aschur an pholasaí roimhe. Tarraing chun athordú."
-title = "Socruithe polasaí"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Roghanna polasaí"
-policySettings = "Socruithe polasaí"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Atriail polasaithe ar theip orthu ({{count}})"
-rowProgress = "{{completed}} as {{total}} comhad próiseáilte"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Cad is polasaí ann?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Aimsíonn agus dubháilann sé sonraí íogaire go huathoibríoch — amhail uimhreacha Slándála Sóisialta agus uimhreacha cárta — ionas nach féidir iad a léamh sa cháipéis."
-sanitize = "Baineann sé JavaScript folaithe den chomhad, ionas nach rithfidh aon rud go huathoibríoch nuair a osclaíonn duine é."
-watermark = "Stampálann sé marc infheicthe (m.sh. \"Confidential\") trasna gach leathanaigh."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Dún"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} á chur i bhfeidhm..."
 badgeRan = "Rith polasaí {{name}} ar an gcomhad seo"
+badgeRunning = "{{name}} ag rith..."
 blockingAction = "Cuireadh bac ar {{action}} agus polasaí á chur i bhfeidhm, fan le do thoil..."
 dismiss = "Dún forleagan"
 enforcingTitle = "Polasaí á chur i bhfeidhm..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Amharc ar chomhad (polasaí fós á chur i bhfeidhm)"
 [policyOption]
 autoRedactPhi = "Ceil PHI go huathoibríoch"
 blockExport = "Blocáil easpórtáil"
+ccpa = "CCPA"
 contracts = "Conarthaí"
 documents = "Doiciméid"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plean Editor"
 subscribed = "Plean Processor"
 unlinked = "Gan nascadh"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Tosaigh ó dhoiciméad"
-sectionsAriaLabel = "Rannáin thógálaí gníomhairí"
-selectorAriaLabel = "Gníomhairí"
-subtitle = "Dear, tástáil agus seol na gníomhairí AI a dhéanann do dhoiciméid a aicmiú, sonraí a bhaint astu agus iad a ródú. Sainigh cásanna, cuir teorainneacha ar rochtain uirlisí, rith tacar órga, agus foilsigh leagan."
-title = "Tógálaí Gníomhairí"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Cealaigh"
-dropzoneText = "Roghnaigh doiciméad samplach (PDF nó íomhá)"
-lead = "Scaoil doiciméad samplach agus molfaidh muid cásanna agus scéimre eastósctha is féidir leat a bheachtú. Ní fhoilsítear aon rud go dtí go ndéanann tú athbhreithniú air."
-submit = "Tosaigh gníomhaire"
-subtitle = "Cuir tús le gníomhaire nua ó chomhad ionadaíoch amháin"
-title = "Tosaigh ó dhoiciméad"
-
-[portal.agentBuilder.empty]
-description = "Tosaigh gníomhaire ó dhoiciméad samplach chun a chásanna agus a scéimre eastósctha a shíolú, ansin é a bheachtú agus a fhoilsiú."
-title = "Níl aon ghníomhairí fós"
-
-[portal.agentBuilder.evals]
-casesPassing = "Cásanna ag pasáil"
-columnCase = "Cás measúnaithe"
-columnLatency = "Moill"
-columnResult = "Toradh"
-fail = "teip"
-goldenSetPassRate = "Ráta pasála an tacair órga"
-latencyMs = "{{ms}} ms"
-notRun = "níor rith"
-pass = "pas"
-passRate = "Ráta pasála"
-runEvals = "Rith measúnuithe"
-
-[portal.agentBuilder.evals.empty]
-description = "Athraíonn measúnuithe do chásanna ina dtacar órga in-athdhéanta. Uasghrádaigh chun ráta pasála a ghabháil le himeacht ama agus foilseacháin a ghlasáil air."
-title = "Níl aon tacar órga fós"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "thar thacair órga"
-activeAgents = "Gníomhairí gníomhacha"
-avgPassRate = "Meánráta pasála measúnaithe"
-fleetWide = "ar fud an chabhlaigh"
-latestPublished = "Foilsithe is déanaí"
-scenarios = "Cásanna"
-testCases = "cásanna tástála"
-totalDescription_one = "{{count}} san iomlán"
-totalDescription_other = "{{count}} san iomlán"
-
-[portal.agentBuilder.scenarios]
-add = "Cuir leis"
-addScenario = "Cuir cás leis"
-enable = "Cumasaigh"
-expectationLabel = "Iompar a bhfuiltear ag súil leis"
-expectationPlaceholder = "Cad ba cheart don ghníomhaire a dhéanamh"
-inEval = "i measúnú"
-mute = "Balbhaigh"
-muted = "balbhaithe"
-nameLabel = "Ainm"
-namePlaceholder = "m.sh. Ardú comhlíontachta"
-
-[portal.agentBuilder.tabs]
-evals = "Measúnuithe"
-scenarios = "Cásanna"
-tools = "Uirlisí"
-versions = "Leaganacha"
-
-[portal.agentBuilder.tools]
-broadAccess = "Rochtain leathan"
-deniedHint = "Tá na huirlisí roghnaithe blocáilte. Fanann gach rud eile inghlaoite."
-deniedTools = "Uirlisí diúltaithe"
-governanceGate = "Tá rialachas uirlisí ar fáil ar an bplean Enterprise."
-restricted = "Srianta"
-restrictedAccess = "Rochtain srianta ar uirlisí"
-restrictedDescription = "Ceadaigh gach uirlis seachas na cinn a dhiúltaíonn tú thíos."
-
-[portal.agentBuilder.versions]
-current = "reatha"
-historyGate = "Tá stair iomlán leaganacha agus filleadh ar leagan ar fáil ar an bplean Enterprise."
-publish = "Foilsigh"
-rollBack = "Fill ar ais"
-
 [portal.assistant]
 close = "Dún cúntóir"
 error = "Níorbh fhéidir an cúntóir a bhaint amach."
@@ -6365,9 +6346,21 @@ typing = "Ag clóscríobh"
 loading = "Á luchtú"
 redirectingToEditor = "Á atreorú chuig an eagarthóir..."
 
+[portal.billing.activation]
+maybeLater = "B'fhéidir níos déanaí"
+title = "Cuir an Processor ar siúl"
+
+[portal.billing.activation.payg]
+sub = "Socraigh teorainn mhíosúil. Íoc as an méid a ritheann tú."
+title = "Íoc de réir mar a úsáideann tú"
+
+[portal.billing.activation.prepay]
+badge = "2 mhí saor in aisce"
+sub = "Sonrasc amháin, cárta nó aistriú bainc."
+title = "Réamhíoc bliain"
+
 [portal.billing.checkout]
 noClientSecret = "D’fhill Edge function gan client_secret."
-subtitle = "Cuir cárta leis chun leanúint ar aghaidh thar do dheontas saor in aisce ar phlean Editor. Láimhseálann Stripe an chuid eile."
 title = "Cuir an plean Processor ar siúl"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "D’éirigh le d’íocaíocht, ach tá an gníomhachtú ag glacadh beag
 close = "Dún"
 title = "Beagnach ann"
 
+[portal.billing.checkout.cap]
+amountAria = "Teorainn chaiteachais mhíosúil"
+back = "Siar"
+continue = "Lean ar aghaidh chuig íocaíocht"
+error = "Níorbh fhéidir do theorainn chaiteachais a shocrú"
+finePrint = "Eisítear sonraisc go míosúil. Cealaigh am ar bith."
+noLimit = "Gan teorainn"
+note = "Ní ghearrtar bille ort riamh thar do theorainn. Ní dhéanann an phróiseáil ach sos."
+perMonth = "/ mí"
+title = "Socraigh do theorainn chaiteachais"
+
+[portal.billing.checkout.card]
+fields = "Uimhir chárta · MM / YY · CVC · ZIP"
+label = "Sonraí cárta"
+note = "Bailíonn Stripe sonraí cárta. Ní stórálann Stirling PAN ná CVC riamh."
+
 [portal.billing.checkout.error]
 title = "Níorbh fhéidir checkout a thosú"
 
@@ -6383,10 +6392,9 @@ body = "Chuaigh d’íocaíocht tríd. Táimid ag cur próiseáil mhéadraithe a
 hint = "Coinnigh an fhuinneog seo oscailte, le do thoil."
 title = "Do phlean Processor á ghníomhachtú..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "i portal env chun checkout in-app a chumasú."
-bodyBefore = "Socraigh"
-title = "Níl Stripe cumraithe"
+[portal.billing.checkout.pay]
+limit = "Teorainn chaiteachais mhíosúil {{amount}}/mí. Stadann próiseáil ag an teorainn."
+limitNoCap = "Gan teorainn chaiteachais. Ní stadfaidh próiseáil. Eisítear sonraisc go míosúil."
 
 [portal.billing.enterpriseUpsell]
 cta = "Tóg do luachan Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Plean reatha"
 freeForever = "Saor in aisce go deo"
 noTeamResolved = "Níl aon fhoireann réitithe ar do sparán fós — athnuaigh agus bain triail eile as."
 ownerOnly = "Ní féidir ach le húinéir na foirne an plean Processor a chur ar siúl."
+payInvoice = "Íoc sonrasc chun críochnú"
 planName = "Editor"
 ssoIncluded = "SSO san áireamh"
 switchOnProcessor = "Cuir Processor ar siúl →"
 unlimitedUsers = "Úsáideoirí gan teorainn"
+viewQuote = "Féach ar luachan"
 
 [portal.billing.invoices]
 columnAmount = "Méid"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Iarratais dhíreacha API"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Uathoibrithe & píblínte"
 segmentAutomationLabel = "Uathoibriú"
+sizeMultiplier = "D'úsáid {{formatted}} PDFs iolraitheoir méide"
+summary = "{{unique}} uathúil · {{units}} aonad méadair · {{avg}} meán in aghaidh an PDF"
+summaryNoRate = "{{unique}} uathúil · {{units}} aonad méadair"
 unit = "PDFs méadraithe"
+unitsPending_one = "{{units}} aonad méadair ag fanacht le sioncronú ó shamplaí nasctha"
+unitsPending_other = "{{units}} aonad méadair ag fanacht le sioncronú ó shamplaí nasctha"
+
+[portal.billing.prepaid]
+capSuffix = "as {{total}} creidmheas réamhíoctha"
+expires = "Éagann {{date}}"
+eyebrow = "Cumas réamhíoctha"
+note = "Úsáidtear roimh bhilleáil mhéadraithe agus lasmuigh de do theorainn chaiteachais."
+topUp = "Breisigh"
+
+[portal.billing.prepaid.buy]
+back = "Siar"
+calcTitle = "Ríomh d'íocaíocht bhliantúil"
+cancel = "Cealaigh"
+cancelPurchase = "Cealaigh ceannach"
+close = "Dún"
+continueToPayment = "Lean ar aghaidh chuig íocaíocht"
+finalise = "Críochnaigh"
+invoiceErrorTitle = "Níorbh fhéidir an sonrasc a ghiniúint"
+loadingTitle = "Do luachan á luchtú"
+payTitle = "Íoc as do bhliain"
+step = "Céim {{current}} as {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Athraigh"
+deployRow = "Imscaradh"
+done = "Déanta"
+enterpriseHint = "Is scála fiontraíochta é seo. Ag an méid seo, sáraíonn rátaí fiontraíochta aon lascaine féinseirbhíse. Glasáil ráta, téarmaí, agus luachan i gceann cúpla nóiméad."
+governanceRow = "Rialachas"
+governanceValue = "{{label}} · {{count}} polasaí"
+handlesLabel = "Do Processor"
+handlesValue = "láimhseálann {{volume}} creidmheas / mí"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} polasaí"
+poolCaption = "Linn amháin de {{credits}} creidmheas don bhliain. Faigheann míonna troma iasacht ó mhíonna éadroma."
+priceLabel = "Do bhliain · 12 mhí ar phraghas 10"
+rateUnknown = "Taispeánfaimid an praghas cruinn ag an tseiceáil amach."
+savings = "Sábhálann tú {{amount}} · 2 mhí saor in aisce."
+sizingRow = "Méidiú"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Úsáideoirí iomlána"
+
+[portal.billing.prepaid.consent]
+label = "Tuigim nuair a ídítear mo chumas réamhíoctha nó nuair a théann sé in éag tar éis 12 mhí, go leanann próiseáil ar aghaidh go huathoibríoch ag an ráta caighdeánach méadraithe íoc-mar-a-úsáideann-tú (suas go dtí mo theorainn chaiteachais) mura gcealaím, agus gur féidir liom cealú am ar bith ón tairseach billeála."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Bainistithe ag Stirling. Beo i gceann cúpla nóiméad."
+cloudValue = "Stirling Cloud · Bainistithe"
+selfhost = "Féin-óstáilte"
+selfhostDesc = "Ritheann ar bhonneagar príobháideach. An ráta céanna."
+selfhostValue = "Féin-óstáilte · Bonneagar príobháideach"
+
+[portal.billing.prepaid.offer]
+cta = "Athbhreithnigh tairiscint"
+subtitle = "Réamhíoc bliain de phróiseáil PDF agus faigh dhá mhí saor in aisce, úsáidte roimh bhilleáil mhéadraithe, lasmuigh de do theorainn chaiteachais."
+title = "Faigh 12 mhí ar phraghas 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Ainm shealbhóir an chuntais"
+accountNamePlaceholder = "m.sh. Jane Smith"
+companyName = "Ainm cuideachta (roghnach)"
+companyNamePlaceholder = "m.sh. Acme Inc."
+downloadInvoice = "Íoslódáil sonrasc"
+payOnline = "Íoc ar líne"
+poNumber = "Uimhir PO (roghnach)"
+poNumberPlaceholder = "m.sh. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Ardleibhéal"
+advancedDesc = "Tiomáineann Pipelines an chuid is mó de do phróiseáil."
+none = "Ceann ar bith"
+noneDesc = "Níl Pipelines á rith fós. Cuir ar siúl iad am ar bith."
+standard = "Caighdeánach"
+standardDesc = "Athphróiseálann cúpla Pipeline PDFs a thagann isteach."
+
+[portal.billing.prepaid.posture]
+essentials = "Bunriachtanais"
+essentialsDesc = "Aicmiú, an réamhshocrú, móide Comhroinnt"
+governed = "Rialaithe"
+governedDesc = "Cuireann Slándáil agus Ródú leis"
+regulated = "Rialaithe go docht"
+regulatedDesc = "Gach catagóir, lena n-áirítear Comhlíonadh, Coinneáil, Ionghabháil"
+
+[portal.billing.prepaid.review]
+download = "Íoslódáil luachan (PDF)"
+downloading = "Á ullmhú…"
+share = "comhroinn lena cheadú"
+
+[portal.billing.prepaid.size]
+compact = "Dlúth"
+compactDesc = "Comhaid faoi 25 MB, gan táillí sonraí"
+heavy = "Trom"
+heavyDesc = "Scantha nó lán d'íomhánna, 50 MB+ go rialta"
+standard = "Caighdeánach"
+standardDesc = "Beag den chuid is mó, roinnt scananna thar 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Ídithe"
+healthy = "Neart fágtha"
+low = "Ag ísliú"
 
 [portal.billing.spendLimit]
 adjustLimit = "Coigeartaigh teorainn"
@@ -6494,6 +6608,8 @@ label = "Réamh-mheasta go sárófar í."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Caiteachas an mhí seo"
+freeRemaining_one = "{{formatted}} PDF saor in aisce fágtha"
+freeRemaining_other = "{{formatted}} PDFs saor in aisce fágtha"
 processed_one = "{{formattedCount}} PDF próiseáilte."
 processed_other = "{{formattedCount}} PDFs próiseáilte."
 processedWithRate_one = "{{formattedCount}} PDF próiseáilte, ar {{rate}} an ceann."
@@ -6534,6 +6650,350 @@ signature = "síniú"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Ceangal nua"
+createTitleFor = "Ceangail {{name}}"
+delete = "Scrios"
+edit = "Cuir in eagar"
+editTitle = "Cuir ceangal in eagar"
+unsupportedType = "Ní féidir an cineál ceangail seo a chur in eagar anseo."
+
+[portal.connections.categories.advanced]
+description = "Do sheirbhís nach dtacaímid léi fós."
+label = "Ardleibhéal"
+
+[portal.connections.categories.audit]
+description = "Taifead cad a tharla do dhoiciméad, san áit a mbreathnaíonn d'iniúchóirí cheana féin."
+label = "Logáil iniúchta & comhlíonta"
+
+[portal.connections.categories.notify]
+description = "Inis do chóras eile gur tharla rud éigin."
+label = "Fógra & sreabhadh oibre"
+
+[portal.connections.categories.security]
+description = "Scan nó lipéadaigh doiciméad sula mbogann sé ar aghaidh."
+label = "Slándáil & aicmiú"
+
+[portal.connections.categories.signing]
+description = "Seol doiciméad amach le síniú nó le nótárú."
+label = "Ríomhshíniú & nótárú"
+
+[portal.connections.categories.storage]
+description = "Áit a gcríochnaíonn doiciméid phróiseáilte - buicéad, tiomántán, ticéad nó leathanach."
+label = "Comhad & ceangail"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stórálann Stirling é seo criptithe agus ní thaispeánann sé arís é riamh."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Ní féidir le céimeanna a úsáideann an ceangal seo ach conairí faoin URL seo a ghlaoch, riamh óstach eile."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Pasfhocal"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Ainm úsáideora"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Greamaigh an URL a thug an tseirbhís duit. Ní féidir ach conairí faoi a ghlaoch."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Ainm ceangail"
+namePlaceholder = "m.sh. Táirgeadh"
+
+[portal.connections.picker]
+cancel = "Cealaigh"
+createNew = "Ceangal nua..."
+placeholder = "Roghnaigh ceangal"
+save = "Sábháil ceangal"
+
+[portal.connections.picker2]
+back = "Athraigh comhtháthú"
+heading = "Cad ba mhaith leat a cheangal?"
+noResultsBody = "Ní thacaímid leis fós - inis dúinn faoi agus breathnóimid ar é a chur leis."
+noResultsTitle = "Ní mheaitseálann aon rud \"{{query}}\""
+searchPlaceholder = "Cuardaigh comhtháthuithe - bain triail as \"sign\", \"ocr\" nó ainm táirge"
+
+[portal.connections.types.api]
+description = "Glaoigh ar aon HTTP API ó pholasaí. Roghnaíonn tú an URL, fíordheimhniú agus payload."
+label = "API saincheaptha"
+
+[portal.connections.types.api.fields.authType]
+label = "Fíordheimhniú"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Ainm úsáideora agus pasfhocal"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token i gceanntásc saincheaptha"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Ceann ar bith"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Logáil isteach le haghaidh token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Ní féidir le céimeanna a úsáideann an ceangal seo ach conairí faoin URL seo a ghlaoch, riamh óstach eile."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Ainm ceanntásca"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Conair logála isteach"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Pasfhocal"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Má fhreagraíonn an API le nasc íoslódála, ní féidir ach na hóstach seo a fháil. Dealaigh le camóga. Fág bán é chun óstach an base URL amháin a cheadú."
+label = "Óstaigh torthaí ceadaithe"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Seol an token mar an ceanntásc seo"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "An ceanntásc freagartha a fhilleann an glao logála isteach an token ann, m.sh. X-Auth-Token."
+label = "Ceanntásc freagartha token"
+
+[portal.connections.types.api.fields.username]
+label = "Ainm úsáideora"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Scan doiciméid le haghaidh malware ar fhreastalaí a ritheann tú - ní fhágann aon rud do líonra."
+label = "ClamAV (féin-óstáilte)"
+
+[portal.connections.types.cloudmersive]
+description = "Scanadh víreas agus ábhair do dhoiciméid i bpolasaí."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Cuir bac ar dhoiciméid ina bhfuil macros, comhaid inrite, scripts nó réada leabaithe - ní hamháin malware aitheanta."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Ceangail doiciméid phróiseáilte le leathanach Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Seol doiciméid chuig ConsignO Cloud (Notarius) le haghaidh sínithe leictreonaigh agus nótárú."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Do thimpeallacht ConsignO Cloud, lena n-áirítear /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Pasfhocal"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Ní theastaíonn ach má úsáideann d'eagraíocht tionóntaí."
+label = "Tionónta"
+
+[portal.connections.types.consigno.fields.username]
+label = "Ainm úsáideora"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Postáil teachtaireacht chuig Discord nuair a phróiseálann polasaí doiciméad."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Innéacsaigh teagmhas iniúchta in Elasticsearch gach uair a láimhseálann polasaí doiciméad."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Fiafraigh de fhreastalaí FTP nó FTPS le haghaidh doiciméid nua."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Modh ceangail"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Gníomhach"
+passive = "Éighníomhach (molta)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Seolann FTP lom dintiúir agus comhaid gan chriptiú; roghnaigh FTPS má thacaíonn an freastalaí leis."
+label = "Criptiú"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Ceann ar bith (FTP lom)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Postáil teachtaireacht chuig spás Google Chat nuair a ritheann polasaí."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Ceangail doiciméid phróiseáilte le saincheist Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Seol doiciméad nó fógra ar Email nuair a ritheann polasaí."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Cuir doiciméid phróiseáilte i Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Pasfhocal aipe"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Braith sonraí pearsanta i dtéacs doiciméid ag úsáid freastalaí Presidio a ritheann tú."
+label = "Presidio (féin-óstáilte)"
+
+[portal.connections.types.purview]
+description = "Léigh agus cuir lipéid íogaireachta Microsoft Purview i bhfeidhm ar PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Roghnach. Ní theastaíonn ach chun lipéid a roghnú de réir ainm; oibríonn lipéadú gan é."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Stampáilte ar gach lipéad mar a SiteId, ionas go mbeidh a fhios ag uirlisí a thuigeann Purview cén eagraíocht a chuir i bhfeidhm é."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Buicéad S3 ar féidir le foinsí léamh uaidh agus le haschuir pipeline scríobh chuige."
+label = "Stóráil S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Buicéad"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Fág bán é do AWS. Socraigh é seo do MinIO nó stór eile atá comhoiriúnach le S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Réigiún"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Seol doiciméad nó fógra ar Email nuair a ritheann polasaí."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Fiafraigh de fhreastalaí SFTP (SSH) le haghaidh doiciméid nua."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Roghnach. Méarlorg eochair ósta SHA-256 an fhreastalaí (ó `ssh-keyscan host | ssh-keygen -lf -`). Nuair atá sé socraithe, ní ghlactar ach le freastalaí a chuireann an eochair seo i láthair; nuair atá sé bán, pinntear an eochair a fheictear ar an gcéad cheangal agus diúltaítear d'athruithe ina dhiaidh sin."
+label = "Méarlorg eochair ósta"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Frása faire eochrach"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Fág bán é má fhíordheimhníonn tú le heochair phríobháideach ina ionad."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Roghnach. Greamaigh eochair phríobháideach OpenSSH chun fíordheimhniú le heochair in ionad pasfhocail."
+label = "Eochair phríobháideach"
+
+[portal.connections.types.slack]
+description = "Postáil teachtaireacht chuig Slack nuair a phróiseálann polasaí doiciméad."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Déan faire ar chomhroinnt líonra SMB / CIFS (Windows nó Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Comhroinnt líonra"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Roghnach. An fearann Windows nó grúpa oibre, má úsáideann do fhreastalaí ceann."
+label = "Fearann"
+
+[portal.connections.types.smb.fields.share]
+label = "Comhroinnt"
+placeholder = "doiciméid"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Seol teagmhas iniúchta chuig Splunk gach uair a láimhseálann polasaí doiciméad."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Seol teagmhas iniúchta chuig bailitheoir HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Postáil teachtaireacht chuig cainéal Teams nuair a ritheann polasaí."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Postáil gach doiciméad, nó na sonraí amháin, chuig URL a roghnaíonn tú."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Spreag Zap nó cás Make ó pholasaí."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Brabhsáil docs"
+viewSource = "Féach ar an bhfoinse ar GitHub"
+
 [portal.docs.authentication]
 codeCaption = "gach iarratas"
 eyebrow = "AG TOSÚ"
@@ -6619,11 +7079,19 @@ title = "SDKs oifigiúla"
 beta = "Beta"
 deprecated = "Dulta i léig"
 
+[portal.docs.search]
+empty = "Níl aon docs meaitseála"
+placeholder = "Cuardaigh docs"
+results = "{{count}} toradh"
+
 [portal.docs.skills]
 eyebrow = "SCILEANNA"
 lead = "Cumasachtaí cuachta, ainmnithe a ghlaonn do ghníomhaire mar uirlis aonair. Is slabhra oibríochtaí cinntitheach gach scil, le measúnuithe ceangailte."
 title = "Scileanna gníomhairí"
 
+[portal.docs.toc]
+title = "Ar an leathanach seo"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "TAGAIRT API"
@@ -6697,6 +7165,8 @@ type = "Cineál"
 user = "Úsáideoir"
 
 [portal.documents.queue.empty]
+connectSource = "Ceangail foinse"
+createPipeline = "Cruthaigh pipeline"
 description = "De réir mar a sheolann foinsí doiciméid isteach i do phíblínte, taispeánfar anseo iad le hathbhreithniú."
 title = "Níl aon doiciméid sa scuaine"
 
@@ -6806,13 +7276,71 @@ description = "Bhuail an radharc seo earráid gan choinne. Bain triail eile as,
 retry = "Bain triail eile as"
 title = "Chuaigh rud éigin mícheart ar an leathanach seo"
 
+[portal.home.download]
+back = "Siar"
+body = "Íoslódáil an aip deisce nó féin-óstáil an freastalaí."
+done = "Déanta"
+guide = "Oscail treoir {{name}}"
+openInBrowser = "Oscail sa bhrabhsálaí ina ionad"
+sectionDesktop = "Aip deisce"
+sectionSelfHosted = "Féin-óstáilte"
+title = "Suiteáil an Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Rith an íomhá oifigiúil ar do fhreastalaí."
+note = "Osclaíonn ag :8080. Logáil isteach réamhshocraithe: admin / stirling."
+tagline = "Rith an freastalaí i gcoimeádán"
+title = "Docker"
+variantFat = "Iomlán"
+variantLite = "Ultra-Éadrom"
+variantStandard = "Caighdeánach"
+
+[portal.home.download.kubernetes]
+detailBody = "Suiteáil an Helm chart oifigiúil."
+note = "Cuir PVC leis do /configs chun socruithe a choinneáil."
+tagline = "Imscar chuig cnuasach le Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Tógálacha dúchasacha do do dháileadh."
+guideBtn = "Féach roghanna suiteála Linux"
+note = "Tá tógálacha AppImage, .deb agus .rpm ar fáil do dháiltí coitianta."
+tagline = "Aip deisce dhúchasach do do distro"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Nó trí Homebrew"
+detailBody = "Rith an suiteálaí, nó úsáid Homebrew."
+downloadBtn = "Íoslódáil do macOS"
+tagline = "Aip dhúchasach do Apple silicon agus Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Rith an .jar ar fhreastalaí bare metal."
+downloadBtn = "Íoslódáil an .jar"
+note = "Teastaíonn Java 21+. Osclaíonn ag :8080; logáil isteach réamhshocraithe admin / stirling."
+runLabel = "Ansin rith é"
+tagline = "Rith an .jar ar fhreastalaí bare metal"
+title = "Socrú freastalaí láimhe"
+
+[portal.home.download.windows]
+altLabel = "Nó trí winget"
+detailBody = "Rith an suiteálaí, nó úsáid bainisteoir pacáistí."
+downloadBtn = "Íoslódáil suiteálaí"
+tagline = "Aip dhúchasach do Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} gníomhach"
-invite = "Tabhair cuireadh do chomhghleacaithe"
+activeOfDeployed = "{{active}} as {{total}} gníomhach an mhí seo"
 name = "Stirling PDF Editor"
 open = "Oscail sa bhrabhsálaí"
 updated = "nuashonraithe {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Críochnaigh imscaradh"
+options = "Féach roghanna imscartha"
+start = "Imscar an tEagarthóir"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Féin-óstáilte · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Tráthnóna maith"
 evening = "Oíche mhaith"
 morning = "Maidin mhaith"
 
-[portal.home.onboarding]
-dismiss = "Dún an socrú"
-notStarted = "Gan tosú"
-progress = "{{done}} as {{total}} déanta"
-title = "Críochnaigh an socrú"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC ar fud na heagraíochta, praghsáil toirte tiomanta, agus imscaradh air-gapped."
-cta = "Tosaigh Triail"
-ctaQuote = "Faigh Luachan"
-lead = "Do 250+ fostaí."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Imscar an aip deisce, saor in aisce go deo."
-title = "Íoslódáil an PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} gníomhach · {{recommended}} molta"
-chip = "{{active}} gníomhach"
-title = "Cuir beartais ar siúl"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} ceangailte · gach PDF rialaithe san áit a dtagann sé i dtír"
-chip = "{{connected}} ceangailte"
-title = "Ceangail do chuid foinsí"
-
-[portal.home.quickActions]
-subtitle = "Príomhthascanna don lá inniu"
-title = "Gníomhartha tapa"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Cumadóir 3 chéim thar an leabharlann typed op"
-title = "Tóg píblíne"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, gníomhairí, webhooks, fillteáin fhaire"
-title = "Ceangail foinse"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Eochair scóipithe le teorainneacha ráta agus liosta ceadaithe IP"
-title = "Eisigh eochair API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Bainistigh imscaradh an Eagarthóra"
 sectionsAriaLabel = "Rannáin bhonneagair"
@@ -6878,13 +7363,9 @@ heading = "Eochracha API"
 subheading = "Dintiúir scóipithe le teorainneacha ráta in aghaidh na heochrach, ceadanna, agus liostaí ceadaithe IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IPanna ceadaithe"
-anyIp = "Aon IP (gan liosta ceadaithe)"
 created = "Cruthaithe"
 lastUsed = "Úsáidte go deireanach"
-permissions = "Ceadanna"
-rateLimit = "Teorainn ráta"
-rateLimitValue = "{{value}} iarr/min"
+revoke = "Cúlghair eochair"
 usageMonth = "Úsáid an mhí seo"
 usageToday = "Úsáid inniu"
 
@@ -6892,6 +7373,20 @@ usageToday = "Úsáid inniu"
 description = "Cruthaigh eochair scóipithe chun tosú ag glaoch ar an Stirling API."
 title = "Níl aon eochracha API fós"
 
+[portal.infrastructure.apiKeys.error]
+load = "Níorbh fhéidir d'eochracha API a lódáil. Bain triail eile as."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Cúlghair \"{{name}}\"? Tosóidh aon chomhtháthú atá fós ag úsáid na heochrach seo ag fáil earráidí 401 láithreach. Ní féidir é seo a chur ar ceal."
+cancel = "Cealaigh"
+confirm = "Cúlghair eochair"
+title = "Cúlghair eochair API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Fianaithe"
+inScope = "Faoi raon"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Scag imeachtaí iniúchta de réir catagóire"
 heading = "Logaí iniúchta"
@@ -6935,6 +7430,7 @@ all = "Uile"
 auth = "Auth"
 config = "Cumraíocht"
 elevation = "Ardú"
+policy = "Polasaí"
 processing = "Próiseáil"
 security = "Slándáil"
 
@@ -6944,19 +7440,35 @@ title = "Níl rochtain agat"
 
 [portal.infrastructure.audit.metrics]
 config = "Cumraíocht"
-elevation = "Ardú"
+policy = "Polasaí"
 processing = "Próiseáil"
 totalEvents = "Imeachtaí iomlána · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Fíordheimhniú"
+config = "Cumraíocht"
+elevation = "Ardú"
+policy = "Polasaí"
+processing = "Próiseáil"
+security = "Slándáil"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Earráid"
+info = "Eolas"
+success = "D'éirigh leis"
+warning = "Rabhadh"
+
+[portal.infrastructure.certLabel]
+certified = "Deimhnithe"
+inProgress = "Ar siúl"
+notStarted = "Gan tosú"
+
 [portal.infrastructure.createKey]
 cancel = "Cealaigh"
 createKey = "Cruthaigh eochair"
 done = "Déanta"
-ipAllowlistHelper = "Raonta CIDR scartha le camóga. Fág bán chun aon IP a cheadú."
-ipAllowlistLabel = "Liosta ceadaithe IP"
 keyNameLabel = "Ainm eochrach"
 keyNamePlaceholder = "m.sh. Táirgeadh · ionghabháil"
-permissionsLabel = "Ceadanna"
 secretKeyCaption = "Eochair rúnda"
 secretWarning = "Stóráil é seo i mbainisteoir rúin. Ní stórálann Stirling ach hash riamh — níl aon bhealach ann é a aisghabháil níos déanaí."
 subtitle = "Scóipigh an eochair chuig an íosmhéid a theastaíonn uaithi. Is féidir leat í a rothlú nó a chúlghairm am ar bith."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Cóipeáil an rún seo anois — ní thaispeánfar arís é."
 title = "Cruthaigh eochair API"
 titleCreated = "Eochair cruthaithe"
 
+[portal.infrastructure.deployLabel]
+live = "Beo"
+queued = "I scuaine"
+rolledBack = "Rollta siar"
+rolling = "Á rolladh amach"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Sláinte bheo do gach réigiún Stirling imscartha — foighne, ua
 description = "Taispeánfar réigiúin imscartha anseo nuair a bheidh do spás oibre soláthraithe."
 title = "Níl aon réigiúin imscartha"
 
+[portal.infrastructure.keyLabel]
+active = "Gníomhach"
+revoked = "Cúlghairthe"
+
+[portal.infrastructure.modelLabel]
+active = "Gníomhach"
+degraded = "Díghrádaithe"
+disabled = "Díchumasaithe"
+
 [portal.infrastructure.models]
 heading = "Samhlacha"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Stádas"
 type = "Cineál"
 version = "Leagan"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/glao"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Samhlacha gníomhacha"
 avgLatency = "Meánfhoighne"
@@ -7049,6 +7580,17 @@ modelForAria = "Samhail do {{operation}}"
 operation = "Oibríocht"
 routedTo = "Ródaithe chuig"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Aicmiú"
+extraction = "Eastóscadh"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Díghrádaithe"
+down = "As feidhm"
+healthy = "Sláintiúil"
+
 [portal.infrastructure.security.access.byok]
 description = "Soláthair eochair ó do KMS féin. Criptíonn Stirling léi ach is féidir leis léamh fós."
 label = "Tabhair leat d’eochair féin (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Samhlacha"
 security = "Slándáil"
 storage = "Stóráil"
 
+[portal.integrations]
+addAnother = "Cuir ceann eile leis"
+availableHeading = "Ar fáil"
+comingSoonHeading = "Ag teacht go luath"
+connect = "Ceangail"
+connectedHeading = "Ceangailte"
+connectionCount_one = "{{count}} nasc"
+connectionCount_other = "{{count}} nasc"
+customApi = "API saincheaptha"
+searchPlaceholder = "Cuardaigh comhtháthuithe"
+subtitle = "Gach rud ar féidir le Stirling labhairt leis. Cruthaítear dintiúir uair amháin anseo, ansin tagraíonn foinsí, polasaithe agus píblínte dóibh."
+title = "Comhtháthuithe"
+typedName = "Ainm {{tool}}"
+
+[portal.integrations.filters]
+all = "Uile"
+audit = "Iniúchadh"
+connected = "Ceangailte"
+notify = "Fógraigh"
+security = "Slándáil"
+signing = "Síniú"
+storage = "Stóráil"
+
+[portal.integrations.status]
+connected = "Ceangailte"
+
+[portal.integrations.table]
+integration = "Comhtháthú"
+worksWith = "Oibríonn le"
+
+[portal.integrations.worksWith]
+pipelines = "Píblínte"
+policies = "Polasaithe"
+sources = "Foinsí"
+
+[portal.legal]
+draft = "{{label}} · dréacht"
+loadError = "Níorbh fhéidir an doiciméad seo a lódáil. Bain triail eile as."
+loading = "Á lódáil…"
+title = "Doiciméad dlíthiúil"
+
 [portal.nav]
 agent-builder = "Tógálaí Gníomhairí"
 components = "Comhpháirteanna"
@@ -7182,6 +7765,7 @@ documents = "Doiciméid"
 editor = "Eagarthóir"
 home = "Baile"
 infrastructure = "Bonneagar"
+integrations = "Comhtháthuithe"
 pipelines = "Píblínte"
 policies = "Beartais"
 procurement = "Soláthar"
@@ -7190,25 +7774,9 @@ sources = "Foinsí"
 usage = "Úsáid & Billeáil"
 users = "Úsáideoirí"
 
-[portal.notifications]
-markAllRead = "Marcáil gach rud léite"
-title = "Fógraí"
-viewAll = "Féach ar gach rud"
-
-[portal.notifications.ariaLabel]
-none = "Fógraí, gan aon rud gan léamh"
-unread_one = "Fógraí, {{count}} gan léamh"
-unread_other = "Fógraí, {{count}} gan léamh"
-
-[portal.notifications.count]
-allRead = "gach rud léite"
-loading = "á luchtú"
-new_one = "{{count}} nua"
-new_other = "{{count}} nua"
-
-[portal.notifications.empty]
-description = "Níl aon fhógraí nua ann."
-title = "Tá tú suas chun dáta"
+[portal.nav.section]
+platform = "Ardán PDF"
+processor = "Próiseálaí PDF"
 
 [portal.pipelines]
 subtitle = "Gach píblíne doiciméad uathoibrithe ar an inneall cúil: slabhra ordaithe oibríochtaí thar shraith foinsí, á rith ar thruicear. Cliceáil ró le haghaidh a céimeanna agus a foinsí."
@@ -7220,15 +7788,28 @@ newPipeline = "Píblíne nua"
 [portal.pipelines.builder]
 addStep = "Cuir uirlis leis"
 back = "Ar ais chuig píblínte"
+cannotFollow = "Ní féidir {{produced}} a ghlacadh"
+chooseAccount = "Roghnaigh cuntas"
+chooseDestination = "Roghnaigh ceann scríbe"
+chooseOperation = "Roghnaigh cad a dhéanann an chéim seo"
+chooseSource = "Roghnaigh foinse"
 discard = "Caith athruithe amach"
 enabled = "Cumasaithe"
+inputs = "Ionchur"
+inputSource = "Foinse ionchuir"
+inputTrigger = "Truicear"
 keepEditing = "Lean den eagarthóireacht"
+needsConfiguring = "Teastaíonn socrú"
 needsUpload = "Teastaíonn comhad uaslódáilte"
+noSources = "Níl aon fhoinsí ceangailte fós. Cruthaigh ceann chun é a úsáid mar ionchur."
 noToolMatches = "Ní mheaitseálann aon uirlisí do chuardach."
 pipelineSettings = "Socruithe píblíne"
 searchTools = "Cuardaigh uirlisí"
 selectToolBody = "Cuir uirlis leis chun do phíblíne a thógáil."
 selectToolTitle = "Níl aon uirlisí fós"
+sendToSystem = "Seol chuig córas eile"
+stepsIncompatible = "Ní féidir leis na céimeanna seo rith ar an méid a tháirgeann an chéim roimhe seo: {{tools}}."
+stepsNeedSetup = "Tá socrú fós ag teastáil ó na céimeanna seo sula sábhálfar: {{tools}}."
 toolSettings = "Socruithe uirlise"
 unknownStep = "Oibríocht neamhaitheanta, coinnithe mar atá."
 unsavedBody = "Tá athruithe gan sábháil agat. Sábháil iad sula bhfágann tú, nó caith amach iad?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Athruithe gan sábháil"
 uploadUnsupported = "Ní thacaítear le comhaid uaslódáilte i bpíblínte fós, mar sin ní féidir na céimeanna seo a shábháil: {{tools}}."
 usesDefaults = "Ritheann le socruithe réamhshocraithe"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Comhcheanglaíonn sé gach comhad ón gcéim roimhe seo"
+fan-out = "Ritheann sé uair amháin in aghaidh an chomhaid ón gcéim roimhe seo"
+format-mismatch = "Teastaíonn {{accepts}}, ach táirgeann an chéim roimhe seo {{produced}}"
+output-uncertain = "Seans nach rithfidh sé: braitheann aschur na céime roimhe seo ar an gcaoi a bhfuil sé socraithe"
+source-mismatch = "Teastaíonn {{accepts}}, ach is é {{produced}} ionchur na píblíne seo"
+undeclared-operation = "Ní féidir a sheiceáil cad a ghlacann an chéim seo"
+
 [portal.pipelines.composer]
 addTool = "Cuir uirlis leis"
 cancel = "Cealaigh"
 chainEmpty = "Cuir uirlis leis chun tosú ag tógáil do phíblíne."
 create = "Cruthaigh píblíne"
-directory = "Fillteán aschuir"
-directoryHelp = "Conair absalóideach ar an bhfreastalaí. Caithfidh sí a bheith laistigh de na fillteáin cheadaithe chumraithe."
 editingUnsupported = "Ní thacaítear fós le taispeáint na bparaiméadar uirlise seo le haghaidh eagarthóireachta."
 moveDown = "Bog síos"
 moveUp = "Bog suas"
 name = "Ainm"
 namePlaceholder = "m.sh. Scuabadh eagarthóireachta"
-noSources = "Níl aon fhoinsí ceangailte fós. Is féidir leis an bpíblíne rith fós ar chomhaid a sholáthraítear di go díreach."
 noToolSettings = "Níl aon socruithe inchumraithe ag an uirlis seo."
 operations_one = "Oibríocht ({{count}})"
 operations_other = "Oibríochtaí ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Scrios"
 title = "Scrios píblíne?"
 
 [portal.pipelines.detail]
+clearHistory = "Glan stair"
 delete = "Scrios píblíne"
 run = "Rith anois"
 
 [portal.pipelines.empty]
 action = "Cruthaigh píblíne"
+connectSource = "Ceangail foinse"
 description = "Cruthaigh do chéad phíblíne: roghnaigh na foinsí a ritheann sí orthu, slabhraigh na hoibríochtaí, agus roghnaigh cá dtéann an t-aschur."
 title = "Níl aon phíblínte fós"
 
@@ -7286,15 +7874,17 @@ active = "Gníomhach"
 paused = "Ar sos"
 total = "Píblínte"
 
-[portal.pipelines.output]
-folder = "Scríobh chuig fillteán"
-inline = "Tabhair comhaid ar ais"
-
 [portal.pipelines.run]
+allProcessed_one = "Níl aon rud le rith: próiseáladh {{count}} doiciméad na foinse cheana féin."
+allProcessed_other = "Níl aon rud le rith: próiseáladh gach ceann de {{count}} doiciméad sna foinsí cheana féin."
 completed_one = "Rith críochnaithe."
 completed_other = "Críochnaíodh gach {{count}} rith."
 empty = "Níl aon rud le rith: ní raibh aon doiciméid le próiseáil ag na foinsí."
 failed = "Theip ar an rith: {{error}}"
+historyCleared = "Glanadh an stair. Próiseálfaidh an chéad rith eile gach rud atá sna foinsí faoi láthair arís."
+inFlight = "Níl aon rud nua le rith: tá doiciméid fós á bpróiseáil ó rith níos luaithe."
+parked_one = "Níl aon rud le rith: theip ar {{count}} doiciméad roimhe seo agus tá sé páirceáilte. Ceartaigh an chúis, ansin glan an stair chun triail eile a bhaint as."
+parked_other = "Níl aon rud le rith: theip ar {{count}} doiciméad roimhe seo agus tá siad páirceáilte. Ceartaigh an chúis, ansin glan an stair chun triail eile a bhaint astu."
 running = "Tosaíodh an rith; tá sé fós ar siúl."
 timeout = "Tá an rith ag glacadh níos faide ná mar a bhíothas ag súil leis; d’fhéadfadh sé críochnú sa chúlra fós."
 
@@ -7314,12 +7904,18 @@ manual = "Láimhe"
 schedule = "Sceidealaithe"
 
 [portal.policies]
+defaultName = "Polasaí {{category}}"
 subtitle = "Uathoibrithe seasta a fhorfheidhmíonn píblíne uirlisí ar gach doiciméad. Spreagtar gach beartas ar uaslódáil nó easpórtáil, ritheann sé a shlabhra uirlisí, agus sábhálann sé an leagan forfheidhmithe taobh leis an mbunleagan."
 title = "Beartais"
 
 [portal.policies.card]
 comingSoon = "Uasghrádaigh go Enterprise"
 notSetUp = "Gan socrú"
+requiresAiEngine = "Teastaíonn inneall AI"
+
+[portal.policies.categories.classification]
+desc = "Aithin cineál gach doiciméid agus é á uaslódáil agus clibeáil a mheiteashonraí le haghaidh comhdaithe agus cuardaigh."
+label = "Aicmiú"
 
 [portal.policies.categories.compliance]
 desc = "Forfheidhmigh ceanglais HIPAA, GDPR, SOC 2, nó FedRAMP ar gach doiciméad."
@@ -7344,6 +7940,13 @@ label = "Slándáil"
 [portal.policies.config]
 scopeAll = "Gach doiciméad"
 
+[portal.policies.config.classification]
+summary = "Aicmíonn sé gach doiciméad uaslódáilte de réir lipéid d'fhoirne agus clibeálann sé a mheiteashonraí."
+
+[portal.policies.config.classification.rules]
+0 = "Aicmigh"
+1 = "Clibeáil meiteashonraí"
+
 [portal.policies.config.compliance]
 summary = "Bailíochtaíonn doiciméid i gcoinne creatlaí rialála sula bhfágann siad an córas."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Muinín íosta"
 2 = "Ainmnigh"
 3 = "Normalú"
 
+[portal.policies.config.purview]
+label = "Cuir lipéad íogaireachta Microsoft Purview i bhfeidhm"
+
+[portal.policies.config.purview.fields]
+connection = "Tionónta Purview"
+labelId = "ID lipéid"
+labelIdHelp = "GUID an lipéid, ón tairseach Purview. Scríobhann cur i bhfeidhm lipéid a mheiteashonraí ar an PDF; ní féidir leis criptiú, rud a dteastaíonn cliant Microsoft uaidh."
+labelName = "Ainm lipéid (roghnach)"
+labelNameHelp = "Taifeadta in éineacht leis an ID ionas gur féidir le daoine agus uirlisí an lipéad a aithint."
+
+[portal.policies.config.purview.fields.method]
+help = "Déanann Purview idirdhealú idir lipéad a chuir polasaí i bhfeidhm agus ceann a roghnaigh duine."
+label = "Conas a thaifeadtar an lipéad"
+privileged = "Mar a roghnaigh duine é"
+standard = "Mar a cuireadh i bhfeidhm go huathoibríoch é"
+
+[portal.policies.config.purviewRead]
+label = "Léigh lipéad Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tionónta Purview"
+connectionHelp = "Léann sé an lipéad atá ar an doiciméad cheana féin, ionas gur féidir le céimeanna níos déanaí gníomhú air."
+
 [portal.policies.config.retention]
 summary = "Forfheidhmíonn sé cá fhad a choinnítear doiciméid, cathain a chartlannaítear iad, agus cathain a scriostar iad."
 
@@ -7438,6 +8064,7 @@ title = "Níl aon ghníomhaíocht fós"
 [portal.policies.endpoints]
 addWatermark = "Comhartha uisce"
 autoRedact = "Ceil PII"
+classifyAndLabel = "Aicmigh"
 compressPdf = "Comhbhrúigh"
 flatten = "Leacaigh"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Sábháladh do bheartais agus beidh siad le feiceáil nuair a bhe
 retry = "Atriail"
 title = "Níl Backend ar fáil"
 
+[portal.policies.operations]
+change = "Athraigh cad a dhéanann an chéim seo"
+noResults = "Ní mheaitseálann aon chéim é sin. Bain triail as ainm táirge, nó \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Cuardaigh céimeanna - bain triail as \"scan\", \"attach\" nó ainm táirge"
+
+[portal.policies.operations.bodyMode]
+binary = "Bearta comhaid amh"
+json = "Taobh istigh de phálód JSON"
+multipart = "Mar uaslódáil comhaid (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Seiceálann do fhreastalaí ClamAV féin an doiciméad; ní fhágann aon rud do líonra."
+label = "Scan le haghaidh víreas (féin-óstáilte)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Diúltaíonn sé do dhoiciméid a bhfuil macraí, comhaid inrite, scripteanna nó réada leabaithe iontu."
+label = "Blocáil ábhar gníomhach"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Seiceálann Cloudmersive an doiciméad agus stopann an rith mura bhfuil sé glan."
+label = "Scan le haghaidh víreas"
+
+[portal.policies.operations.confluenceAttach]
+description = "Comhdaíonn sé an doiciméad próiseáilte ar leathanach."
+label = "Ceangail le leathanach Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Cuireann sé an doiciméad faoi bhráid ConsignO Cloud le síniú."
+label = "Seol le haghaidh sínithe (ConsignO)"
+note = "Cuireann sé an doiciméad isteach. Ní thacaítear fós leis an gcóip shínithe a aisghabháil, toisc nach féidir le céim toradh a chur ar aghaidh chuig céim níos déanaí."
+
+[portal.policies.operations.customApiCall]
+description = "Cum an glao tú féin: cosán, modh, corp agus láimhseáil freagartha."
+label = "Glaoigh ar API saincheaptha"
+
+[portal.policies.operations.discordNotify]
+description = "Insíonn sé do chainéal gur láimhseáil an polasaí doiciméad."
+label = "Postáil teachtaireacht chuig Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Taifeadann sé cad a rinne an polasaí mar dhoiciméad inchuardaithe."
+label = "Innéacsaigh imeacht iniúchta in Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Oireann multipart do APIanna uaslódála; oireann JSON do APIanna a theastaíonn an comhad uathu taobh istigh de phálód; seolann binary na bearta amha."
+label = "Conas an doiciméad a sheoladh"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Corp JSON a sheoltar mar atá. Iompraíonn {{document.base64}} an comhad; líontar {{document.*}} agus {{run.*}} isteach in aghaidh an doiciméid."
+label = "Corp JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Cuntas"
+
+[portal.policies.operations.fields.domain]
+label = "Fearann Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "An réimse foirme a bhfuil an API ag súil leis an doiciméad faoi."
+label = "Ainm réimse comhaid"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Ó"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Oibiacht JSON de phéirí ainm/luach ceanntáisc. Cuirtear dintiúr an naisc leis duit."
+label = "Ceanntásca"
+
+[portal.policies.operations.fields.index]
+label = "Innéacs"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Eochair eisiúna"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Seolta mar chorp na teachtaireachta. Líontar {{document.*}} agus {{run.*}} isteach in aghaidh an doiciméid."
+label = "Teachtaireacht"
+
+[portal.policies.operations.fields.method]
+label = "Modh"
+
+[portal.policies.operations.fields.pageId]
+label = "ID leathanaigh"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Ceangailte le bun-URL an naisc. Ní féidir leis óstach eile a bhaint amach riamh."
+label = "Cosán"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Cá háit sa tiomántán le scríobh. Líontar {{document.filename}} isteach in aghaidh an doiciméid."
+label = "Cosán cinn scríbe"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Fágann tuairisc an doiciméad gan athrú. Cuireann ionadaigh an méid a thagann ar ais ina áit."
+label = "Cad atá le déanamh leis an bhfreagra"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Ríomhphost an tsínitheora"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Ábhar"
+placeholder = "Próiseáilte: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Déanann Presidio anailís ar an téacs seo. Úsáid {{document.title}} nó greamaigh an téacs is mian leat a sheiceáil."
+label = "Téacs le seiceáil"
+
+[portal.policies.operations.fields.to]
+label = "Chuig"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Ainm úsáideora Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Insíonn sé do spás gur láimhseáil an polasaí doiciméad."
+label = "Postáil teachtaireacht chuig Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Comhdaíonn sé an doiciméad próiseáilte ar shaincheist."
+label = "Ceangail le saincheist Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Seolann sé an doiciméad próiseáilte mar cheangaltán."
+label = "Seol an doiciméad ar ríomhphost (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Scríobhann sé an doiciméad próiseáilte isteach i bhfillteán."
+label = "Uaslódáil chuig Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Tuairiscíonn do fhreastalaí Presidio féin na sonraí pearsanta a aimsíonn sé."
+label = "Braith sonraí pearsanta"
+note = "Léann Presidio téacs, ní comhaid. Tabhair dó an téacs is mian leat a sheiceáil — ní uaslódáiltear an doiciméad féin."
+
+[portal.policies.operations.responseMode]
+replace = "Cuir an freagra in áit an doiciméid"
+report = "Coinnigh an doiciméad, taifead an freagra"
+
+[portal.policies.operations.sendgridEmail]
+description = "Seolann sé an doiciméad próiseáilte mar cheangaltán."
+label = "Seol an doiciméad ar ríomhphost (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Insíonn sé do chainéal gur láimhseáil an polasaí doiciméad."
+label = "Postáil teachtaireacht chuig Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Taifeadann sé cad a rinne an polasaí, áit a bhféachann d'iniúchóirí cheana féin."
+label = "Seol imeacht iniúchta chuig Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Taifeadann sé cad a rinne an polasaí chuig bailitheoir HTTP."
+label = "Seol imeacht iniúchta chuig Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Insíonn sé do chainéal gur láimhseáil an polasaí doiciméad."
+label = "Postáil teachtaireacht chuig Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Seolann sé an doiciméad féin chuig URL a roghnaíonn tú."
+label = "Postáil an doiciméad chuig webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Tugann sé sonraí an rite do d'uathoibriú."
+label = "Truicear Zap nó cás Make"
+
 [portal.policies.stats]
 activeFor = "Gníomhach"
 dataProcessed = "Sonraí próiseáilte"
@@ -7473,6 +8277,13 @@ label = "Cáipéisí forfheidhmithe"
 description = "Cumraithe ach gan lasadh"
 label = "Ar sos"
 
+[portal.policies.table]
+appliesTo = "Baineann le"
+docs = "Doiciméid curtha i bhfeidhm"
+enforces = "Cuireann i bhfeidhm"
+policy = "Polasaí"
+status = "Stádas"
+
 [portal.policies.wizard.actions]
 back = "Ar ais"
 cancel = "Cealaigh"
@@ -7480,6 +8291,10 @@ continue = "Lean ar aghaidh"
 enablePolicy = "Cumasaigh beartas"
 saveChanges = "Sábháil athruithe"
 
+[portal.policies.wizard.capability.classify]
+desc = "Aithníonn sé cineál an doiciméid ó lipéid d'fhoirne agus clibeálann sé é, ionas go gcomhdaítear agus go gcuardaítear é de réir catagóire."
+label = "Aicmigh an doiciméad"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comhbhrúnn sé an cháipéis go méid comhaid níos lú."
 label = "Laghdaigh méid an chomhaid"
@@ -7500,10 +8315,18 @@ label = "Ceil faisnéis íogair"
 desc = "Baineann sé JavaScript i bhfolach ionas nach féidir aon rud a rith go huathoibríoch nuair a osclaítear an cháipéis."
 label = "Bain ábhar gníomhach"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Cruthaíonn sé go raibh an doiciméad ann san fhoirm bheacht seo ag pointe ama, ag úsáid údarás stampa ama neamhspleách. Ní sheoltar ach hash - ní fhágann an doiciméad do fhreastalaí riamh."
+label = "Cuir stampa ama iontaofa leis"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Cuireann sé marc infheicthe (m.sh. “Rúnda”) trasna gach leathanaigh."
 label = "Cuir comhartha uisce i bhfeidhm"
 
+[portal.policies.wizard.classification]
+description = "Aicmítear gach doiciméad uaslódáilte de réir na lipéad ionsuite agus clibeáiltear é leis na cineálacha a oireann. Roinntear an tacar lipéad ar fud d'fhoirne ar fad."
+labelsHeading = "Lipéid aicmithe"
+
 [portal.policies.wizard.errors]
 noTools = "Cumasaigh uirlis amháin ar a laghad sa sreabhadh oibre ar dtús."
 saveFailed = "Níorbh fhéidir an beartas a shábháil. Bain triail eile as."
@@ -7548,73 +8371,118 @@ setUp = "Socraigh beartas {{category}}"
 [portal.policies.wizard.workflow]
 description = "Roghnaigh cad a dhéanann an beartas seo le gach cáipéis a phróiseálann sé."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} gníomhach"
-noRule = "Níl aon riail forfheidhmithe fós"
-subtitle = "Uathoibrithe seasta a dtéann gach cáipéis tríothu, beag beann ar an bpíblíne a láimhseálann í."
-title = "Cad a ritheann ar do PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Uasghrádaigh go Enterprise"
-configure = "Cumraigh"
 setUp = "Socraigh"
 
-[portal.policySummary.column]
-activeRule = "Riail ghníomhach"
-policy = "Beartas"
-status = "Stádas"
+[portal.processorFlow]
+footnote = "Tá na comhaireamh thar na 24 uair an chloig dheireanacha. Tá luas an tsreafa léiriúcháin."
+liveBadge = "Beo"
+stats = "{{connected}} ceangailte · {{processed}} PDF próiseáilte"
+title = "Próiseálaí PDF"
 
-[portal.policySummary.empty]
-description = "Nuair a bheidh beartais cumraithe, beidh na catagóirí le feiceáil anseo."
-title = "Níl aon bheartais fós"
+[portal.processorFlow.lens]
+ariaLabel = "Mód amhairc"
+flow = "Sreabhadh"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Gníomhach"
-off = "As"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Theip"
+heading = "Torthaí"
+success = "Seachadta"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} gníomhach"
+count = "{{n}} · 24h"
+heading = "Polasaithe"
+setUp = "Socraigh"
 soon = "Go luath"
 
-[portal.processingStatus]
-managePlan = "Bainistigh plean"
-volumeSuffix = "PDFs próiseáilte · 30 lá anuas"
+[portal.processorFlow.sankey]
+waist = "Polasaithe · {{n}} gníomhach"
+
+[portal.processorFlow.sankey.empty]
+description = "Ceangail foinse agus cuir polasaí ar siúl chun doiciméid a fheiceáil ag sreabhadh tríd an bpróiseálaí."
+title = "Níl aon sreabhadh fós"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Ceangail"
+editor = "Eagarthóir Stirling PDF"
+heading = "Foinsí"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Iontógáil ríomhphoist"
 
 [portal.procurement]
-reset = "Athshocraigh soláthar (taispeántas)"
 subtitle = "Faigh do fhoireann measúnaithe, conraithe agus ionduchtaithe. Gach cáipéis in aon áit amháin."
 title = "Soláthar"
 
-[portal.procurement.action]
-download = "Íoslódáil"
-pay = "Íoc anois"
-request = "Iarr"
-sign = "Athbhreithnigh & sínigh"
-upload = "Uaslódáil"
-
 [portal.procurement.agreement]
 agreeCta = "Aontaigh & liostáil"
+confidential = "Rúnda"
 confirm = "Tá Comhaontú Stirling Enterprise léite agam agus aontaím leis."
-eyebrow = "Comhaontú"
-intro = "Clúdaíonn comhaontú comhcheangailte amháin do mhargadh: Máistir-Chomhaontú Seirbhíse, Foirm Ordaithe, EULA, agus Comhaontú Próiseála Sonraí. Déan athbhreithniú air, ansin aontaigh chun glacadh leis an luachan mar shíntiús tiomanta."
-title = "Athbhreithnigh do chomhaontú enterprise"
+docName = "Comhaontú Fiontair Stirling"
+docSub = "MSA, Foirm Ordaithe, EULA agus DPA, comhcheangailte in aon síniú amháin."
+download = "Íoslódáil"
+downloadDraftError = "Níorbh fhéidir PDF an chomhaontaithe a ghiniúint - níl rindreálaí an doiciméid ar fáil. Bain triail eile as go gairid nó déan teagmháil le tacaíocht."
+downloadError = "Níorbh fhéidir an comhaontú sínithe a íoslódáil. Bain triail eile as."
+legalName = "Ainm an eintitis dhlíthiúil"
+legalNamePlaceholder = "An t-eintiteas dlíthiúil a shíneoidh"
+loadError = "Níorbh fhéidir an comhaontú a lódáil. Bain triail eile as."
+loading = "An comhaontú á lódáil..."
+ref = "Tag {{ref}} · {{version}}"
+requestChanges = "Iarr athruithe"
+scrollHint = "Scrollaigh le hathbhreithniú"
+signatory = "Ainm an tsínitheora"
+signatoryPlaceholder = "Ainm iomlán"
+signatoryTitle = "Teideal an tsínitheora"
+signatoryTitlePlaceholder = "m.sh. Abhcóide Ginearálta"
+signError = "Níorbh fhéidir do shíniú a thaifeadadh. Bain triail eile as."
 
 [portal.procurement.builder]
 addons = "Breiseáin"
+addressLine1 = "Seoladh líne 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Seoladh líne 2"
+addressLine2Placeholder = "Svuít, urlár, foirgneamh"
 back = "Ar ais"
 businessName = "Ainm gnó"
 businessNamePlaceholder = "Do chuideachta"
+city = "Cathair"
+cityPlaceholder = "San Francisco"
+completeRequired = "Comhlánaigh na réimsí riachtanacha (marcáilte *) le ríomhphost bailí sula ngintear an luachan."
+contactEmail = "Ríomhphost teagmhála"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Ainm teagmhála"
+contactNamePlaceholder = "Jane Doe"
 continue = "Lean ar aghaidh"
-country = "Tír"
-countryEuro = "Limistéar an euro (EUR €)"
-countryUK = "An Ríocht Aontaithe (GBP £)"
-countryUS = "Stáit Aontaithe Mheiriceá (USD $)"
+done = "Déanta"
 eula = "Tá Stirling Enterprise EULA léite agam agus aontaím leis. Rialaíonn sé an comhaontú a ghintear ón luachan seo."
 generate = "Gin luachan"
-included = "San áireamh"
 indemnification = "Slánaíocht IP"
 indemnificationSub = "Cosnaímid éilimh cháilitheacha IP, de réir an EULA"
-offlineLicense = "Ceadúnas as líne / air-gapped"
-offlineLicenseSub = "Comhad ceadúnais in-íoslódáilte le haghaidh instance self-hosted air-gapped"
+paperEyebrow = "Luachan fiontair"
+paperFor = "Ullmhaithe do"
+pdfSize = "Méid PDF"
+poNumber = "Uimhir PO"
+poNumberPlaceholder = "Roghnach"
+postalCode = "Cód poist"
+postalCodePlaceholder = "94105"
+posture = "Rialachas"
+posture_count = "~{{count}} polasaí"
+posture_essentials = "Bunriachtanais"
+posture_essentialsSub = "Aicmiú + Comhroinnt — na réamhshocruithe"
+posture_governed = "Rialaithe"
+posture_governedSub = "Cuireann Slándáil agus Ródú leis"
+posture_regulated = "Rialáilte"
+posture_regulatedSub = "Gach catagóir — Comhlíonadh, Coinneáil, Iontógáil"
 qbr = "Athbhreithnithe gnó ráithiúla"
 qbrSub = "Déanann do SE athbhreithniú ar úsáid agus treochlár gach ráithe"
+region = "Stát / réigiún"
+regionPlaceholder = "California"
 running = "{{annual}} / bl · {{years}} bl {{tcv}}"
 s1Sub = "D’fhoireann, agus na PDFs a bhfuil súil agat a rith gach bliain."
 s1Title = "Cé mhéad a phróiseálfaidh tú?"
@@ -7623,6 +8491,12 @@ s2Title = "Tiomantas agus seirbhís"
 s3Sub = "Don luachan agus don chomhaontú a ghineann sé."
 s3Title = "Do shonraí"
 serviceLevel = "Leibhéal seirbhíse"
+size_compact = "Dlúth"
+size_compactSub = "Téacs den chuid is mó, faoi 1 MB"
+size_heavy = "Trom"
+size_heavySub = "Scanta nó lán d'íomhánna, 5 MB+"
+size_standard = "Caighdeánach"
+size_standardSub = "Téacs agus íomhánna measctha, 1 go 5 MB"
 slDedicated = "Tiomnaithe"
 slDedicatedSub = "4 huaire gnó · bainisteoir cuntais tiomnaithe · +30%"
 slPriority = "Tosaíocht"
@@ -7630,6 +8504,8 @@ slPrioritySub = "An lá gnó céanna · CSM ainmnithe · +15%"
 slStandard = "Caighdeánach"
 slStandardSub = "An chéad lá gnó eile · CSM comhroinnte · san áireamh"
 stepOf = "Céim {{n}} as {{total}}"
+taxId = "VAT / ID cánach"
+taxIdPlaceholder = "Roghnach"
 term = "Téarma"
 termDiscount = "Cuireadh lascaine tiomantais ilbhliantúil {{pct}}% i bhfeidhm"
 title = "Tóg do luachan"
@@ -7637,6 +8513,7 @@ training = "Ionduchtú & oiliúint"
 trainingSub = "Seisiúin bheo chun d’fhoireann a chur ag obair"
 users = "Úsáideoirí iomlána"
 usersPlaceholder = "m.sh. 250"
+viewEula = "Léigh é"
 volEstimated = "Measta ó {{count}} úsáideoir (~2,000 PDFs an duine, uathoibriú san áireamh). Cuir in eagar é má tá eolas níos fearr agat."
 volManual = "Ag úsáid d’fhigiúir. Athmheas ó mhéid d’fhoirne am ar bith."
 volNoUsers = "Níl tú cinnte? Cuir isteach méid d’fhoirne agus meastóimid é."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "m.sh. 1,000,000"
 years_one = "{{count}} bhliain"
 years_other = "{{count}} bliana"
 
-[portal.procurement.docs]
-count_one = "{{count}} cháipéis"
-count_other = "{{count}} cháipéis"
-done = "Déanta"
-here = "Tá tú anseo"
-hide = "Folaigh"
-optional = "Roghnach"
-paidAddon = "Breiseán íoctha"
-show = "Taispeáin"
-subtitle = "Gach rud atá uait ag gach céim den turas, á thaispeáint de réir mar a bhogann an margadh tríd."
-supportingSubtitle = "SOC 2, athbhreithnithe slándála, foirmeacha cánach agus tuilleadh, réidh nuair a iarrann d’fhoireann slándála nó soláthair iad. Tá táille aonuaire ar chuid acu."
-supportingTitle = "Ag tacú le do mheasúnú"
-title = "Cáipéisí"
-upcoming = "Le teacht"
+[portal.procurement.documents]
+agreement = "Comhaontú Fiontair"
+agreementSub = "MSA, Foirm Ordaithe agus DPA in aon síniú amháin."
+download = "Íoslódáil"
+eula = "EULA & Téarmaí Tráchtála"
+eulaSub = "Téarmaí tráchtála na bogearraí agus féinseirbhíse."
+invoice = "Sonrasc"
+invoiceSub = "Do chéad sonrasc síntiúis."
+laterInvoice = "Ar fáil tar éis duit glacadh leis"
+laterQuote = "Ar fáil nuair a eisítear do luachan"
+quote = "Luachan"
+quoteSub = "Do luachan fiontair mionsonraithe."
+sla = "Iarscríbhinn SLA"
+slaSub = "Sraitheanna tacaíochta agus spriocanna freagartha."
+subprocessors = "Fophróiseálaithe"
+subprocessorsSub = "Tríú páirtithe a phróiseálann sonraí ar do shon."
+subtitle = "Do pháipéarachas margaidh, ar fáil am ar bith."
+title = "Doiciméid"
+view = "Féach"
 
 [portal.procurement.error]
 title = "Chuaigh rud éigin mícheart"
 
 [portal.procurement.hero]
-company = "Do mhargadh enterprise"
+barAria = "Céim {{current}} as {{total}}"
 ctaAgreement = "Athbhreithnigh & sínigh comhaontú"
-ctaLive = "Tá tú beo"
-ctaPayment = "Cuir íocaíocht leis"
+ctaExploring = "Socraigh do thriail"
 ctaQuote = "Athbhreithnigh do luachan"
+ctaReviewQuote = "Athbhreithnigh luachan"
 ctaTrial = "Tóg do luachan"
+documents = "Doiciméid"
 eyebrow = "Soláthar enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Tabhair cuireadh do chomhpháirtithe foirne"
-keyDocs = "Príomhcháipéisí"
-nextStep = "An chéad chéim eile: {{action}}"
-notStarted = "Gan tosú"
+licenseKey = "Eochair cheadúnais"
+liveSub = "Tá d'eagraíocht soláthraithe agus tá do cheadúnas gníomhach."
+liveTitle = "Tá tú beo ar Stirling Enterprise"
+next = "Ar aghaidh: {{stage}}"
 open = "Oscail soláthar"
 scheduleCall = "Sceideal glao"
-setup1Sub = "Tabhair cuireadh do do chomhpháirtithe foirne"
-setup1Title = "Imscar an PDF Editor"
-setup2Sub = "Cuir próiseáil ar siúl trasna eagarthóirí agus foinsí eile"
-setup2Title = "Ceangail an PDF Processor"
-setup3Sub = "Cuir Slándáil, Comhlíonadh, Ródú, nó Coinneáil ar siúl nuair a bhíonn siad uait"
-setup3Title = "Cuir beartais mholta leis"
+sentenceAgreement = "athbhreithniú agus síniú an chomhaontaithe"
+sentenceLive = "soláthar agus rolladh amach"
+sentencePayment = "ordú ceannaigh agus íocaíocht"
+sentenceQuote = "athbhreithniú agus glacadh le do luachan"
+sentenceTrial = "socraigh do spás oibre trialach"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} lá fágtha"
 daysLeft_other = "{{count}} lá fágtha"
-engineerLabel = "D’innealtóir réiteach"
-eyebrow = "Do chur i bhfeidhm"
-live = "Tá tú beo ar Stirling Enterprise"
-nextStep = "An chéad chéim eile: {{action}}"
-subtitle = "Tá d’innealtóir réiteach ar gach céim. Gníomh amháin eile ag an am; tá an seicliosta iomlán thíos."
-title = "Ó thriail go beo, cosán treoraithe amháin"
-trialTitle = "Triail Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Clúdaíonn síniú amháin MSA, foirm ordaithe, EULA agus DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Níorbh fhéidir an comhad ceadúnais as líne a ghiniúint fó
 downloadOffline = "Íoslódáil ceadúnas as líne (.lic)"
 hint = "Greamaigh an eochair seo isteach in instance self-hosted chun é a ghníomhachtú, nó coinnigh í do do thaifid. Coinnigh slán í."
 label = "D’eochair cheadúnais"
+subtitle = "Gníomhachtaigh ásc féin-óstáilte leis an eochair seo, nó coinnigh í do do thaifid."
+title = "D'eochair cheadúnais"
+trialFileHint = "Seo do chomhad ceadúnais trialach. Nuair a bheidh do chomhaontú i bhfeidhm, tar ar ais agus íoslódáil arís é — murab ionann agus an eochair cheadúnais ar líne, ní nuashonróidh an comhad .lic é féin."
 
 [portal.procurement.link]
 cta = "Nasc cuntas"
@@ -7739,65 +8619,62 @@ description = "Tá do shíntiús gníomhach agus tá do cheadúnas eisithe. Tá
 eyebrow = "Beo"
 title = "Tá tú beo ar Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Beidh eochracha trialach, luachana toirte tiomanta, an comhaontú aon-sínithe, íocaíocht, agus do mhórleabhar cáipéisí ar fad anseo nuair a thosóidh tú measúnú enterprise."
-eyebrow = "Enterprise amháin"
-talkToSales = "Labhair le díolacháin"
-title = "Osclaíonn rian an tsoláthair le Enterprise"
-
 [portal.procurement.milestone]
-accept = "Glac & lean ar aghaidh"
-description = "Íoslódáil an PDF chun é a roinnt le d’fhoireann, tar ar ais chun glacadh leis nuair atá tú réidh, nó déan athruithe."
-download = "Íoslódáil PDF"
 downloadError = "Níorbh fhéidir an PDF luachana a íoslódáil fós — bain triail eile as ar ball."
-edit = "Cuir luachan in eagar"
-eyebrow = "Luachan {{number}}"
-perYear = " / bl"
-preparedFor = "Ullmhaithe do {{company}}"
-tcv = "luach iomlán conartha {{value}}"
-title = "Tá do luachan réidh"
-
-[portal.procurement.modal]
-cancel = "Cealaigh"
-chooseFile = "Roghnaigh comhad"
-close = "Dún"
-downloadBody = "Tosóidh d’íoslódáil go gairid."
-downloadCta = "Íoslódáil"
-downloadTitle = "Íoslódáil"
-noFile = "Níl aon chomhad roghnaithe"
-payBody = "Íoc do chonradh tiomanta le cárta nó aistriú bainc trí Stripe. Soláthraítear do spás oibre chomh luath agus a ghlantar an íocaíocht."
-payCta = "Lean ar aghaidh go Stripe"
-payTitle = "Deimhnigh íocaíocht"
-requestBodyFree = "Ginimid é seo ar éileamh. Deimhnigh agus seolfaidh d’innealtóir réiteach chugat é go gairid."
-requestBodyPaid = "Is breiseán íoctha é seo. Deimhnigh agus déanfaidh d’innealtóir réiteach a raon a shainiú agus an páipéarachas a sheoladh."
-requestCta = "Iarr"
-requestTitle = "Iarr an cháipéis seo"
-signBody = "Osclaíonn sé Comhaontú Stirling Enterprise le haghaidh r-shínithe: clúdaíonn síniú amháin an MSA, foirm ordaithe, EULA agus DPA. Frithshínímid go huathoibríoch agus bogann tú ar aghaidh go híocaíocht."
-signCta = "Oscail le síniú"
-signTitle = "Athbhreithnigh agus sínigh do chomhaontú"
-uploadBody = "Seol do PO chugainn agus eiseoimid sonrasc ina choinne ar do théarmaí. Tarraing isteach an PDF nó roghnaigh comhad thíos."
-uploadCta = "Uaslódáil ordú ceannaigh"
-uploadTitle = "Uaslódáil d’ordú ceannaigh"
 
 [portal.procurement.payment]
 description = "Glacadh le do luachan agus tá do cheadúnas gníomhach cheana — is féidir le d’fhoireann tosú láithreach. Íoc an chéad sonrasc nuair atá tú réidh; is féidir leat é a íoc nó a íoslódáil anseo, gan ríomhphost de dhíth."
+downloadAgreement = "Íoslódáil comhaontú sínithe"
 downloadInvoice = "Íoslódáil sonrasc"
-simulate = "Insamhail íocaíocht faighte (taispeántas)"
+eyebrow = "Íocaíocht"
 title = "Cruthaíodh síntiús"
 viewInvoice = "Féach & íoc sonrasc"
 
+[portal.procurement.review]
+acceptCta = "Glac le luachan"
+annual = "Táille bhliantúil (bliain 1)"
+downloadCta = "Íoslódáil luachan"
+poNumber = "Ordú ceannaigh: {{po}}"
+renewal = "Athnuachan ag {{amount}}/bliain tar éis an téarma (+{{pct}}% CPI)"
+tcv = "Téarma {{years}} bliana, íoctha ina iomláine roimh ré: {{tcv}}"
+validUntil = "Bailí go dtí {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Níorbh fhéidir an sceidealóir a lódáil."
 fallbackLink = "Oscail sceidealú i gcluaisín nua"
+loading = "Sceidealóir á lódáil..."
 subtitle = "Treoróidh d’innealtóir réiteach d’fhoireann tríd an gcur i bhfeidhm. Roghnaigh am a oireann duit."
 title = "Sceideal glao"
 
-[portal.procurement.status]
-action = "Gníomh de dhíth"
-available = "Ar fáil"
-complete = "Críochnaithe"
-pending = "Ar feitheamh"
-request = "Ar iarratas"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Séalaithe, gan aon aschur"
+back = "Siar"
+businessName = "Ainm gnó"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Bainistithe, tosú is tapúla"
+continue = "Lean ar aghaidh"
+deployment = "Cá háit ar cheart é a imscaradh?"
+eula = "Aontaím le Stirling EULA & Téarmaí Tráchtála."
+fullName = "Ainm iomlán"
+fullNamePlaceholder = "D'ainm"
+invites = "Tabhair cuireadh do chomhghleacaithe · roghnach"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Sceidealaigh glao"
+seats = "Daoine ag tástáil"
+seatsPlaceholder = "m.sh. 15"
+selfhost = "Féin-óstáilte"
+selfhostSub = "Docker nó Kubernetes"
+start = "Tosaigh triail"
+stepOf = "Céim {{n}} as {{total}}"
+subtitle = "Saor in aisce ar feadh 14 lá, níl cárta ag teastáil."
+subtitleDetails = "Cúpla sonra do do luachan agus do chomhaontú."
+talkFirst = "B'fhearr leat labhairt ar dtús?"
+title = "Socraigh do thriail"
+viewEula = "Léigh é"
+workEmail = "Ríomhphost oibre"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Cuireann síneadh 7 lá leis agus cuireann sé d’innealtóir réiteach ar an eolas."
@@ -7808,20 +8685,6 @@ maxed = "Uasmhéadaithe"
 subtitle = "Maireann do thriail saor in aisce go dtí {{date}}. Níl cárta de dhíth."
 title = "Triail Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Praghsáil toirte tiomanta, SSO + SCIM + RBAC ar fud na heagraíochta, iniúchadh do-athraithe 90 lá, agus SE tiomnaithe."
-homeCta = "Tosaigh Triail →"
-homeHeadline = "Próiseáil na milliúin PDFs."
-
-[portal.recentActivity]
-title = "Gníomhaíocht le déanaí"
-viewAll = "Féach ar fad"
-
-[portal.recentActivity.empty]
-description = "Beidh ritheanna píblíne, imscarthaí agus teagmhais gníomhairí le feiceáil anseo."
-title = "Níl aon rud anseo fós"
-
 [portal.search]
 ariaLabel = "Cuardaigh"
 placeholder = "Cuardaigh Stirling — endpoints, píblínte, cáipéisí…"
@@ -7838,58 +8701,50 @@ admin = "Riarachán"
 [portal.settings.sections]
 account-link = "Nasc cuntais"
 
-[portal.shell.header]
-accountFallback = "Cuntas"
-accountMenu = "Roghchlár cuntais"
-darkMode = "Mód dorcha"
-lightMode = "Mód geal"
-search = "Cuardaigh"
-searchPlaceholder = "Cuardaigh…"
-signOut = "Sínigh amach"
-switchToDark = "Athraigh go téama dorcha"
-switchToLight = "Athraigh go téama geal"
-
 [portal.shell.sidebar]
 appEditor = "Eagarthóir"
 appProcessor = "Próiseálaí"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} cháipéis"
 linkAccount = "Nasc cuntas Stirling"
-planEditor = "Plean Eagarthóra"
-planEnterprise = "Plean Enterprise"
-planProcessor = "Plean Próiseálaí"
 primaryNav = "Príomh-nascleanúint"
 switchApp = "Athraigh aip"
 
+[portal.shell.topbar]
+closeNav = "Dún nascleanúint"
+openNav = "Oscail nascleanúint"
+search = "Cuardaigh"
+
 [portal.sources]
 subtitle = "Naisc ionchuir in-athúsáidte a chuireann cáipéisí isteach i Stirling. Cumraigh ceangal uair amháin, ansin tagair dó ó aon líon beartas. Cliceáil ró dá chumraíocht agus na beartais a úsáideann é."
 title = "Foinsí"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Ceangail foinse"
 
+[portal.sources.builder]
+back = "Ar ais chuig foinsí"
+backToTypes = "Gach cineál foinse"
+cancel = "Cealaigh"
+chooseHint = "Roghnaigh cá as a dtagann doiciméid. Tá nascóirí liathaithe ar an mbealach."
+comingSoon = "Ag teacht go luath"
+comingSoonHeading = "Ag teacht go luath"
+create = "Cruthaigh foinse"
+createTitle = "Ceangail foinse"
+delete = "Scrios"
+editTitle = "Cuir foinse in eagar"
+enabled = "Cumasaithe"
+save = "Sábháil athruithe"
+
+[portal.sources.builder.folderAccess]
+description = "Ní féidir le huathoibrithe fillteáin ach fillteáin atá ceadaithe ag riarthóir a úsáid. Cuir leis é faoi shocruithe Rochtana Fillteáin, ansin bain triail eile as."
+openSettings = "Socruithe Rochtana Fillteáin"
+title = "Níl an fillteán seo ceadaithe"
+
 [portal.sources.delete]
 body = "Scrios \"{{name}}\"? Ní féidir é seo a chealú. Bheadh ar bheartais a thagraíonn dó a bheith nuashonraithe."
 cancel = "Cealaigh"
 confirm = "Scrios"
 title = "Scrios foinse?"
 
-[portal.sources.detail]
-closeAriaLabel = "Dún sonraí"
-delete = "Scrios foinse"
-docs24h = "24h anuas"
-docs30d = "30 lá anuas"
-docsTotal = "Iomlán feicthe"
-docsTrend = "Cáipéisí le 30 lá anuas"
-documents = "Cáipéisí"
-edit = "Cuir in eagar"
-notReferenced = "Ní thagraíonn aon bheartas dó, mar sin tá sé sábháilte é a scriosadh."
-pause = "Cuir ar sos"
-resume = "Lean ar aghaidh"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Úsáidte ag"
-
 [portal.sources.empty]
 description = "Ceangail fillteán (agus, go luath, stóráil scamall) ionas go mbeidh áit ag do bheartais le cáipéisí a tharraingt uaithi."
 title = "Níl aon fhoinsí ceangailte fós"
@@ -7899,18 +8754,57 @@ inUse = "In úsáid"
 total = "Naisc"
 unused = "Gan úsáid"
 
+[portal.sources.networkFields.connection]
+helperText = "An nasc stóráilte le seoladh an fhreastalaí agus dintiúir. Athúsáidtear é ag gach foinse a thagraíonn dó."
+label = "Nasc"
+
+[portal.sources.networkFields.directory]
+helperText = "Fillteán ar an bhfreastalaí le polláil, i gcoibhneas leis an mbaile logála isteach nó fréamh an chomhroinnte. Fág bán don fhréamh."
+label = "Fillteán"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Baineann Consume gach comhad den fhreastalaí nuair a bhíonn gach polasaí tar éis é a phróiseáil."
+label = "Mód léitheoireachta"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: próiseáil gach comhad uair amháin"
+snapshot = "Snapshot: athléigh an fillteán gach rith"
+
+[portal.sources.networkFields.recursive]
+label = "Doimhneacht fillteáin"
+
+[portal.sources.networkFields.recursive.options]
+all = "Cuir fofhillteáin san áireamh"
+top = "Barrleibhéal amháin"
+
 [portal.sources.status]
 active = "Gníomhach"
 disabled = "Díchumasaithe"
 unused = "Gan úsáid"
 
 [portal.sources.table]
+documents = "Doiciméid"
 source = "Foinse"
 status = "Stádas"
 usedBy = "Beartais"
 
+[portal.sources.types.box]
+description = "Tarraing doiciméid ó fhillteáin Box atá roinnte ag d'fhoireann cheana féin."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Tarraing doiciméid ó fhillteán Dropbox comhroinnte."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Doiciméid atá próiseáilte ag d'fhoireann san eagarthóir, thar ritheanna polasaí agus AI."
 label = "Eagarthóir"
+noPolicies = "Níor rith aon pholasaithe ón eagarthóir fós."
+
+[portal.sources.types.email]
+description = "Tiontaigh ceangaltáin a sheoltar chuig bosca ríomhphoist tiomnaithe ina ndoiciméid."
+label = "Bosca isteach ríomhphoist"
 
 [portal.sources.types.folder]
 description = "Faire ar chomhadlann ar an bhfreastalaí le haghaidh cáipéisí nua."
@@ -7943,25 +8837,80 @@ label = "Doimhneacht fillteáin"
 all = "Cuir fofhillteáin san áireamh"
 top = "Barrleibhéal amháin"
 
+[portal.sources.types.ftp]
+description = "Polláil fillteán freastalaí FTP nó FTPS le haghaidh doiciméad nua."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Tarraing doiciméid ó fhillteáin Google Drive comhroinnte."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Faire ar chomhroinnt líonra SMB le haghaidh doiciméad nua."
+label = "Tiomántán líonra"
+
+[portal.sources.types.onedrive]
+description = "Faire ar fhillteáin OneDrive le haghaidh doiciméad nua."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Tarraing doiciméid ó bhuicéad Amazon S3 nó buicéad comhoiriúnach le S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "An nasc stóráilte ina bhfuil an buicéad agus dintiúir. Athúsáidtear é ag gach foinse agus aschur píblíne a thagraíonn dó."
+label = "Nasc"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Baineann Consume gach réad den bhuicéad nuair a bhíonn gach polasaí tar éis é a phróiseáil."
+label = "Mód léitheoireachta"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: próiseáil gach réad uair amháin"
+snapshot = "Snapshot: athléigh an buicéad gach rith"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Ní phróiseáiltear ach réada a dtosaíonn a n-eochracha leis an réimír seo."
+label = "Réimír eochrach"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Polláil fillteán titim SFTP le haghaidh doiciméad nua."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Tarraing doiciméid ó leabharlanna doiciméad SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Foinse"
 
+[portal.sources.types.webhook]
+createNote = "Gintear URL seachadta agus rún sínithe nuair a chruthaíonn tú an webhook seo. Seolann seoltóirí doiciméid le POST chuig an URL sin agus ritheann na polasaithe tagartha ar theacht dóibh."
+description = "Faigh doiciméid trí HTTP POST sínithe ó aon chóras seachtrach."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL seachadta"
+secretNote = "Taispeántar an rún sínithe uair amháin, nuair a chruthaítear an webhook. Athchruthaigh an fhoinse chun é a rolladh."
+
+[portal.sources.types.webhook.reveal]
+copy = "Cóipeáil"
+done = "Déanta"
+secret = "Rún sínithe"
+secretHelp = "Sínigh corp amh gach seachadta leis an eochair seo (HMAC-SHA256) agus seol é mar cheanntásc X-Stirling-Signature."
+secretWarning = "Cóipeáil an rún sínithe anois. Ar mhaithe le do shlándáil, ní thaispeántar é ach uair amháin agus ní féidir é a aisghabháil níos déanaí."
+title = "Webhook cruthaithe"
+url = "URL seachadta"
+usage = "Déan POST ar gach doiciméad mar chorp amh an iarratais chuig an URL seachadta le cineál ábhair binary (application/pdf nó application/octet-stream). Ritheann polasaithe tagartha go huathoibríoch ar theacht dóibh."
+
 [portal.sources.wizard]
-back = "Ar ais"
-cancel = "Cealaigh"
-continue = "Lean ar aghaidh"
-editTitle = "Cuir foinse in eagar"
 name = "Ainm"
 namePlaceholder = "m.sh. Glacadh éileamh"
-save = "Sábháil athruithe"
-subtitle = "Céim {{current}} as {{total}} · {{label}}"
-title = "Ceangail foinse"
 type = "Cineál"
 
-[portal.sources.wizard.steps]
-chooseType = "Roghnaigh cineál"
-configure = "Cumraigh"
-review = "Athbhreithnigh & ceangail"
+[portal.stepModal]
+close = "Dún"
 
 [portal.usage]
 managePayment = "Bainistigh Íocaíocht"
@@ -8021,16 +8970,9 @@ summary = "Is leis/léi foireann — bainistíonn sé/sí acmhainní a ball agus
 2 = "Rochtain portal tríd an mbeartas réamhshocraithe"
 3 = "Gach rud is féidir le Ball a dhéanamh"
 
-[portal.welcome]
-ariaLabel = "Fáilte go Stirling PDF"
-badge = "Open-source"
-installEditor = "Suiteáil an tEagarthóir"
-inviteTeammates = "Tabhair cuireadh do chomhpháirtithe foirne"
-openInBrowser = "Oscail sa bhrabhsálaí"
-perks = "Saor go deo · Self-hostable"
-subtitle = "Tá an PDF Editor is sláine ar domhan saor in aisce d’fhoirne de gach méid. Áirítear 60+ oibríocht PDF agus SSO."
-title = "Fáilte go"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Gan teorainn"
 
 [printFile]
 title = "Priontáil Comhad"
@@ -8613,6 +9555,14 @@ text = "Rothlaigh leathanaigh do PDF deiseal nó tuathalach i méaduithe 90 céi
 [rotate.tooltip.header]
 title = "Forléargas ar Shocruithe Rothlaithe"
 
+[ruler]
+clearAll = "Glan uile"
+hideAllLabels = "Folaigh gach lipéad"
+hideSmallLabels = "Folaigh lipéid bheaga"
+physicalValues = "Fisiciúil"
+scaled = "Scálaithe"
+showAllLabels = "Taispeáin gach lipéad"
+
 [sanitize]
 desc = "Bain eilimintí a d’fhéadfadh a bheith dochrach as comhaid PDF."
 sanitizationResults = "Torthaí Sláintiúcháin"
@@ -8654,31 +9604,45 @@ label = "Bain Meiteashonraí XMP"
 [sanitize.steps]
 settings = "Socruithe"
 
-[sanitizePdf]
-tags = "glan, slán, sábháilte, bain bagairtí"
-
 [sanitizePDF]
 title = "PDF sláintíocht"
 
+[sanitizePdf]
+tags = "glan, slán, sábháilte, bain bagairtí"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Coigeartaigh scála an leathanaigh"
 
+[scaleSettings]
+activeScale = "Scála Gníomhach"
+apply = "Cuir Scála i bhFeidhm"
+applyCalibration = "Cuir Calabrú i bhFeidhm"
+calculatedScale = "Scála ríofa"
+calibrate = "Calabraigh"
+calibrating = "Á chalabrú"
+calibrationDistanceRequired = "Cuir isteach fad fíorshaoil atá níos mó ná náid"
+calibrationInvalid = "Ní féidir scála a ríomh ón tomhas seo"
+calibrationPaperDistance = "Fad tomhaiste an leathanaigh: {{distance}}"
+calibrationTitle = "Calabraigh Scála"
+calibrationTooltip = "Tomhais fad aitheanta chun an scála a ríomh go huathoibríoch"
+customScale = "Scála Saincheaptha"
+noneSet = "Níl aon scála saincheaptha socraithe"
+presets = "Scálaí Réamhshocraithe"
+ratio = "Cóimheas Scála"
+ratioHelp = "Cóimheas: 1 aonad leathanaigh = X aonad fíorshaoil"
+ratioPlaceholder = "m.sh., 100"
+ratioPositive = "Caithfidh an cóimheas a bheith níos mó ná náid"
+ratioRequired = "Tá cóimheas riachtanach"
+realDistance = "Fad fíorshaoil"
+realDistancePlaceholder = "m.sh., 5"
+reset = "Athshocraigh go Réamhshocruithe"
+unit = "Aonad"
+unitInvalid = "Aonad neamhbhailí: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Tairseach Uillinn:"
-10 = "Socraíonn sé méid na teorann a chuirtear leis agus a bhaintear chun teorainneacha bán a chosc san aschur (réamhshocraithe: 1)."
-2 = "Socraíonn sé an uillinn iomlán íosta a theastaíonn chun an íomhá a rothlú (réamhshocraithe: 10)."
-3 = "Caoinfhulaingt:"
-4 = "Cinneann an raon éagsúlachta dath timpeall an dath cúlra measta (réamhshocraithe: 30)."
-5 = "Achar Íosta:"
-6 = "Socraíonn sé an tairseach achair íosta le haghaidh grianghraf (réamhshocraithe: 10000)."
-7 = "Íos-Limistéar Comhrianta:"
-8 = "Socraíonn sé an tairseach íosta achar comhrianta le haghaidh grianghraf"
-9 = "Méid na Teorann:"
-
 [scannerImageSplit]
 submit = "Bain Scananna Íomhá"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Cad a dhéanann sé seo"
 whatThisDoesDesc = "Aimsíonn agus bainann sé gach grianghraf ó leathanach scanta nó íomhá chomhdhéanta go huathoibríoch—gan barradh láimhe."
 whenToUse = "Cathain le húsáid"
 
+[ScannerImageSplit.selectText]
+1 = "Tairseach Uillinn:"
+10 = "Socraíonn sé méid na teorann a chuirtear leis agus a bhaintear chun teorainneacha bán a chosc san aschur (réamhshocraithe: 1)."
+2 = "Socraíonn sé an uillinn iomlán íosta a theastaíonn chun an íomhá a rothlú (réamhshocraithe: 10)."
+3 = "Caoinfhulaingt:"
+4 = "Cinneann an raon éagsúlachta dath timpeall an dath cúlra measta (réamhshocraithe: 30)."
+5 = "Achar Íosta:"
+6 = "Socraíonn sé an tairseach achair íosta le haghaidh grianghraf (réamhshocraithe: 10000)."
+7 = "Íos-Limistéar Comhrianta:"
+8 = "Socraíonn sé an tairseach íosta achar comhrianta le haghaidh grianghraf"
+9 = "Méid na Teorann:"
+
 [search]
 noResults = "Níor aimsíodh torthaí"
 placeholder = "Iontráil téarma cuardaigh..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Tá do fhreastalaí Stirling-PDF as líne agus níl \
 [session]
 expired = "Tá do sheisiún imithe in éag. Athnuaigh an leathanach agus bain triail eile as."
 
-[sessionManagement.tooltip]
-header = "Bainistiú Seisiúin Shínithe"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Cuirtear rannpháirtithe nua leis ag deireadh an orduithe sínithe"
-bullet2 = "Ní féidir rannpháirtithe a chur leis tar éis an seisiún a bheith críochnaithe"
-bullet3 = "Faigheann gach rannpháirtí fógra nuair is é a seal é"
-description = "Is féidir leat níos mó rannpháirtithe a chur le seisiún gníomhach am ar bith roimh an gcríochniú."
-title = "Rannpháirtithe a Chur Leis"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Críochnú iomlán</b>: Tá gach rannpháirtí tar éis síniú"
-bullet2 = "<b>Críochnú páirteach</b>: Níl cuid de na rannpháirtithe tar éis síniú fós"
-bullet3 = "Ní áireofar rannpháirtithe gan síniú sa doiciméad deiridh"
-bullet4 = "Nuair a bheidh sé críochnaithe, is féidir an PDF sínithe a lódáil isteach sna comhaid ghníomhacha"
-description = "Comhcheanglaíonn an críochnú gach síniú isteach i PDF sínithe amháin. Ní féidir an gníomh seo a chur ar ceal."
-title = "Críochnú an tSeisiúin"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Ní féidir rannpháirtithe a bhaint a bhfuil síniú déanta acu cheana"
-bullet2 = "Ní bhfaighidh rannpháirtithe bainte fógraí a thuilleadh"
-bullet3 = "Coigeartaítear ord an tsínithe go huathoibríoch"
-description = "Is féidir rannpháirtithe a bhaint as seisiúin sula síníonn siad."
-title = "Rannpháirtithe a Bhaint"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Cuirtear gach síniú i bhfeidhm ar an PDF go seicheamhach"
-bullet2 = "Is féidir le sínitheoirí níos déanaí sínithe níos luaithe a fheiceáil"
-bullet3 = "Riachtanach do shreabha oibre formheasa agus do shlabhraí coimeádta dlíthiúla"
-description = "Socraíonn an t-ord a shonraíonn tú nuair a chruthaíonn tú an seisiún cé a shíníonn ar dtús."
-title = "Ord an tSínithe"
-
 [settings]
 close = "Dún"
 
+[settings.ai]
+documents = "Doiciméid & RAG"
+general = "Ginearálta"
+limits = "Teorainneacha & Feidhmíocht"
+models = "Samhlacha & Soláthraithe"
+title = "AI"
+
 [settings.configuration]
 advanced = "Ardroghanna"
 database = "Bunachar Sonraí"
 endpoints = "Deirphointí"
 features = "Gnéithe"
+folderAccess = "Rochtain ar Fhillteáin"
 mcp = "MCP Server"
 storageSharing = "Stóráil Comhad agus Comhroinnt"
 systemSettings = "Socruithe Córais"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Eagarthóir PDF réamhshocraithe"
 defaultPdfEditorActive = "Is é Stirling PDF d’eagarthóir PDF réamhshocraithe"
 defaultPdfEditorChecking = "Á sheiceáil..."
 defaultPdfEditorInactive = "Tá feidhmchlár eile socraithe mar réamhshocrú"
+defaultPdfEditorRemind = "Cuir i gcuimhne dom é a shocrú mar réamhshocrú"
+defaultPdfEditorRemindDescription = "Taispeáin meirge nuair nach é Stirling PDF d'fheidhmchlár PDF réamhshocraithe."
 defaultPdfEditorSet = "Réamhshocraithe Cheana"
 defaultStartupView = "Amharc réamhshocraithe ar thosú"
 defaultStartupViewDescription = "Roghnaigh cén cluaisín a bheidh gníomhach sa cholún clé nuair a thosaíonn an aip"
@@ -8817,9 +9771,18 @@ languageDescription = "Roghnaigh an teanga taispeána"
 logout = "Logáil amach"
 setAsDefault = "Socraigh mar Réamhshocraithe"
 theme = "Téama"
+themeAccent = "Dath béime"
+themeAccentCustom = "Dath saincheaptha"
+themeAccentCustomHint = "Saincheaptha (moltar na réamhshocruithe)"
+themeAccentDark = "Dath béime i mód dorcha"
+themeAccentDefault = "Réamhshocrú"
+themeAccentDefaultHint = "Téama réamhshocraithe (molta)"
+themeAccentDescription = "Leanann cnaipí, naisc agus buaicphointí é, agus cuireann sé tint chaolchúiseach ar an aip. Tá ceann ar leith ag an mód éadrom agus ag an mód dorcha. Úsáideann an córas cibé ceann atá gníomhach."
+themeAccentLight = "Dath béime i mód éadrom"
 themeDark = "Dorcha"
 themeDescription = "Athraigh idir mód geal agus mód dorcha"
 themeLight = "Geal"
+themeReset = "Cuir an téama ar ais chuig an réamhshocrú"
 themeSystem = "System"
 title = "Ginearálta"
 user = "Úsáideoir"
@@ -8833,6 +9796,12 @@ intro = "Cumasaigh fíordheimhniú úsáideoirí, bainistíocht foirne, agus gn
 learnMore = "Tuilleadh eolais sa doiciméadú"
 title = "Do Riarthóirí Córais"
 
+[settings.general.loginLanding]
+description = "Roghnaigh cén aip a osclaítear nuair a shíníonn tú isteach i Stirling Cloud."
+editor = "Eagarthóir"
+processor = "Próiseálaí"
+title = "Tar éis síniú isteach"
+
 [settings.general.mode]
 fullscreen = "Lánscáileán"
 sidebar = "Barra taoibh"
@@ -9041,6 +10010,11 @@ security = "Slándáil"
 telegram = "Telegram"
 title = "Slándáil agus Fíordheimhniú"
 
+[settings.signOut]
+confirm = "An bhfuil tú cinnte gur mhaith leat síniú amach?"
+submit = "Sínigh amach"
+title = "Sínigh amach"
+
 [settings.team]
 title = "Foireann"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Uaslódáil chuig an bhfreastalaí"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "cliceáil anseo"
+fallback = "Mura n-osclaíodh é go huathoibríoch,"
+opening = "Swagger UI á oscailt i gcluaisín nua..."
 tags = "api,doiciméadú,swagger,críochphointí,forbairt"
 title = "Doiciméadú API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Roghnaigh comhaid i gComhaid Gníomhacha chun an uirlis seo a
 singleFileScope = "Á chur i bhfeidhm ar: {{fileName}} amháin"
 viewerMode = "Athraigh go dtí an t-eagarthóir comhad chun roinnt comhad a roghnú."
 
+[toolFormat]
+ANY = "comhad ar bith"
+CBR = "cartlann leabhair ghrinn (CBR)"
+CBZ = "cartlann leabhair ghrinn (CBZ)"
+CSV = "comhad CSV"
+EBOOK = "ríomhleabhar"
+EMAIL = "ríomhphost"
+EXCEL = "scarbhileog"
+HTML = "leathanach gréasáin"
+IMAGE = "íomhánna"
+JAVASCRIPT = "comhad JavaScript"
+JSON = "comhad JSON"
+MARKDOWN = "comhad Markdown"
+NONE = "gan chomhad"
+PCL = "comhad priontála PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF cosanta le pasfhocal"
+POSTSCRIPT = "comhad PostScript"
+PPT = "cur i láthair"
+TEXT = "comhad téacs"
+VIDEO = "físeán"
+WORD = "doiciméad Word"
+XML = "comhad XML"
+XPS = "doiciméad XPS"
+ZIP = "cartlann ZIP"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Ar ais go dtí na huirlisí go léir"
 collapse = "Laghdaigh painéal"
 expand = "Leathnaigh painéal"
 goBack = "Téigh ar ais"
+pdfTools = "Uirlisí PDF"
 placeholder = "Roghnaigh uirlis chun tosú"
 premiumFeature = "Gné Préimhe:"
+searchTools = "Cuardaigh uirlisí"
 toolsHeader = "Uirlisí"
 viewAllTools = "Féach ar gach uirlis"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Níor aimsíodh uirlisí"
 quickAccess = "ROCHTAIN THAPA"
 searchPlaceholder = "Cuardaigh uirlisí..."
 
-[toolPicker.categories]
-advancedTools = "Uirlisí Casta"
-recommendedTools = "Uirlisí Molta"
-standardTools = "Uirlisí Caighdeánacha"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formáidiú Casta"
 automation = "Uathoibriú"
@@ -9950,16 +10950,31 @@ title = "Úsáideoirí"
 you = "(tusa)"
 
 [users.action]
+cancelInvite = "Cealaigh cuireadh"
 deleteTeam = "Scrios foireann"
 disableMfa = "Athshocraigh MFA"
 move = "Bog chuig foireann"
 reinstate = "Athbhunaigh"
 remove = "Bain ón eagraíocht"
+removeTeam = "Bain den fhoireann"
 rename = "Athainmnigh foireann"
 resetPw = "Athshocraigh pasfhocal"
 suspend = "Cuir ar fionraí"
 unlock = "Díghlasáil cuntas"
 
+[users.activity]
+daysAgo = "{{count}} lá ó shin"
+hoursAgo = "{{count}} uair ó shin"
+justNow = "Anois díreach"
+minutesAgo = "{{count}} nóim ó shin"
+monthsAgo_one = "{{count}} mhí ó shin"
+monthsAgo_other = "{{count}} mí ó shin"
+never = "Riamh"
+weeksAgo_one = "{{count}} seachtain ó shin"
+weeksAgo_other = "{{count}} seachtain ó shin"
+yearsAgo_one = "{{count}} bhliain ó shin"
+yearsAgo_other = "{{count}} bliana ó shin"
+
 [users.cap]
 addProcessor = "+ Próiseálaí"
 approver = "Faomhann beartas"
@@ -9967,11 +10982,14 @@ editor = "Eagarthóir"
 processor = "Próiseálaí"
 
 [users.confirm]
+cancelInviteBody = "Cealaigh an cuireadh chuig {{email}}? Ní bheidh siad in ann dul isteach leis an nasc reatha."
+cancelInviteTitle = "Cealaigh cuireadh"
 deleteTeamBody = "Scrios an fhoireann {{name}}? Caithfidh an fhoireann a bheith folamh ar dtús - bog a baill chuig foireann eile, agus ní féidir léi aon chumraíochtaí comhtháthaithe a bheith fós ina húinéireacht."
 deleteTeamTitle = "Scrios foireann"
 disableMfaBody = "Bain clárú MFA {{name}}? Socróidh siad arís é ar an gcéad logáil isteach eile má tá gá leis."
 disableMfaTitle = "Athshocraigh MFA"
 removeBody = "Bain {{name}} go buan ón eagraíocht? Ní féidir é seo a chealú."
+removeTeamBody = "Bain {{name}} den fhoireann? Coinneoidh siad a gcuntas ach caillfidh siad rochtain ar acmhainní na foirne seo."
 removeTitle = "Bain ball"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Ainm úsáideora"
 usernameError = "Caithfidh an t-ainm úsáideora a bheith 3 charachtar ar a laghad"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Cuireadh ó {{who}}"
+cancel = "Cealaigh"
+count = "{{count}} ar feitheamh"
+desc = "Daoine ar tugadh cuireadh dóibh nár tháinig isteach fós. Coinníonn siad suíochán go dtí go nglacann siad leis."
+expiresInDays_one = "Rachaidh sé in éag i gceann {{count}} lá"
+expiresInDays_other = "Rachaidh sé in éag i gceann {{count}} lá"
+expiresToday = "Rachaidh sé in éag inniu"
+title = "Cuirí ar feitheamh"
+
 [users.loadError]
 description = "Chuaigh rud éigin mícheart agus an backend á bhaint amach, nó níl rochtain agat. Bain triail eile as."
 title = "Níorbh fhéidir baill a lódáil"
@@ -10212,9 +11240,11 @@ title = "Iatáin"
 
 [viewer.bookmarks]
 bookmarkTitle = "Teideal an leabharmhairc"
+bookmarkTitleRequired = "Tá teideal an leabharmhairc riachtanach"
 closeSidebar = "Dún barra taoibh na leabharmharcanna"
 collapseAll = "Laghdaigh gach leabharmharc"
 expandAll = "Leathnaigh gach leabharmharc"
+searchPlaceholder = "Cuardaigh leabharmharcanna"
 
 [viewer.comments]
 addComment = "Cuir trácht leis"
@@ -10605,30 +11635,6 @@ title = "Téacs an Chomhartha Uisce"
 image = "Íomhá"
 text = "Téacs"
 
-[wetSignature.tooltip]
-header = "Modhanna chun síniú a chruthú"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Saincheap dath agus tiús an pheann"
-bullet2 = "Glan agus tarraing arís go dtí go mbeidh tú sásta"
-bullet3 = "Oibríonn ar ghléasanna tadhaill (táibléid, fóin)"
-description = "Cruthaigh síniú lámhscríofa le do luchóg nó le do scáileán tadhaill. Is fearr é do shínithe pearsanta, barántúla."
-title = "Tarraing síniú"
-
-[wetSignature.tooltip.type]
-bullet1 = "Roghnaigh as iliomad clónna"
-bullet2 = "Saincheap méid agus dath an téacs"
-bullet3 = "Foirfe do shínithe caighdeánaithe"
-description = "Gin síniú ó théacs clóscríofa. Tapa agus comhsheasmhach, oiriúnach do cháipéisí gnó."
-title = "Clóscríobh síniú"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Tacaíonn sé le PNG, JPG, agus formáidí íomhá eile"
-bullet2 = "Moltar cúlraí trédhearcacha chun na torthaí is fearr a bhaint amach"
-bullet3 = "Athrófar méid na híomhá chun an limistéar sínithe a oiriúnú"
-description = "Uaslódáil íomhá sínithe réamhdhéanta. Oiriúnach má tá síniú scanta nó lógó cuideachta agat."
-title = "Uaslódáil íomhá sínithe"
-
 [workbenchBar]
 activeFiles = "Comhaid ghníomhacha"
 annotations = "Anótálacha"
@@ -10652,6 +11658,7 @@ redact = "Ceil"
 rotateLeft = "Rothlaigh go clé"
 rotateRight = "Rothlaigh go deas"
 ruler = "Rialóir / Tomhas"
+rulerSettings = "Socruithe Scála"
 save = "Sábháil"
 saveAll = "Sábháil gach comhad"
 saveAs = "Sábháil mar"
diff --git a/frontend/editor/public/locales/hi-IN/translation.toml b/frontend/editor/public/locales/hi-IN/translation.toml
index 6f19aa1c0b..0b6b14f68f 100644
--- a/frontend/editor/public/locales/hi-IN/translation.toml
+++ b/frontend/editor/public/locales/hi-IN/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "फ़ाइलें चयनित"
 font = "फ़ॉन्ट"
 fontSizeTooltip = "पॉइंट्स में पृष्ठ संख्या के टेक्स्ट का आकार। बड़ी संख्या बड़ा टेक्स्ट बनाती है।"
 fontTypeTooltip = "पृष्ठ संख्याओं के लिए फ़ॉन्ट परिवार। अपने दस्तावेज़ शैली के आधार पर चुनें।"
-genericSubmit = "जमा करें"
 green = "हरा"
 help = "सहायता"
-imgPrompt = "छवि(यां) चुनें"
 incorrectPasswordMessage = "वर्तमान पासवर्ड गलत है।"
 info = "जानकारी"
 invalidUndoData = "पूर्ववत नहीं कर सकते: अमान्य ऑपरेशन डेटा"
@@ -62,7 +60,6 @@ loginAgreementTitle = "लॉगिन समझौता"
 logOut = "लॉग आउट"
 marginTooltip = "पृष्ठ संख्या और पृष्ठ की किनारी के बीच की दूरी।"
 moreOptions = "अधिक विकल्प"
-multiPdfPrompt = "पीडीएफ फ़ाइलें चुनें (2+)"
 never = "कभी नहीं"
 no = "नहीं"
 noFileSelected = "कोई फ़ाइल चयनित नहीं है। कृपया एक अपलोड करें।"
@@ -80,7 +77,6 @@ pageOrderPrompt = "कस्टम पृष्ठ क्रम (पृष्ठ
 pages = "पृष्ठ"
 pageSelectionPrompt = "कस्टम पृष्ठ चयन (पृष्ठ संख्याओं 1,5,6 या 2n+1 जैसे फ़ंक्शन की अल्पविराम से अलग सूची दर्ज करें):"
 password = "पासवर्ड"
-pdfPrompt = "पीडीएफ फ़ाइल(ें) चुनें"
 pin = "फ़ाइल पिन करें (टूल चलने के बाद सक्रिय रखें)"
 pro = "प्रो"
 processingComplete = "आपकी फ़ाइल तैयार है।"
@@ -356,6 +352,7 @@ text = "ये अनुमतियाँ तय करती हैं कि
 title = "अनुमतियां बदलें"
 
 [addStamp]
+preview = "स्टैम्प का पूर्वावलोकन"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "मैन्युअल डाउनलोड: लिंक प
 noLanguages = "कॉन्फ़िगर की गई डायरेक्टरी में कोई tessdata भाषा नहीं मिली।"
 permissionNotice = "tessdata पाथ पर लिखना संभव नहीं है। डाउनलोड ब्राउज़र में खुलेंगे; कृपया .traineddata फ़ाइलें मैन्युअल रूप से tessdata फ़ोल्डर में सहेजें।"
 
+[admin.settings.ai.documents]
+description = "दस्तावेज़ों पर प्रश्नों के उत्तर देने के लिए उपयोग किए जाने वाले एम्बेडिंग मॉडल और रिट्रीवल सेटिंग्स कॉन्फ़िगर करें। सहेजने पर AI engine पर लागू होता है।"
+title = "दस्तावेज़ और RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "engine के अपने environment credential का उपयोग करने के लिए खाली छोड़ें। स्वयं-होस्टेड single-engine deployments पर लागू होता है।"
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "सहेजा गया - वर्तमान key रखने के लिए खाली छोड़ें"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI-compatible / Ollama embeddings endpoint का Base URL, जैसे http://ollama:11434/v1। किसी विश्वसनीय internal endpoint की ओर इशारा करना चाहिए (SSRF-संवेदनशील)।"
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding model नाम। मुक्त टेक्स्ट; सुझाव केवल संकेत हैं।"
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "दस्तावेज़ टेक्स्ट को vector embeddings में बदलने के लिए उपयोग किया गया provider।"
+label = "Embedding provider"
+
+[admin.settings.ai.documents.maxSearches]
+description = "प्रति request agent द्वारा चलाए जा सकने वाले retrieval searches की अधिकतम संख्या।"
+label = "अधिकतम खोजें"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Embedding model बदलना तुरंत प्रभावी होता है, लेकिन पिछले model से indexed दस्तावेज़ों को सही खोज परिणाम लौटाने के लिए फिर से index करना होगा।"
+title = "Re-index आवश्यक"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "यदि आपने embedding model बदला है, तो मौजूदा दस्तावेज़ों को re-index करें ताकि खोज नया model उपयोग करे।"
+
+[admin.settings.ai.documents.topK]
+description = "प्रति खोज प्राप्त किए गए सबसे प्रासंगिक chunks की संख्या।"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling को Python AI engine से कनेक्ट करें और चुनें कि कौन-सी AI क्षमताएँ उपलब्ध कराई जाएँ। बदलाव restart पर लागू होते हैं।"
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "व्यक्तिगत AI सुविधाओं को चालू या बंद करें। अक्षम सुविधाएँ app में छिपी रहती हैं।"
+title = "क्षमताएँ"
+
+[admin.settings.ai.general.enabled]
+description = "मुख्य switch। बंद होने पर कोई AI tools, agents, या engine calls उपलब्ध नहीं होते।"
+label = "AI सक्षम करें"
+
+[admin.settings.ai.general.features.chat]
+description = "PDFs के साथ काम करने के लिए संवादात्मक assistant।"
+label = "Chat assistant"
+
+[admin.settings.ai.general.features.classify]
+description = "दस्तावेज़ों को प्रकार या सामग्री के आधार पर स्वचालित रूप से वर्गीकृत करें।"
+label = "दस्तावेज़ वर्गीकरण"
+
+[admin.settings.ai.general.features.createPdf]
+description = "AI agent के माध्यम से नया PDF बनाएँ (जैसे HTML से)।"
+label = "prompt से PDF बनाएँ"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "प्रश्न पूछें और uploaded दस्तावेज़ पर आधारित उत्तर पाएँ।"
+label = "दस्तावेज़ प्रश्न"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "गणितीय और संख्यात्मक त्रुटियों के लिए दस्तावेज़ों की समीक्षा करें।"
+label = "Math auditor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "PDF में AI-लिखित समीक्षा टिप्पणियाँ और annotations जोड़ें।"
+label = "PDF comment agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "दस्तावेज़ generation जैसे भारी agent operations के लिए timeout।"
+label = "लंबे समय तक चलने वाला timeout (seconds)"
+
+[admin.settings.ai.general.note]
+body = "AI engine एक अलग service के रूप में चलता है। इसका shared secret"
+body2 = "container environment variable के माध्यम से सेट किया जाता है। Provider API keys इन pages पर दर्ज की जा सकती हैं या engine environment variables के रूप में दी जा सकती हैं; यहाँ दर्ज keys सहेजने पर engine को भेजी जाती हैं।"
+title = "AI engine के बारे में"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "streamed (token-by-token) chat responses के लिए timeout।"
+label = "Stream timeout (seconds)"
+
+[admin.settings.ai.general.test]
+button = "connection test करें"
+failBody = "AI engine ने response नहीं दिया। URL जाँचें, engine container चल रहा है या नहीं जाँचें, और AI सक्षम है या नहीं जाँचें (सक्षम करने के बाद restart आवश्यक है)।"
+failTitle = "AI engine पहुँच योग्य नहीं"
+okBody = "AI engine ने health check का response दिया।"
+okTitle = "AI engine पहुँच योग्य है"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "engine के लिए standard AI requests का timeout।"
+label = "Request timeout (seconds)"
+
+[admin.settings.ai.general.url]
+description = "Python AI engine का internal URL, जैसे http://stirling-pdf-engine:5001।"
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "AI requests कितना काम कर सकती हैं और कितनी साथ-साथ चल सकती हैं, इसके लिए guardrails। सहेजने पर AI engine पर लागू होता है।"
+title = "सीमाएँ और प्रदर्शन"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Guardrail: ऐसे AI requests अस्वीकार करें जिनका extracted text इस लंबाई से अधिक हो।"
+label = "प्रति request अधिकतम characters"
+
+[admin.settings.ai.limits.maxPages]
+description = "Guardrail: इतने PDF pages से अधिक वाले AI requests अस्वीकार करें।"
+label = "प्रति request अधिकतम pages"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "पूरे engine में एक साथ चल रहे in-flight model calls की अधिकतम संख्या।"
+label = "Model max concurrency"
+
+[admin.settings.ai.models]
+description = "LLM provider और AI engine द्वारा उपयोग किए जाने वाले smart/fast models चुनें। सहेजने पर AI engine पर लागू होता है।"
+title = "Models और Providers"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "engine के अपने environment credential का उपयोग करने के लिए खाली छोड़ें। स्वयं-होस्टेड single-engine deployments पर लागू होता है।"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "सहेजा गया - वर्तमान key रखने के लिए खाली छोड़ें"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI-compatible / Ollama endpoint का Base URL, जैसे http://ollama:11434/v1।"
+label = "Provider base URL"
+warning = "base URL किसी विश्वसनीय internal endpoint की ओर इशारा करना चाहिए। engine इसे server-side requests करेगा, इसलिए अविश्वसनीय value SSRF-संवेदनशील है।"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "fast model के लिए अधिकतम output tokens।"
+label = "Fast model max tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "हल्के tasks के लिए सस्ता, तेज़ model। मुक्त टेक्स्ट; सुझाव केवल संकेत हैं।"
+label = "Fast model"
+
+[admin.settings.ai.models.provider]
+description = "engine किस LLM provider से बात करता है।"
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "smart model के लिए अधिकतम output tokens।"
+label = "Smart model max tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "जटिल reasoning के लिए उच्च-क्षमता वाला model। मुक्त टेक्स्ट; सुझाव केवल संकेत हैं।"
+label = "Smart model"
+
+[admin.settings.ai.saved]
+body = "बदलाव AI engine को स्वचालित रूप से भेज दिए जाते हैं।"
+bodyNoPush = "Settings सहेजी गईं। अगली बार जब AI engine अपनी configuration लेगा, तब वे लागू होंगी।"
+title = "AI settings सहेजी गईं"
+
 [admin.settings.badge]
 clickToUpgrade = "प्लान विवरण देखने के लिए क्लिक करें"
 
@@ -938,6 +1094,25 @@ label = "स्टार्टअप पर पुनः जेनरेट क
 description = "सर्टिफ़िकेट वैध रहने के दिनों की संख्या"
 label = "सर्टिफ़िकेट वैधता (दिन)"
 
+[admin.settings.folderAccess]
+description = "वे directories जिनसे folder sources और folder outputs को पढ़ने और लिखने की अनुमति है। यह एक security boundary है: automations को इस list के बाहर किसी server path पर कभी point नहीं किया जा सकता।"
+securityNote = "folder sources और outputs को पूरी तरह अक्षम करने के लिए इसे खाली छोड़ें। Stirling की अपनी configuration directory हमेशा प्रतिबंधित रहती है।"
+title = "Folder Access"
+
+[admin.settings.folderAccess.implied]
+description = "Stirling-managed ये directories हमेशा अनुमत हैं और यहाँ बदली नहीं जा सकतीं।"
+serverStorage = "Server file storage"
+title = "हमेशा अनुमत"
+watchedFolder = "Pipeline watched folder"
+
+[admin.settings.folderAccess.roots]
+add = "जोड़ें"
+empty = "कोई folders अनुमत नहीं। Folder sources और outputs फिलहाल अक्षम हैं।"
+hint = "absolute paths दर्ज करें, उदाहरण के लिए /data/inbox।"
+label = "Allowed folder roots"
+placeholder = "/data/inbox"
+remove = "folder root हटाएँ"
+
 [admin.settings.general]
 description = "ब्रांडिंग और डिफ़ॉल्ट व्यवहार सहित सिस्टम-व्यापी एप्लिकेशन सेटिंग्स कॉन्फ़िगर करें।"
 system = "सिस्टम"
@@ -1842,6 +2017,15 @@ export = "एक्सपोर्ट"
 accessDenied = "पहुँच अस्वीकृत"
 insufficientPermissions = "आपके पास यह क्रिया करने की अनुमति नहीं है."
 
+[auth.callback]
+completing = "authentication पूरा हो रहा है"
+invalidToken = "OAuth login विफल - invalid token।"
+missingToken = "OAuth login विफल - कोई token प्राप्त नहीं हुआ।"
+oauthFailed = "OAuth login विफल। कृपया फिर से प्रयास करें।"
+pleaseWait = "कृपया प्रतीक्षा करें, हम आपका sign in पूरा कर रहे हैं।"
+signedOut = "आप sign out हो गए हैं। कृपया फिर से sign in करें।"
+windowMayClose = "पूरा होने पर आप यह window बंद कर सकते हैं।"
+
 [auth.displayName]
 guest = "अतिथि"
 user = "उपयोगकर्ता"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "JavaScript और एम्बेडेड फ़ाइल
 description = "यह टूल सामग्री के आधार पर PDF फ़ाइलों का नाम स्वतः बदल देगा। यह दस्तावेज़ का विश्लेषण कर पाठ से सबसे उपयुक्त शीर्षक खोजता है।"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "ऑटो रोटेट"
+tags = "ऑटो रोटेट,orientation ठीक करें,उल्टा,बगल की ओर,सीधा करें,orient,orientation detect करें,rotation सही करें,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Confidence threshold"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "OCR only"
+text = "Text only"
+title = "Detection method"
+
+[autoRotate.error]
+failed = "PDF को auto-rotate करते समय error हुआ।"
+
+[autoRotate.inferUndetected]
+title = "कम confidence pages को मिलान के लिए घुमाएँ"
+
+[autoRotate.report]
+applied = "{{degrees}}° CW"
+confidenceValue = "Confidence {{value}}"
+noChange = "कोई बदलाव नहीं"
+pageLabel = "Page {{number}}"
+summary = "{{total}} pages में से {{rotated}} घुमाए गए, {{unchanged}} वैसे ही छोड़े गए"
+title = "Detection report"
+
+[autoRotate.report.method]
+inferred = "मिलान किया गया"
+none = "छोड़ा गया"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "threshold से कम"
+blankPage = "Page खाली है"
+inferredFromDocument = "अन्य pages जैसा ही"
+noDominantDirection = "मिश्रित text directions"
+osdFailed = "पढ़ने योग्य text नहीं मिला"
+osdNoVerdict = "कौन-सा भाग ऊपर है, पता नहीं चल सका"
+tesseractUnavailable = "OCR installed नहीं है"
+tooFewGlyphs = "बहुत कम text"
+
+[autoRotate.results]
+title = "Auto Rotate Results"
+
+[autoRotate.settings]
+title = "Settings"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "page को घुमाने से पहले check को कितना निश्चित होना चाहिए। अधिक pages घुमाने के लिए इसे घटाएँ, अधिक pages को untouched छोड़ने के लिए बढ़ाएँ।"
+title = "Confidence threshold"
+
+[autoRotate.tooltip.description]
+text = "यह पता लगाता है कि प्रत्येक page किस दिशा में होना चाहिए और उसे सही दिशा में घुमा देता है। जो pages पहले से सीधे हैं, उन्हें वैसे ही छोड़ दिया जाता है।"
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto पहले page पर text पढ़ता है, फिर यदि वह पर्याप्त न हो तो page को image के रूप में देखता है। Text only image check को छोड़ देता है, जो उन documents के लिए सबसे तेज़ है जिन्हें कभी scan नहीं किया गया था। OCR only हर page को image मानता है।"
+title = "Detection method"
+
+[autoRotate.tooltip.header]
+title = "Auto Rotate"
+
+[autoRotate.tooltip.inferUndetected]
+text = "खाली या लगभग खाली pages को अपने-आप check नहीं किया जा सकता। जब पढ़े जा सकने वाले हर page को समान turn की आवश्यकता होती है, तो इन pages को उनसे match करने के लिए घुमा दिया जाता है।"
+title = "कम confidence pages को मिलान के लिए घुमाएँ"
+
 [autoSizeSplitPDF]
 tags = "pdf,विभाजन,दस्तावेज़,व्यवस्था"
 
@@ -2189,33 +2440,6 @@ keywords = "कीवर्ड: odd, even"
 numbers = "संख्याएँ/रेंज: 5, 10-20"
 progressions = "प्रोग्रेशन: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "प्रमाणपत्र प्रकार"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "सिस्टम प्रशासकों द्वारा प्रबंधित"
-bullet2 = "अधिकृत उपयोगकर्ताओं के बीच साझा"
-bullet3 = "व्यक्ति नहीं, कंपनी की पहचान दर्शाता है"
-bullet4 = "उपयुक्त: आधिकारिक दस्तावेज़, टीम हस्ताक्षर"
-description = "आपके संगठन द्वारा प्रदान किया गया एक साझा प्रमाणपत्र। कंपनी-स्तर के हस्ताक्षर अधिकार के लिए उपयोग होता है।"
-title = "संगठन प्रमाणपत्र"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "पहली बार उपयोग पर स्वतः जनरेट होता है"
-bullet2 = "आपके उपयोगकर्ता खाते से सम्बद्ध"
-bullet3 = "अन्य उपयोगकर्ताओं के साथ साझा नहीं किया जा सकता"
-bullet4 = "उपयुक्त: व्यक्तिगत दस्तावेज़, व्यक्तिगत उत्तरदायित्व"
-description = "आपके उपयोगकर्ता खाते के लिए विशिष्ट स्वतः-जनरेटेड प्रमाणपत्र। व्यक्तिगत हस्ताक्षरों के लिए उपयुक्त।"
-title = "व्यक्तिगत प्रमाणपत्र"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX फ़ाइल और पासवर्ड आवश्यक"
-bullet2 = "बाहरी Certificate Authorities द्वारा जारी किया जा सकता है"
-bullet3 = "कानूनी दस्तावेज़ों के लिए उच्च विश्वसनीयता"
-bullet4 = "उपयुक्त: कानूनी रूप से बाध्यकारी अनुबंध, बाहरी सत्यापन"
-description = "अपनी PKCS#12 प्रमाणपत्र फ़ाइल का उपयोग करें। प्रमाणपत्र गुणों पर पूर्ण नियंत्रण देता है।"
-title = "कस्टम P12 अपलोड करें"
-
 [certSign]
 awaitingSignatures = "हस्ताक्षरों की प्रतीक्षा"
 chooseCertificate = "प्रमाणपत्र फ़ाइल चुनें"
@@ -2542,34 +2766,6 @@ server = "सर्वर"
 stepTitle = "प्रमाणपत्र स्रोत"
 upload = "अपलोड"
 
-[certSign.tooltip.header]
-title = "हस्ताक्षरों के प्रबंधन के बारे में"
-
-[certSign.tooltip.overview]
-bullet1 = "मौजूदा हस्ताक्षर और उनकी वैधता जांचें"
-bullet2 = "हस्ताक्षरकर्ता और प्रमाणपत्रों के विस्तृत विवरण देखें"
-bullet3 = "अपने दस्तावेज़ सुरक्षित करने के लिए नए डिजिटल हस्ताक्षर जोड़ें"
-bullet4 = "आसान नेविगेशन के साथ एकाधिक फ़ाइलें समर्थित"
-text = "यह टूल आपको जांचने देता है कि आपके PDF डिजिटल रूप से साइन हैं या नहीं और नए डिजिटल हस्ताक्षर जोड़ने देता है। डिजिटल हस्ताक्षर साबित करते हैं कि दस्तावेज़ किसने बनाया या अनुमोदित किया और साइन करने के बाद उसमें बदलाव हुआ या नहीं दिखाते हैं।"
-title = "यह टूल क्या कर सकता है?"
-
-[certSign.tooltip.signing]
-bullet1 = "PEM, PKCS12, JKS, और सर्वर प्रमाणपत्र फ़ॉर्मैट का समर्थन"
-bullet2 = "PDF पर हस्ताक्षर को दिखाने या छिपाने का विकल्प"
-bullet3 = "कारण, स्थान, और हस्ताक्षरकर्ता का नाम जोड़ें"
-bullet4 = "दृश्यमान हस्ताक्षर किस पृष्ठ पर रखें, चुनें"
-bullet5 = "सरल 'Sign with Stirling-PDF' विकल्प हेतु सर्वर प्रमाणपत्र का उपयोग करें"
-text = "PDF पर हस्ताक्षर करने के लिए आपको एक डिजिटल प्रमाणपत्र (जैसे PEM, PKCS12, या JKS) चाहिए। आप हस्ताक्षर को दस्तावेज़ पर दृश्य रूप में दिखाने या केवल सुरक्षा हेतु अदृश्य रखने का विकल्प चुन सकते हैं।"
-title = "हस्ताक्षर जोड़ना"
-
-[certSign.tooltip.validation]
-bullet1 = "दिखाता है कि हस्ताक्षर वैध हैं या अवैध"
-bullet2 = "हस्ताक्षरकर्ता की जानकारी और हस्ताक्षर की तिथि दिखाता है"
-bullet3 = "जाँचता है कि हस्ताक्षर के बाद दस्तावेज़ संशोधित हुआ है या नहीं"
-bullet4 = "सत्यापन के लिए कस्टम प्रमाणपत्र का उपयोग कर सकता है"
-text = "जब आप हस्ताक्षरों की जाँच करते हैं, तो टूल बताता है कि वे वैध हैं या नहीं, किसने दस्तावेज़ पर हस्ताक्षर किए, कब किए, और हस्ताक्षर के बाद दस्तावेज़ में कोई बदलाव हुआ है या नहीं।"
-title = "हस्ताक्षर की जाँच"
-
 [changeCreds]
 changeUsername = "अपना उपयोगकर्ता नाम अपडेट करें। अपडेट के बाद आप लॉगआउट हो जाएँगे।"
 credsUpdated = "खाता अपडेट किया गया"
@@ -2824,6 +3020,7 @@ next = "अगला"
 preview = "पूर्वावलोकन"
 previous = "पिछला"
 refresh = "रीफ़्रेश करें"
+remaining = "शेष"
 retry = "फिर से प्रयास करें"
 save = "सहेजें"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog एनालिटिक्स"
 scarf = "Scarf पिक्सेल"
 
-[credits.modal]
-advancedMonitoring = "एडवांस्ड मॉनिटरिंग"
-allInOneWorkspace = "ऑल-इन-वन PDF वर्कस्पेस (व्यूअर, टूल्स और एजेंट)"
-apiSandbox = "API सैंडबॉक्स"
-dedicatedSupportSlas = "समर्पित सपोर्ट और SLAs"
-fasterThroughput = "10x तेज थ्रूपुट"
-fullyPrivateFiles = "पूरी तरह निजी फ़ाइलें"
-largeFileProcessing = "बड़ी फ़ाइल प्रोसेसिंग"
-orgWideAccess = "संगठन-व्यापी एक्सेस नियंत्रण"
-premiumAiModels = "प्रीमियम AI मॉडल"
-prioritySupport = "प्राथमिकता सपोर्ट"
-privateDocCloud = "प्राइवेट डॉक्युमेंट क्लाउड"
-ragFineTuning = "RAG + फाइन-ट्यूनिंग"
-secureApiAccess = "सिक्योर API एक्सेस"
-standardThroughput = "स्टैंडर्ड थ्रूपुट"
-unlimitedApiAccess = "अनलिमिटेड API एक्सेस"
-unlimitedSeats = "अनलिमिटेड सीटें"
-
 [crop]
 autoCrop = "खाली स्थान स्वतः क्रॉप करें"
 noFileSelected = "क्रॉप शुरू करने के लिए एक PDF फ़ाइल चुनें"
@@ -3346,6 +3525,7 @@ message = "डिफ़ॉल्ट PDF हैंडलर सेट नही
 title = "त्रुटि"
 
 [defaultApp.prompt]
+dontRemind = "मुझे फिर याद न दिलाएँ"
 message = "PDF फ़ाइलें खोलने के लिए Stirling PDF को अपनी डिफ़ॉल्ट ऐप बनाएं।"
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "समूह अनुकूलित करें"
 dropHint = "शुरू करने के लिए फ़ाइलें खोलें"
 dropToAdd = "Drop files to add"
 expand = "साइडबार फैलाएँ"
-files = "फ़ाइलें"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive कॉन्फ़िगर नहीं है"
 leaveMyFiles = "मेरी फ़ाइलों से बाहर जाएँ"
+library = "PDF Library"
 myFiles = "मेरी फ़ाइलें"
 noFiles = "अभी कोई फ़ाइल नहीं"
 openFileManager = "फ़ाइल प्रबंधक खोलें"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "जोड़ें"
-addLabel = "एक लेबल जोड़ें…"
-categoryIconAria = "{{name}} के लिए एक आइकन चुनें"
-createCategory = "श्रेणी बनाएँ"
-delete = "श्रेणी हटाएँ"
 done = "हो गया"
-hide = "श्रेणी छिपाएँ"
-newCategory = "नई श्रेणी का नाम…"
-removeLabel = "{{name}} हटाएँ"
-rename = "नाम बदलें"
 reset = "डिफ़ॉल्ट पर रीसेट करें"
-search = "लेबल खोजें…"
-show = "श्रेणी दिखाएँ"
 subtitle = "अपनी फ़ाइलों को मूल श्रेणियों में समूहित करें। किसी श्रेणी में मौजूदा या नए लेबल जोड़ें, उसका नाम बदलें, या अपनी खुद की श्रेणी बनाएँ। आपकी किसी भी श्रेणी में न आने वाली फ़ाइलें “अन्य” के अंतर्गत दिखाई देती हैं।"
 title = "Sidebar श्रेणियाँ"
 
@@ -3808,6 +3977,7 @@ refresh = "सर्वर से रिफ्रेश करें"
 remove = "हटाएं"
 removeVersion = "यह संस्करण हटाएं"
 rename = "नाम बदलें"
+renamed = "नाम बदला गया"
 renameFolder = "फ़ोल्डर का नाम बदलें"
 resizeFolderTree = "फ़ोल्डर ट्री का आकार बदलें (एरो कुंजियाँ, बड़े कदमों के लिए Shift; ऑटो-फिट के लिए डबल-क्लिक)"
 save = "सहेजें"
@@ -3910,9 +4080,7 @@ count = "फ़ाइलें"
 folder = "फ़ोल्डर"
 labels = "लेबल"
 modified = "संशोधित"
-name = "नाम"
 size = "आकार"
-toolHistoryAtVersion = "संचयी उपकरण श्रृंखला"
 totalSize = "कुल आकार"
 type = "प्रकार"
 versionHistory = "संस्करण यात्रा"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "सब सहेजा गया"
+extractCsvError = "CSV extract करने में विफल"
+extractXlsxError = "XLSX extract करने में विफल"
 flattenAfterFilling = "भरने के बाद समतल करें"
+requiredAbbreviation = "आव."
+requiredFieldsError = "कृपया सभी आवश्यक fields भरें"
 rescanFields = "फ़ील्ड्स दोबारा स्कैन करें"
 rescanFormFields = "फॉर्म फ़ील्ड्स दोबारा स्कैन करें"
 save = "सहेजें"
+saveShortcut = "सहेजने के लिए Ctrl+S"
+unsavedChanges = "बिना सहेजे बदलाव"
 
 [formFill.sidebar]
 close = "साइडबार बंद करें"
@@ -4309,6 +4484,11 @@ desc = "पता चले हेडर के आधार पर PDF फ़
 tags = "ऑटो-डिटेक्ट,हेडर-आधारित,संगठित करें,पुन:लेबल करें"
 title = "PDF फ़ाइल ऑटो रिनेम"
 
+[home.autoRotate]
+desc = "प्रत्येक page की orientation detect करें और उसे स्वचालित रूप से सीधा घुमाएँ।"
+tags = "ऑटो रोटेट,orientation ठीक करें,उल्टा,बगल की ओर,सीधा करें,orient,orientation detect करें,rotation सही करें,auto orient,scanned,OSD"
+title = "Auto Rotate"
+
 [home.autoSizeSplitPDF]
 tags = "ऑटो,विभाजित करें,आकार"
 title = "आकार/गिनती से ऑटो बाँटें"
@@ -4608,13 +4788,13 @@ hint = "PDF पर रखने के लिए PNG, JPG, SVG, या अन्
 label = "इमेज अपलोड करें"
 placeholder = "इमेज फ़ाइल चुनें"
 
-[imageToPdf]
-tags = "रूपांतरण,img,jpg,चित्र,फोटो"
-
 [imageToPDF]
 header = "छवि से PDF"
 title = "छवि से PDF"
 
+[imageToPdf]
+tags = "रूपांतरण,img,jpg,चित्र,फोटो"
+
 [infoBanner]
 dismiss = "खारिज करें"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "आपको आमंत्रित किया गया ह
 
 [landing]
 addFiles = "फ़ाइलें जोड़ें"
-heroSubtitle = "शुरू करने के लिए कोई PDF यहां छोड़ें या मौजूदा PDF जोड़ें।"
 mobileUpload = "मोबाइल से अपलोड करें"
 openFromComputer = "कंप्यूटर से खोलें"
 uploadFromComputer = "कंप्यूटर से अपलोड करें"
-workbenchEmptyStateHero = "कहीं भी PDF छोड़ें"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "लॉगिन"
 magicLinkSent = "मैजिक लिंक {{email}} पर भेज दिया गया! साइन इन करने के लिए अपना ईमेल जाँचें और लिंक पर क्लिक करें।"
 mfaCode = "प्रमाणीकरण कोड"
 mfaRequired = "दो-कारक कोड आवश्यक"
+noAccount = "खाता नहीं है?"
 or = "या"
 password = "पासवर्ड"
 passwordChangedSuccess = "पासवर्ड सफलतापूर्वक बदला गया! कृपया नए पासवर्ड से साइन इन करें।"
@@ -4715,26 +4894,10 @@ signInWith = "इसके साथ साइन इन करें"
 title = "साइन इन करें"
 unexpectedError = "अप्रत्याशित त्रुटि: {{message}}"
 updatePassword = "पासवर्ड अपडेट करें"
-useEmailInstead = "ईमेल से लॉगिन करें"
 useMagicLink = "इसके बजाय मैजिक लिंक उपयोग करें"
 username = "उपयोगकर्ता नाम"
 youAreLoggedIn = "आप लॉग इन हैं!"
 
-[login.slides.edit]
-alt = "PDF संपादित करें"
-subtitle = "redact, sign, पढ़ने और संशोधित करने में मदद करने वाले दर्जनभर से अधिक टूल्स के साथ, आपको जो चाहिए वह जरूर मिलेगा।"
-title = "अपनी मनचाही जानकारी दिखाने/सुरक्षित करने के लिए PDF संपादित करें"
-
-[login.slides.overview]
-alt = "Stirling PDF ओवरव्यू"
-subtitle = "प्राइवेसी-फर्स्ट क्लाउड सूट जो PDF को convert, sign, redact और manage करने देता है, साथ ही 50+ शक्तिशाली टूल्स।"
-title = "आपकी सभी PDF जरूरतों के लिए एक स्थान"
-
-[login.slides.secure]
-alt = "PDF सुरक्षित करें"
-subtitle = "पासवर्ड जोड़ें, कंटेंट redact करें, और सर्टिफिकेट्स आसानी से मैनेज करें।"
-title = "अपने PDF में संवेदनशील जानकारी सुरक्षित रखें"
-
 [margin]
 large = "बड़ा"
 medium = "मध्यम"
@@ -4976,6 +5139,7 @@ pinButton = "यदि आप चाहते हैं कि आपके फ
 results = "टूल के चलने के बाद, <strong>Review</strong> चरण इस पैनल में परिणामों का पूर्वावलोकन दिखाएगा, और आपको क्रिया पूर्ववत करने या फ़ाइल डाउनलोड करने देगा। "
 runButton = "टूल कॉन्फ़िगर हो जाने के बाद, यह बटन सभी चयनित PDF पर टूल चलाने देता है।"
 selectCropTool = "आइए, <strong>Crop</strong> टूल चुनते हैं ताकि किसी एक टूल का उपयोग दिखा सकें।"
+stepOf = "Step {{current}} of {{total}}"
 toolInterface = "यह <strong>Crop</strong> टूल इंटरफ़ेस है। जैसा कि आप देख सकते हैं, यहाँ अभी ज्यादा कुछ नहीं है क्योंकि हमने काम करने के लिए अभी कोई PDF फ़ाइल नहीं जोड़ी है।"
 workbench = "यह <strong>Workbench</strong> है - मुख्य क्षेत्र जहाँ आप अपनी PDF देखते और संपादित करते हैं।"
 wrapUp = "सब सेट! आपने ऐप के मुख्य क्षेत्रों और उनका उपयोग करना सीख लिया है। जब चाहें फिर से यह टूर देखने के लिए <strong>Help</strong> बटन पर क्लिक करें।"
@@ -4988,6 +5152,26 @@ showMeAround = "मुझे दिखाएँ"
 skipForNow = "अभी छोड़ें"
 skipTheTour = "टूर छोड़ें"
 
+[onboarding.checklist]
+dismiss = "खारिज करें"
+title = "Stirling PDF सेट अप करें"
+
+[onboarding.checklist.downloadDesktop]
+description = "Stirling को अपनी मशीन पर natively चलाएँ"
+title = "Desktop के लिए Stirling download करें"
+
+[onboarding.checklist.inviteTeam]
+description = "अपनी team के साथ collaborate करें"
+title = "team members को invite करें"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling को बेहतर बनाने में मदद करें"
+title = "anonymous usage data share करें"
+
+[onboarding.checklist.takeTour]
+description = "एक quick walkthrough में देखें कि Stirling कैसे काम करता है"
+title = "tour लें"
+
 [onboarding.desktopInstall]
 body = "Stirling एक डेस्कटॉप ऐप के रूप में सबसे अच्छा काम करता है। आप इसे ऑफ़लाइन उपयोग कर सकते हैं, दस्तावेज़ों तक तेज़ी से पहुँच सकते हैं, और अपने कंप्यूटर पर स्थानीय रूप से संपादन कर सकते हैं।"
 selectOs = "ऑपरेटिंग सिस्टम चुनें"
@@ -4996,7 +5180,21 @@ titleWithOs = "{{osLabel}} के लिए डाउनलोड"
 
 [onboarding.mfa]
 authenticationCode = "प्रमाणीकरण कोड"
+description = "authenticator app लिंक करके अपना account secure करें। QR code scan करें या setup key दर्ज करें, फिर पूरा करने के लिए 6-digit code confirm करें।"
+enable = "MFA सक्षम करें"
+enableError = "two-factor authentication सक्षम नहीं कर सके। code जाँचें और फिर प्रयास करें।"
+enterCode = "अपने app से 6-digit code दर्ज करें।"
+enterCodeError = "जारी रखने के लिए authentication code दर्ज करें।"
+logout = "Logout"
+openAuthenticator = "Google Authenticator, Authy, या 1Password खोलें।"
 qrCodeLoading = "आपका QR कोड जनरेट किया जा रहा है…"
+regenerateQrCode = "QR code फिर से बनाएँ"
+scanQrCode = "QR code scan करें या नीचे setup key दर्ज करें।"
+setupError = "two-factor setup शुरू नहीं कर सके। कृपया फिर प्रयास करें।"
+setupKey = "Setup key (manual entry)"
+stepByStep = "Step-by-step"
+success = "MFA सक्षम हो गया है। अब आप जारी रख सकते हैं।"
+title = "Multi-Factor Authentication Setup"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "एक बार आप लॉगिन मोड सक्षम कर दें, आप उपयोगकर्ताओं को प्रबंधित कर सकते हैं, सेटिंग्स कॉन्फ़िगर कर सकते हैं, और सर्वर स्वास्थ्य मॉनिटर कर सकते हैं। आपके सर्वर पर पहले <strong>{{freeTierLimit}}</strong> लोग Stirling मुफ्त में उपयोग कर पाएँगे।"
@@ -5005,6 +5203,11 @@ adminTitle = "एडमिन अवलोकन"
 userBody = "टीममेट्स को आमंत्रित करें, भूमिकाएँ असाइन करें, और अपने दस्तावेज़ों को एक सुरक्षित वर्कस्पेस में व्यवस्थित रखें। जब भी आप सोलो उपयोग से आगे बढ़ने के लिए तैयार हों, लॉगिन मोड सक्षम करें।"
 userTitle = "प्लान अवलोकन"
 
+[onboarding.processorIntro]
+body = "Stirling अब <strong>Policies</strong> चलाता है — automated rules जो हर दस्तावेज़ के आते ही उसे classify, secure, और process करते हैं। इन्हें सेट अप करें और <strong>Processor</strong> में runs monitor करें।"
+cta = "Processor देखें"
+title = "Stirling Processor देखें"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Prepaid year"
+
+[payg.prepaid.banner]
+exhausted = "आपकी prepaid capacity उपयोग हो चुकी है; metered billing फिर शुरू हो गई है। discount बनाए रखने के लिए top up करें।"
+expiring_one = "आपका prepaid year {{count}} दिन में समाप्त होगा। unused capacity expire हो जाएगी — नया year शुरू करने के लिए top up करें।"
+expiring_other = "आपका prepaid year {{count}} दिनों में समाप्त होगा। unused capacity expire हो जाएगी — नया year शुरू करने के लिए top up करें।"
+low = "आपकी prepaid capacity का {{pct}}% बचा है। processing निर्बाध रखने के लिए कभी भी top up करें।"
+
+[payg.prepaid.card]
+subtitle = "metered billing से पहले और आपके spend cap के बाहर उपयोग किया जाता है।"
+title = "Prepaid capacity"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} prepaid credits में से"
+expires = "{{date}} को expires"
+
+[payg.prepaid.state]
+exhausted = "उपयोग हो गया"
+healthy = "काफी बचा है"
+low = "कम हो रहा है"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "ईमेल से मिली लाइसेंस कु
 success = "लाइसेंस सक्रिय हुआ!"
 successMessage = "आपका लाइसेंस सफलतापूर्वक सक्रिय हो गया है। अब आप यह विंडो बंद कर सकते हैं।"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "लागू किया गया"
-enforcing = "लागू किया जा रहा है..."
-failed = "लागू करना विफल रहा"
 outputsUnavailable = "नीति आउटपुट अब डाउनलोड के लिए उपलब्ध नहीं हैं।"
 partialOutputsUnavailable = "कुछ नीति आउटपुट अब डाउनलोड के लिए उपलब्ध नहीं हैं।"
-retrying = "व्यस्त है, पुनः प्रयास किया जा रहा है..."
 runNotFound = "लागू करने की प्रक्रिया अब नहीं मिली।"
-step = "चरण {{current}}/{{total}}"
 timedOut = "रन पूरा होने से पहले लागू करने की समय-सीमा समाप्त हो गई।"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "बंद करें"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} लागू किए जा रहे हैं"
 applyingProgress = "{{names}} लागू किए जा रहे हैं ({{done}}/{{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} में से {{failures}} फ़ाइल(ें) 
 failureTitle = "पूर्ण रूप से लागू किए बिना निर्यात किया गया"
 printPolicyAppliedBody = "इस PDF को किसी नीति के अनुरूप अद्यतन किया गया। बदलावों की समीक्षा करें, फिर पुनः प्रिंट करें।"
 printPolicyAppliedTitle = "प्रिंट करने से पहले नीति लागू की गई"
-queued = "+{{count}} कतार में"
 successTitle = "{{names}} लागू किए गए"
 summaryMore = "{{first}}, {{second}} और {{more}} अन्य"
 summaryTwo = "{{first}} और {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "रूपांतरण से पहले लागू करना"
-default = "लागू करना"
-export = "निर्यात से पहले लागू करना"
-input = "आयात पर लागू करना"
-print = "प्रिंट से पहले लागू करना"
-
-[policies.field]
-accessLog = "एक्सेस लॉग"
-archiveAfter = "इसके बाद आर्काइव करें"
-auditTrail = "ऑडिट ट्रेल"
-belowThreshold = "सीमा से नीचे"
-destination = "गंतव्य"
-frameworks = "फ़्रेमवर्क"
-immutableHold = "अपरिवर्तनीय होल्ड"
-keepFor = "इतने समय तक रखें"
-minConfidence = "न्यूनतम कॉन्फ़िडेंस"
-notify = "रूट पर सूचित करें"
-onViolation = "अनुपालन न होने पर"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "जोड़ें"
-addPlaceholder = "एक लेबल जोड़ें…"
-customNote = "आपकी टीम के लिए अनुकूलित।"
-defaultNote = "बिल्ट-इन डिफ़ॉल्ट का उपयोग हो रहा है, जो आपकी टीम के साथ साझा है।"
-duplicate = "\"{{name}}\" पहले से मौजूद है।"
-edit = "लेबल संपादित करें"
-empty = "अभी कोई लेबल नहीं।"
-export = "JSON export करें"
-iconAria = "{{name}} के लिए एक आइकन चुनें"
-import = "JSON import करें"
-importError = "वह फ़ाइल import नहीं की जा सकी।"
-managedNote = "टीम लेबल आपके टीम लीडर द्वारा प्रबंधित किए जाते हैं।"
-modalSubtitle = "आपकी पूरी टीम के साथ साझा। classifier हर दस्तावेज़ के लिए उपयुक्त लेबल चुनता है।"
-modalTitle = "वर्गीकरण लेबल"
-pickIcon = "{{label}} आइकन का उपयोग करें"
-removeAria = "{{name}} हटाएँ"
-resetToDefault = "डिफ़ॉल्ट पर रीसेट करें"
-saveForTeam = "टीम के लिए सहेजें"
-saving = "सहेजा जा रहा है…"
-sectionLabel = "वर्गीकरण लेबल"
-startFromScratch = "शुरुआत से शुरू करें"
-teamCount = "टीम लेबल"
-tooLong = "लेबल अधिकतम {{max}} वर्णों के हो सकते हैं।"
-ungrouped = "असमूहित"
-view = "लेबल देखें"
+categoryCount = "categories"
+hideCategory = "category छिपाएँ"
+labelCount = "labels"
+sharedNote = "ये labels built in हैं और आपकी पूरी team में shared हैं।"
+showCategory = "category दिखाएँ"
 
 [policies.pii]
 account = "खाता संख्याएँ (लेबल युक्त)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US रूटिंग नंबर (ABA)"
 ssn = "सोशल सिक्योरिटी नंबर"
 
-[policies.settings]
-noneExport = "वर्तमान में export पर कोई policy नहीं चलती।"
-noneUpload = "वर्तमान में upload पर कोई policy नहीं चलती।"
-onExport = "export पर"
-onUpload = "upload पर"
-reorderHandle = "क्रम बदलने के लिए खींचें"
-runOrderDesc = "जब एक ही trigger पर एक से अधिक policy चलती हैं, तो वे इसी क्रम में चलती हैं — प्रत्येक पिछली policy के output पर। क्रम बदलने के लिए खींचें।"
-title = "Policy सेटिंग्स"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Policy विकल्प"
-policySettings = "Policy सेटिंग्स"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "विफल policies पुनः प्रयास करें ({{count}})"
-rowProgress = "{{total}} में से {{completed}} फ़ाइलें प्रोसेस हुईं"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Policy क्या है?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "संवेदनशील विवरण—जैसे सोशल सिक्योरिटी और कार्ड नंबर—को स्वतः ढूँढकर काला कर देता है, ताकि दस्तावेज़ में उन्हें पढ़ा न जा सके।"
-sanitize = "फ़ाइल से छिपा हुआ JavaScript हटाता है, ताकि इसे खोलने पर कुछ भी स्वतः न चले।"
-watermark = "प्रत्येक पृष्ठ पर एक दृश्यमान निशान (जैसे \"Confidential\") लगाता है।"
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "बंद करें"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} लागू हो रही है..."
 badgeRan = "इस फ़ाइल पर {{name}} policy चली"
+badgeRunning = "{{name}} चल रहा है..."
 blockingAction = "policy लागू होने के दौरान {{action}} ब्लॉक है, कृपया प्रतीक्षा करें..."
 dismiss = "ओवरले हटाएँ"
 enforcingTitle = "policy लागू हो रही है..."
@@ -6151,6 +6211,7 @@ viewAnyway = "फ़ाइल देखें (policy अभी भी लाग
 [policyOption]
 autoRedactPhi = "PHI को अपने-आप redact करें"
 blockExport = "export ब्लॉक करें"
+ccpa = "CCPA"
 contracts = "अनुबंध"
 documents = "दस्तावेज़"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor प्लान"
 subscribed = "Processor प्लान"
 unlinked = "लिंक नहीं किया गया"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "दस्तावेज़ से bootstrap करें"
-sectionsAriaLabel = "Agent builder सेक्शन"
-selectorAriaLabel = "Agents"
-subtitle = "उन AI agents को डिज़ाइन, टेस्ट और ship करें जो आपके दस्तावेज़ों को classify करते हैं, उनसे extract करते हैं और route करते हैं। scenarios परिभाषित करें, tool access सीमित करें, golden set चलाएँ, और version publish करें।"
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "रद्द करें"
-dropzoneText = "एक sample document चुनें (PDF या image)"
-lead = "एक sample document छोड़ें और हम scenarios और extraction schema सुझाएँगे जिन्हें आप refine कर सकते हैं। जब तक आप review नहीं करते, कुछ भी publish नहीं होता।"
-submit = "Agent bootstrap करें"
-subtitle = "एक प्रतिनिधि फ़ाइल से नया agent seed करें"
-title = "दस्तावेज़ से bootstrap करें"
-
-[portal.agentBuilder.empty]
-description = "sample document से agent bootstrap करके उसके scenarios और extraction schema seed करें, फिर refine और publish करें।"
-title = "अभी कोई agents नहीं"
-
-[portal.agentBuilder.evals]
-casesPassing = "पास हो रहे cases"
-columnCase = "Eval case"
-columnLatency = "Latency"
-columnResult = "परिणाम"
-fail = "fail"
-goldenSetPassRate = "Golden-set pass rate"
-latencyMs = "{{ms}} ms"
-notRun = "नहीं चला"
-pass = "pass"
-passRate = "Pass rate"
-runEvals = "evals चलाएँ"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals आपके scenarios को repeatable golden set में बदलते हैं। समय के साथ pass-rate capture करने और publishes को gate करने के लिए upgrade करें।"
-title = "अभी कोई golden set नहीं"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "golden sets में"
-activeAgents = "सक्रिय agents"
-avgPassRate = "औसत eval pass rate"
-fleetWide = "fleet-wide"
-latestPublished = "नवीनतम प्रकाशित"
-scenarios = "Scenarios"
-testCases = "test cases"
-totalDescription_one = "कुल {{count}}"
-totalDescription_other = "कुल {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "जोड़ें"
-addScenario = "Scenario जोड़ें"
-enable = "सक्षम करें"
-expectationLabel = "अपेक्षित व्यवहार"
-expectationPlaceholder = "agent को क्या करना चाहिए"
-inEval = "eval में"
-mute = "Mute करें"
-muted = "muted"
-nameLabel = "नाम"
-namePlaceholder = "उदा. Compliance escalation"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenarios"
-tools = "Tools"
-versions = "Versions"
-
-[portal.agentBuilder.tools]
-broadAccess = "व्यापक access"
-deniedHint = "चुने गए tools ब्लॉक हैं। बाकी सब callable रहता है।"
-deniedTools = "Denied tools"
-governanceGate = "Tool governance Enterprise प्लान पर उपलब्ध है।"
-restricted = "Restricted"
-restrictedAccess = "Restricted tool access"
-restrictedDescription = "नीचे जिन tools को आप deny करते हैं, उन्हें छोड़कर हर tool की अनुमति दें।"
-
-[portal.agentBuilder.versions]
-current = "वर्तमान"
-historyGate = "पूरी version history और rollback Enterprise प्लान पर उपलब्ध हैं।"
-publish = "Publish करें"
-rollBack = "Roll back करें"
-
 [portal.assistant]
 close = "assistant बंद करें"
 error = "assistant तक नहीं पहुँचा जा सका।"
@@ -6365,9 +6346,21 @@ typing = "टाइप हो रहा है"
 loading = "लोड हो रहा है"
 redirectingToEditor = "editor पर redirect किया जा रहा है..."
 
+[portal.billing.activation]
+maybeLater = "शायद बाद में"
+title = "Processor चालू करें"
+
+[portal.billing.activation.payg]
+sub = "monthly limit सेट करें। जितना चलाएँ, उतना भुगतान करें।"
+title = "Pay as you go"
+
+[portal.billing.activation.prepay]
+badge = "2 months free"
+sub = "एक invoice, card या bank transfer।"
+title = "एक year prepay करें"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function ने कोई client_secret नहीं लौटाया।"
-subtitle = "अपने मुफ़्त Editor-plan grant से आगे बढ़ने के लिए card जोड़ें। बाकी Stripe संभालता है।"
 title = "Processor प्लान चालू करें"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "आपका payment सफल रहा, लेकिन activation म
 close = "बंद करें"
 title = "लगभग हो गया"
 
+[portal.billing.checkout.cap]
+amountAria = "Monthly spend limit"
+back = "वापस"
+continue = "payment पर जारी रखें"
+error = "आपकी spend limit सेट नहीं कर सके"
+finePrint = "Invoices monthly post होते हैं। कभी भी cancel करें।"
+noLimit = "कोई limit नहीं"
+note = "आपसे आपकी limit से अधिक कभी bill नहीं किया जाता। Processing बस pause हो जाती है।"
+perMonth = "/ mo"
+title = "अपनी spend limit सेट करें"
+
+[portal.billing.checkout.card]
+fields = "Card number · MM / YY · CVC · ZIP"
+label = "Card details"
+note = "Card details Stripe द्वारा collect किए जाते हैं। Stirling कभी PAN या CVC store नहीं करता।"
+
 [portal.billing.checkout.error]
 title = "checkout शुरू नहीं किया जा सका"
 
@@ -6383,10 +6392,9 @@ body = "आपका payment पूरा हो गया। हम आपक
 hint = "कृपया यह विंडो खुली रखें।"
 title = "आपका Processor प्लान सक्रिय किया जा रहा है..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "portal env में in-app checkout सक्षम करने के लिए।"
-bodyBefore = "सेट करें"
-title = "Stripe कॉन्फ़िगर नहीं है"
+[portal.billing.checkout.pay]
+limit = "Monthly spend limit {{amount}}/mo। Processing limit पर pause हो जाती है।"
+limitNoCap = "कोई spend limit नहीं। Processing pause नहीं होगी। Invoices monthly post होते हैं।"
 
 [portal.billing.enterpriseUpsell]
 cta = "अपना Enterprise quote बनाएँ"
@@ -6409,10 +6417,12 @@ currentPlan = "वर्तमान प्लान"
 freeForever = "हमेशा मुफ़्त"
 noTeamResolved = "आपके wallet पर अभी कोई team resolved नहीं है — refresh करें और फिर कोशिश करें।"
 ownerOnly = "केवल team owner Processor प्लान चालू कर सकता है।"
+payInvoice = "पूरा करने के लिए invoice pay करें"
 planName = "Editor"
 ssoIncluded = "SSO शामिल"
 switchOnProcessor = "Processor चालू करें →"
 unlimitedUsers = "असीमित users"
+viewQuote = "quote देखें"
 
 [portal.billing.invoices]
 columnAmount = "राशि"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Direct API requests"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automations और pipelines"
 segmentAutomationLabel = "Automation"
+sizeMultiplier = "{{formatted}} PDFs ने size multiplier उपयोग किया"
+summary = "{{unique}} unique · {{units}} meter units · {{avg}} avg per PDF"
+summaryNoRate = "{{unique}} unique · {{units}} meter units"
 unit = "metered PDFs"
+unitsPending_one = "linked instances से {{units}} meter unit sync pending है"
+unitsPending_other = "linked instances से {{units}} meter units sync pending हैं"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} prepaid credits में से"
+expires = "{{date}} को expires"
+eyebrow = "Prepaid capacity"
+note = "metered billing से पहले और आपकी spend limit के बाहर उपयोग किया जाता है।"
+topUp = "Top up"
+
+[portal.billing.prepaid.buy]
+back = "वापस"
+calcTitle = "अपना annual payment calculate करें"
+cancel = "Cancel"
+cancelPurchase = "purchase cancel करें"
+close = "बंद करें"
+continueToPayment = "payment पर जारी रखें"
+finalise = "Finalise"
+invoiceErrorTitle = "invoice generate नहीं कर सके"
+loadingTitle = "आपका quote load हो रहा है"
+payTitle = "अपने year के लिए pay करें"
+step = "Step {{current}} of {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "बदलें"
+deployRow = "Deployment"
+done = "Done"
+enterpriseHint = "यह enterprise scale है। इस volume पर, enterprise rates किसी भी self-serve discount से बेहतर हैं। Rate lock, terms, और minutes में quote।"
+governanceRow = "Governance"
+governanceValue = "{{label}} · {{count}} policies"
+handlesLabel = "आपका Processor"
+handlesValue = "{{volume}} credits / mo handle करता है"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policies"
+poolCaption = "year के लिए {{credits}} credits का एक pool। Heavy months, light months से borrow करते हैं।"
+priceLabel = "आपका year · 10 की कीमत में 12 months"
+rateUnknown = "checkout पर हम exact price दिखाएँगे।"
+savings = "आप {{amount}} बचाते हैं · 2 months free।"
+sizingRow = "Sizing"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "कुल users"
+
+[portal.billing.prepaid.consent]
+label = "मैं समझता/समझती हूँ कि जब मेरी prepaid capacity उपयोग हो जाती है या 12 months बाद expire हो जाती है, तो processing automatically standard metered pay-as-you-go rate पर (मेरी spend limit तक) जारी रहती है जब तक मैं cancel न करूँ, और मैं billing portal से कभी भी cancel कर सकता/सकती हूँ।"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling द्वारा managed। minutes में live।"
+cloudValue = "Stirling Cloud · Managed"
+selfhost = "Self-hosted"
+selfhostDesc = "private infrastructure पर चलता है। Same rate।"
+selfhostValue = "Self-hosted · Private infrastructure"
+
+[portal.billing.prepaid.offer]
+cta = "offer review करें"
+subtitle = "PDF processing का एक year prepay करें और two months free पाएँ, metered billing से पहले और आपकी spend limit के बाहर उपयोग किया जाता है।"
+title = "10 की कीमत में 12 months पाएँ"
+
+[portal.billing.prepaid.pay]
+accountName = "Account holder name"
+accountNamePlaceholder = "e.g. Jane Smith"
+companyName = "Company name (optional)"
+companyNamePlaceholder = "e.g. Acme Inc."
+downloadInvoice = "invoice download करें"
+payOnline = "online pay करें"
+poNumber = "PO number (optional)"
+poNumberPlaceholder = "e.g. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Advanced"
+advancedDesc = "Pipelines आपकी अधिकांश processing चलाते हैं।"
+none = "None"
+noneDesc = "अभी pipelines नहीं चल रहे। इन्हें कभी भी चालू करें।"
+standard = "Standard"
+standardDesc = "कुछ pipelines आने वाले PDFs को re-process करते हैं।"
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Classification, default, साथ में Sharing"
+governed = "Governed"
+governedDesc = "Security और Routing जोड़ता है"
+regulated = "Regulated"
+regulatedDesc = "हर category, incl. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "quote download करें (PDF)"
+downloading = "तैयार हो रहा है…"
+share = "approval के लिए share करें"
+
+[portal.billing.prepaid.size]
+compact = "Compact"
+compactDesc = "25 MB से कम files, कोई data charges नहीं"
+heavy = "Heavy"
+heavyDesc = "Scanned या image-heavy, नियमित रूप से 50 MB+"
+standard = "Standard"
+standardDesc = "ज़्यादातर छोटी, कुछ scans 25 MB से अधिक"
+
+[portal.billing.prepaid.state]
+exhausted = "उपयोग हो गया"
+healthy = "काफी बचा है"
+low = "कम हो रहा है"
 
 [portal.billing.spendLimit]
 adjustLimit = "limit समायोजित करें"
@@ -6494,6 +6608,8 @@ label = "exceed होने का अनुमान।"
 
 [portal.billing.spendThisMonth]
 eyebrow = "इस माह खर्च"
+freeRemaining_one = "{{formatted}} free PDF शेष"
+freeRemaining_other = "{{formatted}} free PDFs शेष"
 processed_one = "{{formattedCount}} PDF processed।"
 processed_other = "{{formattedCount}} PDFs processed।"
 processedWithRate_one = "{{formattedCount}} PDF processed, प्रत्येक {{rate}} पर।"
@@ -6534,6 +6650,350 @@ signature = "signature"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "नया connection"
+createTitleFor = "{{name}} connect करें"
+delete = "Delete"
+edit = "Edit"
+editTitle = "connection edit करें"
+unsupportedType = "यह connection type यहाँ edit नहीं किया जा सकता।"
+
+[portal.connections.categories.advanced]
+description = "ऐसी service के लिए जिसे हम अभी support नहीं करते।"
+label = "Advanced"
+
+[portal.connections.categories.audit]
+description = "किसी document के साथ क्या हुआ, उसे वहाँ record करें जहाँ आपके auditors पहले से देखते हैं।"
+label = "Audit और compliance logging"
+
+[portal.connections.categories.notify]
+description = "दूसरे system को बताएँ कि कुछ हुआ है।"
+label = "Notify और workflow"
+
+[portal.connections.categories.security]
+description = "document आगे बढ़ने से पहले उसे scan या label करें।"
+label = "Security और classification"
+
+[portal.connections.categories.signing]
+description = "document को sign या notarize कराने के लिए बाहर भेजें।"
+label = "E-signature और notarization"
+
+[portal.connections.categories.storage]
+description = "processed documents कहाँ पहुँचते हैं - bucket, drive, ticket या page।"
+label = "File और attach"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling इसे encrypted store करता है और फिर कभी नहीं दिखाता।"
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "इस connection का उपयोग करने वाले steps केवल इस URL के अंतर्गत paths call कर सकते हैं, किसी अन्य host को कभी नहीं।"
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "service ने जो URL दिया है, उसे paste करें। केवल उसके अंतर्गत paths call किए जा सकते हैं।"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Connection name"
+namePlaceholder = "e.g. Production"
+
+[portal.connections.picker]
+cancel = "Cancel"
+createNew = "नया connection..."
+placeholder = "connection चुनें"
+save = "connection save करें"
+
+[portal.connections.picker2]
+back = "integration बदलें"
+heading = "आप क्या connect करना चाहते हैं?"
+noResultsBody = "हम अभी इसे support नहीं करते - हमें इसके बारे में बताएं और हम इसे जोड़ने पर विचार करेंगे।"
+noResultsTitle = "\"{{query}}\" से कुछ भी match नहीं हुआ"
+searchPlaceholder = "integrations search करें - \"sign\", \"ocr\" या product name आज़माएँ"
+
+[portal.connections.types.api]
+description = "policy से किसी भी HTTP API को call करें। आप URL, authentication और payload चुनते हैं।"
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "Authentication"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username और password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "custom header में token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "token के लिए log in करें"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "इस connection का उपयोग करने वाले steps केवल इस URL के अंतर्गत paths call कर सकते हैं, किसी अन्य host को कभी नहीं।"
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header name"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Login path"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "यदि API download link के साथ reply करता है, तो केवल इन hosts को fetch किया जा सकता है। commas से अलग करें। केवल base URL के अपने host को allow करने के लिए खाली छोड़ें।"
+label = "Allowed result hosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "इस header के रूप में token भेजें"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "response header जिसमें login call token लौटाता है, जैसे X-Auth-Token।"
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "आपके चलाए server पर malware के लिए documents scan करें - आपके network से कुछ बाहर नहीं जाता।"
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "policy में documents के लिए virus और content scanning।"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "macros, executables, scripts या embedded objects वाले documents block करें - केवल ज्ञात malware ही नहीं।"
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "processed documents को Confluence page से attach करें।"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "documents को electronic signature और notarization के लिए ConsignO Cloud (Notarius) भेजें।"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "आपका ConsignO Cloud environment, /api/v1 सहित।"
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "केवल तब आवश्यक जब आपकी organisation tenants उपयोग करती है।"
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "policy जब document process करे, तो Discord पर message post करें।"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "हर बार जब policy document handle करे, Elasticsearch में audit event index करें।"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "नए documents के लिए FTP या FTPS server poll करें।"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Connection mode"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (recommended)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Plain FTP credentials और files को unencrypted भेजता है; यदि server support करता है तो FTPS चुनें।"
+label = "Encryption"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "None (plain FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "policy run होने पर Google Chat space में message post करें।"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "processed documents को Jira issue से attach करें।"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "policy run होने पर document या notification email करें।"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "processed documents को Nextcloud में file करें।"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "आपके चलाए Presidio server का उपयोग करके document text में personal data detect करें।"
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "PDFs पर Microsoft Purview sensitivity labels पढ़ें और apply करें।"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Optional। केवल labels को name से चुनने के लिए आवश्यक; labelling इसके बिना भी काम करती है।"
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "हर label पर उसके SiteId के रूप में stamp किया जाता है, ताकि Purview-aware tools जानें कि किस organisation ने इसे apply किया।"
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "एक S3 bucket जिसे sources पढ़ सकते हैं और pipeline outputs लिख सकते हैं।"
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS के लिए खाली छोड़ें। MinIO या किसी अन्य S3-compatible store के लिए इसे सेट करें।"
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "policy run होने पर document या notification email करें।"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "नए documents के लिए SFTP (SSH) server poll करें।"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Optional। server का SHA-256 host key fingerprint (`ssh-keyscan host | ssh-keygen -lf -` से)। सेट होने पर, केवल यह key प्रस्तुत करने वाला server स्वीकार किया जाता है; खाली होने पर, first connect पर देखी गई key pinned होती है और बाद के changes अस्वीकार किए जाते हैं।"
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "यदि आप इसके बजाय private key से authenticate करते हैं तो खाली छोड़ें।"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Optional। password के बजाय key से authenticate करने के लिए OpenSSH private key paste करें।"
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "policy जब document process करे, तो Slack पर message post करें।"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS network share (Windows या Samba) watch करें।"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Optional। Windows domain या workgroup, यदि आपका server एक उपयोग करता है।"
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "हर बार जब policy document handle करे, Splunk को audit event भेजें।"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Sumo Logic HTTP collector को audit event भेजें।"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "policy run होने पर Teams channel में message post करें।"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "प्रत्येक document, या केवल details, आपके चुने URL पर post करें।"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "policy से Zap या Make scenario trigger करें।"
+label = "Zapier और Make"
+
+[portal.docs]
+browse = "docs browse करें"
+viewSource = "GitHub पर source देखें"
+
 [portal.docs.authentication]
 codeCaption = "हर request"
 eyebrow = "शुरुआत करें"
@@ -6619,11 +7079,19 @@ title = "Official SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
+[portal.docs.search]
+empty = "कोई matching docs नहीं"
+placeholder = "docs search करें"
+results = "{{count}} results"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Bundled, named capabilities जिन्हें आपका agent single tool के रूप में invoke करता है। हर skill deterministic op chain है जिसके साथ evals attached हैं।"
 title = "Agent skills"
 
+[portal.docs.toc]
+title = "इस page पर"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "प्रकार"
 user = "उपयोगकर्ता"
 
 [portal.documents.queue.empty]
+connectSource = "source connect करें"
+createPipeline = "pipeline बनाएँ"
 description = "जब स्रोत आपकी पाइपलाइनों में दस्तावेज़ भेजेंगे, तो वे समीक्षा के लिए यहाँ दिखाई देंगे।"
 title = "क्यू में कोई दस्तावेज़ नहीं"
 
@@ -6806,13 +7276,71 @@ description = "इस व्यू में अनपेक्षित त्
 retry = "फिर से कोशिश करें"
 title = "इस पेज पर कुछ गलत हो गया"
 
+[portal.home.download]
+back = "वापस"
+body = "desktop app download करें या server self-host करें।"
+done = "Done"
+guide = "{{name}} guide खोलें"
+openInBrowser = "इसके बजाय browser में खोलें"
+sectionDesktop = "Desktop app"
+sectionSelfHosted = "Self-hosted"
+title = "Stirling PDF Editor install करें"
+
+[portal.home.download.docker]
+detailBody = "अपने server पर official image चलाएँ।"
+note = ":8080 पर खुलता है। Default login: admin / stirling।"
+tagline = "server को container में चलाएँ"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "आधिकारिक Helm chart इंस्टॉल करें।"
+note = "सेटिंग्स को बनाए रखने के लिए /configs के लिए एक PVC जोड़ें।"
+tagline = "Helm के साथ क्लस्टर पर डिप्लॉय करें"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "आपके वितरण के लिए नेटिव builds।"
+guideBtn = "Linux इंस्टॉल विकल्प देखें"
+note = "सामान्य distros के लिए AppImage, .deb और .rpm builds उपलब्ध हैं।"
+tagline = "आपके distro के लिए नेटिव desktop app"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "या Homebrew के माध्यम से"
+detailBody = "इंस्टॉलर चलाएँ, या Homebrew का उपयोग करें।"
+downloadBtn = "macOS के लिए डाउनलोड करें"
+tagline = "Apple silicon और Intel के लिए नेटिव app"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "bare metal server पर .jar चलाएँ।"
+downloadBtn = ".jar डाउनलोड करें"
+note = "Java 21+ आवश्यक है। :8080 पर खुलता है; डिफ़ॉल्ट लॉगिन admin / stirling।"
+runLabel = "फिर इसे चलाएँ"
+tagline = "bare metal server पर .jar चलाएँ"
+title = "मैन्युअल server setup"
+
+[portal.home.download.windows]
+altLabel = "या winget के माध्यम से"
+detailBody = "इंस्टॉलर चलाएँ, या package manager का उपयोग करें।"
+downloadBtn = "इंस्टॉलर डाउनलोड करें"
+tagline = "Microsoft Windows के लिए नेटिव app"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} सक्रिय"
-invite = "टीममेट्स को आमंत्रित करें"
+activeOfDeployed = "इस महीने {{total}} में से {{active}} सक्रिय"
 name = "Stirling PDF Editor"
 open = "ब्राउज़र में खोलें"
 updated = "{{time}} अपडेट किया गया"
 
+[portal.home.editor.deploy]
+finish = "डिप्लॉयमेंट समाप्त करें"
+options = "डिप्लॉयमेंट विकल्प देखें"
+start = "Editor डिप्लॉय करें"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "नमस्कार"
 evening = "शुभ संध्या"
 morning = "सुप्रभात"
 
-[portal.home.onboarding]
-dismiss = "सेटअप हटाएँ"
-notStarted = "शुरू नहीं हुआ"
-progress = "{{total}} में से {{done}} पूरा"
-title = "सेटअप पूरा करें"
-
-[portal.home.onboarding.enterprise]
-body = "Org-wide SSO + SCIM + RBAC, committed volume pricing, और air-gapped deployment."
-cta = "ट्रायल शुरू करें"
-ctaQuote = "कोटेशन प्राप्त करें"
-lead = "250+ कर्मचारियों के लिए।"
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "डेस्कटॉप ऐप डिप्लॉय करें, हमेशा के लिए मुफ़्त।"
-title = "PDF Editor डाउनलोड करें"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} सक्रिय · {{recommended}} अनुशंसित"
-chip = "{{active}} सक्रिय"
-title = "पॉलिसियाँ चालू करें"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} कनेक्टेड · हर PDF जहाँ भी पहुँचता है, नियंत्रित"
-chip = "{{connected}} कनेक्टेड"
-title = "अपने स्रोत कनेक्ट करें"
-
-[portal.home.quickActions]
-subtitle = "आज के प्रमुख कार्य"
-title = "त्वरित कार्रवाइयाँ"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "typed op library पर 3-step composer"
-title = "पाइपलाइन बनाएँ"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, watched folders"
-title = "स्रोत कनेक्ट करें"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "rate limits और IP allowlist के साथ scoped key"
-title = "API key जारी करें"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor डिप्लॉयमेंट प्रबंधित करें"
 sectionsAriaLabel = "इन्फ्रास्ट्रक्चर अनुभाग"
@@ -6878,13 +7363,9 @@ heading = "API keys"
 subheading = "प्रति-key rate limits, अनुमतियाँ, और IP allowlists के साथ scoped credentials."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "अनुमत IPs"
-anyIp = "कोई भी IP (कोई allowlist नहीं)"
 created = "बनाया गया"
 lastUsed = "अंतिम उपयोग"
-permissions = "अनुमतियाँ"
-rateLimit = "Rate limit"
-rateLimitValue = "{{value}} req/min"
+revoke = "key रद्द करें"
 usageMonth = "इस महीने का उपयोग"
 usageToday = "आज का उपयोग"
 
@@ -6892,6 +7373,20 @@ usageToday = "आज का उपयोग"
 description = "Stirling API कॉल करना शुरू करने के लिए scoped key बनाएँ।"
 title = "अभी कोई API keys नहीं"
 
+[portal.infrastructure.apiKeys.error]
+load = "आपकी API keys लोड नहीं हो सकीं। कृपया फिर से प्रयास करें।"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" रद्द करें? इस key का अभी भी उपयोग कर रहा कोई भी इंटीग्रेशन तुरंत 401 errors प्राप्त करना शुरू कर देगा। इसे पूर्ववत नहीं किया जा सकता।"
+cancel = "रद्द करें"
+confirm = "key रद्द करें"
+title = "API key रद्द करें"
+
+[portal.infrastructure.attestationLabel]
+attested = "प्रमाणित"
+inScope = "दायरे में"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "श्रेणी के आधार पर audit events फ़िल्टर करें"
 heading = "Audit logs"
@@ -6935,6 +7430,7 @@ all = "सभी"
 auth = "Auth"
 config = "Config"
 elevation = "अधिकार उन्नयन"
+policy = "नीति"
 processing = "Processing"
 security = "Security"
 
@@ -6944,19 +7440,35 @@ title = "आपके पास एक्सेस नहीं है"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "अधिकार उन्नयन"
+policy = "नीति"
 processing = "Processing"
 totalEvents = "कुल events · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "प्रमाणीकरण"
+config = "कॉन्फ़िग"
+elevation = "उन्नयन"
+policy = "नीति"
+processing = "प्रोसेसिंग"
+security = "सुरक्षा"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "त्रुटि"
+info = "जानकारी"
+success = "सफलता"
+warning = "चेतावनी"
+
+[portal.infrastructure.certLabel]
+certified = "प्रमाणित"
+inProgress = "प्रगति में"
+notStarted = "शुरू नहीं हुआ"
+
 [portal.infrastructure.createKey]
 cancel = "रद्द करें"
 createKey = "key बनाएँ"
 done = "पूरा"
-ipAllowlistHelper = "कॉमा-सेपरेटेड CIDR ranges. किसी भी IP की अनुमति देने के लिए खाली छोड़ें।"
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Key name"
 keyNamePlaceholder = "उदा. Production · ingest"
-permissionsLabel = "अनुमतियाँ"
 secretKeyCaption = "Secret key"
 secretWarning = "इसे secrets manager में स्टोर करें। Stirling केवल hash स्टोर करता है — बाद में इसे पुनर्प्राप्त करने का कोई तरीका नहीं है।"
 subtitle = "Key को न्यूनतम आवश्यकता तक सीमित रखें। आप किसी भी समय रोटेट या revoke कर सकते हैं।"
@@ -6964,6 +7476,12 @@ subtitleCreated = "इस secret को अभी कॉपी करें —
 title = "API key बनाएँ"
 titleCreated = "Key बनाई गई"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "कतार में"
+rolledBack = "रोल बैक किया गया"
+rolling = "रोल आउट हो रहा है"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "हर डिप्लॉय किए गए Stirling क्ष
 description = "आपका workspace provision होने के बाद डिप्लॉय किए गए क्षेत्र यहाँ दिखाई देंगे।"
 title = "कोई क्षेत्र डिप्लॉय नहीं"
 
+[portal.infrastructure.keyLabel]
+active = "सक्रिय"
+revoked = "रद्द"
+
+[portal.infrastructure.modelLabel]
+active = "सक्रिय"
+degraded = "कमज़ोर"
+disabled = "अक्षम"
+
 [portal.infrastructure.models]
 heading = "Models"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "स्थिति"
 type = "प्रकार"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/call"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "सक्रिय models"
 avgLatency = "औसत latency"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} के लिए model"
 operation = "Operation"
 routedTo = "Route किया गया"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "वर्गीकरण"
+extraction = "निष्कर्षण"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "कमज़ोर"
+down = "Down"
+healthy = "स्वस्थ"
+
 [portal.infrastructure.security.access.byok]
 description = "अपने KMS से key दें। Stirling इसके साथ encrypt करता है लेकिन अभी भी पढ़ सकता है।"
 label = "अपनी key लाएँ (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Models"
 security = "Security"
 storage = "Storage"
 
+[portal.integrations]
+addAnother = "एक और जोड़ें"
+availableHeading = "उपलब्ध"
+comingSoonHeading = "जल्द आ रहा है"
+connect = "कनेक्ट करें"
+connectedHeading = "कनेक्टेड"
+connectionCount_one = "{{count}} कनेक्शन"
+connectionCount_other = "{{count}} कनेक्शन"
+customApi = "कस्टम API"
+searchPlaceholder = "इंटीग्रेशन खोजें"
+subtitle = "Stirling जिनसे बात कर सकता है, वह सब कुछ। क्रेडेंशियल्स यहाँ एक बार बनाए जाते हैं, फिर स्रोतों, नीतियों और पाइपलाइनों द्वारा संदर्भित किए जाते हैं।"
+title = "इंटीग्रेशन"
+typedName = "{{tool}} नाम"
+
+[portal.integrations.filters]
+all = "सभी"
+audit = "ऑडिट"
+connected = "कनेक्टेड"
+notify = "सूचित करें"
+security = "सुरक्षा"
+signing = "हस्ताक्षर"
+storage = "स्टोरेज"
+
+[portal.integrations.status]
+connected = "कनेक्टेड"
+
+[portal.integrations.table]
+integration = "इंटीग्रेशन"
+worksWith = "इसके साथ काम करता है"
+
+[portal.integrations.worksWith]
+pipelines = "पाइपलाइन"
+policies = "नीतियाँ"
+sources = "स्रोत"
+
+[portal.legal]
+draft = "{{label}} · draft"
+loadError = "यह दस्तावेज़ लोड नहीं हो सका। कृपया फिर से प्रयास करें।"
+loading = "लोड हो रहा है…"
+title = "कानूनी दस्तावेज़"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Components"
@@ -7182,6 +7765,7 @@ documents = "दस्तावेज़"
 editor = "Editor"
 home = "होम"
 infrastructure = "इन्फ्रास्ट्रक्चर"
+integrations = "इंटीग्रेशन"
 pipelines = "पाइपलाइन्स"
 policies = "पॉलिसियाँ"
 procurement = "Procurement"
@@ -7190,25 +7774,9 @@ sources = "स्रोत"
 usage = "Usage & Billing"
 users = "उपयोगकर्ता"
 
-[portal.notifications]
-markAllRead = "सभी को पढ़ा हुआ चिह्नित करें"
-title = "सूचनाएँ"
-viewAll = "सभी देखें"
-
-[portal.notifications.ariaLabel]
-none = "सूचनाएँ, कोई अपठित नहीं"
-unread_one = "सूचनाएँ, {{count}} अपठित"
-unread_other = "सूचनाएँ, {{count}} अपठित"
-
-[portal.notifications.count]
-allRead = "सभी पढ़े गए"
-loading = "लोड हो रहा है"
-new_one = "{{count}} नया"
-new_other = "{{count}} नए"
-
-[portal.notifications.empty]
-description = "कोई नई सूचनाएँ नहीं।"
-title = "आप पूरी तरह अपडेट हैं"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Backend पर हर automated document pipeline: sources के सेट पर operations की ordered chain, trigger पर चलती है। इसके steps और sources के लिए किसी row पर क्लिक करें।"
@@ -7220,15 +7788,28 @@ newPipeline = "नई पाइपलाइन"
 [portal.pipelines.builder]
 addStep = "टूल जोड़ें"
 back = "पाइपलाइन्स पर वापस जाएँ"
+cannotFollow = "{{produced}} नहीं ले सकता"
+chooseAccount = "एक खाता चुनें"
+chooseDestination = "एक गंतव्य चुनें"
+chooseOperation = "चुनें कि यह चरण क्या करता है"
+chooseSource = "एक स्रोत चुनें"
 discard = "बदलाव छोड़ें"
 enabled = "सक्षम"
+inputs = "इनपुट"
+inputSource = "इनपुट स्रोत"
+inputTrigger = "ट्रिगर"
 keepEditing = "संपादन जारी रखें"
+needsConfiguring = "सेटअप आवश्यक है"
 needsUpload = "अपलोड की गई फ़ाइल आवश्यक"
+noSources = "अभी तक कोई स्रोत कनेक्ट नहीं है। इसे इनपुट के रूप में उपयोग करने के लिए एक बनाएँ।"
 noToolMatches = "आपकी खोज से कोई टूल मेल नहीं खाते।"
 pipelineSettings = "पाइपलाइन सेटिंग्स"
 searchTools = "टूल खोजें"
 selectToolBody = "अपनी पाइपलाइन बनाने के लिए एक टूल जोड़ें।"
 selectToolTitle = "अभी कोई टूल नहीं"
+sendToSystem = "दूसरे सिस्टम को भेजें"
+stepsIncompatible = "ये चरण उनके पिछले चरण द्वारा उत्पन्न चीज़ पर नहीं चल सकते: {{tools}}।"
+stepsNeedSetup = "सेव करने से पहले इन चरणों का सेटअप अभी भी आवश्यक है: {{tools}}।"
 toolSettings = "टूल सेटिंग्स"
 unknownStep = "अपरिचित operation, जैसा है वैसा रखा गया।"
 unsavedBody = "आपके पास unsaved बदलाव हैं। बाहर निकलने से पहले उन्हें save करें, या छोड़ दें?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Unsaved बदलाव"
 uploadUnsupported = "Uploaded files अभी pipelines में supported नहीं हैं, इसलिए ये steps save नहीं किए जा सकते: {{tools}}."
 usesDefaults = "Default settings के साथ चलता है"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "पिछले चरण की हर फ़ाइल को जोड़ता है"
+fan-out = "पिछले चरण की प्रत्येक फ़ाइल के लिए एक बार चलता है"
+format-mismatch = "{{accepts}} आवश्यक है, लेकिन पिछला चरण {{produced}} उत्पन्न करता है"
+output-uncertain = "चल नहीं सकता: पिछले चरण का आउटपुट उसके सेटअप पर निर्भर करता है"
+source-mismatch = "{{accepts}} आवश्यक है, लेकिन इस पाइपलाइन का इनपुट {{produced}} है"
+undeclared-operation = "जाँच नहीं कर सकता कि यह चरण क्या स्वीकार करता है"
+
 [portal.pipelines.composer]
 addTool = "टूल जोड़ें"
 cancel = "रद्द करें"
 chainEmpty = "अपनी पाइपलाइन बनाना शुरू करने के लिए एक टूल जोड़ें।"
 create = "पाइपलाइन बनाएँ"
-directory = "Output folder"
-directoryHelp = "Server पर absolute path. यह configured allowed folders के भीतर होना चाहिए।"
 editingUnsupported = "Editing के लिए इन tool params को दिखाना अभी supported नहीं है।"
 moveDown = "नीचे ले जाएँ"
 moveUp = "ऊपर ले जाएँ"
 name = "नाम"
 namePlaceholder = "उदा. Redaction sweep"
-noSources = "अभी कोई स्रोत कनेक्ट नहीं हैं। पाइपलाइन फिर भी सीधे दी गई files पर चल सकती है।"
 noToolSettings = "इस टूल में कोई configurable settings नहीं हैं।"
 operations_one = "Operation ({{count}})"
 operations_other = "Operations ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "हटाएँ"
 title = "पाइपलाइन हटाएँ?"
 
 [portal.pipelines.detail]
+clearHistory = "इतिहास साफ़ करें"
 delete = "पाइपलाइन हटाएँ"
 run = "अभी चलाएँ"
 
 [portal.pipelines.empty]
 action = "पाइपलाइन बनाएँ"
+connectSource = "स्रोत कनेक्ट करें"
 description = "अपनी पहली पाइपलाइन बनाएँ: वे स्रोत चुनें जिन पर यह चलती है, operations को chain करें, और output कहाँ जाए चुनें।"
 title = "अभी कोई पाइपलाइन नहीं"
 
@@ -7286,15 +7874,17 @@ active = "सक्रिय"
 paused = "रोकी गई"
 total = "पाइपलाइन्स"
 
-[portal.pipelines.output]
-folder = "Folder में लिखें"
-inline = "Files लौटाएँ"
-
 [portal.pipelines.run]
+allProcessed_one = "चलाने के लिए कुछ नहीं: स्रोत का {{count}} दस्तावेज़ पहले ही प्रोसेस हो चुका है।"
+allProcessed_other = "चलाने के लिए कुछ नहीं: स्रोतों में सभी {{count}} दस्तावेज़ पहले ही प्रोसेस हो चुके हैं।"
 completed_one = "Run पूरा हुआ।"
 completed_other = "सभी {{count}} runs पूरे हुए।"
 empty = "चलाने के लिए कुछ नहीं: sources में process करने के लिए कोई documents नहीं थे।"
 failed = "Run विफल रहा: {{error}}"
+historyCleared = "इतिहास साफ़ किया गया। अगला रन स्रोतों में वर्तमान में मौजूद सब कुछ फिर से प्रोसेस करेगा।"
+inFlight = "चलाने के लिए कुछ नया नहीं: दस्तावेज़ अभी भी पहले के रन से प्रोसेस हो रहे हैं।"
+parked_one = "चलाने के लिए कुछ नहीं: {{count}} दस्तावेज़ पहले विफल हुआ और पार्क किया गया है। कारण ठीक करें, फिर इसे फिर से प्रयास करने के लिए इतिहास साफ़ करें।"
+parked_other = "चलाने के लिए कुछ नहीं: {{count}} दस्तावेज़ पहले विफल हुए और पार्क किए गए हैं। कारण ठीक करें, फिर इन्हें फिर से प्रयास करने के लिए इतिहास साफ़ करें।"
 running = "Run शुरू हुआ; अभी भी जारी है।"
 timeout = "Run अपेक्षा से अधिक समय ले रहा है; यह background में अभी भी पूरा हो सकता है।"
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Scheduled"
 
 [portal.policies]
+defaultName = "{{category}} नीति"
 subtitle = "Standing automations जो हर दस्तावेज़ पर tool pipeline लागू करते हैं। प्रत्येक policy upload या export पर चलती है, अपनी tool chain चलाती है, और enforced version को original के साथ save करती है।"
 title = "पॉलिसियाँ"
 
 [portal.policies.card]
 comingSoon = "Enterprise में अपग्रेड करें"
 notSetUp = "सेट अप नहीं"
+requiresAiEngine = "AI engine आवश्यक है"
+
+[portal.policies.categories.classification]
+desc = "अपलोड पर प्रत्येक दस्तावेज़ का प्रकार पहचानें और फ़ाइलिंग व खोज के लिए उसके metadata को tag करें।"
+label = "वर्गीकरण"
 
 [portal.policies.categories.compliance]
 desc = "हर दस्तावेज़ पर HIPAA, GDPR, SOC 2, या FedRAMP आवश्यकताएँ लागू करें।"
@@ -7344,6 +7940,13 @@ label = "Security"
 [portal.policies.config]
 scopeAll = "सभी दस्तावेज़"
 
+[portal.policies.config.classification]
+summary = "आपकी टीम के labels के विरुद्ध हर अपलोड किए गए दस्तावेज़ को वर्गीकृत करता है और उसके metadata को tag करता है।"
+
+[portal.policies.config.classification.rules]
+0 = "वर्गीकृत करें"
+1 = "metadata tag करें"
+
 [portal.policies.config.compliance]
 summary = "System से बाहर जाने से पहले regulatory frameworks के विरुद्ध documents को validate करता है।"
 
@@ -7371,6 +7974,29 @@ minConfidence = "न्यूनतम confidence"
 2 = "Name"
 3 = "Normalize"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview sensitivity label लागू करें"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "Purview portal से label का GUID। label लागू करने से उसका metadata PDF पर लिखा जाता है; यह encrypt नहीं कर सकता, जिसके लिए Microsoft client आवश्यक है।"
+labelName = "Label नाम (वैकल्पिक)"
+labelNameHelp = "ID के साथ रिकॉर्ड किया जाता है ताकि लोग और tools label को पहचान सकें।"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview किसी नीति द्वारा लागू किए गए label और व्यक्ति द्वारा चुने गए label में अंतर करता है।"
+label = "label कैसे रिकॉर्ड किया जाता है"
+privileged = "जैसा किसी व्यक्ति ने चुना"
+standard = "जैसा स्वतः लागू किया गया"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview label पढ़ें"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "दस्तावेज़ पर पहले से मौजूद label को पढ़ता है, ताकि बाद के चरण उस पर कार्रवाई कर सकें।"
+
 [portal.policies.config.retention]
 summary = "दस्तावेज़ कितने समय तक रखे जाएँ, कब archive हों, और कब delete हों, इसे लागू करता है।"
 
@@ -7438,6 +8064,7 @@ title = "अभी तक कोई गतिविधि नहीं"
 [portal.policies.endpoints]
 addWatermark = "Watermark"
 autoRedact = "PII संपादित करें"
+classifyAndLabel = "वर्गीकृत करें"
 compressPdf = "Compress"
 flatten = "Flatten"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "आपकी नीतियां सहेजी गई है
 retry = "फिर से प्रयास करें"
 title = "Backend उपलब्ध नहीं"
 
+[portal.policies.operations]
+change = "बदलें कि यह चरण क्या करता है"
+noResults = "कोई चरण इससे मेल नहीं खाता। product नाम, या \"scan\", \"notify\", \"attach\" आज़माएँ।"
+searchPlaceholder = "चरण खोजें - \"scan\", \"attach\" या product नाम आज़माएँ"
+
+[portal.policies.operations.bodyMode]
+binary = "Raw file bytes"
+json = "JSON payload के अंदर"
+multipart = "file upload (multipart) के रूप में"
+
+[portal.policies.operations.clamavScan]
+description = "आपका अपना ClamAV server दस्तावेज़ जाँचता है; आपके network से कुछ बाहर नहीं जाता।"
+label = "वायरस के लिए scan करें (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "macros, executables, scripts या embedded objects वाले दस्तावेज़ों को अस्वीकार करता है।"
+label = "active content ब्लॉक करें"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive दस्तावेज़ जाँचता है और यदि यह clean नहीं है तो run रुक जाता है।"
+label = "वायरस के लिए scan करें"
+
+[portal.policies.operations.confluenceAttach]
+description = "प्रोसेस किए गए दस्तावेज़ को page पर फ़ाइल करता है।"
+label = "Confluence page में संलग्न करें"
+
+[portal.policies.operations.consignoSubmit]
+description = "दस्तावेज़ को signing के लिए ConsignO Cloud में जमा करता है।"
+label = "हस्ताक्षर के लिए भेजें (ConsignO)"
+note = "दस्तावेज़ जमा करता है। signed copy प्राप्त करना अभी समर्थित नहीं है, क्योंकि कोई चरण परिणाम को बाद के चरण में पास नहीं कर सकता।"
+
+[portal.policies.operations.customApiCall]
+description = "call स्वयं बनाएँ: path, method, body और response handling।"
+label = "कस्टम API call करें"
+
+[portal.policies.operations.discordNotify]
+description = "एक channel को बताता है कि नीति ने दस्तावेज़ संभाला।"
+label = "Discord पर संदेश पोस्ट करें"
+
+[portal.policies.operations.elasticIndex]
+description = "नीति ने क्या किया, इसे searchable दस्तावेज़ के रूप में रिकॉर्ड करता है।"
+label = "Elasticsearch में audit event index करें"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart upload APIs के लिए उपयुक्त है; JSON उन APIs के लिए उपयुक्त है जो payload के अंदर फ़ाइल चाहते हैं; binary raw bytes भेजता है।"
+label = "दस्तावेज़ कैसे भेजें"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "एक JSON body जो as-is भेजी जाती है। {{document.base64}} फ़ाइल रखता है; {{document.*}} और {{run.*}} प्रति दस्तावेज़ भरे जाते हैं।"
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "खाता"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "form field जिसके अंतर्गत API दस्तावेज़ की अपेक्षा करता है।"
+label = "File field name"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "से"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "header name/value pairs का JSON object। connection का credential आपके लिए जोड़ा जाता है।"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "message body के रूप में भेजा गया। {{document.*}} और {{run.*}} प्रति दस्तावेज़ भरे जाते हैं।"
+label = "संदेश"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "connection के base URL में जोड़ा गया। यह कभी दूसरे host तक नहीं पहुँच सकता।"
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "drive में इसे कहाँ लिखना है। {{document.filename}} प्रति दस्तावेज़ भरा जाता है।"
+label = "गंतव्य path"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report दस्तावेज़ को अपरिवर्तित छोड़ता है। Replace इसे लौटे हुए उत्तर से बदल देता है।"
+label = "reply के साथ क्या करें"
+
+[portal.policies.operations.fields.signerEmail]
+label = "हस्ताक्षरकर्ता का email"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "विषय"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio इस text का विश्लेषण करता है। {{document.title}} का उपयोग करें या वह text paste करें जिसे आप जाँचना चाहते हैं।"
+label = "जाँचने के लिए text"
+
+[portal.policies.operations.fields.to]
+label = "को"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud username"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "एक space को बताता है कि नीति ने दस्तावेज़ संभाला।"
+label = "Google Chat पर संदेश पोस्ट करें"
+
+[portal.policies.operations.jiraAttach]
+description = "प्रोसेस किए गए दस्तावेज़ को issue पर फ़ाइल करता है।"
+label = "Jira issue में संलग्न करें"
+
+[portal.policies.operations.mailgunEmail]
+description = "प्रोसेस किए गए दस्तावेज़ को attachment के रूप में भेजता है।"
+label = "दस्तावेज़ email करें (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "प्रोसेस किए गए दस्तावेज़ को folder में लिखता है।"
+label = "Nextcloud पर अपलोड करें"
+
+[portal.policies.operations.presidioAnalyze]
+description = "आपका अपना Presidio server उसे मिले personal data की रिपोर्ट करता है।"
+label = "personal data का पता लगाएँ"
+note = "Presidio text पढ़ता है, files नहीं। उसे वह text दें जिसे आप जाँचना चाहते हैं — दस्तावेज़ स्वयं अपलोड नहीं होता।"
+
+[portal.policies.operations.responseMode]
+replace = "दस्तावेज़ को reply से बदलें"
+report = "दस्तावेज़ रखें, reply रिकॉर्ड करें"
+
+[portal.policies.operations.sendgridEmail]
+description = "प्रोसेस किए गए दस्तावेज़ को attachment के रूप में भेजता है।"
+label = "दस्तावेज़ email करें (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "एक channel को बताता है कि नीति ने दस्तावेज़ संभाला।"
+label = "Slack पर संदेश पोस्ट करें"
+
+[portal.policies.operations.splunkEvent]
+description = "नीति ने क्या किया, इसे वहाँ रिकॉर्ड करता है जहाँ आपके auditors पहले से देखते हैं।"
+label = "Splunk को audit event भेजें"
+
+[portal.policies.operations.sumologicEvent]
+description = "नीति ने क्या किया, इसे HTTP collector में रिकॉर्ड करता है।"
+label = "Sumo Logic को audit event भेजें"
+
+[portal.policies.operations.teamsNotify]
+description = "एक channel को बताता है कि नीति ने दस्तावेज़ संभाला।"
+label = "Teams पर संदेश पोस्ट करें"
+
+[portal.policies.operations.webhookPost]
+description = "दस्तावेज़ स्वयं आपके चुने हुए URL पर भेजता है।"
+label = "दस्तावेज़ को webhook पर पोस्ट करें"
+
+[portal.policies.operations.zapierNotify]
+description = "run के विवरण आपके automation को सौंपता है।"
+label = "Zap या Make scenario trigger करें"
+
 [portal.policies.stats]
 activeFor = "सक्रिय"
 dataProcessed = "प्रोसेस किया गया डेटा"
@@ -7473,6 +8277,13 @@ label = "लागू किए गए दस्तावेज़"
 description = "कॉन्फ़िगर किया गया लेकिन चालू नहीं हो रहा"
 label = "रोका गया"
 
+[portal.policies.table]
+appliesTo = "इस पर लागू"
+docs = "लागू दस्तावेज़"
+enforces = "लागू करता है"
+policy = "नीति"
+status = "स्थिति"
+
 [portal.policies.wizard.actions]
 back = "वापस"
 cancel = "रद्द करें"
@@ -7480,6 +8291,10 @@ continue = "जारी रखें"
 enablePolicy = "नीति सक्षम करें"
 saveChanges = "बदलाव सहेजें"
 
+[portal.policies.wizard.capability.classify]
+desc = "आपकी टीम के labels से दस्तावेज़ का प्रकार पहचानता है और उसे tag करता है, ताकि वह category के अनुसार फ़ाइल और खोज हो सके।"
+label = "दस्तावेज़ वर्गीकृत करें"
+
 [portal.policies.wizard.capability.compress]
 desc = "दस्तावेज़ को छोटे फ़ाइल आकार में Compress करता है।"
 label = "फ़ाइल आकार घटाएं"
@@ -7500,10 +8315,18 @@ label = "संवेदनशील जानकारी संपादित
 desc = "छिपा हुआ JavaScript हटाता है ताकि दस्तावेज़ खोले जाने पर कुछ भी अपने आप न चल सके।"
 label = "सक्रिय सामग्री हटाएं"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "स्वतंत्र timestamp authority का उपयोग करके साबित करता है कि दस्तावेज़ किसी समय पर इसी सटीक रूप में मौजूद था। केवल hash भेजा जाता है - दस्तावेज़ कभी आपके server से बाहर नहीं जाता।"
+label = "trusted timestamp जोड़ें"
+
 [portal.policies.wizard.capability.watermark]
 desc = "हर पेज पर एक दिखाई देने वाला निशान (जैसे “Confidential”) लगाता है।"
 label = "Watermark लागू करें"
 
+[portal.policies.wizard.classification]
+description = "हर अपलोड किया गया दस्तावेज़ built-in labels के विरुद्ध वर्गीकृत किया जाता है और उपयुक्त प्रकारों से tag किया जाता है। label set आपकी पूरी टीम में साझा होता है।"
+labelsHeading = "वर्गीकरण labels"
+
 [portal.policies.wizard.errors]
 noTools = "पहले वर्कफ़्लो में कम से कम एक टूल सक्षम करें।"
 saveFailed = "नीति सहेजी नहीं जा सकी। कृपया फिर से प्रयास करें।"
@@ -7548,73 +8371,118 @@ setUp = "{{category}} नीति सेट अप करें"
 [portal.policies.wizard.workflow]
 description = "चुनें कि यह नीति प्रोसेस किए जाने वाले हर दस्तावेज़ के साथ क्या करती है।"
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} सक्रिय"
-noRule = "अभी तक कोई नियम लागू नहीं"
-subtitle = "स्थायी ऑटोमेशन जिनसे हर दस्तावेज़ गुजरता है, चाहे उसे कौन सी pipeline संभालती हो।"
-title = "आपके PDFs पर क्या चलता है"
-
 [portal.policySummary.action]
-comingSoon = "Enterprise में अपग्रेड करें"
-configure = "कॉन्फ़िगर करें"
 setUp = "सेट अप करें"
 
-[portal.policySummary.column]
-activeRule = "सक्रिय नियम"
-policy = "नीति"
-status = "स्थिति"
+[portal.processorFlow]
+footnote = "गिनती पिछले 24 घंटों की है। Flow speed illustrative है।"
+liveBadge = "Live"
+stats = "{{connected}} कनेक्टेड · {{processed}} PDFs प्रोसेस किए गए"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "नीतियां कॉन्फ़िगर होने के बाद, श्रेणियां यहां दिखाई देंगी।"
-title = "अभी तक कोई नीति नहीं"
+[portal.processorFlow.lens]
+ariaLabel = "View mode"
+flow = "Flow"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "सक्रिय"
-off = "बंद"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "विफल"
+heading = "परिणाम"
+success = "Delivered"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} सक्रिय"
+count = "{{n}} · 24h"
+heading = "नीतियाँ"
+setUp = "सेट अप करें"
 soon = "जल्द"
 
-[portal.processingStatus]
-managePlan = "प्लान प्रबंधित करें"
-volumeSuffix = "PDFs प्रोसेस किए गए · पिछले 30 दिन"
+[portal.processorFlow.sankey]
+waist = "नीतियाँ · {{n}} सक्रिय"
+
+[portal.processorFlow.sankey.empty]
+description = "processor से दस्तावेज़ों का flow देखने के लिए एक स्रोत कनेक्ट करें और एक नीति चालू करें।"
+title = "अभी कोई flow नहीं"
+
+[portal.processorFlow.sources]
+comingSoonTag = "कनेक्ट करें"
+editor = "Stirling PDF Editor"
+heading = "स्रोत"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email intake"
 
 [portal.procurement]
-reset = "Procurement रीसेट करें (demo)"
 subtitle = "अपनी टीम का मूल्यांकन, अनुबंध और ऑनबोर्डिंग कराएं। हर दस्तावेज़ एक जगह।"
 title = "Procurement"
 
-[portal.procurement.action]
-download = "डाउनलोड"
-pay = "अभी भुगतान करें"
-request = "अनुरोध करें"
-sign = "समीक्षा करें और हस्ताक्षर करें"
-upload = "अपलोड"
-
 [portal.procurement.agreement]
 agreeCta = "सहमत हों और सदस्यता लें"
+confidential = "गोपनीय"
 confirm = "मैंने Stirling Enterprise Agreement पढ़ लिया है और उससे सहमत हूं।"
-eyebrow = "Agreement"
-intro = "एक संयुक्त agreement आपकी deal को कवर करता है: Master Service Agreement, Order Form, EULA, और Data Processing Agreement। इसकी समीक्षा करें, फिर quote को committed subscription में स्वीकार करने के लिए सहमत हों।"
-title = "अपने enterprise agreement की समीक्षा करें"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA और DPA, एक signature में संयुक्त।"
+download = "डाउनलोड"
+downloadDraftError = "agreement PDF generate नहीं हो सका - document renderer उपलब्ध नहीं है। कृपया थोड़ी देर बाद फिर से प्रयास करें या support से संपर्क करें।"
+downloadError = "signed agreement डाउनलोड नहीं हो सका। कृपया फिर से प्रयास करें।"
+legalName = "कानूनी entity name"
+legalNamePlaceholder = "वह legal entity जो हस्ताक्षर करेगी"
+loadError = "agreement लोड नहीं हो सका। कृपया फिर से प्रयास करें।"
+loading = "agreement लोड हो रहा है..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "बदलाव का अनुरोध करें"
+scrollHint = "समीक्षा के लिए scroll करें"
+signatory = "हस्ताक्षरकर्ता का नाम"
+signatoryPlaceholder = "पूरा नाम"
+signatoryTitle = "हस्ताक्षरकर्ता का title"
+signatoryTitlePlaceholder = "जैसे General Counsel"
+signError = "आपका signature रिकॉर्ड नहीं हो सका। कृपया फिर से प्रयास करें।"
 
 [portal.procurement.builder]
 addons = "Add-ons"
+addressLine1 = "पता पंक्ति 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "पता पंक्ति 2"
+addressLine2Placeholder = "Suite, floor, building"
 back = "वापस"
 businessName = "व्यवसाय का नाम"
 businessNamePlaceholder = "आपकी कंपनी"
+city = "शहर"
+cityPlaceholder = "San Francisco"
+completeRequired = "quote generate करने से पहले कृपया आवश्यक fields (चिह्नित *) को valid email के साथ पूरा करें।"
+contactEmail = "संपर्क email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "संपर्क नाम"
+contactNamePlaceholder = "Jane Doe"
 continue = "जारी रखें"
-country = "देश"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "United Kingdom (GBP £)"
-countryUS = "United States (USD $)"
+done = "हो गया"
 eula = "मैंने Stirling Enterprise EULA पढ़ लिया है और उससे सहमत हूं। यह इस quote से जनरेट किए गए agreement को नियंत्रित करता है।"
 generate = "Quote जनरेट करें"
-included = "शामिल"
 indemnification = "IP indemnification"
 indemnificationSub = "EULA के अनुसार, हम योग्य IP दावों का बचाव करते हैं"
-offlineLicense = "Offline / air-gapped licence"
-offlineLicenseSub = "air-gapped self-hosted instance के लिए डाउनलोड योग्य licence फ़ाइल"
+paperEyebrow = "Enterprise quote"
+paperFor = "इसके लिए तैयार"
+pdfSize = "PDF size"
+poNumber = "PO number"
+poNumberPlaceholder = "वैकल्पिक"
+postalCode = "Postal code"
+postalCodePlaceholder = "94105"
+posture = "Governance"
+posture_count = "~{{count}} नीतियाँ"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Classification + Sharing — डिफ़ॉल्ट"
+posture_governed = "Governed"
+posture_governedSub = "Security और Routing जोड़ता है"
+posture_regulated = "Regulated"
+posture_regulatedSub = "हर category — Compliance, Retention, Ingestion"
 qbr = "Quarterly business reviews"
 qbrSub = "आपका SE हर तिमाही उपयोग और roadmap की समीक्षा करता है"
+region = "State / region"
+regionPlaceholder = "California"
 running = "{{annual}} / वर्ष · {{years}}-वर्ष {{tcv}}"
 s1Sub = "आपकी टीम, और वे PDFs जिन्हें आप हर साल चलाने की उम्मीद करते हैं।"
 s1Title = "आप कितना प्रोसेस करेंगे?"
@@ -7623,6 +8491,12 @@ s2Title = "प्रतिबद्धता और सेवा"
 s3Sub = "Quote और उससे जनरेट होने वाले agreement के लिए।"
 s3Title = "आपका विवरण"
 serviceLevel = "Service level"
+size_compact = "Compact"
+size_compactSub = "अधिकतर text, 1 MB से कम"
+size_heavy = "Heavy"
+size_heavySub = "Scanned या image-heavy, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "मिश्रित text और images, 1 से 5 MB"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 व्यावसायिक घंटे · dedicated account manager · +30%"
 slPriority = "Priority"
@@ -7630,6 +8504,8 @@ slPrioritySub = "उसी व्यावसायिक दिन · named CSM
 slStandard = "Standard"
 slStandardSub = "अगला व्यावसायिक दिन · shared CSM · शामिल"
 stepOf = "चरण {{n}} / {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "वैकल्पिक"
 term = "अवधि"
 termDiscount = "{{pct}}% multi-year commitment discount लागू किया गया"
 title = "अपना quote बनाएं"
@@ -7637,6 +8513,7 @@ training = "Onboarding और training"
 trainingSub = "आपकी टीम को शुरू कराने के लिए live sessions"
 users = "कुल उपयोगकर्ता"
 usersPlaceholder = "जैसे 250"
+viewEula = "इसे पढ़ें"
 volEstimated = "{{count}} उपयोगकर्ताओं से अनुमानित (~2,000 PDFs प्रत्येक, automation सहित)। यदि आपको बेहतर पता हो तो संपादित करें।"
 volManual = "आपके आंकड़े का उपयोग हो रहा है। अपनी टीम के आकार से कभी भी फिर से अनुमान लगाएं।"
 volNoUsers = "पक्का नहीं? अपनी टीम का आकार दर्ज करें और हम इसका अनुमान लगाएंगे।"
@@ -7645,55 +8522,55 @@ volumePlaceholder = "जैसे 1,000,000"
 years_one = "{{count}} वर्ष"
 years_other = "{{count}} वर्ष"
 
-[portal.procurement.docs]
-count_one = "{{count}} दस्तावेज़"
-count_other = "{{count}} दस्तावेज़"
-done = "पूर्ण"
-here = "आप यहां हैं"
-hide = "छिपाएं"
-optional = "वैकल्पिक"
-paidAddon = "Paid add-on"
-show = "दिखाएं"
-subtitle = "यात्रा के हर चरण में आपको जो कुछ चाहिए, deal के आगे बढ़ते ही सामने लाया जाता है।"
-supportingSubtitle = "SOC 2, सुरक्षा समीक्षाएं, कर फ़ॉर्म और बहुत कुछ, जब आपकी सुरक्षा या procurement टीम मांगे तब तैयार। कुछ पर एक बार का शुल्क लगता है।"
-supportingTitle = "आपके मूल्यांकन का समर्थन"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form और DPA एक signature में।"
+download = "डाउनलोड"
+eula = "EULA & Commercial Terms"
+eulaSub = "software और self-serve commercial terms।"
+invoice = "Invoice"
+invoiceSub = "आपका पहला subscription invoice।"
+laterInvoice = "आपके स्वीकार करने के बाद उपलब्ध"
+laterQuote = "आपका quote जारी होने पर उपलब्ध"
+quote = "Quote"
+quoteSub = "आपका itemised enterprise quote।"
+sla = "SLA Exhibit"
+slaSub = "Support tiers और response targets।"
+subprocessors = "Subprocessors"
+subprocessorsSub = "Third parties जो आपकी ओर से data process करते हैं।"
+subtitle = "आपके deal paperwork, किसी भी समय उपलब्ध।"
 title = "दस्तावेज़"
-upcoming = "आगामी"
+view = "देखें"
 
 [portal.procurement.error]
 title = "कुछ गलत हो गया"
 
 [portal.procurement.hero]
-company = "आपकी enterprise deal"
+barAria = "Stage {{current}} of {{total}}"
 ctaAgreement = "Agreement की समीक्षा करें और हस्ताक्षर करें"
-ctaLive = "आप live हैं"
-ctaPayment = "भुगतान जोड़ें"
+ctaExploring = "अपना trial सेट अप करें"
 ctaQuote = "अपने quote की समीक्षा करें"
+ctaReviewQuote = "quote की समीक्षा करें"
 ctaTrial = "अपना quote बनाएं"
+documents = "दस्तावेज़"
 eyebrow = "Enterprise procurement"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "टीममेट्स को आमंत्रित करें"
-keyDocs = "मुख्य दस्तावेज़"
-nextStep = "अगला चरण: {{action}}"
-notStarted = "शुरू नहीं हुआ"
+licenseKey = "लाइसेंस key"
+liveSub = "आपका organization provisioned है और आपका लाइसेंस सक्रिय है।"
+liveTitle = "आप Stirling Enterprise पर live हैं"
+next = "अगला: {{stage}}"
 open = "Procurement खोलें"
 scheduleCall = "कॉल शेड्यूल करें"
-setup1Sub = "अपने टीममेट्स को आमंत्रित करें"
-setup1Title = "PDF Editor deploy करें"
-setup2Sub = "Editors और अन्य स्रोतों में processing चालू करें"
-setup2Title = "PDF Processor कनेक्ट करें"
-setup3Sub = "जब आवश्यकता हो Security, Compliance, Routing, या Retention चालू करें"
-setup3Title = "अनुशंसित नीतियां जोड़ें"
+sentenceAgreement = "agreement की समीक्षा करें और हस्ताक्षर करें"
+sentenceLive = "provisioning और rollout"
+sentencePayment = "purchase order और payment"
+sentenceQuote = "अपने quote की समीक्षा करें और स्वीकार करें"
+sentenceTrial = "अपना trial workspace सेट अप करें"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} दिन बाकी"
 daysLeft_other = "{{count}} दिन बाकी"
-engineerLabel = "आपके solutions engineer"
-eyebrow = "आपका rollout"
-live = "आप Stirling Enterprise पर live हैं"
-nextStep = "अगला चरण: {{action}}"
-subtitle = "आपका solutions engineer हर चरण में साथ है। एक समय में एक अगली कार्रवाई; पूरी checklist नीचे है।"
-title = "Trial से live तक, एक guided path"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "एक हस्ताक्षर MSA, order form, EULA और DPA को कवर करता है।"
@@ -7727,6 +8604,9 @@ downloadError = "Offline licence फ़ाइल अभी जनरेट न
 downloadOffline = "Offline licence डाउनलोड करें (.lic)"
 hint = "इसे activate करने के लिए इस key को self-hosted instance में paste करें, या अपने records के लिए रखें। इसे सुरक्षित रखें।"
 label = "आपकी licence key"
+subtitle = "इस key से self-hosted instance सक्रिय करें, या इसे अपने records के लिए रखें।"
+title = "आपकी लाइसेंस key"
+trialFileHint = "यह आपकी trial licence file है। आपका agreement लागू होने के बाद, वापस आएँ और इसे फिर से डाउनलोड करें — online licence key के विपरीत, .lic file अपने आप update नहीं होगी।"
 
 [portal.procurement.link]
 cta = "Account लिंक करें"
@@ -7739,65 +8619,62 @@ description = "आपकी subscription सक्रिय है और आप
 eyebrow = "Live"
 title = "आप Stirling Enterprise पर live हैं"
 
-[portal.procurement.locked]
-description = "Trial keys, committed-volume quotes, one-signature agreement, payment, और आपका document ledger, enterprise evaluation शुरू करने के बाद सब यहां रहते हैं।"
-eyebrow = "केवल Enterprise"
-talkToSales = "Sales से बात करें"
-title = "Procurement track Enterprise के साथ खुलता है"
-
 [portal.procurement.milestone]
-accept = "स्वीकार करें और जारी रखें"
-description = "PDF को अपनी टीम के साथ साझा करने के लिए डाउनलोड करें, तैयार होने पर स्वीकार करने के लिए वापस आएं, या बदलाव करें।"
-download = "PDF डाउनलोड करें"
 downloadError = "Quote PDF अभी डाउनलोड नहीं किया जा सका — कृपया कुछ देर बाद फिर से प्रयास करें।"
-edit = "Quote संपादित करें"
-eyebrow = "Quote {{number}}"
-perYear = " / वर्ष"
-preparedFor = "{{company}} के लिए तैयार"
-tcv = "{{value}} कुल contract value"
-title = "आपका quote तैयार है"
-
-[portal.procurement.modal]
-cancel = "रद्द करें"
-chooseFile = "फ़ाइल चुनें"
-close = "बंद करें"
-downloadBody = "आपका डाउनलोड शीघ्र शुरू होगा।"
-downloadCta = "डाउनलोड"
-downloadTitle = "डाउनलोड"
-noFile = "कोई फ़ाइल चयनित नहीं"
-payBody = "Stripe के माध्यम से card या bank transfer द्वारा अपना committed contract भुगतान करें। भुगतान clear होते ही आपका workspace provision हो जाएगा।"
-payCta = "Stripe पर जारी रखें"
-payTitle = "भुगतान की पुष्टि करें"
-requestBodyFree = "हम इसे on demand जनरेट करते हैं। पुष्टि करें और आपका solutions engineer इसे शीघ्र भेज देगा।"
-requestBodyPaid = "यह paid add-on है। पुष्टि करें और आपका solutions engineer इसका scope तय करके paperwork भेजेगा।"
-requestCta = "अनुरोध करें"
-requestTitle = "इस दस्तावेज़ का अनुरोध करें"
-signBody = "E-signature के लिए Stirling Enterprise Agreement खोलता है: एक हस्ताक्षर MSA, order form, EULA और DPA को कवर करता है। हम अपने आप countersign करते हैं और आप payment तक आगे बढ़ते हैं।"
-signCta = "हस्ताक्षर के लिए खोलें"
-signTitle = "अपने agreement की समीक्षा करें और हस्ताक्षर करें"
-uploadBody = "हमें अपना PO भेजें और हम आपकी शर्तों पर उसके विरुद्ध invoice देंगे। PDF को drag करें या नीचे फ़ाइल चुनें।"
-uploadCta = "Purchase order अपलोड करें"
-uploadTitle = "अपना purchase order अपलोड करें"
 
 [portal.procurement.payment]
 description = "आपका quote स्वीकार कर लिया गया है और आपका licence पहले से सक्रिय है — आपकी टीम तुरंत शुरू कर सकती है। तैयार होने पर पहला invoice भुगतान करें; आप इसे यहां भुगतान या डाउनलोड कर सकते हैं, email की आवश्यकता नहीं।"
+downloadAgreement = "signed agreement डाउनलोड करें"
 downloadInvoice = "Invoice डाउनलोड करें"
-simulate = "प्राप्त भुगतान simulate करें (demo)"
+eyebrow = "Payment"
 title = "Subscription बनाई गई"
 viewInvoice = "Invoice देखें और भुगतान करें"
 
+[portal.procurement.review]
+acceptCta = "quote स्वीकार करें"
+annual = "वार्षिक शुल्क (वर्ष 1)"
+downloadCta = "quote डाउनलोड करें"
+poNumber = "Purchase order: {{po}}"
+renewal = "term के बाद {{amount}}/year पर renew होता है (+{{pct}}% CPI)"
+tcv = "{{years}}-year term, पूरा upfront paid: {{tcv}}"
+validUntil = "{{date}} तक मान्य"
+
 [portal.procurement.schedule]
 fallback = "Scheduler लोड नहीं हो सका।"
 fallbackLink = "Scheduling को नए tab में खोलें"
+loading = "scheduler लोड हो रहा है..."
 subtitle = "आपका solutions engineer rollout में आपकी टीम का मार्गदर्शन करेगा। अपने लिए उपयुक्त समय चुनें।"
 title = "कॉल शेड्यूल करें"
 
-[portal.procurement.status]
-action = "कार्रवाई आवश्यक"
-available = "उपलब्ध"
-complete = "पूर्ण"
-pending = "लंबित"
-request = "अनुरोध पर"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Sealed, no outbound"
+back = "वापस"
+businessName = "Business name"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Managed, सबसे तेज़ शुरुआत"
+continue = "जारी रखें"
+deployment = "इसे कहाँ deploy करना चाहिए?"
+eula = "मैं Stirling EULA & Commercial Terms से सहमत हूँ।"
+fullName = "पूरा नाम"
+fullNamePlaceholder = "आपका नाम"
+invites = "teammates आमंत्रित करें · वैकल्पिक"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "call schedule करें"
+seats = "testing करने वाले लोग"
+seatsPlaceholder = "जैसे 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker या Kubernetes"
+start = "trial शुरू करें"
+stepOf = "चरण {{n}} / {{total}}"
+subtitle = "14 दिनों के लिए मुफ़्त, card आवश्यक नहीं।"
+subtitleDetails = "आपके quote और agreement के लिए कुछ विवरण।"
+talkFirst = "पहले बात करना पसंद करेंगे?"
+title = "अपना trial सेट अप करें"
+viewEula = "इसे पढ़ें"
+workEmail = "Work email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "विस्तार करने से 7 दिन जुड़ते हैं और आपके solutions engineer को सूचना मिलती है।"
@@ -7808,20 +8685,6 @@ maxed = "अधिकतम हो गया"
 subtitle = "आपका free trial {{date}} तक चलता है। Card आवश्यक नहीं।"
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Committed volume pricing, org-wide SSO + SCIM + RBAC, 90-day immutable audit, और dedicated SE।"
-homeCta = "Trial शुरू करें →"
-homeHeadline = "लाखों PDFs प्रोसेस करें।"
-
-[portal.recentActivity]
-title = "हाल की गतिविधि"
-viewAll = "सभी देखें"
-
-[portal.recentActivity.empty]
-description = "Pipeline runs, deploys और agent events यहां दिखाई देंगे।"
-title = "अभी यहां कुछ नहीं"
-
 [portal.search]
 ariaLabel = "खोजें"
 placeholder = "Stirling खोजें — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Account link"
 
-[portal.shell.header]
-accountFallback = "Account"
-accountMenu = "Account menu"
-darkMode = "Dark mode"
-lightMode = "Light mode"
-search = "खोजें"
-searchPlaceholder = "खोजें…"
-signOut = "Sign out"
-switchToDark = "Dark theme पर स्विच करें"
-switchToLight = "Light theme पर स्विच करें"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Stirling account लिंक करें"
-planEditor = "Editor plan"
-planEnterprise = "Enterprise plan"
-planProcessor = "Processor plan"
 primaryNav = "Primary navigation"
 switchApp = "App बदलें"
 
+[portal.shell.topbar]
+closeNav = "navigation बंद करें"
+openNav = "navigation खोलें"
+search = "खोजें"
+
 [portal.sources]
 subtitle = "पुनः उपयोग योग्य input connections जो दस्तावेज़ों को Stirling में भेजते हैं। एक connection को एक बार कॉन्फ़िगर करें, फिर उसे किसी भी संख्या में policies से reference करें। इसके config और इसे उपयोग करने वाली policies के लिए किसी row पर click करें।"
 title = "स्रोत"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "स्रोत कनेक्ट करें"
 
+[portal.sources.builder]
+back = "स्रोतों पर वापस"
+backToTypes = "सभी स्रोत प्रकार"
+cancel = "रद्द करें"
+chooseHint = "चुनें कि दस्तावेज़ कहाँ से आते हैं। greyed-out connectors आने वाले हैं।"
+comingSoon = "जल्द आ रहा है"
+comingSoonHeading = "जल्द आ रहा है"
+create = "स्रोत बनाएँ"
+createTitle = "स्रोत कनेक्ट करें"
+delete = "हटाएँ"
+editTitle = "स्रोत संपादित करें"
+enabled = "सक्षम"
+save = "बदलाव सेव करें"
+
+[portal.sources.builder.folderAccess]
+description = "Folder automations केवल उन folders का उपयोग कर सकते हैं जिन्हें administrator ने अनुमति दी है। इसे Folder Access settings में जोड़ें, फिर फिर से प्रयास करें।"
+openSettings = "Folder Access settings"
+title = "इस folder की अनुमति नहीं है"
+
 [portal.sources.delete]
 body = "\"{{name}}\" हटाएं? इसे वापस नहीं किया जा सकता। इसे reference करने वाली policies को update करना होगा।"
 cancel = "रद्द करें"
 confirm = "हटाएं"
 title = "स्रोत हटाएं?"
 
-[portal.sources.detail]
-closeAriaLabel = "विवरण बंद करें"
-delete = "स्रोत हटाएं"
-docs24h = "पिछले 24h"
-docs30d = "पिछले 30 दिन"
-docsTotal = "कुल देखे गए"
-docsTrend = "पिछले 30 दिनों में दस्तावेज़"
-documents = "दस्तावेज़"
-edit = "संपादित करें"
-notReferenced = "किसी भी नीति द्वारा reference नहीं किया गया, इसलिए इसे हटाना सुरक्षित है।"
-pause = "रोकें"
-resume = "फिर शुरू करें"
-subtitle = "{{type}} · {{status}}"
-usedBy = "इसके द्वारा उपयोग किया गया"
-
 [portal.sources.empty]
 description = "एक folder (और जल्द ही, cloud storage) कनेक्ट करें ताकि आपकी policies के पास दस्तावेज़ खींचने की जगह हो।"
 title = "अभी तक कोई स्रोत कनेक्ट नहीं"
@@ -7899,18 +8754,57 @@ inUse = "उपयोग में"
 total = "Connections"
 unused = "Unused"
 
+[portal.sources.networkFields.connection]
+helperText = "server address और credentials के साथ stored connection। इसे संदर्भित करने वाले हर स्रोत द्वारा पुनः उपयोग किया जाता है।"
+label = "Connection"
+
+[portal.sources.networkFields.directory]
+helperText = "poll करने के लिए server पर folder, login home या share root के सापेक्ष। root के लिए खाली छोड़ें।"
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume हर policy द्वारा process होने के बाद server से प्रत्येक file हटा देता है।"
+label = "Read mode"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: प्रत्येक file को एक बार process करें"
+snapshot = "Snapshot: हर run में folder फिर से पढ़ें"
+
+[portal.sources.networkFields.recursive]
+label = "Folder depth"
+
+[portal.sources.networkFields.recursive.options]
+all = "subfolders शामिल करें"
+top = "केवल top level"
+
 [portal.sources.status]
 active = "सक्रिय"
 disabled = "Disabled"
 unused = "Unused"
 
 [portal.sources.table]
+documents = "दस्तावेज़"
 source = "स्रोत"
 status = "स्थिति"
 usedBy = "Policies"
 
+[portal.sources.types.box]
+description = "आपकी team द्वारा पहले से shared Box folders से दस्तावेज़ pull करें।"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "shared Dropbox folder से दस्तावेज़ pull करें।"
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "policy और AI runs में, editor में आपकी team द्वारा process किए गए दस्तावेज़।"
 label = "Editor"
+noPolicies = "editor से अभी तक कोई policies run नहीं हुईं।"
+
+[portal.sources.types.email]
+description = "dedicated mailbox पर भेजे गए attachments को दस्तावेज़ों में बदलें।"
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "नए दस्तावेज़ों के लिए server पर directory देखें।"
@@ -7943,25 +8837,80 @@ label = "Folder depth"
 all = "Subfolders शामिल करें"
 top = "केवल top level"
 
+[portal.sources.types.ftp]
+description = "नए दस्तावेज़ों के लिए FTP या FTPS server folder poll करें।"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "shared Google Drive folders से दस्तावेज़ pull करें।"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "नए दस्तावेज़ों के लिए SMB network share देखें।"
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "नए दस्तावेज़ों के लिए OneDrive folders देखें।"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Amazon S3 या S3-compatible bucket से दस्तावेज़ pull करें।"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "bucket और credentials रखने वाला stored connection। इसे संदर्भित करने वाले हर source और pipeline output द्वारा पुनः उपयोग किया जाता है।"
+label = "Connection"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume हर policy द्वारा process होने के बाद bucket से प्रत्येक object हटा देता है।"
+label = "Read mode"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: प्रत्येक object को एक बार process करें"
+snapshot = "Snapshot: हर run में bucket फिर से पढ़ें"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "केवल वे objects process किए जाते हैं जिनकी keys इस prefix से शुरू होती हैं।"
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "नए दस्तावेज़ों के लिए SFTP drop folder poll करें।"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint document libraries से दस्तावेज़ pull करें।"
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "स्रोत"
 
+[portal.sources.types.webhook]
+createNote = "जब आप यह webhook बनाते हैं, तो delivery URL और signing secret generate किए जाते हैं। Senders उस URL पर दस्तावेज़ POST करते हैं और referencing policies arrival पर run होती हैं।"
+description = "किसी भी external system से signed HTTP POST द्वारा दस्तावेज़ प्राप्त करें।"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "signing secret webhook बनाते समय एक बार दिखाया जाता है। इसे roll करने के लिए source फिर से बनाएँ।"
+
+[portal.sources.types.webhook.reveal]
+copy = "कॉपी करें"
+done = "हो गया"
+secret = "Signing secret"
+secretHelp = "इस key (HMAC-SHA256) से हर delivery के raw body पर sign करें और इसे X-Stirling-Signature header के रूप में भेजें।"
+secretWarning = "signing secret अभी कॉपी करें। आपकी सुरक्षा के लिए यह केवल एक बार दिखाया जाता है और बाद में पुनः प्राप्त नहीं किया जा सकता।"
+title = "Webhook बनाया गया"
+url = "Delivery URL"
+usage = "binary content type (application/pdf या application/octet-stream) के साथ प्रत्येक दस्तावेज़ को raw request body के रूप में delivery URL पर POST करें। Referencing policies arrival पर अपने आप run होती हैं।"
+
 [portal.sources.wizard]
-back = "वापस"
-cancel = "रद्द करें"
-continue = "जारी रखें"
-editTitle = "स्रोत संपादित करें"
 name = "नाम"
 namePlaceholder = "जैसे Claims intake"
-save = "बदलाव सहेजें"
-subtitle = "चरण {{current}} / {{total}} · {{label}}"
-title = "स्रोत कनेक्ट करें"
 type = "प्रकार"
 
-[portal.sources.wizard.steps]
-chooseType = "प्रकार चुनें"
-configure = "कॉन्फ़िगर करें"
-review = "समीक्षा करें और कनेक्ट करें"
+[portal.stepModal]
+close = "बंद करें"
 
 [portal.usage]
 managePayment = "भुगतान प्रबंधित करें"
@@ -8021,16 +8970,9 @@ summary = "Team का मालिक — उसके members के resources
 2 = "Default policy के माध्यम से portal access"
 3 = "Member जो कुछ कर सकता है, वह सब"
 
-[portal.welcome]
-ariaLabel = "Stirling PDF में आपका स्वागत है"
-badge = "Open-source"
-installEditor = "Editor install करें"
-inviteTeammates = "टीममेट्स को आमंत्रित करें"
-openInBrowser = "Browser में खोलें"
-perks = "हमेशा मुफ़्त · Self-hostable"
-subtitle = "दुनिया का सबसे सुरक्षित PDF Editor सभी आकार की teams के लिए मुफ़्त है। इसमें 60+ PDF operations और SSO शामिल हैं।"
-title = "स्वागत है"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Unlimited"
 
 [printFile]
 title = "फ़ाइल प्रिंट करें"
@@ -8613,6 +9555,14 @@ text = "अपने PDF पृष्ठों को 90-डिग्री इ
 [rotate.tooltip.header]
 title = "रोटेशन सेटिंग्स का अवलोकन"
 
+[ruler]
+clearAll = "सभी साफ़ करें"
+hideAllLabels = "सभी labels छिपाएँ"
+hideSmallLabels = "छोटे labels छिपाएँ"
+physicalValues = "Physical"
+scaled = "Scaled"
+showAllLabels = "सभी labels दिखाएँ"
+
 [sanitize]
 desc = "PDF फ़ाइलों से संभावित रूप से हानिकारक तत्व हटाएँ।"
 sanitizationResults = "सैनिटाइज़ेशन परिणाम"
@@ -8654,31 +9604,45 @@ label = "XMP मेटाडाटा हटाएँ"
 [sanitize.steps]
 settings = "सेटिंग्स"
 
-[sanitizePdf]
-tags = "साफ,सुरक्षित,सुरक्षा,खतरे-हटाएं"
-
 [sanitizePDF]
 title = "PDF सैनिटाइज़ करें"
 
+[sanitizePdf]
+tags = "साफ,सुरक्षित,सुरक्षा,खतरे-हटाएं"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "पृष्ठ-स्केल समायोजित करें"
 
+[scaleSettings]
+activeScale = "सक्रिय Scale"
+apply = "Scale लागू करें"
+applyCalibration = "Calibration लागू करें"
+calculatedScale = "Calculated scale"
+calibrate = "Calibrate"
+calibrating = "कैलिब्रेट हो रहा है"
+calibrationDistanceRequired = "शून्य से अधिक वास्तविक दूरी दर्ज करें"
+calibrationInvalid = "इस माप से पैमाना गणना करने में असमर्थ"
+calibrationPaperDistance = "मापी गई पृष्ठ दूरी: {{distance}}"
+calibrationTitle = "पैमाना कैलिब्रेट करें"
+calibrationTooltip = "पैमाना स्वचालित रूप से गणना करने के लिए कोई ज्ञात दूरी मापें"
+customScale = "कस्टम पैमाना"
+noneSet = "कोई कस्टम पैमाना सेट नहीं है"
+presets = "पूर्वनिर्धारित पैमाने"
+ratio = "पैमाना अनुपात"
+ratioHelp = "अनुपात: 1 पृष्ठ इकाई = X वास्तविक इकाइयाँ"
+ratioPlaceholder = "उदा., 100"
+ratioPositive = "अनुपात शून्य से अधिक होना चाहिए"
+ratioRequired = "अनुपात आवश्यक है"
+realDistance = "वास्तविक दूरी"
+realDistancePlaceholder = "उदा., 5"
+reset = "डिफ़ॉल्ट पर रीसेट करें"
+unit = "इकाई"
+unitInvalid = "अमान्य इकाई: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "कोण सीमा:"
-10 = "आउटपुट में श्वेत बॉर्डर को रोकने के लिए जोड़े और हटाए गए बॉर्डर का आकार निर्धारित करता है (डिफ़ॉल्ट: 1)।"
-2 = "छवि को घुमाने के लिए आवश्यक न्यूनतम सापेक्ष कोण निर्धारित करता है (डिफ़ॉल्ट: 10)।"
-3 = "टॉलरेंस:"
-4 = "अनुमानित पृष्ठभूमि रंग के आसपास रंग विविधता की सीमा निर्धारित करता है (डिफ़ॉल्ट: 30)।"
-5 = "न्यूनतम क्षेत्र:"
-6 = "एक फोटो के लिए न्यूनतम क्षेत्र सीमा निर्धारित करता है (डिफ़ॉल्ट: 10000)।"
-7 = "न्यूनतम कंटूर क्षेत्र:"
-8 = "एक फोटो के लिए न्यूनतम कंटूर क्षेत्र सीमा निर्धारित करता है"
-9 = "बॉर्डर आकार:"
-
 [scannerImageSplit]
 submit = "छवि स्कैन निकालें"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "यह क्या करता है"
 whatThisDoesDesc = "स्कैन्ड पृष्ठ या समग्र छवि से प्रत्येक फोटो को स्वचालित रूप से ढूंढकर निकालता है—मैन्युअल क्रॉपिंग की आवश्यकता नहीं।"
 whenToUse = "कब उपयोग करें"
 
+[ScannerImageSplit.selectText]
+1 = "कोण सीमा:"
+10 = "आउटपुट में श्वेत बॉर्डर को रोकने के लिए जोड़े और हटाए गए बॉर्डर का आकार निर्धारित करता है (डिफ़ॉल्ट: 1)।"
+2 = "छवि को घुमाने के लिए आवश्यक न्यूनतम सापेक्ष कोण निर्धारित करता है (डिफ़ॉल्ट: 10)।"
+3 = "टॉलरेंस:"
+4 = "अनुमानित पृष्ठभूमि रंग के आसपास रंग विविधता की सीमा निर्धारित करता है (डिफ़ॉल्ट: 30)।"
+5 = "न्यूनतम क्षेत्र:"
+6 = "एक फोटो के लिए न्यूनतम क्षेत्र सीमा निर्धारित करता है (डिफ़ॉल्ट: 10000)।"
+7 = "न्यूनतम कंटूर क्षेत्र:"
+8 = "एक फोटो के लिए न्यूनतम कंटूर क्षेत्र सीमा निर्धारित करता है"
+9 = "बॉर्डर आकार:"
+
 [search]
 noResults = "कोई परिणाम नहीं मिला"
 placeholder = "खोज शब्द दर्ज करें..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "आपका Stirling-PDF सर्वर ऑफ़
 [session]
 expired = "आपका सत्र समाप्त हो गया है। कृपया पृष्ठ को रिफ्रेश करें और पुन: प्रयास करें।"
 
-[sessionManagement.tooltip]
-header = "हस्ताक्षर सत्र प्रबंधन"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "नए प्रतिभागी हस्ताक्षर क्रम के अंत में जोड़े जाते हैं"
-bullet2 = "सत्र के अंतिम रूप के बाद प्रतिभागी नहीं जोड़े जा सकते"
-bullet3 = "प्रत्येक प्रतिभागी की बारी आने पर उसे सूचना मिलती है"
-description = "आप अंतिम रूप देने से पहले किसी भी समय सक्रिय सत्र में और प्रतिभागी जोड़ सकते हैं।"
-title = "प्रतिभागी जोड़ना"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>पूर्ण अंतिमकरण</b>: सभी प्रतिभागियों ने हस्ताक्षर किए हैं"
-bullet2 = "<b>आंशिक अंतिमकरण</b>: कुछ प्रतिभागियों ने अभी हस्ताक्षर नहीं किए"
-bullet3 = "बिना हस्ताक्षर वाले प्रतिभागियों को अंतिम दस्तावेज़ से बाहर रखा जाएगा"
-bullet4 = "अंतिम रूप देने के बाद, आप हस्ताक्षरित PDF को सक्रिय फ़ाइलों में लोड कर सकते हैं"
-description = "अंतिमकरण सभी हस्ताक्षरों को एकल हस्ताक्षरित PDF में संयोजित करता है। इस क्रिया को वापस नहीं लिया जा सकता।"
-title = "सत्र अंतिमकरण"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "जिन प्रतिभागियों ने पहले ही हस्ताक्षर कर दिए हैं, उन्हें नहीं हटाया जा सकता"
-bullet2 = "हटाए गए प्रतिभागियों को अब सूचनाएँ नहीं मिलेंगी"
-bullet3 = "हस्ताक्षर क्रम स्वतः समायोजित होता है"
-description = "प्रतिभागियों को हस्ताक्षर से पहले सत्रों से हटाया जा सकता है।"
-title = "प्रतिभागियों को हटाना"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "प्रत्येक हस्ताक्षर PDF पर क्रमवार लागू होता है"
-bullet2 = "बाद के साइनर पहले के हस्ताक्षर देख सकते हैं"
-bullet3 = "अनुमोदन कार्यप्रवाह और कानूनी कस्टडी चेन के लिए महत्वपूर्ण"
-description = "सत्र बनाते समय आप जो क्रम निर्दिष्ट करते हैं वह निर्धारित करता है कि पहले कौन हस्ताक्षर करेगा।"
-title = "हस्ताक्षर क्रम"
-
 [settings]
 close = "बंद करें"
 
+[settings.ai]
+documents = "दस्तावेज़ और RAG"
+general = "सामान्य"
+limits = "सीमाएँ और प्रदर्शन"
+models = "मॉडल और प्रदाता"
+title = "AI"
+
 [settings.configuration]
 advanced = "एडवांस्ड"
 database = "डेटाबेस"
 endpoints = "एंडपॉइंट्स"
 features = "फ़ीचर्स"
+folderAccess = "फ़ोल्डर पहुँच"
 mcp = "MCP Server"
 storageSharing = "फ़ाइल भंडारण और शेयरिंग"
 systemSettings = "सिस्टम सेटिंग्स"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "डिफ़ॉल्ट PDF एडिटर"
 defaultPdfEditorActive = "Stirling PDF आपका डिफ़ॉल्ट PDF एडिटर है"
 defaultPdfEditorChecking = "जांच हो रही है..."
 defaultPdfEditorInactive = "कोई अन्य एप्लिकेशन डिफ़ॉल्ट है"
+defaultPdfEditorRemind = "डिफ़ॉल्ट के रूप में सेट करने के लिए मुझे याद दिलाएँ"
+defaultPdfEditorRemindDescription = "जब Stirling PDF आपका डिफ़ॉल्ट PDF एप्लिकेशन न हो, तो बैनर दिखाएँ।"
 defaultPdfEditorSet = "पहले से डिफ़ॉल्ट"
 defaultStartupView = "लॉन्च पर डिफ़ॉल्ट दृश्य"
 defaultStartupViewDescription = "ऐप शुरू होने पर बाएँ कॉलम में कौन-सा टैब सक्रिय हो, चुनें"
@@ -8817,9 +9771,18 @@ languageDescription = "प्रदर्शन भाषा चुनें"
 logout = "लॉग आउट"
 setAsDefault = "डिफ़ॉल्ट बनाएं"
 theme = "थीम"
+themeAccent = "एक्सेंट रंग"
+themeAccentCustom = "कस्टम रंग"
+themeAccentCustomHint = "कस्टम (डिफ़ॉल्ट अनुशंसित)"
+themeAccentDark = "डार्क मोड एक्सेंट रंग"
+themeAccentDefault = "डिफ़ॉल्ट"
+themeAccentDefaultHint = "डिफ़ॉल्ट थीम (अनुशंसित)"
+themeAccentDescription = "बटन, लिंक और हाइलाइट इसके अनुसार होते हैं, और यह ऐप को हल्का रंग देता है। लाइट और डार्क, दोनों के अपने-अपने रंग हैं। सिस्टम जो सक्रिय हो उसका उपयोग करता है।"
+themeAccentLight = "लाइट मोड एक्सेंट रंग"
 themeDark = "डार्क"
 themeDescription = "लाइट और डार्क मोड के बीच स्विच करें"
 themeLight = "लाइट"
+themeReset = "थीम को डिफ़ॉल्ट पर पुनर्स्थापित करें"
 themeSystem = "System"
 title = "सामान्य"
 user = "उपयोगकर्ता"
@@ -8833,6 +9796,12 @@ intro = "अपने संगठन के लिए उपयोगकर्
 learnMore = "दस्तावेज़ीकरण में और जानें"
 title = "सिस्टम प्रशासकों के लिए"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud में साइन इन करने पर कौन सा ऐप खुले, चुनें।"
+editor = "एडिटर"
+processor = "प्रोसेसर"
+title = "साइन इन करने के बाद"
+
 [settings.general.mode]
 fullscreen = "फुलस्क्रीन"
 sidebar = "साइडबार"
@@ -9041,6 +10010,11 @@ security = "सुरक्षा"
 telegram = "Telegram"
 title = "सुरक्षा और प्रमाणीकरण"
 
+[settings.signOut]
+confirm = "क्या आप वाकई साइन आउट करना चाहते हैं?"
+submit = "साइन आउट"
+title = "साइन आउट"
+
 [settings.team]
 title = "टीम"
 
@@ -9657,6 +10631,9 @@ uploadButton = "सर्वर पर अपलोड करें"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "यहाँ क्लिक करें"
+fallback = "यदि यह स्वचालित रूप से नहीं खुला,"
+opening = "Swagger UI नए टैब में खुल रहा है..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API दस्तावेज़ीकरण"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "यह उपकरण चलाने के लिए Activ
 singleFileScope = "केवल इस पर लागू: {{fileName}}"
 viewerMode = "एकाधिक फ़ाइलें चुनने के लिए फ़ाइल संपादक पर स्विच करें।"
 
+[toolFormat]
+ANY = "कोई भी फ़ाइल"
+CBR = "कॉमिक बुक आर्काइव (CBR)"
+CBZ = "कॉमिक बुक आर्काइव (CBZ)"
+CSV = "CSV फ़ाइल"
+EBOOK = "ईबुक"
+EMAIL = "ईमेल"
+EXCEL = "स्प्रेडशीट"
+HTML = "वेब पेज"
+IMAGE = "छवियाँ"
+JAVASCRIPT = "JavaScript फ़ाइल"
+JSON = "JSON फ़ाइल"
+MARKDOWN = "Markdown फ़ाइल"
+NONE = "कोई फ़ाइल नहीं"
+PCL = "PCL प्रिंट फ़ाइल"
+PDF = "PDF"
+PDF_ENCRYPTED = "पासवर्ड-सुरक्षित PDF"
+POSTSCRIPT = "PostScript फ़ाइल"
+PPT = "प्रस्तुति"
+TEXT = "टेक्स्ट फ़ाइल"
+VIDEO = "वीडियो"
+WORD = "Word दस्तावेज़"
+XML = "XML फ़ाइल"
+XPS = "XPS दस्तावेज़"
+ZIP = "ZIP आर्काइव"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "सभी उपकरणों पर वापस"
 collapse = "पैनल समेटें"
 expand = "पैनल फैलाएँ"
 goBack = "वापस जाएं"
+pdfTools = "PDF Tools"
 placeholder = "शुरू करने के लिए कोई टूल चुनें"
 premiumFeature = "प्रीमियम फीचर:"
+searchTools = "टूल खोजें"
 toolsHeader = "उपकरण"
 viewAllTools = "सभी उपकरण देखें"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "कोई टूल नहीं मिला"
 quickAccess = "त्वरित पहुँच"
 searchPlaceholder = "टूल खोजें..."
 
-[toolPicker.categories]
-advancedTools = "उन्नत टूल"
-recommendedTools = "अनुशंसित टूल"
-standardTools = "मानक टूल"
-
 [toolPicker.subcategories]
 advancedFormatting = "उन्नत फ़ॉर्मेटिंग"
 automation = "स्वचालन"
@@ -9950,16 +10950,31 @@ title = "उपयोगकर्ता"
 you = "(आप)"
 
 [users.action]
+cancelInvite = "आमंत्रण रद्द करें"
 deleteTeam = "Team हटाएं"
 disableMfa = "MFA रीसेट करें"
 move = "Team में ले जाएं"
 reinstate = "Reinstate"
 remove = "Org से हटाएं"
+removeTeam = "टीम से हटाएँ"
 rename = "Team का नाम बदलें"
 resetPw = "Password रीसेट करें"
 suspend = "Suspend"
 unlock = "Account unlock करें"
 
+[users.activity]
+daysAgo = "{{count}} दिन पहले"
+hoursAgo = "{{count}} घंटे पहले"
+justNow = "अभी-अभी"
+minutesAgo = "{{count}} मिनट पहले"
+monthsAgo_one = "{{count}} महीना पहले"
+monthsAgo_other = "{{count}} महीने पहले"
+never = "कभी नहीं"
+weeksAgo_one = "{{count}} सप्ताह पहले"
+weeksAgo_other = "{{count}} सप्ताह पहले"
+yearsAgo_one = "{{count}} वर्ष पहले"
+yearsAgo_other = "{{count}} वर्ष पहले"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Policy approve करता है"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "{{email}} को भेजा गया आमंत्रण रद्द करें? वे मौजूदा लिंक से शामिल नहीं हो पाएँगे।"
+cancelInviteTitle = "आमंत्रण रद्द करें"
 deleteTeamBody = "{{name}} team हटाएं? पहले team खाली होनी चाहिए - इसके members को दूसरी team में ले जाएं, और इसके पास कोई integration configs नहीं होने चाहिए।"
 deleteTeamTitle = "Team हटाएं"
 disableMfaBody = "{{name}} का MFA enrolment हटाएं? यदि आवश्यक हो तो वे अगले login पर इसे फिर से set up करेंगे।"
 disableMfaTitle = "MFA रीसेट करें"
 removeBody = "{{name}} को organization से स्थायी रूप से हटाएं? इसे वापस नहीं किया जा सकता।"
+removeTeamBody = "{{name}} को टीम से हटाएँ? उनका खाता बना रहेगा, लेकिन वे इस टीम के संसाधनों तक पहुँच खो देंगे।"
 removeTitle = "Member हटाएं"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "उपयोगकर्ता नाम"
 usernameError = "उपयोगकर्ता नाम कम से कम 3 वर्णों का होना चाहिए"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "{{who}} द्वारा आमंत्रित"
+cancel = "रद्द करें"
+count = "{{count}} लंबित"
+desc = "आमंत्रित लोग जो अभी तक शामिल नहीं हुए हैं। वे स्वीकार करने तक एक सीट रखते हैं।"
+expiresInDays_one = "{{count}} दिन में समाप्त होगा"
+expiresInDays_other = "{{count}} दिनों में समाप्त होगा"
+expiresToday = "आज समाप्त होगा"
+title = "लंबित आमंत्रण"
+
 [users.loadError]
 description = "backend तक पहुँचने में कुछ गलत हुआ, या आपके पास पहुँच नहीं है। फिर से कोशिश करें।"
 title = "सदस्यों को लोड नहीं किया जा सका"
@@ -10212,9 +11240,11 @@ title = "संलग्नक"
 
 [viewer.bookmarks]
 bookmarkTitle = "बुकमार्क शीर्षक"
+bookmarkTitleRequired = "बुकमार्क शीर्षक आवश्यक है"
 closeSidebar = "बुकमार्क sidebar बंद करें"
 collapseAll = "सभी बुकमार्क संक्षिप्त करें"
 expandAll = "सभी बुकमार्क विस्तृत करें"
+searchPlaceholder = "बुकमार्क खोजें"
 
 [viewer.comments]
 addComment = "टिप्पणी जोड़ें"
@@ -10605,30 +11635,6 @@ title = "वॉटरमार्क टेक्स्ट"
 image = "इमेज"
 text = "टेक्स्ट"
 
-[wetSignature.tooltip]
-header = "हस्ताक्षर बनाने के तरीके"
-
-[wetSignature.tooltip.draw]
-bullet1 = "पेन का रंग और मोटाई अनुकूलित करें"
-bullet2 = "संतुष्ट होने तक साफ करें और फिर से बनाएं"
-bullet3 = "टच डिवाइस (टैबलेट, फ़ोन) पर काम करता है"
-description = "अपने माउस या टचस्क्रीन का उपयोग करके हस्तलिखित हस्ताक्षर बनाएं। व्यक्तिगत और प्रामाणिक हस्ताक्षरों के लिए सर्वोत्तम।"
-title = "हस्ताक्षर बनाएं"
-
-[wetSignature.tooltip.type]
-bullet1 = "कई फ़ॉन्ट में से चुनें"
-bullet2 = "टेक्स्ट का आकार और रंग अनुकूलित करें"
-bullet3 = "मानकीकृत हस्ताक्षरों के लिए उपयुक्त"
-description = "टाइप किए गए टेक्स्ट से हस्ताक्षर बनाएं। तेज़ और सुसंगत, व्यावसायिक दस्तावेज़ों के लिए उपयुक्त।"
-title = "हस्ताक्षर टाइप करें"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG और अन्य इमेज फ़ॉर्मैट समर्थित हैं"
-bullet2 = "बेहतर परिणामों के लिए पारदर्शी पृष्ठभूमि की अनुशंसा की जाती है"
-bullet3 = "हस्ताक्षर क्षेत्र में फिट करने के लिए इमेज का आकार बदला जाएगा"
-description = "पहले से बनाई गई हस्ताक्षर इमेज अपलोड करें। यदि आपके पास स्कैन किया हुआ हस्ताक्षर या कंपनी लोगो है तो उपयुक्त।"
-title = "हस्ताक्षर इमेज अपलोड करें"
-
 [workbenchBar]
 activeFiles = "सक्रिय फ़ाइलें"
 annotations = "एनोटेशन"
@@ -10652,6 +11658,7 @@ redact = "रिडैक्ट"
 rotateLeft = "बाएँ घुमाएँ"
 rotateRight = "दाएँ घुमाएँ"
 ruler = "रूलर / माप"
+rulerSettings = "पैमाना सेटिंग्स"
 save = "सहेजें"
 saveAll = "सभी सहेजें"
 saveAs = "इस रूप में सहेजें"
diff --git a/frontend/editor/public/locales/hr-HR/translation.toml b/frontend/editor/public/locales/hr-HR/translation.toml
index 82f488b577..93aba098df 100644
--- a/frontend/editor/public/locales/hr-HR/translation.toml
+++ b/frontend/editor/public/locales/hr-HR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "odabrane datoteke"
 font = "Pismo"
 fontSizeTooltip = "Veličina teksta broja stranice u točkama. Veći brojevi stvaraju veći tekst."
 fontTypeTooltip = "Obitelj fonta za brojeve stranica. Odaberite prema stilu dokumenta."
-genericSubmit = "Pošalji"
 green = "Zeleno"
 help = "Pomoć"
-imgPrompt = "Odaberi sliku (slike)"
 incorrectPasswordMessage = "Kriva zaporka."
 info = "Informacije"
 invalidUndoData = "Nije moguće poništiti: nevaljani podaci o radnji"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Ugovor o prijavi"
 logOut = "Odjava"
 marginTooltip = "Udaljenost između broja stranice i ruba stranice."
 moreOptions = "Više opcija"
-multiPdfPrompt = "Odaberi PDF-ove (2+)"
 never = "Nikada"
 no = "Ne"
 noFileSelected = "Nije odabrana nijedna datoteka. Učitajte jednu."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Prilagođeni redoslijed stranica (unesi listu brojeva stranic
 pages = "Stranice"
 pageSelectionPrompt = "Prilagođeni odabir stranica (unesi listu brojeva stranica ili funkcija, kao što su 2n+1, razdvojene zarezima) :"
 password = "Zaporka"
-pdfPrompt = "Odaberi PDF(ove)"
 pin = "Prikvači datoteku (zadrži aktivnu nakon pokretanja alata)"
 pro = "Pro"
 processingComplete = "Vaša datoteka je spremna."
@@ -356,6 +352,7 @@ text = "Ove dozvole kontroliraju što korisnici mogu raditi s PDF-om. Najdjelotv
 title = "Promjena dopuštenja"
 
 [addStamp]
+preview = "Pregled žiga"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ručno preuzimanje: kliknite poveznice i stavite datoteke u mapu
 noLanguages = "U konfiguriranom direktoriju nisu pronađeni tessdata jezici."
 permissionNotice = "Putanja do tessdata nije zapisiva. Preuzimanja će se otvoriti u pregledniku; spremite .traineddata datoteke ručno u mapu tessdata."
 
+[admin.settings.ai.documents]
+description = "Konfigurirajte model ugradnje i postavke dohvaćanja koje se koriste za odgovaranje na pitanja o dokumentima. Primjenjuje se na AI engine nakon spremanja."
+title = "Dokumenti i RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Ostavite prazno za upotrebu vlastite vjerodajnice okruženja enginea. Primjenjuje se na samostalno hostirane implementacije s jednim engineom."
+generic = "API ključ za ugradnju"
+openai = "OpenAI API ključ"
+setPlaceholder = "Spremljeno - ostavite prazno za zadržavanje trenutačnog ključa"
+voyageai = "VoyageAI API ključ"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Osnovni URL OpenAI-kompatibilne / Ollama krajnje točke za ugradnje, npr. http://ollama:11434/v1. Mora upućivati na pouzdanu internu krajnju točku (osjetljivo na SSRF)."
+label = "Osnovni URL ugradnje"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Naziv modela ugradnje. Slobodan tekst; prijedlozi su samo smjernice."
+label = "Model ugradnje"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Pružatelj koji se koristi za pretvaranje teksta dokumenta u vektorske ugradnje."
+label = "Pružatelj ugradnje"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maksimalan broj pretraživanja dohvaćanja koje agent može pokrenuti po zahtjevu."
+label = "Maks. pretraživanja"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Promjena modela ugradnje stupa na snagu odmah, ali dokumenti indeksirani prethodnim modelom moraju se ponovno indeksirati kako bi pretraživanje vratilo ispravne rezultate."
+title = "Potrebno ponovno indeksiranje"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Ako ste promijenili model ugradnje, ponovno indeksirajte postojeće dokumente kako bi pretraživanje koristilo novi model."
+
+[admin.settings.ai.documents.topK]
+description = "Broj najrelevantnijih dijelova dohvaćenih po pretraživanju."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Povežite Stirling s Python AI engineom i odaberite koje su AI mogućnosti dostupne. Promjene se primjenjuju pri ponovnom pokretanju."
+title = "AI engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Uključite ili isključite pojedinačne AI značajke. Onemogućene značajke skrivene su u aplikaciji."
+title = "Mogućnosti"
+
+[admin.settings.ai.general.enabled]
+description = "Glavni prekidač. Kada je isključen, nisu dostupni AI alati, agenti ni pozivi enginea."
+label = "Omogući AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Razgovorni asistent za rad s PDF-ovima."
+label = "Asistent za chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Automatski kategorizirajte dokumente prema vrsti ili sadržaju."
+label = "Klasifikacija dokumenata"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generirajte novi PDF (npr. iz HTML-a) putem AI agenta."
+label = "Izradi PDF iz upita"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Postavljajte pitanja i dobivajte odgovore utemeljene na prenesenom dokumentu."
+label = "Pitanja o dokumentu"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Pregledajte dokumente radi matematičkih i numeričkih pogrešaka."
+label = "Matematički revizor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Dodajte AI-generirane komentare pregleda i bilješke u PDF."
+label = "Agent za PDF komentare"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Istek vremena za zahtjevnije operacije agenata, poput generiranja dokumenata."
+label = "Istek vremena za dugotrajne zadatke (sekunde)"
+
+[admin.settings.ai.general.note]
+body = "AI engine radi kao zasebna usluga. Njegova dijeljena tajna"
+body2 = "postavlja se putem varijable okruženja spremnika. API ključevi pružatelja mogu se unijeti na ovim stranicama ili dostaviti kao varijable okruženja enginea; ovdje uneseni ključevi šalju se engineu nakon spremanja."
+title = "O AI engineu"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Istek vremena za streamane (token-po-token) odgovore chata."
+label = "Istek vremena streama (sekunde)"
+
+[admin.settings.ai.general.test]
+button = "Testiraj vezu"
+failBody = "AI engine nije odgovorio. Provjerite URL, radi li spremnik enginea i je li AI omogućen (nakon omogućavanja potrebno je ponovno pokretanje)."
+failTitle = "AI engine nije dostupan"
+okBody = "AI engine je odgovorio na provjeru stanja."
+okTitle = "AI engine je dostupan"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Istek vremena za standardne AI zahtjeve prema engineu."
+label = "Istek vremena zahtjeva (sekunde)"
+
+[admin.settings.ai.general.url]
+description = "Interni URL Python AI enginea, npr. http://stirling-pdf-engine:5001."
+label = "URL AI enginea"
+
+[admin.settings.ai.limits]
+description = "Zaštitna ograničenja za količinu rada koju AI zahtjevi mogu obaviti i koliko ih se može izvršavati istodobno. Primjenjuje se na AI engine nakon spremanja."
+title = "Ograničenja i performanse"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Zaštitno ograničenje: odbij AI zahtjeve čiji izdvojeni tekst premašuje ovu duljinu."
+label = "Maks. znakova po zahtjevu"
+
+[admin.settings.ai.limits.maxPages]
+description = "Zaštitno ograničenje: odbij AI zahtjeve s više od ovoliko PDF stranica."
+label = "Maks. stranica po zahtjevu"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maksimalan broj istodobnih poziva modela u tijeku preko cijelog enginea."
+label = "Maks. istodobnost modela"
+
+[admin.settings.ai.models]
+description = "Odaberite LLM pružatelja i pametne/brze modele koje AI engine koristi. Primjenjuje se na AI engine nakon spremanja."
+title = "Modeli i pružatelji"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API ključ"
+description = "Ostavite prazno za upotrebu vlastite vjerodajnice okruženja enginea. Primjenjuje se na samostalno hostirane implementacije s jednim engineom."
+generic = "API ključ"
+openai = "OpenAI API ključ"
+setPlaceholder = "Spremljeno - ostavite prazno za zadržavanje trenutačnog ključa"
+
+[admin.settings.ai.models.baseUrl]
+description = "Osnovni URL OpenAI-kompatibilne / Ollama krajnje točke, npr. http://ollama:11434/v1."
+label = "Osnovni URL pružatelja"
+warning = "Osnovni URL mora upućivati na pouzdanu internu krajnju točku. Engine će slati zahtjeve prema njoj sa strane poslužitelja, pa je nepouzdana vrijednost osjetljiva na SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maksimalan broj izlaznih tokena za brzi model."
+label = "Maks. tokena brzog modela"
+
+[admin.settings.ai.models.fastModel]
+description = "Jeftiniji, brži model za lagane zadatke. Slobodan tekst; prijedlozi su samo smjernice."
+label = "Brzi model"
+
+[admin.settings.ai.models.provider]
+description = "S kojim LLM pružateljem engine komunicira."
+label = "Pružatelj"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maksimalan broj izlaznih tokena za pametni model."
+label = "Maks. tokena pametnog modela"
+
+[admin.settings.ai.models.smartModel]
+description = "Model visokih mogućnosti za složeno zaključivanje. Slobodan tekst; prijedlozi su samo smjernice."
+label = "Pametni model"
+
+[admin.settings.ai.saved]
+body = "Promjene se automatski šalju AI engineu."
+bodyNoPush = "Postavke su spremljene. Primijenit će se sljedeći put kada AI engine preuzme svoju konfiguraciju."
+title = "AI postavke spremljene"
+
 [admin.settings.badge]
 clickToUpgrade = "Kliknite za prikaz detalja plana"
 
@@ -938,6 +1094,25 @@ label = "Ponovno generiraj pri pokretanju"
 description = "Broj dana valjanosti certifikata"
 label = "Valjanost certifikata (dani)"
 
+[admin.settings.folderAccess]
+description = "Direktoriji iz kojih izvori mapa i izlazi mapa smiju čitati i u koje smiju pisati. Ovo je sigurnosna granica: automatizacije se nikada ne mogu usmjeriti na putanju poslužitelja izvan ovog popisa."
+securityNote = "Ostavite prazno za potpuno onemogućavanje izvora mapa i izlaza. Stirlingov vlastiti konfiguracijski direktorij uvijek je zabranjen."
+title = "Pristup mapama"
+
+[admin.settings.folderAccess.implied]
+description = "Ovi direktoriji kojima upravlja Stirling uvijek su dopušteni i ovdje se ne mogu mijenjati."
+serverStorage = "Pohrana datoteka na poslužitelju"
+title = "Uvijek dopušteno"
+watchedFolder = "Praćena mapa pipelinea"
+
+[admin.settings.folderAccess.roots]
+add = "Dodaj"
+empty = "Nijedna mapa nije dopuštena. Izvori mapa i izlazi trenutačno su onemogućeni."
+hint = "Unesite apsolutne putanje, na primjer /data/inbox."
+label = "Dopušteni korijeni mapa"
+placeholder = "/data/inbox"
+remove = "Ukloni korijen mape"
+
 [admin.settings.general]
 description = "Konfigurirajte postavke aplikacije na razini sustava, uključujući brendiranje i zadano ponašanje."
 system = "Sustav"
@@ -1842,6 +2017,15 @@ export = "Izvoz"
 accessDenied = "Pristup odbijen"
 insufficientPermissions = "Nemate dopuštenje za ovu radnju."
 
+[auth.callback]
+completing = "Dovršavanje autentifikacije"
+invalidToken = "OAuth prijava nije uspjela - nevažeći token."
+missingToken = "OAuth prijava nije uspjela - token nije primljen."
+oauthFailed = "OAuth prijava nije uspjela. Pokušajte ponovno."
+pleaseWait = "Pričekajte dok dovršimo vašu prijavu."
+signedOut = "Odjavljeni ste. Prijavite se ponovno."
+windowMayClose = "Možete zatvoriti ovaj prozor nakon dovršetka."
+
 [auth.displayName]
 guest = "Gost"
 user = "Korisnik"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Osigurava PDF dokumente uklanjanjem potencijalno zlonamjer
 description = "Ovaj će alat automatski preimenovati PDF datoteke na temelju njihova sadržaja. Analizira dokument kako bi iz teksta pronašao najprikladniji naslov."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatski zakreni"
+tags = "automatsko zakretanje,popravi orijentaciju,naopako,bočno,poravnaj,orijentiraj,otkrij orijentaciju,ispravi zakretanje,automatski orijentiraj,skenirano,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Prag pouzdanosti"
+
+[autoRotate.detectionMode]
+auto = "Automatski"
+osd = "Samo OCR"
+text = "Samo tekst"
+title = "Metoda otkrivanja"
+
+[autoRotate.error]
+failed = "Došlo je do pogreške pri automatskom zakretanju PDF-a."
+
+[autoRotate.inferUndetected]
+title = "Zakreni stranice niske pouzdanosti da se podudaraju"
+
+[autoRotate.report]
+applied = "{{degrees}}° u smjeru kazaljke na satu"
+confidenceValue = "Pouzdanost {{value}}"
+noChange = "Bez promjene"
+pageLabel = "Stranica {{number}}"
+summary = "Zakrenuto {{rotated}} od {{total}} stranica, {{unchanged}} ostavljeno je kako jest"
+title = "Izvješće otkrivanja"
+
+[autoRotate.report.method]
+inferred = "Podudarno"
+none = "Preskočeno"
+osd = "OCR"
+text = "Tekst"
+
+[autoRotate.report.note]
+belowThreshold = "Ispod praga"
+blankPage = "Stranica je prazna"
+inferredFromDocument = "Isto kao ostale stranice"
+noDominantDirection = "Miješani smjerovi teksta"
+osdFailed = "Nije pronađen čitljiv tekst"
+osdNoVerdict = "Nije bilo moguće odrediti koja je strana gore"
+tesseractUnavailable = "OCR nije instaliran"
+tooFewGlyphs = "Premalo teksta"
+
+[autoRotate.results]
+title = "Rezultati automatskog zakretanja"
+
+[autoRotate.settings]
+title = "Postavke"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Koliko provjera mora biti sigurna prije nego što se stranica zakrene. Smanjite ga za zakretanje više stranica, povećajte ga da više stranica ostane netaknuto."
+title = "Prag pouzdanosti"
+
+[autoRotate.tooltip.description]
+text = "Određuje koja strana svake stranice treba biti gore i zakreće je u ispravan položaj. Stranice koje su već uspravne ostaju nepromijenjene."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automatski najprije čita tekst na stranici, zatim pregledava stranicu kao sliku ako to nije dovoljno. Samo tekst preskače provjeru slike, što je najbrže za dokumente koji nikada nisu bili skenirani. Samo OCR tretira svaku stranicu kao sliku."
+title = "Metoda otkrivanja"
+
+[autoRotate.tooltip.header]
+title = "Automatski zakreni"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Prazne ili gotovo prazne stranice ne mogu se samostalno provjeriti. Kada svaka stranica koja se mogla pročitati treba isti zakret, te se stranice zakreću da im odgovaraju."
+title = "Zakreni stranice niske pouzdanosti da se podudaraju"
+
 [autoSizeSplitPDF]
 tags = "pdf,podjela,dokumenti,organizacija"
 
@@ -2189,33 +2440,6 @@ keywords = "Ključne riječi: odd, even"
 numbers = "Brojevi/rasponi: 5, 10-20"
 progressions = "Progresije: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Vrste certifikata"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Upravljaju administratori sustava"
-bullet2 = "Dijeljeno među ovlaštenim korisnicima"
-bullet3 = "Predstavlja identitet tvrtke, ne pojedinca"
-bullet4 = "Najbolje za: službene dokumente, timske potpise"
-description = "Zajednički certifikat koji pruža vaša organizacija. Koristi se za ovlasti potpisivanja na razini tvrtke."
-title = "Certifikat organizacije"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Automatski se generira pri prvoj upotrebi"
-bullet2 = "Povezan s vašim korisničkim računom"
-bullet3 = "Ne može se dijeliti s drugim korisnicima"
-bullet4 = "Najbolje za: osobne dokumente, individualnu odgovornost"
-description = "Automatski generirani certifikat jedinstven za vaš korisnički račun. Primjeren za individualne potpise."
-title = "Osobni certifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Zahtijeva P12/PFX datoteku i lozinku"
-bullet2 = "Može ga izdati vanjsko certifikacijsko tijelo"
-bullet3 = "Viša razina povjerenja za pravne dokumente"
-bullet4 = "Najbolje za: pravno obvezujuće ugovore, vanjsku validaciju"
-description = "Koristite vlastitu PKCS#12 datoteku certifikata. Pruža potpunu kontrolu nad svojstvima certifikata."
-title = "Prenesi prilagođeni P12"
-
 [certSign]
 awaitingSignatures = "Čeka potpise"
 chooseCertificate = "Odaberite datoteku certifikata"
@@ -2542,34 +2766,6 @@ server = "Poslužitelj"
 stepTitle = "Izvor certifikata"
 upload = "Učitaj"
 
-[certSign.tooltip.header]
-title = "O upravljanju potpisima"
-
-[certSign.tooltip.overview]
-bullet1 = "Provjerite postojeće potpise i njihovu valjanost"
-bullet2 = "Prikažite detaljne informacije o potpisnicima i certifikatima"
-bullet3 = "Dodajte nove digitalne potpise za zaštitu vaših dokumenata"
-bullet4 = "Podržane višestruke datoteke uz jednostavnu navigaciju"
-text = "Ovaj alat omogućuje provjeru je li vaš PDF digitalno potpisan i dodavanje novih digitalnih potpisa. Digitalni potpisi dokazuju tko je stvorio ili odobrio dokument i pokazuju je li mijenjan nakon potpisivanja."
-title = "Što ovaj alat može?"
-
-[certSign.tooltip.signing]
-bullet1 = "Podržava PEM, PKCS12, JKS i formate poslužiteljskog certifikata"
-bullet2 = "Opcija za prikaz ili skrivanje potpisa na PDF-u"
-bullet3 = "Dodajte razlog, lokaciju i ime potpisnika"
-bullet4 = "Odaberite na kojoj će se stranici postaviti vidljivi potpisi"
-bullet5 = "Koristite poslužiteljski certifikat za jednostavnu opciju 'Sign with Stirling-PDF'"
-text = "Za potpis PDF-a potreban je digitalni certifikat (kao PEM, PKCS12 ili JKS). Možete odabrati da potpis bude vidljiv na dokumentu ili nevidljiv samo radi sigurnosti."
-title = "Dodavanje potpisa"
-
-[certSign.tooltip.validation]
-bullet1 = "Prikazuje jesu li potpisi valjani ili nevaljani"
-bullet2 = "Prikazuje podatke o potpisniku i datum potpisivanja"
-bullet3 = "Provjerava je li dokument mijenjan nakon potpisivanja"
-bullet4 = "Može koristiti prilagođene certifikate za provjeru"
-text = "Pri provjeri potpisa alat javlja jesu li valjani, tko je potpisao dokument, kada je potpisan i je li mijenjan nakon potpisivanja."
-title = "Provjera potpisa"
-
 [changeCreds]
 changeUsername = "Ažurirajte svoje korisničko ime. Bit ćete odjavljeni nakon ažuriranja."
 credsUpdated = "Račun ažuriran"
@@ -2824,6 +3020,7 @@ next = "Sljedeće"
 preview = "Pregled"
 previous = "Prethodno"
 refresh = "Osvježi"
+remaining = "Preostalo"
 retry = "Pokušaj ponovno"
 save = "Spremi"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Napredno nadziranje"
-allInOneWorkspace = "Sve-u-jednom PDF radni prostor (preglednik, alati i agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Namjenska podrška i SLA-ovi"
-fasterThroughput = "10x brži protok"
-fullyPrivateFiles = "Potpuno privatne datoteke"
-largeFileProcessing = "Obrada velikih datoteka"
-orgWideAccess = "Organizacijska kontrola pristupa"
-premiumAiModels = "Premium AI modeli"
-prioritySupport = "Prioritetna podrška"
-privateDocCloud = "Privatni oblak dokumenata"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Siguran API pristup"
-standardThroughput = "Standardni protok"
-unlimitedApiAccess = "Neograničen API pristup"
-unlimitedSeats = "Neograničen broj korisnika"
-
 [crop]
 autoCrop = "Automatski obreži bijeli prostor"
 noFileSelected = "Odaberite PDF datoteku za početak izrezivanja"
@@ -3346,6 +3525,7 @@ message = "Nije uspjelo postaviti zadanu aplikaciju za PDF"
 title = "Pogreška"
 
 [defaultApp.prompt]
+dontRemind = "Ne podsjećaj me ponovno"
 message = "Postavite Stirling PDF kao zadanu aplikaciju za otvaranje PDF datoteka."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Prilagodi grupe"
 dropHint = "Otvorite datoteke za početak"
 dropToAdd = "Drop files to add"
 expand = "Proširi bočnu traku"
-files = "Datoteke"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nije konfiguriran"
 leaveMyFiles = "Napusti Moje datoteke"
+library = "PDF biblioteka"
 myFiles = "Moje datoteke"
 noFiles = "Još nema datoteka"
 openFileManager = "Otvori upravitelj datoteka"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Dodaj"
-addLabel = "Dodaj oznaku…"
-categoryIconAria = "Odaberite ikonu za {{name}}"
-createCategory = "Stvori kategoriju"
-delete = "Izbriši kategoriju"
 done = "Gotovo"
-hide = "Sakrij kategoriju"
-newCategory = "Naziv nove kategorije…"
-removeLabel = "Ukloni {{name}}"
-rename = "Preimenuj"
 reset = "Vrati na zadane vrijednosti"
-search = "Pretraži oznake…"
-show = "Prikaži kategoriju"
 subtitle = "Grupirajte svoje datoteke u nadređene kategorije. Dodajte postojeće ili nove oznake u kategoriju, preimenujte je ili stvorite vlastitu. Datoteke koje nisu ni u jednoj od vaših kategorija prikazuju se pod “Ostalo”."
 title = "Kategorije bočne trake"
 
@@ -3808,6 +3977,7 @@ refresh = "Osvježi s poslužitelja"
 remove = "Izbriši"
 removeVersion = "Ukloni ovu verziju"
 rename = "Preimenuj"
+renamed = "Preimenovano"
 renameFolder = "Preimenuj mapu"
 resizeFolderTree = "Promijeni veličinu stabla mapa (strelice, Shift za veće korake; dvoklik za automatsko prilagođavanje)"
 save = "Spremi"
@@ -3910,9 +4080,7 @@ count = "Datoteke"
 folder = "Mapa"
 labels = "Oznake"
 modified = "Izmijenjeno"
-name = "Naziv"
 size = "Veličina"
-toolHistoryAtVersion = "Kumulativni lanac alata"
 totalSize = "Ukupna veličina"
 type = "Vrsta"
 versionHistory = "Povijest verzija"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Sve spremljeno"
+extractCsvError = "Izdvajanje CSV-a nije uspjelo"
+extractXlsxError = "Izdvajanje XLSX-a nije uspjelo"
 flattenAfterFilling = "Izravnaj nakon ispunjavanja"
+requiredAbbreviation = "obv"
+requiredFieldsError = "Ispunite sva obavezna polja"
 rescanFields = "Ponovno skeniraj polja"
 rescanFormFields = "Ponovno skeniraj polja obrasca"
 save = "Spremi"
+saveShortcut = "Ctrl+S za spremanje"
+unsavedChanges = "Nespremljene promjene"
 
 [formFill.sidebar]
 close = "Zatvori bočnu traku"
@@ -4309,6 +4484,11 @@ desc = "Automatski preimenuje PDF datoteku na temelju detektiranog zaglavlja"
 tags = "automatski-detekcija,temeljen-na-zaglavlju,organiziraj,preimenuj"
 title = "Auto preimenuj PDF"
 
+[home.autoRotate]
+desc = "Otkrijte orijentaciju svake stranice i automatski je zakrenite uspravno."
+tags = "automatsko zakretanje,popravi orijentaciju,naopako,bočno,poravnaj,orijentiraj,otkrij orijentaciju,ispravi zakretanje,automatski orijentiraj,skenirano,OSD"
+title = "Automatski zakreni"
+
 [home.autoSizeSplitPDF]
 tags = "automatski,razdijeli,veličina"
 title = "Auto dijeli po veličini/broju"
@@ -4608,13 +4788,13 @@ hint = "Prenesite PNG, JPG, SVG ili drugu slikovnu datoteku za postavljanje na P
 label = "Prenesi sliku"
 placeholder = "Odaberite slikovnu datoteku"
 
-[imageToPdf]
-tags = "konverzija,pretvaranje,img,jpg,slika,foto"
-
 [imageToPDF]
 header = "Slika u PDF"
 title = "Slika u PDF"
 
+[imageToPdf]
+tags = "konverzija,pretvaranje,img,jpg,slika,foto"
+
 [infoBanner]
 dismiss = "Odbaci"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Pozvani ste!"
 
 [landing]
 addFiles = "Dodaj datoteke"
-heroSubtitle = "Povucite i ispustite ili dodajte postojeći PDF za početak."
 mobileUpload = "Otpremanje s mobitela"
 openFromComputer = "Otvori s računala"
 uploadFromComputer = "Učitaj s računala"
-workbenchEmptyStateHero = "Ispustite PDF bilo gdje"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Prijava"
 magicLinkSent = "Magic link poslan na {{email}}! Provjerite e-poštu i kliknite poveznicu za prijavu."
 mfaCode = "Autentikacijski kod"
 mfaRequired = "Potreban je dvofaktorski kod"
+noAccount = "Nemate račun?"
 or = "Ili"
 password = "Lozinka"
 passwordChangedSuccess = "Lozinka je uspješno promijenjena! Prijavite se novom lozinkom."
@@ -4715,26 +4894,10 @@ signInWith = "Prijavite se s"
 title = "Prijavite se"
 unexpectedError = "Neočekivana pogreška: {{message}}"
 updatePassword = "Ažuriraj lozinku"
-useEmailInstead = "Prijava e-poštom"
 useMagicLink = "Umjesto toga koristite magic link"
 username = "Korisničko ime"
 youAreLoggedIn = "Prijavljeni ste!"
 
-[login.slides.edit]
-alt = "Uređivanje PDF-ova"
-subtitle = "S više od desetak alata za redaktiranje, potpisivanje, čitanje i obradu PDF-ova, sigurno ćete naći što tražite."
-title = "Uredite PDF-ove kako biste prikazali/zaštitili željene informacije"
-
-[login.slides.overview]
-alt = "Pregled Stirling PDF-a"
-subtitle = "Cloud paket s fokusom na privatnost za PDF-ove koji omogućuje pretvaranje, potpisivanje, redaktiranje i upravljanje dokumentima, uz 50+ drugih moćnih alata."
-title = "Sve za PDF na jednom mjestu."
-
-[login.slides.secure]
-alt = "Zaštita PDF-ova"
-subtitle = "Dodajte lozinke, redaktirajte sadržaj i lako upravljajte certifikatima."
-title = "Zaštitite osjetljive informacije u svojim PDF-ovima"
-
 [margin]
 large = "Veliko"
 medium = "Srednje"
@@ -4976,6 +5139,7 @@ pinButton = "Možete koristiti gumb <strong>Prikvači</strong> ako želite da va
 results = "Nakon što alat završi s radom, korak <strong>Pregled</strong> prikazat će pregled rezultata u ovom panelu i omogućiti vam poništavanje radnje ili preuzimanje datoteke."
 runButton = "Kada je alat konfiguriran, ovim gumbom možete pokrenuti alat na svim odabranim PDF-ovima."
 selectCropTool = "Odaberimo alat <strong>Obrezivanje</strong> kako bismo pokazali kako koristiti jedan od alata."
+stepOf = "Korak {{current}} od {{total}}"
 toolInterface = "Ovo je sučelje alata <strong>Obrezivanje</strong>. Kao što vidite, nema mnogo toga jer još nismo dodali PDF datoteke s kojima bismo radili."
 workbench = "Ovo je <strong>Radna ploča</strong> - glavno područje gdje pregledavate i uređujete svoje PDF-ove."
 wrapUp = "Sve je spremno! Naučili ste o glavnim područjima aplikacije i kako ih koristiti. Kliknite gumb <strong>Pomoć</strong> kada god želite ponovno vidjeti ovaj obilazak."
@@ -4988,6 +5152,26 @@ showMeAround = "Provedi me"
 skipForNow = "Preskoči zasad"
 skipTheTour = "Preskoči obilazak"
 
+[onboarding.checklist]
+dismiss = "Odbaci"
+title = "Postavite Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Pokrenite Stirling izvorno na svojem računalu"
+title = "Preuzmi Stirling za Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Surađujte sa svojim timom"
+title = "Pozovite članove tima"
+
+[onboarding.checklist.shareAnalytics]
+description = "Pomozite poboljšati Stirling"
+title = "Dijeli anonimne podatke o upotrebi"
+
+[onboarding.checklist.takeTour]
+description = "Pogledajte kako Stirling radi u kratkom obilasku"
+title = "Kreni u obilazak"
+
 [onboarding.desktopInstall]
 body = "Stirling najbolje radi kao desktop aplikacija. Možete ga koristiti izvan mreže, brže pristupati dokumentima i uređivati lokalno na računalu."
 selectOs = "Odaberite operacijski sustav"
@@ -4996,7 +5180,21 @@ titleWithOs = "Preuzmi za {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Autentifikacijski kod"
+description = "Zaštitite svoj račun povezivanjem aplikacije za autentifikaciju. Skenirajte QR kod ili unesite ključ za postavljanje, zatim potvrdite 6-znamenkasti kod za završetak."
+enable = "Omogući MFA"
+enableError = "Nije moguće omogućiti dvofaktorsku autentifikaciju. Provjerite kod i pokušajte ponovno."
+enterCode = "Unesite 6-znamenkasti kod iz svoje aplikacije."
+enterCodeError = "Unesite autentifikacijski kod za nastavak."
+logout = "Odjava"
+openAuthenticator = "Otvorite Google Authenticator, Authy ili 1Password."
 qrCodeLoading = "Generiranje vašeg QR koda…"
+regenerateQrCode = "Ponovno generiraj QR kod"
+scanQrCode = "Skenirajte QR kod ili unesite ključ za postavljanje u nastavku."
+setupError = "Nije moguće pokrenuti postavljanje dvofaktorske autentifikacije. Pokušajte ponovno."
+setupKey = "Ključ za postavljanje (ručni unos)"
+stepByStep = "Korak po korak"
+success = "MFA je omogućen. Sada možete nastaviti."
+title = "Postavljanje višefaktorske autentifikacije"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Kad omogućite način prijave, moći ćete upravljati korisnicima, konfigurirati postavke i nadzirati zdravlje poslužitelja. Prvih <strong>{{freeTierLimit}}</strong> osoba na vašem poslužitelju koristi Stirling besplatno."
@@ -5005,6 +5203,11 @@ adminTitle = "Pregled za administratore"
 userBody = "Pozovite suradnike, dodijelite uloge i držite dokumente organiziranima u jednom sigurnom radnom prostoru. Omogućite način prijave kad budete spremni prerasti samostalnu upotrebu."
 userTitle = "Pregled plana"
 
+[onboarding.processorIntro]
+body = "Stirling sada pokreće <strong>Pravila</strong> — automatizirana pravila koja klasificiraju, štite i obrađuju svaki dokument čim stigne. Postavite ih i pratite izvođenja u <strong>Processoru</strong>."
+cta = "Pogledajte Processor"
+title = "Pogledajte Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Pretplaćena godina"
+
+[payg.prepaid.banner]
+exhausted = "Vaš pretplaćeni kapacitet je potrošen; obračun prema potrošnji je nastavljen. Nadoplatite za zadržavanje popusta."
+expiring_one = "Vaša pretplaćena godina završava za {{count}} dan. Neiskorišteni kapacitet istječe — nadoplatite za početak nove godine."
+expiring_other = "Vaša pretplaćena godina završava za {{count}} dana. Neiskorišteni kapacitet istječe — nadoplatite za početak nove godine."
+low = "Preostalo vam je {{pct}}% pretplaćenog kapaciteta. Nadoplatite bilo kada kako bi obrada ostala neprekinuta."
+
+[payg.prepaid.card]
+subtitle = "Koristi se prije obračuna prema potrošnji i izvan vašeg ograničenja potrošnje."
+title = "Pretplaćeni kapacitet"
+
+[payg.prepaid.meter]
+capSuffix = "od {{total}} pretplaćenih kredita"
+expires = "Istječe {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Potrošeno"
+healthy = "Dovoljno preostalo"
+low = "Pri kraju"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Zalijepite licenčni ključ iz e-poruke"
 success = "Licenca aktivirana!"
 successMessage = "Vaša licenca je uspješno aktivirana. Sada možete zatvoriti ovaj prozor."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "provedeno"
-enforcing = "Provodi se..."
-failed = "Provedba nije uspjela"
 outputsUnavailable = "Rezultati pravila više nisu dostupni za preuzimanje."
 partialOutputsUnavailable = "Neki rezultati pravila više nisu dostupni za preuzimanje."
-retrying = "Zauzeto, ponovno pokušavam..."
 runNotFound = "Pokretanje provedbe više nije moguće pronaći."
-step = "korak {{current}}/{{total}}"
 timedOut = "Isteklo je vrijeme prije nego što je provedba mogla završiti."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Zatvori"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Primjenjuje se {{names}}"
 applyingProgress = "Primjenjuje se {{names}} ({{done}} od {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} od {{total}} datoteka nije bilo moguće obraditi te
 failureTitle = "Izvezeno bez potpune provedbe"
 printPolicyAppliedBody = "Ovaj PDF je ažuriran kako bi bio u skladu s pravilom. Pregledajte promjene, zatim ponovno ispišite."
 printPolicyAppliedTitle = "Pravilo primijenjeno prije ispisa"
-queued = "+{{count}} na čekanju"
 successTitle = "{{names}} primijenjeno"
 summaryMore = "{{first}}, {{second}} i još {{more}}"
 summaryTwo = "{{first}} i {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Provedba prije pretvorbe"
-default = "Provedba"
-export = "Provedba prije izvoza"
-input = "Provedba pri uvozu"
-print = "Provedba prije ispisa"
-
-[policies.field]
-accessLog = "Zapisnik pristupa"
-archiveAfter = "Arhiviraj nakon"
-auditTrail = "Revizijski trag"
-belowThreshold = "Ispod praga"
-destination = "Odredište"
-frameworks = "Okviri"
-immutableHold = "Nepromjenjivo zadržavanje"
-keepFor = "Zadrži na"
-minConfidence = "Min. pouzdanost"
-notify = "Obavijesti pri usmjeravanju"
-onViolation = "Kada nije usklađeno"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Dodaj"
-addPlaceholder = "Dodaj oznaku…"
-customNote = "Prilagođeno za vaš tim."
-defaultNote = "Koristi se ugrađena zadana vrijednost, dijeljena s vašim timom."
-duplicate = "\"{{name}}\" već postoji."
-edit = "Uredi oznake"
-empty = "Još nema oznaka."
-export = "Izvezi JSON"
-iconAria = "Odaberite ikonu za {{name}}"
-import = "Uvezi JSON"
-importError = "Nije moguće uvesti tu datoteku."
-managedNote = "Timskim oznakama upravlja voditelj vašeg tima."
-modalSubtitle = "Dijeli se s cijelim vašim timom. Klasifikator odabire oznake koje odgovaraju svakom dokumentu."
-modalTitle = "Klasifikacijske oznake"
-pickIcon = "Upotrijebi ikonu {{label}}"
-removeAria = "Ukloni {{name}}"
-resetToDefault = "Vrati na zadano"
-saveForTeam = "Spremi za tim"
-saving = "Spremanje…"
-sectionLabel = "Klasifikacijske oznake"
-startFromScratch = "Počni od početka"
-teamCount = "timske oznake"
-tooLong = "Oznake mogu imati najviše {{max}} znakova."
-ungrouped = "Negrupirano"
-view = "Prikaži oznake"
+categoryCount = "kategorije"
+hideCategory = "Sakrij kategoriju"
+labelCount = "oznake"
+sharedNote = "Ove su oznake ugrađene i dijele se u cijelom vašem timu."
+showCategory = "Prikaži kategoriju"
 
 [policies.pii]
 account = "Brojevi računa (označeni)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Američki brojevi usmjeravanja (ABA)"
 ssn = "Brojevi socijalnog osiguranja"
 
-[policies.settings]
-noneExport = "Trenutačno se pri izvozu ne pokreću pravila."
-noneUpload = "Trenutačno se pri prijenosu ne pokreću pravila."
-onExport = "Pri izvozu"
-onUpload = "Pri prijenosu"
-reorderHandle = "Povucite za promjenu redoslijeda"
-runOrderDesc = "Kada se na isti okidač pokreće više od jednog pravila, pokreću se ovim redoslijedom — svako na izlazu prethodnog pravila. Povucite za promjenu redoslijeda."
-title = "Postavke pravila"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opcije pravila"
-policySettings = "Postavke pravila"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Ponovi neuspjela pravila ({{count}})"
-rowProgress = "Obrađeno {{completed}} od {{total}} datoteka"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Što je pravilo?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automatski pronalazi i zacrnjuje osjetljive podatke — poput brojeva socijalnog osiguranja i kartica — kako se ne bi mogli čitati u dokumentu."
-sanitize = "Uklanja skriveni JavaScript iz datoteke, kako se ništa ne bi automatski pokrenulo pri otvaranju."
-watermark = "Otiskuje vidljivu oznaku (npr. \"Povjerljivo\") preko svake stranice."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Zatvori"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} se primjenjuje..."
 badgeRan = "Pravilo {{name}} pokrenuto je na ovoj datoteci"
+badgeRunning = "{{name}} se izvodi..."
 blockingAction = "{{action}} blokirano je tijekom primjene pravila, pričekajte..."
 dismiss = "Zatvori preklapanje"
 enforcingTitle = "Primjena pravila..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Prikaži datoteku (pravilo se još primjenjuje)"
 [policyOption]
 autoRedactPhi = "Automatski redigiraj PHI"
 blockExport = "Blokiraj izvoz"
+ccpa = "CCPA"
 contracts = "Ugovori"
 documents = "Dokumenti"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plan Editor"
 subscribed = "Plan Processor"
 unlinked = "Nije povezano"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Izradi početni nacrt iz dokumenta"
-sectionsAriaLabel = "Odjeljci alata za izradu agenata"
-selectorAriaLabel = "Agenti"
-subtitle = "Dizajnirajte, testirajte i objavite AI agente koji klasificiraju, izdvajaju iz i usmjeravaju vaše dokumente. Definirajte scenarije, ograničite pristup alatima, pokrenite zlatni skup i objavite verziju."
-title = "Alat za izradu agenata"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Odustani"
-dropzoneText = "Odaberite ogledni dokument (PDF ili sliku)"
-lead = "Ispustite ogledni dokument i predložit ćemo scenarije i shemu izdvajanja koju možete doraditi. Ništa se ne objavljuje dok to ne pregledate."
-submit = "Izradi početnog agenta"
-subtitle = "Pokrenite novog agenta iz jedne reprezentativne datoteke"
-title = "Izradi početni nacrt iz dokumenta"
-
-[portal.agentBuilder.empty]
-description = "Izradite početni nacrt agenta iz oglednog dokumenta kako biste postavili njegove scenarije i shemu izdvajanja, zatim ga doradite i objavite."
-title = "Još nema agenata"
-
-[portal.agentBuilder.evals]
-casesPassing = "Prolazni slučajevi"
-columnCase = "Evaluacijski slučaj"
-columnLatency = "Latencija"
-columnResult = "Rezultat"
-fail = "neuspjeh"
-goldenSetPassRate = "Stopa prolaznosti zlatnog skupa"
-latencyMs = "{{ms}} ms"
-notRun = "nije pokrenuto"
-pass = "prolaz"
-passRate = "Stopa prolaznosti"
-runEvals = "Pokreni evaluacije"
-
-[portal.agentBuilder.evals.empty]
-description = "Evaluacije pretvaraju vaše scenarije u ponovljiv zlatni skup. Nadogradite kako biste pratili stopu prolaznosti kroz vrijeme i uvjetovali objave njome."
-title = "Još nema zlatnog skupa"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "preko zlatnih skupova"
-activeAgents = "Aktivni agenti"
-avgPassRate = "Prosječna stopa prolaznosti evaluacije"
-fleetWide = "na razini flote"
-latestPublished = "Najnovije objavljeno"
-scenarios = "Scenariji"
-testCases = "testni slučajevi"
-totalDescription_one = "ukupno {{count}}"
-totalDescription_other = "ukupno {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Dodaj"
-addScenario = "Dodaj scenarij"
-enable = "Omogući"
-expectationLabel = "Očekivano ponašanje"
-expectationPlaceholder = "Što agent treba učiniti"
-inEval = "u evaluaciji"
-mute = "Utišaj"
-muted = "utišano"
-nameLabel = "Naziv"
-namePlaceholder = "npr. eskalacija usklađenosti"
-
-[portal.agentBuilder.tabs]
-evals = "Evaluacije"
-scenarios = "Scenariji"
-tools = "Alati"
-versions = "Verzije"
-
-[portal.agentBuilder.tools]
-broadAccess = "Širok pristup"
-deniedHint = "Odabrani alati su blokirani. Sve ostalo ostaje dostupno za pozivanje."
-deniedTools = "Zabranjeni alati"
-governanceGate = "Upravljanje alatima dostupno je na planu Enterprise."
-restricted = "Ograničeno"
-restrictedAccess = "Ograničeni pristup alatima"
-restrictedDescription = "Dopustite svaki alat osim onih koje zabranite u nastavku."
-
-[portal.agentBuilder.versions]
-current = "trenutačno"
-historyGate = "Puna povijest verzija i vraćanje dostupni su na planu Enterprise."
-publish = "Objavi"
-rollBack = "Vrati na prethodno"
-
 [portal.assistant]
 close = "Zatvori asistenta"
 error = "Nije moguće dohvatiti asistenta."
@@ -6365,9 +6346,21 @@ typing = "Tipkanje"
 loading = "Učitavanje"
 redirectingToEditor = "Preusmjeravanje na uređivač..."
 
+[portal.billing.activation]
+maybeLater = "Možda kasnije"
+title = "Uključite Processor"
+
+[portal.billing.activation.payg]
+sub = "Postavite mjesečno ograničenje. Plaćajte ono što pokrenete."
+title = "Plaćanje prema potrošnji"
+
+[portal.billing.activation.prepay]
+badge = "2 mjeseca besplatno"
+sub = "Jedan račun, kartica ili bankovni prijenos."
+title = "Pretplatite godinu unaprijed"
+
 [portal.billing.checkout]
 noClientSecret = "Edge funkcija nije vratila client_secret."
-subtitle = "Dodajte karticu kako biste nastavili nakon besplatne dodjele plana Editor. Stripe će obraditi ostalo."
 title = "Uključite plan Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Vaše plaćanje je uspjelo, ali aktivacija traje malo dulje nego obično
 close = "Zatvori"
 title = "Skoro gotovo"
 
+[portal.billing.checkout.cap]
+amountAria = "Mjesečno ograničenje potrošnje"
+back = "Natrag"
+continue = "Nastavi na plaćanje"
+error = "Nije moguće postaviti ograničenje potrošnje"
+finePrint = "Računi se izdaju mjesečno. Otkažite bilo kada."
+noLimit = "Bez ograničenja"
+note = "Nikada vam se neće naplatiti više od vašeg ograničenja. Obrada se samo pauzira."
+perMonth = "/ mj."
+title = "Postavite ograničenje potrošnje"
+
+[portal.billing.checkout.card]
+fields = "Broj kartice · MM / GG · CVC · ZIP"
+label = "Podaci o kartici"
+note = "Podatke o kartici prikuplja Stripe. Stirling nikada ne pohranjuje PAN ili CVC."
+
 [portal.billing.checkout.error]
 title = "Nije moguće pokrenuti checkout"
 
@@ -6383,10 +6392,9 @@ body = "Vaše plaćanje je prošlo. Uključujemo mjereno procesiranje na vašim
 hint = "Držite ovaj prozor otvorenim."
 title = "Aktivacija vašeg plana Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "u portal env kako biste omogućili checkout unutar aplikacije."
-bodyBefore = "Postavite"
-title = "Stripe nije konfiguriran"
+[portal.billing.checkout.pay]
+limit = "Mjesečno ograničenje potrošnje {{amount}}/mj. Obrada se pauzira na ograničenju."
+limitNoCap = "Bez ograničenja potrošnje. Obrada se neće pauzirati. Računi se izdaju mjesečno."
 
 [portal.billing.enterpriseUpsell]
 cta = "Izradite svoju Enterprise ponudu"
@@ -6409,10 +6417,12 @@ currentPlan = "Trenutačni plan"
 freeForever = "Zauvijek besplatno"
 noTeamResolved = "Na vašem novčaniku još nije razriješen tim — osvježite i pokušajte ponovno."
 ownerOnly = "Samo vlasnik tima može uključiti plan Processor."
+payInvoice = "Plati račun za dovršetak"
 planName = "Editor"
 ssoIncluded = "SSO uključen"
 switchOnProcessor = "Uključi Processor →"
 unlimitedUsers = "Neograničen broj korisnika"
+viewQuote = "Prikaži ponudu"
 
 [portal.billing.invoices]
 columnAmount = "Iznos"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Izravni API zahtjevi"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizacije i cjevovodi"
 segmentAutomationLabel = "Automatizacija"
+sizeMultiplier = "{{formatted}} PDF-ova koristilo je množitelj veličine"
+summary = "{{unique}} jedinstvenih · {{units}} mjernih jedinica · {{avg}} prosjek po PDF-u"
+summaryNoRate = "{{unique}} jedinstvenih · {{units}} mjernih jedinica"
 unit = "mjereni PDF-ovi"
+unitsPending_one = "{{units}} mjerna jedinica čeka sinkronizaciju iz povezanih instanci"
+unitsPending_other = "{{units}} mjernih jedinica čeka sinkronizaciju iz povezanih instanci"
+
+[portal.billing.prepaid]
+capSuffix = "od {{total}} pretplaćenih kredita"
+expires = "Istječe {{date}}"
+eyebrow = "Pretplaćeni kapacitet"
+note = "Koristi se prije obračuna prema potrošnji i izvan vašeg ograničenja potrošnje."
+topUp = "Nadoplati"
+
+[portal.billing.prepaid.buy]
+back = "Natrag"
+calcTitle = "Izračunajte svoje godišnje plaćanje"
+cancel = "Odustani"
+cancelPurchase = "Odustani od kupnje"
+close = "Zatvori"
+continueToPayment = "Nastavi na plaćanje"
+finalise = "Dovrši"
+invoiceErrorTitle = "Nije moguće generirati račun"
+loadingTitle = "Učitavanje vaše ponude"
+payTitle = "Platite svoju godinu"
+step = "Korak {{current}} od {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Promijeni"
+deployRow = "Implementacija"
+done = "Gotovo"
+enterpriseHint = "Ovo je razina poduzeća. Pri ovom volumenu, enterprise cijene nadmašuju svaki popust za samostalnu kupnju. Zaključavanje cijene, uvjeti i ponuda u nekoliko minuta."
+governanceRow = "Upravljanje"
+governanceValue = "{{label}} · {{count}} pravila"
+handlesLabel = "Vaš Processor"
+handlesValue = "obrađuje {{volume}} kredita / mj."
+pipelinesLabel = "Pipelineovi"
+policiesMeta = "{{count}} pravila"
+poolCaption = "Jedan fond od {{credits}} kredita za godinu. Teški mjeseci posuđuju od lakših."
+priceLabel = "Vaša godina · 12 mjeseci po cijeni 10"
+rateUnknown = "Točnu cijenu prikazat ćemo pri plaćanju."
+savings = "Štedite {{amount}} · 2 mjeseca besplatno."
+sizingRow = "Veličina"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Ukupno korisnika"
+
+[portal.billing.prepaid.consent]
+label = "Razumijem da, kada se moj pretplaćeni kapacitet potroši ili istekne nakon 12 mjeseci, obrada automatski nastavlja po standardnoj obračunskoj stopi plaćanja prema potrošnji (do mog ograničenja potrošnje) osim ako otkažem, i da mogu otkazati bilo kada iz portala za naplatu."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Upravlja Stirling. Dostupno za nekoliko minuta."
+cloudValue = "Stirling Cloud · Upravljano"
+selfhost = "Samostalno hostirano"
+selfhostDesc = "Radi na privatnoj infrastrukturi. Ista cijena."
+selfhostValue = "Samostalno hostirano · Privatna infrastruktura"
+
+[portal.billing.prepaid.offer]
+cta = "Pregledaj ponudu"
+subtitle = "Pretplatite godinu obrade PDF-ova i dobijte dva mjeseca besplatno, koristi se prije obračuna prema potrošnji, izvan vašeg ograničenja potrošnje."
+title = "Dobijte 12 mjeseci po cijeni 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Ime vlasnika računa"
+accountNamePlaceholder = "npr. Jane Smith"
+companyName = "Naziv tvrtke (neobavezno)"
+companyNamePlaceholder = "npr. Acme Inc."
+downloadInvoice = "Preuzmi račun"
+payOnline = "Plati online"
+poNumber = "Broj narudžbenice (neobavezno)"
+poNumberPlaceholder = "npr. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Napredno"
+advancedDesc = "Pipelineovi pokreću većinu vaše obrade."
+none = "Nijedan"
+noneDesc = "Još ne pokrećete pipelineove. Uključite ih bilo kada."
+standard = "Standardno"
+standardDesc = "Nekoliko pipelineova ponovno obrađuje pristigle PDF-ove."
+
+[portal.billing.prepaid.posture]
+essentials = "Osnovno"
+essentialsDesc = "Klasifikacija, zadana, plus dijeljenje"
+governed = "Upravljano"
+governedDesc = "Dodaje sigurnost i usmjeravanje"
+regulated = "Regulirano"
+regulatedDesc = "Svaka kategorija, uključujući usklađenost, zadržavanje, unos"
+
+[portal.billing.prepaid.review]
+download = "Preuzmi ponudu (PDF)"
+downloading = "Priprema…"
+share = "podijeli za odobrenje"
+
+[portal.billing.prepaid.size]
+compact = "Kompaktno"
+compactDesc = "Datoteke ispod 25 MB, bez naknada za podatke"
+heavy = "Teško"
+heavyDesc = "Skenirano ili s mnogo slika, uobičajeno 50 MB+"
+standard = "Standardno"
+standardDesc = "Uglavnom male, neke skenirane preko 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Potrošeno"
+healthy = "Dovoljno preostalo"
+low = "Pri kraju"
 
 [portal.billing.spendLimit]
 adjustLimit = "Prilagodi ograničenje"
@@ -6494,6 +6608,8 @@ label = "Predviđa se prekoračenje."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Potrošnja ovog mjeseca"
+freeRemaining_one = "Preostaje {{formatted}} besplatni PDF"
+freeRemaining_other = "Preostaje {{formatted}} besplatnih PDF-ova"
 processed_one = "Obrađen {{formattedCount}} PDF."
 processed_other = "Obrađeno {{formattedCount}} PDF-ova."
 processedWithRate_one = "Obrađen {{formattedCount}} PDF, po {{rate}} svaki."
@@ -6534,6 +6650,350 @@ signature = "potpis"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nova veza"
+createTitleFor = "Poveži {{name}}"
+delete = "Izbriši"
+edit = "Uredi"
+editTitle = "Uredi vezu"
+unsupportedType = "Ova vrsta veze ne može se ovdje uređivati."
+
+[portal.connections.categories.advanced]
+description = "Za uslugu koju još ne podržavamo."
+label = "Napredno"
+
+[portal.connections.categories.audit]
+description = "Zabilježite što se dogodilo s dokumentom, tamo gdje vaši revizori već gledaju."
+label = "Revizija i bilježenje usklađenosti"
+
+[portal.connections.categories.notify]
+description = "Obavijestite drugi sustav da se nešto dogodilo."
+label = "Obavijesti i tijek rada"
+
+[portal.connections.categories.security]
+description = "Skenirajte ili označite dokument prije nego što nastavi dalje."
+label = "Sigurnost i klasifikacija"
+
+[portal.connections.categories.signing]
+description = "Pošaljite dokument na potpisivanje ili ovjeru."
+label = "E-potpis i ovjera"
+
+[portal.connections.categories.storage]
+description = "Gdje obrađeni dokumenti završavaju - bucket, drive, tiket ili stranica."
+label = "Datoteke i privitci"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling ovo pohranjuje šifrirano i nikada ga više ne prikazuje."
+label = "Pristupni token"
+
+[portal.connections.commonFields.apiKey]
+label = "API ključ"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Koraci koji koriste ovu vezu mogu pozivati samo putanje pod ovim URL-om, nikada drugi host."
+label = "URL poslužitelja"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Lozinka"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Korisničko ime"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Zalijepite URL koji vam je usluga dala. Mogu se pozivati samo putanje pod njim."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Naziv veze"
+namePlaceholder = "npr. Produkcija"
+
+[portal.connections.picker]
+cancel = "Odustani"
+createNew = "Nova veza..."
+placeholder = "Odaberite vezu"
+save = "Spremi vezu"
+
+[portal.connections.picker2]
+back = "Promijeni integraciju"
+heading = "Što želite povezati?"
+noResultsBody = "Još to ne podržavamo - recite nam o tome i razmotrit ćemo dodavanje."
+noResultsTitle = "Ništa ne odgovara \"{{query}}\""
+searchPlaceholder = "Pretražite integracije - pokušajte \"sign\", \"ocr\" ili naziv proizvoda"
+
+[portal.connections.types.api]
+description = "Pozovite bilo koji HTTP API iz pravila. Vi odabirete URL, autentifikaciju i payload."
+label = "Prilagođeni API"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentifikacija"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Korisničko ime i lozinka"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token u prilagođenom headeru"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Ništa"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Prijava za token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Koraci koji koriste ovu vezu mogu pozivati samo putanje pod ovim URL-om, nikada drugi host."
+label = "Osnovni URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Naziv headera"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Putanja prijave"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Lozinka"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Ako API odgovori poveznicom za preuzimanje, mogu se dohvatiti samo ovi hostovi. Odvojite zarezima. Ostavite prazno da dopustite samo vlastiti host osnovnog URL-a."
+label = "Dopušteni hostovi rezultata"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Pošalji token kao ovaj header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Header odgovora u kojem poziv prijave vraća token, npr. X-Auth-Token."
+label = "Header odgovora tokena"
+
+[portal.connections.types.api.fields.username]
+label = "Korisničko ime"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skenirajte dokumente na zlonamjerni softver na poslužitelju koji vi pokrećete - ništa ne napušta vašu mrežu."
+label = "ClamAV (samostalno hostiran)"
+
+[portal.connections.types.cloudmersive]
+description = "Skeniranje virusa i sadržaja za dokumente u pravilu."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokirajte dokumente koji sadrže makronaredbe, izvršne datoteke, skripte ili ugrađene objekte - ne samo poznati zlonamjerni softver."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Priložite obrađene dokumente Confluence stranici."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Pošaljite dokumente u ConsignO Cloud (Notarius) za elektronički potpis i ovjeru."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Vaše ConsignO Cloud okruženje, uključujući /api/v1."
+label = "URL poslužitelja"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API ključ"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API tajna"
+
+[portal.connections.types.consigno.fields.password]
+label = "Lozinka"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Potrebno samo ako vaša organizacija koristi stanare."
+label = "Stanar"
+
+[portal.connections.types.consigno.fields.username]
+label = "Korisničko ime"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Objavite poruku na Discord kada pravilo obradi dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indeksirajte revizijski događaj u Elasticsearch svaki put kada pravilo obradi dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Ispitujte FTP ili FTPS poslužitelj za nove dokumente."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Način povezivanja"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktivno"
+passive = "Pasivno (preporučeno)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Obični FTP šalje vjerodajnice i datoteke nešifrirano; odaberite FTPS ako ga poslužitelj podržava."
+label = "Šifriranje"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (eksplicitno / AUTH TLS)"
+implicit = "FTPS (implicitno)"
+none = "Ništa (obični FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Objavite poruku u Google Chat prostor kada se pravilo pokrene."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Priložite obrađene dokumente Jira issueu."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Pošaljite dokument ili obavijest emailom kada se pravilo pokrene."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Spremite obrađene dokumente u Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Lozinka aplikacije"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Otkrijte osobne podatke u tekstu dokumenta pomoću Presidio poslužitelja koji vi pokrećete."
+label = "Presidio (samostalno hostiran)"
+
+[portal.connections.types.purview]
+description = "Čitajte i primijenite Microsoft Purview oznake osjetljivosti na PDF-ove."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Neobavezno. Potrebno samo za odabir oznaka po nazivu; označavanje radi i bez toga."
+label = "ID aplikacije (klijenta)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Klijentska tajna"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Utisnuto na svaku oznaku kao njezin SiteId, kako bi alati svjesni Purviewa znali koja ju je organizacija primijenila."
+label = "ID direktorija (stanara)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket iz kojeg izvori mogu čitati i u koji izlazi pipelinea mogu pisati."
+label = "S3 pohrana"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID pristupnog ključa"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Ostavite prazno za AWS. Postavite ovo za MinIO ili drugu S3-kompatibilnu pohranu."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Regija"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Tajni pristupni ključ"
+
+[portal.connections.types.sendgrid]
+description = "Pošaljite dokument ili obavijest emailom kada se pravilo pokrene."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Ispitujte SFTP (SSH) poslužitelj za nove dokumente."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Neobavezno. SHA-256 otisak host ključa poslužitelja (iz `ssh-keyscan host | ssh-keygen -lf -`). Kada je postavljen, prihvaća se samo poslužitelj koji predstavlja ovaj ključ; kada je prazno, ključ viđen pri prvom povezivanju se prikvačuje i kasnije promjene se odbijaju."
+label = "Otisak host ključa"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Lozinka ključa"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Ostavite prazno ako se autentificirate privatnim ključem umjesto toga."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Neobavezno. Zalijepite OpenSSH privatni ključ za autentifikaciju ključem umjesto lozinkom."
+label = "Privatni ključ"
+
+[portal.connections.types.slack]
+description = "Objavite poruku na Slack kada pravilo obradi dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Pratite SMB / CIFS mrežno dijeljenje (Windows ili Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / mrežno dijeljenje"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Neobavezno. Windows domena ili radna grupa, ako je vaš poslužitelj koristi."
+label = "Domena"
+
+[portal.connections.types.smb.fields.share]
+label = "Dijeljenje"
+placeholder = "dokumenti"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Pošaljite revizijski događaj u Splunk svaki put kada pravilo obradi dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Pošaljite revizijski događaj u Sumo Logic HTTP collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Objavite poruku u Teams kanal kada se pravilo pokrene."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Objavite svaki dokument, ili samo pojedinosti, na URL koji odaberete."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Pokrenite Zap ili Make scenarij iz pravila."
+label = "Zapier i Make"
+
+[portal.docs]
+browse = "Pregledaj dokumentaciju"
+viewSource = "Prikaži izvor na GitHubu"
+
 [portal.docs.authentication]
 codeCaption = "svaki zahtjev"
 eyebrow = "POČETAK RADA"
@@ -6619,11 +7079,19 @@ title = "Službeni SDK-ovi"
 beta = "Beta"
 deprecated = "Zastarjelo"
 
+[portal.docs.search]
+empty = "Nema odgovarajuće dokumentacije"
+placeholder = "Pretraži dokumentaciju"
+results = "{{count}} rezultata"
+
 [portal.docs.skills]
 eyebrow = "VJEŠTINE"
 lead = "Ugrađene, imenovane sposobnosti koje vaš agent poziva kao jedan alat. Svaka vještina je deterministički lanac operacija s priloženim evaluacijama."
 title = "Vještine agenta"
 
+[portal.docs.toc]
+title = "Na ovoj stranici"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCA"
@@ -6697,6 +7165,8 @@ type = "Vrsta"
 user = "Korisnik"
 
 [portal.documents.queue.empty]
+connectSource = "Poveži izvor"
+createPipeline = "Izradi pipeline"
 description = "Kako izvori šalju dokumente u vaše pipelineove, ovdje će se pojaviti za pregled."
 title = "Nema dokumenata u redu čekanja"
 
@@ -6806,13 +7276,71 @@ description = "Ovaj prikaz naišao je na neočekivanu pogrešku. Pokušajte pono
 retry = "Pokušaj ponovno"
 title = "Nešto je pošlo po zlu na ovoj stranici"
 
+[portal.home.download]
+back = "Natrag"
+body = "Preuzmite desktop aplikaciju ili samostalno hostirajte poslužitelj."
+done = "Gotovo"
+guide = "Otvori vodič {{name}}"
+openInBrowser = "Umjesto toga otvori u pregledniku"
+sectionDesktop = "Desktop aplikacija"
+sectionSelfHosted = "Samostalno hostirano"
+title = "Instalirajte Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Pokrenite službenu sliku na svojem poslužitelju."
+note = "Otvara se na :8080. Zadana prijava: admin / stirling."
+tagline = "Pokrenite poslužitelj u spremniku"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instalirajte službeni Helm chart."
+note = "Dodajte PVC za /configs kako bi se postavke trajno spremile."
+tagline = "Implementirajte u cluster pomoću Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Izvorne verzije za vašu distribuciju."
+guideBtn = "Prikaži opcije instalacije za Linux"
+note = "AppImage, .deb i .rpm verzije dostupne su za uobičajene distribucije."
+tagline = "Izvorna desktop aplikacija za vašu distribuciju"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ili putem Homebrew"
+detailBody = "Pokrenite instalacijski program ili upotrijebite Homebrew."
+downloadBtn = "Preuzmi za macOS"
+tagline = "Izvorna aplikacija za Apple silicon i Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Pokrenite .jar na bare metal poslužitelju."
+downloadBtn = "Preuzmi .jar"
+note = "Zahtijeva Java 21+. Otvara se na :8080; zadana prijava admin / stirling."
+runLabel = "Zatim ga pokrenite"
+tagline = "Pokrenite .jar na bare metal poslužitelju"
+title = "Ručno postavljanje poslužitelja"
+
+[portal.home.download.windows]
+altLabel = "Ili putem winget"
+detailBody = "Pokrenite instalacijski program ili upotrijebite upravitelj paketa."
+downloadBtn = "Preuzmi instalacijski program"
+tagline = "Izvorna aplikacija za Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktivno"
-invite = "Pozovi članove tima"
+activeOfDeployed = "{{active}} od {{total}} aktivno ovog mjeseca"
 name = "Stirling PDF Editor"
 open = "Otvori u pregledniku"
 updated = "ažurirano {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Dovrši implementaciju"
+options = "Prikaži opcije implementacije"
+start = "Implementiraj Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Samostalno hostano · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Dobar dan"
 evening = "Dobra večer"
 morning = "Dobro jutro"
 
-[portal.home.onboarding]
-dismiss = "Odbaci postavljanje"
-notStarted = "Nije započeto"
-progress = "{{done}} od {{total}} dovršeno"
-title = "Dovršite postavljanje"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC za cijelu organizaciju, ugovorene količinske cijene i implementacija bez mrežne veze."
-cta = "Pokreni probno razdoblje"
-ctaQuote = "Zatraži ponudu"
-lead = "Za 250+ zaposlenika."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Implementirajte desktop aplikaciju, zauvijek besplatno."
-title = "Preuzmite PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktivno · {{recommended}} preporučeno"
-chip = "{{active}} aktivno"
-title = "Uključite pravila"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} povezano · svaki PDF pod pravilima gdje god stigne"
-chip = "{{connected}} povezano"
-title = "Povežite svoje izvore"
-
-[portal.home.quickActions]
-subtitle = "Najvažniji zadaci za danas"
-title = "Brze radnje"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Sastavljač u 3 koraka preko biblioteke tipiziranih operacija"
-title = "Izradi pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenti, webhooks, nadzirane mape"
-title = "Poveži izvor"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Ključ s opsegom, ograničenjima brzine i IP allowlistom"
-title = "Izdaj API ključ"
-
 [portal.infrastructure]
 manageEditorDeployment = "Upravljaj implementacijom Editora"
 sectionsAriaLabel = "Odjeljci infrastrukture"
@@ -6878,13 +7363,9 @@ heading = "API ključevi"
 subheading = "Vjerodajnice s opsegom, ograničenjima brzine po ključu, dozvolama i IP allowlistama."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Dopuštene IP adrese"
-anyIp = "Bilo koji IP (bez allowliste)"
 created = "Izrađeno"
 lastUsed = "Zadnji put korišteno"
-permissions = "Dozvole"
-rateLimit = "Ograničenje brzine"
-rateLimitValue = "{{value}} zahtj./min"
+revoke = "Opozovi ključ"
 usageMonth = "Korištenje ovog mjeseca"
 usageToday = "Korištenje danas"
 
@@ -6892,6 +7373,20 @@ usageToday = "Korištenje danas"
 description = "Izradite ključ s opsegom za početak pozivanja Stirling API."
 title = "Još nema API ključeva"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nije moguće učitati vaše API ključeve. Pokušajte ponovno."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Opozvati \"{{name}}\"? Svaka integracija koja još koristi ovaj ključ odmah će početi primati pogreške 401. To se ne može poništiti."
+cancel = "Odustani"
+confirm = "Opozovi ključ"
+title = "Opozovi API ključ"
+
+[portal.infrastructure.attestationLabel]
+attested = "Potvrđeno"
+inScope = "U opsegu"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtriraj revizijske događaje prema kategoriji"
 heading = "Revizijski zapisi"
@@ -6935,6 +7430,7 @@ all = "Sve"
 auth = "Autentifikacija"
 config = "Konfiguracija"
 elevation = "Povišenje ovlasti"
+policy = "Pravilo"
 processing = "Obrada"
 security = "Sigurnost"
 
@@ -6944,19 +7440,35 @@ title = "Nemate pristup"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguracija"
-elevation = "Povišenje ovlasti"
+policy = "Pravilo"
 processing = "Obrada"
 totalEvents = "Ukupno događaja · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentikacija"
+config = "Konfiguracija"
+elevation = "Povišenje ovlasti"
+policy = "Pravilo"
+processing = "Obrada"
+security = "Sigurnost"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Pogreška"
+info = "Info"
+success = "Uspjeh"
+warning = "Upozorenje"
+
+[portal.infrastructure.certLabel]
+certified = "Certificirano"
+inProgress = "U tijeku"
+notStarted = "Nije započeto"
+
 [portal.infrastructure.createKey]
 cancel = "Odustani"
 createKey = "Izradi ključ"
 done = "Gotovo"
-ipAllowlistHelper = "CIDR rasponi odvojeni zarezima. Ostavite prazno za dopuštanje bilo koje IP adrese."
-ipAllowlistLabel = "IP allowlista"
 keyNameLabel = "Naziv ključa"
 keyNamePlaceholder = "npr. Produkcija · unos"
-permissionsLabel = "Dozvole"
 secretKeyCaption = "Tajni ključ"
 secretWarning = "Pohranite ovo u upravitelj tajni. Stirling uvijek pohranjuje samo hash — kasnije ga nije moguće oporaviti."
 subtitle = "Ograničite ključ na minimum koji mu je potreban. Možete ga rotirati ili opozvati u bilo kojem trenutku."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopirajte ovu tajnu sada — neće se ponovno prikazati."
 title = "Izradi API ključ"
 titleCreated = "Ključ izrađen"
 
+[portal.infrastructure.deployLabel]
+live = "Aktivno"
+queued = "U redu čekanja"
+rolledBack = "Vraćeno"
+rolling = "Uvođenje u tijeku"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Živo zdravlje za svaku implementiranu Stirling regiju — latenci
 description = "Implementirane regije pojavit će se ovdje nakon što vaš radni prostor bude provisioniran."
 title = "Nema implementiranih regija"
 
+[portal.infrastructure.keyLabel]
+active = "Aktivno"
+revoked = "Opozvano"
+
+[portal.infrastructure.modelLabel]
+active = "Aktivno"
+degraded = "Smanjena učinkovitost"
+disabled = "Onemogućeno"
+
 [portal.infrastructure.models]
 heading = "Modeli"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Vrsta"
 version = "Verzija"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/poziv"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktivni modeli"
 avgLatency = "Prosj. latencija"
@@ -7049,6 +7580,17 @@ modelForAria = "Model za {{operation}}"
 operation = "Operacija"
 routedTo = "Usmjereno na"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasifikacija"
+extraction = "Izdvajanje"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Smanjena učinkovitost"
+down = "Nedostupno"
+healthy = "Ispravno"
+
 [portal.infrastructure.security.access.byok]
 description = "Dostavite ključ iz vlastitog KMS. Stirling njime šifrira, ali i dalje može čitati."
 label = "Koristite vlastiti ključ (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeli"
 security = "Sigurnost"
 storage = "Pohrana"
 
+[portal.integrations]
+addAnother = "Dodaj još jednu"
+availableHeading = "Dostupno"
+comingSoonHeading = "Uskoro"
+connect = "Poveži"
+connectedHeading = "Povezano"
+connectionCount_one = "{{count}} veza"
+connectionCount_other = "{{count}} veza"
+customApi = "Prilagođeni API"
+searchPlaceholder = "Pretraži integracije"
+subtitle = "Sve s čime Stirling može komunicirati. Vjerodajnice se ovdje stvaraju jednom, a zatim ih koriste izvori, pravila i tijekovi obrade."
+title = "Integracije"
+typedName = "Naziv za {{tool}}"
+
+[portal.integrations.filters]
+all = "Sve"
+audit = "Revizija"
+connected = "Povezano"
+notify = "Obavijesti"
+security = "Sigurnost"
+signing = "Potpisivanje"
+storage = "Pohrana"
+
+[portal.integrations.status]
+connected = "Povezano"
+
+[portal.integrations.table]
+integration = "Integracija"
+worksWith = "Radi s"
+
+[portal.integrations.worksWith]
+pipelines = "Tijekovi obrade"
+policies = "Pravila"
+sources = "Izvori"
+
+[portal.legal]
+draft = "{{label}} · nacrt"
+loadError = "Nije moguće učitati ovaj dokument. Pokušajte ponovno."
+loading = "Učitavanje…"
+title = "Pravni dokument"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponente"
@@ -7182,6 +7765,7 @@ documents = "Dokumenti"
 editor = "Editor"
 home = "Početna"
 infrastructure = "Infrastruktura"
+integrations = "Integracije"
 pipelines = "Pipelineovi"
 policies = "Pravila"
 procurement = "Nabava"
@@ -7190,25 +7774,9 @@ sources = "Izvori"
 usage = "Korištenje i naplata"
 users = "Korisnici"
 
-[portal.notifications]
-markAllRead = "Označi sve kao pročitano"
-title = "Obavijesti"
-viewAll = "Prikaži sve"
-
-[portal.notifications.ariaLabel]
-none = "Obavijesti, nema nepročitanih"
-unread_one = "Obavijesti, {{count}} nepročitana"
-unread_other = "Obavijesti, {{count}} nepročitanih"
-
-[portal.notifications.count]
-allRead = "sve pročitano"
-loading = "učitavanje"
-new_one = "{{count}} novo"
-new_other = "{{count}} novih"
-
-[portal.notifications.empty]
-description = "Nema novih obavijesti."
-title = "Sve ste riješili"
+[portal.nav.section]
+platform = "PDF platforma"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Svaki automatizirani pipeline dokumenata na backendu: uređeni lanac operacija nad skupom izvora, pokrenut okidačem. Kliknite redak za njegove korake i izvore."
@@ -7220,15 +7788,28 @@ newPipeline = "Novi pipeline"
 [portal.pipelines.builder]
 addStep = "Dodaj alat"
 back = "Natrag na pipelineove"
+cannotFollow = "Ne može primiti {{produced}}"
+chooseAccount = "Odaberite račun"
+chooseDestination = "Odaberite odredište"
+chooseOperation = "Odaberite što ovaj korak radi"
+chooseSource = "Odaberite izvor"
 discard = "Odbaci promjene"
 enabled = "Omogućeno"
+inputs = "Ulaz"
+inputSource = "Ulazni izvor"
+inputTrigger = "Okidač"
 keepEditing = "Nastavi uređivati"
+needsConfiguring = "Potrebno je postavljanje"
 needsUpload = "Potrebna je učitana datoteka"
+noSources = "Još nema povezanih izvora. Izradite jedan da biste ga koristili kao ulaz."
 noToolMatches = "Nijedan alat ne odgovara vašem pretraživanju."
 pipelineSettings = "Postavke pipelinea"
 searchTools = "Pretraži alate"
 selectToolBody = "Dodajte alat za izradu pipelinea."
 selectToolTitle = "Još nema alata"
+sendToSystem = "Pošalji u drugi sustav"
+stepsIncompatible = "Ovi se koraci ne mogu pokrenuti na onome što proizvodi njihov prethodni korak: {{tools}}."
+stepsNeedSetup = "Ove korake još treba postaviti prije spremanja: {{tools}}."
 toolSettings = "Postavke alata"
 unknownStep = "Neprepoznata operacija, zadržana takva kakva jest."
 unsavedBody = "Imate nespremljene promjene. Spremiti ih prije odlaska ili ih odbaciti?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Nespremljene promjene"
 uploadUnsupported = "Učitane datoteke još nisu podržane u pipelineovima, pa se ovi koraci ne mogu spremiti: {{tools}}."
 usesDefaults = "Pokreće se sa zadanim postavkama"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinira svaku datoteku iz prethodnog koraka"
+fan-out = "Pokreće se jednom po datoteci iz prethodnog koraka"
+format-mismatch = "Treba {{accepts}}, ali prethodni korak proizvodi {{produced}}"
+output-uncertain = "Možda se neće pokrenuti: izlaz prethodnog koraka ovisi o tome kako je postavljen"
+source-mismatch = "Treba {{accepts}}, ali ulaz ovog tijeka obrade je {{produced}}"
+undeclared-operation = "Nije moguće provjeriti što ovaj korak prihvaća"
+
 [portal.pipelines.composer]
 addTool = "Dodaj alat"
 cancel = "Odustani"
 chainEmpty = "Dodajte alat za početak izrade pipelinea."
 create = "Izradi pipeline"
-directory = "Izlazna mapa"
-directoryHelp = "Apsolutna putanja na serveru. Mora biti unutar konfiguriranih dopuštenih mapa."
 editingUnsupported = "Prikaz ovih parametara alata za uređivanje još nije podržan."
 moveDown = "Pomakni dolje"
 moveUp = "Pomakni gore"
 name = "Naziv"
 namePlaceholder = "npr. Pregled redakcija"
-noSources = "Još nema povezanih izvora. Pipeline se i dalje može pokretati na datotekama koje su mu izravno dostavljene."
 noToolSettings = "Ovaj alat nema konfigurabilnih postavki."
 operations_one = "Operacija ({{count}})"
 operations_other = "Operacije ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Izbriši"
 title = "Izbrisati pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Očisti povijest"
 delete = "Izbriši pipeline"
 run = "Pokreni sada"
 
 [portal.pipelines.empty]
 action = "Izradi pipeline"
+connectSource = "Poveži izvor"
 description = "Izradite svoj prvi pipeline: odaberite izvore nad kojima se pokreće, povežite operacije i odaberite kamo ide izlaz."
 title = "Još nema pipelineova"
 
@@ -7286,15 +7874,17 @@ active = "Aktivno"
 paused = "Pauzirano"
 total = "Pipelineovi"
 
-[portal.pipelines.output]
-folder = "Zapiši u mapu"
-inline = "Vrati datoteke"
-
 [portal.pipelines.run]
+allProcessed_one = "Nema ničega za pokretanje: {{count}} dokument izvora već je obrađen."
+allProcessed_other = "Nema ničega za pokretanje: svih {{count}} dokumenata u izvorima već je obrađeno."
 completed_one = "Pokretanje dovršeno."
 completed_other = "Svih {{count}} pokretanja je dovršeno."
 empty = "Nema ništa za pokretanje: izvori nisu imali dokumente za obradu."
 failed = "Pokretanje nije uspjelo: {{error}}"
+historyCleared = "Povijest je očišćena. Sljedeće pokretanje ponovno obrađuje sve što je trenutačno u izvorima."
+inFlight = "Nema ničeg novog za pokretanje: dokumenti se još obrađuju iz ranijeg pokretanja."
+parked_one = "Nema ničega za pokretanje: {{count}} dokument prethodno nije uspio i parkiran je. Ispravite uzrok, zatim očistite povijest da biste ga ponovno pokušali obraditi."
+parked_other = "Nema ničega za pokretanje: {{count}} dokumenata prethodno nije uspjelo i parkirano je. Ispravite uzrok, zatim očistite povijest da biste ih ponovno pokušali obraditi."
 running = "Pokretanje je započelo; još je u tijeku."
 timeout = "Pokretanje traje dulje od očekivanog; možda će se ipak dovršiti u pozadini."
 
@@ -7314,12 +7904,18 @@ manual = "Ručno"
 schedule = "Zakazano"
 
 [portal.policies]
+defaultName = "Pravilo za {{category}}"
 subtitle = "Trajne automatizacije koje primjenjuju pipeline alata na svaki dokument. Svako pravilo pokreće se pri učitavanju ili izvozu, izvršava svoj lanac alata i sprema nametnutu verziju uz izvornik."
 title = "Pravila"
 
 [portal.policies.card]
 comingSoon = "Nadogradi na Enterprise"
 notSetUp = "Nije postavljeno"
+requiresAiEngine = "Zahtijeva AI engine"
+
+[portal.policies.categories.classification]
+desc = "Prepoznajte vrstu svakog dokumenta pri prijenosu i označite njegove metapodatke za pohranu i pretraživanje."
+label = "Klasifikacija"
 
 [portal.policies.categories.compliance]
 desc = "Primijenite HIPAA, GDPR, SOC 2 ili FedRAMP zahtjeve na svaki dokument."
@@ -7344,6 +7940,13 @@ label = "Sigurnost"
 [portal.policies.config]
 scopeAll = "Svi dokumenti"
 
+[portal.policies.config.classification]
+summary = "Klasificira svaki preneseni dokument prema oznakama vašeg tima i označava njegove metapodatke."
+
+[portal.policies.config.classification.rules]
+0 = "Klasificiraj"
+1 = "Označi metapodatke"
+
 [portal.policies.config.compliance]
 summary = "Provjerava dokumente prema regulatornim okvirima prije nego što napuste sustav."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. pouzdanost"
 2 = "Imenuj"
 3 = "Normaliziraj"
 
+[portal.policies.config.purview]
+label = "Primijeni Microsoft Purview oznaku osjetljivosti"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "ID oznake"
+labelIdHelp = "GUID oznake iz Purview portala. Primjena oznake zapisuje njezine metapodatke u PDF; ne može šifrirati, za što je potreban Microsoft klijent."
+labelName = "Naziv oznake (neobavezno)"
+labelNameHelp = "Bilježi se uz ID kako bi ljudi i alati mogli prepoznati oznaku."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview razlikuje oznaku koju je primijenilo pravilo od one koju je odabrala osoba."
+label = "Kako se oznaka bilježi"
+privileged = "Kao da ju je odabrala osoba"
+standard = "Kao automatski primijenjena"
+
+[portal.policies.config.purviewRead]
+label = "Pročitaj Microsoft Purview oznaku"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Čita oznaku koju dokument već nosi, kako bi kasniji koraci mogli djelovati prema njoj."
+
 [portal.policies.config.retention]
 summary = "Primjenjuje koliko se dugo dokumenti čuvaju, kada se arhiviraju i kada se brišu."
 
@@ -7438,6 +8064,7 @@ title = "Još nema aktivnosti"
 [portal.policies.endpoints]
 addWatermark = "Vodeni žig"
 autoRedact = "Redigiraj PII"
+classifyAndLabel = "Klasificiraj"
 compressPdf = "Komprimiraj"
 flatten = "Izravnaj"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Vaša su pravila spremljena i pojavit će se nakon što se veza p
 retry = "Pokušaj ponovno"
 title = "Backend nije dostupan"
 
+[portal.policies.operations]
+change = "Promijeni što ovaj korak radi"
+noResults = "Nijedan korak ne odgovara tome. Pokušajte naziv proizvoda ili \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Pretraži korake - pokušajte \"scan\", \"attach\" ili naziv proizvoda"
+
+[portal.policies.operations.bodyMode]
+binary = "Neobrađeni bajtovi datoteke"
+json = "Unutar JSON payload"
+multipart = "Kao prijenos datoteke (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Vaš vlastiti ClamAV poslužitelj provjerava dokument; ništa ne napušta vašu mrežu."
+label = "Skeniraj viruse (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Odbija dokumente koji sadrže makronaredbe, izvršne datoteke, skripte ili ugrađene objekte."
+label = "Blokiraj aktivni sadržaj"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive provjerava dokument i pokretanje se zaustavlja ako nije čist."
+label = "Skeniraj viruse"
+
+[portal.policies.operations.confluenceAttach]
+description = "Pohranjuje obrađeni dokument na stranicu."
+label = "Priloži na Confluence stranicu"
+
+[portal.policies.operations.consignoSubmit]
+description = "Šalje dokument u ConsignO Cloud na potpisivanje."
+label = "Pošalji na potpis (ConsignO)"
+note = "Šalje dokument. Dohvaćanje potpisane kopije još nije podržano jer korak ne može proslijediti rezultat kasnijem koraku."
+
+[portal.policies.operations.customApiCall]
+description = "Sami definirajte poziv: putanju, metodu, tijelo i obradu odgovora."
+label = "Pozovi prilagođeni API"
+
+[portal.policies.operations.discordNotify]
+description = "Obavještava kanal da je pravilo obradilo dokument."
+label = "Objavi poruku na Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Bilježi što je pravilo učinilo kao dokument koji se može pretraživati."
+label = "Indeksiraj revizijski događaj u Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart odgovara API-jima za prijenos; JSON odgovara API-jima koji žele datoteku unutar payload; binary šalje neobrađene bajtove."
+label = "Kako poslati dokument"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON tijelo šalje se takvo kakvo jest. {{document.base64}} nosi datoteku; {{document.*}} i {{run.*}} popunjavaju se po dokumentu."
+label = "JSON tijelo"
+
+[portal.policies.operations.fields.connection]
+label = "Račun"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domena"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Polje obrasca pod kojim API očekuje dokument."
+label = "Naziv polja datoteke"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Od"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON objekt parova naziv/vrijednost zaglavlja. Vjerodajnica veze dodaje se za vas."
+label = "Zaglavlja"
+
+[portal.policies.operations.fields.index]
+label = "Indeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ključ zadatka"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Šalje se kao tijelo poruke. {{document.*}} i {{run.*}} popunjavaju se po dokumentu."
+label = "Poruka"
+
+[portal.policies.operations.fields.method]
+label = "Metoda"
+
+[portal.policies.operations.fields.pageId]
+label = "ID stranice"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Dodaje se osnovnom URL veze. Nikad ne može dosegnuti drugi host."
+label = "Putanja"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Gdje ga zapisati na drive. {{document.filename}} popunjava se po dokumentu."
+label = "Odredišna putanja"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Izvješće ostavlja dokument nepromijenjenim. Zamjena ga mijenja onime što se vrati."
+label = "Što učiniti s odgovorom"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email potpisnika"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Predmet"
+placeholder = "Obrađeno: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analizira ovaj tekst. Upotrijebite {{document.title}} ili zalijepite tekst koji želite provjeriti."
+label = "Tekst za provjeru"
+
+[portal.policies.operations.fields.to]
+label = "Za"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud korisničko ime"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Obavještava prostor da je pravilo obradilo dokument."
+label = "Objavi poruku na Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Pohranjuje obrađeni dokument na zadatak."
+label = "Priloži na Jira zadatak"
+
+[portal.policies.operations.mailgunEmail]
+description = "Šalje obrađeni dokument kao privitak."
+label = "Pošalji dokument emailom (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Zapisuje obrađeni dokument u mapu."
+label = "Prenesi na Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Vaš vlastiti Presidio poslužitelj izvještava o osobnim podacima koje pronađe."
+label = "Otkrij osobne podatke"
+note = "Presidio čita tekst, ne datoteke. Dajte mu tekst koji želite provjeriti — sam dokument se ne prenosi."
+
+[portal.policies.operations.responseMode]
+replace = "Zamijeni dokument odgovorom"
+report = "Zadrži dokument, zabilježi odgovor"
+
+[portal.policies.operations.sendgridEmail]
+description = "Šalje obrađeni dokument kao privitak."
+label = "Pošalji dokument emailom (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Obavještava kanal da je pravilo obradilo dokument."
+label = "Objavi poruku na Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Bilježi što je pravilo učinilo tamo gdje vaši revizori već gledaju."
+label = "Pošalji revizijski događaj u Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Bilježi što je pravilo učinilo u HTTP kolektor."
+label = "Pošalji revizijski događaj u Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Obavještava kanal da je pravilo obradilo dokument."
+label = "Objavi poruku na Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Šalje sam dokument na URL koji odaberete."
+label = "Objavi dokument na webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Predaje detalje pokretanja vašoj automatizaciji."
+label = "Pokreni Zap ili Make scenarij"
+
 [portal.policies.stats]
 activeFor = "Aktivno"
 dataProcessed = "Obrađeni podaci"
@@ -7473,6 +8277,13 @@ label = "Primijenjeni dokumenti"
 description = "Konfigurirano, ali se ne pokreće"
 label = "Pauzirano"
 
+[portal.policies.table]
+appliesTo = "Primjenjuje se na"
+docs = "Dokumenti pod pravilima"
+enforces = "Provodi"
+policy = "Pravilo"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Natrag"
 cancel = "Odustani"
@@ -7480,6 +8291,10 @@ continue = "Nastavi"
 enablePolicy = "Omogući pravilo"
 saveChanges = "Spremi promjene"
 
+[portal.policies.wizard.capability.classify]
+desc = "Prepoznaje vrstu dokumenta prema oznakama vašeg tima i označava ga, kako bi se pohranjivao i pretraživao po kategoriji."
+label = "Klasificiraj dokument"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimira dokument na manju veličinu datoteke."
 label = "Smanji veličinu datoteke"
@@ -7500,10 +8315,18 @@ label = "Redigiraj osjetljive informacije"
 desc = "Uklanja skriveni JavaScript kako se ništa ne bi moglo automatski pokrenuti pri otvaranju dokumenta."
 label = "Ukloni aktivni sadržaj"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dokazuje da je dokument postojao u ovom točnom obliku u određenom trenutku, pomoću neovisnog tijela za vremenske žigove. Šalje se samo hash - dokument nikad ne napušta vaš poslužitelj."
+label = "Dodaj pouzdani vremenski žig"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Utiskuje vidljivu oznaku (npr. “Povjerljivo”) preko svake stranice."
 label = "Primijeni vodeni žig"
 
+[portal.policies.wizard.classification]
+description = "Svaki preneseni dokument klasificira se prema ugrađenim oznakama i označava vrstama koje odgovaraju. Skup oznaka dijeli se s cijelim timom."
+labelsHeading = "Klasifikacijske oznake"
+
 [portal.policies.wizard.errors]
 noTools = "Najprije omogućite barem jedan alat u tijeku rada."
 saveFailed = "Nije moguće spremiti pravilo. Pokušajte ponovno."
@@ -7548,73 +8371,118 @@ setUp = "Postavi pravilo {{category}}"
 [portal.policies.wizard.workflow]
 description = "Odaberite što ovo pravilo radi sa svakim dokumentom koji obrađuje."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktivno"
-noRule = "Još nije primijenjeno nijedno pravilo"
-subtitle = "Stalne automatizacije kroz koje prolazi svaki dokument, bez obzira na to koji ga pipeline obrađuje."
-title = "Što se pokreće na vašim PDF-ovima"
-
 [portal.policySummary.action]
-comingSoon = "Nadogradi na Enterprise"
-configure = "Konfiguriraj"
 setUp = "Postavi"
 
-[portal.policySummary.column]
-activeRule = "Aktivno pravilo"
-policy = "Pravilo"
-status = "Status"
+[portal.processorFlow]
+footnote = "Brojevi se odnose na posljednja 24 sata. Brzina toka je ilustrativna."
+liveBadge = "Aktivno"
+stats = "{{connected}} povezano · {{processed}} PDF-ova obrađeno"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Nakon konfiguriranja pravila, kategorije će se pojaviti ovdje."
-title = "Još nema pravila"
+[portal.processorFlow.lens]
+ariaLabel = "Način prikaza"
+flow = "Tok"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktivno"
-off = "Isključeno"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Neuspjelo"
+heading = "Ishodi"
+success = "Isporučeno"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktivno"
+count = "{{n}} · 24h"
+heading = "Pravila"
+setUp = "Postavi"
 soon = "Uskoro"
 
-[portal.processingStatus]
-managePlan = "Upravljaj planom"
-volumeSuffix = "Obrađenih PDF-ova · zadnjih 30 dana"
+[portal.processorFlow.sankey]
+waist = "Pravila · {{n}} aktivno"
+
+[portal.processorFlow.sankey.empty]
+description = "Povežite izvor i uključite pravilo kako biste pratili tok dokumenata kroz processor."
+title = "Još nema toka"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Poveži"
+editor = "Stirling PDF Editor"
+heading = "Izvori"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Ulaz emailom"
 
 [portal.procurement]
-reset = "Resetiraj nabavu (demo)"
 subtitle = "Provedite evaluaciju tima, ugovaranje i uvođenje. Svaki dokument na jednom mjestu."
 title = "Nabava"
 
-[portal.procurement.action]
-download = "Preuzmi"
-pay = "Plati sada"
-request = "Zatraži"
-sign = "Pregledaj i potpiši"
-upload = "Prenesi"
-
 [portal.procurement.agreement]
 agreeCta = "Prihvati i pretplati se"
+confidential = "Povjerljivo"
 confirm = "Pročitao/la sam i prihvaćam Stirling Enterprise Agreement."
-eyebrow = "Ugovor"
-intro = "Jedan objedinjeni ugovor pokriva vašu ponudu: Master Service Agreement, Order Form, EULA i Data Processing Agreement. Pregledajte ga, a zatim prihvatite ponudu kao obvezujuću pretplatu."
-title = "Pregledajte svoj enterprise ugovor"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, narudžbenica, EULA i DPA, spojeni u jedan potpis."
+download = "Preuzmi"
+downloadDraftError = "Nije moguće generirati PDF ugovora - renderer dokumenta nije dostupan. Pokušajte ponovno uskoro ili kontaktirajte podršku."
+downloadError = "Nije moguće preuzeti potpisani ugovor. Pokušajte ponovno."
+legalName = "Naziv pravnog subjekta"
+legalNamePlaceholder = "Pravni subjekt koji će potpisati"
+loadError = "Nije moguće učitati ugovor. Pokušajte ponovno."
+loading = "Učitavanje ugovora..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Zatraži izmjene"
+scrollHint = "Pomaknite se za pregled"
+signatory = "Ime potpisnika"
+signatoryPlaceholder = "Puno ime"
+signatoryTitle = "Titula potpisnika"
+signatoryTitlePlaceholder = "npr. glavni pravni savjetnik"
+signError = "Nije moguće zabilježiti vaš potpis. Pokušajte ponovno."
 
 [portal.procurement.builder]
 addons = "Dodaci"
+addressLine1 = "Adresa, redak 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresa, redak 2"
+addressLine2Placeholder = "Apartman, kat, zgrada"
 back = "Natrag"
 businessName = "Naziv tvrtke"
 businessNamePlaceholder = "Vaša tvrtka"
+city = "Grad"
+cityPlaceholder = "San Francisco"
+completeRequired = "Ispunite obavezna polja (označena *) valjanom email adresom prije generiranja ponude."
+contactEmail = "Kontakt email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Ime kontakta"
+contactNamePlaceholder = "Jane Doe"
 continue = "Nastavi"
-country = "Država"
-countryEuro = "Eurozona (EUR €)"
-countryUK = "Ujedinjeno Kraljevstvo (GBP £)"
-countryUS = "Sjedinjene Američke Države (USD $)"
+done = "Gotovo"
 eula = "Pročitao/la sam i prihvaćam Stirling Enterprise EULA. Njime se uređuje ugovor generiran iz ove ponude."
 generate = "Generiraj ponudu"
-included = "Uključeno"
 indemnification = "IP obeštećenje"
 indemnificationSub = "Branimo kvalificirane IP zahtjeve, prema EULA"
-offlineLicense = "Offline / air-gapped licencija"
-offlineLicenseSub = "Licencijska datoteka za preuzimanje za air-gapped self-hosted instancu"
+paperEyebrow = "Enterprise ponuda"
+paperFor = "Pripremljeno za"
+pdfSize = "Veličina PDF"
+poNumber = "Broj narudžbenice"
+poNumberPlaceholder = "Neobavezno"
+postalCode = "Poštanski broj"
+postalCodePlaceholder = "94105"
+posture = "Upravljanje"
+posture_count = "~{{count}} pravila"
+posture_essentials = "Osnove"
+posture_essentialsSub = "Klasifikacija + dijeljenje — zadano"
+posture_governed = "Upravljano"
+posture_governedSub = "Dodaje sigurnost i usmjeravanje"
+posture_regulated = "Regulirano"
+posture_regulatedSub = "Svaka kategorija — usklađenost, zadržavanje, unos"
 qbr = "Tromjesečni poslovni pregledi"
 qbrSub = "Vaš SE pregledava upotrebu i plan razvoja svakog tromjesečja"
+region = "Država / regija"
+regionPlaceholder = "California"
 running = "{{annual}} / god. · {{years}} god. {{tcv}}"
 s1Sub = "Vaš tim i PDF-ovi koje očekujete obraditi svake godine."
 s1Title = "Koliko ćete obrađivati?"
@@ -7623,6 +8491,12 @@ s2Title = "Obveza i usluga"
 s3Sub = "Za ponudu i ugovor koji ona generira."
 s3Title = "Vaši podaci"
 serviceLevel = "Razina usluge"
+size_compact = "Kompaktno"
+size_compactSub = "Uglavnom tekst, manje od 1 MB"
+size_heavy = "Teško"
+size_heavySub = "Skenirano ili s mnogo slika, 5 MB+"
+size_standard = "Standardno"
+size_standardSub = "Miješani tekst i slike, 1 do 5 MB"
 slDedicated = "Namjenska"
 slDedicatedSub = "4 radna sata · namjenski account manager · +30%"
 slPriority = "Prioritetna"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Isti radni dan · imenovani CSM · +15%"
 slStandard = "Standardna"
 slStandardSub = "Sljedeći radni dan · dijeljeni CSM · uključeno"
 stepOf = "Korak {{n}} od {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Neobavezno"
 term = "Rok"
 termDiscount = "Primijenjen je popust od {{pct}}% za višegodišnju obvezu"
 title = "Izradite svoju ponudu"
@@ -7637,6 +8513,7 @@ training = "Uvođenje i obuka"
 trainingSub = "Sesije uživo za pokretanje vašeg tima"
 users = "Ukupno korisnika"
 usersPlaceholder = "npr. 250"
+viewEula = "Pročitaj"
 volEstimated = "Procijenjeno na temelju {{count}} korisnika (~2.000 PDF-ova po korisniku, uključujući automatizaciju). Uredite ako znate bolje."
 volManual = "Koristi se vaš broj. U bilo kojem trenutku ponovno procijenite prema veličini tima."
 volNoUsers = "Niste sigurni? Unesite veličinu tima i procijenit ćemo."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "npr. 1.000.000"
 years_one = "{{count}} godina"
 years_other = "{{count}} godina"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokument"
-count_other = "{{count}} dokumenata"
-done = "Gotovo"
-here = "Ovdje ste"
-hide = "Sakrij"
-optional = "Neobavezno"
-paidAddon = "Plaćeni dodatak"
-show = "Prikaži"
-subtitle = "Sve što vam treba u svakom koraku putovanja, prikazano kako se posao kreće kroz proces."
-supportingSubtitle = "SOC 2, sigurnosne provjere, porezni obrasci i više, spremno kada vaš sigurnosni ili nabavni tim zatraži. Neki nose jednokratnu naknadu."
-supportingTitle = "Podrška vašoj evaluaciji"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, narudžbenica i DPA u jednom potpisu."
+download = "Preuzmi"
+eula = "EULA i komercijalni uvjeti"
+eulaSub = "Softver i self-serve komercijalni uvjeti."
+invoice = "Račun"
+invoiceSub = "Vaš prvi račun za pretplatu."
+laterInvoice = "Dostupno nakon prihvaćanja"
+laterQuote = "Dostupno nakon izdavanja vaše ponude"
+quote = "Ponuda"
+quoteSub = "Vaša detaljna enterprise ponuda."
+sla = "SLA prilog"
+slaSub = "Razine podrške i ciljevi odgovora."
+subprocessors = "Podizvršitelji obrade"
+subprocessorsSub = "Treće strane koje obrađuju podatke u vaše ime."
+subtitle = "Vaša dokumentacija posla, dostupna u bilo kojem trenutku."
 title = "Dokumenti"
-upcoming = "Nadolazeće"
+view = "Prikaži"
 
 [portal.procurement.error]
 title = "Nešto je pošlo po zlu"
 
 [portal.procurement.hero]
-company = "Vaš enterprise posao"
+barAria = "Faza {{current}} od {{total}}"
 ctaAgreement = "Pregledaj i potpiši ugovor"
-ctaLive = "Aktivni ste"
-ctaPayment = "Dodaj plaćanje"
+ctaExploring = "Postavite probno razdoblje"
 ctaQuote = "Pregledajte svoju ponudu"
+ctaReviewQuote = "Pregledaj ponudu"
 ctaTrial = "Izradite svoju ponudu"
+documents = "Dokumenti"
 eyebrow = "Enterprise nabava"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Pozovi članove tima"
-keyDocs = "Ključni dokumenti"
-nextStep = "Sljedeći korak: {{action}}"
-notStarted = "Nije započeto"
+licenseKey = "Licencni ključ"
+liveSub = "Vaša je organizacija opskrbljena i vaša je licenca aktivna."
+liveTitle = "Aktivni ste na Stirling Enterprise"
+next = "Sljedeće: {{stage}}"
 open = "Otvori nabavu"
 scheduleCall = "Zakaži poziv"
-setup1Sub = "Pozovite članove svojeg tima"
-setup1Title = "Postavite PDF Editor"
-setup2Sub = "Uključite obradu kroz editore i druge izvore"
-setup2Title = "Povežite PDF Processor"
-setup3Sub = "Uključite Security, Compliance, Routing ili Retention kada vam zatrebaju"
-setup3Title = "Dodajte preporučena pravila"
+sentenceAgreement = "pregledajte i potpišite ugovor"
+sentenceLive = "opskrba i uvođenje"
+sentencePayment = "narudžbenica i plaćanje"
+sentenceQuote = "pregledajte i prihvatite ponudu"
+sentenceTrial = "postavite probni radni prostor"
 
 [portal.procurement.journey]
 daysLeft_one = "Preostao je {{count}} dan"
 daysLeft_other = "Preostalo je {{count}} dana"
-engineerLabel = "Vaš solutions engineer"
-eyebrow = "Vaše uvođenje"
-live = "Aktivni ste na Stirling Enterprise"
-nextStep = "Sljedeći korak: {{action}}"
-subtitle = "Vaš solutions engineer sudjeluje u svakom koraku. Jedna sljedeća radnja odjednom; potpuni popis za provjeru nalazi se u nastavku."
-title = "Od probnog razdoblja do produkcije, jedan vođeni put"
-trialTitle = "Enterprise probno razdoblje"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Jedan potpis pokriva MSA, narudžbenicu, EULA i DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Još nije moguće generirati offline licencijsku datoteku — p
 downloadOffline = "Preuzmi offline licenciju (.lic)"
 hint = "Zalijepite ovaj ključ u self-hosted instancu kako biste je aktivirali ili ga čuvajte za svoju evidenciju. Čuvajte ga na sigurnom."
 label = "Vaš licencijski ključ"
+subtitle = "Aktivirajte self-hosted instancu ovim ključem ili ga sačuvajte za svoju evidenciju."
+title = "Vaš licencni ključ"
+trialFileHint = "Ovo je vaša datoteka probne licence. Nakon što vaš ugovor bude sklopljen, vratite se i ponovno je preuzmite — za razliku od online licencnog ključa, .lic datoteka neće se sama ažurirati."
 
 [portal.procurement.link]
 cta = "Poveži račun"
@@ -7739,65 +8619,62 @@ description = "Vaša je pretplata aktivna i licencija je izdana. Vaš je tim pos
 eyebrow = "Aktivno"
 title = "Aktivni ste na Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Probni ključevi, ponude za obvezani volumen, ugovor s jednim potpisom, plaćanje i vaš registar dokumenata nalaze se ovdje nakon što započnete enterprise evaluaciju."
-eyebrow = "Samo Enterprise"
-talkToSales = "Razgovarajte s prodajom"
-title = "Nabavni tijek otvara se uz Enterprise"
-
 [portal.procurement.milestone]
-accept = "Prihvati i nastavi"
-description = "Preuzmite PDF kako biste ga podijelili s timom, vratite se prihvatiti kada budete spremni ili unesite promjene."
-download = "Preuzmi PDF"
 downloadError = "Još nije moguće preuzeti PDF ponude — pokušajte ponovno za trenutak."
-edit = "Uredi ponudu"
-eyebrow = "Ponuda {{number}}"
-perYear = " / god."
-preparedFor = "Pripremljeno za {{company}}"
-tcv = "{{value}} ukupna vrijednost ugovora"
-title = "Vaša je ponuda spremna"
-
-[portal.procurement.modal]
-cancel = "Odustani"
-chooseFile = "Odaberi datoteku"
-close = "Zatvori"
-downloadBody = "Preuzimanje će uskoro započeti."
-downloadCta = "Preuzmi"
-downloadTitle = "Preuzmi"
-noFile = "Nije odabrana datoteka"
-payBody = "Platite svoj obvezani ugovor karticom ili bankovnim prijenosom putem Stripe. Vaš se radni prostor postavlja čim se plaćanje potvrdi."
-payCta = "Nastavi na Stripe"
-payTitle = "Potvrdi plaćanje"
-requestBodyFree = "Generiramo ovo na zahtjev. Potvrdite i vaš solutions engineer uskoro će ga poslati."
-requestBodyPaid = "Ovo je plaćeni dodatak. Potvrdite i vaš solutions engineer odredit će opseg i poslati dokumentaciju."
-requestCta = "Zatraži"
-requestTitle = "Zatraži ovaj dokument"
-signBody = "Otvara Stirling Enterprise Agreement za e-potpis: jedan potpis pokriva MSA, narudžbenicu, EULA i DPA. Mi automatski supotpisujemo i prelazite na plaćanje."
-signCta = "Otvori za potpis"
-signTitle = "Pregledajte i potpišite svoj ugovor"
-uploadBody = "Pošaljite nam svoju narudžbenicu i fakturirat ćemo prema vašim uvjetima. Povucite PDF ili odaberite datoteku u nastavku."
-uploadCta = "Prenesi narudžbenicu"
-uploadTitle = "Prenesite svoju narudžbenicu"
 
 [portal.procurement.payment]
 description = "Vaša je ponuda prihvaćena i licencija je već aktivna — vaš tim može odmah početi. Platite prvi račun kada budete spremni; možete ga platiti ili preuzeti ovdje, bez potrebe za emailom."
+downloadAgreement = "Preuzmi potpisani ugovor"
 downloadInvoice = "Preuzmi račun"
-simulate = "Simuliraj primljeno plaćanje (demo)"
+eyebrow = "Plaćanje"
 title = "Pretplata je stvorena"
 viewInvoice = "Prikaži i plati račun"
 
+[portal.procurement.review]
+acceptCta = "Prihvati ponudu"
+annual = "Godišnja naknada (1. godina)"
+downloadCta = "Preuzmi ponudu"
+poNumber = "Narudžbenica: {{po}}"
+renewal = "Obnavlja se po {{amount}}/godina nakon razdoblja (+{{pct}}% CPI)"
+tcv = "{{years}}-godišnje razdoblje, plaćeno u cijelosti unaprijed: {{tcv}}"
+validUntil = "Vrijedi do {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Nije moguće učitati planer."
 fallbackLink = "Otvori zakazivanje u novoj kartici"
+loading = "Učitavanje planera..."
 subtitle = "Vaš solutions engineer provest će vaš tim kroz uvođenje. Odaberite termin koji vam odgovara."
 title = "Zakaži poziv"
 
-[portal.procurement.status]
-action = "Potrebna radnja"
-available = "Dostupno"
-complete = "Dovršeno"
-pending = "Na čekanju"
-request = "Na zahtjev"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Zapečaćeno, bez izlazne veze"
+back = "Natrag"
+businessName = "Naziv tvrtke"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Upravljano, najbrži početak"
+continue = "Nastavi"
+deployment = "Gdje ga treba implementirati?"
+eula = "Prihvaćam Stirling EULA i komercijalne uvjete."
+fullName = "Puno ime"
+fullNamePlaceholder = "Vaše ime"
+invites = "Pozovite članove tima · neobavezno"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Zakaži poziv"
+seats = "Osobe koje testiraju"
+seatsPlaceholder = "npr. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker ili Kubernetes"
+start = "Pokreni probno razdoblje"
+stepOf = "Korak {{n}} od {{total}}"
+subtitle = "Besplatno 14 dana, kartica nije potrebna."
+subtitleDetails = "Nekoliko detalja za vašu ponudu i ugovor."
+talkFirst = "Želite prvo razgovarati?"
+title = "Postavite probno razdoblje"
+viewEula = "Pročitaj"
+workEmail = "Poslovni email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Produljenjem se dodaje 7 dana i obavještava vaš solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Dosegnut maksimum"
 subtitle = "Vaše besplatno probno razdoblje traje do {{date}}. Kartica nije potrebna."
 title = "Enterprise probno razdoblje"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Cijene za obvezani volumen, SSO + SCIM + RBAC na razini organizacije, 90-dnevni nepromjenjivi audit i namjenski SE."
-homeCta = "Započni probno razdoblje →"
-homeHeadline = "Obradite milijune PDF-ova."
-
-[portal.recentActivity]
-title = "Nedavna aktivnost"
-viewAll = "Prikaži sve"
-
-[portal.recentActivity.empty]
-description = "Pokretanja pipelinea, implementacije i događaji agenata pojavit će se ovdje."
-title = "Ovdje još nema ničega"
-
 [portal.search]
 ariaLabel = "Pretraživanje"
 placeholder = "Pretražite Stirling — endpoints, pipelines, dokumente…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Povezivanje računa"
 
-[portal.shell.header]
-accountFallback = "Račun"
-accountMenu = "Izbornik računa"
-darkMode = "Tamni način"
-lightMode = "Svijetli način"
-search = "Pretraživanje"
-searchPlaceholder = "Pretraži…"
-signOut = "Odjavi se"
-switchToDark = "Prebaci na tamnu temu"
-switchToLight = "Prebaci na svijetlu temu"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumenata"
 linkAccount = "Poveži Stirling račun"
-planEditor = "Editor plan"
-planEnterprise = "Enterprise plan"
-planProcessor = "Processor plan"
 primaryNav = "Primarna navigacija"
 switchApp = "Promijeni aplikaciju"
 
+[portal.shell.topbar]
+closeNav = "Zatvori navigaciju"
+openNav = "Otvori navigaciju"
+search = "Pretraži"
+
 [portal.sources]
 subtitle = "Ponovno upotrebljive ulazne veze koje dovode dokumente u Stirling. Konfigurirajte vezu jednom, a zatim je referencirajte iz bilo kojeg broja pravila. Kliknite redak za njegovu konfiguraciju i pravila koja ga koriste."
 title = "Izvori"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Poveži izvor"
 
+[portal.sources.builder]
+back = "Natrag na izvore"
+backToTypes = "Sve vrste izvora"
+cancel = "Odustani"
+chooseHint = "Odaberite odakle dokumenti dolaze. Zasivljeni konektori su u pripremi."
+comingSoon = "Uskoro"
+comingSoonHeading = "Uskoro"
+create = "Izradi izvor"
+createTitle = "Poveži izvor"
+delete = "Izbriši"
+editTitle = "Uredi izvor"
+enabled = "Omogućeno"
+save = "Spremi izmjene"
+
+[portal.sources.builder.folderAccess]
+description = "Automatizacije mapa mogu koristiti samo mape koje je administrator dopustio. Dodajte je u postavkama pristupa mapama, zatim pokušajte ponovno."
+openSettings = "Postavke pristupa mapama"
+title = "Ova mapa nije dopuštena"
+
 [portal.sources.delete]
 body = "Izbrisati \"{{name}}\"? To se ne može poništiti. Pravila koja ga referenciraju morat će se ažurirati."
 cancel = "Odustani"
 confirm = "Izbriši"
 title = "Izbrisati izvor?"
 
-[portal.sources.detail]
-closeAriaLabel = "Zatvori detalje"
-delete = "Izbriši izvor"
-docs24h = "Zadnja 24 h"
-docs30d = "Zadnjih 30 dana"
-docsTotal = "Ukupno viđeno"
-docsTrend = "Dokumenti u zadnjih 30 dana"
-documents = "Dokumenti"
-edit = "Uredi"
-notReferenced = "Ne referencira ga nijedno pravilo, pa ga je sigurno izbrisati."
-pause = "Pauziraj"
-resume = "Nastavi"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Koristi se u"
-
 [portal.sources.empty]
 description = "Povežite mapu (a uskoro i cloud storage) kako bi vaša pravila imala odakle povlačiti dokumente."
 title = "Još nema povezanih izvora"
@@ -7899,18 +8754,57 @@ inUse = "U upotrebi"
 total = "Veze"
 unused = "Neiskorišteno"
 
+[portal.sources.networkFields.connection]
+helperText = "Spremljena veza s adresom poslužitelja i vjerodajnicama. Ponovno je koristi svaki izvor koji se na nju poziva."
+label = "Veza"
+
+[portal.sources.networkFields.directory]
+helperText = "Mapa na poslužitelju za provjeru, relativno na početnu mapu prijave ili korijen dijeljenja. Ostavite prazno za korijen."
+label = "Mapa"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume uklanja svaku datoteku s poslužitelja nakon što je svako pravilo obradi."
+label = "Način čitanja"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: obradi svaku datoteku jednom"
+snapshot = "Snapshot: ponovno pročitaj mapu pri svakom pokretanju"
+
+[portal.sources.networkFields.recursive]
+label = "Dubina mape"
+
+[portal.sources.networkFields.recursive.options]
+all = "Uključi podmape"
+top = "Samo najviša razina"
+
 [portal.sources.status]
 active = "Aktivno"
 disabled = "Onemogućeno"
 unused = "Neiskorišteno"
 
 [portal.sources.table]
+documents = "Dokumenti"
 source = "Izvor"
 status = "Status"
 usedBy = "Pravila"
 
+[portal.sources.types.box]
+description = "Dohvatite dokumente iz Box mapa koje vaš tim već dijeli."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Dohvatite dokumente iz dijeljene Dropbox mape."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenti koje je vaš tim obradio u editoru, kroz pravila i AI pokretanja."
 label = "Editor"
+noPolicies = "Još nema pravila pokrenutih iz editora."
+
+[portal.sources.types.email]
+description = "Pretvorite privitke poslane u namjenski poštanski sandučić u dokumente."
+label = "Email sandučić"
 
 [portal.sources.types.folder]
 description = "Prati direktorij na serveru za nove dokumente."
@@ -7943,25 +8837,80 @@ label = "Dubina mape"
 all = "Uključi podmape"
 top = "Samo najviša razina"
 
+[portal.sources.types.ftp]
+description = "Provjerava mapu FTP ili FTPS poslužitelja za nove dokumente."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Dohvatite dokumente iz dijeljenih Google Drive mapa."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Pratite SMB mrežno dijeljenje za nove dokumente."
+label = "Mrežni drive"
+
+[portal.sources.types.onedrive]
+description = "Pratite OneDrive mape za nove dokumente."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Dohvatite dokumente iz Amazon S3 ili S3-kompatibilnog bucketa."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Spremljena veza koja sadrži bucket i vjerodajnice. Ponovno je koristi svaki izvor i izlaz tijeka obrade koji se na nju poziva."
+label = "Veza"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume uklanja svaki objekt iz bucketa nakon što ga svako pravilo obradi."
+label = "Način čitanja"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: obradi svaki objekt jednom"
+snapshot = "Snapshot: ponovno pročitaj bucket pri svakom pokretanju"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Obrađuju se samo objekti čiji ključevi počinju ovim prefiksom."
+label = "Prefiks ključa"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Provjerava SFTP drop mapu za nove dokumente."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Dohvatite dokumente iz SharePoint biblioteka dokumenata."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Izvor"
 
+[portal.sources.types.webhook]
+createNote = "URL za isporuku i tajna za potpisivanje generiraju se kada izradite ovaj webhook. Pošiljatelji šalju dokumente POST metodom na taj URL, a pravila koja se na njega pozivaju pokreću se po dolasku."
+description = "Primajte dokumente putem potpisanog HTTP POST iz bilo kojeg vanjskog sustava."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL za isporuku"
+secretNote = "Tajna za potpisivanje prikazuje se jednom, kada se webhook izradi. Ponovno izradite izvor da biste je rotirali."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiraj"
+done = "Gotovo"
+secret = "Tajna za potpisivanje"
+secretHelp = "Potpišite neobrađeno tijelo svake isporuke ovim ključem (HMAC-SHA256) i pošaljite ga kao X-Stirling-Signature zaglavlje."
+secretWarning = "Kopirajte tajnu za potpisivanje sada. Radi vaše sigurnosti prikazuje se samo jednom i ne može se dohvatiti kasnije."
+title = "Webhook izrađen"
+url = "URL za isporuku"
+usage = "Pošaljite svaki dokument POST metodom kao neobrađeno tijelo zahtjeva na URL za isporuku s binarnom vrstom sadržaja (application/pdf ili application/octet-stream). Pravila koja se na njega pozivaju automatski se pokreću po dolasku."
+
 [portal.sources.wizard]
-back = "Natrag"
-cancel = "Odustani"
-continue = "Nastavi"
-editTitle = "Uredi izvor"
 name = "Naziv"
 namePlaceholder = "npr. Prijem zahtjeva"
-save = "Spremi promjene"
-subtitle = "Korak {{current}} od {{total}} · {{label}}"
-title = "Poveži izvor"
 type = "Vrsta"
 
-[portal.sources.wizard.steps]
-chooseType = "Odaberi vrstu"
-configure = "Konfiguriraj"
-review = "Pregledaj i poveži"
+[portal.stepModal]
+close = "Zatvori"
 
 [portal.usage]
 managePayment = "Upravljaj plaćanjem"
@@ -8021,16 +8970,9 @@ summary = "Vlasnik je tima — upravlja resursima njegovih članova i dijeljenim
 2 = "Pristup portalu putem zadane politike"
 3 = "Sve što može Member"
 
-[portal.welcome]
-ariaLabel = "Dobro došli u Stirling PDF"
-badge = "Open-source"
-installEditor = "Instaliraj Editor"
-inviteTeammates = "Pozovi članove tima"
-openInBrowser = "Otvori u pregledniku"
-perks = "Zauvijek besplatno · Self-hostable"
-subtitle = "Najsigurniji PDF Editor na svijetu besplatan je za timove svih veličina. Uključuje 60+ PDF operacija i SSO."
-title = "Dobro došli u"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Neograničeno"
 
 [printFile]
 title = "Ispis datoteke"
@@ -8613,6 +9555,14 @@ text = "Zakrećite PDF stranice u smjeru kazaljke na satu ili suprotno u koracim
 [rotate.tooltip.header]
 title = "Pregled postavki zakretanja"
 
+[ruler]
+clearAll = "Očisti sve"
+hideAllLabels = "Sakrij sve oznake"
+hideSmallLabels = "Sakrij male oznake"
+physicalValues = "Fizički"
+scaled = "Skalirano"
+showAllLabels = "Prikaži sve oznake"
+
 [sanitize]
 desc = "Uklonite potencijalno štetne elemente iz PDF datoteka."
 sanitizationResults = "Rezultati sanitizacije"
@@ -8654,31 +9604,45 @@ label = "Ukloni XMP metapodatke"
 [sanitize.steps]
 settings = "Postavke"
 
-[sanitizePdf]
-tags = "čisto, sigurno, sigurno, uklanjanje prijetnji"
-
 [sanitizePDF]
 title = "Sanirajte PDF"
 
+[sanitizePdf]
+tags = "čisto, sigurno, sigurno, uklanjanje prijetnji"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Podesite veličinu stranice"
 
+[scaleSettings]
+activeScale = "Aktivno mjerilo"
+apply = "Primijeni mjerilo"
+applyCalibration = "Primijeni kalibraciju"
+calculatedScale = "Izračunato mjerilo"
+calibrate = "Kalibriraj"
+calibrating = "Kalibriranje"
+calibrationDistanceRequired = "Unesite stvarnu udaljenost veću od nule"
+calibrationInvalid = "Nije moguće izračunati mjerilo iz ovog mjerenja"
+calibrationPaperDistance = "Izmjerena udaljenost na stranici: {{distance}}"
+calibrationTitle = "Kalibriraj mjerilo"
+calibrationTooltip = "Izmjerite poznatu udaljenost za automatski izračun mjerila"
+customScale = "Prilagođeno mjerilo"
+noneSet = "Nije postavljeno prilagođeno mjerilo"
+presets = "Unaprijed postavljena mjerila"
+ratio = "Omjer mjerila"
+ratioHelp = "Omjer: 1 jedinica stranice = X stvarnih jedinica"
+ratioPlaceholder = "npr. 100"
+ratioPositive = "Omjer mora biti veći od nule"
+ratioRequired = "Omjer je obavezan"
+realDistance = "Stvarna udaljenost"
+realDistancePlaceholder = "npr. 5"
+reset = "Vrati na zadane vrijednosti"
+unit = "Jedinica"
+unitInvalid = "Nevažeća jedinica: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Kutni prag:"
-10 = "Postavlja veličinu obruba koji se dodaje i uklanja kako bi se spriječili bijeli obrubi u ispisu (zadano: 1)."
-2 = "Postavlja minimalni apsolutni kut potreban za rotiranje slike (zadano: 10)."
-3 = "Tolerancija:"
-4 = "Određuje raspon varijacije boje oko procijenjene boje pozadine (zadano: 30)."
-5 = "Minimalna površina:"
-6 = "Postavlja minimalni prag površine za fotografiju (zadano: 10000)."
-7 = "Minimalna konturna površina:"
-8 = "Postavlja minimalni prag površine konture za fotografiju"
-9 = "Veličina obruba:"
-
 [scannerImageSplit]
 submit = "Izdvoji skenirane slike"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Što ovo radi"
 whatThisDoesDesc = "Automatski pronalazi i izdvaja svaku fotografiju sa skenirane stranice ili složene slike—bez ručnog izrezivanja."
 whenToUse = "Kada koristiti"
 
+[ScannerImageSplit.selectText]
+1 = "Kutni prag:"
+10 = "Postavlja veličinu obruba koji se dodaje i uklanja kako bi se spriječili bijeli obrubi u ispisu (zadano: 1)."
+2 = "Postavlja minimalni apsolutni kut potreban za rotiranje slike (zadano: 10)."
+3 = "Tolerancija:"
+4 = "Određuje raspon varijacije boje oko procijenjene boje pozadine (zadano: 30)."
+5 = "Minimalna površina:"
+6 = "Postavlja minimalni prag površine za fotografiju (zadano: 10000)."
+7 = "Minimalna konturna površina:"
+8 = "Postavlja minimalni prag površine konture za fotografiju"
+9 = "Veličina obruba:"
+
 [search]
 noResults = "Nema rezultata"
 placeholder = "Unesite pojam za pretraživanje..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Vaš Stirling-PDF poslužitelj je izvan mreže i \"{{
 [session]
 expired = "Vaš sesija je istekla. Molim vas da osvježite stranicu i pokušate ponovno."
 
-[sessionManagement.tooltip]
-header = "Upravljanje sesijama potpisivanja"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Novi sudionici dodaju se na kraj redoslijeda potpisivanja"
-bullet2 = "Nije moguće dodavati sudionike nakon dovršetka sesije"
-bullet3 = "Svaki sudionik prima obavijest kada dođe njegov red"
-description = "Možete dodavati više sudionika u aktivnu sesiju bilo kada prije dovršavanja."
-title = "Dodavanje sudionika"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Potpuno dovršavanje</b>: svi sudionici su potpisali"
-bullet2 = "<b>Djelomično dovršavanje</b>: neki sudionici još nisu potpisali"
-bullet3 = "Nepotpisani sudionici bit će isključeni iz konačnog dokumenta"
-bullet4 = "Nakon dovršavanja možete učitati potpisani PDF u aktivne datoteke"
-description = "Dovršavanje objedinjuje sve potpise u jedan potpisani PDF. Ovu radnju nije moguće poništiti."
-title = "Dovršavanje sesije"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Nije moguće ukloniti sudionike koji su već potpisali"
-bullet2 = "Uklonjeni sudionici više ne primaju obavijesti"
-bullet3 = "Redoslijed potpisivanja automatski se prilagođava"
-description = "Sudionici se mogu ukloniti iz sesija prije nego potpišu."
-title = "Uklanjanje sudionika"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Svaki se potpis primjenjuje sekvencijalno na PDF"
-bullet2 = "Kasniji potpisnici mogu vidjeti ranije potpise"
-bullet3 = "Ključno za tijekove odobravanja i pravne lance čuvanja"
-description = "Redoslijed koji odredite pri stvaranju sesije definira tko potpisuje prvi."
-title = "Redoslijed potpisa"
-
 [settings]
 close = "Zatvori"
 
+[settings.ai]
+documents = "Dokumenti i RAG"
+general = "Općenito"
+limits = "Ograničenja i performanse"
+models = "Modeli i pružatelji usluga"
+title = "AI"
+
 [settings.configuration]
 advanced = "Napredno"
 database = "Baza podataka"
 endpoints = "Endpointi"
 features = "Značajke"
+folderAccess = "Pristup mapama"
 mcp = "MCP Server"
 storageSharing = "Pohrana i dijeljenje datoteka"
 systemSettings = "Postavke sustava"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Zadani PDF uređivač"
 defaultPdfEditorActive = "Stirling PDF je vaš zadani PDF uređivač"
 defaultPdfEditorChecking = "Provjera..."
 defaultPdfEditorInactive = "Druga je aplikacija postavljena kao zadana"
+defaultPdfEditorRemind = "Podsjeti me da postavim kao zadano"
+defaultPdfEditorRemindDescription = "Prikaži natpis kada Stirling PDF nije vaša zadana PDF aplikacija."
 defaultPdfEditorSet = "Već je zadano"
 defaultStartupView = "Zadani prikaz pri pokretanju"
 defaultStartupViewDescription = "Odaberite koja je kartica aktivna u lijevom stupcu pri pokretanju aplikacije"
@@ -8817,9 +9771,18 @@ languageDescription = "Odaberite jezik prikaza"
 logout = "Odjava"
 setAsDefault = "Postavi kao zadano"
 theme = "Tema"
+themeAccent = "Boja naglaska"
+themeAccentCustom = "Prilagođena boja"
+themeAccentCustomHint = "Prilagođeno (preporučene zadane vrijednosti)"
+themeAccentDark = "Boja naglaska za tamni način rada"
+themeAccentDefault = "Zadano"
+themeAccentDefaultHint = "Zadana tema (preporučeno)"
+themeAccentDescription = "Gumbi, poveznice i isticanja koriste je, a ona suptilno nijansira aplikaciju. Svijetli i tamni način rada imaju svaki svoju. Sustav koristi onu koja je aktivna."
+themeAccentLight = "Boja naglaska za svijetli način rada"
 themeDark = "Tamna"
 themeDescription = "Prebacite između svijetlog i tamnog načina"
 themeLight = "Svijetla"
+themeReset = "Vrati temu na zadano"
 themeSystem = "System"
 title = "Općenito"
 user = "Korisnik"
@@ -8833,6 +9796,12 @@ intro = "Omogućite autentikaciju korisnika, upravljanje timovima i značajke ra
 learnMore = "Saznajte više u dokumentaciji"
 title = "Za sistemske administratore"
 
+[settings.general.loginLanding]
+description = "Odaberite koja se aplikacija otvara kada se prijavite u Stirling Cloud."
+editor = "Uređivač"
+processor = "Procesor"
+title = "Nakon prijave"
+
 [settings.general.mode]
 fullscreen = "Cijeli zaslon"
 sidebar = "Bočna traka"
@@ -9041,6 +10010,11 @@ security = "Sigurnost"
 telegram = "Telegram"
 title = "Sigurnost i autentikacija"
 
+[settings.signOut]
+confirm = "Jeste li sigurni da se želite odjaviti?"
+submit = "Odjavi se"
+title = "Odjava"
+
 [settings.team]
 title = "Tim"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Prenesi na poslužitelj"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "kliknite ovdje"
+fallback = "Ako se nije automatski otvorilo,"
+opening = "Otvaranje Swagger UI u novoj kartici..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API dokumentacija"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Odaberite datoteke u Aktivnim datotekama za pokretanje ovog a
 singleFileScope = "Primjenjuje se samo na: {{fileName}}"
 viewerMode = "Prebacite se u uređivač datoteka da biste odabrali više datoteka."
 
+[toolFormat]
+ANY = "bilo koja datoteka"
+CBR = "arhiva stripa (CBR)"
+CBZ = "arhiva stripa (CBZ)"
+CSV = "CSV datoteka"
+EBOOK = "e-knjiga"
+EMAIL = "poruka e-pošte"
+EXCEL = "proračunska tablica"
+HTML = "web-stranica"
+IMAGE = "slike"
+JAVASCRIPT = "JavaScript datoteka"
+JSON = "JSON datoteka"
+MARKDOWN = "Markdown datoteka"
+NONE = "nema datoteke"
+PCL = "PCL datoteka za ispis"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF zaštićen lozinkom"
+POSTSCRIPT = "PostScript datoteka"
+PPT = "prezentacija"
+TEXT = "tekstna datoteka"
+VIDEO = "video"
+WORD = "Word dokument"
+XML = "XML datoteka"
+XPS = "XPS dokument"
+ZIP = "ZIP arhiva"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Natrag na sve alate"
 collapse = "Sažmi panel"
 expand = "Proširi panel"
 goBack = "Vrati se"
+pdfTools = "PDF alati"
 placeholder = "Odaberite alat za početak"
 premiumFeature = "Premium značajka:"
+searchTools = "Pretraži alate"
 toolsHeader = "Alati"
 viewAllTools = "Prikaži sve alate"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nije pronađen nijedan alat"
 quickAccess = "BRZI PRISTUP"
 searchPlaceholder = "Pretraži alate..."
 
-[toolPicker.categories]
-advancedTools = "Napredni alati"
-recommendedTools = "Preporučeni alati"
-standardTools = "Standardni alati"
-
 [toolPicker.subcategories]
 advancedFormatting = "Napredno formatiranje"
 automation = "Automatizacija"
@@ -9950,16 +10950,31 @@ title = "Korisnici"
 you = "(vi)"
 
 [users.action]
+cancelInvite = "Otkaži pozivnicu"
 deleteTeam = "Izbriši tim"
 disableMfa = "Resetiraj MFA"
 move = "Premjesti u tim"
 reinstate = "Ponovno uključi"
 remove = "Ukloni iz organizacije"
+removeTeam = "Ukloni iz tima"
 rename = "Preimenuj tim"
 resetPw = "Resetiraj lozinku"
 suspend = "Suspendiraj"
 unlock = "Otključaj račun"
 
+[users.activity]
+daysAgo = "Prije {{count}} d"
+hoursAgo = "Prije {{count}} h"
+justNow = "Upravo sada"
+minutesAgo = "Prije {{count}} min"
+monthsAgo_one = "Prije {{count}} mjesec"
+monthsAgo_other = "Prije {{count}} mjeseci"
+never = "Nikad"
+weeksAgo_one = "Prije {{count}} tjedan"
+weeksAgo_other = "Prije {{count}} tjedana"
+yearsAgo_one = "Prije {{count}} godinu"
+yearsAgo_other = "Prije {{count}} godina"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Odobrava pravilo"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Otkazati pozivnicu za {{email}}? Neće se moći pridružiti putem trenutačne poveznice."
+cancelInviteTitle = "Otkaži pozivnicu"
 deleteTeamBody = "Izbrisati tim {{name}}? Tim prvo mora biti prazan - premjestite njegove članove u drugi tim i ne smije još uvijek posjedovati konfiguracije integracija."
 deleteTeamTitle = "Izbriši tim"
 disableMfaBody = "Ukloniti MFA registraciju za {{name}}? Ponovno će je postaviti pri sljedećoj prijavi ako je potrebno."
 disableMfaTitle = "Resetiraj MFA"
 removeBody = "Trajno ukloniti {{name}} iz organizacije? To se ne može poništiti."
+removeTeamBody = "Ukloniti {{name}} iz tima? Zadržat će svoj račun, ali će izgubiti pristup resursima ovog tima."
 removeTitle = "Ukloni člana"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Korisničko ime"
 usernameError = "Korisničko ime mora imati najmanje 3 znaka"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Poziv poslao/la {{who}}"
+cancel = "Otkaži"
+count = "{{count}} na čekanju"
+desc = "Pozvane osobe koje se još nisu pridružile. Zauzimaju mjesto dok ne prihvate."
+expiresInDays_one = "Istječe za {{count}} dan"
+expiresInDays_other = "Istječe za {{count}} dana"
+expiresToday = "Istječe danas"
+title = "Pozivnice na čekanju"
+
 [users.loadError]
 description = "Nešto je pošlo po zlu pri povezivanju s pozadinskim sustavom ili nemate pristup. Pokušajte ponovno."
 title = "Nije moguće učitati članove"
@@ -10212,9 +11240,11 @@ title = "Prilozi"
 
 [viewer.bookmarks]
 bookmarkTitle = "Naslov knjižne oznake"
+bookmarkTitleRequired = "Naslov knjižne oznake je obavezan"
 closeSidebar = "Zatvori bočnu traku knjižnih oznaka"
 collapseAll = "Sažmi sve knjižne oznake"
 expandAll = "Proširi sve knjižne oznake"
+searchPlaceholder = "Pretraži knjižne oznake"
 
 [viewer.comments]
 addComment = "Dodaj komentar"
@@ -10605,30 +11635,6 @@ title = "Tekst vodenog žiga"
 image = "Slika"
 text = "Tekst"
 
-[wetSignature.tooltip]
-header = "Metode izrade potpisa"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Prilagodite boju i debljinu olovke"
-bullet2 = "Brišite i ponovno crtajte dok ne budete zadovoljni"
-bullet3 = "Radi na uređajima s dodirnim zaslonom (tableti, telefoni)"
-description = "Izradite rukom pisani potpis pomoću miša ili dodirnog zaslona. Najbolje za osobne, autentične potpise."
-title = "Nacrtaj potpis"
-
-[wetSignature.tooltip.type]
-bullet1 = "Odaberite između više fontova"
-bullet2 = "Prilagodite veličinu i boju teksta"
-bullet3 = "Idealno za standardizirane potpise"
-description = "Generirajte potpis iz upisanog teksta. Brzo i dosljedno, pogodno za poslovne dokumente."
-title = "Upiši potpis"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Podržava PNG, JPG i druge slikovne formate"
-bullet2 = "Za najbolje rezultate preporučuju se prozirne pozadine"
-bullet3 = "Slika će se promijeniti veličinom kako bi odgovarala području potpisa"
-description = "Učitajte unaprijed izrađenu sliku potpisa. Idealno ako imate skenirani potpis ili logotip tvrtke."
-title = "Učitaj sliku potpisa"
-
 [workbenchBar]
 activeFiles = "Aktivne datoteke"
 annotations = "Anotacije"
@@ -10652,6 +11658,7 @@ redact = "Zatamni"
 rotateLeft = "Rotiraj ulijevo"
 rotateRight = "Rotiraj udesno"
 ruler = "Ravnalo / Mjerenje"
+rulerSettings = "Postavke mjerila"
 save = "Spremi"
 saveAll = "Spremi sve"
 saveAs = "Spremi kao"
diff --git a/frontend/editor/public/locales/hu-HU/translation.toml b/frontend/editor/public/locales/hu-HU/translation.toml
index 26e7835c1b..e37b9a3807 100644
--- a/frontend/editor/public/locales/hu-HU/translation.toml
+++ b/frontend/editor/public/locales/hu-HU/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "fájl kiválasztva"
 font = "Betűtípus"
 fontSizeTooltip = "A lapszám szövegének mérete pontban. A nagyobb szám nagyobb szöveget eredményez."
 fontTypeTooltip = "A lapszámok betűcsaládja. Válassza a dokumentum stílusához illően."
-genericSubmit = "Küldés"
 green = "Zöld"
 help = "Súgó"
-imgPrompt = "Kép kiválasztása"
 incorrectPasswordMessage = "A jelenlegi jelszó helytelen."
 info = "Információ"
 invalidUndoData = "Nem lehet visszavonni: érvénytelen műveleti adatok"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Bejelentkezési megállapodás"
 logOut = "Kijelentkezés"
 marginTooltip = "A lapszám és az oldal széle közötti távolság."
 moreOptions = "További beállítások"
-multiPdfPrompt = "PDF-fájlok kiválasztása (2+)"
 never = "Soha"
 no = "Nem"
 noFileSelected = "Nincs fájl kiválasztva. Kérjük, töltsön fel egyet."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Egyedi oldalsorrend (Adja meg az oldalszámokat vesszővel el
 pages = "Oldal"
 pageSelectionPrompt = "Egyedi oldalválasztás (Adja meg az oldalszámokat vesszővel elválasztva, pl. 1,5,6 vagy használjon függvényeket, pl. 2n+1):"
 password = "Jelszó"
-pdfPrompt = "PDF-fájl kiválasztása"
 pin = "Fájl rögzítése (aktív marad az eszköz futtatása után)"
 pro = "Pro"
 processingComplete = "A fájl elkészült."
@@ -356,6 +352,7 @@ text = "Ezek a jogosultságok szabályozzák, mit tehetnek a felhasználók a PD
 title = "Jogosultságok módosítása"
 
 [addStamp]
+preview = "Bélyeg előnézete"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Kézi letöltések: kattintson a hivatkozásokra, és helyezze a
 noLanguages = "Nem találhatók tessdata nyelvek a beállított könyvtárban."
 permissionNotice = "A tessdata elérési út nem írható. A letöltések a böngészőben nyílnak meg; mentse a .traineddata fájlokat kézzel a tessdata mappába."
 
+[admin.settings.ai.documents]
+description = "Konfigurálja a dokumentumokkal kapcsolatos kérdések megválaszolásához használt beágyazási modellt és visszakeresési beállításokat. Mentéskor az AI-motorra lesz alkalmazva."
+title = "Dokumentumok és RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Hagyja üresen a motor saját környezeti hitelesítő adatainak használatához. Saját üzemeltetésű, egymotoros telepítésekre vonatkozik."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Mentve – hagyja üresen az aktuális kulcs megtartásához"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Az OpenAI-kompatibilis / Ollama embeddings végpont alap URL-je, pl. http://ollama:11434/v1. Megbízható belső végpontra kell mutatnia (SSRF-érzékeny)."
+label = "Embedding alap URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding modell neve. Szabad szöveg; a javaslatok csak támpontok."
+label = "Embedding modell"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "A dokumentumszöveg vektoros beágyazásokká alakításához használt szolgáltató."
+label = "Embedding szolgáltató"
+
+[admin.settings.ai.documents.maxSearches]
+description = "A visszakeresési keresések maximális száma, amelyet az ügynök kérésenként futtathat."
+label = "Keresések maximuma"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Az embedding modell módosítása azonnal életbe lép, de az előző modellel indexelt dokumentumokat újra kell indexelni, hogy a keresés helyes eredményeket adjon."
+title = "Újraindexelés szükséges"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Ha módosította az embedding modellt, indexelje újra a meglévő dokumentumokat, hogy a keresés az új modellt használja."
+
+[admin.settings.ai.documents.topK]
+description = "Keresésenként visszakeresett, legrelevánsabb részletek száma."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Csatlakoztassa a Stirlinget a Python AI-motorhoz, és válassza ki, mely AI-képességek legyenek elérhetők. A módosítások újraindításkor lépnek életbe."
+title = "AI-motor"
+
+[admin.settings.ai.general.capabilities]
+description = "Kapcsolja be vagy ki az egyes AI-funkciókat. A letiltott funkciók el vannak rejtve az alkalmazásban."
+title = "Képességek"
+
+[admin.settings.ai.general.enabled]
+description = "Főkapcsoló. Kikapcsolt állapotban nem érhetők el AI-eszközök, ügynökök vagy motorhívások."
+label = "AI engedélyezése"
+
+[admin.settings.ai.general.features.chat]
+description = "Beszélgetős asszisztens PDF-ekkel való munkához."
+label = "Chat asszisztens"
+
+[admin.settings.ai.general.features.classify]
+description = "Dokumentumok automatikus kategorizálása típus vagy tartalom alapján."
+label = "Dokumentumosztályozás"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Új PDF generálása (pl. HTML-ből) AI-ügynök segítségével."
+label = "PDF létrehozása promptból"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Kérdezzen, és kapjon válaszokat egy feltöltött dokumentum alapján."
+label = "Dokumentumkérdések"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Dokumentumok ellenőrzése matematikai és numerikus hibák szempontjából."
+label = "Matematikai ellenőr"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "AI által írt áttekintési megjegyzések és annotációk hozzáadása PDF-hez."
+label = "PDF-megjegyzés ügynök"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Időtúllépés nagyobb ügynökműveletekhez, például dokumentumgeneráláshoz."
+label = "Hosszú futású időtúllépés (másodperc)"
+
+[admin.settings.ai.general.note]
+body = "Az AI-motor külön szolgáltatásként fut. A megosztott titka"
+body2 = "konténerkörnyezeti változóval van beállítva. A szolgáltatói API key-k megadhatók ezeken az oldalakon, vagy átadhatók motor környezeti változóként; az itt megadott kulcsok mentéskor továbbításra kerülnek a motorhoz."
+title = "Az AI-motorról"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Időtúllépés streamelt (tokenenkénti) chat válaszokhoz."
+label = "Stream időtúllépés (másodperc)"
+
+[admin.settings.ai.general.test]
+button = "Kapcsolat tesztelése"
+failBody = "Az AI-motor nem válaszolt. Ellenőrizze az URL-t, hogy a motor konténere fut-e, és hogy az AI engedélyezve van-e (engedélyezés után újraindítás szükséges)."
+failTitle = "Az AI-motor nem érhető el"
+okBody = "Az AI-motor válaszolt az állapotellenőrzésre."
+okTitle = "Az AI-motor elérhető"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Időtúllépés a motorhoz intézett szabványos AI-kérésekhez."
+label = "Kérés időtúllépése (másodperc)"
+
+[admin.settings.ai.general.url]
+description = "A Python AI-motor belső URL-je, pl. http://stirling-pdf-engine:5001."
+label = "AI-motor URL"
+
+[admin.settings.ai.limits]
+description = "Korlátok arra, mennyi munkát végezhetnek az AI-kérések, és hány futhat párhuzamosan. Mentéskor az AI-motorra lesz alkalmazva."
+title = "Korlátok és teljesítmény"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Védőkorlát: utasítsa el azokat az AI-kéréseket, amelyek kinyert szövege meghaladja ezt a hosszúságot."
+label = "Karakterek maximuma kérésenként"
+
+[admin.settings.ai.limits.maxPages]
+description = "Védőkorlát: utasítsa el azokat az AI-kéréseket, amelyek ennél több PDF-oldalt tartalmaznak."
+label = "Oldalak maximuma kérésenként"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Az egész motorban egyszerre folyamatban lévő modellhívások maximális száma."
+label = "Modell maximális párhuzamossága"
+
+[admin.settings.ai.models]
+description = "Válassza ki az LLM-szolgáltatót és az AI-motor által használt okos/gyors modelleket. Mentéskor az AI-motorra lesz alkalmazva."
+title = "Modellek és szolgáltatók"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Hagyja üresen a motor saját környezeti hitelesítő adatainak használatához. Saját üzemeltetésű, egymotoros telepítésekre vonatkozik."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Mentve – hagyja üresen az aktuális kulcs megtartásához"
+
+[admin.settings.ai.models.baseUrl]
+description = "Az OpenAI-kompatibilis / Ollama végpont alap URL-je, pl. http://ollama:11434/v1."
+label = "Szolgáltató alap URL-je"
+warning = "Az alap URL-nek megbízható belső végpontra kell mutatnia. A motor szerveroldali kéréseket küld neki, ezért a nem megbízható érték SSRF-érzékeny."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "A gyors modell kimeneti tokenjeinek maximális száma."
+label = "Gyors modell tokenmaximuma"
+
+[admin.settings.ai.models.fastModel]
+description = "Olcsóbb, gyorsabb modell könnyű feladatokhoz. Szabad szöveg; a javaslatok csak támpontok."
+label = "Gyors modell"
+
+[admin.settings.ai.models.provider]
+description = "Melyik LLM-szolgáltatóval kommunikáljon a motor."
+label = "Szolgáltató"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Az okos modell kimeneti tokenjeinek maximális száma."
+label = "Okos modell tokenmaximuma"
+
+[admin.settings.ai.models.smartModel]
+description = "Nagy képességű modell összetett érveléshez. Szabad szöveg; a javaslatok csak támpontok."
+label = "Okos modell"
+
+[admin.settings.ai.saved]
+body = "A módosítások automatikusan továbbításra kerülnek az AI-motorhoz."
+bodyNoPush = "A beállítások mentve. Akkor lépnek életbe, amikor az AI-motor legközelebb betölti a konfigurációját."
+title = "AI-beállítások mentve"
+
 [admin.settings.badge]
 clickToUpgrade = "Kattintson a csomag részleteihez"
 
@@ -938,6 +1094,25 @@ label = "Újragenerálás indításkor"
 description = "A tanúsítvány érvényességének napokban megadott száma"
 label = "Tanúsítvány érvényessége (nap)"
 
+[admin.settings.folderAccess]
+description = "Könyvtárak, amelyekből a mappaforrások és mappakimenetek olvashatnak, illetve amelyekbe írhatnak. Ez biztonsági határ: az automatizálások soha nem mutathatnak a listán kívüli szerverútvonalra."
+securityNote = "Hagyja üresen a mappaforrások és -kimenetek teljes letiltásához. A Stirling saját konfigurációs könyvtára mindig tiltott."
+title = "Mappahozzáférés"
+
+[admin.settings.folderAccess.implied]
+description = "Ezek a Stirling által kezelt könyvtárak mindig engedélyezettek, és itt nem módosíthatók."
+serverStorage = "Szerver fájltárolója"
+title = "Mindig engedélyezett"
+watchedFolder = "Pipeline figyelt mappája"
+
+[admin.settings.folderAccess.roots]
+add = "Hozzáadás"
+empty = "Nincs engedélyezett mappa. A mappaforrások és -kimenetek jelenleg le vannak tiltva."
+hint = "Adjon meg abszolút útvonalakat, például /data/inbox."
+label = "Engedélyezett mappagyökerek"
+placeholder = "/data/inbox"
+remove = "Mappagyökér eltávolítása"
+
 [admin.settings.general]
 description = "Rendszerszintű alkalmazásbeállítások konfigurálása, beleértve az arculatot és az alapértelmezett viselkedést."
 system = "Rendszer"
@@ -1842,6 +2017,15 @@ export = "Exportálás"
 accessDenied = "Hozzáférés megtagadva"
 insufficientPermissions = "Nincs jogosultsága a művelet végrehajtásához."
 
+[auth.callback]
+completing = "Hitelesítés befejezése"
+invalidToken = "OAuth bejelentkezés sikertelen – érvénytelen token."
+missingToken = "OAuth bejelentkezés sikertelen – nem érkezett token."
+oauthFailed = "OAuth bejelentkezés sikertelen. Próbálja újra."
+pleaseWait = "Kérjük, várjon, amíg befejezzük a bejelentkezést."
+signedOut = "Kijelentkezett. Kérjük, jelentkezzen be újra."
+windowMayClose = "A befejezés után bezárhatja ezt az ablakot."
+
 [auth.displayName]
 guest = "Vendég"
 user = "Felhasználó"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Biztonságossá teszi a PDF-eket a potenciálisan rosszind
 description = "Ez az eszköz automatikusan átnevezi a PDF-fájlokat a tartalmuk alapján. Elemzi a dokumentumot, hogy a szövegből a legalkalmasabb címet találja meg."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatikus elforgatás"
+tags = "automatikus elforgatás,tájolás javítása,fejjel lefelé,oldalra fordítva,kiegyenesítés,tájolás,tájolás felismerése,elforgatás javítása,automatikus tájolás,szkennelt,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Megbízhatósági küszöb"
+
+[autoRotate.detectionMode]
+auto = "Automatikus"
+osd = "Csak OCR"
+text = "Csak szöveg"
+title = "Felismerési módszer"
+
+[autoRotate.error]
+failed = "Hiba történt a PDF automatikus elforgatása közben."
+
+[autoRotate.inferUndetected]
+title = "Alacsony megbízhatóságú oldalak elforgatása egyezéshez"
+
+[autoRotate.report]
+applied = "{{degrees}}° óramutató járásával megegyezően"
+confidenceValue = "Megbízhatóság {{value}}"
+noChange = "Nincs változás"
+pageLabel = "{{number}}. oldal"
+summary = "{{total}} oldalból {{rotated}} elforgatva, {{unchanged}} változatlanul hagyva"
+title = "Felismerési jelentés"
+
+[autoRotate.report.method]
+inferred = "Egyeztetve"
+none = "Kihagyva"
+osd = "OCR"
+text = "Szöveg"
+
+[autoRotate.report.note]
+belowThreshold = "Küszöb alatt"
+blankPage = "Az oldal üres"
+inferredFromDocument = "Ugyanaz, mint a többi oldal"
+noDominantDirection = "Vegyes szövegirányok"
+osdFailed = "Nem található olvasható szöveg"
+osdNoVerdict = "Nem állapítható meg, melyik irány a felfelé"
+tesseractUnavailable = "OCR nincs telepítve"
+tooFewGlyphs = "Túl kevés szöveg"
+
+[autoRotate.results]
+title = "Automatikus elforgatás eredményei"
+
+[autoRotate.settings]
+title = "Beállítások"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Mennyire kell biztosnak lennie az ellenőrzésnek, mielőtt egy oldal elforgatásra kerül. Csökkentse, hogy több oldal forduljon el, növelje, hogy több oldal maradjon érintetlen."
+title = "Megbízhatósági küszöb"
+
+[autoRotate.tooltip.description]
+text = "Meghatározza, melyik irányban kell állnia az egyes oldalaknak, és a megfelelő irányba fordítja őket. A már álló helyzetű oldalak változatlanok maradnak."
+
+[autoRotate.tooltip.detectionMode]
+text = "Az Automatikus először az oldalon lévő szöveget olvassa, majd ha ez nem elég, képként vizsgálja az oldalt. A Csak szöveg kihagyja a képes ellenőrzést, ami a soha nem szkennelt dokumentumoknál a leggyorsabb. A Csak OCR minden oldalt képként kezel."
+title = "Felismerési módszer"
+
+[autoRotate.tooltip.header]
+title = "Automatikus elforgatás"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Az üres vagy majdnem üres oldalak önmagukban nem ellenőrizhetők. Ha minden olvasható oldal ugyanazt az elforgatást igényli, ezek az oldalak is hozzájuk igazodva fordulnak el."
+title = "Alacsony megbízhatóságú oldalak elforgatása egyezéshez"
+
 [autoSizeSplitPDF]
 tags = "pdf,felosztás,dokumentum,rendszerezés"
 
@@ -2189,33 +2440,6 @@ keywords = "Kulcsszavak: odd, even"
 numbers = "Számok/tartományok: 5, 10-20"
 progressions = "Sorozatok: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tanúsítványtípusok"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Rendszeradminisztrátorok kezelik"
-bullet2 = "Jogosult felhasználók között megosztva"
-bullet3 = "A vállalatot képviseli, nem egyéni felhasználót"
-bullet4 = "Ajánlott: hivatalos dokumentumok, csapat-aláírások"
-description = "A szervezet által biztosított megosztott tanúsítvány. Vállalati szintű aláírási jogosultsághoz használható."
-title = "Szervezeti tanúsítvány"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Első használatkor automatikusan generálódik"
-bullet2 = "A felhasználói fiókjához kapcsolódik"
-bullet3 = "Nem osztható meg más felhasználókkal"
-bullet4 = "Ajánlott: személyes dokumentumok, egyéni felelősségvállalás"
-description = "A felhasználói fiókjához egyedileg generált tanúsítvány. Egyéni aláírásokhoz megfelelő."
-title = "Személyes tanúsítvány"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX fájlt és jelszót igényel"
-bullet2 = "Külső hitelesítésszolgáltató bocsáthatja ki"
-bullet3 = "Magasabb bizalmi szint jogi dokumentumokhoz"
-bullet4 = "Ajánlott: jogilag kötelező erejű szerződések, külső hitelesítés"
-description = "Használja saját PKCS#12 tanúsítványfájlját. Teljes kontrollt biztosít a tanúsítvány tulajdonságai felett."
-title = "Egyéni P12 feltöltése"
-
 [certSign]
 awaitingSignatures = "Aláírásokra vár"
 chooseCertificate = "Tanúsítványfájl kiválasztása"
@@ -2542,34 +2766,6 @@ server = "Szerver"
 stepTitle = "Tanúsítvány forrása"
 upload = "Feltöltés"
 
-[certSign.tooltip.header]
-title = "Aláírások kezelése"
-
-[certSign.tooltip.overview]
-bullet1 = "Meglévő aláírások és érvényességük ellenőrzése"
-bullet2 = "Részletes információk megtekintése az aláírókról és tanúsítványokról"
-bullet3 = "Új digitális aláírások hozzáadása a dokumentumok védelméhez"
-bullet4 = "Több fájl támogatása könnyű navigációval"
-text = "Ez az eszköz lehetővé teszi, hogy ellenőrizze, digitálisan alá vannak-e írva a PDF-ek, és új digitális aláírásokat adjon hozzá. A digitális aláírások igazolják, ki hozta létre vagy hagyta jóvá a dokumentumot, és jelzik, hogy megváltozott-e az aláírás óta."
-title = "Mire képes ez az eszköz?"
-
-[certSign.tooltip.signing]
-bullet1 = "Támogatott formátumok: PEM, PKCS12, JKS és kiszolgálói tanúsítvány formátumok"
-bullet2 = "Az aláírás megjelenítése vagy elrejtése a PDF-en"
-bullet3 = "Ok, hely és aláíró neve hozzáadása"
-bullet4 = "Kiválaszthatja, melyik oldalra kerüljön a látható aláírás"
-bullet5 = "Kiszolgálói tanúsítvány használata az egyszerű 'Aláírás Stirling PDF-fel' opcióhoz"
-text = "PDF aláírásához digitális tanúsítványra van szükség (például PEM, PKCS12 vagy JKS). Az aláírást megjelenítheti a dokumentumon, vagy tarthatja láthatatlanul, csak biztonsági céllal."
-title = "Aláírás hozzáadása"
-
-[certSign.tooltip.validation]
-bullet1 = "Megmutatja, hogy az aláírások érvényesek vagy érvénytelenek"
-bullet2 = "Megjeleníti az aláíró adatait és az aláírás dátumát"
-bullet3 = "Ellenőrzi, hogy a dokumentum módosult-e az aláírás után"
-bullet4 = "Ellenőrzéshez használhat egyéni tanúsítványokat"
-text = "Ellenőrzéskor az eszköz megmondja, érvényesek-e, ki írta alá a dokumentumot, mikor történt az aláírás, és hogy megváltozott-e a dokumentum az aláírás óta."
-title = "Aláírások ellenőrzése"
-
 [changeCreds]
 changeUsername = "Felhasználónév frissítése. A frissítés után ki lesz jelentkeztetve."
 credsUpdated = "Fiók frissítve"
@@ -2824,6 +3020,7 @@ next = "Következő"
 preview = "Előnézet"
 previous = "Előző"
 refresh = "Frissítés"
+remaining = "Hátralévő"
 retry = "Újra"
 save = "Mentés"
 
@@ -3264,24 +3461,6 @@ description = "Ezek a sütik elengedhetetlenek a weboldal megfelelő működés
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Fejlett monitorozás"
-allInOneWorkspace = "Minden egyben PDF munkaterület (megjelenítő, eszközök és agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Dedikált támogatás és SLA-k"
-fasterThroughput = "10× gyorsabb áteresztőképesség"
-fullyPrivateFiles = "Teljesen privát fájlok"
-largeFileProcessing = "Nagy fájlok feldolgozása"
-orgWideAccess = "Szervezetszintű hozzáférés-vezérlés"
-premiumAiModels = "Prémium AI modellek"
-prioritySupport = "Elsőbbségi támogatás"
-privateDocCloud = "Privát dokumentumfelhő"
-ragFineTuning = "RAG + finomhangolás"
-secureApiAccess = "Biztonságos API-hozzáférés"
-standardThroughput = "Normál áteresztőképesség"
-unlimitedApiAccess = "Korlátlan API-hozzáférés"
-unlimitedSeats = "Korlátlan felhasználói helyek"
-
 [crop]
 autoCrop = "Üres terület automatikus levágása"
 noFileSelected = "Válasszon egy PDF-fájlt a vágás megkezdéséhez"
@@ -3346,6 +3525,7 @@ message = "Nem sikerült beállítani az alapértelmezett PDF-kezelőt"
 title = "Hiba"
 
 [defaultApp.prompt]
+dontRemind = "Ne emlékeztessen újra"
 message = "Állítsa a Stirling PDF-et a PDF-fájlok megnyitásának alapértelmezett alkalmazásává."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Csoportok testreszabása"
 dropHint = "A kezdéshez nyisson meg fájlokat"
 dropToAdd = "Drop files to add"
 expand = "Oldalsáv kinyitása"
-files = "Fájlok"
 googleDrive = "Google Drive"
 googleDriveDisabled = "A Google Drive nincs beállítva"
 leaveMyFiles = "Kilépés a Saját fájlokból"
+library = "PDF-könyvtár"
 myFiles = "Saját fájlok"
 noFiles = "Még nincsenek fájlok"
 openFileManager = "Fájlkezelő megnyitása"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Hozzáadás"
-addLabel = "Címke hozzáadása…"
-categoryIconAria = "Ikon kiválasztása ehhez: {{name}}"
-createCategory = "Kategória létrehozása"
-delete = "Kategória törlése"
 done = "Kész"
-hide = "Kategória elrejtése"
-newCategory = "Új kategórianév…"
-removeLabel = "{{name}} eltávolítása"
-rename = "Átnevezés"
 reset = "Alapértelmezések visszaállítása"
-search = "Címkék keresése…"
-show = "Kategória megjelenítése"
 subtitle = "Csoportosítsa fájljait szülőkategóriákba. Adjon meglévő vagy új címkéket egy kategóriához, nevezze át, vagy hozzon létre sajátot. Azok a fájlok, amelyek egyik kategóriájába sem tartoznak, az „Egyéb” alatt jelennek meg."
 title = "Oldalsáv kategóriái"
 
@@ -3808,6 +3977,7 @@ refresh = "Frissítés a szerverről"
 remove = "Törlés"
 removeVersion = "E verzió eltávolítása"
 rename = "Átnevezés"
+renamed = "Átnevezve"
 renameFolder = "Mappa átnevezése"
 resizeFolderTree = "Mappafa átméretezése (nyilak, Shift a nagyobb lépésekhez; dupla kattintás az automatikus illesztéshez)"
 save = "Mentés"
@@ -3910,9 +4080,7 @@ count = "Fájlok"
 folder = "Mappa"
 labels = "Címkék"
 modified = "Módosítva"
-name = "Név"
 size = "Méret"
-toolHistoryAtVersion = "Halmozott eszközlánc"
 totalSize = "Teljes méret"
 type = "Típus"
 versionHistory = "Verziótörténet"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Minden mentve"
+extractCsvError = "CSV kinyerése sikertelen"
+extractXlsxError = "XLSX kinyerése sikertelen"
 flattenAfterFilling = "Kitöltés után lapítás"
+requiredAbbreviation = "kötelező"
+requiredFieldsError = "Kérjük, töltse ki az összes kötelező mezőt"
 rescanFields = "Mezők újraolvasása"
 rescanFormFields = "Űrlapmezők újraolvasása"
 save = "Mentés"
+saveShortcut = "Ctrl+S a mentéshez"
+unsavedChanges = "Nem mentett módosítások"
 
 [formFill.sidebar]
 close = "Oldalsáv bezárása"
@@ -4309,6 +4484,11 @@ desc = "Automatikusan átnevezi a PDF fájlt az észlelt fejléc alapján"
 tags = "automatikus,fejlécalapú,rendez,átcímkéz"
 title = "PDF fájl automatikus átnevezése"
 
+[home.autoRotate]
+desc = "Az egyes oldalak tájolásának felismerése és automatikus függőlegesre forgatása."
+tags = "automatikus elforgatás,tájolás javítása,fejjel lefelé,oldalra fordítva,kiegyenesítés,tájolás,tájolás felismerése,elforgatás javítása,automatikus tájolás,szkennelt,OSD"
+title = "Automatikus elforgatás"
+
 [home.autoSizeSplitPDF]
 tags = "automatikus,feloszt,méret"
 title = "Auto felosztás méret/darab"
@@ -4608,13 +4788,13 @@ hint = "Töltsön fel PNG, JPG, SVG vagy más képfájlt a PDF-re helyezéshez.
 label = "Kép feltöltése"
 placeholder = "Képfájl kiválasztása"
 
-[imageToPdf]
-tags = "konverzió,kép,jpg,fotó,fénykép"
-
 [imageToPDF]
 header = "Kép PDF-be"
 title = "Kép PDF-be"
 
+[imageToPdf]
+tags = "konverzió,kép,jpg,fotó,fénykép"
+
 [infoBanner]
 dismiss = "Bezárás"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Meghívták!"
 
 [landing]
 addFiles = "Fájlok hozzáadása"
-heroSubtitle = "Húzza ide vagy adjon hozzá egy meglévő PDF-et a kezdéshez."
 mobileUpload = "Feltöltés mobilról"
 openFromComputer = "Megnyitás a gépről"
 uploadFromComputer = "Feltöltés a számítógépről"
-workbenchEmptyStateHero = "Dobjon ide bárhová egy PDF-et"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Bejelentkezés"
 magicLinkSent = "Magic Link elküldve ide: {{email}}! Ellenőrizze e-mailjét, és kattintson a linkre a bejelentkezéshez."
 mfaCode = "Hitelesítési kód"
 mfaRequired = "Kétfaktoros kód szükséges"
+noAccount = "Nincs fiókja?"
 or = "Vagy"
 password = "Jelszó"
 passwordChangedSuccess = "A jelszó sikeresen megváltozott! Jelentkezzen be az új jelszavával."
@@ -4715,26 +4894,10 @@ signInWith = "Bejelentkezés ezzel:"
 title = "Bejelentkezés"
 unexpectedError = "Váratlan hiba: {{message}}"
 updatePassword = "Jelszó frissítése"
-useEmailInstead = "Bejelentkezés e-maillel"
 useMagicLink = "Használjon Magic Linket"
 username = "Felhasználónév"
 youAreLoggedIn = "Be van jelentkezve!"
 
-[login.slides.edit]
-alt = "PDF-ek szerkesztése"
-subtitle = "Több mint egy tucat eszközzel a PDF-ek kitakarásához, aláírásához, olvasásához és kezeléséhez biztosan megtalálja, amit keres."
-title = "PDF-ek szerkesztése a kívánt információk megjelenítéséhez/védelméhez"
-
-[login.slides.overview]
-alt = "Stirling PDF áttekintés"
-subtitle = "Adatvédelem-központú felhőcsomag PDF-ekhez, amellyel konvertálhat, aláírhat, kitakarhat és kezelhet dokumentumokat, több mint 50 további hatékony eszközzel."
-title = "Az összes PDF-megoldás egy helyen."
-
-[login.slides.secure]
-alt = "PDF-ek védelme"
-subtitle = "Adjon hozzá jelszavakat, takarja ki a tartalmat, és kezelje a tanúsítványokat egyszerűen."
-title = "Érzékeny információk védelme a PDF-ekben"
-
 [margin]
 large = "Nagy"
 medium = "Közepes"
@@ -4976,6 +5139,7 @@ pinButton = "Használhatja a <strong>Rögzítés</strong> gombot, ha azt szeretn
 results = "Miután az eszköz lefutott, az <strong>Ellenőrzés</strong> lépés előnézetet mutat az eredményekről ebben a panelben, és lehetővé teszi a művelet visszavonását vagy a fájl letöltését."
 runButton = "Miután beállította az eszközt, ezzel a gombbal futtathatja azt az összes kijelölt PDF-en."
 selectCropTool = "Válasszuk ki a <strong>Vágás</strong> eszközt, hogy bemutassuk egy eszköz használatát."
+stepOf = "{{current}}/{{total}}. lépés"
 toolInterface = "Ez a <strong>Vágás</strong> eszköz felülete. Ahogy látható, még nincs itt sok minden, mert még nem adtunk hozzá PDF-fájlokat."
 workbench = "Ez a <strong>Munkaterület</strong> – a fő terület, ahol megtekintheti és szerkesztheti a PDF-jeit."
 wrapUp = "Készen is van! Megismerte az alkalmazás fő területeit és használatukat. A túrát bármikor újra megtekintheti a <strong>Súgó</strong> gombra kattintva."
@@ -4988,6 +5152,26 @@ showMeAround = "Körbevezetés"
 skipForNow = "Kihagyás most"
 skipTheTour = "Körbevezetés kihagyása"
 
+[onboarding.checklist]
+dismiss = "Elvetés"
+title = "Stirling PDF beállítása"
+
+[onboarding.checklist.downloadDesktop]
+description = "Futtassa a Stirlinget natívan a gépén"
+title = "Stirling letöltése asztali gépre"
+
+[onboarding.checklist.inviteTeam]
+description = "Működjön együtt a csapatával"
+title = "Csapattagok meghívása"
+
+[onboarding.checklist.shareAnalytics]
+description = "Segítsen a Stirling fejlesztésében"
+title = "Anonim használati adatok megosztása"
+
+[onboarding.checklist.takeTour]
+description = "Nézze meg egy gyors bemutatóban, hogyan működik a Stirling"
+title = "Bemutató megtekintése"
+
 [onboarding.desktopInstall]
 body = "A Stirling asztali alkalmazásként működik a legjobban. Használhatja offline, gyorsabban érheti el a dokumentumokat, és helyben szerkeszthet a gépén."
 selectOs = "Operációs rendszer kiválasztása"
@@ -4996,7 +5180,21 @@ titleWithOs = "Letöltés: {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Hitelesítési kód"
+description = "Tegye biztonságosabbá fiókját egy hitelesítő alkalmazás összekapcsolásával. Olvassa be a QR code-ot, vagy adja meg a beállítási kulcsot, majd a befejezéshez erősítse meg a 6 jegyű kódot."
+enable = "MFA engedélyezése"
+enableError = "A kétfaktoros hitelesítés engedélyezése nem sikerült. Ellenőrizze a kódot, és próbálja újra."
+enterCode = "Adja meg az alkalmazásból származó 6 jegyű kódot."
+enterCodeError = "A folytatáshoz adja meg a hitelesítési kódot."
+logout = "Kijelentkezés"
+openAuthenticator = "Nyissa meg a Google Authenticator, Authy vagy 1Password alkalmazást."
 qrCodeLoading = "QR-kód előállítása…"
+regenerateQrCode = "QR code újragenerálása"
+scanQrCode = "Olvassa be a QR code-ot, vagy adja meg alább a beállítási kulcsot."
+setupError = "A kétfaktoros beállítás elindítása nem sikerült. Próbálja újra."
+setupKey = "Beállítási kulcs (kézi bevitel)"
+stepByStep = "Lépésről lépésre"
+success = "Az MFA engedélyezve lett. Most már folytathatja."
+title = "Többtényezős hitelesítés beállítása"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "A bejelentkezési mód engedélyezése után kezelheti a felhasználókat, beállításokat és figyelheti a szerver állapotát. A szerver első <strong>{{freeTierLimit}}</strong> felhasználója ingyen használhatja a Stirlinget."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin áttekintés"
 userBody = "Hívja meg a csapattagokat, rendeljen szerepköröket, és tartsa rendezve dokumentumait egy biztonságos munkaterületen. Engedélyezze a bejelentkezési módot, amikor továbblépne az egyéni használatról."
 userTitle = "Csomag áttekintése"
 
+[onboarding.processorIntro]
+body = "A Stirling mostantól <strong>Szabályokat</strong> futtat — automatizált szabályokat, amelyek érkezéskor minden dokumentumot osztályoznak, védenek és feldolgoznak. Állítsa be őket, és kövesse a futásokat a <strong>Processor</strong> felületén."
+cta = "A Processor megtekintése"
+title = "Ismerje meg a Stirling Processort"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Előre fizetett év"
+
+[payg.prepaid.banner]
+exhausted = "Az előre fizetett kapacitása elfogyott; a mért számlázás újraindult. Töltse fel, hogy megőrizze a kedvezményt."
+expiring_one = "Az előre fizetett éve {{count}} nap múlva lejár. A fel nem használt kapacitás lejár — töltse fel egy új év indításához."
+expiring_other = "Az előre fizetett éve {{count}} nap múlva lejár. A fel nem használt kapacitás lejár — töltse fel egy új év indításához."
+low = "Az előre fizetett kapacitásának {{pct}}%-a maradt. Bármikor feltöltheti, hogy a feldolgozás megszakítás nélkül folytatódjon."
+
+[payg.prepaid.card]
+subtitle = "A mért számlázás előtt és a költési korlátján kívül kerül felhasználásra."
+title = "Előre fizetett kapacitás"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} előre fizetett kreditből"
+expires = "Lejár: {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Elfogyott"
+healthy = "Bőven maradt"
+low = "Kevés maradt"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Illessze be az e-mailben kapott licenckulcsot"
 success = "A licenc aktiválva!"
 successMessage = "A licenc sikeresen aktiválva. Most bezárhatja ezt az ablakot."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "érvényesítve"
-enforcing = "Érvényesítés folyamatban..."
-failed = "Az érvényesítés sikertelen"
 outputsUnavailable = "A házirend kimenetei már nem tölthetők le."
 partialOutputsUnavailable = "A házirend egyes kimenetei már nem tölthetők le."
-retrying = "Foglalt, újrapróbálás..."
 runNotFound = "Az érvényesítési futtatás már nem található."
-step = "lépés {{current}}/{{total}}"
 timedOut = "Időtúllépés történt az érvényesítésben, mielőtt a futtatás befejeződhetett volna."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Bezárás"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "A(z) {{names}} alkalmazása"
 applyingProgress = "A(z) {{names}} alkalmazása ({{done}} / {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} / {{total}} fájlt nem sikerült feldolgozni, és v
 failureTitle = "Exportálva teljes érvényesítés nélkül"
 printPolicyAppliedBody = "Ez a PDF frissítve lett, hogy megfeleljen egy házirendnek. Tekintse át a változtatásokat, majd nyomtasson újra."
 printPolicyAppliedTitle = "Házirend alkalmazva nyomtatás előtt"
-queued = "+{{count}} várólistán"
 successTitle = "{{names}} alkalmazva"
 summaryMore = "{{first}}, {{second}} és még {{more}}"
 summaryTwo = "{{first}} és {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Érvényesítés konvertálás előtt"
-default = "Érvényesítés"
-export = "Érvényesítés exportálás előtt"
-input = "Érvényesítés importáláskor"
-print = "Érvényesítés nyomtatás előtt"
-
-[policies.field]
-accessLog = "Hozzáférési napló"
-archiveAfter = "Archiválás ennyi idő után"
-auditTrail = "Auditnapló"
-belowThreshold = "Küszöbérték alatt"
-destination = "Célhely"
-frameworks = "Keretrendszerek"
-immutableHold = "Módosíthatatlan visszatartás"
-keepFor = "Megőrzés ennyi ideig"
-minConfidence = "Min. megbízhatóság"
-notify = "Értesítés útvonalon"
-onViolation = "Ha nem megfelelő"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Hozzáadás"
-addPlaceholder = "Címke hozzáadása…"
-customNote = "A csapatához igazítva."
-defaultNote = "A beépített alapértelmezés használata, megosztva a csapatával."
-duplicate = "„{{name}}” már létezik."
-edit = "Címkék szerkesztése"
-empty = "Még nincsenek címkék."
-export = "JSON exportálása"
-iconAria = "Ikon kiválasztása ehhez: {{name}}"
-import = "JSON importálása"
-importError = "Nem sikerült importálni a fájlt."
-managedNote = "A csapatcímkéket a csapatvezető kezeli."
-modalSubtitle = "Megosztva az egész csapattal. A besoroló kiválasztja az egyes dokumentumokhoz illő címkéket."
-modalTitle = "Besorolási címkék"
-pickIcon = "{{label}} ikon használata"
-removeAria = "{{name}} eltávolítása"
-resetToDefault = "Alapértelmezés visszaállítása"
-saveForTeam = "Mentés a csapat számára"
-saving = "Mentés…"
-sectionLabel = "Besorolási címkék"
-startFromScratch = "Kezdés elölről"
-teamCount = "csapatcímkék"
-tooLong = "A címkék legfeljebb {{max}} karakter hosszúak lehetnek."
-ungrouped = "Csoportosítatlan"
-view = "Címkék megtekintése"
+categoryCount = "kategória"
+hideCategory = "Kategória elrejtése"
+labelCount = "címke"
+sharedNote = "Ezek a címkék beépítettek, és az egész csapatával meg vannak osztva."
+showCategory = "Kategória megjelenítése"
 
 [policies.pii]
 account = "Számlaszámok (címkézett)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US routing számok (ABA)"
 ssn = "Társadalombiztosítási számok"
 
-[policies.settings]
-noneExport = "Jelenleg nincs exportáláskor futó szabályzat."
-noneUpload = "Jelenleg nincs feltöltéskor futó szabályzat."
-onExport = "Exportáláskor"
-onUpload = "Feltöltéskor"
-reorderHandle = "Húzza az átrendezéshez"
-runOrderDesc = "Ha egynél több szabályzat fut ugyanarra az eseményre, ebben a sorrendben futnak — mindegyik az előző szabályzat kimenetén. Húzza az átrendezéshez."
-title = "Szabályzatbeállítások"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Szabályzat beállításai"
-policySettings = "Szabályzatbeállítások"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Sikertelen szabályzatok újrapróbálása ({{count}})"
-rowProgress = "{{completed}} / {{total}} fájl feldolgozva"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Mi az a szabályzat?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automatikusan megkeresi és kitakarja az érzékeny adatokat — például a társadalombiztosítási és kártyaszámokat — így a dokumentumban nem olvashatók."
-sanitize = "Eltávolítja a rejtett JavaScriptet a fájlból, így megnyitáskor semmi nem fut le automatikusan."
-watermark = "Látható jelölést helyez el (pl. \"Bizalmas\") minden oldalra."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Bezárás"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} érvényesítése..."
 badgeRan = "{{name}} szabályzat lefutott ezen a fájlon"
+badgeRunning = "{{name}} fut..."
 blockingAction = "{{action}} blokkolva a szabályzat érvényesítése közben, kérjük, várjon..."
 dismiss = "Átfedés elvetése"
 enforcingTitle = "Szabályzat érvényesítése..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Fájl megtekintése (a szabályzat érvényesítése még tart)"
 [policyOption]
 autoRedactPhi = "PHI automatikus kitakarása"
 blockExport = "Exportálás blokkolása"
+ccpa = "CCPA"
 contracts = "Szerződések"
 documents = "Dokumentumok"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor csomag"
 subscribed = "Processor csomag"
 unlinked = "Nincs összekapcsolva"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap dokumentumból"
-sectionsAriaLabel = "Ügynöképítő szakaszai"
-selectorAriaLabel = "Ügynökök"
-subtitle = "Tervezze meg, tesztelje és élesítse azokat az AI ügynököket, amelyek besorolják, kinyerik és továbbítják a dokumentumait. Határozzon meg forgatókönyveket, korlátozza az eszközhozzáférést, futtasson golden setet, és tegyen közzé egy verziót."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Mégse"
-dropzoneText = "Válasszon mintadokumentumot (PDF vagy kép)"
-lead = "Dobjon ide egy mintadokumentumot, és javasolunk forgatókönyveket és egy kinyerési sémát, amelyet finomíthat. Semmi sem kerül közzétételre, amíg át nem nézi."
-submit = "Ügynök bootstrapelése"
-subtitle = "Új ügynök indítása egy reprezentatív fájlból"
-title = "Bootstrap dokumentumból"
-
-[portal.agentBuilder.empty]
-description = "Bootstrapeljen egy ügynököt egy mintadokumentumból, hogy elindítsa a forgatókönyveit és a kinyerési sémáját, majd finomítsa és tegye közzé."
-title = "Még nincsenek ügynökök"
-
-[portal.agentBuilder.evals]
-casesPassing = "Sikeres esetek"
-columnCase = "Eval eset"
-columnLatency = "Késleltetés"
-columnResult = "Eredmény"
-fail = "sikertelen"
-goldenSetPassRate = "Golden-set sikerességi arány"
-latencyMs = "{{ms}} ms"
-notRun = "nem futott"
-pass = "sikeres"
-passRate = "Sikerességi arány"
-runEvals = "Evalok futtatása"
-
-[portal.agentBuilder.evals.empty]
-description = "Az evalok a forgatókönyveit ismételhető golden setté alakítják. Váltson magasabb csomagra, hogy időben kövesse a sikerességi arányt, és ehhez kösse a közzétételeket."
-title = "Még nincs golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "golden seteken keresztül"
-activeAgents = "Aktív ügynökök"
-avgPassRate = "Átlagos eval sikerességi arány"
-fleetWide = "teljes flottában"
-latestPublished = "Legutóbb közzétéve"
-scenarios = "Forgatókönyvek"
-testCases = "tesztesetek"
-totalDescription_one = "összesen {{count}}"
-totalDescription_other = "összesen {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Hozzáadás"
-addScenario = "Forgatókönyv hozzáadása"
-enable = "Engedélyezés"
-expectationLabel = "Várt viselkedés"
-expectationPlaceholder = "Mit tegyen az ügynök"
-inEval = "evalban"
-mute = "Némítás"
-muted = "némítva"
-nameLabel = "Név"
-namePlaceholder = "pl. megfelelőségi eszkaláció"
-
-[portal.agentBuilder.tabs]
-evals = "Evalok"
-scenarios = "Forgatókönyvek"
-tools = "Eszközök"
-versions = "Verziók"
-
-[portal.agentBuilder.tools]
-broadAccess = "Széles körű hozzáférés"
-deniedHint = "A kiválasztott eszközök blokkolva vannak. Minden más továbbra is hívható."
-deniedTools = "Tiltott eszközök"
-governanceGate = "Az eszközirányítás az Enterprise csomagban érhető el."
-restricted = "Korlátozott"
-restrictedAccess = "Korlátozott eszközhozzáférés"
-restrictedDescription = "Engedélyezzen minden eszközt, kivéve az alább tiltottakat."
-
-[portal.agentBuilder.versions]
-current = "aktuális"
-historyGate = "A teljes verzióelőzmény és a visszaállítás az Enterprise csomagban érhető el."
-publish = "Közzététel"
-rollBack = "Visszaállítás"
-
 [portal.assistant]
 close = "Asszisztens bezárása"
 error = "Nem sikerült elérni az asszisztenst."
@@ -6365,9 +6346,21 @@ typing = "Gépel"
 loading = "Betöltés"
 redirectingToEditor = "Átirányítás a szerkesztőbe..."
 
+[portal.billing.activation]
+maybeLater = "Talán később"
+title = "Processor bekapcsolása"
+
+[portal.billing.activation.payg]
+sub = "Állítson be havi korlátot. Azért fizet, amit futtat."
+title = "Használat alapú fizetés"
+
+[portal.billing.activation.prepay]
+badge = "2 hónap ingyen"
+sub = "Egy számla, kártyás vagy banki átutalás."
+title = "Fizessen előre egy évre"
+
 [portal.billing.checkout]
 noClientSecret = "Az Edge function nem adott vissza client_secret értéket."
-subtitle = "Adjon hozzá egy kártyát, hogy továbbhaladhasson az ingyenes Editor-csomag keretén túl. A többit a Stripe kezeli."
 title = "Processor csomag bekapcsolása"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "A fizetés sikerült, de az aktiválás a szokásosnál kicsit tovább t
 close = "Bezárás"
 title = "Majdnem kész"
 
+[portal.billing.checkout.cap]
+amountAria = "Havi költési korlát"
+back = "Vissza"
+continue = "Tovább a fizetéshez"
+error = "Nem sikerült beállítani a költési korlátot"
+finePrint = "A számlák havonta készülnek. Bármikor lemondható."
+noLimit = "Nincs korlát"
+note = "Soha nem számlázunk a korlátja felett. A feldolgozás egyszerűen szünetel."
+perMonth = "/ hó"
+title = "Költési korlát beállítása"
+
+[portal.billing.checkout.card]
+fields = "Kártyaszám · HH / ÉÉ · CVC · ZIP"
+label = "Kártyaadatok"
+note = "A kártyaadatokat a Stripe gyűjti. A Stirling soha nem tárol PAN-t vagy CVC-t."
+
 [portal.billing.checkout.error]
 title = "Nem sikerült elindítani a fizetést"
 
@@ -6383,10 +6392,9 @@ body = "A fizetés sikerült. Bekapcsoljuk a mért feldolgozást az összekapcso
 hint = "Kérjük, hagyja nyitva ezt az ablakot."
 title = "Processor csomag aktiválása..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "a portál env-ben az alkalmazáson belüli fizetés engedélyezéséhez."
-bodyBefore = "Állítsa be:"
-title = "Stripe nincs konfigurálva"
+[portal.billing.checkout.pay]
+limit = "Havi költési korlát: {{amount}}/hó. A feldolgozás a korlátnál szünetel."
+limitNoCap = "Nincs költési korlát. A feldolgozás nem szünetel. A számlák havonta készülnek."
 
 [portal.billing.enterpriseUpsell]
 cta = "Enterprise ajánlat összeállítása"
@@ -6409,10 +6417,12 @@ currentPlan = "Aktuális csomag"
 freeForever = "Örökké ingyenes"
 noTeamResolved = "A tárcájához még nincs csapat hozzárendelve — frissítsen, és próbálja újra."
 ownerOnly = "Csak a csapat tulajdonosa kapcsolhatja be a Processor csomagot."
+payInvoice = "Számla kifizetése a befejezéshez"
 planName = "Editor"
 ssoIncluded = "SSO mellékelve"
 switchOnProcessor = "Processor bekapcsolása →"
 unlimitedUsers = "Korlátlan felhasználó"
+viewQuote = "Árajánlat megtekintése"
 
 [portal.billing.invoices]
 columnAmount = "Összeg"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Közvetlen API-kérések"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizálások és pipeline-ok"
 segmentAutomationLabel = "Automatizálás"
+sizeMultiplier = "{{formatted}} PDF méretszorzót használt"
+summary = "{{unique}} egyedi · {{units}} mérési egység · {{avg}} átlag PDF-enként"
+summaryNoRate = "{{unique}} egyedi · {{units}} mérési egység"
 unit = "mért PDF-ek"
+unitsPending_one = "{{units}} mérési egység vár szinkronizálásra a kapcsolt példányokból"
+unitsPending_other = "{{units}} mérési egység vár szinkronizálásra a kapcsolt példányokból"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} előre fizetett kreditből"
+expires = "Lejár: {{date}}"
+eyebrow = "Előre fizetett kapacitás"
+note = "A mért számlázás előtt és a költési korlátján kívül kerül felhasználásra."
+topUp = "Feltöltés"
+
+[portal.billing.prepaid.buy]
+back = "Vissza"
+calcTitle = "Éves fizetés kiszámítása"
+cancel = "Mégse"
+cancelPurchase = "Vásárlás megszakítása"
+close = "Bezárás"
+continueToPayment = "Tovább a fizetéshez"
+finalise = "Véglegesítés"
+invoiceErrorTitle = "Nem sikerült létrehozni a számlát"
+loadingTitle = "Árajánlat betöltése"
+payTitle = "Fizessen az évéért"
+step = "{{current}}/{{total}}. lépés"
+
+[portal.billing.prepaid.calc]
+change = "Módosítás"
+deployRow = "Telepítés"
+done = "Kész"
+enterpriseHint = "Ez vállalati lépték. Ennél a mennyiségnél a vállalati díjak minden önkiszolgáló kedvezménynél jobbak. Díjrögzítés, feltételek és árajánlat percek alatt."
+governanceRow = "Irányítás"
+governanceValue = "{{label}} · {{count}} szabály"
+handlesLabel = "Az Ön Processora"
+handlesValue = "{{volume}} kredit / hó kezelésére képes"
+pipelinesLabel = "Pipeline-ok"
+policiesMeta = "{{count}} szabály"
+poolCaption = "Egy {{credits}} kredites keret az évre. A nehéz hónapok a könnyű hónapoktól vesznek kölcsön."
+priceLabel = "Az Ön éve · 12 hónap 10 hónap áráért"
+rateUnknown = "A pontos árat a pénztárnál mutatjuk."
+savings = "Megtakarítás: {{amount}} · 2 hónap ingyen."
+sizingRow = "Méret"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Felhasználók összesen"
+
+[portal.billing.prepaid.consent]
+label = "Tudomásul veszem, hogy amikor az előre fizetett kapacitásom elfogy vagy 12 hónap után lejár, a feldolgozás automatikusan a szokásos mért, használat alapú díjon folytatódik (a költési korlátomig), hacsak le nem mondom, és hogy bármikor lemondhatom a számlázási portálon."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "A Stirling kezeli. Percek alatt működik."
+cloudValue = "Stirling Cloud · Kezelt"
+selfhost = "Saját üzemeltetésű"
+selfhostDesc = "Privát infrastruktúrán fut. Ugyanaz a díj."
+selfhostValue = "Saját üzemeltetésű · Privát infrastruktúra"
+
+[portal.billing.prepaid.offer]
+cta = "Ajánlat áttekintése"
+subtitle = "Fizessen előre egy évnyi PDF-feldolgozásért, és kapjon két hónapot ingyen; ez a mért számlázás előtt, a költési korlátján kívül kerül felhasználásra."
+title = "Kapjon 12 hónapot 10 hónap áráért"
+
+[portal.billing.prepaid.pay]
+accountName = "Számlatulajdonos neve"
+accountNamePlaceholder = "pl. Jane Smith"
+companyName = "Cégnév (opcionális)"
+companyNamePlaceholder = "pl. Acme Inc."
+downloadInvoice = "Számla letöltése"
+payOnline = "Online fizetés"
+poNumber = "PO-szám (opcionális)"
+poNumberPlaceholder = "pl. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Speciális"
+advancedDesc = "A Pipeline-ok végzik a feldolgozás nagy részét."
+none = "Nincs"
+noneDesc = "Még nem futtat Pipeline-okat. Bármikor bekapcsolhatja őket."
+standard = "Standard"
+standardDesc = "Néhány Pipeline újrafeldolgozza a beérkező PDF-eket."
+
+[portal.billing.prepaid.posture]
+essentials = "Alapok"
+essentialsDesc = "Osztályozás, az alapértelmezett, plusz megosztás"
+governed = "Irányított"
+governedDesc = "Biztonsággal és útválasztással bővül"
+regulated = "Szabályozott"
+regulatedDesc = "Minden kategória, beleértve a megfelelést, megőrzést és bevitelt"
+
+[portal.billing.prepaid.review]
+download = "Árajánlat letöltése (PDF)"
+downloading = "Előkészítés…"
+share = "megosztás jóváhagyásra"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "25 MB alatti fájlok, nincs adatdíj"
+heavy = "Nehéz"
+heavyDesc = "Szkennelt vagy képekben gazdag, rendszeresen 50 MB+"
+standard = "Standard"
+standardDesc = "Többnyire kicsi, néhány szkennelés 25 MB felett"
+
+[portal.billing.prepaid.state]
+exhausted = "Elfogyott"
+healthy = "Bőven maradt"
+low = "Kevés maradt"
 
 [portal.billing.spendLimit]
 adjustLimit = "Limit módosítása"
@@ -6494,6 +6608,8 @@ label = "Várhatóan túllépi."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Költés ebben a hónapban"
+freeRemaining_one = "{{formatted}} ingyenes PDF maradt"
+freeRemaining_other = "{{formatted}} ingyenes PDF maradt"
 processed_one = "{{formattedCount}} PDF feldolgozva."
 processed_other = "{{formattedCount}} PDF feldolgozva."
 processedWithRate_one = "{{formattedCount}} PDF feldolgozva, darabonként {{rate}} áron."
@@ -6534,6 +6650,350 @@ signature = "aláírás"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Új kapcsolat"
+createTitleFor = "{{name}} csatlakoztatása"
+delete = "Törlés"
+edit = "Szerkesztés"
+editTitle = "Kapcsolat szerkesztése"
+unsupportedType = "Ez a kapcsolattípus itt nem szerkeszthető."
+
+[portal.connections.categories.advanced]
+description = "Olyan szolgáltatáshoz, amelyet még nem támogatunk."
+label = "Speciális"
+
+[portal.connections.categories.audit]
+description = "Rögzítse, mi történt egy dokumentummal ott, ahol az auditorai már keresik."
+label = "Audit- és megfelelőségi naplózás"
+
+[portal.connections.categories.notify]
+description = "Értesítsen egy másik rendszert arról, hogy valami történt."
+label = "Értesítés és munkafolyamat"
+
+[portal.connections.categories.security]
+description = "Vizsgáljon vagy címkézzen egy dokumentumot, mielőtt továbbhalad."
+label = "Biztonság és osztályozás"
+
+[portal.connections.categories.signing]
+description = "Küldjön ki egy dokumentumot aláírásra vagy közjegyzői hitelesítésre."
+label = "E-aláírás és közjegyzői hitelesítés"
+
+[portal.connections.categories.storage]
+description = "Ahova a feldolgozott dokumentumok kerülnek – bucket, meghajtó, ticket vagy oldal."
+label = "Fájl és csatolás"
+
+[portal.connections.commonFields.accessToken]
+helperText = "A Stirling ezt titkosítva tárolja, és többé nem jeleníti meg."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Az ezt a kapcsolatot használó lépések csak ezen URL alatti útvonalakat hívhatnak meg, másik hostot soha."
+label = "Szerver URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Jelszó"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Felhasználónév"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Illessze be a szolgáltatás által adott URL-t. Csak az alatta lévő útvonalak hívhatók meg."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Kapcsolat neve"
+namePlaceholder = "pl. Éles"
+
+[portal.connections.picker]
+cancel = "Mégse"
+createNew = "Új kapcsolat..."
+placeholder = "Kapcsolat kiválasztása"
+save = "Kapcsolat mentése"
+
+[portal.connections.picker2]
+back = "Integráció módosítása"
+heading = "Mit szeretne csatlakoztatni?"
+noResultsBody = "Ezt még nem támogatjuk – jelezze nekünk, és megvizsgáljuk a hozzáadását."
+noResultsTitle = "Nincs találat erre: \"{{query}}\""
+searchPlaceholder = "Integrációk keresése – próbálja: \"sign\", \"ocr\" vagy egy terméknév"
+
+[portal.connections.types.api]
+description = "Hívjon meg bármilyen HTTP API-t egy szabályból. Ön választja ki az URL-t, a hitelesítést és a payloadot."
+label = "Egyéni API"
+
+[portal.connections.types.api.fields.authType]
+label = "Hitelesítés"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Felhasználónév és jelszó"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token egy egyéni headerben"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Nincs"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Bejelentkezés tokenért"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Az ezt a kapcsolatot használó lépések csak ezen URL alatti útvonalakat hívhatnak meg, másik hostot soha."
+label = "Alap URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header neve"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Bejelentkezési útvonal"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Jelszó"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Ha az API letöltési linkkel válaszol, csak ezek a hostok kérhetők le. Vesszővel válassza el. Hagyja üresen, hogy csak az alap URL saját hostja legyen engedélyezett."
+label = "Engedélyezett eredményhostok"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "A token küldése ezzel a headerrel"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "A válaszheader, amelyben a bejelentkezési hívás visszaadja a tokent, pl. X-Auth-Token."
+label = "Token válaszheader"
+
+[portal.connections.types.api.fields.username]
+label = "Felhasználónév"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Dokumentumok kártevő-ellenőrzése egy Ön által futtatott szerveren – semmi sem hagyja el a hálózatát."
+label = "ClamAV (saját üzemeltetésű)"
+
+[portal.connections.types.cloudmersive]
+description = "Vírus- és tartalomellenőrzés dokumentumokhoz egy szabályban."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Makrókat, végrehajtható fájlokat, szkripteket vagy beágyazott objektumokat tartalmazó dokumentumok blokkolása – nem csak ismert kártevők."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Feldolgozott dokumentumok csatolása egy Confluence oldalhoz."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Dokumentumok küldése ConsignO Cloud (Notarius) szolgáltatásba elektronikus aláíráshoz és közjegyzői hitelesítéshez."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Az Ön ConsignO Cloud környezete, beleértve a /api/v1 részt."
+label = "Szerver URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Jelszó"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Csak akkor szükséges, ha a szervezete tenantokat használ."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Felhasználónév"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Üzenet közzététele Discordon, amikor egy szabály feldolgoz egy dokumentumot."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Audit esemény indexelése Elasticsearchben minden alkalommal, amikor egy szabály kezel egy dokumentumot."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "FTP vagy FTPS szerver lekérdezése új dokumentumokért."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Kapcsolati mód"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktív"
+passive = "Passzív (ajánlott)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "A sima FTP titkosítás nélkül küldi a hitelesítő adatokat és fájlokat; válassza az FTPS-t, ha a szerver támogatja."
+label = "Titkosítás"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Nincs (sima FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Üzenet közzététele egy Google Chat térben, amikor egy szabály fut."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Feldolgozott dokumentumok csatolása egy Jira issue-hoz."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Dokumentum vagy értesítés küldése emailben, amikor egy szabály fut."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Feldolgozott dokumentumok elhelyezése a Nextcloudban."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App jelszó"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Személyes adatok felismerése dokumentumszövegben egy Ön által futtatott Presidio szerverrel."
+label = "Presidio (saját üzemeltetésű)"
+
+[portal.connections.types.purview]
+description = "Microsoft Purview bizalmassági címkék olvasása és alkalmazása PDF-eken."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opcionális. Csak címkék név szerinti kiválasztásához szükséges; a címkézés enélkül is működik."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Minden címkére SiteId-ként kerül rábélyegzésre, hogy a Purview-kompatibilis eszközök tudják, melyik szervezet alkalmazta."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Egy S3 bucket, amelyből a források olvashatnak, és amelybe a pipeline kimenetek írhatnak."
+label = "S3 tároló"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Hagyja üresen AWS esetén. Állítsa be MinIO-hoz vagy más S3-kompatibilis tárolóhoz."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Régió"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Dokumentum vagy értesítés küldése emailben, amikor egy szabály fut."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "SFTP (SSH) szerver lekérdezése új dokumentumokért."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opcionális. A szerver SHA-256 host key fingerprintje (innen: `ssh-keyscan host | ssh-keygen -lf -`). Ha be van állítva, csak az ezt a kulcsot bemutató szerver fogadható el; ha üres, az első csatlakozáskor látott kulcs rögzítésre kerül, és a későbbi változások elutasításra kerülnek."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Kulcs jelszava"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Hagyja üresen, ha helyette privát kulccsal hitelesít."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opcionális. Illesszen be egy OpenSSH privát kulcsot, hogy jelszó helyett kulccsal hitelesítsen."
+label = "Privát kulcs"
+
+[portal.connections.types.slack]
+description = "Üzenet közzététele Slackben, amikor egy szabály feldolgoz egy dokumentumot."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS hálózati megosztás figyelése (Windows vagy Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Hálózati megosztás"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opcionális. A Windows domain vagy munkacsoport, ha a szervere használ ilyet."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Megosztás"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Audit esemény küldése a Splunknak minden alkalommal, amikor egy szabály kezel egy dokumentumot."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Audit esemény küldése egy Sumo Logic HTTP collectornak."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Üzenet közzététele egy Teams csatornában, amikor egy szabály fut."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Tegyen közzé minden dokumentumot, vagy csak a részleteket egy Ön által választott URL-re."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Zap vagy Make forgatókönyv indítása egy szabályból."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Dokumentáció böngészése"
+viewSource = "Forrás megtekintése GitHubon"
+
 [portal.docs.authentication]
 codeCaption = "minden kérés"
 eyebrow = "ELSŐ LÉPÉSEK"
@@ -6619,11 +7079,19 @@ title = "Hivatalos SDK-k"
 beta = "Beta"
 deprecated = "Elavult"
 
+[portal.docs.search]
+empty = "Nincs egyező dokumentáció"
+placeholder = "Dokumentáció keresése"
+results = "{{count}} találat"
+
 [portal.docs.skills]
 eyebrow = "KÉSZSÉGEK"
 lead = "Csomagolt, névvel ellátott képességek, amelyeket az ügynöke egyetlen eszközként hív meg. Minden készség determinisztikus műveletlánc, csatolt evalokkal."
 title = "Ügynökkészségek"
 
+[portal.docs.toc]
+title = "Ezen az oldalon"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCIA"
@@ -6697,6 +7165,8 @@ type = "Típus"
 user = "Felhasználó"
 
 [portal.documents.queue.empty]
+connectSource = "Forrás csatlakoztatása"
+createPipeline = "Pipeline létrehozása"
 description = "Ahogy a források dokumentumokat küldenek a pipeline-jaiba, azok itt jelennek meg felülvizsgálatra."
 title = "Nincsenek dokumentumok a sorban"
 
@@ -6806,13 +7276,71 @@ description = "Ez a nézet váratlan hibába ütközött. Próbálja újra, vagy
 retry = "Próbálja újra"
 title = "Valami hiba történt ezen az oldalon"
 
+[portal.home.download]
+back = "Vissza"
+body = "Töltse le az asztali alkalmazást, vagy üzemeltesse saját maga a szervert."
+done = "Kész"
+guide = "A(z) {{name}} útmutató megnyitása"
+openInBrowser = "Megnyitás inkább böngészőben"
+sectionDesktop = "Asztali alkalmazás"
+sectionSelfHosted = "Saját üzemeltetésű"
+title = "A Stirling PDF Editor telepítése"
+
+[portal.home.download.docker]
+detailBody = "Futtassa a hivatalos image-et a szerverén."
+note = "Megnyílik a :8080 címen. Alapértelmezett bejelentkezés: admin / stirling."
+tagline = "A szerver futtatása konténerben"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Telepítse a hivatalos Helm chartot."
+note = "Adjon hozzá egy PVC-t a /configs könyvtárhoz a beállítások megőrzéséhez."
+tagline = "Telepítés klaszterbe Helm segítségével"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Natív buildek az Ön disztribúciójához."
+guideBtn = "Linux telepítési lehetőségek megtekintése"
+note = "AppImage, .deb és .rpm buildek érhetők el a gyakori disztribúciókhoz."
+tagline = "Natív asztali alkalmazás az Ön disztribúciójához"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Vagy Homebrew használatával"
+detailBody = "Futtassa a telepítőt, vagy használja a Homebrew-t."
+downloadBtn = "Letöltés macOS rendszerre"
+tagline = "Natív alkalmazás Apple silicon és Intel gépekhez"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Futtassa a .jar fájlt bare metal szerveren."
+downloadBtn = "A .jar letöltése"
+note = "Java 21+ szükséges. A :8080 címen nyílik meg; alapértelmezett bejelentkezés: admin / stirling."
+runLabel = "Ezután futtassa"
+tagline = "Futtassa a .jar fájlt bare metal szerveren"
+title = "Manuális szerverbeállítás"
+
+[portal.home.download.windows]
+altLabel = "Vagy winget használatával"
+detailBody = "Futtassa a telepítőt, vagy használjon csomagkezelőt."
+downloadBtn = "Telepítő letöltése"
+tagline = "Natív alkalmazás Microsoft Windows rendszerhez"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktív"
-invite = "Csapattagok meghívása"
+activeOfDeployed = "{{active}} / {{total}} aktív ebben a hónapban"
 name = "Stirling PDF Editor"
 open = "Megnyitás böngészőben"
 updated = "frissítve: {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Telepítés befejezése"
+options = "Telepítési lehetőségek megtekintése"
+start = "Editor telepítése"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Jó napot"
 evening = "Jó estét"
 morning = "Jó reggelt"
 
-[portal.home.onboarding]
-dismiss = "Beállítás elvetése"
-notStarted = "Nincs elkezdve"
-progress = "{{done}} / {{total}} kész"
-title = "Fejezze be a beállítást"
-
-[portal.home.onboarding.enterprise]
-body = "Szervezetszintű SSO + SCIM + RBAC, lekötött mennyiségi árképzés és air-gapped telepítés."
-cta = "Próba indítása"
-ctaQuote = "Ajánlat kérése"
-lead = "250+ alkalmazott esetén."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Telepítse az asztali alkalmazást, örökre ingyen."
-title = "PDF Editor letöltése"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktív · {{recommended}} ajánlott"
-chip = "{{active}} aktív"
-title = "Szabályzatok bekapcsolása"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} csatlakoztatva · minden PDF szabályozva van, ahová érkezik"
-chip = "{{connected}} csatlakoztatva"
-title = "Források csatlakoztatása"
-
-[portal.home.quickActions]
-subtitle = "Mai fő feladatok"
-title = "Gyors műveletek"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3 lépéses összeállító a tipizált műveletkönyvtár felett"
-title = "Pipeline létrehozása"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, ügynökök, webhookok, figyelt mappák"
-title = "Forrás csatlakoztatása"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Korlátozott hatókörű kulcs sebességkorlátokkal és IP allowlisttel"
-title = "API kulcs kiadása"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor telepítés kezelése"
 sectionsAriaLabel = "Infrastruktúra szakaszai"
@@ -6878,13 +7363,9 @@ heading = "API kulcsok"
 subheading = "Korlátozott hatókörű hitelesítő adatok kulcsonkénti sebességkorlátokkal, engedélyekkel és IP allowlistekkel."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Engedélyezett IP-k"
-anyIp = "Bármely IP (nincs allowlist)"
 created = "Létrehozva"
 lastUsed = "Utoljára használva"
-permissions = "Engedélyek"
-rateLimit = "Sebességkorlát"
-rateLimitValue = "{{value}} kérés/perc"
+revoke = "Kulcs visszavonása"
 usageMonth = "E havi használat"
 usageToday = "Mai használat"
 
@@ -6892,6 +7373,20 @@ usageToday = "Mai használat"
 description = "Hozzon létre egy korlátozott hatókörű kulcsot a Stirling API hívásának megkezdéséhez."
 title = "Még nincsenek API kulcsok"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nem sikerült betölteni az API-kulcsait. Kérjük, próbálja újra."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Visszavonja ezt: \"{{name}}\"? Minden integráció, amely még ezt a kulcsot használja, azonnal 401 hibákat fog kapni. Ez nem vonható vissza."
+cancel = "Mégse"
+confirm = "Kulcs visszavonása"
+title = "API-kulcs visszavonása"
+
+[portal.infrastructure.attestationLabel]
+attested = "Hitelesítve"
+inScope = "Hatókörben"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Audit események szűrése kategória szerint"
 heading = "Auditnaplók"
@@ -6935,6 +7430,7 @@ all = "Összes"
 auth = "Auth"
 config = "Konfiguráció"
 elevation = "Jogosultság-emelés"
+policy = "Házirend"
 processing = "Feldolgozás"
 security = "Biztonság"
 
@@ -6944,19 +7440,35 @@ title = "Nincs hozzáférése"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguráció"
-elevation = "Jogosultság-emelés"
+policy = "Házirend"
 processing = "Feldolgozás"
 totalEvents = "Összes esemény · 24 óra"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Hitelesítés"
+config = "Konfiguráció"
+elevation = "Jogosultságszint-emelés"
+policy = "Házirend"
+processing = "Feldolgozás"
+security = "Biztonság"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Hiba"
+info = "Információ"
+success = "Sikeres"
+warning = "Figyelmeztetés"
+
+[portal.infrastructure.certLabel]
+certified = "Tanúsított"
+inProgress = "Folyamatban"
+notStarted = "Nincs elkezdve"
+
 [portal.infrastructure.createKey]
 cancel = "Mégse"
 createKey = "Kulcs létrehozása"
 done = "Kész"
-ipAllowlistHelper = "Vesszővel elválasztott CIDR tartományok. Hagyja üresen bármely IP engedélyezéséhez."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Kulcs neve"
 keyNamePlaceholder = "pl. Production · ingest"
-permissionsLabel = "Engedélyek"
 secretKeyCaption = "Titkos kulcs"
 secretWarning = "Tárolja ezt secrets managerben. A Stirling csak hash-t tárol — később nincs mód a visszaállítására."
 subtitle = "A kulcs hatókörét a szükséges minimumra korlátozza. Bármikor rotálhatja vagy visszavonhatja."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Másolja ki most ezt a titkot — többé nem jelenik meg."
 title = "API kulcs létrehozása"
 titleCreated = "Kulcs létrehozva"
 
+[portal.infrastructure.deployLabel]
+live = "Élő"
+queued = "Sorban áll"
+rolledBack = "Visszagörgetve"
+rolling = "Kiterítés folyamatban"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/perc"
@@ -6999,6 +7517,15 @@ subheading = "Élő állapot minden telepített Stirling régióhoz — késlelt
 description = "A telepített régiók itt jelennek meg, amint a munkaterülete ki van építve."
 title = "Nincsenek telepített régiók"
 
+[portal.infrastructure.keyLabel]
+active = "Aktív"
+revoked = "Visszavonva"
+
+[portal.infrastructure.modelLabel]
+active = "Aktív"
+degraded = "Leromlott"
+disabled = "Letiltva"
+
 [portal.infrastructure.models]
 heading = "Modellek"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Állapot"
 type = "Típus"
 version = "Verzió"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/hívás"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktív modellek"
 avgLatency = "Átlagos késleltetés"
@@ -7049,6 +7580,17 @@ modelForAria = "Modell ehhez: {{operation}}"
 operation = "Művelet"
 routedTo = "Ide irányítva"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Osztályozás"
+extraction = "Kinyerés"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Leromlott"
+down = "Nem elérhető"
+healthy = "Egészséges"
+
 [portal.infrastructure.security.access.byok]
 description = "Adjon meg egy kulcsot a saját KMS-éből. A Stirling ezzel titkosít, de továbbra is olvasni tud."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modellek"
 security = "Biztonság"
 storage = "Tárhely"
 
+[portal.integrations]
+addAnother = "Másik hozzáadása"
+availableHeading = "Elérhető"
+comingSoonHeading = "Hamarosan"
+connect = "Csatlakoztatás"
+connectedHeading = "Csatlakoztatva"
+connectionCount_one = "{{count}} kapcsolat"
+connectionCount_other = "{{count}} kapcsolat"
+customApi = "Egyéni API"
+searchPlaceholder = "Integrációk keresése"
+subtitle = "Minden, amellyel a Stirling kommunikálni tud. A hitelesítő adatok itt egyszer jönnek létre, majd források, házirendek és folyamatok hivatkoznak rájuk."
+title = "Integrációk"
+typedName = "{{tool}} neve"
+
+[portal.integrations.filters]
+all = "Összes"
+audit = "Audit"
+connected = "Csatlakoztatva"
+notify = "Értesítés"
+security = "Biztonság"
+signing = "Aláírás"
+storage = "Tárolás"
+
+[portal.integrations.status]
+connected = "Csatlakoztatva"
+
+[portal.integrations.table]
+integration = "Integráció"
+worksWith = "Ezzel működik"
+
+[portal.integrations.worksWith]
+pipelines = "Folyamatok"
+policies = "Házirendek"
+sources = "Források"
+
+[portal.legal]
+draft = "{{label}} · piszkozat"
+loadError = "Nem sikerült betölteni ezt a dokumentumot. Kérjük, próbálja újra."
+loading = "Betöltés…"
+title = "Jogi dokumentum"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponensek"
@@ -7182,6 +7765,7 @@ documents = "Dokumentumok"
 editor = "Editor"
 home = "Kezdőlap"
 infrastructure = "Infrastruktúra"
+integrations = "Integrációk"
 pipelines = "Pipeline-ok"
 policies = "Szabályzatok"
 procurement = "Beszerzés"
@@ -7190,25 +7774,9 @@ sources = "Források"
 usage = "Használat és számlázás"
 users = "Felhasználók"
 
-[portal.notifications]
-markAllRead = "Összes megjelölése olvasottként"
-title = "Értesítések"
-viewAll = "Összes megtekintése"
-
-[portal.notifications.ariaLabel]
-none = "Értesítések, nincs olvasatlan"
-unread_one = "Értesítések, {{count}} olvasatlan"
-unread_other = "Értesítések, {{count}} olvasatlan"
-
-[portal.notifications.count]
-allRead = "mind olvasott"
-loading = "betöltés"
-new_one = "{{count}} új"
-new_other = "{{count}} új"
-
-[portal.notifications.empty]
-description = "Nincsenek új értesítések."
-title = "Minden naprakész"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Minden automatizált dokumentum-pipeline a backendben: műveletek rendezett lánca források egy halmazán, trigger alapján futtatva. Kattintson egy sorra a lépések és források megtekintéséhez."
@@ -7220,15 +7788,28 @@ newPipeline = "Új pipeline"
 [portal.pipelines.builder]
 addStep = "Eszköz hozzáadása"
 back = "Vissza a pipeline-okhoz"
+cannotFollow = "Nem tudja fogadni ezt: {{produced}}"
+chooseAccount = "Válasszon fiókot"
+chooseDestination = "Válasszon célhelyet"
+chooseOperation = "Válassza ki, mit végezzen ez a lépés"
+chooseSource = "Válasszon forrást"
 discard = "Módosítások elvetése"
 enabled = "Engedélyezve"
+inputs = "Bemenet"
+inputSource = "Bemeneti forrás"
+inputTrigger = "Trigger"
 keepEditing = "Szerkesztés folytatása"
+needsConfiguring = "Beállítás szükséges"
 needsUpload = "Feltöltött fájl szükséges"
+noSources = "Még nincs csatlakoztatott forrás. Hozzon létre egyet, hogy bemenetként használhassa."
 noToolMatches = "Nincs a keresésnek megfelelő eszköz."
 pipelineSettings = "Pipeline beállításai"
 searchTools = "Eszközök keresése"
 selectToolBody = "Adjon hozzá egy eszközt a pipeline felépítéséhez."
 selectToolTitle = "Még nincsenek eszközök"
+sendToSystem = "Küldés másik rendszerbe"
+stepsIncompatible = "Ezek a lépések nem futtathatók azon, amit az előző lépés előállít: {{tools}}."
+stepsNeedSetup = "Ezeket a lépéseket mentés előtt még be kell állítani: {{tools}}."
 toolSettings = "Eszköz beállításai"
 unknownStep = "Ismeretlen művelet, változatlanul megtartva."
 unsavedBody = "Nem mentett módosításai vannak. Mentse őket kilépés előtt, vagy elveti őket?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Nem mentett módosítások"
 uploadUnsupported = "A feltöltött fájlok még nem támogatottak pipeline-okban, ezért ezek a lépések nem menthetők: {{tools}}."
 usesDefaults = "Alapértelmezett beállításokkal fut"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Az előző lépés összes fájlját egyesíti"
+fan-out = "Az előző lépés minden fájljára egyszer fut le"
+format-mismatch = "{{accepts}} szükséges, de az előző lépés ezt állítja elő: {{produced}}"
+output-uncertain = "Lehet, hogy nem fut: az előző lépés kimenete a beállításától függ"
+source-mismatch = "{{accepts}} szükséges, de ennek a folyamatnak a bemenete: {{produced}}"
+undeclared-operation = "Nem ellenőrizhető, hogy ez a lépés mit fogad el"
+
 [portal.pipelines.composer]
 addTool = "Eszköz hozzáadása"
 cancel = "Mégse"
 chainEmpty = "Adjon hozzá egy eszközt a pipeline építésének megkezdéséhez."
 create = "Pipeline létrehozása"
-directory = "Kimeneti mappa"
-directoryHelp = "Abszolút elérési út a szerveren. A konfigurált engedélyezett mappákon belül kell lennie."
 editingUnsupported = "Ezeknek az eszközparamétereknek a szerkesztésre való megjelenítése még nem támogatott."
 moveDown = "Mozgatás le"
 moveUp = "Mozgatás fel"
 name = "Név"
 namePlaceholder = "pl. Kitakarítási átvizsgálás"
-noSources = "Még nincsenek csatlakoztatott források. A pipeline továbbra is futtatható közvetlenül neki átadott fájlokon."
 noToolSettings = "Ennek az eszköznek nincsenek konfigurálható beállításai."
 operations_one = "Művelet ({{count}})"
 operations_other = "Műveletek ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Törlés"
 title = "Törli a pipeline-t?"
 
 [portal.pipelines.detail]
+clearHistory = "Előzmények törlése"
 delete = "Pipeline törlése"
 run = "Futtatás most"
 
 [portal.pipelines.empty]
 action = "Pipeline létrehozása"
+connectSource = "Forrás csatlakoztatása"
 description = "Hozza létre első pipeline-ját: válassza ki a forrásokat, amelyeken fut, fűzze össze a műveleteket, és adja meg, hová kerüljön a kimenet."
 title = "Még nincsenek pipeline-ok"
 
@@ -7286,15 +7874,17 @@ active = "Aktív"
 paused = "Szüneteltetve"
 total = "Pipeline-ok"
 
-[portal.pipelines.output]
-folder = "Írás mappába"
-inline = "Fájlok visszaadása"
-
 [portal.pipelines.run]
+allProcessed_one = "Nincs mit futtatni: a forrás {{count}} dokumentuma már fel lett dolgozva."
+allProcessed_other = "Nincs mit futtatni: a forrásokban található mind a(z) {{count}} dokumentum már fel lett dolgozva."
 completed_one = "Futtatás befejezve."
 completed_other = "Mind a(z) {{count}} futtatás befejeződött."
 empty = "Nincs mit futtatni: a forrásoknak nem voltak feldolgozandó dokumentumaik."
 failed = "A futtatás sikertelen: {{error}}"
+historyCleared = "Az előzmények törölve. A következő futtatás újrafeldolgoz mindent, ami jelenleg a forrásokban van."
+inFlight = "Nincs új futtatnivaló: a dokumentumok feldolgozása még folyamatban van egy korábbi futtatásból."
+parked_one = "Nincs mit futtatni: {{count}} dokumentum korábban meghiúsult és félre lett téve. Javítsa ki az okot, majd törölje az előzményeket az újrapróbálkozáshoz."
+parked_other = "Nincs mit futtatni: {{count}} dokumentum korábban meghiúsult és félre lett téve. Javítsa ki az okot, majd törölje az előzményeket az újrapróbálkozáshoz."
 running = "A futtatás elindult; még folyamatban van."
 timeout = "A futtatás a vártnál tovább tart; lehet, hogy a háttérben még befejeződik."
 
@@ -7314,12 +7904,18 @@ manual = "Manuális"
 schedule = "Ütemezett"
 
 [portal.policies]
+defaultName = "{{category}} házirend"
 subtitle = "Állandó automatizmusok, amelyek minden dokumentumon érvényesítenek egy eszköz-pipeline-t. Minden szabályzat feltöltéskor vagy exportáláskor lép működésbe, lefuttatja az eszközláncát, és az eredeti mellett menti a kikényszerített verziót."
 title = "Szabályzatok"
 
 [portal.policies.card]
 comingSoon = "Frissítés Enterprise-ra"
 notSetUp = "Nincs beállítva"
+requiresAiEngine = "AI motor szükséges"
+
+[portal.policies.categories.classification]
+desc = "Azonosítja minden dokumentum típusát feltöltéskor, és metaadatcímkékkel látja el a rendszerezéshez és kereséshez."
+label = "Osztályozás"
 
 [portal.policies.categories.compliance]
 desc = "HIPAA, GDPR, SOC 2 vagy FedRAMP követelmények érvényesítése minden dokumentumon."
@@ -7344,6 +7940,13 @@ label = "Biztonság"
 [portal.policies.config]
 scopeAll = "Minden dokumentum"
 
+[portal.policies.config.classification]
+summary = "Minden feltöltött dokumentumot osztályoz a csapat címkéi alapján, és metaadatcímkékkel látja el."
+
+[portal.policies.config.classification.rules]
+0 = "Osztályozás"
+1 = "Metaadatok címkézése"
+
 [portal.policies.config.compliance]
 summary = "Ellenőrzi a dokumentumokat szabályozási keretrendszerek alapján, mielőtt elhagynák a rendszert."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. megbízhatóság"
 2 = "Név"
 3 = "Normalizálás"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview érzékenységi címke alkalmazása"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Címke ID"
+labelIdHelp = "A címke GUID-ja a Purview portálról. A címke alkalmazása metaadatokat ír a PDF-re; titkosítani nem tud, ahhoz a Microsoft kliens szükséges."
+labelName = "Címke neve (opcionális)"
+labelNameHelp = "Az ID mellett rögzítve, hogy az emberek és eszközök felismerjék a címkét."
+
+[portal.policies.config.purview.fields.method]
+help = "A Purview megkülönbözteti a házirend által alkalmazott címkét attól, amelyet egy személy választott."
+label = "Hogyan legyen rögzítve a címke"
+privileged = "Személy által választottként"
+standard = "Automatikusan alkalmazottként"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview címke olvasása"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Beolvassa a dokumentumon már meglévő címkét, hogy a későbbi lépések ez alapján működhessenek."
+
 [portal.policies.config.retention]
 summary = "Érvényesíti, meddig maradjanak meg a dokumentumok, mikor kerüljenek archiválásra, és mikor legyenek törölve."
 
@@ -7438,6 +8064,7 @@ title = "Még nincs tevékenység"
 [portal.policies.endpoints]
 addWatermark = "Vízjel"
 autoRedact = "PII kitakarása"
+classifyAndLabel = "Osztályozás"
 compressPdf = "Tömörítés"
 flatten = "Lapítás"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "A házirendek mentve vannak, és a kapcsolat helyreállása után
 retry = "Újra"
 title = "Backend nem érhető el"
 
+[portal.policies.operations]
+change = "A lépés tevékenységének módosítása"
+noResults = "Nincs ilyen lépés. Próbáljon meg egy terméknevet, vagy ezt: \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Lépések keresése – próbálja ezt: \"scan\", \"attach\" vagy egy terméknevet"
+
+[portal.policies.operations.bodyMode]
+binary = "Nyers fájlbájtok"
+json = "JSON payloadban"
+multipart = "Fájlfeltöltésként (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "A saját ClamAV szervere ellenőrzi a dokumentumot; semmi sem hagyja el a hálózatát."
+label = "Víruskeresés (saját üzemeltetésű)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Elutasítja a makrókat, futtatható fájlokat, szkripteket vagy beágyazott objektumokat tartalmazó dokumentumokat."
+label = "Aktív tartalom blokkolása"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "A Cloudmersive ellenőrzi a dokumentumot, és a futtatás leáll, ha nem tiszta."
+label = "Víruskeresés"
+
+[portal.policies.operations.confluenceAttach]
+description = "A feldolgozott dokumentumot egy oldalhoz csatolja."
+label = "Csatolás Confluence oldalhoz"
+
+[portal.policies.operations.consignoSubmit]
+description = "Elküldi a dokumentumot aláírásra a ConsignO Cloudba."
+label = "Küldés aláírásra (ConsignO)"
+note = "Elküldi a dokumentumot. Az aláírt példány lekérése még nem támogatott, mert egy lépés nem tud eredményt átadni egy későbbi lépésnek."
+
+[portal.policies.operations.customApiCall]
+description = "Ön állítja össze a hívást: útvonal, method, törzs és válaszkezelés."
+label = "Egyéni API hívása"
+
+[portal.policies.operations.discordNotify]
+description = "Értesít egy csatornát, hogy a házirend kezelt egy dokumentumot."
+label = "Üzenet közzététele Discordon"
+
+[portal.policies.operations.elasticIndex]
+description = "Kereshető dokumentumként rögzíti, hogy mit végzett a házirend."
+label = "Audit esemény indexelése Elasticsearchben"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "A Multipart feltöltési API-khoz megfelelő; a JSON olyan API-khoz, amelyek a fájlt payloadban várják; a binary a nyers bájtokat küldi."
+label = "A dokumentum küldésének módja"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Változatlanul elküldött JSON törzs. A {{document.base64}} tartalmazza a fájlt; a {{document.*}} és {{run.*}} dokumentumonként kerül kitöltésre."
+label = "JSON törzs"
+
+[portal.policies.operations.fields.connection]
+label = "Fiók"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Az űrlapmező, amely alatt az API a dokumentumot várja."
+label = "Fájlmező neve"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Feladó"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Header név/érték párok JSON objektuma. A kapcsolat hitelesítő adatai automatikusan hozzáadódnak."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Az üzenet törzseként lesz elküldve. A {{document.*}} és {{run.*}} dokumentumonként kerül kitöltésre."
+label = "Üzenet"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Oldal ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Hozzáfűzve a kapcsolat alap URL-jéhez. Soha nem érhet el másik hostot."
+label = "Útvonal"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Hová írja a drive-on. A {{document.filename}} dokumentumonként kerül kitöltésre."
+label = "Célútvonal"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "A jelentés érintetlenül hagyja a dokumentumot. A csere lecseréli arra, ami visszaérkezik."
+label = "Mi történjen a válasszal"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Aláíró e-mail-címe"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Tárgy"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "A Presidio ezt a szöveget elemzi. Használja a {{document.title}} értéket, vagy illessze be az ellenőrizendő szöveget."
+label = "Ellenőrizendő szöveg"
+
+[portal.policies.operations.fields.to]
+label = "Címzett"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud felhasználónév"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Értesít egy space-t, hogy a házirend kezelt egy dokumentumot."
+label = "Üzenet közzététele Google Chatben"
+
+[portal.policies.operations.jiraAttach]
+description = "A feldolgozott dokumentumot egy issue-hoz csatolja."
+label = "Csatolás Jira issue-hoz"
+
+[portal.policies.operations.mailgunEmail]
+description = "Elküldi a feldolgozott dokumentumot mellékletként."
+label = "Dokumentum küldése e-mailben (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "A feldolgozott dokumentumot egy mappába írja."
+label = "Feltöltés Nextcloudba"
+
+[portal.policies.operations.presidioAnalyze]
+description = "A saját Presidio szervere jelenti a megtalált személyes adatokat."
+label = "Személyes adatok észlelése"
+note = "A Presidio szöveget olvas, nem fájlokat. Adja meg az ellenőrizendő szöveget — maga a dokumentum nem lesz feltöltve."
+
+[portal.policies.operations.responseMode]
+replace = "A dokumentum cseréje a válaszra"
+report = "Dokumentum megtartása, válasz rögzítése"
+
+[portal.policies.operations.sendgridEmail]
+description = "Elküldi a feldolgozott dokumentumot mellékletként."
+label = "Dokumentum küldése e-mailben (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Értesít egy csatornát, hogy a házirend kezelt egy dokumentumot."
+label = "Üzenet közzététele Slackben"
+
+[portal.policies.operations.splunkEvent]
+description = "Rögzíti, mit végzett a házirend ott, ahol az auditorai már keresnek."
+label = "Audit esemény küldése Splunkba"
+
+[portal.policies.operations.sumologicEvent]
+description = "Rögzíti, mit végzett a házirend egy HTTP gyűjtőbe."
+label = "Audit esemény küldése Sumo Logicba"
+
+[portal.policies.operations.teamsNotify]
+description = "Értesít egy csatornát, hogy a házirend kezelt egy dokumentumot."
+label = "Üzenet közzététele Teamsben"
+
+[portal.policies.operations.webhookPost]
+description = "Magát a dokumentumot küldi el egy Ön által választott URL-re."
+label = "Dokumentum küldése webhookra"
+
+[portal.policies.operations.zapierNotify]
+description = "Átadja a futtatás részleteit az automatizációnak."
+label = "Zap vagy Make scenario indítása"
+
 [portal.policies.stats]
 activeFor = "Aktív"
 dataProcessed = "Feldolgozott adatok"
@@ -7473,6 +8277,13 @@ label = "Érvényesített dokumentumok"
 description = "Konfigurálva, de nem fut"
 label = "Szüneteltetve"
 
+[portal.policies.table]
+appliesTo = "Erre vonatkozik"
+docs = "Érvényesített dok."
+enforces = "Érvényesít"
+policy = "Házirend"
+status = "Állapot"
+
 [portal.policies.wizard.actions]
 back = "Vissza"
 cancel = "Mégse"
@@ -7480,6 +8291,10 @@ continue = "Folytatás"
 enablePolicy = "Házirend engedélyezése"
 saveChanges = "Módosítások mentése"
 
+[portal.policies.wizard.capability.classify]
+desc = "Azonosítja a dokumentum típusát a csapat címkéi alapján, és megcímkézi, így kategória szerint rendszerezhető és kereshető."
+label = "Dokumentum osztályozása"
+
 [portal.policies.wizard.capability.compress]
 desc = "Kisebb fájlméretre tömöríti a dokumentumot."
 label = "Fájlméret csökkentése"
@@ -7500,10 +8315,18 @@ label = "Érzékeny adatok kitakarása"
 desc = "Eltávolítja a rejtett JavaScriptet, hogy a dokumentum megnyitásakor semmi se futhasson automatikusan."
 label = "Aktív tartalom eltávolítása"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Bizonyítja, hogy a dokumentum ebben a pontos formában létezett egy adott időpontban, független időbélyeg-szolgáltató használatával. Csak hash kerül elküldésre – a dokumentum soha nem hagyja el a szerverét."
+label = "Megbízható időbélyeg hozzáadása"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Látható jelölést (pl. „Bizalmas”) helyez el minden oldalon."
 label = "Vízjel alkalmazása"
 
+[portal.policies.wizard.classification]
+description = "Minden feltöltött dokumentum osztályozásra kerül a beépített címkék alapján, és megkapja a hozzá illő típusokat. A címkekészlet a teljes csapatban közös."
+labelsHeading = "Osztályozási címkék"
+
 [portal.policies.wizard.errors]
 noTools = "Először engedélyezzen legalább egy eszközt a munkafolyamatban."
 saveFailed = "Nem sikerült menteni a házirendet. Kérjük, próbálja újra."
@@ -7548,73 +8371,118 @@ setUp = "{{category}} házirend beállítása"
 [portal.policies.wizard.workflow]
 description = "Válassza ki, mit tegyen ez a házirend minden általa feldolgozott dokumentummal."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktív"
-noRule = "Még nincs érvényesített szabály"
-subtitle = "Állandó automatizációk, amelyeken minden dokumentum áthalad, függetlenül attól, melyik pipeline kezeli."
-title = "Mi fut a PDF-jein"
-
 [portal.policySummary.action]
-comingSoon = "Váltás Enterprise csomagra"
-configure = "Konfigurálás"
 setUp = "Beállítás"
 
-[portal.policySummary.column]
-activeRule = "Aktív szabály"
-policy = "Házirend"
-status = "Állapot"
+[portal.processorFlow]
+footnote = "A számlálók az elmúlt 24 órára vonatkoznak. A folyamat sebessége szemléltető jellegű."
+liveBadge = "Élő"
+stats = "{{connected}} csatlakoztatva · {{processed}} PDF feldolgozva"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "A házirendek konfigurálása után a kategóriák itt jelennek meg."
-title = "Még nincsenek házirendek"
+[portal.processorFlow.lens]
+ariaLabel = "Nézet mód"
+flow = "Folyamat"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktív"
-off = "Ki"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 óra"
+failed = "Sikertelen"
+heading = "Eredmények"
+success = "Kézbesítve"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktív"
+count = "{{n}} · 24 óra"
+heading = "Házirendek"
+setUp = "Beállítás"
 soon = "Hamarosan"
 
-[portal.processingStatus]
-managePlan = "Csomag kezelése"
-volumeSuffix = "feldolgozott PDF · az elmúlt 30 nap"
+[portal.processorFlow.sankey]
+waist = "Házirendek · {{n}} aktív"
+
+[portal.processorFlow.sankey.empty]
+description = "Csatlakoztasson egy forrást, és kapcsoljon be egy házirendet, hogy lássa a dokumentumok áramlását a feldolgozón keresztül."
+title = "Még nincs folyamat"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Csatlakoztatás"
+editor = "Stirling PDF Editor"
+heading = "Források"
+perDay = "{{n}} / 24 óra"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "E-mail fogadás"
 
 [portal.procurement]
-reset = "Beszerzés visszaállítása (demo)"
 subtitle = "Értékelje, szerződtesse és vezesse be csapatát. Minden dokumentum egy helyen."
 title = "Beszerzés"
 
-[portal.procurement.action]
-download = "Letöltés"
-pay = "Fizetés most"
-request = "Kérés"
-sign = "Áttekintés és aláírás"
-upload = "Feltöltés"
-
 [portal.procurement.agreement]
 agreeCta = "Elfogadás és előfizetés"
+confidential = "Bizalmas"
 confirm = "Elolvastam és elfogadom a Stirling Enterprise Agreement feltételeit."
-eyebrow = "Megállapodás"
-intro = "Egy összevont megállapodás fedi le az ügyletet: Master Service Agreement, Order Form, EULA és Data Processing Agreement. Tekintse át, majd fogadja el az ajánlat elkötelezett előfizetéssé alakításához."
-title = "Enterprise megállapodás áttekintése"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA és DPA egyetlen aláírásban egyesítve."
+download = "Letöltés"
+downloadDraftError = "Nem sikerült létrehozni a megállapodás PDF-jét – a dokumentumrenderelő nem érhető el. Kérjük, próbálja újra rövidesen, vagy lépjen kapcsolatba a támogatással."
+downloadError = "Nem sikerült letölteni az aláírt megállapodást. Kérjük, próbálja újra."
+legalName = "Jogi személy neve"
+legalNamePlaceholder = "Az aláíró jogi személy"
+loadError = "Nem sikerült betölteni a megállapodást. Kérjük, próbálja újra."
+loading = "Megállapodás betöltése..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Módosítások kérése"
+scrollHint = "Görgessen az áttekintéshez"
+signatory = "Aláíró neve"
+signatoryPlaceholder = "Teljes név"
+signatoryTitle = "Aláíró beosztása"
+signatoryTitlePlaceholder = "pl. vezető jogtanácsos"
+signError = "Nem sikerült rögzíteni az aláírását. Kérjük, próbálja újra."
 
 [portal.procurement.builder]
 addons = "Kiegészítők"
+addressLine1 = "Cím 1. sora"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Cím 2. sora"
+addressLine2Placeholder = "Lakosztály, emelet, épület"
 back = "Vissza"
 businessName = "Cégnév"
 businessNamePlaceholder = "Az Ön cége"
+city = "Város"
+cityPlaceholder = "San Francisco"
+completeRequired = "Kérjük, töltse ki a kötelező mezőket (*-gal jelölve) érvényes e-mail-címmel az ajánlat létrehozása előtt."
+contactEmail = "Kapcsolattartó e-mail-címe"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kapcsolattartó neve"
+contactNamePlaceholder = "Jane Doe"
 continue = "Folytatás"
-country = "Ország"
-countryEuro = "Eurózóna (EUR €)"
-countryUK = "Egyesült Királyság (GBP £)"
-countryUS = "Egyesült Államok (USD $)"
+done = "Kész"
 eula = "Elolvastam és elfogadom a Stirling Enterprise EULA feltételeit. Ez szabályozza az ajánlatból létrehozott megállapodást."
 generate = "Ajánlat generálása"
-included = "Tartalmazza"
 indemnification = "IP kártalanítás"
 indemnificationSub = "Az EULA szerint védelmet nyújtunk a jogosult IP igényekkel szemben"
-offlineLicense = "Offline / air-gapped licenc"
-offlineLicenseSub = "Letölthető licencfájl air-gapped self-hosted példányhoz"
+paperEyebrow = "Enterprise ajánlat"
+paperFor = "Készült számára"
+pdfSize = "PDF mérete"
+poNumber = "PO szám"
+poNumberPlaceholder = "Opcionális"
+postalCode = "Irányítószám"
+postalCodePlaceholder = "94105"
+posture = "Irányítás"
+posture_count = "~{{count}} házirend"
+posture_essentials = "Alapok"
+posture_essentialsSub = "Osztályozás + Megosztás — az alapértelmezések"
+posture_governed = "Irányított"
+posture_governedSub = "Biztonságot és útválasztást ad hozzá"
+posture_regulated = "Szabályozott"
+posture_regulatedSub = "Minden kategória — Megfelelőség, Megőrzés, Bevitel"
 qbr = "Negyedéves üzleti áttekintések"
 qbrSub = "Az Ön SE-je negyedévente áttekinti a használatot és az ütemtervet"
+region = "Állam / régió"
+regionPlaceholder = "California"
 running = "{{annual}} / év · {{years}} éves {{tcv}}"
 s1Sub = "Az Ön csapata és az évente várhatóan futtatott PDF-ek."
 s1Title = "Mennyit fog feldolgozni?"
@@ -7623,6 +8491,12 @@ s2Title = "Elköteleződés és szolgáltatás"
 s3Sub = "Az ajánlathoz és az abból generált megállapodáshoz."
 s3Title = "Az Ön adatai"
 serviceLevel = "Szolgáltatási szint"
+size_compact = "Kompakt"
+size_compactSub = "Többnyire szöveg, 1 MB alatt"
+size_heavy = "Nagy"
+size_heavySub = "Szkennelt vagy sok képet tartalmaz, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Vegyes szöveg és képek, 1–5 MB"
 slDedicated = "Dedikált"
 slDedicatedSub = "4 munkaóra · dedikált fiókmenedzser · +30%"
 slPriority = "Prioritás"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Azonos munkanapon · név szerint kijelölt CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Következő munkanap · megosztott CSM · tartalmazza"
 stepOf = "{{n}}. lépés / {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Opcionális"
 term = "Időtartam"
 termDiscount = "{{pct}}% többéves elköteleződési kedvezmény alkalmazva"
 title = "Ajánlat összeállítása"
@@ -7637,6 +8513,7 @@ training = "Bevezetés és képzés"
 trainingSub = "Élő alkalmak a csapat elindításához"
 users = "Összes felhasználó"
 usersPlaceholder = "pl. 250"
+viewEula = "Elolvasás"
 volEstimated = "Becslés {{count}} felhasználó alapján (~2 000 PDF fejenként, automatizálással együtt). Szerkessze, ha pontosabbat tud."
 volManual = "Az Ön megadott értékét használjuk. Bármikor újrabecsülheti a csapatméret alapján."
 volNoUsers = "Nem biztos benne? Adja meg a csapat méretét, és megbecsüljük."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "pl. 1 000 000"
 years_one = "{{count}} év"
 years_other = "{{count}} év"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokumentum"
-count_other = "{{count}} dokumentum"
-done = "Kész"
-here = "Itt tart"
-hide = "Elrejtés"
-optional = "Opcionális"
-paidAddon = "Fizetős kiegészítő"
-show = "Megjelenítés"
-subtitle = "Minden, amire az út egyes lépéseinél szüksége van, akkor jelenik meg, amikor az ügylet odaér."
-supportingSubtitle = "SOC 2, biztonsági áttekintések, adóűrlapok és egyebek, készen, amikor a biztonsági vagy beszerzési csapat kéri. Egyesek egyszeri díjjal járnak."
-supportingTitle = "Az értékelés támogatása"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form és DPA egyetlen aláírásban."
+download = "Letöltés"
+eula = "EULA és kereskedelmi feltételek"
+eulaSub = "A szoftver és az önkiszolgáló kereskedelmi feltételek."
+invoice = "Számla"
+invoiceSub = "Az első előfizetési számlája."
+laterInvoice = "Elfogadás után érhető el"
+laterQuote = "Az ajánlat kiadása után érhető el"
+quote = "Ajánlat"
+quoteSub = "Tételes Enterprise ajánlata."
+sla = "SLA melléklet"
+slaSub = "Támogatási szintek és válaszidő-célok."
+subprocessors = "Alfeldolgozók"
+subprocessorsSub = "Harmadik felek, amelyek adatokat dolgoznak fel az Ön nevében."
+subtitle = "Üzleti dokumentumai, bármikor elérhetők."
 title = "Dokumentumok"
-upcoming = "Közelgő"
+view = "Megtekintés"
 
 [portal.procurement.error]
 title = "Valami hiba történt"
 
 [portal.procurement.hero]
-company = "Az Ön enterprise ügylete"
+barAria = "{{current}}. szakasz / {{total}}"
 ctaAgreement = "Megállapodás áttekintése és aláírása"
-ctaLive = "Élőben van"
-ctaPayment = "Fizetés hozzáadása"
+ctaExploring = "Próbaidőszak beállítása"
 ctaQuote = "Ajánlat áttekintése"
+ctaReviewQuote = "Ajánlat áttekintése"
 ctaTrial = "Ajánlat összeállítása"
+documents = "Dokumentumok"
 eyebrow = "Enterprise beszerzés"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Csapattársak meghívása"
-keyDocs = "Kulcsdokumentumok"
-nextStep = "Következő lépés: {{action}}"
-notStarted = "Nincs elkezdve"
+licenseKey = "Licenckulcs"
+liveSub = "Szervezete kiépítve, licence aktív."
+liveTitle = "Élőben van a Stirling Enterprise-on"
+next = "Következő: {{stage}}"
 open = "Beszerzés megnyitása"
 scheduleCall = "Hívás ütemezése"
-setup1Sub = "Hívja meg csapattársait"
-setup1Title = "PDF Editor telepítése"
-setup2Sub = "Kapcsolja be a feldolgozást a szerkesztőkben és más forrásokban"
-setup2Title = "PDF Processor csatlakoztatása"
-setup3Sub = "Kapcsolja be a Security, Compliance, Routing vagy Retention funkciókat, amikor szüksége van rájuk"
-setup3Title = "Ajánlott házirendek hozzáadása"
+sentenceAgreement = "a megállapodás áttekintése és aláírása"
+sentenceLive = "kiépítés és bevezetés"
+sentencePayment = "beszerzési megrendelés és fizetés"
+sentenceQuote = "az ajánlat áttekintése és elfogadása"
+sentenceTrial = "próba-munkaterület beállítása"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} nap maradt"
 daysLeft_other = "{{count}} nap maradt"
-engineerLabel = "Az Ön solutions engineer-je"
-eyebrow = "Az Ön bevezetése"
-live = "Élőben van a Stirling Enterprise-on"
-nextStep = "Következő lépés: {{action}}"
-subtitle = "Az Ön solutions engineer-je minden lépésnél jelen van. Egyszerre egy következő művelet; a teljes ellenőrzőlista lent található."
-title = "A próbaidőszaktól az éles működésig, egy vezetett úton"
-trialTitle = "Enterprise próbaidőszak"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Egy aláírás lefedi az MSA-t, order formot, EULA-t és DPA-t."
@@ -7727,6 +8604,9 @@ downloadError = "Még nem sikerült létrehozni az offline licencfájlt — kér
 downloadOffline = "Offline licenc letöltése (.lic)"
 hint = "Illessze be ezt a kulcsot egy self-hosted példányba az aktiváláshoz, vagy őrizze meg a nyilvántartásához. Tartsa biztonságban."
 label = "Az Ön licenckulcsa"
+subtitle = "Aktiváljon egy saját üzemeltetésű példányt ezzel a kulccsal, vagy őrizze meg a nyilvántartásához."
+title = "Az Ön licenckulcsa"
+trialFileHint = "Ez az Ön próba licencfájlja. Miután a megállapodás létrejött, térjen vissza, és töltse le újra — az online licenckulccsal ellentétben a .lic fájl nem frissül magától."
 
 [portal.procurement.link]
 cta = "Fiók összekapcsolása"
@@ -7739,65 +8619,62 @@ description = "Az előfizetése aktív, és a licence ki lett állítva. A csapa
 eyebrow = "Élő"
 title = "Élőben van a Stirling Enterprise-on"
 
-[portal.procurement.locked]
-description = "A próbakulcsok, elkötelezett mennyiségi ajánlatok, az egyaláírásos megállapodás, a fizetés és a dokumentumnapló mind itt lesznek, miután elindít egy enterprise értékelést."
-eyebrow = "Csak Enterprise"
-talkToSales = "Kapcsolat az értékesítéssel"
-title = "A beszerzési folyamat Enterprise csomaggal nyílik meg"
-
 [portal.procurement.milestone]
-accept = "Elfogadás és folytatás"
-description = "Töltse le a PDF-et, hogy megossza a csapatával, térjen vissza elfogadni, amikor készen áll, vagy módosítsa."
-download = "PDF letöltése"
 downloadError = "Még nem sikerült letölteni az ajánlat PDF-et — kérjük, próbálja újra egy pillanat múlva."
-edit = "Ajánlat szerkesztése"
-eyebrow = "{{number}}. ajánlat"
-perYear = " / év"
-preparedFor = "Készült: {{company}}"
-tcv = "{{value}} teljes szerződéses érték"
-title = "Az ajánlata elkészült"
-
-[portal.procurement.modal]
-cancel = "Mégse"
-chooseFile = "Fájl kiválasztása"
-close = "Bezárás"
-downloadBody = "A letöltés hamarosan elindul."
-downloadCta = "Letöltés"
-downloadTitle = "Letöltés"
-noFile = "Nincs kiválasztva fájl"
-payBody = "Fizesse ki elkötelezett szerződését kártyával vagy banki átutalással a Stripe-on keresztül. A munkaterülete a fizetés teljesülése után azonnal létrejön."
-payCta = "Folytatás a Stripe-ra"
-payTitle = "Fizetés megerősítése"
-requestBodyFree = "Ezt kérésre generáljuk. Erősítse meg, és a solutions engineer-je hamarosan elküldi."
-requestBodyPaid = "Ez fizetős kiegészítő. Erősítse meg, és a solutions engineer-je felméri, majd elküldi a dokumentációt."
-requestCta = "Kérés"
-requestTitle = "Dokumentum kérése"
-signBody = "Megnyitja a Stirling Enterprise Agreementet elektronikus aláírásra: egy aláírás lefedi az MSA-t, order formot, EULA-t és DPA-t. Automatikusan ellenjegyezzük, és továbblép a fizetéshez."
-signCta = "Megnyitás aláírásra"
-signTitle = "Megállapodás áttekintése és aláírása"
-uploadBody = "Küldje el nekünk a PO-t, és a feltételei szerint számlázunk. Húzza be a PDF-et, vagy válasszon fájlt lent."
-uploadCta = "Beszerzési megrendelés feltöltése"
-uploadTitle = "Beszerzési megrendelés feltöltése"
 
 [portal.procurement.payment]
 description = "Az ajánlatát elfogadtuk, és a licence már aktív — a csapata azonnal kezdhet. Fizesse ki az első számlát, amikor készen áll; itt fizetheti ki vagy töltheti le, email nélkül."
+downloadAgreement = "Aláírt megállapodás letöltése"
 downloadInvoice = "Számla letöltése"
-simulate = "Fizetés beérkezésének szimulálása (demo)"
+eyebrow = "Fizetés"
 title = "Előfizetés létrehozva"
 viewInvoice = "Számla megtekintése és fizetése"
 
+[portal.procurement.review]
+acceptCta = "Ajánlat elfogadása"
+annual = "Éves díj (1. év)"
+downloadCta = "Ajánlat letöltése"
+poNumber = "Beszerzési megrendelés: {{po}}"
+renewal = "A futamidő után {{amount}}/év áron újul meg (+{{pct}}% CPI)"
+tcv = "{{years}} éves futamidő, előre teljes egészében fizetve: {{tcv}}"
+validUntil = "Érvényes eddig: {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Nem sikerült betölteni az ütemezőt."
 fallbackLink = "Ütemezés megnyitása új lapon"
+loading = "Ütemező betöltése..."
 subtitle = "A solutions engineer-je végigvezeti csapatát a bevezetésen. Válasszon Önnek megfelelő időpontot."
 title = "Hívás ütemezése"
 
-[portal.procurement.status]
-action = "Teendő szükséges"
-available = "Elérhető"
-complete = "Kész"
-pending = "Függőben"
-request = "Kérésre"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Zárt, nincs kimenő kapcsolat"
+back = "Vissza"
+businessName = "Vállalkozás neve"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Felügyelt, leggyorsabb kezdés"
+continue = "Folytatás"
+deployment = "Hová legyen telepítve?"
+eula = "Elfogadom a Stirling EULA-t és a kereskedelmi feltételeket."
+fullName = "Teljes név"
+fullNamePlaceholder = "Az Ön neve"
+invites = "Csapattagok meghívása · opcionális"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Hívás ütemezése"
+seats = "Tesztelő személyek"
+seatsPlaceholder = "pl. 15"
+selfhost = "Saját üzemeltetésű"
+selfhostSub = "Docker vagy Kubernetes"
+start = "Próbaidőszak indítása"
+stepOf = "{{n}}. lépés / {{total}}"
+subtitle = "14 napig ingyenes, kártya nem szükséges."
+subtitleDetails = "Néhány adat az ajánlatához és a megállapodáshoz."
+talkFirst = "Inkább előbb beszélne?"
+title = "Próbaidőszak beállítása"
+viewEula = "Elolvasás"
+workEmail = "Munkahelyi e-mail"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "A hosszabbítás 7 napot ad hozzá, és értesíti a solutions engineer-jét."
@@ -7808,20 +8685,6 @@ maxed = "Elérte a maximumot"
 subtitle = "Az ingyenes próbaidőszak {{date}} dátumig tart. Kártya nem szükséges."
 title = "Enterprise próbaidőszak"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Elkötelezett mennyiségi árazás, szervezetszintű SSO + SCIM + RBAC, 90 napos megváltoztathatatlan audit és dedikált SE."
-homeCta = "Próbaidőszak indítása →"
-homeHeadline = "Dolgozzon fel több millió PDF-et."
-
-[portal.recentActivity]
-title = "Legutóbbi tevékenység"
-viewAll = "Összes megtekintése"
-
-[portal.recentActivity.empty]
-description = "A pipeline futtatások, telepítések és agent események itt jelennek meg."
-title = "Még nincs itt semmi"
-
 [portal.search]
 ariaLabel = "Keresés"
 placeholder = "Keresés a Stirlingben — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Fiók összekapcsolása"
 
-[portal.shell.header]
-accountFallback = "Fiók"
-accountMenu = "Fiókmenü"
-darkMode = "Sötét mód"
-lightMode = "Világos mód"
-search = "Keresés"
-searchPlaceholder = "Keresés…"
-signOut = "Kijelentkezés"
-switchToDark = "Váltás sötét témára"
-switchToLight = "Váltás világos témára"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumentum"
 linkAccount = "Stirling-fiók összekapcsolása"
-planEditor = "Editor csomag"
-planEnterprise = "Enterprise csomag"
-planProcessor = "Processor csomag"
 primaryNav = "Elsődleges navigáció"
 switchApp = "Alkalmazás váltása"
 
+[portal.shell.topbar]
+closeNav = "Navigáció bezárása"
+openNav = "Navigáció megnyitása"
+search = "Keresés"
+
 [portal.sources]
 subtitle = "Újrahasználható bemeneti kapcsolatok, amelyek dokumentumokat juttatnak a Stirlingbe. Konfiguráljon egy kapcsolatot egyszer, majd hivatkozzon rá tetszőleges számú házirendből. Kattintson egy sorra a konfigurációjához és annak megtekintéséhez, mely házirendek használják."
 title = "Források"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Forrás csatlakoztatása"
 
+[portal.sources.builder]
+back = "Vissza a forrásokhoz"
+backToTypes = "Minden forrástípus"
+cancel = "Mégse"
+chooseHint = "Válassza ki, honnan érkeznek a dokumentumok. A kiszürkített csatlakozók úton vannak."
+comingSoon = "Hamarosan"
+comingSoonHeading = "Hamarosan"
+create = "Forrás létrehozása"
+createTitle = "Forrás csatlakoztatása"
+delete = "Törlés"
+editTitle = "Forrás szerkesztése"
+enabled = "Engedélyezve"
+save = "Módosítások mentése"
+
+[portal.sources.builder.folderAccess]
+description = "A mappaautomatizálások csak olyan mappákat használhatnak, amelyeket egy rendszergazda engedélyezett. Adja hozzá a Mappahozzáférés beállításainál, majd próbálja újra."
+openSettings = "Mappahozzáférés beállításai"
+title = "Ez a mappa nincs engedélyezve"
+
 [portal.sources.delete]
 body = "Törli ezt: \"{{name}}\"? Ez nem vonható vissza. Az erre hivatkozó házirendeket frissíteni kellene."
 cancel = "Mégse"
 confirm = "Törlés"
 title = "Törli a forrást?"
 
-[portal.sources.detail]
-closeAriaLabel = "Részletek bezárása"
-delete = "Forrás törlése"
-docs24h = "Elmúlt 24 óra"
-docs30d = "Elmúlt 30 nap"
-docsTotal = "Összes látott"
-docsTrend = "Dokumentumok az elmúlt 30 napban"
-documents = "Dokumentumok"
-edit = "Szerkesztés"
-notReferenced = "Egy házirend sem hivatkozik rá, ezért biztonságosan törölhető."
-pause = "Szüneteltetés"
-resume = "Folytatás"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Használja"
-
 [portal.sources.empty]
 description = "Csatlakoztasson egy mappát (és hamarosan felhőtárhelyet), hogy a házirendeknek legyen honnan dokumentumokat beolvasniuk."
 title = "Még nincs csatlakoztatott forrás"
@@ -7899,18 +8754,57 @@ inUse = "Használatban"
 total = "Kapcsolatok"
 unused = "Nem használt"
 
+[portal.sources.networkFields.connection]
+helperText = "A tárolt kapcsolat a szerver címével és hitelesítő adataival. Minden rá hivatkozó forrás újra felhasználja."
+label = "Kapcsolat"
+
+[portal.sources.networkFields.directory]
+helperText = "A szerveren lekérdezendő mappa, a bejelentkezési home-hoz vagy a megosztás gyökeréhez képest. Hagyja üresen a gyökérhez."
+label = "Mappa"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "A Consume eltávolít minden fájlt a szerverről, miután minden házirend feldolgozta."
+label = "Olvasási mód"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: minden fájl feldolgozása egyszer"
+snapshot = "Snapshot: mappa újraolvasása minden futtatáskor"
+
+[portal.sources.networkFields.recursive]
+label = "Mappamélység"
+
+[portal.sources.networkFields.recursive.options]
+all = "Almappák belefoglalása"
+top = "Csak felső szint"
+
 [portal.sources.status]
 active = "Aktív"
 disabled = "Letiltva"
 unused = "Nem használt"
 
 [portal.sources.table]
+documents = "Dokumentumok"
 source = "Forrás"
 status = "Állapot"
 usedBy = "Házirendek"
 
+[portal.sources.types.box]
+description = "Dokumentumok behúzása a csapata által már megosztott Box mappákból."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Dokumentumok behúzása egy megosztott Dropbox mappából."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "A csapat által az editorban feldolgozott dokumentumok, házirend- és AI futtatásokon keresztül."
 label = "Editor"
+noPolicies = "Még nem futott házirend az editorból."
+
+[portal.sources.types.email]
+description = "A dedikált postaládába küldött mellékleteket dokumentumokká alakítja."
+label = "E-mail bejövő fiók"
 
 [portal.sources.types.folder]
 description = "Figyeljen egy könyvtárat a szerveren az új dokumentumokért."
@@ -7943,25 +8837,80 @@ label = "Mappamélység"
 all = "Almappák belefoglalása"
 top = "Csak felső szint"
 
+[portal.sources.types.ftp]
+description = "Új dokumentumok keresése egy FTP vagy FTPS szerver mappájában."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Dokumentumok behúzása megosztott Google Drive mappákból."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "SMB hálózati megosztás figyelése új dokumentumokhoz."
+label = "Hálózati drive"
+
+[portal.sources.types.onedrive]
+description = "OneDrive mappák figyelése új dokumentumokhoz."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Dokumentumok behúzása Amazon S3 vagy S3-kompatibilis bucketből."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "A tárolt kapcsolat, amely a bucketet és a hitelesítő adatokat tartalmazza. Minden rá hivatkozó forrás és folyamatkimenet újra felhasználja."
+label = "Kapcsolat"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "A Consume eltávolít minden objektumot a bucketből, miután minden házirend feldolgozta."
+label = "Olvasási mód"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: minden objektum feldolgozása egyszer"
+snapshot = "Snapshot: bucket újraolvasása minden futtatáskor"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Csak azok az objektumok kerülnek feldolgozásra, amelyek kulcsai ezzel a prefixszel kezdődnek."
+label = "Kulcs prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Új dokumentumok keresése egy SFTP drop mappában."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Dokumentumok behúzása SharePoint dokumentumtárakból."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Forrás"
 
+[portal.sources.types.webhook]
+createNote = "A webhook létrehozásakor delivery URL és aláírási titok jön létre. A küldők POST kéréssel dokumentumokat küldenek erre az URL-re, és a hivatkozó házirendek érkezéskor lefutnak."
+description = "Dokumentumok fogadása aláírt HTTP POST kéréssel bármely külső rendszerből."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Az aláírási titok egyszer jelenik meg, a webhook létrehozásakor. A forgatáshoz hozza létre újra a forrást."
+
+[portal.sources.types.webhook.reveal]
+copy = "Másolás"
+done = "Kész"
+secret = "Aláírási titok"
+secretHelp = "Írja alá minden kézbesítés nyers törzsét ezzel a kulccsal (HMAC-SHA256), és küldje el X-Stirling-Signature headerként."
+secretWarning = "Másolja ki most az aláírási titkot. Biztonsága érdekében csak egyszer jelenik meg, és később nem kérhető le."
+title = "Webhook létrehozva"
+url = "Delivery URL"
+usage = "Küldjön minden dokumentumot POST kéréssel nyers request bodyként a delivery URL-re binary content type-pal (application/pdf vagy application/octet-stream). A hivatkozó házirendek érkezéskor automatikusan lefutnak."
+
 [portal.sources.wizard]
-back = "Vissza"
-cancel = "Mégse"
-continue = "Folytatás"
-editTitle = "Forrás szerkesztése"
 name = "Név"
 namePlaceholder = "pl. Kárigények fogadása"
-save = "Módosítások mentése"
-subtitle = "{{current}}. lépés / {{total}} · {{label}}"
-title = "Forrás csatlakoztatása"
 type = "Típus"
 
-[portal.sources.wizard.steps]
-chooseType = "Típus kiválasztása"
-configure = "Konfigurálás"
-review = "Áttekintés és csatlakoztatás"
+[portal.stepModal]
+close = "Bezárás"
 
 [portal.usage]
 managePayment = "Fizetés kezelése"
@@ -8021,16 +8970,9 @@ summary = "Egy csapat tulajdonosa — kezeli a tagok erőforrásait és megoszto
 2 = "Portálhozzáférés az alapértelmezett házirenden keresztül"
 3 = "Minden, amit a tag megtehet"
 
-[portal.welcome]
-ariaLabel = "Üdvözli a Stirling PDF"
-badge = "Nyílt forráskódú"
-installEditor = "Editor telepítése"
-inviteTeammates = "Csapattársak meghívása"
-openInBrowser = "Megnyitás böngészőben"
-perks = "Örökre ingyenes · Self-hostable"
-subtitle = "A világ legbiztonságosabb PDF Editorja ingyenes bármilyen méretű csapat számára. Több mint 60 PDF műveletet és SSO-t tartalmaz."
-title = "Üdvözli a"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Korlátlan"
 
 [printFile]
 title = "Fájl nyomtatása"
@@ -8613,6 +9555,14 @@ text = "Forgassa el a PDF oldalakat az óramutató járásával megegyezően vag
 [rotate.tooltip.header]
 title = "Forgatási beállítások áttekintése"
 
+[ruler]
+clearAll = "Összes törlése"
+hideAllLabels = "Összes címke elrejtése"
+hideSmallLabels = "Kis címkék elrejtése"
+physicalValues = "Fizikai"
+scaled = "Méretezett"
+showAllLabels = "Összes címke megjelenítése"
+
 [sanitize]
 desc = "Potenciálisan ártalmas elemek eltávolítása PDF fájlokból."
 sanitizationResults = "Tisztítás eredményei"
@@ -8654,31 +9604,45 @@ label = "XMP metaadatok eltávolítása"
 [sanitize.steps]
 settings = "Beállítások"
 
-[sanitizePdf]
-tags = "tisztítás,biztonság,védelem,veszélyek eltávolítása"
-
 [sanitizePDF]
 title = "PDF tisztítása"
 
+[sanitizePdf]
+tags = "tisztítás,biztonság,védelem,veszélyek eltávolítása"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Oldalméret beállítása"
 
+[scaleSettings]
+activeScale = "Aktív skála"
+apply = "Skála alkalmazása"
+applyCalibration = "Kalibrálás alkalmazása"
+calculatedScale = "Számított skála"
+calibrate = "Kalibrálás"
+calibrating = "Kalibrálás"
+calibrationDistanceRequired = "Adjon meg nullánál nagyobb valós távolságot"
+calibrationInvalid = "Ebből a mérésből nem számítható ki a méretarány"
+calibrationPaperDistance = "Mért oldaltávolság: {{distance}}"
+calibrationTitle = "Méretarány kalibrálása"
+calibrationTooltip = "Mérjen meg egy ismert távolságot a méretarány automatikus kiszámításához"
+customScale = "Egyéni méretarány"
+noneSet = "Nincs beállítva egyéni méretarány"
+presets = "Előre beállított méretarányok"
+ratio = "Méretarány"
+ratioHelp = "Arány: 1 oldalegység = X valós egység"
+ratioPlaceholder = "pl. 100"
+ratioPositive = "Az aránynak nullánál nagyobbnak kell lennie"
+ratioRequired = "Az arány megadása kötelező"
+realDistance = "Valós távolság"
+realDistancePlaceholder = "pl. 5"
+reset = "Visszaállítás alapértelmezettre"
+unit = "Egység"
+unitInvalid = "Érvénytelen egység: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Szög küszöbérték:"
-10 = "A hozzáadott és eltávolított keret méretének beállítása a fehér keretek elkerülése érdekében (alapértelmezett: 1)."
-2 = "A kép forgatásához szükséges minimális abszolút szög beállítása (alapértelmezett: 10)."
-3 = "Tolerancia:"
-4 = "A becsült háttérszín körüli színváltozási tartomány meghatározása (alapértelmezett: 30)."
-5 = "Minimális terület:"
-6 = "A fotó minimális területének küszöbértéke (alapértelmezett: 10000)."
-7 = "Minimális kontúr terület:"
-8 = "A fotó minimális kontúr területének küszöbértéke"
-9 = "Keret mérete:"
-
 [scannerImageSplit]
 submit = "Képbeolvasások kinyerése"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Mit csinál ez"
 whatThisDoesDesc = "Automatikusan megtalálja és kinyeri az egyes fotókat egy szkennelt oldalról vagy kompozit képről—kézi vágás nélkül."
 whenToUse = "Mikor használja"
 
+[ScannerImageSplit.selectText]
+1 = "Szög küszöbérték:"
+10 = "A hozzáadott és eltávolított keret méretének beállítása a fehér keretek elkerülése érdekében (alapértelmezett: 1)."
+2 = "A kép forgatásához szükséges minimális abszolút szög beállítása (alapértelmezett: 10)."
+3 = "Tolerancia:"
+4 = "A becsült háttérszín körüli színváltozási tartomány meghatározása (alapértelmezett: 30)."
+5 = "Minimális terület:"
+6 = "A fotó minimális területének küszöbértéke (alapértelmezett: 10000)."
+7 = "Minimális kontúr terület:"
+8 = "A fotó minimális kontúr területének küszöbértéke"
+9 = "Keret mérete:"
+
 [search]
 noResults = "Nincs találat"
 placeholder = "Adja meg a keresőkifejezést..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "A Stirling-PDF szervere offline, és a(z) \"{{endpoin
 [session]
 expired = "A munkamenet lejárt. Kérjük, frissítse az oldalt és próbálja újra."
 
-[sessionManagement.tooltip]
-header = "Aláírási munkamenetek kezelése"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Az új résztvevők az aláírási sorrend végére kerülnek"
-bullet2 = "Véglegesítés után nem adhatók hozzá résztvevők"
-bullet3 = "Minden résztvevő értesítést kap, amikor rá kerül a sor"
-description = "A véglegesítésig bármikor adhat hozzá résztvevőket egy aktív munkamenethez."
-title = "Résztvevők hozzáadása"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Teljes véglegesítés</b>: minden résztvevő aláírt"
-bullet2 = "<b>Részleges véglegesítés</b>: néhány résztvevő még nem írt alá"
-bullet3 = "Az aláíratlan résztvevők kimaradnak a végleges dokumentumból"
-bullet4 = "Véglegesítés után az aláírt PDF betölthető az aktív fájlok közé"
-description = "A véglegesítés az összes aláírást egyetlen aláírt PDF-be egyesíti. Ez a művelet nem vonható vissza."
-title = "Munkamenet véglegesítése"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "A már aláírt résztvevők nem távolíthatók el"
-bullet2 = "Az eltávolított résztvevők nem kapnak több értesítést"
-bullet3 = "Az aláírási sorrend automatikusan igazodik"
-description = "A résztvevők az aláírás előtt eltávolíthatók a munkamenetből."
-title = "Résztvevők eltávolítása"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Minden aláírás szekvenciálisan kerül a PDF-re"
-bullet2 = "A későbbi aláírók láthatják a korábbi aláírásokat"
-bullet3 = "Létfontosságú jóváhagyási folyamatoknál és jogi nyomonkövetésnél"
-description = "A munkamenet létrehozásakor megadott sorrend határozza meg, ki ír alá először."
-title = "Aláírási sorrend"
-
 [settings]
 close = "Bezárás"
 
+[settings.ai]
+documents = "Dokumentumok és RAG"
+general = "Általános"
+limits = "Korlátok és teljesítmény"
+models = "Modellek és szolgáltatók"
+title = "AI"
+
 [settings.configuration]
 advanced = "Speciális"
 database = "Adatbázis"
 endpoints = "Végpontok"
 features = "Funkciók"
+folderAccess = "Mappahozzáférés"
 mcp = "MCP Server"
 storageSharing = "Fájltárolás és megosztás"
 systemSettings = "Rendszerbeállítások"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Alapértelmezett PDF-szerkesztő"
 defaultPdfEditorActive = "A Stirling PDF az alapértelmezett PDF-szerkesztő"
 defaultPdfEditorChecking = "Ellenőrzés..."
 defaultPdfEditorInactive = "Más alkalmazás van alapértelmezettként beállítva"
+defaultPdfEditorRemind = "Emlékeztessen, hogy alapértelmezettként állítsam be"
+defaultPdfEditorRemindDescription = "Banner megjelenítése, ha a Stirling PDF nem az alapértelmezett PDF-alkalmazása."
 defaultPdfEditorSet = "Már alapértelmezett"
 defaultStartupView = "Alapértelmezett nézet indításkor"
 defaultStartupViewDescription = "Válassza ki, melyik lap legyen aktív a bal oldali oszlopban az alkalmazás indításakor"
@@ -8817,9 +9771,18 @@ languageDescription = "Válassza ki a megjelenítés nyelvét"
 logout = "Kijelentkezés"
 setAsDefault = "Beállítás alapértelmezettként"
 theme = "Téma"
+themeAccent = "Kiemelőszín"
+themeAccentCustom = "Egyéni szín"
+themeAccentCustomHint = "Egyéni (az alapértelmezettek ajánlottak)"
+themeAccentDark = "Sötét mód kiemelőszíne"
+themeAccentDefault = "Alapértelmezett"
+themeAccentDefaultHint = "Alapértelmezett téma (ajánlott)"
+themeAccentDescription = "A gombok, hivatkozások és kiemelések ezt követik, és finoman árnyalják az alkalmazást. A világos és a sötét módnak külön-külön sajátja van. A rendszer azt használja, amelyik aktív."
+themeAccentLight = "Világos mód kiemelőszíne"
 themeDark = "Sötét"
 themeDescription = "Váltás világos és sötét mód között"
 themeLight = "Világos"
+themeReset = "Téma visszaállítása alapértelmezettre"
 themeSystem = "System"
 title = "Általános"
 user = "Felhasználó"
@@ -8833,6 +9796,12 @@ intro = "Engedélyezze a felhasználói hitelesítést, csapatkezelést és munk
 learnMore = "További információ a dokumentációban"
 title = "Rendszergazdáknak"
 
+[settings.general.loginLanding]
+description = "Válassza ki, melyik alkalmazás nyíljon meg, amikor bejelentkezik a Stirling Cloudba."
+editor = "Szerkesztő"
+processor = "Feldolgozó"
+title = "Bejelentkezés után"
+
 [settings.general.mode]
 fullscreen = "Teljes képernyő"
 sidebar = "Oldalsáv"
@@ -9041,6 +10010,11 @@ security = "Biztonság"
 telegram = "Telegram"
 title = "Biztonság és hitelesítés"
 
+[settings.signOut]
+confirm = "Biztosan ki szeretne jelentkezni?"
+submit = "Kijelentkezés"
+title = "Kijelentkezés"
+
 [settings.team]
 title = "Csapat"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Feltöltés a szerverre"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "kattintson ide"
+fallback = "Ha nem nyílt meg automatikusan,"
+opening = "Swagger UI megnyitása új lapon..."
 tags = "api,dokumentáció,swagger,végpontok,fejlesztés"
 title = "API-dokumentáció"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Válasszon fájlokat az Aktív fájlok között az eszköz fu
 singleFileScope = "Csak erre alkalmazva: {{fileName}}"
 viewerMode = "Váltson a fájlszerkesztőre több fájl kiválasztásához."
 
+[toolFormat]
+ANY = "bármilyen fájl"
+CBR = "képregényarchívum (CBR)"
+CBZ = "képregényarchívum (CBZ)"
+CSV = "CSV-fájl"
+EBOOK = "e-könyv"
+EMAIL = "e-mail"
+EXCEL = "táblázat"
+HTML = "weboldal"
+IMAGE = "képek"
+JAVASCRIPT = "JavaScript-fájl"
+JSON = "JSON-fájl"
+MARKDOWN = "Markdown-fájl"
+NONE = "nincs fájl"
+PCL = "PCL-nyomtatófájl"
+PDF = "PDF"
+PDF_ENCRYPTED = "jelszóval védett PDF"
+POSTSCRIPT = "PostScript-fájl"
+PPT = "prezentáció"
+TEXT = "szövegfájl"
+VIDEO = "videó"
+WORD = "Word-dokumentum"
+XML = "XML-fájl"
+XPS = "XPS-dokumentum"
+ZIP = "ZIP-archívum"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Vissza az összes eszközhöz"
 collapse = "Panel összecsukása"
 expand = "Panel kinyitása"
 goBack = "Vissza"
+pdfTools = "PDF-eszközök"
 placeholder = "Válasszon egy eszközt a kezdéshez"
 premiumFeature = "Prémium funkció:"
+searchTools = "Eszközök keresése"
 toolsHeader = "Eszközök"
 viewAllTools = "Összes eszköz megtekintése"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nem találhatók eszközök"
 quickAccess = "GYORS ELÉRÉS"
 searchPlaceholder = "Eszközök keresése..."
 
-[toolPicker.categories]
-advancedTools = "Speciális eszközök"
-recommendedTools = "Ajánlott eszközök"
-standardTools = "Standard eszközök"
-
 [toolPicker.subcategories]
 advancedFormatting = "Speciális formázás"
 automation = "Automatizálás"
@@ -9950,16 +10950,31 @@ title = "Felhasználók"
 you = "(Ön)"
 
 [users.action]
+cancelInvite = "Meghívás visszavonása"
 deleteTeam = "Csapat törlése"
 disableMfa = "MFA visszaállítása"
 move = "Áthelyezés csapatba"
 reinstate = "Visszaállítás"
 remove = "Eltávolítás a szervezetből"
+removeTeam = "Eltávolítás a csapatból"
 rename = "Csapat átnevezése"
 resetPw = "Jelszó visszaállítása"
 suspend = "Felfüggesztés"
 unlock = "Fiók zárolásának feloldása"
 
+[users.activity]
+daysAgo = "{{count}} napja"
+hoursAgo = "{{count}} órája"
+justNow = "Épp most"
+minutesAgo = "{{count}} perce"
+monthsAgo_one = "{{count}} hónapja"
+monthsAgo_other = "{{count}} hónapja"
+never = "Soha"
+weeksAgo_one = "{{count}} hete"
+weeksAgo_other = "{{count}} hete"
+yearsAgo_one = "{{count}} éve"
+yearsAgo_other = "{{count}} éve"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Jóváhagyja a házirendet"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Visszavonja a(z) {{email}} címre küldött meghívást? A jelenlegi hivatkozással nem fog tudni csatlakozni."
+cancelInviteTitle = "Meghívás visszavonása"
 deleteTeamBody = "Törli a(z) {{name}} csapatot? A csapatnak előbb üresnek kell lennie - helyezze át tagjait egy másik csapatba, és nem birtokolhat integrációs konfigurációkat."
 deleteTeamTitle = "Csapat törlése"
 disableMfaBody = "Eltávolítja {{name}} MFA regisztrációját? Ha szükséges, a következő bejelentkezéskor újra beállítja."
 disableMfaTitle = "MFA visszaállítása"
 removeBody = "Véglegesen eltávolítja {{name}} felhasználót a szervezetből? Ez nem vonható vissza."
+removeTeamBody = "Eltávolítja {{name}} személyt a csapatból? A fiókja megmarad, de elveszíti a hozzáférést a csapat erőforrásaihoz."
 removeTitle = "Tag eltávolítása"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Felhasználónév"
 usernameError = "A felhasználónévnek legalább 3 karakterből kell állnia"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Meghívta: {{who}}"
+cancel = "Visszavonás"
+count = "{{count}} függőben"
+desc = "Meghívott személyek, akik még nem csatlakoztak. Helyet foglalnak, amíg el nem fogadják."
+expiresInDays_one = "{{count}} nap múlva lejár"
+expiresInDays_other = "{{count}} nap múlva lejár"
+expiresToday = "Ma lejár"
+title = "Függőben lévő meghívások"
+
 [users.loadError]
 description = "Hiba történt a backend elérésekor, vagy nincs hozzáférésed. Próbáld újra."
 title = "Nem sikerült betölteni a tagokat"
@@ -10212,9 +11240,11 @@ title = "Mellékletek"
 
 [viewer.bookmarks]
 bookmarkTitle = "Könyvjelző címe"
+bookmarkTitleRequired = "A könyvjelző címe kötelező"
 closeSidebar = "Könyvjelzők oldalsávjának bezárása"
 collapseAll = "Összes könyvjelző összecsukása"
 expandAll = "Összes könyvjelző kibontása"
+searchPlaceholder = "Könyvjelzők keresése"
 
 [viewer.comments]
 addComment = "Megjegyzés hozzáadása"
@@ -10605,30 +11635,6 @@ title = "Vízjel szövege"
 image = "Kép"
 text = "Szöveg"
 
-[wetSignature.tooltip]
-header = "Aláírás létrehozási módjai"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Toll színének és vastagságának testreszabása"
-bullet2 = "Törlés és újrarajzolás, amíg elégedett"
-bullet3 = "Működik érintőkészülékeken (táblagépek, telefonok)"
-description = "Kézzel írt aláírást hozhat létre egérrel vagy érintőképernyővel. Személyes, hiteles aláírásokhoz a legjobb."
-title = "Aláírás rajzolása"
-
-[wetSignature.tooltip.type]
-bullet1 = "Válasszon több betűtípus közül"
-bullet2 = "Szöveg méretének és színének testreszabása"
-bullet3 = "Tökéletes szabványosított aláírásokhoz"
-description = "Begépelt szövegből generál aláírást. Gyors és egységes, üzleti dokumentumokhoz alkalmas."
-title = "Aláírás begépelése"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Támogatja a PNG, JPG és más képformátumokat"
-bullet2 = "A legjobb eredmény érdekében átlátszó hátteret javaslunk"
-bullet3 = "A képet átméretezzük, hogy illeszkedjen az aláírási területhez"
-description = "Töltsön fel előre elkészített aláírásképet. Ideális, ha van beszkennelt aláírása vagy céges logója."
-title = "Aláíráskép feltöltése"
-
 [workbenchBar]
 activeFiles = "Aktív fájlok"
 annotations = "Annotációk"
@@ -10652,6 +11658,7 @@ redact = "Kitakarás"
 rotateLeft = "Forgatás balra"
 rotateRight = "Forgatás jobbra"
 ruler = "Vonalzó / Mérés"
+rulerSettings = "Méretarány beállításai"
 save = "Mentés"
 saveAll = "Összes mentése"
 saveAs = "Mentés másként"
diff --git a/frontend/editor/public/locales/id-ID/translation.toml b/frontend/editor/public/locales/id-ID/translation.toml
index 6b3ed7d7e5..d1b07d8050 100644
--- a/frontend/editor/public/locales/id-ID/translation.toml
+++ b/frontend/editor/public/locales/id-ID/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "berkas dipilih"
 font = "Jenis huruf"
 fontSizeTooltip = "Ukuran teks nomor halaman dalam poin. Angka yang lebih besar membuat teks lebih besar."
 fontTypeTooltip = "Keluarga font untuk nomor halaman. Pilih sesuai gaya dokumen Anda."
-genericSubmit = "Kirim"
 green = "Hijau"
 help = "Bantuan"
-imgPrompt = "Pilih Gambar"
 incorrectPasswordMessage = "Kata sandi saat ini salah."
 info = "Informasi"
 invalidUndoData = "Tidak dapat membatalkan: data operasi tidak valid"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Perjanjian Login"
 logOut = "Keluar"
 marginTooltip = "Jarak antara nomor halaman dan tepi halaman."
 moreOptions = "Opsi Lainnya"
-multiPdfPrompt = "Pilih PDF (2+)"
 never = "Tidak pernah"
 no = "Tidak"
 noFileSelected = "Tidak ada file yang dipilih. Harap unggah satu."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Urutan Halaman Khusus (Masukkan daftar nomor halaman yang dip
 pages = "Halaman-halaman"
 pageSelectionPrompt = "Pemilihan Halaman Kustom (Masukkan daftar nomor halaman dipisahkan dengan koma 1,5,6 atau Fungsi seperti 2n+1) :"
 password = "Kata sandi"
-pdfPrompt = "Pilih PDF"
 pin = "Sematkan File (tetap aktif setelah alat dijalankan)"
 pro = "Pro"
 processingComplete = "File Anda siap."
@@ -356,6 +352,7 @@ text = "Izin ini mengontrol apa yang dapat dilakukan pengguna dengan PDF. Paling
 title = "Ganti Perizinan"
 
 [addStamp]
+preview = "Pratinjau Stempel"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Unduhan manual: klik tautan dan tempatkan berkas ke folder tessda
 noLanguages = "Tidak ditemukan bahasa tessdata di direktori yang dikonfigurasi."
 permissionNotice = "Jalur tessdata tidak dapat ditulisi. Unduhan akan dibuka di peramban; silakan simpan berkas .traineddata secara manual ke dalam folder tessdata."
 
+[admin.settings.ai.documents]
+description = "Konfigurasikan model embedding dan pengaturan retrieval yang digunakan untuk menjawab pertanyaan atas dokumen. Diterapkan ke mesin AI saat disimpan."
+title = "Dokumen & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Biarkan kosong untuk menggunakan kredensial environment milik mesin. Berlaku untuk deployment self-hosted dengan satu mesin."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Tersimpan - biarkan kosong untuk mempertahankan key saat ini"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL endpoint embedding yang kompatibel dengan OpenAI / Ollama, mis. http://ollama:11434/v1. Harus mengarah ke endpoint internal tepercaya (sensitif terhadap SSRF)."
+label = "Base URL embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nama model embedding. Teks bebas; saran hanya sebagai petunjuk."
+label = "Model embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Provider yang digunakan untuk mengubah teks dokumen menjadi embedding vektor."
+label = "Provider embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Jumlah maksimum pencarian retrieval yang dapat dijalankan agen per permintaan."
+label = "Pencarian maks"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Mengubah model embedding langsung berlaku, tetapi dokumen yang diindeks dengan model sebelumnya harus diindeks ulang agar pencarian mengembalikan hasil yang benar."
+title = "Indeks ulang diperlukan"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Jika Anda mengubah model embedding, indeks ulang dokumen yang ada agar pencarian menggunakan model baru."
+
+[admin.settings.ai.documents.topK]
+description = "Jumlah chunk paling relevan yang diambil per pencarian."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Hubungkan Stirling ke mesin AI Python dan pilih kemampuan AI mana yang ditampilkan. Perubahan berlaku saat dimulai ulang."
+title = "Mesin AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Aktifkan atau nonaktifkan fitur AI satu per satu. Fitur yang dinonaktifkan disembunyikan di aplikasi."
+title = "Kemampuan"
+
+[admin.settings.ai.general.enabled]
+description = "Sakelar utama. Saat nonaktif, tidak ada alat AI, agen, atau panggilan mesin yang tersedia."
+label = "Aktifkan AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Asisten percakapan untuk bekerja dengan PDF."
+label = "Asisten chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Kategorikan dokumen secara otomatis berdasarkan jenis atau konten."
+label = "Klasifikasi dokumen"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Buat PDF baru (mis. dari HTML) melalui agen AI."
+label = "Buat PDF dari prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Ajukan pertanyaan dan dapatkan jawaban berdasarkan dokumen yang diunggah."
+label = "Pertanyaan dokumen"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Tinjau dokumen untuk kesalahan matematika dan numerik."
+label = "Auditor matematika"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Tambahkan komentar ulasan dan anotasi yang ditulis AI ke PDF."
+label = "Agen komentar PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Batas waktu untuk operasi agen yang lebih berat seperti pembuatan dokumen."
+label = "Batas waktu proses panjang (detik)"
+
+[admin.settings.ai.general.note]
+body = "Mesin AI berjalan sebagai layanan terpisah. Secret bersama miliknya"
+body2 = "diatur melalui variabel environment container. Provider API key dapat dimasukkan di halaman ini atau diberikan sebagai variabel environment mesin; key yang dimasukkan di sini dikirim ke mesin saat disimpan."
+title = "Tentang mesin AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Batas waktu untuk respons chat yang di-stream (token demi token)."
+label = "Batas waktu stream (detik)"
+
+[admin.settings.ai.general.test]
+button = "Uji koneksi"
+failBody = "Mesin AI tidak merespons. Periksa URL, pastikan container mesin berjalan, dan AI diaktifkan (perlu dimulai ulang setelah diaktifkan)."
+failTitle = "Mesin AI tidak dapat dijangkau"
+okBody = "Mesin AI merespons pemeriksaan kesehatan."
+okTitle = "Mesin AI dapat dijangkau"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Batas waktu untuk permintaan AI standar ke mesin."
+label = "Batas waktu permintaan (detik)"
+
+[admin.settings.ai.general.url]
+description = "URL internal mesin AI Python, mis. http://stirling-pdf-engine:5001."
+label = "URL mesin AI"
+
+[admin.settings.ai.limits]
+description = "Guardrail untuk seberapa banyak pekerjaan yang dapat dilakukan permintaan AI dan berapa banyak yang berjalan bersamaan. Diterapkan ke mesin AI saat disimpan."
+title = "Batas & Performa"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Guardrail: tolak permintaan AI yang teks hasil ekstraksinya melebihi panjang ini."
+label = "Karakter maks per permintaan"
+
+[admin.settings.ai.limits.maxPages]
+description = "Guardrail: tolak permintaan AI yang melebihi jumlah halaman PDF ini."
+label = "Halaman maks per permintaan"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Jumlah maksimum panggilan model yang sedang berjalan secara bersamaan di seluruh mesin."
+label = "Konkurensi maks model"
+
+[admin.settings.ai.models]
+description = "Pilih provider LLM dan model smart/fast yang digunakan mesin AI. Diterapkan ke mesin AI saat disimpan."
+title = "Model & Provider"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Biarkan kosong untuk menggunakan kredensial environment milik mesin. Berlaku untuk deployment self-hosted dengan satu mesin."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Tersimpan - biarkan kosong untuk mempertahankan key saat ini"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL endpoint yang kompatibel dengan OpenAI / Ollama, mis. http://ollama:11434/v1."
+label = "Base URL provider"
+warning = "Base URL harus mengarah ke endpoint internal tepercaya. Mesin akan membuat permintaan sisi server ke sana, sehingga nilai yang tidak tepercaya sensitif terhadap SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Token output maksimum untuk model fast."
+label = "Token maks model fast"
+
+[admin.settings.ai.models.fastModel]
+description = "Model yang lebih murah dan lebih cepat untuk tugas ringan. Teks bebas; saran hanya sebagai petunjuk."
+label = "Model fast"
+
+[admin.settings.ai.models.provider]
+description = "Provider LLM yang dihubungi mesin."
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Token output maksimum untuk model smart."
+label = "Token maks model smart"
+
+[admin.settings.ai.models.smartModel]
+description = "Model berkemampuan tinggi untuk penalaran kompleks. Teks bebas; saran hanya sebagai petunjuk."
+label = "Model smart"
+
+[admin.settings.ai.saved]
+body = "Perubahan dikirim ke mesin AI secara otomatis."
+bodyNoPush = "Pengaturan disimpan. Pengaturan akan berlaku saat mesin AI berikutnya mengambil konfigurasinya."
+title = "Pengaturan AI disimpan"
+
 [admin.settings.badge]
 clickToUpgrade = "Klik untuk melihat detail paket"
 
@@ -938,6 +1094,25 @@ label = "Buat Ulang saat Mulai"
 description = "Jumlah hari sertifikat akan berlaku"
 label = "Masa Berlaku Sertifikat (hari)"
 
+[admin.settings.folderAccess]
+description = "Direktori yang boleh dibaca dan ditulis oleh sumber folder dan output folder. Ini adalah batas keamanan: automations tidak pernah dapat diarahkan ke path server di luar daftar ini."
+securityNote = "Biarkan kosong untuk menonaktifkan sumber dan output folder sepenuhnya. Direktori konfigurasi milik Stirling selalu tidak boleh diakses."
+title = "Akses Folder"
+
+[admin.settings.folderAccess.implied]
+description = "Direktori yang dikelola Stirling ini selalu diizinkan dan tidak dapat diubah di sini."
+serverStorage = "Penyimpanan file server"
+title = "Selalu diizinkan"
+watchedFolder = "Folder yang dipantau Pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Tambah"
+empty = "Tidak ada folder yang diizinkan. Sumber dan output folder saat ini dinonaktifkan."
+hint = "Masukkan path absolut, misalnya /data/inbox."
+label = "Root folder yang diizinkan"
+placeholder = "/data/inbox"
+remove = "Hapus root folder"
+
 [admin.settings.general]
 description = "Konfigurasikan pengaturan aplikasi seluruh sistem termasuk branding dan perilaku bawaan."
 system = "Sistem"
@@ -1842,6 +2017,15 @@ export = "Ekspor"
 accessDenied = "Akses Ditolak"
 insufficientPermissions = "Anda tidak memiliki izin untuk melakukan tindakan ini."
 
+[auth.callback]
+completing = "Menyelesaikan autentikasi"
+invalidToken = "Login OAuth gagal - token tidak valid."
+missingToken = "Login OAuth gagal - tidak ada token yang diterima."
+oauthFailed = "Login OAuth gagal. Silakan coba lagi."
+pleaseWait = "Harap tunggu sementara kami menyelesaikan proses masuk Anda."
+signedOut = "Anda telah keluar. Silakan masuk lagi."
+windowMayClose = "Anda dapat menutup jendela ini setelah selesai."
+
 [auth.displayName]
 guest = "Tamu"
 user = "Pengguna"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Mengamankan dokumen PDF dengan menghapus konten berpotensi
 description = "Alat ini akan secara otomatis mengganti nama file PDF berdasarkan kontennya. Ini menganalisis dokumen untuk menemukan judul yang paling sesuai dari teks."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Putar Otomatis"
+tags = "putar otomatis,perbaiki orientasi,terbalik,miring,luruskan,orientasi,deteksi orientasi,koreksi rotasi,orientasi otomatis,dipindai,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Ambang keyakinan"
+
+[autoRotate.detectionMode]
+auto = "Otomatis"
+osd = "Hanya OCR"
+text = "Hanya teks"
+title = "Metode deteksi"
+
+[autoRotate.error]
+failed = "Terjadi kesalahan saat memutar PDF secara otomatis."
+
+[autoRotate.inferUndetected]
+title = "Putar halaman berkeyakinan rendah agar sesuai"
+
+[autoRotate.report]
+applied = "{{degrees}}° searah jarum jam"
+confidenceValue = "Keyakinan {{value}}"
+noChange = "Tidak ada perubahan"
+pageLabel = "Halaman {{number}}"
+summary = "{{rotated}} dari {{total}} halaman diputar, {{unchanged}} dibiarkan apa adanya"
+title = "Laporan deteksi"
+
+[autoRotate.report.method]
+inferred = "Dicocokkan"
+none = "Dilewati"
+osd = "OCR"
+text = "Teks"
+
+[autoRotate.report.note]
+belowThreshold = "Di bawah ambang"
+blankPage = "Halaman kosong"
+inferredFromDocument = "Sama seperti halaman lainnya"
+noDominantDirection = "Arah teks bercampur"
+osdFailed = "Tidak ditemukan teks yang dapat dibaca"
+osdNoVerdict = "Tidak dapat menentukan arah atas"
+tesseractUnavailable = "OCR tidak terpasang"
+tooFewGlyphs = "Terlalu sedikit teks"
+
+[autoRotate.results]
+title = "Hasil Putar Otomatis"
+
+[autoRotate.settings]
+title = "Pengaturan"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Seberapa yakin pemeriksaan harus sebelum halaman diputar. Turunkan untuk memutar lebih banyak halaman, naikkan untuk membiarkan lebih banyak halaman tidak tersentuh."
+title = "Ambang keyakinan"
+
+[autoRotate.tooltip.description]
+text = "Menentukan arah atas setiap halaman dan memutarnya ke arah yang benar. Halaman yang sudah tegak dibiarkan apa adanya."
+
+[autoRotate.tooltip.detectionMode]
+text = "Otomatis membaca teks di halaman terlebih dahulu, lalu melihat halaman sebagai gambar jika itu belum cukup. Hanya teks melewati pemeriksaan gambar, yang paling cepat untuk dokumen yang tidak pernah dipindai. Hanya OCR memperlakukan setiap halaman sebagai gambar."
+title = "Metode deteksi"
+
+[autoRotate.tooltip.header]
+title = "Putar Otomatis"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Halaman kosong atau hampir kosong tidak dapat diperiksa sendiri. Ketika setiap halaman yang dapat dibaca membutuhkan putaran yang sama, halaman-halaman ini diputar agar sesuai."
+title = "Putar halaman berkeyakinan rendah agar sesuai"
+
 [autoSizeSplitPDF]
 tags = "pdf, membagi, dokumen, organisasi"
 
@@ -2189,33 +2440,6 @@ keywords = "Kata kunci: odd, even"
 numbers = "Angka/rentang: 5, 10-20"
 progressions = "Progresi: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Jenis Sertifikat"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Dikelola oleh administrator sistem"
-bullet2 = "Dibagikan kepada pengguna yang berwenang"
-bullet3 = "Mewakili identitas perusahaan, bukan individu"
-bullet4 = "Terbaik untuk: Dokumen resmi, tanda tangan tim"
-description = "Sertifikat bersama yang disediakan oleh organisasi Anda. Digunakan untuk kewenangan penandatanganan seluruh perusahaan."
-title = "Sertifikat Organisasi"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Dibuat otomatis saat pertama kali digunakan"
-bullet2 = "Terikat pada akun pengguna Anda"
-bullet3 = "Tidak dapat dibagikan dengan pengguna lain"
-bullet4 = "Terbaik untuk: Dokumen pribadi, akuntabilitas individu"
-description = "Sertifikat yang dibuat otomatis dan unik untuk akun pengguna Anda. Cocok untuk tanda tangan individu."
-title = "Sertifikat Pribadi"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Memerlukan file P12/PFX dan kata sandi"
-bullet2 = "Dapat diterbitkan oleh Otoritas Sertifikat eksternal"
-bullet3 = "Tingkat kepercayaan lebih tinggi untuk dokumen legal"
-bullet4 = "Terbaik untuk: Kontrak yang mengikat secara hukum, validasi eksternal"
-description = "Gunakan file sertifikat PKCS#12 milik Anda. Memberikan kontrol penuh atas properti sertifikat."
-title = "Unggah P12 Kustom"
-
 [certSign]
 awaitingSignatures = "Menunggu tanda tangan"
 chooseCertificate = "Pilih File Sertifikat"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Sumber sertifikat"
 upload = "Unggah"
 
-[certSign.tooltip.header]
-title = "Tentang Mengelola Tanda Tangan"
-
-[certSign.tooltip.overview]
-bullet1 = "Periksa tanda tangan yang ada dan validitasnya"
-bullet2 = "Lihat informasi terperinci tentang penanda tangan dan sertifikat"
-bullet3 = "Tambahkan tanda tangan digital baru untuk mengamankan dokumen Anda"
-bullet4 = "Mendukung banyak file dengan navigasi mudah"
-text = "Alat ini memungkinkan Anda memeriksa apakah PDF Anda ditandatangani secara digital dan menambahkan tanda tangan digital baru. Tanda tangan digital membuktikan siapa yang membuat atau menyetujui dokumen dan menunjukkan apakah dokumen telah berubah sejak ditandatangani."
-title = "Apa yang dapat dilakukan alat ini?"
-
-[certSign.tooltip.signing]
-bullet1 = "Mendukung format sertifikat PEM, PKCS12, JKS, dan server"
-bullet2 = "Opsi untuk menampilkan atau menyembunyikan tanda tangan pada PDF"
-bullet3 = "Tambahkan alasan, lokasi, dan nama penanda tangan"
-bullet4 = "Pilih halaman tempat meletakkan tanda tangan yang terlihat"
-bullet5 = "Gunakan sertifikat server untuk opsi sederhana 'Sign with Stirling-PDF'"
-text = "Untuk menandatangani PDF, Anda memerlukan sertifikat digital (seperti PEM, PKCS12, atau JKS). Anda dapat memilih agar tanda tangan terlihat pada dokumen atau tetap tidak terlihat hanya untuk keamanan."
-title = "Menambahkan Tanda Tangan"
-
-[certSign.tooltip.validation]
-bullet1 = "Menunjukkan apakah tanda tangan valid atau tidak valid"
-bullet2 = "Menampilkan informasi penanda tangan dan tanggal penandatanganan"
-bullet3 = "Memeriksa apakah dokumen dimodifikasi setelah penandatanganan"
-bullet4 = "Dapat menggunakan sertifikat kustom untuk verifikasi"
-text = "Saat Anda memeriksa tanda tangan, alat ini memberi tahu apakah tanda tangan valid, siapa yang menandatangani dokumen, kapan ditandatangani, dan apakah dokumen telah berubah sejak penandatanganan."
-title = "Memeriksa Tanda Tangan"
-
 [changeCreds]
 changeUsername = "Perbarui nama pengguna Anda. Anda akan keluar setelah memperbarui."
 credsUpdated = "Akun diperbarui"
@@ -2824,6 +3020,7 @@ next = "Berikutnya"
 preview = "Pratinjau"
 previous = "Sebelumnya"
 refresh = "Muat Ulang"
+remaining = "Tersisa"
 retry = "Coba Lagi"
 save = "Simpan"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Pemantauan lanjutan"
-allInOneWorkspace = "Ruang kerja PDF serba ada (penampil, alat & agen)"
-apiSandbox = "Sandbox API"
-dedicatedSupportSlas = "Dukungan khusus & SLA"
-fasterThroughput = "Throughput 10x lebih cepat"
-fullyPrivateFiles = "File sepenuhnya privat"
-largeFileProcessing = "Pemrosesan file besar"
-orgWideAccess = "Kontrol akses seluruh organisasi"
-premiumAiModels = "Model AI premium"
-prioritySupport = "Dukungan prioritas"
-privateDocCloud = "Cloud Dokumen Privat"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Akses API aman"
-standardThroughput = "Throughput standar"
-unlimitedApiAccess = "Akses API tanpa batas"
-unlimitedSeats = "Kursi tanpa batas"
-
 [crop]
 autoCrop = "Pangkas otomatis ruang kosong"
 noFileSelected = "Pilih file PDF untuk mulai memotong"
@@ -3346,6 +3525,7 @@ message = "Gagal menyetel penangan PDF default"
 title = "Error"
 
 [defaultApp.prompt]
+dontRemind = "Jangan ingatkan saya lagi"
 message = "Jadikan Stirling PDF aplikasi default untuk membuka file PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Sesuaikan grup"
 dropHint = "Buka file untuk memulai"
 dropToAdd = "Drop files to add"
 expand = "Perluas bilah samping"
-files = "File"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive belum dikonfigurasi"
 leaveMyFiles = "Keluar dari File Saya"
+library = "Perpustakaan PDF"
 myFiles = "File Saya"
 noFiles = "Belum ada file"
 openFileManager = "Buka pengelola file"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Tambah"
-addLabel = "Tambahkan label…"
-categoryIconAria = "Pilih ikon untuk {{name}}"
-createCategory = "Buat kategori"
-delete = "Hapus kategori"
 done = "Selesai"
-hide = "Sembunyikan kategori"
-newCategory = "Nama kategori baru…"
-removeLabel = "Hapus {{name}}"
-rename = "Ganti nama"
 reset = "Reset ke default"
-search = "Cari label…"
-show = "Tampilkan kategori"
 subtitle = "Kelompokkan file Anda ke dalam kategori induk. Tambahkan label yang sudah ada atau label baru ke kategori, ganti namanya, atau buat sendiri. File yang tidak termasuk dalam kategori mana pun akan muncul di “Lainnya”."
 title = "Kategori sidebar"
 
@@ -3808,6 +3977,7 @@ refresh = "Segarkan dari server"
 remove = "Hapus"
 removeVersion = "Hapus versi ini"
 rename = "Ganti nama"
+renamed = "Diganti nama"
 renameFolder = "Ganti nama folder"
 resizeFolderTree = "Ubah ukuran pohon folder (tombol panah, Shift untuk langkah lebih besar; klik ganda untuk menyesuaikan otomatis)"
 save = "Simpan"
@@ -3910,9 +4080,7 @@ count = "File"
 folder = "Folder"
 labels = "Label"
 modified = "Diubah"
-name = "Nama"
 size = "Ukuran"
-toolHistoryAtVersion = "Rangkaian alat kumulatif"
 totalSize = "Total ukuran"
 type = "Jenis"
 versionHistory = "Perjalanan versi"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Semua tersimpan"
+extractCsvError = "Gagal mengekstrak CSV"
+extractXlsxError = "Gagal mengekstrak XLSX"
 flattenAfterFilling = "Ratakan setelah mengisi"
+requiredAbbreviation = "wajib"
+requiredFieldsError = "Harap isi semua bidang wajib"
 rescanFields = "Pindai ulang bidang"
 rescanFormFields = "Pindai ulang bidang formulir"
 save = "Simpan"
+saveShortcut = "Ctrl+S untuk menyimpan"
+unsavedChanges = "Perubahan belum disimpan"
 
 [formFill.sidebar]
 close = "Tutup bilah sisi"
@@ -4309,6 +4484,11 @@ desc = "Mengganti nama file PDF secara otomatis berdasarkan header yang terdetek
 tags = "deteksi-otomatis,berbasis-header,atur,ganti-nama"
 title = "Ganti Nama File PDF Otomatis"
 
+[home.autoRotate]
+desc = "Deteksi orientasi setiap halaman dan putar tegak secara otomatis."
+tags = "putar otomatis,perbaiki orientasi,terbalik,miring,luruskan,orientasi,deteksi orientasi,koreksi rotasi,orientasi otomatis,dipindai,OSD"
+title = "Putar Otomatis"
+
 [home.autoSizeSplitPDF]
 tags = "otomatis,pecah,ukuran"
 title = "Pisah otomatis ukuran/jumlah"
@@ -4608,13 +4788,13 @@ hint = "Unggah file PNG, JPG, SVG, atau gambar lain untuk ditempatkan pada PDF.
 label = "Unggah Gambar"
 placeholder = "Pilih file gambar"
 
-[imageToPdf]
-tags = "konversi,img,jpg,gambar,foto"
-
 [imageToPDF]
 header = "Gambar ke PDF"
 title = "Gambar ke PDF"
 
+[imageToPdf]
+tags = "konversi,img,jpg,gambar,foto"
+
 [infoBanner]
 dismiss = "Tutup"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Anda telah diundang!"
 
 [landing]
 addFiles = "Tambahkan File"
-heroSubtitle = "Seret dan letakkan atau tambahkan PDF yang sudah ada untuk memulai."
 mobileUpload = "Unggah dari Ponsel"
 openFromComputer = "Buka dari komputer"
 uploadFromComputer = "Unggah dari komputer"
-workbenchEmptyStateHero = "Letakkan PDF di mana saja"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Masuk"
 magicLinkSent = "Tautan ajaib dikirim ke {{email}}! Periksa email Anda dan klik tautannya untuk masuk."
 mfaCode = "Kode Autentikasi"
 mfaRequired = "Kode autentikasi dua faktor diperlukan"
+noAccount = "Belum punya akun?"
 or = "Atau"
 password = "Kata sandi"
 passwordChangedSuccess = "Kata sandi berhasil diubah! Silakan masuk dengan kata sandi baru Anda."
@@ -4715,26 +4894,10 @@ signInWith = "Masuk dengan"
 title = "Masuk"
 unexpectedError = "Kesalahan tak terduga: {{message}}"
 updatePassword = "Perbarui kata sandi"
-useEmailInstead = "Masuk dengan email"
 useMagicLink = "Gunakan tautan ajaib sebagai gantinya"
 username = "Nama pengguna"
 youAreLoggedIn = "Anda sudah masuk!"
 
-[login.slides.edit]
-alt = "Edit PDF"
-subtitle = "Dengan lebih dari selusin alat untuk membantu Anda menyensor, menandatangani, membaca, dan memanipulasi PDF, Anda pasti menemukan yang Anda cari."
-title = "Edit PDF untuk menampilkan/mengamankan informasi yang Anda inginkan"
-
-[login.slides.overview]
-alt = "Sekilas Stirling PDF"
-subtitle = "Suite cloud berfokus privasi untuk PDF yang memungkinkan Anda mengonversi, menandatangani, menyensor, dan mengelola dokumen, ditambah 50+ alat hebat lainnya."
-title = "Satu tempat untuk semua kebutuhan PDF Anda."
-
-[login.slides.secure]
-alt = "Amankan PDF"
-subtitle = "Tambahkan kata sandi, sensor konten, dan kelola sertifikat dengan mudah."
-title = "Lindungi informasi sensitif di PDF Anda"
-
 [margin]
 large = "Besar"
 medium = "Sedang"
@@ -4976,6 +5139,7 @@ pinButton = "Anda dapat menggunakan tombol <strong>Pin</strong> jika Anda ingin
 results = "Setelah alat selesai dijalankan, langkah <strong>Review</strong> akan menampilkan pratinjau hasil di panel ini, dan memungkinkan Anda membatalkan operasi atau mengunduh file. "
 runButton = "Setelah alat dikonfigurasi, tombol ini memungkinkan Anda menjalankan alat pada semua PDF yang dipilih."
 selectCropTool = "Mari pilih alat <strong>Crop</strong> untuk mendemonstrasikan cara menggunakan salah satu alat."
+stepOf = "Langkah {{current}} dari {{total}}"
 toolInterface = "Ini adalah antarmuka alat <strong>Crop</strong>. Seperti yang Anda lihat, belum banyak karena kita belum menambahkan file PDF untuk dikerjakan."
 workbench = "Ini adalah <strong>Workbench</strong> - area utama tempat Anda melihat dan mengedit PDF."
 wrapUp = "Selesai! Anda telah mempelajari area utama aplikasi dan cara menggunakannya. Klik tombol <strong>Bantuan</strong> kapan saja untuk melihat tur ini lagi."
@@ -4988,6 +5152,26 @@ showMeAround = "Tunjukkan saya"
 skipForNow = "Lewati dulu"
 skipTheTour = "Lewati tur"
 
+[onboarding.checklist]
+dismiss = "Tutup"
+title = "Siapkan Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Jalankan Stirling secara native di mesin Anda"
+title = "Unduh Stirling untuk Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Berkolaborasi dengan tim Anda"
+title = "Undang anggota tim"
+
+[onboarding.checklist.shareAnalytics]
+description = "Bantu meningkatkan Stirling"
+title = "Bagikan data penggunaan anonim"
+
+[onboarding.checklist.takeTour]
+description = "Lihat cara kerja Stirling dalam panduan singkat"
+title = "Ikuti tur"
+
 [onboarding.desktopInstall]
 body = "Stirling paling baik digunakan sebagai aplikasi desktop. Anda dapat menggunakannya offline, mengakses dokumen lebih cepat, dan mengedit secara lokal di komputer Anda."
 selectOs = "Pilih sistem operasi"
@@ -4996,7 +5180,21 @@ titleWithOs = "Unduh untuk {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Kode autentikasi"
+description = "Amankan akun Anda dengan menautkan aplikasi autentikator. Pindai QR code atau masukkan kunci penyiapan, lalu konfirmasi kode 6 digit untuk menyelesaikan."
+enable = "Aktifkan MFA"
+enableError = "Tidak dapat mengaktifkan autentikasi dua faktor. Periksa kode dan coba lagi."
+enterCode = "Masukkan kode 6 digit dari aplikasi Anda."
+enterCodeError = "Masukkan kode autentikasi untuk melanjutkan."
+logout = "Keluar"
+openAuthenticator = "Buka Google Authenticator, Authy, atau 1Password."
 qrCodeLoading = "Membuat kode QR Anda…"
+regenerateQrCode = "Buat ulang QR code"
+scanQrCode = "Pindai QR code atau masukkan kunci penyiapan di bawah."
+setupError = "Tidak dapat memulai penyiapan dua faktor. Silakan coba lagi."
+setupKey = "Kunci penyiapan (entri manual)"
+stepByStep = "Langkah demi langkah"
+success = "MFA telah diaktifkan. Anda sekarang dapat melanjutkan."
+title = "Penyiapan Autentikasi Multi-Faktor"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Setelah Anda mengaktifkan mode login, Anda dapat mengelola pengguna, mengonfigurasi pengaturan, dan memantau kesehatan server. <strong>{{freeTierLimit}}</strong> orang pertama di server Anda dapat menggunakan Stirling gratis."
@@ -5005,6 +5203,11 @@ adminTitle = "Ringkasan Admin"
 userBody = "Undang rekan, tetapkan peran, dan jaga dokumen Anda tetap teratur dalam satu workspace yang aman. Aktifkan mode login kapan pun Anda siap berkembang dari penggunaan solo."
 userTitle = "Ringkasan Paket"
 
+[onboarding.processorIntro]
+body = "Stirling kini menjalankan <strong>Kebijakan</strong> — aturan otomatis yang mengklasifikasi, mengamankan, dan memproses setiap dokumen saat tiba. Siapkan dan pantau proses berjalan di <strong>Processor</strong>."
+cta = "Lihat Processor"
+title = "Lihat Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Tahun prabayar"
+
+[payg.prepaid.banner]
+exhausted = "Kapasitas prabayar Anda telah habis; tagihan terukur telah dilanjutkan. Isi ulang untuk mempertahankan diskon."
+expiring_one = "Tahun prabayar Anda berakhir dalam {{count}} hari. Kapasitas yang tidak terpakai akan kedaluwarsa — isi ulang untuk memulai tahun baru."
+expiring_other = "Tahun prabayar Anda berakhir dalam {{count}} hari. Kapasitas yang tidak terpakai akan kedaluwarsa — isi ulang untuk memulai tahun baru."
+low = "Kapasitas prabayar Anda tersisa {{pct}}%. Isi ulang kapan saja agar pemrosesan tidak terputus."
+
+[payg.prepaid.card]
+subtitle = "Digunakan sebelum tagihan terukur dan di luar batas pengeluaran Anda."
+title = "Kapasitas prabayar"
+
+[payg.prepaid.meter]
+capSuffix = "dari {{total}} kredit prabayar"
+expires = "Kedaluwarsa {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Habis"
+healthy = "Masih banyak"
+low = "Hampir habis"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Tempel kunci lisensi dari email Anda"
 success = "Lisensi Diaktifkan!"
 successMessage = "Lisensi Anda berhasil diaktifkan. Anda sekarang dapat menutup jendela ini."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "diterapkan"
-enforcing = "Menegakkan..."
-failed = "Penegakan gagal"
 outputsUnavailable = "Output kebijakan tidak lagi tersedia untuk diunduh."
 partialOutputsUnavailable = "Beberapa output kebijakan tidak lagi tersedia untuk diunduh."
-retrying = "Sibuk, mencoba lagi..."
 runNotFound = "Proses penegakan tidak dapat ditemukan lagi."
-step = "langkah {{current}}/{{total}}"
 timedOut = "Penegakan mencapai batas waktu sebelum proses selesai."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Tutup"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Menerapkan {{names}}"
 applyingProgress = "Menerapkan {{names}} ({{done}} dari {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} dari {{total}} file tidak dapat diproses dan diekspo
 failureTitle = "Diekspor tanpa penegakan penuh"
 printPolicyAppliedBody = "PDF ini diperbarui agar memenuhi kebijakan. Tinjau perubahan, lalu cetak lagi."
 printPolicyAppliedTitle = "Kebijakan diterapkan sebelum mencetak"
-queued = "+{{count}} dalam antrean"
 successTitle = "{{names}} diterapkan"
 summaryMore = "{{first}}, {{second}} dan {{more}} lainnya"
 summaryTwo = "{{first}} dan {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Menegakkan sebelum konversi"
-default = "Menegakkan"
-export = "Menegakkan sebelum ekspor"
-input = "Menegakkan saat impor"
-print = "Menegakkan sebelum mencetak"
-
-[policies.field]
-accessLog = "Log akses"
-archiveAfter = "Arsipkan setelah"
-auditTrail = "Jejak audit"
-belowThreshold = "Di bawah ambang batas"
-destination = "Tujuan"
-frameworks = "Frameworks"
-immutableHold = "Penahanan immutable"
-keepFor = "Simpan selama"
-minConfidence = "Keyakinan min"
-notify = "Beri tahu saat dirutekan"
-onViolation = "Saat tidak patuh"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Tambah"
-addPlaceholder = "Tambahkan label…"
-customNote = "Disesuaikan untuk tim Anda."
-defaultNote = "Menggunakan default bawaan, dibagikan dengan tim Anda."
-duplicate = "\"{{name}}\" sudah ada."
-edit = "Edit label"
-empty = "Belum ada label."
-export = "Ekspor JSON"
-iconAria = "Pilih ikon untuk {{name}}"
-import = "Impor JSON"
-importError = "Tidak dapat mengimpor file tersebut."
-managedNote = "Label tim dikelola oleh pemimpin tim Anda."
-modalSubtitle = "Dibagikan dengan seluruh tim Anda. Pengklasifikasi memilih label yang cocok untuk setiap dokumen."
-modalTitle = "Label klasifikasi"
-pickIcon = "Gunakan ikon {{label}}"
-removeAria = "Hapus {{name}}"
-resetToDefault = "Reset ke default"
-saveForTeam = "Simpan untuk tim"
-saving = "Menyimpan…"
-sectionLabel = "Label klasifikasi"
-startFromScratch = "Mulai dari awal"
-teamCount = "label tim"
-tooLong = "Label maksimal {{max}} karakter."
-ungrouped = "Tidak dikelompokkan"
-view = "Lihat label"
+categoryCount = "kategori"
+hideCategory = "Sembunyikan kategori"
+labelCount = "label"
+sharedNote = "Label ini bawaan dan dibagikan ke seluruh tim Anda."
+showCategory = "Tampilkan kategori"
 
 [policies.pii]
 account = "Nomor rekening (berlabel)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Nomor routing AS (ABA)"
 ssn = "Nomor Social Security"
 
-[policies.settings]
-noneExport = "Saat ini tidak ada kebijakan yang berjalan saat ekspor."
-noneUpload = "Saat ini tidak ada kebijakan yang berjalan saat upload."
-onExport = "Saat ekspor"
-onUpload = "Saat upload"
-reorderHandle = "Seret untuk menyusun ulang"
-runOrderDesc = "Saat lebih dari satu kebijakan berjalan pada pemicu yang sama, kebijakan berjalan dalam urutan ini — masing-masing pada keluaran kebijakan sebelumnya. Seret untuk menyusun ulang."
-title = "Pengaturan kebijakan"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opsi kebijakan"
-policySettings = "Pengaturan kebijakan"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Coba lagi kebijakan yang gagal ({{count}})"
-rowProgress = "{{completed}} dari {{total}} file diproses"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Apa itu kebijakan?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Secara otomatis menemukan dan menghitamkan detail sensitif — seperti nomor Social Security dan kartu — agar tidak dapat dibaca di dokumen."
-sanitize = "Menghapus JavaScript tersembunyi dari file, sehingga tidak ada yang berjalan otomatis saat seseorang membukanya."
-watermark = "Mencap tanda yang terlihat (mis. \"Confidential\") di setiap halaman."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Tutup"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} sedang diterapkan..."
 badgeRan = "Kebijakan {{name}} berjalan pada file ini"
+badgeRunning = "{{name}} berjalan..."
 blockingAction = "{{action}} diblokir saat menerapkan kebijakan, harap tunggu..."
 dismiss = "Tutup overlay"
 enforcingTitle = "Menerapkan kebijakan..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Lihat file (kebijakan masih diterapkan)"
 [policyOption]
 autoRedactPhi = "Redaksi otomatis PHI"
 blockExport = "Blokir ekspor"
+ccpa = "CCPA"
 contracts = "Kontrak"
 documents = "Dokumen"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Paket Editor"
 subscribed = "Paket Processor"
 unlinked = "Belum tertaut"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap dari dokumen"
-sectionsAriaLabel = "Bagian pembuat agen"
-selectorAriaLabel = "Agen"
-subtitle = "Rancang, uji, dan rilis agen AI yang mengklasifikasikan, mengekstrak dari, dan merutekan dokumen Anda. Tentukan skenario, batasi akses alat, jalankan golden set, dan publikasikan versi."
-title = "Pembuat Agen"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Batal"
-dropzoneText = "Pilih dokumen sampel (PDF atau gambar)"
-lead = "Letakkan dokumen sampel dan kami akan mengusulkan skenario serta skema ekstraksi yang dapat Anda sempurnakan. Tidak ada yang dipublikasikan hingga Anda meninjaunya."
-submit = "Bootstrap agen"
-subtitle = "Awali agen baru dari satu file representatif"
-title = "Bootstrap dari dokumen"
-
-[portal.agentBuilder.empty]
-description = "Bootstrap agen dari dokumen sampel untuk mengawali skenario dan skema ekstraksinya, lalu sempurnakan dan publikasikan."
-title = "Belum ada agen"
-
-[portal.agentBuilder.evals]
-casesPassing = "Kasus lulus"
-columnCase = "Kasus evaluasi"
-columnLatency = "Latensi"
-columnResult = "Hasil"
-fail = "gagal"
-goldenSetPassRate = "Tingkat kelulusan golden set"
-latencyMs = "{{ms}} ms"
-notRun = "belum dijalankan"
-pass = "lulus"
-passRate = "Tingkat kelulusan"
-runEvals = "Jalankan evaluasi"
-
-[portal.agentBuilder.evals.empty]
-description = "Evaluasi mengubah skenario Anda menjadi golden set yang dapat diulang. Upgrade untuk merekam tingkat kelulusan dari waktu ke waktu dan membatasi publikasi berdasarkan itu."
-title = "Belum ada golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "di seluruh golden set"
-activeAgents = "Agen aktif"
-avgPassRate = "Rata-rata tingkat kelulusan evaluasi"
-fleetWide = "seluruh fleet"
-latestPublished = "Terbaru dipublikasikan"
-scenarios = "Skenario"
-testCases = "kasus uji"
-totalDescription_one = "{{count}} total"
-totalDescription_other = "{{count}} total"
-
-[portal.agentBuilder.scenarios]
-add = "Tambah"
-addScenario = "Tambah skenario"
-enable = "Aktifkan"
-expectationLabel = "Perilaku yang diharapkan"
-expectationPlaceholder = "Apa yang harus dilakukan agen"
-inEval = "dalam evaluasi"
-mute = "Bisukan"
-muted = "dibisukan"
-nameLabel = "Nama"
-namePlaceholder = "mis. Eskalasi kepatuhan"
-
-[portal.agentBuilder.tabs]
-evals = "Evaluasi"
-scenarios = "Skenario"
-tools = "Alat"
-versions = "Versi"
-
-[portal.agentBuilder.tools]
-broadAccess = "Akses luas"
-deniedHint = "Alat yang dipilih diblokir. Yang lainnya tetap dapat dipanggil."
-deniedTools = "Alat yang ditolak"
-governanceGate = "Tata kelola alat tersedia pada paket Enterprise."
-restricted = "Dibatasi"
-restrictedAccess = "Akses alat terbatas"
-restrictedDescription = "Izinkan setiap alat kecuali yang Anda tolak di bawah."
-
-[portal.agentBuilder.versions]
-current = "saat ini"
-historyGate = "Riwayat versi lengkap dan rollback tersedia pada paket Enterprise."
-publish = "Publikasikan"
-rollBack = "Kembalikan"
-
 [portal.assistant]
 close = "Tutup asisten"
 error = "Tidak dapat menghubungi asisten."
@@ -6365,9 +6346,21 @@ typing = "Mengetik"
 loading = "Memuat"
 redirectingToEditor = "Mengalihkan ke editor..."
 
+[portal.billing.activation]
+maybeLater = "Nanti saja"
+title = "Aktifkan Processor"
+
+[portal.billing.activation.payg]
+sub = "Tetapkan batas bulanan. Bayar sesuai yang Anda jalankan."
+title = "Bayar sesuai pemakaian"
+
+[portal.billing.activation.prepay]
+badge = "2 bulan gratis"
+sub = "Satu faktur, kartu atau transfer bank."
+title = "Bayar setahun di muka"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function mengembalikan no client_secret."
-subtitle = "Tambahkan kartu untuk terus melampaui jatah gratis paket Editor Anda. Stripe menangani sisanya."
 title = "Aktifkan paket Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Pembayaran Anda berhasil, tetapi aktivasi memerlukan waktu sedikit lebih
 close = "Tutup"
 title = "Hampir selesai"
 
+[portal.billing.checkout.cap]
+amountAria = "Batas pengeluaran bulanan"
+back = "Kembali"
+continue = "Lanjutkan ke pembayaran"
+error = "Tidak dapat menetapkan batas pengeluaran Anda"
+finePrint = "Faktur diterbitkan bulanan. Batalkan kapan saja."
+noLimit = "Tanpa batas"
+note = "Anda tidak pernah ditagih melewati batas Anda. Pemrosesan hanya dijeda."
+perMonth = "/ bln"
+title = "Tetapkan batas pengeluaran Anda"
+
+[portal.billing.checkout.card]
+fields = "Nomor kartu · MM / YY · CVC · ZIP"
+label = "Detail kartu"
+note = "Detail kartu dikumpulkan oleh Stripe. Stirling tidak pernah menyimpan PAN atau CVC."
+
 [portal.billing.checkout.error]
 title = "Tidak dapat memulai checkout"
 
@@ -6383,10 +6392,9 @@ body = "Pembayaran Anda berhasil. Kami mengaktifkan pemrosesan bermeter di selur
 hint = "Harap biarkan jendela ini tetap terbuka."
 title = "Mengaktifkan paket Processor Anda..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "di env portal untuk mengaktifkan checkout dalam aplikasi."
-bodyBefore = "Atur"
-title = "Stripe belum dikonfigurasi"
+[portal.billing.checkout.pay]
+limit = "Batas pengeluaran bulanan {{amount}}/bln. Pemrosesan dijeda saat mencapai batas."
+limitNoCap = "Tanpa batas pengeluaran. Pemrosesan tidak akan dijeda. Faktur diterbitkan bulanan."
 
 [portal.billing.enterpriseUpsell]
 cta = "Buat penawaran Enterprise Anda"
@@ -6409,10 +6417,12 @@ currentPlan = "Paket saat ini"
 freeForever = "Gratis selamanya"
 noTeamResolved = "Belum ada tim yang ditentukan pada dompet Anda — segarkan dan coba lagi."
 ownerOnly = "Hanya pemilik tim yang dapat mengaktifkan paket Processor."
+payInvoice = "Bayar faktur untuk menyelesaikan"
 planName = "Editor"
 ssoIncluded = "SSO termasuk"
 switchOnProcessor = "Aktifkan Processor →"
 unlimitedUsers = "Pengguna tak terbatas"
+viewQuote = "Lihat penawaran"
 
 [portal.billing.invoices]
 columnAmount = "Jumlah"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Permintaan API langsung"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Otomatisasi & pipeline"
 segmentAutomationLabel = "Otomatisasi"
+sizeMultiplier = "{{formatted}} PDF menggunakan pengali ukuran"
+summary = "{{unique}} unik · {{units}} unit meter · rata-rata {{avg}} per PDF"
+summaryNoRate = "{{unique}} unik · {{units}} unit meter"
 unit = "PDF bermeter"
+unitsPending_one = "{{units}} unit meter menunggu sinkronisasi dari instans tertaut"
+unitsPending_other = "{{units}} unit meter menunggu sinkronisasi dari instans tertaut"
+
+[portal.billing.prepaid]
+capSuffix = "dari {{total}} kredit prabayar"
+expires = "Kedaluwarsa {{date}}"
+eyebrow = "Kapasitas prabayar"
+note = "Digunakan sebelum tagihan terukur dan di luar batas pengeluaran Anda."
+topUp = "Isi ulang"
+
+[portal.billing.prepaid.buy]
+back = "Kembali"
+calcTitle = "Hitung pembayaran tahunan Anda"
+cancel = "Batal"
+cancelPurchase = "Batalkan pembelian"
+close = "Tutup"
+continueToPayment = "Lanjutkan ke pembayaran"
+finalise = "Finalisasi"
+invoiceErrorTitle = "Tidak dapat membuat faktur"
+loadingTitle = "Memuat penawaran Anda"
+payTitle = "Bayar untuk tahun Anda"
+step = "Langkah {{current}} dari {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Ubah"
+deployRow = "Deployment"
+done = "Selesai"
+enterpriseHint = "Ini adalah skala enterprise. Pada volume ini, tarif enterprise mengalahkan diskon self-serve apa pun. Penguncian tarif, ketentuan, dan penawaran dalam hitungan menit."
+governanceRow = "Tata kelola"
+governanceValue = "{{label}} · {{count}} kebijakan"
+handlesLabel = "Processor Anda"
+handlesValue = "menangani {{volume}} kredit / bln"
+pipelinesLabel = "Pipeline"
+policiesMeta = "{{count}} kebijakan"
+poolCaption = "Satu pool berisi {{credits}} kredit untuk tahun ini. Bulan yang berat meminjam dari bulan yang ringan."
+priceLabel = "Tahun Anda · 12 bulan dengan harga 10 bulan"
+rateUnknown = "Kami akan menampilkan harga tepatnya saat checkout."
+savings = "Anda menghemat {{amount}} · 2 bulan gratis."
+sizingRow = "Ukuran"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Total pengguna"
+
+[portal.billing.prepaid.consent]
+label = "Saya memahami bahwa saat kapasitas prabayar saya habis atau kedaluwarsa setelah 12 bulan, pemrosesan secara otomatis berlanjut dengan tarif bayar sesuai pemakaian terukur standar (hingga batas pengeluaran saya) kecuali saya membatalkan, dan bahwa saya dapat membatalkan kapan saja dari portal penagihan."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Dikelola oleh Stirling. Aktif dalam hitungan menit."
+cloudValue = "Stirling Cloud · Dikelola"
+selfhost = "Self-hosted"
+selfhostDesc = "Berjalan di infrastruktur pribadi. Tarif sama."
+selfhostValue = "Self-hosted · Infrastruktur pribadi"
+
+[portal.billing.prepaid.offer]
+cta = "Tinjau penawaran"
+subtitle = "Bayar setahun pemrosesan PDF di muka dan dapatkan dua bulan gratis, digunakan sebelum tagihan terukur, di luar batas pengeluaran Anda."
+title = "Dapatkan 12 bulan dengan harga 10 bulan"
+
+[portal.billing.prepaid.pay]
+accountName = "Nama pemegang akun"
+accountNamePlaceholder = "mis. Jane Smith"
+companyName = "Nama perusahaan (opsional)"
+companyNamePlaceholder = "mis. Acme Inc."
+downloadInvoice = "Unduh faktur"
+payOnline = "Bayar online"
+poNumber = "Nomor PO (opsional)"
+poNumberPlaceholder = "mis. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Lanjutan"
+advancedDesc = "Pipeline menggerakkan sebagian besar pemrosesan Anda."
+none = "Tidak ada"
+noneDesc = "Belum menjalankan Pipeline. Aktifkan kapan saja."
+standard = "Standar"
+standardDesc = "Beberapa Pipeline memproses ulang PDF yang masuk."
+
+[portal.billing.prepaid.posture]
+essentials = "Esensial"
+essentialsDesc = "Klasifikasi, default, plus Berbagi"
+governed = "Terkelola"
+governedDesc = "Menambahkan Keamanan dan Routing"
+regulated = "Teregulasi"
+regulatedDesc = "Setiap kategori, termasuk Kepatuhan, Retensi, Ingesti"
+
+[portal.billing.prepaid.review]
+download = "Unduh penawaran (PDF)"
+downloading = "Menyiapkan…"
+share = "bagikan untuk persetujuan"
+
+[portal.billing.prepaid.size]
+compact = "Ringkas"
+compactDesc = "File di bawah 25 MB, tanpa biaya data"
+heavy = "Berat"
+heavyDesc = "Dipindai atau banyak gambar, rutin 50 MB+"
+standard = "Standar"
+standardDesc = "Sebagian besar kecil, beberapa scan melewati 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Habis"
+healthy = "Masih banyak"
+low = "Hampir habis"
 
 [portal.billing.spendLimit]
 adjustLimit = "Sesuaikan batas"
@@ -6494,6 +6608,8 @@ label = "Diproyeksikan melebihi."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Pengeluaran bulan ini"
+freeRemaining_one = "{{formatted}} PDF gratis tersisa"
+freeRemaining_other = "{{formatted}} PDF gratis tersisa"
 processed_one = "{{formattedCount}} PDF diproses."
 processed_other = "{{formattedCount}} PDF diproses."
 processedWithRate_one = "{{formattedCount}} PDF diproses, dengan {{rate}} masing-masing."
@@ -6534,6 +6650,350 @@ signature = "tanda tangan"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Koneksi baru"
+createTitleFor = "Hubungkan {{name}}"
+delete = "Hapus"
+edit = "Edit"
+editTitle = "Edit koneksi"
+unsupportedType = "Jenis koneksi ini tidak dapat diedit di sini."
+
+[portal.connections.categories.advanced]
+description = "Untuk layanan yang belum kami dukung."
+label = "Lanjutan"
+
+[portal.connections.categories.audit]
+description = "Catat apa yang terjadi pada dokumen, di tempat auditor Anda sudah memeriksanya."
+label = "Pencatatan audit & kepatuhan"
+
+[portal.connections.categories.notify]
+description = "Beri tahu sistem lain bahwa sesuatu terjadi."
+label = "Notifikasi & workflow"
+
+[portal.connections.categories.security]
+description = "Pindai atau beri label dokumen sebelum berpindah lanjut."
+label = "Keamanan & klasifikasi"
+
+[portal.connections.categories.signing]
+description = "Kirim dokumen untuk ditandatangani atau dinotariskan."
+label = "Tanda tangan elektronik & notarisasi"
+
+[portal.connections.categories.storage]
+description = "Tempat dokumen yang diproses berakhir - bucket, drive, tiket, atau halaman."
+label = "File & lampirkan"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling menyimpannya terenkripsi dan tidak pernah menampilkannya lagi."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Langkah yang menggunakan koneksi ini hanya dapat memanggil path di bawah URL ini, tidak pernah host lain."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Kata sandi"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Nama pengguna"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Tempel URL yang diberikan layanan kepada Anda. Hanya path di bawahnya yang dapat dipanggil."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Nama koneksi"
+namePlaceholder = "mis. Produksi"
+
+[portal.connections.picker]
+cancel = "Batal"
+createNew = "Koneksi baru..."
+placeholder = "Pilih koneksi"
+save = "Simpan koneksi"
+
+[portal.connections.picker2]
+back = "Ubah integrasi"
+heading = "Apa yang ingin Anda hubungkan?"
+noResultsBody = "Kami belum mendukungnya - beri tahu kami tentang hal itu dan kami akan mempertimbangkan untuk menambahkannya."
+noResultsTitle = "Tidak ada yang cocok dengan \"{{query}}\""
+searchPlaceholder = "Cari integrasi - coba \"sign\", \"ocr\" atau nama produk"
+
+[portal.connections.types.api]
+description = "Panggil HTTP API apa pun dari kebijakan. Anda memilih URL, autentikasi, dan payload."
+label = "API khusus"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentikasi"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nama pengguna dan kata sandi"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token di header khusus"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Tidak ada"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Login untuk token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Langkah yang menggunakan koneksi ini hanya dapat memanggil path di bawah URL ini, tidak pernah host lain."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nama header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Path login"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Kata sandi"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Jika API membalas dengan tautan unduhan, hanya host ini yang boleh diambil. Pisahkan dengan koma. Biarkan kosong untuk hanya mengizinkan host milik base URL sendiri."
+label = "Host hasil yang diizinkan"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Kirim token sebagai header ini"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Header respons tempat panggilan login mengembalikan token, mis. X-Auth-Token."
+label = "Header respons token"
+
+[portal.connections.types.api.fields.username]
+label = "Nama pengguna"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Pindai dokumen dari malware di server yang Anda jalankan - tidak ada yang keluar dari jaringan Anda."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Pemindaian virus dan konten untuk dokumen dalam kebijakan."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokir dokumen yang berisi makro, executable, skrip, atau objek tertanam - bukan hanya malware yang dikenal."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Lampirkan dokumen yang diproses ke halaman Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Kirim dokumen ke ConsignO Cloud (Notarius) untuk tanda tangan elektronik dan notarisasi."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Environment ConsignO Cloud Anda, termasuk /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Kata sandi"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Hanya diperlukan jika organisasi Anda menggunakan tenant."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nama pengguna"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Posting pesan ke Discord saat kebijakan memproses dokumen."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indeks event audit di Elasticsearch setiap kali kebijakan menangani dokumen."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Polling server FTP atau FTPS untuk dokumen baru."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Mode koneksi"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (disarankan)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP biasa mengirim kredensial dan file tanpa enkripsi; pilih FTPS jika server mendukungnya."
+label = "Enkripsi"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Tidak ada (FTP biasa)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Posting pesan ke ruang Google Chat saat kebijakan berjalan."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Lampirkan dokumen yang diproses ke issue Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Kirim email dokumen atau notifikasi saat kebijakan berjalan."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Simpan dokumen yang diproses ke Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Deteksi data pribadi dalam teks dokumen menggunakan server Presidio yang Anda jalankan."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Baca dan terapkan label sensitivitas Microsoft Purview pada PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opsional. Hanya diperlukan untuk memilih label berdasarkan nama; pelabelan berfungsi tanpanya."
+label = "ID aplikasi (client)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Dicapkan ke setiap label sebagai SiteId-nya, agar alat yang sadar Purview mengetahui organisasi mana yang menerapkannya."
+label = "ID direktori (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Bucket S3 yang dapat dibaca oleh sumber dan dapat ditulis oleh output Pipeline."
+label = "Penyimpanan S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Biarkan kosong untuk AWS. Atur ini untuk MinIO atau penyimpanan lain yang kompatibel dengan S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Kirim email dokumen atau notifikasi saat kebijakan berjalan."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Polling server SFTP (SSH) untuk dokumen baru."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opsional. Fingerprint host key SHA-256 server (dari `ssh-keyscan host | ssh-keygen -lf -`). Jika diatur, hanya server yang menyajikan key ini yang diterima; jika kosong, key yang terlihat pada koneksi pertama akan dipin dan perubahan berikutnya ditolak."
+label = "Fingerprint host key"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Passphrase key"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Biarkan kosong jika Anda mengautentikasi dengan private key sebagai gantinya."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opsional. Tempel private key OpenSSH untuk mengautentikasi dengan key alih-alih kata sandi."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Posting pesan ke Slack saat kebijakan memproses dokumen."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Pantau share jaringan SMB / CIFS (Windows atau Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Share jaringan"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opsional. Domain atau workgroup Windows, jika server Anda menggunakannya."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Kirim event audit ke Splunk setiap kali kebijakan menangani dokumen."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Kirim event audit ke kolektor HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Posting pesan ke channel Teams saat kebijakan berjalan."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Posting setiap dokumen, atau hanya detailnya, ke URL yang Anda pilih."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Picu skenario Zap atau Make dari kebijakan."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Jelajahi dokumentasi"
+viewSource = "Lihat sumber di GitHub"
+
 [portal.docs.authentication]
 codeCaption = "setiap permintaan"
 eyebrow = "MEMULAI"
@@ -6619,11 +7079,19 @@ title = "SDK resmi"
 beta = "Beta"
 deprecated = "Deprecated"
 
+[portal.docs.search]
+empty = "Tidak ada dokumentasi yang cocok"
+placeholder = "Cari dokumentasi"
+results = "{{count}} hasil"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Kemampuan bernama yang dibundel dan dipanggil agen Anda sebagai satu alat. Setiap skill adalah rantai operasi deterministik dengan evaluasi terlampir."
 title = "Skill agen"
 
+[portal.docs.toc]
+title = "Di halaman ini"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "REFERENSI API"
@@ -6697,6 +7165,8 @@ type = "Jenis"
 user = "Pengguna"
 
 [portal.documents.queue.empty]
+connectSource = "Hubungkan sumber"
+createPipeline = "Buat Pipeline"
 description = "Saat sumber memasukkan dokumen ke pipeline Anda, dokumen akan muncul di sini untuk ditinjau."
 title = "Tidak ada dokumen dalam antrean"
 
@@ -6806,13 +7276,71 @@ description = "Tampilan ini mengalami error tak terduga. Coba lagi, atau pilih b
 retry = "Coba lagi"
 title = "Terjadi kesalahan pada halaman ini"
 
+[portal.home.download]
+back = "Kembali"
+body = "Unduh aplikasi desktop atau self-host server."
+done = "Selesai"
+guide = "Buka panduan {{name}}"
+openInBrowser = "Buka di browser saja"
+sectionDesktop = "Aplikasi desktop"
+sectionSelfHosted = "Self-hosted"
+title = "Instal Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Jalankan image resmi di server Anda."
+note = "Terbuka di :8080. Login default: admin / stirling."
+tagline = "Jalankan server dalam container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instal chart Helm resmi."
+note = "Tambahkan PVC untuk /configs agar pengaturan tetap tersimpan."
+tagline = "Deploy ke cluster dengan Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Build native untuk distribusi Anda."
+guideBtn = "Lihat opsi instal Linux"
+note = "Build AppImage, .deb, dan .rpm tersedia untuk distro umum."
+tagline = "Aplikasi desktop native untuk distro Anda"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Atau melalui Homebrew"
+detailBody = "Jalankan installer, atau gunakan Homebrew."
+downloadBtn = "Unduh untuk macOS"
+tagline = "Aplikasi native untuk Apple silicon dan Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Jalankan .jar di server bare metal."
+downloadBtn = "Unduh .jar"
+note = "Memerlukan Java 21+. Dibuka di :8080; login default admin / stirling."
+runLabel = "Lalu jalankan"
+tagline = "Jalankan .jar di server bare metal"
+title = "Penyiapan server manual"
+
+[portal.home.download.windows]
+altLabel = "Atau melalui winget"
+detailBody = "Jalankan installer, atau gunakan package manager."
+downloadBtn = "Unduh installer"
+tagline = "Aplikasi native untuk Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktif"
-invite = "Undang rekan tim"
+activeOfDeployed = "{{active}} dari {{total}} aktif bulan ini"
 name = "Stirling PDF Editor"
 open = "Buka di browser"
 updated = "diperbarui {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Selesaikan deployment"
+options = "Lihat opsi deployment"
+start = "Deploy Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Selamat siang"
 evening = "Selamat malam"
 morning = "Selamat pagi"
 
-[portal.home.onboarding]
-dismiss = "Abaikan pengaturan"
-notStarted = "Belum dimulai"
-progress = "{{done}} dari {{total}} selesai"
-title = "Selesaikan pengaturan"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC seluruh organisasi, harga volume berkomitmen, dan penerapan air-gapped."
-cta = "Mulai Uji Coba"
-ctaQuote = "Dapatkan Penawaran"
-lead = "Untuk 250+ karyawan."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Terapkan aplikasi desktop, gratis selamanya."
-title = "Download PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktif · {{recommended}} direkomendasikan"
-chip = "{{active}} aktif"
-title = "Aktifkan kebijakan"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} terhubung · setiap PDF diatur di tempatnya berada"
-chip = "{{connected}} terhubung"
-title = "Hubungkan sumber Anda"
-
-[portal.home.quickActions]
-subtitle = "Tugas utama untuk hari ini"
-title = "Tindakan cepat"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Composer 3 langkah di atas pustaka op bertipe"
-title = "Buat pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agen, webhook, folder terpantau"
-title = "Hubungkan sumber"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Kunci terbatas dengan batas laju dan IP allowlist"
-title = "Terbitkan API key"
-
 [portal.infrastructure]
 manageEditorDeployment = "Kelola penerapan Editor"
 sectionsAriaLabel = "Bagian infrastruktur"
@@ -6878,13 +7363,9 @@ heading = "API key"
 subheading = "Kredensial terbatas dengan batas laju per kunci, izin, dan IP allowlist."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP yang diizinkan"
-anyIp = "IP apa pun (tanpa allowlist)"
 created = "Dibuat"
 lastUsed = "Terakhir digunakan"
-permissions = "Izin"
-rateLimit = "Batas laju"
-rateLimitValue = "{{value}} req/min"
+revoke = "Cabut key"
 usageMonth = "Penggunaan bulan ini"
 usageToday = "Penggunaan hari ini"
 
@@ -6892,6 +7373,20 @@ usageToday = "Penggunaan hari ini"
 description = "Buat kunci terbatas untuk mulai memanggil Stirling API."
 title = "Belum ada API key"
 
+[portal.infrastructure.apiKeys.error]
+load = "Tidak dapat memuat API key Anda. Silakan coba lagi."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Cabut \"{{name}}\"? Integrasi apa pun yang masih menggunakan key ini akan segera mulai menerima error 401. Ini tidak dapat dibatalkan."
+cancel = "Batal"
+confirm = "Cabut key"
+title = "Cabut API key"
+
+[portal.infrastructure.attestationLabel]
+attested = "Teratestasi"
+inScope = "Dalam cakupan"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filter peristiwa audit berdasarkan kategori"
 heading = "Log audit"
@@ -6935,6 +7430,7 @@ all = "Semua"
 auth = "Auth"
 config = "Konfigurasi"
 elevation = "Eskalasi"
+policy = "Kebijakan"
 processing = "Pemrosesan"
 security = "Keamanan"
 
@@ -6944,19 +7440,35 @@ title = "Anda tidak memiliki akses"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfigurasi"
-elevation = "Eskalasi"
+policy = "Kebijakan"
 processing = "Pemrosesan"
 totalEvents = "Total peristiwa · 24 jam"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentikasi"
+config = "Konfigurasi"
+elevation = "Eskalasi"
+policy = "Kebijakan"
+processing = "Pemrosesan"
+security = "Keamanan"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Error"
+info = "Info"
+success = "Berhasil"
+warning = "Peringatan"
+
+[portal.infrastructure.certLabel]
+certified = "Tersertifikasi"
+inProgress = "Sedang berlangsung"
+notStarted = "Belum dimulai"
+
 [portal.infrastructure.createKey]
 cancel = "Batal"
 createKey = "Buat kunci"
 done = "Selesai"
-ipAllowlistHelper = "Rentang CIDR yang dipisahkan koma. Biarkan kosong untuk mengizinkan IP apa pun."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Nama kunci"
 keyNamePlaceholder = "mis. Production · ingest"
-permissionsLabel = "Izin"
 secretKeyCaption = "Kunci rahasia"
 secretWarning = "Simpan ini di pengelola rahasia. Stirling hanya menyimpan hash — tidak ada cara untuk memulihkannya nanti."
 subtitle = "Batasi kunci ke minimum yang dibutuhkan. Anda dapat merotasi atau mencabutnya kapan saja."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Salin rahasia ini sekarang — tidak akan ditampilkan lagi."
 title = "Buat API key"
 titleCreated = "Kunci dibuat"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "Dalam antrean"
+rolledBack = "Di-rollback"
+rolling = "Sedang diluncurkan"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Kesehatan langsung untuk setiap region Stirling yang diterapkan 
 description = "Region yang diterapkan muncul di sini setelah workspace Anda disediakan."
 title = "Tidak ada region yang diterapkan"
 
+[portal.infrastructure.keyLabel]
+active = "Aktif"
+revoked = "Dicabut"
+
+[portal.infrastructure.modelLabel]
+active = "Aktif"
+degraded = "Menurun"
+disabled = "Dinonaktifkan"
+
 [portal.infrastructure.models]
 heading = "Model"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Jenis"
 version = "Versi"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/panggilan"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Model aktif"
 avgLatency = "Latensi rata-rata"
@@ -7049,6 +7580,17 @@ modelForAria = "Model untuk {{operation}}"
 operation = "Operasi"
 routedTo = "Dirutekan ke"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasifikasi"
+extraction = "Ekstraksi"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Menurun"
+down = "Down"
+healthy = "Sehat"
+
 [portal.infrastructure.security.access.byok]
 description = "Sediakan kunci dari KMS Anda sendiri. Stirling mengenkripsi dengannya tetapi masih dapat membaca."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Model"
 security = "Keamanan"
 storage = "Penyimpanan"
 
+[portal.integrations]
+addAnother = "Tambah lagi"
+availableHeading = "Tersedia"
+comingSoonHeading = "Segera hadir"
+connect = "Hubungkan"
+connectedHeading = "Terhubung"
+connectionCount_one = "{{count}} koneksi"
+connectionCount_other = "{{count}} koneksi"
+customApi = "API kustom"
+searchPlaceholder = "Cari integrasi"
+subtitle = "Semua yang dapat diajak berkomunikasi oleh Stirling. Kredensial dibuat sekali di sini, lalu direferensikan oleh sumber, kebijakan, dan pipeline."
+title = "Integrasi"
+typedName = "Nama {{tool}}"
+
+[portal.integrations.filters]
+all = "Semua"
+audit = "Audit"
+connected = "Terhubung"
+notify = "Notifikasi"
+security = "Keamanan"
+signing = "Penandatanganan"
+storage = "Penyimpanan"
+
+[portal.integrations.status]
+connected = "Terhubung"
+
+[portal.integrations.table]
+integration = "Integrasi"
+worksWith = "Berfungsi dengan"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline"
+policies = "Kebijakan"
+sources = "Sumber"
+
+[portal.legal]
+draft = "{{label}} · draf"
+loadError = "Tidak dapat memuat dokumen ini. Silakan coba lagi."
+loading = "Memuat…"
+title = "Dokumen hukum"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponen"
@@ -7182,6 +7765,7 @@ documents = "Dokumen"
 editor = "Editor"
 home = "Beranda"
 infrastructure = "Infrastruktur"
+integrations = "Integrasi"
 pipelines = "Pipeline"
 policies = "Kebijakan"
 procurement = "Pengadaan"
@@ -7190,25 +7774,9 @@ sources = "Sumber"
 usage = "Penggunaan & Penagihan"
 users = "Pengguna"
 
-[portal.notifications]
-markAllRead = "Tandai semua dibaca"
-title = "Notifikasi"
-viewAll = "Lihat semua"
-
-[portal.notifications.ariaLabel]
-none = "Notifikasi, tidak ada yang belum dibaca"
-unread_one = "Notifikasi, {{count}} belum dibaca"
-unread_other = "Notifikasi, {{count}} belum dibaca"
-
-[portal.notifications.count]
-allRead = "semua dibaca"
-loading = "memuat"
-new_one = "{{count}} baru"
-new_other = "{{count}} baru"
-
-[portal.notifications.empty]
-description = "Tidak ada notifikasi baru."
-title = "Anda sudah mengikuti semua"
+[portal.nav.section]
+platform = "Platform PDF"
+processor = "Pemroses PDF"
 
 [portal.pipelines]
 subtitle = "Setiap pipeline dokumen otomatis di backend: rantai operasi terurut pada sekumpulan sumber, dijalankan pada trigger. Klik baris untuk melihat langkah dan sumbernya."
@@ -7220,15 +7788,28 @@ newPipeline = "Pipeline baru"
 [portal.pipelines.builder]
 addStep = "Tambah alat"
 back = "Kembali ke pipeline"
+cannotFollow = "Tidak dapat mengambil {{produced}}"
+chooseAccount = "Pilih akun"
+chooseDestination = "Pilih tujuan"
+chooseOperation = "Pilih apa yang dilakukan langkah ini"
+chooseSource = "Pilih sumber"
 discard = "Buang perubahan"
 enabled = "Diaktifkan"
+inputs = "Input"
+inputSource = "Sumber input"
+inputTrigger = "Pemicu"
 keepEditing = "Lanjutkan mengedit"
+needsConfiguring = "Perlu disiapkan"
 needsUpload = "Memerlukan file yang di-upload"
+noSources = "Belum ada sumber yang terhubung. Buat satu untuk digunakan sebagai input."
 noToolMatches = "Tidak ada alat yang cocok dengan pencarian Anda."
 pipelineSettings = "Pengaturan pipeline"
 searchTools = "Cari alat"
 selectToolBody = "Tambahkan alat untuk membangun pipeline Anda."
 selectToolTitle = "Belum ada alat"
+sendToSystem = "Kirim ke sistem lain"
+stepsIncompatible = "Langkah-langkah ini tidak dapat berjalan pada hasil dari langkah sebelumnya: {{tools}}."
+stepsNeedSetup = "Langkah-langkah ini masih perlu disiapkan sebelum menyimpan: {{tools}}."
 toolSettings = "Pengaturan alat"
 unknownStep = "Operasi tidak dikenali, dipertahankan apa adanya."
 unsavedBody = "Anda memiliki perubahan yang belum disimpan. Simpan sebelum keluar, atau buang?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Perubahan belum disimpan"
 uploadUnsupported = "File yang di-upload belum didukung di pipeline, jadi langkah ini tidak dapat disimpan: {{tools}}."
 usesDefaults = "Berjalan dengan pengaturan default"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Menggabungkan setiap file dari langkah sebelumnya"
+fan-out = "Berjalan sekali per file dari langkah sebelumnya"
+format-mismatch = "Memerlukan {{accepts}}, tetapi langkah sebelumnya menghasilkan {{produced}}"
+output-uncertain = "Mungkin tidak berjalan: output langkah sebelumnya bergantung pada cara penyiapannya"
+source-mismatch = "Memerlukan {{accepts}}, tetapi input pipeline ini adalah {{produced}}"
+undeclared-operation = "Tidak dapat memeriksa apa yang diterima langkah ini"
+
 [portal.pipelines.composer]
 addTool = "Tambah alat"
 cancel = "Batal"
 chainEmpty = "Tambahkan alat untuk mulai membangun pipeline Anda."
 create = "Buat pipeline"
-directory = "Folder output"
-directoryHelp = "Path absolut di server. Harus berada dalam folder yang diizinkan yang dikonfigurasi."
 editingUnsupported = "Menampilkan parameter alat ini untuk diedit belum didukung."
 moveDown = "Pindah ke bawah"
 moveUp = "Pindah ke atas"
 name = "Nama"
 namePlaceholder = "mis. Redaction sweep"
-noSources = "Belum ada sumber yang terhubung. Pipeline masih dapat berjalan pada file yang diberikan langsung kepadanya."
 noToolSettings = "Alat ini tidak memiliki pengaturan yang dapat dikonfigurasi."
 operations_one = "Operasi ({{count}})"
 operations_other = "Operasi ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Hapus"
 title = "Hapus pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Hapus riwayat"
 delete = "Hapus pipeline"
 run = "Jalankan sekarang"
 
 [portal.pipelines.empty]
 action = "Buat pipeline"
+connectSource = "Hubungkan sumber"
 description = "Buat pipeline pertama Anda: pilih sumber yang dijalankannya, rangkai operasi, dan pilih tempat output dituju."
 title = "Belum ada pipeline"
 
@@ -7286,15 +7874,17 @@ active = "Aktif"
 paused = "Dijeda"
 total = "Pipeline"
 
-[portal.pipelines.output]
-folder = "Tulis ke folder"
-inline = "Kembalikan file"
-
 [portal.pipelines.run]
+allProcessed_one = "Tidak ada yang dijalankan: {{count}} dokumen sumber sudah diproses."
+allProcessed_other = "Tidak ada yang dijalankan: semua {{count}} dokumen di sumber sudah diproses."
 completed_one = "Jalankan selesai."
 completed_other = "Semua {{count}} proses berjalan selesai."
 empty = "Tidak ada yang dijalankan: sumber tidak memiliki dokumen untuk diproses."
 failed = "Proses berjalan gagal: {{error}}"
+historyCleared = "Riwayat dihapus. Proses berikutnya memproses ulang semua yang saat ini ada di sumber."
+inFlight = "Tidak ada yang baru untuk dijalankan: dokumen masih diproses dari proses sebelumnya."
+parked_one = "Tidak ada yang dijalankan: {{count}} dokumen sebelumnya gagal dan diparkir. Perbaiki penyebabnya, lalu hapus riwayat untuk mencobanya lagi."
+parked_other = "Tidak ada yang dijalankan: {{count}} dokumen sebelumnya gagal dan diparkir. Perbaiki penyebabnya, lalu hapus riwayat untuk mencobanya lagi."
 running = "Proses berjalan dimulai; masih berlangsung."
 timeout = "Proses berjalan memakan waktu lebih lama dari yang diharapkan; mungkin masih selesai di latar belakang."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Terjadwal"
 
 [portal.policies]
+defaultName = "Kebijakan {{category}}"
 subtitle = "Otomasi tetap yang menerapkan pipeline alat pada setiap dokumen. Setiap kebijakan dipicu saat upload atau ekspor, menjalankan rantai alatnya, dan menyimpan versi yang diberlakukan bersama aslinya."
 title = "Kebijakan"
 
 [portal.policies.card]
 comingSoon = "Tingkatkan ke Enterprise"
 notSetUp = "Belum disiapkan"
+requiresAiEngine = "Memerlukan mesin AI"
+
+[portal.policies.categories.classification]
+desc = "Identifikasi jenis setiap dokumen saat upload dan beri tag metadata untuk pengarsipan dan pencarian."
+label = "Klasifikasi"
 
 [portal.policies.categories.compliance]
 desc = "Terapkan persyaratan HIPAA, GDPR, SOC 2, atau FedRAMP pada setiap dokumen."
@@ -7344,6 +7940,13 @@ label = "Keamanan"
 [portal.policies.config]
 scopeAll = "Semua dokumen"
 
+[portal.policies.config.classification]
+summary = "Mengklasifikasikan setiap dokumen yang di-upload berdasarkan label tim Anda dan memberi tag metadata."
+
+[portal.policies.config.classification.rules]
+0 = "Klasifikasikan"
+1 = "Beri tag metadata"
+
 [portal.policies.config.compliance]
 summary = "Memvalidasi dokumen terhadap framework regulasi sebelum keluar dari sistem."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Kepercayaan minimum"
 2 = "Nama"
 3 = "Normalkan"
 
+[portal.policies.config.purview]
+label = "Terapkan label sensitivitas Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Tenant Purview"
+labelId = "ID label"
+labelIdHelp = "GUID label, dari portal Purview. Menerapkan label menulis metadatanya ke PDF; ini tidak dapat mengenkripsi, yang memerlukan klien Microsoft."
+labelName = "Nama label (opsional)"
+labelNameHelp = "Direkam bersama ID agar orang dan alat dapat mengenali label."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview membedakan label yang diterapkan kebijakan dari label yang dipilih seseorang."
+label = "Cara label direkam"
+privileged = "Sebagai dipilih oleh seseorang"
+standard = "Sebagai diterapkan otomatis"
+
+[portal.policies.config.purviewRead]
+label = "Baca label Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tenant Purview"
+connectionHelp = "Membaca label yang sudah dibawa dokumen, sehingga langkah berikutnya dapat bertindak berdasarkan label tersebut."
+
 [portal.policies.config.retention]
 summary = "Menerapkan berapa lama dokumen disimpan, kapan diarsipkan, dan kapan dihapus."
 
@@ -7438,6 +8064,7 @@ title = "Belum ada aktivitas"
 [portal.policies.endpoints]
 addWatermark = "Watermark"
 autoRedact = "Redaksi PII"
+classifyAndLabel = "Klasifikasikan"
 compressPdf = "Kompres"
 flatten = "Ratakan"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Kebijakan Anda disimpan dan akan muncul setelah koneksi dipulihka
 retry = "Coba lagi"
 title = "Backend tidak tersedia"
 
+[portal.policies.operations]
+change = "Ubah apa yang dilakukan langkah ini"
+noResults = "Tidak ada langkah yang cocok. Coba nama produk, atau \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Cari langkah - coba \"scan\", \"attach\" atau nama produk"
+
+[portal.policies.operations.bodyMode]
+binary = "Byte file mentah"
+json = "Di dalam payload JSON"
+multipart = "Sebagai upload file (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Server ClamAV Anda sendiri memeriksa dokumen; tidak ada yang keluar dari jaringan Anda."
+label = "Pindai virus (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Menolak dokumen yang membawa makro, executable, skrip, atau objek tertanam."
+label = "Blokir konten aktif"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive memeriksa dokumen dan proses berhenti jika dokumen tidak bersih."
+label = "Pindai virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Mengarsipkan dokumen yang diproses ke sebuah halaman."
+label = "Lampirkan ke halaman Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Mengirim dokumen ke ConsignO Cloud untuk ditandatangani."
+label = "Kirim untuk tanda tangan (ConsignO)"
+note = "Mengirim dokumen. Mengambil salinan yang ditandatangani belum didukung, karena sebuah langkah tidak dapat meneruskan hasil ke langkah berikutnya."
+
+[portal.policies.operations.customApiCall]
+description = "Susun panggilan sendiri: path, method, body, dan penanganan respons."
+label = "Panggil API kustom"
+
+[portal.policies.operations.discordNotify]
+description = "Memberi tahu channel bahwa kebijakan telah menangani dokumen."
+label = "Posting pesan ke Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Mencatat tindakan kebijakan sebagai dokumen yang dapat dicari."
+label = "Indekskan peristiwa audit di Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart cocok untuk API upload; JSON cocok untuk API yang menginginkan file di dalam payload; binary mengirim byte mentah."
+label = "Cara mengirim dokumen"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Body JSON dikirim apa adanya. {{document.base64}} membawa file; {{document.*}} dan {{run.*}} diisi per dokumen."
+label = "Body JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Akun"
+
+[portal.policies.operations.fields.domain]
+label = "Domain Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Field formulir yang diharapkan API untuk dokumen."
+label = "Nama field file"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Dari"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Objek JSON berisi pasangan nama/nilai header. Kredensial koneksi ditambahkan untuk Anda."
+label = "Header"
+
+[portal.policies.operations.fields.index]
+label = "Indeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Dikirim sebagai body pesan. {{document.*}} dan {{run.*}} diisi per dokumen."
+label = "Pesan"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "ID halaman"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Ditambahkan ke URL dasar koneksi. Ini tidak pernah dapat menjangkau host lain."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Lokasi di drive untuk menuliskannya. {{document.filename}} diisi per dokumen."
+label = "Path tujuan"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Laporan membiarkan dokumen tidak berubah. Ganti menukarnya dengan apa pun yang dikembalikan."
+label = "Apa yang dilakukan dengan balasan"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email penanda tangan"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Subjek"
+placeholder = "Diproses: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio menganalisis teks ini. Gunakan {{document.title}} atau tempel teks yang ingin diperiksa."
+label = "Teks untuk diperiksa"
+
+[portal.policies.operations.fields.to]
+label = "Ke"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Username Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Memberi tahu space bahwa kebijakan telah menangani dokumen."
+label = "Posting pesan ke Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Mengarsipkan dokumen yang diproses ke sebuah issue."
+label = "Lampirkan ke issue Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Mengirim dokumen yang diproses sebagai lampiran."
+label = "Email dokumen (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Menulis dokumen yang diproses ke dalam folder."
+label = "Upload ke Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Server Presidio Anda sendiri melaporkan data pribadi yang ditemukannya."
+label = "Deteksi data pribadi"
+note = "Presidio membaca teks, bukan file. Berikan teks yang ingin Anda periksa — dokumen itu sendiri tidak di-upload."
+
+[portal.policies.operations.responseMode]
+replace = "Ganti dokumen dengan balasan"
+report = "Pertahankan dokumen, catat balasan"
+
+[portal.policies.operations.sendgridEmail]
+description = "Mengirim dokumen yang diproses sebagai lampiran."
+label = "Email dokumen (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Memberi tahu channel bahwa kebijakan telah menangani dokumen."
+label = "Posting pesan ke Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Mencatat tindakan kebijakan, di tempat auditor Anda sudah melihat."
+label = "Kirim peristiwa audit ke Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Mencatat tindakan kebijakan ke kolektor HTTP."
+label = "Kirim peristiwa audit ke Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Memberi tahu channel bahwa kebijakan telah menangani dokumen."
+label = "Posting pesan ke Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Mengirim dokumen itu sendiri ke URL yang Anda pilih."
+label = "Posting dokumen ke webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Menyerahkan detail proses ke otomatisasi Anda."
+label = "Picu skenario Zap atau Make"
+
 [portal.policies.stats]
 activeFor = "Aktif"
 dataProcessed = "Data diproses"
@@ -7473,6 +8277,13 @@ label = "Dokumen diterapkan"
 description = "Dikonfigurasi tetapi tidak berjalan"
 label = "Dijeda"
 
+[portal.policies.table]
+appliesTo = "Berlaku untuk"
+docs = "Dokumen ditegakkan"
+enforces = "Menegakkan"
+policy = "Kebijakan"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Kembali"
 cancel = "Batal"
@@ -7480,6 +8291,10 @@ continue = "Lanjutkan"
 enablePolicy = "Aktifkan kebijakan"
 saveChanges = "Simpan perubahan"
 
+[portal.policies.wizard.capability.classify]
+desc = "Mengidentifikasi jenis dokumen dari label tim Anda dan memberi tag, sehingga dapat diarsipkan dan dicari berdasarkan kategori."
+label = "Klasifikasikan dokumen"
+
 [portal.policies.wizard.capability.compress]
 desc = "Mengompres dokumen menjadi ukuran file yang lebih kecil."
 label = "Kurangi ukuran file"
@@ -7500,10 +8315,18 @@ label = "Redaksi informasi sensitif"
 desc = "Menghapus JavaScript tersembunyi sehingga tidak ada yang dapat berjalan otomatis saat dokumen dibuka."
 label = "Hapus konten aktif"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Membuktikan dokumen ada dalam bentuk persis ini pada suatu titik waktu, menggunakan otoritas timestamp independen. Hanya hash yang dikirim - dokumen tidak pernah meninggalkan server Anda."
+label = "Tambahkan timestamp tepercaya"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Memberi cap tanda yang terlihat (mis. “Rahasia”) di setiap halaman."
 label = "Terapkan watermark"
 
+[portal.policies.wizard.classification]
+description = "Setiap dokumen yang di-upload diklasifikasikan berdasarkan label bawaan dan diberi tag dengan jenis yang sesuai. Kumpulan label dibagikan ke seluruh tim Anda."
+labelsHeading = "Label klasifikasi"
+
 [portal.policies.wizard.errors]
 noTools = "Aktifkan setidaknya satu alat dalam workflow terlebih dahulu."
 saveFailed = "Tidak dapat menyimpan kebijakan. Silakan coba lagi."
@@ -7548,73 +8371,118 @@ setUp = "Siapkan kebijakan {{category}}"
 [portal.policies.wizard.workflow]
 description = "Pilih apa yang dilakukan kebijakan ini pada setiap dokumen yang diprosesnya."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktif"
-noRule = "Belum ada aturan yang diterapkan"
-subtitle = "Otomatisasi tetap yang dilalui setiap dokumen, terlepas dari pipeline mana yang menanganinya."
-title = "Apa yang berjalan pada PDF Anda"
-
 [portal.policySummary.action]
-comingSoon = "Upgrade ke Enterprise"
-configure = "Konfigurasi"
 setUp = "Siapkan"
 
-[portal.policySummary.column]
-activeRule = "Aturan aktif"
-policy = "Kebijakan"
-status = "Status"
+[portal.processorFlow]
+footnote = "Hitungan berdasarkan 24 jam terakhir. Kecepatan alur bersifat ilustratif."
+liveBadge = "Live"
+stats = "{{connected}} terhubung · {{processed}} PDF diproses"
+title = "Pemroses PDF"
 
-[portal.policySummary.empty]
-description = "Setelah kebijakan dikonfigurasi, kategori akan muncul di sini."
-title = "Belum ada kebijakan"
+[portal.processorFlow.lens]
+ariaLabel = "Mode tampilan"
+flow = "Alur"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktif"
-off = "Nonaktif"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24j"
+failed = "Gagal"
+heading = "Hasil"
+success = "Terkirim"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktif"
+count = "{{n}} · 24j"
+heading = "Kebijakan"
+setUp = "Siapkan"
 soon = "Segera"
 
-[portal.processingStatus]
-managePlan = "Kelola paket"
-volumeSuffix = "PDF diproses · 30 hari terakhir"
+[portal.processorFlow.sankey]
+waist = "Kebijakan · {{n}} aktif"
+
+[portal.processorFlow.sankey.empty]
+description = "Hubungkan sumber dan aktifkan kebijakan untuk melihat dokumen mengalir melalui pemroses."
+title = "Belum ada alur"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Hubungkan"
+editor = "Stirling PDF Editor"
+heading = "Sumber"
+perDay = "{{n}} / 24j"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Penerimaan email"
 
 [portal.procurement]
-reset = "Reset pengadaan (demo)"
 subtitle = "Buat tim Anda dievaluasi, dikontrak, dan di-onboard. Setiap dokumen di satu tempat."
 title = "Pengadaan"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Bayar sekarang"
-request = "Minta"
-sign = "Tinjau & tanda tangani"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Setujui & berlangganan"
+confidential = "Rahasia"
 confirm = "Saya telah membaca dan menyetujui Stirling Enterprise Agreement."
-eyebrow = "Perjanjian"
-intro = "Satu perjanjian gabungan mencakup kesepakatan Anda: Master Service Agreement, Order Form, EULA, dan Data Processing Agreement. Tinjau, lalu setujui untuk menerima penawaran menjadi langganan berkomitmen."
-title = "Tinjau perjanjian enterprise Anda"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA, dan DPA, digabungkan menjadi satu tanda tangan."
+download = "Unduh"
+downloadDraftError = "Tidak dapat membuat PDF perjanjian - perender dokumen tidak tersedia. Silakan coba lagi sebentar lagi atau hubungi dukungan."
+downloadError = "Tidak dapat mengunduh perjanjian yang ditandatangani. Silakan coba lagi."
+legalName = "Nama entitas hukum"
+legalNamePlaceholder = "Entitas hukum yang akan menandatangani"
+loadError = "Tidak dapat memuat perjanjian. Silakan coba lagi."
+loading = "Memuat perjanjian..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Minta perubahan"
+scrollHint = "Gulir untuk meninjau"
+signatory = "Nama penanda tangan"
+signatoryPlaceholder = "Nama lengkap"
+signatoryTitle = "Jabatan penanda tangan"
+signatoryTitlePlaceholder = "mis. General Counsel"
+signError = "Tidak dapat merekam tanda tangan Anda. Silakan coba lagi."
 
 [portal.procurement.builder]
 addons = "Add-on"
+addressLine1 = "Baris alamat 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Baris alamat 2"
+addressLine2Placeholder = "Suite, lantai, gedung"
 back = "Kembali"
 businessName = "Nama bisnis"
 businessNamePlaceholder = "Perusahaan Anda"
+city = "Kota"
+cityPlaceholder = "San Francisco"
+completeRequired = "Silakan lengkapi field wajib (ditandai *) dengan email yang valid sebelum membuat penawaran."
+contactEmail = "Email kontak"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nama kontak"
+contactNamePlaceholder = "Jane Doe"
 continue = "Lanjutkan"
-country = "Negara"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "United Kingdom (GBP £)"
-countryUS = "United States (USD $)"
+done = "Selesai"
 eula = "Saya telah membaca dan menyetujui Stirling Enterprise EULA. Ini mengatur perjanjian yang dihasilkan dari penawaran ini."
 generate = "Buat penawaran"
-included = "Termasuk"
 indemnification = "Indemnifikasi IP"
 indemnificationSub = "Kami membela klaim IP yang memenuhi syarat, sesuai EULA"
-offlineLicense = "Lisensi offline / air-gapped"
-offlineLicenseSub = "File lisensi yang dapat didownload untuk instance self-hosted air-gapped"
+paperEyebrow = "Penawaran enterprise"
+paperFor = "Disiapkan untuk"
+pdfSize = "Ukuran PDF"
+poNumber = "Nomor PO"
+poNumberPlaceholder = "Opsional"
+postalCode = "Kode pos"
+postalCodePlaceholder = "94105"
+posture = "Tata kelola"
+posture_count = "~{{count}} kebijakan"
+posture_essentials = "Esensial"
+posture_essentialsSub = "Klasifikasi + Berbagi — default"
+posture_governed = "Terkelola"
+posture_governedSub = "Menambahkan Keamanan dan Routing"
+posture_regulated = "Teregulasi"
+posture_regulatedSub = "Setiap kategori — Kepatuhan, Retensi, Ingesti"
 qbr = "Tinjauan bisnis triwulanan"
 qbrSub = "SE Anda meninjau penggunaan dan roadmap setiap kuartal"
+region = "Negara bagian / wilayah"
+regionPlaceholder = "California"
 running = "{{annual}} / thn · {{years}} thn {{tcv}}"
 s1Sub = "Tim Anda, dan PDF yang Anda perkirakan akan dijalankan setiap tahun."
 s1Title = "Berapa banyak yang akan Anda proses?"
@@ -7623,6 +8491,12 @@ s2Title = "Komitmen dan layanan"
 s3Sub = "Untuk penawaran dan perjanjian yang dihasilkannya."
 s3Title = "Detail Anda"
 serviceLevel = "Level layanan"
+size_compact = "Ringkas"
+size_compactSub = "Sebagian besar teks, di bawah 1 MB"
+size_heavy = "Berat"
+size_heavySub = "Dipindai atau banyak gambar, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Campuran teks dan gambar, 1 hingga 5 MB"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 jam kerja · manajer akun khusus · +30%"
 slPriority = "Priority"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Hari kerja yang sama · CSM bernama · +15%"
 slStandard = "Standard"
 slStandardSub = "Hari kerja berikutnya · CSM bersama · termasuk"
 stepOf = "Langkah {{n}} dari {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Opsional"
 term = "Jangka waktu"
 termDiscount = "Diskon komitmen multi-tahun {{pct}}% diterapkan"
 title = "Buat penawaran Anda"
@@ -7637,6 +8513,7 @@ training = "Onboarding & pelatihan"
 trainingSub = "Sesi langsung untuk membuat tim Anda berjalan"
 users = "Total pengguna"
 usersPlaceholder = "mis. 250"
+viewEula = "Baca"
 volEstimated = "Diperkirakan dari {{count}} pengguna (~2.000 PDF masing-masing, termasuk otomatisasi). Edit jika Anda lebih tahu."
 volManual = "Menggunakan angka Anda. Perkirakan ulang dari ukuran tim Anda kapan saja."
 volNoUsers = "Tidak yakin? Masukkan ukuran tim Anda dan kami akan memperkirakannya."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "mis. 1.000.000"
 years_one = "{{count}} tahun"
 years_other = "{{count}} tahun"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokumen"
-count_other = "{{count}} dokumen"
-done = "Selesai"
-here = "Anda di sini"
-hide = "Sembunyikan"
-optional = "Opsional"
-paidAddon = "Add-on berbayar"
-show = "Tampilkan"
-subtitle = "Semua yang Anda butuhkan di setiap langkah perjalanan, ditampilkan saat kesepakatan bergerak melaluinya."
-supportingSubtitle = "SOC 2, tinjauan keamanan, formulir pajak, dan lainnya, siap saat tim keamanan atau pengadaan Anda meminta. Beberapa dikenakan biaya satu kali."
-supportingTitle = "Mendukung evaluasi Anda"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form, dan DPA dalam satu tanda tangan."
+download = "Unduh"
+eula = "EULA & Ketentuan Komersial"
+eulaSub = "Perangkat lunak dan ketentuan komersial self-serve."
+invoice = "Faktur"
+invoiceSub = "Faktur langganan pertama Anda."
+laterInvoice = "Tersedia setelah Anda menerima"
+laterQuote = "Tersedia setelah penawaran Anda diterbitkan"
+quote = "Penawaran"
+quoteSub = "Penawaran enterprise terperinci Anda."
+sla = "Lampiran SLA"
+slaSub = "Tingkat dukungan dan target respons."
+subprocessors = "Subprocessor"
+subprocessorsSub = "Pihak ketiga yang memproses data atas nama Anda."
+subtitle = "Dokumen kesepakatan Anda, tersedia kapan saja."
 title = "Dokumen"
-upcoming = "Mendatang"
+view = "Lihat"
 
 [portal.procurement.error]
 title = "Terjadi kesalahan"
 
 [portal.procurement.hero]
-company = "Kesepakatan enterprise Anda"
+barAria = "Tahap {{current}} dari {{total}}"
 ctaAgreement = "Tinjau & tanda tangani perjanjian"
-ctaLive = "Anda sudah live"
-ctaPayment = "Tambahkan pembayaran"
+ctaExploring = "Siapkan uji coba Anda"
 ctaQuote = "Tinjau penawaran Anda"
+ctaReviewQuote = "Tinjau penawaran"
 ctaTrial = "Buat penawaran Anda"
+documents = "Dokumen"
 eyebrow = "Pengadaan enterprise"
+eyebrowCompany = "Enterprise {{company}}"
 inviteTeammates = "Undang rekan tim"
-keyDocs = "Dokumen utama"
-nextStep = "Langkah berikutnya: {{action}}"
-notStarted = "Belum dimulai"
+licenseKey = "Key lisensi"
+liveSub = "Organisasi Anda sudah diprovisikan dan lisensi Anda aktif."
+liveTitle = "Anda sudah live di Stirling Enterprise"
+next = "Berikutnya: {{stage}}"
 open = "Buka pengadaan"
 scheduleCall = "Jadwalkan panggilan"
-setup1Sub = "Undang rekan tim Anda"
-setup1Title = "Deploy PDF Editor"
-setup2Sub = "Aktifkan pemrosesan di seluruh editor dan sumber lain"
-setup2Title = "Hubungkan PDF Processor"
-setup3Sub = "Aktifkan Security, Compliance, Routing, atau Retention saat Anda membutuhkannya"
-setup3Title = "Tambahkan kebijakan yang direkomendasikan"
+sentenceAgreement = "tinjau dan tandatangani perjanjian"
+sentenceLive = "provisioning dan peluncuran"
+sentencePayment = "purchase order dan pembayaran"
+sentenceQuote = "tinjau dan terima penawaran Anda"
+sentenceTrial = "siapkan workspace uji coba Anda"
 
 [portal.procurement.journey]
 daysLeft_one = "Sisa {{count}} hari"
 daysLeft_other = "Sisa {{count}} hari"
-engineerLabel = "Engineer solusi Anda"
-eyebrow = "Rollout Anda"
-live = "Anda sudah live di Stirling Enterprise"
-nextStep = "Langkah berikutnya: {{action}}"
-subtitle = "Engineer solusi Anda ada di setiap langkah. Satu tindakan berikutnya pada satu waktu; checklist lengkap ada di bawah."
-title = "Dari uji coba hingga live, satu jalur terpandu"
-trialTitle = "Uji coba Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Satu tanda tangan mencakup MSA, order form, EULA, dan DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Belum dapat membuat file lisensi offline — silakan coba lagi
 downloadOffline = "Download lisensi offline (.lic)"
 hint = "Tempel kunci ini ke instance self-hosted untuk mengaktifkannya, atau simpan untuk catatan Anda. Jaga tetap aman."
 label = "Kunci lisensi Anda"
+subtitle = "Aktifkan instance self-hosted dengan key ini, atau simpan untuk arsip Anda."
+title = "Key lisensi Anda"
+trialFileHint = "Ini adalah file lisensi uji coba Anda. Setelah perjanjian Anda siap, kembali dan unduh lagi — tidak seperti key lisensi online, file .lic tidak akan diperbarui sendiri."
 
 [portal.procurement.link]
 cta = "Tautkan akun"
@@ -7739,65 +8619,62 @@ description = "Langganan Anda aktif dan lisensi Anda telah diterbitkan. Tim Anda
 eyebrow = "Live"
 title = "Anda sudah live di Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Kunci uji coba, penawaran volume berkomitmen, perjanjian satu tanda tangan, pembayaran, dan buku besar dokumen Anda semuanya ada di sini setelah Anda memulai evaluasi enterprise."
-eyebrow = "Khusus Enterprise"
-talkToSales = "Bicara dengan sales"
-title = "Jalur pengadaan terbuka dengan Enterprise"
-
 [portal.procurement.milestone]
-accept = "Terima & lanjutkan"
-description = "Download PDF untuk membagikannya dengan tim Anda, kembali untuk menerima saat Anda siap, atau buat perubahan."
-download = "Download PDF"
 downloadError = "Belum dapat mendownload PDF penawaran — silakan coba lagi sebentar lagi."
-edit = "Edit penawaran"
-eyebrow = "Penawaran {{number}}"
-perYear = " / thn"
-preparedFor = "Disiapkan untuk {{company}}"
-tcv = "{{value}} total nilai kontrak"
-title = "Penawaran Anda siap"
-
-[portal.procurement.modal]
-cancel = "Batal"
-chooseFile = "Pilih file"
-close = "Tutup"
-downloadBody = "Download Anda akan segera dimulai."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "Tidak ada file yang dipilih"
-payBody = "Bayar kontrak berkomitmen Anda dengan kartu atau transfer bank melalui Stripe. Workspace Anda diprovision segera setelah pembayaran lunas."
-payCta = "Lanjutkan ke Stripe"
-payTitle = "Konfirmasi pembayaran"
-requestBodyFree = "Kami membuat ini sesuai permintaan. Konfirmasi dan engineer solusi Anda akan segera mengirimkannya."
-requestBodyPaid = "Ini adalah add-on berbayar. Konfirmasi dan engineer solusi Anda akan menentukannya serta mengirim dokumen."
-requestCta = "Minta"
-requestTitle = "Minta dokumen ini"
-signBody = "Membuka Stirling Enterprise Agreement untuk e-signature: satu tanda tangan mencakup MSA, order form, EULA, dan DPA. Kami melakukan countersign otomatis dan Anda maju ke pembayaran."
-signCta = "Buka untuk tanda tangan"
-signTitle = "Tinjau dan tanda tangani perjanjian Anda"
-uploadBody = "Kirim PO Anda kepada kami dan kami menagih sesuai ketentuan Anda. Seret PDF atau pilih file di bawah."
-uploadCta = "Upload purchase order"
-uploadTitle = "Upload purchase order Anda"
 
 [portal.procurement.payment]
 description = "Penawaran Anda diterima dan lisensi Anda sudah aktif — tim Anda dapat langsung mulai. Bayar invoice pertama saat Anda siap; Anda dapat membayar atau mendownloadnya di sini, tanpa perlu email."
+downloadAgreement = "Unduh perjanjian yang ditandatangani"
 downloadInvoice = "Download invoice"
-simulate = "Simulasikan pembayaran diterima (demo)"
+eyebrow = "Pembayaran"
 title = "Langganan dibuat"
 viewInvoice = "Lihat & bayar invoice"
 
+[portal.procurement.review]
+acceptCta = "Terima penawaran"
+annual = "Biaya tahunan (tahun 1)"
+downloadCta = "Unduh penawaran"
+poNumber = "Purchase order: {{po}}"
+renewal = "Diperpanjang pada {{amount}}/tahun setelah masa berlaku (+{{pct}}% CPI)"
+tcv = "Masa berlaku {{years}} tahun, dibayar penuh di muka: {{tcv}}"
+validUntil = "Berlaku hingga {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Tidak dapat memuat scheduler."
 fallbackLink = "Buka penjadwalan di tab baru"
+loading = "Memuat penjadwal..."
 subtitle = "Engineer solusi Anda akan memandu tim Anda melalui rollout. Pilih waktu yang sesuai untuk Anda."
 title = "Jadwalkan panggilan"
 
-[portal.procurement.status]
-action = "Perlu tindakan"
-available = "Tersedia"
-complete = "Selesai"
-pending = "Tertunda"
-request = "Atas permintaan"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Tersegel, tanpa outbound"
+back = "Kembali"
+businessName = "Nama bisnis"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Terkelola, mulai paling cepat"
+continue = "Lanjutkan"
+deployment = "Di mana harus di-deploy?"
+eula = "Saya menyetujui Stirling EULA & Ketentuan Komersial."
+fullName = "Nama lengkap"
+fullNamePlaceholder = "Nama Anda"
+invites = "Undang rekan tim · opsional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Jadwalkan panggilan"
+seats = "Orang yang menguji"
+seatsPlaceholder = "mis. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker atau Kubernetes"
+start = "Mulai uji coba"
+stepOf = "Langkah {{n}} dari {{total}}"
+subtitle = "Gratis selama 14 hari, tidak perlu kartu."
+subtitleDetails = "Beberapa detail untuk penawaran dan perjanjian Anda."
+talkFirst = "Lebih suka bicara dulu?"
+title = "Siapkan uji coba Anda"
+viewEula = "Baca"
+workEmail = "Email kerja"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Memperpanjang menambahkan 7 hari dan memberi tahu engineer solusi Anda."
@@ -7808,20 +8685,6 @@ maxed = "Maksimal"
 subtitle = "Uji coba gratis Anda berjalan hingga {{date}}. Tidak perlu kartu."
 title = "Uji coba Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Harga volume berkomitmen, SSO + SCIM + RBAC seluruh org, audit immutable 90 hari, dan SE khusus."
-homeCta = "Mulai Uji Coba →"
-homeHeadline = "Proses jutaan PDF."
-
-[portal.recentActivity]
-title = "Aktivitas terbaru"
-viewAll = "Lihat semua"
-
-[portal.recentActivity.empty]
-description = "Eksekusi pipeline, deploy, dan event agen akan muncul di sini."
-title = "Belum ada apa pun di sini"
-
 [portal.search]
 ariaLabel = "Cari"
 placeholder = "Cari Stirling — endpoint, pipeline, dokumen…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Tautan akun"
 
-[portal.shell.header]
-accountFallback = "Akun"
-accountMenu = "Menu akun"
-darkMode = "Mode gelap"
-lightMode = "Mode terang"
-search = "Cari"
-searchPlaceholder = "Cari…"
-signOut = "Keluar"
-switchToDark = "Beralih ke tema gelap"
-switchToLight = "Beralih ke tema terang"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumen"
 linkAccount = "Tautkan akun Stirling"
-planEditor = "Paket Editor"
-planEnterprise = "Paket Enterprise"
-planProcessor = "Paket Processor"
 primaryNav = "Navigasi utama"
 switchApp = "Ganti aplikasi"
 
+[portal.shell.topbar]
+closeNav = "Tutup navigasi"
+openNav = "Buka navigasi"
+search = "Cari"
+
 [portal.sources]
 subtitle = "Koneksi input yang dapat digunakan ulang untuk memasukkan dokumen ke Stirling. Konfigurasi koneksi sekali, lalu referensikan dari sejumlah kebijakan. Klik baris untuk konfigurasinya dan kebijakan mana yang menggunakannya."
 title = "Sumber"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Hubungkan sumber"
 
+[portal.sources.builder]
+back = "Kembali ke sumber"
+backToTypes = "Semua jenis sumber"
+cancel = "Batal"
+chooseHint = "Pilih dari mana dokumen berasal. Konektor yang diabu-abukan sedang disiapkan."
+comingSoon = "Segera hadir"
+comingSoonHeading = "Segera hadir"
+create = "Buat sumber"
+createTitle = "Hubungkan sumber"
+delete = "Hapus"
+editTitle = "Edit sumber"
+enabled = "Diaktifkan"
+save = "Simpan perubahan"
+
+[portal.sources.builder.folderAccess]
+description = "Otomatisasi folder hanya dapat menggunakan folder yang diizinkan administrator. Tambahkan di pengaturan Akses Folder, lalu coba lagi."
+openSettings = "Pengaturan Akses Folder"
+title = "Folder ini tidak diizinkan"
+
 [portal.sources.delete]
 body = "Hapus \"{{name}}\"? Tindakan ini tidak dapat dibatalkan. Kebijakan yang mereferensikannya perlu diperbarui."
 cancel = "Batal"
 confirm = "Hapus"
 title = "Hapus sumber?"
 
-[portal.sources.detail]
-closeAriaLabel = "Tutup detail"
-delete = "Hapus sumber"
-docs24h = "24 jam terakhir"
-docs30d = "30 hari terakhir"
-docsTotal = "Total terlihat"
-docsTrend = "Dokumen selama 30 hari terakhir"
-documents = "Dokumen"
-edit = "Edit"
-notReferenced = "Tidak direferensikan oleh kebijakan apa pun, jadi aman untuk dihapus."
-pause = "Jeda"
-resume = "Lanjutkan"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Digunakan oleh"
-
 [portal.sources.empty]
 description = "Hubungkan folder (dan, segera, cloud storage) agar kebijakan Anda memiliki tempat untuk menarik dokumen."
 title = "Belum ada sumber yang terhubung"
@@ -7899,18 +8754,57 @@ inUse = "Digunakan"
 total = "Koneksi"
 unused = "Tidak digunakan"
 
+[portal.sources.networkFields.connection]
+helperText = "Koneksi tersimpan dengan alamat server dan kredensial. Digunakan ulang oleh setiap sumber yang mereferensikannya."
+label = "Koneksi"
+
+[portal.sources.networkFields.directory]
+helperText = "Folder di server untuk dipolling, relatif terhadap home login atau root share. Biarkan kosong untuk root."
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume menghapus setiap file dari server setelah setiap kebijakan memprosesnya."
+label = "Mode baca"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: proses setiap file sekali"
+snapshot = "Snapshot: baca ulang folder setiap proses"
+
+[portal.sources.networkFields.recursive]
+label = "Kedalaman folder"
+
+[portal.sources.networkFields.recursive.options]
+all = "Sertakan subfolder"
+top = "Hanya level teratas"
+
 [portal.sources.status]
 active = "Aktif"
 disabled = "Dinonaktifkan"
 unused = "Tidak digunakan"
 
 [portal.sources.table]
+documents = "Dokumen"
 source = "Sumber"
 status = "Status"
 usedBy = "Kebijakan"
 
+[portal.sources.types.box]
+description = "Ambil dokumen dari folder Box yang sudah dibagikan tim Anda."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Ambil dokumen dari folder Dropbox bersama."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumen yang telah diproses tim Anda di editor, di seluruh proses kebijakan dan AI."
 label = "Editor"
+noPolicies = "Belum ada kebijakan yang dijalankan dari editor."
+
+[portal.sources.types.email]
+description = "Ubah lampiran yang dikirim ke mailbox khusus menjadi dokumen."
+label = "Kotak masuk email"
 
 [portal.sources.types.folder]
 description = "Pantau direktori di server untuk dokumen baru."
@@ -7943,25 +8837,80 @@ label = "Kedalaman folder"
 all = "Sertakan subfolder"
 top = "Hanya level teratas"
 
+[portal.sources.types.ftp]
+description = "Polling folder server FTP atau FTPS untuk dokumen baru."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Ambil dokumen dari folder Google Drive bersama."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Pantau SMB network share untuk dokumen baru."
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "Pantau folder OneDrive untuk dokumen baru."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Ambil dokumen dari bucket Amazon S3 atau yang kompatibel dengan S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Koneksi tersimpan yang menyimpan bucket dan kredensial. Digunakan ulang oleh setiap sumber dan output pipeline yang mereferensikannya."
+label = "Koneksi"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume menghapus setiap objek dari bucket setelah setiap kebijakan memprosesnya."
+label = "Mode baca"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: proses setiap objek sekali"
+snapshot = "Snapshot: baca ulang bucket setiap proses"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Hanya objek yang key-nya dimulai dengan prefix ini yang diproses."
+label = "Prefix key"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Polling folder drop SFTP untuk dokumen baru."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Ambil dokumen dari pustaka dokumen SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Sumber"
 
+[portal.sources.types.webhook]
+createNote = "URL pengiriman dan secret penandatanganan dibuat saat Anda membuat webhook ini. Pengirim melakukan POST dokumen ke URL tersebut dan kebijakan yang mereferensikan berjalan saat tiba."
+description = "Terima dokumen melalui HTTP POST bertanda tangan dari sistem eksternal mana pun."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL pengiriman"
+secretNote = "Secret penandatanganan ditampilkan sekali, saat webhook dibuat. Buat ulang sumber untuk menggantinya."
+
+[portal.sources.types.webhook.reveal]
+copy = "Salin"
+done = "Selesai"
+secret = "Secret penandatanganan"
+secretHelp = "Tandatangani body mentah setiap pengiriman dengan key ini (HMAC-SHA256) dan kirim sebagai header X-Stirling-Signature."
+secretWarning = "Salin secret penandatanganan sekarang. Demi keamanan Anda, ini hanya ditampilkan sekali dan tidak dapat diambil lagi nanti."
+title = "Webhook dibuat"
+url = "URL pengiriman"
+usage = "POST setiap dokumen sebagai body request mentah ke URL pengiriman dengan jenis konten binary (application/pdf atau application/octet-stream). Kebijakan yang mereferensikan berjalan otomatis saat tiba."
+
 [portal.sources.wizard]
-back = "Kembali"
-cancel = "Batal"
-continue = "Lanjutkan"
-editTitle = "Edit sumber"
 name = "Nama"
 namePlaceholder = "mis. Penerimaan klaim"
-save = "Simpan perubahan"
-subtitle = "Langkah {{current}} dari {{total}} · {{label}}"
-title = "Hubungkan sumber"
 type = "Tipe"
 
-[portal.sources.wizard.steps]
-chooseType = "Pilih tipe"
-configure = "Konfigurasi"
-review = "Tinjau & hubungkan"
+[portal.stepModal]
+close = "Tutup"
 
 [portal.usage]
 managePayment = "Kelola Pembayaran"
@@ -8021,16 +8970,9 @@ summary = "Memiliki tim — mengelola sumber daya anggota dan konfigurasi bersam
 2 = "Akses portal melalui kebijakan default"
 3 = "Semua yang dapat dilakukan Anggota"
 
-[portal.welcome]
-ariaLabel = "Selamat datang di Stirling PDF"
-badge = "Open-source"
-installEditor = "Instal Editor"
-inviteTeammates = "Undang rekan tim"
-openInBrowser = "Buka di browser"
-perks = "Gratis selamanya · Dapat self-host"
-subtitle = "PDF Editor paling aman di dunia gratis untuk tim dari semua ukuran. Termasuk 60+ operasi PDF dan SSO."
-title = "Selamat datang di"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Tidak terbatas"
 
 [printFile]
 title = "Cetak File"
@@ -8613,6 +9555,14 @@ text = "Putar halaman PDF Anda searah atau berlawanan arah jarum jam dalam kelip
 [rotate.tooltip.header]
 title = "Ikhtisar Pengaturan Rotasi"
 
+[ruler]
+clearAll = "Hapus semua"
+hideAllLabels = "Sembunyikan semua label"
+hideSmallLabels = "Sembunyikan label kecil"
+physicalValues = "Fisik"
+scaled = "Diskalakan"
+showAllLabels = "Tampilkan semua label"
+
 [sanitize]
 desc = "Hapus elemen yang berpotensi berbahaya dari file PDF."
 sanitizationResults = "Hasil Sanitasi"
@@ -8654,31 +9604,45 @@ label = "Hapus Metadata XMP"
 [sanitize.steps]
 settings = "Pengaturan"
 
-[sanitizePdf]
-tags = "bersih, terlindungi, aman, menghilangkan ancaman"
-
 [sanitizePDF]
 title = "Bersihkan PDF"
 
+[sanitizePdf]
+tags = "bersih, terlindungi, aman, menghilangkan ancaman"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Sesuaikan skala halaman"
 
+[scaleSettings]
+activeScale = "Skala Aktif"
+apply = "Terapkan Skala"
+applyCalibration = "Terapkan Kalibrasi"
+calculatedScale = "Skala terhitung"
+calibrate = "Kalibrasi"
+calibrating = "Mengkalibrasi"
+calibrationDistanceRequired = "Masukkan jarak dunia nyata yang lebih besar dari nol"
+calibrationInvalid = "Tidak dapat menghitung skala dari pengukuran ini"
+calibrationPaperDistance = "Jarak halaman terukur: {{distance}}"
+calibrationTitle = "Kalibrasi Skala"
+calibrationTooltip = "Ukur jarak yang diketahui untuk menghitung skala secara otomatis"
+customScale = "Skala Kustom"
+noneSet = "Tidak ada skala kustom yang diatur"
+presets = "Skala Preset"
+ratio = "Rasio Skala"
+ratioHelp = "Rasio: 1 unit halaman = X unit dunia nyata"
+ratioPlaceholder = "mis., 100"
+ratioPositive = "Rasio harus lebih besar dari nol"
+ratioRequired = "Rasio wajib diisi"
+realDistance = "Jarak dunia nyata"
+realDistancePlaceholder = "mis., 5"
+reset = "Atur Ulang ke Default"
+unit = "Unit"
+unitInvalid = "Unit tidak valid: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Ambang Batas Sudut:"
-10 = "Menetapkan ukuran batas yang ditambahkan dan dihapus untuk mencegah batas putih pada output (default: 1)."
-2 = "Menetapkan sudut absolut minimum yang diperlukan agar gambar dapat diputar (default: 10)."
-3 = "Toleransi:"
-4 = "Menentukan kisaran variasi warna di sekitar perkiraan warna latar belakang (default: 30)."
-5 = "Area Minimum:"
-6 = "Menetapkan ambang batas area minimum untuk foto (default: 10000)."
-7 = "Area Kontur Minimum:"
-8 = "Menetapkan ambang batas area kontur minimum untuk foto"
-9 = "Ukuran Batas:"
-
 [scannerImageSplit]
 submit = "Ekstrak Pindai Gambar"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Apa fungsinya"
 whatThisDoesDesc = "Secara otomatis menemukan dan mengekstrak tiap foto dari halaman hasil pindai atau gambar komposit—tanpa pemotongan manual."
 whenToUse = "Kapan digunakan"
 
+[ScannerImageSplit.selectText]
+1 = "Ambang Batas Sudut:"
+10 = "Menetapkan ukuran batas yang ditambahkan dan dihapus untuk mencegah batas putih pada output (default: 1)."
+2 = "Menetapkan sudut absolut minimum yang diperlukan agar gambar dapat diputar (default: 10)."
+3 = "Toleransi:"
+4 = "Menentukan kisaran variasi warna di sekitar perkiraan warna latar belakang (default: 30)."
+5 = "Area Minimum:"
+6 = "Menetapkan ambang batas area minimum untuk foto (default: 10000)."
+7 = "Area Kontur Minimum:"
+8 = "Menetapkan ambang batas area kontur minimum untuk foto"
+9 = "Ukuran Batas:"
+
 [search]
 noResults = "Tidak ada hasil"
 placeholder = "Masukkan kata pencarian..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Server Stirling-PDF Anda sedang offline dan \"{{endpo
 [session]
 expired = "Sesi Anda telah kedaluwarsa. Silakan muat ulang halaman dan coba lagi."
 
-[sessionManagement.tooltip]
-header = "Mengelola Sesi Penandatanganan"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Peserta baru ditambahkan di akhir urutan penandatanganan"
-bullet2 = "Tidak dapat menambah peserta setelah sesi difinalisasi"
-bullet3 = "Setiap peserta menerima pemberitahuan saat gilirannya"
-description = "Anda dapat menambahkan lebih banyak peserta ke sesi aktif kapan saja sebelum finalisasi."
-title = "Menambahkan Peserta"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalisasi penuh</b>: Semua peserta telah menandatangani"
-bullet2 = "<b>Finalisasi parsial</b>: Beberapa peserta belum menandatangani"
-bullet3 = "Peserta yang belum menandatangani akan dikecualikan dari dokumen final"
-bullet4 = "Setelah difinalisasi, Anda dapat memuat PDF bertanda tangan ke file aktif"
-description = "Finalisasi menggabungkan semua tanda tangan menjadi satu PDF yang ditandatangani. Tindakan ini tidak dapat dibatalkan."
-title = "Finalisasi Sesi"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Tidak dapat menghapus peserta yang sudah menandatangani"
-bullet2 = "Peserta yang dihapus tidak lagi menerima pemberitahuan"
-bullet3 = "Urutan penandatanganan menyesuaikan secara otomatis"
-description = "Peserta dapat dihapus dari sesi sebelum mereka menandatangani."
-title = "Menghapus Peserta"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Setiap tanda tangan diterapkan secara berurutan ke PDF"
-bullet2 = "Penanda tangan berikutnya dapat melihat tanda tangan sebelumnya"
-bullet3 = "Kritis untuk alur persetujuan dan rantai penjagaan hukum"
-description = "Urutan yang Anda tentukan saat membuat sesi menentukan siapa yang menandatangani terlebih dahulu."
-title = "Urutan Tanda Tangan"
-
 [settings]
 close = "Tutup"
 
+[settings.ai]
+documents = "Dokumen & RAG"
+general = "Umum"
+limits = "Batas & Performa"
+models = "Model & Penyedia"
+title = "AI"
+
 [settings.configuration]
 advanced = "Lanjutan"
 database = "Database"
 endpoints = "Endpoint"
 features = "Fitur"
+folderAccess = "Akses Folder"
 mcp = "MCP Server"
 storageSharing = "Penyimpanan File & Berbagi"
 systemSettings = "Pengaturan Sistem"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Editor PDF default"
 defaultPdfEditorActive = "Stirling PDF adalah editor PDF default Anda"
 defaultPdfEditorChecking = "Memeriksa..."
 defaultPdfEditorInactive = "Aplikasi lain disetel sebagai default"
+defaultPdfEditorRemind = "Ingatkan saya untuk mengatur sebagai default"
+defaultPdfEditorRemindDescription = "Tampilkan banner saat Stirling PDF bukan aplikasi PDF default Anda."
 defaultPdfEditorSet = "Sudah Default"
 defaultStartupView = "Tampilan default saat aplikasi dibuka"
 defaultStartupViewDescription = "Pilih tab yang aktif di kolom kiri saat aplikasi dimulai"
@@ -8817,9 +9771,18 @@ languageDescription = "Pilih bahasa tampilan"
 logout = "Keluar"
 setAsDefault = "Jadikan Default"
 theme = "Tema"
+themeAccent = "Warna aksen"
+themeAccentCustom = "Warna kustom"
+themeAccentCustomHint = "Kustom (default disarankan)"
+themeAccentDark = "Warna aksen mode gelap"
+themeAccentDefault = "Default"
+themeAccentDefaultHint = "Tema default (disarankan)"
+themeAccentDescription = "Tombol, tautan, dan sorotan mengikutinya, dan memberi semburat halus pada aplikasi. Mode terang dan gelap masing-masing memilikinya sendiri. Sistem menggunakan mana pun yang aktif."
+themeAccentLight = "Warna aksen mode terang"
 themeDark = "Gelap"
 themeDescription = "Beralih antara mode terang dan gelap"
 themeLight = "Terang"
+themeReset = "Pulihkan tema ke default"
 themeSystem = "System"
 title = "Umum"
 user = "Pengguna"
@@ -8833,6 +9796,12 @@ intro = "Aktifkan autentikasi pengguna, manajemen tim, dan fitur ruang kerja unt
 learnMore = "Pelajari lebih lanjut di dokumentasi"
 title = "Untuk Administrator Sistem"
 
+[settings.general.loginLanding]
+description = "Pilih aplikasi mana yang terbuka saat Anda masuk ke Stirling Cloud."
+editor = "Editor"
+processor = "Pemroses"
+title = "Setelah masuk"
+
 [settings.general.mode]
 fullscreen = "Layar penuh"
 sidebar = "Bilah sisi"
@@ -9041,6 +10010,11 @@ security = "Keamanan"
 telegram = "Telegram"
 title = "Keamanan & Autentikasi"
 
+[settings.signOut]
+confirm = "Apakah Anda yakin ingin keluar?"
+submit = "Keluar"
+title = "Keluar"
+
 [settings.team]
 title = "Tim"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Unggah ke Server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "klik di sini"
+fallback = "Jika tidak terbuka secara otomatis,"
+opening = "Membuka Swagger UI di tab baru..."
 tags = "api,dokumentasi,swagger,endpoint,pengembangan"
 title = "Dokumentasi API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Pilih file di File Aktif untuk menjalankan alat ini"
 singleFileScope = "Hanya diterapkan pada: {{fileName}}"
 viewerMode = "Beralih ke editor file untuk memilih beberapa file."
 
+[toolFormat]
+ANY = "file apa pun"
+CBR = "arsip buku komik (CBR)"
+CBZ = "arsip buku komik (CBZ)"
+CSV = "file CSV"
+EBOOK = "ebook"
+EMAIL = "email"
+EXCEL = "spreadsheet"
+HTML = "halaman web"
+IMAGE = "gambar"
+JAVASCRIPT = "file JavaScript"
+JSON = "file JSON"
+MARKDOWN = "file Markdown"
+NONE = "tidak ada file"
+PCL = "file cetak PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF yang dilindungi kata sandi"
+POSTSCRIPT = "file PostScript"
+PPT = "presentasi"
+TEXT = "file teks"
+VIDEO = "video"
+WORD = "dokumen Word"
+XML = "file XML"
+XPS = "dokumen XPS"
+ZIP = "arsip ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Kembali ke semua alat"
 collapse = "Ciutkan panel"
 expand = "Perluas panel"
 goBack = "Kembali"
+pdfTools = "Alat PDF"
 placeholder = "Pilih alat untuk memulai"
 premiumFeature = "Fitur premium:"
+searchTools = "Cari alat"
 toolsHeader = "Alat"
 viewAllTools = "Lihat semua alat"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Tidak ada alat yang ditemukan"
 quickAccess = "AKSES CEPAT"
 searchPlaceholder = "Cari alat..."
 
-[toolPicker.categories]
-advancedTools = "Alat Lanjutan"
-recommendedTools = "Alat Rekomendasi"
-standardTools = "Alat Standar"
-
 [toolPicker.subcategories]
 advancedFormatting = "Pemformatan Lanjutan"
 automation = "Otomatisasi"
@@ -9950,16 +10950,31 @@ title = "Pengguna"
 you = "(Anda)"
 
 [users.action]
+cancelInvite = "Batalkan undangan"
 deleteTeam = "Hapus tim"
 disableMfa = "Reset MFA"
 move = "Pindahkan ke tim"
 reinstate = "Aktifkan kembali"
 remove = "Hapus dari org"
+removeTeam = "Hapus dari tim"
 rename = "Rename tim"
 resetPw = "Reset password"
 suspend = "Tangguhkan"
 unlock = "Buka kunci akun"
 
+[users.activity]
+daysAgo = "{{count}} hr lalu"
+hoursAgo = "{{count}} jam lalu"
+justNow = "Baru saja"
+minutesAgo = "{{count}} mnt lalu"
+monthsAgo_one = "{{count}} bulan lalu"
+monthsAgo_other = "{{count}} bulan lalu"
+never = "Tidak pernah"
+weeksAgo_one = "{{count}} minggu lalu"
+weeksAgo_other = "{{count}} minggu lalu"
+yearsAgo_one = "{{count}} tahun lalu"
+yearsAgo_other = "{{count}} tahun lalu"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Menyetujui kebijakan"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Batalkan undangan ke {{email}}? Mereka tidak akan dapat bergabung dengan tautan saat ini."
+cancelInviteTitle = "Batalkan undangan"
 deleteTeamBody = "Hapus tim {{name}}? Tim harus kosong terlebih dahulu - pindahkan anggotanya ke tim lain, dan tidak boleh masih memiliki konfigurasi integrasi apa pun."
 deleteTeamTitle = "Hapus tim"
 disableMfaBody = "Hapus pendaftaran MFA {{name}}? Mereka akan menyiapkannya lagi saat login berikutnya jika diperlukan."
 disableMfaTitle = "Reset MFA"
 removeBody = "Hapus {{name}} secara permanen dari organisasi? Tindakan ini tidak dapat dibatalkan."
+removeTeamBody = "Hapus {{name}} dari tim? Mereka tetap memiliki akun tetapi kehilangan akses ke sumber daya tim ini."
 removeTitle = "Hapus anggota"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nama pengguna"
 usernameError = "Nama pengguna harus minimal 3 karakter"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Diundang oleh {{who}}"
+cancel = "Batal"
+count = "{{count}} tertunda"
+desc = "Orang yang diundang yang belum bergabung. Mereka menempati satu kursi hingga menerima."
+expiresInDays_one = "Kedaluwarsa dalam {{count}} hari"
+expiresInDays_other = "Kedaluwarsa dalam {{count}} hari"
+expiresToday = "Kedaluwarsa hari ini"
+title = "Undangan tertunda"
+
 [users.loadError]
 description = "Terjadi kesalahan saat menghubungi backend, atau Anda tidak memiliki akses. Coba lagi."
 title = "Tidak dapat memuat anggota"
@@ -10212,9 +11240,11 @@ title = "Lampiran"
 
 [viewer.bookmarks]
 bookmarkTitle = "Judul bookmark"
+bookmarkTitleRequired = "Judul bookmark wajib diisi"
 closeSidebar = "Tutup bilah sisi bookmark"
 collapseAll = "Ciutkan semua bookmark"
 expandAll = "Luaskan semua bookmark"
+searchPlaceholder = "Cari bookmark"
 
 [viewer.comments]
 addComment = "Tambahkan komentar"
@@ -10605,30 +11635,6 @@ title = "Teks Tanda Air"
 image = "Gambar"
 text = "Teks"
 
-[wetSignature.tooltip]
-header = "Metode Pembuatan Tanda Tangan"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Sesuaikan warna dan ketebalan pena"
-bullet2 = "Hapus dan gambar ulang hingga sesuai"
-bullet3 = "Berfungsi pada perangkat sentuh (tablet, ponsel)"
-description = "Buat tanda tangan tulisan tangan menggunakan mouse atau layar sentuh Anda. Terbaik untuk tanda tangan yang personal dan autentik."
-title = "Gambar Tanda Tangan"
-
-[wetSignature.tooltip.type]
-bullet1 = "Pilih dari berbagai font"
-bullet2 = "Sesuaikan ukuran dan warna teks"
-bullet3 = "Sangat cocok untuk tanda tangan standar"
-description = "Hasilkan tanda tangan dari teks yang diketik. Cepat dan konsisten, cocok untuk dokumen bisnis."
-title = "Ketik Tanda Tangan"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Mendukung PNG, JPG, dan format gambar lainnya"
-bullet2 = "Latar belakang transparan direkomendasikan untuk hasil terbaik"
-bullet3 = "Gambar akan diubah ukurannya agar sesuai dengan area tanda tangan"
-description = "Unggah gambar tanda tangan yang sudah dibuat. Ideal jika Anda memiliki tanda tangan hasil pemindaian atau logo perusahaan."
-title = "Unggah Gambar Tanda Tangan"
-
 [workbenchBar]
 activeFiles = "File Aktif"
 annotations = "Anotasi"
@@ -10652,6 +11658,7 @@ redact = "Redaksi"
 rotateLeft = "Putar Kiri"
 rotateRight = "Putar Kanan"
 ruler = "Penggaris / Ukur"
+rulerSettings = "Pengaturan Skala"
 save = "Simpan"
 saveAll = "Simpan Semua"
 saveAs = "Simpan Sebagai"
diff --git a/frontend/editor/public/locales/it-IT/translation.toml b/frontend/editor/public/locales/it-IT/translation.toml
index 005bfdb22d..9b9a0e333e 100644
--- a/frontend/editor/public/locales/it-IT/translation.toml
+++ b/frontend/editor/public/locales/it-IT/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "file selezionati"
 font = "Carattere"
 fontSizeTooltip = "Dimensione del testo del numero di pagina in punti. Numeri maggiori creano testo più grande."
 fontTypeTooltip = "Famiglia di font per i numeri di pagina. Scegli in base allo stile del documento."
-genericSubmit = "Invia"
 green = "Verde"
 help = "Aiuto"
-imgPrompt = "Scegli immagine/i"
 incorrectPasswordMessage = "La password attuale non è corretta."
 info = "Info"
 invalidUndoData = "Impossibile annullare: dati operazione non validi"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Accordo di accesso"
 logOut = "Esci"
 marginTooltip = "Distanza tra il numero di pagina e il bordo della pagina."
 moreOptions = "Altre opzioni"
-multiPdfPrompt = "Scegli 2 o più PDF"
 never = "Mai"
 no = "No"
 noFileSelected = "Nessun file selezionato. Caricane uno."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordine delle pagine (inserisci una lista di numeri separati d
 pages = "Pagine"
 pageSelectionPrompt = "Selezione pagina personalizzata (inserisci un elenco separato da virgole di numeri di pagina 1,5,6 o funzioni come 2n+1) :"
 password = "Password"
-pdfPrompt = "Scegli PDF"
 pin = "Blocca file (mantieni attivo dopo l'esecuzione dello strumento)"
 pro = "Pro"
 processingComplete = "Il tuo file è pronto."
@@ -356,6 +352,7 @@ text = "Questi permessi controllano ciò che gli utenti possono fare con il PDF.
 title = "Cambia Permessi"
 
 [addStamp]
+preview = "Anteprima timbro"
 tags = "timbro,marchio,sigillo,approvato,rifiutato,riservato,strumento per timbro,timbro in gomma,timbro data,timbro di approvazione,ricevuto,nullo,copia,originale"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Download manuali: fai clic sui link e inserisci i file nella cart
 noLanguages = "Nessuna lingua tessdata trovata nella directory configurata."
 permissionNotice = "Il percorso tessdata non è scrivibile. I download verranno aperti nel browser; salva manualmente i file .traineddata nella cartella tessdata."
 
+[admin.settings.ai.documents]
+description = "Configura il modello di embedding e le impostazioni di recupero usate per rispondere a domande sui documenti. Applicato al motore AI al salvataggio."
+title = "Documenti e RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Lascia vuoto per usare le credenziali di ambiente del motore. Si applica alle distribuzioni self-hosted con motore singolo."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Salvata - lascia vuoto per mantenere la chiave corrente"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL di base dell'endpoint di embeddings compatibile con OpenAI / Ollama, es. http://ollama:11434/v1. Deve puntare a un endpoint interno attendibile (sensibile a SSRF)."
+label = "URL di base embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nome del modello di embedding. Testo libero; i suggerimenti sono solo indicazioni."
+label = "Modello di embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Provider usato per trasformare il testo del documento in embedding vettoriali."
+label = "Provider di embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Numero massimo di ricerche di recupero che l'agente può eseguire per richiesta."
+label = "Ricerche max"
+
+[admin.settings.ai.documents.reindexNote]
+body = "La modifica del modello di embedding ha effetto immediato, ma i documenti indicizzati con il modello precedente devono essere reindicizzati affinché la ricerca restituisca risultati corretti."
+title = "Reindicizzazione richiesta"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Se hai modificato il modello di embedding, reindicizza i documenti esistenti affinché la ricerca usi il nuovo modello."
+
+[admin.settings.ai.documents.topK]
+description = "Numero di blocchi più pertinenti recuperati per ricerca."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Connetti Stirling al motore AI Python e scegli quali funzionalità AI esporre. Le modifiche si applicano al riavvio."
+title = "Motore AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Attiva o disattiva singole funzionalità AI. Le funzionalità disabilitate sono nascoste nell'app."
+title = "Funzionalità"
+
+[admin.settings.ai.general.enabled]
+description = "Interruttore principale. Quando è disattivato, non sono disponibili strumenti AI, agenti o chiamate al motore."
+label = "Abilita AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Assistente conversazionale per lavorare con i PDF."
+label = "Assistente chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Categorizza automaticamente i documenti per tipo o contenuto."
+label = "Classificazione documenti"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Genera un nuovo PDF (es. da HTML) tramite un agente AI."
+label = "Crea PDF da prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Fai domande e ottieni risposte basate su un documento caricato."
+label = "Domande sui documenti"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Esamina i documenti per individuare errori matematici e numerici."
+label = "Revisore matematico"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Aggiungi commenti di revisione e annotazioni generati dall'AI a un PDF."
+label = "Agente commenti PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Timeout per operazioni dell'agente più pesanti, come la generazione di documenti."
+label = "Timeout operazioni lunghe (secondi)"
+
+[admin.settings.ai.general.note]
+body = "Il motore AI viene eseguito come servizio separato. Il suo segreto condiviso"
+body2 = "è impostato tramite una variabile di ambiente del container. Le API key dei provider possono essere inserite in queste pagine o fornite come variabili di ambiente del motore; le chiavi inserite qui vengono inviate al motore al salvataggio."
+title = "Informazioni sul motore AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Timeout per le risposte chat in streaming (token per token)."
+label = "Timeout stream (secondi)"
+
+[admin.settings.ai.general.test]
+button = "Test connessione"
+failBody = "Il motore AI non ha risposto. Controlla l'URL, che il container del motore sia in esecuzione e che l'AI sia abilitata (dopo l'abilitazione è necessario un riavvio)."
+failTitle = "Motore AI non raggiungibile"
+okBody = "Il motore AI ha risposto a un controllo di integrità."
+okTitle = "Motore AI raggiungibile"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Timeout per le richieste AI standard al motore."
+label = "Timeout richiesta (secondi)"
+
+[admin.settings.ai.general.url]
+description = "URL interno del motore AI Python, es. http://stirling-pdf-engine:5001."
+label = "URL motore AI"
+
+[admin.settings.ai.limits]
+description = "Limiti di protezione per quanto lavoro possono eseguire le richieste AI e quante possono essere eseguite contemporaneamente. Applicati al motore AI al salvataggio."
+title = "Limiti e prestazioni"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Limite di protezione: rifiuta le richieste AI il cui testo estratto supera questa lunghezza."
+label = "Caratteri max per richiesta"
+
+[admin.settings.ai.limits.maxPages]
+description = "Limite di protezione: rifiuta le richieste AI oltre questo numero di pagine PDF."
+label = "Pagine max per richiesta"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Numero massimo di chiamate al modello simultanee in corso sull'intero motore."
+label = "Concorrenza max modello"
+
+[admin.settings.ai.models]
+description = "Scegli il provider LLM e i modelli smart/veloci usati dal motore AI. Applicato al motore AI al salvataggio."
+title = "Modelli e provider"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Lascia vuoto per usare le credenziali di ambiente del motore. Si applica alle distribuzioni self-hosted con motore singolo."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Salvata - lascia vuoto per mantenere la chiave corrente"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL di base dell'endpoint compatibile con OpenAI / Ollama, es. http://ollama:11434/v1."
+label = "URL di base provider"
+warning = "L'URL di base deve puntare a un endpoint interno attendibile. Il motore effettuerà richieste server-side verso di esso, quindi un valore non attendibile è sensibile a SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Token di output massimi per il modello veloce."
+label = "Token max modello veloce"
+
+[admin.settings.ai.models.fastModel]
+description = "Modello più economico e veloce per attività leggere. Testo libero; i suggerimenti sono solo indicazioni."
+label = "Modello veloce"
+
+[admin.settings.ai.models.provider]
+description = "Con quale provider LLM comunica il motore."
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Token di output massimi per il modello smart."
+label = "Token max modello smart"
+
+[admin.settings.ai.models.smartModel]
+description = "Modello ad alta capacità per ragionamenti complessi. Testo libero; i suggerimenti sono solo indicazioni."
+label = "Modello smart"
+
+[admin.settings.ai.saved]
+body = "Le modifiche vengono inviate automaticamente al motore AI."
+bodyNoPush = "Impostazioni salvate. Verranno applicate la prossima volta che il motore AI caricherà la sua configurazione."
+title = "Impostazioni AI salvate"
+
 [admin.settings.badge]
 clickToUpgrade = "Fai clic per vedere i dettagli del piano"
 
@@ -938,6 +1094,25 @@ label = "Rigenera all'avvio"
 description = "Numero di giorni di validità del certificato"
 label = "Validità certificato (giorni)"
 
+[admin.settings.folderAccess]
+description = "Directory da cui le sorgenti cartella e gli output cartella possono leggere e in cui possono scrivere. Questo è un confine di sicurezza: le automazioni non possono mai puntare a un percorso del server fuori da questo elenco."
+securityNote = "Lascia vuoto per disabilitare completamente sorgenti e output cartella. La directory di configurazione di Stirling è sempre vietata."
+title = "Accesso alle cartelle"
+
+[admin.settings.folderAccess.implied]
+description = "Queste directory gestite da Stirling sono sempre consentite e non possono essere modificate qui."
+serverStorage = "Archiviazione file del server"
+title = "Sempre consentite"
+watchedFolder = "Cartella monitorata della pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Aggiungi"
+empty = "Nessuna cartella consentita. Le sorgenti e gli output cartella sono attualmente disabilitati."
+hint = "Inserisci percorsi assoluti, ad esempio /data/inbox."
+label = "Radici cartella consentite"
+placeholder = "/data/inbox"
+remove = "Rimuovi radice cartella"
+
 [admin.settings.general]
 description = "Configura le impostazioni applicative a livello di sistema, incluse personalizzazione e comportamento predefinito."
 system = "Sistema"
@@ -1842,6 +2017,15 @@ export = "Esporta"
 accessDenied = "Accesso negato"
 insufficientPermissions = "Non hai l'autorizzazione per eseguire questa azione."
 
+[auth.callback]
+completing = "Completamento autenticazione"
+invalidToken = "Accesso OAuth non riuscito - token non valido."
+missingToken = "Accesso OAuth non riuscito - nessun token ricevuto."
+oauthFailed = "Accesso OAuth non riuscito. Riprova."
+pleaseWait = "Attendi mentre completiamo l'accesso."
+signedOut = "Sei stato disconnesso. Accedi di nuovo."
+windowMayClose = "Puoi chiudere questa finestra al termine."
+
 [auth.displayName]
 guest = "Ospite"
 user = "Utente"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Protegge i documenti PDF rimuovendo contenuti potenzialmen
 description = "Questo strumento rinomina automaticamente i file PDF in base al loro contenuto. Analizza il documento per trovare il titolo più adatto dal testo."
 tags = "rilevamento automatico,basato sull'intestazione,organizza,rietichetta,rinomina automatica,rinomina intelligente,rinomina in base al contenuto,nome file,denominazione file,rileva titolo"
 
+[autoRotate]
+submit = "Rotazione automatica"
+tags = "rotazione automatica,correggi orientamento,capovolto,di lato,raddrizza,orienta,rileva orientamento,correggi rotazione,orientamento automatico,scansionato,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Soglia di confidenza"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Solo OCR"
+text = "Solo testo"
+title = "Metodo di rilevamento"
+
+[autoRotate.error]
+failed = "Si è verificato un errore durante la rotazione automatica del PDF."
+
+[autoRotate.inferUndetected]
+title = "Ruota pagine a bassa confidenza per uniformarle"
+
+[autoRotate.report]
+applied = "{{degrees}}° in senso orario"
+confidenceValue = "Confidenza {{value}}"
+noChange = "Nessuna modifica"
+pageLabel = "Pagina {{number}}"
+summary = "{{rotated}} di {{total}} pagine ruotate, {{unchanged}} lasciate così come sono"
+title = "Report di rilevamento"
+
+[autoRotate.report.method]
+inferred = "Uniformata"
+none = "Saltata"
+osd = "OCR"
+text = "Testo"
+
+[autoRotate.report.note]
+belowThreshold = "Sotto la soglia"
+blankPage = "La pagina è vuota"
+inferredFromDocument = "Come le altre pagine"
+noDominantDirection = "Direzioni del testo miste"
+osdFailed = "Nessun testo leggibile trovato"
+osdNoVerdict = "Impossibile determinare l'orientamento"
+tesseractUnavailable = "OCR non installato"
+tooFewGlyphs = "Troppo poco testo"
+
+[autoRotate.results]
+title = "Risultati rotazione automatica"
+
+[autoRotate.settings]
+title = "Impostazioni"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Quanto deve essere certo il controllo prima che una pagina venga ruotata. Abbassala per ruotare più pagine, aumentala per lasciare più pagine invariate."
+title = "Soglia di confidenza"
+
+[autoRotate.tooltip.description]
+text = "Determina l'orientamento corretto di ogni pagina e la ruota nel verso giusto. Le pagine già dritte vengono lasciate invariate."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto legge prima il testo sulla pagina, poi analizza la pagina come immagine se non è sufficiente. Solo testo salta il controllo dell'immagine, il più rapido per documenti mai scansionati. Solo OCR tratta ogni pagina come immagine."
+title = "Metodo di rilevamento"
+
+[autoRotate.tooltip.header]
+title = "Rotazione automatica"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Le pagine vuote o quasi vuote non possono essere controllate da sole. Quando tutte le pagine leggibili richiedono la stessa rotazione, queste pagine vengono ruotate per uniformarle."
+title = "Ruota pagine a bassa confidenza per uniformarle"
+
 [autoSizeSplitPDF]
 tags = "pdf,diviso,documento,organizzazione"
 
@@ -2189,33 +2440,6 @@ keywords = "Parole chiave: dispari, pari"
 numbers = "Numeri/intervalli: 5, 10-20"
 progressions = "Progressioni: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipi di certificato"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Gestito dagli amministratori di sistema"
-bullet2 = "Condiviso tra gli utenti autorizzati"
-bullet3 = "Rappresenta l'identità dell'azienda, non dell'individuo"
-bullet4 = "Ideale per: documenti ufficiali, firme del team"
-description = "Un certificato condiviso fornito dalla tua organizzazione. Usato per l'autorità di firma a livello aziendale."
-title = "Certificato dell'organizzazione"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generato automaticamente al primo utilizzo"
-bullet2 = "Collegato al tuo account utente"
-bullet3 = "Non può essere condiviso con altri utenti"
-bullet4 = "Ideale per: documenti personali, responsabilità individuale"
-description = "Un certificato generato automaticamente e unico per il tuo account utente. Adatto a firme individuali."
-title = "Certificato personale"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Richiede file P12/PFX e password"
-bullet2 = "Può essere emesso da Autorità di Certificazione esterne"
-bullet3 = "Livello di fiducia più elevato per documenti legali"
-bullet4 = "Ideale per: contratti legalmente vincolanti, validazione esterna"
-description = "Usa il tuo file di certificato PKCS#12. Fornisce il pieno controllo sulle proprietà del certificato."
-title = "Carica P12 personalizzato"
-
 [certSign]
 awaitingSignatures = "In attesa di firme"
 chooseCertificate = "Scegli il file del certificato"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Origine certificato"
 upload = "Carica"
 
-[certSign.tooltip.header]
-title = "Gestione firme: informazioni"
-
-[certSign.tooltip.overview]
-bullet1 = "Verifica le firme esistenti e la loro validità"
-bullet2 = "Vedi informazioni dettagliate su firmatari e certificati"
-bullet3 = "Aggiungi nuove firme digitali per proteggere i documenti"
-bullet4 = "Supporto per più file con navigazione semplice"
-text = "Questo strumento ti consente di controllare se i tuoi PDF sono firmati digitalmente e di aggiungere nuove firme digitali. Le firme digitali dimostrano chi ha creato o approvato un documento e se è stato modificato dopo la firma."
-title = "Cosa può fare questo strumento?"
-
-[certSign.tooltip.signing]
-bullet1 = "Supporta formati PEM, PKCS12, JKS e certificato server"
-bullet2 = "Opzione per mostrare o nascondere la firma nel PDF"
-bullet3 = "Aggiungi motivo, luogo e nome del firmatario"
-bullet4 = "Scegli in quale pagina posizionare le firme visibili"
-bullet5 = "Usa certificato server per semplice opzione 'Firma con Stirling-PDF'"
-text = "Per firmare un PDF è necessario un certificato digitale (come PEM, PKCS12 o JKS). Puoi scegliere di rendere la firma visibile sul documento o mantenerla invisibile solo per sicurezza."
-title = "Aggiunta delle firme"
-
-[certSign.tooltip.validation]
-bullet1 = "Mostra se le firme sono valide o non valide"
-bullet2 = "Visualizza informazioni sul firmatario e la data di firma"
-bullet3 = "Controlla se il documento è stato modificato dopo la firma"
-bullet4 = "Può usare certificati personalizzati per la verifica"
-text = "Quando controlli le firme, lo strumento indica se sono valide, chi ha firmato, quando e se il documento è stato modificato dopo la firma."
-title = "Verifica delle firme"
-
 [changeCreds]
 changeUsername = "Aggiorna il nome utente. Verrai disconnesso dopo l'aggiornamento."
 credsUpdated = "Account aggiornato"
@@ -2824,6 +3020,7 @@ next = "Successivo"
 preview = "Anteprima"
 previous = "Precedente"
 refresh = "Aggiorna"
+remaining = "Rimanenti"
 retry = "Riprova"
 save = "Salva"
 
@@ -3107,6 +3304,8 @@ description = "Il Model Context Protocol (MCP) consente agli assistenti IA come
 guestInfo = "Gli utenti ospite non possono connettere client MCP. Crea un account per utilizzare il server MCP e consentire al tuo assistente IA di eseguire gli strumenti Stirling PDF per tuo conto."
 navLabel = "Server MCP"
 tip = "Ogni azione eseguita dal tuo assistente viene effettuata con il tuo account e viene conteggiata nel tuo consumo, esattamente come quando usi Stirling PDF direttamente."
+title = "MCP Server"
+viewApiKeys = "Visualizza API key"
 
 [config.mcp.copy]
 configLabel = "Configurazione"
@@ -3262,24 +3461,6 @@ description = "Questi cookie sono essenziali per il corretto funzionamento del s
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Monitoraggio avanzato"
-allInOneWorkspace = "Workspace PDF tutto-in-uno (visualizzatore, strumenti e agente)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Supporto dedicato e SLA"
-fasterThroughput = "Capacità di elaborazione 10x più veloce"
-fullyPrivateFiles = "File completamente privati"
-largeFileProcessing = "Elaborazione file di grandi dimensioni"
-orgWideAccess = "Controlli di accesso a livello di organizzazione"
-premiumAiModels = "Modelli AI premium"
-prioritySupport = "Supporto prioritario"
-privateDocCloud = "Documento Cloud privato"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Accesso API sicuro"
-standardThroughput = "Throughput standard"
-unlimitedApiAccess = "Accesso API illimitato"
-unlimitedSeats = "Utenti illimitati"
-
 [crop]
 autoCrop = "Ritaglio automatico spazi bianchi"
 noFileSelected = "Seleziona un file PDF per iniziare il ritaglio"
@@ -3344,6 +3525,7 @@ message = "Impossibile impostare il gestore PDF predefinito"
 title = "Errore"
 
 [defaultApp.prompt]
+dontRemind = "Non ricordarmelo più"
 message = "Rendi Stirling PDF l'app predefinita per aprire i file PDF."
 
 [defaultApp.settingsOpened]
@@ -3695,10 +3877,10 @@ customizeGroups = "Personalizza gruppi"
 dropHint = "Apri file per iniziare"
 dropToAdd = "Drop files to add"
 expand = "Espandi barra laterale"
-files = "File"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive non è configurato"
 leaveMyFiles = "Lascia I miei file"
+library = "Libreria PDF"
 myFiles = "I miei file"
 noFiles = "Ancora nessun file"
 openFileManager = "Apri gestore file"
@@ -3721,19 +3903,8 @@ uploadToServer = "Carica sul server"
 versionHistory = "Cronologia versioni"
 
 [fileSidebar.groupsModal]
-add = "Aggiungi"
-addLabel = "Aggiungi un'etichetta…"
-categoryIconAria = "Scegli un'icona per {{name}}"
-createCategory = "Crea categoria"
-delete = "Elimina categoria"
 done = "Fine"
-hide = "Nascondi categoria"
-newCategory = "Nome nuova categoria…"
-removeLabel = "Rimuovi {{name}}"
-rename = "Rinomina"
 reset = "Ripristina impostazioni predefinite"
-search = "Cerca etichette…"
-show = "Mostra categoria"
 subtitle = "Raggruppa i tuoi file in categorie principali. Aggiungi etichette esistenti o nuove a una categoria, rinominala o creane una tua. I file che non rientrano in nessuna delle tue categorie vengono visualizzati in “Altro”."
 title = "Categorie della barra laterale"
 
@@ -3806,6 +3977,7 @@ refresh = "Aggiorna dal server"
 remove = "Elimina"
 removeVersion = "Rimuovi questa versione"
 rename = "Rinomina"
+renamed = "Rinominato"
 renameFolder = "Rinomina cartella"
 resizeFolderTree = "Ridimensiona albero cartelle (tasti freccia, Shift per passi più grandi; doppio clic per adattamento automatico)"
 save = "Salva"
@@ -3908,9 +4080,7 @@ count = "File"
 folder = "Cartella"
 labels = "Etichette"
 modified = "Modificato"
-name = "Nome"
 size = "Dimensione"
-toolHistoryAtVersion = "Catena di strumenti cumulativa"
 totalSize = "Dimensione totale"
 type = "Tipo"
 versionHistory = "Percorso delle versioni"
@@ -4070,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Tutto salvato"
+extractCsvError = "Impossibile estrarre CSV"
+extractXlsxError = "Impossibile estrarre XLSX"
 flattenAfterFilling = "Appiattisci dopo la compilazione"
+requiredAbbreviation = "obb"
+requiredFieldsError = "Compila tutti i campi obbligatori"
 rescanFields = "Riscansiona campi"
 rescanFormFields = "Riscansiona i campi del modulo"
 save = "Salva"
+saveShortcut = "Ctrl+S per salvare"
+unsavedChanges = "Modifiche non salvate"
 
 [formFill.sidebar]
 close = "Chiudi barra laterale"
@@ -4307,6 +4484,11 @@ desc = "Rinomina automaticamente un file PDF in base all’intestazione rilevata
 tags = "auto-rilevamento,basato su intestazione,organizza,rinomina"
 title = "Rinomina automatica file PDF"
 
+[home.autoRotate]
+desc = "Rileva l'orientamento di ogni pagina e ruotala automaticamente in posizione verticale."
+tags = "rotazione automatica,correggi orientamento,capovolto,di lato,raddrizza,orienta,rileva orientamento,correggi rotazione,orientamento automatico,scansionato,OSD"
+title = "Rotazione automatica"
+
 [home.autoSizeSplitPDF]
 tags = "auto,dividi,dimensione"
 title = "Dividi auto per peso/pagine"
@@ -4606,13 +4788,13 @@ hint = "Carica un PNG, JPG, SVG o un altro file immagine da posizionare sul PDF.
 label = "Carica immagine"
 placeholder = "Seleziona file immagine"
 
-[imageToPdf]
-tags = "conversione,img,jpg,immagine,foto"
-
 [imageToPDF]
 header = "Immagine a PDF"
 title = "Immagine a PDF"
 
+[imageToPdf]
+tags = "conversione,img,jpg,immagine,foto"
+
 [infoBanner]
 dismiss = "Ignora"
 
@@ -4645,11 +4827,9 @@ welcomeTitle = "Sei stato invitato!"
 
 [landing]
 addFiles = "Aggiungi file"
-heroSubtitle = "Trascina o aggiungi un PDF esistente per iniziare."
 mobileUpload = "Carica da dispositivo mobile"
 openFromComputer = "Apri dal computer"
 uploadFromComputer = "Carica dal computer"
-workbenchEmptyStateHero = "Rilascia un PDF ovunque"
 
 [language]
 direction = "ltr"
@@ -4694,6 +4874,7 @@ login = "Accedi"
 magicLinkSent = "Magic link inviato a {{email}}! Controlla la posta e clicca il link per accedere."
 mfaCode = "Codice di autenticazione"
 mfaRequired = "Codice a due fattori richiesto"
+noAccount = "Non hai un account?"
 or = "Oppure"
 password = "Password"
 passwordChangedSuccess = "Password modificata con successo! Accedi con la nuova password."
@@ -4713,26 +4894,10 @@ signInWith = "Accedi con"
 title = "Accedi"
 unexpectedError = "Errore imprevisto: {{message}}"
 updatePassword = "Aggiorna password"
-useEmailInstead = "Accedi con email"
 useMagicLink = "Usa invece il magic link"
 username = "Nome utente"
 youAreLoggedIn = "Hai effettuato l’accesso!"
 
-[login.slides.edit]
-alt = "Modifica PDF"
-subtitle = "Con oltre una dozzina di strumenti per oscurare, firmare, leggere e manipolare i PDF, troverai sicuramente ciò che cerchi."
-title = "Modifica i PDF per mostrare/proteggere le informazioni che desideri"
-
-[login.slides.overview]
-alt = "Panoramica di Stirling PDF"
-subtitle = "Suite cloud incentrata sulla privacy per PDF che ti permette di convertire, firmare, oscurare e gestire documenti, con oltre 50 strumenti potenti."
-title = "La soluzione unica per tutte le tue esigenze PDF."
-
-[login.slides.secure]
-alt = "Proteggi i PDF"
-subtitle = "Aggiungi password, oscura contenuti e gestisci i certificati con facilità."
-title = "Proteggi le informazioni sensibili nei tuoi PDF"
-
 [margin]
 large = "Grande"
 medium = "Medio"
@@ -4974,6 +5139,7 @@ pinButton = "Puoi usare il pulsante <strong>Blocca</strong> se preferisci che i
 results = "Dopo che lo strumento ha terminato l'esecuzione, la fase di <strong>Revisione</strong> mostrerà un'anteprima dei risultati in questo pannello e ti permetterà di annullare l'operazione o scaricare il file. "
 runButton = "Una volta configurato lo strumento, questo pulsante consente di eseguirlo su tutti i PDF selezionati."
 selectCropTool = "Selezioniamo lo strumento <strong>Ritaglia</strong> per mostrare come usarne uno."
+stepOf = "Passaggio {{current}} di {{total}}"
 toolInterface = "Questa è l'interfaccia dello strumento <strong>Ritaglia</strong>. Come vedi, non c'è molto perché non abbiamo ancora aggiunto file PDF su cui lavorare."
 workbench = "Questo è il <strong>Banco di lavoro</strong> - l'area principale in cui visualizzare e modificare i PDF."
 wrapUp = "Tutto pronto! Hai imparato le aree principali dell'app e come usarle. Fai clic sul pulsante <strong>Guida</strong> quando vuoi per rivedere questo tour."
@@ -4986,6 +5152,26 @@ showMeAround = "Fammi fare un tour"
 skipForNow = "Salta per ora"
 skipTheTour = "Salta il tour"
 
+[onboarding.checklist]
+dismiss = "Ignora"
+title = "Configura Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Esegui Stirling nativamente sul tuo computer"
+title = "Scarica Stirling per Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Collabora con il tuo team"
+title = "Invita membri del team"
+
+[onboarding.checklist.shareAnalytics]
+description = "Aiuta a migliorare Stirling"
+title = "Condividi dati di utilizzo anonimi"
+
+[onboarding.checklist.takeTour]
+description = "Scopri come funziona Stirling con una rapida panoramica"
+title = "Fai il tour"
+
 [onboarding.desktopInstall]
 body = "Stirling funziona al meglio come app desktop. Puoi usarla offline, accedere più velocemente ai documenti e modificare localmente sul tuo computer."
 selectOs = "Seleziona sistema operativo"
@@ -4994,7 +5180,21 @@ titleWithOs = "Download per {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Codice di autenticazione"
+description = "Proteggi il tuo account collegando un'app di autenticazione. Scansiona il codice QR o inserisci la chiave di configurazione, quindi conferma il codice a 6 cifre per completare."
+enable = "Abilita MFA"
+enableError = "Impossibile abilitare l'autenticazione a due fattori. Controlla il codice e riprova."
+enterCode = "Inserisci il codice a 6 cifre dalla tua app."
+enterCodeError = "Inserisci il codice di autenticazione per continuare."
+logout = "Logout"
+openAuthenticator = "Apri Google Authenticator, Authy o 1Password."
 qrCodeLoading = "Generazione del tuo codice QR…"
+regenerateQrCode = "Rigenera codice QR"
+scanQrCode = "Scansiona il codice QR o inserisci la chiave di configurazione qui sotto."
+setupError = "Impossibile avviare la configurazione a due fattori. Riprova."
+setupKey = "Chiave di configurazione (inserimento manuale)"
+stepByStep = "Passo dopo passo"
+success = "MFA è stata abilitata. Ora puoi continuare."
+title = "Configurazione autenticazione multifattore"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Una volta abilitata la modalità login, potrai gestire utenti, configurare impostazioni e monitorare lo stato del server. Le prime <strong>{{freeTierLimit}}</strong> persone sul tuo server possono usare Stirling gratuitamente."
@@ -5003,6 +5203,11 @@ adminTitle = "Panoramica admin"
 userBody = "Invita i colleghi, assegna ruoli e tieni i documenti organizzati in un unico spazio di lavoro sicuro. Abilita la modalità login quando sei pronto a crescere oltre l'uso individuale."
 userTitle = "Panoramica piano"
 
+[onboarding.processorIntro]
+body = "Stirling ora esegue <strong>Policies</strong> — regole automatizzate che classificano, proteggono ed elaborano ogni documento al suo arrivo. Configurale e monitora le esecuzioni nel <strong>Processor</strong>."
+cta = "Scopri il Processor"
+title = "Scopri Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "L'editor è ora <free>completamente gratuito</free>."
 premium = "Abbiamo aggiunto tantissime nuove funzionalità, tra cui le <strong>Policy</strong> e la <strong>Chat con l'Agente</strong>."
@@ -5353,7 +5558,7 @@ subtitle = "Supera la soglia dei 500 PDF gratuiti con l'automazione, l'IA e l'AP
 title = "Attiva il piano Processor"
 
 [payg.free.editor]
-eeyebrow = "Piano Editor · Sempre gratuito"
+eyebrow = "Piano Editor · Sempre gratuito"
 
 [payg.free.header]
 freeBody = "Visualizza, modifica, unisci, dividi, firma, inserisci filigrana, comprimi, converti ed esegui l'OCR manuale — tutto quello che vuoi, indipendentemente da dove lo avvii."
@@ -5399,6 +5604,28 @@ docs = "PDF"
 subtitle = "PDF fatturabili che ogni membro del team ha elaborato in questo periodo."
 title = "Utilizzo dei membri del team"
 
+[payg.prepaid]
+chip = "Anno prepagato"
+
+[payg.prepaid.banner]
+exhausted = "La tua capacità prepagata è esaurita; la fatturazione a consumo è ripresa. Ricarica per mantenere lo sconto."
+expiring_one = "Il tuo anno prepagato termina tra {{count}} giorno. La capacità inutilizzata scadrà — ricarica per iniziare un nuovo anno."
+expiring_other = "Il tuo anno prepagato termina tra {{count}} giorni. La capacità inutilizzata scadrà — ricarica per iniziare un nuovo anno."
+low = "Ti resta il {{pct}}% della tua capacità prepagata. Ricarica in qualsiasi momento per continuare l'elaborazione senza interruzioni."
+
+[payg.prepaid.card]
+subtitle = "Usata prima della fatturazione a consumo e fuori dal tuo limite di spesa."
+title = "Capacità prepagata"
+
+[payg.prepaid.meter]
+capSuffix = "di {{total}} crediti prepagati"
+expires = "Scade il {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Esaurita"
+healthy = "Ampia disponibilità"
+low = "In esaurimento"
+
 [payg.role]
 leader = "Proprietario del team"
 member = "Membro"
@@ -5935,49 +6162,12 @@ keyDescription = "Incolla la chiave di licenza dall'email"
 success = "Licenza attivata!"
 successMessage = "La licenza è stata attivata correttamente. Ora puoi chiudere questa finestra."
 
-[policies]
-deleteConfirmBody = "Questo rimuoverà la policy e il relativo flusso di lavoro. I documenti già elaborati non subiranno modifiche."
-deleteConfirmTitle = "Eliminare la policy {{label}}?"
-
 [policies.activity]
-enforced = "applicata"
-enforcing = "Applicazione in corso..."
-failed = "Applicazione non riuscita"
 outputsUnavailable = "Gli output delle policy non sono più disponibili per il download."
 partialOutputsUnavailable = "Alcuni output delle policy non sono più disponibili per il download."
-retrying = "Occupato, nuovo tentativo..."
 runNotFound = "L'esecuzione dell'applicazione non è più reperibile."
-step = "passo {{current}}/{{total}}"
 timedOut = "L'applicazione è andata in timeout prima che l'esecuzione potesse terminare."
 
-[policies.catalog]
-compliance = "Conformità"
-ingestion = "Acquisizione dati"
-retention = "Conservazione"
-routing = "Instradamento"
-security = "Sicurezza"
-
-[policies.detail]
-close = "Chiudi"
-editSettings = "Modifica impostazioni"
-enforces = "Applica"
-managedByOrg = "Gestito dalla tua organizzazione. Contatta un responsabile del team per modificare questa policy."
-noActivityDescription = "I documenti appariranno qui non appena questa policy verrà eseguita."
-noActivityTitle = "Ancora nessuna attività"
-onEveryUpload = "Su ogni caricamento"
-originalsNote = "I file originali rimangono invariati • La versione con le regole applicate viene salvata a fianco"
-pause = "Metti in pausa"
-recentActivity = "Attività recente"
-resume = "Riprendi"
-retry = "Riprova"
-showLess = "Mostra meno"
-showMore = "Mostra di più"
-statActive = "Attive"
-statDataProcessed = "Dati elaborati"
-statDocsEnforced = "Doc. con policy applicate"
-statusActive = "Attiva"
-statusPaused = "In pausa"
-
 [policies.enforcement]
 applying = "Applicazione di {{names}}"
 applyingProgress = "Applicazione di {{names}} ({{done}} di {{total}})"
@@ -5987,61 +6177,16 @@ failureBody = "Non è stato possibile elaborare {{failures}} su {{total}} file,
 failureTitle = "Esportato senza applicazione completa"
 printPolicyAppliedBody = "Questo PDF è stato aggiornato per rispettare una policy. Controlla le modifiche, poi stampa di nuovo."
 printPolicyAppliedTitle = "Policy applicata prima della stampa"
-queued = "+{{count}} in coda"
 successTitle = "{{names}} applicate"
 summaryMore = "{{first}}, {{second}} e altri {{more}}"
 summaryTwo = "{{first}} e {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Applicazione prima della conversione"
-default = "Applicazione"
-export = "Applicazione prima dell'esportazione"
-input = "Applicazione all'importazione"
-print = "Applicazione prima della stampa"
-
-[policies.field]
-accessLog = "Log di accesso"
-archiveAfter = "Archivia dopo"
-auditTrail = "Audit trail"
-belowThreshold = "Sotto la soglia"
-destination = "Destinazione"
-frameworks = "Framework"
-immutableHold = "Blocco immutabile"
-keepFor = "Conserva per"
-minConfidence = "Confidenza min."
-notify = "Notifica su instradamento"
-onViolation = "Quando non conforme"
-webhookUrl = "URL webhook"
-
-[policies.fields]
-selectedCount = "{{count}} selezionati"
-
 [policies.labels]
-add = "Aggiungi"
-addPlaceholder = "Aggiungi un'etichetta…"
-customNote = "Personalizzato per il tuo team."
-defaultNote = "Uso dell'impostazione predefinita integrata, condivisa con il tuo team."
-duplicate = "\"{{name}}\" esiste già."
-edit = "Modifica etichette"
-empty = "Nessuna etichetta ancora."
-export = "Esporta JSON"
-iconAria = "Scegli un'icona per {{name}}"
-import = "Importa JSON"
-importError = "Impossibile importare quel file."
-managedNote = "Le etichette del team sono gestite dal leader del team."
-modalSubtitle = "Condivise con tutto il tuo team. Il classificatore sceglie le etichette adatte a ciascun documento."
-modalTitle = "Etichette di classificazione"
-pickIcon = "Usa l'icona {{label}}"
-removeAria = "Rimuovi {{name}}"
-resetToDefault = "Ripristina predefinito"
-saveForTeam = "Salva per il team"
-saving = "Salvataggio…"
-sectionLabel = "Etichette di classificazione"
-startFromScratch = "Inizia da zero"
-teamCount = "etichette del team"
-tooLong = "Le etichette possono contenere al massimo {{max}} caratteri."
-ungrouped = "Non raggruppate"
-view = "Visualizza etichette"
+categoryCount = "categorie"
+hideCategory = "Nascondi categoria"
+labelCount = "etichette"
+sharedNote = "Queste etichette sono integrate e condivise con tutto il tuo team."
+showCategory = "Mostra categoria"
 
 [policies.pii]
 account = "Numeri di conto (etichettati)"
@@ -6050,97 +6195,14 @@ email = "Indirizzi email"
 fieldLabel = "Dati sensibili (PII) da oscurare"
 iban = "IBAN"
 phone = "Numeri di telefono"
-pplaceholder = "Seleziona i tipi di PII"
+placeholder = "Seleziona tipi di PII"
 routing = "Numeri di instradamento USA (ABA)"
 ssn = "Numeri di previdenza sociale (SSN)"
 
-[policies.settings]
-noneExport = "Attualmente nessun criterio viene eseguito all'esportazione."
-noneUpload = "Attualmente nessun criterio viene eseguito al caricamento."
-onExport = "All'esportazione"
-onUpload = "Al caricamento"
-reorderHandle = "Trascina per riordinare"
-runOrderDesc = "Quando più criteri vengono eseguiti sullo stesso trigger, vengono eseguiti in questo ordine — ciascuno sull'output del criterio precedente. Trascina per riordinare."
-title = "Impostazioni criteri"
-
-[policies.sidebar]
-activeCount = "{{count}} attive"
-infoTooltip = "Una policy è un insieme fisso di strumenti che viene eseguito automaticamente ogni volta che viene attivato (ad esempio, all'arrivo di un nuovo documento), applicando regole come l'oscuramento dei dati sensibili (PII) senza passaggi manuali."
-loading = "Caricamento in corso…"
-optionsAriaLabel = "Opzioni criterio"
-policySettings = "Impostazioni criteri"
-railAriaLabel = "Policy {{label}} — {{status}}"
-railSuffixActive = " (Attiva)"
-railSuffixPaused = " (In pausa)"
-retryFailed = "Riprova criteri non riusciti ({{count}})"
-rowProgress = "{{completed}} di {{total}} file elaborati"
-setUp = "Configura"
-title = "Policy"
-upgradeToEnterprise = "Passa alla versione Enterprise"
-whatIsPolicy = "Che cos'è un criterio?"
-
-[policies.status]
-active = "Attiva"
-paused = "In pausa"
-setup = "Configura"
-
-[policies.toolConfig]
-enableAriaLabel = "Abilita {{tool}}"
-infoAriaLabel = "Cosa fa lo strumento {{tool}}?"
-
-[policies.toolConfig.info]
-redact = "Trova automaticamente e oscura i dettagli sensibili — come numeri di Social Security e di carta — in modo che non possano essere letti nel documento."
-sanitize = "Rimuove il JavaScript nascosto dal file, così nulla può essere eseguito automaticamente quando qualcuno lo apre."
-watermark = "Appone un contrassegno visibile (es. \"Confidential\") su ogni pagina."
-
-[policies.wizard]
-allDocTypesDescription = "Abilita la policy di Classificazione per filtrare in base al tipo di documento."
-allDocTypesTitle = "Tutti i tipi di documento"
-back = "Indietro"
-builderDesc = "Costruisci la sequenza di strumenti che questa policy eseguirà su ciascun documento."
-clear = "Cancella"
-close = "Chiudi"
-continue = "Continua"
-docTypesLabel = "Tipi di documento"
-edit = "Modifica"
-editTitle = "Modifica policy {{label}}"
-enablePolicy = "Abilita policy"
-filenameAutoNumber = "Numerazione automatica"
-filenamePositionAria = "Posizione nome file"
-filenamePrefix = "Prefisso"
-filenameSuffix = "Suffisso"
-filenameTextAria = "Testo nome file"
-filenameTextPlaceholder = "Testo da aggiungere (opzionale)"
-lockedDescription = "Contatta un responsabile del team per modificare questa policy."
-lockedTitle = "Gestito dalla tua organizzazione"
-maxRetriesLabel = "Tentativi massimi"
-noToolsError = "Aggiungi prima almeno uno strumento configurato al flusso di lavoro."
-outputAsLabel = "Output come"
-outputFilenameSubhead = "Nome del file di output"
-outputModeAria = "Modalità di output"
-outputNewFile = "Nuovo file"
-outputNewVersion = "Nuova versione"
-outputRetriesLabel = "Output e tentativi"
-outputSubhead = "Output"
-retryDelayAria = "Minuti di ritardo tentativo"
-retryDelayLabel = "Ritardo tentativo (min)"
-runOnExport = "Esportazione"
-runOnLabel = "Esegui su"
-runOnSubhead = "Esegui su"
-runOnUpload = "Caricamento"
-saveChanges = "Salva modifiche"
-saveError = "Impossibile salvare la policy. Riprova."
-setupClassification = "Configura Classificazione"
-setupTitle = "Configura policy {{label}}"
-sourcesDesc = "Scegli dove eseguire questa policy e a quali tipi di documento applicarla."
-sourcesLabel = "Origini"
-stepOf = "Passaggio {{step}} di {{total}}"
-toolChainDesc = "Configura gli strumenti che questa policy eseguirà su ciascun documento."
-typesSelected = "{{count}} tipi selezionati"
-
 [policy]
 badgeEnforcing = "Applicazione di {{name}} in corso..."
 badgeRan = "Il criterio {{name}} è stato eseguito su questo file"
+badgeRunning = "{{name}} in esecuzione..."
 blockingAction = "{{action}} bloccata durante l'applicazione del criterio, attendi..."
 dismiss = "Chiudi overlay"
 enforcingTitle = "Applicazione criterio in corso..."
@@ -6149,6 +6211,7 @@ viewAnyway = "Visualizza file (criterio ancora in applicazione)"
 [policyOption]
 autoRedactPhi = "Oscura automaticamente PHI"
 blockExport = "Blocca esportazione"
+ccpa = "CCPA"
 contracts = "Contratti"
 documents = "Documenti"
 fedramp = "FedRAMP"
@@ -6267,86 +6330,6 @@ free = "Piano Editor"
 subscribed = "Piano Processor"
 unlinked = "Non collegato"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Inizializza da documento"
-sectionsAriaLabel = "Sezioni del generatore di agenti"
-selectorAriaLabel = "Agenti"
-subtitle = "Progetta, testa e distribuisci gli agenti AI che classificano, estraggono e instradano i tuoi documenti. Definisci scenari, limita l'accesso agli strumenti, esegui un golden set e pubblica una versione."
-title = "Generatore di agenti"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Annulla"
-dropzoneText = "Scegli un documento di esempio (PDF o immagine)"
-lead = "Rilascia un documento di esempio e proporremo scenari e uno schema di estrazione che potrai perfezionare. Non verrà pubblicato nulla finché non lo avrai revisionato."
-submit = "Inizializza agente"
-subtitle = "Avvia un nuovo agente da un file rappresentativo"
-title = "Inizializza da un documento"
-
-[portal.agentBuilder.empty]
-description = "Inizializza un agente da un documento di esempio per avviare i suoi scenari e lo schema di estrazione, quindi perfeziona e pubblica."
-title = "Nessun agente ancora"
-
-[portal.agentBuilder.evals]
-casesPassing = "Casi superati"
-columnCase = "Caso di valutazione"
-columnLatency = "Latenza"
-columnResult = "Risultato"
-fail = "non riuscito"
-goldenSetPassRate = "Tasso di superamento golden set"
-latencyMs = "{{ms}} ms"
-notRun = "non eseguito"
-pass = "superato"
-passRate = "Tasso di superamento"
-runEvals = "Esegui valutazioni"
-
-[portal.agentBuilder.evals.empty]
-description = "Le valutazioni trasformano i tuoi scenari in un golden set ripetibile. Esegui l'upgrade per acquisire il tasso di superamento nel tempo e vincolare le pubblicazioni a esso."
-title = "Nessun golden set ancora"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "tra golden set"
-activeAgents = "Agenti attivi"
-avgPassRate = "Tasso medio superamento valutazioni"
-fleetWide = "su tutta la flotta"
-latestPublished = "Ultima pubblicazione"
-scenarios = "Scenari"
-testCases = "casi di test"
-totalDescription_one = "{{count}} totale"
-totalDescription_other = "{{count}} totali"
-
-[portal.agentBuilder.scenarios]
-add = "Aggiungi"
-addScenario = "Aggiungi scenario"
-enable = "Abilita"
-expectationLabel = "Comportamento previsto"
-expectationPlaceholder = "Cosa dovrebbe fare l'agente"
-inEval = "in valutazione"
-mute = "Silenzia"
-muted = "silenziato"
-nameLabel = "Nome"
-namePlaceholder = "es. Escalation conformità"
-
-[portal.agentBuilder.tabs]
-evals = "Valutazioni"
-scenarios = "Scenari"
-tools = "Strumenti"
-versions = "Versioni"
-
-[portal.agentBuilder.tools]
-broadAccess = "Accesso ampio"
-deniedHint = "Gli strumenti selezionati sono bloccati. Tutto il resto resta richiamabile."
-deniedTools = "Strumenti negati"
-governanceGate = "La governance degli strumenti è disponibile nel piano Enterprise."
-restricted = "Limitato"
-restrictedAccess = "Accesso limitato agli strumenti"
-restrictedDescription = "Consenti ogni strumento tranne quelli che neghi di seguito."
-
-[portal.agentBuilder.versions]
-current = "corrente"
-historyGate = "La cronologia completa delle versioni e il rollback sono disponibili nel piano Enterprise."
-publish = "Pubblica"
-rollBack = "Esegui rollback"
-
 [portal.assistant]
 close = "Chiudi assistente"
 error = "Impossibile raggiungere l'assistente."
@@ -6363,9 +6346,21 @@ typing = "Sta scrivendo"
 loading = "Caricamento"
 redirectingToEditor = "Reindirizzamento all'editor..."
 
+[portal.billing.activation]
+maybeLater = "Forse più tardi"
+title = "Attiva il Processor"
+
+[portal.billing.activation.payg]
+sub = "Imposta un limite mensile. Paghi per ciò che esegui."
+title = "Pay as you go"
+
+[portal.billing.activation.prepay]
+badge = "2 mesi gratis"
+sub = "Una fattura, carta o bonifico bancario."
+title = "Paga un anno in anticipo"
+
 [portal.billing.checkout]
 noClientSecret = "La funzione edge non ha restituito client_secret."
-subtitle = "Aggiungi una carta per continuare oltre il credito gratuito del piano Editor. Stripe gestisce il resto."
 title = "Attiva il piano Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6373,6 +6368,22 @@ body = "Il pagamento è riuscito, ma l'attivazione sta richiedendo un po' più d
 close = "Chiudi"
 title = "Ci siamo quasi"
 
+[portal.billing.checkout.cap]
+amountAria = "Limite di spesa mensile"
+back = "Indietro"
+continue = "Continua al pagamento"
+error = "Impossibile impostare il limite di spesa"
+finePrint = "Le fatture vengono emesse mensilmente. Annulla in qualsiasi momento."
+noLimit = "Nessun limite"
+note = "Non ti verrà mai addebitato oltre il tuo limite. L'elaborazione viene semplicemente sospesa."
+perMonth = "/ mese"
+title = "Imposta il limite di spesa"
+
+[portal.billing.checkout.card]
+fields = "Numero carta · MM / AA · CVC · ZIP"
+label = "Dettagli carta"
+note = "Dettagli carta raccolti da Stripe. Stirling non memorizza mai PAN o CVC."
+
 [portal.billing.checkout.error]
 title = "Impossibile avviare il checkout"
 
@@ -6381,10 +6392,9 @@ body = "Il pagamento è andato a buon fine. Stiamo attivando l'elaborazione a co
 hint = "Tieni aperta questa finestra."
 title = "Attivazione del piano Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "nell'env del portale per abilitare il checkout in-app."
-bodyBefore = "Imposta"
-title = "Stripe non configurato"
+[portal.billing.checkout.pay]
+limit = "Limite di spesa mensile {{amount}}/mese. L'elaborazione si sospende al limite."
+limitNoCap = "Nessun limite di spesa. L'elaborazione non si sospenderà. Le fatture vengono emesse mensilmente."
 
 [portal.billing.enterpriseUpsell]
 cta = "Crea il tuo preventivo Enterprise"
@@ -6407,10 +6417,12 @@ currentPlan = "Piano attuale"
 freeForever = "Gratis per sempre"
 noTeamResolved = "Nessun team è ancora risolto sul tuo portafoglio — aggiorna e riprova."
 ownerOnly = "Solo il proprietario del team può attivare il piano Processor."
+payInvoice = "Paga fattura per completare"
 planName = "Editor"
 ssoIncluded = "SSO incluso"
 switchOnProcessor = "Attiva Processor →"
 unlimitedUsers = "Utenti illimitati"
+viewQuote = "Visualizza preventivo"
 
 [portal.billing.invoices]
 columnAmount = "Importo"
@@ -6463,7 +6475,111 @@ segmentApiDesc = "Richieste API dirette"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automazioni e pipeline"
 segmentAutomationLabel = "Automazione"
+sizeMultiplier = "{{formatted}} PDF hanno usato un moltiplicatore di dimensione"
+summary = "{{unique}} unici · {{units}} unità contatore · {{avg}} media per PDF"
+summaryNoRate = "{{unique}} unici · {{units}} unità contatore"
 unit = "PDF a consumo"
+unitsPending_one = "{{units}} unità contatore in attesa di sincronizzazione dalle istanze collegate"
+unitsPending_other = "{{units}} unità contatore in attesa di sincronizzazione dalle istanze collegate"
+
+[portal.billing.prepaid]
+capSuffix = "di {{total}} crediti prepagati"
+expires = "Scade il {{date}}"
+eyebrow = "Capacità prepagata"
+note = "Usata prima della fatturazione a consumo e fuori dal tuo limite di spesa."
+topUp = "Ricarica"
+
+[portal.billing.prepaid.buy]
+back = "Indietro"
+calcTitle = "Calcola il tuo pagamento annuale"
+cancel = "Annulla"
+cancelPurchase = "Annulla acquisto"
+close = "Chiudi"
+continueToPayment = "Continua al pagamento"
+finalise = "Finalizza"
+invoiceErrorTitle = "Impossibile generare la fattura"
+loadingTitle = "Caricamento del preventivo"
+payTitle = "Paga il tuo anno"
+step = "Passaggio {{current}} di {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Modifica"
+deployRow = "Distribuzione"
+done = "Fatto"
+enterpriseHint = "Questa è scala enterprise. A questo volume, le tariffe enterprise superano qualsiasi sconto self-service. Blocco tariffa, termini e preventivo in pochi minuti."
+governanceRow = "Governance"
+governanceValue = "{{label}} · {{count}} policy"
+handlesLabel = "Il tuo Processor"
+handlesValue = "gestisce {{volume}} crediti / mese"
+pipelinesLabel = "Pipeline"
+policiesMeta = "{{count}} policy"
+poolCaption = "Un unico pool di {{credits}} crediti per l'anno. I mesi pesanti prendono in prestito da quelli leggeri."
+priceLabel = "Il tuo anno · 12 mesi al prezzo di 10"
+rateUnknown = "Mostreremo il prezzo esatto al checkout."
+savings = "Risparmi {{amount}} · 2 mesi gratis."
+sizingRow = "Dimensionamento"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Utenti totali"
+
+[portal.billing.prepaid.consent]
+label = "Comprendo che quando la mia capacità prepagata sarà esaurita o scadrà dopo 12 mesi, l'elaborazione continuerà automaticamente alla tariffa standard a consumo pay-as-you-go (fino al mio limite di spesa), salvo annullamento, e che posso annullare in qualsiasi momento dal portale di fatturazione."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Gestito da Stirling. Attivo in pochi minuti."
+cloudValue = "Stirling Cloud · Gestito"
+selfhost = "Self-hosted"
+selfhostDesc = "Eseguito su infrastruttura privata. Stessa tariffa."
+selfhostValue = "Self-hosted · Infrastruttura privata"
+
+[portal.billing.prepaid.offer]
+cta = "Rivedi offerta"
+subtitle = "Paga in anticipo un anno di elaborazione PDF e ottieni due mesi gratis, usati prima della fatturazione a consumo, fuori dal tuo limite di spesa."
+title = "Ottieni 12 mesi al prezzo di 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nome intestatario account"
+accountNamePlaceholder = "es. Jane Smith"
+companyName = "Nome azienda (opzionale)"
+companyNamePlaceholder = "es. Acme Inc."
+downloadInvoice = "Scarica fattura"
+payOnline = "Paga online"
+poNumber = "Numero PO (opzionale)"
+poNumberPlaceholder = "es. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avanzate"
+advancedDesc = "Le pipeline gestiscono la maggior parte della tua elaborazione."
+none = "Nessuna"
+noneDesc = "Non stai ancora eseguendo pipeline. Attivale in qualsiasi momento."
+standard = "Standard"
+standardDesc = "Alcune pipeline rielaborano i PDF in arrivo."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Classificazione, predefinita, più condivisione"
+governed = "Governed"
+governedDesc = "Aggiunge sicurezza e routing"
+regulated = "Regulated"
+regulatedDesc = "Ogni categoria, incl. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Scarica preventivo (PDF)"
+downloading = "Preparazione…"
+share = "condividi per approvazione"
+
+[portal.billing.prepaid.size]
+compact = "Compatta"
+compactDesc = "File sotto 25 MB, nessun addebito dati"
+heavy = "Pesante"
+heavyDesc = "Scansionati o ricchi di immagini, abitualmente 50 MB+"
+standard = "Standard"
+standardDesc = "Per lo più piccoli, alcune scansioni oltre 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Esaurita"
+healthy = "Ampia disponibilità"
+low = "In esaurimento"
 
 [portal.billing.spendLimit]
 adjustLimit = "Modifica limite"
@@ -6492,6 +6608,8 @@ label = "Previsto superamento."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Spesa di questo mese"
+freeRemaining_one = "{{formatted}} PDF gratuito rimanente"
+freeRemaining_other = "{{formatted}} PDF gratuiti rimanenti"
 processed_one = "{{formattedCount}} PDF elaborato."
 processed_other = "{{formattedCount}} PDF elaborati."
 processedWithRate_one = "{{formattedCount}} PDF elaborato, a {{rate}} ciascuno."
@@ -6532,6 +6650,350 @@ signature = "firma"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nuova connessione"
+createTitleFor = "Connetti {{name}}"
+delete = "Elimina"
+edit = "Modifica"
+editTitle = "Modifica connessione"
+unsupportedType = "Questo tipo di connessione non può essere modificato qui."
+
+[portal.connections.categories.advanced]
+description = "Per un servizio che non supportiamo ancora."
+label = "Avanzate"
+
+[portal.connections.categories.audit]
+description = "Registra cosa è successo a un documento, dove i tuoi revisori già controllano."
+label = "Logging audit e compliance"
+
+[portal.connections.categories.notify]
+description = "Comunica a un altro sistema che è successo qualcosa."
+label = "Notifica e workflow"
+
+[portal.connections.categories.security]
+description = "Scansiona o etichetta un documento prima che prosegua."
+label = "Sicurezza e classificazione"
+
+[portal.connections.categories.signing]
+description = "Invia un documento per la firma o la notarizzazione."
+label = "Firma elettronica e notarizzazione"
+
+[portal.connections.categories.storage]
+description = "Dove finiscono i documenti elaborati - un bucket, un drive, un ticket o una pagina."
+label = "File e allegati"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling lo archivia crittografato e non lo mostra più."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "I passaggi che usano questa connessione possono chiamare solo percorsi sotto questo URL, mai un altro host."
+label = "URL server"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Porta"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Incolla l'URL fornito dal servizio. Possono essere chiamati solo percorsi sotto di esso."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Nome connessione"
+namePlaceholder = "es. Produzione"
+
+[portal.connections.picker]
+cancel = "Annulla"
+createNew = "Nuova connessione..."
+placeholder = "Seleziona una connessione"
+save = "Salva connessione"
+
+[portal.connections.picker2]
+back = "Cambia integrazione"
+heading = "Cosa vuoi connettere?"
+noResultsBody = "Non lo supportiamo ancora - parlacene e valuteremo di aggiungerlo."
+noResultsTitle = "Nessuna corrispondenza per \"{{query}}\""
+searchPlaceholder = "Cerca integrazioni - prova \"sign\", \"ocr\" o un nome prodotto"
+
+[portal.connections.types.api]
+description = "Chiama qualsiasi HTTP API da una policy. Scegli URL, autenticazione e payload."
+label = "API personalizzata"
+
+[portal.connections.types.api.fields.authType]
+label = "Autenticazione"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username e password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token in un header personalizzato"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Nessuna"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Accedi per un token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "I passaggi che usano questa connessione possono chiamare solo percorsi sotto questo URL, mai un altro host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nome header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Percorso login"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Se l'API risponde con un link di download, possono essere recuperati solo questi host. Separa con virgole. Lascia vuoto per consentire solo l'host dell'URL di base."
+label = "Host risultato consentiti"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Invia il token come questo header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "L'header di risposta in cui la chiamata di login restituisce il token, es. X-Auth-Token."
+label = "Header risposta token"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Scansiona documenti alla ricerca di malware su un server che gestisci - nulla lascia la tua rete."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Scansione virus e contenuti per documenti in una policy."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blocca documenti contenenti macro, eseguibili, script o oggetti incorporati - non solo malware noto."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Allega documenti elaborati a una pagina Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Invia documenti a ConsignO Cloud (Notarius) per firma elettronica e notarizzazione."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Il tuo ambiente ConsignO Cloud, incluso /api/v1."
+label = "URL server"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Necessario solo se la tua organizzazione usa tenant."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Pubblica un messaggio su Discord quando una policy elabora un documento."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indicizza un evento di audit in Elasticsearch ogni volta che una policy gestisce un documento."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Interroga un server FTP o FTPS per nuovi documenti."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Modalità connessione"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Attiva"
+passive = "Passiva (consigliata)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP semplice invia credenziali e file non crittografati; scegli FTPS se il server lo supporta."
+label = "Crittografia"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (esplicito / AUTH TLS)"
+implicit = "FTPS (implicito)"
+none = "Nessuna (FTP semplice)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Pubblica un messaggio in uno spazio Google Chat quando una policy viene eseguita."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Allega documenti elaborati a un issue Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Invia un documento o una notifica via email quando una policy viene eseguita."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Archivia documenti elaborati in Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Rileva dati personali nel testo dei documenti usando un server Presidio che gestisci."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Leggi e applica etichette di sensibilità Microsoft Purview sui PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opzionale. Necessario solo per scegliere etichette per nome; l'etichettatura funziona anche senza."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Applicato a ogni etichetta come SiteId, così gli strumenti compatibili con Purview sanno quale organizzazione l'ha applicata."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Un bucket S3 da cui le sorgenti possono leggere e in cui gli output della pipeline possono scrivere."
+label = "Archiviazione S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Lascia vuoto per AWS. Impostalo per MinIO o un altro archivio compatibile con S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Regione"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Invia un documento o una notifica via email quando una policy viene eseguita."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Interroga un server SFTP (SSH) per nuovi documenti."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opzionale. L'impronta della chiave host SHA-256 del server (da `ssh-keyscan host | ssh-keygen -lf -`). Se impostata, viene accettato solo un server che presenta questa chiave; se vuota, la chiave vista alla prima connessione viene fissata e le modifiche successive vengono rifiutate."
+label = "Impronta chiave host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Passphrase chiave"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Lascia vuoto se ti autentichi invece con una chiave privata."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opzionale. Incolla una chiave privata OpenSSH per autenticarti con una chiave invece che con una password."
+label = "Chiave privata"
+
+[portal.connections.types.slack]
+description = "Pubblica un messaggio su Slack quando una policy elabora un documento."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Monitora una condivisione di rete SMB / CIFS (Windows o Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Condivisione di rete"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opzionale. Il dominio Windows o workgroup, se il server ne usa uno."
+label = "Dominio"
+
+[portal.connections.types.smb.fields.share]
+label = "Condivisione"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Invia un evento di audit a Splunk ogni volta che una policy gestisce un documento."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Invia un evento di audit a un collector HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Pubblica un messaggio in un canale Teams quando una policy viene eseguita."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Pubblica ogni documento, o solo i dettagli, a un URL che scegli."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Attiva uno scenario Zap o Make da una policy."
+label = "Zapier e Make"
+
+[portal.docs]
+browse = "Sfoglia docs"
+viewSource = "Visualizza sorgente su GitHub"
+
 [portal.docs.authentication]
 codeCaption = "ogni richiesta"
 eyebrow = "PER INIZIARE"
@@ -6617,11 +7079,19 @@ title = "SDK ufficiali"
 beta = "Beta"
 deprecated = "Deprecato"
 
+[portal.docs.search]
+empty = "Nessun docs corrispondente"
+placeholder = "Cerca docs"
+results = "{{count}} risultati"
+
 [portal.docs.skills]
 eyebrow = "SKILL"
 lead = "Capacità incluse e denominate che il tuo agente invoca come singolo strumento. Ogni skill è una catena di operazioni deterministica con valutazioni associate."
 title = "Skill agente"
 
+[portal.docs.toc]
+title = "In questa pagina"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "RIFERIMENTO API"
@@ -6695,6 +7165,8 @@ type = "Tipo"
 user = "Utente"
 
 [portal.documents.queue.empty]
+connectSource = "Connetti una sorgente"
+createPipeline = "Crea una pipeline"
 description = "Man mano che le origini inviano documenti alle tue pipeline, appariranno qui per la revisione."
 title = "Nessun documento in coda"
 
@@ -6804,13 +7276,71 @@ description = "Questa vista ha riscontrato un errore imprevisto. Riprova oppure
 retry = "Riprova"
 title = "Qualcosa è andato storto in questa pagina"
 
+[portal.home.download]
+back = "Indietro"
+body = "Scarica l'app desktop o ospita autonomamente il server."
+done = "Fatto"
+guide = "Apri la guida {{name}}"
+openInBrowser = "Apri invece nel browser"
+sectionDesktop = "App desktop"
+sectionSelfHosted = "Self-hosted"
+title = "Installa Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Esegui l'immagine ufficiale sul tuo server."
+note = "Si apre su :8080. Accesso predefinito: admin / stirling."
+tagline = "Esegui il server in un container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installa il chart Helm ufficiale."
+note = "Aggiungi un PVC per /configs per mantenere le impostazioni."
+tagline = "Distribuisci in un cluster con Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Build native per la tua distribuzione."
+guideBtn = "Visualizza le opzioni di installazione per Linux"
+note = "Sono disponibili build AppImage, .deb e .rpm per le distro più comuni."
+tagline = "App desktop nativa per la tua distro"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Oppure tramite Homebrew"
+detailBody = "Esegui l'installer oppure usa Homebrew."
+downloadBtn = "Scarica per macOS"
+tagline = "App nativa per Apple silicon e Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Esegui il .jar su un server bare metal."
+downloadBtn = "Scarica il .jar"
+note = "Richiede Java 21+. Si apre su :8080; accesso predefinito admin / stirling."
+runLabel = "Poi eseguilo"
+tagline = "Esegui il .jar su un server bare metal"
+title = "Configurazione manuale del server"
+
+[portal.home.download.windows]
+altLabel = "Oppure tramite winget"
+detailBody = "Esegui l'installer oppure usa un gestore di pacchetti."
+downloadBtn = "Scarica installer"
+tagline = "App nativa per Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} attivi"
-invite = "Invita compagni di team"
+activeOfDeployed = "{{active}} di {{total}} attivi questo mese"
 name = "Stirling PDF Editor"
 open = "Apri nel browser"
 updated = "aggiornato {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Completa la distribuzione"
+options = "Visualizza opzioni di distribuzione"
+start = "Distribuisci l'Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6821,49 +7351,6 @@ afternoon = "Buon pomeriggio"
 evening = "Buonasera"
 morning = "Buongiorno"
 
-[portal.home.onboarding]
-dismiss = "Ignora configurazione"
-notStarted = "Non avviato"
-progress = "{{done}} di {{total}} completati"
-title = "Completa la configurazione"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC a livello di organizzazione, prezzi a volume impegnato e distribuzione air-gapped."
-cta = "Avvia prova"
-ctaQuote = "Richiedi preventivo"
-lead = "Per oltre 250 dipendenti."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Distribuisci l'app desktop, gratis per sempre."
-title = "Scarica il PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} attive · {{recommended}} consigliate"
-chip = "{{active}} attive"
-title = "Attiva i criteri"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} connesse · ogni PDF governato dove arriva"
-chip = "{{connected}} connesse"
-title = "Connetti le tue origini"
-
-[portal.home.quickActions]
-subtitle = "Attività principali per oggi"
-title = "Azioni rapide"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Compositore in 3 passaggi sulla libreria di operazioni tipizzate"
-title = "Crea una pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenti, webhooks, cartelle monitorate"
-title = "Connetti un'origine"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Chiave con ambito, limiti di frequenza e allowlist IP"
-title = "Emetti una chiave API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gestisci la distribuzione dell'Editor"
 sectionsAriaLabel = "Sezioni dell'infrastruttura"
@@ -6876,13 +7363,9 @@ heading = "Chiavi API"
 subheading = "Credenziali con ambito, limiti di frequenza per chiave, autorizzazioni e allowlist IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP consentiti"
-anyIp = "Qualsiasi IP (nessuna allowlist)"
 created = "Creata"
 lastUsed = "Ultimo utilizzo"
-permissions = "Autorizzazioni"
-rateLimit = "Limite di frequenza"
-rateLimitValue = "{{value}} req/min"
+revoke = "Revoca chiave"
 usageMonth = "Utilizzo questo mese"
 usageToday = "Utilizzo oggi"
 
@@ -6890,6 +7373,20 @@ usageToday = "Utilizzo oggi"
 description = "Crea una chiave con ambito per iniziare a chiamare la Stirling API."
 title = "Ancora nessuna chiave API"
 
+[portal.infrastructure.apiKeys.error]
+load = "Impossibile caricare le tue chiavi API. Riprova."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Revocare \"{{name}}\"? Qualsiasi integrazione che usa ancora questa chiave inizierà subito a ricevere errori 401. Questa azione non può essere annullata."
+cancel = "Annulla"
+confirm = "Revoca chiave"
+title = "Revoca chiave API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Attestato"
+inScope = "In ambito"
+notApplicable = "N/D"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtra gli eventi di audit per categoria"
 heading = "Log di audit"
@@ -6933,6 +7430,7 @@ all = "Tutti"
 auth = "Autenticazione"
 config = "Config"
 elevation = "Elevazione"
+policy = "Policy"
 processing = "Elaborazione"
 security = "Sicurezza"
 
@@ -6942,19 +7440,35 @@ title = "Non hai accesso"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Elevazione"
+policy = "Policy"
 processing = "Elaborazione"
 totalEvents = "Eventi totali · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Configurazione"
+elevation = "Elevazione"
+policy = "Policy"
+processing = "Elaborazione"
+security = "Sicurezza"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Errore"
+info = "Info"
+success = "Successo"
+warning = "Avviso"
+
+[portal.infrastructure.certLabel]
+certified = "Certificato"
+inProgress = "In corso"
+notStarted = "Non avviato"
+
 [portal.infrastructure.createKey]
 cancel = "Annulla"
 createKey = "Crea chiave"
 done = "Fatto"
-ipAllowlistHelper = "Intervalli CIDR separati da virgole. Lascia vuoto per consentire qualsiasi IP."
-ipAllowlistLabel = "Allowlist IP"
 keyNameLabel = "Nome chiave"
 keyNamePlaceholder = "es. Produzione · acquisizione"
-permissionsLabel = "Autorizzazioni"
 secretKeyCaption = "Chiave segreta"
 secretWarning = "Archiviala in un gestore di segreti. Stirling memorizza sempre e solo un hash: non è possibile recuperarla in seguito."
 subtitle = "Limita la chiave al minimo necessario. Puoi ruotarla o revocarla in qualsiasi momento."
@@ -6962,6 +7476,12 @@ subtitleCreated = "Copia ora questo segreto: non verrà mostrato di nuovo."
 title = "Crea chiave API"
 titleCreated = "Chiave creata"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "In coda"
+rolledBack = "Ripristinato"
+rolling = "Distribuzione in corso"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6997,6 +7517,15 @@ subheading = "Integrità in tempo reale per ogni regione Stirling distribuita: l
 description = "Le regioni distribuite appariranno qui una volta eseguito il provisioning del tuo workspace."
 title = "Nessuna regione distribuita"
 
+[portal.infrastructure.keyLabel]
+active = "Attiva"
+revoked = "Revocata"
+
+[portal.infrastructure.modelLabel]
+active = "Attivo"
+degraded = "Degradato"
+disabled = "Disabilitato"
+
 [portal.infrastructure.models]
 heading = "Modelli"
 msValue = "{{value}} ms"
@@ -7024,6 +7553,10 @@ status = "Stato"
 type = "Tipo"
 version = "Versione"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/chiamata"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modelli attivi"
 avgLatency = "Latenza media"
@@ -7047,6 +7580,17 @@ modelForAria = "Modello per {{operation}}"
 operation = "Operazione"
 routedTo = "Instradato a"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classificazione"
+extraction = "Estrazione"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradato"
+down = "Non disponibile"
+healthy = "Integro"
+
 [portal.infrastructure.security.access.byok]
 description = "Fornisci una chiave dal tuo KMS. Stirling cifra con essa ma può comunque leggere."
 label = "Bring your own key (BYOK)"
@@ -7172,6 +7716,47 @@ models = "Modelli"
 security = "Sicurezza"
 storage = "Storage"
 
+[portal.integrations]
+addAnother = "Aggiungi un'altra"
+availableHeading = "Disponibili"
+comingSoonHeading = "In arrivo"
+connect = "Connetti"
+connectedHeading = "Connesse"
+connectionCount_one = "{{count}} connessione"
+connectionCount_other = "{{count}} connessioni"
+customApi = "API personalizzata"
+searchPlaceholder = "Cerca integrazioni"
+subtitle = "Tutto ciò con cui Stirling può comunicare. Le credenziali vengono create una sola volta qui, poi referenziate da origini, policy e pipeline."
+title = "Integrazioni"
+typedName = "Nome {{tool}}"
+
+[portal.integrations.filters]
+all = "Tutte"
+audit = "Audit"
+connected = "Connesse"
+notify = "Notifica"
+security = "Sicurezza"
+signing = "Firma"
+storage = "Archiviazione"
+
+[portal.integrations.status]
+connected = "Connessa"
+
+[portal.integrations.table]
+integration = "Integrazione"
+worksWith = "Funziona con"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline"
+policies = "Policy"
+sources = "Origini"
+
+[portal.legal]
+draft = "{{label}} · bozza"
+loadError = "Impossibile caricare questo documento. Riprova."
+loading = "Caricamento…"
+title = "Documento legale"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Componenti"
@@ -7180,6 +7765,7 @@ documents = "Documenti"
 editor = "Editor"
 home = "Home"
 infrastructure = "Infrastruttura"
+integrations = "Integrazioni"
 pipelines = "Pipeline"
 policies = "Criteri"
 procurement = "Approvvigionamento"
@@ -7188,25 +7774,9 @@ sources = "Origini"
 usage = "Utilizzo e fatturazione"
 users = "Utenti"
 
-[portal.notifications]
-markAllRead = "Segna tutte come lette"
-title = "Notifiche"
-viewAll = "Visualizza tutte"
-
-[portal.notifications.ariaLabel]
-none = "Notifiche, nessuna non letta"
-unread_one = "Notifiche, {{count}} non letta"
-unread_other = "Notifiche, {{count}} non lette"
-
-[portal.notifications.count]
-allRead = "tutte lette"
-loading = "caricamento"
-new_one = "{{count}} nuova"
-new_other = "{{count}} nuove"
-
-[portal.notifications.empty]
-description = "Nessuna nuova notifica."
-title = "Sei in pari"
+[portal.nav.section]
+platform = "Piattaforma PDF"
+processor = "Processore PDF"
 
 [portal.pipelines]
 subtitle = "Ogni pipeline documentale automatizzata sul backend: una catena ordinata di operazioni su un insieme di origini, eseguita da un trigger. Fai clic su una riga per vederne passaggi e origini."
@@ -7218,15 +7788,28 @@ newPipeline = "Nuova pipeline"
 [portal.pipelines.builder]
 addStep = "Aggiungi strumento"
 back = "Torna alle pipeline"
+cannotFollow = "Impossibile accettare {{produced}}"
+chooseAccount = "Scegli un account"
+chooseDestination = "Scegli una destinazione"
+chooseOperation = "Scegli cosa fa questo passaggio"
+chooseSource = "Scegli un'origine"
 discard = "Scarta modifiche"
 enabled = "Abilitata"
+inputs = "Input"
+inputSource = "Origine input"
+inputTrigger = "Trigger"
 keepEditing = "Continua a modificare"
+needsConfiguring = "Richiede configurazione"
 needsUpload = "Richiede un file caricato"
+noSources = "Nessuna origine ancora connessa. Creane una per usarla come input."
 noToolMatches = "Nessuno strumento corrisponde alla tua ricerca."
 pipelineSettings = "Impostazioni pipeline"
 searchTools = "Cerca strumenti"
 selectToolBody = "Aggiungi uno strumento per creare la tua pipeline."
 selectToolTitle = "Ancora nessuno strumento"
+sendToSystem = "Invia a un altro sistema"
+stepsIncompatible = "Questi passaggi non possono essere eseguiti su ciò che produce il passaggio precedente: {{tools}}."
+stepsNeedSetup = "Questi passaggi devono ancora essere configurati prima del salvataggio: {{tools}}."
 toolSettings = "Impostazioni strumento"
 unknownStep = "Operazione non riconosciuta, mantenuta così com'è."
 unsavedBody = "Hai modifiche non salvate. Salvale prima di uscire o scartarle?"
@@ -7234,19 +7817,24 @@ unsavedTitle = "Modifiche non salvate"
 uploadUnsupported = "I file caricati non sono ancora supportati nelle pipeline, quindi questi passaggi non possono essere salvati: {{tools}}."
 usesDefaults = "Esegue con impostazioni predefinite"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combina ogni file del passaggio precedente"
+fan-out = "Viene eseguito una volta per file dal passaggio precedente"
+format-mismatch = "Richiede {{accepts}}, ma il passaggio precedente produce {{produced}}"
+output-uncertain = "Potrebbe non essere eseguito: l'output del passaggio precedente dipende da come è configurato"
+source-mismatch = "Richiede {{accepts}}, ma l'input di questa pipeline è {{produced}}"
+undeclared-operation = "Impossibile verificare cosa accetta questo passaggio"
+
 [portal.pipelines.composer]
 addTool = "Aggiungi strumento"
 cancel = "Annulla"
 chainEmpty = "Aggiungi uno strumento per iniziare a creare la tua pipeline."
 create = "Crea pipeline"
-directory = "Cartella di output"
-directoryHelp = "Percorso assoluto sul server. Deve trovarsi nelle cartelle consentite configurate."
 editingUnsupported = "La visualizzazione di questi parametri dello strumento per la modifica non è ancora supportata."
 moveDown = "Sposta giù"
 moveUp = "Sposta su"
 name = "Nome"
 namePlaceholder = "es. Scansione redazione"
-noSources = "Nessuna origine ancora connessa. La pipeline può comunque essere eseguita sui file forniti direttamente."
 noToolSettings = "Questo strumento non ha impostazioni configurabili."
 operations_one = "Operazione ({{count}})"
 operations_other = "Operazioni ({{count}})"
@@ -7271,11 +7859,13 @@ confirm = "Elimina"
 title = "Eliminare la pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Cancella cronologia"
 delete = "Elimina pipeline"
 run = "Esegui ora"
 
 [portal.pipelines.empty]
 action = "Crea una pipeline"
+connectSource = "Connetti un'origine"
 description = "Crea la tua prima pipeline: scegli le origini su cui viene eseguita, concatena le operazioni e scegli dove inviare l'output."
 title = "Ancora nessuna pipeline"
 
@@ -7284,15 +7874,17 @@ active = "Attive"
 paused = "In pausa"
 total = "Pipeline"
 
-[portal.pipelines.output]
-folder = "Scrivi nella cartella"
-inline = "Restituisci file"
-
 [portal.pipelines.run]
+allProcessed_one = "Niente da eseguire: il {{count}} documento dell'origine è già stato elaborato."
+allProcessed_other = "Niente da eseguire: tutti i {{count}} documenti nelle origini sono già stati elaborati."
 completed_one = "Esecuzione completata."
 completed_other = "Tutte le {{count}} esecuzioni completate."
 empty = "Niente da eseguire: le origini non avevano documenti da elaborare."
 failed = "Esecuzione non riuscita: {{error}}"
+historyCleared = "Cronologia cancellata. La prossima esecuzione rielabora tutto ciò che è attualmente nelle origini."
+inFlight = "Niente di nuovo da eseguire: i documenti sono ancora in elaborazione da un'esecuzione precedente."
+parked_one = "Niente da eseguire: {{count}} documento non è riuscito in precedenza ed è parcheggiato. Correggi la causa, poi cancella la cronologia per riprovarlo."
+parked_other = "Niente da eseguire: {{count}} documenti non sono riusciti in precedenza e sono parcheggiati. Correggi la causa, poi cancella la cronologia per riprovarli."
 running = "Esecuzione avviata; ancora in corso."
 timeout = "L'esecuzione richiede più tempo del previsto; potrebbe comunque completarsi in background."
 
@@ -7312,12 +7904,18 @@ manual = "Manuale"
 schedule = "Pianificato"
 
 [portal.policies]
+defaultName = "Policy {{category}}"
 subtitle = "Automazioni permanenti che applicano una pipeline di strumenti a ogni documento. Ogni criterio si attiva al caricamento o all'esportazione, esegue la sua catena di strumenti e salva la versione applicata insieme all'originale."
 title = "Criteri"
 
 [portal.policies.card]
 comingSoon = "Passa a Enterprise"
 notSetUp = "Non configurato"
+requiresAiEngine = "Richiede motore AI"
+
+[portal.policies.categories.classification]
+desc = "Identifica il tipo di ogni documento al caricamento e tagga i suoi metadati per archiviazione e ricerca."
+label = "Classificazione"
 
 [portal.policies.categories.compliance]
 desc = "Applica i requisiti HIPAA, GDPR, SOC 2 o FedRAMP a ogni documento."
@@ -7342,6 +7940,13 @@ label = "Sicurezza"
 [portal.policies.config]
 scopeAll = "Tutti i documenti"
 
+[portal.policies.config.classification]
+summary = "Classifica ogni documento caricato rispetto alle etichette del tuo team e ne tagga i metadati."
+
+[portal.policies.config.classification.rules]
+0 = "Classifica"
+1 = "Tagga metadati"
+
 [portal.policies.config.compliance]
 summary = "Convalida i documenti rispetto ai framework normativi prima che lascino il sistema."
 
@@ -7369,6 +7974,29 @@ minConfidence = "Attendibilità minima"
 2 = "Nomina"
 3 = "Normalizza"
 
+[portal.policies.config.purview]
+label = "Applica un'etichetta di riservatezza Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Tenant Purview"
+labelId = "ID etichetta"
+labelIdHelp = "Il GUID dell'etichetta, dal portale Purview. L'applicazione di un'etichetta scrive i suoi metadati sul PDF; non può crittografare, cosa che richiede il client Microsoft."
+labelName = "Nome etichetta (opzionale)"
+labelNameHelp = "Registrato insieme all'ID così persone e strumenti possono riconoscere l'etichetta."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview distingue un'etichetta applicata da una policy da una scelta da una persona."
+label = "Come viene registrata l'etichetta"
+privileged = "Come scelta da una persona"
+standard = "Come applicata automaticamente"
+
+[portal.policies.config.purviewRead]
+label = "Leggi un'etichetta Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tenant Purview"
+connectionHelp = "Legge l'etichetta già presente sul documento, così i passaggi successivi possono agire su di essa."
+
 [portal.policies.config.retention]
 summary = "Applica per quanto tempo vengono conservati i documenti, quando archiviarli e quando eliminarli."
 
@@ -7436,6 +8064,7 @@ title = "Nessuna attività ancora"
 [portal.policies.endpoints]
 addWatermark = "Filigrana"
 autoRedact = "Oscura PII"
+classifyAndLabel = "Classifica"
 compressPdf = "Comprimi"
 flatten = "Appiattisci"
 ocrPdf = "OCR"
@@ -7446,6 +8075,183 @@ description = "I tuoi criteri sono salvati e appariranno quando la connessione s
 retry = "Riprova"
 title = "Backend non disponibile"
 
+[portal.policies.operations]
+change = "Modifica cosa fa questo passaggio"
+noResults = "Nessun passaggio corrisponde. Prova un nome prodotto, oppure \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Cerca passaggi - prova \"scan\", \"attach\" o un nome prodotto"
+
+[portal.policies.operations.bodyMode]
+binary = "Byte grezzi del file"
+json = "All'interno di un payload JSON"
+multipart = "Come caricamento file (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Il tuo server ClamAV controlla il documento; nulla lascia la tua rete."
+label = "Scansiona alla ricerca di virus (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rifiuta documenti che contengono macro, eseguibili, script o oggetti incorporati."
+label = "Blocca contenuti attivi"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive controlla il documento e l'esecuzione si interrompe se non è pulito."
+label = "Scansiona alla ricerca di virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Archivia il documento elaborato in una pagina."
+label = "Allega a una pagina Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Invia il documento a ConsignO Cloud per la firma."
+label = "Invia per la firma (ConsignO)"
+note = "Invia il documento. Il recupero della copia firmata non è ancora supportato, perché un passaggio non può passare un risultato a un passaggio successivo."
+
+[portal.policies.operations.customApiCall]
+description = "Crea tu la chiamata: percorso, metodo, body e gestione della risposta."
+label = "Chiama una API personalizzata"
+
+[portal.policies.operations.discordNotify]
+description = "Informa un canale che la policy ha gestito un documento."
+label = "Pubblica un messaggio su Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Registra ciò che ha fatto la policy come documento ricercabile."
+label = "Indicizza un evento di audit in Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart è adatto alle API di upload; JSON è adatto alle API che vogliono il file dentro un payload; binary invia i byte grezzi."
+label = "Come inviare il documento"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Un body JSON inviato così com'è. {{document.base64}} contiene il file; {{document.*}} e {{run.*}} vengono compilati per documento."
+label = "Body JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Account"
+
+[portal.policies.operations.fields.domain]
+label = "Dominio Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Il campo del modulo in cui l'API si aspetta il documento."
+label = "Nome campo file"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Da"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Un oggetto JSON di coppie nome/valore degli header. La credenziale della connessione viene aggiunta per te."
+label = "Header"
+
+[portal.policies.operations.fields.index]
+label = "Indice"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Chiave issue"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Inviato come body del messaggio. {{document.*}} e {{run.*}} vengono compilati per documento."
+label = "Messaggio"
+
+[portal.policies.operations.fields.method]
+label = "Metodo"
+
+[portal.policies.operations.fields.pageId]
+label = "ID pagina"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Aggiunto all'URL base della connessione. Non può mai raggiungere un altro host."
+label = "Percorso"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Dove scriverlo nel drive. {{document.filename}} viene compilato per documento."
+label = "Percorso di destinazione"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report lascia il documento invariato. Replace lo sostituisce con ciò che viene restituito."
+label = "Cosa fare con la risposta"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email del firmatario"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Oggetto"
+placeholder = "Elaborato: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analizza questo testo. Usa {{document.title}} o incolla il testo che vuoi controllare."
+label = "Testo da controllare"
+
+[portal.policies.operations.fields.to]
+label = "A"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nome utente Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informa uno spazio che la policy ha gestito un documento."
+label = "Pubblica un messaggio su Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Archivia il documento elaborato in una issue."
+label = "Allega a una issue Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Invia il documento elaborato come allegato."
+label = "Invia il documento via Email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Scrive il documento elaborato in una cartella."
+label = "Carica su Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Il tuo server Presidio segnala i dati personali che trova."
+label = "Rileva dati personali"
+note = "Presidio legge testo, non file. Fornisci il testo che vuoi controllare — il documento stesso non viene caricato."
+
+[portal.policies.operations.responseMode]
+replace = "Sostituisci il documento con la risposta"
+report = "Mantieni il documento, registra la risposta"
+
+[portal.policies.operations.sendgridEmail]
+description = "Invia il documento elaborato come allegato."
+label = "Invia il documento via Email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informa un canale che la policy ha gestito un documento."
+label = "Pubblica un messaggio su Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Registra ciò che ha fatto la policy, dove i tuoi auditor già controllano."
+label = "Invia un evento di audit a Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Registra ciò che ha fatto la policy in un collector HTTP."
+label = "Invia un evento di audit a Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Informa un canale che la policy ha gestito un documento."
+label = "Pubblica un messaggio su Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Invia il documento stesso a un URL che scegli."
+label = "Pubblica il documento su un webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Passa i dettagli dell'esecuzione alla tua automazione."
+label = "Attiva uno scenario Zap o Make"
+
 [portal.policies.stats]
 activeFor = "Attivo"
 dataProcessed = "Dati elaborati"
@@ -7471,6 +8277,13 @@ label = "Doc applicati"
 description = "Configurati ma non attivi"
 label = "In pausa"
 
+[portal.policies.table]
+appliesTo = "Si applica a"
+docs = "Doc applicati"
+enforces = "Applica"
+policy = "Policy"
+status = "Stato"
+
 [portal.policies.wizard.actions]
 back = "Indietro"
 cancel = "Annulla"
@@ -7478,6 +8291,10 @@ continue = "Continua"
 enablePolicy = "Abilita criterio"
 saveChanges = "Salva modifiche"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifica il tipo del documento dalle etichette del tuo team e lo tagga, così viene archiviato e cercato per categoria."
+label = "Classifica il documento"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprime il documento riducendo la dimensione del file."
 label = "Riduci dimensione file"
@@ -7498,10 +8315,18 @@ label = "Oscura informazioni sensibili"
 desc = "Rimuove JavaScript nascosto in modo che nulla possa essere eseguito automaticamente all'apertura del documento."
 label = "Rimuovi contenuto attivo"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dimostra che il documento esisteva in questa forma esatta in un dato momento, usando un'autorità di marcatura temporale indipendente. Viene inviato solo un hash - il documento non lascia mai il tuo server."
+label = "Aggiungi una marca temporale attendibile"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Applica un segno visibile (es. “Riservato”) su ogni pagina."
 label = "Applica una filigrana"
 
+[portal.policies.wizard.classification]
+description = "Ogni documento caricato viene classificato rispetto alle etichette integrate e taggato con i tipi adatti. Il set di etichette è condiviso in tutto il team."
+labelsHeading = "Etichette di classificazione"
+
 [portal.policies.wizard.errors]
 noTools = "Abilita prima almeno uno strumento nel workflow."
 saveFailed = "Impossibile salvare il criterio. Riprova."
@@ -7546,73 +8371,118 @@ setUp = "Configura criterio {{category}}"
 [portal.policies.wizard.workflow]
 description = "Scegli cosa fa questo criterio a ogni documento che elabora."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} attivi"
-noRule = "Nessuna regola applicata ancora"
-subtitle = "Automazioni permanenti attraverso cui passa ogni documento, indipendentemente dalla pipeline che lo gestisce."
-title = "Cosa viene eseguito sui tuoi PDF"
-
 [portal.policySummary.action]
-comingSoon = "Passa a Enterprise"
-configure = "Configura"
 setUp = "Configura"
 
-[portal.policySummary.column]
-activeRule = "Regola attiva"
-policy = "Criterio"
-status = "Stato"
+[portal.processorFlow]
+footnote = "I conteggi riguardano le ultime 24 ore. La velocità del flusso è illustrativa."
+liveBadge = "Live"
+stats = "{{connected}} connessi · {{processed}} PDF elaborati"
+title = "Processore PDF"
 
-[portal.policySummary.empty]
-description = "Una volta configurati i criteri, le categorie appariranno qui."
-title = "Nessun criterio ancora"
+[portal.processorFlow.lens]
+ariaLabel = "Modalità di visualizzazione"
+flow = "Flusso"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Attivo"
-off = "Disattivato"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Non riusciti"
+heading = "Risultati"
+success = "Consegnati"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} attive"
+count = "{{n}} · 24h"
+heading = "Policy"
+setUp = "Configura"
 soon = "Presto"
 
-[portal.processingStatus]
-managePlan = "Gestisci piano"
-volumeSuffix = "PDF elaborati · ultimi 30 giorni"
+[portal.processorFlow.sankey]
+waist = "Policy · {{n}} attive"
+
+[portal.processorFlow.sankey.empty]
+description = "Connetti un'origine e attiva una policy per osservare i documenti scorrere nel processore."
+title = "Ancora nessun flusso"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Connetti"
+editor = "Editor Stirling PDF"
+heading = "Origini"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Acquisizione Email"
 
 [portal.procurement]
-reset = "Reimposta procurement (demo)"
 subtitle = "Fai valutare, contrattualizzare e avviare il tuo team. Ogni documento in un unico posto."
 title = "Procurement"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Paga ora"
-request = "Richiedi"
-sign = "Rivedi e firma"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Accetta e abbonati"
+confidential = "Riservato"
 confirm = "Ho letto e accetto lo Stirling Enterprise Agreement."
-eyebrow = "Accordo"
-intro = "Un unico accordo combinato copre la tua offerta: Master Service Agreement, Order Form, EULA e Data Processing Agreement. Rivedilo, quindi accetta per trasformare il preventivo in un abbonamento vincolante."
-title = "Rivedi il tuo accordo enterprise"
+docName = "Contratto Stirling Enterprise"
+docSub = "MSA, Order Form, EULA e DPA, combinati in un'unica firma."
+download = "Scarica"
+downloadDraftError = "Impossibile generare il PDF del contratto - il renderer del documento non è disponibile. Riprova tra poco o contatta il supporto."
+downloadError = "Impossibile scaricare il contratto firmato. Riprova."
+legalName = "Nome entità legale"
+legalNamePlaceholder = "L'entità legale che firmerà"
+loadError = "Impossibile caricare il contratto. Riprova."
+loading = "Caricamento del contratto..."
+ref = "Rif {{ref}} · {{version}}"
+requestChanges = "Richiedi modifiche"
+scrollHint = "Scorri per rivedere"
+signatory = "Nome firmatario"
+signatoryPlaceholder = "Nome completo"
+signatoryTitle = "Titolo del firmatario"
+signatoryTitlePlaceholder = "es. Responsabile legale"
+signError = "Impossibile registrare la tua firma. Riprova."
 
 [portal.procurement.builder]
 addons = "Componenti aggiuntivi"
+addressLine1 = "Indirizzo riga 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Indirizzo riga 2"
+addressLine2Placeholder = "Suite, piano, edificio"
 back = "Indietro"
 businessName = "Nome azienda"
 businessNamePlaceholder = "La tua azienda"
+city = "Città"
+cityPlaceholder = "San Francisco"
+completeRequired = "Completa i campi obbligatori (contrassegnati con *) con un'email valida prima di generare il preventivo."
+contactEmail = "Email contatto"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nome contatto"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continua"
-country = "Paese"
-countryEuro = "Eurozona (EUR €)"
-countryUK = "Regno Unito (GBP £)"
-countryUS = "Stati Uniti (USD $)"
+done = "Fatto"
 eula = "Ho letto e accetto la Stirling Enterprise EULA. Regola l'accordo generato da questo preventivo."
 generate = "Genera preventivo"
-included = "Incluso"
 indemnification = "Indennizzo IP"
 indemnificationSub = "Difendiamo le richieste IP idonee, secondo la EULA"
-offlineLicense = "Licenza offline / air-gapped"
-offlineLicenseSub = "Un file di licenza scaricabile per un'istanza self-hosted air-gapped"
+paperEyebrow = "Preventivo Enterprise"
+paperFor = "Preparato per"
+pdfSize = "Dimensione PDF"
+poNumber = "Numero PO"
+poNumberPlaceholder = "Opzionale"
+postalCode = "CAP"
+postalCodePlaceholder = "94105"
+posture = "Governance"
+posture_count = "~{{count}} policy"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Classificazione + Condivisione — i valori predefiniti"
+posture_governed = "Governed"
+posture_governedSub = "Aggiunge Sicurezza e Routing"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Ogni categoria — Conformità, Conservazione, Ingestione"
 qbr = "Revisioni aziendali trimestrali"
 qbrSub = "Il tuo SE rivede utilizzo e roadmap ogni trimestre"
+region = "Stato / regione"
+regionPlaceholder = "California"
 running = "{{annual}} / anno · {{years}} anni {{tcv}}"
 s1Sub = "Il tuo team e i PDF che prevedi di elaborare ogni anno."
 s1Title = "Quanto elaborerai?"
@@ -7621,6 +8491,12 @@ s2Title = "Impegno e servizio"
 s3Sub = "Per il preventivo e l'accordo che genera."
 s3Title = "I tuoi dettagli"
 serviceLevel = "Livello di servizio"
+size_compact = "Compatto"
+size_compactSub = "Prevalentemente testo, sotto 1 MB"
+size_heavy = "Pesante"
+size_heavySub = "Scansionato o ricco di immagini, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Testo e immagini misti, da 1 a 5 MB"
 slDedicated = "Dedicato"
 slDedicatedSub = "4 ore lavorative · account manager dedicato · +30%"
 slPriority = "Prioritario"
@@ -7628,6 +8504,8 @@ slPrioritySub = "Stesso giorno lavorativo · CSM nominato · +15%"
 slStandard = "Standard"
 slStandardSub = "Giorno lavorativo successivo · CSM condiviso · incluso"
 stepOf = "Passaggio {{n}} di {{total}}"
+taxId = "Partita IVA / Codice fiscale"
+taxIdPlaceholder = "Opzionale"
 term = "Durata"
 termDiscount = "Sconto del {{pct}}% per impegno pluriennale applicato"
 title = "Crea il tuo preventivo"
@@ -7635,6 +8513,7 @@ training = "Onboarding e formazione"
 trainingSub = "Sessioni live per far partire il tuo team"
 users = "Utenti totali"
 usersPlaceholder = "es. 250"
+viewEula = "Leggilo"
 volEstimated = "Stimato da {{count}} utenti (~2.000 PDF ciascuno, inclusa l'automazione). Modifica se hai dati più precisi."
 volManual = "Stiamo usando la tua cifra. Puoi stimare di nuovo in base alla dimensione del team in qualsiasi momento."
 volNoUsers = "Non sei sicuro? Inserisci la dimensione del team e la stimeremo."
@@ -7643,55 +8522,55 @@ volumePlaceholder = "es. 1.000.000"
 years_one = "{{count}} anno"
 years_other = "{{count}} anni"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} doc"
-done = "Fatto"
-here = "Sei qui"
-hide = "Nascondi"
-optional = "Facoltativo"
-paidAddon = "Componente aggiuntivo a pagamento"
-show = "Mostra"
-subtitle = "Tutto ciò di cui hai bisogno in ogni passaggio del percorso, mostrato man mano che l'offerta avanza."
-supportingSubtitle = "SOC 2, revisioni di sicurezza, moduli fiscali e altro, pronti quando il tuo team sicurezza o procurement li richiede. Alcuni comportano una tariffa una tantum."
-supportingTitle = "Supporto alla tua valutazione"
+[portal.procurement.documents]
+agreement = "Contratto Enterprise"
+agreementSub = "MSA, Order Form e DPA in un'unica firma."
+download = "Scarica"
+eula = "EULA e termini commerciali"
+eulaSub = "Il software e i termini commerciali self-service."
+invoice = "Fattura"
+invoiceSub = "La fattura del tuo primo abbonamento."
+laterInvoice = "Disponibile dopo l'accettazione"
+laterQuote = "Disponibile una volta emesso il preventivo"
+quote = "Preventivo"
+quoteSub = "Il tuo preventivo Enterprise dettagliato."
+sla = "Allegato SLA"
+slaSub = "Livelli di supporto e obiettivi di risposta."
+subprocessors = "Sub-responsabili"
+subprocessorsSub = "Terze parti che elaborano dati per tuo conto."
+subtitle = "La documentazione del tuo accordo, disponibile in qualsiasi momento."
 title = "Documenti"
-upcoming = "In arrivo"
+view = "Visualizza"
 
 [portal.procurement.error]
 title = "Qualcosa è andato storto"
 
 [portal.procurement.hero]
-company = "La tua offerta enterprise"
+barAria = "Fase {{current}} di {{total}}"
 ctaAgreement = "Rivedi e firma l'accordo"
-ctaLive = "Sei live"
-ctaPayment = "Aggiungi pagamento"
+ctaExploring = "Configura la tua prova"
 ctaQuote = "Rivedi il preventivo"
+ctaReviewQuote = "Rivedi preventivo"
 ctaTrial = "Crea il preventivo"
+documents = "Documenti"
 eyebrow = "Procurement enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Invita compagni di team"
-keyDocs = "Documenti chiave"
-nextStep = "Passaggio successivo: {{action}}"
-notStarted = "Non iniziato"
+licenseKey = "Chiave di licenza"
+liveSub = "La tua organizzazione è stata predisposta e la tua licenza è attiva."
+liveTitle = "Sei live su Stirling Enterprise"
+next = "Successivo: {{stage}}"
 open = "Apri procurement"
 scheduleCall = "Pianifica una chiamata"
-setup1Sub = "Invita i tuoi compagni di team"
-setup1Title = "Distribuisci il PDF Editor"
-setup2Sub = "Attiva l'elaborazione su editor e altre origini"
-setup2Title = "Collega il PDF Processor"
-setup3Sub = "Attiva Sicurezza, Conformità, Instradamento o Conservazione quando ne hai bisogno"
-setup3Title = "Aggiungi criteri consigliati"
+sentenceAgreement = "rivedere e firmare il contratto"
+sentenceLive = "provisioning e rollout"
+sentencePayment = "ordine di acquisto e pagamento"
+sentenceQuote = "rivedere e accettare il preventivo"
+sentenceTrial = "configurare il tuo workspace di prova"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} giorno rimasto"
 daysLeft_other = "{{count}} giorni rimasti"
-engineerLabel = "Il tuo solutions engineer"
-eyebrow = "Il tuo rollout"
-live = "Sei live su Stirling Enterprise"
-nextStep = "Passaggio successivo: {{action}}"
-subtitle = "Il tuo solutions engineer ti accompagna in ogni passaggio. Un'azione successiva alla volta; la checklist completa è sotto."
-title = "Dalla trial al live, un percorso guidato"
-trialTitle = "Trial Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Una firma copre MSA, order form, EULA e DPA."
@@ -7725,6 +8604,9 @@ downloadError = "Impossibile generare il file di licenza offline per il momento
 downloadOffline = "Download licenza offline (.lic)"
 hint = "Incolla questa chiave in un'istanza self-hosted per attivarla, oppure conservala per i tuoi registri. Tienila al sicuro."
 label = "La tua chiave di licenza"
+subtitle = "Attiva un'istanza self-hosted con questa chiave, oppure conservala per i tuoi archivi."
+title = "La tua chiave di licenza"
+trialFileHint = "Questo è il tuo file di licenza di prova. Una volta concluso il contratto, torna e scaricalo di nuovo — a differenza della chiave di licenza online, il file .lic non si aggiorna da solo."
 
 [portal.procurement.link]
 cta = "Collega account"
@@ -7737,65 +8619,62 @@ description = "Il tuo abbonamento è attivo e la tua licenza è stata emessa. Il
 eyebrow = "Live"
 title = "Sei live su Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Chiavi trial, preventivi a volume impegnato, accordo con firma unica, pagamento e registro documenti saranno tutti qui quando avvii una valutazione enterprise."
-eyebrow = "Solo Enterprise"
-talkToSales = "Parla con le vendite"
-title = "Il percorso procurement si apre con Enterprise"
-
 [portal.procurement.milestone]
-accept = "Accetta e continua"
-description = "Scarica il PDF per condividerlo con il tuo team, torna ad accettarlo quando sei pronto oppure apporta modifiche."
-download = "Download PDF"
 downloadError = "Impossibile scaricare il PDF del preventivo per il momento — riprova tra poco."
-edit = "Modifica preventivo"
-eyebrow = "Preventivo {{number}}"
-perYear = " / anno"
-preparedFor = "Preparato per {{company}}"
-tcv = "{{value}} valore totale del contratto"
-title = "Il tuo preventivo è pronto"
-
-[portal.procurement.modal]
-cancel = "Annulla"
-chooseFile = "Scegli file"
-close = "Chiudi"
-downloadBody = "Il download inizierà a breve."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "Nessun file selezionato"
-payBody = "Paga il contratto impegnato con carta o bonifico bancario tramite Stripe. Il provisioning del tuo workspace viene effettuato appena il pagamento viene confermato."
-payCta = "Continua su Stripe"
-payTitle = "Conferma pagamento"
-requestBodyFree = "Lo generiamo su richiesta. Conferma e il tuo solutions engineer lo invierà a breve."
-requestBodyPaid = "Questo è un componente aggiuntivo a pagamento. Conferma e il tuo solutions engineer ne definirà l'ambito e invierà la documentazione."
-requestCta = "Richiedi"
-requestTitle = "Richiedi questo documento"
-signBody = "Apre lo Stirling Enterprise Agreement per la firma elettronica: una firma copre MSA, order form, EULA e DPA. Controfirmiamo automaticamente e passi al pagamento."
-signCta = "Apri per la firma"
-signTitle = "Rivedi e firma il tuo accordo"
-uploadBody = "Inviaci il tuo PO e fattureremo in base ai tuoi termini. Trascina il PDF o scegli un file qui sotto."
-uploadCta = "Upload ordine di acquisto"
-uploadTitle = "Upload del tuo ordine di acquisto"
 
 [portal.procurement.payment]
 description = "Il tuo preventivo è accettato e la tua licenza è già attiva — il tuo team può iniziare subito. Paga la prima fattura quando sei pronto; puoi pagarla o scaricarla qui, senza bisogno di email."
+downloadAgreement = "Scarica contratto firmato"
 downloadInvoice = "Download fattura"
-simulate = "Simula pagamento ricevuto (demo)"
+eyebrow = "Pagamento"
 title = "Abbonamento creato"
 viewInvoice = "Visualizza e paga fattura"
 
+[portal.procurement.review]
+acceptCta = "Accetta preventivo"
+annual = "Canone annuale (anno 1)"
+downloadCta = "Scarica preventivo"
+poNumber = "Ordine di acquisto: {{po}}"
+renewal = "Si rinnova a {{amount}}/anno dopo il termine (+{{pct}}% CPI)"
+tcv = "Termine di {{years}} anni, pagato interamente in anticipo: {{tcv}}"
+validUntil = "Valido fino al {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Impossibile caricare il pianificatore."
 fallbackLink = "Apri la pianificazione in una nuova scheda"
+loading = "Caricamento scheduler..."
 subtitle = "Il tuo solutions engineer guiderà il team nel rollout. Scegli un orario adatto a te."
 title = "Pianifica una chiamata"
 
-[portal.procurement.status]
-action = "Azione richiesta"
-available = "Disponibile"
-complete = "Completato"
-pending = "In sospeso"
-request = "Su richiesta"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Sigillato, nessuna uscita"
+back = "Indietro"
+businessName = "Nome azienda"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Gestito, avvio più rapido"
+continue = "Continua"
+deployment = "Dove deve essere distribuito?"
+eula = "Accetto la Stirling EULA e i termini commerciali."
+fullName = "Nome completo"
+fullNamePlaceholder = "Il tuo nome"
+invites = "Invita compagni di team · opzionale"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Pianifica una chiamata"
+seats = "Persone che testano"
+seatsPlaceholder = "es. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker o Kubernetes"
+start = "Avvia prova"
+stepOf = "Passaggio {{n}} di {{total}}"
+subtitle = "Gratis per 14 giorni, nessuna carta richiesta."
+subtitleDetails = "Alcuni dettagli per il tuo preventivo e contratto."
+talkFirst = "Preferisci parlarne prima?"
+title = "Configura la tua prova"
+viewEula = "Leggilo"
+workEmail = "Email di lavoro"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "L'estensione aggiunge 7 giorni e avvisa il tuo solutions engineer."
@@ -7806,20 +8685,6 @@ maxed = "Limite raggiunto"
 subtitle = "La tua trial gratuita dura fino al {{date}}. Nessuna carta richiesta."
 title = "Trial Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Prezzi a volume impegnato, SSO + SCIM + RBAC a livello di organizzazione, audit immutabile di 90 giorni e un SE dedicato."
-homeCta = "Avvia Trial →"
-homeHeadline = "Elabora milioni di PDF."
-
-[portal.recentActivity]
-title = "Attività recente"
-viewAll = "Visualizza tutto"
-
-[portal.recentActivity.empty]
-description = "Esecuzioni pipeline, deploy ed eventi agente appariranno qui."
-title = "Ancora nulla qui"
-
 [portal.search]
 ariaLabel = "Cerca"
 placeholder = "Cerca in Stirling — endpoint, pipeline, doc…"
@@ -7836,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Collegamento account"
 
-[portal.shell.header]
-accountFallback = "Account"
-accountMenu = "Menu account"
-darkMode = "Modalità scura"
-lightMode = "Modalità chiara"
-search = "Cerca"
-searchPlaceholder = "Cerca…"
-signOut = "Esci"
-switchToDark = "Passa al tema scuro"
-switchToLight = "Passa al tema chiaro"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} doc"
 linkAccount = "Collega account Stirling"
-planEditor = "Piano Editor"
-planEnterprise = "Piano Enterprise"
-planProcessor = "Piano Processor"
 primaryNav = "Navigazione principale"
 switchApp = "Cambia app"
 
+[portal.shell.topbar]
+closeNav = "Chiudi navigazione"
+openNav = "Apri navigazione"
+search = "Cerca"
+
 [portal.sources]
 subtitle = "Connessioni di input riutilizzabili che alimentano documenti in Stirling. Configura una connessione una volta, quindi referenziala da qualsiasi numero di criteri. Fai clic su una riga per la sua configurazione e per vedere quali criteri la usano."
 title = "Origini"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Collega origine"
 
+[portal.sources.builder]
+back = "Torna alle origini"
+backToTypes = "Tutti i tipi di origine"
+cancel = "Annulla"
+chooseHint = "Scegli da dove provengono i documenti. I connettori disattivati sono in arrivo."
+comingSoon = "In arrivo"
+comingSoonHeading = "In arrivo"
+create = "Crea origine"
+createTitle = "Connetti un'origine"
+delete = "Elimina"
+editTitle = "Modifica origine"
+enabled = "Abilitata"
+save = "Salva modifiche"
+
+[portal.sources.builder.folderAccess]
+description = "Le automazioni delle cartelle possono usare solo cartelle consentite da un amministratore. Aggiungila nelle impostazioni di Accesso cartella, poi riprova."
+openSettings = "Impostazioni Accesso cartella"
+title = "Questa cartella non è consentita"
+
 [portal.sources.delete]
 body = "Eliminare \"{{name}}\"? Questa operazione non può essere annullata. I criteri che la referenziano dovranno essere aggiornati."
 cancel = "Annulla"
 confirm = "Elimina"
 title = "Eliminare origine?"
 
-[portal.sources.detail]
-closeAriaLabel = "Chiudi dettaglio"
-delete = "Elimina origine"
-docs24h = "Ultime 24h"
-docs30d = "Ultimi 30 giorni"
-docsTotal = "Totale rilevati"
-docsTrend = "Documenti negli ultimi 30 giorni"
-documents = "Documenti"
-edit = "Modifica"
-notReferenced = "Non referenziata da alcun criterio, quindi è sicura da eliminare."
-pause = "Metti in pausa"
-resume = "Riprendi"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Usata da"
-
 [portal.sources.empty]
 description = "Collega una cartella (e, presto, cloud storage) così i tuoi criteri avranno un posto da cui prelevare documenti."
 title = "Nessuna origine collegata ancora"
@@ -7897,18 +8754,57 @@ inUse = "In uso"
 total = "Connessioni"
 unused = "Non usate"
 
+[portal.sources.networkFields.connection]
+helperText = "La connessione salvata con indirizzo del server e credenziali. Riutilizzata da ogni origine che la referenzia."
+label = "Connessione"
+
+[portal.sources.networkFields.directory]
+helperText = "Cartella sul server da monitorare, relativa alla home di accesso o alla root della condivisione. Lascia vuoto per la root."
+label = "Cartella"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume rimuove ogni file dal server una volta che ogni policy lo ha elaborato."
+label = "Modalità di lettura"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: elabora ogni file una volta"
+snapshot = "Snapshot: rileggi la cartella a ogni esecuzione"
+
+[portal.sources.networkFields.recursive]
+label = "Profondità cartella"
+
+[portal.sources.networkFields.recursive.options]
+all = "Includi sottocartelle"
+top = "Solo livello superiore"
+
 [portal.sources.status]
 active = "Attiva"
 disabled = "Disabilitata"
 unused = "Non usata"
 
 [portal.sources.table]
+documents = "Documenti"
 source = "Origine"
 status = "Stato"
 usedBy = "Criteri"
 
+[portal.sources.types.box]
+description = "Recupera documenti dalle cartelle Box che il tuo team condivide già."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Recupera documenti da una cartella Dropbox condivisa."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documenti che il tuo team ha elaborato nell'editor, attraverso esecuzioni di policy e AI."
 label = "Editor"
+noPolicies = "Nessuna policy ancora eseguita dall'editor."
+
+[portal.sources.types.email]
+description = "Trasforma gli allegati inviati a una casella dedicata in documenti."
+label = "Casella Email"
 
 [portal.sources.types.folder]
 description = "Monitora una directory sul server per nuovi documenti."
@@ -7941,25 +8837,80 @@ label = "Profondità cartella"
 all = "Includi sottocartelle"
 top = "Solo livello superiore"
 
+[portal.sources.types.ftp]
+description = "Monitora una cartella di server FTP o FTPS per nuovi documenti."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Recupera documenti da cartelle Google Drive condivise."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Monitora una condivisione di rete SMB per nuovi documenti."
+label = "Drive di rete"
+
+[portal.sources.types.onedrive]
+description = "Monitora cartelle OneDrive per nuovi documenti."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Recupera documenti da un bucket Amazon S3 o compatibile con S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "La connessione salvata che contiene bucket e credenziali. Riutilizzata da ogni origine e output di pipeline che la referenzia."
+label = "Connessione"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume rimuove ogni oggetto dal bucket una volta che ogni policy lo ha elaborato."
+label = "Modalità di lettura"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: elabora ogni oggetto una volta"
+snapshot = "Snapshot: rileggi il bucket a ogni esecuzione"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Vengono elaborati solo gli oggetti le cui chiavi iniziano con questo prefisso."
+label = "Prefisso chiave"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Monitora una cartella di drop SFTP per nuovi documenti."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Recupera documenti dalle librerie documenti SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Origine"
 
+[portal.sources.types.webhook]
+createNote = "Un URL di consegna e un secret di firma vengono generati quando crei questo webhook. I mittenti inviano documenti con POST a quell'URL e le policy che lo referenziano vengono eseguite all'arrivo."
+description = "Ricevi documenti tramite HTTP POST firmato da qualsiasi sistema esterno."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL di consegna"
+secretNote = "Il secret di firma viene mostrato una volta, quando il webhook viene creato. Ricrea l'origine per ruotarlo."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copia"
+done = "Fatto"
+secret = "Secret di firma"
+secretHelp = "Firma il body grezzo di ogni consegna con questa chiave (HMAC-SHA256) e invialo come header X-Stirling-Signature."
+secretWarning = "Copia ora il secret di firma. Per la tua sicurezza viene mostrato solo una volta e non può essere recuperato in seguito."
+title = "Webhook creato"
+url = "URL di consegna"
+usage = "Invia ogni documento con POST come body grezzo della richiesta all'URL di consegna con un tipo di contenuto binario (application/pdf o application/octet-stream). Le policy che lo referenziano vengono eseguite automaticamente all'arrivo."
+
 [portal.sources.wizard]
-back = "Indietro"
-cancel = "Annulla"
-continue = "Continua"
-editTitle = "Modifica origine"
 name = "Nome"
 namePlaceholder = "es. Acquisizione reclami"
-save = "Salva modifiche"
-subtitle = "Passaggio {{current}} di {{total}} · {{label}}"
-title = "Collega un'origine"
 type = "Tipo"
 
-[portal.sources.wizard.steps]
-chooseType = "Scegli tipo"
-configure = "Configura"
-review = "Rivedi e collega"
+[portal.stepModal]
+close = "Chiudi"
 
 [portal.usage]
 managePayment = "Gestisci pagamento"
@@ -8019,16 +8970,9 @@ summary = "Possiede un team — gestisce le risorse dei membri e le configurazio
 2 = "Accesso al portale tramite il criterio predefinito"
 3 = "Tutto ciò che può fare un membro"
 
-[portal.welcome]
-ariaLabel = "Benvenuto in Stirling PDF"
-badge = "Open-source"
-installEditor = "Installa l'Editor"
-inviteTeammates = "Invita compagni di team"
-openInBrowser = "Apri nel browser"
-perks = "Gratis per sempre · Self-hostable"
-subtitle = "Il PDF Editor più sicuro al mondo è gratuito per team di ogni dimensione. Include oltre 60 operazioni PDF e SSO."
-title = "Benvenuto in"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Illimitati"
 
 [printFile]
 title = "Stampa file"
@@ -8611,6 +9555,14 @@ text = "Ruota le pagine del tuo PDF in incrementi di 90 gradi in senso orario o
 [rotate.tooltip.header]
 title = "Panoramica impostazioni Rotazione"
 
+[ruler]
+clearAll = "Cancella tutto"
+hideAllLabels = "Nascondi tutte le etichette"
+hideSmallLabels = "Nascondi etichette piccole"
+physicalValues = "Fisico"
+scaled = "In scala"
+showAllLabels = "Mostra tutte le etichette"
+
 [sanitize]
 desc = "Rimuovi elementi potenzialmente dannosi dai PDF."
 sanitizationResults = "Risultati sanitizzazione"
@@ -8652,31 +9604,45 @@ label = "Rimuovi metadati XMP"
 [sanitize.steps]
 settings = "Impostazioni"
 
-[sanitizePdf]
-tags = "pulire,proteggere,rimuovere le minacce"
-
 [sanitizePDF]
 title = "Pulire PDF"
 
+[sanitizePdf]
+tags = "pulire,proteggere,rimuovere le minacce"
+
 [scalePages]
 tags = "ridimensiona,regola,scala,dimensioni pagina,ridimensiona pagina,scala pagina,cambia dimensione,regola dimensione,ingrandisci,riduci pagina,adatta alla pagina,A4,formato lettera"
 title = "Regola la scala della pagina"
 
+[scaleSettings]
+activeScale = "Scala attiva"
+apply = "Applica scala"
+applyCalibration = "Applica calibrazione"
+calculatedScale = "Scala calcolata"
+calibrate = "Calibra"
+calibrating = "Calibrazione in corso"
+calibrationDistanceRequired = "Inserisci una distanza reale maggiore di zero"
+calibrationInvalid = "Impossibile calcolare la scala da questa misurazione"
+calibrationPaperDistance = "Distanza misurata sulla pagina: {{distance}}"
+calibrationTitle = "Calibra scala"
+calibrationTooltip = "Misura una distanza nota per calcolare automaticamente la scala"
+customScale = "Scala personalizzata"
+noneSet = "Nessuna scala personalizzata impostata"
+presets = "Scale preimpostate"
+ratio = "Rapporto di scala"
+ratioHelp = "Rapporto: 1 unità della pagina = X unità reali"
+ratioPlaceholder = "es. 100"
+ratioPositive = "Il rapporto deve essere maggiore di zero"
+ratioRequired = "Il rapporto è obbligatorio"
+realDistance = "Distanza reale"
+realDistancePlaceholder = "es. 5"
+reset = "Ripristina impostazioni predefinite"
+unit = "Unità"
+unitInvalid = "Unità non valida: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scansione,simulazione,creazione,scansione falsa,aspetto scansionato,effetto scanner,far sembrare scansionato,effetto fotocopia,simulazione scanner,scansione realistica"
 
-[ScannerImageSplit.selectText]
-1 = "Soglia angolo:"
-10 = "Imposta lo spessore del bordo aggiunto o rimosso per prevenire bordi bianchi nel risultato (predefinito: 1)."
-2 = "Imposta il minimo angolo richiesto perché l'immagine venga ruotata (predefinito: 10)."
-3 = "Tolleranza:"
-4 = "Imposta lo spettro di colori attorno al colore di sfondo stimato (predefinito: 30)."
-5 = "Area minima:"
-6 = "Imposta l'area minima di una foto (default: 10000)."
-7 = "Area di contorno minima:"
-8 = "Imposta l'area minima del contorno di una foto"
-9 = "Spessore bordo:"
-
 [scannerImageSplit]
 submit = "Estrai scansioni di immagini"
 tags = "separare,rilevamento automatico,scansioni,multifoto,organizzare"
@@ -8708,6 +9674,18 @@ whatThisDoes = "Cosa fa"
 whatThisDoesDesc = "Trova ed estrae automaticamente ogni foto da una pagina scansionata o da un'immagine composita - senza ritaglio manuale."
 whenToUse = "Quando usare"
 
+[ScannerImageSplit.selectText]
+1 = "Soglia angolo:"
+10 = "Imposta lo spessore del bordo aggiunto o rimosso per prevenire bordi bianchi nel risultato (predefinito: 1)."
+2 = "Imposta il minimo angolo richiesto perché l'immagine venga ruotata (predefinito: 10)."
+3 = "Tolleranza:"
+4 = "Imposta lo spettro di colori attorno al colore di sfondo stimato (predefinito: 30)."
+5 = "Area minima:"
+6 = "Imposta l'area minima di una foto (default: 10000)."
+7 = "Area di contorno minima:"
+8 = "Imposta l'area minima del contorno di una foto"
+9 = "Spessore bordo:"
+
 [search]
 noResults = "Nessun risultato trovato"
 placeholder = "Inserisci termine di ricerca..."
@@ -8725,46 +9703,22 @@ toolNotAvailableLocally = "Il tuo server Stirling-PDF è offline e \"{{endpoint}
 [session]
 expired = "La tua sessione è scaduta. Aggiorna la pagina e riprova."
 
-[sessionManagement.tooltip]
-header = "Gestione delle sessioni di firma"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "I nuovi partecipanti vengono aggiunti alla fine dell'ordine di firma"
-bullet2 = "Non è possibile aggiungere partecipanti dopo la finalizzazione della sessione"
-bullet3 = "Ogni partecipante riceve una notifica quando è il suo turno"
-description = "Puoi aggiungere altri partecipanti a una sessione attiva in qualsiasi momento prima della finalizzazione."
-title = "Aggiunta dei partecipanti"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalizzazione completa</b>: tutti i partecipanti hanno firmato"
-bullet2 = "<b>Finalizzazione parziale</b>: alcuni partecipanti non hanno ancora firmato"
-bullet3 = "I partecipanti senza firma saranno esclusi dal documento finale"
-bullet4 = "Una volta finalizzata, puoi caricare il PDF firmato nei file attivi"
-description = "La finalizzazione combina tutte le firme in un unico PDF firmato. Questa azione non può essere annullata."
-title = "Finalizzazione della sessione"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Non è possibile rimuovere i partecipanti che hanno già firmato"
-bullet2 = "I partecipanti rimossi non riceveranno più notifiche"
-bullet3 = "L'ordine di firma si adegua automaticamente"
-description = "I partecipanti possono essere rimossi dalle sessioni prima di firmare."
-title = "Rimozione dei partecipanti"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Ogni firma viene applicata in sequenza al PDF"
-bullet2 = "I firmatari successivi possono vedere le firme precedenti"
-bullet3 = "Critico per flussi di approvazione e catene di custodia legali"
-description = "L'ordine che specifichi durante la creazione della sessione determina chi firma per primo."
-title = "Ordine di firma"
-
 [settings]
 close = "Chiudi"
 
+[settings.ai]
+documents = "Documenti e RAG"
+general = "Generale"
+limits = "Limiti e prestazioni"
+models = "Modelli e provider"
+title = "IA"
+
 [settings.configuration]
 advanced = "Avanzate"
 database = "Database"
 endpoints = "Endpoint"
 features = "Funzionalità"
+folderAccess = "Accesso alle cartelle"
 mcp = "MCP Server"
 storageSharing = "Archiviazione file e condivisione"
 systemSettings = "Impostazioni di sistema"
@@ -8798,6 +9752,8 @@ defaultPdfEditor = "Editor PDF predefinito"
 defaultPdfEditorActive = "Stirling PDF è il tuo editor PDF predefinito"
 defaultPdfEditorChecking = "Verifica..."
 defaultPdfEditorInactive = "Un'altra applicazione è impostata come predefinita"
+defaultPdfEditorRemind = "Ricordami di impostare come predefinito"
+defaultPdfEditorRemindDescription = "Mostra un banner quando Stirling PDF non è la tua applicazione PDF predefinita."
 defaultPdfEditorSet = "Già predefinito"
 defaultStartupView = "Vista predefinita all'avvio"
 defaultStartupViewDescription = "Scegli quale scheda è attiva nella colonna sinistra all'avvio dell'app"
@@ -8815,9 +9771,18 @@ languageDescription = "Scegli la lingua di visualizzazione"
 logout = "Esci"
 setAsDefault = "Imposta come predefinito"
 theme = "Tema"
+themeAccent = "Colore accento"
+themeAccentCustom = "Colore personalizzato"
+themeAccentCustomHint = "Personalizzato (predefiniti consigliati)"
+themeAccentDark = "Colore accento modalità scura"
+themeAccentDefault = "Predefinito"
+themeAccentDefaultHint = "Tema predefinito (consigliato)"
+themeAccentDescription = "Pulsanti, link ed evidenziazioni lo seguono e colorano leggermente l'app. La modalità chiara e quella scura ne hanno uno ciascuna. Il sistema usa quello attivo."
+themeAccentLight = "Colore accento modalità chiara"
 themeDark = "Scuro"
 themeDescription = "Passa tra modalità chiara e scura"
 themeLight = "Chiaro"
+themeReset = "Ripristina tema predefinito"
 themeSystem = "Sistema"
 title = "Generale"
 user = "Utente"
@@ -8831,6 +9796,12 @@ intro = "Abilita autenticazione utente, gestione dei team e funzionalità dell'a
 learnMore = "Scopri di più nella documentazione"
 title = "Per gli amministratori di sistema"
 
+[settings.general.loginLanding]
+description = "Scegli quale app si apre quando accedi a Stirling Cloud."
+editor = "Editor"
+processor = "Elaboratore"
+title = "Dopo l'accesso"
+
 [settings.general.mode]
 fullscreen = "Schermo intero"
 sidebar = "Barra laterale"
@@ -9039,6 +10010,11 @@ security = "Sicurezza"
 telegram = "Telegram"
 title = "Sicurezza e autenticazione"
 
+[settings.signOut]
+confirm = "Sei sicuro di voler uscire?"
+submit = "Esci"
+title = "Esci"
+
 [settings.team]
 title = "Team"
 
@@ -9655,6 +10631,9 @@ uploadButton = "Carica sul server"
 title = "Sondaggio su Stirling-PDF"
 
 [swagger]
+clickHere = "fai clic qui"
+fallback = "Se non si è aperto automaticamente,"
+opening = "Apertura di Swagger UI in una nuova scheda..."
 tags = "api,documentazione,swagger,endpoint,sviluppo"
 title = "Documentazione API"
 
@@ -9762,14 +10741,42 @@ selectFilesHint = "Seleziona i file in File attivi per eseguire questo strumento
 singleFileScope = "Applicato solo a: {{fileName}}"
 viewerMode = "Passa all'editor di file per selezionare più file."
 
+[toolFormat]
+ANY = "qualsiasi file"
+CBR = "un archivio di fumetti (CBR)"
+CBZ = "un archivio di fumetti (CBZ)"
+CSV = "un file CSV"
+EBOOK = "un ebook"
+EMAIL = "un'email"
+EXCEL = "un foglio di calcolo"
+HTML = "una pagina web"
+IMAGE = "immagini"
+JAVASCRIPT = "un file JavaScript"
+JSON = "un file JSON"
+MARKDOWN = "un file Markdown"
+NONE = "nessun file"
+PCL = "un file di stampa PCL"
+PDF = "un PDF"
+PDF_ENCRYPTED = "un PDF protetto da password"
+POSTSCRIPT = "un file PostScript"
+PPT = "una presentazione"
+TEXT = "un file di testo"
+VIDEO = "un video"
+WORD = "un documento Word"
+XML = "un file XML"
+XPS = "un documento XPS"
+ZIP = "un archivio ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Torna a tutti gli strumenti"
 collapse = "Comprimi pannello"
 expand = "Espandi pannello"
 goBack = "Torna indietro"
+pdfTools = "Strumenti PDF"
 placeholder = "Scegli uno strumento per iniziare"
 premiumFeature = "Funzione Premium:"
+searchTools = "Cerca strumenti"
 toolsHeader = "Strumenti"
 viewAllTools = "Visualizza tutti gli strumenti"
 
@@ -9804,11 +10811,6 @@ noToolsFound = "Nessuno strumento trovato"
 quickAccess = "ACCESSO RAPIDO"
 searchPlaceholder = "Cerca strumenti..."
 
-[toolPicker.categories]
-advancedTools = "Strumenti avanzati"
-recommendedTools = "Strumenti consigliati"
-standardTools = "Strumenti standard"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formattazione avanzata"
 automation = "Automazione"
@@ -9948,16 +10950,31 @@ title = "Utenti"
 you = "(tu)"
 
 [users.action]
+cancelInvite = "Annulla invito"
 deleteTeam = "Elimina team"
 disableMfa = "Reimposta MFA"
 move = "Sposta nel team"
 reinstate = "Ripristina"
 remove = "Rimuovi dall'org"
+removeTeam = "Rimuovi dal team"
 rename = "Rinomina team"
 resetPw = "Reimposta password"
 suspend = "Sospendi"
 unlock = "Sblocca account"
 
+[users.activity]
+daysAgo = "{{count}} g fa"
+hoursAgo = "{{count}} h fa"
+justNow = "Proprio ora"
+minutesAgo = "{{count}} min fa"
+monthsAgo_one = "{{count}} mese fa"
+monthsAgo_other = "{{count}} mesi fa"
+never = "Mai"
+weeksAgo_one = "{{count}} settimana fa"
+weeksAgo_other = "{{count}} settimane fa"
+yearsAgo_one = "{{count}} anno fa"
+yearsAgo_other = "{{count}} anni fa"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Approva criterio"
@@ -9965,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Annullare l'invito a {{email}}? Non potrà unirsi con il link attuale."
+cancelInviteTitle = "Annulla invito"
 deleteTeamBody = "Eliminare il team {{name}}? Il team deve prima essere vuoto: sposta i suoi membri in un altro team e non può ancora possedere configurazioni di integrazione."
 deleteTeamTitle = "Elimina team"
 disableMfaBody = "Rimuovere l'iscrizione MFA di {{name}}? La configurerà di nuovo al prossimo login, se richiesto."
 disableMfaTitle = "Reimposta MFA"
 removeBody = "Rimuovere definitivamente {{name}} dall'organizzazione? Questa operazione non può essere annullata."
+removeTeamBody = "Rimuovere {{name}} dal team? Manterrà il proprio account ma perderà l'accesso alle risorse di questo team."
 removeTitle = "Rimuovi membro"
 
 [users.empty]
@@ -10020,6 +11040,16 @@ username = "Nome utente"
 usernameError = "Il nome utente deve contenere almeno 3 caratteri"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Invitato da {{who}}"
+cancel = "Annulla"
+count = "{{count}} in sospeso"
+desc = "Persone invitate che non si sono ancora unite. Occupano un posto finché non accettano."
+expiresInDays_one = "Scade tra {{count}} giorno"
+expiresInDays_other = "Scade tra {{count}} giorni"
+expiresToday = "Scade oggi"
+title = "Inviti in sospeso"
+
 [users.loadError]
 description = "Qualcosa è andato storto nel contattare il backend, oppure non hai accesso. Riprova."
 title = "Impossibile caricare i membri"
@@ -10210,9 +11240,11 @@ title = "Allegati"
 
 [viewer.bookmarks]
 bookmarkTitle = "Titolo del segnalibro"
+bookmarkTitleRequired = "Il titolo del segnalibro è obbligatorio"
 closeSidebar = "Chiudi la barra laterale dei segnalibri"
 collapseAll = "Comprimi tutti i segnalibri"
 expandAll = "Espandi tutti i segnalibri"
+searchPlaceholder = "Cerca segnalibri"
 
 [viewer.comments]
 addComment = "Aggiungi commento"
@@ -10603,30 +11635,6 @@ title = "Testo filigrana"
 image = "Immagine"
 text = "Testo"
 
-[wetSignature.tooltip]
-header = "Metodi di creazione della firma"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Personalizza colore e spessore della penna"
-bullet2 = "Cancella e ridisegna finché non sei soddisfatto"
-bullet3 = "Funziona su dispositivi touch (tablet, telefoni)"
-description = "Crea una firma scritta a mano usando il mouse o il touchscreen. Ideale per firme personali e autentiche."
-title = "Disegna firma"
-
-[wetSignature.tooltip.type]
-bullet1 = "Scegli tra più font"
-bullet2 = "Personalizza dimensione e colore del testo"
-bullet3 = "Perfetto per firme standardizzate"
-description = "Genera una firma dal testo digitato. Veloce e coerente, adatta a documenti aziendali."
-title = "Digita firma"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Supporta PNG, JPG e altri formati immagine"
-bullet2 = "Sfondi trasparenti consigliati per risultati migliori"
-bullet3 = "L'immagine verrà ridimensionata per adattarsi all'area della firma"
-description = "Carica un'immagine di firma preesistente. Ideale se hai una firma scansionata o un logo aziendale."
-title = "Carica immagine della firma"
-
 [workbenchBar]
 activeFiles = "File attivi"
 annotations = "Annotazioni"
@@ -10650,6 +11658,7 @@ redact = "Oscura"
 rotateLeft = "Ruota a sinistra"
 rotateRight = "Ruota a destra"
 ruler = "Righello / Misura"
+rulerSettings = "Impostazioni scala"
 save = "Salva"
 saveAll = "Salva tutto"
 saveAs = "Salva con nome"
diff --git a/frontend/editor/public/locales/ja-JP/translation.toml b/frontend/editor/public/locales/ja-JP/translation.toml
index 40b1ef6da7..49e8f3c0c0 100644
--- a/frontend/editor/public/locales/ja-JP/translation.toml
+++ b/frontend/editor/public/locales/ja-JP/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "選択されたファイル"
 font = "フォント"
 fontSizeTooltip = "ページ番号テキストのポイントサイズ。大きい数値ほど文字が大きくなります。"
 fontTypeTooltip = "ページ番号のフォントファミリー。文書のスタイルに合わせて選択してください。"
-genericSubmit = "送信"
 green = "緑"
 help = "ヘルプ"
-imgPrompt = "画像を選択"
 incorrectPasswordMessage = "現在のパスワードが正しくありません。"
 info = "情報"
 invalidUndoData = "元に戻せません: 無効な操作データです"
@@ -62,7 +60,6 @@ loginAgreementTitle = "ログイン同意"
 logOut = "ログアウト"
 marginTooltip = "ページ番号とページ端との距離。"
 moreOptions = "その他のオプション"
-multiPdfPrompt = "PDFを選択 (2つ以上)"
 never = "なし"
 no = "いいえ"
 noFileSelected = "ファイルが選択されていません。アップロードしてください。"
@@ -80,7 +77,6 @@ pageOrderPrompt = "ページ順序 (ページ番号をカンマ区切り又は2n
 pages = "ページ"
 pageSelectionPrompt = "カスタムページ選択(ページ番号1、5、6または2n + 1などの関数のコンマ区切りリストを入力します):"
 password = "パスワード"
-pdfPrompt = "PDFを選択"
 pin = "ファイルをピン留め（ツール実行後も保持）"
 pro = "Pro"
 processingComplete = "ファイルの準備ができました。"
@@ -356,6 +352,7 @@ text = "これらの権限は、PDF でユーザーができることを制御
 title = "権限の変更"
 
 [addStamp]
+preview = "スタンプをプレビュー"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "手動ダウンロード: リンクをクリックし、ファイ
 noLanguages = "設定されたディレクトリに tessdata 言語が見つかりません。"
 permissionNotice = "tessdata パスに書き込めません。ダウンロードはブラウザで開かれます。.traineddata ファイルを手動で tessdata フォルダーに保存してください。"
 
+[admin.settings.ai.documents]
+description = "ドキュメントに関する質問に回答するために使用する埋め込みモデルと取得設定を構成します。保存すると AI エンジンに適用されます。"
+title = "ドキュメント & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "エンジン独自の環境認証情報を使用する場合は空白のままにします。セルフホストの単一エンジン構成に適用されます。"
+generic = "埋め込み API key"
+openai = "OpenAI API key"
+setPlaceholder = "保存済み - 現在の key を保持するには空白のままにしてください"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI 互換 / Ollama 埋め込みエンドポイントの Base URL。例: http://ollama:11434/v1。信頼できる内部エンドポイントを指す必要があります（SSRF に注意）。"
+label = "埋め込み base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "埋め込みモデル名。自由入力です。候補はヒントにすぎません。"
+label = "埋め込みモデル"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "ドキュメントテキストをベクトル埋め込みに変換するために使用するプロバイダー。"
+label = "埋め込みプロバイダー"
+
+[admin.settings.ai.documents.maxSearches]
+description = "エージェントが 1 リクエストあたり実行できる取得検索の最大数。"
+label = "最大検索数"
+
+[admin.settings.ai.documents.reindexNote]
+body = "埋め込みモデルの変更はすぐに有効になりますが、以前のモデルでインデックス化されたドキュメントは、検索で正しい結果を返すために再インデックス化する必要があります。"
+title = "再インデックスが必要です"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "埋め込みモデルを変更した場合は、検索で新しいモデルが使用されるように既存のドキュメントを再インデックス化してください。"
+
+[admin.settings.ai.documents.topK]
+description = "検索ごとに取得する最も関連性の高いチャンクの数。"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling を Python AI エンジンに接続し、公開する AI 機能を選択します。変更は再起動後に適用されます。"
+title = "AI エンジン"
+
+[admin.settings.ai.general.capabilities]
+description = "個々の AI 機能をオンまたはオフにします。無効化された機能はアプリで非表示になります。"
+title = "機能"
+
+[admin.settings.ai.general.enabled]
+description = "マスタースイッチ。オフの場合、AI ツール、エージェント、エンジン呼び出しは利用できません。"
+label = "AI を有効化"
+
+[admin.settings.ai.general.features.chat]
+description = "PDF を扱うための会話型アシスタント。"
+label = "チャットアシスタント"
+
+[admin.settings.ai.general.features.classify]
+description = "ドキュメントを種類または内容で自動的に分類します。"
+label = "ドキュメント分類"
+
+[admin.settings.ai.general.features.createPdf]
+description = "AI エージェントを介して新しい PDF（例: HTML から）を生成します。"
+label = "プロンプトから PDF を作成"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "アップロードされたドキュメントに基づいて質問し、回答を取得します。"
+label = "ドキュメントへの質問"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "ドキュメントの数学的および数値的な誤りをレビューします。"
+label = "数学監査"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "AI が作成したレビューコメントと注釈を PDF に追加します。"
+label = "PDF コメントエージェント"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "ドキュメント生成など、負荷の高いエージェント操作のタイムアウト。"
+label = "長時間実行タイムアウト（秒）"
+
+[admin.settings.ai.general.note]
+body = "AI エンジンは別サービスとして実行されます。その共有シークレット"
+body2 = "はコンテナ環境変数で設定されます。プロバイダー API key はこれらのページで入力するか、エンジン環境変数として指定できます。ここで入力した key は保存時にエンジンへ送信されます。"
+title = "AI エンジンについて"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "ストリーミング（トークン単位）チャット応答のタイムアウト。"
+label = "ストリームタイムアウト（秒）"
+
+[admin.settings.ai.general.test]
+button = "接続をテスト"
+failBody = "AI エンジンが応答しませんでした。URL、エンジンコンテナが実行中であること、AI が有効であること（有効化後は再起動が必要）を確認してください。"
+failTitle = "AI エンジンに到達できません"
+okBody = "AI エンジンがヘルスチェックに応答しました。"
+okTitle = "AI エンジンに到達できます"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "エンジンへの標準 AI リクエストのタイムアウト。"
+label = "リクエストタイムアウト（秒）"
+
+[admin.settings.ai.general.url]
+description = "Python AI エンジンの内部 URL。例: http://stirling-pdf-engine:5001。"
+label = "AI エンジン URL"
+
+[admin.settings.ai.limits]
+description = "AI リクエストが実行できる作業量と同時実行数のガードレール。保存すると AI エンジンに適用されます。"
+title = "制限 & パフォーマンス"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "ガードレール: 抽出されたテキストがこの長さを超える AI リクエストを拒否します。"
+label = "リクエストあたりの最大文字数"
+
+[admin.settings.ai.limits.maxPages]
+description = "ガードレール: このページ数を超える PDF の AI リクエストを拒否します。"
+label = "リクエストあたりの最大ページ数"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "エンジン全体で同時に処理中にできるモデル呼び出しの最大数。"
+label = "モデル最大同時実行数"
+
+[admin.settings.ai.models]
+description = "AI エンジンが使用する LLM プロバイダーとスマート/高速モデルを選択します。保存すると AI エンジンに適用されます。"
+title = "モデル & プロバイダー"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "エンジン独自の環境認証情報を使用する場合は空白のままにします。セルフホストの単一エンジン構成に適用されます。"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "保存済み - 現在の key を保持するには空白のままにしてください"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI 互換 / Ollama エンドポイントの Base URL。例: http://ollama:11434/v1。"
+label = "プロバイダー base URL"
+warning = "base URL は信頼できる内部エンドポイントを指す必要があります。エンジンはそこへサーバー側リクエストを行うため、信頼できない値は SSRF に関して危険です。"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "高速モデルの最大出力トークン数。"
+label = "高速モデル最大トークン数"
+
+[admin.settings.ai.models.fastModel]
+description = "軽量タスク向けの低コストで高速なモデル。自由入力です。候補はヒントにすぎません。"
+label = "高速モデル"
+
+[admin.settings.ai.models.provider]
+description = "エンジンが通信する LLM プロバイダー。"
+label = "プロバイダー"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "スマートモデルの最大出力トークン数。"
+label = "スマートモデル最大トークン数"
+
+[admin.settings.ai.models.smartModel]
+description = "複雑な推論向けの高性能モデル。自由入力です。候補はヒントにすぎません。"
+label = "スマートモデル"
+
+[admin.settings.ai.saved]
+body = "変更は AI エンジンに自動的に送信されます。"
+bodyNoPush = "設定を保存しました。AI エンジンが次に構成を取得したときに適用されます。"
+title = "AI 設定を保存しました"
+
 [admin.settings.badge]
 clickToUpgrade = "クリックしてプラン詳細を表示"
 
@@ -938,6 +1094,25 @@ label = "起動時に再生成"
 description = "証明書の有効日数"
 label = "証明書の有効期間（日）"
 
+[admin.settings.folderAccess]
+description = "フォルダーソースとフォルダー出力が読み書きできるディレクトリ。これはセキュリティ境界です。自動化はこのリスト外のサーバーパスを指すことはできません。"
+securityNote = "フォルダーソースと出力を完全に無効化するには、ここを空のままにします。Stirling 独自の構成ディレクトリは常にアクセス禁止です。"
+title = "フォルダーアクセス"
+
+[admin.settings.folderAccess.implied]
+description = "これらの Stirling 管理ディレクトリは常に許可され、ここでは変更できません。"
+serverStorage = "サーバーファイルストレージ"
+title = "常に許可"
+watchedFolder = "Pipeline 監視フォルダー"
+
+[admin.settings.folderAccess.roots]
+add = "追加"
+empty = "許可されたフォルダーはありません。フォルダーソースと出力は現在無効です。"
+hint = "絶対パスを入力してください。例: /data/inbox。"
+label = "許可されたフォルダールート"
+placeholder = "/data/inbox"
+remove = "フォルダールートを削除"
+
 [admin.settings.general]
 description = "ブランディングや既定の動作など、アプリ全体の設定を構成します。"
 system = "システム"
@@ -1842,6 +2017,15 @@ export = "エクスポート"
 accessDenied = "アクセス拒否"
 insufficientPermissions = "この操作を実行する権限がありません。"
 
+[auth.callback]
+completing = "認証を完了しています"
+invalidToken = "OAuth ログインに失敗しました - 無効なトークンです。"
+missingToken = "OAuth ログインに失敗しました - トークンを受信していません。"
+oauthFailed = "OAuth ログインに失敗しました。もう一度お試しください。"
+pleaseWait = "サインインを完了するまでお待ちください。"
+signedOut = "サインアウトしました。もう一度サインインしてください。"
+windowMayClose = "完了したらこのウィンドウを閉じることができます。"
+
 [auth.displayName]
 guest = "ゲスト"
 user = "ユーザー"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "JavaScript や埋め込みファイルなどの潜在的
 description = "このツールは内容に基づいて PDF ファイル名を自動でリネームします。文書内のテキストから最適なタイトルを抽出して適用します。"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "自動回転"
+tags = "自動回転,向きを修正,上下逆,横向き,まっすぐにする,向き,向きを検出,回転を修正,自動方向調整,スキャン済み,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "信頼度しきい値"
+
+[autoRotate.detectionMode]
+auto = "自動"
+osd = "OCR のみ"
+text = "テキストのみ"
+title = "検出方法"
+
+[autoRotate.error]
+failed = "PDF の自動回転中にエラーが発生しました。"
+
+[autoRotate.inferUndetected]
+title = "低信頼度ページを合わせて回転"
+
+[autoRotate.report]
+applied = "{{degrees}}° 時計回り"
+confidenceValue = "信頼度 {{value}}"
+noChange = "変更なし"
+pageLabel = "ページ {{number}}"
+summary = "{{total}} ページ中 {{rotated}} ページを回転、{{unchanged}} ページはそのまま"
+title = "検出レポート"
+
+[autoRotate.report.method]
+inferred = "一致"
+none = "スキップ"
+osd = "OCR"
+text = "テキスト"
+
+[autoRotate.report.note]
+belowThreshold = "しきい値未満"
+blankPage = "ページが空白です"
+inferredFromDocument = "他のページと同じ"
+noDominantDirection = "テキスト方向が混在しています"
+osdFailed = "読み取り可能なテキストが見つかりません"
+osdNoVerdict = "上下方向を判定できませんでした"
+tesseractUnavailable = "OCR がインストールされていません"
+tooFewGlyphs = "テキストが少なすぎます"
+
+[autoRotate.results]
+title = "自動回転結果"
+
+[autoRotate.settings]
+title = "設定"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "ページを回転する前にチェックがどの程度確実である必要があるかを指定します。値を下げるとより多くのページを回転し、上げるとより多くのページをそのままにします。"
+title = "信頼度しきい値"
+
+[autoRotate.tooltip.description]
+text = "各ページの正しい上下方向を判断し、正しい向きに回転します。すでに正しい向きのページはそのままにします。"
+
+[autoRotate.tooltip.detectionMode]
+text = "自動ではまずページ上のテキストを読み取り、それだけで不十分な場合はページを画像として確認します。テキストのみでは画像チェックをスキップするため、スキャンされていないドキュメントでは最速です。OCR のみではすべてのページを画像として扱います。"
+title = "検出方法"
+
+[autoRotate.tooltip.header]
+title = "自動回転"
+
+[autoRotate.tooltip.inferUndetected]
+text = "空白またはほぼ空白のページは単独では確認できません。読み取れたすべてのページが同じ回転を必要とする場合、これらのページもそれに合わせて回転します。"
+title = "低信頼度ページを合わせて回転"
+
 [autoSizeSplitPDF]
 tags = "pdf,分割,ドキュメント,整理"
 
@@ -2189,33 +2440,6 @@ keywords = "キーワード：odd, even"
 numbers = "数値/範囲：5、10-20"
 progressions = "等差列：3n、4n+1"
 
-[certificateChoice.tooltip]
-header = "証明書の種類"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "システム管理者が管理"
-bullet2 = "権限のあるユーザー間で共有"
-bullet3 = "個人ではなく会社の身元を表す"
-bullet4 = "用途: 公式文書、チームの署名"
-description = "組織が提供する共有証明書。全社的な署名権限に使用されます。"
-title = "組織証明書"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "初回使用時に自動生成"
-bullet2 = "あなたのユーザーアカウントに紐づく"
-bullet3 = "他のユーザーと共有不可"
-bullet4 = "用途: 個人文書、個人の責任追跡"
-description = "あなたのユーザーアカウント専用に自動生成される証明書。個人の署名に適しています。"
-title = "個人証明書"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX ファイルとパスワードが必要"
-bullet2 = "外部の認証局で発行可能"
-bullet3 = "法的文書向けの高い信頼レベル"
-bullet4 = "用途: 法的拘束力のある契約、外部検証"
-description = "自分の PKCS#12 証明書ファイルを使用します。証明書プロパティを完全に制御できます。"
-title = "カスタム P12 をアップロード"
-
 [certSign]
 awaitingSignatures = "署名待ち"
 chooseCertificate = "証明書ファイルを選択"
@@ -2542,34 +2766,6 @@ server = "サーバー"
 stepTitle = "証明書の取得元"
 upload = "アップロード"
 
-[certSign.tooltip.header]
-title = "署名の管理について"
-
-[certSign.tooltip.overview]
-bullet1 = "既存の署名とその有効性を確認"
-bullet2 = "署名者と証明書の詳細を表示"
-bullet3 = "新しい電子署名を追加して文書を保護"
-bullet4 = "複数ファイルをサポートし、簡単に移動"
-text = "PDF が電子署名されているかの確認や、新しい電子署名の追加ができます。電子署名は文書の作成者や承認者を証明し、署名後に変更があったかを示します。"
-title = "このツールでできること"
-
-[certSign.tooltip.signing]
-bullet1 = "PEM、PKCS12、JKS、サーバー証明書形式に対応"
-bullet2 = "署名を PDF 上に表示/非表示にするオプション"
-bullet3 = "理由、場所、署名者名を追加"
-bullet4 = "可視署名の配置ページを選択"
-bullet5 = "「Stirling-PDF で署名」用のサーバー証明書を使用可能"
-text = "PDF に署名するには、PEM、PKCS12、JKS などの電子証明書が必要です。署名を文書上に表示することも、セキュリティ目的のみで非表示にすることもできます。"
-title = "署名の追加"
-
-[certSign.tooltip.validation]
-bullet1 = "署名が有効か無効かを表示"
-bullet2 = "署名者情報と署名日時を表示"
-bullet3 = "署名後に文書が変更されたかを確認"
-bullet4 = "検証にカスタム証明書を使用可能"
-text = "署名の確認では、署名が有効か、誰がいつ署名したか、署名後に文書が変更されたかを知らせます。"
-title = "署名の検証"
-
 [changeCreds]
 changeUsername = "ユーザー名を更新します。更新後はログアウトされます。"
 credsUpdated = "アカウントを更新しました"
@@ -2824,6 +3020,7 @@ next = "次へ"
 preview = "プレビュー"
 previous = "前へ"
 refresh = "更新"
+remaining = "残り"
 retry = "再試行"
 save = "保存"
 
@@ -3264,24 +3461,6 @@ description = "これらのCookieはウェブサイトが正常に機能する
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "高度なモニタリング"
-allInOneWorkspace = "オールインワンの PDF ワークスペース（ビューア、ツール、エージェント）"
-apiSandbox = "API サンドボックス"
-dedicatedSupportSlas = "専用サポートと SLA"
-fasterThroughput = "スループット 10 倍"
-fullyPrivateFiles = "完全にプライベートなファイル"
-largeFileProcessing = "大容量ファイルの処理"
-orgWideAccess = "組織全体のアクセス制御"
-premiumAiModels = "プレミアム AI モデル"
-prioritySupport = "優先サポート"
-privateDocCloud = "プライベートドキュメントクラウド"
-ragFineTuning = "RAG + ファインチューニング"
-secureApiAccess = "セキュアな API アクセス"
-standardThroughput = "標準スループット"
-unlimitedApiAccess = "API アクセス無制限"
-unlimitedSeats = "ユーザー数無制限"
-
 [crop]
 autoCrop = "余白を自動トリミング"
 noFileSelected = "トリミングを開始する PDF ファイルを選択してください"
@@ -3346,6 +3525,7 @@ message = "既定のPDFハンドラーの設定に失敗しました"
 title = "エラー"
 
 [defaultApp.prompt]
+dontRemind = "今後表示しない"
 message = "PDFファイルを開く既定のアプリとして Stirling PDF を設定します。"
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "グループをカスタマイズ"
 dropHint = "開始するにはファイルを開いてください"
 dropToAdd = "Drop files to add"
 expand = "サイドバーを展開"
-files = "ファイル"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive が未設定です"
 leaveMyFiles = "マイファイルを離れる"
+library = "PDF ライブラリ"
 myFiles = "マイファイル"
 noFiles = "まだファイルがありません"
 openFileManager = "ファイルマネージャーを開く"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "追加"
-addLabel = "ラベルを追加…"
-categoryIconAria = "{{name}} のアイコンを選択"
-createCategory = "カテゴリを作成"
-delete = "カテゴリを削除"
 done = "完了"
-hide = "カテゴリを非表示"
-newCategory = "新しいカテゴリ名…"
-removeLabel = "{{name}} を削除"
-rename = "名前を変更"
 reset = "デフォルトにリセット"
-search = "ラベルを検索…"
-show = "カテゴリを表示"
 subtitle = "ファイルを親カテゴリにグループ化します。既存または新しいラベルをカテゴリに追加したり、名前を変更したり、独自のカテゴリを作成したりできます。どのカテゴリにも属さないファイルは「その他」に表示されます。"
 title = "サイドバーのカテゴリ"
 
@@ -3808,6 +3977,7 @@ refresh = "サーバーから再読み込み"
 remove = "削除"
 removeVersion = "このバージョンを削除"
 rename = "名前の変更"
+renamed = "名前を変更しました"
 renameFolder = "フォルダ名を変更"
 resizeFolderTree = "フォルダツリーのサイズ変更（矢印キー、Shiftで大きく移動；ダブルクリックで自動調整）"
 save = "保存"
@@ -3910,9 +4080,7 @@ count = "ファイル"
 folder = "フォルダ"
 labels = "ラベル"
 modified = "更新日時"
-name = "名前"
 size = "サイズ"
-toolHistoryAtVersion = "累積ツールチェーン"
 totalSize = "合計サイズ"
 type = "種類"
 versionHistory = "バージョンの履歴"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "すべて保存済み"
+extractCsvError = "CSV の抽出に失敗しました"
+extractXlsxError = "XLSX の抽出に失敗しました"
 flattenAfterFilling = "入力後にフラット化"
+requiredAbbreviation = "必須"
+requiredFieldsError = "必須フィールドをすべて入力してください"
 rescanFields = "フィールドを再スキャン"
 rescanFormFields = "フォームフィールドを再スキャン"
 save = "保存"
+saveShortcut = "Ctrl+S で保存"
+unsavedChanges = "未保存の変更"
 
 [formFill.sidebar]
 close = "サイドバーを閉じる"
@@ -4309,6 +4484,11 @@ desc = "検出されたヘッダーに基づいて PDF ファイル名を自動
 tags = "自動検出,ヘッダー基準,整理,ラベル変更"
 title = "PDF ファイル名を自動変更"
 
+[home.autoRotate]
+desc = "各ページの向きを検出し、自動的に正しい向きへ回転します。"
+tags = "自動回転,向きを修正,上下逆,横向き,まっすぐにする,向き,向きを検出,回転を修正,自動方向調整,スキャン済み,OSD"
+title = "自動回転"
+
 [home.autoSizeSplitPDF]
 tags = "自動,分割,サイズ"
 title = "サイズ・数による自動分割"
@@ -4608,13 +4788,13 @@ hint = "PDF 上に配置する PNG、JPG、SVG などの画像ファイルをア
 label = "画像をアップロード"
 placeholder = "画像ファイルを選択"
 
-[imageToPdf]
-tags = "conversion,img,jpg,picture,photo,psd,photoshop"
-
 [imageToPDF]
 header = "画像をPDFに変換"
 title = "画像をPDFに変換"
 
+[imageToPdf]
+tags = "conversion,img,jpg,picture,photo,psd,photoshop"
+
 [infoBanner]
 dismiss = "閉じる"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "招待されています！"
 
 [landing]
 addFiles = "ファイルを追加"
-heroSubtitle = "既存の PDF をドロップまたは追加して開始してください。"
 mobileUpload = "モバイルからアップロード"
 openFromComputer = "コンピューターから開く"
 uploadFromComputer = "コンピュータからアップロード"
-workbenchEmptyStateHero = "PDF をどこにでもドロップ"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "ログイン"
 magicLinkSent = "マジックリンクを {{email}} に送信しました！ メールを確認してリンクをクリックし、サインインしてください。"
 mfaCode = "認証コード"
 mfaRequired = "二要素認証コードが必要です"
+noAccount = "アカウントをお持ちでないですか？"
 or = "または"
 password = "パスワード"
 passwordChangedSuccess = "パスワードを変更しました。新しいパスワードでサインインしてください。"
@@ -4715,26 +4894,10 @@ signInWith = "次でサインイン"
 title = "サインイン"
 unexpectedError = "予期しないエラー：{{message}}"
 updatePassword = "パスワードを更新"
-useEmailInstead = "メールでログイン"
 useMagicLink = "代わりにマジックリンクを使う"
 username = "ユーザー名"
 youAreLoggedIn = "ログイン済みです！"
 
-[login.slides.edit]
-alt = "PDF を編集"
-subtitle = "墨消し、署名、閲覧、操作のための十数種のツールを備え、求める機能が必ず見つかります。"
-title = "必要な情報を表示・保護するために PDF を編集"
-
-[login.slides.overview]
-alt = "Stirling PDF の概要"
-subtitle = "プライバシー最優先の PDF 向けクラウドスイート。変換、署名、墨消し、文書管理に加え、50 以上の強力なツールを提供。"
-title = "PDF のためのワンストップソリューション"
-
-[login.slides.secure]
-alt = "PDF を保護"
-subtitle = "パスワード追加、墨消し、証明書管理を簡単に。"
-title = "PDF の機密情報を保護"
-
 [margin]
 large = "大"
 medium = "中"
@@ -4976,6 +5139,7 @@ pinButton = "ツール実行後もファイルをアクティブのままにし
 results = "ツールの実行が終わると、<strong>レビュー</strong> ステップで結果のプレビューがこのパネルに表示され、操作の取り消しやファイルのダウンロードができます。"
 runButton = "ツールの設定が完了したら、このボタンで選択したすべての PDF に実行できます。"
 selectCropTool = "ツールの使い方を説明するため、まずは <strong>切り抜き</strong> ツールを選択しましょう。"
+stepOf = "ステップ {{current}} / {{total}}"
 toolInterface = "こちらが <strong>切り抜き</strong> ツールの画面です。まだ作業用の PDF ファイルを追加していないため、表示項目は多くありません。"
 workbench = "ここが <strong>ワークベンチ</strong> です。PDF を表示・編集するメインエリアです。"
 wrapUp = "準備完了です！アプリの主要エリアとその使い方を学びました。<strong>ヘルプ</strong> ボタンを押せば、いつでもこのツアーを再表示できます。"
@@ -4988,6 +5152,26 @@ showMeAround = "ツアーを見る"
 skipForNow = "今はスキップ"
 skipTheTour = "ツアーをスキップ"
 
+[onboarding.checklist]
+dismiss = "閉じる"
+title = "Stirling PDF をセットアップ"
+
+[onboarding.checklist.downloadDesktop]
+description = "お使いのマシンで Stirling をネイティブ実行"
+title = "デスクトップ版 Stirling をダウンロード"
+
+[onboarding.checklist.inviteTeam]
+description = "チームと共同作業"
+title = "チームメンバーを招待"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling の改善に協力"
+title = "匿名の使用状況データを共有"
+
+[onboarding.checklist.takeTour]
+description = "簡単な案内で Stirling の動作を確認"
+title = "ツアーを開始"
+
 [onboarding.desktopInstall]
 body = "Stirling はデスクトップアプリとして最適に動作します。オフラインでも使えて、文書に素早くアクセスし、PC上でローカル編集できます。"
 selectOs = "オペレーティングシステムを選択"
@@ -4996,7 +5180,21 @@ titleWithOs = "{{osLabel}} 用をダウンロード"
 
 [onboarding.mfa]
 authenticationCode = "認証コード"
+description = "認証アプリをリンクしてアカウントを保護します。QR code をスキャンするかセットアップ key を入力し、6 桁のコードを確認して完了します。"
+enable = "MFA を有効化"
+enableError = "二要素認証を有効化できません。コードを確認してもう一度お試しください。"
+enterCode = "アプリの 6 桁のコードを入力してください。"
+enterCodeError = "続行するには認証コードを入力してください。"
+logout = "ログアウト"
+openAuthenticator = "Google Authenticator、Authy、または 1Password を開きます。"
 qrCodeLoading = "QRコードを生成中…"
+regenerateQrCode = "QR code を再生成"
+scanQrCode = "QR code をスキャンするか、下のセットアップ key を入力してください。"
+setupError = "二要素設定を開始できません。もう一度お試しください。"
+setupKey = "セットアップ key（手動入力）"
+stepByStep = "ステップごと"
+success = "MFA が有効になりました。続行できます。"
+title = "多要素認証のセットアップ"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "ログインモードを有効にすると、ユーザー管理、設定の構成、サーバーの健全性監視が可能です。サーバー上の最初の <strong>{{freeTierLimit}}</strong> 人は無料で Stirling を利用できます。"
@@ -5005,6 +5203,11 @@ adminTitle = "管理者向け概要"
 userBody = "メンバーを招待し、役割を割り当て、1つの安全なワークスペースで文書を整理できます。ソロ利用を超えて拡大する準備ができたら、いつでもログインモードを有効にしてください。"
 userTitle = "プラン概要"
 
+[onboarding.processorIntro]
+body = "Stirling は到着した各ドキュメントを分類、保護、処理する自動ルールである <strong>Policies</strong> を実行するようになりました。<strong>Processor</strong> で設定し、実行状況を監視できます。"
+cta = "Processor を確認"
+title = "Stirling Processor を確認"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "年払い前払い"
+
+[payg.prepaid.banner]
+exhausted = "前払い容量を使い切りました。従量課金が再開されました。割引を維持するには追加購入してください。"
+expiring_one = "前払い年はあと {{count}} 日で終了します。未使用容量は期限切れになります — 新しい年を開始するには追加購入してください。"
+expiring_other = "前払い年はあと {{count}} 日で終了します。未使用容量は期限切れになります — 新しい年を開始するには追加購入してください。"
+low = "前払い容量の残りが {{pct}}% です。処理を中断しないために、いつでも追加購入できます。"
+
+[payg.prepaid.card]
+subtitle = "従量課金の前、および利用上限の外で使用されます。"
+title = "前払い容量"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} 前払いクレジット中"
+expires = "有効期限 {{date}}"
+
+[payg.prepaid.state]
+exhausted = "使い切りました"
+healthy = "十分に残っています"
+low = "残りわずか"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "メールに記載のライセンスキーを貼り付け"
 success = "ライセンスを有効化しました！"
 successMessage = "ライセンスは正常に有効化されました。このウィンドウを閉じても構いません。"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "適用済み"
-enforcing = "適用中..."
-failed = "適用に失敗しました"
 outputsUnavailable = "ポリシーの出力は、もうダウンロードできません。"
 partialOutputsUnavailable = "一部のポリシー出力は、ダウンロードできなくなりました。"
-retrying = "ビジーのため再試行しています..."
 runNotFound = "適用の実行が見つからなくなりました。"
-step = "ステップ {{current}}/{{total}}"
 timedOut = "実行が完了する前に適用がタイムアウトしました。"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "閉じる"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} を適用中"
 applyingProgress = "{{names}} を適用中（{{total}} 中 {{done}}）"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} 個のファイルのうち {{failures}} 個を処理
 failureTitle = "完全な適用なしでエクスポート"
 printPolicyAppliedBody = "この PDF はポリシーを満たすよう更新されました。変更内容を確認してから、もう一度印刷してください。"
 printPolicyAppliedTitle = "印刷前にポリシーを適用"
-queued = "+{{count}} 件をキューに追加"
 successTitle = "{{names}} を適用しました"
 summaryMore = "{{first}}、{{second}}、ほか {{more}} 件"
 summaryTwo = "{{first}} と {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "変換前に適用"
-default = "適用中"
-export = "エクスポート前に適用"
-input = "インポート時に適用"
-print = "印刷前に適用"
-
-[policies.field]
-accessLog = "アクセスログ"
-archiveAfter = "次の期間後にアーカイブ"
-auditTrail = "監査証跡"
-belowThreshold = "しきい値未満"
-destination = "送信先"
-frameworks = "フレームワーク"
-immutableHold = "変更不可の保持"
-keepFor = "保持期間"
-minConfidence = "最小信頼度"
-notify = "ルート時に通知"
-onViolation = "非準拠時"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "追加"
-addPlaceholder = "ラベルを追加…"
-customNote = "チーム向けにカスタマイズ済みです。"
-defaultNote = "組み込みのデフォルトを使用しており、チームと共有されています。"
-duplicate = "\"{{name}}\" はすでに存在します。"
-edit = "ラベルを編集"
-empty = "ラベルはまだありません。"
-export = "JSON をエクスポート"
-iconAria = "{{name}} のアイコンを選択"
-import = "JSON をインポート"
-importError = "そのファイルをインポートできませんでした。"
-managedNote = "チームラベルはチームリーダーによって管理されています。"
-modalSubtitle = "チーム全体で共有されます。分類機能が各ドキュメントに適したラベルを選択します。"
-modalTitle = "分類ラベル"
-pickIcon = "{{label}} アイコンを使用"
-removeAria = "{{name}} を削除"
-resetToDefault = "デフォルトにリセット"
-saveForTeam = "チーム用に保存"
-saving = "保存中…"
-sectionLabel = "分類ラベル"
-startFromScratch = "最初から始める"
-teamCount = "チームラベル"
-tooLong = "ラベルは最大 {{max}} 文字までです。"
-ungrouped = "未グループ"
-view = "ラベルを表示"
+categoryCount = "カテゴリ"
+hideCategory = "カテゴリを非表示"
+labelCount = "ラベル"
+sharedNote = "これらのラベルは組み込みで、チーム全体で共有されます。"
+showCategory = "カテゴリを表示"
 
 [policies.pii]
 account = "アカウント番号（ラベル付き）"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "米国のルーティング番号（ABA）"
 ssn = "社会保障番号"
 
-[policies.settings]
-noneExport = "現在、エクスポート時に実行されるポリシーはありません。"
-noneUpload = "現在、アップロード時に実行されるポリシーはありません。"
-onExport = "エクスポート時"
-onUpload = "アップロード時"
-reorderHandle = "ドラッグして並べ替え"
-runOrderDesc = "同じトリガーで複数のポリシーが実行される場合、この順序で実行されます — 各ポリシーは前のポリシーの出力に対して実行されます。ドラッグして並べ替えます。"
-title = "ポリシー設定"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "ポリシーオプション"
-policySettings = "ポリシー設定"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "失敗したポリシーを再試行（{{count}}）"
-rowProgress = "{{total}} 個中 {{completed}} 個のファイルを処理済み"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "ポリシーとは？"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "社会保障番号やカード番号などの機密情報を自動的に検出して黒塗りにし、文書内で読めないようにします。"
-sanitize = "ファイルから隠れた JavaScript を削除し、開いたときに自動的に実行されないようにします。"
-watermark = "全ページに見えるマーク（例: \"Confidential\"）を表示します。"
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "閉じる"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} を適用中..."
 badgeRan = "{{name}} ポリシーがこのファイルで実行されました"
+badgeRunning = "{{name}} 実行中..."
 blockingAction = "ポリシー適用中のため {{action}} がブロックされました。お待ちください..."
 dismiss = "オーバーレイを閉じる"
 enforcingTitle = "ポリシーを適用中..."
@@ -6151,6 +6211,7 @@ viewAnyway = "ファイルを表示（ポリシーはまだ適用中）"
 [policyOption]
 autoRedactPhi = "PHIを自動墨消し"
 blockExport = "エクスポートをブロック"
+ccpa = "CCPA"
 contracts = "契約書"
 documents = "ドキュメント"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editorプラン"
 subscribed = "Processorプラン"
 unlinked = "未リンク"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "ドキュメントから初期生成"
-sectionsAriaLabel = "エージェントビルダーのセクション"
-selectorAriaLabel = "エージェント"
-subtitle = "ドキュメントを分類、抽出、ルーティングする AI エージェントを設計、テスト、公開します。シナリオを定義し、ツールアクセスを制限し、ゴールデンセットを実行して、バージョンを公開します。"
-title = "エージェントビルダー"
-
-[portal.agentBuilder.bootstrap]
-cancel = "キャンセル"
-dropzoneText = "サンプルドキュメント（PDF または画像）を選択"
-lead = "サンプルドキュメントをドロップすると、調整可能なシナリオと抽出スキーマを提案します。レビューするまで何も公開されません。"
-submit = "エージェントを初期生成"
-subtitle = "代表的なファイルから新しいエージェントを作成"
-title = "ドキュメントから初期生成"
-
-[portal.agentBuilder.empty]
-description = "サンプルドキュメントからエージェントを初期生成してシナリオと抽出スキーマの土台を作成し、調整して公開します。"
-title = "エージェントはまだありません"
-
-[portal.agentBuilder.evals]
-casesPassing = "合格ケース"
-columnCase = "評価ケース"
-columnLatency = "レイテンシ"
-columnResult = "結果"
-fail = "失敗"
-goldenSetPassRate = "ゴールデンセット合格率"
-latencyMs = "{{ms}} ms"
-notRun = "未実行"
-pass = "合格"
-passRate = "合格率"
-runEvals = "評価を実行"
-
-[portal.agentBuilder.evals.empty]
-description = "評価により、シナリオを再現可能なゴールデンセットに変換できます。アップグレードすると、合格率の推移を記録し、それを公開の条件にできます。"
-title = "ゴールデンセットはまだありません"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "ゴールデンセット全体"
-activeAgents = "アクティブなエージェント"
-avgPassRate = "平均評価合格率"
-fleetWide = "全体"
-latestPublished = "最新の公開済み"
-scenarios = "シナリオ"
-testCases = "テストケース"
-totalDescription_one = "合計 {{count}}"
-totalDescription_other = "合計 {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "追加"
-addScenario = "シナリオを追加"
-enable = "有効化"
-expectationLabel = "期待される動作"
-expectationPlaceholder = "エージェントが行うべきこと"
-inEval = "評価中"
-mute = "ミュート"
-muted = "ミュート済み"
-nameLabel = "名前"
-namePlaceholder = "例：コンプライアンスのエスカレーション"
-
-[portal.agentBuilder.tabs]
-evals = "評価"
-scenarios = "シナリオ"
-tools = "ツール"
-versions = "バージョン"
-
-[portal.agentBuilder.tools]
-broadAccess = "広範なアクセス"
-deniedHint = "選択したツールはブロックされています。それ以外は引き続き呼び出せます。"
-deniedTools = "拒否されたツール"
-governanceGate = "ツールガバナンスは Enterpriseプランで利用できます。"
-restricted = "制限付き"
-restrictedAccess = "制限付きツールアクセス"
-restrictedDescription = "下で拒否したものを除くすべてのツールを許可します。"
-
-[portal.agentBuilder.versions]
-current = "現在"
-historyGate = "完全なバージョン履歴とロールバックは Enterpriseプランで利用できます。"
-publish = "公開"
-rollBack = "ロールバック"
-
 [portal.assistant]
 close = "アシスタントを閉じる"
 error = "アシスタントに接続できませんでした。"
@@ -6365,9 +6346,21 @@ typing = "入力中"
 loading = "読み込み中"
 redirectingToEditor = "エディターにリダイレクト中..."
 
+[portal.billing.activation]
+maybeLater = "後で"
+title = "Processor を有効化"
+
+[portal.billing.activation.payg]
+sub = "月額上限を設定します。実行した分だけ支払います。"
+title = "従量課金"
+
+[portal.billing.activation.prepay]
+badge = "2 か月無料"
+sub = "請求書 1 通、カードまたは銀行振込。"
+title = "1 年分を前払い"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function が client_secret を返しませんでした。"
-subtitle = "無料の Editorプラン付与分を超えて続行するにはカードを追加してください。残りは Stripe が処理します。"
 title = "Processorプランを有効にする"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "お支払いは成功しましたが、有効化に通常より少し時
 close = "閉じる"
 title = "もう少しです"
 
+[portal.billing.checkout.cap]
+amountAria = "月額利用上限"
+back = "戻る"
+continue = "支払いへ進む"
+error = "利用上限を設定できませんでした"
+finePrint = "請求書は毎月発行されます。いつでもキャンセルできます。"
+noLimit = "上限なし"
+note = "上限を超えて請求されることはありません。処理が一時停止するだけです。"
+perMonth = "/月"
+title = "利用上限を設定"
+
+[portal.billing.checkout.card]
+fields = "カード番号 · MM / YY · CVC · ZIP"
+label = "カード詳細"
+note = "カード詳細は Stripe が収集します。Stirling が PAN または CVC を保存することはありません。"
+
 [portal.billing.checkout.error]
 title = "チェックアウトを開始できませんでした"
 
@@ -6383,10 +6392,9 @@ body = "お支払いが完了しました。リンクされたインスタンス
 hint = "このウィンドウを開いたままにしてください。"
 title = "Processorプランを有効化中..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "を設定して、アプリ内チェックアウトを有効にしてください。"
-bodyBefore = "設定"
-title = "Stripe が設定されていません"
+[portal.billing.checkout.pay]
+limit = "月額利用上限 {{amount}}/月。上限に達すると処理が一時停止します。"
+limitNoCap = "利用上限なし。処理は一時停止しません。請求書は毎月発行されます。"
 
 [portal.billing.enterpriseUpsell]
 cta = "Enterprise 見積もりを作成"
@@ -6409,10 +6417,12 @@ currentPlan = "現在のプラン"
 freeForever = "ずっと無料"
 noTeamResolved = "ウォレット上でチームがまだ解決されていません — 更新してもう一度お試しください。"
 ownerOnly = "チームオーナーのみが Processorプランを有効にできます。"
+payInvoice = "完了するには請求書を支払う"
 planName = "Editor"
 ssoIncluded = "SSO 含む"
 switchOnProcessor = "Processor を有効にする →"
 unlimitedUsers = "無制限のユーザー"
+viewQuote = "見積もりを表示"
 
 [portal.billing.invoices]
 columnAmount = "金額"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "直接 API リクエスト"
 segmentApiLabel = "API"
 segmentAutomationDesc = "自動化とパイプライン"
 segmentAutomationLabel = "自動化"
+sizeMultiplier = "{{formatted}} PDFs にサイズ倍率が適用されました"
+summary = "{{unique}} 個のユニーク · {{units}} メーター単位 · PDF あたり平均 {{avg}}"
+summaryNoRate = "{{unique}} 個のユニーク · {{units}} メーター単位"
 unit = "従量制PDF"
+unitsPending_one = "リンク済みインスタンスから {{units}} メーター単位の同期待ち"
+unitsPending_other = "リンク済みインスタンスから {{units}} メーター単位の同期待ち"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} 前払いクレジット中"
+expires = "有効期限 {{date}}"
+eyebrow = "前払い容量"
+note = "従量課金の前、および利用上限の外で使用されます。"
+topUp = "追加購入"
+
+[portal.billing.prepaid.buy]
+back = "戻る"
+calcTitle = "年間支払いを計算"
+cancel = "キャンセル"
+cancelPurchase = "購入をキャンセル"
+close = "閉じる"
+continueToPayment = "支払いへ進む"
+finalise = "確定"
+invoiceErrorTitle = "請求書を生成できませんでした"
+loadingTitle = "見積もりを読み込んでいます"
+payTitle = "1 年分を支払う"
+step = "ステップ {{current}} / {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "変更"
+deployRow = "デプロイ"
+done = "完了"
+enterpriseHint = "これはエンタープライズ規模です。このボリュームでは、エンタープライズ料金がセルフサービス割引を上回ります。料金固定、条件、見積もりを数分で取得できます。"
+governanceRow = "ガバナンス"
+governanceValue = "{{label}} · {{count}} policies"
+handlesLabel = "あなたの Processor"
+handlesValue = "{{volume}} クレジット/月を処理"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policies"
+poolCaption = "年間 {{credits}} クレジットの 1 つのプール。使用量の多い月は少ない月から借りられます。"
+priceLabel = "年間 · 10 か月分の料金で 12 か月"
+rateUnknown = "チェックアウト時に正確な価格を表示します。"
+savings = "{{amount}} お得 · 2 か月無料。"
+sizingRow = "サイズ設定"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "総ユーザー数"
+
+[portal.billing.prepaid.consent]
+label = "前払い容量を使い切った場合、または 12 か月後に期限切れになった場合、キャンセルしない限り標準の従量課金料金（利用上限まで）で処理が自動的に継続されること、また請求ポータルからいつでもキャンセルできることを理解しています。"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling による管理。数分で利用開始。"
+cloudValue = "Stirling Cloud · 管理済み"
+selfhost = "セルフホスト"
+selfhostDesc = "プライベートインフラで実行。同じ料金。"
+selfhostValue = "セルフホスト · プライベートインフラ"
+
+[portal.billing.prepaid.offer]
+cta = "オファーを確認"
+subtitle = "PDF 処理を 1 年分前払いすると 2 か月無料になります。従量課金の前、利用上限の外で使用されます。"
+title = "10 か月分の料金で 12 か月利用"
+
+[portal.billing.prepaid.pay]
+accountName = "口座名義人名"
+accountNamePlaceholder = "例: Jane Smith"
+companyName = "会社名（任意）"
+companyNamePlaceholder = "例: Acme Inc."
+downloadInvoice = "請求書をダウンロード"
+payOnline = "オンラインで支払う"
+poNumber = "PO 番号（任意）"
+poNumberPlaceholder = "例: PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "高度"
+advancedDesc = "Pipelines が処理の大部分を担います。"
+none = "なし"
+noneDesc = "まだ Pipelines を実行していません。いつでも有効にできます。"
+standard = "標準"
+standardDesc = "いくつかの Pipelines が到着した PDFs を再処理します。"
+
+[portal.billing.prepaid.posture]
+essentials = "基本"
+essentialsDesc = "分類（デフォルト）に加えて共有"
+governed = "管理対象"
+governedDesc = "セキュリティとルーティングを追加"
+regulated = "規制対応"
+regulatedDesc = "Compliance、Retention、Ingestion を含むすべてのカテゴリ"
+
+[portal.billing.prepaid.review]
+download = "見積もりをダウンロード（PDF）"
+downloading = "準備中…"
+share = "承認のために共有"
+
+[portal.billing.prepaid.size]
+compact = "コンパクト"
+compactDesc = "25 MB 未満のファイル、データ料金なし"
+heavy = "ヘビー"
+heavyDesc = "スキャンまたは画像が多く、通常 50 MB 以上"
+standard = "標準"
+standardDesc = "主に小さく、一部のスキャンが 25 MB 超"
+
+[portal.billing.prepaid.state]
+exhausted = "使い切りました"
+healthy = "十分に残っています"
+low = "残りわずか"
 
 [portal.billing.spendLimit]
 adjustLimit = "上限を調整"
@@ -6494,6 +6608,8 @@ label = "超過が予測されています。"
 
 [portal.billing.spendThisMonth]
 eyebrow = "今月の利用額"
+freeRemaining_one = "無料 PDF が {{formatted}} 件残っています"
+freeRemaining_other = "無料 PDFs が {{formatted}} 件残っています"
 processed_one = "{{formattedCount}} 件のPDFを処理しました。"
 processed_other = "{{formattedCount}} 件のPDFを処理しました。"
 processedWithRate_one = "{{formattedCount}} 件のPDFを処理しました。単価は {{rate}} です。"
@@ -6534,6 +6650,350 @@ signature = "署名"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "新しい接続"
+createTitleFor = "{{name}} に接続"
+delete = "削除"
+edit = "編集"
+editTitle = "接続を編集"
+unsupportedType = "この接続タイプはここでは編集できません。"
+
+[portal.connections.categories.advanced]
+description = "まだサポートしていないサービス向け。"
+label = "高度"
+
+[portal.connections.categories.audit]
+description = "ドキュメントに何が起きたかを、監査担当者がすでに確認する場所に記録します。"
+label = "監査 & コンプライアンスログ"
+
+[portal.connections.categories.notify]
+description = "何かが発生したことを別のシステムに通知します。"
+label = "通知 & ワークフロー"
+
+[portal.connections.categories.security]
+description = "ドキュメントが次に進む前にスキャンまたはラベル付けします。"
+label = "セキュリティ & 分類"
+
+[portal.connections.categories.signing]
+description = "署名または公証のためにドキュメントを送信します。"
+label = "電子署名 & 公証"
+
+[portal.connections.categories.storage]
+description = "処理済みドキュメントの保存先 - バケット、ドライブ、チケット、またはページ。"
+label = "ファイル & 添付"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling はこれを暗号化して保存し、二度と表示しません。"
+label = "アクセストークン"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "この接続を使用するステップは、この URL 配下のパスのみ呼び出せます。別のホストは呼び出せません。"
+label = "サーバー URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "サービスから提供された URL を貼り付けてください。その配下のパスのみ呼び出せます。"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "接続名"
+namePlaceholder = "例: Production"
+
+[portal.connections.picker]
+cancel = "キャンセル"
+createNew = "新しい接続..."
+placeholder = "接続を選択"
+save = "接続を保存"
+
+[portal.connections.picker2]
+back = "統合を変更"
+heading = "何に接続しますか？"
+noResultsBody = "まだサポートしていません - 詳細をお知らせください。追加を検討します。"
+noResultsTitle = "\"{{query}}\" に一致するものがありません"
+searchPlaceholder = "統合を検索 - 「sign」、「ocr」、または製品名を試してください"
+
+[portal.connections.types.api]
+description = "policy から任意の HTTP API を呼び出します。URL、認証、ペイロードを選択します。"
+label = "カスタム API"
+
+[portal.connections.types.api.fields.authType]
+label = "認証"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username と password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "カスタムヘッダー内のトークン"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "なし"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "トークン取得のためログイン"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "この接続を使用するステップは、この URL 配下のパスのみ呼び出せます。別のホストは呼び出せません。"
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "ヘッダー名"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "ログインパス"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "API がダウンロードリンクを返す場合、これらのホストのみ取得できます。カンマで区切ってください。空白の場合は base URL 自身のホストのみ許可されます。"
+label = "許可された結果ホスト"
+
+[portal.connections.types.api.fields.token]
+label = "トークン"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "このヘッダーとしてトークンを送信"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "ログイン呼び出しがトークンを返すレスポンスヘッダー。例: X-Auth-Token。"
+label = "トークンレスポンスヘッダー"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "運用しているサーバー上でドキュメントのマルウェアをスキャンします - ネットワーク外には何も出ません。"
+label = "ClamAV（セルフホスト）"
+
+[portal.connections.types.cloudmersive]
+description = "policy 内のドキュメントに対するウイルスおよびコンテンツスキャン。"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "既知のマルウェアだけでなく、マクロ、実行ファイル、スクリプト、埋め込みオブジェクトを含むドキュメントをブロックします。"
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "処理済みドキュメントを Confluence ページに添付します。"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "電子署名と公証のためにドキュメントを ConsignO Cloud（Notarius）に送信します。"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "/api/v1 を含む ConsignO Cloud 環境。"
+label = "サーバー URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "組織がテナントを使用している場合にのみ必要です。"
+label = "テナント"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "policy がドキュメントを処理したときに Discord へメッセージを投稿します。"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "policy がドキュメントを処理するたびに Elasticsearch に監査イベントをインデックス化します。"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "新しいドキュメントを FTP または FTPS サーバーからポーリングします。"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "接続モード"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive（推奨）"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "通常の FTP は認証情報とファイルを暗号化せずに送信します。サーバーが対応している場合は FTPS を選択してください。"
+label = "暗号化"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS（explicit / AUTH TLS）"
+implicit = "FTPS（implicit）"
+none = "なし（通常の FTP）"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "policy 実行時に Google Chat スペースへメッセージを投稿します。"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "処理済みドキュメントを Jira issue に添付します。"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "policy 実行時にドキュメントまたは通知をメール送信します。"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "処理済みドキュメントを Nextcloud に保存します。"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "運用している Presidio サーバーを使用してドキュメントテキスト内の個人データを検出します。"
+label = "Presidio（セルフホスト）"
+
+[portal.connections.types.purview]
+description = "PDF 上の Microsoft Purview 秘密度ラベルを読み取り、適用します。"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "任意。名前でラベルを選択する場合にのみ必要です。ラベル付けはこれがなくても動作します。"
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "すべてのラベルに SiteId としてスタンプされるため、Purview 対応ツールはどの組織が適用したかを認識できます。"
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "ソースが読み取り、pipeline 出力が書き込みできる S3 バケット。"
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS の場合は空白のままにします。MinIO または別の S3 互換ストアの場合に設定します。"
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "policy 実行時にドキュメントまたは通知をメール送信します。"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "新しいドキュメントを SFTP（SSH）サーバーからポーリングします。"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "任意。サーバーの SHA-256 ホスト key fingerprint（`ssh-keyscan host | ssh-keygen -lf -` から取得）。設定すると、この key を提示するサーバーのみ受け入れられます。空白の場合、初回接続時に確認された key が固定され、以後の変更は拒否されます。"
+label = "ホスト key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "代わりに private key で認証する場合は空白のままにします。"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "任意。password の代わりに key で認証するには OpenSSH private key を貼り付けてください。"
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "policy がドキュメントを処理したときに Slack へメッセージを投稿します。"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS ネットワーク共有（Windows または Samba）を監視します。"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "任意。サーバーが使用している場合の Windows domain または workgroup。"
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "policy がドキュメントを処理するたびに Splunk へ監査イベントを送信します。"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "監査イベントを Sumo Logic HTTP collector に送信します。"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "policy 実行時に Teams チャンネルへメッセージを投稿します。"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "各ドキュメント、または詳細のみを選択した URL に投稿します。"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "policy から Zap または Make シナリオをトリガーします。"
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "ドキュメントを参照"
+viewSource = "GitHub でソースを表示"
+
 [portal.docs.authentication]
 codeCaption = "すべてのリクエスト"
 eyebrow = "はじめに"
@@ -6619,11 +7079,19 @@ title = "公式 SDKs"
 beta = "Beta"
 deprecated = "非推奨"
 
+[portal.docs.search]
+empty = "一致するドキュメントはありません"
+placeholder = "ドキュメントを検索"
+results = "{{count}} 件の結果"
+
 [portal.docs.skills]
 eyebrow = "スキル"
 lead = "エージェントが単一ツールとして呼び出す、バンドルされた名前付き機能です。各スキルは評価付きの決定論的な操作チェーンです。"
 title = "エージェントスキル"
 
+[portal.docs.toc]
+title = "このページの内容"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API リファレンス"
@@ -6697,6 +7165,8 @@ type = "種類"
 user = "ユーザー"
 
 [portal.documents.queue.empty]
+connectSource = "ソースに接続"
+createPipeline = "pipeline を作成"
 description = "ソースがパイプラインにドキュメントを供給すると、レビュー用にここに表示されます。"
 title = "キューにドキュメントはありません"
 
@@ -6806,13 +7276,71 @@ description = "このビューで予期しないエラーが発生しました
 retry = "再試行"
 title = "このページで問題が発生しました"
 
+[portal.home.download]
+back = "戻る"
+body = "デスクトップアプリをダウンロードするか、サーバーをセルフホストします。"
+done = "完了"
+guide = "{{name}} ガイドを開く"
+openInBrowser = "代わりにブラウザーで開く"
+sectionDesktop = "デスクトップアプリ"
+sectionSelfHosted = "セルフホスト"
+title = "Stirling PDF Editor をインストール"
+
+[portal.home.download.docker]
+detailBody = "公式イメージをサーバーで実行します。"
+note = ":8080 で開きます。デフォルトログイン: admin / stirling。"
+tagline = "コンテナでサーバーを実行"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "公式 Helm チャートをインストールします。"
+note = "設定を永続化するには、/configs 用の PVC を追加してください。"
+tagline = "Helm でクラスターにデプロイ"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "お使いのディストリビューション向けのネイティブビルド。"
+guideBtn = "Linux インストールオプションを表示"
+note = "一般的なディストロ向けに AppImage、.deb、.rpm ビルドを利用できます。"
+tagline = "お使いのディストロ向けネイティブデスクトップアプリ"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "または Homebrew 経由"
+detailBody = "インストーラーを実行するか、Homebrew を使用します。"
+downloadBtn = "macOS 用にダウンロード"
+tagline = "Apple silicon と Intel 向けネイティブアプリ"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = ".jar をベアメタルサーバーで実行します。"
+downloadBtn = ".jar をダウンロード"
+note = "Java 21+ が必要です。:8080 で開きます。デフォルトログインは admin / stirling です。"
+runLabel = "次に実行"
+tagline = ".jar をベアメタルサーバーで実行"
+title = "手動サーバーセットアップ"
+
+[portal.home.download.windows]
+altLabel = "または winget 経由"
+detailBody = "インストーラーを実行するか、パッケージマネージャーを使用します。"
+downloadBtn = "インストーラーをダウンロード"
+tagline = "Microsoft Windows 向けネイティブアプリ"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} アクティブ"
-invite = "チームメイトを招待"
+activeOfDeployed = "今月は {{total}} 件中 {{active}} 件がアクティブ"
 name = "Stirling PDF Editor"
 open = "ブラウザーで開く"
 updated = "{{time}} 更新"
 
+[portal.home.editor.deploy]
+finish = "デプロイを完了"
+options = "デプロイオプションを表示"
+start = "Editor をデプロイ"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "セルフホスト型 · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "こんにちは"
 evening = "こんばんは"
 morning = "おはようございます"
 
-[portal.home.onboarding]
-dismiss = "セットアップを閉じる"
-notStarted = "未開始"
-progress = "{{total}} 件中 {{done}} 件完了"
-title = "セットアップを完了"
-
-[portal.home.onboarding.enterprise]
-body = "組織全体の SSO + SCIM + RBAC、コミット済みボリューム料金、エアギャップ環境でのデプロイメント。"
-cta = "トライアルを開始"
-ctaQuote = "見積もりを取得"
-lead = "従業員 250 名以上向け。"
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "デスクトップアプリをデプロイ。永久無料です。"
-title = "PDF Editor をダウンロード"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} 件アクティブ · {{recommended}} 件推奨"
-chip = "{{active}} 件アクティブ"
-title = "ポリシーを有効化"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} 件接続済み · 配置先を問わずすべての PDF を管理"
-chip = "{{connected}} 件接続済み"
-title = "ソースを接続"
-
-[portal.home.quickActions]
-subtitle = "今日の主要タスク"
-title = "クイックアクション"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "型付き操作ライブラリを使った 3 ステップのコンポーザー"
-title = "パイプラインを構築"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3、エージェント、webhook、監視フォルダー"
-title = "ソースを接続"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "レート制限と IP allowlist 付きのスコープ化されたキー"
-title = "API キーを発行"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor デプロイメントを管理"
 sectionsAriaLabel = "インフラストラクチャセクション"
@@ -6878,13 +7363,9 @@ heading = "API キー"
 subheading = "キーごとのレート制限、権限、IP allowlist を備えたスコープ化された認証情報。"
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "許可された IP"
-anyIp = "任意の IP（allowlist なし）"
 created = "作成日"
 lastUsed = "最終使用"
-permissions = "権限"
-rateLimit = "レート制限"
-rateLimitValue = "{{value}} req/min"
+revoke = "キーを取り消す"
 usageMonth = "今月の使用量"
 usageToday = "今日の使用量"
 
@@ -6892,6 +7373,20 @@ usageToday = "今日の使用量"
 description = "スコープ化されたキーを作成して Stirling API の呼び出しを開始します。"
 title = "API キーはまだありません"
 
+[portal.infrastructure.apiKeys.error]
+load = "API キーを読み込めませんでした。もう一度お試しください。"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "「{{name}}」を取り消しますか？このキーをまだ使用している連携は、ただちに 401 エラーを受け取り始めます。これは元に戻せません。"
+cancel = "キャンセル"
+confirm = "キーを取り消す"
+title = "API キーを取り消す"
+
+[portal.infrastructure.attestationLabel]
+attested = "証明済み"
+inScope = "対象範囲内"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "カテゴリで監査イベントをフィルター"
 heading = "監査ログ"
@@ -6935,6 +7430,7 @@ all = "すべて"
 auth = "認証"
 config = "設定"
 elevation = "昇格"
+policy = "ポリシー"
 processing = "処理"
 security = "セキュリティ"
 
@@ -6944,19 +7440,35 @@ title = "アクセス権がありません"
 
 [portal.infrastructure.audit.metrics]
 config = "設定"
-elevation = "昇格"
+policy = "ポリシー"
 processing = "処理"
 totalEvents = "合計イベント · 24 時間"
 
+[portal.infrastructure.auditCatLabel]
+auth = "認証"
+config = "設定"
+elevation = "権限昇格"
+policy = "ポリシー"
+processing = "処理"
+security = "セキュリティ"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "エラー"
+info = "情報"
+success = "成功"
+warning = "警告"
+
+[portal.infrastructure.certLabel]
+certified = "認定済み"
+inProgress = "進行中"
+notStarted = "未開始"
+
 [portal.infrastructure.createKey]
 cancel = "キャンセル"
 createKey = "キーを作成"
 done = "完了"
-ipAllowlistHelper = "カンマ区切りの CIDR 範囲。任意の IP を許可するには空欄のままにします。"
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "キー名"
 keyNamePlaceholder = "例: Production · ingest"
-permissionsLabel = "権限"
 secretKeyCaption = "シークレットキー"
 secretWarning = "これをシークレットマネージャーに保存してください。Stirling はハッシュのみを保存します — 後で復元する方法はありません。"
 subtitle = "キーのスコープを必要最小限にします。いつでもローテーションまたは失効できます。"
@@ -6964,6 +7476,12 @@ subtitleCreated = "今すぐこのシークレットをコピーしてくださ
 title = "API キーを作成"
 titleCreated = "キーが作成されました"
 
+[portal.infrastructure.deployLabel]
+live = "ライブ"
+queued = "キュー済み"
+rolledBack = "ロールバック済み"
+rolling = "ロールアウト中"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "デプロイ済みのすべての Stirling リージョンのラ
 description = "ワークスペースがプロビジョニングされると、デプロイ済みリージョンがここに表示されます。"
 title = "デプロイ済みリージョンはありません"
 
+[portal.infrastructure.keyLabel]
+active = "アクティブ"
+revoked = "取り消し済み"
+
+[portal.infrastructure.modelLabel]
+active = "アクティブ"
+degraded = "低下"
+disabled = "無効"
+
 [portal.infrastructure.models]
 heading = "モデル"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "ステータス"
 type = "種類"
 version = "バージョン"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/call"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "アクティブモデル"
 avgLatency = "平均レイテンシ"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} のモデル"
 operation = "操作"
 routedTo = "ルーティング先"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "分類"
+extraction = "抽出"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "低下"
+down = "停止"
+healthy = "正常"
+
 [portal.infrastructure.security.access.byok]
 description = "独自の KMS からキーを提供します。Stirling はそのキーで暗号化しますが、引き続き読み取り可能です。"
 label = "独自キーを持ち込む（BYOK）"
@@ -7174,6 +7716,47 @@ models = "モデル"
 security = "セキュリティ"
 storage = "ストレージ"
 
+[portal.integrations]
+addAnother = "別のものを追加"
+availableHeading = "利用可能"
+comingSoonHeading = "近日対応予定"
+connect = "接続"
+connectedHeading = "接続済み"
+connectionCount_one = "{{count}} 件の接続"
+connectionCount_other = "{{count}} 件の接続"
+customApi = "カスタム API"
+searchPlaceholder = "連携を検索"
+subtitle = "Stirling が通信できるすべてのものです。認証情報はここで一度作成され、その後ソース、ポリシー、パイプラインから参照されます。"
+title = "連携"
+typedName = "{{tool}} 名"
+
+[portal.integrations.filters]
+all = "すべて"
+audit = "監査"
+connected = "接続済み"
+notify = "通知"
+security = "セキュリティ"
+signing = "署名"
+storage = "ストレージ"
+
+[portal.integrations.status]
+connected = "接続済み"
+
+[portal.integrations.table]
+integration = "連携"
+worksWith = "連携先"
+
+[portal.integrations.worksWith]
+pipelines = "パイプライン"
+policies = "ポリシー"
+sources = "ソース"
+
+[portal.legal]
+draft = "{{label}} · 下書き"
+loadError = "このドキュメントを読み込めませんでした。もう一度お試しください。"
+loading = "読み込み中…"
+title = "法的文書"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "コンポーネント"
@@ -7182,6 +7765,7 @@ documents = "ドキュメント"
 editor = "Editor"
 home = "ホーム"
 infrastructure = "インフラストラクチャ"
+integrations = "連携"
 pipelines = "パイプライン"
 policies = "ポリシー"
 procurement = "調達"
@@ -7190,25 +7774,9 @@ sources = "ソース"
 usage = "使用量と請求"
 users = "ユーザー"
 
-[portal.notifications]
-markAllRead = "すべて既読にする"
-title = "通知"
-viewAll = "すべて表示"
-
-[portal.notifications.ariaLabel]
-none = "通知、未読なし"
-unread_one = "通知、{{count}} 件未読"
-unread_other = "通知、{{count}} 件未読"
-
-[portal.notifications.count]
-allRead = "すべて既読"
-loading = "読み込み中"
-new_one = "{{count}} 件の新着"
-new_other = "{{count}} 件の新着"
-
-[portal.notifications.empty]
-description = "新しい通知はありません。"
-title = "すべて確認済みです"
+[portal.nav.section]
+platform = "PDF プラットフォーム"
+processor = "PDF プロセッサー"
 
 [portal.pipelines]
 subtitle = "バックエンド上のすべての自動ドキュメントパイプライン: ソースセットに対する操作の順序付きチェーンで、トリガーによって実行されます。行をクリックすると、そのステップとソースが表示されます。"
@@ -7220,15 +7788,28 @@ newPipeline = "新しいパイプライン"
 [portal.pipelines.builder]
 addStep = "ツールを追加"
 back = "パイプラインに戻る"
+cannotFollow = "{{produced}} を受け取れません"
+chooseAccount = "アカウントを選択"
+chooseDestination = "宛先を選択"
+chooseOperation = "このステップの処理を選択"
+chooseSource = "ソースを選択"
 discard = "変更を破棄"
 enabled = "有効"
+inputs = "入力"
+inputSource = "入力ソース"
+inputTrigger = "トリガー"
 keepEditing = "編集を続ける"
+needsConfiguring = "設定が必要です"
 needsUpload = "アップロードされたファイルが必要"
+noSources = "まだ接続済みのソースがありません。入力として使用するには作成してください。"
 noToolMatches = "検索に一致するツールはありません。"
 pipelineSettings = "パイプライン設定"
 searchTools = "ツールを検索"
 selectToolBody = "ツールを追加してパイプラインを構築します。"
 selectToolTitle = "ツールはまだありません"
+sendToSystem = "別のシステムへ送信"
+stepsIncompatible = "これらのステップは、前のステップが生成するものでは実行できません: {{tools}}。"
+stepsNeedSetup = "保存する前に、これらのステップの設定がまだ必要です: {{tools}}。"
 toolSettings = "ツール設定"
 unknownStep = "認識できない操作です。そのまま保持されました。"
 unsavedBody = "未保存の変更があります。離れる前に保存しますか、それとも破棄しますか？"
@@ -7236,19 +7817,24 @@ unsavedTitle = "未保存の変更"
 uploadUnsupported = "アップロードされたファイルはまだパイプラインでサポートされていないため、これらのステップは保存できません: {{tools}}。"
 usesDefaults = "デフォルト設定で実行"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "前のステップからのすべてのファイルを結合します"
+fan-out = "前のステップからのファイルごとに 1 回実行します"
+format-mismatch = "{{accepts}} が必要ですが、前のステップは {{produced}} を生成します"
+output-uncertain = "実行されない可能性があります: 前のステップの出力は設定方法に依存します"
+source-mismatch = "{{accepts}} が必要ですが、このパイプラインの入力は {{produced}} です"
+undeclared-operation = "このステップが受け付けるものを確認できません"
+
 [portal.pipelines.composer]
 addTool = "ツールを追加"
 cancel = "キャンセル"
 chainEmpty = "ツールを追加してパイプラインの構築を開始します。"
 create = "パイプラインを作成"
-directory = "出力フォルダー"
-directoryHelp = "サーバー上の絶対パス。設定された許可フォルダー内である必要があります。"
 editingUnsupported = "これらのツールパラメーターを編集用に表示することはまだサポートされていません。"
 moveDown = "下へ移動"
 moveUp = "上へ移動"
 name = "名前"
 namePlaceholder = "例: Redaction sweep"
-noSources = "まだ接続されたソースはありません。パイプラインは、直接提供されたファイルに対して引き続き実行できます。"
 noToolSettings = "このツールには設定可能な項目がありません。"
 operations_one = "操作（{{count}}）"
 operations_other = "操作（{{count}}）"
@@ -7273,11 +7859,13 @@ confirm = "削除"
 title = "パイプラインを削除しますか？"
 
 [portal.pipelines.detail]
+clearHistory = "履歴をクリア"
 delete = "パイプラインを削除"
 run = "今すぐ実行"
 
 [portal.pipelines.empty]
 action = "パイプラインを作成"
+connectSource = "ソースを接続"
 description = "最初のパイプラインを作成します: 実行対象のソースを選び、操作を連結し、出力先を選択します。"
 title = "パイプラインはまだありません"
 
@@ -7286,15 +7874,17 @@ active = "アクティブ"
 paused = "一時停止中"
 total = "パイプライン"
 
-[portal.pipelines.output]
-folder = "フォルダーに書き込む"
-inline = "ファイルを返す"
-
 [portal.pipelines.run]
+allProcessed_one = "実行するものがありません: ソースの {{count}} 件のドキュメントはすでに処理済みです。"
+allProcessed_other = "実行するものがありません: ソース内の全 {{count}} 件のドキュメントはすでに処理済みです。"
 completed_one = "実行が完了しました。"
 completed_other = "{{count}} 件の実行がすべて完了しました。"
 empty = "実行するものがありません: ソースに処理対象のドキュメントがありませんでした。"
 failed = "実行に失敗しました: {{error}}"
+historyCleared = "履歴をクリアしました。次回の実行では、現在ソース内にあるすべてを再処理します。"
+inFlight = "新しく実行するものがありません: 以前の実行のドキュメントがまだ処理中です。"
+parked_one = "実行するものがありません: {{count}} 件のドキュメントは以前に失敗して保留中です。原因を修正してから、履歴をクリアして再試行してください。"
+parked_other = "実行するものがありません: {{count}} 件のドキュメントは以前に失敗して保留中です。原因を修正してから、履歴をクリアして再試行してください。"
 running = "実行を開始しました。まだ進行中です。"
 timeout = "実行に予想より時間がかかっています。バックグラウンドで完了する可能性があります。"
 
@@ -7314,12 +7904,18 @@ manual = "手動"
 schedule = "スケジュール済み"
 
 [portal.policies]
+defaultName = "{{category}} ポリシー"
 subtitle = "すべてのドキュメントにツールパイプラインを適用する常設の自動化です。各ポリシーはアップロードまたはエクスポート時に発火し、ツールチェーンを実行し、適用済みバージョンを元のファイルと並べて保存します。"
 title = "ポリシー"
 
 [portal.policies.card]
 comingSoon = "Enterprise にアップグレード"
 notSetUp = "未設定"
+requiresAiEngine = "AI エンジンが必要です"
+
+[portal.policies.categories.classification]
+desc = "アップロード時に各ドキュメントの種類を識別し、ファイリングと検索のためにメタデータにタグ付けします。"
+label = "分類"
 
 [portal.policies.categories.compliance]
 desc = "すべてのドキュメントに HIPAA、GDPR、SOC 2、または FedRAMP 要件を適用します。"
@@ -7344,6 +7940,13 @@ label = "セキュリティ"
 [portal.policies.config]
 scopeAll = "すべてのドキュメント"
 
+[portal.policies.config.classification]
+summary = "アップロードされたすべてのドキュメントをチームのラベルに照らして分類し、メタデータにタグ付けします。"
+
+[portal.policies.config.classification.rules]
+0 = "分類"
+1 = "メタデータにタグ付け"
+
 [portal.policies.config.compliance]
 summary = "ドキュメントがシステムを離れる前に、規制フレームワークに照らして検証します。"
 
@@ -7371,6 +7974,29 @@ minConfidence = "最小信頼度"
 2 = "命名"
 3 = "正規化"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview 感度ラベルを適用"
+
+[portal.policies.config.purview.fields]
+connection = "Purview テナント"
+labelId = "ラベル ID"
+labelIdHelp = "Purview ポータルからのラベルの GUID です。ラベルを適用すると、そのメタデータが PDF に書き込まれます。暗号化はできません。暗号化には Microsoft クライアントが必要です。"
+labelName = "ラベル名（任意）"
+labelNameHelp = "人やツールがラベルを認識できるように、ID と一緒に記録されます。"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview は、ポリシーが適用したラベルと、ユーザーが選択したラベルを区別します。"
+label = "ラベルの記録方法"
+privileged = "ユーザーが選択したものとして"
+standard = "自動適用されたものとして"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview ラベルを読み取る"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview テナント"
+connectionHelp = "ドキュメントにすでに付与されているラベルを読み取り、後続のステップがそれに基づいて動作できるようにします。"
+
 [portal.policies.config.retention]
 summary = "ドキュメントの保持期間、アーカイブ時期、削除時期を適用します。"
 
@@ -7438,6 +8064,7 @@ title = "まだアクティビティはありません"
 [portal.policies.endpoints]
 addWatermark = "透かし"
 autoRedact = "PII を墨消し"
+classifyAndLabel = "分類"
 compressPdf = "圧縮"
 flatten = "フラット化"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "ポリシーは保存されており、接続が復元される
 retry = "再試行"
 title = "Backend を利用できません"
 
+[portal.policies.operations]
+change = "このステップの処理を変更"
+noResults = "一致するステップがありません。製品名、または「scan」「notify」「attach」を試してください。"
+searchPlaceholder = "ステップを検索 - 「scan」「attach」または製品名を試してください"
+
+[portal.policies.operations.bodyMode]
+binary = "生のファイルバイト"
+json = "JSON ペイロード内"
+multipart = "ファイルアップロードとして（multipart）"
+
+[portal.policies.operations.clamavScan]
+description = "独自の ClamAV サーバーがドキュメントをチェックします。ネットワーク外へは何も送信されません。"
+label = "ウイルスをスキャン（セルフホスト）"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "マクロ、実行ファイル、スクリプト、埋め込みオブジェクトを含むドキュメントを拒否します。"
+label = "アクティブコンテンツをブロック"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive がドキュメントをチェックし、クリーンでない場合は実行を停止します。"
+label = "ウイルスをスキャン"
+
+[portal.policies.operations.confluenceAttach]
+description = "処理済みドキュメントをページに保存します。"
+label = "Confluence ページに添付"
+
+[portal.policies.operations.consignoSubmit]
+description = "署名のためにドキュメントを ConsignO Cloud に送信します。"
+label = "署名に送信（ConsignO）"
+note = "ドキュメントを送信します。ステップが結果を後続ステップに渡せないため、署名済みコピーの取得はまだサポートされていません。"
+
+[portal.policies.operations.customApiCall]
+description = "パス、メソッド、本文、レスポンス処理を自分で作成します。"
+label = "カスタム API を呼び出す"
+
+[portal.policies.operations.discordNotify]
+description = "ポリシーがドキュメントを処理したことをチャンネルに通知します。"
+label = "Discord にメッセージを投稿"
+
+[portal.policies.operations.elasticIndex]
+description = "ポリシーが行ったことを検索可能なドキュメントとして記録します。"
+label = "Elasticsearch に監査イベントをインデックス化"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart はアップロード API に適しています。JSON はペイロード内にファイルを求める API に適しています。binary は生のバイトを送信します。"
+label = "ドキュメントの送信方法"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "そのまま送信される JSON 本文です。{{document.base64}} はファイルを保持し、{{document.*}} と {{run.*}} はドキュメントごとに入力されます。"
+label = "JSON 本文"
+
+[portal.policies.operations.fields.connection]
+label = "アカウント"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun ドメイン"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API がドキュメントを受け取ることを期待するフォームフィールドです。"
+label = "ファイルフィールド名"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "From"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "ヘッダー名/値ペアの JSON オブジェクトです。接続の認証情報は自動的に追加されます。"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "課題キー"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "メッセージ本文として送信されます。{{document.*}} と {{run.*}} はドキュメントごとに入力されます。"
+label = "メッセージ"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "ページ ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "接続のベース URL に追加されます。別のホストには絶対に到達できません。"
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "ドライブ内の書き込み先です。{{document.filename}} はドキュメントごとに入力されます。"
+label = "宛先パス"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "レポートはドキュメントを変更しません。置換は返ってきた内容で差し替えます。"
+label = "返信の処理方法"
+
+[portal.policies.operations.fields.signerEmail]
+label = "署名者のメール"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "件名"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio はこのテキストを分析します。{{document.title}} を使用するか、チェックしたいテキストを貼り付けてください。"
+label = "チェックするテキスト"
+
+[portal.policies.operations.fields.to]
+label = "To"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud ユーザー名"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "ポリシーがドキュメントを処理したことをスペースに通知します。"
+label = "Google Chat にメッセージを投稿"
+
+[portal.policies.operations.jiraAttach]
+description = "処理済みドキュメントを課題に保存します。"
+label = "Jira 課題に添付"
+
+[portal.policies.operations.mailgunEmail]
+description = "処理済みドキュメントを添付ファイルとして送信します。"
+label = "ドキュメントをメール送信（Mailgun）"
+
+[portal.policies.operations.nextcloudUpload]
+description = "処理済みドキュメントをフォルダーに書き込みます。"
+label = "Nextcloud にアップロード"
+
+[portal.policies.operations.presidioAnalyze]
+description = "独自の Presidio サーバーが検出した個人データを報告します。"
+label = "個人データを検出"
+note = "Presidio はファイルではなくテキストを読み取ります。チェックしたいテキストを指定してください。ドキュメント自体はアップロードされません。"
+
+[portal.policies.operations.responseMode]
+replace = "ドキュメントを返信で置換"
+report = "ドキュメントを保持し、返信を記録"
+
+[portal.policies.operations.sendgridEmail]
+description = "処理済みドキュメントを添付ファイルとして送信します。"
+label = "ドキュメントをメール送信（SendGrid）"
+
+[portal.policies.operations.slackNotify]
+description = "ポリシーがドキュメントを処理したことをチャンネルに通知します。"
+label = "Slack にメッセージを投稿"
+
+[portal.policies.operations.splunkEvent]
+description = "監査担当者がすでに確認している場所に、ポリシーが行ったことを記録します。"
+label = "監査イベントを Splunk に送信"
+
+[portal.policies.operations.sumologicEvent]
+description = "ポリシーが行ったことを HTTP コレクターに記録します。"
+label = "監査イベントを Sumo Logic に送信"
+
+[portal.policies.operations.teamsNotify]
+description = "ポリシーがドキュメントを処理したことをチャンネルに通知します。"
+label = "Teams にメッセージを投稿"
+
+[portal.policies.operations.webhookPost]
+description = "選択した URL にドキュメント自体を送信します。"
+label = "ドキュメントを webhook に投稿"
+
+[portal.policies.operations.zapierNotify]
+description = "実行の詳細を自動化に渡します。"
+label = "Zap または Make シナリオをトリガー"
+
 [portal.policies.stats]
 activeFor = "アクティブ"
 dataProcessed = "処理済みデータ"
@@ -7473,6 +8277,13 @@ label = "適用済みドキュメント"
 description = "設定済みだが実行されていません"
 label = "一時停止中"
 
+[portal.policies.table]
+appliesTo = "適用先"
+docs = "適用済みドキュメント"
+enforces = "強制内容"
+policy = "ポリシー"
+status = "ステータス"
+
 [portal.policies.wizard.actions]
 back = "戻る"
 cancel = "キャンセル"
@@ -7480,6 +8291,10 @@ continue = "続行"
 enablePolicy = "ポリシーを有効化"
 saveChanges = "変更を保存"
 
+[portal.policies.wizard.capability.classify]
+desc = "チームのラベルからドキュメントの種類を識別してタグ付けし、カテゴリ別にファイルおよび検索できるようにします。"
+label = "ドキュメントを分類"
+
 [portal.policies.wizard.capability.compress]
 desc = "ドキュメントを圧縮してファイルサイズを小さくします。"
 label = "ファイルサイズを削減"
@@ -7500,10 +8315,18 @@ label = "機密情報を墨消し"
 desc = "隠れた JavaScript を削除し、ドキュメントを開いたときに自動実行されないようにします。"
 label = "アクティブコンテンツを除去"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "独立したタイムスタンプ機関を使用して、その時点でドキュメントがこの正確な形式で存在したことを証明します。送信されるのはハッシュのみで、ドキュメントがサーバーから出ることはありません。"
+label = "信頼できるタイムスタンプを追加"
+
 [portal.policies.wizard.capability.watermark]
 desc = "すべてのページに表示可能なマーク（例：「機密」）を押印します。"
 label = "透かしを適用"
 
+[portal.policies.wizard.classification]
+description = "アップロードされたすべてのドキュメントは組み込みラベルに照らして分類され、該当する種類でタグ付けされます。ラベルセットはチーム全体で共有されます。"
+labelsHeading = "分類ラベル"
+
 [portal.policies.wizard.errors]
 noTools = "まずワークフローで少なくとも1つのツールを有効にしてください。"
 saveFailed = "ポリシーを保存できませんでした。もう一度お試しください。"
@@ -7548,73 +8371,118 @@ setUp = "{{category}} ポリシーをセットアップ"
 [portal.policies.wizard.workflow]
 description = "このポリシーが処理する各ドキュメントに何を行うかを選択します。"
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} アクティブ"
-noRule = "まだ適用されているルールはありません"
-subtitle = "どのパイプラインが処理するかに関係なく、すべてのドキュメントが通過する常設の自動化です。"
-title = "PDF に対して実行される内容"
-
 [portal.policySummary.action]
-comingSoon = "Enterprise にアップグレード"
-configure = "設定"
 setUp = "セットアップ"
 
-[portal.policySummary.column]
-activeRule = "アクティブなルール"
-policy = "ポリシー"
-status = "ステータス"
+[portal.processorFlow]
+footnote = "件数は過去 24 時間のものです。フロー速度は例示です。"
+liveBadge = "ライブ"
+stats = "{{connected}} 接続済み · {{processed}} 件の PDF を処理"
+title = "PDF プロセッサー"
 
-[portal.policySummary.empty]
-description = "ポリシーが設定されると、カテゴリがここに表示されます。"
-title = "まだポリシーはありません"
+[portal.processorFlow.lens]
+ariaLabel = "表示モード"
+flow = "フロー"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "アクティブ"
-off = "オフ"
-soon = "近日公開"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "失敗"
+heading = "結果"
+success = "配信済み"
 
-[portal.processingStatus]
-managePlan = "プランを管理"
-volumeSuffix = "処理済み PDF · 過去30日間"
+[portal.processorFlow.policies]
+activeCount = "{{n}} 件アクティブ"
+count = "{{n}} · 24h"
+heading = "ポリシー"
+setUp = "セットアップ"
+soon = "近日対応"
+
+[portal.processorFlow.sankey]
+waist = "ポリシー · {{n}} 件アクティブ"
+
+[portal.processorFlow.sankey.empty]
+description = "ソースを接続し、ポリシーを有効にすると、ドキュメントがプロセッサーを流れる様子を確認できます。"
+title = "まだフローがありません"
+
+[portal.processorFlow.sources]
+comingSoonTag = "接続"
+editor = "Stirling PDF Editor"
+heading = "ソース"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "メール取り込み"
 
 [portal.procurement]
-reset = "調達をリセット（デモ）"
 subtitle = "チームの評価、契約、オンボーディングを進めます。すべてのドキュメントを一か所に。"
 title = "調達"
 
-[portal.procurement.action]
-download = "ダウンロード"
-pay = "今すぐ支払う"
-request = "リクエスト"
-sign = "確認して署名"
-upload = "アップロード"
-
 [portal.procurement.agreement]
 agreeCta = "同意して購読"
+confidential = "機密"
 confirm = "Stirling Enterprise Agreement を読み、同意します。"
-eyebrow = "契約"
-intro = "1つの統合契約で、Master Service Agreement、Order Form、EULA、Data Processing Agreement をカバーします。内容を確認し、見積もりをコミット済みサブスクリプションとして受け入れることに同意してください。"
-title = "エンタープライズ契約を確認"
+docName = "Stirling Enterprise 契約書"
+docSub = "MSA、注文書、EULA、DPA を 1 つの署名にまとめたものです。"
+download = "ダウンロード"
+downloadDraftError = "契約書 PDF を生成できませんでした - ドキュメントレンダラーを利用できません。しばらくしてからもう一度お試しいただくか、サポートにお問い合わせください。"
+downloadError = "署名済み契約書をダウンロードできませんでした。もう一度お試しください。"
+legalName = "法人名"
+legalNamePlaceholder = "署名する法人"
+loadError = "契約書を読み込めませんでした。もう一度お試しください。"
+loading = "契約書を読み込み中..."
+ref = "参照 {{ref}} · {{version}}"
+requestChanges = "変更を依頼"
+scrollHint = "スクロールして確認"
+signatory = "署名者名"
+signatoryPlaceholder = "氏名"
+signatoryTitle = "署名者の役職"
+signatoryTitlePlaceholder = "例: General Counsel"
+signError = "署名を記録できませんでした。もう一度お試しください。"
 
 [portal.procurement.builder]
 addons = "アドオン"
+addressLine1 = "住所行 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "住所行 2"
+addressLine2Placeholder = "スイート、階、建物"
 back = "戻る"
 businessName = "会社名"
 businessNamePlaceholder = "貴社名"
+city = "市区町村"
+cityPlaceholder = "San Francisco"
+completeRequired = "見積を生成する前に、必須フィールド（* 印）を有効なメールで入力してください。"
+contactEmail = "連絡先メール"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "連絡先名"
+contactNamePlaceholder = "Jane Doe"
 continue = "続行"
-country = "国"
-countryEuro = "ユーロ圏 (EUR €)"
-countryUK = "英国 (GBP £)"
-countryUS = "米国 (USD $)"
+done = "完了"
 eula = "Stirling Enterprise EULA を読み、同意します。この見積もりから生成される契約に適用されます。"
 generate = "見積もりを生成"
-included = "含まれています"
 indemnification = "IP 補償"
 indemnificationSub = "EULA に従い、対象となる IP 請求に対して当社が防御します"
-offlineLicense = "オフライン / エアギャップ ライセンス"
-offlineLicenseSub = "エアギャップのセルフホストインスタンス用にダウンロード可能なライセンスファイル"
+paperEyebrow = "エンタープライズ見積"
+paperFor = "宛先"
+pdfSize = "PDF サイズ"
+poNumber = "PO 番号"
+poNumberPlaceholder = "任意"
+postalCode = "郵便番号"
+postalCodePlaceholder = "94105"
+posture = "ガバナンス"
+posture_count = "約{{count}}個のポリシー"
+posture_essentials = "基本"
+posture_essentialsSub = "分類 + 共有 — デフォルト"
+posture_governed = "ガバナンス対応"
+posture_governedSub = "セキュリティとルーティングを追加"
+posture_regulated = "規制対応"
+posture_regulatedSub = "すべてのカテゴリ — コンプライアンス、保持、取り込み"
 qbr = "四半期ビジネスレビュー"
 qbrSub = "担当 SE が四半期ごとに使用状況とロードマップをレビューします"
+region = "州 / 地域"
+regionPlaceholder = "California"
 running = "{{annual}} / 年 · {{years}}年 {{tcv}}"
 s1Sub = "チームと、年間に処理する予定の PDF。"
 s1Title = "どのくらい処理しますか？"
@@ -7623,6 +8491,12 @@ s2Title = "契約期間とサービス"
 s3Sub = "見積もりと、そこから生成される契約に使用します。"
 s3Title = "お客様情報"
 serviceLevel = "サービスレベル"
+size_compact = "コンパクト"
+size_compactSub = "主にテキスト、1 MB 未満"
+size_heavy = "大容量"
+size_heavySub = "スキャン済みまたは画像が多い、5 MB+"
+size_standard = "標準"
+size_standardSub = "テキストと画像の混在、1～5 MB"
 slDedicated = "専任"
 slDedicatedSub = "4営業時間 · 専任アカウントマネージャー · +30%"
 slPriority = "優先"
@@ -7630,6 +8504,8 @@ slPrioritySub = "同一営業日 · 指名 CSM · +15%"
 slStandard = "標準"
 slStandardSub = "翌営業日 · 共有 CSM · 含まれています"
 stepOf = "ステップ {{n}} / {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "任意"
 term = "期間"
 termDiscount = "{{pct}}% の複数年契約割引が適用されました"
 title = "見積もりを作成"
@@ -7637,6 +8513,7 @@ training = "オンボーディングとトレーニング"
 trainingSub = "チームが使い始められるようにするライブセッション"
 users = "総ユーザー数"
 usersPlaceholder = "例: 250"
+viewEula = "読む"
 volEstimated = "{{count}} ユーザーから推定（各ユーザー約2,000 PDF、オートメーションを含む）。より正確な数が分かる場合は編集してください。"
 volManual = "入力した数値を使用しています。いつでもチームサイズから再推定できます。"
 volNoUsers = "不明ですか？チームサイズを入力すると推定します。"
@@ -7645,55 +8522,55 @@ volumePlaceholder = "例: 1,000,000"
 years_one = "{{count}}年"
 years_other = "{{count}}年"
 
-[portal.procurement.docs]
-count_one = "{{count}}件のドキュメント"
-count_other = "{{count}}件のドキュメント"
-done = "完了"
-here = "現在位置"
-hide = "非表示"
-optional = "任意"
-paidAddon = "有料アドオン"
-show = "表示"
-subtitle = "手続きの各ステップで必要なすべてが、取引の進行に合わせて表示されます。"
-supportingSubtitle = "SOC 2、セキュリティレビュー、税務書類などを、セキュリティチームや調達チームから求められたときに利用できます。一部は一回限りの料金が発生します。"
-supportingTitle = "評価をサポート"
+[portal.procurement.documents]
+agreement = "エンタープライズ契約書"
+agreementSub = "MSA、注文書、DPA を 1 つの署名にまとめたものです。"
+download = "ダウンロード"
+eula = "EULA と商用条件"
+eulaSub = "ソフトウェアおよびセルフサービスの商用条件です。"
+invoice = "請求書"
+invoiceSub = "初回サブスクリプション請求書です。"
+laterInvoice = "承諾後に利用可能"
+laterQuote = "見積発行後に利用可能"
+quote = "見積"
+quoteSub = "項目別のエンタープライズ見積です。"
+sla = "SLA 別紙"
+slaSub = "サポート階層と応答目標です。"
+subprocessors = "サブプロセッサー"
+subprocessorsSub = "お客様に代わってデータを処理する第三者です。"
+subtitle = "取引関連書類はいつでも利用できます。"
 title = "ドキュメント"
-upcoming = "今後"
+view = "表示"
 
 [portal.procurement.error]
 title = "問題が発生しました"
 
 [portal.procurement.hero]
-company = "エンタープライズ契約"
+barAria = "{{total}} 中 {{current}} 段階"
 ctaAgreement = "契約を確認して署名"
-ctaLive = "利用開始済み"
-ctaPayment = "支払いを追加"
+ctaExploring = "トライアルをセットアップ"
 ctaQuote = "見積もりを確認"
+ctaReviewQuote = "見積を確認"
 ctaTrial = "見積もりを作成"
+documents = "ドキュメント"
 eyebrow = "Enterprise 調達"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "チームメイトを招待"
-keyDocs = "主要ドキュメント"
-nextStep = "次のステップ: {{action}}"
-notStarted = "未開始"
+licenseKey = "ライセンスキー"
+liveSub = "組織はプロビジョニング済みで、ライセンスは有効です。"
+liveTitle = "Stirling Enterprise で本番稼働中です"
+next = "次: {{stage}}"
 open = "調達を開く"
 scheduleCall = "通話を予約"
-setup1Sub = "チームメイトを招待します"
-setup1Title = "PDF エディターを導入"
-setup2Sub = "エディターやその他のソース全体で処理を有効にします"
-setup2Title = "PDF プロセッサーを接続"
-setup3Sub = "必要に応じて Security、Compliance、Routing、Retention を有効にします"
-setup3Title = "推奨ポリシーを追加"
+sentenceAgreement = "契約書の確認と署名"
+sentenceLive = "プロビジョニングとロールアウト"
+sentencePayment = "発注書と支払い"
+sentenceQuote = "見積の確認と承諾"
+sentenceTrial = "トライアルワークスペースのセットアップ"
 
 [portal.procurement.journey]
 daysLeft_one = "残り {{count}}日"
 daysLeft_other = "残り {{count}}日"
-engineerLabel = "担当ソリューションエンジニア"
-eyebrow = "ロールアウト"
-live = "Stirling Enterprise で利用開始済みです"
-nextStep = "次のステップ: {{action}}"
-subtitle = "担当ソリューションエンジニアがすべてのステップをサポートします。一度に1つの次のアクションを進め、完全なチェックリストは下にあります。"
-title = "トライアルから本番利用まで、1つのガイド付きパスで"
-trialTitle = "Enterprise トライアル"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "1つの署名で MSA、注文書、EULA、DPA をカバーします。"
@@ -7727,6 +8604,9 @@ downloadError = "オフラインライセンスファイルをまだ生成でき
 downloadOffline = "オフラインライセンス (.lic) をダウンロード"
 hint = "このキーをセルフホストインスタンスに貼り付けて有効化するか、記録用に保管してください。安全に保管してください。"
 label = "ライセンスキー"
+subtitle = "このキーでセルフホストインスタンスをアクティブ化するか、記録用に保管してください。"
+title = "ライセンスキー"
+trialFileHint = "これはトライアルライセンスファイルです。契約が成立したら、戻ってもう一度ダウンロードしてください。オンラインライセンスキーとは異なり、.lic ファイルは自動更新されません。"
 
 [portal.procurement.link]
 cta = "アカウントをリンク"
@@ -7739,65 +8619,62 @@ description = "サブスクリプションがアクティブで、ライセン
 eyebrow = "本番稼働"
 title = "Stirling Enterprise で利用開始済みです"
 
-[portal.procurement.locked]
-description = "Enterprise 評価を開始すると、トライアルキー、コミット済みボリューム見積もり、1署名の契約、支払い、ドキュメント台帳がすべてここに表示されます。"
-eyebrow = "Enterprise のみ"
-talkToSales = "営業に相談"
-title = "調達トラックは Enterprise で利用できます"
-
 [portal.procurement.milestone]
-accept = "承諾して続行"
-description = "PDF をダウンロードしてチームと共有し、準備ができたら戻って承諾するか、変更を加えてください。"
-download = "PDF をダウンロード"
 downloadError = "見積もり PDF をまだダウンロードできませんでした。しばらくしてからもう一度お試しください。"
-edit = "見積もりを編集"
-eyebrow = "見積もり {{number}}"
-perYear = " / 年"
-preparedFor = "{{company}} 向けに作成"
-tcv = "総契約価値 {{value}}"
-title = "見積もりの準備ができました"
-
-[portal.procurement.modal]
-cancel = "キャンセル"
-chooseFile = "ファイルを選択"
-close = "閉じる"
-downloadBody = "まもなくダウンロードが開始されます。"
-downloadCta = "ダウンロード"
-downloadTitle = "ダウンロード"
-noFile = "ファイルが選択されていません"
-payBody = "Stripe を通じて、コミット済み契約をカードまたは銀行振込で支払います。支払いが確認され次第、ワークスペースがプロビジョニングされます。"
-payCta = "Stripe に進む"
-payTitle = "支払いを確認"
-requestBodyFree = "これはオンデマンドで生成します。確認すると、担当ソリューションエンジニアがまもなく送付します。"
-requestBodyPaid = "これは有料アドオンです。確認すると、担当ソリューションエンジニアが範囲を確認し、書類を送付します。"
-requestCta = "リクエスト"
-requestTitle = "このドキュメントをリクエスト"
-signBody = "Stirling Enterprise Agreement を電子署名用に開きます。1つの署名で MSA、注文書、EULA、DPA をカバーします。当社が自動的に副署し、支払いに進みます。"
-signCta = "署名用に開く"
-signTitle = "契約を確認して署名"
-uploadBody = "PO を送信してください。お客様の条件に基づいて請求します。PDF をドラッグするか、下からファイルを選択してください。"
-uploadCta = "注文書をアップロード"
-uploadTitle = "注文書をアップロード"
 
 [portal.procurement.payment]
 description = "見積もりは承諾済みで、ライセンスはすでに有効です。チームはすぐに開始できます。準備ができたら最初の請求書を支払ってください。ここで支払うかダウンロードでき、メールは不要です。"
+downloadAgreement = "署名済み契約書をダウンロード"
 downloadInvoice = "請求書をダウンロード"
-simulate = "支払い受領をシミュレート（デモ）"
+eyebrow = "支払い"
 title = "サブスクリプションが作成されました"
 viewInvoice = "請求書を表示して支払う"
 
+[portal.procurement.review]
+acceptCta = "見積を承諾"
+annual = "年間料金（1 年目）"
+downloadCta = "見積をダウンロード"
+poNumber = "発注書: {{po}}"
+renewal = "期間終了後は {{amount}}/年で更新（+{{pct}}% CPI）"
+tcv = "{{years}} 年契約、前払い一括: {{tcv}}"
+validUntil = "有効期限 {{date}}"
+
 [portal.procurement.schedule]
 fallback = "スケジューラーを読み込めませんでした。"
 fallbackLink = "新しいタブでスケジュールを開く"
+loading = "スケジューラーを読み込み中..."
 subtitle = "担当ソリューションエンジニアがロールアウトをチームに案内します。都合のよい時間を選択してください。"
 title = "通話を予約"
 
-[portal.procurement.status]
-action = "アクションが必要"
-available = "利用可能"
-complete = "完了"
-pending = "保留中"
-request = "リクエスト時"
+[portal.procurement.setup]
+airgap = "エアギャップ"
+airgapSub = "密閉、アウトバウンドなし"
+back = "戻る"
+businessName = "会社名"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "マネージド、最速開始"
+continue = "続行"
+deployment = "どこにデプロイしますか？"
+eula = "Stirling EULA と商用条件に同意します。"
+fullName = "氏名"
+fullNamePlaceholder = "あなたの名前"
+invites = "チームメイトを招待 · 任意"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "通話を予約"
+seats = "テスト人数"
+seatsPlaceholder = "例: 15"
+selfhost = "セルフホスト"
+selfhostSub = "Docker または Kubernetes"
+start = "トライアルを開始"
+stepOf = "ステップ {{n}} / {{total}}"
+subtitle = "14 日間無料、カード不要。"
+subtitleDetails = "見積と契約書のために、いくつかの詳細を入力してください。"
+talkFirst = "まず相談しますか？"
+title = "トライアルをセットアップ"
+viewEula = "読む"
+workEmail = "勤務先メール"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "延長すると7日追加され、担当ソリューションエンジニアに通知されます。"
@@ -7808,20 +8685,6 @@ maxed = "上限に達しました"
 subtitle = "無料トライアルは {{date}} まで有効です。カードは不要です。"
 title = "Enterprise トライアル"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "コミット済みボリューム価格、組織全体の SSO + SCIM + RBAC、90日間の改ざん不可監査、専任 SE。"
-homeCta = "トライアルを開始 →"
-homeHeadline = "数百万の PDF を処理。"
-
-[portal.recentActivity]
-title = "最近のアクティビティ"
-viewAll = "すべて表示"
-
-[portal.recentActivity.empty]
-description = "パイプラインの実行、デプロイ、エージェントイベントがここに表示されます。"
-title = "まだ何もありません"
-
 [portal.search]
 ariaLabel = "検索"
 placeholder = "Stirling を検索 — エンドポイント、パイプライン、ドキュメント…"
@@ -7838,58 +8701,50 @@ admin = "管理者"
 [portal.settings.sections]
 account-link = "アカウントリンク"
 
-[portal.shell.header]
-accountFallback = "アカウント"
-accountMenu = "アカウントメニュー"
-darkMode = "ダークモード"
-lightMode = "ライトモード"
-search = "検索"
-searchPlaceholder = "検索…"
-signOut = "サインアウト"
-switchToDark = "ダークテーマに切り替え"
-switchToLight = "ライトテーマに切り替え"
-
 [portal.shell.sidebar]
 appEditor = "エディター"
 appProcessor = "プロセッサー"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}}件のドキュメント"
 linkAccount = "Stirling アカウントをリンク"
-planEditor = "エディタープラン"
-planEnterprise = "Enterprise プラン"
-planProcessor = "プロセッサープラン"
 primaryNav = "プライマリナビゲーション"
 switchApp = "アプリを切り替え"
 
+[portal.shell.topbar]
+closeNav = "ナビゲーションを閉じる"
+openNav = "ナビゲーションを開く"
+search = "検索"
+
 [portal.sources]
 subtitle = "ドキュメントを Stirling に供給する再利用可能な入力接続です。一度接続を設定すれば、任意の数のポリシーから参照できます。行をクリックすると、その設定と使用中のポリシーを確認できます。"
 title = "ソース"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "ソースを接続"
 
+[portal.sources.builder]
+back = "ソースに戻る"
+backToTypes = "すべてのソースタイプ"
+cancel = "キャンセル"
+chooseHint = "ドキュメントの取得元を選択してください。グレー表示のコネクターは近日対応予定です。"
+comingSoon = "近日対応予定"
+comingSoonHeading = "近日対応予定"
+create = "ソースを作成"
+createTitle = "ソースを接続"
+delete = "削除"
+editTitle = "ソースを編集"
+enabled = "有効"
+save = "変更を保存"
+
+[portal.sources.builder.folderAccess]
+description = "フォルダー自動化は、管理者が許可したフォルダーのみ使用できます。フォルダーアクセス設定で追加してから、もう一度お試しください。"
+openSettings = "フォルダーアクセス設定"
+title = "このフォルダーは許可されていません"
+
 [portal.sources.delete]
 body = "「{{name}}」を削除しますか？この操作は元に戻せません。これを参照しているポリシーは更新が必要になります。"
 cancel = "キャンセル"
 confirm = "削除"
 title = "ソースを削除しますか？"
 
-[portal.sources.detail]
-closeAriaLabel = "詳細を閉じる"
-delete = "ソースを削除"
-docs24h = "過去24時間"
-docs30d = "過去30日間"
-docsTotal = "確認済み合計"
-docsTrend = "過去30日間のドキュメント"
-documents = "ドキュメント"
-edit = "編集"
-notReferenced = "どのポリシーからも参照されていないため、安全に削除できます。"
-pause = "一時停止"
-resume = "再開"
-subtitle = "{{type}} · {{status}}"
-usedBy = "使用元"
-
 [portal.sources.empty]
 description = "フォルダー（まもなくクラウドストレージも）を接続して、ポリシーがドキュメントを取得できる場所を用意します。"
 title = "まだソースが接続されていません"
@@ -7899,18 +8754,57 @@ inUse = "使用中"
 total = "接続"
 unused = "未使用"
 
+[portal.sources.networkFields.connection]
+helperText = "サーバーアドレスと認証情報を持つ保存済み接続です。それを参照するすべてのソースで再利用されます。"
+label = "接続"
+
+[portal.sources.networkFields.directory]
+helperText = "ポーリングするサーバー上のフォルダーです。ログインホームまたは共有ルートからの相対パスです。ルートの場合は空白のままにします。"
+label = "フォルダー"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume は、すべてのポリシーで処理された後、各ファイルをサーバーから削除します。"
+label = "読み取りモード"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: 各ファイルを 1 回処理"
+snapshot = "Snapshot: 実行ごとにフォルダーを再読み取り"
+
+[portal.sources.networkFields.recursive]
+label = "フォルダー階層"
+
+[portal.sources.networkFields.recursive.options]
+all = "サブフォルダーを含める"
+top = "最上位のみ"
+
 [portal.sources.status]
 active = "アクティブ"
 disabled = "無効"
 unused = "未使用"
 
 [portal.sources.table]
+documents = "ドキュメント"
 source = "ソース"
 status = "ステータス"
 usedBy = "ポリシー"
 
+[portal.sources.types.box]
+description = "チームがすでに共有している Box フォルダーからドキュメントを取得します。"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "共有 Dropbox フォルダーからドキュメントを取得します。"
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "チームがエディターで処理したドキュメントです。ポリシー実行と AI 実行を横断します。"
 label = "エディター"
+noPolicies = "エディターから実行されたポリシーはまだありません。"
+
+[portal.sources.types.email]
+description = "専用メールボックスに送信された添付ファイルをドキュメントに変換します。"
+label = "メール受信箱"
 
 [portal.sources.types.folder]
 description = "サーバー上のディレクトリを監視して新しいドキュメントを検出します。"
@@ -7943,25 +8837,80 @@ label = "フォルダーの深さ"
 all = "サブフォルダーを含める"
 top = "最上位のみ"
 
+[portal.sources.types.ftp]
+description = "新しいドキュメントがないか FTP または FTPS サーバーフォルダーをポーリングします。"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "共有 Google Drive フォルダーからドキュメントを取得します。"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "新しいドキュメントがないか SMB ネットワーク共有を監視します。"
+label = "ネットワークドライブ"
+
+[portal.sources.types.onedrive]
+description = "新しいドキュメントがないか OneDrive フォルダーを監視します。"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Amazon S3 または S3 互換バケットからドキュメントを取得します。"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "バケットと認証情報を保持する保存済み接続です。それを参照するすべてのソースとパイプライン出力で再利用されます。"
+label = "接続"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume は、すべてのポリシーで処理された後、各オブジェクトをバケットから削除します。"
+label = "読み取りモード"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: 各オブジェクトを 1 回処理"
+snapshot = "Snapshot: 実行ごとにバケットを再読み取り"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "キーがこのプレフィックスで始まるオブジェクトのみ処理されます。"
+label = "キープレフィックス"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "新しいドキュメントがないか SFTP ドロップフォルダーをポーリングします。"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint ドキュメントライブラリからドキュメントを取得します。"
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "ソース"
 
+[portal.sources.types.webhook]
+createNote = "この webhook を作成すると、配信 URL と署名シークレットが生成されます。送信者はその URL にドキュメントを POST し、参照しているポリシーが到着時に実行されます。"
+description = "任意の外部システムから、署名付き HTTP POST でドキュメントを受信します。"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "配信 URL"
+secretNote = "署名シークレットは webhook 作成時に一度だけ表示されます。ローテーションするにはソースを再作成してください。"
+
+[portal.sources.types.webhook.reveal]
+copy = "コピー"
+done = "完了"
+secret = "署名シークレット"
+secretHelp = "このキーで各配信の生の本文に署名（HMAC-SHA256）し、X-Stirling-Signature ヘッダーとして送信してください。"
+secretWarning = "今すぐ署名シークレットをコピーしてください。セキュリティのため、一度だけ表示され、後で取得することはできません。"
+title = "Webhook を作成しました"
+url = "配信 URL"
+usage = "各ドキュメントを、バイナリコンテンツタイプ（application/pdf または application/octet-stream）で生のリクエスト本文として配信 URL に POST してください。参照しているポリシーは到着時に自動実行されます。"
+
 [portal.sources.wizard]
-back = "戻る"
-cancel = "キャンセル"
-continue = "続行"
-editTitle = "ソースを編集"
 name = "名前"
 namePlaceholder = "例: 請求受付"
-save = "変更を保存"
-subtitle = "ステップ {{current}} / {{total}} · {{label}}"
-title = "ソースを接続"
 type = "タイプ"
 
-[portal.sources.wizard.steps]
-chooseType = "タイプを選択"
-configure = "設定"
-review = "確認して接続"
+[portal.stepModal]
+close = "閉じる"
 
 [portal.usage]
 managePayment = "支払いを管理"
@@ -8021,16 +8970,9 @@ summary = "チームを所有し、そのメンバーのリソースと共有設
 2 = "デフォルトポリシーによるポータルアクセス"
 3 = "メンバーができるすべて"
 
-[portal.welcome]
-ariaLabel = "Stirling PDF へようこそ"
-badge = "Open-source"
-installEditor = "エディターをインストール"
-inviteTeammates = "チームメイトを招待"
-openInBrowser = "ブラウザーで開く"
-perks = "永久無料 · セルフホスト可能"
-subtitle = "世界で最も安全な PDF エディターは、あらゆる規模のチームに無料で提供されます。60以上の PDF 操作と SSO が含まれます。"
-title = "ようこそ"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · 無制限"
 
 [printFile]
 title = "ファイルの印刷"
@@ -8613,6 +9555,14 @@ text = "PDF のページを90度単位で時計回りまたは反時計回りに
 [rotate.tooltip.header]
 title = "回転設定の概要"
 
+[ruler]
+clearAll = "すべてクリア"
+hideAllLabels = "すべてのラベルを非表示"
+hideSmallLabels = "小さいラベルを非表示"
+physicalValues = "物理"
+scaled = "スケーリング済み"
+showAllLabels = "すべてのラベルを表示"
+
 [sanitize]
 desc = "PDF ファイルから潜在的に有害な要素を削除します。"
 sanitizationResults = "サニタイズ結果"
@@ -8654,31 +9604,45 @@ label = "XMP メタデータを削除"
 [sanitize.steps]
 settings = "設定"
 
-[sanitizePdf]
-tags = "クリーン,安全,保護,脅威除去"
-
 [sanitizePDF]
 title = "PDFをサニタイズ"
 
+[sanitizePdf]
+tags = "クリーン,安全,保護,脅威除去"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "ページの縮尺の調整"
 
+[scaleSettings]
+activeScale = "有効な縮尺"
+apply = "縮尺を適用"
+applyCalibration = "キャリブレーションを適用"
+calculatedScale = "計算された縮尺"
+calibrate = "キャリブレーション"
+calibrating = "キャリブレーション中"
+calibrationDistanceRequired = "0より大きい実際の距離を入力してください"
+calibrationInvalid = "この測定値から縮尺を計算できません"
+calibrationPaperDistance = "測定されたページ上の距離: {{distance}}"
+calibrationTitle = "縮尺をキャリブレーション"
+calibrationTooltip = "既知の距離を測定して縮尺を自動計算します"
+customScale = "カスタム縮尺"
+noneSet = "カスタム縮尺が設定されていません"
+presets = "プリセット縮尺"
+ratio = "縮尺比"
+ratioHelp = "比率: 1ページ単位 = X実世界単位"
+ratioPlaceholder = "例: 100"
+ratioPositive = "比率は0より大きい必要があります"
+ratioRequired = "比率は必須です"
+realDistance = "実際の距離"
+realDistancePlaceholder = "例: 5"
+reset = "デフォルトにリセット"
+unit = "単位"
+unitInvalid = "無効な単位: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "角度のしきい値:"
-10 = "出力に白い縁取りが出ないように追加・削除される境界線の大きさを設定 (初期値:1)。"
-2 = "画像を回転させるために必要な絶対角度の最小値を設定 (初期値:10)。"
-3 = "許容範囲:"
-4 = "推定された背景色周辺のカラーバリエーションの範囲を決定 (初期値:30)。"
-5 = "最小面積:"
-6 = "画像の最小面積のしきい値を設定 (初期値:10000)。"
-7 = "最小輪郭面積:"
-8 = "画像の最小の輪郭面積のしきい値を設定。"
-9 = "境界線サイズ:"
-
 [scannerImageSplit]
 submit = "画像スキャンを抽出"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "できること"
 whatThisDoesDesc = "スキャンしたページや合成画像から各写真を自動検出して抽出します。手動のトリミングは不要です。"
 whenToUse = "使用タイミング"
 
+[ScannerImageSplit.selectText]
+1 = "角度のしきい値:"
+10 = "出力に白い縁取りが出ないように追加・削除される境界線の大きさを設定 (初期値:1)。"
+2 = "画像を回転させるために必要な絶対角度の最小値を設定 (初期値:10)。"
+3 = "許容範囲:"
+4 = "推定された背景色周辺のカラーバリエーションの範囲を決定 (初期値:30)。"
+5 = "最小面積:"
+6 = "画像の最小面積のしきい値を設定 (初期値:10000)。"
+7 = "最小輪郭面積:"
+8 = "画像の最小の輪郭面積のしきい値を設定。"
+9 = "境界線サイズ:"
+
 [search]
 noResults = "結果が見つかりませんでした"
 placeholder = "検索語を入力..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Stirling-PDF サーバーがオフラインで、ロ
 [session]
 expired = "セッションが期限切れです。ページを更新してもう一度お試しください。"
 
-[sessionManagement.tooltip]
-header = "署名セッションの管理"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "新しい参加者は署名順序の最後に追加されます"
-bullet2 = "セッションの最終化後は参加者を追加できません"
-bullet3 = "各参加者は自分の順番になると通知を受け取ります"
-description = "最終化前であれば、アクティブなセッションにいつでも参加者を追加できます。"
-title = "参加者の追加"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>完全最終化</b>: すべての参加者が署名済み"
-bullet2 = "<b>部分最終化</b>: 一部の参加者がまだ署名していません"
-bullet3 = "未署名の参加者は最終ドキュメントから除外されます"
-bullet4 = "最終化後、署名済みPDFをアクティブファイルに読み込めます"
-description = "最終化はすべての署名を1つの署名済みPDFにまとめます。この操作は元に戻せません。"
-title = "セッションの最終化"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "既に署名した参加者は削除できません"
-bullet2 = "削除された参加者には以降通知されません"
-bullet3 = "署名順序は自動的に調整されます"
-description = "署名前であればセッションから参加者を削除できます。"
-title = "参加者の削除"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "各署名は順番にPDFへ適用されます"
-bullet2 = "後の署名者は先の署名を確認できます"
-bullet3 = "承認ワークフローや法的な証跡に不可欠です"
-description = "セッション作成時に指定する順序が、誰が最初に署名するかを決定します。"
-title = "署名の順序"
-
 [settings]
 close = "閉じる"
 
+[settings.ai]
+documents = "ドキュメント & RAG"
+general = "一般"
+limits = "制限 & パフォーマンス"
+models = "モデル & プロバイダー"
+title = "AI"
+
 [settings.configuration]
 advanced = "詳細設定"
 database = "データベース"
 endpoints = "エンドポイント"
 features = "機能"
+folderAccess = "フォルダーアクセス"
 mcp = "MCP Server"
 storageSharing = "ファイルストレージと共有"
 systemSettings = "システム設定"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "既定のPDFエディター"
 defaultPdfEditorActive = "Stirling PDF は既定のPDFエディターです"
 defaultPdfEditorChecking = "確認中..."
 defaultPdfEditorInactive = "別のアプリが既定に設定されています"
+defaultPdfEditorRemind = "デフォルトに設定するよう通知する"
+defaultPdfEditorRemindDescription = "Stirling PDF がデフォルトの PDF アプリケーションでない場合にバナーを表示します。"
 defaultPdfEditorSet = "既に既定です"
 defaultStartupView = "起動時のデフォルト表示"
 defaultStartupViewDescription = "アプリ起動時に左側の列でアクティブにするタブを選択します"
@@ -8817,9 +9771,18 @@ languageDescription = "表示言語を選択"
 logout = "ログアウト"
 setAsDefault = "既定に設定"
 theme = "テーマ"
+themeAccent = "アクセントカラー"
+themeAccentCustom = "カスタムカラー"
+themeAccentCustomHint = "カスタム（デフォルト推奨）"
+themeAccentDark = "ダークモードのアクセントカラー"
+themeAccentDefault = "デフォルト"
+themeAccentDefaultHint = "デフォルトテーマ（推奨）"
+themeAccentDescription = "ボタン、リンク、ハイライトに適用され、アプリに控えめな色合いを加えます。ライトとダークにはそれぞれ独自の設定があります。システムでは現在有効なものが使用されます。"
+themeAccentLight = "ライトモードのアクセントカラー"
 themeDark = "ダーク"
 themeDescription = "ライト/ダークモードを切り替え"
 themeLight = "ライト"
+themeReset = "テーマをデフォルトに戻す"
 themeSystem = "System"
 title = "一般"
 user = "ユーザー"
@@ -8833,6 +9796,12 @@ intro = "組織向けにユーザー認証、チーム管理、ワークスペ
 learnMore = "ドキュメントで詳しく見る"
 title = "システム管理者向け"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud にサインインしたときに開くアプリを選択します。"
+editor = "エディター"
+processor = "プロセッサー"
+title = "サインイン後"
+
 [settings.general.mode]
 fullscreen = "フルスクリーン"
 sidebar = "サイドバー"
@@ -9041,6 +10010,11 @@ security = "セキュリティ"
 telegram = "Telegram"
 title = "セキュリティと認証"
 
+[settings.signOut]
+confirm = "サインアウトしてもよろしいですか？"
+submit = "サインアウト"
+title = "サインアウト"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "サーバーにアップロード"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "ここをクリック"
+fallback = "自動的に開かなかった場合は、"
+opening = "Swagger UI を新しいタブで開いています..."
 tags = "API,ドキュメント,swagger,エンドポイント,開発"
 title = "API ドキュメント"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "このツールを実行するには、アクティブなフ
 singleFileScope = "適用対象: {{fileName}} のみ"
 viewerMode = "複数ファイルを選択するにはファイルエディタに切り替えてください。"
 
+[toolFormat]
+ANY = "任意のファイル"
+CBR = "コミックブックアーカイブ（CBR）"
+CBZ = "コミックブックアーカイブ（CBZ）"
+CSV = "CSV ファイル"
+EBOOK = "電子書籍"
+EMAIL = "メール"
+EXCEL = "スプレッドシート"
+HTML = "Web ページ"
+IMAGE = "画像"
+JAVASCRIPT = "JavaScript ファイル"
+JSON = "JSON ファイル"
+MARKDOWN = "Markdown ファイル"
+NONE = "ファイルなし"
+PCL = "PCL 印刷ファイル"
+PDF = "PDF"
+PDF_ENCRYPTED = "パスワード保護された PDF"
+POSTSCRIPT = "PostScript ファイル"
+PPT = "プレゼンテーション"
+TEXT = "テキストファイル"
+VIDEO = "動画"
+WORD = "Word 文書"
+XML = "XML ファイル"
+XPS = "XPS 文書"
+ZIP = "ZIP アーカイブ"
+
 [toolPanel]
 alpha = "アルファ"
 backToAllTools = "すべてのツールに戻る"
 collapse = "パネルを折りたたむ"
 expand = "パネルを展開"
 goBack = "戻る"
+pdfTools = "PDF ツール"
 placeholder = "ツールを選択して開始"
 premiumFeature = "プレミアム機能:"
+searchTools = "ツールを検索"
 toolsHeader = "ツール"
 viewAllTools = "すべてのツールを表示"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "ツールが見つかりません"
 quickAccess = "クイックアクセス"
 searchPlaceholder = "ツールを検索..."
 
-[toolPicker.categories]
-advancedTools = "高度なツール"
-recommendedTools = "おすすめのツール"
-standardTools = "標準ツール"
-
 [toolPicker.subcategories]
 advancedFormatting = "高度なフォーマット"
 automation = "自動化"
@@ -9950,16 +10950,31 @@ title = "ユーザー"
 you = "（あなた）"
 
 [users.action]
+cancelInvite = "招待をキャンセル"
 deleteTeam = "チームを削除"
 disableMfa = "MFA をリセット"
 move = "チームへ移動"
 reinstate = "復帰"
 remove = "組織から削除"
+removeTeam = "チームから削除"
 rename = "チーム名を変更"
 resetPw = "パスワードをリセット"
 suspend = "停止"
 unlock = "アカウントのロック解除"
 
+[users.activity]
+daysAgo = "{{count}}日前"
+hoursAgo = "{{count}}時間前"
+justNow = "たった今"
+minutesAgo = "{{count}}分前"
+monthsAgo_one = "{{count}}か月前"
+monthsAgo_other = "{{count}}か月前"
+never = "なし"
+weeksAgo_one = "{{count}}週間前"
+weeksAgo_other = "{{count}}週間前"
+yearsAgo_one = "{{count}}年前"
+yearsAgo_other = "{{count}}年前"
+
 [users.cap]
 addProcessor = "+ プロセッサー"
 approver = "ポリシーを承認"
@@ -9967,11 +10982,14 @@ editor = "エディター"
 processor = "プロセッサー"
 
 [users.confirm]
+cancelInviteBody = "{{email}} への招待をキャンセルしますか？現在のリンクでは参加できなくなります。"
+cancelInviteTitle = "招待をキャンセル"
 deleteTeamBody = "{{name}} チームを削除しますか？先にチームが空である必要があります。メンバーを別のチームに移動し、連携設定を所有していない状態にしてください。"
 deleteTeamTitle = "チームを削除"
 disableMfaBody = "{{name}} の MFA 登録を削除しますか？必要な場合、次回ログイン時に再設定します。"
 disableMfaTitle = "MFA をリセット"
 removeBody = "{{name}} を組織から完全に削除しますか？この操作は元に戻せません。"
+removeTeamBody = "{{name}} をチームから削除しますか？アカウントは保持されますが、このチームのリソースへのアクセス権を失います。"
 removeTitle = "メンバーを削除"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "ユーザー名"
 usernameError = "ユーザー名は3文字以上である必要があります"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "{{who}} による招待"
+cancel = "キャンセル"
+count = "{{count}}件保留中"
+desc = "まだ参加していない招待済みのユーザーです。承諾するまでシートを保持します。"
+expiresInDays_one = "{{count}}日後に期限切れ"
+expiresInDays_other = "{{count}}日後に期限切れ"
+expiresToday = "今日期限切れ"
+title = "保留中の招待"
+
 [users.loadError]
 description = "バックエンドへの接続で問題が発生したか、アクセス権がありません。もう一度お試しください。"
 title = "メンバーを読み込めませんでした"
@@ -10212,9 +11240,11 @@ title = "添付ファイル"
 
 [viewer.bookmarks]
 bookmarkTitle = "ブックマークのタイトル"
+bookmarkTitleRequired = "ブックマークのタイトルは必須です"
 closeSidebar = "ブックマークのサイドバーを閉じる"
 collapseAll = "すべてのブックマークを折りたたむ"
 expandAll = "すべてのブックマークを展開"
+searchPlaceholder = "ブックマークを検索"
 
 [viewer.comments]
 addComment = "コメントを追加"
@@ -10605,30 +11635,6 @@ title = "透かしテキスト"
 image = "画像"
 text = "テキスト"
 
-[wetSignature.tooltip]
-header = "署名の作成方法"
-
-[wetSignature.tooltip.draw]
-bullet1 = "ペンの色と太さをカスタマイズ"
-bullet2 = "納得いくまでクリアして描き直し"
-bullet3 = "タッチデバイス（タブレット・スマートフォン）に対応"
-description = "マウスやタッチスクリーンで手書きの署名を作成します。個人的で本物らしい署名に最適です。"
-title = "手書きで署名"
-
-[wetSignature.tooltip.type]
-bullet1 = "複数のフォントから選択"
-bullet2 = "文字サイズと色をカスタマイズ"
-bullet3 = "定型的な署名に最適"
-description = "入力したテキストから署名を生成します。高速で一貫性があり、ビジネス文書に適しています。"
-title = "テキストで署名"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG、JPG などの画像形式に対応"
-bullet2 = "最良の結果のため透明背景を推奨"
-bullet3 = "署名領域に合わせて画像をリサイズ"
-description = "作成済みの署名画像をアップロードします。スキャンした署名や会社ロゴがある場合に最適です。"
-title = "署名画像をアップロード"
-
 [workbenchBar]
 activeFiles = "アクティブなファイル"
 annotations = "注釈"
@@ -10652,6 +11658,7 @@ redact = "墨消し"
 rotateLeft = "左に回転"
 rotateRight = "右に回転"
 ruler = "定規 / 測定"
+rulerSettings = "縮尺設定"
 save = "保存"
 saveAll = "すべて保存"
 saveAs = "名前を付けて保存"
diff --git a/frontend/editor/public/locales/ko-KR/translation.toml b/frontend/editor/public/locales/ko-KR/translation.toml
index 89fd87a954..5233ce4687 100644
--- a/frontend/editor/public/locales/ko-KR/translation.toml
+++ b/frontend/editor/public/locales/ko-KR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "개의 파일이 선택됨"
 font = "글꼴"
 fontSizeTooltip = "페이지 번호 텍스트의 포인트 크기입니다. 숫자가 클수록 텍스트가 커집니다."
 fontTypeTooltip = "페이지 번호에 사용할 글꼴 계열입니다. 문서 스타일에 맞게 선택하세요."
-genericSubmit = "제출"
 green = "초록"
 help = "도움말"
-imgPrompt = "이미지 선택"
 incorrectPasswordMessage = "현재 비밀번호가 올바르지 않습니다."
 info = "정보"
 invalidUndoData = "실행 취소할 수 없음: 잘못된 작업 데이터"
@@ -62,7 +60,6 @@ loginAgreementTitle = "로그인 동의"
 logOut = "로그아웃"
 marginTooltip = "페이지 번호와 페이지 가장자리 사이의 거리입니다."
 moreOptions = "추가 옵션"
-multiPdfPrompt = "PDF 선택 (2개 이상)"
 never = "안 함"
 no = "아니오"
 noFileSelected = "선택된 파일이 없습니다. 업로드해 주세요."
@@ -80,7 +77,6 @@ pageOrderPrompt = "사용자 지정 페이지 순서 (쉼표로 구분된 페이
 pages = "페이지"
 pageSelectionPrompt = "사용자 지정 페이지 선택 (페이지 번호 1,5,6 또는 2n+1과 같은 함수를 쉼표로 구분하여 목록 입력):"
 password = "비밀번호"
-pdfPrompt = "PDF 선택"
 pin = "파일 고정(도구 실행 후에도 유지)"
 pro = "프로"
 processingComplete = "파일이 준비되었습니다."
@@ -356,6 +352,7 @@ text = "이 권한은 사용자가 PDF로 무엇을 할 수 있는지를 제어
 title = "권한 변경"
 
 [addStamp]
+preview = "스탬프 미리보기"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "수동 다운로드: 링크를 클릭하고 파일을 tessdata 
 noLanguages = "구성된 디렉터리에서 tessdata 언어를 찾을 수 없습니다."
 permissionNotice = "tessdata 경로에 쓸 수 없습니다. 다운로드는 브라우저에서 열리며, .traineddata 파일을 직접 tessdata 폴더에 저장하세요."
 
+[admin.settings.ai.documents]
+description = "문서에 대한 질문에 답변하는 데 사용되는 임베딩 모델 및 검색 설정을 구성합니다. 저장 시 AI 엔진에 적용됩니다."
+title = "문서 및 RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "엔진 자체 환경 자격 증명을 사용하려면 비워 두세요. 자체 호스팅 단일 엔진 배포에 적용됩니다."
+generic = "임베딩 API key"
+openai = "OpenAI API key"
+setPlaceholder = "저장됨 - 현재 key를 유지하려면 비워 두세요"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI 호환 / Ollama 임베딩 엔드포인트의 기본 URL입니다. 예: http://ollama:11434/v1. 신뢰할 수 있는 내부 엔드포인트를 가리켜야 합니다(SSRF에 민감)."
+label = "임베딩 기본 URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "임베딩 모델 이름입니다. 자유 텍스트이며, 제안은 힌트일 뿐입니다."
+label = "임베딩 모델"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "문서 텍스트를 벡터 임베딩으로 변환하는 데 사용되는 제공업체입니다."
+label = "임베딩 제공업체"
+
+[admin.settings.ai.documents.maxSearches]
+description = "에이전트가 요청당 실행할 수 있는 검색 검색의 최대 횟수입니다."
+label = "최대 검색 수"
+
+[admin.settings.ai.documents.reindexNote]
+body = "임베딩 모델 변경은 즉시 적용되지만, 이전 모델로 인덱싱된 문서는 검색이 올바른 결과를 반환하도록 다시 인덱싱해야 합니다."
+title = "재인덱싱 필요"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "임베딩 모델을 변경한 경우, 검색이 새 모델을 사용하도록 기존 문서를 다시 인덱싱하세요."
+
+[admin.settings.ai.documents.topK]
+description = "검색당 가져오는 가장 관련성 높은 청크 수입니다."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling을 Python AI 엔진에 연결하고 노출할 AI 기능을 선택합니다. 변경 사항은 다시 시작 시 적용됩니다."
+title = "AI 엔진"
+
+[admin.settings.ai.general.capabilities]
+description = "개별 AI 기능을 켜거나 끕니다. 비활성화된 기능은 앱에서 숨겨집니다."
+title = "기능"
+
+[admin.settings.ai.general.enabled]
+description = "마스터 스위치입니다. 꺼져 있으면 AI 도구, 에이전트 또는 엔진 호출을 사용할 수 없습니다."
+label = "AI 활성화"
+
+[admin.settings.ai.general.features.chat]
+description = "PDF 작업을 위한 대화형 어시스턴트입니다."
+label = "채팅 어시스턴트"
+
+[admin.settings.ai.general.features.classify]
+description = "문서를 유형 또는 내용별로 자동 분류합니다."
+label = "문서 분류"
+
+[admin.settings.ai.general.features.createPdf]
+description = "AI 에이전트를 통해 새 PDF를 생성합니다(예: HTML에서)."
+label = "프롬프트에서 PDF 만들기"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "업로드한 문서에 근거한 질문과 답변을 제공합니다."
+label = "문서 질문"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "문서의 수학적 및 수치 오류를 검토합니다."
+label = "수학 감사자"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "PDF에 AI가 작성한 검토 댓글과 주석을 추가합니다."
+label = "PDF 댓글 에이전트"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "문서 생성과 같은 무거운 에이전트 작업의 시간 제한입니다."
+label = "장시간 실행 시간 제한(초)"
+
+[admin.settings.ai.general.note]
+body = "AI 엔진은 별도 서비스로 실행됩니다. 공유 비밀"
+body2 = "은 컨테이너 환경 변수를 통해 설정됩니다. 제공업체 API key는 이 페이지에 입력하거나 엔진 환경 변수로 제공할 수 있으며, 여기에 입력한 key는 저장 시 엔진으로 전송됩니다."
+title = "AI 엔진 정보"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "스트리밍(토큰 단위) 채팅 응답의 시간 제한입니다."
+label = "스트림 시간 제한(초)"
+
+[admin.settings.ai.general.test]
+button = "연결 테스트"
+failBody = "AI 엔진이 응답하지 않았습니다. URL, 엔진 컨테이너가 실행 중인지, AI가 활성화되어 있는지 확인하세요(활성화 후 다시 시작해야 함)."
+failTitle = "AI 엔진에 연결할 수 없음"
+okBody = "AI 엔진이 상태 확인에 응답했습니다."
+okTitle = "AI 엔진에 연결됨"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "엔진으로 보내는 표준 AI 요청의 시간 제한입니다."
+label = "요청 시간 제한(초)"
+
+[admin.settings.ai.general.url]
+description = "Python AI 엔진의 내부 URL입니다. 예: http://stirling-pdf-engine:5001."
+label = "AI 엔진 URL"
+
+[admin.settings.ai.limits]
+description = "AI 요청이 수행할 수 있는 작업량과 동시에 실행되는 수에 대한 보호 장치입니다. 저장 시 AI 엔진에 적용됩니다."
+title = "제한 및 성능"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "보호 장치: 추출된 텍스트가 이 길이를 초과하는 AI 요청을 거부합니다."
+label = "요청당 최대 문자 수"
+
+[admin.settings.ai.limits.maxPages]
+description = "보호 장치: 이 페이지 수를 초과하는 PDF에 대한 AI 요청을 거부합니다."
+label = "요청당 최대 페이지 수"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "전체 엔진에서 동시에 진행 중인 모델 호출의 최대 수입니다."
+label = "모델 최대 동시 실행 수"
+
+[admin.settings.ai.models]
+description = "AI 엔진이 사용하는 LLM 제공업체와 스마트/빠른 모델을 선택합니다. 저장 시 AI 엔진에 적용됩니다."
+title = "모델 및 제공업체"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "엔진 자체 환경 자격 증명을 사용하려면 비워 두세요. 자체 호스팅 단일 엔진 배포에 적용됩니다."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "저장됨 - 현재 key를 유지하려면 비워 두세요"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI 호환 / Ollama 엔드포인트의 기본 URL입니다. 예: http://ollama:11434/v1."
+label = "제공업체 기본 URL"
+warning = "기본 URL은 신뢰할 수 있는 내부 엔드포인트를 가리켜야 합니다. 엔진이 서버 측 요청을 보내므로 신뢰할 수 없는 값은 SSRF에 민감합니다."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "빠른 모델의 최대 출력 토큰 수입니다."
+label = "빠른 모델 최대 토큰 수"
+
+[admin.settings.ai.models.fastModel]
+description = "가벼운 작업을 위한 더 저렴하고 빠른 모델입니다. 자유 텍스트이며, 제안은 힌트일 뿐입니다."
+label = "빠른 모델"
+
+[admin.settings.ai.models.provider]
+description = "엔진이 통신하는 LLM 제공업체입니다."
+label = "제공업체"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "스마트 모델의 최대 출력 토큰 수입니다."
+label = "스마트 모델 최대 토큰 수"
+
+[admin.settings.ai.models.smartModel]
+description = "복잡한 추론을 위한 고성능 모델입니다. 자유 텍스트이며, 제안은 힌트일 뿐입니다."
+label = "스마트 모델"
+
+[admin.settings.ai.saved]
+body = "변경 사항이 AI 엔진으로 자동 전송됩니다."
+bodyNoPush = "설정이 저장되었습니다. AI 엔진이 다음에 구성을 가져올 때 적용됩니다."
+title = "AI 설정 저장됨"
+
 [admin.settings.badge]
 clickToUpgrade = "클릭하여 플랜 상세 보기"
 
@@ -938,6 +1094,25 @@ label = "시작 시 재생성"
 description = "인증서의 유효 일수"
 label = "인증서 유효 기간(일)"
 
+[admin.settings.folderAccess]
+description = "폴더 소스와 폴더 출력이 읽고 쓸 수 있는 디렉터리입니다. 이는 보안 경계입니다. 자동화는 이 목록 밖의 서버 경로를 가리킬 수 없습니다."
+securityNote = "폴더 소스와 출력을 완전히 비활성화하려면 비워 두세요. Stirling 자체 구성 디렉터리는 항상 접근할 수 없습니다."
+title = "폴더 접근"
+
+[admin.settings.folderAccess.implied]
+description = "이 Stirling 관리 디렉터리는 항상 허용되며 여기서 변경할 수 없습니다."
+serverStorage = "서버 파일 저장소"
+title = "항상 허용됨"
+watchedFolder = "Pipeline 감시 폴더"
+
+[admin.settings.folderAccess.roots]
+add = "추가"
+empty = "허용된 폴더가 없습니다. 폴더 소스와 출력은 현재 비활성화되어 있습니다."
+hint = "절대 경로를 입력하세요. 예: /data/inbox."
+label = "허용된 폴더 루트"
+placeholder = "/data/inbox"
+remove = "폴더 루트 제거"
+
 [admin.settings.general]
 description = "브랜딩 및 기본 동작을 포함한 시스템 전반의 애플리케이션 설정을 구성합니다."
 system = "시스템"
@@ -1842,6 +2017,15 @@ export = "내보내기"
 accessDenied = "접근 거부"
 insufficientPermissions = "이 작업을 수행할 권한이 없습니다."
 
+[auth.callback]
+completing = "인증 완료 중"
+invalidToken = "OAuth 로그인 실패 - 잘못된 토큰입니다."
+missingToken = "OAuth 로그인 실패 - 토큰을 받지 못했습니다."
+oauthFailed = "OAuth 로그인에 실패했습니다. 다시 시도하세요."
+pleaseWait = "로그인 완료 중입니다. 잠시 기다려 주세요."
+signedOut = "로그아웃되었습니다. 다시 로그인하세요."
+windowMayClose = "완료되면 이 창을 닫아도 됩니다."
+
 [auth.displayName]
 guest = "게스트"
 user = "사용자"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "JavaScript 및 포함된 파일과 같은 잠재적으로
 description = "이 도구는 내용에 따라 PDF 파일 이름을 자동으로 바꿉니다. 문서를 분석하여 텍스트에서 가장 적합한 제목을 찾습니다."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "자동 회전"
+tags = "자동 회전,방향 수정,거꾸로,옆으로,바로잡기,방향,방향 감지,회전 보정,자동 방향,스캔됨,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "신뢰도 임계값"
+
+[autoRotate.detectionMode]
+auto = "자동"
+osd = "OCR만"
+text = "텍스트만"
+title = "감지 방법"
+
+[autoRotate.error]
+failed = "PDF를 자동 회전하는 동안 오류가 발생했습니다."
+
+[autoRotate.inferUndetected]
+title = "낮은 신뢰도 페이지도 맞춰 회전"
+
+[autoRotate.report]
+applied = "{{degrees}}° 시계 방향"
+confidenceValue = "신뢰도 {{value}}"
+noChange = "변경 없음"
+pageLabel = "페이지 {{number}}"
+summary = "{{total}}페이지 중 {{rotated}}페이지가 회전되었고, {{unchanged}}페이지는 그대로 유지되었습니다"
+title = "감지 보고서"
+
+[autoRotate.report.method]
+inferred = "일치됨"
+none = "건너뜀"
+osd = "OCR"
+text = "텍스트"
+
+[autoRotate.report.note]
+belowThreshold = "임계값 미만"
+blankPage = "빈 페이지입니다"
+inferredFromDocument = "다른 페이지와 동일"
+noDominantDirection = "텍스트 방향이 혼재됨"
+osdFailed = "읽을 수 있는 텍스트를 찾을 수 없음"
+osdNoVerdict = "어느 쪽이 위인지 판단할 수 없음"
+tesseractUnavailable = "OCR이 설치되어 있지 않음"
+tooFewGlyphs = "텍스트가 너무 적음"
+
+[autoRotate.results]
+title = "자동 회전 결과"
+
+[autoRotate.settings]
+title = "설정"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "페이지를 회전하기 전에 검사 결과가 얼마나 확실해야 하는지입니다. 더 많은 페이지를 회전하려면 낮추고, 더 많은 페이지를 그대로 두려면 높이세요."
+title = "신뢰도 임계값"
+
+[autoRotate.tooltip.description]
+text = "각 페이지가 어느 방향이어야 하는지 판단하고 올바른 방향으로 회전합니다. 이미 똑바른 페이지는 그대로 둡니다."
+
+[autoRotate.tooltip.detectionMode]
+text = "자동은 먼저 페이지의 텍스트를 읽고, 충분하지 않으면 페이지를 이미지로 확인합니다. 텍스트만은 이미지 검사를 건너뛰며 스캔된 적 없는 문서에 가장 빠릅니다. OCR만은 모든 페이지를 이미지로 처리합니다."
+title = "감지 방법"
+
+[autoRotate.tooltip.header]
+title = "자동 회전"
+
+[autoRotate.tooltip.inferUndetected]
+text = "빈 페이지 또는 거의 빈 페이지는 단독으로 확인할 수 없습니다. 읽을 수 있는 모든 페이지가 같은 회전이 필요하면, 이러한 페이지도 그에 맞춰 회전됩니다."
+title = "낮은 신뢰도 페이지도 맞춰 회전"
+
 [autoSizeSplitPDF]
 tags = "pdf,분할,문서,정리"
 
@@ -2189,33 +2440,6 @@ keywords = "키워드: odd, even"
 numbers = "숫자/범위: 5, 10-20"
 progressions = "등차 수열: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "인증서 유형"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "시스템 관리자가 관리"
-bullet2 = "인가된 사용자 간 공유"
-bullet3 = "개인이 아닌 회사 신원을 대표"
-bullet4 = "권장 용도: 공식 문서, 팀 서명"
-description = "조직에서 제공하는 공유 인증서입니다. 전사적 서명 권한에 사용됩니다."
-title = "조직 인증서"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "첫 사용 시 자동 생성"
-bullet2 = "사용자 계정과 연결"
-bullet3 = "다른 사용자와 공유 불가"
-bullet4 = "권장 용도: 개인 문서, 개인 책임"
-description = "사용자 계정에 고유한 자동 생성 인증서입니다. 개인 서명에 적합합니다."
-title = "개인 인증서"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX 파일과 비밀번호 필요"
-bullet2 = "외부 인증 기관에서 발급 가능"
-bullet3 = "법적 문서에 더 높은 신뢰 수준"
-bullet4 = "권장 용도: 법적 효력 있는 계약, 외부 검증"
-description = "PKCS#12 인증서 파일을 직접 사용합니다. 인증서 속성을 완전히 제어할 수 있습니다."
-title = "사용자 지정 P12 업로드"
-
 [certSign]
 awaitingSignatures = "서명 대기 중"
 chooseCertificate = "인증서 파일 선택"
@@ -2542,34 +2766,6 @@ server = "서버"
 stepTitle = "인증서 원본"
 upload = "업로드"
 
-[certSign.tooltip.header]
-title = "서명 관리 안내"
-
-[certSign.tooltip.overview]
-bullet1 = "기존 서명과 유효성 확인"
-bullet2 = "서명자 및 인증서의 상세 정보 보기"
-bullet3 = "문서 보안을 위해 새 디지털 서명 추가"
-bullet4 = "여러 파일을 지원하며 쉽게 탐색"
-text = "이 도구는 PDF에 디지털 서명이 있는지 확인하고 새 디지털 서명을 추가할 수 있게 합니다. 디지털 서명은 문서를 누가 작성하거나 승인했는지 증명하고, 서명 이후 변경되었는지도 보여줍니다."
-title = "이 도구로 할 수 있는 일"
-
-[certSign.tooltip.signing]
-bullet1 = "PEM, PKCS12, JKS 및 서버 인증서 형식 지원"
-bullet2 = "PDF에서 서명을 표시/숨기기 옵션"
-bullet3 = "사유, 위치, 서명자 이름 추가"
-bullet4 = "표시 서명을 배치할 페이지 선택"
-bullet5 = "서버 인증서를 사용하여 간단한 'Sign with Stirling-PDF' 옵션 사용"
-text = "PDF에 서명하려면 디지털 인증서(PEM, PKCS12, JKS 등)가 필요합니다. 문서에 서명을 보이게 하거나 보안용으로만 보이지 않게 할 수 있습니다."
-title = "서명 추가"
-
-[certSign.tooltip.validation]
-bullet1 = "서명이 유효한지 여부 표시"
-bullet2 = "서명자 정보와 서명 날짜 표시"
-bullet3 = "서명 후 문서가 수정되었는지 확인"
-bullet4 = "검증에 사용자 지정 인증서를 사용할 수 있음"
-text = "서명을 검사하면, 유효한지, 누가 언제 서명했는지, 서명 이후 문서가 변경되었는지를 알려줍니다."
-title = "서명 확인"
-
 [changeCreds]
 changeUsername = "사용자 이름을 업데이트합니다. 업데이트 후 로그아웃됩니다."
 credsUpdated = "계정이 업데이트되었습니다"
@@ -2824,6 +3020,7 @@ next = "다음"
 preview = "미리보기"
 previous = "이전"
 refresh = "새로고침"
+remaining = "남음"
 retry = "다시 시도"
 save = "저장"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "고급 모니터링"
-allInOneWorkspace = "올인원 PDF 작업 공간(뷰어, 도구 & 에이전트)"
-apiSandbox = "API 샌드박스"
-dedicatedSupportSlas = "전담 지원 및 SLA"
-fasterThroughput = "처리량 10배 향상"
-fullyPrivateFiles = "파일 완전 비공개"
-largeFileProcessing = "대용량 파일 처리"
-orgWideAccess = "조직 전체 액세스 제어"
-premiumAiModels = "프리미엄 AI 모델"
-prioritySupport = "우선 지원"
-privateDocCloud = "프라이빗 문서 클라우드"
-ragFineTuning = "RAG + 파인튜닝"
-secureApiAccess = "보안 API 액세스"
-standardThroughput = "표준 처리량"
-unlimitedApiAccess = "무제한 API 액세스"
-unlimitedSeats = "무제한 좌석"
-
 [crop]
 autoCrop = "여백 자동 자르기"
 noFileSelected = "자르기를 시작하려면 PDF 파일을 선택하세요"
@@ -3346,6 +3525,7 @@ message = "기본 PDF 처리기 설정에 실패했습니다"
 title = "오류"
 
 [defaultApp.prompt]
+dontRemind = "다시 알리지 않기"
 message = "PDF 파일을 여는 기본 앱으로 Stirling PDF를 설정하세요."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "그룹 사용자 지정"
 dropHint = "시작하려면 파일을 여세요"
 dropToAdd = "Drop files to add"
 expand = "사이드바 펼치기"
-files = "파일"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive가 구성되지 않았습니다"
 leaveMyFiles = "내 파일 나가기"
+library = "PDF 라이브러리"
 myFiles = "내 파일"
 noFiles = "아직 파일이 없습니다"
 openFileManager = "파일 관리자 열기"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "추가"
-addLabel = "라벨 추가…"
-categoryIconAria = "{{name}}의 아이콘 선택"
-createCategory = "카테고리 만들기"
-delete = "카테고리 삭제"
 done = "완료"
-hide = "카테고리 숨기기"
-newCategory = "새 카테고리 이름…"
-removeLabel = "{{name}} 제거"
-rename = "이름 변경"
 reset = "기본값으로 재설정"
-search = "라벨 검색…"
-show = "카테고리 표시"
 subtitle = "파일을 상위 카테고리로 그룹화하세요. 기존 또는 새 라벨을 카테고리에 추가하거나, 이름을 변경하거나, 직접 만들 수 있습니다. 어떤 카테고리에도 속하지 않는 파일은 “기타” 아래에 표시됩니다."
 title = "사이드바 카테고리"
 
@@ -3808,6 +3977,7 @@ refresh = "서버에서 새로고침"
 remove = "삭제"
 removeVersion = "이 버전 제거"
 rename = "이름 변경"
+renamed = "이름 변경됨"
 renameFolder = "폴더 이름 변경"
 resizeFolderTree = "폴더 트리 크기 조절(화살표 키, 크게 조절은 Shift; 자동 맞춤은 더블 클릭)"
 save = "저장"
@@ -3910,9 +4080,7 @@ count = "파일"
 folder = "폴더"
 labels = "라벨"
 modified = "수정됨"
-name = "이름"
 size = "크기"
-toolHistoryAtVersion = "누적 도구 체인"
 totalSize = "총 크기"
 type = "유형"
 versionHistory = "버전 기록"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "모두 저장됨"
+extractCsvError = "CSV 추출 실패"
+extractXlsxError = "XLSX 추출 실패"
 flattenAfterFilling = "채운 후 평면화"
+requiredAbbreviation = "필수"
+requiredFieldsError = "모든 필수 필드를 입력하세요"
 rescanFields = "필드 재검색"
 rescanFormFields = "양식 필드 재검색"
 save = "저장"
+saveShortcut = "저장하려면 Ctrl+S"
+unsavedChanges = "저장되지 않은 변경 사항"
 
 [formFill.sidebar]
 close = "사이드바 닫기"
@@ -4309,6 +4484,11 @@ desc = "감지된 헤더를 기반으로 PDF 파일 이름을 자동으로 변
 tags = "자동 감지,헤더 기반,정리,이름 변경"
 title = "PDF 파일 자동 이름 변경"
 
+[home.autoRotate]
+desc = "각 페이지의 방향을 감지하고 자동으로 똑바로 회전합니다."
+tags = "자동 회전,방향 수정,거꾸로,옆으로,바로잡기,방향,방향 감지,회전 보정,자동 방향,스캔됨,OSD"
+title = "자동 회전"
+
 [home.autoSizeSplitPDF]
 tags = "자동,분할,크기"
 title = "크기/개수별 자동 분할"
@@ -4608,13 +4788,13 @@ hint = "PDF에 배치할 PNG, JPG, SVG 또는 기타 이미지 파일을 업로
 label = "이미지 업로드"
 placeholder = "이미지 파일 선택"
 
-[imageToPdf]
-tags = "변환,이미지,jpg,사진"
-
 [imageToPDF]
 header = "이미지를 PDF로"
 title = "이미지를 PDF로"
 
+[imageToPdf]
+tags = "변환,이미지,jpg,사진"
+
 [infoBanner]
 dismiss = "닫기"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "초대를 받으셨습니다!"
 
 [landing]
 addFiles = "파일 추가"
-heroSubtitle = "시작하려면 기존 PDF를 끌어놓거나 추가하세요."
 mobileUpload = "모바일에서 업로드"
 openFromComputer = "컴퓨터에서 열기"
 uploadFromComputer = "컴퓨터에서 업로드"
-workbenchEmptyStateHero = "어디에나 PDF를 놓으세요"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "로그인"
 magicLinkSent = "매직 링크가 {{email}}로 전송되었습니다! 이메일을 확인하고 링크를 클릭해 로그인하세요."
 mfaCode = "인증 코드"
 mfaRequired = "2단계 인증 코드가 필요합니다"
+noAccount = "계정이 없으신가요?"
 or = "또는"
 password = "비밀번호"
 passwordChangedSuccess = "비밀번호가 성공적으로 변경되었습니다! 새 비밀번호로 로그인하세요."
@@ -4715,26 +4894,10 @@ signInWith = "다음으로 로그인"
 title = "로그인"
 unexpectedError = "예기치 않은 오류: {{message}}"
 updatePassword = "비밀번호 업데이트"
-useEmailInstead = "이메일로 로그인"
 useMagicLink = "대신 매직 링크 사용"
 username = "사용자 이름"
 youAreLoggedIn = "로그인되었습니다!"
 
-[login.slides.edit]
-alt = "PDF 편집"
-subtitle = "PDF 가리기, 서명, 읽기 및 처리에 도움이 되는 십여 개 이상의 도구로 원하는 기능을 찾을 수 있습니다."
-title = "원하는 정보를 표시/보호하도록 PDF를 편집하세요"
-
-[login.slides.overview]
-alt = "Stirling PDF 개요"
-subtitle = "개인정보 보호를 최우선으로 하는 PDF 클라우드 제품군으로, 변환, 서명, 가리기, 문서 관리 등 50개 이상의 강력한 도구를 제공합니다."
-title = "모든 PDF 작업을 한곳에서"
-
-[login.slides.secure]
-alt = "PDF 보호"
-subtitle = "비밀번호 추가, 콘텐츠 가리기, 인증서 관리를 손쉽게."
-title = "PDF의 민감한 정보를 보호하세요"
-
 [margin]
 large = "크게"
 medium = "중간"
@@ -4976,6 +5139,7 @@ pinButton = "도구 실행 후에도 파일을 계속 활성 상태로 유지하
 results = "도구 실행이 완료되면 <strong>검토</strong> 단계에서 이 패널에 결과 미리보기가 표시되며, 작업을 되돌리거나 파일을 다운로드할 수 있습니다. "
 runButton = "도구 구성을 마치면, 이 버튼으로 선택된 모든 PDF에 도구를 실행할 수 있습니다."
 selectCropTool = "도구 사용 방법을 보여주기 위해 <strong>자르기</strong> 도구를 선택해 보겠습니다."
+stepOf = "{{total}}단계 중 {{current}}단계"
 toolInterface = "여기가 <strong>자르기</strong> 도구 인터페이스입니다. 아직 작업할 PDF 파일을 추가하지 않았기 때문에 볼 내용이 많지 않습니다."
 workbench = "여기는 <strong>워크벤치</strong>입니다. PDF를 보고 편집하는 주요 영역입니다."
 wrapUp = "이제 준비 완료입니다! 앱의 주요 영역과 사용 방법을 살펴보았습니다. 언제든지 <strong>도움말</strong> 버튼을 클릭하여 이 투어를 다시 볼 수 있습니다."
@@ -4988,6 +5152,26 @@ showMeAround = "둘러보기"
 skipForNow = "나중에 건너뛰기"
 skipTheTour = "투어 건너뛰기"
 
+[onboarding.checklist]
+dismiss = "닫기"
+title = "Stirling PDF 설정"
+
+[onboarding.checklist.downloadDesktop]
+description = "컴퓨터에서 Stirling을 네이티브로 실행"
+title = "Stirling 데스크톱 다운로드"
+
+[onboarding.checklist.inviteTeam]
+description = "팀과 협업"
+title = "팀원 초대"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling 개선에 도움 주기"
+title = "익명 사용 데이터 공유"
+
+[onboarding.checklist.takeTour]
+description = "빠른 안내로 Stirling 작동 방식 보기"
+title = "둘러보기"
+
 [onboarding.desktopInstall]
 body = "Stirling은 데스크톱 앱으로 사용할 때 가장 잘 작동합니다. 오프라인으로 사용하고, 문서를 더 빠르게 열며, 컴퓨터에서 로컬로 편집할 수 있습니다."
 selectOs = "운영 체제 선택"
@@ -4996,7 +5180,21 @@ titleWithOs = "{{osLabel}}용 다운로드"
 
 [onboarding.mfa]
 authenticationCode = "인증 코드"
+description = "인증 앱을 연결하여 계정을 보호하세요. QR 코드를 스캔하거나 설정 key를 입력한 다음, 6자리 코드를 확인하여 완료하세요."
+enable = "MFA 활성화"
+enableError = "2단계 인증을 활성화할 수 없습니다. 코드를 확인하고 다시 시도하세요."
+enterCode = "앱의 6자리 코드를 입력하세요."
+enterCodeError = "계속하려면 인증 코드를 입력하세요."
+logout = "로그아웃"
+openAuthenticator = "Google Authenticator, Authy 또는 1Password를 여세요."
 qrCodeLoading = "QR 코드 생성 중…"
+regenerateQrCode = "QR 코드 다시 생성"
+scanQrCode = "QR 코드를 스캔하거나 아래 설정 key를 입력하세요."
+setupError = "2단계 설정을 시작할 수 없습니다. 다시 시도하세요."
+setupKey = "설정 key(수동 입력)"
+stepByStep = "단계별"
+success = "MFA가 활성화되었습니다. 이제 계속할 수 있습니다."
+title = "다중 인증 설정"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "로그인 모드를 활성화하면 사용자 관리, 설정 구성, 서버 상태 모니터링을 할 수 있습니다. 서버의 첫 <strong>{{freeTierLimit}}</strong>명은 무료로 Stirling을 사용할 수 있습니다."
@@ -5005,6 +5203,11 @@ adminTitle = "관리자 개요"
 userBody = "팀원을 초대하고 역할을 지정하며 문서를 하나의 안전한 작업 공간에서 정리하세요. 솔로 사용을 넘어 성장할 준비가 되면 언제든 로그인 모드를 활성화하세요."
 userTitle = "플랜 개요"
 
+[onboarding.processorIntro]
+body = "Stirling은 이제 <strong>정책</strong>을 실행합니다 — 문서가 도착할 때마다 분류, 보호, 처리하는 자동화 규칙입니다. <strong>Processor</strong>에서 설정하고 실행을 모니터링하세요."
+cta = "Processor 확인하기"
+title = "Stirling Processor 확인하기"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "선불 연간"
+
+[payg.prepaid.banner]
+exhausted = "선불 용량을 모두 사용했습니다. 종량제 청구가 재개되었습니다. 할인을 유지하려면 충전하세요."
+expiring_one = "선불 연간 기간이 {{count}}일 후 종료됩니다. 사용하지 않은 용량은 만료됩니다 — 새 연도를 시작하려면 충전하세요."
+expiring_other = "선불 연간 기간이 {{count}}일 후 종료됩니다. 사용하지 않은 용량은 만료됩니다 — 새 연도를 시작하려면 충전하세요."
+low = "선불 용량이 {{pct}}% 남았습니다. 처리가 중단되지 않도록 언제든지 충전하세요."
+
+[payg.prepaid.card]
+subtitle = "종량제 청구 전에 사용되며 지출 한도 외부에서 사용됩니다."
+title = "선불 용량"
+
+[payg.prepaid.meter]
+capSuffix = "총 {{total}} 선불 크레딧 중"
+expires = "{{date}} 만료"
+
+[payg.prepaid.state]
+exhausted = "모두 사용됨"
+healthy = "충분히 남음"
+low = "부족해지는 중"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "이메일의 라이선스 키를 붙여넣으세요"
 success = "라이선스 활성화됨!"
 successMessage = "라이선스가 성공적으로 활성화되었습니다. 이제 이 창을 닫아도 됩니다."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "정책 적용됨"
-enforcing = "정책 적용 중..."
-failed = "정책 적용 실패"
 outputsUnavailable = "정책 출력물을 더 이상 다운로드할 수 없습니다."
 partialOutputsUnavailable = "일부 정책 출력물을 더 이상 다운로드할 수 없습니다."
-retrying = "바쁨, 재시도 중..."
 runNotFound = "정책 적용 실행을 더 이상 찾을 수 없습니다."
-step = "단계 {{current}}/{{total}}"
 timedOut = "실행이 완료되기 전에 정책 적용이 시간 초과되었습니다."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "닫기"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} 적용 중"
 applyingProgress = "{{names}} 적용 중 ({{done}}/{{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}}개 중 {{failures}}개 파일을 처리할 수 없어 
 failureTitle = "완전한 정책 적용 없이 내보냄"
 printPolicyAppliedBody = "정책을 충족하도록 이 PDF가 업데이트되었습니다. 변경 사항을 확인한 후 다시 인쇄하세요."
 printPolicyAppliedTitle = "인쇄 전에 정책 적용됨"
-queued = "+{{count}}개 대기 중"
 successTitle = "{{names}} 적용됨"
 summaryMore = "{{first}}, {{second}} 및 {{more}}개 더"
 summaryTwo = "{{first}} 및 {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "변환 전에 정책 적용"
-default = "정책 적용"
-export = "내보내기 전에 정책 적용"
-input = "가져오기 시 정책 적용"
-print = "인쇄 전에 정책 적용"
-
-[policies.field]
-accessLog = "액세스 로그"
-archiveAfter = "다음 이후 보관"
-auditTrail = "감사 추적"
-belowThreshold = "임계값 미만"
-destination = "대상"
-frameworks = "프레임워크"
-immutableHold = "변경 불가 보류"
-keepFor = "보관 기간"
-minConfidence = "최소 신뢰도"
-notify = "라우팅 시 알림"
-onViolation = "비준수 시"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "추가"
-addPlaceholder = "라벨 추가…"
-customNote = "팀에 맞게 사용자 지정되었습니다."
-defaultNote = "기본 내장값을 사용 중이며 팀과 공유됩니다."
-duplicate = "\"{{name}}\"이(가) 이미 존재합니다."
-edit = "라벨 편집"
-empty = "아직 라벨이 없습니다."
-export = "JSON 내보내기"
-iconAria = "{{name}}의 아이콘 선택"
-import = "JSON 가져오기"
-importError = "해당 파일을 가져올 수 없습니다."
-managedNote = "팀 라벨은 팀 리더가 관리합니다."
-modalSubtitle = "전체 팀과 공유됩니다. 분류기가 각 문서에 맞는 라벨을 선택합니다."
-modalTitle = "분류 라벨"
-pickIcon = "{{label}} 아이콘 사용"
-removeAria = "{{name}} 제거"
-resetToDefault = "기본값으로 재설정"
-saveForTeam = "팀용으로 저장"
-saving = "저장 중…"
-sectionLabel = "분류 라벨"
-startFromScratch = "처음부터 시작"
-teamCount = "팀 라벨"
-tooLong = "라벨은 최대 {{max}}자까지 가능합니다."
-ungrouped = "그룹 없음"
-view = "라벨 보기"
+categoryCount = "카테고리"
+hideCategory = "카테고리 숨기기"
+labelCount = "레이블"
+sharedNote = "이 레이블은 기본 제공되며 전체 팀에서 공유됩니다."
+showCategory = "카테고리 표시"
 
 [policies.pii]
 account = "계좌 번호(라벨 지정됨)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "미국 라우팅 번호(ABA)"
 ssn = "사회보장 번호"
 
-[policies.settings]
-noneExport = "현재 내보내기 시 실행되는 정책이 없습니다."
-noneUpload = "현재 업로드 시 실행되는 정책이 없습니다."
-onExport = "내보내기 시"
-onUpload = "업로드 시"
-reorderHandle = "드래그하여 순서 변경"
-runOrderDesc = "둘 이상의 정책이 같은 트리거에서 실행되면 이 순서대로 실행됩니다 — 각 정책은 이전 정책의 출력에 대해 실행됩니다. 드래그하여 순서를 변경하세요."
-title = "정책 설정"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "정책 옵션"
-policySettings = "정책 설정"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "실패한 정책 다시 시도({{count}})"
-rowProgress = "{{total}}개 파일 중 {{completed}}개 처리됨"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "정책이란 무엇인가요?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "사회보장 번호나 카드 번호와 같은 민감한 정보를 자동으로 찾아 문서에서 읽을 수 없도록 검게 가립니다."
-sanitize = "파일에서 숨겨진 JavaScript를 제거하여 문서를 열 때 어떤 것도 자동으로 실행되지 않도록 합니다."
-watermark = "모든 페이지에 보이는 표시(예: \"Confidential\")를 찍습니다."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "닫기"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} 적용 중..."
 badgeRan = "이 파일에 {{name}} 정책이 실행되었습니다"
+badgeRunning = "{{name}} 실행 중..."
 blockingAction = "정책 적용 중 {{action}}이(가) 차단되었습니다. 잠시 기다려 주세요..."
 dismiss = "오버레이 닫기"
 enforcingTitle = "정책 적용 중..."
@@ -6151,6 +6211,7 @@ viewAnyway = "파일 보기(정책은 계속 적용 중)"
 [policyOption]
 autoRedactPhi = "PHI 자동 수정"
 blockExport = "내보내기 차단"
+ccpa = "CCPA"
 contracts = "계약서"
 documents = "문서"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor 플랜"
 subscribed = "Processor 플랜"
 unlinked = "연결되지 않음"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "문서에서 Bootstrap"
-sectionsAriaLabel = "Agent Builder 섹션"
-selectorAriaLabel = "Agent"
-subtitle = "문서를 분류하고, 추출하고, 라우팅하는 AI agent를 설계, 테스트, 배포하세요. 시나리오를 정의하고, 도구 액세스를 제한하고, golden set을 실행하고, 버전을 게시하세요."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "취소"
-dropzoneText = "샘플 문서(PDF 또는 이미지) 선택"
-lead = "샘플 문서를 놓으면 조정할 수 있는 시나리오와 추출 스키마를 제안합니다. 검토하기 전까지는 아무것도 게시되지 않습니다."
-submit = "Agent Bootstrap"
-subtitle = "대표 파일 하나로 새 agent 시드"
-title = "문서에서 Bootstrap"
-
-[portal.agentBuilder.empty]
-description = "샘플 문서에서 agent를 Bootstrap하여 시나리오와 추출 스키마를 시드한 다음 조정하고 게시하세요."
-title = "아직 agent가 없습니다"
-
-[portal.agentBuilder.evals]
-casesPassing = "통과한 케이스"
-columnCase = "Eval 케이스"
-columnLatency = "지연 시간"
-columnResult = "결과"
-fail = "실패"
-goldenSetPassRate = "Golden-set 통과율"
-latencyMs = "{{ms}} ms"
-notRun = "실행 안 됨"
-pass = "통과"
-passRate = "통과율"
-runEvals = "eval 실행"
-
-[portal.agentBuilder.evals.empty]
-description = "Eval은 시나리오를 반복 가능한 golden set으로 만듭니다. 업그레이드하면 시간 경과에 따른 통과율을 캡처하고 이를 기준으로 게시를 제어할 수 있습니다."
-title = "아직 golden set이 없습니다"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "golden set 전체"
-activeAgents = "활성 agent"
-avgPassRate = "평균 eval 통과율"
-fleetWide = "전체 fleet"
-latestPublished = "최신 게시"
-scenarios = "시나리오"
-testCases = "테스트 케이스"
-totalDescription_one = "총 {{count}}개"
-totalDescription_other = "총 {{count}}개"
-
-[portal.agentBuilder.scenarios]
-add = "추가"
-addScenario = "시나리오 추가"
-enable = "활성화"
-expectationLabel = "예상 동작"
-expectationPlaceholder = "agent가 수행해야 할 작업"
-inEval = "eval 중"
-mute = "음소거"
-muted = "음소거됨"
-nameLabel = "이름"
-namePlaceholder = "예: 규정 준수 에스컬레이션"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "시나리오"
-tools = "도구"
-versions = "버전"
-
-[portal.agentBuilder.tools]
-broadAccess = "광범위한 액세스"
-deniedHint = "선택한 도구가 차단되었습니다. 그 외 모든 도구는 호출 가능합니다."
-deniedTools = "거부된 도구"
-governanceGate = "도구 거버넌스는 Enterprise 플랜에서 사용할 수 있습니다."
-restricted = "제한됨"
-restrictedAccess = "제한된 도구 액세스"
-restrictedDescription = "아래에서 거부한 도구를 제외한 모든 도구를 허용합니다."
-
-[portal.agentBuilder.versions]
-current = "현재"
-historyGate = "전체 버전 기록 및 롤백은 Enterprise 플랜에서 사용할 수 있습니다."
-publish = "게시"
-rollBack = "롤백"
-
 [portal.assistant]
 close = "Assistant 닫기"
 error = "Assistant에 연결할 수 없습니다."
@@ -6365,9 +6346,21 @@ typing = "입력 중"
 loading = "로딩 중"
 redirectingToEditor = "Editor로 리디렉션 중..."
 
+[portal.billing.activation]
+maybeLater = "나중에"
+title = "Processor 켜기"
+
+[portal.billing.activation.payg]
+sub = "월간 한도를 설정하세요. 실행한 만큼 결제합니다."
+title = "사용한 만큼 결제"
+
+[portal.billing.activation.prepay]
+badge = "2개월 무료"
+sub = "청구서 하나, 카드 또는 은행 송금."
+title = "1년 선불"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function이 client_secret을 반환하지 않았습니다."
-subtitle = "무료 Editor 플랜 제공량을 넘어 계속 사용하려면 카드를 추가하세요. 나머지는 Stripe가 처리합니다."
 title = "Processor 플랜 켜기"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "결제는 성공했지만 활성화가 평소보다 조금 더 오래 
 close = "닫기"
 title = "거의 완료되었습니다"
 
+[portal.billing.checkout.cap]
+amountAria = "월간 지출 한도"
+back = "뒤로"
+continue = "결제로 계속"
+error = "지출 한도를 설정할 수 없습니다"
+finePrint = "청구서는 매월 발행됩니다. 언제든지 취소할 수 있습니다."
+noLimit = "한도 없음"
+note = "한도를 초과해 청구되지 않습니다. 처리는 일시 중지될 뿐입니다."
+perMonth = "/월"
+title = "지출 한도 설정"
+
+[portal.billing.checkout.card]
+fields = "카드 번호 · MM / YY · CVC · ZIP"
+label = "카드 정보"
+note = "카드 정보는 Stripe에서 수집합니다. Stirling은 PAN 또는 CVC를 저장하지 않습니다."
+
 [portal.billing.checkout.error]
 title = "Checkout을 시작할 수 없음"
 
@@ -6383,10 +6392,9 @@ body = "결제가 완료되었습니다. 연결된 인스턴스 전반에서 종
 hint = "이 창을 열어 두세요."
 title = "Processor 플랜 활성화 중..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "을(를) portal env에 설정하여 앱 내 checkout을 활성화하세요."
-bodyBefore = "설정"
-title = "Stripe가 구성되지 않음"
+[portal.billing.checkout.pay]
+limit = "월간 지출 한도 {{amount}}/월. 한도에 도달하면 처리가 일시 중지됩니다."
+limitNoCap = "지출 한도 없음. 처리가 일시 중지되지 않습니다. 청구서는 매월 발행됩니다."
 
 [portal.billing.enterpriseUpsell]
 cta = "Enterprise 견적 만들기"
@@ -6409,10 +6417,12 @@ currentPlan = "현재 플랜"
 freeForever = "영구 무료"
 noTeamResolved = "지갑에서 아직 팀이 확인되지 않았습니다 — 새로 고침 후 다시 시도하세요."
 ownerOnly = "팀 소유자만 Processor 플랜을 켤 수 있습니다."
+payInvoice = "완료하려면 청구서 결제"
 planName = "Editor"
 ssoIncluded = "SSO 포함"
 switchOnProcessor = "Processor 켜기 →"
 unlimitedUsers = "무제한 사용자"
+viewQuote = "견적 보기"
 
 [portal.billing.invoices]
 columnAmount = "금액"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "직접 API 요청"
 segmentApiLabel = "API"
 segmentAutomationDesc = "자동화 및 파이프라인"
 segmentAutomationLabel = "자동화"
+sizeMultiplier = "{{formatted}} PDFs에 크기 배수가 적용됨"
+summary = "{{unique}} 고유 · {{units}} 미터 단위 · PDF당 평균 {{avg}}"
+summaryNoRate = "{{unique}} 고유 · {{units}} 미터 단위"
 unit = "종량제 PDFs"
+unitsPending_one = "연결된 인스턴스에서 {{units}} 미터 단위 동기화 대기 중"
+unitsPending_other = "연결된 인스턴스에서 {{units}} 미터 단위 동기화 대기 중"
+
+[portal.billing.prepaid]
+capSuffix = "총 {{total}} 선불 크레딧 중"
+expires = "{{date}} 만료"
+eyebrow = "선불 용량"
+note = "종량제 청구 전에 사용되며 지출 한도 외부에서 사용됩니다."
+topUp = "충전"
+
+[portal.billing.prepaid.buy]
+back = "뒤로"
+calcTitle = "연간 결제 금액 계산"
+cancel = "취소"
+cancelPurchase = "구매 취소"
+close = "닫기"
+continueToPayment = "결제로 계속"
+finalise = "완료"
+invoiceErrorTitle = "청구서를 생성할 수 없습니다"
+loadingTitle = "견적 불러오는 중"
+payTitle = "연간 요금 결제"
+step = "{{total}}단계 중 {{current}}단계"
+
+[portal.billing.prepaid.calc]
+change = "변경"
+deployRow = "배포"
+done = "완료"
+enterpriseHint = "이는 엔터프라이즈 규모입니다. 이 볼륨에서는 엔터프라이즈 요금이 어떤 셀프서비스 할인보다 유리합니다. 요금 고정, 조건, 견적을 몇 분 안에 제공합니다."
+governanceRow = "거버넌스"
+governanceValue = "{{label}} · 정책 {{count}}개"
+handlesLabel = "내 Processor"
+handlesValue = "월 {{volume}} 크레딧 처리"
+pipelinesLabel = "파이프라인"
+policiesMeta = "정책 {{count}}개"
+poolCaption = "1년 동안 {{credits}} 크레딧의 단일 풀입니다. 사용량이 많은 달은 적은 달에서 빌려 씁니다."
+priceLabel = "내 연간 요금 · 10개월 가격으로 12개월"
+rateUnknown = "체크아웃 시 정확한 가격을 표시합니다."
+savings = "{{amount}} 절약 · 2개월 무료."
+sizingRow = "규모 산정"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "총 사용자"
+
+[portal.billing.prepaid.consent]
+label = "선불 용량을 모두 사용하거나 12개월 후 만료되면, 취소하지 않는 한 처리가 표준 종량제 요금(내 지출 한도까지)으로 자동 계속되며, 청구 포털에서 언제든지 취소할 수 있음을 이해합니다."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling에서 관리합니다. 몇 분 안에 시작됩니다."
+cloudValue = "Stirling Cloud · 관리형"
+selfhost = "자체 호스팅"
+selfhostDesc = "개인 인프라에서 실행됩니다. 동일 요금."
+selfhostValue = "자체 호스팅 · 개인 인프라"
+
+[portal.billing.prepaid.offer]
+cta = "제안 검토"
+subtitle = "PDF 처리 1년치를 선불로 결제하고 2개월을 무료로 받으세요. 종량제 청구 전에, 지출 한도 외부에서 사용됩니다."
+title = "10개월 가격으로 12개월 이용"
+
+[portal.billing.prepaid.pay]
+accountName = "계정 소유자 이름"
+accountNamePlaceholder = "예: Jane Smith"
+companyName = "회사명(선택 사항)"
+companyNamePlaceholder = "예: Acme Inc."
+downloadInvoice = "청구서 다운로드"
+payOnline = "온라인 결제"
+poNumber = "PO 번호(선택 사항)"
+poNumberPlaceholder = "예: PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "고급"
+advancedDesc = "파이프라인이 대부분의 처리를 담당합니다."
+none = "없음"
+noneDesc = "아직 파이프라인을 실행하지 않습니다. 언제든지 켤 수 있습니다."
+standard = "표준"
+standardDesc = "몇 개의 파이프라인이 도착하는 PDFs를 다시 처리합니다."
+
+[portal.billing.prepaid.posture]
+essentials = "필수"
+essentialsDesc = "분류, 기본값, 공유 포함"
+governed = "관리됨"
+governedDesc = "보안 및 라우팅 추가"
+regulated = "규제됨"
+regulatedDesc = "Compliance, Retention, Ingestion 포함 모든 카테고리"
+
+[portal.billing.prepaid.review]
+download = "견적 다운로드(PDF)"
+downloading = "준비 중…"
+share = "승인을 위해 공유"
+
+[portal.billing.prepaid.size]
+compact = "컴팩트"
+compactDesc = "25 MB 미만 파일, 데이터 요금 없음"
+heavy = "무거움"
+heavyDesc = "스캔 또는 이미지가 많음, 보통 50 MB+"
+standard = "표준"
+standardDesc = "대부분 작고, 일부 스캔은 25 MB 초과"
+
+[portal.billing.prepaid.state]
+exhausted = "모두 사용됨"
+healthy = "충분히 남음"
+low = "부족해지는 중"
 
 [portal.billing.spendLimit]
 adjustLimit = "한도 조정"
@@ -6494,6 +6608,8 @@ label = "초과 예상."
 
 [portal.billing.spendThisMonth]
 eyebrow = "이번 달 지출"
+freeRemaining_one = "무료 PDF {{formatted}}개 남음"
+freeRemaining_other = "무료 PDFs {{formatted}}개 남음"
 processed_one = "{{formattedCount}} PDF 처리됨."
 processed_other = "{{formattedCount}} PDFs 처리됨."
 processedWithRate_one = "{{formattedCount}} PDF 처리됨, 각 {{rate}}."
@@ -6534,6 +6650,350 @@ signature = "서명"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "새 연결"
+createTitleFor = "{{name}} 연결"
+delete = "삭제"
+edit = "편집"
+editTitle = "연결 편집"
+unsupportedType = "이 연결 유형은 여기서 편집할 수 없습니다."
+
+[portal.connections.categories.advanced]
+description = "아직 지원하지 않는 서비스용입니다."
+label = "고급"
+
+[portal.connections.categories.audit]
+description = "감사자가 이미 확인하는 곳에 문서에 발생한 일을 기록합니다."
+label = "감사 및 규정 준수 로깅"
+
+[portal.connections.categories.notify]
+description = "다른 시스템에 어떤 일이 발생했음을 알립니다."
+label = "알림 및 워크플로"
+
+[portal.connections.categories.security]
+description = "문서가 이동하기 전에 스캔하거나 레이블을 지정합니다."
+label = "보안 및 분류"
+
+[portal.connections.categories.signing]
+description = "서명 또는 공증을 위해 문서를 보냅니다."
+label = "전자 서명 및 공증"
+
+[portal.connections.categories.storage]
+description = "처리된 문서가 도착하는 위치 - 버킷, 드라이브, 티켓 또는 페이지입니다."
+label = "파일 및 첨부"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling은 이를 암호화하여 저장하며 다시 표시하지 않습니다."
+label = "액세스 토큰"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "이 연결을 사용하는 단계는 이 URL 아래의 경로만 호출할 수 있으며, 다른 호스트는 호출할 수 없습니다."
+label = "서버 URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "서비스가 제공한 URL을 붙여넣으세요. 그 아래의 경로만 호출할 수 있습니다."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "연결 이름"
+namePlaceholder = "예: Production"
+
+[portal.connections.picker]
+cancel = "취소"
+createNew = "새 연결..."
+placeholder = "연결 선택"
+save = "연결 저장"
+
+[portal.connections.picker2]
+back = "통합 변경"
+heading = "무엇을 연결하시겠습니까?"
+noResultsBody = "아직 지원하지 않습니다 - 알려주시면 추가를 검토하겠습니다."
+noResultsTitle = "\"{{query}}\"와 일치하는 항목 없음"
+searchPlaceholder = "통합 검색 - \"sign\", \"ocr\" 또는 제품 이름을 시도해 보세요"
+
+[portal.connections.types.api]
+description = "정책에서 임의의 HTTP API를 호출합니다. URL, 인증 및 페이로드를 선택합니다."
+label = "사용자 지정 API"
+
+[portal.connections.types.api.fields.authType]
+label = "인증"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username 및 password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "사용자 지정 헤더의 토큰"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "없음"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "토큰을 받기 위해 로그인"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "이 연결을 사용하는 단계는 이 URL 아래의 경로만 호출할 수 있으며, 다른 호스트는 호출할 수 없습니다."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "헤더 이름"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "로그인 경로"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "API가 다운로드 링크로 응답하면, 이 호스트만 가져올 수 있습니다. 쉼표로 구분하세요. 비워 두면 기본 URL 자체 호스트만 허용됩니다."
+label = "허용된 결과 호스트"
+
+[portal.connections.types.api.fields.token]
+label = "토큰"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "이 헤더로 토큰 보내기"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "로그인 호출이 토큰을 반환하는 응답 헤더입니다. 예: X-Auth-Token."
+label = "토큰 응답 헤더"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "운영 중인 서버에서 문서의 malware를 스캔합니다 - 네트워크를 벗어나지 않습니다."
+label = "ClamAV (자체 호스팅)"
+
+[portal.connections.types.cloudmersive]
+description = "정책에서 문서의 바이러스 및 콘텐츠를 스캔합니다."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "알려진 malware뿐 아니라 매크로, 실행 파일, 스크립트 또는 임베디드 객체가 포함된 문서를 차단합니다."
+label = "Cloudmersive 고급 스캔"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "처리된 문서를 Confluence 페이지에 첨부합니다."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "전자 서명 및 공증을 위해 문서를 ConsignO Cloud (Notarius)로 보냅니다."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "/api/v1을 포함한 ConsignO Cloud 환경입니다."
+label = "서버 URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "조직에서 테넌트를 사용하는 경우에만 필요합니다."
+label = "테넌트"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "정책이 문서를 처리할 때 Discord에 메시지를 게시합니다."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "정책이 문서를 처리할 때마다 Elasticsearch에 감사 이벤트를 인덱싱합니다."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "새 문서를 위해 FTP 또는 FTPS 서버를 폴링합니다."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "연결 모드"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (권장)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "일반 FTP는 자격 증명과 파일을 암호화하지 않고 전송합니다. 서버가 지원하면 FTPS를 선택하세요."
+label = "암호화"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (명시적 / AUTH TLS)"
+implicit = "FTPS (암시적)"
+none = "없음(일반 FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "정책이 실행될 때 Google Chat 공간에 메시지를 게시합니다."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "처리된 문서를 Jira 이슈에 첨부합니다."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "정책이 실행될 때 문서 또는 알림을 Email로 보냅니다."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "처리된 문서를 Nextcloud에 파일로 저장합니다."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "앱 password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "운영 중인 Presidio 서버를 사용하여 문서 텍스트의 개인 데이터를 감지합니다."
+label = "Presidio (자체 호스팅)"
+
+[portal.connections.types.purview]
+description = "PDF에서 Microsoft Purview 민감도 레이블을 읽고 적용합니다."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "선택 사항입니다. 이름으로 레이블을 선택할 때만 필요하며, 없어도 레이블 지정은 작동합니다."
+label = "애플리케이션(클라이언트) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "클라이언트 secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "모든 레이블에 SiteId로 찍혀 Purview 인식 도구가 어느 조직이 적용했는지 알 수 있습니다."
+label = "디렉터리(테넌트) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "소스가 읽고 파이프라인 출력이 쓸 수 있는 S3 버킷입니다."
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "액세스 key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS의 경우 비워 두세요. MinIO 또는 다른 S3 호환 저장소의 경우 이를 설정하세요."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "정책이 실행될 때 문서 또는 알림을 Email로 보냅니다."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "새 문서를 위해 SFTP (SSH) 서버를 폴링합니다."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "선택 사항입니다. 서버의 SHA-256 호스트 key 지문입니다(`ssh-keyscan host | ssh-keygen -lf -`에서). 설정하면 이 key를 제시하는 서버만 허용됩니다. 비워 두면 첫 연결 시 보인 key가 고정되고 이후 변경은 거부됩니다."
+label = "호스트 key 지문"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "대신 private key로 인증하는 경우 비워 두세요."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "선택 사항입니다. password 대신 key로 인증하려면 OpenSSH private key를 붙여넣으세요."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "정책이 문서를 처리할 때 Slack에 메시지를 게시합니다."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS 네트워크 공유(Windows 또는 Samba)를 감시합니다."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / 네트워크 공유"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "선택 사항입니다. 서버에서 사용하는 경우 Windows 도메인 또는 작업 그룹입니다."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "공유"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "정책이 문서를 처리할 때마다 Splunk에 감사 이벤트를 보냅니다."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Sumo Logic HTTP 수집기로 감사 이벤트를 보냅니다."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "정책이 실행될 때 Teams 채널에 메시지를 게시합니다."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "각 문서 또는 세부 정보만 선택한 URL로 게시합니다."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "정책에서 Zap 또는 Make 시나리오를 트리거합니다."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "문서 탐색"
+viewSource = "GitHub에서 소스 보기"
+
 [portal.docs.authentication]
 codeCaption = "모든 요청"
 eyebrow = "시작하기"
@@ -6619,11 +7079,19 @@ title = "공식 SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
+[portal.docs.search]
+empty = "일치하는 문서 없음"
+placeholder = "문서 검색"
+results = "결과 {{count}}개"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "agent가 단일 도구로 호출하는 번들형 명명된 기능입니다. 각 skill은 eval이 연결된 결정적 작업 체인입니다."
 title = "Agent skills"
 
+[portal.docs.toc]
+title = "이 페이지에서"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "유형"
 user = "사용자"
 
 [portal.documents.queue.empty]
+connectSource = "소스 연결"
+createPipeline = "파이프라인 만들기"
 description = "소스가 문서를 파이프라인에 공급하면 검토를 위해 여기에 표시됩니다."
 title = "대기열에 문서가 없습니다"
 
@@ -6806,13 +7276,71 @@ description = "이 보기에서 예기치 않은 오류가 발생했습니다. 
 retry = "다시 시도"
 title = "이 페이지에서 문제가 발생했습니다"
 
+[portal.home.download]
+back = "뒤로"
+body = "데스크톱 앱을 다운로드하거나 서버를 자체 호스팅하세요."
+done = "완료"
+guide = "{{name}} 가이드 열기"
+openInBrowser = "대신 브라우저에서 열기"
+sectionDesktop = "데스크톱 앱"
+sectionSelfHosted = "자체 호스팅"
+title = "Stirling PDF Editor 설치"
+
+[portal.home.download.docker]
+detailBody = "서버에서 공식 이미지를 실행하세요."
+note = ":8080에서 열립니다. 기본 로그인: admin / stirling."
+tagline = "컨테이너에서 서버 실행"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "공식 Helm chart를 설치합니다."
+note = "설정을 유지하려면 /configs용 PVC를 추가하세요."
+tagline = "Helm으로 클러스터에 배포"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "사용 중인 배포판용 네이티브 빌드입니다."
+guideBtn = "Linux 설치 옵션 보기"
+note = "일반적인 배포판용 AppImage, .deb 및 .rpm 빌드를 사용할 수 있습니다."
+tagline = "사용 중인 배포판용 네이티브 데스크톱 앱"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "또는 Homebrew 사용"
+detailBody = "설치 프로그램을 실행하거나 Homebrew를 사용하세요."
+downloadBtn = "macOS용 다운로드"
+tagline = "Apple silicon 및 Intel용 네이티브 앱"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "베어 메탈 서버에서 .jar를 실행하세요."
+downloadBtn = ".jar 다운로드"
+note = "Java 21+가 필요합니다. :8080에서 열리며, 기본 로그인은 admin / stirling입니다."
+runLabel = "그런 다음 실행하세요"
+tagline = "베어 메탈 서버에서 .jar 실행"
+title = "수동 서버 설정"
+
+[portal.home.download.windows]
+altLabel = "또는 winget 사용"
+detailBody = "설치 프로그램을 실행하거나 패키지 관리자를 사용하세요."
+downloadBtn = "설치 프로그램 다운로드"
+tagline = "Microsoft Windows용 네이티브 앱"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}}명 활성"
-invite = "팀원 초대"
+activeOfDeployed = "이번 달 활성 {{active}} / {{total}}"
 name = "Stirling PDF Editor"
 open = "브라우저에서 열기"
 updated = "{{time}} 업데이트됨"
 
+[portal.home.editor.deploy]
+finish = "배포 완료"
+options = "배포 옵션 보기"
+start = "Editor 배포"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "셀프 호스팅 · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "좋은 오후입니다"
 evening = "좋은 저녁입니다"
 morning = "좋은 아침입니다"
 
-[portal.home.onboarding]
-dismiss = "설정 닫기"
-notStarted = "시작되지 않음"
-progress = "{{total}}개 중 {{done}}개 완료"
-title = "설정 완료"
-
-[portal.home.onboarding.enterprise]
-body = "조직 전체 SSO + SCIM + RBAC, 약정 사용량 가격, 네트워크 격리 배포."
-cta = "평가판 시작"
-ctaQuote = "견적 받기"
-lead = "직원 250명 이상 대상."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "데스크톱 앱을 배포하세요. 영구 무료입니다."
-title = "PDF Editor 다운로드"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}}개 활성 · {{recommended}}개 권장"
-chip = "{{active}}개 활성"
-title = "정책 켜기"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}}개 연결됨 · 도착하는 모든 PDF 관리"
-chip = "{{connected}}개 연결됨"
-title = "소스 연결"
-
-[portal.home.quickActions]
-subtitle = "오늘의 주요 작업"
-title = "빠른 작업"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "유형화된 작업 라이브러리 기반 3단계 작성기"
-title = "파이프라인 구축"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, 에이전트, webhooks, 감시 폴더"
-title = "소스 연결"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "속도 제한 및 IP 허용 목록이 있는 범위 지정 키"
-title = "API 키 발급"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor 배포 관리"
 sectionsAriaLabel = "인프라 섹션"
@@ -6878,13 +7363,9 @@ heading = "API 키"
 subheading = "키별 속도 제한, 권한, IP 허용 목록이 있는 범위 지정 자격 증명입니다."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "허용된 IP"
-anyIp = "모든 IP(허용 목록 없음)"
 created = "생성됨"
 lastUsed = "마지막 사용"
-permissions = "권한"
-rateLimit = "속도 제한"
-rateLimitValue = "{{value}} req/min"
+revoke = "키 폐기"
 usageMonth = "이번 달 사용량"
 usageToday = "오늘 사용량"
 
@@ -6892,6 +7373,20 @@ usageToday = "오늘 사용량"
 description = "Stirling API 호출을 시작하려면 범위 지정 키를 생성하세요."
 title = "아직 API 키가 없습니다"
 
+[portal.infrastructure.apiKeys.error]
+load = "API 키를 불러올 수 없습니다. 다시 시도하세요."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\"을(를) 폐기하시겠습니까? 이 키를 계속 사용하는 모든 통합은 즉시 401 오류를 받기 시작합니다. 이 작업은 되돌릴 수 없습니다."
+cancel = "취소"
+confirm = "키 폐기"
+title = "API 키 폐기"
+
+[portal.infrastructure.attestationLabel]
+attested = "증명됨"
+inScope = "범위 내"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "카테고리별 감사 이벤트 필터링"
 heading = "감사 로그"
@@ -6935,6 +7430,7 @@ all = "전체"
 auth = "인증"
 config = "구성"
 elevation = "권한 상승"
+policy = "정책"
 processing = "처리"
 security = "보안"
 
@@ -6944,19 +7440,35 @@ title = "접근 권한이 없습니다"
 
 [portal.infrastructure.audit.metrics]
 config = "구성"
-elevation = "권한 상승"
+policy = "정책"
 processing = "처리"
 totalEvents = "총 이벤트 · 24시간"
 
+[portal.infrastructure.auditCatLabel]
+auth = "인증"
+config = "구성"
+elevation = "권한 상승"
+policy = "정책"
+processing = "처리"
+security = "보안"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "오류"
+info = "정보"
+success = "성공"
+warning = "경고"
+
+[portal.infrastructure.certLabel]
+certified = "인증됨"
+inProgress = "진행 중"
+notStarted = "시작 안 됨"
+
 [portal.infrastructure.createKey]
 cancel = "취소"
 createKey = "키 생성"
 done = "완료"
-ipAllowlistHelper = "쉼표로 구분된 CIDR 범위입니다. 모든 IP를 허용하려면 비워 두세요."
-ipAllowlistLabel = "IP 허용 목록"
 keyNameLabel = "키 이름"
 keyNamePlaceholder = "예: Production · ingest"
-permissionsLabel = "권한"
 secretKeyCaption = "비밀 키"
 secretWarning = "이를 secrets manager에 저장하세요. Stirling은 항상 해시만 저장하므로 나중에 복구할 방법이 없습니다."
 subtitle = "키 범위는 필요한 최소한으로 지정하세요. 언제든지 교체하거나 취소할 수 있습니다."
@@ -6964,6 +7476,12 @@ subtitleCreated = "지금 이 비밀을 복사하세요 — 다시 표시되지
 title = "API 키 생성"
 titleCreated = "키 생성됨"
 
+[portal.infrastructure.deployLabel]
+live = "라이브"
+queued = "대기 중"
+rolledBack = "롤백됨"
+rolling = "롤아웃 중"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "배포된 모든 Stirling 지역의 실시간 상태 — 지연 
 description = "워크스페이스가 프로비저닝되면 배포된 지역이 여기에 표시됩니다."
 title = "배포된 지역 없음"
 
+[portal.infrastructure.keyLabel]
+active = "활성"
+revoked = "폐기됨"
+
+[portal.infrastructure.modelLabel]
+active = "활성"
+degraded = "성능 저하"
+disabled = "비활성화됨"
+
 [portal.infrastructure.models]
 heading = "모델"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "상태"
 type = "유형"
 version = "버전"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/호출"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "활성 모델"
 avgLatency = "평균 지연 시간"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}}용 모델"
 operation = "작업"
 routedTo = "라우팅 대상"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "분류"
+extraction = "추출"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "성능 저하"
+down = "중단"
+healthy = "정상"
+
 [portal.infrastructure.security.access.byok]
 description = "자체 KMS의 키를 제공하세요. Stirling은 이 키로 암호화하지만 여전히 읽을 수 있습니다."
 label = "자체 키 가져오기(BYOK)"
@@ -7174,6 +7716,47 @@ models = "모델"
 security = "보안"
 storage = "스토리지"
 
+[portal.integrations]
+addAnother = "다른 항목 추가"
+availableHeading = "사용 가능"
+comingSoonHeading = "곧 제공 예정"
+connect = "연결"
+connectedHeading = "연결됨"
+connectionCount_one = "{{count}}개 연결"
+connectionCount_other = "{{count}}개 연결"
+customApi = "사용자 지정 API"
+searchPlaceholder = "통합 검색"
+subtitle = "Stirling이 통신할 수 있는 모든 항목입니다. 자격 증명은 여기에서 한 번 생성한 뒤 소스, 정책 및 파이프라인에서 참조됩니다."
+title = "통합"
+typedName = "{{tool}} 이름"
+
+[portal.integrations.filters]
+all = "모두"
+audit = "감사"
+connected = "연결됨"
+notify = "알림"
+security = "보안"
+signing = "서명"
+storage = "스토리지"
+
+[portal.integrations.status]
+connected = "연결됨"
+
+[portal.integrations.table]
+integration = "통합"
+worksWith = "함께 작동"
+
+[portal.integrations.worksWith]
+pipelines = "파이프라인"
+policies = "정책"
+sources = "소스"
+
+[portal.legal]
+draft = "{{label}} · 초안"
+loadError = "이 문서를 불러올 수 없습니다. 다시 시도하세요."
+loading = "불러오는 중…"
+title = "법적 문서"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "구성 요소"
@@ -7182,6 +7765,7 @@ documents = "문서"
 editor = "Editor"
 home = "홈"
 infrastructure = "인프라"
+integrations = "통합"
 pipelines = "파이프라인"
 policies = "정책"
 procurement = "구매"
@@ -7190,25 +7774,9 @@ sources = "소스"
 usage = "사용량 및 청구"
 users = "사용자"
 
-[portal.notifications]
-markAllRead = "모두 읽음으로 표시"
-title = "알림"
-viewAll = "모두 보기"
-
-[portal.notifications.ariaLabel]
-none = "알림, 읽지 않은 항목 없음"
-unread_one = "알림, 읽지 않은 항목 {{count}}개"
-unread_other = "알림, 읽지 않은 항목 {{count}}개"
-
-[portal.notifications.count]
-allRead = "모두 읽음"
-loading = "로드 중"
-new_one = "새 항목 {{count}}개"
-new_other = "새 항목 {{count}}개"
-
-[portal.notifications.empty]
-description = "새 알림이 없습니다."
-title = "모두 확인했습니다"
+[portal.nav.section]
+platform = "PDF 플랫폼"
+processor = "PDF 프로세서"
 
 [portal.pipelines]
 subtitle = "백엔드의 모든 자동 문서 파이프라인: 소스 집합에 대한 순서 지정된 작업 체인이 트리거에 의해 실행됩니다. 행을 클릭하면 단계와 소스를 볼 수 있습니다."
@@ -7220,15 +7788,28 @@ newPipeline = "새 파이프라인"
 [portal.pipelines.builder]
 addStep = "도구 추가"
 back = "파이프라인으로 돌아가기"
+cannotFollow = "{{produced}}을(를) 사용할 수 없습니다"
+chooseAccount = "계정 선택"
+chooseDestination = "대상 선택"
+chooseOperation = "이 단계에서 수행할 작업 선택"
+chooseSource = "소스 선택"
 discard = "변경 사항 버리기"
 enabled = "활성화됨"
+inputs = "입력"
+inputSource = "입력 소스"
+inputTrigger = "트리거"
 keepEditing = "계속 편집"
+needsConfiguring = "설정 필요"
 needsUpload = "업로드된 파일 필요"
+noSources = "아직 연결된 소스가 없습니다. 입력으로 사용하려면 하나를 생성하세요."
 noToolMatches = "검색과 일치하는 도구가 없습니다."
 pipelineSettings = "파이프라인 설정"
 searchTools = "도구 검색"
 selectToolBody = "파이프라인을 구축하려면 도구를 추가하세요."
 selectToolTitle = "아직 도구가 없습니다"
+sendToSystem = "다른 시스템으로 보내기"
+stepsIncompatible = "이 단계들은 이전 단계가 생성한 항목에서 실행할 수 없습니다: {{tools}}."
+stepsNeedSetup = "저장하기 전에 아직 설정이 필요한 단계입니다: {{tools}}."
 toolSettings = "도구 설정"
 unknownStep = "인식되지 않는 작업이며, 그대로 유지되었습니다."
 unsavedBody = "저장되지 않은 변경 사항이 있습니다. 나가기 전에 저장하시겠습니까, 아니면 버리시겠습니까?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "저장되지 않은 변경 사항"
 uploadUnsupported = "업로드된 파일은 아직 파이프라인에서 지원되지 않으므로 다음 단계는 저장할 수 없습니다: {{tools}}."
 usesDefaults = "기본 설정으로 실행"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "이전 단계의 모든 파일을 결합합니다"
+fan-out = "이전 단계의 파일마다 한 번씩 실행됩니다"
+format-mismatch = "{{accepts}}이(가) 필요하지만, 이전 단계는 {{produced}}을(를) 생성합니다"
+output-uncertain = "실행되지 않을 수 있음: 이전 단계의 출력은 설정 방식에 따라 달라집니다"
+source-mismatch = "{{accepts}}이(가) 필요하지만, 이 파이프라인의 입력은 {{produced}}입니다"
+undeclared-operation = "이 단계가 무엇을 허용하는지 확인할 수 없습니다"
+
 [portal.pipelines.composer]
 addTool = "도구 추가"
 cancel = "취소"
 chainEmpty = "파이프라인 구축을 시작하려면 도구를 추가하세요."
 create = "파이프라인 생성"
-directory = "출력 폴더"
-directoryHelp = "서버의 절대 경로입니다. 구성된 허용 폴더 내에 있어야 합니다."
 editingUnsupported = "편집을 위해 이러한 도구 매개변수를 표시하는 기능은 아직 지원되지 않습니다."
 moveDown = "아래로 이동"
 moveUp = "위로 이동"
 name = "이름"
 namePlaceholder = "예: Redaction sweep"
-noSources = "아직 연결된 소스가 없습니다. 파이프라인은 직접 제공된 파일에서도 계속 실행할 수 있습니다."
 noToolSettings = "이 도구에는 구성 가능한 설정이 없습니다."
 operations_one = "작업({{count}})"
 operations_other = "작업({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "삭제"
 title = "파이프라인을 삭제하시겠습니까?"
 
 [portal.pipelines.detail]
+clearHistory = "기록 지우기"
 delete = "파이프라인 삭제"
 run = "지금 실행"
 
 [portal.pipelines.empty]
 action = "파이프라인 생성"
+connectSource = "소스 연결"
 description = "첫 번째 파이프라인을 생성하세요. 실행할 소스를 선택하고, 작업을 연결하며, 출력 위치를 선택하세요."
 title = "아직 파이프라인이 없습니다"
 
@@ -7286,15 +7874,17 @@ active = "활성"
 paused = "일시 중지됨"
 total = "파이프라인"
 
-[portal.pipelines.output]
-folder = "폴더에 쓰기"
-inline = "파일 반환"
-
 [portal.pipelines.run]
+allProcessed_one = "실행할 항목이 없습니다: 소스의 문서 {{count}}개는 이미 처리되었습니다."
+allProcessed_other = "실행할 항목이 없습니다: 소스의 문서 {{count}}개는 모두 이미 처리되었습니다."
 completed_one = "실행이 완료되었습니다."
 completed_other = "{{count}}개 실행이 모두 완료되었습니다."
 empty = "실행할 항목이 없습니다. 소스에 처리할 문서가 없습니다."
 failed = "실행 실패: {{error}}"
+historyCleared = "기록이 지워졌습니다. 다음 실행에서는 현재 소스에 있는 모든 항목을 다시 처리합니다."
+inFlight = "새로 실행할 항목이 없습니다: 이전 실행의 문서가 아직 처리 중입니다."
+parked_one = "실행할 항목이 없습니다: 문서 {{count}}개가 이전에 실패하여 보류되어 있습니다. 원인을 수정한 다음 기록을 지워 다시 시도하세요."
+parked_other = "실행할 항목이 없습니다: 문서 {{count}}개가 이전에 실패하여 보류되어 있습니다. 원인을 수정한 다음 기록을 지워 다시 시도하세요."
 running = "실행이 시작되었으며 아직 진행 중입니다."
 timeout = "실행이 예상보다 오래 걸리고 있습니다. 백그라운드에서 계속 완료될 수 있습니다."
 
@@ -7314,12 +7904,18 @@ manual = "수동"
 schedule = "예약됨"
 
 [portal.policies]
+defaultName = "{{category}} 정책"
 subtitle = "모든 문서에 도구 파이프라인을 적용하는 상시 자동화입니다. 각 정책은 업로드 또는 내보내기 시 실행되고, 도구 체인을 실행한 뒤 적용된 버전을 원본과 함께 저장합니다."
 title = "정책"
 
 [portal.policies.card]
 comingSoon = "Enterprise로 업그레이드"
 notSetUp = "설정되지 않음"
+requiresAiEngine = "AI 엔진 필요"
+
+[portal.policies.categories.classification]
+desc = "업로드 시 각 문서의 유형을 식별하고 정리 및 검색을 위해 메타데이터에 태그를 지정합니다."
+label = "분류"
 
 [portal.policies.categories.compliance]
 desc = "모든 문서에 HIPAA, GDPR, SOC 2 또는 FedRAMP 요구 사항을 적용합니다."
@@ -7344,6 +7940,13 @@ label = "보안"
 [portal.policies.config]
 scopeAll = "모든 문서"
 
+[portal.policies.config.classification]
+summary = "업로드된 모든 문서를 팀의 레이블에 따라 분류하고 메타데이터에 태그를 지정합니다."
+
+[portal.policies.config.classification.rules]
+0 = "분류"
+1 = "메타데이터 태그 지정"
+
 [portal.policies.config.compliance]
 summary = "문서가 시스템을 떠나기 전에 규제 프레임워크에 맞는지 검증합니다."
 
@@ -7371,6 +7974,29 @@ minConfidence = "최소 신뢰도"
 2 = "이름 지정"
 3 = "정규화"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview 민감도 레이블 적용"
+
+[portal.policies.config.purview.fields]
+connection = "Purview 테넌트"
+labelId = "레이블 ID"
+labelIdHelp = "Purview 포털의 레이블 GUID입니다. 레이블을 적용하면 해당 메타데이터가 PDF에 기록됩니다. 암호화는 할 수 없으며, 암호화에는 Microsoft 클라이언트가 필요합니다."
+labelName = "레이블 이름(선택 사항)"
+labelNameHelp = "사람과 도구가 레이블을 인식할 수 있도록 ID와 함께 기록됩니다."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview는 정책이 적용한 레이블과 사람이 선택한 레이블을 구분합니다."
+label = "레이블 기록 방식"
+privileged = "사람이 선택한 것으로"
+standard = "자동으로 적용된 것으로"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview 레이블 읽기"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview 테넌트"
+connectionHelp = "문서가 이미 가지고 있는 레이블을 읽어 이후 단계에서 이를 기반으로 작업할 수 있게 합니다."
+
 [portal.policies.config.retention]
 summary = "문서를 보관할 기간, 보관 처리 시점, 삭제 시점을 적용합니다."
 
@@ -7438,6 +8064,7 @@ title = "아직 활동 없음"
 [portal.policies.endpoints]
 addWatermark = "워터마크"
 autoRedact = "PII 마스킹"
+classifyAndLabel = "분류"
 compressPdf = "압축"
 flatten = "병합"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "정책이 저장되었으며 연결이 복원되면 표시됩니
 retry = "다시 시도"
 title = "Backend를 사용할 수 없음"
 
+[portal.policies.operations]
+change = "이 단계에서 수행할 작업 변경"
+noResults = "일치하는 단계가 없습니다. 제품 이름 또는 \"scan\", \"notify\", \"attach\"를 시도해 보세요."
+searchPlaceholder = "단계 검색 - \"scan\", \"attach\" 또는 제품 이름을 시도해 보세요"
+
+[portal.policies.operations.bodyMode]
+binary = "원시 파일 바이트"
+json = "JSON 페이로드 내부"
+multipart = "파일 업로드로(multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "사용자 자체 ClamAV 서버가 문서를 검사하며, 네트워크 밖으로 아무것도 나가지 않습니다."
+label = "바이러스 검사(셀프 호스팅)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "매크로, 실행 파일, 스크립트 또는 임베디드 객체가 포함된 문서를 거부합니다."
+label = "활성 콘텐츠 차단"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive가 문서를 검사하고 깨끗하지 않으면 실행이 중지됩니다."
+label = "바이러스 검사"
+
+[portal.policies.operations.confluenceAttach]
+description = "처리된 문서를 페이지에 파일로 첨부합니다."
+label = "Confluence 페이지에 첨부"
+
+[portal.policies.operations.consignoSubmit]
+description = "서명을 위해 문서를 ConsignO Cloud에 제출합니다."
+label = "서명 요청 보내기(ConsignO)"
+note = "문서를 제출합니다. 단계가 결과를 이후 단계에 전달할 수 없기 때문에 서명된 사본 검색은 아직 지원되지 않습니다."
+
+[portal.policies.operations.customApiCall]
+description = "경로, 메서드, 본문 및 응답 처리를 직접 작성합니다."
+label = "사용자 지정 API 호출"
+
+[portal.policies.operations.discordNotify]
+description = "정책이 문서를 처리했음을 채널에 알립니다."
+label = "Discord에 메시지 게시"
+
+[portal.policies.operations.elasticIndex]
+description = "정책이 수행한 작업을 검색 가능한 문서로 기록합니다."
+label = "Elasticsearch에 감사 이벤트 인덱싱"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart는 업로드 API에 적합하고, JSON은 페이로드 안에 파일을 원하는 API에 적합하며, binary는 원시 바이트를 보냅니다."
+label = "문서 전송 방식"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "그대로 전송되는 JSON 본문입니다. {{document.base64}}에는 파일이 들어가며, {{document.*}} 및 {{run.*}}은 문서별로 채워집니다."
+label = "JSON 본문"
+
+[portal.policies.operations.fields.connection]
+label = "계정"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun 도메인"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API가 문서를 받을 것으로 예상하는 양식 필드입니다."
+label = "파일 필드 이름"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "보낸 사람"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "헤더 이름/값 쌍의 JSON 객체입니다. 연결의 자격 증명은 자동으로 추가됩니다."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "이슈 키"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "메시지 본문으로 전송됩니다. {{document.*}} 및 {{run.*}}은 문서별로 채워집니다."
+label = "메시지"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "페이지 ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "연결의 기본 URL에 추가됩니다. 다른 호스트에는 절대 도달할 수 없습니다."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "드라이브에서 기록할 위치입니다. {{document.filename}}은 문서별로 채워집니다."
+label = "대상 경로"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "보고서는 문서를 그대로 둡니다. 교체는 반환된 내용으로 문서를 바꿉니다."
+label = "응답 처리 방법"
+
+[portal.policies.operations.fields.signerEmail]
+label = "서명자 이메일"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "제목"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio가 이 텍스트를 분석합니다. {{document.title}}을 사용하거나 확인할 텍스트를 붙여넣으세요."
+label = "확인할 텍스트"
+
+[portal.policies.operations.fields.to]
+label = "받는 사람"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud 사용자 이름"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "정책이 문서를 처리했음을 스페이스에 알립니다."
+label = "Google Chat에 메시지 게시"
+
+[portal.policies.operations.jiraAttach]
+description = "처리된 문서를 이슈에 파일로 첨부합니다."
+label = "Jira 이슈에 첨부"
+
+[portal.policies.operations.mailgunEmail]
+description = "처리된 문서를 첨부 파일로 보냅니다."
+label = "문서 이메일 보내기(Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "처리된 문서를 폴더에 기록합니다."
+label = "Nextcloud에 업로드"
+
+[portal.policies.operations.presidioAnalyze]
+description = "사용자 자체 Presidio 서버가 발견한 개인 데이터를 보고합니다."
+label = "개인 데이터 감지"
+note = "Presidio는 파일이 아니라 텍스트를 읽습니다. 확인할 텍스트를 제공하세요 — 문서 자체는 업로드되지 않습니다."
+
+[portal.policies.operations.responseMode]
+replace = "응답으로 문서 교체"
+report = "문서는 유지하고 응답 기록"
+
+[portal.policies.operations.sendgridEmail]
+description = "처리된 문서를 첨부 파일로 보냅니다."
+label = "문서 이메일 보내기(SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "정책이 문서를 처리했음을 채널에 알립니다."
+label = "Slack에 메시지 게시"
+
+[portal.policies.operations.splunkEvent]
+description = "감사자가 이미 확인하는 위치에 정책이 수행한 작업을 기록합니다."
+label = "Splunk에 감사 이벤트 보내기"
+
+[portal.policies.operations.sumologicEvent]
+description = "정책이 수행한 작업을 HTTP 수집기에 기록합니다."
+label = "Sumo Logic에 감사 이벤트 보내기"
+
+[portal.policies.operations.teamsNotify]
+description = "정책이 문서를 처리했음을 채널에 알립니다."
+label = "Teams에 메시지 게시"
+
+[portal.policies.operations.webhookPost]
+description = "선택한 URL로 문서 자체를 보냅니다."
+label = "webhook에 문서 게시"
+
+[portal.policies.operations.zapierNotify]
+description = "실행 세부 정보를 자동화로 전달합니다."
+label = "Zap 또는 Make 시나리오 트리거"
+
 [portal.policies.stats]
 activeFor = "활성"
 dataProcessed = "처리된 데이터"
@@ -7473,6 +8277,13 @@ label = "적용된 문서"
 description = "구성되었지만 실행되지 않음"
 label = "일시 중지됨"
 
+[portal.policies.table]
+appliesTo = "적용 대상"
+docs = "적용된 문서"
+enforces = "시행"
+policy = "정책"
+status = "상태"
+
 [portal.policies.wizard.actions]
 back = "뒤로"
 cancel = "취소"
@@ -7480,6 +8291,10 @@ continue = "계속"
 enablePolicy = "정책 활성화"
 saveChanges = "변경 사항 저장"
 
+[portal.policies.wizard.capability.classify]
+desc = "팀의 레이블에서 문서 유형을 식별하고 태그를 지정하여 범주별로 정리하고 검색할 수 있게 합니다."
+label = "문서 분류"
+
 [portal.policies.wizard.capability.compress]
 desc = "문서를 더 작은 파일 크기로 압축합니다."
 label = "파일 크기 줄이기"
@@ -7500,10 +8315,18 @@ label = "민감한 정보 마스킹"
 desc = "숨겨진 JavaScript를 제거하여 문서를 열 때 아무것도 자동으로 실행되지 않게 합니다."
 label = "활성 콘텐츠 제거"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "독립적인 타임스탬프 기관을 사용해 특정 시점에 문서가 이 정확한 형태로 존재했음을 증명합니다. 해시만 전송되며, 문서는 서버를 떠나지 않습니다."
+label = "신뢰할 수 있는 타임스탬프 추가"
+
 [portal.policies.wizard.capability.watermark]
 desc = "모든 페이지에 표시되는 표시(예: “기밀”)를 찍습니다."
 label = "워터마크 적용"
 
+[portal.policies.wizard.classification]
+description = "업로드된 모든 문서는 기본 제공 레이블에 따라 분류되고 맞는 유형으로 태그가 지정됩니다. 레이블 세트는 전체 팀에서 공유됩니다."
+labelsHeading = "분류 레이블"
+
 [portal.policies.wizard.errors]
 noTools = "먼저 워크플로에서 하나 이상의 도구를 활성화하세요."
 saveFailed = "정책을 저장할 수 없습니다. 다시 시도하세요."
@@ -7548,73 +8371,118 @@ setUp = "{{category}} 정책 설정"
 [portal.policies.wizard.workflow]
 description = "이 정책이 처리하는 모든 문서에 수행할 작업을 선택하세요."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} 활성"
-noRule = "아직 적용된 규칙 없음"
-subtitle = "어떤 파이프라인이 처리하든 모든 문서가 거치는 상시 자동화입니다."
-title = "PDF에서 실행되는 항목"
-
 [portal.policySummary.action]
-comingSoon = "Enterprise로 업그레이드"
-configure = "구성"
 setUp = "설정"
 
-[portal.policySummary.column]
-activeRule = "활성 규칙"
-policy = "정책"
-status = "상태"
+[portal.processorFlow]
+footnote = "집계는 지난 24시간 기준입니다. 흐름 속도는 예시용입니다."
+liveBadge = "라이브"
+stats = "{{connected}}개 연결됨 · PDF {{processed}}개 처리됨"
+title = "PDF 프로세서"
 
-[portal.policySummary.empty]
-description = "정책이 구성되면 카테고리가 여기에 표시됩니다."
-title = "아직 정책 없음"
+[portal.processorFlow.lens]
+ariaLabel = "보기 모드"
+flow = "흐름"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "활성"
-off = "꺼짐"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24시간"
+failed = "실패"
+heading = "결과"
+success = "전달됨"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}}개 활성"
+count = "{{n}} · 24시간"
+heading = "정책"
+setUp = "설정"
 soon = "곧 제공"
 
-[portal.processingStatus]
-managePlan = "플랜 관리"
-volumeSuffix = "처리된 PDFs · 최근 30일"
+[portal.processorFlow.sankey]
+waist = "정책 · {{n}}개 활성"
+
+[portal.processorFlow.sankey.empty]
+description = "문서가 프로세서를 통해 흐르는 모습을 보려면 소스를 연결하고 정책을 켜세요."
+title = "아직 흐름 없음"
+
+[portal.processorFlow.sources]
+comingSoonTag = "연결"
+editor = "Stirling PDF Editor"
+heading = "소스"
+perDay = "{{n}} / 24시간"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email 수신"
 
 [portal.procurement]
-reset = "조달 재설정(데모)"
 subtitle = "팀 평가, 계약, 온보딩을 완료하세요. 모든 문서를 한곳에서 관리합니다."
 title = "조달"
 
-[portal.procurement.action]
-download = "다운로드"
-pay = "지금 결제"
-request = "요청"
-sign = "검토 및 서명"
-upload = "업로드"
-
 [portal.procurement.agreement]
 agreeCta = "동의하고 구독"
+confidential = "기밀"
 confirm = "Stirling Enterprise Agreement를 읽었으며 이에 동의합니다."
-eyebrow = "계약"
-intro = "하나의 통합 계약으로 거래를 포괄합니다: Master Service Agreement, Order Form, EULA, Data Processing Agreement. 검토한 후 견적을 확정 구독으로 수락하려면 동의하세요."
-title = "엔터프라이즈 계약 검토"
+docName = "Stirling Enterprise 계약서"
+docSub = "MSA, 주문서, EULA 및 DPA가 하나의 서명으로 결합되었습니다."
+download = "다운로드"
+downloadDraftError = "계약서 PDF를 생성할 수 없습니다 - 문서 렌더러를 사용할 수 없습니다. 잠시 후 다시 시도하거나 지원팀에 문의하세요."
+downloadError = "서명된 계약서를 다운로드할 수 없습니다. 다시 시도하세요."
+legalName = "법인명"
+legalNamePlaceholder = "서명할 법인"
+loadError = "계약서를 불러올 수 없습니다. 다시 시도하세요."
+loading = "계약서를 불러오는 중..."
+ref = "참조 {{ref}} · {{version}}"
+requestChanges = "변경 요청"
+scrollHint = "검토하려면 스크롤"
+signatory = "서명자 이름"
+signatoryPlaceholder = "전체 이름"
+signatoryTitle = "서명자 직함"
+signatoryTitlePlaceholder = "예: General Counsel"
+signError = "서명을 기록할 수 없습니다. 다시 시도하세요."
 
 [portal.procurement.builder]
 addons = "추가 기능"
+addressLine1 = "주소 줄 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "주소 줄 2"
+addressLine2Placeholder = "스위트, 층, 건물"
 back = "뒤로"
 businessName = "회사명"
 businessNamePlaceholder = "귀사"
+city = "시/군/구"
+cityPlaceholder = "San Francisco"
+completeRequired = "견적을 생성하기 전에 필수 필드(* 표시)를 유효한 이메일과 함께 완료하세요."
+contactEmail = "연락처 이메일"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "연락처 이름"
+contactNamePlaceholder = "Jane Doe"
 continue = "계속"
-country = "국가"
-countryEuro = "유로존(EUR €)"
-countryUK = "영국(GBP £)"
-countryUS = "미국(USD $)"
+done = "완료"
 eula = "Stirling Enterprise EULA를 읽었으며 이에 동의합니다. 이 견적에서 생성되는 계약에 적용됩니다."
 generate = "견적 생성"
-included = "포함됨"
 indemnification = "IP 면책"
 indemnificationSub = "EULA에 따라 적격 IP 클레임을 방어합니다"
-offlineLicense = "오프라인 / 에어갭 라이선스"
-offlineLicenseSub = "에어갭 self-hosted 인스턴스용 다운로드 가능한 라이선스 파일"
+paperEyebrow = "Enterprise 견적"
+paperFor = "대상"
+pdfSize = "PDF 크기"
+poNumber = "PO 번호"
+poNumberPlaceholder = "선택 사항"
+postalCode = "우편번호"
+postalCodePlaceholder = "94105"
+posture = "거버넌스"
+posture_count = "~{{count}}개 정책"
+posture_essentials = "Essentials"
+posture_essentialsSub = "분류 + 공유 — 기본값"
+posture_governed = "Governed"
+posture_governedSub = "보안 및 라우팅 추가"
+posture_regulated = "Regulated"
+posture_regulatedSub = "모든 범주 — 규정 준수, 보존, 수집"
 qbr = "분기별 비즈니스 리뷰"
 qbrSub = "담당 SE가 매 분기 사용량과 로드맵을 검토합니다"
+region = "주 / 지역"
+regionPlaceholder = "California"
 running = "{{annual}} / 년 · {{years}}년 {{tcv}}"
 s1Sub = "귀하의 팀과 매년 실행할 것으로 예상되는 PDFs입니다."
 s1Title = "얼마나 처리하시겠습니까?"
@@ -7623,6 +8491,12 @@ s2Title = "약정 및 서비스"
 s3Sub = "견적 및 그로부터 생성되는 계약에 사용됩니다."
 s3Title = "상세 정보"
 serviceLevel = "서비스 수준"
+size_compact = "Compact"
+size_compactSub = "대부분 텍스트, 1 MB 미만"
+size_heavy = "Heavy"
+size_heavySub = "스캔 또는 이미지 많음, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "텍스트와 이미지 혼합, 1~5 MB"
 slDedicated = "전담"
 slDedicatedSub = "영업일 기준 4시간 · 전담 계정 매니저 · +30%"
 slPriority = "우선"
@@ -7630,6 +8504,8 @@ slPrioritySub = "영업일 당일 · 지정 CSM · +15%"
 slStandard = "표준"
 slStandardSub = "다음 영업일 · 공유 CSM · 포함"
 stepOf = "{{total}}단계 중 {{n}}단계"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "선택 사항"
 term = "기간"
 termDiscount = "{{pct}}% 다년 약정 할인 적용됨"
 title = "견적 만들기"
@@ -7637,6 +8513,7 @@ training = "온보딩 및 교육"
 trainingSub = "팀이 바로 사용할 수 있도록 라이브 세션 제공"
 users = "전체 사용자"
 usersPlaceholder = "예: 250"
+viewEula = "읽기"
 volEstimated = "{{count}}명의 사용자 기준 예상(~각 2,000 PDFs, 자동화 포함). 더 정확한 수치를 알고 있다면 편집하세요."
 volManual = "입력한 수치를 사용 중입니다. 언제든지 팀 규모를 기준으로 다시 추정할 수 있습니다."
 volNoUsers = "잘 모르시나요? 팀 규모를 입력하면 추정해 드립니다."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "예: 1,000,000"
 years_one = "{{count}}년"
 years_other = "{{count}}년"
 
-[portal.procurement.docs]
-count_one = "{{count}}개 문서"
-count_other = "{{count}}개 문서"
-done = "완료"
-here = "현재 위치"
-hide = "숨기기"
-optional = "선택 사항"
-paidAddon = "유료 추가 기능"
-show = "표시"
-subtitle = "여정의 각 단계에서 필요한 모든 항목이 거래 진행에 맞춰 표시됩니다."
-supportingSubtitle = "SOC 2, 보안 검토, 세금 양식 등 보안 또는 조달 팀이 요청할 때 준비되어 있습니다. 일부는 일회성 수수료가 부과됩니다."
-supportingTitle = "평가 지원"
+[portal.procurement.documents]
+agreement = "Enterprise 계약서"
+agreementSub = "MSA, 주문서 및 DPA가 하나의 서명으로 제공됩니다."
+download = "다운로드"
+eula = "EULA 및 상업 조건"
+eulaSub = "소프트웨어 및 셀프 서비스 상업 조건입니다."
+invoice = "인보이스"
+invoiceSub = "첫 구독 인보이스입니다."
+laterInvoice = "수락 후 사용 가능"
+laterQuote = "견적이 발행되면 사용 가능"
+quote = "견적"
+quoteSub = "항목별 Enterprise 견적입니다."
+sla = "SLA 별첨"
+slaSub = "지원 등급 및 응답 목표입니다."
+subprocessors = "하위 처리자"
+subprocessorsSub = "귀하를 대신해 데이터를 처리하는 제3자입니다."
+subtitle = "거래 서류를 언제든지 사용할 수 있습니다."
 title = "문서"
-upcoming = "예정"
+view = "보기"
 
 [portal.procurement.error]
 title = "문제가 발생했습니다"
 
 [portal.procurement.hero]
-company = "엔터프라이즈 거래"
+barAria = "{{total}}단계 중 {{current}}단계"
 ctaAgreement = "계약 검토 및 서명"
-ctaLive = "라이브 상태입니다"
-ctaPayment = "결제 추가"
+ctaExploring = "평가판 설정"
 ctaQuote = "견적 검토"
+ctaReviewQuote = "견적 검토"
 ctaTrial = "견적 만들기"
+documents = "문서"
 eyebrow = "Enterprise 조달"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "팀원 초대"
-keyDocs = "주요 문서"
-nextStep = "다음 단계: {{action}}"
-notStarted = "시작 안 함"
+licenseKey = "라이선스 키"
+liveSub = "조직이 프로비저닝되었고 라이선스가 활성 상태입니다."
+liveTitle = "Stirling Enterprise에서 라이브 상태입니다"
+next = "다음: {{stage}}"
 open = "조달 열기"
 scheduleCall = "통화 예약"
-setup1Sub = "팀원을 초대하세요"
-setup1Title = "PDF Editor 배포"
-setup2Sub = "편집기 및 기타 소스 전반에서 처리를 켜세요"
-setup2Title = "PDF Processor 연결"
-setup3Sub = "필요할 때 보안, 컴플라이언스, 라우팅 또는 보존을 켜세요"
-setup3Title = "권장 정책 추가"
+sentenceAgreement = "계약서 검토 및 서명"
+sentenceLive = "프로비저닝 및 롤아웃"
+sentencePayment = "구매 주문 및 결제"
+sentenceQuote = "견적 검토 및 수락"
+sentenceTrial = "평가판 워크스페이스 설정"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}}일 남음"
 daysLeft_other = "{{count}}일 남음"
-engineerLabel = "담당 솔루션 엔지니어"
-eyebrow = "롤아웃"
-live = "Stirling Enterprise에서 라이브 상태입니다"
-nextStep = "다음 단계: {{action}}"
-subtitle = "담당 솔루션 엔지니어가 모든 단계에 함께합니다. 한 번에 하나의 다음 작업을 진행하며, 전체 체크리스트는 아래에 있습니다."
-title = "평가판에서 라이브까지, 하나의 안내 경로"
-trialTitle = "Enterprise 평가판"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "하나의 서명으로 MSA, 주문서, EULA, DPA를 포괄합니다."
@@ -7727,6 +8604,9 @@ downloadError = "아직 오프라인 라이선스 파일을 생성할 수 없습
 downloadOffline = "오프라인 라이선스 다운로드(.lic)"
 hint = "이 키를 self-hosted 인스턴스에 붙여넣어 활성화하거나 기록용으로 보관하세요. 안전하게 보관하세요."
 label = "라이선스 키"
+subtitle = "이 키로 셀프 호스팅 인스턴스를 활성화하거나 기록용으로 보관하세요."
+title = "라이선스 키"
+trialFileHint = "이것은 평가판 라이선스 파일입니다. 계약이 완료되면 돌아와 다시 다운로드하세요 — 온라인 라이선스 키와 달리 .lic 파일은 자동으로 업데이트되지 않습니다."
 
 [portal.procurement.link]
 cta = "계정 연결"
@@ -7739,65 +8619,62 @@ description = "구독이 활성화되었으며 라이선스가 발급되었습
 eyebrow = "라이브"
 title = "Stirling Enterprise에서 라이브 상태입니다"
 
-[portal.procurement.locked]
-description = "엔터프라이즈 평가를 시작하면 평가판 키, 약정 볼륨 견적, 단일 서명 계약, 결제 및 문서 원장이 모두 여기에 표시됩니다."
-eyebrow = "Enterprise 전용"
-talkToSales = "영업팀에 문의"
-title = "조달 트랙은 Enterprise에서 열립니다"
-
 [portal.procurement.milestone]
-accept = "수락하고 계속"
-description = "PDF를 다운로드하여 팀과 공유하고, 준비되면 돌아와 수락하거나 변경하세요."
-download = "PDF 다운로드"
 downloadError = "아직 견적 PDF를 다운로드할 수 없습니다. 잠시 후 다시 시도하세요."
-edit = "견적 편집"
-eyebrow = "견적 {{number}}"
-perYear = " / 년"
-preparedFor = "{{company}}용으로 준비됨"
-tcv = "총 계약 가치 {{value}}"
-title = "견적이 준비되었습니다"
-
-[portal.procurement.modal]
-cancel = "취소"
-chooseFile = "파일 선택"
-close = "닫기"
-downloadBody = "다운로드가 곧 시작됩니다."
-downloadCta = "다운로드"
-downloadTitle = "다운로드"
-noFile = "선택된 파일 없음"
-payBody = "Stripe를 통해 카드 또는 은행 송금으로 약정 계약을 결제하세요. 결제가 확인되는 즉시 워크스페이스가 프로비저닝됩니다."
-payCta = "Stripe로 계속"
-payTitle = "결제 확인"
-requestBodyFree = "요청 시 생성합니다. 확인하면 담당 솔루션 엔지니어가 곧 보내드립니다."
-requestBodyPaid = "유료 추가 기능입니다. 확인하면 담당 솔루션 엔지니어가 범위를 정하고 서류를 보내드립니다."
-requestCta = "요청"
-requestTitle = "이 문서 요청"
-signBody = "전자 서명을 위해 Stirling Enterprise Agreement를 엽니다. 하나의 서명으로 MSA, 주문서, EULA, DPA를 포괄합니다. 당사가 자동으로 대응 서명하고 결제로 진행됩니다."
-signCta = "서명용으로 열기"
-signTitle = "계약 검토 및 서명"
-uploadBody = "PO를 보내주시면 귀하의 조건에 맞춰 송장을 발행합니다. PDF를 끌어오거나 아래에서 파일을 선택하세요."
-uploadCta = "구매 주문서 업로드"
-uploadTitle = "구매 주문서 업로드"
 
 [portal.procurement.payment]
 description = "견적이 수락되었고 라이선스가 이미 활성화되어 팀이 바로 시작할 수 있습니다. 준비되면 첫 번째 송장을 결제하세요. 이메일 없이 여기에서 결제하거나 다운로드할 수 있습니다."
+downloadAgreement = "서명된 계약서 다운로드"
 downloadInvoice = "송장 다운로드"
-simulate = "결제 수신 시뮬레이션(데모)"
+eyebrow = "결제"
 title = "구독 생성됨"
 viewInvoice = "송장 보기 및 결제"
 
+[portal.procurement.review]
+acceptCta = "견적 수락"
+annual = "연간 요금(1년 차)"
+downloadCta = "견적 다운로드"
+poNumber = "구매 주문: {{po}}"
+renewal = "기간 이후 {{amount}}/년으로 갱신(+{{pct}}% CPI)"
+tcv = "{{years}}년 기간, 선불 일시납: {{tcv}}"
+validUntil = "유효 기간: {{date}}"
+
 [portal.procurement.schedule]
 fallback = "스케줄러를 로드할 수 없습니다."
 fallbackLink = "새 탭에서 일정 예약 열기"
+loading = "스케줄러를 불러오는 중..."
 subtitle = "담당 솔루션 엔지니어가 팀의 롤아웃을 안내합니다. 편한 시간을 선택하세요."
 title = "통화 예약"
 
-[portal.procurement.status]
-action = "작업 필요"
-available = "사용 가능"
-complete = "완료"
-pending = "대기 중"
-request = "요청 시"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "밀폐형, 아웃바운드 없음"
+back = "뒤로"
+businessName = "사업자명"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "관리형, 가장 빠른 시작"
+continue = "계속"
+deployment = "어디에 배포할까요?"
+eula = "Stirling EULA 및 상업 조건에 동의합니다."
+fullName = "전체 이름"
+fullNamePlaceholder = "이름"
+invites = "팀원 초대 · 선택 사항"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "통화 예약"
+seats = "테스트 인원"
+seatsPlaceholder = "예: 15"
+selfhost = "셀프 호스팅"
+selfhostSub = "Docker 또는 Kubernetes"
+start = "평가판 시작"
+stepOf = "{{total}}단계 중 {{n}}단계"
+subtitle = "14일 무료, 카드 필요 없음."
+subtitleDetails = "견적 및 계약을 위한 몇 가지 세부 정보입니다."
+talkFirst = "먼저 상담을 원하시나요?"
+title = "평가판 설정"
+viewEula = "읽기"
+workEmail = "업무용 이메일"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "연장하면 7일이 추가되고 담당 솔루션 엔지니어에게 알림이 전송됩니다."
@@ -7808,20 +8685,6 @@ maxed = "한도 도달"
 subtitle = "무료 평가판은 {{date}}까지 진행됩니다. 카드가 필요하지 않습니다."
 title = "Enterprise 평가판"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "약정 볼륨 가격, 조직 전체 SSO + SCIM + RBAC, 90일 변경 불가능 감사, 전담 SE."
-homeCta = "평가판 시작 →"
-homeHeadline = "수백만 개의 PDFs를 처리하세요."
-
-[portal.recentActivity]
-title = "최근 활동"
-viewAll = "모두 보기"
-
-[portal.recentActivity.empty]
-description = "파이프라인 실행, 배포 및 에이전트 이벤트가 여기에 표시됩니다."
-title = "아직 아무것도 없음"
-
 [portal.search]
 ariaLabel = "검색"
 placeholder = "Stirling 검색 — 엔드포인트, 파이프라인, 문서…"
@@ -7838,58 +8701,50 @@ admin = "관리자"
 [portal.settings.sections]
 account-link = "계정 연결"
 
-[portal.shell.header]
-accountFallback = "계정"
-accountMenu = "계정 메뉴"
-darkMode = "다크 모드"
-lightMode = "라이트 모드"
-search = "검색"
-searchPlaceholder = "검색…"
-signOut = "로그아웃"
-switchToDark = "다크 테마로 전환"
-switchToLight = "라이트 테마로 전환"
-
 [portal.shell.sidebar]
 appEditor = "편집기"
 appProcessor = "프로세서"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}}개 문서"
 linkAccount = "Stirling 계정 연결"
-planEditor = "Editor 플랜"
-planEnterprise = "Enterprise 플랜"
-planProcessor = "Processor 플랜"
 primaryNav = "기본 탐색"
 switchApp = "앱 전환"
 
+[portal.shell.topbar]
+closeNav = "탐색 닫기"
+openNav = "탐색 열기"
+search = "검색"
+
 [portal.sources]
 subtitle = "문서를 Stirling으로 공급하는 재사용 가능한 입력 연결입니다. 연결을 한 번 구성한 다음 여러 정책에서 참조하세요. 행을 클릭하면 해당 구성과 사용하는 정책을 볼 수 있습니다."
 title = "소스"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "소스 연결"
 
+[portal.sources.builder]
+back = "소스로 돌아가기"
+backToTypes = "모든 소스 유형"
+cancel = "취소"
+chooseHint = "문서가 어디에서 오는지 선택하세요. 회색으로 표시된 커넥터는 곧 제공됩니다."
+comingSoon = "곧 제공 예정"
+comingSoonHeading = "곧 제공 예정"
+create = "소스 생성"
+createTitle = "소스 연결"
+delete = "삭제"
+editTitle = "소스 편집"
+enabled = "활성화됨"
+save = "변경 사항 저장"
+
+[portal.sources.builder.folderAccess]
+description = "폴더 자동화는 관리자가 허용한 폴더만 사용할 수 있습니다. 폴더 액세스 설정에서 추가한 다음 다시 시도하세요."
+openSettings = "폴더 액세스 설정"
+title = "이 폴더는 허용되지 않습니다"
+
 [portal.sources.delete]
 body = "\"{{name}}\"을(를) 삭제하시겠습니까? 이 작업은 되돌릴 수 없습니다. 이를 참조하는 정책은 업데이트해야 합니다."
 cancel = "취소"
 confirm = "삭제"
 title = "소스를 삭제하시겠습니까?"
 
-[portal.sources.detail]
-closeAriaLabel = "세부 정보 닫기"
-delete = "소스 삭제"
-docs24h = "최근 24시간"
-docs30d = "최근 30일"
-docsTotal = "총 확인됨"
-docsTrend = "최근 30일간 문서"
-documents = "문서"
-edit = "편집"
-notReferenced = "어떤 정책에서도 참조하지 않으므로 삭제해도 안전합니다."
-pause = "일시 중지"
-resume = "재개"
-subtitle = "{{type}} · {{status}}"
-usedBy = "사용 중"
-
 [portal.sources.empty]
 description = "정책이 문서를 가져올 위치를 가질 수 있도록 폴더(곧 cloud storage도)를 연결하세요."
 title = "아직 연결된 소스 없음"
@@ -7899,18 +8754,57 @@ inUse = "사용 중"
 total = "연결"
 unused = "미사용"
 
+[portal.sources.networkFields.connection]
+helperText = "서버 주소와 자격 증명이 저장된 연결입니다. 이를 참조하는 모든 소스에서 재사용됩니다."
+label = "연결"
+
+[portal.sources.networkFields.directory]
+helperText = "로그인 홈 또는 공유 루트를 기준으로 폴링할 서버의 폴더입니다. 루트의 경우 비워 두세요."
+label = "폴더"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "소비는 모든 정책이 처리한 후 서버에서 각 파일을 제거합니다."
+label = "읽기 모드"
+
+[portal.sources.networkFields.mode.options]
+consume = "소비: 각 파일을 한 번 처리"
+snapshot = "스냅샷: 실행할 때마다 폴더 다시 읽기"
+
+[portal.sources.networkFields.recursive]
+label = "폴더 깊이"
+
+[portal.sources.networkFields.recursive.options]
+all = "하위 폴더 포함"
+top = "최상위 수준만"
+
 [portal.sources.status]
 active = "활성"
 disabled = "비활성화됨"
 unused = "미사용"
 
 [portal.sources.table]
+documents = "문서"
 source = "소스"
 status = "상태"
 usedBy = "정책"
 
+[portal.sources.types.box]
+description = "팀이 이미 공유하는 Box 폴더에서 문서를 가져옵니다."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "공유 Dropbox 폴더에서 문서를 가져옵니다."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "정책 및 AI 실행 전반에서 팀이 Editor에서 처리한 문서입니다."
 label = "편집기"
+noPolicies = "아직 Editor에서 실행된 정책이 없습니다."
+
+[portal.sources.types.email]
+description = "전용 메일함으로 전송된 첨부 파일을 문서로 변환합니다."
+label = "Email 받은편지함"
 
 [portal.sources.types.folder]
 description = "서버의 디렉터리에서 새 문서를 감시합니다."
@@ -7943,25 +8837,80 @@ label = "폴더 깊이"
 all = "하위 폴더 포함"
 top = "최상위 수준만"
 
+[portal.sources.types.ftp]
+description = "새 문서를 위해 FTP 또는 FTPS 서버 폴더를 폴링합니다."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "공유 Google Drive 폴더에서 문서를 가져옵니다."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "새 문서를 위해 SMB 네트워크 공유를 감시합니다."
+label = "네트워크 드라이브"
+
+[portal.sources.types.onedrive]
+description = "새 문서를 위해 OneDrive 폴더를 감시합니다."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Amazon S3 또는 S3 호환 버킷에서 문서를 가져옵니다."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "버킷과 자격 증명을 보유한 저장된 연결입니다. 이를 참조하는 모든 소스 및 파이프라인 출력에서 재사용됩니다."
+label = "연결"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "소비는 모든 정책이 처리한 후 버킷에서 각 객체를 제거합니다."
+label = "읽기 모드"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "소비: 각 객체를 한 번 처리"
+snapshot = "스냅샷: 실행할 때마다 버킷 다시 읽기"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "키가 이 접두사로 시작하는 객체만 처리됩니다."
+label = "키 접두사"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "새 문서를 위해 SFTP 드롭 폴더를 폴링합니다."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint 문서 라이브러리에서 문서를 가져옵니다."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "소스"
 
+[portal.sources.types.webhook]
+createNote = "이 webhook을 생성하면 전달 URL과 서명 시크릿이 생성됩니다. 발신자는 해당 URL로 문서를 POST하고, 참조하는 정책은 도착 시 실행됩니다."
+description = "외부 시스템에서 서명된 HTTP POST로 문서를 수신합니다."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "전달 URL"
+secretNote = "서명 시크릿은 webhook이 생성될 때 한 번만 표시됩니다. 재발급하려면 소스를 다시 생성하세요."
+
+[portal.sources.types.webhook.reveal]
+copy = "복사"
+done = "완료"
+secret = "서명 시크릿"
+secretHelp = "이 키(HMAC-SHA256)로 각 전달의 원시 본문에 서명하고 X-Stirling-Signature 헤더로 보내세요."
+secretWarning = "지금 서명 시크릿을 복사하세요. 보안을 위해 한 번만 표시되며 나중에 검색할 수 없습니다."
+title = "Webhook 생성됨"
+url = "전달 URL"
+usage = "각 문서를 binary 콘텐츠 유형(application/pdf 또는 application/octet-stream)의 원시 요청 본문으로 전달 URL에 POST하세요. 참조하는 정책은 도착 시 자동으로 실행됩니다."
+
 [portal.sources.wizard]
-back = "뒤로"
-cancel = "취소"
-continue = "계속"
-editTitle = "소스 편집"
 name = "이름"
 namePlaceholder = "예: 클레임 접수"
-save = "변경 사항 저장"
-subtitle = "{{total}}단계 중 {{current}}단계 · {{label}}"
-title = "소스 연결"
 type = "유형"
 
-[portal.sources.wizard.steps]
-chooseType = "유형 선택"
-configure = "구성"
-review = "검토 및 연결"
+[portal.stepModal]
+close = "닫기"
 
 [portal.usage]
 managePayment = "결제 관리"
@@ -8021,16 +8970,9 @@ summary = "팀을 소유하며, 팀 구성원의 리소스와 공유 구성을 
 2 = "기본 정책을 통한 포털 액세스"
 3 = "구성원이 할 수 있는 모든 작업"
 
-[portal.welcome]
-ariaLabel = "Stirling PDF에 오신 것을 환영합니다"
-badge = "Open-source"
-installEditor = "Editor 설치"
-inviteTeammates = "팀원 초대"
-openInBrowser = "브라우저에서 열기"
-perks = "영구 무료 · Self-hostable"
-subtitle = "세계에서 가장 안전한 PDF Editor는 모든 규모의 팀에게 무료입니다. 60개 이상의 PDF 작업과 SSO가 포함됩니다."
-title = "환영합니다"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · 무제한"
 
 [printFile]
 title = "파일 인쇄"
@@ -8613,6 +9555,14 @@ text = "PDF 페이지를 90도 단위로 시계 방향 또는 반시계 방향
 [rotate.tooltip.header]
 title = "회전 설정 개요"
 
+[ruler]
+clearAll = "모두 지우기"
+hideAllLabels = "모든 레이블 숨기기"
+hideSmallLabels = "작은 레이블 숨기기"
+physicalValues = "물리적"
+scaled = "크기 조정됨"
+showAllLabels = "모든 레이블 표시"
+
 [sanitize]
 desc = "PDF 파일에서 잠재적으로 유해한 요소를 제거합니다."
 sanitizationResults = "무해화 결과"
@@ -8654,31 +9604,45 @@ label = "XMP 메타데이터 제거"
 [sanitize.steps]
 settings = "설정"
 
-[sanitizePdf]
-tags = "청소,보안,안전,위협-제거"
-
 [sanitizePDF]
 title = "PDF 정리"
 
+[sanitizePdf]
+tags = "청소,보안,안전,위협-제거"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "페이지 크기 조정"
 
+[scaleSettings]
+activeScale = "활성 스케일"
+apply = "스케일 적용"
+applyCalibration = "보정 적용"
+calculatedScale = "계산된 스케일"
+calibrate = "보정"
+calibrating = "보정 중"
+calibrationDistanceRequired = "0보다 큰 실제 거리를 입력하세요"
+calibrationInvalid = "이 측정값으로 축척을 계산할 수 없습니다"
+calibrationPaperDistance = "측정된 페이지 거리: {{distance}}"
+calibrationTitle = "축척 보정"
+calibrationTooltip = "알려진 거리를 측정하여 축척을 자동으로 계산합니다"
+customScale = "사용자 지정 축척"
+noneSet = "설정된 사용자 지정 축척 없음"
+presets = "사전 설정 축척"
+ratio = "축척 비율"
+ratioHelp = "비율: 페이지 단위 1 = 실제 단위 X"
+ratioPlaceholder = "예: 100"
+ratioPositive = "비율은 0보다 커야 합니다"
+ratioRequired = "비율은 필수입니다"
+realDistance = "실제 거리"
+realDistancePlaceholder = "예: 5"
+reset = "기본값으로 재설정"
+unit = "단위"
+unitInvalid = "잘못된 단위: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "각도 임계값:"
-10 = "출력에서 흰색 테두리를 방지하기 위해 추가 및 제거되는 테두리의 크기를 설정합니다(기본값: 1)."
-2 = "이미지 회전에 필요한 최소 절대 각도를 설정합니다(기본값: 10)."
-3 = "허용 오차:"
-4 = "예상 배경색 주변의 색상 변화 범위를 결정합니다(기본값: 30)."
-5 = "최소 영역:"
-6 = "사진의 최소 영역 임계값을 설정합니다(기본값: 10000)."
-7 = "최소 윤곽 영역:"
-8 = "사진의 최소 윤곽선 영역 임계값을 설정합니다"
-9 = "테두리 크기:"
-
 [scannerImageSplit]
 submit = "이미지 스캔 추출"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "기능"
 whatThisDoesDesc = "스캔된 페이지나 합성 이미지에서 각 사진을 자동으로 찾아 추출합니다—수동 크롭이 필요 없습니다."
 whenToUse = "사용 시점"
 
+[ScannerImageSplit.selectText]
+1 = "각도 임계값:"
+10 = "출력에서 흰색 테두리를 방지하기 위해 추가 및 제거되는 테두리의 크기를 설정합니다(기본값: 1)."
+2 = "이미지 회전에 필요한 최소 절대 각도를 설정합니다(기본값: 10)."
+3 = "허용 오차:"
+4 = "예상 배경색 주변의 색상 변화 범위를 결정합니다(기본값: 30)."
+5 = "최소 영역:"
+6 = "사진의 최소 영역 임계값을 설정합니다(기본값: 10000)."
+7 = "최소 윤곽 영역:"
+8 = "사진의 최소 윤곽선 영역 임계값을 설정합니다"
+9 = "테두리 크기:"
+
 [search]
 noResults = "결과 없음"
 placeholder = "검색어 입력..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Stirling-PDF 서버가 오프라인이며 로컬 백
 [session]
 expired = "세션이 만료되었습니다. 페이지를 새로 고침하고 다시 시도하세요."
 
-[sessionManagement.tooltip]
-header = "서명 세션 관리"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "새 참여자는 서명 순서의 마지막에 추가됩니다"
-bullet2 = "세션이 최종 완료된 후에는 참여자를 추가할 수 없습니다"
-bullet3 = "각 참여자는 자신의 차례가 되면 알림을 받습니다"
-description = "최종 완료 전에는 언제든지 활성 세션에 참여자를 더 추가할 수 있습니다."
-title = "참여자 추가"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>전체 최종 완료</b>: 모든 참여자가 서명함"
-bullet2 = "<b>부분 최종 완료</b>: 일부 참여자가 아직 서명하지 않음"
-bullet3 = "서명하지 않은 참여자는 최종 문서에서 제외됩니다"
-bullet4 = "최종 완료 후 서명된 PDF를 활성 파일로 로드할 수 있습니다"
-description = "최종 완료는 모든 서명을 하나의 서명된 PDF로 결합합니다. 이 작업은 되돌릴 수 없습니다."
-title = "세션 최종 완료"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "이미 서명한 참여자는 제거할 수 없습니다"
-bullet2 = "제거된 참여자에게는 더 이상 알림이 전송되지 않습니다"
-bullet3 = "서명 순서는 자동으로 조정됩니다"
-description = "참여자는 서명 전에 세션에서 제거할 수 있습니다."
-title = "참여자 제거"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "각 서명은 PDF에 순차적으로 적용됩니다"
-bullet2 = "나중에 서명하는 사람은 이전 서명을 볼 수 있습니다"
-bullet3 = "승인 워크플로우와 법적 인수 절차에 중요합니다"
-description = "세션 생성 시 지정한 순서가 누가 먼저 서명할지를 결정합니다."
-title = "서명 순서"
-
 [settings]
 close = "닫기"
 
+[settings.ai]
+documents = "문서 및 RAG"
+general = "일반"
+limits = "제한 및 성능"
+models = "모델 및 제공업체"
+title = "AI"
+
 [settings.configuration]
 advanced = "고급"
 database = "데이터베이스"
 endpoints = "엔드포인트"
 features = "기능"
+folderAccess = "폴더 접근"
 mcp = "MCP Server"
 storageSharing = "파일 저장 및 공유"
 systemSettings = "시스템 설정"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "기본 PDF 편집기"
 defaultPdfEditorActive = "Stirling PDF가 기본 PDF 편집기입니다"
 defaultPdfEditorChecking = "확인 중..."
 defaultPdfEditorInactive = "다른 앱이 기본값으로 설정됨"
+defaultPdfEditorRemind = "기본값으로 설정하도록 알림"
+defaultPdfEditorRemindDescription = "Stirling PDF가 기본 PDF 애플리케이션이 아닐 때 배너를 표시합니다."
 defaultPdfEditorSet = "이미 기본값"
 defaultStartupView = "시작 시 기본 보기"
 defaultStartupViewDescription = "앱 시작 시 왼쪽 열에서 활성화할 탭을 선택하세요."
@@ -8817,9 +9771,18 @@ languageDescription = "표시 언어를 선택하세요"
 logout = "로그아웃"
 setAsDefault = "기본값으로 설정"
 theme = "테마"
+themeAccent = "강조 색상"
+themeAccentCustom = "사용자 지정 색상"
+themeAccentCustomHint = "사용자 지정(기본값 권장)"
+themeAccentDark = "다크 모드 강조 색상"
+themeAccentDefault = "기본값"
+themeAccentDefaultHint = "기본 테마(권장)"
+themeAccentDescription = "버튼, 링크 및 강조 표시가 이를 따르며 앱에 은은한 색조를 입힙니다. 라이트와 다크는 각각 별도로 적용됩니다. 시스템은 활성 상태인 것을 사용합니다."
+themeAccentLight = "라이트 모드 강조 색상"
 themeDark = "다크"
 themeDescription = "라이트 모드와 다크 모드를 전환합니다"
 themeLight = "라이트"
+themeReset = "테마를 기본값으로 복원"
 themeSystem = "System"
 title = "일반"
 user = "사용자"
@@ -8833,6 +9796,12 @@ intro = "조직을 위한 사용자 인증, 팀 관리, 워크스페이스 기
 learnMore = "문서에서 자세히 알아보기"
 title = "시스템 관리자용"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud에 로그인할 때 열릴 앱을 선택하세요."
+editor = "편집기"
+processor = "처리기"
+title = "로그인 후"
+
 [settings.general.mode]
 fullscreen = "전체 화면"
 sidebar = "사이드바"
@@ -9041,6 +10010,11 @@ security = "보안"
 telegram = "Telegram"
 title = "보안 및 인증"
 
+[settings.signOut]
+confirm = "로그아웃하시겠습니까?"
+submit = "로그아웃"
+title = "로그아웃"
+
 [settings.team]
 title = "팀"
 
@@ -9657,6 +10631,9 @@ uploadButton = "서버로 업로드"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "여기를 클릭하세요"
+fallback = "자동으로 열리지 않았다면,"
+opening = "새 탭에서 Swagger UI를 여는 중..."
 tags = "api,문서,swagger,엔드포인트,개발"
 title = "API 문서"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "이 도구를 실행하려면 활성 파일에서 파일을 
 singleFileScope = "다음에만 적용: {{fileName}}"
 viewerMode = "여러 파일을 선택하려면 파일 편집기로 전환하세요."
 
+[toolFormat]
+ANY = "모든 파일"
+CBR = "만화책 아카이브(CBR)"
+CBZ = "만화책 아카이브(CBZ)"
+CSV = "CSV 파일"
+EBOOK = "전자책"
+EMAIL = "이메일"
+EXCEL = "스프레드시트"
+HTML = "웹 페이지"
+IMAGE = "이미지"
+JAVASCRIPT = "JavaScript 파일"
+JSON = "JSON 파일"
+MARKDOWN = "Markdown 파일"
+NONE = "파일 없음"
+PCL = "PCL 인쇄 파일"
+PDF = "PDF"
+PDF_ENCRYPTED = "암호로 보호된 PDF"
+POSTSCRIPT = "PostScript 파일"
+PPT = "프레젠테이션"
+TEXT = "텍스트 파일"
+VIDEO = "비디오"
+WORD = "Word 문서"
+XML = "XML 파일"
+XPS = "XPS 문서"
+ZIP = "ZIP 아카이브"
+
 [toolPanel]
 alpha = "알파"
 backToAllTools = "모든 도구로 돌아가기"
 collapse = "패널 접기"
 expand = "패널 펼치기"
 goBack = "뒤로 가기"
+pdfTools = "PDF 도구"
 placeholder = "시작하려면 도구를 선택하세요"
 premiumFeature = "프리미엄 기능:"
+searchTools = "도구 검색"
 toolsHeader = "도구"
 viewAllTools = "모든 도구 보기"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "도구를 찾을 수 없음"
 quickAccess = "빠른 액세스"
 searchPlaceholder = "도구 검색..."
 
-[toolPicker.categories]
-advancedTools = "고급 도구"
-recommendedTools = "추천 도구"
-standardTools = "표준 도구"
-
 [toolPicker.subcategories]
 advancedFormatting = "고급 서식"
 automation = "자동화"
@@ -9950,16 +10950,31 @@ title = "사용자"
 you = "(나)"
 
 [users.action]
+cancelInvite = "초대 취소"
 deleteTeam = "팀 삭제"
 disableMfa = "MFA 재설정"
 move = "팀으로 이동"
 reinstate = "복원"
 remove = "조직에서 제거"
+removeTeam = "팀에서 제거"
 rename = "팀 이름 변경"
 resetPw = "비밀번호 재설정"
 suspend = "일시 정지"
 unlock = "계정 잠금 해제"
 
+[users.activity]
+daysAgo = "{{count}}일 전"
+hoursAgo = "{{count}}시간 전"
+justNow = "방금 전"
+minutesAgo = "{{count}}분 전"
+monthsAgo_one = "{{count}}개월 전"
+monthsAgo_other = "{{count}}개월 전"
+never = "없음"
+weeksAgo_one = "{{count}}주 전"
+weeksAgo_other = "{{count}}주 전"
+yearsAgo_one = "{{count}}년 전"
+yearsAgo_other = "{{count}}년 전"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "정책 승인"
@@ -9967,11 +10982,14 @@ editor = "편집기"
 processor = "프로세서"
 
 [users.confirm]
+cancelInviteBody = "{{email}}에 대한 초대를 취소하시겠습니까? 현재 링크로는 참여할 수 없게 됩니다."
+cancelInviteTitle = "초대 취소"
 deleteTeamBody = "{{name}} 팀을 삭제하시겠습니까? 먼저 팀이 비어 있어야 합니다. 구성원을 다른 팀으로 이동해야 하며, 여전히 통합 구성을 소유하고 있으면 안 됩니다."
 deleteTeamTitle = "팀 삭제"
 disableMfaBody = "{{name}}의 MFA 등록을 제거하시겠습니까? 필요한 경우 다음 로그인 시 다시 설정하게 됩니다."
 disableMfaTitle = "MFA 재설정"
 removeBody = "{{name}}을(를) 조직에서 영구적으로 제거하시겠습니까? 이 작업은 되돌릴 수 없습니다."
+removeTeamBody = "{{name}}님을 팀에서 제거하시겠습니까? 계정은 유지되지만 이 팀의 리소스에 대한 접근 권한은 잃게 됩니다."
 removeTitle = "구성원 제거"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "사용자 이름"
 usernameError = "사용자 이름은 최소 3자 이상이어야 합니다"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "{{who}}님이 초대함"
+cancel = "취소"
+count = "{{count}}개 대기 중"
+desc = "아직 참여하지 않은 초대받은 사람들입니다. 수락할 때까지 시트를 차지합니다."
+expiresInDays_one = "{{count}}일 후 만료"
+expiresInDays_other = "{{count}}일 후 만료"
+expiresToday = "오늘 만료"
+title = "대기 중인 초대"
+
 [users.loadError]
 description = "백엔드에 연결하는 중 문제가 발생했거나 접근 권한이 없습니다. 다시 시도하세요."
 title = "멤버를 불러올 수 없습니다"
@@ -10212,9 +11240,11 @@ title = "첨부 파일"
 
 [viewer.bookmarks]
 bookmarkTitle = "북마크 제목"
+bookmarkTitleRequired = "북마크 제목은 필수입니다"
 closeSidebar = "북마크 사이드바 닫기"
 collapseAll = "모든 북마크 접기"
 expandAll = "모든 북마크 펼치기"
+searchPlaceholder = "북마크 검색"
 
 [viewer.comments]
 addComment = "댓글 추가"
@@ -10605,30 +11635,6 @@ title = "워터마크 텍스트"
 image = "이미지"
 text = "텍스트"
 
-[wetSignature.tooltip]
-header = "서명 생성 방법"
-
-[wetSignature.tooltip.draw]
-bullet1 = "펜 색상과 두께 사용자 지정"
-bullet2 = "만족할 때까지 지우고 다시 그리기"
-bullet3 = "터치 기기(태블릿, 휴대폰) 지원"
-description = "마우스 또는 터치스크린을 사용해 손글씨 서명을 만듭니다. 개인적이고 진정성 있는 서명에 적합합니다."
-title = "서명 그리기"
-
-[wetSignature.tooltip.type]
-bullet1 = "여러 글꼴 중에서 선택"
-bullet2 = "텍스트 크기와 색상 사용자 지정"
-bullet3 = "표준화된 서명에 적합"
-description = "입력한 텍스트로 서명을 생성합니다. 빠르고 일관되어 비즈니스 문서에 적합합니다."
-title = "서명 입력"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG 및 기타 이미지 형식 지원"
-bullet2 = "최상의 결과를 위해 투명 배경 권장"
-bullet3 = "서명 영역에 맞도록 이미지 크기 조정"
-description = "미리 만든 서명 이미지를 업로드합니다. 스캔한 서명이나 회사 로고가 있는 경우에 이상적입니다."
-title = "서명 이미지 업로드"
-
 [workbenchBar]
 activeFiles = "활성 파일"
 annotations = "주석"
@@ -10652,6 +11658,7 @@ redact = "가리기"
 rotateLeft = "왼쪽으로 회전"
 rotateRight = "오른쪽으로 회전"
 ruler = "자/측정"
+rulerSettings = "축척 설정"
 save = "저장"
 saveAll = "모두 저장"
 saveAs = "다른 이름으로 저장"
diff --git a/frontend/editor/public/locales/ml-ML/translation.toml b/frontend/editor/public/locales/ml-ML/translation.toml
index 8dcb039c88..08ff2aec4c 100644
--- a/frontend/editor/public/locales/ml-ML/translation.toml
+++ b/frontend/editor/public/locales/ml-ML/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "ഫയലുകൾ തിരഞ്ഞെടുത്തു"
 font = "അക്ഷരം"
 fontSizeTooltip = "പേജ് നമ്പർ ടെക്സ്റ്റിന്റെ പോയിന്റ് സൈസ്. വലിയ നമ്പറുകൾ വലുതായ ടെക്സ്റ്റ് സൃഷ്ടിക്കും."
 fontTypeTooltip = "പേജ് നമ്പറുകളുടെ ഫോണ്ട് കുടുംബം. നിങ്ങളുടെ ഡോക്യുമെന്റിന്റെ ശൈലിയനുസരിച്ച് തിരഞ്ഞെടുക്കുക."
-genericSubmit = "സമർപ്പിക്കുക"
 green = "പച്ച"
 help = "സഹായം"
-imgPrompt = "ചിത്രം(ങ്ങൾ) തിരഞ്ഞെടുക്കുക"
 incorrectPasswordMessage = "നിലവിലെ പാസ്‌വേഡ് തെറ്റാണ്."
 info = "വിവരം"
 invalidUndoData = "റദ്ദാക്കാൻ കഴിയില്ല: അസാധുവായ പ്രവർത്തന ഡാറ്റ"
@@ -62,7 +60,6 @@ loginAgreementTitle = "ലോഗിൻ കരാർ"
 logOut = "ലോഗൗട്ട് ചെയ്യുക"
 marginTooltip = "പേജ് നമ്പറും പേജിന്റെ അരവുമുള്ള ദൂരം."
 moreOptions = "കൂടുതൽ ഓപ്ഷനുകൾ"
-multiPdfPrompt = "PDF-കൾ തിരഞ്ഞെടുക്കുക (2+)"
 never = "ഒരിക്കലും"
 no = "ഇല്ല"
 noFileSelected = "ഫയലൊന്നും തിരഞ്ഞെടുത്തിട്ടില്ല. ദയവായി ഒരെണ്ണം അപ്‌ലോഡ് ചെയ്യുക."
@@ -80,7 +77,6 @@ pageOrderPrompt = "ഇഷ്ടാനുസൃത പേജ് ക്രമം (
 pages = "പേജുകൾ"
 pageSelectionPrompt = "ഇഷ്ടാനുസൃത പേജ് തിരഞ്ഞെടുക്കൽ (പേജ് നമ്പറുകളുടെ കോമയാൽ വേർതിരിച്ച ലിസ്റ്റ് 1,5,6 അല്ലെങ്കിൽ 2n+1 പോലുള്ള ഫംഗ്ഷനുകൾ നൽകുക) :"
 password = "പാസ്‌വേഡ്"
-pdfPrompt = "PDF(കൾ) തിരഞ്ഞെടുക്കുക"
 pin = "ഫയൽ പിൻ ചെയ്യുക (ടൂൾ പ്രവർത്തനത്തിന് ശേഷം സജീവമായി നിലനിർത്തുക)"
 pro = "പ്രോ"
 processingComplete = "താങ്കളുടെ ഫയൽ തയ്യാറായി."
@@ -356,6 +352,7 @@ text = "ഈ അനുമതികൾ ഉപയോഗിച്ച് ഉപയോ
 title = "അനുമതികൾ മാറ്റുക"
 
 [addStamp]
+preview = "സ്റ്റാമ്പ് പ്രിവ്യൂ"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "മാനുവൽ ഡൗൺലോഡുകൾ: ലിങ്ക
 noLanguages = "ക്രമീകരിച്ച ഡയറക്ടറിയിൽ tessdata ഭാഷകളൊന്നും കണ്ടെത്തിയില്ല."
 permissionNotice = "tessdata പാത എഴുതാനാവില്ല. ഡൗൺലോഡുകൾ ബ്രൗസറിൽ തുറക്കും; ദയവായി .traineddata ഫയലുകൾ കൈകൊണ്ട് tessdata ഫോൾഡറിൽ സേവ് ചെയ്യുക."
 
+[admin.settings.ai.documents]
+description = "ഡോക്യുമെന്റുകളിലെ ചോദ്യങ്ങൾക്ക് ഉത്തരം നൽകാൻ ഉപയോഗിക്കുന്ന embedding മോഡലും retrieval ക്രമീകരണങ്ങളും കോൺഫിഗർ ചെയ്യുക. സേവ് ചെയ്യുമ്പോൾ AI engine-ന് ബാധകമാകും."
+title = "Documents & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "engine-ന്റെ സ്വന്തം environment credential ഉപയോഗിക്കാൻ ശൂന്യമായി വിടുക. Self-hosted single-engine deployments-ന് ബാധകം."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "സേവ് ചെയ്തു - നിലവിലെ key നിലനിർത്താൻ ശൂന്യമായി വിടുക"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI-compatible / Ollama embeddings endpoint-ന്റെ Base URL, ഉദാ. http://ollama:11434/v1. വിശ്വസനീയമായ internal endpoint-ലേക്ക് പോയിന്റ് ചെയ്യണം (SSRF-sensitive)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding model പേര്. Free text; നിർദ്ദേശങ്ങൾ സൂചനകൾ മാത്രമാണ്."
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "ഡോക്യുമെന്റ് ടെക്സ്റ്റ് vector embeddings ആക്കാൻ ഉപയോഗിക്കുന്ന provider."
+label = "Embedding provider"
+
+[admin.settings.ai.documents.maxSearches]
+description = "ഓരോ അഭ്യർത്ഥനയ്ക്കും agent നടത്താവുന്ന retrieval searches-ന്റെ പരമാവധി എണ്ണം."
+label = "പരമാവധി searches"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Embedding model മാറ്റുന്നത് ഉടൻ പ്രാബല്യത്തിൽ വരും, പക്ഷേ മുൻ മോഡൽ ഉപയോഗിച്ച് index ചെയ്ത ഡോക്യുമെന്റുകൾ search ശരിയായ ഫലങ്ങൾ നൽകാൻ വീണ്ടും index ചെയ്യണം."
+title = "വീണ്ടും index ചെയ്യേണ്ടതുണ്ട്"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "നിങ്ങൾ embedding model മാറ്റിയിട്ടുണ്ടെങ്കിൽ, search പുതിയ മോഡൽ ഉപയോഗിക്കാൻ നിലവിലുള്ള ഡോക്യുമെന്റുകൾ വീണ്ടും index ചെയ്യുക."
+
+[admin.settings.ai.documents.topK]
+description = "ഓരോ search-ലും retrieve ചെയ്യുന്ന ഏറ്റവും പ്രസക്തമായ chunks-ന്റെ എണ്ണം."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling-നെ Python AI engine-ലേക്ക് കണക്റ്റ് ചെയ്ത് ഏത് AI കഴിവുകളാണ് കാണിക്കേണ്ടതെന്ന് തിരഞ്ഞെടുക്കുക. മാറ്റങ്ങൾ restart ചെയ്യുമ്പോൾ ബാധകമാകും."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "ഓരോ AI സവിശേഷതയും ഓൺ അല്ലെങ്കിൽ ഓഫ് ചെയ്യുക. പ്രവർത്തനരഹിതമാക്കിയ സവിശേഷതകൾ app-ൽ മറയ്ക്കും."
+title = "കഴിവുകൾ"
+
+[admin.settings.ai.general.enabled]
+description = "പ്രധാന switch. ഓഫ് ആയിരിക്കുമ്പോൾ AI tools, agents, അല്ലെങ്കിൽ engine calls ഒന്നും ലഭ്യമല്ല."
+label = "AI പ്രവർത്തനക്ഷമമാക്കുക"
+
+[admin.settings.ai.general.features.chat]
+description = "PDFs-ുമായി പ്രവർത്തിക്കാൻ സംഭാഷണ assistant."
+label = "Chat assistant"
+
+[admin.settings.ai.general.features.classify]
+description = "ഡോക്യുമെന്റുകൾ തരം അല്ലെങ്കിൽ ഉള്ളടക്കം പ്രകാരം സ്വയമേവ വർഗ്ഗീകരിക്കുക."
+label = "ഡോക്യുമെന്റ് വർഗ്ഗീകരണം"
+
+[admin.settings.ai.general.features.createPdf]
+description = "AI agent വഴി (ഉദാ. HTML-ൽ നിന്ന്) ഒരു പുതിയ PDF സൃഷ്ടിക്കുക."
+label = "prompt-ൽ നിന്ന് PDF സൃഷ്ടിക്കുക"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "അപ്‌ലോഡ് ചെയ്ത ഡോക്യുമെന്റിനെ അടിസ്ഥാനമാക്കി ചോദ്യങ്ങൾ ചോദിച്ച് ഉത്തരങ്ങൾ നേടുക."
+label = "ഡോക്യുമെന്റ് ചോദ്യങ്ങൾ"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "ഗണിത, സംഖ്യാത്മക പിശകുകൾക്കായി ഡോക്യുമെന്റുകൾ പരിശോധിക്കുക."
+label = "Math auditor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "PDF-ലേക്ക് AI എഴുതിയ review comments-കളും annotations-കളും ചേർക്കുക."
+label = "PDF comment agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "ഡോക്യുമെന്റ് generation പോലുള്ള കൂടുതൽ ഭാരമുള്ള agent operations-നുള്ള timeout."
+label = "ദൈർഘ്യമേറിയ timeout (seconds)"
+
+[admin.settings.ai.general.note]
+body = "AI engine ഒരു പ്രത്യേക service ആയി പ്രവർത്തിക്കുന്നു. അതിന്റെ shared secret"
+body2 = "ഒരു container environment variable വഴി സജ്ജീകരിച്ചിരിക്കുന്നു. Provider API keys ഈ പേജുകളിൽ നൽകുകയോ engine environment variables ആയി നൽകുകയോ ചെയ്യാം; ഇവിടെ നൽകിയ keys സേവ് ചെയ്യുമ്പോൾ engine-ലേക്ക് push ചെയ്യും."
+title = "AI engine കുറിച്ച്"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "stream ചെയ്ത (token-by-token) chat responses-നുള്ള timeout."
+label = "Stream timeout (seconds)"
+
+[admin.settings.ai.general.test]
+button = "കണക്ഷൻ ടെസ്റ്റ് ചെയ്യുക"
+failBody = "AI engine പ്രതികരിച്ചില്ല. URL, engine container പ്രവർത്തിക്കുന്നുണ്ടോ, AI പ്രവർത്തനക്ഷമമാണോ (പ്രവർത്തനക്ഷമമാക്കിയ ശേഷം restart ആവശ്യമാണ്) എന്നിവ പരിശോധിക്കുക."
+failTitle = "AI engine എത്തിച്ചേരാനാകില്ല"
+okBody = "AI engine health check-ന് പ്രതികരിച്ചു."
+okTitle = "AI engine എത്തിച്ചേരാവുന്നതാണ്"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "engine-ലേക്കുള്ള സാധാരണ AI requests-നുള്ള timeout."
+label = "Request timeout (seconds)"
+
+[admin.settings.ai.general.url]
+description = "Python AI engine-ന്റെ internal URL, ഉദാ. http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "AI requests എത്ര ജോലി ചെയ്യാമെന്നും ഒരേസമയം എത്ര എണ്ണം പ്രവർത്തിക്കാമെന്നും നിയന്ത്രിക്കുന്ന guardrails. സേവ് ചെയ്യുമ്പോൾ AI engine-ന് ബാധകമാകും."
+title = "പരിധികളും പ്രകടനവും"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Guardrail: extracted text ഈ ദൈർഘ്യം കവിഞ്ഞ AI requests നിരസിക്കുക."
+label = "ഓരോ request-ലും പരമാവധി characters"
+
+[admin.settings.ai.limits.maxPages]
+description = "Guardrail: ഇത്രയും PDF pages-ൽ കൂടുതലുള്ള AI requests നിരസിക്കുക."
+label = "ഓരോ request-ലും പരമാവധി pages"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "മുഴുവൻ engine-ലും ഒരേസമയം നടക്കാവുന്ന in-flight model calls-ന്റെ പരമാവധി എണ്ണം."
+label = "Model max concurrency"
+
+[admin.settings.ai.models]
+description = "AI engine ഉപയോഗിക്കുന്ന LLM provider-ഉം smart/fast models-ഉം തിരഞ്ഞെടുക്കുക. സേവ് ചെയ്യുമ്പോൾ AI engine-ന് ബാധകമാകും."
+title = "Models & Providers"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "engine-ന്റെ സ്വന്തം environment credential ഉപയോഗിക്കാൻ ശൂന്യമായി വിടുക. Self-hosted single-engine deployments-ന് ബാധകം."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "സേവ് ചെയ്തു - നിലവിലെ key നിലനിർത്താൻ ശൂന്യമായി വിടുക"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI-compatible / Ollama endpoint-ന്റെ Base URL, ഉദാ. http://ollama:11434/v1."
+label = "Provider base URL"
+warning = "base URL വിശ്വസനീയമായ internal endpoint-ലേക്ക് പോയിന്റ് ചെയ്യണം. engine അതിലേക്ക് server-side requests നടത്തും, അതിനാൽ വിശ്വസനീയമല്ലാത്ത value SSRF-sensitive ആണ്."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "fast model-നുള്ള പരമാവധി output tokens."
+label = "Fast model max tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "ലഘു tasks-നുള്ള ചെലവ് കുറഞ്ഞ, വേഗത്തിലുള്ള model. Free text; നിർദ്ദേശങ്ങൾ സൂചനകൾ മാത്രമാണ്."
+label = "Fast model"
+
+[admin.settings.ai.models.provider]
+description = "engine സംസാരിക്കുന്ന LLM provider."
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "smart model-നുള്ള പരമാവധി output tokens."
+label = "Smart model max tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "സങ്കീർണ്ണ reasoning-നുള്ള ഉയർന്ന കഴിവുള്ള model. Free text; നിർദ്ദേശങ്ങൾ സൂചനകൾ മാത്രമാണ്."
+label = "Smart model"
+
+[admin.settings.ai.saved]
+body = "മാറ്റങ്ങൾ സ്വയമേവ AI engine-ലേക്ക് push ചെയ്യും."
+bodyNoPush = "Settings സേവ് ചെയ്തു. AI engine അടുത്ത തവണ configuration എടുക്കുമ്പോൾ അവ ബാധകമാകും."
+title = "AI settings സേവ് ചെയ്തു"
+
 [admin.settings.badge]
 clickToUpgrade = "പ്ലാൻ വിശദാംശങ്ങൾ കാണാൻ ക്ലിക്ക് ചെയ്യുക"
 
@@ -938,6 +1094,25 @@ label = "സ്റ്റാർട്ടപ്പിൽ വീണ്ടും സ
 description = "സർട്ടിഫിക്കറ്റ് പ്രാബല്യത്തിൽ നിൽക്കുന്ന ദിവസങ്ങൾ"
 label = "സർട്ടിഫിക്കറ്റ് പ്രാബല്യം (ദിവസങ്ങൾ)"
 
+[admin.settings.folderAccess]
+description = "folder sources-നും folder outputs-നും വായിക്കാനും എഴുതാനും അനുവദിച്ചിരിക്കുന്ന directories. ഇത് ഒരു security boundary ആണ്: automations ഈ പട്ടികയ്ക്ക് പുറത്തുള്ള server path-ലേക്ക് ഒരിക്കലും പോയിന്റ് ചെയ്യാൻ കഴിയില്ല."
+securityNote = "folder sources-ും outputs-ും പൂർണ്ണമായി പ്രവർത്തനരഹിതമാക്കാൻ ഇത് ശൂന്യമായി വിടുക. Stirling-ന്റെ സ്വന്തം configuration directory എപ്പോഴും off-limits ആണ്."
+title = "Folder Access"
+
+[admin.settings.folderAccess.implied]
+description = "Stirling കൈകാര്യം ചെയ്യുന്ന ഈ directories എപ്പോഴും അനുവദിച്ചിരിക്കുന്നു, ഇവിടെ മാറ്റാൻ കഴിയില്ല."
+serverStorage = "Server file storage"
+title = "എപ്പോഴും അനുവദിച്ചത്"
+watchedFolder = "Pipeline watched folder"
+
+[admin.settings.folderAccess.roots]
+add = "ചേർക്കുക"
+empty = "folders ഒന്നും അനുവദിച്ചിട്ടില്ല. Folder sources-ും outputs-ും ഇപ്പോൾ പ്രവർത്തനരഹിതമാണ്."
+hint = "absolute paths നൽകുക, ഉദാഹരണത്തിന് /data/inbox."
+label = "Allowed folder roots"
+placeholder = "/data/inbox"
+remove = "folder root നീക്കംചെയ്യുക"
+
 [admin.settings.general]
 description = "ബ്രാൻഡിംഗ്, ഡീഫാൾട്ട് പെരുമാറ്റം എന്നിവ ഉൾപ്പെടെ സിസ്റ്റം-വ്യാപക ആപ്ലിക്കേഷൻ സജ്ജീകരണങ്ങൾ ക്രമീകരിക്കുക."
 system = "സിസ്റ്റം"
@@ -1842,6 +2017,15 @@ export = "എക്സ്പോർട്ട്"
 accessDenied = "ആക്‌സസ് നിരസിച്ചു"
 insufficientPermissions = "ഈ പ്രവർത്തനം നടത്താൻ നിങ്ങൾക്ക് അനുമതിയില്ല."
 
+[auth.callback]
+completing = "authentication പൂർത്തിയാക്കുന്നു"
+invalidToken = "OAuth login പരാജയപ്പെട്ടു - invalid token."
+missingToken = "OAuth login പരാജയപ്പെട്ടു - token ലഭിച്ചില്ല."
+oauthFailed = "OAuth login പരാജയപ്പെട്ടു. ദയവായി വീണ്ടും ശ്രമിക്കുക."
+pleaseWait = "നിങ്ങളെ sign in ചെയ്യുന്നത് പൂർത്തിയാക്കുന്നത് വരെ ദയവായി കാത്തിരിക്കുക."
+signedOut = "നിങ്ങൾ sign out ചെയ്തു. ദയവായി വീണ്ടും sign in ചെയ്യുക."
+windowMayClose = "പൂർത്തിയായാൽ നിങ്ങൾക്ക് ഈ window അടയ്ക്കാം."
+
 [auth.displayName]
 guest = "അതിഥി"
 user = "ഉപയോക്താവ്"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "JavaScript, എംബെഡഡ് ഫയലുകൾ പ
 description = "ഈ ടൂൾ ഉള്ളടക്കത്തെ അടിസ്ഥാനമാക്കി PDF ഫയലുകൾ സ്വയം പുനർനാമകരണം ചെയ്യും. രേഖയിലെ ടെക്സ്റ്റിൽ നിന്ന് ഏറ്റവും അനുയോജ്യമായ ശീർഷകം കണ്ടെത്താൻ ഇത് വിശകലനം ചെയ്യും."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "സ്വയമേവ തിരിക്കുക"
+tags = "സ്വയമേവ തിരിക്കുക,orientation ശരിയാക്കുക,തലകീഴായി,വശത്തേക്ക്,നേരെയാക്കുക,orient,orientation കണ്ടെത്തുക,rotation ശരിയാക്കുക,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "വിശ്വാസ്യത threshold"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "OCR മാത്രം"
+text = "Text മാത്രം"
+title = "കണ്ടെത്തൽ രീതി"
+
+[autoRotate.error]
+failed = "PDF സ്വയമേവ തിരിക്കുമ്പോൾ ഒരു പിശക് സംഭവിച്ചു."
+
+[autoRotate.inferUndetected]
+title = "കുറഞ്ഞ വിശ്വാസ്യതയുള്ള pages പൊരുത്തപ്പെടാൻ തിരിക്കുക"
+
+[autoRotate.report]
+applied = "{{degrees}}° CW"
+confidenceValue = "വിശ്വാസ്യത {{value}}"
+noChange = "മാറ്റമില്ല"
+pageLabel = "Page {{number}}"
+summary = "{{total}} pages-ൽ {{rotated}} തിരിച്ചു, {{unchanged}} അതേപടി വിട്ടു"
+title = "കണ്ടെത്തൽ റിപ്പോർട്ട്"
+
+[autoRotate.report.method]
+inferred = "പൊരുത്തപ്പെടുത്തി"
+none = "ഒഴിവാക്കി"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "threshold-ന് താഴെ"
+blankPage = "Page ശൂന്യമാണ്"
+inferredFromDocument = "മറ്റ് pages പോലെ തന്നെ"
+noDominantDirection = "മിശ്ര text directions"
+osdFailed = "വായിക്കാവുന്ന text കണ്ടെത്തിയില്ല"
+osdNoVerdict = "ഏത് ദിശയാണ് മുകളെന്ന് പറയാനായില്ല"
+tesseractUnavailable = "OCR ഇൻസ്റ്റാൾ ചെയ്തിട്ടില്ല"
+tooFewGlyphs = "വളരെ കുറച്ച് text"
+
+[autoRotate.results]
+title = "Auto Rotate ഫലങ്ങൾ"
+
+[autoRotate.settings]
+title = "Settings"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "ഒരു page തിരിക്കുന്നതിന് മുമ്പ് പരിശോധനയ്ക്ക് എത്ര ഉറപ്പ് വേണമെന്നത്. കൂടുതൽ pages തിരിക്കാൻ ഇത് കുറയ്ക്കുക, കൂടുതൽ pages തൊടാതെ വിടാൻ ഇത് കൂട്ടുക."
+title = "വിശ്വാസ്യത threshold"
+
+[autoRotate.tooltip.description]
+text = "ഓരോ page ഏത് ദിശയിലായിരിക്കണമെന്ന് കണ്ടെത്തി ശരിയായ ദിശയിലേക്ക് തിരിക്കുന്നു. ഇതിനകം നേരെയിരിക്കുന്ന pages അങ്ങനെ തന്നെ വിടും."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto ആദ്യം page-ലെ text വായിക്കുന്നു, അത് മതിയാകുന്നില്ലെങ്കിൽ page ഒരു image ആയി പരിശോധിക്കുന്നു. Text മാത്രം image check ഒഴിവാക്കുന്നു, ഒരിക്കലും scan ചെയ്തിട്ടില്ലാത്ത documents-ന് ഇത് ഏറ്റവും വേഗമാണ്. OCR മാത്രം ഓരോ page-നെയും image ആയി കാണും."
+title = "കണ്ടെത്തൽ രീതി"
+
+[autoRotate.tooltip.header]
+title = "Auto Rotate"
+
+[autoRotate.tooltip.inferUndetected]
+text = "ശൂന്യമായ അല്ലെങ്കിൽ ഏകദേശം ശൂന്യമായ pages സ്വതന്ത്രമായി പരിശോധിക്കാൻ കഴിയില്ല. വായിക്കാൻ കഴിഞ്ഞ ഓരോ page-നും ഒരേ തിരിവ് ആവശ്യമാണെങ്കിൽ, ഇവയും അതിനോട് പൊരുത്തപ്പെടാൻ തിരിക്കും."
+title = "കുറഞ്ഞ വിശ്വാസ്യതയുള്ള pages പൊരുത്തപ്പെടാൻ തിരിക്കുക"
+
 [autoSizeSplitPDF]
 tags = "pdf,വിഭജിക്കുക,പ്രമാണം,സംഘടന"
 
@@ -2189,33 +2440,6 @@ keywords = "കീവേഡുകൾ: odd, even"
 numbers = "സംഖ്യകൾ/പരിധികൾ: 5, 10-20"
 progressions = "പുരോഗതികൾ: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "സർട്ടിഫിക്കറ്റ് തരങ്ങൾ"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "സിസ്റ്റം അഡ്മിൻമാർ നിയന്ത്രിക്കുന്നു"
-bullet2 = "അധികാരപ്പെടുത്തിയ ഉപയോക്താക്കൾ തമ്മിൽ പങ്കിടുന്നു"
-bullet3 = "വ്യക്തിയുടേതല്ല, കമ്പനിയുടെ ഐഡന്റിറ്റിയെ പ്രതിനിധീകരിക്കുന്നു"
-bullet4 = "ഏറ്റവും നല്ലത്: ഔദ്യോഗിക ഡോക്യുമെന്റുകൾ, ടീം ഒപ്പുകൾ"
-description = "നിങ്ങളുടെ ഓർഗനൈസേഷൻ നൽകുന്ന ഒരു ഷെയർഡ് സർട്ടിഫിക്കറ്റ്. കമ്പനി-വ്യാപക ഒപ്പിടൽ അധികാരത്തിന് ഉപയോഗിക്കുന്നു."
-title = "ഓർഗനൈസേഷൻ സർട്ടിഫിക്കറ്റ്"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "ആദ്യം ഉപയോഗിക്കുമ്പോൾ സ്വയം സൃഷ്ടിക്കുന്നു"
-bullet2 = "നിങ്ങളുടെ ഉപയോക്തൃ അക്കൗണ്ടുമായി ബന്ധിപ്പിച്ചിരിക്കുന്നത്"
-bullet3 = "മറ്റു ഉപയോക്താക്കൾക്കൊപ്പം പങ്കിടാൻ കഴിയില്ല"
-bullet4 = "ഏറ്റവും നല്ലത്: വ്യക്തിഗത ഡോക്യുമെന്റുകൾ, വ്യക്തിഗത ഉത്തരവാദിത്തം"
-description = "നിങ്ങളുടെ ഉപയോക്തൃ അക്കൗണ്ടിന് പ്രത്യേകമായി സ്വയം സൃഷ്ടിച്ച സർട്ടിഫിക്കറ്റ്. വ്യക്തിഗത ഒപ്പുകൾക്ക് അനുയോജ്യം."
-title = "പേഴ്‌സണൽ സർട്ടിഫിക്കറ്റ്"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX ഫയലും പാസ്‌വേഡും ആവശ്യമാണ്"
-bullet2 = "ബാഹ്യ Certificate Authorities നൽകുന്നവയായിരിക്കും"
-bullet3 = "നിയമപരമായ ഡോക്യുമെന്റുകൾക്ക് ഉയർന്ന വിശ്വാസനില"
-bullet4 = "ഏറ്റവും നല്ലത്: നിയമപരമായ കരാറുകൾ, ബാഹ്യ സാധൂകരണം"
-description = "നിങ്ങളുടെ സ്വന്തം PKCS#12 സർട്ടിഫിക്കറ്റ് ഫയൽ ഉപയോഗിക്കുക. സർട്ടിഫിക്കറ്റ് ഗുണങ്ങളിലേയ്ക്കുള്ള പൂർണ്ണ നിയന്ത്രണം നൽകുന്നു."
-title = "ഇഷ്ടാനുസൃത P12 അപ്‌ലോഡ് ചെയ്യുക"
-
 [certSign]
 awaitingSignatures = "ഒപ്പുകൾ കാത്തിരിക്കുന്നു"
 chooseCertificate = "സർട്ടിഫിക്കറ്റ് ഫയൽ തിരഞ്ഞെടുക്കുക"
@@ -2542,34 +2766,6 @@ server = "സെർവർ"
 stepTitle = "സർട്ടിഫിക്കറ്റിന്റെ ഉറവിടം"
 upload = "അപ്‌ലോഡ്"
 
-[certSign.tooltip.header]
-title = "സിഗ്നേച്ചറുകൾ പരിപാലിക്കൽ കുറിച്ച്"
-
-[certSign.tooltip.overview]
-bullet1 = "നിലവിലുള്ള ഒപ്പുകളും അവയുടെ സാധുതയും പരിശോധിക്കുക"
-bullet2 = "ഒപ്പിടുന്നവനും സർട്ടിഫിക്കറ്റുകളുടെയും വിശദവിവരങ്ങൾ കാണുക"
-bullet3 = "നിങ്ങളുടെ ഡോക്യുമെന്റുകൾ സുരക്ഷിതമാക്കാൻ പുതിയ ഡിജിറ്റൽ ഒപ്പുകൾ ചേർക്കുക"
-bullet4 = "എളുപ്പത്തിൽ നാവിഗേഷൻ നൽകി ഒന്നിലധികം ഫയലുകൾക്ക് പിന്തുണ"
-text = "ഈ ടൂൾ നിങ്ങളുടെ PDF-കൾ ഡിജിറ്റൽ ഒപ്പിട്ടിട്ടുണ്ടോ എന്ന് പരിശോധിക്കാനും പുതിയ ഡിജിറ്റൽ ഒപ്പുകൾ ചേർക്കാനും അനുവദിക്കുന്നു. ഡിജിറ്റൽ ഒപ്പുകൾ ആരാണ് ഒരു ഡോക്യുമെന്റ് സൃഷ്ടിച്ചതോ അംഗീകരിച്ചതോ എന്ന് തെളിയിക്കുകയും ഒപ്പിട്ടതിന് ശേഷം അത് മാറ്റമാണോ വന്നതെന്ന് കാണിക്കുകയും ചെയ്യുന്നു."
-title = "ഈ ടൂൾ എന്താണ് ചെയ്യുന്നത്?"
-
-[certSign.tooltip.signing]
-bullet1 = "PEM, PKCS12, JKS, സെർവർ സർട്ടിഫിക്കറ്റ് ഫോർമാറ്റുകൾ പിന്തുണയ്ക്കുന്നു"
-bullet2 = "PDF-ൽ ഒപ്പ് കാണിക്കാനോ മറയ്ക്കാനോ ഓപ്ഷൻ"
-bullet3 = "കാരണം, സ്ഥലം, ഒപ്പിടുന്നവന്റെ പേര് എന്നിവ ചേർക്കുക"
-bullet4 = "ദൃശ്യ ഒപ്പുകൾ ഏത് പേജിൽ വെക്കണമെന്ന് തിരഞ്ഞെടുക്കുക"
-bullet5 = "ലളിതമായ 'Sign with Stirling-PDF' ഓപ്ഷനിന് സെർവർ സർട്ടിഫിക്കറ്റ് ഉപയോഗിക്കുക"
-text = "ഒരു PDF ഒപ്പിടാൻ, നിങ്ങൾക്ക് ഒരു ഡിജിറ്റൽ സർട്ടിഫിക്കറ്റ് (ഉദാ., PEM, PKCS12, അല്ലെങ്കിൽ JKS) ആവശ്യമുണ്ട്. ഒപ്പിനെ ഡോക്യുമെന്റിൽ ദൃശ്യമാക്കാനോ സുരക്ഷയ്ക്കായി അദൃശ്യമാക്കാനോ നിങ്ങൾക്ക് തിരഞ്ഞെടുക്കാം."
-title = "ഒപ്പുകൾ ചേർക്കൽ"
-
-[certSign.tooltip.validation]
-bullet1 = "ഒപ്പുകൾ സാധുവാണോ അസാധുവാണോ എന്ന് കാണിക്കുന്നു"
-bullet2 = "ഒപ്പിടുന്നവരുടെ വിവരങ്ങളും ഒപ്പിട്ട തീയതിയും പ്രദർശിപ്പിക്കുന്നു"
-bullet3 = "ഒപ്പിട്ടതിന് ശേഷം ഡോക്യുമെന്റ് മാറ്റപ്പെട്ടിട്ടുണ്ടോയെന്ന് പരിശോധിക്കുന്നു"
-bullet4 = "പരിശോധനയ്ക്കായി ഇച്ഛാനുസൃത സർട്ടിഫിക്കറ്റുകൾ ഉപയോഗിക്കാം"
-text = "നിങ്ങൾ ഒപ്പുകൾ പരിശോധിക്കുമ്പോൾ, അവ സാധുവാണോ, ആരാണ് ഒപ്പിട്ടത്, എപ്പോൾ ഒപ്പിട്ടത്, ഒപ്പിട്ടതിന് ശേഷം ഡോക്യുമെന്റിൽ മാറ്റമുണ്ടോ എന്നിവ ടൂൾ അറിയിക്കും."
-title = "ഒപ്പുകൾ പരിശോധന"
-
 [changeCreds]
 changeUsername = "നിങ്ങളുടെ യൂസർനെയിം അപ്‌ഡേറ്റ് ചെയ്യുക. അപ്‌ഡേറ്റിന് ശേഷം നിങ്ങൾ ലോഗ് ഔട്ട് ചെയ്യപ്പെടും."
 credsUpdated = "അക്കൗണ്ട് അപ്‌ഡേറ്റ് ചെയ്തു"
@@ -2824,6 +3020,7 @@ next = "അടുത്തത്"
 preview = "മുന്‍കാഴ്ച"
 previous = "മുൻപ്"
 refresh = "പുതുക്കുക"
+remaining = "ബാക്കി"
 retry = "വീണ്ടും ശ്രമിക്കുക"
 save = "സംരക്ഷിക്കുക"
 
@@ -3264,24 +3461,6 @@ description = "വെബ്സൈറ്റ് ശരിയായി പ്രവ
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "ഉന്നത മോണിറ്ററിംഗ്"
-allInOneWorkspace = "ഓൾ-ഇൻ-വൺ PDF വർക്ക്‌സ്‌പേസ് (viewer, tools & agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Dedicated support & SLAs"
-fasterThroughput = "10x വേഗത്തിലുള്ള throughput"
-fullyPrivateFiles = "പൂർണ്ണ സ്വകാര്യ ഫയലുകൾ"
-largeFileProcessing = "വലിയ ഫയൽ പ്രോസസ്സിംഗ്"
-orgWideAccess = "സംഘടനാതല ആക്‌സസ് നിയന്ത്രണങ്ങൾ"
-premiumAiModels = "പ്രീമിയം AI മോഡലുകൾ"
-prioritySupport = "പ്രാഥമിക പിന്തുണ"
-privateDocCloud = "സ്വകാര്യ ഡോക്യുമെന്റ് ക്ലൗഡ്"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "സുരക്ഷിത API ആക്‌സസ്"
-standardThroughput = "സ്റ്റാൻഡേഡ് throughput"
-unlimitedApiAccess = "പരിധിയില്ലാത്ത API ആക്‌സസ്"
-unlimitedSeats = "പരിധിയില്ലാത്ത സീറ്റുകൾ"
-
 [crop]
 autoCrop = "ശൂന്യസ്ഥലം സ്വയം ക്രോപ്പ് ചെയ്യുക"
 noFileSelected = "ക്രോപ്പ് ആരംഭിക്കാൻ ഒരു PDF ഫയൽ തിരഞ്ഞെടുക്കുക"
@@ -3346,6 +3525,7 @@ message = "സ്വതേയുള്ള PDF ഹാൻഡ്ലർ സെറ്
 title = "പിശക്"
 
 [defaultApp.prompt]
+dontRemind = "വീണ്ടും ഓർമ്മിപ്പിക്കരുത്"
 message = "PDF ഫയലുകൾ തുറക്കാനുള്ള സ്വതേയുള്ള ആപ്പായി Stirling PDF-നെ നിർണ്ണയിക്കുക."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "ഗ്രൂപ്പുകൾ ഇഷ്ടാനുസൃത
 dropHint = "തുടങ്ങാൻ ഫയലുകൾ തുറക്കുക"
 dropToAdd = "Drop files to add"
 expand = "സൈഡ്ബാർ വിപുലീകരിക്കുക"
-files = "ഫയലുകൾ"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ക്രമീകരിച്ചിട്ടില്ല"
 leaveMyFiles = "എന്റെ ഫയലുകൾ വിടുക"
+library = "PDF Library"
 myFiles = "എന്റെ ഫയലുകൾ"
 noFiles = "ഫയലുകളൊന്നുമില്ല"
 openFileManager = "ഫയൽ മാനേജർ തുറക്കുക"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "ചേർക്കുക"
-addLabel = "ഒരു ലേബൽ ചേർക്കുക…"
-categoryIconAria = "{{name}}-ക്കായി ഒരു ഐക്കൺ തിരഞ്ഞെടുക്കുക"
-createCategory = "വിഭാഗം സൃഷ്ടിക്കുക"
-delete = "വിഭാഗം ഇല്ലാതാക്കുക"
 done = "പൂർത്തിയായി"
-hide = "വിഭാഗം മറയ്ക്കുക"
-newCategory = "പുതിയ വിഭാഗത്തിന്റെ പേര്…"
-removeLabel = "{{name}} നീക്കം ചെയ്യുക"
-rename = "പേരുമാറ്റുക"
 reset = "ഡിഫോൾട്ടുകളിലേക്ക് പുനഃസജ്ജമാക്കുക"
-search = "ലേബലുകൾ തിരയുക…"
-show = "വിഭാഗം കാണിക്കുക"
 subtitle = "നിങ്ങളുടെ ഫയലുകൾ പാരന്റ് വിഭാഗങ്ങളായി ഗ്രൂപ്പ് ചെയ്യുക. നിലവിലുള്ളതോ പുതിയതോ ആയ ലേബലുകൾ ഒരു വിഭാഗത്തിലേക്ക് ചേർക്കുക, അതിന്റെ പേര് മാറ്റുക, അല്ലെങ്കിൽ നിങ്ങളുടെ സ്വന്തം വിഭാഗം സൃഷ്ടിക്കുക. നിങ്ങളുടെ വിഭാഗങ്ങളിലൊന്നിലും ഇല്ലാത്ത ഫയലുകൾ “മറ്റുള്ളവ” എന്നതിന് കീഴിൽ കാണിക്കും."
 title = "സൈഡ്‌ബാർ വിഭാഗങ്ങൾ"
 
@@ -3808,6 +3977,7 @@ refresh = "സെർവറിൽ നിന്ന് റിഫ്രഷ് ചെ
 remove = "ഇല്ലാതാക്കുക"
 removeVersion = "ഈ വേർഷൻ നീക്കുക"
 rename = "പേര് മാറ്റുക"
+renamed = "പേരുമാറ്റി"
 renameFolder = "ഫോൾഡറിന്റെ പേര് മാറ്റുക"
 resizeFolderTree = "ഫോൾഡർ ട്രിയുടെ വലുപ്പം മാറ്റുക (അറോ കീകൾ, വലുതിന് Shift; ഓട്ടോ-ഫിറ്റ് ചെയ്യാൻ ഡബിൾ-ക്ലിക്ക്)"
 save = "സംരക്ഷിക്കുക"
@@ -3910,9 +4080,7 @@ count = "ഫയലുകൾ"
 folder = "ഫോൾഡർ"
 labels = "ലേബലുകൾ"
 modified = "മാറ്റിയത്"
-name = "പേര്"
 size = "വലുപ്പം"
-toolHistoryAtVersion = "കൂട്ടിച്ചേർന്ന ടൂൾ ചെയിൻ"
 totalSize = "ആകെ വലുപ്പം"
 type = "തരം"
 versionHistory = "വേർഷൻ യാത്ര"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "എല്ലാം സേവ് ചെയ്തു"
+extractCsvError = "CSV extract ചെയ്യാനായില്ല"
+extractXlsxError = "XLSX extract ചെയ്യാനായില്ല"
 flattenAfterFilling = "പൂരിപ്പിച്ചതിന് ശേഷം ഫ്ലാറ്റൻ ചെയ്യുക"
+requiredAbbreviation = "ആവ."
+requiredFieldsError = "ആവശ്യമായ എല്ലാ fields-ഉം പൂരിപ്പിക്കുക"
 rescanFields = "ഫീൽഡുകൾ വീണ്ടും സ്കാൻ ചെയ്യുക"
 rescanFormFields = "ഫോം ഫീൽഡുകൾ വീണ്ടും സ്കാൻ ചെയ്യുക"
 save = "സംരക്ഷിക്കുക"
+saveShortcut = "സേവ് ചെയ്യാൻ Ctrl+S"
+unsavedChanges = "സേവ് ചെയ്യാത്ത മാറ്റങ്ങൾ"
 
 [formFill.sidebar]
 close = "സൈഡ്ബാർ അടയ്ക്കുക"
@@ -4309,6 +4484,11 @@ desc = "കണ്ടെത്തിയ ഹെഡറിനെ അടിസ്ഥ
 tags = "ഓട്ടോ-ഡിറ്റക്ട്,ഹെഡർ-അടിസ്ഥാനത്തിൽ,സംഘടിപ്പിക്കുക,പുനർലേബൽ"
 title = "PDF ഓട്ടോ റീനെയിം"
 
+[home.autoRotate]
+desc = "ഓരോ page-ന്റെയും orientation കണ്ടെത്തി സ്വയമേവ നേരെയാക്കി തിരിക്കുക."
+tags = "സ്വയമേവ തിരിക്കുക,orientation ശരിയാക്കുക,തലകീഴായി,വശത്തേക്ക്,നേരെയാക്കുക,orient,orientation കണ്ടെത്തുക,rotation ശരിയാക്കുക,auto orient,scanned,OSD"
+title = "Auto Rotate"
+
 [home.autoSizeSplitPDF]
 tags = "ഓട്ടോ,സ്പ്ലിറ്റ്,വലുപ്പം"
 title = "സൈസ്/കൗണ്ട് ഓട്ടോ സ്പ്ലിറ്റ്"
@@ -4608,13 +4788,13 @@ hint = "PDF-ലിടാൻ PNG, JPG, SVG, അല്ലെങ്കിൽ മറ
 label = "ഇമേജ് അപ്‌ലോഡ് ചെയ്യുക"
 placeholder = "ഇമേജ് ഫയൽ തിരഞ്ഞെടുക്കുക"
 
-[imageToPdf]
-tags = "പരിവർത്തനം,img,jpg,ചിത്രം,ഫോട്ടോ"
-
 [imageToPDF]
 header = "ചിത്രം PDF-ലേക്ക്"
 title = "ചിത്രം PDF-ലേക്ക്"
 
+[imageToPdf]
+tags = "പരിവർത്തനം,img,jpg,ചിത്രം,ഫോട്ടോ"
+
 [infoBanner]
 dismiss = "അടയ്ക്കുക"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "നിങ്ങൾ ക്ഷണിക്കപ്പെട്ട
 
 [landing]
 addFiles = "ഫയലുകൾ ചേർക്കുക"
-heroSubtitle = "തുടങ്ങാൻ ഒരു PDF വലിച്ചിടുകയോ നിലവിലുള്ളത് ചേർക്കുകയോ ചെയ്യുക."
 mobileUpload = "മൊബൈൽ മുതൽ അപ്ലോഡ് ചെയ്യുക"
 openFromComputer = "കമ്പ്യൂട്ടറിൽ നിന്ന് തുറക്കുക"
 uploadFromComputer = "കമ്പ്യൂട്ടറിൽ നിന്ന് അപ്ലോഡ് ചെയ്യുക"
-workbenchEmptyStateHero = "ഒരു PDF എവിടെയും ഇടുക"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "ലോഗിൻ"
 magicLinkSent = "മാജിക് ലിങ്ക് {{email}}-ലേക്ക് അയച്ചു! നിങ്ങളുടെ ഇമെയിൽ പരിശോധിച്ച് സൈൻ ഇൻ ചെയ്യാൻ ലിങ്ക് ക്ലിക്ക് ചെയ്യുക."
 mfaCode = "സ്ഥിരീകരണ കോഡ്"
 mfaRequired = "രണ്ടുഘട്ട കോഡ് ആവശ്യമാണ്"
+noAccount = "account ഇല്ലേ?"
 or = "അല്ലെങ്കിൽ"
 password = "പാസ്‌വേഡ്"
 passwordChangedSuccess = "പാസ്‌വേഡ് വിജയകരമായി മാറ്റി! നിങ്ങളുടെ പുതിയ പാസ്‌വേഡുമായ് ദയവായി സൈൻ ഇൻ ചെയ്യുക."
@@ -4715,26 +4894,10 @@ signInWith = "ഇത് ഉപയോഗിച്ച് സൈൻ ഇൻ ചെ
 title = "സൈൻ ഇൻ ചെയ്യുക"
 unexpectedError = "പ്രതീക്ഷിക്കാത്ത പിശക്: {{message}}"
 updatePassword = "പാസ്‌വേഡ് അപ്‌ഡേറ്റ് ചെയ്യുക"
-useEmailInstead = "ഇമെയിൽ ഉപയോഗിച്ച് ലോഗിൻ"
 useMagicLink = "പകരം മാജിക് ലിങ്ക് ഉപയോഗിക്കുക"
 username = "യൂസർനെയിം"
 youAreLoggedIn = "നിങ്ങൾ ലോഗിൻ ചെയ്തിരിക്കുന്നു!"
 
-[login.slides.edit]
-alt = "PDF-കൾ എഡിറ്റ് ചെയ്യുക"
-subtitle = "PDF-കൾ redact, sign, read, manipulate ചെയ്യാൻ സഹായിക്കുന്ന പന്ത്രണ്ടിലധികം tools ഉള്ളതിനാൽ, നിങ്ങൾ അന്വേഷിക്കുന്നത് തീർച്ചയായും കണ്ടെത്തും."
-title = "ആവശ്യമായ വിവരങ്ങൾ പ്രദർശിപ്പിക്കാനും/സുരക്ഷിതമാക്കാനും PDF-കൾ എഡിറ്റ് ചെയ്യുക"
-
-[login.slides.overview]
-alt = "Stirling PDF അവലോകനം"
-subtitle = "PDF-കൾ convert, sign, redact ചെയ്ത് മാനേജുചെയ്യാൻ കഴിയുന്ന, സ്വകാര്യത-ആദ്യം cloud suite, കൂടെ 50+ ശക്തമായ tools."
-title = "എല്ലാ PDF ആവശ്യങ്ങൾക്കും നിങ്ങളുടെ ഒറ്റ-സ്റ്റോപ്പ് ഷോപ്പ്."
-
-[login.slides.secure]
-alt = "PDF-കൾ സുരക്ഷിതമാക്കുക"
-subtitle = "പാസ്‌വേഡുകൾ ചേർക്കുക, ഉള്ളടക്കം redact ചെയ്യുക, സർട്ടിഫിക്കറ്റുകൾ എളുപ്പത്തിൽ മാനേജുചെയ്യുക."
-title = "നിങ്ങളുടെ PDF-കളിലെ സെൻസിറ്റീവ് വിവരങ്ങളെ സംരക്ഷിക്കുക"
-
 [margin]
 large = "വലുത്"
 medium = "ഇടത്തരം"
@@ -4976,6 +5139,7 @@ pinButton = "ടൂളുകൾ പ്രവർത്തിപ്പിച്ച
 results = "ടൂൾ പ്രവർത്തിച്ചു കഴിഞ്ഞാൽ, <strong>റിവ്യൂ</strong> ഘട്ടത്തിൽ ഈ പാനലിൽ ഫലങ്ങളുടെ പ്രിവ്യൂ കാണിക്കുകയും പ്രവർത്തനം റദ്ദാക്കുകയോ ഫയൽ ഡൗൺലോഡ് ചെയ്യുകയോ ചെയ്യാനുമാകും."
 runButton = "ടൂൾ ക്രമീകരിച്ച ശേഷം, തെരഞ്ഞെടുത്ത എല്ലാ PDFകളിലും ടൂൾ പ്രവർത്തിപ്പിക്കാൻ ഈ ബട്ടൺ ഉപയോഗിക്കാം."
 selectCropTool = "<strong>ക്രോപ്പ്</strong> ടൂൾ എങ്ങനെ ഉപയോഗിക്കാമെന്ന് കാണിക്കാൻ നമുക്ക് അത് തിരഞ്ഞെടുക്കാം."
+stepOf = "Step {{current}} of {{total}}"
 toolInterface = "ഇതാണ് <strong>ക്രോപ്പ്</strong> ടൂളിന്റെ ഇന്റർഫേസ്. ഇപ്പോഴും പ്രവർത്തിപ്പിക്കാൻ PDF ഫയലുകൾ ചേർത്തിട്ടില്ലാത്തതിനാൽ ഇവിടെ അധികമൊന്നുമില്ലെന്ന് നിങ്ങൾ കാണുന്നു."
 workbench = "ഇതാണ് <strong>വർക്ക്ബെഞ്ച്</strong> - നിങ്ങളുടെ PDFകൾ കാണുകയും തിരുത്തുകയും ചെയ്യുന്ന പ്രധാന പ്രദേശം."
 wrapUp = "എല്ലാം സജ്ജമാണ്! ആപ്പിന്റെ പ്രധാന പ്രദേശങ്ങളും അവ എങ്ങനെ ഉപയോഗിക്കാമെന്നും നിങ്ങൾ പഠിച്ചു. ഈ ടൂർ വീണ്ടും കാണാൻ ഏതുസമയം വേണമെങ്കിലും <strong>സഹായം</strong> ബട്ടൺ അമർത്തുക."
@@ -4988,6 +5152,26 @@ showMeAround = "ടൂർ കാണിക്കുക"
 skipForNow = "ഇപ്പോൾ ഒഴിവാക്കുക"
 skipTheTour = "ടൂർ ഒഴിവാക്കുക"
 
+[onboarding.checklist]
+dismiss = "ഒഴിവാക്കുക"
+title = "Stirling PDF സജ്ജീകരിക്കുക"
+
+[onboarding.checklist.downloadDesktop]
+description = "നിങ്ങളുടെ machine-ൽ Stirling native ആയി run ചെയ്യുക"
+title = "Desktop-നായി Stirling download ചെയ്യുക"
+
+[onboarding.checklist.inviteTeam]
+description = "നിങ്ങളുടെ team-നൊപ്പം സഹകരിക്കുക"
+title = "team members-നെ ക്ഷണിക്കുക"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling മെച്ചപ്പെടുത്താൻ സഹായിക്കുക"
+title = "anonymous usage data പങ്കിടുക"
+
+[onboarding.checklist.takeTour]
+description = "ഒരു quick walkthrough-ൽ Stirling എങ്ങനെ പ്രവർത്തിക്കുന്നുവെന്ന് കാണുക"
+title = "tour കാണുക"
+
 [onboarding.desktopInstall]
 body = "Stirling ഡെസ്ക്ടോപ്പ് ആപ്പായി പ്രവർത്തിക്കുമ്പോൾ ഏറ്റവും മികച്ചതാണ്. നിങ്ങൾക്ക് ഓഫ്‌ലൈൻ ഉപയോഗിക്കാം, ഡോക്യുമെന്റുകൾ വേഗത്തിൽ ആക്‌സസ് ചെയ്യാം, നിങ്ങളുടെ കമ്പ്യൂട്ടറിൽ ലൊക്കലായി എഡിറ്റ് ചെയ്യാനും കഴിയും."
 selectOs = "ഓപ്പറേറ്റിംഗ് സിസ്റ്റം തിരഞ്ഞെടുക്കുക"
@@ -4996,7 +5180,21 @@ titleWithOs = "{{osLabel}}-ക്കായി ഡൗൺലോഡ്"
 
 [onboarding.mfa]
 authenticationCode = "അധികൃതീകരണ കോഡ്"
+description = "ഒരു authenticator app link ചെയ്ത് നിങ്ങളുടെ account സുരക്ഷിതമാക്കുക. QR code scan ചെയ്യുക അല്ലെങ്കിൽ setup key നൽകുക, തുടർന്ന് പൂർത്തിയാക്കാൻ 6-digit code സ്ഥിരീകരിക്കുക."
+enable = "MFA പ്രവർത്തനക്ഷമമാക്കുക"
+enableError = "two-factor authentication പ്രവർത്തനക്ഷമമാക്കാനായില്ല. code പരിശോധിച്ച് വീണ്ടും ശ്രമിക്കുക."
+enterCode = "നിങ്ങളുടെ app-ൽ നിന്നുള്ള 6-digit code നൽകുക."
+enterCodeError = "തുടരാൻ authentication code നൽകുക."
+logout = "Logout"
+openAuthenticator = "Google Authenticator, Authy, അല്ലെങ്കിൽ 1Password തുറക്കുക."
 qrCodeLoading = "നിങ്ങളുടെ QR കോഡ് സൃഷ്ടിക്കുന്നു…"
+regenerateQrCode = "QR code വീണ്ടും സൃഷ്ടിക്കുക"
+scanQrCode = "QR code scan ചെയ്യുക അല്ലെങ്കിൽ താഴെയുള്ള setup key നൽകുക."
+setupError = "two-factor setup ആരംഭിക്കാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
+setupKey = "Setup key (manual entry)"
+stepByStep = "Step-by-step"
+success = "MFA പ്രവർത്തനക്ഷമമാക്കി. നിങ്ങൾക്ക് ഇപ്പോൾ തുടരാം."
+title = "Multi-Factor Authentication Setup"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "ലോഗിൻ മോഡ് സജീവമാക്കിയാൽ, നിങ്ങൾക്ക് ഉപയോക്താക്കളെയും സെറ്റിങ്ങുകളെയും മാനേജ് ചെയ്യാനും സെർവർ ഹെൽത്ത് മോണിറ്റർ ചെയ്യാനും കഴിയും. നിങ്ങളുടെ സെർവറിലെ ആദ്യ <strong>{{freeTierLimit}}</strong> പേർക്ക് Stirling സൗജന്യമായി ഉപയോഗിക്കാം."
@@ -5005,6 +5203,11 @@ adminTitle = "അഡ്മിൻ അവലോകനം"
 userBody = "ടീംമേറ്റ്‌കളെ ക്ഷണിക്കുക, റോളുകൾ നിയോഗിക്കുക, നിങ്ങളുടെ ഡോക്യുമെന്റുകൾ ഒരു സുരക്ഷിത വർക്ക്സ്പേസിൽ ക്രമീകരിച്ച് സൂക്ഷിക്കുക. സോളോ ഉപയോഗത്തേക്കാൾ വളരാൻ തയ്യാറാകുമ്പോൾ ഏത് സമയത്തും ലോഗിൻ മോഡ് പ്രാപ്തമാക്കുക."
 userTitle = "പ്ലാൻ അവലോകനം"
 
+[onboarding.processorIntro]
+body = "Stirling ഇപ്പോൾ <strong>Policies</strong> പ്രവർത്തിപ്പിക്കുന്നു — ഓരോ document എത്തുമ്പോഴും classify, secure, process ചെയ്യുന്ന automated rules. അവ setup ചെയ്ത് runs <strong>Processor</strong>-ൽ monitor ചെയ്യുക."
+cta = "Processor പരിശോധിക്കുക"
+title = "Stirling Processor പരിശോധിക്കുക"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "മുൻകൂർ പണമടച്ച വർഷം"
+
+[payg.prepaid.banner]
+exhausted = "നിങ്ങളുടെ prepaid capacity ഉപയോഗിച്ചു തീർന്നു; metered billing വീണ്ടും തുടങ്ങി. discount നിലനിർത്താൻ top up ചെയ്യുക."
+expiring_one = "നിങ്ങളുടെ prepaid year {{count}} ദിവസത്തിൽ അവസാനിക്കുന്നു. ഉപയോഗിക്കാത്ത capacity കാലഹരണപ്പെടും — പുതിയ വർഷം ആരംഭിക്കാൻ top up ചെയ്യുക."
+expiring_other = "നിങ്ങളുടെ prepaid year {{count}} ദിവസങ്ങളിൽ അവസാനിക്കുന്നു. ഉപയോഗിക്കാത്ത capacity കാലഹരണപ്പെടും — പുതിയ വർഷം ആരംഭിക്കാൻ top up ചെയ്യുക."
+low = "നിങ്ങളുടെ prepaid capacity-യുടെ {{pct}}% മാത്രം ബാക്കി. processing തടസ്സമില്ലാതെ തുടരാൻ എപ്പോൾ വേണമെങ്കിലും top up ചെയ്യുക."
+
+[payg.prepaid.card]
+subtitle = "metered billing-നും spend cap-നും പുറത്തായി ആദ്യം ഉപയോഗിക്കുന്നു."
+title = "Prepaid capacity"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} prepaid credits-ൽ"
+expires = "{{date}}-ന് കാലഹരണപ്പെടും"
+
+[payg.prepaid.state]
+exhausted = "ഉപയോഗിച്ചു തീർന്നു"
+healthy = "ധാരാളം ബാക്കി"
+low = "കുറഞ്ഞുവരുന്നു"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "ഇമെയിലിൽ നിന്ന് ലൈസൻസ്
 success = "ലൈസൻസ് സജീവമായി!"
 successMessage = "നിങ്ങളുടെ ലൈസൻസ് വിജയകരമായി സജീവപ്പെടുത്തി. നിങ്ങൾക്ക് ഇപ്പോൾ ഈ ജാലകം അടയ്ക്കാം."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "പ്രാബല്യപ്പെടുത്തി"
-enforcing = "പ്രാബല്യപ്പെടുത്തുന്നു..."
-failed = "പ്രാബല്യപ്പെടുത്തൽ പരാജയപ്പെട്ടു"
 outputsUnavailable = "നയത്തിന്റെ ഔട്ട്‌പുട്ടുകൾ ഇനി ഡൗൺലോഡ് ചെയ്യാൻ ലഭ്യമല്ല."
 partialOutputsUnavailable = "ചില നയ ഔട്ട്‌പുട്ടുകൾ ഇനി ഡൗൺലോഡ് ചെയ്യാൻ ലഭ്യമല്ല."
-retrying = "തിരക്കിലാണ്, വീണ്ടും ശ്രമിക്കുന്നു..."
 runNotFound = "പ്രാബല്യപ്പെടുത്തൽ റൺ ഇനി കണ്ടെത്താനായില്ല."
-step = "ഘട്ടം {{current}}/{{total}}"
 timedOut = "റൺ പൂർത്തിയാകുന്നതിന് മുമ്പ് പ്രാബല്യപ്പെടുത്തൽ ടൈംഔട്ട് ആയി."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "അടയ്ക്കുക"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "പ്രാബല്യപ്പെടുത്തുന്നു {{names}}"
 applyingProgress = "പ്രാബല്യപ്പെടുത്തുന്നു {{names}} ({{total}} ൽ {{done}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} ഫയലുകളിൽ {{failures}} എണ്ണം 
 failureTitle = "പൂർണ്ണ പ്രാബല്യപ്പെടുത്തൽ ഇല്ലാതെ എക്സ്പോർട്ട് ചെയ്തു"
 printPolicyAppliedBody = "ഒരു നയം പാലിക്കുന്നതിനായി ഈ PDF പുതുക്കി. മാറ്റങ്ങൾ പരിശോധിച്ച് വീണ്ടും പ്രിന്റ് ചെയ്യുക."
 printPolicyAppliedTitle = "പ്രിന്റ് ചെയ്യുന്നതിന് മുമ്പ് നയം പ്രാബല്യപ്പെടുത്തി"
-queued = "+{{count}} ക്യൂവിൽ"
 successTitle = "{{names}} പ്രാബല്യപ്പെടുത്തി"
 summaryMore = "{{first}}, {{second}} കൂടാതെ {{more}} എണ്ണം കൂടി"
 summaryTwo = "{{first}} കൂടാതെ {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "പരിവർത്തനം ചെയ്യുന്നതിന് മുമ്പ് പ്രാബല്യപ്പെടുത്തുന്നു"
-default = "പ്രാബല്യപ്പെടുത്തുന്നു"
-export = "എക്സ്പോർട്ടിന് മുമ്പ് പ്രാബല്യപ്പെടുത്തുന്നു"
-input = "ഇംപോർട്ട് ചെയ്യുമ്പോൾ പ്രാബല്യപ്പെടുത്തുന്നു"
-print = "പ്രിന്റ് ചെയ്യുന്നതിനുമുമ്പ് പ്രാബല്യപ്പെടുത്തുന്നു"
-
-[policies.field]
-accessLog = "ആക്സസ് ലോഗ്"
-archiveAfter = "ഇതിനുശേഷം ആർക്കൈവ് ചെയ്യുക"
-auditTrail = "ഓഡിറ്റ് ട്രെയിൽ"
-belowThreshold = "പരിധിക്കു താഴെ"
-destination = "ലക്ഷ്യസ്ഥാനം"
-frameworks = "ഫ്രെയിംവർക്കുകൾ"
-immutableHold = "മാറ്റാനാകാത്ത ഹോൾഡ്"
-keepFor = "സൂക്ഷിക്കേണ്ട കാലം"
-minConfidence = "കുറഞ്ഞ ആത്മവിശ്വാസം"
-notify = "റൂട്ടിൽ അറിയിക്കുക"
-onViolation = "അനുസരണക്കേട് ഉണ്ടായാൽ"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "ചേർക്കുക"
-addPlaceholder = "ഒരു ലേബൽ ചേർക്കുക…"
-customNote = "നിങ്ങളുടെ ടീമിനായി ഇഷ്ടാനുസൃതമാക്കി."
-defaultNote = "നിങ്ങളുടെ ടീമുമായി പങ്കിടുന്ന ബിൽറ്റ്-ഇൻ ഡിഫോൾട്ട് ഉപയോഗിക്കുന്നു."
-duplicate = "\"{{name}}\" ഇതിനകം നിലവിലുണ്ട്."
-edit = "ലേബലുകൾ തിരുത്തുക"
-empty = "ഇനിയും ലേബലുകളില്ല."
-export = "JSON എക്സ്പോർട്ട് ചെയ്യുക"
-iconAria = "{{name}}-ക്കായി ഒരു ഐക്കൺ തിരഞ്ഞെടുക്കുക"
-import = "JSON ഇമ്പോർട്ട് ചെയ്യുക"
-importError = "ആ ഫയൽ ഇമ്പോർട്ട് ചെയ്യാനായില്ല."
-managedNote = "ടീം ലേബലുകൾ നിങ്ങളുടെ ടീം ലീഡർ മാനേജ് ചെയ്യുന്നു."
-modalSubtitle = "നിങ്ങളുടെ മുഴുവൻ ടീമുമായി പങ്കിട്ടത്. ഓരോ രേഖയ്ക്കും യോജിച്ച ലേബലുകൾ classifier തിരഞ്ഞെടുക്കും."
-modalTitle = "വർഗ്ഗീകരണ ലേബലുകൾ"
-pickIcon = "{{label}} ഐക്കൺ ഉപയോഗിക്കുക"
-removeAria = "{{name}} നീക്കം ചെയ്യുക"
-resetToDefault = "ഡിഫോൾട്ടിലേക്ക് പുനഃസജ്ജമാക്കുക"
-saveForTeam = "ടീമിനായി സംരക്ഷിക്കുക"
-saving = "സംരക്ഷിക്കുന്നു…"
-sectionLabel = "വർഗ്ഗീകരണ ലേബലുകൾ"
-startFromScratch = "ആരംഭത്തിൽ നിന്ന് തുടങ്ങുക"
-teamCount = "ടീം ലേബലുകൾ"
-tooLong = "ലേബലുകൾ പരമാവധി {{max}} അക്ഷരങ്ങൾ മാത്രമേ ആകാവൂ."
-ungrouped = "ഗ്രൂപ്പ് ചെയ്യാത്തത്"
-view = "ലേബലുകൾ കാണുക"
+categoryCount = "categories"
+hideCategory = "category മറയ്ക്കുക"
+labelCount = "labels"
+sharedNote = "ഈ labels built in ആണ്, നിങ്ങളുടെ മുഴുവൻ team-ലും പങ്കിടുന്നു."
+showCategory = "category കാണിക്കുക"
 
 [policies.pii]
 account = "അക്കൗണ്ട് നമ്പറുകൾ (ലേബൽ ചെയ്തവ)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US റൂട്ടിങ് നമ്പറുകൾ (ABA)"
 ssn = "സോഷ്യൽ സെക്യൂരിറ്റി നമ്പറുകൾ"
 
-[policies.settings]
-noneExport = "ഇപ്പോൾ എക്സ്പോർട്ടിൽ നയങ്ങളൊന്നും പ്രവർത്തിക്കുന്നില്ല."
-noneUpload = "ഇപ്പോൾ upload-ൽ നയങ്ങളൊന്നും പ്രവർത്തിക്കുന്നില്ല."
-onExport = "എക്സ്പോർട്ടിൽ"
-onUpload = "upload-ൽ"
-reorderHandle = "ക്രമം മാറ്റാൻ വലിച്ചിടുക"
-runOrderDesc = "ഒരേ trigger-ൽ ഒന്നിലധികം നയങ്ങൾ പ്രവർത്തിക്കുമ്പോൾ, അവ ഈ ക്രമത്തിൽ പ്രവർത്തിക്കും — ഓരോന്നും മുമ്പത്തെ നയത്തിന്റെ ഔട്ട്പുട്ടിൽ. ക്രമം മാറ്റാൻ വലിച്ചിടുക."
-title = "നയ ക്രമീകരണങ്ങൾ"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "നയ ഓപ്ഷനുകൾ"
-policySettings = "നയ ക്രമീകരണങ്ങൾ"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "പരാജയപ്പെട്ട നയങ്ങൾ വീണ്ടും ശ്രമിക്കുക ({{count}})"
-rowProgress = "{{total}} ഫയലുകളിൽ {{completed}} പ്രോസസ് ചെയ്തു"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "നയം എന്താണ്?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "സോഷ്യൽ സെക്യൂരിറ്റി, കാർഡ് നമ്പറുകൾ പോലെയുള്ള സെൻസിറ്റീവ് വിവരങ്ങൾ സ്വയമേവ കണ്ടെത്തി കറുപ്പിച്ചു മറയ്ക്കും — അതിനാൽ പ്രമാണത്തിൽ അവ വായിക്കാൻ സാധിക്കില്ല."
-sanitize = "ഫയലിൽ നിന്നുള്ള മറഞ്ഞിരിക്കുന്ന JavaScript നീക്കം ചെയ്യും, അതിനാൽ ആരെങ്കിലും അത് തുറക്കുമ്പോൾ ഒന്നും സ്വയമേവ പ്രവർത്തിക്കില്ല."
-watermark = "ഓരോ പേജിലും ദൃശ്യമായ ഒരു മുദ്ര (ഉദാ: \"Confidential\") പതിപ്പിക്കും."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "അടയ്ക്കുക"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} നടപ്പിലാക്കുന്നു..."
 badgeRan = "ഈ ഫയലിൽ {{name}} നയം പ്രവർത്തിച്ചു"
+badgeRunning = "{{name}} പ്രവർത്തിക്കുന്നു..."
 blockingAction = "നയം നടപ്പിലാക്കുന്നതിനിടെ {{action}} തടഞ്ഞു, ദയവായി കാത്തിരിക്കുക..."
 dismiss = "ഓവർലേ നിരസിക്കുക"
 enforcingTitle = "നയം നടപ്പിലാക്കുന്നു..."
@@ -6151,6 +6211,7 @@ viewAnyway = "ഫയൽ കാണുക (നയം ഇപ്പോഴും ന
 [policyOption]
 autoRedactPhi = "PHI സ്വയമേവ റിഡാക്റ്റ് ചെയ്യുക"
 blockExport = "എക്സ്പോർട്ട് തടയുക"
+ccpa = "CCPA"
 contracts = "കരാറുകൾ"
 documents = "രേഖകൾ"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor plan"
 subscribed = "Processor plan"
 unlinked = "ലിങ്ക് ചെയ്തിട്ടില്ല"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "രേഖയിൽ നിന്ന് bootstrap ചെയ്യുക"
-sectionsAriaLabel = "Agent builder വിഭാഗങ്ങൾ"
-selectorAriaLabel = "Agents"
-subtitle = "നിങ്ങളുടെ രേഖകൾ classify, extract, route ചെയ്യുന്ന AI agents രൂപകൽപ്പന ചെയ്യുക, പരീക്ഷിക്കുക, ship ചെയ്യുക. Scenarios നിർവചിക്കുക, tool access നിയന്ത്രിക്കുക, golden set പ്രവർത്തിപ്പിക്കുക, ഒരു version publish ചെയ്യുക."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "റദ്ദാക്കുക"
-dropzoneText = "ഒരു sample document തിരഞ്ഞെടുക്കുക (PDF അല്ലെങ്കിൽ ചിത്രം)"
-lead = "ഒരു sample document ഇടുക; നിങ്ങൾക്ക് refine ചെയ്യാവുന്ന scenarios-ഉം extraction schema-യും ഞങ്ങൾ നിർദ്ദേശിക്കും. നിങ്ങൾ review ചെയ്യുന്നതുവരെ ഒന്നും publish ചെയ്യില്ല."
-submit = "Agent bootstrap ചെയ്യുക"
-subtitle = "ഒരു representative file-ൽ നിന്ന് പുതിയ agent seed ചെയ്യുക"
-title = "ഒരു രേഖയിൽ നിന്ന് bootstrap ചെയ്യുക"
-
-[portal.agentBuilder.empty]
-description = "ഒരു sample document-ൽ നിന്ന് agent bootstrap ചെയ്ത് അതിന്റെ scenarios-ഉം extraction schema-യും seed ചെയ്യുക, തുടർന്ന് refine ചെയ്ത് publish ചെയ്യുക."
-title = "ഇനിയും agents ഇല്ല"
-
-[portal.agentBuilder.evals]
-casesPassing = "വിജയിക്കുന്ന cases"
-columnCase = "Eval case"
-columnLatency = "Latency"
-columnResult = "ഫലം"
-fail = "പരാജയം"
-goldenSetPassRate = "Golden-set pass rate"
-latencyMs = "{{ms}} ms"
-notRun = "പ്രവർത്തിപ്പിച്ചിട്ടില്ല"
-pass = "വിജയം"
-passRate = "Pass rate"
-runEvals = "Evals പ്രവർത്തിപ്പിക്കുക"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals നിങ്ങളുടെ scenarios-നെ repeatable golden set ആക്കുന്നു. കാലക്രമേണ pass-rate capture ചെയ്യാനും അതിന്റെ അടിസ്ഥാനത്തിൽ publishes gate ചെയ്യാനും upgrade ചെയ്യുക."
-title = "ഇനിയും golden set ഇല്ല"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "golden sets മുഴുവൻ"
-activeAgents = "സജീവ agents"
-avgPassRate = "ശരാശരി eval pass rate"
-fleetWide = "fleet-wide"
-latestPublished = "ഏറ്റവും പുതുതായി publish ചെയ്തത്"
-scenarios = "Scenarios"
-testCases = "test cases"
-totalDescription_one = "ആകെ {{count}}"
-totalDescription_other = "ആകെ {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "ചേർക്കുക"
-addScenario = "Scenario ചേർക്കുക"
-enable = "പ്രവർത്തനക്ഷമമാക്കുക"
-expectationLabel = "പ്രതീക്ഷിക്കുന്ന പെരുമാറ്റം"
-expectationPlaceholder = "Agent ചെയ്യേണ്ടത് എന്ത്"
-inEval = "eval-ൽ"
-mute = "Mute ചെയ്യുക"
-muted = "muted"
-nameLabel = "പേര്"
-namePlaceholder = "ഉദാ. Compliance escalation"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenarios"
-tools = "Tools"
-versions = "Versions"
-
-[portal.agentBuilder.tools]
-broadAccess = "വിശാല access"
-deniedHint = "തിരഞ്ഞെടുത്ത tools തടഞ്ഞിരിക്കുന്നു. മറ്റെല്ലാം callable ആയി തുടരും."
-deniedTools = "നിരസിച്ച tools"
-governanceGate = "Tool governance Enterprise plan-ൽ ലഭ്യമാണ്."
-restricted = "നിയന്ത്രിതം"
-restrictedAccess = "നിയന്ത്രിത tool access"
-restrictedDescription = "താഴെ നിങ്ങൾ നിരസിക്കുന്നവ ഒഴികെ എല്ലാ tools-ക്കും അനുമതി നൽകുക."
-
-[portal.agentBuilder.versions]
-current = "നിലവിലെ"
-historyGate = "പൂർണ്ണ version history-യും rollback-ഉം Enterprise plan-ൽ ലഭ്യമാണ്."
-publish = "Publish ചെയ്യുക"
-rollBack = "Roll back ചെയ്യുക"
-
 [portal.assistant]
 close = "സഹായി അടയ്ക്കുക"
 error = "സഹായിയെ ബന്ധപ്പെടാനായില്ല."
@@ -6365,9 +6346,21 @@ typing = "ടൈപ്പ് ചെയ്യുന്നു"
 loading = "ലോഡ് ചെയ്യുന്നു"
 redirectingToEditor = "editor-ലേക്ക് redirect ചെയ്യുന്നു..."
 
+[portal.billing.activation]
+maybeLater = "പിന്നീട് നോക്കാം"
+title = "Processor ഓൺ ചെയ്യുക"
+
+[portal.billing.activation.payg]
+sub = "ഒരു monthly limit സജ്ജീകരിക്കുക. നിങ്ങൾ run ചെയ്യുന്നതിന് മാത്രം പണമടയ്ക്കുക."
+title = "Pay as you go"
+
+[portal.billing.activation.prepay]
+badge = "2 മാസം സൗജന്യം"
+sub = "ഒരു invoice, card അല്ലെങ്കിൽ bank transfer."
+title = "ഒരു വർഷം മുൻകൂർ പണമടയ്ക്കുക"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function client_secret തിരികെ നൽകിയില്ല."
-subtitle = "നിങ്ങളുടെ free Editor-plan grant കഴിഞ്ഞും തുടരാൻ ഒരു card ചേർക്കുക. ബാക്കി Stripe കൈകാര്യം ചെയ്യും."
 title = "Processor plan പ്രവർത്തനക്ഷമമാക്കുക"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "നിങ്ങളുടെ payment വിജയിച്ചു, പക
 close = "അടയ്ക്കുക"
 title = "കുറച്ച് മാത്രം ബാക്കി"
 
+[portal.billing.checkout.cap]
+amountAria = "Monthly spend limit"
+back = "Back"
+continue = "payment-ലേക്ക് തുടരുക"
+error = "നിങ്ങളുടെ spend limit സജ്ജീകരിക്കാനായില്ല"
+finePrint = "Invoices monthly post ചെയ്യും. എപ്പോൾ വേണമെങ്കിലും cancel ചെയ്യാം."
+noLimit = "പരിധിയില്ല"
+note = "നിങ്ങളുടെ limit കടന്ന് നിങ്ങളെ ഒരിക്കലും bill ചെയ്യില്ല. Processing വെറും pause ചെയ്യും."
+perMonth = "/ മാസം"
+title = "നിങ്ങളുടെ spend limit സജ്ജീകരിക്കുക"
+
+[portal.billing.checkout.card]
+fields = "കാർഡ് നമ്പർ · MM / YY · CVC · ZIP"
+label = "Card details"
+note = "Card details Stripe ശേഖരിക്കുന്നു. Stirling PAN അല്ലെങ്കിൽ CVC ഒരിക്കലും store ചെയ്യുന്നില്ല."
+
 [portal.billing.checkout.error]
 title = "Checkout ആരംഭിക്കാനായില്ല"
 
@@ -6383,10 +6392,9 @@ body = "നിങ്ങളുടെ payment പൂർത്തിയായി. 
 hint = "ദയവായി ഈ window തുറന്നുതന്നെ വയ്ക്കുക."
 title = "നിങ്ങളുടെ Processor plan activate ചെയ്യുന്നു..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "portal env-ൽ in-app checkout സജ്ജമാക്കാൻ."
-bodyBefore = "സജ്ജമാക്കുക"
-title = "Stripe കോൺഫിഗർ ചെയ്തിട്ടില്ല"
+[portal.billing.checkout.pay]
+limit = "Monthly spend limit {{amount}}/mo. limit-ൽ processing pause ചെയ്യും."
+limitNoCap = "Spend limit ഇല്ല. Processing pause ചെയ്യില്ല. Invoices monthly post ചെയ്യും."
 
 [portal.billing.enterpriseUpsell]
 cta = "നിങ്ങളുടെ Enterprise quote നിർമ്മിക്കുക"
@@ -6409,10 +6417,12 @@ currentPlan = "നിലവിലെ plan"
 freeForever = "എന്നേക്കും സൗജന്യം"
 noTeamResolved = "നിങ്ങളുടെ wallet-ൽ ഇതുവരെ team resolved ആയിട്ടില്ല — refresh ചെയ്ത് വീണ്ടും ശ്രമിക്കുക."
 ownerOnly = "ടീം owner-ക്ക് മാത്രമേ Processor plan ഓൺ ചെയ്യാൻ കഴിയൂ."
+payInvoice = "പൂർത്തിയാക്കാൻ invoice അടയ്ക്കുക"
 planName = "Editor"
 ssoIncluded = "SSO ഉൾപ്പെടുത്തിയിരിക്കുന്നു"
 switchOnProcessor = "Processor ഓൺ ചെയ്യുക →"
 unlimitedUsers = "അപരിമിത users"
+viewQuote = "quote കാണുക"
 
 [portal.billing.invoices]
 columnAmount = "തുക"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "നേരിട്ടുള്ള API requests"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automations & pipelines"
 segmentAutomationLabel = "Automation"
+sizeMultiplier = "{{formatted}} PDFs ഒരു size multiplier ഉപയോഗിച്ചു"
+summary = "{{unique}} unique · {{units}} meter units · PDF-ന് ശരാശരി {{avg}}"
+summaryNoRate = "{{unique}} unique · {{units}} meter units"
 unit = "metered PDFs"
+unitsPending_one = "linked instances-ൽ നിന്ന് {{units}} meter unit sync ചെയ്യാൻ ബാക്കി"
+unitsPending_other = "linked instances-ൽ നിന്ന് {{units}} meter units sync ചെയ്യാൻ ബാക്കി"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} prepaid credits-ൽ"
+expires = "{{date}}-ന് കാലഹരണപ്പെടും"
+eyebrow = "Prepaid capacity"
+note = "metered billing-നും spend limit-നും പുറത്തായി ആദ്യം ഉപയോഗിക്കുന്നു."
+topUp = "Top up"
+
+[portal.billing.prepaid.buy]
+back = "Back"
+calcTitle = "നിങ്ങളുടെ annual payment കണക്കാക്കുക"
+cancel = "Cancel"
+cancelPurchase = "purchase cancel ചെയ്യുക"
+close = "Close"
+continueToPayment = "payment-ലേക്ക് തുടരുക"
+finalise = "Finalise"
+invoiceErrorTitle = "invoice generate ചെയ്യാനായില്ല"
+loadingTitle = "നിങ്ങളുടെ quote loading ചെയ്യുന്നു"
+payTitle = "നിങ്ങളുടെ വർഷത്തിനായി പണമടയ്ക്കുക"
+step = "Step {{current}} of {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "മാറ്റുക"
+deployRow = "Deployment"
+done = "Done"
+enterpriseHint = "ഇത് enterprise scale ആണ്. ഈ volume-ൽ, enterprise rates ഏത് self-serve discount-നേക്കാളും മെച്ചമാണ്. Rate lock, terms, കൂടാതെ മിനിറ്റുകൾക്കുള്ളിൽ ഒരു quote."
+governanceRow = "Governance"
+governanceValue = "{{label}} · {{count}} policies"
+handlesLabel = "നിങ്ങളുടെ Processor"
+handlesValue = "{{volume}} credits / mo കൈകാര്യം ചെയ്യുന്നു"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policies"
+poolCaption = "വർഷത്തേക്ക് {{credits}} credits-ന്റെ ഒരു pool. Heavy months light ones-ൽ നിന്ന് borrow ചെയ്യും."
+priceLabel = "നിങ്ങളുടെ വർഷം · 10 മാസത്തിന്റെ വിലയ്ക്ക് 12 മാസം"
+rateUnknown = "checkout-ൽ ഞങ്ങൾ കൃത്യമായ വില കാണിക്കും."
+savings = "നിങ്ങൾ {{amount}} ലാഭിക്കുന്നു · 2 മാസം സൗജന്യം."
+sizingRow = "Sizing"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "മൊത്തം users"
+
+[portal.billing.prepaid.consent]
+label = "എന്റെ prepaid capacity ഉപയോഗിച്ചു തീരുകയോ 12 മാസത്തിന് ശേഷം കാലഹരണപ്പെടുകയോ ചെയ്യുമ്പോൾ, ഞാൻ cancel ചെയ്യാത്ത പക്ഷം processing സാധാരണ metered pay-as-you-go rate-ൽ (എന്റെ spend limit വരെ) സ്വയമേവ തുടരുമെന്നും, billing portal-ൽ നിന്ന് എപ്പോൾ വേണമെങ്കിലും cancel ചെയ്യാമെന്നും ഞാൻ മനസ്സിലാക്കുന്നു."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling manage ചെയ്യുന്നു. മിനിറ്റുകൾക്കുള്ളിൽ live."
+cloudValue = "Stirling Cloud · Managed"
+selfhost = "Self-hosted"
+selfhostDesc = "private infrastructure-ൽ runs. അതേ rate."
+selfhostValue = "Self-hosted · Private infrastructure"
+
+[portal.billing.prepaid.offer]
+cta = "offer review ചെയ്യുക"
+subtitle = "ഒരു വർഷത്തെ PDF processing-ന് മുൻകൂർ പണമടച്ച് രണ്ട് മാസം സൗജന്യമായി നേടുക, metered billing-ന് മുമ്പ്, നിങ്ങളുടെ spend limit-ന് പുറത്തായി ഉപയോഗിക്കും."
+title = "10 മാസത്തിന്റെ വിലയ്ക്ക് 12 മാസം നേടുക"
+
+[portal.billing.prepaid.pay]
+accountName = "Account holder name"
+accountNamePlaceholder = "ഉദാ. Jane Smith"
+companyName = "Company name (optional)"
+companyNamePlaceholder = "ഉദാ. Acme Inc."
+downloadInvoice = "invoice download ചെയ്യുക"
+payOnline = "online ആയി പണമടയ്ക്കുക"
+poNumber = "PO number (optional)"
+poNumberPlaceholder = "ഉദാ. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Advanced"
+advancedDesc = "Pipelines നിങ്ങളുടെ processing-ന്റെ ഭൂരിഭാഗവും drive ചെയ്യുന്നു."
+none = "None"
+noneDesc = "ഇനിയും pipelines run ചെയ്യുന്നില്ല. എപ്പോൾ വേണമെങ്കിലും അവ on ചെയ്യുക."
+standard = "Standard"
+standardDesc = "ചില pipelines എത്തുന്ന PDFs വീണ്ടും process ചെയ്യുന്നു."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Classification, default, കൂടാതെ Sharing"
+governed = "Governed"
+governedDesc = "Securityയും Routingയും ചേർക്കുന്നു"
+regulated = "Regulated"
+regulatedDesc = "എല്ലാ category-കളും, Compliance, Retention, Ingestion ഉൾപ്പെടെ"
+
+[portal.billing.prepaid.review]
+download = "quote download ചെയ്യുക (PDF)"
+downloading = "തയ്യാറാക്കുന്നു…"
+share = "approval-നായി share ചെയ്യുക"
+
+[portal.billing.prepaid.size]
+compact = "Compact"
+compactDesc = "25 MB-ൽ താഴെയുള്ള files, data charges ഇല്ല"
+heavy = "Heavy"
+heavyDesc = "Scanned അല്ലെങ്കിൽ image-heavy, സാധാരണയായി 50 MB+"
+standard = "Standard"
+standardDesc = "മിക്കതും ചെറുത്, ചില scans 25 MB കടക്കും"
+
+[portal.billing.prepaid.state]
+exhausted = "ഉപയോഗിച്ചു തീർന്നു"
+healthy = "ധാരാളം ബാക്കി"
+low = "കുറഞ്ഞുവരുന്നു"
 
 [portal.billing.spendLimit]
 adjustLimit = "Limit ക്രമീകരിക്കുക"
@@ -6494,6 +6608,8 @@ label = "മറികടക്കുമെന്ന് പ്രവചിക്
 
 [portal.billing.spendThisMonth]
 eyebrow = "ഈ മാസത്തെ ചെലവ്"
+freeRemaining_one = "{{formatted}} free PDF ബാക്കി"
+freeRemaining_other = "{{formatted}} free PDFs ബാക്കി"
 processed_one = "{{formattedCount}} PDF പ്രോസസ് ചെയ്തു."
 processed_other = "{{formattedCount}} PDFs പ്രോസസ് ചെയ്തു."
 processedWithRate_one = "{{formattedCount}} PDF പ്രോസസ് ചെയ്തു, ഓരോന്നിന് {{rate}}."
@@ -6534,6 +6650,350 @@ signature = "signature"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "പുതിയ connection"
+createTitleFor = "{{name}} connect ചെയ്യുക"
+delete = "Delete"
+edit = "Edit"
+editTitle = "connection edit ചെയ്യുക"
+unsupportedType = "ഈ connection type ഇവിടെ edit ചെയ്യാൻ കഴിയില്ല."
+
+[portal.connections.categories.advanced]
+description = "ഞങ്ങൾ ഇതുവരെ support ചെയ്യാത്ത service-നായി."
+label = "Advanced"
+
+[portal.connections.categories.audit]
+description = "ഒരു document-ന് എന്ത് സംഭവിച്ചു, നിങ്ങളുടെ auditors ഇതിനകം നോക്കുന്ന സ്ഥലത്ത് record ചെയ്യുക."
+label = "Audit & compliance logging"
+
+[portal.connections.categories.notify]
+description = "എന്തെങ്കിലും സംഭവിച്ചതായി മറ്റൊരു system-നെ അറിയിക്കുക."
+label = "Notify & workflow"
+
+[portal.connections.categories.security]
+description = "ഒരു document മുന്നോട്ട് നീങ്ങുന്നതിന് മുമ്പ് scan ചെയ്യുക അല്ലെങ്കിൽ label ചെയ്യുക."
+label = "Security & classification"
+
+[portal.connections.categories.signing]
+description = "ഒരു document ഒപ്പിടാനോ notarize ചെയ്യാനോ പുറത്തേക്ക് അയയ്ക്കുക."
+label = "E-signature & notarization"
+
+[portal.connections.categories.storage]
+description = "Processed documents അവസാനിക്കുന്നത് എവിടെ - ഒരു bucket, drive, ticket അല്ലെങ്കിൽ page."
+label = "File & attach"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling ഇത് encrypted ആയി store ചെയ്യുന്നു, വീണ്ടും ഒരിക്കലും കാണിക്കില്ല."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "ഈ connection ഉപയോഗിക്കുന്ന steps-ന് ഈ URL-ന് കീഴിലുള്ള paths മാത്രം call ചെയ്യാം, മറ്റൊരു host ഒരിക്കലും അല്ല."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Password"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Username"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "service നിങ്ങള്ക്ക് നൽകിയ URL paste ചെയ്യുക. അതിന് കീഴിലുള്ള paths മാത്രം call ചെയ്യാം."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Connection name"
+namePlaceholder = "ഉദാ. Production"
+
+[portal.connections.picker]
+cancel = "Cancel"
+createNew = "പുതിയ connection..."
+placeholder = "ഒരു connection തിരഞ്ഞെടുക്കുക"
+save = "connection സേവ് ചെയ്യുക"
+
+[portal.connections.picker2]
+back = "integration മാറ്റുക"
+heading = "നിങ്ങൾ എന്താണ് connect ചെയ്യാൻ ആഗ്രഹിക്കുന്നത്?"
+noResultsBody = "ഞങ്ങൾ ഇത് ഇതുവരെ support ചെയ്യുന്നില്ല - അതിനെക്കുറിച്ച് ഞങ്ങളോട് പറയൂ, അത് ചേർക്കുന്നത് നോക്കാം."
+noResultsTitle = "\"{{query}}\"-ന് ഒന്നും match ചെയ്യുന്നില്ല"
+searchPlaceholder = "integrations search ചെയ്യുക - \"sign\", \"ocr\" അല്ലെങ്കിൽ product name ശ്രമിക്കുക"
+
+[portal.connections.types.api]
+description = "policy-യിൽ നിന്ന് ഏത് HTTP API-യും call ചെയ്യുക. URL, authentication, payload എന്നിവ നിങ്ങൾ തിരഞ്ഞെടുക്കുന്നു."
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "Authentication"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Username and password"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "custom header-ൽ token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "token-നായി log in ചെയ്യുക"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "ഈ connection ഉപയോഗിക്കുന്ന steps-ന് ഈ URL-ന് കീഴിലുള്ള paths മാത്രം call ചെയ്യാം, മറ്റൊരു host ഒരിക്കലും അല്ല."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header name"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Login path"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Password"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "API ഒരു download link-നൊപ്പം reply ചെയ്താൽ, ഈ hosts മാത്രം fetch ചെയ്യാം. comma ഉപയോഗിച്ച് വേർതിരിക്കുക. base URL-ന്റെ സ്വന്തം host മാത്രം അനുവദിക്കാൻ ശൂന്യമായി വിടുക."
+label = "Allowed result hosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "ഈ header ആയി token അയയ്ക്കുക"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "login call token തിരികെ നൽകുന്ന response header, ഉദാ. X-Auth-Token."
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "Username"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "നിങ്ങൾ run ചെയ്യുന്ന server-ൽ documents malware-നായി scan ചെയ്യുക - ഒന്നും നിങ്ങളുടെ network വിട്ടുപോകില്ല."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "policy-യിലെ documents-ന് virus-യും content scanning-ഉം."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "പരിചിതമായ malware മാത്രമല്ല, macros, executables, scripts അല്ലെങ്കിൽ embedded objects അടങ്ങിയ documents block ചെയ്യുക."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "processed documents ഒരു Confluence page-ലേക്ക് attach ചെയ്യുക."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "electronic signature-നും notarization-നും documents ConsignO Cloud (Notarius)-ലേക്ക് അയയ്ക്കുക."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "നിങ്ങളുടെ ConsignO Cloud environment, /api/v1 ഉൾപ്പെടെ."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Password"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "നിങ്ങളുടെ organisation tenants ഉപയോഗിക്കുന്നുവെങ്കിൽ മാത്രം ആവശ്യം."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Username"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "ഒരു policy document process ചെയ്യുമ്പോൾ Discord-ലേക്ക് message post ചെയ്യുക."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "ഓരോ തവണയും policy document കൈകാര്യം ചെയ്യുമ്പോൾ Elasticsearch-ൽ ഒരു audit event index ചെയ്യുക."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "പുതിയ documents-നായി FTP അല്ലെങ്കിൽ FTPS server poll ചെയ്യുക."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Connection mode"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (recommended)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Plain FTP credentials-ഉം files-ഉം unencrypted ആയി അയയ്ക്കുന്നു; server support ചെയ്യുന്നുവെങ്കിൽ FTPS തിരഞ്ഞെടുക്കുക."
+label = "Encryption"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "None (plain FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "ഒരു policy run ചെയ്യുമ്പോൾ Google Chat space-ലേക്ക് message post ചെയ്യുക."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "processed documents ഒരു Jira issue-ലേക്ക് attach ചെയ്യുക."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "ഒരു policy run ചെയ്യുമ്പോൾ document അല്ലെങ്കിൽ notification email ചെയ്യുക."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "processed documents Nextcloud-ലേക്ക് file ചെയ്യുക."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "നിങ്ങൾ run ചെയ്യുന്ന Presidio server ഉപയോഗിച്ച് document text-ൽ personal data കണ്ടെത്തുക."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "PDFs-ൽ Microsoft Purview sensitivity labels വായിച്ച് apply ചെയ്യുക."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Optional. labels പേര് പ്രകാരം pick ചെയ്യാൻ മാത്രം ആവശ്യം; ഇതില്ലാതെയും labelling പ്രവർത്തിക്കും."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "ഓരോ label-ലും അതിന്റെ SiteId ആയി stamped ചെയ്യുന്നു, അതിനാൽ Purview-aware tools ഏത് organisation ആണ് അത് apply ചെയ്തതെന്ന് അറിയും."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "sources-ന് read ചെയ്യാനും pipeline outputs-ന് write ചെയ്യാനും കഴിയുന്ന ഒരു S3 bucket."
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS-നായി ശൂന്യമായി വിടുക. MinIO അല്ലെങ്കിൽ മറ്റൊരു S3-compatible store-നായി ഇത് സജ്ജീകരിക്കുക."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "ഒരു policy run ചെയ്യുമ്പോൾ document അല്ലെങ്കിൽ notification email ചെയ്യുക."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "പുതിയ documents-നായി SFTP (SSH) server poll ചെയ്യുക."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Optional. server-ന്റെ SHA-256 host key fingerprint (`ssh-keyscan host | ssh-keygen -lf -`-ൽ നിന്ന്). set ചെയ്താൽ, ഈ key present ചെയ്യുന്ന server മാത്രം accept ചെയ്യും; ശൂന്യമായാൽ, ആദ്യ connect-ൽ കണ്ട key pin ചെയ്യും, പിന്നീടുള്ള changes refuse ചെയ്യും."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "private key ഉപയോഗിച്ച് authenticate ചെയ്യുന്നുവെങ്കിൽ ശൂന്യമായി വിടുക."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Optional. password-ന് പകരം key ഉപയോഗിച്ച് authenticate ചെയ്യാൻ OpenSSH private key paste ചെയ്യുക."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "ഒരു policy document process ചെയ്യുമ്പോൾ Slack-ലേക്ക് message post ചെയ്യുക."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "SMB / CIFS network share (Windows അല്ലെങ്കിൽ Samba) watch ചെയ്യുക."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Optional. നിങ്ങളുടെ server ഉപയോഗിക്കുന്നുവെങ്കിൽ Windows domain അല്ലെങ്കിൽ workgroup."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "ഓരോ തവണയും policy document കൈകാര്യം ചെയ്യുമ്പോൾ Splunk-ലേക്ക് audit event അയയ്ക്കുക."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Sumo Logic HTTP collector-ലേക്ക് audit event അയയ്ക്കുക."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "ഒരു policy run ചെയ്യുമ്പോൾ Teams channel-ലേക്ക് message post ചെയ്യുക."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "ഓരോ document-ഉം, അല്ലെങ്കിൽ details മാത്രം, നിങ്ങൾ തിരഞ്ഞെടുക്കുന്ന URL-ലേക്ക് post ചെയ്യുക."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "policy-യിൽ നിന്ന് Zap അല്ലെങ്കിൽ Make scenario trigger ചെയ്യുക."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "docs browse ചെയ്യുക"
+viewSource = "source GitHub-ൽ കാണുക"
+
 [portal.docs.authentication]
 codeCaption = "ഓരോ request-വും"
 eyebrow = "GETTING STARTED"
@@ -6619,11 +7079,19 @@ title = "Official SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
+[portal.docs.search]
+empty = "പൊരുത്തപ്പെടുന്ന docs ഇല്ല"
+placeholder = "docs search ചെയ്യുക"
+results = "{{count}} ഫലങ്ങൾ"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "നിങ്ങളുടെ agent ഒരൊറ്റ tool ആയി invoke ചെയ്യുന്ന bundled, named capabilities. ഓരോ skill-വും evals attached ആയ deterministic op chain ആണ്."
 title = "Agent skills"
 
+[portal.docs.toc]
+title = "ഈ page-ൽ"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "തരം"
 user = "ഉപയോക്താവ്"
 
 [portal.documents.queue.empty]
+connectSource = "ഒരു source connect ചെയ്യുക"
+createPipeline = "ഒരു pipeline സൃഷ്ടിക്കുക"
 description = "ഉറവിടങ്ങൾ നിങ്ങളുടെ പൈപ്പ്‌ലൈനുകളിലേക്ക് ഡോക്യുമെന്റുകൾ നൽകുമ്പോൾ അവ അവലോകനത്തിനായി ഇവിടെ ദൃശ്യമാകും."
 title = "ക്യൂവിൽ ഡോക്യുമെന്റുകളില്ല"
 
@@ -6806,13 +7276,71 @@ description = "ഈ view-ൽ അപ്രതീക്ഷിത പിശക് 
 retry = "വീണ്ടും ശ്രമിക്കുക"
 title = "ഈ പേജിൽ എന്തോ പിഴച്ചു"
 
+[portal.home.download]
+back = "Back"
+body = "desktop app download ചെയ്യുക അല്ലെങ്കിൽ server self-host ചെയ്യുക."
+done = "Done"
+guide = "{{name}} guide തുറക്കുക"
+openInBrowser = "പകരം browser-ൽ തുറക്കുക"
+sectionDesktop = "Desktop app"
+sectionSelfHosted = "Self-hosted"
+title = "Stirling PDF Editor install ചെയ്യുക"
+
+[portal.home.download.docker]
+detailBody = "നിങ്ങളുടെ server-ൽ official image run ചെയ്യുക."
+note = ":8080-ൽ തുറക്കും. Default login: admin / stirling."
+tagline = "server ഒരു container-ൽ run ചെയ്യുക"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "ഔദ്യോഗിക Helm chart ഇൻസ്റ്റാൾ ചെയ്യുക."
+note = "ക്രമീകരണങ്ങൾ നിലനിർത്താൻ /configs-നായി ഒരു PVC ചേർക്കുക."
+tagline = "Helm ഉപയോഗിച്ച് ഒരു cluster-ലേക്ക് deploy ചെയ്യുക"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "നിങ്ങളുടെ distribution-നുള്ള native builds."
+guideBtn = "Linux ഇൻസ്റ്റാൾ ഓപ്ഷനുകൾ കാണുക"
+note = "സാധാരണ distros-നായി AppImage, .deb, .rpm builds ലഭ്യമാണ്."
+tagline = "നിങ്ങളുടെ distro-യ്ക്കുള്ള native desktop app"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "അല്ലെങ്കിൽ Homebrew വഴി"
+detailBody = "installer പ്രവർത്തിപ്പിക്കുക, അല്ലെങ്കിൽ Homebrew ഉപയോഗിക്കുക."
+downloadBtn = "macOS-നായി ഡൗൺലോഡ് ചെയ്യുക"
+tagline = "Apple silicon, Intel എന്നിവയ്ക്കുള്ള native app"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "bare metal server-ൽ .jar പ്രവർത്തിപ്പിക്കുക."
+downloadBtn = ".jar ഡൗൺലോഡ് ചെയ്യുക"
+note = "Java 21+ ആവശ്യമാണ്. :8080-ൽ തുറക്കും; default login admin / stirling."
+runLabel = "തുടർന്ന് ഇത് പ്രവർത്തിപ്പിക്കുക"
+tagline = "bare metal server-ൽ .jar പ്രവർത്തിപ്പിക്കുക"
+title = "Manual server setup"
+
+[portal.home.download.windows]
+altLabel = "അല്ലെങ്കിൽ winget വഴി"
+detailBody = "installer പ്രവർത്തിപ്പിക്കുക, അല്ലെങ്കിൽ package manager ഉപയോഗിക്കുക."
+downloadBtn = "installer ഡൗൺലോഡ് ചെയ്യുക"
+tagline = "Microsoft Windows-നുള്ള native app"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} സജീവം"
-invite = "സഹപ്രവർത്തകരെ ക്ഷണിക്കുക"
+activeOfDeployed = "ഈ മാസം {{total}}-ൽ {{active}} active"
 name = "Stirling PDF Editor"
 open = "Browser-ൽ തുറക്കുക"
 updated = "{{time}} അപ്ഡേറ്റ് ചെയ്തു"
 
+[portal.home.editor.deploy]
+finish = "deployment പൂർത്തിയാക്കുക"
+options = "deployment ഓപ്ഷനുകൾ കാണുക"
+start = "Editor deploy ചെയ്യുക"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "ശുഭ ഉച്ചയ്ക്ക്"
 evening = "ശുഭ സന്ധ്യ"
 morning = "ശുഭ പ്രഭാതം"
 
-[portal.home.onboarding]
-dismiss = "Setup ഒഴിവാക്കുക"
-notStarted = "ആരംഭിച്ചിട്ടില്ല"
-progress = "{{total}}-ൽ {{done}} പൂർത്തിയായി"
-title = "Setup പൂർത്തിയാക്കുക"
-
-[portal.home.onboarding.enterprise]
-body = "Org-wide SSO + SCIM + RBAC, committed volume pricing, air-gapped deployment."
-cta = "Trial ആരംഭിക്കുക"
-ctaQuote = "Quote നേടുക"
-lead = "250+ ജീവനക്കാർക്കായി."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Desktop app വിന്യസിക്കുക, എന്നും സൗജന്യം."
-title = "PDF Editor ഡൗൺലോഡ് ചെയ്യുക"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} സജീവം · {{recommended}} ശുപാർശ ചെയ്തത്"
-chip = "{{active}} സജീവം"
-title = "നയങ്ങൾ ഓണാക്കുക"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} connect ചെയ്തു · എത്തുന്നിടത്ത് ഓരോ PDF-വും governed"
-chip = "{{connected}} connect ചെയ്തു"
-title = "നിങ്ങളുടെ ഉറവിടങ്ങൾ connect ചെയ്യുക"
-
-[portal.home.quickActions]
-subtitle = "ഇന്നത്തെ പ്രധാന tasks"
-title = "Quick actions"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Typed op library-യിലെ 3-step composer"
-title = "ഒരു പൈപ്പ്‌ലൈൻ നിർമ്മിക്കുക"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, watched folders"
-title = "ഒരു ഉറവിടം connect ചെയ്യുക"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Rate limits, IP allowlist എന്നിവയുള്ള scoped key"
-title = "ഒരു API key നൽകുക"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor വിന്യാസം നിയന്ത്രിക്കുക"
 sectionsAriaLabel = "Infrastructure വിഭാഗങ്ങൾ"
@@ -6878,13 +7363,9 @@ heading = "API keys"
 subheading = "Per-key rate limits, permissions, IP allowlists എന്നിവയുള്ള scoped credentials."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "അനുവദിച്ച IPs"
-anyIp = "ഏതെങ്കിലും IP (allowlist ഇല്ല)"
 created = "സൃഷ്ടിച്ചത്"
 lastUsed = "അവസാനം ഉപയോഗിച്ചത്"
-permissions = "അനുമതികൾ"
-rateLimit = "Rate limit"
-rateLimitValue = "{{value}} req/min"
+revoke = "key revoke ചെയ്യുക"
 usageMonth = "ഈ മാസത്തെ ഉപയോഗം"
 usageToday = "ഇന്നത്തെ ഉപയോഗം"
 
@@ -6892,6 +7373,20 @@ usageToday = "ഇന്നത്തെ ഉപയോഗം"
 description = "Stirling API വിളിക്കാൻ തുടങ്ങാൻ ഒരു scoped key സൃഷ്ടിക്കുക."
 title = "ഇതുവരെ API keys ഇല്ല"
 
+[portal.infrastructure.apiKeys.error]
+load = "നിങ്ങളുടെ API keys load ചെയ്യാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" revoke ചെയ്യണോ? ഈ key ഇപ്പോഴും ഉപയോഗിക്കുന്ന ഏതെങ്കിലും integration ഉടൻ 401 errors സ്വീകരിക്കാൻ തുടങ്ങും. ഇത് പഴയപടിയാക്കാൻ കഴിയില്ല."
+cancel = "റദ്ദാക്കുക"
+confirm = "key revoke ചെയ്യുക"
+title = "API key revoke ചെയ്യുക"
+
+[portal.infrastructure.attestationLabel]
+attested = "Attested"
+inScope = "പരിധിയിൽ"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Category പ്രകാരം audit events ഫിൽട്ടർ ചെയ്യുക"
 heading = "Audit logs"
@@ -6935,6 +7430,7 @@ all = "എല്ലാം"
 auth = "Auth"
 config = "Config"
 elevation = "Elevation"
+policy = "നയം"
 processing = "Processing"
 security = "Security"
 
@@ -6944,19 +7440,35 @@ title = "നിങ്ങൾക്ക് access ഇല്ല"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Elevation"
+policy = "നയം"
 processing = "Processing"
 totalEvents = "ആകെ events · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Config"
+elevation = "Elevation"
+policy = "നയം"
+processing = "Processing"
+security = "Security"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "പിശക്"
+info = "വിവരം"
+success = "വിജയം"
+warning = "മുന്നറിയിപ്പ്"
+
+[portal.infrastructure.certLabel]
+certified = "Certified"
+inProgress = "പുരോഗമിക്കുന്നു"
+notStarted = "ആരംഭിച്ചിട്ടില്ല"
+
 [portal.infrastructure.createKey]
 cancel = "റദ്ദാക്കുക"
 createKey = "Key സൃഷ്ടിക്കുക"
 done = "പൂർത്തിയായി"
-ipAllowlistHelper = "Comma-separated CIDR ranges. ഏതെങ്കിലും IP അനുവദിക്കാൻ ശൂന്യമായി വിടുക."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Key പേര്"
 keyNamePlaceholder = "ഉദാ. Production · ingest"
-permissionsLabel = "അനുമതികൾ"
 secretKeyCaption = "Secret key"
 secretWarning = "ഇത് secrets manager-ൽ സൂക്ഷിക്കുക. Stirling എപ്പോഴും hash മാത്രമേ സൂക്ഷിക്കൂ — പിന്നീട് ഇത് വീണ്ടെടുക്കാൻ മാർഗമില്ല."
 subtitle = "Key-ക്ക് ആവശ്യമായ കുറഞ്ഞ scope മാത്രം നൽകുക. ഏത് സമയത്തും rotate ചെയ്യുകയോ revoke ചെയ്യുകയോ ചെയ്യാം."
@@ -6964,6 +7476,12 @@ subtitleCreated = "ഈ secret ഇപ്പോൾ copy ചെയ്യുക —
 title = "API key സൃഷ്ടിക്കുക"
 titleCreated = "Key സൃഷ്ടിച്ചു"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "Queued"
+rolledBack = "Rolled back"
+rolling = "Rolling out"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "വിന്യസിച്ച ഓരോ Stirling region-ന്റ
 description = "നിങ്ങളുടെ workspace provision ചെയ്തുകഴിഞ്ഞാൽ deployed regions ഇവിടെ ദൃശ്യമാകും."
 title = "Regions വിന്യസിച്ചിട്ടില്ല"
 
+[portal.infrastructure.keyLabel]
+active = "Active"
+revoked = "Revoked"
+
+[portal.infrastructure.modelLabel]
+active = "Active"
+degraded = "Degraded"
+disabled = "Disabled"
+
 [portal.infrastructure.models]
 heading = "Models"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "സ്ഥിതി"
 type = "തരം"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/call"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "സജീവ models"
 avgLatency = "ശരാശരി latency"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}}-ക്കുള്ള model"
 operation = "Operation"
 routedTo = "Route ചെയ്തത്"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "വർഗ്ഗീകരണം"
+extraction = "Extraction"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degraded"
+down = "Down"
+healthy = "Healthy"
+
 [portal.infrastructure.security.access.byok]
 description = "നിങ്ങളുടെ സ്വന്തം KMS-ൽ നിന്ന് key നൽകുക. Stirling അത് ഉപയോഗിച്ച് encrypt ചെയ്യുന്നു, പക്ഷേ ഇപ്പോഴും വായിക്കാം."
 label = "നിങ്ങളുടെ സ്വന്തം key കൊണ്ടുവരിക (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Models"
 security = "Security"
 storage = "Storage"
 
+[portal.integrations]
+addAnother = "മറ്റൊന്ന് ചേർക്കുക"
+availableHeading = "ലഭ്യമാണ്"
+comingSoonHeading = "ഉടൻ വരുന്നു"
+connect = "ബന്ധിപ്പിക്കുക"
+connectedHeading = "ബന്ധിപ്പിച്ചു"
+connectionCount_one = "{{count}} കണക്ഷൻ"
+connectionCount_other = "{{count}} കണക്ഷനുകൾ"
+customApi = "Custom API"
+searchPlaceholder = "integrations തിരയുക"
+subtitle = "Stirling-ന് ആശയവിനിമയം നടത്താൻ കഴിയുന്ന എല്ലാം. Credentials ഇവിടെ ഒരിക്കൽ സൃഷ്ടിച്ച ശേഷം sources, policies, pipelines എന്നിവയിൽ reference ചെയ്യുന്നു."
+title = "Integrations"
+typedName = "{{tool}} പേര്"
+
+[portal.integrations.filters]
+all = "എല്ലാം"
+audit = "Audit"
+connected = "ബന്ധിപ്പിച്ചു"
+notify = "Notify"
+security = "Security"
+signing = "Signing"
+storage = "Storage"
+
+[portal.integrations.status]
+connected = "ബന്ധിപ്പിച്ചു"
+
+[portal.integrations.table]
+integration = "Integration"
+worksWith = "ഇവയുമായി പ്രവർത്തിക്കുന്നു"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Policies"
+sources = "Sources"
+
+[portal.legal]
+draft = "{{label}} · draft"
+loadError = "ഈ ഡോക്യുമെന്റ് load ചെയ്യാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
+loading = "Load ചെയ്യുന്നു…"
+title = "നിയമ ഡോക്യുമെന്റ്"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Components"
@@ -7182,6 +7765,7 @@ documents = "ഡോക്യുമെന്റുകൾ"
 editor = "Editor"
 home = "Home"
 infrastructure = "Infrastructure"
+integrations = "Integrations"
 pipelines = "പൈപ്പ്‌ലൈനുകൾ"
 policies = "നയങ്ങൾ"
 procurement = "Procurement"
@@ -7190,25 +7774,9 @@ sources = "ഉറവിടങ്ങൾ"
 usage = "Usage & Billing"
 users = "Users"
 
-[portal.notifications]
-markAllRead = "എല്ലാം read ആയി അടയാളപ്പെടുത്തുക"
-title = "Notifications"
-viewAll = "എല്ലാം കാണുക"
-
-[portal.notifications.ariaLabel]
-none = "Notifications, unread ഒന്നുമില്ല"
-unread_one = "Notifications, {{count}} unread"
-unread_other = "Notifications, {{count}} unread"
-
-[portal.notifications.count]
-allRead = "എല്ലാം read"
-loading = "loading"
-new_one = "{{count}} പുതിയത്"
-new_other = "{{count}} പുതിയത്"
-
-[portal.notifications.empty]
-description = "പുതിയ notifications ഇല്ല."
-title = "നിങ്ങൾ എല്ലാം കണ്ടു കഴിഞ്ഞു"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Backend-ലുള്ള ഓരോ automated document pipeline: ഒരു കൂട്ടം sources-ൽ operations-ന്റെ ordered chain, trigger-ൽ run ചെയ്യുന്നു. അതിന്റെ steps, sources കാണാൻ ഒരു row click ചെയ്യുക."
@@ -7220,15 +7788,28 @@ newPipeline = "പുതിയ പൈപ്പ്‌ലൈൻ"
 [portal.pipelines.builder]
 addStep = "Tool ചേർക്കുക"
 back = "പൈപ്പ്‌ലൈനുകളിലേക്ക് മടങ്ങുക"
+cannotFollow = "{{produced}} സ്വീകരിക്കാൻ കഴിയില്ല"
+chooseAccount = "ഒരു account തിരഞ്ഞെടുക്കുക"
+chooseDestination = "ഒരു destination തിരഞ്ഞെടുക്കുക"
+chooseOperation = "ഈ step ചെയ്യേണ്ടത് തിരഞ്ഞെടുക്കുക"
+chooseSource = "ഒരു source തിരഞ്ഞെടുക്കുക"
 discard = "മാറ്റങ്ങൾ ഉപേക്ഷിക്കുക"
 enabled = "Enabled"
+inputs = "Input"
+inputSource = "Input source"
+inputTrigger = "Trigger"
 keepEditing = "Editing തുടരുക"
+needsConfiguring = "സജ്ജീകരണം ആവശ്യമാണ്"
 needsUpload = "Uploaded file ആവശ്യമാണ്"
+noSources = "ഇതുവരെ sources ഒന്നും ബന്ധിപ്പിച്ചിട്ടില്ല. Input ആയി ഉപയോഗിക്കാൻ ഒന്ന് സൃഷ്ടിക്കുക."
 noToolMatches = "നിങ്ങളുടെ search-നോട് പൊരുത്തപ്പെടുന്ന tools ഇല്ല."
 pipelineSettings = "പൈപ്പ്‌ലൈൻ settings"
 searchTools = "Tools search ചെയ്യുക"
 selectToolBody = "നിങ്ങളുടെ പൈപ്പ്‌ലൈൻ നിർമ്മിക്കാൻ ഒരു tool ചേർക്കുക."
 selectToolTitle = "ഇതുവരെ tools ഇല്ല"
+sendToSystem = "മറ്റൊരു system-ലേക്ക് അയയ്ക്കുക"
+stepsIncompatible = "മുമ്പത്തെ step സൃഷ്ടിക്കുന്നതിൽ ഈ steps പ്രവർത്തിക്കാൻ കഴിയില്ല: {{tools}}."
+stepsNeedSetup = "save ചെയ്യുന്നതിന് മുമ്പ് ഈ steps-ന് ഇനിയും സജ്ജീകരണം ആവശ്യമാണ്: {{tools}}."
 toolSettings = "Tool settings"
 unknownStep = "തിരിച്ചറിയാത്ത operation, അതേപടി സൂക്ഷിച്ചു."
 unsavedBody = "നിങ്ങൾക്ക് save ചെയ്യാത്ത മാറ്റങ്ങളുണ്ട്. പോകുന്നതിനുമുമ്പ് അവ save ചെയ്യണോ, അല്ലെങ്കിൽ ഉപേക്ഷിക്കണോ?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Save ചെയ്യാത്ത മാറ്റങ്ങൾ"
 uploadUnsupported = "Uploaded files ഇതുവരെ pipelines-ൽ support ചെയ്യുന്നില്ല, അതിനാൽ ഈ steps save ചെയ്യാൻ കഴിയില്ല: {{tools}}."
 usesDefaults = "Default settings ഉപയോഗിച്ച് run ചെയ്യുന്നു"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "മുമ്പത്തെ step-ൽ നിന്നുള്ള ഓരോ file-ഉം സംയോജിപ്പിക്കുന്നു"
+fan-out = "മുമ്പത്തെ step-ൽ നിന്നുള്ള ഓരോ file-ക്കും ഒരിക്കൽ പ്രവർത്തിക്കുന്നു"
+format-mismatch = "{{accepts}} ആവശ്യമാണ്, പക്ഷേ മുമ്പത്തെ step {{produced}} സൃഷ്ടിക്കുന്നു"
+output-uncertain = "പ്രവർത്തിക്കണമെന്നില്ല: മുമ്പത്തെ step-ന്റെ output അതിന്റെ സജ്ജീകരണത്തെ ആശ്രയിക്കുന്നു"
+source-mismatch = "{{accepts}} ആവശ്യമാണ്, പക്ഷേ ഈ pipeline-ന്റെ input {{produced}} ആണ്"
+undeclared-operation = "ഈ step എന്താണ് സ്വീകരിക്കുന്നതെന്ന് പരിശോധിക്കാൻ കഴിയില്ല"
+
 [portal.pipelines.composer]
 addTool = "Tool ചേർക്കുക"
 cancel = "റദ്ദാക്കുക"
 chainEmpty = "നിങ്ങളുടെ പൈപ്പ്‌ലൈൻ നിർമ്മിക്കാൻ ഒരു tool ചേർക്കുക."
 create = "പൈപ്പ്‌ലൈൻ സൃഷ്ടിക്കുക"
-directory = "Output folder"
-directoryHelp = "Server-ലെ absolute path. Configured allowed folders-ന്റെ ഉള്ളിലായിരിക്കണം."
 editingUnsupported = "Editing-നായി ഈ tool params പ്രദർശിപ്പിക്കുന്നത് ഇതുവരെ support ചെയ്യുന്നില്ല."
 moveDown = "താഴേക്ക് നീക്കുക"
 moveUp = "മുകളിലേക്ക് നീക്കുക"
 name = "പേര്"
 namePlaceholder = "ഉദാ. Redaction sweep"
-noSources = "ഇതുവരെ sources connected ചെയ്തിട്ടില്ല. നേരിട്ട് നൽകുന്ന files-ൽ pipeline ഇപ്പോഴും run ചെയ്യാം."
 noToolSettings = "ഈ tool-ന് configurable settings ഇല്ല."
 operations_one = "Operation ({{count}})"
 operations_other = "Operations ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Delete"
 title = "Pipeline delete ചെയ്യണോ?"
 
 [portal.pipelines.detail]
+clearHistory = "history മായ്ക്കുക"
 delete = "Pipeline delete ചെയ്യുക"
 run = "ഇപ്പോൾ run ചെയ്യുക"
 
 [portal.pipelines.empty]
 action = "ഒരു പൈപ്പ്‌ലൈൻ സൃഷ്ടിക്കുക"
+connectSource = "ഒരു source ബന്ധിപ്പിക്കുക"
 description = "നിങ്ങളുടെ ആദ്യ പൈപ്പ്‌ലൈൻ സൃഷ്ടിക്കുക: അത് run ചെയ്യുന്ന sources തിരഞ്ഞെടുക്കുക, operations chain ചെയ്യുക, output എവിടേക്ക് പോകണമെന്ന് തിരഞ്ഞെടുക്കുക."
 title = "ഇതുവരെ പൈപ്പ്‌ലൈനുകളില്ല"
 
@@ -7286,15 +7874,17 @@ active = "സജീവം"
 paused = "Paused"
 total = "പൈപ്പ്‌ലൈനുകൾ"
 
-[portal.pipelines.output]
-folder = "Folder-ലേക്ക് എഴുതുക"
-inline = "Files തിരികെ നൽകുക"
-
 [portal.pipelines.run]
+allProcessed_one = "പ്രവർത്തിപ്പിക്കാൻ ഒന്നുമില്ല: source-ന്റെ {{count}} ഡോക്യുമെന്റ് ഇതിനകം process ചെയ്തു."
+allProcessed_other = "പ്രവർത്തിപ്പിക്കാൻ ഒന്നുമില്ല: sources-ലുള്ള എല്ലാ {{count}} ഡോക്യുമെന്റുകളും ഇതിനകം process ചെയ്തു."
 completed_one = "Run പൂർത്തിയായി."
 completed_other = "എല്ലാ {{count}} runs പൂർത്തിയായി."
 empty = "Run ചെയ്യാൻ ഒന്നുമില്ല: sources-ൽ process ചെയ്യാൻ documents ഇല്ലായിരുന്നു."
 failed = "Run പരാജയപ്പെട്ടു: {{error}}"
+historyCleared = "history മായ്ച്ചു. അടുത്ത run sources-ൽ ഇപ്പോഴുള്ള എല്ലാം വീണ്ടും process ചെയ്യും."
+inFlight = "പ്രവർത്തിപ്പിക്കാൻ പുതിയത് ഒന്നുമില്ല: മുമ്പത്തെ run-ൽ നിന്നുള്ള ഡോക്യുമെന്റുകൾ ഇപ്പോഴും process ചെയ്യുന്നു."
+parked_one = "പ്രവർത്തിപ്പിക്കാൻ ഒന്നുമില്ല: {{count}} ഡോക്യുമെന്റ് മുമ്പ് പരാജയപ്പെട്ടു, parked ആണ്. കാരണം പരിഹരിക്കുക, തുടർന്ന് വീണ്ടും ശ്രമിക്കാൻ history മായ്ക്കുക."
+parked_other = "പ്രവർത്തിപ്പിക്കാൻ ഒന്നുമില്ല: {{count}} ഡോക്യുമെന്റുകൾ മുമ്പ് പരാജയപ്പെട്ടു, parked ആണ്. കാരണം പരിഹരിക്കുക, തുടർന്ന് വീണ്ടും ശ്രമിക്കാൻ history മായ്ക്കുക."
 running = "Run ആരംഭിച്ചു; ഇപ്പോഴും പുരോഗമിക്കുന്നു."
 timeout = "Run പ്രതീക്ഷിച്ചതിലും കൂടുതൽ സമയം എടുക്കുന്നു; അത് background-ൽ പൂർത്തിയാകാം."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Scheduled"
 
 [portal.policies]
+defaultName = "{{category}} നയം"
 subtitle = "ഓരോ ഡോക്യുമെന്റിലും ഒരു tool pipeline നടപ്പാക്കുന്ന standing automations. ഓരോ policy-യും upload അല്ലെങ്കിൽ export സമയത്ത് fire ചെയ്യുന്നു, അതിന്റെ tool chain run ചെയ്ത് enforced version original-ിനൊപ്പം save ചെയ്യുന്നു."
 title = "നയങ്ങൾ"
 
 [portal.policies.card]
 comingSoon = "Enterprise-ലേക്ക് upgrade ചെയ്യുക"
 notSetUp = "സജ്ജമാക്കിയിട്ടില്ല"
+requiresAiEngine = "AI engine ആവശ്യമാണ്"
+
+[portal.policies.categories.classification]
+desc = "upload ചെയ്യുമ്പോൾ ഓരോ ഡോക്യുമെന്റിന്റെയും type തിരിച്ചറിഞ്ഞ് filing-നും search-നും metadata tag ചെയ്യുക."
+label = "വർഗ്ഗീകരണം"
 
 [portal.policies.categories.compliance]
 desc = "ഓരോ ഡോക്യുമെന്റിലും HIPAA, GDPR, SOC 2, അല്ലെങ്കിൽ FedRAMP ആവശ്യകതകൾ enforce ചെയ്യുക."
@@ -7344,6 +7940,13 @@ label = "Security"
 [portal.policies.config]
 scopeAll = "എല്ലാ ഡോക്യുമെന്റുകളും"
 
+[portal.policies.config.classification]
+summary = "upload ചെയ്യുന്ന ഓരോ ഡോക്യുമെന്റിനെയും നിങ്ങളുടെ team-ന്റെ labels-നോട് classify ചെയ്ത് അതിന്റെ metadata tag ചെയ്യുന്നു."
+
+[portal.policies.config.classification.rules]
+0 = "Classify"
+1 = "metadata tag ചെയ്യുക"
+
 [portal.policies.config.compliance]
 summary = "System വിട്ടുപോകുന്നതിന് മുമ്പ് regulatory frameworks-നെതിരെ documents validate ചെയ്യുന്നു."
 
@@ -7371,6 +7974,29 @@ minConfidence = "കുറഞ്ഞ confidence"
 2 = "Name"
 3 = "Normalize"
 
+[portal.policies.config.purview]
+label = "Microsoft Purview sensitivity label പ്രയോഗിക്കുക"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "Purview portal-ിൽ നിന്നുള്ള label-ന്റെ GUID. ഒരു label പ്രയോഗിക്കുന്നത് അതിന്റെ metadata PDF-ലേക്ക് എഴുതും; encrypt ചെയ്യാൻ കഴിയില്ല, അതിന് Microsoft client ആവശ്യമാണ്."
+labelName = "Label പേര് (optional)"
+labelNameHelp = "ആളുകൾക്കും tools-നും label തിരിച്ചറിയാൻ ID-ക്കൊപ്പം രേഖപ്പെടുത്തുന്നു."
+
+[portal.policies.config.purview.fields.method]
+help = "ഒരു policy പ്രയോഗിച്ച label-നെയും ഒരാൾ തിരഞ്ഞെടുത്ത label-നെയും Purview വേർതിരിക്കുന്നു."
+label = "label എങ്ങനെ രേഖപ്പെടുത്തുന്നു"
+privileged = "ഒരാൾ തിരഞ്ഞെടുത്തതുപോലെ"
+standard = "സ്വയമേവ പ്രയോഗിച്ചതുപോലെ"
+
+[portal.policies.config.purviewRead]
+label = "Microsoft Purview label വായിക്കുക"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "ഡോക്യുമെന്റ് ഇതിനകം വഹിക്കുന്ന label വായിക്കുന്നു, അതിനാൽ പിന്നീട് steps-ന് അതനുസരിച്ച് പ്രവർത്തിക്കാം."
+
 [portal.policies.config.retention]
 summary = "ഡോക്യുമെന്റുകൾ എത്രകാലം സൂക്ഷിക്കണം, എപ്പോൾ archive ചെയ്യണം, എപ്പോൾ delete ചെയ്യണം എന്നിവ enforce ചെയ്യുന്നു."
 
@@ -7438,6 +8064,7 @@ title = "ഇതുവരെ പ്രവർത്തനമൊന്നുമി
 [portal.policies.endpoints]
 addWatermark = "Watermark"
 autoRedact = "PII റിഡാക്റ്റ് ചെയ്യുക"
+classifyAndLabel = "Classify"
 compressPdf = "കംപ്രസ് ചെയ്യുക"
 flatten = "ഫ്ലാറ്റൻ ചെയ്യുക"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "നിങ്ങളുടെ നയങ്ങൾ സംരക്ഷ
 retry = "വീണ്ടും ശ്രമിക്കുക"
 title = "Backend ലഭ്യമല്ല"
 
+[portal.policies.operations]
+change = "ഈ step ചെയ്യുന്നത് മാറ്റുക"
+noResults = "അതുമായി പൊരുത്തപ്പെടുന്ന step ഇല്ല. ഒരു product name, അല്ലെങ്കിൽ \"scan\", \"notify\", \"attach\" ശ്രമിക്കുക."
+searchPlaceholder = "steps തിരയുക - \"scan\", \"attach\" അല്ലെങ്കിൽ product name ശ്രമിക്കുക"
+
+[portal.policies.operations.bodyMode]
+binary = "Raw file bytes"
+json = "JSON payload-ന്റെ ഉള്ളിൽ"
+multipart = "file upload ആയി (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "നിങ്ങളുടെ സ്വന്തം ClamAV server ഡോക്യുമെന്റ് പരിശോധിക്കുന്നു; നിങ്ങളുടെ network-ിന് പുറത്തേക്ക് ഒന്നും പോകുന്നില്ല."
+label = "viruses-നായി scan ചെയ്യുക (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "macros, executables, scripts അല്ലെങ്കിൽ embedded objects ഉള്ള ഡോക്യുമെന്റുകൾ നിരസിക്കുന്നു."
+label = "active content block ചെയ്യുക"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive ഡോക്യുമെന്റ് പരിശോധിക്കുന്നു, അത് clean അല്ലെങ്കിൽ run നിർത്തും."
+label = "viruses-നായി scan ചെയ്യുക"
+
+[portal.policies.operations.confluenceAttach]
+description = "processed ഡോക്യുമെന്റ് ഒരു page-ൽ file ചെയ്യുന്നു."
+label = "Confluence page-ലേക്ക് attach ചെയ്യുക"
+
+[portal.policies.operations.consignoSubmit]
+description = "signing-നായി ഡോക്യുമെന്റ് ConsignO Cloud-ലേക്ക് submit ചെയ്യുന്നു."
+label = "signature-നായി അയയ്ക്കുക (ConsignO)"
+note = "ഡോക്യുമെന്റ് submit ചെയ്യുന്നു. signed copy retrieve ചെയ്യുന്നത് ഇപ്പോൾ പിന്തുണയ്ക്കുന്നില്ല, കാരണം ഒരു step-ന് പിന്നീട് വരുന്ന step-ലേക്ക് result കൈമാറാൻ കഴിയില്ല."
+
+[portal.policies.operations.customApiCall]
+description = "call നിങ്ങൾ തന്നെ author ചെയ്യുക: path, method, body, response handling."
+label = "custom API call ചെയ്യുക"
+
+[portal.policies.operations.discordNotify]
+description = "policy ഒരു ഡോക്യുമെന്റ് കൈകാര്യം ചെയ്തതായി channel-നെ അറിയിക്കുന്നു."
+label = "Discord-ലേക്ക് message post ചെയ്യുക"
+
+[portal.policies.operations.elasticIndex]
+description = "policy ചെയ്തത് searchable document ആയി രേഖപ്പെടുത്തുന്നു."
+label = "Elasticsearch-ൽ audit event index ചെയ്യുക"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart upload APIs-ന് അനുയോജ്യം; file payload-ന്റെ ഉള്ളിൽ വേണമെന്നുള്ള APIs-ന് JSON അനുയോജ്യം; binary raw bytes അയയ്ക്കുന്നു."
+label = "ഡോക്യുമെന്റ് എങ്ങനെ അയയ്ക്കണം"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "അതേപടി അയക്കുന്ന JSON body. {{document.base64}} file വഹിക്കുന്നു; {{document.*}} ഉം {{run.*}} ഉം ഓരോ ഡോക്യുമെന്റിനും പൂരിപ്പിക്കും."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Account"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API ഡോക്യുമെന്റ് പ്രതീക്ഷിക്കുന്ന form field."
+label = "File field name"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "From"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "header name/value pairs-ന്റെ JSON object. connection-ന്റെ credential നിങ്ങൾക്കായി ചേർക്കും."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "message body ആയി അയയ്ക്കുന്നു. {{document.*}} ഉം {{run.*}} ഉം ഓരോ ഡോക്യുമെന്റിനും പൂരിപ്പിക്കും."
+label = "Message"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "connection-ന്റെ base URL-ലേക്ക് append ചെയ്യുന്നു. ഇത് ഒരിക്കലും മറ്റൊരു host-ലേക്ക് എത്തില്ല."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "drive-ൽ ഇത് എഴുതേണ്ട സ്ഥലം. {{document.filename}} ഓരോ ഡോക്യുമെന്റിനും പൂരിപ്പിക്കും."
+label = "Destination path"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report ഡോക്യുമെന്റ് മാറ്റമില്ലാതെ വിടുന്നു. Replace മടങ്ങിവരുന്നതുമായി അത് മാറ്റിസ്ഥാപിക്കുന്നു."
+label = "reply-യോടെ എന്ത് ചെയ്യണം"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Signer-ന്റെ email"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Subject"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio ഈ text വിശകലനം ചെയ്യുന്നു. {{document.title}} ഉപയോഗിക്കുക അല്ലെങ്കിൽ പരിശോധിക്കേണ്ട text paste ചെയ്യുക."
+label = "പരിശോധിക്കേണ്ട text"
+
+[portal.policies.operations.fields.to]
+label = "To"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud username"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "policy ഒരു ഡോക്യുമെന്റ് കൈകാര്യം ചെയ്തതായി space-നെ അറിയിക്കുന്നു."
+label = "Google Chat-ലേക്ക് message post ചെയ്യുക"
+
+[portal.policies.operations.jiraAttach]
+description = "processed ഡോക്യുമെന്റ് ഒരു issue-ലേക്ക് file ചെയ്യുന്നു."
+label = "Jira issue-ലേക്ക് attach ചെയ്യുക"
+
+[portal.policies.operations.mailgunEmail]
+description = "processed ഡോക്യുമെന്റ് attachment ആയി അയയ്ക്കുന്നു."
+label = "ഡോക്യുമെന്റ് email ചെയ്യുക (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "processed ഡോക്യുമെന്റ് ഒരു folder-ലേക്ക് എഴുതുന്നു."
+label = "Nextcloud-ലേക്ക് upload ചെയ്യുക"
+
+[portal.policies.operations.presidioAnalyze]
+description = "നിങ്ങളുടെ സ്വന്തം Presidio server കണ്ടെത്തുന്ന personal data report ചെയ്യുന്നു."
+label = "personal data കണ്ടെത്തുക"
+note = "Presidio text വായിക്കുന്നു, files അല്ല. പരിശോധിക്കേണ്ട text നൽകുക — ഡോക്യുമെന്റ് തന്നെ upload ചെയ്യുന്നില്ല."
+
+[portal.policies.operations.responseMode]
+replace = "ഡോക്യുമെന്റിനെ reply ഉപയോഗിച്ച് മാറ്റിസ്ഥാപിക്കുക"
+report = "ഡോക്യുമെന്റ് നിലനിർത്തുക, reply രേഖപ്പെടുത്തുക"
+
+[portal.policies.operations.sendgridEmail]
+description = "processed ഡോക്യുമെന്റ് attachment ആയി അയയ്ക്കുന്നു."
+label = "ഡോക്യുമെന്റ് email ചെയ്യുക (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "policy ഒരു ഡോക്യുമെന്റ് കൈകാര്യം ചെയ്തതായി channel-നെ അറിയിക്കുന്നു."
+label = "Slack-ലേക്ക് message post ചെയ്യുക"
+
+[portal.policies.operations.splunkEvent]
+description = "നിങ്ങളുടെ auditors ഇതിനകം നോക്കുന്നിടത്ത് policy ചെയ്തത് രേഖപ്പെടുത്തുന്നു."
+label = "Splunk-ലേക്ക് audit event അയയ്ക്കുക"
+
+[portal.policies.operations.sumologicEvent]
+description = "policy ചെയ്തത് HTTP collector-ലേക്ക് രേഖപ്പെടുത്തുന്നു."
+label = "Sumo Logic-ലേക്ക് audit event അയയ്ക്കുക"
+
+[portal.policies.operations.teamsNotify]
+description = "policy ഒരു ഡോക്യുമെന്റ് കൈകാര്യം ചെയ്തതായി channel-നെ അറിയിക്കുന്നു."
+label = "Teams-ലേക്ക് message post ചെയ്യുക"
+
+[portal.policies.operations.webhookPost]
+description = "നിങ്ങൾ തിരഞ്ഞെടുക്കുന്ന URL-ലേക്ക് ഡോക്യുമെന്റ് തന്നെ അയയ്ക്കുന്നു."
+label = "ഡോക്യുമെന്റ് webhook-ലേക്ക് post ചെയ്യുക"
+
+[portal.policies.operations.zapierNotify]
+description = "run-ന്റെ details നിങ്ങളുടെ automation-ലേക്ക് കൈമാറുന്നു."
+label = "Zap അല്ലെങ്കിൽ Make scenario trigger ചെയ്യുക"
+
 [portal.policies.stats]
 activeFor = "സജീവം"
 dataProcessed = "പ്രോസസ്സ് ചെയ്ത ഡാറ്റ"
@@ -7473,6 +8277,13 @@ label = "നടപ്പാക്കിയ ഡോക്യുമെന്റു
 description = "ക്രമീകരിച്ചിട്ടുണ്ടെങ്കിലും പ്രവർത്തിക്കുന്നില്ല"
 label = "താൽക്കാലികമായി നിർത്തിയത്"
 
+[portal.policies.table]
+appliesTo = "ബാധകമാകുന്നത്"
+docs = "നടപ്പാക്കിയ Docs"
+enforces = "Enforces"
+policy = "നയം"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "പിന്നോട്ട്"
 cancel = "റദ്ദാക്കുക"
@@ -7480,6 +8291,10 @@ continue = "തുടരുക"
 enablePolicy = "നയം പ്രവർത്തനക്ഷമമാക്കുക"
 saveChanges = "മാറ്റങ്ങൾ സംരക്ഷിക്കുക"
 
+[portal.policies.wizard.capability.classify]
+desc = "നിങ്ങളുടെ team-ന്റെ labels-ൽ നിന്ന് ഡോക്യുമെന്റിന്റെ type തിരിച്ചറിഞ്ഞ് അത് tag ചെയ്യുന്നു, അതിനാൽ category പ്രകാരം file ചെയ്യാനും search ചെയ്യാനും കഴിയും."
+label = "ഡോക്യുമെന്റ് classify ചെയ്യുക"
+
 [portal.policies.wizard.capability.compress]
 desc = "ഡോക്യുമെന്റിനെ ചെറിയ ഫയൽ വലുപ്പത്തിലേക്ക് കംപ്രസ് ചെയ്യുന്നു."
 label = "ഫയൽ വലുപ്പം കുറയ്ക്കുക"
@@ -7500,10 +8315,18 @@ label = "സെൻസിറ്റീവ് വിവരങ്ങൾ റിഡാ
 desc = "ഡോക്യുമെന്റ് തുറക്കുമ്പോൾ ഒന്നും സ്വയമേവ പ്രവർത്തിക്കാതിരിക്കാൻ മറഞ്ഞിരിക്കുന്ന JavaScript നീക്കംചെയ്യുന്നു."
 label = "സജീവ ഉള്ളടക്കം നീക്കംചെയ്യുക"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "സ്വതന്ത്ര timestamp authority ഉപയോഗിച്ച് ഡോക്യുമെന്റ് ഒരു സമയബിന്ദുവിൽ ഈ കൃത്യമായ രൂപത്തിൽ ഉണ്ടായിരുന്നുവെന്ന് തെളിയിക്കുന്നു. ഒരു hash മാത്രമാണ് അയയ്ക്കുന്നത് - ഡോക്യുമെന്റ് നിങ്ങളുടെ server വിട്ടുപോകുന്നില്ല."
+label = "trusted timestamp ചേർക്കുക"
+
 [portal.policies.wizard.capability.watermark]
 desc = "ഓരോ പേജിലും കാണാവുന്ന അടയാളം (ഉദാ. “Confidential”) പതിക്കുന്നു."
 label = "Watermark പ്രയോഗിക്കുക"
 
+[portal.policies.wizard.classification]
+description = "upload ചെയ്യുന്ന ഓരോ ഡോക്യുമെന്റും built-in labels-നോട് classify ചെയ്ത് പൊരുത്തപ്പെടുന്ന types ഉപയോഗിച്ച് tag ചെയ്യുന്നു. Label set നിങ്ങളുടെ മുഴുവൻ team-ലും shared ആണ്."
+labelsHeading = "Classification labels"
+
 [portal.policies.wizard.errors]
 noTools = "ആദ്യം workflow-ൽ കുറഞ്ഞത് ഒരു tool എങ്കിലും പ്രവർത്തനക്ഷമമാക്കുക."
 saveFailed = "നയം സംരക്ഷിക്കാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
@@ -7548,73 +8371,118 @@ setUp = "{{category}} നയം സജ്ജീകരിക്കുക"
 [portal.policies.wizard.workflow]
 description = "ഈ നയം പ്രോസസ്സ് ചെയ്യുന്ന ഓരോ ഡോക്യുമെന്റിനും എന്ത് ചെയ്യണമെന്ന് തിരഞ്ഞെടുക്കുക."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} സജീവം"
-noRule = "ഇതുവരെ നിയമം നടപ്പാക്കിയിട്ടില്ല"
-subtitle = "ഏത് pipeline ആണ് കൈകാര്യം ചെയ്യുന്നതെന്നതുമായി ബന്ധമില്ലാതെ, ഓരോ ഡോക്യുമെന്റും കടന്നുപോകുന്ന സ്ഥിരമായ ഓട്ടോമേഷനുകൾ."
-title = "നിങ്ങളുടെ PDFs-ൽ പ്രവർത്തിക്കുന്നത്"
-
 [portal.policySummary.action]
-comingSoon = "Enterprise-ലേക്ക് അപ്‌ഗ്രേഡ് ചെയ്യുക"
-configure = "ക്രമീകരിക്കുക"
 setUp = "സജ്ജീകരിക്കുക"
 
-[portal.policySummary.column]
-activeRule = "സജീവ നിയമം"
-policy = "നയം"
-status = "സ്ഥിതി"
+[portal.processorFlow]
+footnote = "കണക്കുകൾ കഴിഞ്ഞ 24 മണിക്കൂറിനുള്ളതാണ്. Flow speed സൂചനയ്ക്കായി മാത്രം."
+liveBadge = "Live"
+stats = "{{connected}} connected · {{processed}} PDFs processed"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "നയങ്ങൾ ക്രമീകരിച്ചുകഴിഞ്ഞാൽ വിഭാഗങ്ങൾ ഇവിടെ പ്രത്യക്ഷപ്പെടും."
-title = "ഇതുവരെ നയങ്ങളില്ല"
+[portal.processorFlow.lens]
+ariaLabel = "View mode"
+flow = "Flow"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "സജീവം"
-off = "ഓഫ്"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "പരാജയപ്പെട്ടു"
+heading = "Outcomes"
+success = "Delivered"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} active"
+count = "{{n}} · 24h"
+heading = "Policies"
+setUp = "സജ്ജീകരിക്കുക"
 soon = "ഉടൻ"
 
-[portal.processingStatus]
-managePlan = "പ്ലാൻ നിയന്ത്രിക്കുക"
-volumeSuffix = "പ്രോസസ്സ് ചെയ്ത PDFs · കഴിഞ്ഞ 30 ദിവസം"
+[portal.processorFlow.sankey]
+waist = "Policies · {{n}} active"
+
+[portal.processorFlow.sankey.empty]
+description = "processor വഴി ഡോക്യുമെന്റുകൾ flow ചെയ്യുന്നത് കാണാൻ ഒരു source ബന്ധിപ്പിച്ച് ഒരു policy on ചെയ്യുക."
+title = "ഇതുവരെ flow ഇല്ല"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Connect"
+editor = "Stirling PDF Editor"
+heading = "Sources"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email intake"
 
 [portal.procurement]
-reset = "പ്രോക്യൂർമെന്റ് റീസെറ്റ് ചെയ്യുക (ഡെമോ)"
 subtitle = "നിങ്ങളുടെ ടീമിനെ വിലയിരുത്തി, കരാറിലാക്കി, ഓൺബോർഡ് ചെയ്യുക. ഓരോ ഡോക്യുമെന്റും ഒരിടത്ത്."
 title = "പ്രോക്യൂർമെന്റ്"
 
-[portal.procurement.action]
-download = "ഡൗൺലോഡ്"
-pay = "ഇപ്പോൾ അടയ്ക്കുക"
-request = "അഭ്യർത്ഥിക്കുക"
-sign = "പരിശോധിച്ച് ഒപ്പിടുക"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "അംഗീകരിച്ച് subscribe ചെയ്യുക"
+confidential = "Confidential"
 confirm = "ഞാൻ Stirling Enterprise Agreement വായിച്ചു, അംഗീകരിക്കുന്നു."
-eyebrow = "കരാർ"
-intro = "Master Service Agreement, Order Form, EULA, Data Processing Agreement എന്നിവ ഉൾപ്പെടെ നിങ്ങളുടെ ഡീലിനെ ഒരു സംയുക്ത കരാർ കവർ ചെയ്യുന്നു. അത് പരിശോധിച്ച്, ക്വോട്ട് committed subscription ആയി സ്വീകരിക്കാൻ സമ്മതിക്കുക."
-title = "നിങ്ങളുടെ enterprise agreement പരിശോധിക്കുക"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA, DPA എന്നിവ ഒരൊറ്റ signature-ലേക്ക് സംയോജിപ്പിച്ചത്."
+download = "ഡൗൺലോഡ്"
+downloadDraftError = "agreement PDF generate ചെയ്യാനായില്ല - document renderer ലഭ്യമല്ല. ദയവായി കുറച്ച് കഴിഞ്ഞ് വീണ്ടും ശ്രമിക്കുക അല്ലെങ്കിൽ support-നെ ബന്ധപ്പെടുക."
+downloadError = "signed agreement ഡൗൺലോഡ് ചെയ്യാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
+legalName = "Legal entity name"
+legalNamePlaceholder = "sign ചെയ്യുന്ന legal entity"
+loadError = "agreement load ചെയ്യാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
+loading = "agreement load ചെയ്യുന്നു..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "മാറ്റങ്ങൾ അഭ്യർത്ഥിക്കുക"
+scrollHint = "review ചെയ്യാൻ scroll ചെയ്യുക"
+signatory = "Signatory name"
+signatoryPlaceholder = "പൂർണ്ണ പേര്"
+signatoryTitle = "Signatory title"
+signatoryTitlePlaceholder = "ഉദാ. General Counsel"
+signError = "നിങ്ങളുടെ signature record ചെയ്യാനായില്ല. ദയവായി വീണ്ടും ശ്രമിക്കുക."
 
 [portal.procurement.builder]
 addons = "Add-ons"
+addressLine1 = "Address line 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Address line 2"
+addressLine2Placeholder = "Suite, floor, building"
 back = "പിന്നോട്ട്"
 businessName = "ബിസിനസ് പേര്"
 businessNamePlaceholder = "നിങ്ങളുടെ കമ്പനി"
+city = "City"
+cityPlaceholder = "San Francisco"
+completeRequired = "quote generate ചെയ്യുന്നതിന് മുമ്പ് ആവശ്യമായ fields ( * അടയാളപ്പെടുത്തിയവ) valid email സഹിതം പൂർത്തിയാക്കുക."
+contactEmail = "Contact email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Contact name"
+contactNamePlaceholder = "Jane Doe"
 continue = "തുടരുക"
-country = "രാജ്യം"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "United Kingdom (GBP £)"
-countryUS = "United States (USD $)"
+done = "പൂർത്തിയായി"
 eula = "ഞാൻ Stirling Enterprise EULA വായിച്ചു, അംഗീകരിക്കുന്നു. ഈ ക്വോട്ടിൽ നിന്ന് സൃഷ്ടിക്കുന്ന കരാറിനെ ഇത് നിയന്ത്രിക്കുന്നു."
 generate = "ക്വോട്ട് സൃഷ്ടിക്കുക"
-included = "ഉൾപ്പെടുത്തിയിട്ടുണ്ട്"
 indemnification = "IP indemnification"
 indemnificationSub = "EULA പ്രകാരം യോഗ്യമായ IP ക്ലെയിമുകൾ ഞങ്ങൾ പ്രതിരോധിക്കുന്നു"
-offlineLicense = "Offline / air-gapped ലൈസൻസ്"
-offlineLicenseSub = "air-gapped self-hosted instance-നായി ഡൗൺലോഡ് ചെയ്യാവുന്ന ലൈസൻസ് ഫയൽ"
+paperEyebrow = "Enterprise quote"
+paperFor = "Prepared for"
+pdfSize = "PDF size"
+poNumber = "PO number"
+poNumberPlaceholder = "Optional"
+postalCode = "Postal code"
+postalCodePlaceholder = "94105"
+posture = "Governance"
+posture_count = "~{{count}} policies"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Classification + Sharing — defaults"
+posture_governed = "Governed"
+posture_governedSub = "Security, Routing എന്നിവ ചേർക്കുന്നു"
+posture_regulated = "Regulated"
+posture_regulatedSub = "ഓരോ category — Compliance, Retention, Ingestion"
 qbr = "ത്രൈമാസ ബിസിനസ് അവലോകനങ്ങൾ"
 qbrSub = "നിങ്ങളുടെ SE ഓരോ ത്രൈമാസവും ഉപയോഗവും roadmap-ഉം അവലോകനം ചെയ്യും"
+region = "State / region"
+regionPlaceholder = "California"
 running = "{{annual}} / yr · {{years}}-yr {{tcv}}"
 s1Sub = "നിങ്ങളുടെ ടീവും ഓരോ വർഷവും പ്രവർത്തിപ്പിക്കുമെന്ന് പ്രതീക്ഷിക്കുന്ന PDFs-ഉം."
 s1Title = "നിങ്ങൾ എത്ര പ്രോസസ്സ് ചെയ്യും?"
@@ -7623,6 +8491,12 @@ s2Title = "Commitment and service"
 s3Sub = "ക്വോട്ടിനും അതിൽ നിന്ന് സൃഷ്ടിക്കുന്ന കരാറിനുമായി."
 s3Title = "നിങ്ങളുടെ വിശദാംശങ്ങൾ"
 serviceLevel = "Service level"
+size_compact = "Compact"
+size_compactSub = "കൂടുതലും text, 1 MB-ൽ താഴെ"
+size_heavy = "Heavy"
+size_heavySub = "Scanned അല്ലെങ്കിൽ image-heavy, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "text, images എന്നിവ mix ചെയ്തത്, 1 മുതൽ 5 MB വരെ"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 ബിസിനസ് മണിക്കൂർ · dedicated account manager · +30%"
 slPriority = "Priority"
@@ -7630,6 +8504,8 @@ slPrioritySub = "അതേ ബിസിനസ് ദിവസം · named CSM ·
 slStandard = "Standard"
 slStandardSub = "അടുത്ത ബിസിനസ് ദിവസം · shared CSM · ഉൾപ്പെടുത്തി"
 stepOf = "ഘട്ടം {{n}} / {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Optional"
 term = "കാലാവധി"
 termDiscount = "{{pct}}% multi-year commitment discount പ്രയോഗിച്ചു"
 title = "നിങ്ങളുടെ ക്വോട്ട് നിർമ്മിക്കുക"
@@ -7637,6 +8513,7 @@ training = "Onboarding & training"
 trainingSub = "നിങ്ങളുടെ ടീമിനെ പ്രവർത്തനക്ഷമമാക്കാൻ live sessions"
 users = "മൊത്തം ഉപയോക്താക്കൾ"
 usersPlaceholder = "ഉദാ. 250"
+viewEula = "വായിക്കുക"
 volEstimated = "{{count}} ഉപയോക്താക്കളിൽ നിന്ന് കണക്കാക്കി (~ഓരോരുത്തർക്കും 2,000 PDFs, automation ഉൾപ്പെടെ). നിങ്ങൾക്ക് കൂടുതൽ കൃത്യമായി അറിയുമെങ്കിൽ തിരുത്തുക."
 volManual = "നിങ്ങളുടെ കണക്ക് ഉപയോഗിക്കുന്നു. ഏത് സമയത്തും നിങ്ങളുടെ ടീം വലുപ്പത്തിൽ നിന്ന് വീണ്ടും കണക്കാക്കാം."
 volNoUsers = "ഉറപ്പില്ലേ? നിങ്ങളുടെ ടീം വലുപ്പം നൽകൂ, ഞങ്ങൾ കണക്കാക്കാം."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "ഉദാ. 1,000,000"
 years_one = "{{count}} വർഷം"
 years_other = "{{count}} വർഷങ്ങൾ"
 
-[portal.procurement.docs]
-count_one = "{{count}} ഡോക്യുമെന്റ്"
-count_other = "{{count}} ഡോക്യുമെന്റുകൾ"
-done = "പൂർത്തിയായി"
-here = "നിങ്ങൾ ഇവിടെ"
-hide = "മറയ്ക്കുക"
-optional = "ഓപ്ഷണൽ"
-paidAddon = "Paid add-on"
-show = "കാണിക്കുക"
-subtitle = "യാത്രയിലെ ഓരോ ഘട്ടത്തിലും നിങ്ങൾക്ക് വേണ്ടതെല്ലാം, deal മുന്നേറുമ്പോൾ പ്രദർശിപ്പിക്കുന്നു."
-supportingSubtitle = "SOC 2, security reviews, tax forms എന്നിവയും അതിലധികവും, നിങ്ങളുടെ security അല്ലെങ്കിൽ procurement ടീം ചോദിക്കുമ്പോൾ തയ്യാറായി. ചിലതിന് ഒറ്റത്തവണ ഫീസ് ഉണ്ടായിരിക്കും."
-supportingTitle = "നിങ്ങളുടെ മൂല്യനിർണ്ണയത്തെ പിന്തുണയ്ക്കുന്നു"
-title = "ഡോക്യുമെന്റുകൾ"
-upcoming = "വരാനിരിക്കുന്നത്"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form, DPA എന്നിവ ഒരൊറ്റ signature-ൽ."
+download = "ഡൗൺലോഡ്"
+eula = "EULA & Commercial Terms"
+eulaSub = "software-വും self-serve commercial terms-ും."
+invoice = "Invoice"
+invoiceSub = "നിങ്ങളുടെ ആദ്യ subscription invoice."
+laterInvoice = "നിങ്ങൾ accept ചെയ്ത ശേഷം ലഭ്യം"
+laterQuote = "നിങ്ങളുടെ quote issue ചെയ്താൽ ലഭ്യം"
+quote = "Quote"
+quoteSub = "നിങ്ങളുടെ itemised enterprise quote."
+sla = "SLA Exhibit"
+slaSub = "Support tiers, response targets എന്നിവ."
+subprocessors = "Subprocessors"
+subprocessorsSub = "നിങ്ങളുടെ വേണ്ടി data process ചെയ്യുന്ന third parties."
+subtitle = "നിങ്ങളുടെ deal paperwork, ഏത് സമയത്തും ലഭ്യം."
+title = "Documents"
+view = "കാണുക"
 
 [portal.procurement.error]
 title = "എന്തോ പിശക് സംഭവിച്ചു"
 
 [portal.procurement.hero]
-company = "നിങ്ങളുടെ enterprise deal"
+barAria = "Stage {{current}} of {{total}}"
 ctaAgreement = "കരാർ പരിശോധിച്ച് ഒപ്പിടുക"
-ctaLive = "നിങ്ങൾ live ആണ്"
-ctaPayment = "പേയ്മെന്റ് ചേർക്കുക"
+ctaExploring = "നിങ്ങളുടെ trial സജ്ജീകരിക്കുക"
 ctaQuote = "നിങ്ങളുടെ ക്വോട്ട് പരിശോധിക്കുക"
+ctaReviewQuote = "quote review ചെയ്യുക"
 ctaTrial = "നിങ്ങളുടെ ക്വോട്ട് നിർമ്മിക്കുക"
+documents = "Documents"
 eyebrow = "Enterprise procurement"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "ടീം അംഗങ്ങളെ ക്ഷണിക്കുക"
-keyDocs = "പ്രധാന ഡോക്യുമെന്റുകൾ"
-nextStep = "അടുത്ത ഘട്ടം: {{action}}"
-notStarted = "ആരംഭിച്ചിട്ടില്ല"
+licenseKey = "Licence key"
+liveSub = "നിങ്ങളുടെ organization provision ചെയ്തു, നിങ്ങളുടെ licence active ആണ്."
+liveTitle = "നിങ്ങൾ Stirling Enterprise-ൽ live ആണ്"
+next = "Next: {{stage}}"
 open = "പ്രോക്യൂർമെന്റ് തുറക്കുക"
 scheduleCall = "കോൾ ഷെഡ്യൂൾ ചെയ്യുക"
-setup1Sub = "നിങ്ങളുടെ ടീം അംഗങ്ങളെ ക്ഷണിക്കുക"
-setup1Title = "PDF Editor വിന്യസിക്കുക"
-setup2Sub = "എഡിറ്ററുകളിലും മറ്റു ഉറവിടങ്ങളിലും processing ഓൺ ചെയ്യുക"
-setup2Title = "PDF Processor കണക്റ്റ് ചെയ്യുക"
-setup3Sub = "ആവശ്യമുള്ളപ്പോൾ Security, Compliance, Routing, അല്ലെങ്കിൽ Retention ഓൺ ചെയ്യുക"
-setup3Title = "ശുപാർശ ചെയ്യുന്ന നയങ്ങൾ ചേർക്കുക"
+sentenceAgreement = "agreement review ചെയ്ത് sign ചെയ്യുക"
+sentenceLive = "provisioning and rollout"
+sentencePayment = "purchase order and payment"
+sentenceQuote = "നിങ്ങളുടെ quote review ചെയ്ത് accept ചെയ്യുക"
+sentenceTrial = "നിങ്ങളുടെ trial workspace സജ്ജീകരിക്കുക"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} ദിവസം ശേഷിക്കുന്നു"
 daysLeft_other = "{{count}} ദിവസങ്ങൾ ശേഷിക്കുന്നു"
-engineerLabel = "നിങ്ങളുടെ solutions engineer"
-eyebrow = "നിങ്ങളുടെ rollout"
-live = "നിങ്ങൾ Stirling Enterprise-ൽ live ആണ്"
-nextStep = "അടുത്ത ഘട്ടം: {{action}}"
-subtitle = "നിങ്ങളുടെ solutions engineer ഓരോ ഘട്ടത്തിലും നിങ്ങളോടൊപ്പം. ഒരേസമയം ഒരു അടുത്ത പ്രവർത്തനം; പൂർണ്ണ checklist താഴെയുണ്ട്."
-title = "Trial മുതൽ live വരെ, ഒരു guided path"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "ഒരു signature MSA, order form, EULA, DPA എന്നിവ കവർ ചെയ്യുന്നു."
@@ -7727,6 +8604,9 @@ downloadError = "Offline ലൈസൻസ് ഫയൽ ഇതുവരെ സൃ
 downloadOffline = "Offline ലൈസൻസ് (.lic) ഡൗൺലോഡ് ചെയ്യുക"
 hint = "ഇത് activate ചെയ്യാൻ ഈ key self-hosted instance-ൽ ഒട്ടിക്കുക, അല്ലെങ്കിൽ നിങ്ങളുടെ രേഖകൾക്കായി സൂക്ഷിക്കുക. സുരക്ഷിതമായി സൂക്ഷിക്കുക."
 label = "നിങ്ങളുടെ ലൈസൻസ് key"
+subtitle = "ഈ key ഉപയോഗിച്ച് self-hosted instance activate ചെയ്യുക, അല്ലെങ്കിൽ നിങ്ങളുടെ records-നായി സൂക്ഷിക്കുക."
+title = "നിങ്ങളുടെ licence key"
+trialFileHint = "ഇത് നിങ്ങളുടെ trial licence file ആണ്. നിങ്ങളുടെ agreement പ്രാബല്യത്തിൽ വന്നാൽ, തിരികെ വന്ന് ഇത് വീണ്ടും ഡൗൺലോഡ് ചെയ്യുക — online licence key-നെ പോലെ അല്ല, .lic file സ്വയം update ചെയ്യില്ല."
 
 [portal.procurement.link]
 cta = "അക്കൗണ്ട് ലിങ്ക് ചെയ്യുക"
@@ -7739,65 +8619,62 @@ description = "നിങ്ങളുടെ subscription സജീവമാണ്
 eyebrow = "Live"
 title = "നിങ്ങൾ Stirling Enterprise-ൽ live ആണ്"
 
-[portal.procurement.locked]
-description = "Enterprise evaluation ആരംഭിച്ചുകഴിഞ്ഞാൽ trial keys, committed-volume quotes, one-signature agreement, payment, നിങ്ങളുടെ document ledger എന്നിവ എല്ലാം ഇവിടെ ഉണ്ടാകും."
-eyebrow = "Enterprise മാത്രം"
-talkToSales = "Sales-നോട് സംസാരിക്കുക"
-title = "പ്രോക്യൂർമെന്റ് ട്രാക്ക് Enterprise-ോടെയാണ് തുറക്കുന്നത്"
-
 [portal.procurement.milestone]
-accept = "അംഗീകരിച്ച് തുടരുക"
-description = "നിങ്ങളുടെ ടീമുമായി പങ്കിടാൻ PDF ഡൗൺലോഡ് ചെയ്യുക, തയ്യാറാകുമ്പോൾ അംഗീകരിക്കാൻ തിരികെ വരുക, അല്ലെങ്കിൽ മാറ്റങ്ങൾ വരുത്തുക."
-download = "PDF ഡൗൺലോഡ് ചെയ്യുക"
 downloadError = "ക്വോട്ട് PDF ഇതുവരെ ഡൗൺലോഡ് ചെയ്യാനായില്ല — ദയവായി കുറച്ച് കഴിഞ്ഞ് വീണ്ടും ശ്രമിക്കുക."
-edit = "ക്വോട്ട് തിരുത്തുക"
-eyebrow = "ക്വോട്ട് {{number}}"
-perYear = " / yr"
-preparedFor = "{{company}}-നായി തയ്യാറാക്കി"
-tcv = "{{value}} total contract value"
-title = "നിങ്ങളുടെ ക്വോട്ട് തയ്യാറാണ്"
-
-[portal.procurement.modal]
-cancel = "റദ്ദാക്കുക"
-chooseFile = "ഫയൽ തിരഞ്ഞെടുക്കുക"
-close = "അടയ്ക്കുക"
-downloadBody = "നിങ്ങളുടെ ഡൗൺലോഡ് ഉടൻ ആരംഭിക്കും."
-downloadCta = "ഡൗൺലോഡ്"
-downloadTitle = "ഡൗൺലോഡ്"
-noFile = "ഫയൽ തിരഞ്ഞെടുത്തിട്ടില്ല"
-payBody = "Stripe വഴി കാർഡോ bank transfer-ഓ ഉപയോഗിച്ച് നിങ്ങളുടെ committed contract അടയ്ക്കുക. പേയ്മെന്റ് clear ആയ ഉടൻ നിങ്ങളുടെ workspace provision ചെയ്യും."
-payCta = "Stripe-ലേക്ക് തുടരുക"
-payTitle = "പേയ്മെന്റ് സ്ഥിരീകരിക്കുക"
-requestBodyFree = "ആവശ്യാനുസരണം ഞങ്ങൾ ഇത് സൃഷ്ടിക്കുന്നു. സ്ഥിരീകരിക്കുക; നിങ്ങളുടെ solutions engineer അത് ഉടൻ അയക്കും."
-requestBodyPaid = "ഇത് paid add-on ആണ്. സ്ഥിരീകരിക്കുക; നിങ്ങളുടെ solutions engineer അത് scope ചെയ്ത് paperwork അയക്കും."
-requestCta = "അഭ്യർത്ഥിക്കുക"
-requestTitle = "ഈ ഡോക്യുമെന്റ് അഭ്യർത്ഥിക്കുക"
-signBody = "E-signature-നായി Stirling Enterprise Agreement തുറക്കുന്നു: ഒരു signature MSA, order form, EULA, DPA എന്നിവ കവർ ചെയ്യുന്നു. ഞങ്ങൾ സ്വയമേവ countersign ചെയ്യും, തുടർന്ന് നിങ്ങൾ payment-ലേക്ക് മുന്നേറും."
-signCta = "Signature-നായി തുറക്കുക"
-signTitle = "നിങ്ങളുടെ കരാർ പരിശോധിച്ച് ഒപ്പിടുക"
-uploadBody = "നിങ്ങളുടെ PO ഞങ്ങൾക്ക് അയയ്ക്കുക, നിങ്ങളുടെ terms പ്രകാരം ഞങ്ങൾ invoice ചെയ്യും. PDF വലിച്ചിടുക അല്ലെങ്കിൽ താഴെ നിന്ന് ഒരു ഫയൽ തിരഞ്ഞെടുക്കുക."
-uploadCta = "Purchase order upload ചെയ്യുക"
-uploadTitle = "നിങ്ങളുടെ purchase order upload ചെയ്യുക"
 
 [portal.procurement.payment]
 description = "നിങ്ങളുടെ ക്വോട്ട് അംഗീകരിച്ചു, ലൈസൻസ് ഇതിനകം സജീവമാണ് — നിങ്ങളുടെ ടീമിന് ഉടൻ തുടങ്ങാം. തയ്യാറാകുമ്പോൾ ആദ്യ invoice അടയ്ക്കുക; email ആവശ്യമില്ലാതെ ഇവിടെ അടയ്ക്കുകയോ ഡൗൺലോഡ് ചെയ്യുകയോ ചെയ്യാം."
+downloadAgreement = "signed agreement ഡൗൺലോഡ് ചെയ്യുക"
 downloadInvoice = "Invoice ഡൗൺലോഡ് ചെയ്യുക"
-simulate = "Payment received simulate ചെയ്യുക (ഡെമോ)"
+eyebrow = "Payment"
 title = "Subscription സൃഷ്ടിച്ചു"
 viewInvoice = "Invoice കാണുക & അടയ്ക്കുക"
 
+[portal.procurement.review]
+acceptCta = "quote accept ചെയ്യുക"
+annual = "Annual fee (year 1)"
+downloadCta = "quote ഡൗൺലോഡ് ചെയ്യുക"
+poNumber = "Purchase order: {{po}}"
+renewal = "term-ന് ശേഷം {{amount}}/year ആയി പുതുക്കും (+{{pct}}% CPI)"
+tcv = "{{years}}-year term, മുഴുവൻ തുകയും മുൻകൂർ അടച്ചു: {{tcv}}"
+validUntil = "{{date}} വരെ valid"
+
 [portal.procurement.schedule]
 fallback = "Scheduler ലോഡ് ചെയ്യാനായില്ല."
 fallbackLink = "Scheduling പുതിയ tab-ൽ തുറക്കുക"
+loading = "scheduler load ചെയ്യുന്നു..."
 subtitle = "നിങ്ങളുടെ solutions engineer നിങ്ങളുടെ ടീമിനെ rollout-ിലൂടെ നയിക്കും. നിങ്ങൾക്ക് അനുയോജ്യമായ സമയം തിരഞ്ഞെടുക്കുക."
 title = "കോൾ ഷെഡ്യൂൾ ചെയ്യുക"
 
-[portal.procurement.status]
-action = "പ്രവർത്തനം ആവശ്യമാണ്"
-available = "ലഭ്യം"
-complete = "പൂർത്തിയായി"
-pending = "ബാക്കി"
-request = "അഭ്യർത്ഥന പ്രകാരം"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Sealed, outbound ഇല്ല"
+back = "പിന്നോട്ട്"
+businessName = "Business name"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Managed, ഏറ്റവും വേഗത്തിലുള്ള start"
+continue = "തുടരുക"
+deployment = "എവിടെയാണ് deploy ചെയ്യേണ്ടത്?"
+eula = "Stirling EULA & Commercial Terms ഞാൻ അംഗീകരിക്കുന്നു."
+fullName = "പൂർണ്ണ പേര്"
+fullNamePlaceholder = "നിങ്ങളുടെ പേര്"
+invites = "teammates ക്ഷണിക്കുക · optional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "call schedule ചെയ്യുക"
+seats = "പരിശോധിക്കുന്ന ആളുകൾ"
+seatsPlaceholder = "ഉദാ. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker അല്ലെങ്കിൽ Kubernetes"
+start = "trial ആരംഭിക്കുക"
+stepOf = "Step {{n}} of {{total}}"
+subtitle = "14 ദിവസത്തേക്ക് free, card ആവശ്യമില്ല."
+subtitleDetails = "നിങ്ങളുടെ quote-നും agreement-നും കുറച്ച് details."
+talkFirst = "ആദ്യം സംസാരിക്കണോ?"
+title = "നിങ്ങളുടെ trial സജ്ജീകരിക്കുക"
+viewEula = "വായിക്കുക"
+workEmail = "Work email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "നീട്ടുന്നത് 7 ദിവസം ചേർക്കുകയും നിങ്ങളുടെ solutions engineer-നെ അറിയിക്കുകയും ചെയ്യും."
@@ -7808,20 +8685,6 @@ maxed = "പരമാവധി എത്തി"
 subtitle = "നിങ്ങളുടെ free trial {{date}} വരെ പ്രവർത്തിക്കും. കാർഡ് ആവശ്യമില്ല."
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Committed volume pricing, org-wide SSO + SCIM + RBAC, 90-day immutable audit, കൂടാതെ dedicated SE."
-homeCta = "Trial ആരംഭിക്കുക →"
-homeHeadline = "മില്ല്യൺ കണക്കിന് PDFs പ്രോസസ്സ് ചെയ്യുക."
-
-[portal.recentActivity]
-title = "സമീപകാല പ്രവർത്തനം"
-viewAll = "എല്ലാം കാണുക"
-
-[portal.recentActivity.empty]
-description = "Pipeline runs, deploys, agent events എന്നിവ ഇവിടെ പ്രത്യക്ഷപ്പെടും."
-title = "ഇവിടെ ഇതുവരെ ഒന്നുമില്ല"
-
 [portal.search]
 ariaLabel = "തിരയുക"
 placeholder = "Stirling തിരയുക — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Account link"
 
-[portal.shell.header]
-accountFallback = "അക്കൗണ്ട്"
-accountMenu = "അക്കൗണ്ട് menu"
-darkMode = "Dark mode"
-lightMode = "Light mode"
-search = "തിരയുക"
-searchPlaceholder = "തിരയുക…"
-signOut = "Sign out"
-switchToDark = "Dark theme-ലേക്ക് മാറ്റുക"
-switchToLight = "Light theme-ലേക്ക് മാറ്റുക"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Stirling account ലിങ്ക് ചെയ്യുക"
-planEditor = "Editor plan"
-planEnterprise = "Enterprise plan"
-planProcessor = "Processor plan"
 primaryNav = "Primary navigation"
 switchApp = "App മാറുക"
 
+[portal.shell.topbar]
+closeNav = "navigation അടയ്ക്കുക"
+openNav = "navigation തുറക്കുക"
+search = "തിരയുക"
+
 [portal.sources]
 subtitle = "Stirling-ലേക്ക് ഡോക്യുമെന്റുകൾ നൽകുന്ന വീണ്ടും ഉപയോഗിക്കാവുന്ന input connections. ഒരു connection ഒരിക്കൽ configure ചെയ്ത്, പിന്നീട് എത്ര നയങ്ങളിൽ വേണമെങ്കിലും reference ചെയ്യുക. അതിന്റെ config-നും അത് ഉപയോഗിക്കുന്ന നയങ്ങൾക്കും ഒരു row ക്ലിക്ക് ചെയ്യുക."
 title = "ഉറവിടങ്ങൾ"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "ഉറവിടം കണക്റ്റ് ചെയ്യുക"
 
+[portal.sources.builder]
+back = "sources-ലേക്ക് മടങ്ങുക"
+backToTypes = "എല്ലാ source types"
+cancel = "റദ്ദാക്കുക"
+chooseHint = "ഡോക്യുമെന്റുകൾ എവിടെ നിന്നാണ് വരുന്നതെന്ന് തിരഞ്ഞെടുക്കുക. Greyed-out connectors വരാനിരിക്കുകയാണ്."
+comingSoon = "ഉടൻ വരുന്നു"
+comingSoonHeading = "ഉടൻ വരുന്നു"
+create = "source സൃഷ്ടിക്കുക"
+createTitle = "ഒരു source ബന്ധിപ്പിക്കുക"
+delete = "ഇല്ലാതാക്കുക"
+editTitle = "source edit ചെയ്യുക"
+enabled = "Enabled"
+save = "മാറ്റങ്ങൾ save ചെയ്യുക"
+
+[portal.sources.builder.folderAccess]
+description = "Folder automations-ന് administrator അനുവദിച്ച folders മാത്രമേ ഉപയോഗിക്കാനാകൂ. Folder Access settings-ൽ അത് ചേർത്ത ശേഷം വീണ്ടും ശ്രമിക്കുക."
+openSettings = "Folder Access settings"
+title = "ഈ folder അനുവദിച്ചിട്ടില്ല"
+
 [portal.sources.delete]
 body = "\"{{name}}\" ഇല്ലാതാക്കണോ? ഇത് പഴയപടിയാക്കാനാവില്ല. അതിനെ reference ചെയ്യുന്ന നയങ്ങൾ update ചെയ്യേണ്ടിവരും."
 cancel = "റദ്ദാക്കുക"
 confirm = "ഇല്ലാതാക്കുക"
 title = "ഉറവിടം ഇല്ലാതാക്കണോ?"
 
-[portal.sources.detail]
-closeAriaLabel = "വിശദാംശം അടയ്ക്കുക"
-delete = "ഉറവിടം ഇല്ലാതാക്കുക"
-docs24h = "കഴിഞ്ഞ 24h"
-docs30d = "കഴിഞ്ഞ 30 ദിവസം"
-docsTotal = "മൊത്തം കണ്ടത്"
-docsTrend = "കഴിഞ്ഞ 30 ദിവസങ്ങളിലെ ഡോക്യുമെന്റുകൾ"
-documents = "ഡോക്യുമെന്റുകൾ"
-edit = "തിരുത്തുക"
-notReferenced = "ഒരു നയവും reference ചെയ്യുന്നില്ല, അതിനാൽ ഇത് ഇല്ലാതാക്കുന്നത് സുരക്ഷിതമാണ്."
-pause = "താൽക്കാലികമായി നിർത്തുക"
-resume = "പുനരാരംഭിക്കുക"
-subtitle = "{{type}} · {{status}}"
-usedBy = "ഉപയോഗിക്കുന്നത്"
-
 [portal.sources.empty]
 description = "നിങ്ങളുടെ നയങ്ങൾക്ക് ഡോക്യുമെന്റുകൾ എടുക്കാൻ ഇടമുണ്ടാകാൻ ഒരു folder (ഉടൻ cloud storage-ും) കണക്റ്റ് ചെയ്യുക."
 title = "ഇതുവരെ ഉറവിടങ്ങൾ കണക്റ്റ് ചെയ്തിട്ടില്ല"
@@ -7899,18 +8754,57 @@ inUse = "ഉപയോഗത്തിലാണ്"
 total = "Connections"
 unused = "ഉപയോഗിക്കാത്തത്"
 
+[portal.sources.networkFields.connection]
+helperText = "server address, credentials എന്നിവയുള്ള stored connection. ഇതിനെ reference ചെയ്യുന്ന ഓരോ source-ഉം വീണ്ടും ഉപയോഗിക്കുന്നു."
+label = "Connection"
+
+[portal.sources.networkFields.directory]
+helperText = "poll ചെയ്യേണ്ട server-ിലെ folder, login home അല്ലെങ്കിൽ share root-നോട് relative. root-നായി blank വിടുക."
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "ഓരോ policy-യും process ചെയ്ത ശേഷം Consume server-ിൽ നിന്ന് ഓരോ file-ഉം നീക്കം ചെയ്യുന്നു."
+label = "Read mode"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: ഓരോ file-ഉം ഒരിക്കൽ process ചെയ്യുക"
+snapshot = "Snapshot: ഓരോ run-ലും folder വീണ്ടും വായിക്കുക"
+
+[portal.sources.networkFields.recursive]
+label = "Folder depth"
+
+[portal.sources.networkFields.recursive.options]
+all = "subfolders ഉൾപ്പെടുത്തുക"
+top = "Top level മാത്രം"
+
 [portal.sources.status]
 active = "സജീവം"
 disabled = "പ്രവർത്തനരഹിതം"
 unused = "ഉപയോഗിക്കാത്തത്"
 
 [portal.sources.table]
+documents = "Documents"
 source = "ഉറവിടം"
 status = "സ്ഥിതി"
 usedBy = "നയങ്ങൾ"
 
+[portal.sources.types.box]
+description = "നിങ്ങളുടെ team ഇതിനകം share ചെയ്യുന്ന Box folders-ൽ നിന്ന് ഡോക്യുമെന്റുകൾ pull ചെയ്യുക."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "shared Dropbox folder-ൽ നിന്ന് ഡോക്യുമെന്റുകൾ pull ചെയ്യുക."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "policy, AI runs എന്നിവയിലുടനീളം നിങ്ങളുടെ team editor-ൽ process ചെയ്ത ഡോക്യുമെന്റുകൾ."
 label = "Editor"
+noPolicies = "editor-ൽ നിന്ന് ഇതുവരെ policies run ചെയ്തിട്ടില്ല."
+
+[portal.sources.types.email]
+description = "dedicated mailbox-ലേക്ക് അയച്ച attachments ഡോക്യുമെന്റുകളാക്കി മാറ്റുക."
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "പുതിയ ഡോക്യുമെന്റുകൾക്കായി server-ിലെ ഒരു directory നിരീക്ഷിക്കുക."
@@ -7943,25 +8837,80 @@ label = "Folder depth"
 all = "Subfolders ഉൾപ്പെടുത്തുക"
 top = "Top level മാത്രം"
 
+[portal.sources.types.ftp]
+description = "പുതിയ ഡോക്യുമെന്റുകൾക്കായി FTP അല്ലെങ്കിൽ FTPS server folder poll ചെയ്യുക."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "shared Google Drive folders-ൽ നിന്ന് ഡോക്യുമെന്റുകൾ pull ചെയ്യുക."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "പുതിയ ഡോക്യുമെന്റുകൾക്കായി SMB network share നിരീക്ഷിക്കുക."
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "പുതിയ ഡോക്യുമെന്റുകൾക്കായി OneDrive folders നിരീക്ഷിക്കുക."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Amazon S3 അല്ലെങ്കിൽ S3-compatible bucket-ൽ നിന്ന് ഡോക്യുമെന്റുകൾ pull ചെയ്യുക."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "bucket-ഉം credentials-ഉം കൈവശമുള്ള stored connection. ഇതിനെ reference ചെയ്യുന്ന ഓരോ source, pipeline output എന്നിവയും വീണ്ടും ഉപയോഗിക്കുന്നു."
+label = "Connection"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "ഓരോ policy-യും process ചെയ്ത ശേഷം Consume bucket-ൽ നിന്ന് ഓരോ object-ഉം നീക്കം ചെയ്യുന്നു."
+label = "Read mode"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: ഓരോ object-ഉം ഒരിക്കൽ process ചെയ്യുക"
+snapshot = "Snapshot: ഓരോ run-ലും bucket വീണ്ടും വായിക്കുക"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "ഈ prefix-ൽ തുടങ്ങുന്ന keys ഉള്ള objects മാത്രം process ചെയ്യും."
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "പുതിയ ഡോക്യുമെന്റുകൾക്കായി SFTP drop folder poll ചെയ്യുക."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint document libraries-ൽ നിന്ന് ഡോക്യുമെന്റുകൾ pull ചെയ്യുക."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "ഉറവിടം"
 
+[portal.sources.types.webhook]
+createNote = "ഈ webhook സൃഷ്ടിക്കുമ്പോൾ delivery URL-ഉം signing secret-ഉം generate ചെയ്യും. Senders ആ URL-ലേക്ക് documents POST ചെയ്യുന്നു, referencing policies arrival-ൽ run ചെയ്യും."
+description = "ഏതൊരു external system-ൽ നിന്നുമുള്ള signed HTTP POST വഴി ഡോക്യുമെന്റുകൾ സ്വീകരിക്കുക."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "webhook സൃഷ്ടിക്കുമ്പോൾ signing secret ഒരിക്കൽ മാത്രം കാണിക്കും. അത് roll ചെയ്യാൻ source വീണ്ടും സൃഷ്ടിക്കുക."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copy"
+done = "പൂർത്തിയായി"
+secret = "Signing secret"
+secretHelp = "ഈ key (HMAC-SHA256) ഉപയോഗിച്ച് ഓരോ delivery-യുടെയും raw body sign ചെയ്ത് X-Stirling-Signature header ആയി അയയ്ക്കുക."
+secretWarning = "signing secret ഇപ്പോൾ copy ചെയ്യുക. നിങ്ങളുടെ സുരക്ഷയ്ക്കായി ഇത് ഒരിക്കൽ മാത്രം കാണിക്കും, പിന്നീട് retrieve ചെയ്യാൻ കഴിയില്ല."
+title = "Webhook സൃഷ്ടിച്ചു"
+url = "Delivery URL"
+usage = "binary content type (application/pdf അല്ലെങ്കിൽ application/octet-stream) ഉപയോഗിച്ച് delivery URL-ലേക്ക് raw request body ആയി ഓരോ ഡോക്യുമെന്റും POST ചെയ്യുക. Referencing policies arrival-ൽ സ്വയമേവ run ചെയ്യും."
+
 [portal.sources.wizard]
-back = "പിന്നോട്ട്"
-cancel = "റദ്ദാക്കുക"
-continue = "തുടരുക"
-editTitle = "ഉറവിടം തിരുത്തുക"
 name = "പേര്"
 namePlaceholder = "ഉദാ. Claims intake"
-save = "മാറ്റങ്ങൾ സംരക്ഷിക്കുക"
-subtitle = "ഘട്ടം {{current}} / {{total}} · {{label}}"
-title = "ഉറവിടം കണക്റ്റ് ചെയ്യുക"
 type = "തരം"
 
-[portal.sources.wizard.steps]
-chooseType = "തരം തിരഞ്ഞെടുക്കുക"
-configure = "Configure"
-review = "Review & connect"
+[portal.stepModal]
+close = "അടയ്ക്കുക"
 
 [portal.usage]
 managePayment = "Payment നിയന്ത്രിക്കുക"
@@ -8021,16 +8970,9 @@ summary = "ഒരു team-ന്റെ ഉടമ — അതിന്റെ membe
 2 = "Default policy വഴി portal access"
 3 = "Member ചെയ്യാനാകുന്നതെല്ലാം"
 
-[portal.welcome]
-ariaLabel = "Stirling PDF-ലേക്ക് സ്വാഗതം"
-badge = "Open-source"
-installEditor = "Editor install ചെയ്യുക"
-inviteTeammates = "ടീം അംഗങ്ങളെ ക്ഷണിക്കുക"
-openInBrowser = "Browser-ൽ തുറക്കുക"
-perks = "എന്നേക്കും സൗജന്യം · Self-hostable"
-subtitle = "ലോകത്തിലെ ഏറ്റവും സുരക്ഷിതമായ PDF Editor എല്ലാ വലുപ്പത്തിലുള്ള ടീമുകൾക്കും സൗജന്യമാണ്. 60+ PDF operations, SSO എന്നിവ ഉൾപ്പെടുന്നു."
-title = "സ്വാഗതം"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Unlimited"
 
 [printFile]
 title = "ഫയൽ അച്ചടിക്കുക"
@@ -8613,6 +9555,14 @@ text = "നിങ്ങളുടെ PDF പേജുകൾ 90-ഡിഗ്രി
 [rotate.tooltip.header]
 title = "റോട്ടേഷൻ ക്രമീകരണങ്ങളുടെ അവലോകനം"
 
+[ruler]
+clearAll = "എല്ലാം മായ്ക്കുക"
+hideAllLabels = "എല്ലാ labels-ഉം മറയ്ക്കുക"
+hideSmallLabels = "ചെറിയ labels മറയ്ക്കുക"
+physicalValues = "Physical"
+scaled = "Scaled"
+showAllLabels = "എല്ലാ labels-ഉം കാണിക്കുക"
+
 [sanitize]
 desc = "PDF ഫയലുകളിൽ നിന്ന് സാധ്യതയുള്ള ഹാനികരമായ ഘടകങ്ങൾ നീക്കംചെയ്യുക."
 sanitizationResults = "സാനിറ്റൈസേഷൻ ഫലങ്ങൾ"
@@ -8654,31 +9604,45 @@ label = "XMP മെറ്റാഡാറ്റ നീക്കംചെയ്യ
 [sanitize.steps]
 settings = "സജ്ജീകരണങ്ങൾ"
 
-[sanitizePdf]
-tags = "വൃത്തിയാക്കുക,സുരക്ഷിതമാക്കുക,സുരക്ഷിതം,ഭീഷണികൾ-നീക്കം ചെയ്യുക"
-
 [sanitizePDF]
 title = "PDF ശുദ്ധീകരിക്കുക"
 
+[sanitizePdf]
+tags = "വൃത്തിയാക്കുക,സുരക്ഷിതമാക്കുക,സുരക്ഷിതം,ഭീഷണികൾ-നീക്കം ചെയ്യുക"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "പേജ്-സ്കെയിൽ ക്രമീകരിക്കുക"
 
+[scaleSettings]
+activeScale = "Active Scale"
+apply = "Scale പ്രയോഗിക്കുക"
+applyCalibration = "Calibration പ്രയോഗിക്കുക"
+calculatedScale = "Calculated scale"
+calibrate = "Calibrate"
+calibrating = "കാലിബ്രേറ്റ് ചെയ്യുന്നു"
+calibrationDistanceRequired = "പൂജ്യത്തേക്കാൾ കൂടുതലുള്ള യഥാർത്ഥ ലോകത്തിലെ ദൂരം നൽകുക"
+calibrationInvalid = "ഈ അളവിൽ നിന്ന് സ്കെയിൽ കണക്കാക്കാൻ കഴിയുന്നില്ല"
+calibrationPaperDistance = "അളന്ന പേജ് ദൂരം: {{distance}}"
+calibrationTitle = "സ്കെയിൽ കാലിബ്രേറ്റ് ചെയ്യുക"
+calibrationTooltip = "സ്കെയിൽ സ്വയമേവ കണക്കാക്കാൻ അറിയാവുന്ന ഒരു ദൂരം അളക്കുക"
+customScale = "ഇഷ്ടാനുസൃത സ്കെയിൽ"
+noneSet = "ഇഷ്ടാനുസൃത സ്കെയിൽ സജ്ജമാക്കിയിട്ടില്ല"
+presets = "മുൻകൂട്ടി സജ്ജമാക്കിയ സ്കെയിലുകൾ"
+ratio = "സ്കെയിൽ അനുപാതം"
+ratioHelp = "അനുപാതം: 1 പേജ് യൂണിറ്റ് = X യഥാർത്ഥ ലോകത്തിലെ യൂണിറ്റുകൾ"
+ratioPlaceholder = "ഉദാ., 100"
+ratioPositive = "അനുപാതം പൂജ്യത്തേക്കാൾ കൂടുതലായിരിക്കണം"
+ratioRequired = "അനുപാതം ആവശ്യമാണ്"
+realDistance = "യഥാർത്ഥ ലോകത്തിലെ ദൂരം"
+realDistancePlaceholder = "ഉദാ., 5"
+reset = "ഡിഫോൾട്ടുകളിലേക്ക് റീസെറ്റ് ചെയ്യുക"
+unit = "യൂണിറ്റ്"
+unitInvalid = "അസാധുവായ യൂണിറ്റ്: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "കോൺ പരിധി:"
-10 = "ഔട്ട്‌പുട്ടിൽ വെളുത്ത അതിരുകൾ ഉണ്ടാകുന്നത് തടയാൻ ചേർത്തതും നീക്കം ചെയ്തതുമായ അതിർത്തിയുടെ വലുപ്പം സജ്ജമാക്കുന്നു (സ്ഥിരസ്ഥിതി: 1)."
-2 = "ചിത്രം തിരിക്കുന്നതിന് ആവശ്യമായ ഏറ്റവും കുറഞ്ഞ കേവല കോൺ സജ്ജമാക്കുന്നു (സ്ഥിരസ്ഥിതി: 10)."
-3 = "സഹിഷ്ണുത:"
-4 = "കണക്കാക്കിയ പശ്ചാത്തല നിറത്തിന് ചുറ്റുമുള്ള വർണ്ണ വ്യതിയാനത്തിന്റെ പരിധി നിർണ്ണയിക്കുന്നു (സ്ഥിരസ്ഥിതി: 30)."
-5 = "കുറഞ്ഞ വിസ്തീർണ്ണം:"
-6 = "ഒരു ഫോട്ടോയ്ക്കുള്ള കുറഞ്ഞ വിസ്തീർണ്ണ പരിധി സജ്ജമാക്കുന്നു (സ്ഥിരസ്ഥിതി: 10000)."
-7 = "കുറഞ്ഞ കോണ്ടൂർ വിസ്തീർണ്ണം:"
-8 = "ഒരു ഫോട്ടോയ്ക്കുള്ള കുറഞ്ഞ കോണ്ടൂർ വിസ്തീർണ്ണ പരിധി സജ്ജമാക്കുന്നു"
-9 = "അതിർത്തി വലുപ്പം:"
-
 [scannerImageSplit]
 submit = "ചിത്ര സ്കാൻസ് എടുക്കുക"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "ഇത് എന്താണ് ചെയ്യുന്നത
 whatThisDoesDesc = "സ്കാൻ ചെയ്ത ഒരു പേജിലോ കോമ്പോസിറ്റ് ചിത്രത്തിലോ ഉള്ള ഓരോ ഫോട്ടോയും സ്വയം കണ്ടെത്തി വേർതിരിക്കുന്നു—മാനുവൽ ക്രോപ്പിംഗ് വേണ്ട."
 whenToUse = "എപ്പോൾ ഉപയോഗിക്കാം"
 
+[ScannerImageSplit.selectText]
+1 = "കോൺ പരിധി:"
+10 = "ഔട്ട്‌പുട്ടിൽ വെളുത്ത അതിരുകൾ ഉണ്ടാകുന്നത് തടയാൻ ചേർത്തതും നീക്കം ചെയ്തതുമായ അതിർത്തിയുടെ വലുപ്പം സജ്ജമാക്കുന്നു (സ്ഥിരസ്ഥിതി: 1)."
+2 = "ചിത്രം തിരിക്കുന്നതിന് ആവശ്യമായ ഏറ്റവും കുറഞ്ഞ കേവല കോൺ സജ്ജമാക്കുന്നു (സ്ഥിരസ്ഥിതി: 10)."
+3 = "സഹിഷ്ണുത:"
+4 = "കണക്കാക്കിയ പശ്ചാത്തല നിറത്തിന് ചുറ്റുമുള്ള വർണ്ണ വ്യതിയാനത്തിന്റെ പരിധി നിർണ്ണയിക്കുന്നു (സ്ഥിരസ്ഥിതി: 30)."
+5 = "കുറഞ്ഞ വിസ്തീർണ്ണം:"
+6 = "ഒരു ഫോട്ടോയ്ക്കുള്ള കുറഞ്ഞ വിസ്തീർണ്ണ പരിധി സജ്ജമാക്കുന്നു (സ്ഥിരസ്ഥിതി: 10000)."
+7 = "കുറഞ്ഞ കോണ്ടൂർ വിസ്തീർണ്ണം:"
+8 = "ഒരു ഫോട്ടോയ്ക്കുള്ള കുറഞ്ഞ കോണ്ടൂർ വിസ്തീർണ്ണ പരിധി സജ്ജമാക്കുന്നു"
+9 = "അതിർത്തി വലുപ്പം:"
+
 [search]
 noResults = "ഫലങ്ങളൊന്നും കണ്ടെത്താനായില്ല"
 placeholder = "തിരയാനുള്ള പദം നൽകുക..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "നിങ്ങളുടെ Stirling-PDF സെർവ
 [session]
 expired = "നിങ്ങളുടെ സെഷൻ കാലഹരണപ്പെട്ടു. ദയവായി പേജ് പുതുക്കി വീണ്ടും ശ്രമിക്കുക."
 
-[sessionManagement.tooltip]
-header = "സൈൻ ചെയ്യുന്ന സെഷനുകളുടെ മാനേജ്മെന്റ്"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "പുതിയ പങ്കാളികൾ ഒപ്പിടൽ ക്രമത്തിന്റെ അവസാനത്തിലേക്ക് ചേർക്കപ്പെടും"
-bullet2 = "സെഷൻ അന്തിമീകരിച്ചതിന് ശേഷം പങ്കാളികളെ ചേർക്കാൻ കഴിയില്ല"
-bullet3 = "ആരുടേയും ടേൺ വരുമ്പോൾ ഓരോ പങ്കാളിക്കും ഒരു അറിയിപ്പ് ലഭിക്കും"
-description = "അന്തിമീകരണത്തിന് മുമ്പ് ഏത് സമയത്തും ഒരു സജീവ സെഷനിലേക്ക് കൂടുതൽ പങ്കാളികളെ ചേർക്കാം."
-title = "പങ്കാളികളെ ചേർക്കൽ"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>പൂർണ്ണ അന്തിമീകരണം</b>: എല്ലാ പങ്കാളികളും ഒപ്പിട്ടു"
-bullet2 = "<b>ഭാഗിക അന്തിമീകരണം</b>: ചിലർ ഇനിയും ഒപ്പിട്ടിട്ടില്ല"
-bullet3 = "ഒപ്പിടാത്ത പങ്കാളികളെ അന്തിമ ഡോക്യുമെന്റിൽ നിന്ന് ഒഴിവാക്കും"
-bullet4 = "അന്തിമീകരിച്ചുകഴിഞ്ഞാൽ, ഒപ്പിട്ട PDF സജീവ ഫയലുകളിലേക്ക് ലോഡ് ചെയ്യാം"
-description = "അന്തിമീകരണം എല്ലാ ഒപ്പുകളും ഒരൊറ്റ ഒപ്പിട്ട PDF-ലേക്ക് സംയോജിപ്പിക്കുന്നു. ഈ നടപടി പിൻവലിക്കാൻ കഴിയില്ല."
-title = "സെഷൻ അന്തിമീകരണം"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "ഇതിനകം ഒപ്പിട്ട പങ്കാളികളെ നീക്കാൻ കഴിയില്ല"
-bullet2 = "നീക്കിയ പങ്കാളികൾക്ക് ഇനി അറിയിപ്പുകൾ ലഭിക്കില്ല"
-bullet3 = "ഒപ്പിടൽ ക്രമം സ്വയം ക്രമീകരിക്കും"
-description = "ഒപ്പിടുന്നതിന് മുമ്പ് പങ്കാളികളെ സെഷനിൽ നിന്ന് നീക്കാം."
-title = "പങ്കാളികളെ നീക്കൽ"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "ഏതു ഒപ്പും PDF-ൽ ക്രമാനുസൃതമായി പ്രയോഗിക്കും"
-bullet2 = "പിന്നീട് ഒപ്പിടുന്നവർ മുൻപ് ഇടപ്പെട്ട ഒപ്പുകൾ കാണാം"
-bullet3 = "അംഗീകൃത പ്രവാഹങ്ങൾക്കും നിയമപരമായ കൈമാറ്റ ശൃംഖലകൾക്കും നിർണായകം"
-description = "സെഷൻ സൃഷ്ടിക്കുമ്പോൾ നിങ്ങൾ വ്യക്തമാക്കുന്ന ക്രമമാണ് ആദ്യം ആരാണ് ഒപ്പിടുക എന്നത് നിർണ്ണയിക്കുന്നത്."
-title = "ഒപ്പിടൽ ക്രമം"
-
 [settings]
 close = "അടയ്ക്കുക"
 
+[settings.ai]
+documents = "പ്രമാണങ്ങൾ & RAG"
+general = "പൊതുവായത്"
+limits = "പരിധികളും പ്രകടനവും"
+models = "മോഡലുകളും ദാതാക്കളും"
+title = "AI"
+
 [settings.configuration]
 advanced = "അഡ്വാൻസ്ഡ്"
 database = "ഡാറ്റാബേസ്"
 endpoints = "എൻഡ്പോയിന്റുകൾ"
 features = "ഫീച്ചറുകൾ"
+folderAccess = "ഫോൾഡർ ആക്‌സസ്"
 mcp = "MCP Server"
 storageSharing = "ഫയൽ സംഭരണവും പങ്കിടലും"
 systemSettings = "സിസ്റ്റം ക്രമീകരണങ്ങൾ"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "സ്വതേയുള്ള PDF എഡിറ്റർ"
 defaultPdfEditorActive = "Stirling PDF നിങ്ങളുടെ സ്വതേയുള്ള PDF എഡിറ്ററാണ്"
 defaultPdfEditorChecking = "പരിശോധിക്കുന്നു..."
 defaultPdfEditorInactive = "മറ്റൊരു അപ്ലിക്കേഷൻ സ്വതേയുള്ളതായി സജ്ജമാക്കിയിരിക്കുന്നു"
+defaultPdfEditorRemind = "ഡിഫോൾട്ടായി സജ്ജമാക്കാൻ എന്നെ ഓർമ്മിപ്പിക്കുക"
+defaultPdfEditorRemindDescription = "Stirling PDF നിങ്ങളുടെ ഡിഫോൾട്ട് PDF ആപ്ലിക്കേഷൻ അല്ലാത്തപ്പോൾ ഒരു ബാനർ കാണിക്കുക."
 defaultPdfEditorSet = "ഇതിനകം സ്വതേയുള്ളത്"
 defaultStartupView = "തുറക്കുമ്പോൾ സ്വതവേയുള്ള ദൃശ്യം"
 defaultStartupViewDescription = "ആപ്പ് തുടങ്ങുമ്പോൾ ഇടത് കോളത്തിലെ ഏത് ടാബ് സജീവമായിരിക്കണം എന്ന് തിരഞ്ഞെടുക്കുക"
@@ -8817,9 +9771,18 @@ languageDescription = "പ്രദർശന ഭാഷ തിരഞ്ഞെട
 logout = "ലോഗ് ഔട്ട്"
 setAsDefault = "സ്വതേയുള്ളതാക്കി സജ്ജമാക്കുക"
 theme = "തീം"
+themeAccent = "ആക്‌സന്റ് നിറം"
+themeAccentCustom = "ഇഷ്ടാനുസൃത നിറം"
+themeAccentCustomHint = "ഇഷ്ടാനുസൃതം (ഡിഫോൾട്ടുകൾ ശുപാർശ ചെയ്യുന്നു)"
+themeAccentDark = "ഡാർക്ക് മോഡ് ആക്‌സന്റ് നിറം"
+themeAccentDefault = "ഡിഫോൾട്ട്"
+themeAccentDefaultHint = "ഡിഫോൾട്ട് തീം (ശുപാർശ ചെയ്യുന്നു)"
+themeAccentDescription = "ബട്ടണുകൾ, ലിങ്കുകൾ, ഹൈലൈറ്റുകൾ എന്നിവ ഇത് പിന്തുടരുന്നു, കൂടാതെ ആപ്പിന് സൂക്ഷ്മമായ നിറഭേദം നൽകുന്നു. ലൈറ്റിനും ഡാർക്കിനും പ്രത്യേകം ഉണ്ട്. System സജീവമായത് ഉപയോഗിക്കുന്നു."
+themeAccentLight = "ലൈറ്റ് മോഡ് ആക്‌സന്റ് നിറം"
 themeDark = "ഡാർക്ക്"
 themeDescription = "ലൈറ്റ്, ഡാർക്ക് മോഡുകൾക്ക് ഇടയിൽ മാറുക"
 themeLight = "ലൈറ്റ്"
+themeReset = "തീം ഡിഫോൾട്ടിലേക്ക് പുനഃസ്ഥാപിക്കുക"
 themeSystem = "System"
 title = "ജനറൽ"
 user = "ഉപയോക്താവ്"
@@ -8833,6 +9796,12 @@ intro = "നിങ്ങളുടെ ഓർഗനൈസേഷനായി യൂ
 learnMore = "ഡോക്യുമെന്റേഷനിൽ കൂടുതൽ അറിയുക"
 title = "സിസ്റ്റം അഡ്മിനിസ്ട്രേറ്റർമാർക്കായി"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud-ലേക്ക് സൈൻ ഇൻ ചെയ്യുമ്പോൾ ഏത് ആപ്പ് തുറക്കണമെന്ന് തിരഞ്ഞെടുക്കുക."
+editor = "എഡിറ്റർ"
+processor = "പ്രോസസർ"
+title = "സൈൻ ഇൻ ചെയ്ത ശേഷം"
+
 [settings.general.mode]
 fullscreen = "ഫുൾസ്ക്രീൻ"
 sidebar = "സൈഡ്ബാർ"
@@ -9041,6 +10010,11 @@ security = "സുരക്ഷ"
 telegram = "Telegram"
 title = "സുരക്ഷയും ഓതന്റിക്കേഷനും"
 
+[settings.signOut]
+confirm = "നിങ്ങൾക്ക് സൈൻ ഔട്ട് ചെയ്യണമെന്ന് ഉറപ്പാണോ?"
+submit = "സൈൻ ഔട്ട് ചെയ്യുക"
+title = "സൈൻ ഔട്ട്"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "സെർവറിലേക്ക് അപ്‌ലോഡ് 
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "ഇവിടെ ക്ലിക്ക് ചെയ്യുക"
+fallback = "അത് സ്വയമേവ തുറന്നില്ലെങ്കിൽ,"
+opening = "പുതിയ ടാബിൽ Swagger UI തുറക്കുന്നു..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API ഡോക്യുമെന്റേഷൻ"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "ഈ ടൂൾ പ്രവർത്തിപ്പിക്
 singleFileScope = "ഇത് ബാധകമാകുന്നത് {{fileName}}-ൽ മാത്രം"
 viewerMode = "ഒന്നിലധികം ഫയലുകൾ തിരഞ്ഞെടുക്കാൻ ഫയൽ എഡിറ്ററിലേക്ക് മാറുക."
 
+[toolFormat]
+ANY = "ഏതെങ്കിലും ഫയൽ"
+CBR = "ഒരു കോമിക് ബുക്ക് ആർക്കൈവ് (CBR)"
+CBZ = "ഒരു കോമിക് ബുക്ക് ആർക്കൈവ് (CBZ)"
+CSV = "ഒരു CSV ഫയൽ"
+EBOOK = "ഒരു ഇബുക്ക്"
+EMAIL = "ഒരു ഇമെയിൽ"
+EXCEL = "ഒരു സ്പ്രെഡ്ഷീറ്റ്"
+HTML = "ഒരു വെബ് പേജ്"
+IMAGE = "ചിത്രങ്ങൾ"
+JAVASCRIPT = "ഒരു JavaScript ഫയൽ"
+JSON = "ഒരു JSON ഫയൽ"
+MARKDOWN = "ഒരു Markdown ഫയൽ"
+NONE = "ഫയൽ ഇല്ല"
+PCL = "ഒരു PCL പ്രിന്റ് ഫയൽ"
+PDF = "ഒരു PDF"
+PDF_ENCRYPTED = "പാസ്‌വേഡ്-സംരക്ഷിത PDF"
+POSTSCRIPT = "ഒരു PostScript ഫയൽ"
+PPT = "ഒരു അവതരണം"
+TEXT = "ഒരു ടെക്സ്റ്റ് ഫയൽ"
+VIDEO = "ഒരു വീഡിയോ"
+WORD = "ഒരു Word പ്രമാണം"
+XML = "ഒരു XML ഫയൽ"
+XPS = "ഒരു XPS പ്രമാണം"
+ZIP = "ഒരു ZIP ആർക്കൈവ്"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "എല്ലാ ടൂളുകളിലേക്കും തിരികെ"
 collapse = "പാനൽ ചുരുക്കുക"
 expand = "പാനൽ വിപുലീകരിക്കുക"
 goBack = "തിരികെ പോകുക"
+pdfTools = "PDF ടൂളുകൾ"
 placeholder = "തുടങ്ങാൻ ഒരു ടൂൾ തിരഞ്ഞെടുക്കുക"
 premiumFeature = "പ്രീമിയം ഫീച്ചർ:"
+searchTools = "ടൂളുകൾ തിരയുക"
 toolsHeader = "ടൂളുകൾ"
 viewAllTools = "എല്ലാ ടൂളുകളും കാണുക"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "ടൂളുകളൊന്നും കണ്ടെത്താ
 quickAccess = "ക്ഷിപ്ര പ്രവേശനം"
 searchPlaceholder = "ടോളുകൾ തിരയുക..."
 
-[toolPicker.categories]
-advancedTools = "അഡ്വാൻസ്ഡ് ടൂളുകൾ"
-recommendedTools = "റിക്കമൻഡഡ് ടൂളുകൾ"
-standardTools = "സ്റ്റാൻഡേർഡ് ടൂളുകൾ"
-
 [toolPicker.subcategories]
 advancedFormatting = "അഡ്വാൻസ്ഡ് ഫോർമാറ്റിംഗ്"
 automation = "ഓട്ടോമേഷൻ"
@@ -9950,16 +10950,31 @@ title = "ഉപയോക്താക്കൾ"
 you = "(നിങ്ങൾ)"
 
 [users.action]
+cancelInvite = "ക്ഷണം റദ്ദാക്കുക"
 deleteTeam = "Team ഇല്ലാതാക്കുക"
 disableMfa = "MFA റീസെറ്റ് ചെയ്യുക"
 move = "Team-ലേക്ക് മാറ്റുക"
 reinstate = "വീണ്ടും സജീവമാക്കുക"
 remove = "Org-ൽ നിന്ന് നീക്കംചെയ്യുക"
+removeTeam = "ടീമിൽ നിന്ന് നീക്കം ചെയ്യുക"
 rename = "Team rename ചെയ്യുക"
 resetPw = "Password റീസെറ്റ് ചെയ്യുക"
 suspend = "Suspend"
 unlock = "Account unlock ചെയ്യുക"
 
+[users.activity]
+daysAgo = "{{count}}d മുമ്പ്"
+hoursAgo = "{{count}}h മുമ്പ്"
+justNow = "ഇപ്പോൾ"
+minutesAgo = "{{count}}m മുമ്പ്"
+monthsAgo_one = "{{count}} മാസം മുമ്പ്"
+monthsAgo_other = "{{count}} മാസം മുമ്പ്"
+never = "ഒരിക്കലും ഇല്ല"
+weeksAgo_one = "{{count}} ആഴ്ച മുമ്പ്"
+weeksAgo_other = "{{count}} ആഴ്ച മുമ്പ്"
+yearsAgo_one = "{{count}} വർഷം മുമ്പ്"
+yearsAgo_other = "{{count}} വർഷം മുമ്പ്"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "നയം അംഗീകരിക്കുന്നു"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "{{email}}-ലേക്കുള്ള ക്ഷണം റദ്ദാക്കണോ? നിലവിലെ ലിങ്ക് ഉപയോഗിച്ച് അവർക്ക് ചേരാൻ കഴിയില്ല."
+cancelInviteTitle = "ക്ഷണം റദ്ദാക്കുക"
 deleteTeamBody = "{{name}} team ഇല്ലാതാക്കണോ? ആദ്യം team empty ആയിരിക്കണം - അതിലെ members-നെ മറ്റൊരു team-ലേക്ക് മാറ്റുക, കൂടാതെ അതിന് integration configs സ്വന്തമായി ഉണ്ടായിരിക്കരുത്."
 deleteTeamTitle = "Team ഇല്ലാതാക്കുക"
 disableMfaBody = "{{name}}-ന്റെ MFA enrolment നീക്കംചെയ്യണോ? ആവശ്യമെങ്കിൽ അവർ അടുത്ത login-ൽ വീണ്ടും സജ്ജീകരിക്കും."
 disableMfaTitle = "MFA റീസെറ്റ് ചെയ്യുക"
 removeBody = "{{name}}-നെ organization-ൽ നിന്ന് സ്ഥിരമായി നീക്കംചെയ്യണോ? ഇത് പഴയപടിയാക്കാനാവില്ല."
+removeTeamBody = "{{name}}-നെ ടീമിൽ നിന്ന് നീക്കം ചെയ്യണോ? അവർക്ക് അക്കൗണ്ട് തുടരും, പക്ഷേ ഈ ടീമിന്റെ വിഭവങ്ങളിലേക്കുള്ള ആക്‌സസ് നഷ്ടപ്പെടും."
 removeTitle = "Member നീക്കംചെയ്യുക"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "ഉപയോക്തൃനാമം"
 usernameError = "ഉപയോക്തൃനാമത്തിന് കുറഞ്ഞത് 3 അക്ഷരങ്ങൾ വേണം"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "ക്ഷണിച്ചത് {{who}}"
+cancel = "റദ്ദാക്കുക"
+count = "{{count}} തീർപ്പാകാത്തത്"
+desc = "ഇതുവരെ ചേർന്നിട്ടില്ലാത്ത ക്ഷണിക്കപ്പെട്ടവർ. അവർ അംഗീകരിക്കുന്നതുവരെ അവർ ഒരു സീറ്റ് കൈവശം വയ്ക്കും."
+expiresInDays_one = "{{count}} ദിവസത്തിനകം കാലഹരണപ്പെടും"
+expiresInDays_other = "{{count}} ദിവസത്തിനകം കാലഹരണപ്പെടും"
+expiresToday = "ഇന്ന് കാലഹരണപ്പെടും"
+title = "തീർപ്പാകാത്ത ക്ഷണങ്ങൾ"
+
 [users.loadError]
 description = "ബാക്കെൻഡുമായി ബന്ധപ്പെടുന്നതിൽ എന്തോ പിശക് സംഭവിച്ചു, അല്ലെങ്കിൽ നിങ്ങൾക്ക് ആക്സസ് ഇല്ല. വീണ്ടും ശ്രമിക്കുക."
 title = "അംഗങ്ങളെ ലോഡ് ചെയ്യാനായില്ല"
@@ -10212,9 +11240,11 @@ title = "അറ്റാച്ച്മെന്റുകൾ"
 
 [viewer.bookmarks]
 bookmarkTitle = "ബുക്ക്‌മാർക്ക് ശീർഷകം"
+bookmarkTitleRequired = "ബുക്ക്‌മാർക്ക് ശീർഷകം ആവശ്യമാണ്"
 closeSidebar = "ബുക്ക്‌മാർക്കുകളുടെ സൈഡ്‌ബാർ അടയ്ക്കുക"
 collapseAll = "എല്ലാ ബുക്ക്‌മാർക്കുകളും ചുരുക്കുക"
 expandAll = "എല്ലാ ബുക്ക്‌മാർക്കുകളും വിപുലീകരിക്കുക"
+searchPlaceholder = "ബുക്ക്‌മാർക്കുകൾ തിരയുക"
 
 [viewer.comments]
 addComment = "കമന്റ് ചേർക്കുക"
@@ -10605,30 +11635,6 @@ title = "വാട്ടർമാർക്ക് ടെക്സ്റ്റ്"
 image = "ഇമേജ്"
 text = "ടെക്സ്റ്റ്"
 
-[wetSignature.tooltip]
-header = "കയ്യൊപ്പ് സൃഷ്ടിക്കുന്ന രീതികൾ"
-
-[wetSignature.tooltip.draw]
-bullet1 = "പേനയുടെ നിറവും കനംവും ഇഷ്ടാനുസരണം മാറ്റുക"
-bullet2 = "തൃപ്തിപ്പെടുന്നതുവരെ മായ്ച്ച് വീണ്ടും വരയ്ക്കുക"
-bullet3 = "ടച്ച് ഉപകരണങ്ങളിൽ (ടാബ്ലെറ്റുകൾ, ഫോൺ) പ്രവർത്തിക്കും"
-description = "നിങ്ങളുടെ മൗസ് അല്ലെങ്കിൽ ടച്ച്‌സ്‌ക്രീൻ ഉപയോഗിച്ച് കൈയെഴുത്ത് കൈയ്യൊപ്പ് സൃഷ്ടിക്കുക. വ്യക്തിപരവും യഥാർത്ഥവുമായ കൈയ്യൊപ്പുകൾക്ക് ഏറ്റവും ഉചിതം."
-title = "കയ്യൊപ്പ് വരയ്‌ക്കുക"
-
-[wetSignature.tooltip.type]
-bullet1 = "പല ഫോണ്ടുകളിൽ നിന്ന് തിരഞ്ഞെടുക്കുക"
-bullet2 = "ടെക്സ്റ്റിന്റെ വലിപ്പവും നിറവും ഇഷ്ടാനുസരണം മാറ്റുക"
-bullet3 = "സ്റ്റാൻഡേർഡൈസ്ഡ് കൈയ്യൊപ്പുകൾക്ക് ഏറ്റവും അനുയോജ്യം"
-description = "ടൈപ്പ് ചെയ്ത ടെക്സ്റ്റിൽ നിന്ന് ഒരു കൈയ്യൊപ്പ് സൃഷ്ടിക്കുക. വേഗത്തിലും സ്ഥിരതയോടെയും, ബിസിനസ് ഡോക്യുമെന്റുകൾക്ക് അനുയോജ്യം."
-title = "കയ്യൊപ്പ് ടൈപ്പ് ചെയ്യുക"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG, മറ്റ് ഇമേജ് ഫോർമാറ്റുകൾ പിന്തുണയ്ക്കുന്നു"
-bullet2 = "മികച്ച ഫലങ്ങൾക്കായി സുതാര്യമായ പശ്ചാത്തലം ശുപാർശ ചെയ്യുന്നു"
-bullet3 = "കയ്യൊപ്പ് പ്രദേശത്തേക്ക് ഒതുങ്ങുന്നതിനായി ചിത്രത്തിന്റെ വലിപ്പം മാറ്റും"
-description = "മുമ്പേ സൃഷ്ടിച്ച കയ്യൊപ്പ് ചിത്രം അപ്‌ലോഡ് ചെയ്യുക. സ്കാൻ ചെയ്ത കൈയ്യൊപ്പോ കമ്പനി ലോഗോവോ ഉണ്ടെങ്കിൽ ഏറ്റവും അനുയോജ്യം."
-title = "കയ്യൊപ്പിന്റെ ചിത്രം അപ്‌ലോഡ് ചെയ്യുക"
-
 [workbenchBar]
 activeFiles = "സജീവ ഫയലുകൾ"
 annotations = "അനോട്ടേഷനുകൾ"
@@ -10652,6 +11658,7 @@ redact = "റെഡാക്റ്റ്"
 rotateLeft = "ഇടത്തേക്ക് തിരിക്കുക"
 rotateRight = "വലത്തേക്ക് തിരിക്കുക"
 ruler = "റൂളർ / അളക്കൽ"
+rulerSettings = "സ്കെയിൽ ക്രമീകരണങ്ങൾ"
 save = "സേവ്"
 saveAll = "എല്ലാം സേവ് ചെയ്യുക"
 saveAs = "പുതിയ പേരിൽ സേവ് ചെയ്യുക"
diff --git a/frontend/editor/public/locales/nl-NL/translation.toml b/frontend/editor/public/locales/nl-NL/translation.toml
index 62f935c195..efeab1e334 100644
--- a/frontend/editor/public/locales/nl-NL/translation.toml
+++ b/frontend/editor/public/locales/nl-NL/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "Bestanden geselecteerd"
 font = "Lettertype"
 fontSizeTooltip = "Grootte van de paginanummertekst in punten. Grotere getallen geven grotere tekst."
 fontTypeTooltip = "Lettertypefamilie voor de paginanummers. Kies passend bij de stijl van uw document."
-genericSubmit = "Indienen"
 green = "Groen"
 help = "Hulp"
-imgPrompt = "Selecteer afbeelding(en)"
 incorrectPasswordMessage = "Huidige wachtwoord is onjuist."
 info = "Informatie"
 invalidUndoData = "Kan niet ongedaan maken: ongeldige bewerkingsgegevens"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Inlogovereenkomst"
 logOut = "Uitloggen"
 marginTooltip = "Afstand tussen het paginanummer en de rand van de pagina."
 moreOptions = "Meer opties"
-multiPdfPrompt = "PDF's (2+) selecteren"
 never = "Nooit"
 no = "Nee"
 noFileSelected = "Geen bestand geselecteerd. Upload er een."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Aangepaste pagina volgorde (Voer een komma-gescheiden lijst v
 pages = "Pagen"
 pageSelectionPrompt = "Aangepaste pagina selectie (Voer een komma-gescheiden lijst van paginanummer 1,5,6 of functies zoals 2n+1 in) :"
 password = "Wachtwoord"
-pdfPrompt = "PDF(-en) selecteren"
 pin = "Bestand vastzetten (actief houden na tooluitvoering)"
 pro = "Pro"
 processingComplete = "Je bestand is klaar."
@@ -356,6 +352,7 @@ text = "Deze machtigingen bepalen wat gebruikers met de PDF kunnen doen. Het mee
 title = "Rechten wijzigen"
 
 [addStamp]
+preview = "Stempelvoorbeeld"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Handmatige downloads: klik op de links en plaats de bestanden in
 noLanguages = "Geen tessdata-talen gevonden in de geconfigureerde map."
 permissionNotice = "Het tessdata-pad is niet schrijfbaar. Downloads worden in de browser geopend; sla de .traineddata-bestanden handmatig op in de tessdata-map."
 
+[admin.settings.ai.documents]
+description = "Configureer het embedding-model en de ophaalinstellingen die worden gebruikt om vragen over documenten te beantwoorden. Toegepast op de AI engine bij opslaan."
+title = "Documenten & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Laat leeg om de eigen omgevingsreferentie van de engine te gebruiken. Van toepassing op zelfgehoste single-engine-implementaties."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Opgeslagen - laat leeg om de huidige key te behouden"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL van het OpenAI-compatibele / Ollama embeddings-endpoint, bijv. http://ollama:11434/v1. Moet verwijzen naar een vertrouwd intern endpoint (SSRF-gevoelig)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Naam van het embedding-model. Vrije tekst; suggesties zijn alleen hints."
+label = "Embedding-model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Provider die wordt gebruikt om documenttekst om te zetten in vector-embeddings."
+label = "Embedding-provider"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maximumaantal ophaalzoekopdrachten dat de agent per verzoek mag uitvoeren."
+label = "Max. zoekopdrachten"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Het wijzigen van het embedding-model wordt direct van kracht, maar documenten die met het vorige model zijn geïndexeerd, moeten opnieuw worden geïndexeerd zodat zoeken juiste resultaten oplevert."
+title = "Opnieuw indexeren vereist"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Als je het embedding-model hebt gewijzigd, indexeer bestaande documenten dan opnieuw zodat zoeken het nieuwe model gebruikt."
+
+[admin.settings.ai.documents.topK]
+description = "Aantal meest relevante chunks dat per zoekopdracht wordt opgehaald."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Verbind Stirling met de Python AI engine en kies welke AI-mogelijkheden beschikbaar zijn. Wijzigingen worden toegepast na herstart."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Schakel afzonderlijke AI-functies in of uit. Uitgeschakelde functies worden verborgen in de app."
+title = "Mogelijkheden"
+
+[admin.settings.ai.general.enabled]
+description = "Hoofdschakelaar. Wanneer uitgeschakeld, zijn er geen AI-tools, agents of engine-aanroepen beschikbaar."
+label = "AI inschakelen"
+
+[admin.settings.ai.general.features.chat]
+description = "Gespreksassistent voor werken met PDFs."
+label = "Chatassistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Categoriseer documenten automatisch op type of inhoud."
+label = "Documentclassificatie"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Genereer een nieuwe PDF (bijv. vanuit HTML) via een AI agent."
+label = "PDF maken vanuit prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Stel vragen en krijg antwoorden op basis van een geüpload document."
+label = "Documentvragen"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Controleer documenten op wiskundige en numerieke fouten."
+label = "Wiskunde-auditor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Voeg door AI geschreven beoordelingsopmerkingen en annotaties toe aan een PDF."
+label = "PDF-opmerkingenagent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Time-out voor zwaardere agentbewerkingen zoals documentgeneratie."
+label = "Time-out voor langlopende taken (seconden)"
+
+[admin.settings.ai.general.note]
+body = "De AI engine draait als een aparte service. Het gedeelde geheim"
+body2 = "wordt ingesteld via een containeromgevingsvariabele. Provider API keys kunnen op deze pagina's worden ingevoerd of als engine-omgevingsvariabelen worden opgegeven; keys die hier worden ingevoerd, worden bij opslaan naar de engine gepusht."
+title = "Over de AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Time-out voor gestreamde (token-voor-token) chatantwoorden."
+label = "Stream-time-out (seconden)"
+
+[admin.settings.ai.general.test]
+button = "Verbinding testen"
+failBody = "De AI engine reageerde niet. Controleer de URL, of de engine-container draait en of AI is ingeschakeld (na inschakelen is een herstart nodig)."
+failTitle = "AI engine onbereikbaar"
+okBody = "De AI engine reageerde op een health check."
+okTitle = "AI engine bereikbaar"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Time-out voor standaard AI-verzoeken aan de engine."
+label = "Verzoektime-out (seconden)"
+
+[admin.settings.ai.general.url]
+description = "Interne URL van de Python AI engine, bijv. http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "Vangrails voor hoeveel werk AI-verzoeken mogen uitvoeren en hoeveel er gelijktijdig draaien. Toegepast op de AI engine bij opslaan."
+title = "Limieten & prestaties"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Vangrail: wijs AI-verzoeken af waarvan de geëxtraheerde tekst deze lengte overschrijdt."
+label = "Max. tekens per verzoek"
+
+[admin.settings.ai.limits.maxPages]
+description = "Vangrail: wijs AI-verzoeken af met meer dan dit aantal PDF-pagina's."
+label = "Max. pagina's per verzoek"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maximumaantal gelijktijdige modelaanroepen in uitvoering over de hele engine."
+label = "Max. gelijktijdigheid model"
+
+[admin.settings.ai.models]
+description = "Kies de LLM-provider en de slimme/snelle modellen die de AI engine gebruikt. Toegepast op de AI engine bij opslaan."
+title = "Modellen & providers"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Laat leeg om de eigen omgevingsreferentie van de engine te gebruiken. Van toepassing op zelfgehoste single-engine-implementaties."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Opgeslagen - laat leeg om de huidige key te behouden"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL van het OpenAI-compatibele / Ollama-endpoint, bijv. http://ollama:11434/v1."
+label = "Provider base URL"
+warning = "De base URL moet verwijzen naar een vertrouwd intern endpoint. De engine doet er server-side verzoeken naartoe, dus een niet-vertrouwde waarde is SSRF-gevoelig."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maximumaantal outputtokens voor het snelle model."
+label = "Max. tokens snel model"
+
+[admin.settings.ai.models.fastModel]
+description = "Goedkoper, sneller model voor lichte taken. Vrije tekst; suggesties zijn alleen hints."
+label = "Snel model"
+
+[admin.settings.ai.models.provider]
+description = "Met welke LLM-provider de engine communiceert."
+label = "Provider"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maximumaantal outputtokens voor het slimme model."
+label = "Max. tokens slim model"
+
+[admin.settings.ai.models.smartModel]
+description = "Model met hoge capaciteit voor complexe redeneringen. Vrije tekst; suggesties zijn alleen hints."
+label = "Slim model"
+
+[admin.settings.ai.saved]
+body = "Wijzigingen worden automatisch naar de AI engine gepusht."
+bodyNoPush = "Instellingen opgeslagen. Ze worden toegepast de volgende keer dat de AI engine de configuratie ophaalt."
+title = "AI-instellingen opgeslagen"
+
 [admin.settings.badge]
 clickToUpgrade = "Click to view plan details"
 
@@ -938,6 +1094,25 @@ label = "Opnieuw genereren bij opstarten"
 description = "Aantal dagen dat het certificaat geldig is"
 label = "Certificaatgeldigheid (dagen)"
 
+[admin.settings.folderAccess]
+description = "Mappen waaruit mapbronnen en mapuitvoer mogen lezen en naar mogen schrijven. Dit is een beveiligingsgrens: automatiseringen kunnen nooit naar een serverpad buiten deze lijst worden verwezen."
+securityNote = "Laat dit leeg om mapbronnen en mapuitvoer volledig uit te schakelen. De eigen configuratiemap van Stirling is altijd verboden terrein."
+title = "Maptoegang"
+
+[admin.settings.folderAccess.implied]
+description = "Deze door Stirling beheerde mappen zijn altijd toegestaan en kunnen hier niet worden gewijzigd."
+serverStorage = "Serverbestandsopslag"
+title = "Altijd toegestaan"
+watchedFolder = "Bewaakte Pipeline-map"
+
+[admin.settings.folderAccess.roots]
+add = "Toevoegen"
+empty = "Geen mappen toegestaan. Mapbronnen en mapuitvoer zijn momenteel uitgeschakeld."
+hint = "Voer absolute paden in, bijvoorbeeld /data/inbox."
+label = "Toegestane maproots"
+placeholder = "/data/inbox"
+remove = "Maproot verwijderen"
+
 [admin.settings.general]
 description = "Configureer toepassingsinstellingen voor het hele systeem, inclusief branding en standaardgedrag."
 system = "Systeem"
@@ -1842,6 +2017,15 @@ export = "Exporteren"
 accessDenied = "Toegang geweigerd"
 insufficientPermissions = "U hebt geen toestemming om deze actie uit te voeren."
 
+[auth.callback]
+completing = "Authenticatie voltooien"
+invalidToken = "OAuth-aanmelding mislukt - ongeldig token."
+missingToken = "OAuth-aanmelding mislukt - geen token ontvangen."
+oauthFailed = "OAuth-aanmelding mislukt. Probeer het opnieuw."
+pleaseWait = "Even geduld terwijl we je aanmelding afronden."
+signedOut = "Je bent afgemeld. Meld je opnieuw aan."
+windowMayClose = "Je kunt dit venster sluiten zodra dit is voltooid."
+
 [auth.displayName]
 guest = "Gast"
 user = "Gebruiker"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Beveiligt PDF-documenten door mogelijk kwaadaardige inhoud
 description = "Deze tool hernoemt PDF-bestanden automatisch op basis van hun inhoud. Het analyseert het document om de meest geschikte titel uit de tekst te vinden."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatisch roteren"
+tags = "automatisch roteren,oriëntatie herstellen,ondersteboven,zijwaarts,rechttrekken,oriënteren,oriëntatie detecteren,rotatie corrigeren,automatisch oriënteren,gescand,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Betrouwbaarheidsdrempel"
+
+[autoRotate.detectionMode]
+auto = "Automatisch"
+osd = "Alleen OCR"
+text = "Alleen tekst"
+title = "Detectiemethode"
+
+[autoRotate.error]
+failed = "Er is een fout opgetreden bij het automatisch roteren van de PDF."
+
+[autoRotate.inferUndetected]
+title = "Pagina's met lage betrouwbaarheid mee roteren"
+
+[autoRotate.report]
+applied = "{{degrees}}° met de klok mee"
+confidenceValue = "Betrouwbaarheid {{value}}"
+noChange = "Geen wijziging"
+pageLabel = "Pagina {{number}}"
+summary = "{{rotated}} van {{total}} pagina's geroteerd, {{unchanged}} ongewijzigd gelaten"
+title = "Detectierapport"
+
+[autoRotate.report.method]
+inferred = "Overeenkomend"
+none = "Overgeslagen"
+osd = "OCR"
+text = "Tekst"
+
+[autoRotate.report.note]
+belowThreshold = "Onder drempel"
+blankPage = "Pagina is leeg"
+inferredFromDocument = "Hetzelfde als de andere pagina's"
+noDominantDirection = "Gemengde tekstrichtingen"
+osdFailed = "Geen leesbare tekst gevonden"
+osdNoVerdict = "Kon niet bepalen wat boven is"
+tesseractUnavailable = "OCR niet geïnstalleerd"
+tooFewGlyphs = "Te weinig tekst"
+
+[autoRotate.results]
+title = "Resultaten automatisch roteren"
+
+[autoRotate.settings]
+title = "Instellingen"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Hoe zeker de controle moet zijn voordat een pagina wordt gedraaid. Verlaag dit om meer pagina's te roteren, verhoog dit om meer pagina's ongemoeid te laten."
+title = "Betrouwbaarheidsdrempel"
+
+[autoRotate.tooltip.description]
+text = "Bepaalt hoe elke pagina rechtop moet staan en draait deze de juiste kant op. Pagina's die al rechtop staan, blijven ongemoeid."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automatisch leest eerst de tekst op de pagina en bekijkt daarna de pagina als afbeelding als dat niet genoeg is. Alleen tekst slaat de afbeeldingscontrole over, wat het snelst is voor documenten die nooit zijn gescand. Alleen OCR behandelt elke pagina als afbeelding."
+title = "Detectiemethode"
+
+[autoRotate.tooltip.header]
+title = "Automatisch roteren"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Lege of bijna lege pagina's kunnen niet afzonderlijk worden gecontroleerd. Wanneer elke leesbare pagina dezelfde draai nodig heeft, worden deze pagina's mee gedraaid zodat ze overeenkomen."
+title = "Pagina's met lage betrouwbaarheid mee roteren"
+
 [autoSizeSplitPDF]
 tags = "pdf,splitsen,document,organiseren"
 
@@ -2189,33 +2440,6 @@ keywords = "Sleutelwoorden: odd, even"
 numbers = "Cijfers/reeksen: 5, 10-20"
 progressions = "Voortgangen: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Certificaattypen"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Beheerd door systeembeheerders"
-bullet2 = "Gedeeld met geautoriseerde gebruikers"
-bullet3 = "Vertegenwoordigt bedrijfsidentiteit, niet individueel"
-bullet4 = "Beste voor: Officiële documenten, teamhandtekeningen"
-description = "Een gedeeld certificaat dat door uw organisatie wordt geleverd. Gebruikt voor organisatiebrede ondertekeningsbevoegdheid."
-title = "Organisatiecertificaat"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Automatisch gegenereerd bij eerste gebruik"
-bullet2 = "Gekoppeld aan uw gebruikersaccount"
-bullet3 = "Kan niet met andere gebruikers worden gedeeld"
-bullet4 = "Beste voor: Persoonlijke documenten, individuele verantwoordelijkheid"
-description = "Een automatisch gegenereerd certificaat dat uniek is voor uw gebruikersaccount. Geschikt voor individuele handtekeningen."
-title = "Persoonlijk certificaat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Vereist P12/PFX-bestand en wachtwoord"
-bullet2 = "Kan worden uitgegeven door externe certificaatautoriteiten"
-bullet3 = "Hoger vertrouwensniveau voor juridische documenten"
-bullet4 = "Beste voor: Juridisch bindende contracten, externe validatie"
-description = "Gebruik uw eigen PKCS#12-certificaatbestand. Biedt volledige controle over certificaateigenschappen."
-title = "Aangepaste P12 uploaden"
-
 [certSign]
 awaitingSignatures = "In afwachting van handtekeningen"
 chooseCertificate = "Certificaatbestand kiezen"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Certificaatbron"
 upload = "Uploaden"
 
-[certSign.tooltip.header]
-title = "Over het beheren van handtekeningen"
-
-[certSign.tooltip.overview]
-bullet1 = "Controleer bestaande handtekeningen en hun geldigheid"
-bullet2 = "Bekijk gedetailleerde informatie over ondertekenaars en certificaten"
-bullet3 = "Voeg nieuwe digitale handtekeningen toe om uw documenten te beveiligen"
-bullet4 = "Meerdere bestanden ondersteund met eenvoudige navigatie"
-text = "Met deze tool kunt u controleren of uw PDF's digitaal zijn ondertekend en nieuwe digitale handtekeningen toevoegen. Digitale handtekeningen bewijzen wie een document heeft gemaakt of goedgekeurd en tonen of het sinds de ondertekening is gewijzigd."
-title = "Wat kan deze tool doen?"
-
-[certSign.tooltip.signing]
-bullet1 = "Ondersteunt PEM, PKCS12, JKS en servercertificaatformaten"
-bullet2 = "Optie om de handtekening op de PDF te tonen of te verbergen"
-bullet3 = "Reden, locatie en naam van ondertekenaar toevoegen"
-bullet4 = "Kies op welke pagina zichtbare handtekeningen worden geplaatst"
-bullet5 = "Gebruik servercertificaat voor de eenvoudige optie 'Ondertekenen met Stirling-PDF'"
-text = "Om een PDF te ondertekenen, hebt u een digitaal certificaat nodig (zoals PEM, PKCS12 of JKS). U kunt ervoor kiezen de handtekening zichtbaar te maken in het document of onzichtbaar te laten voor alleen beveiliging."
-title = "Handtekeningen toevoegen"
-
-[certSign.tooltip.validation]
-bullet1 = "Toont of handtekeningen geldig of ongeldig zijn"
-bullet2 = "Toont informatie over ondertekenaar en datum van ondertekening"
-bullet3 = "Controleert of het document na ondertekening is gewijzigd"
-bullet4 = "Kan aangepaste certificaten gebruiken voor verificatie"
-text = "Wanneer u handtekeningen controleert, geeft de tool aan of ze geldig zijn, wie het document heeft ondertekend, wanneer het is ondertekend en of het document na ondertekening is gewijzigd."
-title = "Handtekeningen controleren"
-
 [changeCreds]
 changeUsername = "Werk uw gebruikersnaam bij. U wordt uitgelogd na het bijwerken."
 credsUpdated = "Account bijgewerkt"
@@ -2824,6 +3020,7 @@ next = "Volgende"
 preview = "Voorbeeld"
 previous = "Vorige"
 refresh = "Vernieuwen"
+remaining = "Resterend"
 retry = "Opnieuw proberen"
 save = "Opslaan"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Geavanceerde monitoring"
-allInOneWorkspace = "Alles-in-één PDF-werkruimte (viewer, tools & agent)"
-apiSandbox = "API-sandbox"
-dedicatedSupportSlas = "Toegewijde support & SLA's"
-fasterThroughput = "10x snellere doorvoer"
-fullyPrivateFiles = "Volledige bestandsprivacy"
-largeFileProcessing = "Verwerking van grote bestanden"
-orgWideAccess = "Organisatiebrede toegangscontrole"
-premiumAiModels = "Premium AI-modellen"
-prioritySupport = "Prioritaire support"
-privateDocCloud = "Privé Document Cloud"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Beveiligde API-toegang"
-standardThroughput = "Standaard doorvoer"
-unlimitedApiAccess = "Onbeperkte API-toegang"
-unlimitedSeats = "Onbeperkte seats"
-
 [crop]
 autoCrop = "Witruimte autom. bijsnijden"
 noFileSelected = "Selecteer een PDF-bestand om te beginnen met bijsnijden"
@@ -3346,6 +3525,7 @@ message = "Standaard PDF-verwerker instellen mislukt"
 title = "Fout"
 
 [defaultApp.prompt]
+dontRemind = "Herinner mij niet opnieuw"
 message = "Maak Stirling PDF de standaardapp voor het openen van PDF-bestanden."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Groepen aanpassen"
 dropHint = "Open bestanden om te beginnen"
 dropToAdd = "Drop files to add"
 expand = "Zijbalk uitvouwen"
-files = "Bestanden"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive is niet geconfigureerd"
 leaveMyFiles = "Mijn bestanden verlaten"
+library = "PDF-bibliotheek"
 myFiles = "Mijn bestanden"
 noFiles = "Nog geen bestanden"
 openFileManager = "Bestandsbeheer openen"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Toevoegen"
-addLabel = "Een label toevoegen…"
-categoryIconAria = "Kies een pictogram voor {{name}}"
-createCategory = "Categorie maken"
-delete = "Categorie verwijderen"
 done = "Gereed"
-hide = "Categorie verbergen"
-newCategory = "Nieuwe categorienaam…"
-removeLabel = "{{name}} verwijderen"
-rename = "Naam wijzigen"
 reset = "Terugzetten naar standaardinstellingen"
-search = "Labels zoeken…"
-show = "Categorie tonen"
 subtitle = "Groepeer je bestanden in hoofdcategorieën. Voeg bestaande of nieuwe labels toe aan een categorie, wijzig de naam ervan of maak je eigen categorie. Bestanden die in geen van je categorieën staan, verschijnen onder “Overig”."
 title = "Zijbalkcategorieën"
 
@@ -3808,6 +3977,7 @@ refresh = "Vernieuwen vanaf server"
 remove = "Verwijderen"
 removeVersion = "Deze versie verwijderen"
 rename = "Naam wijzigen"
+renamed = "Hernoemd"
 renameFolder = "Mapnaam wijzigen"
 resizeFolderTree = "Mapstructuur vergroten/verkleinen (pijltjestoetsen, Shift voor grotere stappen; dubbelklik om automatisch te passen)"
 save = "Opslaan"
@@ -3910,9 +4080,7 @@ count = "Bestanden"
 folder = "Map"
 labels = "Labels"
 modified = "Gewijzigd"
-name = "Naam"
 size = "Grootte"
-toolHistoryAtVersion = "Cumulatieve toolketen"
 totalSize = "Totale grootte"
 type = "Type"
 versionHistory = "Versietraject"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Alles opgeslagen"
+extractCsvError = "CSV extraheren mislukt"
+extractXlsxError = "XLSX extraheren mislukt"
 flattenAfterFilling = "Afvlakken na invullen"
+requiredAbbreviation = "verpl."
+requiredFieldsError = "Vul alle verplichte velden in"
 rescanFields = "Velden opnieuw scannen"
 rescanFormFields = "Formuliervelden opnieuw scannen"
 save = "Opslaan"
+saveShortcut = "Ctrl+S om op te slaan"
+unsavedChanges = "Niet-opgeslagen wijzigingen"
 
 [formFill.sidebar]
 close = "Zijbalk sluiten"
@@ -4309,6 +4484,11 @@ desc = "Hernoemt een PDF-bestand automatisch op basis van de gedetecteerde kop"
 tags = "automatisch detecteren,op kop gebaseerd,organiseren,herlabelen"
 title = "PDF automatisch hernoemen"
 
+[home.autoRotate]
+desc = "Detecteer de oriëntatie van elke pagina en roteer deze automatisch rechtop."
+tags = "automatisch roteren,oriëntatie herstellen,ondersteboven,zijwaarts,rechttrekken,oriënteren,oriëntatie detecteren,rotatie corrigeren,automatisch oriënteren,gescand,OSD"
+title = "Automatisch roteren"
+
 [home.autoSizeSplitPDF]
 tags = "auto,splitsen,grootte"
 title = "Automatisch splitsen op grootte/aantal"
@@ -4608,13 +4788,13 @@ hint = "Upload een PNG, JPG, SVG of ander afbeeldingsbestand om op de PDF te pla
 label = "Afbeelding uploaden"
 placeholder = "Afbeeldingsbestand selecteren"
 
-[imageToPdf]
-tags = "conversie,img,jpg,foto"
-
 [imageToPDF]
 header = "Afbeelding naar PDF"
 title = "Afbeelding naar PDF"
 
+[imageToPdf]
+tags = "conversie,img,jpg,foto"
+
 [infoBanner]
 dismiss = "Negeren"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "U bent uitgenodigd!"
 
 [landing]
 addFiles = "Bestanden toevoegen"
-heroSubtitle = "Sleep of voeg een bestaande PDF toe om te beginnen."
 mobileUpload = "Upload from Mobile"
 openFromComputer = "Openen vanaf computer"
 uploadFromComputer = "Uploaden vanaf computer"
-workbenchEmptyStateHero = "Zet ergens een PDF neer"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Inloggen"
 magicLinkSent = "Magic link verzonden naar {{email}}! Controleer uw e-mail en klik op de link om in te loggen."
 mfaCode = "Authenticatiecode"
 mfaRequired = "Tweefactorcode vereist"
+noAccount = "Geen account?"
 or = "Of"
 password = "Wachtwoord"
 passwordChangedSuccess = "Wachtwoord succesvol gewijzigd! Log in met uw nieuwe wachtwoord."
@@ -4715,26 +4894,10 @@ signInWith = "Inloggen met"
 title = "Inloggen"
 unexpectedError = "Onverwachte fout: {{message}}"
 updatePassword = "Wachtwoord bijwerken"
-useEmailInstead = "Inloggen met e-mail"
 useMagicLink = "Gebruik in plaats daarvan een magic link"
 username = "Gebruikersnaam"
 youAreLoggedIn = "U bent ingelogd!"
 
-[login.slides.edit]
-alt = "PDF's bewerken"
-subtitle = "Met meer dan een dozijn tools om PDF's te anonimiseren, ondertekenen, lezen en bewerken vindt u zeker wat u zoekt."
-title = "Bewerk PDF's om de gewenste informatie te tonen/beveiligen"
-
-[login.slides.overview]
-alt = "Stirling PDF-overzicht"
-subtitle = "Een privacy-first cloud suite voor PDF's waarmee u documenten kunt converteren, ondertekenen, anonimiseren en beheren, plus 50+ andere krachtige tools."
-title = "Uw alles-in-een oplossing voor al uw PDF-behoeften."
-
-[login.slides.secure]
-alt = "PDF's beveiligen"
-subtitle = "Voeg wachtwoorden toe, anonimiseer inhoud en beheer certificaten met gemak."
-title = "Bescherm gevoelige informatie in uw PDF's"
-
 [margin]
 large = "Groot"
 medium = "Middelgroot"
@@ -4976,6 +5139,7 @@ pinButton = "U kunt de knop <strong>Vastzetten</strong> gebruiken als u wilt dat
 results = "Nadat de tool klaar is met uitvoeren, toont de stap <strong>Beoordeling</strong> een voorbeeld van de resultaten in dit paneel, en kunt u de bewerking ongedaan maken of het bestand downloaden."
 runButton = "Zodra de tool is geconfigureerd, kunt u met deze knop de tool uitvoeren op alle geselecteerde PDF's."
 selectCropTool = "Laten we de tool <strong>Bijsnijden</strong> selecteren om te laten zien hoe u een van de tools gebruikt."
+stepOf = "Stap {{current}} van {{total}}"
 toolInterface = "Dit is de interface van de tool <strong>Bijsnijden</strong>. Zoals u ziet is er nog niet veel, omdat we nog geen PDF-bestanden hebben toegevoegd om mee te werken."
 workbench = "Dit is de <strong>Werkbank</strong> - het hoofdgebied waar u uw PDF's bekijkt en bewerkt."
 wrapUp = "U bent er klaar voor! U kent de belangrijkste onderdelen van de app en hoe u ze gebruikt. Klik wanneer u wilt op de knop <strong>Help</strong> om deze rondleiding opnieuw te zien."
@@ -4988,6 +5152,26 @@ showMeAround = "Geef me een rondleiding"
 skipForNow = "Voor nu overslaan"
 skipTheTour = "Rondleiding overslaan"
 
+[onboarding.checklist]
+dismiss = "Sluiten"
+title = "Stirling PDF instellen"
+
+[onboarding.checklist.downloadDesktop]
+description = "Draai Stirling native op je machine"
+title = "Stirling voor Desktop downloaden"
+
+[onboarding.checklist.inviteTeam]
+description = "Werk samen met je team"
+title = "Teamleden uitnodigen"
+
+[onboarding.checklist.shareAnalytics]
+description = "Help Stirling verbeteren"
+title = "Anonieme gebruiksgegevens delen"
+
+[onboarding.checklist.takeTour]
+description = "Bekijk in een korte rondleiding hoe Stirling werkt"
+title = "Rondleiding starten"
+
 [onboarding.desktopInstall]
 body = "Stirling werkt het best als desktopapp. U kunt het offline gebruiken, sneller documenten openen en lokaal op uw computer bewerken."
 selectOs = "Besturingssysteem selecteren"
@@ -4996,7 +5180,21 @@ titleWithOs = "Downloaden voor {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Authenticatiecode"
+description = "Beveilig je account door een authenticator-app te koppelen. Scan de QR code of voer de instelsleutel in en bevestig daarna de 6-cijferige code om af te ronden."
+enable = "MFA inschakelen"
+enableError = "Kan tweefactorauthenticatie niet inschakelen. Controleer de code en probeer het opnieuw."
+enterCode = "Voer de 6-cijferige code uit je app in."
+enterCodeError = "Voer de authenticatiecode in om door te gaan."
+logout = "Uitloggen"
+openAuthenticator = "Open Google Authenticator, Authy of 1Password."
 qrCodeLoading = "Uw QR-code genereren…"
+regenerateQrCode = "QR code opnieuw genereren"
+scanQrCode = "Scan de QR code of voer hieronder de instelsleutel in."
+setupError = "Kan tweefactorinstelling niet starten. Probeer het opnieuw."
+setupKey = "Instelsleutel (handmatige invoer)"
+stepByStep = "Stap voor stap"
+success = "MFA is ingeschakeld. Je kunt nu doorgaan."
+title = "Multi-Factor Authentication instellen"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Zodra u de loginmodus inschakelt, kunt u gebruikers beheren, instellingen configureren en de servergezondheid monitoren. De eerste <strong>{{freeTierLimit}}</strong> personen op uw server gebruiken Stirling gratis."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin-overzicht"
 userBody = "Nodig teamgenoten uit, wijs rollen toe en houd uw documenten georganiseerd in één veilige werkruimte. Schakel de loginmodus in wanneer u klaar bent om verder te groeien dan solo-gebruik."
 userTitle = "Abonnementoverzicht"
 
+[onboarding.processorIntro]
+body = "Stirling voert nu <strong>Beleid</strong> uit — geautomatiseerde regels die elk document classificeren, beveiligen en verwerken zodra het binnenkomt. Stel ze in en bewaak uitvoeringen in de <strong>Processor</strong>."
+cta = "Bekijk de Processor"
+title = "Bekijk de Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Vooruitbetaald jaar"
+
+[payg.prepaid.banner]
+exhausted = "Je vooruitbetaalde capaciteit is opgebruikt; gefactureerd gebruik is hervat. Waardeer op om de korting te behouden."
+expiring_one = "Je vooruitbetaalde jaar eindigt over {{count}} dag. Ongebruikte capaciteit verloopt — waardeer op om een nieuw jaar te starten."
+expiring_other = "Je vooruitbetaalde jaar eindigt over {{count}} dagen. Ongebruikte capaciteit verloopt — waardeer op om een nieuw jaar te starten."
+low = "Je hebt nog {{pct}}% van je vooruitbetaalde capaciteit over. Waardeer op elk moment op om verwerking zonder onderbreking voort te zetten."
+
+[payg.prepaid.card]
+subtitle = "Gebruikt vóór gefactureerd gebruik en buiten je bestedingslimiet."
+title = "Vooruitbetaalde capaciteit"
+
+[payg.prepaid.meter]
+capSuffix = "van {{total}} vooruitbetaalde credits"
+expires = "Verloopt {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Opgebruikt"
+healthy = "Ruim voldoende over"
+low = "Bijna op"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Plak de licentiesleutel uit uw e-mail"
 success = "Licentie geactiveerd!"
 successMessage = "Uw licentie is met succes geactiveerd. U kunt dit venster nu sluiten."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "afgedwongen"
-enforcing = "Bezig met afdwingen..."
-failed = "Afdwingen mislukt"
 outputsUnavailable = "Beleidsuitvoer is niet langer beschikbaar om te downloaden."
 partialOutputsUnavailable = "Sommige beleidsuitvoer is niet langer beschikbaar om te downloaden."
-retrying = "Bezig, opnieuw proberen..."
 runNotFound = "De afdwingingsuitvoering kon niet meer worden gevonden."
-step = "stap {{current}}/{{total}}"
 timedOut = "Time-out bij afdwingen voordat de uitvoering kon worden voltooid."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Sluiten"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Bezig met toepassen van {{names}}"
 applyingProgress = "Bezig met toepassen van {{names}} ({{done}} van {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} van {{total}} bestand(en) konden niet worden verwerk
 failureTitle = "Geëxporteerd zonder volledige afdwinging"
 printPolicyAppliedBody = "Deze PDF is bijgewerkt om aan een beleid te voldoen. Controleer de wijzigingen en druk vervolgens opnieuw af."
 printPolicyAppliedTitle = "Beleid toegepast vóór het afdrukken"
-queued = "+{{count}} in wachtrij"
 successTitle = "{{names}} toegepast"
 summaryMore = "{{first}}, {{second}} en nog {{more}}"
 summaryTwo = "{{first}} en {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Afdwingen vóór converteren"
-default = "Afdwingen"
-export = "Afdwingen vóór exporteren"
-input = "Afdwingen bij importeren"
-print = "Afdwingen vóór afdrukken"
-
-[policies.field]
-accessLog = "Toegangslog"
-archiveAfter = "Archiveren na"
-auditTrail = "Audittrail"
-belowThreshold = "Onder drempelwaarde"
-destination = "Bestemming"
-frameworks = "Frameworks"
-immutableHold = "Onveranderlijke blokkering"
-keepFor = "Bewaren gedurende"
-minConfidence = "Min. betrouwbaarheid"
-notify = "Melden bij routering"
-onViolation = "Bij niet-naleving"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Toevoegen"
-addPlaceholder = "Een label toevoegen…"
-customNote = "Aangepast voor je team."
-defaultNote = "Gebruikt de ingebouwde standaard, gedeeld met je team."
-duplicate = "\"{{name}}\" bestaat al."
-edit = "Labels bewerken"
-empty = "Nog geen labels."
-export = "JSON exporteren"
-iconAria = "Kies een pictogram voor {{name}}"
-import = "JSON importeren"
-importError = "Kon dat bestand niet importeren."
-managedNote = "Teamlabels worden beheerd door je teamleider."
-modalSubtitle = "Gedeeld met je hele team. De classifier kiest de labels die bij elk document passen."
-modalTitle = "Classificatielabels"
-pickIcon = "Pictogram {{label}} gebruiken"
-removeAria = "{{name}} verwijderen"
-resetToDefault = "Terugzetten naar standaard"
-saveForTeam = "Opslaan voor team"
-saving = "Opslaan…"
-sectionLabel = "Classificatielabels"
-startFromScratch = "Vanaf nul beginnen"
-teamCount = "teamlabels"
-tooLong = "Labels mogen maximaal {{max}} tekens bevatten."
-ungrouped = "Niet gegroepeerd"
-view = "Labels bekijken"
+categoryCount = "categorieën"
+hideCategory = "Categorie verbergen"
+labelCount = "labels"
+sharedNote = "Deze labels zijn ingebouwd en worden gedeeld met je hele team."
+showCategory = "Categorie tonen"
 
 [policies.pii]
 account = "Rekeningnummers (gelabeld)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US-routingnummers (ABA)"
 ssn = "Social Security-nummers"
 
-[policies.settings]
-noneExport = "Er worden momenteel geen beleidsregels uitgevoerd bij export."
-noneUpload = "Er worden momenteel geen beleidsregels uitgevoerd bij upload."
-onExport = "Bij export"
-onUpload = "Bij upload"
-reorderHandle = "Slepen om te herschikken"
-runOrderDesc = "Wanneer meer dan één beleid op dezelfde trigger wordt uitgevoerd, worden ze in deze volgorde uitgevoerd — elk op de uitvoer van het vorige beleid. Sleep om te herschikken."
-title = "Beleidsinstellingen"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Beleidsopties"
-policySettings = "Beleidsinstellingen"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Mislukte beleidsregels opnieuw proberen ({{count}})"
-rowProgress = "{{completed}} van {{total}} bestanden verwerkt"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Wat is een beleid?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Zoekt automatisch gevoelige gegevens en maakt ze zwart — zoals Social Security- en kaartnummers — zodat ze niet in het document kunnen worden gelezen."
-sanitize = "Verwijdert verborgen JavaScript uit het bestand, zodat er niets automatisch wordt uitgevoerd wanneer iemand het opent."
-watermark = "Plaatst een zichtbaar merkteken (bijv. \"Confidential\") over elke pagina."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Sluiten"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} wordt afgedwongen..."
 badgeRan = "{{name}}-beleid is op dit bestand uitgevoerd"
+badgeRunning = "{{name}} wordt uitgevoerd..."
 blockingAction = "{{action}} geblokkeerd tijdens afdwingen van beleid, even geduld..."
 dismiss = "Overlay sluiten"
 enforcingTitle = "Beleid afdwingen..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Bestand bekijken (beleid wordt nog afgedwongen)"
 [policyOption]
 autoRedactPhi = "PHI automatisch redigeren"
 blockExport = "Export blokkeren"
+ccpa = "CCPA"
 contracts = "Contracten"
 documents = "Documenten"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor-abonnement"
 subscribed = "Processor-abonnement"
 unlinked = "Niet gekoppeld"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap vanuit document"
-sectionsAriaLabel = "Secties van Agent Builder"
-selectorAriaLabel = "Agents"
-subtitle = "Ontwerp, test en publiceer de AI-agenten die je documenten classificeren, er gegevens uit extraheren en ze routeren. Definieer scenario's, begrens tooltoegang, voer een golden set uit en publiceer een versie."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Annuleren"
-dropzoneText = "Kies een voorbeelddocument (PDF of afbeelding)"
-lead = "Zet een voorbeelddocument neer en we stellen scenario's en een extractieschema voor dat je kunt verfijnen. Er wordt niets gepubliceerd totdat je het hebt beoordeeld."
-submit = "Agent bootstrappen"
-subtitle = "Start een nieuwe agent vanuit één representatief bestand"
-title = "Bootstrap vanuit een document"
-
-[portal.agentBuilder.empty]
-description = "Bootstrap een agent vanuit een voorbeelddocument om de scenario's en het extractieschema te starten, verfijn en publiceer daarna."
-title = "Nog geen agents"
-
-[portal.agentBuilder.evals]
-casesPassing = "Geslaagde cases"
-columnCase = "Eval-case"
-columnLatency = "Latentie"
-columnResult = "Resultaat"
-fail = "mislukt"
-goldenSetPassRate = "Slagingspercentage golden set"
-latencyMs = "{{ms}} ms"
-notRun = "niet uitgevoerd"
-pass = "geslaagd"
-passRate = "Slagingspercentage"
-runEvals = "Evals uitvoeren"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals maken van je scenario's een herhaalbare golden set. Upgrade om het slagingspercentage in de tijd vast te leggen en publicaties daarop te blokkeren."
-title = "Nog geen golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "over golden sets"
-activeAgents = "Actieve agents"
-avgPassRate = "Gem. slagingspercentage evals"
-fleetWide = "over de hele fleet"
-latestPublished = "Laatst gepubliceerd"
-scenarios = "Scenario's"
-testCases = "testcases"
-totalDescription_one = "{{count}} totaal"
-totalDescription_other = "{{count}} totaal"
-
-[portal.agentBuilder.scenarios]
-add = "Toevoegen"
-addScenario = "Scenario toevoegen"
-enable = "Inschakelen"
-expectationLabel = "Verwacht gedrag"
-expectationPlaceholder = "Wat de agent moet doen"
-inEval = "in eval"
-mute = "Dempen"
-muted = "gedempt"
-nameLabel = "Naam"
-namePlaceholder = "bijv. compliance-escalatie"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenario's"
-tools = "Tools"
-versions = "Versies"
-
-[portal.agentBuilder.tools]
-broadAccess = "Brede toegang"
-deniedHint = "Geselecteerde tools zijn geblokkeerd. Al het overige blijft aanroepbaar."
-deniedTools = "Geweigerde tools"
-governanceGate = "Tool-governance is beschikbaar in het Enterprise-abonnement."
-restricted = "Beperkt"
-restrictedAccess = "Beperkte tooltoegang"
-restrictedDescription = "Sta elke tool toe behalve de tools die je hieronder weigert."
-
-[portal.agentBuilder.versions]
-current = "huidig"
-historyGate = "Volledige versiegeschiedenis en rollback zijn beschikbaar in het Enterprise-abonnement."
-publish = "Publiceren"
-rollBack = "Terugdraaien"
-
 [portal.assistant]
 close = "Assistent sluiten"
 error = "Kon de assistent niet bereiken."
@@ -6365,9 +6346,21 @@ typing = "Aan het typen"
 loading = "Laden"
 redirectingToEditor = "Doorsturen naar de editor..."
 
+[portal.billing.activation]
+maybeLater = "Misschien later"
+title = "Schakel de Processor in"
+
+[portal.billing.activation.payg]
+sub = "Stel een maandelijkse limiet in. Betaal voor wat je uitvoert."
+title = "Betalen naar gebruik"
+
+[portal.billing.activation.prepay]
+badge = "2 maanden gratis"
+sub = "Eén factuur, kaart of bankoverschrijving."
+title = "Een jaar vooruitbetalen"
+
 [portal.billing.checkout]
 noClientSecret = "Edge-functie heeft geen client_secret geretourneerd."
-subtitle = "Voeg een kaart toe om door te gaan na je gratis Editor-abonnementstegoed. Stripe regelt de rest."
 title = "Processor-abonnement inschakelen"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Je betaling is gelukt, maar activering duurt iets langer dan normaal. He
 close = "Sluiten"
 title = "Bijna klaar"
 
+[portal.billing.checkout.cap]
+amountAria = "Maandelijkse bestedingslimiet"
+back = "Terug"
+continue = "Doorgaan naar betaling"
+error = "Kan je bestedingslimiet niet instellen"
+finePrint = "Facturen worden maandelijks verstuurd. Altijd opzegbaar."
+noLimit = "Geen limiet"
+note = "Je wordt nooit boven je limiet gefactureerd. Verwerking pauzeert alleen."
+perMonth = "/ mnd"
+title = "Stel je bestedingslimiet in"
+
+[portal.billing.checkout.card]
+fields = "Kaartnummer · MM / JJ · CVC · ZIP"
+label = "Kaartgegevens"
+note = "Kaartgegevens worden verzameld door Stripe. Stirling slaat nooit PAN of CVC op."
+
 [portal.billing.checkout.error]
 title = "Kon checkout niet starten"
 
@@ -6383,10 +6392,9 @@ body = "Je betaling is verwerkt. We schakelen verbruiksgemeten verwerking in voo
 hint = "Houd dit venster open."
 title = "Je Processor-abonnement activeren..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "in de portal env om checkout in de app in te schakelen."
-bodyBefore = "Stel"
-title = "Stripe niet geconfigureerd"
+[portal.billing.checkout.pay]
+limit = "Maandelijkse bestedingslimiet {{amount}}/mnd. Verwerking pauzeert bij de limiet."
+limitNoCap = "Geen bestedingslimiet. Verwerking pauzeert niet. Facturen worden maandelijks verstuurd."
 
 [portal.billing.enterpriseUpsell]
 cta = "Stel je Enterprise-offerte samen"
@@ -6409,10 +6417,12 @@ currentPlan = "Huidig abonnement"
 freeForever = "Voor altijd gratis"
 noTeamResolved = "Er is nog geen team gekoppeld aan je wallet — vernieuw en probeer opnieuw."
 ownerOnly = "Alleen de teameigenaar kan het Processor-abonnement inschakelen."
+payInvoice = "Factuur betalen om te voltooien"
 planName = "Editor"
 ssoIncluded = "SSO inbegrepen"
 switchOnProcessor = "Processor inschakelen →"
 unlimitedUsers = "Onbeperkt aantal gebruikers"
+viewQuote = "Offerte bekijken"
 
 [portal.billing.invoices]
 columnAmount = "Bedrag"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Directe API-verzoeken"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatiseringen en pipelines"
 segmentAutomationLabel = "Automatisering"
+sizeMultiplier = "{{formatted}} PDFs gebruikten een groottevermenigvuldiger"
+summary = "{{unique}} uniek · {{units}} meeteenheden · {{avg}} gem. per PDF"
+summaryNoRate = "{{unique}} uniek · {{units}} meeteenheden"
 unit = "verbruiksgemeten PDF's"
+unitsPending_one = "{{units}} meeteenheid wacht op sync vanaf gekoppelde instanties"
+unitsPending_other = "{{units}} meeteenheden wachten op sync vanaf gekoppelde instanties"
+
+[portal.billing.prepaid]
+capSuffix = "van {{total}} vooruitbetaalde credits"
+expires = "Verloopt {{date}}"
+eyebrow = "Vooruitbetaalde capaciteit"
+note = "Gebruikt vóór gefactureerd gebruik en buiten je bestedingslimiet."
+topUp = "Opwaarderen"
+
+[portal.billing.prepaid.buy]
+back = "Terug"
+calcTitle = "Bereken je jaarlijkse betaling"
+cancel = "Annuleren"
+cancelPurchase = "Aankoop annuleren"
+close = "Sluiten"
+continueToPayment = "Doorgaan naar betaling"
+finalise = "Afronden"
+invoiceErrorTitle = "Kan de factuur niet genereren"
+loadingTitle = "Je offerte laden"
+payTitle = "Betaal voor je jaar"
+step = "Stap {{current}} van {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Wijzigen"
+deployRow = "Implementatie"
+done = "Gereed"
+enterpriseHint = "Dit is enterprise-schaal. Bij dit volume zijn enterprise-tarieven beter dan welke selfservicekorting ook. Tariefvastheid, voorwaarden en een offerte binnen enkele minuten."
+governanceRow = "Governance"
+governanceValue = "{{label}} · {{count}} beleidsregels"
+handlesLabel = "Je Processor"
+handlesValue = "verwerkt {{volume}} credits / mnd"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} beleidsregels"
+poolCaption = "Eén pool van {{credits}} credits voor het jaar. Zware maanden lenen van lichte maanden."
+priceLabel = "Je jaar · 12 maanden voor de prijs van 10"
+rateUnknown = "We tonen de exacte prijs bij het afrekenen."
+savings = "Je bespaart {{amount}} · 2 maanden gratis."
+sizingRow = "Omvang"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Totaal aantal gebruikers"
+
+[portal.billing.prepaid.consent]
+label = "Ik begrijp dat wanneer mijn vooruitbetaalde capaciteit is opgebruikt of na 12 maanden verloopt, verwerking automatisch doorgaat tegen het standaard gemeten pay-as-you-go-tarief (tot mijn bestedingslimiet), tenzij ik annuleer, en dat ik op elk moment kan annuleren via de billing portal."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Beheerd door Stirling. Live binnen enkele minuten."
+cloudValue = "Stirling Cloud · Beheerd"
+selfhost = "Zelfgehost"
+selfhostDesc = "Draait op private infrastructuur. Zelfde tarief."
+selfhostValue = "Zelfgehost · Private infrastructuur"
+
+[portal.billing.prepaid.offer]
+cta = "Aanbod bekijken"
+subtitle = "Betaal een jaar PDF-verwerking vooruit en krijg twee maanden gratis, gebruikt vóór gefactureerd gebruik, buiten je bestedingslimiet."
+title = "Krijg 12 maanden voor de prijs van 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Naam rekeninghouder"
+accountNamePlaceholder = "bijv. Jane Smith"
+companyName = "Bedrijfsnaam (optioneel)"
+companyNamePlaceholder = "bijv. Acme Inc."
+downloadInvoice = "Factuur downloaden"
+payOnline = "Online betalen"
+poNumber = "PO-nummer (optioneel)"
+poNumberPlaceholder = "bijv. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Geavanceerd"
+advancedDesc = "Pipelines sturen het grootste deel van je verwerking aan."
+none = "Geen"
+noneDesc = "Er draaien nog geen pipelines. Schakel ze op elk moment in."
+standard = "Standaard"
+standardDesc = "Een paar pipelines verwerken binnenkomende PDFs opnieuw."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Classificatie, de standaard, plus Delen"
+governed = "Governed"
+governedDesc = "Voegt Beveiliging en Routering toe"
+regulated = "Regulated"
+regulatedDesc = "Elke categorie, incl. Compliance, Retentie, Ingestie"
+
+[portal.billing.prepaid.review]
+download = "Offerte downloaden (PDF)"
+downloading = "Voorbereiden…"
+share = "delen voor goedkeuring"
+
+[portal.billing.prepaid.size]
+compact = "Compact"
+compactDesc = "Bestanden onder 25 MB, geen datakosten"
+heavy = "Zwaar"
+heavyDesc = "Gescand of met veel afbeeldingen, doorgaans 50 MB+"
+standard = "Standaard"
+standardDesc = "Vooral klein, enkele scans boven 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Opgebruikt"
+healthy = "Ruim voldoende over"
+low = "Bijna op"
 
 [portal.billing.spendLimit]
 adjustLimit = "Limiet aanpassen"
@@ -6494,6 +6608,8 @@ label = "Verwacht te overschrijden."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Uitgaven deze maand"
+freeRemaining_one = "{{formatted}} gratis PDF resterend"
+freeRemaining_other = "{{formatted}} gratis PDFs resterend"
 processed_one = "{{formattedCount}} PDF verwerkt."
 processed_other = "{{formattedCount}} PDF's verwerkt."
 processedWithRate_one = "{{formattedCount}} PDF verwerkt, à {{rate}} per stuk."
@@ -6534,6 +6650,350 @@ signature = "handtekening"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nieuwe verbinding"
+createTitleFor = "{{name}} verbinden"
+delete = "Verwijderen"
+edit = "Bewerken"
+editTitle = "Verbinding bewerken"
+unsupportedType = "Dit verbindingstype kan hier niet worden bewerkt."
+
+[portal.connections.categories.advanced]
+description = "Voor een service die we nog niet ondersteunen."
+label = "Geavanceerd"
+
+[portal.connections.categories.audit]
+description = "Leg vast wat er met een document is gebeurd, waar je auditors al kijken."
+label = "Audit- & compliancelogging"
+
+[portal.connections.categories.notify]
+description = "Vertel een ander systeem dat er iets is gebeurd."
+label = "Melden & workflow"
+
+[portal.connections.categories.security]
+description = "Scan of label een document voordat het verdergaat."
+label = "Beveiliging & classificatie"
+
+[portal.connections.categories.signing]
+description = "Stuur een document om te laten ondertekenen of notarieel vastleggen."
+label = "E-handtekening & notariële vastlegging"
+
+[portal.connections.categories.storage]
+description = "Waar verwerkte documenten terechtkomen - een bucket, een drive, een ticket of een pagina."
+label = "Bestand & bijlage"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling slaat dit versleuteld op en toont het nooit meer."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Stappen die deze verbinding gebruiken, kunnen alleen paden onder deze URL aanroepen, nooit een andere host."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "E-mail"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Wachtwoord"
+
+[portal.connections.commonFields.port]
+label = "Poort"
+
+[portal.connections.commonFields.username]
+label = "Gebruikersnaam"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Plak de URL die de service je heeft gegeven. Alleen paden daaronder kunnen worden aangeroepen."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Verbindingsnaam"
+namePlaceholder = "bijv. Productie"
+
+[portal.connections.picker]
+cancel = "Annuleren"
+createNew = "Nieuwe verbinding..."
+placeholder = "Selecteer een verbinding"
+save = "Verbinding opslaan"
+
+[portal.connections.picker2]
+back = "Integratie wijzigen"
+heading = "Wat wil je verbinden?"
+noResultsBody = "We ondersteunen dit nog niet - vertel ons erover en we bekijken of we het kunnen toevoegen."
+noResultsTitle = "Niets komt overeen met \"{{query}}\""
+searchPlaceholder = "Integraties zoeken - probeer \"sign\", \"ocr\" of een productnaam"
+
+[portal.connections.types.api]
+description = "Roep elke HTTP API aan vanuit een beleidsregel. Jij kiest de URL, authenticatie en payload."
+label = "Aangepaste API"
+
+[portal.connections.types.api.fields.authType]
+label = "Authenticatie"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Gebruikersnaam en wachtwoord"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token in een aangepaste header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Geen"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Inloggen voor een token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Stappen die deze verbinding gebruiken, kunnen alleen paden onder deze URL aanroepen, nooit een andere host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Headernaam"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Inlogpad"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Wachtwoord"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Als de API antwoordt met een downloadlink, mogen alleen deze hosts worden opgehaald. Scheid met komma's. Laat leeg om alleen de eigen host van de base URL toe te staan."
+label = "Toegestane resultaathosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Verstuur de token als deze header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "De response-header waarin de login-aanroep de token retourneert, bijv. X-Auth-Token."
+label = "Token-response-header"
+
+[portal.connections.types.api.fields.username]
+label = "Gebruikersnaam"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Scan documenten op malware op een server die je beheert - niets verlaat je netwerk."
+label = "ClamAV (zelfgehost)"
+
+[portal.connections.types.cloudmersive]
+description = "Virus- en contentscanning voor documenten in een beleidsregel."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokkeer documenten met macro's, uitvoerbare bestanden, scripts of ingesloten objecten - niet alleen bekende malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Voeg verwerkte documenten toe als bijlage aan een Confluence-pagina."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Stuur documenten naar ConsignO Cloud (Notarius) voor elektronische ondertekening en notariële vastlegging."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Je ConsignO Cloud-omgeving, inclusief /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Wachtwoord"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Alleen nodig als je organisatie tenants gebruikt."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Gebruikersnaam"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Plaats een bericht op Discord wanneer een beleidsregel een document verwerkt."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexeer een auditgebeurtenis in Elasticsearch telkens wanneer een beleidsregel een document behandelt."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Controleer een FTP- of FTPS-server op nieuwe documenten."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Verbindingsmodus"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Actief"
+passive = "Passief (aanbevolen)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Gewone FTP verstuurt referenties en bestanden onversleuteld; kies FTPS als de server dit ondersteunt."
+label = "Versleuteling"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (expliciet / AUTH TLS)"
+implicit = "FTPS (impliciet)"
+none = "Geen (gewone FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Plaats een bericht in een Google Chat-ruimte wanneer een beleidsregel wordt uitgevoerd."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Voeg verwerkte documenten toe als bijlage aan een Jira-issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "E-mail een document of melding wanneer een beleidsregel wordt uitgevoerd."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Sla verwerkte documenten op in Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App-wachtwoord"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detecteer persoonsgegevens in documenttekst met een Presidio-server die je beheert."
+label = "Presidio (zelfgehost)"
+
+[portal.connections.types.purview]
+description = "Lees en pas Microsoft Purview-gevoeligheidslabels toe op PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Optioneel. Alleen nodig om labels op naam te kiezen; labelen werkt ook zonder dit."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Wordt op elk label gestempeld als SiteId, zodat Purview-bewuste tools weten welke organisatie het heeft toegepast."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Een S3 bucket waaruit bronnen kunnen lezen en waar Pipeline-uitvoer naartoe kan schrijven."
+label = "S3-opslag"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Laat leeg voor AWS. Stel dit in voor MinIO of een andere S3-compatibele opslag."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Regio"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "E-mail een document of melding wanneer een beleidsregel wordt uitgevoerd."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Controleer een SFTP (SSH)-server op nieuwe documenten."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Optioneel. De SHA-256 host key fingerprint van de server (van `ssh-keyscan host | ssh-keygen -lf -`). Indien ingesteld, wordt alleen een server geaccepteerd die deze key presenteert; indien leeg, wordt de key die bij de eerste verbinding wordt gezien gepind en worden latere wijzigingen geweigerd."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key-wachtzin"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Laat leeg als je in plaats daarvan met een private key authenticeert."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Optioneel. Plak een OpenSSH private key om te authenticeren met een key in plaats van een wachtwoord."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Plaats een bericht op Slack wanneer een beleidsregel een document verwerkt."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Bewaak een SMB / CIFS-netwerkshare (Windows of Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Netwerkshare"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Optioneel. Het Windows-domein of de werkgroep, als je server er een gebruikt."
+label = "Domein"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Stuur een auditgebeurtenis naar Splunk telkens wanneer een beleidsregel een document behandelt."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Stuur een auditgebeurtenis naar een Sumo Logic HTTP-collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Plaats een bericht in een Teams-kanaal wanneer een beleidsregel wordt uitgevoerd."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Plaats elk document, of alleen de details, naar een URL die jij kiest."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Trigger een Zap- of Make-scenario vanuit een beleidsregel."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Documentatie bekijken"
+viewSource = "Bron bekijken op GitHub"
+
 [portal.docs.authentication]
 codeCaption = "elk verzoek"
 eyebrow = "AAN DE SLAG"
@@ -6619,11 +7079,19 @@ title = "Officiële SDKs"
 beta = "Beta"
 deprecated = "Verouderd"
 
+[portal.docs.search]
+empty = "Geen overeenkomende documentatie"
+placeholder = "Documentatie zoeken"
+results = "{{count}} resultaten"
+
 [portal.docs.skills]
 eyebrow = "VAARDIGHEDEN"
 lead = "Gebundelde, benoemde mogelijkheden die je agent als één tool aanroept. Elke vaardigheid is een deterministische op-chain met gekoppelde evals."
 title = "Agentvaardigheden"
 
+[portal.docs.toc]
+title = "Op deze pagina"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API-REFERENTIE"
@@ -6697,6 +7165,8 @@ type = "Type"
 user = "Gebruiker"
 
 [portal.documents.queue.empty]
+connectSource = "Een bron verbinden"
+createPipeline = "Een pipeline maken"
 description = "Wanneer bronnen documenten naar je pipelines sturen, verschijnen ze hier ter beoordeling."
 title = "Geen documenten in de wachtrij"
 
@@ -6806,13 +7276,71 @@ description = "Deze weergave heeft een onverwachte fout aangetroffen. Probeer he
 retry = "Opnieuw proberen"
 title = "Er is iets misgegaan op deze pagina"
 
+[portal.home.download]
+back = "Terug"
+body = "Download de desktop-app of host de server zelf."
+done = "Gereed"
+guide = "Open de {{name}}-gids"
+openInBrowser = "In plaats daarvan openen in browser"
+sectionDesktop = "Desktop-app"
+sectionSelfHosted = "Zelfgehost"
+title = "Installeer de Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Draai de officiële image op je server."
+note = "Opent op :8080. Standaardinlog: admin / stirling."
+tagline = "Draai de server in een container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standaard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installeer de officiële Helm chart."
+note = "Voeg een PVC toe voor /configs om instellingen te behouden."
+tagline = "Implementeer naar een cluster met Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Native builds voor je distributie."
+guideBtn = "Linux-installatieopties bekijken"
+note = "AppImage-, .deb- en .rpm-builds zijn beschikbaar voor gangbare distro's."
+tagline = "Native desktop-app voor je distro"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Of via Homebrew"
+detailBody = "Voer het installatieprogramma uit of gebruik Homebrew."
+downloadBtn = "Downloaden voor macOS"
+tagline = "Native app voor Apple silicon en Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Voer de .jar uit op een bare-metalserver."
+downloadBtn = "De .jar downloaden"
+note = "Vereist Java 21+. Opent op :8080; standaardlogin admin / stirling."
+runLabel = "Voer het daarna uit"
+tagline = "Voer de .jar uit op een bare-metalserver"
+title = "Handmatige serverconfiguratie"
+
+[portal.home.download.windows]
+altLabel = "Of via winget"
+detailBody = "Voer het installatieprogramma uit of gebruik een package manager."
+downloadBtn = "Installatieprogramma downloaden"
+tagline = "Native app voor Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} actief"
-invite = "Teamleden uitnodigen"
+activeOfDeployed = "{{active}} van {{total}} actief deze maand"
 name = "Stirling PDF Editor"
 open = "Openen in browser"
 updated = "bijgewerkt {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Implementatie voltooien"
+options = "Implementatieopties bekijken"
+start = "Editor implementeren"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Zelfgehost · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Goedemiddag"
 evening = "Goedenavond"
 morning = "Goedemorgen"
 
-[portal.home.onboarding]
-dismiss = "Installatie sluiten"
-notStarted = "Niet gestart"
-progress = "{{done}} van {{total}} voltooid"
-title = "Installatie voltooien"
-
-[portal.home.onboarding.enterprise]
-body = "Organisatiebrede SSO + SCIM + RBAC, vaste volumeprijzen en air-gapped implementatie."
-cta = "Proefperiode starten"
-ctaQuote = "Offerte aanvragen"
-lead = "Voor 250+ medewerkers."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Implementeer de desktop-app, voor altijd gratis."
-title = "Download de PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} actief · {{recommended}} aanbevolen"
-chip = "{{active}} actief"
-title = "Beleid inschakelen"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} verbonden · elke PDF beheerd waar die terechtkomt"
-chip = "{{connected}} verbonden"
-title = "Verbind je bronnen"
-
-[portal.home.quickActions]
-subtitle = "Belangrijkste taken voor vandaag"
-title = "Snelle acties"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Composer in 3 stappen bovenop de getypte op-bibliotheek"
-title = "Pipeline bouwen"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, bewaakte mappen"
-title = "Bron verbinden"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Scoped sleutel met rate limits en IP allowlist"
-title = "API-sleutel uitgeven"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor-implementatie beheren"
 sectionsAriaLabel = "Infrastructuursecties"
@@ -6878,13 +7363,9 @@ heading = "API-sleutels"
 subheading = "Scoped referenties met rate limits per sleutel, machtigingen en IP allowlists."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Toegestane IP's"
-anyIp = "Elk IP (geen allowlist)"
 created = "Aangemaakt"
 lastUsed = "Laatst gebruikt"
-permissions = "Machtigingen"
-rateLimit = "Rate limit"
-rateLimitValue = "{{value}} req/min"
+revoke = "Sleutel intrekken"
 usageMonth = "Gebruik deze maand"
 usageToday = "Gebruik vandaag"
 
@@ -6892,6 +7373,20 @@ usageToday = "Gebruik vandaag"
 description = "Maak een scoped sleutel om de Stirling API aan te roepen."
 title = "Nog geen API-sleutels"
 
+[portal.infrastructure.apiKeys.error]
+load = "Kon je API-sleutels niet laden. Probeer het opnieuw."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" intrekken? Elke integratie die deze sleutel nog gebruikt, krijgt onmiddellijk 401-fouten. Dit kan niet ongedaan worden gemaakt."
+cancel = "Annuleren"
+confirm = "Sleutel intrekken"
+title = "API-sleutel intrekken"
+
+[portal.infrastructure.attestationLabel]
+attested = "Geattesteerd"
+inScope = "Binnen scope"
+notApplicable = "N.v.t."
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Auditgebeurtenissen filteren op categorie"
 heading = "Auditlogs"
@@ -6935,6 +7430,7 @@ all = "Alle"
 auth = "Auth"
 config = "Config"
 elevation = "Verhoging"
+policy = "Beleid"
 processing = "Verwerking"
 security = "Beveiliging"
 
@@ -6944,19 +7440,35 @@ title = "Je hebt geen toegang"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Verhoging"
+policy = "Beleid"
 processing = "Verwerking"
 totalEvents = "Totaal aantal gebeurtenissen · 24u"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Configuratie"
+elevation = "Verhoging"
+policy = "Beleid"
+processing = "Verwerking"
+security = "Beveiliging"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Fout"
+info = "Info"
+success = "Succes"
+warning = "Waarschuwing"
+
+[portal.infrastructure.certLabel]
+certified = "Gecertificeerd"
+inProgress = "In behandeling"
+notStarted = "Niet gestart"
+
 [portal.infrastructure.createKey]
 cancel = "Annuleren"
 createKey = "Sleutel maken"
 done = "Gereed"
-ipAllowlistHelper = "Door komma's gescheiden CIDR-bereiken. Laat leeg om elk IP toe te staan."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Sleutelnaam"
 keyNamePlaceholder = "bijv. Productie · ingest"
-permissionsLabel = "Machtigingen"
 secretKeyCaption = "Geheime sleutel"
 secretWarning = "Sla dit op in een secrets manager. Stirling slaat alleen ooit een hash op — er is geen manier om deze later te herstellen."
 subtitle = "Beperk de sleutel tot het minimum dat nodig is. Je kunt deze op elk moment roteren of intrekken."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopieer dit geheim nu — het wordt niet opnieuw getoond."
 title = "API-sleutel maken"
 titleCreated = "Sleutel aangemaakt"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "In wachtrij"
+rolledBack = "Teruggedraaid"
+rolling = "Wordt uitgerold"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Live gezondheid voor elke geïmplementeerde Stirling-regio — lat
 description = "Geïmplementeerde regio's verschijnen hier zodra je werkruimte is ingericht."
 title = "Geen regio's geïmplementeerd"
 
+[portal.infrastructure.keyLabel]
+active = "Actief"
+revoked = "Ingetrokken"
+
+[portal.infrastructure.modelLabel]
+active = "Actief"
+degraded = "Verslechterd"
+disabled = "Uitgeschakeld"
+
 [portal.infrastructure.models]
 heading = "Modellen"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Type"
 version = "Versie"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/aanroep"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Actieve modellen"
 avgLatency = "Gem. latentie"
@@ -7049,6 +7580,17 @@ modelForAria = "Model voor {{operation}}"
 operation = "Bewerking"
 routedTo = "Gerouteerd naar"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classificatie"
+extraction = "Extractie"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Verslechterd"
+down = "Uitgevallen"
+healthy = "Gezond"
+
 [portal.infrastructure.security.access.byok]
 description = "Lever een sleutel uit je eigen KMS. Stirling versleutelt ermee, maar kan nog steeds lezen."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modellen"
 security = "Beveiliging"
 storage = "Opslag"
 
+[portal.integrations]
+addAnother = "Nog een toevoegen"
+availableHeading = "Beschikbaar"
+comingSoonHeading = "Binnenkort beschikbaar"
+connect = "Verbinden"
+connectedHeading = "Verbonden"
+connectionCount_one = "{{count}} verbinding"
+connectionCount_other = "{{count}} verbindingen"
+customApi = "Aangepaste API"
+searchPlaceholder = "Integraties zoeken"
+subtitle = "Alles waarmee Stirling kan praten. Inloggegevens worden hier één keer aangemaakt en daarna gebruikt door bronnen, beleid en pijplijnen."
+title = "Integraties"
+typedName = "{{tool}}-naam"
+
+[portal.integrations.filters]
+all = "Alles"
+audit = "Audit"
+connected = "Verbonden"
+notify = "Melden"
+security = "Beveiliging"
+signing = "Ondertekening"
+storage = "Opslag"
+
+[portal.integrations.status]
+connected = "Verbonden"
+
+[portal.integrations.table]
+integration = "Integratie"
+worksWith = "Werkt met"
+
+[portal.integrations.worksWith]
+pipelines = "Pijplijnen"
+policies = "Beleid"
+sources = "Bronnen"
+
+[portal.legal]
+draft = "{{label}} · concept"
+loadError = "Kon dit document niet laden. Probeer het opnieuw."
+loading = "Laden…"
+title = "Juridisch document"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Componenten"
@@ -7182,6 +7765,7 @@ documents = "Documenten"
 editor = "Editor"
 home = "Home"
 infrastructure = "Infrastructuur"
+integrations = "Integraties"
 pipelines = "Pipelines"
 policies = "Beleid"
 procurement = "Inkoop"
@@ -7190,25 +7774,9 @@ sources = "Bronnen"
 usage = "Gebruik en facturering"
 users = "Gebruikers"
 
-[portal.notifications]
-markAllRead = "Alles als gelezen markeren"
-title = "Meldingen"
-viewAll = "Alles bekijken"
-
-[portal.notifications.ariaLabel]
-none = "Meldingen, geen ongelezen"
-unread_one = "Meldingen, {{count}} ongelezen"
-unread_other = "Meldingen, {{count}} ongelezen"
-
-[portal.notifications.count]
-allRead = "alles gelezen"
-loading = "laden"
-new_one = "{{count}} nieuw"
-new_other = "{{count}} nieuw"
-
-[portal.notifications.empty]
-description = "Geen nieuwe meldingen."
-title = "Je bent helemaal bijgewerkt"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Elke geautomatiseerde documentpipeline op de backend: een geordende keten van bewerkingen over een set bronnen, uitgevoerd door een trigger. Klik op een rij voor de stappen en bronnen."
@@ -7220,15 +7788,28 @@ newPipeline = "Nieuwe pipeline"
 [portal.pipelines.builder]
 addStep = "Tool toevoegen"
 back = "Terug naar pipelines"
+cannotFollow = "Kan {{produced}} niet verwerken"
+chooseAccount = "Kies een account"
+chooseDestination = "Kies een bestemming"
+chooseOperation = "Kies wat deze stap doet"
+chooseSource = "Kies een bron"
 discard = "Wijzigingen verwerpen"
 enabled = "Ingeschakeld"
+inputs = "Invoer"
+inputSource = "Invoerbron"
+inputTrigger = "Trigger"
 keepEditing = "Blijven bewerken"
+needsConfiguring = "Moet worden ingesteld"
 needsUpload = "Vereist een geüpload bestand"
+noSources = "Nog geen bronnen verbonden. Maak er een aan om deze als invoer te gebruiken."
 noToolMatches = "Geen tools komen overeen met je zoekopdracht."
 pipelineSettings = "Pipeline-instellingen"
 searchTools = "Tools zoeken"
 selectToolBody = "Voeg een tool toe om je pipeline te bouwen."
 selectToolTitle = "Nog geen tools"
+sendToSystem = "Naar een ander systeem verzenden"
+stepsIncompatible = "Deze stappen kunnen niet worden uitgevoerd op wat hun vorige stap oplevert: {{tools}}."
+stepsNeedSetup = "Deze stappen moeten nog worden ingesteld voordat je kunt opslaan: {{tools}}."
 toolSettings = "Toolinstellingen"
 unknownStep = "Niet-herkende bewerking, ongewijzigd behouden."
 unsavedBody = "Je hebt niet-opgeslagen wijzigingen. Sla ze op voordat je weggaat, of verwerp ze?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Niet-opgeslagen wijzigingen"
 uploadUnsupported = "Geüploade bestanden worden nog niet ondersteund in pipelines, dus deze stappen kunnen niet worden opgeslagen: {{tools}}."
 usesDefaults = "Wordt uitgevoerd met standaardinstellingen"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combineert elk bestand uit de vorige stap"
+fan-out = "Wordt één keer uitgevoerd per bestand uit de vorige stap"
+format-mismatch = "Vereist {{accepts}}, maar de vorige stap levert {{produced}} op"
+output-uncertain = "Wordt mogelijk niet uitgevoerd: de uitvoer van de vorige stap hangt af van hoe deze is ingesteld"
+source-mismatch = "Vereist {{accepts}}, maar de invoer van deze pijplijn is {{produced}}"
+undeclared-operation = "Kan niet controleren wat deze stap accepteert"
+
 [portal.pipelines.composer]
 addTool = "Tool toevoegen"
 cancel = "Annuleren"
 chainEmpty = "Voeg een tool toe om je pipeline te bouwen."
 create = "Pipeline maken"
-directory = "Uitvoermap"
-directoryHelp = "Absoluut pad op de server. Moet binnen de geconfigureerde toegestane mappen liggen."
 editingUnsupported = "Het weergeven van deze toolparams voor bewerking wordt nog niet ondersteund."
 moveDown = "Omlaag verplaatsen"
 moveUp = "Omhoog verplaatsen"
 name = "Naam"
 namePlaceholder = "bijv. Redactiesweep"
-noSources = "Nog geen bronnen verbonden. De pipeline kan nog steeds draaien op bestanden die er rechtstreeks aan worden geleverd."
 noToolSettings = "Deze tool heeft geen configureerbare instellingen."
 operations_one = "Bewerking ({{count}})"
 operations_other = "Bewerkingen ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Verwijderen"
 title = "Pipeline verwijderen?"
 
 [portal.pipelines.detail]
+clearHistory = "Geschiedenis wissen"
 delete = "Pipeline verwijderen"
 run = "Nu uitvoeren"
 
 [portal.pipelines.empty]
 action = "Pipeline maken"
+connectSource = "Een bron verbinden"
 description = "Maak je eerste pipeline: kies de bronnen waarop deze draait, koppel de bewerkingen en kies waar de uitvoer naartoe gaat."
 title = "Nog geen pipelines"
 
@@ -7286,15 +7874,17 @@ active = "Actief"
 paused = "Gepauzeerd"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Naar map schrijven"
-inline = "Bestanden retourneren"
-
 [portal.pipelines.run]
+allProcessed_one = "Niets om uit te voeren: het {{count}} document van de bron is al verwerkt."
+allProcessed_other = "Niets om uit te voeren: alle {{count}} documenten in de bronnen zijn al verwerkt."
 completed_one = "Run voltooid."
 completed_other = "Alle {{count}} runs voltooid."
 empty = "Niets om uit te voeren: de bronnen hadden geen documenten om te verwerken."
 failed = "Run mislukt: {{error}}"
+historyCleared = "Geschiedenis gewist. De volgende uitvoering verwerkt alles opnieuw dat momenteel in de bronnen staat."
+inFlight = "Niets nieuws om uit te voeren: documenten worden nog verwerkt vanuit een eerdere uitvoering."
+parked_one = "Niets om uit te voeren: {{count}} document is eerder mislukt en is geparkeerd. Los de oorzaak op en wis daarna de geschiedenis om het opnieuw te proberen."
+parked_other = "Niets om uit te voeren: {{count}} documenten zijn eerder mislukt en zijn geparkeerd. Los de oorzaak op en wis daarna de geschiedenis om ze opnieuw te proberen."
 running = "Run gestart; nog bezig."
 timeout = "Run duurt langer dan verwacht; deze kan nog op de achtergrond worden voltooid."
 
@@ -7314,12 +7904,18 @@ manual = "Handmatig"
 schedule = "Gepland"
 
 [portal.policies]
+defaultName = "{{category}}-beleid"
 subtitle = "Permanente automatiseringen die een toolpipeline afdwingen op elk document. Elk beleid wordt geactiveerd bij upload of export, voert de toolketen uit en slaat de afgedwongen versie naast het origineel op."
 title = "Beleid"
 
 [portal.policies.card]
 comingSoon = "Upgrade naar Enterprise"
 notSetUp = "Niet ingesteld"
+requiresAiEngine = "Vereist AI-engine"
+
+[portal.policies.categories.classification]
+desc = "Identificeer het type van elk document bij uploaden en tag de metadata voor archivering en zoeken."
+label = "Classificatie"
 
 [portal.policies.categories.compliance]
 desc = "Dwing HIPAA-, GDPR-, SOC 2- of FedRAMP-vereisten af op elk document."
@@ -7344,6 +7940,13 @@ label = "Beveiliging"
 [portal.policies.config]
 scopeAll = "Alle documenten"
 
+[portal.policies.config.classification]
+summary = "Classificeert elk geüpload document aan de hand van de labels van je team en tagt de metadata."
+
+[portal.policies.config.classification.rules]
+0 = "Classificeren"
+1 = "Metadata taggen"
+
 [portal.policies.config.compliance]
 summary = "Valideert documenten tegen regelgevende frameworks voordat ze het systeem verlaten."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. betrouwbaarheid"
 2 = "Naam geven"
 3 = "Normaliseren"
 
+[portal.policies.config.purview]
+label = "Een Microsoft Purview-gevoeligheidslabel toepassen"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "De GUID van het label, uit de Purview-portal. Door een label toe te passen wordt de metadata ervan naar de PDF geschreven; het kan niet versleutelen, daarvoor is de Microsoft-client nodig."
+labelName = "Labelnaam (optioneel)"
+labelNameHelp = "Wordt naast de ID vastgelegd zodat mensen en tools het label kunnen herkennen."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview maakt onderscheid tussen een label dat door beleid is toegepast en een label dat door een persoon is gekozen."
+label = "Hoe het label wordt vastgelegd"
+privileged = "Zoals gekozen door een persoon"
+standard = "Zoals automatisch toegepast"
+
+[portal.policies.config.purviewRead]
+label = "Een Microsoft Purview-label lezen"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Leest het label dat het document al heeft, zodat latere stappen daarop kunnen reageren."
+
 [portal.policies.config.retention]
 summary = "Dwingt af hoe lang documenten worden bewaard, wanneer ze worden gearchiveerd en wanneer ze worden verwijderd."
 
@@ -7438,6 +8064,7 @@ title = "Nog geen activiteit"
 [portal.policies.endpoints]
 addWatermark = "Watermerk"
 autoRedact = "PII redigeren"
+classifyAndLabel = "Classificeren"
 compressPdf = "Comprimeren"
 flatten = "Plat maken"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Je beleidsregels zijn opgeslagen en verschijnen zodra de verbindi
 retry = "Opnieuw proberen"
 title = "Backend niet beschikbaar"
 
+[portal.policies.operations]
+change = "Wijzigen wat deze stap doet"
+noResults = "Geen stap komt hiermee overeen. Probeer een productnaam of \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Stappen zoeken - probeer \"scan\", \"attach\" of een productnaam"
+
+[portal.policies.operations.bodyMode]
+binary = "Ruwe bestandsbytes"
+json = "Binnen een JSON-payload"
+multipart = "Als bestandsupload (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Je eigen ClamAV-server controleert het document; niets verlaat je netwerk."
+label = "Scannen op virussen (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Weigert documenten met macro's, uitvoerbare bestanden, scripts of ingesloten objecten."
+label = "Actieve inhoud blokkeren"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive controleert het document en de uitvoering stopt als het niet schoon is."
+label = "Scannen op virussen"
+
+[portal.policies.operations.confluenceAttach]
+description = "Slaat het verwerkte document op een pagina op."
+label = "Aan een Confluence-pagina toevoegen"
+
+[portal.policies.operations.consignoSubmit]
+description = "Dient het document in bij ConsignO Cloud voor ondertekening."
+label = "Verzenden voor ondertekening (ConsignO)"
+note = "Dient het document in. Het ophalen van de ondertekende kopie wordt nog niet ondersteund, omdat een stap geen resultaat kan doorgeven aan een latere stap."
+
+[portal.policies.operations.customApiCall]
+description = "Stel de aanroep zelf samen: pad, methode, body en afhandeling van de reactie."
+label = "Een aangepaste API aanroepen"
+
+[portal.policies.operations.discordNotify]
+description = "Meldt aan een kanaal dat het beleid een document heeft afgehandeld."
+label = "Een bericht op Discord plaatsen"
+
+[portal.policies.operations.elasticIndex]
+description = "Legt vast wat het beleid deed als een doorzoekbaar document."
+label = "Een auditgebeurtenis indexeren in Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart past bij upload-APIs; JSON past bij APIs die het bestand in een payload willen; binary verzendt de ruwe bytes."
+label = "Hoe het document wordt verzonden"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Een JSON-body die ongewijzigd wordt verzonden. {{document.base64}} bevat het bestand; {{document.*}} en {{run.*}} worden per document ingevuld."
+label = "JSON-body"
+
+[portal.policies.operations.fields.connection]
+label = "Account"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun-domein"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Het formulierveld waarin de API het document verwacht."
+label = "Naam van bestandsveld"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Van"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Een JSON-object met headernaam/waarde-paren. De inloggegevens van de verbinding worden voor je toegevoegd."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Verzonden als de berichttekst. {{document.*}} en {{run.*}} worden per document ingevuld."
+label = "Bericht"
+
+[portal.policies.operations.fields.method]
+label = "Methode"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Toegevoegd aan de basis-URL van de verbinding. Het kan nooit een andere host bereiken."
+label = "Pad"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Waar in de drive het moet worden geschreven. {{document.filename}} wordt per document ingevuld."
+label = "Bestemmingspad"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Rapporteren laat het document ongemoeid. Vervangen wisselt het om voor wat er terugkomt."
+label = "Wat te doen met het antwoord"
+
+[portal.policies.operations.fields.signerEmail]
+label = "E-mailadres van ondertekenaar"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Onderwerp"
+placeholder = "Verwerkt: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyseert deze tekst. Gebruik {{document.title}} of plak de tekst die je wilt laten controleren."
+label = "Te controleren tekst"
+
+[portal.policies.operations.fields.to]
+label = "Aan"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud-gebruikersnaam"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Meldt aan een space dat het beleid een document heeft afgehandeld."
+label = "Een bericht in Google Chat plaatsen"
+
+[portal.policies.operations.jiraAttach]
+description = "Slaat het verwerkte document op bij een issue."
+label = "Aan een Jira-issue toevoegen"
+
+[portal.policies.operations.mailgunEmail]
+description = "Verzendt het verwerkte document als bijlage."
+label = "Het document e-mailen (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Schrijft het verwerkte document naar een map."
+label = "Uploaden naar Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Je eigen Presidio-server rapporteert de persoonsgegevens die worden gevonden."
+label = "Persoonsgegevens detecteren"
+note = "Presidio leest tekst, geen bestanden. Geef de tekst op die je wilt laten controleren — het document zelf wordt niet geüpload."
+
+[portal.policies.operations.responseMode]
+replace = "Het document vervangen door het antwoord"
+report = "Het document behouden, het antwoord registreren"
+
+[portal.policies.operations.sendgridEmail]
+description = "Verzendt het verwerkte document als bijlage."
+label = "Het document e-mailen (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Meldt aan een kanaal dat het beleid een document heeft afgehandeld."
+label = "Een bericht op Slack plaatsen"
+
+[portal.policies.operations.splunkEvent]
+description = "Legt vast wat het beleid deed, waar je auditors al kijken."
+label = "Een auditgebeurtenis naar Splunk verzenden"
+
+[portal.policies.operations.sumologicEvent]
+description = "Legt vast wat het beleid deed naar een HTTP collector."
+label = "Een auditgebeurtenis naar Sumo Logic verzenden"
+
+[portal.policies.operations.teamsNotify]
+description = "Meldt aan een kanaal dat het beleid een document heeft afgehandeld."
+label = "Een bericht op Teams plaatsen"
+
+[portal.policies.operations.webhookPost]
+description = "Verzendt het document zelf naar een URL die je kiest."
+label = "Het document naar een webhook posten"
+
+[portal.policies.operations.zapierNotify]
+description = "Geeft de details van de uitvoering door aan je automatisering."
+label = "Een Zap- of Make-scenario activeren"
+
 [portal.policies.stats]
 activeFor = "Actief"
 dataProcessed = "Gegevens verwerkt"
@@ -7473,6 +8277,13 @@ label = "Docs afgedwongen"
 description = "Geconfigureerd maar niet actief"
 label = "Gepauzeerd"
 
+[portal.policies.table]
+appliesTo = "Van toepassing op"
+docs = "Docs afgedwongen"
+enforces = "Dwingt af"
+policy = "Beleid"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Terug"
 cancel = "Annuleren"
@@ -7480,6 +8291,10 @@ continue = "Doorgaan"
 enablePolicy = "Beleidsregel inschakelen"
 saveChanges = "Wijzigingen opslaan"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identificeert het type document aan de hand van de labels van je team en tagt het, zodat het per categorie wordt opgeslagen en doorzocht."
+label = "Het document classificeren"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprimeert het document naar een kleinere bestandsgrootte."
 label = "Bestandsgrootte verkleinen"
@@ -7500,10 +8315,18 @@ label = "Gevoelige informatie redigeren"
 desc = "Verwijdert verborgen JavaScript zodat niets automatisch kan worden uitgevoerd wanneer het document wordt geopend."
 label = "Actieve inhoud verwijderen"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Bewijst dat het document op een bepaald moment in exact deze vorm bestond, met behulp van een onafhankelijke timestamp authority. Alleen een hash wordt verzonden - het document verlaat nooit je server."
+label = "Een vertrouwd tijdstempel toevoegen"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Plaatst een zichtbare markering (bijv. “Vertrouwelijk”) op elke pagina."
 label = "Watermerk toepassen"
 
+[portal.policies.wizard.classification]
+description = "Elk geüpload document wordt geclassificeerd aan de hand van de ingebouwde labels en getagd met de types die passen. De labelset wordt gedeeld met je hele team."
+labelsHeading = "Classificatielabels"
+
 [portal.policies.wizard.errors]
 noTools = "Schakel eerst minstens één tool in de workflow in."
 saveFailed = "Kon de beleidsregel niet opslaan. Probeer het opnieuw."
@@ -7548,73 +8371,118 @@ setUp = "Beleidsregel voor {{category}} instellen"
 [portal.policies.wizard.workflow]
 description = "Kies wat deze beleidsregel doet met elk document dat wordt verwerkt."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} actief"
-noRule = "Nog geen regel afgedwongen"
-subtitle = "Doorlopende automatiseringen waar elk document doorheen gaat, ongeacht welke pipeline het verwerkt."
-title = "Wat op je PDFs wordt uitgevoerd"
-
 [portal.policySummary.action]
-comingSoon = "Upgraden naar Enterprise"
-configure = "Configureren"
 setUp = "Instellen"
 
-[portal.policySummary.column]
-activeRule = "Actieve regel"
-policy = "Beleidsregel"
-status = "Status"
+[portal.processorFlow]
+footnote = "Aantallen zijn over de laatste 24 uur. De flowsnelheid is illustratief."
+liveBadge = "Live"
+stats = "{{connected}} verbonden · {{processed}} PDFs verwerkt"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Zodra beleidsregels zijn geconfigureerd, verschijnen de categorieën hier."
-title = "Nog geen beleidsregels"
+[portal.processorFlow.lens]
+ariaLabel = "Weergavemodus"
+flow = "Flow"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Actief"
-off = "Uit"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24u"
+failed = "Mislukt"
+heading = "Resultaten"
+success = "Afgeleverd"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} actief"
+count = "{{n}} · 24u"
+heading = "Beleid"
+setUp = "Instellen"
 soon = "Binnenkort"
 
-[portal.processingStatus]
-managePlan = "Abonnement beheren"
-volumeSuffix = "PDFs verwerkt · laatste 30 dagen"
+[portal.processorFlow.sankey]
+waist = "Beleid · {{n}} actief"
+
+[portal.processorFlow.sankey.empty]
+description = "Verbind een bron en schakel beleid in om documenten door de processor te zien stromen."
+title = "Nog geen flow"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Verbinden"
+editor = "Stirling PDF Editor"
+heading = "Bronnen"
+perDay = "{{n}} / 24u"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "E-mailinvoer"
 
 [portal.procurement]
-reset = "Inkoop resetten (demo)"
 subtitle = "Laat je team evalueren, contracteren en onboarden. Elk document op één plek."
 title = "Inkoop"
 
-[portal.procurement.action]
-download = "Downloaden"
-pay = "Nu betalen"
-request = "Aanvragen"
-sign = "Controleren & ondertekenen"
-upload = "Uploaden"
-
 [portal.procurement.agreement]
 agreeCta = "Akkoord gaan & abonneren"
+confidential = "Vertrouwelijk"
 confirm = "Ik heb de Stirling Enterprise-overeenkomst gelezen en ga ermee akkoord."
-eyebrow = "Overeenkomst"
-intro = "Eén gecombineerde overeenkomst dekt je deal: Master Service Agreement, bestelformulier, EULA en Data Processing Agreement. Controleer deze en ga vervolgens akkoord om de offerte te accepteren als een vast abonnement."
-title = "Controleer je Enterprise-overeenkomst"
+docName = "Stirling Enterprise-overeenkomst"
+docSub = "MSA, orderformulier, EULA en DPA, gecombineerd in één handtekening."
+download = "Downloaden"
+downloadDraftError = "Kon de overeenkomst-PDF niet genereren - de documentrenderer is niet beschikbaar. Probeer het binnenkort opnieuw of neem contact op met support."
+downloadError = "Kon de ondertekende overeenkomst niet downloaden. Probeer het opnieuw."
+legalName = "Naam juridische entiteit"
+legalNamePlaceholder = "De juridische entiteit die zal ondertekenen"
+loadError = "Kon de overeenkomst niet laden. Probeer het opnieuw."
+loading = "Overeenkomst laden..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Wijzigingen aanvragen"
+scrollHint = "Scroll om te controleren"
+signatory = "Naam ondertekenaar"
+signatoryPlaceholder = "Volledige naam"
+signatoryTitle = "Functie van ondertekenaar"
+signatoryTitlePlaceholder = "bijv. General Counsel"
+signError = "Kon je handtekening niet vastleggen. Probeer het opnieuw."
 
 [portal.procurement.builder]
 addons = "Add-ons"
+addressLine1 = "Adresregel 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresregel 2"
+addressLine2Placeholder = "Suite, verdieping, gebouw"
 back = "Terug"
 businessName = "Bedrijfsnaam"
 businessNamePlaceholder = "Je bedrijf"
+city = "Plaats"
+cityPlaceholder = "San Francisco"
+completeRequired = "Vul de verplichte velden (gemarkeerd met *) in met een geldig e-mailadres voordat je de offerte genereert."
+contactEmail = "E-mailadres contactpersoon"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Naam contactpersoon"
+contactNamePlaceholder = "Jane Doe"
 continue = "Doorgaan"
-country = "Land"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "Verenigd Koninkrijk (GBP £)"
-countryUS = "Verenigde Staten (USD $)"
+done = "Gereed"
 eula = "Ik heb de Stirling Enterprise EULA gelezen en ga ermee akkoord. Deze is van toepassing op de overeenkomst die uit deze offerte wordt gegenereerd."
 generate = "Offerte genereren"
-included = "Inbegrepen"
 indemnification = "IP-vrijwaring"
 indemnificationSub = "Wij verdedigen kwalificerende IP-claims, volgens de EULA"
-offlineLicense = "Offline / air-gapped licentie"
-offlineLicenseSub = "Een downloadbaar licentiebestand voor een air-gapped self-hosted instantie"
+paperEyebrow = "Enterprise-offerte"
+paperFor = "Opgesteld voor"
+pdfSize = "PDF-grootte"
+poNumber = "PO-nummer"
+poNumberPlaceholder = "Optioneel"
+postalCode = "Postcode"
+postalCodePlaceholder = "94105"
+posture = "Governance"
+posture_count = "~{{count}} beleid"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Classificatie + Delen — de standaardinstellingen"
+posture_governed = "Governed"
+posture_governedSub = "Voegt Beveiliging en Routering toe"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Elke categorie — Compliance, Bewaring, Ingestie"
 qbr = "Kwartaalreviews"
 qbrSub = "Je SE beoordeelt elk kwartaal gebruik en roadmap"
+region = "Staat / regio"
+regionPlaceholder = "Californië"
 running = "{{annual}} / jaar · {{years}} jaar {{tcv}}"
 s1Sub = "Je team en de PDFs die je elk jaar verwacht te verwerken."
 s1Title = "Hoeveel ga je verwerken?"
@@ -7623,6 +8491,12 @@ s2Title = "Commitment en service"
 s3Sub = "Voor de offerte en de overeenkomst die deze genereert."
 s3Title = "Je gegevens"
 serviceLevel = "Serviceniveau"
+size_compact = "Compact"
+size_compactSub = "Vooral tekst, onder 1 MB"
+size_heavy = "Zwaar"
+size_heavySub = "Gescand of veel afbeeldingen, 5 MB+"
+size_standard = "Standaard"
+size_standardSub = "Gemengde tekst en afbeeldingen, 1 tot 5 MB"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 kantooruren · dedicated accountmanager · +30%"
 slPriority = "Priority"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Zelfde werkdag · toegewezen CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Volgende werkdag · gedeelde CSM · inbegrepen"
 stepOf = "Stap {{n}} van {{total}}"
+taxId = "BTW / belastingnummer"
+taxIdPlaceholder = "Optioneel"
 term = "Looptijd"
 termDiscount = "{{pct}}% korting voor meerjarig commitment toegepast"
 title = "Stel je offerte samen"
@@ -7637,6 +8513,7 @@ training = "Onboarding & training"
 trainingSub = "Live sessies om je team op weg te helpen"
 users = "Totaal aantal gebruikers"
 usersPlaceholder = "bijv. 250"
+viewEula = "Lees het"
 volEstimated = "Geschat op basis van {{count}} gebruikers (~2.000 PDFs elk, inclusief automatisering). Pas aan als je het beter weet."
 volManual = "Je eigen cijfer wordt gebruikt. Schat op elk moment opnieuw op basis van je teamgrootte."
 volNoUsers = "Niet zeker? Voer je teamgrootte in en wij schatten het."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "bijv. 1.000.000"
 years_one = "{{count}} jaar"
 years_other = "{{count}} jaar"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Klaar"
-here = "Je bent hier"
-hide = "Verbergen"
-optional = "Optioneel"
-paidAddon = "Betaalde add-on"
-show = "Tonen"
-subtitle = "Alles wat je nodig hebt bij elke stap van het traject, zichtbaar zodra de deal die stap bereikt."
-supportingSubtitle = "SOC 2, beveiligingsreviews, belastingformulieren en meer, klaar wanneer je beveiligings- of inkoopteam erom vraagt. Voor sommige geldt een eenmalige vergoeding."
-supportingTitle = "Ondersteuning van je evaluatie"
+[portal.procurement.documents]
+agreement = "Enterprise-overeenkomst"
+agreementSub = "MSA, orderformulier en DPA in één handtekening."
+download = "Downloaden"
+eula = "EULA & commerciële voorwaarden"
+eulaSub = "De software en selfservice commerciële voorwaarden."
+invoice = "Factuur"
+invoiceSub = "Je eerste abonnementsfactuur."
+laterInvoice = "Beschikbaar nadat je accepteert"
+laterQuote = "Beschikbaar zodra je offerte is uitgebracht"
+quote = "Offerte"
+quoteSub = "Je gespecificeerde enterprise-offerte."
+sla = "SLA-bijlage"
+slaSub = "Supportniveaus en responstijden."
+subprocessors = "Subverwerkers"
+subprocessorsSub = "Derden die namens jou gegevens verwerken."
+subtitle = "Je dealdocumenten, altijd beschikbaar."
 title = "Documenten"
-upcoming = "Aankomend"
+view = "Bekijken"
 
 [portal.procurement.error]
 title = "Er is iets misgegaan"
 
 [portal.procurement.hero]
-company = "Je Enterprise-deal"
+barAria = "Fase {{current}} van {{total}}"
 ctaAgreement = "Overeenkomst controleren & ondertekenen"
-ctaLive = "Je bent live"
-ctaPayment = "Betaling toevoegen"
+ctaExploring = "Je proefperiode instellen"
 ctaQuote = "Je offerte controleren"
+ctaReviewQuote = "Offerte bekijken"
 ctaTrial = "Je offerte samenstellen"
+documents = "Documenten"
 eyebrow = "Enterprise-inkoop"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Teamgenoten uitnodigen"
-keyDocs = "Belangrijke documenten"
-nextStep = "Volgende stap: {{action}}"
-notStarted = "Niet gestart"
+licenseKey = "Licentiesleutel"
+liveSub = "Je organisatie is ingericht en je licentie is actief."
+liveTitle = "Je bent live op Stirling Enterprise"
+next = "Volgende: {{stage}}"
 open = "Inkoop openen"
 scheduleCall = "Gesprek plannen"
-setup1Sub = "Nodig je teamgenoten uit"
-setup1Title = "Implementeer de PDF Editor"
-setup2Sub = "Schakel verwerking in voor editors en andere bronnen"
-setup2Title = "Verbind de PDF Processor"
-setup3Sub = "Schakel Security, Compliance, Routing of Retention in wanneer je ze nodig hebt"
-setup3Title = "Aanbevolen beleidsregels toevoegen"
+sentenceAgreement = "de overeenkomst bekijken en ondertekenen"
+sentenceLive = "provisioning en uitrol"
+sentencePayment = "inkooporder en betaling"
+sentenceQuote = "je offerte bekijken en accepteren"
+sentenceTrial = "je proefwerkruimte instellen"
 
 [portal.procurement.journey]
 daysLeft_one = "Nog {{count}} dag"
 daysLeft_other = "Nog {{count}} dagen"
-engineerLabel = "Je solutions engineer"
-eyebrow = "Je uitrol"
-live = "Je bent live op Stirling Enterprise"
-nextStep = "Volgende stap: {{action}}"
-subtitle = "Je solutions engineer begeleidt elke stap. Eén volgende actie tegelijk; de volledige checklist staat hieronder."
-title = "Van trial naar live, één begeleid pad"
-trialTitle = "Enterprise-trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Eén handtekening dekt MSA, bestelformulier, EULA en DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Kon het offline licentiebestand nog niet genereren — probeer
 downloadOffline = "Offline licentie downloaden (.lic)"
 hint = "Plak deze sleutel in een self-hosted instantie om deze te activeren, of bewaar hem voor je administratie. Bewaar hem veilig."
 label = "Je licentiesleutel"
+subtitle = "Activeer een self-hosted instantie met deze sleutel, of bewaar deze voor je administratie."
+title = "Je licentiesleutel"
+trialFileHint = "Dit is je proeflicentiebestand. Zodra je overeenkomst rond is, kom je terug en download je het opnieuw — anders dan de online licentiesleutel wordt het .lic-bestand niet vanzelf bijgewerkt."
 
 [portal.procurement.link]
 cta = "Account koppelen"
@@ -7739,65 +8619,62 @@ description = "Je abonnement is actief en je licentie is uitgegeven. Je team is
 eyebrow = "Live"
 title = "Je bent live op Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Trialsleutels, offertes met vast volume, de overeenkomst met één handtekening, betaling en je documentregister staan hier allemaal zodra je een Enterprise-evaluatie start."
-eyebrow = "Alleen Enterprise"
-talkToSales = "Neem contact op met sales"
-title = "Het inkooptraject opent met Enterprise"
-
 [portal.procurement.milestone]
-accept = "Accepteren & doorgaan"
-description = "Download de PDF om deze met je team te delen, kom terug om te accepteren wanneer je klaar bent, of breng wijzigingen aan."
-download = "PDF downloaden"
 downloadError = "Kon de offerte-PDF nog niet downloaden — probeer het over enkele ogenblikken opnieuw."
-edit = "Offerte bewerken"
-eyebrow = "Offerte {{number}}"
-perYear = " / jaar"
-preparedFor = "Opgesteld voor {{company}}"
-tcv = "{{value}} totale contractwaarde"
-title = "Je offerte is klaar"
-
-[portal.procurement.modal]
-cancel = "Annuleren"
-chooseFile = "Bestand kiezen"
-close = "Sluiten"
-downloadBody = "Je download begint binnenkort."
-downloadCta = "Downloaden"
-downloadTitle = "Downloaden"
-noFile = "Geen bestand geselecteerd"
-payBody = "Betaal je vaste contract via kaart of bankoverschrijving via Stripe. Je workspace wordt ingericht zodra de betaling is verwerkt."
-payCta = "Doorgaan naar Stripe"
-payTitle = "Betaling bevestigen"
-requestBodyFree = "We genereren dit op aanvraag. Bevestig en je solutions engineer stuurt het binnenkort toe."
-requestBodyPaid = "Dit is een betaalde add-on. Bevestig en je solutions engineer bepaalt de scope en stuurt de documenten."
-requestCta = "Aanvragen"
-requestTitle = "Dit document aanvragen"
-signBody = "Opent de Stirling Enterprise-overeenkomst voor elektronische ondertekening: één handtekening dekt de MSA, het bestelformulier, de EULA en de DPA. Wij tekenen automatisch mede en je gaat door naar betaling."
-signCta = "Openen voor ondertekening"
-signTitle = "Controleer en onderteken je overeenkomst"
-uploadBody = "Stuur ons je inkooporder en wij factureren volgens je voorwaarden. Sleep de PDF hierheen of kies hieronder een bestand."
-uploadCta = "Inkooporder uploaden"
-uploadTitle = "Upload je inkooporder"
 
 [portal.procurement.payment]
 description = "Je offerte is geaccepteerd en je licentie is al actief — je team kan meteen beginnen. Betaal de eerste factuur wanneer je er klaar voor bent; je kunt deze hier betalen of downloaden, geen e-mail nodig."
+downloadAgreement = "Ondertekende overeenkomst downloaden"
 downloadInvoice = "Factuur downloaden"
-simulate = "Ontvangen betaling simuleren (demo)"
+eyebrow = "Betaling"
 title = "Abonnement aangemaakt"
 viewInvoice = "Factuur bekijken & betalen"
 
+[portal.procurement.review]
+acceptCta = "Offerte accepteren"
+annual = "Jaarlijkse vergoeding (jaar 1)"
+downloadCta = "Offerte downloaden"
+poNumber = "Inkooporder: {{po}}"
+renewal = "Verlengt tegen {{amount}}/jaar na de looptijd (+{{pct}}% CPI)"
+tcv = "Looptijd van {{years}} jaar, volledig vooraf betaald: {{tcv}}"
+validUntil = "Geldig tot {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Kon de planner niet laden."
 fallbackLink = "Planning openen in een nieuw tabblad"
+loading = "Planner laden..."
 subtitle = "Je solutions engineer begeleidt je team door de uitrol. Kies een tijd die jou uitkomt."
 title = "Gesprek plannen"
 
-[portal.procurement.status]
-action = "Actie nodig"
-available = "Beschikbaar"
-complete = "Voltooid"
-pending = "In behandeling"
-request = "Op aanvraag"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Afgesloten, geen uitgaand verkeer"
+back = "Terug"
+businessName = "Bedrijfsnaam"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Beheerd, snelste start"
+continue = "Doorgaan"
+deployment = "Waar moet het worden geïmplementeerd?"
+eula = "Ik ga akkoord met de Stirling EULA & commerciële voorwaarden."
+fullName = "Volledige naam"
+fullNamePlaceholder = "Je naam"
+invites = "Teamgenoten uitnodigen · optioneel"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Een gesprek plannen"
+seats = "Mensen die testen"
+seatsPlaceholder = "bijv. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker of Kubernetes"
+start = "Proefperiode starten"
+stepOf = "Stap {{n}} van {{total}}"
+subtitle = "14 dagen gratis, geen creditcard vereist."
+subtitleDetails = "Een paar gegevens voor je offerte en overeenkomst."
+talkFirst = "Wil je liever eerst praten?"
+title = "Je proefperiode instellen"
+viewEula = "Lees het"
+workEmail = "Werk-e-mailadres"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Verlengen voegt 7 dagen toe en stelt je solutions engineer op de hoogte."
@@ -7808,20 +8685,6 @@ maxed = "Maximum bereikt"
 subtitle = "Je gratis trial loopt tot en met {{date}}. Geen kaart vereist."
 title = "Enterprise-trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Prijzen op basis van vast volume, organisatiebrede SSO + SCIM + RBAC, 90 dagen onveranderbare audit en een dedicated SE."
-homeCta = "Trial starten →"
-homeHeadline = "Verwerk miljoenen PDFs."
-
-[portal.recentActivity]
-title = "Recente activiteit"
-viewAll = "Alles bekijken"
-
-[portal.recentActivity.empty]
-description = "Pipeline-uitvoeringen, implementaties en agentgebeurtenissen verschijnen hier."
-title = "Hier is nog niets"
-
 [portal.search]
 ariaLabel = "Zoeken"
 placeholder = "Zoek in Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Accountkoppeling"
 
-[portal.shell.header]
-accountFallback = "Account"
-accountMenu = "Accountmenu"
-darkMode = "Donkere modus"
-lightMode = "Lichte modus"
-search = "Zoeken"
-searchPlaceholder = "Zoeken…"
-signOut = "Uitloggen"
-switchToDark = "Overschakelen naar donker thema"
-switchToLight = "Overschakelen naar licht thema"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Stirling-account koppelen"
-planEditor = "Editor-abonnement"
-planEnterprise = "Enterprise-abonnement"
-planProcessor = "Processor-abonnement"
 primaryNav = "Primaire navigatie"
 switchApp = "App wisselen"
 
+[portal.shell.topbar]
+closeNav = "Navigatie sluiten"
+openNav = "Navigatie openen"
+search = "Zoeken"
+
 [portal.sources]
 subtitle = "Herbruikbare invoerverbindingen die documenten aan Stirling leveren. Configureer een verbinding één keer en verwijs er vervolgens vanuit meerdere beleidsregels naar. Klik op een rij voor de configuratie en welke beleidsregels deze gebruiken."
 title = "Bronnen"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Bron verbinden"
 
+[portal.sources.builder]
+back = "Terug naar bronnen"
+backToTypes = "Alle brontypen"
+cancel = "Annuleren"
+chooseHint = "Kies waar documenten vandaan komen. Grijs gemaakte connectors zijn onderweg."
+comingSoon = "Binnenkort beschikbaar"
+comingSoonHeading = "Binnenkort beschikbaar"
+create = "Bron maken"
+createTitle = "Een bron verbinden"
+delete = "Verwijderen"
+editTitle = "Bron bewerken"
+enabled = "Ingeschakeld"
+save = "Wijzigingen opslaan"
+
+[portal.sources.builder.folderAccess]
+description = "Mapautomatiseringen kunnen alleen mappen gebruiken die een beheerder heeft toegestaan. Voeg deze toe onder instellingen voor Maptoegang en probeer het daarna opnieuw."
+openSettings = "Instellingen voor Maptoegang"
+title = "Deze map is niet toegestaan"
+
 [portal.sources.delete]
 body = "\"{{name}}\" verwijderen? Dit kan niet ongedaan worden gemaakt. Beleidsregels die ernaar verwijzen moeten worden bijgewerkt."
 cancel = "Annuleren"
 confirm = "Verwijderen"
 title = "Bron verwijderen?"
 
-[portal.sources.detail]
-closeAriaLabel = "Detail sluiten"
-delete = "Bron verwijderen"
-docs24h = "Laatste 24u"
-docs30d = "Laatste 30 dagen"
-docsTotal = "Totaal gezien"
-docsTrend = "Documenten over de laatste 30 dagen"
-documents = "Documenten"
-edit = "Bewerken"
-notReferenced = "Wordt door geen enkele beleidsregel gebruikt, dus kan veilig worden verwijderd."
-pause = "Pauzeren"
-resume = "Hervatten"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Gebruikt door"
-
 [portal.sources.empty]
 description = "Verbind een map (en binnenkort cloudopslag) zodat je beleidsregels ergens documenten vandaan kunnen halen."
 title = "Nog geen bronnen verbonden"
@@ -7899,18 +8754,57 @@ inUse = "In gebruik"
 total = "Verbindingen"
 unused = "Ongebruikt"
 
+[portal.sources.networkFields.connection]
+helperText = "De opgeslagen verbinding met het serveradres en de inloggegevens. Hergebruikt door elke bron die ernaar verwijst."
+label = "Verbinding"
+
+[portal.sources.networkFields.directory]
+helperText = "Map op de server om te pollen, relatief ten opzichte van de login-home of share-root. Laat leeg voor de root."
+label = "Map"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume verwijdert elk bestand van de server zodra elk beleid het heeft verwerkt."
+label = "Leesmodus"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: elk bestand één keer verwerken"
+snapshot = "Snapshot: de map bij elke uitvoering opnieuw lezen"
+
+[portal.sources.networkFields.recursive]
+label = "Mapdiepte"
+
+[portal.sources.networkFields.recursive.options]
+all = "Submappen opnemen"
+top = "Alleen hoogste niveau"
+
 [portal.sources.status]
 active = "Actief"
 disabled = "Uitgeschakeld"
 unused = "Ongebruikt"
 
 [portal.sources.table]
+documents = "Documenten"
 source = "Bron"
 status = "Status"
 usedBy = "Beleidsregels"
 
+[portal.sources.types.box]
+description = "Haal documenten op uit Box-mappen die je team al deelt."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Haal documenten op uit een gedeelde Dropbox-map."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documenten die je team in de editor heeft verwerkt, over beleid en AI-uitvoeringen heen."
 label = "Editor"
+noPolicies = "Nog geen beleid uitgevoerd vanuit de editor."
+
+[portal.sources.types.email]
+description = "Zet bijlagen die naar een speciale mailbox worden gestuurd om in documenten."
+label = "E-mailinbox"
 
 [portal.sources.types.folder]
 description = "Bewaak een directory op de server voor nieuwe documenten."
@@ -7943,25 +8837,80 @@ label = "Mapdiepte"
 all = "Submappen opnemen"
 top = "Alleen bovenste niveau"
 
+[portal.sources.types.ftp]
+description = "Poll een FTP- of FTPS-servermap op nieuwe documenten."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Haal documenten op uit gedeelde Google Drive-mappen."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Bewaak een SMB-netwerkshare op nieuwe documenten."
+label = "Netwerkdrive"
+
+[portal.sources.types.onedrive]
+description = "Bewaak OneDrive-mappen op nieuwe documenten."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Haal documenten op uit een Amazon S3- of S3-compatibele bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "De opgeslagen verbinding met de bucket en inloggegevens. Hergebruikt door elke bron en pijplijnuitvoer die ernaar verwijst."
+label = "Verbinding"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume verwijdert elk object uit de bucket zodra elk beleid het heeft verwerkt."
+label = "Leesmodus"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: elk object één keer verwerken"
+snapshot = "Snapshot: de bucket bij elke uitvoering opnieuw lezen"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Alleen objecten waarvan de keys met dit prefix beginnen, worden verwerkt."
+label = "Key-prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Poll een SFTP-dropmap op nieuwe documenten."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Haal documenten op uit SharePoint-documentbibliotheken."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Bron"
 
+[portal.sources.types.webhook]
+createNote = "Een delivery URL en signing secret worden gegenereerd wanneer je deze webhook maakt. Afzenders POSTen documenten naar die URL en het verwijzende beleid wordt uitgevoerd bij aankomst."
+description = "Ontvang documenten via ondertekende HTTP POST vanuit elk extern systeem."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Het signing secret wordt één keer getoond, wanneer de webhook wordt gemaakt. Maak de bron opnieuw aan om het te roteren."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiëren"
+done = "Gereed"
+secret = "Signing secret"
+secretHelp = "Onderteken de ruwe body van elke levering met deze sleutel (HMAC-SHA256) en verzend deze als de X-Stirling-Signature-header."
+secretWarning = "Kopieer het signing secret nu. Voor je veiligheid wordt het slechts één keer getoond en kan het later niet worden opgehaald."
+title = "Webhook aangemaakt"
+url = "Delivery URL"
+usage = "POST elk document als de ruwe request body naar de delivery URL met een binair content type (application/pdf of application/octet-stream). Verwijzend beleid wordt automatisch uitgevoerd bij aankomst."
+
 [portal.sources.wizard]
-back = "Terug"
-cancel = "Annuleren"
-continue = "Doorgaan"
-editTitle = "Bron bewerken"
 name = "Naam"
 namePlaceholder = "bijv. Claims intake"
-save = "Wijzigingen opslaan"
-subtitle = "Stap {{current}} van {{total}} · {{label}}"
-title = "Een bron verbinden"
 type = "Type"
 
-[portal.sources.wizard.steps]
-chooseType = "Type kiezen"
-configure = "Configureren"
-review = "Controleren & verbinden"
+[portal.stepModal]
+close = "Sluiten"
 
 [portal.usage]
 managePayment = "Betaling beheren"
@@ -8021,16 +8970,9 @@ summary = "Bezit een team — beheert de resources en gedeelde configuraties van
 2 = "Portal-toegang via de standaardbeleidsregel"
 3 = "Alles wat Member kan doen"
 
-[portal.welcome]
-ariaLabel = "Welkom bij Stirling PDF"
-badge = "Open-source"
-installEditor = "De Editor installeren"
-inviteTeammates = "Teamgenoten uitnodigen"
-openInBrowser = "Openen in browser"
-perks = "Voor altijd gratis · Self-hostable"
-subtitle = "De veiligste PDF Editor ter wereld is gratis voor teams van elke omvang. Inclusief 60+ PDF-bewerkingen en SSO."
-title = "Welkom bij"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Onbeperkt"
 
 [printFile]
 title = "Print bestand"
@@ -8613,6 +9555,14 @@ text = "Draai uw PDF-pagina's met de klok mee of tegen de klok in in stappen van
 [rotate.tooltip.header]
 title = "Overzicht rotatie-instellingen"
 
+[ruler]
+clearAll = "Alles wissen"
+hideAllLabels = "Alle labels verbergen"
+hideSmallLabels = "Kleine labels verbergen"
+physicalValues = "Fysiek"
+scaled = "Geschaald"
+showAllLabels = "Alle labels tonen"
+
 [sanitize]
 desc = "Verwijder mogelijk schadelijke elementen uit PDF-bestanden."
 sanitizationResults = "Opschoonresultaten"
@@ -8654,31 +9604,45 @@ label = "XMP-metagegevens verwijderen"
 [sanitize.steps]
 settings = "Instellingen"
 
-[sanitizePdf]
-tags = "schoonmaken,veilig,veilig,bedreigingen verwijderen"
-
 [sanitizePDF]
 title = "PDF opschonen"
 
+[sanitizePdf]
+tags = "schoonmaken,veilig,veilig,bedreigingen verwijderen"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Pagina-schaal aanpassen"
 
+[scaleSettings]
+activeScale = "Actieve schaal"
+apply = "Schaal toepassen"
+applyCalibration = "Kalibratie toepassen"
+calculatedScale = "Berekende schaal"
+calibrate = "Kalibreren"
+calibrating = "Kalibreren"
+calibrationDistanceRequired = "Voer een werkelijke afstand groter dan nul in"
+calibrationInvalid = "Kan de schaal niet berekenen op basis van deze meting"
+calibrationPaperDistance = "Gemeten pagina-afstand: {{distance}}"
+calibrationTitle = "Schaal kalibreren"
+calibrationTooltip = "Meet een bekende afstand om de schaal automatisch te berekenen"
+customScale = "Aangepaste schaal"
+noneSet = "Geen aangepaste schaal ingesteld"
+presets = "Vooraf ingestelde schalen"
+ratio = "Schaalverhouding"
+ratioHelp = "Verhouding: 1 pagina-eenheid = X werkelijke eenheden"
+ratioPlaceholder = "bijv. 100"
+ratioPositive = "Verhouding moet groter zijn dan nul"
+ratioRequired = "Verhouding is vereist"
+realDistance = "Werkelijke afstand"
+realDistancePlaceholder = "bijv. 5"
+reset = "Terugzetten naar standaardwaarden"
+unit = "Eenheid"
+unitInvalid = "Ongeldige eenheid: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Hoek drempel:"
-10 = "Stelt de grootte van de toegevoegde en verwijderde rand in om witte randen in de uitvoer te voorkomen (standaard: 1)."
-2 = "Stelt de minimale absolute hoek in die nodig is om de afbeelding te roteren (standaard: 10)."
-3 = "Tolerantie:"
-4 = "Bepaalt het bereik van kleurvariatie rond de geschatte achtergrondkleur (standaard: 30)."
-5 = "Minimum oppervlakte:"
-6 = "Stelt de minimale oppervlakte drempel in voor een foto (standaard: 10000)."
-7 = "Minimum contour oppervlakte:"
-8 = "Stelt de minimale contour oppervlakte drempel in voor een foto"
-9 = "Randgrootte:"
-
 [scannerImageSplit]
 submit = "Afbeeldingsscans extraheren"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Wat dit doet"
 whatThisDoesDesc = "Detecteert en extraheert automatisch elke foto uit een gescande pagina of samengestelde afbeelding—geen handmatig bijsnijden."
 whenToUse = "Wanneer te gebruiken"
 
+[ScannerImageSplit.selectText]
+1 = "Hoek drempel:"
+10 = "Stelt de grootte van de toegevoegde en verwijderde rand in om witte randen in de uitvoer te voorkomen (standaard: 1)."
+2 = "Stelt de minimale absolute hoek in die nodig is om de afbeelding te roteren (standaard: 10)."
+3 = "Tolerantie:"
+4 = "Bepaalt het bereik van kleurvariatie rond de geschatte achtergrondkleur (standaard: 30)."
+5 = "Minimum oppervlakte:"
+6 = "Stelt de minimale oppervlakte drempel in voor een foto (standaard: 10000)."
+7 = "Minimum contour oppervlakte:"
+8 = "Stelt de minimale contour oppervlakte drempel in voor een foto"
+9 = "Randgrootte:"
+
 [search]
 noResults = "Geen resultaten gevonden"
 placeholder = "Voer zoekterm in..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Je Stirling-PDF-server is offline en \"{{endpoint}}\"
 [session]
 expired = "Uw sessie is verlopen. Voer de pagina opnieuw in en probeer het opnieuw."
 
-[sessionManagement.tooltip]
-header = "Ondertekeningssessies beheren"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Nieuwe deelnemers worden aan het einde van de ondertekeningsvolgorde toegevoegd"
-bullet2 = "Kan geen deelnemers toevoegen nadat sessie is gefinaliseerd"
-bullet3 = "Elke deelnemer ontvangt een melding wanneer hij/zij aan de beurt is"
-description = "U kunt op elk moment vóór de finalisatie meer deelnemers aan een actieve sessie toevoegen."
-title = "Deelnemers toevoegen"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Volledige finalisatie</b>: Alle deelnemers hebben getekend"
-bullet2 = "<b>Gedeeltelijke finalisatie</b>: Sommige deelnemers hebben nog niet getekend"
-bullet3 = "Niet-ondertekende deelnemers worden uitgesloten van het definitieve document"
-bullet4 = "Na finalisatie kunt u de ondertekende PDF laden in actieve bestanden"
-description = "Finalisatie combineert alle handtekeningen in één ondertekende PDF. Deze actie kan niet ongedaan worden gemaakt."
-title = "Sessie-finalisatie"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Kan geen deelnemers verwijderen die al hebben getekend"
-bullet2 = "Verwijderde deelnemers ontvangen geen meldingen meer"
-bullet3 = "Ondertekeningsvolgorde wordt automatisch aangepast"
-description = "Deelnemers kunnen vóór het tekenen uit sessies worden verwijderd."
-title = "Deelnemers verwijderen"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Elke handtekening wordt sequentieel op de PDF toegepast"
-bullet2 = "Latere ondertekenaars kunnen eerdere handtekeningen zien"
-bullet3 = "Cruciaal voor goedkeuringsworkflows en juridische ketens van bewaring"
-description = "De volgorde die u bij het maken van de sessie opgeeft, bepaalt wie als eerste tekent."
-title = "Ondertekeningsvolgorde"
-
 [settings]
 close = "Sluiten"
 
+[settings.ai]
+documents = "Documenten & RAG"
+general = "Algemeen"
+limits = "Limieten & prestaties"
+models = "Modellen & providers"
+title = "AI"
+
 [settings.configuration]
 advanced = "Geavanceerd"
 database = "Database"
 endpoints = "Eindpunten"
 features = "Functies"
+folderAccess = "Maptoegang"
 mcp = "MCP Server"
 storageSharing = "Bestandsopslag en delen"
 systemSettings = "Systeeminstellingen"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Standaard PDF-editor"
 defaultPdfEditorActive = "Stirling PDF is de standaard PDF-editor"
 defaultPdfEditorChecking = "Controleren..."
 defaultPdfEditorInactive = "Een andere app is als standaard ingesteld"
+defaultPdfEditorRemind = "Herinner me eraan om als standaard in te stellen"
+defaultPdfEditorRemindDescription = "Toon een banner wanneer Stirling PDF niet je standaard-PDF-toepassing is."
 defaultPdfEditorSet = "Al standaard"
 defaultStartupView = "Standaardweergave bij opstarten"
 defaultStartupViewDescription = "Kies welk tabblad in de linkerkolom actief is wanneer de app start"
@@ -8817,9 +9771,18 @@ languageDescription = "Kies de weergavetaal"
 logout = "Afmelden"
 setAsDefault = "Als standaard instellen"
 theme = "Thema"
+themeAccent = "Accentkleur"
+themeAccentCustom = "Aangepaste kleur"
+themeAccentCustomHint = "Aangepast (standaardwaarden aanbevolen)"
+themeAccentDark = "Accentkleur donkere modus"
+themeAccentDefault = "Standaard"
+themeAccentDefaultHint = "Standaardthema (aanbevolen)"
+themeAccentDescription = "Knoppen, links en markeringen volgen deze kleur, en de app krijgt subtiel die tint. Licht en donker hebben elk hun eigen kleur. Systeem gebruikt de actieve kleur."
+themeAccentLight = "Accentkleur lichte modus"
 themeDark = "Donker"
 themeDescription = "Schakel tussen lichte en donkere modus"
 themeLight = "Licht"
+themeReset = "Thema terugzetten naar standaard"
 themeSystem = "System"
 title = "Algemeen"
 user = "Gebruiker"
@@ -8833,6 +9796,12 @@ intro = "Schakel gebruikersauthenticatie, teambeheer en werkruimtefuncties in vo
 learnMore = "Meer info in de documentatie"
 title = "Voor systeembeheerders"
 
+[settings.general.loginLanding]
+description = "Kies welke app wordt geopend wanneer je inlogt bij Stirling Cloud."
+editor = "Editor"
+processor = "Verwerker"
+title = "Na het inloggen"
+
 [settings.general.mode]
 fullscreen = "Volledig scherm"
 sidebar = "Zijbalk"
@@ -9041,6 +10010,11 @@ security = "Beveiliging"
 telegram = "Telegram"
 title = "Beveiliging & Authenticatie"
 
+[settings.signOut]
+confirm = "Weet je zeker dat je wilt uitloggen?"
+submit = "Uitloggen"
+title = "Uitloggen"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Uploaden naar server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "klik hier"
+fallback = "Als het niet automatisch is geopend,"
+opening = "Swagger UI wordt geopend in een nieuw tabblad..."
 tags = "api,documentatie,swagger,endpoints,ontwikkeling"
 title = "API-documentatie"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Selecteer bestanden in Actieve bestanden om deze tool uit te
 singleFileScope = "Alleen van toepassing op: {{fileName}}"
 viewerMode = "Schakel over naar de bestandseditor om meerdere bestanden te selecteren."
 
+[toolFormat]
+ANY = "elk bestand"
+CBR = "een striparchief (CBR)"
+CBZ = "een striparchief (CBZ)"
+CSV = "een CSV-bestand"
+EBOOK = "een e-book"
+EMAIL = "een e-mail"
+EXCEL = "een spreadsheet"
+HTML = "een webpagina"
+IMAGE = "afbeeldingen"
+JAVASCRIPT = "een JavaScript-bestand"
+JSON = "een JSON-bestand"
+MARKDOWN = "een Markdown-bestand"
+NONE = "geen bestand"
+PCL = "een PCL-afdrukbestand"
+PDF = "een PDF"
+PDF_ENCRYPTED = "een met wachtwoord beveiligde PDF"
+POSTSCRIPT = "een PostScript-bestand"
+PPT = "een presentatie"
+TEXT = "een tekstbestand"
+VIDEO = "een video"
+WORD = "een Word-document"
+XML = "een XML-bestand"
+XPS = "een XPS-document"
+ZIP = "een ZIP-archief"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Terug naar alle tools"
 collapse = "Paneel samenvouwen"
 expand = "Paneel uitvouwen"
 goBack = "Ga terug"
+pdfTools = "PDF-tools"
 placeholder = "Kies een tool om te beginnen"
 premiumFeature = "Premiumfunctie:"
+searchTools = "Tools zoeken"
 toolsHeader = "Tools"
 viewAllTools = "Alle tools weergeven"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Geen tools gevonden"
 quickAccess = "SNELLE TOEGANG"
 searchPlaceholder = "Tools zoeken..."
 
-[toolPicker.categories]
-advancedTools = "Geavanceerde tools"
-recommendedTools = "Aanbevolen tools"
-standardTools = "Standaardtools"
-
 [toolPicker.subcategories]
 advancedFormatting = "Geavanceerde opmaak"
 automation = "Automatisering"
@@ -9950,16 +10950,31 @@ title = "Gebruikers"
 you = "(jij)"
 
 [users.action]
+cancelInvite = "Uitnodiging annuleren"
 deleteTeam = "Team verwijderen"
 disableMfa = "MFA resetten"
 move = "Naar team verplaatsen"
 reinstate = "Herstellen"
 remove = "Uit org verwijderen"
+removeTeam = "Uit team verwijderen"
 rename = "Team hernoemen"
 resetPw = "Wachtwoord resetten"
 suspend = "Schorsen"
 unlock = "Account ontgrendelen"
 
+[users.activity]
+daysAgo = "{{count}} d geleden"
+hoursAgo = "{{count}} u geleden"
+justNow = "Zojuist"
+minutesAgo = "{{count}} min geleden"
+monthsAgo_one = "{{count}} maand geleden"
+monthsAgo_other = "{{count}} maanden geleden"
+never = "Nooit"
+weeksAgo_one = "{{count}} week geleden"
+weeksAgo_other = "{{count}} weken geleden"
+yearsAgo_one = "{{count}} jaar geleden"
+yearsAgo_other = "{{count}} jaar geleden"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Keurt beleidsregel goed"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Uitnodiging voor {{email}} annuleren? Deze persoon kan niet deelnemen met de huidige link."
+cancelInviteTitle = "Uitnodiging annuleren"
 deleteTeamBody = "Het team {{name}} verwijderen? Het team moet eerst leeg zijn - verplaats de leden naar een ander team, en het mag geen integratieconfiguraties meer bezitten."
 deleteTeamTitle = "Team verwijderen"
 disableMfaBody = "MFA-registratie van {{name}} verwijderen? Diegene stelt dit bij de volgende login opnieuw in als het vereist is."
 disableMfaTitle = "MFA resetten"
 removeBody = "{{name}} permanent uit de organisatie verwijderen? Dit kan niet ongedaan worden gemaakt."
+removeTeamBody = "{{name}} uit het team verwijderen? Deze persoon behoudt het account, maar verliest toegang tot de resources van dit team."
 removeTitle = "Lid verwijderen"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Gebruikersnaam"
 usernameError = "Gebruikersnaam moet minimaal 3 tekens bevatten"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Uitgenodigd door {{who}}"
+cancel = "Annuleren"
+count = "{{count}} in behandeling"
+desc = "Uitgenodigde personen die nog niet zijn toegetreden. Ze houden een plek bezet totdat ze accepteren."
+expiresInDays_one = "Verloopt over {{count}} dag"
+expiresInDays_other = "Verloopt over {{count}} dagen"
+expiresToday = "Verloopt vandaag"
+title = "Uitnodigingen in behandeling"
+
 [users.loadError]
 description = "Er is iets misgegaan bij het bereiken van de backend, of je hebt geen toegang. Probeer het opnieuw."
 title = "Kon leden niet laden"
@@ -10212,9 +11240,11 @@ title = "Bijlagen"
 
 [viewer.bookmarks]
 bookmarkTitle = "Bladwijzertitel"
+bookmarkTitleRequired = "Bladwijzertitel is vereist"
 closeSidebar = "Zijbalk met bladwijzers sluiten"
 collapseAll = "Alle bladwijzers samenvouwen"
 expandAll = "Alle bladwijzers uitvouwen"
+searchPlaceholder = "Bladwijzers zoeken"
 
 [viewer.comments]
 addComment = "Opmerking toevoegen"
@@ -10605,30 +11635,6 @@ title = "Watermerktekst"
 image = "Afbeelding"
 text = "Tekst"
 
-[wetSignature.tooltip]
-header = "Methoden voor het maken van een handtekening"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Pas penkleur en -dikte aan"
-bullet2 = "Wissen en opnieuw tekenen tot u tevreden bent"
-bullet3 = "Werkt op aanraakapparaten (tablets, telefoons)"
-description = "Maak een handgeschreven handtekening met uw muis of touchscreen. Het best voor persoonlijke, authentieke handtekeningen."
-title = "Handtekening tekenen"
-
-[wetSignature.tooltip.type]
-bullet1 = "Kies uit meerdere lettertypen"
-bullet2 = "Pas tekstgrootte en -kleur aan"
-bullet3 = "Perfect voor gestandaardiseerde handtekeningen"
-description = "Genereer een handtekening vanuit getypte tekst. Snel en consistent, geschikt voor zakelijke documenten."
-title = "Handtekening typen"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Ondersteunt PNG, JPG en andere afbeeldingsformaten"
-bullet2 = "Transparante achtergronden aanbevolen voor de beste resultaten"
-bullet3 = "Afbeelding wordt geschaald naar het handtekeninggebied"
-description = "Upload een vooraf gemaakte handtekeningafbeelding. Ideaal als u een gescande handtekening of bedrijfslogo heeft."
-title = "Handtekeningafbeelding uploaden"
-
 [workbenchBar]
 activeFiles = "Actieve bestanden"
 annotations = "Annotaties"
@@ -10652,6 +11658,7 @@ redact = "Zwartlakken"
 rotateLeft = "Linksom roteren"
 rotateRight = "Rechtsom roteren"
 ruler = "Liniaal / Meten"
+rulerSettings = "Schaalinstellingen"
 save = "Opslaan"
 saveAll = "Alles opslaan"
 saveAs = "Opslaan als"
diff --git a/frontend/editor/public/locales/no-NB/translation.toml b/frontend/editor/public/locales/no-NB/translation.toml
index ecd7abf2b2..4dd7f40e8f 100644
--- a/frontend/editor/public/locales/no-NB/translation.toml
+++ b/frontend/editor/public/locales/no-NB/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "filer valgt"
 font = "Skrifttype"
 fontSizeTooltip = "Størrelse på sidetalltekst i punkter. Større tall gir større tekst."
 fontTypeTooltip = "Skrifttype for sidetall. Velg basert på dokumentstilen din."
-genericSubmit = "Send inn"
 green = "Grønn"
 help = "Hjelp"
-imgPrompt = "Velg Bilde(r)"
 incorrectPasswordMessage = "Nåværende passord er feil."
 info = "Info"
 invalidUndoData = "Kan ikke angre: ugyldige operasjonsdata"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Innloggingsavtale"
 logOut = "Logg ut"
 marginTooltip = "Avstand mellom sidetallet og kanten av siden."
 moreOptions = "Flere alternativer"
-multiPdfPrompt = "Velg PDF-filer (2+)"
 never = "Aldri"
 no = "Nei"
 noFileSelected = "Ingen fil valgt. Last opp en."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Tilpasset side rekkefølge (Skriv inn en kommaseparert liste
 pages = "Sider"
 pageSelectionPrompt = "Tilpasset Sidevalg (Skriv inn en kommaseparert liste over sidetall 1,5,6 eller Funksjoner som 2n+1):"
 password = "Passord"
-pdfPrompt = "Velg PDF(er)"
 pin = "Fest fil (hold aktiv etter verktøykjøring)"
 pro = "Pro"
 processingComplete = "Filen din er klar."
@@ -356,6 +352,7 @@ text = "Disse tillatelsene kontrollerer hva brukere kan gjøre med PDF-en. Mest
 title = "Endre tillatelser"
 
 [addStamp]
+preview = "Forhåndsvis stempel"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Manuelle nedlastinger: klikk på lenkene og legg filene i tessdat
 noLanguages = "Ingen tessdata-språk funnet i den konfigurerte katalogen."
 permissionNotice = "tessdata-stien er ikke skrivbar. Nedlastinger åpnes i nettleseren; lagre .traineddata-filene manuelt i tessdata-mappen."
 
+[admin.settings.ai.documents]
+description = "Konfigurer embedding-modellen og innstillingene for henting som brukes til å svare på spørsmål om dokumenter. Brukes på AI-motoren når det lagres."
+title = "Dokumenter og RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "La stå tomt for å bruke motorens egen miljølegitimasjon. Gjelder selvhostede enkelmotordistribusjoner."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Lagret – la stå tomt for å beholde gjeldende nøkkel"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base-URL for OpenAI-kompatibelt / Ollama embeddings-endepunkt, f.eks. http://ollama:11434/v1. Må peke til et pålitelig internt endepunkt (SSRF-sensitivt)."
+label = "Embedding base-URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Navn på embedding-modell. Fritekst; forslag er kun hint."
+label = "Embedding-modell"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Leverandør som brukes til å gjøre dokumenttekst om til vektor-embeddings."
+label = "Embedding-leverandør"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maksimalt antall hentingssøk agenten kan kjøre per forespørsel."
+label = "Maks søk"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Endring av embedding-modellen trer i kraft umiddelbart, men dokumenter som er indeksert med den forrige modellen, må reindekseres for at søk skal gi riktige resultater."
+title = "Reindeksering kreves"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Hvis du endret embedding-modellen, reindekser eksisterende dokumenter slik at søk bruker den nye modellen."
+
+[admin.settings.ai.documents.topK]
+description = "Antall mest relevante deler som hentes per søk."
+label = "Topp K"
+
+[admin.settings.ai.general]
+description = "Koble Stirling til Python AI-motoren og velg hvilke AI-funksjoner som eksponeres. Endringer gjelder ved omstart."
+title = "AI-motor"
+
+[admin.settings.ai.general.capabilities]
+description = "Slå individuelle AI-funksjoner av eller på. Deaktiverte funksjoner skjules i appen."
+title = "Funksjoner"
+
+[admin.settings.ai.general.enabled]
+description = "Hovedbryter. Når den er av, er ingen AI-verktøy, agenter eller motorkall tilgjengelige."
+label = "Aktiver AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Samtaleassistent for arbeid med PDF-er."
+label = "Chatassistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Kategoriser dokumenter automatisk etter type eller innhold."
+label = "Dokumentklassifisering"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generer en ny PDF (f.eks. fra HTML) via en AI-agent."
+label = "Opprett PDF fra ledetekst"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Still spørsmål og få svar forankret i et opplastet dokument."
+label = "Dokumentspørsmål"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Gå gjennom dokumenter for matematiske og numeriske feil."
+label = "Matematikkrevisor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Legg til AI-skrevne gjennomgangskommentarer og merknader i en PDF."
+label = "PDF-kommentaragent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Tidsavbrudd for tyngre agentoperasjoner som dokumentgenerering."
+label = "Tidsavbrudd for langvarige operasjoner (sekunder)"
+
+[admin.settings.ai.general.note]
+body = "AI-motoren kjører som en separat tjeneste. Dens delte hemmelighet"
+body2 = "angis via en containermiljøvariabel. Leverandør-API keys kan angis på disse sidene eller leveres som motormiljøvariabler; nøkler som angis her, sendes til motoren når de lagres."
+title = "Om AI-motoren"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Tidsavbrudd for strømmede (token-for-token) chattsvar."
+label = "Tidsavbrudd for strømming (sekunder)"
+
+[admin.settings.ai.general.test]
+button = "Test tilkobling"
+failBody = "AI-motoren svarte ikke. Sjekk URL, at motorcontaineren kjører, og at AI er aktivert (omstart kreves etter aktivering)."
+failTitle = "AI-motor ikke tilgjengelig"
+okBody = "AI-motoren svarte på en helsesjekk."
+okTitle = "AI-motor tilgjengelig"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Tidsavbrudd for standard AI-forespørsler til motoren."
+label = "Tidsavbrudd for forespørsel (sekunder)"
+
+[admin.settings.ai.general.url]
+description = "Intern URL til Python AI-motoren, f.eks. http://stirling-pdf-engine:5001."
+label = "AI-motor-URL"
+
+[admin.settings.ai.limits]
+description = "Sikkerhetsrammer for hvor mye arbeid AI-forespørsler kan gjøre og hvor mange som kan kjøre samtidig. Brukes på AI-motoren når det lagres."
+title = "Grenser og ytelse"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Sikkerhetsramme: avvis AI-forespørsler der uttrukket tekst overstiger denne lengden."
+label = "Maks tegn per forespørsel"
+
+[admin.settings.ai.limits.maxPages]
+description = "Sikkerhetsramme: avvis AI-forespørsler over så mange PDF-sider."
+label = "Maks sider per forespørsel"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maksimalt antall samtidige pågående modellkall på tvers av hele motoren."
+label = "Maks samtidighet for modell"
+
+[admin.settings.ai.models]
+description = "Velg LLM-leverandøren og de smarte/raske modellene AI-motoren bruker. Brukes på AI-motoren når det lagres."
+title = "Modeller og leverandører"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "La stå tomt for å bruke motorens egen miljølegitimasjon. Gjelder selvhostede enkelmotordistribusjoner."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Lagret – la stå tomt for å beholde gjeldende nøkkel"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base-URL for OpenAI-kompatibelt / Ollama-endepunkt, f.eks. http://ollama:11434/v1."
+label = "Leverandørens base-URL"
+warning = "Base-URL må peke til et pålitelig internt endepunkt. Motoren vil gjøre serverbaserte forespørsler til den, så en upålitelig verdi er SSRF-sensitiv."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maksimalt antall utdata-tokens for den raske modellen."
+label = "Maks tokens for rask modell"
+
+[admin.settings.ai.models.fastModel]
+description = "Billigere og raskere modell for lette oppgaver. Fritekst; forslag er kun hint."
+label = "Rask modell"
+
+[admin.settings.ai.models.provider]
+description = "Hvilken LLM-leverandør motoren kommuniserer med."
+label = "Leverandør"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maksimalt antall utdata-tokens for den smarte modellen."
+label = "Maks tokens for smart modell"
+
+[admin.settings.ai.models.smartModel]
+description = "Modell med høy kapasitet for kompleks resonnering. Fritekst; forslag er kun hint."
+label = "Smart modell"
+
+[admin.settings.ai.saved]
+body = "Endringer sendes automatisk til AI-motoren."
+bodyNoPush = "Innstillinger lagret. De tas i bruk neste gang AI-motoren henter konfigurasjonen sin."
+title = "AI-innstillinger lagret"
+
 [admin.settings.badge]
 clickToUpgrade = "Klikk for å se plandetaljer"
 
@@ -938,6 +1094,25 @@ label = "Regenerer ved oppstart"
 description = "Antall dager sertifikatet skal være gyldig"
 label = "Sertifikatets gyldighet (dager)"
 
+[admin.settings.folderAccess]
+description = "Kataloger som mappekilder og mappeutdata har lov til å lese fra og skrive til. Dette er en sikkerhetsgrense: automatiseringer kan aldri pekes mot en serversti utenfor denne listen."
+securityNote = "La dette stå tomt for å deaktivere mappekilder og mappeutdata helt. Stirlings egen konfigurasjonskatalog er alltid forbudt."
+title = "Mappetilgang"
+
+[admin.settings.folderAccess.implied]
+description = "Disse Stirling-administrerte katalogene er alltid tillatt og kan ikke endres her."
+serverStorage = "Serverfillagring"
+title = "Alltid tillatt"
+watchedFolder = "Pipeline-overvåket mappe"
+
+[admin.settings.folderAccess.roots]
+add = "Legg til"
+empty = "Ingen mapper er tillatt. Mappekilder og mappeutdata er deaktivert for øyeblikket."
+hint = "Angi absolutte stier, for eksempel /data/inbox."
+label = "Tillatte mapperøtter"
+placeholder = "/data/inbox"
+remove = "Fjern mapperot"
+
 [admin.settings.general]
 description = "Konfigurer programinnstillinger for hele systemet, inkludert profilering og standardatferd."
 system = "System"
@@ -1842,6 +2017,15 @@ export = "Eksporter"
 accessDenied = "Tilgang nektet"
 insufficientPermissions = "Du har ikke tillatelse til å utføre denne handlingen."
 
+[auth.callback]
+completing = "Fullfører autentisering"
+invalidToken = "OAuth-innlogging mislyktes – ugyldig token."
+missingToken = "OAuth-innlogging mislyktes – ingen token mottatt."
+oauthFailed = "OAuth-innlogging mislyktes. Prøv igjen."
+pleaseWait = "Vent mens vi fullfører innloggingen din."
+signedOut = "Du er logget ut. Logg inn igjen."
+windowMayClose = "Du kan lukke dette vinduet når det er fullført."
+
 [auth.displayName]
 guest = "Gjest"
 user = "Bruker"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Sikrer PDF-dokumenter ved å fjerne potensielt ondsinnet i
 description = "Dette verktøyet vil automatisk gi PDF-filer nytt navn basert på innholdet. Det analyserer dokumentet for å finne den mest passende tittelen fra teksten."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Roter automatisk"
+tags = "roter automatisk,fiks orientering,opp ned,sidelengs,rett opp,orienter,oppdag orientering,korriger rotasjon,auto-orienter,skannet,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Sikkerhetsterskel"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Kun OCR"
+text = "Kun tekst"
+title = "Deteksjonsmetode"
+
+[autoRotate.error]
+failed = "Det oppstod en feil under automatisk rotering av PDF-en."
+
+[autoRotate.inferUndetected]
+title = "Roter sider med lav sikkerhet for å samsvare"
+
+[autoRotate.report]
+applied = "{{degrees}}° med klokken"
+confidenceValue = "Sikkerhet {{value}}"
+noChange = "Ingen endring"
+pageLabel = "Side {{number}}"
+summary = "{{rotated}} av {{total}} sider rotert, {{unchanged}} beholdt som de er"
+title = "Deteksjonsrapport"
+
+[autoRotate.report.method]
+inferred = "Samsvarte"
+none = "Hoppet over"
+osd = "OCR"
+text = "Tekst"
+
+[autoRotate.report.note]
+belowThreshold = "Under terskel"
+blankPage = "Siden er tom"
+inferredFromDocument = "Samme som de andre sidene"
+noDominantDirection = "Blandede tekstretninger"
+osdFailed = "Ingen lesbar tekst funnet"
+osdNoVerdict = "Kunne ikke avgjøre hvilken vei som er opp"
+tesseractUnavailable = "OCR ikke installert"
+tooFewGlyphs = "For lite tekst"
+
+[autoRotate.results]
+title = "Resultater for automatisk rotering"
+
+[autoRotate.settings]
+title = "Innstillinger"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Hvor sikker kontrollen må være før en side roteres. Senk den for å rotere flere sider, hev den for å la flere sider være urørt."
+title = "Sikkerhetsterskel"
+
+[autoRotate.tooltip.description]
+text = "Finner ut hvilken vei hver side skal vende og roterer den riktig vei. Sider som allerede står riktig, blir stående."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto leser først teksten på siden, og ser deretter på siden som et bilde hvis det ikke er nok. Kun tekst hopper over bildekontrollen, som er raskest for dokumenter som aldri ble skannet. Kun OCR behandler hver side som et bilde."
+title = "Deteksjonsmetode"
+
+[autoRotate.tooltip.header]
+title = "Roter automatisk"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Tomme eller nesten tomme sider kan ikke kontrolleres alene. Når alle sider som kunne leses trenger samme rotasjon, roteres disse sidene for å samsvare med dem."
+title = "Roter sider med lav sikkerhet for å samsvare"
+
 [autoSizeSplitPDF]
 tags = "pdf,del,dokument,organisering"
 
@@ -2189,33 +2440,6 @@ keywords = "Nøkkelord: odd, even"
 numbers = "Tall/intervaller: 5, 10-20"
 progressions = "Progresjoner: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Sertifikatyper"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Administreres av systemadministratorer"
-bullet2 = "Deles på tvers av autoriserte brukere"
-bullet3 = "Representerer virksomhetens identitet, ikke individet"
-bullet4 = "Best for: Offisielle dokumenter, teamsignaturer"
-description = "Et delt sertifikat levert av organisasjonen din. Brukes for signeringsmyndighet på tvers av selskapet."
-title = "Organisasjonssertifikat"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Genereres automatisk ved første bruk"
-bullet2 = "Knyttet til brukerkontoen din"
-bullet3 = "Kan ikke deles med andre brukere"
-bullet4 = "Best for: Personlige dokumenter, individuell ansvarlighet"
-description = "Et autogenerert sertifikat unikt for brukerkontoen din. Egnet for individuelle signaturer."
-title = "Personlig sertifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Krever P12/PFX-fil og passord"
-bullet2 = "Kan utstedes av eksterne sertifikatutstedere"
-bullet3 = "Høyere tillitsnivå for juridiske dokumenter"
-bullet4 = "Best for: Rettslig bindende kontrakter, ekstern validering"
-description = "Bruk din egen PKCS#12-sertifikatfil. Gir full kontroll over sertifikategenskaper."
-title = "Last opp egendefinert P12"
-
 [certSign]
 awaitingSignatures = "Avventer signaturer"
 chooseCertificate = "Velg sertifikatfil"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Sertifikatkilde"
 upload = "Last opp"
 
-[certSign.tooltip.header]
-title = "Om håndtering av signaturer"
-
-[certSign.tooltip.overview]
-bullet1 = "Sjekk eksisterende signaturer og deres gyldighet"
-bullet2 = "Vis detaljert informasjon om underskrivere og sertifikater"
-bullet3 = "Legg til nye digitale signaturer for å sikre dokumentene dine"
-bullet4 = "Flere filer støttes med enkel navigasjon"
-text = "Dette verktøyet lar deg sjekke om PDF-ene dine er digitalt signert og legge til nye digitale signaturer. Digitale signaturer beviser hvem som opprettet eller godkjente et dokument og viser om det er endret siden signering."
-title = "Hva kan dette verktøyet gjøre?"
-
-[certSign.tooltip.signing]
-bullet1 = "Støtter PEM, PKCS12, JKS og serversertifikat-formater"
-bullet2 = "Valg for å vise eller skjule signaturen på PDF-en"
-bullet3 = "Legg til årsak, sted og underskrivers navn"
-bullet4 = "Velg hvilken side du vil plassere synlige signaturer på"
-bullet5 = "Bruk serversertifikat for enkel «Signer med Stirling-PDF»-mulighet"
-text = "For å signere en PDF, trenger du et digitalt sertifikat (som PEM, PKCS12 eller JKS). Du kan velge å gjøre signaturen synlig på dokumentet eller holde den usynlig kun for sikkerhet."
-title = "Legge til signaturer"
-
-[certSign.tooltip.validation]
-bullet1 = "Viser om signaturer er gyldige eller ugyldige"
-bullet2 = "Viser informasjon om underskriver og signeringsdato"
-bullet3 = "Sjekker om dokumentet ble endret etter signering"
-bullet4 = "Kan bruke egendefinerte sertifikater for verifisering"
-text = "Når du sjekker signaturer, forteller verktøyet deg om de er gyldige, hvem som signerte dokumentet, når det ble signert, og om dokumentet er endret siden signering."
-title = "Kontroll av signaturer"
-
 [changeCreds]
 changeUsername = "Oppdater brukernavnet ditt. Du blir logget ut etter oppdatering."
 credsUpdated = "Konto oppdatert"
@@ -2824,6 +3020,7 @@ next = "Neste"
 preview = "Forhåndsvis"
 previous = "Forrige"
 refresh = "Oppdater"
+remaining = "Gjenstår"
 retry = "Prøv igjen"
 save = "Lagre"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Avansert overvåking"
-allInOneWorkspace = "Alt-i-ett PDF-arbeidsområde (viser, verktøy og agent)"
-apiSandbox = "API-sandkasse"
-dedicatedSupportSlas = "Dedikert støtte og SLA-er"
-fasterThroughput = "10x raskere gjennomstrømming"
-fullyPrivateFiles = "Fullt private filer"
-largeFileProcessing = "Behandling av store filer"
-orgWideAccess = "Organisasjonsomfattende tilgangskontroller"
-premiumAiModels = "Premium AI-modeller"
-prioritySupport = "Prioritert støtte"
-privateDocCloud = "Privat dokumentsky"
-ragFineTuning = "RAG + finjustering"
-secureApiAccess = "Sikker API-tilgang"
-standardThroughput = "Standard gjennomstrømming"
-unlimitedApiAccess = "Ubegrenset API-tilgang"
-unlimitedSeats = "Ubegrensede plasser"
-
 [crop]
 autoCrop = "Beskjær hvite mellomrom automatisk"
 noFileSelected = "Velg en PDF-fil for å begynne beskjæring"
@@ -3346,6 +3525,7 @@ message = "Kunne ikke angi standard PDF-behandler"
 title = "Feil"
 
 [defaultApp.prompt]
+dontRemind = "Ikke minn meg på dette igjen"
 message = "Gjør Stirling PDF til standardappen for å åpne PDF-filer."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Tilpass grupper"
 dropHint = "Åpne filer for å komme i gang"
 dropToAdd = "Drop files to add"
 expand = "Utvid sidepanel"
-files = "Filer"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive er ikke konfigurert"
 leaveMyFiles = "Forlat Mine filer"
+library = "PDF-bibliotek"
 myFiles = "Mine filer"
 noFiles = "Ingen filer ennå"
 openFileManager = "Åpne filbehandler"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Legg til"
-addLabel = "Legg til en etikett…"
-categoryIconAria = "Velg et ikon for {{name}}"
-createCategory = "Opprett kategori"
-delete = "Slett kategori"
 done = "Ferdig"
-hide = "Skjul kategori"
-newCategory = "Nytt kategorinavn…"
-removeLabel = "Fjern {{name}}"
-rename = "Gi nytt navn"
 reset = "Tilbakestill til standarder"
-search = "Søk i etiketter…"
-show = "Vis kategori"
 subtitle = "Grupper filene dine i overordnede kategorier. Legg til eksisterende eller nye etiketter i en kategori, gi den nytt navn, eller opprett din egen. Filer som ikke er i noen av kategoriene dine, vises under «Annet»."
 title = "Sidefeltkategorier"
 
@@ -3808,6 +3977,7 @@ refresh = "Oppdater fra server"
 remove = "Slett"
 removeVersion = "Fjern denne versjonen"
 rename = "Gi nytt navn"
+renamed = "Omdøpt"
 renameFolder = "Gi mappen nytt navn"
 resizeFolderTree = "Endre størrelse på mappetre (piltaster, Shift for større steg; dobbeltklikk for å tilpasse automatisk)"
 save = "Lagre"
@@ -3910,9 +4080,7 @@ count = "Filer"
 folder = "Mappe"
 labels = "Etiketter"
 modified = "Endret"
-name = "Navn"
 size = "Størrelse"
-toolHistoryAtVersion = "Samlet verktøykjede"
 totalSize = "Total størrelse"
 type = "Type"
 versionHistory = "Versjonsforløp"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Alt lagret"
+extractCsvError = "Kunne ikke trekke ut CSV"
+extractXlsxError = "Kunne ikke trekke ut XLSX"
 flattenAfterFilling = "Flate ut etter utfylling"
+requiredAbbreviation = "obl"
+requiredFieldsError = "Fyll ut alle obligatoriske felt"
 rescanFields = "Skann felter på nytt"
 rescanFormFields = "Skann skjemafelter på nytt"
 save = "Lagre"
+saveShortcut = "Ctrl+S for å lagre"
+unsavedChanges = "Ulagrede endringer"
 
 [formFill.sidebar]
 close = "Lukk sidepanel"
@@ -4309,6 +4484,11 @@ desc = "Gir automatisk nytt navn til en PDF-fil basert på den oppdagede overskr
 tags = "autogjenkjenning,overskriftsbasert,organiser,gi nytt navn"
 title = "Gi PDF-fil nytt navn automatisk"
 
+[home.autoRotate]
+desc = "Oppdag orienteringen til hver side og roter den automatisk riktig vei."
+tags = "roter automatisk,fiks orientering,opp ned,sidelengs,rett opp,orienter,oppdag orientering,korriger rotasjon,auto-orienter,skannet,OSD"
+title = "Roter automatisk"
+
 [home.autoSizeSplitPDF]
 tags = "auto,del,størrelse"
 title = "Auto-del størrelse/antall"
@@ -4608,13 +4788,13 @@ hint = "Last opp en PNG, JPG, SVG eller annen bildefil for å plassere på PDF-e
 label = "Last opp bilde"
 placeholder = "Velg bildefil"
 
-[imageToPdf]
-tags = "konvertering,bilde,jpg,foto"
-
 [imageToPDF]
 header = "Bilde til PDF"
 title = "Bilde til PDF"
 
+[imageToPdf]
+tags = "konvertering,bilde,jpg,foto"
+
 [infoBanner]
 dismiss = "Lukk"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Du er invitert!"
 
 [landing]
 addFiles = "Legg til filer"
-heroSubtitle = "Slipp inn eller legg til en eksisterende PDF for å komme i gang."
 mobileUpload = "Last opp fra mobil"
 openFromComputer = "Åpne fra datamaskin"
 uploadFromComputer = "Last opp fra datamaskin"
-workbenchEmptyStateHero = "Slipp en PDF hvor som helst"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Logg inn"
 magicLinkSent = "Magisk lenke sendt til {{email}}! Sjekk e-posten din og klikk på lenken for å logge inn."
 mfaCode = "Autentiseringskode"
 mfaRequired = "Tofaktorkode kreves"
+noAccount = "Har du ikke en konto?"
 or = "Eller"
 password = "Passord"
 passwordChangedSuccess = "Passord endret! Logg inn med det nye passordet."
@@ -4715,26 +4894,10 @@ signInWith = "Logg inn med"
 title = "Logg inn"
 unexpectedError = "Uventet feil: {{message}}"
 updatePassword = "Oppdater passord"
-useEmailInstead = "Logg inn med e-post"
 useMagicLink = "Bruk magisk lenke i stedet"
 username = "Brukernavn"
 youAreLoggedIn = "Du er logget inn!"
 
-[login.slides.edit]
-alt = "Rediger PDF-er"
-subtitle = "Med over et dusin verktøy for å sladde, signere, lese og manipulere PDF-er finner du garantert det du trenger."
-title = "Rediger PDF-er for å vise/sikre informasjonen du ønsker"
-
-[login.slides.overview]
-alt = "Stirling PDF-oversikt"
-subtitle = "En skyløsning for PDF med personvern i fokus som lar deg konvertere, signere, sladde og administrere dokumenter, samt 50+ andre kraftige verktøy."
-title = "Alt du trenger for PDF på ett sted."
-
-[login.slides.secure]
-alt = "Sikre PDF-er"
-subtitle = "Legg til passord, sladd innhold og administrer sertifikater enkelt."
-title = "Beskytt sensitiv informasjon i PDF-ene dine"
-
 [margin]
 large = "Stor"
 medium = "Middels"
@@ -4976,6 +5139,7 @@ pinButton = "Du kan bruke <strong>Fest</strong>-knappen hvis du heller vil at fi
 results = "Etter at verktøyet er ferdig kjørt, vil trinnet <strong>Gjennomgang</strong> vise en forhåndsvisning av resultatene i dette panelet, og la deg angre operasjonen eller laste ned filen. "
 runButton = "Når verktøyet er konfigurert, lar denne knappen deg kjøre verktøyet på alle de valgte PDF-ene."
 selectCropTool = "La oss velge <strong>Beskjær</strong>-verktøyet for å demonstrere hvordan du bruker et av verktøyene."
+stepOf = "Trinn {{current}} av {{total}}"
 toolInterface = "Dette er <strong>Beskjær</strong>-verktøyets grensesnitt. Som du ser, er det ikke mye der fordi vi ikke har lagt til noen PDF-filer å jobbe med ennå."
 workbench = "Dette er <strong>Arbeidsbenken</strong> - hovedområdet der du viser og redigerer PDF-ene dine."
 wrapUp = "Da er du klar! Du har lært om hovedområdene i appen og hvordan du bruker dem. Klikk på <strong>Hjelp</strong>-knappen når som helst for å se denne omvisningen igjen."
@@ -4988,6 +5152,26 @@ showMeAround = "Vis meg rundt"
 skipForNow = "Hopp over nå"
 skipTheTour = "Hopp over omvisningen"
 
+[onboarding.checklist]
+dismiss = "Avvis"
+title = "Sett opp Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Kjør Stirling direkte på maskinen din"
+title = "Last ned Stirling for skrivebord"
+
+[onboarding.checklist.inviteTeam]
+description = "Samarbeid med teamet ditt"
+title = "Inviter teammedlemmer"
+
+[onboarding.checklist.shareAnalytics]
+description = "Hjelp til med å forbedre Stirling"
+title = "Del anonyme bruksdata"
+
+[onboarding.checklist.takeTour]
+description = "Se hvordan Stirling fungerer i en rask gjennomgang"
+title = "Ta omvisningen"
+
 [onboarding.desktopInstall]
 body = "Stirling fungerer best som en skrivebordsapp. Du kan bruke den offline, få raskere tilgang til dokumenter og gjøre redigeringer lokalt på datamaskinen."
 selectOs = "Velg operativsystem"
@@ -4996,7 +5180,21 @@ titleWithOs = "Last ned for {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Autentiseringskode"
+description = "Sikre kontoen din ved å koble til en autentiseringsapp. Skann QR-koden eller angi oppsettnøkkelen, og bekreft deretter den 6-sifrede koden for å fullføre."
+enable = "Aktiver MFA"
+enableError = "Kan ikke aktivere tofaktorautentisering. Sjekk koden og prøv igjen."
+enterCode = "Angi den 6-sifrede koden fra appen din."
+enterCodeError = "Angi autentiseringskoden for å fortsette."
+logout = "Logg ut"
+openAuthenticator = "Åpne Google Authenticator, Authy eller 1Password."
 qrCodeLoading = "Genererer QR-koden din…"
+regenerateQrCode = "Generer QR-kode på nytt"
+scanQrCode = "Skann QR-koden eller angi oppsettnøkkelen nedenfor."
+setupError = "Kan ikke starte tofaktoroppsett. Prøv igjen."
+setupKey = "Oppsettnøkkel (manuell inntasting)"
+stepByStep = "Trinn for trinn"
+success = "MFA er aktivert. Du kan nå fortsette."
+title = "Oppsett av flerfaktorautentisering"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Når du aktiverer innloggingsmodus, kan du administrere brukere, konfigurere innstillinger og overvåke serverstatus. De første <strong>{{freeTierLimit}}</strong> på serveren din kan bruke Stirling gratis."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin-oversikt"
 userBody = "Inviter teammedlemmer, tildel roller og hold dokumentene organiserte i et sikkert arbeidsområde. Aktiver innloggingsmodus når du er klar til å vokse utover solobruk."
 userTitle = "Planoversikt"
 
+[onboarding.processorIntro]
+body = "Stirling kjører nå <strong>policyer</strong> — automatiserte regler som klassifiserer, sikrer og behandler hvert dokument når det ankommer. Sett dem opp og overvåk kjøringer i <strong>Processor</strong>."
+cta = "Sjekk ut Processor"
+title = "Sjekk ut Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Forhåndsbetalt år"
+
+[payg.prepaid.banner]
+exhausted = "Den forhåndsbetalte kapasiteten din er brukt opp; målt fakturering er gjenopptatt. Fyll på for å beholde rabatten."
+expiring_one = "Det forhåndsbetalte året ditt slutter om {{count}} dag. Ubrukt kapasitet utløper — fyll på for å starte et nytt år."
+expiring_other = "Det forhåndsbetalte året ditt slutter om {{count}} dager. Ubrukt kapasitet utløper — fyll på for å starte et nytt år."
+low = "Du er nede i {{pct}} % av den forhåndsbetalte kapasiteten din. Fyll på når som helst for å holde behandlingen uavbrutt."
+
+[payg.prepaid.card]
+subtitle = "Brukes før målt fakturering og utenfor forbruksgrensen din."
+title = "Forhåndsbetalt kapasitet"
+
+[payg.prepaid.meter]
+capSuffix = "av {{total}} forhåndsbetalte kreditter"
+expires = "Utløper {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Brukt opp"
+healthy = "Mye igjen"
+low = "Begynner å bli lite"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Lim inn lisensnøkkelen fra e-posten din"
 success = "Lisens aktivert!"
 successMessage = "Lisensen din er aktivert. Du kan nå lukke dette vinduet."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "håndhevet"
-enforcing = "Håndhever..."
-failed = "Håndheving mislyktes"
 outputsUnavailable = "Policy-utdata er ikke lenger tilgjengelige for nedlasting."
 partialOutputsUnavailable = "Noen policy-utdata er ikke lenger tilgjengelige for nedlasting."
-retrying = "Opptatt, prøver på nytt..."
 runNotFound = "Håndhevingskjøringen kunne ikke lenger finnes."
-step = "trinn {{current}}/{{total}}"
 timedOut = "Håndhevingen fikk tidsavbrudd før kjøringen kunne fullføres."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Lukk"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Tar i bruk {{names}}"
 applyingProgress = "Tar i bruk {{names}} ({{done}} av {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} av {{total}} filer kunne ikke behandles og ble ekspo
 failureTitle = "Eksportert uten full håndheving"
 printPolicyAppliedBody = "Denne PDF-en ble oppdatert for å oppfylle en policy. Gå gjennom endringene, og skriv deretter ut på nytt."
 printPolicyAppliedTitle = "Policy tatt i bruk før utskrift"
-queued = "+{{count}} i kø"
 successTitle = "{{names}} tatt i bruk"
 summaryMore = "{{first}}, {{second}} og {{more}} til"
 summaryTwo = "{{first}} og {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Håndhever før konvertering"
-default = "Håndhever"
-export = "Håndhever før eksport"
-input = "Håndhever ved import"
-print = "Håndhever før utskrift"
-
-[policies.field]
-accessLog = "Tilgangslogg"
-archiveAfter = "Arkiver etter"
-auditTrail = "Revisjonsspor"
-belowThreshold = "Under terskel"
-destination = "Destinasjon"
-frameworks = "Rammeverk"
-immutableHold = "Uforanderlig sperre"
-keepFor = "Behold i"
-minConfidence = "Min. sikkerhet"
-notify = "Varsle ved ruting"
-onViolation = "Ved manglende samsvar"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Legg til"
-addPlaceholder = "Legg til en etikett…"
-customNote = "Tilpasset for teamet ditt."
-defaultNote = "Bruker den innebygde standarden, delt med teamet ditt."
-duplicate = "\"{{name}}\" finnes allerede."
-edit = "Rediger etiketter"
-empty = "Ingen etiketter ennå."
-export = "Eksporter JSON"
-iconAria = "Velg et ikon for {{name}}"
-import = "Importer JSON"
-importError = "Kunne ikke importere den filen."
-managedNote = "Teametiketter administreres av teamlederen din."
-modalSubtitle = "Delt med hele teamet ditt. Klassifisereren velger etikettene som passer hvert dokument."
-modalTitle = "Klassifiseringsetiketter"
-pickIcon = "Bruk {{label}}-ikon"
-removeAria = "Fjern {{name}}"
-resetToDefault = "Tilbakestill til standard"
-saveForTeam = "Lagre for team"
-saving = "Lagrer…"
-sectionLabel = "Klassifiseringsetiketter"
-startFromScratch = "Start fra bunnen"
-teamCount = "teametiketter"
-tooLong = "Etiketter kan være høyst {{max}} tegn."
-ungrouped = "Ugruppert"
-view = "Vis etiketter"
+categoryCount = "kategorier"
+hideCategory = "Skjul kategori"
+labelCount = "etiketter"
+sharedNote = "Disse etikettene er innebygde og deles på tvers av hele teamet ditt."
+showCategory = "Vis kategori"
 
 [policies.pii]
 account = "Kontonumre (merket)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Amerikanske routing-numre (ABA)"
 ssn = "Social Security-numre"
 
-[policies.settings]
-noneExport = "Ingen policyer kjøres for øyeblikket ved eksport."
-noneUpload = "Ingen policyer kjøres for øyeblikket ved opplasting."
-onExport = "Ved eksport"
-onUpload = "Ved opplasting"
-reorderHandle = "Dra for å endre rekkefølge"
-runOrderDesc = "Når mer enn én policy kjøres på samme utløser, kjøres de i denne rekkefølgen — hver på utdataene fra forrige policy. Dra for å endre rekkefølge."
-title = "Policyinnstillinger"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Policyalternativer"
-policySettings = "Policyinnstillinger"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Prøv mislykkede policyer på nytt ({{count}})"
-rowProgress = "{{completed}} av {{total}} filer behandlet"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Hva er en policy?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Finner automatisk og sverter ut sensitive opplysninger — som Social Security- og kortnumre — slik at de ikke kan leses i dokumentet."
-sanitize = "Fjerner skjult JavaScript fra filen, slik at ingenting kan kjøres automatisk når noen åpner den."
-watermark = "Setter et synlig stempel (f.eks. \"Konfidensielt\") over hver side."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Lukk"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} håndheves..."
 badgeRan = "{{name}}-policyen kjørte på denne filen"
+badgeRunning = "{{name}} kjører..."
 blockingAction = "{{action}} blokkert mens policy håndheves, vent..."
 dismiss = "Avvis overlegg"
 enforcingTitle = "Håndhever policy..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Vis fil (policy håndheves fortsatt)"
 [policyOption]
 autoRedactPhi = "Sladd PHI automatisk"
 blockExport = "Blokker eksport"
+ccpa = "CCPA"
 contracts = "Kontrakter"
 documents = "Dokumenter"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor-plan"
 subscribed = "Processor-plan"
 unlinked = "Ikke koblet til"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Initialiser fra dokument"
-sectionsAriaLabel = "Agentbyggerseksjoner"
-selectorAriaLabel = "Agenter"
-subtitle = "Utform, test og lever AI-agentene som klassifiserer, trekker ut fra og ruter dokumentene dine. Definer scenarioer, avgrens verktøytilgang, kjør et golden set og publiser en versjon."
-title = "Agentbygger"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Avbryt"
-dropzoneText = "Velg et eksempeldokument (PDF eller bilde)"
-lead = "Slipp et eksempeldokument, så foreslår vi scenarioer og et ekstraksjonsskjema du kan finjustere. Ingenting publiseres før du har gjennomgått det."
-submit = "Initialiser agent"
-subtitle = "Start en ny agent fra én representativ fil"
-title = "Initialiser fra et dokument"
-
-[portal.agentBuilder.empty]
-description = "Initialiser en agent fra et eksempeldokument for å starte scenarioene og ekstraksjonsskjemaet, og finjuster og publiser deretter."
-title = "Ingen agenter ennå"
-
-[portal.agentBuilder.evals]
-casesPassing = "Tilfeller bestått"
-columnCase = "Eval-tilfelle"
-columnLatency = "Latens"
-columnResult = "Resultat"
-fail = "mislykket"
-goldenSetPassRate = "Beståttandel for golden set"
-latencyMs = "{{ms}} ms"
-notRun = "ikke kjørt"
-pass = "bestått"
-passRate = "Beståttandel"
-runEvals = "Kjør evalueringer"
-
-[portal.agentBuilder.evals.empty]
-description = "Evalueringer gjør scenarioene dine om til et repeterbart golden set. Oppgrader for å registrere beståttandel over tid og styre publiseringer etter den."
-title = "Ingen golden set ennå"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "på tvers av golden sets"
-activeAgents = "Aktive agenter"
-avgPassRate = "Gj.sn. beståttandel for evalueringer"
-fleetWide = "på tvers av flåten"
-latestPublished = "Sist publisert"
-scenarios = "Scenarioer"
-testCases = "testtilfeller"
-totalDescription_one = "{{count}} totalt"
-totalDescription_other = "{{count}} totalt"
-
-[portal.agentBuilder.scenarios]
-add = "Legg til"
-addScenario = "Legg til scenario"
-enable = "Aktiver"
-expectationLabel = "Forventet atferd"
-expectationPlaceholder = "Hva agenten skal gjøre"
-inEval = "i evaluering"
-mute = "Demp"
-muted = "dempet"
-nameLabel = "Navn"
-namePlaceholder = "f.eks. eskalering av samsvar"
-
-[portal.agentBuilder.tabs]
-evals = "Evalueringer"
-scenarios = "Scenarioer"
-tools = "Verktøy"
-versions = "Versjoner"
-
-[portal.agentBuilder.tools]
-broadAccess = "Bred tilgang"
-deniedHint = "Valgte verktøy er blokkert. Alt annet kan fortsatt kalles."
-deniedTools = "Avviste verktøy"
-governanceGate = "Verktøystyring er tilgjengelig på Enterprise-planen."
-restricted = "Begrenset"
-restrictedAccess = "Begrenset verktøytilgang"
-restrictedDescription = "Tillat alle verktøy unntatt de du avviser nedenfor."
-
-[portal.agentBuilder.versions]
-current = "gjeldende"
-historyGate = "Full versjonshistorikk og tilbakestilling er tilgjengelig på Enterprise-planen."
-publish = "Publiser"
-rollBack = "Rull tilbake"
-
 [portal.assistant]
 close = "Lukk assistent"
 error = "Kunne ikke nå assistenten."
@@ -6365,9 +6346,21 @@ typing = "Skriver"
 loading = "Laster"
 redirectingToEditor = "Omdirigerer til redigeringsprogrammet..."
 
+[portal.billing.activation]
+maybeLater = "Kanskje senere"
+title = "Slå på Processor"
+
+[portal.billing.activation.payg]
+sub = "Sett en månedlig grense. Betal for det du kjører."
+title = "Betal etter forbruk"
+
+[portal.billing.activation.prepay]
+badge = "2 måneder gratis"
+sub = "Én faktura, kort eller bankoverføring."
+title = "Forhåndsbetal et år"
+
 [portal.billing.checkout]
 noClientSecret = "Edge-funksjonen returnerte ingen client_secret."
-subtitle = "Legg til et kort for å fortsette etter den gratis tildelingen i Editor-planen. Stripe håndterer resten."
 title = "Slå på Processor-planen"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Betalingen din lyktes, men aktiveringen tar litt lengre tid enn vanlig.
 close = "Lukk"
 title = "Nesten ferdig"
 
+[portal.billing.checkout.cap]
+amountAria = "Månedlig forbruksgrense"
+back = "Tilbake"
+continue = "Fortsett til betaling"
+error = "Kunne ikke sette forbruksgrensen din"
+finePrint = "Fakturaer sendes månedlig. Avbryt når som helst."
+noLimit = "Ingen grense"
+note = "Du faktureres aldri over grensen din. Behandlingen pauses bare."
+perMonth = "/ md"
+title = "Sett forbruksgrensen din"
+
+[portal.billing.checkout.card]
+fields = "Kortnummer · MM / ÅÅ · CVC · ZIP"
+label = "Kortdetaljer"
+note = "Kortdetaljer samles inn av Stripe. Stirling lagrer aldri PAN eller CVC."
+
 [portal.billing.checkout.error]
 title = "Kunne ikke starte checkout"
 
@@ -6383,10 +6392,9 @@ body = "Betalingen din gikk gjennom. Vi slår på målt behandling på tvers av
 hint = "Hold dette vinduet åpent."
 title = "Aktiverer Processor-planen din..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "i portal-env for å aktivere checkout i appen."
-bodyBefore = "Angi"
-title = "Stripe er ikke konfigurert"
+[portal.billing.checkout.pay]
+limit = "Månedlig forbruksgrense {{amount}}/md. Behandlingen pauses ved grensen."
+limitNoCap = "Ingen forbruksgrense. Behandlingen pauses ikke. Fakturaer sendes månedlig."
 
 [portal.billing.enterpriseUpsell]
 cta = "Bygg ditt Enterprise-tilbud"
@@ -6409,10 +6417,12 @@ currentPlan = "Gjeldende plan"
 freeForever = "Gratis for alltid"
 noTeamResolved = "Ingen team er løst på lommeboken din ennå — oppdater og prøv igjen."
 ownerOnly = "Bare teameieren kan slå på Processor-planen."
+payInvoice = "Betal faktura for å fullføre"
 planName = "Editor"
 ssoIncluded = "SSO inkludert"
 switchOnProcessor = "Slå på Processor →"
 unlimitedUsers = "Ubegrenset antall brukere"
+viewQuote = "Vis tilbud"
 
 [portal.billing.invoices]
 columnAmount = "Beløp"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Direkte API-forespørsler"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatiseringer og pipelines"
 segmentAutomationLabel = "Automatisering"
+sizeMultiplier = "{{formatted}} PDF-er brukte en størrelsesmultiplikator"
+summary = "{{unique}} unike · {{units}} målerenheter · {{avg}} gj.sn. per PDF"
+summaryNoRate = "{{unique}} unike · {{units}} målerenheter"
 unit = "målte PDF-er"
+unitsPending_one = "{{units}} målerenhet venter på synkronisering fra tilkoblede instanser"
+unitsPending_other = "{{units}} målerenheter venter på synkronisering fra tilkoblede instanser"
+
+[portal.billing.prepaid]
+capSuffix = "av {{total}} forhåndsbetalte kreditter"
+expires = "Utløper {{date}}"
+eyebrow = "Forhåndsbetalt kapasitet"
+note = "Brukes før målt fakturering og utenfor forbruksgrensen din."
+topUp = "Fyll på"
+
+[portal.billing.prepaid.buy]
+back = "Tilbake"
+calcTitle = "Beregn årsbetalingen din"
+cancel = "Avbryt"
+cancelPurchase = "Avbryt kjøp"
+close = "Lukk"
+continueToPayment = "Fortsett til betaling"
+finalise = "Fullfør"
+invoiceErrorTitle = "Kunne ikke generere fakturaen"
+loadingTitle = "Laster tilbudet ditt"
+payTitle = "Betal for året ditt"
+step = "Trinn {{current}} av {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Endre"
+deployRow = "Distribusjon"
+done = "Ferdig"
+enterpriseHint = "Dette er enterprise-skala. Ved dette volumet slår enterprise-priser enhver selvbetjent rabatt. Prislås, vilkår og et tilbud på minutter."
+governanceRow = "Styring"
+governanceValue = "{{label}} · {{count}} policyer"
+handlesLabel = "Din Processor"
+handlesValue = "håndterer {{volume}} kreditter / md"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policyer"
+poolCaption = "Én pool med {{credits}} kreditter for året. Tunge måneder låner fra lette."
+priceLabel = "Ditt år · 12 måneder til prisen av 10"
+rateUnknown = "Vi viser nøyaktig pris i kassen."
+savings = "Du sparer {{amount}} · 2 måneder gratis."
+sizingRow = "Dimensjonering"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Totalt antall brukere"
+
+[portal.billing.prepaid.consent]
+label = "Jeg forstår at når den forhåndsbetalte kapasiteten min er brukt opp eller utløper etter 12 måneder, fortsetter behandlingen automatisk til standard målt betal-etter-forbruk-sats (opp til forbruksgrensen min) med mindre jeg avbryter, og at jeg kan avbryte når som helst fra faktureringsportalen."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Administrert av Stirling. I drift på minutter."
+cloudValue = "Stirling Cloud · Administrert"
+selfhost = "Selvhostet"
+selfhostDesc = "Kjører på privat infrastruktur. Samme sats."
+selfhostValue = "Selvhostet · Privat infrastruktur"
+
+[portal.billing.prepaid.offer]
+cta = "Gjennomgå tilbud"
+subtitle = "Forhåndsbetal et år med PDF-behandling og få to måneder gratis, brukt før målt fakturering, utenfor forbruksgrensen din."
+title = "Få 12 måneder til prisen av 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Kontoinnehavers navn"
+accountNamePlaceholder = "f.eks. Kari Nordmann"
+companyName = "Firmanavn (valgfritt)"
+companyNamePlaceholder = "f.eks. Acme Inc."
+downloadInvoice = "Last ned faktura"
+payOnline = "Betal på nett"
+poNumber = "PO-nummer (valgfritt)"
+poNumberPlaceholder = "f.eks. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avansert"
+advancedDesc = "Pipelines driver det meste av behandlingen din."
+none = "Ingen"
+noneDesc = "Kjører ikke pipelines ennå. Slå dem på når som helst."
+standard = "Standard"
+standardDesc = "Noen få pipelines behandler ankommende PDF-er på nytt."
+
+[portal.billing.prepaid.posture]
+essentials = "Essentials"
+essentialsDesc = "Klassifisering, standarden, pluss deling"
+governed = "Styrt"
+governedDesc = "Legger til sikkerhet og ruting"
+regulated = "Regulert"
+regulatedDesc = "Hver kategori, inkl. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Last ned tilbud (PDF)"
+downloading = "Forbereder…"
+share = "del for godkjenning"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "Filer under 25 MB, ingen datakostnader"
+heavy = "Tung"
+heavyDesc = "Skannet eller bildetung, rutinemessig 50 MB+"
+standard = "Standard"
+standardDesc = "For det meste små, noen skanninger over 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Brukt opp"
+healthy = "Mye igjen"
+low = "Begynner å bli lite"
 
 [portal.billing.spendLimit]
 adjustLimit = "Juster grense"
@@ -6494,6 +6608,8 @@ label = "Forventes å overskrides."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Forbruk denne måneden"
+freeRemaining_one = "{{formatted}} gratis PDF gjenstår"
+freeRemaining_other = "{{formatted}} gratis PDF-er gjenstår"
 processed_one = "{{formattedCount}} PDF behandlet."
 processed_other = "{{formattedCount}} PDF-er behandlet."
 processedWithRate_one = "{{formattedCount}} PDF behandlet, til {{rate}} hver."
@@ -6534,6 +6650,350 @@ signature = "signatur"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Ny tilkobling"
+createTitleFor = "Koble til {{name}}"
+delete = "Slett"
+edit = "Rediger"
+editTitle = "Rediger tilkobling"
+unsupportedType = "Denne tilkoblingstypen kan ikke redigeres her."
+
+[portal.connections.categories.advanced]
+description = "For en tjeneste vi ikke støtter ennå."
+label = "Avansert"
+
+[portal.connections.categories.audit]
+description = "Registrer hva som skjedde med et dokument, der revisorene dine allerede ser."
+label = "Revisjons- og samsvarslogging"
+
+[portal.connections.categories.notify]
+description = "Fortell et annet system at noe skjedde."
+label = "Varsling og arbeidsflyt"
+
+[portal.connections.categories.security]
+description = "Skann eller merk et dokument før det går videre."
+label = "Sikkerhet og klassifisering"
+
+[portal.connections.categories.signing]
+description = "Send et dokument ut for signering eller notarisering."
+label = "E-signatur og notarisering"
+
+[portal.connections.categories.storage]
+description = "Der behandlede dokumenter ender opp – en bucket, en disk, en sak eller en side."
+label = "Fil og legg ved"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling lagrer dette kryptert og viser det aldri igjen."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Trinn som bruker denne tilkoblingen kan bare kalle stier under denne URL-en, aldri en annen host."
+label = "Server-URL"
+
+[portal.connections.commonFields.email]
+label = "E-post"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Passord"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Brukernavn"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Lim inn URL-en tjenesten ga deg. Bare stier under den kan kalles."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Tilkoblingsnavn"
+namePlaceholder = "f.eks. Produksjon"
+
+[portal.connections.picker]
+cancel = "Avbryt"
+createNew = "Ny tilkobling..."
+placeholder = "Velg en tilkobling"
+save = "Lagre tilkobling"
+
+[portal.connections.picker2]
+back = "Endre integrasjon"
+heading = "Hva vil du koble til?"
+noResultsBody = "Vi støtter det ikke ennå – fortell oss om det, så ser vi på å legge det til."
+noResultsTitle = "Ingenting matcher \"{{query}}\""
+searchPlaceholder = "Søk i integrasjoner – prøv \"sign\", \"ocr\" eller et produktnavn"
+
+[portal.connections.types.api]
+description = "Kall hvilken som helst HTTP API fra en policy. Du velger URL, autentisering og payload."
+label = "Egendefinert API"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentisering"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Brukernavn og passord"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token i en egendefinert header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Ingen"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Logg inn for en token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Trinn som bruker denne tilkoblingen kan bare kalle stier under denne URL-en, aldri en annen host."
+label = "Base-URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header-navn"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Innloggingssti"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Passord"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Hvis API-et svarer med en nedlastingslenke, kan bare disse hostene hentes. Skill med komma. La stå tomt for kun å tillate base-URL-ens egen host."
+label = "Tillatte resulthoster"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Send tokenen som denne headeren"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Responsheaderen innloggingskallet returnerer tokenen i, f.eks. X-Auth-Token."
+label = "Token-responsheader"
+
+[portal.connections.types.api.fields.username]
+label = "Brukernavn"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skann dokumenter for skadevare på en server du kjører – ingenting forlater nettverket ditt."
+label = "ClamAV (selvhostet)"
+
+[portal.connections.types.cloudmersive]
+description = "Virus- og innholdsskanning for dokumenter i en policy."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokker dokumenter som inneholder makroer, kjørbare filer, skript eller innebygde objekter – ikke bare kjent skadevare."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Legg ved behandlede dokumenter på en Confluence-side."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Send dokumenter til ConsignO Cloud (Notarius) for elektronisk signatur og notarisering."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Ditt ConsignO Cloud-miljø, inkludert /api/v1."
+label = "Server-URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Passord"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Trengs bare hvis organisasjonen din bruker leietakere."
+label = "Leietaker"
+
+[portal.connections.types.consigno.fields.username]
+label = "Brukernavn"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publiser en melding til Discord når en policy behandler et dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indekser en revisjonshendelse i Elasticsearch hver gang en policy håndterer et dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Spørr en FTP- eller FTPS-server etter nye dokumenter."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Tilkoblingsmodus"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktiv"
+passive = "Passiv (anbefalt)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Vanlig FTP sender legitimasjon og filer ukryptert; velg FTPS hvis serveren støtter det."
+label = "Kryptering"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (eksplisitt / AUTH TLS)"
+implicit = "FTPS (implisitt)"
+none = "Ingen (vanlig FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publiser en melding til et Google Chat-rom når en policy kjører."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Legg ved behandlede dokumenter i en Jira-sak."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Send et dokument eller et varsel på e-post når en policy kjører."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Arkiver behandlede dokumenter i Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App-passord"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Oppdag persondata i dokumenttekst ved hjelp av en Presidio-server du kjører."
+label = "Presidio (selvhostet)"
+
+[portal.connections.types.purview]
+description = "Les og bruk Microsoft Purview-sensitivitetsetiketter på PDF-er."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Valgfritt. Trengs bare for å velge etiketter etter navn; merking fungerer uten det."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Stemples på hver etikett som dens SiteId, slik at Purview-aware verktøy vet hvilken organisasjon som brukte den."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "En S3 bucket som kilder kan lese fra og pipeline-utdata kan skrive til."
+label = "S3-lagring"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "La stå tomt for AWS. Angi dette for MinIO eller en annen S3-kompatibel lagring."
+label = "Endepunkt"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Send et dokument eller et varsel på e-post når en policy kjører."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Spørr en SFTP (SSH)-server etter nye dokumenter."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Valgfritt. Serverens SHA-256 host key fingerprint (fra `ssh-keyscan host | ssh-keygen -lf -`). Når angitt, godtas bare en server som presenterer denne nøkkelen; når tomt, festes nøkkelen som sees ved første tilkobling, og senere endringer avvises."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Nøkkelpassfrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "La stå tomt hvis du autentiserer med en privat nøkkel i stedet."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Valgfritt. Lim inn en OpenSSH privat nøkkel for å autentisere med en nøkkel i stedet for et passord."
+label = "Privat nøkkel"
+
+[portal.connections.types.slack]
+description = "Publiser en melding til Slack når en policy behandler et dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Overvåk en SMB / CIFS-nettverksressurs (Windows eller Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Nettverksressurs"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Valgfritt. Windows-domenet eller arbeidsgruppen, hvis serveren din bruker en."
+label = "Domene"
+
+[portal.connections.types.smb.fields.share]
+label = "Ressurs"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Send en revisjonshendelse til Splunk hver gang en policy håndterer et dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Send en revisjonshendelse til en Sumo Logic HTTP-samler."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publiser en melding til en Teams-kanal når en policy kjører."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publiser hvert dokument, eller bare detaljene, til en URL du velger."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Utløs et Zap- eller Make-scenario fra en policy."
+label = "Zapier og Make"
+
+[portal.docs]
+browse = "Bla gjennom dokumentasjon"
+viewSource = "Vis kilde på GitHub"
+
 [portal.docs.authentication]
 codeCaption = "hver forespørsel"
 eyebrow = "KOM I GANG"
@@ -6619,11 +7079,19 @@ title = "Offisielle SDK-er"
 beta = "Beta"
 deprecated = "Utdatert"
 
+[portal.docs.search]
+empty = "Ingen samsvarende dokumentasjon"
+placeholder = "Søk i dokumentasjon"
+results = "{{count}} resultater"
+
 [portal.docs.skills]
 eyebrow = "FERDIGHETER"
 lead = "Samlede, navngitte kapabiliteter agenten din påkaller som ett enkelt verktøy. Hver ferdighet er en deterministisk operasjonskjede med evalueringer vedlagt."
 title = "Agentferdigheter"
 
+[portal.docs.toc]
+title = "På denne siden"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API-REFERANSE"
@@ -6697,6 +7165,8 @@ type = "Type"
 user = "Bruker"
 
 [portal.documents.queue.empty]
+connectSource = "Koble til en kilde"
+createPipeline = "Opprett en pipeline"
 description = "Når kilder sender dokumenter inn i dine pipelines, vises de her for gjennomgang."
 title = "Ingen dokumenter i køen"
 
@@ -6806,13 +7276,71 @@ description = "Denne visningen traff en uventet feil. Prøv igjen, eller velg en
 retry = "Prøv igjen"
 title = "Noe gikk galt på denne siden"
 
+[portal.home.download]
+back = "Tilbake"
+body = "Last ned skrivebordsappen eller selvhost serveren."
+done = "Ferdig"
+guide = "Åpne {{name}}-veiledningen"
+openInBrowser = "Åpne i nettleseren i stedet"
+sectionDesktop = "Skrivebordsapp"
+sectionSelfHosted = "Selvhostet"
+title = "Installer Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Kjør det offisielle imaget på serveren din."
+note = "Åpnes på :8080. Standard innlogging: admin / stirling."
+tagline = "Kjør serveren i en container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installer det offisielle Helm chartet."
+note = "Legg til en PVC for /configs for å bevare innstillingene."
+tagline = "Distribuer til en klynge med Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Native bygg for distribusjonen din."
+guideBtn = "Vis installasjonsalternativer for Linux"
+note = "AppImage-, .deb- og .rpm-bygg er tilgjengelige for vanlige distroer."
+tagline = "Native skrivebordsapp for distroen din"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Eller via Homebrew"
+detailBody = "Kjør installasjonsprogrammet, eller bruk Homebrew."
+downloadBtn = "Last ned for macOS"
+tagline = "Native app for Apple silicon og Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Kjør .jar på en bare metal-server."
+downloadBtn = "Last ned .jar"
+note = "Krever Java 21+. Åpnes på :8080; standard innlogging admin / stirling."
+runLabel = "Kjør den deretter"
+tagline = "Kjør .jar på en bare metal-server"
+title = "Manuelt serveroppsett"
+
+[portal.home.download.windows]
+altLabel = "Eller via winget"
+detailBody = "Kjør installasjonsprogrammet, eller bruk en pakkebehandler."
+downloadBtn = "Last ned installasjonsprogram"
+tagline = "Native app for Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktive"
-invite = "Inviter lagkamerater"
+activeOfDeployed = "{{active}} av {{total}} aktive denne måneden"
 name = "Stirling PDF Editor"
 open = "Åpne i nettleser"
 updated = "oppdatert {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Fullfør distribusjon"
+options = "Vis distribusjonsalternativer"
+start = "Distribuer Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Selvhostet · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "God ettermiddag"
 evening = "God kveld"
 morning = "God morgen"
 
-[portal.home.onboarding]
-dismiss = "Avvis oppsett"
-notStarted = "Ikke startet"
-progress = "{{done}} av {{total}} fullført"
-title = "Fullfør oppsettet"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC for hele organisasjonen, forpliktende volumprising og isolert distribusjon."
-cta = "Start prøveperiode"
-ctaQuote = "Få tilbud"
-lead = "For 250+ ansatte."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Distribuer skrivebordsappen, gratis for alltid."
-title = "Last ned PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktive · {{recommended}} anbefalt"
-chip = "{{active}} aktive"
-title = "Slå på policyer"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} tilkoblet · hver PDF styres der den lander"
-chip = "{{connected}} tilkoblet"
-title = "Koble til kildene dine"
-
-[portal.home.quickActions]
-subtitle = "Viktigste oppgaver for i dag"
-title = "Hurtighandlinger"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-trinns komponist over det typede operasjonsbiblioteket"
-title = "Bygg en pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenter, webhooks, overvåkede mapper"
-title = "Koble til en kilde"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Avgrenset nøkkel med hastighetsgrenser og IP-tillatelsesliste"
-title = "Utsted en API-nøkkel"
-
 [portal.infrastructure]
 manageEditorDeployment = "Administrer Editor-distribusjon"
 sectionsAriaLabel = "Infrastrukturseksjoner"
@@ -6878,13 +7363,9 @@ heading = "API-nøkler"
 subheading = "Avgrenset legitimasjon med hastighetsgrenser per nøkkel, tillatelser og IP-tillatelseslister."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Tillatte IP-er"
-anyIp = "Enhver IP (ingen tillatelsesliste)"
 created = "Opprettet"
 lastUsed = "Sist brukt"
-permissions = "Tillatelser"
-rateLimit = "Hastighetsgrense"
-rateLimitValue = "{{value}} foresp./min"
+revoke = "Tilbakekall nøkkel"
 usageMonth = "Bruk denne måneden"
 usageToday = "Bruk i dag"
 
@@ -6892,6 +7373,20 @@ usageToday = "Bruk i dag"
 description = "Opprett en avgrenset nøkkel for å begynne å kalle Stirling API."
 title = "Ingen API-nøkler ennå"
 
+[portal.infrastructure.apiKeys.error]
+load = "Kunne ikke laste API-nøklene dine. Prøv igjen."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Tilbakekall \"{{name}}\"? Integrasjoner som fortsatt bruker denne nøkkelen, vil umiddelbart begynne å motta 401-feil. Dette kan ikke angres."
+cancel = "Avbryt"
+confirm = "Tilbakekall nøkkel"
+title = "Tilbakekall API-nøkkel"
+
+[portal.infrastructure.attestationLabel]
+attested = "Attestert"
+inScope = "Innenfor omfang"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrer revisjonshendelser etter kategori"
 heading = "Revisjonslogger"
@@ -6935,6 +7430,7 @@ all = "Alle"
 auth = "Autentisering"
 config = "Konfigurasjon"
 elevation = "Tilgangsøkning"
+policy = "Retningslinje"
 processing = "Behandling"
 security = "Sikkerhet"
 
@@ -6944,19 +7440,35 @@ title = "Du har ikke tilgang"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfigurasjon"
-elevation = "Tilgangsøkning"
+policy = "Retningslinje"
 processing = "Behandling"
 totalEvents = "Totalt antall hendelser · 24 t"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentisering"
+config = "Konfigurasjon"
+elevation = "Heving"
+policy = "Retningslinje"
+processing = "Behandling"
+security = "Sikkerhet"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Feil"
+info = "Info"
+success = "Vellykket"
+warning = "Advarsel"
+
+[portal.infrastructure.certLabel]
+certified = "Sertifisert"
+inProgress = "Pågår"
+notStarted = "Ikke startet"
+
 [portal.infrastructure.createKey]
 cancel = "Avbryt"
 createKey = "Opprett nøkkel"
 done = "Ferdig"
-ipAllowlistHelper = "Kommaseparerte CIDR-områder. La stå tomt for å tillate enhver IP."
-ipAllowlistLabel = "IP-tillatelsesliste"
 keyNameLabel = "Nøkkelnavn"
 keyNamePlaceholder = "f.eks. Produksjon · inntak"
-permissionsLabel = "Tillatelser"
 secretKeyCaption = "Hemmelig nøkkel"
 secretWarning = "Lagre dette i en hemmelighetsbehandler. Stirling lagrer bare en hash — det finnes ingen måte å gjenopprette den senere."
 subtitle = "Avgrens nøkkelen til det minste den trenger. Du kan rotere eller tilbakekalle når som helst."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopier denne hemmeligheten nå — den vises ikke igjen."
 title = "Opprett API-nøkkel"
 titleCreated = "Nøkkel opprettet"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "I kø"
+rolledBack = "Rullet tilbake"
+rolling = "Ruller ut"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Sanntidshelse for hver distribuerte Stirling-region — latens, be
 description = "Distribuerte regioner vises her når arbeidsområdet ditt er klargjort."
 title = "Ingen regioner distribuert"
 
+[portal.infrastructure.keyLabel]
+active = "Aktiv"
+revoked = "Tilbakekalt"
+
+[portal.infrastructure.modelLabel]
+active = "Aktiv"
+degraded = "Redusert"
+disabled = "Deaktivert"
+
 [portal.infrastructure.models]
 heading = "Modeller"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Type"
 version = "Versjon"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/kall"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktive modeller"
 avgLatency = "Gj.sn. latens"
@@ -7049,6 +7580,17 @@ modelForAria = "Modell for {{operation}}"
 operation = "Operasjon"
 routedTo = "Rutet til"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klassifisering"
+extraction = "Ekstraksjon"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Redusert"
+down = "Nede"
+healthy = "Frisk"
+
 [portal.infrastructure.security.access.byok]
 description = "Oppgi en nøkkel fra din egen KMS. Stirling krypterer med den, men kan fortsatt lese."
 label = "Ta med din egen nøkkel (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeller"
 security = "Sikkerhet"
 storage = "Lagring"
 
+[portal.integrations]
+addAnother = "Legg til en til"
+availableHeading = "Tilgjengelig"
+comingSoonHeading = "Kommer snart"
+connect = "Koble til"
+connectedHeading = "Tilkoblet"
+connectionCount_one = "{{count}} tilkobling"
+connectionCount_other = "{{count}} tilkoblinger"
+customApi = "Tilpasset API"
+searchPlaceholder = "Søk i integrasjoner"
+subtitle = "Alt Stirling kan snakke med. Legitimasjon opprettes én gang her, og refereres deretter av kilder, retningslinjer og pipelines."
+title = "Integrasjoner"
+typedName = "{{tool}}-navn"
+
+[portal.integrations.filters]
+all = "Alle"
+audit = "Revisjon"
+connected = "Tilkoblet"
+notify = "Varsle"
+security = "Sikkerhet"
+signing = "Signering"
+storage = "Lagring"
+
+[portal.integrations.status]
+connected = "Tilkoblet"
+
+[portal.integrations.table]
+integration = "Integrasjon"
+worksWith = "Fungerer med"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Retningslinjer"
+sources = "Kilder"
+
+[portal.legal]
+draft = "{{label}} · utkast"
+loadError = "Kunne ikke laste dette dokumentet. Prøv igjen."
+loading = "Laster…"
+title = "Juridisk dokument"
+
 [portal.nav]
 agent-builder = "Agentbygger"
 components = "Komponenter"
@@ -7182,6 +7765,7 @@ documents = "Dokumenter"
 editor = "Redigerer"
 home = "Hjem"
 infrastructure = "Infrastruktur"
+integrations = "Integrasjoner"
 pipelines = "Pipelines"
 policies = "Policyer"
 procurement = "Innkjøp"
@@ -7190,25 +7774,9 @@ sources = "Kilder"
 usage = "Bruk og fakturering"
 users = "Brukere"
 
-[portal.notifications]
-markAllRead = "Merk alle som lest"
-title = "Varsler"
-viewAll = "Vis alle"
-
-[portal.notifications.ariaLabel]
-none = "Varsler, ingen uleste"
-unread_one = "Varsler, {{count}} ulest"
-unread_other = "Varsler, {{count}} uleste"
-
-[portal.notifications.count]
-allRead = "alle lest"
-loading = "laster"
-new_one = "{{count}} nytt"
-new_other = "{{count}} nye"
-
-[portal.notifications.empty]
-description = "Ingen nye varsler."
-title = "Du er helt ajour"
+[portal.nav.section]
+platform = "PDF-plattform"
+processor = "PDF-prosessor"
 
 [portal.pipelines]
 subtitle = "Hver automatiserte dokumentpipeline på backend: en ordnet kjede av operasjoner over et sett med kilder, kjørt på en utløser. Klikk på en rad for å se trinnene og kildene."
@@ -7220,15 +7788,28 @@ newPipeline = "Ny pipeline"
 [portal.pipelines.builder]
 addStep = "Legg til verktøy"
 back = "Tilbake til pipelines"
+cannotFollow = "Kan ikke ta {{produced}}"
+chooseAccount = "Velg en konto"
+chooseDestination = "Velg en destinasjon"
+chooseOperation = "Velg hva dette trinnet gjør"
+chooseSource = "Velg en kilde"
 discard = "Forkast endringer"
 enabled = "Aktivert"
+inputs = "Inndata"
+inputSource = "Inndatakilde"
+inputTrigger = "Utløser"
 keepEditing = "Fortsett å redigere"
+needsConfiguring = "Må settes opp"
 needsUpload = "Trenger en opplastet fil"
+noSources = "Ingen kilder er tilkoblet ennå. Opprett en for å bruke den som inndata."
 noToolMatches = "Ingen verktøy samsvarer med søket ditt."
 pipelineSettings = "Pipeline-innstillinger"
 searchTools = "Søk i verktøy"
 selectToolBody = "Legg til et verktøy for å bygge pipelinen din."
 selectToolTitle = "Ingen verktøy ennå"
+sendToSystem = "Send til et annet system"
+stepsIncompatible = "Disse trinnene kan ikke kjøres på det forrige trinnet produserer: {{tools}}."
+stepsNeedSetup = "Disse trinnene må fortsatt settes opp før lagring: {{tools}}."
 toolSettings = "Verktøyinnstillinger"
 unknownStep = "Ukjent operasjon, beholdt som den er."
 unsavedBody = "Du har ulagrede endringer. Lagre dem før du forlater, eller forkast dem?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Ulagrede endringer"
 uploadUnsupported = "Opplastede filer støttes ikke i pipelines ennå, så disse trinnene kan ikke lagres: {{tools}}."
 usesDefaults = "Kjører med standardinnstillinger"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinerer hver fil fra forrige trinn"
+fan-out = "Kjører én gang per fil fra forrige trinn"
+format-mismatch = "Trenger {{accepts}}, men forrige trinn produserer {{produced}}"
+output-uncertain = "Kjører kanskje ikke: utdata fra forrige trinn avhenger av hvordan det er satt opp"
+source-mismatch = "Trenger {{accepts}}, men inndata for denne pipelinen er {{produced}}"
+undeclared-operation = "Kan ikke sjekke hva dette trinnet godtar"
+
 [portal.pipelines.composer]
 addTool = "Legg til verktøy"
 cancel = "Avbryt"
 chainEmpty = "Legg til et verktøy for å begynne å bygge pipelinen din."
 create = "Opprett pipeline"
-directory = "Utdatamappe"
-directoryHelp = "Absolutt sti på serveren. Må være innenfor de konfigurerte tillatte mappene."
 editingUnsupported = "Visning av disse verktøyparametrene for redigering støttes ikke ennå."
 moveDown = "Flytt ned"
 moveUp = "Flytt opp"
 name = "Navn"
 namePlaceholder = "f.eks. Redigeringsgjennomgang"
-noSources = "Ingen kilder tilkoblet ennå. Pipelinen kan fortsatt kjøre på filer som leveres direkte til den."
 noToolSettings = "Dette verktøyet har ingen konfigurerbare innstillinger."
 operations_one = "Operasjon ({{count}})"
 operations_other = "Operasjoner ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Slett"
 title = "Slette pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Tøm historikk"
 delete = "Slett pipeline"
 run = "Kjør nå"
 
 [portal.pipelines.empty]
 action = "Opprett en pipeline"
+connectSource = "Koble til en kilde"
 description = "Opprett din første pipeline: velg kildene den kjører over, kjed operasjonene, og velg hvor utdata skal gå."
 title = "Ingen pipelines ennå"
 
@@ -7286,15 +7874,17 @@ active = "Aktive"
 paused = "Satt på pause"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Skriv til mappe"
-inline = "Returner filer"
-
 [portal.pipelines.run]
+allProcessed_one = "Ingenting å kjøre: kildens {{count}} dokument er allerede behandlet."
+allProcessed_other = "Ingenting å kjøre: alle {{count}} dokumenter i kildene er allerede behandlet."
 completed_one = "Kjøring fullført."
 completed_other = "Alle {{count}} kjøringer fullført."
 empty = "Ingenting å kjøre: kildene hadde ingen dokumenter å behandle."
 failed = "Kjøring mislyktes: {{error}}"
+historyCleared = "Historikk tømt. Neste kjøring behandler alt som for øyeblikket er i kildene, på nytt."
+inFlight = "Ingenting nytt å kjøre: dokumenter behandles fortsatt fra en tidligere kjøring."
+parked_one = "Ingenting å kjøre: {{count}} dokument feilet tidligere og er parkert. Rett årsaken, og tøm deretter historikken for å prøve på nytt."
+parked_other = "Ingenting å kjøre: {{count}} dokumenter feilet tidligere og er parkert. Rett årsaken, og tøm deretter historikken for å prøve dem på nytt."
 running = "Kjøring startet; fortsatt pågår."
 timeout = "Kjøringen tar lengre tid enn forventet; den kan fortsatt fullføres i bakgrunnen."
 
@@ -7314,12 +7904,18 @@ manual = "Manuell"
 schedule = "Planlagt"
 
 [portal.policies]
+defaultName = "{{category}}-retningslinje"
 subtitle = "Stående automatiseringer som håndhever en verktøypipeline på hvert dokument. Hver policy utløses ved opplasting eller eksport, kjører verktøykjeden sin, og lagrer den håndhevede versjonen ved siden av originalen."
 title = "Policyer"
 
 [portal.policies.card]
 comingSoon = "Oppgrader til Enterprise"
 notSetUp = "Ikke satt opp"
+requiresAiEngine = "Krever AI-motor"
+
+[portal.policies.categories.classification]
+desc = "Identifiser hvert dokuments type ved opplasting og tagg metadataene for arkivering og søk."
+label = "Klassifisering"
 
 [portal.policies.categories.compliance]
 desc = "Håndhev HIPAA-, GDPR-, SOC 2- eller FedRAMP-krav på hvert dokument."
@@ -7344,6 +7940,13 @@ label = "Sikkerhet"
 [portal.policies.config]
 scopeAll = "Alle dokumenter"
 
+[portal.policies.config.classification]
+summary = "Klassifiserer hvert opplastede dokument mot teamets etiketter og tagger metadataene."
+
+[portal.policies.config.classification.rules]
+0 = "Klassifiser"
+1 = "Tagg metadata"
+
 [portal.policies.config.compliance]
 summary = "Validerer dokumenter mot regulatoriske rammeverk før de forlater systemet."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. konfidens"
 2 = "Navngi"
 3 = "Normaliser"
 
+[portal.policies.config.purview]
+label = "Bruk en Microsoft Purview-sensitivitetsetikett"
+
+[portal.policies.config.purview.fields]
+connection = "Purview-leier"
+labelId = "Etikett-ID"
+labelIdHelp = "Etikettens GUID, fra Purview-portalen. Å bruke en etikett skriver metadataene til PDF-en; den kan ikke kryptere, noe som krever Microsoft-klienten."
+labelName = "Etikettnavn (valgfritt)"
+labelNameHelp = "Registreres sammen med ID-en slik at personer og verktøy kan gjenkjenne etiketten."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview skiller mellom en etikett som en retningslinje brukte, og en som en person valgte."
+label = "Hvordan etiketten registreres"
+privileged = "Som valgt av en person"
+standard = "Som brukt automatisk"
+
+[portal.policies.config.purviewRead]
+label = "Les en Microsoft Purview-etikett"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview-leier"
+connectionHelp = "Leser etiketten dokumentet allerede har, slik at senere trinn kan handle på den."
+
 [portal.policies.config.retention]
 summary = "Håndhever hvor lenge dokumenter beholdes, når de skal arkiveres, og når de skal slettes."
 
@@ -7438,6 +8064,7 @@ title = "Ingen aktivitet ennå"
 [portal.policies.endpoints]
 addWatermark = "Vannmerke"
 autoRedact = "Sladd personopplysninger"
+classifyAndLabel = "Klassifiser"
 compressPdf = "Komprimer"
 flatten = "Flat ut"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Policyene dine er lagret og vises når tilkoblingen er gjenoppret
 retry = "Prøv igjen"
 title = "Backend utilgjengelig"
 
+[portal.policies.operations]
+change = "Endre hva dette trinnet gjør"
+noResults = "Ingen trinn samsvarer med det. Prøv et produktnavn, eller \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Søk i trinn – prøv \"scan\", \"attach\" eller et produktnavn"
+
+[portal.policies.operations.bodyMode]
+binary = "Rå filbytes"
+json = "Inne i en JSON-nyttelast"
+multipart = "Som en filopplasting (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Din egen ClamAV-server sjekker dokumentet; ingenting forlater nettverket ditt."
+label = "Skann etter virus (selvhostet)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Avviser dokumenter som inneholder makroer, kjørbare filer, skript eller innebygde objekter."
+label = "Blokker aktivt innhold"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive sjekker dokumentet, og kjøringen stopper hvis det ikke er rent."
+label = "Skann etter virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arkiverer det behandlede dokumentet på en side."
+label = "Legg ved på en Confluence-side"
+
+[portal.policies.operations.consignoSubmit]
+description = "Sender dokumentet til ConsignO Cloud for signering."
+label = "Send til signering (ConsignO)"
+note = "Sender dokumentet. Henting av den signerte kopien støttes ikke ennå, fordi et trinn ikke kan sende et resultat til et senere trinn."
+
+[portal.policies.operations.customApiCall]
+description = "Lag kallet selv: sti, metode, brødtekst og svarhåndtering."
+label = "Kall en tilpasset API"
+
+[portal.policies.operations.discordNotify]
+description = "Forteller en kanal at retningslinjen håndterte et dokument."
+label = "Publiser en melding til Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Registrerer hva retningslinjen gjorde som et søkbart dokument."
+label = "Indekser en revisjonshendelse i Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart passer for opplastings-API-er; JSON passer for API-er som vil ha filen inne i en nyttelast; binary sender råbytes."
+label = "Hvordan dokumentet skal sendes"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "En JSON-brødtekst som sendes som den er. {{document.base64}} inneholder filen; {{document.*}} og {{run.*}} fylles ut per dokument."
+label = "JSON-brødtekst"
+
+[portal.policies.operations.fields.connection]
+label = "Konto"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun-domene"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Skjemafeltet API-et forventer at dokumentet ligger under."
+label = "Navn på filfelt"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Fra"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Et JSON-objekt med par av headernavn/-verdier. Tilkoblingens legitimasjon legges til for deg."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Indeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Saksnøkkel"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Sendes som meldingsteksten. {{document.*}} og {{run.*}} fylles ut per dokument."
+label = "Melding"
+
+[portal.policies.operations.fields.method]
+label = "Metode"
+
+[portal.policies.operations.fields.pageId]
+label = "Side-ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Legges til tilkoblingens base-URL. Den kan aldri nå en annen vert."
+label = "Sti"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Hvor i disken den skal skrives. {{document.filename}} fylles ut per dokument."
+label = "Destinasjonssti"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Rapport lar dokumentet være urørt. Erstatt bytter det ut med det som kommer tilbake."
+label = "Hva som skal gjøres med svaret"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Signatarens e-post"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Emne"
+placeholder = "Behandlet: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyserer denne teksten. Bruk {{document.title}} eller lim inn teksten du vil sjekke."
+label = "Tekst som skal sjekkes"
+
+[portal.policies.operations.fields.to]
+label = "Til"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud-brukernavn"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Forteller et område at retningslinjen håndterte et dokument."
+label = "Publiser en melding til Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arkiverer det behandlede dokumentet på en sak."
+label = "Legg ved i en Jira-sak"
+
+[portal.policies.operations.mailgunEmail]
+description = "Sender det behandlede dokumentet som et vedlegg."
+label = "Send dokumentet på e-post (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Skriver det behandlede dokumentet til en mappe."
+label = "Last opp til Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Din egen Presidio-server rapporterer personopplysningene den finner."
+label = "Oppdag personopplysninger"
+note = "Presidio leser tekst, ikke filer. Gi den teksten du vil sjekke — selve dokumentet lastes ikke opp."
+
+[portal.policies.operations.responseMode]
+replace = "Erstatt dokumentet med svaret"
+report = "Behold dokumentet, registrer svaret"
+
+[portal.policies.operations.sendgridEmail]
+description = "Sender det behandlede dokumentet som et vedlegg."
+label = "Send dokumentet på e-post (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Forteller en kanal at retningslinjen håndterte et dokument."
+label = "Publiser en melding til Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Registrerer hva retningslinjen gjorde, der revisorene dine allerede ser."
+label = "Send en revisjonshendelse til Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Registrerer hva retningslinjen gjorde til en HTTP-innsamler."
+label = "Send en revisjonshendelse til Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Forteller en kanal at retningslinjen håndterte et dokument."
+label = "Publiser en melding til Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Sender selve dokumentet til en URL du velger."
+label = "Post dokumentet til en webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Overleverer kjøringens detaljer til automatiseringen din."
+label = "Utløs en Zap- eller Make-scenario"
+
 [portal.policies.stats]
 activeFor = "Aktiv"
 dataProcessed = "Data behandlet"
@@ -7473,6 +8277,13 @@ label = "Dokumenter håndhevet"
 description = "Konfigurert, men kjører ikke"
 label = "Satt på pause"
 
+[portal.policies.table]
+appliesTo = "Gjelder for"
+docs = "Dokumenter håndhevet"
+enforces = "Håndhever"
+policy = "Retningslinje"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Tilbake"
 cancel = "Avbryt"
@@ -7480,6 +8291,10 @@ continue = "Fortsett"
 enablePolicy = "Aktiver policy"
 saveChanges = "Lagre endringer"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifiserer dokumentets type fra teamets etiketter og tagger det, slik at det arkiveres og søkes etter kategori."
+label = "Klassifiser dokumentet"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimerer dokumentet til en mindre filstørrelse."
 label = "Reduser filstørrelse"
@@ -7500,10 +8315,18 @@ label = "Sladd sensitiv informasjon"
 desc = "Fjerner skjult JavaScript slik at ingenting kan kjøre automatisk når dokumentet åpnes."
 label = "Fjern aktivt innhold"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Beviser at dokumentet eksisterte i nøyaktig denne formen på et tidspunkt, ved hjelp av en uavhengig tidsstempelmyndighet. Bare en hash sendes – dokumentet forlater aldri serveren din."
+label = "Legg til et betrodd tidsstempel"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Stempler et synlig merke (f.eks. «Konfidensielt») over hver side."
 label = "Bruk et vannmerke"
 
+[portal.policies.wizard.classification]
+description = "Hvert opplastede dokument klassifiseres mot de innebygde etikettene og tagges med typene som passer. Etikettsettet deles på tvers av hele teamet ditt."
+labelsHeading = "Klassifiseringsetiketter"
+
 [portal.policies.wizard.errors]
 noTools = "Aktiver minst ett verktøy i arbeidsflyten først."
 saveFailed = "Kunne ikke lagre policyen. Prøv igjen."
@@ -7548,73 +8371,118 @@ setUp = "Sett opp {{category}}-policy"
 [portal.policies.wizard.workflow]
 description = "Velg hva denne policyen gjør med hvert dokument den behandler."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktive"
-noRule = "Ingen regel håndhevet ennå"
-subtitle = "Faste automatiseringer som hvert dokument går gjennom, uansett hvilken pipeline som håndterer det."
-title = "Hva som kjøres på PDF-ene dine"
-
 [portal.policySummary.action]
-comingSoon = "Oppgrader til Enterprise"
-configure = "Konfigurer"
 setUp = "Sett opp"
 
-[portal.policySummary.column]
-activeRule = "Aktiv regel"
-policy = "Policy"
-status = "Status"
+[portal.processorFlow]
+footnote = "Antall gjelder de siste 24 timene. Flythastigheten er illustrativ."
+liveBadge = "Live"
+stats = "{{connected}} tilkoblet · {{processed}} PDF-er behandlet"
+title = "PDF-prosessor"
 
-[portal.policySummary.empty]
-description = "Når policyer er konfigurert, vises kategoriene her."
-title = "Ingen policyer ennå"
+[portal.processorFlow.lens]
+ariaLabel = "Visningsmodus"
+flow = "Flyt"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktiv"
-off = "Av"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 t"
+failed = "Mislyktes"
+heading = "Resultater"
+success = "Levert"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktive"
+count = "{{n}} · 24 t"
+heading = "Retningslinjer"
+setUp = "Sett opp"
 soon = "Snart"
 
-[portal.processingStatus]
-managePlan = "Administrer abonnement"
-volumeSuffix = "PDF-er behandlet · siste 30 dager"
+[portal.processorFlow.sankey]
+waist = "Retningslinjer · {{n}} aktive"
+
+[portal.processorFlow.sankey.empty]
+description = "Koble til en kilde og slå på en retningslinje for å se dokumenter flyte gjennom prosessoren."
+title = "Ingen flyt ennå"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Koble til"
+editor = "Stirling PDF Editor"
+heading = "Kilder"
+perDay = "{{n}} / 24 t"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "E-postinntak"
 
 [portal.procurement]
-reset = "Tilbakestill innkjøp (demo)"
 subtitle = "Få teamet evaluert, kontraktsfestet og onboardet. Alle dokumenter på ett sted."
 title = "Innkjøp"
 
-[portal.procurement.action]
-download = "Last ned"
-pay = "Betal nå"
-request = "Be om"
-sign = "Se gjennom og signer"
-upload = "Last opp"
-
 [portal.procurement.agreement]
 agreeCta = "Godta og abonner"
+confidential = "Konfidensielt"
 confirm = "Jeg har lest og godtar Stirling Enterprise Agreement."
-eyebrow = "Avtale"
-intro = "Én samlet avtale dekker avtalen din: Master Service Agreement, bestillingsskjema, EULA og databehandleravtale. Se gjennom den, og godta deretter for å akseptere tilbudet som et forpliktende abonnement."
-title = "Se gjennom enterprise-avtalen din"
+docName = "Stirling Enterprise-avtale"
+docSub = "MSA, bestillingsskjema, EULA og DPA, kombinert i én signatur."
+download = "Last ned"
+downloadDraftError = "Kunne ikke generere avtale-PDF-en – dokumentgjengiveren er utilgjengelig. Prøv igjen om litt eller kontakt kundestøtte."
+downloadError = "Kunne ikke laste ned den signerte avtalen. Prøv igjen."
+legalName = "Juridisk enhetsnavn"
+legalNamePlaceholder = "Den juridiske enheten som skal signere"
+loadError = "Kunne ikke laste avtalen. Prøv igjen."
+loading = "Laster avtalen..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Be om endringer"
+scrollHint = "Rull for å gjennomgå"
+signatory = "Signatarnavn"
+signatoryPlaceholder = "Fullt navn"
+signatoryTitle = "Signatartittel"
+signatoryTitlePlaceholder = "f.eks. juridisk direktør"
+signError = "Kunne ikke registrere signaturen din. Prøv igjen."
 
 [portal.procurement.builder]
 addons = "Tillegg"
+addressLine1 = "Adresselinje 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresselinje 2"
+addressLine2Placeholder = "Suite, etasje, bygning"
 back = "Tilbake"
 businessName = "Bedriftsnavn"
 businessNamePlaceholder = "Bedriften din"
+city = "By"
+cityPlaceholder = "San Francisco"
+completeRequired = "Fyll ut de obligatoriske feltene (merket *) med en gyldig e-post før du genererer tilbudet."
+contactEmail = "Kontakt-e-post"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kontaktnavn"
+contactNamePlaceholder = "Jane Doe"
 continue = "Fortsett"
-country = "Land"
-countryEuro = "Eurosonen (EUR €)"
-countryUK = "Storbritannia (GBP £)"
-countryUS = "USA (USD $)"
+done = "Ferdig"
 eula = "Jeg har lest og godtar Stirling Enterprise EULA. Den styrer avtalen som genereres fra dette tilbudet."
 generate = "Generer tilbud"
-included = "Inkludert"
 indemnification = "IP-skadesløsholdelse"
 indemnificationSub = "Vi forsvarer kvalifiserende IP-krav, i henhold til EULA"
-offlineLicense = "Offline / air-gapped-lisens"
-offlineLicenseSub = "En nedlastbar lisensfil for en air-gapped, selvdriftet instans"
+paperEyebrow = "Enterprise-tilbud"
+paperFor = "Utarbeidet for"
+pdfSize = "PDF-størrelse"
+poNumber = "PO-nummer"
+poNumberPlaceholder = "Valgfritt"
+postalCode = "Postnummer"
+postalCodePlaceholder = "94105"
+posture = "Styring"
+posture_count = "~{{count}} retningslinjer"
+posture_essentials = "Essensielt"
+posture_essentialsSub = "Klassifisering + deling — standardinnstillingene"
+posture_governed = "Styrt"
+posture_governedSub = "Legger til sikkerhet og ruting"
+posture_regulated = "Regulert"
+posture_regulatedSub = "Hver kategori — samsvar, oppbevaring, inntak"
 qbr = "Kvartalsvise forretningsgjennomganger"
 qbrSub = "Din SE gjennomgår bruk og veikart hvert kvartal"
+region = "Stat / region"
+regionPlaceholder = "California"
 running = "{{annual}} / år · {{years}} år {{tcv}}"
 s1Sub = "Teamet ditt, og PDF-ene du forventer å kjøre hvert år."
 s1Title = "Hvor mye vil du behandle?"
@@ -7623,6 +8491,12 @@ s2Title = "Forpliktelse og service"
 s3Sub = "For tilbudet og avtalen det genererer."
 s3Title = "Dine detaljer"
 serviceLevel = "Servicenivå"
+size_compact = "Kompakt"
+size_compactSub = "Mest tekst, under 1 MB"
+size_heavy = "Tung"
+size_heavySub = "Skannet eller bildetung, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Blandet tekst og bilder, 1 til 5 MB"
 slDedicated = "Dedikert"
 slDedicatedSub = "4 virketimer · dedikert kundeansvarlig · +30 %"
 slPriority = "Prioritet"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Samme virkedag · navngitt CSM · +15 %"
 slStandard = "Standard"
 slStandardSub = "Neste virkedag · delt CSM · inkludert"
 stepOf = "Trinn {{n}} av {{total}}"
+taxId = "VAT / skatte-ID"
+taxIdPlaceholder = "Valgfritt"
 term = "Periode"
 termDiscount = "{{pct}} % rabatt for flerårig forpliktelse brukt"
 title = "Bygg tilbudet ditt"
@@ -7637,6 +8513,7 @@ training = "Onboarding og opplæring"
 trainingSub = "Live-økter for å få teamet ditt i gang"
 users = "Totalt antall brukere"
 usersPlaceholder = "f.eks. 250"
+viewEula = "Les den"
 volEstimated = "Estimert fra {{count}} brukere (~2,000 PDF-er hver, inkludert automatisering). Rediger hvis du vet bedre."
 volManual = "Bruker tallet ditt. Estimer på nytt fra teamstørrelsen når som helst."
 volNoUsers = "Usikker? Angi teamstørrelsen din, så estimerer vi det."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "f.eks. 1,000,000"
 years_one = "{{count}} år"
 years_other = "{{count}} år"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokument"
-count_other = "{{count}} dokumenter"
-done = "Ferdig"
-here = "Du er her"
-hide = "Skjul"
-optional = "Valgfritt"
-paidAddon = "Betalt tillegg"
-show = "Vis"
-subtitle = "Alt du trenger på hvert trinn av reisen, vist etter hvert som avtalen går gjennom den."
-supportingSubtitle = "SOC 2, sikkerhetsgjennomganger, skatteskjemaer og mer, klart når sikkerhets- eller innkjøpsteamet ditt spør. Noen har et engangsgebyr."
-supportingTitle = "Støtter evalueringen din"
+[portal.procurement.documents]
+agreement = "Enterprise-avtale"
+agreementSub = "MSA, bestillingsskjema og DPA i én signatur."
+download = "Last ned"
+eula = "EULA og kommersielle vilkår"
+eulaSub = "Programvaren og kommersielle selvbetjeningsvilkår."
+invoice = "Faktura"
+invoiceSub = "Din første abonnementsfaktura."
+laterInvoice = "Tilgjengelig etter at du godtar"
+laterQuote = "Tilgjengelig når tilbudet ditt er utstedt"
+quote = "Tilbud"
+quoteSub = "Ditt spesifiserte Enterprise-tilbud."
+sla = "SLA-vedlegg"
+slaSub = "Støttenivåer og svarmål."
+subprocessors = "Underdatabehandlere"
+subprocessorsSub = "Tredjeparter som behandler data på dine vegne."
+subtitle = "Avtaledokumentene dine, tilgjengelige når som helst."
 title = "Dokumenter"
-upcoming = "Kommende"
+view = "Vis"
 
 [portal.procurement.error]
 title = "Noe gikk galt"
 
 [portal.procurement.hero]
-company = "Enterprise-avtalen din"
+barAria = "Trinn {{current}} av {{total}}"
 ctaAgreement = "Se gjennom og signer avtale"
-ctaLive = "Du er i drift"
-ctaPayment = "Legg til betaling"
+ctaExploring = "Sett opp prøveperioden din"
 ctaQuote = "Se gjennom tilbudet ditt"
+ctaReviewQuote = "Gå gjennom tilbud"
 ctaTrial = "Bygg tilbudet ditt"
+documents = "Dokumenter"
 eyebrow = "Enterprise-innkjøp"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Inviter teammedlemmer"
-keyDocs = "Nøkkeldokumenter"
-nextStep = "Neste trinn: {{action}}"
-notStarted = "Ikke startet"
+licenseKey = "Lisensnøkkel"
+liveSub = "Organisasjonen din er klargjort, og lisensen din er aktiv."
+liveTitle = "Du er live på Stirling Enterprise"
+next = "Neste: {{stage}}"
 open = "Åpne innkjøp"
 scheduleCall = "Planlegg en samtale"
-setup1Sub = "Inviter teammedlemmene dine"
-setup1Title = "Rull ut PDF Editor"
-setup2Sub = "Slå på behandling på tvers av editorer og andre kilder"
-setup2Title = "Koble til PDF Processor"
-setup3Sub = "Slå på sikkerhet, samsvar, ruting eller oppbevaring når du trenger dem"
-setup3Title = "Legg til anbefalte policyer"
+sentenceAgreement = "gå gjennom og signer avtalen"
+sentenceLive = "klargjøring og utrulling"
+sentencePayment = "innkjøpsordre og betaling"
+sentenceQuote = "gå gjennom og godta tilbudet ditt"
+sentenceTrial = "sett opp prøvearbeidsområdet ditt"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} dag igjen"
 daysLeft_other = "{{count}} dager igjen"
-engineerLabel = "Din løsningsingeniør"
-eyebrow = "Utrullingen din"
-live = "Du er i drift på Stirling Enterprise"
-nextStep = "Neste trinn: {{action}}"
-subtitle = "Løsningsingeniøren din er med på hvert trinn. Én neste handling om gangen; hele sjekklisten er nedenfor."
-title = "Fra prøveperiode til drift, én veiledet vei"
-trialTitle = "Enterprise-prøveperiode"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Én signatur dekker MSA, bestillingsskjema, EULA og DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Kunne ikke generere offline-lisensfilen ennå — prøv igjen o
 downloadOffline = "Last ned offline-lisens (.lic)"
 hint = "Lim inn denne nøkkelen i en selvdriftet instans for å aktivere den, eller behold den for arkivet ditt. Oppbevar den trygt."
 label = "Lisensnøkkelen din"
+subtitle = "Aktiver en selvhostet instans med denne nøkkelen, eller behold den for arkivet ditt."
+title = "Lisensnøkkelen din"
+trialFileHint = "Dette er prøvelisensfilen din. Når avtalen din er på plass, kom tilbake og last den ned igjen — i motsetning til den nettbaserte lisensnøkkelen oppdateres ikke .lic-filen av seg selv."
 
 [portal.procurement.link]
 cta = "Koble til konto"
@@ -7739,65 +8619,62 @@ description = "Abonnementet ditt er aktivt og lisensen din er utstedt. Teamet di
 eyebrow = "I drift"
 title = "Du er i drift på Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Prøvenøkler, tilbud for forpliktet volum, avtalen med én signatur, betaling og dokumentregisteret ditt finnes alle her når du starter en enterprise-evaluering."
-eyebrow = "Kun Enterprise"
-talkToSales = "Snakk med salg"
-title = "Innkjøpsløpet åpnes med Enterprise"
-
 [portal.procurement.milestone]
-accept = "Godta og fortsett"
-description = "Last ned PDF-en for å dele den med teamet ditt, kom tilbake for å godta når du er klar, eller gjør endringer."
-download = "Last ned PDF"
 downloadError = "Kunne ikke laste ned tilbuds-PDF-en ennå — prøv igjen om et øyeblikk."
-edit = "Rediger tilbud"
-eyebrow = "Tilbud {{number}}"
-perYear = " / år"
-preparedFor = "Utarbeidet for {{company}}"
-tcv = "{{value}} total kontraktsverdi"
-title = "Tilbudet ditt er klart"
-
-[portal.procurement.modal]
-cancel = "Avbryt"
-chooseFile = "Velg fil"
-close = "Lukk"
-downloadBody = "Nedlastingen starter snart."
-downloadCta = "Last ned"
-downloadTitle = "Last ned"
-noFile = "Ingen fil valgt"
-payBody = "Betal den forpliktede kontrakten din med kort eller bankoverføring gjennom Stripe. Arbeidsområdet ditt klargjøres så snart betalingen er godkjent."
-payCta = "Fortsett til Stripe"
-payTitle = "Bekreft betaling"
-requestBodyFree = "Vi genererer dette på forespørsel. Bekreft, så sender løsningsingeniøren din det over snart."
-requestBodyPaid = "Dette er et betalt tillegg. Bekreft, så avgrenser løsningsingeniøren din det og sender papirarbeidet."
-requestCta = "Be om"
-requestTitle = "Be om dette dokumentet"
-signBody = "Åpner Stirling Enterprise Agreement for e-signatur: én signatur dekker MSA, bestillingsskjema, EULA og DPA. Vi motsignerer automatisk, og du går videre til betaling."
-signCta = "Åpne for signering"
-signTitle = "Se gjennom og signer avtalen din"
-uploadBody = "Send oss innkjøpsordren din, så fakturerer vi mot den på dine vilkår. Dra inn PDF-en eller velg en fil nedenfor."
-uploadCta = "Last opp innkjøpsordre"
-uploadTitle = "Last opp innkjøpsordren din"
 
 [portal.procurement.payment]
 description = "Tilbudet ditt er akseptert og lisensen din er allerede aktiv — teamet ditt kan starte med én gang. Betal den første fakturaen når du er klar; du kan betale eller laste den ned her, ingen e-post nødvendig."
+downloadAgreement = "Last ned signert avtale"
 downloadInvoice = "Last ned faktura"
-simulate = "Simuler mottatt betaling (demo)"
+eyebrow = "Betaling"
 title = "Abonnement opprettet"
 viewInvoice = "Vis og betal faktura"
 
+[portal.procurement.review]
+acceptCta = "Godta tilbud"
+annual = "Årsavgift (år 1)"
+downloadCta = "Last ned tilbud"
+poNumber = "Innkjøpsordre: {{po}}"
+renewal = "Fornyes til {{amount}}/år etter perioden (+{{pct}} % KPI)"
+tcv = "{{years}}-års periode, betalt i sin helhet på forhånd: {{tcv}}"
+validUntil = "Gyldig til {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Kunne ikke laste planleggeren."
 fallbackLink = "Åpne planlegging i en ny fane"
+loading = "Laster planlegger..."
 subtitle = "Løsningsingeniøren din vil gå gjennom utrullingen med teamet ditt. Velg et tidspunkt som passer deg."
 title = "Planlegg en samtale"
 
-[portal.procurement.status]
-action = "Handling kreves"
-available = "Tilgjengelig"
-complete = "Fullført"
-pending = "Venter"
-request = "På forespørsel"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Forseglet, ingen utgående trafikk"
+back = "Tilbake"
+businessName = "Bedriftsnavn"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Administrert, raskest start"
+continue = "Fortsett"
+deployment = "Hvor skal det distribueres?"
+eula = "Jeg godtar Stirling EULA og kommersielle vilkår."
+fullName = "Fullt navn"
+fullNamePlaceholder = "Navnet ditt"
+invites = "Inviter teammedlemmer · valgfritt"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Planlegg en samtale"
+seats = "Personer som tester"
+seatsPlaceholder = "f.eks. 15"
+selfhost = "Selvhostet"
+selfhostSub = "Docker eller Kubernetes"
+start = "Start prøveperiode"
+stepOf = "Trinn {{n}} av {{total}}"
+subtitle = "Gratis i 14 dager, ingen kort kreves."
+subtitleDetails = "Noen få detaljer for tilbudet og avtalen din."
+talkFirst = "Foretrekker du å snakke først?"
+title = "Sett opp prøveperioden din"
+viewEula = "Les den"
+workEmail = "Jobb-e-post"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Forlengelse legger til 7 dager og varsler løsningsingeniøren din."
@@ -7808,20 +8685,6 @@ maxed = "Maksimert"
 subtitle = "Den gratis prøveperioden din varer til {{date}}. Ingen kort kreves."
 title = "Enterprise-prøveperiode"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Priser for forpliktet volum, SSO + SCIM + RBAC for hele organisasjonen, 90-dagers uforanderlig revisjonsspor og en dedikert SE."
-homeCta = "Start prøveperiode →"
-homeHeadline = "Behandle millioner av PDF-er."
-
-[portal.recentActivity]
-title = "Nylig aktivitet"
-viewAll = "Vis alle"
-
-[portal.recentActivity.empty]
-description = "Pipeline-kjøringer, utrullinger og agenthendelser vises her."
-title = "Ingenting her ennå"
-
 [portal.search]
 ariaLabel = "Søk"
 placeholder = "Søk i Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Administrator"
 [portal.settings.sections]
 account-link = "Kontokobling"
 
-[portal.shell.header]
-accountFallback = "Konto"
-accountMenu = "Kontomeny"
-darkMode = "Mørk modus"
-lightMode = "Lys modus"
-search = "Søk"
-searchPlaceholder = "Søk…"
-signOut = "Logg av"
-switchToDark = "Bytt til mørkt tema"
-switchToLight = "Bytt til lyst tema"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumenter"
 linkAccount = "Koble til Stirling-konto"
-planEditor = "Editor-abonnement"
-planEnterprise = "Enterprise-abonnement"
-planProcessor = "Processor-abonnement"
 primaryNav = "Primær navigasjon"
 switchApp = "Bytt app"
 
+[portal.shell.topbar]
+closeNav = "Lukk navigasjon"
+openNav = "Åpne navigasjon"
+search = "Søk"
+
 [portal.sources]
 subtitle = "Gjenbrukbare inndatakoblinger som mater dokumenter inn i Stirling. Konfigurer en kobling én gang, og referer deretter til den fra et hvilket som helst antall policyer. Klikk på en rad for konfigurasjonen og hvilke policyer som bruker den."
 title = "Kilder"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Koble til kilde"
 
+[portal.sources.builder]
+back = "Tilbake til kilder"
+backToTypes = "Alle kildetyper"
+cancel = "Avbryt"
+chooseHint = "Velg hvor dokumenter kommer fra. Nedtonede tilkoblinger er på vei."
+comingSoon = "Kommer snart"
+comingSoonHeading = "Kommer snart"
+create = "Opprett kilde"
+createTitle = "Koble til en kilde"
+delete = "Slett"
+editTitle = "Rediger kilde"
+enabled = "Aktivert"
+save = "Lagre endringer"
+
+[portal.sources.builder.folderAccess]
+description = "Mappeautomatiseringer kan bare bruke mapper en administrator har tillatt. Legg den til under innstillingene for mappetilgang, og prøv igjen."
+openSettings = "Innstillinger for mappetilgang"
+title = "Denne mappen er ikke tillatt"
+
 [portal.sources.delete]
 body = "Slette \"{{name}}\"? Dette kan ikke angres. Policyer som refererer til den, må oppdateres."
 cancel = "Avbryt"
 confirm = "Slett"
 title = "Slette kilde?"
 
-[portal.sources.detail]
-closeAriaLabel = "Lukk detaljer"
-delete = "Slett kilde"
-docs24h = "Siste 24 t"
-docs30d = "Siste 30 dager"
-docsTotal = "Totalt sett"
-docsTrend = "Dokumenter de siste 30 dagene"
-documents = "Dokumenter"
-edit = "Rediger"
-notReferenced = "Den refereres ikke av noen policy, så den er trygg å slette."
-pause = "Sett på pause"
-resume = "Fortsett"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Brukt av"
-
 [portal.sources.empty]
 description = "Koble til en mappe (og snart skylagring) slik at policyene dine har et sted å hente dokumenter fra."
 title = "Ingen kilder koblet til ennå"
@@ -7899,18 +8754,57 @@ inUse = "I bruk"
 total = "Koblinger"
 unused = "Ubrukt"
 
+[portal.sources.networkFields.connection]
+helperText = "Den lagrede tilkoblingen med serveradresse og legitimasjon. Gjenbrukes av hver kilde som refererer til den."
+label = "Tilkobling"
+
+[portal.sources.networkFields.directory]
+helperText = "Mappe på serveren som skal sjekkes, relativt til innloggingshjemmet eller delingsroten. La stå tomt for roten."
+label = "Mappe"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume fjerner hver fil fra serveren når hver retningslinje har behandlet den."
+label = "Lesemodus"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: behandle hver fil én gang"
+snapshot = "Snapshot: les mappen på nytt ved hver kjøring"
+
+[portal.sources.networkFields.recursive]
+label = "Mappedybde"
+
+[portal.sources.networkFields.recursive.options]
+all = "Inkluder undermapper"
+top = "Kun øverste nivå"
+
 [portal.sources.status]
 active = "Aktiv"
 disabled = "Deaktivert"
 unused = "Ubrukt"
 
 [portal.sources.table]
+documents = "Dokumenter"
 source = "Kilde"
 status = "Status"
 usedBy = "Policyer"
 
+[portal.sources.types.box]
+description = "Hent dokumenter fra Box-mapper teamet ditt allerede deler."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Hent dokumenter fra en delt Dropbox-mappe."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenter teamet ditt har behandlet i editoren, på tvers av retningslinje- og AI-kjøringer."
 label = "Editor"
+noPolicies = "Ingen retningslinjer kjørt fra editoren ennå."
+
+[portal.sources.types.email]
+description = "Gjør vedlegg sendt til en dedikert postboks om til dokumenter."
+label = "E-postinnboks"
 
 [portal.sources.types.folder]
 description = "Overvåk en katalog på serveren for nye dokumenter."
@@ -7943,25 +8837,80 @@ label = "Mappedybde"
 all = "Inkluder undermapper"
 top = "Kun toppnivå"
 
+[portal.sources.types.ftp]
+description = "Sjekk en FTP- eller FTPS-servermappe for nye dokumenter."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Hent dokumenter fra delte Google Drive-mapper."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Overvåk en SMB-nettverksdeling for nye dokumenter."
+label = "Nettverksdisk"
+
+[portal.sources.types.onedrive]
+description = "Overvåk OneDrive-mapper for nye dokumenter."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Hent dokumenter fra en Amazon S3- eller S3-kompatibel bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Den lagrede tilkoblingen som inneholder bucketen og legitimasjonen. Gjenbrukes av hver kilde og pipeline-utdata som refererer til den."
+label = "Tilkobling"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume fjerner hvert objekt fra bucketen når hver retningslinje har behandlet det."
+label = "Lesemodus"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: behandle hvert objekt én gang"
+snapshot = "Snapshot: les bucketen på nytt ved hver kjøring"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Bare objekter med nøkler som starter med dette prefikset, behandles."
+label = "Nøkkelprefiks"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Sjekk en SFTP-dropmappe for nye dokumenter."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Hent dokumenter fra SharePoint-dokumentbiblioteker."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Kilde"
 
+[portal.sources.types.webhook]
+createNote = "En leverings-URL og signeringshemmelighet genereres når du oppretter denne webhooken. Avsendere POST-er dokumenter til den URL-en, og de refererende retningslinjene kjøres ved ankomst."
+description = "Motta dokumenter via signert HTTP POST fra et hvilket som helst eksternt system."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Leverings-URL"
+secretNote = "Signeringshemmeligheten vises én gang, når webhooken opprettes. Opprett kilden på nytt for å rotere den."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopier"
+done = "Ferdig"
+secret = "Signeringshemmelighet"
+secretHelp = "Signer rå brødtekst for hver levering med denne nøkkelen (HMAC-SHA256) og send den som X-Stirling-Signature-headeren."
+secretWarning = "Kopier signeringshemmeligheten nå. Av hensyn til sikkerheten din vises den bare én gang og kan ikke hentes senere."
+title = "Webhook opprettet"
+url = "Leverings-URL"
+usage = "POST hvert dokument som rå forespørselsbrødtekst til leverings-URL-en med en binær innholdstype (application/pdf eller application/octet-stream). Refererende retningslinjer kjøres automatisk ved ankomst."
+
 [portal.sources.wizard]
-back = "Tilbake"
-cancel = "Avbryt"
-continue = "Fortsett"
-editTitle = "Rediger kilde"
 name = "Navn"
 namePlaceholder = "f.eks. kravmottak"
-save = "Lagre endringer"
-subtitle = "Trinn {{current}} av {{total}} · {{label}}"
-title = "Koble til en kilde"
 type = "Type"
 
-[portal.sources.wizard.steps]
-chooseType = "Velg type"
-configure = "Konfigurer"
-review = "Se gjennom og koble til"
+[portal.stepModal]
+close = "Lukk"
 
 [portal.usage]
 managePayment = "Administrer betaling"
@@ -8021,16 +8970,9 @@ summary = "Eier et team — administrerer medlemmenes ressurser og delte konfigu
 2 = "Portaltilgang via standardpolicyen"
 3 = "Alt medlem kan gjøre"
 
-[portal.welcome]
-ariaLabel = "Velkommen til Stirling PDF"
-badge = "Åpen kildekode"
-installEditor = "Installer Editor"
-inviteTeammates = "Inviter teammedlemmer"
-openInBrowser = "Åpne i nettleser"
-perks = "Gratis for alltid · Kan driftes selv"
-subtitle = "Verdens sikreste PDF Editor er gratis for team i alle størrelser. Inkluderer 60+ PDF-operasjoner og SSO."
-title = "Velkommen til"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Ubegrenset"
 
 [printFile]
 title = "Skriv ut fil"
@@ -8613,6 +9555,14 @@ text = "Roter PDF-sidene med eller mot klokken i 90-graders trinn. Alle sider i
 [rotate.tooltip.header]
 title = "Oversikt over rotasjonsinnstillinger"
 
+[ruler]
+clearAll = "Fjern alt"
+hideAllLabels = "Skjul alle etiketter"
+hideSmallLabels = "Skjul små etiketter"
+physicalValues = "Fysisk"
+scaled = "Skalert"
+showAllLabels = "Vis alle etiketter"
+
 [sanitize]
 desc = "Fjern potensielt skadelige elementer fra PDF-filer."
 sanitizationResults = "Saniteringsresultater"
@@ -8654,31 +9604,45 @@ label = "Fjern XMP-metadata"
 [sanitize.steps]
 settings = "Innstillinger"
 
-[sanitizePdf]
-tags = "rydde opp,sikker,trygg,fjern trusler"
-
 [sanitizePDF]
 title = "Rensker PDF"
 
+[sanitizePdf]
+tags = "rydde opp,sikker,trygg,fjern trusler"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Juster side-skala"
 
+[scaleSettings]
+activeScale = "Aktiv skala"
+apply = "Bruk skala"
+applyCalibration = "Bruk kalibrering"
+calculatedScale = "Beregnet skala"
+calibrate = "Kalibrer"
+calibrating = "Kalibrerer"
+calibrationDistanceRequired = "Angi en faktisk avstand større enn null"
+calibrationInvalid = "Kan ikke beregne målestokk fra denne målingen"
+calibrationPaperDistance = "Målt sideavstand: {{distance}}"
+calibrationTitle = "Kalibrer målestokk"
+calibrationTooltip = "Mål en kjent avstand for å beregne målestokken automatisk"
+customScale = "Egendefinert målestokk"
+noneSet = "Ingen egendefinert målestokk angitt"
+presets = "Forhåndsinnstilte målestokker"
+ratio = "Målestokkforhold"
+ratioHelp = "Forhold: 1 sideenhet = X faktiske enheter"
+ratioPlaceholder = "f.eks. 100"
+ratioPositive = "Forholdet må være større enn null"
+ratioRequired = "Forhold er påkrevd"
+realDistance = "Faktisk avstand"
+realDistancePlaceholder = "f.eks. 5"
+reset = "Tilbakestill til standard"
+unit = "Enhet"
+unitInvalid = "Ugyldig enhet: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Vinkelgrense:"
-10 = "Angir størrelsen på kanten som legges til og fjernes for å forhindre hvite kanter i utdataen (standard: 1)."
-2 = "Angir den minimale absolutte vinkelen som kreves for at bildet skal roteres (standard: 10)."
-3 = "Toleranse:"
-4 = "Bestemmer området for fargevariasjon rundt estimert bakgrunnsfarge (standard: 30)."
-5 = "Minimumsområde:"
-6 = "Angir minimumsområde terskel for et bilde (standard: 10000)."
-7 = "Minimumskonturområde:"
-8 = "Angir minimumskonturområde terskel for et bilde"
-9 = "Kantstørrelse:"
-
 [scannerImageSplit]
 submit = "Ekstraher bildeskanninger"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Hva dette gjør"
 whatThisDoesDesc = "Finner og ekstraherer automatisk hvert foto fra en skannet side eller et sammensatt bilde—ingen manuell beskjæring."
 whenToUse = "Når du bør bruke det"
 
+[ScannerImageSplit.selectText]
+1 = "Vinkelgrense:"
+10 = "Angir størrelsen på kanten som legges til og fjernes for å forhindre hvite kanter i utdataen (standard: 1)."
+2 = "Angir den minimale absolutte vinkelen som kreves for at bildet skal roteres (standard: 10)."
+3 = "Toleranse:"
+4 = "Bestemmer området for fargevariasjon rundt estimert bakgrunnsfarge (standard: 30)."
+5 = "Minimumsområde:"
+6 = "Angir minimumsområde terskel for et bilde (standard: 10000)."
+7 = "Minimumskonturområde:"
+8 = "Angir minimumskonturområde terskel for et bilde"
+9 = "Kantstørrelse:"
+
 [search]
 noResults = "Ingen treff"
 placeholder = "Skriv inn søkeord..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Stirling-PDF-serveren din er frakoblet og \"{{endpoin
 [session]
 expired = "Økten din har utløpt. Vennligst oppdater siden og prøv igjen."
 
-[sessionManagement.tooltip]
-header = "Administrere signeringsøkter"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Nye deltakere legges til på slutten av signeringsrekkefølgen"
-bullet2 = "Kan ikke legge til deltakere etter at økten er ferdigstilt"
-bullet3 = "Hver deltaker mottar et varsel når det er deres tur"
-description = "Du kan legge til flere deltakere i en aktiv økt når som helst før ferdigstilling."
-title = "Legge til deltakere"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Full ferdigstillelse</b>: Alle deltakere har signert"
-bullet2 = "<b>Delvis ferdigstillelse</b>: Noen deltakere har ikke signert ennå"
-bullet3 = "Usignerte deltakere blir utelatt fra det endelige dokumentet"
-bullet4 = "Når ferdigstilt, kan du laste inn den signerte PDF-en i aktive filer"
-description = "Ferdigstilling kombinerer alle signaturer i én signert PDF. Denne handlingen kan ikke angres."
-title = "Ferdigstilling av økt"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Kan ikke fjerne deltakere som allerede har signert"
-bullet2 = "Fjernede deltakere mottar ikke lenger varsler"
-bullet3 = "Signeringsrekkefølgen justeres automatisk"
-description = "Deltakere kan fjernes fra økter før de signerer."
-title = "Fjerne deltakere"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Hver signatur legges til sekvensielt på PDF-en"
-bullet2 = "Senere signerer kan se tidligere signaturer"
-bullet3 = "Kritisk for godkjenningsflyter og juridisk sporbarhet"
-description = "Rekkefølgen du angir når du oppretter økten bestemmer hvem som signerer først."
-title = "Signeringsrekkefølge"
-
 [settings]
 close = "Lukk"
 
+[settings.ai]
+documents = "Dokumenter og RAG"
+general = "Generelt"
+limits = "Grenser og ytelse"
+models = "Modeller og leverandører"
+title = "AI"
+
 [settings.configuration]
 advanced = "Avansert"
 database = "Database"
 endpoints = "Endepunkter"
 features = "Funksjoner"
+folderAccess = "Mappetilgang"
 mcp = "MCP Server"
 storageSharing = "Fil-lagring og deling"
 systemSettings = "Systeminnstillinger"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Standard PDF-redigerer"
 defaultPdfEditorActive = "Stirling PDF er din standard PDF-redigerer"
 defaultPdfEditorChecking = "Sjekker..."
 defaultPdfEditorInactive = "En annen app er satt som standard"
+defaultPdfEditorRemind = "Minn meg på å angi som standard"
+defaultPdfEditorRemindDescription = "Vis et banner når Stirling PDF ikke er standard PDF-programmet ditt."
 defaultPdfEditorSet = "Allerede standard"
 defaultStartupView = "Standardvisning ved oppstart"
 defaultStartupViewDescription = "Velg hvilken fane som er aktiv i venstre kolonne når appen starter"
@@ -8817,9 +9771,18 @@ languageDescription = "Velg visningsspråk"
 logout = "Logg ut"
 setAsDefault = "Sett som standard"
 theme = "Tema"
+themeAccent = "Aksentfarge"
+themeAccentCustom = "Egendefinert farge"
+themeAccentCustomHint = "Egendefinert (standard anbefales)"
+themeAccentDark = "Aksentfarge for mørk modus"
+themeAccentDefault = "Standard"
+themeAccentDefaultHint = "Standardtema (anbefales)"
+themeAccentDescription = "Knapper, lenker og uthevinger følger den, og den farger appen diskret. Lys og mørk har hver sin. System bruker den som er aktiv."
+themeAccentLight = "Aksentfarge for lys modus"
 themeDark = "Mørk"
 themeDescription = "Bytt mellom lys og mørk modus"
 themeLight = "Lys"
+themeReset = "Gjenopprett tema til standard"
 themeSystem = "System"
 title = "Generelt"
 user = "Bruker"
@@ -8833,6 +9796,12 @@ intro = "Aktiver brukergodkjenning, teamadministrasjon og arbeidsområdefunksjon
 learnMore = "Les mer i dokumentasjonen"
 title = "For systemadministratorer"
 
+[settings.general.loginLanding]
+description = "Velg hvilken app som åpnes når du logger på Stirling Cloud."
+editor = "Redigerer"
+processor = "Prosessor"
+title = "Etter pålogging"
+
 [settings.general.mode]
 fullscreen = "Fullskjerm"
 sidebar = "Sidepanel"
@@ -9041,6 +10010,11 @@ security = "Sikkerhet"
 telegram = "Telegram"
 title = "Sikkerhet og autentisering"
 
+[settings.signOut]
+confirm = "Er du sikker på at du vil logge av?"
+submit = "Logg av"
+title = "Logg av"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Last opp til server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "klikk her"
+fallback = "Hvis den ikke åpnet automatisk,"
+opening = "Åpner Swagger UI i en ny fane..."
 tags = "api,dokumentasjon,swagger,endepunkter,utvikling"
 title = "API-dokumentasjon"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Velg filer i Aktive filer for å kjøre dette verktøyet"
 singleFileScope = "Gjelder kun: {{fileName}}"
 viewerMode = "Bytt til filredigereren for å velge flere filer."
 
+[toolFormat]
+ANY = "en hvilken som helst fil"
+CBR = "et tegneseriearkiv (CBR)"
+CBZ = "et tegneseriearkiv (CBZ)"
+CSV = "en CSV fil"
+EBOOK = "en e-bok"
+EMAIL = "en e-post"
+EXCEL = "et regneark"
+HTML = "en nettside"
+IMAGE = "bilder"
+JAVASCRIPT = "en JavaScript fil"
+JSON = "en JSON fil"
+MARKDOWN = "en Markdown fil"
+NONE = "ingen fil"
+PCL = "en PCL utskriftsfil"
+PDF = "en PDF"
+PDF_ENCRYPTED = "en passordbeskyttet PDF"
+POSTSCRIPT = "en PostScript fil"
+PPT = "en presentasjon"
+TEXT = "en tekstfil"
+VIDEO = "en video"
+WORD = "et Word dokument"
+XML = "en XML fil"
+XPS = "et XPS dokument"
+ZIP = "et ZIP arkiv"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Tilbake til alle verktøy"
 collapse = "Skjul panel"
 expand = "Utvid panel"
 goBack = "Gå tilbake"
+pdfTools = "PDF-verktøy"
 placeholder = "Velg et verktøy for å komme i gang"
 premiumFeature = "Premium-funksjon:"
+searchTools = "Søk etter verktøy"
 toolsHeader = "Verktøy"
 viewAllTools = "Vis alle verktøy"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Ingen verktøy funnet"
 quickAccess = "HURTIGTILGANG"
 searchPlaceholder = "Søk i verktøy..."
 
-[toolPicker.categories]
-advancedTools = "Avanserte verktøy"
-recommendedTools = "Anbefalte verktøy"
-standardTools = "Standardverktøy"
-
 [toolPicker.subcategories]
 advancedFormatting = "Avansert formatering"
 automation = "Automatisering"
@@ -9950,16 +10950,31 @@ title = "Brukere"
 you = "(deg)"
 
 [users.action]
+cancelInvite = "Avbryt invitasjon"
 deleteTeam = "Slett team"
 disableMfa = "Tilbakestill MFA"
 move = "Flytt til team"
 reinstate = "Gjeninnsett"
 remove = "Fjern fra org"
+removeTeam = "Fjern fra team"
 rename = "Gi team nytt navn"
 resetPw = "Tilbakestill passord"
 suspend = "Suspender"
 unlock = "Lås opp konto"
 
+[users.activity]
+daysAgo = "{{count}} d siden"
+hoursAgo = "{{count}} t siden"
+justNow = "Akkurat nå"
+minutesAgo = "{{count}} min siden"
+monthsAgo_one = "{{count}} måned siden"
+monthsAgo_other = "{{count}} måneder siden"
+never = "Aldri"
+weeksAgo_one = "{{count}} uke siden"
+weeksAgo_other = "{{count}} uker siden"
+yearsAgo_one = "{{count}} år siden"
+yearsAgo_other = "{{count}} år siden"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Godkjenner policy"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Avbryt invitasjonen til {{email}}? De vil ikke kunne bli med med den nåværende lenken."
+cancelInviteTitle = "Avbryt invitasjon"
 deleteTeamBody = "Slette teamet {{name}}? Teamet må være tomt først - flytt medlemmene til et annet team, og det kan ikke fortsatt eie noen integrasjonskonfigurasjoner."
 deleteTeamTitle = "Slett team"
 disableMfaBody = "Fjerne MFA-registreringen til {{name}}? De setter den opp igjen ved neste pålogging hvis det kreves."
 disableMfaTitle = "Tilbakestill MFA"
 removeBody = "Fjerne {{name}} permanent fra organisasjonen? Dette kan ikke angres."
+removeTeamBody = "Fjerne {{name}} fra teamet? De beholder kontoen sin, men mister tilgang til dette teamets ressurser."
 removeTitle = "Fjern medlem"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Brukernavn"
 usernameError = "Brukernavnet må være minst 3 tegn"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Invitert av {{who}}"
+cancel = "Avbryt"
+count = "{{count}} ventende"
+desc = "Inviterte personer som ikke har blitt med ennå. De opptar en plass til de godtar."
+expiresInDays_one = "Utløper om {{count}} dag"
+expiresInDays_other = "Utløper om {{count}} dager"
+expiresToday = "Utløper i dag"
+title = "Ventende invitasjoner"
+
 [users.loadError]
 description = "Noe gikk galt ved kontakt med backend, eller du har ikke tilgang. Prøv igjen."
 title = "Kunne ikke laste inn medlemmer"
@@ -10212,9 +11240,11 @@ title = "Vedlegg"
 
 [viewer.bookmarks]
 bookmarkTitle = "Bokmerketittel"
+bookmarkTitleRequired = "Bokmerketittel er påkrevd"
 closeSidebar = "Lukk sidepanelet for bokmerker"
 collapseAll = "Skjul alle bokmerker"
 expandAll = "Utvid alle bokmerker"
+searchPlaceholder = "Søk i bokmerker"
 
 [viewer.comments]
 addComment = "Legg til kommentar"
@@ -10605,30 +11635,6 @@ title = "Vannmerketekst"
 image = "Bilde"
 text = "Tekst"
 
-[wetSignature.tooltip]
-header = "Metoder for oppretting av signatur"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Tilpass pennens farge og tykkelse"
-bullet2 = "Slett og tegn på nytt til du er fornøyd"
-bullet3 = "Fungerer på berøringsenheter (nettbrett, telefoner)"
-description = "Lag en håndskrevet signatur med musen eller berøringsskjermen. Best for personlige, autentiske signaturer."
-title = "Tegn signatur"
-
-[wetSignature.tooltip.type]
-bullet1 = "Velg mellom flere skrifttyper"
-bullet2 = "Tilpass tekststørrelse og -farge"
-bullet3 = "Perfekt for standardiserte signaturer"
-description = "Generer en signatur fra skrevet tekst. Rask og konsistent, egnet for forretningsdokumenter."
-title = "Skriv signatur"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Støtter PNG, JPG og andre bildeformater"
-bullet2 = "Gjennomsiktige bakgrunner anbefales for best resultat"
-bullet3 = "Bildet vil størrelsestilpasses for å passe signaturområdet"
-description = "Last opp et forhåndslaget signaturbilde. Ideelt hvis du har en skannet signatur eller firmalogo."
-title = "Last opp signaturbilde"
-
 [workbenchBar]
 activeFiles = "Aktive filer"
 annotations = "Annoteringer"
@@ -10652,6 +11658,7 @@ redact = "Sladd"
 rotateLeft = "Roter til venstre"
 rotateRight = "Roter til høyre"
 ruler = "Linjal / Måling"
+rulerSettings = "Målestokkinnstillinger"
 save = "Lagre"
 saveAll = "Lagre alt"
 saveAs = "Lagre som"
diff --git a/frontend/editor/public/locales/pl-PL/translation.toml b/frontend/editor/public/locales/pl-PL/translation.toml
index 2fc22fffff..2561e9caa0 100644
--- a/frontend/editor/public/locales/pl-PL/translation.toml
+++ b/frontend/editor/public/locales/pl-PL/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "wybrane pliki"
 font = "Czcionka"
 fontSizeTooltip = "Rozmiar tekstu numeru strony w punktach. Większe wartości tworzą większy tekst."
 fontTypeTooltip = "Rodzina czcionek dla numerów stron. Wybierz zgodnie ze stylem dokumentu."
-genericSubmit = "Wyślij"
 green = "zielony"
 help = "Pomoc"
-imgPrompt = "Wybierz obraz(y)"
 incorrectPasswordMessage = "Nieprawidłowe hasło."
 info = "informacje"
 invalidUndoData = "Nie można cofnąć: nieprawidłowe dane operacji"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Umowa logowania"
 logOut = "Wyloguj się"
 marginTooltip = "Odległość między numerem strony a krawędzią strony."
 moreOptions = "Więcej opcji"
-multiPdfPrompt = "Wybierz PDF (2+)"
 never = "Nigdy"
 no = "nie"
 noFileSelected = "Nie wybrano pliku. Prześlij jeden."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Kolejność stron (wprowadź listę numerów stron oddzielony
 pages = "Strony"
 pageSelectionPrompt = "Niestandardowy wybór strony (Enter a comma-separated list of page numbers 1,5,6 or Functions like 2n+1) :"
 password = "hasło"
-pdfPrompt = "Wybierz PDF"
 pin = "Przypnij plik (pozostaw aktywny po uruchomieniu narzędzia)"
 pro = "Pro"
 processingComplete = "Twój plik jest gotowy."
@@ -356,6 +352,7 @@ text = "Te uprawnienia kontrolują, co użytkownicy mogą robić z PDF. Najskute
 title = "Zmień uprawnienia"
 
 [addStamp]
+preview = "Podgląd stempla"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Pobieranie ręczne: kliknij linki i umieść pliki w folderze tes
 noLanguages = "Nie znaleziono języków tessdata w skonfigurowanym katalogu."
 permissionNotice = "Ścieżka tessdata nie jest zapisywalna. Pobrania zostaną otwarte w przeglądarce; zapisz pliki .traineddata ręcznie w folderze tessdata."
 
+[admin.settings.ai.documents]
+description = "Skonfiguruj model embeddingów i ustawienia pobierania używane do odpowiadania na pytania dotyczące dokumentów. Po zapisaniu stosowane do silnika AI."
+title = "Dokumenty i RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Pozostaw puste, aby użyć własnych poświadczeń środowiskowych silnika. Dotyczy samodzielnie hostowanych wdrożeń z jednym silnikiem."
+generic = "Klucz API embeddingów"
+openai = "Klucz API OpenAI"
+setPlaceholder = "Zapisano — pozostaw puste, aby zachować bieżący klucz"
+voyageai = "Klucz API VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Bazowy URL punktu końcowego embeddingów zgodnego z OpenAI / Ollama, np. http://ollama:11434/v1. Musi wskazywać zaufany wewnętrzny punkt końcowy (wrażliwe na SSRF)."
+label = "Bazowy URL embeddingów"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nazwa modelu embeddingów. Dowolny tekst; sugestie są tylko podpowiedziami."
+label = "Model embeddingów"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Dostawca używany do zamiany tekstu dokumentu na embeddingi wektorowe."
+label = "Dostawca embeddingów"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maksymalna liczba wyszukiwań pobierania, które agent może uruchomić na żądanie."
+label = "Maks. liczba wyszukiwań"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Zmiana modelu embeddingów zaczyna działać natychmiast, ale dokumenty zindeksowane poprzednim modelem muszą zostać ponownie zindeksowane, aby wyszukiwanie zwracało poprawne wyniki."
+title = "Wymagane ponowne indeksowanie"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Jeśli zmieniono model embeddingów, ponownie zindeksuj istniejące dokumenty, aby wyszukiwanie używało nowego modelu."
+
+[admin.settings.ai.documents.topK]
+description = "Liczba najtrafniejszych fragmentów pobieranych na wyszukiwanie."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Połącz Stirling z silnikiem Python AI i wybierz, które funkcje AI mają być dostępne. Zmiany zostaną zastosowane po ponownym uruchomieniu."
+title = "Silnik AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Włącz lub wyłącz poszczególne funkcje AI. Wyłączone funkcje są ukryte w aplikacji."
+title = "Możliwości"
+
+[admin.settings.ai.general.enabled]
+description = "Przełącznik główny. Gdy jest wyłączony, żadne narzędzia AI, agenci ani wywołania silnika nie są dostępne."
+label = "Włącz AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Asystent konwersacyjny do pracy z PDF."
+label = "Asystent czatu"
+
+[admin.settings.ai.general.features.classify]
+description = "Automatycznie kategoryzuj dokumenty według typu lub zawartości."
+label = "Klasyfikacja dokumentów"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Wygeneruj nowy PDF (np. z HTML) za pomocą agenta AI."
+label = "Utwórz PDF z polecenia"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Zadawaj pytania i otrzymuj odpowiedzi oparte na przesłanym dokumencie."
+label = "Pytania o dokument"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Sprawdzaj dokumenty pod kątem błędów matematycznych i liczbowych."
+label = "Audytor matematyczny"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Dodawaj komentarze recenzyjne i adnotacje utworzone przez AI do PDF."
+label = "Agent komentarzy PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Limit czasu dla cięższych operacji agenta, takich jak generowanie dokumentów."
+label = "Limit czasu długich operacji (sekundy)"
+
+[admin.settings.ai.general.note]
+body = "Silnik AI działa jako oddzielna usługa. Jego wspólny sekret"
+body2 = "jest ustawiany przez zmienną środowiskową kontenera. Klucze API dostawców można wprowadzić na tych stronach lub podać jako zmienne środowiskowe silnika; klucze wprowadzone tutaj są przesyłane do silnika po zapisaniu."
+title = "O silniku AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Limit czasu dla strumieniowanych (token po tokenie) odpowiedzi czatu."
+label = "Limit czasu strumienia (sekundy)"
+
+[admin.settings.ai.general.test]
+button = "Testuj połączenie"
+failBody = "Silnik AI nie odpowiedział. Sprawdź URL, czy kontener silnika działa oraz czy AI jest włączone (po włączeniu wymagane jest ponowne uruchomienie)."
+failTitle = "Silnik AI nieosiągalny"
+okBody = "Silnik AI odpowiedział na kontrolę stanu."
+okTitle = "Silnik AI osiągalny"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Limit czasu dla standardowych żądań AI do silnika."
+label = "Limit czasu żądania (sekundy)"
+
+[admin.settings.ai.general.url]
+description = "Wewnętrzny URL silnika Python AI, np. http://stirling-pdf-engine:5001."
+label = "URL silnika AI"
+
+[admin.settings.ai.limits]
+description = "Zabezpieczenia określające, ile pracy mogą wykonać żądania AI i ile z nich może działać równocześnie. Po zapisaniu stosowane do silnika AI."
+title = "Limity i wydajność"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Zabezpieczenie: odrzuć żądania AI, których wyodrębniony tekst przekracza tę długość."
+label = "Maks. liczba znaków na żądanie"
+
+[admin.settings.ai.limits.maxPages]
+description = "Zabezpieczenie: odrzuć żądania AI przekraczające tę liczbę stron PDF."
+label = "Maks. liczba stron na żądanie"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maksymalna liczba jednoczesnych wywołań modelu w toku w całym silniku."
+label = "Maks. równoległość modelu"
+
+[admin.settings.ai.models]
+description = "Wybierz dostawcę LLM oraz inteligentne/szybkie modele używane przez silnik AI. Po zapisaniu stosowane do silnika AI."
+title = "Modele i dostawcy"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Klucz API Anthropic"
+description = "Pozostaw puste, aby użyć własnych poświadczeń środowiskowych silnika. Dotyczy samodzielnie hostowanych wdrożeń z jednym silnikiem."
+generic = "Klucz API"
+openai = "Klucz API OpenAI"
+setPlaceholder = "Zapisano — pozostaw puste, aby zachować bieżący klucz"
+
+[admin.settings.ai.models.baseUrl]
+description = "Bazowy URL punktu końcowego zgodnego z OpenAI / Ollama, np. http://ollama:11434/v1."
+label = "Bazowy URL dostawcy"
+warning = "Bazowy URL musi wskazywać zaufany wewnętrzny punkt końcowy. Silnik będzie wykonywać do niego żądania po stronie serwera, więc niezaufana wartość jest wrażliwa na SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maksymalna liczba tokenów wyjściowych dla szybkiego modelu."
+label = "Maks. tokeny szybkiego modelu"
+
+[admin.settings.ai.models.fastModel]
+description = "Tańszy, szybszy model do lekkich zadań. Dowolny tekst; sugestie są tylko podpowiedziami."
+label = "Szybki model"
+
+[admin.settings.ai.models.provider]
+description = "Z którym dostawcą LLM komunikuje się silnik."
+label = "Dostawca"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maksymalna liczba tokenów wyjściowych dla inteligentnego modelu."
+label = "Maks. tokeny inteligentnego modelu"
+
+[admin.settings.ai.models.smartModel]
+description = "Model o dużych możliwościach do złożonego rozumowania. Dowolny tekst; sugestie są tylko podpowiedziami."
+label = "Inteligentny model"
+
+[admin.settings.ai.saved]
+body = "Zmiany są automatycznie przesyłane do silnika AI."
+bodyNoPush = "Ustawienia zapisane. Zostaną zastosowane następnym razem, gdy silnik AI pobierze swoją konfigurację."
+title = "Ustawienia AI zapisane"
+
 [admin.settings.badge]
 clickToUpgrade = "Kliknij, aby zobaczyć szczegóły planu"
 
@@ -938,6 +1094,25 @@ label = "Generuj ponownie przy starcie"
 description = "Liczba dni ważności certyfikatu"
 label = "Ważność certyfikatu (dni)"
 
+[admin.settings.folderAccess]
+description = "Katalogi, z których źródła folderów i wyjścia folderów mogą czytać oraz do których mogą zapisywać. To granica bezpieczeństwa: automatyzacje nigdy nie mogą wskazywać ścieżki serwera spoza tej listy."
+securityNote = "Pozostaw puste, aby całkowicie wyłączyć źródła folderów i wyjścia. Własny katalog konfiguracji Stirling jest zawsze niedostępny."
+title = "Dostęp do folderów"
+
+[admin.settings.folderAccess.implied]
+description = "Te katalogi zarządzane przez Stirling są zawsze dozwolone i nie można ich tutaj zmienić."
+serverStorage = "Przechowywanie plików na serwerze"
+title = "Zawsze dozwolone"
+watchedFolder = "Folder obserwowany potoku"
+
+[admin.settings.folderAccess.roots]
+add = "Dodaj"
+empty = "Brak dozwolonych folderów. Źródła folderów i wyjścia są obecnie wyłączone."
+hint = "Wprowadź ścieżki bezwzględne, na przykład /data/inbox."
+label = "Dozwolone foldery główne"
+placeholder = "/data/inbox"
+remove = "Usuń folder główny"
+
 [admin.settings.general]
 description = "Skonfiguruj ustawienia aplikacji w całym systemie, w tym branding i domyślne zachowanie."
 system = "System"
@@ -1842,6 +2017,15 @@ export = "Eksport"
 accessDenied = "Odmowa dostępu"
 insufficientPermissions = "Nie masz uprawnień do wykonania tej czynności."
 
+[auth.callback]
+completing = "Kończenie uwierzytelniania"
+invalidToken = "Logowanie OAuth nie powiodło się — nieprawidłowy token."
+missingToken = "Logowanie OAuth nie powiodło się — nie otrzymano tokenu."
+oauthFailed = "Logowanie OAuth nie powiodło się. Spróbuj ponownie."
+pleaseWait = "Poczekaj, kończymy logowanie."
+signedOut = "Wylogowano Cię. Zaloguj się ponownie."
+windowMayClose = "Możesz zamknąć to okno po zakończeniu."
+
 [auth.displayName]
 guest = "Gość"
 user = "Użytkownik"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Zabezpiecza dokumenty PDF poprzez usuwanie potencjalnie z
 description = "To narzędzie automatycznie zmieni nazwy plików PDF na podstawie ich zawartości. Analizuje dokument, aby znaleźć najbardziej odpowiedni tytuł z tekstu."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatycznie obróć"
+tags = "automatyczne obracanie,napraw orientację,do góry nogami,bokiem,wyprostuj,orientuj,wykryj orientację,popraw obrót,automatyczna orientacja,zeskanowane,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Próg pewności"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Tylko OCR"
+text = "Tylko tekst"
+title = "Metoda wykrywania"
+
+[autoRotate.error]
+failed = "Wystąpił błąd podczas automatycznego obracania PDF."
+
+[autoRotate.inferUndetected]
+title = "Obróć strony o niskiej pewności, aby pasowały"
+
+[autoRotate.report]
+applied = "{{degrees}}° zgodnie z ruchem wskazówek zegara"
+confidenceValue = "Pewność {{value}}"
+noChange = "Bez zmian"
+pageLabel = "Strona {{number}}"
+summary = "Obrócono {{rotated}} z {{total}} stron, {{unchanged}} pozostawiono bez zmian"
+title = "Raport wykrywania"
+
+[autoRotate.report.method]
+inferred = "Dopasowano"
+none = "Pominięto"
+osd = "OCR"
+text = "Tekst"
+
+[autoRotate.report.note]
+belowThreshold = "Poniżej progu"
+blankPage = "Strona jest pusta"
+inferredFromDocument = "Tak samo jak inne strony"
+noDominantDirection = "Mieszane kierunki tekstu"
+osdFailed = "Nie znaleziono czytelnego tekstu"
+osdNoVerdict = "Nie udało się określić orientacji"
+tesseractUnavailable = "OCR nie jest zainstalowany"
+tooFewGlyphs = "Za mało tekstu"
+
+[autoRotate.results]
+title = "Wyniki automatycznego obracania"
+
+[autoRotate.settings]
+title = "Ustawienia"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Jak pewne musi być sprawdzenie, zanim strona zostanie obrócona. Obniż, aby obracać więcej stron, podnieś, aby pozostawiać więcej stron bez zmian."
+title = "Próg pewności"
+
+[autoRotate.tooltip.description]
+text = "Określa, jaką orientację powinna mieć każda strona, i obraca ją we właściwą stronę. Strony, które są już ustawione pionowo, pozostają bez zmian."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto najpierw odczytuje tekst na stronie, a następnie analizuje stronę jako obraz, jeśli to nie wystarczy. Tylko tekst pomija sprawdzanie obrazu, co jest najszybsze dla dokumentów, które nigdy nie były skanowane. Tylko OCR traktuje każdą stronę jako obraz."
+title = "Metoda wykrywania"
+
+[autoRotate.tooltip.header]
+title = "Automatyczne obracanie"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Pustych lub prawie pustych stron nie można sprawdzić samodzielnie. Gdy każda strona, którą udało się odczytać, wymaga tego samego obrotu, te strony są obracane tak, aby do nich pasowały."
+title = "Obróć strony o niskiej pewności, aby pasowały"
+
 [autoSizeSplitPDF]
 tags = "pdf, dzielenie, dokument, organizacja"
 
@@ -2189,33 +2440,6 @@ keywords = "Słowa kluczowe: odd, even"
 numbers = "Liczby/zakresy: 5, 10-20"
 progressions = "Progresje: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Typy certyfikatów"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Zarządzany przez administratorów systemu"
-bullet2 = "Współdzielony między uprawnionymi użytkownikami"
-bullet3 = "Reprezentuje tożsamość firmy, nie osoby"
-bullet4 = "Najlepsze do: oficjalnych dokumentów, podpisów zespołowych"
-description = "Współdzielony certyfikat dostarczony przez twoją organizację. Używany do podpisywania w imieniu firmy."
-title = "Certyfikat organizacji"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generowany automatycznie przy pierwszym użyciu"
-bullet2 = "Powiązany z twoim kontem użytkownika"
-bullet3 = "Nie może być współdzielony z innymi użytkownikami"
-bullet4 = "Najlepsze do: dokumentów osobistych, indywidualnej odpowiedzialności"
-description = "Automatycznie generowany certyfikat unikalny dla twojego konta użytkownika. Odpowiedni do indywidualnych podpisów."
-title = "Certyfikat osobisty"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Wymaga pliku P12/PFX i hasła"
-bullet2 = "Może być wydany przez zewnętrzne urzędy certyfikacji"
-bullet3 = "Wyższy poziom zaufania dla dokumentów prawnych"
-bullet4 = "Najlepsze do: prawnie wiążących umów, zewnętrznej weryfikacji"
-description = "Użyj własnego certyfikatu PKCS#12. Zapewnia pełną kontrolę nad właściwościami certyfikatu."
-title = "Prześlij własny P12"
-
 [certSign]
 awaitingSignatures = "Oczekiwanie na podpisy"
 chooseCertificate = "Wybierz plik certyfikatu"
@@ -2542,34 +2766,6 @@ server = "Serwer"
 stepTitle = "Źródło certyfikatu"
 upload = "Prześlij"
 
-[certSign.tooltip.header]
-title = "O zarządzaniu podpisami"
-
-[certSign.tooltip.overview]
-bullet1 = "Sprawdzaj istniejące podpisy i ich ważność"
-bullet2 = "Wyświetlaj szczegółowe informacje o podpisujących i certyfikatach"
-bullet3 = "Dodawaj nowe podpisy cyfrowe, aby zabezpieczyć dokumenty"
-bullet4 = "Obsługa wielu plików z łatwą nawigacją"
-text = "To narzędzie pozwala sprawdzić, czy Twoje PDF-y są cyfrowo podpisane, oraz dodać nowe podpisy cyfrowe. Podpisy cyfrowe potwierdzają, kto utworzył lub zatwierdził dokument, i pokazują, czy został zmieniony po podpisaniu."
-title = "Co potrafi to narzędzie?"
-
-[certSign.tooltip.signing]
-bullet1 = "Obsługuje formaty PEM, PKCS12, JKS oraz certyfikat serwera"
-bullet2 = "Możliwość pokazania lub ukrycia podpisu w PDF"
-bullet3 = "Dodaj powód, lokalizację i nazwisko podpisującego"
-bullet4 = "Wybierz stronę dla widocznych podpisów"
-bullet5 = "Użyj certyfikatu serwera dla prostej opcji 'Sign with Stirling-PDF'"
-text = "Aby podpisać PDF, potrzebujesz certyfikatu cyfrowego (np. PEM, PKCS12 lub JKS). Możesz wybrać, czy podpis ma być widoczny w dokumencie, czy pozostać niewidoczny jedynie dla bezpieczeństwa."
-title = "Dodawanie podpisów"
-
-[certSign.tooltip.validation]
-bullet1 = "Pokazuje, czy podpisy są ważne lub nieważne"
-bullet2 = "Wyświetla informacje o podpisującym i dacie podpisu"
-bullet3 = "Sprawdza, czy dokument został zmodyfikowany po podpisaniu"
-bullet4 = "Może używać niestandardowych certyfikatów do weryfikacji"
-text = "Podczas sprawdzania podpisów narzędzie informuje, czy są ważne, kto podpisał dokument, kiedy został podpisany oraz czy dokument był zmieniany po podpisaniu."
-title = "Sprawdzanie podpisów"
-
 [changeCreds]
 changeUsername = "Zaktualizuj nazwę użytkownika. Zostaniesz wylogowany po aktualizacji."
 credsUpdated = "Konto zaktualizowane"
@@ -2824,6 +3020,7 @@ next = "Dalej"
 preview = "Podgląd"
 previous = "Wstecz"
 refresh = "Odśwież"
+remaining = "Pozostało"
 retry = "Ponów"
 save = "Zapisz"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Zaawansowany monitoring"
-allInOneWorkspace = "Wszechstronne środowisko pracy PDF (przeglądarka, narzędzia i agent)"
-apiSandbox = "Piaskownica API"
-dedicatedSupportSlas = "Dedykowane wsparcie i SLA"
-fasterThroughput = "10× większa przepustowość"
-fullyPrivateFiles = "W pełni prywatne pliki"
-largeFileProcessing = "Przetwarzanie dużych plików"
-orgWideAccess = "Kontrola dostępu w całej organizacji"
-premiumAiModels = "Modele AI klasy premium"
-prioritySupport = "Priorytetowe wsparcie"
-privateDocCloud = "Prywatna chmura dokumentów"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Bezpieczny dostęp do API"
-standardThroughput = "Standardowa przepustowość"
-unlimitedApiAccess = "Nielimitowany dostęp do API"
-unlimitedSeats = "Nielimitowana liczba użytkowników"
-
 [crop]
 autoCrop = "Automatycznie przytnij białe obszary"
 noFileSelected = "Wybierz plik PDF, aby rozpocząć przycinanie"
@@ -3346,6 +3525,7 @@ message = "Nie udało się ustawić domyślnej obsługi PDF"
 title = "Błąd"
 
 [defaultApp.prompt]
+dontRemind = "Nie przypominaj ponownie"
 message = "Ustaw Stirling PDF jako domyślną aplikację do otwierania plików PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Dostosuj grupy"
 dropHint = "Otwórz pliki, aby rozpocząć"
 dropToAdd = "Drop files to add"
 expand = "Rozwiń pasek boczny"
-files = "Pliki"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nie jest skonfigurowany"
 leaveMyFiles = "Wyjdź z Moich plików"
+library = "Biblioteka PDF"
 myFiles = "Moje pliki"
 noFiles = "Brak plików"
 openFileManager = "Otwórz menedżer plików"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Dodaj"
-addLabel = "Dodaj etykietę…"
-categoryIconAria = "Wybierz ikonę dla {{name}}"
-createCategory = "Utwórz kategorię"
-delete = "Usuń kategorię"
 done = "Gotowe"
-hide = "Ukryj kategorię"
-newCategory = "Nazwa nowej kategorii…"
-removeLabel = "Usuń {{name}}"
-rename = "Zmień nazwę"
 reset = "Przywróć domyślne"
-search = "Szukaj etykiet…"
-show = "Pokaż kategorię"
 subtitle = "Grupuj pliki w kategorie nadrzędne. Dodaj istniejące lub nowe etykiety do kategorii, zmień jej nazwę albo utwórz własną. Pliki spoza Twoich kategorii pojawią się w sekcji „Inne”."
 title = "Kategorie paska bocznego"
 
@@ -3808,6 +3977,7 @@ refresh = "Odśwież z serwera"
 remove = "Usuń"
 removeVersion = "Usuń tę wersję"
 rename = "Zmień nazwę"
+renamed = "Zmieniono nazwę"
 renameFolder = "Zmień nazwę folderu"
 resizeFolderTree = "Zmień rozmiar drzewa folderów (strzałki, Shift dla większych kroków; dwuklik, aby dopasować automatycznie)"
 save = "Zapisz"
@@ -3910,9 +4080,7 @@ count = "Pliki"
 folder = "Folder"
 labels = "Etykiety"
 modified = "Zmodyfikowano"
-name = "Nazwa"
 size = "Rozmiar"
-toolHistoryAtVersion = "Skumulowany łańcuch narzędzi"
 totalSize = "Łączny rozmiar"
 type = "Typ"
 versionHistory = "Historia wersji"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Wszystko zapisano"
+extractCsvError = "Nie udało się wyodrębnić CSV"
+extractXlsxError = "Nie udało się wyodrębnić XLSX"
 flattenAfterFilling = "Spłaszcz po wypełnieniu"
+requiredAbbreviation = "wym."
+requiredFieldsError = "Wypełnij wszystkie wymagane pola"
 rescanFields = "Skanuj pola ponownie"
 rescanFormFields = "Skanuj ponownie pola formularza"
 save = "Zapisz"
+saveShortcut = "Ctrl+S, aby zapisać"
+unsavedChanges = "Niezapisane zmiany"
 
 [formFill.sidebar]
 close = "Zamknij pasek boczny"
@@ -4309,6 +4484,11 @@ desc = "Automatycznie zmienia nazwę pliku PDF na podstawie wykrytego nagłówka
 tags = "automatyczne wykrywanie,nagłówek,organizuj,przemianuj"
 title = "Autozmiana nazwy PDF"
 
+[home.autoRotate]
+desc = "Wykryj orientację każdej strony i automatycznie obróć ją do pionu."
+tags = "automatyczne obracanie,napraw orientację,do góry nogami,bokiem,wyprostuj,orientuj,wykryj orientację,popraw obrót,automatyczna orientacja,zeskanowane,OSD"
+title = "Automatyczne obracanie"
+
 [home.autoSizeSplitPDF]
 tags = "auto,podziel,rozmiar"
 title = "Podziel (Rozmiar/Ilość stron)"
@@ -4608,13 +4788,13 @@ hint = "Prześlij plik obrazu PNG, JPG, SVG lub inny, aby umieścić go w PDF. P
 label = "Prześlij obraz"
 placeholder = "Wybierz plik obrazu"
 
-[imageToPdf]
-tags = "konwersja,img,jpg,obraz,zdjęcie"
-
 [imageToPDF]
 header = "Obraz na PDF"
 title = "Obraz na PDF"
 
+[imageToPdf]
+tags = "konwersja,img,jpg,obraz,zdjęcie"
+
 [infoBanner]
 dismiss = "Zamknij"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Zaproszono Cię!"
 
 [landing]
 addFiles = "Dodaj pliki"
-heroSubtitle = "Upuść lub dodaj istniejący PDF, aby rozpocząć."
 mobileUpload = "Prześlij z telefonu"
 openFromComputer = "Otwórz z komputera"
 uploadFromComputer = "Prześlij z komputera"
-workbenchEmptyStateHero = "Upuść PDF w dowolnym miejscu"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Logowanie"
 magicLinkSent = "Wysłano magiczny link na {{email}}! Sprawdź pocztę i kliknij link, aby się zalogować."
 mfaCode = "Kod uwierzytelniający"
 mfaRequired = "Wymagany kod dwuskładnikowy"
+noAccount = "Nie masz konta?"
 or = "lub"
 password = "Hasło"
 passwordChangedSuccess = "Hasło zostało zmienione! Zaloguj się nowym hasłem."
@@ -4715,26 +4894,10 @@ signInWith = "Zaloguj się przez"
 title = "Logowanie"
 unexpectedError = "Nieoczekiwany błąd: {{message}}"
 updatePassword = "Zaktualizuj hasło"
-useEmailInstead = "Zaloguj się e‑mailem"
 useMagicLink = "Zamiast tego użyj magicznego linku"
 username = "Nazwa użytkownika"
 youAreLoggedIn = "Jesteś zalogowany!"
 
-[login.slides.edit]
-alt = "Edytuj PDF"
-subtitle = "Ponad kilkanaście narzędzi do zaczerniania, podpisywania, czytania i modyfikowania PDF – znajdziesz to, czego potrzebujesz."
-title = "Edytuj PDF, aby wyświetlać i zabezpieczać potrzebne informacje"
-
-[login.slides.overview]
-alt = "Przegląd Stirling PDF"
-subtitle = "Pakiet chmurowy z priorytetem prywatności do pracy z PDF: konwertuj, podpisuj, zaczerniaj i zarządzaj dokumentami oraz korzystaj z 50+ innych narzędzi."
-title = "Jedno miejsce na wszystkie potrzeby związane z PDF."
-
-[login.slides.secure]
-alt = "Zabezpiecz PDF"
-subtitle = "Dodawaj hasła, zaczerniaj treść i zarządzaj certyfikatami z łatwością."
-title = "Chroń wrażliwe informacje w plikach PDF"
-
 [margin]
 large = "Duży"
 medium = "Średni"
@@ -4976,6 +5139,7 @@ pinButton = "Możesz użyć przycisku <strong>Przypnij</strong>, jeśli wolisz,
 results = "Po zakończeniu działania narzędzia krok <strong>Przegląd</strong> pokaże podgląd wyników w tym panelu i pozwoli cofnąć operację lub pobrać plik."
 runButton = "Po skonfigurowaniu narzędzia ten przycisk pozwala uruchomić je na wszystkich wybranych PDF-ach."
 selectCropTool = "Wybierzmy narzędzie <strong>Przytnij</strong>, aby pokazać, jak korzystać z jednego z narzędzi."
+stepOf = "Krok {{current}} z {{total}}"
 toolInterface = "To jest interfejs narzędzia <strong>Przytnij</strong>. Jak widać, niewiele tu widać, ponieważ nie dodaliśmy jeszcze żadnych plików PDF do pracy."
 workbench = "To jest <strong>Stół roboczy</strong> - główny obszar, w którym przeglądasz i edytujesz swoje PDF-y."
 wrapUp = "Wszystko gotowe! Poznałeś główne obszary aplikacji i sposób ich użycia. Kliknij przycisk <strong>Pomoc</strong>, kiedy chcesz, aby ponownie zobaczyć tę wycieczkę."
@@ -4988,6 +5152,26 @@ showMeAround = "Pokaż, co nowego"
 skipForNow = "Pomiń na razie"
 skipTheTour = "Pomiń przewodnik"
 
+[onboarding.checklist]
+dismiss = "Odrzuć"
+title = "Skonfiguruj Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Uruchom Stirling natywnie na swoim komputerze"
+title = "Pobierz Stirling dla komputerów"
+
+[onboarding.checklist.inviteTeam]
+description = "Współpracuj ze swoim zespołem"
+title = "Zaproś członków zespołu"
+
+[onboarding.checklist.shareAnalytics]
+description = "Pomóż ulepszyć Stirling"
+title = "Udostępnij anonimowe dane użycia"
+
+[onboarding.checklist.takeTour]
+description = "Zobacz, jak działa Stirling w krótkim przewodniku"
+title = "Rozpocznij prezentację"
+
 [onboarding.desktopInstall]
 body = "Stirling najlepiej działa jako aplikacja desktopowa. Możesz używać go offline, szybciej otwierać dokumenty i wprowadzać zmiany lokalnie na komputerze."
 selectOs = "Wybierz system operacyjny"
@@ -4996,7 +5180,21 @@ titleWithOs = "Pobierz dla {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Kod uwierzytelniający"
+description = "Zabezpiecz swoje konto, łącząc aplikację uwierzytelniającą. Zeskanuj kod QR lub wprowadź klucz konfiguracji, a następnie potwierdź 6-cyfrowy kod, aby zakończyć."
+enable = "Włącz MFA"
+enableError = "Nie można włączyć uwierzytelniania dwuskładnikowego. Sprawdź kod i spróbuj ponownie."
+enterCode = "Wprowadź 6-cyfrowy kod z aplikacji."
+enterCodeError = "Wprowadź kod uwierzytelniający, aby kontynuować."
+logout = "Wyloguj"
+openAuthenticator = "Otwórz Google Authenticator, Authy lub 1Password."
 qrCodeLoading = "Generowanie Twojego kodu QR…"
+regenerateQrCode = "Wygeneruj ponownie kod QR"
+scanQrCode = "Zeskanuj kod QR lub wprowadź poniższy klucz konfiguracji."
+setupError = "Nie można rozpocząć konfiguracji uwierzytelniania dwuskładnikowego. Spróbuj ponownie."
+setupKey = "Klucz konfiguracji (wpis ręczny)"
+stepByStep = "Krok po kroku"
+success = "MFA zostało włączone. Możesz teraz kontynuować."
+title = "Konfiguracja uwierzytelniania wieloskładnikowego"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Po włączeniu trybu logowania możesz zarządzać użytkownikami, konfigurować ustawienia i monitorować kondycję serwera. Pierwsze <strong>{{freeTierLimit}}</strong> osób na Twoim serwerze korzysta ze Stirling bez opłat."
@@ -5005,6 +5203,11 @@ adminTitle = "Przegląd dla administratora"
 userBody = "Zapraszaj członków zespołu, przypisuj role i utrzymuj porządek w dokumentach w jednym bezpiecznym miejscu pracy. Włącz tryb logowania, gdy będziesz gotów wyjść poza użycie solo."
 userTitle = "Przegląd planu"
 
+[onboarding.processorIntro]
+body = "Stirling uruchamia teraz <strong>Zasady</strong> — automatyczne reguły, które klasyfikują, zabezpieczają i przetwarzają każdy dokument po jego nadejściu. Skonfiguruj je i monitoruj uruchomienia w <strong>Processor</strong>."
+cta = "Sprawdź Processor"
+title = "Sprawdź Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Rok z góry"
+
+[payg.prepaid.banner]
+exhausted = "Twoja przedpłacona pojemność została wykorzystana; rozliczanie licznikowe zostało wznowione. Doładuj, aby zachować rabat."
+expiring_one = "Twój rok przedpłacony kończy się za {{count}} dzień. Niewykorzystana pojemność wygasa — doładuj, aby rozpocząć nowy rok."
+expiring_other = "Twój rok przedpłacony kończy się za {{count}} dni. Niewykorzystana pojemność wygasa — doładuj, aby rozpocząć nowy rok."
+low = "Pozostało Ci {{pct}}% przedpłaconej pojemności. Doładuj w dowolnym momencie, aby przetwarzanie nie zostało przerwane."
+
+[payg.prepaid.card]
+subtitle = "Używane przed rozliczaniem licznikowym i poza limitem wydatków."
+title = "Przedpłacona pojemność"
+
+[payg.prepaid.meter]
+capSuffix = "z {{total}} przedpłaconych kredytów"
+expires = "Wygasa {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Wykorzystano"
+healthy = "Dużo pozostało"
+low = "Kończy się"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Wklej klucz licencyjny z e-maila"
 success = "Licencja aktywowana!"
 successMessage = "Twoja licencja została pomyślnie aktywowana. Możesz zamknąć to okno."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "wyegzekwowano"
-enforcing = "Egzekwowanie..."
-failed = "Egzekwowanie nie powiodło się"
 outputsUnavailable = "Wyniki polityki nie są już dostępne do pobrania."
 partialOutputsUnavailable = "Niektóre wyniki polityki nie są już dostępne do pobrania."
-retrying = "Zajęte, ponawianie próby..."
 runNotFound = "Nie można już znaleźć przebiegu egzekwowania."
-step = "krok {{current}}/{{total}}"
 timedOut = "Upłynął limit czasu egzekwowania, zanim przebieg mógł się zakończyć."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Zamknij"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Stosowanie {{names}}"
 applyingProgress = "Stosowanie {{names}} ({{done}} z {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} z {{total}} plików nie można było przetworzyć i
 failureTitle = "Wyeksportowano bez pełnego egzekwowania"
 printPolicyAppliedBody = "Ten PDF został zaktualizowany, aby był zgodny z polityką. Sprawdź zmiany, a następnie wydrukuj ponownie."
 printPolicyAppliedTitle = "Politykę zastosowano przed drukowaniem"
-queued = "+{{count}} w kolejce"
 successTitle = "{{names}} zastosowano"
 summaryMore = "{{first}}, {{second}} i {{more}} więcej"
 summaryTwo = "{{first}} i {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Egzekwowanie przed konwersją"
-default = "Egzekwowanie"
-export = "Egzekwowanie przed eksportem"
-input = "Egzekwowanie przy imporcie"
-print = "Egzekwowanie przed drukowaniem"
-
-[policies.field]
-accessLog = "Dziennik dostępu"
-archiveAfter = "Archiwizuj po"
-auditTrail = "Ścieżka audytu"
-belowThreshold = "Poniżej progu"
-destination = "Miejsce docelowe"
-frameworks = "Ramy zgodności"
-immutableHold = "Niezmienna blokada"
-keepFor = "Przechowuj przez"
-minConfidence = "Minimalna pewność"
-notify = "Powiadom przy kierowaniu"
-onViolation = "Gdy niezgodne"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Dodaj"
-addPlaceholder = "Dodaj etykietę…"
-customNote = "Dostosowane dla Twojego zespołu."
-defaultNote = "Używanie wbudowanych ustawień domyślnych, współdzielonych z zespołem."
-duplicate = "\"{{name}}\" już istnieje."
-edit = "Edytuj etykiety"
-empty = "Nie ma jeszcze etykiet."
-export = "Eksportuj JSON"
-iconAria = "Wybierz ikonę dla {{name}}"
-import = "Importuj JSON"
-importError = "Nie udało się zaimportować tego pliku."
-managedNote = "Etykietami zespołu zarządza lider zespołu."
-modalSubtitle = "Współdzielone z całym zespołem. Klasyfikator wybiera etykiety pasujące do każdego dokumentu."
-modalTitle = "Etykiety klasyfikacji"
-pickIcon = "Użyj ikony {{label}}"
-removeAria = "Usuń {{name}}"
-resetToDefault = "Przywróć domyślne"
-saveForTeam = "Zapisz dla zespołu"
-saving = "Zapisywanie…"
-sectionLabel = "Etykiety klasyfikacji"
-startFromScratch = "Zacznij od zera"
-teamCount = "etykiety zespołu"
-tooLong = "Etykiety mogą mieć maksymalnie {{max}} znaków."
-ungrouped = "Niepogrupowane"
-view = "Wyświetl etykiety"
+categoryCount = "kategorie"
+hideCategory = "Ukryj kategorię"
+labelCount = "etykiety"
+sharedNote = "Te etykiety są wbudowane i współdzielone przez cały zespół."
+showCategory = "Pokaż kategorię"
 
 [policies.pii]
 account = "Numery kont (oznaczone)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Numery routingu w USA (ABA)"
 ssn = "Numery Social Security"
 
-[policies.settings]
-noneExport = "Obecnie żadne zasady nie są uruchamiane przy eksporcie."
-noneUpload = "Obecnie żadne zasady nie są uruchamiane przy przesyłaniu."
-onExport = "Przy eksporcie"
-onUpload = "Przy przesyłaniu"
-reorderHandle = "Przeciągnij, aby zmienić kolejność"
-runOrderDesc = "Gdy więcej niż jedna zasada działa na tym samym wyzwalaczu, są uruchamiane w tej kolejności — każda na wyniku poprzedniej zasady. Przeciągnij, aby zmienić kolejność."
-title = "Ustawienia zasad"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opcje zasad"
-policySettings = "Ustawienia zasad"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Ponów nieudane zasady ({{count}})"
-rowProgress = "Przetworzono {{completed}} z {{total}} plików"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Czym jest zasada?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automatycznie znajduje i zaczernia wrażliwe dane — takie jak numery Social Security i kart — aby nie można ich było odczytać w dokumencie."
-sanitize = "Usuwa ukryty JavaScript z pliku, aby nic nie uruchamiało się automatycznie po jego otwarciu."
-watermark = "Umieszcza widoczny znak (np. \"Poufne\") na każdej stronie."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Zamknij"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "Wymuszanie {{name}}..."
 badgeRan = "Zasada {{name}} została uruchomiona dla tego pliku"
+badgeRunning = "{{name}} działa..."
 blockingAction = "{{action}} zablokowano podczas wymuszania zasady, poczekaj..."
 dismiss = "Zamknij nakładkę"
 enforcingTitle = "Wymuszanie zasady..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Wyświetl plik (zasada nadal jest wymuszana)"
 [policyOption]
 autoRedactPhi = "Automatycznie zredaguj PHI"
 blockExport = "Zablokuj eksport"
+ccpa = "CCPA"
 contracts = "Umowy"
 documents = "Dokumenty"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plan Editor"
 subscribed = "Plan Processor"
 unlinked = "Nie połączono"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Zainicjuj z dokumentu"
-sectionsAriaLabel = "Sekcje kreatora agentów"
-selectorAriaLabel = "Agenci"
-subtitle = "Projektuj, testuj i wdrażaj agentów AI, którzy klasyfikują, wyodrębniają dane z dokumentów i kierują je dalej. Definiuj scenariusze, ograniczaj dostęp do narzędzi, uruchamiaj zestaw wzorcowy i publikuj wersję."
-title = "Kreator agentów"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Anuluj"
-dropzoneText = "Wybierz przykładowy dokument (PDF lub obraz)"
-lead = "Upuść przykładowy dokument, a zaproponujemy scenariusze i schemat wyodrębniania, które możesz dopracować. Nic nie zostanie opublikowane, dopóki tego nie przejrzysz."
-submit = "Zainicjuj agenta"
-subtitle = "Zainicjuj nowego agenta na podstawie jednego reprezentatywnego pliku"
-title = "Zainicjuj z dokumentu"
-
-[portal.agentBuilder.empty]
-description = "Zainicjuj agenta na podstawie przykładowego dokumentu, aby utworzyć jego scenariusze i schemat wyodrębniania, a następnie dopracuj i opublikuj."
-title = "Nie ma jeszcze agentów"
-
-[portal.agentBuilder.evals]
-casesPassing = "Przypadki zaliczone"
-columnCase = "Przypadek ewaluacyjny"
-columnLatency = "Opóźnienie"
-columnResult = "Wynik"
-fail = "niezaliczone"
-goldenSetPassRate = "Wskaźnik zaliczenia zestawu wzorcowego"
-latencyMs = "{{ms}} ms"
-notRun = "nie uruchomiono"
-pass = "zaliczone"
-passRate = "Wskaźnik zaliczeń"
-runEvals = "Uruchom ewaluacje"
-
-[portal.agentBuilder.evals.empty]
-description = "Ewaluacje zamieniają scenariusze w powtarzalny zestaw wzorcowy. Przejdź na wyższy plan, aby śledzić wskaźnik zaliczeń w czasie i uzależniać od niego publikacje."
-title = "Nie ma jeszcze zestawu wzorcowego"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "w zestawach wzorcowych"
-activeAgents = "Aktywni agenci"
-avgPassRate = "Śr. wskaźnik zaliczeń ewaluacji"
-fleetWide = "w całej flocie"
-latestPublished = "Ostatnio opublikowane"
-scenarios = "Scenariusze"
-testCases = "przypadki testowe"
-totalDescription_one = "łącznie {{count}}"
-totalDescription_other = "łącznie {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Dodaj"
-addScenario = "Dodaj scenariusz"
-enable = "Włącz"
-expectationLabel = "Oczekiwane zachowanie"
-expectationPlaceholder = "Co agent powinien zrobić"
-inEval = "w ewaluacji"
-mute = "Wycisz"
-muted = "wyciszone"
-nameLabel = "Nazwa"
-namePlaceholder = "np. Eskalacja zgodności"
-
-[portal.agentBuilder.tabs]
-evals = "Ewaluacje"
-scenarios = "Scenariusze"
-tools = "Narzędzia"
-versions = "Wersje"
-
-[portal.agentBuilder.tools]
-broadAccess = "Szeroki dostęp"
-deniedHint = "Wybrane narzędzia są zablokowane. Wszystkie pozostałe pozostają dostępne do wywołania."
-deniedTools = "Zabronione narzędzia"
-governanceGate = "Zarządzanie narzędziami jest dostępne w planie Enterprise."
-restricted = "Ograniczone"
-restrictedAccess = "Ograniczony dostęp do narzędzi"
-restrictedDescription = "Zezwól na każde narzędzie oprócz tych, których odmówisz poniżej."
-
-[portal.agentBuilder.versions]
-current = "bieżąca"
-historyGate = "Pełna historia wersji i przywracanie są dostępne w planie Enterprise."
-publish = "Opublikuj"
-rollBack = "Przywróć"
-
 [portal.assistant]
 close = "Zamknij asystenta"
 error = "Nie udało się połączyć z asystentem."
@@ -6365,9 +6346,21 @@ typing = "Pisze"
 loading = "Ładowanie"
 redirectingToEditor = "Przekierowywanie do edytora..."
 
+[portal.billing.activation]
+maybeLater = "Może później"
+title = "Włącz Processor"
+
+[portal.billing.activation.payg]
+sub = "Ustaw miesięczny limit. Płać za to, co uruchamiasz."
+title = "Płać zgodnie z użyciem"
+
+[portal.billing.activation.prepay]
+badge = "2 miesiące gratis"
+sub = "Jedna faktura, karta lub przelew bankowy."
+title = "Zapłać za rok z góry"
+
 [portal.billing.checkout]
 noClientSecret = "Funkcja edge nie zwróciła client_secret."
-subtitle = "Dodaj kartę, aby kontynuować po wykorzystaniu bezpłatnego limitu planu Editor. Stripe zajmie się resztą."
 title = "Włącz plan Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Płatność się powiodła, ale aktywacja trwa trochę dłużej niż zwy
 close = "Zamknij"
 title = "Prawie gotowe"
 
+[portal.billing.checkout.cap]
+amountAria = "Miesięczny limit wydatków"
+back = "Wstecz"
+continue = "Przejdź do płatności"
+error = "Nie udało się ustawić limitu wydatków"
+finePrint = "Faktury wystawiane są co miesiąc. Anuluj w dowolnym momencie."
+noLimit = "Bez limitu"
+note = "Nigdy nie zapłacisz więcej niż wynosi Twój limit. Przetwarzanie po prostu się wstrzyma."
+perMonth = "/ mies."
+title = "Ustaw limit wydatków"
+
+[portal.billing.checkout.card]
+fields = "Numer karty · MM / RR · CVC · ZIP"
+label = "Dane karty"
+note = "Dane karty są zbierane przez Stripe. Stirling nigdy nie przechowuje PAN ani CVC."
+
 [portal.billing.checkout.error]
 title = "Nie udało się rozpocząć finalizacji zakupu"
 
@@ -6383,10 +6392,9 @@ body = "Płatność została zrealizowana. Włączamy przetwarzanie rozliczane w
 hint = "Pozostaw to okno otwarte."
 title = "Aktywowanie planu Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "w env portalu, aby włączyć finalizację zakupu w aplikacji."
-bodyBefore = "Ustaw"
-title = "Stripe nie jest skonfigurowany"
+[portal.billing.checkout.pay]
+limit = "Miesięczny limit wydatków {{amount}}/mies. Przetwarzanie wstrzyma się po osiągnięciu limitu."
+limitNoCap = "Brak limitu wydatków. Przetwarzanie nie zostanie wstrzymane. Faktury wystawiane są co miesiąc."
 
 [portal.billing.enterpriseUpsell]
 cta = "Utwórz wycenę Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Bieżący plan"
 freeForever = "Bezpłatnie na zawsze"
 noTeamResolved = "W Twoim portfelu nie ustalono jeszcze zespołu — odśwież i spróbuj ponownie."
 ownerOnly = "Tylko właściciel zespołu może włączyć plan Processor."
+payInvoice = "Opłać fakturę, aby zakończyć"
 planName = "Editor"
 ssoIncluded = "SSO w cenie"
 switchOnProcessor = "Włącz Processor →"
 unlimitedUsers = "Nieograniczona liczba użytkowników"
+viewQuote = "Zobacz wycenę"
 
 [portal.billing.invoices]
 columnAmount = "Kwota"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Bezpośrednie żądania API"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatyzacje i potoki"
 segmentAutomationLabel = "Automatyzacja"
+sizeMultiplier = "{{formatted}} PDF użyło mnożnika rozmiaru"
+summary = "{{unique}} unikatowych · {{units}} jednostek licznika · średnio {{avg}} na PDF"
+summaryNoRate = "{{unique}} unikatowych · {{units}} jednostek licznika"
 unit = "PDF rozliczane wg użycia"
+unitsPending_one = "{{units}} jednostka licznika oczekuje na synchronizację z połączonych instancji"
+unitsPending_other = "{{units}} jednostek licznika oczekuje na synchronizację z połączonych instancji"
+
+[portal.billing.prepaid]
+capSuffix = "z {{total}} przedpłaconych kredytów"
+expires = "Wygasa {{date}}"
+eyebrow = "Przedpłacona pojemność"
+note = "Używane przed rozliczaniem licznikowym i poza limitem wydatków."
+topUp = "Doładuj"
+
+[portal.billing.prepaid.buy]
+back = "Wstecz"
+calcTitle = "Oblicz płatność roczną"
+cancel = "Anuluj"
+cancelPurchase = "Anuluj zakup"
+close = "Zamknij"
+continueToPayment = "Przejdź do płatności"
+finalise = "Sfinalizuj"
+invoiceErrorTitle = "Nie udało się wygenerować faktury"
+loadingTitle = "Ładowanie wyceny"
+payTitle = "Zapłać za rok"
+step = "Krok {{current}} z {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Zmień"
+deployRow = "Wdrożenie"
+done = "Gotowe"
+enterpriseHint = "To skala enterprise. Przy takim wolumenie stawki enterprise przewyższają każdy rabat samoobsługowy. Blokada stawki, warunki i wycena w kilka minut."
+governanceRow = "Zarządzanie"
+governanceValue = "{{label}} · {{count}} zasad"
+handlesLabel = "Twój Processor"
+handlesValue = "obsługuje {{volume}} kredytów / mies."
+pipelinesLabel = "Potoki"
+policiesMeta = "{{count}} zasad"
+poolCaption = "Jedna pula {{credits}} kredytów na rok. Cięższe miesiące korzystają z zapasu lżejszych."
+priceLabel = "Twój rok · 12 miesięcy w cenie 10"
+rateUnknown = "Pokażemy dokładną cenę przy finalizacji zakupu."
+savings = "Oszczędzasz {{amount}} · 2 miesiące gratis."
+sizingRow = "Rozmiar"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Łączna liczba użytkowników"
+
+[portal.billing.prepaid.consent]
+label = "Rozumiem, że gdy moja przedpłacona pojemność zostanie wykorzystana lub wygaśnie po 12 miesiącach, przetwarzanie automatycznie będzie kontynuowane według standardowej licznikowej stawki pay-as-you-go (do mojego limitu wydatków), chyba że anuluję, oraz że mogę anulować w dowolnym momencie w portalu rozliczeń."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Zarządzane przez Stirling. Gotowe w kilka minut."
+cloudValue = "Stirling Cloud · Zarządzane"
+selfhost = "Self-hosted"
+selfhostDesc = "Działa na prywatnej infrastrukturze. Ta sama stawka."
+selfhostValue = "Self-hosted · Prywatna infrastruktura"
+
+[portal.billing.prepaid.offer]
+cta = "Przejrzyj ofertę"
+subtitle = "Zapłać z góry za rok przetwarzania PDF i otrzymaj dwa miesiące gratis, używane przed rozliczaniem licznikowym i poza limitem wydatków."
+title = "Otrzymaj 12 miesięcy w cenie 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nazwa posiadacza konta"
+accountNamePlaceholder = "np. Anna Kowalska"
+companyName = "Nazwa firmy (opcjonalnie)"
+companyNamePlaceholder = "np. Acme Inc."
+downloadInvoice = "Pobierz fakturę"
+payOnline = "Zapłać online"
+poNumber = "Numer PO (opcjonalnie)"
+poNumberPlaceholder = "np. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Zaawansowane"
+advancedDesc = "Potoki napędzają większość Twojego przetwarzania."
+none = "Brak"
+noneDesc = "Potoki jeszcze nie działają. Możesz je włączyć w dowolnym momencie."
+standard = "Standardowe"
+standardDesc = "Kilka potoków ponownie przetwarza przychodzące PDF."
+
+[portal.billing.prepaid.posture]
+essentials = "Podstawy"
+essentialsDesc = "Klasyfikacja, domyślnie, plus udostępnianie"
+governed = "Zarządzane"
+governedDesc = "Dodaje bezpieczeństwo i kierowanie"
+regulated = "Regulowane"
+regulatedDesc = "Każda kategoria, w tym zgodność, retencja, pobieranie"
+
+[portal.billing.prepaid.review]
+download = "Pobierz wycenę (PDF)"
+downloading = "Przygotowywanie…"
+share = "udostępnij do zatwierdzenia"
+
+[portal.billing.prepaid.size]
+compact = "Kompaktowy"
+compactDesc = "Pliki poniżej 25 MB, brak opłat za dane"
+heavy = "Ciężki"
+heavyDesc = "Skanowane lub z dużą ilością obrazów, rutynowo 50 MB+"
+standard = "Standardowy"
+standardDesc = "Głównie małe, niektóre skany powyżej 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Wykorzystano"
+healthy = "Dużo pozostało"
+low = "Kończy się"
 
 [portal.billing.spendLimit]
 adjustLimit = "Dostosuj limit"
@@ -6494,6 +6608,8 @@ label = "Prognozowane przekroczenie."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Wydatki w tym miesiącu"
+freeRemaining_one = "Pozostał {{formatted}} darmowy PDF"
+freeRemaining_other = "Pozostało {{formatted}} darmowych PDF"
 processed_one = "Przetworzono {{formattedCount}} PDF."
 processed_other = "Przetworzono {{formattedCount}} PDF."
 processedWithRate_one = "Przetworzono {{formattedCount}} PDF, po {{rate}} za każdy."
@@ -6534,6 +6650,350 @@ signature = "podpis"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nowe połączenie"
+createTitleFor = "Połącz {{name}}"
+delete = "Usuń"
+edit = "Edytuj"
+editTitle = "Edytuj połączenie"
+unsupportedType = "Tego typu połączenia nie można tutaj edytować."
+
+[portal.connections.categories.advanced]
+description = "Dla usługi, której jeszcze nie obsługujemy."
+label = "Zaawansowane"
+
+[portal.connections.categories.audit]
+description = "Zapisz, co stało się z dokumentem, tam, gdzie już sprawdzają Twoi audytorzy."
+label = "Logowanie audytu i zgodności"
+
+[portal.connections.categories.notify]
+description = "Powiadom inny system, że coś się wydarzyło."
+label = "Powiadomienia i przepływ pracy"
+
+[portal.connections.categories.security]
+description = "Skanuj lub oznacz dokument, zanim zostanie przeniesiony dalej."
+label = "Bezpieczeństwo i klasyfikacja"
+
+[portal.connections.categories.signing]
+description = "Wyślij dokument do podpisu lub poświadczenia notarialnego."
+label = "E-podpis i poświadczenie notarialne"
+
+[portal.connections.categories.storage]
+description = "Gdzie trafiają przetworzone dokumenty — bucket, dysk, zgłoszenie lub strona."
+label = "Plik i załącznik"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling przechowuje to zaszyfrowane i nigdy więcej tego nie pokazuje."
+label = "Token dostępu"
+
+[portal.connections.commonFields.apiKey]
+label = "Klucz API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Kroki używające tego połączenia mogą wywoływać tylko ścieżki pod tym URL, nigdy inny host."
+label = "URL serwera"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Hasło"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Nazwa użytkownika"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Wklej URL podany przez usługę. Można wywoływać tylko ścieżki pod nim."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Nazwa połączenia"
+namePlaceholder = "np. Produkcja"
+
+[portal.connections.picker]
+cancel = "Anuluj"
+createNew = "Nowe połączenie..."
+placeholder = "Wybierz połączenie"
+save = "Zapisz połączenie"
+
+[portal.connections.picker2]
+back = "Zmień integrację"
+heading = "Co chcesz połączyć?"
+noResultsBody = "Jeszcze tego nie obsługujemy — powiedz nam o tym, a rozważymy dodanie."
+noResultsTitle = "Nic nie pasuje do \"{{query}}\""
+searchPlaceholder = "Szukaj integracji — spróbuj \"sign\", \"ocr\" lub nazwy produktu"
+
+[portal.connections.types.api]
+description = "Wywołaj dowolne HTTP API z zasady. Wybierasz URL, uwierzytelnianie i payload."
+label = "Niestandardowe API"
+
+[portal.connections.types.api.fields.authType]
+label = "Uwierzytelnianie"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nazwa użytkownika i hasło"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Token Bearer"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token w niestandardowym nagłówku"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Brak"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Zaloguj się po token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Kroki używające tego połączenia mogą wywoływać tylko ścieżki pod tym URL, nigdy inny host."
+label = "Bazowy URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nazwa nagłówka"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Ścieżka logowania"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Hasło"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Jeśli API odpowie linkiem do pobrania, pobieranie będzie dozwolone tylko z tych hostów. Oddziel przecinkami. Pozostaw puste, aby zezwolić tylko na własny host bazowego URL."
+label = "Dozwolone hosty wyników"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Wyślij token jako ten nagłówek"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Nagłówek odpowiedzi, w którym wywołanie logowania zwraca token, np. X-Auth-Token."
+label = "Nagłówek odpowiedzi tokenu"
+
+[portal.connections.types.api.fields.username]
+label = "Nazwa użytkownika"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skanuj dokumenty pod kątem malware na serwerze, który uruchamiasz — nic nie opuszcza Twojej sieci."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Skanowanie dokumentów pod kątem wirusów i treści w zasadzie."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokuj dokumenty zawierające makra, pliki wykonywalne, skrypty lub osadzone obiekty — nie tylko znane malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Dołącz przetworzone dokumenty do strony Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Wyślij dokumenty do ConsignO Cloud (Notarius) w celu podpisu elektronicznego i poświadczenia notarialnego."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Twoje środowisko ConsignO Cloud, w tym /api/v1."
+label = "URL serwera"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Klucz API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Sekret API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Hasło"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Potrzebne tylko wtedy, gdy Twoja organizacja używa tenantów."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nazwa użytkownika"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Opublikuj wiadomość na Discord, gdy zasada przetwarza dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indeksuj zdarzenie audytu w Elasticsearch za każdym razem, gdy zasada obsługuje dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Odpytuj serwer FTP lub FTPS o nowe dokumenty."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Tryb połączenia"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktywny"
+passive = "Pasywny (zalecane)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Zwykły FTP wysyła poświadczenia i pliki bez szyfrowania; wybierz FTPS, jeśli serwer to obsługuje."
+label = "Szyfrowanie"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (jawne / AUTH TLS)"
+implicit = "FTPS (niejawne)"
+none = "Brak (zwykły FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Opublikuj wiadomość w przestrzeni Google Chat, gdy działa zasada."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Dołącz przetworzone dokumenty do zgłoszenia Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Wyślij dokument lub powiadomienie e-mailem, gdy działa zasada."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Zapisuj przetworzone dokumenty w Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Hasło aplikacji"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Wykrywaj dane osobowe w tekście dokumentu za pomocą uruchamianego przez Ciebie serwera Presidio."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Odczytuj i stosuj etykiety poufności Microsoft Purview na PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opcjonalne. Potrzebne tylko do wybierania etykiet po nazwie; etykietowanie działa bez tego."
+label = "ID aplikacji (klienta)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Sekret klienta"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Stemplowane na każdej etykiecie jako jej SiteId, aby narzędzia zgodne z Purview wiedziały, która organizacja ją zastosowała."
+label = "ID katalogu (tenanta)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Bucket S3, z którego źródła mogą czytać i do którego wyjścia potoku mogą zapisywać."
+label = "Magazyn S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID klucza dostępu"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Pozostaw puste dla AWS. Ustaw to dla MinIO lub innego magazynu zgodnego z S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Tajny klucz dostępu"
+
+[portal.connections.types.sendgrid]
+description = "Wyślij dokument lub powiadomienie e-mailem, gdy działa zasada."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Odpytuj serwer SFTP (SSH) o nowe dokumenty."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opcjonalne. Odcisk palca klucza hosta serwera SHA-256 (z `ssh-keyscan host | ssh-keygen -lf -`). Po ustawieniu akceptowany jest tylko serwer przedstawiający ten klucz; gdy puste, klucz zobaczony przy pierwszym połączeniu jest przypinany, a późniejsze zmiany są odrzucane."
+label = "Odcisk palca klucza hosta"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Hasło klucza"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Pozostaw puste, jeśli zamiast tego uwierzytelniasz się kluczem prywatnym."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opcjonalne. Wklej klucz prywatny OpenSSH, aby uwierzytelniać się kluczem zamiast hasłem."
+label = "Klucz prywatny"
+
+[portal.connections.types.slack]
+description = "Opublikuj wiadomość na Slack, gdy zasada przetwarza dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Obserwuj udział sieciowy SMB / CIFS (Windows lub Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Udział sieciowy"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opcjonalne. Domena Windows lub grupa robocza, jeśli serwer jej używa."
+label = "Domena"
+
+[portal.connections.types.smb.fields.share]
+label = "Udział"
+placeholder = "dokumenty"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Wyślij zdarzenie audytu do Splunk za każdym razem, gdy zasada obsługuje dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Wyślij zdarzenie audytu do kolektora HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Opublikuj wiadomość w kanale Teams, gdy działa zasada."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Wyślij każdy dokument lub tylko szczegóły na wybrany URL."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Uruchom scenariusz Zap lub Make z zasady."
+label = "Zapier i Make"
+
+[portal.docs]
+browse = "Przeglądaj dokumentację"
+viewSource = "Zobacz źródło na GitHub"
+
 [portal.docs.authentication]
 codeCaption = "każde żądanie"
 eyebrow = "PIERWSZE KROKI"
@@ -6619,11 +7079,19 @@ title = "Oficjalne SDK"
 beta = "Beta"
 deprecated = "Przestarzałe"
 
+[portal.docs.search]
+empty = "Brak pasującej dokumentacji"
+placeholder = "Szukaj dokumentacji"
+results = "{{count}} wyników"
+
 [portal.docs.skills]
 eyebrow = "UMIEJĘTNOŚCI"
 lead = "Dołączone, nazwane możliwości, które agent wywołuje jako pojedyncze narzędzie. Każda umiejętność to deterministyczny łańcuch operacji z dołączonymi ewaluacjami."
 title = "Umiejętności agenta"
 
+[portal.docs.toc]
+title = "Na tej stronie"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "DOKUMENTACJA API"
@@ -6697,6 +7165,8 @@ type = "Typ"
 user = "Użytkownik"
 
 [portal.documents.queue.empty]
+connectSource = "Połącz źródło"
+createPipeline = "Utwórz potok"
 description = "Gdy źródła będą przekazywać dokumenty do Twoich potoków, pojawią się tutaj do przeglądu."
 title = "Brak dokumentów w kolejce"
 
@@ -6806,13 +7276,71 @@ description = "Ten widok napotkał nieoczekiwany błąd. Spróbuj ponownie albo
 retry = "Spróbuj ponownie"
 title = "Coś poszło nie tak na tej stronie"
 
+[portal.home.download]
+back = "Wstecz"
+body = "Pobierz aplikację desktopową lub hostuj serwer samodzielnie."
+done = "Gotowe"
+guide = "Otwórz przewodnik {{name}}"
+openInBrowser = "Otwórz w przeglądarce zamiast tego"
+sectionDesktop = "Aplikacja desktopowa"
+sectionSelfHosted = "Self-hosted"
+title = "Zainstaluj Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Uruchom oficjalny obraz na swoim serwerze."
+note = "Otwiera się na :8080. Domyślne logowanie: admin / stirling."
+tagline = "Uruchom serwer w kontenerze"
+title = "Docker"
+variantFat = "Pełny"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Zainstaluj oficjalny chart Helm."
+note = "Dodaj PVC dla /configs, aby zachować ustawienia."
+tagline = "Wdróż w klastrze za pomocą Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Natywne kompilacje dla Twojej dystrybucji."
+guideBtn = "Zobacz opcje instalacji Linux"
+note = "Kompilacje AppImage, .deb i .rpm są dostępne dla popularnych dystrybucji."
+tagline = "Natywna aplikacja desktopowa dla Twojej dystrybucji"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Lub przez Homebrew"
+detailBody = "Uruchom instalator albo użyj Homebrew."
+downloadBtn = "Pobierz dla macOS"
+tagline = "Natywna aplikacja dla Apple silicon i Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Uruchom .jar na serwerze bare metal."
+downloadBtn = "Pobierz .jar"
+note = "Wymaga Java 21+. Otwiera się na :8080; domyślne logowanie admin / stirling."
+runLabel = "Następnie uruchom"
+tagline = "Uruchom .jar na serwerze bare metal"
+title = "Ręczna konfiguracja serwera"
+
+[portal.home.download.windows]
+altLabel = "Lub przez winget"
+detailBody = "Uruchom instalator albo użyj menedżera pakietów."
+downloadBtn = "Pobierz instalator"
+tagline = "Natywna aplikacja dla Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktywnych"
-invite = "Zaproś członków zespołu"
+activeOfDeployed = "{{active}} z {{total}} aktywnych w tym miesiącu"
 name = "Stirling PDF Editor"
 open = "Otwórz w przeglądarce"
 updated = "zaktualizowano {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Zakończ wdrożenie"
+options = "Zobacz opcje wdrożenia"
+start = "Wdróż Edytor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Hostowane samodzielnie · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Dzień dobry"
 evening = "Dobry wieczór"
 morning = "Dzień dobry"
 
-[portal.home.onboarding]
-dismiss = "Odrzuć konfigurację"
-notStarted = "Nie rozpoczęto"
-progress = "Ukończono {{done}} z {{total}}"
-title = "Dokończ konfigurację"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC w całej organizacji, uzgodnione ceny wolumenowe i wdrożenie air-gapped."
-cta = "Rozpocznij wersję próbną"
-ctaQuote = "Uzyskaj wycenę"
-lead = "Dla ponad 250 pracowników."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Wdróż aplikację desktopową, darmową na zawsze."
-title = "Pobierz PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktywnych · {{recommended}} zalecanych"
-chip = "{{active}} aktywnych"
-title = "Włącz zasady"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} połączonych · każdy PDF objęty zasadami tam, gdzie trafia"
-chip = "{{connected}} połączonych"
-title = "Połącz swoje źródła"
-
-[portal.home.quickActions]
-subtitle = "Najważniejsze zadania na dziś"
-title = "Szybkie działania"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-etapowy kreator oparty na typowanej bibliotece operacji"
-title = "Zbuduj potok"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenci, webhooki, obserwowane foldery"
-title = "Połącz źródło"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Klucz o określonym zakresie z limitami szybkości i listą dozwolonych IP"
-title = "Wydaj klucz API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Zarządzaj wdrożeniem Edytora"
 sectionsAriaLabel = "Sekcje infrastruktury"
@@ -6878,13 +7363,9 @@ heading = "Klucze API"
 subheading = "Dane uwierzytelniające o określonym zakresie z limitami szybkości dla klucza, uprawnieniami i listami dozwolonych IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Dozwolone IP"
-anyIp = "Dowolne IP (brak listy dozwolonych)"
 created = "Utworzono"
 lastUsed = "Ostatnio użyto"
-permissions = "Uprawnienia"
-rateLimit = "Limit szybkości"
-rateLimitValue = "{{value}} żądań/min"
+revoke = "Unieważnij klucz"
 usageMonth = "Użycie w tym miesiącu"
 usageToday = "Użycie dzisiaj"
 
@@ -6892,6 +7373,20 @@ usageToday = "Użycie dzisiaj"
 description = "Utwórz klucz o określonym zakresie, aby zacząć wywoływać Stirling API."
 title = "Brak kluczy API"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nie udało się wczytać Twoich kluczy API. Spróbuj ponownie."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Unieważnić „{{name}}”? Każda integracja nadal używająca tego klucza natychmiast zacznie otrzymywać błędy 401. Tej operacji nie można cofnąć."
+cancel = "Anuluj"
+confirm = "Unieważnij klucz"
+title = "Unieważnij klucz API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Poświadczone"
+inScope = "W zakresie"
+notApplicable = "N/D"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtruj zdarzenia audytu według kategorii"
 heading = "Dzienniki audytu"
@@ -6935,6 +7430,7 @@ all = "Wszystkie"
 auth = "Uwierzytelnianie"
 config = "Konfiguracja"
 elevation = "Podniesienie uprawnień"
+policy = "Zasada"
 processing = "Przetwarzanie"
 security = "Bezpieczeństwo"
 
@@ -6944,19 +7440,35 @@ title = "Nie masz dostępu"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguracja"
-elevation = "Podniesienie uprawnień"
+policy = "Zasada"
 processing = "Przetwarzanie"
 totalEvents = "Łącznie zdarzeń · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Uwierzytelnianie"
+config = "Konfiguracja"
+elevation = "Podniesienie uprawnień"
+policy = "Zasada"
+processing = "Przetwarzanie"
+security = "Bezpieczeństwo"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Błąd"
+info = "Informacja"
+success = "Sukces"
+warning = "Ostrzeżenie"
+
+[portal.infrastructure.certLabel]
+certified = "Certyfikowane"
+inProgress = "W toku"
+notStarted = "Nie rozpoczęto"
+
 [portal.infrastructure.createKey]
 cancel = "Anuluj"
 createKey = "Utwórz klucz"
 done = "Gotowe"
-ipAllowlistHelper = "Zakresy CIDR rozdzielone przecinkami. Pozostaw puste, aby zezwolić na dowolne IP."
-ipAllowlistLabel = "Lista dozwolonych IP"
 keyNameLabel = "Nazwa klucza"
 keyNamePlaceholder = "np. Produkcja · ingest"
-permissionsLabel = "Uprawnienia"
 secretKeyCaption = "Tajny klucz"
 secretWarning = "Przechowuj to w menedżerze sekretów. Stirling przechowuje wyłącznie hash — nie ma możliwości późniejszego odzyskania."
 subtitle = "Ogranicz zakres klucza do minimum, którego potrzebuje. Możesz go rotować lub unieważnić w dowolnym momencie."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Skopiuj ten sekret teraz — nie zostanie pokazany ponownie."
 title = "Utwórz klucz API"
 titleCreated = "Klucz utworzony"
 
+[portal.infrastructure.deployLabel]
+live = "Działa"
+queued = "W kolejce"
+rolledBack = "Wycofano"
+rolling = "Wdrażanie"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Bieżąca kondycja każdego wdrożonego regionu Stirling — opó
 description = "Wdrożone regiony pojawią się tutaj po aprowizacji przestrzeni roboczej."
 title = "Brak wdrożonych regionów"
 
+[portal.infrastructure.keyLabel]
+active = "Aktywny"
+revoked = "Unieważniony"
+
+[portal.infrastructure.modelLabel]
+active = "Aktywny"
+degraded = "Obniżona wydajność"
+disabled = "Wyłączony"
+
 [portal.infrastructure.models]
 heading = "Modele"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Typ"
 version = "Wersja"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/wywołanie"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktywne modele"
 avgLatency = "Śr. opóźnienie"
@@ -7049,6 +7580,17 @@ modelForAria = "Model dla {{operation}}"
 operation = "Operacja"
 routedTo = "Kierowane do"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasyfikacja"
+extraction = "Ekstrakcja"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Obniżona wydajność"
+down = "Niedostępny"
+healthy = "Sprawny"
+
 [portal.infrastructure.security.access.byok]
 description = "Dostarcz klucz z własnego KMS. Stirling szyfruje nim, ale nadal może odczytywać."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modele"
 security = "Bezpieczeństwo"
 storage = "Magazyn"
 
+[portal.integrations]
+addAnother = "Dodaj kolejną"
+availableHeading = "Dostępne"
+comingSoonHeading = "Wkrótce"
+connect = "Połącz"
+connectedHeading = "Połączone"
+connectionCount_one = "{{count}} połączenie"
+connectionCount_other = "{{count}} połączeń"
+customApi = "Niestandardowe API"
+searchPlaceholder = "Szukaj integracji"
+subtitle = "Wszystko, z czym Stirling może się komunikować. Dane uwierzytelniające są tworzone raz tutaj, a następnie używane przez źródła, zasady i potoki."
+title = "Integracje"
+typedName = "Nazwa {{tool}}"
+
+[portal.integrations.filters]
+all = "Wszystkie"
+audit = "Audyt"
+connected = "Połączone"
+notify = "Powiadomienia"
+security = "Bezpieczeństwo"
+signing = "Podpisywanie"
+storage = "Magazyn"
+
+[portal.integrations.status]
+connected = "Połączono"
+
+[portal.integrations.table]
+integration = "Integracja"
+worksWith = "Współpracuje z"
+
+[portal.integrations.worksWith]
+pipelines = "Potoki"
+policies = "Zasady"
+sources = "Źródła"
+
+[portal.legal]
+draft = "{{label}} · wersja robocza"
+loadError = "Nie udało się wczytać tego dokumentu. Spróbuj ponownie."
+loading = "Wczytywanie…"
+title = "Dokument prawny"
+
 [portal.nav]
 agent-builder = "Kreator agentów"
 components = "Komponenty"
@@ -7182,6 +7765,7 @@ documents = "Dokumenty"
 editor = "Edytor"
 home = "Strona główna"
 infrastructure = "Infrastruktura"
+integrations = "Integracje"
 pipelines = "Potoki"
 policies = "Zasady"
 procurement = "Zakupy"
@@ -7190,25 +7774,9 @@ sources = "Źródła"
 usage = "Użycie i rozliczenia"
 users = "Użytkownicy"
 
-[portal.notifications]
-markAllRead = "Oznacz wszystkie jako przeczytane"
-title = "Powiadomienia"
-viewAll = "Wyświetl wszystkie"
-
-[portal.notifications.ariaLabel]
-none = "Powiadomienia, brak nieprzeczytanych"
-unread_one = "Powiadomienia, {{count}} nieprzeczytane"
-unread_other = "Powiadomienia, {{count}} nieprzeczytanych"
-
-[portal.notifications.count]
-allRead = "wszystkie przeczytane"
-loading = "ładowanie"
-new_one = "{{count}} nowe"
-new_other = "{{count}} nowych"
-
-[portal.notifications.empty]
-description = "Brak nowych powiadomień."
-title = "Wszystko nadrobione"
+[portal.nav.section]
+platform = "Platforma PDF"
+processor = "Procesor PDF"
 
 [portal.pipelines]
 subtitle = "Każdy zautomatyzowany potok dokumentów na backendzie: uporządkowany łańcuch operacji na zestawie źródeł, uruchamiany przez wyzwalacz. Kliknij wiersz, aby zobaczyć jego kroki i źródła."
@@ -7220,15 +7788,28 @@ newPipeline = "Nowy potok"
 [portal.pipelines.builder]
 addStep = "Dodaj narzędzie"
 back = "Wróć do potoków"
+cannotFollow = "Nie może przyjąć {{produced}}"
+chooseAccount = "Wybierz konto"
+chooseDestination = "Wybierz miejsce docelowe"
+chooseOperation = "Wybierz, co robi ten krok"
+chooseSource = "Wybierz źródło"
 discard = "Odrzuć zmiany"
 enabled = "Włączone"
+inputs = "Wejście"
+inputSource = "Źródło wejściowe"
+inputTrigger = "Wyzwalacz"
 keepEditing = "Kontynuuj edycję"
+needsConfiguring = "Wymaga konfiguracji"
 needsUpload = "Wymaga przesłanego pliku"
+noSources = "Nie połączono jeszcze żadnych źródeł. Utwórz źródło, aby użyć go jako wejścia."
 noToolMatches = "Żadne narzędzia nie pasują do wyszukiwania."
 pipelineSettings = "Ustawienia potoku"
 searchTools = "Szukaj narzędzi"
 selectToolBody = "Dodaj narzędzie, aby zbudować potok."
 selectToolTitle = "Brak narzędzi"
+sendToSystem = "Wyślij do innego systemu"
+stepsIncompatible = "Te kroki nie mogą działać na tym, co wytwarza poprzedni krok: {{tools}}."
+stepsNeedSetup = "Te kroki nadal wymagają konfiguracji przed zapisaniem: {{tools}}."
 toolSettings = "Ustawienia narzędzia"
 unknownStep = "Nierozpoznana operacja, zachowana bez zmian."
 unsavedBody = "Masz niezapisane zmiany. Zapisać je przed opuszczeniem czy odrzucić?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Niezapisane zmiany"
 uploadUnsupported = "Przesłane pliki nie są jeszcze obsługiwane w potokach, więc tych kroków nie można zapisać: {{tools}}."
 usesDefaults = "Uruchamia się z ustawieniami domyślnymi"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Łączy każdy plik z poprzedniego kroku"
+fan-out = "Uruchamia się raz dla każdego pliku z poprzedniego kroku"
+format-mismatch = "Wymaga {{accepts}}, ale poprzedni krok wytwarza {{produced}}"
+output-uncertain = "Może się nie uruchomić: wynik poprzedniego kroku zależy od jego konfiguracji"
+source-mismatch = "Wymaga {{accepts}}, ale wejściem tego potoku jest {{produced}}"
+undeclared-operation = "Nie można sprawdzić, co akceptuje ten krok"
+
 [portal.pipelines.composer]
 addTool = "Dodaj narzędzie"
 cancel = "Anuluj"
 chainEmpty = "Dodaj narzędzie, aby rozpocząć budowanie potoku."
 create = "Utwórz potok"
-directory = "Folder wyjściowy"
-directoryHelp = "Ścieżka bezwzględna na serwerze. Musi znajdować się w skonfigurowanych dozwolonych folderach."
 editingUnsupported = "Wyświetlanie tych parametrów narzędzia do edycji nie jest jeszcze obsługiwane."
 moveDown = "Przenieś w dół"
 moveUp = "Przenieś w górę"
 name = "Nazwa"
 namePlaceholder = "np. Przegląd redakcji"
-noSources = "Nie połączono jeszcze żadnych źródeł. Potok nadal może działać na plikach dostarczonych bezpośrednio do niego."
 noToolSettings = "To narzędzie nie ma konfigurowalnych ustawień."
 operations_one = "Operacja ({{count}})"
 operations_other = "Operacje ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Usuń"
 title = "Usunąć potok?"
 
 [portal.pipelines.detail]
+clearHistory = "Wyczyść historię"
 delete = "Usuń potok"
 run = "Uruchom teraz"
 
 [portal.pipelines.empty]
 action = "Utwórz potok"
+connectSource = "Połącz źródło"
 description = "Utwórz swój pierwszy potok: wybierz źródła, na których działa, połącz operacje w łańcuch i wybierz miejsce zapisu wyjścia."
 title = "Brak potoków"
 
@@ -7286,15 +7874,17 @@ active = "Aktywne"
 paused = "Wstrzymane"
 total = "Potoki"
 
-[portal.pipelines.output]
-folder = "Zapisz do folderu"
-inline = "Zwróć pliki"
-
 [portal.pipelines.run]
+allProcessed_one = "Nic do uruchomienia: {{count}} dokument ze źródła został już przetworzony."
+allProcessed_other = "Nic do uruchomienia: wszystkie {{count}} dokumenty w źródłach zostały już przetworzone."
 completed_one = "Uruchomienie zakończone."
 completed_other = "Wszystkie {{count}} uruchomienia zakończone."
 empty = "Nie ma nic do uruchomienia: źródła nie miały dokumentów do przetworzenia."
 failed = "Uruchomienie nie powiodło się: {{error}}"
+historyCleared = "Historia wyczyszczona. Następne uruchomienie ponownie przetworzy wszystko, co obecnie znajduje się w źródłach."
+inFlight = "Nic nowego do uruchomienia: dokumenty są nadal przetwarzane z wcześniejszego uruchomienia."
+parked_one = "Nic do uruchomienia: {{count}} dokument wcześniej zakończył się niepowodzeniem i jest zaparkowany. Usuń przyczynę, a następnie wyczyść historię, aby spróbować ponownie."
+parked_other = "Nic do uruchomienia: {{count}} dokumentów wcześniej zakończyło się niepowodzeniem i jest zaparkowanych. Usuń przyczynę, a następnie wyczyść historię, aby spróbować ponownie."
 running = "Uruchomienie rozpoczęte; nadal trwa."
 timeout = "Uruchomienie trwa dłużej niż oczekiwano; może nadal zakończyć się w tle."
 
@@ -7314,12 +7904,18 @@ manual = "Ręcznie"
 schedule = "Zaplanowane"
 
 [portal.policies]
+defaultName = "Zasada {{category}}"
 subtitle = "Stałe automatyzacje, które wymuszają potok narzędzi na każdym dokumencie. Każda zasada uruchamia się przy przesyłaniu lub eksporcie, wykonuje swój łańcuch narzędzi i zapisuje wymuszoną wersję obok oryginału."
 title = "Zasady"
 
 [portal.policies.card]
 comingSoon = "Ulepsz do Enterprise"
 notSetUp = "Nie skonfigurowano"
+requiresAiEngine = "Wymaga silnika AI"
+
+[portal.policies.categories.classification]
+desc = "Identyfikuj typ każdego dokumentu podczas przesyłania i oznaczaj jego metadane do archiwizacji i wyszukiwania."
+label = "Klasyfikacja"
 
 [portal.policies.categories.compliance]
 desc = "Wymuszaj wymagania HIPAA, GDPR, SOC 2 lub FedRAMP na każdym dokumencie."
@@ -7344,6 +7940,13 @@ label = "Bezpieczeństwo"
 [portal.policies.config]
 scopeAll = "Wszystkie dokumenty"
 
+[portal.policies.config.classification]
+summary = "Klasyfikuje każdy przesłany dokument według etykiet zespołu i oznacza jego metadane."
+
+[portal.policies.config.classification.rules]
+0 = "Klasyfikuj"
+1 = "Oznacz metadane"
+
 [portal.policies.config.compliance]
 summary = "Waliduje dokumenty względem frameworków regulacyjnych, zanim opuszczą system."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. pewność"
 2 = "Nazwij"
 3 = "Normalizuj"
 
+[portal.policies.config.purview]
+label = "Zastosuj etykietę poufności Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Dzierżawa Purview"
+labelId = "ID etykiety"
+labelIdHelp = "GUID etykiety z portalu Purview. Zastosowanie etykiety zapisuje jej metadane w PDF; nie może szyfrować, do czego potrzebny jest klient Microsoft."
+labelName = "Nazwa etykiety (opcjonalnie)"
+labelNameHelp = "Zapisywana razem z ID, aby użytkownicy i narzędzia mogły rozpoznać etykietę."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview odróżnia etykietę zastosowaną przez zasadę od tej wybranej przez osobę."
+label = "Jak zapisywana jest etykieta"
+privileged = "Jako wybrana przez osobę"
+standard = "Jako zastosowana automatycznie"
+
+[portal.policies.config.purviewRead]
+label = "Odczytaj etykietę Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Dzierżawa Purview"
+connectionHelp = "Odczytuje etykietę, którą dokument już posiada, aby późniejsze kroki mogły na nią reagować."
+
 [portal.policies.config.retention]
 summary = "Wymusza, jak długo dokumenty są przechowywane, kiedy archiwizować i kiedy usuwać."
 
@@ -7438,6 +8064,7 @@ title = "Brak aktywności"
 [portal.policies.endpoints]
 addWatermark = "Znak wodny"
 autoRedact = "Redaguj PII"
+classifyAndLabel = "Klasyfikuj"
 compressPdf = "Kompresuj"
 flatten = "Spłaszcz"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Twoje polityki są zapisane i pojawią się po przywróceniu poł
 retry = "Ponów próbę"
 title = "Backend niedostępny"
 
+[portal.policies.operations]
+change = "Zmień działanie tego kroku"
+noResults = "Żaden krok nie pasuje. Spróbuj nazwy produktu albo „scan”, „notify”, „attach”."
+searchPlaceholder = "Szukaj kroków — spróbuj „scan”, „attach” lub nazwy produktu"
+
+[portal.policies.operations.bodyMode]
+binary = "Surowe bajty pliku"
+json = "Wewnątrz ładunku JSON"
+multipart = "Jako przesyłany plik (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Twój własny serwer ClamAV sprawdza dokument; nic nie opuszcza Twojej sieci."
+label = "Skanuj w poszukiwaniu wirusów (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Odrzuca dokumenty zawierające makra, pliki wykonywalne, skrypty lub osadzone obiekty."
+label = "Blokuj aktywną zawartość"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive sprawdza dokument, a uruchomienie zatrzymuje się, jeśli nie jest czysty."
+label = "Skanuj w poszukiwaniu wirusów"
+
+[portal.policies.operations.confluenceAttach]
+description = "Zapisuje przetworzony dokument na stronie."
+label = "Dołącz do strony Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Przesyła dokument do ConsignO Cloud w celu podpisania."
+label = "Wyślij do podpisu (ConsignO)"
+note = "Przesyła dokument. Pobieranie podpisanej kopii nie jest jeszcze obsługiwane, ponieważ krok nie może przekazać wyniku do późniejszego kroku."
+
+[portal.policies.operations.customApiCall]
+description = "Utwórz wywołanie samodzielnie: ścieżka, metoda, treść i obsługa odpowiedzi."
+label = "Wywołaj niestandardowe API"
+
+[portal.policies.operations.discordNotify]
+description = "Informuje kanał, że zasada obsłużyła dokument."
+label = "Opublikuj wiadomość w Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Zapisuje działania zasady jako dokument z możliwością wyszukiwania."
+label = "Zindeksuj zdarzenie audytu w Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart pasuje do API przesyłania; JSON pasuje do API, które oczekują pliku wewnątrz ładunku; binary wysyła surowe bajty."
+label = "Jak wysłać dokument"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Treść JSON wysłana bez zmian. {{document.base64}} zawiera plik; {{document.*}} i {{run.*}} są uzupełniane dla każdego dokumentu."
+label = "Treść JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Konto"
+
+[portal.policies.operations.fields.domain]
+label = "Domena Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Pole formularza, pod którym API oczekuje dokumentu."
+label = "Nazwa pola pliku"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Od"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Obiekt JSON z parami nazwa/wartość nagłówków. Dane uwierzytelniające połączenia są dodawane za Ciebie."
+label = "Nagłówki"
+
+[portal.policies.operations.fields.index]
+label = "Indeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Klucz zgłoszenia"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Wysyłane jako treść wiadomości. {{document.*}} i {{run.*}} są uzupełniane dla każdego dokumentu."
+label = "Wiadomość"
+
+[portal.policies.operations.fields.method]
+label = "Metoda"
+
+[portal.policies.operations.fields.pageId]
+label = "ID strony"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Dołączane do bazowego URL połączenia. Nigdy nie może dotrzeć do innego hosta."
+label = "Ścieżka"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Miejsce w dysku, w którym zapisać plik. {{document.filename}} jest uzupełniane dla każdego dokumentu."
+label = "Ścieżka docelowa"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Raport pozostawia dokument bez zmian. Zamiana podmienia go na to, co zostanie zwrócone."
+label = "Co zrobić z odpowiedzią"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email podpisującego"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Temat"
+placeholder = "Przetworzono: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analizuje ten tekst. Użyj {{document.title}} lub wklej tekst, który chcesz sprawdzić."
+label = "Tekst do sprawdzenia"
+
+[portal.policies.operations.fields.to]
+label = "Do"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nazwa użytkownika Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informuje przestrzeń, że zasada obsłużyła dokument."
+label = "Opublikuj wiadomość w Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Zapisuje przetworzony dokument w zgłoszeniu."
+label = "Dołącz do zgłoszenia Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Wysyła przetworzony dokument jako załącznik."
+label = "Wyślij dokument emailem (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Zapisuje przetworzony dokument w folderze."
+label = "Prześlij do Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Twój własny serwer Presidio raportuje znalezione dane osobowe."
+label = "Wykryj dane osobowe"
+note = "Presidio odczytuje tekst, a nie pliki. Podaj tekst, który chcesz sprawdzić — sam dokument nie jest przesyłany."
+
+[portal.policies.operations.responseMode]
+replace = "Zastąp dokument odpowiedzią"
+report = "Zachowaj dokument, zapisz odpowiedź"
+
+[portal.policies.operations.sendgridEmail]
+description = "Wysyła przetworzony dokument jako załącznik."
+label = "Wyślij dokument emailem (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informuje kanał, że zasada obsłużyła dokument."
+label = "Opublikuj wiadomość w Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Zapisuje działania zasady tam, gdzie Twoi audytorzy już zaglądają."
+label = "Wyślij zdarzenie audytu do Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Zapisuje działania zasady w kolektorze HTTP."
+label = "Wyślij zdarzenie audytu do Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Informuje kanał, że zasada obsłużyła dokument."
+label = "Opublikuj wiadomość w Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Wysyła sam dokument na wybrany przez Ciebie URL."
+label = "Opublikuj dokument do webhooka"
+
+[portal.policies.operations.zapierNotify]
+description = "Przekazuje szczegóły uruchomienia do Twojej automatyzacji."
+label = "Uruchom Zap lub scenariusz Make"
+
 [portal.policies.stats]
 activeFor = "Aktywne"
 dataProcessed = "Przetworzone dane"
@@ -7473,6 +8277,13 @@ label = "Egzekwowane dokumenty"
 description = "Skonfigurowane, ale nieuruchamiane"
 label = "Wstrzymane"
 
+[portal.policies.table]
+appliesTo = "Dotyczy"
+docs = "Dokumenty objęte wymuszeniem"
+enforces = "Wymusza"
+policy = "Zasada"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Wstecz"
 cancel = "Anuluj"
@@ -7480,6 +8291,10 @@ continue = "Kontynuuj"
 enablePolicy = "Włącz politykę"
 saveChanges = "Zapisz zmiany"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identyfikuje typ dokumentu na podstawie etykiet zespołu i oznacza go, aby można było go archiwizować i wyszukiwać według kategorii."
+label = "Klasyfikuj dokument"
+
 [portal.policies.wizard.capability.compress]
 desc = "Kompresuje dokument do mniejszego rozmiaru pliku."
 label = "Zmniejsz rozmiar pliku"
@@ -7500,10 +8315,18 @@ label = "Redaguj informacje poufne"
 desc = "Usuwa ukryty JavaScript, aby nic nie mogło uruchomić się automatycznie po otwarciu dokumentu."
 label = "Usuń aktywną zawartość"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Potwierdza, że dokument istniał dokładnie w tej formie w danym momencie, używając niezależnego urzędu znacznika czasu. Wysyłany jest tylko hash — dokument nigdy nie opuszcza Twojego serwera."
+label = "Dodaj zaufany znacznik czasu"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Umieszcza widoczny znak (np. „Poufne”) na każdej stronie."
 label = "Zastosuj znak wodny"
 
+[portal.policies.wizard.classification]
+description = "Każdy przesłany dokument jest klasyfikowany według wbudowanych etykiet i oznaczany pasującymi typami. Zestaw etykiet jest wspólny dla całego zespołu."
+labelsHeading = "Etykiety klasyfikacji"
+
 [portal.policies.wizard.errors]
 noTools = "Najpierw włącz co najmniej jedno narzędzie w przepływie pracy."
 saveFailed = "Nie udało się zapisać polityki. Spróbuj ponownie."
@@ -7548,73 +8371,118 @@ setUp = "Skonfiguruj politykę {{category}}"
 [portal.policies.wizard.workflow]
 description = "Wybierz, co ta polityka robi z każdym przetwarzanym dokumentem."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktywne"
-noRule = "Nie egzekwowano jeszcze żadnej reguły"
-subtitle = "Stałe automatyzacje, przez które przechodzi każdy dokument, niezależnie od tego, który potok go obsługuje."
-title = "Co działa na Twoich PDF"
-
 [portal.policySummary.action]
-comingSoon = "Przejdź na Enterprise"
-configure = "Skonfiguruj"
 setUp = "Skonfiguruj"
 
-[portal.policySummary.column]
-activeRule = "Aktywna reguła"
-policy = "Polityka"
-status = "Status"
+[portal.processorFlow]
+footnote = "Liczby obejmują ostatnie 24 godziny. Szybkość przepływu ma charakter poglądowy."
+liveBadge = "Na żywo"
+stats = "{{connected}} połączonych · {{processed}} przetworzonych PDF"
+title = "Procesor PDF"
 
-[portal.policySummary.empty]
-description = "Po skonfigurowaniu polityk kategorie pojawią się tutaj."
-title = "Brak polityk"
+[portal.processorFlow.lens]
+ariaLabel = "Tryb widoku"
+flow = "Przepływ"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktywna"
-off = "Wyłączona"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Niepowodzenie"
+heading = "Wyniki"
+success = "Dostarczono"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktywnych"
+count = "{{n}} · 24h"
+heading = "Zasady"
+setUp = "Skonfiguruj"
 soon = "Wkrótce"
 
-[portal.processingStatus]
-managePlan = "Zarządzaj planem"
-volumeSuffix = "Przetworzone pliki PDF · ostatnie 30 dni"
+[portal.processorFlow.sankey]
+waist = "Zasady · {{n}} aktywnych"
+
+[portal.processorFlow.sankey.empty]
+description = "Połącz źródło i włącz zasadę, aby obserwować przepływ dokumentów przez procesor."
+title = "Brak przepływu"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Połącz"
+editor = "Stirling PDF Editor"
+heading = "Źródła"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Odbiór emaili"
 
 [portal.procurement]
-reset = "Zresetuj zakupy (demo)"
 subtitle = "Przeprowadź swój zespół przez ocenę, umowę i wdrożenie. Każdy dokument w jednym miejscu."
 title = "Zakupy"
 
-[portal.procurement.action]
-download = "Pobierz"
-pay = "Zapłać teraz"
-request = "Poproś"
-sign = "Przejrzyj i podpisz"
-upload = "Prześlij"
-
 [portal.procurement.agreement]
 agreeCta = "Zgódź się i subskrybuj"
+confidential = "Poufne"
 confirm = "Przeczytałem(-am) i akceptuję Stirling Enterprise Agreement."
-eyebrow = "Umowa"
-intro = "Jedna połączona umowa obejmuje Twoją ofertę: Master Service Agreement, formularz zamówienia, EULA i umowę przetwarzania danych. Przejrzyj ją, a następnie zaakceptuj, aby przyjąć wycenę jako zobowiązaną subskrypcję."
-title = "Przejrzyj swoją umowę enterprise"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA i DPA połączone w jeden podpis."
+download = "Pobierz"
+downloadDraftError = "Nie udało się wygenerować PDF umowy — renderer dokumentów jest niedostępny. Spróbuj ponownie wkrótce lub skontaktuj się z pomocą techniczną."
+downloadError = "Nie udało się pobrać podpisanej umowy. Spróbuj ponownie."
+legalName = "Nazwa podmiotu prawnego"
+legalNamePlaceholder = "Podmiot prawny, który podpisze"
+loadError = "Nie udało się wczytać umowy. Spróbuj ponownie."
+loading = "Wczytywanie umowy..."
+ref = "Nr ref. {{ref}} · {{version}}"
+requestChanges = "Poproś o zmiany"
+scrollHint = "Przewiń, aby sprawdzić"
+signatory = "Imię i nazwisko podpisującego"
+signatoryPlaceholder = "Imię i nazwisko"
+signatoryTitle = "Tytuł podpisującego"
+signatoryTitlePlaceholder = "np. General Counsel"
+signError = "Nie udało się zarejestrować Twojego podpisu. Spróbuj ponownie."
 
 [portal.procurement.builder]
 addons = "Dodatki"
+addressLine1 = "Adres, wiersz 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adres, wiersz 2"
+addressLine2Placeholder = "Apartament, piętro, budynek"
 back = "Wstecz"
 businessName = "Nazwa firmy"
 businessNamePlaceholder = "Twoja firma"
+city = "Miasto"
+cityPlaceholder = "San Francisco"
+completeRequired = "Uzupełnij wymagane pola (oznaczone *) prawidłowym adresem email przed wygenerowaniem wyceny."
+contactEmail = "Email kontaktowy"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Imię i nazwisko osoby kontaktowej"
+contactNamePlaceholder = "Jane Doe"
 continue = "Kontynuuj"
-country = "Kraj"
-countryEuro = "Strefa euro (EUR €)"
-countryUK = "Wielka Brytania (GBP £)"
-countryUS = "Stany Zjednoczone (USD $)"
+done = "Gotowe"
 eula = "Przeczytałem(-am) i akceptuję Stirling Enterprise EULA. Reguluje ona umowę wygenerowaną na podstawie tej wyceny."
 generate = "Wygeneruj wycenę"
-included = "Wliczone"
 indemnification = "Odszkodowanie z tytułu IP"
 indemnificationSub = "Bronimy kwalifikujących się roszczeń IP zgodnie z EULA"
-offlineLicense = "Licencja offline / air-gapped"
-offlineLicenseSub = "Plik licencji do pobrania dla izolowanej, self-hosted instancji"
+paperEyebrow = "Wycena Enterprise"
+paperFor = "Przygotowano dla"
+pdfSize = "Rozmiar PDF"
+poNumber = "Numer zamówienia"
+poNumberPlaceholder = "Opcjonalnie"
+postalCode = "Kod pocztowy"
+postalCodePlaceholder = "94105"
+posture = "Ład organizacyjny"
+posture_count = "~{{count}} zasad"
+posture_essentials = "Podstawowe"
+posture_essentialsSub = "Klasyfikacja + Udostępnianie — ustawienia domyślne"
+posture_governed = "Zarządzane"
+posture_governedSub = "Dodaje Bezpieczeństwo i Routing"
+posture_regulated = "Regulowane"
+posture_regulatedSub = "Każda kategoria — Zgodność, Retencja, Pobieranie"
 qbr = "Kwartalne przeglądy biznesowe"
 qbrSub = "Twój SE przegląda wykorzystanie i plan rozwoju co kwartał"
+region = "Stan / region"
+regionPlaceholder = "Kalifornia"
 running = "{{annual}} / rok · {{years}}-letni {{tcv}}"
 s1Sub = "Twój zespół i pliki PDF, które planujesz przetwarzać każdego roku."
 s1Title = "Ile będziesz przetwarzać?"
@@ -7623,6 +8491,12 @@ s2Title = "Zobowiązanie i usługa"
 s3Sub = "Do wyceny i umowy, którą generuje."
 s3Title = "Twoje dane"
 serviceLevel = "Poziom usługi"
+size_compact = "Kompaktowy"
+size_compactSub = "Głównie tekst, poniżej 1 MB"
+size_heavy = "Ciężki"
+size_heavySub = "Skanowany lub z dużą liczbą obrazów, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Mieszany tekst i obrazy, od 1 do 5 MB"
 slDedicated = "Dedykowany"
 slDedicatedSub = "4 godziny robocze · dedykowany opiekun konta · +30%"
 slPriority = "Priorytetowy"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Ten sam dzień roboczy · wskazany CSM · +15%"
 slStandard = "Standardowy"
 slStandardSub = "Następny dzień roboczy · współdzielony CSM · wliczone"
 stepOf = "Krok {{n}} z {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Opcjonalnie"
 term = "Okres"
 termDiscount = "Zastosowano {{pct}}% rabatu za wieloletnie zobowiązanie"
 title = "Utwórz wycenę"
@@ -7637,6 +8513,7 @@ training = "Wdrożenie i szkolenie"
 trainingSub = "Sesje na żywo, aby uruchomić Twój zespół"
 users = "Łączna liczba użytkowników"
 usersPlaceholder = "np. 250"
+viewEula = "Przeczytaj"
 volEstimated = "Oszacowano na podstawie {{count}} użytkowników (~2 000 PDF każdy, w tym automatyzacja). Edytuj, jeśli znasz lepszą wartość."
 volManual = "Używamy podanej przez Ciebie wartości. W każdej chwili możesz ponownie oszacować na podstawie wielkości zespołu."
 volNoUsers = "Nie masz pewności? Wpisz wielkość zespołu, a oszacujemy ją."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "np. 1 000 000"
 years_one = "{{count}} rok"
 years_other = "{{count}} lat"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokument"
-count_other = "{{count}} dokumentów"
-done = "Gotowe"
-here = "Jesteś tutaj"
-hide = "Ukryj"
-optional = "Opcjonalne"
-paidAddon = "Płatny dodatek"
-show = "Pokaż"
-subtitle = "Wszystko, czego potrzebujesz na każdym etapie procesu, wyświetlane w miarę postępu transakcji."
-supportingSubtitle = "SOC 2, przeglądy bezpieczeństwa, formularze podatkowe i więcej — gotowe, gdy poprosi o nie Twój zespół bezpieczeństwa lub zakupów. Niektóre wiążą się z jednorazową opłatą."
-supportingTitle = "Wsparcie Twojej oceny"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form i DPA w jednym podpisie."
+download = "Pobierz"
+eula = "EULA i warunki komercyjne"
+eulaSub = "Oprogramowanie i warunki komercyjne samoobsługi."
+invoice = "Faktura"
+invoiceSub = "Twoja pierwsza faktura za subskrypcję."
+laterInvoice = "Dostępne po zaakceptowaniu"
+laterQuote = "Dostępne po wystawieniu wyceny"
+quote = "Wycena"
+quoteSub = "Twoja szczegółowa wycena Enterprise."
+sla = "Załącznik SLA"
+slaSub = "Poziomy wsparcia i docelowe czasy odpowiedzi."
+subprocessors = "Podprocesorzy"
+subprocessorsSub = "Strony trzecie, które przetwarzają dane w Twoim imieniu."
+subtitle = "Dokumenty transakcji, dostępne w dowolnym momencie."
 title = "Dokumenty"
-upcoming = "Nadchodzące"
+view = "Zobacz"
 
 [portal.procurement.error]
 title = "Coś poszło nie tak"
 
 [portal.procurement.hero]
-company = "Twoja umowa enterprise"
+barAria = "Etap {{current}} z {{total}}"
 ctaAgreement = "Przejrzyj i podpisz umowę"
-ctaLive = "Działasz już na żywo"
-ctaPayment = "Dodaj płatność"
+ctaExploring = "Skonfiguruj wersję próbną"
 ctaQuote = "Przejrzyj wycenę"
+ctaReviewQuote = "Sprawdź wycenę"
 ctaTrial = "Utwórz wycenę"
+documents = "Dokumenty"
 eyebrow = "Zakupy enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Zaproś członków zespołu"
-keyDocs = "Kluczowe dokumenty"
-nextStep = "Następny krok: {{action}}"
-notStarted = "Nie rozpoczęto"
+licenseKey = "Klucz licencji"
+liveSub = "Twoja organizacja została przygotowana, a licencja jest aktywna."
+liveTitle = "Działasz już na Stirling Enterprise"
+next = "Dalej: {{stage}}"
 open = "Otwórz zakupy"
 scheduleCall = "Zaplanuj rozmowę"
-setup1Sub = "Zaproś członków zespołu"
-setup1Title = "Wdróż PDF Editor"
-setup2Sub = "Włącz przetwarzanie w edytorach i innych źródłach"
-setup2Title = "Połącz PDF Processor"
-setup3Sub = "Włącz Bezpieczeństwo, Zgodność, Routing lub Retencję, gdy ich potrzebujesz"
-setup3Title = "Dodaj zalecane polityki"
+sentenceAgreement = "sprawdzenie i podpisanie umowy"
+sentenceLive = "prowizjonowanie i wdrożenie"
+sentencePayment = "zamówienie zakupu i płatność"
+sentenceQuote = "sprawdzenie i zaakceptowanie wyceny"
+sentenceTrial = "konfiguracja próbnego obszaru roboczego"
 
 [portal.procurement.journey]
 daysLeft_one = "Pozostał {{count}} dzień"
 daysLeft_other = "Pozostało {{count}} dni"
-engineerLabel = "Twój solutions engineer"
-eyebrow = "Twoje wdrożenie"
-live = "Działasz już na Stirling Enterprise"
-nextStep = "Następny krok: {{action}}"
-subtitle = "Twój solutions engineer jest z Tobą na każdym etapie. Jedno następne działanie naraz; pełna lista kontrolna znajduje się poniżej."
-title = "Od wersji próbnej do działania na żywo — jedna prowadzona ścieżka"
-trialTitle = "Wersja próbna Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Jeden podpis obejmuje MSA, formularz zamówienia, EULA i DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Nie udało się jeszcze wygenerować pliku licencji offline —
 downloadOffline = "Pobierz licencję offline (.lic)"
 hint = "Wklej ten klucz do self-hosted instancji, aby ją aktywować, albo zachowaj go w dokumentacji. Przechowuj go bezpiecznie."
 label = "Twój klucz licencyjny"
+subtitle = "Aktywuj instancję self-hosted tym kluczem albo zachowaj go do swoich zapisów."
+title = "Twój klucz licencji"
+trialFileHint = "To jest plik licencji próbnej. Gdy umowa będzie gotowa, wróć i pobierz go ponownie — w przeciwieństwie do klucza licencji online plik .lic nie zaktualizuje się sam."
 
 [portal.procurement.link]
 cta = "Połącz konto"
@@ -7739,65 +8619,62 @@ description = "Twoja subskrypcja jest aktywna, a licencja została wydana. Twój
 eyebrow = "Na żywo"
 title = "Działasz już na Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Klucze próbne, wyceny zobowiązanego wolumenu, umowa z jednym podpisem, płatność i rejestr dokumentów będą tutaj dostępne po rozpoczęciu oceny enterprise."
-eyebrow = "Tylko Enterprise"
-talkToSales = "Porozmawiaj ze sprzedażą"
-title = "Ścieżka zakupów otwiera się z Enterprise"
-
 [portal.procurement.milestone]
-accept = "Zaakceptuj i kontynuuj"
-description = "Pobierz PDF, aby udostępnić go zespołowi, wróć, aby zaakceptować, gdy będziesz gotowy, lub wprowadź zmiany."
-download = "Pobierz PDF"
 downloadError = "Nie udało się jeszcze pobrać PDF z wyceną — spróbuj ponownie za chwilę."
-edit = "Edytuj wycenę"
-eyebrow = "Wycena {{number}}"
-perYear = " / rok"
-preparedFor = "Przygotowano dla {{company}}"
-tcv = "{{value}} łącznej wartości umowy"
-title = "Twoja wycena jest gotowa"
-
-[portal.procurement.modal]
-cancel = "Anuluj"
-chooseFile = "Wybierz plik"
-close = "Zamknij"
-downloadBody = "Pobieranie rozpocznie się wkrótce."
-downloadCta = "Pobierz"
-downloadTitle = "Pobierz"
-noFile = "Nie wybrano pliku"
-payBody = "Zapłać za zobowiązaną umowę kartą lub przelewem bankowym przez Stripe. Twój workspace zostanie przygotowany, gdy tylko płatność zostanie zaksięgowana."
-payCta = "Przejdź do Stripe"
-payTitle = "Potwierdź płatność"
-requestBodyFree = "Generujemy to na żądanie. Potwierdź, a Twój solutions engineer wkrótce to prześle."
-requestBodyPaid = "To płatny dodatek. Potwierdź, a Twój solutions engineer określi zakres i wyśle dokumenty."
-requestCta = "Poproś"
-requestTitle = "Poproś o ten dokument"
-signBody = "Otwiera Stirling Enterprise Agreement do podpisu elektronicznego: jeden podpis obejmuje MSA, formularz zamówienia, EULA i DPA. Podpisujemy automatycznie i przechodzisz do płatności."
-signCta = "Otwórz do podpisu"
-signTitle = "Przejrzyj i podpisz umowę"
-uploadBody = "Wyślij nam swoje PO, a wystawimy fakturę zgodnie z jego warunkami. Przeciągnij PDF lub wybierz plik poniżej."
-uploadCta = "Prześlij zamówienie zakupu"
-uploadTitle = "Prześlij swoje zamówienie zakupu"
 
 [portal.procurement.payment]
 description = "Twoja wycena została zaakceptowana, a licencja jest już aktywna — Twój zespół może zacząć od razu. Opłać pierwszą fakturę, gdy będziesz gotowy; możesz ją opłacić lub pobrać tutaj, bez potrzeby używania emaila."
+downloadAgreement = "Pobierz podpisaną umowę"
 downloadInvoice = "Pobierz fakturę"
-simulate = "Symuluj otrzymanie płatności (demo)"
+eyebrow = "Płatność"
 title = "Subskrypcja utworzona"
 viewInvoice = "Wyświetl i opłać fakturę"
 
+[portal.procurement.review]
+acceptCta = "Akceptuj wycenę"
+annual = "Opłata roczna (rok 1)"
+downloadCta = "Pobierz wycenę"
+poNumber = "Zamówienie zakupu: {{po}}"
+renewal = "Odnawia się za {{amount}}/rok po zakończeniu okresu (+{{pct}}% CPI)"
+tcv = "Okres {{years}} lat, płatne z góry w całości: {{tcv}}"
+validUntil = "Ważne do {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Nie udało się załadować harmonogramu."
 fallbackLink = "Otwórz planowanie w nowej karcie"
+loading = "Wczytywanie harmonogramu..."
 subtitle = "Twój solutions engineer przeprowadzi zespół przez wdrożenie. Wybierz dogodny termin."
 title = "Zaplanuj rozmowę"
 
-[portal.procurement.status]
-action = "Wymagane działanie"
-available = "Dostępne"
-complete = "Ukończone"
-pending = "Oczekujące"
-request = "Na żądanie"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Odizolowane, bez połączeń wychodzących"
+back = "Wstecz"
+businessName = "Nazwa firmy"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Zarządzane, najszybszy start"
+continue = "Kontynuuj"
+deployment = "Gdzie wdrożyć?"
+eula = "Akceptuję Stirling EULA i warunki komercyjne."
+fullName = "Imię i nazwisko"
+fullNamePlaceholder = "Twoje imię i nazwisko"
+invites = "Zaproś członków zespołu · opcjonalnie"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Umów rozmowę"
+seats = "Osoby testujące"
+seatsPlaceholder = "np. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker lub Kubernetes"
+start = "Rozpocznij wersję próbną"
+stepOf = "Krok {{n}} z {{total}}"
+subtitle = "Bezpłatnie przez 14 dni, karta nie jest wymagana."
+subtitleDetails = "Kilka informacji do wyceny i umowy."
+talkFirst = "Wolisz najpierw porozmawiać?"
+title = "Skonfiguruj wersję próbną"
+viewEula = "Przeczytaj"
+workEmail = "Email służbowy"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Przedłużenie dodaje 7 dni i powiadamia Twojego solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Limit wyczerpany"
 subtitle = "Twoja bezpłatna wersja próbna działa do {{date}}. Karta nie jest wymagana."
 title = "Wersja próbna Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Ceny dla zobowiązanego wolumenu, SSO + SCIM + RBAC dla całej organizacji, 90-dniowy niezmienny audyt i dedykowany SE."
-homeCta = "Rozpocznij wersję próbną →"
-homeHeadline = "Przetwarzaj miliony PDF."
-
-[portal.recentActivity]
-title = "Ostatnia aktywność"
-viewAll = "Wyświetl wszystko"
-
-[portal.recentActivity.empty]
-description = "Uruchomienia potoków, wdrożenia i zdarzenia agentów pojawią się tutaj."
-title = "Na razie nic tu nie ma"
-
 [portal.search]
 ariaLabel = "Szukaj"
 placeholder = "Szukaj w Stirling — endpointy, potoki, dokumenty…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Połączenie konta"
 
-[portal.shell.header]
-accountFallback = "Konto"
-accountMenu = "Menu konta"
-darkMode = "Tryb ciemny"
-lightMode = "Tryb jasny"
-search = "Szukaj"
-searchPlaceholder = "Szukaj…"
-signOut = "Wyloguj się"
-switchToDark = "Przełącz na motyw ciemny"
-switchToLight = "Przełącz na motyw jasny"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumentów"
 linkAccount = "Połącz konto Stirling"
-planEditor = "Plan Editor"
-planEnterprise = "Plan Enterprise"
-planProcessor = "Plan Processor"
 primaryNav = "Nawigacja główna"
 switchApp = "Przełącz aplikację"
 
+[portal.shell.topbar]
+closeNav = "Zamknij nawigację"
+openNav = "Otwórz nawigację"
+search = "Szukaj"
+
 [portal.sources]
 subtitle = "Wielokrotnego użytku połączenia wejściowe, które dostarczają dokumenty do Stirling. Skonfiguruj połączenie raz, a następnie odwołuj się do niego z dowolnej liczby polityk. Kliknij wiersz, aby zobaczyć jego konfigurację i polityki, które go używają."
 title = "Źródła"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Połącz źródło"
 
+[portal.sources.builder]
+back = "Wróć do źródeł"
+backToTypes = "Wszystkie typy źródeł"
+cancel = "Anuluj"
+chooseHint = "Wybierz, skąd pochodzą dokumenty. Wyszarzone konektory są w przygotowaniu."
+comingSoon = "Wkrótce"
+comingSoonHeading = "Wkrótce"
+create = "Utwórz źródło"
+createTitle = "Połącz źródło"
+delete = "Usuń"
+editTitle = "Edytuj źródło"
+enabled = "Włączone"
+save = "Zapisz zmiany"
+
+[portal.sources.builder.folderAccess]
+description = "Automatyzacje folderów mogą używać tylko folderów dopuszczonych przez administratora. Dodaj go w ustawieniach Dostępu do folderów, a następnie spróbuj ponownie."
+openSettings = "Ustawienia Dostępu do folderów"
+title = "Ten folder nie jest dozwolony"
+
 [portal.sources.delete]
 body = "Usunąć „{{name}}”? Tej operacji nie można cofnąć. Polityki, które się do niego odwołują, trzeba będzie zaktualizować."
 cancel = "Anuluj"
 confirm = "Usuń"
 title = "Usunąć źródło?"
 
-[portal.sources.detail]
-closeAriaLabel = "Zamknij szczegóły"
-delete = "Usuń źródło"
-docs24h = "Ostatnie 24 godz."
-docs30d = "Ostatnie 30 dni"
-docsTotal = "Łącznie wykryte"
-docsTrend = "Dokumenty z ostatnich 30 dni"
-documents = "Dokumenty"
-edit = "Edytuj"
-notReferenced = "Nie odwołuje się do niego żadna polityka, więc można je bezpiecznie usunąć."
-pause = "Wstrzymaj"
-resume = "Wznów"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Używane przez"
-
 [portal.sources.empty]
 description = "Połącz folder (a wkrótce także magazyn w chmurze), aby Twoje polityki miały skąd pobierać dokumenty."
 title = "Nie połączono jeszcze żadnych źródeł"
@@ -7899,18 +8754,57 @@ inUse = "W użyciu"
 total = "Połączenia"
 unused = "Nieużywane"
 
+[portal.sources.networkFields.connection]
+helperText = "Zapisane połączenie z adresem serwera i danymi uwierzytelniającymi. Używane ponownie przez każde źródło, które się do niego odwołuje."
+label = "Połączenie"
+
+[portal.sources.networkFields.directory]
+helperText = "Folder na serwerze do odpytywania, względem katalogu domowego logowania lub katalogu głównego udziału. Pozostaw puste dla katalogu głównego."
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume usuwa każdy plik z serwera, gdy zostanie przetworzony przez wszystkie zasady."
+label = "Tryb odczytu"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: przetwórz każdy plik raz"
+snapshot = "Snapshot: odczytuj folder ponownie przy każdym uruchomieniu"
+
+[portal.sources.networkFields.recursive]
+label = "Głębokość folderu"
+
+[portal.sources.networkFields.recursive.options]
+all = "Uwzględnij podfoldery"
+top = "Tylko najwyższy poziom"
+
 [portal.sources.status]
 active = "Aktywne"
 disabled = "Wyłączone"
 unused = "Nieużywane"
 
 [portal.sources.table]
+documents = "Dokumenty"
 source = "Źródło"
 status = "Status"
 usedBy = "Polityki"
 
+[portal.sources.types.box]
+description = "Pobieraj dokumenty z folderów Box już udostępnianych przez zespół."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Pobieraj dokumenty z udostępnionego folderu Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenty przetworzone przez zespół w edytorze, w ramach uruchomień zasad i AI."
 label = "Editor"
+noPolicies = "Nie uruchomiono jeszcze żadnych zasad z edytora."
+
+[portal.sources.types.email]
+description = "Zamieniaj załączniki wysłane do dedykowanej skrzynki pocztowej w dokumenty."
+label = "Skrzynka email"
 
 [portal.sources.types.folder]
 description = "Monitoruj katalog na serwerze pod kątem nowych dokumentów."
@@ -7943,25 +8837,80 @@ label = "Głębokość folderu"
 all = "Uwzględnij podfoldery"
 top = "Tylko najwyższy poziom"
 
+[portal.sources.types.ftp]
+description = "Odpytuj folder serwera FTP lub FTPS pod kątem nowych dokumentów."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Pobieraj dokumenty z udostępnionych folderów Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Monitoruj udział sieciowy SMB pod kątem nowych dokumentów."
+label = "Dysk sieciowy"
+
+[portal.sources.types.onedrive]
+description = "Monitoruj foldery OneDrive pod kątem nowych dokumentów."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Pobieraj dokumenty z bucketu Amazon S3 lub kompatybilnego z S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Zapisane połączenie zawierające bucket i dane uwierzytelniające. Używane ponownie przez każde źródło i wyjście potoku, które się do niego odwołuje."
+label = "Połączenie"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume usuwa każdy obiekt z bucketu, gdy zostanie przetworzony przez wszystkie zasady."
+label = "Tryb odczytu"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: przetwórz każdy obiekt raz"
+snapshot = "Snapshot: odczytuj bucket ponownie przy każdym uruchomieniu"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Przetwarzane są tylko obiekty, których klucze zaczynają się od tego prefiksu."
+label = "Prefiks klucza"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Odpytuj folder zrzutu SFTP pod kątem nowych dokumentów."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Pobieraj dokumenty z bibliotek dokumentów SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Źródło"
 
+[portal.sources.types.webhook]
+createNote = "URL dostarczania i sekret podpisywania są generowane podczas tworzenia tego webhooka. Nadawcy wysyłają dokumenty metodą POST na ten URL, a odwołujące się zasady uruchamiają się po nadejściu."
+description = "Odbieraj dokumenty przez podpisany HTTP POST z dowolnego systemu zewnętrznego."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL dostarczania"
+secretNote = "Sekret podpisywania jest wyświetlany raz, podczas tworzenia webhooka. Utwórz źródło ponownie, aby go zmienić."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiuj"
+done = "Gotowe"
+secret = "Sekret podpisywania"
+secretHelp = "Podpisuj surową treść każdego dostarczenia tym kluczem (HMAC-SHA256) i wysyłaj ją jako nagłówek X-Stirling-Signature."
+secretWarning = "Skopiuj sekret podpisywania teraz. Ze względów bezpieczeństwa jest wyświetlany tylko raz i nie można go później odzyskać."
+title = "Utworzono webhook"
+url = "URL dostarczania"
+usage = "Wyślij każdy dokument metodą POST jako surową treść żądania na URL dostarczania z binarnym typem zawartości (application/pdf lub application/octet-stream). Odwołujące się zasady uruchamiają się automatycznie po nadejściu."
+
 [portal.sources.wizard]
-back = "Wstecz"
-cancel = "Anuluj"
-continue = "Kontynuuj"
-editTitle = "Edytuj źródło"
 name = "Nazwa"
 namePlaceholder = "np. Przyjmowanie roszczeń"
-save = "Zapisz zmiany"
-subtitle = "Krok {{current}} z {{total}} · {{label}}"
-title = "Połącz źródło"
 type = "Typ"
 
-[portal.sources.wizard.steps]
-chooseType = "Wybierz typ"
-configure = "Skonfiguruj"
-review = "Przejrzyj i połącz"
+[portal.stepModal]
+close = "Zamknij"
 
 [portal.usage]
 managePayment = "Zarządzaj płatnością"
@@ -8021,16 +8970,9 @@ summary = "Jest właścicielem zespołu — zarządza zasobami jego członków i
 2 = "Dostęp do portalu przez domyślną politykę"
 3 = "Wszystko, co może robić Członek"
 
-[portal.welcome]
-ariaLabel = "Witamy w Stirling PDF"
-badge = "Open-source"
-installEditor = "Zainstaluj Editor"
-inviteTeammates = "Zaproś członków zespołu"
-openInBrowser = "Otwórz w przeglądarce"
-perks = "Zawsze bezpłatne · Self-hostable"
-subtitle = "Najbezpieczniejszy na świecie PDF Editor jest bezpłatny dla zespołów każdej wielkości. Zawiera ponad 60 operacji PDF i SSO."
-title = "Witamy w"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Bez limitu"
 
 [printFile]
 title = "Drukuj plik"
@@ -8613,6 +9555,14 @@ text = "Obracaj strony PDF zgodnie lub przeciwnie do ruchu wskazówek zegara w k
 [rotate.tooltip.header]
 title = "Przegląd ustawień obrotu"
 
+[ruler]
+clearAll = "Wyczyść wszystko"
+hideAllLabels = "Ukryj wszystkie etykiety"
+hideSmallLabels = "Ukryj małe etykiety"
+physicalValues = "Fizyczne"
+scaled = "Skalowane"
+showAllLabels = "Pokaż wszystkie etykiety"
+
 [sanitize]
 desc = "Usuń potencjalnie szkodliwe elementy z plików PDF."
 sanitizationResults = "Wyniki oczyszczania"
@@ -8654,31 +9604,45 @@ label = "Usuń metadane XMP"
 [sanitize.steps]
 settings = "Ustawienia"
 
-[sanitizePdf]
-tags = "czyszczenie, ochrona, bezpieczeństwo, usuwanie zagrożeń"
-
 [sanitizePDF]
 title = "Dezynfekuj PDF"
 
+[sanitizePdf]
+tags = "czyszczenie, ochrona, bezpieczeństwo, usuwanie zagrożeń"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Dopasuj rozmiar stron"
 
+[scaleSettings]
+activeScale = "Aktywna skala"
+apply = "Zastosuj skalę"
+applyCalibration = "Zastosuj kalibrację"
+calculatedScale = "Obliczona skala"
+calibrate = "Kalibruj"
+calibrating = "Kalibracja"
+calibrationDistanceRequired = "Wprowadź rzeczywistą odległość większą niż zero"
+calibrationInvalid = "Nie można obliczyć skali na podstawie tego pomiaru"
+calibrationPaperDistance = "Zmierzona odległość na stronie: {{distance}}"
+calibrationTitle = "Kalibruj skalę"
+calibrationTooltip = "Zmierz znaną odległość, aby automatycznie obliczyć skalę"
+customScale = "Skala niestandardowa"
+noneSet = "Nie ustawiono skali niestandardowej"
+presets = "Skale predefiniowane"
+ratio = "Współczynnik skali"
+ratioHelp = "Współczynnik: 1 jednostka strony = X jednostek rzeczywistych"
+ratioPlaceholder = "np. 100"
+ratioPositive = "Współczynnik musi być większy niż zero"
+ratioRequired = "Współczynnik jest wymagany"
+realDistance = "Rzeczywista odległość"
+realDistancePlaceholder = "np. 5"
+reset = "Przywróć domyślne"
+unit = "Jednostka"
+unitInvalid = "Nieprawidłowa jednostka: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Próg kąta:"
-10 = "Ustawia rozmiar dodawanego i usuwanego obramowania, aby uniknąć białych obramowań na wyjściu (domyślnie: 1)."
-2 = "Ustawia minimalny kąt bezwzględny wymagany do obrócenia obrazu (domyślnie: 10)."
-3 = "Tolerancja:"
-4 = "Określa zakres zmienności kolorów wokół szacowanego koloru tła (domyślnie: 30)."
-5 = "Minimalna powierzchnia:"
-6 = "Ustawia próg minimalnego obszaru dla zdjęcia (domyślnie: 10000)."
-7 = "Minimalny obszar konturu:"
-8 = "Ustawia próg minimalnego obszaru konturu dla zdjęcia"
-9 = "Rozmiar obramowania:"
-
 [scannerImageSplit]
 submit = "Wyodrębnij skany obrazów"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Co robi"
 whatThisDoesDesc = "Automatycznie znajduje i wyodrębnia każde zdjęcie ze skanowanej strony lub obrazu zbiorczego — bez ręcznego kadrowania."
 whenToUse = "Kiedy używać"
 
+[ScannerImageSplit.selectText]
+1 = "Próg kąta:"
+10 = "Ustawia rozmiar dodawanego i usuwanego obramowania, aby uniknąć białych obramowań na wyjściu (domyślnie: 1)."
+2 = "Ustawia minimalny kąt bezwzględny wymagany do obrócenia obrazu (domyślnie: 10)."
+3 = "Tolerancja:"
+4 = "Określa zakres zmienności kolorów wokół szacowanego koloru tła (domyślnie: 30)."
+5 = "Minimalna powierzchnia:"
+6 = "Ustawia próg minimalnego obszaru dla zdjęcia (domyślnie: 10000)."
+7 = "Minimalny obszar konturu:"
+8 = "Ustawia próg minimalnego obszaru konturu dla zdjęcia"
+9 = "Rozmiar obramowania:"
+
 [search]
 noResults = "Brak wyników"
 placeholder = "Wpisz wyszukiwane hasło..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Twój serwer Stirling-PDF jest offline, a \"{{endpoin
 [session]
 expired = "Twoja sesja wygasła. Odśwież stronę i spróbuj ponownie."
 
-[sessionManagement.tooltip]
-header = "Zarządzanie sesjami podpisywania"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Nowi uczestnicy są dodawani na koniec kolejności podpisywania"
-bullet2 = "Nie można dodawać uczestników po sfinalizowaniu sesji"
-bullet3 = "Każdy uczestnik otrzymuje powiadomienie, gdy przyjdzie jego kolej"
-description = "Możesz dodawać kolejnych uczestników do aktywnej sesji w dowolnym momencie przed finalizacją."
-title = "Dodawanie uczestników"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Pełna finalizacja</b>: Wszyscy uczestnicy podpisali"
-bullet2 = "<b>Częściowa finalizacja</b>: Niektórzy uczestnicy jeszcze nie podpisali"
-bullet3 = "Uczestnicy bez podpisu zostaną wykluczeni z finalnego dokumentu"
-bullet4 = "Po finalizacji możesz wczytać podpisany PDF do aktywnych plików"
-description = "Finalizacja łączy wszystkie podpisy w jednym podpisanym PDF-ie. Tej czynności nie można cofnąć."
-title = "Finalizacja sesji"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Nie można usuwać uczestników, którzy już podpisali"
-bullet2 = "Usunięci uczestnicy nie będą już otrzymywać powiadomień"
-bullet3 = "Kolejność podpisywania dostosuje się automatycznie"
-description = "Uczestników można usuwać z sesji przed ich podpisem."
-title = "Usuwanie uczestników"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Każdy podpis jest nakładany sekwencyjnie na PDF"
-bullet2 = "Późniejsi sygnatariusze widzą wcześniejsze podpisy"
-bullet3 = "Kluczowe dla procesów akceptacji i łańcucha dowodowego"
-description = "Kolejność określona podczas tworzenia sesji decyduje, kto podpisuje jako pierwszy."
-title = "Kolejność podpisów"
-
 [settings]
 close = "Zamknij"
 
+[settings.ai]
+documents = "Dokumenty i RAG"
+general = "Ogólne"
+limits = "Limity i wydajność"
+models = "Modele i dostawcy"
+title = "AI"
+
 [settings.configuration]
 advanced = "Zaawansowane"
 database = "Baza danych"
 endpoints = "Endpointy"
 features = "Funkcje"
+folderAccess = "Dostęp do folderów"
 mcp = "MCP Server"
 storageSharing = "Przechowywanie plików i udostępnianie"
 systemSettings = "Ustawienia systemowe"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Domyślny edytor PDF"
 defaultPdfEditorActive = "Stirling PDF jest Twoim domyślnym edytorem PDF"
 defaultPdfEditorChecking = "Sprawdzanie..."
 defaultPdfEditorInactive = "Inna aplikacja jest ustawiona jako domyślna"
+defaultPdfEditorRemind = "Przypomnij mi o ustawieniu jako domyślnej"
+defaultPdfEditorRemindDescription = "Pokaż baner, gdy Stirling PDF nie jest domyślną aplikacją PDF."
 defaultPdfEditorSet = "Już domyślny"
 defaultStartupView = "Domyślny widok przy uruchomieniu"
 defaultStartupViewDescription = "Wybierz, która karta w lewej kolumnie ma być aktywna po uruchomieniu aplikacji"
@@ -8817,9 +9771,18 @@ languageDescription = "Wybierz język wyświetlania"
 logout = "Wyloguj się"
 setAsDefault = "Ustaw jako domyślne"
 theme = "Motyw"
+themeAccent = "Kolor akcentu"
+themeAccentCustom = "Kolor niestandardowy"
+themeAccentCustomHint = "Niestandardowy (zalecane domyślne)"
+themeAccentDark = "Kolor akcentu trybu ciemnego"
+themeAccentDefault = "Domyślny"
+themeAccentDefaultHint = "Domyślny motyw (zalecane)"
+themeAccentDescription = "Przyciski, linki i wyróżnienia używają tego koloru, a aplikacja jest nim subtelnie zabarwiona. Tryb jasny i ciemny mają własne ustawienia. System używa tego, który jest aktywny."
+themeAccentLight = "Kolor akcentu trybu jasnego"
 themeDark = "Ciemny"
 themeDescription = "Przełącz między trybem jasnym i ciemnym"
 themeLight = "Jasny"
+themeReset = "Przywróć motyw domyślny"
 themeSystem = "System"
 title = "Ogólne"
 user = "Użytkownik"
@@ -8833,6 +9796,12 @@ intro = "Włącz uwierzytelnianie użytkowników, zarządzanie zespołem i funkc
 learnMore = "Więcej w dokumentacji"
 title = "Dla administratorów systemu"
 
+[settings.general.loginLanding]
+description = "Wybierz, która aplikacja otwiera się po zalogowaniu do Stirling Cloud."
+editor = "Edytor"
+processor = "Procesor"
+title = "Po zalogowaniu"
+
 [settings.general.mode]
 fullscreen = "Pełny ekran"
 sidebar = "Pasek boczny"
@@ -9041,6 +10010,11 @@ security = "Bezpieczeństwo"
 telegram = "Telegram"
 title = "Bezpieczeństwo i uwierzytelnianie"
 
+[settings.signOut]
+confirm = "Czy na pewno chcesz się wylogować?"
+submit = "Wyloguj się"
+title = "Wyloguj się"
+
 [settings.team]
 title = "Zespół"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Prześlij na serwer"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "kliknij tutaj"
+fallback = "Jeśli nie otworzyło się automatycznie,"
+opening = "Otwieranie Swagger UI w nowej karcie..."
 tags = "api,dokumentacja,swagger,endpointy,rozwój"
 title = "Dokumentacja API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Wybierz pliki w Aktywnych plikach, aby uruchomić to narzędz
 singleFileScope = "Dotyczy tylko: {{fileName}}"
 viewerMode = "Przełącz do edytora plików, aby wybrać wiele plików."
 
+[toolFormat]
+ANY = "dowolny plik"
+CBR = "archiwum komiksu (CBR)"
+CBZ = "archiwum komiksu (CBZ)"
+CSV = "plik CSV"
+EBOOK = "ebook"
+EMAIL = "wiadomość e-mail"
+EXCEL = "arkusz kalkulacyjny"
+HTML = "strona internetowa"
+IMAGE = "obrazy"
+JAVASCRIPT = "plik JavaScript"
+JSON = "plik JSON"
+MARKDOWN = "plik Markdown"
+NONE = "brak pliku"
+PCL = "plik wydruku PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF chroniony hasłem"
+POSTSCRIPT = "plik PostScript"
+PPT = "prezentacja"
+TEXT = "plik tekstowy"
+VIDEO = "wideo"
+WORD = "dokument Word"
+XML = "plik XML"
+XPS = "dokument XPS"
+ZIP = "archiwum ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Powrót do wszystkich narzędzi"
 collapse = "Zwiń panel"
 expand = "Rozwiń panel"
 goBack = "Wróć"
+pdfTools = "Narzędzia PDF"
 placeholder = "Wybierz narzędzie, aby zacząć"
 premiumFeature = "Funkcja premium:"
+searchTools = "Szukaj narzędzi"
 toolsHeader = "Narzędzia"
 viewAllTools = "Wyświetl wszystkie narzędzia"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nie znaleziono narzędzi"
 quickAccess = "SZYBKI DOSTĘP"
 searchPlaceholder = "Szukaj narzędzi..."
 
-[toolPicker.categories]
-advancedTools = "Narzędzia zaawansowane"
-recommendedTools = "Polecane narzędzia"
-standardTools = "Narzędzia standardowe"
-
 [toolPicker.subcategories]
 advancedFormatting = "Zaawansowane formatowanie"
 automation = "Automatyzacja"
@@ -9950,16 +10950,31 @@ title = "Użytkownicy"
 you = "(Ty)"
 
 [users.action]
+cancelInvite = "Anuluj zaproszenie"
 deleteTeam = "Usuń zespół"
 disableMfa = "Zresetuj MFA"
 move = "Przenieś do zespołu"
 reinstate = "Przywróć"
 remove = "Usuń z organizacji"
+removeTeam = "Usuń z zespołu"
 rename = "Zmień nazwę zespołu"
 resetPw = "Zresetuj hasło"
 suspend = "Zawieś"
 unlock = "Odblokuj konto"
 
+[users.activity]
+daysAgo = "{{count}} dni temu"
+hoursAgo = "{{count}} godz. temu"
+justNow = "Przed chwilą"
+minutesAgo = "{{count}} min temu"
+monthsAgo_one = "{{count}} miesiąc temu"
+monthsAgo_other = "{{count}} mies. temu"
+never = "Nigdy"
+weeksAgo_one = "{{count}} tydzień temu"
+weeksAgo_other = "{{count}} tyg. temu"
+yearsAgo_one = "{{count}} rok temu"
+yearsAgo_other = "{{count}} lat temu"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Zatwierdza politykę"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Anulować zaproszenie dla {{email}}? Ta osoba nie będzie mogła dołączyć za pomocą bieżącego linku."
+cancelInviteTitle = "Anuluj zaproszenie"
 deleteTeamBody = "Usunąć zespół {{name}}? Najpierw zespół musi być pusty — przenieś jego członków do innego zespołu i upewnij się, że nie jest nadal właścicielem żadnych konfiguracji integracji."
 deleteTeamTitle = "Usuń zespół"
 disableMfaBody = "Usunąć rejestrację MFA użytkownika {{name}}? Jeśli będzie to wymagane, skonfiguruje ją ponownie przy następnym logowaniu."
 disableMfaTitle = "Zresetuj MFA"
 removeBody = "Trwale usunąć {{name}} z organizacji? Tej operacji nie można cofnąć."
+removeTeamBody = "Usunąć {{name}} z zespołu? Konto pozostanie, ale utraci dostęp do zasobów tego zespołu."
 removeTitle = "Usuń członka"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nazwa użytkownika"
 usernameError = "Nazwa użytkownika musi mieć co najmniej 3 znaki"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Zaprosił(a): {{who}}"
+cancel = "Anuluj"
+count = "{{count}} oczekujących"
+desc = "Zaproszone osoby, które jeszcze nie dołączyły. Zajmują miejsce, dopóki nie zaakceptują zaproszenia."
+expiresInDays_one = "Wygasa za {{count}} dzień"
+expiresInDays_other = "Wygasa za {{count}} dni"
+expiresToday = "Wygasa dzisiaj"
+title = "Oczekujące zaproszenia"
+
 [users.loadError]
 description = "Coś poszło nie tak podczas łączenia z backendem albo nie masz dostępu. Spróbuj ponownie."
 title = "Nie udało się załadować członków"
@@ -10212,9 +11240,11 @@ title = "Załączniki"
 
 [viewer.bookmarks]
 bookmarkTitle = "Tytuł zakładki"
+bookmarkTitleRequired = "Tytuł zakładki jest wymagany"
 closeSidebar = "Zamknij panel boczny zakładek"
 collapseAll = "Zwiń wszystkie zakładki"
 expandAll = "Rozwiń wszystkie zakładki"
+searchPlaceholder = "Szukaj zakładek"
 
 [viewer.comments]
 addComment = "Dodaj komentarz"
@@ -10605,30 +11635,6 @@ title = "Tekst znaku wodnego"
 image = "Obraz"
 text = "Tekst"
 
-[wetSignature.tooltip]
-header = "Metody tworzenia podpisu"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Dostosuj kolor i grubość pióra"
-bullet2 = "Czyść i rysuj ponownie, aż będziesz zadowolony"
-bullet3 = "Działa na urządzeniach dotykowych (tablety, telefony)"
-description = "Utwórz odręczny podpis za pomocą myszy lub ekranu dotykowego. Najlepsze dla osobistych, autentycznych podpisów."
-title = "Narysuj podpis"
-
-[wetSignature.tooltip.type]
-bullet1 = "Wybierz spośród wielu czcionek"
-bullet2 = "Dostosuj rozmiar i kolor tekstu"
-bullet3 = "Idealne do ustandaryzowanych podpisów"
-description = "Wygeneruj podpis z wpisanego tekstu. Szybkie i spójne, odpowiednie do dokumentów biznesowych."
-title = "Wpisz podpis"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Obsługuje PNG, JPG i inne formaty obrazów"
-bullet2 = "Zalecane są przezroczyste tła dla najlepszych efektów"
-bullet3 = "Obraz zostanie przeskalowany, aby dopasować do obszaru podpisu"
-description = "Prześlij wcześniej utworzony obraz podpisu. Idealne, jeśli masz zeskanowany podpis lub logo firmy."
-title = "Prześlij obraz podpisu"
-
 [workbenchBar]
 activeFiles = "Aktywne pliki"
 annotations = "Adnotacje"
@@ -10652,6 +11658,7 @@ redact = "Zaczernij"
 rotateLeft = "Obróć w lewo"
 rotateRight = "Obróć w prawo"
 ruler = "Linijka / Pomiar"
+rulerSettings = "Ustawienia skali"
 save = "Zapisz"
 saveAll = "Zapisz wszystko"
 saveAs = "Zapisz jako"
diff --git a/frontend/editor/public/locales/pt-BR/translation.toml b/frontend/editor/public/locales/pt-BR/translation.toml
index 689d72b58c..ae9327b032 100644
--- a/frontend/editor/public/locales/pt-BR/translation.toml
+++ b/frontend/editor/public/locales/pt-BR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "Arquivos Selecionados"
 font = "Fonte"
 fontSizeTooltip = "Tamanho do texto do número da página em pontos. Números maiores criam texto maior."
 fontTypeTooltip = "Família de fontes para os números de página. Escolha conforme o estilo do seu documento."
-genericSubmit = "Enviar"
 green = "Verde"
 help = "Ajuda"
-imgPrompt = "Selecione a(s) Imagem(ns)"
 incorrectPasswordMessage = "A senha atual está incorreta."
 info = "Informações"
 invalidUndoData = "Não é possível desfazer: dados de operação inválidos"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Acordo de login"
 logOut = "Sair"
 marginTooltip = "Distância entre o número da página e a borda da página."
 moreOptions = "Mais opções"
-multiPdfPrompt = "Selecione os PDFs (2+)"
 never = "Nunca"
 no = "Não"
 noFileSelected = "Nenhum arquivo selecionado. Por favo, envie um arquivo."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordem de Página Personalizada (Digite uma lista de números
 pages = "Páginas"
 pageSelectionPrompt = "Seleção de Página Personalizada (Digite uma lista de números de páginas, separadas por vírgula como 1,5,6 ou funções como 2n+1):"
 password = "Senha"
-pdfPrompt = "Selecione o(s) PDF(s)"
 pin = "Fixar arquivo (manter ativo após execução da ferramenta)"
 pro = "Profissional"
 processingComplete = "Seu arquivo está pronto."
@@ -356,6 +352,7 @@ text = "Essas permissões controlam o que os usuários podem fazer com o PDF. S
 title = "Alterar Permissões"
 
 [addStamp]
+preview = "Visualizar carimbo"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Downloads manuais: clique nos links e coloque os arquivos na past
 noLanguages = "Nenhum idioma tessdata encontrado no diretório configurado."
 permissionNotice = "O caminho do tessdata não é gravável. Os downloads serão abertos no navegador; salve os arquivos .traineddata manualmente na pasta tessdata."
 
+[admin.settings.ai.documents]
+description = "Configure o modelo de embedding e as configurações de recuperação usadas para responder a perguntas sobre documentos. Aplicado ao mecanismo de IA ao salvar."
+title = "Documentos e RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Deixe em branco para usar a credencial de ambiente do próprio mecanismo. Aplica-se a implantações auto-hospedadas de mecanismo único."
+generic = "Chave API de embedding"
+openai = "Chave API da OpenAI"
+setPlaceholder = "Salvo - deixe em branco para manter a chave atual"
+voyageai = "Chave API da VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL base do endpoint de embeddings compatível com OpenAI / Ollama, por exemplo, http://ollama:11434/v1. Deve apontar para um endpoint interno confiável (sensível a SSRF)."
+label = "URL base de embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nome do modelo de embedding. Texto livre; as sugestões são apenas dicas."
+label = "Modelo de embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Provedor usado para transformar texto do documento em embeddings vetoriais."
+label = "Provedor de embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Número máximo de buscas de recuperação que o agente pode executar por solicitação."
+label = "Máx. buscas"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Alterar o modelo de embedding entra em vigor imediatamente, mas documentos indexados com o modelo anterior devem ser reindexados para que a busca retorne resultados corretos."
+title = "Reindexação necessária"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Se você alterou o modelo de embedding, reindexe os documentos existentes para que a busca use o novo modelo."
+
+[admin.settings.ai.documents.topK]
+description = "Número de trechos mais relevantes recuperados por busca."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Conecte o Stirling ao mecanismo de IA Python e escolha quais recursos de IA são expostos. As alterações são aplicadas na reinicialização."
+title = "Mecanismo de IA"
+
+[admin.settings.ai.general.capabilities]
+description = "Ative ou desative recursos individuais de IA. Recursos desativados ficam ocultos no app."
+title = "Recursos"
+
+[admin.settings.ai.general.enabled]
+description = "Chave geral. Quando desativada, nenhuma ferramenta de IA, agente ou chamada ao mecanismo fica disponível."
+label = "Ativar IA"
+
+[admin.settings.ai.general.features.chat]
+description = "Assistente conversacional para trabalhar com PDFs."
+label = "Assistente de chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Categorize documentos automaticamente por tipo ou conteúdo."
+label = "Classificação de documentos"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Gere um novo PDF (por exemplo, a partir de HTML) por meio de um agente de IA."
+label = "Criar PDF a partir de prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Faça perguntas e obtenha respostas baseadas em um documento enviado."
+label = "Perguntas sobre documentos"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Revise documentos em busca de erros matemáticos e numéricos."
+label = "Auditor matemático"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Adicione comentários de revisão e anotações criados por IA a um PDF."
+label = "Agente de comentários em PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Tempo limite para operações de agente mais pesadas, como geração de documentos."
+label = "Tempo limite de longa duração (segundos)"
+
+[admin.settings.ai.general.note]
+body = "O mecanismo de IA é executado como um serviço separado. Seu segredo compartilhado"
+body2 = "é definido por meio de uma variável de ambiente do contêiner. Chaves API de provedores podem ser inseridas nestas páginas ou fornecidas como variáveis de ambiente do mecanismo; as chaves inseridas aqui são enviadas ao mecanismo ao salvar."
+title = "Sobre o mecanismo de IA"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Tempo limite para respostas de chat transmitidas (token por token)."
+label = "Tempo limite de stream (segundos)"
+
+[admin.settings.ai.general.test]
+button = "Testar conexão"
+failBody = "O mecanismo de IA não respondeu. Verifique a URL, se o contêiner do mecanismo está em execução e se a IA está ativada (é necessário reiniciar após ativar)."
+failTitle = "Mecanismo de IA inacessível"
+okBody = "O mecanismo de IA respondeu a uma verificação de integridade."
+okTitle = "Mecanismo de IA acessível"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Tempo limite para solicitações padrão de IA ao mecanismo."
+label = "Tempo limite da solicitação (segundos)"
+
+[admin.settings.ai.general.url]
+description = "URL interna do mecanismo de IA Python, por exemplo, http://stirling-pdf-engine:5001."
+label = "URL do mecanismo de IA"
+
+[admin.settings.ai.limits]
+description = "Proteções para quanto trabalho as solicitações de IA podem realizar e quantas podem executar simultaneamente. Aplicado ao mecanismo de IA ao salvar."
+title = "Limites e desempenho"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Proteção: rejeita solicitações de IA cujo texto extraído exceda este comprimento."
+label = "Máx. caracteres por solicitação"
+
+[admin.settings.ai.limits.maxPages]
+description = "Proteção: rejeita solicitações de IA acima deste número de páginas PDF."
+label = "Máx. páginas por solicitação"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Número máximo de chamadas simultâneas ao modelo em andamento em todo o mecanismo."
+label = "Concorrência máxima do modelo"
+
+[admin.settings.ai.models]
+description = "Escolha o provedor de LLM e os modelos inteligentes/rápidos que o mecanismo de IA usa. Aplicado ao mecanismo de IA ao salvar."
+title = "Modelos e provedores"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Chave API da Anthropic"
+description = "Deixe em branco para usar a credencial de ambiente do próprio mecanismo. Aplica-se a implantações auto-hospedadas de mecanismo único."
+generic = "Chave API"
+openai = "Chave API da OpenAI"
+setPlaceholder = "Salvo - deixe em branco para manter a chave atual"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL base do endpoint compatível com OpenAI / Ollama, por exemplo, http://ollama:11434/v1."
+label = "URL base do provedor"
+warning = "A URL base deve apontar para um endpoint interno confiável. O mecanismo fará solicitações do lado do servidor para ela, portanto um valor não confiável é sensível a SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Máximo de tokens de saída para o modelo rápido."
+label = "Máx. tokens do modelo rápido"
+
+[admin.settings.ai.models.fastModel]
+description = "Modelo mais barato e rápido para tarefas leves. Texto livre; as sugestões são apenas dicas."
+label = "Modelo rápido"
+
+[admin.settings.ai.models.provider]
+description = "Com qual provedor de LLM o mecanismo se comunica."
+label = "Provedor"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Máximo de tokens de saída para o modelo inteligente."
+label = "Máx. tokens do modelo inteligente"
+
+[admin.settings.ai.models.smartModel]
+description = "Modelo de alta capacidade para raciocínio complexo. Texto livre; as sugestões são apenas dicas."
+label = "Modelo inteligente"
+
+[admin.settings.ai.saved]
+body = "As alterações são enviadas automaticamente ao mecanismo de IA."
+bodyNoPush = "Configurações salvas. Elas serão aplicadas na próxima vez que o mecanismo de IA carregar sua configuração."
+title = "Configurações de IA salvas"
+
 [admin.settings.badge]
 clickToUpgrade = "Clique para ver detalhes do plano"
 
@@ -938,6 +1094,25 @@ label = "Regenerar na inicialização"
 description = "Número de dias em que o certificado será válido"
 label = "Validade do certificado (dias)"
 
+[admin.settings.folderAccess]
+description = "Diretórios que fontes de pasta e saídas de pasta têm permissão para ler e gravar. Este é um limite de segurança: automações nunca podem ser apontadas para um caminho do servidor fora desta lista."
+securityNote = "Deixe vazio para desativar completamente fontes e saídas de pasta. O diretório de configuração do próprio Stirling está sempre fora dos limites."
+title = "Acesso a pastas"
+
+[admin.settings.folderAccess.implied]
+description = "Estes diretórios gerenciados pelo Stirling são sempre permitidos e não podem ser alterados aqui."
+serverStorage = "Armazenamento de arquivos do servidor"
+title = "Sempre permitido"
+watchedFolder = "Pasta monitorada do pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Adicionar"
+empty = "Nenhuma pasta permitida. Fontes e saídas de pasta estão desativadas no momento."
+hint = "Insira caminhos absolutos, por exemplo /data/inbox."
+label = "Raízes de pasta permitidas"
+placeholder = "/data/inbox"
+remove = "Remover raiz de pasta"
+
 [admin.settings.general]
 description = "Configure definições de aplicativo em todo o sistema, incluindo branding e comportamento padrão."
 system = "Sistema"
@@ -1842,6 +2017,15 @@ export = "Exportar"
 accessDenied = "Acesso negado"
 insufficientPermissions = "Você não tem permissão para executar esta ação."
 
+[auth.callback]
+completing = "Concluindo autenticação"
+invalidToken = "Falha no login OAuth - token inválido."
+missingToken = "Falha no login OAuth - nenhum token recebido."
+oauthFailed = "Falha no login OAuth. Tente novamente."
+pleaseWait = "Aguarde enquanto concluímos seu login."
+signedOut = "Você saiu. Faça login novamente."
+windowMayClose = "Você pode fechar esta janela quando terminar."
+
 [auth.displayName]
 guest = "Convidado"
 user = "Usuário"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Protege documentos PDF removendo conteúdo potencialmente
 description = "Esta ferramenta renomeará automaticamente arquivos PDF com base no conteúdo. Ela analisa o documento para encontrar o título mais adequado a partir do texto."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Girar automaticamente"
+tags = "girar automaticamente,corrigir orientação,de cabeça para baixo,de lado,endireitar,orientar,detectar orientação,corrigir rotação,orientar automaticamente,digitalizado,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Limite de confiança"
+
+[autoRotate.detectionMode]
+auto = "Automático"
+osd = "Somente OCR"
+text = "Somente texto"
+title = "Método de detecção"
+
+[autoRotate.error]
+failed = "Ocorreu um erro ao girar automaticamente o PDF."
+
+[autoRotate.inferUndetected]
+title = "Girar páginas de baixa confiança para corresponder"
+
+[autoRotate.report]
+applied = "{{degrees}}° horário"
+confidenceValue = "Confiança {{value}}"
+noChange = "Sem alteração"
+pageLabel = "Página {{number}}"
+summary = "{{rotated}} de {{total}} páginas giradas, {{unchanged}} deixadas como estão"
+title = "Relatório de detecção"
+
+[autoRotate.report.method]
+inferred = "Correspondido"
+none = "Ignorado"
+osd = "OCR"
+text = "Texto"
+
+[autoRotate.report.note]
+belowThreshold = "Abaixo do limite"
+blankPage = "A página está em branco"
+inferredFromDocument = "Igual às outras páginas"
+noDominantDirection = "Direções de texto mistas"
+osdFailed = "Nenhum texto legível encontrado"
+osdNoVerdict = "Não foi possível determinar a orientação"
+tesseractUnavailable = "OCR não instalado"
+tooFewGlyphs = "Texto insuficiente"
+
+[autoRotate.results]
+title = "Resultados da rotação automática"
+
+[autoRotate.settings]
+title = "Configurações"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Quão certa a verificação precisa estar antes de uma página ser girada. Diminua para girar mais páginas; aumente para deixar mais páginas intactas."
+title = "Limite de confiança"
+
+[autoRotate.tooltip.description]
+text = "Determina a orientação correta de cada página e a gira para a posição certa. Páginas que já estão na vertical são deixadas como estão."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automático lê primeiro o texto da página e, se isso não for suficiente, analisa a página como imagem. Somente texto ignora a verificação de imagem, sendo o mais rápido para documentos que nunca foram digitalizados. Somente OCR trata cada página como uma imagem."
+title = "Método de detecção"
+
+[autoRotate.tooltip.header]
+title = "Girar automaticamente"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Páginas em branco ou quase em branco não podem ser verificadas sozinhas. Quando todas as páginas que puderam ser lidas precisam da mesma rotação, essas páginas são giradas para corresponder."
+title = "Girar páginas de baixa confiança para corresponder"
+
 [autoSizeSplitPDF]
 tags = "pdf,divisão,documento,organização"
 
@@ -2189,33 +2440,6 @@ keywords = "Palavras-chave: ímpar, par"
 numbers = "Números/intervalos: 5, 10-20"
 progressions = "Progressões: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipos de certificado"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Gerenciado pelos administradores do sistema"
-bullet2 = "Compartilhado entre usuários autorizados"
-bullet3 = "Representa a identidade da empresa, não do indivíduo"
-bullet4 = "Melhor para: Documentos oficiais, assinaturas de equipe"
-description = "Um certificado compartilhado fornecido pela sua organização. Usado para autoridade de assinatura em nível da empresa."
-title = "Certificado da organização"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Gerado automaticamente no primeiro uso"
-bullet2 = "Vinculado à sua conta de usuário"
-bullet3 = "Não pode ser compartilhado com outros usuários"
-bullet4 = "Melhor para: Documentos pessoais, responsabilidade individual"
-description = "Um certificado gerado automaticamente, exclusivo para sua conta de usuário. Adequado para assinaturas individuais."
-title = "Certificado pessoal"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Requer arquivo P12/PFX e senha"
-bullet2 = "Pode ser emitido por Autoridades Certificadoras externas"
-bullet3 = "Maior nível de confiança para documentos legais"
-bullet4 = "Melhor para: Contratos legalmente vinculantes, validação externa"
-description = "Use seu próprio certificado PKCS#12. Fornece controle total sobre as propriedades do certificado."
-title = "Enviar P12 personalizado"
-
 [certSign]
 awaitingSignatures = "Aguardando assinaturas"
 chooseCertificate = "Escolher arquivo de certificado"
@@ -2542,34 +2766,6 @@ server = "Servidor"
 stepTitle = "Origem do certificado"
 upload = "Enviar"
 
-[certSign.tooltip.header]
-title = "Sobre o gerenciamento de assinaturas"
-
-[certSign.tooltip.overview]
-bullet1 = "Verifique as assinaturas existentes e sua validade"
-bullet2 = "Veja informações detalhadas sobre signatários e certificados"
-bullet3 = "Adicione novas assinaturas digitais para proteger seus documentos"
-bullet4 = "Vários arquivos suportados com navegação fácil"
-text = "Esta ferramenta permite verificar se seus PDFs estão assinados digitalmente e adicionar novas assinaturas digitais. Assinaturas digitais provam quem criou ou aprovou um documento e mostram se ele foi alterado desde a assinatura."
-title = "O que esta ferramenta pode fazer?"
-
-[certSign.tooltip.signing]
-bullet1 = "Suporta formatos de certificado PEM, PKCS12, JKS e de servidor"
-bullet2 = "Opção para mostrar ou ocultar a assinatura no PDF"
-bullet3 = "Adicione motivo, local e nome do signatário"
-bullet4 = "Escolha em qual página colocar assinaturas visíveis"
-bullet5 = "Use certificado do servidor para a opção simples 'Assinar com Stirling-PDF'"
-text = "Para assinar um PDF, você precisa de um certificado digital (como PEM, PKCS12 ou JKS). Você pode optar por deixar a assinatura visível no documento ou mantê-la invisível apenas para segurança."
-title = "Adicionando assinaturas"
-
-[certSign.tooltip.validation]
-bullet1 = "Mostra se as assinaturas são válidas ou inválidas"
-bullet2 = "Exibe informações do signatário e data da assinatura"
-bullet3 = "Verifica se o documento foi modificado após a assinatura"
-bullet4 = "Pode usar certificados personalizados para verificação"
-text = "Ao verificar as assinaturas, a ferramenta informa se são válidas, quem assinou o documento, quando foi assinado e se o documento foi alterado desde a assinatura."
-title = "Verificando assinaturas"
-
 [changeCreds]
 changeUsername = "Atualize seu nome de usuário. Você será desconectado após a atualização."
 credsUpdated = "Conta atualizada"
@@ -2824,6 +3020,7 @@ next = "Próximo"
 preview = "Pré-visualização"
 previous = "Anterior"
 refresh = "Atualizar"
+remaining = "Restante"
 retry = "Tentar novamente"
 save = "Salvar"
 
@@ -3264,24 +3461,6 @@ description = "Estes cookies são essenciais para o bom funcionamento do site. E
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Monitoramento avançado"
-allInOneWorkspace = "Espaço de trabalho PDF tudo-em-um (visualizador, ferramentas e agente)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Suporte dedicado e SLAs"
-fasterThroughput = "Taxa 10x mais rápida"
-fullyPrivateFiles = "Arquivos totalmente privados"
-largeFileProcessing = "Processamento de arquivos grandes"
-orgWideAccess = "Controles de acesso para toda a organização"
-premiumAiModels = "Modelos de IA premium"
-prioritySupport = "Suporte prioritário"
-privateDocCloud = "Nuvem de documentos privada"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Acesso seguro à API"
-standardThroughput = "Taxa de processamento padrão"
-unlimitedApiAccess = "Acesso ilimitado à API"
-unlimitedSeats = "Usuários ilimitados"
-
 [crop]
 autoCrop = "Cortar automaticamente espaços em branco"
 noFileSelected = "Selecione um arquivo PDF para iniciar o corte"
@@ -3346,6 +3525,7 @@ message = "Falha ao definir o manipulador de PDF padrão"
 title = "Erro"
 
 [defaultApp.prompt]
+dontRemind = "Não me lembrar novamente"
 message = "Torne o Stirling PDF seu aplicativo padrão para abrir arquivos PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Personalizar grupos"
 dropHint = "Abra arquivos para começar"
 dropToAdd = "Drop files to add"
 expand = "Expandir barra lateral"
-files = "Arquivos"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive não está configurado"
 leaveMyFiles = "Sair de Meus arquivos"
+library = "Biblioteca de PDFs"
 myFiles = "Meus arquivos"
 noFiles = "Ainda não há arquivos"
 openFileManager = "Abrir gerenciador de arquivos"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Adicionar"
-addLabel = "Adicionar um rótulo…"
-categoryIconAria = "Escolha um ícone para {{name}}"
-createCategory = "Criar categoria"
-delete = "Excluir categoria"
 done = "Concluído"
-hide = "Ocultar categoria"
-newCategory = "Nome da nova categoria…"
-removeLabel = "Remover {{name}}"
-rename = "Renomear"
 reset = "Redefinir para os padrões"
-search = "Pesquisar rótulos…"
-show = "Mostrar categoria"
 subtitle = "Agrupe seus arquivos em categorias principais. Adicione rótulos existentes ou novos a uma categoria, renomeie-a ou crie a sua própria. Arquivos que não estão em nenhuma das suas categorias aparecem em “Outro”."
 title = "Categorias da barra lateral"
 
@@ -3808,6 +3977,7 @@ refresh = "Atualizar do servidor"
 remove = "Excluir"
 removeVersion = "Remover esta versão"
 rename = "Renomear"
+renamed = "Renomeado"
 renameFolder = "Renomear pasta"
 resizeFolderTree = "Redimensionar árvore de pastas (setas, Shift para passos maiores; duplo clique para ajustar automaticamente)"
 save = "Salvar"
@@ -3910,9 +4080,7 @@ count = "Arquivos"
 folder = "Pasta"
 labels = "Rótulos"
 modified = "Modificado"
-name = "Nome"
 size = "Tamanho"
-toolHistoryAtVersion = "Cadeia de ferramentas cumulativa"
 totalSize = "Tamanho total"
 type = "Tipo"
 versionHistory = "Jornada da versão"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Tudo salvo"
+extractCsvError = "Falha ao extrair CSV"
+extractXlsxError = "Falha ao extrair XLSX"
 flattenAfterFilling = "Achatar após o preenchimento"
+requiredAbbreviation = "obr"
+requiredFieldsError = "Preencha todos os campos obrigatórios"
 rescanFields = "Escanear campos novamente"
 rescanFormFields = "Escanear campos do formulário novamente"
 save = "Salvar"
+saveShortcut = "Ctrl+S para salvar"
+unsavedChanges = "Alterações não salvas"
 
 [formFill.sidebar]
 close = "Fechar barra lateral"
@@ -4309,6 +4484,11 @@ desc = "Renomeia automaticamente um arquivo PDF com base no cabeçalho detectado
 tags = "detecção automática,baseado em cabeçalho,organizar,renomear"
 title = "Renomear PDF automaticamente"
 
+[home.autoRotate]
+desc = "Detecte a orientação de cada página e gire-a automaticamente para a posição correta."
+tags = "girar automaticamente,corrigir orientação,de cabeça para baixo,de lado,endireitar,orientar,detectar orientação,corrigir rotação,orientar automaticamente,digitalizado,OSD"
+title = "Girar automaticamente"
+
 [home.autoSizeSplitPDF]
 tags = "auto,dividir,tamanho"
 title = "Divisão Manual do PDF"
@@ -4608,13 +4788,13 @@ hint = "Envie uma imagem PNG, JPG, SVG ou outro arquivo de imagem para colocar n
 label = "Enviar imagem"
 placeholder = "Selecionar arquivo de imagem"
 
-[imageToPdf]
-tags = "conversão,img,jpg,imagem,foto"
-
 [imageToPDF]
 header = "Imagem para PDF"
 title = "Imagem para PDF"
 
+[imageToPdf]
+tags = "conversão,img,jpg,imagem,foto"
+
 [infoBanner]
 dismiss = "Dispensar"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Você foi convidado!"
 
 [landing]
 addFiles = "Adicionar arquivos"
-heroSubtitle = "Solte ou adicione um PDF existente para começar."
 mobileUpload = "Enviar do celular"
 openFromComputer = "Abrir do computador"
 uploadFromComputer = "Fazer upload do computador"
-workbenchEmptyStateHero = "Solte um PDF em qualquer lugar"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Login"
 magicLinkSent = "Link mágico enviado para {{email}}! Verifique seu e-mail e clique no link para entrar."
 mfaCode = "Código de autenticação"
 mfaRequired = "Código de dois fatores necessário"
+noAccount = "Não tem uma conta?"
 or = "Ou"
 password = "Senha"
 passwordChangedSuccess = "Senha alterada com sucesso! Faça login com sua nova senha."
@@ -4715,26 +4894,10 @@ signInWith = "Entrar com"
 title = "Iniciar sessão"
 unexpectedError = "Erro inesperado: {{message}}"
 updatePassword = "Atualizar senha"
-useEmailInstead = "Login com e-mail"
 useMagicLink = "Usar link mágico"
 username = "Nome de usuário"
 youAreLoggedIn = "Você está conectado!"
 
-[login.slides.edit]
-alt = "Editar PDFs"
-subtitle = "Com mais de uma dúzia de ferramentas para ajudar a ocultar, assinar, ler e manipular PDFs, você certamente encontrará o que precisa."
-title = "Edite PDFs para exibir/proteger as informações que você deseja"
-
-[login.slides.overview]
-alt = "Visão geral do Stirling PDF"
-subtitle = "Uma suíte em nuvem com foco em privacidade para PDFs que permite converter, assinar, ocultar e gerenciar documentos, além de 50+ outras ferramentas poderosas."
-title = "Tudo o que você precisa para PDFs em um só lugar."
-
-[login.slides.secure]
-alt = "Proteger PDFs"
-subtitle = "Adicione senhas, oculte conteúdo e gerencie certificados com facilidade."
-title = "Proteja informações sensíveis em seus PDFs"
-
 [margin]
 large = "Grande"
 medium = "Médio"
@@ -4976,6 +5139,7 @@ pinButton = "Você pode usar o botão <strong>Fixar</strong> se preferir que seu
 results = "Após a ferramenta terminar, a etapa de <strong>Revisão</strong> mostrará uma prévia dos resultados neste painel, e permitirá desfazer a operação ou baixar o arquivo. "
 runButton = "Depois que a ferramenta for configurada, este botão permite executar a ferramenta em todos os PDFs selecionados."
 selectCropTool = "Vamos selecionar a ferramenta de <strong>Recortar</strong> para demonstrar como usar uma das ferramentas."
+stepOf = "Etapa {{current}} de {{total}}"
 toolInterface = "Esta é a interface da ferramenta de <strong>Recortar</strong>. Como você pode ver, não há muito aqui porque ainda não adicionamos nenhum arquivo PDF para trabalhar."
 workbench = "Este é o <strong>Workbench</strong> — a área principal onde você visualiza e edita seus PDFs."
 wrapUp = "Tudo pronto! Você aprendeu sobre as áreas principais do app e como usá-las. Clique no botão <strong>Ajuda</strong> quando quiser para ver este tour novamente."
@@ -4988,6 +5152,26 @@ showMeAround = "Me mostre por aí"
 skipForNow = "Pular por enquanto"
 skipTheTour = "Pular o tour"
 
+[onboarding.checklist]
+dismiss = "Dispensar"
+title = "Configurar Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Execute o Stirling nativamente na sua máquina"
+title = "Baixar Stirling para Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Colabore com sua equipe"
+title = "Convidar membros da equipe"
+
+[onboarding.checklist.shareAnalytics]
+description = "Ajude a melhorar o Stirling"
+title = "Compartilhar dados anônimos de uso"
+
+[onboarding.checklist.takeTour]
+description = "Veja como o Stirling funciona em um tour rápido"
+title = "Fazer o tour"
+
 [onboarding.desktopInstall]
 body = "O Stirling funciona melhor como app desktop. Você pode usá-lo offline, acessar documentos mais rápido e fazer edições localmente no computador."
 selectOs = "Selecionar sistema operacional"
@@ -4996,7 +5180,21 @@ titleWithOs = "Download para {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Código de autenticação"
+description = "Proteja sua conta vinculando um app autenticador. Escaneie o QR code ou insira a chave de configuração e confirme o código de 6 dígitos para finalizar."
+enable = "Ativar MFA"
+enableError = "Não foi possível ativar a autenticação de dois fatores. Verifique o código e tente novamente."
+enterCode = "Insira o código de 6 dígitos do seu app."
+enterCodeError = "Insira o código de autenticação para continuar."
+logout = "Sair"
+openAuthenticator = "Abra o Google Authenticator, Authy ou 1Password."
 qrCodeLoading = "Gerando seu código QR…"
+regenerateQrCode = "Gerar QR code novamente"
+scanQrCode = "Escaneie o QR code ou insira a chave de configuração abaixo."
+setupError = "Não foi possível iniciar a configuração de dois fatores. Tente novamente."
+setupKey = "Chave de configuração (entrada manual)"
+stepByStep = "Passo a passo"
+success = "MFA foi ativado. Agora você pode continuar."
+title = "Configuração de autenticação multifator"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Depois de ativar o modo de login, você poderá gerenciar usuários, configurar as configurações e monitorar a integridade do servidor. As primeiras <strong>{{freeTierLimit}}</strong> pessoas no seu servidor usam o Stirling gratuitamente."
@@ -5005,6 +5203,11 @@ adminTitle = "Visão geral do admin"
 userBody = "Convide colegas, atribua funções e mantenha seus documentos organizados em um espaço de trabalho seguro. Ative o modo de login quando estiver pronto para ir além do uso individual."
 userTitle = "Visão geral do plano"
 
+[onboarding.processorIntro]
+body = "O Stirling agora executa <strong>Políticas</strong> — regras automatizadas que classificam, protegem e processam cada documento assim que ele chega. Configure-as e monitore as execuções no <strong>Processor</strong>."
+cta = "Conheça o Processor"
+title = "Conheça o Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Ano pré-pago"
+
+[payg.prepaid.banner]
+exhausted = "Sua capacidade pré-paga acabou; a cobrança medida foi retomada. Recarregue para manter o desconto."
+expiring_one = "Seu ano pré-pago termina em {{count}} dia. A capacidade não utilizada expira — recarregue para iniciar um novo ano."
+expiring_other = "Seu ano pré-pago termina em {{count}} dias. A capacidade não utilizada expira — recarregue para iniciar um novo ano."
+low = "Você está com {{pct}}% da sua capacidade pré-paga. Recarregue a qualquer momento para manter o processamento sem interrupções."
+
+[payg.prepaid.card]
+subtitle = "Usada antes da cobrança medida e fora do seu limite de gastos."
+title = "Capacidade pré-paga"
+
+[payg.prepaid.meter]
+capSuffix = "de {{total}} créditos pré-pagos"
+expires = "Expira em {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Esgotada"
+healthy = "Muito restante"
+low = "Ficando baixa"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Cole a chave de licença do seu e-mail"
 success = "Licença ativada!"
 successMessage = "Sua licença foi ativada com sucesso. Agora você pode fechar esta janela."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "aplicada"
-enforcing = "Aplicando..."
-failed = "Falha na aplicação"
 outputsUnavailable = "Os resultados da política não estão mais disponíveis para download."
 partialOutputsUnavailable = "Alguns resultados da política não estão mais disponíveis para download."
-retrying = "Ocupado, tentando novamente..."
 runNotFound = "A execução da aplicação não pôde mais ser encontrada."
-step = "etapa {{current}}/{{total}}"
 timedOut = "A aplicação atingiu o tempo limite antes que a execução fosse concluída."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Fechar"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Aplicando {{names}}"
 applyingProgress = "Aplicando {{names}} ({{done}} de {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} de {{total}} arquivo(s) não puderam ser processados
 failureTitle = "Exportado sem aplicação completa"
 printPolicyAppliedBody = "Este PDF foi atualizado para atender a uma política. Revise as alterações e imprima novamente."
 printPolicyAppliedTitle = "Política aplicada antes da impressão"
-queued = "+{{count}} na fila"
 successTitle = "{{names}} aplicadas"
 summaryMore = "{{first}}, {{second}} e mais {{more}}"
 summaryTwo = "{{first}} e {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Aplicando políticas antes de converter"
-default = "Aplicando políticas"
-export = "Aplicando políticas antes de exportar"
-input = "Aplicando políticas ao importar"
-print = "Aplicando políticas antes de imprimir"
-
-[policies.field]
-accessLog = "Log de acesso"
-archiveAfter = "Arquivar após"
-auditTrail = "Trilha de auditoria"
-belowThreshold = "Abaixo do limite"
-destination = "Destino"
-frameworks = "Frameworks"
-immutableHold = "Retenção imutável"
-keepFor = "Manter por"
-minConfidence = "Confiança mín."
-notify = "Notificar no roteamento"
-onViolation = "Quando não conforme"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Adicionar"
-addPlaceholder = "Adicionar um rótulo…"
-customNote = "Personalizado para sua equipe."
-defaultNote = "Usando o padrão integrado, compartilhado com sua equipe."
-duplicate = "\"{{name}}\" já existe."
-edit = "Editar rótulos"
-empty = "Ainda não há rótulos."
-export = "Exportar JSON"
-iconAria = "Escolha um ícone para {{name}}"
-import = "Importar JSON"
-importError = "Não foi possível importar esse arquivo."
-managedNote = "Os rótulos da equipe são gerenciados pelo líder da equipe."
-modalSubtitle = "Compartilhados com toda a sua equipe. O classificador escolhe os rótulos que se encaixam em cada documento."
-modalTitle = "Rótulos de classificação"
-pickIcon = "Usar ícone de {{label}}"
-removeAria = "Remover {{name}}"
-resetToDefault = "Redefinir para o padrão"
-saveForTeam = "Salvar para a equipe"
-saving = "Salvando…"
-sectionLabel = "Rótulos de classificação"
-startFromScratch = "Começar do zero"
-teamCount = "rótulos da equipe"
-tooLong = "Os rótulos podem ter no máximo {{max}} caracteres."
-ungrouped = "Sem grupo"
-view = "Ver rótulos"
+categoryCount = "categorias"
+hideCategory = "Ocultar categoria"
+labelCount = "rótulos"
+sharedNote = "Estes rótulos são integrados e compartilhados por toda a sua equipe."
+showCategory = "Mostrar categoria"
 
 [policies.pii]
 account = "Números de conta (rotulados)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Números de roteamento bancário dos EUA (ABA)"
 ssn = "Números de Seguro Social (SSN)"
 
-[policies.settings]
-noneExport = "Nenhuma política é executada atualmente na exportação."
-noneUpload = "Nenhuma política é executada atualmente no upload."
-onExport = "Na exportação"
-onUpload = "No upload"
-reorderHandle = "Arraste para reordenar"
-runOrderDesc = "Quando mais de uma política é executada no mesmo acionador, elas são executadas nesta ordem — cada uma sobre a saída da política anterior. Arraste para reordenar."
-title = "Configurações de política"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opções de política"
-policySettings = "Configurações de política"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Tentar novamente políticas com falha ({{count}})"
-rowProgress = "{{completed}} de {{total}} arquivos processados"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "O que é uma política?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Localiza e oculta automaticamente informações confidenciais — como números de Seguro Social e de cartão — para que não possam ser lidas no documento."
-sanitize = "Remove JavaScript oculto do arquivo, para que nada seja executado automaticamente quando alguém o abrir."
-watermark = "Aplica uma marca visível (por exemplo, \"Confidencial\") em todas as páginas."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Fechar"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} aplicando..."
 badgeRan = "A política {{name}} foi executada neste arquivo"
+badgeRunning = "{{name}} em execução..."
 blockingAction = "{{action}} bloqueado enquanto a política está sendo aplicada, aguarde..."
 dismiss = "Dispensar sobreposição"
 enforcingTitle = "Aplicando política..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Ver arquivo (política ainda sendo aplicada)"
 [policyOption]
 autoRedactPhi = "Redigir PHI automaticamente"
 blockExport = "Bloquear exportação"
+ccpa = "CCPA"
 contracts = "Contratos"
 documents = "Documentos"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plano Editor"
 subscribed = "Plano Processor"
 unlinked = "Não vinculada"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap a partir de documento"
-sectionsAriaLabel = "Seções do criador de agentes"
-selectorAriaLabel = "Agentes"
-subtitle = "Projete, teste e publique os agentes de IA que classificam, extraem e roteiam seus documentos. Defina cenários, limite o acesso a ferramentas, execute um conjunto de referência e publique uma versão."
-title = "Criador de agentes"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Cancelar"
-dropzoneText = "Escolha um documento de exemplo (PDF ou imagem)"
-lead = "Solte um documento de exemplo e nós proporemos cenários e um esquema de extração que você poderá refinar. Nada é publicado até você revisar."
-submit = "Fazer bootstrap do agente"
-subtitle = "Inicie um novo agente a partir de um arquivo representativo"
-title = "Bootstrap a partir de um documento"
-
-[portal.agentBuilder.empty]
-description = "Faça bootstrap de um agente a partir de um documento de exemplo para iniciar seus cenários e esquema de extração, depois refine e publique."
-title = "Ainda não há agentes"
-
-[portal.agentBuilder.evals]
-casesPassing = "Casos aprovados"
-columnCase = "Caso de avaliação"
-columnLatency = "Latência"
-columnResult = "Resultado"
-fail = "falha"
-goldenSetPassRate = "Taxa de aprovação do conjunto de referência"
-latencyMs = "{{ms}} ms"
-notRun = "não executado"
-pass = "aprovado"
-passRate = "Taxa de aprovação"
-runEvals = "Executar avaliações"
-
-[portal.agentBuilder.evals.empty]
-description = "Avaliações transformam seus cenários em um conjunto de referência repetível. Faça upgrade para capturar a taxa de aprovação ao longo do tempo e condicionar publicações a ela."
-title = "Ainda não há conjunto de referência"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "em conjuntos de referência"
-activeAgents = "Agentes ativos"
-avgPassRate = "Taxa média de aprovação das avaliações"
-fleetWide = "em toda a frota"
-latestPublished = "Última publicação"
-scenarios = "Cenários"
-testCases = "casos de teste"
-totalDescription_one = "{{count}} no total"
-totalDescription_other = "{{count}} no total"
-
-[portal.agentBuilder.scenarios]
-add = "Adicionar"
-addScenario = "Adicionar cenário"
-enable = "Habilitar"
-expectationLabel = "Comportamento esperado"
-expectationPlaceholder = "O que o agente deve fazer"
-inEval = "em avaliação"
-mute = "Silenciar"
-muted = "silenciado"
-nameLabel = "Nome"
-namePlaceholder = "ex.: Escalonamento de conformidade"
-
-[portal.agentBuilder.tabs]
-evals = "Avaliações"
-scenarios = "Cenários"
-tools = "Ferramentas"
-versions = "Versões"
-
-[portal.agentBuilder.tools]
-broadAccess = "Acesso amplo"
-deniedHint = "As ferramentas selecionadas estão bloqueadas. Todo o restante permanece disponível para chamada."
-deniedTools = "Ferramentas negadas"
-governanceGate = "A governança de ferramentas está disponível no plano Enterprise."
-restricted = "Restrito"
-restrictedAccess = "Acesso restrito a ferramentas"
-restrictedDescription = "Permitir todas as ferramentas, exceto as que você negar abaixo."
-
-[portal.agentBuilder.versions]
-current = "atual"
-historyGate = "Histórico completo de versões e reversão estão disponíveis no plano Enterprise."
-publish = "Publicar"
-rollBack = "Reverter"
-
 [portal.assistant]
 close = "Fechar assistente"
 error = "Não foi possível acessar o assistente."
@@ -6365,9 +6346,21 @@ typing = "Digitando"
 loading = "Carregando"
 redirectingToEditor = "Redirecionando para o editor..."
 
+[portal.billing.activation]
+maybeLater = "Talvez mais tarde"
+title = "Ativar o Processor"
+
+[portal.billing.activation.payg]
+sub = "Defina um limite mensal. Pague pelo que executar."
+title = "Pague conforme o uso"
+
+[portal.billing.activation.prepay]
+badge = "2 meses grátis"
+sub = "Uma fatura, cartão ou transferência bancária."
+title = "Pagar um ano antecipado"
+
 [portal.billing.checkout]
 noClientSecret = "A função Edge não retornou client_secret."
-subtitle = "Adicione um cartão para continuar além da concessão gratuita do plano Editor. O Stripe cuida do resto."
 title = "Ativar o plano Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Seu pagamento foi aprovado, mas a ativação está demorando um pouco ma
 close = "Fechar"
 title = "Quase lá"
 
+[portal.billing.checkout.cap]
+amountAria = "Limite mensal de gastos"
+back = "Voltar"
+continue = "Continuar para o pagamento"
+error = "Não foi possível definir seu limite de gastos"
+finePrint = "Faturas são emitidas mensalmente. Cancele a qualquer momento."
+noLimit = "Sem limite"
+note = "Você nunca é cobrado além do seu limite. O processamento apenas pausa."
+perMonth = "/ mês"
+title = "Defina seu limite de gastos"
+
+[portal.billing.checkout.card]
+fields = "Número do cartão · MM / AA · CVC · CEP"
+label = "Dados do cartão"
+note = "Dados do cartão coletados pela Stripe. O Stirling nunca armazena PAN ou CVC."
+
 [portal.billing.checkout.error]
 title = "Não foi possível iniciar o checkout"
 
@@ -6383,10 +6392,9 @@ body = "Seu pagamento foi processado. Estamos ativando o processamento medido na
 hint = "Mantenha esta janela aberta."
 title = "Ativando seu plano Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "no env do portal para habilitar o checkout no aplicativo."
-bodyBefore = "Defina"
-title = "Stripe não configurado"
+[portal.billing.checkout.pay]
+limit = "Limite mensal de gastos {{amount}}/mês. O processamento pausa no limite."
+limitNoCap = "Sem limite de gastos. O processamento não pausará. Faturas são emitidas mensalmente."
 
 [portal.billing.enterpriseUpsell]
 cta = "Monte sua cotação Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Plano atual"
 freeForever = "Grátis para sempre"
 noTeamResolved = "Nenhuma equipe foi resolvida na sua carteira ainda — atualize e tente novamente."
 ownerOnly = "Somente o proprietário da equipe pode ativar o plano Processor."
+payInvoice = "Pagar fatura para concluir"
 planName = "Editor"
 ssoIncluded = "SSO incluído"
 switchOnProcessor = "Ativar o Processor →"
 unlimitedUsers = "Usuários ilimitados"
+viewQuote = "Ver cotação"
 
 [portal.billing.invoices]
 columnAmount = "Valor"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Solicitações diretas de API"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automações e pipelines"
 segmentAutomationLabel = "Automação"
+sizeMultiplier = "{{formatted}} PDFs usaram um multiplicador de tamanho"
+summary = "{{unique}} únicos · {{units}} unidades de medição · média de {{avg}} por PDF"
+summaryNoRate = "{{unique}} únicos · {{units}} unidades de medição"
 unit = "PDFs medidos"
+unitsPending_one = "{{units}} unidade de medição pendente de sincronização de instâncias vinculadas"
+unitsPending_other = "{{units}} unidades de medição pendentes de sincronização de instâncias vinculadas"
+
+[portal.billing.prepaid]
+capSuffix = "de {{total}} créditos pré-pagos"
+expires = "Expira em {{date}}"
+eyebrow = "Capacidade pré-paga"
+note = "Usada antes da cobrança medida e fora do seu limite de gastos."
+topUp = "Recarregar"
+
+[portal.billing.prepaid.buy]
+back = "Voltar"
+calcTitle = "Calcule seu pagamento anual"
+cancel = "Cancelar"
+cancelPurchase = "Cancelar compra"
+close = "Fechar"
+continueToPayment = "Continuar para o pagamento"
+finalise = "Finalizar"
+invoiceErrorTitle = "Não foi possível gerar a fatura"
+loadingTitle = "Carregando sua cotação"
+payTitle = "Pague pelo seu ano"
+step = "Etapa {{current}} de {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Alterar"
+deployRow = "Implantação"
+done = "Concluído"
+enterpriseHint = "Esta é uma escala empresarial. Neste volume, tarifas empresariais superam qualquer desconto de autoatendimento. Bloqueio de tarifa, termos e cotação em minutos."
+governanceRow = "Governança"
+governanceValue = "{{label}} · {{count}} políticas"
+handlesLabel = "Seu Processor"
+handlesValue = "lida com {{volume}} créditos / mês"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} políticas"
+poolCaption = "Um pool de {{credits}} créditos para o ano. Meses pesados emprestam dos leves."
+priceLabel = "Seu ano · 12 meses pelo preço de 10"
+rateUnknown = "Mostraremos o preço exato no checkout."
+savings = "Você economiza {{amount}} · 2 meses grátis."
+sizingRow = "Dimensionamento"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Total de usuários"
+
+[portal.billing.prepaid.consent]
+label = "Entendo que, quando minha capacidade pré-paga for usada ou expirar após 12 meses, o processamento continuará automaticamente na tarifa padrão medida de pagamento conforme o uso (até meu limite de gastos), a menos que eu cancele, e que posso cancelar a qualquer momento pelo portal de cobrança."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Gerenciado pelo Stirling. Ativo em minutos."
+cloudValue = "Stirling Cloud · Gerenciado"
+selfhost = "Auto-hospedado"
+selfhostDesc = "Executa em infraestrutura privada. Mesma tarifa."
+selfhostValue = "Auto-hospedado · Infraestrutura privada"
+
+[portal.billing.prepaid.offer]
+cta = "Revisar oferta"
+subtitle = "Pague antecipadamente um ano de processamento de PDF e ganhe dois meses grátis, usado antes da cobrança medida, fora do seu limite de gastos."
+title = "Obtenha 12 meses pelo preço de 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nome do titular da conta"
+accountNamePlaceholder = "ex.: Jane Smith"
+companyName = "Nome da empresa (opcional)"
+companyNamePlaceholder = "ex.: Acme Inc."
+downloadInvoice = "Baixar fatura"
+payOnline = "Pagar online"
+poNumber = "Número do pedido de compra (opcional)"
+poNumberPlaceholder = "ex.: PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avançado"
+advancedDesc = "Pipelines impulsionam a maior parte do seu processamento."
+none = "Nenhum"
+noneDesc = "Ainda não está executando pipelines. Ative-os a qualquer momento."
+standard = "Padrão"
+standardDesc = "Alguns pipelines reprocessam PDFs recebidos."
+
+[portal.billing.prepaid.posture]
+essentials = "Essenciais"
+essentialsDesc = "Classificação, o padrão, mais Compartilhamento"
+governed = "Governado"
+governedDesc = "Adiciona Segurança e Roteamento"
+regulated = "Regulado"
+regulatedDesc = "Todas as categorias, incl. Conformidade, Retenção, Ingestão"
+
+[portal.billing.prepaid.review]
+download = "Baixar cotação (PDF)"
+downloading = "Preparando…"
+share = "compartilhar para aprovação"
+
+[portal.billing.prepaid.size]
+compact = "Compacto"
+compactDesc = "Arquivos abaixo de 25 MB, sem cobranças de dados"
+heavy = "Pesado"
+heavyDesc = "Digitalizados ou com muitas imagens, normalmente 50 MB+"
+standard = "Padrão"
+standardDesc = "Principalmente pequenos, alguns escaneamentos acima de 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Esgotada"
+healthy = "Muito restante"
+low = "Ficando baixa"
 
 [portal.billing.spendLimit]
 adjustLimit = "Ajustar limite"
@@ -6494,6 +6608,8 @@ label = "Projetado para exceder."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Gasto este mês"
+freeRemaining_one = "{{formatted}} PDF gratuito restante"
+freeRemaining_other = "{{formatted}} PDFs gratuitos restantes"
 processed_one = "{{formattedCount}} PDF processado."
 processed_other = "{{formattedCount}} PDFs processados."
 processedWithRate_one = "{{formattedCount}} PDF processado, a {{rate}} cada."
@@ -6534,6 +6650,350 @@ signature = "assinatura"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nova conexão"
+createTitleFor = "Conectar {{name}}"
+delete = "Excluir"
+edit = "Editar"
+editTitle = "Editar conexão"
+unsupportedType = "Este tipo de conexão não pode ser editado aqui."
+
+[portal.connections.categories.advanced]
+description = "Para um serviço que ainda não oferecemos suporte."
+label = "Avançado"
+
+[portal.connections.categories.audit]
+description = "Registre o que aconteceu com um documento, onde seus auditores já consultam."
+label = "Registro de auditoria e conformidade"
+
+[portal.connections.categories.notify]
+description = "Informe outro sistema de que algo aconteceu."
+label = "Notificação e fluxo de trabalho"
+
+[portal.connections.categories.security]
+description = "Escaneie ou rotule um documento antes que ele siga em frente."
+label = "Segurança e classificação"
+
+[portal.connections.categories.signing]
+description = "Envie um documento para ser assinado ou notarizado."
+label = "Assinatura eletrônica e notarização"
+
+[portal.connections.categories.storage]
+description = "Onde os documentos processados acabam - um bucket, um drive, um ticket ou uma página."
+label = "Arquivo e anexo"
+
+[portal.connections.commonFields.accessToken]
+helperText = "O Stirling armazena isto criptografado e nunca o mostra novamente."
+label = "Token de acesso"
+
+[portal.connections.commonFields.apiKey]
+label = "Chave API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Etapas que usam esta conexão só podem chamar caminhos sob esta URL, nunca outro host."
+label = "URL do servidor"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Senha"
+
+[portal.connections.commonFields.port]
+label = "Porta"
+
+[portal.connections.commonFields.username]
+label = "Nome de usuário"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Cole a URL fornecida pelo serviço. Apenas caminhos sob ela podem ser chamados."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Nome da conexão"
+namePlaceholder = "ex.: Produção"
+
+[portal.connections.picker]
+cancel = "Cancelar"
+createNew = "Nova conexão..."
+placeholder = "Selecione uma conexão"
+save = "Salvar conexão"
+
+[portal.connections.picker2]
+back = "Alterar integração"
+heading = "O que você deseja conectar?"
+noResultsBody = "Ainda não oferecemos suporte a isso - conte-nos sobre ele e avaliaremos adicioná-lo."
+noResultsTitle = "Nada corresponde a \"{{query}}\""
+searchPlaceholder = "Buscar integrações - tente \"assinar\", \"ocr\" ou um nome de produto"
+
+[portal.connections.types.api]
+description = "Chame qualquer HTTP API a partir de uma política. Você escolhe a URL, a autenticação e o payload."
+label = "API personalizada"
+
+[portal.connections.types.api.fields.authType]
+label = "Autenticação"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nome de usuário e senha"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token em um cabeçalho personalizado"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Nenhuma"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Fazer login para obter um token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Etapas que usam esta conexão só podem chamar caminhos sob esta URL, nunca outro host."
+label = "URL base"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nome do cabeçalho"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Caminho de login"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Senha"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Se a API responder com um link de download, apenas estes hosts poderão ser buscados. Separe com vírgulas. Deixe em branco para permitir apenas o próprio host da URL base."
+label = "Hosts de resultado permitidos"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Enviar o token como este cabeçalho"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "O cabeçalho de resposta no qual a chamada de login retorna o token, por exemplo, X-Auth-Token."
+label = "Cabeçalho de resposta do token"
+
+[portal.connections.types.api.fields.username]
+label = "Nome de usuário"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Escaneie documentos em busca de malware em um servidor que você executa - nada sai da sua rede."
+label = "ClamAV (auto-hospedado)"
+
+[portal.connections.types.cloudmersive]
+description = "Escaneamento de vírus e conteúdo para documentos em uma política."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Bloqueie documentos que contenham macros, executáveis, scripts ou objetos incorporados - não apenas malware conhecido."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Anexe documentos processados a uma página do Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Envie documentos para ConsignO Cloud (Notarius) para assinatura eletrônica e notarização."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Seu ambiente ConsignO Cloud, incluindo /api/v1."
+label = "URL do servidor"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Chave API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Segredo API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Senha"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Necessário apenas se sua organização usa tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nome de usuário"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publique uma mensagem no Discord quando uma política processar um documento."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexe um evento de auditoria no Elasticsearch sempre que uma política manipular um documento."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Consulte um servidor FTP ou FTPS em busca de novos documentos."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Modo de conexão"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Ativo"
+passive = "Passivo (recomendado)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP simples envia credenciais e arquivos sem criptografia; escolha FTPS se o servidor oferecer suporte."
+label = "Criptografia"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explícito / AUTH TLS)"
+implicit = "FTPS (implícito)"
+none = "Nenhuma (FTP simples)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publique uma mensagem em um espaço do Google Chat quando uma política for executada."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Anexe documentos processados a uma issue do Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Envie um documento ou uma notificação por email quando uma política for executada."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Arquive documentos processados no Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Senha do app"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detecte dados pessoais no texto do documento usando um servidor Presidio que você executa."
+label = "Presidio (auto-hospedado)"
+
+[portal.connections.types.purview]
+description = "Leia e aplique rótulos de sensibilidade do Microsoft Purview em PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opcional. Necessário apenas para escolher rótulos por nome; a rotulagem funciona sem isso."
+label = "ID do aplicativo (cliente)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Segredo do cliente"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Carimbado em cada rótulo como seu SiteId, para que ferramentas compatíveis com Purview saibam qual organização o aplicou."
+label = "ID do diretório (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Um bucket S3 que as fontes podem ler e no qual as saídas de pipeline podem gravar."
+label = "Armazenamento S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID da chave de acesso"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Deixe em branco para AWS. Defina isto para MinIO ou outro armazenamento compatível com S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Região"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Chave de acesso secreta"
+
+[portal.connections.types.sendgrid]
+description = "Envie um documento ou uma notificação por email quando uma política for executada."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Consulte um servidor SFTP (SSH) em busca de novos documentos."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opcional. A impressão digital SHA-256 da chave de host do servidor (de `ssh-keyscan host | ssh-keygen -lf -`). Quando definida, apenas um servidor que apresentar esta chave será aceito; quando em branco, a chave vista na primeira conexão é fixada e alterações posteriores são recusadas."
+label = "Impressão digital da chave de host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Frase secreta da chave"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Deixe em branco se você autenticar com uma chave privada em vez disso."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opcional. Cole uma chave privada OpenSSH para autenticar com uma chave em vez de uma senha."
+label = "Chave privada"
+
+[portal.connections.types.slack]
+description = "Publique uma mensagem no Slack quando uma política processar um documento."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Monitore um compartilhamento de rede SMB / CIFS (Windows ou Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Compartilhamento de rede"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opcional. O domínio ou grupo de trabalho Windows, se o servidor usar um."
+label = "Domínio"
+
+[portal.connections.types.smb.fields.share]
+label = "Compartilhamento"
+placeholder = "documentos"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Envie um evento de auditoria para o Splunk sempre que uma política manipular um documento."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Envie um evento de auditoria para um coletor HTTP do Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publique uma mensagem em um canal do Teams quando uma política for executada."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publique cada documento, ou apenas os detalhes, em uma URL de sua escolha."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Acione um cenário Zap ou Make a partir de uma política."
+label = "Zapier e Make"
+
+[portal.docs]
+browse = "Navegar pelos docs"
+viewSource = "Ver código-fonte no GitHub"
+
 [portal.docs.authentication]
 codeCaption = "cada solicitação"
 eyebrow = "INTRODUÇÃO"
@@ -6619,11 +7079,19 @@ title = "SDKs oficiais"
 beta = "Beta"
 deprecated = "Obsoleto"
 
+[portal.docs.search]
+empty = "Nenhum doc correspondente"
+placeholder = "Buscar docs"
+results = "{{count}} resultados"
+
 [portal.docs.skills]
 eyebrow = "HABILIDADES"
 lead = "Capacidades agrupadas e nomeadas que seu agente invoca como uma única ferramenta. Cada habilidade é uma cadeia determinística de operações com avaliações anexadas."
 title = "Habilidades do agente"
 
+[portal.docs.toc]
+title = "Nesta página"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "REFERÊNCIA DA API"
@@ -6697,6 +7165,8 @@ type = "Tipo"
 user = "Usuário"
 
 [portal.documents.queue.empty]
+connectSource = "Conectar uma fonte"
+createPipeline = "Criar um pipeline"
 description = "À medida que as fontes enviarem documentos para seus pipelines, eles aparecerão aqui para revisão."
 title = "Nenhum documento na fila"
 
@@ -6806,13 +7276,71 @@ description = "Esta visualização encontrou um erro inesperado. Tente novamente
 retry = "Tentar novamente"
 title = "Algo deu errado nesta página"
 
+[portal.home.download]
+back = "Voltar"
+body = "Baixe o app para desktop ou auto-hospede o servidor."
+done = "Concluído"
+guide = "Abrir o guia {{name}}"
+openInBrowser = "Abrir no navegador em vez disso"
+sectionDesktop = "App para desktop"
+sectionSelfHosted = "Auto-hospedado"
+title = "Instalar o Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Execute a imagem oficial no seu servidor."
+note = "Abre em :8080. Login padrão: admin / stirling."
+tagline = "Execute o servidor em um contêiner"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instale o chart Helm oficial."
+note = "Adicione um PVC para /configs para persistir as configurações."
+tagline = "Implante em um cluster com Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Builds nativos para sua distribuição."
+guideBtn = "Ver opções de instalação no Linux"
+note = "Builds AppImage, .deb e .rpm estão disponíveis para distros comuns."
+tagline = "Aplicativo de desktop nativo para sua distro"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ou via Homebrew"
+detailBody = "Execute o instalador ou use Homebrew."
+downloadBtn = "Baixar para macOS"
+tagline = "Aplicativo nativo para Apple silicon e Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Execute o .jar em um servidor bare metal."
+downloadBtn = "Baixar o .jar"
+note = "Requer Java 21+. Abre em :8080; login padrão admin / stirling."
+runLabel = "Depois execute"
+tagline = "Execute o .jar em um servidor bare metal"
+title = "Configuração manual do servidor"
+
+[portal.home.download.windows]
+altLabel = "Ou via winget"
+detailBody = "Execute o instalador ou use um gerenciador de pacotes."
+downloadBtn = "Baixar instalador"
+tagline = "Aplicativo nativo para Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} ativos"
-invite = "Convidar colegas de equipe"
+activeOfDeployed = "{{active}} de {{total}} ativos este mês"
 name = "Stirling PDF Editor"
 open = "Abrir no navegador"
 updated = "atualizado {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Concluir implantação"
+options = "Ver opções de implantação"
+start = "Implantar o Editor"
+
 [portal.home.editor.target]
 cloud = "Nuvem gerenciada"
 docker = "Auto-hospedado · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Boa tarde"
 evening = "Boa noite"
 morning = "Bom dia"
 
-[portal.home.onboarding]
-dismiss = "Dispensar configuração"
-notStarted = "Não iniciado"
-progress = "{{done}} de {{total}} concluídos"
-title = "Concluir configuração"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC em toda a organização, preços por volume comprometido e implantação air-gapped."
-cta = "Iniciar teste"
-ctaQuote = "Solicitar orçamento"
-lead = "Para mais de 250 funcionários."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Implante o aplicativo desktop, grátis para sempre."
-title = "Baixe o PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} ativas · {{recommended}} recomendadas"
-chip = "{{active}} ativas"
-title = "Ativar políticas"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} conectadas · todo PDF governado onde quer que chegue"
-chip = "{{connected}} conectadas"
-title = "Conecte suas fontes"
-
-[portal.home.quickActions]
-subtitle = "Principais tarefas de hoje"
-title = "Ações rápidas"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Compositor de 3 etapas sobre a biblioteca de operações tipadas"
-title = "Criar um pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agentes, webhooks, pastas monitoradas"
-title = "Conectar uma fonte"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Chave com escopo, limites de taxa e allowlist de IP"
-title = "Emitir uma chave de API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gerenciar implantação do Editor"
 sectionsAriaLabel = "Seções de infraestrutura"
@@ -6878,13 +7363,9 @@ heading = "Chaves de API"
 subheading = "Credenciais com escopo, limites de taxa por chave, permissões e allowlists de IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IPs permitidos"
-anyIp = "Qualquer IP (sem allowlist)"
 created = "Criado"
 lastUsed = "Usado pela última vez"
-permissions = "Permissões"
-rateLimit = "Limite de taxa"
-rateLimitValue = "{{value}} req/min"
+revoke = "Revogar chave"
 usageMonth = "Uso neste mês"
 usageToday = "Uso hoje"
 
@@ -6892,6 +7373,20 @@ usageToday = "Uso hoje"
 description = "Crie uma chave com escopo para começar a chamar a Stirling API."
 title = "Ainda não há chaves de API"
 
+[portal.infrastructure.apiKeys.error]
+load = "Não foi possível carregar suas chaves API. Tente novamente."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Revogar \"{{name}}\"? Qualquer integração que ainda use esta chave começará imediatamente a receber erros 401. Isso não pode ser desfeito."
+cancel = "Cancelar"
+confirm = "Revogar chave"
+title = "Revogar chave API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestado"
+inScope = "No escopo"
+notApplicable = "N/D"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrar eventos de auditoria por categoria"
 heading = "Logs de auditoria"
@@ -6935,6 +7430,7 @@ all = "Todos"
 auth = "Auth"
 config = "Config"
 elevation = "Elevação"
+policy = "Política"
 processing = "Processamento"
 security = "Segurança"
 
@@ -6944,19 +7440,35 @@ title = "Você não tem acesso"
 
 [portal.infrastructure.audit.metrics]
 config = "Config"
-elevation = "Elevação"
+policy = "Política"
 processing = "Processamento"
 totalEvents = "Total de eventos · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autenticação"
+config = "Configuração"
+elevation = "Elevação"
+policy = "Política"
+processing = "Processamento"
+security = "Segurança"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Erro"
+info = "Info"
+success = "Sucesso"
+warning = "Aviso"
+
+[portal.infrastructure.certLabel]
+certified = "Certificado"
+inProgress = "Em andamento"
+notStarted = "Não iniciado"
+
 [portal.infrastructure.createKey]
 cancel = "Cancelar"
 createKey = "Criar chave"
 done = "Concluído"
-ipAllowlistHelper = "Intervalos CIDR separados por vírgulas. Deixe em branco para permitir qualquer IP."
-ipAllowlistLabel = "Allowlist de IP"
 keyNameLabel = "Nome da chave"
 keyNamePlaceholder = "ex.: Produção · ingestão"
-permissionsLabel = "Permissões"
 secretKeyCaption = "Chave secreta"
 secretWarning = "Armazene isto em um gerenciador de segredos. O Stirling armazena apenas um hash — não há como recuperá-lo depois."
 subtitle = "Defina o escopo da chave para o mínimo necessário. Você pode rotacionar ou revogar a qualquer momento."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Copie este segredo agora — ele não será exibido novamente
 title = "Criar chave de API"
 titleCreated = "Chave criada"
 
+[portal.infrastructure.deployLabel]
+live = "No ar"
+queued = "Na fila"
+rolledBack = "Revertido"
+rolling = "Em implantação"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Integridade ao vivo de cada região Stirling implantada — latên
 description = "As regiões implantadas aparecerão aqui assim que seu workspace for provisionado."
 title = "Nenhuma região implantada"
 
+[portal.infrastructure.keyLabel]
+active = "Ativo"
+revoked = "Revogado"
+
+[portal.infrastructure.modelLabel]
+active = "Ativo"
+degraded = "Degradado"
+disabled = "Desativado"
+
 [portal.infrastructure.models]
 heading = "Modelos"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Tipo"
 version = "Versão"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/chamada"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modelos ativos"
 avgLatency = "Latência média"
@@ -7049,6 +7580,17 @@ modelForAria = "Modelo para {{operation}}"
 operation = "Operação"
 routedTo = "Roteado para"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classificação"
+extraction = "Extração"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradado"
+down = "Indisponível"
+healthy = "Íntegro"
+
 [portal.infrastructure.security.access.byok]
 description = "Forneça uma chave do seu próprio KMS. O Stirling criptografa com ela, mas ainda consegue ler."
 label = "Traga sua própria chave (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modelos"
 security = "Segurança"
 storage = "Armazenamento"
 
+[portal.integrations]
+addAnother = "Adicionar outro"
+availableHeading = "Disponíveis"
+comingSoonHeading = "Em breve"
+connect = "Conectar"
+connectedHeading = "Conectadas"
+connectionCount_one = "{{count}} conexão"
+connectionCount_other = "{{count}} conexões"
+customApi = "API personalizada"
+searchPlaceholder = "Pesquisar integrações"
+subtitle = "Tudo com que o Stirling pode se comunicar. As credenciais são criadas uma vez aqui e depois referenciadas por fontes, políticas e pipelines."
+title = "Integrações"
+typedName = "Nome de {{tool}}"
+
+[portal.integrations.filters]
+all = "Todos"
+audit = "Auditoria"
+connected = "Conectado"
+notify = "Notificar"
+security = "Segurança"
+signing = "Assinatura"
+storage = "Armazenamento"
+
+[portal.integrations.status]
+connected = "Conectado"
+
+[portal.integrations.table]
+integration = "Integração"
+worksWith = "Funciona com"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Políticas"
+sources = "Fontes"
+
+[portal.legal]
+draft = "{{label}} · rascunho"
+loadError = "Não foi possível carregar este documento. Tente novamente."
+loading = "Carregando…"
+title = "Documento legal"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Componentes"
@@ -7182,6 +7765,7 @@ documents = "Documentos"
 editor = "Editor"
 home = "Início"
 infrastructure = "Infraestrutura"
+integrations = "Integrações"
 pipelines = "Pipelines"
 policies = "Políticas"
 procurement = "Compras"
@@ -7190,25 +7774,9 @@ sources = "Fontes"
 usage = "Uso e faturamento"
 users = "Usuários"
 
-[portal.notifications]
-markAllRead = "Marcar todas como lidas"
-title = "Notificações"
-viewAll = "Ver tudo"
-
-[portal.notifications.ariaLabel]
-none = "Notificações, nenhuma não lida"
-unread_one = "Notificações, {{count}} não lida"
-unread_other = "Notificações, {{count}} não lidas"
-
-[portal.notifications.count]
-allRead = "todas lidas"
-loading = "carregando"
-new_one = "{{count}} nova"
-new_other = "{{count}} novas"
-
-[portal.notifications.empty]
-description = "Nenhuma nova notificação."
-title = "Você está em dia"
+[portal.nav.section]
+platform = "Plataforma PDF"
+processor = "Processador PDF"
 
 [portal.pipelines]
 subtitle = "Cada pipeline automatizado de documentos no backend: uma cadeia ordenada de operações sobre um conjunto de fontes, executada por um gatilho. Clique em uma linha para ver suas etapas e fontes."
@@ -7220,15 +7788,28 @@ newPipeline = "Novo pipeline"
 [portal.pipelines.builder]
 addStep = "Adicionar ferramenta"
 back = "Voltar para pipelines"
+cannotFollow = "Não é possível receber {{produced}}"
+chooseAccount = "Escolha uma conta"
+chooseDestination = "Escolha um destino"
+chooseOperation = "Escolha o que esta etapa faz"
+chooseSource = "Escolha uma fonte"
 discard = "Descartar alterações"
 enabled = "Ativado"
+inputs = "Entrada"
+inputSource = "Fonte de entrada"
+inputTrigger = "Acionador"
 keepEditing = "Continuar editando"
+needsConfiguring = "Precisa ser configurado"
 needsUpload = "Precisa de um arquivo enviado"
+noSources = "Nenhuma fonte conectada ainda. Crie uma para usá-la como entrada."
 noToolMatches = "Nenhuma ferramenta corresponde à sua busca."
 pipelineSettings = "Configurações do pipeline"
 searchTools = "Buscar ferramentas"
 selectToolBody = "Adicione uma ferramenta para criar seu pipeline."
 selectToolTitle = "Ainda não há ferramentas"
+sendToSystem = "Enviar para outro sistema"
+stepsIncompatible = "Estas etapas não podem ser executadas no que a etapa anterior produz: {{tools}}."
+stepsNeedSetup = "Estas etapas ainda precisam ser configuradas antes de salvar: {{tools}}."
 toolSettings = "Configurações da ferramenta"
 unknownStep = "Operação não reconhecida, mantida como está."
 unsavedBody = "Você tem alterações não salvas. Salve-as antes de sair ou descarte-as?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Alterações não salvas"
 uploadUnsupported = "Arquivos enviados ainda não são suportados em pipelines, então estas etapas não podem ser salvas: {{tools}}."
 usesDefaults = "Executa com configurações padrão"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combina todos os arquivos da etapa anterior"
+fan-out = "Executa uma vez por arquivo da etapa anterior"
+format-mismatch = "Precisa de {{accepts}}, mas a etapa anterior produz {{produced}}"
+output-uncertain = "Pode não executar: a saída da etapa anterior depende de como ela está configurada"
+source-mismatch = "Precisa de {{accepts}}, mas a entrada deste pipeline é {{produced}}"
+undeclared-operation = "Não é possível verificar o que esta etapa aceita"
+
 [portal.pipelines.composer]
 addTool = "Adicionar ferramenta"
 cancel = "Cancelar"
 chainEmpty = "Adicione uma ferramenta para começar a criar seu pipeline."
 create = "Criar pipeline"
-directory = "Pasta de saída"
-directoryHelp = "Caminho absoluto no servidor. Deve estar dentro das pastas permitidas configuradas."
 editingUnsupported = "A exibição destes parâmetros da ferramenta para edição ainda não é suportada."
 moveDown = "Mover para baixo"
 moveUp = "Mover para cima"
 name = "Nome"
 namePlaceholder = "ex.: Varredura de redação"
-noSources = "Nenhuma fonte conectada ainda. O pipeline ainda pode ser executado em arquivos fornecidos diretamente a ele."
 noToolSettings = "Esta ferramenta não tem configurações ajustáveis."
 operations_one = "Operação ({{count}})"
 operations_other = "Operações ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Excluir"
 title = "Excluir pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Limpar histórico"
 delete = "Excluir pipeline"
 run = "Executar agora"
 
 [portal.pipelines.empty]
 action = "Criar um pipeline"
+connectSource = "Conectar uma fonte"
 description = "Crie seu primeiro pipeline: escolha as fontes em que ele é executado, encadeie as operações e escolha para onde vai a saída."
 title = "Ainda não há pipelines"
 
@@ -7286,15 +7874,17 @@ active = "Ativos"
 paused = "Pausados"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Gravar na pasta"
-inline = "Retornar arquivos"
-
 [portal.pipelines.run]
+allProcessed_one = "Nada para executar: o {{count}} documento da fonte já foi processado."
+allProcessed_other = "Nada para executar: todos os {{count}} documentos nas fontes já foram processados."
 completed_one = "Execução concluída."
 completed_other = "Todas as {{count}} execuções concluídas."
 empty = "Nada para executar: as fontes não tinham documentos para processar."
 failed = "Falha na execução: {{error}}"
+historyCleared = "Histórico limpo. A próxima execução reprocessa tudo que está atualmente nas fontes."
+inFlight = "Nada novo para executar: documentos ainda estão sendo processados de uma execução anterior."
+parked_one = "Nada para executar: {{count}} documento falhou anteriormente e está estacionado. Corrija a causa e limpe o histórico para tentar novamente."
+parked_other = "Nada para executar: {{count}} documentos falharam anteriormente e estão estacionados. Corrija a causa e limpe o histórico para tentar novamente."
 running = "Execução iniciada; ainda em andamento."
 timeout = "A execução está demorando mais do que o esperado; ela ainda pode terminar em segundo plano."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Agendado"
 
 [portal.policies]
+defaultName = "Política de {{category}}"
 subtitle = "Automações permanentes que aplicam um pipeline de ferramentas a cada documento. Cada política é acionada no upload ou na exportação, executa sua cadeia de ferramentas e salva a versão aplicada junto ao original."
 title = "Políticas"
 
 [portal.policies.card]
 comingSoon = "Atualize para Enterprise"
 notSetUp = "Não configurado"
+requiresAiEngine = "Requer mecanismo de AI"
+
+[portal.policies.categories.classification]
+desc = "Identifique o tipo de cada documento no upload e marque seus metadados para arquivamento e pesquisa."
+label = "Classificação"
 
 [portal.policies.categories.compliance]
 desc = "Aplique requisitos HIPAA, GDPR, SOC 2 ou FedRAMP a cada documento."
@@ -7344,6 +7940,13 @@ label = "Segurança"
 [portal.policies.config]
 scopeAll = "Todos os documentos"
 
+[portal.policies.config.classification]
+summary = "Classifica cada documento enviado de acordo com os rótulos da sua equipe e marca seus metadados."
+
+[portal.policies.config.classification.rules]
+0 = "Classificar"
+1 = "Marcar metadados"
+
 [portal.policies.config.compliance]
 summary = "Valida documentos em relação a frameworks regulatórios antes que saiam do sistema."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Confiança mínima"
 2 = "Nomear"
 3 = "Normalizar"
 
+[portal.policies.config.purview]
+label = "Aplicar um rótulo de sensibilidade do Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Tenant Purview"
+labelId = "ID do rótulo"
+labelIdHelp = "O GUID do rótulo, do portal Purview. Aplicar um rótulo grava seus metadados no PDF; ele não pode criptografar, o que requer o cliente Microsoft."
+labelName = "Nome do rótulo (opcional)"
+labelNameHelp = "Registrado junto com o ID para que pessoas e ferramentas possam reconhecer o rótulo."
+
+[portal.policies.config.purview.fields.method]
+help = "O Purview distingue um rótulo aplicado por uma política de um escolhido por uma pessoa."
+label = "Como o rótulo é registrado"
+privileged = "Como escolhido por uma pessoa"
+standard = "Como aplicado automaticamente"
+
+[portal.policies.config.purviewRead]
+label = "Ler um rótulo do Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tenant Purview"
+connectionHelp = "Lê o rótulo que o documento já carrega, para que etapas posteriores possam agir sobre ele."
+
 [portal.policies.config.retention]
 summary = "Aplica por quanto tempo os documentos são mantidos, quando arquivar e quando excluir."
 
@@ -7438,6 +8064,7 @@ title = "Nenhuma atividade ainda"
 [portal.policies.endpoints]
 addWatermark = "Marca d'água"
 autoRedact = "Ocultar PII"
+classifyAndLabel = "Classificar"
 compressPdf = "Comprimir"
 flatten = "Achatar"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Suas políticas foram salvas e aparecerão assim que a conexão f
 retry = "Tentar novamente"
 title = "Backend indisponível"
 
+[portal.policies.operations]
+change = "Alterar o que esta etapa faz"
+noResults = "Nenhuma etapa corresponde a isso. Tente o nome de um produto ou \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Pesquisar etapas - tente \"scan\", \"attach\" ou o nome de um produto"
+
+[portal.policies.operations.bodyMode]
+binary = "Bytes brutos do arquivo"
+json = "Dentro de um payload JSON"
+multipart = "Como upload de arquivo (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Seu próprio servidor ClamAV verifica o documento; nada sai da sua rede."
+label = "Verificar vírus (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rejeita documentos que contenham macros, executáveis, scripts ou objetos incorporados."
+label = "Bloquear conteúdo ativo"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive verifica o documento e a execução para se ele não estiver limpo."
+label = "Verificar vírus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arquiva o documento processado em uma página."
+label = "Anexar a uma página do Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Envia o documento ao ConsignO Cloud para assinatura."
+label = "Enviar para assinatura (ConsignO)"
+note = "Envia o documento. A recuperação da cópia assinada ainda não é compatível, porque uma etapa não pode passar um resultado para uma etapa posterior."
+
+[portal.policies.operations.customApiCall]
+description = "Crie a chamada você mesmo: caminho, método, corpo e tratamento da resposta."
+label = "Chamar uma API personalizada"
+
+[portal.policies.operations.discordNotify]
+description = "Avisa a um canal que a política tratou um documento."
+label = "Publicar uma mensagem no Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Registra o que a política fez como um documento pesquisável."
+label = "Indexar um evento de auditoria no Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart é adequado para APIs de upload; JSON é adequado para APIs que querem o arquivo dentro de um payload; binário envia os bytes brutos."
+label = "Como enviar o documento"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Um corpo JSON enviado como está. {{document.base64}} carrega o arquivo; {{document.*}} e {{run.*}} são preenchidos por documento."
+label = "Corpo JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Conta"
+
+[portal.policies.operations.fields.domain]
+label = "Domínio Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "O campo do formulário no qual a API espera o documento."
+label = "Nome do campo do arquivo"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "De"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Um objeto JSON de pares de nome/valor de cabeçalho. A credencial da conexão é adicionada para você."
+label = "Cabeçalhos"
+
+[portal.policies.operations.fields.index]
+label = "Índice"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Chave da issue"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Enviado como o corpo da mensagem. {{document.*}} e {{run.*}} são preenchidos por documento."
+label = "Mensagem"
+
+[portal.policies.operations.fields.method]
+label = "Método"
+
+[portal.policies.operations.fields.pageId]
+label = "ID da página"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Anexado à URL base da conexão. Nunca pode alcançar outro host."
+label = "Caminho"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Onde gravá-lo no drive. {{document.filename}} é preenchido por documento."
+label = "Caminho de destino"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Relatar deixa o documento intacto. Substituir o troca pelo que vier de volta."
+label = "O que fazer com a resposta"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email do signatário"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Assunto"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analisa este texto. Use {{document.title}} ou cole o texto que você quer verificar."
+label = "Texto a verificar"
+
+[portal.policies.operations.fields.to]
+label = "Para"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nome de usuário do Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Avisa a um espaço que a política tratou um documento."
+label = "Publicar uma mensagem no Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arquiva o documento processado em uma issue."
+label = "Anexar a uma issue do Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Envia o documento processado como anexo."
+label = "Enviar o documento por email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Grava o documento processado em uma pasta."
+label = "Upload para Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Seu próprio servidor Presidio relata os dados pessoais que encontra."
+label = "Detectar dados pessoais"
+note = "Presidio lê texto, não arquivos. Forneça o texto que você quer verificar — o documento em si não é enviado."
+
+[portal.policies.operations.responseMode]
+replace = "Substituir o documento pela resposta"
+report = "Manter o documento, registrar a resposta"
+
+[portal.policies.operations.sendgridEmail]
+description = "Envia o documento processado como anexo."
+label = "Enviar o documento por email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Avisa a um canal que a política tratou um documento."
+label = "Publicar uma mensagem no Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Registra o que a política fez, onde seus auditores já procuram."
+label = "Enviar um evento de auditoria para Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Registra o que a política fez em um coletor HTTP."
+label = "Enviar um evento de auditoria para Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Avisa a um canal que a política tratou um documento."
+label = "Publicar uma mensagem no Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Envia o próprio documento para uma URL que você escolher."
+label = "Publicar o documento em um webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Entrega os detalhes da execução à sua automação."
+label = "Acionar um Zap ou cenário Make"
+
 [portal.policies.stats]
 activeFor = "Ativa"
 dataProcessed = "Dados processados"
@@ -7473,6 +8277,13 @@ label = "Docs aplicados"
 description = "Configuradas, mas não acionadas"
 label = "Pausadas"
 
+[portal.policies.table]
+appliesTo = "Aplica-se a"
+docs = "Docs aplicados"
+enforces = "Aplica"
+policy = "Política"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Voltar"
 cancel = "Cancelar"
@@ -7480,6 +8291,10 @@ continue = "Continuar"
 enablePolicy = "Ativar política"
 saveChanges = "Salvar alterações"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifica o tipo do documento a partir dos rótulos da sua equipe e o marca, para que seja arquivado e pesquisado por categoria."
+label = "Classificar o documento"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprime o documento para um tamanho de arquivo menor."
 label = "Reduzir tamanho do arquivo"
@@ -7500,10 +8315,18 @@ label = "Ocultar informações sensíveis"
 desc = "Remove JavaScript oculto para que nada possa ser executado automaticamente quando o documento for aberto."
 label = "Remover conteúdo ativo"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Prova que o documento existia nesta forma exata em um ponto no tempo, usando uma autoridade de timestamp independente. Apenas um hash é enviado - o documento nunca sai do seu servidor."
+label = "Adicionar um timestamp confiável"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Carimba uma marca visível (por exemplo, “Confidencial”) em todas as páginas."
 label = "Aplicar uma marca d'água"
 
+[portal.policies.wizard.classification]
+description = "Cada documento enviado é classificado de acordo com os rótulos integrados e marcado com os tipos correspondentes. O conjunto de rótulos é compartilhado por toda a sua equipe."
+labelsHeading = "Rótulos de classificação"
+
 [portal.policies.wizard.errors]
 noTools = "Ative pelo menos uma ferramenta no fluxo de trabalho primeiro."
 saveFailed = "Não foi possível salvar a política. Tente novamente."
@@ -7548,73 +8371,118 @@ setUp = "Configurar política de {{category}}"
 [portal.policies.wizard.workflow]
 description = "Escolha o que esta política faz com cada documento que processa."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} ativas"
-noRule = "Nenhuma regra aplicada ainda"
-subtitle = "Automações permanentes pelas quais todos os documentos passam, independentemente de qual pipeline os manipula."
-title = "O que é executado nos seus PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Fazer upgrade para Enterprise"
-configure = "Configurar"
 setUp = "Configurar"
 
-[portal.policySummary.column]
-activeRule = "Regra ativa"
-policy = "Política"
-status = "Status"
+[portal.processorFlow]
+footnote = "As contagens são das últimas 24 horas. A velocidade do fluxo é ilustrativa."
+liveBadge = "Ao vivo"
+stats = "{{connected}} conectados · {{processed}} PDFs processados"
+title = "Processador PDF"
 
-[portal.policySummary.empty]
-description = "Assim que as políticas forem configuradas, as categorias aparecerão aqui."
-title = "Nenhuma política ainda"
+[portal.processorFlow.lens]
+ariaLabel = "Modo de visualização"
+flow = "Fluxo"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Ativa"
-off = "Desativada"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Falhou"
+heading = "Resultados"
+success = "Entregue"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} ativos"
+count = "{{n}} · 24h"
+heading = "Políticas"
+setUp = "Configurar"
 soon = "Em breve"
 
-[portal.processingStatus]
-managePlan = "Gerenciar plano"
-volumeSuffix = "PDFs processados · últimos 30 dias"
+[portal.processorFlow.sankey]
+waist = "Políticas · {{n}} ativas"
+
+[portal.processorFlow.sankey.empty]
+description = "Conecte uma fonte e ative uma política para ver documentos fluírem pelo processador."
+title = "Ainda não há fluxo"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Conectar"
+editor = "Editor Stirling PDF"
+heading = "Fontes"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Entrada de email"
 
 [portal.procurement]
-reset = "Redefinir compras (demo)"
 subtitle = "Faça sua equipe ser avaliada, contratada e integrada. Todos os documentos em um só lugar."
 title = "Compras"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Pagar agora"
-request = "Solicitar"
-sign = "Revisar e assinar"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Concordar e assinar"
+confidential = "Confidencial"
 confirm = "Li e concordo com o Acordo Stirling Enterprise."
-eyebrow = "Acordo"
-intro = "Um único acordo combinado cobre sua negociação: Contrato Mestre de Serviços, Formulário de Pedido, EULA e Acordo de Processamento de Dados. Revise-o e depois concorde para aceitar a cotação em uma assinatura comprometida."
-title = "Revise seu acordo enterprise"
+docName = "Contrato Stirling Enterprise"
+docSub = "MSA, Formulário de Pedido, EULA e DPA, combinados em uma assinatura."
+download = "Baixar"
+downloadDraftError = "Não foi possível gerar o PDF do contrato - o renderizador de documentos está indisponível. Tente novamente em breve ou entre em contato com o suporte."
+downloadError = "Não foi possível baixar o contrato assinado. Tente novamente."
+legalName = "Nome da entidade legal"
+legalNamePlaceholder = "A entidade legal que assinará"
+loadError = "Não foi possível carregar o contrato. Tente novamente."
+loading = "Carregando o contrato..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Solicitar alterações"
+scrollHint = "Role para revisar"
+signatory = "Nome do signatário"
+signatoryPlaceholder = "Nome completo"
+signatoryTitle = "Cargo do signatário"
+signatoryTitlePlaceholder = "ex.: Diretor Jurídico"
+signError = "Não foi possível registrar sua assinatura. Tente novamente."
 
 [portal.procurement.builder]
 addons = "Complementos"
+addressLine1 = "Linha de endereço 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Linha de endereço 2"
+addressLine2Placeholder = "Sala, andar, edifício"
 back = "Voltar"
 businessName = "Nome da empresa"
 businessNamePlaceholder = "Sua empresa"
+city = "Cidade"
+cityPlaceholder = "San Francisco"
+completeRequired = "Preencha os campos obrigatórios (marcados com *) com um email válido antes de gerar a cotação."
+contactEmail = "Email de contato"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nome do contato"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continuar"
-country = "País"
-countryEuro = "Zona do euro (EUR €)"
-countryUK = "Reino Unido (GBP £)"
-countryUS = "Estados Unidos (USD $)"
+done = "Concluído"
 eula = "Li e concordo com a EULA Stirling Enterprise. Ela rege o acordo gerado a partir desta cotação."
 generate = "Gerar cotação"
-included = "Incluído"
 indemnification = "Indenização por propriedade intelectual"
 indemnificationSub = "Defendemos reivindicações de propriedade intelectual qualificadas, conforme a EULA"
-offlineLicense = "Licença offline / air-gapped"
-offlineLicenseSub = "Um arquivo de licença baixável para uma instância self-hosted air-gapped"
+paperEyebrow = "Cotação Enterprise"
+paperFor = "Preparado para"
+pdfSize = "Tamanho do PDF"
+poNumber = "Número do pedido de compra"
+poNumberPlaceholder = "Opcional"
+postalCode = "Código postal"
+postalCodePlaceholder = "94105"
+posture = "Governança"
+posture_count = "~{{count}} políticas"
+posture_essentials = "Essenciais"
+posture_essentialsSub = "Classificação + Compartilhamento — os padrões"
+posture_governed = "Governado"
+posture_governedSub = "Adiciona Segurança e Roteamento"
+posture_regulated = "Regulado"
+posture_regulatedSub = "Todas as categorias — Conformidade, Retenção, Ingestão"
 qbr = "Revisões de negócios trimestrais"
 qbrSub = "Seu SE revisa uso e roadmap a cada trimestre"
+region = "Estado / região"
+regionPlaceholder = "Califórnia"
 running = "{{annual}} / ano · {{years}} anos {{tcv}}"
 s1Sub = "Sua equipe e os PDFs que você espera executar a cada ano."
 s1Title = "Quanto você vai processar?"
@@ -7623,6 +8491,12 @@ s2Title = "Compromisso e serviço"
 s3Sub = "Para a cotação e o acordo que ela gera."
 s3Title = "Seus dados"
 serviceLevel = "Nível de serviço"
+size_compact = "Compacto"
+size_compactSub = "Principalmente texto, abaixo de 1 MB"
+size_heavy = "Pesado"
+size_heavySub = "Digitalizado ou com muitas imagens, 5 MB+"
+size_standard = "Padrão"
+size_standardSub = "Texto e imagens mistos, 1 a 5 MB"
 slDedicated = "Dedicado"
 slDedicatedSub = "4 horas úteis · gerente de conta dedicado · +30%"
 slPriority = "Prioritário"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Mesmo dia útil · CSM nomeado · +15%"
 slStandard = "Padrão"
 slStandardSub = "Próximo dia útil · CSM compartilhado · incluído"
 stepOf = "Etapa {{n}} de {{total}}"
+taxId = "VAT / ID fiscal"
+taxIdPlaceholder = "Opcional"
 term = "Prazo"
 termDiscount = "Desconto de {{pct}}% por compromisso de vários anos aplicado"
 title = "Monte sua cotação"
@@ -7637,6 +8513,7 @@ training = "Integração e treinamento"
 trainingSub = "Sessões ao vivo para colocar sua equipe em funcionamento"
 users = "Total de usuários"
 usersPlaceholder = "ex.: 250"
+viewEula = "Ler"
 volEstimated = "Estimado a partir de {{count}} usuários (~2.000 PDFs cada, incluindo automação). Edite se souber melhor."
 volManual = "Usando o valor informado. Reestime pelo tamanho da sua equipe a qualquer momento."
 volNoUsers = "Não tem certeza? Informe o tamanho da sua equipe e vamos estimar."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "ex.: 1.000.000"
 years_one = "{{count}} ano"
 years_other = "{{count}} anos"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Concluído"
-here = "Você está aqui"
-hide = "Ocultar"
-optional = "Opcional"
-paidAddon = "Complemento pago"
-show = "Mostrar"
-subtitle = "Tudo que você precisa em cada etapa da jornada, exibido conforme a negociação avança."
-supportingSubtitle = "SOC 2, revisões de segurança, formulários fiscais e mais, prontos quando sua equipe de segurança ou compras solicitar. Alguns têm taxa única."
-supportingTitle = "Apoiando sua avaliação"
+[portal.procurement.documents]
+agreement = "Contrato Enterprise"
+agreementSub = "MSA, Formulário de Pedido e DPA em uma assinatura."
+download = "Baixar"
+eula = "EULA e Termos Comerciais"
+eulaSub = "O software e os termos comerciais self-service."
+invoice = "Fatura"
+invoiceSub = "Sua primeira fatura de assinatura."
+laterInvoice = "Disponível depois que você aceitar"
+laterQuote = "Disponível quando sua cotação for emitida"
+quote = "Cotação"
+quoteSub = "Sua cotação Enterprise detalhada."
+sla = "Anexo SLA"
+slaSub = "Níveis de suporte e metas de resposta."
+subprocessors = "Subprocessadores"
+subprocessorsSub = "Terceiros que processam dados em seu nome."
+subtitle = "Sua documentação do negócio, disponível a qualquer momento."
 title = "Documentos"
-upcoming = "Em breve"
+view = "Ver"
 
 [portal.procurement.error]
 title = "Algo deu errado"
 
 [portal.procurement.hero]
-company = "Sua negociação enterprise"
+barAria = "Etapa {{current}} de {{total}}"
 ctaAgreement = "Revisar e assinar acordo"
-ctaLive = "Você está no ar"
-ctaPayment = "Adicionar pagamento"
+ctaExploring = "Configurar seu teste"
 ctaQuote = "Revisar sua cotação"
+ctaReviewQuote = "Revisar cotação"
 ctaTrial = "Montar sua cotação"
+documents = "Documentos"
 eyebrow = "Compras Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Convidar colegas de equipe"
-keyDocs = "Documentos principais"
-nextStep = "Próxima etapa: {{action}}"
-notStarted = "Não iniciado"
+licenseKey = "Chave de licença"
+liveSub = "Sua organização está provisionada e sua licença está ativa."
+liveTitle = "Você está ativo no Stirling Enterprise"
+next = "Próximo: {{stage}}"
 open = "Abrir compras"
 scheduleCall = "Agendar uma chamada"
-setup1Sub = "Convide seus colegas de equipe"
-setup1Title = "Implantar o PDF Editor"
-setup2Sub = "Ative o processamento entre editores e outras fontes"
-setup2Title = "Conectar o PDF Processor"
-setup3Sub = "Ative Segurança, Conformidade, Roteamento ou Retenção quando precisar"
-setup3Title = "Adicionar políticas recomendadas"
+sentenceAgreement = "revisar e assinar o contrato"
+sentenceLive = "provisionamento e rollout"
+sentencePayment = "pedido de compra e pagamento"
+sentenceQuote = "revisar e aceitar sua cotação"
+sentenceTrial = "configurar seu workspace de teste"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} dia restante"
 daysLeft_other = "{{count}} dias restantes"
-engineerLabel = "Seu engenheiro de soluções"
-eyebrow = "Sua implantação"
-live = "Você está no ar no Stirling Enterprise"
-nextStep = "Próxima etapa: {{action}}"
-subtitle = "Seu engenheiro de soluções acompanha cada etapa. Uma próxima ação por vez; a lista completa está abaixo."
-title = "Do teste ao go-live, um caminho guiado"
-trialTitle = "Teste Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Uma assinatura cobre MSA, formulário de pedido, EULA e DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Ainda não foi possível gerar o arquivo de licença offline 
 downloadOffline = "Baixar licença offline (.lic)"
 hint = "Cole esta chave em uma instância self-hosted para ativá-la ou guarde-a para seus registros. Mantenha-a segura."
 label = "Sua chave de licença"
+subtitle = "Ative uma instância self-hosted com esta chave ou guarde-a para seus registros."
+title = "Sua chave de licença"
+trialFileHint = "Este é o arquivo de licença do seu teste. Assim que seu contrato estiver em vigor, volte e baixe-o novamente — ao contrário da chave de licença online, o arquivo .lic não será atualizado sozinho."
 
 [portal.procurement.link]
 cta = "Vincular conta"
@@ -7739,65 +8619,62 @@ description = "Sua assinatura está ativa e sua licença foi emitida. Sua equipe
 eyebrow = "No ar"
 title = "Você está no ar no Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Chaves de teste, cotações por volume comprometido, o acordo de assinatura única, pagamento e seu registro de documentos ficam todos aqui quando você inicia uma avaliação enterprise."
-eyebrow = "Somente Enterprise"
-talkToSales = "Falar com vendas"
-title = "A trilha de compras abre com Enterprise"
-
 [portal.procurement.milestone]
-accept = "Aceitar e continuar"
-description = "Baixe o PDF para compartilhá-lo com sua equipe, volte para aceitar quando estiver pronto ou faça alterações."
-download = "Baixar PDF"
 downloadError = "Ainda não foi possível baixar o PDF da cotação — tente novamente em instantes."
-edit = "Editar cotação"
-eyebrow = "Cotação {{number}}"
-perYear = " / ano"
-preparedFor = "Preparado para {{company}}"
-tcv = "{{value}} de valor total do contrato"
-title = "Sua cotação está pronta"
-
-[portal.procurement.modal]
-cancel = "Cancelar"
-chooseFile = "Escolher arquivo"
-close = "Fechar"
-downloadBody = "Seu download começará em breve."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "Nenhum arquivo selecionado"
-payBody = "Pague seu contrato comprometido com cartão ou transferência bancária pelo Stripe. Seu workspace é provisionado assim que o pagamento for compensado."
-payCta = "Continuar para Stripe"
-payTitle = "Confirmar pagamento"
-requestBodyFree = "Geramos isso sob demanda. Confirme e seu engenheiro de soluções o enviará em breve."
-requestBodyPaid = "Este é um complemento pago. Confirme e seu engenheiro de soluções avaliará o escopo e enviará a documentação."
-requestCta = "Solicitar"
-requestTitle = "Solicitar este documento"
-signBody = "Abre o Acordo Stirling Enterprise para assinatura eletrônica: uma assinatura cobre o MSA, formulário de pedido, EULA e DPA. Assinamos automaticamente como contraparte e você avança para o pagamento."
-signCta = "Abrir para assinatura"
-signTitle = "Revisar e assinar seu acordo"
-uploadBody = "Envie-nos sua PO e faturamos contra ela conforme seus termos. Arraste o PDF ou escolha um arquivo abaixo."
-uploadCta = "Fazer upload da ordem de compra"
-uploadTitle = "Fazer upload da sua ordem de compra"
 
 [portal.procurement.payment]
 description = "Sua cotação foi aceita e sua licença já está ativa — sua equipe pode começar imediatamente. Pague a primeira fatura quando estiver pronto; você pode pagar ou baixá-la aqui, sem precisar de email."
+downloadAgreement = "Baixar contrato assinado"
 downloadInvoice = "Baixar fatura"
-simulate = "Simular pagamento recebido (demo)"
+eyebrow = "Pagamento"
 title = "Assinatura criada"
 viewInvoice = "Ver e pagar fatura"
 
+[portal.procurement.review]
+acceptCta = "Aceitar cotação"
+annual = "Taxa anual (ano 1)"
+downloadCta = "Baixar cotação"
+poNumber = "Pedido de compra: {{po}}"
+renewal = "Renova a {{amount}}/ano após o prazo (+{{pct}}% CPI)"
+tcv = "Prazo de {{years}} anos, pago integralmente antecipado: {{tcv}}"
+validUntil = "Válido até {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Não foi possível carregar o agendador."
 fallbackLink = "Abrir agendamento em uma nova aba"
+loading = "Carregando agendador..."
 subtitle = "Seu engenheiro de soluções guiará sua equipe durante a implantação. Escolha um horário que seja adequado para você."
 title = "Agendar uma chamada"
 
-[portal.procurement.status]
-action = "Ação necessária"
-available = "Disponível"
-complete = "Concluído"
-pending = "Pendente"
-request = "Sob solicitação"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Selado, sem saída"
+back = "Voltar"
+businessName = "Nome da empresa"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Gerenciado, início mais rápido"
+continue = "Continuar"
+deployment = "Onde deve ser implantado?"
+eula = "Eu concordo com o Stirling EULA e os Termos Comerciais."
+fullName = "Nome completo"
+fullNamePlaceholder = "Seu nome"
+invites = "Convidar colegas de equipe · opcional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Agendar uma chamada"
+seats = "Pessoas testando"
+seatsPlaceholder = "ex.: 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker ou Kubernetes"
+start = "Iniciar teste"
+stepOf = "Etapa {{n}} de {{total}}"
+subtitle = "Grátis por 14 dias, sem cartão necessário."
+subtitleDetails = "Alguns detalhes para sua cotação e contrato."
+talkFirst = "Prefere conversar primeiro?"
+title = "Configure seu teste"
+viewEula = "Ler"
+workEmail = "Email corporativo"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Estender adiciona 7 dias e notifica seu engenheiro de soluções."
@@ -7808,20 +8685,6 @@ maxed = "Esgotado"
 subtitle = "Seu teste gratuito vai até {{date}}. Não é necessário cartão."
 title = "Teste Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Preços por volume comprometido, SSO + SCIM + RBAC em toda a organização, auditoria imutável de 90 dias e um SE dedicado."
-homeCta = "Iniciar teste →"
-homeHeadline = "Processe milhões de PDFs."
-
-[portal.recentActivity]
-title = "Atividade recente"
-viewAll = "Ver tudo"
-
-[portal.recentActivity.empty]
-description = "Execuções de pipeline, implantações e eventos de agentes aparecerão aqui."
-title = "Nada aqui ainda"
-
 [portal.search]
 ariaLabel = "Pesquisar"
 placeholder = "Pesquisar no Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Vínculo de conta"
 
-[portal.shell.header]
-accountFallback = "Conta"
-accountMenu = "Menu da conta"
-darkMode = "Modo escuro"
-lightMode = "Modo claro"
-search = "Pesquisar"
-searchPlaceholder = "Pesquisar…"
-signOut = "Sair"
-switchToDark = "Alternar para tema escuro"
-switchToLight = "Alternar para tema claro"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Vincular conta Stirling"
-planEditor = "Plano Editor"
-planEnterprise = "Plano Enterprise"
-planProcessor = "Plano Processor"
 primaryNav = "Navegação principal"
 switchApp = "Alternar app"
 
+[portal.shell.topbar]
+closeNav = "Fechar navegação"
+openNav = "Abrir navegação"
+search = "Pesquisar"
+
 [portal.sources]
 subtitle = "Conexões de entrada reutilizáveis que alimentam documentos no Stirling. Configure uma conexão uma vez e depois referencie-a em qualquer número de políticas. Clique em uma linha para ver sua configuração e quais políticas a usam."
 title = "Fontes"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Conectar fonte"
 
+[portal.sources.builder]
+back = "Voltar para fontes"
+backToTypes = "Todos os tipos de fonte"
+cancel = "Cancelar"
+chooseHint = "Escolha de onde vêm os documentos. Conectores esmaecidos estão a caminho."
+comingSoon = "Em breve"
+comingSoonHeading = "Em breve"
+create = "Criar fonte"
+createTitle = "Conectar uma fonte"
+delete = "Excluir"
+editTitle = "Editar fonte"
+enabled = "Ativado"
+save = "Salvar alterações"
+
+[portal.sources.builder.folderAccess]
+description = "Automações de pasta só podem usar pastas que um administrador permitiu. Adicione-a nas configurações de Acesso a Pastas e tente novamente."
+openSettings = "Configurações de Acesso a Pastas"
+title = "Esta pasta não é permitida"
+
 [portal.sources.delete]
 body = "Excluir \"{{name}}\"? Isso não pode ser desfeito. Políticas que a referenciam precisarão ser atualizadas."
 cancel = "Cancelar"
 confirm = "Excluir"
 title = "Excluir fonte?"
 
-[portal.sources.detail]
-closeAriaLabel = "Fechar detalhes"
-delete = "Excluir fonte"
-docs24h = "Últimas 24h"
-docs30d = "Últimos 30 dias"
-docsTotal = "Total visto"
-docsTrend = "Documentos nos últimos 30 dias"
-documents = "Documentos"
-edit = "Editar"
-notReferenced = "Não referenciada por nenhuma política, então é seguro excluí-la."
-pause = "Pausar"
-resume = "Retomar"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Usada por"
-
 [portal.sources.empty]
 description = "Conecte uma pasta (e, em breve, armazenamento em nuvem) para que suas políticas tenham de onde puxar documentos."
 title = "Nenhuma fonte conectada ainda"
@@ -7899,18 +8754,57 @@ inUse = "Em uso"
 total = "Conexões"
 unused = "Não usadas"
 
+[portal.sources.networkFields.connection]
+helperText = "A conexão armazenada com o endereço do servidor e as credenciais. Reutilizada por toda fonte que a referencia."
+label = "Conexão"
+
+[portal.sources.networkFields.directory]
+helperText = "Pasta no servidor a ser sondada, relativa ao diretório inicial do login ou à raiz do compartilhamento. Deixe em branco para a raiz."
+label = "Pasta"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consumir remove cada arquivo do servidor assim que todas as políticas o processarem."
+label = "Modo de leitura"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consumir: processar cada arquivo uma vez"
+snapshot = "Snapshot: reler a pasta a cada execução"
+
+[portal.sources.networkFields.recursive]
+label = "Profundidade da pasta"
+
+[portal.sources.networkFields.recursive.options]
+all = "Incluir subpastas"
+top = "Somente nível superior"
+
 [portal.sources.status]
 active = "Ativa"
 disabled = "Desativada"
 unused = "Não usada"
 
 [portal.sources.table]
+documents = "Documentos"
 source = "Fonte"
 status = "Status"
 usedBy = "Políticas"
 
+[portal.sources.types.box]
+description = "Puxe documentos de pastas do Box que sua equipe já compartilha."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Puxe documentos de uma pasta compartilhada do Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documentos que sua equipe processou no editor, em execuções de políticas e AI."
 label = "Editor"
+noPolicies = "Nenhuma política executada a partir do editor ainda."
+
+[portal.sources.types.email]
+description = "Transforme anexos enviados para uma caixa de entrada dedicada em documentos."
+label = "Caixa de entrada de email"
 
 [portal.sources.types.folder]
 description = "Monitore um diretório no servidor em busca de novos documentos."
@@ -7943,25 +8837,80 @@ label = "Profundidade da pasta"
 all = "Incluir subpastas"
 top = "Somente nível superior"
 
+[portal.sources.types.ftp]
+description = "Sonde uma pasta de servidor FTP ou FTPS em busca de novos documentos."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Puxe documentos de pastas compartilhadas do Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Monitore um compartilhamento de rede SMB em busca de novos documentos."
+label = "Drive de rede"
+
+[portal.sources.types.onedrive]
+description = "Monitore pastas do OneDrive em busca de novos documentos."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Puxe documentos de um bucket Amazon S3 ou compatível com S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "A conexão armazenada que contém o bucket e as credenciais. Reutilizada por toda fonte e saída de pipeline que a referencia."
+label = "Conexão"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consumir remove cada objeto do bucket assim que todas as políticas o processarem."
+label = "Modo de leitura"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consumir: processar cada objeto uma vez"
+snapshot = "Snapshot: reler o bucket a cada execução"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Somente objetos cujas chaves começam com este prefixo são processados."
+label = "Prefixo da chave"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Sonde uma pasta de entrega SFTP em busca de novos documentos."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Puxe documentos de bibliotecas de documentos do SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Fonte"
 
+[portal.sources.types.webhook]
+createNote = "Uma URL de entrega e um segredo de assinatura são gerados quando você cria este webhook. Remetentes enviam documentos por POST para essa URL e as políticas de referência são executadas na chegada."
+description = "Receba documentos por HTTP POST assinado de qualquer sistema externo."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL de entrega"
+secretNote = "O segredo de assinatura é mostrado uma vez, quando o webhook é criado. Recrie a fonte para rotacioná-lo."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copiar"
+done = "Concluído"
+secret = "Segredo de assinatura"
+secretHelp = "Assine o corpo bruto de cada entrega com esta chave (HMAC-SHA256) e envie-o como o cabeçalho X-Stirling-Signature."
+secretWarning = "Copie o segredo de assinatura agora. Para sua segurança, ele é mostrado apenas uma vez e não poderá ser recuperado posteriormente."
+title = "Webhook criado"
+url = "URL de entrega"
+usage = "Envie cada documento por POST como o corpo bruto da requisição para a URL de entrega com um tipo de conteúdo binário (application/pdf ou application/octet-stream). As políticas de referência são executadas automaticamente na chegada."
+
 [portal.sources.wizard]
-back = "Voltar"
-cancel = "Cancelar"
-continue = "Continuar"
-editTitle = "Editar fonte"
 name = "Nome"
 namePlaceholder = "ex.: Recebimento de sinistros"
-save = "Salvar alterações"
-subtitle = "Etapa {{current}} de {{total}} · {{label}}"
-title = "Conectar uma fonte"
 type = "Tipo"
 
-[portal.sources.wizard.steps]
-chooseType = "Escolher tipo"
-configure = "Configurar"
-review = "Revisar e conectar"
+[portal.stepModal]
+close = "Fechar"
 
 [portal.usage]
 managePayment = "Gerenciar pagamento"
@@ -8021,16 +8970,9 @@ summary = "Possui uma equipe — gerencia os recursos e configurações comparti
 2 = "Acesso ao portal pela política padrão"
 3 = "Tudo que o Membro pode fazer"
 
-[portal.welcome]
-ariaLabel = "Bem-vindo ao Stirling PDF"
-badge = "Open-source"
-installEditor = "Instalar o Editor"
-inviteTeammates = "Convidar colegas de equipe"
-openInBrowser = "Abrir no navegador"
-perks = "Grátis para sempre · Self-hostable"
-subtitle = "O PDF Editor mais seguro do mundo é gratuito para equipes de todos os tamanhos. Inclui mais de 60 operações de PDF e SSO."
-title = "Bem-vindo ao"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Ilimitado"
 
 [printFile]
 title = "Imprimir arquivo"
@@ -8613,6 +9555,14 @@ text = "Rotate your PDF pages clockwise or anticlockwise in 90-degree increments
 [rotate.tooltip.header]
 title = "Rotate Settings Overview"
 
+[ruler]
+clearAll = "Limpar tudo"
+hideAllLabels = "Ocultar todos os rótulos"
+hideSmallLabels = "Ocultar rótulos pequenos"
+physicalValues = "Físico"
+scaled = "Escalado"
+showAllLabels = "Mostrar todos os rótulos"
+
 [sanitize]
 desc = "Remove potentially harmful elements from PDF files."
 sanitizationResults = "Sanitisation Results"
@@ -8654,31 +9604,45 @@ label = "Remove XMP Metadata"
 [sanitize.steps]
 settings = "Settings"
 
-[sanitizePdf]
-tags = "clean,secure,safe,remove-threats"
-
 [sanitizePDF]
 title = "Sanitise PDF"
 
+[sanitizePdf]
+tags = "clean,secure,safe,remove-threats"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Adjust page-scale"
 
+[scaleSettings]
+activeScale = "Escala ativa"
+apply = "Aplicar escala"
+applyCalibration = "Aplicar calibração"
+calculatedScale = "Escala calculada"
+calibrate = "Calibrar"
+calibrating = "Calibrando"
+calibrationDistanceRequired = "Insira uma distância do mundo real maior que zero"
+calibrationInvalid = "Não foi possível calcular a escala a partir desta medição"
+calibrationPaperDistance = "Distância medida na página: {{distance}}"
+calibrationTitle = "Calibrar escala"
+calibrationTooltip = "Meça uma distância conhecida para calcular a escala automaticamente"
+customScale = "Escala personalizada"
+noneSet = "Nenhuma escala personalizada definida"
+presets = "Escalas predefinidas"
+ratio = "Proporção da escala"
+ratioHelp = "Proporção: 1 unidade da página = X unidades do mundo real"
+ratioPlaceholder = "ex.: 100"
+ratioPositive = "A proporção deve ser maior que zero"
+ratioRequired = "A proporção é obrigatória"
+realDistance = "Distância do mundo real"
+realDistancePlaceholder = "ex.: 5"
+reset = "Redefinir para os padrões"
+unit = "Unidade"
+unitInvalid = "Unidade inválida: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Angle Threshold:"
-10 = "Extra padding (in pixels) around each saved photo so edges aren't cut."
-2 = "Tilt (in degrees) needed before we auto-straighten a photo."
-3 = "Tolerance:"
-4 = "How closely a colour must match the page background to count as background. Higher = looser, lower = stricter."
-5 = "Minimum Area:"
-6 = "Smallest photo size (in pixels²) we'll keep to avoid tiny fragments."
-7 = "Minimum Contour Area:"
-8 = "Smallest edge/shape we consider when finding photos (filters dust and specks)."
-9 = "Border Size:"
-
 [scannerImageSplit]
 submit = "Extract Image Scans"
 tags = "separate,auto-detect,scans,multi-photo,organise"
@@ -8710,6 +9674,18 @@ whatThisDoes = "What this does"
 whatThisDoesDesc = "Automatically finds and extracts each photo from a scanned page or composite image-no manual cropping."
 whenToUse = "When to use"
 
+[ScannerImageSplit.selectText]
+1 = "Angle Threshold:"
+10 = "Extra padding (in pixels) around each saved photo so edges aren't cut."
+2 = "Tilt (in degrees) needed before we auto-straighten a photo."
+3 = "Tolerance:"
+4 = "How closely a colour must match the page background to count as background. Higher = looser, lower = stricter."
+5 = "Minimum Area:"
+6 = "Smallest photo size (in pixels²) we'll keep to avoid tiny fragments."
+7 = "Minimum Contour Area:"
+8 = "Smallest edge/shape we consider when finding photos (filters dust and specks)."
+9 = "Border Size:"
+
 [search]
 noResults = "No results found"
 placeholder = "Enter search term..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Your Stirling-PDF server is offline and \"{{endpoint}
 [session]
 expired = "Your session has expired. Please refresh the page and try again."
 
-[sessionManagement.tooltip]
-header = "Managing Signing Sessions"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "New participants added to the end of signing order"
-bullet2 = "Cannot add participants after session is finalised"
-bullet3 = "Each participant receives a notification when it's their turn"
-description = "You can add more participants to an active session at any time before finalisation."
-title = "Adding Participants"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Full finalisation</b>: All participants have signed"
-bullet2 = "<b>Partial finalisation</b>: Some participants haven't signed yet"
-bullet3 = "Unsigned participants will be excluded from the final document"
-bullet4 = "Once finalised, you can load the signed PDF into active files"
-description = "Finalisation combines all signatures into a single signed PDF. This action cannot be undone."
-title = "Session Finalisation"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Cannot remove participants who have already signed"
-bullet2 = "Removed participants no longer receive notifications"
-bullet3 = "Signing order adjusts automatically"
-description = "Participants can be removed from sessions before they sign."
-title = "Removing Participants"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Each signature is applied sequentially to the PDF"
-bullet2 = "Later signers can see earlier signatures"
-bullet3 = "Critical for approval workflows and legal chains of custody"
-description = "The order you specify when creating the session determines who signs first."
-title = "Signature Order"
-
 [settings]
 close = "Close"
 
+[settings.ai]
+documents = "Documentos e RAG"
+general = "Geral"
+limits = "Limites e desempenho"
+models = "Modelos e provedores"
+title = "IA"
+
 [settings.configuration]
 advanced = "Advanced"
 database = "Database"
 endpoints = "Endpoints"
 features = "Features"
+folderAccess = "Acesso a pastas"
 mcp = "MCP Server"
 storageSharing = "File Storage & Sharing"
 systemSettings = "System Settings"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Default PDF editor"
 defaultPdfEditorActive = "Stirling PDF is your default PDF editor"
 defaultPdfEditorChecking = "Checking..."
 defaultPdfEditorInactive = "Another application is set as default"
+defaultPdfEditorRemind = "Lembrar-me de definir como padrão"
+defaultPdfEditorRemindDescription = "Mostrar um banner quando Stirling PDF não for seu aplicativo PDF padrão."
 defaultPdfEditorSet = "Already Default"
 defaultStartupView = "Default view on launch"
 defaultStartupViewDescription = "Choose which view is active when the app starts"
@@ -8817,9 +9771,18 @@ languageDescription = "Choose the display language"
 logout = "Log out"
 setAsDefault = "Set as Default"
 theme = "Theme"
+themeAccent = "Cor de destaque"
+themeAccentCustom = "Cor personalizada"
+themeAccentCustomHint = "Personalizada (padrões recomendados)"
+themeAccentDark = "Cor de destaque do modo escuro"
+themeAccentDefault = "Padrão"
+themeAccentDefaultHint = "Tema padrão (recomendado)"
+themeAccentDescription = "Botões, links e destaques a seguem, e ela colore sutilmente o app. Os modos claro e escuro têm cada um a sua. O sistema usa a que estiver ativa."
+themeAccentLight = "Cor de destaque do modo claro"
 themeDark = "Dark"
 themeDescription = "Switch between light and dark mode"
 themeLight = "Light"
+themeReset = "Restaurar tema para o padrão"
 themeSystem = "System"
 title = "General"
 user = "User"
@@ -8833,6 +9796,12 @@ intro = "Enable user authentication, team management, and workspace features for
 learnMore = "Learn more in documentation"
 title = "For System Administrators"
 
+[settings.general.loginLanding]
+description = "Escolha qual app abre quando você entra no Stirling Cloud."
+editor = "Editor"
+processor = "Processador"
+title = "Após entrar"
+
 [settings.general.mode]
 fullscreen = "Fullscreen"
 sidebar = "Sidebar"
@@ -9041,6 +10010,11 @@ security = "Security"
 telegram = "Telegram"
 title = "Security & Authentication"
 
+[settings.signOut]
+confirm = "Tem certeza de que deseja sair?"
+submit = "Sair"
+title = "Sair"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Upload to Server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "clique aqui"
+fallback = "Se não abriu automaticamente,"
+opening = "Abrindo Swagger UI em uma nova aba..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API Documentation"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Select files in Active Files to run this tool"
 singleFileScope = "Only applying to: {{fileName}}"
 viewerMode = "Switch to the file editor to add multiple files."
 
+[toolFormat]
+ANY = "qualquer arquivo"
+CBR = "um arquivo de quadrinhos (CBR)"
+CBZ = "um arquivo de quadrinhos (CBZ)"
+CSV = "um arquivo CSV"
+EBOOK = "um e-book"
+EMAIL = "um e-mail"
+EXCEL = "uma planilha"
+HTML = "uma página da web"
+IMAGE = "imagens"
+JAVASCRIPT = "um arquivo JavaScript"
+JSON = "um arquivo JSON"
+MARKDOWN = "um arquivo Markdown"
+NONE = "nenhum arquivo"
+PCL = "um arquivo de impressão PCL"
+PDF = "um PDF"
+PDF_ENCRYPTED = "um PDF protegido por senha"
+POSTSCRIPT = "um arquivo PostScript"
+PPT = "uma apresentação"
+TEXT = "um arquivo de texto"
+VIDEO = "um vídeo"
+WORD = "um documento Word"
+XML = "um arquivo XML"
+XPS = "um documento XPS"
+ZIP = "um arquivo ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Back to all tools"
 collapse = "Collapse panel"
 expand = "Expand panel"
 goBack = "Go back"
+pdfTools = "Ferramentas PDF"
 placeholder = "Choose a tool to get started"
 premiumFeature = "Premium feature:"
+searchTools = "Pesquisar ferramentas"
 toolsHeader = "Tools"
 viewAllTools = "View all tools"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "No tools found"
 quickAccess = "QUICK ACCESS"
 searchPlaceholder = "Search tools..."
 
-[toolPicker.categories]
-advancedTools = "Advanced Tools"
-recommendedTools = "Recommended Tools"
-standardTools = "Standard Tools"
-
 [toolPicker.subcategories]
 advancedFormatting = "Advanced Formatting"
 automation = "Automation"
@@ -9950,16 +10950,31 @@ title = "Usuários"
 you = "(você)"
 
 [users.action]
+cancelInvite = "Cancelar convite"
 deleteTeam = "Excluir equipe"
 disableMfa = "Redefinir MFA"
 move = "Mover para equipe"
 reinstate = "Reintegrar"
 remove = "Remover da organização"
+removeTeam = "Remover da equipe"
 rename = "Renomear equipe"
 resetPw = "Redefinir senha"
 suspend = "Suspender"
 unlock = "Desbloquear conta"
 
+[users.activity]
+daysAgo = "há {{count}} d"
+hoursAgo = "há {{count}} h"
+justNow = "Agora mesmo"
+minutesAgo = "há {{count}} min"
+monthsAgo_one = "há {{count}} mês"
+monthsAgo_other = "há {{count}} meses"
+never = "Nunca"
+weeksAgo_one = "há {{count}} semana"
+weeksAgo_other = "há {{count}} semanas"
+yearsAgo_one = "há {{count}} ano"
+yearsAgo_other = "há {{count}} anos"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Aprova política"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Cancelar o convite para {{email}}? A pessoa não poderá entrar com o link atual."
+cancelInviteTitle = "Cancelar convite"
 deleteTeamBody = "Excluir a equipe {{name}}? A equipe deve estar vazia primeiro - mova seus membros para outra equipe, e ela não pode ainda possuir nenhuma configuração de integração."
 deleteTeamTitle = "Excluir equipe"
 disableMfaBody = "Remover o cadastro de MFA de {{name}}? A pessoa configurará novamente no próximo login, se necessário."
 disableMfaTitle = "Redefinir MFA"
 removeBody = "Remover permanentemente {{name}} da organização? Isso não pode ser desfeito."
+removeTeamBody = "Remover {{name}} da equipe? A pessoa manterá a conta, mas perderá o acesso aos recursos desta equipe."
 removeTitle = "Remover membro"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nome de usuário"
 usernameError = "O nome de usuário deve ter pelo menos 3 caracteres"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Convidado por {{who}}"
+cancel = "Cancelar"
+count = "{{count}} pendentes"
+desc = "Pessoas convidadas que ainda não entraram. Elas ocupam uma vaga até aceitarem."
+expiresInDays_one = "Expira em {{count}} dia"
+expiresInDays_other = "Expira em {{count}} dias"
+expiresToday = "Expira hoje"
+title = "Convites pendentes"
+
 [users.loadError]
 description = "Algo deu errado ao acessar o backend, ou você não tem acesso. Tente novamente."
 title = "Não foi possível carregar os membros"
@@ -10212,9 +11240,11 @@ title = "Attachments"
 
 [viewer.bookmarks]
 bookmarkTitle = "Título do marcador"
+bookmarkTitleRequired = "O título do marcador é obrigatório"
 closeSidebar = "Fechar barra lateral de marcadores"
 collapseAll = "Recolher todos os marcadores"
 expandAll = "Expandir todos os marcadores"
+searchPlaceholder = "Pesquisar marcadores"
 
 [viewer.comments]
 addComment = "Add comment"
@@ -10605,30 +11635,6 @@ title = "Watermark Text"
 image = "Image"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Signature Creation Methods"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Customise pen colour and thickness"
-bullet2 = "Clear and redraw until satisfied"
-bullet3 = "Works on touch devices (tablets, phones)"
-description = "Create a handwritten signature using your mouse or touchscreen. Best for personal, authentic signatures."
-title = "Draw Signature"
-
-[wetSignature.tooltip.type]
-bullet1 = "Choose from multiple fonts"
-bullet2 = "Customise text size and colour"
-bullet3 = "Perfect for standardised signatures"
-description = "Generate a signature from typed text. Fast and consistent, suitable for business documents."
-title = "Type Signature"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Supports PNG, JPG, and other image formats"
-bullet2 = "Transparent backgrounds recommended for best results"
-bullet3 = "Image will be resized to fit signature area"
-description = "Upload a pre-created signature image. Ideal if you have a scanned signature or company logo."
-title = "Upload Signature Image"
-
 [workbenchBar]
 activeFiles = "Active Files"
 annotations = "Annotations"
@@ -10652,6 +11658,7 @@ redact = "Redact"
 rotateLeft = "Rotate Left"
 rotateRight = "Rotate Right"
 ruler = "Ruler / Measure"
+rulerSettings = "Configurações de escala"
 save = "Save"
 saveAll = "Save All"
 saveAs = "Save As"
diff --git a/frontend/editor/public/locales/pt-PT/translation.toml b/frontend/editor/public/locales/pt-PT/translation.toml
index 565fe39088..602d5d6ce1 100644
--- a/frontend/editor/public/locales/pt-PT/translation.toml
+++ b/frontend/editor/public/locales/pt-PT/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "ficheiros selecionados"
 font = "Tipo de letra"
 fontSizeTooltip = "Tamanho do texto do número de página em pontos. Números maiores criam texto maior."
 fontTypeTooltip = "Família de fontes para os números de página. Escolha com base no estilo do seu documento."
-genericSubmit = "Submeter"
 green = "Verde"
 help = "Ajuda"
-imgPrompt = "Selecione Imagem(ns)"
 incorrectPasswordMessage = "A palavra-passe atual está incorreta."
 info = "Informação"
 invalidUndoData = "Não é possível desfazer: dados de operação inválidos"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Acordo de início de sessão"
 logOut = "Terminar sessão"
 marginTooltip = "Distância entre o número de página e a margem da página."
 moreOptions = "Mais opções"
-multiPdfPrompt = "Selecione PDFs (2+)"
 never = "Nunca"
 no = "Não"
 noFileSelected = "Nenhum ficheiro selecionado. Carregue um."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordem Personalizada de Páginas (Insira uma lista de números
 pages = "Páginas"
 pageSelectionPrompt = "Seleção Personalizada de Páginas (Insira uma lista de números de página separados por vírgulas 1,5,6 ou Funções como 2n+1):"
 password = "Palavra-passe"
-pdfPrompt = "Selecione PDF(s)"
 pin = "Fixar ficheiro (manter ativo após executar a ferramenta)"
 pro = "Pro"
 processingComplete = "O seu ficheiro está pronto."
@@ -356,6 +352,7 @@ text = "Estas permissões controlam o que os utilizadores podem fazer com o PDF.
 title = "Alterar Permissões"
 
 [addStamp]
+preview = "Pré-visualizar carimbo"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Transferências manuais: clique nas ligações e coloque os fiche
 noLanguages = "Não foram encontrados idiomas tessdata no diretório configurado."
 permissionNotice = "O caminho tessdata não é gravável. As transferências serão abertas no navegador; guarde manualmente os ficheiros .traineddata na pasta tessdata."
 
+[admin.settings.ai.documents]
+description = "Configure o modelo de embeddings e as definições de recuperação usadas para responder a perguntas sobre documentos. Aplicado ao motor de IA quando guardado."
+title = "Documentos e RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Deixe em branco para usar a credencial de ambiente do próprio motor. Aplica-se a implementações autoalojadas com um único motor."
+generic = "Chave API de embeddings"
+openai = "Chave API da OpenAI"
+setPlaceholder = "Guardada - deixe em branco para manter a chave atual"
+voyageai = "Chave API da VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL base do endpoint de embeddings compatível com OpenAI / Ollama, por exemplo, http://ollama:11434/v1. Deve apontar para um endpoint interno fidedigno (sensível a SSRF)."
+label = "URL base de embeddings"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Nome do modelo de embeddings. Texto livre; as sugestões são apenas indicações."
+label = "Modelo de embeddings"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Fornecedor usado para transformar o texto dos documentos em embeddings vetoriais."
+label = "Fornecedor de embeddings"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Número máximo de pesquisas de recuperação que o agente pode executar por pedido."
+label = "Máx. de pesquisas"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Alterar o modelo de embeddings produz efeito imediatamente, mas os documentos indexados com o modelo anterior têm de ser reindexados para a pesquisa devolver resultados corretos."
+title = "Reindexação necessária"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Se alterou o modelo de embeddings, reindexe os documentos existentes para que a pesquisa use o novo modelo."
+
+[admin.settings.ai.documents.topK]
+description = "Número dos fragmentos mais relevantes recuperados por pesquisa."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Ligue o Stirling ao motor de IA Python e escolha que capacidades de IA são disponibilizadas. As alterações aplicam-se ao reiniciar."
+title = "Motor de IA"
+
+[admin.settings.ai.general.capabilities]
+description = "Ative ou desative funcionalidades individuais de IA. As funcionalidades desativadas ficam ocultas na aplicação."
+title = "Capacidades"
+
+[admin.settings.ai.general.enabled]
+description = "Interruptor principal. Quando desativado, não estão disponíveis ferramentas de IA, agentes ou chamadas ao motor."
+label = "Ativar IA"
+
+[admin.settings.ai.general.features.chat]
+description = "Assistente de conversação para trabalhar com PDFs."
+label = "Assistente de chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Categorize automaticamente documentos por tipo ou conteúdo."
+label = "Classificação de documentos"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Gere um novo PDF (por exemplo, a partir de HTML) através de um agente de IA."
+label = "Criar PDF a partir de prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Faça perguntas e obtenha respostas baseadas num documento carregado."
+label = "Perguntas sobre documentos"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Reveja documentos quanto a erros matemáticos e numéricos."
+label = "Auditor matemático"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Adicione comentários de revisão e anotações escritos por IA a um PDF."
+label = "Agente de comentários PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Tempo limite para operações de agente mais pesadas, como geração de documentos."
+label = "Tempo limite prolongado (segundos)"
+
+[admin.settings.ai.general.note]
+body = "O motor de IA é executado como um serviço separado. O respetivo segredo partilhado"
+body2 = "é definido através de uma variável de ambiente do contentor. As chaves API dos fornecedores podem ser introduzidas nestas páginas ou fornecidas como variáveis de ambiente do motor; as chaves introduzidas aqui são enviadas para o motor quando guardadas."
+title = "Sobre o motor de IA"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Tempo limite para respostas de chat transmitidas (token a token)."
+label = "Tempo limite de stream (segundos)"
+
+[admin.settings.ai.general.test]
+button = "Testar ligação"
+failBody = "O motor de IA não respondeu. Verifique o URL, se o contentor do motor está em execução e se a IA está ativada (é necessário reiniciar após ativar)."
+failTitle = "Motor de IA inacessível"
+okBody = "O motor de IA respondeu a uma verificação de estado."
+okTitle = "Motor de IA acessível"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Tempo limite para pedidos de IA padrão ao motor."
+label = "Tempo limite do pedido (segundos)"
+
+[admin.settings.ai.general.url]
+description = "URL interno do motor de IA Python, por exemplo, http://stirling-pdf-engine:5001."
+label = "URL do motor de IA"
+
+[admin.settings.ai.limits]
+description = "Limites de proteção para quanto trabalho os pedidos de IA podem fazer e quantos são executados em simultâneo. Aplicado ao motor de IA quando guardado."
+title = "Limites e desempenho"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Limite de proteção: rejeitar pedidos de IA cujo texto extraído exceda este comprimento."
+label = "Máx. de caracteres por pedido"
+
+[admin.settings.ai.limits.maxPages]
+description = "Limite de proteção: rejeitar pedidos de IA com mais do que este número de páginas PDF."
+label = "Máx. de páginas por pedido"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Máximo de chamadas de modelo simultâneas em curso em todo o motor."
+label = "Concorrência máx. do modelo"
+
+[admin.settings.ai.models]
+description = "Escolha o fornecedor de LLM e os modelos inteligente/rápido que o motor de IA usa. Aplicado ao motor de IA quando guardado."
+title = "Modelos e fornecedores"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Chave API da Anthropic"
+description = "Deixe em branco para usar a credencial de ambiente do próprio motor. Aplica-se a implementações autoalojadas com um único motor."
+generic = "Chave API"
+openai = "Chave API da OpenAI"
+setPlaceholder = "Guardada - deixe em branco para manter a chave atual"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL base do endpoint compatível com OpenAI / Ollama, por exemplo, http://ollama:11434/v1."
+label = "URL base do fornecedor"
+warning = "O URL base deve apontar para um endpoint interno fidedigno. O motor fará pedidos do lado do servidor para esse URL, por isso um valor não fidedigno é sensível a SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Máximo de tokens de saída para o modelo rápido."
+label = "Máx. de tokens do modelo rápido"
+
+[admin.settings.ai.models.fastModel]
+description = "Modelo mais barato e rápido para tarefas leves. Texto livre; as sugestões são apenas indicações."
+label = "Modelo rápido"
+
+[admin.settings.ai.models.provider]
+description = "Fornecedor de LLM com o qual o motor comunica."
+label = "Fornecedor"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Máximo de tokens de saída para o modelo inteligente."
+label = "Máx. de tokens do modelo inteligente"
+
+[admin.settings.ai.models.smartModel]
+description = "Modelo de alta capacidade para raciocínio complexo. Texto livre; as sugestões são apenas indicações."
+label = "Modelo inteligente"
+
+[admin.settings.ai.saved]
+body = "As alterações são enviadas automaticamente para o motor de IA."
+bodyNoPush = "Definições guardadas. Serão aplicadas da próxima vez que o motor de IA recolher a sua configuração."
+title = "Definições de IA guardadas"
+
 [admin.settings.badge]
 clickToUpgrade = "Clique para ver os detalhes do plano"
 
@@ -938,6 +1094,25 @@ label = "Regenerar no arranque"
 description = "Número de dias durante os quais o certificado será válido"
 label = "Validade do certificado (dias)"
 
+[admin.settings.folderAccess]
+description = "Diretórios dos quais as origens de pastas e as saídas de pastas podem ler e nos quais podem escrever. Isto é um limite de segurança: as automatizações nunca podem apontar para um caminho do servidor fora desta lista."
+securityNote = "Deixe isto vazio para desativar completamente as origens e saídas de pastas. O diretório de configuração do próprio Stirling está sempre interdito."
+title = "Acesso a pastas"
+
+[admin.settings.folderAccess.implied]
+description = "Estes diretórios geridos pelo Stirling são sempre permitidos e não podem ser alterados aqui."
+serverStorage = "Armazenamento de ficheiros do servidor"
+title = "Sempre permitido"
+watchedFolder = "Pasta vigiada da pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Adicionar"
+empty = "Nenhuma pasta permitida. As origens e saídas de pastas estão atualmente desativadas."
+hint = "Introduza caminhos absolutos, por exemplo /data/inbox."
+label = "Raízes de pastas permitidas"
+placeholder = "/data/inbox"
+remove = "Remover raiz da pasta"
+
 [admin.settings.general]
 description = "Configurar definições de aplicação a nível do sistema, incluindo marca e comportamento predefinido."
 system = "Sistema"
@@ -1842,6 +2017,15 @@ export = "Exportar"
 accessDenied = "Acesso negado"
 insufficientPermissions = "Não tem permissão para executar esta ação."
 
+[auth.callback]
+completing = "A concluir autenticação"
+invalidToken = "O início de sessão OAuth falhou - token inválido."
+missingToken = "O início de sessão OAuth falhou - nenhum token recebido."
+oauthFailed = "O início de sessão OAuth falhou. Tente novamente."
+pleaseWait = "Aguarde enquanto concluímos o seu início de sessão."
+signedOut = "A sua sessão foi terminada. Inicie sessão novamente."
+windowMayClose = "Pode fechar esta janela quando terminar."
+
 [auth.displayName]
 guest = "Convidado"
 user = "Utilizador"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Protege documentos PDF removendo conteúdo potencialmente
 description = "Esta ferramenta renomeia automaticamente ficheiros PDF com base no seu conteúdo. Analisa o documento para encontrar o título mais adequado a partir do texto."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Rotação automática"
+tags = "rotação automática,corrigir orientação,de cabeça para baixo,na horizontal,endireitar,orientar,detetar orientação,corrigir rotação,orientação automática,digitalizado,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Limiar de confiança"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Apenas OCR"
+text = "Apenas texto"
+title = "Método de deteção"
+
+[autoRotate.error]
+failed = "Ocorreu um erro ao rodar automaticamente o PDF."
+
+[autoRotate.inferUndetected]
+title = "Rodar páginas com baixa confiança para corresponder"
+
+[autoRotate.report]
+applied = "{{degrees}}° no sentido horário"
+confidenceValue = "Confiança {{value}}"
+noChange = "Sem alteração"
+pageLabel = "Página {{number}}"
+summary = "{{rotated}} de {{total}} páginas rodadas, {{unchanged}} deixadas como estão"
+title = "Relatório de deteção"
+
+[autoRotate.report.method]
+inferred = "Correspondente"
+none = "Ignorado"
+osd = "OCR"
+text = "Texto"
+
+[autoRotate.report.note]
+belowThreshold = "Abaixo do limiar"
+blankPage = "A página está em branco"
+inferredFromDocument = "Igual às outras páginas"
+noDominantDirection = "Direções de texto mistas"
+osdFailed = "Não foi encontrado texto legível"
+osdNoVerdict = "Não foi possível determinar a orientação"
+tesseractUnavailable = "OCR não instalado"
+tooFewGlyphs = "Texto insuficiente"
+
+[autoRotate.results]
+title = "Resultados da rotação automática"
+
+[autoRotate.settings]
+title = "Definições"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Quão certa a verificação tem de estar antes de uma página ser rodada. Baixe para rodar mais páginas; aumente para deixar mais páginas intactas."
+title = "Limiar de confiança"
+
+[autoRotate.tooltip.description]
+text = "Determina a orientação correta de cada página e roda-a para a posição certa. As páginas que já estão direitas não são alteradas."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto lê primeiro o texto da página e depois analisa a página como imagem se isso não for suficiente. Apenas texto ignora a verificação de imagem, que é a opção mais rápida para documentos que nunca foram digitalizados. Apenas OCR trata todas as páginas como imagem."
+title = "Método de deteção"
+
+[autoRotate.tooltip.header]
+title = "Rotação automática"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Páginas em branco ou quase em branco não podem ser verificadas isoladamente. Quando todas as páginas que puderam ser lidas precisam da mesma rotação, estas páginas são rodadas para corresponder."
+title = "Rodar páginas com baixa confiança para corresponder"
+
 [autoSizeSplitPDF]
 tags = "pdf,dividir,documento,organização"
 
@@ -2189,33 +2440,6 @@ keywords = "Palavras-chave: odd, even"
 numbers = "Números/intervalos: 5, 10-20"
 progressions = "Progressões: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipos de certificado"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Gerido pelos administradores do sistema"
-bullet2 = "Partilhado entre utilizadores autorizados"
-bullet3 = "Representa a identidade da empresa, não do indivíduo"
-bullet4 = "Ideal para: documentos oficiais, assinaturas de equipa"
-description = "Um certificado partilhado fornecido pela sua organização. Usado para autoridade de assinatura a nível da empresa."
-title = "Certificado da Organização"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Gerado automaticamente na primeira utilização"
-bullet2 = "Associado à sua conta de utilizador"
-bullet3 = "Não pode ser partilhado com outros utilizadores"
-bullet4 = "Ideal para: documentos pessoais, responsabilidade individual"
-description = "Um certificado gerado automaticamente, exclusivo da sua conta de utilizador. Adequado para assinaturas individuais."
-title = "Certificado Pessoal"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Requer ficheiro P12/PFX e palavra-passe"
-bullet2 = "Pode ser emitido por Autoridades Certificadoras externas"
-bullet3 = "Maior nível de confiança para documentos legais"
-bullet4 = "Ideal para: contratos legalmente vinculativos, validação externa"
-description = "Utilize o seu próprio ficheiro de certificado PKCS#12. Fornece controlo total sobre as propriedades do certificado."
-title = "Carregar P12 personalizado"
-
 [certSign]
 awaitingSignatures = "A aguardar assinaturas"
 chooseCertificate = "Escolher ficheiro de certificado"
@@ -2542,34 +2766,6 @@ server = "Servidor"
 stepTitle = "Origem do certificado"
 upload = "Carregar"
 
-[certSign.tooltip.header]
-title = "Sobre a Gestão de Assinaturas"
-
-[certSign.tooltip.overview]
-bullet1 = "Verificar assinaturas existentes e a sua validade"
-bullet2 = "Ver detalhes sobre signatários e certificados"
-bullet3 = "Adicionar novas assinaturas digitais para proteger os seus documentos"
-bullet4 = "Vários ficheiros suportados com navegação simples"
-text = "Esta ferramenta permite verificar se os seus PDFs estão assinados digitalmente e adicionar novas assinaturas digitais. As assinaturas digitais provam quem criou ou aprovou um documento e mostram se foi alterado desde a assinatura."
-title = "O que pode esta ferramenta fazer?"
-
-[certSign.tooltip.signing]
-bullet1 = "Suporta formatos de certificado PEM, PKCS12, JKS e do servidor"
-bullet2 = "Opção para mostrar ou ocultar a assinatura no PDF"
-bullet3 = "Adicionar motivo, localização e nome do signatário"
-bullet4 = "Escolher em que página colocar assinaturas visíveis"
-bullet5 = "Usar o certificado do servidor para a opção simples 'Assinar com Stirling-PDF'"
-text = "Para assinar um PDF, precisa de um certificado digital (como PEM, PKCS12 ou JKS). Pode optar por tornar a assinatura visível no documento ou mantê-la invisível apenas para efeitos de segurança."
-title = "Adicionar assinaturas"
-
-[certSign.tooltip.validation]
-bullet1 = "Mostra se as assinaturas são válidas ou inválidas"
-bullet2 = "Mostra informações do signatário e data de assinatura"
-bullet3 = "Verifica se o documento foi modificado após a assinatura"
-bullet4 = "Pode usar certificados personalizados para verificação"
-text = "Ao verificar assinaturas, a ferramenta informa se são válidas, quem assinou o documento, quando foi assinado e se o documento foi alterado desde a assinatura."
-title = "Verificação de Assinaturas"
-
 [changeCreds]
 changeUsername = "Atualize o seu nome de utilizador. Será terminada a sua sessão após a atualização."
 credsUpdated = "Conta atualizada"
@@ -2824,6 +3020,7 @@ next = "Seguinte"
 preview = "Pré-visualizar"
 previous = "Anterior"
 refresh = "Atualizar"
+remaining = "Restantes"
 retry = "Tentar novamente"
 save = "Guardar"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Monitorização avançada"
-allInOneWorkspace = "Workspace PDF tudo-em-um (visualizador, ferramentas e agente)"
-apiSandbox = "Sandbox de API"
-dedicatedSupportSlas = "Suporte dedicado e SLAs"
-fasterThroughput = "Débito 10x mais rápido"
-fullyPrivateFiles = "Ficheiros totalmente privados"
-largeFileProcessing = "Processamento de ficheiros grandes"
-orgWideAccess = "Controlos de acesso para toda a organização"
-premiumAiModels = "Modelos de IA premium"
-prioritySupport = "Suporte prioritário"
-privateDocCloud = "Nuvem de Documentos Privada"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Acesso seguro à API"
-standardThroughput = "Débito padrão"
-unlimitedApiAccess = "Acesso ilimitado à API"
-unlimitedSeats = "Lugares ilimitados"
-
 [crop]
 autoCrop = "Recortar automaticamente espaços em branco"
 noFileSelected = "Selecione um ficheiro PDF para começar a recortar"
@@ -3346,6 +3525,7 @@ message = "Falha ao definir a aplicação de PDF predefinida"
 title = "Erro"
 
 [defaultApp.prompt]
+dontRemind = "Não voltar a lembrar-me"
 message = "Torne o Stirling PDF a sua aplicação predefinida para abrir ficheiros PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Personalizar grupos"
 dropHint = "Abra ficheiros para começar"
 dropToAdd = "Drop files to add"
 expand = "Expandir barra lateral"
-files = "Ficheiros"
 googleDrive = "Google Drive"
 googleDriveDisabled = "O Google Drive não está configurado"
 leaveMyFiles = "Sair de Os meus ficheiros"
+library = "Biblioteca de PDF"
 myFiles = "Os meus ficheiros"
 noFiles = "Ainda sem ficheiros"
 openFileManager = "Abrir gestor de ficheiros"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Adicionar"
-addLabel = "Adicionar uma etiqueta…"
-categoryIconAria = "Escolha um ícone para {{name}}"
-createCategory = "Criar categoria"
-delete = "Eliminar categoria"
 done = "Concluído"
-hide = "Ocultar categoria"
-newCategory = "Novo nome da categoria…"
-removeLabel = "Remover {{name}}"
-rename = "Mudar nome"
 reset = "Repor predefinições"
-search = "Pesquisar etiquetas…"
-show = "Mostrar categoria"
 subtitle = "Agrupe os seus ficheiros em categorias principais. Adicione etiquetas existentes ou novas a uma categoria, mude o nome ou crie a sua própria. Ficheiros que não estejam em nenhuma das suas categorias aparecem em “Outro”."
 title = "Categorias da barra lateral"
 
@@ -3808,6 +3977,7 @@ refresh = "Atualizar do servidor"
 remove = "Eliminar"
 removeVersion = "Remover esta versão"
 rename = "Renomear"
+renamed = "Renomeado"
 renameFolder = "Renomear pasta"
 resizeFolderTree = "Redimensionar árvore de pastas (teclas de seta, Shift para passos maiores; duplo clique para ajustar automaticamente)"
 save = "Guardar"
@@ -3910,9 +4080,7 @@ count = "Ficheiros"
 folder = "Pasta"
 labels = "Etiquetas"
 modified = "Modificado"
-name = "Nome"
 size = "Tamanho"
-toolHistoryAtVersion = "Cadeia de ferramentas cumulativa"
 totalSize = "Tamanho total"
 type = "Tipo"
 versionHistory = "Percurso da versão"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Tudo guardado"
+extractCsvError = "Falha ao extrair CSV"
+extractXlsxError = "Falha ao extrair XLSX"
 flattenAfterFilling = "Achatar após o preenchimento"
+requiredAbbreviation = "obrig."
+requiredFieldsError = "Preencha todos os campos obrigatórios"
 rescanFields = "Reanalisar campos"
 rescanFormFields = "Reanalisar campos do formulário"
 save = "Guardar"
+saveShortcut = "Ctrl+S para guardar"
+unsavedChanges = "Alterações não guardadas"
 
 [formFill.sidebar]
 close = "Fechar barra lateral"
@@ -4309,6 +4484,11 @@ desc = "Renomeia automaticamente um ficheiro PDF com base no cabeçalho detetado
 tags = "deteção automática,baseado em cabeçalho,organizar,renomear"
 title = "Auto-renomear PDF"
 
+[home.autoRotate]
+desc = "Detete a orientação de cada página e rode-a automaticamente para ficar direita."
+tags = "rotação automática,corrigir orientação,de cabeça para baixo,na horizontal,endireitar,orientar,detetar orientação,corrigir rotação,orientação automática,digitalizado,OSD"
+title = "Rotação automática"
+
 [home.autoSizeSplitPDF]
 tags = "auto,dividir,tamanho"
 title = "Auto-dividir por tamanho/n.º"
@@ -4608,13 +4788,13 @@ hint = "Carregue um ficheiro de imagem PNG, JPG, SVG ou outro para colocar no PD
 label = "Carregar imagem"
 placeholder = "Selecionar ficheiro de imagem"
 
-[imageToPdf]
-tags = "conversão,img,jpg,imagem,foto"
-
 [imageToPDF]
 header = "Imagem para PDF"
 title = "Imagem para PDF"
 
+[imageToPdf]
+tags = "conversão,img,jpg,imagem,foto"
+
 [infoBanner]
 dismiss = "Ignorar"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Foi convidado!"
 
 [landing]
 addFiles = "Adicionar ficheiros"
-heroSubtitle = "Largue ou adicione um PDF existente para começar."
 mobileUpload = "Carregar do telemóvel"
 openFromComputer = "Abrir do computador"
 uploadFromComputer = "Carregar do computador"
-workbenchEmptyStateHero = "Largue um PDF em qualquer lugar"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Início de sessão"
 magicLinkSent = "Ligação mágica enviada para {{email}}! Verifique o seu email e clique na ligação para iniciar sessão."
 mfaCode = "Código de autenticação"
 mfaRequired = "Código de dois fatores obrigatório"
+noAccount = "Não tem uma conta?"
 or = "Ou"
 password = "Palavra-passe"
 passwordChangedSuccess = "Palavra-passe alterada com sucesso! Inicie sessão com a sua nova palavra-passe."
@@ -4715,26 +4894,10 @@ signInWith = "Iniciar sessão com"
 title = "Iniciar sessão"
 unexpectedError = "Erro inesperado: {{message}}"
 updatePassword = "Atualizar palavra-passe"
-useEmailInstead = "Iniciar sessão com email"
 useMagicLink = "Usar ligação mágica"
 username = "Nome de utilizador"
 youAreLoggedIn = "Sessão iniciada!"
 
-[login.slides.edit]
-alt = "Editar PDFs"
-subtitle = "Com mais de uma dúzia de ferramentas para o ajudar a ocultar, assinar, ler e manipular PDFs, encontrará certamente o que procura."
-title = "Edite PDFs para mostrar/proteger a informação que pretende"
-
-[login.slides.overview]
-alt = "Visão geral do Stirling PDF"
-subtitle = "Uma suite cloud com foco na privacidade para PDFs que permite converter, assinar, ocultar e gerir documentos, juntamente com mais de 50 outras ferramentas poderosas."
-title = "A sua solução tudo-em-um para todas as suas necessidades de PDF."
-
-[login.slides.secure]
-alt = "Proteger PDFs"
-subtitle = "Adicione palavras-passe, oculte conteúdo e gere certificados com facilidade."
-title = "Proteja informações sensíveis nos seus PDFs"
-
 [margin]
 large = "Grande"
 medium = "Médio"
@@ -4976,6 +5139,7 @@ pinButton = "Pode usar o botão <strong>Afixar</strong> se preferir que os seus
 results = "Após a ferramenta terminar, o passo de <strong>Revisão</strong> mostrará uma pré-visualização dos resultados neste painel e permitirá desfazer a operação ou transferir o ficheiro."
 runButton = "Depois de configurar a ferramenta, este botão permite executar a ferramenta em todos os PDFs selecionados."
 selectCropTool = "Vamos selecionar a ferramenta <strong>Cortar</strong> para demonstrar como usar uma das ferramentas."
+stepOf = "Passo {{current}} de {{total}}"
 toolInterface = "Esta é a interface da ferramenta <strong>Cortar</strong>. Como pode ver, não há muito porque ainda não adicionámos ficheiros PDF com que trabalhar."
 workbench = "Esta é a <strong>Área de trabalho</strong> - a área principal onde visualiza e edita os seus PDFs."
 wrapUp = "Está tudo pronto! Aprendeu as principais áreas da aplicação e como usá-las. Clique no botão <strong>Ajuda</strong> sempre que quiser para ver novamente esta visita."
@@ -4988,6 +5152,26 @@ showMeAround = "Mostre-me"
 skipForNow = "Saltar por agora"
 skipTheTour = "Saltar a visita guiada"
 
+[onboarding.checklist]
+dismiss = "Dispensar"
+title = "Configurar o Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Execute o Stirling nativamente no seu computador"
+title = "Transferir o Stirling para Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Colabore com a sua equipa"
+title = "Convidar membros da equipa"
+
+[onboarding.checklist.shareAnalytics]
+description = "Ajude a melhorar o Stirling"
+title = "Partilhar dados de utilização anónimos"
+
+[onboarding.checklist.takeTour]
+description = "Veja como o Stirling funciona numa visita guiada rápida"
+title = "Fazer a visita guiada"
+
 [onboarding.desktopInstall]
 body = "O Stirling funciona melhor como aplicação de desktop. Pode usá-lo offline, aceder a documentos mais rapidamente e fazer edições localmente no seu computador."
 selectOs = "Selecione o sistema operativo"
@@ -4996,7 +5180,21 @@ titleWithOs = "Transferir para {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Código de autenticação"
+description = "Proteja a sua conta associando uma aplicação de autenticação. Digitalize o código QR ou introduza a chave de configuração e depois confirme o código de 6 dígitos para terminar."
+enable = "Ativar MFA"
+enableError = "Não foi possível ativar a autenticação de dois fatores. Verifique o código e tente novamente."
+enterCode = "Introduza o código de 6 dígitos da sua aplicação."
+enterCodeError = "Introduza o código de autenticação para continuar."
+logout = "Terminar sessão"
+openAuthenticator = "Abra o Google Authenticator, Authy ou 1Password."
 qrCodeLoading = "A gerar o seu código QR…"
+regenerateQrCode = "Regenerar código QR"
+scanQrCode = "Digitalize o código QR ou introduza a chave de configuração abaixo."
+setupError = "Não foi possível iniciar a configuração de dois fatores. Tente novamente."
+setupKey = "Chave de configuração (entrada manual)"
+stepByStep = "Passo a passo"
+success = "A MFA foi ativada. Pode agora continuar."
+title = "Configuração de autenticação multifator"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Depois de ativar o modo de login, pode gerir utilizadores, configurar definições e monitorizar a saúde do servidor. As primeiras <strong>{{freeTierLimit}}</strong> pessoas no seu servidor podem usar o Stirling gratuitamente."
@@ -5005,6 +5203,11 @@ adminTitle = "Visão geral do administrador"
 userBody = "Convide colegas de equipa, atribua funções e mantenha os documentos organizados num espaço de trabalho seguro. Ative o modo de login quando estiver pronto para crescer além do uso a solo."
 userTitle = "Visão geral do plano"
 
+[onboarding.processorIntro]
+body = "O Stirling agora executa <strong>Políticas</strong> — regras automatizadas que classificam, protegem e processam todos os documentos quando chegam. Configure-as e monitorize as execuções no <strong>Processor</strong>."
+cta = "Conheça o Processor"
+title = "Conheça o Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Ano pré-pago"
+
+[payg.prepaid.banner]
+exhausted = "A sua capacidade pré-paga foi esgotada; a faturação medida foi retomada. Recarregue para manter o desconto."
+expiring_one = "O seu ano pré-pago termina dentro de {{count}} dia. A capacidade não utilizada expira — recarregue para iniciar um novo ano."
+expiring_other = "O seu ano pré-pago termina dentro de {{count}} dias. A capacidade não utilizada expira — recarregue para iniciar um novo ano."
+low = "Está com {{pct}}% da sua capacidade pré-paga restante. Recarregue a qualquer momento para manter o processamento sem interrupções."
+
+[payg.prepaid.card]
+subtitle = "Usada antes da faturação medida e fora do seu limite de gastos."
+title = "Capacidade pré-paga"
+
+[payg.prepaid.meter]
+capSuffix = "de {{total}} créditos pré-pagos"
+expires = "Expira em {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Esgotada"
+healthy = "Bastante restante"
+low = "A ficar baixa"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Cole a chave de licença do seu e-mail"
 success = "Licença ativada!"
 successMessage = "A sua licença foi ativada com sucesso. Pode fechar esta janela."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "aplicada"
-enforcing = "A aplicar..."
-failed = "A aplicação falhou"
 outputsUnavailable = "Os resultados da política já não estão disponíveis para transferência."
 partialOutputsUnavailable = "Alguns resultados da política já não estão disponíveis para transferência."
-retrying = "Ocupado, a tentar novamente..."
 runNotFound = "A execução da aplicação já não pôde ser encontrada."
-step = "passo {{current}}/{{total}}"
 timedOut = "A aplicação excedeu o tempo limite antes de a execução terminar."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Fechar"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "A aplicar {{names}}"
 applyingProgress = "A aplicar {{names}} ({{done}} de {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} de {{total}} ficheiro(s) não puderam ser processado
 failureTitle = "Exportado sem aplicação completa"
 printPolicyAppliedBody = "Este PDF foi atualizado para cumprir uma política. Reveja as alterações e imprima novamente."
 printPolicyAppliedTitle = "Política aplicada antes da impressão"
-queued = "+{{count}} na fila"
 successTitle = "{{names}} aplicadas"
 summaryMore = "{{first}}, {{second}} e mais {{more}}"
 summaryTwo = "{{first}} e {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "A aplicar antes de converter"
-default = "A aplicar"
-export = "A aplicar antes de exportar"
-input = "A aplicar ao importar"
-print = "A aplicar antes de imprimir"
-
-[policies.field]
-accessLog = "Registo de acesso"
-archiveAfter = "Arquivar após"
-auditTrail = "Histórico de auditoria"
-belowThreshold = "Abaixo do limite"
-destination = "Destino"
-frameworks = "Frameworks"
-immutableHold = "Retenção imutável"
-keepFor = "Manter durante"
-minConfidence = "Confiança mín."
-notify = "Notificar no encaminhamento"
-onViolation = "Quando não conforme"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Adicionar"
-addPlaceholder = "Adicionar uma etiqueta…"
-customNote = "Personalizado para a sua equipa."
-defaultNote = "A utilizar a predefinição incorporada, partilhada com a sua equipa."
-duplicate = "\"{{name}}\" já existe."
-edit = "Editar etiquetas"
-empty = "Ainda não existem etiquetas."
-export = "Exportar JSON"
-iconAria = "Escolha um ícone para {{name}}"
-import = "Importar JSON"
-importError = "Não foi possível importar esse ficheiro."
-managedNote = "As etiquetas da equipa são geridas pelo líder da sua equipa."
-modalSubtitle = "Partilhado com toda a sua equipa. O classificador escolhe as etiquetas que se aplicam a cada documento."
-modalTitle = "Etiquetas de classificação"
-pickIcon = "Utilizar ícone de {{label}}"
-removeAria = "Remover {{name}}"
-resetToDefault = "Repor predefinição"
-saveForTeam = "Guardar para a equipa"
-saving = "A guardar…"
-sectionLabel = "Etiquetas de classificação"
-startFromScratch = "Começar do zero"
-teamCount = "etiquetas da equipa"
-tooLong = "As etiquetas podem ter, no máximo, {{max}} caracteres."
-ungrouped = "Sem grupo"
-view = "Ver etiquetas"
+categoryCount = "categorias"
+hideCategory = "Ocultar categoria"
+labelCount = "etiquetas"
+sharedNote = "Estas etiquetas são integradas e partilhadas por toda a sua equipa."
+showCategory = "Mostrar categoria"
 
 [policies.pii]
 account = "Números de conta (com rótulo)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Números de encaminhamento dos EUA (ABA)"
 ssn = "Números de Segurança Social"
 
-[policies.settings]
-noneExport = "Atualmente, nenhuma política é executada na exportação."
-noneUpload = "Atualmente, nenhuma política é executada no carregamento."
-onExport = "Na exportação"
-onUpload = "No carregamento"
-reorderHandle = "Arraste para reordenar"
-runOrderDesc = "Quando mais do que uma política é executada no mesmo acionador, são executadas por esta ordem — cada uma sobre a saída da política anterior. Arraste para reordenar."
-title = "Definições de políticas"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opções de políticas"
-policySettings = "Definições de políticas"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Tentar novamente políticas falhadas ({{count}})"
-rowProgress = "{{completed}} de {{total}} ficheiros processados"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "O que é uma política?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Localiza e oculta automaticamente informações sensíveis — como números de Segurança Social e de cartões — para que não possam ser lidas no documento."
-sanitize = "Remove JavaScript oculto do ficheiro, para que nada seja executado automaticamente quando alguém o abrir."
-watermark = "Aplica uma marca visível (p. ex. \"Confidencial\") em todas as páginas."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Fechar"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} em aplicação..."
 badgeRan = "A política {{name}} foi executada neste ficheiro"
+badgeRunning = "{{name}} em execução..."
 blockingAction = "{{action}} bloqueada enquanto a política é aplicada, aguarde..."
 dismiss = "Dispensar sobreposição"
 enforcingTitle = "A aplicar política..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Ver ficheiro (política ainda em aplicação)"
 [policyOption]
 autoRedactPhi = "Ocultar automaticamente PHI"
 blockExport = "Bloquear exportação"
+ccpa = "CCPA"
 contracts = "Contratos"
 documents = "Documentos"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plano Editor"
 subscribed = "Plano Processor"
 unlinked = "Não associado"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Inicializar a partir de documento"
-sectionsAriaLabel = "Secções do criador de agentes"
-selectorAriaLabel = "Agentes"
-subtitle = "Conceba, teste e disponibilize os agentes de IA que classificam, extraem e encaminham os seus documentos. Defina cenários, limite o acesso a ferramentas, execute um conjunto dourado e publique uma versão."
-title = "Criador de agentes"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Cancelar"
-dropzoneText = "Escolha um documento de exemplo (PDF ou imagem)"
-lead = "Largue um documento de exemplo e iremos propor cenários e um esquema de extração que pode refinar. Nada é publicado até o rever."
-submit = "Inicializar agente"
-subtitle = "Iniciar um novo agente a partir de um ficheiro representativo"
-title = "Inicializar a partir de um documento"
-
-[portal.agentBuilder.empty]
-description = "Inicialize um agente a partir de um documento de exemplo para iniciar os respetivos cenários e esquema de extração; depois refine e publique."
-title = "Ainda não existem agentes"
-
-[portal.agentBuilder.evals]
-casesPassing = "Casos aprovados"
-columnCase = "Caso de avaliação"
-columnLatency = "Latência"
-columnResult = "Resultado"
-fail = "falha"
-goldenSetPassRate = "Taxa de aprovação do conjunto dourado"
-latencyMs = "{{ms}} ms"
-notRun = "não executado"
-pass = "aprovado"
-passRate = "Taxa de aprovação"
-runEvals = "Executar avaliações"
-
-[portal.agentBuilder.evals.empty]
-description = "As avaliações transformam os seus cenários num conjunto dourado repetível. Atualize para registar a taxa de aprovação ao longo do tempo e condicionar publicações com base nela."
-title = "Ainda não existe conjunto dourado"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "entre conjuntos dourados"
-activeAgents = "Agentes ativos"
-avgPassRate = "Taxa média de aprovação das avaliações"
-fleetWide = "em toda a frota"
-latestPublished = "Última publicada"
-scenarios = "Cenários"
-testCases = "casos de teste"
-totalDescription_one = "{{count}} no total"
-totalDescription_other = "{{count}} no total"
-
-[portal.agentBuilder.scenarios]
-add = "Adicionar"
-addScenario = "Adicionar cenário"
-enable = "Ativar"
-expectationLabel = "Comportamento esperado"
-expectationPlaceholder = "O que o agente deve fazer"
-inEval = "em avaliação"
-mute = "Silenciar"
-muted = "silenciado"
-nameLabel = "Nome"
-namePlaceholder = "ex.: Escalonamento de conformidade"
-
-[portal.agentBuilder.tabs]
-evals = "Avaliações"
-scenarios = "Cenários"
-tools = "Ferramentas"
-versions = "Versões"
-
-[portal.agentBuilder.tools]
-broadAccess = "Acesso amplo"
-deniedHint = "As ferramentas selecionadas estão bloqueadas. Tudo o resto permanece invocável."
-deniedTools = "Ferramentas negadas"
-governanceGate = "A governação de ferramentas está disponível no plano Enterprise."
-restricted = "Restrito"
-restrictedAccess = "Acesso restrito a ferramentas"
-restrictedDescription = "Permitir todas as ferramentas exceto as que negar abaixo."
-
-[portal.agentBuilder.versions]
-current = "atual"
-historyGate = "O histórico completo de versões e a reposição estão disponíveis no plano Enterprise."
-publish = "Publicar"
-rollBack = "Reverter"
-
 [portal.assistant]
 close = "Fechar assistente"
 error = "Não foi possível contactar o assistente."
@@ -6365,9 +6346,21 @@ typing = "A escrever"
 loading = "A carregar"
 redirectingToEditor = "A redirecionar para o editor..."
 
+[portal.billing.activation]
+maybeLater = "Talvez mais tarde"
+title = "Ativar o Processor"
+
+[portal.billing.activation.payg]
+sub = "Defina um limite mensal. Pague pelo que executar."
+title = "Pagar conforme utiliza"
+
+[portal.billing.activation.prepay]
+badge = "2 meses grátis"
+sub = "Uma fatura, cartão ou transferência bancária."
+title = "Pré-pagar um ano"
+
 [portal.billing.checkout]
 noClientSecret = "A função Edge não devolveu client_secret."
-subtitle = "Adicione um cartão para continuar além da sua oferta gratuita do plano Editor. O Stripe trata do resto."
 title = "Ativar o plano Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "O pagamento foi efetuado com sucesso, mas a ativação está a demorar u
 close = "Fechar"
 title = "Quase concluído"
 
+[portal.billing.checkout.cap]
+amountAria = "Limite mensal de gastos"
+back = "Voltar"
+continue = "Continuar para pagamento"
+error = "Não foi possível definir o seu limite de gastos"
+finePrint = "As faturas são emitidas mensalmente. Cancele a qualquer momento."
+noLimit = "Sem limite"
+note = "Nunca será faturado para além do seu limite. O processamento apenas fica em pausa."
+perMonth = "/ mês"
+title = "Defina o seu limite de gastos"
+
+[portal.billing.checkout.card]
+fields = "Número do cartão · MM / AA · CVC · ZIP"
+label = "Dados do cartão"
+note = "Dados do cartão recolhidos pela Stripe. O Stirling nunca armazena PAN ou CVC."
+
 [portal.billing.checkout.error]
 title = "Não foi possível iniciar o checkout"
 
@@ -6383,10 +6392,9 @@ body = "O pagamento foi efetuado. Estamos a ativar o processamento medido nas su
 hint = "Mantenha esta janela aberta."
 title = "A ativar o seu plano Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "no env do portal para ativar o checkout na aplicação."
-bodyBefore = "Defina"
-title = "Stripe não configurado"
+[portal.billing.checkout.pay]
+limit = "Limite mensal de gastos {{amount}}/mês. O processamento fica em pausa no limite."
+limitNoCap = "Sem limite de gastos. O processamento não ficará em pausa. As faturas são emitidas mensalmente."
 
 [portal.billing.enterpriseUpsell]
 cta = "Criar o seu orçamento Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Plano atual"
 freeForever = "Gratuito para sempre"
 noTeamResolved = "Ainda não existe uma equipa definida na sua carteira — atualize e tente novamente."
 ownerOnly = "Apenas o proprietário da equipa pode ativar o plano Processor."
+payInvoice = "Pagar fatura para concluir"
 planName = "Editor"
 ssoIncluded = "SSO incluído"
 switchOnProcessor = "Ativar o Processor →"
 unlimitedUsers = "Utilizadores ilimitados"
+viewQuote = "Ver orçamento"
 
 [portal.billing.invoices]
 columnAmount = "Valor"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Pedidos API diretos"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automações e pipelines"
 segmentAutomationLabel = "Automação"
+sizeMultiplier = "{{formatted}} PDFs usaram um multiplicador de tamanho"
+summary = "{{unique}} únicos · {{units}} unidades de medição · média {{avg}} por PDF"
+summaryNoRate = "{{unique}} únicos · {{units}} unidades de medição"
 unit = "PDF medidos"
+unitsPending_one = "{{units}} unidade de medição pendente de sincronização a partir de instâncias ligadas"
+unitsPending_other = "{{units}} unidades de medição pendentes de sincronização a partir de instâncias ligadas"
+
+[portal.billing.prepaid]
+capSuffix = "de {{total}} créditos pré-pagos"
+expires = "Expira em {{date}}"
+eyebrow = "Capacidade pré-paga"
+note = "Usada antes da faturação medida e fora do seu limite de gastos."
+topUp = "Recarregar"
+
+[portal.billing.prepaid.buy]
+back = "Voltar"
+calcTitle = "Calcule o seu pagamento anual"
+cancel = "Cancelar"
+cancelPurchase = "Cancelar compra"
+close = "Fechar"
+continueToPayment = "Continuar para pagamento"
+finalise = "Finalizar"
+invoiceErrorTitle = "Não foi possível gerar a fatura"
+loadingTitle = "A carregar o seu orçamento"
+payTitle = "Pague o seu ano"
+step = "Passo {{current}} de {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Alterar"
+deployRow = "Implementação"
+done = "Concluído"
+enterpriseHint = "Isto é escala empresarial. Com este volume, as tarifas empresariais superam qualquer desconto self-service. Preço fixo, termos e orçamento em minutos."
+governanceRow = "Governação"
+governanceValue = "{{label}} · {{count}} políticas"
+handlesLabel = "O seu Processor"
+handlesValue = "processa {{volume}} créditos / mês"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} políticas"
+poolCaption = "Um conjunto de {{credits}} créditos para o ano. Meses pesados recorrem aos meses leves."
+priceLabel = "O seu ano · 12 meses pelo preço de 10"
+rateUnknown = "Mostraremos o preço exato no checkout."
+savings = "Poupa {{amount}} · 2 meses grátis."
+sizingRow = "Dimensionamento"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Total de utilizadores"
+
+[portal.billing.prepaid.consent]
+label = "Compreendo que, quando a minha capacidade pré-paga for esgotada ou expirar após 12 meses, o processamento continua automaticamente à tarifa medida padrão de pagamento conforme utilização (até ao meu limite de gastos), salvo se eu cancelar, e que posso cancelar a qualquer momento no portal de faturação."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Gerido pelo Stirling. Em funcionamento em minutos."
+cloudValue = "Stirling Cloud · Gerido"
+selfhost = "Autoalojado"
+selfhostDesc = "Executado em infraestrutura privada. Mesma tarifa."
+selfhostValue = "Autoalojado · Infraestrutura privada"
+
+[portal.billing.prepaid.offer]
+cta = "Rever oferta"
+subtitle = "Pré-pague um ano de processamento de PDF e obtenha dois meses grátis, usados antes da faturação medida, fora do seu limite de gastos."
+title = "Obtenha 12 meses pelo preço de 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Nome do titular da conta"
+accountNamePlaceholder = "por exemplo, Jane Smith"
+companyName = "Nome da empresa (opcional)"
+companyNamePlaceholder = "por exemplo, Acme Inc."
+downloadInvoice = "Transferir fatura"
+payOnline = "Pagar online"
+poNumber = "N.º de encomenda (opcional)"
+poNumberPlaceholder = "por exemplo, PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avançado"
+advancedDesc = "As pipelines impulsionam a maior parte do seu processamento."
+none = "Nenhum"
+noneDesc = "Ainda não está a executar pipelines. Ative-as a qualquer momento."
+standard = "Padrão"
+standardDesc = "Algumas pipelines reprocessam PDFs recebidos."
+
+[portal.billing.prepaid.posture]
+essentials = "Essenciais"
+essentialsDesc = "Classificação, a predefinição, mais Partilha"
+governed = "Governado"
+governedDesc = "Adiciona Segurança e Encaminhamento"
+regulated = "Regulado"
+regulatedDesc = "Todas as categorias, incl. Conformidade, Retenção, Ingestão"
+
+[portal.billing.prepaid.review]
+download = "Transferir orçamento (PDF)"
+downloading = "A preparar…"
+share = "partilhar para aprovação"
+
+[portal.billing.prepaid.size]
+compact = "Compacto"
+compactDesc = "Ficheiros abaixo de 25 MB, sem custos de dados"
+heavy = "Pesado"
+heavyDesc = "Digitalizados ou com muitas imagens, frequentemente 50 MB+"
+standard = "Padrão"
+standardDesc = "Maioritariamente pequenos, algumas digitalizações acima de 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Esgotada"
+healthy = "Bastante restante"
+low = "A ficar baixa"
 
 [portal.billing.spendLimit]
 adjustLimit = "Ajustar limite"
@@ -6494,6 +6608,8 @@ label = "Previsto exceder."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Gastos este mês"
+freeRemaining_one = "{{formatted}} PDF gratuito restante"
+freeRemaining_other = "{{formatted}} PDFs gratuitos restantes"
 processed_one = "{{formattedCount}} PDF processado."
 processed_other = "{{formattedCount}} PDF processados."
 processedWithRate_one = "{{formattedCount}} PDF processado, a {{rate}} cada."
@@ -6534,6 +6650,350 @@ signature = "assinatura"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nova ligação"
+createTitleFor = "Ligar {{name}}"
+delete = "Eliminar"
+edit = "Editar"
+editTitle = "Editar ligação"
+unsupportedType = "Este tipo de ligação não pode ser editado aqui."
+
+[portal.connections.categories.advanced]
+description = "Para um serviço que ainda não suportamos."
+label = "Avançado"
+
+[portal.connections.categories.audit]
+description = "Registe o que aconteceu a um documento, onde os seus auditores já consultam."
+label = "Registo de auditoria e conformidade"
+
+[portal.connections.categories.notify]
+description = "Informe outro sistema de que algo aconteceu."
+label = "Notificação e fluxo de trabalho"
+
+[portal.connections.categories.security]
+description = "Analise ou etiquete um documento antes de este avançar."
+label = "Segurança e classificação"
+
+[portal.connections.categories.signing]
+description = "Envie um documento para assinatura ou autenticação notarial."
+label = "Assinatura eletrónica e autenticação notarial"
+
+[portal.connections.categories.storage]
+description = "Onde os documentos processados ficam - um bucket, uma drive, um ticket ou uma página."
+label = "Ficheiro e anexar"
+
+[portal.connections.commonFields.accessToken]
+helperText = "O Stirling armazena isto encriptado e nunca volta a mostrá-lo."
+label = "Token de acesso"
+
+[portal.connections.commonFields.apiKey]
+label = "Chave API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Os passos que usam esta ligação só podem chamar caminhos sob este URL, nunca outro host."
+label = "URL do servidor"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Palavra-passe"
+
+[portal.connections.commonFields.port]
+label = "Porta"
+
+[portal.connections.commonFields.username]
+label = "Nome de utilizador"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Cole o URL que o serviço lhe forneceu. Apenas caminhos sob ele podem ser chamados."
+label = "URL do Webhook"
+
+[portal.connections.fields]
+name = "Nome da ligação"
+namePlaceholder = "por exemplo, Produção"
+
+[portal.connections.picker]
+cancel = "Cancelar"
+createNew = "Nova ligação..."
+placeholder = "Selecione uma ligação"
+save = "Guardar ligação"
+
+[portal.connections.picker2]
+back = "Alterar integração"
+heading = "O que pretende ligar?"
+noResultsBody = "Ainda não suportamos isso - fale-nos sobre isso e veremos se o podemos adicionar."
+noResultsTitle = "Nada corresponde a \"{{query}}\""
+searchPlaceholder = "Pesquisar integrações - experimente \"sign\", \"ocr\" ou o nome de um produto"
+
+[portal.connections.types.api]
+description = "Chame qualquer HTTP API a partir de uma política. Escolhe o URL, a autenticação e o payload."
+label = "API personalizada"
+
+[portal.connections.types.api.fields.authType]
+label = "Autenticação"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nome de utilizador e palavra-passe"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Token Bearer"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token num cabeçalho personalizado"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Nenhuma"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Iniciar sessão para obter um token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Os passos que usam esta ligação só podem chamar caminhos sob este URL, nunca outro host."
+label = "URL base"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nome do cabeçalho"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Caminho de início de sessão"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Palavra-passe"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Se a API responder com uma ligação de transferência, apenas estes hosts podem ser obtidos. Separe com vírgulas. Deixe em branco para permitir apenas o host do próprio URL base."
+label = "Hosts de resultado permitidos"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Enviar o token como este cabeçalho"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "O cabeçalho de resposta no qual a chamada de início de sessão devolve o token, por exemplo, X-Auth-Token."
+label = "Cabeçalho de resposta do token"
+
+[portal.connections.types.api.fields.username]
+label = "Nome de utilizador"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Analise documentos quanto a malware num servidor que controla - nada sai da sua rede."
+label = "ClamAV (autoalojado)"
+
+[portal.connections.types.cloudmersive]
+description = "Análise de vírus e conteúdo para documentos numa política."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Bloqueie documentos que contenham macros, executáveis, scripts ou objetos incorporados - não apenas malware conhecido."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Anexe documentos processados a uma página Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Envie documentos para o ConsignO Cloud (Notarius) para assinatura eletrónica e autenticação notarial."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "O seu ambiente ConsignO Cloud, incluindo /api/v1."
+label = "URL do servidor"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Chave API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Segredo API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Palavra-passe"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Necessário apenas se a sua organização usar tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nome de utilizador"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publique uma mensagem no Discord quando uma política processar um documento."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexe um evento de auditoria no Elasticsearch sempre que uma política trata um documento."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Consulte periodicamente um servidor FTP ou FTPS para novos documentos."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Modo de ligação"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Ativo"
+passive = "Passivo (recomendado)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP simples envia credenciais e ficheiros sem encriptação; escolha FTPS se o servidor o suportar."
+label = "Encriptação"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explícito / AUTH TLS)"
+implicit = "FTPS (implícito)"
+none = "Nenhuma (FTP simples)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publique uma mensagem num espaço Google Chat quando uma política for executada."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Anexe documentos processados a uma issue do Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Envie um documento ou uma notificação por email quando uma política for executada."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Arquive documentos processados no Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Palavra-passe da aplicação"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detete dados pessoais no texto de documentos usando um servidor Presidio que controla."
+label = "Presidio (autoalojado)"
+
+[portal.connections.types.purview]
+description = "Leia e aplique etiquetas de sensibilidade Microsoft Purview em PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opcional. Necessário apenas para escolher etiquetas por nome; a etiquetagem funciona sem isto."
+label = "ID da aplicação (cliente)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Segredo do cliente"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Carimbado em todas as etiquetas como o respetivo SiteId, para que as ferramentas compatíveis com Purview saibam que organização a aplicou."
+label = "ID do diretório (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Um bucket S3 do qual as origens podem ler e no qual as saídas de pipelines podem escrever."
+label = "Armazenamento S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID da chave de acesso"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Deixe em branco para AWS. Defina isto para MinIO ou outro armazenamento compatível com S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Região"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Chave de acesso secreta"
+
+[portal.connections.types.sendgrid]
+description = "Envie um documento ou uma notificação por email quando uma política for executada."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Consulte periodicamente um servidor SFTP (SSH) para novos documentos."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opcional. A impressão digital SHA-256 da chave de host do servidor (de `ssh-keyscan host | ssh-keygen -lf -`). Quando definida, apenas é aceite um servidor que apresente esta chave; quando em branco, a chave vista na primeira ligação é fixada e alterações posteriores são recusadas."
+label = "Impressão digital da chave de host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Frase-passe da chave"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Deixe em branco se autenticar com uma chave privada em vez disso."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opcional. Cole uma chave privada OpenSSH para autenticar com uma chave em vez de palavra-passe."
+label = "Chave privada"
+
+[portal.connections.types.slack]
+description = "Publique uma mensagem no Slack quando uma política processar um documento."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Vigie uma partilha de rede SMB / CIFS (Windows ou Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Partilha de rede"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opcional. O domínio ou grupo de trabalho Windows, se o seu servidor usar um."
+label = "Domínio"
+
+[portal.connections.types.smb.fields.share]
+label = "Partilha"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Envie um evento de auditoria para o Splunk sempre que uma política trata um documento."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Envie um evento de auditoria para um coletor HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publique uma mensagem num canal Teams quando uma política for executada."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publique cada documento, ou apenas os detalhes, para um URL à sua escolha."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Acione um cenário Zap ou Make a partir de uma política."
+label = "Zapier e Make"
+
+[portal.docs]
+browse = "Navegar na documentação"
+viewSource = "Ver fonte no GitHub"
+
 [portal.docs.authentication]
 codeCaption = "cada pedido"
 eyebrow = "INTRODUÇÃO"
@@ -6619,11 +7079,19 @@ title = "SDKs oficiais"
 beta = "Beta"
 deprecated = "Obsoleto"
 
+[portal.docs.search]
+empty = "Nenhuma documentação correspondente"
+placeholder = "Pesquisar documentação"
+results = "{{count}} resultados"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Capacidades incorporadas e nomeadas que o seu agente invoca como uma única ferramenta. Cada skill é uma cadeia de operações determinística com avaliações associadas."
 title = "Skills de agente"
 
+[portal.docs.toc]
+title = "Nesta página"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "REFERÊNCIA DA API"
@@ -6697,6 +7165,8 @@ type = "Tipo"
 user = "Utilizador"
 
 [portal.documents.queue.empty]
+connectSource = "Ligar uma origem"
+createPipeline = "Criar uma pipeline"
 description = "À medida que as fontes enviarem documentos para as suas pipelines, estes aparecerão aqui para revisão."
 title = "Não há documentos na fila"
 
@@ -6806,13 +7276,71 @@ description = "Esta vista encontrou um erro inesperado. Tente novamente ou escol
 retry = "Tentar novamente"
 title = "Algo correu mal nesta página"
 
+[portal.home.download]
+back = "Voltar"
+body = "Transfira a aplicação de desktop ou autoaloje o servidor."
+done = "Concluído"
+guide = "Abrir o guia {{name}}"
+openInBrowser = "Abrir no navegador em vez disso"
+sectionDesktop = "Aplicação de desktop"
+sectionSelfHosted = "Autoalojado"
+title = "Instalar o Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Execute a imagem oficial no seu servidor."
+note = "Abre em :8080. Início de sessão predefinido: admin / stirling."
+tagline = "Execute o servidor num contentor"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Padrão"
+
+[portal.home.download.kubernetes]
+detailBody = "Instale o Helm chart oficial."
+note = "Adicione um PVC para /configs para persistir as definições."
+tagline = "Implemente num cluster com Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Compilações nativas para a sua distribuição."
+guideBtn = "Ver opções de instalação para Linux"
+note = "Estão disponíveis compilações AppImage, .deb e .rpm para distribuições comuns."
+tagline = "Aplicação de ambiente de trabalho nativa para a sua distribuição"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ou via Homebrew"
+detailBody = "Execute o instalador ou use Homebrew."
+downloadBtn = "Transferir para macOS"
+tagline = "Aplicação nativa para Apple silicon e Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Execute o .jar num servidor bare metal."
+downloadBtn = "Transferir o .jar"
+note = "Requer Java 21+. Abre em :8080; início de sessão predefinido admin / stirling."
+runLabel = "Depois execute-o"
+tagline = "Execute o .jar num servidor bare metal"
+title = "Configuração manual do servidor"
+
+[portal.home.download.windows]
+altLabel = "Ou via winget"
+detailBody = "Execute o instalador ou use um gestor de pacotes."
+downloadBtn = "Transferir instalador"
+tagline = "Aplicação nativa para Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} ativos"
-invite = "Convidar colegas de equipa"
+activeOfDeployed = "{{active}} de {{total}} ativos este mês"
 name = "Stirling PDF Editor"
 open = "Abrir no navegador"
 updated = "atualizado {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Concluir implementação"
+options = "Ver opções de implementação"
+start = "Implementar o Editor"
+
 [portal.home.editor.target]
 cloud = "Cloud Gerida"
 docker = "Autoalojado · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Boa tarde"
 evening = "Boa noite"
 morning = "Bom dia"
 
-[portal.home.onboarding]
-dismiss = "Ignorar configuração"
-notStarted = "Não iniciado"
-progress = "{{done}} de {{total}} concluídos"
-title = "Concluir configuração"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC em toda a organização, preços por volume comprometido e implementação isolada da rede."
-cta = "Iniciar avaliação"
-ctaQuote = "Obter orçamento"
-lead = "Para mais de 250 colaboradores."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Implemente a aplicação de desktop, grátis para sempre."
-title = "Transferir o PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} ativas · {{recommended}} recomendadas"
-chip = "{{active}} ativas"
-title = "Ativar políticas"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} ligadas · todos os PDF governados onde chegam"
-chip = "{{connected}} ligadas"
-title = "Ligar as suas fontes"
-
-[portal.home.quickActions]
-subtitle = "Principais tarefas para hoje"
-title = "Ações rápidas"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Compositor em 3 passos sobre a biblioteca de operações tipadas"
-title = "Criar uma pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agentes, webhooks, pastas monitorizadas"
-title = "Ligar uma fonte"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Chave com âmbito, limites de taxa e lista de permissões de IP"
-title = "Emitir uma chave API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gerir implementação do Editor"
 sectionsAriaLabel = "Secções de infraestrutura"
@@ -6878,13 +7363,9 @@ heading = "Chaves API"
 subheading = "Credenciais com âmbito, limites de taxa por chave, permissões e listas de permissões de IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IPs permitidos"
-anyIp = "Qualquer IP (sem lista de permissões)"
 created = "Criado"
 lastUsed = "Usado pela última vez"
-permissions = "Permissões"
-rateLimit = "Limite de taxa"
-rateLimitValue = "{{value}} pedidos/min"
+revoke = "Revogar chave"
 usageMonth = "Utilização este mês"
 usageToday = "Utilização hoje"
 
@@ -6892,6 +7373,20 @@ usageToday = "Utilização hoje"
 description = "Crie uma chave com âmbito para começar a chamar a Stirling API."
 title = "Ainda não há chaves API"
 
+[portal.infrastructure.apiKeys.error]
+load = "Não foi possível carregar as suas chaves API. Tente novamente."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Revogar \"{{name}}\"? Qualquer integração que ainda use esta chave começará imediatamente a receber erros 401. Isto não pode ser anulado."
+cancel = "Cancelar"
+confirm = "Revogar chave"
+title = "Revogar chave API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestado"
+inScope = "No âmbito"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrar eventos de auditoria por categoria"
 heading = "Registos de auditoria"
@@ -6935,6 +7430,7 @@ all = "Todos"
 auth = "Autenticação"
 config = "Configuração"
 elevation = "Elevação"
+policy = "Política"
 processing = "Processamento"
 security = "Segurança"
 
@@ -6944,19 +7440,35 @@ title = "Não tem acesso"
 
 [portal.infrastructure.audit.metrics]
 config = "Configuração"
-elevation = "Elevação"
+policy = "Política"
 processing = "Processamento"
 totalEvents = "Total de eventos · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autenticação"
+config = "Configuração"
+elevation = "Elevação"
+policy = "Política"
+processing = "Processamento"
+security = "Segurança"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Erro"
+info = "Info"
+success = "Sucesso"
+warning = "Aviso"
+
+[portal.infrastructure.certLabel]
+certified = "Certificado"
+inProgress = "Em curso"
+notStarted = "Não iniciado"
+
 [portal.infrastructure.createKey]
 cancel = "Cancelar"
 createKey = "Criar chave"
 done = "Concluído"
-ipAllowlistHelper = "Intervalos CIDR separados por vírgulas. Deixe em branco para permitir qualquer IP."
-ipAllowlistLabel = "Lista de permissões de IP"
 keyNameLabel = "Nome da chave"
 keyNamePlaceholder = "ex.: Produção · ingestão"
-permissionsLabel = "Permissões"
 secretKeyCaption = "Chave secreta"
 secretWarning = "Guarde isto num gestor de segredos. O Stirling armazena apenas um hash — não há forma de o recuperar mais tarde."
 subtitle = "Limite a chave ao mínimo de que necessita. Pode rodá-la ou revogá-la a qualquer momento."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Copie este segredo agora — não será mostrado novamente."
 title = "Criar chave API"
 titleCreated = "Chave criada"
 
+[portal.infrastructure.deployLabel]
+live = "Em direto"
+queued = "Em fila"
+rolledBack = "Revertido"
+rolling = "A implementar"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Estado em tempo real de cada região Stirling implementada — lat
 description = "As regiões implementadas aparecem aqui assim que o seu espaço de trabalho for aprovisionado."
 title = "Nenhuma região implementada"
 
+[portal.infrastructure.keyLabel]
+active = "Ativa"
+revoked = "Revogada"
+
+[portal.infrastructure.modelLabel]
+active = "Ativo"
+degraded = "Degradado"
+disabled = "Desativado"
+
 [portal.infrastructure.models]
 heading = "Modelos"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Estado"
 type = "Tipo"
 version = "Versão"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/chamada"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modelos ativos"
 avgLatency = "Latência média"
@@ -7049,6 +7580,17 @@ modelForAria = "Modelo para {{operation}}"
 operation = "Operação"
 routedTo = "Encaminhado para"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Classificação"
+extraction = "Extração"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradado"
+down = "Indisponível"
+healthy = "Saudável"
+
 [portal.infrastructure.security.access.byok]
 description = "Forneça uma chave do seu próprio KMS. O Stirling cifra com ela, mas ainda consegue ler."
 label = "Traga a sua própria chave (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modelos"
 security = "Segurança"
 storage = "Armazenamento"
 
+[portal.integrations]
+addAnother = "Adicionar outra"
+availableHeading = "Disponíveis"
+comingSoonHeading = "Brevemente"
+connect = "Ligar"
+connectedHeading = "Ligadas"
+connectionCount_one = "{{count}} ligação"
+connectionCount_other = "{{count}} ligações"
+customApi = "API personalizada"
+searchPlaceholder = "Pesquisar integrações"
+subtitle = "Tudo com que o Stirling pode comunicar. As credenciais são criadas aqui uma vez e depois referenciadas por fontes, políticas e pipelines."
+title = "Integrações"
+typedName = "Nome de {{tool}}"
+
+[portal.integrations.filters]
+all = "Todas"
+audit = "Auditoria"
+connected = "Ligadas"
+notify = "Notificar"
+security = "Segurança"
+signing = "Assinatura"
+storage = "Armazenamento"
+
+[portal.integrations.status]
+connected = "Ligada"
+
+[portal.integrations.table]
+integration = "Integração"
+worksWith = "Funciona com"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Políticas"
+sources = "Fontes"
+
+[portal.legal]
+draft = "{{label}} · rascunho"
+loadError = "Não foi possível carregar este documento. Tente novamente."
+loading = "A carregar…"
+title = "Documento legal"
+
 [portal.nav]
 agent-builder = "Criador de agentes"
 components = "Componentes"
@@ -7182,6 +7765,7 @@ documents = "Documentos"
 editor = "Editor"
 home = "Início"
 infrastructure = "Infraestrutura"
+integrations = "Integrações"
 pipelines = "Pipelines"
 policies = "Políticas"
 procurement = "Aquisições"
@@ -7190,25 +7774,9 @@ sources = "Fontes"
 usage = "Utilização e faturação"
 users = "Utilizadores"
 
-[portal.notifications]
-markAllRead = "Marcar tudo como lido"
-title = "Notificações"
-viewAll = "Ver tudo"
-
-[portal.notifications.ariaLabel]
-none = "Notificações, nenhuma por ler"
-unread_one = "Notificações, {{count}} por ler"
-unread_other = "Notificações, {{count}} por ler"
-
-[portal.notifications.count]
-allRead = "todas lidas"
-loading = "a carregar"
-new_one = "{{count}} nova"
-new_other = "{{count}} novas"
-
-[portal.notifications.empty]
-description = "Não há novas notificações."
-title = "Está tudo em dia"
+[portal.nav.section]
+platform = "Plataforma PDF"
+processor = "Processador PDF"
 
 [portal.pipelines]
 subtitle = "Todas as pipelines de documentos automatizadas no backend: uma cadeia ordenada de operações sobre um conjunto de fontes, executada por um acionador. Clique numa linha para ver os respetivos passos e fontes."
@@ -7220,15 +7788,28 @@ newPipeline = "Nova pipeline"
 [portal.pipelines.builder]
 addStep = "Adicionar ferramenta"
 back = "Voltar às pipelines"
+cannotFollow = "Não é possível receber {{produced}}"
+chooseAccount = "Escolha uma conta"
+chooseDestination = "Escolha um destino"
+chooseOperation = "Escolha o que este passo faz"
+chooseSource = "Escolha uma fonte"
 discard = "Descartar alterações"
 enabled = "Ativada"
+inputs = "Entrada"
+inputSource = "Fonte de entrada"
+inputTrigger = "Acionador"
 keepEditing = "Continuar a editar"
+needsConfiguring = "Precisa de configuração"
 needsUpload = "Precisa de um ficheiro carregado"
+noSources = "Ainda não há fontes ligadas. Crie uma para a usar como entrada."
 noToolMatches = "Nenhuma ferramenta corresponde à sua pesquisa."
 pipelineSettings = "Definições da pipeline"
 searchTools = "Pesquisar ferramentas"
 selectToolBody = "Adicione uma ferramenta para criar a sua pipeline."
 selectToolTitle = "Ainda não há ferramentas"
+sendToSystem = "Enviar para outro sistema"
+stepsIncompatible = "Estes passos não podem ser executados sobre o que o passo anterior produz: {{tools}}."
+stepsNeedSetup = "Estes passos ainda precisam de configuração antes de guardar: {{tools}}."
 toolSettings = "Definições da ferramenta"
 unknownStep = "Operação não reconhecida, mantida tal como está."
 unsavedBody = "Tem alterações não guardadas. Guarde-as antes de sair ou descarte-as?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Alterações não guardadas"
 uploadUnsupported = "Os ficheiros carregados ainda não são suportados em pipelines, por isso estes passos não podem ser guardados: {{tools}}."
 usesDefaults = "Executa com definições predefinidas"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combina todos os ficheiros do passo anterior"
+fan-out = "Executa uma vez por ficheiro do passo anterior"
+format-mismatch = "Precisa de {{accepts}}, mas o passo anterior produz {{produced}}"
+output-uncertain = "Pode não ser executado: a saída do passo anterior depende da forma como está configurado"
+source-mismatch = "Precisa de {{accepts}}, mas a entrada desta pipeline é {{produced}}"
+undeclared-operation = "Não é possível verificar o que este passo aceita"
+
 [portal.pipelines.composer]
 addTool = "Adicionar ferramenta"
 cancel = "Cancelar"
 chainEmpty = "Adicione uma ferramenta para começar a criar a sua pipeline."
 create = "Criar pipeline"
-directory = "Pasta de saída"
-directoryHelp = "Caminho absoluto no servidor. Tem de estar dentro das pastas permitidas configuradas."
 editingUnsupported = "A apresentação destes parâmetros da ferramenta para edição ainda não é suportada."
 moveDown = "Mover para baixo"
 moveUp = "Mover para cima"
 name = "Nome"
 namePlaceholder = "ex.: Varredura de redação"
-noSources = "Ainda não há fontes ligadas. A pipeline ainda pode ser executada em ficheiros fornecidos diretamente."
 noToolSettings = "Esta ferramenta não tem definições configuráveis."
 operations_one = "Operação ({{count}})"
 operations_other = "Operações ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Eliminar"
 title = "Eliminar pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Limpar histórico"
 delete = "Eliminar pipeline"
 run = "Executar agora"
 
 [portal.pipelines.empty]
 action = "Criar uma pipeline"
+connectSource = "Ligar uma fonte"
 description = "Crie a sua primeira pipeline: escolha as fontes sobre as quais é executada, encadeie as operações e escolha para onde vai a saída."
 title = "Ainda não há pipelines"
 
@@ -7286,15 +7874,17 @@ active = "Ativas"
 paused = "Em pausa"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Escrever na pasta"
-inline = "Devolver ficheiros"
-
 [portal.pipelines.run]
+allProcessed_one = "Nada a executar: o {{count}} documento da fonte já foi processado."
+allProcessed_other = "Nada a executar: todos os {{count}} documentos nas fontes já foram processados."
 completed_one = "Execução concluída."
 completed_other = "Todas as {{count}} execuções foram concluídas."
 empty = "Nada para executar: as fontes não tinham documentos para processar."
 failed = "Falha na execução: {{error}}"
+historyCleared = "Histórico limpo. A próxima execução reprocessa tudo o que está atualmente nas fontes."
+inFlight = "Nada de novo a executar: os documentos ainda estão a ser processados a partir de uma execução anterior."
+parked_one = "Nada a executar: {{count}} documento falhou anteriormente e está estacionado. Corrija a causa e depois limpe o histórico para o tentar novamente."
+parked_other = "Nada a executar: {{count}} documentos falharam anteriormente e estão estacionados. Corrija a causa e depois limpe o histórico para os tentar novamente."
 running = "Execução iniciada; ainda em curso."
 timeout = "A execução está a demorar mais do que o esperado; poderá ainda terminar em segundo plano."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Agendado"
 
 [portal.policies]
+defaultName = "Política de {{category}}"
 subtitle = "Automatizações permanentes que aplicam uma pipeline de ferramentas a todos os documentos. Cada política é acionada no carregamento ou exportação, executa a sua cadeia de ferramentas e guarda a versão aplicada juntamente com o original."
 title = "Políticas"
 
 [portal.policies.card]
 comingSoon = "Atualizar para Enterprise"
 notSetUp = "Não configurado"
+requiresAiEngine = "Requer motor de AI"
+
+[portal.policies.categories.classification]
+desc = "Identifique o tipo de cada documento no carregamento e marque os seus metadados para arquivo e pesquisa."
+label = "Classificação"
 
 [portal.policies.categories.compliance]
 desc = "Aplique requisitos HIPAA, GDPR, SOC 2 ou FedRAMP a todos os documentos."
@@ -7344,6 +7940,13 @@ label = "Segurança"
 [portal.policies.config]
 scopeAll = "Todos os documentos"
 
+[portal.policies.config.classification]
+summary = "Classifica todos os documentos carregados em relação às etiquetas da sua equipa e marca os respetivos metadados."
+
+[portal.policies.config.classification.rules]
+0 = "Classificar"
+1 = "Marcar metadados"
+
 [portal.policies.config.compliance]
 summary = "Valida documentos em relação a frameworks regulamentares antes de saírem do sistema."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Confiança mín."
 2 = "Nomear"
 3 = "Normalizar"
 
+[portal.policies.config.purview]
+label = "Aplicar uma etiqueta de sensibilidade do Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Inquilino Purview"
+labelId = "ID da etiqueta"
+labelIdHelp = "O GUID da etiqueta, do portal Purview. Aplicar uma etiqueta grava os respetivos metadados no PDF; não pode encriptar, o que requer o cliente Microsoft."
+labelName = "Nome da etiqueta (opcional)"
+labelNameHelp = "Registado juntamente com o ID para que pessoas e ferramentas possam reconhecer a etiqueta."
+
+[portal.policies.config.purview.fields.method]
+help = "O Purview distingue uma etiqueta aplicada por uma política de uma escolhida por uma pessoa."
+label = "Como a etiqueta é registada"
+privileged = "Como escolhida por uma pessoa"
+standard = "Como aplicada automaticamente"
+
+[portal.policies.config.purviewRead]
+label = "Ler uma etiqueta do Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Inquilino Purview"
+connectionHelp = "Lê a etiqueta que o documento já contém, para que passos posteriores possam atuar sobre ela."
+
 [portal.policies.config.retention]
 summary = "Impõe durante quanto tempo os documentos são mantidos, quando arquivar e quando eliminar."
 
@@ -7438,6 +8064,7 @@ title = "Ainda sem atividade"
 [portal.policies.endpoints]
 addWatermark = "Marca de água"
 autoRedact = "Ocultar PII"
+classifyAndLabel = "Classificar"
 compressPdf = "Comprimir"
 flatten = "Achatar"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "As suas políticas estão guardadas e aparecerão assim que a lig
 retry = "Tentar novamente"
 title = "Backend indisponível"
 
+[portal.policies.operations]
+change = "Alterar o que este passo faz"
+noResults = "Nenhum passo corresponde a isso. Experimente um nome de produto, ou \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Pesquisar passos - experimente \"scan\", \"attach\" ou um nome de produto"
+
+[portal.policies.operations.bodyMode]
+binary = "Bytes brutos do ficheiro"
+json = "Dentro de uma carga JSON"
+multipart = "Como carregamento de ficheiro (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "O seu próprio servidor ClamAV verifica o documento; nada sai da sua rede."
+label = "Procurar vírus (autoalojado)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Rejeita documentos que contenham macros, executáveis, scripts ou objetos incorporados."
+label = "Bloquear conteúdo ativo"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "O Cloudmersive verifica o documento e a execução para se não estiver limpo."
+label = "Procurar vírus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arquiva o documento processado numa página."
+label = "Anexar a uma página do Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Submete o documento ao ConsignO Cloud para assinatura."
+label = "Enviar para assinatura (ConsignO)"
+note = "Submete o documento. A obtenção da cópia assinada ainda não é suportada, porque um passo não consegue passar um resultado a um passo posterior."
+
+[portal.policies.operations.customApiCall]
+description = "Crie a chamada: caminho, método, corpo e tratamento da resposta."
+label = "Chamar uma API personalizada"
+
+[portal.policies.operations.discordNotify]
+description = "Informa um canal de que a política tratou um documento."
+label = "Publicar uma mensagem no Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Regista o que a política fez como um documento pesquisável."
+label = "Indexar um evento de auditoria no Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart adequa-se a API de carregamento; JSON adequa-se a API que querem o ficheiro dentro de uma carga; binário envia os bytes brutos."
+label = "Como enviar o documento"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Um corpo JSON enviado tal como está. {{document.base64}} contém o ficheiro; {{document.*}} e {{run.*}} são preenchidos por documento."
+label = "Corpo JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Conta"
+
+[portal.policies.operations.fields.domain]
+label = "Domínio Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "O campo do formulário sob o qual a API espera o documento."
+label = "Nome do campo do ficheiro"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "De"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Um objeto JSON de pares nome/valor de cabeçalho. A credencial da ligação é adicionada por si."
+label = "Cabeçalhos"
+
+[portal.policies.operations.fields.index]
+label = "Índice"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Chave da incidência"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Enviado como corpo da mensagem. {{document.*}} e {{run.*}} são preenchidos por documento."
+label = "Mensagem"
+
+[portal.policies.operations.fields.method]
+label = "Método"
+
+[portal.policies.operations.fields.pageId]
+label = "ID da página"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Anexado ao URL base da ligação. Nunca pode chegar a outro anfitrião."
+label = "Caminho"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Onde gravá-lo na drive. {{document.filename}} é preenchido por documento."
+label = "Caminho de destino"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Relatório deixa o documento intacto. Substituir troca-o pelo que vier na resposta."
+label = "O que fazer com a resposta"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email do signatário"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Assunto"
+placeholder = "Processado: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "O Presidio analisa este texto. Use {{document.title}} ou cole o texto que quer verificar."
+label = "Texto a verificar"
+
+[portal.policies.operations.fields.to]
+label = "Para"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nome de utilizador Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Informa um espaço de que a política tratou um documento."
+label = "Publicar uma mensagem no Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arquiva o documento processado numa incidência."
+label = "Anexar a uma incidência Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Envia o documento processado como anexo."
+label = "Enviar o documento por email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Grava o documento processado numa pasta."
+label = "Carregar para Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "O seu próprio servidor Presidio comunica os dados pessoais que encontra."
+label = "Detetar dados pessoais"
+note = "O Presidio lê texto, não ficheiros. Forneça o texto que quer verificar — o documento em si não é carregado."
+
+[portal.policies.operations.responseMode]
+replace = "Substituir o documento pela resposta"
+report = "Manter o documento, registar a resposta"
+
+[portal.policies.operations.sendgridEmail]
+description = "Envia o documento processado como anexo."
+label = "Enviar o documento por email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Informa um canal de que a política tratou um documento."
+label = "Publicar uma mensagem no Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Regista o que a política fez, onde os seus auditores já consultam."
+label = "Enviar um evento de auditoria para Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Regista o que a política fez num coletor HTTP."
+label = "Enviar um evento de auditoria para Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Informa um canal de que a política tratou um documento."
+label = "Publicar uma mensagem no Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Envia o próprio documento para um URL à sua escolha."
+label = "Publicar o documento num webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Entrega os detalhes da execução à sua automação."
+label = "Acionar um cenário Zap ou Make"
+
 [portal.policies.stats]
 activeFor = "Ativa"
 dataProcessed = "Dados processados"
@@ -7473,6 +8277,13 @@ label = "Docs aplicados"
 description = "Configuradas mas sem execução"
 label = "Pausadas"
 
+[portal.policies.table]
+appliesTo = "Aplica-se a"
+docs = "Docs aplicados"
+enforces = "Impõe"
+policy = "Política"
+status = "Estado"
+
 [portal.policies.wizard.actions]
 back = "Voltar"
 cancel = "Cancelar"
@@ -7480,6 +8291,10 @@ continue = "Continuar"
 enablePolicy = "Ativar política"
 saveChanges = "Guardar alterações"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifica o tipo do documento a partir das etiquetas da sua equipa e marca-o, para que seja arquivado e pesquisado por categoria."
+label = "Classificar o documento"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprime o documento para um tamanho de ficheiro menor."
 label = "Reduzir tamanho do ficheiro"
@@ -7500,10 +8315,18 @@ label = "Ocultar informações sensíveis"
 desc = "Remove JavaScript oculto para que nada possa ser executado automaticamente quando o documento é aberto."
 label = "Remover conteúdo ativo"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Prova que o documento existia nesta forma exata num determinado momento, usando uma autoridade de carimbo temporal independente. Apenas é enviado um hash - o documento nunca sai do seu servidor."
+label = "Adicionar um carimbo temporal de confiança"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Aplica uma marca visível (por exemplo, “Confidencial”) em todas as páginas."
 label = "Aplicar uma marca de água"
 
+[portal.policies.wizard.classification]
+description = "Cada documento carregado é classificado em relação às etiquetas incorporadas e marcado com os tipos correspondentes. O conjunto de etiquetas é partilhado por toda a sua equipa."
+labelsHeading = "Etiquetas de classificação"
+
 [portal.policies.wizard.errors]
 noTools = "Ative primeiro pelo menos uma ferramenta no fluxo de trabalho."
 saveFailed = "Não foi possível guardar a política. Tente novamente."
@@ -7548,73 +8371,118 @@ setUp = "Configurar política de {{category}}"
 [portal.policies.wizard.workflow]
 description = "Escolha o que esta política faz a cada documento que processa."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} ativas"
-noRule = "Ainda não foi aplicada nenhuma regra"
-subtitle = "Automatizações permanentes pelas quais todos os documentos passam, independentemente da pipeline que os trata."
-title = "O que é executado nos seus PDFs"
-
 [portal.policySummary.action]
-comingSoon = "Atualizar para Enterprise"
-configure = "Configurar"
 setUp = "Configurar"
 
-[portal.policySummary.column]
-activeRule = "Regra ativa"
-policy = "Política"
-status = "Estado"
+[portal.processorFlow]
+footnote = "As contagens referem-se às últimas 24 horas. A velocidade do fluxo é ilustrativa."
+liveBadge = "Em direto"
+stats = "{{connected}} ligadas · {{processed}} PDFs processados"
+title = "Processador PDF"
 
-[portal.policySummary.empty]
-description = "Assim que as políticas forem configuradas, as categorias aparecerão aqui."
-title = "Ainda sem políticas"
+[portal.processorFlow.lens]
+ariaLabel = "Modo de visualização"
+flow = "Fluxo"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Ativa"
-off = "Desligada"
-soon = "Em breve"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Falhou"
+heading = "Resultados"
+success = "Entregue"
 
-[portal.processingStatus]
-managePlan = "Gerir plano"
-volumeSuffix = "PDFs processados · últimos 30 dias"
+[portal.processorFlow.policies]
+activeCount = "{{n}} ativas"
+count = "{{n}} · 24h"
+heading = "Políticas"
+setUp = "Configurar"
+soon = "Brevemente"
+
+[portal.processorFlow.sankey]
+waist = "Políticas · {{n}} ativas"
+
+[portal.processorFlow.sankey.empty]
+description = "Ligue uma fonte e ative uma política para ver os documentos fluírem pelo processador."
+title = "Ainda sem fluxo"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Ligar"
+editor = "Editor Stirling PDF"
+heading = "Fontes"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Entrada de email"
 
 [portal.procurement]
-reset = "Repor aprovisionamento (demo)"
 subtitle = "Faça a avaliação, contratação e integração da sua equipa. Todos os documentos num só lugar."
 title = "Aprovisionamento"
 
-[portal.procurement.action]
-download = "Download"
-pay = "Pagar agora"
-request = "Pedir"
-sign = "Rever e assinar"
-upload = "Upload"
-
 [portal.procurement.agreement]
 agreeCta = "Aceitar e subscrever"
+confidential = "Confidencial"
 confirm = "Li e aceito o Acordo Stirling Enterprise."
-eyebrow = "Acordo"
-intro = "Um acordo combinado cobre a sua proposta: Contrato de Prestação de Serviços, Formulário de Encomenda, EULA e Acordo de Tratamento de Dados. Reveja-o e aceite para converter a proposta numa subscrição assumida."
-title = "Reveja o seu acordo empresarial"
+docName = "Contrato Stirling Enterprise"
+docSub = "MSA, Formulário de Encomenda, EULA e DPA, combinados numa assinatura."
+download = "Transferir"
+downloadDraftError = "Não foi possível gerar o PDF do contrato - o renderizador de documentos está indisponível. Tente novamente em breve ou contacte o suporte."
+downloadError = "Não foi possível transferir o contrato assinado. Tente novamente."
+legalName = "Nome da entidade legal"
+legalNamePlaceholder = "A entidade legal que irá assinar"
+loadError = "Não foi possível carregar o contrato. Tente novamente."
+loading = "A carregar o contrato..."
+ref = "Ref. {{ref}} · {{version}}"
+requestChanges = "Solicitar alterações"
+scrollHint = "Desloque para rever"
+signatory = "Nome do signatário"
+signatoryPlaceholder = "Nome completo"
+signatoryTitle = "Cargo do signatário"
+signatoryTitlePlaceholder = "p. ex., Consultor Jurídico Geral"
+signError = "Não foi possível registar a sua assinatura. Tente novamente."
 
 [portal.procurement.builder]
 addons = "Extras"
+addressLine1 = "Linha de endereço 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Linha de endereço 2"
+addressLine2Placeholder = "Suite, piso, edifício"
 back = "Voltar"
 businessName = "Nome da empresa"
 businessNamePlaceholder = "A sua empresa"
+city = "Cidade"
+cityPlaceholder = "São Francisco"
+completeRequired = "Preencha os campos obrigatórios (marcados com *) com um email válido antes de gerar o orçamento."
+contactEmail = "Email de contacto"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nome do contacto"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continuar"
-country = "País"
-countryEuro = "Zona Euro (EUR €)"
-countryUK = "Reino Unido (GBP £)"
-countryUS = "Estados Unidos (USD $)"
+done = "Concluído"
 eula = "Li e aceito o EULA do Stirling Enterprise. Este rege o acordo gerado a partir desta proposta."
 generate = "Gerar proposta"
-included = "Incluído"
 indemnification = "Indemnização de PI"
 indemnificationSub = "Defendemos reclamações de PI qualificadas, conforme o EULA"
-offlineLicense = "Licença offline / air-gapped"
-offlineLicenseSub = "Um ficheiro de licença descarregável para uma instância self-hosted air-gapped"
+paperEyebrow = "Orçamento Enterprise"
+paperFor = "Preparado para"
+pdfSize = "Tamanho do PDF"
+poNumber = "Número de PO"
+poNumberPlaceholder = "Opcional"
+postalCode = "Código postal"
+postalCodePlaceholder = "94105"
+posture = "Governação"
+posture_count = "~{{count}} políticas"
+posture_essentials = "Essenciais"
+posture_essentialsSub = "Classificação + Partilha — as predefinições"
+posture_governed = "Governado"
+posture_governedSub = "Adiciona Segurança e Encaminhamento"
+posture_regulated = "Regulado"
+posture_regulatedSub = "Todas as categorias — Conformidade, Retenção, Ingestão"
 qbr = "Revisões trimestrais de negócio"
 qbrSub = "O seu SE revê a utilização e o roadmap a cada trimestre"
+region = "Estado / região"
+regionPlaceholder = "Califórnia"
 running = "{{annual}} / ano · {{years}} anos {{tcv}}"
 s1Sub = "A sua equipa e os PDFs que espera processar a cada ano."
 s1Title = "Quanto irá processar?"
@@ -7623,6 +8491,12 @@ s2Title = "Compromisso e serviço"
 s3Sub = "Para a proposta e o acordo que esta gera."
 s3Title = "Os seus dados"
 serviceLevel = "Nível de serviço"
+size_compact = "Compacto"
+size_compactSub = "Principalmente texto, abaixo de 1 MB"
+size_heavy = "Pesado"
+size_heavySub = "Digitalizado ou com muitas imagens, 5 MB+"
+size_standard = "Padrão"
+size_standardSub = "Texto e imagens mistos, 1 a 5 MB"
 slDedicated = "Dedicado"
 slDedicatedSub = "4 horas úteis · gestor de conta dedicado · +30%"
 slPriority = "Prioritário"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Mesmo dia útil · CSM nomeado · +15%"
 slStandard = "Standard"
 slStandardSub = "Próximo dia útil · CSM partilhado · incluído"
 stepOf = "Passo {{n}} de {{total}}"
+taxId = "IVA / NIF"
+taxIdPlaceholder = "Opcional"
 term = "Prazo"
 termDiscount = "Desconto de {{pct}}% por compromisso plurianual aplicado"
 title = "Crie a sua proposta"
@@ -7637,6 +8513,7 @@ training = "Onboarding e formação"
 trainingSub = "Sessões ao vivo para pôr a sua equipa a funcionar"
 users = "Total de utilizadores"
 usersPlaceholder = "por exemplo, 250"
+viewEula = "Ler"
 volEstimated = "Estimado a partir de {{count}} utilizadores (~2.000 PDFs cada, incluindo automação). Edite se tiver uma estimativa melhor."
 volManual = "A usar o valor que indicou. Reestime a partir do tamanho da sua equipa a qualquer momento."
 volNoUsers = "Não tem a certeza? Introduza o tamanho da sua equipa e faremos uma estimativa."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "por exemplo, 1.000.000"
 years_one = "{{count}} ano"
 years_other = "{{count}} anos"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc"
-count_other = "{{count}} docs"
-done = "Concluído"
-here = "Está aqui"
-hide = "Ocultar"
-optional = "Opcional"
-paidAddon = "Extra pago"
-show = "Mostrar"
-subtitle = "Tudo o que precisa em cada passo do percurso, apresentado à medida que a proposta avança."
-supportingSubtitle = "SOC 2, revisões de segurança, formulários fiscais e mais, prontos quando a sua equipa de segurança ou aprovisionamento pedir. Alguns têm uma taxa única."
-supportingTitle = "A apoiar a sua avaliação"
+[portal.procurement.documents]
+agreement = "Contrato Enterprise"
+agreementSub = "MSA, Formulário de Encomenda e DPA numa assinatura."
+download = "Transferir"
+eula = "EULA e Termos Comerciais"
+eulaSub = "Os termos comerciais do software e de autosserviço."
+invoice = "Fatura"
+invoiceSub = "A sua primeira fatura de subscrição."
+laterInvoice = "Disponível depois de aceitar"
+laterQuote = "Disponível assim que o seu orçamento for emitido"
+quote = "Orçamento"
+quoteSub = "O seu orçamento empresarial detalhado."
+sla = "Anexo SLA"
+slaSub = "Níveis de suporte e objetivos de resposta."
+subprocessors = "Subprocessadores"
+subprocessorsSub = "Terceiros que processam dados em seu nome."
+subtitle = "A documentação do seu acordo, disponível a qualquer momento."
 title = "Documentos"
-upcoming = "Em breve"
+view = "Ver"
 
 [portal.procurement.error]
 title = "Algo correu mal"
 
 [portal.procurement.hero]
-company = "A sua proposta empresarial"
+barAria = "Etapa {{current}} de {{total}}"
 ctaAgreement = "Rever e assinar acordo"
-ctaLive = "Está ativo"
-ctaPayment = "Adicionar pagamento"
+ctaExploring = "Configurar a sua avaliação"
 ctaQuote = "Rever a sua proposta"
+ctaReviewQuote = "Rever orçamento"
 ctaTrial = "Criar a sua proposta"
+documents = "Documentos"
 eyebrow = "Aprovisionamento Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Convidar colegas de equipa"
-keyDocs = "Documentos-chave"
-nextStep = "Próximo passo: {{action}}"
-notStarted = "Não iniciado"
+licenseKey = "Chave de licença"
+liveSub = "A sua organização está provisionada e a sua licença está ativa."
+liveTitle = "Está em direto no Stirling Enterprise"
+next = "Seguinte: {{stage}}"
 open = "Abrir aprovisionamento"
 scheduleCall = "Agendar uma chamada"
-setup1Sub = "Convide os seus colegas de equipa"
-setup1Title = "Implemente o Editor de PDF"
-setup2Sub = "Ative o processamento em editores e outras origens"
-setup2Title = "Ligue o Processador de PDF"
-setup3Sub = "Ative Segurança, Conformidade, Encaminhamento ou Retenção quando precisar"
-setup3Title = "Adicionar políticas recomendadas"
+sentenceAgreement = "rever e assinar o contrato"
+sentenceLive = "provisionamento e implementação"
+sentencePayment = "ordem de compra e pagamento"
+sentenceQuote = "rever e aceitar o seu orçamento"
+sentenceTrial = "configurar o seu espaço de avaliação"
 
 [portal.procurement.journey]
 daysLeft_one = "Falta {{count}} dia"
 daysLeft_other = "Faltam {{count}} dias"
-engineerLabel = "O seu engenheiro de soluções"
-eyebrow = "A sua implementação"
-live = "Está ativo no Stirling Enterprise"
-nextStep = "Próximo passo: {{action}}"
-subtitle = "O seu engenheiro de soluções acompanha todos os passos. Uma ação seguinte de cada vez; a lista de verificação completa está abaixo."
-title = "Do teste à ativação, um percurso guiado"
-trialTitle = "Teste Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Uma assinatura cobre MSA, formulário de encomenda, EULA e DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Ainda não foi possível gerar o ficheiro de licença offline 
 downloadOffline = "Download da licença offline (.lic)"
 hint = "Cole esta chave numa instância self-hosted para a ativar ou guarde-a para os seus registos. Mantenha-a em segurança."
 label = "A sua chave de licença"
+subtitle = "Ative uma instância autoalojada com esta chave, ou guarde-a para os seus registos."
+title = "A sua chave de licença"
+trialFileHint = "Este é o seu ficheiro de licença de avaliação. Assim que o seu contrato estiver em vigor, volte e transfira-o novamente — ao contrário da chave de licença online, o ficheiro .lic não será atualizado automaticamente."
 
 [portal.procurement.link]
 cta = "Associar conta"
@@ -7739,65 +8619,62 @@ description = "A sua subscrição está ativa e a sua licença foi emitida. A su
 eyebrow = "Ativo"
 title = "Está ativo no Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Chaves de teste, propostas por volume assumido, o acordo de assinatura única, pagamento e o seu registo de documentos ficam todos aqui assim que iniciar uma avaliação Enterprise."
-eyebrow = "Apenas Enterprise"
-talkToSales = "Falar com vendas"
-title = "O percurso de aprovisionamento abre com Enterprise"
-
 [portal.procurement.milestone]
-accept = "Aceitar e continuar"
-description = "Faça download do PDF para o partilhar com a sua equipa, volte para aceitar quando estiver pronto ou faça alterações."
-download = "Download do PDF"
 downloadError = "Ainda não foi possível fazer download do PDF da proposta — tente novamente dentro de momentos."
-edit = "Editar proposta"
-eyebrow = "Proposta {{number}}"
-perYear = " / ano"
-preparedFor = "Preparada para {{company}}"
-tcv = "{{value}} valor total do contrato"
-title = "A sua proposta está pronta"
-
-[portal.procurement.modal]
-cancel = "Cancelar"
-chooseFile = "Escolher ficheiro"
-close = "Fechar"
-downloadBody = "O seu download começará em breve."
-downloadCta = "Download"
-downloadTitle = "Download"
-noFile = "Nenhum ficheiro selecionado"
-payBody = "Pague o seu contrato assumido por cartão ou transferência bancária através da Stripe. O seu workspace é provisionado assim que o pagamento for confirmado."
-payCta = "Continuar para a Stripe"
-payTitle = "Confirmar pagamento"
-requestBodyFree = "Geramos isto a pedido. Confirme e o seu engenheiro de soluções enviá-lo-á em breve."
-requestBodyPaid = "Este é um extra pago. Confirme e o seu engenheiro de soluções irá definir o âmbito e enviar a documentação."
-requestCta = "Pedir"
-requestTitle = "Pedir este documento"
-signBody = "Abre o Acordo Stirling Enterprise para assinatura eletrónica: uma assinatura cobre o MSA, o formulário de encomenda, o EULA e o DPA. Nós contra-assinamos automaticamente e avança para o pagamento."
-signCta = "Abrir para assinatura"
-signTitle = "Rever e assinar o seu acordo"
-uploadBody = "Envie-nos a sua PO e faturamos de acordo com os seus termos. Arraste o PDF ou escolha um ficheiro abaixo."
-uploadCta = "Upload da ordem de compra"
-uploadTitle = "Upload da sua ordem de compra"
 
 [portal.procurement.payment]
 description = "A sua proposta foi aceite e a sua licença já está ativa — a sua equipa pode começar imediatamente. Pague a primeira fatura quando estiver pronto; pode pagá-la ou fazer download aqui, sem precisar de email."
+downloadAgreement = "Transferir contrato assinado"
 downloadInvoice = "Download da fatura"
-simulate = "Simular pagamento recebido (demo)"
+eyebrow = "Pagamento"
 title = "Subscrição criada"
 viewInvoice = "Ver e pagar fatura"
 
+[portal.procurement.review]
+acceptCta = "Aceitar orçamento"
+annual = "Taxa anual (ano 1)"
+downloadCta = "Transferir orçamento"
+poNumber = "Ordem de compra: {{po}}"
+renewal = "Renova a {{amount}}/ano após o prazo (+{{pct}}% IPC)"
+tcv = "Prazo de {{years}} anos, pago integralmente adiantado: {{tcv}}"
+validUntil = "Válido até {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Não foi possível carregar o agendador."
 fallbackLink = "Abrir agendamento num novo separador"
+loading = "A carregar agendador..."
 subtitle = "O seu engenheiro de soluções guiará a sua equipa pela implementação. Escolha uma hora conveniente."
 title = "Agendar uma chamada"
 
-[portal.procurement.status]
-action = "Ação necessária"
-available = "Disponível"
-complete = "Concluído"
-pending = "Pendente"
-request = "A pedido"
+[portal.procurement.setup]
+airgap = "Isolado"
+airgapSub = "Selado, sem saída"
+back = "Voltar"
+businessName = "Nome da empresa"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Gerido, início mais rápido"
+continue = "Continuar"
+deployment = "Onde deve ser implementado?"
+eula = "Concordo com o EULA e os Termos Comerciais do Stirling."
+fullName = "Nome completo"
+fullNamePlaceholder = "O seu nome"
+invites = "Convidar colegas de equipa · opcional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Agendar uma chamada"
+seats = "Pessoas a testar"
+seatsPlaceholder = "p. ex., 15"
+selfhost = "Autoalojado"
+selfhostSub = "Docker ou Kubernetes"
+start = "Iniciar avaliação"
+stepOf = "Passo {{n}} de {{total}}"
+subtitle = "Gratuito durante 14 dias, sem cartão necessário."
+subtitleDetails = "Alguns detalhes para o seu orçamento e contrato."
+talkFirst = "Prefere falar primeiro?"
+title = "Configure a sua avaliação"
+viewEula = "Ler"
+workEmail = "Email profissional"
+workEmailPlaceholder = "voce@empresa.com"
 
 [portal.procurement.trial]
 body = "A extensão adiciona 7 dias e notifica o seu engenheiro de soluções."
@@ -7808,20 +8685,6 @@ maxed = "Esgotado"
 subtitle = "O seu teste gratuito decorre até {{date}}. Não é necessário cartão."
 title = "Teste Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Preços por volume assumido, SSO + SCIM + RBAC para toda a organização, auditoria imutável de 90 dias e um SE dedicado."
-homeCta = "Iniciar teste →"
-homeHeadline = "Processe milhões de PDFs."
-
-[portal.recentActivity]
-title = "Atividade recente"
-viewAll = "Ver tudo"
-
-[portal.recentActivity.empty]
-description = "Execuções de pipelines, implementações e eventos de agentes aparecerão aqui."
-title = "Ainda não há nada aqui"
-
 [portal.search]
 ariaLabel = "Pesquisar"
 placeholder = "Pesquisar no Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Ligação da conta"
 
-[portal.shell.header]
-accountFallback = "Conta"
-accountMenu = "Menu da conta"
-darkMode = "Modo escuro"
-lightMode = "Modo claro"
-search = "Pesquisar"
-searchPlaceholder = "Pesquisar…"
-signOut = "Terminar sessão"
-switchToDark = "Mudar para tema escuro"
-switchToLight = "Mudar para tema claro"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processador"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} docs"
 linkAccount = "Associar conta Stirling"
-planEditor = "Plano Editor"
-planEnterprise = "Plano Enterprise"
-planProcessor = "Plano Processador"
 primaryNav = "Navegação principal"
 switchApp = "Mudar de aplicação"
 
+[portal.shell.topbar]
+closeNav = "Fechar navegação"
+openNav = "Abrir navegação"
+search = "Pesquisar"
+
 [portal.sources]
 subtitle = "Ligações de entrada reutilizáveis que alimentam documentos no Stirling. Configure uma ligação uma vez e depois referencie-a em qualquer número de políticas. Clique numa linha para ver a respetiva configuração e que políticas a usam."
 title = "Origens"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Ligar origem"
 
+[portal.sources.builder]
+back = "Voltar às fontes"
+backToTypes = "Todos os tipos de fonte"
+cancel = "Cancelar"
+chooseHint = "Escolha de onde vêm os documentos. Os conectores a cinzento estão a caminho."
+comingSoon = "Brevemente"
+comingSoonHeading = "Brevemente"
+create = "Criar fonte"
+createTitle = "Ligar uma fonte"
+delete = "Eliminar"
+editTitle = "Editar fonte"
+enabled = "Ativada"
+save = "Guardar alterações"
+
+[portal.sources.builder.folderAccess]
+description = "As automações de pastas só podem usar pastas permitidas por um administrador. Adicione-a nas definições de Acesso a Pastas e tente novamente."
+openSettings = "Definições de Acesso a Pastas"
+title = "Esta pasta não é permitida"
+
 [portal.sources.delete]
 body = "Eliminar \"{{name}}\"? Esta ação não pode ser anulada. As políticas que a referenciam terão de ser atualizadas."
 cancel = "Cancelar"
 confirm = "Eliminar"
 title = "Eliminar origem?"
 
-[portal.sources.detail]
-closeAriaLabel = "Fechar detalhe"
-delete = "Eliminar origem"
-docs24h = "Últimas 24 h"
-docs30d = "Últimos 30 dias"
-docsTotal = "Total visto"
-docsTrend = "Documentos nos últimos 30 dias"
-documents = "Documentos"
-edit = "Editar"
-notReferenced = "Não é referenciada por nenhuma política, por isso é seguro eliminá-la."
-pause = "Pausar"
-resume = "Retomar"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Usada por"
-
 [portal.sources.empty]
 description = "Ligue uma pasta (e, em breve, armazenamento na cloud) para que as suas políticas tenham de onde obter documentos."
 title = "Ainda não há origens ligadas"
@@ -7899,18 +8754,57 @@ inUse = "Em utilização"
 total = "Ligações"
 unused = "Não utilizadas"
 
+[portal.sources.networkFields.connection]
+helperText = "A ligação guardada com o endereço do servidor e as credenciais. Reutilizada por todas as fontes que a referenciam."
+label = "Ligação"
+
+[portal.sources.networkFields.directory]
+helperText = "Pasta no servidor a consultar, relativa à pasta inicial de início de sessão ou à raiz da partilha. Deixe em branco para a raiz."
+label = "Pasta"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consumir remove cada ficheiro do servidor assim que todas as políticas o tenham processado."
+label = "Modo de leitura"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consumir: processar cada ficheiro uma vez"
+snapshot = "Snapshot: reler a pasta a cada execução"
+
+[portal.sources.networkFields.recursive]
+label = "Profundidade da pasta"
+
+[portal.sources.networkFields.recursive.options]
+all = "Incluir subpastas"
+top = "Apenas nível superior"
+
 [portal.sources.status]
 active = "Ativa"
 disabled = "Desativada"
 unused = "Não utilizada"
 
 [portal.sources.table]
+documents = "Documentos"
 source = "Origem"
 status = "Estado"
 usedBy = "Políticas"
 
+[portal.sources.types.box]
+description = "Obtenha documentos de pastas Box que a sua equipa já partilha."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Obtenha documentos de uma pasta Dropbox partilhada."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documentos que a sua equipa processou no editor, em execuções de políticas e AI."
 label = "Editor"
+noPolicies = "Ainda não há políticas executadas a partir do editor."
+
+[portal.sources.types.email]
+description = "Transforme anexos enviados para uma caixa de correio dedicada em documentos."
+label = "Caixa de entrada de email"
 
 [portal.sources.types.folder]
 description = "Monitoriza um diretório no servidor para novos documentos."
@@ -7943,25 +8837,80 @@ label = "Profundidade da pasta"
 all = "Incluir subpastas"
 top = "Apenas nível superior"
 
+[portal.sources.types.ftp]
+description = "Consulte uma pasta de servidor FTP ou FTPS para novos documentos."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Obtenha documentos de pastas partilhadas do Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Monitorize uma partilha de rede SMB para novos documentos."
+label = "Unidade de rede"
+
+[portal.sources.types.onedrive]
+description = "Monitorize pastas OneDrive para novos documentos."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Obtenha documentos de um bucket Amazon S3 ou compatível com S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "A ligação guardada que contém o bucket e as credenciais. Reutilizada por todas as fontes e saídas de pipeline que a referenciam."
+label = "Ligação"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consumir remove cada objeto do bucket assim que todas as políticas o tenham processado."
+label = "Modo de leitura"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consumir: processar cada objeto uma vez"
+snapshot = "Snapshot: reler o bucket a cada execução"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Apenas são processados objetos cujas chaves comecem com este prefixo."
+label = "Prefixo da chave"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Consulte uma pasta de entrega SFTP para novos documentos."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Obtenha documentos de bibliotecas de documentos SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Origem"
 
+[portal.sources.types.webhook]
+createNote = "Um URL de entrega e um segredo de assinatura são gerados quando cria este webhook. Os remetentes fazem POST de documentos para esse URL e as políticas que o referenciam são executadas à chegada."
+description = "Receba documentos por HTTP POST assinado de qualquer sistema externo."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL de entrega"
+secretNote = "O segredo de assinatura é mostrado uma vez, quando o webhook é criado. Recrie a fonte para o rodar."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copiar"
+done = "Concluído"
+secret = "Segredo de assinatura"
+secretHelp = "Assine o corpo bruto de cada entrega com esta chave (HMAC-SHA256) e envie-o como cabeçalho X-Stirling-Signature."
+secretWarning = "Copie agora o segredo de assinatura. Para sua segurança, é mostrado apenas uma vez e não pode ser recuperado mais tarde."
+title = "Webhook criado"
+url = "URL de entrega"
+usage = "Faça POST de cada documento como corpo bruto do pedido para o URL de entrega com um tipo de conteúdo binário (application/pdf ou application/octet-stream). As políticas que o referenciam são executadas automaticamente à chegada."
+
 [portal.sources.wizard]
-back = "Voltar"
-cancel = "Cancelar"
-continue = "Continuar"
-editTitle = "Editar origem"
 name = "Nome"
 namePlaceholder = "por exemplo, Entrada de reclamações"
-save = "Guardar alterações"
-subtitle = "Passo {{current}} de {{total}} · {{label}}"
-title = "Ligar uma origem"
 type = "Tipo"
 
-[portal.sources.wizard.steps]
-chooseType = "Escolher tipo"
-configure = "Configurar"
-review = "Rever e ligar"
+[portal.stepModal]
+close = "Fechar"
 
 [portal.usage]
 managePayment = "Gerir pagamento"
@@ -8021,16 +8970,9 @@ summary = "Detém uma equipa — gere os recursos dos seus membros e configuraç
 2 = "Acesso ao portal através da política predefinida"
 3 = "Tudo o que o Membro pode fazer"
 
-[portal.welcome]
-ariaLabel = "Bem-vindo ao Stirling PDF"
-badge = "Open-source"
-installEditor = "Instalar o Editor"
-inviteTeammates = "Convidar colegas de equipa"
-openInBrowser = "Abrir no navegador"
-perks = "Gratuito para sempre · Self-hostable"
-subtitle = "O Editor de PDF mais seguro do mundo é gratuito para equipas de todos os tamanhos. Inclui mais de 60 operações PDF e SSO."
-title = "Bem-vindo ao"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Ilimitado"
 
 [printFile]
 title = "Imprimir Ficheiro"
@@ -8613,6 +9555,14 @@ text = "Rode as páginas do seu PDF no sentido horário ou anti-horário em incr
 [rotate.tooltip.header]
 title = "Visão geral das definições de rotação"
 
+[ruler]
+clearAll = "Limpar tudo"
+hideAllLabels = "Ocultar todas as etiquetas"
+hideSmallLabels = "Ocultar etiquetas pequenas"
+physicalValues = "Físico"
+scaled = "Escalado"
+showAllLabels = "Mostrar todas as etiquetas"
+
 [sanitize]
 desc = "Remover elementos potencialmente nocivos dos ficheiros PDF."
 sanitizationResults = "Resultados da sanitização"
@@ -8654,31 +9604,45 @@ label = "Remover metadados XMP"
 [sanitize.steps]
 settings = "Definições"
 
-[sanitizePdf]
-tags = "limpar,seguro,segurança,remover-ameaças"
-
 [sanitizePDF]
 title = "Sanitizar PDF"
 
+[sanitizePdf]
+tags = "limpar,seguro,segurança,remover-ameaças"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Ajustar escala de página"
 
+[scaleSettings]
+activeScale = "Escala ativa"
+apply = "Aplicar escala"
+applyCalibration = "Aplicar calibração"
+calculatedScale = "Escala calculada"
+calibrate = "Calibrar"
+calibrating = "A calibrar"
+calibrationDistanceRequired = "Introduza uma distância real maior do que zero"
+calibrationInvalid = "Não foi possível calcular a escala a partir desta medição"
+calibrationPaperDistance = "Distância medida na página: {{distance}}"
+calibrationTitle = "Calibrar escala"
+calibrationTooltip = "Meça uma distância conhecida para calcular a escala automaticamente"
+customScale = "Escala personalizada"
+noneSet = "Nenhuma escala personalizada definida"
+presets = "Escalas predefinidas"
+ratio = "Proporção da escala"
+ratioHelp = "Proporção: 1 unidade da página = X unidades reais"
+ratioPlaceholder = "por exemplo, 100"
+ratioPositive = "A proporção deve ser maior do que zero"
+ratioRequired = "A proporção é obrigatória"
+realDistance = "Distância real"
+realDistancePlaceholder = "por exemplo, 5"
+reset = "Repor predefinições"
+unit = "Unidade"
+unitInvalid = "Unidade inválida: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Limiar de Ângulo:"
-10 = "Define o tamanho da borda adicionada e removida para prevenir bordas brancas na saída (predefinição: 1)."
-2 = "Define o ângulo absoluto mínimo necessário para a imagem ser rodada (predefinição: 10)."
-3 = "Tolerância:"
-4 = "Determina o intervalo de variação de cor em torno da cor de fundo estimada (predefinição: 30)."
-5 = "Área Mínima:"
-6 = "Define o limiar de área mínima para uma foto (predefinição: 10000)."
-7 = "Área Mínima de Contorno:"
-8 = "Define o limiar de área mínima de contorno para uma foto"
-9 = "Tamanho da Borda:"
-
 [scannerImageSplit]
 submit = "Extrair Digitalizações de Imagem"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "O que isto faz"
 whatThisDoesDesc = "Encontra e extrai automaticamente cada foto de uma página digitalizada ou imagem composta—sem recorte manual."
 whenToUse = "Quando usar"
 
+[ScannerImageSplit.selectText]
+1 = "Limiar de Ângulo:"
+10 = "Define o tamanho da borda adicionada e removida para prevenir bordas brancas na saída (predefinição: 1)."
+2 = "Define o ângulo absoluto mínimo necessário para a imagem ser rodada (predefinição: 10)."
+3 = "Tolerância:"
+4 = "Determina o intervalo de variação de cor em torno da cor de fundo estimada (predefinição: 30)."
+5 = "Área Mínima:"
+6 = "Define o limiar de área mínima para uma foto (predefinição: 10000)."
+7 = "Área Mínima de Contorno:"
+8 = "Define o limiar de área mínima de contorno para uma foto"
+9 = "Tamanho da Borda:"
+
 [search]
 noResults = "Nenhum resultado encontrado"
 placeholder = "Introduza o termo de pesquisa..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "O seu servidor Stirling-PDF está offline e \"{{endpo
 [session]
 expired = "A sua sessão expirou. Por favor atualize a página e tente novamente."
 
-[sessionManagement.tooltip]
-header = "Gestão de sessões de assinatura"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Novos participantes são adicionados ao fim da ordem de assinatura"
-bullet2 = "Não é possível adicionar participantes após a finalização da sessão"
-bullet3 = "Cada participante recebe uma notificação quando chega a sua vez"
-description = "Pode adicionar mais participantes a uma sessão ativa a qualquer momento antes da finalização."
-title = "Adicionar participantes"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalização total</b>: Todos os participantes assinaram"
-bullet2 = "<b>Finalização parcial</b>: Alguns participantes ainda não assinaram"
-bullet3 = "Os participantes não assinados serão excluídos do documento final"
-bullet4 = "Depois de finalizada, pode carregar o PDF assinado nos ficheiros ativos"
-description = "A finalização combina todas as assinaturas num único PDF assinado. Esta ação não pode ser anulada."
-title = "Finalização da sessão"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Não é possível remover participantes que já assinaram"
-bullet2 = "Os participantes removidos deixam de receber notificações"
-bullet3 = "A ordem de assinatura ajusta-se automaticamente"
-description = "Os participantes podem ser removidos das sessões antes de assinarem."
-title = "Remover participantes"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Cada assinatura é aplicada sequencialmente ao PDF"
-bullet2 = "Os signatários posteriores podem ver assinaturas anteriores"
-bullet3 = "Crítico para fluxos de aprovação e cadeias legais de custódia"
-description = "A ordem que especificar ao criar a sessão determina quem assina primeiro."
-title = "Ordem de assinatura"
-
 [settings]
 close = "Fechar"
 
+[settings.ai]
+documents = "Documentos e RAG"
+general = "Geral"
+limits = "Limites e desempenho"
+models = "Modelos e fornecedores"
+title = "IA"
+
 [settings.configuration]
 advanced = "Avançado"
 database = "Base de dados"
 endpoints = "Endpoints"
 features = "Funcionalidades"
+folderAccess = "Acesso a pastas"
 mcp = "MCP Server"
 storageSharing = "Armazenamento de Ficheiros e Partilha"
 systemSettings = "Definições do sistema"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Editor PDF predefinido"
 defaultPdfEditorActive = "O Stirling PDF é o seu editor PDF predefinido"
 defaultPdfEditorChecking = "A verificar..."
 defaultPdfEditorInactive = "Outra aplicação está definida como predefinida"
+defaultPdfEditorRemind = "Lembrar-me de definir como predefinição"
+defaultPdfEditorRemindDescription = "Mostrar uma faixa quando o Stirling PDF não for a sua aplicação PDF predefinida."
 defaultPdfEditorSet = "Já é predefinido"
 defaultStartupView = "Vista predefinida no arranque"
 defaultStartupViewDescription = "Escolha qual o separador ativo na coluna esquerda quando a aplicação inicia"
@@ -8817,9 +9771,18 @@ languageDescription = "Escolha o idioma de apresentação"
 logout = "Terminar sessão"
 setAsDefault = "Definir como predefinido"
 theme = "Tema"
+themeAccent = "Cor de destaque"
+themeAccentCustom = "Cor personalizada"
+themeAccentCustomHint = "Personalizada (predefinições recomendadas)"
+themeAccentDark = "Cor de destaque do modo escuro"
+themeAccentDefault = "Predefinição"
+themeAccentDefaultHint = "Tema predefinido (recomendado)"
+themeAccentDescription = "Botões, ligações e destaques seguem-na, e esta aplica uma tonalidade subtil à aplicação. O modo claro e o modo escuro têm cada um a sua. O sistema usa a que estiver ativa."
+themeAccentLight = "Cor de destaque do modo claro"
 themeDark = "Escuro"
 themeDescription = "Alternar entre modo claro e escuro"
 themeLight = "Claro"
+themeReset = "Restaurar tema predefinido"
 themeSystem = "System"
 title = "Geral"
 user = "Utilizador"
@@ -8833,6 +9796,12 @@ intro = "Ativar autenticação de utilizadores, gestão de equipas e funcionalid
 learnMore = "Saiba mais na documentação"
 title = "Para administradores do sistema"
 
+[settings.general.loginLanding]
+description = "Escolha que aplicação abre quando inicia sessão no Stirling Cloud."
+editor = "Editor"
+processor = "Processador"
+title = "Após iniciar sessão"
+
 [settings.general.mode]
 fullscreen = "Ecrã inteiro"
 sidebar = "Barra lateral"
@@ -9041,6 +10010,11 @@ security = "Segurança"
 telegram = "Telegram"
 title = "Segurança e Autenticação"
 
+[settings.signOut]
+confirm = "Tem a certeza de que pretende terminar sessão?"
+submit = "Terminar sessão"
+title = "Terminar sessão"
+
 [settings.team]
 title = "Equipa"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Carregar para o servidor"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "clique aqui"
+fallback = "Se não abriu automaticamente,"
+opening = "A abrir Swagger UI num novo separador..."
 tags = "api,documentação,swagger,endpoints,desenvolvimento"
 title = "Documentação da API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Selecione ficheiros em Ficheiros Ativos para executar esta fe
 singleFileScope = "A aplicar apenas a: {{fileName}}"
 viewerMode = "Altere para o editor de ficheiros para selecionar vários ficheiros."
 
+[toolFormat]
+ANY = "qualquer ficheiro"
+CBR = "um arquivo de banda desenhada (CBR)"
+CBZ = "um arquivo de banda desenhada (CBZ)"
+CSV = "um ficheiro CSV"
+EBOOK = "um livro digital"
+EMAIL = "um email"
+EXCEL = "uma folha de cálculo"
+HTML = "uma página web"
+IMAGE = "imagens"
+JAVASCRIPT = "um ficheiro JavaScript"
+JSON = "um ficheiro JSON"
+MARKDOWN = "um ficheiro Markdown"
+NONE = "nenhum ficheiro"
+PCL = "um ficheiro de impressão PCL"
+PDF = "um PDF"
+PDF_ENCRYPTED = "um PDF protegido por palavra-passe"
+POSTSCRIPT = "um ficheiro PostScript"
+PPT = "uma apresentação"
+TEXT = "um ficheiro de texto"
+VIDEO = "um vídeo"
+WORD = "um documento Word"
+XML = "um ficheiro XML"
+XPS = "um documento XPS"
+ZIP = "um arquivo ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Voltar a todas as ferramentas"
 collapse = "Recolher painel"
 expand = "Expandir painel"
 goBack = "Voltar"
+pdfTools = "Ferramentas PDF"
 placeholder = "Escolha uma ferramenta para começar"
 premiumFeature = "Funcionalidade premium:"
+searchTools = "Pesquisar ferramentas"
 toolsHeader = "Ferramentas"
 viewAllTools = "Ver todas as ferramentas"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nenhuma ferramenta encontrada"
 quickAccess = "ACESSO RÁPIDO"
 searchPlaceholder = "Pesquisar ferramentas..."
 
-[toolPicker.categories]
-advancedTools = "Ferramentas avançadas"
-recommendedTools = "Ferramentas recomendadas"
-standardTools = "Ferramentas padrão"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formatação avançada"
 automation = "Automação"
@@ -9950,16 +10950,31 @@ title = "Utilizadores"
 you = "(você)"
 
 [users.action]
+cancelInvite = "Cancelar convite"
 deleteTeam = "Eliminar equipa"
 disableMfa = "Repor MFA"
 move = "Mover para equipa"
 reinstate = "Reintegrar"
 remove = "Remover da organização"
+removeTeam = "Remover da equipa"
 rename = "Renomear equipa"
 resetPw = "Repor palavra-passe"
 suspend = "Suspender"
 unlock = "Desbloquear conta"
 
+[users.activity]
+daysAgo = "há {{count}} d"
+hoursAgo = "há {{count}} h"
+justNow = "Agora mesmo"
+minutesAgo = "há {{count}} min"
+monthsAgo_one = "há {{count}} mês"
+monthsAgo_other = "há {{count}} meses"
+never = "Nunca"
+weeksAgo_one = "há {{count}} semana"
+weeksAgo_other = "há {{count}} semanas"
+yearsAgo_one = "há {{count}} ano"
+yearsAgo_other = "há {{count}} anos"
+
 [users.cap]
 addProcessor = "+ Processador"
 approver = "Aprova política"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processador"
 
 [users.confirm]
+cancelInviteBody = "Cancelar o convite para {{email}}? A pessoa não poderá aderir com a ligação atual."
+cancelInviteTitle = "Cancelar convite"
 deleteTeamBody = "Eliminar a equipa {{name}}? A equipa tem de estar vazia primeiro — mova os seus membros para outra equipa e esta não pode continuar a ser proprietária de quaisquer configurações de integração."
 deleteTeamTitle = "Eliminar equipa"
 disableMfaBody = "Remover a inscrição MFA de {{name}}? Será configurada novamente no próximo início de sessão, se necessário."
 disableMfaTitle = "Repor MFA"
 removeBody = "Remover permanentemente {{name}} da organização? Esta ação não pode ser anulada."
+removeTeamBody = "Remover {{name}} da equipa? A pessoa mantém a conta, mas perde o acesso aos recursos desta equipa."
 removeTitle = "Remover membro"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nome de utilizador"
 usernameError = "O nome de utilizador deve ter pelo menos 3 caracteres"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Convidado por {{who}}"
+cancel = "Cancelar"
+count = "{{count}} pendentes"
+desc = "Pessoas convidadas que ainda não aderiram. Ocupam um lugar até aceitarem."
+expiresInDays_one = "Expira em {{count}} dia"
+expiresInDays_other = "Expira em {{count}} dias"
+expiresToday = "Expira hoje"
+title = "Convites pendentes"
+
 [users.loadError]
 description = "Ocorreu um erro ao contactar o backend, ou não tem acesso. Tente novamente."
 title = "Não foi possível carregar os membros"
@@ -10212,9 +11240,11 @@ title = "Anexos"
 
 [viewer.bookmarks]
 bookmarkTitle = "Título do marcador"
+bookmarkTitleRequired = "O título do marcador é obrigatório"
 closeSidebar = "Fechar barra lateral de marcadores"
 collapseAll = "Recolher todos os marcadores"
 expandAll = "Expandir todos os marcadores"
+searchPlaceholder = "Pesquisar marcadores"
 
 [viewer.comments]
 addComment = "Adicionar comentário"
@@ -10605,30 +11635,6 @@ title = "Texto da Marca de Água"
 image = "Imagem"
 text = "Texto"
 
-[wetSignature.tooltip]
-header = "Métodos de criação de assinatura"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Personalize a cor e a espessura da caneta"
-bullet2 = "Limpe e volte a desenhar até ficar satisfeito"
-bullet3 = "Funciona em dispositivos táteis (tablets, telemóveis)"
-description = "Crie uma assinatura manuscrita usando o rato ou o ecrã tátil. Ideal para assinaturas pessoais e autênticas."
-title = "Desenhar Assinatura"
-
-[wetSignature.tooltip.type]
-bullet1 = "Escolha entre vários tipos de letra"
-bullet2 = "Personalize o tamanho e a cor do texto"
-bullet3 = "Perfeito para assinaturas normalizadas"
-description = "Gere uma assinatura a partir de texto escrito. Rápido e consistente, adequado para documentos empresariais."
-title = "Escrever Assinatura"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Suporta PNG, JPG e outros formatos de imagem"
-bullet2 = "Recomendam-se fundos transparentes para melhores resultados"
-bullet3 = "A imagem será redimensionada para ajustar à área da assinatura"
-description = "Carregue uma imagem de assinatura pré-criada. Ideal se tiver uma assinatura digitalizada ou o logótipo da empresa."
-title = "Carregar Imagem da Assinatura"
-
 [workbenchBar]
 activeFiles = "Ficheiros ativos"
 annotations = "Anotações"
@@ -10652,6 +11658,7 @@ redact = "Expurgar"
 rotateLeft = "Rodar à esquerda"
 rotateRight = "Rodar à direita"
 ruler = "Régua / Medir"
+rulerSettings = "Definições de escala"
 save = "Guardar"
 saveAll = "Guardar tudo"
 saveAs = "Guardar como"
diff --git a/frontend/editor/public/locales/ro-RO/translation.toml b/frontend/editor/public/locales/ro-RO/translation.toml
index 507215aaea..cfda66c84e 100644
--- a/frontend/editor/public/locales/ro-RO/translation.toml
+++ b/frontend/editor/public/locales/ro-RO/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "fișiere selectate"
 font = "Font"
 fontSizeTooltip = "Dimensiunea textului numărului de pagină în puncte. Numere mai mari creează text mai mare."
 fontTypeTooltip = "Familia de font pentru numerele de pagină. Alegeți în funcție de stilul documentului."
-genericSubmit = "Trimite"
 green = "Verde"
 help = "Ajutor"
-imgPrompt = "Selectează imagini"
 incorrectPasswordMessage = "Parola curentă este incorectă."
 info = "Informații"
 invalidUndoData = "Nu se poate anula: date de operațiune nevalide"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Acord de autentificare"
 logOut = "Deconectare"
 marginTooltip = "Distanța dintre numărul paginii și marginea paginii."
 moreOptions = "Mai multe opțiuni"
-multiPdfPrompt = "Selectează mai multe fișiere PDF (2+)"
 never = "Niciodată"
 no = "Nu"
 noFileSelected = "Niciun fișier selectat. Vă rugăm să încărcați unul."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Ordinea paginilor (Introdu o listă separată prin virgulă d
 pages = "Pagini"
 pageSelectionPrompt = "Selecție Personalizată de Pagini (Introduceți o listă separată prin virgule a numerelor de pagini 1,5,6 sau funcții precum 2n+1) :"
 password = "Parolă"
-pdfPrompt = "Selectează fișiere PDF"
 pin = "Fixare fișier (rămâne activ după rularea instrumentului)"
 pro = "Pro"
 processingComplete = "Fișierul dvs. este gata."
@@ -356,6 +352,7 @@ text = "Aceste permisiuni controlează ce pot face utilizatorii cu PDF-ul. Sunt
 title = "Schimbă Permisiunile"
 
 [addStamp]
+preview = "Previzualizare ștampilă"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Descărcări manuale: faceți clic pe linkuri și plasați fișie
 noLanguages = "Nu s-au găsit limbi tessdata în directorul configurat."
 permissionNotice = "Calea tessdata nu are permisiuni de scriere. Descărcările vor fi deschise în browser; salvați manual fișierele .traineddata în folderul tessdata."
 
+[admin.settings.ai.documents]
+description = "Configurați modelul de embedding și setările de recuperare folosite pentru a răspunde la întrebări despre documente. Se aplică motorului AI la salvare."
+title = "Documente și RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Lăsați necompletat pentru a folosi credențialul de mediu propriu al motorului. Se aplică implementărilor self-hosted cu un singur motor."
+generic = "Cheie API pentru embedding"
+openai = "Cheie API OpenAI"
+setPlaceholder = "Salvată - lăsați necompletat pentru a păstra cheia curentă"
+voyageai = "Cheie API VoyageAI"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "URL de bază al endpoint-ului de embeddings compatibil OpenAI / Ollama, de ex. http://ollama:11434/v1. Trebuie să indice către un endpoint intern de încredere (sensibil la SSRF)."
+label = "URL de bază pentru embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Numele modelului de embedding. Text liber; sugestiile sunt doar indicii."
+label = "Model de embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Furnizor folosit pentru a transforma textul documentului în embeddings vectoriale."
+label = "Furnizor de embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Numărul maxim de căutări de recuperare pe care agentul le poate rula per solicitare."
+label = "Căutări maxime"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Schimbarea modelului de embedding intră în vigoare imediat, dar documentele indexate cu modelul anterior trebuie reindexate pentru ca rezultatele căutării să fie corecte."
+title = "Reindexare necesară"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Dacă ați schimbat modelul de embedding, reindexați documentele existente pentru ca căutarea să folosească noul model."
+
+[admin.settings.ai.documents.topK]
+description = "Numărul celor mai relevante fragmente recuperate per căutare."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Conectați Stirling la motorul Python AI și alegeți ce capabilități AI sunt expuse. Modificările se aplică la repornire."
+title = "Motor AI"
+
+[admin.settings.ai.general.capabilities]
+description = "Activați sau dezactivați funcții AI individuale. Funcțiile dezactivate sunt ascunse în aplicație."
+title = "Capabilități"
+
+[admin.settings.ai.general.enabled]
+description = "Comutator principal. Când este dezactivat, nu sunt disponibile instrumente AI, agenți sau apeluri către motor."
+label = "Activați AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Asistent conversațional pentru lucrul cu PDFs."
+label = "Asistent chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Clasificați automat documentele după tip sau conținut."
+label = "Clasificarea documentelor"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generați un PDF nou (de ex. din HTML) printr-un agent AI."
+label = "Creați PDF din prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Puneți întrebări și primiți răspunsuri bazate pe un document încărcat."
+label = "Întrebări despre documente"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Revizuiți documentele pentru erori matematice și numerice."
+label = "Auditor matematic"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Adăugați comentarii de revizuire și adnotări generate de AI la un PDF."
+label = "Agent de comentarii PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Timeout pentru operațiuni de agent mai complexe, cum ar fi generarea documentelor."
+label = "Timeout pentru rulări lungi (secunde)"
+
+[admin.settings.ai.general.note]
+body = "Motorul AI rulează ca serviciu separat. Secretul său partajat"
+body2 = "este setat printr-o variabilă de mediu a containerului. Cheile API ale furnizorilor pot fi introduse pe aceste pagini sau furnizate ca variabile de mediu ale motorului; cheile introduse aici sunt trimise către motor la salvare."
+title = "Despre motorul AI"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Timeout pentru răspunsurile chat transmise în flux (token cu token)."
+label = "Timeout stream (secunde)"
+
+[admin.settings.ai.general.test]
+button = "Testați conexiunea"
+failBody = "Motorul AI nu a răspuns. Verificați URL-ul, dacă containerul motorului rulează și dacă AI este activat (este necesară o repornire după activare)."
+failTitle = "Motor AI inaccesibil"
+okBody = "Motorul AI a răspuns la o verificare de sănătate."
+okTitle = "Motor AI accesibil"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Timeout pentru solicitările AI standard către motor."
+label = "Timeout solicitare (secunde)"
+
+[admin.settings.ai.general.url]
+description = "URL intern al motorului Python AI, de ex. http://stirling-pdf-engine:5001."
+label = "URL motor AI"
+
+[admin.settings.ai.limits]
+description = "Măsuri de control pentru cât de mult lucru pot face solicitările AI și câte rulează concomitent. Se aplică motorului AI la salvare."
+title = "Limite și performanță"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Măsură de control: respinge solicitările AI al căror text extras depășește această lungime."
+label = "Număr maxim de caractere per solicitare"
+
+[admin.settings.ai.limits.maxPages]
+description = "Măsură de control: respinge solicitările AI peste acest număr de pagini PDF."
+label = "Număr maxim de pagini per solicitare"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Numărul maxim de apeluri simultane către model în desfășurare în întregul motor."
+label = "Concurență maximă model"
+
+[admin.settings.ai.models]
+description = "Alegeți furnizorul LLM și modelele inteligente/rapide folosite de motorul AI. Se aplică motorului AI la salvare."
+title = "Modele și furnizori"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Cheie API Anthropic"
+description = "Lăsați necompletat pentru a folosi credențialul de mediu propriu al motorului. Se aplică implementărilor self-hosted cu un singur motor."
+generic = "Cheie API"
+openai = "Cheie API OpenAI"
+setPlaceholder = "Salvată - lăsați necompletat pentru a păstra cheia curentă"
+
+[admin.settings.ai.models.baseUrl]
+description = "URL de bază al endpoint-ului compatibil OpenAI / Ollama, de ex. http://ollama:11434/v1."
+label = "URL de bază furnizor"
+warning = "URL-ul de bază trebuie să indice către un endpoint intern de încredere. Motorul va face solicitări server-side către acesta, deci o valoare nefiabilă este sensibilă la SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Numărul maxim de token-uri de ieșire pentru modelul rapid."
+label = "Token-uri maxime model rapid"
+
+[admin.settings.ai.models.fastModel]
+description = "Model mai ieftin și mai rapid pentru sarcini ușoare. Text liber; sugestiile sunt doar indicii."
+label = "Model rapid"
+
+[admin.settings.ai.models.provider]
+description = "Cu ce furnizor LLM comunică motorul."
+label = "Furnizor"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Numărul maxim de token-uri de ieșire pentru modelul inteligent."
+label = "Token-uri maxime model inteligent"
+
+[admin.settings.ai.models.smartModel]
+description = "Model cu capabilități ridicate pentru raționament complex. Text liber; sugestiile sunt doar indicii."
+label = "Model inteligent"
+
+[admin.settings.ai.saved]
+body = "Modificările sunt trimise automat către motorul AI."
+bodyNoPush = "Setări salvate. Acestea se vor aplica data viitoare când motorul AI își preia configurația."
+title = "Setări AI salvate"
+
 [admin.settings.badge]
 clickToUpgrade = "Faceți clic pentru a vedea detaliile planului"
 
@@ -938,6 +1094,25 @@ label = "Regenerare la pornire"
 description = "Numărul de zile pentru care certificatul va fi valabil"
 label = "Valabilitate certificat (zile)"
 
+[admin.settings.folderAccess]
+description = "Directoare din care sursele de folder și ieșirile de folder au permisiunea să citească și în care să scrie. Aceasta este o limită de securitate: automatizările nu pot fi niciodată direcționate către o cale de server din afara acestei liste."
+securityNote = "Lăsați necompletat pentru a dezactiva complet sursele și ieșirile de folder. Directorul de configurare propriu al Stirling este întotdeauna interzis."
+title = "Acces la foldere"
+
+[admin.settings.folderAccess.implied]
+description = "Aceste directoare gestionate de Stirling sunt întotdeauna permise și nu pot fi modificate aici."
+serverStorage = "Stocare fișiere server"
+title = "Permise întotdeauna"
+watchedFolder = "Folder monitorizat pentru pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Adăugați"
+empty = "Nu este permis niciun folder. Sursele și ieșirile de folder sunt dezactivate în prezent."
+hint = "Introduceți căi absolute, de exemplu /data/inbox."
+label = "Rădăcini de foldere permise"
+placeholder = "/data/inbox"
+remove = "Eliminați rădăcina folderului"
+
 [admin.settings.general]
 description = "Configurați setările aplicației la nivel de sistem, inclusiv branding și comportament prestabilit."
 system = "Sistem"
@@ -1842,6 +2017,15 @@ export = "Export"
 accessDenied = "Acces refuzat"
 insufficientPermissions = "Nu aveți permisiunea de a efectua această acțiune."
 
+[auth.callback]
+completing = "Se finalizează autentificarea"
+invalidToken = "Autentificarea OAuth a eșuat - token nevalid."
+missingToken = "Autentificarea OAuth a eșuat - nu s-a primit niciun token."
+oauthFailed = "Autentificarea OAuth a eșuat. Încercați din nou."
+pleaseWait = "Așteptați cât timp finalizăm autentificarea."
+signedOut = "Ați fost deconectat. Autentificați-vă din nou."
+windowMayClose = "Puteți închide această fereastră după finalizare."
+
 [auth.displayName]
 guest = "Invitat"
 user = "Utilizator"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Asigură documentele PDF prin eliminarea conținutului pot
 description = "Acest instrument va redenumi automat fișierele PDF pe baza conținutului lor. Analizează documentul pentru a găsi cel mai potrivit titlu din text."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Rotire automată"
+tags = "rotire automată,remediere orientare,cu susul în jos,lateral,îndreptare,orientare,detectare orientare,corectare rotire,orientare automată,scanat,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Prag de încredere"
+
+[autoRotate.detectionMode]
+auto = "Automat"
+osd = "Doar OCR"
+text = "Doar text"
+title = "Metodă de detectare"
+
+[autoRotate.error]
+failed = "A apărut o eroare la rotirea automată a PDF-ului."
+
+[autoRotate.inferUndetected]
+title = "Rotiți paginile cu încredere scăzută pentru potrivire"
+
+[autoRotate.report]
+applied = "{{degrees}}° CW"
+confidenceValue = "Încredere {{value}}"
+noChange = "Nicio modificare"
+pageLabel = "Pagina {{number}}"
+summary = "{{rotated}} din {{total}} pagini rotite, {{unchanged}} lăsate neschimbate"
+title = "Raport de detectare"
+
+[autoRotate.report.method]
+inferred = "Potrivit"
+none = "Omis"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Sub prag"
+blankPage = "Pagina este goală"
+inferredFromDocument = "La fel ca celelalte pagini"
+noDominantDirection = "Direcții de text mixte"
+osdFailed = "Nu s-a găsit text lizibil"
+osdNoVerdict = "Nu s-a putut determina orientarea corectă"
+tesseractUnavailable = "OCR nu este instalat"
+tooFewGlyphs = "Prea puțin text"
+
+[autoRotate.results]
+title = "Rezultate rotire automată"
+
+[autoRotate.settings]
+title = "Setări"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Cât de sigură trebuie să fie verificarea înainte ca o pagină să fie rotită. Reduceți pentru a roti mai multe pagini, creșteți pentru a lăsa mai multe pagini neatinse."
+title = "Prag de încredere"
+
+[autoRotate.tooltip.description]
+text = "Determină orientarea corectă a fiecărei pagini și o rotește corespunzător. Paginile care sunt deja drepte sunt lăsate neschimbate."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automat citește mai întâi textul de pe pagină, apoi analizează pagina ca imagine dacă nu este suficient. Doar text omite verificarea imaginii, fiind cel mai rapid pentru documentele care nu au fost scanate niciodată. Doar OCR tratează fiecare pagină ca imagine."
+title = "Metodă de detectare"
+
+[autoRotate.tooltip.header]
+title = "Rotire automată"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Paginile goale sau aproape goale nu pot fi verificate singure. Când toate paginile care au putut fi citite necesită aceeași rotire, aceste pagini sunt rotite pentru a se potrivi cu ele."
+title = "Rotiți paginile cu încredere scăzută pentru potrivire"
+
 [autoSizeSplitPDF]
 tags = "pdf,împarte,document,organizare"
 
@@ -2189,33 +2440,6 @@ keywords = "Cuvinte cheie: odd, even"
 numbers = "Numere/intervale: 5, 10-20"
 progressions = "Progresii: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipuri de certificate"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Gestionat de administratorii de sistem"
-bullet2 = "Partajat între utilizatorii autorizați"
-bullet3 = "Reprezintă identitatea companiei, nu pe cea individuală"
-bullet4 = "Ideal pentru: Documente oficiale, semnături de echipă"
-description = "Un certificat partajat furnizat de organizația dvs. Utilizat pentru autoritate de semnare la nivel de companie."
-title = "Certificat al organizației"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generat automat la prima utilizare"
-bullet2 = "Asociat contului dvs. de utilizator"
-bullet3 = "Nu poate fi partajat cu alți utilizatori"
-bullet4 = "Ideal pentru: Documente personale, responsabilitate individuală"
-description = "Un certificat generat automat, unic pentru contul dvs. de utilizator. Potrivit pentru semnături individuale."
-title = "Certificat personal"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Necesită fișier P12/PFX și parolă"
-bullet2 = "Poate fi emis de Autorități de Certificare externe"
-bullet3 = "Nivel de încredere mai ridicat pentru documente legale"
-bullet4 = "Ideal pentru: Contracte cu valoare legală, validare externă"
-description = "Utilizați propriul fișier de certificat PKCS#12. Oferă control complet asupra proprietăților certificatului."
-title = "Încărcați P12 personalizat"
-
 [certSign]
 awaitingSignatures = "În așteptarea semnăturilor"
 chooseCertificate = "Alegeți fișierul certificatului"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Sursa certificatului"
 upload = "Încărcare"
 
-[certSign.tooltip.header]
-title = "Despre gestionarea semnăturilor"
-
-[certSign.tooltip.overview]
-bullet1 = "Verificați semnăturile existente și valabilitatea lor"
-bullet2 = "Vizualizați informații detaliate despre semnatari și certificate"
-bullet3 = "Adăugați semnături digitale noi pentru a vă securiza documentele"
-bullet4 = "Suport pentru fișiere multiple, cu navigare facilă"
-text = "Acest instrument vă permite să verificați dacă PDF-urile sunt semnate digital și să adăugați semnături digitale noi. Semnăturile digitale dovedesc cine a creat sau aprobat un document și arată dacă a fost modificat după semnare."
-title = "Ce poate face acest instrument?"
-
-[certSign.tooltip.signing]
-bullet1 = "Suportă formatele PEM, PKCS12, JKS și certificat de server"
-bullet2 = "Opțiune de afișare sau ascundere a semnăturii în PDF"
-bullet3 = "Adăugați motiv, locație și numele semnatarului"
-bullet4 = "Alegeți pagina pe care să plasați semnăturile vizibile"
-bullet5 = "Folosiți certificatul serverului pentru opțiunea simplă „Semnează cu Stirling-PDF”"
-text = "Pentru a semna un PDF, aveți nevoie de un certificat digital (precum PEM, PKCS12 sau JKS). Puteți alege ca semnătura să fie vizibilă în document sau invizibilă doar pentru securitate."
-title = "Adăugarea semnăturilor"
-
-[certSign.tooltip.validation]
-bullet1 = "Afișează dacă semnăturile sunt valide sau invalide"
-bullet2 = "Afișează informații despre semnatar și data semnării"
-bullet3 = "Verifică dacă documentul a fost modificat după semnare"
-bullet4 = "Poate folosi certificate personalizate pentru verificare"
-text = "Când verificați semnăturile, instrumentul vă spune dacă sunt valide, cine a semnat documentul, când a fost semnat și dacă documentul a fost schimbat după semnare."
-title = "Verificarea semnăturilor"
-
 [changeCreds]
 changeUsername = "Actualizați numele de utilizator. Veți fi deconectat(ă) după actualizare."
 credsUpdated = "Cont actualizat"
@@ -2824,6 +3020,7 @@ next = "Înainte"
 preview = "Previzualizare"
 previous = "Înapoi"
 refresh = "Reîmprospătați"
+remaining = "Rămas"
 retry = "Reîncercați"
 save = "Salvează"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Monitorizare avansată"
-allInOneWorkspace = "Spațiu de lucru PDF all-in-one (vizualizator, instrumente și agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Asistență dedicată și SLA-uri"
-fasterThroughput = "Debit de procesare de 10x mai rapid"
-fullyPrivateFiles = "Fișiere complet private"
-largeFileProcessing = "Procesare fișiere mari"
-orgWideAccess = "Control de acces la nivel de organizație"
-premiumAiModels = "Modele AI Premium"
-prioritySupport = "Asistență prioritară"
-privateDocCloud = "Cloud de documente privat"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Acces API securizat"
-standardThroughput = "Debit standard"
-unlimitedApiAccess = "Acces API nelimitat"
-unlimitedSeats = "Locuri nelimitate"
-
 [crop]
 autoCrop = "Decupare automată a spațiilor albe"
 noFileSelected = "Selectați un fișier PDF pentru a începe decuparea"
@@ -3346,6 +3525,7 @@ message = "Nu s-a putut seta gestionarul PDF implicit"
 title = "Eroare"
 
 [defaultApp.prompt]
+dontRemind = "Nu-mi mai reaminti"
 message = "Fă din Stirling PDF aplicația implicită pentru deschiderea fișierelor PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Personalizează grupurile"
 dropHint = "Deschide fișiere pentru a începe"
 dropToAdd = "Drop files to add"
 expand = "Extinde bara laterală"
-files = "Fișiere"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nu este configurat"
 leaveMyFiles = "Părăsiți Fișierele mele"
+library = "Bibliotecă PDF"
 myFiles = "Fișierele mele"
 noFiles = "Încă nu există fișiere"
 openFileManager = "Deschide managerul de fișiere"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Adaugă"
-addLabel = "Adaugă o etichetă…"
-categoryIconAria = "Alege o pictogramă pentru {{name}}"
-createCategory = "Creează categorie"
-delete = "Șterge categoria"
 done = "Gata"
-hide = "Ascunde categoria"
-newCategory = "Nume categorie nouă…"
-removeLabel = "Elimină {{name}}"
-rename = "Redenumește"
 reset = "Resetează la valorile implicite"
-search = "Caută etichete…"
-show = "Afișează categoria"
 subtitle = "Grupează fișierele în categorii părinte. Adaugă etichete existente sau noi într-o categorie, redenumește-o sau creează una proprie. Fișierele care nu se află în niciuna dintre categoriile tale apar sub „Altele”."
 title = "Categorii bară laterală"
 
@@ -3808,6 +3977,7 @@ refresh = "Reîmprospătați de pe server"
 remove = "Ștergeți"
 removeVersion = "Eliminați această versiune"
 rename = "Redenumiți"
+renamed = "Redenumit"
 renameFolder = "Redenumiți folderul"
 resizeFolderTree = "Redimensionați arborele de foldere (tastele săgeți, Shift pentru pași mai mari; dublu-clic pentru autofit)"
 save = "Salvați"
@@ -3910,9 +4080,7 @@ count = "Fișiere"
 folder = "Folder"
 labels = "Etichete"
 modified = "Modificat"
-name = "Nume"
 size = "Dimensiune"
-toolHistoryAtVersion = "Lanț de instrumente cumulativ"
 totalSize = "Dimensiune totală"
 type = "Tip"
 versionHistory = "Evoluție versiuni"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Totul salvat"
+extractCsvError = "Extragerea CSV a eșuat"
+extractXlsxError = "Extragerea XLSX a eșuat"
 flattenAfterFilling = "Aplatizați după completare"
+requiredAbbreviation = "obl"
+requiredFieldsError = "Completați toate câmpurile obligatorii"
 rescanFields = "Rescanați câmpurile"
 rescanFormFields = "Rescanați câmpurile formularului"
 save = "Salvați"
+saveShortcut = "Ctrl+S pentru salvare"
+unsavedChanges = "Modificări nesalvate"
 
 [formFill.sidebar]
 close = "Închideți bara laterală"
@@ -4309,6 +4484,11 @@ desc = "Redenumește automat un fișier PDF pe baza antetului detectat"
 tags = "auto-detectare,bazat-pe-antet,organizează,re-etichetează"
 title = "Redenumire automată fișier PDF"
 
+[home.autoRotate]
+desc = "Detectați orientarea fiecărei pagini și rotiți-o automat în poziție dreaptă."
+tags = "rotire automată,remediere orientare,cu susul în jos,lateral,îndreptare,orientare,detectare orientare,corectare rotire,orientare automată,scanat,OSD"
+title = "Rotire automată"
+
 [home.autoSizeSplitPDF]
 tags = "auto,împarte,dimensiune"
 title = "Auto-împărțire mărime/pagini"
@@ -4608,13 +4788,13 @@ hint = "Încărcați un fișier imagine PNG, JPG, SVG sau altul pentru a-l plasa
 label = "Încărcați imagine"
 placeholder = "Selectați fișierul imagine"
 
-[imageToPdf]
-tags = "conversie,img,jpg,poză,fotografie"
-
 [imageToPDF]
 header = "Imagine în PDF"
 title = "Imagine în PDF"
 
+[imageToPdf]
+tags = "conversie,img,jpg,poză,fotografie"
+
 [infoBanner]
 dismiss = "Închideți"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Ați fost invitat!"
 
 [landing]
 addFiles = "Adăugați fișiere"
-heroSubtitle = "Trageți și plasați sau adăugați un PDF existent pentru a începe."
 mobileUpload = "Încărcare de pe mobil"
 openFromComputer = "Deschide de pe calculator"
 uploadFromComputer = "Încărcați de pe calculator"
-workbenchEmptyStateHero = "Plasează un PDF oriunde"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Autentificare"
 magicLinkSent = "Linkul magic a fost trimis la {{email}}! Verificați emailul și faceți clic pe link pentru a vă autentifica."
 mfaCode = "Cod de autentificare"
 mfaRequired = "Este necesar codul de autentificare cu doi factori"
+noAccount = "Nu aveți un cont?"
 or = "Sau"
 password = "Parolă"
 passwordChangedSuccess = "Parola a fost schimbată cu succes! Autentificați-vă cu noua parolă."
@@ -4715,26 +4894,10 @@ signInWith = "Autentificați-vă cu"
 title = "Autentificare"
 unexpectedError = "Eroare neașteptată: {{message}}"
 updatePassword = "Actualizați parola"
-useEmailInstead = "Autentificare cu email"
 useMagicLink = "Folosiți link magic în schimb"
 username = "Nume utilizator"
 youAreLoggedIn = "Sunteți autentificat!"
 
-[login.slides.edit]
-alt = "Editați PDF-uri"
-subtitle = "Cu peste o duzină de instrumente pentru a redacta, semna, citi și manipula PDF-uri, veți găsi cu siguranță ceea ce căutați."
-title = "Editați PDF-uri pentru a afișa/proteja informațiile dorite"
-
-[login.slides.overview]
-alt = "Prezentare generală Stirling PDF"
-subtitle = "O suită cloud axată pe confidențialitate pentru PDF-uri, care vă permite să convertiți, semnați, redactați și gestionați documente, plus peste 50 de alte instrumente puternice."
-title = "Un centru unic pentru toate nevoile PDF."
-
-[login.slides.secure]
-alt = "Securizați PDF-uri"
-subtitle = "Adăugați parole, redactați conținut și gestionați certificate cu ușurință."
-title = "Protejați informațiile sensibile din PDF-urile dvs."
-
 [margin]
 large = "Mare"
 medium = "Mediu"
@@ -4976,6 +5139,7 @@ pinButton = "Puteți folosi butonul <strong>Fixează</strong> dacă preferați c
 results = "După ce instrumentul a terminat rularea, pasul de <strong>Revizuire</strong> va afișa o previzualizare a rezultatelor în acest panou și vă va permite să anulați operațiunea sau să descărcați fișierul."
 runButton = "După ce instrumentul a fost configurat, acest buton vă permite să rulați instrumentul pe toate PDF-urile selectate."
 selectCropTool = "Să selectăm instrumentul <strong>Decupare</strong> pentru a demonstra cum se utilizează unul dintre instrumente."
+stepOf = "Pasul {{current}} din {{total}}"
 toolInterface = "Aceasta este interfața instrumentului <strong>Decupare</strong>. După cum vedeți, nu este prea mult acolo deoarece încă nu am adăugat fișiere PDF cu care să lucrăm."
 workbench = "Acesta este <strong>Bancul de lucru</strong> - zona principală în care vizualizați și editați PDF-urile."
 wrapUp = "Totul este pregătit! Ați învățat despre zonele principale ale aplicației și cum să le utilizați. Faceți clic pe butonul <strong>Ajutor</strong> oricând doriți pentru a vedea din nou acest tur."
@@ -4988,6 +5152,26 @@ showMeAround = "Arată-mi"
 skipForNow = "Sari peste deocamdată"
 skipTheTour = "Sari peste tur"
 
+[onboarding.checklist]
+dismiss = "Închideți"
+title = "Configurați Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Rulați Stirling nativ pe computerul dvs."
+title = "Descărcați Stirling pentru Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Colaborați cu echipa dvs."
+title = "Invitați membri ai echipei"
+
+[onboarding.checklist.shareAnalytics]
+description = "Ajutați la îmbunătățirea Stirling"
+title = "Partajați date anonime de utilizare"
+
+[onboarding.checklist.takeTour]
+description = "Vedeți cum funcționează Stirling într-un tur rapid"
+title = "Faceți turul"
+
 [onboarding.desktopInstall]
 body = "Stirling funcționează cel mai bine ca aplicație desktop. O poți folosi offline, accesezi documentele mai rapid și faci editări local pe computer."
 selectOs = "Selectează sistemul de operare"
@@ -4996,7 +5180,21 @@ titleWithOs = "Descărcare pentru {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Cod de autentificare"
+description = "Securizați-vă contul conectând o aplicație de autentificare. Scanați codul QR sau introduceți cheia de configurare, apoi confirmați codul din 6 cifre pentru a finaliza."
+enable = "Activați MFA"
+enableError = "Nu se poate activa autentificarea cu doi factori. Verificați codul și încercați din nou."
+enterCode = "Introduceți codul din 6 cifre din aplicația dvs."
+enterCodeError = "Introduceți codul de autentificare pentru a continua."
+logout = "Deconectare"
+openAuthenticator = "Deschideți Google Authenticator, Authy sau 1Password."
 qrCodeLoading = "Se generează codul QR…"
+regenerateQrCode = "Regenerați codul QR"
+scanQrCode = "Scanați codul QR sau introduceți cheia de configurare de mai jos."
+setupError = "Nu se poate porni configurarea cu doi factori. Încercați din nou."
+setupKey = "Cheie de configurare (introducere manuală)"
+stepByStep = "Pas cu pas"
+success = "MFA a fost activat. Acum puteți continua."
+title = "Configurare autentificare multi-factor"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "După ce activezi modul de autentificare, poți gestiona utilizatori, configura setări și monitoriza starea serverului. Primele <strong>{{freeTierLimit}}</strong> persoane de pe serverul tău folosesc Stirling gratuit."
@@ -5005,6 +5203,11 @@ adminTitle = "Prezentare admin"
 userBody = "Invite colegi, atribuie roluri și ține documentele organizate într-un spațiu de lucru sigur. Activează modul de autentificare când ești pregătit să treci dincolo de utilizarea solo."
 userTitle = "Prezentare plan"
 
+[onboarding.processorIntro]
+body = "Stirling rulează acum <strong>Politici</strong> — reguli automate care clasifică, securizează și procesează fiecare document pe măsură ce sosește. Configurați-le și monitorizați rulările în <strong>Processor</strong>."
+cta = "Consultați Processor"
+title = "Consultați Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "An plătit în avans"
+
+[payg.prepaid.banner]
+exhausted = "Capacitatea dvs. plătită în avans este epuizată; facturarea contorizată a fost reluată. Reîncărcați pentru a păstra reducerea."
+expiring_one = "Anul dvs. plătit în avans se încheie peste {{count}} zi. Capacitatea neutilizată expiră — reîncărcați pentru a începe un an nou."
+expiring_other = "Anul dvs. plătit în avans se încheie peste {{count}} zile. Capacitatea neutilizată expiră — reîncărcați pentru a începe un an nou."
+low = "Ați ajuns la {{pct}}% din capacitatea plătită în avans. Reîncărcați oricând pentru a menține procesarea neîntreruptă."
+
+[payg.prepaid.card]
+subtitle = "Folosită înainte de facturarea contorizată și în afara plafonului dvs. de cheltuieli."
+title = "Capacitate plătită în avans"
+
+[payg.prepaid.meter]
+capSuffix = "din {{total}} credite plătite în avans"
+expires = "Expiră {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Epuizată"
+healthy = "Mai este suficient"
+low = "Se epuizează"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Lipiți cheia de licență din e-mail"
 success = "Licență activată!"
 successMessage = "Licența a fost activată cu succes. Puteți închide această fereastră."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "aplicată"
-enforcing = "Se aplică..."
-failed = "Aplicarea a eșuat"
 outputsUnavailable = "Rezultatele politicii nu mai sunt disponibile pentru descărcare."
 partialOutputsUnavailable = "Unele rezultate ale politicii nu mai sunt disponibile pentru descărcare."
-retrying = "Ocupat, se reîncearcă..."
 runNotFound = "Rularea aplicării nu a mai putut fi găsită."
-step = "pas {{current}}/{{total}}"
 timedOut = "Aplicarea a expirat înainte ca rularea să se finalizeze."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Închide"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Se aplică {{names}}"
 applyingProgress = "Se aplică {{names}} ({{done}} din {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} din {{total}} fișier(e) nu au putut fi procesate ș
 failureTitle = "Exportat fără aplicare completă"
 printPolicyAppliedBody = "Acest PDF a fost actualizat pentru a respecta o politică. Revizuiți modificările, apoi imprimați din nou."
 printPolicyAppliedTitle = "Politică aplicată înainte de imprimare"
-queued = "+{{count}} în așteptare"
 successTitle = "{{names}} aplicate"
 summaryMore = "{{first}}, {{second}} și încă {{more}}"
 summaryTwo = "{{first}} și {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Se aplică înainte de conversie"
-default = "Se aplică"
-export = "Se aplică înainte de export"
-input = "Se aplică la import"
-print = "Se aplică înainte de imprimare"
-
-[policies.field]
-accessLog = "Jurnal de acces"
-archiveAfter = "Arhivează după"
-auditTrail = "Pistă de audit"
-belowThreshold = "Sub prag"
-destination = "Destinație"
-frameworks = "Frameworks"
-immutableHold = "Reținere imuabilă"
-keepFor = "Păstrează timp de"
-minConfidence = "Încredere minimă"
-notify = "Notifică la rutare"
-onViolation = "Când nu este conform"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Adaugă"
-addPlaceholder = "Adaugă o etichetă…"
-customNote = "Personalizat pentru echipa ta."
-defaultNote = "Se folosește valoarea implicită integrată, partajată cu echipa ta."
-duplicate = "„{{name}}” există deja."
-edit = "Editează etichetele"
-empty = "Încă nu există etichete."
-export = "Exportă JSON"
-iconAria = "Alege o pictogramă pentru {{name}}"
-import = "Importă JSON"
-importError = "Nu s-a putut importa acel fișier."
-managedNote = "Etichetele echipei sunt gestionate de liderul echipei."
-modalSubtitle = "Partajate cu întreaga ta echipă. Clasificatorul alege etichetele care se potrivesc fiecărui document."
-modalTitle = "Etichete de clasificare"
-pickIcon = "Folosește pictograma {{label}}"
-removeAria = "Elimină {{name}}"
-resetToDefault = "Resetează la implicit"
-saveForTeam = "Salvează pentru echipă"
-saving = "Se salvează…"
-sectionLabel = "Etichete de clasificare"
-startFromScratch = "Începe de la zero"
-teamCount = "etichete de echipă"
-tooLong = "Etichetele pot avea cel mult {{max}} caractere."
-ungrouped = "Negrupate"
-view = "Vezi etichetele"
+categoryCount = "categorii"
+hideCategory = "Ascundeți categoria"
+labelCount = "etichete"
+sharedNote = "Aceste etichete sunt integrate și partajate în întreaga echipă."
+showCategory = "Afișați categoria"
 
 [policies.pii]
 account = "Numere de cont (etichetate)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Numere de rutare din SUA (ABA)"
 ssn = "Numere de securitate socială"
 
-[policies.settings]
-noneExport = "În prezent, nu se execută politici la export."
-noneUpload = "În prezent, nu se execută politici la upload."
-onExport = "La export"
-onUpload = "La upload"
-reorderHandle = "Trage pentru a reordona"
-runOrderDesc = "Când mai multe politici rulează pe același declanșator, acestea rulează în această ordine — fiecare pe rezultatul politicii anterioare. Trage pentru a reordona."
-title = "Setări politici"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opțiuni politici"
-policySettings = "Setări politici"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Reîncearcă politicile eșuate ({{count}})"
-rowProgress = "{{completed}} din {{total}} fișiere procesate"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Ce este o politică?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Găsește automat și acoperă cu negru detalii sensibile — precum numerele de securitate socială și de card — astfel încât să nu poată fi citite în document."
-sanitize = "Elimină JavaScript ascuns din fișier, astfel încât nimic să nu ruleze automat când cineva îl deschide."
-watermark = "Aplică o marcă vizibilă (de ex. \"Confidențial\") pe fiecare pagină."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Închide"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} se aplică..."
 badgeRan = "Politica {{name}} a rulat pe acest fișier"
+badgeRunning = "{{name}} rulează..."
 blockingAction = "{{action}} blocată în timpul aplicării politicii, te rugăm să aștepți..."
 dismiss = "Închide suprapunerea"
 enforcingTitle = "Se aplică politica..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Vezi fișierul (politica încă se aplică)"
 [policyOption]
 autoRedactPhi = "Anonimizează automat PHI"
 blockExport = "Blochează exportul"
+ccpa = "CCPA"
 contracts = "Contracte"
 documents = "Documente"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plan Editor"
 subscribed = "Plan Processor"
 unlinked = "Neconectat"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Bootstrap din document"
-sectionsAriaLabel = "Secțiuni Agent Builder"
-selectorAriaLabel = "Agenți"
-subtitle = "Proiectează, testează și livrează agenții AI care clasifică, extrag din și rutează documentele tale. Definește scenarii, limitează accesul la instrumente, rulează un set de referință și publică o versiune."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Anulează"
-dropzoneText = "Alege un document exemplu (PDF sau imagine)"
-lead = "Plasează un document exemplu și vom propune scenarii și o schemă de extragere pe care o poți rafina. Nimic nu este publicat până nu îl revizuiești."
-submit = "Bootstrap agent"
-subtitle = "Inițializează un agent nou dintr-un fișier reprezentativ"
-title = "Bootstrap dintr-un document"
-
-[portal.agentBuilder.empty]
-description = "Fă bootstrap unui agent dintr-un document exemplu pentru a-i inițializa scenariile și schema de extragere, apoi rafinează și publică."
-title = "Încă nu există agenți"
-
-[portal.agentBuilder.evals]
-casesPassing = "Cazuri reușite"
-columnCase = "Caz eval"
-columnLatency = "Latență"
-columnResult = "Rezultat"
-fail = "eșec"
-goldenSetPassRate = "Rată de reușită set de referință"
-latencyMs = "{{ms}} ms"
-notRun = "nerulat"
-pass = "reușit"
-passRate = "Rată de reușită"
-runEvals = "Rulează evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals îți transformă scenariile într-un set de referință repetabil. Fă upgrade pentru a captura rata de reușită în timp și a condiționa publicările de aceasta."
-title = "Încă nu există set de referință"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "în seturile de referință"
-activeAgents = "Agenți activi"
-avgPassRate = "Rată medie de reușită eval"
-fleetWide = "la nivelul întregii flote"
-latestPublished = "Ultima publicare"
-scenarios = "Scenarii"
-testCases = "cazuri de test"
-totalDescription_one = "{{count}} în total"
-totalDescription_other = "{{count}} în total"
-
-[portal.agentBuilder.scenarios]
-add = "Adaugă"
-addScenario = "Adaugă scenariu"
-enable = "Activează"
-expectationLabel = "Comportament așteptat"
-expectationPlaceholder = "Ce ar trebui să facă agentul"
-inEval = "în eval"
-mute = "Dezactivează sunetul"
-muted = "fără sunet"
-nameLabel = "Nume"
-namePlaceholder = "de ex. Escaladare conformitate"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenarii"
-tools = "Instrumente"
-versions = "Versiuni"
-
-[portal.agentBuilder.tools]
-broadAccess = "Acces larg"
-deniedHint = "Instrumentele selectate sunt blocate. Toate celelalte rămân apelabile."
-deniedTools = "Instrumente refuzate"
-governanceGate = "Guvernanța instrumentelor este disponibilă în planul Enterprise."
-restricted = "Restricționat"
-restrictedAccess = "Acces restricționat la instrumente"
-restrictedDescription = "Permite fiecare instrument, cu excepția celor pe care le refuzi mai jos."
-
-[portal.agentBuilder.versions]
-current = "curentă"
-historyGate = "Istoricul complet al versiunilor și revenirea sunt disponibile în planul Enterprise."
-publish = "Publică"
-rollBack = "Revino"
-
 [portal.assistant]
 close = "Închide asistentul"
 error = "Nu s-a putut contacta asistentul."
@@ -6365,9 +6346,21 @@ typing = "Tastează"
 loading = "Se încarcă"
 redirectingToEditor = "Se redirecționează către editor..."
 
+[portal.billing.activation]
+maybeLater = "Poate mai târziu"
+title = "Activați Processor"
+
+[portal.billing.activation.payg]
+sub = "Setați o limită lunară. Plătiți pentru ceea ce rulați."
+title = "Plătiți pe măsură ce utilizați"
+
+[portal.billing.activation.prepay]
+badge = "2 luni gratuite"
+sub = "O singură factură, card sau transfer bancar."
+title = "Plătiți un an în avans"
+
 [portal.billing.checkout]
 noClientSecret = "Funcția Edge nu a returnat client_secret."
-subtitle = "Adaugă un card pentru a continua după alocarea gratuită a planului Editor. Stripe se ocupă de restul."
 title = "Activează planul Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Plata ta a reușit, dar activarea durează puțin mai mult decât de obi
 close = "Închide"
 title = "Aproape gata"
 
+[portal.billing.checkout.cap]
+amountAria = "Limită lunară de cheltuieli"
+back = "Înapoi"
+continue = "Continuați către plată"
+error = "Nu s-a putut seta limita de cheltuieli"
+finePrint = "Facturile se emit lunar. Anulați oricând."
+noLimit = "Fără limită"
+note = "Nu sunteți facturat niciodată peste limita dvs. Procesarea doar se întrerupe."
+perMonth = "/ lună"
+title = "Setați limita de cheltuieli"
+
+[portal.billing.checkout.card]
+fields = "Număr card · LL / AA · CVC · ZIP"
+label = "Detalii card"
+note = "Detaliile cardului sunt colectate de Stripe. Stirling nu stochează niciodată PAN sau CVC."
+
 [portal.billing.checkout.error]
 title = "Nu s-a putut porni checkout-ul"
 
@@ -6383,10 +6392,9 @@ body = "Plata ta a fost procesată. Activăm procesarea contorizată pentru inst
 hint = "Te rugăm să păstrezi această fereastră deschisă."
 title = "Se activează planul Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "în portal env pentru a activa checkout-ul în aplicație."
-bodyBefore = "Setează"
-title = "Stripe nu este configurat"
+[portal.billing.checkout.pay]
+limit = "Limită lunară de cheltuieli {{amount}}/lună. Procesarea se întrerupe la atingerea limitei."
+limitNoCap = "Fără limită de cheltuieli. Procesarea nu se va întrerupe. Facturile se emit lunar."
 
 [portal.billing.enterpriseUpsell]
 cta = "Creează oferta ta Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Plan curent"
 freeForever = "Gratuit pentru totdeauna"
 noTeamResolved = "Încă nu este rezolvată nicio echipă în portofelul tău — reîmprospătează și încearcă din nou."
 ownerOnly = "Doar proprietarul echipei poate activa planul Processor."
+payInvoice = "Plătiți factura pentru finalizare"
 planName = "Editor"
 ssoIncluded = "SSO inclus"
 switchOnProcessor = "Activează Processor →"
 unlimitedUsers = "Utilizatori nelimitați"
+viewQuote = "Vizualizați oferta"
 
 [portal.billing.invoices]
 columnAmount = "Sumă"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Solicitări API directe"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizări și pipelines"
 segmentAutomationLabel = "Automatizare"
+sizeMultiplier = "{{formatted}} PDFs au folosit un multiplicator de dimensiune"
+summary = "{{unique}} unice · {{units}} unități contor · {{avg}} medie per PDF"
+summaryNoRate = "{{unique}} unice · {{units}} unități contor"
 unit = "PDF-uri contorizate"
+unitsPending_one = "{{units}} unitate contor în așteptare pentru sincronizare din instanțe conectate"
+unitsPending_other = "{{units}} unități contor în așteptare pentru sincronizare din instanțe conectate"
+
+[portal.billing.prepaid]
+capSuffix = "din {{total}} credite plătite în avans"
+expires = "Expiră {{date}}"
+eyebrow = "Capacitate plătită în avans"
+note = "Folosită înainte de facturarea contorizată și în afara limitei dvs. de cheltuieli."
+topUp = "Reîncărcați"
+
+[portal.billing.prepaid.buy]
+back = "Înapoi"
+calcTitle = "Calculați plata anuală"
+cancel = "Anulați"
+cancelPurchase = "Anulați achiziția"
+close = "Închideți"
+continueToPayment = "Continuați către plată"
+finalise = "Finalizați"
+invoiceErrorTitle = "Nu s-a putut genera factura"
+loadingTitle = "Se încarcă oferta"
+payTitle = "Plătiți pentru anul dvs."
+step = "Pasul {{current}} din {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Schimbați"
+deployRow = "Implementare"
+done = "Gata"
+enterpriseHint = "Aceasta este scară enterprise. La acest volum, tarifele enterprise depășesc orice reducere self-serve. Blocarea tarifului, termeni și o ofertă în câteva minute."
+governanceRow = "Guvernanță"
+governanceValue = "{{label}} · {{count}} politici"
+handlesLabel = "Processor-ul dvs."
+handlesValue = "gestionează {{volume}} credite / lună"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} politici"
+poolCaption = "Un singur pool de {{credits}} credite pentru an. Lunile aglomerate împrumută de la cele ușoare."
+priceLabel = "Anul dvs. · 12 luni la preț de 10"
+rateUnknown = "Vom afișa prețul exact la checkout."
+savings = "Economisiți {{amount}} · 2 luni gratuite."
+sizingRow = "Dimensionare"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Total utilizatori"
+
+[portal.billing.prepaid.consent]
+label = "Înțeleg că atunci când capacitatea mea plătită în avans este epuizată sau expiră după 12 luni, procesarea continuă automat la tariful standard contorizat pay-as-you-go (până la limita mea de cheltuieli), cu excepția cazului în care anulez, și că pot anula oricând din portalul de facturare."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Gestionat de Stirling. Activ în câteva minute."
+cloudValue = "Stirling Cloud · Gestionat"
+selfhost = "Self-hosted"
+selfhostDesc = "Rulează pe infrastructură privată. Același tarif."
+selfhostValue = "Self-hosted · Infrastructură privată"
+
+[portal.billing.prepaid.offer]
+cta = "Revizuiți oferta"
+subtitle = "Plătiți în avans un an de procesare PDF și primiți două luni gratuite, folosite înainte de facturarea contorizată, în afara limitei dvs. de cheltuieli."
+title = "Obțineți 12 luni la preț de 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Numele titularului contului"
+accountNamePlaceholder = "de ex. Jane Smith"
+companyName = "Numele companiei (opțional)"
+companyNamePlaceholder = "de ex. Acme Inc."
+downloadInvoice = "Descărcați factura"
+payOnline = "Plătiți online"
+poNumber = "Număr PO (opțional)"
+poNumberPlaceholder = "de ex. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avansat"
+advancedDesc = "Pipelines gestionează cea mai mare parte a procesării dvs."
+none = "Niciunul"
+noneDesc = "Nu rulați încă pipelines. Activați-le oricând."
+standard = "Standard"
+standardDesc = "Câteva pipelines reprocesază PDFs sosite."
+
+[portal.billing.prepaid.posture]
+essentials = "Esențiale"
+essentialsDesc = "Clasificare, implicit, plus Partajare"
+governed = "Guvernat"
+governedDesc = "Adaugă Securitate și Rutare"
+regulated = "Reglementat"
+regulatedDesc = "Fiecare categorie, incl. Conformitate, Retenție, Ingestie"
+
+[portal.billing.prepaid.review]
+download = "Descărcați oferta (PDF)"
+downloading = "Se pregătește…"
+share = "partajați pentru aprobare"
+
+[portal.billing.prepaid.size]
+compact = "Compact"
+compactDesc = "Fișiere sub 25 MB, fără taxe de date"
+heavy = "Greu"
+heavyDesc = "Scanat sau bogat în imagini, frecvent 50 MB+"
+standard = "Standard"
+standardDesc = "În principal mici, unele scanări peste 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Epuizată"
+healthy = "Mai este suficient"
+low = "Se epuizează"
 
 [portal.billing.spendLimit]
 adjustLimit = "Ajustează limita"
@@ -6494,6 +6608,8 @@ label = "Se estimează că va fi depășit."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Cheltuieli luna aceasta"
+freeRemaining_one = "{{formatted}} PDF gratuit rămas"
+freeRemaining_other = "{{formatted}} PDFs gratuite rămase"
 processed_one = "{{formattedCount}} PDF procesat."
 processed_other = "{{formattedCount}} PDF-uri procesate."
 processedWithRate_one = "{{formattedCount}} PDF procesat, la {{rate}} fiecare."
@@ -6534,6 +6650,350 @@ signature = "semnătură"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Conexiune nouă"
+createTitleFor = "Conectați {{name}}"
+delete = "Ștergeți"
+edit = "Editați"
+editTitle = "Editați conexiunea"
+unsupportedType = "Acest tip de conexiune nu poate fi editat aici."
+
+[portal.connections.categories.advanced]
+description = "Pentru un serviciu pe care încă nu îl suportăm."
+label = "Avansat"
+
+[portal.connections.categories.audit]
+description = "Înregistrați ce s-a întâmplat cu un document, acolo unde auditorii dvs. se uită deja."
+label = "Jurnalizare audit și conformitate"
+
+[portal.connections.categories.notify]
+description = "Anunțați alt sistem că s-a întâmplat ceva."
+label = "Notificare și flux de lucru"
+
+[portal.connections.categories.security]
+description = "Scanați sau etichetați un document înainte să meargă mai departe."
+label = "Securitate și clasificare"
+
+[portal.connections.categories.signing]
+description = "Trimiteți un document pentru semnare sau notarizare."
+label = "Semnătură electronică și notarizare"
+
+[portal.connections.categories.storage]
+description = "Unde ajung documentele procesate - un bucket, un drive, un tichet sau o pagină."
+label = "Fișier și atașare"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling stochează acest lucru criptat și nu îl mai afișează niciodată."
+label = "Token de acces"
+
+[portal.connections.commonFields.apiKey]
+label = "Cheie API"
+
+[portal.connections.commonFields.apiToken]
+label = "Token API"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Pașii care folosesc această conexiune pot apela doar căi sub acest URL, niciodată alt host."
+label = "URL server"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Parolă"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Nume utilizator"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Lipiți URL-ul pe care vi l-a dat serviciul. Pot fi apelate doar căile de sub acesta."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Numele conexiunii"
+namePlaceholder = "de ex. Producție"
+
+[portal.connections.picker]
+cancel = "Anulați"
+createNew = "Conexiune nouă..."
+placeholder = "Selectați o conexiune"
+save = "Salvați conexiunea"
+
+[portal.connections.picker2]
+back = "Schimbați integrarea"
+heading = "Ce doriți să conectați?"
+noResultsBody = "Încă nu îl suportăm - spuneți-ne despre el și vom analiza adăugarea sa."
+noResultsTitle = "Nimic nu corespunde \"{{query}}\""
+searchPlaceholder = "Căutați integrări - încercați \"sign\", \"ocr\" sau un nume de produs"
+
+[portal.connections.types.api]
+description = "Apelați orice HTTP API dintr-o politică. Alegeți URL-ul, autentificarea și payload-ul."
+label = "API personalizat"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentificare"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Nume utilizator și parolă"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token într-un header personalizat"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Niciuna"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Autentificare pentru un token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Pașii care folosesc această conexiune pot apela doar căi sub acest URL, niciodată alt host."
+label = "URL de bază"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Nume header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Cale de autentificare"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Parolă"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Dacă API răspunde cu un link de descărcare, doar aceste host-uri pot fi preluate. Separați cu virgule. Lăsați necompletat pentru a permite doar host-ul propriu al URL-ului de bază."
+label = "Host-uri de rezultat permise"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Trimiteți token-ul ca acest header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Header-ul de răspuns în care apelul de autentificare returnează token-ul, de ex. X-Auth-Token."
+label = "Header răspuns token"
+
+[portal.connections.types.api.fields.username]
+label = "Nume utilizator"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Scanați documentele pentru malware pe un server pe care îl rulați - nimic nu părăsește rețeaua dvs."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Scanare de viruși și conținut pentru documente într-o politică."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blocați documentele care conțin macrocomenzi, executabile, scripturi sau obiecte încorporate - nu doar malware cunoscut."
+label = "Scanare avansată Cloudmersive"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Atașați documentele procesate la o pagină Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Trimiteți documente către ConsignO Cloud (Notarius) pentru semnătură electronică și notarizare."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Mediul dvs. ConsignO Cloud, incluzând /api/v1."
+label = "URL server"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "Cheie API"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "Secret API"
+
+[portal.connections.types.consigno.fields.password]
+label = "Parolă"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Necesar doar dacă organizația dvs. folosește tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Nume utilizator"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Postați un mesaj pe Discord când o politică procesează un document."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexați un eveniment de audit în Elasticsearch de fiecare dată când o politică gestionează un document."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Interogați un server FTP sau FTPS pentru documente noi."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Mod conexiune"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Activ"
+passive = "Pasiv (recomandat)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP simplu trimite credențiale și fișiere necriptate; alegeți FTPS dacă serverul îl suportă."
+label = "Criptare"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Niciuna (FTP simplu)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Postați un mesaj într-un spațiu Google Chat când rulează o politică."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Atașați documentele procesate la o problemă Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Trimiteți prin email un document sau o notificare când rulează o politică."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Încărcați documentele procesate în Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Parolă aplicație"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detectați date personale în textul documentului folosind un server Presidio pe care îl rulați."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Citiți și aplicați etichete de sensibilitate Microsoft Purview pe PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opțional. Necesar doar pentru a selecta etichete după nume; etichetarea funcționează fără acesta."
+label = "ID aplicație (client)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Secret client"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Ștampilat pe fiecare etichetă ca SiteId, astfel încât instrumentele compatibile Purview să știe ce organizație a aplicat-o."
+label = "ID director (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Un bucket S3 din care sursele pot citi și în care ieșirile pipeline pot scrie."
+label = "Stocare S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID cheie de acces"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Lăsați necompletat pentru AWS. Setați acest câmp pentru MinIO sau altă stocare compatibilă S3."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Regiune"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Cheie secretă de acces"
+
+[portal.connections.types.sendgrid]
+description = "Trimiteți prin email un document sau o notificare când rulează o politică."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Interogați un server SFTP (SSH) pentru documente noi."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opțional. Amprenta SHA-256 a cheii de host a serverului (din `ssh-keyscan host | ssh-keygen -lf -`). Când este setată, este acceptat doar un server care prezintă această cheie; când este necompletată, cheia văzută la prima conectare este fixată și modificările ulterioare sunt refuzate."
+label = "Amprentă cheie host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Frază de acces cheie"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Lăsați necompletat dacă vă autentificați cu o cheie privată în schimb."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opțional. Lipiți o cheie privată OpenSSH pentru autentificare cu cheie în loc de parolă."
+label = "Cheie privată"
+
+[portal.connections.types.slack]
+description = "Postați un mesaj pe Slack când o politică procesează un document."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Monitorizați o partajare de rețea SMB / CIFS (Windows sau Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Partajare de rețea"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opțional. Domeniul sau grupul de lucru Windows, dacă serverul dvs. folosește unul."
+label = "Domeniu"
+
+[portal.connections.types.smb.fields.share]
+label = "Partajare"
+placeholder = "documente"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Trimiteți un eveniment de audit către Splunk de fiecare dată când o politică gestionează un document."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Trimiteți un eveniment de audit către un colector HTTP Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Postați un mesaj într-un canal Teams când rulează o politică."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Postați fiecare document sau doar detaliile către un URL ales de dvs."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Declanșați un scenariu Zap sau Make dintr-o politică."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Răsfoiți documentația"
+viewSource = "Vizualizați sursa pe GitHub"
+
 [portal.docs.authentication]
 codeCaption = "fiecare solicitare"
 eyebrow = "ÎNCEPUT"
@@ -6619,11 +7079,19 @@ title = "SDK-uri oficiale"
 beta = "Beta"
 deprecated = "Depreciat"
 
+[portal.docs.search]
+empty = "Nicio documentație potrivită"
+placeholder = "Căutați în documentație"
+results = "{{count}} rezultate"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Capabilități incluse, denumite, pe care agentul tău le invocă drept un singur instrument. Fiecare skill este un lanț determinist de operațiuni, cu evals atașate."
 title = "Skill-uri agent"
 
+[portal.docs.toc]
+title = "Pe această pagină"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "REFERINȚĂ API"
@@ -6697,6 +7165,8 @@ type = "Tip"
 user = "Utilizator"
 
 [portal.documents.queue.empty]
+connectSource = "Conectați o sursă"
+createPipeline = "Creați un pipeline"
 description = "Pe măsură ce sursele trimit documente în pipeline-urile dvs., acestea vor apărea aici pentru revizuire."
 title = "Nu există documente în coadă"
 
@@ -6806,13 +7276,71 @@ description = "Această vizualizare a întâmpinat o eroare neașteptată. Înce
 retry = "Încercați din nou"
 title = "Ceva nu a mers bine pe această pagină"
 
+[portal.home.download]
+back = "Înapoi"
+body = "Descărcați aplicația desktop sau găzduiți serverul self-hosted."
+done = "Gata"
+guide = "Deschideți ghidul {{name}}"
+openInBrowser = "Deschideți în browser în schimb"
+sectionDesktop = "Aplicație desktop"
+sectionSelfHosted = "Self-hosted"
+title = "Instalați Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Rulați imaginea oficială pe serverul dvs."
+note = "Se deschide la :8080. Autentificare implicită: admin / stirling."
+tagline = "Rulați serverul într-un container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instalați chart-ul Helm oficial."
+note = "Adăugați un PVC pentru /configs pentru a păstra setările."
+tagline = "Implementați într-un cluster cu Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Build-uri native pentru distribuția dvs."
+guideBtn = "Vedeți opțiunile de instalare Linux"
+note = "Build-uri AppImage, .deb și .rpm sunt disponibile pentru distribuțiile uzuale."
+tagline = "Aplicație desktop nativă pentru distribuția dvs."
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Sau prin Homebrew"
+detailBody = "Rulați instalatorul sau folosiți Homebrew."
+downloadBtn = "Descărcați pentru macOS"
+tagline = "Aplicație nativă pentru Apple silicon și Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Rulați fișierul .jar pe un server bare metal."
+downloadBtn = "Descărcați fișierul .jar"
+note = "Necesită Java 21+. Se deschide la :8080; autentificare implicită admin / stirling."
+runLabel = "Apoi rulați-l"
+tagline = "Rulați fișierul .jar pe un server bare metal"
+title = "Configurare manuală server"
+
+[portal.home.download.windows]
+altLabel = "Sau prin winget"
+detailBody = "Rulați instalatorul sau folosiți un manager de pachete."
+downloadBtn = "Descărcați instalatorul"
+tagline = "Aplicație nativă pentru Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} activi"
-invite = "Invitați colegi"
+activeOfDeployed = "{{active}} din {{total}} active luna aceasta"
 name = "Stirling PDF Editor"
 open = "Deschideți în browser"
 updated = "actualizat {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Finalizați implementarea"
+options = "Vedeți opțiunile de implementare"
+start = "Implementați Editorul"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Bună ziua"
 evening = "Bună seara"
 morning = "Bună dimineața"
 
-[portal.home.onboarding]
-dismiss = "Închideți configurarea"
-notStarted = "Neînceput"
-progress = "{{done}} din {{total}} finalizate"
-title = "Finalizați configurarea"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC la nivel de organizație, prețuri pentru volum angajat și implementare air-gapped."
-cta = "Începeți perioada de probă"
-ctaQuote = "Obțineți ofertă"
-lead = "Pentru 250+ angajați."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Implementați aplicația desktop, gratuită pentru totdeauna."
-title = "Descărcați PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} active · {{recommended}} recomandate"
-chip = "{{active}} active"
-title = "Activați politicile"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} conectate · fiecare PDF guvernat acolo unde ajunge"
-chip = "{{connected}} conectate"
-title = "Conectați sursele"
-
-[portal.home.quickActions]
-subtitle = "Sarcinile principale pentru astăzi"
-title = "Acțiuni rapide"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Composer în 3 pași peste biblioteca de operații tipizate"
-title = "Construiți un pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenți, webhook-uri, foldere monitorizate"
-title = "Conectați o sursă"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Cheie cu domeniu limitat, limite de rată și listă de permisiuni IP"
-title = "Emiteți o cheie API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Gestionați implementarea Editorului"
 sectionsAriaLabel = "Secțiuni de infrastructură"
@@ -6878,13 +7363,9 @@ heading = "Chei API"
 subheading = "Credențiale cu domeniu limitat, limite de rată per cheie, permisiuni și liste de permisiuni IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP-uri permise"
-anyIp = "Orice IP (fără listă de permisiuni)"
 created = "Creat"
 lastUsed = "Utilizat ultima dată"
-permissions = "Permisiuni"
-rateLimit = "Limită de rată"
-rateLimitValue = "{{value}} cereri/min"
+revoke = "Revocați cheia"
 usageMonth = "Utilizare luna aceasta"
 usageToday = "Utilizare astăzi"
 
@@ -6892,6 +7373,20 @@ usageToday = "Utilizare astăzi"
 description = "Creați o cheie cu domeniu limitat pentru a începe să apelați Stirling API."
 title = "Nu există încă chei API"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nu s-au putut încărca cheile dvs. API. Încercați din nou."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Revocați \"{{name}}\"? Orice integrare care încă folosește această cheie va începe imediat să primească erori 401. Această acțiune nu poate fi anulată."
+cancel = "Anulați"
+confirm = "Revocați cheia"
+title = "Revocați cheia API"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestat"
+inScope = "În domeniu"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrați evenimentele de audit după categorie"
 heading = "Jurnale de audit"
@@ -6935,6 +7430,7 @@ all = "Toate"
 auth = "Autentificare"
 config = "Configurare"
 elevation = "Elevare"
+policy = "Politică"
 processing = "Procesare"
 security = "Securitate"
 
@@ -6944,19 +7440,35 @@ title = "Nu aveți acces"
 
 [portal.infrastructure.audit.metrics]
 config = "Configurare"
-elevation = "Elevare"
+policy = "Politică"
 processing = "Procesare"
 totalEvents = "Evenimente totale · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Config"
+elevation = "Elevare"
+policy = "Politică"
+processing = "Procesare"
+security = "Securitate"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Eroare"
+info = "Info"
+success = "Succes"
+warning = "Avertisment"
+
+[portal.infrastructure.certLabel]
+certified = "Certificat"
+inProgress = "În desfășurare"
+notStarted = "Neînceput"
+
 [portal.infrastructure.createKey]
 cancel = "Anulați"
 createKey = "Creați cheie"
 done = "Gata"
-ipAllowlistHelper = "Intervale CIDR separate prin virgulă. Lăsați necompletat pentru a permite orice IP."
-ipAllowlistLabel = "Listă de permisiuni IP"
 keyNameLabel = "Nume cheie"
 keyNamePlaceholder = "de ex. Producție · ingestie"
-permissionsLabel = "Permisiuni"
 secretKeyCaption = "Cheie secretă"
 secretWarning = "Stocați aceasta într-un manager de secrete. Stirling stochează doar un hash — nu există nicio modalitate de a o recupera ulterior."
 subtitle = "Limitați cheia la minimul necesar. O puteți roti sau revoca oricând."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Copiați acest secret acum — nu va mai fi afișat."
 title = "Creați cheie API"
 titleCreated = "Cheie creată"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "În coadă"
+rolledBack = "Revenit la versiunea anterioară"
+rolling = "În curs de lansare"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Sănătate în timp real pentru fiecare regiune Stirling implement
 description = "Regiunile implementate apar aici după ce spațiul dvs. de lucru este provisionat."
 title = "Nu există regiuni implementate"
 
+[portal.infrastructure.keyLabel]
+active = "Activă"
+revoked = "Revocată"
+
+[portal.infrastructure.modelLabel]
+active = "Activ"
+degraded = "Degradat"
+disabled = "Dezactivat"
+
 [portal.infrastructure.models]
 heading = "Modele"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Stare"
 type = "Tip"
 version = "Versiune"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/apel"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Modele active"
 avgLatency = "Latență medie"
@@ -7049,6 +7580,17 @@ modelForAria = "Model pentru {{operation}}"
 operation = "Operațiune"
 routedTo = "Rutat către"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Clasificare"
+extraction = "Extragere"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradată"
+down = "Căzută"
+healthy = "Sănătoasă"
+
 [portal.infrastructure.security.access.byok]
 description = "Furnizați o cheie din propriul KMS. Stirling criptează cu ea, dar poate încă citi."
 label = "Aduceți propria cheie (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modele"
 security = "Securitate"
 storage = "Stocare"
 
+[portal.integrations]
+addAnother = "Adăugați alta"
+availableHeading = "Disponibile"
+comingSoonHeading = "În curând"
+connect = "Conectați"
+connectedHeading = "Conectate"
+connectionCount_one = "{{count}} conexiune"
+connectionCount_other = "{{count}} conexiuni"
+customApi = "API personalizat"
+searchPlaceholder = "Căutați integrări"
+subtitle = "Tot cu ce poate comunica Stirling. Credențialele sunt create o singură dată aici, apoi referențiate de surse, politici și pipeline-uri."
+title = "Integrări"
+typedName = "Nume {{tool}}"
+
+[portal.integrations.filters]
+all = "Toate"
+audit = "Audit"
+connected = "Conectate"
+notify = "Notificare"
+security = "Securitate"
+signing = "Semnare"
+storage = "Stocare"
+
+[portal.integrations.status]
+connected = "Conectat"
+
+[portal.integrations.table]
+integration = "Integrare"
+worksWith = "Funcționează cu"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline-uri"
+policies = "Politici"
+sources = "Surse"
+
+[portal.legal]
+draft = "{{label}} · ciornă"
+loadError = "Nu s-a putut încărca acest document. Încercați din nou."
+loading = "Se încarcă…"
+title = "Document juridic"
+
 [portal.nav]
 agent-builder = "Constructor de agenți"
 components = "Componente"
@@ -7182,6 +7765,7 @@ documents = "Documente"
 editor = "Editor"
 home = "Acasă"
 infrastructure = "Infrastructură"
+integrations = "Integrări"
 pipelines = "Pipeline-uri"
 policies = "Politici"
 procurement = "Achiziții"
@@ -7190,25 +7774,9 @@ sources = "Surse"
 usage = "Utilizare și facturare"
 users = "Utilizatori"
 
-[portal.notifications]
-markAllRead = "Marcați toate ca citite"
-title = "Notificări"
-viewAll = "Vizualizați toate"
-
-[portal.notifications.ariaLabel]
-none = "Notificări, niciuna necitită"
-unread_one = "Notificări, {{count}} necitită"
-unread_other = "Notificări, {{count}} necitite"
-
-[portal.notifications.count]
-allRead = "toate citite"
-loading = "se încarcă"
-new_one = "{{count}} nouă"
-new_other = "{{count}} noi"
-
-[portal.notifications.empty]
-description = "Nu există notificări noi."
-title = "Sunteți la zi"
+[portal.nav.section]
+platform = "Platformă PDF"
+processor = "Procesor PDF"
 
 [portal.pipelines]
 subtitle = "Fiecare pipeline automatizat de documente pe backend: un lanț ordonat de operațiuni peste un set de surse, rulat la un declanșator. Faceți clic pe un rând pentru pașii și sursele sale."
@@ -7220,15 +7788,28 @@ newPipeline = "Pipeline nou"
 [portal.pipelines.builder]
 addStep = "Adăugați instrument"
 back = "Înapoi la pipeline-uri"
+cannotFollow = "Nu poate prelua {{produced}}"
+chooseAccount = "Alegeți un cont"
+chooseDestination = "Alegeți o destinație"
+chooseOperation = "Alegeți ce face acest pas"
+chooseSource = "Alegeți o sursă"
 discard = "Renunțați la modificări"
 enabled = "Activat"
+inputs = "Intrare"
+inputSource = "Sursă de intrare"
+inputTrigger = "Declanșator"
 keepEditing = "Continuați editarea"
+needsConfiguring = "Necesită configurare"
 needsUpload = "Necesită un fișier încărcat"
+noSources = "Nu există surse conectate încă. Creați una pentru a o folosi ca intrare."
 noToolMatches = "Niciun instrument nu corespunde căutării dvs."
 pipelineSettings = "Setări pipeline"
 searchTools = "Căutați instrumente"
 selectToolBody = "Adăugați un instrument pentru a construi pipeline-ul."
 selectToolTitle = "Nu există încă instrumente"
+sendToSystem = "Trimiteți către alt sistem"
+stepsIncompatible = "Acești pași nu pot rula pe ceea ce produce pasul lor anterior: {{tools}}."
+stepsNeedSetup = "Acești pași necesită încă configurare înainte de salvare: {{tools}}."
 toolSettings = "Setări instrument"
 unknownStep = "Operațiune nerecunoscută, păstrată ca atare."
 unsavedBody = "Aveți modificări nesalvate. Salvați-le înainte de a pleca sau renunțați la ele?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Modificări nesalvate"
 uploadUnsupported = "Fișierele încărcate nu sunt încă acceptate în pipeline-uri, deci acești pași nu pot fi salvați: {{tools}}."
 usesDefaults = "Rulează cu setările implicite"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Combină fiecare fișier din pasul anterior"
+fan-out = "Rulează o dată pentru fiecare fișier din pasul anterior"
+format-mismatch = "Necesită {{accepts}}, dar pasul anterior produce {{produced}}"
+output-uncertain = "Este posibil să nu ruleze: ieșirea pasului anterior depinde de modul în care este configurat"
+source-mismatch = "Necesită {{accepts}}, dar intrarea acestui pipeline este {{produced}}"
+undeclared-operation = "Nu se poate verifica ce acceptă acest pas"
+
 [portal.pipelines.composer]
 addTool = "Adăugați instrument"
 cancel = "Anulați"
 chainEmpty = "Adăugați un instrument pentru a începe să construiți pipeline-ul."
 create = "Creați pipeline"
-directory = "Folder de ieșire"
-directoryHelp = "Cale absolută pe server. Trebuie să fie în folderele permise configurate."
 editingUnsupported = "Afișarea acestor parametri ai instrumentului pentru editare nu este încă acceptată."
 moveDown = "Mutați în jos"
 moveUp = "Mutați în sus"
 name = "Nume"
 namePlaceholder = "de ex. Scanare de redactare"
-noSources = "Nu sunt conectate încă surse. Pipeline-ul poate rula în continuare pe fișiere furnizate direct către acesta."
 noToolSettings = "Acest instrument nu are setări configurabile."
 operations_one = "Operațiune ({{count}})"
 operations_other = "Operațiuni ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Ștergeți"
 title = "Ștergeți pipeline-ul?"
 
 [portal.pipelines.detail]
+clearHistory = "Ștergeți istoricul"
 delete = "Ștergeți pipeline-ul"
 run = "Rulați acum"
 
 [portal.pipelines.empty]
 action = "Creați un pipeline"
+connectSource = "Conectați o sursă"
 description = "Creați primul pipeline: alegeți sursele peste care rulează, înlănțuiți operațiunile și alegeți unde ajunge ieșirea."
 title = "Nu există încă pipeline-uri"
 
@@ -7286,15 +7874,17 @@ active = "Active"
 paused = "În pauză"
 total = "Pipeline-uri"
 
-[portal.pipelines.output]
-folder = "Scrieți în folder"
-inline = "Returnați fișiere"
-
 [portal.pipelines.run]
+allProcessed_one = "Nimic de rulat: {{count}} document al sursei a fost deja procesat."
+allProcessed_other = "Nimic de rulat: toate cele {{count}} documente din surse au fost deja procesate."
 completed_one = "Rulare finalizată."
 completed_other = "Toate cele {{count}} rulări au fost finalizate."
 empty = "Nimic de rulat: sursele nu au avut documente de procesat."
 failed = "Rularea a eșuat: {{error}}"
+historyCleared = "Istoric șters. Următoarea rulare reprocesează tot ce se află în prezent în surse."
+inFlight = "Nimic nou de rulat: documentele sunt încă procesate dintr-o rulare anterioară."
+parked_one = "Nimic de rulat: {{count}} document a eșuat anterior și este parcat. Remediați cauza, apoi ștergeți istoricul pentru a-l reîncerca."
+parked_other = "Nimic de rulat: {{count}} documente au eșuat anterior și sunt parcate. Remediați cauza, apoi ștergeți istoricul pentru a le reîncerca."
 running = "Rularea a început; este încă în desfășurare."
 timeout = "Rularea durează mai mult decât era de așteptat; se poate finaliza în continuare în fundal."
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "Programat"
 
 [portal.policies]
+defaultName = "Politică {{category}}"
 subtitle = "Automatizări permanente care aplică un pipeline de instrumente fiecărui document. Fiecare politică se declanșează la încărcare sau export, rulează lanțul de instrumente și salvează versiunea aplicată alături de original."
 title = "Politici"
 
 [portal.policies.card]
 comingSoon = "Actualizați la Enterprise"
 notSetUp = "Neconfigurat"
+requiresAiEngine = "Necesită motor AI"
+
+[portal.policies.categories.classification]
+desc = "Identificați tipul fiecărui document la încărcare și etichetați-i metadatele pentru arhivare și căutare."
+label = "Clasificare"
 
 [portal.policies.categories.compliance]
 desc = "Aplicați cerințele HIPAA, GDPR, SOC 2 sau FedRAMP fiecărui document."
@@ -7344,6 +7940,13 @@ label = "Securitate"
 [portal.policies.config]
 scopeAll = "Toate documentele"
 
+[portal.policies.config.classification]
+summary = "Clasifică fiecare document încărcat în funcție de etichetele echipei dvs. și îi etichetează metadatele."
+
+[portal.policies.config.classification.rules]
+0 = "Clasifică"
+1 = "Etichetează metadatele"
+
 [portal.policies.config.compliance]
 summary = "Validează documentele față de cadrele de reglementare înainte ca acestea să părăsească sistemul."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Încredere minimă"
 2 = "Denumiți"
 3 = "Normalizați"
 
+[portal.policies.config.purview]
+label = "Aplicați o etichetă de sensibilitate Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Tenant Purview"
+labelId = "ID etichetă"
+labelIdHelp = "GUID-ul etichetei, din portalul Purview. Aplicarea unei etichete scrie metadatele acesteia pe PDF; nu poate cripta, pentru asta este necesar clientul Microsoft."
+labelName = "Nume etichetă (opțional)"
+labelNameHelp = "Înregistrat alături de ID, astfel încât oamenii și instrumentele să poată recunoaște eticheta."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview distinge o etichetă aplicată de o politică de una aleasă de o persoană."
+label = "Cum este înregistrată eticheta"
+privileged = "Ca aleasă de o persoană"
+standard = "Ca aplicată automat"
+
+[portal.policies.config.purviewRead]
+label = "Citiți o etichetă Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Tenant Purview"
+connectionHelp = "Citește eticheta pe care documentul o poartă deja, astfel încât pașii următori să poată acționa în funcție de ea."
+
 [portal.policies.config.retention]
 summary = "Aplică durata de păstrare a documentelor, momentul arhivării și momentul ștergerii."
 
@@ -7438,6 +8064,7 @@ title = "Încă nu există activitate"
 [portal.policies.endpoints]
 addWatermark = "Filigran"
 autoRedact = "Redactează PII"
+classifyAndLabel = "Clasifică"
 compressPdf = "Comprimă"
 flatten = "Aplatizează"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Politicile tale sunt salvate și vor apărea după restabilirea c
 retry = "Reîncearcă"
 title = "Backend indisponibil"
 
+[portal.policies.operations]
+change = "Schimbați ce face acest pas"
+noResults = "Niciun pas nu corespunde. Încercați un nume de produs sau \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Căutați pași - încercați \"scan\", \"attach\" sau un nume de produs"
+
+[portal.policies.operations.bodyMode]
+binary = "Octeți bruti ai fișierului"
+json = "În interiorul unui payload JSON"
+multipart = "Ca încărcare de fișier (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Propriul dvs. server ClamAV verifică documentul; nimic nu părăsește rețeaua dvs."
+label = "Scanați pentru viruși (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Respinge documentele care conțin macrocomenzi, executabile, scripturi sau obiecte încorporate."
+label = "Blocați conținutul activ"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive verifică documentul, iar rularea se oprește dacă acesta nu este curat."
+label = "Scanați pentru viruși"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arhivează documentul procesat pe o pagină."
+label = "Atașați la o pagină Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Trimite documentul către ConsignO Cloud pentru semnare."
+label = "Trimiteți pentru semnare (ConsignO)"
+note = "Trimite documentul. Preluarea copiei semnate nu este încă acceptată, deoarece un pas nu poate transmite un rezultat unui pas ulterior."
+
+[portal.policies.operations.customApiCall]
+description = "Construiți apelul singur: cale, metodă, corp și gestionarea răspunsului."
+label = "Apelați un API personalizat"
+
+[portal.policies.operations.discordNotify]
+description = "Anunță un canal că politica a gestionat un document."
+label = "Postați un mesaj pe Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Înregistrează ce a făcut politica sub forma unui document ce poate fi căutat."
+label = "Indexați un eveniment de audit în Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart se potrivește API-urilor de încărcare; JSON se potrivește API-urilor care vor fișierul într-un payload; binary trimite octeții bruti."
+label = "Cum se trimite documentul"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Un corp JSON trimis ca atare. {{document.base64}} conține fișierul; {{document.*}} și {{run.*}} sunt completate pentru fiecare document."
+label = "Corp JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Cont"
+
+[portal.policies.operations.fields.domain]
+label = "Domeniu Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Câmpul de formular sub care API așteaptă documentul."
+label = "Numele câmpului de fișier"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "De la"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Un obiect JSON cu perechi nume/valoare pentru anteturi. Credențiala conexiunii este adăugată automat."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Cheie problemă"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Trimis ca mesaj. {{document.*}} și {{run.*}} sunt completate pentru fiecare document."
+label = "Mesaj"
+
+[portal.policies.operations.fields.method]
+label = "Metodă"
+
+[portal.policies.operations.fields.pageId]
+label = "ID pagină"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Adăugat la URL-ul de bază al conexiunii. Nu poate ajunge niciodată la alt host."
+label = "Cale"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Locul din drive unde se scrie. {{document.filename}} este completat pentru fiecare document."
+label = "Cale destinație"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Raportul lasă documentul neatins. Înlocuirea îl schimbă cu orice se întoarce."
+label = "Ce se face cu răspunsul"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email semnatar"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Subiect"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analizează acest text. Folosiți {{document.title}} sau lipiți textul pe care doriți să îl verificați."
+label = "Text de verificat"
+
+[portal.policies.operations.fields.to]
+label = "Către"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nume utilizator Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Anunță un spațiu că politica a gestionat un document."
+label = "Postați un mesaj pe Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arhivează documentul procesat pe o problemă."
+label = "Atașați la o problemă Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Trimite documentul procesat ca atașament."
+label = "Trimiteți documentul prin email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Scrie documentul procesat într-un folder."
+label = "Încărcați în Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Propriul dvs. server Presidio raportează datele personale pe care le găsește."
+label = "Detectați date personale"
+note = "Presidio citește text, nu fișiere. Dați-i textul pe care doriți să îl verificați — documentul în sine nu este încărcat."
+
+[portal.policies.operations.responseMode]
+replace = "Înlocuiți documentul cu răspunsul"
+report = "Păstrați documentul, înregistrați răspunsul"
+
+[portal.policies.operations.sendgridEmail]
+description = "Trimite documentul procesat ca atașament."
+label = "Trimiteți documentul prin email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Anunță un canal că politica a gestionat un document."
+label = "Postați un mesaj pe Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Înregistrează ce a făcut politica acolo unde auditorii dvs. caută deja."
+label = "Trimiteți un eveniment de audit către Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Înregistrează ce a făcut politica într-un colector HTTP."
+label = "Trimiteți un eveniment de audit către Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Anunță un canal că politica a gestionat un document."
+label = "Postați un mesaj pe Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Trimite documentul în sine către un URL ales de dvs."
+label = "Postați documentul către un webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Predă detaliile rulării automatizării dvs."
+label = "Declanșați un scenariu Zap sau Make"
+
 [portal.policies.stats]
 activeFor = "Activ"
 dataProcessed = "Date procesate"
@@ -7473,6 +8277,13 @@ label = "Documente aplicate"
 description = "Configurate, dar nu se declanșează"
 label = "În pauză"
 
+[portal.policies.table]
+appliesTo = "Se aplică la"
+docs = "Documente aplicate"
+enforces = "Aplică"
+policy = "Politică"
+status = "Stare"
+
 [portal.policies.wizard.actions]
 back = "Înapoi"
 cancel = "Anulează"
@@ -7480,6 +8291,10 @@ continue = "Continuă"
 enablePolicy = "Activează politica"
 saveChanges = "Salvează modificările"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifică tipul documentului din etichetele echipei dvs. și îl etichetează, astfel încât să fie arhivat și căutat după categorie."
+label = "Clasificați documentul"
+
 [portal.policies.wizard.capability.compress]
 desc = "Comprimă documentul la o dimensiune mai mică a fișierului."
 label = "Reduce dimensiunea fișierului"
@@ -7500,10 +8315,18 @@ label = "Redactează informațiile sensibile"
 desc = "Elimină JavaScript ascuns, astfel încât nimic să nu poată rula automat când documentul este deschis."
 label = "Elimină conținutul activ"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dovedește că documentul a existat în această formă exactă la un moment dat, folosind o autoritate independentă de timestamp. Se trimite doar un hash - documentul nu părăsește niciodată serverul dvs."
+label = "Adăugați un timestamp de încredere"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Aplică un marcaj vizibil (de ex. „Confidențial”) pe fiecare pagină."
 label = "Aplică un filigran"
 
+[portal.policies.wizard.classification]
+description = "Fiecare document încărcat este clasificat în funcție de etichetele încorporate și etichetat cu tipurile potrivite. Setul de etichete este partajat în întreaga echipă."
+labelsHeading = "Etichete de clasificare"
+
 [portal.policies.wizard.errors]
 noTools = "Activează mai întâi cel puțin un instrument în fluxul de lucru."
 saveFailed = "Politica nu a putut fi salvată. Încearcă din nou."
@@ -7548,73 +8371,118 @@ setUp = "Configurează politica {{category}}"
 [portal.policies.wizard.workflow]
 description = "Alege ce face această politică fiecărui document pe care îl procesează."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} active"
-noRule = "Încă nu se aplică nicio regulă"
-subtitle = "Automatizări permanente prin care trece fiecare document, indiferent de pipeline-ul care îl gestionează."
-title = "Ce rulează pe PDF-urile tale"
-
 [portal.policySummary.action]
-comingSoon = "Fă upgrade la Enterprise"
-configure = "Configurează"
 setUp = "Configurează"
 
-[portal.policySummary.column]
-activeRule = "Regulă activă"
-policy = "Politică"
-status = "Stare"
+[portal.processorFlow]
+footnote = "Numărătorile sunt pentru ultimele 24 de ore. Viteza fluxului este ilustrativă."
+liveBadge = "Live"
+stats = "{{connected}} conectate · {{processed}} PDF-uri procesate"
+title = "Procesor PDF"
 
-[portal.policySummary.empty]
-description = "După configurarea politicilor, categoriile apar aici."
-title = "Încă nu există politici"
+[portal.processorFlow.lens]
+ariaLabel = "Mod de vizualizare"
+flow = "Flux"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Activ"
-off = "Oprit"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Eșuate"
+heading = "Rezultate"
+success = "Livrate"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} active"
+count = "{{n}} · 24h"
+heading = "Politici"
+setUp = "Configurați"
 soon = "În curând"
 
-[portal.processingStatus]
-managePlan = "Gestionează planul"
-volumeSuffix = "PDF-uri procesate · ultimele 30 de zile"
+[portal.processorFlow.sankey]
+waist = "Politici · {{n}} active"
+
+[portal.processorFlow.sankey.empty]
+description = "Conectați o sursă și activați o politică pentru a urmări documentele cum trec prin procesor."
+title = "Încă nu există flux"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Conectați"
+editor = "Stirling PDF Editor"
+heading = "Surse"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Preluare email"
 
 [portal.procurement]
-reset = "Resetează achizițiile (demo)"
 subtitle = "Parcurge evaluarea, contractarea și integrarea echipei tale. Fiecare document într-un singur loc."
 title = "Achiziții"
 
-[portal.procurement.action]
-download = "Descarcă"
-pay = "Plătește acum"
-request = "Solicită"
-sign = "Revizuiește și semnează"
-upload = "Încarcă"
-
 [portal.procurement.agreement]
 agreeCta = "Acceptă și abonează-te"
+confidential = "Confidențial"
 confirm = "Am citit și sunt de acord cu Stirling Enterprise Agreement."
-eyebrow = "Acord"
-intro = "Un acord combinat acoperă tranzacția ta: Master Service Agreement, Order Form, EULA și Data Processing Agreement. Revizuiește-l, apoi acceptă pentru a transforma oferta într-un abonament angajat."
-title = "Revizuiește acordul enterprise"
+docName = "Acord Stirling Enterprise"
+docSub = "MSA, Formular de comandă, EULA și DPA, combinate într-o singură semnătură."
+download = "Descărcați"
+downloadDraftError = "Nu s-a putut genera acordul PDF - rendererul de documente nu este disponibil. Încercați din nou în scurt timp sau contactați suportul."
+downloadError = "Nu s-a putut descărca acordul semnat. Încercați din nou."
+legalName = "Numele entității juridice"
+legalNamePlaceholder = "Entitatea juridică ce va semna"
+loadError = "Nu s-a putut încărca acordul. Încercați din nou."
+loading = "Se încarcă acordul..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Solicitați modificări"
+scrollHint = "Derulați pentru a revizui"
+signatory = "Nume semnatar"
+signatoryPlaceholder = "Nume complet"
+signatoryTitle = "Titlu semnatar"
+signatoryTitlePlaceholder = "de ex. Consilier juridic general"
+signError = "Nu s-a putut înregistra semnătura dvs. Încercați din nou."
 
 [portal.procurement.builder]
 addons = "Suplimente"
+addressLine1 = "Linia de adresă 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Linia de adresă 2"
+addressLine2Placeholder = "Suită, etaj, clădire"
 back = "Înapoi"
 businessName = "Numele firmei"
 businessNamePlaceholder = "Compania ta"
+city = "Oraș"
+cityPlaceholder = "San Francisco"
+completeRequired = "Completați câmpurile obligatorii (marcate cu *) cu un email valid înainte de a genera oferta."
+contactEmail = "Email contact"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Nume contact"
+contactNamePlaceholder = "Jane Doe"
 continue = "Continuă"
-country = "Țară"
-countryEuro = "Zona euro (EUR €)"
-countryUK = "Regatul Unit (GBP £)"
-countryUS = "Statele Unite (USD $)"
+done = "Gata"
 eula = "Am citit și sunt de acord cu Stirling Enterprise EULA. Aceasta guvernează acordul generat din această ofertă."
 generate = "Generează oferta"
-included = "Inclus"
 indemnification = "Despăgubire IP"
 indemnificationSub = "Apărăm revendicările IP eligibile, conform EULA"
-offlineLicense = "Licență offline / izolată de rețea"
-offlineLicenseSub = "Un fișier de licență descărcabil pentru o instanță self-hosted izolată de rețea"
+paperEyebrow = "Ofertă Enterprise"
+paperFor = "Pregătită pentru"
+pdfSize = "Dimensiune PDF"
+poNumber = "Număr PO"
+poNumberPlaceholder = "Opțional"
+postalCode = "Cod poștal"
+postalCodePlaceholder = "94105"
+posture = "Guvernanță"
+posture_count = "~{{count}} politici"
+posture_essentials = "Esențiale"
+posture_essentialsSub = "Clasificare + Partajare — valorile implicite"
+posture_governed = "Guvernat"
+posture_governedSub = "Adaugă Securitate și Rutare"
+posture_regulated = "Reglementat"
+posture_regulatedSub = "Fiecare categorie — Conformitate, Retenție, Ingestie"
 qbr = "Evaluări trimestriale de business"
 qbrSub = "SE-ul tău revizuiește utilizarea și foaia de parcurs în fiecare trimestru"
+region = "Stat / regiune"
+regionPlaceholder = "California"
 running = "{{annual}} / an · {{years}} ani {{tcv}}"
 s1Sub = "Echipa ta și PDF-urile pe care te aștepți să le rulezi în fiecare an."
 s1Title = "Cât vei procesa?"
@@ -7623,6 +8491,12 @@ s2Title = "Angajament și serviciu"
 s3Sub = "Pentru oferta și acordul pe care îl generează."
 s3Title = "Detaliile tale"
 serviceLevel = "Nivel de serviciu"
+size_compact = "Compact"
+size_compactSub = "În principal text, sub 1 MB"
+size_heavy = "Greu"
+size_heavySub = "Scanat sau bogat în imagini, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Text și imagini mixte, 1 până la 5 MB"
 slDedicated = "Dedicat"
 slDedicatedSub = "4 ore lucrătoare · manager de cont dedicat · +30%"
 slPriority = "Prioritar"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Aceeași zi lucrătoare · CSM nominalizat · +15%"
 slStandard = "Standard"
 slStandardSub = "Următoarea zi lucrătoare · CSM partajat · inclus"
 stepOf = "Pasul {{n}} din {{total}}"
+taxId = "TVA / ID fiscal"
+taxIdPlaceholder = "Opțional"
 term = "Termen"
 termDiscount = "Reducere de {{pct}}% aplicată pentru angajament pe mai mulți ani"
 title = "Construiește oferta"
@@ -7637,6 +8513,7 @@ training = "Onboarding și instruire"
 trainingSub = "Sesiuni live pentru a-ți pune echipa în mișcare"
 users = "Total utilizatori"
 usersPlaceholder = "de ex. 250"
+viewEula = "Citiți-l"
 volEstimated = "Estimat din {{count}} utilizatori (~2.000 PDF-uri fiecare, inclusiv automatizarea). Editează dacă știi mai bine."
 volManual = "Se folosește valoarea ta. Reestimează din dimensiunea echipei oricând."
 volNoUsers = "Nu ești sigur? Introdu dimensiunea echipei și o vom estima."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "de ex. 1.000.000"
 years_one = "{{count}} an"
 years_other = "{{count}} ani"
 
-[portal.procurement.docs]
-count_one = "{{count}} doc."
-count_other = "{{count}} doc."
-done = "Gata"
-here = "Ești aici"
-hide = "Ascunde"
-optional = "Opțional"
-paidAddon = "Supliment plătit"
-show = "Afișează"
-subtitle = "Tot ce ai nevoie la fiecare pas al parcursului, afișat pe măsură ce tranzacția avansează."
-supportingSubtitle = "SOC 2, evaluări de securitate, formulare fiscale și altele, pregătite când echipa ta de securitate sau achiziții le cere. Unele au o taxă unică."
-supportingTitle = "Susținerea evaluării tale"
+[portal.procurement.documents]
+agreement = "Acord Enterprise"
+agreementSub = "MSA, Formular de comandă și DPA într-o singură semnătură."
+download = "Descărcați"
+eula = "EULA și Termeni comerciali"
+eulaSub = "Termenii software și comerciali self-serve."
+invoice = "Factură"
+invoiceSub = "Prima dvs. factură de abonament."
+laterInvoice = "Disponibilă după ce acceptați"
+laterQuote = "Disponibilă după emiterea ofertei"
+quote = "Ofertă"
+quoteSub = "Oferta dvs. Enterprise detaliată."
+sla = "Anexă SLA"
+slaSub = "Niveluri de suport și obiective de răspuns."
+subprocessors = "Subprocesatori"
+subprocessorsSub = "Terți care procesează date în numele dvs."
+subtitle = "Documentele tranzacției dvs., disponibile oricând."
 title = "Documente"
-upcoming = "Urmează"
+view = "Vizualizați"
 
 [portal.procurement.error]
 title = "Ceva nu a mers bine"
 
 [portal.procurement.hero]
-company = "Tranzacția ta enterprise"
+barAria = "Etapa {{current}} din {{total}}"
 ctaAgreement = "Revizuiește și semnează acordul"
-ctaLive = "Ești activ"
-ctaPayment = "Adaugă plata"
+ctaExploring = "Configurați perioada de probă"
 ctaQuote = "Revizuiește oferta"
+ctaReviewQuote = "Revizuiți oferta"
 ctaTrial = "Construiește oferta"
+documents = "Documente"
 eyebrow = "Achiziții enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Invită coechipieri"
-keyDocs = "Documente cheie"
-nextStep = "Pasul următor: {{action}}"
-notStarted = "Neînceput"
+licenseKey = "Cheie de licență"
+liveSub = "Organizația dvs. este provisionată și licența dvs. este activă."
+liveTitle = "Sunteți live pe Stirling Enterprise"
+next = "Următorul: {{stage}}"
 open = "Deschide achizițiile"
 scheduleCall = "Programează un apel"
-setup1Sub = "Invită-ți coechipierii"
-setup1Title = "Implementează PDF Editor"
-setup2Sub = "Activează procesarea în editori și alte surse"
-setup2Title = "Conectează PDF Processor"
-setup3Sub = "Activează Security, Compliance, Routing sau Retention când ai nevoie de ele"
-setup3Title = "Adaugă politici recomandate"
+sentenceAgreement = "revizuiți și semnați acordul"
+sentenceLive = "provisionare și lansare"
+sentencePayment = "ordin de achiziție și plată"
+sentenceQuote = "revizuiți și acceptați oferta"
+sentenceTrial = "configurați spațiul de lucru de probă"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} zi rămasă"
 daysLeft_other = "{{count}} zile rămase"
-engineerLabel = "Inginerul tău de soluții"
-eyebrow = "Lansarea ta"
-live = "Ești activ pe Stirling Enterprise"
-nextStep = "Pasul următor: {{action}}"
-subtitle = "Inginerul tău de soluții este prezent la fiecare pas. O singură acțiune următoare pe rând; lista completă este mai jos."
-title = "De la trial la activ, un parcurs ghidat"
-trialTitle = "Trial Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "O singură semnătură acoperă MSA, formularul de comandă, EULA și DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Fișierul de licență offline nu a putut fi generat încă —
 downloadOffline = "Descarcă licența offline (.lic)"
 hint = "Lipește această cheie într-o instanță self-hosted pentru a o activa sau păstreaz-o pentru evidențele tale. Păstreaz-o în siguranță."
 label = "Cheia ta de licență"
+subtitle = "Activați o instanță self-hosted cu această cheie sau păstrați-o pentru evidențele dvs."
+title = "Cheia dvs. de licență"
+trialFileHint = "Acesta este fișierul dvs. de licență de probă. După ce acordul este în vigoare, reveniți și descărcați-l din nou — spre deosebire de cheia de licență online, fișierul .lic nu se actualizează singur."
 
 [portal.procurement.link]
 cta = "Conectează contul"
@@ -7739,65 +8619,62 @@ description = "Abonamentul tău este activ și licența ta a fost emisă. Echipa
 eyebrow = "Activ"
 title = "Ești activ pe Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Cheile de trial, ofertele pentru volum angajat, acordul cu o singură semnătură, plata și registrul documentelor tale se află toate aici după ce începi o evaluare enterprise."
-eyebrow = "Doar Enterprise"
-talkToSales = "Discută cu vânzările"
-title = "Traseul de achiziții se deschide cu Enterprise"
-
 [portal.procurement.milestone]
-accept = "Acceptă și continuă"
-description = "Descarcă PDF-ul pentru a-l partaja cu echipa ta, revino să accepți când ești pregătit sau fă modificări."
-download = "Descarcă PDF"
 downloadError = "Oferta PDF nu a putut fi descărcată încă — încearcă din nou peste câteva momente."
-edit = "Editează oferta"
-eyebrow = "Oferta {{number}}"
-perYear = " / an"
-preparedFor = "Pregătită pentru {{company}}"
-tcv = "{{value}} valoare totală a contractului"
-title = "Oferta ta este gata"
-
-[portal.procurement.modal]
-cancel = "Anulează"
-chooseFile = "Alege fișierul"
-close = "Închide"
-downloadBody = "Descărcarea ta va începe în scurt timp."
-downloadCta = "Descarcă"
-downloadTitle = "Descarcă"
-noFile = "Niciun fișier selectat"
-payBody = "Plătește contractul angajat cu cardul sau prin transfer bancar prin Stripe. Spațiul tău de lucru se provisionează imediat ce plata este confirmată."
-payCta = "Continuă către Stripe"
-payTitle = "Confirmă plata"
-requestBodyFree = "Generăm acest document la cerere. Confirmă, iar inginerul tău de soluții îl va trimite în scurt timp."
-requestBodyPaid = "Acesta este un supliment plătit. Confirmă, iar inginerul tău de soluții îl va dimensiona și va trimite documentele."
-requestCta = "Solicită"
-requestTitle = "Solicită acest document"
-signBody = "Deschide Stirling Enterprise Agreement pentru semnătură electronică: o singură semnătură acoperă MSA, formularul de comandă, EULA și DPA. Contrasemnăm automat și treci la plată."
-signCta = "Deschide pentru semnare"
-signTitle = "Revizuiește și semnează acordul"
-uploadBody = "Trimite-ne PO-ul tău și facturăm în baza lui, în termenii tăi. Trage PDF-ul aici sau alege un fișier mai jos."
-uploadCta = "Încarcă comanda de achiziție"
-uploadTitle = "Încarcă comanda ta de achiziție"
 
 [portal.procurement.payment]
 description = "Oferta ta este acceptată și licența este deja activă — echipa ta poate începe imediat. Plătește prima factură când ești pregătit; o poți plăti sau descărca aici, fără email."
+downloadAgreement = "Descărcați acordul semnat"
 downloadInvoice = "Descarcă factura"
-simulate = "Simulează plata primită (demo)"
+eyebrow = "Plată"
 title = "Abonament creat"
 viewInvoice = "Vezi și plătește factura"
 
+[portal.procurement.review]
+acceptCta = "Acceptați oferta"
+annual = "Taxă anuală (anul 1)"
+downloadCta = "Descărcați oferta"
+poNumber = "Ordin de achiziție: {{po}}"
+renewal = "Se reînnoiește la {{amount}}/an după termen (+{{pct}}% CPI)"
+tcv = "Termen de {{years}} ani, plătit integral în avans: {{tcv}}"
+validUntil = "Valabil până la {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Programatorul nu a putut fi încărcat."
 fallbackLink = "Deschide programarea într-o filă nouă"
+loading = "Se încarcă programatorul..."
 subtitle = "Inginerul tău de soluții îți va ghida echipa prin lansare. Alege o oră care ți se potrivește."
 title = "Programează un apel"
 
-[portal.procurement.status]
-action = "Acțiune necesară"
-available = "Disponibil"
-complete = "Complet"
-pending = "În așteptare"
-request = "La cerere"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Sigilat, fără ieșire"
+back = "Înapoi"
+businessName = "Nume companie"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Gestionat, cel mai rapid start"
+continue = "Continuați"
+deployment = "Unde ar trebui implementat?"
+eula = "Sunt de acord cu Stirling EULA și Termenii comerciali."
+fullName = "Nume complet"
+fullNamePlaceholder = "Numele dvs."
+invites = "Invitați colegi · opțional"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Programați un apel"
+seats = "Persoane care testează"
+seatsPlaceholder = "de ex. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker sau Kubernetes"
+start = "Începeți perioada de probă"
+stepOf = "Pasul {{n}} din {{total}}"
+subtitle = "Gratuit 14 zile, fără card necesar."
+subtitleDetails = "Câteva detalii pentru oferta și acordul dvs."
+talkFirst = "Preferați să discutăm mai întâi?"
+title = "Configurați perioada de probă"
+viewEula = "Citiți-l"
+workEmail = "Email de serviciu"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Extinderea adaugă 7 zile și notifică inginerul tău de soluții."
@@ -7808,20 +8685,6 @@ maxed = "Limită atinsă"
 subtitle = "Trialul tău gratuit rulează până la {{date}}. Nu este necesar cardul."
 title = "Trial Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Preț pentru volum angajat, SSO + SCIM + RBAC la nivel de org, audit imuabil de 90 de zile și un SE dedicat."
-homeCta = "Începe trialul →"
-homeHeadline = "Procesează milioane de PDF-uri."
-
-[portal.recentActivity]
-title = "Activitate recentă"
-viewAll = "Vezi tot"
-
-[portal.recentActivity.empty]
-description = "Rulările de pipeline, implementările și evenimentele agenților vor apărea aici."
-title = "Încă nu este nimic aici"
-
 [portal.search]
 ariaLabel = "Caută"
 placeholder = "Caută în Stirling — endpoint-uri, pipeline-uri, documente…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Conectarea contului"
 
-[portal.shell.header]
-accountFallback = "Cont"
-accountMenu = "Meniu cont"
-darkMode = "Mod întunecat"
-lightMode = "Mod luminos"
-search = "Caută"
-searchPlaceholder = "Caută…"
-signOut = "Deconectează-te"
-switchToDark = "Comută la tema întunecată"
-switchToLight = "Comută la tema luminoasă"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} doc."
 linkAccount = "Conectează contul Stirling"
-planEditor = "Plan Editor"
-planEnterprise = "Plan Enterprise"
-planProcessor = "Plan Processor"
 primaryNav = "Navigare principală"
 switchApp = "Comută aplicația"
 
+[portal.shell.topbar]
+closeNav = "Închideți navigarea"
+openNav = "Deschideți navigarea"
+search = "Căutați"
+
 [portal.sources]
 subtitle = "Conexiuni de intrare reutilizabile care alimentează documente în Stirling. Configurează o conexiune o singură dată, apoi referențiaz-o din orice număr de politici. Fă clic pe un rând pentru configurarea sa și politicile care o folosesc."
 title = "Surse"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Conectează sursa"
 
+[portal.sources.builder]
+back = "Înapoi la surse"
+backToTypes = "Toate tipurile de surse"
+cancel = "Anulați"
+chooseHint = "Alegeți de unde vin documentele. Conectorii gri sunt în pregătire."
+comingSoon = "În curând"
+comingSoonHeading = "În curând"
+create = "Creați sursa"
+createTitle = "Conectați o sursă"
+delete = "Ștergeți"
+editTitle = "Editați sursa"
+enabled = "Activată"
+save = "Salvați modificările"
+
+[portal.sources.builder.folderAccess]
+description = "Automatizările de folder pot folosi doar foldere pe care un administrator le-a permis. Adăugați-l în setările Acces folder, apoi încercați din nou."
+openSettings = "Setări Acces folder"
+title = "Acest folder nu este permis"
+
 [portal.sources.delete]
 body = "Ștergi \"{{name}}\"? Această acțiune nu poate fi anulată. Politicile care o referențiază ar trebui actualizate."
 cancel = "Anulează"
 confirm = "Șterge"
 title = "Ștergi sursa?"
 
-[portal.sources.detail]
-closeAriaLabel = "Închide detaliile"
-delete = "Șterge sursa"
-docs24h = "Ultimele 24h"
-docs30d = "Ultimele 30 de zile"
-docsTotal = "Total văzute"
-docsTrend = "Documente în ultimele 30 de zile"
-documents = "Documente"
-edit = "Editează"
-notReferenced = "Nu este referențiată de nicio politică, deci poate fi ștearsă în siguranță."
-pause = "Pauză"
-resume = "Reia"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Folosită de"
-
 [portal.sources.empty]
 description = "Conectează un folder (și, în curând, stocare cloud) astfel încât politicile tale să aibă de unde prelua documente."
 title = "Încă nu există surse conectate"
@@ -7899,18 +8754,57 @@ inUse = "În uz"
 total = "Conexiuni"
 unused = "Nefolosite"
 
+[portal.sources.networkFields.connection]
+helperText = "Conexiunea stocată cu adresa serverului și credențialele. Reutilizată de fiecare sursă care o referențiază."
+label = "Conexiune"
+
+[portal.sources.networkFields.directory]
+helperText = "Folder de pe server de interogat, relativ la home-ul de autentificare sau la rădăcina share-ului. Lăsați gol pentru rădăcină."
+label = "Folder"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume elimină fiecare fișier de pe server după ce fiecare politică l-a procesat."
+label = "Mod de citire"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: procesați fiecare fișier o singură dată"
+snapshot = "Snapshot: recitiți folderul la fiecare rulare"
+
+[portal.sources.networkFields.recursive]
+label = "Adâncime folder"
+
+[portal.sources.networkFields.recursive.options]
+all = "Include subfoldere"
+top = "Doar nivelul superior"
+
 [portal.sources.status]
 active = "Activ"
 disabled = "Dezactivat"
 unused = "Nefolosit"
 
 [portal.sources.table]
+documents = "Documente"
 source = "Sursă"
 status = "Stare"
 usedBy = "Politici"
 
+[portal.sources.types.box]
+description = "Preluați documente din foldere Box pe care echipa dvs. le partajează deja."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Preluați documente dintr-un folder Dropbox partajat."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Documente pe care echipa dvs. le-a procesat în editor, în rulări de politici și AI."
 label = "Editor"
+noPolicies = "Încă nu a rulat nicio politică din editor."
+
+[portal.sources.types.email]
+description = "Transformați atașamentele trimise către o căsuță poștală dedicată în documente."
+label = "Inbox email"
 
 [portal.sources.types.folder]
 description = "Monitorizează un director de pe server pentru documente noi."
@@ -7943,25 +8837,80 @@ label = "Adâncime folder"
 all = "Include subfoldere"
 top = "Doar nivelul superior"
 
+[portal.sources.types.ftp]
+description = "Interogați un folder de server FTP sau FTPS pentru documente noi."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Preluați documente din foldere Google Drive partajate."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Monitorizați un share de rețea SMB pentru documente noi."
+label = "Drive de rețea"
+
+[portal.sources.types.onedrive]
+description = "Monitorizați foldere OneDrive pentru documente noi."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Preluați documente dintr-un bucket Amazon S3 sau compatibil S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Conexiunea stocată care conține bucket-ul și credențialele. Reutilizată de fiecare sursă și ieșire de pipeline care o referențiază."
+label = "Conexiune"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume elimină fiecare obiect din bucket după ce fiecare politică l-a procesat."
+label = "Mod de citire"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: procesați fiecare obiect o singură dată"
+snapshot = "Snapshot: recitiți bucket-ul la fiecare rulare"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Sunt procesate doar obiectele ale căror chei încep cu acest prefix."
+label = "Prefix cheie"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Interogați un folder drop SFTP pentru documente noi."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Preluați documente din bibliotecile de documente SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Sursă"
 
+[portal.sources.types.webhook]
+createNote = "Un URL de livrare și un secret de semnare sunt generate când creați acest webhook. Expeditorii trimit documente prin POST către acel URL, iar politicile care îl referențiază rulează la sosire."
+description = "Primiți documente prin HTTP POST semnat de la orice sistem extern."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL de livrare"
+secretNote = "Secretul de semnare este afișat o singură dată, când webhook-ul este creat. Recreați sursa pentru a-l roti."
+
+[portal.sources.types.webhook.reveal]
+copy = "Copiați"
+done = "Gata"
+secret = "Secret de semnare"
+secretHelp = "Semnați corpul brut al fiecărei livrări cu această cheie (HMAC-SHA256) și trimiteți-l ca header X-Stirling-Signature."
+secretWarning = "Copiați acum secretul de semnare. Pentru securitatea dvs., este afișat o singură dată și nu poate fi recuperat ulterior."
+title = "Webhook creat"
+url = "URL de livrare"
+usage = "Trimiteți fiecare document prin POST ca body brut al cererii către URL-ul de livrare, cu un tip de conținut binar (application/pdf sau application/octet-stream). Politicile care îl referențiază rulează automat la sosire."
+
 [portal.sources.wizard]
-back = "Înapoi"
-cancel = "Anulează"
-continue = "Continuă"
-editTitle = "Editează sursa"
 name = "Nume"
 namePlaceholder = "de ex. Primire cereri"
-save = "Salvează modificările"
-subtitle = "Pasul {{current}} din {{total}} · {{label}}"
-title = "Conectează o sursă"
 type = "Tip"
 
-[portal.sources.wizard.steps]
-chooseType = "Alege tipul"
-configure = "Configurează"
-review = "Revizuiește și conectează"
+[portal.stepModal]
+close = "Închideți"
 
 [portal.usage]
 managePayment = "Gestionează plata"
@@ -8021,16 +8970,9 @@ summary = "Deține o echipă — gestionează resursele membrilor și configură
 2 = "Acces la portal prin politica implicită"
 3 = "Tot ce poate face un Membru"
 
-[portal.welcome]
-ariaLabel = "Bun venit la Stirling PDF"
-badge = "Open-source"
-installEditor = "Instalează Editorul"
-inviteTeammates = "Invită coechipieri"
-openInBrowser = "Deschide în browser"
-perks = "Gratuit pentru totdeauna · Self-hostable"
-subtitle = "Cel mai sigur PDF Editor din lume este gratuit pentru echipe de toate dimensiunile. Include peste 60 de operațiuni PDF și SSO."
-title = "Bun venit la"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Nelimitat"
 
 [printFile]
 title = "Tipărește Fișier"
@@ -8613,6 +9555,14 @@ text = "Rotiți paginile PDF în sens orar sau antiorar în trepte de 90 de grad
 [rotate.tooltip.header]
 title = "Prezentare setări de rotație"
 
+[ruler]
+clearAll = "Ștergeți tot"
+hideAllLabels = "Ascundeți toate etichetele"
+hideSmallLabels = "Ascundeți etichetele mici"
+physicalValues = "Fizic"
+scaled = "Scalat"
+showAllLabels = "Afișați toate etichetele"
+
 [sanitize]
 desc = "Eliminați elementele potențial dăunătoare din fișierele PDF."
 sanitizationResults = "Rezultatele sanitizării"
@@ -8654,31 +9604,45 @@ label = "Eliminați metadatele XMP"
 [sanitize.steps]
 settings = "Setări"
 
-[sanitizePdf]
-tags = "curăță,securizează,sigur,elimină-amenințări"
-
 [sanitizePDF]
 title = "Igienizează PDF"
 
+[sanitizePdf]
+tags = "curăță,securizează,sigur,elimină-amenințări"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Ajustează scala paginii"
 
+[scaleSettings]
+activeScale = "Scară activă"
+apply = "Aplicați scara"
+applyCalibration = "Aplicați calibrarea"
+calculatedScale = "Scară calculată"
+calibrate = "Calibrați"
+calibrating = "Se calibrează"
+calibrationDistanceRequired = "Introduceți o distanță reală mai mare decât zero"
+calibrationInvalid = "Nu se poate calcula scara din această măsurătoare"
+calibrationPaperDistance = "Distanța măsurată pe pagină: {{distance}}"
+calibrationTitle = "Calibrare scară"
+calibrationTooltip = "Măsurați o distanță cunoscută pentru a calcula automat scara"
+customScale = "Scară personalizată"
+noneSet = "Nu este setată nicio scară personalizată"
+presets = "Scări presetate"
+ratio = "Raport de scară"
+ratioHelp = "Raport: 1 unitate de pagină = X unități reale"
+ratioPlaceholder = "de ex., 100"
+ratioPositive = "Raportul trebuie să fie mai mare decât zero"
+ratioRequired = "Raportul este obligatoriu"
+realDistance = "Distanță reală"
+realDistancePlaceholder = "de ex., 5"
+reset = "Resetează la valorile implicite"
+unit = "Unitate"
+unitInvalid = "Unitate nevalidă: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Prag unghi:"
-10 = "Stabilește mărimea marginii adăugate și eliminate pentru a evita marginile albe în rezultat (implicit: 1)."
-2 = "Stabilește unghiul absolut minim necesar pentru ca imaginea să fie rotită (implicit: 5)."
-3 = "Toleranță:"
-4 = "Determină intervalul de variație a culorii în jurul culorii de fundal estimate (implicit: 20)."
-5 = "Arie minimă:"
-6 = "Stabilește pragul minim de arie pentru o fotografie (implicit: 8000)."
-7 = "Arie minimă a conturului:"
-8 = "Stabilește pragul minim de arie a conturului pentru o fotografie."
-9 = "Mărimea marginii:"
-
 [scannerImageSplit]
 submit = "Extrage scanări de imagini"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Ce face"
 whatThisDoesDesc = "Găsește și extrage automat fiecare fotografie dintr-o pagină scanată sau imagine compozit—fără decupare manuală."
 whenToUse = "Când se folosește"
 
+[ScannerImageSplit.selectText]
+1 = "Prag unghi:"
+10 = "Stabilește mărimea marginii adăugate și eliminate pentru a evita marginile albe în rezultat (implicit: 1)."
+2 = "Stabilește unghiul absolut minim necesar pentru ca imaginea să fie rotită (implicit: 5)."
+3 = "Toleranță:"
+4 = "Determină intervalul de variație a culorii în jurul culorii de fundal estimate (implicit: 20)."
+5 = "Arie minimă:"
+6 = "Stabilește pragul minim de arie pentru o fotografie (implicit: 8000)."
+7 = "Arie minimă a conturului:"
+8 = "Stabilește pragul minim de arie a conturului pentru o fotografie."
+9 = "Mărimea marginii:"
+
 [search]
 noResults = "Nu s-au găsit rezultate"
 placeholder = "Introduceți termenul de căutare..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Serverul dvs. Stirling-PDF este offline, iar \"{{endp
 [session]
 expired = "Sesiunea dvs. a expirat. Reîmprospătați pagina și încercați din nou."
 
-[sessionManagement.tooltip]
-header = "Gestionarea sesiunilor de semnare"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Noii participanți sunt adăugați la finalul ordinii de semnare"
-bullet2 = "Nu se pot adăuga participanți după finalizarea sesiunii"
-bullet3 = "Fiecare participant primește o notificare când îi vine rândul"
-description = "Puteți adăuga mai mulți participanți la o sesiune activă oricând înainte de finalizare."
-title = "Adăugarea participanților"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Finalizare completă</b>: Toți participanții au semnat"
-bullet2 = "<b>Finalizare parțială</b>: Unii participanți nu au semnat încă"
-bullet3 = "Participanții fără semnătură vor fi excluși din documentul final"
-bullet4 = "După finalizare, puteți încărca PDF-ul semnat în fișierele active"
-description = "Finalizarea combină toate semnăturile într-un singur PDF semnat. Această acțiune nu poate fi anulată."
-title = "Finalizarea sesiunii"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Nu pot fi eliminați participanții care au semnat deja"
-bullet2 = "Participanții eliminați nu mai primesc notificări"
-bullet3 = "Ordinea de semnare se ajustează automat"
-description = "Participanții pot fi eliminați din sesiuni înainte să semneze."
-title = "Eliminarea participanților"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Fiecare semnătură este aplicată secvențial pe PDF"
-bullet2 = "Semnatarii ulteriori pot vedea semnăturile anterioare"
-bullet3 = "Critic pentru fluxuri de aprobare și lanțuri legale de custodie"
-description = "Ordinea specificată la crearea sesiunii determină cine semnează primul."
-title = "Ordinea semnăturilor"
-
 [settings]
 close = "Închideți"
 
+[settings.ai]
+documents = "Documente și RAG"
+general = "General"
+limits = "Limite și performanță"
+models = "Modele și furnizori"
+title = "AI"
+
 [settings.configuration]
 advanced = "Avansat"
 database = "Bază de date"
 endpoints = "Endpoint-uri"
 features = "Funcții"
+folderAccess = "Acces la foldere"
 mcp = "MCP Server"
 storageSharing = "Stocare fișiere și partajare"
 systemSettings = "Setări sistem"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Editor PDF implicit"
 defaultPdfEditorActive = "Stirling PDF este editorul tău PDF implicit"
 defaultPdfEditorChecking = "Se verifică..."
 defaultPdfEditorInactive = "O altă aplicație este setată ca implicită"
+defaultPdfEditorRemind = "Amintește-mi să setez ca implicit"
+defaultPdfEditorRemindDescription = "Afișează un banner când Stirling PDF nu este aplicația implicită pentru PDF."
 defaultPdfEditorSet = "Deja implicit"
 defaultStartupView = "Vizualizare implicită la pornire"
 defaultStartupViewDescription = "Alegeți care filă este activă în coloana din stânga la pornirea aplicației"
@@ -8817,9 +9771,18 @@ languageDescription = "Alege limba afișată"
 logout = "Deconectare"
 setAsDefault = "Setează ca implicit"
 theme = "Temă"
+themeAccent = "Culoare de accent"
+themeAccentCustom = "Culoare personalizată"
+themeAccentCustomHint = "Personalizat (valorile implicite sunt recomandate)"
+themeAccentDark = "Culoare de accent pentru modul întunecat"
+themeAccentDefault = "Implicit"
+themeAccentDefaultHint = "Temă implicită (recomandată)"
+themeAccentDescription = "Butoanele, linkurile și evidențierile folosesc această culoare, iar aceasta nuanțează subtil aplicația. Modurile luminos și întunecat au fiecare propria culoare. Sistemul folosește culoarea activă."
+themeAccentLight = "Culoare de accent pentru modul luminos"
 themeDark = "Întunecată"
 themeDescription = "Comută între modul deschis și întunecat"
 themeLight = "Deschisă"
+themeReset = "Restabilește tema implicită"
 themeSystem = "System"
 title = "General"
 user = "Utilizator"
@@ -8833,6 +9796,12 @@ intro = "Activați autentificarea utilizatorilor, gestionarea echipei și funcț
 learnMore = "Aflați mai multe în documentație"
 title = "Pentru administratorii de sistem"
 
+[settings.general.loginLanding]
+description = "Alegeți ce aplicație se deschide când vă autentificați în Stirling Cloud."
+editor = "Editor"
+processor = "Procesator"
+title = "După autentificare"
+
 [settings.general.mode]
 fullscreen = "Ecran complet"
 sidebar = "Bară laterală"
@@ -9041,6 +10010,11 @@ security = "Securitate"
 telegram = "Telegram"
 title = "Securitate și autentificare"
 
+[settings.signOut]
+confirm = "Sigur doriți să vă deconectați?"
+submit = "Deconectare"
+title = "Deconectare"
+
 [settings.team]
 title = "Echipă"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Încărcați pe server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "faceți clic aici"
+fallback = "Dacă nu s-a deschis automat,"
+opening = "Se deschide Swagger UI într-o filă nouă..."
 tags = "api,documentație,swagger,endpoint-uri,dezvoltare"
 title = "Documentație API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Selectați fișiere din Fișiere active pentru a rula acest i
 singleFileScope = "Se aplică numai pentru: {{fileName}}"
 viewerMode = "Comutați la editorul de fișiere pentru a selecta mai multe fișiere."
 
+[toolFormat]
+ANY = "orice fișier"
+CBR = "o arhivă de benzi desenate (CBR)"
+CBZ = "o arhivă de benzi desenate (CBZ)"
+CSV = "un fișier CSV"
+EBOOK = "o carte electronică"
+EMAIL = "un e-mail"
+EXCEL = "o foaie de calcul"
+HTML = "o pagină web"
+IMAGE = "imagini"
+JAVASCRIPT = "un fișier JavaScript"
+JSON = "un fișier JSON"
+MARKDOWN = "un fișier Markdown"
+NONE = "niciun fișier"
+PCL = "un fișier de imprimare PCL"
+PDF = "un PDF"
+PDF_ENCRYPTED = "un PDF protejat cu parolă"
+POSTSCRIPT = "un fișier PostScript"
+PPT = "o prezentare"
+TEXT = "un fișier text"
+VIDEO = "un videoclip"
+WORD = "un document Word"
+XML = "un fișier XML"
+XPS = "un document XPS"
+ZIP = "o arhivă ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Înapoi la toate instrumentele"
 collapse = "Restrânge panoul"
 expand = "Extinde panoul"
 goBack = "Înapoi"
+pdfTools = "Instrumente PDF"
 placeholder = "Alegeți un instrument pentru a începe"
 premiumFeature = "Funcție premium:"
+searchTools = "Caută instrumente"
 toolsHeader = "Instrumente"
 viewAllTools = "Vedeți toate instrumentele"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nu s-au găsit instrumente"
 quickAccess = "ACCES RAPID"
 searchPlaceholder = "Căutați instrumente..."
 
-[toolPicker.categories]
-advancedTools = "Instrumente avansate"
-recommendedTools = "Instrumente recomandate"
-standardTools = "Instrumente standard"
-
 [toolPicker.subcategories]
 advancedFormatting = "Formatare avansată"
 automation = "Automatizare"
@@ -9950,16 +10950,31 @@ title = "Utilizatori"
 you = "(tu)"
 
 [users.action]
+cancelInvite = "Anulează invitația"
 deleteTeam = "Șterge echipa"
 disableMfa = "Resetează MFA"
 move = "Mută în echipă"
 reinstate = "Reactivează"
 remove = "Elimină din org"
+removeTeam = "Elimină din echipă"
 rename = "Redenumește echipa"
 resetPw = "Resetează parola"
 suspend = "Suspendă"
 unlock = "Deblochează contul"
 
+[users.activity]
+daysAgo = "{{count}} z în urmă"
+hoursAgo = "{{count}} h în urmă"
+justNow = "Chiar acum"
+minutesAgo = "{{count}} min în urmă"
+monthsAgo_one = "{{count}} lună în urmă"
+monthsAgo_other = "{{count}} luni în urmă"
+never = "Niciodată"
+weeksAgo_one = "{{count}} săptămână în urmă"
+weeksAgo_other = "{{count}} săptămâni în urmă"
+yearsAgo_one = "{{count}} an în urmă"
+yearsAgo_other = "{{count}} ani în urmă"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Aprobă politica"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Anulați invitația către {{email}}? Nu va putea să se alăture cu linkul actual."
+cancelInviteTitle = "Anulează invitația"
 deleteTeamBody = "Ștergi echipa {{name}}? Echipa trebuie să fie mai întâi goală - mută-i membrii într-o altă echipă și nu trebuie să mai dețină configurări de integrare."
 deleteTeamTitle = "Șterge echipa"
 disableMfaBody = "Elimini înscrierea MFA a lui {{name}}? O va configura din nou la următoarea autentificare, dacă este necesar."
 disableMfaTitle = "Resetează MFA"
 removeBody = "Elimini definitiv pe {{name}} din organizație? Această acțiune nu poate fi anulată."
+removeTeamBody = "Eliminați pe {{name}} din echipă? Își păstrează contul, dar pierde accesul la resursele acestei echipe."
 removeTitle = "Elimină membrul"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Nume de utilizator"
 usernameError = "Numele de utilizator trebuie să aibă cel puțin 3 caractere"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Invitat de {{who}}"
+cancel = "Anulează"
+count = "{{count}} în așteptare"
+desc = "Persoanele invitate care nu s-au alăturat încă. Ocupă un loc până când acceptă."
+expiresInDays_one = "Expiră peste {{count}} zi"
+expiresInDays_other = "Expiră peste {{count}} zile"
+expiresToday = "Expiră astăzi"
+title = "Invitații în așteptare"
+
 [users.loadError]
 description = "Ceva nu a mers bine la conectarea cu backend-ul sau nu aveți acces. Încercați din nou."
 title = "Nu s-au putut încărca membrii"
@@ -10212,9 +11240,11 @@ title = "Atașamente"
 
 [viewer.bookmarks]
 bookmarkTitle = "Titlul marcajului"
+bookmarkTitleRequired = "Titlul marcajului este obligatoriu"
 closeSidebar = "Închide bara laterală a marcajelor"
 collapseAll = "Restrânge toate marcajele"
 expandAll = "Extinde toate marcajele"
+searchPlaceholder = "Caută marcaje"
 
 [viewer.comments]
 addComment = "Adăugați comentariu"
@@ -10605,30 +11635,6 @@ title = "Text filigran"
 image = "Imagine"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Metode de creare a semnăturii"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Personalizați culoarea și grosimea liniei"
-bullet2 = "Ștergeți și redesenați până când sunteți mulțumit"
-bullet3 = "Funcționează pe dispozitive cu ecran tactil (tablete, telefoane)"
-description = "Creați o semnătură olografă folosind mouse-ul sau ecranul tactil. Ideală pentru semnături personale, autentice."
-title = "Desenați semnătura"
-
-[wetSignature.tooltip.type]
-bullet1 = "Alegeți dintre mai multe fonturi"
-bullet2 = "Personalizați dimensiunea și culoarea textului"
-bullet3 = "Perfect pentru semnături standardizate"
-description = "Generați o semnătură din text tastat. Rapidă și consecventă, potrivită pentru documente de afaceri."
-title = "Tastați semnătura"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Acceptă PNG, JPG și alte formate de imagine"
-bullet2 = "Fundalurile transparente sunt recomandate pentru rezultate optime"
-bullet3 = "Imaginea va fi redimensionată pentru a se potrivi zonei semnăturii"
-description = "Încărcați o imagine de semnătură preexistentă. Ideală dacă aveți o semnătură scanată sau un logo al companiei."
-title = "Încărcați imaginea semnăturii"
-
 [workbenchBar]
 activeFiles = "Fișiere active"
 annotations = "Adnotări"
@@ -10652,6 +11658,7 @@ redact = "Redactează"
 rotateLeft = "Rotește la stânga"
 rotateRight = "Rotește la dreapta"
 ruler = "Riglă / Măsurare"
+rulerSettings = "Setări scară"
 save = "Salvează"
 saveAll = "Salvează tot"
 saveAs = "Salvează ca"
diff --git a/frontend/editor/public/locales/ru-RU/translation.toml b/frontend/editor/public/locales/ru-RU/translation.toml
index 289e93e965..b1693a039a 100644
--- a/frontend/editor/public/locales/ru-RU/translation.toml
+++ b/frontend/editor/public/locales/ru-RU/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "файлов выбрано"
 font = "Шрифт"
 fontSizeTooltip = "Размер текста номера страницы в пунктах. Большие числа — больше текст."
 fontTypeTooltip = "Семейство шрифтов для номеров страниц. Выберите в соответствии со стилем документа."
-genericSubmit = "Отправить"
 green = "Зеленый"
 help = "Помощь"
-imgPrompt = "Выберите изображение(я)"
 incorrectPasswordMessage = "Текущий пароль неверен."
 info = "Информация"
 invalidUndoData = "Нельзя отменить: неверные данные операции"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Соглашение при входе"
 logOut = "Выйти"
 marginTooltip = "Расстояние между номером страницы и краем страницы."
 moreOptions = "Больше параметров"
-multiPdfPrompt = "Выберите PDF-файлы (2+)"
 never = "Никогда"
 no = "Нет"
 noFileSelected = "Файл не выбран. Пожалуйста, загрузите его."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Пользовательский порядок страни
 pages = "Страницы"
 pageSelectionPrompt = "Выбор страниц (Введите список номеров страниц через запятую 1,5,6 или функции типа 2n+1):"
 password = "Пароль"
-pdfPrompt = "Выберите PDF-файл(ы)"
 pin = "Закрепить файл (оставить активным после выполнения инструмента)"
 pro = "Pro"
 processingComplete = "Ваш файл готов."
@@ -356,6 +352,7 @@ text = "Эти разрешения контролируют, что польз
 title = "Изменить разрешения"
 
 [addStamp]
+preview = "Предпросмотр штампа"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ручные загрузки: нажмите на ссылки 
 noLanguages = "В настроенном каталоге не найдено языков tessdata."
 permissionNotice = "Путь tessdata недоступен для записи. Загрузки будут открываться в браузере; сохраните файлы .traineddata вручную в папку tessdata."
 
+[admin.settings.ai.documents]
+description = "Настройте модель эмбеддингов и параметры извлечения, используемые для ответов на вопросы по документам. Применяется к AI engine при сохранении."
+title = "Документы и RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Оставьте пустым, чтобы использовать собственные учетные данные окружения engine. Применяется к самостоятельно размещенным развертываниям с одним engine."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Сохранено — оставьте пустым, чтобы сохранить текущий ключ"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Базовый URL OpenAI-совместимой / Ollama конечной точки эмбеддингов, например http://ollama:11434/v1. Должен указывать на доверенную внутреннюю конечную точку (чувствительно к SSRF)."
+label = "Базовый URL эмбеддингов"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Название модели эмбеддингов. Свободный текст; предложения носят только рекомендательный характер."
+label = "Модель эмбеддингов"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Поставщик, используемый для преобразования текста документа в векторные эмбеддинги."
+label = "Поставщик эмбеддингов"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Максимальное количество поисков извлечения, которые агент может выполнить за один запрос."
+label = "Макс. поисков"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Изменение модели эмбеддингов вступает в силу немедленно, но документы, проиндексированные предыдущей моделью, необходимо переиндексировать, чтобы поиск возвращал корректные результаты."
+title = "Требуется переиндексация"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Если вы изменили модель эмбеддингов, переиндексируйте существующие документы, чтобы поиск использовал новую модель."
+
+[admin.settings.ai.documents.topK]
+description = "Количество наиболее релевантных фрагментов, извлекаемых за один поиск."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Подключите Stirling к Python AI engine и выберите, какие возможности AI будут доступны. Изменения применяются при перезапуске."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Включайте или отключайте отдельные функции AI. Отключенные функции скрываются в приложении."
+title = "Возможности"
+
+[admin.settings.ai.general.enabled]
+description = "Главный переключатель. Если выключен, инструменты AI, агенты и вызовы engine недоступны."
+label = "Включить AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Разговорный помощник для работы с PDF."
+label = "Чат-помощник"
+
+[admin.settings.ai.general.features.classify]
+description = "Автоматически классифицируйте документы по типу или содержимому."
+label = "Классификация документов"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Создайте новый PDF (например, из HTML) через AI-агента."
+label = "Создать PDF из запроса"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Задавайте вопросы и получайте ответы, основанные на загруженном документе."
+label = "Вопросы по документу"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Проверяйте документы на математические и числовые ошибки."
+label = "Математический аудитор"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Добавляйте в PDF комментарии и аннотации для проверки, созданные AI."
+label = "Агент комментариев PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Тайм-аут для более тяжелых операций агента, таких как создание документов."
+label = "Тайм-аут длительных операций (секунды)"
+
+[admin.settings.ai.general.note]
+body = "AI engine работает как отдельная служба. Его общий секрет"
+body2 = "задается через переменную окружения контейнера. API keys поставщиков можно ввести на этих страницах или предоставить как переменные окружения engine; ключи, введенные здесь, отправляются в engine при сохранении."
+title = "Об AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Тайм-аут для потоковых (токен за токеном) ответов чата."
+label = "Тайм-аут потока (секунды)"
+
+[admin.settings.ai.general.test]
+button = "Проверить подключение"
+failBody = "AI engine не ответил. Проверьте URL, что контейнер engine запущен и что AI включен (после включения требуется перезапуск)."
+failTitle = "AI engine недоступен"
+okBody = "AI engine ответил на проверку работоспособности."
+okTitle = "AI engine доступен"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Тайм-аут для стандартных AI-запросов к engine."
+label = "Тайм-аут запроса (секунды)"
+
+[admin.settings.ai.general.url]
+description = "Внутренний URL Python AI engine, например http://stirling-pdf-engine:5001."
+label = "URL AI engine"
+
+[admin.settings.ai.limits]
+description = "Ограничения для объема работы AI-запросов и количества одновременно выполняемых запросов. Применяется к AI engine при сохранении."
+title = "Ограничения и производительность"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Ограничение: отклонять AI-запросы, извлеченный текст которых превышает эту длину."
+label = "Макс. символов на запрос"
+
+[admin.settings.ai.limits.maxPages]
+description = "Ограничение: отклонять AI-запросы с количеством страниц PDF больше указанного."
+label = "Макс. страниц на запрос"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Максимальное количество одновременных активных вызовов модели во всем engine."
+label = "Макс. параллелизм модели"
+
+[admin.settings.ai.models]
+description = "Выберите поставщика LLM и умную/быструю модели, которые использует AI engine. Применяется к AI engine при сохранении."
+title = "Модели и поставщики"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Оставьте пустым, чтобы использовать собственные учетные данные окружения engine. Применяется к самостоятельно размещенным развертываниям с одним engine."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Сохранено — оставьте пустым, чтобы сохранить текущий ключ"
+
+[admin.settings.ai.models.baseUrl]
+description = "Базовый URL OpenAI-совместимой / Ollama конечной точки, например http://ollama:11434/v1."
+label = "Базовый URL поставщика"
+warning = "Базовый URL должен указывать на доверенную внутреннюю конечную точку. Engine будет выполнять к ней серверные запросы, поэтому недоверенное значение чувствительно к SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Максимальное количество выходных токенов для быстрой модели."
+label = "Макс. токенов быстрой модели"
+
+[admin.settings.ai.models.fastModel]
+description = "Более дешевая и быстрая модель для легких задач. Свободный текст; предложения носят только рекомендательный характер."
+label = "Быстрая модель"
+
+[admin.settings.ai.models.provider]
+description = "С каким поставщиком LLM взаимодействует engine."
+label = "Поставщик"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Максимальное количество выходных токенов для умной модели."
+label = "Макс. токенов умной модели"
+
+[admin.settings.ai.models.smartModel]
+description = "Модель с высокими возможностями для сложных рассуждений. Свободный текст; предложения носят только рекомендательный характер."
+label = "Умная модель"
+
+[admin.settings.ai.saved]
+body = "Изменения автоматически отправлены в AI engine."
+bodyNoPush = "Настройки сохранены. Они применятся, когда AI engine в следующий раз получит свою конфигурацию."
+title = "Настройки AI сохранены"
+
 [admin.settings.badge]
 clickToUpgrade = "Нажмите, чтобы посмотреть детали плана"
 
@@ -938,6 +1094,25 @@ label = "Пересоздавать при запуске"
 description = "Количество дней действия сертификата"
 label = "Срок действия сертификата (дни)"
 
+[admin.settings.folderAccess]
+description = "Каталоги, из которых источникам папок и выходным папкам разрешено читать и в которые разрешено записывать. Это граница безопасности: автоматизации никогда нельзя указать путь на сервере вне этого списка."
+securityNote = "Оставьте пустым, чтобы полностью отключить источники папок и выходные папки. Собственный каталог конфигурации Stirling всегда недоступен."
+title = "Доступ к папкам"
+
+[admin.settings.folderAccess.implied]
+description = "Эти каталоги, управляемые Stirling, всегда разрешены и не могут быть изменены здесь."
+serverStorage = "Файловое хранилище сервера"
+title = "Всегда разрешено"
+watchedFolder = "Отслеживаемая папка конвейера"
+
+[admin.settings.folderAccess.roots]
+add = "Добавить"
+empty = "Нет разрешенных папок. Источники папок и выходные папки сейчас отключены."
+hint = "Введите абсолютные пути, например /data/inbox."
+label = "Разрешенные корневые папки"
+placeholder = "/data/inbox"
+remove = "Удалить корневую папку"
+
 [admin.settings.general]
 description = "Настройте системные параметры приложения, включая брендинг и поведение по умолчанию."
 system = "Система"
@@ -1842,6 +2017,15 @@ export = "Экспорт"
 accessDenied = "Доступ запрещен"
 insufficientPermissions = "У вас нет прав для выполнения этого действия."
 
+[auth.callback]
+completing = "Завершение аутентификации"
+invalidToken = "Вход через OAuth не удался — недействительный токен."
+missingToken = "Вход через OAuth не удался — токен не получен."
+oauthFailed = "Вход через OAuth не удался. Повторите попытку."
+pleaseWait = "Подождите, пока мы завершим вход."
+signedOut = "Вы вышли из системы. Войдите снова."
+windowMayClose = "Вы можете закрыть это окно после завершения."
+
 [auth.displayName]
 guest = "Гость"
 user = "Пользователь"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Защищает PDF-документы, удаляя по
 description = "Этот инструмент автоматически переименует PDF-файлы на основе их содержимого. Он анализирует документ, чтобы найти наиболее подходящий заголовок из текста."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Автоповорот"
+tags = "автоповорот,исправить ориентацию,вверх ногами,боком,выпрямить,ориентация,определить ориентацию,исправить поворот,автоориентация,сканированный,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Порог уверенности"
+
+[autoRotate.detectionMode]
+auto = "Авто"
+osd = "Только OCR"
+text = "Только текст"
+title = "Метод определения"
+
+[autoRotate.error]
+failed = "Произошла ошибка при автоповороте PDF."
+
+[autoRotate.inferUndetected]
+title = "Повернуть страницы с низкой уверенностью для соответствия"
+
+[autoRotate.report]
+applied = "{{degrees}}° по часовой стрелке"
+confidenceValue = "Уверенность {{value}}"
+noChange = "Без изменений"
+pageLabel = "Страница {{number}}"
+summary = "Повернуто {{rotated}} из {{total}} страниц, {{unchanged}} оставлено как есть"
+title = "Отчет об определении"
+
+[autoRotate.report.method]
+inferred = "Сопоставлено"
+none = "Пропущено"
+osd = "OCR"
+text = "Текст"
+
+[autoRotate.report.note]
+belowThreshold = "Ниже порога"
+blankPage = "Страница пустая"
+inferredFromDocument = "Как остальные страницы"
+noDominantDirection = "Смешанные направления текста"
+osdFailed = "Читаемый текст не найден"
+osdNoVerdict = "Не удалось определить ориентацию"
+tesseractUnavailable = "OCR не установлен"
+tooFewGlyphs = "Слишком мало текста"
+
+[autoRotate.results]
+title = "Результаты автоповорота"
+
+[autoRotate.settings]
+title = "Настройки"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Насколько надежной должна быть проверка, прежде чем страница будет повернута. Уменьшите значение, чтобы поворачивать больше страниц, или увеличьте, чтобы оставлять больше страниц без изменений."
+title = "Порог уверенности"
+
+[autoRotate.tooltip.description]
+text = "Определяет, как должна быть ориентирована каждая страница, и поворачивает ее в правильное положение. Страницы, которые уже расположены правильно, остаются без изменений."
+
+[autoRotate.tooltip.detectionMode]
+text = "Авто сначала читает текст на странице, затем, если этого недостаточно, анализирует страницу как изображение. Только текст пропускает проверку изображения — это быстрее всего для документов, которые никогда не сканировались. Только OCR обрабатывает каждую страницу как изображение."
+title = "Метод определения"
+
+[autoRotate.tooltip.header]
+title = "Автоповорот"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Пустые или почти пустые страницы нельзя проверить отдельно. Когда все страницы, которые удалось прочитать, требуют одинакового поворота, эти страницы поворачиваются в соответствии с ними."
+title = "Повернуть страницы с низкой уверенностью для соответствия"
+
 [autoSizeSplitPDF]
 tags = "pdf,разделение,документ,организация"
 
@@ -2189,33 +2440,6 @@ keywords = "Ключевые слова: odd, even"
 numbers = "Числа/диапазоны: 5, 10–20"
 progressions = "Прогрессии: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Типы сертификатов"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Управляется системными администраторами"
-bullet2 = "Доступен авторизованным пользователям"
-bullet3 = "Представляет компанию, а не конкретного человека"
-bullet4 = "Лучше всего для: официальных документов, командных подписей"
-description = "Общий сертификат вашей организации. Используется для корпоративной подписи."
-title = "Сертификат организации"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Генерируется автоматически при первом использовании"
-bullet2 = "Привязан к вашей учётной записи"
-bullet3 = "Нельзя поделиться с другими пользователями"
-bullet4 = "Лучше всего для: личных документов, индивидуальной ответственности"
-description = "Автоматически сгенерированный сертификат, уникальный для вашей учётной записи. Подходит для индивидуальных подписей."
-title = "Личный сертификат"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Требуются файл P12/PFX и пароль"
-bullet2 = "Может быть выдан внешними центрами сертификации"
-bullet3 = "Более высокий уровень доверия для юридических документов"
-bullet4 = "Лучше всего для: юридически значимых контрактов, внешней валидации"
-description = "Используйте собственный сертификат PKCS#12. Предоставляет полный контроль над свойствами сертификата."
-title = "Загрузить собственный P12"
-
 [certSign]
 awaitingSignatures = "Ожидание подписей"
 chooseCertificate = "Выберите файл сертификата"
@@ -2542,34 +2766,6 @@ server = "Сервер"
 stepTitle = "Источник сертификата"
 upload = "Загрузить"
 
-[certSign.tooltip.header]
-title = "Управление подписями"
-
-[certSign.tooltip.overview]
-bullet1 = "Проверяйте существующие подписи и их валидность"
-bullet2 = "Просматривайте сведения о подписантах и сертификатах"
-bullet3 = "Добавляйте новые цифровые подписи для защиты документов"
-bullet4 = "Поддержка нескольких файлов с удобной навигацией"
-text = "Этот инструмент позволяет проверить, подписаны ли ваши PDF, и добавить новые цифровые подписи. Цифровые подписи подтверждают автора/согласование и показывают, изменялся ли документ после подписания."
-title = "Что умеет инструмент?"
-
-[certSign.tooltip.signing]
-bullet1 = "Поддерживаются форматы PEM, PKCS12, JKS и серверные сертификаты"
-bullet2 = "Можно показывать или скрывать подпись в PDF"
-bullet3 = "Добавьте причину, местоположение и имя подписанта"
-bullet4 = "Выберите страницу для видимых подписей"
-bullet5 = "Используйте серверный сертификат для простого варианта «Подписать со Stirling-PDF»"
-text = "Для подписи PDF нужен цифровой сертификат (например, PEM, PKCS12 или JKS). Вы можете сделать подпись видимой в документе или оставить невидимой — только для безопасности."
-title = "Добавление подписей"
-
-[certSign.tooltip.validation]
-bullet1 = "Показывает, действительны подписи или нет"
-bullet2 = "Отображает информацию о подписанте и дату подписания"
-bullet3 = "Проверяет, изменялся ли документ после подписания"
-bullet4 = "Можно использовать пользовательские сертификаты для проверки"
-text = "При проверке подписей инструмент сообщает, действительны ли они, кто подписал документ, когда он был подписан и менялся ли после подписания."
-title = "Проверка подписей"
-
 [changeCreds]
 changeUsername = "Обновите имя пользователя. После обновления вы будете выведены из системы."
 credsUpdated = "Учётная запись обновлена"
@@ -2824,6 +3020,7 @@ next = "Далее"
 preview = "Предпросмотр"
 previous = "Предыдущий"
 refresh = "Обновить"
+remaining = "Осталось"
 retry = "Повторить"
 save = "Сохранить"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Расширенный мониторинг"
-allInOneWorkspace = "Единое рабочее пространство PDF (просмотрщик, инструменты и агент)"
-apiSandbox = "Песочница API"
-dedicatedSupportSlas = "Выделенная поддержка и SLA"
-fasterThroughput = "Пропускная способность в 10 раз выше"
-fullyPrivateFiles = "Полностью приватные файлы"
-largeFileProcessing = "Обработка больших файлов"
-orgWideAccess = "Контроль доступа на уровне организации"
-premiumAiModels = "Премиальные AI-модели"
-prioritySupport = "Приоритетная поддержка"
-privateDocCloud = "Приватное облако документов"
-ragFineTuning = "RAG + дообучение"
-secureApiAccess = "Безопасный доступ к API"
-standardThroughput = "Стандартная пропускная способность"
-unlimitedApiAccess = "Неограниченный доступ к API"
-unlimitedSeats = "Неограниченное число пользователей"
-
 [crop]
 autoCrop = "Автообрезка пустых полей"
 noFileSelected = "Выберите PDF-файл, чтобы начать обрезку"
@@ -3346,6 +3525,7 @@ message = "Не удалось назначить обработчик PDF по
 title = "Ошибка"
 
 [defaultApp.prompt]
+dontRemind = "Больше не напоминать"
 message = "Сделайте Stirling PDF приложением по умолчанию для открытия файлов PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Настроить группы"
 dropHint = "Откройте файлы, чтобы начать"
 dropToAdd = "Drop files to add"
 expand = "Развернуть боковую панель"
-files = "Файлы"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive не настроен"
 leaveMyFiles = "Выйти из Моих файлов"
+library = "Библиотека PDF"
 myFiles = "Мои файлы"
 noFiles = "Файлов пока нет"
 openFileManager = "Открыть файловый менеджер"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Добавить"
-addLabel = "Добавить метку…"
-categoryIconAria = "Выберите значок для {{name}}"
-createCategory = "Создать категорию"
-delete = "Удалить категорию"
 done = "Готово"
-hide = "Скрыть категорию"
-newCategory = "Название новой категории…"
-removeLabel = "Удалить {{name}}"
-rename = "Переименовать"
 reset = "Сбросить к значениям по умолчанию"
-search = "Искать метки…"
-show = "Показать категорию"
 subtitle = "Группируйте файлы по родительским категориям. Добавляйте существующие или новые метки в категорию, переименовывайте её или создавайте свою. Файлы, не входящие ни в одну из ваших категорий, отображаются в разделе «Другое»."
 title = "Категории боковой панели"
 
@@ -3808,6 +3977,7 @@ refresh = "Обновить с сервера"
 remove = "Удалить"
 removeVersion = "Удалить эту версию"
 rename = "Переименовать"
+renamed = "Переименовано"
 renameFolder = "Переименовать папку"
 resizeFolderTree = "Изменить размер дерева папок (стрелки, Shift — большие шаги; двойной щелчок — автоподбор)"
 save = "Сохранить"
@@ -3910,9 +4080,7 @@ count = "Файлы"
 folder = "Папка"
 labels = "Метки"
 modified = "Изменено"
-name = "Имя"
 size = "Размер"
-toolHistoryAtVersion = "Совокупная цепочка инструментов"
 totalSize = "Общий размер"
 type = "Тип"
 versionHistory = "Путь версий"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Все сохранено"
+extractCsvError = "Не удалось извлечь CSV"
+extractXlsxError = "Не удалось извлечь XLSX"
 flattenAfterFilling = "Сплющить после заполнения"
+requiredAbbreviation = "обяз."
+requiredFieldsError = "Заполните все обязательные поля"
 rescanFields = "Пересканировать поля"
 rescanFormFields = "Пересканировать поля формы"
 save = "Сохранить"
+saveShortcut = "Ctrl+S для сохранения"
+unsavedChanges = "Несохраненные изменения"
 
 [formFill.sidebar]
 close = "Закрыть боковую панель"
@@ -4309,6 +4484,11 @@ desc = "Автоматически переименовывает PDF по об
 tags = "автообнаружение,заголовок,организация,переименование"
 title = "Автопереим. PDF"
 
+[home.autoRotate]
+desc = "Определяйте ориентацию каждой страницы и автоматически поворачивайте ее вертикально."
+tags = "автоповорот,исправить ориентацию,вверх ногами,боком,выпрямить,ориентация,определить ориентацию,исправить поворот,автоориентация,сканированный,OSD"
+title = "Автоповорот"
+
 [home.autoSizeSplitPDF]
 tags = "авто,разделить,размер"
 title = "Авторазбить по размеру/стр."
@@ -4608,13 +4788,13 @@ hint = "Загрузите PNG, JPG, SVG или другой файл изобр
 label = "Загрузить изображение"
 placeholder = "Выберите файл изображения"
 
-[imageToPdf]
-tags = "конвертация,изображение,jpg,картинка,фото"
-
 [imageToPDF]
 header = "Изображение в PDF"
 title = "Изображение в PDF"
 
+[imageToPdf]
+tags = "конвертация,изображение,jpg,картинка,фото"
+
 [infoBanner]
 dismiss = "Закрыть"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Вас пригласили!"
 
 [landing]
 addFiles = "Добавить файлы"
-heroSubtitle = "Перетащите или добавьте существующий PDF, чтобы начать."
 mobileUpload = "Загрузка с мобильного"
 openFromComputer = "Открыть с компьютера"
 uploadFromComputer = "Загрузить с компьютера"
-workbenchEmptyStateHero = "Перетащите PDF куда угодно"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Войти"
 magicLinkSent = "Магическая ссылка отправлена на {{email}}! Проверьте почту и перейдите по ссылке для входа."
 mfaCode = "Код аутентификации"
 mfaRequired = "Требуется код двухфакторной аутентификации"
+noAccount = "Нет аккаунта?"
 or = "Или"
 password = "Пароль"
 passwordChangedSuccess = "Пароль успешно изменен! Пожалуйста, войдите с новым паролем."
@@ -4715,26 +4894,10 @@ signInWith = "Войти с помощью"
 title = "Вход"
 unexpectedError = "Непредвиденная ошибка: {{message}}"
 updatePassword = "Обновить пароль"
-useEmailInstead = "Войти по электронной почте"
 useMagicLink = "Использовать магическую ссылку"
 username = "Имя пользователя"
 youAreLoggedIn = "Вы вошли в систему!"
 
-[login.slides.edit]
-alt = "Редактирование PDF"
-subtitle = "С более чем дюжиной инструментов для скрытия данных, подписания, чтения и обработки PDF вы точно найдёте нужное."
-title = "Редактируйте PDF, чтобы показывать и защищать нужную информацию"
-
-[login.slides.overview]
-alt = "Обзор Stirling PDF"
-subtitle = "Облачный набор с приоритетом приватности для работы с PDF: конвертируйте, подписывайте, скрывайте данные и управляйте документами, а также 50+ других мощных инструментов."
-title = "Всё для работы с PDF в одном месте."
-
-[login.slides.secure]
-alt = "Защита PDF"
-subtitle = "Легко добавляйте пароли, скрывайте содержание и управляйте сертификатами."
-title = "Защитите конфиденциальные данные в ваших PDF"
-
 [margin]
 large = "Большой"
 medium = "Средний"
@@ -4976,6 +5139,7 @@ pinButton = "Вы можете использовать кнопку <strong>З
 results = "После завершения работы инструмента шаг <strong>Проверка</strong> покажет предпросмотр результатов в этой панели и позволит отменить операцию или скачать файл."
 runButton = "После настройки инструмента эта кнопка позволяет запустить инструмент для всех выбранных PDF."
 selectCropTool = "Давайте выберем инструмент <strong>Обрезка</strong>, чтобы показать, как пользоваться одним из инструментов."
+stepOf = "Шаг {{current}} из {{total}}"
 toolInterface = "Это интерфейс инструмента <strong>Обрезка</strong>. Как видите, здесь пока немного элементов, потому что мы еще не добавили PDF-файлы для работы."
 workbench = "Это <strong>Рабочая область</strong> — основная зона, где вы просматриваете и редактируете свои PDF."
 wrapUp = "Готово! Вы узнали об основных областях приложения и о том, как ими пользоваться. Нажимайте кнопку <strong>Справка</strong> в любое время, чтобы снова посмотреть этот тур."
@@ -4988,6 +5152,26 @@ showMeAround = "Показать обзор"
 skipForNow = "Пока пропустить"
 skipTheTour = "Пропустить тур"
 
+[onboarding.checklist]
+dismiss = "Закрыть"
+title = "Настройте Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Запустите Stirling нативно на своем компьютере"
+title = "Скачать Stirling для Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Работайте совместно со своей командой"
+title = "Пригласить участников команды"
+
+[onboarding.checklist.shareAnalytics]
+description = "Помогите улучшить Stirling"
+title = "Делиться анонимными данными использования"
+
+[onboarding.checklist.takeTour]
+description = "Посмотрите, как работает Stirling, в коротком обзоре"
+title = "Пройти обзор"
+
 [onboarding.desktopInstall]
 body = "Stirling лучше всего работает как настольное приложение. Можно работать офлайн, быстрее открывать документы и редактировать их локально на компьютере."
 selectOs = "Выберите операционную систему"
@@ -4996,7 +5180,21 @@ titleWithOs = "Скачать для {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Код аутентификации"
+description = "Защитите свой аккаунт, подключив приложение-аутентификатор. Отсканируйте QR code или введите ключ настройки, затем подтвердите 6-значный код для завершения."
+enable = "Включить MFA"
+enableError = "Не удалось включить двухфакторную аутентификацию. Проверьте код и повторите попытку."
+enterCode = "Введите 6-значный код из вашего приложения."
+enterCodeError = "Введите код аутентификации, чтобы продолжить."
+logout = "Выйти"
+openAuthenticator = "Откройте Google Authenticator, Authy или 1Password."
 qrCodeLoading = "Генерация вашего QR‑кода…"
+regenerateQrCode = "Создать QR code заново"
+scanQrCode = "Отсканируйте QR code или введите ключ настройки ниже."
+setupError = "Не удалось начать настройку двухфакторной аутентификации. Повторите попытку."
+setupKey = "Ключ настройки (ручной ввод)"
+stepByStep = "Пошагово"
+success = "MFA включена. Теперь вы можете продолжить."
+title = "Настройка многофакторной аутентификации"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "После включения режима входа вы сможете управлять пользователями, настраивать параметры и мониторить состояние сервера. Первые <strong>{{freeTierLimit}}</strong> человек на вашем сервере используют Stirling бесплатно."
@@ -5005,6 +5203,11 @@ adminTitle = "Обзор для админа"
 userBody = "Приглашайте коллег, назначайте роли и держите документы в порядке в одном безопасном рабочем пространстве. Включите режим входа, когда будете готовы выйти за рамки сольного использования."
 userTitle = "Обзор тарифа"
 
+[onboarding.processorIntro]
+body = "Stirling теперь выполняет <strong>политики</strong> — автоматизированные правила, которые классифицируют, защищают и обрабатывают каждый документ по мере его поступления. Настраивайте их и отслеживайте выполнения в <strong>Процессоре</strong>."
+cta = "Посмотреть Процессор"
+title = "Посмотрите Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Предоплаченный год"
+
+[payg.prepaid.banner]
+exhausted = "Ваш предоплаченный объем исчерпан; тарификация по счетчику возобновлена. Пополните, чтобы сохранить скидку."
+expiring_one = "Ваш предоплаченный год заканчивается через {{count}} день. Неиспользованный объем истекает — пополните, чтобы начать новый год."
+expiring_other = "Ваш предоплаченный год заканчивается через {{count}} дней. Неиспользованный объем истекает — пополните, чтобы начать новый год."
+low = "У вас осталось {{pct}}% предоплаченного объема. Пополните в любое время, чтобы обработка не прерывалась."
+
+[payg.prepaid.card]
+subtitle = "Используется до тарификации по счетчику и вне вашего лимита расходов."
+title = "Предоплаченный объем"
+
+[payg.prepaid.meter]
+capSuffix = "из {{total}} предоплаченных кредитов"
+expires = "Истекает {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Исчерпано"
+healthy = "Осталось много"
+low = "Заканчивается"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Вставьте лицензионный ключ из пис
 success = "Лицензия активирована!"
 successMessage = "Ваша лицензия успешно активирована. Теперь можно закрыть это окно."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "применено"
-enforcing = "Применение политики..."
-failed = "Сбой применения"
 outputsUnavailable = "Результаты политики больше недоступны для скачивания."
 partialOutputsUnavailable = "Некоторые результаты политики больше недоступны для скачивания."
-retrying = "Занято, повторяем попытку..."
 runNotFound = "Не удалось найти запуск применения."
-step = "шаг {{current}}/{{total}}"
 timedOut = "Время ожидания истекло до завершения запуска."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Закрыть"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Применение {{names}}"
 applyingProgress = "Применение {{names}} ({{done}} из {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} из {{total}} файлов не удалось об
 failureTitle = "Экспортировано без полного применения политики"
 printPolicyAppliedBody = "Этот PDF был обновлён в соответствии с политикой. Проверьте изменения и распечатайте снова."
 printPolicyAppliedTitle = "Политика применена перед печатью"
-queued = "+{{count}} в очереди"
 successTitle = "Применено: {{names}}"
 summaryMore = "{{first}}, {{second}} и ещё {{more}}"
 summaryTwo = "{{first}} и {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Применение политики перед преобразованием"
-default = "Применение политики"
-export = "Применение политики перед экспортом"
-input = "Применение политики при импорте"
-print = "Применение политики перед печатью"
-
-[policies.field]
-accessLog = "Журнал доступа"
-archiveAfter = "Архивировать через"
-auditTrail = "Аудиторский след"
-belowThreshold = "Ниже порога"
-destination = "Назначение"
-frameworks = "Фреймворки"
-immutableHold = "Неизменяемое удержание"
-keepFor = "Хранить в течение"
-minConfidence = "Мин. уверенность"
-notify = "Уведомлять при маршрутизации"
-onViolation = "При несоответствии"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Добавить"
-addPlaceholder = "Добавить метку…"
-customNote = "Настроено для вашей команды."
-defaultNote = "Используется встроенное значение по умолчанию, общее для вашей команды."
-duplicate = "\"{{name}}\" уже существует."
-edit = "Редактировать метки"
-empty = "Меток пока нет."
-export = "Экспорт JSON"
-iconAria = "Выберите значок для {{name}}"
-import = "Импорт JSON"
-importError = "Не удалось импортировать этот файл."
-managedNote = "Метки команды управляются руководителем вашей команды."
-modalSubtitle = "Общие для всей вашей команды. Классификатор выбирает метки, подходящие для каждого документа."
-modalTitle = "Метки классификации"
-pickIcon = "Использовать значок {{label}}"
-removeAria = "Удалить {{name}}"
-resetToDefault = "Сбросить к значению по умолчанию"
-saveForTeam = "Сохранить для команды"
-saving = "Сохранение…"
-sectionLabel = "Метки классификации"
-startFromScratch = "Начать с нуля"
-teamCount = "метки команды"
-tooLong = "Метки могут содержать не более {{max}} символов."
-ungrouped = "Без группы"
-view = "Показать метки"
+categoryCount = "категории"
+hideCategory = "Скрыть категорию"
+labelCount = "метки"
+sharedNote = "Эти метки встроены и используются всей вашей командой."
+showCategory = "Показать категорию"
 
 [policies.pii]
 account = "Номера счетов (с пометкой)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Маршрутные номера США (ABA)"
 ssn = "Номера социального страхования"
 
-[policies.settings]
-noneExport = "Сейчас при экспорте не выполняются политики."
-noneUpload = "Сейчас при загрузке не выполняются политики."
-onExport = "При экспорте"
-onUpload = "При загрузке"
-reorderHandle = "Перетащите, чтобы изменить порядок"
-runOrderDesc = "Когда для одного триггера выполняется несколько политик, они выполняются в этом порядке — каждая с результатом предыдущей политики. Перетащите, чтобы изменить порядок."
-title = "Настройки политик"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Параметры политики"
-policySettings = "Настройки политик"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Повторить неудачные политики ({{count}})"
-rowProgress = "Обработано {{completed}} из {{total}} файлов"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Что такое политика?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Автоматически находит и замазывает конфиденциальные данные — например, номера социального страхования и карт — чтобы их нельзя было прочитать в документе."
-sanitize = "Удаляет скрытый JavaScript из файла, чтобы при открытии ничего не запускалось автоматически."
-watermark = "Наносит видимую отметку (например, «Confidential») на каждую страницу."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Закрыть"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} применяется..."
 badgeRan = "Политика {{name}} выполнена для этого файла"
+badgeRunning = "{{name}} выполняется..."
 blockingAction = "{{action}} заблокировано на время применения политики, подождите..."
 dismiss = "Закрыть оверлей"
 enforcingTitle = "Применение политики..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Показать файл (политика всё ещё прим
 [policyOption]
 autoRedactPhi = "Автоматически редактировать PHI"
 blockExport = "Заблокировать экспорт"
+ccpa = "CCPA"
 contracts = "Контракты"
 documents = "Документы"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "План Editor"
 subscribed = "План Processor"
 unlinked = "Не привязан"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Создать из документа"
-sectionsAriaLabel = "Разделы конструктора агентов"
-selectorAriaLabel = "Агенты"
-subtitle = "Проектируйте, тестируйте и выпускайте AI-агентов, которые классифицируют, извлекают данные из документов и маршрутизируют их. Определяйте сценарии, ограничивайте доступ к инструментам, запускайте эталонный набор и публикуйте версию."
-title = "Конструктор агентов"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Отмена"
-dropzoneText = "Выберите пример документа (PDF или изображение)"
-lead = "Перетащите пример документа, и мы предложим сценарии и схему извлечения, которые можно уточнить. Ничего не публикуется, пока вы это не проверите."
-submit = "Создать агента"
-subtitle = "Создайте нового агента на основе одного репрезентативного файла"
-title = "Создать из документа"
-
-[portal.agentBuilder.empty]
-description = "Создайте агента из примера документа, чтобы сформировать его сценарии и схему извлечения, затем доработайте и опубликуйте."
-title = "Агентов пока нет"
-
-[portal.agentBuilder.evals]
-casesPassing = "Пройденные случаи"
-columnCase = "Случай eval"
-columnLatency = "Задержка"
-columnResult = "Результат"
-fail = "не пройдено"
-goldenSetPassRate = "Процент прохождения golden set"
-latencyMs = "{{ms}} ms"
-notRun = "не запускалось"
-pass = "пройдено"
-passRate = "Процент прохождения"
-runEvals = "Запустить evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals превращают ваши сценарии в повторяемый golden set. Обновите план, чтобы отслеживать процент прохождения со временем и ограничивать публикации по нему."
-title = "Golden set пока нет"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "по golden sets"
-activeAgents = "Активные агенты"
-avgPassRate = "Средний процент прохождения eval"
-fleetWide = "по всему парку"
-latestPublished = "Последняя опубликованная"
-scenarios = "Сценарии"
-testCases = "тестовые случаи"
-totalDescription_one = "{{count}} всего"
-totalDescription_other = "{{count}} всего"
-
-[portal.agentBuilder.scenarios]
-add = "Добавить"
-addScenario = "Добавить сценарий"
-enable = "Включить"
-expectationLabel = "Ожидаемое поведение"
-expectationPlaceholder = "Что должен делать агент"
-inEval = "в eval"
-mute = "Отключить"
-muted = "отключено"
-nameLabel = "Название"
-namePlaceholder = "например, Эскалация соответствия"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Сценарии"
-tools = "Инструменты"
-versions = "Версии"
-
-[portal.agentBuilder.tools]
-broadAccess = "Широкий доступ"
-deniedHint = "Выбранные инструменты заблокированы. Всё остальное остаётся доступным для вызова."
-deniedTools = "Запрещённые инструменты"
-governanceGate = "Управление инструментами доступно на плане Enterprise."
-restricted = "Ограничено"
-restrictedAccess = "Ограниченный доступ к инструментам"
-restrictedDescription = "Разрешить все инструменты, кроме запрещённых ниже."
-
-[portal.agentBuilder.versions]
-current = "текущая"
-historyGate = "Полная история версий и откат доступны на плане Enterprise."
-publish = "Опубликовать"
-rollBack = "Откатить"
-
 [portal.assistant]
 close = "Закрыть ассистента"
 error = "Не удалось связаться с ассистентом."
@@ -6365,9 +6346,21 @@ typing = "Печатает"
 loading = "Загрузка"
 redirectingToEditor = "Перенаправление в редактор..."
 
+[portal.billing.activation]
+maybeLater = "Может быть позже"
+title = "Включить Процессор"
+
+[portal.billing.activation.payg]
+sub = "Установите месячный лимит. Платите за то, что используете."
+title = "Оплата по факту"
+
+[portal.billing.activation.prepay]
+badge = "2 месяца бесплатно"
+sub = "Один счет, карта или банковский перевод."
+title = "Предоплатить год"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function не вернула client_secret."
-subtitle = "Добавьте карту, чтобы продолжить после бесплатного лимита плана Editor. Остальное обработает Stripe."
 title = "Включить план Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Платёж прошёл успешно, но активация зан
 close = "Закрыть"
 title = "Почти готово"
 
+[portal.billing.checkout.cap]
+amountAria = "Месячный лимит расходов"
+back = "Назад"
+continue = "Перейти к оплате"
+error = "Не удалось установить лимит расходов"
+finePrint = "Счета выставляются ежемесячно. Отменить можно в любое время."
+noLimit = "Без лимита"
+note = "С вас никогда не спишут больше лимита. Обработка просто приостановится."
+perMonth = "/ мес."
+title = "Установите лимит расходов"
+
+[portal.billing.checkout.card]
+fields = "Номер карты · MM / YY · CVC · ZIP"
+label = "Данные карты"
+note = "Данные карты собираются Stripe. Stirling никогда не хранит PAN или CVC."
+
 [portal.billing.checkout.error]
 title = "Не удалось начать оформление"
 
@@ -6383,10 +6392,9 @@ body = "Ваш платёж прошёл. Мы включаем тарифици
 hint = "Пожалуйста, не закрывайте это окно."
 title = "Активация вашего плана Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "в env портала, чтобы включить оформление в приложении."
-bodyBefore = "Установите"
-title = "Stripe не настроен"
+[portal.billing.checkout.pay]
+limit = "Месячный лимит расходов {{amount}}/мес. Обработка приостанавливается при достижении лимита."
+limitNoCap = "Без лимита расходов. Обработка не будет приостанавливаться. Счета выставляются ежемесячно."
 
 [portal.billing.enterpriseUpsell]
 cta = "Собрать предложение Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Текущий план"
 freeForever = "Бесплатно навсегда"
 noTeamResolved = "Для вашего кошелька ещё не определена команда — обновите страницу и попробуйте снова."
 ownerOnly = "Только владелец команды может включить план Processor."
+payInvoice = "Оплатить счет для завершения"
 planName = "Editor"
 ssoIncluded = "SSO включён"
 switchOnProcessor = "Включить Processor →"
 unlimitedUsers = "Неограниченное число пользователей"
+viewQuote = "Посмотреть предложение"
 
 [portal.billing.invoices]
 columnAmount = "Сумма"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Прямые API-запросы"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Автоматизации и конвейеры"
 segmentAutomationLabel = "Автоматизация"
+sizeMultiplier = "{{formatted}} PDF использовали множитель размера"
+summary = "{{unique}} уникальных · {{units}} единиц счетчика · {{avg}} в среднем на PDF"
+summaryNoRate = "{{unique}} уникальных · {{units}} единиц счетчика"
 unit = "тарифицируемые PDF"
+unitsPending_one = "{{units}} единица счетчика ожидает синхронизации из связанных экземпляров"
+unitsPending_other = "{{units}} единиц счетчика ожидают синхронизации из связанных экземпляров"
+
+[portal.billing.prepaid]
+capSuffix = "из {{total}} предоплаченных кредитов"
+expires = "Истекает {{date}}"
+eyebrow = "Предоплаченный объем"
+note = "Используется до тарификации по счетчику и вне вашего лимита расходов."
+topUp = "Пополнить"
+
+[portal.billing.prepaid.buy]
+back = "Назад"
+calcTitle = "Рассчитайте годовой платеж"
+cancel = "Отмена"
+cancelPurchase = "Отменить покупку"
+close = "Закрыть"
+continueToPayment = "Перейти к оплате"
+finalise = "Завершить"
+invoiceErrorTitle = "Не удалось создать счет"
+loadingTitle = "Загрузка вашего предложения"
+payTitle = "Оплатите свой год"
+step = "Шаг {{current}} из {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Изменить"
+deployRow = "Развертывание"
+done = "Готово"
+enterpriseHint = "Это корпоративный масштаб. При таком объеме корпоративные тарифы выгоднее любой скидки самообслуживания. Фиксация тарифа, условия и предложение за минуты."
+governanceRow = "Управление"
+governanceValue = "{{label}} · {{count}} политик"
+handlesLabel = "Ваш Процессор"
+handlesValue = "обрабатывает {{volume}} кредитов / мес."
+pipelinesLabel = "Конвейеры"
+policiesMeta = "{{count}} политик"
+poolCaption = "Один пул из {{credits}} кредитов на год. Тяжелые месяцы используют остаток легких."
+priceLabel = "Ваш год · 12 месяцев по цене 10"
+rateUnknown = "Мы покажем точную цену при оформлении заказа."
+savings = "Вы экономите {{amount}} · 2 месяца бесплатно."
+sizingRow = "Размер"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Всего пользователей"
+
+[portal.billing.prepaid.consent]
+label = "Я понимаю, что когда мой предоплаченный объем будет исчерпан или истечет через 12 месяцев, обработка автоматически продолжится по стандартному тарифу оплаты по факту со счетчиком (в пределах моего лимита расходов), если я не отменю, и что я могу отменить в любое время из billing portal."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Управляется Stirling. Запуск за минуты."
+cloudValue = "Stirling Cloud · Управляемый"
+selfhost = "Самостоятельно размещенный"
+selfhostDesc = "Работает на частной инфраструктуре. Тот же тариф."
+selfhostValue = "Самостоятельно размещенный · Частная инфраструктура"
+
+[portal.billing.prepaid.offer]
+cta = "Посмотреть предложение"
+subtitle = "Предоплатите год обработки PDF и получите два месяца бесплатно; используется до тарификации по счетчику и вне вашего лимита расходов."
+title = "Получите 12 месяцев по цене 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Имя владельца аккаунта"
+accountNamePlaceholder = "например Jane Smith"
+companyName = "Название компании (необязательно)"
+companyNamePlaceholder = "например Acme Inc."
+downloadInvoice = "Скачать счет"
+payOnline = "Оплатить онлайн"
+poNumber = "Номер PO (необязательно)"
+poNumberPlaceholder = "например PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Расширенные"
+advancedDesc = "Конвейеры выполняют большую часть вашей обработки."
+none = "Нет"
+noneDesc = "Конвейеры пока не запущены. Включите их в любое время."
+standard = "Стандартные"
+standardDesc = "Несколько конвейеров повторно обрабатывают поступающие PDF."
+
+[portal.billing.prepaid.posture]
+essentials = "Основное"
+essentialsDesc = "Классификация, по умолчанию, плюс общий доступ"
+governed = "Управляемое"
+governedDesc = "Добавляет безопасность и маршрутизацию"
+regulated = "Регулируемое"
+regulatedDesc = "Каждая категория, включая соответствие требованиям, хранение, прием"
+
+[portal.billing.prepaid.review]
+download = "Скачать предложение (PDF)"
+downloading = "Подготовка…"
+share = "поделиться для согласования"
+
+[portal.billing.prepaid.size]
+compact = "Компактный"
+compactDesc = "Файлы менее 25 MB, без платы за данные"
+heavy = "Тяжелый"
+heavyDesc = "Сканированные или насыщенные изображениями, обычно 50 MB+"
+standard = "Стандартный"
+standardDesc = "В основном небольшие, некоторые сканы более 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Исчерпано"
+healthy = "Осталось много"
+low = "Заканчивается"
 
 [portal.billing.spendLimit]
 adjustLimit = "Изменить лимит"
@@ -6494,6 +6608,8 @@ label = "Прогнозируется превышение."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Расходы в этом месяце"
+freeRemaining_one = "Остался {{formatted}} бесплатный PDF"
+freeRemaining_other = "Осталось {{formatted}} бесплатных PDF"
 processed_one = "Обработано {{formattedCount}} PDF."
 processed_other = "Обработано {{formattedCount}} PDF."
 processedWithRate_one = "Обработано {{formattedCount}} PDF, по {{rate}} за каждый."
@@ -6534,6 +6650,350 @@ signature = "подпись"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Новое подключение"
+createTitleFor = "Подключить {{name}}"
+delete = "Удалить"
+edit = "Редактировать"
+editTitle = "Редактировать подключение"
+unsupportedType = "Этот тип подключения нельзя редактировать здесь."
+
+[portal.connections.categories.advanced]
+description = "Для сервиса, который мы пока не поддерживаем."
+label = "Расширенные"
+
+[portal.connections.categories.audit]
+description = "Записывайте, что произошло с документом, там, где ваши аудиторы уже проверяют."
+label = "Журнал аудита и соответствия требованиям"
+
+[portal.connections.categories.notify]
+description = "Сообщите другой системе, что что-то произошло."
+label = "Уведомления и рабочий процесс"
+
+[portal.connections.categories.security]
+description = "Сканируйте или помечайте документ перед его дальнейшей передачей."
+label = "Безопасность и классификация"
+
+[portal.connections.categories.signing]
+description = "Отправьте документ на подпись или нотариальное заверение."
+label = "Электронная подпись и нотариальное заверение"
+
+[portal.connections.categories.storage]
+description = "Куда попадают обработанные документы — в bucket, диск, ticket или страницу."
+label = "Файлы и вложения"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling хранит это в зашифрованном виде и больше никогда не показывает."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Шаги, использующие это подключение, могут вызывать только пути в рамках этого URL, но не другой host."
+label = "URL сервера"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Пароль"
+
+[portal.connections.commonFields.port]
+label = "Порт"
+
+[portal.connections.commonFields.username]
+label = "Имя пользователя"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Вставьте URL, который предоставил сервис. Можно вызывать только пути в его рамках."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Название подключения"
+namePlaceholder = "например Production"
+
+[portal.connections.picker]
+cancel = "Отмена"
+createNew = "Новое подключение..."
+placeholder = "Выберите подключение"
+save = "Сохранить подключение"
+
+[portal.connections.picker2]
+back = "Изменить интеграцию"
+heading = "Что вы хотите подключить?"
+noResultsBody = "Мы пока это не поддерживаем — расскажите нам об этом, и мы рассмотрим возможность добавления."
+noResultsTitle = "Нет совпадений для \"{{query}}\""
+searchPlaceholder = "Ищите интеграции — попробуйте \"sign\", \"ocr\" или название продукта"
+
+[portal.connections.types.api]
+description = "Вызывайте любой HTTP API из политики. Вы выбираете URL, аутентификацию и полезную нагрузку."
+label = "Пользовательский API"
+
+[portal.connections.types.api.fields.authType]
+label = "Аутентификация"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Имя пользователя и пароль"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Токен в пользовательском заголовке"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Нет"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Войти для получения токена"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Шаги, использующие это подключение, могут вызывать только пути в рамках этого URL, но не другой host."
+label = "Базовый URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Имя заголовка"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Путь входа"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Пароль"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Если API отвечает ссылкой для скачивания, получать данные можно только с этих hosts. Разделяйте запятыми. Оставьте пустым, чтобы разрешить только собственный host базового URL."
+label = "Разрешенные hosts результата"
+
+[portal.connections.types.api.fields.token]
+label = "Токен"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Отправлять токен как этот заголовок"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Заголовок ответа, в котором вызов входа возвращает токен, например X-Auth-Token."
+label = "Заголовок ответа с токеном"
+
+[portal.connections.types.api.fields.username]
+label = "Имя пользователя"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Сканируйте документы на вредоносное ПО на сервере, которым вы управляете — ничего не покидает вашу сеть."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Проверка документов на вирусы и содержимое в политике."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Блокируйте документы, содержащие макросы, исполняемые файлы, скрипты или встроенные объекты, — не только известное вредоносное ПО."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Прикрепляйте обработанные документы к странице Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Отправляйте документы в ConsignO Cloud (Notarius) для электронной подписи и нотариального заверения."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Ваша среда ConsignO Cloud, включая /api/v1."
+label = "URL сервера"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Пароль"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Нужно только если ваша организация использует tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Имя пользователя"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Публикуйте сообщение в Discord, когда политика обрабатывает документ."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Индексируйте событие аудита в Elasticsearch каждый раз, когда политика обрабатывает документ."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Опрашивайте FTP или FTPS сервер на наличие новых документов."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Режим подключения"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Активный"
+passive = "Пассивный (рекомендуется)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Обычный FTP отправляет учетные данные и файлы без шифрования; выберите FTPS, если сервер его поддерживает."
+label = "Шифрование"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (явный / AUTH TLS)"
+implicit = "FTPS (неявный)"
+none = "Нет (обычный FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Публикуйте сообщение в пространстве Google Chat, когда выполняется политика."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Прикрепляйте обработанные документы к задаче Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Отправляйте документ или уведомление по Email, когда выполняется политика."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Сохраняйте обработанные документы в Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Пароль приложения"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Обнаруживайте персональные данные в тексте документа с помощью сервера Presidio, которым вы управляете."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Читайте и применяйте метки конфиденциальности Microsoft Purview к PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Необязательно. Нужно только для выбора меток по имени; нанесение меток работает и без этого."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Проставляется на каждой метке как SiteId, чтобы инструменты, совместимые с Purview, знали, какая организация ее применила."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket, из которого источники могут читать и в который выходные данные конвейера могут записывать."
+label = "Хранилище S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Оставьте пустым для AWS. Установите это для MinIO или другого S3-совместимого хранилища."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Регион"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Отправляйте документ или уведомление по Email, когда выполняется политика."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Опрашивайте SFTP (SSH) сервер на наличие новых документов."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Необязательно. SHA-256 fingerprint ключа host сервера (из `ssh-keyscan host | ssh-keygen -lf -`). Если задано, принимается только сервер, предоставляющий этот ключ; если пусто, ключ, увиденный при первом подключении, закрепляется, а последующие изменения отклоняются."
+label = "Fingerprint ключа host"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Парольная фраза ключа"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Оставьте пустым, если вместо этого вы проходите аутентификацию с private key."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Необязательно. Вставьте OpenSSH private key для аутентификации с ключом вместо пароля."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Публикуйте сообщение в Slack, когда политика обрабатывает документ."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Отслеживайте SMB / CIFS сетевую папку (Windows или Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / сетевой ресурс"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Необязательно. Домен Windows или рабочая группа, если ваш сервер их использует."
+label = "Домен"
+
+[portal.connections.types.smb.fields.share]
+label = "Общий ресурс"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Отправляйте событие аудита в Splunk каждый раз, когда политика обрабатывает документ."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Отправляйте событие аудита в HTTP collector Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Публикуйте сообщение в канале Teams, когда выполняется политика."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Отправляйте каждый документ или только сведения о нем на выбранный вами URL."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Запускайте сценарий Zap или Make из политики."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Просмотреть документацию"
+viewSource = "Посмотреть исходный код на GitHub"
+
 [portal.docs.authentication]
 codeCaption = "каждый запрос"
 eyebrow = "GETTING STARTED"
@@ -6619,11 +7079,19 @@ title = "Официальные SDK"
 beta = "Beta"
 deprecated = "Устарело"
 
+[portal.docs.search]
+empty = "Подходящих документов нет"
+placeholder = "Искать в документации"
+results = "{{count}} результатов"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Встроенные именованные возможности, которые ваш агент вызывает как единый инструмент. Каждый skill — детерминированная цепочка операций с привязанными evals."
 title = "Навыки агента"
 
+[portal.docs.toc]
+title = "На этой странице"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "Тип"
 user = "Пользователь"
 
 [portal.documents.queue.empty]
+connectSource = "Подключить источник"
+createPipeline = "Создать конвейер"
 description = "Когда источники будут отправлять документы в ваши pipelines, они появятся здесь для проверки."
 title = "В очереди нет документов"
 
@@ -6806,13 +7276,71 @@ description = "В этом представлении произошла неп
 retry = "Попробовать еще раз"
 title = "На этой странице что-то пошло не так"
 
+[portal.home.download]
+back = "Назад"
+body = "Скачайте настольное приложение или самостоятельно разместите сервер."
+done = "Готово"
+guide = "Открыть руководство {{name}}"
+openInBrowser = "Открыть в браузере вместо этого"
+sectionDesktop = "Настольное приложение"
+sectionSelfHosted = "Самостоятельное размещение"
+title = "Установите Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Запустите официальный образ на своем сервере."
+note = "Открывается на :8080. Вход по умолчанию: admin / stirling."
+tagline = "Запустите сервер в контейнере"
+title = "Docker"
+variantFat = "Полная"
+variantLite = "Ultra-Lite"
+variantStandard = "Стандартная"
+
+[portal.home.download.kubernetes]
+detailBody = "Установите официальный Helm chart."
+note = "Добавьте PVC для /configs, чтобы сохранять настройки."
+tagline = "Разверните в кластере с помощью Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Нативные сборки для вашего дистрибутива."
+guideBtn = "Посмотреть варианты установки для Linux"
+note = "Для распространенных дистрибутивов доступны сборки AppImage, .deb и .rpm."
+tagline = "Нативное настольное приложение для вашего дистрибутива"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Или через Homebrew"
+detailBody = "Запустите установщик или используйте Homebrew."
+downloadBtn = "Скачать для macOS"
+tagline = "Нативное приложение для Apple silicon и Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Запустите .jar на физическом сервере."
+downloadBtn = "Скачать .jar"
+note = "Требуется Java 21+. Открывается на :8080; логин по умолчанию: admin / stirling."
+runLabel = "Затем запустите"
+tagline = "Запустите .jar на физическом сервере"
+title = "Ручная настройка сервера"
+
+[portal.home.download.windows]
+altLabel = "Или через winget"
+detailBody = "Запустите установщик или используйте менеджер пакетов."
+downloadBtn = "Скачать установщик"
+tagline = "Нативное приложение для Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} активных"
-invite = "Пригласить участников"
+activeOfDeployed = "{{active}} из {{total}} активны в этом месяце"
 name = "Stirling PDF Editor"
 open = "Открыть в браузере"
 updated = "обновлено {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Завершить развертывание"
+options = "Посмотреть варианты развертывания"
+start = "Развернуть редактор"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Самостоятельно размещенный · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Добрый день"
 evening = "Добрый вечер"
 morning = "Доброе утро"
 
-[portal.home.onboarding]
-dismiss = "Скрыть настройку"
-notStarted = "Не начато"
-progress = "Выполнено {{done}} из {{total}}"
-title = "Завершите настройку"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC для всей организации, цены за согласованный объем и развертывание в изолированной среде."
-cta = "Начать пробный период"
-ctaQuote = "Получить расчет"
-lead = "Для 250+ сотрудников."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Разверните desktop app, навсегда бесплатно."
-title = "Скачать PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} активных · {{recommended}} рекомендовано"
-chip = "{{active}} активных"
-title = "Включить политики"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} подключено · каждый PDF управляется там, где появляется"
-chip = "{{connected}} подключено"
-title = "Подключить источники"
-
-[portal.home.quickActions]
-subtitle = "Главные задачи на сегодня"
-title = "Быстрые действия"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-шаговый компоновщик поверх типизированной библиотеки операций"
-title = "Создать pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, агенты, webhooks, отслеживаемые папки"
-title = "Подключить источник"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Ограниченный по области ключ с лимитами скорости и IP allowlist"
-title = "Выпустить ключ API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Управлять развертыванием Editor"
 sectionsAriaLabel = "Разделы инфраструктуры"
@@ -6878,13 +7363,9 @@ heading = "Ключи API"
 subheading = "Ограниченные учетные данные с лимитами скорости, разрешениями и IP allowlists для каждого ключа."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Разрешенные IP"
-anyIp = "Любой IP (без allowlist)"
 created = "Создан"
 lastUsed = "Последнее использование"
-permissions = "Разрешения"
-rateLimit = "Лимит скорости"
-rateLimitValue = "{{value}} запр./мин"
+revoke = "Отозвать ключ"
 usageMonth = "Использование за этот месяц"
 usageToday = "Использование сегодня"
 
@@ -6892,6 +7373,20 @@ usageToday = "Использование сегодня"
 description = "Создайте ограниченный по области ключ, чтобы начать вызывать Stirling API."
 title = "Ключей API пока нет"
 
+[portal.infrastructure.apiKeys.error]
+load = "Не удалось загрузить ваши API ключи. Попробуйте еще раз."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Отозвать \"{{name}}\"? Любая интеграция, которая все еще использует этот ключ, сразу начнет получать ошибки 401. Это действие нельзя отменить."
+cancel = "Отмена"
+confirm = "Отозвать ключ"
+title = "Отозвать API ключ"
+
+[portal.infrastructure.attestationLabel]
+attested = "Подтверждено"
+inScope = "В области действия"
+notApplicable = "Н/Д"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Фильтровать события аудита по категории"
 heading = "Журналы аудита"
@@ -6935,6 +7430,7 @@ all = "Все"
 auth = "Аутентификация"
 config = "Конфигурация"
 elevation = "Повышение доступа"
+policy = "Политика"
 processing = "Обработка"
 security = "Безопасность"
 
@@ -6944,19 +7440,35 @@ title = "У вас нет доступа"
 
 [portal.infrastructure.audit.metrics]
 config = "Конфигурация"
-elevation = "Повышение доступа"
+policy = "Политика"
 processing = "Обработка"
 totalEvents = "Всего событий · 24 ч"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Аутентификация"
+config = "Конфигурация"
+elevation = "Повышение прав"
+policy = "Политика"
+processing = "Обработка"
+security = "Безопасность"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Ошибка"
+info = "Информация"
+success = "Успешно"
+warning = "Предупреждение"
+
+[portal.infrastructure.certLabel]
+certified = "Сертифицировано"
+inProgress = "В процессе"
+notStarted = "Не начато"
+
 [portal.infrastructure.createKey]
 cancel = "Отмена"
 createKey = "Создать ключ"
 done = "Готово"
-ipAllowlistHelper = "Диапазоны CIDR, разделенные запятыми. Оставьте пустым, чтобы разрешить любой IP."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Имя ключа"
 keyNamePlaceholder = "например, Production · ingest"
-permissionsLabel = "Разрешения"
 secretKeyCaption = "Секретный ключ"
 secretWarning = "Сохраните это в менеджере секретов. Stirling всегда хранит только hash — восстановить его позже невозможно."
 subtitle = "Ограничьте ключ минимально необходимой областью. Вы можете сменить или отозвать его в любое время."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Скопируйте этот секрет сейчас — 
 title = "Создать ключ API"
 titleCreated = "Ключ создан"
 
+[portal.infrastructure.deployLabel]
+live = "Работает"
+queued = "В очереди"
+rolledBack = "Откат выполнен"
+rolling = "Развертывается"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} мс"
 throughputValue = "{{value}}/мин"
@@ -6999,6 +7517,15 @@ subheading = "Текущее состояние каждого разверну
 description = "Развернутые регионы появятся здесь после подготовки вашего рабочего пространства."
 title = "Нет развернутых регионов"
 
+[portal.infrastructure.keyLabel]
+active = "Активен"
+revoked = "Отозван"
+
+[portal.infrastructure.modelLabel]
+active = "Активна"
+degraded = "Снижена производительность"
+disabled = "Отключена"
+
 [portal.infrastructure.models]
 heading = "Модели"
 msValue = "{{value}} мс"
@@ -7026,6 +7553,10 @@ status = "Статус"
 type = "Тип"
 version = "Версия"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/вызов"
+perThousand = "{{price}}/1 тыс."
+
 [portal.infrastructure.models.metrics]
 activeModels = "Активные модели"
 avgLatency = "Средняя задержка"
@@ -7049,6 +7580,17 @@ modelForAria = "Модель для {{operation}}"
 operation = "Операция"
 routedTo = "Направлено в"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Классификация"
+extraction = "Извлечение"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Снижена производительность"
+down = "Недоступен"
+healthy = "Исправен"
+
 [portal.infrastructure.security.access.byok]
 description = "Предоставьте ключ из собственного KMS. Stirling шифрует им, но все еще может читать."
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Модели"
 security = "Безопасность"
 storage = "Хранилище"
 
+[portal.integrations]
+addAnother = "Добавить еще"
+availableHeading = "Доступно"
+comingSoonHeading = "Скоро"
+connect = "Подключить"
+connectedHeading = "Подключено"
+connectionCount_one = "{{count}} подключение"
+connectionCount_other = "{{count}} подключений"
+customApi = "Пользовательский API"
+searchPlaceholder = "Поиск интеграций"
+subtitle = "Все, с чем Stirling может взаимодействовать. Учетные данные создаются здесь один раз, а затем используются источниками, политиками и конвейерами."
+title = "Интеграции"
+typedName = "Название {{tool}}"
+
+[portal.integrations.filters]
+all = "Все"
+audit = "Аудит"
+connected = "Подключено"
+notify = "Уведомления"
+security = "Безопасность"
+signing = "Подписание"
+storage = "Хранилище"
+
+[portal.integrations.status]
+connected = "Подключено"
+
+[portal.integrations.table]
+integration = "Интеграция"
+worksWith = "Работает с"
+
+[portal.integrations.worksWith]
+pipelines = "Конвейеры"
+policies = "Политики"
+sources = "Источники"
+
+[portal.legal]
+draft = "{{label}} · черновик"
+loadError = "Не удалось загрузить этот документ. Попробуйте еще раз."
+loading = "Загрузка…"
+title = "Юридический документ"
+
 [portal.nav]
 agent-builder = "Конструктор агентов"
 components = "Компоненты"
@@ -7182,6 +7765,7 @@ documents = "Документы"
 editor = "Редактор"
 home = "Главная"
 infrastructure = "Инфраструктура"
+integrations = "Интеграции"
 pipelines = "Pipelines"
 policies = "Политики"
 procurement = "Закупки"
@@ -7190,25 +7774,9 @@ sources = "Источники"
 usage = "Использование и оплата"
 users = "Пользователи"
 
-[portal.notifications]
-markAllRead = "Отметить все как прочитанные"
-title = "Уведомления"
-viewAll = "Просмотреть все"
-
-[portal.notifications.ariaLabel]
-none = "Уведомления, нет непрочитанных"
-unread_one = "Уведомления, {{count}} непрочитанное"
-unread_other = "Уведомления, {{count}} непрочитанных"
-
-[portal.notifications.count]
-allRead = "все прочитано"
-loading = "загрузка"
-new_one = "{{count}} новое"
-new_other = "{{count}} новых"
-
-[portal.notifications.empty]
-description = "Нет новых уведомлений."
-title = "Все актуально"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Каждый автоматизированный pipeline документов на backend: упорядоченная цепочка операций над набором источников, запускаемая по триггеру. Нажмите строку, чтобы увидеть ее шаги и источники."
@@ -7220,15 +7788,28 @@ newPipeline = "Новый pipeline"
 [portal.pipelines.builder]
 addStep = "Добавить инструмент"
 back = "Назад к pipelines"
+cannotFollow = "Не удается принять {{produced}}"
+chooseAccount = "Выберите учетную запись"
+chooseDestination = "Выберите место назначения"
+chooseOperation = "Выберите, что делает этот шаг"
+chooseSource = "Выберите источник"
 discard = "Отменить изменения"
 enabled = "Включено"
+inputs = "Ввод"
+inputSource = "Источник ввода"
+inputTrigger = "Триггер"
 keepEditing = "Продолжить редактирование"
+needsConfiguring = "Требуется настройка"
 needsUpload = "Требуется загруженный файл"
+noSources = "Источники еще не подключены. Создайте источник, чтобы использовать его как ввод."
 noToolMatches = "Нет инструментов, соответствующих вашему поиску."
 pipelineSettings = "Настройки pipeline"
 searchTools = "Искать инструменты"
 selectToolBody = "Добавьте инструмент, чтобы создать свой pipeline."
 selectToolTitle = "Инструментов пока нет"
+sendToSystem = "Отправить в другую систему"
+stepsIncompatible = "Эти шаги не могут работать с тем, что производит предыдущий шаг: {{tools}}."
+stepsNeedSetup = "Эти шаги все еще нужно настроить перед сохранением: {{tools}}."
 toolSettings = "Настройки инструмента"
 unknownStep = "Нераспознанная операция, сохранена как есть."
 unsavedBody = "У вас есть несохраненные изменения. Сохранить их перед выходом или отменить?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Несохраненные изменения"
 uploadUnsupported = "Загруженные файлы пока не поддерживаются в pipelines, поэтому эти шаги нельзя сохранить: {{tools}}."
 usesDefaults = "Запускается с настройками по умолчанию"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Объединяет каждый файл из предыдущего шага"
+fan-out = "Запускается один раз для каждого файла из предыдущего шага"
+format-mismatch = "Требуется {{accepts}}, но предыдущий шаг производит {{produced}}"
+output-uncertain = "Может не запуститься: вывод предыдущего шага зависит от его настройки"
+source-mismatch = "Требуется {{accepts}}, но ввод этого конвейера — {{produced}}"
+undeclared-operation = "Не удается проверить, что принимает этот шаг"
+
 [portal.pipelines.composer]
 addTool = "Добавить инструмент"
 cancel = "Отмена"
 chainEmpty = "Добавьте инструмент, чтобы начать создавать свой pipeline."
 create = "Создать pipeline"
-directory = "Выходная папка"
-directoryHelp = "Абсолютный путь на сервере. Должен находиться в пределах настроенных разрешенных папок."
 editingUnsupported = "Отображение этих параметров инструмента для редактирования пока не поддерживается."
 moveDown = "Переместить вниз"
 moveUp = "Переместить вверх"
 name = "Имя"
 namePlaceholder = "например, проверка редактирования"
-noSources = "Источники пока не подключены. Pipeline все равно может запускаться на файлах, переданных ему напрямую."
 noToolSettings = "У этого инструмента нет настраиваемых параметров."
 operations_one = "Операция ({{count}})"
 operations_other = "Операции ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Удалить"
 title = "Удалить pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Очистить историю"
 delete = "Удалить pipeline"
 run = "Запустить сейчас"
 
 [portal.pipelines.empty]
 action = "Создать pipeline"
+connectSource = "Подключить источник"
 description = "Создайте первый pipeline: выберите источники, над которыми он запускается, свяжите операции и выберите, куда отправлять вывод."
 title = "Pipelines пока нет"
 
@@ -7286,15 +7874,17 @@ active = "Активные"
 paused = "Приостановленные"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Записать в папку"
-inline = "Вернуть файлы"
-
 [portal.pipelines.run]
+allProcessed_one = "Нечего запускать: {{count}} документ источника уже обработан."
+allProcessed_other = "Нечего запускать: все {{count}} документов в источниках уже обработаны."
 completed_one = "Запуск завершен."
 completed_other = "Все {{count}} запусков завершены."
 empty = "Нечего запускать: в источниках не было документов для обработки."
 failed = "Запуск не удался: {{error}}"
+historyCleared = "История очищена. При следующем запуске будет заново обработано все, что сейчас находится в источниках."
+inFlight = "Нет ничего нового для запуска: документы все еще обрабатываются после предыдущего запуска."
+parked_one = "Нечего запускать: {{count}} документ ранее завершился с ошибкой и отложен. Устраните причину, затем очистите историю, чтобы повторить попытку."
+parked_other = "Нечего запускать: {{count}} документов ранее завершились с ошибкой и отложены. Устраните причину, затем очистите историю, чтобы повторить попытку."
 running = "Запуск начат; все еще выполняется."
 timeout = "Запуск занимает больше времени, чем ожидалось; он может завершиться в фоновом режиме."
 
@@ -7314,12 +7904,18 @@ manual = "Вручную"
 schedule = "По расписанию"
 
 [portal.policies]
+defaultName = "Политика {{category}}"
 subtitle = "Постоянные автоматизации, применяющие pipeline инструментов к каждому документу. Каждая политика срабатывает при загрузке или экспорте, запускает свою цепочку инструментов и сохраняет принудительно обработанную версию рядом с оригиналом."
 title = "Политики"
 
 [portal.policies.card]
 comingSoon = "Перейти на Enterprise"
 notSetUp = "Не настроено"
+requiresAiEngine = "Требуется AI engine"
+
+[portal.policies.categories.classification]
+desc = "Определяйте тип каждого документа при загрузке и помечайте его метаданные для хранения и поиска."
+label = "Классификация"
 
 [portal.policies.categories.compliance]
 desc = "Обеспечьте соблюдение требований HIPAA, GDPR, SOC 2 или FedRAMP для каждого документа."
@@ -7344,6 +7940,13 @@ label = "Безопасность"
 [portal.policies.config]
 scopeAll = "Все документы"
 
+[portal.policies.config.classification]
+summary = "Классифицирует каждый загруженный документ по меткам вашей команды и помечает его метаданные."
+
+[portal.policies.config.classification.rules]
+0 = "Классифицировать"
+1 = "Пометить метаданные"
+
 [portal.policies.config.compliance]
 summary = "Проверяет документы на соответствие нормативным фреймворкам перед выходом из системы."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Мин. уверенность"
 2 = "Имя"
 3 = "Нормализовать"
 
+[portal.policies.config.purview]
+label = "Применить метку конфиденциальности Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Тенант Purview"
+labelId = "ID метки"
+labelIdHelp = "GUID метки из портала Purview. Применение метки записывает ее метаданные в PDF; шифровать она не может — для этого нужен клиент Microsoft."
+labelName = "Название метки (необязательно)"
+labelNameHelp = "Записывается вместе с ID, чтобы пользователи и инструменты могли распознать метку."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview отличает метку, примененную политикой, от метки, выбранной человеком."
+label = "Как записывается метка"
+privileged = "Как выбранная человеком"
+standard = "Как примененная автоматически"
+
+[portal.policies.config.purviewRead]
+label = "Прочитать метку Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Тенант Purview"
+connectionHelp = "Считывает метку, которая уже есть у документа, чтобы последующие шаги могли действовать на ее основе."
+
 [portal.policies.config.retention]
 summary = "Обеспечивает, как долго документы хранятся, когда архивируются и когда удаляются."
 
@@ -7438,6 +8064,7 @@ title = "Пока нет активности"
 [portal.policies.endpoints]
 addWatermark = "Водяной знак"
 autoRedact = "Скрыть персональные данные"
+classifyAndLabel = "Классифицировать"
 compressPdf = "Сжать"
 flatten = "Свести"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Ваши политики сохранены и появятся
 retry = "Повторить"
 title = "Backend недоступен"
 
+[portal.policies.operations]
+change = "Изменить, что делает этот шаг"
+noResults = "Нет подходящего шага. Попробуйте название продукта или \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Поиск шагов — попробуйте \"scan\", \"attach\" или название продукта"
+
+[portal.policies.operations.bodyMode]
+binary = "Сырые байты файла"
+json = "Внутри полезной нагрузки JSON"
+multipart = "Как загрузка файла (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Ваш собственный сервер ClamAV проверяет документ; ничто не покидает вашу сеть."
+label = "Проверить на вирусы (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Отклоняет документы с макросами, исполняемыми файлами, скриптами или встроенными объектами."
+label = "Блокировать активное содержимое"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive проверяет документ, и запуск останавливается, если он не чист."
+label = "Проверить на вирусы"
+
+[portal.policies.operations.confluenceAttach]
+description = "Помещает обработанный документ на страницу."
+label = "Прикрепить к странице Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Отправляет документ в ConsignO Cloud на подпись."
+label = "Отправить на подпись (ConsignO)"
+note = "Отправляет документ. Получение подписанной копии пока не поддерживается, потому что шаг не может передать результат последующему шагу."
+
+[portal.policies.operations.customApiCall]
+description = "Составьте вызов самостоятельно: путь, метод, тело и обработка ответа."
+label = "Вызвать пользовательский API"
+
+[portal.policies.operations.discordNotify]
+description = "Сообщает каналу, что политика обработала документ."
+label = "Опубликовать сообщение в Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Записывает действия политики как документ, доступный для поиска."
+label = "Индексировать событие аудита в Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart подходит для API загрузки; JSON подходит для API, которым нужен файл внутри полезной нагрузки; binary отправляет сырые байты."
+label = "Как отправить документ"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Тело JSON, отправляемое как есть. {{document.base64}} содержит файл; {{document.*}} и {{run.*}} заполняются для каждого документа."
+label = "Тело JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Учетная запись"
+
+[portal.policies.operations.fields.domain]
+label = "Домен Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Поле формы, в котором API ожидает документ."
+label = "Имя поля файла"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "От"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Объект JSON с парами имя/значение заголовков. Учетные данные подключения добавляются автоматически."
+label = "Заголовки"
+
+[portal.policies.operations.fields.index]
+label = "Индекс"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ключ задачи"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Отправляется как тело сообщения. {{document.*}} и {{run.*}} заполняются для каждого документа."
+label = "Сообщение"
+
+[portal.policies.operations.fields.method]
+label = "Метод"
+
+[portal.policies.operations.fields.pageId]
+label = "ID страницы"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Добавляется к базовому URL подключения. Он никогда не сможет обратиться к другому хосту."
+label = "Путь"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Куда записать файл на диске. {{document.filename}} заполняется для каждого документа."
+label = "Путь назначения"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Отчет оставляет документ без изменений. Замена подставляет вместо него то, что вернется в ответе."
+label = "Что делать с ответом"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email подписанта"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Тема"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio анализирует этот текст. Используйте {{document.title}} или вставьте текст, который нужно проверить."
+label = "Текст для проверки"
+
+[portal.policies.operations.fields.to]
+label = "Кому"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Имя пользователя Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Сообщает пространству, что политика обработала документ."
+label = "Опубликовать сообщение в Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Помещает обработанный документ в задачу."
+label = "Прикрепить к задаче Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Отправляет обработанный документ как вложение."
+label = "Отправить документ по email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Записывает обработанный документ в папку."
+label = "Загрузить в Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Ваш собственный сервер Presidio сообщает о найденных персональных данных."
+label = "Обнаружить персональные данные"
+note = "Presidio читает текст, а не файлы. Укажите текст, который нужно проверить — сам документ не загружается."
+
+[portal.policies.operations.responseMode]
+replace = "Заменить документ ответом"
+report = "Сохранить документ, записать ответ"
+
+[portal.policies.operations.sendgridEmail]
+description = "Отправляет обработанный документ как вложение."
+label = "Отправить документ по email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Сообщает каналу, что политика обработала документ."
+label = "Опубликовать сообщение в Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Записывает действия политики там, где ваши аудиторы уже их просматривают."
+label = "Отправить событие аудита в Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Записывает действия политики в HTTP collector."
+label = "Отправить событие аудита в Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Сообщает каналу, что политика обработала документ."
+label = "Опубликовать сообщение в Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Отправляет сам документ на выбранный вами URL."
+label = "Опубликовать документ в webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Передает сведения о запуске в вашу автоматизацию."
+label = "Запустить сценарий Zap или Make"
+
 [portal.policies.stats]
 activeFor = "Активна"
 dataProcessed = "Обработано данных"
@@ -7473,6 +8277,13 @@ label = "Документов обработано"
 description = "Настроены, но не запускаются"
 label = "Приостановлены"
 
+[portal.policies.table]
+appliesTo = "Применяется к"
+docs = "Документы под контролем"
+enforces = "Обеспечивает"
+policy = "Политика"
+status = "Статус"
+
 [portal.policies.wizard.actions]
 back = "Назад"
 cancel = "Отмена"
@@ -7480,6 +8291,10 @@ continue = "Продолжить"
 enablePolicy = "Включить политику"
 saveChanges = "Сохранить изменения"
 
+[portal.policies.wizard.capability.classify]
+desc = "Определяет тип документа по меткам вашей команды и помечает его, чтобы он сохранялся и искался по категории."
+label = "Классифицировать документ"
+
 [portal.policies.wizard.capability.compress]
 desc = "Сжимает документ до меньшего размера файла."
 label = "Уменьшить размер файла"
@@ -7500,10 +8315,18 @@ label = "Скрыть конфиденциальную информацию"
 desc = "Удаляет скрытый JavaScript, чтобы ничто не могло запускаться автоматически при открытии документа."
 label = "Удалить активное содержимое"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Доказывает, что документ существовал именно в этой форме в определенный момент времени, используя независимый timestamp authority. Отправляется только hash — документ никогда не покидает ваш сервер."
+label = "Добавить доверенную временную метку"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Ставит видимую отметку (например, «Конфиденциально») на каждой странице."
 label = "Применить водяной знак"
 
+[portal.policies.wizard.classification]
+description = "Каждый загруженный документ классифицируется по встроенным меткам и помечается подходящими типами. Набор меток общий для всей вашей команды."
+labelsHeading = "Метки классификации"
+
 [portal.policies.wizard.errors]
 noTools = "Сначала включите хотя бы один инструмент в рабочем процессе."
 saveFailed = "Не удалось сохранить политику. Повторите попытку."
@@ -7548,73 +8371,118 @@ setUp = "Настроить политику {{category}}"
 [portal.policies.wizard.workflow]
 description = "Выберите, что эта политика делает с каждым обрабатываемым документом."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} активны"
-noRule = "Пока нет применяемого правила"
-subtitle = "Постоянные автоматизации, через которые проходит каждый документ, независимо от того, какой конвейер его обрабатывает."
-title = "Что выполняется для ваших PDF"
-
 [portal.policySummary.action]
-comingSoon = "Перейти на Enterprise"
-configure = "Настроить"
 setUp = "Настроить"
 
-[portal.policySummary.column]
-activeRule = "Активное правило"
-policy = "Политика"
-status = "Статус"
+[portal.processorFlow]
+footnote = "Подсчеты приведены за последние 24 часа. Скорость потока показана для примера."
+liveBadge = "Работает"
+stats = "{{connected}} подключено · {{processed}} PDF обработано"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "После настройки политик категории появятся здесь."
-title = "Политик пока нет"
+[portal.processorFlow.lens]
+ariaLabel = "Режим просмотра"
+flow = "Поток"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Активна"
-off = "Выкл."
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 ч"
+failed = "Ошибка"
+heading = "Результаты"
+success = "Доставлено"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} активны"
+count = "{{n}} · 24 ч"
+heading = "Политики"
+setUp = "Настроить"
 soon = "Скоро"
 
-[portal.processingStatus]
-managePlan = "Управлять планом"
-volumeSuffix = "PDF обработано · последние 30 дней"
+[portal.processorFlow.sankey]
+waist = "Политики · {{n}} активны"
+
+[portal.processorFlow.sankey.empty]
+description = "Подключите источник и включите политику, чтобы увидеть, как документы проходят через обработчик."
+title = "Потока пока нет"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Подключить"
+editor = "Редактор Stirling PDF"
+heading = "Источники"
+perDay = "{{n}} / 24 ч"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Прием email"
 
 [portal.procurement]
-reset = "Сбросить закупку (demo)"
 subtitle = "Проведите оценку, заключение договора и подключение вашей команды. Каждый документ в одном месте."
 title = "Закупка"
 
-[portal.procurement.action]
-download = "Скачать"
-pay = "Оплатить сейчас"
-request = "Запросить"
-sign = "Проверить и подписать"
-upload = "Загрузить"
-
 [portal.procurement.agreement]
 agreeCta = "Согласиться и подписаться"
+confidential = "Конфиденциально"
 confirm = "Я прочитал(а) и принимаю Stirling Enterprise Agreement."
-eyebrow = "Соглашение"
-intro = "Одно объединённое соглашение покрывает вашу сделку: Master Service Agreement, Order Form, EULA и Data Processing Agreement. Проверьте его, затем согласитесь, чтобы принять коммерческое предложение в рамках обязательной подписки."
-title = "Проверьте ваше корпоративное соглашение"
+docName = "Соглашение Stirling Enterprise"
+docSub = "MSA, Order Form, EULA и DPA, объединенные в одну подпись."
+download = "Скачать"
+downloadDraftError = "Не удалось создать PDF соглашения — средство рендеринга документов недоступно. Попробуйте еще раз позже или обратитесь в поддержку."
+downloadError = "Не удалось скачать подписанное соглашение. Попробуйте еще раз."
+legalName = "Название юридического лица"
+legalNamePlaceholder = "Юридическое лицо, которое будет подписывать"
+loadError = "Не удалось загрузить соглашение. Попробуйте еще раз."
+loading = "Загрузка соглашения..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Запросить изменения"
+scrollHint = "Прокрутите для просмотра"
+signatory = "Имя подписанта"
+signatoryPlaceholder = "Полное имя"
+signatoryTitle = "Должность подписанта"
+signatoryTitlePlaceholder = "например, General Counsel"
+signError = "Не удалось записать вашу подпись. Попробуйте еще раз."
 
 [portal.procurement.builder]
 addons = "Дополнения"
+addressLine1 = "Адрес, строка 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Адрес, строка 2"
+addressLine2Placeholder = "Офис, этаж, здание"
 back = "Назад"
 businessName = "Название компании"
 businessNamePlaceholder = "Ваша компания"
+city = "Город"
+cityPlaceholder = "San Francisco"
+completeRequired = "Заполните обязательные поля (помечены *) и укажите действительный email перед созданием предложения."
+contactEmail = "Контактный email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Имя контактного лица"
+contactNamePlaceholder = "Jane Doe"
 continue = "Продолжить"
-country = "Страна"
-countryEuro = "Еврозона (EUR €)"
-countryUK = "Великобритания (GBP £)"
-countryUS = "США (USD $)"
+done = "Готово"
 eula = "Я прочитал(а) и принимаю Stirling Enterprise EULA. Он регулирует соглашение, созданное на основе этого предложения."
 generate = "Сформировать предложение"
-included = "Включено"
 indemnification = "Компенсация по претензиям IP"
 indemnificationSub = "Мы защищаем от соответствующих претензий IP согласно EULA"
-offlineLicense = "Офлайн-лицензия / для изолированной среды"
-offlineLicenseSub = "Скачиваемый файл лицензии для изолированного self-hosted экземпляра"
+paperEyebrow = "Enterprise предложение"
+paperFor = "Подготовлено для"
+pdfSize = "Размер PDF"
+poNumber = "Номер PO"
+poNumberPlaceholder = "Необязательно"
+postalCode = "Почтовый индекс"
+postalCodePlaceholder = "94105"
+posture = "Управление"
+posture_count = "~{{count}} политик"
+posture_essentials = "Essentials"
+posture_essentialsSub = "Классификация + совместный доступ — настройки по умолчанию"
+posture_governed = "Governed"
+posture_governedSub = "Добавляет безопасность и маршрутизацию"
+posture_regulated = "Regulated"
+posture_regulatedSub = "Каждая категория — Compliance, Retention, Ingestion"
 qbr = "Ежеквартальные бизнес-обзоры"
 qbrSub = "Ваш инженер по решениям каждый квартал анализирует использование и roadmap"
+region = "Штат / регион"
+regionPlaceholder = "California"
 running = "{{annual}} / год · {{years}}-летний {{tcv}}"
 s1Sub = "Ваша команда и PDF, которые вы планируете обрабатывать каждый год."
 s1Title = "Сколько вы будете обрабатывать?"
@@ -7623,6 +8491,12 @@ s2Title = "Обязательство и обслуживание"
 s3Sub = "Для предложения и соглашения, которое оно сформирует."
 s3Title = "Ваши данные"
 serviceLevel = "Уровень обслуживания"
+size_compact = "Компактный"
+size_compactSub = "В основном текст, менее 1 MB"
+size_heavy = "Тяжелый"
+size_heavySub = "Сканированные или с большим количеством изображений, 5 MB+"
+size_standard = "Стандартный"
+size_standardSub = "Текст и изображения, от 1 до 5 MB"
 slDedicated = "Выделенный"
 slDedicatedSub = "4 рабочих часа · выделенный менеджер аккаунта · +30%"
 slPriority = "Приоритетный"
@@ -7630,6 +8504,8 @@ slPrioritySub = "В тот же рабочий день · назначенны
 slStandard = "Стандартный"
 slStandardSub = "Следующий рабочий день · общий CSM · включено"
 stepOf = "Шаг {{n}} из {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Необязательно"
 term = "Срок"
 termDiscount = "Применена скидка {{pct}}% за многолетнее обязательство"
 title = "Соберите ваше предложение"
@@ -7637,6 +8513,7 @@ training = "Онбординг и обучение"
 trainingSub = "Живые сессии, чтобы ваша команда быстро начала работу"
 users = "Всего пользователей"
 usersPlaceholder = "например, 250"
+viewEula = "Прочитать"
 volEstimated = "Оценено по {{count}} пользователям (~2 000 PDF на каждого, включая автоматизацию). Измените, если знаете точнее."
 volManual = "Используется ваше значение. В любой момент можно переоценить по размеру команды."
 volNoUsers = "Не уверены? Введите размер команды, и мы оценим объём."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "например, 1 000 000"
 years_one = "{{count}} год"
 years_other = "{{count}} лет"
 
-[portal.procurement.docs]
-count_one = "{{count}} документ"
-count_other = "{{count}} документов"
-done = "Готово"
-here = "Вы здесь"
-hide = "Скрыть"
-optional = "Необязательно"
-paidAddon = "Платное дополнение"
-show = "Показать"
-subtitle = "Всё, что нужно на каждом этапе пути, появляется по мере продвижения сделки."
-supportingSubtitle = "SOC 2, проверки безопасности, налоговые формы и многое другое — готовы, когда их запросит ваша служба безопасности или закупок. За некоторые взимается разовая плата."
-supportingTitle = "Поддержка вашей оценки"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form и DPA в одной подписи."
+download = "Скачать"
+eula = "EULA и коммерческие условия"
+eulaSub = "Программное обеспечение и коммерческие условия самообслуживания."
+invoice = "Счет"
+invoiceSub = "Ваш первый счет за подписку."
+laterInvoice = "Доступно после принятия"
+laterQuote = "Доступно после выпуска вашего предложения"
+quote = "Предложение"
+quoteSub = "Ваше детализированное enterprise предложение."
+sla = "Приложение SLA"
+slaSub = "Уровни поддержки и целевые сроки ответа."
+subprocessors = "Субпроцессоры"
+subprocessorsSub = "Третьи стороны, обрабатывающие данные от вашего имени."
+subtitle = "Документы по вашей сделке доступны в любое время."
 title = "Документы"
-upcoming = "Предстоит"
+view = "Просмотреть"
 
 [portal.procurement.error]
 title = "Что-то пошло не так"
 
 [portal.procurement.hero]
-company = "Ваша корпоративная сделка"
+barAria = "Этап {{current}} из {{total}}"
 ctaAgreement = "Проверить и подписать соглашение"
-ctaLive = "Вы запущены"
-ctaPayment = "Добавить оплату"
+ctaExploring = "Настроить пробный период"
 ctaQuote = "Проверить ваше предложение"
+ctaReviewQuote = "Просмотреть предложение"
 ctaTrial = "Собрать ваше предложение"
+documents = "Документы"
 eyebrow = "Корпоративная закупка"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Пригласить коллег"
-keyDocs = "Ключевые документы"
-nextStep = "Следующий шаг: {{action}}"
-notStarted = "Не начато"
+licenseKey = "Лицензионный ключ"
+liveSub = "Ваша организация подготовлена, и ваша лицензия активна."
+liveTitle = "Вы работаете в Stirling Enterprise"
+next = "Далее: {{stage}}"
 open = "Открыть закупку"
 scheduleCall = "Запланировать звонок"
-setup1Sub = "Пригласите коллег"
-setup1Title = "Разверните PDF Editor"
-setup2Sub = "Включите обработку в редакторах и других источниках"
-setup2Title = "Подключите PDF Processor"
-setup3Sub = "Включайте Security, Compliance, Routing или Retention, когда они понадобятся"
-setup3Title = "Добавьте рекомендуемые политики"
+sentenceAgreement = "просмотр и подписание соглашения"
+sentenceLive = "подготовка и развертывание"
+sentencePayment = "заказ на покупку и оплата"
+sentenceQuote = "просмотр и принятие вашего предложения"
+sentenceTrial = "настройка пробного рабочего пространства"
 
 [portal.procurement.journey]
 daysLeft_one = "Остался {{count}} день"
 daysLeft_other = "Осталось {{count}} дней"
-engineerLabel = "Ваш инженер по решениям"
-eyebrow = "Ваш запуск"
-live = "Stirling Enterprise уже работает у вас"
-nextStep = "Следующий шаг: {{action}}"
-subtitle = "Ваш инженер по решениям сопровождает каждый шаг. По одному следующему действию за раз; полный контрольный список ниже."
-title = "От пробного периода до запуска — один понятный путь"
-trialTitle = "Пробный период Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Одна подпись покрывает MSA, order form, EULA и DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Пока не удалось создать офлайн-фай
 downloadOffline = "Скачать офлайн-лицензию (.lic)"
 hint = "Вставьте этот ключ в self-hosted экземпляр, чтобы активировать его, или сохраните для своих записей. Храните его в безопасности."
 label = "Ваш лицензионный ключ"
+subtitle = "Активируйте self-hosted экземпляр с помощью этого ключа или сохраните его для учета."
+title = "Ваш лицензионный ключ"
+trialFileHint = "Это ваш файл пробной лицензии. После заключения соглашения вернитесь и скачайте его снова — в отличие от онлайн-лицензионного ключа, файл .lic не обновляется сам."
 
 [portal.procurement.link]
 cta = "Привязать аккаунт"
@@ -7739,65 +8619,62 @@ description = "Ваша подписка активна, и лицензия в
 eyebrow = "Запущено"
 title = "Stirling Enterprise уже работает у вас"
 
-[portal.procurement.locked]
-description = "Ключи для пробного периода, предложения с обязательным объёмом, соглашение с одной подписью, оплата и журнал документов появятся здесь после начала корпоративной оценки."
-eyebrow = "Только Enterprise"
-talkToSales = "Связаться с отделом продаж"
-title = "Процесс закупки открывается с Enterprise"
-
 [portal.procurement.milestone]
-accept = "Принять и продолжить"
-description = "Скачайте PDF, чтобы поделиться им с командой, вернитесь и примите, когда будете готовы, или внесите изменения."
-download = "Скачать PDF"
 downloadError = "Пока не удалось скачать PDF с предложением — повторите попытку через минуту."
-edit = "Изменить предложение"
-eyebrow = "Предложение {{number}}"
-perYear = " / год"
-preparedFor = "Подготовлено для {{company}}"
-tcv = "{{value}} общая стоимость контракта"
-title = "Ваше предложение готово"
-
-[portal.procurement.modal]
-cancel = "Отмена"
-chooseFile = "Выбрать файл"
-close = "Закрыть"
-downloadBody = "Скачивание скоро начнётся."
-downloadCta = "Скачать"
-downloadTitle = "Скачать"
-noFile = "Файл не выбран"
-payBody = "Оплатите ваш обязательный контракт картой или банковским переводом через Stripe. Ваше рабочее пространство будет подготовлено, как только платёж пройдёт."
-payCta = "Перейти к Stripe"
-payTitle = "Подтвердить оплату"
-requestBodyFree = "Мы создаём это по запросу. Подтвердите, и ваш инженер по решениям скоро отправит документ."
-requestBodyPaid = "Это платное дополнение. Подтвердите, и ваш инженер по решениям оценит объём и отправит документы."
-requestCta = "Запросить"
-requestTitle = "Запросить этот документ"
-signBody = "Открывает Stirling Enterprise Agreement для электронной подписи: одна подпись покрывает MSA, order form, EULA и DPA. Мы автоматически подпишем со своей стороны, и вы перейдёте к оплате."
-signCta = "Открыть для подписи"
-signTitle = "Проверьте и подпишите соглашение"
-uploadBody = "Отправьте нам ваш заказ на закупку, и мы выставим счёт по вашим условиям. Перетащите PDF или выберите файл ниже."
-uploadCta = "Загрузить заказ на закупку"
-uploadTitle = "Загрузите ваш заказ на закупку"
 
 [portal.procurement.payment]
 description = "Ваше предложение принято, и лицензия уже активна — ваша команда может начать сразу. Оплатите первый счёт, когда будете готовы; оплатить или скачать его можно здесь, email не нужен."
+downloadAgreement = "Скачать подписанное соглашение"
 downloadInvoice = "Скачать счёт"
-simulate = "Симулировать получение оплаты (demo)"
+eyebrow = "Оплата"
 title = "Подписка создана"
 viewInvoice = "Посмотреть и оплатить счёт"
 
+[portal.procurement.review]
+acceptCta = "Принять предложение"
+annual = "Годовая плата (1-й год)"
+downloadCta = "Скачать предложение"
+poNumber = "Заказ на покупку: {{po}}"
+renewal = "Продление по {{amount}}/год после срока (+{{pct}}% CPI)"
+tcv = "Срок {{years}} лет, полная предоплата: {{tcv}}"
+validUntil = "Действительно до {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Не удалось загрузить планировщик."
 fallbackLink = "Открыть планирование в новой вкладке"
+loading = "Загрузка планировщика..."
 subtitle = "Ваш инженер по решениям проведёт вашу команду через запуск. Выберите удобное время."
 title = "Запланировать звонок"
 
-[portal.procurement.status]
-action = "Требуется действие"
-available = "Доступно"
-complete = "Завершено"
-pending = "В ожидании"
-request = "По запросу"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Изолировано, без исходящих подключений"
+back = "Назад"
+businessName = "Название компании"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Управляемое, самый быстрый старт"
+continue = "Продолжить"
+deployment = "Где развернуть?"
+eula = "Я принимаю Stirling EULA и коммерческие условия."
+fullName = "Полное имя"
+fullNamePlaceholder = "Ваше имя"
+invites = "Пригласить коллег · необязательно"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Запланировать звонок"
+seats = "Люди для тестирования"
+seatsPlaceholder = "например, 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker или Kubernetes"
+start = "Начать пробный период"
+stepOf = "Шаг {{n}} из {{total}}"
+subtitle = "Бесплатно 14 дней, карта не требуется."
+subtitleDetails = "Несколько деталей для вашего предложения и соглашения."
+talkFirst = "Хотите сначала поговорить?"
+title = "Настройте пробный период"
+viewEula = "Прочитать"
+workEmail = "Рабочий email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Продление добавляет 7 дней и уведомляет вашего инженера по решениям."
@@ -7808,20 +8685,6 @@ maxed = "Лимит исчерпан"
 subtitle = "Ваш бесплатный пробный период действует до {{date}}. Карта не требуется."
 title = "Пробный период Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Цены по обязательному объёму, SSO + SCIM + RBAC для всей организации, неизменяемый аудит за 90 дней и выделенный SE."
-homeCta = "Начать пробный период →"
-homeHeadline = "Обрабатывайте миллионы PDF."
-
-[portal.recentActivity]
-title = "Недавняя активность"
-viewAll = "Посмотреть всё"
-
-[portal.recentActivity.empty]
-description = "Здесь появятся запуски конвейеров, развёртывания и события агентов."
-title = "Здесь пока ничего нет"
-
 [portal.search]
 ariaLabel = "Поиск"
 placeholder = "Поиск в Stirling — endpoints, конвейеры, документы…"
@@ -7838,58 +8701,50 @@ admin = "Администратор"
 [portal.settings.sections]
 account-link = "Привязка аккаунта"
 
-[portal.shell.header]
-accountFallback = "Аккаунт"
-accountMenu = "Меню аккаунта"
-darkMode = "Тёмный режим"
-lightMode = "Светлый режим"
-search = "Поиск"
-searchPlaceholder = "Поиск…"
-signOut = "Выйти"
-switchToDark = "Переключиться на тёмную тему"
-switchToLight = "Переключиться на светлую тему"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} документов"
 linkAccount = "Привязать аккаунт Stirling"
-planEditor = "План Editor"
-planEnterprise = "План Enterprise"
-planProcessor = "План Processor"
 primaryNav = "Основная навигация"
 switchApp = "Переключить приложение"
 
+[portal.shell.topbar]
+closeNav = "Закрыть навигацию"
+openNav = "Открыть навигацию"
+search = "Поиск"
+
 [portal.sources]
 subtitle = "Многоразовые входные подключения, которые передают документы в Stirling. Настройте подключение один раз, затем используйте его в любом количестве политик. Нажмите строку, чтобы увидеть её конфигурацию и политики, которые её используют."
 title = "Источники"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Подключить источник"
 
+[portal.sources.builder]
+back = "Назад к источникам"
+backToTypes = "Все типы источников"
+cancel = "Отмена"
+chooseHint = "Выберите, откуда поступают документы. Неактивные коннекторы уже в разработке."
+comingSoon = "Скоро"
+comingSoonHeading = "Скоро"
+create = "Создать источник"
+createTitle = "Подключить источник"
+delete = "Удалить"
+editTitle = "Редактировать источник"
+enabled = "Включено"
+save = "Сохранить изменения"
+
+[portal.sources.builder.folderAccess]
+description = "Автоматизации папок могут использовать только папки, разрешенные администратором. Добавьте ее в настройках доступа к папкам, затем попробуйте снова."
+openSettings = "Настройки доступа к папкам"
+title = "Эта папка не разрешена"
+
 [portal.sources.delete]
 body = "Удалить «{{name}}»? Это действие нельзя отменить. Политики, которые ссылаются на него, нужно будет обновить."
 cancel = "Отмена"
 confirm = "Удалить"
 title = "Удалить источник?"
 
-[portal.sources.detail]
-closeAriaLabel = "Закрыть детали"
-delete = "Удалить источник"
-docs24h = "Последние 24 ч"
-docs30d = "Последние 30 дней"
-docsTotal = "Всего обнаружено"
-docsTrend = "Документы за последние 30 дней"
-documents = "Документы"
-edit = "Изменить"
-notReferenced = "Не используется ни одной политикой, поэтому его можно безопасно удалить."
-pause = "Приостановить"
-resume = "Возобновить"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Используется"
-
 [portal.sources.empty]
 description = "Подключите папку (а скоро и облачное хранилище), чтобы вашим политикам было откуда получать документы."
 title = "Источники пока не подключены"
@@ -7899,18 +8754,57 @@ inUse = "Используются"
 total = "Подключения"
 unused = "Не используются"
 
+[portal.sources.networkFields.connection]
+helperText = "Сохраненное подключение с адресом сервера и учетными данными. Повторно используется каждым источником, который на него ссылается."
+label = "Подключение"
+
+[portal.sources.networkFields.directory]
+helperText = "Папка на сервере для опроса, относительно домашней папки входа или корня общего ресурса. Оставьте пустым для корня."
+label = "Папка"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Потребление удаляет каждый файл с сервера после того, как каждая политика его обработает."
+label = "Режим чтения"
+
+[portal.sources.networkFields.mode.options]
+consume = "Потребление: обработать каждый файл один раз"
+snapshot = "Снимок: перечитывать папку при каждом запуске"
+
+[portal.sources.networkFields.recursive]
+label = "Глубина папки"
+
+[portal.sources.networkFields.recursive.options]
+all = "Включать подпапки"
+top = "Только верхний уровень"
+
 [portal.sources.status]
 active = "Активен"
 disabled = "Отключён"
 unused = "Не используется"
 
 [portal.sources.table]
+documents = "Документы"
 source = "Источник"
 status = "Статус"
 usedBy = "Политики"
 
+[portal.sources.types.box]
+description = "Получайте документы из папок Box, к которым ваша команда уже предоставляет доступ."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Получайте документы из общей папки Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Документы, обработанные вашей командой в редакторе, по политикам и запускам AI."
 label = "Editor"
+noPolicies = "Из редактора еще не запускались политики."
+
+[portal.sources.types.email]
+description = "Преобразуйте вложения, отправленные в выделенный почтовый ящик, в документы."
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "Отслеживать новые документы в каталоге на сервере."
@@ -7943,25 +8837,80 @@ label = "Глубина папки"
 all = "Включать подпапки"
 top = "Только верхний уровень"
 
+[portal.sources.types.ftp]
+description = "Опрос папки сервера FTP или FTPS на наличие новых документов."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Получайте документы из общих папок Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Отслеживайте сетевой ресурс SMB на наличие новых документов."
+label = "Сетевой диск"
+
+[portal.sources.types.onedrive]
+description = "Отслеживайте папки OneDrive на наличие новых документов."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Получайте документы из Amazon S3 или S3-совместимого bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Сохраненное подключение с bucket и учетными данными. Повторно используется каждым источником и выходом конвейера, который на него ссылается."
+label = "Подключение"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Потребление удаляет каждый объект из bucket после того, как каждая политика его обработает."
+label = "Режим чтения"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Потребление: обработать каждый объект один раз"
+snapshot = "Снимок: перечитывать bucket при каждом запуске"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Обрабатываются только объекты, ключи которых начинаются с этого префикса."
+label = "Префикс ключа"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Опрос папки приема SFTP на наличие новых документов."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Получайте документы из библиотек документов SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Источник"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL и секрет подписи создаются при создании этого webhook. Отправители отправляют документы POST на этот URL, а ссылающиеся политики запускаются при поступлении."
+description = "Получайте документы через подписанный HTTP POST из любой внешней системы."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Секрет подписи показывается один раз при создании webhook. Создайте источник заново, чтобы обновить его."
+
+[portal.sources.types.webhook.reveal]
+copy = "Копировать"
+done = "Готово"
+secret = "Секрет подписи"
+secretHelp = "Подписывайте сырое тело каждой доставки этим ключом (HMAC-SHA256) и отправляйте его в заголовке X-Stirling-Signature."
+secretWarning = "Скопируйте секрет подписи сейчас. В целях безопасности он показывается только один раз и не может быть получен позже."
+title = "Webhook создан"
+url = "Delivery URL"
+usage = "Отправляйте каждый документ POST как сырое тело запроса на Delivery URL с бинарным типом содержимого (application/pdf или application/octet-stream). Ссылающиеся политики автоматически запускаются при поступлении."
+
 [portal.sources.wizard]
-back = "Назад"
-cancel = "Отмена"
-continue = "Продолжить"
-editTitle = "Изменить источник"
 name = "Название"
 namePlaceholder = "например, приём заявок"
-save = "Сохранить изменения"
-subtitle = "Шаг {{current}} из {{total}} · {{label}}"
-title = "Подключить источник"
 type = "Тип"
 
-[portal.sources.wizard.steps]
-chooseType = "Выбрать тип"
-configure = "Настроить"
-review = "Проверить и подключить"
+[portal.stepModal]
+close = "Закрыть"
 
 [portal.usage]
 managePayment = "Управление оплатой"
@@ -8021,16 +8970,9 @@ summary = "Владеет командой — управляет ресурса
 2 = "Доступ к порталу через политику по умолчанию"
 3 = "Всё, что может участник"
 
-[portal.welcome]
-ariaLabel = "Добро пожаловать в Stirling PDF"
-badge = "Открытый исходный код"
-installEditor = "Установить Editor"
-inviteTeammates = "Пригласить коллег"
-openInBrowser = "Открыть в браузере"
-perks = "Бесплатно навсегда · Можно self-host"
-subtitle = "Самый безопасный в мире PDF Editor бесплатен для команд любого размера. Включает 60+ операций с PDF и SSO."
-title = "Добро пожаловать в"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Без ограничений"
 
 [printFile]
 title = "Печать файла"
@@ -8613,6 +9555,14 @@ text = "Поворачивайте страницы PDF по или против
 [rotate.tooltip.header]
 title = "Обзор настроек поворота"
 
+[ruler]
+clearAll = "Очистить все"
+hideAllLabels = "Скрыть все метки"
+hideSmallLabels = "Скрыть мелкие метки"
+physicalValues = "Физические"
+scaled = "Масштабированные"
+showAllLabels = "Показать все метки"
+
 [sanitize]
 desc = "Удаление потенциально вредных элементов из PDF-файлов."
 sanitizationResults = "Результаты санитизации"
@@ -8654,31 +9604,45 @@ label = "Удалить XMP-метаданные"
 [sanitize.steps]
 settings = "Настройки"
 
-[sanitizePdf]
-tags = "очистка,безопасность,защита,удаление угроз"
-
 [sanitizePDF]
 title = "Очистить PDF"
 
+[sanitizePdf]
+tags = "очистка,безопасность,защита,удаление угроз"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Настройка масштаба страницы"
 
+[scaleSettings]
+activeScale = "Активный масштаб"
+apply = "Применить масштаб"
+applyCalibration = "Применить калибровку"
+calculatedScale = "Рассчитанный масштаб"
+calibrate = "Калибровать"
+calibrating = "Калибровка"
+calibrationDistanceRequired = "Введите реальное расстояние больше нуля"
+calibrationInvalid = "Не удалось рассчитать масштаб по этому измерению"
+calibrationPaperDistance = "Измеренное расстояние на странице: {{distance}}"
+calibrationTitle = "Калибровать масштаб"
+calibrationTooltip = "Измерьте известное расстояние, чтобы автоматически рассчитать масштаб"
+customScale = "Пользовательский масштаб"
+noneSet = "Пользовательский масштаб не задан"
+presets = "Предустановленные масштабы"
+ratio = "Коэффициент масштаба"
+ratioHelp = "Соотношение: 1 единица страницы = X реальных единиц"
+ratioPlaceholder = "например, 100"
+ratioPositive = "Коэффициент должен быть больше нуля"
+ratioRequired = "Коэффициент обязателен"
+realDistance = "Реальное расстояние"
+realDistancePlaceholder = "например, 5"
+reset = "Сбросить к значениям по умолчанию"
+unit = "Единица измерения"
+unitInvalid = "Недопустимая единица измерения: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Пороговый угол:"
-10 = "Устанавливает размер добавляемой и удаляемой границы для предотвращения белых границ в выводе (по умолчанию: 1)."
-2 = "Устанавливает минимальный абсолютный угол, необходимый для поворота изображения (по умолчанию: 10)."
-3 = "Допуск:"
-4 = "Определяет диапазон изменения цвета вокруг предполагаемого фонового цвета (по умолчанию: 30)."
-5 = "Минимальная площадь:"
-6 = "Устанавливает минимальный порог площади для фотографии (по умолчанию: 10000)."
-7 = "Минимальная площадь контура:"
-8 = "Устанавливает минимальный порог площади контура для фотографии"
-9 = "Размер границы:"
-
 [scannerImageSplit]
 submit = "Извлечь отсканированные изображения"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Что делает инструмент"
 whatThisDoesDesc = "Автоматически находит и извлекает каждую фотографию со отсканированной страницы или составного изображения — без ручной обрезки."
 whenToUse = "Когда использовать"
 
+[ScannerImageSplit.selectText]
+1 = "Пороговый угол:"
+10 = "Устанавливает размер добавляемой и удаляемой границы для предотвращения белых границ в выводе (по умолчанию: 1)."
+2 = "Устанавливает минимальный абсолютный угол, необходимый для поворота изображения (по умолчанию: 10)."
+3 = "Допуск:"
+4 = "Определяет диапазон изменения цвета вокруг предполагаемого фонового цвета (по умолчанию: 30)."
+5 = "Минимальная площадь:"
+6 = "Устанавливает минимальный порог площади для фотографии (по умолчанию: 10000)."
+7 = "Минимальная площадь контура:"
+8 = "Устанавливает минимальный порог площади контура для фотографии"
+9 = "Размер границы:"
+
 [search]
 noResults = "Ничего не найдено"
 placeholder = "Введите поисковый запрос..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Ваш сервер Stirling-PDF офлайн, и \"{
 [session]
 expired = "Ваша сессия истекла. Пожалуйста, обновите страницу и попробуйте снова."
 
-[sessionManagement.tooltip]
-header = "Управление сессиями подписания"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Новые участники добавляются в конец порядка подписания"
-bullet2 = "Нельзя добавлять участников после завершения сессии"
-bullet3 = "Каждый участник получает уведомление, когда наступает его очередь"
-description = "Вы можете добавлять участников в активную сессию в любое время до завершения."
-title = "Добавление участников"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Полное завершение</b>: все участники подписали"
-bullet2 = "<b>Частичное завершение</b>: некоторые участники ещё не подписали"
-bullet3 = "Неподписавшие участники будут исключены из финального документа"
-bullet4 = "После завершения вы можете загрузить подписанный PDF в активные файлы"
-description = "Завершение объединяет все подписи в один подписанный PDF. Это действие нельзя отменить."
-title = "Завершение сессии"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Нельзя удалить участников, которые уже подписали"
-bullet2 = "Удалённые участники больше не получают уведомления"
-bullet3 = "Порядок подписания корректируется автоматически"
-description = "Участников можно удалять из сессий до того, как они подпишут."
-title = "Удаление участников"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Каждая подпись применяется к PDF последовательно"
-bullet2 = "Поздние подписанты видят более ранние подписи"
-bullet3 = "Критично для процессов утверждения и юридической цепочки хранения"
-description = "Порядок, который вы задаёте при создании сессии, определяет, кто подписывает первым."
-title = "Порядок подписей"
-
 [settings]
 close = "Закрыть"
 
+[settings.ai]
+documents = "Документы и RAG"
+general = "Общие"
+limits = "Ограничения и производительность"
+models = "Модели и поставщики"
+title = "ИИ"
+
 [settings.configuration]
 advanced = "Дополнительно"
 database = "База данных"
 endpoints = "Конечные точки"
 features = "Функции"
+folderAccess = "Доступ к папкам"
 mcp = "MCP Server"
 storageSharing = "Хранение файлов и общий доступ"
 systemSettings = "Системные настройки"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Редактор PDF по умолчанию"
 defaultPdfEditorActive = "Stirling PDF — ваш редактор PDF по умолчанию"
 defaultPdfEditorChecking = "Проверка..."
 defaultPdfEditorInactive = "Другое приложение назначено по умолчанию"
+defaultPdfEditorRemind = "Напоминать установить по умолчанию"
+defaultPdfEditorRemindDescription = "Показывать баннер, когда Stirling PDF не является вашим приложением PDF по умолчанию."
 defaultPdfEditorSet = "Уже по умолчанию"
 defaultStartupView = "Вид по умолчанию при запуске"
 defaultStartupViewDescription = "Выберите, какая вкладка в левой колонке будет активной при запуске приложения"
@@ -8817,9 +9771,18 @@ languageDescription = "Выберите язык отображения"
 logout = "Выйти"
 setAsDefault = "Сделать по умолчанию"
 theme = "Тема"
+themeAccent = "Акцентный цвет"
+themeAccentCustom = "Пользовательский цвет"
+themeAccentCustomHint = "Пользовательский (рекомендуются значения по умолчанию)"
+themeAccentDark = "Акцентный цвет темного режима"
+themeAccentDefault = "По умолчанию"
+themeAccentDefaultHint = "Тема по умолчанию (рекомендуется)"
+themeAccentDescription = "Кнопки, ссылки и выделения используют его, а также он слегка окрашивает приложение. У светлого и темного режимов свои настройки. Системный режим использует активный вариант."
+themeAccentLight = "Акцентный цвет светлого режима"
 themeDark = "Темная"
 themeDescription = "Переключение между светлым и темным режимом"
 themeLight = "Светлая"
+themeReset = "Восстановить тему по умолчанию"
 themeSystem = "System"
 title = "Общие"
 user = "Пользователь"
@@ -8833,6 +9796,12 @@ intro = "Включите аутентификацию пользователе
 learnMore = "Подробнее в документации"
 title = "Для системных администраторов"
 
+[settings.general.loginLanding]
+description = "Выберите, какое приложение будет открываться при входе в Stirling Cloud."
+editor = "Редактор"
+processor = "Обработчик"
+title = "После входа"
+
 [settings.general.mode]
 fullscreen = "Полноэкранный"
 sidebar = "Боковая панель"
@@ -9041,6 +10010,11 @@ security = "Безопасность"
 telegram = "Telegram"
 title = "Безопасность и аутентификация"
 
+[settings.signOut]
+confirm = "Вы уверены, что хотите выйти?"
+submit = "Выйти"
+title = "Выход"
+
 [settings.team]
 title = "Команда"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Загрузить на сервер"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "нажмите здесь"
+fallback = "Если он не открылся автоматически,"
+opening = "Открытие Swagger UI в новой вкладке..."
 tags = "api,документация,swagger,эндпоинты,разработка"
 title = "Документация API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Выберите файлы в «Активных файла
 singleFileScope = "Применяется только к: {{fileName}}"
 viewerMode = "Переключитесь в редактор файлов, чтобы выбрать несколько файлов."
 
+[toolFormat]
+ANY = "любой файл"
+CBR = "архив комиксов (CBR)"
+CBZ = "архив комиксов (CBZ)"
+CSV = "CSV-файл"
+EBOOK = "электронная книга"
+EMAIL = "электронное письмо"
+EXCEL = "электронная таблица"
+HTML = "веб-страница"
+IMAGE = "изображения"
+JAVASCRIPT = "JavaScript-файл"
+JSON = "JSON-файл"
+MARKDOWN = "Markdown-файл"
+NONE = "нет файла"
+PCL = "печатный файл PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "защищенный паролем PDF"
+POSTSCRIPT = "PostScript-файл"
+PPT = "презентация"
+TEXT = "текстовый файл"
+VIDEO = "видео"
+WORD = "документ Word"
+XML = "XML-файл"
+XPS = "документ XPS"
+ZIP = "ZIP-архив"
+
 [toolPanel]
 alpha = "Альфа"
 backToAllTools = "Назад ко всем инструментам"
 collapse = "Свернуть панель"
 expand = "Развернуть панель"
 goBack = "Вернуться"
+pdfTools = "Инструменты PDF"
 placeholder = "Выберите инструмент, чтобы начать"
 premiumFeature = "Премиум‑функция:"
+searchTools = "Поиск инструментов"
 toolsHeader = "Инструменты"
 viewAllTools = "Показать все инструменты"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Инструменты не найдены"
 quickAccess = "БЫСТРЫЙ ДОСТУП"
 searchPlaceholder = "Поиск инструментов..."
 
-[toolPicker.categories]
-advancedTools = "Расширенные инструменты"
-recommendedTools = "Рекомендуемые инструменты"
-standardTools = "Стандартные инструменты"
-
 [toolPicker.subcategories]
 advancedFormatting = "Расширенное форматирование"
 automation = "Автоматизация"
@@ -9950,16 +10950,31 @@ title = "Пользователи"
 you = "(вы)"
 
 [users.action]
+cancelInvite = "Отменить приглашение"
 deleteTeam = "Удалить команду"
 disableMfa = "Сбросить MFA"
 move = "Переместить в команду"
 reinstate = "Восстановить"
 remove = "Удалить из организации"
+removeTeam = "Удалить из команды"
 rename = "Переименовать команду"
 resetPw = "Сбросить пароль"
 suspend = "Приостановить"
 unlock = "Разблокировать аккаунт"
 
+[users.activity]
+daysAgo = "{{count}} дн. назад"
+hoursAgo = "{{count}} ч назад"
+justNow = "Только что"
+minutesAgo = "{{count}} мин назад"
+monthsAgo_one = "{{count}} месяц назад"
+monthsAgo_other = "{{count}} мес. назад"
+never = "Никогда"
+weeksAgo_one = "{{count}} неделю назад"
+weeksAgo_other = "{{count}} нед. назад"
+yearsAgo_one = "{{count}} год назад"
+yearsAgo_other = "{{count}} г. назад"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Утверждает политику"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Отменить приглашение для {{email}}? Они не смогут присоединиться по текущей ссылке."
+cancelInviteTitle = "Отменить приглашение"
 deleteTeamBody = "Удалить команду {{name}}? Сначала команда должна быть пустой — переместите её участников в другую команду, и у неё не должно оставаться конфигураций интеграций."
 deleteTeamTitle = "Удалить команду"
 disableMfaBody = "Удалить регистрацию MFA для {{name}}? При необходимости он(а) настроит её снова при следующем входе."
 disableMfaTitle = "Сбросить MFA"
 removeBody = "Навсегда удалить {{name}} из организации? Это действие нельзя отменить."
+removeTeamBody = "Удалить {{name}} из команды? У них останется учетная запись, но они потеряют доступ к ресурсам этой команды."
 removeTitle = "Удалить участника"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Имя пользователя"
 usernameError = "Имя пользователя должно содержать не менее 3 символов"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Пригласил(а) {{who}}"
+cancel = "Отменить"
+count = "{{count}} в ожидании"
+desc = "Приглашенные люди, которые еще не присоединились. Они занимают место, пока не примут приглашение."
+expiresInDays_one = "Истекает через {{count}} день"
+expiresInDays_other = "Истекает через {{count}} дн."
+expiresToday = "Истекает сегодня"
+title = "Ожидающие приглашения"
+
 [users.loadError]
 description = "Что-то пошло не так при обращении к серверной части, или у вас нет доступа. Попробуйте снова."
 title = "Не удалось загрузить участников"
@@ -10212,9 +11240,11 @@ title = "Вложения"
 
 [viewer.bookmarks]
 bookmarkTitle = "Название закладки"
+bookmarkTitleRequired = "Название закладки обязательно"
 closeSidebar = "Закрыть боковую панель закладок"
 collapseAll = "Свернуть все закладки"
 expandAll = "Развернуть все закладки"
+searchPlaceholder = "Поиск закладок"
 
 [viewer.comments]
 addComment = "Добавить комментарий"
@@ -10605,30 +11635,6 @@ title = "Текст водяного знака"
 image = "Изображение"
 text = "Текст"
 
-[wetSignature.tooltip]
-header = "Способы создания подписи"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Настройте цвет и толщину пера"
-bullet2 = "Стирайте и перерисовывайте, пока не будете довольны"
-bullet3 = "Работает на сенсорных устройствах (планшеты, телефоны)"
-description = "Создайте рукописную подпись с помощью мыши или сенсорного экрана. Лучше всего для личных, аутентичных подписей."
-title = "Нарисовать подпись"
-
-[wetSignature.tooltip.type]
-bullet1 = "Выберите из нескольких шрифтов"
-bullet2 = "Настройте размер и цвет текста"
-bullet3 = "Идеально для стандартизированных подписей"
-description = "Создайте подпись из введенного текста. Быстро и единообразно, подходит для деловых документов."
-title = "Ввести подпись"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Поддерживаются PNG, JPG и другие форматы изображений"
-bullet2 = "Для наилучших результатов рекомендуется прозрачный фон"
-bullet3 = "Изображение будет масштабировано под область подписи"
-description = "Загрузите заранее созданное изображение подписи. Идеально, если у вас есть скан подписи или логотип компании."
-title = "Загрузить изображение подписи"
-
 [workbenchBar]
 activeFiles = "Активные файлы"
 annotations = "Аннотации"
@@ -10652,6 +11658,7 @@ redact = "Скрыть данные"
 rotateLeft = "Повернуть влево"
 rotateRight = "Повернуть вправо"
 ruler = "Линейка / Измерение"
+rulerSettings = "Настройки масштаба"
 save = "Сохранить"
 saveAll = "Сохранить все"
 saveAs = "Сохранить как"
diff --git a/frontend/editor/public/locales/sk-SK/translation.toml b/frontend/editor/public/locales/sk-SK/translation.toml
index 1da4a88095..40d4be8ae6 100644
--- a/frontend/editor/public/locales/sk-SK/translation.toml
+++ b/frontend/editor/public/locales/sk-SK/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "vybrané súbory"
 font = "Písmo"
 fontSizeTooltip = "Veľkosť textu čísla strany v bodoch. Väčšie čísla vytvoria väčší text."
 fontTypeTooltip = "Rodina písma pre čísla strán. Vyberte podľa štýlu vášho dokumentu."
-genericSubmit = "Odoslať"
 green = "Zelená"
 help = "Pomoc"
-imgPrompt = "Vyberte obrázok(y)"
 incorrectPasswordMessage = "Aktuálne heslo je nesprávne."
 info = "Info"
 invalidUndoData = "Nemožno vrátiť: neplatné údaje operácie"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Dohoda pri prihlásení"
 logOut = "Odhlásiť sa"
 marginTooltip = "Vzdialenosť medzi číslom strany a okrajom strany."
 moreOptions = "Ďalšie možnosti"
-multiPdfPrompt = "Vyberte PDF súbory (2+)"
 never = "Nikdy"
 no = "Nie"
 noFileSelected = "Nie je vybraný žiadny súbor. Nahrajte ho, prosím."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Vlastné poradie stránok (Zadajte zoznam čísel stránok od
 pages = "Strany"
 pageSelectionPrompt = "Vlastný výber stránok (Zadajte zoznam čísel stránok oddelených čiarkou 1,5,6 alebo funkcie ako 2n+1):"
 password = "Heslo"
-pdfPrompt = "Vyberte PDF súbor(y)"
 pin = "Pripnúť súbor (ponechať aktívny po spustení nástroja)"
 pro = "Pro"
 processingComplete = "Váš súbor je pripravený."
@@ -356,6 +352,7 @@ text = "Tieto povolenia riadia, čo môžu používatelia s PDF robiť. Najefekt
 title = "Zmeniť povolenia"
 
 [addStamp]
+preview = "Náhľad pečiatky"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Manuálne sťahovanie: kliknite na odkazy a uložte súbory do pr
 noLanguages = "V nakonfigurovanom adresári sa nenašli žiadne jazyky tessdata."
 permissionNotice = "Cesta k tessdata nie je zapisovateľná. Sťahovania sa otvoria v prehliadači; súbory .traineddata prosím uložte manuálne do priečinka tessdata."
 
+[admin.settings.ai.documents]
+description = "Nakonfigurujte model embeddingov a nastavenia vyhľadávania používané na odpovedanie na otázky nad dokumentmi. Po uložení sa použije v AI engine."
+title = "Dokumenty a RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Nechajte prázdne, ak chcete použiť vlastné prihlasovacie údaje prostredia engine. Platí pre self-hosted nasadenia s jedným engine."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Uložené – nechajte prázdne, ak chcete ponechať aktuálny kľúč"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Základná URL OpenAI-kompatibilného / Ollama endpointu pre embeddingy, napr. http://ollama:11434/v1. Musí smerovať na dôveryhodný interný endpoint (citlivé na SSRF)."
+label = "Základná URL embeddingov"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Názov modelu embeddingov. Voľný text; návrhy sú iba pomôcky."
+label = "Model embeddingov"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Poskytovateľ používaný na prevod textu dokumentu na vektorové embeddingy."
+label = "Poskytovateľ embeddingov"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maximálny počet vyhľadávaní, ktoré môže agent spustiť na jednu požiadavku."
+label = "Max. počet vyhľadávaní"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Zmena modelu embeddingov sa prejaví okamžite, ale dokumenty indexované predchádzajúcim modelom musia byť znovu indexované, aby vyhľadávanie vracalo správne výsledky."
+title = "Vyžaduje sa opätovné indexovanie"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Ak ste zmenili model embeddingov, znovu indexujte existujúce dokumenty, aby vyhľadávanie používalo nový model."
+
+[admin.settings.ai.documents.topK]
+description = "Počet najrelevantnejších častí načítaných pri každom vyhľadávaní."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Pripojte Stirling k Python AI engine a vyberte, ktoré AI funkcie budú dostupné. Zmeny sa použijú po reštarte."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Zapnite alebo vypnite jednotlivé AI funkcie. Vypnuté funkcie sú v aplikácii skryté."
+title = "Možnosti"
+
+[admin.settings.ai.general.enabled]
+description = "Hlavný prepínač. Keď je vypnutý, nie sú dostupné žiadne AI nástroje, agenti ani volania engine."
+label = "Povoliť AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Konverzačný asistent na prácu s PDF."
+label = "Chat asistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Automaticky kategorizujte dokumenty podľa typu alebo obsahu."
+label = "Klasifikácia dokumentov"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Vygenerujte nový PDF (napr. z HTML) cez AI agenta."
+label = "Vytvoriť PDF z promptu"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Pýtajte sa otázky a získavajte odpovede založené na nahranom dokumente."
+label = "Otázky k dokumentu"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Skontrolujte dokumenty na matematické a číselné chyby."
+label = "Matematický audítor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Pridajte do PDF komentáre a anotácie na kontrolu vytvorené AI."
+label = "Agent komentárov PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Časový limit pre náročnejšie operácie agenta, ako je generovanie dokumentov."
+label = "Časový limit dlhých operácií (sekundy)"
+
+[admin.settings.ai.general.note]
+body = "AI engine beží ako samostatná služba. Jej zdieľané tajomstvo"
+body2 = "sa nastavuje cez premennú prostredia kontajnera. Provider API keys je možné zadať na týchto stránkach alebo dodať ako premenné prostredia engine; kľúče zadané tu sa po uložení odošlú do engine."
+title = "O AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Časový limit pre streamované (token po tokene) odpovede chatu."
+label = "Časový limit streamu (sekundy)"
+
+[admin.settings.ai.general.test]
+button = "Otestovať pripojenie"
+failBody = "AI engine neodpovedal. Skontrolujte URL, či beží kontajner engine a či je AI povolené (po povolení je potrebný reštart)."
+failTitle = "AI engine je nedostupný"
+okBody = "AI engine odpovedal na kontrolu stavu."
+okTitle = "AI engine je dostupný"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Časový limit pre štandardné AI požiadavky na engine."
+label = "Časový limit požiadavky (sekundy)"
+
+[admin.settings.ai.general.url]
+description = "Interná URL Python AI engine, napr. http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "Ochranné limity určujúce, koľko práce môžu AI požiadavky vykonať a koľko ich môže bežať súčasne. Po uložení sa použijú v AI engine."
+title = "Limity a výkon"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Ochranný limit: odmietnuť AI požiadavky, ktorých extrahovaný text prekročí túto dĺžku."
+label = "Max. počet znakov na požiadavku"
+
+[admin.settings.ai.limits.maxPages]
+description = "Ochranný limit: odmietnuť AI požiadavky nad tento počet strán PDF."
+label = "Max. počet strán na požiadavku"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maximálny počet súčasne prebiehajúcich volaní modelu v celom engine."
+label = "Max. súbežnosť modelu"
+
+[admin.settings.ai.models]
+description = "Vyberte poskytovateľa LLM a inteligentné/rýchle modely, ktoré AI engine používa. Po uložení sa použije v AI engine."
+title = "Modely a poskytovatelia"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Nechajte prázdne, ak chcete použiť vlastné prihlasovacie údaje prostredia engine. Platí pre self-hosted nasadenia s jedným engine."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Uložené – nechajte prázdne, ak chcete ponechať aktuálny kľúč"
+
+[admin.settings.ai.models.baseUrl]
+description = "Základná URL OpenAI-kompatibilného / Ollama endpointu, napr. http://ollama:11434/v1."
+label = "Základná URL poskytovateľa"
+warning = "Základná URL musí smerovať na dôveryhodný interný endpoint. Engine na ňu bude odosielať požiadavky zo servera, takže nedôveryhodná hodnota je citlivá na SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maximálny počet výstupných tokenov pre rýchly model."
+label = "Max. tokeny rýchleho modelu"
+
+[admin.settings.ai.models.fastModel]
+description = "Lacnejší a rýchlejší model pre jednoduché úlohy. Voľný text; návrhy sú iba pomôcky."
+label = "Rýchly model"
+
+[admin.settings.ai.models.provider]
+description = "S ktorým poskytovateľom LLM engine komunikuje."
+label = "Poskytovateľ"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maximálny počet výstupných tokenov pre inteligentný model."
+label = "Max. tokeny inteligentného modelu"
+
+[admin.settings.ai.models.smartModel]
+description = "Vysokovýkonný model pre komplexné uvažovanie. Voľný text; návrhy sú iba pomôcky."
+label = "Inteligentný model"
+
+[admin.settings.ai.saved]
+body = "Zmeny sa automaticky odosielajú do AI engine."
+bodyNoPush = "Nastavenia boli uložené. Použijú sa pri najbližšom načítaní konfigurácie AI engine."
+title = "AI nastavenia uložené"
+
 [admin.settings.badge]
 clickToUpgrade = "Kliknite pre zobrazenie podrobností plánu"
 
@@ -938,6 +1094,25 @@ label = "Znovu vygenerovať pri štarte"
 description = "Počet dní, počas ktorých bude certifikát platný"
 label = "Platnosť certifikátu (dni)"
 
+[admin.settings.folderAccess]
+description = "Adresáre, z ktorých môžu zdroje priečinkov a výstupy priečinkov čítať a do ktorých môžu zapisovať. Ide o bezpečnostnú hranicu: automatizácie nikdy nemožno nasmerovať na serverovú cestu mimo tohto zoznamu."
+securityNote = "Nechajte prázdne, ak chcete úplne vypnúť zdroje a výstupy priečinkov. Vlastný konfiguračný adresár Stirling je vždy zakázaný."
+title = "Prístup k priečinkom"
+
+[admin.settings.folderAccess.implied]
+description = "Tieto adresáre spravované Stirling sú vždy povolené a tu ich nemožno zmeniť."
+serverStorage = "Ukladanie súborov na serveri"
+title = "Vždy povolené"
+watchedFolder = "Sledovaný priečinok Pipeline"
+
+[admin.settings.folderAccess.roots]
+add = "Pridať"
+empty = "Nie sú povolené žiadne priečinky. Zdroje a výstupy priečinkov sú momentálne vypnuté."
+hint = "Zadajte absolútne cesty, napríklad /data/inbox."
+label = "Povolené koreňové priečinky"
+placeholder = "/data/inbox"
+remove = "Odstrániť koreňový priečinok"
+
 [admin.settings.general]
 description = "Nakonfigurujte celosystémové nastavenia aplikácie vrátane značky a predvoleného správania."
 system = "Systém"
@@ -1842,6 +2017,15 @@ export = "Export"
 accessDenied = "Prístup zamietnutý"
 insufficientPermissions = "Nemáte oprávnenie vykonať túto akciu."
 
+[auth.callback]
+completing = "Dokončuje sa overenie"
+invalidToken = "OAuth prihlásenie zlyhalo – neplatný token."
+missingToken = "OAuth prihlásenie zlyhalo – nebol prijatý žiadny token."
+oauthFailed = "OAuth prihlásenie zlyhalo. Skúste to znova."
+pleaseWait = "Počkajte, kým dokončíme vaše prihlásenie."
+signedOut = "Boli ste odhlásení. Prihláste sa znova."
+windowMayClose = "Po dokončení môžete toto okno zavrieť."
+
 [auth.displayName]
 guest = "Hosť"
 user = "Používateľ"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Zabezpečí dokumenty PDF odstránením potenciálne škod
 description = "Tento nástroj automaticky premenuje súbory PDF na základe ich obsahu. Analyzuje dokument, aby našiel najvhodnejší názov z textu."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automaticky otočiť"
+tags = "automatické otočenie,opraviť orientáciu,hore nohami,nabok,vyrovnať,orientovať,zistiť orientáciu,opraviť otočenie,automatická orientácia,naskenované,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Prah spoľahlivosti"
+
+[autoRotate.detectionMode]
+auto = "Automaticky"
+osd = "Iba OCR"
+text = "Iba text"
+title = "Metóda detekcie"
+
+[autoRotate.error]
+failed = "Pri automatickom otáčaní PDF sa vyskytla chyba."
+
+[autoRotate.inferUndetected]
+title = "Otočiť stránky s nízkou spoľahlivosťou podľa ostatných"
+
+[autoRotate.report]
+applied = "{{degrees}}° v smere hodinových ručičiek"
+confidenceValue = "Spoľahlivosť {{value}}"
+noChange = "Bez zmeny"
+pageLabel = "Strana {{number}}"
+summary = "Otočených {{rotated}} z {{total}} strán, {{unchanged}} ponechaných bez zmeny"
+title = "Správa o detekcii"
+
+[autoRotate.report.method]
+inferred = "Zhodné"
+none = "Preskočené"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Pod prahom"
+blankPage = "Strana je prázdna"
+inferredFromDocument = "Rovnako ako ostatné strany"
+noDominantDirection = "Zmiešané smery textu"
+osdFailed = "Nenašiel sa čitateľný text"
+osdNoVerdict = "Nepodarilo sa určiť správnu orientáciu"
+tesseractUnavailable = "OCR nie je nainštalované"
+tooFewGlyphs = "Príliš málo textu"
+
+[autoRotate.results]
+title = "Výsledky automatického otočenia"
+
+[autoRotate.settings]
+title = "Nastavenia"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Ako istá musí byť kontrola, než sa stránka otočí. Znížte hodnotu, ak chcete otočiť viac strán, zvýšte ju, ak chcete ponechať viac strán nedotknutých."
+title = "Prah spoľahlivosti"
+
+[autoRotate.tooltip.description]
+text = "Zistí, ktorou stranou hore má byť každá stránka, a otočí ju správnym smerom. Stránky, ktoré už sú správne orientované, ponechá bez zmeny."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automaticky najprv prečíta text na stránke a potom, ak to nestačí, sa pozrie na stránku ako na obrázok. Iba text preskočí kontrolu obrázka, čo je najrýchlejšie pre dokumenty, ktoré nikdy neboli skenované. Iba OCR zaobchádza s každou stránkou ako s obrázkom."
+title = "Metóda detekcie"
+
+[autoRotate.tooltip.header]
+title = "Automatické otočenie"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Prázdne alebo takmer prázdne stránky nemožno spoľahlivo skontrolovať samostatne. Keď každá čitateľná stránka vyžaduje rovnaké otočenie, tieto stránky sa otočia podľa nich."
+title = "Otočiť stránky s nízkou spoľahlivosťou podľa ostatných"
+
 [autoSizeSplitPDF]
 tags = "pdf, rozdelenie, dokument, organizácia"
 
@@ -2189,33 +2440,6 @@ keywords = "Kľúčové slová: odd, even"
 numbers = "Čísla/rozsahy: 5, 10-20"
 progressions = "Postupnosti: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Typy certifikátov"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Spravované systémovými administrátormi"
-bullet2 = "Zdieľané medzi autorizovanými používateľmi"
-bullet3 = "Reprezentuje identitu spoločnosti, nie jednotlivca"
-bullet4 = "Vhodné pre: oficiálne dokumenty, tímové podpisy"
-description = "Zdieľaný certifikát poskytovaný vašou organizáciou. Používa sa na celofiremné podpisovanie."
-title = "Organizačný certifikát"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generuje sa automaticky pri prvom použití"
-bullet2 = "Viazaný na váš používateľský účet"
-bullet3 = "Nie je možné zdieľať s inými používateľmi"
-bullet4 = "Vhodné pre: osobné dokumenty, individuálnu zodpovednosť"
-description = "Automaticky generovaný certifikát jedinečný pre váš používateľský účet. Vhodný pre individuálne podpisy."
-title = "Osobný certifikát"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Vyžaduje súbor P12/PFX a heslo"
-bullet2 = "Môže byť vydaný externými certifikačnými autoritami"
-bullet3 = "Vyššia úroveň dôvery pre právne dokumenty"
-bullet4 = "Vhodné pre: právne záväzné zmluvy, externé overenie"
-description = "Použite vlastný súbor certifikátu PKCS#12. Poskytuje plnú kontrolu nad vlastnosťami certifikátu."
-title = "Nahrať vlastný P12"
-
 [certSign]
 awaitingSignatures = "Čaká sa na podpisy"
 chooseCertificate = "Vybrať súbor certifikátu"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Zdroj certifikátu"
 upload = "Nahrať"
 
-[certSign.tooltip.header]
-title = "O správe podpisov"
-
-[certSign.tooltip.overview]
-bullet1 = "Skontrolujte existujúce podpisy a ich platnosť"
-bullet2 = "Zobrazte podrobné informácie o podpisujúcich a certifikátoch"
-bullet3 = "Pridajte nové digitálne podpisy na zabezpečenie dokumentov"
-bullet4 = "Podpora viacerých súborov s jednoduchou navigáciou"
-text = "Tento nástroj vám umožňuje zistiť, či sú vaše PDF digitálne podpísané, a pridávať nové digitálne podpisy. Digitálne podpisy dokazujú, kto dokument vytvoril alebo schválil, a ukazujú, či bol po podpise zmenený."
-title = "Čo tento nástroj dokáže?"
-
-[certSign.tooltip.signing]
-bullet1 = "Podporuje formáty PEM, PKCS12, JKS a serverový certifikát"
-bullet2 = "Možnosť zobraziť alebo skryť podpis v PDF"
-bullet3 = "Pridajte dôvod, miesto a meno podpisujúceho"
-bullet4 = "Zvoľte, na ktorej strane umiestniť viditeľné podpisy"
-bullet5 = "Použite serverový certifikát pre jednoduchú možnosť 'Sign with Stirling-PDF'"
-text = "Na podpis PDF potrebujete digitálny certifikát (napr. PEM, PKCS12 alebo JKS). Môžete zvoliť, či bude podpis v dokumente viditeľný, alebo ho ponechať neviditeľný len pre bezpečnosť."
-title = "Pridávanie podpisov"
-
-[certSign.tooltip.validation]
-bullet1 = "Zobrazuje, či sú podpisy platné alebo neplatné"
-bullet2 = "Zobrazuje informácie o podpisujúcom a dátum podpisu"
-bullet3 = "Kontroluje, či bol dokument po podpise upravený"
-bullet4 = "Môže použiť vlastné certifikáty na overenie"
-text = "Pri kontrole podpisov vám nástroj oznámi, či sú platné, kto dokument podpísal, kedy bol podpísaný a či bol dokument po podpise zmenený."
-title = "Kontrola podpisov"
-
 [changeCreds]
 changeUsername = "Aktualizujte svoje používateľské meno. Po aktualizácii budete odhlásení."
 credsUpdated = "Účet aktualizovaný"
@@ -2824,6 +3020,7 @@ next = "Ďalej"
 preview = "Náhľad"
 previous = "Predchádzajúce"
 refresh = "Obnoviť"
+remaining = "Zostáva"
 retry = "Skúsiť znova"
 save = "Uložiť"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Pokročilé monitorovanie"
-allInOneWorkspace = "Všetko v jednom: pracovné prostredie pre PDF (prehliadač, nástroje a agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Vyhradená podpora a SLA"
-fasterThroughput = "10× rýchlejšia priepustnosť"
-fullyPrivateFiles = "Plne súkromné súbory"
-largeFileProcessing = "Spracovanie veľkých súborov"
-orgWideAccess = "Celopodnikové riadenie prístupu"
-premiumAiModels = "Prémiové modely AI"
-prioritySupport = "Prioritná podpora"
-privateDocCloud = "Súkromný cloud dokumentov"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Zabezpečený prístup k API"
-standardThroughput = "Štandardná priepustnosť"
-unlimitedApiAccess = "Neobmedzený prístup k API"
-unlimitedSeats = "Neobmedzený počet používateľov"
-
 [crop]
 autoCrop = "Automaticky orezať biele okraje"
 noFileSelected = "Vyberte súbor PDF a začnite orezávať"
@@ -3346,6 +3525,7 @@ message = "Nepodarilo sa nastaviť predvolenú aplikáciu PDF"
 title = "Chyba"
 
 [defaultApp.prompt]
+dontRemind = "Už mi to nepripomínať"
 message = "Nastavte Stirling PDF ako predvolenú aplikáciu na otváranie PDF súborov."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Prispôsobiť skupiny"
 dropHint = "Ak chcete začať, otvorte súbory"
 dropToAdd = "Drop files to add"
 expand = "Rozbaliť bočný panel"
-files = "Súbory"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nie je nakonfigurovaný"
 leaveMyFiles = "Opustiť Moje súbory"
+library = "Knižnica PDF"
 myFiles = "Moje súbory"
 noFiles = "Zatiaľ žiadne súbory"
 openFileManager = "Otvoriť správcu súborov"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Pridať"
-addLabel = "Pridať štítok…"
-categoryIconAria = "Vybrať ikonu pre {{name}}"
-createCategory = "Vytvoriť kategóriu"
-delete = "Odstrániť kategóriu"
 done = "Hotovo"
-hide = "Skryť kategóriu"
-newCategory = "Nový názov kategórie…"
-removeLabel = "Odstrániť {{name}}"
-rename = "Premenovať"
 reset = "Obnoviť predvolené nastavenia"
-search = "Hľadať štítky…"
-show = "Zobraziť kategóriu"
 subtitle = "Zoskupte svoje súbory do nadradených kategórií. Pridajte existujúce alebo nové štítky do kategórie, premenujte ju alebo si vytvorte vlastnú. Súbory, ktoré nie sú v žiadnej z vašich kategórií, sa zobrazia v časti „Ostatné“."
 title = "Kategórie bočného panela"
 
@@ -3808,6 +3977,7 @@ refresh = "Obnoviť zo servera"
 remove = "Odstrániť"
 removeVersion = "Odstrániť túto verziu"
 rename = "Premenovať"
+renamed = "Premenované"
 renameFolder = "Premenovať priečinok"
 resizeFolderTree = "Zmeniť veľkosť stromu priečinkov (šípkami, Shift pre väčšie kroky; dvojklik pre automatické prispôsobenie)"
 save = "Uložiť"
@@ -3910,9 +4080,7 @@ count = "Súbory"
 folder = "Priečinok"
 labels = "Štítky"
 modified = "Zmenené"
-name = "Názov"
 size = "Veľkosť"
-toolHistoryAtVersion = "Kumulatívny reťazec nástrojov"
 totalSize = "Celková veľkosť"
 type = "Typ"
 versionHistory = "Vývoj verzií"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Všetko uložené"
+extractCsvError = "Nepodarilo sa extrahovať CSV"
+extractXlsxError = "Nepodarilo sa extrahovať XLSX"
 flattenAfterFilling = "Spľoštiť po vyplnení"
+requiredAbbreviation = "pov"
+requiredFieldsError = "Vyplňte všetky povinné polia"
 rescanFields = "Znovu naskenovať polia"
 rescanFormFields = "Znovu naskenovať polia formulára"
 save = "Uložiť"
+saveShortcut = "Ctrl+S na uloženie"
+unsavedChanges = "Neuložené zmeny"
 
 [formFill.sidebar]
 close = "Zavrieť bočný panel"
@@ -4309,6 +4484,11 @@ desc = "Automaticky premenuje PDF súbor podľa zistenej hlavičky"
 tags = "automaticky zistiť,na základe hlavičky,organizovať,premenovať"
 title = "Auto premenovať PDF"
 
+[home.autoRotate]
+desc = "Zistite orientáciu každej strany a automaticky ju otočte správne."
+tags = "automatické otočenie,opraviť orientáciu,hore nohami,nabok,vyrovnať,orientovať,zistiť orientáciu,opraviť otočenie,automatická orientácia,naskenované,OSD"
+title = "Automatické otočenie"
+
 [home.autoSizeSplitPDF]
 tags = "auto,rozdeliť,veľkosť"
 title = "Auto rozdeliť veľkosť/počet"
@@ -4608,13 +4788,13 @@ hint = "Nahrajte PNG, JPG, SVG alebo iný obrázkový súbor, ktorý umiestnite
 label = "Nahrať obrázok"
 placeholder = "Vybrať súbor s obrázkom"
 
-[imageToPdf]
-tags = "konverzia,img,jpg,obrázok,fotografia"
-
 [imageToPDF]
 header = "Obrázok na PDF"
 title = "Obrázok na PDF"
 
+[imageToPdf]
+tags = "konverzia,img,jpg,obrázok,fotografia"
+
 [infoBanner]
 dismiss = "Zavrieť"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Boli ste pozvaní!"
 
 [landing]
 addFiles = "Pridať súbory"
-heroSubtitle = "Pretiahnite alebo pridajte existujúci súbor PDF a začnite."
 mobileUpload = "Nahratie z mobilu"
 openFromComputer = "Otvoriť z počítača"
 uploadFromComputer = "Nahrať z počítača"
-workbenchEmptyStateHero = "Presuňte PDF kamkoľvek"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Prihlásenie"
 magicLinkSent = "Magický odkaz bol odoslaný na {{email}}! Skontrolujte si e-mail a kliknite na odkaz na prihlásenie."
 mfaCode = "Overovací kód"
 mfaRequired = "Vyžaduje sa dvojfaktorový kód"
+noAccount = "Nemáte účet?"
 or = "Alebo"
 password = "Heslo"
 passwordChangedSuccess = "Heslo bolo úspešne zmenené! Prihláste sa novým heslom."
@@ -4715,26 +4894,10 @@ signInWith = "Prihlásiť sa pomocou"
 title = "Prihlásenie"
 unexpectedError = "Neočakávaná chyba: {{message}}"
 updatePassword = "Aktualizovať heslo"
-useEmailInstead = "Prihlásiť sa pomocou e-mailu"
 useMagicLink = "Namiesto toho použiť magický odkaz"
 username = "Používateľské meno"
 youAreLoggedIn = "Ste prihlásení!"
 
-[login.slides.edit]
-alt = "Úprava PDF"
-subtitle = "S viac než tuctom nástrojov na začierňovanie, podpisovanie, čítanie a prácu s PDF určite nájdete, čo hľadáte."
-title = "Upravujte PDF na zobrazenie/ochranu požadovaných informácií"
-
-[login.slides.overview]
-alt = "Prehľad Stirling PDF"
-subtitle = "Cloudová sada s dôrazom na súkromie pre PDF: konvertovanie, podpisovanie, začierňovanie a správa dokumentov, a 50+ ďalších výkonných nástrojov."
-title = "Všetko pre vaše PDF na jednom mieste."
-
-[login.slides.secure]
-alt = "Zabezpečenie PDF"
-subtitle = "Jednoducho pridávajte heslá, začierňujte obsah a spravujte certifikáty."
-title = "Chráňte citlivé informácie v PDF"
-
 [margin]
 large = "Veľké"
 medium = "Stredné"
@@ -4976,6 +5139,7 @@ pinButton = "Môžete použiť tlačidlo <strong>Pripnúť</strong>, ak chcete,
 results = "Po dokončení behu nástroja krok <strong>Kontrola</strong> zobrazí v tomto paneli náhľad výsledkov a umožní vrátiť operáciu alebo stiahnuť súbor. "
 runButton = "Keď je nástroj nakonfigurovaný, toto tlačidlo umožní spustiť ho na všetkých vybraných PDF."
 selectCropTool = "Vyberme nástroj <strong>Orez</strong>, aby sme ukázali, ako používať jeden z nástrojov."
+stepOf = "Krok {{current}} z {{total}}"
 toolInterface = "Toto je rozhranie nástroja <strong>Orez</strong>. Ako vidíte, zatiaľ tu toho veľa nie je, pretože sme ešte nepridali žiadne súbory PDF, s ktorými by sme pracovali."
 workbench = "Toto je <strong>Pracovná plocha</strong> - hlavná oblasť, kde si prezeráte a upravujete svoje PDF."
 wrapUp = "Všetko pripravené! Dozvedeli ste sa o hlavných častiach aplikácie a ich použití. Kedykoľvek chcete, kliknite na tlačidlo <strong>Pomoc</strong> a prehliadku si zobrazte znova."
@@ -4988,6 +5152,26 @@ showMeAround = "Ukážte mi to"
 skipForNow = "Preskočiť zatiaľ"
 skipTheTour = "Preskočiť prehliadku"
 
+[onboarding.checklist]
+dismiss = "Zavrieť"
+title = "Nastaviť Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Spustite Stirling natívne na svojom počítači"
+title = "Stiahnuť Stirling pre Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Spolupracujte so svojím tímom"
+title = "Pozvať členov tímu"
+
+[onboarding.checklist.shareAnalytics]
+description = "Pomôžte zlepšiť Stirling"
+title = "Zdieľať anonymné údaje o používaní"
+
+[onboarding.checklist.takeTour]
+description = "Pozrite si v krátkej prehliadke, ako Stirling funguje"
+title = "Absolvovať prehliadku"
+
 [onboarding.desktopInstall]
 body = "Stirling najlepšie funguje ako desktopová aplikácia. Môžete ju používať offline, pristupovať k dokumentom rýchlejšie a upravovať lokálne na počítači."
 selectOs = "Vyberte operačný systém"
@@ -4996,7 +5180,21 @@ titleWithOs = "Stiahnuť pre {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Overovací kód"
+description = "Zabezpečte svoj účet prepojením s aplikáciou autentifikátora. Naskenujte QR kód alebo zadajte nastavovací kľúč a potom potvrďte 6-miestny kód na dokončenie."
+enable = "Povoliť MFA"
+enableError = "Nepodarilo sa povoliť dvojfaktorové overenie. Skontrolujte kód a skúste to znova."
+enterCode = "Zadajte 6-miestny kód zo svojej aplikácie."
+enterCodeError = "Zadajte overovací kód, aby ste mohli pokračovať."
+logout = "Odhlásiť sa"
+openAuthenticator = "Otvorte Google Authenticator, Authy alebo 1Password."
 qrCodeLoading = "Generuje sa váš QR kód…"
+regenerateQrCode = "Znovu vygenerovať QR kód"
+scanQrCode = "Naskenujte QR kód alebo zadajte nastavovací kľúč nižšie."
+setupError = "Nepodarilo sa spustiť nastavenie dvojfaktorového overenia. Skúste to znova."
+setupKey = "Nastavovací kľúč (ručné zadanie)"
+stepByStep = "Krok za krokom"
+success = "MFA bolo povolené. Teraz môžete pokračovať."
+title = "Nastavenie viacfaktorového overenia"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Keď zapnete režim prihlásenia, môžete spravovať používateľov, konfigurovať nastavenia a monitorovať stav servera. Prvých <strong>{{freeTierLimit}}</strong> ľudí na vašom serveri môže používať Stirling bezplatne."
@@ -5005,6 +5203,11 @@ adminTitle = "Prehľad pre admina"
 userBody = "Pozvite kolegov, priraďujte roly a udržujte dokumenty organizované v jednom bezpečnom pracovnom priestore. Režim prihlásenia zapnite, keď ste pripravení rásť nad sólo použitie."
 userTitle = "Prehľad plánu"
 
+[onboarding.processorIntro]
+body = "Stirling teraz spúšťa <strong>Pravidlá</strong> — automatizované pravidlá, ktoré klasifikujú, zabezpečujú a spracúvajú každý dokument pri jeho príchode. Nastavte ich a sledujte behy v <strong>Procesore</strong>."
+cta = "Pozrieť si Procesor"
+title = "Pozrite si Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Predplatený rok"
+
+[payg.prepaid.banner]
+exhausted = "Vaša predplatená kapacita je vyčerpaná; účtovanie podľa spotreby bolo obnovené. Dobite kredit, aby ste si zachovali zľavu."
+expiring_one = "Váš predplatený rok končí o {{count}} deň. Nevyužitá kapacita vyprší — dobite kredit a začnite nový rok."
+expiring_other = "Váš predplatený rok končí o {{count}} dní. Nevyužitá kapacita vyprší — dobite kredit a začnite nový rok."
+low = "Zostáva vám {{pct}}% predplatenej kapacity. Kredit môžete kedykoľvek dobiť, aby spracovanie pokračovalo bez prerušenia."
+
+[payg.prepaid.card]
+subtitle = "Používa sa pred účtovaním podľa spotreby a mimo vášho limitu výdavkov."
+title = "Predplatená kapacita"
+
+[payg.prepaid.meter]
+capSuffix = "z {{total}} predplatených kreditov"
+expires = "Vyprší {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Vyčerpané"
+healthy = "Dostatok zostáva"
+low = "Dochádza"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Vložte licenčný kľúč z e‑mailu"
 success = "Licencia aktivovaná!"
 successMessage = "Vaša licencia bola úspešne aktivovaná. Teraz môžete toto okno zatvoriť."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "vynútené"
-enforcing = "Prebieha vynucovanie..."
-failed = "Vynucovanie zlyhalo"
 outputsUnavailable = "Výstupy zásad už nie sú dostupné na stiahnutie."
 partialOutputsUnavailable = "Niektoré výstupy zásad už nie sú dostupné na stiahnutie."
-retrying = "Zaneprázdnené, skúšam znova..."
 runNotFound = "Spustenie vynucovania sa už nedá nájsť."
-step = "krok {{current}}/{{total}}"
 timedOut = "Časový limit vynucovania vypršal skôr, než sa spustenie dokončilo."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Zavrieť"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Uplatňuje sa {{names}}"
 applyingProgress = "Uplatňuje sa {{names}} ({{done}} z {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} z {{total}} súborov nebolo možné spracovať a bol
 failureTitle = "Exportované bez úplného vynucovania"
 printPolicyAppliedBody = "Tento PDF súbor bol upravený, aby spĺňal zásadu. Skontrolujte zmeny a potom vytlačte znova."
 printPolicyAppliedTitle = "Zásada uplatnená pred tlačou"
-queued = "+{{count}} v poradí"
 successTitle = "{{names}} uplatnené"
 summaryMore = "{{first}}, {{second}} a ďalších {{more}}"
 summaryTwo = "{{first}} a {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Vynucovanie pred konverziou"
-default = "Vynucovanie"
-export = "Vynucovanie pred exportom"
-input = "Vynucovanie pri importe"
-print = "Vynucovanie pred tlačou"
-
-[policies.field]
-accessLog = "Protokol prístupu"
-archiveAfter = "Archivovať po"
-auditTrail = "Auditná stopa"
-belowThreshold = "Pod prahom"
-destination = "Cieľ"
-frameworks = "Rámce"
-immutableHold = "Nemenné pozdržanie"
-keepFor = "Uchovať na"
-minConfidence = "Min. spoľahlivosť"
-notify = "Upozorniť pri smerovaní"
-onViolation = "Pri nesúlade"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Pridať"
-addPlaceholder = "Pridať štítok…"
-customNote = "Prispôsobené pre váš tím."
-defaultNote = "Používa sa vstavané predvolené nastavenie zdieľané s vaším tímom."
-duplicate = "„{{name}}“ už existuje."
-edit = "Upraviť štítky"
-empty = "Zatiaľ žiadne štítky."
-export = "Exportovať JSON"
-iconAria = "Vybrať ikonu pre {{name}}"
-import = "Importovať JSON"
-importError = "Tento súbor sa nepodarilo importovať."
-managedNote = "Tímové štítky spravuje vedúci vášho tímu."
-modalSubtitle = "Zdieľané s celým vaším tímom. Klasifikátor vyberie štítky, ktoré sa hodia ku každému dokumentu."
-modalTitle = "Klasifikačné štítky"
-pickIcon = "Použiť ikonu {{label}}"
-removeAria = "Odstrániť {{name}}"
-resetToDefault = "Obnoviť predvolené"
-saveForTeam = "Uložiť pre tím"
-saving = "Ukladá sa…"
-sectionLabel = "Klasifikačné štítky"
-startFromScratch = "Začať od začiatku"
-teamCount = "tímové štítky"
-tooLong = "Štítky môžu mať najviac {{max}} znakov."
-ungrouped = "Nezoskupené"
-view = "Zobraziť štítky"
+categoryCount = "kategórií"
+hideCategory = "Skryť kategóriu"
+labelCount = "štítkov"
+sharedNote = "Tieto štítky sú vstavané a zdieľané v celom vašom tíme."
+showCategory = "Zobraziť kategóriu"
 
 [policies.pii]
 account = "Čísla účtov (označené)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "US smerovacie čísla (ABA)"
 ssn = "Čísla sociálneho zabezpečenia"
 
-[policies.settings]
-noneExport = "Pri exporte sa momentálne nespúšťajú žiadne zásady."
-noneUpload = "Pri nahrávaní sa momentálne nespúšťajú žiadne zásady."
-onExport = "Pri exporte"
-onUpload = "Pri nahrávaní"
-reorderHandle = "Potiahnutím zmeniť poradie"
-runOrderDesc = "Keď sa pri rovnakom spúšťači spustí viac než jedna zásada, spustia sa v tomto poradí — každá na výstupe predchádzajúcej zásady. Potiahnutím zmeníte poradie."
-title = "Nastavenia zásad"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Možnosti zásad"
-policySettings = "Nastavenia zásad"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Znova skúsiť neúspešné zásady ({{count}})"
-rowProgress = "Spracovaných {{completed}} z {{total}} súborov"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Čo je zásada?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automaticky nájde a zatemní citlivé údaje — napríklad čísla sociálneho zabezpečenia a čísla kariet — aby nebolo možné ich v dokumente prečítať."
-sanitize = "Odstráni skrytý JavaScript zo súboru, aby sa pri otvorení nič nespúšťalo automaticky."
-watermark = "Vloží viditeľnú značku (napr. „Dôverné“) na každú stranu."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Zavrieť"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} sa vynucuje..."
 badgeRan = "Zásada {{name}} sa spustila na tomto súbore"
+badgeRunning = "{{name}} beží..."
 blockingAction = "{{action}} zablokované počas vynucovania zásady, čakajte prosím..."
 dismiss = "Zavrieť prekrytie"
 enforcingTitle = "Vynucuje sa zásada..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Zobraziť súbor (zásada sa stále vynucuje)"
 [policyOption]
 autoRedactPhi = "Automaticky začierniť PHI"
 blockExport = "Blokovať export"
+ccpa = "CCPA"
 contracts = "Zmluvy"
 documents = "Dokumenty"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Plán Editor"
 subscribed = "Plán Processor"
 unlinked = "Neprepojené"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Inicializovať z dokumentu"
-sectionsAriaLabel = "Sekcie tvorcu agentov"
-selectorAriaLabel = "Agenti"
-subtitle = "Navrhujte, testujte a nasadzujte AI agentov, ktorí klasifikujú, extrahujú z vašich dokumentov a smerujú ich. Definujte scenáre, obmedzte prístup k nástrojom, spustite golden set a publikujte verziu."
-title = "Tvorca agentov"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Zrušiť"
-dropzoneText = "Vyberte vzorový dokument (PDF alebo obrázok)"
-lead = "Presuňte vzorový dokument a navrhneme scenáre a schému extrakcie, ktoré môžete doladiť. Nič sa nepublikuje, kým to neskontrolujete."
-submit = "Inicializovať agenta"
-subtitle = "Vytvoriť základ nového agenta z jedného reprezentatívneho súboru"
-title = "Inicializovať z dokumentu"
-
-[portal.agentBuilder.empty]
-description = "Inicializujte agenta zo vzorového dokumentu, aby sa vytvoril základ scenárov a schémy extrakcie, potom ho dolaďte a publikujte."
-title = "Zatiaľ žiadni agenti"
-
-[portal.agentBuilder.evals]
-casesPassing = "Úspešné prípady"
-columnCase = "Eval prípad"
-columnLatency = "Latencia"
-columnResult = "Výsledok"
-fail = "neúspech"
-goldenSetPassRate = "Miera úspešnosti golden-set"
-latencyMs = "{{ms}} ms"
-notRun = "nespustené"
-pass = "úspech"
-passRate = "Miera úspešnosti"
-runEvals = "Spustiť evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals premieňajú vaše scenáre na opakovateľný golden set. Prejdite na vyšší plán, aby ste mohli sledovať mieru úspešnosti v čase a podmieniť ňou publikovanie."
-title = "Zatiaľ žiadny golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "naprieč golden setmi"
-activeAgents = "Aktívni agenti"
-avgPassRate = "Priemerná úspešnosť eval"
-fleetWide = "v celej flotile"
-latestPublished = "Naposledy publikované"
-scenarios = "Scenáre"
-testCases = "testovacie prípady"
-totalDescription_one = "{{count}} celkom"
-totalDescription_other = "{{count}} celkom"
-
-[portal.agentBuilder.scenarios]
-add = "Pridať"
-addScenario = "Pridať scenár"
-enable = "Povoliť"
-expectationLabel = "Očakávané správanie"
-expectationPlaceholder = "Čo má agent urobiť"
-inEval = "v eval"
-mute = "Stlmiť"
-muted = "stlmené"
-nameLabel = "Názov"
-namePlaceholder = "napr. Eskalácia súladu"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenáre"
-tools = "Nástroje"
-versions = "Verzie"
-
-[portal.agentBuilder.tools]
-broadAccess = "Široký prístup"
-deniedHint = "Vybrané nástroje sú blokované. Všetko ostatné zostáva vyvolateľné."
-deniedTools = "Zakázané nástroje"
-governanceGate = "Správa nástrojov je dostupná v pláne Enterprise."
-restricted = "Obmedzené"
-restrictedAccess = "Obmedzený prístup k nástrojom"
-restrictedDescription = "Povoliť každý nástroj okrem tých, ktoré nižšie zakážete."
-
-[portal.agentBuilder.versions]
-current = "aktuálna"
-historyGate = "Úplná história verzií a rollback sú dostupné v pláne Enterprise."
-publish = "Publikovať"
-rollBack = "Vrátiť späť"
-
 [portal.assistant]
 close = "Zavrieť asistenta"
 error = "Asistenta sa nepodarilo kontaktovať."
@@ -6365,9 +6346,21 @@ typing = "Píše"
 loading = "Načítava sa"
 redirectingToEditor = "Presmerováva sa do editora..."
 
+[portal.billing.activation]
+maybeLater = "Možno neskôr"
+title = "Zapnúť Procesor"
+
+[portal.billing.activation.payg]
+sub = "Nastavte mesačný limit. Plaťte za to, čo spustíte."
+title = "Plaťte podľa spotreby"
+
+[portal.billing.activation.prepay]
+badge = "2 mesiace zadarmo"
+sub = "Jedna faktúra, karta alebo bankový prevod."
+title = "Predplatiť rok"
+
 [portal.billing.checkout]
 noClientSecret = "Edge funkcia nevrátila client_secret."
-subtitle = "Pridajte kartu, aby ste mohli pokračovať po vyčerpaní bezplatného grantu plánu Editor. Stripe sa postará o zvyšok."
 title = "Zapnúť plán Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Vaša platba bola úspešná, ale aktivácia trvá o niečo dlhšie než
 close = "Zavrieť"
 title = "Už takmer hotovo"
 
+[portal.billing.checkout.cap]
+amountAria = "Mesačný limit výdavkov"
+back = "Späť"
+continue = "Pokračovať k platbe"
+error = "Nepodarilo sa nastaviť limit výdavkov"
+finePrint = "Faktúry sa vystavujú mesačne. Zrušiť môžete kedykoľvek."
+noLimit = "Bez limitu"
+note = "Nikdy vám nebude účtované viac než váš limit. Spracovanie sa iba pozastaví."
+perMonth = "/ mes."
+title = "Nastavte svoj limit výdavkov"
+
+[portal.billing.checkout.card]
+fields = "Číslo karty · MM / RR · CVC · ZIP"
+label = "Údaje o karte"
+note = "Údaje o karte zhromažďuje Stripe. Stirling nikdy neukladá PAN ani CVC."
+
 [portal.billing.checkout.error]
 title = "Checkout sa nepodarilo spustiť"
 
@@ -6383,10 +6392,9 @@ body = "Vaša platba prešla. Zapíname merané spracovanie naprieč vašimi pre
 hint = "Nechajte toto okno otvorené."
 title = "Aktivuje sa váš plán Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "v env portálu na povolenie checkoutu v aplikácii."
-bodyBefore = "Nastavte"
-title = "Stripe nie je nakonfigurovaný"
+[portal.billing.checkout.pay]
+limit = "Mesačný limit výdavkov {{amount}}/mes. Spracovanie sa pri limite pozastaví."
+limitNoCap = "Bez limitu výdavkov. Spracovanie sa nepozastaví. Faktúry sa vystavujú mesačne."
 
 [portal.billing.enterpriseUpsell]
 cta = "Vytvoriť vašu ponuku Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Aktuálny plán"
 freeForever = "Navždy zadarmo"
 noTeamResolved = "Vo vašej peňaženke zatiaľ nie je vyriešený žiadny tím — obnovte stránku a skúste to znova."
 ownerOnly = "Plán Processor môže zapnúť iba vlastník tímu."
+payInvoice = "Zaplatiť faktúru na dokončenie"
 planName = "Editor"
 ssoIncluded = "SSO zahrnuté"
 switchOnProcessor = "Zapnúť Processor →"
 unlimitedUsers = "Neobmedzení používatelia"
+viewQuote = "Zobraziť cenovú ponuku"
 
 [portal.billing.invoices]
 columnAmount = "Suma"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Priame API požiadavky"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizácie a pipeline"
 segmentAutomationLabel = "Automatizácia"
+sizeMultiplier = "{{formatted}} PDF použilo násobiteľ veľkosti"
+summary = "{{unique}} jedinečných · {{units}} jednotiek merania · {{avg}} priemer na PDF"
+summaryNoRate = "{{unique}} jedinečných · {{units}} jednotiek merania"
 unit = "merané PDF"
+unitsPending_one = "{{units}} jednotka merania čaká na synchronizáciu z prepojených inštancií"
+unitsPending_other = "{{units}} jednotiek merania čaká na synchronizáciu z prepojených inštancií"
+
+[portal.billing.prepaid]
+capSuffix = "z {{total}} predplatených kreditov"
+expires = "Vyprší {{date}}"
+eyebrow = "Predplatená kapacita"
+note = "Používa sa pred účtovaním podľa spotreby a mimo vášho limitu výdavkov."
+topUp = "Dobiť"
+
+[portal.billing.prepaid.buy]
+back = "Späť"
+calcTitle = "Vypočítajte svoju ročnú platbu"
+cancel = "Zrušiť"
+cancelPurchase = "Zrušiť nákup"
+close = "Zavrieť"
+continueToPayment = "Pokračovať k platbe"
+finalise = "Dokončiť"
+invoiceErrorTitle = "Nepodarilo sa vygenerovať faktúru"
+loadingTitle = "Načítava sa vaša ponuka"
+payTitle = "Zaplaťte za svoj rok"
+step = "Krok {{current}} z {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Zmeniť"
+deployRow = "Nasadenie"
+done = "Hotovo"
+enterpriseHint = "Toto je podniková úroveň. Pri tomto objeme sú enterprise sadzby výhodnejšie než akákoľvek samoobslužná zľava. Uzamknutie sadzby, podmienky a cenová ponuka za pár minút."
+governanceRow = "Riadenie"
+governanceValue = "{{label}} · {{count}} pravidiel"
+handlesLabel = "Váš Procesor"
+handlesValue = "spracuje {{volume}} kreditov / mes."
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} pravidiel"
+poolCaption = "Jeden fond {{credits}} kreditov na rok. Náročné mesiace si požičiavajú z ľahších."
+priceLabel = "Váš rok · 12 mesiacov za cenu 10"
+rateUnknown = "Presnú cenu zobrazíme pri pokladni."
+savings = "Ušetríte {{amount}} · 2 mesiace zadarmo."
+sizingRow = "Veľkosť"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Celkový počet používateľov"
+
+[portal.billing.prepaid.consent]
+label = "Rozumiem, že keď sa moja predplatená kapacita vyčerpá alebo vyprší po 12 mesiacoch, spracovanie bude automaticky pokračovať za štandardnú meranú sadzbu pay-as-you-go (až do môjho limitu výdavkov), pokiaľ ho nezruším, a že ho môžem kedykoľvek zrušiť z billing portálu."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Spravuje Stirling. Spustené za pár minút."
+cloudValue = "Stirling Cloud · Spravované"
+selfhost = "Self-hosted"
+selfhostDesc = "Beží na súkromnej infraštruktúre. Rovnaká sadzba."
+selfhostValue = "Self-hosted · Súkromná infraštruktúra"
+
+[portal.billing.prepaid.offer]
+cta = "Skontrolovať ponuku"
+subtitle = "Predplaťte si rok spracovania PDF a získajte dva mesiace zadarmo, použité pred účtovaním podľa spotreby, mimo vášho limitu výdavkov."
+title = "Získajte 12 mesiacov za cenu 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Meno majiteľa účtu"
+accountNamePlaceholder = "napr. Jana Nováková"
+companyName = "Názov spoločnosti (voliteľné)"
+companyNamePlaceholder = "napr. Acme Inc."
+downloadInvoice = "Stiahnuť faktúru"
+payOnline = "Zaplatiť online"
+poNumber = "Číslo objednávky (voliteľné)"
+poNumberPlaceholder = "napr. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Pokročilé"
+advancedDesc = "Pipelines zabezpečujú väčšinu vášho spracovania."
+none = "Žiadne"
+noneDesc = "Zatiaľ nespúšťate pipelines. Zapnúť ich môžete kedykoľvek."
+standard = "Štandardné"
+standardDesc = "Niekoľko pipelines znovu spracúva prichádzajúce PDF."
+
+[portal.billing.prepaid.posture]
+essentials = "Základy"
+essentialsDesc = "Klasifikácia, predvolené nastavenie, plus zdieľanie"
+governed = "Riadené"
+governedDesc = "Pridáva zabezpečenie a smerovanie"
+regulated = "Regulované"
+regulatedDesc = "Každá kategória vrátane dodržiavania predpisov, uchovávania a prijímania"
+
+[portal.billing.prepaid.review]
+download = "Stiahnuť ponuku (PDF)"
+downloading = "Pripravuje sa…"
+share = "zdieľať na schválenie"
+
+[portal.billing.prepaid.size]
+compact = "Kompaktné"
+compactDesc = "Súbory pod 25 MB, bez poplatkov za dáta"
+heavy = "Ťažké"
+heavyDesc = "Skenované alebo s množstvom obrázkov, bežne 50 MB+"
+standard = "Štandardné"
+standardDesc = "Väčšinou malé, niektoré skeny nad 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Vyčerpané"
+healthy = "Dostatok zostáva"
+low = "Dochádza"
 
 [portal.billing.spendLimit]
 adjustLimit = "Upraviť limit"
@@ -6494,6 +6608,8 @@ label = "Predpokladá sa prekročenie."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Výdavky tento mesiac"
+freeRemaining_one = "Zostáva {{formatted}} bezplatný PDF"
+freeRemaining_other = "Zostáva {{formatted}} bezplatných PDF"
 processed_one = "Spracované {{formattedCount}} PDF."
 processed_other = "Spracovaných {{formattedCount}} PDF."
 processedWithRate_one = "Spracované {{formattedCount}} PDF, po {{rate}} za kus."
@@ -6534,6 +6650,350 @@ signature = "podpis"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nové pripojenie"
+createTitleFor = "Pripojiť {{name}}"
+delete = "Odstrániť"
+edit = "Upraviť"
+editTitle = "Upraviť pripojenie"
+unsupportedType = "Tento typ pripojenia tu nemožno upraviť."
+
+[portal.connections.categories.advanced]
+description = "Pre službu, ktorú zatiaľ nepodporujeme."
+label = "Pokročilé"
+
+[portal.connections.categories.audit]
+description = "Zaznamenajte, čo sa stalo s dokumentom, tam, kde už vaši audítori hľadajú."
+label = "Audit a záznam dodržiavania predpisov"
+
+[portal.connections.categories.notify]
+description = "Informujte iný systém, že sa niečo stalo."
+label = "Upozornenia a workflow"
+
+[portal.connections.categories.security]
+description = "Naskenujte alebo označte dokument predtým, než sa posunie ďalej."
+label = "Zabezpečenie a klasifikácia"
+
+[portal.connections.categories.signing]
+description = "Odošlite dokument na podpis alebo notárske overenie."
+label = "E-signature a notárske overenie"
+
+[portal.connections.categories.storage]
+description = "Kam spracované dokumenty skončia – bucket, disk, ticket alebo stránka."
+label = "Súbor a príloha"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling to ukladá šifrovane a už to nikdy nezobrazí."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Kroky používajúce toto pripojenie môžu volať iba cesty pod touto URL, nikdy iného hostiteľa."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Heslo"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Používateľské meno"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Vložte URL, ktorú vám služba poskytla. Volať možno iba cesty pod ňou."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Názov pripojenia"
+namePlaceholder = "napr. Produkcia"
+
+[portal.connections.picker]
+cancel = "Zrušiť"
+createNew = "Nové pripojenie..."
+placeholder = "Vyberte pripojenie"
+save = "Uložiť pripojenie"
+
+[portal.connections.picker2]
+back = "Zmeniť integráciu"
+heading = "Čo chcete pripojiť?"
+noResultsBody = "Zatiaľ to nepodporujeme – povedzte nám o tom a pozrieme sa na pridanie podpory."
+noResultsTitle = "Nič nezodpovedá \"{{query}}\""
+searchPlaceholder = "Hľadať integrácie – skúste \"sign\", \"ocr\" alebo názov produktu"
+
+[portal.connections.types.api]
+description = "Volajte ľubovoľné HTTP API z pravidla. Vyberiete URL, overenie a payload."
+label = "Vlastné API"
+
+[portal.connections.types.api.fields.authType]
+label = "Overenie"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Používateľské meno a heslo"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token vo vlastnej hlavičke"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Žiadne"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Prihlásiť sa pre token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Kroky používajúce toto pripojenie môžu volať iba cesty pod touto URL, nikdy iného hostiteľa."
+label = "Základná URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Názov hlavičky"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Cesta prihlásenia"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Heslo"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Ak API odpovie odkazom na stiahnutie, načítať sa môžu iba títo hostitelia. Oddeľte čiarkami. Nechajte prázdne, ak chcete povoliť iba vlastného hostiteľa základnej URL."
+label = "Povolení hostitelia výsledkov"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Odoslať token ako túto hlavičku"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Hlavička odpovede, v ktorej volanie prihlásenia vráti token, napr. X-Auth-Token."
+label = "Hlavička odpovede s tokenom"
+
+[portal.connections.types.api.fields.username]
+label = "Používateľské meno"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skenujte dokumenty na malvér na serveri, ktorý prevádzkujete – nič neopustí vašu sieť."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Skenovanie vírusov a obsahu dokumentov v pravidle."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokujte dokumenty obsahujúce makrá, spustiteľné súbory, skripty alebo vložené objekty – nielen známy malvér."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Priložte spracované dokumenty na stránku Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Odošlite dokumenty do ConsignO Cloud (Notarius) na elektronický podpis a notárske overenie."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Vaše prostredie ConsignO Cloud vrátane /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Heslo"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Potrebné iba vtedy, ak vaša organizácia používa tenantov."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Používateľské meno"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Odošlite správu do Discord, keď pravidlo spracuje dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexujte auditnú udalosť v Elasticsearch vždy, keď pravidlo spracuje dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Kontrolujte FTP alebo FTPS server na nové dokumenty."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Režim pripojenia"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktívny"
+passive = "Pasívny (odporúčané)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Obyčajné FTP odosiela prihlasovacie údaje a súbory nešifrovane; vyberte FTPS, ak ho server podporuje."
+label = "Šifrovanie"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Žiadne (obyčajné FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Odošlite správu do priestoru Google Chat, keď sa spustí pravidlo."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Priložte spracované dokumenty k Jira issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Odošlite dokument alebo upozornenie e-mailom, keď sa spustí pravidlo."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Uložte spracované dokumenty do Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Heslo aplikácie"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Detegujte osobné údaje v texte dokumentu pomocou servera Presidio, ktorý prevádzkujete."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Čítajte a aplikujte štítky citlivosti Microsoft Purview na PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Voliteľné. Potrebné iba na výber štítkov podľa názvu; označovanie funguje aj bez toho."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Odtlačí sa do každého štítka ako jeho SiteId, aby nástroje kompatibilné s Purview vedeli, ktorá organizácia ho použila."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket, z ktorého môžu zdroje čítať a do ktorého môžu výstupy pipeline zapisovať."
+label = "S3 úložisko"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Nechajte prázdne pre AWS. Nastavte pre MinIO alebo iné S3-kompatibilné úložisko."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Región"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Odošlite dokument alebo upozornenie e-mailom, keď sa spustí pravidlo."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Kontrolujte SFTP (SSH) server na nové dokumenty."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Voliteľné. Odtlačok SHA-256 hostiteľského kľúča servera (z `ssh-keyscan host | ssh-keygen -lf -`). Ak je nastavený, akceptuje sa iba server predkladajúci tento kľúč; ak je prázdny, kľúč videný pri prvom pripojení sa pripne a neskoršie zmeny sa odmietnu."
+label = "Odtlačok hostiteľského kľúča"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Passphrase kľúča"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Nechajte prázdne, ak sa namiesto hesla overujete súkromným kľúčom."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Voliteľné. Vložte súkromný kľúč OpenSSH na overenie kľúčom namiesto hesla."
+label = "Súkromný kľúč"
+
+[portal.connections.types.slack]
+description = "Odošlite správu do Slack, keď pravidlo spracuje dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Sledujte sieťové zdieľanie SMB / CIFS (Windows alebo Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Sieťové zdieľanie"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Voliteľné. Windows doména alebo pracovná skupina, ak ju váš server používa."
+label = "Doména"
+
+[portal.connections.types.smb.fields.share]
+label = "Zdieľanie"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Odošlite auditnú udalosť do Splunk vždy, keď pravidlo spracuje dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Odošlite auditnú udalosť do HTTP kolektora Sumo Logic."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Odošlite správu do kanála Teams, keď sa spustí pravidlo."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Odošlite každý dokument alebo iba podrobnosti na URL, ktorú si vyberiete."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Spustite Zap alebo Make scenár z pravidla."
+label = "Zapier a Make"
+
+[portal.docs]
+browse = "Prehliadať dokumentáciu"
+viewSource = "Zobraziť zdroj na GitHub"
+
 [portal.docs.authentication]
 codeCaption = "každá požiadavka"
 eyebrow = "ZAČÍNAME"
@@ -6619,11 +7079,19 @@ title = "Oficiálne SDKs"
 beta = "Beta"
 deprecated = "Zastarané"
 
+[portal.docs.search]
+empty = "Žiadna zodpovedajúca dokumentácia"
+placeholder = "Hľadať v dokumentácii"
+results = "{{count}} výsledkov"
+
 [portal.docs.skills]
 eyebrow = "ZRUČNOSTI"
 lead = "Zabalené pomenované schopnosti, ktoré váš agent vyvoláva ako jeden nástroj. Každá zručnosť je deterministický reťazec operácií s pripojenými evals."
 title = "Zručnosti agentov"
 
+[portal.docs.toc]
+title = "Na tejto stránke"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCIA"
@@ -6697,6 +7165,8 @@ type = "Typ"
 user = "Používateľ"
 
 [portal.documents.queue.empty]
+connectSource = "Pripojiť zdroj"
+createPipeline = "Vytvoriť pipeline"
 description = "Keď zdroje odošlú dokumenty do vašich pipeline, zobrazia sa tu na kontrolu."
 title = "Vo fronte nie sú žiadne dokumenty"
 
@@ -6806,13 +7276,71 @@ description = "V tomto zobrazení nastala neočakávaná chyba. Skúste to znova
 retry = "Skúsiť znova"
 title = "Na tejto stránke sa niečo pokazilo"
 
+[portal.home.download]
+back = "Späť"
+body = "Stiahnite si desktopovú aplikáciu alebo self-hostujte server."
+done = "Hotovo"
+guide = "Otvoriť príručku {{name}}"
+openInBrowser = "Namiesto toho otvoriť v prehliadači"
+sectionDesktop = "Desktopová aplikácia"
+sectionSelfHosted = "Self-hosted"
+title = "Nainštalovať Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Spustite oficiálny image na svojom serveri."
+note = "Otvára sa na :8080. Predvolené prihlásenie: admin / stirling."
+tagline = "Spustite server v kontajneri"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Nainštalujte oficiálny Helm chart."
+note = "Pridajte PVC pre /configs, aby sa nastavenia zachovali."
+tagline = "Nasaďte do klastra pomocou Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Natívne zostavenia pre vašu distribúciu."
+guideBtn = "Zobraziť možnosti inštalácie pre Linux"
+note = "Pre bežné distribúcie sú dostupné zostavenia AppImage, .deb a .rpm."
+tagline = "Natívna desktopová aplikácia pre vašu distribúciu"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Alebo cez Homebrew"
+detailBody = "Spustite inštalátor alebo použite Homebrew."
+downloadBtn = "Stiahnuť pre macOS"
+tagline = "Natívna aplikácia pre Apple silicon a Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Spustite .jar na fyzickom serveri."
+downloadBtn = "Stiahnuť .jar"
+note = "Vyžaduje Java 21+. Otvára sa na :8080; predvolené prihlásenie admin / stirling."
+runLabel = "Potom ho spustite"
+tagline = "Spustite .jar na fyzickom serveri"
+title = "Manuálne nastavenie servera"
+
+[portal.home.download.windows]
+altLabel = "Alebo cez winget"
+detailBody = "Spustite inštalátor alebo použite správcu balíkov."
+downloadBtn = "Stiahnuť inštalátor"
+tagline = "Natívna aplikácia pre Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktívnych"
-invite = "Pozvať členov tímu"
+activeOfDeployed = "{{active}} z {{total}} aktívnych tento mesiac"
 name = "Stirling PDF Editor"
 open = "Otvoriť v prehliadači"
 updated = "aktualizované {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Dokončiť nasadenie"
+options = "Zobraziť možnosti nasadenia"
+start = "Nasadiť Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Dobré popoludnie"
 evening = "Dobrý večer"
 morning = "Dobré ráno"
 
-[portal.home.onboarding]
-dismiss = "Zavrieť nastavenie"
-notStarted = "Nespustené"
-progress = "Dokončené {{done}} z {{total}}"
-title = "Dokončite nastavenie"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC pre celú organizáciu, dohodnuté objemové ceny a nasadenie v izolovanom prostredí."
-cta = "Spustiť skúšobnú verziu"
-ctaQuote = "Získať ponuku"
-lead = "Pre 250+ zamestnancov."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Nasaďte desktopovú aplikáciu, navždy zadarmo."
-title = "Stiahnuť PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktívnych · {{recommended}} odporúčaných"
-chip = "{{active}} aktívnych"
-title = "Zapnúť politiky"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} pripojených · každý PDF je riadený tam, kde sa objaví"
-chip = "{{connected}} pripojených"
-title = "Pripojte svoje zdroje"
-
-[portal.home.quickActions]
-subtitle = "Najdôležitejšie úlohy na dnes"
-title = "Rýchle akcie"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-krokový kompozér nad knižnicou typovaných operácií"
-title = "Vytvoriť pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenti, webhooky, sledované priečinky"
-title = "Pripojiť zdroj"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Kľúč s rozsahom, limitmi rýchlosti a IP allowlistom"
-title = "Vydať API kľúč"
-
 [portal.infrastructure]
 manageEditorDeployment = "Spravovať nasadenie Editoru"
 sectionsAriaLabel = "Sekcie infraštruktúry"
@@ -6878,13 +7363,9 @@ heading = "API kľúče"
 subheading = "Prihlasovacie údaje s rozsahom, limitmi rýchlosti pre každý kľúč, oprávneniami a IP allowlistami."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Povolené IP adresy"
-anyIp = "Ľubovoľná IP adresa (bez allowlistu)"
 created = "Vytvorené"
 lastUsed = "Naposledy použité"
-permissions = "Oprávnenia"
-rateLimit = "Limit rýchlosti"
-rateLimitValue = "{{value}} pož./min"
+revoke = "Odvolať kľúč"
 usageMonth = "Použitie tento mesiac"
 usageToday = "Použitie dnes"
 
@@ -6892,6 +7373,20 @@ usageToday = "Použitie dnes"
 description = "Vytvorte kľúč s rozsahom a začnite volať Stirling API."
 title = "Zatiaľ žiadne API kľúče"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nepodarilo sa načítať vaše API kľúče. Skúste to znova."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Odvolať „{{name}}“? Každá integrácia, ktorá tento kľúč stále používa, začne okamžite dostávať chyby 401. Túto akciu nie je možné vrátiť späť."
+cancel = "Zrušiť"
+confirm = "Odvolať kľúč"
+title = "Odvolať API kľúč"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestované"
+inScope = "V rozsahu"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrovať auditné udalosti podľa kategórie"
 heading = "Auditné záznamy"
@@ -6935,6 +7430,7 @@ all = "Všetko"
 auth = "Autentifikácia"
 config = "Konfigurácia"
 elevation = "Zvýšenie oprávnení"
+policy = "Politika"
 processing = "Spracovanie"
 security = "Bezpečnosť"
 
@@ -6944,19 +7440,35 @@ title = "Nemáte prístup"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfigurácia"
-elevation = "Zvýšenie oprávnení"
+policy = "Politika"
 processing = "Spracovanie"
 totalEvents = "Celkový počet udalostí · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentifikácia"
+config = "Konfigurácia"
+elevation = "Zvýšenie oprávnení"
+policy = "Politika"
+processing = "Spracovanie"
+security = "Zabezpečenie"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Chyba"
+info = "Info"
+success = "Úspech"
+warning = "Upozornenie"
+
+[portal.infrastructure.certLabel]
+certified = "Certifikované"
+inProgress = "Prebieha"
+notStarted = "Nezačaté"
+
 [portal.infrastructure.createKey]
 cancel = "Zrušiť"
 createKey = "Vytvoriť kľúč"
 done = "Hotovo"
-ipAllowlistHelper = "Rozsahy CIDR oddelené čiarkami. Nechajte prázdne, ak chcete povoliť ľubovoľnú IP adresu."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Názov kľúča"
 keyNamePlaceholder = "napr. Produkcia · ingest"
-permissionsLabel = "Oprávnenia"
 secretKeyCaption = "Tajný kľúč"
 secretWarning = "Uložte ho v správcovi tajomstiev. Stirling vždy ukladá iba hash — neskôr ho nebude možné obnoviť."
 subtitle = "Obmedzte rozsah kľúča na minimum, ktoré potrebuje. Kedykoľvek ho môžete rotovať alebo zrušiť."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Skopírujte tento tajný kľúč teraz — znova sa už nezob
 title = "Vytvoriť API kľúč"
 titleCreated = "Kľúč vytvorený"
 
+[portal.infrastructure.deployLabel]
+live = "Naživo"
+queued = "Vo fronte"
+rolledBack = "Vrátené späť"
+rolling = "Prebieha nasadzovanie"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Živý stav pre každý nasadený región Stirling — latencia, z
 description = "Nasadené regióny sa tu zobrazia po zriadení vášho pracovného priestoru."
 title = "Žiadne nasadené regióny"
 
+[portal.infrastructure.keyLabel]
+active = "Aktívny"
+revoked = "Odvolaný"
+
+[portal.infrastructure.modelLabel]
+active = "Aktívny"
+degraded = "Zhoršený"
+disabled = "Zakázaný"
+
 [portal.infrastructure.models]
 heading = "Modely"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Stav"
 type = "Typ"
 version = "Verzia"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/volanie"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktívne modely"
 avgLatency = "Priem. latencia"
@@ -7049,6 +7580,17 @@ modelForAria = "Model pre {{operation}}"
 operation = "Operácia"
 routedTo = "Smerované na"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasifikácia"
+extraction = "Extrakcia"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Zhoršené"
+down = "Nedostupné"
+healthy = "V poriadku"
+
 [portal.infrastructure.security.access.byok]
 description = "Dodajte kľúč z vlastného KMS. Stirling ním šifruje, ale stále môže čítať."
 label = "Prineste si vlastný kľúč (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modely"
 security = "Bezpečnosť"
 storage = "Úložisko"
 
+[portal.integrations]
+addAnother = "Pridať ďalšiu"
+availableHeading = "Dostupné"
+comingSoonHeading = "Čoskoro"
+connect = "Pripojiť"
+connectedHeading = "Pripojené"
+connectionCount_one = "{{count}} pripojenie"
+connectionCount_other = "{{count}} pripojení"
+customApi = "Vlastné API"
+searchPlaceholder = "Hľadať integrácie"
+subtitle = "Všetko, s čím Stirling dokáže komunikovať. Prihlasovacie údaje sa tu vytvoria raz a potom sa na ne odkazuje zo zdrojov, politík a pipeline."
+title = "Integrácie"
+typedName = "Názov {{tool}}"
+
+[portal.integrations.filters]
+all = "Všetko"
+audit = "Audit"
+connected = "Pripojené"
+notify = "Oznámenia"
+security = "Zabezpečenie"
+signing = "Podpisovanie"
+storage = "Úložisko"
+
+[portal.integrations.status]
+connected = "Pripojené"
+
+[portal.integrations.table]
+integration = "Integrácia"
+worksWith = "Funguje s"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline"
+policies = "Politiky"
+sources = "Zdroje"
+
+[portal.legal]
+draft = "{{label}} · návrh"
+loadError = "Tento dokument sa nepodarilo načítať. Skúste to znova."
+loading = "Načítava sa…"
+title = "Právny dokument"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Komponenty"
@@ -7182,6 +7765,7 @@ documents = "Dokumenty"
 editor = "Editor"
 home = "Domov"
 infrastructure = "Infraštruktúra"
+integrations = "Integrácie"
 pipelines = "Pipeline"
 policies = "Politiky"
 procurement = "Obstarávanie"
@@ -7190,25 +7774,9 @@ sources = "Zdroje"
 usage = "Používanie a fakturácia"
 users = "Používatelia"
 
-[portal.notifications]
-markAllRead = "Označiť všetko ako prečítané"
-title = "Oznámenia"
-viewAll = "Zobraziť všetko"
-
-[portal.notifications.ariaLabel]
-none = "Oznámenia, žiadne neprečítané"
-unread_one = "Oznámenia, {{count}} neprečítané"
-unread_other = "Oznámenia, {{count}} neprečítaných"
-
-[portal.notifications.count]
-allRead = "všetko prečítané"
-loading = "načítava sa"
-new_one = "{{count}} nové"
-new_other = "{{count}} nových"
-
-[portal.notifications.empty]
-description = "Žiadne nové oznámenia."
-title = "Všetko máte vybavené"
+[portal.nav.section]
+platform = "PDF platforma"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Každý automatizovaný dokumentový pipeline na backende: usporiadaný reťazec operácií nad množinou zdrojov, spustený triggerom. Kliknite na riadok pre jeho kroky a zdroje."
@@ -7220,15 +7788,28 @@ newPipeline = "Nový pipeline"
 [portal.pipelines.builder]
 addStep = "Pridať nástroj"
 back = "Späť na pipeline"
+cannotFollow = "Nie je možné prevziať {{produced}}"
+chooseAccount = "Vyberte účet"
+chooseDestination = "Vyberte cieľ"
+chooseOperation = "Vyberte, čo tento krok vykoná"
+chooseSource = "Vyberte zdroj"
 discard = "Zahodiť zmeny"
 enabled = "Povolené"
+inputs = "Vstup"
+inputSource = "Vstupný zdroj"
+inputTrigger = "Spúšťač"
 keepEditing = "Pokračovať v úpravách"
+needsConfiguring = "Vyžaduje nastavenie"
 needsUpload = "Vyžaduje nahraný súbor"
+noSources = "Zatiaľ nie sú pripojené žiadne zdroje. Vytvorte jeden, aby ste ho mohli použiť ako vstup."
 noToolMatches = "Vašemu vyhľadávaniu nezodpovedajú žiadne nástroje."
 pipelineSettings = "Nastavenia pipeline"
 searchTools = "Hľadať nástroje"
 selectToolBody = "Pridajte nástroj na vytvorenie pipeline."
 selectToolTitle = "Zatiaľ žiadne nástroje"
+sendToSystem = "Odoslať do iného systému"
+stepsIncompatible = "Tieto kroky nemožno spustiť na tom, čo vytvára ich predchádzajúci krok: {{tools}}."
+stepsNeedSetup = "Tieto kroky je pred uložením ešte potrebné nastaviť: {{tools}}."
 toolSettings = "Nastavenia nástroja"
 unknownStep = "Nerozpoznaná operácia, ponechaná bez zmeny."
 unsavedBody = "Máte neuložené zmeny. Uložte ich pred odchodom alebo ich zahodiť?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Neuložené zmeny"
 uploadUnsupported = "Nahrané súbory ešte nie sú v pipeline podporované, takže tieto kroky sa nedajú uložiť: {{tools}}."
 usesDefaults = "Spúšťa sa s predvolenými nastaveniami"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinuje každý súbor z predchádzajúceho kroku"
+fan-out = "Spustí sa raz pre každý súbor z predchádzajúceho kroku"
+format-mismatch = "Vyžaduje {{accepts}}, ale predchádzajúci krok vytvára {{produced}}"
+output-uncertain = "Nemusí sa spustiť: výstup predchádzajúceho kroku závisí od jeho nastavenia"
+source-mismatch = "Vyžaduje {{accepts}}, ale vstup tejto pipeline je {{produced}}"
+undeclared-operation = "Nie je možné skontrolovať, čo tento krok prijíma"
+
 [portal.pipelines.composer]
 addTool = "Pridať nástroj"
 cancel = "Zrušiť"
 chainEmpty = "Pridajte nástroj a začnite vytvárať pipeline."
 create = "Vytvoriť pipeline"
-directory = "Výstupný priečinok"
-directoryHelp = "Absolútna cesta na serveri. Musí byť v rámci nakonfigurovaných povolených priečinkov."
 editingUnsupported = "Zobrazenie týchto parametrov nástroja na úpravu zatiaľ nie je podporované."
 moveDown = "Presunúť nadol"
 moveUp = "Presunúť nahor"
 name = "Názov"
 namePlaceholder = "napr. Prechod redakciou"
-noSources = "Zatiaľ nie sú pripojené žiadne zdroje. Pipeline sa stále môže spustiť na súboroch dodaných priamo doň."
 noToolSettings = "Tento nástroj nemá žiadne konfigurovateľné nastavenia."
 operations_one = "Operácia ({{count}})"
 operations_other = "Operácie ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Odstrániť"
 title = "Odstrániť pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Vymazať históriu"
 delete = "Odstrániť pipeline"
 run = "Spustiť teraz"
 
 [portal.pipelines.empty]
 action = "Vytvoriť pipeline"
+connectSource = "Pripojiť zdroj"
 description = "Vytvorte svoj prvý pipeline: vyberte zdroje, nad ktorými beží, spojte operácie do reťazca a vyberte, kam pôjde výstup."
 title = "Zatiaľ žiadne pipeline"
 
@@ -7286,15 +7874,17 @@ active = "Aktívne"
 paused = "Pozastavené"
 total = "Pipeline"
 
-[portal.pipelines.output]
-folder = "Zapísať do priečinka"
-inline = "Vrátiť súbory"
-
 [portal.pipelines.run]
+allProcessed_one = "Nie je čo spustiť: {{count}} dokument zdroja už bol spracovaný."
+allProcessed_other = "Nie je čo spustiť: všetkých {{count}} dokumentov v zdrojoch už bolo spracovaných."
 completed_one = "Spustenie dokončené."
 completed_other = "Všetkých {{count}} spustení dokončených."
 empty = "Nie je čo spustiť: zdroje nemali žiadne dokumenty na spracovanie."
 failed = "Spustenie zlyhalo: {{error}}"
+historyCleared = "História bola vymazaná. Ďalšie spustenie znova spracuje všetko, čo sa aktuálne nachádza v zdrojoch."
+inFlight = "Nie je nič nové na spustenie: dokumenty sa stále spracúvajú z predchádzajúceho spustenia."
+parked_one = "Nie je čo spustiť: {{count}} dokument predtým zlyhal a je pozastavený. Opravte príčinu a potom vymažte históriu, aby ste ho skúsili znova."
+parked_other = "Nie je čo spustiť: {{count}} dokumentov predtým zlyhalo a sú pozastavené. Opravte príčinu a potom vymažte históriu, aby ste ich skúsili znova."
 running = "Spustenie začalo; stále prebieha."
 timeout = "Spustenie trvá dlhšie, než sa očakávalo; môže sa stále dokončiť na pozadí."
 
@@ -7314,12 +7904,18 @@ manual = "Manuálne"
 schedule = "Naplánované"
 
 [portal.policies]
+defaultName = "Politika {{category}}"
 subtitle = "Trvalé automatizácie, ktoré vynucujú pipeline nástrojov na každom dokumente. Každá politika sa spustí pri nahraní alebo exporte, vykoná svoj reťazec nástrojov a uloží vynútenú verziu vedľa originálu."
 title = "Politiky"
 
 [portal.policies.card]
 comingSoon = "Inovovať na Enterprise"
 notSetUp = "Nenastavené"
+requiresAiEngine = "Vyžaduje AI engine"
+
+[portal.policies.categories.classification]
+desc = "Identifikuje typ každého dokumentu pri nahraní a označí jeho metadáta na zaradenie a vyhľadávanie."
+label = "Klasifikácia"
 
 [portal.policies.categories.compliance]
 desc = "Vynucujte požiadavky HIPAA, GDPR, SOC 2 alebo FedRAMP na každom dokumente."
@@ -7344,6 +7940,13 @@ label = "Bezpečnosť"
 [portal.policies.config]
 scopeAll = "Všetky dokumenty"
 
+[portal.policies.config.classification]
+summary = "Klasifikuje každý nahraný dokument podľa štítkov vášho tímu a označí jeho metadáta."
+
+[portal.policies.config.classification.rules]
+0 = "Klasifikovať"
+1 = "Označiť metadáta"
+
 [portal.policies.config.compliance]
 summary = "Overuje dokumenty podľa regulačných rámcov predtým, než opustia systém."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. spoľahlivosť"
 2 = "Pomenovať"
 3 = "Normalizovať"
 
+[portal.policies.config.purview]
+label = "Použiť štítok citlivosti Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "ID štítka"
+labelIdHelp = "GUID štítka z portálu Purview. Použitie štítka zapíše jeho metadáta do PDF; nedokáže ho zašifrovať, na to je potrebný klient Microsoft."
+labelName = "Názov štítka (voliteľné)"
+labelNameHelp = "Zaznamenané spolu s ID, aby ľudia a nástroje vedeli štítok rozpoznať."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview rozlišuje štítok použitý politikou od štítka, ktorý vybrala osoba."
+label = "Ako sa štítok zaznamená"
+privileged = "Ako vybrané osobou"
+standard = "Ako automaticky použité"
+
+[portal.policies.config.purviewRead]
+label = "Prečítať štítok Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Prečíta štítok, ktorý dokument už nesie, aby naň mohli neskoršie kroky reagovať."
+
 [portal.policies.config.retention]
 summary = "Vynucuje, ako dlho sa dokumenty uchovávajú, kedy sa archivujú a kedy sa odstraňujú."
 
@@ -7438,6 +8064,7 @@ title = "Zatiaľ žiadna aktivita"
 [portal.policies.endpoints]
 addWatermark = "Vodoznak"
 autoRedact = "Redigovať PII"
+classifyAndLabel = "Klasifikovať"
 compressPdf = "Komprimovať"
 flatten = "Zlúčiť vrstvy"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Vaše politiky sú uložené a zobrazia sa po obnovení pripojeni
 retry = "Skúsiť znova"
 title = "Backend nie je dostupný"
 
+[portal.policies.operations]
+change = "Zmeniť, čo tento krok vykoná"
+noResults = "Žiadny krok tomu nezodpovedá. Skúste názov produktu alebo „scan“, „notify“, „attach“."
+searchPlaceholder = "Hľadať kroky – skúste „scan“, „attach“ alebo názov produktu"
+
+[portal.policies.operations.bodyMode]
+binary = "Surové bajty súboru"
+json = "Vnútri JSON payload"
+multipart = "Ako nahratie súboru (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Váš vlastný server ClamAV skontroluje dokument; nič neopustí vašu sieť."
+label = "Skenovať na vírusy (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Odmietne dokumenty obsahujúce makrá, spustiteľné súbory, skripty alebo vložené objekty."
+label = "Blokovať aktívny obsah"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive skontroluje dokument a spustenie sa zastaví, ak nie je čistý."
+label = "Skenovať na vírusy"
+
+[portal.policies.operations.confluenceAttach]
+description = "Uloží spracovaný dokument na stránku."
+label = "Pripojiť k stránke Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Odošle dokument do ConsignO Cloud na podpis."
+label = "Odoslať na podpis (ConsignO)"
+note = "Odošle dokument. Získanie podpísanej kópie zatiaľ nie je podporované, pretože krok nemôže odovzdať výsledok neskoršiemu kroku."
+
+[portal.policies.operations.customApiCall]
+description = "Vytvorte volanie sami: cesta, metóda, telo a spracovanie odpovede."
+label = "Zavolať vlastné API"
+
+[portal.policies.operations.discordNotify]
+description = "Oznámi kanálu, že politika spracovala dokument."
+label = "Uverejniť správu na Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Zaznamená, čo politika vykonala, ako vyhľadateľný dokument."
+label = "Indexovať auditnú udalosť v Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart sa hodí pre upload API; JSON sa hodí pre API, ktoré chcú súbor v payload; binary odošle surové bajty."
+label = "Ako odoslať dokument"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON telo odoslané bez úprav. {{document.base64}} obsahuje súbor; {{document.*}} a {{run.*}} sa vyplnia pre každý dokument."
+label = "JSON telo"
+
+[portal.policies.operations.fields.connection]
+label = "Účet"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun doména"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Pole formulára, pod ktorým API očakáva dokument."
+label = "Názov poľa súboru"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Od"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON objekt dvojíc názov/hodnota hlavičky. Prihlasovací údaj pripojenia sa pridá za vás."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Kľúč issue"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Odoslané ako telo správy. {{document.*}} a {{run.*}} sa vyplnia pre každý dokument."
+label = "Správa"
+
+[portal.policies.operations.fields.method]
+label = "Metóda"
+
+[portal.policies.operations.fields.pageId]
+label = "ID stránky"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Pripojí sa k základnej URL pripojenia. Nikdy nemôže dosiahnuť iného hostiteľa."
+label = "Cesta"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Kam sa má v úložisku zapísať. {{document.filename}} sa vyplní pre každý dokument."
+label = "Cieľová cesta"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report ponechá dokument bez zmeny. Replace ho nahradí tým, čo sa vráti."
+label = "Čo urobiť s odpoveďou"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email podpisujúceho"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Predmet"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyzuje tento text. Použite {{document.title}} alebo vložte text, ktorý chcete skontrolovať."
+label = "Text na kontrolu"
+
+[portal.policies.operations.fields.to]
+label = "Komu"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Používateľské meno Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Oznámi priestoru, že politika spracovala dokument."
+label = "Uverejniť správu na Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Uloží spracovaný dokument k issue."
+label = "Pripojiť k Jira issue"
+
+[portal.policies.operations.mailgunEmail]
+description = "Odošle spracovaný dokument ako prílohu."
+label = "Odoslať dokument emailom (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Zapíše spracovaný dokument do priečinka."
+label = "Nahrať do Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Váš vlastný server Presidio nahlási osobné údaje, ktoré nájde."
+label = "Zistiť osobné údaje"
+note = "Presidio číta text, nie súbory. Poskytnite mu text, ktorý chcete skontrolovať — samotný dokument sa nenahráva."
+
+[portal.policies.operations.responseMode]
+replace = "Nahradiť dokument odpoveďou"
+report = "Ponechať dokument, zaznamenať odpoveď"
+
+[portal.policies.operations.sendgridEmail]
+description = "Odošle spracovaný dokument ako prílohu."
+label = "Odoslať dokument emailom (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Oznámi kanálu, že politika spracovala dokument."
+label = "Uverejniť správu na Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Zaznamená, čo politika vykonala, tam, kde to už sledujú vaši audítori."
+label = "Odoslať auditnú udalosť do Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Zaznamená, čo politika vykonala, do HTTP kolektora."
+label = "Odoslať auditnú udalosť do Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Oznámi kanálu, že politika spracovala dokument."
+label = "Uverejniť správu na Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Odošle samotný dokument na URL, ktorú vyberiete."
+label = "Odoslať dokument na webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Odovzdá podrobnosti spustenia vašej automatizácii."
+label = "Spustiť Zap alebo Make scenár"
+
 [portal.policies.stats]
 activeFor = "Aktívne"
 dataProcessed = "Spracované údaje"
@@ -7473,6 +8277,13 @@ label = "Vynútené dokumenty"
 description = "Nakonfigurované, ale nespúšťa sa"
 label = "Pozastavené"
 
+[portal.policies.table]
+appliesTo = "Vzťahuje sa na"
+docs = "Vynútené dokumenty"
+enforces = "Vynucuje"
+policy = "Politika"
+status = "Stav"
+
 [portal.policies.wizard.actions]
 back = "Späť"
 cancel = "Zrušiť"
@@ -7480,6 +8291,10 @@ continue = "Pokračovať"
 enablePolicy = "Povoliť politiku"
 saveChanges = "Uložiť zmeny"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifikuje typ dokumentu podľa štítkov vášho tímu a označí ho, aby sa zaraďoval a vyhľadával podľa kategórie."
+label = "Klasifikovať dokument"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimuje dokument na menšiu veľkosť súboru."
 label = "Zmenšiť veľkosť súboru"
@@ -7500,10 +8315,18 @@ label = "Redigovať citlivé informácie"
 desc = "Odstráni skrytý JavaScript, aby sa pri otvorení dokumentu nič nespustilo automaticky."
 label = "Odstrániť aktívny obsah"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dokazuje, že dokument existoval presne v tejto podobe v konkrétnom čase, pomocou nezávislej autority časových pečiatok. Odosiela sa iba hash - dokument nikdy neopustí váš server."
+label = "Pridať dôveryhodnú časovú pečiatku"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Označí každú stránku viditeľnou značkou (napr. „Dôverné“)."
 label = "Použiť vodoznak"
 
+[portal.policies.wizard.classification]
+description = "Každý nahraný dokument sa klasifikuje podľa vstavaných štítkov a označí typmi, ktoré zodpovedajú. Sada štítkov je zdieľaná naprieč celým vaším tímom."
+labelsHeading = "Klasifikačné štítky"
+
 [portal.policies.wizard.errors]
 noTools = "Najprv vo workflow povoľte aspoň jeden nástroj."
 saveFailed = "Politiku sa nepodarilo uložiť. Skúste to znova."
@@ -7548,73 +8371,118 @@ setUp = "Nastaviť politiku {{category}}"
 [portal.policies.wizard.workflow]
 description = "Vyberte, čo táto politika urobí s každým dokumentom, ktorý spracuje."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktívnych"
-noRule = "Zatiaľ sa nevynucuje žiadne pravidlo"
-subtitle = "Trvalé automatizácie, ktorými prechádza každý dokument bez ohľadu na to, ktorá pipeline ho spracúva."
-title = "Čo sa spúšťa na vašich PDF"
-
 [portal.policySummary.action]
-comingSoon = "Upgradovať na Enterprise"
-configure = "Konfigurovať"
 setUp = "Nastaviť"
 
-[portal.policySummary.column]
-activeRule = "Aktívne pravidlo"
-policy = "Politika"
-status = "Stav"
+[portal.processorFlow]
+footnote = "Počty sú za posledných 24 hodín. Rýchlosť toku je ilustračná."
+liveBadge = "Naživo"
+stats = "{{connected}} pripojených · {{processed}} PDF spracovaných"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Po nakonfigurovaní politík sa tu zobrazia kategórie."
-title = "Zatiaľ žiadne politiky"
+[portal.processorFlow.lens]
+ariaLabel = "Režim zobrazenia"
+flow = "Tok"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktívne"
-off = "Vypnuté"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Zlyhalo"
+heading = "Výsledky"
+success = "Doručené"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktívnych"
+count = "{{n}} · 24h"
+heading = "Politiky"
+setUp = "Nastaviť"
 soon = "Čoskoro"
 
-[portal.processingStatus]
-managePlan = "Spravovať plán"
-volumeSuffix = "Spracované PDF · posledných 30 dní"
+[portal.processorFlow.sankey]
+waist = "Politiky · {{n}} aktívnych"
+
+[portal.processorFlow.sankey.empty]
+description = "Pripojte zdroj a zapnite politiku, aby ste videli, ako dokumenty prechádzajú processorom."
+title = "Zatiaľ žiadny tok"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Pripojiť"
+editor = "Stirling PDF Editor"
+heading = "Zdroje"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Príjem emailov"
 
 [portal.procurement]
-reset = "Resetovať obstarávanie (demo)"
 subtitle = "Nechajte svoj tím vyhodnotiť, zazmluvniť a zaučiť. Každý dokument na jednom mieste."
 title = "Obstarávanie"
 
-[portal.procurement.action]
-download = "Stiahnuť"
-pay = "Zaplatiť teraz"
-request = "Vyžiadať"
-sign = "Skontrolovať a podpísať"
-upload = "Nahrať"
-
 [portal.procurement.agreement]
 agreeCta = "Súhlasiť a predplatiť"
+confidential = "Dôverné"
 confirm = "Prečítal/-a som si Stirling Enterprise Agreement a súhlasím s ňou."
-eyebrow = "Zmluva"
-intro = "Jedna kombinovaná zmluva pokrýva vašu dohodu: Master Service Agreement, Order Form, EULA a Data Processing Agreement. Skontrolujte ju a potom súhlasom prijmite ponuku ako záväzné predplatné."
-title = "Skontrolujte svoju enterprise zmluvu"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA a DPA, spojené do jedného podpisu."
+download = "Stiahnuť"
+downloadDraftError = "Nepodarilo sa vygenerovať agreement PDF - renderer dokumentov nie je dostupný. Skúste to znova o chvíľu alebo kontaktujte podporu."
+downloadError = "Nepodarilo sa stiahnuť podpísanú zmluvu. Skúste to znova."
+legalName = "Názov právnickej osoby"
+legalNamePlaceholder = "Právnická osoba, ktorá bude podpisovať"
+loadError = "Nepodarilo sa načítať zmluvu. Skúste to znova."
+loading = "Načítava sa zmluva..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Požiadať o zmeny"
+scrollHint = "Posuňte na kontrolu"
+signatory = "Meno podpisujúceho"
+signatoryPlaceholder = "Celé meno"
+signatoryTitle = "Funkcia podpisujúceho"
+signatoryTitlePlaceholder = "napr. hlavný právnik"
+signError = "Nepodarilo sa zaznamenať váš podpis. Skúste to znova."
 
 [portal.procurement.builder]
 addons = "Doplnky"
+addressLine1 = "Riadok adresy 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Riadok adresy 2"
+addressLine2Placeholder = "Apartmán, poschodie, budova"
 back = "Späť"
 businessName = "Názov firmy"
 businessNamePlaceholder = "Vaša spoločnosť"
+city = "Mesto"
+cityPlaceholder = "San Francisco"
+completeRequired = "Pred vygenerovaním cenovej ponuky vyplňte povinné polia (označené *) platným emailom."
+contactEmail = "Kontaktný email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kontaktné meno"
+contactNamePlaceholder = "Jane Doe"
 continue = "Pokračovať"
-country = "Krajina"
-countryEuro = "Eurozóna (EUR €)"
-countryUK = "Spojené kráľovstvo (GBP £)"
-countryUS = "Spojené štáty (USD $)"
+done = "Hotovo"
 eula = "Prečítal/-a som si Stirling Enterprise EULA a súhlasím s ňou. Riadi zmluvu vygenerovanú z tejto ponuky."
 generate = "Vygenerovať ponuku"
-included = "Zahrnuté"
 indemnification = "Odškodnenie za IP"
 indemnificationSub = "Obhajujeme oprávnené nároky týkajúce sa IP podľa EULA"
-offlineLicense = "Offline / izolovaná licencia"
-offlineLicenseSub = "Stiahnuteľný licenčný súbor pre izolovanú self-hosted inštanciu"
+paperEyebrow = "Enterprise cenová ponuka"
+paperFor = "Pripravené pre"
+pdfSize = "Veľkosť PDF"
+poNumber = "Číslo PO"
+poNumberPlaceholder = "Voliteľné"
+postalCode = "PSČ"
+postalCodePlaceholder = "94105"
+posture = "Riadenie"
+posture_count = "~{{count}} politík"
+posture_essentials = "Základy"
+posture_essentialsSub = "Klasifikácia + Zdieľanie — predvolené hodnoty"
+posture_governed = "Riadené"
+posture_governedSub = "Pridáva Zabezpečenie a Smerovanie"
+posture_regulated = "Regulované"
+posture_regulatedSub = "Každá kategória — Compliance, Uchovávanie, Ingestion"
 qbr = "Štvrťročné obchodné hodnotenia"
 qbrSub = "Váš SE každý štvrťrok prehodnotí používanie a plán rozvoja"
+region = "Štát / región"
+regionPlaceholder = "California"
 running = "{{annual}} / rok · {{years}}-ročné {{tcv}}"
 s1Sub = "Váš tím a PDF, ktoré očakávate spracovať každý rok."
 s1Title = "Koľko budete spracúvať?"
@@ -7623,6 +8491,12 @@ s2Title = "Záväzok a služba"
 s3Sub = "Pre ponuku a zmluvu, ktorú vygeneruje."
 s3Title = "Vaše údaje"
 serviceLevel = "Úroveň služby"
+size_compact = "Kompaktné"
+size_compactSub = "Väčšinou text, menej ako 1 MB"
+size_heavy = "Veľké"
+size_heavySub = "Skenované alebo s množstvom obrázkov, 5 MB+"
+size_standard = "Štandardné"
+size_standardSub = "Kombinácia textu a obrázkov, 1 až 5 MB"
 slDedicated = "Vyhradená"
 slDedicatedSub = "4 pracovné hodiny · vyhradený account manager · +30 %"
 slPriority = "Prioritná"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Ten istý pracovný deň · pridelený CSM · +15 %"
 slStandard = "Štandardná"
 slStandardSub = "Nasledujúci pracovný deň · zdieľaný CSM · zahrnuté"
 stepOf = "Krok {{n}} z {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Voliteľné"
 term = "Obdobie"
 termDiscount = "Uplatnená {{pct}}% zľava za viacročný záväzok"
 title = "Vytvorte svoju ponuku"
@@ -7637,6 +8513,7 @@ training = "Onboarding a školenie"
 trainingSub = "Živé relácie, aby váš tím začal pracovať"
 users = "Celkový počet používateľov"
 usersPlaceholder = "napr. 250"
+viewEula = "Prečítať"
 volEstimated = "Odhadnuté z {{count}} používateľov (~2 000 PDF na každého vrátane automatizácie). Upravte, ak máte presnejší údaj."
 volManual = "Používa sa váš údaj. Kedykoľvek môžete znova odhadnúť podľa veľkosti tímu."
 volNoUsers = "Nie ste si istí? Zadajte veľkosť tímu a my to odhadneme."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "napr. 1 000 000"
 years_one = "{{count}} rok"
 years_other = "{{count}} roky"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokument"
-count_other = "{{count}} dokumenty"
-done = "Hotovo"
-here = "Ste tu"
-hide = "Skryť"
-optional = "Voliteľné"
-paidAddon = "Platený doplnok"
-show = "Zobraziť"
-subtitle = "Všetko, čo potrebujete v každom kroku cesty, zobrazené podľa toho, ako sa dohoda posúva ďalej."
-supportingSubtitle = "SOC 2, bezpečnostné kontroly, daňové formuláre a ďalšie, pripravené, keď si ich vyžiada váš bezpečnostný alebo obstarávací tím. Niektoré majú jednorazový poplatok."
-supportingTitle = "Podpora vášho hodnotenia"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form a DPA v jednom podpise."
+download = "Stiahnuť"
+eula = "EULA & Commercial Terms"
+eulaSub = "Softvér a samoobslužné obchodné podmienky."
+invoice = "Faktúra"
+invoiceSub = "Vaša prvá faktúra za predplatné."
+laterInvoice = "Dostupné po prijatí"
+laterQuote = "Dostupné po vystavení vašej cenovej ponuky"
+quote = "Cenová ponuka"
+quoteSub = "Vaša položková enterprise cenová ponuka."
+sla = "SLA Exhibit"
+slaSub = "Úrovne podpory a ciele odozvy."
+subprocessors = "Subprocesori"
+subprocessorsSub = "Tretie strany, ktoré spracúvajú údaje vo vašom mene."
+subtitle = "Vaše obchodné dokumenty, dostupné kedykoľvek."
 title = "Dokumenty"
-upcoming = "Nadchádzajúce"
+view = "Zobraziť"
 
 [portal.procurement.error]
 title = "Niečo sa pokazilo"
 
 [portal.procurement.hero]
-company = "Vaša enterprise dohoda"
+barAria = "Fáza {{current}} z {{total}}"
 ctaAgreement = "Skontrolovať a podpísať zmluvu"
-ctaLive = "Ste live"
-ctaPayment = "Pridať platbu"
+ctaExploring = "Nastaviť skúšobnú verziu"
 ctaQuote = "Skontrolovať ponuku"
+ctaReviewQuote = "Skontrolovať cenovú ponuku"
 ctaTrial = "Vytvoriť ponuku"
+documents = "Dokumenty"
 eyebrow = "Enterprise obstarávanie"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Pozvať spoluhráčov"
-keyDocs = "Kľúčové dokumenty"
-nextStep = "Ďalší krok: {{action}}"
-notStarted = "Nezačaté"
+licenseKey = "Licenčný kľúč"
+liveSub = "Vaša organizácia je zriadená a vaša licencia je aktívna."
+liveTitle = "Ste naživo na Stirling Enterprise"
+next = "Ďalej: {{stage}}"
 open = "Otvoriť obstarávanie"
 scheduleCall = "Naplánovať hovor"
-setup1Sub = "Pozvite svojich spoluhráčov"
-setup1Title = "Nasadiť PDF Editor"
-setup2Sub = "Zapnite spracovanie naprieč editormi a ďalšími zdrojmi"
-setup2Title = "Pripojiť PDF Processor"
-setup3Sub = "Zapnite Security, Compliance, Routing alebo Retention, keď ich budete potrebovať"
-setup3Title = "Pridať odporúčané politiky"
+sentenceAgreement = "skontrolujte a podpíšte zmluvu"
+sentenceLive = "zriadenie a nasadenie"
+sentencePayment = "objednávka a platba"
+sentenceQuote = "skontrolujte a prijmite svoju cenovú ponuku"
+sentenceTrial = "nastavte si skúšobný pracovný priestor"
 
 [portal.procurement.journey]
 daysLeft_one = "Zostáva {{count}} deň"
 daysLeft_other = "Zostávajú {{count}} dni"
-engineerLabel = "Váš solutions engineer"
-eyebrow = "Vaše zavedenie"
-live = "Ste live na Stirling Enterprise"
-nextStep = "Ďalší krok: {{action}}"
-subtitle = "Váš solutions engineer je pri každom kroku. Naraz jedna ďalšia akcia; celý kontrolný zoznam je nižšie."
-title = "Od skúšobnej verzie po live, jedna vedená cesta"
-trialTitle = "Enterprise skúšobná verzia"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Jeden podpis pokrýva MSA, objednávkový formulár, EULA a DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Offline licenčný súbor zatiaľ nebolo možné vygenerovať 
 downloadOffline = "Stiahnuť offline licenciu (.lic)"
 hint = "Vložte tento kľúč do self-hosted inštancie na jej aktiváciu alebo si ho ponechajte pre svoje záznamy. Uchovajte ho bezpečne."
 label = "Váš licenčný kľúč"
+subtitle = "Aktivujte self-hosted inštanciu týmto kľúčom alebo si ho ponechajte pre svoje záznamy."
+title = "Váš licenčný kľúč"
+trialFileHint = "Toto je váš súbor skúšobnej licencie. Keď bude vaša zmluva uzavretá, vráťte sa a stiahnite si ho znova — na rozdiel od online licenčného kľúča sa súbor .lic neaktualizuje sám."
 
 [portal.procurement.link]
 cta = "Prepojiť účet"
@@ -7739,65 +8619,62 @@ description = "Vaše predplatné je aktívne a licencia je vydaná. Váš tím j
 eyebrow = "Live"
 title = "Ste live na Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Skúšobné kľúče, ponuky na záväzný objem, zmluva na jeden podpis, platba a register dokumentov budú po spustení enterprise hodnotenia všetky tu."
-eyebrow = "Iba Enterprise"
-talkToSales = "Kontaktovať predaj"
-title = "Obstarávacia cesta sa otvára s Enterprise"
-
 [portal.procurement.milestone]
-accept = "Prijať a pokračovať"
-description = "Stiahnite si PDF a zdieľajte ho so svojím tímom, vráťte sa a prijmite ho, keď budete pripravení, alebo vykonajte zmeny."
-download = "Stiahnuť PDF"
 downloadError = "PDF ponuky sa zatiaľ nepodarilo stiahnuť — skúste to znova o chvíľu."
-edit = "Upraviť ponuku"
-eyebrow = "Ponuka {{number}}"
-perYear = " / rok"
-preparedFor = "Pripravené pre {{company}}"
-tcv = "{{value}} celková hodnota zmluvy"
-title = "Vaša ponuka je pripravená"
-
-[portal.procurement.modal]
-cancel = "Zrušiť"
-chooseFile = "Vybrať súbor"
-close = "Zavrieť"
-downloadBody = "Sťahovanie sa čoskoro začne."
-downloadCta = "Stiahnuť"
-downloadTitle = "Stiahnuť"
-noFile = "Nie je vybraný žiadny súbor"
-payBody = "Zaplaťte záväznú zmluvu kartou alebo bankovým prevodom cez Stripe. Váš workspace sa zriadi hneď po pripísaní platby."
-payCta = "Pokračovať na Stripe"
-payTitle = "Potvrdiť platbu"
-requestBodyFree = "Vygenerujeme to na požiadanie. Potvrďte a váš solutions engineer vám to čoskoro pošle."
-requestBodyPaid = "Toto je platený doplnok. Potvrďte a váš solutions engineer ho nacení a pošle dokumenty."
-requestCta = "Vyžiadať"
-requestTitle = "Vyžiadať tento dokument"
-signBody = "Otvorí Stirling Enterprise Agreement na elektronický podpis: jeden podpis pokrýva MSA, objednávkový formulár, EULA a DPA. Automaticky spolupodpíšeme a posuniete sa k platbe."
-signCta = "Otvoriť na podpis"
-signTitle = "Skontrolujte a podpíšte svoju zmluvu"
-uploadBody = "Pošlite nám svoju objednávku a my ju vyfakturujeme podľa vašich podmienok. Presuňte PDF sem alebo vyberte súbor nižšie."
-uploadCta = "Nahrať objednávku"
-uploadTitle = "Nahrať svoju objednávku"
 
 [portal.procurement.payment]
 description = "Vaša ponuka je prijatá a licencia je už aktívna — váš tím môže začať hneď. Zaplaťte prvú faktúru, keď budete pripravení; môžete ju zaplatiť alebo stiahnuť tu, bez potreby emailu."
+downloadAgreement = "Stiahnuť podpísanú zmluvu"
 downloadInvoice = "Stiahnuť faktúru"
-simulate = "Simulovať prijatie platby (demo)"
+eyebrow = "Platba"
 title = "Predplatné vytvorené"
 viewInvoice = "Zobraziť a zaplatiť faktúru"
 
+[portal.procurement.review]
+acceptCta = "Prijať cenovú ponuku"
+annual = "Ročný poplatok (rok 1)"
+downloadCta = "Stiahnuť cenovú ponuku"
+poNumber = "Objednávka: {{po}}"
+renewal = "Obnovuje sa za {{amount}}/rok po skončení obdobia (+{{pct}}% CPI)"
+tcv = "{{years}}-ročné obdobie, zaplatené celé vopred: {{tcv}}"
+validUntil = "Platné do {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Plánovač sa nepodarilo načítať."
 fallbackLink = "Otvoriť plánovanie na novej karte"
+loading = "Načítava sa plánovač..."
 subtitle = "Váš solutions engineer prevedie váš tím zavedením. Vyberte si čas, ktorý vám vyhovuje."
 title = "Naplánovať hovor"
 
-[portal.procurement.status]
-action = "Vyžaduje sa akcia"
-available = "Dostupné"
-complete = "Dokončené"
-pending = "Čaká sa"
-request = "Na požiadanie"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Uzavreté, bez odchádzajúceho pripojenia"
+back = "Späť"
+businessName = "Názov firmy"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Spravované, najrýchlejší štart"
+continue = "Pokračovať"
+deployment = "Kam sa má nasadiť?"
+eula = "Súhlasím s Stirling EULA & Commercial Terms."
+fullName = "Celé meno"
+fullNamePlaceholder = "Vaše meno"
+invites = "Pozvať spoluhráčov · voliteľné"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Naplánovať hovor"
+seats = "Testujúce osoby"
+seatsPlaceholder = "napr. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker alebo Kubernetes"
+start = "Spustiť skúšobnú verziu"
+stepOf = "Krok {{n}} z {{total}}"
+subtitle = "Zadarmo na 14 dní, bez karty."
+subtitleDetails = "Niekoľko údajov pre vašu cenovú ponuku a zmluvu."
+talkFirst = "Chcete sa najprv porozprávať?"
+title = "Nastavte si skúšobnú verziu"
+viewEula = "Prečítať"
+workEmail = "Pracovný email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Predĺženie pridá 7 dní a upozorní vášho solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Maximum dosiahnuté"
 subtitle = "Vaša bezplatná skúšobná verzia trvá do {{date}}. Karta nie je potrebná."
 title = "Enterprise skúšobná verzia"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Ceny za záväzný objem, SSO + SCIM + RBAC pre celú organizáciu, 90-dňový nemenný audit a vyhradený SE."
-homeCta = "Spustiť skúšobnú verziu →"
-homeHeadline = "Spracujte milióny PDF."
-
-[portal.recentActivity]
-title = "Nedávna aktivita"
-viewAll = "Zobraziť všetko"
-
-[portal.recentActivity.empty]
-description = "Spustenia pipeline, nasadenia a udalosti agentov sa zobrazia tu."
-title = "Zatiaľ tu nič nie je"
-
 [portal.search]
 ariaLabel = "Hľadať"
 placeholder = "Hľadať v Stirling — endpointy, pipeline, dokumenty…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Prepojenie účtu"
 
-[portal.shell.header]
-accountFallback = "Účet"
-accountMenu = "Menu účtu"
-darkMode = "Tmavý režim"
-lightMode = "Svetlý režim"
-search = "Hľadať"
-searchPlaceholder = "Hľadať…"
-signOut = "Odhlásiť sa"
-switchToDark = "Prepnúť na tmavú tému"
-switchToLight = "Prepnúť na svetlú tému"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumentov"
 linkAccount = "Prepojiť účet Stirling"
-planEditor = "Plán Editor"
-planEnterprise = "Plán Enterprise"
-planProcessor = "Plán Processor"
 primaryNav = "Primárna navigácia"
 switchApp = "Prepnúť aplikáciu"
 
+[portal.shell.topbar]
+closeNav = "Zavrieť navigáciu"
+openNav = "Otvoriť navigáciu"
+search = "Hľadať"
+
 [portal.sources]
 subtitle = "Opakovane použiteľné vstupné pripojenia, ktoré privádzajú dokumenty do Stirling. Nakonfigurujte pripojenie raz a potom ho odkazujte z ľubovoľného počtu politík. Kliknutím na riadok zobrazíte jeho konfiguráciu a politiky, ktoré ho používajú."
 title = "Zdroje"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Pripojiť zdroj"
 
+[portal.sources.builder]
+back = "Späť na zdroje"
+backToTypes = "Všetky typy zdrojov"
+cancel = "Zrušiť"
+chooseHint = "Vyberte, odkiaľ dokumenty pochádzajú. Sivé konektory sú na ceste."
+comingSoon = "Čoskoro"
+comingSoonHeading = "Čoskoro"
+create = "Vytvoriť zdroj"
+createTitle = "Pripojiť zdroj"
+delete = "Odstrániť"
+editTitle = "Upraviť zdroj"
+enabled = "Povolené"
+save = "Uložiť zmeny"
+
+[portal.sources.builder.folderAccess]
+description = "Automatizácie priečinkov môžu používať iba priečinky, ktoré povolil správca. Pridajte ho v nastaveniach Folder Access a potom to skúste znova."
+openSettings = "Nastavenia Folder Access"
+title = "Tento priečinok nie je povolený"
+
 [portal.sources.delete]
 body = "Odstrániť „{{name}}“? Túto akciu nie je možné vrátiť späť. Politiky, ktoré naň odkazujú, bude potrebné aktualizovať."
 cancel = "Zrušiť"
 confirm = "Odstrániť"
 title = "Odstrániť zdroj?"
 
-[portal.sources.detail]
-closeAriaLabel = "Zavrieť detail"
-delete = "Odstrániť zdroj"
-docs24h = "Posledných 24 h"
-docs30d = "Posledných 30 dní"
-docsTotal = "Celkovo zistené"
-docsTrend = "Dokumenty za posledných 30 dní"
-documents = "Dokumenty"
-edit = "Upraviť"
-notReferenced = "Nepoužíva ho žiadna politika, takže ho možno bezpečne odstrániť."
-pause = "Pozastaviť"
-resume = "Pokračovať"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Používa"
-
 [portal.sources.empty]
 description = "Pripojte priečinok (a čoskoro aj cloudové úložisko), aby mali vaše politiky odkiaľ získavať dokumenty."
 title = "Zatiaľ nie sú pripojené žiadne zdroje"
@@ -7899,18 +8754,57 @@ inUse = "Používa sa"
 total = "Pripojenia"
 unused = "Nepoužité"
 
+[portal.sources.networkFields.connection]
+helperText = "Uložené pripojenie s adresou servera a prihlasovacími údajmi. Opätovne sa používa každým zdrojom, ktorý naň odkazuje."
+label = "Pripojenie"
+
+[portal.sources.networkFields.directory]
+helperText = "Priečinok na serveri na kontrolu, relatívne k domovskému adresáru prihlásenia alebo koreňu zdieľania. Nechajte prázdne pre koreň."
+label = "Priečinok"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume odstráni každý súbor zo servera, keď ho spracuje každá politika."
+label = "Režim čítania"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: spracovať každý súbor raz"
+snapshot = "Snapshot: znova prečítať priečinok pri každom spustení"
+
+[portal.sources.networkFields.recursive]
+label = "Hĺbka priečinka"
+
+[portal.sources.networkFields.recursive.options]
+all = "Zahrnúť podpriečinky"
+top = "Iba najvyššia úroveň"
+
 [portal.sources.status]
 active = "Aktívne"
 disabled = "Zakázané"
 unused = "Nepoužité"
 
 [portal.sources.table]
+documents = "Dokumenty"
 source = "Zdroj"
 status = "Stav"
 usedBy = "Politiky"
 
+[portal.sources.types.box]
+description = "Načítavajte dokumenty z priečinkov Box, ktoré už váš tím zdieľa."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Načítavajte dokumenty zo zdieľaného priečinka Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenty, ktoré váš tím spracoval v editore, naprieč spusteniami politík a AI."
 label = "Editor"
+noPolicies = "Z editora zatiaľ neboli spustené žiadne politiky."
+
+[portal.sources.types.email]
+description = "Premeňte prílohy odoslané do vyhradenej poštovej schránky na dokumenty."
+label = "Emailová schránka"
 
 [portal.sources.types.folder]
 description = "Sledujte adresár na serveri pre nové dokumenty."
@@ -7943,25 +8837,80 @@ label = "Hĺbka priečinka"
 all = "Zahrnúť podpriečinky"
 top = "Iba najvyššia úroveň"
 
+[portal.sources.types.ftp]
+description = "Kontrolujte priečinok servera FTP alebo FTPS na nové dokumenty."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Načítavajte dokumenty zo zdieľaných priečinkov Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Sledujte sieťové zdieľanie SMB pre nové dokumenty."
+label = "Sieťový disk"
+
+[portal.sources.types.onedrive]
+description = "Sledujte priečinky OneDrive pre nové dokumenty."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Načítavajte dokumenty z Amazon S3 alebo S3-kompatibilného bucketu."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Uložené pripojenie obsahujúce bucket a prihlasovacie údaje. Opätovne sa používa každým zdrojom a výstupom pipeline, ktorý naň odkazuje."
+label = "Pripojenie"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume odstráni každý objekt z bucketu, keď ho spracuje každá politika."
+label = "Režim čítania"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: spracovať každý objekt raz"
+snapshot = "Snapshot: znova prečítať bucket pri každom spustení"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Spracujú sa iba objekty, ktorých kľúče začínajú týmto prefixom."
+label = "Prefix kľúča"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Kontrolujte SFTP drop priečinok na nové dokumenty."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Načítavajte dokumenty z knižníc dokumentov SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Zdroj"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL a tajný kľúč na podpisovanie sa vygenerujú pri vytvorení tohto webhooku. Odosielatelia POSTujú dokumenty na túto URL a odkazujúce politiky sa spustia pri prijatí."
+description = "Prijímajte dokumenty cez podpísaný HTTP POST z akéhokoľvek externého systému."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Tajný kľúč na podpisovanie sa zobrazí raz pri vytvorení webhooku. Ak ho chcete obnoviť, znovu vytvorte zdroj."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopírovať"
+done = "Hotovo"
+secret = "Tajný kľúč na podpisovanie"
+secretHelp = "Podpíšte surové telo každej delivery týmto kľúčom (HMAC-SHA256) a odošlite ho ako header X-Stirling-Signature."
+secretWarning = "Skopírujte si tajný kľúč na podpisovanie teraz. Z bezpečnostných dôvodov sa zobrazí iba raz a neskôr ho nebude možné získať."
+title = "Webhook vytvorený"
+url = "Delivery URL"
+usage = "POSTujte každý dokument ako surové telo požiadavky na delivery URL s binárnym typom obsahu (application/pdf alebo application/octet-stream). Odkazujúce politiky sa automaticky spustia pri prijatí."
+
 [portal.sources.wizard]
-back = "Späť"
-cancel = "Zrušiť"
-continue = "Pokračovať"
-editTitle = "Upraviť zdroj"
 name = "Názov"
 namePlaceholder = "napr. Príjem poistných nárokov"
-save = "Uložiť zmeny"
-subtitle = "Krok {{current}} z {{total}} · {{label}}"
-title = "Pripojiť zdroj"
 type = "Typ"
 
-[portal.sources.wizard.steps]
-chooseType = "Vybrať typ"
-configure = "Konfigurovať"
-review = "Skontrolovať a pripojiť"
+[portal.stepModal]
+close = "Zavrieť"
 
 [portal.usage]
 managePayment = "Spravovať platbu"
@@ -8021,16 +8970,9 @@ summary = "Vlastní tím — spravuje zdroje jeho členov a zdieľané konfigur
 2 = "Prístup k portálu cez predvolenú politiku"
 3 = "Všetko, čo môže robiť člen"
 
-[portal.welcome]
-ariaLabel = "Vitajte v Stirling PDF"
-badge = "Open-source"
-installEditor = "Nainštalovať Editor"
-inviteTeammates = "Pozvať spoluhráčov"
-openInBrowser = "Otvoriť v prehliadači"
-perks = "Navždy zadarmo · Self-hostable"
-subtitle = "Najbezpečnejší PDF Editor na svete je zadarmo pre tímy všetkých veľkostí. Zahŕňa viac ako 60 PDF operácií a SSO."
-title = "Vitajte v"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Neobmedzené"
 
 [printFile]
 title = "Vytlačiť súbor"
@@ -8613,6 +9555,14 @@ text = "Otočte svoje strany PDF v smere alebo proti smeru hodinových ručičie
 [rotate.tooltip.header]
 title = "Prehľad nastavení otáčania"
 
+[ruler]
+clearAll = "Vymazať všetko"
+hideAllLabels = "Skryť všetky štítky"
+hideSmallLabels = "Skryť malé štítky"
+physicalValues = "Fyzické"
+scaled = "V mierke"
+showAllLabels = "Zobraziť všetky štítky"
+
 [sanitize]
 desc = "Odstráňte potenciálne škodlivé prvky zo súborov PDF."
 sanitizationResults = "Výsledky očistenia"
@@ -8654,31 +9604,45 @@ label = "Odstrániť XMP metadáta"
 [sanitize.steps]
 settings = "Nastavenia"
 
-[sanitizePdf]
-tags = "čistiť, zabezpečiť, bezpečné, odstrániť hrozby"
-
 [sanitizePDF]
 title = "Vyčistiť PDF"
 
+[sanitizePdf]
+tags = "čistiť, zabezpečiť, bezpečné, odstrániť hrozby"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Upraviť mierku stránky"
 
+[scaleSettings]
+activeScale = "Aktívna mierka"
+apply = "Použiť mierku"
+applyCalibration = "Použiť kalibráciu"
+calculatedScale = "Vypočítaná mierka"
+calibrate = "Kalibrovať"
+calibrating = "Kalibruje sa"
+calibrationDistanceRequired = "Zadajte skutočnú vzdialenosť väčšiu ako nula"
+calibrationInvalid = "Z tohto merania sa nepodarilo vypočítať mierku"
+calibrationPaperDistance = "Nameraná vzdialenosť na stránke: {{distance}}"
+calibrationTitle = "Kalibrovať mierku"
+calibrationTooltip = "Zmerajte známu vzdialenosť na automatický výpočet mierky"
+customScale = "Vlastná mierka"
+noneSet = "Nie je nastavená žiadna vlastná mierka"
+presets = "Prednastavené mierky"
+ratio = "Pomer mierky"
+ratioHelp = "Pomer: 1 jednotka stránky = X skutočných jednotiek"
+ratioPlaceholder = "napr. 100"
+ratioPositive = "Pomer musí byť väčší ako nula"
+ratioRequired = "Pomer je povinný"
+realDistance = "Skutočná vzdialenosť"
+realDistancePlaceholder = "napr. 5"
+reset = "Obnoviť predvolené hodnoty"
+unit = "Jednotka"
+unitInvalid = "Neplatná jednotka: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Prahová hodnota uhla:"
-10 = "Nastaví veľkosť okraja pridaného a odstráneného, aby sa zabránilo bielym okrajom vo výstupe (predvolené: 1)."
-2 = "Nastaví minimálny absolútny uhol potrebný na otočenie obrázka (predvolené: 10)."
-3 = "Tolerancia:"
-4 = "Určuje rozsah farebnej variácie okolo odhadovanej farby pozadia (predvolené: 30)."
-5 = "Minimálna plocha:"
-6 = "Nastaví minimálnu prahovú hodnotu plochy pre fotografiu (predvolené: 10000)."
-7 = "Minimálna plocha obrysu:"
-8 = "Nastaví minimálnu prahovú hodnotu plochy obrysu pre fotografiu"
-9 = "Veľkosť okraja:"
-
 [scannerImageSplit]
 submit = "Extrahovať naskenované obrázky"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Čo to robí"
 whatThisDoesDesc = "Automaticky nájde a extrahuje každú fotografiu zo skenovanej strany alebo zloženého obrázka—bez ručného orezávania."
 whenToUse = "Kedy použiť"
 
+[ScannerImageSplit.selectText]
+1 = "Prahová hodnota uhla:"
+10 = "Nastaví veľkosť okraja pridaného a odstráneného, aby sa zabránilo bielym okrajom vo výstupe (predvolené: 1)."
+2 = "Nastaví minimálny absolútny uhol potrebný na otočenie obrázka (predvolené: 10)."
+3 = "Tolerancia:"
+4 = "Určuje rozsah farebnej variácie okolo odhadovanej farby pozadia (predvolené: 30)."
+5 = "Minimálna plocha:"
+6 = "Nastaví minimálnu prahovú hodnotu plochy pre fotografiu (predvolené: 10000)."
+7 = "Minimálna plocha obrysu:"
+8 = "Nastaví minimálnu prahovú hodnotu plochy obrysu pre fotografiu"
+9 = "Veľkosť okraja:"
+
 [search]
 noResults = "Nenašli sa žiadne výsledky"
 placeholder = "Zadajte hľadaný výraz..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Váš server Stirling-PDF je offline a \"{{endpoint}}
 [session]
 expired = "Vaša relácia vypršala. Obnovte stránku a skúste znova."
 
-[sessionManagement.tooltip]
-header = "Správa podpisových relácií"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Noví účastníci sú pridaní na koniec poradia podpisovania"
-bullet2 = "Po finalizácii relácie už nemožno pridávať účastníkov"
-bullet3 = "Každý účastník dostane upozornenie, keď je na rade"
-description = "Do aktívnej relácie môžete do finalizácie kedykoľvek pridať ďalších účastníkov."
-title = "Pridávanie účastníkov"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Plná finalizácia</b>: všetci účastníci podpísali"
-bullet2 = "<b>Čiastočná finalizácia</b>: niektorí účastníci ešte nepodpísali"
-bullet3 = "Nepodpísaní účastníci budú vylúčení z finálneho dokumentu"
-bullet4 = "Po finalizácii môžete načítať podpísané PDF do aktívnych súborov"
-description = "Finalizácia spojí všetky podpisy do jedného podpísaného PDF. Túto akciu nemožno vrátiť späť."
-title = "Finalizácia relácie"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Účastníkov, ktorí už podpísali, nemožno odstrániť"
-bullet2 = "Odstránení účastníci už nedostávajú upozornenia"
-bullet3 = "Poradie podpisovania sa automaticky upraví"
-description = "Účastníkov možno z relácie odstrániť predtým, ako podpíšu."
-title = "Odstraňovanie účastníkov"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Každý podpis sa aplikuje na PDF postupne"
-bullet2 = "Neskorší signatári môžu vidieť skoršie podpisy"
-bullet3 = "Kritické pre schvaľovacie postupy a právny reťazec držby"
-description = "Poradie, ktoré určíte pri vytváraní relácie, určuje, kto podpisuje ako prvý."
-title = "Poradie podpisov"
-
 [settings]
 close = "Zavrieť"
 
+[settings.ai]
+documents = "Dokumenty a RAG"
+general = "Všeobecné"
+limits = "Limity a výkon"
+models = "Modely a poskytovatelia"
+title = "AI"
+
 [settings.configuration]
 advanced = "Pokročilé"
 database = "Databáza"
 endpoints = "Endpointy"
 features = "Funkcie"
+folderAccess = "Prístup k priečinkom"
 mcp = "MCP Server"
 storageSharing = "Úložisko súborov a zdieľanie"
 systemSettings = "Systémové nastavenia"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Predvolený editor PDF"
 defaultPdfEditorActive = "Stirling PDF je váš predvolený editor PDF"
 defaultPdfEditorChecking = "Kontroluje sa..."
 defaultPdfEditorInactive = "Iná aplikácia je nastavená ako predvolená"
+defaultPdfEditorRemind = "Pripomenúť mi nastavenie ako predvolené"
+defaultPdfEditorRemindDescription = "Zobraziť banner, keď Stirling PDF nie je vašou predvolenou aplikáciou pre PDF."
 defaultPdfEditorSet = "Už je predvolené"
 defaultStartupView = "Predvolené zobrazenie pri spustení"
 defaultStartupViewDescription = "Vyberte, ktorá karta bude aktívna v ľavom stĺpci pri spustení aplikácie"
@@ -8817,9 +9771,18 @@ languageDescription = "Vyberte jazyk rozhrania"
 logout = "Odhlásiť sa"
 setAsDefault = "Nastaviť ako predvolené"
 theme = "Téma"
+themeAccent = "Farba zvýraznenia"
+themeAccentCustom = "Vlastná farba"
+themeAccentCustomHint = "Vlastná (odporúčajú sa predvolené hodnoty)"
+themeAccentDark = "Farba zvýraznenia v tmavom režime"
+themeAccentDefault = "Predvolená"
+themeAccentDefaultHint = "Predvolený motív (odporúčané)"
+themeAccentDescription = "Tlačidlá, odkazy a zvýraznenia ju používajú a jemne zafarbuje aplikáciu. Svetlý a tmavý režim majú každý svoju vlastnú. Systém použije tú, ktorá je aktívna."
+themeAccentLight = "Farba zvýraznenia vo svetlom režime"
 themeDark = "Tmavá"
 themeDescription = "Prepínať medzi svetlým a tmavým režimom"
 themeLight = "Svetlá"
+themeReset = "Obnoviť motív na predvolený"
 themeSystem = "System"
 title = "Všeobecné"
 user = "Používateľ"
@@ -8833,6 +9796,12 @@ intro = "Povoľte overovanie používateľov, správu tímov a funkcie pracovné
 learnMore = "Viac v dokumentácii"
 title = "Pre správcov systému"
 
+[settings.general.loginLanding]
+description = "Vyberte, ktorá aplikácia sa otvorí po prihlásení do Stirling Cloud."
+editor = "Editor"
+processor = "Procesor"
+title = "Po prihlásení"
+
 [settings.general.mode]
 fullscreen = "Celá obrazovka"
 sidebar = "Bočný panel"
@@ -9041,6 +10010,11 @@ security = "Zabezpečenie"
 telegram = "Telegram"
 title = "Zabezpečenie a autentifikácia"
 
+[settings.signOut]
+confirm = "Naozaj sa chcete odhlásiť?"
+submit = "Odhlásiť sa"
+title = "Odhlásenie"
+
 [settings.team]
 title = "Tím"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Nahrať na server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "kliknite sem"
+fallback = "Ak sa neotvorilo automaticky,"
+opening = "Otvára sa Swagger UI na novej karte..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "Dokumentácia API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Na spustenie tohto nástroja vyberte súbory v časti Aktívn
 singleFileScope = "Použije sa len na: {{fileName}}"
 viewerMode = "Ak chcete vybrať viac súborov, prepnite do editora súborov."
 
+[toolFormat]
+ANY = "ľubovoľný súbor"
+CBR = "archív komiksu (CBR)"
+CBZ = "archív komiksu (CBZ)"
+CSV = "súbor CSV"
+EBOOK = "e-kniha"
+EMAIL = "e-mail"
+EXCEL = "tabuľka"
+HTML = "webová stránka"
+IMAGE = "obrázky"
+JAVASCRIPT = "súbor JavaScript"
+JSON = "súbor JSON"
+MARKDOWN = "súbor Markdown"
+NONE = "žiadny súbor"
+PCL = "tlačový súbor PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF chránený heslom"
+POSTSCRIPT = "súbor PostScript"
+PPT = "prezentácia"
+TEXT = "textový súbor"
+VIDEO = "video"
+WORD = "dokument Word"
+XML = "súbor XML"
+XPS = "dokument XPS"
+ZIP = "archív ZIP"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Späť na všetky nástroje"
 collapse = "Zbaliť panel"
 expand = "Rozbaliť panel"
 goBack = "Prejsť späť"
+pdfTools = "Nástroje PDF"
 placeholder = "Vyberte nástroj, aby ste začali"
 premiumFeature = "Prémiová funkcia:"
+searchTools = "Hľadať nástroje"
 toolsHeader = "Nástroje"
 viewAllTools = "Zobraziť všetky nástroje"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nenašli sa žiadne nástroje"
 quickAccess = "RÝCHLY PRÍSTUP"
 searchPlaceholder = "Hľadať nástroje..."
 
-[toolPicker.categories]
-advancedTools = "Pokročilé nástroje"
-recommendedTools = "Odporúčané nástroje"
-standardTools = "Štandardné nástroje"
-
 [toolPicker.subcategories]
 advancedFormatting = "Pokročilé formátovanie"
 automation = "Automatizácia"
@@ -9950,16 +10950,31 @@ title = "Používatelia"
 you = "(vy)"
 
 [users.action]
+cancelInvite = "Zrušiť pozvanie"
 deleteTeam = "Odstrániť tím"
 disableMfa = "Resetovať MFA"
 move = "Presunúť do tímu"
 reinstate = "Obnoviť"
 remove = "Odstrániť z organizácie"
+removeTeam = "Odstrániť z tímu"
 rename = "Premenovať tím"
 resetPw = "Resetovať heslo"
 suspend = "Pozastaviť"
 unlock = "Odomknúť účet"
 
+[users.activity]
+daysAgo = "pred {{count}} d"
+hoursAgo = "pred {{count}} h"
+justNow = "Práve teraz"
+minutesAgo = "pred {{count}} min"
+monthsAgo_one = "pred {{count}} mesiacom"
+monthsAgo_other = "pred {{count}} mesiacmi"
+never = "Nikdy"
+weeksAgo_one = "pred {{count}} týždňom"
+weeksAgo_other = "pred {{count}} týždňami"
+yearsAgo_one = "pred {{count}} rokom"
+yearsAgo_other = "pred {{count}} rokmi"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Schvaľuje politiku"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Zrušiť pozvanie pre {{email}}? S aktuálnym odkazom sa nebudú môcť pripojiť."
+cancelInviteTitle = "Zrušiť pozvanie"
 deleteTeamBody = "Odstrániť tím {{name}}? Tím musí byť najprv prázdny - presuňte jeho členov do iného tímu a nesmie stále vlastniť žiadne integračné konfigurácie."
 deleteTeamTitle = "Odstrániť tím"
 disableMfaBody = "Odstrániť MFA registráciu používateľa {{name}}? Ak je to vyžadované, nastaví si ju znova pri ďalšom prihlásení."
 disableMfaTitle = "Resetovať MFA"
 removeBody = "Natrvalo odstrániť {{name}} z organizácie? Túto akciu nie je možné vrátiť späť."
+removeTeamBody = "Odstrániť {{name}} z tímu? Účet zostane zachovaný, ale stratia prístup k zdrojom tohto tímu."
 removeTitle = "Odstrániť člena"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Používateľské meno"
 usernameError = "Používateľské meno musí mať aspoň 3 znaky"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Pozvanie od {{who}}"
+cancel = "Zrušiť"
+count = "{{count}} čaká"
+desc = "Pozvaní ľudia, ktorí sa ešte nepripojili. Zaberajú miesto, kým pozvanie neprijmú."
+expiresInDays_one = "Platnosť vyprší o {{count}} deň"
+expiresInDays_other = "Platnosť vyprší o {{count}} dní"
+expiresToday = "Platnosť vyprší dnes"
+title = "Čakajúce pozvania"
+
 [users.loadError]
 description = "Pri pripájaní k backendu sa niečo pokazilo alebo nemáte prístup. Skúste to znova."
 title = "Nepodarilo sa načítať členov"
@@ -10212,9 +11240,11 @@ title = "Prílohy"
 
 [viewer.bookmarks]
 bookmarkTitle = "Názov záložky"
+bookmarkTitleRequired = "Názov záložky je povinný"
 closeSidebar = "Zavrieť bočný panel záložiek"
 collapseAll = "Zbaliť všetky záložky"
 expandAll = "Rozbaliť všetky záložky"
+searchPlaceholder = "Hľadať záložky"
 
 [viewer.comments]
 addComment = "Pridať komentár"
@@ -10605,30 +11635,6 @@ title = "Text vodoznaku"
 image = "Obrázok"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Spôsoby vytvorenia podpisu"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Prispôsobte farbu a hrúbku pera"
-bullet2 = "Mažte a kreslite znova, kým nebudete spokojní"
-bullet3 = "Funguje na dotykových zariadeniach (tablety, telefóny)"
-description = "Vytvorte vlastnoručný podpis pomocou myši alebo dotykovej obrazovky. Najlepšie pre osobné, autentické podpisy."
-title = "Nakresliť podpis"
-
-[wetSignature.tooltip.type]
-bullet1 = "Vyberte si z viacerých písiem"
-bullet2 = "Prispôsobte veľkosť a farbu textu"
-bullet3 = "Ideálne pre štandardizované podpisy"
-description = "Vygenerujte podpis zo zadaného textu. Rýchle a konzistentné, vhodné pre obchodné dokumenty."
-title = "Napísať podpis"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Podporuje PNG, JPG a iné formáty obrázkov"
-bullet2 = "Pre najlepší výsledok sa odporúča priehľadné pozadie"
-bullet3 = "Obrázok bude zmenený, aby sa prispôsobil oblasti podpisu"
-description = "Nahrajte vopred vytvorený obrázok podpisu. Ideálne, ak máte naskenovaný podpis alebo logo spoločnosti."
-title = "Nahrať obrázok podpisu"
-
 [workbenchBar]
 activeFiles = "Aktívne súbory"
 annotations = "Anotácie"
@@ -10652,6 +11658,7 @@ redact = "Začierniť"
 rotateLeft = "Otočiť doľava"
 rotateRight = "Otočiť doprava"
 ruler = "Pravítko / Meranie"
+rulerSettings = "Nastavenia mierky"
 save = "Uložiť"
 saveAll = "Uložiť všetko"
 saveAs = "Uložiť ako"
diff --git a/frontend/editor/public/locales/sl-SI/translation.toml b/frontend/editor/public/locales/sl-SI/translation.toml
index 18e194a4d4..5d4987f35c 100644
--- a/frontend/editor/public/locales/sl-SI/translation.toml
+++ b/frontend/editor/public/locales/sl-SI/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "izbrane datoteke"
 font = "Pisava"
 fontSizeTooltip = "Velikost besedila številke strani v točkah. Večje številke ustvarijo večje besedilo."
 fontTypeTooltip = "Družina pisave za številke strani. Izberite glede na slog dokumenta."
-genericSubmit = "Pošlji"
 green = "zelena"
 help = "Pomoč"
-imgPrompt = "Izberite sliko(e)"
 incorrectPasswordMessage = "Trenutno geslo ni pravilno."
 info = "Podatki"
 invalidUndoData = "Razveljavitev ni mogoča: neveljavni podatki o operaciji"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Sporazum ob prijavi"
 logOut = "Odjava"
 marginTooltip = "Razdalja med številko strani in robom strani."
 moreOptions = "Več možnosti"
-multiPdfPrompt = "Izberi PDF (2+)"
 never = "Nikoli"
 no = "Ne"
 noFileSelected = "Ni izbrane datoteke. Naložite eno."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Vrstni red strani po meri (Vnesite z vejicami ločen seznam 
 pages = "Strani"
 pageSelectionPrompt = "Izbira strani po meri (Vnesite z vejicami ločen seznam številk strani 1,5,6 ali funkcije, kot je 2n+1) :"
 password = "Geslo"
-pdfPrompt = "Izberi PDF(e)"
 pin = "Pripni datoteko (ostane aktivna po zagonu orodja)"
 pro = "Pro"
 processingComplete = "Vaša datoteka je pripravljena."
@@ -356,6 +352,7 @@ text = "Ta dovoljenja nadzorujejo, kaj lahko uporabniki počnejo s PDF-jem. Najb
 title = "Spremeni dovoljenja"
 
 [addStamp]
+preview = "Predogled žiga"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ročni prenosi: kliknite povezave in datoteke postavite v mapo te
 noLanguages = "V konfiguriranem imeniku ni najdenih jezikov tessdata."
 permissionNotice = "Pot tessdata ni zapisljiva. Prenosi se bodo odprli v brskalniku; datoteke .traineddata ročno shranite v mapo tessdata."
 
+[admin.settings.ai.documents]
+description = "Konfigurirajte model za vdelave in nastavitve pridobivanja, ki se uporabljajo za odgovarjanje na vprašanja o dokumentih. Ob shranjevanju se uporabi za AI pogon."
+title = "Dokumenti in RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Pustite prazno za uporabo lastne poverilnice okolja pogona. Velja za samogostovane uvedbe z enim pogonom."
+generic = "API ključ za vdelave"
+openai = "OpenAI API ključ"
+setPlaceholder = "Shranjeno – pustite prazno, da ohranite trenutni ključ"
+voyageai = "VoyageAI API ključ"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Osnovni URL končne točke za vdelave, združljive z OpenAI / Ollama, npr. http://ollama:11434/v1. Kazati mora na zaupanja vredno interno končno točko (občutljivo na SSRF)."
+label = "Osnovni URL vdelav"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Ime modela za vdelave. Prosto besedilo; predlogi so samo namigi."
+label = "Model za vdelave"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Ponudnik, ki se uporablja za pretvorbo besedila dokumenta v vektorske vdelave."
+label = "Ponudnik vdelav"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Največje število iskanj za pridobivanje, ki jih lahko agent izvede na zahtevo."
+label = "Največ iskanj"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Sprememba modela za vdelave začne veljati takoj, vendar je treba dokumente, indeksirane s prejšnjim modelom, ponovno indeksirati, da iskanje vrne pravilne rezultate."
+title = "Potrebno je ponovno indeksiranje"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Če ste spremenili model za vdelave, ponovno indeksirajte obstoječe dokumente, da bo iskanje uporabljalo novi model."
+
+[admin.settings.ai.documents.topK]
+description = "Število najpomembnejših odsekov, pridobljenih pri vsakem iskanju."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Povežite Stirling s Python AI pogonom in izberite, katere AI zmožnosti so izpostavljene. Spremembe se uporabijo ob ponovnem zagonu."
+title = "AI pogon"
+
+[admin.settings.ai.general.capabilities]
+description = "Vklopite ali izklopite posamezne AI funkcije. Onemogočene funkcije so v aplikaciji skrite."
+title = "Zmožnosti"
+
+[admin.settings.ai.general.enabled]
+description = "Glavno stikalo. Ko je izklopljeno, niso na voljo nobena AI orodja, agenti ali klici pogona."
+label = "Omogoči AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Pogovorni pomočnik za delo z datotekami PDF."
+label = "Pogovorni pomočnik"
+
+[admin.settings.ai.general.features.classify]
+description = "Samodejno razvrstite dokumente po vrsti ali vsebini."
+label = "Razvrščanje dokumentov"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Ustvarite nov PDF (npr. iz HTML) prek AI agenta."
+label = "Ustvari PDF iz poziva"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Postavljajte vprašanja in pridobite odgovore, utemeljene na naloženem dokumentu."
+label = "Vprašanja o dokumentu"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Preglejte dokumente glede matematičnih in številskih napak."
+label = "Matematični revizor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Dodajte AI komentarje za pregled in opombe v PDF."
+label = "Agent za komentarje PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Časovna omejitev za zahtevnejše operacije agentov, kot je ustvarjanje dokumentov."
+label = "Časovna omejitev dolgotrajnih opravil (sekunde)"
+
+[admin.settings.ai.general.note]
+body = "AI pogon deluje kot ločena storitev. Njegova skupna skrivnost"
+body2 = "je nastavljena prek okoljske spremenljivke vsebnika. API ključe ponudnikov lahko vnesete na teh straneh ali jih zagotovite kot okoljske spremenljivke pogona; ključi, vneseni tukaj, se ob shranjevanju potisnejo v pogon."
+title = "O AI pogonu"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Časovna omejitev za pretočne (token za tokenom) odgovore klepeta."
+label = "Časovna omejitev pretoka (sekunde)"
+
+[admin.settings.ai.general.test]
+button = "Preizkusi povezavo"
+failBody = "AI pogon se ni odzval. Preverite URL, ali vsebnik pogona deluje in ali je AI omogočen (po omogočanju je potreben ponovni zagon)."
+failTitle = "AI pogon ni dosegljiv"
+okBody = "AI pogon se je odzval na preverjanje stanja."
+okTitle = "AI pogon je dosegljiv"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Časovna omejitev za standardne AI zahteve do pogona."
+label = "Časovna omejitev zahteve (sekunde)"
+
+[admin.settings.ai.general.url]
+description = "Interni URL Python AI pogona, npr. http://stirling-pdf-engine:5001."
+label = "URL AI pogona"
+
+[admin.settings.ai.limits]
+description = "Varovala za količino dela, ki ga lahko opravijo AI zahteve, in koliko jih teče hkrati. Ob shranjevanju se uporabijo za AI pogon."
+title = "Omejitve in zmogljivost"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Varovalo: zavrni AI zahteve, katerih izvlečeno besedilo presega to dolžino."
+label = "Največ znakov na zahtevo"
+
+[admin.settings.ai.limits.maxPages]
+description = "Varovalo: zavrni AI zahteve z več kot toliko stranmi PDF."
+label = "Največ strani na zahtevo"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Največje število hkratnih aktivnih klicev modela v celotnem pogonu."
+label = "Največja sočasnost modela"
+
+[admin.settings.ai.models]
+description = "Izberite ponudnika LLM ter pametne/hitre modele, ki jih uporablja AI pogon. Ob shranjevanju se uporabi za AI pogon."
+title = "Modeli in ponudniki"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API ključ"
+description = "Pustite prazno za uporabo lastne poverilnice okolja pogona. Velja za samogostovane uvedbe z enim pogonom."
+generic = "API ključ"
+openai = "OpenAI API ključ"
+setPlaceholder = "Shranjeno – pustite prazno, da ohranite trenutni ključ"
+
+[admin.settings.ai.models.baseUrl]
+description = "Osnovni URL končne točke, združljive z OpenAI / Ollama, npr. http://ollama:11434/v1."
+label = "Osnovni URL ponudnika"
+warning = "Osnovni URL mora kazati na zaupanja vredno interno končno točko. Pogon bo izvajal strežniške zahteve do nje, zato je nezaupanja vredna vrednost občutljiva na SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Največje število izhodnih tokenov za hitri model."
+label = "Največ tokenov hitrega modela"
+
+[admin.settings.ai.models.fastModel]
+description = "Cenejši, hitrejši model za lahka opravila. Prosto besedilo; predlogi so samo namigi."
+label = "Hitri model"
+
+[admin.settings.ai.models.provider]
+description = "S katerim ponudnikom LLM komunicira pogon."
+label = "Ponudnik"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Največje število izhodnih tokenov za pametni model."
+label = "Največ tokenov pametnega modela"
+
+[admin.settings.ai.models.smartModel]
+description = "Model z visoko zmogljivostjo za kompleksno sklepanje. Prosto besedilo; predlogi so samo namigi."
+label = "Pametni model"
+
+[admin.settings.ai.saved]
+body = "Spremembe se samodejno potisnejo v AI pogon."
+bodyNoPush = "Nastavitve so shranjene. Uporabljene bodo, ko AI pogon naslednjič prevzame svojo konfiguracijo."
+title = "AI nastavitve shranjene"
+
 [admin.settings.badge]
 clickToUpgrade = "Kliknite za ogled podrobnosti paketa"
 
@@ -938,6 +1094,25 @@ label = "Znova ustvari ob zagonu"
 description = "Število dni veljavnosti potrdila"
 label = "Veljavnost potrdila (dni)"
 
+[admin.settings.folderAccess]
+description = "Imeniki, iz katerih lahko viri map in izhodi map berejo ter v katere lahko pišejo. To je varnostna meja: avtomatizacij nikoli ni mogoče usmeriti na strežniško pot zunaj tega seznama."
+securityNote = "Pustite prazno, da v celoti onemogočite vire map in izhode. Lastni konfiguracijski imenik Stirling je vedno nedostopen."
+title = "Dostop do map"
+
+[admin.settings.folderAccess.implied]
+description = "Ti imeniki, ki jih upravlja Stirling, so vedno dovoljeni in jih tukaj ni mogoče spremeniti."
+serverStorage = "Strežniška hramba datotek"
+title = "Vedno dovoljeno"
+watchedFolder = "Nadzorovana mapa cevovoda"
+
+[admin.settings.folderAccess.roots]
+add = "Dodaj"
+empty = "Nobena mapa ni dovoljena. Viri map in izhodi so trenutno onemogočeni."
+hint = "Vnesite absolutne poti, na primer /data/inbox."
+label = "Dovoljeni koreni map"
+placeholder = "/data/inbox"
+remove = "Odstrani koren mape"
+
 [admin.settings.general]
 description = "Konfigurirajte sistemske nastavitve aplikacije, vključno z blagovno znamko in privzetim vedenjem."
 system = "Sistem"
@@ -1842,6 +2017,15 @@ export = "Izvoz"
 accessDenied = "Dostop zavrnjen"
 insufficientPermissions = "Nimate dovoljenja za izvedbo tega dejanja."
 
+[auth.callback]
+completing = "Dokončevanje avtentikacije"
+invalidToken = "Prijava OAuth ni uspela – neveljaven token."
+missingToken = "Prijava OAuth ni uspela – token ni bil prejet."
+oauthFailed = "Prijava OAuth ni uspela. Poskusite znova."
+pleaseWait = "Počakajte, da dokončamo vašo prijavo."
+signedOut = "Odjavljeni ste bili. Prijavite se znova."
+windowMayClose = "To okno lahko zaprete, ko se postopek konča."
+
 [auth.displayName]
 guest = "Gost"
 user = "Uporabnik"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Zavaruje PDF dokumente tako, da odstrani potencialno zlona
 description = "To orodje bo samodejno preimenovalo PDF datoteke na podlagi njihove vsebine. Analizira dokument, da iz besedila najde najbolj ustrezen naslov."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Samodejno zasukaj"
+tags = "samodejni zasuk,popravi usmerjenost,na glavo,postrani,poravnaj,usmeri,zaznaj usmerjenost,popravi zasuk,samodejna usmeritev,skenirano,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Prag zaupanja"
+
+[autoRotate.detectionMode]
+auto = "Samodejno"
+osd = "Samo OCR"
+text = "Samo besedilo"
+title = "Način zaznavanja"
+
+[autoRotate.error]
+failed = "Pri samodejnem zasuku PDF je prišlo do napake."
+
+[autoRotate.inferUndetected]
+title = "Zasukaj strani z nizkim zaupanjem za ujemanje"
+
+[autoRotate.report]
+applied = "{{degrees}}° v smeri urinega kazalca"
+confidenceValue = "Zaupanje {{value}}"
+noChange = "Brez spremembe"
+pageLabel = "Stran {{number}}"
+summary = "Zasukano {{rotated}} od {{total}} strani, {{unchanged}} jih je ostalo nespremenjenih"
+title = "Poročilo zaznavanja"
+
+[autoRotate.report.method]
+inferred = "Usklajeno"
+none = "Preskočeno"
+osd = "OCR"
+text = "Besedilo"
+
+[autoRotate.report.note]
+belowThreshold = "Pod pragom"
+blankPage = "Stran je prazna"
+inferredFromDocument = "Enako kot druge strani"
+noDominantDirection = "Mešane smeri besedila"
+osdFailed = "Ni najdenega berljivega besedila"
+osdNoVerdict = "Ni bilo mogoče določiti pravilne usmerjenosti"
+tesseractUnavailable = "OCR ni nameščen"
+tooFewGlyphs = "Premalo besedila"
+
+[autoRotate.results]
+title = "Rezultati samodejnega zasuka"
+
+[autoRotate.settings]
+title = "Nastavitve"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Kako gotova mora biti preverba, preden se stran obrne. Znižajte vrednost za zasuk več strani ali jo zvišajte, da več strani ostane nespremenjenih."
+title = "Prag zaupanja"
+
+[autoRotate.tooltip.description]
+text = "Ugotovi, kako mora biti vsaka stran usmerjena, in jo obrne v pravo smer. Strani, ki so že pokončne, ostanejo nespremenjene."
+
+[autoRotate.tooltip.detectionMode]
+text = "Samodejno najprej prebere besedilo na strani, nato pa stran preveri kot sliko, če to ni dovolj. Samo besedilo preskoči preverjanje slike, kar je najhitreje za dokumente, ki niso bili nikoli skenirani. Samo OCR obravnava vsako stran kot sliko."
+title = "Način zaznavanja"
+
+[autoRotate.tooltip.header]
+title = "Samodejni zasuk"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Praznih ali skoraj praznih strani ni mogoče preveriti samostojno. Ko vse berljive strani potrebujejo enak zasuk, se te strani zasukajo, da se ujemajo z njimi."
+title = "Zasukaj strani z nizkim zaupanjem za ujemanje"
+
 [autoSizeSplitPDF]
 tags = "pdf,razdelitev,dokument,organizacija"
 
@@ -2189,33 +2440,6 @@ keywords = "Ključne besede: odd, even"
 numbers = "Številke/obsegi: 5, 10-20"
 progressions = "Zaporedja: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Vrste potrdil"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Upravljajo skrbniki sistema"
-bullet2 = "V skupni rabi med pooblaščenimi uporabniki"
-bullet3 = "Predstavlja identiteto podjetja, ne posameznika"
-bullet4 = "Najbolj primerno za: uradne dokumente, podpise ekipe"
-description = "Skupno potrdilo, ki ga zagotovi vaša organizacija. Uporablja se za podpisovanje v imenu podjetja."
-title = "Organizacijsko potrdilo"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Samodejno ustvarjeno ob prvi uporabi"
-bullet2 = "Povezano z vašim uporabniškim računom"
-bullet3 = "Ni ga mogoče deliti z drugimi uporabniki"
-bullet4 = "Najbolj primerno za: osebne dokumente, individualno odgovornost"
-description = "Samodejno ustvarjeno potrdilo, edinstveno za vaš uporabniški račun. Primerno za posamezne podpise."
-title = "Osebno potrdilo"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Zahteva datoteko P12/PFX in geslo"
-bullet2 = "Lahko ga izdajajo zunanji overitelji potrdil"
-bullet3 = "Višja raven zaupanja za pravne dokumente"
-bullet4 = "Najbolj primerno za: pravno zavezujoče pogodbe, zunanjo overitev"
-description = "Uporabite svojo datoteko potrdila PKCS#12. Omogoča popoln nadzor nad lastnostmi potrdila."
-title = "Naloži lastni P12"
-
 [certSign]
 awaitingSignatures = "Čakanje na podpise"
 chooseCertificate = "Izberite datoteko potrdila"
@@ -2542,34 +2766,6 @@ server = "Strežnik"
 stepTitle = "Vir potrdila"
 upload = "Naloži"
 
-[certSign.tooltip.header]
-title = "O upravljanju podpisov"
-
-[certSign.tooltip.overview]
-bullet1 = "Preverite obstoječe podpise in njihovo veljavnost"
-bullet2 = "Oglejte si podrobne informacije o podpisnikih in potrdilih"
-bullet3 = "Dodajte nove digitalne podpise za zaščito dokumentov"
-bullet4 = "Podprte so več datotek z enostavnim krmarjenjem"
-text = "To orodje vam omogoča preveriti, ali so vaši PDF-ji digitalno podpisani, in dodati nove digitalne podpise. Digitalni podpisi dokazujejo, kdo je dokument ustvaril ali odobril, in pokažejo, ali je bil po podpisu spremenjen."
-title = "Kaj lahko to orodje naredi?"
-
-[certSign.tooltip.signing]
-bullet1 = "Podpira formate PEM, PKCS12, JKS in strežniško potrdilo"
-bullet2 = "Možnost prikaza ali skritja podpisa na PDF"
-bullet3 = "Dodajte razlog, lokacijo in ime podpisnika"
-bullet4 = "Izberite, na kateri strani postaviti vidne podpise"
-bullet5 = "Uporabite strežniško potrdilo za preprosto možnost »Sign with Stirling-PDF«"
-text = "Za podpis PDF potrebujete digitalno potrdilo (kot PEM, PKCS12 ali JKS). Podpis lahko na dokumentu prikažete ali ga ohranite nevidnega zgolj zaradi varnosti."
-title = "Dodajanje podpisov"
-
-[certSign.tooltip.validation]
-bullet1 = "Prikaže, ali so podpisi veljavni ali neveljavni"
-bullet2 = "Prikaže informacije o podpisniku in datum podpisa"
-bullet3 = "Preveri, ali je bil dokument po podpisu spremenjen"
-bullet4 = "Za preverjanje lahko uporabi prilagojena potrdila"
-text = "Ko preverite podpise, vam orodje pove, ali so veljavni, kdo je dokument podpisal, kdaj je bil podpisan in ali je bil dokument po podpisu spremenjen."
-title = "Preverjanje podpisov"
-
 [changeCreds]
 changeUsername = "Posodobite uporabniško ime. Po posodobitvi boste odjavljeni."
 credsUpdated = "Račun posodobljen"
@@ -2824,6 +3020,7 @@ next = "Naslednje"
 preview = "Predogled"
 previous = "Prejšnje"
 refresh = "Osveži"
+remaining = "Preostalo"
 retry = "Poskusi znova"
 save = "Shrani"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Napredno spremljanje"
-allInOneWorkspace = "Vse-v-enem delovni prostor za PDF (pregledovalnik, orodja in agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Namenska podpora in SLA-ji"
-fasterThroughput = "10x hitrejša prepustnost"
-fullyPrivateFiles = "Popolnoma zasebne datoteke"
-largeFileProcessing = "Obdelava velikih datotek"
-orgWideAccess = "Organizacijski nadzori dostopa"
-premiumAiModels = "Premium AI modeli"
-prioritySupport = "Prednostna podpora"
-privateDocCloud = "Zasebni oblak dokumentov"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Varni dostop do API"
-standardThroughput = "Standardna prepustnost"
-unlimitedApiAccess = "Neomejen dostop do API"
-unlimitedSeats = "Neomejeno število uporabnikov"
-
 [crop]
 autoCrop = "Samodejno obreži prazne robove"
 noFileSelected = "Izberite datoteko PDF za začetek obrezovanja"
@@ -3346,6 +3525,7 @@ message = "Privzetega upravljalnika PDF ni bilo mogoče nastaviti"
 title = "Napaka"
 
 [defaultApp.prompt]
+dontRemind = "Ne opomni me več"
 message = "Nastavite Stirling PDF kot privzeto aplikacijo za odpiranje datotek PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Prilagodi skupine"
 dropHint = "Odprite datoteke, da začnete"
 dropToAdd = "Drop files to add"
 expand = "Razširi stransko vrstico"
-files = "Datoteke"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ni konfiguriran"
 leaveMyFiles = "Zapusti Moje datoteke"
+library = "Knjižnica PDF"
 myFiles = "Moje datoteke"
 noFiles = "Še ni datotek"
 openFileManager = "Odpri upravitelja datotek"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Dodaj"
-addLabel = "Dodaj oznako…"
-categoryIconAria = "Izberite ikono za {{name}}"
-createCategory = "Ustvari kategorijo"
-delete = "Izbriši kategorijo"
 done = "Končano"
-hide = "Skrij kategorijo"
-newCategory = "Ime nove kategorije…"
-removeLabel = "Odstrani {{name}}"
-rename = "Preimenuj"
 reset = "Ponastavi na privzeto"
-search = "Išči oznake…"
-show = "Prikaži kategorijo"
 subtitle = "Združite svoje datoteke v nadrejene kategorije. V kategorijo dodajte obstoječe ali nove oznake, jo preimenujte ali ustvarite svojo. Datoteke, ki niso v nobeni od vaših kategorij, se prikažejo pod »Drugo«."
 title = "Kategorije stranske vrstice"
 
@@ -3808,6 +3977,7 @@ refresh = "Osveži s strežnika"
 remove = "Izbriši"
 removeVersion = "Odstrani to različico"
 rename = "Preimenuj"
+renamed = "Preimenovano"
 renameFolder = "Preimenuj mapo"
 resizeFolderTree = "Spremeni velikost drevesa map (smernimi tipkami, Shift za večje korake; dvoklik za samodejno prilagoditev)"
 save = "Shrani"
@@ -3910,9 +4080,7 @@ count = "Datoteke"
 folder = "Mapa"
 labels = "Oznake"
 modified = "Spremenjeno"
-name = "Ime"
 size = "Velikost"
-toolHistoryAtVersion = "Kumulativna veriga orodij"
 totalSize = "Skupna velikost"
 type = "Vrsta"
 versionHistory = "Zgodovina različic"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Vse shranjeno"
+extractCsvError = "Izvlečenje CSV ni uspelo"
+extractXlsxError = "Izvlečenje XLSX ni uspelo"
 flattenAfterFilling = "Splošči po izpolnjevanju"
+requiredAbbreviation = "obv."
+requiredFieldsError = "Izpolnite vsa obvezna polja"
 rescanFields = "Znova preglej polja"
 rescanFormFields = "Znova preglej polja obrazca"
 save = "Shrani"
+saveShortcut = "Ctrl+S za shranjevanje"
+unsavedChanges = "Neshranjene spremembe"
 
 [formFill.sidebar]
 close = "Zapri stransko vrstico"
@@ -4309,6 +4484,11 @@ desc = "Samodejno preimenuje datoteko PDF na podlagi zaznane glave"
 tags = "samodejno zaznaj,na osnovi glave,organizira,preimenuj"
 title = "Samodejno preimenuj PDF"
 
+[home.autoRotate]
+desc = "Zaznajte usmerjenost vsake strani in jo samodejno zasukajte pokonci."
+tags = "samodejni zasuk,popravi usmerjenost,na glavo,postrani,poravnaj,usmeri,zaznaj usmerjenost,popravi zasuk,samodejna usmeritev,skenirano,OSD"
+title = "Samodejni zasuk"
+
 [home.autoSizeSplitPDF]
 tags = "samodejno,razdeli,velikost"
 title = "Samodejno razdeli po vel./št."
@@ -4608,13 +4788,13 @@ hint = "Naložite PNG, JPG, SVG ali drugo slikovno datoteko, da jo postavite na
 label = "Naloži sliko"
 placeholder = "Izberite slikovno datoteko"
 
-[imageToPdf]
-tags = "pretvorba,img,jpg,slika,fotografija"
-
 [imageToPDF]
 header = "Slika v PDF"
 title = "Slika v PDF"
 
+[imageToPdf]
+tags = "pretvorba,img,jpg,slika,fotografija"
+
 [infoBanner]
 dismiss = "Opusti"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Povabljeni ste!"
 
 [landing]
 addFiles = "Dodaj datoteke"
-heroSubtitle = "Spustite sem ali dodajte obstoječi PDF, da začnete."
 mobileUpload = "Naloži iz mobilne naprave"
 openFromComputer = "Odpri iz računalnika"
 uploadFromComputer = "Naloži z računalnika"
-workbenchEmptyStateHero = "Spustite PDF kamor koli"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Prijava"
 magicLinkSent = "Čarobna povezava je poslana na {{email}}! Preverite e-pošto in kliknite povezavo za prijavo."
 mfaCode = "Koda za preverjanje pristnosti"
 mfaRequired = "Zahtevana je koda za dvofaktorsko preverjanje pristnosti"
+noAccount = "Nimate računa?"
 or = "Ali"
 password = "Geslo"
 passwordChangedSuccess = "Geslo je uspešno spremenjeno! Prijavite se z novim geslom."
@@ -4715,26 +4894,10 @@ signInWith = "Prijavite se z"
 title = "Prijava"
 unexpectedError = "Nepričakovana napaka: {{message}}"
 updatePassword = "Posodobi geslo"
-useEmailInstead = "Prijava z e-pošto"
 useMagicLink = "Namesto tega uporabite čarobno povezavo"
 username = "Uporabniško ime"
 youAreLoggedIn = "Prijavljeni ste!"
 
-[login.slides.edit]
-alt = "Urejanje PDF-jev"
-subtitle = "Z več kot ducatom orodij za začrnjevanje, podpisovanje, branje in obdelavo PDF-jev boste gotovo našli, kar potrebujete."
-title = "Uredite PDF-je za prikaz ali zaščito želenih informacij"
-
-[login.slides.overview]
-alt = "Pregled Stirling PDF"
-subtitle = "Paket v oblaku, ki postavlja zasebnost na prvo mesto: pretvarjajte, podpisujte, začrnjajte in upravljajte dokumente ter uporabite več kot 50 drugih zmogljivih orodij."
-title = "Vse na enem mestu za vse vaše potrebe s PDF"
-
-[login.slides.secure]
-alt = "Zavarovanje PDF-jev"
-subtitle = "Preprosto dodajte gesla, začrnite vsebino in upravljajte potrdila."
-title = "Zaščitite občutljive podatke v svojih PDF-jih"
-
 [margin]
 large = "Velika"
 medium = "Srednja"
@@ -4976,6 +5139,7 @@ pinButton = "Če želite, da vaše datoteke ostanejo aktivne tudi po zagonu orod
 results = "Ko orodje zaključi, korak <strong>Pregled</strong> pokaže predogled rezultatov v tem podoknu in omogoča razveljavitev operacije ali prenos datoteke. "
 runButton = "Ko je orodje nastavljeno, ta gumb omogoča zagon orodja na vseh izbranih PDF-jih."
 selectCropTool = "Izberimo orodje <strong>Obreži</strong>, da pokažemo, kako uporabiti eno izmed orodij."
+stepOf = "Korak {{current}} od {{total}}"
 toolInterface = "To je vmesnik orodja <strong>Obreži</strong>. Kot vidite, ni veliko prikazanega, ker še nismo dodali nobenih PDF datotek za delo."
 workbench = "To je <strong>Delovna miza</strong> - glavno območje, kjer si ogledujete in urejate svoje PDF-je."
 wrapUp = "Vse je pripravljeno! Spoznali ste glavna področja aplikacije in kako jih uporabljati. Kadarkoli kliknite gumb <strong>Pomoč</strong>, da ponovno odprete ta vodnik."
@@ -4988,6 +5152,26 @@ showMeAround = "Predstavi okolje"
 skipForNow = "Preskoči za zdaj"
 skipTheTour = "Preskoči ogled"
 
+[onboarding.checklist]
+dismiss = "Opusti"
+title = "Nastavite Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Zaženite Stirling izvorno na svojem računalniku"
+title = "Prenesite Stirling za namizje"
+
+[onboarding.checklist.inviteTeam]
+description = "Sodelujte s svojo ekipo"
+title = "Povabite člane ekipe"
+
+[onboarding.checklist.shareAnalytics]
+description = "Pomagajte izboljšati Stirling"
+title = "Deli anonimne podatke o uporabi"
+
+[onboarding.checklist.takeTour]
+description = "Oglejte si, kako Stirling deluje, v kratkem vodenem ogledu"
+title = "Oglejte si predstavitev"
+
 [onboarding.desktopInstall]
 body = "Stirling najbolje deluje kot namizna aplikacija. Uporabljate ga lahko brez povezave, hitreje dostopate do dokumentov in urejate lokalno na računalniku."
 selectOs = "Izberite operacijski sistem"
@@ -4996,7 +5180,21 @@ titleWithOs = "Prenesi za {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Avtentikacijska koda"
+description = "Zavarujte svoj račun s povezavo aplikacije za avtentikacijo. Skenirajte QR kodo ali vnesite nastavitveni ključ, nato potrdite 6-mestno kodo za dokončanje."
+enable = "Omogoči MFA"
+enableError = "Dvofaktorske avtentikacije ni mogoče omogočiti. Preverite kodo in poskusite znova."
+enterCode = "Vnesite 6-mestno kodo iz svoje aplikacije."
+enterCodeError = "Za nadaljevanje vnesite kodo za avtentikacijo."
+logout = "Odjava"
+openAuthenticator = "Odprite Google Authenticator, Authy ali 1Password."
 qrCodeLoading = "Ustvarjanje vaše QR kode…"
+regenerateQrCode = "Ponovno ustvari QR kodo"
+scanQrCode = "Skenirajte QR kodo ali spodaj vnesite nastavitveni ključ."
+setupError = "Dvofaktorske nastavitve ni mogoče začeti. Poskusite znova."
+setupKey = "Nastavitveni ključ (ročni vnos)"
+stepByStep = "Korak za korakom"
+success = "MFA je omogočen. Zdaj lahko nadaljujete."
+title = "Nastavitev večfaktorske avtentikacije"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Ko omogočite način prijave, lahko upravljate uporabnike, nastavite možnosti in spremljate stanje strežnika. Prvih <strong>{{freeTierLimit}}</strong> oseb na vašem strežniku lahko Stirling uporablja brezplačno."
@@ -5005,6 +5203,11 @@ adminTitle = "Pregled skrbnika"
 userBody = "Povabite sodelavce, dodelite vloge in ohranite dokumente organizirane v enem varnem delovnem prostoru. Omogočite način prijave, ko ste pripravljeni prerasti samostojno rabo."
 userTitle = "Pregled načrta"
 
+[onboarding.processorIntro]
+body = "Stirling zdaj izvaja <strong>Pravila</strong> — avtomatizirana pravila, ki razvrstijo, zaščitijo in obdelajo vsak dokument ob prihodu. Nastavite jih in spremljajte izvajanja v <strong>Processor</strong>."
+cta = "Oglejte si Processor"
+title = "Oglejte si Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Predplačniško leto"
+
+[payg.prepaid.banner]
+exhausted = "Vaša predplačniška zmogljivost je porabljena; obračun po porabi se je nadaljeval. Napolnite, da ohranite popust."
+expiring_one = "Vaše predplačniško leto se konča čez {{count}} dan. Neuporabljena zmogljivost poteče — napolnite za začetek novega leta."
+expiring_other = "Vaše predplačniško leto se konča čez {{count}} dni. Neuporabljena zmogljivost poteče — napolnite za začetek novega leta."
+low = "Preostalo vam je {{pct}}% predplačniške zmogljivosti. Napolnite kadar koli, da obdelava ostane neprekinjena."
+
+[payg.prepaid.card]
+subtitle = "Uporablja se pred obračunom po porabi in zunaj vaše omejitve porabe."
+title = "Predplačniška zmogljivost"
+
+[payg.prepaid.meter]
+capSuffix = "od {{total}} predplačniških kreditov"
+expires = "Poteče {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Porabljeno"
+healthy = "Veliko preostalo"
+low = "Zmanjkuje"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Prilepite licenčni ključ iz e-pošte"
 success = "Licenca aktivirana!"
 successMessage = "Vaša licenca je bila uspešno aktivirana. To okno lahko zaprete."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "uveljavljeno"
-enforcing = "Uveljavljanje..."
-failed = "Uveljavljanje ni uspelo"
 outputsUnavailable = "Rezultati politike niso več na voljo za prenos."
 partialOutputsUnavailable = "Nekateri rezultati politike niso več na voljo za prenos."
-retrying = "Zasedeno, ponovno poskušam..."
 runNotFound = "Izvedbe uveljavljanja ni bilo več mogoče najti."
-step = "korak {{current}}/{{total}}"
 timedOut = "Čas za uveljavljanje je potekel, preden se je izvajanje zaključilo."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Zapri"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Uveljavljanje {{names}}"
 applyingProgress = "Uveljavljanje {{names}} ({{done}} od {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} od {{total}} datotek ni bilo mogoče obdelati in so
 failureTitle = "Izvoženo brez popolnega uveljavljanja"
 printPolicyAppliedBody = "Ta PDF je bil posodobljen, da ustreza politiki. Preglejte spremembe, nato znova natisnite."
 printPolicyAppliedTitle = "Politika uveljavljena pred tiskanjem"
-queued = "+{{count}} v čakalni vrsti"
 successTitle = "{{names}} uveljavljeno"
 summaryMore = "{{first}}, {{second}} in še {{more}}"
 summaryTwo = "{{first}} in {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Uveljavljanje pred pretvorbo"
-default = "Uveljavljanje"
-export = "Uveljavljanje pred izvozom"
-input = "Uveljavljanje ob uvozu"
-print = "Uveljavljanje pred tiskanjem"
-
-[policies.field]
-accessLog = "Dnevnik dostopa"
-archiveAfter = "Arhiviraj po"
-auditTrail = "Revizijska sled"
-belowThreshold = "Pod pragom"
-destination = "Cilj"
-frameworks = "Okviri"
-immutableHold = "Nespremenljivo zadržanje"
-keepFor = "Hrani za"
-minConfidence = "Najm. zaupanje"
-notify = "Obvesti ob usmerjanju"
-onViolation = "Ob neskladnosti"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Dodaj"
-addPlaceholder = "Dodaj oznako…"
-customNote = "Prilagojeno za vašo ekipo."
-defaultNote = "Uporablja se vgrajena privzeta nastavitev, deljena z vašo ekipo."
-duplicate = "\"{{name}}\" že obstaja."
-edit = "Uredi oznake"
-empty = "Oznak še ni."
-export = "Izvozi JSON"
-iconAria = "Izberite ikono za {{name}}"
-import = "Uvozi JSON"
-importError = "Te datoteke ni bilo mogoče uvoziti."
-managedNote = "Ekipne oznake upravlja vodja vaše ekipe."
-modalSubtitle = "Deljeno z vso vašo ekipo. Klasifikator izbere oznake, ki ustrezajo vsakemu dokumentu."
-modalTitle = "Klasifikacijske oznake"
-pickIcon = "Uporabi ikono {{label}}"
-removeAria = "Odstrani {{name}}"
-resetToDefault = "Ponastavi na privzeto"
-saveForTeam = "Shrani za ekipo"
-saving = "Shranjevanje…"
-sectionLabel = "Klasifikacijske oznake"
-startFromScratch = "Začni od začetka"
-teamCount = "ekipne oznake"
-tooLong = "Oznake imajo lahko največ {{max}} znakov."
-ungrouped = "Nerazvrščeno"
-view = "Prikaži oznake"
+categoryCount = "kategorij"
+hideCategory = "Skrij kategorijo"
+labelCount = "oznak"
+sharedNote = "Te oznake so vgrajene in v skupni rabi za celotno ekipo."
+showCategory = "Pokaži kategorijo"
 
 [policies.pii]
 account = "Številke računov (označene)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Ameriške bančne usmerjevalne številke (ABA)"
 ssn = "Številke socialnega zavarovanja"
 
-[policies.settings]
-noneExport = "Ob izvozu se trenutno ne izvaja noben pravilnik."
-noneUpload = "Ob nalaganju se trenutno ne izvaja noben pravilnik."
-onExport = "Ob izvozu"
-onUpload = "Ob nalaganju"
-reorderHandle = "Povlecite za prerazporeditev"
-runOrderDesc = "Ko se na isti sprožilec izvede več pravilnikov, se izvedejo v tem vrstnem redu — vsak na izhodu prejšnjega pravilnika. Povlecite za prerazporeditev."
-title = "Nastavitve pravilnikov"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Možnosti pravilnikov"
-policySettings = "Nastavitve pravilnikov"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Znova poskusi neuspele pravilnike ({{count}})"
-rowProgress = "Obdelanih {{completed}} od {{total}} datotek"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Kaj je pravilnik?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Samodejno najde in prečrni občutljive podatke — kot so številke socialnega zavarovanja in kartic — tako da jih v dokumentu ni mogoče prebrati."
-sanitize = "Odstrani skriti JavaScript iz datoteke, tako da se ob odprtju nič ne zažene samodejno, ko jo nekdo odpre."
-watermark = "Odtisne viden znak (npr. \"Zaupno\") čez vsako stran."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Zapri"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} se uveljavlja..."
 badgeRan = "Pravilnik {{name}} se je izvedel za to datoteko"
+badgeRunning = "{{name}} se izvaja..."
 blockingAction = "{{action}} je blokirano med uveljavljanjem pravilnika, počakajte..."
 dismiss = "Opusti prekrivanje"
 enforcingTitle = "Uveljavljanje pravilnika..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Prikaži datoteko (pravilnik se še uveljavlja)"
 [policyOption]
 autoRedactPhi = "Samodejno prekrij PHI"
 blockExport = "Blokiraj izvoz"
+ccpa = "CCPA"
 contracts = "Pogodbe"
 documents = "Dokumenti"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Paket Editor"
 subscribed = "Paket Processor"
 unlinked = "Ni povezano"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Inicializiraj iz dokumenta"
-sectionsAriaLabel = "Razdelki graditelja agentov"
-selectorAriaLabel = "Agenti"
-subtitle = "Oblikujte, preizkusite in uvedite AI agente, ki klasificirajo, izločajo iz dokumentov in jih usmerjajo. Določite scenarije, omejite dostop do orodij, zaženite zlati nabor in objavite različico."
-title = "Graditelj agentov"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Prekliči"
-dropzoneText = "Izberite vzorčni dokument (PDF ali slika)"
-lead = "Spustite vzorčni dokument in predlagali bomo scenarije ter shemo izločanja, ki jo lahko izpopolnite. Nič ni objavljeno, dokler tega ne pregledate."
-submit = "Inicializiraj agenta"
-subtitle = "Ustvarite začetno različico novega agenta iz ene reprezentativne datoteke"
-title = "Inicializacija iz dokumenta"
-
-[portal.agentBuilder.empty]
-description = "Inicializirajte agenta iz vzorčnega dokumenta, da ustvarite začetne scenarije in shemo izločanja, nato ga izpopolnite in objavite."
-title = "Agentov še ni"
-
-[portal.agentBuilder.evals]
-casesPassing = "Uspešni primeri"
-columnCase = "Eval primer"
-columnLatency = "Zakasnitev"
-columnResult = "Rezultat"
-fail = "neuspeh"
-goldenSetPassRate = "Stopnja uspešnosti zlatega nabora"
-latencyMs = "{{ms}} ms"
-notRun = "ni zagnano"
-pass = "uspeh"
-passRate = "Stopnja uspešnosti"
-runEvals = "Zaženi evalvacije"
-
-[portal.agentBuilder.evals.empty]
-description = "Evalvacije spremenijo vaše scenarije v ponovljiv zlati nabor. Nadgradite za spremljanje stopnje uspešnosti skozi čas in pogojevanje objav z njo."
-title = "Zlatega nabora še ni"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "po zlatih naborih"
-activeAgents = "Aktivni agenti"
-avgPassRate = "Povp. stopnja uspešnosti evalvacij"
-fleetWide = "v celotni floti"
-latestPublished = "Nazadnje objavljeno"
-scenarios = "Scenariji"
-testCases = "testni primeri"
-totalDescription_one = "skupaj {{count}}"
-totalDescription_other = "skupaj {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Dodaj"
-addScenario = "Dodaj scenarij"
-enable = "Omogoči"
-expectationLabel = "Pričakovano vedenje"
-expectationPlaceholder = "Kaj naj agent naredi"
-inEval = "v evalvaciji"
-mute = "Utišaj"
-muted = "utišano"
-nameLabel = "Ime"
-namePlaceholder = "npr. eskalacija skladnosti"
-
-[portal.agentBuilder.tabs]
-evals = "Evalvacije"
-scenarios = "Scenariji"
-tools = "Orodja"
-versions = "Različice"
-
-[portal.agentBuilder.tools]
-broadAccess = "Širok dostop"
-deniedHint = "Izbrana orodja so blokirana. Vse drugo ostane klicljivo."
-deniedTools = "Zavrnjena orodja"
-governanceGate = "Upravljanje orodij je na voljo v paketu Enterprise."
-restricted = "Omejeno"
-restrictedAccess = "Omejen dostop do orodij"
-restrictedDescription = "Dovolite vsa orodja razen tistih, ki jih spodaj zavrnete."
-
-[portal.agentBuilder.versions]
-current = "trenutno"
-historyGate = "Celotna zgodovina različic in povrnitev sta na voljo v paketu Enterprise."
-publish = "Objavi"
-rollBack = "Povrni"
-
 [portal.assistant]
 close = "Zapri pomočnika"
 error = "Pomočnika ni bilo mogoče doseči."
@@ -6365,9 +6346,21 @@ typing = "Tipkanje"
 loading = "Nalaganje"
 redirectingToEditor = "Preusmerjanje v urejevalnik..."
 
+[portal.billing.activation]
+maybeLater = "Morda pozneje"
+title = "Vklopite Processor"
+
+[portal.billing.activation.payg]
+sub = "Nastavite mesečno omejitev. Plačajte za izvedeno."
+title = "Plačilo po porabi"
+
+[portal.billing.activation.prepay]
+badge = "2 meseca brezplačno"
+sub = "En račun, kartica ali bančno nakazilo."
+title = "Predplačajte leto"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function ni vrnila client_secret."
-subtitle = "Dodajte kartico, da nadaljujete po brezplačni dodelitvi paketa Editor. Stripe poskrbi za ostalo."
 title = "Vklopite paket Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Vaše plačilo je uspelo, vendar aktivacija traja nekoliko dlje kot obi
 close = "Zapri"
 title = "Skoraj smo tam"
 
+[portal.billing.checkout.cap]
+amountAria = "Mesečna omejitev porabe"
+back = "Nazaj"
+continue = "Nadaljuj na plačilo"
+error = "Omejitve porabe ni bilo mogoče nastaviti"
+finePrint = "Računi se izdajajo mesečno. Prekličete lahko kadar koli."
+noLimit = "Brez omejitve"
+note = "Nikoli vam ne zaračunamo prek vaše omejitve. Obdelava se samo začasno ustavi."
+perMonth = "/ mes."
+title = "Nastavite omejitev porabe"
+
+[portal.billing.checkout.card]
+fields = "Številka kartice · MM / LL · CVC · ZIP"
+label = "Podatki kartice"
+note = "Podatke kartice zbira Stripe. Stirling nikoli ne shranjuje PAN ali CVC."
+
 [portal.billing.checkout.error]
 title = "Checkouta ni bilo mogoče začeti"
 
@@ -6383,10 +6392,9 @@ body = "Vaše plačilo je bilo izvedeno. Vklapljamo merjeno obdelavo v vseh vaš
 hint = "Pustite to okno odprto."
 title = "Aktiviranje vašega paketa Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "v portal env za omogočanje checkouta v aplikaciji."
-bodyBefore = "Nastavite"
-title = "Stripe ni konfiguriran"
+[portal.billing.checkout.pay]
+limit = "Mesečna omejitev porabe {{amount}}/mes. Obdelava se ustavi pri omejitvi."
+limitNoCap = "Brez omejitve porabe. Obdelava se ne bo ustavila. Računi se izdajajo mesečno."
 
 [portal.billing.enterpriseUpsell]
 cta = "Ustvarite svojo ponudbo Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Trenutni paket"
 freeForever = "Brezplačno za vedno"
 noTeamResolved = "V vaši denarnici še ni razrešene ekipe — osvežite in poskusite znova."
 ownerOnly = "Samo lastnik ekipe lahko vklopi paket Processor."
+payInvoice = "Plačaj račun za dokončanje"
 planName = "Editor"
 ssoIncluded = "SSO vključen"
 switchOnProcessor = "Vklopi Processor →"
 unlimitedUsers = "Neomejeno uporabnikov"
+viewQuote = "Ogled ponudbe"
 
 [portal.billing.invoices]
 columnAmount = "Znesek"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Neposredne API zahteve"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Avtomatizacije in cevovodi"
 segmentAutomationLabel = "Avtomatizacija"
+sizeMultiplier = "{{formatted}} datotek PDF je uporabilo množitelj velikosti"
+summary = "{{unique}} edinstvenih · {{units}} merskih enot · {{avg}} povprečno na PDF"
+summaryNoRate = "{{unique}} edinstvenih · {{units}} merskih enot"
 unit = "merjeni PDF-ji"
+unitsPending_one = "{{units}} merska enota čaka na sinhronizacijo iz povezanih instanc"
+unitsPending_other = "{{units}} merskih enot čaka na sinhronizacijo iz povezanih instanc"
+
+[portal.billing.prepaid]
+capSuffix = "od {{total}} predplačniških kreditov"
+expires = "Poteče {{date}}"
+eyebrow = "Predplačniška zmogljivost"
+note = "Uporablja se pred obračunom po porabi in zunaj vaše omejitve porabe."
+topUp = "Napolni"
+
+[portal.billing.prepaid.buy]
+back = "Nazaj"
+calcTitle = "Izračunajte svoje letno plačilo"
+cancel = "Prekliči"
+cancelPurchase = "Prekliči nakup"
+close = "Zapri"
+continueToPayment = "Nadaljuj na plačilo"
+finalise = "Dokončaj"
+invoiceErrorTitle = "Računa ni bilo mogoče ustvariti"
+loadingTitle = "Nalaganje vaše ponudbe"
+payTitle = "Plačajte za svoje leto"
+step = "Korak {{current}} od {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Spremeni"
+deployRow = "Uvedba"
+done = "Končano"
+enterpriseHint = "To je raven za podjetja. Pri tem obsegu podjetniške cene presegajo vsak samopostrežni popust. Zaklep cene, pogoji in ponudba v nekaj minutah."
+governanceRow = "Upravljanje"
+governanceValue = "{{label}} · {{count}} pravil"
+handlesLabel = "Vaš Processor"
+handlesValue = "obdela {{volume}} kreditov / mes."
+pipelinesLabel = "Cevovodi"
+policiesMeta = "{{count}} pravil"
+poolCaption = "En sklad {{credits}} kreditov za leto. Težki meseci si izposodijo od lažjih."
+priceLabel = "Vaše leto · 12 mesecev za ceno 10"
+rateUnknown = "Točno ceno bomo prikazali ob zaključku nakupa."
+savings = "Prihranite {{amount}} · 2 meseca brezplačno."
+sizingRow = "Velikost"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Skupaj uporabnikov"
+
+[portal.billing.prepaid.consent]
+label = "Razumem, da se ob porabi moje predplačniške zmogljivosti ali njenem poteku po 12 mesecih obdelava samodejno nadaljuje po standardni merjeni tarifi plačila po porabi (do moje omejitve porabe), razen če prekličem, in da lahko kadar koli prekličem v obračunskem portalu."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Upravlja Stirling. Deluje v nekaj minutah."
+cloudValue = "Stirling Cloud · Upravljano"
+selfhost = "Samogostovano"
+selfhostDesc = "Deluje na zasebni infrastrukturi. Enaka tarifa."
+selfhostValue = "Samogostovano · Zasebna infrastruktura"
+
+[portal.billing.prepaid.offer]
+cta = "Preglej ponudbo"
+subtitle = "Predplačajte leto obdelave PDF in prejmite dva meseca brezplačno, uporabljeno pred obračunom po porabi, zunaj vaše omejitve porabe."
+title = "Pridobite 12 mesecev za ceno 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Ime imetnika računa"
+accountNamePlaceholder = "npr. Jane Smith"
+companyName = "Ime podjetja (neobvezno)"
+companyNamePlaceholder = "npr. Acme Inc."
+downloadInvoice = "Prenesi račun"
+payOnline = "Plačaj prek spleta"
+poNumber = "Številka naročilnice (neobvezno)"
+poNumberPlaceholder = "npr. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Napredno"
+advancedDesc = "Cevovodi poganjajo večino vaše obdelave."
+none = "Brez"
+noneDesc = "Cevovodov še ne izvajate. Vklopite jih lahko kadar koli."
+standard = "Standardno"
+standardDesc = "Nekaj cevovodov ponovno obdela prispele datoteke PDF."
+
+[portal.billing.prepaid.posture]
+essentials = "Osnove"
+essentialsDesc = "Razvrščanje, privzeto, plus skupna raba"
+governed = "Upravljano"
+governedDesc = "Doda varnost in usmerjanje"
+regulated = "Regulirano"
+regulatedDesc = "Vsaka kategorija, vklj. skladnost, hrambo, zajem"
+
+[portal.billing.prepaid.review]
+download = "Prenesi ponudbo (PDF)"
+downloading = "Pripravljanje…"
+share = "deli za odobritev"
+
+[portal.billing.prepaid.size]
+compact = "Kompaktno"
+compactDesc = "Datoteke pod 25 MB, brez stroškov podatkov"
+heavy = "Težko"
+heavyDesc = "Skenirano ali z veliko slikami, običajno 50 MB+"
+standard = "Standardno"
+standardDesc = "Večinoma majhno, nekaj skenov nad 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Porabljeno"
+healthy = "Veliko preostalo"
+low = "Zmanjkuje"
 
 [portal.billing.spendLimit]
 adjustLimit = "Prilagodi omejitev"
@@ -6494,6 +6608,8 @@ label = "Predvidena prekoračitev."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Poraba ta mesec"
+freeRemaining_one = "Preostala je {{formatted}} brezplačna datoteka PDF"
+freeRemaining_other = "Preostalo je {{formatted}} brezplačnih datotek PDF"
 processed_one = "Obdelan {{formattedCount}} PDF."
 processed_other = "Obdelanih {{formattedCount}} PDF-jev."
 processedWithRate_one = "Obdelan {{formattedCount}} PDF, po {{rate}} vsak."
@@ -6534,6 +6650,350 @@ signature = "podpis"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nova povezava"
+createTitleFor = "Poveži {{name}}"
+delete = "Izbriši"
+edit = "Uredi"
+editTitle = "Uredi povezavo"
+unsupportedType = "Te vrste povezave tukaj ni mogoče urejati."
+
+[portal.connections.categories.advanced]
+description = "Za storitev, ki je še ne podpiramo."
+label = "Napredno"
+
+[portal.connections.categories.audit]
+description = "Zabeležite, kaj se je zgodilo z dokumentom, tam, kjer vaši revizorji že preverjajo."
+label = "Revizijsko in skladnostno beleženje"
+
+[portal.connections.categories.notify]
+description = "Obvestite drug sistem, da se je nekaj zgodilo."
+label = "Obvestila in potek dela"
+
+[portal.connections.categories.security]
+description = "Preglejte ali označite dokument, preden se premakne naprej."
+label = "Varnost in razvrščanje"
+
+[portal.connections.categories.signing]
+description = "Pošljite dokument v podpis ali notarsko overitev."
+label = "E-podpis in notarska overitev"
+
+[portal.connections.categories.storage]
+description = "Kam končajo obdelani dokumenti – v bucket, pogon, zahtevek ali stran."
+label = "Datoteke in priloge"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling to shrani šifrirano in nikoli več ne prikaže."
+label = "Dostopni token"
+
+[portal.connections.commonFields.apiKey]
+label = "API ključ"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Koraki, ki uporabljajo to povezavo, lahko kličejo samo poti pod tem URL, nikoli drugega gostitelja."
+label = "URL strežnika"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Gostitelj"
+
+[portal.connections.commonFields.password]
+label = "Geslo"
+
+[portal.connections.commonFields.port]
+label = "Vrata"
+
+[portal.connections.commonFields.username]
+label = "Uporabniško ime"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Prilepite URL, ki vam ga je dala storitev. Klicati je mogoče samo poti pod njim."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Ime povezave"
+namePlaceholder = "npr. Produkcija"
+
+[portal.connections.picker]
+cancel = "Prekliči"
+createNew = "Nova povezava..."
+placeholder = "Izberite povezavo"
+save = "Shrani povezavo"
+
+[portal.connections.picker2]
+back = "Spremeni integracijo"
+heading = "Kaj želite povezati?"
+noResultsBody = "Tega še ne podpiramo – povejte nam o tem in razmislili bomo o dodajanju."
+noResultsTitle = "Nič se ne ujema z \"{{query}}\""
+searchPlaceholder = "Išči integracije – poskusite \"sign\", \"ocr\" ali ime izdelka"
+
+[portal.connections.types.api]
+description = "Kličite kateri koli HTTP API iz pravila. Izberete URL, avtentikacijo in payload."
+label = "API po meri"
+
+[portal.connections.types.api.fields.authType]
+label = "Avtentikacija"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Uporabniško ime in geslo"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token v glavi po meri"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Brez"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Prijava za token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Koraki, ki uporabljajo to povezavo, lahko kličejo samo poti pod tem URL, nikoli drugega gostitelja."
+label = "Osnovni URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Ime glave"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Pot za prijavo"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Geslo"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Če API odgovori s povezavo za prenos, je mogoče pridobiti samo te gostitelje. Ločite z vejicami. Pustite prazno, da dovolite samo lastnega gostitelja osnovnega URL."
+label = "Dovoljeni gostitelji rezultatov"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Pošlji token kot to glavo"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Glava odgovora, v kateri klic za prijavo vrne token, npr. X-Auth-Token."
+label = "Glava odgovora tokena"
+
+[portal.connections.types.api.fields.username]
+label = "Uporabniško ime"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Preglejte dokumente za zlonamerno programsko opremo na strežniku, ki ga upravljate – nič ne zapusti vašega omrežja."
+label = "ClamAV (samogostovano)"
+
+[portal.connections.types.cloudmersive]
+description = "Pregled virusov in vsebine za dokumente v pravilu."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokirajte dokumente, ki vsebujejo makre, izvršljive datoteke, skripte ali vdelane predmete – ne samo znane zlonamerne programske opreme."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Priložite obdelane dokumente strani Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Pošljite dokumente v ConsignO Cloud (Notarius) za elektronski podpis in notarsko overitev."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Vaše okolje ConsignO Cloud, vključno z /api/v1."
+label = "URL strežnika"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API ključ"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API skrivnost"
+
+[portal.connections.types.consigno.fields.password]
+label = "Geslo"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Potrebno samo, če vaša organizacija uporablja tenant-e."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Uporabniško ime"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Objavite sporočilo v Discord, ko pravilo obdela dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indeksirajte revizijski dogodek v Elasticsearch vsakič, ko pravilo obdela dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Preverjajte FTP ali FTPS strežnik za nove dokumente."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Način povezave"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktivno"
+passive = "Pasivno (priporočeno)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Navadni FTP pošilja poverilnice in datoteke nešifrirano; izberite FTPS, če ga strežnik podpira."
+label = "Šifriranje"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (eksplicitno / AUTH TLS)"
+implicit = "FTPS (implicitno)"
+none = "Brez (navadni FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Objavite sporočilo v prostor Google Chat, ko se pravilo izvede."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Priložite obdelane dokumente zadevi Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Pošljite dokument ali obvestilo po Email, ko se pravilo izvede."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Shranjujte obdelane dokumente v Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Geslo aplikacije"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Zaznajte osebne podatke v besedilu dokumenta z uporabo strežnika Presidio, ki ga upravljate."
+label = "Presidio (samogostovano)"
+
+[portal.connections.types.purview]
+description = "Preberite in uporabite oznake občutljivosti Microsoft Purview na datotekah PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Neobvezno. Potrebno samo za izbiro oznak po imenu; označevanje deluje tudi brez tega."
+label = "ID aplikacije (odjemalca)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Skrivnost odjemalca"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Vtisnjeno na vsako oznako kot njen SiteId, da orodja, ki podpirajo Purview, vedo, katera organizacija jo je uporabila."
+label = "ID imenika (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket, iz katerega lahko viri berejo in v katerega lahko izhodi cevovodov pišejo."
+label = "Shramba S3"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID dostopnega ključa"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Pustite prazno za AWS. Nastavite to za MinIO ali drugo shrambo, združljivo s S3."
+label = "Končna točka"
+
+[portal.connections.types.s3.fields.region]
+label = "Regija"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Skrivni dostopni ključ"
+
+[portal.connections.types.sendgrid]
+description = "Pošljite dokument ali obvestilo po Email, ko se pravilo izvede."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Preverjajte SFTP (SSH) strežnik za nove dokumente."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Neobvezno. SHA-256 prstni odtis gostiteljskega ključa strežnika (iz `ssh-keyscan host | ssh-keygen -lf -`). Ko je nastavljen, je sprejet samo strežnik, ki predstavi ta ključ; ko je prazno, se ključ, viden ob prvi povezavi, pripne in poznejše spremembe so zavrnjene."
+label = "Prstni odtis gostiteljskega ključa"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Geselska fraza ključa"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Pustite prazno, če se namesto tega avtenticirate z zasebnim ključem."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Neobvezno. Prilepite zasebni ključ OpenSSH za avtentikacijo s ključem namesto z geslom."
+label = "Zasebni ključ"
+
+[portal.connections.types.slack]
+description = "Objavite sporočilo v Slack, ko pravilo obdela dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Spremljajte omrežno skupno rabo SMB / CIFS (Windows ali Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Omrežna skupna raba"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Neobvezno. Domena Windows ali delovna skupina, če jo vaš strežnik uporablja."
+label = "Domena"
+
+[portal.connections.types.smb.fields.share]
+label = "Skupna raba"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Pošljite revizijski dogodek v Splunk vsakič, ko pravilo obdela dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Pošljite revizijski dogodek v Sumo Logic HTTP zbiralnik."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Objavite sporočilo v kanal Teams, ko se pravilo izvede."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Objavite vsak dokument ali samo podrobnosti na URL, ki ga izberete."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Sprožite scenarij Zap ali Make iz pravila."
+label = "Zapier in Make"
+
+[portal.docs]
+browse = "Prebrskaj dokumentacijo"
+viewSource = "Ogled izvorne kode na GitHub"
+
 [portal.docs.authentication]
 codeCaption = "vsaka zahteva"
 eyebrow = "ZAČETEK"
@@ -6619,11 +7079,19 @@ title = "Uradni SDK-ji"
 beta = "Beta"
 deprecated = "Zastarelo"
 
+[portal.docs.search]
+empty = "Ni ujemajoče se dokumentacije"
+placeholder = "Išči dokumentacijo"
+results = "{{count}} rezultatov"
+
 [portal.docs.skills]
 eyebrow = "VEŠČINE"
 lead = "Vključene, poimenovane zmožnosti, ki jih vaš agent prikliče kot eno orodje. Vsaka veščina je deterministična veriga operacij s priloženimi evalvacijami."
 title = "Veščine agenta"
 
+[portal.docs.toc]
+title = "Na tej strani"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCA"
@@ -6697,6 +7165,8 @@ type = "Vrsta"
 user = "Uporabnik"
 
 [portal.documents.queue.empty]
+connectSource = "Poveži vir"
+createPipeline = "Ustvari cevovod"
 description = "Ko viri dovajajo dokumente v vaše pipeline, se bodo tukaj prikazali za pregled."
 title = "V čakalni vrsti ni dokumentov"
 
@@ -6806,13 +7276,71 @@ description = "V tem pogledu je prišlo do nepričakovane napake. Poskusite znov
 retry = "Poskusite znova"
 title = "Na tej strani je šlo nekaj narobe"
 
+[portal.home.download]
+back = "Nazaj"
+body = "Prenesite namizno aplikacijo ali samogostujte strežnik."
+done = "Končano"
+guide = "Odprite vodnik {{name}}"
+openInBrowser = "Namesto tega odpri v brskalniku"
+sectionDesktop = "Namizna aplikacija"
+sectionSelfHosted = "Samogostovano"
+title = "Namestite Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Zaženite uradno sliko na svojem strežniku."
+note = "Odpre se na :8080. Privzeta prijava: admin / stirling."
+tagline = "Zaženite strežnik v vsebniku"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Namestite uradni Helm chart."
+note = "Dodajte PVC za /configs, da ohranite nastavitve."
+tagline = "Uvedite v gručo s Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Izvorne gradnje za vašo distribucijo."
+guideBtn = "Ogled možnosti namestitve za Linux"
+note = "Gradnje AppImage, .deb in .rpm so na voljo za pogoste distribucije."
+tagline = "Izvorna namizna aplikacija za vašo distribucijo"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ali prek Homebrew"
+detailBody = "Zaženite namestitveni program ali uporabite Homebrew."
+downloadBtn = "Prenesi za macOS"
+tagline = "Izvorna aplikacija za Apple silicon in Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Zaženite .jar na fizičnem strežniku."
+downloadBtn = "Prenesi .jar"
+note = "Zahteva Java 21+. Odpre se na :8080; privzeta prijava admin / stirling."
+runLabel = "Nato ga zaženite"
+tagline = "Zaženite .jar na fizičnem strežniku"
+title = "Ročna nastavitev strežnika"
+
+[portal.home.download.windows]
+altLabel = "Ali prek winget"
+detailBody = "Zaženite namestitveni program ali uporabite upravitelja paketov."
+downloadBtn = "Prenesi namestitveni program"
+tagline = "Izvorna aplikacija za Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktivnih"
-invite = "Povabite sodelavce"
+activeOfDeployed = "{{active}} od {{total}} aktivnih ta mesec"
 name = "Stirling PDF Editor"
 open = "Odpri v brskalniku"
 updated = "posodobljeno {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Dokončaj uvedbo"
+options = "Ogled možnosti uvedbe"
+start = "Uvedi Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Samogostovano · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Dober dan"
 evening = "Dober večer"
 morning = "Dobro jutro"
 
-[portal.home.onboarding]
-dismiss = "Opusti nastavitev"
-notStarted = "Ni začeto"
-progress = "Dokončano {{done}} od {{total}}"
-title = "Dokončajte nastavitev"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC za celotno organizacijo, zavezane cene glede na količino in air-gapped namestitev."
-cta = "Začnite preizkus"
-ctaQuote = "Pridobite ponudbo"
-lead = "Za 250+ zaposlenih."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Namestite namizno aplikacijo, za vedno brezplačno."
-title = "Prenesite PDF urejevalnik"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktivnih · {{recommended}} priporočenih"
-chip = "{{active}} aktivnih"
-title = "Vklopite pravilnike"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} povezanih · vsak PDF upravljan tam, kjer pristane"
-chip = "{{connected}} povezanih"
-title = "Povežite svoje vire"
-
-[portal.home.quickActions]
-subtitle = "Najpomembnejša opravila za danes"
-title = "Hitra dejanja"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-koračni sestavljalnik nad tipizirano knjižnico operacij"
-title = "Zgradite pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenti, webhooks, nadzorovane mape"
-title = "Povežite vir"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Omejen ključ z omejitvami hitrosti in seznamom dovoljenih IP"
-title = "Izdajte API ključ"
-
 [portal.infrastructure]
 manageEditorDeployment = "Upravljaj namestitev urejevalnika"
 sectionsAriaLabel = "Razdelki infrastrukture"
@@ -6878,13 +7363,9 @@ heading = "API ključi"
 subheading = "Omejene poverilnice z omejitvami hitrosti po ključu, dovoljenji in seznami dovoljenih IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Dovoljeni IP-ji"
-anyIp = "Kateri koli IP (brez seznama dovoljenih)"
 created = "Ustvarjeno"
 lastUsed = "Nazadnje uporabljeno"
-permissions = "Dovoljenja"
-rateLimit = "Omejitev hitrosti"
-rateLimitValue = "{{value}} zahtev/min"
+revoke = "Prekliči ključ"
 usageMonth = "Uporaba ta mesec"
 usageToday = "Uporaba danes"
 
@@ -6892,6 +7373,20 @@ usageToday = "Uporaba danes"
 description = "Ustvarite omejen ključ, da začnete klicati Stirling API."
 title = "API ključev še ni"
 
+[portal.infrastructure.apiKeys.error]
+load = "Vaših API ključev ni bilo mogoče naložiti. Poskusite znova."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Preklicati \"{{name}}\"? Vsaka integracija, ki še uporablja ta ključ, bo takoj začela prejemati napake 401. Tega ni mogoče razveljaviti."
+cancel = "Prekliči"
+confirm = "Prekliči ključ"
+title = "Prekliči API ključ"
+
+[portal.infrastructure.attestationLabel]
+attested = "Potrjeno"
+inScope = "V obsegu"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtriraj revizijske dogodke po kategoriji"
 heading = "Revizijski dnevniki"
@@ -6935,6 +7430,7 @@ all = "Vse"
 auth = "Overjanje"
 config = "Konfiguracija"
 elevation = "Povišanje dostopa"
+policy = "Pravilnik"
 processing = "Obdelava"
 security = "Varnost"
 
@@ -6944,19 +7440,35 @@ title = "Nimate dostopa"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguracija"
-elevation = "Povišanje dostopa"
+policy = "Pravilnik"
 processing = "Obdelava"
 totalEvents = "Skupaj dogodkov · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Auth"
+config = "Konfiguracija"
+elevation = "Povišanje"
+policy = "Pravilnik"
+processing = "Obdelava"
+security = "Varnost"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Napaka"
+info = "Info"
+success = "Uspeh"
+warning = "Opozorilo"
+
+[portal.infrastructure.certLabel]
+certified = "Certificirano"
+inProgress = "V teku"
+notStarted = "Ni začeto"
+
 [portal.infrastructure.createKey]
 cancel = "Prekliči"
 createKey = "Ustvari ključ"
 done = "Končano"
-ipAllowlistHelper = "Z vejicami ločeni razponi CIDR. Pustite prazno, da dovolite kateri koli IP."
-ipAllowlistLabel = "Seznam dovoljenih IP"
 keyNameLabel = "Ime ključa"
 keyNamePlaceholder = "npr. Produkcija · zajem"
-permissionsLabel = "Dovoljenja"
 secretKeyCaption = "Skrivni ključ"
 secretWarning = "Shranite to v upravljalnik skrivnosti. Stirling vedno shrani samo hash — pozneje ga ni mogoče obnoviti."
 subtitle = "Omejite ključ na najmanjši obseg, ki ga potrebuje. Kadar koli ga lahko zavrtite ali prekličete."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopirajte to skrivnost zdaj — ne bo več prikazana."
 title = "Ustvari API ključ"
 titleCreated = "Ključ ustvarjen"
 
+[portal.infrastructure.deployLabel]
+live = "V živo"
+queued = "V čakalni vrsti"
+rolledBack = "Povrnjeno"
+rolling = "Uvajanje"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Stanje v živo za vsako nameščeno regijo Stirling — zakasnitev
 description = "Nameščene regije se prikažejo tukaj, ko je vaš delovni prostor pripravljen."
 title = "Ni nameščenih regij"
 
+[portal.infrastructure.keyLabel]
+active = "Aktivno"
+revoked = "Preklicano"
+
+[portal.infrastructure.modelLabel]
+active = "Aktivno"
+degraded = "Oslabljeno"
+disabled = "Onemogočeno"
+
 [portal.infrastructure.models]
 heading = "Modeli"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Stanje"
 type = "Vrsta"
 version = "Različica"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/klic"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktivni modeli"
 avgLatency = "Povp. zakasnitev"
@@ -7049,6 +7580,17 @@ modelForAria = "Model za {{operation}}"
 operation = "Operacija"
 routedTo = "Usmerjeno na"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasifikacija"
+extraction = "Ekstrakcija"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Oslabljeno"
+down = "Nedelujoče"
+healthy = "Zdravo"
+
 [portal.infrastructure.security.access.byok]
 description = "Zagotovite ključ iz svojega KMS. Stirling z njim šifrira, vendar lahko še vedno bere."
 label = "Prinesite svoj ključ (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeli"
 security = "Varnost"
 storage = "Shramba"
 
+[portal.integrations]
+addAnother = "Dodaj še eno"
+availableHeading = "Na voljo"
+comingSoonHeading = "Kmalu na voljo"
+connect = "Poveži"
+connectedHeading = "Povezano"
+connectionCount_one = "{{count}} povezava"
+connectionCount_other = "{{count}} povezav"
+customApi = "API po meri"
+searchPlaceholder = "Išči integracije"
+subtitle = "Vse, s čimer lahko Stirling komunicira. Poverilnice se tukaj ustvarijo enkrat, nato pa jih uporabljajo viri, pravilniki in cevovodi."
+title = "Integracije"
+typedName = "Ime za {{tool}}"
+
+[portal.integrations.filters]
+all = "Vse"
+audit = "Revizija"
+connected = "Povezano"
+notify = "Obvesti"
+security = "Varnost"
+signing = "Podpisovanje"
+storage = "Shramba"
+
+[portal.integrations.status]
+connected = "Povezano"
+
+[portal.integrations.table]
+integration = "Integracija"
+worksWith = "Deluje z"
+
+[portal.integrations.worksWith]
+pipelines = "Cevovodi"
+policies = "Pravilniki"
+sources = "Viri"
+
+[portal.legal]
+draft = "{{label}} · osnutek"
+loadError = "Tega dokumenta ni bilo mogoče naložiti. Poskusite znova."
+loading = "Nalaganje…"
+title = "Pravni dokument"
+
 [portal.nav]
 agent-builder = "Graditelj agentov"
 components = "Komponente"
@@ -7182,6 +7765,7 @@ documents = "Dokumenti"
 editor = "Urejevalnik"
 home = "Domov"
 infrastructure = "Infrastruktura"
+integrations = "Integracije"
 pipelines = "Pipelines"
 policies = "Pravilniki"
 procurement = "Nabava"
@@ -7190,25 +7774,9 @@ sources = "Viri"
 usage = "Uporaba in obračunavanje"
 users = "Uporabniki"
 
-[portal.notifications]
-markAllRead = "Označi vse kot prebrano"
-title = "Obvestila"
-viewAll = "Prikaži vse"
-
-[portal.notifications.ariaLabel]
-none = "Obvestila, brez neprebranih"
-unread_one = "Obvestila, {{count}} neprebrano"
-unread_other = "Obvestila, {{count}} neprebranih"
-
-[portal.notifications.count]
-allRead = "vse prebrano"
-loading = "nalaganje"
-new_one = "{{count}} novo"
-new_other = "{{count}} novih"
-
-[portal.notifications.empty]
-description = "Ni novih obvestil."
-title = "Vse je urejeno"
+[portal.nav.section]
+platform = "PDF Platform"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Vsak samodejni pipeline dokumentov na backendu: urejena veriga operacij nad naborom virov, zagnana s sprožilcem. Kliknite vrstico za njegove korake in vire."
@@ -7220,15 +7788,28 @@ newPipeline = "Nov pipeline"
 [portal.pipelines.builder]
 addStep = "Dodaj orodje"
 back = "Nazaj na pipelines"
+cannotFollow = "Ne more sprejeti {{produced}}"
+chooseAccount = "Izberite račun"
+chooseDestination = "Izberite cilj"
+chooseOperation = "Izberite, kaj naredi ta korak"
+chooseSource = "Izberite vir"
 discard = "Zavrzi spremembe"
 enabled = "Omogočeno"
+inputs = "Vhod"
+inputSource = "Vhodni vir"
+inputTrigger = "Sprožilec"
 keepEditing = "Nadaljuj urejanje"
+needsConfiguring = "Potrebna je nastavitev"
 needsUpload = "Potrebuje naloženo datoteko"
+noSources = "Viri še niso povezani. Ustvarite enega, da ga uporabite kot vhod."
 noToolMatches = "Nobeno orodje se ne ujema z vašim iskanjem."
 pipelineSettings = "Nastavitve pipeline"
 searchTools = "Išči orodja"
 selectToolBody = "Dodajte orodje za gradnjo pipeline."
 selectToolTitle = "Orodij še ni"
+sendToSystem = "Pošlji v drug sistem"
+stepsIncompatible = "Ti koraki se ne morejo zagnati na tem, kar proizvede njihov prejšnji korak: {{tools}}."
+stepsNeedSetup = "Te korake je treba pred shranjevanjem še nastaviti: {{tools}}."
 toolSettings = "Nastavitve orodja"
 unknownStep = "Neprepoznana operacija, ohranjena takšna, kot je."
 unsavedBody = "Imate neshranjene spremembe. Jih želite shraniti pred odhodom ali jih zavreči?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Neshranjene spremembe"
 uploadUnsupported = "Naložene datoteke v pipelines še niso podprte, zato teh korakov ni mogoče shraniti: {{tools}}."
 usesDefaults = "Zažene se s privzetimi nastavitvami"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Združi vsako datoteko iz prejšnjega koraka"
+fan-out = "Zažene se enkrat na datoteko iz prejšnjega koraka"
+format-mismatch = "Potrebuje {{accepts}}, vendar prejšnji korak proizvede {{produced}}"
+output-uncertain = "Morda se ne bo zagnalo: izhod prejšnjega koraka je odvisen od njegove nastavitve"
+source-mismatch = "Potrebuje {{accepts}}, vendar je vhod tega cevovoda {{produced}}"
+undeclared-operation = "Ni mogoče preveriti, kaj ta korak sprejme"
+
 [portal.pipelines.composer]
 addTool = "Dodaj orodje"
 cancel = "Prekliči"
 chainEmpty = "Dodajte orodje, da začnete graditi svoj pipeline."
 create = "Ustvari pipeline"
-directory = "Izhodna mapa"
-directoryHelp = "Absolutna pot na strežniku. Biti mora znotraj konfiguriranih dovoljenih map."
 editingUnsupported = "Prikaz teh parametrov orodja za urejanje še ni podprt."
 moveDown = "Premakni dol"
 moveUp = "Premakni gor"
 name = "Ime"
 namePlaceholder = "npr. Pregled redakcij"
-noSources = "Viri še niso povezani. Pipeline se lahko še vedno zažene na datotekah, ki so mu posredovane neposredno."
 noToolSettings = "To orodje nima nastavljivih možnosti."
 operations_one = "Operacija ({{count}})"
 operations_other = "Operacije ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Izbriši"
 title = "Izbrisati pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Počisti zgodovino"
 delete = "Izbriši pipeline"
 run = "Zaženi zdaj"
 
 [portal.pipelines.empty]
 action = "Ustvari pipeline"
+connectSource = "Poveži vir"
 description = "Ustvarite svoj prvi pipeline: izberite vire, na katerih se izvaja, povežite operacije in izberite, kam gre izhod."
 title = "Pipelines še ni"
 
@@ -7286,15 +7874,17 @@ active = "Aktivni"
 paused = "Zaustavljeni"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Zapiši v mapo"
-inline = "Vrni datoteke"
-
 [portal.pipelines.run]
+allProcessed_one = "Ni ničesar za zagon: {{count}} dokument vira je že bil obdelan."
+allProcessed_other = "Ni ničesar za zagon: vseh {{count}} dokumentov v virih je že bilo obdelanih."
 completed_one = "Zagon končan."
 completed_other = "Vseh {{count}} zagonov je končanih."
 empty = "Ničesar ni za zagnati: viri niso imeli dokumentov za obdelavo."
 failed = "Zagon ni uspel: {{error}}"
+historyCleared = "Zgodovina počiščena. Naslednji zagon ponovno obdela vse, kar je trenutno v virih."
+inFlight = "Ni nič novega za zagon: dokumenti se še vedno obdelujejo iz prejšnjega zagona."
+parked_one = "Ni ničesar za zagon: {{count}} dokument je prej spodletel in je parkiran. Odpravite vzrok, nato počistite zgodovino, da poskusite znova."
+parked_other = "Ni ničesar za zagon: {{count}} dokumentov je prej spodletelo in so parkirani. Odpravite vzrok, nato počistite zgodovino, da poskusite znova."
 running = "Zagon se je začel; še vedno poteka."
 timeout = "Zagon traja dlje od pričakovanega; morda se bo še vedno dokončal v ozadju."
 
@@ -7314,12 +7904,18 @@ manual = "Ročno"
 schedule = "Načrtovano"
 
 [portal.policies]
+defaultName = "Pravilnik {{category}}"
 subtitle = "Stalne avtomatizacije, ki uveljavljajo pipeline orodij na vsakem dokumentu. Vsak pravilnik se sproži ob nalaganju ali izvozu, zažene svojo verigo orodij in shrani uveljavljeno različico poleg izvirnika."
 title = "Pravilniki"
 
 [portal.policies.card]
 comingSoon = "Nadgradite na Enterprise"
 notSetUp = "Ni nastavljeno"
+requiresAiEngine = "Zahteva AI pogon"
+
+[portal.policies.categories.classification]
+desc = "Ob nalaganju prepozna vrsto vsakega dokumenta in označi njegove metapodatke za arhiviranje in iskanje."
+label = "Klasifikacija"
 
 [portal.policies.categories.compliance]
 desc = "Uveljavite zahteve HIPAA, GDPR, SOC 2 ali FedRAMP za vsak dokument."
@@ -7344,6 +7940,13 @@ label = "Varnost"
 [portal.policies.config]
 scopeAll = "Vsi dokumenti"
 
+[portal.policies.config.classification]
+summary = "Klasificira vsak naložen dokument glede na oznake vaše ekipe in označi njegove metapodatke."
+
+[portal.policies.config.classification.rules]
+0 = "Klasificiraj"
+1 = "Označi metapodatke"
+
 [portal.policies.config.compliance]
 summary = "Preveri dokumente glede na regulativne okvire, preden zapustijo sistem."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Najm. zanesljivost"
 2 = "Poimenuj"
 3 = "Normaliziraj"
 
+[portal.policies.config.purview]
+label = "Uporabi oznako občutljivosti Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Najemnik Purview"
+labelId = "ID oznake"
+labelIdHelp = "GUID oznake iz portala Purview. Uporaba oznake zapiše njene metapodatke v PDF; ne more šifrirati, za kar je potreben Microsoft odjemalec."
+labelName = "Ime oznake (neobvezno)"
+labelNameHelp = "Zabeleženo skupaj z ID-jem, da lahko ljudje in orodja prepoznajo oznako."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview razlikuje med oznako, ki jo je uporabil pravilnik, in oznako, ki jo je izbrala oseba."
+label = "Kako je oznaka zabeležena"
+privileged = "Kot jo je izbrala oseba"
+standard = "Kot uporabljeno samodejno"
+
+[portal.policies.config.purviewRead]
+label = "Preberi oznako Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Najemnik Purview"
+connectionHelp = "Prebere oznako, ki jo dokument že nosi, da lahko poznejši koraki ukrepajo na podlagi nje."
+
 [portal.policies.config.retention]
 summary = "Uveljavlja, kako dolgo se dokumenti hranijo, kdaj se arhivirajo in kdaj izbrišejo."
 
@@ -7438,6 +8064,7 @@ title = "Ni še dejavnosti"
 [portal.policies.endpoints]
 addWatermark = "Vodni žig"
 autoRedact = "Prekrij PII"
+classifyAndLabel = "Klasificiraj"
 compressPdf = "Stisni"
 flatten = "Splošči"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Vaši pravilniki so shranjeni in se bodo prikazali, ko bo povezav
 retry = "Poskusi znova"
 title = "Backend ni na voljo"
 
+[portal.policies.operations]
+change = "Spremeni, kaj naredi ta korak"
+noResults = "Noben korak se ne ujema s tem. Poskusite ime izdelka ali \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Išči korake – poskusite \"scan\", \"attach\" ali ime izdelka"
+
+[portal.policies.operations.bodyMode]
+binary = "Surovi bajti datoteke"
+json = "Znotraj JSON tovora"
+multipart = "Kot nalaganje datoteke (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Vaš lastni strežnik ClamAV preveri dokument; nič ne zapusti vašega omrežja."
+label = "Preglej za viruse (samostojno gostovano)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Zavrne dokumente, ki vsebujejo makre, izvedljive datoteke, skripte ali vdelane objekte."
+label = "Blokiraj aktivno vsebino"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive preveri dokument in zagon se ustavi, če ni čist."
+label = "Preglej za viruse"
+
+[portal.policies.operations.confluenceAttach]
+description = "Shrani obdelani dokument na stran."
+label = "Priloži strani Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Pošlje dokument v ConsignO Cloud za podpisovanje."
+label = "Pošlji v podpis (ConsignO)"
+note = "Pošlje dokument. Pridobivanje podpisane kopije še ni podprto, ker korak ne more posredovati rezultata poznejšemu koraku."
+
+[portal.policies.operations.customApiCall]
+description = "Klic sestavite sami: pot, metoda, telo in obravnava odgovora."
+label = "Pokliči API po meri"
+
+[portal.policies.operations.discordNotify]
+description = "Obvesti kanal, da je pravilnik obdelal dokument."
+label = "Objavi sporočilo v Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Zabeleži, kaj je pravilnik naredil, kot iskalni dokument."
+label = "Indeksiraj revizijski dogodek v Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart ustreza API-jem za nalaganje; JSON ustreza API-jem, ki želijo datoteko znotraj tovora; binary pošlje surove bajte."
+label = "Kako poslati dokument"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON telo, poslano takšno, kot je. {{document.base64}} nosi datoteko; {{document.*}} in {{run.*}} se izpolnita za vsak dokument."
+label = "JSON telo"
+
+[portal.policies.operations.fields.connection]
+label = "Račun"
+
+[portal.policies.operations.fields.domain]
+label = "Domena Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Polje obrazca, pod katerim API pričakuje dokument."
+label = "Ime polja datoteke"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Od"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON objekt parov ime/vrednost glave. Poverilnica povezave je dodana namesto vas."
+label = "Glave"
+
+[portal.policies.operations.fields.index]
+label = "Indeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ključ zadeve"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Poslano kot telo sporočila. {{document.*}} in {{run.*}} se izpolnita za vsak dokument."
+label = "Sporočilo"
+
+[portal.policies.operations.fields.method]
+label = "Metoda"
+
+[portal.policies.operations.fields.pageId]
+label = "ID strani"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Dodano osnovnemu URL povezave. Nikoli ne more doseči drugega gostitelja."
+label = "Pot"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Kam na disku naj se zapiše. {{document.filename}} se izpolni za vsak dokument."
+label = "Ciljna pot"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Poročilo pusti dokument nespremenjen. Zamenjava ga zamenja s tem, kar se vrne."
+label = "Kaj storiti z odgovorom"
+
+[portal.policies.operations.fields.signerEmail]
+label = "E-pošta podpisnika"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Zadeva"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analizira to besedilo. Uporabite {{document.title}} ali prilepite besedilo, ki ga želite preveriti."
+label = "Besedilo za preverjanje"
+
+[portal.policies.operations.fields.to]
+label = "Za"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Uporabniško ime Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Obvesti prostor, da je pravilnik obdelal dokument."
+label = "Objavi sporočilo v Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Shrani obdelani dokument v zadevo."
+label = "Priloži zadevi Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Pošlje obdelani dokument kot prilogo."
+label = "Pošlji dokument po e-pošti (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Zapiše obdelani dokument v mapo."
+label = "Naloži v Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Vaš lastni strežnik Presidio poroča o osebnih podatkih, ki jih najde."
+label = "Zaznaj osebne podatke"
+note = "Presidio bere besedilo, ne datotek. Podajte besedilo, ki ga želite preveriti — sam dokument se ne naloži."
+
+[portal.policies.operations.responseMode]
+replace = "Zamenjaj dokument z odgovorom"
+report = "Obdrži dokument, zabeleži odgovor"
+
+[portal.policies.operations.sendgridEmail]
+description = "Pošlje obdelani dokument kot prilogo."
+label = "Pošlji dokument po e-pošti (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Obvesti kanal, da je pravilnik obdelal dokument."
+label = "Objavi sporočilo v Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Zabeleži, kaj je pravilnik naredil, tam, kjer vaši revizorji že iščejo."
+label = "Pošlji revizijski dogodek v Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Zabeleži, kaj je pravilnik naredil, v HTTP zbiralnik."
+label = "Pošlji revizijski dogodek v Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Obvesti kanal, da je pravilnik obdelal dokument."
+label = "Objavi sporočilo v Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Pošlje sam dokument na URL, ki ga izberete."
+label = "Objavi dokument v webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Podrobnosti zagona preda vaši avtomatizaciji."
+label = "Sproži scenarij Zap ali Make"
+
 [portal.policies.stats]
 activeFor = "Aktivno"
 dataProcessed = "Obdelani podatki"
@@ -7473,6 +8277,13 @@ label = "Uveljavljeni dokumenti"
 description = "Konfigurirano, vendar se ne sproži"
 label = "Začasno ustavljeno"
 
+[portal.policies.table]
+appliesTo = "Velja za"
+docs = "Uveljavljeni dokumenti"
+enforces = "Uveljavlja"
+policy = "Pravilnik"
+status = "Stanje"
+
 [portal.policies.wizard.actions]
 back = "Nazaj"
 cancel = "Prekliči"
@@ -7480,6 +8291,10 @@ continue = "Nadaljuj"
 enablePolicy = "Omogoči pravilnik"
 saveChanges = "Shrani spremembe"
 
+[portal.policies.wizard.capability.classify]
+desc = "Prepozna vrsto dokumenta iz oznak vaše ekipe in ga označi, da se arhivira in išče po kategoriji."
+label = "Klasificiraj dokument"
+
 [portal.policies.wizard.capability.compress]
 desc = "Stisne dokument na manjšo velikost datoteke."
 label = "Zmanjšaj velikost datoteke"
@@ -7500,10 +8315,18 @@ label = "Prekrij občutljive podatke"
 desc = "Odstrani skriti JavaScript, da se ob odprtju dokumenta nič ne more samodejno zagnati."
 label = "Odstrani aktivno vsebino"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dokazuje, da je dokument obstajal v tej točni obliki v določenem trenutku z uporabo neodvisnega organa za časovni žig. Pošlje se samo zgoščena vrednost – dokument nikoli ne zapusti vašega strežnika."
+label = "Dodaj zaupanja vreden časovni žig"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Odtisne viden znak (npr. »Zaupno«) čez vsako stran."
 label = "Uporabi vodni žig"
 
+[portal.policies.wizard.classification]
+description = "Vsak naložen dokument je klasificiran glede na vgrajene oznake in označen z vrstami, ki ustrezajo. Nabor oznak je v skupni rabi celotne ekipe."
+labelsHeading = "Klasifikacijske oznake"
+
 [portal.policies.wizard.errors]
 noTools = "Najprej omogočite vsaj eno orodje v poteku dela."
 saveFailed = "Pravilnika ni bilo mogoče shraniti. Poskusite znova."
@@ -7548,73 +8371,118 @@ setUp = "Nastavi pravilnik {{category}}"
 [portal.policies.wizard.workflow]
 description = "Izberite, kaj ta pravilnik naredi z vsakim dokumentom, ki ga obdela."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktivno"
-noRule = "Nobeno pravilo še ni uveljavljeno"
-subtitle = "Stalne avtomatizacije, skozi katere gre vsak dokument, ne glede na to, kateri cevovod ga obravnava."
-title = "Kaj se izvaja na vaših PDF-jih"
-
 [portal.policySummary.action]
-comingSoon = "Nadgradite na Enterprise"
-configure = "Konfiguriraj"
 setUp = "Nastavi"
 
-[portal.policySummary.column]
-activeRule = "Aktivno pravilo"
-policy = "Pravilnik"
-status = "Stanje"
+[portal.processorFlow]
+footnote = "Števci veljajo za zadnjih 24 ur. Hitrost toka je ponazoritvena."
+liveBadge = "V živo"
+stats = "{{connected}} povezanih · {{processed}} PDF obdelanih"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Ko so pravilniki konfigurirani, se kategorije prikažejo tukaj."
-title = "Ni še pravilnikov"
+[portal.processorFlow.lens]
+ariaLabel = "Način pogleda"
+flow = "Tok"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktivno"
-off = "Izklopljeno"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Neuspešno"
+heading = "Rezultati"
+success = "Dostavljeno"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktivnih"
+count = "{{n}} · 24 h"
+heading = "Pravilniki"
+setUp = "Nastavi"
 soon = "Kmalu"
 
-[portal.processingStatus]
-managePlan = "Upravljaj paket"
-volumeSuffix = "Obdelani PDF-ji · zadnjih 30 dni"
+[portal.processorFlow.sankey]
+waist = "Pravilniki · {{n}} aktivnih"
+
+[portal.processorFlow.sankey.empty]
+description = "Povežite vir in vklopite pravilnik, da opazujete tok dokumentov skozi procesor."
+title = "Toka še ni"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Poveži"
+editor = "Stirling PDF Editor"
+heading = "Viri"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Vnos e-pošte"
 
 [portal.procurement]
-reset = "Ponastavi nabavo (demo)"
 subtitle = "Poskrbite za evalvacijo, pogodbo in uvajanje svoje ekipe. Vsak dokument na enem mestu."
 title = "Nabava"
 
-[portal.procurement.action]
-download = "Prenesi"
-pay = "Plačaj zdaj"
-request = "Zahtevaj"
-sign = "Preglej in podpiši"
-upload = "Naloži"
-
 [portal.procurement.agreement]
 agreeCta = "Strinjam se in se naročam"
+confidential = "Zaupno"
 confirm = "Prebral/-a sem in se strinjam s pogodbo Stirling Enterprise Agreement."
-eyebrow = "Pogodba"
-intro = "Ena združena pogodba pokriva vaš dogovor: Master Service Agreement, Order Form, EULA in Data Processing Agreement. Preglejte jo, nato se strinjajte, da sprejmete ponudbo v zavezujočo naročnino."
-title = "Preglejte svojo pogodbo Enterprise"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, naročilnica, EULA in DPA, združeni v en podpis."
+download = "Prenesi"
+downloadDraftError = "PDF pogodbe ni bilo mogoče ustvariti – upodabljalnik dokumentov ni na voljo. Poskusite znova kmalu ali se obrnite na podporo."
+downloadError = "Podpisane pogodbe ni bilo mogoče prenesti. Poskusite znova."
+legalName = "Ime pravne osebe"
+legalNamePlaceholder = "Pravna oseba, ki bo podpisala"
+loadError = "Pogodbe ni bilo mogoče naložiti. Poskusite znova."
+loading = "Nalaganje pogodbe..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Zahtevaj spremembe"
+scrollHint = "Pomaknite se za pregled"
+signatory = "Ime podpisnika"
+signatoryPlaceholder = "Polno ime"
+signatoryTitle = "Naziv podpisnika"
+signatoryTitlePlaceholder = "npr. General Counsel"
+signError = "Vašega podpisa ni bilo mogoče zabeležiti. Poskusite znova."
 
 [portal.procurement.builder]
 addons = "Dodatki"
+addressLine1 = "Naslovna vrstica 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Naslovna vrstica 2"
+addressLine2Placeholder = "Suita, nadstropje, stavba"
 back = "Nazaj"
 businessName = "Ime podjetja"
 businessNamePlaceholder = "Vaše podjetje"
+city = "Mesto"
+cityPlaceholder = "San Francisco"
+completeRequired = "Pred ustvarjanjem ponudbe izpolnite zahtevana polja (označena z *) z veljavnim e-poštnim naslovom."
+contactEmail = "Kontaktna e-pošta"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Ime kontakta"
+contactNamePlaceholder = "Jane Doe"
 continue = "Nadaljuj"
-country = "Država"
-countryEuro = "Evroobmočje (EUR €)"
-countryUK = "Združeno kraljestvo (GBP £)"
-countryUS = "Združene države (USD $)"
+done = "Končano"
 eula = "Prebral/-a sem in se strinjam z Stirling Enterprise EULA. Ta ureja pogodbo, ustvarjeno iz te ponudbe."
 generate = "Ustvari ponudbo"
-included = "Vključeno"
 indemnification = "Odškodnina za IP"
 indemnificationSub = "Branimo upravičene zahtevke IP v skladu z EULA"
-offlineLicense = "Licenca za offline / air-gapped okolje"
-offlineLicenseSub = "Prenosljiva licenčna datoteka za air-gapped samogostujočo instanco"
+paperEyebrow = "Podjetniška ponudba"
+paperFor = "Pripravljeno za"
+pdfSize = "Velikost PDF"
+poNumber = "Številka naročilnice"
+poNumberPlaceholder = "Neobvezno"
+postalCode = "Poštna številka"
+postalCodePlaceholder = "94105"
+posture = "Upravljanje"
+posture_count = "~{{count}} pravilnikov"
+posture_essentials = "Osnove"
+posture_essentialsSub = "Klasifikacija + deljenje — privzete nastavitve"
+posture_governed = "Upravljano"
+posture_governedSub = "Doda varnost in usmerjanje"
+posture_regulated = "Regulirano"
+posture_regulatedSub = "Vsaka kategorija — skladnost, hramba, zajem"
 qbr = "Četrtletni poslovni pregledi"
 qbrSub = "Vaš SE vsako četrtletje pregleda uporabo in časovni načrt"
+region = "Država / regija"
+regionPlaceholder = "California"
 running = "{{annual}} / leto · {{years}}-letni {{tcv}}"
 s1Sub = "Vaša ekipa in PDF-ji, ki jih pričakujete obdelati vsako leto."
 s1Title = "Koliko boste obdelali?"
@@ -7623,6 +8491,12 @@ s2Title = "Zaveza in storitev"
 s3Sub = "Za ponudbo in pogodbo, ki jo ustvari."
 s3Title = "Vaši podatki"
 serviceLevel = "Raven storitve"
+size_compact = "Kompaktno"
+size_compactSub = "Večinoma besedilo, pod 1 MB"
+size_heavy = "Težko"
+size_heavySub = "Skenirano ali z veliko slikami, 5 MB+"
+size_standard = "Standardno"
+size_standardSub = "Mešano besedilo in slike, 1 do 5 MB"
 slDedicated = "Namenska"
 slDedicatedSub = "4 delovne ure · namenski skrbnik računa · +30%"
 slPriority = "Prednostna"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Isti delovni dan · imenovani CSM · +15%"
 slStandard = "Standardna"
 slStandardSub = "Naslednji delovni dan · skupni CSM · vključeno"
 stepOf = "Korak {{n}} od {{total}}"
+taxId = "DDV / davčna ID"
+taxIdPlaceholder = "Neobvezno"
 term = "Obdobje"
 termDiscount = "Uporabljen {{pct}}% popust za večletno zavezo"
 title = "Sestavite svojo ponudbo"
@@ -7637,6 +8513,7 @@ training = "Uvajanje in usposabljanje"
 trainingSub = "Seje v živo, da vaša ekipa začne delati"
 users = "Skupno uporabnikov"
 usersPlaceholder = "npr. 250"
+viewEula = "Preberi"
 volEstimated = "Ocenjeno iz {{count}} uporabnikov (~2.000 PDF-jev vsak, vključno z avtomatizacijo). Uredite, če veste bolje."
 volManual = "Uporablja se vaša številka. Kadar koli znova ocenite glede na velikost ekipe."
 volNoUsers = "Niste prepričani? Vnesite velikost ekipe in ocenili bomo."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "npr. 1.000.000"
 years_one = "{{count}} leto"
 years_other = "{{count}} let"
 
-[portal.procurement.docs]
-count_one = "{{count}} dokument"
-count_other = "{{count}} dokumentov"
-done = "Končano"
-here = "Tukaj ste"
-hide = "Skrij"
-optional = "Izbirno"
-paidAddon = "Plačljiv dodatek"
-show = "Prikaži"
-subtitle = "Vse, kar potrebujete na vsakem koraku poti, prikazano, ko se dogovor premika naprej."
-supportingSubtitle = "SOC 2, varnostni pregledi, davčni obrazci in več, pripravljeno, ko vaša varnostna ali nabavna ekipa vpraša. Nekateri imajo enkratno pristojbino."
-supportingTitle = "Podpora vaši evalvaciji"
+[portal.procurement.documents]
+agreement = "Podjetniška pogodba"
+agreementSub = "MSA, naročilnica in DPA v enem podpisu."
+download = "Prenesi"
+eula = "EULA in komercialni pogoji"
+eulaSub = "Programska oprema in samopostrežni komercialni pogoji."
+invoice = "Račun"
+invoiceSub = "Vaš prvi naročniški račun."
+laterInvoice = "Na voljo po sprejemu"
+laterQuote = "Na voljo, ko je vaša ponudba izdana"
+quote = "Ponudba"
+quoteSub = "Vaša razčlenjena podjetniška ponudba."
+sla = "Priloga SLA"
+slaSub = "Ravni podpore in ciljni odzivni časi."
+subprocessors = "Podobdelovalci"
+subprocessorsSub = "Tretje osebe, ki obdelujejo podatke v vašem imenu."
+subtitle = "Vaša dokumentacija posla, na voljo kadar koli."
 title = "Dokumenti"
-upcoming = "Prihajajoče"
+view = "Ogled"
 
 [portal.procurement.error]
 title = "Nekaj je šlo narobe"
 
 [portal.procurement.hero]
-company = "Vaš Enterprise dogovor"
+barAria = "Faza {{current}} od {{total}}"
 ctaAgreement = "Preglej in podpiši pogodbo"
-ctaLive = "Ste v živo"
-ctaPayment = "Dodaj plačilo"
+ctaExploring = "Nastavite preskus"
 ctaQuote = "Preglejte svojo ponudbo"
+ctaReviewQuote = "Preglej ponudbo"
 ctaTrial = "Sestavite svojo ponudbo"
+documents = "Dokumenti"
 eyebrow = "Enterprise nabava"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Povabi člane ekipe"
-keyDocs = "Ključni dokumenti"
-nextStep = "Naslednji korak: {{action}}"
-notStarted = "Ni začeto"
+licenseKey = "Licenčni ključ"
+liveSub = "Vaša organizacija je pripravljena in vaša licenca je aktivna."
+liveTitle = "Stirling Enterprise je pri vas v živo"
+next = "Naslednje: {{stage}}"
 open = "Odpri nabavo"
 scheduleCall = "Načrtuj klic"
-setup1Sub = "Povabite člane ekipe"
-setup1Title = "Uvedite PDF Editor"
-setup2Sub = "Vklopite obdelavo v urejevalnikih in drugih virih"
-setup2Title = "Povežite PDF Processor"
-setup3Sub = "Vklopite varnost, skladnost, usmerjanje ali hrambo, ko jih potrebujete"
-setup3Title = "Dodajte priporočene pravilnike"
+sentenceAgreement = "pregled in podpis pogodbe"
+sentenceLive = "zagotavljanje in uvedba"
+sentencePayment = "naročilnica in plačilo"
+sentenceQuote = "pregled in sprejem vaše ponudbe"
+sentenceTrial = "nastavitev preskusnega delovnega prostora"
 
 [portal.procurement.journey]
 daysLeft_one = "Preostane {{count}} dan"
 daysLeft_other = "Preostane {{count}} dni"
-engineerLabel = "Vaš inženir rešitev"
-eyebrow = "Vaša uvedba"
-live = "V Stirling Enterprise ste v živo"
-nextStep = "Naslednji korak: {{action}}"
-subtitle = "Vaš inženir rešitev je prisoten pri vsakem koraku. Eno naslednje dejanje naenkrat; celoten kontrolni seznam je spodaj."
-title = "Od preizkusa do produkcije, ena vodena pot"
-trialTitle = "Enterprise preizkus"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "En podpis pokriva MSA, naročilnico, EULA in DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Datoteke offline licence trenutno še ni bilo mogoče ustvariti
 downloadOffline = "Prenesi offline licenco (.lic)"
 hint = "Prilepite ta ključ v samogostujočo instanco, da jo aktivirate, ali ga shranite za svojo evidenco. Varno ga hranite."
 label = "Vaš licenčni ključ"
+subtitle = "S tem ključem aktivirajte samostojno gostovano instanco ali ga shranite za svoje evidence."
+title = "Vaš licenčni ključ"
+trialFileHint = "To je vaša preskusna licenčna datoteka. Ko je vaša pogodba sklenjena, se vrnite in jo znova prenesite — za razliko od spletnega licenčnega ključa se datoteka .lic ne posodobi sama."
 
 [portal.procurement.link]
 cta = "Poveži račun"
@@ -7739,65 +8619,62 @@ description = "Vaša naročnina je aktivna in vaša licenca je izdana. Vaša eki
 eyebrow = "V živo"
 title = "V Stirling Enterprise ste v živo"
 
-[portal.procurement.locked]
-description = "Preizkusni ključi, ponudbe z zavezanim obsegom, pogodba z enim podpisom, plačilo in vaša knjiga dokumentov so tukaj, ko začnete Enterprise evalvacijo."
-eyebrow = "Samo Enterprise"
-talkToSales = "Pogovorite se s prodajo"
-title = "Nabavna pot se odpre z Enterprise"
-
 [portal.procurement.milestone]
-accept = "Sprejmi in nadaljuj"
-description = "Prenesite PDF, da ga delite s svojo ekipo, vrnite se in sprejmite, ko boste pripravljeni, ali naredite spremembe."
-download = "Prenesi PDF"
 downloadError = "Ponudbenega PDF-ja trenutno še ni bilo mogoče prenesti — poskusite znova čez trenutek."
-edit = "Uredi ponudbo"
-eyebrow = "Ponudba {{number}}"
-perYear = " / leto"
-preparedFor = "Pripravljeno za {{company}}"
-tcv = "{{value}} skupna pogodbena vrednost"
-title = "Vaša ponudba je pripravljena"
-
-[portal.procurement.modal]
-cancel = "Prekliči"
-chooseFile = "Izberi datoteko"
-close = "Zapri"
-downloadBody = "Vaš prenos se bo kmalu začel."
-downloadCta = "Prenesi"
-downloadTitle = "Prenos"
-noFile = "Ni izbrane datoteke"
-payBody = "Plačajte svojo zavezano pogodbo s kartico ali bančnim nakazilom prek Stripe. Vaš delovni prostor se pripravi takoj, ko je plačilo poravnano."
-payCta = "Nadaljuj na Stripe"
-payTitle = "Potrdi plačilo"
-requestBodyFree = "To ustvarimo na zahtevo. Potrdite in vaš inženir rešitev ga bo kmalu poslal."
-requestBodyPaid = "To je plačljiv dodatek. Potrdite in vaš inženir rešitev bo določil obseg ter poslal dokumentacijo."
-requestCta = "Zahtevaj"
-requestTitle = "Zahtevaj ta dokument"
-signBody = "Odpre Stirling Enterprise Agreement za e-podpis: en podpis pokriva MSA, naročilnico, EULA in DPA. Samodejno sopodpišemo in napredujete na plačilo."
-signCta = "Odpri za podpis"
-signTitle = "Preglejte in podpišite svojo pogodbo"
-uploadBody = "Pošljite nam svojo PO in izdali bomo račun po vaših pogojih. Povlecite PDF ali spodaj izberite datoteko."
-uploadCta = "Naloži naročilnico"
-uploadTitle = "Naložite svojo naročilnico"
 
 [portal.procurement.payment]
 description = "Vaša ponudba je sprejeta in vaša licenca je že aktivna — vaša ekipa lahko začne takoj. Prvi račun plačajte, ko boste pripravljeni; tukaj ga lahko plačate ali prenesete, brez e-pošte."
+downloadAgreement = "Prenesi podpisano pogodbo"
 downloadInvoice = "Prenesi račun"
-simulate = "Simuliraj prejeto plačilo (demo)"
+eyebrow = "Plačilo"
 title = "Naročnina ustvarjena"
 viewInvoice = "Ogled in plačilo računa"
 
+[portal.procurement.review]
+acceptCta = "Sprejmi ponudbo"
+annual = "Letna pristojbina (1. leto)"
+downloadCta = "Prenesi ponudbo"
+poNumber = "Naročilnica: {{po}}"
+renewal = "Obnovi se po {{amount}}/leto po izteku obdobja (+{{pct}}% CPI)"
+tcv = "{{years}}-letno obdobje, plačano v celoti vnaprej: {{tcv}}"
+validUntil = "Veljavno do {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Razporejevalnika ni bilo mogoče naložiti."
 fallbackLink = "Odpri načrtovanje v novem zavihku"
+loading = "Nalaganje razporejevalnika..."
 subtitle = "Vaš inženir rešitev bo vašo ekipo vodil skozi uvedbo. Izberite čas, ki vam ustreza."
 title = "Načrtuj klic"
 
-[portal.procurement.status]
-action = "Potrebno dejanje"
-available = "Na voljo"
-complete = "Dokončano"
-pending = "V teku"
-request = "Na zahtevo"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Zaprto, brez odhodnih povezav"
+back = "Nazaj"
+businessName = "Ime podjetja"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Upravljano, najhitrejši začetek"
+continue = "Nadaljuj"
+deployment = "Kam naj se uvede?"
+eula = "Strinjam se s Stirling EULA in komercialnimi pogoji."
+fullName = "Polno ime"
+fullNamePlaceholder = "Vaše ime"
+invites = "Povabi sodelavce · neobvezno"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Načrtuj klic"
+seats = "Osebe, ki testirajo"
+seatsPlaceholder = "npr. 15"
+selfhost = "Samostojno gostovano"
+selfhostSub = "Docker ali Kubernetes"
+start = "Začni preskus"
+stepOf = "Korak {{n}} od {{total}}"
+subtitle = "Brezplačno 14 dni, kartica ni potrebna."
+subtitleDetails = "Nekaj podrobnosti za vašo ponudbo in pogodbo."
+talkFirst = "Se raje najprej pogovorite?"
+title = "Nastavite preskus"
+viewEula = "Preberi"
+workEmail = "Službena e-pošta"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Podaljšanje doda 7 dni in obvesti vašega inženirja rešitev."
@@ -7808,20 +8685,6 @@ maxed = "Dosežena omejitev"
 subtitle = "Vaš brezplačni preizkus traja do {{date}}. Kartica ni potrebna."
 title = "Enterprise preizkus"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Cene za zavezani obseg, SSO + SCIM + RBAC za celotno organizacijo, 90-dnevna nespremenljiva revizija in namenski SE."
-homeCta = "Začni preizkus →"
-homeHeadline = "Obdelajte milijone PDF-jev."
-
-[portal.recentActivity]
-title = "Nedavna dejavnost"
-viewAll = "Prikaži vse"
-
-[portal.recentActivity.empty]
-description = "Zagoni cevovodov, uvedbe in dogodki agentov se bodo prikazali tukaj."
-title = "Tukaj še ni ničesar"
-
 [portal.search]
 ariaLabel = "Iskanje"
 placeholder = "Išči Stirling — endpointi, cevovodi, dokumenti…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Povezava računa"
 
-[portal.shell.header]
-accountFallback = "Račun"
-accountMenu = "Meni računa"
-darkMode = "Temni način"
-lightMode = "Svetli način"
-search = "Iskanje"
-searchPlaceholder = "Išči…"
-signOut = "Odjava"
-switchToDark = "Preklopi na temno temo"
-switchToLight = "Preklopi na svetlo temo"
-
 [portal.shell.sidebar]
 appEditor = "Urejevalnik"
 appProcessor = "Procesor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dokumentov"
 linkAccount = "Poveži račun Stirling"
-planEditor = "Paket Editor"
-planEnterprise = "Paket Enterprise"
-planProcessor = "Paket Processor"
 primaryNav = "Primarna navigacija"
 switchApp = "Preklopi aplikacijo"
 
+[portal.shell.topbar]
+closeNav = "Zapri navigacijo"
+openNav = "Odpri navigacijo"
+search = "Išči"
+
 [portal.sources]
 subtitle = "Ponovno uporabne vhodne povezave, ki dovajajo dokumente v Stirling. Povezavo konfigurirajte enkrat, nato se nanjo sklicujte iz poljubnega števila pravilnikov. Kliknite vrstico za njeno konfiguracijo in pravilnike, ki jo uporabljajo."
 title = "Viri"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Poveži vir"
 
+[portal.sources.builder]
+back = "Nazaj na vire"
+backToTypes = "Vse vrste virov"
+cancel = "Prekliči"
+chooseHint = "Izberite, od kod prihajajo dokumenti. Zasivljeni konektorji so na poti."
+comingSoon = "Kmalu na voljo"
+comingSoonHeading = "Kmalu na voljo"
+create = "Ustvari vir"
+createTitle = "Poveži vir"
+delete = "Izbriši"
+editTitle = "Uredi vir"
+enabled = "Omogočeno"
+save = "Shrani spremembe"
+
+[portal.sources.builder.folderAccess]
+description = "Avtomatizacije map lahko uporabljajo samo mape, ki jih je dovolil skrbnik. Dodajte jo v nastavitvah dostopa do map, nato poskusite znova."
+openSettings = "Nastavitve dostopa do map"
+title = "Ta mapa ni dovoljena"
+
 [portal.sources.delete]
 body = "Izbrisati \"{{name}}\"? Tega ni mogoče razveljaviti. Pravilnike, ki se nanj sklicujejo, bo treba posodobiti."
 cancel = "Prekliči"
 confirm = "Izbriši"
 title = "Izbriši vir?"
 
-[portal.sources.detail]
-closeAriaLabel = "Zapri podrobnosti"
-delete = "Izbriši vir"
-docs24h = "Zadnjih 24 h"
-docs30d = "Zadnjih 30 dni"
-docsTotal = "Skupno videnih"
-docsTrend = "Dokumenti v zadnjih 30 dneh"
-documents = "Dokumenti"
-edit = "Uredi"
-notReferenced = "Nanj se ne sklicuje noben pravilnik, zato ga je varno izbrisati."
-pause = "Začasno ustavi"
-resume = "Nadaljuj"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Uporablja"
-
 [portal.sources.empty]
 description = "Povežite mapo (in kmalu shrambo v oblaku), da bodo vaši pravilniki imeli od kod pridobivati dokumente."
 title = "Ni še povezanih virov"
@@ -7899,18 +8754,57 @@ inUse = "V uporabi"
 total = "Povezave"
 unused = "Neuporabljeno"
 
+[portal.sources.networkFields.connection]
+helperText = "Shranjena povezava z naslovom strežnika in poverilnicami. Ponovno jo uporabi vsak vir, ki se nanjo sklicuje."
+label = "Povezava"
+
+[portal.sources.networkFields.directory]
+helperText = "Mapa na strežniku za preverjanje, relativno glede na domačo mapo prijave ali koren skupne rabe. Pustite prazno za koren."
+label = "Mapa"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Poraba odstrani vsako datoteko s strežnika, ko jo obdela vsak pravilnik."
+label = "Način branja"
+
+[portal.sources.networkFields.mode.options]
+consume = "Poraba: vsako datoteko obdelaj enkrat"
+snapshot = "Posnetek: ob vsakem zagonu ponovno preberi mapo"
+
+[portal.sources.networkFields.recursive]
+label = "Globina mape"
+
+[portal.sources.networkFields.recursive.options]
+all = "Vključi podmape"
+top = "Samo najvišja raven"
+
 [portal.sources.status]
 active = "Aktivno"
 disabled = "Onemogočeno"
 unused = "Neuporabljeno"
 
 [portal.sources.table]
+documents = "Dokumenti"
 source = "Vir"
 status = "Stanje"
 usedBy = "Pravilniki"
 
+[portal.sources.types.box]
+description = "Povlecite dokumente iz map Box, ki jih vaša ekipa že deli."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Povlecite dokumente iz deljene mape Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenti, ki jih je vaša ekipa obdelala v urejevalniku, prek pravilnikov in AI zagonov."
 label = "Urejevalnik"
+noPolicies = "Iz urejevalnika še ni bil zagnan noben pravilnik."
+
+[portal.sources.types.email]
+description = "Spremenite priloge, poslane v namenski nabiralnik, v dokumente."
+label = "E-poštni nabiralnik"
 
 [portal.sources.types.folder]
 description = "Spremljajte imenik na strežniku za nove dokumente."
@@ -7943,25 +8837,80 @@ label = "Globina mape"
 all = "Vključi podmape"
 top = "Samo zgornja raven"
 
+[portal.sources.types.ftp]
+description = "Preverjajte mapo strežnika FTP ali FTPS za nove dokumente."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Povlecite dokumente iz deljenih map Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Spremljajte omrežno skupno rabo SMB za nove dokumente."
+label = "Omrežni pogon"
+
+[portal.sources.types.onedrive]
+description = "Spremljajte mape OneDrive za nove dokumente."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Povlecite dokumente iz vedra Amazon S3 ali S3-združljivega vedra."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Shranjena povezava, ki vsebuje vedro in poverilnice. Ponovno jo uporabi vsak vir in izhod cevovoda, ki se nanjo sklicuje."
+label = "Povezava"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Poraba odstrani vsak objekt iz vedra, ko ga obdela vsak pravilnik."
+label = "Način branja"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Poraba: vsak objekt obdelaj enkrat"
+snapshot = "Posnetek: ob vsakem zagonu ponovno preberi vedro"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Obdelajo se samo objekti, katerih ključi se začnejo s to predpono."
+label = "Predpona ključa"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Preverjajte odložno mapo SFTP za nove dokumente."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Povlecite dokumente iz knjižnic dokumentov SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Vir"
 
+[portal.sources.types.webhook]
+createNote = "URL za dostavo in podpisna skrivnost se ustvarita, ko ustvarite ta webhook. Pošiljatelji pošljejo dokumente s POST na ta URL, sklicujoči se pravilniki pa se zaženejo ob prispetju."
+description = "Prejmite dokumente s podpisanim HTTP POST iz katerega koli zunanjega sistema."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL za dostavo"
+secretNote = "Podpisna skrivnost je prikazana enkrat, ko je webhook ustvarjen. Če jo želite zamenjati, ponovno ustvarite vir."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiraj"
+done = "Končano"
+secret = "Podpisna skrivnost"
+secretHelp = "Podpišite surovo telo vsake dostave s tem ključem (HMAC-SHA256) in ga pošljite kot glavo X-Stirling-Signature."
+secretWarning = "Zdaj kopirajte podpisno skrivnost. Zaradi vaše varnosti je prikazana samo enkrat in je pozneje ni mogoče pridobiti."
+title = "Webhook ustvarjen"
+url = "URL za dostavo"
+usage = "Pošljite vsak dokument s POST kot surovo telo zahteve na URL za dostavo z binarno vrsto vsebine (application/pdf ali application/octet-stream). Sklicujoči se pravilniki se samodejno zaženejo ob prispetju."
+
 [portal.sources.wizard]
-back = "Nazaj"
-cancel = "Prekliči"
-continue = "Nadaljuj"
-editTitle = "Uredi vir"
 name = "Ime"
 namePlaceholder = "npr. Sprejem zahtevkov"
-save = "Shrani spremembe"
-subtitle = "Korak {{current}} od {{total}} · {{label}}"
-title = "Poveži vir"
 type = "Vrsta"
 
-[portal.sources.wizard.steps]
-chooseType = "Izberi vrsto"
-configure = "Konfiguriraj"
-review = "Preglej in poveži"
+[portal.stepModal]
+close = "Zapri"
 
 [portal.usage]
 managePayment = "Upravljaj plačilo"
@@ -8021,16 +8970,9 @@ summary = "Ima ekipo — upravlja vire njenih članov in deljene konfiguracije."
 2 = "Dostop do portala prek privzetega pravilnika"
 3 = "Vse, kar lahko naredi član"
 
-[portal.welcome]
-ariaLabel = "Dobrodošli v Stirling PDF"
-badge = "Open-source"
-installEditor = "Namesti urejevalnik"
-inviteTeammates = "Povabi člane ekipe"
-openInBrowser = "Odpri v brskalniku"
-perks = "Za vedno brezplačno · Samogostovanje možno"
-subtitle = "Najvarnejši PDF Editor na svetu je brezplačen za ekipe vseh velikosti. Vključuje več kot 60 PDF operacij in SSO."
-title = "Dobrodošli v"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Neomejeno"
 
 [printFile]
 title = "Natisni datoteko"
@@ -8613,6 +9555,14 @@ text = "Zavrtite strani PDF v smeri urinega kazalca ali nasprotno v 90-stopinjsk
 [rotate.tooltip.header]
 title = "Pregled nastavitev vrtenja"
 
+[ruler]
+clearAll = "Počisti vse"
+hideAllLabels = "Skrij vse oznake"
+hideSmallLabels = "Skrij majhne oznake"
+physicalValues = "Fizično"
+scaled = "Skalirano"
+showAllLabels = "Prikaži vse oznake"
+
 [sanitize]
 desc = "Odstranite potencialno škodljive elemente iz datotek PDF."
 sanitizationResults = "Rezultati saniranja"
@@ -8654,31 +9604,45 @@ label = "Odstrani metapodatke XMP"
 [sanitize.steps]
 settings = "Nastavitve"
 
-[sanitizePdf]
-tags = "očisti,varno,varnost,odstrani-grožnje"
-
 [sanitizePDF]
 title = "Prečisti PDF"
 
+[sanitizePdf]
+tags = "očisti,varno,varnost,odstrani-grožnje"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Prilagodi velikost strani"
 
+[scaleSettings]
+activeScale = "Aktivno merilo"
+apply = "Uporabi merilo"
+applyCalibration = "Uporabi umerjanje"
+calculatedScale = "Izračunano merilo"
+calibrate = "Umeri"
+calibrating = "Umerjanje"
+calibrationDistanceRequired = "Vnesite dejansko razdaljo, večjo od nič"
+calibrationInvalid = "Iz te meritve ni mogoče izračunati merila"
+calibrationPaperDistance = "Izmerjena razdalja na strani: {{distance}}"
+calibrationTitle = "Umeri merilo"
+calibrationTooltip = "Izmerite znano razdaljo za samodejni izračun merila"
+customScale = "Merilo po meri"
+noneSet = "Merilo po meri ni nastavljeno"
+presets = "Prednastavljena merila"
+ratio = "Razmerje merila"
+ratioHelp = "Razmerje: 1 enota strani = X dejanskih enot"
+ratioPlaceholder = "npr. 100"
+ratioPositive = "Razmerje mora biti večje od nič"
+ratioRequired = "Razmerje je obvezno"
+realDistance = "Dejanska razdalja"
+realDistancePlaceholder = "npr. 5"
+reset = "Ponastavi na privzeto"
+unit = "Enota"
+unitInvalid = "Neveljavna enota: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Prag kota:"
-10 = "Nastavi velikost dodane in odstranjene obrobe, da prepreči bele obrobe v izpisu (privzeto: 1)."
-2 = "Nastavi najmanjši absolutni kot, potreben za vrtenje slike (privzeto: 10)."
-3 = "Toleranca:"
-4 = "Določi razpon barvne variacije okoli ocenjene barve ozadja (privzeto: 30)."
-5 = "Najmanjša površina:"
-6 = "Nastavi minimalni prag površine za fotografijo (privzeto: 10000)."
-7 = "Najmanjša konturna površina:"
-8 = "Nastavi najmanjši prag konturne površine za fotografijo"
-9 = "Velikost obrobe:"
-
 [scannerImageSplit]
 submit = "Izvleci skenirane slike"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Kaj počne"
 whatThisDoesDesc = "Samodejno najde in izvleče vsako fotografijo s skenirane strani ali sestavljene slike — brez ročnega obrezovanja."
 whenToUse = "Kdaj uporabiti"
 
+[ScannerImageSplit.selectText]
+1 = "Prag kota:"
+10 = "Nastavi velikost dodane in odstranjene obrobe, da prepreči bele obrobe v izpisu (privzeto: 1)."
+2 = "Nastavi najmanjši absolutni kot, potreben za vrtenje slike (privzeto: 10)."
+3 = "Toleranca:"
+4 = "Določi razpon barvne variacije okoli ocenjene barve ozadja (privzeto: 30)."
+5 = "Najmanjša površina:"
+6 = "Nastavi minimalni prag površine za fotografijo (privzeto: 10000)."
+7 = "Najmanjša konturna površina:"
+8 = "Nastavi najmanjši prag konturne površine za fotografijo"
+9 = "Velikost obrobe:"
+
 [search]
 noResults = "Ni zadetkov"
 placeholder = "Vnesite iskani izraz..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Vaš strežnik Stirling-PDF je brez povezave in \"{{e
 [session]
 expired = "Vaša seja je potekla. Osvežite stran in poskusite znova."
 
-[sessionManagement.tooltip]
-header = "Upravljanje sej podpisovanja"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Novi udeleženci se dodajo na konec vrstnega reda podpisovanja"
-bullet2 = "Udeležencev ni mogoče dodajati po zaključku seje"
-bullet3 = "Vsak udeleženec prejme obvestilo, ko je na vrsti"
-description = "Dodatne udeležence lahko dodate kadar koli pred zaključkom aktivne seje."
-title = "Dodajanje udeležencev"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Poln zaključek</b>: Vsi udeleženci so podpisali"
-bullet2 = "<b>Delni zaključek</b>: Nekateri udeleženci še niso podpisali"
-bullet3 = "Nepodpisani udeleženci bodo izključeni iz končnega dokumenta"
-bullet4 = "Ko je zaključeno, lahko naložite podpisan PDF v aktivne datoteke"
-description = "Zaključek združi vse podpise v en sam podpisan PDF. Tega dejanja ni mogoče razveljaviti."
-title = "Zaključek seje"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Udeležencev, ki so že podpisali, ni mogoče odstraniti"
-bullet2 = "Odstranjeni udeleženci ne bodo več prejemali obvestil"
-bullet3 = "Vrstni red podpisovanja se samodejno prilagodi"
-description = "Udeležence je mogoče odstraniti iz sej pred njihovim podpisom."
-title = "Odstranjevanje udeležencev"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Vsak podpis se uporabi zaporedno na PDF"
-bullet2 = "Poznejši podpisniki lahko vidijo prejšnje podpise"
-bullet3 = "Ključno za potrditvene poteke in pravno sledljivost"
-description = "Vrstni red, ki ga določite ob ustvarjanju seje, določa, kdo podpisuje prvi."
-title = "Vrstni red podpisov"
-
 [settings]
 close = "Zapri"
 
+[settings.ai]
+documents = "Dokumenti in RAG"
+general = "Splošno"
+limits = "Omejitve in zmogljivost"
+models = "Modeli in ponudniki"
+title = "AI"
+
 [settings.configuration]
 advanced = "Napredno"
 database = "Podatkovna baza"
 endpoints = "Končne točke"
 features = "Funkcije"
+folderAccess = "Dostop do map"
 mcp = "MCP Server"
 storageSharing = "Shramba datotek in skupna raba"
 systemSettings = "Sistemske nastavitve"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Privzeti urejevalnik PDF"
 defaultPdfEditorActive = "Stirling PDF je vaš privzeti urejevalnik PDF"
 defaultPdfEditorChecking = "Preverjanje..."
 defaultPdfEditorInactive = "Druga aplikacija je nastavljena kot privzeta"
+defaultPdfEditorRemind = "Opomni me, naj nastavim kot privzeto"
+defaultPdfEditorRemindDescription = "Prikaži pasico, ko Stirling PDF ni vaša privzeta aplikacija za PDF."
 defaultPdfEditorSet = "Že privzeto"
 defaultStartupView = "Privzet pogled ob zagonu"
 defaultStartupViewDescription = "Izberite, kateri zavihek je aktiven v levem stolpcu ob zagonu aplikacije"
@@ -8817,9 +9771,18 @@ languageDescription = "Izberite jezik prikaza"
 logout = "Odjava"
 setAsDefault = "Nastavi kot privzeto"
 theme = "Tema"
+themeAccent = "Poudarjena barva"
+themeAccentCustom = "Barva po meri"
+themeAccentCustomHint = "Po meri (priporočene privzete nastavitve)"
+themeAccentDark = "Poudarjena barva v temnem načinu"
+themeAccentDefault = "Privzeto"
+themeAccentDefaultHint = "Privzeta tema (priporočeno)"
+themeAccentDescription = "Gumbi, povezave in poudarki ji sledijo, aplikacijo pa subtilno obarva. Svetli in temni način imata vsak svojo. Sistem uporabi tisto, ki je aktivna."
+themeAccentLight = "Poudarjena barva v svetlem načinu"
 themeDark = "Temna"
 themeDescription = "Preklapljajte med svetlim in temnim načinom"
 themeLight = "Svetla"
+themeReset = "Obnovi privzeto temo"
 themeSystem = "System"
 title = "Splošno"
 user = "Uporabnik"
@@ -8833,6 +9796,12 @@ intro = "Omogočite preverjanje pristnosti uporabnikov, upravljanje ekip in funk
 learnMore = "Več v dokumentaciji"
 title = "Za skrbnike sistema"
 
+[settings.general.loginLanding]
+description = "Izberite, katera aplikacija se odpre, ko se prijavite v Stirling Cloud."
+editor = "Urejevalnik"
+processor = "Obdelovalnik"
+title = "Po prijavi"
+
 [settings.general.mode]
 fullscreen = "Celozaslonski"
 sidebar = "Stranska vrstica"
@@ -9041,6 +10010,11 @@ security = "Varnost"
 telegram = "Telegram"
 title = "Varnost in avtentikacija"
 
+[settings.signOut]
+confirm = "Ali ste prepričani, da se želite odjaviti?"
+submit = "Odjava"
+title = "Odjava"
+
 [settings.team]
 title = "Ekipa"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Naloži na strežnik"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "kliknite tukaj"
+fallback = "Če se ni odprlo samodejno,"
+opening = "Odpiranje Swagger UI v novem zavihku..."
 tags = "api,dokumentacija,swagger,končne-točke,razvoj"
 title = "Dokumentacija API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "V razdelku Aktivne datoteke izberite datoteke za zagon tega o
 singleFileScope = "Se uporablja samo za: {{fileName}}"
 viewerMode = "Preklopite v urejevalnik datotek, da izberete več datotek."
 
+[toolFormat]
+ANY = "katera koli datoteka"
+CBR = "arhiv stripov (CBR)"
+CBZ = "arhiv stripov (CBZ)"
+CSV = "datoteka CSV"
+EBOOK = "e-knjiga"
+EMAIL = "e-pošta"
+EXCEL = "preglednica"
+HTML = "spletna stran"
+IMAGE = "slike"
+JAVASCRIPT = "datoteka JavaScript"
+JSON = "datoteka JSON"
+MARKDOWN = "datoteka Markdown"
+NONE = "brez datoteke"
+PCL = "datoteka za tiskanje PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF, zaščiten z geslom"
+POSTSCRIPT = "datoteka PostScript"
+PPT = "predstavitev"
+TEXT = "besedilna datoteka"
+VIDEO = "video"
+WORD = "dokument Word"
+XML = "datoteka XML"
+XPS = "dokument XPS"
+ZIP = "arhiv ZIP"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Nazaj na vsa orodja"
 collapse = "Strni ploščo"
 expand = "Razširi ploščo"
 goBack = "Pojdi nazaj"
+pdfTools = "Orodja PDF"
 placeholder = "Izberite orodje za začetek"
 premiumFeature = "Premium funkcija:"
+searchTools = "Iskanje orodij"
 toolsHeader = "Orodja"
 viewAllTools = "Prikaži vsa orodja"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Ni najdenih orodij"
 quickAccess = "HITER DOSTOP"
 searchPlaceholder = "Išči orodja..."
 
-[toolPicker.categories]
-advancedTools = "Napredna orodja"
-recommendedTools = "Priporočena orodja"
-standardTools = "Standardna orodja"
-
 [toolPicker.subcategories]
 advancedFormatting = "Napredno oblikovanje"
 automation = "Avtomatizacija"
@@ -9950,16 +10950,31 @@ title = "Uporabniki"
 you = "(vi)"
 
 [users.action]
+cancelInvite = "Prekliči povabilo"
 deleteTeam = "Izbriši ekipo"
 disableMfa = "Ponastavi MFA"
 move = "Premakni v ekipo"
 reinstate = "Ponovno vzpostavi"
 remove = "Odstrani iz organizacije"
+removeTeam = "Odstrani iz ekipe"
 rename = "Preimenuj ekipo"
 resetPw = "Ponastavi geslo"
 suspend = "Suspendiraj"
 unlock = "Odkleni račun"
 
+[users.activity]
+daysAgo = "pred {{count}} d"
+hoursAgo = "pred {{count}} h"
+justNow = "Pravkar"
+minutesAgo = "pred {{count}} min"
+monthsAgo_one = "pred {{count}} mesecem"
+monthsAgo_other = "pred {{count}} meseci"
+never = "Nikoli"
+weeksAgo_one = "pred {{count}} tednom"
+weeksAgo_other = "pred {{count}} tedni"
+yearsAgo_one = "pred {{count}} letom"
+yearsAgo_other = "pred {{count}} leti"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Odobri pravilnik"
@@ -9967,11 +10982,14 @@ editor = "Urejevalnik"
 processor = "Procesor"
 
 [users.confirm]
+cancelInviteBody = "Prekličem povabilo za {{email}}? S trenutno povezavo se ne bodo mogli pridružiti."
+cancelInviteTitle = "Prekliči povabilo"
 deleteTeamBody = "Izbrisati ekipo {{name}}? Ekipa mora biti najprej prazna - premaknite njene člane v drugo ekipo in ne sme več imeti nobenih integracijskih konfiguracij."
 deleteTeamTitle = "Izbriši ekipo"
 disableMfaBody = "Odstraniti vpis MFA za {{name}}? Če je zahtevano, ga bodo ob naslednji prijavi znova nastavili."
 disableMfaTitle = "Ponastavi MFA"
 removeBody = "Trajno odstraniti {{name}} iz organizacije? Tega ni mogoče razveljaviti."
+removeTeamBody = "Odstranim {{name}} iz ekipe? Ohranili bodo svoj račun, vendar bodo izgubili dostop do virov te ekipe."
 removeTitle = "Odstrani člana"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Uporabniško ime"
 usernameError = "Uporabniško ime mora imeti vsaj 3 znake"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Povabil/-a {{who}}"
+cancel = "Prekliči"
+count = "{{count}} na čakanju"
+desc = "Povabljene osebe, ki se še niso pridružile. Zasedajo mesto, dokler ne sprejmejo povabila."
+expiresInDays_one = "Poteče čez {{count}} dan"
+expiresInDays_other = "Poteče čez {{count}} dni"
+expiresToday = "Poteče danes"
+title = "Povabila na čakanju"
+
 [users.loadError]
 description = "Pri dostopu do zalednega sistema je prišlo do napake ali pa nimate dostopa. Poskusite znova."
 title = "Članov ni bilo mogoče naložiti"
@@ -10212,9 +11240,11 @@ title = "Priloge"
 
 [viewer.bookmarks]
 bookmarkTitle = "Naslov zaznamka"
+bookmarkTitleRequired = "Naslov zaznamka je obvezen"
 closeSidebar = "Zapri stransko vrstico zaznamkov"
 collapseAll = "Strni vse zaznamke"
 expandAll = "Razširi vse zaznamke"
+searchPlaceholder = "Iskanje zaznamkov"
 
 [viewer.comments]
 addComment = "Dodaj komentar"
@@ -10605,30 +11635,6 @@ title = "Besedilo vodnega žiga"
 image = "Slika"
 text = "Besedilo"
 
-[wetSignature.tooltip]
-header = "Načini ustvarjanja podpisa"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Prilagodite barvo in debelino peresa"
-bullet2 = "Brišite in znova narišite, dokler niste zadovoljni"
-bullet3 = "Deluje na napravah na dotik (tablice, telefoni)"
-description = "Ustvarite ročni podpis z miško ali zaslonom na dotik. Najbolj primerno za osebne, verodostojne podpise."
-title = "Nariši podpis"
-
-[wetSignature.tooltip.type]
-bullet1 = "Izberite med več pisavami"
-bullet2 = "Prilagodite velikost in barvo besedila"
-bullet3 = "Odlično za standardizirane podpise"
-description = "Ustvarite podpis iz vnesenega besedila. Hitro in dosledno, primerno za poslovne dokumente."
-title = "Vnesi podpis"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Podpira PNG, JPG in druge slikovne formate"
-bullet2 = "Za najboljše rezultate so priporočena prosojna ozadja"
-bullet3 = "Velikost slike bo prilagojena območju podpisa"
-description = "Naložite vnaprej ustvarjeno sliko podpisa. Idealno, če imate skeniran podpis ali logotip podjetja."
-title = "Naloži sliko podpisa"
-
 [workbenchBar]
 activeFiles = "Aktivne datoteke"
 annotations = "Anotacije"
@@ -10652,6 +11658,7 @@ redact = "Redakcija"
 rotateLeft = "Zavrti levo"
 rotateRight = "Zavrti desno"
 ruler = "Ravnilo / Merjenje"
+rulerSettings = "Nastavitve merila"
 save = "Shrani"
 saveAll = "Shrani vse"
 saveAs = "Shrani kot"
diff --git a/frontend/editor/public/locales/sr-LATN-RS/translation.toml b/frontend/editor/public/locales/sr-LATN-RS/translation.toml
index 1c13814719..231bc0c0fb 100644
--- a/frontend/editor/public/locales/sr-LATN-RS/translation.toml
+++ b/frontend/editor/public/locales/sr-LATN-RS/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "odabrani fajlovi"
 font = "Font"
 fontSizeTooltip = "Veličina teksta broja stranice u tačkama. Veće vrednosti daju veći tekst."
 fontTypeTooltip = "Porodica fonta za brojeve stranica. Izaberite prema stilu dokumenta."
-genericSubmit = "Prihvatiti"
 green = "Zeleno"
 help = "Pomoć"
-imgPrompt = "Odaberi sliku (slike)"
 incorrectPasswordMessage = "Trenutna šifra je netačna."
 info = "Informacije"
 invalidUndoData = "Nije moguće poništiti: nevažeći podaci o operaciji"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Sporazum o prijavi"
 logOut = "Odjavi se"
 marginTooltip = "Udaljenost između broja stranice i ivice strane."
 moreOptions = "Još opcija"
-multiPdfPrompt = "Odaberi PDF-ove (2+)"
 never = "Nikada"
 no = "Ne"
 noFileSelected = "Datoteka nije izabrana. Otpremi jednu."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Prilagođeni redosled stranica (unesi listu brojeva stranica
 pages = "Strane"
 pageSelectionPrompt = "Prilagođeni redosled stranica (unesi listu brojeva stranica 1,5,6 ili funkcija, kao što je 2n+1, razdvojenih zarezima) :"
 password = "Šifra"
-pdfPrompt = "Odaberi PDF(ove)"
 pin = "Zakači datoteku (zadrži aktivnom nakon pokretanja alata)"
 pro = "Pro"
 processingComplete = "Vaša datoteka je spremna."
@@ -356,6 +352,7 @@ text = "Ove dozvole kontrolišu šta korisnici mogu da rade sa PDF-om. Najefikas
 title = "Promeni dozvole"
 
 [addStamp]
+preview = "Pregled pečata"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ručno preuzimanje: kliknite na linkove i smestite datoteke u tes
 noLanguages = "U podešenom direktorijumu nisu pronađeni tessdata jezici."
 permissionNotice = "Putanja tessdata nije upisiva. Preuzimanja će biti otvorena u pregledaču; sačuvajte .traineddata datoteke ručno u tessdata folder."
 
+[admin.settings.ai.documents]
+description = "Konfigurišite model za embedding i podešavanja pretrage koja se koriste za odgovaranje na pitanja nad dokumentima. Primenjuje se na AI mehanizam nakon čuvanja."
+title = "Dokumenti i RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Ostavite prazno da biste koristili sopstveni kredencijal okruženja mehanizma. Primenjuje se na self-hosted implementacije sa jednim mehanizmom."
+generic = "Embedding API ključ"
+openai = "OpenAI API ključ"
+setPlaceholder = "Sačuvano - ostavite prazno da zadržite trenutni ključ"
+voyageai = "VoyageAI API ključ"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Osnovni URL OpenAI-kompatibilne / Ollama krajnje tačke za embeddings, npr. http://ollama:11434/v1. Mora da upućuje na pouzdanu internu krajnju tačku (osetljivo na SSRF)."
+label = "Osnovni URL za embedding"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Naziv modela za embedding. Slobodan tekst; predlozi su samo smernice."
+label = "Model za embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Provajder koji se koristi za pretvaranje teksta dokumenta u vektorske embeddings."
+label = "Provajder za embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maksimalan broj pretraga za dobavljanje koje agent može da pokrene po zahtevu."
+label = "Maks. pretraga"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Promena modela za embedding stupa na snagu odmah, ali dokumenti indeksirani prethodnim modelom moraju biti ponovo indeksirani da bi pretraga vratila ispravne rezultate."
+title = "Potrebno ponovno indeksiranje"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Ako ste promenili model za embedding, ponovo indeksirajte postojeće dokumente kako bi pretraga koristila novi model."
+
+[admin.settings.ai.documents.topK]
+description = "Broj najrelevantnijih delova dobijenih po pretrazi."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Povežite Stirling sa Python AI mehanizmom i izaberite koje AI mogućnosti su dostupne. Promene se primenjuju pri ponovnom pokretanju."
+title = "AI mehanizam"
+
+[admin.settings.ai.general.capabilities]
+description = "Uključite ili isključite pojedinačne AI funkcije. Onemogućene funkcije su skrivene u aplikaciji."
+title = "Mogućnosti"
+
+[admin.settings.ai.general.enabled]
+description = "Glavni prekidač. Kada je isključen, AI alati, agenti ili pozivi mehanizma nisu dostupni."
+label = "Omogući AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Konverzacijski asistent za rad sa PDF-ovima."
+label = "Chat asistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Automatski kategorizujte dokumente po tipu ili sadržaju."
+label = "Klasifikacija dokumenata"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generišite novi PDF (npr. iz HTML-a) putem AI agenta."
+label = "Kreiraj PDF iz upita"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Postavljajte pitanja i dobijajte odgovore zasnovane na otpremljenom dokumentu."
+label = "Pitanja o dokumentu"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Pregledajte dokumente radi matematičkih i numeričkih grešaka."
+label = "Matematički auditor"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Dodajte komentare pregleda i napomene koje je napisao AI u PDF."
+label = "PDF agent za komentare"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Vremensko ograničenje za zahtevnije operacije agenta, kao što je generisanje dokumenata."
+label = "Vremensko ograničenje dugotrajnih operacija (sekunde)"
+
+[admin.settings.ai.general.note]
+body = "AI mehanizam radi kao zasebna usluga. Njegova deljena tajna"
+body2 = "podešava se putem promenljive okruženja kontejnera. API ključevi provajdera mogu se uneti na ovim stranicama ili dostaviti kao promenljive okruženja mehanizma; ključevi uneti ovde šalju se mehanizmu nakon čuvanja."
+title = "O AI mehanizmu"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Vremensko ograničenje za streamovane (token-po-token) chat odgovore."
+label = "Vremensko ograničenje streama (sekunde)"
+
+[admin.settings.ai.general.test]
+button = "Testiraj vezu"
+failBody = "AI mehanizam nije odgovorio. Proverite URL, da li je kontejner mehanizma pokrenut i da li je AI omogućen (potrebno je ponovno pokretanje nakon omogućavanja)."
+failTitle = "AI mehanizam nedostupan"
+okBody = "AI mehanizam je odgovorio na proveru stanja."
+okTitle = "AI mehanizam dostupan"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Vremensko ograničenje za standardne AI zahteve ka mehanizmu."
+label = "Vremensko ograničenje zahteva (sekunde)"
+
+[admin.settings.ai.general.url]
+description = "Interni URL Python AI mehanizma, npr. http://stirling-pdf-engine:5001."
+label = "URL AI mehanizma"
+
+[admin.settings.ai.limits]
+description = "Zaštitna ograničenja za količinu posla koju AI zahtevi mogu da izvrše i koliko ih se pokreće istovremeno. Primenjuje se na AI mehanizam nakon čuvanja."
+title = "Ograničenja i performanse"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Zaštitno ograničenje: odbij AI zahteve čiji izdvojeni tekst premašuje ovu dužinu."
+label = "Maks. znakova po zahtevu"
+
+[admin.settings.ai.limits.maxPages]
+description = "Zaštitno ograničenje: odbij AI zahteve preko ovoliko PDF stranica."
+label = "Maks. stranica po zahtevu"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maksimalan broj istovremenih poziva modela u toku preko celog mehanizma."
+label = "Maks. konkurentnost modela"
+
+[admin.settings.ai.models]
+description = "Izaberite LLM provajdera i pametne/brze modele koje AI mehanizam koristi. Primenjuje se na AI mehanizam nakon čuvanja."
+title = "Modeli i provajderi"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API ključ"
+description = "Ostavite prazno da biste koristili sopstveni kredencijal okruženja mehanizma. Primenjuje se na self-hosted implementacije sa jednim mehanizmom."
+generic = "API ključ"
+openai = "OpenAI API ključ"
+setPlaceholder = "Sačuvano - ostavite prazno da zadržite trenutni ključ"
+
+[admin.settings.ai.models.baseUrl]
+description = "Osnovni URL OpenAI-kompatibilne / Ollama krajnje tačke, npr. http://ollama:11434/v1."
+label = "Osnovni URL provajdera"
+warning = "Osnovni URL mora da upućuje na pouzdanu internu krajnju tačku. Mehanizam će upućivati serverske zahteve ka njoj, pa je nepouzdana vrednost osetljiva na SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maksimalan broj izlaznih tokena za brzi model."
+label = "Maks. tokena brzog modela"
+
+[admin.settings.ai.models.fastModel]
+description = "Jeftiniji, brži model za lagane zadatke. Slobodan tekst; predlozi su samo smernice."
+label = "Brzi model"
+
+[admin.settings.ai.models.provider]
+description = "Sa kojim LLM provajderom mehanizam komunicira."
+label = "Provajder"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maksimalan broj izlaznih tokena za pametni model."
+label = "Maks. tokena pametnog modela"
+
+[admin.settings.ai.models.smartModel]
+description = "Model visoke sposobnosti za složeno rezonovanje. Slobodan tekst; predlozi su samo smernice."
+label = "Pametni model"
+
+[admin.settings.ai.saved]
+body = "Promene se automatski šalju AI mehanizmu."
+bodyNoPush = "Podešavanja su sačuvana. Primenjuju se sledeći put kada AI mehanizam preuzme svoju konfiguraciju."
+title = "AI podešavanja sačuvana"
+
 [admin.settings.badge]
 clickToUpgrade = "Kliknite da vidite detalje plana"
 
@@ -938,6 +1094,25 @@ label = "Ponovo generiši pri pokretanju"
 description = "Broj dana tokom kojih će sertifikat važiti"
 label = "Važenje sertifikata (dani)"
 
+[admin.settings.folderAccess]
+description = "Direktorijumi iz kojih izvori fascikli i izlazi fascikli smeju da čitaju i u koje smeju da pišu. Ovo je bezbednosna granica: automatizacije nikada ne mogu biti usmerene na serversku putanju van ove liste."
+securityNote = "Ostavite ovo prazno da biste potpuno onemogućili izvore i izlaze fascikli. Stirling-ov sopstveni konfiguracioni direktorijum je uvek zabranjen."
+title = "Pristup fasciklama"
+
+[admin.settings.folderAccess.implied]
+description = "Ovi direktorijumi kojima upravlja Stirling su uvek dozvoljeni i ovde se ne mogu menjati."
+serverStorage = "Skladište datoteka na serveru"
+title = "Uvek dozvoljeno"
+watchedFolder = "Nadzirana fascikla pipeline-a"
+
+[admin.settings.folderAccess.roots]
+add = "Dodaj"
+empty = "Nema dozvoljenih fascikli. Izvori i izlazi fascikli su trenutno onemogućeni."
+hint = "Unesite apsolutne putanje, na primer /data/inbox."
+label = "Dozvoljeni koreni fascikli"
+placeholder = "/data/inbox"
+remove = "Ukloni koren fascikle"
+
 [admin.settings.general]
 description = "Podesite sistemska podešavanja aplikacije uključujući brendiranje i podrazumevano ponašanje."
 system = "Sistem"
@@ -1842,6 +2017,15 @@ export = "Izvoz"
 accessDenied = "Pristup odbijen"
 insufficientPermissions = "Nemate dozvolu da izvršite ovu radnju."
 
+[auth.callback]
+completing = "Završavanje autentifikacije"
+invalidToken = "OAuth prijava nije uspela - nevažeći token."
+missingToken = "OAuth prijava nije uspela - token nije primljen."
+oauthFailed = "OAuth prijava nije uspela. Pokušajte ponovo."
+pleaseWait = "Sačekajte dok završimo vašu prijavu."
+signedOut = "Odjavljeni ste. Prijavite se ponovo."
+windowMayClose = "Možete zatvoriti ovaj prozor kada se završi."
+
 [auth.displayName]
 guest = "Gost"
 user = "Korisnik"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Obezbeđuje PDF dokumente uklanjanjem potencijalno zloname
 description = "Ovaj alat će automatski preimenovati PDF fajlove na osnovu njihovog sadržaja. Analizira dokument kako bi iz teksta pronašao najprikladniji naslov."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Automatski rotiraj"
+tags = "automatsko rotiranje,ispravi orijentaciju,naopako,bočno,ispravi,orijentiši,otkrij orijentaciju,ispravi rotaciju,automatski orijentiši,skenirano,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Prag pouzdanosti"
+
+[autoRotate.detectionMode]
+auto = "Automatski"
+osd = "Samo OCR"
+text = "Samo tekst"
+title = "Metod detekcije"
+
+[autoRotate.error]
+failed = "Došlo je do greške pri automatskom rotiranju PDF-a."
+
+[autoRotate.inferUndetected]
+title = "Rotiraj stranice niske pouzdanosti da se poklope"
+
+[autoRotate.report]
+applied = "{{degrees}}° u smeru kazaljke"
+confidenceValue = "Pouzdanost {{value}}"
+noChange = "Bez promene"
+pageLabel = "Stranica {{number}}"
+summary = "{{rotated}} od {{total}} stranica rotirano, {{unchanged}} ostavljeno kako jeste"
+title = "Izveštaj detekcije"
+
+[autoRotate.report.method]
+inferred = "Usklađeno"
+none = "Preskočeno"
+osd = "OCR"
+text = "Tekst"
+
+[autoRotate.report.note]
+belowThreshold = "Ispod praga"
+blankPage = "Stranica je prazna"
+inferredFromDocument = "Isto kao ostale stranice"
+noDominantDirection = "Pomešani smerovi teksta"
+osdFailed = "Nije pronađen čitljiv tekst"
+osdNoVerdict = "Nije moguće utvrditi koja strana je gore"
+tesseractUnavailable = "OCR nije instaliran"
+tooFewGlyphs = "Premalo teksta"
+
+[autoRotate.results]
+title = "Rezultati automatskog rotiranja"
+
+[autoRotate.settings]
+title = "Podešavanja"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Koliko provera mora biti sigurna pre nego što se stranica okrene. Smanjite da biste rotirali više stranica, povećajte da biste više stranica ostavili netaknuto."
+title = "Prag pouzdanosti"
+
+[autoRotate.tooltip.description]
+text = "Utvrđuje kako svaka stranica treba da bude okrenuta i okreće je u pravi položaj. Stranice koje su već uspravne ostaju nepromenjene."
+
+[autoRotate.tooltip.detectionMode]
+text = "Automatski prvo čita tekst na stranici, zatim posmatra stranicu kao sliku ako to nije dovoljno. Samo tekst preskače proveru slike, što je najbrže za dokumente koji nikada nisu skenirani. Samo OCR tretira svaku stranicu kao sliku."
+title = "Metod detekcije"
+
+[autoRotate.tooltip.header]
+title = "Automatsko rotiranje"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Prazne ili skoro prazne stranice ne mogu se proveriti same za sebe. Kada svaka stranica koja se mogla pročitati zahteva isto okretanje, ove stranice se okreću da se poklope sa njima."
+title = "Rotiraj stranice niske pouzdanosti da se poklope"
+
 [autoSizeSplitPDF]
 tags = "pdf,delenje,dokumenti,organizacija"
 
@@ -2189,33 +2440,6 @@ keywords = "Ključne reči: odd, even"
 numbers = "Brojevi/opsezi: 5, 10-20"
 progressions = "Progresije: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Tipovi sertifikata"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Upravlja sistemski administrator"
-bullet2 = "Deljen među ovlašćenim korisnicima"
-bullet3 = "Predstavlja identitet kompanije, ne pojedinca"
-bullet4 = "Najbolje za: Zvanična dokumenta, timske potpise"
-description = "Deljeni sertifikat koji obezbeđuje vaša organizacija. Koristi se za ovlašćeno potpisivanje u ime kompanije."
-title = "Sertifikat organizacije"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Generiše se automatski pri prvoj upotrebi"
-bullet2 = "Povezan sa vašim korisničkim nalogom"
-bullet3 = "Ne može se deliti sa drugim korisnicima"
-bullet4 = "Najbolje za: Lična dokumenta, individualnu odgovornost"
-description = "Automatski generisan sertifikat jedinstven za vaš korisnički nalog. Pogodan za individualne potpise."
-title = "Lični sertifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Zahteva P12/PFX datoteku i lozinku"
-bullet2 = "Može biti izdat od strane eksternih sertifikacionih tela"
-bullet3 = "Viši nivo poverenja za pravna dokumenta"
-bullet4 = "Najbolje za: Pravno obavezujuće ugovore, eksternu verifikaciju"
-description = "Koristite svoju PKCS#12 datoteku sertifikata. Obezbeđuje potpunu kontrolu nad svojstvima sertifikata."
-title = "Otpremi prilagođeni P12"
-
 [certSign]
 awaitingSignatures = "Čeka se na potpise"
 chooseCertificate = "Izaberite fajl sertifikata"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Izvor sertifikata"
 upload = "Otpremi"
 
-[certSign.tooltip.header]
-title = "O upravljanju potpisima"
-
-[certSign.tooltip.overview]
-bullet1 = "Proverite postojeće potpise i njihovu validnost"
-bullet2 = "Prikažite detaljne informacije o potpisnicima i sertifikatima"
-bullet3 = "Dodajte nove digitalne potpise radi zaštite dokumenata"
-bullet4 = "Podržani su višestruki fajlovi uz jednostavnu navigaciju"
-text = "Ovaj alat vam omogućava da proverite da li su vaši PDF-ovi digitalno potpisani i da dodate nove digitalne potpise. Digitalni potpisi dokazuju ko je kreirao ili odobrio dokument i pokazuju da li je promenjen nakon potpisivanja."
-title = "Šta može ovaj alat?"
-
-[certSign.tooltip.signing]
-bullet1 = "Podržava PEM, PKCS12, JKS i formate serverskog sertifikata"
-bullet2 = "Opcija da prikažete ili sakrijete potpis na PDF-u"
-bullet3 = "Dodajte razlog, lokaciju i ime potpisnika"
-bullet4 = "Izaberite na kojoj strani da postavite vidljive potpise"
-bullet5 = "Koristite serverski sertifikat za jednostavnu opciju 'Potpiši sa Stirling-PDF'"
-text = "Za potpisivanje PDF-a potreban je digitalni sertifikat (kao PEM, PKCS12 ili JKS). Možete izabrati da potpis bude vidljiv na dokumentu ili da bude nevidljiv samo radi bezbednosti."
-title = "Dodavanje potpisa"
-
-[certSign.tooltip.validation]
-bullet1 = "Prikazuje da li su potpisi važeći ili nevažeći"
-bullet2 = "Prikazuje informacije o potpisniku i datum potpisivanja"
-bullet3 = "Proverava da li je dokument izmenjen nakon potpisivanja"
-bullet4 = "Može koristiti prilagođene sertifikate za verifikaciju"
-text = "Kada proveravate potpise, alat prikazuje da li su važeći, ko je potpisao dokument, kada je potpisan i da li je dokument promenjen nakon potpisivanja."
-title = "Provera potpisa"
-
 [changeCreds]
 changeUsername = "Ažurirajte korisničko ime. Bićete odjavljeni nakon ažuriranja."
 credsUpdated = "Nalog ažuriran"
@@ -2824,6 +3020,7 @@ next = "Sledeće"
 preview = "Pregled"
 previous = "Prethodno"
 refresh = "Osveži"
+remaining = "Preostalo"
 retry = "Pokušaj ponovo"
 save = "Sačuvaj"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog analitika"
 scarf = "Scarf piksel"
 
-[credits.modal]
-advancedMonitoring = "Napredno nadgledanje"
-allInOneWorkspace = "Sve-u-jednom PDF radni prostor (prikazivač, alati i agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Posvećena podrška i SLA-ovi"
-fasterThroughput = "10x brži protok"
-fullyPrivateFiles = "Potpuno privatne datoteke"
-largeFileProcessing = "Obrada velikih datoteka"
-orgWideAccess = "Kontrole pristupa na nivou organizacije"
-premiumAiModels = "Premium AI modeli"
-prioritySupport = "Prioritetna podrška"
-privateDocCloud = "Privatni oblak dokumenata"
-ragFineTuning = "RAG + fino podešavanje"
-secureApiAccess = "Bezbedan API pristup"
-standardThroughput = "Standardni protok"
-unlimitedApiAccess = "Neograničen API pristup"
-unlimitedSeats = "Neograničen broj korisnika"
-
 [crop]
 autoCrop = "Automatski iseci beline"
 noFileSelected = "Izaberite PDF fajl da biste započeli isecanje"
@@ -3346,6 +3525,7 @@ message = "Neuspešno postavljanje podrazumevanog PDF rukovaoca"
 title = "Greška"
 
 [defaultApp.prompt]
+dontRemind = "Ne podsećaj me ponovo"
 message = "Postavite Stirling PDF kao podrazumevanu aplikaciju za otvaranje PDF fajlova."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Prilagodi grupe"
 dropHint = "Otvorite datoteke da biste započeli"
 dropToAdd = "Drop files to add"
 expand = "Proširi bočnu traku"
-files = "Datoteke"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nije konfigurisan"
 leaveMyFiles = "Napusti Moje fajlove"
+library = "PDF biblioteka"
 myFiles = "Moji fajlovi"
 noFiles = "Još nema datoteka"
 openFileManager = "Otvori menadžer datoteka"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Dodaj"
-addLabel = "Dodaj oznaku…"
-categoryIconAria = "Izaberite ikonu za {{name}}"
-createCategory = "Kreiraj kategoriju"
-delete = "Izbriši kategoriju"
 done = "Gotovo"
-hide = "Sakrij kategoriju"
-newCategory = "Naziv nove kategorije…"
-removeLabel = "Ukloni {{name}}"
-rename = "Preimenuj"
 reset = "Vrati na podrazumevano"
-search = "Pretraži oznake…"
-show = "Prikaži kategoriju"
 subtitle = "Grupišite fajlove u nadređene kategorije. Dodajte postojeće ili nove oznake u kategoriju, preimenujte je ili kreirajte svoju. Fajlovi koji nisu ni u jednoj kategoriji prikazuju se pod „Ostalo”."
 title = "Kategorije bočne trake"
 
@@ -3808,6 +3977,7 @@ refresh = "Osveži sa servera"
 remove = "Obriši"
 removeVersion = "Ukloni ovu verziju"
 rename = "Preimenuj"
+renamed = "Preimenovano"
 renameFolder = "Preimenuj fasciklu"
 resizeFolderTree = "Promeni veličinu stabla fascikli (tasteri sa strelicama, Shift za veće korake; dvoklik za automatsko uklapanje)"
 save = "Sačuvaj"
@@ -3910,9 +4080,7 @@ count = "Fajlova"
 folder = "Fascikla"
 labels = "Oznake"
 modified = "Izmenjeno"
-name = "Naziv"
 size = "Veličina"
-toolHistoryAtVersion = "Kumulativni lanac alata"
 totalSize = "Ukupna veličina"
 type = "Tip"
 versionHistory = "Istorija verzija"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Sve je sačuvano"
+extractCsvError = "Izdvajanje CSV-a nije uspelo"
+extractXlsxError = "Izdvajanje XLSX-a nije uspelo"
 flattenAfterFilling = "Zapečati nakon popunjavanja"
+requiredAbbreviation = "obav"
+requiredFieldsError = "Popunite sva obavezna polja"
 rescanFields = "Ponovo skeniraj polja"
 rescanFormFields = "Ponovo skeniraj polja obrasca"
 save = "Sačuvaj"
+saveShortcut = "Ctrl+S za čuvanje"
+unsavedChanges = "Nesačuvane promene"
 
 [formFill.sidebar]
 close = "Zatvori bočnu traku"
@@ -4309,6 +4484,11 @@ desc = "Automatski preimenuje PDF datoteku na osnovu otkrivenog zaglavlja"
 tags = "automatsko otkrivanje,na osnovu zaglavlja,organizuj,preimenuj"
 title = "Automatski preimenuj PDF datoteku"
 
+[home.autoRotate]
+desc = "Otkrijte orijentaciju svake stranice i automatski je rotirajte uspravno."
+tags = "automatsko rotiranje,ispravi orijentaciju,naopako,bočno,ispravi,orijentiši,otkrij orijentaciju,ispravi rotaciju,automatski orijentiši,skenirano,OSD"
+title = "Automatsko rotiranje"
+
 [home.autoSizeSplitPDF]
 tags = "automatski,podeli,veličina"
 title = "Automatsko deljenje po veličini/broju"
@@ -4608,13 +4788,13 @@ hint = "Otpremite PNG, JPG, SVG ili drugi fajl slike da ga postavite na PDF. SVG
 label = "Otpremi sliku"
 placeholder = "Izaberite fajl slike"
 
-[imageToPdf]
-tags = "konverzija,img,jpg,slika,foto"
-
 [imageToPDF]
 header = "Slika u PDF"
 title = "Slika u PDF"
 
+[imageToPdf]
+tags = "konverzija,img,jpg,slika,foto"
+
 [infoBanner]
 dismiss = "Odbaci"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Pozvani ste!"
 
 [landing]
 addFiles = "Dodaj datoteke"
-heroSubtitle = "Prevucite ili dodajte postojeći PDF da biste počeli."
 mobileUpload = "Otpremi sa mobilnog"
 openFromComputer = "Otvori sa računara"
 uploadFromComputer = "Otpremi sa računara"
-workbenchEmptyStateHero = "Ispustite PDF bilo gde"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Prijava"
 magicLinkSent = "Magični link je poslat na {{email}}! Proverite e-mail i kliknite na link da biste se prijavili."
 mfaCode = "Autentifikacioni kod"
 mfaRequired = "Potreban je dvofaktorski kod"
+noAccount = "Nemate nalog?"
 or = "Ili"
 password = "Lozinka"
 passwordChangedSuccess = "Lozinka je uspešno promenjena! Prijavite se novom lozinkom."
@@ -4715,26 +4894,10 @@ signInWith = "Prijavite se pomoću"
 title = "Prijavite se"
 unexpectedError = "Neočekivana greška: {{message}}"
 updatePassword = "Ažuriraj lozinku"
-useEmailInstead = "Prijava pomoću e-maila"
 useMagicLink = "Umesto toga koristite magični link"
 username = "Korisničko ime"
 youAreLoggedIn = "Prijavljeni ste!"
 
-[login.slides.edit]
-alt = "Uređivanje PDF dokumenata"
-subtitle = "Uz više od desetak alata za zatamnjivanje, potpisivanje, čitanje i manipulaciju PDF dokumentima, sigurno ćete naći šta tražite."
-title = "Uredite PDF dokumente da prikažete/zaštitite informacije koje želite"
-
-[login.slides.overview]
-alt = "Pregled Stirling PDF"
-subtitle = "Cloud paket sa privatnošću na prvom mestu za PDF dokumente koji omogućava konvertovanje, potpisivanje, zatamnjivanje i upravljanje dokumentima, uz 50+ drugih moćnih alata."
-title = "Sve na jednom mestu za sve vaše PDF potrebe."
-
-[login.slides.secure]
-alt = "Zaštita PDF"
-subtitle = "Dodajte lozinke, zatamnite sadržaj i lako upravljajte sertifikatima."
-title = "Zaštitite osetljive informacije u vašim PDF dokumentima"
-
 [margin]
 large = "Veliko"
 medium = "Srednje"
@@ -4976,6 +5139,7 @@ pinButton = "Možete koristiti dugme <strong>Pin</strong> ako želite da vaši f
 results = "Nakon što alat završi, korak <strong>Review</strong> će prikazati pregled rezultata u ovom panelu i omogućiti vam da poništite operaciju ili preuzmete fajl. "
 runButton = "Kada je alat podešen, ovo dugme omogućava pokretanje alata na svim izabranim PDF-ovima."
 selectCropTool = "Hajde da izaberemo alat <strong>Crop</strong> da pokažemo kako se koristi jedan od alata."
+stepOf = "Korak {{current}} od {{total}}"
 toolInterface = "Ovo je interfejs alata <strong>Crop</strong>. Kao što vidite, nema mnogo toga jer još nismo dodali nijedan PDF fajl za rad."
 workbench = "Ovo je <strong>Workbench</strong> - glavno područje gde pregledate i uređujete svoje PDF-ove."
 wrapUp = "Spremni ste! Naučili ste o glavnim delovima aplikacije i kako da ih koristite. Kliknite na dugme <strong>Pomoć</strong> kada god želite da ponovo vidite ovu turu."
@@ -4988,6 +5152,26 @@ showMeAround = "Provedi me kroz aplikaciju"
 skipForNow = "Preskoči za sada"
 skipTheTour = "Preskoči obilazak"
 
+[onboarding.checklist]
+dismiss = "Odbaci"
+title = "Podesite Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Pokrenite Stirling nativno na svom računaru"
+title = "Preuzmite Stirling za desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Sarađujte sa svojim timom"
+title = "Pozovite članove tima"
+
+[onboarding.checklist.shareAnalytics]
+description = "Pomozite da se Stirling poboljša"
+title = "Delite anonimne podatke o korišćenju"
+
+[onboarding.checklist.takeTour]
+description = "Pogledajte kako Stirling radi u kratkom obilasku"
+title = "Pokrenite obilazak"
+
 [onboarding.desktopInstall]
 body = "Stirling najbolje radi kao desktop aplikacija. Možete je koristiti offline, brže pristupati dokumentima i praviti izmene lokalno na računaru."
 selectOs = "Izaberite operativni sistem"
@@ -4996,7 +5180,21 @@ titleWithOs = "Preuzmi za {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Autentifikacioni kod"
+description = "Zaštitite svoj nalog povezivanjem aplikacije za autentifikaciju. Skenirajte QR kod ili unesite ključ za podešavanje, zatim potvrdite 6-cifreni kod da završite."
+enable = "Omogući MFA"
+enableError = "Nije moguće omogućiti dvofaktorsku autentifikaciju. Proverite kod i pokušajte ponovo."
+enterCode = "Unesite 6-cifreni kod iz svoje aplikacije."
+enterCodeError = "Unesite kod za autentifikaciju da nastavite."
+logout = "Odjava"
+openAuthenticator = "Otvorite Google Authenticator, Authy ili 1Password."
 qrCodeLoading = "Generisanje vašeg QR koda…"
+regenerateQrCode = "Ponovo generiši QR kod"
+scanQrCode = "Skenirajte QR kod ili unesite ključ za podešavanje ispod."
+setupError = "Nije moguće pokrenuti podešavanje dvofaktorske autentifikacije. Pokušajte ponovo."
+setupKey = "Ključ za podešavanje (ručni unos)"
+stepByStep = "Korak po korak"
+success = "MFA je omogućen. Sada možete da nastavite."
+title = "Podešavanje višefaktorske autentifikacije"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Kada omogućite režim prijave, možete upravljati korisnicima, podešavati opcije i pratiti stanje servera. Prvih <strong>{{freeTierLimit}}</strong> ljudi na vašem serveru koristi Stirling besplatno."
@@ -5005,6 +5203,11 @@ adminTitle = "Admin pregled"
 userBody = "Pozovite kolege, dodeljujte uloge i držite dokumente organizovanim u jednom bezbednom prostoru. Omogućite režim prijave kad god ste spremni da pređete preko solo upotrebe."
 userTitle = "Pregled plana"
 
+[onboarding.processorIntro]
+body = "Stirling sada pokreće <strong>Pravila</strong> — automatizovana pravila koja klasifikuju, štite i obrađuju svaki dokument po dolasku. Podesite ih i pratite izvršavanja u <strong>Procesoru</strong>."
+cta = "Pogledajte Procesor"
+title = "Pogledajte Stirling Procesor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Unapred plaćena godina"
+
+[payg.prepaid.banner]
+exhausted = "Vaš unapred plaćeni kapacitet je potrošen; obračun po potrošnji je nastavljen. Dopunite da zadržite popust."
+expiring_one = "Vaša unapred plaćena godina se završava za {{count}} dan. Neiskorišćeni kapacitet ističe — dopunite da započnete novu godinu."
+expiring_other = "Vaša unapred plaćena godina se završava za {{count}} dana. Neiskorišćeni kapacitet ističe — dopunite da započnete novu godinu."
+low = "Preostalo vam je {{pct}}% unapred plaćenog kapaciteta. Dopunite bilo kada da obrada ostane neprekinuta."
+
+[payg.prepaid.card]
+subtitle = "Koristi se pre obračuna po potrošnji i izvan vašeg limita potrošnje."
+title = "Unapred plaćeni kapacitet"
+
+[payg.prepaid.meter]
+capSuffix = "od {{total}} unapred plaćenih kredita"
+expires = "Ističe {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Potrošeno"
+healthy = "Dovoljno preostalo"
+low = "Pri kraju"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Nalepite licencni ključ iz e-pošte"
 success = "Licenca aktivirana!"
 successMessage = "Vaša licenca je uspešno aktivirana. Sada možete zatvoriti ovaj prozor."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "primenjeno"
-enforcing = "Sprovodi se..."
-failed = "Primena nije uspela"
 outputsUnavailable = "Rezultati politike više nisu dostupni za preuzimanje."
 partialOutputsUnavailable = "Neki rezultati politike više nisu dostupni za preuzimanje."
-retrying = "Zauzeto, pokušavam ponovo..."
 runNotFound = "Izvršavanje primene više nije moguće pronaći."
-step = "korak {{current}}/{{total}}"
 timedOut = "Vreme za primenu je isteklo pre nego što je izvršavanje moglo da se završi."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Zatvori"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Primena {{names}}"
 applyingProgress = "Primena {{names}} ({{done}} od {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "Obrada {{failures}} od {{total}} datoteka nije uspela, pa su izve
 failureTitle = "Izvezeno bez potpune primene"
 printPolicyAppliedBody = "Ovaj PDF je ažuriran da bi ispunio politiku. Pregledajte izmene, zatim ponovo odštampajte."
 printPolicyAppliedTitle = "Politika primenjena pre štampanja"
-queued = "+{{count}} na čekanju"
 successTitle = "{{names}} primenjeno"
 summaryMore = "{{first}}, {{second}} i još {{more}}"
 summaryTwo = "{{first}} i {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Primena pre konverzije"
-default = "Primena"
-export = "Primena pre izvoza"
-input = "Primena pri uvozu"
-print = "Primena pre štampanja"
-
-[policies.field]
-accessLog = "Dnevnik pristupa"
-archiveAfter = "Arhiviraj posle"
-auditTrail = "Revizioni trag"
-belowThreshold = "Ispod praga"
-destination = "Odredište"
-frameworks = "Okviri"
-immutableHold = "Nepromeljivo zadržavanje"
-keepFor = "Čuvaj"
-minConfidence = "Min. pouzdanost"
-notify = "Obavesti pri usmeravanju"
-onViolation = "Kada nije usklađeno"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Dodaj"
-addPlaceholder = "Dodaj oznaku…"
-customNote = "Prilagođeno vašem timu."
-defaultNote = "Koristi se ugrađena podrazumevana vrednost, deljena sa vašim timom."
-duplicate = "\"{{name}}\" već postoji."
-edit = "Uredi oznake"
-empty = "Još nema oznaka."
-export = "Izvezi JSON"
-iconAria = "Izaberite ikonu za {{name}}"
-import = "Uvezi JSON"
-importError = "Nije moguće uvesti taj fajl."
-managedNote = "Timskim oznakama upravlja vođa vašeg tima."
-modalSubtitle = "Deljeno sa celim vašim timom. Klasifikator bira oznake koje odgovaraju svakom dokumentu."
-modalTitle = "Oznake klasifikacije"
-pickIcon = "Koristi ikonu {{label}}"
-removeAria = "Ukloni {{name}}"
-resetToDefault = "Vrati na podrazumevano"
-saveForTeam = "Sačuvaj za tim"
-saving = "Čuvanje…"
-sectionLabel = "Oznake klasifikacije"
-startFromScratch = "Počni od nule"
-teamCount = "timske oznake"
-tooLong = "Oznake mogu imati najviše {{max}} znakova."
-ungrouped = "Negrupisano"
-view = "Prikaži oznake"
+categoryCount = "kategorije"
+hideCategory = "Sakrij kategoriju"
+labelCount = "oznake"
+sharedNote = "Ove oznake su ugrađene i dele se u celom vašem timu."
+showCategory = "Prikaži kategoriju"
 
 [policies.pii]
 account = "Brojevi računa (označeni)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Brojevi za rutiranje u SAD (ABA)"
 ssn = "Brojevi socijalnog osiguranja"
 
-[policies.settings]
-noneExport = "Trenutno se nijedna politika ne pokreće pri izvozu."
-noneUpload = "Trenutno se nijedna politika ne pokreće pri otpremanju."
-onExport = "Pri izvozu"
-onUpload = "Pri otpremanju"
-reorderHandle = "Prevucite za promenu redosleda"
-runOrderDesc = "Kada se više od jedne politike pokreće na isti okidač, pokreću se ovim redosledom — svaka na izlazu prethodne politike. Prevucite za promenu redosleda."
-title = "Podešavanja politika"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Opcije politike"
-policySettings = "Podešavanja politika"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Ponovi neuspele politike ({{count}})"
-rowProgress = "Obrađeno {{completed}} od {{total}} fajlova"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Šta je politika?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Automatski pronalazi i zatamnjuje osetljive podatke — kao što su brojevi socijalnog osiguranja i brojevi kartica — kako ne bi mogli da se čitaju u dokumentu."
-sanitize = "Uklanja skriveni JavaScript iz datoteke, tako da se ništa ne pokreće automatski kada je neko otvori."
-watermark = "Postavlja vidljivu oznaku (npr. \"Poverljivo\") preko svake stranice."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Zatvori"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} se primenjuje..."
 badgeRan = "Politika {{name}} je pokrenuta na ovom fajlu"
+badgeRunning = "{{name}} se izvršava..."
 blockingAction = "{{action}} blokirano dok se politika primenjuje, sačekajte..."
 dismiss = "Zatvori preklop"
 enforcingTitle = "Primena politike..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Prikaži fajl (politika se i dalje primenjuje)"
 [policyOption]
 autoRedactPhi = "Automatski rediguj PHI"
 blockExport = "Blokiraj izvoz"
+ccpa = "CCPA"
 contracts = "Ugovori"
 documents = "Dokumenti"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor plan"
 subscribed = "Processor plan"
 unlinked = "Nije povezano"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Kreiraj iz dokumenta"
-sectionsAriaLabel = "Odeljci za izradu agenta"
-selectorAriaLabel = "Agenti"
-subtitle = "Dizajnirajte, testirajte i isporučite AI agente koji klasifikuju, izdvajaju iz i usmeravaju vaše dokumente. Definišite scenarije, ograničite pristup alatima, pokrenite zlatni skup i objavite verziju."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Otkaži"
-dropzoneText = "Izaberite primer dokumenta (PDF ili slika)"
-lead = "Ispustite primer dokumenta i predložićemo scenarije i šemu ekstrakcije koje možete doraditi. Ništa se ne objavljuje dok to ne pregledate."
-submit = "Kreiraj agenta"
-subtitle = "Započnite novog agenta iz jednog reprezentativnog fajla"
-title = "Kreiraj iz dokumenta"
-
-[portal.agentBuilder.empty]
-description = "Kreirajte agenta iz primera dokumenta da biste započeli njegove scenarije i šemu ekstrakcije, zatim doradite i objavite."
-title = "Još nema agenata"
-
-[portal.agentBuilder.evals]
-casesPassing = "Slučajevi prolaze"
-columnCase = "Eval slučaj"
-columnLatency = "Latencija"
-columnResult = "Rezultat"
-fail = "neuspeh"
-goldenSetPassRate = "Stopa prolaznosti zlatnog skupa"
-latencyMs = "{{ms}} ms"
-notRun = "nije pokrenuto"
-pass = "prolaz"
-passRate = "Stopa prolaznosti"
-runEvals = "Pokreni evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals pretvaraju vaše scenarije u ponovljiv zlatni skup. Nadogradite da biste pratili stopu prolaznosti tokom vremena i uslovili objavljivanja njome."
-title = "Još nema zlatnog skupa"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "preko zlatnih skupova"
-activeAgents = "Aktivni agenti"
-avgPassRate = "Prosečna stopa prolaznosti eval"
-fleetWide = "na nivou flote"
-latestPublished = "Poslednje objavljeno"
-scenarios = "Scenariji"
-testCases = "test slučajevi"
-totalDescription_one = "ukupno {{count}}"
-totalDescription_other = "ukupno {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Dodaj"
-addScenario = "Dodaj scenario"
-enable = "Omogući"
-expectationLabel = "Očekivano ponašanje"
-expectationPlaceholder = "Šta agent treba da uradi"
-inEval = "u eval"
-mute = "Utišaj"
-muted = "utišano"
-nameLabel = "Naziv"
-namePlaceholder = "npr. Eskalacija usklađenosti"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenariji"
-tools = "Alati"
-versions = "Verzije"
-
-[portal.agentBuilder.tools]
-broadAccess = "Širok pristup"
-deniedHint = "Izabrani alati su blokirani. Sve ostalo ostaje dostupno za pozivanje."
-deniedTools = "Zabranjeni alati"
-governanceGate = "Upravljanje alatima je dostupno na Enterprise planu."
-restricted = "Ograničeno"
-restrictedAccess = "Ograničen pristup alatima"
-restrictedDescription = "Dozvolite svaki alat osim onih koje zabranite ispod."
-
-[portal.agentBuilder.versions]
-current = "trenutna"
-historyGate = "Puna istorija verzija i vraćanje su dostupni na Enterprise planu."
-publish = "Objavi"
-rollBack = "Vrati nazad"
-
 [portal.assistant]
 close = "Zatvori asistenta"
 error = "Nije moguće doći do asistenta."
@@ -6365,9 +6346,21 @@ typing = "Kuca"
 loading = "Učitavanje"
 redirectingToEditor = "Preusmeravanje u editor..."
 
+[portal.billing.activation]
+maybeLater = "Možda kasnije"
+title = "Uključite Procesor"
+
+[portal.billing.activation.payg]
+sub = "Postavite mesečni limit. Plaćajte ono što pokrenete."
+title = "Plaćanje po potrošnji"
+
+[portal.billing.activation.prepay]
+badge = "2 meseca besplatno"
+sub = "Jedna faktura, kartica ili bankovni transfer."
+title = "Platite godinu unapred"
+
 [portal.billing.checkout]
 noClientSecret = "Edge funkcija nije vratila client_secret."
-subtitle = "Dodajte karticu da biste nastavili nakon besplatnog Editor plana. Stripe obrađuje ostalo."
 title = "Uključite Processor plan"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Vaša uplata je uspela, ali aktivacija traje malo duže nego obično. Uk
 close = "Zatvori"
 title = "Skoro gotovo"
 
+[portal.billing.checkout.cap]
+amountAria = "Mesečni limit potrošnje"
+back = "Nazad"
+continue = "Nastavi na plaćanje"
+error = "Nije moguće postaviti limit potrošnje"
+finePrint = "Fakture se izdaju mesečno. Otkažite bilo kada."
+noLimit = "Bez limita"
+note = "Nikada vam se ne naplaćuje preko limita. Obrada se samo pauzira."
+perMonth = "/ mes"
+title = "Postavite limit potrošnje"
+
+[portal.billing.checkout.card]
+fields = "Broj kartice · MM / GG · CVC · ZIP"
+label = "Podaci kartice"
+note = "Podatke kartice prikuplja Stripe. Stirling nikada ne čuva PAN ili CVC."
+
 [portal.billing.checkout.error]
 title = "Nije moguće pokrenuti checkout"
 
@@ -6383,10 +6392,9 @@ body = "Vaša uplata je prošla. Uključujemo mereno procesiranje na vašim pove
 hint = "Držite ovaj prozor otvoren."
 title = "Aktiviranje vašeg Processor plana..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "u portal env da biste omogućili checkout u aplikaciji."
-bodyBefore = "Podesite"
-title = "Stripe nije konfigurisan"
+[portal.billing.checkout.pay]
+limit = "Mesečni limit potrošnje {{amount}}/mes. Obrada se pauzira na limitu."
+limitNoCap = "Bez limita potrošnje. Obrada se neće pauzirati. Fakture se izdaju mesečno."
 
 [portal.billing.enterpriseUpsell]
 cta = "Sastavite svoju Enterprise ponudu"
@@ -6409,10 +6417,12 @@ currentPlan = "Trenutni plan"
 freeForever = "Besplatno zauvek"
 noTeamResolved = "Još nije razrešen tim na vašem novčaniku — osvežite i pokušajte ponovo."
 ownerOnly = "Samo vlasnik tima može da uključi Processor plan."
+payInvoice = "Platite fakturu za završetak"
 planName = "Editor"
 ssoIncluded = "SSO uključen"
 switchOnProcessor = "Uključi Processor →"
 unlimitedUsers = "Neograničen broj korisnika"
+viewQuote = "Prikaži ponudu"
 
 [portal.billing.invoices]
 columnAmount = "Iznos"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Direktni API zahtevi"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatizacije i pipeline-ovi"
 segmentAutomationLabel = "Automatizacija"
+sizeMultiplier = "{{formatted}} PDF-ova je koristilo množilac veličine"
+summary = "{{unique}} jedinstvenih · {{units}} obračunskih jedinica · {{avg}} prosek po PDF-u"
+summaryNoRate = "{{unique}} jedinstvenih · {{units}} obračunskih jedinica"
 unit = "mereni PDF dokumenti"
+unitsPending_one = "{{units}} obračunska jedinica čeka sinhronizaciju iz povezanih instanci"
+unitsPending_other = "{{units}} obračunskih jedinica čeka sinhronizaciju iz povezanih instanci"
+
+[portal.billing.prepaid]
+capSuffix = "od {{total}} unapred plaćenih kredita"
+expires = "Ističe {{date}}"
+eyebrow = "Unapred plaćeni kapacitet"
+note = "Koristi se pre obračuna po potrošnji i izvan vašeg limita potrošnje."
+topUp = "Dopuni"
+
+[portal.billing.prepaid.buy]
+back = "Nazad"
+calcTitle = "Izračunajte godišnju uplatu"
+cancel = "Otkaži"
+cancelPurchase = "Otkaži kupovinu"
+close = "Zatvori"
+continueToPayment = "Nastavi na plaćanje"
+finalise = "Završi"
+invoiceErrorTitle = "Nije moguće generisati fakturu"
+loadingTitle = "Učitavanje vaše ponude"
+payTitle = "Platite svoju godinu"
+step = "Korak {{current}} od {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Promeni"
+deployRow = "Implementacija"
+done = "Gotovo"
+enterpriseHint = "Ovo je enterprise nivo. Pri ovom obimu, enterprise cene nadmašuju svaki self-serve popust. Zaključavanje cene, uslovi i ponuda za nekoliko minuta."
+governanceRow = "Upravljanje"
+governanceValue = "{{label}} · {{count}} pravila"
+handlesLabel = "Vaš Procesor"
+handlesValue = "obrađuje {{volume}} kredita / mes"
+pipelinesLabel = "Tokovi obrade"
+policiesMeta = "{{count}} pravila"
+poolCaption = "Jedan skup od {{credits}} kredita za godinu. Teži meseci pozajmljuju od lakših."
+priceLabel = "Vaša godina · 12 meseci po ceni 10"
+rateUnknown = "Tačnu cenu ćemo prikazati pri plaćanju."
+savings = "Štedite {{amount}} · 2 meseca besplatno."
+sizingRow = "Dimenzionisanje"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Ukupno korisnika"
+
+[portal.billing.prepaid.consent]
+label = "Razumem da, kada se moj unapred plaćeni kapacitet potroši ili istekne posle 12 meseci, obrada automatski nastavlja po standardnoj stopi plaćanja po potrošnji (do mog limita potrošnje) osim ako ne otkažem, i da mogu da otkažem bilo kada iz portala za naplatu."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Upravlja Stirling. Uživo za nekoliko minuta."
+cloudValue = "Stirling Cloud · Upravljano"
+selfhost = "Self-hosted"
+selfhostDesc = "Radi na privatnoj infrastrukturi. Ista cena."
+selfhostValue = "Self-hosted · Privatna infrastruktura"
+
+[portal.billing.prepaid.offer]
+cta = "Pregledaj ponudu"
+subtitle = "Platite unapred godinu obrade PDF-ova i dobijte dva meseca besplatno, koristi se pre obračuna po potrošnji, izvan vašeg limita potrošnje."
+title = "Dobijte 12 meseci po ceni 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Ime vlasnika naloga"
+accountNamePlaceholder = "npr. Jane Smith"
+companyName = "Naziv kompanije (opciono)"
+companyNamePlaceholder = "npr. Acme Inc."
+downloadInvoice = "Preuzmi fakturu"
+payOnline = "Plati online"
+poNumber = "PO broj (opciono)"
+poNumberPlaceholder = "npr. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Napredno"
+advancedDesc = "Tokovi obrade pokreću većinu vaše obrade."
+none = "Nijedan"
+noneDesc = "Još ne pokrećete tokove obrade. Uključite ih bilo kada."
+standard = "Standardno"
+standardDesc = "Nekoliko tokova obrade ponovo obrađuje pristigle PDF-ove."
+
+[portal.billing.prepaid.posture]
+essentials = "Osnove"
+essentialsDesc = "Klasifikacija, podrazumevano, plus Deljenje"
+governed = "Upravljano"
+governedDesc = "Dodaje Bezbednost i Usmeravanje"
+regulated = "Regulisano"
+regulatedDesc = "Svaka kategorija, uklj. Usklađenost, Zadržavanje, Unos"
+
+[portal.billing.prepaid.review]
+download = "Preuzmi ponudu (PDF)"
+downloading = "Priprema…"
+share = "podeli za odobrenje"
+
+[portal.billing.prepaid.size]
+compact = "Kompaktno"
+compactDesc = "Datoteke ispod 25 MB, bez troškova za podatke"
+heavy = "Teško"
+heavyDesc = "Skenirano ili sa mnogo slika, redovno 50 MB+"
+standard = "Standardno"
+standardDesc = "Uglavnom malo, neki skenovi preko 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Potrošeno"
+healthy = "Dovoljno preostalo"
+low = "Pri kraju"
 
 [portal.billing.spendLimit]
 adjustLimit = "Podesi limit"
@@ -6494,6 +6608,8 @@ label = "Projektovano prekoračenje."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Potrošnja ovog meseca"
+freeRemaining_one = "Preostaje {{formatted}} besplatan PDF"
+freeRemaining_other = "Preostaje {{formatted}} besplatnih PDF-ova"
 processed_one = "Obrađen {{formattedCount}} PDF dokument."
 processed_other = "Obrađeno {{formattedCount}} PDF dokumenata."
 processedWithRate_one = "Obrađen {{formattedCount}} PDF dokument, po {{rate}} svaki."
@@ -6534,6 +6650,350 @@ signature = "potpis"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Nova veza"
+createTitleFor = "Poveži {{name}}"
+delete = "Izbriši"
+edit = "Uredi"
+editTitle = "Uredi vezu"
+unsupportedType = "Ovaj tip veze se ne može uređivati ovde."
+
+[portal.connections.categories.advanced]
+description = "Za uslugu koju još ne podržavamo."
+label = "Napredno"
+
+[portal.connections.categories.audit]
+description = "Zabeležite šta se dogodilo sa dokumentom tamo gde vaši auditori već gledaju."
+label = "Audit i evidencija usklađenosti"
+
+[portal.connections.categories.notify]
+description = "Obavestite drugi sistem da se nešto dogodilo."
+label = "Obaveštenja i tok rada"
+
+[portal.connections.categories.security]
+description = "Skenirajte ili označite dokument pre nego što nastavi dalje."
+label = "Bezbednost i klasifikacija"
+
+[portal.connections.categories.signing]
+description = "Pošaljite dokument na potpisivanje ili notarizaciju."
+label = "E-potpis i notarizacija"
+
+[portal.connections.categories.storage]
+description = "Gde obrađeni dokumenti završavaju - bucket, drive, tiket ili stranica."
+label = "Datoteke i prilozi"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling ovo čuva šifrovano i nikada ga više ne prikazuje."
+label = "Pristupni token"
+
+[portal.connections.commonFields.apiKey]
+label = "API ključ"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Koraci koji koriste ovu vezu mogu pozivati samo putanje ispod ovog URL-a, nikada drugi host."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Lozinka"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Korisničko ime"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Nalepite URL koji vam je usluga dala. Mogu se pozivati samo putanje ispod njega."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Naziv veze"
+namePlaceholder = "npr. Produkcija"
+
+[portal.connections.picker]
+cancel = "Otkaži"
+createNew = "Nova veza..."
+placeholder = "Izaberite vezu"
+save = "Sačuvaj vezu"
+
+[portal.connections.picker2]
+back = "Promeni integraciju"
+heading = "Šta želite da povežete?"
+noResultsBody = "Još to ne podržavamo - recite nam o tome i razmotrićemo dodavanje."
+noResultsTitle = "Ništa se ne poklapa sa \"{{query}}\""
+searchPlaceholder = "Pretražite integracije - probajte \"sign\", \"ocr\" ili naziv proizvoda"
+
+[portal.connections.types.api]
+description = "Pozovite bilo koji HTTP API iz pravila. Birate URL, autentifikaciju i payload."
+label = "Prilagođeni API"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentifikacija"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Korisničko ime i lozinka"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token u prilagođenom header-u"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Nijedna"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Prijava za token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Koraci koji koriste ovu vezu mogu pozivati samo putanje ispod ovog URL-a, nikada drugi host."
+label = "Osnovni URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Naziv header-a"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Putanja za prijavu"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Lozinka"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Ako API odgovori linkom za preuzimanje, mogu se preuzeti samo ovi hostovi. Razdvojite zarezima. Ostavite prazno da dozvolite samo sopstveni host osnovnog URL-a."
+label = "Dozvoljeni hostovi rezultata"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Pošalji token kao ovaj header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Response header u kojem login poziv vraća token, npr. X-Auth-Token."
+label = "Header odgovora tokena"
+
+[portal.connections.types.api.fields.username]
+label = "Korisničko ime"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skenirajte dokumente na malware na serveru koji pokrećete - ništa ne napušta vašu mrežu."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Skeniranje virusa i sadržaja za dokumente u pravilu."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blokirajte dokumente koji sadrže makroe, izvršne datoteke, skripte ili ugrađene objekte - ne samo poznati malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Priložite obrađene dokumente Confluence stranici."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Pošaljite dokumente u ConsignO Cloud (Notarius) za elektronski potpis i notarizaciju."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Vaše ConsignO Cloud okruženje, uključujući /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API ključ"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API tajna"
+
+[portal.connections.types.consigno.fields.password]
+label = "Lozinka"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Potrebno samo ako vaša organizacija koristi tenant-e."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Korisničko ime"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Objavite poruku na Discord kada pravilo obradi dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indeksirajte audit događaj u Elasticsearch svaki put kada pravilo obradi dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Proveravajte FTP ili FTPS server za nove dokumente."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Režim veze"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktivno"
+passive = "Pasivno (preporučeno)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Običan FTP šalje kredencijale i datoteke nešifrovano; izaberite FTPS ako server to podržava."
+label = "Šifrovanje"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (eksplicitno / AUTH TLS)"
+implicit = "FTPS (implicitno)"
+none = "Nijedno (običan FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Objavite poruku u Google Chat prostoru kada se pravilo pokrene."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Priložite obrađene dokumente Jira issue-u."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Pošaljite dokument ili obaveštenje email-om kada se pravilo pokrene."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Sačuvajte obrađene dokumente u Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Lozinka aplikacije"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Otkrijte lične podatke u tekstu dokumenta koristeći Presidio server koji pokrećete."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Čitajte i primenjujte Microsoft Purview oznake osetljivosti na PDF-ove."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Opciono. Potrebno samo za izbor oznaka po nazivu; označavanje radi i bez toga."
+label = "ID aplikacije (klijenta)"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Tajna klijenta"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Utiskuje se na svaku oznaku kao njen SiteId, kako bi alati svesni Purview-a znali koja organizacija ju je primenila."
+label = "ID direktorijuma (tenant)"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket iz kojeg izvori mogu čitati i u koji izlazi pipeline-a mogu pisati."
+label = "S3 skladište"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "ID pristupnog ključa"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Ostavite prazno za AWS. Podesite ovo za MinIO ili drugo S3-kompatibilno skladište."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Tajni pristupni ključ"
+
+[portal.connections.types.sendgrid]
+description = "Pošaljite dokument ili obaveštenje email-om kada se pravilo pokrene."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Proveravajte SFTP (SSH) server za nove dokumente."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Opciono. SHA-256 otisak host ključa servera (iz `ssh-keyscan host | ssh-keygen -lf -`). Kada je podešen, prihvata se samo server koji predstavlja ovaj ključ; kada je prazno, ključ viđen pri prvom povezivanju se pinuje i kasnije promene se odbijaju."
+label = "Otisak host ključa"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Passphrase ključa"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Ostavite prazno ako se autentifikujete privatnim ključem umesto toga."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Opciono. Nalepite OpenSSH privatni ključ za autentifikaciju ključem umesto lozinkom."
+label = "Privatni ključ"
+
+[portal.connections.types.slack]
+description = "Objavite poruku na Slack kada pravilo obradi dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Nadzirite SMB / CIFS mrežno deljenje (Windows ili Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Mrežno deljenje"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Opciono. Windows domen ili radna grupa, ako vaš server koristi jedno od toga."
+label = "Domen"
+
+[portal.connections.types.smb.fields.share]
+label = "Deljenje"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Pošaljite audit događaj u Splunk svaki put kada pravilo obradi dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Pošaljite audit događaj Sumo Logic HTTP collector-u."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Objavite poruku na Teams kanalu kada se pravilo pokrene."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Objavite svaki dokument, ili samo detalje, na URL koji izaberete."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Pokrenite Zap ili Make scenario iz pravila."
+label = "Zapier i Make"
+
+[portal.docs]
+browse = "Pregledaj dokumentaciju"
+viewSource = "Prikaži izvor na GitHub-u"
+
 [portal.docs.authentication]
 codeCaption = "svaki zahtev"
 eyebrow = "POČETAK"
@@ -6619,11 +7079,19 @@ title = "Zvanični SDK-ovi"
 beta = "Beta"
 deprecated = "Zastarelo"
 
+[portal.docs.search]
+empty = "Nema odgovarajuće dokumentacije"
+placeholder = "Pretraži dokumentaciju"
+results = "{{count}} rezultata"
+
 [portal.docs.skills]
 eyebrow = "VEŠTINE"
 lead = "Ugrađene, imenovane mogućnosti koje vaš agent poziva kao jedan alat. Svaka veština je deterministički lanac operacija sa priloženim evals."
 title = "Veštine agenta"
 
+[portal.docs.toc]
+title = "Na ovoj stranici"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCA"
@@ -6697,6 +7165,8 @@ type = "Tip"
 user = "Korisnik"
 
 [portal.documents.queue.empty]
+connectSource = "Povežite izvor"
+createPipeline = "Kreirajte tok obrade"
 description = "Kako izvori budu slali dokumente u vaše procesne tokove, pojavljivaće se ovde za proveru."
 title = "Nema dokumenata u redu"
 
@@ -6806,13 +7276,71 @@ description = "Ovaj prikaz je naišao na neočekivanu grešku. Pokušajte ponovo
 retry = "Pokušajte ponovo"
 title = "Nešto je pošlo naopako na ovoj stranici"
 
+[portal.home.download]
+back = "Nazad"
+body = "Preuzmite desktop aplikaciju ili self-hostujte server."
+done = "Gotovo"
+guide = "Otvori {{name}} vodič"
+openInBrowser = "Otvori u pregledaču umesto toga"
+sectionDesktop = "Desktop aplikacija"
+sectionSelfHosted = "Self-hosted"
+title = "Instalirajte Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Pokrenite zvaničnu sliku na svom serveru."
+note = "Otvara se na :8080. Podrazumevana prijava: admin / stirling."
+tagline = "Pokrenite server u kontejneru"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Instalirajte zvanični Helm chart."
+note = "Dodajte PVC za /configs da bi se podešavanja sačuvala."
+tagline = "Implementirajte u klaster pomoću Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Nativne verzije za vašu distribuciju."
+guideBtn = "Prikaži opcije instalacije za Linux"
+note = "AppImage, .deb i .rpm verzije su dostupne za uobičajene distribucije."
+tagline = "Nativna desktop aplikacija za vašu distribuciju"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Ili preko Homebrew"
+detailBody = "Pokrenite instalacioni program ili koristite Homebrew."
+downloadBtn = "Preuzmi za macOS"
+tagline = "Nativna aplikacija za Apple silicon i Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Pokrenite .jar na bare metal serveru."
+downloadBtn = "Preuzmi .jar"
+note = "Zahteva Java 21+. Otvara se na :8080; podrazumevana prijava admin / stirling."
+runLabel = "Zatim ga pokrenite"
+tagline = "Pokrenite .jar na bare metal serveru"
+title = "Ručno podešavanje servera"
+
+[portal.home.download.windows]
+altLabel = "Ili preko winget"
+detailBody = "Pokrenite instalacioni program ili koristite menadžer paketa."
+downloadBtn = "Preuzmi instalacioni program"
+tagline = "Nativna aplikacija za Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktivnih"
-invite = "Pozovi članove tima"
+activeOfDeployed = "{{active}} od {{total}} aktivno ovog meseca"
 name = "Stirling PDF Editor"
 open = "Otvori u pregledaču"
 updated = "ažurirano {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Završi implementaciju"
+options = "Prikaži opcije implementacije"
+start = "Implementiraj Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Dobar dan"
 evening = "Dobro veče"
 morning = "Dobro jutro"
 
-[portal.home.onboarding]
-dismiss = "Odbaci podešavanje"
-notStarted = "Nije započeto"
-progress = "{{done}} od {{total}} završeno"
-title = "Završite podešavanje"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC za celu organizaciju, ugovorene cene po obimu i postavljanje u izolovanoj mreži."
-cta = "Započni probu"
-ctaQuote = "Zatraži ponudu"
-lead = "Za 250+ zaposlenih."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Postavite desktop aplikaciju, zauvek besplatno."
-title = "Preuzmite PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktivno · {{recommended}} preporučeno"
-chip = "{{active}} aktivno"
-title = "Uključite politike"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} povezano · svaki PDF pod upravljanjem gde god da stigne"
-chip = "{{connected}} povezano"
-title = "Povežite svoje izvore"
-
-[portal.home.quickActions]
-subtitle = "Najvažniji zadaci za danas"
-title = "Brze radnje"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Kompozitor u 3 koraka preko tipizirane biblioteke operacija"
-title = "Napravite procesni tok"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenti, webhooks, nadgledani folderi"
-title = "Povežite izvor"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Ključ sa opsegom, ograničenjima stope i IP allowlist"
-title = "Izdajte API ključ"
-
 [portal.infrastructure]
 manageEditorDeployment = "Upravljajte postavljanjem Editora"
 sectionsAriaLabel = "Odeljci infrastrukture"
@@ -6878,13 +7363,9 @@ heading = "API ključevi"
 subheading = "Akreditivi sa opsegom, ograničenjima stope po ključu, dozvolama i IP allowlist."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Dozvoljene IP adrese"
-anyIp = "Bilo koja IP adresa (bez allowlist)"
 created = "Kreirano"
 lastUsed = "Poslednje korišćeno"
-permissions = "Dozvole"
-rateLimit = "Ograničenje stope"
-rateLimitValue = "{{value}} zahteva/min"
+revoke = "Opozovi ključ"
 usageMonth = "Korišćenje ovog meseca"
 usageToday = "Korišćenje danas"
 
@@ -6892,6 +7373,20 @@ usageToday = "Korišćenje danas"
 description = "Kreirajte ključ sa opsegom da biste počeli da pozivate Stirling API."
 title = "Još nema API ključeva"
 
+[portal.infrastructure.apiKeys.error]
+load = "Nije moguće učitati vaše API ključeve. Pokušajte ponovo."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Opozvati „{{name}}”? Svaka integracija koja i dalje koristi ovaj ključ odmah će početi da dobija 401 greške. Ovo se ne može opozvati."
+cancel = "Otkaži"
+confirm = "Opozovi ključ"
+title = "Opozovi API ključ"
+
+[portal.infrastructure.attestationLabel]
+attested = "Atestirano"
+inScope = "U opsegu"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtriraj audit događaje po kategoriji"
 heading = "Audit zapisi"
@@ -6935,6 +7430,7 @@ all = "Sve"
 auth = "Auth"
 config = "Konfiguracija"
 elevation = "Povišenje pristupa"
+policy = "Politika"
 processing = "Obrada"
 security = "Bezbednost"
 
@@ -6944,19 +7440,35 @@ title = "Nemate pristup"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguracija"
-elevation = "Povišenje pristupa"
+policy = "Politika"
 processing = "Obrada"
 totalEvents = "Ukupno događaja · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentikacija"
+config = "Konfiguracija"
+elevation = "Povećanje privilegija"
+policy = "Politika"
+processing = "Obrada"
+security = "Bezbednost"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Greška"
+info = "Informacija"
+success = "Uspeh"
+warning = "Upozorenje"
+
+[portal.infrastructure.certLabel]
+certified = "Sertifikovano"
+inProgress = "U toku"
+notStarted = "Nije započeto"
+
 [portal.infrastructure.createKey]
 cancel = "Otkaži"
 createKey = "Kreiraj ključ"
 done = "Gotovo"
-ipAllowlistHelper = "CIDR opsezi odvojeni zarezima. Ostavite prazno da dozvolite bilo koju IP adresu."
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "Naziv ključa"
 keyNamePlaceholder = "npr. Produkcija · unos"
-permissionsLabel = "Dozvole"
 secretKeyCaption = "Tajni ključ"
 secretWarning = "Sačuvajte ovo u menadžeru tajni. Stirling uvek čuva samo hash — nema načina da se kasnije oporavi."
 subtitle = "Ograničite opseg ključa na minimum koji mu je potreban. Možete ga rotirati ili opozvati u bilo kom trenutku."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopirajte ovu tajnu sada — neće biti ponovo prikazana."
 title = "Kreiraj API ključ"
 titleCreated = "Ključ je kreiran"
 
+[portal.infrastructure.deployLabel]
+live = "Uživo"
+queued = "U redu čekanja"
+rolledBack = "Vraćeno na prethodnu verziju"
+rolling = "Uvođenje u toku"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Uživo stanje svakog postavljenog Stirling regiona — latencija,
 description = "Postavljeni regioni će se ovde pojaviti kada vaš radni prostor bude obezbeđen."
 title = "Nema postavljenih regiona"
 
+[portal.infrastructure.keyLabel]
+active = "Aktivno"
+revoked = "Opozvano"
+
+[portal.infrastructure.modelLabel]
+active = "Aktivno"
+degraded = "Degradirano"
+disabled = "Onemogućeno"
+
 [portal.infrastructure.models]
 heading = "Modeli"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Tip"
 version = "Verzija"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/poziv"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktivni modeli"
 avgLatency = "Prosečna latencija"
@@ -7049,6 +7580,17 @@ modelForAria = "Model za {{operation}}"
 operation = "Operacija"
 routedTo = "Rutirano ka"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klasifikacija"
+extraction = "Ekstrakcija"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Degradirano"
+down = "Nedostupno"
+healthy = "Ispravno"
+
 [portal.infrastructure.security.access.byok]
 description = "Obezbedite ključ iz sopstvenog KMS. Stirling šifruje njime, ali i dalje može da čita."
 label = "Donesite sopstveni ključ (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeli"
 security = "Bezbednost"
 storage = "Skladište"
 
+[portal.integrations]
+addAnother = "Dodaj još jednu"
+availableHeading = "Dostupno"
+comingSoonHeading = "Uskoro"
+connect = "Poveži"
+connectedHeading = "Povezano"
+connectionCount_one = "{{count}} veza"
+connectionCount_other = "{{count}} veza"
+customApi = "Prilagođeni API"
+searchPlaceholder = "Pretraži integracije"
+subtitle = "Sve sa čim Stirling može da komunicira. Akreditivi se ovde kreiraju jednom, a zatim ih koriste izvori, politike i tokovi obrade."
+title = "Integracije"
+typedName = "Naziv za {{tool}}"
+
+[portal.integrations.filters]
+all = "Sve"
+audit = "Revizija"
+connected = "Povezano"
+notify = "Obaveštavanje"
+security = "Bezbednost"
+signing = "Potpisivanje"
+storage = "Skladište"
+
+[portal.integrations.status]
+connected = "Povezano"
+
+[portal.integrations.table]
+integration = "Integracija"
+worksWith = "Radi sa"
+
+[portal.integrations.worksWith]
+pipelines = "Tokovi obrade"
+policies = "Politike"
+sources = "Izvori"
+
+[portal.legal]
+draft = "{{label}} · nacrt"
+loadError = "Nije moguće učitati ovaj dokument. Pokušajte ponovo."
+loading = "Učitavanje…"
+title = "Pravni dokument"
+
 [portal.nav]
 agent-builder = "Kreator agenata"
 components = "Komponente"
@@ -7182,6 +7765,7 @@ documents = "Dokumenti"
 editor = "Editor"
 home = "Početna"
 infrastructure = "Infrastruktura"
+integrations = "Integracije"
 pipelines = "Procesni tokovi"
 policies = "Politike"
 procurement = "Nabavka"
@@ -7190,25 +7774,9 @@ sources = "Izvori"
 usage = "Korišćenje i naplata"
 users = "Korisnici"
 
-[portal.notifications]
-markAllRead = "Označi sve kao pročitano"
-title = "Obaveštenja"
-viewAll = "Prikaži sve"
-
-[portal.notifications.ariaLabel]
-none = "Obaveštenja, nema nepročitanih"
-unread_one = "Obaveštenja, {{count}} nepročitano"
-unread_other = "Obaveštenja, {{count}} nepročitanih"
-
-[portal.notifications.count]
-allRead = "sve pročitano"
-loading = "učitavanje"
-new_one = "{{count}} novo"
-new_other = "{{count}} novih"
-
-[portal.notifications.empty]
-description = "Nema novih obaveštenja."
-title = "Sve ste završili"
+[portal.nav.section]
+platform = "PDF platforma"
+processor = "PDF procesor"
 
 [portal.pipelines]
 subtitle = "Svaki automatizovani procesni tok dokumenata na backendu: uređeni lanac operacija nad skupom izvora, pokrenut okidačem. Kliknite na red za njegove korake i izvore."
@@ -7220,15 +7788,28 @@ newPipeline = "Novi procesni tok"
 [portal.pipelines.builder]
 addStep = "Dodaj alat"
 back = "Nazad na procesne tokove"
+cannotFollow = "Ne može da prihvati {{produced}}"
+chooseAccount = "Izaberite nalog"
+chooseDestination = "Izaberite odredište"
+chooseOperation = "Izaberite šta ovaj korak radi"
+chooseSource = "Izaberite izvor"
 discard = "Odbaci izmene"
 enabled = "Omogućeno"
+inputs = "Unos"
+inputSource = "Izvor unosa"
+inputTrigger = "Okidač"
 keepEditing = "Nastavi uređivanje"
+needsConfiguring = "Potrebno je podešavanje"
 needsUpload = "Potrebna je otpremljena datoteka"
+noSources = "Još nema povezanih izvora. Kreirajte jedan da biste ga koristili kao unos."
 noToolMatches = "Nijedan alat ne odgovara vašoj pretrazi."
 pipelineSettings = "Podešavanja procesnog toka"
 searchTools = "Pretraži alate"
 selectToolBody = "Dodajte alat da napravite procesni tok."
 selectToolTitle = "Još nema alata"
+sendToSystem = "Pošalji u drugi sistem"
+stepsIncompatible = "Ovi koraci ne mogu da se pokrenu na onome što njihov prethodni korak proizvodi: {{tools}}."
+stepsNeedSetup = "Ove korake i dalje treba podesiti pre čuvanja: {{tools}}."
 toolSettings = "Podešavanja alata"
 unknownStep = "Neprepoznata operacija, zadržana kakva jeste."
 unsavedBody = "Imate nesačuvane izmene. Sačuvajte ih pre napuštanja ili ih odbacite?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Nesačuvane izmene"
 uploadUnsupported = "Otpremljene datoteke još nisu podržane u procesnim tokovima, pa ovi koraci ne mogu biti sačuvani: {{tools}}."
 usesDefaults = "Pokreće se sa podrazumevanim podešavanjima"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinuje svaku datoteku iz prethodnog koraka"
+fan-out = "Pokreće se jednom po datoteci iz prethodnog koraka"
+format-mismatch = "Zahteva {{accepts}}, ali prethodni korak proizvodi {{produced}}"
+output-uncertain = "Možda se neće pokrenuti: izlaz prethodnog koraka zavisi od njegovog podešavanja"
+source-mismatch = "Zahteva {{accepts}}, ali unos ovog toka obrade je {{produced}}"
+undeclared-operation = "Nije moguće proveriti šta ovaj korak prihvata"
+
 [portal.pipelines.composer]
 addTool = "Dodaj alat"
 cancel = "Otkaži"
 chainEmpty = "Dodajte alat da počnete da pravite procesni tok."
 create = "Kreiraj procesni tok"
-directory = "Izlazni folder"
-directoryHelp = "Apsolutna putanja na serveru. Mora biti unutar konfigurisanih dozvoljenih foldera."
 editingUnsupported = "Prikaz ovih parametara alata za uređivanje još nije podržan."
 moveDown = "Pomeri dole"
 moveUp = "Pomeri gore"
 name = "Naziv"
 namePlaceholder = "npr. Prolaz za redakciju"
-noSources = "Još nema povezanih izvora. Procesni tok i dalje može da se pokreće nad datotekama koje mu se direktno dostave."
 noToolSettings = "Ovaj alat nema podesiva podešavanja."
 operations_one = "Operacija ({{count}})"
 operations_other = "Operacije ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Obriši"
 title = "Obrisati procesni tok?"
 
 [portal.pipelines.detail]
+clearHistory = "Obriši istoriju"
 delete = "Obriši procesni tok"
 run = "Pokreni sada"
 
 [portal.pipelines.empty]
 action = "Kreiraj procesni tok"
+connectSource = "Poveži izvor"
 description = "Kreirajte svoj prvi procesni tok: izaberite izvore nad kojima se pokreće, povežite operacije u lanac i izaberite gde izlaz ide."
 title = "Još nema procesnih tokova"
 
@@ -7286,15 +7874,17 @@ active = "Aktivni"
 paused = "Pauzirani"
 total = "Procesni tokovi"
 
-[portal.pipelines.output]
-folder = "Upiši u folder"
-inline = "Vrati datoteke"
-
 [portal.pipelines.run]
+allProcessed_one = "Nema šta da se pokrene: {{count}} dokument iz izvora je već obrađen."
+allProcessed_other = "Nema šta da se pokrene: svih {{count}} dokumenata u izvorima je već obrađeno."
 completed_one = "Pokretanje je završeno."
 completed_other = "Svih {{count}} pokretanja je završeno."
 empty = "Nema ničega za pokretanje: izvori nisu imali dokumente za obradu."
 failed = "Pokretanje nije uspelo: {{error}}"
+historyCleared = "Istorija je obrisana. Sledeće pokretanje ponovo obrađuje sve što se trenutno nalazi u izvorima."
+inFlight = "Nema ničeg novog za pokretanje: dokumenti se još obrađuju iz ranijeg pokretanja."
+parked_one = "Nema šta da se pokrene: {{count}} dokument prethodno nije uspeo i parkiran je. Otklonite uzrok, zatim obrišite istoriju da biste pokušali ponovo."
+parked_other = "Nema šta da se pokrene: {{count}} dokumenata prethodno nije uspelo i parkirani su. Otklonite uzrok, zatim obrišite istoriju da biste pokušali ponovo."
 running = "Pokretanje je započeto; još je u toku."
 timeout = "Pokretanje traje duže od očekivanog; možda će se i dalje završiti u pozadini."
 
@@ -7314,12 +7904,18 @@ manual = "Ručno"
 schedule = "Zakazano"
 
 [portal.policies]
+defaultName = "Politika za {{category}}"
 subtitle = "Stalne automatizacije koje primenjuju procesni tok alata na svaki dokument. Svaka politika se aktivira pri otpremanju ili izvozu, pokreće svoj lanac alata i čuva primenjenu verziju pored originala."
 title = "Politike"
 
 [portal.policies.card]
 comingSoon = "Nadogradite na Enterprise"
 notSetUp = "Nije podešeno"
+requiresAiEngine = "Zahteva AI engine"
+
+[portal.policies.categories.classification]
+desc = "Identifikujte tip svakog dokumenta pri otpremanju i označite njegove metapodatke radi arhiviranja i pretrage."
+label = "Klasifikacija"
 
 [portal.policies.categories.compliance]
 desc = "Sprovedite HIPAA, GDPR, SOC 2 ili FedRAMP zahteve na svakom dokumentu."
@@ -7344,6 +7940,13 @@ label = "Bezbednost"
 [portal.policies.config]
 scopeAll = "Svi dokumenti"
 
+[portal.policies.config.classification]
+summary = "Klasifikuje svaki otpremljeni dokument prema oznakama vašeg tima i označava njegove metapodatke."
+
+[portal.policies.config.classification.rules]
+0 = "Klasifikuj"
+1 = "Označi metapodatke"
+
 [portal.policies.config.compliance]
 summary = "Validira dokumente prema regulatornim okvirima pre nego što napuste sistem."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min. pouzdanost"
 2 = "Imenuj"
 3 = "Normalizuj"
 
+[portal.policies.config.purview]
+label = "Primeni Microsoft Purview oznaku osetljivosti"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "ID oznake"
+labelIdHelp = "GUID oznake, sa Purview portala. Primena oznake upisuje njene metapodatke u PDF; ne može da šifruje, za šta je potreban Microsoft klijent."
+labelName = "Naziv oznake (opciono)"
+labelNameHelp = "Beleži se uz ID kako bi ljudi i alati mogli da prepoznaju oznaku."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview razlikuje oznaku koju je primenila politika od one koju je izabrala osoba."
+label = "Kako se oznaka beleži"
+privileged = "Kao što je izabrala osoba"
+standard = "Kao automatski primenjeno"
+
+[portal.policies.config.purviewRead]
+label = "Pročitaj Microsoft Purview oznaku"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Čita oznaku koju dokument već nosi, kako bi kasniji koraci mogli da deluju na osnovu nje."
+
 [portal.policies.config.retention]
 summary = "Sprovodi koliko dugo se dokumenti čuvaju, kada se arhiviraju i kada se brišu."
 
@@ -7438,6 +8064,7 @@ title = "Još nema aktivnosti"
 [portal.policies.endpoints]
 addWatermark = "Vodeni žig"
 autoRedact = "Rediguj PII"
+classifyAndLabel = "Klasifikuj"
 compressPdf = "Kompresuj"
 flatten = "Poravnaj"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Vaše politike su sačuvane i pojaviće se kada se veza obnovi."
 retry = "Pokušaj ponovo"
 title = "Backend nije dostupan"
 
+[portal.policies.operations]
+change = "Promeni šta ovaj korak radi"
+noResults = "Nijedan korak se ne poklapa sa tim. Pokušajte sa nazivom proizvoda ili „scan”, „notify”, „attach”."
+searchPlaceholder = "Pretraži korake - pokušajte „scan”, „attach” ili naziv proizvoda"
+
+[portal.policies.operations.bodyMode]
+binary = "Sirovi bajtovi datoteke"
+json = "Unutar JSON payload-a"
+multipart = "Kao otpremanje datoteke (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Vaš sopstveni ClamAV server proverava dokument; ništa ne napušta vašu mrežu."
+label = "Skeniraj na viruse (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Odbija dokumente koji nose makroe, izvršne datoteke, skripte ili ugrađene objekte."
+label = "Blokiraj aktivni sadržaj"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive proverava dokument i pokretanje se zaustavlja ako nije čist."
+label = "Skeniraj na viruse"
+
+[portal.policies.operations.confluenceAttach]
+description = "Smešta obrađeni dokument na stranicu."
+label = "Priloži na Confluence stranicu"
+
+[portal.policies.operations.consignoSubmit]
+description = "Šalje dokument u ConsignO Cloud na potpisivanje."
+label = "Pošalji na potpisivanje (ConsignO)"
+note = "Šalje dokument. Preuzimanje potpisane kopije još nije podržano, jer korak ne može da prosledi rezultat kasnijem koraku."
+
+[portal.policies.operations.customApiCall]
+description = "Sami definišite poziv: putanju, metod, telo i obradu odgovora."
+label = "Pozovi prilagođeni API"
+
+[portal.policies.operations.discordNotify]
+description = "Obaveštava kanal da je politika obradila dokument."
+label = "Objavi poruku na Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Beleži šta je politika uradila kao pretraživ dokument."
+label = "Indeksiraj događaj revizije u Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart odgovara API-jima za otpremanje; JSON odgovara API-jima koji žele datoteku unutar payload-a; binary šalje sirove bajtove."
+label = "Kako poslati dokument"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON telo se šalje takvo kakvo jeste. {{document.base64}} sadrži datoteku; {{document.*}} i {{run.*}} se popunjavaju po dokumentu."
+label = "JSON telo"
+
+[portal.policies.operations.fields.connection]
+label = "Nalog"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domen"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Polje obrasca pod kojim API očekuje dokument."
+label = "Naziv polja datoteke"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Od"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON objekat parova naziv/vrednost zaglavlja. Akreditiv veze se dodaje za vas."
+label = "Zaglavlja"
+
+[portal.policies.operations.fields.index]
+label = "Indeks"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ključ zadatka"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Šalje se kao telo poruke. {{document.*}} i {{run.*}} se popunjavaju po dokumentu."
+label = "Poruka"
+
+[portal.policies.operations.fields.method]
+label = "Metod"
+
+[portal.policies.operations.fields.pageId]
+label = "ID stranice"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Dodaje se na osnovni URL veze. Nikada ne može da dosegne drugi host."
+label = "Putanja"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Gde na disku treba upisati dokument. {{document.filename}} se popunjava po dokumentu."
+label = "Odredišna putanja"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Izveštaj ostavlja dokument neizmenjenim. Zamena ga menja onim što stigne nazad."
+label = "Šta uraditi sa odgovorom"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email potpisnika"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Naslov"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analizira ovaj tekst. Koristite {{document.title}} ili nalepite tekst koji želite da proverite."
+label = "Tekst za proveru"
+
+[portal.policies.operations.fields.to]
+label = "Za"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud korisničko ime"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Obaveštava prostor da je politika obradila dokument."
+label = "Objavi poruku na Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Smešta obrađeni dokument u zadatak."
+label = "Priloži uz Jira zadatak"
+
+[portal.policies.operations.mailgunEmail]
+description = "Šalje obrađeni dokument kao prilog."
+label = "Pošalji dokument email-om (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Upisuje obrađeni dokument u fasciklu."
+label = "Otpremi u Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Vaš sopstveni Presidio server prijavljuje lične podatke koje pronađe."
+label = "Otkrij lične podatke"
+note = "Presidio čita tekst, ne datoteke. Dajte mu tekst koji želite da proverite — sam dokument se ne otprema."
+
+[portal.policies.operations.responseMode]
+replace = "Zameni dokument odgovorom"
+report = "Zadrži dokument, zabeleži odgovor"
+
+[portal.policies.operations.sendgridEmail]
+description = "Šalje obrađeni dokument kao prilog."
+label = "Pošalji dokument email-om (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Obaveštava kanal da je politika obradila dokument."
+label = "Objavi poruku na Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Beleži šta je politika uradila, tamo gde vaši revizori već gledaju."
+label = "Pošalji događaj revizije u Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Beleži šta je politika uradila u HTTP kolektor."
+label = "Pošalji događaj revizije u Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Obaveštava kanal da je politika obradila dokument."
+label = "Objavi poruku na Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Šalje sam dokument na URL koji izaberete."
+label = "Pošalji dokument na webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Predaje detalje pokretanja vašoj automatizaciji."
+label = "Pokreni Zap ili Make scenario"
+
 [portal.policies.stats]
 activeFor = "Aktivno"
 dataProcessed = "Obrađeni podaci"
@@ -7473,6 +8277,13 @@ label = "Primenjeno na dokumente"
 description = "Konfigurisano, ali se ne pokreće"
 label = "Pauzirano"
 
+[portal.policies.table]
+appliesTo = "Primenjuje se na"
+docs = "Dokumenti pod pravilima"
+enforces = "Sprovodi"
+policy = "Politika"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Nazad"
 cancel = "Otkaži"
@@ -7480,6 +8291,10 @@ continue = "Nastavi"
 enablePolicy = "Omogući politiku"
 saveChanges = "Sačuvaj izmene"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifikuje tip dokumenta iz oznaka vašeg tima i označava ga, kako bi se arhivirao i pretraživao po kategoriji."
+label = "Klasifikuj dokument"
+
 [portal.policies.wizard.capability.compress]
 desc = "Kompresuje dokument na manju veličinu datoteke."
 label = "Smanji veličinu datoteke"
@@ -7500,10 +8315,18 @@ label = "Rediguj osetljive informacije"
 desc = "Uklanja skriveni JavaScript tako da ništa ne može automatski da se pokrene kada se dokument otvori."
 label = "Ukloni aktivni sadržaj"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Dokazuje da je dokument postojao u ovom tačnom obliku u određenom trenutku, koristeći nezavisni autoritet za vremenski žig. Šalje se samo hash - dokument nikada ne napušta vaš server."
+label = "Dodaj pouzdani vremenski žig"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Stavlja vidljivu oznaku (npr. „Poverljivo“) preko svake stranice."
 label = "Primeni vodeni žig"
 
+[portal.policies.wizard.classification]
+description = "Svaki otpremljeni dokument se klasifikuje prema ugrađenim oznakama i označava tipovima koji mu odgovaraju. Skup oznaka se deli u celom vašem timu."
+labelsHeading = "Oznake klasifikacije"
+
 [portal.policies.wizard.errors]
 noTools = "Prvo omogućite bar jedan alat u toku rada."
 saveFailed = "Nije moguće sačuvati politiku. Pokušajte ponovo."
@@ -7548,73 +8371,118 @@ setUp = "Podesi {{category}} politiku"
 [portal.policies.wizard.workflow]
 description = "Izaberite šta ova politika radi svakom dokumentu koji obrađuje."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktivno"
-noRule = "Još nije primenjeno nijedno pravilo"
-subtitle = "Stalne automatizacije kroz koje prolazi svaki dokument, bez obzira na to koji tok obrade ga obrađuje."
-title = "Šta se pokreće na vašim PDF-ovima"
-
 [portal.policySummary.action]
-comingSoon = "Nadogradite na Enterprise"
-configure = "Konfiguriši"
 setUp = "Podesi"
 
-[portal.policySummary.column]
-activeRule = "Aktivno pravilo"
-policy = "Politika"
-status = "Status"
+[portal.processorFlow]
+footnote = "Brojevi su za poslednja 24 sata. Brzina toka je ilustrativna."
+liveBadge = "Uživo"
+stats = "{{connected}} povezano · {{processed}} PDF-ova obrađeno"
+title = "PDF procesor"
 
-[portal.policySummary.empty]
-description = "Kada se politike konfigurišu, kategorije će se pojaviti ovde."
-title = "Još nema politika"
+[portal.processorFlow.lens]
+ariaLabel = "Režim prikaza"
+flow = "Tok"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktivno"
-off = "Isključeno"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Neuspešno"
+heading = "Ishodi"
+success = "Isporučeno"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktivnih"
+count = "{{n}} · 24h"
+heading = "Politike"
+setUp = "Podesi"
 soon = "Uskoro"
 
-[portal.processingStatus]
-managePlan = "Upravljaj planom"
-volumeSuffix = "PDF-ovi obrađeni · poslednjih 30 dana"
+[portal.processorFlow.sankey]
+waist = "Politike · {{n}} aktivnih"
+
+[portal.processorFlow.sankey.empty]
+description = "Povežite izvor i uključite politiku da biste videli kako dokumenti prolaze kroz procesor."
+title = "Još nema toka"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Poveži"
+editor = "Stirling PDF Editor"
+heading = "Izvori"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Prijem email-a"
 
 [portal.procurement]
-reset = "Resetuj nabavku (demo)"
 subtitle = "Obavite procenu, ugovaranje i uvođenje tima. Svaki dokument na jednom mestu."
 title = "Nabavka"
 
-[portal.procurement.action]
-download = "Preuzmi"
-pay = "Plati sada"
-request = "Zatraži"
-sign = "Pregledaj i potpiši"
-upload = "Otpremi"
-
 [portal.procurement.agreement]
 agreeCta = "Prihvati i pretplati se"
+confidential = "Poverljivo"
 confirm = "Pročitao/la sam i prihvatam Stirling Enterprise Agreement."
-eyebrow = "Ugovor"
-intro = "Jedan objedinjeni ugovor pokriva vaš dogovor: Master Service Agreement, Order Form, EULA i Data Processing Agreement. Pregledajte ga, a zatim prihvatite ponudu kao obaveznu pretplatu."
-title = "Pregledajte svoj enterprise ugovor"
+docName = "Stirling Enterprise ugovor"
+docSub = "MSA, narudžbeni obrazac, EULA i DPA, objedinjeni u jedan potpis."
+download = "Preuzmi"
+downloadDraftError = "Nije moguće generisati PDF ugovora - renderer dokumenta nije dostupan. Pokušajte ponovo uskoro ili kontaktirajte podršku."
+downloadError = "Nije moguće preuzeti potpisani ugovor. Pokušajte ponovo."
+legalName = "Naziv pravnog lica"
+legalNamePlaceholder = "Pravno lice koje će potpisati"
+loadError = "Nije moguće učitati ugovor. Pokušajte ponovo."
+loading = "Učitavanje ugovora..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Zatraži izmene"
+scrollHint = "Pomerite da pregledate"
+signatory = "Ime potpisnika"
+signatoryPlaceholder = "Puno ime"
+signatoryTitle = "Funkcija potpisnika"
+signatoryTitlePlaceholder = "npr. glavni pravni savetnik"
+signError = "Nije moguće zabeležiti vaš potpis. Pokušajte ponovo."
 
 [portal.procurement.builder]
 addons = "Dodaci"
+addressLine1 = "Adresa, red 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adresa, red 2"
+addressLine2Placeholder = "Apartman, sprat, zgrada"
 back = "Nazad"
 businessName = "Naziv preduzeća"
 businessNamePlaceholder = "Vaša kompanija"
+city = "Grad"
+cityPlaceholder = "San Francisco"
+completeRequired = "Popunite obavezna polja (označena *) važećim email-om pre generisanja ponude."
+contactEmail = "Kontakt email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Ime kontakta"
+contactNamePlaceholder = "Jane Doe"
 continue = "Nastavi"
-country = "Zemlja"
-countryEuro = "Evrozona (EUR €)"
-countryUK = "Ujedinjeno Kraljevstvo (GBP £)"
-countryUS = "Sjedinjene Države (USD $)"
+done = "Gotovo"
 eula = "Pročitao/la sam i prihvatam Stirling Enterprise EULA. Ona uređuje ugovor generisan iz ove ponude."
 generate = "Generiši ponudu"
-included = "Uključeno"
 indemnification = "IP obeštećenje"
 indemnificationSub = "Branimo kvalifikovane IP zahteve, prema EULA"
-offlineLicense = "Offline / air-gapped licenca"
-offlineLicenseSub = "Licencna datoteka za preuzimanje za air-gapped self-hosted instancu"
+paperEyebrow = "Enterprise ponuda"
+paperFor = "Pripremljeno za"
+pdfSize = "Veličina PDF-a"
+poNumber = "Broj narudžbenice"
+poNumberPlaceholder = "Opciono"
+postalCode = "Poštanski broj"
+postalCodePlaceholder = "94105"
+posture = "Upravljanje"
+posture_count = "~{{count}} politika"
+posture_essentials = "Osnovno"
+posture_essentialsSub = "Klasifikacija + deljenje — podrazumevano"
+posture_governed = "Upravljano"
+posture_governedSub = "Dodaje bezbednost i rutiranje"
+posture_regulated = "Regulisano"
+posture_regulatedSub = "Svaka kategorija — usklađenost, zadržavanje, unos"
 qbr = "Kvartalni poslovni pregledi"
 qbrSub = "Vaš SE pregleda korišćenje i roadmap svakog kvartala"
+region = "Država / region"
+regionPlaceholder = "California"
 running = "{{annual}} / god · {{years}}-god {{tcv}}"
 s1Sub = "Vaš tim i PDF-ovi koje očekujete da obrađujete svake godine."
 s1Title = "Koliko ćete obrađivati?"
@@ -7623,6 +8491,12 @@ s2Title = "Obaveza i usluga"
 s3Sub = "Za ponudu i ugovor koji ona generiše."
 s3Title = "Vaši podaci"
 serviceLevel = "Nivo usluge"
+size_compact = "Kompaktno"
+size_compactSub = "Uglavnom tekst, ispod 1 MB"
+size_heavy = "Teško"
+size_heavySub = "Skenirano ili sa mnogo slika, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Mešavina teksta i slika, 1 do 5 MB"
 slDedicated = "Dedicated"
 slDedicatedSub = "4 radna sata · namenski menadžer naloga · +30%"
 slPriority = "Priority"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Isti radni dan · imenovani CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Sledeći radni dan · deljeni CSM · uključeno"
 stepOf = "Korak {{n}} od {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Opciono"
 term = "Rok"
 termDiscount = "Primenjen je {{pct}}% popust za višegodišnju obavezu"
 title = "Napravite svoju ponudu"
@@ -7637,6 +8513,7 @@ training = "Uvođenje i obuka"
 trainingSub = "Sesije uživo da vaš tim počne da radi"
 users = "Ukupno korisnika"
 usersPlaceholder = "npr. 250"
+viewEula = "Pročitaj"
 volEstimated = "Procenjeno na osnovu {{count}} korisnika (~2.000 PDF-ova po korisniku, uključujući automatizaciju). Izmenite ako znate bolje."
 volManual = "Koristi se vaša vrednost. U svakom trenutku možete ponovo proceniti na osnovu veličine tima."
 volNoUsers = "Niste sigurni? Unesite veličinu tima i mi ćemo proceniti."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "npr. 1.000.000"
 years_one = "{{count}} godina"
 years_other = "{{count}} godina"
 
-[portal.procurement.docs]
-count_one = "{{count}} dok."
-count_other = "{{count}} dok."
-done = "Gotovo"
-here = "Ovde ste"
-hide = "Sakrij"
-optional = "Opciono"
-paidAddon = "Plaćeni dodatak"
-show = "Prikaži"
-subtitle = "Sve što vam je potrebno u svakom koraku puta, prikazano kako dogovor napreduje."
-supportingSubtitle = "SOC 2, bezbednosne provere, poreski obrasci i još mnogo toga, spremno kada vaš tim za bezbednost ili nabavku zatraži. Neki nose jednokratnu naknadu."
-supportingTitle = "Podrška vašoj proceni"
+[portal.procurement.documents]
+agreement = "Enterprise ugovor"
+agreementSub = "MSA, narudžbeni obrazac i DPA u jednom potpisu."
+download = "Preuzmi"
+eula = "EULA i komercijalni uslovi"
+eulaSub = "Softver i self-serve komercijalni uslovi."
+invoice = "Faktura"
+invoiceSub = "Vaša prva faktura za pretplatu."
+laterInvoice = "Dostupno nakon što prihvatite"
+laterQuote = "Dostupno kada vaša ponuda bude izdata"
+quote = "Ponuda"
+quoteSub = "Vaša detaljna enterprise ponuda."
+sla = "SLA prilog"
+slaSub = "Nivoi podrške i ciljevi vremena odgovora."
+subprocessors = "Podobrađivači"
+subprocessorsSub = "Treće strane koje obrađuju podatke u vaše ime."
+subtitle = "Vaša dokumentacija za ugovor, dostupna u svakom trenutku."
 title = "Dokumenti"
-upcoming = "Predstojeće"
+view = "Prikaži"
 
 [portal.procurement.error]
 title = "Nešto je pošlo naopako"
 
 [portal.procurement.hero]
-company = "Vaš enterprise dogovor"
+barAria = "Faza {{current}} od {{total}}"
 ctaAgreement = "Pregledaj i potpiši ugovor"
-ctaLive = "Uživo ste"
-ctaPayment = "Dodaj plaćanje"
+ctaExploring = "Podesite probni period"
 ctaQuote = "Pregledajte svoju ponudu"
+ctaReviewQuote = "Pregledaj ponudu"
 ctaTrial = "Napravite svoju ponudu"
+documents = "Dokumenti"
 eyebrow = "Enterprise nabavka"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Pozovite članove tima"
-keyDocs = "Ključni dokumenti"
-nextStep = "Sledeći korak: {{action}}"
-notStarted = "Nije započeto"
+licenseKey = "Licencni ključ"
+liveSub = "Vaša organizacija je provisionirana i vaša licenca je aktivna."
+liveTitle = "Uživo ste na Stirling Enterprise"
+next = "Sledeće: {{stage}}"
 open = "Otvori nabavku"
 scheduleCall = "Zakaži poziv"
-setup1Sub = "Pozovite članove svog tima"
-setup1Title = "Postavite PDF Editor"
-setup2Sub = "Uključite obradu kroz editore i druge izvore"
-setup2Title = "Povežite PDF Processor"
-setup3Sub = "Uključite Security, Compliance, Routing ili Retention kada vam zatrebaju"
-setup3Title = "Dodajte preporučene politike"
+sentenceAgreement = "pregledajte i potpišite ugovor"
+sentenceLive = "provisioniranje i uvođenje"
+sentencePayment = "narudžbenica i plaćanje"
+sentenceQuote = "pregledajte i prihvatite ponudu"
+sentenceTrial = "podesite probni radni prostor"
 
 [portal.procurement.journey]
 daysLeft_one = "Preostao je {{count}} dan"
 daysLeft_other = "Preostalo je {{count}} dana"
-engineerLabel = "Vaš solutions engineer"
-eyebrow = "Vaše uvođenje"
-live = "Uživo ste na Stirling Enterprise"
-nextStep = "Sledeći korak: {{action}}"
-subtitle = "Vaš solutions engineer je uz vas u svakom koraku. Jedna sledeća radnja u datom trenutku; potpuna kontrolna lista je ispod."
-title = "Od probnog perioda do rada uživo, jedan vođeni put"
-trialTitle = "Enterprise probni period"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Jedan potpis pokriva MSA, order form, EULA i DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Još nije moguće generisati offline licencnu datoteku — poku
 downloadOffline = "Preuzmi offline licencu (.lic)"
 hint = "Nalepite ovaj ključ u self-hosted instancu da biste je aktivirali ili ga sačuvajte za svoju evidenciju. Čuvajte ga na sigurnom."
 label = "Vaš licencni ključ"
+subtitle = "Aktivirajte self-hosted instancu ovim ključem ili ga sačuvajte za svoju evidenciju."
+title = "Vaš licencni ključ"
+trialFileHint = "Ovo je vaša probna licencna datoteka. Kada ugovor bude uspostavljen, vratite se i ponovo je preuzmite — za razliku od online licencnog ključa, .lic datoteka se neće sama ažurirati."
 
 [portal.procurement.link]
 cta = "Poveži nalog"
@@ -7739,65 +8619,62 @@ description = "Vaša pretplata je aktivna i licenca je izdata. Vaš tim je obezb
 eyebrow = "Uživo"
 title = "Uživo ste na Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Probni ključevi, ponude za obavezni obim, ugovor sa jednim potpisom, plaćanje i vaša evidencija dokumenata nalaze se ovde kada započnete enterprise procenu."
-eyebrow = "Samo Enterprise"
-talkToSales = "Razgovarajte sa prodajom"
-title = "Proces nabavke se otvara uz Enterprise"
-
 [portal.procurement.milestone]
-accept = "Prihvati i nastavi"
-description = "Preuzmite PDF da biste ga podelili sa timom, vratite se da prihvatite kada budete spremni ili napravite izmene."
-download = "Preuzmi PDF"
 downloadError = "Još nije moguće preuzeti PDF ponude — pokušajte ponovo za trenutak."
-edit = "Izmeni ponudu"
-eyebrow = "Ponuda {{number}}"
-perYear = " / god"
-preparedFor = "Pripremljeno za {{company}}"
-tcv = "{{value}} ukupna vrednost ugovora"
-title = "Vaša ponuda je spremna"
-
-[portal.procurement.modal]
-cancel = "Otkaži"
-chooseFile = "Izaberi datoteku"
-close = "Zatvori"
-downloadBody = "Vaše preuzimanje će uskoro početi."
-downloadCta = "Preuzmi"
-downloadTitle = "Preuzimanje"
-noFile = "Nije izabrana datoteka"
-payBody = "Platite svoj obavezni ugovor karticom ili bankovnim transferom preko Stripe. Vaš radni prostor se obezbeđuje čim se plaćanje proknjiži."
-payCta = "Nastavi na Stripe"
-payTitle = "Potvrdi plaćanje"
-requestBodyFree = "Ovo generišemo na zahtev. Potvrdite i vaš solutions engineer će ga uskoro poslati."
-requestBodyPaid = "Ovo je plaćeni dodatak. Potvrdite i vaš solutions engineer će definisati obim i poslati dokumentaciju."
-requestCta = "Zatraži"
-requestTitle = "Zatraži ovaj dokument"
-signBody = "Otvara Stirling Enterprise Agreement za e-potpis: jedan potpis pokriva MSA, order form, EULA i DPA. Automatski supotpisujemo i prelazite na plaćanje."
-signCta = "Otvori za potpis"
-signTitle = "Pregledajte i potpišite svoj ugovor"
-uploadBody = "Pošaljite nam svoju PO i fakturišemo prema njoj pod vašim uslovima. Prevucite PDF ili izaberite datoteku ispod."
-uploadCta = "Otpremi narudžbenicu"
-uploadTitle = "Otpremite svoju narudžbenicu"
 
 [portal.procurement.payment]
 description = "Vaša ponuda je prihvaćena i licenca je već aktivna — vaš tim može odmah da počne. Platite prvu fakturu kada budete spremni; možete je platiti ili preuzeti ovde, bez email-a."
+downloadAgreement = "Preuzmi potpisani ugovor"
 downloadInvoice = "Preuzmi fakturu"
-simulate = "Simuliraj primljenu uplatu (demo)"
+eyebrow = "Plaćanje"
 title = "Pretplata je kreirana"
 viewInvoice = "Prikaži i plati fakturu"
 
+[portal.procurement.review]
+acceptCta = "Prihvati ponudu"
+annual = "Godišnja naknada (1. godina)"
+downloadCta = "Preuzmi ponudu"
+poNumber = "Narudžbenica: {{po}}"
+renewal = "Obnavlja se po {{amount}}/godina nakon isteka perioda (+{{pct}}% CPI)"
+tcv = "Period od {{years}} godina, plaćeno u celosti unapred: {{tcv}}"
+validUntil = "Važi do {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Nije moguće učitati planer."
 fallbackLink = "Otvori zakazivanje u novoj kartici"
+loading = "Učitavanje planera..."
 subtitle = "Vaš solutions engineer će provesti vaš tim kroz uvođenje. Izaberite vreme koje vam odgovara."
 title = "Zakaži poziv"
 
-[portal.procurement.status]
-action = "Potrebna radnja"
-available = "Dostupno"
-complete = "Završeno"
-pending = "Na čekanju"
-request = "Na zahtev"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Izolovano, bez odlaznog saobraćaja"
+back = "Nazad"
+businessName = "Naziv preduzeća"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Upravljano, najbrži početak"
+continue = "Nastavi"
+deployment = "Gde treba implementirati?"
+eula = "Slažem se sa Stirling EULA i komercijalnim uslovima."
+fullName = "Puno ime"
+fullNamePlaceholder = "Vaše ime"
+invites = "Pozovite članove tima · opciono"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Zakaži poziv"
+seats = "Osobe koje testiraju"
+seatsPlaceholder = "npr. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker ili Kubernetes"
+start = "Započni probni period"
+stepOf = "Korak {{n}} od {{total}}"
+subtitle = "Besplatno 14 dana, kartica nije potrebna."
+subtitleDetails = "Nekoliko detalja za vašu ponudu i ugovor."
+talkFirst = "Radije biste prvo razgovarali?"
+title = "Podesite probni period"
+viewEula = "Pročitaj"
+workEmail = "Poslovni email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Produženje dodaje 7 dana i obaveštava vašeg solutions engineer-a."
@@ -7808,20 +8685,6 @@ maxed = "Maksimalno iskorišćeno"
 subtitle = "Vaš besplatni probni period traje do {{date}}. Kartica nije potrebna."
 title = "Enterprise probni period"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Cena za obavezni obim, SSO + SCIM + RBAC na nivou organizacije, 90-dnevni nepromenljivi audit i namenski SE."
-homeCta = "Započni probni period →"
-homeHeadline = "Obradite milione PDF-ova."
-
-[portal.recentActivity]
-title = "Nedavna aktivnost"
-viewAll = "Prikaži sve"
-
-[portal.recentActivity.empty]
-description = "Pokretanja tokova obrade, deploy-ovi i događaji agenata pojaviće se ovde."
-title = "Ovde još nema ničega"
-
 [portal.search]
 ariaLabel = "Pretraga"
 placeholder = "Pretražite Stirling — endpoint-i, tokovi obrade, dokumenti…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Povezivanje naloga"
 
-[portal.shell.header]
-accountFallback = "Nalog"
-accountMenu = "Meni naloga"
-darkMode = "Tamni režim"
-lightMode = "Svetli režim"
-search = "Pretraga"
-searchPlaceholder = "Pretraga…"
-signOut = "Odjavi se"
-switchToDark = "Prebaci na tamnu temu"
-switchToLight = "Prebaci na svetlu temu"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dok."
 linkAccount = "Poveži Stirling nalog"
-planEditor = "Editor plan"
-planEnterprise = "Enterprise plan"
-planProcessor = "Processor plan"
 primaryNav = "Primarna navigacija"
 switchApp = "Promeni aplikaciju"
 
+[portal.shell.topbar]
+closeNav = "Zatvori navigaciju"
+openNav = "Otvori navigaciju"
+search = "Pretraga"
+
 [portal.sources]
 subtitle = "Ponovo upotrebljive ulazne veze koje dostavljaju dokumente u Stirling. Konfigurišite vezu jednom, a zatim je referencirajte iz bilo kog broja politika. Kliknite na red za njenu konfiguraciju i politike koje je koriste."
 title = "Izvori"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Poveži izvor"
 
+[portal.sources.builder]
+back = "Nazad na izvore"
+backToTypes = "Svi tipovi izvora"
+cancel = "Otkaži"
+chooseHint = "Izaberite odakle dokumenti dolaze. Zasivljeni konektori stižu uskoro."
+comingSoon = "Uskoro"
+comingSoonHeading = "Uskoro"
+create = "Kreiraj izvor"
+createTitle = "Poveži izvor"
+delete = "Izbriši"
+editTitle = "Uredi izvor"
+enabled = "Omogućeno"
+save = "Sačuvaj izmene"
+
+[portal.sources.builder.folderAccess]
+description = "Automatizacije fascikli mogu koristiti samo fascikle koje je administrator dozvolio. Dodajte je u podešavanjima pristupa fasciklama, zatim pokušajte ponovo."
+openSettings = "Podešavanja pristupa fasciklama"
+title = "Ova fascikla nije dozvoljena"
+
 [portal.sources.delete]
 body = "Izbrisati \"{{name}}\"? Ovo se ne može opozvati. Politike koje ga referenciraju moraće da se ažuriraju."
 cancel = "Otkaži"
 confirm = "Izbriši"
 title = "Izbrisati izvor?"
 
-[portal.sources.detail]
-closeAriaLabel = "Zatvori detalje"
-delete = "Izbriši izvor"
-docs24h = "Poslednja 24 h"
-docs30d = "Poslednjih 30 dana"
-docsTotal = "Ukupno viđeno"
-docsTrend = "Dokumenti tokom poslednjih 30 dana"
-documents = "Dokumenti"
-edit = "Izmeni"
-notReferenced = "Ne referencira ga nijedna politika, pa je bezbedno za brisanje."
-pause = "Pauziraj"
-resume = "Nastavi"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Koristi ga"
-
 [portal.sources.empty]
 description = "Povežite fasciklu (a uskoro i cloud skladište) kako bi vaše politike imale odakle da preuzimaju dokumente."
 title = "Još nema povezanih izvora"
@@ -7899,18 +8754,57 @@ inUse = "U upotrebi"
 total = "Veze"
 unused = "Neiskorišćeno"
 
+[portal.sources.networkFields.connection]
+helperText = "Sačuvana veza sa adresom servera i akreditivima. Ponovo je koristi svaki izvor koji se na nju poziva."
+label = "Veza"
+
+[portal.sources.networkFields.directory]
+helperText = "Fascikla na serveru koja se proverava, relativno na početnu fasciklu za prijavu ili koren deljenja. Ostavite prazno za koren."
+label = "Fascikla"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Obrada jednom uklanja svaku datoteku sa servera kada je svaka politika obradi."
+label = "Režim čitanja"
+
+[portal.sources.networkFields.mode.options]
+consume = "Obrada jednom: obradi svaku datoteku jednom"
+snapshot = "Snimak: ponovo pročitaj fasciklu pri svakom pokretanju"
+
+[portal.sources.networkFields.recursive]
+label = "Dubina fascikle"
+
+[portal.sources.networkFields.recursive.options]
+all = "Uključi podfascikle"
+top = "Samo najviši nivo"
+
 [portal.sources.status]
 active = "Aktivno"
 disabled = "Onemogućeno"
 unused = "Neiskorišćeno"
 
 [portal.sources.table]
+documents = "Dokumenti"
 source = "Izvor"
 status = "Status"
 usedBy = "Politike"
 
+[portal.sources.types.box]
+description = "Preuzimajte dokumente iz Box fascikli koje vaš tim već deli."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Preuzimajte dokumente iz deljene Dropbox fascikle."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokumenti koje je vaš tim obradio u editoru, kroz pokretanja politika i AI."
 label = "Editor"
+noPolicies = "Još nema politika pokrenutih iz editora."
+
+[portal.sources.types.email]
+description = "Pretvorite priloge poslate u namensko poštansko sanduče u dokumente."
+label = "Email prijemno sanduče"
 
 [portal.sources.types.folder]
 description = "Prati direktorijum na serveru za nove dokumente."
@@ -7943,25 +8837,80 @@ label = "Dubina fascikle"
 all = "Uključi podfascikle"
 top = "Samo najviši nivo"
 
+[portal.sources.types.ftp]
+description = "Proverava fasciklu FTP ili FTPS servera za nove dokumente."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Preuzimajte dokumente iz deljenih Google Drive fascikli."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Prati SMB mrežno deljenje za nove dokumente."
+label = "Mrežni disk"
+
+[portal.sources.types.onedrive]
+description = "Prati OneDrive fascikle za nove dokumente."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Preuzimajte dokumente iz Amazon S3 ili S3-kompatibilnog bucket-a."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Sačuvana veza koja sadrži bucket i akreditive. Ponovo je koristi svaki izvor i izlaz toka obrade koji se na nju poziva."
+label = "Veza"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Obrada jednom uklanja svaki objekat iz bucket-a kada ga svaka politika obradi."
+label = "Režim čitanja"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Obrada jednom: obradi svaki objekat jednom"
+snapshot = "Snimak: ponovo pročitaj bucket pri svakom pokretanju"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Obrađuju se samo objekti čiji ključevi počinju ovim prefiksom."
+label = "Prefiks ključa"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Proverava SFTP drop fasciklu za nove dokumente."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Preuzimajte dokumente iz SharePoint biblioteka dokumenata."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Izvor"
 
+[portal.sources.types.webhook]
+createNote = "URL za isporuku i tajna za potpisivanje generišu se kada kreirate ovaj webhook. Pošiljaoci šalju dokumente POST metodom na taj URL i politike koje se na njega pozivaju pokreću se po prijemu."
+description = "Primajte dokumente putem potpisanog HTTP POST iz bilo kog spoljnog sistema."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "URL za isporuku"
+secretNote = "Tajna za potpisivanje prikazuje se jednom, kada se webhook kreira. Ponovo kreirajte izvor da biste je rotirali."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiraj"
+done = "Gotovo"
+secret = "Tajna za potpisivanje"
+secretHelp = "Potpišite sirovo telo svake isporuke ovim ključem (HMAC-SHA256) i pošaljite ga kao X-Stirling-Signature zaglavlje."
+secretWarning = "Kopirajte tajnu za potpisivanje sada. Radi vaše bezbednosti prikazuje se samo jednom i ne može se kasnije preuzeti."
+title = "Webhook kreiran"
+url = "URL za isporuku"
+usage = "Pošaljite svaki dokument POST metodom kao sirovo telo zahteva na URL za isporuku sa binarnim tipom sadržaja (application/pdf ili application/octet-stream). Politike koje se na njega pozivaju automatski se pokreću po prijemu."
+
 [portal.sources.wizard]
-back = "Nazad"
-cancel = "Otkaži"
-continue = "Nastavi"
-editTitle = "Izmeni izvor"
 name = "Naziv"
 namePlaceholder = "npr. Prijem zahteva"
-save = "Sačuvaj izmene"
-subtitle = "Korak {{current}} od {{total}} · {{label}}"
-title = "Poveži izvor"
 type = "Tip"
 
-[portal.sources.wizard.steps]
-chooseType = "Izaberite tip"
-configure = "Konfiguriši"
-review = "Pregledaj i poveži"
+[portal.stepModal]
+close = "Zatvori"
 
 [portal.usage]
 managePayment = "Upravljaj plaćanjem"
@@ -8021,16 +8970,9 @@ summary = "Vlasnik tima — upravlja resursima njegovih članova i deljenim konf
 2 = "Pristup portalu putem podrazumevane politike"
 3 = "Sve što Član može da uradi"
 
-[portal.welcome]
-ariaLabel = "Dobro došli u Stirling PDF"
-badge = "Open-source"
-installEditor = "Instaliraj Editor"
-inviteTeammates = "Pozovite članove tima"
-openInBrowser = "Otvori u pregledaču"
-perks = "Besplatno zauvek · Self-hostable"
-subtitle = "Najbezbedniji PDF Editor na svetu je besplatan za timove svih veličina. Uključuje 60+ PDF operacija i SSO."
-title = "Dobro došli u"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Neograničeno"
 
 [printFile]
 title = "Odštampaj datoteku"
@@ -8613,6 +9555,14 @@ text = "Rotirajte stranice PDF-a u smeru ili suprotno od kazaljke na satu u kora
 [rotate.tooltip.header]
 title = "Pregled podešavanja rotacije"
 
+[ruler]
+clearAll = "Obriši sve"
+hideAllLabels = "Sakrij sve oznake"
+hideSmallLabels = "Sakrij male oznake"
+physicalValues = "Fizičke"
+scaled = "Skalirano"
+showAllLabels = "Prikaži sve oznake"
+
 [sanitize]
 desc = "Uklonite potencijalno štetne elemente iz PDF datoteka."
 sanitizationResults = "Rezultati sanitizacije"
@@ -8654,31 +9604,45 @@ label = "Ukloni XMP metapodatke"
 [sanitize.steps]
 settings = "Podešavanja"
 
-[sanitizePdf]
-tags = "čišćenje,bezbednost,bezbedno,ukloni-pretnje"
-
 [sanitizePDF]
 title = "Sanitizacija PDF-a"
 
+[sanitizePdf]
+tags = "čišćenje,bezbednost,bezbedno,ukloni-pretnje"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Podesi razmeru stranica"
 
+[scaleSettings]
+activeScale = "Aktivna razmera"
+apply = "Primeni razmeru"
+applyCalibration = "Primeni kalibraciju"
+calculatedScale = "Izračunata razmera"
+calibrate = "Kalibriši"
+calibrating = "Kalibrisanje"
+calibrationDistanceRequired = "Unesite stvarnu udaljenost veću od nule"
+calibrationInvalid = "Nije moguće izračunati razmeru iz ovog merenja"
+calibrationPaperDistance = "Izmerena udaljenost na stranici: {{distance}}"
+calibrationTitle = "Kalibracija razmere"
+calibrationTooltip = "Izmerite poznatu udaljenost da biste automatski izračunali razmeru"
+customScale = "Prilagođena razmera"
+noneSet = "Nije podešena prilagođena razmera"
+presets = "Unapred podešene razmere"
+ratio = "Odnos razmere"
+ratioHelp = "Odnos: 1 jedinica stranice = X stvarnih jedinica"
+ratioPlaceholder = "npr. 100"
+ratioPositive = "Odnos mora biti veći od nule"
+ratioRequired = "Odnos je obavezan"
+realDistance = "Stvarna udaljenost"
+realDistancePlaceholder = "npr. 5"
+reset = "Vrati na podrazumevano"
+unit = "Jedinica"
+unitInvalid = "Nevažeća jedinica: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Ugao praga:"
-10 = "Postavlja veličinu ivice dodate i uklonjene kako bi se sprečile bele ivice u izlazu (podrazumevano: 1)."
-2 = "Postavlja minimalni apsolutni ugao potreban za rotiranje slike (podrazumevano: 10)."
-3 = "Tolerancija:"
-4 = "Određuje opseg varijacije boja oko procenjene boje pozadine (podrazumevano: 30)."
-5 = "Minimalna površina:"
-6 = "Postavlja minimalni prag površine za fotografiju (podrazumevano: 10000)."
-7 = "Minimalna površina konture:"
-8 = "Postavlja minimalni prag površine konture za fotografiju"
-9 = "Veličina ivice:"
-
 [scannerImageSplit]
 submit = "Izdvoji skenove slika"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Šta radi"
 whatThisDoesDesc = "Automatski pronalazi i izdvaja svaku fotografiju sa skenirane stranice ili kompozitne slike—bez ručnog isecanja."
 whenToUse = "Kada koristiti"
 
+[ScannerImageSplit.selectText]
+1 = "Ugao praga:"
+10 = "Postavlja veličinu ivice dodate i uklonjene kako bi se sprečile bele ivice u izlazu (podrazumevano: 1)."
+2 = "Postavlja minimalni apsolutni ugao potreban za rotiranje slike (podrazumevano: 10)."
+3 = "Tolerancija:"
+4 = "Određuje opseg varijacije boja oko procenjene boje pozadine (podrazumevano: 30)."
+5 = "Minimalna površina:"
+6 = "Postavlja minimalni prag površine za fotografiju (podrazumevano: 10000)."
+7 = "Minimalna površina konture:"
+8 = "Postavlja minimalni prag površine konture za fotografiju"
+9 = "Veličina ivice:"
+
 [search]
 noResults = "Nema rezultata"
 placeholder = "Unesite pojam pretrage..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Vaš Stirling-PDF server je van mreže i \"{{endpoint
 [session]
 expired = "Istekla ti je sesija. Osveži stranicu i pokušaj ponovo."
 
-[sessionManagement.tooltip]
-header = "Upravljanje sesijama potpisivanja"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Novi učesnici se dodaju na kraj redosleda potpisivanja"
-bullet2 = "Ne možete dodavati učesnike nakon finalizacije sesije"
-bullet3 = "Svaki učesnik dobija obaveštenje kada dođe na red"
-description = "Možete dodati još učesnika u aktivnu sesiju u bilo kom trenutku pre finalizacije."
-title = "Dodavanje učesnika"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Potpuna finalizacija</b>: Svi učesnici su potpisali"
-bullet2 = "<b>Delimična finalizacija</b>: Neki učesnici još nisu potpisali"
-bullet3 = "Učesnici koji nisu potpisali biće isključeni iz konačnog dokumenta"
-bullet4 = "Nakon finalizacije možete učitati potpisani PDF u aktivne datoteke"
-description = "Finalizacija kombinuje sve potpise u jedan potpisani PDF. Ova radnja se ne može opozvati."
-title = "Finalizacija sesije"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Ne možete ukloniti učesnike koji su već potpisali"
-bullet2 = "Uklonjeni učesnici više ne dobijaju obaveštenja"
-bullet3 = "Redosled potpisivanja se automatski prilagođava"
-description = "Učesnici se mogu ukloniti iz sesije pre nego što potpišu."
-title = "Uklanjanje učesnika"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Svaki potpis se primenjuje sekvencijalno na PDF"
-bullet2 = "Kasniji potpisnici mogu videti ranije potpise"
-bullet3 = "Ključno za tokove odobravanja i pravni lanac čuvanja"
-description = "Redosled koji navedete pri kreiranju sesije određuje ko potpisuje prvi."
-title = "Redosled potpisivanja"
-
 [settings]
 close = "Zatvori"
 
+[settings.ai]
+documents = "Dokumenti i RAG"
+general = "Opšte"
+limits = "Ograničenja i performanse"
+models = "Modeli i provajderi"
+title = "AI"
+
 [settings.configuration]
 advanced = "Napredno"
 database = "Baza podataka"
 endpoints = "Krajnje tačke"
 features = "Funkcije"
+folderAccess = "Pristup fasciklama"
 mcp = "MCP Server"
 storageSharing = "Skladištenje datoteka i deljenje"
 systemSettings = "Sistemska podešavanja"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Podrazumevani PDF uređivač"
 defaultPdfEditorActive = "Stirling PDF je vaš podrazumevani PDF uređivač"
 defaultPdfEditorChecking = "Provera..."
 defaultPdfEditorInactive = "Druga aplikacija je postavljena kao podrazumevana"
+defaultPdfEditorRemind = "Podseti me da postavim kao podrazumevano"
+defaultPdfEditorRemindDescription = "Prikaži baner kada Stirling PDF nije vaša podrazumevana PDF aplikacija."
 defaultPdfEditorSet = "Već podrazumevano"
 defaultStartupView = "Podrazumevani prikaz pri pokretanju"
 defaultStartupViewDescription = "Izaberite koja je kartica aktivna u levoj koloni kada se aplikacija pokrene"
@@ -8817,9 +9771,18 @@ languageDescription = "Izaberite jezik prikaza"
 logout = "Odjavi se"
 setAsDefault = "Postavi kao podrazumevano"
 theme = "Tema"
+themeAccent = "Akcentna boja"
+themeAccentCustom = "Prilagođena boja"
+themeAccentCustomHint = "Prilagođeno (preporučuju se podrazumevana podešavanja)"
+themeAccentDark = "Akcentna boja tamnog režima"
+themeAccentDefault = "Podrazumevano"
+themeAccentDefaultHint = "Podrazumevana tema (preporučeno)"
+themeAccentDescription = "Dugmad, linkovi i istaknuti elementi je prate, a aplikaciji daje suptilnu nijansu. Svetli i tamni režim imaju zasebne. Sistem koristi onu koja je aktivna."
+themeAccentLight = "Akcentna boja svetlog režima"
 themeDark = "Tamna"
 themeDescription = "Prebacujte između svetlog i tamnog režima"
 themeLight = "Svetla"
+themeReset = "Vrati temu na podrazumevano"
 themeSystem = "System"
 title = "Opšte"
 user = "Korisnik"
@@ -8833,6 +9796,12 @@ intro = "Omogućite autentifikaciju korisnika, upravljanje timom i funkcije radn
 learnMore = "Saznaj više u dokumentaciji"
 title = "Za sistemske administratore"
 
+[settings.general.loginLanding]
+description = "Izaberite koja se aplikacija otvara kada se prijavite u Stirling Cloud."
+editor = "Uređivač"
+processor = "Procesor"
+title = "Nakon prijavljivanja"
+
 [settings.general.mode]
 fullscreen = "Ceo ekran"
 sidebar = "Bočna traka"
@@ -9041,6 +10010,11 @@ security = "Bezbednost"
 telegram = "Telegram"
 title = "Bezbednost i autentikacija"
 
+[settings.signOut]
+confirm = "Da li ste sigurni da želite da se odjavite?"
+submit = "Odjavi se"
+title = "Odjava"
+
 [settings.team]
 title = "Tim"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Otpremi na server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "kliknite ovde"
+fallback = "Ako se nije automatski otvorilo,"
+opening = "Otvaranje Swagger UI u novoj kartici..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "API dokumentacija"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Izaberite datoteke u Aktivne datoteke da biste pokrenuli ovaj
 singleFileScope = "Primena samo na: {{fileName}}"
 viewerMode = "Prebacite se u uređivač datoteka da biste izabrali više datoteka."
 
+[toolFormat]
+ANY = "bilo koja datoteka"
+CBR = "arhiva stripa (CBR)"
+CBZ = "arhiva stripa (CBZ)"
+CSV = "CSV datoteka"
+EBOOK = "e-knjiga"
+EMAIL = "e-poruka"
+EXCEL = "proračunska tabela"
+HTML = "web stranica"
+IMAGE = "slike"
+JAVASCRIPT = "JavaScript datoteka"
+JSON = "JSON datoteka"
+MARKDOWN = "Markdown datoteka"
+NONE = "nema datoteke"
+PCL = "PCL datoteka za štampu"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF zaštićen lozinkom"
+POSTSCRIPT = "PostScript datoteka"
+PPT = "prezentacija"
+TEXT = "tekstualna datoteka"
+VIDEO = "video"
+WORD = "Word dokument"
+XML = "XML datoteka"
+XPS = "XPS dokument"
+ZIP = "ZIP arhiva"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Nazad na sve alate"
 collapse = "Skupi panel"
 expand = "Proširi panel"
 goBack = "Idi nazad"
+pdfTools = "PDF alati"
 placeholder = "Izaberite alat da biste započeli"
 premiumFeature = "Premium funkcija:"
+searchTools = "Pretraži alate"
 toolsHeader = "Alati"
 viewAllTools = "Prikaži sve alate"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Nema pronađenih alata"
 quickAccess = "BRZI PRISTUP"
 searchPlaceholder = "Pretraži alate..."
 
-[toolPicker.categories]
-advancedTools = "Napredni alati"
-recommendedTools = "Preporučeni alati"
-standardTools = "Standardni alati"
-
 [toolPicker.subcategories]
 advancedFormatting = "Napredno formatiranje"
 automation = "Automatizacija"
@@ -9950,16 +10950,31 @@ title = "Korisnici"
 you = "(vi)"
 
 [users.action]
+cancelInvite = "Otkaži poziv"
 deleteTeam = "Izbriši tim"
 disableMfa = "Resetuj MFA"
 move = "Premesti u tim"
 reinstate = "Vrati"
 remove = "Ukloni iz organizacije"
+removeTeam = "Ukloni iz tima"
 rename = "Preimenuj tim"
 resetPw = "Resetuj lozinku"
 suspend = "Suspenduj"
 unlock = "Otključaj nalog"
 
+[users.activity]
+daysAgo = "Pre {{count}} d"
+hoursAgo = "Pre {{count}} h"
+justNow = "Upravo sada"
+minutesAgo = "Pre {{count}} min"
+monthsAgo_one = "Pre {{count}} mesec"
+monthsAgo_other = "Pre {{count}} meseci"
+never = "Nikada"
+weeksAgo_one = "Pre {{count}} nedelju"
+weeksAgo_other = "Pre {{count}} nedelja"
+yearsAgo_one = "Pre {{count}} godinu"
+yearsAgo_other = "Pre {{count}} godina"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Odobrava politiku"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Otkažite poziv za {{email}}? Ova osoba neće moći da se pridruži pomoću trenutnog linka."
+cancelInviteTitle = "Otkaži poziv"
 deleteTeamBody = "Izbrisati tim {{name}}? Tim prvo mora biti prazan - premestite njegove članove u drugi tim, i ne sme još uvek da poseduje konfiguracije integracija."
 deleteTeamTitle = "Izbriši tim"
 disableMfaBody = "Ukloniti MFA registraciju za {{name}}? Ponovo će je podesiti pri sledećoj prijavi ako je potrebna."
 disableMfaTitle = "Resetuj MFA"
 removeBody = "Trajno ukloniti {{name}} iz organizacije? Ovo se ne može opozvati."
+removeTeamBody = "Ukloniti {{name}} iz tima? Zadržaće nalog, ali će izgubiti pristup resursima ovog tima."
 removeTitle = "Ukloni člana"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Korisničko ime"
 usernameError = "Korisničko ime mora imati najmanje 3 karaktera"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Pozvao/la {{who}}"
+cancel = "Otkaži"
+count = "{{count}} na čekanju"
+desc = "Pozvane osobe koje se još nisu pridružile. Zauzimaju mesto dok ne prihvate."
+expiresInDays_one = "Ističe za {{count}} dan"
+expiresInDays_other = "Ističe za {{count}} dana"
+expiresToday = "Ističe danas"
+title = "Pozivi na čekanju"
+
 [users.loadError]
 description = "Nešto je pošlo naopako pri kontaktiranju backend-a ili nemate pristup. Pokušajte ponovo."
 title = "Nije moguće učitati članove"
@@ -10212,9 +11240,11 @@ title = "Prilozi"
 
 [viewer.bookmarks]
 bookmarkTitle = "Naslov obeleživača"
+bookmarkTitleRequired = "Naslov obeleživača je obavezan"
 closeSidebar = "Zatvori bočnu traku obeleživača"
 collapseAll = "Skupi sve obeleživače"
 expandAll = "Proširi sve obeleživače"
+searchPlaceholder = "Pretraži obeleživače"
 
 [viewer.comments]
 addComment = "Dodaj komentar"
@@ -10605,30 +11635,6 @@ title = "Tekst vodenog žiga"
 image = "Slika"
 text = "Tekst"
 
-[wetSignature.tooltip]
-header = "Metode kreiranja potpisa"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Prilagodite boju i debljinu olovke"
-bullet2 = "Brišite i crtajte ponovo dok ne budete zadovoljni"
-bullet3 = "Radi na uređajima na dodir (tableti, telefoni)"
-description = "Napravite rukom pisani potpis pomoću miša ili ekrana osetljivog na dodir. Najbolje za lične, autentične potpise."
-title = "Nacrtaj potpis"
-
-[wetSignature.tooltip.type]
-bullet1 = "Izaberite među više fontova"
-bullet2 = "Prilagodite veličinu i boju teksta"
-bullet3 = "Idealno za standardizovane potpise"
-description = "Generišite potpis iz unetog teksta. Brzo i dosledno, pogodno za poslovna dokumenta."
-title = "Unesi potpis"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Podržava PNG, JPG i druge formate slika"
-bullet2 = "Za najbolje rezultate preporučuju se providne pozadine"
-bullet3 = "Slika će biti prilagođena veličini oblasti potpisa"
-description = "Otpremite unapred napravljenu sliku potpisa. Idealno ako imate skenirani potpis ili logo kompanije."
-title = "Otpremi sliku potpisa"
-
 [workbenchBar]
 activeFiles = "Aktivne datoteke"
 annotations = "Anotacije"
@@ -10652,6 +11658,7 @@ redact = "Zacrni"
 rotateLeft = "Rotiraj ulevo"
 rotateRight = "Rotiraj udesno"
 ruler = "Lenjir / Merenje"
+rulerSettings = "Podešavanja razmere"
 save = "Sačuvaj"
 saveAll = "Sačuvaj sve"
 saveAs = "Sačuvaj kao"
diff --git a/frontend/editor/public/locales/sv-SE/translation.toml b/frontend/editor/public/locales/sv-SE/translation.toml
index c8ae1fed37..30c9bc9195 100644
--- a/frontend/editor/public/locales/sv-SE/translation.toml
+++ b/frontend/editor/public/locales/sv-SE/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "filer valda"
 font = "Teckensnitt"
 fontSizeTooltip = "Storlek på sidnummertext i punkter. Större tal ger större text."
 fontTypeTooltip = "Typsnittsfamilj för sidnummer. Välj utifrån dokumentets stil."
-genericSubmit = "Skicka"
 green = "Grön"
 help = "Hjälp"
-imgPrompt = "Välj bild(er)"
 incorrectPasswordMessage = "Nuvarande lösenord är felaktigt."
 info = "Info"
 invalidUndoData = "Kan inte ångra: ogiltiga åtgärdsdata"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Inloggningsavtal"
 logOut = "Logga ut"
 marginTooltip = "Avstånd mellan sidnumret och sidans kant."
 moreOptions = "Fler alternativ"
-multiPdfPrompt = "Välj PDF-filer (2+)"
 never = "Aldrig"
 no = "Nej"
 noFileSelected = "Ingen fil vald. Ladda upp en."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Sidordning (Ange en kommaseparerad lista med sidnummer) :"
 pages = "Sidor"
 pageSelectionPrompt = "Anpassat sidval (Ange en kommaseparerad lista med sidnummer 1,5,6 eller funktioner som 2n+1) :"
 password = "Lösenord"
-pdfPrompt = "Välj PDF(er)"
 pin = "Fäst fil (behåll aktiv efter verktygskörning)"
 pro = "Pro"
 processingComplete = "Din fil är klar."
@@ -356,6 +352,7 @@ text = "Dessa behörigheter styr vad användare kan göra med PDF-filen. Mest ef
 title = "Ändra behörigheter"
 
 [addStamp]
+preview = "Förhandsgranska stämpel"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Manuella nedladdningar: klicka på länkarna och placera filerna
 noLanguages = "Inga tessdata-språk hittades i den konfigurerade katalogen."
 permissionNotice = "tessdata-sökvägen är inte skrivbar. Nedladdningar öppnas i webbläsaren; spara .traineddata-filerna manuellt i tessdata-mappen."
 
+[admin.settings.ai.documents]
+description = "Konfigurera inbäddningsmodellen och hämtningsinställningarna som används för att besvara frågor om dokument. Tillämpas på AI-motorn när de sparas."
+title = "Dokument och RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Lämna tomt för att använda motorns egna miljöuppgifter. Gäller för självhostade distributioner med en enda motor."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Sparad – lämna tomt för att behålla den aktuella nyckeln"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL för den OpenAI-kompatibla / Ollama-embeddings-slutpunkten, t.ex. http://ollama:11434/v1. Måste peka på en betrodd intern slutpunkt (SSRF-känsligt)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Namn på inbäddningsmodell. Fritext; förslag är endast tips."
+label = "Inbäddningsmodell"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Leverantör som används för att omvandla dokumenttext till vektorinbäddningar."
+label = "Inbäddningsleverantör"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Maximalt antal hämtningssökningar som agenten får köra per begäran."
+label = "Max antal sökningar"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Ändring av inbäddningsmodellen börjar gälla direkt, men dokument som indexerats med den tidigare modellen måste indexeras om för att sökningen ska ge korrekta resultat."
+title = "Omindexering krävs"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Om du ändrade inbäddningsmodellen, indexera om befintliga dokument så att sökningen använder den nya modellen."
+
+[admin.settings.ai.documents.topK]
+description = "Antal mest relevanta segment som hämtas per sökning."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Anslut Stirling till Python AI-motorn och välj vilka AI-funktioner som ska exponeras. Ändringar tillämpas vid omstart."
+title = "AI-motor"
+
+[admin.settings.ai.general.capabilities]
+description = "Slå på eller av enskilda AI-funktioner. Inaktiverade funktioner döljs i appen."
+title = "Funktioner"
+
+[admin.settings.ai.general.enabled]
+description = "Huvudbrytare. När den är avstängd är inga AI-verktyg, agenter eller motoranrop tillgängliga."
+label = "Aktivera AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Konversationsassistent för arbete med PDFs."
+label = "Chattassistent"
+
+[admin.settings.ai.general.features.classify]
+description = "Kategorisera dokument automatiskt efter typ eller innehåll."
+label = "Dokumentklassificering"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Generera en ny PDF (t.ex. från HTML) via en AI-agent."
+label = "Skapa PDF från prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Ställ frågor och få svar baserade på ett uppladdat dokument."
+label = "Dokumentfrågor"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Granska dokument för matematiska och numeriska fel."
+label = "Matematikgranskare"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Lägg till AI-skrivna granskningskommentarer och anteckningar i en PDF."
+label = "PDF-kommentaragent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Timeout för tyngre agentåtgärder, till exempel dokumentgenerering."
+label = "Timeout för långvariga åtgärder (sekunder)"
+
+[admin.settings.ai.general.note]
+body = "AI-motorn körs som en separat tjänst. Dess delade hemlighet"
+body2 = "ställs in via en containermiljövariabel. Leverantörers API keys kan anges på dessa sidor eller tillhandahållas som motorns miljövariabler; nycklar som anges här skickas till motorn när de sparas."
+title = "Om AI-motorn"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Timeout för strömmade chatt-svar (token för token)."
+label = "Timeout för ström (sekunder)"
+
+[admin.settings.ai.general.test]
+button = "Testa anslutning"
+failBody = "AI-motorn svarade inte. Kontrollera URL, att motorcontainern körs och att AI är aktiverat (en omstart krävs efter aktivering)."
+failTitle = "AI-motorn kan inte nås"
+okBody = "AI-motorn svarade på en hälsokontroll."
+okTitle = "AI-motorn kan nås"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Timeout för standard AI-begäranden till motorn."
+label = "Timeout för begäran (sekunder)"
+
+[admin.settings.ai.general.url]
+description = "Intern URL för Python AI-motorn, t.ex. http://stirling-pdf-engine:5001."
+label = "AI-motor-URL"
+
+[admin.settings.ai.limits]
+description = "Skyddsräcken för hur mycket arbete AI-begäranden får göra och hur många som körs samtidigt. Tillämpas på AI-motorn när de sparas."
+title = "Gränser och prestanda"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Skyddsräcke: avvisa AI-begäranden vars extraherade text överskrider denna längd."
+label = "Max tecken per begäran"
+
+[admin.settings.ai.limits.maxPages]
+description = "Skyddsräcke: avvisa AI-begäranden över detta antal PDF-sidor."
+label = "Max sidor per begäran"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Maximalt antal samtidiga pågående modellanrop i hela motorn."
+label = "Max samtidighet för modell"
+
+[admin.settings.ai.models]
+description = "Välj LLM-leverantör och de smarta/snabba modeller som AI-motorn använder. Tillämpas på AI-motorn när de sparas."
+title = "Modeller och leverantörer"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Lämna tomt för att använda motorns egna miljöuppgifter. Gäller för självhostade distributioner med en enda motor."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Sparad – lämna tomt för att behålla den aktuella nyckeln"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL för den OpenAI-kompatibla / Ollama-slutpunkten, t.ex. http://ollama:11434/v1."
+label = "Leverantörens base URL"
+warning = "Base URL måste peka på en betrodd intern slutpunkt. Motorn gör server-side-begäranden till den, så ett obetrott värde är SSRF-känsligt."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Maximalt antal utdata-tokens för den snabba modellen."
+label = "Max tokens för snabb modell"
+
+[admin.settings.ai.models.fastModel]
+description = "Billigare, snabbare modell för lättare uppgifter. Fritext; förslag är endast tips."
+label = "Snabb modell"
+
+[admin.settings.ai.models.provider]
+description = "Vilken LLM-leverantör motorn kommunicerar med."
+label = "Leverantör"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Maximalt antal utdata-tokens för den smarta modellen."
+label = "Max tokens för smart modell"
+
+[admin.settings.ai.models.smartModel]
+description = "Högkapabel modell för komplexa resonemang. Fritext; förslag är endast tips."
+label = "Smart modell"
+
+[admin.settings.ai.saved]
+body = "Ändringar skickas automatiskt till AI-motorn."
+bodyNoPush = "Inställningarna har sparats. De tillämpas nästa gång AI-motorn hämtar sin konfiguration."
+title = "AI-inställningar sparade"
+
 [admin.settings.badge]
 clickToUpgrade = "Klicka för att visa plandetaljer"
 
@@ -938,6 +1094,25 @@ label = "Återskapa vid start"
 description = "Antal dagar certifikatet ska vara giltigt"
 label = "Certifikatets giltighet (dagar)"
 
+[admin.settings.folderAccess]
+description = "Kataloger som mappkällor och mappmål får läsa från och skriva till. Detta är en säkerhetsgräns: automatiseringar kan aldrig pekas mot en serversökväg utanför denna lista."
+securityNote = "Lämna detta tomt för att inaktivera mappkällor och mappmål helt. Stirlings egen konfigurationskatalog är alltid förbjuden."
+title = "Mappåtkomst"
+
+[admin.settings.folderAccess.implied]
+description = "Dessa Stirling-hanterade kataloger är alltid tillåtna och kan inte ändras här."
+serverStorage = "Serverfillagring"
+title = "Alltid tillåtet"
+watchedFolder = "Övervakad pipeline-mapp"
+
+[admin.settings.folderAccess.roots]
+add = "Lägg till"
+empty = "Inga mappar tillåtna. Mappkällor och mappmål är för närvarande inaktiverade."
+hint = "Ange absoluta sökvägar, till exempel /data/inbox."
+label = "Tillåtna mapprötter"
+placeholder = "/data/inbox"
+remove = "Ta bort mapprot"
+
 [admin.settings.general]
 description = "Konfigurera programinställningar på systemnivå inklusive varumärke och standardbeteende."
 system = "System"
@@ -1842,6 +2017,15 @@ export = "Exportera"
 accessDenied = "Åtkomst nekad"
 insufficientPermissions = "Du har inte behörighet att utföra denna åtgärd."
 
+[auth.callback]
+completing = "Slutför autentisering"
+invalidToken = "OAuth-inloggning misslyckades – ogiltig token."
+missingToken = "OAuth-inloggning misslyckades – ingen token mottogs."
+oauthFailed = "OAuth-inloggning misslyckades. Försök igen."
+pleaseWait = "Vänta medan vi slutför din inloggning."
+signedOut = "Du har loggats ut. Logga in igen."
+windowMayClose = "Du kan stänga detta fönster när det är klart."
+
 [auth.displayName]
 guest = "Gäst"
 user = "Användare"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Säkrar PDF-dokument genom att ta bort potentiellt skadlig
 description = "Detta verktyg byter automatiskt namn på PDF-filer baserat på deras innehåll. Det analyserar dokumentet för att hitta den mest lämpliga titeln från texten."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Rotera automatiskt"
+tags = "automatisk rotering,fixa orientering,upp och ner,sidledes,räta upp,orientera,identifiera orientering,korrigera rotation,automatisk orientering,skannad,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Konfidensgräns"
+
+[autoRotate.detectionMode]
+auto = "Auto"
+osd = "Endast OCR"
+text = "Endast text"
+title = "Identifieringsmetod"
+
+[autoRotate.error]
+failed = "Ett fel uppstod när PDF:en roterades automatiskt."
+
+[autoRotate.inferUndetected]
+title = "Rotera sidor med låg konfidens så att de matchar"
+
+[autoRotate.report]
+applied = "{{degrees}}° medurs"
+confidenceValue = "Konfidens {{value}}"
+noChange = "Ingen ändring"
+pageLabel = "Sida {{number}}"
+summary = "{{rotated}} av {{total}} sidor roterades, {{unchanged}} lämnades som de är"
+title = "Identifieringsrapport"
+
+[autoRotate.report.method]
+inferred = "Matchade"
+none = "Hoppades över"
+osd = "OCR"
+text = "Text"
+
+[autoRotate.report.note]
+belowThreshold = "Under gränsvärdet"
+blankPage = "Sidan är tom"
+inferredFromDocument = "Samma som de andra sidorna"
+noDominantDirection = "Blandade textriktningar"
+osdFailed = "Ingen läsbar text hittades"
+osdNoVerdict = "Kunde inte avgöra vilken sida som är upp"
+tesseractUnavailable = "OCR inte installerat"
+tooFewGlyphs = "För lite text"
+
+[autoRotate.results]
+title = "Resultat för automatisk rotering"
+
+[autoRotate.settings]
+title = "Inställningar"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Hur säker kontrollen måste vara innan en sida roteras. Sänk den för att rotera fler sidor, höj den för att lämna fler sidor orörda."
+title = "Konfidensgräns"
+
+[autoRotate.tooltip.description]
+text = "Tar reda på vilken sida upp varje sida ska ha och vrider den rätt. Sidor som redan är upprätta lämnas orörda."
+
+[autoRotate.tooltip.detectionMode]
+text = "Auto läser texten på sidan först och tittar sedan på sidan som en bild om det inte räcker. Endast text hoppar över bildkontrollen, vilket är snabbast för dokument som aldrig skannats. Endast OCR behandlar varje sida som en bild."
+title = "Identifieringsmetod"
+
+[autoRotate.tooltip.header]
+title = "Rotera automatiskt"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Tomma eller nästan tomma sidor kan inte kontrolleras på egen hand. När alla sidor som kunde läsas behöver samma vridning vrids dessa sidor för att matcha dem."
+title = "Rotera sidor med låg konfidens så att de matchar"
+
 [autoSizeSplitPDF]
 tags = "pdf,dela,dokument,organisation"
 
@@ -2189,33 +2440,6 @@ keywords = "Nyckelord: odd, even"
 numbers = "Tal/intervall: 5, 10-20"
 progressions = "Progressioner: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Certifikattyper"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Hanteras av systemadministratörer"
-bullet2 = "Delas mellan auktoriserade användare"
-bullet3 = "Representerar företagets identitet, inte individen"
-bullet4 = "Bäst för: Officiella dokument, teamsignaturer"
-description = "Ett delat certifikat tillhandahållet av din organisation. Används för företagets signeringsbehörighet."
-title = "Organisationscertifikat"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Genereras automatiskt vid första användning"
-bullet2 = "Kopplat till ditt användarkonto"
-bullet3 = "Kan inte delas med andra användare"
-bullet4 = "Bäst för: Personliga dokument, individuellt ansvar"
-description = "Ett automatiskt genererat certifikat unikt för ditt användarkonto. Lämpligt för individuella signaturer."
-title = "Personligt certifikat"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Kräver P12/PFX-fil och lösenord"
-bullet2 = "Kan utfärdas av externa certifikatutfärdare"
-bullet3 = "Högre tillitsnivå för juridiska dokument"
-bullet4 = "Bäst för: Juridiskt bindande avtal, extern validering"
-description = "Använd din egen PKCS#12-certifikatfil. Ger full kontroll över certifikategenskaper."
-title = "Ladda upp eget P12"
-
 [certSign]
 awaitingSignatures = "Väntar på signaturer"
 chooseCertificate = "Välj certifikatfil"
@@ -2542,34 +2766,6 @@ server = "Server"
 stepTitle = "Certifikatkälla"
 upload = "Ladda upp"
 
-[certSign.tooltip.header]
-title = "Om hantering av signaturer"
-
-[certSign.tooltip.overview]
-bullet1 = "Kontrollera befintliga signaturer och deras giltighet"
-bullet2 = "Visa detaljerad information om undertecknare och certifikat"
-bullet3 = "Lägg till nya digitala signaturer för att säkra dina dokument"
-bullet4 = "Flera filer stöds med enkel navigering"
-text = "Det här verktyget låter dig kontrollera om dina PDF:er är digitalt signerade och lägga till nya digitala signaturer. Digitala signaturer visar vem som skapat eller godkänt ett dokument och om det har ändrats efter signering."
-title = "Vad kan detta verktyg göra?"
-
-[certSign.tooltip.signing]
-bullet1 = "Stöd för PEM, PKCS12, JKS och servercertifikatformat"
-bullet2 = "Alternativ att visa eller dölja signatur på PDF:en"
-bullet3 = "Lägg till anledning, plats och undertecknarens namn"
-bullet4 = "Välj vilken sida som synliga signaturer ska placeras på"
-bullet5 = "Använd servercertifikat för enkelt alternativ 'Sign with Stirling-PDF'"
-text = "För att signera en PDF behöver du ett digitalt certifikat (som PEM, PKCS12 eller JKS). Du kan välja att göra signaturen synlig i dokumentet eller hålla den osynlig endast för säkerhet."
-title = "Lägga till signaturer"
-
-[certSign.tooltip.validation]
-bullet1 = "Visar om signaturer är giltiga eller ogiltiga"
-bullet2 = "Visar information om undertecknare och signeringsdatum"
-bullet3 = "Kontrollerar om dokumentet ändrats efter signering"
-bullet4 = "Kan använda anpassade certifikat för verifiering"
-text = "När du kontrollerar signaturer berättar verktyget om de är giltiga, vem som undertecknat dokumentet, när det signerades och om dokumentet har ändrats efter signering."
-title = "Kontrollerar signaturer"
-
 [changeCreds]
 changeUsername = "Uppdatera ditt användarnamn. Du loggas ut efter uppdateringen."
 credsUpdated = "Konto uppdaterat"
@@ -2824,6 +3020,7 @@ next = "Nästa"
 preview = "Förhandsgranska"
 previous = "Föregående"
 refresh = "Uppdatera"
+remaining = "Återstår"
 retry = "Försök igen"
 save = "Spara"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Avancerad övervakning"
-allInOneWorkspace = "Allt-i-ett PDF-arbetsyta (visare, verktyg och agent)"
-apiSandbox = "API-sandbox"
-dedicatedSupportSlas = "Dedikerad support och SLA:er"
-fasterThroughput = "10x snabbare genomströmning"
-fullyPrivateFiles = "Helt privata filer"
-largeFileProcessing = "Hantering av stora filer"
-orgWideAccess = "Organisationstäckande åtkomstkontroller"
-premiumAiModels = "Premium AI-modeller"
-prioritySupport = "Prioriterad support"
-privateDocCloud = "Privat dokumentmoln"
-ragFineTuning = "RAG + finjustering"
-secureApiAccess = "Säker API-åtkomst"
-standardThroughput = "Standardgenomströmning"
-unlimitedApiAccess = "Obegränsad API-åtkomst"
-unlimitedSeats = "Obegränsat antal platser"
-
 [crop]
 autoCrop = "Auto-beskär tomrum"
 noFileSelected = "Välj en PDF-fil för att börja beskära"
@@ -3346,6 +3525,7 @@ message = "Det gick inte att ange standard-PDF-hanterare"
 title = "Fel"
 
 [defaultApp.prompt]
+dontRemind = "Påminn mig inte igen"
 message = "Gör Stirling PDF till din standardapp för att öppna PDF-filer."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Anpassa grupper"
 dropHint = "Öppna filer för att komma igång"
 dropToAdd = "Drop files to add"
 expand = "Expandera sidofält"
-files = "Filer"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive är inte konfigurerat"
 leaveMyFiles = "Lämna Mina filer"
+library = "PDF-bibliotek"
 myFiles = "Mina filer"
 noFiles = "Inga filer ännu"
 openFileManager = "Öppna filhanteraren"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Lägg till"
-addLabel = "Lägg till en etikett…"
-categoryIconAria = "Välj en ikon för {{name}}"
-createCategory = "Skapa kategori"
-delete = "Ta bort kategori"
 done = "Klart"
-hide = "Dölj kategori"
-newCategory = "Nytt kategorinamn…"
-removeLabel = "Ta bort {{name}}"
-rename = "Byt namn"
 reset = "Återställ till standard"
-search = "Sök etiketter…"
-show = "Visa kategori"
 subtitle = "Gruppera dina filer i överordnade kategorier. Lägg till befintliga eller nya etiketter i en kategori, byt namn på den eller skapa en egen. Filer som inte finns i någon av dina kategorier visas under ”Annat”."
 title = "Sidofältskategorier"
 
@@ -3808,6 +3977,7 @@ refresh = "Uppdatera från servern"
 remove = "Ta bort"
 removeVersion = "Ta bort den här versionen"
 rename = "Byt namn"
+renamed = "Omdöpt"
 renameFolder = "Byt namn på mapp"
 resizeFolderTree = "Ändra storlek på mappträdet (piltangenter, Skift för större steg; dubbelklicka för att autoanpassa)"
 save = "Spara"
@@ -3910,9 +4080,7 @@ count = "Filer"
 folder = "Mapp"
 labels = "Etiketter"
 modified = "Ändrad"
-name = "Namn"
 size = "Storlek"
-toolHistoryAtVersion = "Samlad verktygskedja"
 totalSize = "Total storlek"
 type = "Typ"
 versionHistory = "Versionsresa"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Allt sparat"
+extractCsvError = "Kunde inte extrahera CSV"
+extractXlsxError = "Kunde inte extrahera XLSX"
 flattenAfterFilling = "Platta ut efter ifyllning"
+requiredAbbreviation = "obl"
+requiredFieldsError = "Fyll i alla obligatoriska fält"
 rescanFields = "Skanna fält igen"
 rescanFormFields = "Skanna formulärfält igen"
 save = "Spara"
+saveShortcut = "Ctrl+S för att spara"
+unsavedChanges = "Osparade ändringar"
 
 [formFill.sidebar]
 close = "Stäng sidofält"
@@ -4309,6 +4484,11 @@ desc = "Byter automatiskt namn på en PDF baserat på detekterad rubrik"
 tags = "autodetektera,huvudbaserad,organisera,etikettera om"
 title = "Byt namn på PDF automatiskt"
 
+[home.autoRotate]
+desc = "Identifiera varje sidas orientering och rotera den automatiskt rättvänd."
+tags = "automatisk rotering,fixa orientering,upp och ner,sidledes,räta upp,orientera,identifiera orientering,korrigera rotation,automatisk orientering,skannad,OSD"
+title = "Rotera automatiskt"
+
 [home.autoSizeSplitPDF]
 tags = "auto,dela,storlek"
 title = "Auto-dela efter storlek/antal"
@@ -4608,13 +4788,13 @@ hint = "Ladda upp en PNG, JPG, SVG eller annan bildfil att placera på PDF:en. S
 label = "Ladda upp bild"
 placeholder = "Välj bildfil"
 
-[imageToPdf]
-tags = "konvertering,img,jpg,bild,foto"
-
 [imageToPDF]
 header = "Bild till PDF"
 title = "Bild till PDF"
 
+[imageToPdf]
+tags = "konvertering,img,jpg,bild,foto"
+
 [infoBanner]
 dismiss = "Avfärda"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Du har bjudits in!"
 
 [landing]
 addFiles = "Lägg till filer"
-heroSubtitle = "Släpp in eller lägg till en befintlig PDF för att komma igång."
 mobileUpload = "Ladda upp från mobil"
 openFromComputer = "Öppna från dator"
 uploadFromComputer = "Ladda upp från datorn"
-workbenchEmptyStateHero = "Släpp en PDF var som helst"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Inloggning"
 magicLinkSent = "Magisk länk skickad till {{email}}! Kontrollera din e-post och klicka på länken för att logga in."
 mfaCode = "Autentiseringskod"
 mfaRequired = "Tvåfaktorskod krävs"
+noAccount = "Har du inget konto?"
 or = "Eller"
 password = "Lösenord"
 passwordChangedSuccess = "Lösenordet har ändrats. Logga in med ditt nya lösenord."
@@ -4715,26 +4894,10 @@ signInWith = "Logga in med"
 title = "Logga in"
 unexpectedError = "Oväntat fel: {{message}}"
 updatePassword = "Uppdatera lösenord"
-useEmailInstead = "Logga in med e-post"
 useMagicLink = "Använd magisk länk i stället"
 username = "Användarnamn"
 youAreLoggedIn = "Du är inloggad!"
 
-[login.slides.edit]
-alt = "Redigera PDF-filer"
-subtitle = "Med över ett dussin verktyg för att maskera, signera, läsa och manipulera PDF-filer hittar du garanterat det du söker."
-title = "Redigera PDF-filer för att visa/säkra den information du vill"
-
-[login.slides.overview]
-alt = "Översikt över Stirling PDF"
-subtitle = "En integritetsfokuserad molnsuite för PDF som låter dig konvertera, signera, maskera och hantera dokument, plus 50+ andra kraftfulla verktyg."
-title = "Din allt-i-ett-lösning för alla dina PDF-behov."
-
-[login.slides.secure]
-alt = "Säkra PDF-filer"
-subtitle = "Lägg till lösenord, maskera innehåll och hantera certifikat enkelt."
-title = "Skydda känslig information i dina PDF-filer"
-
 [margin]
 large = "Stor"
 medium = "Mellan"
@@ -4976,6 +5139,7 @@ pinButton = "Du kan använda knappen <strong>Fäst</strong> om du vill att dina
 results = "Efter att verktyget har körts klart visar steget <strong>Granska</strong> en förhandsvisning av resultaten i denna panel och låter dig ångra åtgärden eller ladda ner filen. "
 runButton = "När verktyget har konfigurerats låter denna knapp dig köra verktyget på alla valda PDF:er."
 selectCropTool = "Låt oss välja verktyget <strong>Beskär</strong> för att visa hur man använder ett av verktygen."
+stepOf = "Steg {{current}} av {{total}}"
 toolInterface = "Detta är gränssnittet för verktyget <strong>Beskär</strong>. Som du ser finns det inte mycket där eftersom vi ännu inte har lagt till några PDF-filer att arbeta med."
 workbench = "Detta är <strong>Arbetsbänken</strong> - huvudområdet där du visar och redigerar dina PDF:er."
 wrapUp = "Allt klart! Du har lärt dig om appens huvudområden och hur du använder dem. Klicka på knappen <strong>Hjälp</strong> när du vill för att se denna rundtur igen."
@@ -4988,6 +5152,26 @@ showMeAround = "Visa mig runt"
 skipForNow = "Hoppa över nu"
 skipTheTour = "Hoppa över rundturen"
 
+[onboarding.checklist]
+dismiss = "Avfärda"
+title = "Konfigurera Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Kör Stirling lokalt på din dator"
+title = "Ladda ner Stirling för Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Samarbeta med ditt team"
+title = "Bjud in teammedlemmar"
+
+[onboarding.checklist.shareAnalytics]
+description = "Hjälp till att förbättra Stirling"
+title = "Dela anonym användningsdata"
+
+[onboarding.checklist.takeTour]
+description = "Se hur Stirling fungerar i en snabb genomgång"
+title = "Ta rundturen"
+
 [onboarding.desktopInstall]
 body = "Stirling fungerar bäst som ett skrivbordsprogram. Du kan använda det offline, komma åt dokument snabbare och göra redigeringar lokalt på din dator."
 selectOs = "Välj operativsystem"
@@ -4996,7 +5180,21 @@ titleWithOs = "Ladda ner för {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Autentiseringskod"
+description = "Säkra ditt konto genom att länka en autentiseringsapp. Skanna QR-koden eller ange konfigurationsnyckeln och bekräfta sedan den 6-siffriga koden för att slutföra."
+enable = "Aktivera MFA"
+enableError = "Det gick inte att aktivera tvåfaktorsautentisering. Kontrollera koden och försök igen."
+enterCode = "Ange den 6-siffriga koden från din app."
+enterCodeError = "Ange autentiseringskoden för att fortsätta."
+logout = "Logga ut"
+openAuthenticator = "Öppna Google Authenticator, Authy eller 1Password."
 qrCodeLoading = "Genererar din QR-kod…"
+regenerateQrCode = "Generera QR-kod på nytt"
+scanQrCode = "Skanna QR-koden eller ange konfigurationsnyckeln nedan."
+setupError = "Det gick inte att starta tvåfaktorskonfigurationen. Försök igen."
+setupKey = "Konfigurationsnyckel (manuell inmatning)"
+stepByStep = "Steg för steg"
+success = "MFA har aktiverats. Du kan nu fortsätta."
+title = "Konfigurera multifaktorautentisering"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "När du aktiverar inloggningsläge kan du hantera användare, konfigurera inställningar och övervaka serverhälsa. De första <strong>{{freeTierLimit}}</strong> personerna på din server får använda Stirling gratis."
@@ -5005,6 +5203,11 @@ adminTitle = "Adminöversikt"
 userBody = "Bjud in teammedlemmar, tilldela roller och håll dina dokument organiserade i en säker arbetsyta. Aktivera inloggningsläge när du är redo att växa bortom sololäge."
 userTitle = "Planöversikt"
 
+[onboarding.processorIntro]
+body = "Stirling kör nu <strong>policyer</strong> — automatiserade regler som klassificerar, säkrar och bearbetar varje dokument när det kommer in. Konfigurera dem och övervaka körningar i <strong>Processor</strong>."
+cta = "Kolla in Processor"
+title = "Kolla in Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Förbetalt år"
+
+[payg.prepaid.banner]
+exhausted = "Din förbetalda kapacitet är förbrukad; debitering efter användning har återupptagits. Fyll på för att behålla rabatten."
+expiring_one = "Ditt förbetalda år slutar om {{count}} dag. Oanvänd kapacitet förfaller – fyll på för att starta ett nytt år."
+expiring_other = "Ditt förbetalda år slutar om {{count}} dagar. Oanvänd kapacitet förfaller – fyll på för att starta ett nytt år."
+low = "Du är nere på {{pct}}% av din förbetalda kapacitet. Fyll på när som helst för att fortsätta bearbeta utan avbrott."
+
+[payg.prepaid.card]
+subtitle = "Används före debitering efter användning och utanför ditt utgiftstak."
+title = "Förbetald kapacitet"
+
+[payg.prepaid.meter]
+capSuffix = "av {{total}} förbetalda krediter"
+expires = "Förfaller {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Förbrukad"
+healthy = "Gott om kvar"
+low = "Börjar ta slut"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Klistra in licensnyckeln från ditt e‑postmeddelande"
 success = "Licens aktiverad!"
 successMessage = "Din licens har aktiverats. Du kan nu stänga detta fönster."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "tillämpad"
-enforcing = "Tillämpas..."
-failed = "Tillämpningen misslyckades"
 outputsUnavailable = "Policyutdata är inte längre tillgängliga att ladda ned."
 partialOutputsUnavailable = "Vissa policyutdata är inte längre tillgängliga att ladda ned."
-retrying = "Upptagen, försöker igen..."
 runNotFound = "Tillämpningskörningen kunde inte längre hittas."
-step = "steg {{current}}/{{total}}"
 timedOut = "Tillämpningen överskred tidsgränsen innan körningen kunde slutföras."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Stäng"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Tillämpning av {{names}}"
 applyingProgress = "Tillämpning av {{names}} ({{done}} av {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} av {{total}} fil(er) kunde inte bearbetas och export
 failureTitle = "Exporterades utan fullständig tillämpning"
 printPolicyAppliedBody = "Denna PDF uppdaterades för att uppfylla en policy. Granska ändringarna och skriv sedan ut igen."
 printPolicyAppliedTitle = "Policy tillämpad före utskrift"
-queued = "+{{count}} i kö"
 successTitle = "{{names}} har tillämpats"
 summaryMore = "{{first}}, {{second}} och {{more}} till"
 summaryTwo = "{{first}} och {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Tillämpa före konvertering"
-default = "Tillämpa"
-export = "Tillämpa före export"
-input = "Tillämpa vid import"
-print = "Tillämpa före utskrift"
-
-[policies.field]
-accessLog = "Åtkomstlogg"
-archiveAfter = "Arkivera efter"
-auditTrail = "Revisionsspår"
-belowThreshold = "Under tröskelvärde"
-destination = "Destination"
-frameworks = "Ramverk"
-immutableHold = "Oföränderlig spärr"
-keepFor = "Behåll i"
-minConfidence = "Minsta konfidens"
-notify = "Avisera vid dirigering"
-onViolation = "Vid bristande efterlevnad"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Lägg till"
-addPlaceholder = "Lägg till en etikett…"
-customNote = "Anpassat för ditt team."
-defaultNote = "Använder den inbyggda standarden, delad med ditt team."
-duplicate = "\"{{name}}\" finns redan."
-edit = "Redigera etiketter"
-empty = "Inga etiketter ännu."
-export = "Exportera JSON"
-iconAria = "Välj en ikon för {{name}}"
-import = "Importera JSON"
-importError = "Det gick inte att importera den filen."
-managedNote = "Teametiketter hanteras av din teamledare."
-modalSubtitle = "Delas med hela ditt team. Klassificeraren väljer de etiketter som passar varje dokument."
-modalTitle = "Klassificeringsetiketter"
-pickIcon = "Använd ikonen {{label}}"
-removeAria = "Ta bort {{name}}"
-resetToDefault = "Återställ till standard"
-saveForTeam = "Spara för teamet"
-saving = "Sparar…"
-sectionLabel = "Klassificeringsetiketter"
-startFromScratch = "Börja från början"
-teamCount = "teametiketter"
-tooLong = "Etiketter får vara högst {{max}} tecken."
-ungrouped = "Ogrupperade"
-view = "Visa etiketter"
+categoryCount = "kategorier"
+hideCategory = "Dölj kategori"
+labelCount = "etiketter"
+sharedNote = "Dessa etiketter är inbyggda och delas inom hela ditt team."
+showCategory = "Visa kategori"
 
 [policies.pii]
 account = "Kontonummer (etiketterade)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "USA-routingnummer (ABA)"
 ssn = "Social Security-nummer"
 
-[policies.settings]
-noneExport = "Inga policyer körs för närvarande vid export."
-noneUpload = "Inga policyer körs för närvarande vid uppladdning."
-onExport = "Vid export"
-onUpload = "Vid uppladdning"
-reorderHandle = "Dra för att ändra ordning"
-runOrderDesc = "När fler än en policy körs på samma utlösare körs de i den här ordningen — var och en på föregående policys utdata. Dra för att ändra ordning."
-title = "Policyinställningar"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Policyalternativ"
-policySettings = "Policyinställningar"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Försök igen med misslyckade policyer ({{count}})"
-rowProgress = "{{completed}} av {{total}} filer bearbetade"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Vad är en policy?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Hittar och svartmarkerar automatiskt känsliga uppgifter — som Social Security- och kortnummer — så att de inte kan läsas i dokumentet."
-sanitize = "Tar bort dold JavaScript-kod från filen, så att inget kan köras automatiskt när någon öppnar den."
-watermark = "Stämplar en synlig markering (t.ex. \"Confidential\") över varje sida."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Stäng"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} tillämpas..."
 badgeRan = "Policyn {{name}} kördes på den här filen"
+badgeRunning = "{{name}} körs..."
 blockingAction = "{{action}} blockerades medan policy tillämpas, vänta..."
 dismiss = "Stäng överlägg"
 enforcingTitle = "Tillämpar policy..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Visa fil (policy tillämpas fortfarande)"
 [policyOption]
 autoRedactPhi = "Automatisk maskering av PHI"
 blockExport = "Blockera export"
+ccpa = "CCPA"
 contracts = "Avtal"
 documents = "Dokument"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor-plan"
 subscribed = "Processor-plan"
 unlinked = "Inte länkat"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Initiera från dokument"
-sectionsAriaLabel = "Agent Builder-sektioner"
-selectorAriaLabel = "Agenter"
-subtitle = "Designa, testa och leverera AI-agenter som klassificerar, extraherar från och dirigerar dina dokument. Definiera scenarier, avgränsa verktygsåtkomst, kör ett golden set och publicera en version."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Avbryt"
-dropzoneText = "Välj ett exempeldokument (PDF eller bild)"
-lead = "Släpp ett exempeldokument så föreslår vi scenarier och ett extraktionsschema som du kan förfina. Ingenting publiceras förrän du har granskat det."
-submit = "Initiera agent"
-subtitle = "Starta en ny agent från en representativ fil"
-title = "Initiera från ett dokument"
-
-[portal.agentBuilder.empty]
-description = "Initiera en agent från ett exempeldokument för att starta dess scenarier och extraktionsschema, förfina sedan och publicera."
-title = "Inga agenter ännu"
-
-[portal.agentBuilder.evals]
-casesPassing = "Fall som godkänns"
-columnCase = "Eval-fall"
-columnLatency = "Latens"
-columnResult = "Resultat"
-fail = "misslyckas"
-goldenSetPassRate = "Godkännandefrekvens för golden set"
-latencyMs = "{{ms}} ms"
-notRun = "inte kört"
-pass = "godkänt"
-passRate = "Godkännandefrekvens"
-runEvals = "Kör evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals gör dina scenarier till ett repeterbart golden set. Uppgradera för att registrera godkännandefrekvens över tid och spärra publiceringar baserat på den."
-title = "Inget golden set ännu"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "över golden sets"
-activeAgents = "Aktiva agenter"
-avgPassRate = "Genomsnittlig godkännandefrekvens för eval"
-fleetWide = "för hela flottan"
-latestPublished = "Senast publicerad"
-scenarios = "Scenarier"
-testCases = "testfall"
-totalDescription_one = "{{count}} totalt"
-totalDescription_other = "{{count}} totalt"
-
-[portal.agentBuilder.scenarios]
-add = "Lägg till"
-addScenario = "Lägg till scenario"
-enable = "Aktivera"
-expectationLabel = "Förväntat beteende"
-expectationPlaceholder = "Vad agenten ska göra"
-inEval = "i eval"
-mute = "Tysta"
-muted = "tystad"
-nameLabel = "Namn"
-namePlaceholder = "t.ex. eskalering för efterlevnad"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "Scenarier"
-tools = "Verktyg"
-versions = "Versioner"
-
-[portal.agentBuilder.tools]
-broadAccess = "Bred åtkomst"
-deniedHint = "Valda verktyg är blockerade. Allt annat förblir anropbart."
-deniedTools = "Nekade verktyg"
-governanceGate = "Verktygsstyrning är tillgänglig i Enterprise-planen."
-restricted = "Begränsad"
-restrictedAccess = "Begränsad verktygsåtkomst"
-restrictedDescription = "Tillåt alla verktyg utom de du nekar nedan."
-
-[portal.agentBuilder.versions]
-current = "aktuell"
-historyGate = "Full versionshistorik och återställning är tillgängliga i Enterprise-planen."
-publish = "Publicera"
-rollBack = "Återställ"
-
 [portal.assistant]
 close = "Stäng assistenten"
 error = "Det gick inte att nå assistenten."
@@ -6365,9 +6346,21 @@ typing = "Skriver"
 loading = "Läser in"
 redirectingToEditor = "Omdirigerar till redigeraren..."
 
+[portal.billing.activation]
+maybeLater = "Kanske senare"
+title = "Slå på Processor"
+
+[portal.billing.activation.payg]
+sub = "Ange en månadsgräns. Betala för det du kör."
+title = "Betala per användning"
+
+[portal.billing.activation.prepay]
+badge = "2 månader gratis"
+sub = "En faktura, kort eller banköverföring."
+title = "Förbetala ett år"
+
 [portal.billing.checkout]
 noClientSecret = "Edge-funktionen returnerade ingen client_secret."
-subtitle = "Lägg till ett kort för att fortsätta efter din kostnadsfria tilldelning i Editor-planen. Stripe hanterar resten."
 title = "Aktivera Processor-planen"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Din betalning lyckades, men aktiveringen tar lite längre tid än vanlig
 close = "Stäng"
 title = "Nästan klart"
 
+[portal.billing.checkout.cap]
+amountAria = "Månatlig utgiftsgräns"
+back = "Tillbaka"
+continue = "Fortsätt till betalning"
+error = "Kunde inte ange din utgiftsgräns"
+finePrint = "Fakturor skickas månadsvis. Avbryt när som helst."
+noLimit = "Ingen gräns"
+note = "Du debiteras aldrig över din gräns. Bearbetningen pausas bara."
+perMonth = "/ mån"
+title = "Ange din utgiftsgräns"
+
+[portal.billing.checkout.card]
+fields = "Kortnummer · MM / ÅÅ · CVC · ZIP"
+label = "Kortuppgifter"
+note = "Kortuppgifter samlas in av Stripe. Stirling lagrar aldrig PAN eller CVC."
+
 [portal.billing.checkout.error]
 title = "Det gick inte att starta kassan"
 
@@ -6383,10 +6392,9 @@ body = "Din betalning gick igenom. Vi aktiverar nu mätt bearbetning över dina
 hint = "Låt det här fönstret vara öppet."
 title = "Aktiverar din Processor-plan..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "i portal env för att aktivera kassa i appen."
-bodyBefore = "Ange"
-title = "Stripe är inte konfigurerat"
+[portal.billing.checkout.pay]
+limit = "Månatlig utgiftsgräns {{amount}}/mån. Bearbetningen pausas vid gränsen."
+limitNoCap = "Ingen utgiftsgräns. Bearbetningen pausas inte. Fakturor skickas månadsvis."
 
 [portal.billing.enterpriseUpsell]
 cta = "Skapa din Enterprise-offert"
@@ -6409,10 +6417,12 @@ currentPlan = "Aktuell plan"
 freeForever = "Gratis för alltid"
 noTeamResolved = "Inget team har kopplats till din plånbok ännu — uppdatera och försök igen."
 ownerOnly = "Endast teamägaren kan aktivera Processor-planen."
+payInvoice = "Betala faktura för att slutföra"
 planName = "Editor"
 ssoIncluded = "SSO ingår"
 switchOnProcessor = "Aktivera Processor →"
 unlimitedUsers = "Obegränsat antal användare"
+viewQuote = "Visa offert"
 
 [portal.billing.invoices]
 columnAmount = "Belopp"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Direkta API-förfrågningar"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Automatiseringar och pipelines"
 segmentAutomationLabel = "Automatisering"
+sizeMultiplier = "{{formatted}} PDFs använde en storleksmultiplikator"
+summary = "{{unique}} unika · {{units}} mätarenheter · {{avg}} i genomsnitt per PDF"
+summaryNoRate = "{{unique}} unika · {{units}} mätarenheter"
 unit = "mätta PDF:er"
+unitsPending_one = "{{units}} mätarenhet väntar på synk från länkade instanser"
+unitsPending_other = "{{units}} mätarenheter väntar på synk från länkade instanser"
+
+[portal.billing.prepaid]
+capSuffix = "av {{total}} förbetalda krediter"
+expires = "Förfaller {{date}}"
+eyebrow = "Förbetald kapacitet"
+note = "Används före debitering efter användning och utanför din utgiftsgräns."
+topUp = "Fyll på"
+
+[portal.billing.prepaid.buy]
+back = "Tillbaka"
+calcTitle = "Beräkna din årsbetalning"
+cancel = "Avbryt"
+cancelPurchase = "Avbryt köp"
+close = "Stäng"
+continueToPayment = "Fortsätt till betalning"
+finalise = "Slutför"
+invoiceErrorTitle = "Kunde inte generera fakturan"
+loadingTitle = "Läser in din offert"
+payTitle = "Betala för ditt år"
+step = "Steg {{current}} av {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Ändra"
+deployRow = "Distribution"
+done = "Klart"
+enterpriseHint = "Detta är företagsnivå. Vid den här volymen är företagspriser bättre än någon självbetjäningsrabatt. Prislåsning, villkor och en offert på några minuter."
+governanceRow = "Styrning"
+governanceValue = "{{label}} · {{count}} policyer"
+handlesLabel = "Din Processor"
+handlesValue = "hanterar {{volume}} krediter / mån"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policyer"
+poolCaption = "En pool med {{credits}} krediter för året. Tunga månader lånar från lätta."
+priceLabel = "Ditt år · 12 månader till priset av 10"
+rateUnknown = "Vi visar det exakta priset i kassan."
+savings = "Du sparar {{amount}} · 2 månader gratis."
+sizingRow = "Storleksanpassning"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Totalt antal användare"
+
+[portal.billing.prepaid.consent]
+label = "Jag förstår att när min förbetalda kapacitet är förbrukad eller förfaller efter 12 månader fortsätter bearbetningen automatiskt till standardpriset för debitering efter användning (upp till min utgiftsgräns) om jag inte avbryter, och att jag kan avbryta när som helst från faktureringsportalen."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Hanteras av Stirling. Live på några minuter."
+cloudValue = "Stirling Cloud · Hanterad"
+selfhost = "Självhostad"
+selfhostDesc = "Körs på privat infrastruktur. Samma pris."
+selfhostValue = "Självhostad · Privat infrastruktur"
+
+[portal.billing.prepaid.offer]
+cta = "Granska erbjudande"
+subtitle = "Förbetala ett år av PDF-bearbetning och få två månader gratis, används före debitering efter användning, utanför din utgiftsgräns."
+title = "Få 12 månader till priset av 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Kontoinnehavarens namn"
+accountNamePlaceholder = "t.ex. Jane Smith"
+companyName = "Företagsnamn (valfritt)"
+companyNamePlaceholder = "t.ex. Acme Inc."
+downloadInvoice = "Ladda ner faktura"
+payOnline = "Betala online"
+poNumber = "PO-nummer (valfritt)"
+poNumberPlaceholder = "t.ex. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Avancerad"
+advancedDesc = "Pipelines driver det mesta av din bearbetning."
+none = "Inga"
+noneDesc = "Kör inga pipelines ännu. Slå på dem när som helst."
+standard = "Standard"
+standardDesc = "Några pipelines ombearbetar inkommande PDFs."
+
+[portal.billing.prepaid.posture]
+essentials = "Grundläggande"
+essentialsDesc = "Klassificering, standarden, plus Delning"
+governed = "Styrd"
+governedDesc = "Lägger till Säkerhet och Routing"
+regulated = "Reglerad"
+regulatedDesc = "Varje kategori, inkl. Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "Ladda ner offert (PDF)"
+downloading = "Förbereder…"
+share = "dela för godkännande"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "Filer under 25 MB, inga dataavgifter"
+heavy = "Tung"
+heavyDesc = "Skannad eller bildtung, rutinmässigt 50 MB+"
+standard = "Standard"
+standardDesc = "Mestadels små, vissa skanningar över 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Förbrukad"
+healthy = "Gott om kvar"
+low = "Börjar ta slut"
 
 [portal.billing.spendLimit]
 adjustLimit = "Justera gräns"
@@ -6494,6 +6608,8 @@ label = "Prognos att överskridas."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Utgifter denna månad"
+freeRemaining_one = "{{formatted}} gratis PDF återstår"
+freeRemaining_other = "{{formatted}} gratis PDFs återstår"
 processed_one = "{{formattedCount}} PDF bearbetad."
 processed_other = "{{formattedCount}} PDF:er bearbetade."
 processedWithRate_one = "{{formattedCount}} PDF bearbetad, med {{rate}} styck."
@@ -6534,6 +6650,350 @@ signature = "signatur"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Ny anslutning"
+createTitleFor = "Anslut {{name}}"
+delete = "Ta bort"
+edit = "Redigera"
+editTitle = "Redigera anslutning"
+unsupportedType = "Den här anslutningstypen kan inte redigeras här."
+
+[portal.connections.categories.advanced]
+description = "För en tjänst som vi inte stöder ännu."
+label = "Avancerat"
+
+[portal.connections.categories.audit]
+description = "Registrera vad som hände med ett dokument, där dina revisorer redan tittar."
+label = "Granskning och efterlevnadsloggning"
+
+[portal.connections.categories.notify]
+description = "Berätta för ett annat system att något har hänt."
+label = "Avisering och arbetsflöde"
+
+[portal.connections.categories.security]
+description = "Skanna eller etikettera ett dokument innan det går vidare."
+label = "Säkerhet och klassificering"
+
+[portal.connections.categories.signing]
+description = "Skicka ut ett dokument för signering eller notarisering."
+label = "E-signatur och notarisering"
+
+[portal.connections.categories.storage]
+description = "Där bearbetade dokument hamnar – en bucket, en enhet, ett ärende eller en sida."
+label = "Fil och bifoga"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling lagrar detta krypterat och visar det aldrig igen."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Steg som använder denna anslutning kan bara anropa sökvägar under denna URL, aldrig en annan host."
+label = "Server-URL"
+
+[portal.connections.commonFields.email]
+label = "E-post"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Lösenord"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Användarnamn"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Klistra in URL som tjänsten gav dig. Endast sökvägar under den kan anropas."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Anslutningsnamn"
+namePlaceholder = "t.ex. Produktion"
+
+[portal.connections.picker]
+cancel = "Avbryt"
+createNew = "Ny anslutning..."
+placeholder = "Välj en anslutning"
+save = "Spara anslutning"
+
+[portal.connections.picker2]
+back = "Ändra integration"
+heading = "Vad vill du ansluta?"
+noResultsBody = "Vi stöder det inte ännu – berätta om det så tittar vi på att lägga till det."
+noResultsTitle = "Inget matchar \"{{query}}\""
+searchPlaceholder = "Sök integrationer – prova \"sign\", \"ocr\" eller ett produktnamn"
+
+[portal.connections.types.api]
+description = "Anropa valfritt HTTP API från en policy. Du väljer URL, autentisering och payload."
+label = "Anpassat API"
+
+[portal.connections.types.api.fields.authType]
+label = "Autentisering"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Användarnamn och lösenord"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token i en anpassad header"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Ingen"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Logga in för en token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Steg som använder denna anslutning kan bara anropa sökvägar under denna URL, aldrig en annan host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header-namn"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Inloggningssökväg"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Lösenord"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Om API svarar med en nedladdningslänk får endast dessa hosts hämtas. Separera med kommatecken. Lämna tomt för att endast tillåta base URL:ens egen host."
+label = "Tillåtna resultathosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Skicka token som denna header"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Svarsheadern som inloggningsanropet returnerar token i, t.ex. X-Auth-Token."
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "Användarnamn"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Skanna dokument efter skadlig kod på en server du kör – inget lämnar ditt nätverk."
+label = "ClamAV (självhostad)"
+
+[portal.connections.types.cloudmersive]
+description = "Virus- och innehållsskanning för dokument i en policy."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Blockera dokument som innehåller makron, körbara filer, skript eller inbäddade objekt – inte bara känd skadlig kod."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Bifoga bearbetade dokument till en Confluence-sida."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Skicka dokument till ConsignO Cloud (Notarius) för elektronisk signatur och notarisering."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Din ConsignO Cloud-miljö, inklusive /api/v1."
+label = "Server-URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Lösenord"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Behövs bara om din organisation använder tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Användarnamn"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Publicera ett meddelande till Discord när en policy bearbetar ett dokument."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Indexera en granskningshändelse i Elasticsearch varje gång en policy hanterar ett dokument."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Hämta nya dokument från en FTP- eller FTPS-server."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Anslutningsläge"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktiv"
+passive = "Passiv (rekommenderas)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Vanlig FTP skickar inloggningsuppgifter och filer okrypterat; välj FTPS om servern stöder det."
+label = "Kryptering"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Ingen (vanlig FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Publicera ett meddelande till ett Google Chat-utrymme när en policy körs."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Bifoga bearbetade dokument till ett Jira-ärende."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Skicka ett dokument eller en avisering via e-post när en policy körs."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Lagra bearbetade dokument i Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Applösenord"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Identifiera personuppgifter i dokumenttext med en Presidio-server som du kör."
+label = "Presidio (självhostad)"
+
+[portal.connections.types.purview]
+description = "Läs och tillämpa Microsoft Purview-känslighetsetiketter på PDFs."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Valfritt. Behövs bara för att välja etiketter efter namn; etikettering fungerar utan det."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Stämplas på varje etikett som dess SiteId, så Purview-medvetna verktyg vet vilken organisation som tillämpade den."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "En S3 bucket som källor kan läsa från och pipeline-utdata kan skriva till."
+label = "S3-lagring"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Lämna tomt för AWS. Ange detta för MinIO eller en annan S3-kompatibel lagring."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Skicka ett dokument eller en avisering via e-post när en policy körs."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Hämta nya dokument från en SFTP (SSH)-server."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Valfritt. Serverns SHA-256 host key fingerprint (från `ssh-keyscan host | ssh-keygen -lf -`). När den anges accepteras endast en server som presenterar denna nyckel; när den lämnas tom fästs nyckeln som ses vid första anslutningen och senare ändringar nekas."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Lämna tomt om du autentiserar med en privat nyckel istället."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Valfritt. Klistra in en privat OpenSSH-nyckel för att autentisera med en nyckel istället för ett lösenord."
+label = "Privat nyckel"
+
+[portal.connections.types.slack]
+description = "Publicera ett meddelande till Slack när en policy bearbetar ett dokument."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Övervaka en SMB / CIFS-nätverksresurs (Windows eller Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Nätverksresurs"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Valfritt. Windows-domänen eller arbetsgruppen, om din server använder en."
+label = "Domän"
+
+[portal.connections.types.smb.fields.share]
+label = "Resurs"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Skicka en granskningshändelse till Splunk varje gång en policy hanterar ett dokument."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Skicka en granskningshändelse till en Sumo Logic HTTP-insamlare."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Publicera ett meddelande till en Teams-kanal när en policy körs."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Publicera varje dokument, eller bara detaljerna, till en URL du väljer."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Utlös ett Zap- eller Make-scenario från en policy."
+label = "Zapier och Make"
+
+[portal.docs]
+browse = "Bläddra i dokumentation"
+viewSource = "Visa källa på GitHub"
+
 [portal.docs.authentication]
 codeCaption = "varje förfrågan"
 eyebrow = "KOM IGÅNG"
@@ -6619,11 +7079,19 @@ title = "Officiella SDK:er"
 beta = "Beta"
 deprecated = "Föråldrad"
 
+[portal.docs.search]
+empty = "Inga matchande dokument"
+placeholder = "Sök i dokumentation"
+results = "{{count}} resultat"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Medföljande, namngivna förmågor som din agent anropar som ett enda verktyg. Varje skill är en deterministisk åtgärdskedja med kopplade evals."
 title = "Agent-skills"
 
+[portal.docs.toc]
+title = "På denna sida"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API-REFERENS"
@@ -6697,6 +7165,8 @@ type = "Typ"
 user = "Användare"
 
 [portal.documents.queue.empty]
+connectSource = "Anslut en källa"
+createPipeline = "Skapa en pipeline"
 description = "När källor matar in dokument i dina pipelines visas de här för granskning."
 title = "Inga dokument i kön"
 
@@ -6806,13 +7276,71 @@ description = "Den här vyn stötte på ett oväntat fel. Försök igen eller v
 retry = "Försök igen"
 title = "Något gick fel på den här sidan"
 
+[portal.home.download]
+back = "Tillbaka"
+body = "Ladda ner desktop-appen eller självhosta servern."
+done = "Klart"
+guide = "Öppna guiden för {{name}}"
+openInBrowser = "Öppna i webbläsaren istället"
+sectionDesktop = "Desktop-app"
+sectionSelfHosted = "Självhostad"
+title = "Installera Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Kör den officiella imagen på din server."
+note = "Öppnas på :8080. Standardinloggning: admin / stirling."
+tagline = "Kör servern i en container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Installera det officiella Helm chart."
+note = "Lägg till en PVC för /configs för att spara inställningar."
+tagline = "Distribuera till ett kluster med Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Inbyggda byggen för din distribution."
+guideBtn = "Visa installationsalternativ för Linux"
+note = "AppImage-, .deb- och .rpm-byggen är tillgängliga för vanliga distributioner."
+tagline = "Inbyggd skrivbordsapp för din distribution"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Eller via Homebrew"
+detailBody = "Kör installationsprogrammet eller använd Homebrew."
+downloadBtn = "Ladda ner för macOS"
+tagline = "Inbyggd app för Apple silicon och Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Kör .jar på en bare metal-server."
+downloadBtn = "Ladda ner .jar"
+note = "Kräver Java 21+. Öppnas på :8080; standardinloggning admin / stirling."
+runLabel = "Kör den sedan"
+tagline = "Kör .jar på en bare metal-server"
+title = "Manuell serverkonfiguration"
+
+[portal.home.download.windows]
+altLabel = "Eller via winget"
+detailBody = "Kör installationsprogrammet eller använd en pakethanterare."
+downloadBtn = "Ladda ner installationsprogram"
+tagline = "Inbyggd app för Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktiva"
-invite = "Bjud in teammedlemmar"
+activeOfDeployed = "{{active}} av {{total}} aktiva denna månad"
 name = "Stirling PDF Editor"
 open = "Öppna i webbläsare"
 updated = "uppdaterad {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Slutför distribution"
+options = "Visa distributionsalternativ"
+start = "Distribuera editorn"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Självhostad · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "God eftermiddag"
 evening = "God kväll"
 morning = "God morgon"
 
-[portal.home.onboarding]
-dismiss = "Avvisa konfiguration"
-notStarted = "Inte startad"
-progress = "{{done}} av {{total}} klara"
-title = "Slutför konfigureringen"
-
-[portal.home.onboarding.enterprise]
-body = "Organisationsomfattande SSO + SCIM + RBAC, avtalad volymprissättning och distribution i isolerad miljö."
-cta = "Starta provperiod"
-ctaQuote = "Få offert"
-lead = "För 250+ anställda."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Distribuera skrivbordsappen, gratis för alltid."
-title = "Ladda ner PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktiva · {{recommended}} rekommenderade"
-chip = "{{active}} aktiva"
-title = "Aktivera policyer"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} anslutna · varje PDF styrs där den hamnar"
-chip = "{{connected}} anslutna"
-title = "Anslut dina källor"
-
-[portal.home.quickActions]
-subtitle = "Viktigaste uppgifterna för idag"
-title = "Snabbåtgärder"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-stegsbyggare över det typade åtgärdsbiblioteket"
-title = "Bygg en pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agenter, webhooks, bevakade mappar"
-title = "Anslut en källa"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Avgränsad nyckel med hastighetsgränser och IP-tillåtelselista"
-title = "Utfärda en API-nyckel"
-
 [portal.infrastructure]
 manageEditorDeployment = "Hantera Editor-distribution"
 sectionsAriaLabel = "Infrastrukturavsnitt"
@@ -6878,13 +7363,9 @@ heading = "API-nycklar"
 subheading = "Avgränsade autentiseringsuppgifter med hastighetsgränser per nyckel, behörigheter och IP-tillåtelselistor."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Tillåtna IP-adresser"
-anyIp = "Valfri IP (ingen tillåtelselista)"
 created = "Skapad"
 lastUsed = "Senast använd"
-permissions = "Behörigheter"
-rateLimit = "Hastighetsgräns"
-rateLimitValue = "{{value}} beg/min"
+revoke = "Återkalla nyckel"
 usageMonth = "Användning denna månad"
 usageToday = "Användning idag"
 
@@ -6892,6 +7373,20 @@ usageToday = "Användning idag"
 description = "Skapa en avgränsad nyckel för att börja anropa Stirling API."
 title = "Inga API-nycklar ännu"
 
+[portal.infrastructure.apiKeys.error]
+load = "Kunde inte läsa in dina API-nycklar. Försök igen."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Återkalla \"{{name}}\"? Alla integrationer som fortfarande använder den här nyckeln kommer omedelbart att börja få 401-fel. Detta kan inte ångras."
+cancel = "Avbryt"
+confirm = "Återkalla nyckel"
+title = "Återkalla API-nyckel"
+
+[portal.infrastructure.attestationLabel]
+attested = "Intygad"
+inScope = "Inom omfång"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrera granskningshändelser efter kategori"
 heading = "Granskningsloggar"
@@ -6935,6 +7430,7 @@ all = "Alla"
 auth = "Auth"
 config = "Konfiguration"
 elevation = "Åtkomsthöjning"
+policy = "Policy"
 processing = "Bearbetning"
 security = "Säkerhet"
 
@@ -6944,19 +7440,35 @@ title = "Du har inte åtkomst"
 
 [portal.infrastructure.audit.metrics]
 config = "Konfiguration"
-elevation = "Åtkomsthöjning"
+policy = "Policy"
 processing = "Bearbetning"
 totalEvents = "Totalt antal händelser · 24 h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Autentisering"
+config = "Konfiguration"
+elevation = "Behörighetshöjning"
+policy = "Policy"
+processing = "Bearbetning"
+security = "Säkerhet"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Fel"
+info = "Info"
+success = "Klart"
+warning = "Varning"
+
+[portal.infrastructure.certLabel]
+certified = "Certifierad"
+inProgress = "Pågår"
+notStarted = "Inte startad"
+
 [portal.infrastructure.createKey]
 cancel = "Avbryt"
 createKey = "Skapa nyckel"
 done = "Klar"
-ipAllowlistHelper = "Kommaseparerade CIDR-intervall. Lämna tomt för att tillåta valfri IP."
-ipAllowlistLabel = "IP-tillåtelselista"
 keyNameLabel = "Nyckelnamn"
 keyNamePlaceholder = "t.ex. Produktion · ingest"
-permissionsLabel = "Behörigheter"
 secretKeyCaption = "Hemlig nyckel"
 secretWarning = "Lagra detta i en hemlighetshanterare. Stirling lagrar endast en hash — det går inte att återställa den senare."
 subtitle = "Avgränsa nyckeln till det minsta den behöver. Du kan rotera eller återkalla den när som helst."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Kopiera den här hemligheten nu — den visas inte igen."
 title = "Skapa API-nyckel"
 titleCreated = "Nyckel skapad"
 
+[portal.infrastructure.deployLabel]
+live = "Live"
+queued = "Köad"
+rolledBack = "Återställd"
+rolling = "Rullas ut"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "Livehälsa för varje distribuerad Stirling-region — latens, bel
 description = "Distribuerade regioner visas här när din arbetsyta har provisionerats."
 title = "Inga regioner distribuerade"
 
+[portal.infrastructure.keyLabel]
+active = "Aktiv"
+revoked = "Återkallad"
+
+[portal.infrastructure.modelLabel]
+active = "Aktiv"
+degraded = "Försämrad"
+disabled = "Inaktiverad"
+
 [portal.infrastructure.models]
 heading = "Modeller"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Status"
 type = "Typ"
 version = "Version"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/anrop"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktiva modeller"
 avgLatency = "Genomsnittlig latens"
@@ -7049,6 +7580,17 @@ modelForAria = "Modell för {{operation}}"
 operation = "Åtgärd"
 routedTo = "Routas till"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Klassificering"
+extraction = "Extrahering"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Försämrad"
+down = "Nere"
+healthy = "Felfri"
+
 [portal.infrastructure.security.access.byok]
 description = "Tillhandahåll en nyckel från din egen KMS. Stirling krypterar med den men kan fortfarande läsa."
 label = "Ta med din egen nyckel (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeller"
 security = "Säkerhet"
 storage = "Lagring"
 
+[portal.integrations]
+addAnother = "Lägg till en till"
+availableHeading = "Tillgängliga"
+comingSoonHeading = "Kommer snart"
+connect = "Anslut"
+connectedHeading = "Anslutna"
+connectionCount_one = "{{count}} anslutning"
+connectionCount_other = "{{count}} anslutningar"
+customApi = "Anpassat API"
+searchPlaceholder = "Sök integrationer"
+subtitle = "Allt som Stirling kan kommunicera med. Inloggningsuppgifter skapas en gång här och refereras sedan av källor, policies och pipelines."
+title = "Integrationer"
+typedName = "{{tool}}-namn"
+
+[portal.integrations.filters]
+all = "Alla"
+audit = "Granskning"
+connected = "Anslutna"
+notify = "Notifiera"
+security = "Säkerhet"
+signing = "Signering"
+storage = "Lagring"
+
+[portal.integrations.status]
+connected = "Ansluten"
+
+[portal.integrations.table]
+integration = "Integration"
+worksWith = "Fungerar med"
+
+[portal.integrations.worksWith]
+pipelines = "Pipelines"
+policies = "Policies"
+sources = "Källor"
+
+[portal.legal]
+draft = "{{label}} · utkast"
+loadError = "Kunde inte läsa in det här dokumentet. Försök igen."
+loading = "Läser in…"
+title = "Juridiskt dokument"
+
 [portal.nav]
 agent-builder = "Agentbyggare"
 components = "Komponenter"
@@ -7182,6 +7765,7 @@ documents = "Dokument"
 editor = "Editor"
 home = "Hem"
 infrastructure = "Infrastruktur"
+integrations = "Integrationer"
 pipelines = "Pipelines"
 policies = "Policyer"
 procurement = "Inköp"
@@ -7190,25 +7774,9 @@ sources = "Källor"
 usage = "Användning och fakturering"
 users = "Användare"
 
-[portal.notifications]
-markAllRead = "Markera alla som lästa"
-title = "Aviseringar"
-viewAll = "Visa alla"
-
-[portal.notifications.ariaLabel]
-none = "Aviseringar, inga olästa"
-unread_one = "Aviseringar, {{count}} oläst"
-unread_other = "Aviseringar, {{count}} olästa"
-
-[portal.notifications.count]
-allRead = "alla lästa"
-loading = "läser in"
-new_one = "{{count}} ny"
-new_other = "{{count}} nya"
-
-[portal.notifications.empty]
-description = "Inga nya aviseringar."
-title = "Du är helt uppdaterad"
+[portal.nav.section]
+platform = "PDF-plattform"
+processor = "PDF-processor"
 
 [portal.pipelines]
 subtitle = "Varje automatiserad dokumentpipeline på backend: en ordnad kedja av åtgärder över en uppsättning källor, körd vid en trigger. Klicka på en rad för dess steg och källor."
@@ -7220,15 +7788,28 @@ newPipeline = "Ny pipeline"
 [portal.pipelines.builder]
 addStep = "Lägg till verktyg"
 back = "Tillbaka till pipelines"
+cannotFollow = "Kan inte ta emot {{produced}}"
+chooseAccount = "Välj ett konto"
+chooseDestination = "Välj en destination"
+chooseOperation = "Välj vad det här steget gör"
+chooseSource = "Välj en källa"
 discard = "Kassera ändringar"
 enabled = "Aktiverad"
+inputs = "Indata"
+inputSource = "Indatakälla"
+inputTrigger = "Utlösare"
 keepEditing = "Fortsätt redigera"
+needsConfiguring = "Behöver konfigureras"
 needsUpload = "Behöver en uppladdad fil"
+noSources = "Inga källor är anslutna än. Skapa en för att använda den som indata."
 noToolMatches = "Inga verktyg matchar din sökning."
 pipelineSettings = "Pipeline-inställningar"
 searchTools = "Sök verktyg"
 selectToolBody = "Lägg till ett verktyg för att bygga din pipeline."
 selectToolTitle = "Inga verktyg ännu"
+sendToSystem = "Skicka till ett annat system"
+stepsIncompatible = "Dessa steg kan inte köras på det som deras föregående steg producerar: {{tools}}."
+stepsNeedSetup = "Dessa steg behöver fortfarande konfigureras innan du sparar: {{tools}}."
 toolSettings = "Verktygsinställningar"
 unknownStep = "Okänd åtgärd, behålls som den är."
 unsavedBody = "Du har osparade ändringar. Spara dem innan du lämnar, eller kassera dem?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Osparade ändringar"
 uploadUnsupported = "Uppladdade filer stöds inte i pipelines ännu, så de här stegen kan inte sparas: {{tools}}."
 usesDefaults = "Körs med standardinställningar"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kombinerar varje fil från föregående steg"
+fan-out = "Körs en gång per fil från föregående steg"
+format-mismatch = "Behöver {{accepts}}, men föregående steg producerar {{produced}}"
+output-uncertain = "Kanske inte körs: föregående stegs utdata beror på hur det är konfigurerat"
+source-mismatch = "Behöver {{accepts}}, men denna pipelines indata är {{produced}}"
+undeclared-operation = "Kan inte kontrollera vad det här steget accepterar"
+
 [portal.pipelines.composer]
 addTool = "Lägg till verktyg"
 cancel = "Avbryt"
 chainEmpty = "Lägg till ett verktyg för att börja bygga din pipeline."
 create = "Skapa pipeline"
-directory = "Utdatamapp"
-directoryHelp = "Absolut sökväg på servern. Måste vara inom de konfigurerade tillåtna mapparna."
 editingUnsupported = "Visning av dessa verktygsparametrar för redigering stöds inte ännu."
 moveDown = "Flytta ned"
 moveUp = "Flytta upp"
 name = "Namn"
 namePlaceholder = "t.ex. Maskeringsgenomgång"
-noSources = "Inga källor anslutna ännu. Pipelinen kan fortfarande köras på filer som tillhandahålls direkt till den."
 noToolSettings = "Det här verktyget har inga konfigurerbara inställningar."
 operations_one = "Åtgärd ({{count}})"
 operations_other = "Åtgärder ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Ta bort"
 title = "Ta bort pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Rensa historik"
 delete = "Ta bort pipeline"
 run = "Kör nu"
 
 [portal.pipelines.empty]
 action = "Skapa en pipeline"
+connectSource = "Anslut en källa"
 description = "Skapa din första pipeline: välj källorna den körs över, kedja åtgärderna och välj vart utdata ska skickas."
 title = "Inga pipelines ännu"
 
@@ -7286,15 +7874,17 @@ active = "Aktiva"
 paused = "Pausade"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Skriv till mapp"
-inline = "Returnera filer"
-
 [portal.pipelines.run]
+allProcessed_one = "Inget att köra: källans {{count}} dokument har redan bearbetats."
+allProcessed_other = "Inget att köra: alla {{count}} dokument i källorna har redan bearbetats."
 completed_one = "Körning slutförd."
 completed_other = "Alla {{count}} körningar slutförda."
 empty = "Inget att köra: källorna hade inga dokument att bearbeta."
 failed = "Körning misslyckades: {{error}}"
+historyCleared = "Historiken har rensats. Nästa körning bearbetar om allt som för närvarande finns i källorna."
+inFlight = "Inget nytt att köra: dokument bearbetas fortfarande från en tidigare körning."
+parked_one = "Inget att köra: {{count}} dokument misslyckades tidigare och är parkerat. Åtgärda orsaken och rensa sedan historiken för att försöka igen."
+parked_other = "Inget att köra: {{count}} dokument misslyckades tidigare och är parkerade. Åtgärda orsaken och rensa sedan historiken för att försöka igen."
 running = "Körning startad; pågår fortfarande."
 timeout = "Körningen tar längre tid än väntat; den kan fortfarande slutföras i bakgrunden."
 
@@ -7314,12 +7904,18 @@ manual = "Manuell"
 schedule = "Schemalagd"
 
 [portal.policies]
+defaultName = "{{category}}-policy"
 subtitle = "Stående automatiseringar som tillämpar en verktygspipeline på varje dokument. Varje policy utlöses vid uppladdning eller export, kör sin verktygskedja och sparar den tillämpade versionen bredvid originalet."
 title = "Policyer"
 
 [portal.policies.card]
 comingSoon = "Uppgradera till Enterprise"
 notSetUp = "Inte konfigurerad"
+requiresAiEngine = "Kräver AI-motor"
+
+[portal.policies.categories.classification]
+desc = "Identifiera varje dokuments typ vid uppladdning och tagga dess metadata för arkivering och sökning."
+label = "Klassificering"
 
 [portal.policies.categories.compliance]
 desc = "Tillämpa HIPAA-, GDPR-, SOC 2- eller FedRAMP-krav på varje dokument."
@@ -7344,6 +7940,13 @@ label = "Säkerhet"
 [portal.policies.config]
 scopeAll = "Alla dokument"
 
+[portal.policies.config.classification]
+summary = "Klassificerar varje uppladdat dokument mot ditt teams etiketter och taggar dess metadata."
+
+[portal.policies.config.classification.rules]
+0 = "Klassificera"
+1 = "Tagga metadata"
+
 [portal.policies.config.compliance]
 summary = "Validerar dokument mot regelverksramverk innan de lämnar systemet."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Minsta konfidens"
 2 = "Namnge"
 3 = "Normalisera"
 
+[portal.policies.config.purview]
+label = "Tillämpa en känslighetsetikett från Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview-klientorganisation"
+labelId = "Etikett-ID"
+labelIdHelp = "Etikettens GUID från Purview-portalen. När en etikett tillämpas skrivs dess metadata till PDF:en; den kan inte kryptera, vilket kräver Microsoft-klienten."
+labelName = "Etikettnamn (valfritt)"
+labelNameHelp = "Sparas tillsammans med ID så att personer och verktyg kan känna igen etiketten."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview skiljer en etikett som en policy tillämpade från en som en person valde."
+label = "Hur etiketten sparas"
+privileged = "Som vald av en person"
+standard = "Som tillämpad automatiskt"
+
+[portal.policies.config.purviewRead]
+label = "Läs en Microsoft Purview-etikett"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview-klientorganisation"
+connectionHelp = "Läser etiketten som dokumentet redan har, så att senare steg kan agera på den."
+
 [portal.policies.config.retention]
 summary = "Tillämpar hur länge dokument behålls, när de arkiveras och när de tas bort."
 
@@ -7438,6 +8064,7 @@ title = "Ingen aktivitet än"
 [portal.policies.endpoints]
 addWatermark = "Vattenstämpel"
 autoRedact = "Maskera PII"
+classifyAndLabel = "Klassificera"
 compressPdf = "Komprimera"
 flatten = "Platta ut"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Dina policyer sparas och visas när anslutningen har återställt
 retry = "Försök igen"
 title = "Backend inte tillgänglig"
 
+[portal.policies.operations]
+change = "Ändra vad det här steget gör"
+noResults = "Inget steg matchar det. Prova ett produktnamn eller \"skanna\", \"notifiera\", \"bifoga\"."
+searchPlaceholder = "Sök steg – prova \"skanna\", \"bifoga\" eller ett produktnamn"
+
+[portal.policies.operations.bodyMode]
+binary = "Råa filbytes"
+json = "Inuti en JSON-payload"
+multipart = "Som en filuppladdning (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Din egen ClamAV-server kontrollerar dokumentet; ingenting lämnar ditt nätverk."
+label = "Skanna efter virus (egenhostad)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Avvisar dokument som innehåller makron, körbara filer, skript eller inbäddade objekt."
+label = "Blockera aktivt innehåll"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive kontrollerar dokumentet och körningen stoppas om det inte är rent."
+label = "Skanna efter virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Arkiverar det bearbetade dokumentet på en sida."
+label = "Bifoga till en Confluence-sida"
+
+[portal.policies.operations.consignoSubmit]
+description = "Skickar dokumentet till ConsignO Cloud för signering."
+label = "Skicka för signatur (ConsignO)"
+note = "Skickar dokumentet. Hämtning av den signerade kopian stöds inte ännu, eftersom ett steg inte kan skicka ett resultat till ett senare steg."
+
+[portal.policies.operations.customApiCall]
+description = "Skapa anropet själv: sökväg, metod, body och svarshantering."
+label = "Anropa ett anpassat API"
+
+[portal.policies.operations.discordNotify]
+description = "Meddelar en kanal att policyn hanterade ett dokument."
+label = "Publicera ett meddelande på Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Registrerar vad policyn gjorde som ett sökbart dokument."
+label = "Indexera en granskningshändelse i Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart passar uppladdnings-API:er; JSON passar API:er som vill ha filen i en payload; binary skickar de råa byten."
+label = "Hur dokumentet ska skickas"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "En JSON-body som skickas som den är. {{document.base64}} innehåller filen; {{document.*}} och {{run.*}} fylls i per dokument."
+label = "JSON-body"
+
+[portal.policies.operations.fields.connection]
+label = "Konto"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun-domän"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Formulärfältet som API:et förväntar sig dokumentet i."
+label = "Filfältsnamn"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Från"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Ett JSON-objekt med par av header-namn/värde. Anslutningens inloggningsuppgift läggs till åt dig."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ärendenyckel"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Skickas som meddelandets body. {{document.*}} och {{run.*}} fylls i per dokument."
+label = "Meddelande"
+
+[portal.policies.operations.fields.method]
+label = "Metod"
+
+[portal.policies.operations.fields.pageId]
+label = "Sid-ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Läggs till efter anslutningens bas-URL. Den kan aldrig nå en annan värd."
+label = "Sökväg"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Var i enheten den ska skrivas. {{document.filename}} fylls i per dokument."
+label = "Destinationssökväg"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Rapport lämnar dokumentet orört. Ersätt byter ut det mot det som kommer tillbaka."
+label = "Vad som ska göras med svaret"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Signerarens e-post"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Ämne"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio analyserar den här texten. Använd {{document.title}} eller klistra in texten du vill kontrollera."
+label = "Text att kontrollera"
+
+[portal.policies.operations.fields.to]
+label = "Till"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud-användarnamn"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Meddelar ett utrymme att policyn hanterade ett dokument."
+label = "Publicera ett meddelande på Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Arkiverar det bearbetade dokumentet på ett ärende."
+label = "Bifoga till ett Jira-ärende"
+
+[portal.policies.operations.mailgunEmail]
+description = "Skickar det bearbetade dokumentet som en bilaga."
+label = "Skicka dokumentet via e-post (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Skriver det bearbetade dokumentet till en mapp."
+label = "Ladda upp till Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Din egen Presidio-server rapporterar de personuppgifter den hittar."
+label = "Identifiera personuppgifter"
+note = "Presidio läser text, inte filer. Ge den texten du vill kontrollera — själva dokumentet laddas inte upp."
+
+[portal.policies.operations.responseMode]
+replace = "Ersätt dokumentet med svaret"
+report = "Behåll dokumentet, registrera svaret"
+
+[portal.policies.operations.sendgridEmail]
+description = "Skickar det bearbetade dokumentet som en bilaga."
+label = "Skicka dokumentet via e-post (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Meddelar en kanal att policyn hanterade ett dokument."
+label = "Publicera ett meddelande på Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Registrerar vad policyn gjorde där dina revisorer redan tittar."
+label = "Skicka en granskningshändelse till Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Registrerar vad policyn gjorde till en HTTP-insamlare."
+label = "Skicka en granskningshändelse till Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Meddelar en kanal att policyn hanterade ett dokument."
+label = "Publicera ett meddelande på Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Skickar själva dokumentet till en URL som du väljer."
+label = "Posta dokumentet till en webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Skickar körningens detaljer till din automatisering."
+label = "Utlös ett Zap- eller Make-scenario"
+
 [portal.policies.stats]
 activeFor = "Aktiv"
 dataProcessed = "Data bearbetad"
@@ -7473,6 +8277,13 @@ label = "Dokument tillämpade"
 description = "Konfigurerade men körs inte"
 label = "Pausade"
 
+[portal.policies.table]
+appliesTo = "Gäller för"
+docs = "Dokument tillämpade"
+enforces = "Tvingar igenom"
+policy = "Policy"
+status = "Status"
+
 [portal.policies.wizard.actions]
 back = "Tillbaka"
 cancel = "Avbryt"
@@ -7480,6 +8291,10 @@ continue = "Fortsätt"
 enablePolicy = "Aktivera policy"
 saveChanges = "Spara ändringar"
 
+[portal.policies.wizard.capability.classify]
+desc = "Identifierar dokumentets typ utifrån ditt teams etiketter och taggar det, så att det arkiveras och söks efter kategori."
+label = "Klassificera dokumentet"
+
 [portal.policies.wizard.capability.compress]
 desc = "Komprimerar dokumentet till en mindre filstorlek."
 label = "Minska filstorlek"
@@ -7500,10 +8315,18 @@ label = "Maskera känslig information"
 desc = "Tar bort dolt JavaScript så att inget kan köras automatiskt när dokumentet öppnas."
 label = "Ta bort aktivt innehåll"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Bevisar att dokumentet fanns i exakt denna form vid en viss tidpunkt, med hjälp av en oberoende tidsstämpelutfärdare. Endast en hash skickas – dokumentet lämnar aldrig din server."
+label = "Lägg till en betrodd tidsstämpel"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Stämplar en synlig markering (t.ex. ”Konfidentiellt”) över varje sida."
 label = "Lägg till en vattenstämpel"
 
+[portal.policies.wizard.classification]
+description = "Varje uppladdat dokument klassificeras mot de inbyggda etiketterna och taggas med de typer som passar. Etikettuppsättningen delas i hela ditt team."
+labelsHeading = "Klassificeringsetiketter"
+
 [portal.policies.wizard.errors]
 noTools = "Aktivera minst ett verktyg i arbetsflödet först."
 saveFailed = "Det gick inte att spara policyn. Försök igen."
@@ -7548,73 +8371,118 @@ setUp = "Konfigurera policy för {{category}}"
 [portal.policies.wizard.workflow]
 description = "Välj vad denna policy gör med varje dokument den bearbetar."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktiva"
-noRule = "Ingen regel tillämpas än"
-subtitle = "Stående automatiseringar som varje dokument passerar genom, oavsett vilken pipeline som hanterar det."
-title = "Vad som körs på dina PDF:er"
-
 [portal.policySummary.action]
-comingSoon = "Uppgradera till Enterprise"
-configure = "Konfigurera"
 setUp = "Konfigurera"
 
-[portal.policySummary.column]
-activeRule = "Aktiv regel"
-policy = "Policy"
-status = "Status"
+[portal.processorFlow]
+footnote = "Antal avser de senaste 24 timmarna. Flödeshastigheten är illustrativ."
+liveBadge = "Live"
+stats = "{{connected}} anslutna · {{processed}} PDF-dokument bearbetade"
+title = "PDF-processor"
 
-[portal.policySummary.empty]
-description = "När policyer har konfigurerats visas kategorierna här."
-title = "Inga policyer än"
+[portal.processorFlow.lens]
+ariaLabel = "Visningsläge"
+flow = "Flöde"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktiv"
-off = "Av"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 h"
+failed = "Misslyckades"
+heading = "Resultat"
+success = "Levererat"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktiva"
+count = "{{n}} · 24 h"
+heading = "Policies"
+setUp = "Konfigurera"
 soon = "Snart"
 
-[portal.processingStatus]
-managePlan = "Hantera plan"
-volumeSuffix = "PDF:er bearbetade · senaste 30 dagarna"
+[portal.processorFlow.sankey]
+waist = "Policies · {{n}} aktiva"
+
+[portal.processorFlow.sankey.empty]
+description = "Anslut en källa och slå på en policy för att se dokument flöda genom processorn."
+title = "Inget flöde ännu"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Anslut"
+editor = "Stirling PDF Editor"
+heading = "Källor"
+perDay = "{{n}} / 24 h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "E-postintag"
 
 [portal.procurement]
-reset = "Återställ inköp (demo)"
 subtitle = "Få ditt team utvärderat, kontrakterat och ombordat. Varje dokument på ett ställe."
 title = "Inköp"
 
-[portal.procurement.action]
-download = "Ladda ner"
-pay = "Betala nu"
-request = "Begär"
-sign = "Granska och signera"
-upload = "Ladda upp"
-
 [portal.procurement.agreement]
 agreeCta = "Godkänn och prenumerera"
+confidential = "Konfidentiellt"
 confirm = "Jag har läst och godkänner Stirling Enterprise Agreement."
-eyebrow = "Avtal"
-intro = "Ett samlat avtal täcker din affär: Master Service Agreement, beställningsformulär, EULA och databehandlingsavtal. Granska det och godkänn sedan för att acceptera offerten som en bindande prenumeration."
-title = "Granska ditt företagsavtal"
+docName = "Stirling Enterprise-avtal"
+docSub = "MSA, Order Form, EULA och DPA, samlat för en signatur."
+download = "Ladda ner"
+downloadDraftError = "Kunde inte generera avtalets PDF – dokumentrenderaren är inte tillgänglig. Försök igen snart eller kontakta supporten."
+downloadError = "Kunde inte ladda ner det signerade avtalet. Försök igen."
+legalName = "Juridiskt enhetsnamn"
+legalNamePlaceholder = "Den juridiska enhet som ska signera"
+loadError = "Kunde inte läsa in avtalet. Försök igen."
+loading = "Läser in avtalet..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Begär ändringar"
+scrollHint = "Rulla för att granska"
+signatory = "Signerarens namn"
+signatoryPlaceholder = "Fullständigt namn"
+signatoryTitle = "Signerarens titel"
+signatoryTitlePlaceholder = "t.ex. chefsjurist"
+signError = "Kunde inte registrera din signatur. Försök igen."
 
 [portal.procurement.builder]
 addons = "Tillägg"
+addressLine1 = "Adressrad 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adressrad 2"
+addressLine2Placeholder = "Svit, våning, byggnad"
 back = "Tillbaka"
 businessName = "Företagsnamn"
 businessNamePlaceholder = "Ditt företag"
+city = "Ort"
+cityPlaceholder = "San Francisco"
+completeRequired = "Fyll i de obligatoriska fälten (markerade med *) med en giltig e-postadress innan offerten genereras."
+contactEmail = "Kontakt-e-post"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Kontaktnamn"
+contactNamePlaceholder = "Jane Doe"
 continue = "Fortsätt"
-country = "Land"
-countryEuro = "Eurozonen (EUR €)"
-countryUK = "Storbritannien (GBP £)"
-countryUS = "USA (USD $)"
+done = "Klart"
 eula = "Jag har läst och godkänner Stirling Enterprise EULA. Den styr avtalet som genereras från denna offert."
 generate = "Generera offert"
-included = "Ingår"
 indemnification = "IP-skadeslöshet"
 indemnificationSub = "Vi försvarar kvalificerande IP-anspråk enligt EULA"
-offlineLicense = "Offline-/air-gapped-licens"
-offlineLicenseSub = "En nedladdningsbar licensfil för en air-gapped egenhostad instans"
+paperEyebrow = "Enterprise-offert"
+paperFor = "Förberedd för"
+pdfSize = "PDF-storlek"
+poNumber = "PO-nummer"
+poNumberPlaceholder = "Valfritt"
+postalCode = "Postnummer"
+postalCodePlaceholder = "94105"
+posture = "Styrning"
+posture_count = "~{{count}} policies"
+posture_essentials = "Grundläggande"
+posture_essentialsSub = "Klassificering + delning — standardinställningarna"
+posture_governed = "Styrd"
+posture_governedSub = "Lägger till säkerhet och routning"
+posture_regulated = "Reglerad"
+posture_regulatedSub = "Varje kategori — efterlevnad, lagring, inmatning"
 qbr = "Kvartalsvisa affärsgenomgångar"
 qbrSub = "Din SE går igenom användning och roadmap varje kvartal"
+region = "Delstat / region"
+regionPlaceholder = "Kalifornien"
 running = "{{annual}} / år · {{years}} år {{tcv}}"
 s1Sub = "Ditt team och de PDF:er du förväntar dig att köra varje år."
 s1Title = "Hur mycket kommer du att bearbeta?"
@@ -7623,6 +8491,12 @@ s2Title = "Åtagande och service"
 s3Sub = "För offerten och avtalet den genererar."
 s3Title = "Dina uppgifter"
 serviceLevel = "Servicenivå"
+size_compact = "Kompakt"
+size_compactSub = "Mestadels text, under 1 MB"
+size_heavy = "Tung"
+size_heavySub = "Skannad eller bildtung, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "Blandad text och bilder, 1 till 5 MB"
 slDedicated = "Dedikerad"
 slDedicatedSub = "4 arbetstimmar · dedikerad kontoansvarig · +30%"
 slPriority = "Prioriterad"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Samma arbetsdag · namngiven CSM · +15%"
 slStandard = "Standard"
 slStandardSub = "Nästa arbetsdag · delad CSM · ingår"
 stepOf = "Steg {{n}} av {{total}}"
+taxId = "VAT / skatte-ID"
+taxIdPlaceholder = "Valfritt"
 term = "Period"
 termDiscount = "{{pct}}% rabatt för flerårigt åtagande tillämpad"
 title = "Bygg din offert"
@@ -7637,6 +8513,7 @@ training = "Onboarding och utbildning"
 trainingSub = "Livesessioner för att få igång ditt team"
 users = "Totalt antal användare"
 usersPlaceholder = "t.ex. 250"
+viewEula = "Läs den"
 volEstimated = "Uppskattat från {{count}} användare (~2 000 PDF:er vardera, inklusive automatisering). Redigera om du vet bättre."
 volManual = "Använder din siffra. Uppskatta om från teamstorleken när som helst."
 volNoUsers = "Osäker? Ange din teamstorlek så uppskattar vi det."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "t.ex. 1 000 000"
 years_one = "{{count}} år"
 years_other = "{{count}} år"
 
-[portal.procurement.docs]
-count_one = "{{count}} dok"
-count_other = "{{count}} dok"
-done = "Klart"
-here = "Du är här"
-hide = "Dölj"
-optional = "Valfritt"
-paidAddon = "Betalt tillägg"
-show = "Visa"
-subtitle = "Allt du behöver vid varje steg på resan, lyfts fram när affären går vidare."
-supportingSubtitle = "SOC 2, säkerhetsgranskningar, skatteformulär och mer, redo när ditt säkerhets- eller inköpsteam frågar. Vissa har en engångsavgift."
-supportingTitle = "Stöd för din utvärdering"
+[portal.procurement.documents]
+agreement = "Enterprise-avtal"
+agreementSub = "MSA, Order Form och DPA i en signatur."
+download = "Ladda ner"
+eula = "EULA och kommersiella villkor"
+eulaSub = "Programvaran och kommersiella villkor för självbetjäning."
+invoice = "Faktura"
+invoiceSub = "Din första prenumerationsfaktura."
+laterInvoice = "Tillgänglig när du har accepterat"
+laterQuote = "Tillgänglig när din offert har utfärdats"
+quote = "Offert"
+quoteSub = "Din specificerade Enterprise-offert."
+sla = "SLA-bilaga"
+slaSub = "Supportnivåer och svarsmål."
+subprocessors = "Underbiträden"
+subprocessorsSub = "Tredje parter som behandlar data för din räkning."
+subtitle = "Dina avtalsdokument, tillgängliga när som helst."
 title = "Dokument"
-upcoming = "Kommande"
+view = "Visa"
 
 [portal.procurement.error]
 title = "Något gick fel"
 
 [portal.procurement.hero]
-company = "Din Enterprise-affär"
+barAria = "Steg {{current}} av {{total}}"
 ctaAgreement = "Granska och signera avtal"
-ctaLive = "Du är live"
-ctaPayment = "Lägg till betalning"
+ctaExploring = "Konfigurera din testperiod"
 ctaQuote = "Granska din offert"
+ctaReviewQuote = "Granska offert"
 ctaTrial = "Bygg din offert"
+documents = "Dokument"
 eyebrow = "Enterprise-inköp"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Bjud in teammedlemmar"
-keyDocs = "Viktiga dokument"
-nextStep = "Nästa steg: {{action}}"
-notStarted = "Inte startad"
+licenseKey = "Licensnyckel"
+liveSub = "Din organisation är provisionerad och din licens är aktiv."
+liveTitle = "Du är live på Stirling Enterprise"
+next = "Nästa: {{stage}}"
 open = "Öppna inköp"
 scheduleCall = "Boka ett samtal"
-setup1Sub = "Bjud in dina teammedlemmar"
-setup1Title = "Distribuera PDF Editor"
-setup2Sub = "Aktivera bearbetning över redigerare och andra källor"
-setup2Title = "Anslut PDF Processor"
-setup3Sub = "Aktivera säkerhet, efterlevnad, routing eller lagring när du behöver dem"
-setup3Title = "Lägg till rekommenderade policyer"
+sentenceAgreement = "granska och signera avtalet"
+sentenceLive = "provisionering och utrullning"
+sentencePayment = "inköpsorder och betalning"
+sentenceQuote = "granska och acceptera din offert"
+sentenceTrial = "konfigurera din testarbetsyta"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} dag kvar"
 daysLeft_other = "{{count}} dagar kvar"
-engineerLabel = "Din lösningsingenjör"
-eyebrow = "Din utrullning"
-live = "Du är live på Stirling Enterprise"
-nextStep = "Nästa steg: {{action}}"
-subtitle = "Din lösningsingenjör är med i varje steg. En nästa åtgärd i taget; hela checklistan finns nedan."
-title = "Från testperiod till live, en guidad väg"
-trialTitle = "Enterprise-testperiod"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "En signatur täcker MSA, beställningsformulär, EULA och DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Det gick inte att generera offline-licensfilen just nu — för
 downloadOffline = "Ladda ner offline-licens (.lic)"
 hint = "Klistra in den här nyckeln i en egenhostad instans för att aktivera den, eller spara den för dina register. Förvara den säkert."
 label = "Din licensnyckel"
+subtitle = "Aktivera en egenhostad instans med den här nyckeln, eller spara den för dina register."
+title = "Din licensnyckel"
+trialFileHint = "Detta är din testlicensfil. När ditt avtal är på plats kan du komma tillbaka och ladda ner den igen — till skillnad från licensnyckeln online uppdateras .lic-filen inte av sig själv."
 
 [portal.procurement.link]
 cta = "Länka konto"
@@ -7739,65 +8619,62 @@ description = "Din prenumeration är aktiv och din licens är utfärdad. Ditt te
 eyebrow = "Live"
 title = "Du är live på Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Testnycklar, offerter med bunden volym, avtalet med en signatur, betalning och din dokumentliggare finns alla här när du startar en Enterprise-utvärdering."
-eyebrow = "Endast Enterprise"
-talkToSales = "Prata med försäljning"
-title = "Inköpsspåret öppnas med Enterprise"
-
 [portal.procurement.milestone]
-accept = "Acceptera och fortsätt"
-description = "Ladda ner PDF:en för att dela den med ditt team, kom tillbaka för att acceptera när du är redo, eller gör ändringar."
-download = "Ladda ner PDF"
 downloadError = "Det gick inte att ladda ner offert-PDF:en just nu — försök igen om en stund."
-edit = "Redigera offert"
-eyebrow = "Offert {{number}}"
-perYear = " / år"
-preparedFor = "Förberedd för {{company}}"
-tcv = "{{value}} totalt kontraktsvärde"
-title = "Din offert är klar"
-
-[portal.procurement.modal]
-cancel = "Avbryt"
-chooseFile = "Välj fil"
-close = "Stäng"
-downloadBody = "Din nedladdning börjar inom kort."
-downloadCta = "Ladda ner"
-downloadTitle = "Ladda ner"
-noFile = "Ingen fil vald"
-payBody = "Betala ditt bundna avtal med kort eller banköverföring via Stripe. Din arbetsyta provisioneras så snart betalningen är klar."
-payCta = "Fortsätt till Stripe"
-payTitle = "Bekräfta betalning"
-requestBodyFree = "Vi genererar detta på begäran. Bekräfta så skickar din lösningsingenjör det inom kort."
-requestBodyPaid = "Detta är ett betalt tillägg. Bekräfta så avgränsar din lösningsingenjör det och skickar dokumenten."
-requestCta = "Begär"
-requestTitle = "Begär detta dokument"
-signBody = "Öppnar Stirling Enterprise Agreement för e-signatur: en signatur täcker MSA, beställningsformulär, EULA och DPA. Vi motsignerar automatiskt och du går vidare till betalning."
-signCta = "Öppna för signatur"
-signTitle = "Granska och signera ditt avtal"
-uploadBody = "Skicka oss din inköpsorder så fakturerar vi mot den enligt dina villkor. Dra in PDF:en eller välj en fil nedan."
-uploadCta = "Ladda upp inköpsorder"
-uploadTitle = "Ladda upp din inköpsorder"
 
 [portal.procurement.payment]
 description = "Din offert är accepterad och din licens är redan aktiv — ditt team kan börja direkt. Betala den första fakturan när du är redo; du kan betala eller ladda ner den här, ingen e-post behövs."
+downloadAgreement = "Ladda ner signerat avtal"
 downloadInvoice = "Ladda ner faktura"
-simulate = "Simulera mottagen betalning (demo)"
+eyebrow = "Betalning"
 title = "Prenumeration skapad"
 viewInvoice = "Visa och betala faktura"
 
+[portal.procurement.review]
+acceptCta = "Acceptera offert"
+annual = "Årsavgift (år 1)"
+downloadCta = "Ladda ner offert"
+poNumber = "Inköpsorder: {{po}}"
+renewal = "Förnyas till {{amount}}/år efter perioden (+{{pct}} % KPI)"
+tcv = "{{years}}-årsperiod, betald i sin helhet i förskott: {{tcv}}"
+validUntil = "Giltig till {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Det gick inte att läsa in schemaläggaren."
 fallbackLink = "Öppna schemaläggning i en ny flik"
+loading = "Läser in schemaläggaren..."
 subtitle = "Din lösningsingenjör går igenom utrullningen med ditt team. Välj en tid som passar dig."
 title = "Boka ett samtal"
 
-[portal.procurement.status]
-action = "Åtgärd krävs"
-available = "Tillgänglig"
-complete = "Slutförd"
-pending = "Väntar"
-request = "På begäran"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Isolerad, ingen utgående trafik"
+back = "Tillbaka"
+businessName = "Företagsnamn"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Hanterad, snabbast start"
+continue = "Fortsätt"
+deployment = "Var ska den distribueras?"
+eula = "Jag godkänner Stirling EULA och kommersiella villkor."
+fullName = "Fullständigt namn"
+fullNamePlaceholder = "Ditt namn"
+invites = "Bjud in teammedlemmar · valfritt"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Boka ett samtal"
+seats = "Personer som testar"
+seatsPlaceholder = "t.ex. 15"
+selfhost = "Egenhostad"
+selfhostSub = "Docker eller Kubernetes"
+start = "Starta testperiod"
+stepOf = "Steg {{n}} av {{total}}"
+subtitle = "Gratis i 14 dagar, inget kort krävs."
+subtitleDetails = "Några uppgifter för din offert och ditt avtal."
+talkFirst = "Vill du prata först?"
+title = "Konfigurera din testperiod"
+viewEula = "Läs den"
+workEmail = "Arbets-e-post"
+workEmailPlaceholder = "du@företag.com"
 
 [portal.procurement.trial]
 body = "Förlängning lägger till 7 dagar och meddelar din lösningsingenjör."
@@ -7808,20 +8685,6 @@ maxed = "Maximalt utnyttjad"
 subtitle = "Din kostnadsfria testperiod pågår till {{date}}. Inget kort krävs."
 title = "Enterprise-testperiod"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Prissättning för bunden volym, organisationsomfattande SSO + SCIM + RBAC, 90 dagars oföränderlig granskning och en dedikerad SE."
-homeCta = "Starta testperiod →"
-homeHeadline = "Bearbeta miljontals PDF:er."
-
-[portal.recentActivity]
-title = "Senaste aktivitet"
-viewAll = "Visa alla"
-
-[portal.recentActivity.empty]
-description = "Pipeline-körningar, distributioner och agenthändelser visas här."
-title = "Inget här än"
-
 [portal.search]
 ariaLabel = "Sök"
 placeholder = "Sök i Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "Kontolänk"
 
-[portal.shell.header]
-accountFallback = "Konto"
-accountMenu = "Kontomeny"
-darkMode = "Mörkt läge"
-lightMode = "Ljust läge"
-search = "Sök"
-searchPlaceholder = "Sök…"
-signOut = "Logga ut"
-switchToDark = "Byt till mörkt tema"
-switchToLight = "Byt till ljust tema"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} dok"
 linkAccount = "Länka Stirling-konto"
-planEditor = "Editor-plan"
-planEnterprise = "Enterprise-plan"
-planProcessor = "Processor-plan"
 primaryNav = "Primär navigering"
 switchApp = "Byt app"
 
+[portal.shell.topbar]
+closeNav = "Stäng navigering"
+openNav = "Öppna navigering"
+search = "Sök"
+
 [portal.sources]
 subtitle = "Återanvändbara indataanslutningar som matar dokument till Stirling. Konfigurera en anslutning en gång och referera sedan till den från valfritt antal policyer. Klicka på en rad för dess konfiguration och vilka policyer som använder den."
 title = "Källor"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Anslut källa"
 
+[portal.sources.builder]
+back = "Tillbaka till källor"
+backToTypes = "Alla källtyper"
+cancel = "Avbryt"
+chooseHint = "Välj var dokument kommer ifrån. Gråmarkerade kopplingar är på väg."
+comingSoon = "Kommer snart"
+comingSoonHeading = "Kommer snart"
+create = "Skapa källa"
+createTitle = "Anslut en källa"
+delete = "Ta bort"
+editTitle = "Redigera källa"
+enabled = "Aktiverad"
+save = "Spara ändringar"
+
+[portal.sources.builder.folderAccess]
+description = "Mappautomatiseringar kan bara använda mappar som en administratör har tillåtit. Lägg till den under inställningarna för mappåtkomst och försök sedan igen."
+openSettings = "Inställningar för mappåtkomst"
+title = "Den här mappen är inte tillåten"
+
 [portal.sources.delete]
 body = "Ta bort \"{{name}}\"? Detta kan inte ångras. Policyer som refererar till den behöver uppdateras."
 cancel = "Avbryt"
 confirm = "Ta bort"
 title = "Ta bort källa?"
 
-[portal.sources.detail]
-closeAriaLabel = "Stäng detaljvy"
-delete = "Ta bort källa"
-docs24h = "Senaste 24 h"
-docs30d = "Senaste 30 dagarna"
-docsTotal = "Totalt sedda"
-docsTrend = "Dokument under de senaste 30 dagarna"
-documents = "Dokument"
-edit = "Redigera"
-notReferenced = "Refereras inte av någon policy, så den är säker att ta bort."
-pause = "Pausa"
-resume = "Återuppta"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Används av"
-
 [portal.sources.empty]
 description = "Anslut en mapp (och snart molnlagring) så att dina policyer har någonstans att hämta dokument från."
 title = "Inga källor anslutna än"
@@ -7899,18 +8754,57 @@ inUse = "Används"
 total = "Anslutningar"
 unused = "Oanvända"
 
+[portal.sources.networkFields.connection]
+helperText = "Den lagrade anslutningen med serveradressen och inloggningsuppgifterna. Återanvänds av varje källa som refererar till den."
+label = "Anslutning"
+
+[portal.sources.networkFields.directory]
+helperText = "Mapp på servern att kontrollera, relativt till inloggningshemmet eller delningens rot. Lämna tomt för roten."
+label = "Mapp"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Förbruka tar bort varje fil från servern när varje policy har bearbetat den."
+label = "Läsläge"
+
+[portal.sources.networkFields.mode.options]
+consume = "Förbruka: bearbeta varje fil en gång"
+snapshot = "Ögonblicksbild: läs om mappen vid varje körning"
+
+[portal.sources.networkFields.recursive]
+label = "Mappdjup"
+
+[portal.sources.networkFields.recursive.options]
+all = "Inkludera undermappar"
+top = "Endast översta nivån"
+
 [portal.sources.status]
 active = "Aktiv"
 disabled = "Inaktiverad"
 unused = "Oanvänd"
 
 [portal.sources.table]
+documents = "Dokument"
 source = "Källa"
 status = "Status"
 usedBy = "Policyer"
 
+[portal.sources.types.box]
+description = "Hämta dokument från Box-mappar som ditt team redan delar."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Hämta dokument från en delad Dropbox-mapp."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Dokument som ditt team har bearbetat i editorn, över policy- och AI-körningar."
 label = "Editor"
+noPolicies = "Inga policies har körts från editorn ännu."
+
+[portal.sources.types.email]
+description = "Gör bilagor som skickas till en dedikerad postlåda till dokument."
+label = "E-postinkorg"
 
 [portal.sources.types.folder]
 description = "Bevaka en katalog på servern för nya dokument."
@@ -7943,25 +8837,80 @@ label = "Mappdjup"
 all = "Inkludera undermappar"
 top = "Endast toppnivå"
 
+[portal.sources.types.ftp]
+description = "Kontrollera regelbundet en FTP- eller FTPS-servermapp för nya dokument."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Hämta dokument från delade Google Drive-mappar."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Bevaka en SMB-nätverksresurs för nya dokument."
+label = "Nätverksenhet"
+
+[portal.sources.types.onedrive]
+description = "Bevaka OneDrive-mappar för nya dokument."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Hämta dokument från en Amazon S3- eller S3-kompatibel bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Den lagrade anslutningen som innehåller bucket och inloggningsuppgifter. Återanvänds av varje källa och pipeline-utdata som refererar till den."
+label = "Anslutning"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Förbruka tar bort varje objekt från bucket när varje policy har bearbetat det."
+label = "Läsläge"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Förbruka: bearbeta varje objekt en gång"
+snapshot = "Ögonblicksbild: läs om bucket vid varje körning"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Endast objekt vars nycklar börjar med detta prefix bearbetas."
+label = "Nyckelprefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Kontrollera regelbundet en SFTP-drop-mapp för nya dokument."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Hämta dokument från SharePoint-dokumentbibliotek."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Källa"
 
+[portal.sources.types.webhook]
+createNote = "En leverans-URL och signeringshemlighet genereras när du skapar denna webhook. Avsändare POST:ar dokument till den URL:en och de refererande policies körs vid ankomst."
+description = "Ta emot dokument via signerad HTTP POST från valfritt externt system."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Leverans-URL"
+secretNote = "Signeringshemligheten visas en gång, när webhooken skapas. Skapa om källan för att rulla den."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopiera"
+done = "Klart"
+secret = "Signeringshemlighet"
+secretHelp = "Signera varje leverans råa body med den här nyckeln (HMAC-SHA256) och skicka den som X-Stirling-Signature-header."
+secretWarning = "Kopiera signeringshemligheten nu. För din säkerhet visas den bara en gång och kan inte hämtas senare."
+title = "Webhook skapad"
+url = "Leverans-URL"
+usage = "POST:a varje dokument som rå request body till leverans-URL:en med en binär content type (application/pdf eller application/octet-stream). Refererande policies körs automatiskt vid ankomst."
+
 [portal.sources.wizard]
-back = "Tillbaka"
-cancel = "Avbryt"
-continue = "Fortsätt"
-editTitle = "Redigera källa"
 name = "Namn"
 namePlaceholder = "t.ex. skadeanmälningar"
-save = "Spara ändringar"
-subtitle = "Steg {{current}} av {{total}} · {{label}}"
-title = "Anslut en källa"
 type = "Typ"
 
-[portal.sources.wizard.steps]
-chooseType = "Välj typ"
-configure = "Konfigurera"
-review = "Granska och anslut"
+[portal.stepModal]
+close = "Stäng"
 
 [portal.usage]
 managePayment = "Hantera betalning"
@@ -8021,16 +8970,9 @@ summary = "Äger ett team — hanterar dess medlemmars resurser och delade konfi
 2 = "Portalåtkomst via standardpolicyn"
 3 = "Allt som medlemmen kan göra"
 
-[portal.welcome]
-ariaLabel = "Välkommen till Stirling PDF"
-badge = "Open-source"
-installEditor = "Installera Editor"
-inviteTeammates = "Bjud in teammedlemmar"
-openInBrowser = "Öppna i webbläsare"
-perks = "Gratis för alltid · Kan egenhostas"
-subtitle = "Världens säkraste PDF Editor är gratis för team av alla storlekar. Inkluderar 60+ PDF-åtgärder och SSO."
-title = "Välkommen till"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Obegränsat"
 
 [printFile]
 title = "Skriv ut fil"
@@ -8613,6 +9555,14 @@ text = "Rotera dina PDF‑sidor medurs eller moturs i steg om 90 grader. Alla si
 [rotate.tooltip.header]
 title = "Översikt över rotationsinställningar"
 
+[ruler]
+clearAll = "Rensa alla"
+hideAllLabels = "Dölj alla etiketter"
+hideSmallLabels = "Dölj små etiketter"
+physicalValues = "Fysisk"
+scaled = "Skalad"
+showAllLabels = "Visa alla etiketter"
+
 [sanitize]
 desc = "Ta bort potentiellt skadliga element från PDF-filer."
 sanitizationResults = "Saneringsresultat"
@@ -8654,31 +9604,45 @@ label = "Ta bort XMP-metadata"
 [sanitize.steps]
 settings = "Inställningar"
 
-[sanitizePdf]
-tags = "rengöra,säkra,säker,ta bort hot"
-
 [sanitizePDF]
 title = "Sanera PDF"
 
+[sanitizePdf]
+tags = "rengöra,säkra,säker,ta bort hot"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Justera sidskala"
 
+[scaleSettings]
+activeScale = "Aktiv skala"
+apply = "Tillämpa skala"
+applyCalibration = "Tillämpa kalibrering"
+calculatedScale = "Beräknad skala"
+calibrate = "Kalibrera"
+calibrating = "Kalibrerar"
+calibrationDistanceRequired = "Ange ett verkligt avstånd större än noll"
+calibrationInvalid = "Det gick inte att beräkna skalan från denna mätning"
+calibrationPaperDistance = "Uppmätt sidavstånd: {{distance}}"
+calibrationTitle = "Kalibrera skala"
+calibrationTooltip = "Mät ett känt avstånd för att beräkna skalan automatiskt"
+customScale = "Anpassad skala"
+noneSet = "Ingen anpassad skala angiven"
+presets = "Förinställda skalor"
+ratio = "Skalförhållande"
+ratioHelp = "Förhållande: 1 sidenhet = X verkliga enheter"
+ratioPlaceholder = "t.ex. 100"
+ratioPositive = "Förhållandet måste vara större än noll"
+ratioRequired = "Förhållande krävs"
+realDistance = "Verkligt avstånd"
+realDistancePlaceholder = "t.ex. 5"
+reset = "Återställ till standardvärden"
+unit = "Enhet"
+unitInvalid = "Ogiltig enhet: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Vinkeltröskel:"
-10 = "Ställer in storleken på kanten som läggs till och tas bort för att förhindra vita kanter i utdata (standard: 1)."
-2 = "Ställer in den minsta absoluta vinkeln som krävs för att bilden ska roteras (standard: 10)."
-3 = "Tolerans:"
-4 = "Bestämmer intervallet för färgvariation runt den uppskattade bakgrundsfärgen (standard: 30)."
-5 = "Minsta area:"
-6 = "Ställer in minsta areatröskel för ett foto (standard: 10000)."
-7 = "Minsta konturarea:"
-8 = "Ställer in minsta tröskelvärde för konturarea för ett foto"
-9 = "Kantstorlek:"
-
 [scannerImageSplit]
 submit = "Extrahera bildskanningar"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Vad detta gör"
 whatThisDoesDesc = "Hittar och extraherar automatiskt varje foto från en skannad sida eller sammansatt bild—ingen manuell beskärning."
 whenToUse = "När den ska användas"
 
+[ScannerImageSplit.selectText]
+1 = "Vinkeltröskel:"
+10 = "Ställer in storleken på kanten som läggs till och tas bort för att förhindra vita kanter i utdata (standard: 1)."
+2 = "Ställer in den minsta absoluta vinkeln som krävs för att bilden ska roteras (standard: 10)."
+3 = "Tolerans:"
+4 = "Bestämmer intervallet för färgvariation runt den uppskattade bakgrundsfärgen (standard: 30)."
+5 = "Minsta area:"
+6 = "Ställer in minsta areatröskel för ett foto (standard: 10000)."
+7 = "Minsta konturarea:"
+8 = "Ställer in minsta tröskelvärde för konturarea för ett foto"
+9 = "Kantstorlek:"
+
 [search]
 noResults = "Inga resultat hittades"
 placeholder = "Ange sökterm..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Din Stirling-PDF-server är offline och \"{{endpoint}
 [session]
 expired = "Din session har löpt ut. Uppdatera sidan och försök igen."
 
-[sessionManagement.tooltip]
-header = "Hantera signeringssessioner"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Nya deltagare läggs till sist i signeringsordningen"
-bullet2 = "Deltagare kan inte läggas till efter att sessionen har slutförts"
-bullet3 = "Varje deltagare får en avisering när det är deras tur"
-description = "Du kan lägga till fler deltagare i en aktiv session när som helst före slutförandet."
-title = "Lägga till deltagare"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Fullständig slutföring</b>: Alla deltagare har signerat"
-bullet2 = "<b>Delvis slutföring</b>: Vissa deltagare har inte signerat ännu"
-bullet3 = "Osignerade deltagare utesluts från det slutliga dokumentet"
-bullet4 = "När den är slutförd kan du ladda in den signerade PDF:en i aktiva filer"
-description = "Slutförande kombinerar alla signaturer till en enda signerad PDF. Denna åtgärd kan inte ångras."
-title = "Slutförande av session"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Deltagare som redan har signerat kan inte tas bort"
-bullet2 = "Borttagna deltagare får inte längre aviseringar"
-bullet3 = "Signeringsordningen justeras automatiskt"
-description = "Deltagare kan tas bort från sessioner innan de signerar."
-title = "Ta bort deltagare"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Varje signatur tillämpas sekventiellt på PDF:en"
-bullet2 = "Senare undertecknare kan se tidigare signaturer"
-bullet3 = "Kritiskt för godkännandeprocesser och juridisk spårbarhet"
-description = "Den ordning du anger när du skapar sessionen avgör vem som signerar först."
-title = "Signeringsordning"
-
 [settings]
 close = "Stäng"
 
+[settings.ai]
+documents = "Dokument och RAG"
+general = "Allmänt"
+limits = "Gränser och prestanda"
+models = "Modeller och leverantörer"
+title = "AI"
+
 [settings.configuration]
 advanced = "Avancerat"
 database = "Databas"
 endpoints = "Slutpunkter"
 features = "Funktioner"
+folderAccess = "Mappåtkomst"
 mcp = "MCP Server"
 storageSharing = "Fillagring och delning"
 systemSettings = "Systeminställningar"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Standard-PDF-redigerare"
 defaultPdfEditorActive = "Stirling PDF är din standard-PDF-redigerare"
 defaultPdfEditorChecking = "Kontrollerar..."
 defaultPdfEditorInactive = "En annan app är standard"
+defaultPdfEditorRemind = "Påminn mig om att ange som standard"
+defaultPdfEditorRemindDescription = "Visa en banner när Stirling PDF inte är ditt standardprogram för PDF."
 defaultPdfEditorSet = "Redan standard"
 defaultStartupView = "Standardvy vid start"
 defaultStartupViewDescription = "Välj vilken flik som är aktiv i vänstra kolumnen när appen startar"
@@ -8817,9 +9771,18 @@ languageDescription = "Välj visningsspråk"
 logout = "Logga ut"
 setAsDefault = "Ange som standard"
 theme = "Tema"
+themeAccent = "Accentfärg"
+themeAccentCustom = "Anpassad färg"
+themeAccentCustomHint = "Anpassad (standard rekommenderas)"
+themeAccentDark = "Accentfärg för mörkt läge"
+themeAccentDefault = "Standard"
+themeAccentDefaultHint = "Standardtema (rekommenderas)"
+themeAccentDescription = "Knappar, länkar och markeringar följer den, och den tonar appen subtilt. Ljust och mörkt läge har varsin. System använder den som är aktiv."
+themeAccentLight = "Accentfärg för ljust läge"
 themeDark = "Mörkt"
 themeDescription = "Växla mellan ljust och mörkt läge"
 themeLight = "Ljust"
+themeReset = "Återställ temat till standard"
 themeSystem = "System"
 title = "Allmänt"
 user = "Användare"
@@ -8833,6 +9796,12 @@ intro = "Aktivera användarautentisering, teamhantering och arbetsytefunktioner
 learnMore = "Läs mer i dokumentationen"
 title = "För systemadministratörer"
 
+[settings.general.loginLanding]
+description = "Välj vilken app som öppnas när du loggar in på Stirling Cloud."
+editor = "Redigerare"
+processor = "Processor"
+title = "Efter inloggning"
+
 [settings.general.mode]
 fullscreen = "Helskärm"
 sidebar = "Sidopanel"
@@ -9041,6 +10010,11 @@ security = "Säkerhet"
 telegram = "Telegram"
 title = "Säkerhet och autentisering"
 
+[settings.signOut]
+confirm = "Är du säker på att du vill logga ut?"
+submit = "Logga ut"
+title = "Logga ut"
+
 [settings.team]
 title = "Team"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Ladda upp till server"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "klicka här"
+fallback = "Om det inte öppnades automatiskt,"
+opening = "Öppnar Swagger UI i en ny flik..."
 tags = "api,dokumentation,swagger,ändpunkter,utveckling"
 title = "API-dokumentation"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Välj filer i Aktiva filer för att köra detta verktyg"
 singleFileScope = "Gäller endast: {{fileName}}"
 viewerMode = "Byt till filredigeraren för att välja flera filer."
 
+[toolFormat]
+ANY = "valfri fil"
+CBR = "ett serietidningsarkiv (CBR)"
+CBZ = "ett serietidningsarkiv (CBZ)"
+CSV = "en CSV fil"
+EBOOK = "en e-bok"
+EMAIL = "ett e-postmeddelande"
+EXCEL = "ett kalkylblad"
+HTML = "en webbsida"
+IMAGE = "bilder"
+JAVASCRIPT = "en JavaScript fil"
+JSON = "en JSON fil"
+MARKDOWN = "en Markdown fil"
+NONE = "ingen fil"
+PCL = "en PCL utskriftsfil"
+PDF = "en PDF"
+PDF_ENCRYPTED = "en lösenordsskyddad PDF"
+POSTSCRIPT = "en PostScript fil"
+PPT = "en presentation"
+TEXT = "en textfil"
+VIDEO = "en video"
+WORD = "ett Word-dokument"
+XML = "en XML fil"
+XPS = "ett XPS-dokument"
+ZIP = "ett ZIP arkiv"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Tillbaka till alla verktyg"
 collapse = "Fäll ihop panel"
 expand = "Expandera panel"
 goBack = "Gå tillbaka"
+pdfTools = "PDF-verktyg"
 placeholder = "Välj ett verktyg för att komma igång"
 premiumFeature = "Premiumfunktion:"
+searchTools = "Sök verktyg"
 toolsHeader = "Verktyg"
 viewAllTools = "Visa alla verktyg"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Inga verktyg hittades"
 quickAccess = "SNABBÅTKOMST"
 searchPlaceholder = "Sök verktyg..."
 
-[toolPicker.categories]
-advancedTools = "Avancerade verktyg"
-recommendedTools = "Rekommenderade verktyg"
-standardTools = "Standardverktyg"
-
 [toolPicker.subcategories]
 advancedFormatting = "Avancerad formatering"
 automation = "Automatisering"
@@ -9950,16 +10950,31 @@ title = "Användare"
 you = "(du)"
 
 [users.action]
+cancelInvite = "Avbryt inbjudan"
 deleteTeam = "Ta bort team"
 disableMfa = "Återställ MFA"
 move = "Flytta till team"
 reinstate = "Återinsätt"
 remove = "Ta bort från organisationen"
+removeTeam = "Ta bort från team"
 rename = "Byt namn på team"
 resetPw = "Återställ lösenord"
 suspend = "Stäng av"
 unlock = "Lås upp konto"
 
+[users.activity]
+daysAgo = "för {{count}} d sedan"
+hoursAgo = "för {{count}} h sedan"
+justNow = "Nyss"
+minutesAgo = "för {{count}} min sedan"
+monthsAgo_one = "för {{count}} månad sedan"
+monthsAgo_other = "för {{count}} månader sedan"
+never = "Aldrig"
+weeksAgo_one = "för {{count}} vecka sedan"
+weeksAgo_other = "för {{count}} veckor sedan"
+yearsAgo_one = "för {{count}} år sedan"
+yearsAgo_other = "för {{count}} år sedan"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Godkänner policy"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Avbryt inbjudan till {{email}}? De kommer inte att kunna gå med via den aktuella länken."
+cancelInviteTitle = "Avbryt inbjudan"
 deleteTeamBody = "Ta bort teamet {{name}}? Teamet måste vara tomt först - flytta dess medlemmar till ett annat team, och det får inte fortfarande äga några integrationskonfigurationer."
 deleteTeamTitle = "Ta bort team"
 disableMfaBody = "Ta bort MFA-registreringen för {{name}}? De konfigurerar den igen vid nästa inloggning om det krävs."
 disableMfaTitle = "Återställ MFA"
 removeBody = "Ta bort {{name}} permanent från organisationen? Detta kan inte ångras."
+removeTeamBody = "Ta bort {{name}} från teamet? De behåller sitt konto men förlorar åtkomst till teamets resurser."
 removeTitle = "Ta bort medlem"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Användarnamn"
 usernameError = "Användarnamnet måste vara minst 3 tecken"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Inbjuden av {{who}}"
+cancel = "Avbryt"
+count = "{{count}} väntande"
+desc = "Inbjudna personer som inte har gått med än. De upptar en plats tills de accepterar."
+expiresInDays_one = "Upphör om {{count}} dag"
+expiresInDays_other = "Upphör om {{count}} dagar"
+expiresToday = "Upphör idag"
+title = "Väntande inbjudningar"
+
 [users.loadError]
 description = "Något gick fel vid kontakt med backend, eller så har du inte åtkomst. Försök igen."
 title = "Kunde inte läsa in medlemmar"
@@ -10212,9 +11240,11 @@ title = "Bilagor"
 
 [viewer.bookmarks]
 bookmarkTitle = "Bokmärkestitel"
+bookmarkTitleRequired = "Bokmärkestitel krävs"
 closeSidebar = "Stäng sidopanel för bokmärken"
 collapseAll = "Fäll ihop alla bokmärken"
 expandAll = "Expandera alla bokmärken"
+searchPlaceholder = "Sök bokmärken"
 
 [viewer.comments]
 addComment = "Lägg till kommentar"
@@ -10605,30 +11635,6 @@ title = "Vattenstämpeltext"
 image = "Bild"
 text = "Text"
 
-[wetSignature.tooltip]
-header = "Metoder för signaturskapande"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Anpassa pennfärg och tjocklek"
-bullet2 = "Rensa och rita om tills du är nöjd"
-bullet3 = "Fungerar på pekskärmsenheter (surfplattor, telefoner)"
-description = "Skapa en handskriven signatur med musen eller pekskärmen. Bäst för personliga, autentiska signaturer."
-title = "Rita signatur"
-
-[wetSignature.tooltip.type]
-bullet1 = "Välj mellan flera typsnitt"
-bullet2 = "Anpassa textstorlek och färg"
-bullet3 = "Perfekt för standardiserade signaturer"
-description = "Skapa en signatur från skriven text. Snabb och konsekvent, lämplig för affärsdokument."
-title = "Skriv signatur"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Stöder PNG, JPG och andra bildformat"
-bullet2 = "Genomskinliga bakgrunder rekommenderas för bästa resultat"
-bullet3 = "Bilden kommer att skalas för att passa signaturområdet"
-description = "Ladda upp en i förväg skapad signaturbild. Idealiskt om du har en skannad signatur eller företagslogotyp."
-title = "Ladda upp signaturbild"
-
 [workbenchBar]
 activeFiles = "Aktiva filer"
 annotations = "Anteckningar"
@@ -10652,6 +11658,7 @@ redact = "Maskera"
 rotateLeft = "Rotera åt vänster"
 rotateRight = "Rotera åt höger"
 ruler = "Linjal / Mät"
+rulerSettings = "Skalinställningar"
 save = "Spara"
 saveAll = "Spara alla"
 saveAs = "Spara som"
diff --git a/frontend/editor/public/locales/th-TH/translation.toml b/frontend/editor/public/locales/th-TH/translation.toml
index 936411b021..ab05aed852 100644
--- a/frontend/editor/public/locales/th-TH/translation.toml
+++ b/frontend/editor/public/locales/th-TH/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "ไฟล์ที่เลือก"
 font = "ฟอนต์"
 fontSizeTooltip = "ขนาดข้อความหมายเลขหน้าเป็นหน่วยพอยต์ ตัวเลขใหญ่ทำให้ข้อความใหญ่ขึ้น"
 fontTypeTooltip = "ตระกูลฟอนต์สำหรับหมายเลขหน้า เลือกให้เหมาะกับสไตล์เอกสารของคุณ"
-genericSubmit = "ส่ง"
 green = "เขียว"
 help = "ช่วยเหลือ"
-imgPrompt = "เลือกภาพ"
 incorrectPasswordMessage = "รหัสผ่านปัจจุบันไม่ถูกต้อง"
 info = "ข้อมูล"
 invalidUndoData = "ไม่สามารถยกเลิก: ข้อมูลการดำเนินการไม่ถูกต้อง"
@@ -62,7 +60,6 @@ loginAgreementTitle = "ข้อตกลงการเข้าสู่ระ
 logOut = "ออกจากระบบ"
 marginTooltip = "ระยะห่างระหว่างหมายเลขหน้ากับขอบกระดาษ"
 moreOptions = "ตัวเลือกเพิ่มเติม"
-multiPdfPrompt = "เลือก PDF หลายไฟล์ (2 ขึ้นไป)"
 never = "ไม่เคย"
 no = "ไม่"
 noFileSelected = "ยังไม่ได้เลือกไฟล์ โปรดอัปโหลดไฟล์หนึ่งไฟล์"
@@ -80,7 +77,6 @@ pageOrderPrompt = "เรียงลำดับหน้าตามควา
 pages = "หน้า"
 pageSelectionPrompt = "เลือกหน้าตามความต้องการ (ป้อนหมายเลขหน้าแยกด้วยเครื่องหมายจุลภาค เช่น 1,5,6 หรือฟังก์ชัน เช่น 2n+1) :"
 password = "รหัสผ่าน"
-pdfPrompt = "เลือก PDF"
 pin = "ปักหมุดไฟล์ (คงไว้หลังรันเครื่องมือ)"
 pro = "โปร"
 processingComplete = "ไฟล์ของคุณพร้อมแล้ว"
@@ -356,6 +352,7 @@ text = "สิทธิ์เหล่านี้ควบคุมสิ่ง
 title = "เปลี่ยนสิทธิ์"
 
 [addStamp]
+preview = "ดูตัวอย่างตราประทับ"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "ดาวน์โหลดด้วยตนเอง: คลิ
 noLanguages = "ไม่พบภาษา tessdata ในไดเรกทอรีที่กำหนดค่าไว้"
 permissionNotice = "เส้นทาง tessdata ไม่สามารถเขียนได้ การดาวน์โหลดจะถูกเปิดในเบราว์เซอร์ โปรดบันทึกไฟล์ .traineddata ลงในโฟลเดอร์ tessdata ด้วยตนเอง"
 
+[admin.settings.ai.documents]
+description = "กำหนดค่าโมเดล embedding และการตั้งค่าการดึงข้อมูลที่ใช้ตอบคำถามเกี่ยวกับเอกสาร จะนำไปใช้กับ AI engine เมื่อบันทึก"
+title = "เอกสารและ RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "เว้นว่างเพื่อใช้ข้อมูลรับรองสภาพแวดล้อมของ engine เอง ใช้กับการติดตั้งแบบ self-hosted single-engine"
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "บันทึกแล้ว - เว้นว่างเพื่อคง key ปัจจุบันไว้"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL ของ endpoint embeddings ที่เข้ากันได้กับ OpenAI / Ollama เช่น http://ollama:11434/v1 ต้องชี้ไปยัง endpoint ภายในที่เชื่อถือได้ (ไวต่อ SSRF)"
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "ชื่อโมเดล embedding ข้อความอิสระ; คำแนะนำเป็นเพียงแนวทางเท่านั้น"
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "ผู้ให้บริการที่ใช้แปลงข้อความเอกสารเป็น vector embeddings"
+label = "Embedding provider"
+
+[admin.settings.ai.documents.maxSearches]
+description = "จำนวนสูงสุดของการค้นหาแบบดึงข้อมูลที่ agent สามารถเรียกใช้ได้ต่อคำขอ"
+label = "การค้นหาสูงสุด"
+
+[admin.settings.ai.documents.reindexNote]
+body = "การเปลี่ยนโมเดล embedding จะมีผลทันที แต่เอกสารที่จัดทำดัชนีด้วยโมเดลก่อนหน้าต้องจัดทำดัชนีใหม่เพื่อให้การค้นหาส่งคืนผลลัพธ์ที่ถูกต้อง"
+title = "ต้องจัดทำดัชนีใหม่"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "หากคุณเปลี่ยนโมเดล embedding ให้จัดทำดัชนีเอกสารที่มีอยู่ใหม่เพื่อให้การค้นหาใช้โมเดลใหม่"
+
+[admin.settings.ai.documents.topK]
+description = "จำนวนชิ้นส่วนที่เกี่ยวข้องที่สุดที่ดึงมาต่อการค้นหา"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "เชื่อมต่อ Stirling กับ Python AI engine และเลือกความสามารถ AI ที่จะแสดง การเปลี่ยนแปลงจะมีผลเมื่อรีสตาร์ท"
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "เปิดหรือปิดฟีเจอร์ AI แต่ละรายการ ฟีเจอร์ที่ปิดจะถูกซ่อนในแอป"
+title = "ความสามารถ"
+
+[admin.settings.ai.general.enabled]
+description = "สวิตช์หลัก เมื่อปิด จะไม่มีเครื่องมือ AI, agents หรือการเรียก engine ให้ใช้งาน"
+label = "เปิดใช้ AI"
+
+[admin.settings.ai.general.features.chat]
+description = "ผู้ช่วยสนทนาสำหรับทำงานกับ PDFs"
+label = "ผู้ช่วยแชท"
+
+[admin.settings.ai.general.features.classify]
+description = "จัดหมวดหมู่เอกสารโดยอัตโนมัติตามประเภทหรือเนื้อหา"
+label = "การจัดหมวดหมู่เอกสาร"
+
+[admin.settings.ai.general.features.createPdf]
+description = "สร้าง PDF ใหม่ (เช่น จาก HTML) ผ่าน AI agent"
+label = "สร้าง PDF จาก prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "ถามคำถามและรับคำตอบที่อ้างอิงจากเอกสารที่อัปโหลด"
+label = "คำถามเกี่ยวกับเอกสาร"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "ตรวจสอบเอกสารเพื่อหาข้อผิดพลาดทางคณิตศาสตร์และตัวเลข"
+label = "ผู้ตรวจสอบคณิตศาสตร์"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "เพิ่มความคิดเห็นตรวจทานและคำอธิบายประกอบที่เขียนโดย AI ลงใน PDF"
+label = "PDF comment agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "หมดเวลาสำหรับการทำงานของ agent ที่หนักขึ้น เช่น การสร้างเอกสาร"
+label = "หมดเวลาการทำงานนาน (วินาที)"
+
+[admin.settings.ai.general.note]
+body = "AI engine ทำงานเป็นบริการแยกต่างหาก shared secret ของมัน"
+body2 = "ถูกตั้งค่าผ่านตัวแปรสภาพแวดล้อมของ container Provider API keys สามารถป้อนในหน้าเหล่านี้หรือจัดเตรียมเป็นตัวแปรสภาพแวดล้อมของ engine; keys ที่ป้อนที่นี่จะถูกส่งไปยัง engine เมื่อบันทึก"
+title = "เกี่ยวกับ AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "หมดเวลาสำหรับคำตอบแชทแบบสตรีม (ทีละ token)"
+label = "หมดเวลา stream (วินาที)"
+
+[admin.settings.ai.general.test]
+button = "ทดสอบการเชื่อมต่อ"
+failBody = "AI engine ไม่ตอบสนอง ตรวจสอบ URL ว่า engine container กำลังทำงานอยู่ และเปิดใช้ AI แล้ว (ต้องรีสตาร์ทหลังจากเปิดใช้)"
+failTitle = "เข้าถึง AI engine ไม่ได้"
+okBody = "AI engine ตอบสนองต่อการตรวจสอบสถานะ"
+okTitle = "เข้าถึง AI engine ได้"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "หมดเวลาสำหรับคำขอ AI มาตรฐานไปยัง engine"
+label = "หมดเวลาคำขอ (วินาที)"
+
+[admin.settings.ai.general.url]
+description = "URL ภายในของ Python AI engine เช่น http://stirling-pdf-engine:5001"
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "กรอบจำกัดปริมาณงานที่คำขอ AI สามารถทำได้และจำนวนที่ทำงานพร้อมกัน นำไปใช้กับ AI engine เมื่อบันทึก"
+title = "ขีดจำกัดและประสิทธิภาพ"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "กรอบจำกัด: ปฏิเสธคำขอ AI ที่ข้อความที่ดึงออกมายาวเกินค่านี้"
+label = "จำนวนอักขระสูงสุดต่อคำขอ"
+
+[admin.settings.ai.limits.maxPages]
+description = "กรอบจำกัด: ปฏิเสธคำขอ AI ที่เกินจำนวนหน้า PDF นี้"
+label = "จำนวนหน้าสูงสุดต่อคำขอ"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "จำนวนสูงสุดของการเรียกโมเดลที่กำลังดำเนินการพร้อมกันทั่วทั้ง engine"
+label = "การทำงานพร้อมกันสูงสุดของโมเดล"
+
+[admin.settings.ai.models]
+description = "เลือกผู้ให้บริการ LLM และโมเดล smart/fast ที่ AI engine ใช้ นำไปใช้กับ AI engine เมื่อบันทึก"
+title = "โมเดลและผู้ให้บริการ"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "เว้นว่างเพื่อใช้ข้อมูลรับรองสภาพแวดล้อมของ engine เอง ใช้กับการติดตั้งแบบ self-hosted single-engine"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "บันทึกแล้ว - เว้นว่างเพื่อคง key ปัจจุบันไว้"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL ของ endpoint ที่เข้ากันได้กับ OpenAI / Ollama เช่น http://ollama:11434/v1"
+label = "Provider base URL"
+warning = "Base URL ต้องชี้ไปยัง endpoint ภายในที่เชื่อถือได้ engine จะส่งคำขอฝั่งเซิร์ฟเวอร์ไปยังค่านั้น ดังนั้นค่าที่ไม่น่าเชื่อถือจึงไวต่อ SSRF"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "จำนวน output tokens สูงสุดสำหรับโมเดล fast"
+label = "Fast model max tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "โมเดลที่ถูกกว่าและเร็วกว่า สำหรับงานเบา ข้อความอิสระ; คำแนะนำเป็นเพียงแนวทางเท่านั้น"
+label = "Fast model"
+
+[admin.settings.ai.models.provider]
+description = "ผู้ให้บริการ LLM ที่ engine สื่อสารด้วย"
+label = "ผู้ให้บริการ"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "จำนวน output tokens สูงสุดสำหรับโมเดล smart"
+label = "Smart model max tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "โมเดลความสามารถสูงสำหรับการให้เหตุผลที่ซับซ้อน ข้อความอิสระ; คำแนะนำเป็นเพียงแนวทางเท่านั้น"
+label = "Smart model"
+
+[admin.settings.ai.saved]
+body = "การเปลี่ยนแปลงจะถูกส่งไปยัง AI engine โดยอัตโนมัติ"
+bodyNoPush = "บันทึกการตั้งค่าแล้ว จะมีผลในครั้งถัดไปที่ AI engine รับการกำหนดค่าของมัน"
+title = "บันทึกการตั้งค่า AI แล้ว"
+
 [admin.settings.badge]
 clickToUpgrade = "คลิกเพื่อดูรายละเอียดแผน"
 
@@ -938,6 +1094,25 @@ label = "สร้างใหม่เมื่อเริ่มต้น"
 description = "จำนวนวันที่ใบรับรองจะยังคงใช้ได้"
 label = "อายุใบรับรอง (วัน)"
 
+[admin.settings.folderAccess]
+description = "ไดเรกทอรีที่แหล่งที่มาของโฟลเดอร์และเอาต์พุตโฟลเดอร์ได้รับอนุญาตให้อ่านและเขียน นี่คือขอบเขตความปลอดภัย: automations ไม่สามารถชี้ไปยังเส้นทางเซิร์ฟเวอร์นอกเหนือจากรายการนี้ได้"
+securityNote = "เว้นว่างไว้เพื่อปิดใช้งานแหล่งที่มาของโฟลเดอร์และเอาต์พุตทั้งหมด ไดเรกทอรีการกำหนดค่าของ Stirling เองจะถูกห้ามใช้เสมอ"
+title = "การเข้าถึงโฟลเดอร์"
+
+[admin.settings.folderAccess.implied]
+description = "ไดเรกทอรีที่ Stirling จัดการเหล่านี้ได้รับอนุญาตเสมอและไม่สามารถเปลี่ยนได้ที่นี่"
+serverStorage = "ที่เก็บไฟล์บนเซิร์ฟเวอร์"
+title = "อนุญาตเสมอ"
+watchedFolder = "โฟลเดอร์ที่ pipeline เฝ้าดู"
+
+[admin.settings.folderAccess.roots]
+add = "เพิ่ม"
+empty = "ไม่มีโฟลเดอร์ที่อนุญาต แหล่งที่มาของโฟลเดอร์และเอาต์พุตถูกปิดใช้งานอยู่ในขณะนี้"
+hint = "ป้อนเส้นทางแบบ absolute เช่น /data/inbox"
+label = "รากโฟลเดอร์ที่อนุญาต"
+placeholder = "/data/inbox"
+remove = "ลบรากโฟลเดอร์"
+
 [admin.settings.general]
 description = "กำหนดค่าการตั้งค่าแอปพลิเคชันทั่วทั้งระบบ รวมถึงการสร้างแบรนด์และพฤติกรรมเริ่มต้น"
 system = "ระบบ"
@@ -1842,6 +2017,15 @@ export = "ส่งออก"
 accessDenied = "ปฏิเสธการเข้าถึง"
 insufficientPermissions = "คุณไม่มีสิทธิ์ในการดำเนินการนี้"
 
+[auth.callback]
+completing = "กำลังดำเนินการยืนยันตัวตนให้เสร็จสิ้น"
+invalidToken = "เข้าสู่ระบบ OAuth ล้มเหลว - token ไม่ถูกต้อง"
+missingToken = "เข้าสู่ระบบ OAuth ล้มเหลว - ไม่ได้รับ token"
+oauthFailed = "เข้าสู่ระบบ OAuth ล้มเหลว โปรดลองอีกครั้ง"
+pleaseWait = "โปรดรอขณะที่เราดำเนินการเข้าสู่ระบบให้เสร็จสิ้น"
+signedOut = "คุณออกจากระบบแล้ว โปรดเข้าสู่ระบบอีกครั้ง"
+windowMayClose = "คุณสามารถปิดหน้าต่างนี้ได้เมื่อดำเนินการเสร็จสิ้น"
+
 [auth.displayName]
 guest = "ผู้เยี่ยมชม"
 user = "ผู้ใช้"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "ทำให้เอกสาร PDF ปลอดภั
 description = "เครื่องมือนี้จะเปลี่ยนชื่อไฟล์ PDF โดยอัตโนมัติตามเนื้อหา มันวิเคราะห์เอกสารเพื่อค้นหาชื่อเรื่องที่เหมาะสมที่สุดจากข้อความ"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "หมุนอัตโนมัติ"
+tags = "หมุนอัตโนมัติ,แก้ไขการวางแนว,กลับหัว,ตะแคง,ปรับให้ตรง,จัดแนว,ตรวจจับการวางแนว,แก้ไขการหมุน,จัดแนวอัตโนมัติ,สแกน,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "เกณฑ์ความมั่นใจ"
+
+[autoRotate.detectionMode]
+auto = "อัตโนมัติ"
+osd = "OCR เท่านั้น"
+text = "ข้อความเท่านั้น"
+title = "วิธีตรวจจับ"
+
+[autoRotate.error]
+failed = "เกิดข้อผิดพลาดขณะหมุน PDF อัตโนมัติ"
+
+[autoRotate.inferUndetected]
+title = "หมุนหน้าที่มีความมั่นใจต่ำให้ตรงกัน"
+
+[autoRotate.report]
+applied = "{{degrees}}° ตามเข็มนาฬิกา"
+confidenceValue = "ความมั่นใจ {{value}}"
+noChange = "ไม่มีการเปลี่ยนแปลง"
+pageLabel = "หน้า {{number}}"
+summary = "หมุนแล้ว {{rotated}} จาก {{total}} หน้า, คงไว้เหมือนเดิม {{unchanged}} หน้า"
+title = "รายงานการตรวจจับ"
+
+[autoRotate.report.method]
+inferred = "จับคู่แล้ว"
+none = "ข้ามแล้ว"
+osd = "OCR"
+text = "ข้อความ"
+
+[autoRotate.report.note]
+belowThreshold = "ต่ำกว่าเกณฑ์"
+blankPage = "หน้านี้ว่าง"
+inferredFromDocument = "เหมือนกับหน้าอื่น ๆ"
+noDominantDirection = "ทิศทางข้อความปะปนกัน"
+osdFailed = "ไม่พบข้อความที่อ่านได้"
+osdNoVerdict = "ไม่สามารถบอกได้ว่าด้านใดคือด้านบน"
+tesseractUnavailable = "ไม่ได้ติดตั้ง OCR"
+tooFewGlyphs = "ข้อความน้อยเกินไป"
+
+[autoRotate.results]
+title = "ผลลัพธ์การหมุนอัตโนมัติ"
+
+[autoRotate.settings]
+title = "การตั้งค่า"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "กำหนดว่าการตรวจสอบต้องมั่นใจเพียงใดก่อนที่จะหมุนหน้า ลดค่าเพื่อหมุนหน้ามากขึ้น เพิ่มค่าเพื่อปล่อยหน้าไว้โดยไม่แตะต้องมากขึ้น"
+title = "เกณฑ์ความมั่นใจ"
+
+[autoRotate.tooltip.description]
+text = "ตรวจหาว่าแต่ละหน้าควรหันด้านใดขึ้น และหมุนให้ถูกทาง หน้าที่ตั้งตรงอยู่แล้วจะถูกปล่อยไว้เหมือนเดิม"
+
+[autoRotate.tooltip.detectionMode]
+text = "อัตโนมัติจะอ่านข้อความบนหน้าก่อน แล้วจึงดูหน้าเป็นรูปภาพหากยังไม่เพียงพอ ข้อความเท่านั้นจะข้ามการตรวจสอบรูปภาพ ซึ่งเร็วที่สุดสำหรับเอกสารที่ไม่เคยถูกสแกน OCR เท่านั้นจะถือว่าทุกหน้าเป็นรูปภาพ"
+title = "วิธีตรวจจับ"
+
+[autoRotate.tooltip.header]
+title = "หมุนอัตโนมัติ"
+
+[autoRotate.tooltip.inferUndetected]
+text = "หน้าว่างหรือเกือบว่างไม่สามารถตรวจสอบได้ด้วยตัวเอง เมื่อทุกหน้าที่อ่านได้ต้องหมุนในทิศทางเดียวกัน หน้าเหล่านี้จะถูกหมุนให้ตรงกัน"
+title = "หมุนหน้าที่มีความมั่นใจต่ำให้ตรงกัน"
+
 [autoSizeSplitPDF]
 tags = "pdf, แยก, เอกสาร, การจัดระเบียบ"
 
@@ -2189,33 +2440,6 @@ keywords = "คีย์เวิร์ด: odd, even"
 numbers = "ตัวเลข/ช่วง: 5, 10-20"
 progressions = "ลำดับขั้น: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "ประเภทของใบรับรอง"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "จัดการโดยผู้ดูแลระบบของระบบ"
-bullet2 = "ใช้ร่วมกันระหว่างผู้ใช้ที่ได้รับอนุญาต"
-bullet3 = "แสดงตัวตนของบริษัท ไม่ใช่บุคคล"
-bullet4 = "เหมาะสำหรับ: เอกสารทางการ ลายเซ็นของทีม"
-description = "ใบรับรองที่ใช้ร่วมกันซึ่งจัดเตรียมโดยองค์กรของคุณ ใช้สำหรับอำนาจการลงนามในระดับบริษัท"
-title = "ใบรับรองขององค์กร"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "สร้างโดยอัตโนมัติเมื่อใช้ครั้งแรก"
-bullet2 = "ผูกกับบัญชีผู้ใช้ของคุณ"
-bullet3 = "ไม่สามารถใช้ร่วมกับผู้ใช้อื่นได้"
-bullet4 = "เหมาะสำหรับ: เอกสารส่วนบุคคล ความรับผิดชอบรายบุคคล"
-description = "ใบรับรองที่สร้างอัตโนมัติเฉพาะบัญชีผู้ใช้ของคุณ เหมาะสำหรับลายเซ็นส่วนบุคคล"
-title = "ใบรับรองส่วนบุคคล"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "ต้องมีไฟล์ P12/PFX และรหัสผ่าน"
-bullet2 = "สามารถออกโดยหน่วยงานออกใบรับรองภายนอก"
-bullet3 = "ระดับความน่าเชื่อถือสูงสำหรับเอกสารทางกฎหมาย"
-bullet4 = "เหมาะสำหรับ: สัญญาที่มีผลผูกพันตามกฎหมาย การตรวจสอบจากภายนอก"
-description = "ใช้ไฟล์ใบรับรอง PKCS#12 ของคุณเอง ให้การควบคุมคุณสมบัติใบรับรองอย่างเต็มที่"
-title = "อัปโหลด P12 แบบกำหนดเอง"
-
 [certSign]
 awaitingSignatures = "รอการลงนาม"
 chooseCertificate = "เลือกไฟล์ใบรับรอง"
@@ -2542,34 +2766,6 @@ server = "เซิร์ฟเวอร์"
 stepTitle = "แหล่งที่มาของใบรับรอง"
 upload = "อัปโหลด"
 
-[certSign.tooltip.header]
-title = "เกี่ยวกับการจัดการลายเซ็น"
-
-[certSign.tooltip.overview]
-bullet1 = "ตรวจสอบลายเซ็นที่มีอยู่และความถูกต้อง"
-bullet2 = "ดูข้อมูลรายละเอียดเกี่ยวกับผู้ลงนามและใบรับรอง"
-bullet3 = "เพิ่มลายเซ็นดิจิทัลใหม่เพื่อปกป้องเอกสารของคุณ"
-bullet4 = "รองรับหลายไฟล์พร้อมการนำทางที่ง่าย"
-text = "เครื่องมือนี้ช่วยให้คุณตรวจสอบว่า PDF ของคุณมีการลงนามดิจิทัลหรือไม่ และเพิ่มลายเซ็นดิจิทัลใหม่ได้ ลายเซ็นดิจิทัลยืนยันตัวตนของผู้สร้างหรือผู้อนุมัติเอกสาร และแสดงว่าเอกสารถูกเปลี่ยนแปลงหลังจากลงนามหรือไม่"
-title = "เครื่องมือนี้ทำอะไรได้บ้าง?"
-
-[certSign.tooltip.signing]
-bullet1 = "รองรับรูปแบบ PEM, PKCS12, JKS และใบรับรองของเซิร์ฟเวอร์"
-bullet2 = "เลือกแสดงหรือซ่อนลายเซ็นบน PDF ได้"
-bullet3 = "เพิ่มเหตุผล สถานที่ และชื่อผู้ลงนาม"
-bullet4 = "เลือกหน้าที่จะวางลายเซ็นที่มองเห็นได้"
-bullet5 = "ใช้ใบรับรองของเซิร์ฟเวอร์สำหรับตัวเลือก 'Sign with Stirling-PDF' ที่ง่าย"
-text = "ในการลงนาม PDF คุณต้องมีใบรับรองดิจิทัล (เช่น PEM, PKCS12 หรือ JKS) คุณสามารถเลือกให้ลายเซ็นมองเห็นได้บนเอกสารหรือให้มองไม่เห็นเพื่อเน้นด้านความปลอดภัยเท่านั้น"
-title = "การเพิ่มลายเซ็น"
-
-[certSign.tooltip.validation]
-bullet1 = "แสดงว่าลายเซ็นถูกต้องหรือไม่ถูกต้อง"
-bullet2 = "แสดงข้อมูลผู้ลงนามและวันที่ลงนาม"
-bullet3 = "ตรวจสอบว่าเอกสารถูกแก้ไขหลังการลงนามหรือไม่"
-bullet4 = "สามารถใช้ใบรับรองแบบกำหนดเองเพื่อการตรวจสอบได้"
-text = "เมื่อคุณตรวจสอบลายเซ็น เครื่องมือจะแจ้งว่าถูกต้องหรือไม่ ใครเป็นผู้ลงนาม ลงนามเมื่อใด และเอกสารถูกเปลี่ยนแปลงหลังการลงนามหรือไม่"
-title = "การตรวจสอบลายเซ็น"
-
 [changeCreds]
 changeUsername = "อัปเดตชื่อผู้ใช้ของคุณ คุณจะถูกออกจากระบบหลังจากอัปเดต"
 credsUpdated = "อัปเดตบัญชีแล้ว"
@@ -2824,6 +3020,7 @@ next = "ถัดไป"
 preview = "แสดงตัวอย่าง"
 previous = "ก่อนหน้า"
 refresh = "รีเฟรช"
+remaining = "คงเหลือ"
 retry = "ลองใหม่"
 save = "บันทึก"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "การมอนิเตอร์ขั้นสูง"
-allInOneWorkspace = "พื้นที่ทำงาน PDF แบบครบวงจร (ตัวดูไฟล์ เครื่องมือ และเอเจนต์)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "การสนับสนุนเฉพาะทางและ SLA"
-fasterThroughput = "อัตราการประมวลผลเร็วขึ้น 10 เท่า"
-fullyPrivateFiles = "ไฟล์เป็นส่วนตัวอย่างเต็มรูปแบบ"
-largeFileProcessing = "ประมวลผลไฟล์ขนาดใหญ่"
-orgWideAccess = "การควบคุมการเข้าถึงทั่วทั้งองค์กร"
-premiumAiModels = "โมเดล AI ระดับพรีเมียม"
-prioritySupport = "การสนับสนุนแบบเร่งด่วน"
-privateDocCloud = "Private Document Cloud"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "การเข้าถึง API อย่างปลอดภัย"
-standardThroughput = "อัตราการประมวลผลมาตรฐาน"
-unlimitedApiAccess = "การเข้าถึง API แบบไม่จำกัด"
-unlimitedSeats = "ผู้ใช้ไม่จำกัด"
-
 [crop]
 autoCrop = "ครอบตัดช่องว่างอัตโนมัติ"
 noFileSelected = "เลือกไฟล์ PDF เพื่อเริ่มการครอบตัด"
@@ -3346,6 +3525,7 @@ message = "ตั้งตัวจัดการ PDF เริ่มต้น
 title = "ข้อผิดพลาด"
 
 [defaultApp.prompt]
+dontRemind = "ไม่ต้องเตือนฉันอีก"
 message = "ทำให้ Stirling PDF เป็นแอปเริ่มต้นสำหรับเปิดไฟล์ PDF"
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "ปรับแต่งกลุ่ม"
 dropHint = "เปิดไฟล์เพื่อเริ่มต้น"
 dropToAdd = "Drop files to add"
 expand = "ขยายแถบข้าง"
-files = "ไฟล์"
 googleDrive = "Google Drive"
 googleDriveDisabled = "ยังไม่ได้กำหนดค่า Google Drive"
 leaveMyFiles = "ออกจากไฟล์ของฉัน"
+library = "ไลบรารี PDF"
 myFiles = "ไฟล์ของฉัน"
 noFiles = "ยังไม่มีไฟล์"
 openFileManager = "เปิดตัวจัดการไฟล์"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "เพิ่ม"
-addLabel = "เพิ่มป้ายกำกับ…"
-categoryIconAria = "เลือกไอคอนสำหรับ {{name}}"
-createCategory = "สร้างหมวดหมู่"
-delete = "ลบหมวดหมู่"
 done = "เสร็จสิ้น"
-hide = "ซ่อนหมวดหมู่"
-newCategory = "ชื่อหมวดหมู่ใหม่…"
-removeLabel = "ลบ {{name}}"
-rename = "เปลี่ยนชื่อ"
 reset = "รีเซ็ตเป็นค่าเริ่มต้น"
-search = "ค้นหาป้ายกำกับ…"
-show = "แสดงหมวดหมู่"
 subtitle = "จัดกลุ่มไฟล์ของคุณเป็นหมวดหมู่หลัก เพิ่มป้ายกำกับที่มีอยู่หรือป้ายกำกับใหม่ไปยังหมวดหมู่ เปลี่ยนชื่อ หรือสร้างของคุณเอง ไฟล์ที่ไม่อยู่ในหมวดหมู่ใดของคุณจะแสดงใต้ “อื่นๆ”"
 title = "หมวดหมู่แถบด้านข้าง"
 
@@ -3808,6 +3977,7 @@ refresh = "รีเฟรชจากเซิร์ฟเวอร์"
 remove = "ลบ"
 removeVersion = "เอาเวอร์ชันนี้ออก"
 rename = "เปลี่ยนชื่อ"
+renamed = "เปลี่ยนชื่อแล้ว"
 renameFolder = "เปลี่ยนชื่อโฟลเดอร์"
 resizeFolderTree = "ปรับขนาดต้นไม้โฟลเดอร์ (ปุ่มลูกศร, กด Shift เพื่อก้าวใหญ่ขึ้น; ดับเบิลคลิกเพื่อปรับอัตโนมัติ)"
 save = "บันทึก"
@@ -3910,9 +4080,7 @@ count = "ไฟล์"
 folder = "โฟลเดอร์"
 labels = "ป้ายกำกับ"
 modified = "แก้ไขเมื่อ"
-name = "ชื่อ"
 size = "ขนาด"
-toolHistoryAtVersion = "ชุดเครื่องมือสะสม"
 totalSize = "ขนาดรวม"
 type = "ชนิด"
 versionHistory = "เส้นทางเวอร์ชัน"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "บันทึกทั้งหมดแล้ว"
+extractCsvError = "ดึง CSV ไม่สำเร็จ"
+extractXlsxError = "ดึง XLSX ไม่สำเร็จ"
 flattenAfterFilling = "ทำให้แบนหลังจากกรอก"
+requiredAbbreviation = "จำเป็น"
+requiredFieldsError = "โปรดกรอกช่องที่จำเป็นทั้งหมด"
 rescanFields = "สแกนฟิลด์อีกครั้ง"
 rescanFormFields = "สแกนฟิลด์ฟอร์มอีกครั้ง"
 save = "บันทึก"
+saveShortcut = "Ctrl+S เพื่อบันทึก"
+unsavedChanges = "การเปลี่ยนแปลงที่ยังไม่ได้บันทึก"
 
 [formFill.sidebar]
 close = "ปิดแถบด้านข้าง"
@@ -4309,6 +4484,11 @@ desc = "เปลี่ยนชื่อไฟล์ PDF อัตโนมั
 tags = "ตรวจจับอัตโนมัติ,จากหัวกระดาษ,จัดระเบียบ,เปลี่ยนชื่อ"
 title = "เปลี่ยนชื่อไฟล์ PDF อัตโนมัติ"
 
+[home.autoRotate]
+desc = "ตรวจจับการวางแนวของแต่ละหน้าและหมุนให้ตั้งตรงโดยอัตโนมัติ"
+tags = "หมุนอัตโนมัติ,แก้ไขการวางแนว,กลับหัว,ตะแคง,ปรับให้ตรง,จัดแนว,ตรวจจับการวางแนว,แก้ไขการหมุน,จัดแนวอัตโนมัติ,สแกน,OSD"
+title = "หมุนอัตโนมัติ"
+
 [home.autoSizeSplitPDF]
 tags = "อัตโนมัติ,แยก,ขนาด"
 title = "แยกตามขนาด/จำนวน"
@@ -4608,13 +4788,13 @@ hint = "อัปโหลดไฟล์รูปภาพ PNG, JPG, SVG หร
 label = "อัปโหลดรูปภาพ"
 placeholder = "เลือกไฟล์รูปภาพ"
 
-[imageToPdf]
-tags = "การแปลง, รูปภาพ, JPG, ภาพ, รูปถ่าย"
-
 [imageToPDF]
 header = "รูปภาพเป็น PDF"
 title = "รูปภาพเป็น PDF"
 
+[imageToPdf]
+tags = "การแปลง, รูปภาพ, JPG, ภาพ, รูปถ่าย"
+
 [infoBanner]
 dismiss = "ปิด"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "คุณได้รับคำเชิญ!"
 
 [landing]
 addFiles = "เพิ่มไฟล์"
-heroSubtitle = "ลากมาวางหรือเพิ่ม PDF ที่มีอยู่เพื่อเริ่มต้น"
 mobileUpload = "อัปโหลดจากมือถือ"
 openFromComputer = "เปิดจากคอมพิวเตอร์"
 uploadFromComputer = "อัปโหลดจากคอมพิวเตอร์"
-workbenchEmptyStateHero = "วาง PDF ได้ทุกที่"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "เข้าสู่ระบบ"
 magicLinkSent = "ส่ง Magic Link ไปยัง {{email}} แล้ว! ตรวจสอบอีเมลของคุณและคลิกลิงก์เพื่อเข้าสู่ระบบ"
 mfaCode = "รหัสยืนยันตัวตน"
 mfaRequired = "ต้องใช้รหัสการยืนยันแบบสองปัจจัย"
+noAccount = "ยังไม่มีบัญชีใช่ไหม?"
 or = "หรือ"
 password = "รหัสผ่าน"
 passwordChangedSuccess = "เปลี่ยนรหัสผ่านสำเร็จ! โปรดลงชื่อเข้าใช้ด้วยรหัสผ่านใหม่ของคุณ"
@@ -4715,26 +4894,10 @@ signInWith = "ลงชื่อเข้าใช้ด้วย"
 title = "ลงชื่อเข้าใช้"
 unexpectedError = "ข้อผิดพลาดที่ไม่คาดคิด: {{message}}"
 updatePassword = "อัปเดตรหัสผ่าน"
-useEmailInstead = "เข้าสู่ระบบด้วยอีเมล"
 useMagicLink = "ใช้ Magic Link แทน"
 username = "ชื่อผู้ใช้"
 youAreLoggedIn = "คุณได้เข้าสู่ระบบแล้ว!"
 
-[login.slides.edit]
-alt = "แก้ไข PDF"
-subtitle = "ด้วยเครื่องมือกว่าหนึ่งโหลที่ช่วยคุณปกปิดข้อมูล ลงนาม อ่าน และจัดการ PDF คุณจะพบสิ่งที่ต้องการแน่นอน"
-title = "แก้ไข PDF เพื่อแสดง/ปกป้องข้อมูลที่คุณต้องการ"
-
-[login.slides.overview]
-alt = "ภาพรวม Stirling PDF"
-subtitle = "ชุดเครื่องมือบนคลาวด์ที่ให้ความสำคัญกับความเป็นส่วนตัว ช่วยให้คุณแปลงไฟล์ ลงนาม ปกปิดข้อมูล และจัดการเอกสาร พร้อมเครื่องมือทรงพลังกว่า 50 รายการ"
-title = "ทุกสิ่งสำหรับงาน PDF ของคุณในที่เดียว"
-
-[login.slides.secure]
-alt = "ปกป้อง PDF"
-subtitle = "เพิ่มรหัสผ่าน ปกปิดเนื้อหา และจัดการใบรับรองได้อย่างง่ายดาย"
-title = "ปกป้องข้อมูลสำคัญใน PDF ของคุณ"
-
 [margin]
 large = "ใหญ่"
 medium = "กลาง"
@@ -4976,6 +5139,7 @@ pinButton = "คุณสามารถใช้ปุ่ม <strong>ปัก
 results = "หลังจากเครื่องมือทำงานเสร็จ ขั้นตอน <strong>ตรวจทาน</strong> จะแสดงตัวอย่างผลลัพธ์ในพาเนลนี้ และให้คุณยกเลิกการดำเนินการหรือดาวน์โหลดไฟล์"
 runButton = "เมื่อกำหนดค่าเครื่องมือเรียบร้อยแล้ว ปุ่มนี้จะให้คุณรันเครื่องมือนี้กับ PDF ที่เลือกทั้งหมด"
 selectCropTool = "มาลองเลือกเครื่องมือ <strong>ครอบตัด</strong> เพื่อสาธิตการใช้งานเครื่องมือหนึ่ง"
+stepOf = "ขั้นตอนที่ {{current}} จาก {{total}}"
 toolInterface = "นี่คืออินเทอร์เฟซของเครื่องมือ <strong>ครอบตัด</strong> จะเห็นว่ายังไม่มีอะไรมากเพราะเรายังไม่ได้เพิ่มไฟล์ PDF เพื่อทำงานด้วย"
 workbench = "นี่คือ <strong>Workbench</strong> - พื้นที่หลักที่คุณใช้ดูและแก้ไข PDF ของคุณ"
 wrapUp = "เสร็จเรียบร้อย! คุณได้เรียนรู้พื้นที่หลักของแอปและวิธีใช้งานแล้ว คลิกปุ่ม <strong>ช่วยเหลือ</strong> เมื่อใดก็ได้เพื่อดูทัวร์นี้อีกครั้ง"
@@ -4988,6 +5152,26 @@ showMeAround = "พาชมรอบๆ"
 skipForNow = "ข้ามไปก่อน"
 skipTheTour = "ข้ามทัวร์"
 
+[onboarding.checklist]
+dismiss = "ปิด"
+title = "ตั้งค่า Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "เรียกใช้ Stirling แบบเนทีฟบนเครื่องของคุณ"
+title = "ดาวน์โหลด Stirling สำหรับ Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "ทำงานร่วมกับทีมของคุณ"
+title = "เชิญสมาชิกทีม"
+
+[onboarding.checklist.shareAnalytics]
+description = "ช่วยปรับปรุง Stirling"
+title = "แชร์ข้อมูลการใช้งานแบบไม่ระบุตัวตน"
+
+[onboarding.checklist.takeTour]
+description = "ดูวิธีการทำงานของ Stirling ในคำแนะนำแบบรวดเร็ว"
+title = "เริ่มทัวร์"
+
 [onboarding.desktopInstall]
 body = "Stirling ใช้งานได้ดีที่สุดแบบแอปเดสก์ท็อป คุณสามารถใช้งานออฟไลน์ เข้าถึงเอกสารได้เร็วขึ้น และแก้ไขบนคอมพิวเตอร์ของคุณโดยตรง"
 selectOs = "เลือกระบบปฏิบัติการ"
@@ -4996,7 +5180,21 @@ titleWithOs = "ดาวน์โหลดสำหรับ {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "รหัสยืนยันตัวตน"
+description = "รักษาความปลอดภัยบัญชีของคุณโดยเชื่อมโยงแอปยืนยันตัวตน สแกน QR code หรือป้อน setup key จากนั้นยืนยันรหัส 6 หลักเพื่อเสร็จสิ้น"
+enable = "เปิดใช้ MFA"
+enableError = "ไม่สามารถเปิดใช้การยืนยันตัวตนสองปัจจัยได้ ตรวจสอบรหัสและลองอีกครั้ง"
+enterCode = "ป้อนรหัส 6 หลักจากแอปของคุณ"
+enterCodeError = "ป้อนรหัสยืนยันตัวตนเพื่อดำเนินการต่อ"
+logout = "ออกจากระบบ"
+openAuthenticator = "เปิด Google Authenticator, Authy หรือ 1Password"
 qrCodeLoading = "กำลังสร้างรหัส QR ของคุณ…"
+regenerateQrCode = "สร้าง QR code ใหม่"
+scanQrCode = "สแกน QR code หรือป้อน setup key ด้านล่าง"
+setupError = "ไม่สามารถเริ่มการตั้งค่าการยืนยันตัวตนสองปัจจัยได้ โปรดลองอีกครั้ง"
+setupKey = "Setup key (ป้อนด้วยตนเอง)"
+stepByStep = "ทีละขั้นตอน"
+success = "เปิดใช้ MFA แล้ว คุณสามารถดำเนินการต่อได้"
+title = "การตั้งค่าการยืนยันตัวตนหลายปัจจัย"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "เมื่อเปิดใช้โหมดล็อกอิน คุณจะสามารถจัดการผู้ใช้ กำหนดค่าต่างๆ และติดตามสุขภาพเซิร์ฟเวอร์ ผู้ใช้ <strong>{{freeTierLimit}}</strong> คนแรกบนเซิร์ฟเวอร์ของคุณใช้งาน Stirling ได้ฟรี"
@@ -5005,6 +5203,11 @@ adminTitle = "ภาพรวมผู้ดูแล"
 userBody = "เชิญเพื่อนร่วมทีม กำหนดบทบาท และจัดระเบียบเอกสารในพื้นที่ทำงานเดียวที่ปลอดภัย เปิดโหมดล็อกอินเมื่อคุณพร้อมเติบโตเกินการใช้งานคนเดียว"
 userTitle = "ภาพรวมแพ็กเกจ"
 
+[onboarding.processorIntro]
+body = "ตอนนี้ Stirling เรียกใช้ <strong>Policies</strong> — กฎอัตโนมัติที่จัดหมวดหมู่ รักษาความปลอดภัย และประมวลผลเอกสารทุกฉบับเมื่อมาถึง ตั้งค่าและติดตามการทำงานใน <strong>Processor</strong>"
+cta = "ดู Processor"
+title = "ดู Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "ชำระล่วงหน้ารายปี"
+
+[payg.prepaid.banner]
+exhausted = "ความจุแบบชำระล่วงหน้าของคุณถูกใช้หมดแล้ว; การเรียกเก็บเงินตามมิเตอร์กลับมาทำงานแล้ว เติมเงินเพื่อคงส่วนลดไว้"
+expiring_one = "ปีแบบชำระล่วงหน้าของคุณจะสิ้นสุดใน {{count}} วัน ความจุที่ไม่ได้ใช้จะหมดอายุ — เติมเงินเพื่อเริ่มปีใหม่"
+expiring_other = "ปีแบบชำระล่วงหน้าของคุณจะสิ้นสุดใน {{count}} วัน ความจุที่ไม่ได้ใช้จะหมดอายุ — เติมเงินเพื่อเริ่มปีใหม่"
+low = "คุณเหลือ {{pct}}% ของความจุแบบชำระล่วงหน้า เติมเงินได้ทุกเมื่อเพื่อให้การประมวลผลไม่สะดุด"
+
+[payg.prepaid.card]
+subtitle = "ใช้ก่อนการเรียกเก็บเงินตามมิเตอร์และอยู่นอกขีดจำกัดค่าใช้จ่ายของคุณ"
+title = "ความจุแบบชำระล่วงหน้า"
+
+[payg.prepaid.meter]
+capSuffix = "จาก {{total}} เครดิตแบบชำระล่วงหน้า"
+expires = "หมดอายุ {{date}}"
+
+[payg.prepaid.state]
+exhausted = "ใช้หมดแล้ว"
+healthy = "เหลืออีกมาก"
+low = "ใกล้หมด"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "วางคีย์ไลเซนส์จากอีเ
 success = "เปิดใช้งานไลเซนส์แล้ว!"
 successMessage = "เปิดใช้งานไลเซนส์ของคุณเรียบร้อยแล้ว ตอนนี้คุณสามารถปิดหน้าต่างนี้ได้"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "บังคับใช้แล้ว"
-enforcing = "กำลังบังคับใช้..."
-failed = "การบังคับใช้ล้มเหลว"
 outputsUnavailable = "ผลลัพธ์ของนโยบายไม่สามารถดาวน์โหลดได้อีกต่อไป"
 partialOutputsUnavailable = "ผลลัพธ์ของนโยบายบางรายการไม่สามารถดาวน์โหลดได้อีกต่อไป"
-retrying = "ระบบไม่ว่าง กำลังลองใหม่..."
 runNotFound = "ไม่พบการรันการบังคับใช้นี้แล้ว"
-step = "ขั้นตอน {{current}}/{{total}}"
 timedOut = "การบังคับใช้หมดเวลาก่อนที่การรันจะเสร็จสิ้น"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "ปิด"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "กำลังนำ {{names}} ไปใช้"
 applyingProgress = "กำลังนำ {{names}} ไปใช้ ({{done}} จาก {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "ไฟล์ {{failures}} จาก {{total}} ไฟล์ไม
 failureTitle = "ส่งออกโดยไม่ได้บังคับใช้อย่างครบถ้วน"
 printPolicyAppliedBody = "PDF นี้ถูกอัปเดตให้เป็นไปตามนโยบาย โปรดตรวจสอบการเปลี่ยนแปลง จากนั้นพิมพ์อีกครั้ง"
 printPolicyAppliedTitle = "นำนโยบายไปใช้ก่อนพิมพ์"
-queued = "+{{count}} อยู่ในคิว"
 successTitle = "นำ {{names}} ไปใช้แล้ว"
 summaryMore = "{{first}}, {{second}} และอีก {{more}} รายการ"
 summaryTwo = "{{first}} และ {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "บังคับใช้ก่อนการแปลง"
-default = "กำลังบังคับใช้"
-export = "บังคับใช้ก่อนการส่งออก"
-input = "บังคับใช้ระหว่างการนำเข้า"
-print = "บังคับใช้ก่อนการพิมพ์"
-
-[policies.field]
-accessLog = "บันทึกการเข้าถึง"
-archiveAfter = "เก็บถาวรหลังจาก"
-auditTrail = "ร่องรอยการตรวจสอบ"
-belowThreshold = "ต่ำกว่าเกณฑ์"
-destination = "ปลายทาง"
-frameworks = "Frameworks"
-immutableHold = "การระงับแบบเปลี่ยนแปลงไม่ได้"
-keepFor = "เก็บไว้เป็นเวลา"
-minConfidence = "ความเชื่อมั่นขั้นต่ำ"
-notify = "แจ้งเตือนเมื่อกำหนดเส้นทาง"
-onViolation = "เมื่อไม่เป็นไปตามข้อกำหนด"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "เพิ่ม"
-addPlaceholder = "เพิ่มป้ายกำกับ…"
-customNote = "ปรับแต่งสำหรับทีมของคุณแล้ว"
-defaultNote = "ใช้ค่าเริ่มต้นในตัว ซึ่งแชร์กับทีมของคุณ"
-duplicate = "\"{{name}}\" มีอยู่แล้ว"
-edit = "แก้ไขป้ายกำกับ"
-empty = "ยังไม่มีป้ายกำกับ"
-export = "ส่งออก JSON"
-iconAria = "เลือกไอคอนสำหรับ {{name}}"
-import = "นำเข้า JSON"
-importError = "ไม่สามารถนำเข้าไฟล์นั้นได้"
-managedNote = "ป้ายกำกับทีมได้รับการจัดการโดยหัวหน้าทีมของคุณ"
-modalSubtitle = "แชร์กับทั้งทีมของคุณ ตัวจัดประเภทจะเลือกป้ายกำกับที่เหมาะกับแต่ละเอกสาร"
-modalTitle = "ป้ายกำกับการจัดประเภท"
-pickIcon = "ใช้ไอคอน {{label}}"
-removeAria = "ลบ {{name}}"
-resetToDefault = "รีเซ็ตเป็นค่าเริ่มต้น"
-saveForTeam = "บันทึกสำหรับทีม"
-saving = "กำลังบันทึก…"
-sectionLabel = "ป้ายกำกับการจัดประเภท"
-startFromScratch = "เริ่มจากศูนย์"
-teamCount = "ป้ายกำกับทีม"
-tooLong = "ป้ายกำกับต้องมีความยาวไม่เกิน {{max}} อักขระ"
-ungrouped = "ไม่ได้จัดกลุ่ม"
-view = "ดูป้ายกำกับ"
+categoryCount = "หมวดหมู่"
+hideCategory = "ซ่อนหมวดหมู่"
+labelCount = "ป้ายกำกับ"
+sharedNote = "ป้ายกำกับเหล่านี้มีมาให้ในระบบและแชร์ทั่วทั้งทีมของคุณ"
+showCategory = "แสดงหมวดหมู่"
 
 [policies.pii]
 account = "หมายเลขบัญชี (มีป้ายกำกับ)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "หมายเลข Routing ของสหรัฐฯ (ABA)"
 ssn = "หมายเลขประกันสังคม"
 
-[policies.settings]
-noneExport = "ไม่มีนโยบายที่ทำงานเมื่อส่งออกในขณะนี้"
-noneUpload = "ไม่มีนโยบายที่ทำงานเมื่ออัปโหลดในขณะนี้"
-onExport = "เมื่อส่งออก"
-onUpload = "เมื่ออัปโหลด"
-reorderHandle = "ลากเพื่อจัดลำดับใหม่"
-runOrderDesc = "เมื่อมีนโยบายมากกว่าหนึ่งรายการทำงานบนทริกเกอร์เดียวกัน นโยบายจะทำงานตามลำดับนี้ — แต่ละรายการทำงานกับผลลัพธ์ของนโยบายก่อนหน้า ลากเพื่อจัดลำดับใหม่"
-title = "การตั้งค่านโยบาย"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "ตัวเลือกนโยบาย"
-policySettings = "การตั้งค่านโยบาย"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "ลองนโยบายที่ล้มเหลวอีกครั้ง ({{count}})"
-rowProgress = "ประมวลผลแล้ว {{completed}} จาก {{total}} ไฟล์"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "นโยบายคืออะไร?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "ค้นหาและปกปิดข้อมูลที่อ่อนไหวด้วยสีดำโดยอัตโนมัติ — เช่น หมายเลขประกันสังคมและหมายเลขบัตร — เพื่อไม่ให้สามารถอ่านได้ในเอกสาร"
-sanitize = "ลบ JavaScript ที่ซ่อนอยู่จากไฟล์ เพื่อไม่ให้มีสิ่งใดทำงานโดยอัตโนมัติเมื่อมีผู้เปิด"
-watermark = "ประทับเครื่องหมายที่มองเห็นได้ (เช่น \"Confidential\") บนทุกหน้า"
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "ปิด"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} กำลังบังคับใช้..."
 badgeRan = "นโยบาย {{name}} ทำงานกับไฟล์นี้แล้ว"
+badgeRunning = "{{name}} กำลังทำงาน..."
 blockingAction = "{{action}} ถูกบล็อกขณะบังคับใช้นโยบาย โปรดรอ..."
 dismiss = "ปิดโอเวอร์เลย์"
 enforcingTitle = "กำลังบังคับใช้นโยบาย..."
@@ -6151,6 +6211,7 @@ viewAnyway = "ดูไฟล์ (นโยบายยังคงบังค
 [policyOption]
 autoRedactPhi = "ปกปิด PHI อัตโนมัติ"
 blockExport = "บล็อกการส่งออก"
+ccpa = "CCPA"
 contracts = "สัญญา"
 documents = "เอกสาร"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "แผน Editor"
 subscribed = "แผน Processor"
 unlinked = "ยังไม่ได้เชื่อมโยง"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "เริ่มต้นจากเอกสาร"
-sectionsAriaLabel = "ส่วนของ Agent builder"
-selectorAriaLabel = "เอเจนต์"
-subtitle = "ออกแบบ ทดสอบ และเผยแพร่เอเจนต์ AI ที่จัดประเภท ดึงข้อมูลจาก และกำหนดเส้นทางเอกสารของคุณ กำหนดสถานการณ์ จำกัดการเข้าถึงเครื่องมือ รัน golden set และเผยแพร่เวอร์ชัน"
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "ยกเลิก"
-dropzoneText = "เลือกเอกสารตัวอย่าง (PDF หรือรูปภาพ)"
-lead = "วางเอกสารตัวอย่าง แล้วเราจะเสนอสถานการณ์และสคีมาการดึงข้อมูลที่คุณสามารถปรับปรุงได้ จะไม่มีการเผยแพร่จนกว่าคุณจะตรวจสอบ"
-submit = "เริ่มต้นเอเจนต์"
-subtitle = "เริ่มเอเจนต์ใหม่จากไฟล์ตัวแทนหนึ่งไฟล์"
-title = "เริ่มต้นจากเอกสาร"
-
-[portal.agentBuilder.empty]
-description = "เริ่มต้นเอเจนต์จากเอกสารตัวอย่างเพื่อสร้างสถานการณ์และสคีมาการดึงข้อมูล จากนั้นปรับปรุงและเผยแพร่"
-title = "ยังไม่มีเอเจนต์"
-
-[portal.agentBuilder.evals]
-casesPassing = "กรณีที่ผ่าน"
-columnCase = "กรณีการประเมิน"
-columnLatency = "เวลาแฝง"
-columnResult = "ผลลัพธ์"
-fail = "ไม่ผ่าน"
-goldenSetPassRate = "อัตราผ่านของ golden-set"
-latencyMs = "{{ms}} ms"
-notRun = "ยังไม่ได้รัน"
-pass = "ผ่าน"
-passRate = "อัตราผ่าน"
-runEvals = "รันการประเมิน"
-
-[portal.agentBuilder.evals.empty]
-description = "การประเมินจะเปลี่ยนสถานการณ์ของคุณให้เป็น golden set ที่ทำซ้ำได้ อัปเกรดเพื่อบันทึกอัตราผ่านตามเวลาและใช้เป็นเงื่อนไขในการเผยแพร่"
-title = "ยังไม่มี golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "ใน golden sets"
-activeAgents = "เอเจนต์ที่ใช้งานอยู่"
-avgPassRate = "อัตราผ่านการประเมินเฉลี่ย"
-fleetWide = "ทั้งระบบ"
-latestPublished = "เผยแพร่ล่าสุด"
-scenarios = "สถานการณ์"
-testCases = "กรณีทดสอบ"
-totalDescription_one = "ทั้งหมด {{count}}"
-totalDescription_other = "ทั้งหมด {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "เพิ่ม"
-addScenario = "เพิ่มสถานการณ์"
-enable = "เปิดใช้งาน"
-expectationLabel = "พฤติกรรมที่คาดหวัง"
-expectationPlaceholder = "สิ่งที่เอเจนต์ควรทำ"
-inEval = "อยู่ในการประเมิน"
-mute = "ปิดเสียง"
-muted = "ปิดเสียงแล้ว"
-nameLabel = "ชื่อ"
-namePlaceholder = "เช่น การยกระดับการปฏิบัติตามข้อกำหนด"
-
-[portal.agentBuilder.tabs]
-evals = "การประเมิน"
-scenarios = "สถานการณ์"
-tools = "เครื่องมือ"
-versions = "เวอร์ชัน"
-
-[portal.agentBuilder.tools]
-broadAccess = "การเข้าถึงแบบกว้าง"
-deniedHint = "เครื่องมือที่เลือกถูกบล็อก เครื่องมืออื่นทั้งหมดยังคงเรียกใช้ได้"
-deniedTools = "เครื่องมือที่ถูกปฏิเสธ"
-governanceGate = "การกำกับดูแลเครื่องมือมีให้ใช้ในแผน Enterprise"
-restricted = "ถูกจำกัด"
-restrictedAccess = "การเข้าถึงเครื่องมือแบบจำกัด"
-restrictedDescription = "อนุญาตทุกเครื่องมือ ยกเว้นรายการที่คุณปฏิเสธด้านล่าง"
-
-[portal.agentBuilder.versions]
-current = "ปัจจุบัน"
-historyGate = "ประวัติเวอร์ชันแบบเต็มและการย้อนกลับมีให้ใช้ในแผน Enterprise"
-publish = "เผยแพร่"
-rollBack = "ย้อนกลับ"
-
 [portal.assistant]
 close = "ปิดผู้ช่วย"
 error = "ไม่สามารถเชื่อมต่อผู้ช่วยได้"
@@ -6365,9 +6346,21 @@ typing = "กำลังพิมพ์"
 loading = "กำลังโหลด"
 redirectingToEditor = "กำลังเปลี่ยนเส้นทางไปยังตัวแก้ไข..."
 
+[portal.billing.activation]
+maybeLater = "ไว้ทีหลัง"
+title = "เปิดใช้งาน Processor"
+
+[portal.billing.activation.payg]
+sub = "ตั้งขีดจำกัดรายเดือน จ่ายตามที่ใช้"
+title = "จ่ายตามการใช้งาน"
+
+[portal.billing.activation.prepay]
+badge = "ฟรี 2 เดือน"
+sub = "ใบแจ้งหนี้เดียว ชำระด้วยบัตรหรือโอนผ่านธนาคาร"
+title = "ชำระล่วงหน้าหนึ่งปี"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function ไม่ได้ส่งคืน client_secret"
-subtitle = "เพิ่มบัตรเพื่อใช้งานต่อหลังจากสิทธิ์ฟรีในแผน Editor ของคุณ Stripe จะจัดการส่วนที่เหลือ"
 title = "เปิดใช้แผน Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "การชำระเงินของคุณสำเร็จแ
 close = "ปิด"
 title = "เกือบเสร็จแล้ว"
 
+[portal.billing.checkout.cap]
+amountAria = "ขีดจำกัดค่าใช้จ่ายรายเดือน"
+back = "กลับ"
+continue = "ไปต่อที่การชำระเงิน"
+error = "ไม่สามารถตั้งขีดจำกัดค่าใช้จ่ายของคุณได้"
+finePrint = "ออกใบแจ้งหนี้รายเดือน ยกเลิกได้ทุกเมื่อ"
+noLimit = "ไม่จำกัด"
+note = "คุณจะไม่ถูกเรียกเก็บเกินขีดจำกัดของคุณ การประมวลผลจะหยุดชั่วคราวเท่านั้น"
+perMonth = "/ เดือน"
+title = "ตั้งขีดจำกัดค่าใช้จ่ายของคุณ"
+
+[portal.billing.checkout.card]
+fields = "หมายเลขบัตร · MM / YY · CVC · ZIP"
+label = "รายละเอียดบัตร"
+note = "รายละเอียดบัตรเก็บรวบรวมโดย Stripe Stirling ไม่เคยจัดเก็บ PAN หรือ CVC"
+
 [portal.billing.checkout.error]
 title = "ไม่สามารถเริ่มชำระเงินได้"
 
@@ -6383,10 +6392,9 @@ body = "การชำระเงินของคุณสำเร็จแ
 hint = "โปรดเปิดหน้าต่างนี้ค้างไว้"
 title = "กำลังเปิดใช้งานแผน Processor ของคุณ..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "ใน portal env เพื่อเปิดใช้งานการชำระเงินในแอป"
-bodyBefore = "ตั้งค่า"
-title = "ยังไม่ได้กำหนดค่า Stripe"
+[portal.billing.checkout.pay]
+limit = "ขีดจำกัดค่าใช้จ่ายรายเดือน {{amount}}/เดือน การประมวลผลจะหยุดชั่วคราวเมื่อถึงขีดจำกัด"
+limitNoCap = "ไม่มีขีดจำกัดค่าใช้จ่าย การประมวลผลจะไม่หยุดชั่วคราว ออกใบแจ้งหนี้รายเดือน"
 
 [portal.billing.enterpriseUpsell]
 cta = "สร้างใบเสนอราคา Enterprise ของคุณ"
@@ -6409,10 +6417,12 @@ currentPlan = "แผนปัจจุบัน"
 freeForever = "ฟรีตลอดไป"
 noTeamResolved = "ยังไม่พบทีมในกระเป๋าเงินของคุณ — รีเฟรชแล้วลองอีกครั้ง"
 ownerOnly = "เฉพาะเจ้าของทีมเท่านั้นที่สามารถเปิดใช้แผน Processor ได้"
+payInvoice = "ชำระใบแจ้งหนี้เพื่อดำเนินการให้เสร็จ"
 planName = "Editor"
 ssoIncluded = "รวม SSO"
 switchOnProcessor = "เปิดใช้ Processor →"
 unlimitedUsers = "ผู้ใช้ไม่จำกัด"
+viewQuote = "ดูใบเสนอราคา"
 
 [portal.billing.invoices]
 columnAmount = "จำนวนเงิน"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "คำขอ API โดยตรง"
 segmentApiLabel = "API"
 segmentAutomationDesc = "ระบบอัตโนมัติและ pipelines"
 segmentAutomationLabel = "ระบบอัตโนมัติ"
+sizeMultiplier = "{{formatted}} PDFs ใช้ตัวคูณขนาด"
+summary = "{{unique}} ไม่ซ้ำ · {{units}} หน่วยมิเตอร์ · เฉลี่ย {{avg}} ต่อ PDF"
+summaryNoRate = "{{unique}} ไม่ซ้ำ · {{units}} หน่วยมิเตอร์"
 unit = "PDFs ตามปริมาณการใช้งาน"
+unitsPending_one = "{{units}} หน่วยมิเตอร์รอซิงค์จากอินสแตนซ์ที่เชื่อมโยง"
+unitsPending_other = "{{units}} หน่วยมิเตอร์รอซิงค์จากอินสแตนซ์ที่เชื่อมโยง"
+
+[portal.billing.prepaid]
+capSuffix = "จาก {{total}} เครดิตแบบชำระล่วงหน้า"
+expires = "หมดอายุ {{date}}"
+eyebrow = "ความจุแบบชำระล่วงหน้า"
+note = "ใช้ก่อนการเรียกเก็บเงินตามมิเตอร์และอยู่นอกขีดจำกัดค่าใช้จ่ายของคุณ"
+topUp = "เติมเงิน"
+
+[portal.billing.prepaid.buy]
+back = "กลับ"
+calcTitle = "คำนวณการชำระเงินรายปีของคุณ"
+cancel = "ยกเลิก"
+cancelPurchase = "ยกเลิกการซื้อ"
+close = "ปิด"
+continueToPayment = "ไปต่อที่การชำระเงิน"
+finalise = "ดำเนินการให้เสร็จสิ้น"
+invoiceErrorTitle = "ไม่สามารถสร้างใบแจ้งหนี้ได้"
+loadingTitle = "กำลังโหลดใบเสนอราคาของคุณ"
+payTitle = "ชำระเงินสำหรับปีของคุณ"
+step = "ขั้นตอนที่ {{current}} จาก {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "เปลี่ยน"
+deployRow = "การปรับใช้"
+done = "เสร็จสิ้น"
+enterpriseHint = "นี่คือระดับ enterprise ที่ปริมาณนี้ อัตรา enterprise ดีกว่าส่วนลดแบบบริการตนเองใด ๆ ล็อกอัตรา เงื่อนไข และใบเสนอราคาได้ในไม่กี่นาที"
+governanceRow = "การกำกับดูแล"
+governanceValue = "{{label}} · {{count}} policies"
+handlesLabel = "Processor ของคุณ"
+handlesValue = "รองรับ {{volume}} เครดิต / เดือน"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} policies"
+poolCaption = "กองเครดิตเดียวจำนวน {{credits}} เครดิตสำหรับทั้งปี เดือนที่ใช้งานหนักยืมจากเดือนที่ใช้งานเบาได้"
+priceLabel = "ปีของคุณ · 12 เดือนในราคา 10 เดือน"
+rateUnknown = "เราจะแสดงราคาที่แน่นอนตอนชำระเงิน"
+savings = "คุณประหยัด {{amount}} · ฟรี 2 เดือน"
+sizingRow = "การกำหนดขนาด"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "ผู้ใช้ทั้งหมด"
+
+[portal.billing.prepaid.consent]
+label = "ฉันเข้าใจว่าเมื่อความจุแบบชำระล่วงหน้าของฉันถูกใช้หมดหรือหมดอายุหลังจาก 12 เดือน การประมวลผลจะดำเนินต่อโดยอัตโนมัติในอัตรามาตรฐานแบบคิดตามมิเตอร์จ่ายตามการใช้งาน (ไม่เกินขีดจำกัดค่าใช้จ่ายของฉัน) เว้นแต่ฉันจะยกเลิก และฉันสามารถยกเลิกได้ทุกเมื่อจาก billing portal"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "จัดการโดย Stirling ใช้งานได้ในไม่กี่นาที"
+cloudValue = "Stirling Cloud · จัดการแล้ว"
+selfhost = "Self-hosted"
+selfhostDesc = "ทำงานบนโครงสร้างพื้นฐานส่วนตัว อัตราเดียวกัน"
+selfhostValue = "Self-hosted · โครงสร้างพื้นฐานส่วนตัว"
+
+[portal.billing.prepaid.offer]
+cta = "ตรวจสอบข้อเสนอ"
+subtitle = "ชำระล่วงหน้าหนึ่งปีสำหรับการประมวลผล PDF และรับฟรีสองเดือน ใช้ก่อนการเรียกเก็บเงินตามมิเตอร์ และอยู่นอกขีดจำกัดค่าใช้จ่ายของคุณ"
+title = "รับ 12 เดือนในราคา 10 เดือน"
+
+[portal.billing.prepaid.pay]
+accountName = "ชื่อเจ้าของบัญชี"
+accountNamePlaceholder = "เช่น Jane Smith"
+companyName = "ชื่อบริษัท (ไม่บังคับ)"
+companyNamePlaceholder = "เช่น Acme Inc."
+downloadInvoice = "ดาวน์โหลดใบแจ้งหนี้"
+payOnline = "ชำระออนไลน์"
+poNumber = "หมายเลข PO (ไม่บังคับ)"
+poNumberPlaceholder = "เช่น PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "ขั้นสูง"
+advancedDesc = "Pipelines ขับเคลื่อนการประมวลผลส่วนใหญ่ของคุณ"
+none = "ไม่มี"
+noneDesc = "ยังไม่ได้เรียกใช้ pipelines เปิดได้ทุกเมื่อ"
+standard = "มาตรฐาน"
+standardDesc = "Pipelines บางรายการประมวลผล PDFs ที่เข้ามาซ้ำ"
+
+[portal.billing.prepaid.posture]
+essentials = "พื้นฐาน"
+essentialsDesc = "การจัดหมวดหมู่ ค่าเริ่มต้น รวมถึงการแชร์"
+governed = "มีการกำกับดูแล"
+governedDesc = "เพิ่มความปลอดภัยและการกำหนดเส้นทาง"
+regulated = "มีการควบคุม"
+regulatedDesc = "ทุกหมวดหมู่ รวมถึง Compliance, Retention, Ingestion"
+
+[portal.billing.prepaid.review]
+download = "ดาวน์โหลดใบเสนอราคา (PDF)"
+downloading = "กำลังเตรียม…"
+share = "แชร์เพื่อขออนุมัติ"
+
+[portal.billing.prepaid.size]
+compact = "กะทัดรัด"
+compactDesc = "ไฟล์ต่ำกว่า 25 MB ไม่มีค่าใช้จ่ายข้อมูล"
+heavy = "หนัก"
+heavyDesc = "สแกนหรือมีรูปภาพจำนวนมาก โดยปกติ 50 MB+"
+standard = "มาตรฐาน"
+standardDesc = "ส่วนใหญ่เป็นไฟล์เล็ก มีบางสแกนเกิน 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "ใช้หมดแล้ว"
+healthy = "เหลืออีกมาก"
+low = "ใกล้หมด"
 
 [portal.billing.spendLimit]
 adjustLimit = "ปรับขีดจำกัด"
@@ -6494,6 +6608,8 @@ label = "คาดว่าจะเกิน"
 
 [portal.billing.spendThisMonth]
 eyebrow = "ค่าใช้จ่ายเดือนนี้"
+freeRemaining_one = "เหลือ PDF ฟรี {{formatted}} ไฟล์"
+freeRemaining_other = "เหลือ PDFs ฟรี {{formatted}} ไฟล์"
 processed_one = "ประมวลผล {{formattedCount}} PDF แล้ว"
 processed_other = "ประมวลผล {{formattedCount}} PDFs แล้ว"
 processedWithRate_one = "ประมวลผล {{formattedCount}} PDF แล้ว ที่ {{rate}} ต่อรายการ"
@@ -6534,6 +6650,350 @@ signature = "ลายเซ็น"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "การเชื่อมต่อใหม่"
+createTitleFor = "เชื่อมต่อ {{name}}"
+delete = "ลบ"
+edit = "แก้ไข"
+editTitle = "แก้ไขการเชื่อมต่อ"
+unsupportedType = "ไม่สามารถแก้ไขประเภทการเชื่อมต่อนี้ที่นี่ได้"
+
+[portal.connections.categories.advanced]
+description = "สำหรับบริการที่เรายังไม่รองรับ"
+label = "ขั้นสูง"
+
+[portal.connections.categories.audit]
+description = "บันทึกสิ่งที่เกิดขึ้นกับเอกสาร ในที่ที่ผู้ตรวจสอบของคุณดูอยู่แล้ว"
+label = "บันทึกการตรวจสอบและการปฏิบัติตามข้อกำหนด"
+
+[portal.connections.categories.notify]
+description = "แจ้งระบบอื่นว่ามีบางอย่างเกิดขึ้น"
+label = "การแจ้งเตือนและเวิร์กโฟลว์"
+
+[portal.connections.categories.security]
+description = "สแกนหรือติดป้ายกำกับเอกสารก่อนที่จะย้ายต่อ"
+label = "ความปลอดภัยและการจัดหมวดหมู่"
+
+[portal.connections.categories.signing]
+description = "ส่งเอกสารออกไปเพื่อลงนามหรือรับรองเอกสาร"
+label = "ลายเซ็นอิเล็กทรอนิกส์และการรับรองเอกสาร"
+
+[portal.connections.categories.storage]
+description = "ปลายทางของเอกสารที่ประมวลผลแล้ว - bucket, drive, ticket หรือ page"
+label = "ไฟล์และแนบ"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling จัดเก็บข้อมูลนี้แบบเข้ารหัสและจะไม่แสดงอีก"
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "ขั้นตอนที่ใช้การเชื่อมต่อนี้สามารถเรียกได้เฉพาะ paths ภายใต้ URL นี้เท่านั้น ไม่ใช่ host อื่น"
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "รหัสผ่าน"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "ชื่อผู้ใช้"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "วาง URL ที่บริการให้คุณ สามารถเรียกได้เฉพาะ paths ภายใต้ URL นั้นเท่านั้น"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "ชื่อการเชื่อมต่อ"
+namePlaceholder = "เช่น Production"
+
+[portal.connections.picker]
+cancel = "ยกเลิก"
+createNew = "การเชื่อมต่อใหม่..."
+placeholder = "เลือกการเชื่อมต่อ"
+save = "บันทึกการเชื่อมต่อ"
+
+[portal.connections.picker2]
+back = "เปลี่ยน integration"
+heading = "คุณต้องการเชื่อมต่ออะไร?"
+noResultsBody = "เรายังไม่รองรับ - บอกเราเกี่ยวกับสิ่งนี้ แล้วเราจะพิจารณาเพิ่ม"
+noResultsTitle = "ไม่มีรายการที่ตรงกับ \"{{query}}\""
+searchPlaceholder = "ค้นหา integrations - ลอง \"sign\", \"ocr\" หรือชื่อผลิตภัณฑ์"
+
+[portal.connections.types.api]
+description = "เรียก HTTP API ใดก็ได้จาก policy คุณเลือก URL, การยืนยันตัวตน และ payload"
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "การยืนยันตัวตน"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "ชื่อผู้ใช้และรหัสผ่าน"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token ใน header แบบกำหนดเอง"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "ไม่มี"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "เข้าสู่ระบบเพื่อรับ token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "ขั้นตอนที่ใช้การเชื่อมต่อนี้สามารถเรียกได้เฉพาะ paths ภายใต้ URL นี้เท่านั้น ไม่ใช่ host อื่น"
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "ชื่อ Header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Login path"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "รหัสผ่าน"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "หาก API ตอบกลับด้วยลิงก์ดาวน์โหลด จะดึงข้อมูลได้เฉพาะ hosts เหล่านี้เท่านั้น คั่นด้วยจุลภาค เว้นว่างเพื่ออนุญาตเฉพาะ host ของ Base URL เอง"
+label = "Result hosts ที่อนุญาต"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "ส่ง token เป็น header นี้"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Response header ที่การเรียกเข้าสู่ระบบส่งคืน token เช่น X-Auth-Token"
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "ชื่อผู้ใช้"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "สแกนเอกสารเพื่อหามัลแวร์บนเซิร์ฟเวอร์ที่คุณเรียกใช้ - ไม่มีสิ่งใดออกจากเครือข่ายของคุณ"
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "การสแกนไวรัสและเนื้อหาสำหรับเอกสารใน policy"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "บล็อกเอกสารที่มี macros, executables, scripts หรือ embedded objects - ไม่ใช่แค่มัลแวร์ที่รู้จัก"
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "แนบเอกสารที่ประมวลผลแล้วไปยังหน้า Confluence"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "ส่งเอกสารไปยัง ConsignO Cloud (Notarius) เพื่อลงลายมือชื่ออิเล็กทรอนิกส์และรับรองเอกสาร"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "สภาพแวดล้อม ConsignO Cloud ของคุณ รวมถึง /api/v1"
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "รหัสผ่าน"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "จำเป็นเฉพาะเมื่อองค์กรของคุณใช้ tenants"
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "ชื่อผู้ใช้"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "โพสต์ข้อความไปยัง Discord เมื่อ policy ประมวลผลเอกสาร"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "จัดทำดัชนี audit event ใน Elasticsearch ทุกครั้งที่ policy จัดการเอกสาร"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "ตรวจสอบ FTP หรือ FTPS server เพื่อหาเอกสารใหม่"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "โหมดการเชื่อมต่อ"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (แนะนำ)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP แบบธรรมดาส่งข้อมูลรับรองและไฟล์โดยไม่เข้ารหัส; เลือก FTPS หาก server รองรับ"
+label = "การเข้ารหัส"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "ไม่มี (FTP ธรรมดา)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "โพสต์ข้อความไปยังพื้นที่ Google Chat เมื่อ policy ทำงาน"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "แนบเอกสารที่ประมวลผลแล้วไปยัง issue ของ Jira"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "ส่งอีเมลเอกสารหรือการแจ้งเตือนเมื่อ policy ทำงาน"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "จัดเก็บเอกสารที่ประมวลผลแล้วลงใน Nextcloud"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "ตรวจจับข้อมูลส่วนบุคคลในข้อความเอกสารโดยใช้ Presidio server ที่คุณเรียกใช้"
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "อ่านและใช้ Microsoft Purview sensitivity labels บน PDFs"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "ไม่บังคับ จำเป็นเฉพาะเพื่อเลือก labels ตามชื่อ; การติดป้ายกำกับทำงานได้แม้ไม่มี"
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "ประทับลงบนทุก label เป็น SiteId เพื่อให้เครื่องมือที่รองรับ Purview รู้ว่าองค์กรใดเป็นผู้ใช้"
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket ที่ sources สามารถอ่านได้และ pipeline outputs สามารถเขียนได้"
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "เว้นว่างสำหรับ AWS ตั้งค่านี้สำหรับ MinIO หรือที่เก็บอื่นที่เข้ากันได้กับ S3"
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "ส่งอีเมลเอกสารหรือการแจ้งเตือนเมื่อ policy ทำงาน"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "ตรวจสอบ SFTP (SSH) server เพื่อหาเอกสารใหม่"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "ไม่บังคับ fingerprint ของ SHA-256 host key ของ server (จาก `ssh-keyscan host | ssh-keygen -lf -`) เมื่อตั้งค่า จะยอมรับเฉพาะ server ที่แสดง key นี้เท่านั้น; เมื่อเว้นว่าง key ที่เห็นในการเชื่อมต่อครั้งแรกจะถูก pin และการเปลี่ยนแปลงภายหลังจะถูกปฏิเสธ"
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "เว้นว่างหากคุณยืนยันตัวตนด้วย private key แทน"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "ไม่บังคับ วาง OpenSSH private key เพื่อยืนยันตัวตนด้วย key แทนรหัสผ่าน"
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "โพสต์ข้อความไปยัง Slack เมื่อ policy ประมวลผลเอกสาร"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "เฝ้าดู SMB / CIFS network share (Windows หรือ Samba)"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "ไม่บังคับ Windows domain หรือ workgroup หาก server ของคุณใช้อยู่"
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "ส่ง audit event ไปยัง Splunk ทุกครั้งที่ policy จัดการเอกสาร"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "ส่ง audit event ไปยัง Sumo Logic HTTP collector"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "โพสต์ข้อความไปยังช่อง Teams เมื่อ policy ทำงาน"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "โพสต์เอกสารแต่ละฉบับ หรือเพียงรายละเอียด ไปยัง URL ที่คุณเลือก"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "ทริกเกอร์ Zap หรือ Make scenario จาก policy"
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "เรียกดูเอกสาร"
+viewSource = "ดู source บน GitHub"
+
 [portal.docs.authentication]
 codeCaption = "ทุกคำขอ"
 eyebrow = "เริ่มต้นใช้งาน"
@@ -6619,11 +7079,19 @@ title = "SDKs อย่างเป็นทางการ"
 beta = "Beta"
 deprecated = "เลิกใช้แล้ว"
 
+[portal.docs.search]
+empty = "ไม่มีเอกสารที่ตรงกัน"
+placeholder = "ค้นหาเอกสาร"
+results = "{{count}} ผลลัพธ์"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "ความสามารถที่รวมมาและตั้งชื่อไว้ ซึ่งเอเจนต์ของคุณเรียกใช้เป็นเครื่องมือเดียว แต่ละ skill เป็นสายการดำเนินการแบบกำหนดแน่นอนพร้อมการประเมินแนบอยู่"
 title = "ทักษะเอเจนต์"
 
+[portal.docs.toc]
+title = "บนหน้านี้"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "ประเภท"
 user = "ผู้ใช้"
 
 [portal.documents.queue.empty]
+connectSource = "เชื่อมต่อ source"
+createPipeline = "สร้าง pipeline"
 description = "เมื่อแหล่งที่มาส่งเอกสารเข้าสู่ pipelines ของคุณ เอกสารจะแสดงที่นี่เพื่อให้ตรวจสอบ"
 title = "ไม่มีเอกสารในคิว"
 
@@ -6806,13 +7276,71 @@ description = "มุมมองนี้พบข้อผิดพลาด
 retry = "ลองอีกครั้ง"
 title = "มีบางอย่างผิดพลาดในหน้านี้"
 
+[portal.home.download]
+back = "กลับ"
+body = "ดาวน์โหลดแอป desktop หรือ self-host server"
+done = "เสร็จสิ้น"
+guide = "เปิดคู่มือ {{name}}"
+openInBrowser = "เปิดในเบราว์เซอร์แทน"
+sectionDesktop = "แอป Desktop"
+sectionSelfHosted = "Self-hosted"
+title = "ติดตั้ง Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "เรียกใช้ image อย่างเป็นทางการบน server ของคุณ"
+note = "เปิดที่ :8080 ข้อมูลเข้าสู่ระบบเริ่มต้น: admin / stirling"
+tagline = "เรียกใช้ server ใน container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "ติดตั้ง Helm chart อย่างเป็นทางการ"
+note = "เพิ่ม PVC สำหรับ /configs เพื่อคงการตั้งค่าไว้"
+tagline = "Deploy ไปยังคลัสเตอร์ด้วย Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "บิลด์แบบ Native สำหรับดิสทริบิวชันของคุณ"
+guideBtn = "ดูตัวเลือกการติดตั้ง Linux"
+note = "มีบิลด์ AppImage, .deb และ .rpm สำหรับดิสโทรทั่วไป"
+tagline = "แอปเดสก์ท็อปแบบ Native สำหรับดิสโทรของคุณ"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "หรือผ่าน Homebrew"
+detailBody = "รันตัวติดตั้ง หรือใช้ Homebrew"
+downloadBtn = "ดาวน์โหลดสำหรับ macOS"
+tagline = "แอปแบบ Native สำหรับ Apple silicon และ Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "รัน .jar บนเซิร์ฟเวอร์แบบ bare metal"
+downloadBtn = "ดาวน์โหลด .jar"
+note = "ต้องใช้ Java 21+ เปิดที่ :8080; ล็อกอินเริ่มต้น admin / stirling"
+runLabel = "จากนั้นรัน"
+tagline = "รัน .jar บนเซิร์ฟเวอร์แบบ bare metal"
+title = "ตั้งค่าเซิร์ฟเวอร์ด้วยตนเอง"
+
+[portal.home.download.windows]
+altLabel = "หรือผ่าน winget"
+detailBody = "รันตัวติดตั้ง หรือใช้ package manager"
+downloadBtn = "ดาวน์โหลดตัวติดตั้ง"
+tagline = "แอปแบบ Native สำหรับ Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} ใช้งานอยู่"
-invite = "เชิญเพื่อนร่วมทีม"
+activeOfDeployed = "{{active}} จาก {{total}} ใช้งานอยู่ในเดือนนี้"
 name = "Stirling PDF Editor"
 open = "เปิดในเบราว์เซอร์"
 updated = "อัปเดตเมื่อ {{time}}"
 
+[portal.home.editor.deploy]
+finish = "เสร็จสิ้นการ deployment"
+options = "ดูตัวเลือก deployment"
+start = "Deploy Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "โฮสต์เอง · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "สวัสดีตอนบ่าย"
 evening = "สวัสดีตอนเย็น"
 morning = "สวัสดีตอนเช้า"
 
-[portal.home.onboarding]
-dismiss = "ปิดการตั้งค่า"
-notStarted = "ยังไม่เริ่ม"
-progress = "เสร็จแล้ว {{done}} จาก {{total}}"
-title = "ตั้งค่าให้เสร็จสิ้น"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC ทั่วทั้งองค์กร, ราคาตามปริมาณที่ตกลงไว้ และการปรับใช้แบบ air-gapped"
-cta = "เริ่มทดลองใช้ฟรี"
-ctaQuote = "ขอใบเสนอราคา"
-lead = "สำหรับพนักงาน 250+ คน"
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "ปรับใช้แอปเดสก์ท็อป ฟรีตลอดไป"
-title = "ดาวน์โหลด PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "ใช้งานอยู่ {{active}} · แนะนำ {{recommended}}"
-chip = "ใช้งานอยู่ {{active}}"
-title = "เปิดใช้นโยบาย"
-
-[portal.home.onboarding.steps.sources]
-blurb = "เชื่อมต่อแล้ว {{connected}} · PDF ทุกไฟล์ถูกควบคุมในตำแหน่งที่ลงจอด"
-chip = "เชื่อมต่อแล้ว {{connected}}"
-title = "เชื่อมต่อแหล่งที่มาของคุณ"
-
-[portal.home.quickActions]
-subtitle = "งานสำคัญสำหรับวันนี้"
-title = "การดำเนินการด่วน"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "ตัวประกอบ 3 ขั้นตอนบนไลบรารี op แบบมีชนิด"
-title = "สร้าง pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agents, webhooks, โฟลเดอร์ที่เฝ้าดู"
-title = "เชื่อมต่อแหล่งที่มา"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "คีย์แบบกำหนดขอบเขตพร้อม rate limits และ IP allowlist"
-title = "ออก API key"
-
 [portal.infrastructure]
 manageEditorDeployment = "จัดการการปรับใช้ Editor"
 sectionsAriaLabel = "ส่วนโครงสร้างพื้นฐาน"
@@ -6878,13 +7363,9 @@ heading = "API keys"
 subheading = "ข้อมูลประจำตัวแบบกำหนดขอบเขตพร้อม rate limits ต่อคีย์ สิทธิ์ และ IP allowlists"
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP ที่อนุญาต"
-anyIp = "IP ใดก็ได้ (ไม่มี allowlist)"
 created = "สร้างเมื่อ"
 lastUsed = "ใช้ล่าสุด"
-permissions = "สิทธิ์"
-rateLimit = "Rate limit"
-rateLimitValue = "{{value}} คำขอ/นาที"
+revoke = "เพิกถอนคีย์"
 usageMonth = "การใช้งานเดือนนี้"
 usageToday = "การใช้งานวันนี้"
 
@@ -6892,6 +7373,20 @@ usageToday = "การใช้งานวันนี้"
 description = "สร้างคีย์แบบกำหนดขอบเขตเพื่อเริ่มเรียกใช้ Stirling API"
 title = "ยังไม่มี API keys"
 
+[portal.infrastructure.apiKeys.error]
+load = "ไม่สามารถโหลด API keys ของคุณได้ โปรดลองอีกครั้ง"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "เพิกถอน \"{{name}}\" หรือไม่? Integration ใดที่ยังใช้คีย์นี้จะเริ่มได้รับข้อผิดพลาด 401 ทันที การดำเนินการนี้ย้อนกลับไม่ได้"
+cancel = "ยกเลิก"
+confirm = "เพิกถอนคีย์"
+title = "เพิกถอน API key"
+
+[portal.infrastructure.attestationLabel]
+attested = "รับรองแล้ว"
+inScope = "อยู่ในขอบเขต"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "กรองเหตุการณ์ตรวจสอบตามหมวดหมู่"
 heading = "Audit logs"
@@ -6935,6 +7430,7 @@ all = "ทั้งหมด"
 auth = "Auth"
 config = "การกำหนดค่า"
 elevation = "การยกระดับสิทธิ์"
+policy = "นโยบาย"
 processing = "การประมวลผล"
 security = "ความปลอดภัย"
 
@@ -6944,19 +7440,35 @@ title = "คุณไม่มีสิทธิ์เข้าถึง"
 
 [portal.infrastructure.audit.metrics]
 config = "การกำหนดค่า"
-elevation = "การยกระดับสิทธิ์"
+policy = "นโยบาย"
 processing = "การประมวลผล"
 totalEvents = "เหตุการณ์ทั้งหมด · 24 ชม."
 
+[portal.infrastructure.auditCatLabel]
+auth = "การยืนยันตัวตน"
+config = "การกำหนดค่า"
+elevation = "การยกระดับสิทธิ์"
+policy = "นโยบาย"
+processing = "การประมวลผล"
+security = "ความปลอดภัย"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "ข้อผิดพลาด"
+info = "ข้อมูล"
+success = "สำเร็จ"
+warning = "คำเตือน"
+
+[portal.infrastructure.certLabel]
+certified = "ผ่านการรับรอง"
+inProgress = "กำลังดำเนินการ"
+notStarted = "ยังไม่เริ่ม"
+
 [portal.infrastructure.createKey]
 cancel = "ยกเลิก"
 createKey = "สร้างคีย์"
 done = "เสร็จสิ้น"
-ipAllowlistHelper = "ช่วง CIDR คั่นด้วยจุลภาค เว้นว่างเพื่ออนุญาต IP ใดก็ได้"
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "ชื่อคีย์"
 keyNamePlaceholder = "เช่น Production · ingest"
-permissionsLabel = "สิทธิ์"
 secretKeyCaption = "Secret key"
 secretWarning = "จัดเก็บสิ่งนี้ใน secrets manager Stirling จัดเก็บเฉพาะ hash เท่านั้น — ไม่มีวิธีกู้คืนในภายหลัง"
 subtitle = "กำหนดขอบเขตคีย์ให้เหลือน้อยที่สุดเท่าที่จำเป็น คุณสามารถหมุนเวียนหรือเพิกถอนได้ทุกเมื่อ"
@@ -6964,6 +7476,12 @@ subtitleCreated = "คัดลอก secret นี้ตอนนี้ — จ
 title = "สร้าง API key"
 titleCreated = "สร้างคีย์แล้ว"
 
+[portal.infrastructure.deployLabel]
+live = "ใช้งานจริง"
+queued = "เข้าคิวแล้ว"
+rolledBack = "ย้อนกลับแล้ว"
+rolling = "กำลังเผยแพร่"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/นาที"
@@ -6999,6 +7517,15 @@ subheading = "สุขภาพแบบสดสำหรับทุกภู
 description = "ภูมิภาคที่ปรับใช้จะแสดงที่นี่เมื่อ workspace ของคุณได้รับการจัดสรรแล้ว"
 title = "ยังไม่มีภูมิภาคที่ปรับใช้"
 
+[portal.infrastructure.keyLabel]
+active = "ใช้งานอยู่"
+revoked = "ถูกเพิกถอน"
+
+[portal.infrastructure.modelLabel]
+active = "ใช้งานอยู่"
+degraded = "เสื่อมประสิทธิภาพ"
+disabled = "ปิดใช้งาน"
+
 [portal.infrastructure.models]
 heading = "Models"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "สถานะ"
 type = "ประเภท"
 version = "เวอร์ชัน"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/ครั้ง"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Models ที่ใช้งานอยู่"
 avgLatency = "เวลาแฝงเฉลี่ย"
@@ -7049,6 +7580,17 @@ modelForAria = "Model สำหรับ {{operation}}"
 operation = "การดำเนินการ"
 routedTo = "Route ไปยัง"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "การจัดประเภท"
+extraction = "การดึงข้อมูล"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "เสื่อมประสิทธิภาพ"
+down = "ล่ม"
+healthy = "ปกติ"
+
 [portal.infrastructure.security.access.byok]
 description = "ระบุคีย์จาก KMS ของคุณเอง Stirling เข้ารหัสด้วยคีย์นั้นแต่ยังอ่านได้"
 label = "Bring your own key (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Models"
 security = "ความปลอดภัย"
 storage = "พื้นที่จัดเก็บ"
 
+[portal.integrations]
+addAnother = "เพิ่มอีกหนึ่ง"
+availableHeading = "พร้อมใช้งาน"
+comingSoonHeading = "เร็ว ๆ นี้"
+connect = "เชื่อมต่อ"
+connectedHeading = "เชื่อมต่อแล้ว"
+connectionCount_one = "การเชื่อมต่อ {{count}} รายการ"
+connectionCount_other = "การเชื่อมต่อ {{count}} รายการ"
+customApi = "API แบบกำหนดเอง"
+searchPlaceholder = "ค้นหา Integrations"
+subtitle = "ทุกอย่างที่ Stirling สามารถสื่อสารด้วยได้ ข้อมูลประจำตัวจะถูกสร้างที่นี่ครั้งเดียว แล้วอ้างอิงโดยแหล่งที่มา นโยบาย และไปป์ไลน์"
+title = "Integrations"
+typedName = "ชื่อ {{tool}}"
+
+[portal.integrations.filters]
+all = "ทั้งหมด"
+audit = "Audit"
+connected = "เชื่อมต่อแล้ว"
+notify = "แจ้งเตือน"
+security = "ความปลอดภัย"
+signing = "การลงนาม"
+storage = "พื้นที่จัดเก็บ"
+
+[portal.integrations.status]
+connected = "เชื่อมต่อแล้ว"
+
+[portal.integrations.table]
+integration = "Integration"
+worksWith = "ใช้งานร่วมกับ"
+
+[portal.integrations.worksWith]
+pipelines = "ไปป์ไลน์"
+policies = "นโยบาย"
+sources = "แหล่งที่มา"
+
+[portal.legal]
+draft = "{{label}} · ร่าง"
+loadError = "ไม่สามารถโหลดเอกสารนี้ได้ โปรดลองอีกครั้ง"
+loading = "กำลังโหลด…"
+title = "เอกสารทางกฎหมาย"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Components"
@@ -7182,6 +7765,7 @@ documents = "เอกสาร"
 editor = "Editor"
 home = "หน้าแรก"
 infrastructure = "โครงสร้างพื้นฐาน"
+integrations = "Integrations"
 pipelines = "Pipelines"
 policies = "นโยบาย"
 procurement = "การจัดซื้อ"
@@ -7190,25 +7774,9 @@ sources = "แหล่งที่มา"
 usage = "การใช้งานและการเรียกเก็บเงิน"
 users = "ผู้ใช้"
 
-[portal.notifications]
-markAllRead = "ทำเครื่องหมายว่าอ่านทั้งหมด"
-title = "การแจ้งเตือน"
-viewAll = "ดูทั้งหมด"
-
-[portal.notifications.ariaLabel]
-none = "การแจ้งเตือน ไม่มีที่ยังไม่ได้อ่าน"
-unread_one = "การแจ้งเตือน, ยังไม่ได้อ่าน {{count}} รายการ"
-unread_other = "การแจ้งเตือน, ยังไม่ได้อ่าน {{count}} รายการ"
-
-[portal.notifications.count]
-allRead = "อ่านทั้งหมดแล้ว"
-loading = "กำลังโหลด"
-new_one = "ใหม่ {{count}} รายการ"
-new_other = "ใหม่ {{count}} รายการ"
-
-[portal.notifications.empty]
-description = "ไม่มีการแจ้งเตือนใหม่"
-title = "คุณอัปเดตครบแล้ว"
+[portal.nav.section]
+platform = "แพลตฟอร์ม PDF"
+processor = "ตัวประมวลผล PDF"
 
 [portal.pipelines]
 subtitle = "Pipeline เอกสารอัตโนมัติทุกรายการบน backend: ลำดับการดำเนินการที่เรียงไว้เหนือชุดแหล่งที่มา ทำงานเมื่อมี trigger คลิกแถวเพื่อดูขั้นตอนและแหล่งที่มา"
@@ -7220,15 +7788,28 @@ newPipeline = "Pipeline ใหม่"
 [portal.pipelines.builder]
 addStep = "เพิ่มเครื่องมือ"
 back = "กลับไปที่ pipelines"
+cannotFollow = "รับ {{produced}} ไม่ได้"
+chooseAccount = "เลือกบัญชี"
+chooseDestination = "เลือกปลายทาง"
+chooseOperation = "เลือกสิ่งที่ขั้นตอนนี้ทำ"
+chooseSource = "เลือกแหล่งที่มา"
 discard = "ละทิ้งการเปลี่ยนแปลง"
 enabled = "เปิดใช้งาน"
+inputs = "อินพุต"
+inputSource = "แหล่งที่มาของอินพุต"
+inputTrigger = "Trigger"
 keepEditing = "แก้ไขต่อ"
+needsConfiguring = "ต้องตั้งค่า"
 needsUpload = "ต้องมีไฟล์ที่อัปโหลด"
+noSources = "ยังไม่มีแหล่งที่มาเชื่อมต่อ สร้างแหล่งที่มาเพื่อใช้เป็นอินพุต"
 noToolMatches = "ไม่มีเครื่องมือที่ตรงกับการค้นหาของคุณ"
 pipelineSettings = "การตั้งค่า pipeline"
 searchTools = "ค้นหาเครื่องมือ"
 selectToolBody = "เพิ่มเครื่องมือเพื่อสร้าง pipeline ของคุณ"
 selectToolTitle = "ยังไม่มีเครื่องมือ"
+sendToSystem = "ส่งไปยังระบบอื่น"
+stepsIncompatible = "ขั้นตอนเหล่านี้ไม่สามารถทำงานกับผลลัพธ์จากขั้นตอนก่อนหน้าได้: {{tools}}"
+stepsNeedSetup = "ขั้นตอนเหล่านี้ยังต้องตั้งค่าก่อนบันทึก: {{tools}}"
 toolSettings = "การตั้งค่าเครื่องมือ"
 unknownStep = "การดำเนินการที่ไม่รู้จัก เก็บไว้ตามเดิม"
 unsavedBody = "คุณมีการเปลี่ยนแปลงที่ยังไม่ได้บันทึก บันทึกก่อนออก หรือจะละทิ้ง?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "การเปลี่ยนแปลงที่ยังไ
 uploadUnsupported = "ไฟล์ที่อัปโหลดยังไม่รองรับใน pipelines ดังนั้นขั้นตอนเหล่านี้จึงไม่สามารถบันทึกได้: {{tools}}"
 usesDefaults = "ทำงานด้วยการตั้งค่าเริ่มต้น"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "รวมทุกไฟล์จากขั้นตอนก่อนหน้า"
+fan-out = "รันหนึ่งครั้งต่อไฟล์จากขั้นตอนก่อนหน้า"
+format-mismatch = "ต้องใช้ {{accepts}} แต่ขั้นตอนก่อนหน้าสร้าง {{produced}}"
+output-uncertain = "อาจไม่รัน: ผลลัพธ์ของขั้นตอนก่อนหน้าขึ้นอยู่กับวิธีตั้งค่า"
+source-mismatch = "ต้องใช้ {{accepts}} แต่อินพุตของไปป์ไลน์นี้คือ {{produced}}"
+undeclared-operation = "ตรวจสอบไม่ได้ว่าขั้นตอนนี้รับอะไรได้บ้าง"
+
 [portal.pipelines.composer]
 addTool = "เพิ่มเครื่องมือ"
 cancel = "ยกเลิก"
 chainEmpty = "เพิ่มเครื่องมือเพื่อเริ่มสร้าง pipeline ของคุณ"
 create = "สร้าง pipeline"
-directory = "โฟลเดอร์ผลลัพธ์"
-directoryHelp = "พาธแบบสัมบูรณ์บนเซิร์ฟเวอร์ ต้องอยู่ภายในโฟลเดอร์ที่อนุญาตซึ่งกำหนดค่าไว้"
 editingUnsupported = "ยังไม่รองรับการแสดง params ของเครื่องมือเหล่านี้เพื่อแก้ไข"
 moveDown = "ย้ายลง"
 moveUp = "ย้ายขึ้น"
 name = "ชื่อ"
 namePlaceholder = "เช่น Redaction sweep"
-noSources = "ยังไม่มีแหล่งที่มาที่เชื่อมต่อ Pipeline ยังสามารถทำงานกับไฟล์ที่ส่งให้โดยตรงได้"
 noToolSettings = "เครื่องมือนี้ไม่มีการตั้งค่าที่กำหนดค่าได้"
 operations_one = "การดำเนินการ ({{count}})"
 operations_other = "การดำเนินการ ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "ลบ"
 title = "ลบ pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "ล้างประวัติ"
 delete = "ลบ pipeline"
 run = "รันตอนนี้"
 
 [portal.pipelines.empty]
 action = "สร้าง pipeline"
+connectSource = "เชื่อมต่อแหล่งที่มา"
 description = "สร้าง pipeline แรกของคุณ: เลือกแหล่งที่มาที่จะรัน เชื่อมโยงการดำเนินการ และเลือกตำแหน่งผลลัพธ์"
 title = "ยังไม่มี pipelines"
 
@@ -7286,15 +7874,17 @@ active = "ใช้งานอยู่"
 paused = "หยุดชั่วคราว"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "เขียนไปยังโฟลเดอร์"
-inline = "ส่งคืนไฟล์"
-
 [portal.pipelines.run]
+allProcessed_one = "ไม่มีอะไรให้รัน: เอกสาร {{count}} รายการของแหล่งที่มาได้รับการประมวลผลแล้ว"
+allProcessed_other = "ไม่มีอะไรให้รัน: เอกสารทั้งหมด {{count}} รายการในแหล่งที่มาได้รับการประมวลผลแล้ว"
 completed_one = "การรันเสร็จสมบูรณ์"
 completed_other = "การรันทั้งหมด {{count}} รายการเสร็จสมบูรณ์"
 empty = "ไม่มีอะไรให้รัน: แหล่งที่มาไม่มีเอกสารให้ประมวลผล"
 failed = "การรันล้มเหลว: {{error}}"
+historyCleared = "ล้างประวัติแล้ว การรันครั้งถัดไปจะประมวลผลทุกอย่างที่อยู่ในแหล่งที่มาอีกครั้ง"
+inFlight = "ไม่มีรายการใหม่ให้รัน: เอกสารยังคงกำลังถูกประมวลผลจากการรันก่อนหน้า"
+parked_one = "ไม่มีอะไรให้รัน: เอกสาร {{count}} รายการล้มเหลวก่อนหน้านี้และถูกพักไว้ แก้ไขสาเหตุ จากนั้นล้างประวัติเพื่อลองใหม่"
+parked_other = "ไม่มีอะไรให้รัน: เอกสาร {{count}} รายการล้มเหลวก่อนหน้านี้และถูกพักไว้ แก้ไขสาเหตุ จากนั้นล้างประวัติเพื่อลองใหม่"
 running = "เริ่มการรันแล้ว; ยังดำเนินการอยู่"
 timeout = "การรันใช้เวลานานกว่าที่คาดไว้; อาจยังเสร็จสิ้นในเบื้องหลังได้"
 
@@ -7314,12 +7904,18 @@ manual = "Manual"
 schedule = "ตามกำหนดเวลา"
 
 [portal.policies]
+defaultName = "นโยบาย {{category}}"
 subtitle = "ระบบอัตโนมัติถาวรที่บังคับใช้ tool pipeline กับทุกเอกสาร แต่ละนโยบายจะทำงานเมื่อ upload หรือ export รัน tool chain และบันทึกเวอร์ชันที่บังคับใช้ควบคู่กับต้นฉบับ"
 title = "นโยบาย"
 
 [portal.policies.card]
 comingSoon = "อัปเกรดเป็น Enterprise"
 notSetUp = "ยังไม่ได้ตั้งค่า"
+requiresAiEngine = "ต้องใช้ AI engine"
+
+[portal.policies.categories.classification]
+desc = "ระบุประเภทของเอกสารแต่ละฉบับเมื่ออัปโหลด และติดแท็ก metadata เพื่อการจัดเก็บและค้นหา"
+label = "การจัดประเภท"
 
 [portal.policies.categories.compliance]
 desc = "บังคับใช้ข้อกำหนด HIPAA, GDPR, SOC 2 หรือ FedRAMP กับทุกเอกสาร"
@@ -7344,6 +7940,13 @@ label = "ความปลอดภัย"
 [portal.policies.config]
 scopeAll = "เอกสารทั้งหมด"
 
+[portal.policies.config.classification]
+summary = "จัดประเภทเอกสารที่อัปโหลดทุกฉบับตามป้ายกำกับของทีมคุณ และติดแท็ก metadata"
+
+[portal.policies.config.classification.rules]
+0 = "จัดประเภท"
+1 = "ติดแท็ก metadata"
+
 [portal.policies.config.compliance]
 summary = "ตรวจสอบเอกสารกับ regulatory frameworks ก่อนออกจากระบบ"
 
@@ -7371,6 +7974,29 @@ minConfidence = "ความเชื่อมั่นขั้นต่ำ"
 2 = "ตั้งชื่อ"
 3 = "ปรับให้เป็นมาตรฐาน"
 
+[portal.policies.config.purview]
+label = "ใช้ป้ายกำกับความละเอียดอ่อนของ Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "GUID ของป้ายกำกับจาก Purview portal การใช้ป้ายกำกับจะเขียน metadata ลงใน PDF; ไม่สามารถเข้ารหัสได้ ซึ่งต้องใช้ Microsoft client"
+labelName = "ชื่อป้ายกำกับ (ไม่บังคับ)"
+labelNameHelp = "บันทึกไว้พร้อมกับ ID เพื่อให้ผู้คนและเครื่องมือรู้จักป้ายกำกับ"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview แยกความแตกต่างระหว่างป้ายกำกับที่นโยบายใช้กับป้ายกำกับที่บุคคลเลือก"
+label = "วิธีบันทึกป้ายกำกับ"
+privileged = "ตามที่บุคคลเลือก"
+standard = "ตามที่ใช้โดยอัตโนมัติ"
+
+[portal.policies.config.purviewRead]
+label = "อ่านป้ายกำกับ Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "อ่านป้ายกำกับที่เอกสารมีอยู่แล้ว เพื่อให้ขั้นตอนถัดไปดำเนินการกับป้ายกำกับนั้นได้"
+
 [portal.policies.config.retention]
 summary = "บังคับใช้ระยะเวลาที่เก็บเอกสาร เวลาเก็บถาวร และเวลาลบ"
 
@@ -7438,6 +8064,7 @@ title = "ยังไม่มีกิจกรรม"
 [portal.policies.endpoints]
 addWatermark = "ลายน้ำ"
 autoRedact = "ปกปิด PII"
+classifyAndLabel = "จัดประเภท"
 compressPdf = "บีบอัด"
 flatten = "Flatten"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "นโยบายของคุณถูกบันทึก
 retry = "ลองอีกครั้ง"
 title = "Backend ไม่พร้อมใช้งาน"
 
+[portal.policies.operations]
+change = "เปลี่ยนสิ่งที่ขั้นตอนนี้ทำ"
+noResults = "ไม่มีขั้นตอนที่ตรงกัน ลองใช้ชื่อผลิตภัณฑ์ หรือ \"scan\", \"notify\", \"attach\""
+searchPlaceholder = "ค้นหาขั้นตอน - ลอง \"scan\", \"attach\" หรือชื่อผลิตภัณฑ์"
+
+[portal.policies.operations.bodyMode]
+binary = "ไบต์ไฟล์ดิบ"
+json = "ภายใน payload แบบ JSON"
+multipart = "เป็นการอัปโหลดไฟล์ (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "เซิร์ฟเวอร์ ClamAV ของคุณเองจะตรวจสอบเอกสาร ไม่มีอะไรออกจากเครือข่ายของคุณ"
+label = "สแกนไวรัส (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "ปฏิเสธเอกสารที่มี macros, executables, scripts หรือ embedded objects"
+label = "บล็อกเนื้อหาที่ทำงานได้"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive ตรวจสอบเอกสารและหยุดการรันหากเอกสารไม่สะอาด"
+label = "สแกนไวรัส"
+
+[portal.policies.operations.confluenceAttach]
+description = "จัดเก็บเอกสารที่ประมวลผลแล้วไว้บนหน้า"
+label = "แนบไปยังหน้า Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "ส่งเอกสารไปยัง ConsignO Cloud เพื่อลงนาม"
+label = "ส่งเพื่อลงนาม (ConsignO)"
+note = "ส่งเอกสาร ยังไม่รองรับการดึงสำเนาที่ลงนามแล้ว เนื่องจากขั้นตอนไม่สามารถส่งผลลัพธ์ไปยังขั้นตอนถัดไปได้"
+
+[portal.policies.operations.customApiCall]
+description = "กำหนดการเรียกด้วยตนเอง: path, method, body และการจัดการ response"
+label = "เรียก API แบบกำหนดเอง"
+
+[portal.policies.operations.discordNotify]
+description = "แจ้งช่องว่า นโยบายได้จัดการเอกสารแล้ว"
+label = "โพสต์ข้อความไปยัง Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "บันทึกสิ่งที่นโยบายทำเป็นเอกสารที่ค้นหาได้"
+label = "ทำดัชนี audit event ใน Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart เหมาะกับ API สำหรับอัปโหลด; JSON เหมาะกับ API ที่ต้องการไฟล์อยู่ภายใน payload; binary ส่งไบต์ดิบ"
+label = "วิธีส่งเอกสาร"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON body ที่ส่งตามเดิม {{document.base64}} มีไฟล์; {{document.*}} และ {{run.*}} จะถูกเติมต่อเอกสาร"
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "บัญชี"
+
+[portal.policies.operations.fields.domain]
+label = "โดเมน Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "ฟิลด์ในฟอร์มที่ API คาดว่าจะรับเอกสาร"
+label = "ชื่อฟิลด์ไฟล์"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "จาก"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "ออบเจ็กต์ JSON ของคู่ชื่อ/ค่า header ข้อมูลประจำตัวของการเชื่อมต่อจะถูกเพิ่มให้คุณ"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "ส่งเป็นเนื้อหาข้อความ {{document.*}} และ {{run.*}} จะถูกเติมต่อเอกสาร"
+label = "ข้อความ"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "ต่อท้าย base URL ของการเชื่อมต่อ ไม่สามารถไปถึงโฮสต์อื่นได้"
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "ตำแหน่งในไดรฟ์ที่จะเขียนไฟล์ {{document.filename}} จะถูกเติมต่อเอกสาร"
+label = "Path ปลายทาง"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "รายงานจะปล่อยเอกสารไว้ตามเดิม การแทนที่จะสลับเป็นสิ่งที่ตอบกลับมา"
+label = "สิ่งที่จะทำกับการตอบกลับ"
+
+[portal.policies.operations.fields.signerEmail]
+label = "อีเมลของผู้ลงนาม"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "หัวเรื่อง"
+placeholder = "ประมวลผลแล้ว: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio วิเคราะห์ข้อความนี้ ใช้ {{document.title}} หรือวางข้อความที่คุณต้องการตรวจสอบ"
+label = "ข้อความที่จะตรวจสอบ"
+
+[portal.policies.operations.fields.to]
+label = "ถึง"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "ชื่อผู้ใช้ Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "แจ้ง space ว่า นโยบายได้จัดการเอกสารแล้ว"
+label = "โพสต์ข้อความไปยัง Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "จัดเก็บเอกสารที่ประมวลผลแล้วไว้บน issue"
+label = "แนบไปยัง Jira issue"
+
+[portal.policies.operations.mailgunEmail]
+description = "ส่งเอกสารที่ประมวลผลแล้วเป็นไฟล์แนบ"
+label = "ส่งเอกสารทางอีเมล (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "เขียนเอกสารที่ประมวลผลแล้วลงในโฟลเดอร์"
+label = "อัปโหลดไปยัง Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "เซิร์ฟเวอร์ Presidio ของคุณเองรายงานข้อมูลส่วนบุคคลที่พบ"
+label = "ตรวจจับข้อมูลส่วนบุคคล"
+note = "Presidio อ่านข้อความ ไม่ใช่ไฟล์ ให้ข้อความที่คุณต้องการตรวจสอบ — เอกสารเองจะไม่ถูกอัปโหลด"
+
+[portal.policies.operations.responseMode]
+replace = "แทนที่เอกสารด้วยการตอบกลับ"
+report = "เก็บเอกสารไว้ บันทึกการตอบกลับ"
+
+[portal.policies.operations.sendgridEmail]
+description = "ส่งเอกสารที่ประมวลผลแล้วเป็นไฟล์แนบ"
+label = "ส่งเอกสารทางอีเมล (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "แจ้งช่องว่า นโยบายได้จัดการเอกสารแล้ว"
+label = "โพสต์ข้อความไปยัง Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "บันทึกสิ่งที่นโยบายทำ ในที่ที่ผู้ตรวจสอบของคุณดูอยู่แล้ว"
+label = "ส่ง audit event ไปยัง Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "บันทึกสิ่งที่นโยบายทำไปยัง HTTP collector"
+label = "ส่ง audit event ไปยัง Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "แจ้งช่องว่า นโยบายได้จัดการเอกสารแล้ว"
+label = "โพสต์ข้อความไปยัง Teams"
+
+[portal.policies.operations.webhookPost]
+description = "ส่งตัวเอกสารไปยัง URL ที่คุณเลือก"
+label = "โพสต์เอกสารไปยัง webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "ส่งรายละเอียดการรันให้ระบบอัตโนมัติของคุณ"
+label = "Trigger Zap หรือ Make scenario"
+
 [portal.policies.stats]
 activeFor = "ใช้งานอยู่"
 dataProcessed = "ข้อมูลที่ประมวลผลแล้ว"
@@ -7473,6 +8277,13 @@ label = "เอกสารที่บังคับใช้แล้ว"
 description = "กำหนดค่าแล้วแต่ยังไม่ทำงาน"
 label = "หยุดชั่วคราว"
 
+[portal.policies.table]
+appliesTo = "ใช้กับ"
+docs = "เอกสารที่บังคับใช้"
+enforces = "บังคับใช้"
+policy = "นโยบาย"
+status = "สถานะ"
+
 [portal.policies.wizard.actions]
 back = "ย้อนกลับ"
 cancel = "ยกเลิก"
@@ -7480,6 +8291,10 @@ continue = "ดำเนินการต่อ"
 enablePolicy = "เปิดใช้นโยบาย"
 saveChanges = "บันทึกการเปลี่ยนแปลง"
 
+[portal.policies.wizard.capability.classify]
+desc = "ระบุประเภทของเอกสารจากป้ายกำกับของทีมคุณและติดแท็ก เพื่อให้จัดเก็บและค้นหาตามหมวดหมู่ได้"
+label = "จัดประเภทเอกสาร"
+
 [portal.policies.wizard.capability.compress]
 desc = "บีบอัดเอกสารให้มีขนาดไฟล์เล็กลง"
 label = "ลดขนาดไฟล์"
@@ -7500,10 +8315,18 @@ label = "ปกปิดข้อมูลที่ละเอียดอ่
 desc = "ลบ JavaScript ที่ซ่อนอยู่เพื่อไม่ให้มีสิ่งใดทำงานอัตโนมัติเมื่อเปิดเอกสาร"
 label = "ลบเนื้อหาที่ทำงานได้"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "พิสูจน์ว่าเอกสารมีอยู่ในรูปแบบนี้อย่างแน่นอน ณ เวลาหนึ่ง โดยใช้หน่วยงาน timestamp อิสระ ส่งเฉพาะ hash - เอกสารไม่ออกจากเซิร์ฟเวอร์ของคุณ"
+label = "เพิ่ม timestamp ที่เชื่อถือได้"
+
 [portal.policies.wizard.capability.watermark]
 desc = "ประทับเครื่องหมายที่มองเห็นได้ (เช่น “Confidential”) บนทุกหน้า"
 label = "ใส่ลายน้ำ"
 
+[portal.policies.wizard.classification]
+description = "เอกสารที่อัปโหลดทุกฉบับจะถูกจัดประเภทตามป้ายกำกับในตัวและติดแท็กด้วยประเภทที่เหมาะสม ชุดป้ายกำกับนี้ใช้ร่วมกันทั้งทีมของคุณ"
+labelsHeading = "ป้ายกำกับการจัดประเภท"
+
 [portal.policies.wizard.errors]
 noTools = "เปิดใช้อย่างน้อยหนึ่งเครื่องมือในเวิร์กโฟลว์ก่อน"
 saveFailed = "ไม่สามารถบันทึกนโยบายได้ โปรดลองอีกครั้ง"
@@ -7548,73 +8371,118 @@ setUp = "ตั้งค่านโยบาย {{category}}"
 [portal.policies.wizard.workflow]
 description = "เลือกว่านโยบายนี้จะทำอะไรกับทุกเอกสารที่ประมวลผล"
 
-[portal.policySummary]
-activeSummary = "ใช้งานอยู่ {{active}} / {{total}}"
-noRule = "ยังไม่มีกฎที่บังคับใช้"
-subtitle = "ระบบอัตโนมัติถาวรที่ทุกเอกสารต้องผ่าน ไม่ว่าจะถูกจัดการโดย pipeline ใด"
-title = "สิ่งที่ทำงานกับ PDF ของคุณ"
-
 [portal.policySummary.action]
-comingSoon = "อัปเกรดเป็น Enterprise"
-configure = "กำหนดค่า"
 setUp = "ตั้งค่า"
 
-[portal.policySummary.column]
-activeRule = "กฎที่ใช้งานอยู่"
-policy = "นโยบาย"
-status = "สถานะ"
+[portal.processorFlow]
+footnote = "จำนวนเป็นของ 24 ชั่วโมงล่าสุด ความเร็วของ Flow เป็นเพียงภาพประกอบ"
+liveBadge = "Live"
+stats = "เชื่อมต่อ {{connected}} รายการ · ประมวลผล PDF แล้ว {{processed}} รายการ"
+title = "ตัวประมวลผล PDF"
 
-[portal.policySummary.empty]
-description = "เมื่อกำหนดค่านโยบายแล้ว หมวดหมู่จะปรากฏที่นี่"
-title = "ยังไม่มีนโยบาย"
+[portal.processorFlow.lens]
+ariaLabel = "โหมดการดู"
+flow = "Flow"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "ใช้งานอยู่"
-off = "ปิด"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 ชม."
+failed = "ล้มเหลว"
+heading = "ผลลัพธ์"
+success = "ส่งสำเร็จ"
+
+[portal.processorFlow.policies]
+activeCount = "ใช้งานอยู่ {{n}} รายการ"
+count = "{{n}} · 24 ชม."
+heading = "นโยบาย"
+setUp = "ตั้งค่า"
 soon = "เร็ว ๆ นี้"
 
-[portal.processingStatus]
-managePlan = "จัดการแผน"
-volumeSuffix = "PDFs ที่ประมวลผล · 30 วันที่ผ่านมา"
+[portal.processorFlow.sankey]
+waist = "นโยบาย · ใช้งานอยู่ {{n}} รายการ"
+
+[portal.processorFlow.sankey.empty]
+description = "เชื่อมต่อแหล่งที่มาและเปิดนโยบายเพื่อดูเอกสารไหลผ่านตัวประมวลผล"
+title = "ยังไม่มี Flow"
+
+[portal.processorFlow.sources]
+comingSoonTag = "เชื่อมต่อ"
+editor = "Stirling PDF Editor"
+heading = "แหล่งที่มา"
+perDay = "{{n}} / 24 ชม."
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "รับ Email"
 
 [portal.procurement]
-reset = "รีเซ็ตการจัดซื้อ (เดโม)"
 subtitle = "ให้ทีมของคุณได้รับการประเมิน ทำสัญญา และเริ่มใช้งาน ทุกเอกสารอยู่ในที่เดียว"
 title = "การจัดซื้อ"
 
-[portal.procurement.action]
-download = "ดาวน์โหลด"
-pay = "ชำระเงินตอนนี้"
-request = "ขอ"
-sign = "ตรวจสอบและลงนาม"
-upload = "อัปโหลด"
-
 [portal.procurement.agreement]
 agreeCta = "ยอมรับและสมัครใช้งาน"
+confidential = "ลับ"
 confirm = "ฉันได้อ่านและยอมรับ Stirling Enterprise Agreement แล้ว"
-eyebrow = "ข้อตกลง"
-intro = "ข้อตกลงรวมฉบับเดียวครอบคลุมดีลของคุณ: Master Service Agreement, Order Form, EULA และ Data Processing Agreement ตรวจสอบ จากนั้นยอมรับเพื่อรับใบเสนอราคาเข้าสู่การสมัครใช้งานที่มีข้อผูกพัน"
-title = "ตรวจสอบข้อตกลง enterprise ของคุณ"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA และ DPA รวมไว้ในการลงนามครั้งเดียว"
+download = "ดาวน์โหลด"
+downloadDraftError = "ไม่สามารถสร้าง PDF ข้อตกลงได้ - ตัวเรนเดอร์เอกสารไม่พร้อมใช้งาน โปรดลองอีกครั้งในอีกสักครู่หรือติดต่อฝ่ายสนับสนุน"
+downloadError = "ไม่สามารถดาวน์โหลดข้อตกลงที่ลงนามแล้วได้ โปรดลองอีกครั้ง"
+legalName = "ชื่อนิติบุคคล"
+legalNamePlaceholder = "นิติบุคคลที่จะลงนาม"
+loadError = "ไม่สามารถโหลดข้อตกลงได้ โปรดลองอีกครั้ง"
+loading = "กำลังโหลดข้อตกลง..."
+ref = "อ้างอิง {{ref}} · {{version}}"
+requestChanges = "ขอเปลี่ยนแปลง"
+scrollHint = "เลื่อนเพื่อตรวจทาน"
+signatory = "ชื่อผู้ลงนาม"
+signatoryPlaceholder = "ชื่อเต็ม"
+signatoryTitle = "ตำแหน่งผู้ลงนาม"
+signatoryTitlePlaceholder = "เช่น General Counsel"
+signError = "ไม่สามารถบันทึกลายเซ็นของคุณได้ โปรดลองอีกครั้ง"
 
 [portal.procurement.builder]
 addons = "ส่วนเสริม"
+addressLine1 = "ที่อยู่บรรทัด 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "ที่อยู่บรรทัด 2"
+addressLine2Placeholder = "ห้องชุด, ชั้น, อาคาร"
 back = "ย้อนกลับ"
 businessName = "ชื่อธุรกิจ"
 businessNamePlaceholder = "บริษัทของคุณ"
+city = "เมือง"
+cityPlaceholder = "San Francisco"
+completeRequired = "โปรดกรอกฟิลด์ที่จำเป็น (ทำเครื่องหมาย *) พร้อมอีเมลที่ถูกต้องก่อนสร้างใบเสนอราคา"
+contactEmail = "อีเมลติดต่อ"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "ชื่อผู้ติดต่อ"
+contactNamePlaceholder = "Jane Doe"
 continue = "ดำเนินการต่อ"
-country = "ประเทศ"
-countryEuro = "Eurozone (EUR €)"
-countryUK = "United Kingdom (GBP £)"
-countryUS = "United States (USD $)"
+done = "เสร็จสิ้น"
 eula = "ฉันได้อ่านและยอมรับ Stirling Enterprise EULA แล้ว ซึ่งควบคุมข้อตกลงที่สร้างจากใบเสนอราคานี้"
 generate = "สร้างใบเสนอราคา"
-included = "รวมแล้ว"
 indemnification = "การชดเชยความเสียหายด้าน IP"
 indemnificationSub = "เราปกป้องการเรียกร้องด้าน IP ที่เข้าเกณฑ์ ตาม EULA"
-offlineLicense = "licence แบบออฟไลน์ / air-gapped"
-offlineLicenseSub = "ไฟล์ licence ที่ดาวน์โหลดได้สำหรับ instance แบบ self-hosted ที่เป็น air-gapped"
+paperEyebrow = "ใบเสนอราคาสำหรับ Enterprise"
+paperFor = "จัดเตรียมสำหรับ"
+pdfSize = "ขนาด PDF"
+poNumber = "หมายเลข PO"
+poNumberPlaceholder = "ไม่บังคับ"
+postalCode = "รหัสไปรษณีย์"
+postalCodePlaceholder = "94105"
+posture = "การกำกับดูแล"
+posture_count = "~{{count}} นโยบาย"
+posture_essentials = "Essentials"
+posture_essentialsSub = "การจัดประเภท + การแชร์ — ค่าเริ่มต้น"
+posture_governed = "Governed"
+posture_governedSub = "เพิ่มความปลอดภัยและการกำหนดเส้นทาง"
+posture_regulated = "Regulated"
+posture_regulatedSub = "ทุกหมวดหมู่ — การปฏิบัติตามข้อกำหนด, การเก็บรักษา, การนำเข้า"
 qbr = "การทบทวนธุรกิจรายไตรมาส"
 qbrSub = "SE ของคุณจะทบทวนการใช้งานและ roadmap ทุกไตรมาส"
+region = "รัฐ / ภูมิภาค"
+regionPlaceholder = "California"
 running = "{{annual}} / ปี · {{years}} ปี {{tcv}}"
 s1Sub = "ทีมของคุณ และ PDFs ที่คุณคาดว่าจะเรียกใช้ในแต่ละปี"
 s1Title = "คุณจะประมวลผลมากแค่ไหน?"
@@ -7623,6 +8491,12 @@ s2Title = "ข้อผูกพันและบริการ"
 s3Sub = "สำหรับใบเสนอราคาและข้อตกลงที่สร้างขึ้น"
 s3Title = "รายละเอียดของคุณ"
 serviceLevel = "ระดับบริการ"
+size_compact = "Compact"
+size_compactSub = "ส่วนใหญ่เป็นข้อความ ต่ำกว่า 1 MB"
+size_heavy = "Heavy"
+size_heavySub = "สแกนหรือมีรูปภาพจำนวนมาก, 5 MB+"
+size_standard = "Standard"
+size_standardSub = "ข้อความและรูปภาพผสมกัน, 1 ถึง 5 MB"
 slDedicated = "เฉพาะทาง"
 slDedicatedSub = "4 ชั่วโมงทำการ · ผู้จัดการบัญชีเฉพาะ · +30%"
 slPriority = "ลำดับความสำคัญ"
@@ -7630,6 +8504,8 @@ slPrioritySub = "ภายในวันทำการเดียวกัน
 slStandard = "มาตรฐาน"
 slStandardSub = "วันทำการถัดไป · CSM ร่วม · รวมแล้ว"
 stepOf = "ขั้นตอน {{n}} จาก {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "ไม่บังคับ"
 term = "ระยะเวลา"
 termDiscount = "ใช้ส่วนลดข้อผูกพันหลายปี {{pct}}% แล้ว"
 title = "สร้างใบเสนอราคาของคุณ"
@@ -7637,6 +8513,7 @@ training = "การเริ่มใช้งานและการฝึ
 trainingSub = "เซสชันสดเพื่อให้ทีมของคุณเริ่มทำงานได้"
 users = "ผู้ใช้ทั้งหมด"
 usersPlaceholder = "เช่น 250"
+viewEula = "อ่าน"
 volEstimated = "ประมาณการจากผู้ใช้ {{count}} คน (~2,000 PDFs ต่อคน รวม automation) แก้ไขได้หากคุณมีตัวเลขที่ดีกว่า"
 volManual = "ใช้ตัวเลขของคุณ ประมาณการใหม่จากขนาดทีมของคุณได้ทุกเมื่อ"
 volNoUsers = "ไม่แน่ใจ? ป้อนขนาดทีมของคุณ แล้วเราจะประมาณการให้"
@@ -7645,55 +8522,55 @@ volumePlaceholder = "เช่น 1,000,000"
 years_one = "{{count}} ปี"
 years_other = "{{count}} ปี"
 
-[portal.procurement.docs]
-count_one = "{{count}} เอกสาร"
-count_other = "{{count}} เอกสาร"
-done = "เสร็จสิ้น"
-here = "คุณอยู่ที่นี่"
-hide = "ซ่อน"
-optional = "ไม่บังคับ"
-paidAddon = "ส่วนเสริมแบบชำระเงิน"
-show = "แสดง"
-subtitle = "ทุกสิ่งที่คุณต้องใช้ในแต่ละขั้นตอนของเส้นทาง จะแสดงขึ้นเมื่อดีลดำเนินไป"
-supportingSubtitle = "SOC 2, การทบทวนความปลอดภัย, แบบฟอร์มภาษี และอื่น ๆ พร้อมเมื่อทีมความปลอดภัยหรือจัดซื้อของคุณร้องขอ บางรายการมีค่าธรรมเนียมครั้งเดียว"
-supportingTitle = "สนับสนุนการประเมินของคุณ"
+[portal.procurement.documents]
+agreement = "ข้อตกลง Enterprise"
+agreementSub = "MSA, Order Form และ DPA ในการลงนามครั้งเดียว"
+download = "ดาวน์โหลด"
+eula = "EULA & Commercial Terms"
+eulaSub = "เงื่อนไขซอฟต์แวร์และการค้าแบบ self-serve"
+invoice = "ใบแจ้งหนี้"
+invoiceSub = "ใบแจ้งหนี้การสมัครสมาชิกฉบับแรกของคุณ"
+laterInvoice = "พร้อมใช้งานหลังจากคุณยอมรับ"
+laterQuote = "พร้อมใช้งานเมื่อออกใบเสนอราคาของคุณแล้ว"
+quote = "ใบเสนอราคา"
+quoteSub = "ใบเสนอราคา Enterprise แบบแยกรายการของคุณ"
+sla = "SLA Exhibit"
+slaSub = "ระดับการสนับสนุนและเป้าหมายเวลาตอบกลับ"
+subprocessors = "ผู้ประมวลผลย่อย"
+subprocessorsSub = "บุคคลที่สามที่ประมวลผลข้อมูลในนามของคุณ"
+subtitle = "เอกสารข้อตกลงของคุณ พร้อมใช้งานได้ทุกเมื่อ"
 title = "เอกสาร"
-upcoming = "กำลังจะมาถึง"
+view = "ดู"
 
 [portal.procurement.error]
 title = "มีบางอย่างผิดพลาด"
 
 [portal.procurement.hero]
-company = "ดีล enterprise ของคุณ"
+barAria = "ขั้นที่ {{current}} จาก {{total}}"
 ctaAgreement = "ตรวจสอบและลงนามข้อตกลง"
-ctaLive = "คุณใช้งานจริงแล้ว"
-ctaPayment = "เพิ่มการชำระเงิน"
+ctaExploring = "ตั้งค่าการทดลองใช้ของคุณ"
 ctaQuote = "ตรวจสอบใบเสนอราคาของคุณ"
+ctaReviewQuote = "ตรวจทานใบเสนอราคา"
 ctaTrial = "สร้างใบเสนอราคาของคุณ"
+documents = "เอกสาร"
 eyebrow = "การจัดซื้อ Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "เชิญเพื่อนร่วมทีม"
-keyDocs = "เอกสารสำคัญ"
-nextStep = "ขั้นตอนถัดไป: {{action}}"
-notStarted = "ยังไม่เริ่ม"
+licenseKey = "คีย์ใบอนุญาต"
+liveSub = "องค์กรของคุณได้รับการจัดเตรียมแล้ว และใบอนุญาตของคุณใช้งานอยู่"
+liveTitle = "คุณใช้งานจริงบน Stirling Enterprise แล้ว"
+next = "ถัดไป: {{stage}}"
 open = "เปิดการจัดซื้อ"
 scheduleCall = "นัดหมายการโทร"
-setup1Sub = "เชิญเพื่อนร่วมทีมของคุณ"
-setup1Title = "ปรับใช้ PDF Editor"
-setup2Sub = "เปิดการประมวลผลใน editor และแหล่งที่มาอื่น ๆ"
-setup2Title = "เชื่อมต่อ PDF Processor"
-setup3Sub = "เปิด Security, Compliance, Routing หรือ Retention เมื่อคุณต้องการ"
-setup3Title = "เพิ่มนโยบายที่แนะนำ"
+sentenceAgreement = "ตรวจทานและลงนามข้อตกลง"
+sentenceLive = "การจัดเตรียมและการเปิดใช้งาน"
+sentencePayment = "ใบสั่งซื้อและการชำระเงิน"
+sentenceQuote = "ตรวจทานและยอมรับใบเสนอราคาของคุณ"
+sentenceTrial = "ตั้งค่าพื้นที่ทำงานทดลองใช้ของคุณ"
 
 [portal.procurement.journey]
 daysLeft_one = "เหลือ {{count}} วัน"
 daysLeft_other = "เหลือ {{count}} วัน"
-engineerLabel = "solutions engineer ของคุณ"
-eyebrow = "การเปิดใช้งานของคุณ"
-live = "คุณใช้งานจริงบน Stirling Enterprise แล้ว"
-nextStep = "ขั้นตอนถัดไป: {{action}}"
-subtitle = "solutions engineer ของคุณอยู่ในทุกขั้นตอน ดำเนินการถัดไปทีละอย่าง; รายการตรวจสอบทั้งหมดอยู่ด้านล่าง"
-title = "จาก trial ถึงใช้งานจริง ในเส้นทางที่มีคำแนะนำเดียว"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "ลายเซ็นเดียวครอบคลุม MSA, order form, EULA และ DPA"
@@ -7727,6 +8604,9 @@ downloadError = "ยังไม่สามารถสร้างไฟล์
 downloadOffline = "ดาวน์โหลด licence ออฟไลน์ (.lic)"
 hint = "วางคีย์นี้ลงใน instance แบบ self-hosted เพื่อเปิดใช้งาน หรือเก็บไว้เป็นบันทึกของคุณ เก็บรักษาให้ปลอดภัย"
 label = "คีย์ licence ของคุณ"
+subtitle = "เปิดใช้งานอินสแตนซ์แบบ self-hosted ด้วยคีย์นี้ หรือเก็บไว้เป็นบันทึกของคุณ"
+title = "คีย์ใบอนุญาตของคุณ"
+trialFileHint = "นี่คือไฟล์ใบอนุญาตทดลองใช้ของคุณ เมื่อข้อตกลงของคุณพร้อมแล้ว ให้กลับมาดาวน์โหลดอีกครั้ง — ไฟล์ .lic จะไม่อัปเดตเอง ต่างจากคีย์ใบอนุญาตออนไลน์"
 
 [portal.procurement.link]
 cta = "เชื่อมโยงบัญชี"
@@ -7739,65 +8619,62 @@ description = "การสมัครใช้งานของคุณใ
 eyebrow = "ใช้งานจริง"
 title = "คุณใช้งานจริงบน Stirling Enterprise แล้ว"
 
-[portal.procurement.locked]
-description = "trial keys, ใบเสนอราคาตามปริมาณที่มีข้อผูกพัน, ข้อตกลงลายเซ็นเดียว, การชำระเงิน และบัญชีเอกสารของคุณทั้งหมดอยู่ที่นี่เมื่อคุณเริ่มการประเมิน enterprise"
-eyebrow = "Enterprise เท่านั้น"
-talkToSales = "คุยกับฝ่ายขาย"
-title = "เส้นทางการจัดซื้อเปิดด้วย Enterprise"
-
 [portal.procurement.milestone]
-accept = "ยอมรับและดำเนินการต่อ"
-description = "ดาวน์โหลด PDF เพื่อแชร์กับทีมของคุณ กลับมายอมรับเมื่อคุณพร้อม หรือทำการเปลี่ยนแปลง"
-download = "ดาวน์โหลด PDF"
 downloadError = "ยังไม่สามารถดาวน์โหลด PDF ใบเสนอราคาได้ — โปรดลองอีกครั้งในอีกสักครู่"
-edit = "แก้ไขใบเสนอราคา"
-eyebrow = "ใบเสนอราคา {{number}}"
-perYear = " / ปี"
-preparedFor = "จัดทำสำหรับ {{company}}"
-tcv = "มูลค่าสัญญารวม {{value}}"
-title = "ใบเสนอราคาของคุณพร้อมแล้ว"
-
-[portal.procurement.modal]
-cancel = "ยกเลิก"
-chooseFile = "เลือกไฟล์"
-close = "ปิด"
-downloadBody = "การดาวน์โหลดของคุณจะเริ่มในไม่ช้า"
-downloadCta = "ดาวน์โหลด"
-downloadTitle = "ดาวน์โหลด"
-noFile = "ไม่ได้เลือกไฟล์"
-payBody = "ชำระสัญญาที่มีข้อผูกพันของคุณด้วยบัตรหรือโอนเงินผ่านธนาคารผ่าน Stripe workspace ของคุณจะถูกจัดเตรียมทันทีที่การชำระเงินเคลียร์"
-payCta = "ดำเนินการต่อไปยัง Stripe"
-payTitle = "ยืนยันการชำระเงิน"
-requestBodyFree = "เราสร้างสิ่งนี้ตามคำขอ ยืนยันแล้ว solutions engineer ของคุณจะส่งให้ในไม่ช้า"
-requestBodyPaid = "นี่คือส่วนเสริมแบบชำระเงิน ยืนยันแล้ว solutions engineer ของคุณจะกำหนดขอบเขตและส่งเอกสารให้"
-requestCta = "ขอ"
-requestTitle = "ขอเอกสารนี้"
-signBody = "เปิด Stirling Enterprise Agreement สำหรับ e-signature: ลายเซ็นเดียวครอบคลุม MSA, order form, EULA และ DPA เราจะลงนามคู่สัญญาโดยอัตโนมัติและคุณจะไปต่อยังการชำระเงิน"
-signCta = "เปิดเพื่อลงนาม"
-signTitle = "ตรวจสอบและลงนามข้อตกลงของคุณ"
-uploadBody = "ส่ง PO ของคุณให้เรา แล้วเราจะออกใบแจ้งหนี้ตามเงื่อนไขของคุณ ลาก PDF เข้ามาหรือเลือกไฟล์ด้านล่าง"
-uploadCta = "อัปโหลดใบสั่งซื้อ"
-uploadTitle = "อัปโหลดใบสั่งซื้อของคุณ"
 
 [portal.procurement.payment]
 description = "ใบเสนอราคาของคุณได้รับการยอมรับแล้วและ licence ของคุณใช้งานอยู่แล้ว — ทีมของคุณเริ่มได้ทันที ชำระใบแจ้งหนี้แรกเมื่อคุณพร้อม; คุณสามารถชำระหรือดาวน์โหลดได้ที่นี่ ไม่ต้องใช้อีเมล"
+downloadAgreement = "ดาวน์โหลดข้อตกลงที่ลงนามแล้ว"
 downloadInvoice = "ดาวน์โหลดใบแจ้งหนี้"
-simulate = "จำลองว่าได้รับการชำระเงินแล้ว (เดโม)"
+eyebrow = "การชำระเงิน"
 title = "สร้างการสมัครใช้งานแล้ว"
 viewInvoice = "ดูและชำระใบแจ้งหนี้"
 
+[portal.procurement.review]
+acceptCta = "ยอมรับใบเสนอราคา"
+annual = "ค่าธรรมเนียมรายปี (ปีที่ 1)"
+downloadCta = "ดาวน์โหลดใบเสนอราคา"
+poNumber = "ใบสั่งซื้อ: {{po}}"
+renewal = "ต่ออายุที่ {{amount}}/ปี หลังหมดระยะเวลา (+{{pct}}% CPI)"
+tcv = "ระยะเวลา {{years}} ปี ชำระเต็มจำนวนล่วงหน้า: {{tcv}}"
+validUntil = "ใช้ได้ถึง {{date}}"
+
 [portal.procurement.schedule]
 fallback = "ไม่สามารถโหลดตัวจัดตารางเวลาได้"
 fallbackLink = "เปิดการจัดตารางเวลาในแท็บใหม่"
+loading = "กำลังโหลด scheduler..."
 subtitle = "solutions engineer ของคุณจะแนะนำทีมของคุณตลอดการเปิดใช้งาน เลือกเวลาที่เหมาะกับคุณ"
 title = "นัดหมายการโทร"
 
-[portal.procurement.status]
-action = "ต้องดำเนินการ"
-available = "พร้อมใช้งาน"
-complete = "เสร็จสมบูรณ์"
-pending = "รอดำเนินการ"
-request = "ตามคำขอ"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "ปิดแยก ไม่มีการเชื่อมต่อขาออก"
+back = "ย้อนกลับ"
+businessName = "ชื่อธุรกิจ"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "จัดการให้ เริ่มต้นเร็วที่สุด"
+continue = "ดำเนินการต่อ"
+deployment = "ควร deploy ที่ไหน?"
+eula = "ฉันยอมรับ Stirling EULA & Commercial Terms"
+fullName = "ชื่อเต็ม"
+fullNamePlaceholder = "ชื่อของคุณ"
+invites = "เชิญเพื่อนร่วมทีม · ไม่บังคับ"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "นัดหมายการโทร"
+seats = "ผู้ทดสอบ"
+seatsPlaceholder = "เช่น 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker หรือ Kubernetes"
+start = "เริ่มทดลองใช้"
+stepOf = "ขั้นตอน {{n}} จาก {{total}}"
+subtitle = "ฟรี 14 วัน ไม่ต้องใช้บัตร"
+subtitleDetails = "รายละเอียดเล็กน้อยสำหรับใบเสนอราคาและข้อตกลงของคุณ"
+talkFirst = "ต้องการพูดคุยก่อนหรือไม่?"
+title = "ตั้งค่าการทดลองใช้ของคุณ"
+viewEula = "อ่าน"
+workEmail = "อีเมลที่ทำงาน"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "การขยายเวลาจะเพิ่ม 7 วันและแจ้ง solutions engineer ของคุณ"
@@ -7808,20 +8685,6 @@ maxed = "ถึงขีดจำกัดแล้ว"
 subtitle = "trial ฟรีของคุณใช้งานได้ถึง {{date}} ไม่ต้องใช้บัตร"
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "ราคาตามปริมาณที่มีข้อผูกพัน, SSO + SCIM + RBAC ทั่วทั้งองค์กร, audit ที่แก้ไขไม่ได้ 90 วัน และ SE เฉพาะ"
-homeCta = "เริ่ม Trial →"
-homeHeadline = "ประมวลผล PDFs หลายล้านไฟล์"
-
-[portal.recentActivity]
-title = "กิจกรรมล่าสุด"
-viewAll = "ดูทั้งหมด"
-
-[portal.recentActivity.empty]
-description = "การเรียกใช้ pipeline, การ deploy และเหตุการณ์ agent จะปรากฏที่นี่"
-title = "ยังไม่มีอะไรที่นี่"
-
 [portal.search]
 ariaLabel = "ค้นหา"
 placeholder = "ค้นหา Stirling — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Admin"
 [portal.settings.sections]
 account-link = "การเชื่อมโยงบัญชี"
 
-[portal.shell.header]
-accountFallback = "บัญชี"
-accountMenu = "เมนูบัญชี"
-darkMode = "โหมดมืด"
-lightMode = "โหมดสว่าง"
-search = "ค้นหา"
-searchPlaceholder = "ค้นหา…"
-signOut = "ออกจากระบบ"
-switchToDark = "เปลี่ยนเป็นธีมมืด"
-switchToLight = "เปลี่ยนเป็นธีมสว่าง"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} เอกสาร"
 linkAccount = "เชื่อมโยงบัญชี Stirling"
-planEditor = "แผน Editor"
-planEnterprise = "แผน Enterprise"
-planProcessor = "แผน Processor"
 primaryNav = "การนำทางหลัก"
 switchApp = "สลับแอป"
 
+[portal.shell.topbar]
+closeNav = "ปิดการนำทาง"
+openNav = "เปิดการนำทาง"
+search = "ค้นหา"
+
 [portal.sources]
 subtitle = "การเชื่อมต่ออินพุตที่ใช้ซ้ำได้ซึ่งส่งเอกสารเข้าสู่ Stirling กำหนดค่าการเชื่อมต่อครั้งเดียว แล้วอ้างอิงจากนโยบายกี่รายการก็ได้ คลิกแถวเพื่อดูการกำหนดค่าและนโยบายที่ใช้งาน"
 title = "แหล่งที่มา"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "เชื่อมต่อแหล่งที่มา"
 
+[portal.sources.builder]
+back = "กลับไปยังแหล่งที่มา"
+backToTypes = "ประเภทแหล่งที่มาทั้งหมด"
+cancel = "ยกเลิก"
+chooseHint = "เลือกแหล่งที่มาของเอกสาร คอนเน็กเตอร์ที่เป็นสีเทากำลังจะมา"
+comingSoon = "เร็ว ๆ นี้"
+comingSoonHeading = "เร็ว ๆ นี้"
+create = "สร้างแหล่งที่มา"
+createTitle = "เชื่อมต่อแหล่งที่มา"
+delete = "ลบ"
+editTitle = "แก้ไขแหล่งที่มา"
+enabled = "เปิดใช้งาน"
+save = "บันทึกการเปลี่ยนแปลง"
+
+[portal.sources.builder.folderAccess]
+description = "ระบบอัตโนมัติของโฟลเดอร์สามารถใช้ได้เฉพาะโฟลเดอร์ที่ผู้ดูแลระบบอนุญาต เพิ่มในส่วนการตั้งค่าการเข้าถึงโฟลเดอร์ แล้วลองอีกครั้ง"
+openSettings = "การตั้งค่าการเข้าถึงโฟลเดอร์"
+title = "โฟลเดอร์นี้ไม่ได้รับอนุญาต"
+
 [portal.sources.delete]
 body = "ลบ \"{{name}}\" หรือไม่? การดำเนินการนี้ไม่สามารถย้อนกลับได้ นโยบายที่อ้างอิงถึงรายการนี้จะต้องได้รับการอัปเดต"
 cancel = "ยกเลิก"
 confirm = "ลบ"
 title = "ลบแหล่งที่มาหรือไม่?"
 
-[portal.sources.detail]
-closeAriaLabel = "ปิดรายละเอียด"
-delete = "ลบแหล่งที่มา"
-docs24h = "24 ชม. ล่าสุด"
-docs30d = "30 วันที่ผ่านมา"
-docsTotal = "พบทั้งหมด"
-docsTrend = "เอกสารในช่วง 30 วันที่ผ่านมา"
-documents = "เอกสาร"
-edit = "แก้ไข"
-notReferenced = "ไม่มีนโยบายใดอ้างอิงถึง จึงลบได้อย่างปลอดภัย"
-pause = "หยุดชั่วคราว"
-resume = "ทำต่อ"
-subtitle = "{{type}} · {{status}}"
-usedBy = "ใช้งานโดย"
-
 [portal.sources.empty]
 description = "เชื่อมต่อโฟลเดอร์ (และเร็ว ๆ นี้ cloud storage) เพื่อให้นโยบายของคุณมีที่สำหรับดึงเอกสาร"
 title = "ยังไม่มีแหล่งที่มาที่เชื่อมต่อ"
@@ -7899,18 +8754,57 @@ inUse = "กำลังใช้งาน"
 total = "การเชื่อมต่อ"
 unused = "ไม่ได้ใช้งาน"
 
+[portal.sources.networkFields.connection]
+helperText = "การเชื่อมต่อที่จัดเก็บไว้พร้อมที่อยู่เซิร์ฟเวอร์และข้อมูลประจำตัว ใช้ซ้ำโดยทุกแหล่งที่มาที่อ้างอิงถึง"
+label = "การเชื่อมต่อ"
+
+[portal.sources.networkFields.directory]
+helperText = "โฟลเดอร์บนเซิร์ฟเวอร์ที่จะตรวจสอบ สัมพันธ์กับโฮมของการเข้าสู่ระบบหรือรูทของแชร์ เว้นว่างสำหรับรูท"
+label = "โฟลเดอร์"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume จะลบแต่ละไฟล์ออกจากเซิร์ฟเวอร์เมื่อทุกนโยบายประมวลผลแล้ว"
+label = "โหมดการอ่าน"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: ประมวลผลแต่ละไฟล์ครั้งเดียว"
+snapshot = "Snapshot: อ่านโฟลเดอร์ซ้ำทุกครั้งที่รัน"
+
+[portal.sources.networkFields.recursive]
+label = "ความลึกของโฟลเดอร์"
+
+[portal.sources.networkFields.recursive.options]
+all = "รวมโฟลเดอร์ย่อย"
+top = "เฉพาะระดับบนสุด"
+
 [portal.sources.status]
 active = "ใช้งานอยู่"
 disabled = "ปิดใช้งาน"
 unused = "ไม่ได้ใช้งาน"
 
 [portal.sources.table]
+documents = "เอกสาร"
 source = "แหล่งที่มา"
 status = "สถานะ"
 usedBy = "นโยบาย"
 
+[portal.sources.types.box]
+description = "ดึงเอกสารจากโฟลเดอร์ Box ที่ทีมของคุณแชร์อยู่แล้ว"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "ดึงเอกสารจากโฟลเดอร์ Dropbox ที่แชร์"
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "เอกสารที่ทีมของคุณประมวลผลใน editor ครอบคลุมการรันนโยบายและ AI"
 label = "Editor"
+noPolicies = "ยังไม่มีนโยบายที่รันจาก editor"
+
+[portal.sources.types.email]
+description = "เปลี่ยนไฟล์แนบที่ส่งไปยังกล่องจดหมายเฉพาะให้เป็นเอกสาร"
+label = "กล่องจดหมาย Email"
 
 [portal.sources.types.folder]
 description = "เฝ้าดูไดเรกทอรีบนเซิร์ฟเวอร์สำหรับเอกสารใหม่"
@@ -7943,25 +8837,80 @@ label = "ความลึกของโฟลเดอร์"
 all = "รวมโฟลเดอร์ย่อย"
 top = "เฉพาะระดับบนสุด"
 
+[portal.sources.types.ftp]
+description = "ตรวจสอบโฟลเดอร์เซิร์ฟเวอร์ FTP หรือ FTPS เพื่อหาเอกสารใหม่"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "ดึงเอกสารจากโฟลเดอร์ Google Drive ที่แชร์"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "เฝ้าดู SMB network share เพื่อหาเอกสารใหม่"
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "เฝ้าดูโฟลเดอร์ OneDrive เพื่อหาเอกสารใหม่"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "ดึงเอกสารจาก Amazon S3 หรือ bucket ที่เข้ากันได้กับ S3"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "การเชื่อมต่อที่จัดเก็บไว้ซึ่งมี bucket และข้อมูลประจำตัว ใช้ซ้ำโดยทุกแหล่งที่มาและเอาต์พุตไปป์ไลน์ที่อ้างอิงถึง"
+label = "การเชื่อมต่อ"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume จะลบแต่ละ object ออกจาก bucket เมื่อทุกนโยบายประมวลผลแล้ว"
+label = "โหมดการอ่าน"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: ประมวลผลแต่ละ object ครั้งเดียว"
+snapshot = "Snapshot: อ่าน bucket ซ้ำทุกครั้งที่รัน"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "ประมวลผลเฉพาะ object ที่ key เริ่มต้นด้วย prefix นี้"
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "ตรวจสอบโฟลเดอร์รับส่ง SFTP เพื่อหาเอกสารใหม่"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "ดึงเอกสารจาก SharePoint document libraries"
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "แหล่งที่มา"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL และ signing secret จะถูกสร้างเมื่อคุณสร้าง webhook นี้ ผู้ส่ง POST เอกสารไปยัง URL นั้น และนโยบายที่อ้างอิงจะรันเมื่อมาถึง"
+description = "รับเอกสารด้วย HTTP POST ที่ลงนามแล้วจากระบบภายนอกใดก็ได้"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Signing secret จะแสดงหนึ่งครั้งเมื่อสร้าง webhook สร้างแหล่งที่มาใหม่เพื่อหมุนเวียน"
+
+[portal.sources.types.webhook.reveal]
+copy = "คัดลอก"
+done = "เสร็จสิ้น"
+secret = "Signing secret"
+secretHelp = "ลงนาม raw body ของแต่ละ delivery ด้วยคีย์นี้ (HMAC-SHA256) แล้วส่งเป็น X-Stirling-Signature header"
+secretWarning = "คัดลอก signing secret ตอนนี้ เพื่อความปลอดภัยของคุณ จะแสดงเพียงครั้งเดียวและไม่สามารถเรียกคืนได้ภายหลัง"
+title = "สร้าง Webhook แล้ว"
+url = "Delivery URL"
+usage = "POST เอกสารแต่ละฉบับเป็น raw request body ไปยัง Delivery URL ด้วย binary content type (application/pdf หรือ application/octet-stream) นโยบายที่อ้างอิงจะรันโดยอัตโนมัติเมื่อมาถึง"
+
 [portal.sources.wizard]
-back = "ย้อนกลับ"
-cancel = "ยกเลิก"
-continue = "ดำเนินการต่อ"
-editTitle = "แก้ไขแหล่งที่มา"
 name = "ชื่อ"
 namePlaceholder = "เช่น Claims intake"
-save = "บันทึกการเปลี่ยนแปลง"
-subtitle = "ขั้นตอน {{current}} จาก {{total}} · {{label}}"
-title = "เชื่อมต่อแหล่งที่มา"
 type = "ประเภท"
 
-[portal.sources.wizard.steps]
-chooseType = "เลือกประเภท"
-configure = "กำหนดค่า"
-review = "ตรวจสอบและเชื่อมต่อ"
+[portal.stepModal]
+close = "ปิด"
 
 [portal.usage]
 managePayment = "จัดการการชำระเงิน"
@@ -8021,16 +8970,9 @@ summary = "เป็นเจ้าของทีม — จัดการท
 2 = "เข้าถึง portal ผ่านนโยบายเริ่มต้น"
 3 = "ทุกอย่างที่ Member ทำได้"
 
-[portal.welcome]
-ariaLabel = "ยินดีต้อนรับสู่ Stirling PDF"
-badge = "Open-source"
-installEditor = "ติดตั้ง Editor"
-inviteTeammates = "เชิญเพื่อนร่วมทีม"
-openInBrowser = "เปิดในเบราว์เซอร์"
-perks = "ฟรีตลอดไป · Self-hostable"
-subtitle = "PDF Editor ที่ปลอดภัยที่สุดในโลกใช้ฟรีสำหรับทีมทุกขนาด รวมการดำเนินการ PDF มากกว่า 60 รายการและ SSO"
-title = "ยินดีต้อนรับสู่"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · ไม่จำกัด"
 
 [printFile]
 title = "พิมพ์ไฟล์"
@@ -8613,6 +9555,14 @@ text = "หมุนหน้าของ PDF ตามหรือทวนเ
 [rotate.tooltip.header]
 title = "ภาพรวมการตั้งค่าการหมุน"
 
+[ruler]
+clearAll = "ล้างทั้งหมด"
+hideAllLabels = "ซ่อนป้ายกำกับทั้งหมด"
+hideSmallLabels = "ซ่อนป้ายกำกับขนาดเล็ก"
+physicalValues = "ค่าจริง"
+scaled = "ปรับสเกลแล้ว"
+showAllLabels = "แสดงป้ายกำกับทั้งหมด"
+
 [sanitize]
 desc = "ลบองค์ประกอบที่อาจเป็นอันตรายออกจากไฟล์ PDF"
 sanitizationResults = "ผลการทำให้ปลอดภัย"
@@ -8654,31 +9604,45 @@ label = "เอา XMP Metadata ออก"
 [sanitize.steps]
 settings = "การตั้งค่า"
 
-[sanitizePdf]
-tags = "ทำความสะอาด, ปลอดภัย, ปลอดภัย, ลบภัยคุกคาม"
-
 [sanitizePDF]
 title = "ทำความสะอาด PDF"
 
+[sanitizePdf]
+tags = "ทำความสะอาด, ปลอดภัย, ปลอดภัย, ลบภัยคุกคาม"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "ปรับสเกลหน้า"
 
+[scaleSettings]
+activeScale = "สเกลที่ใช้งานอยู่"
+apply = "ใช้สเกล"
+applyCalibration = "ใช้การปรับเทียบ"
+calculatedScale = "สเกลที่คำนวณได้"
+calibrate = "ปรับเทียบ"
+calibrating = "กำลังปรับเทียบ"
+calibrationDistanceRequired = "ป้อนระยะทางจริงที่มากกว่าศูนย์"
+calibrationInvalid = "ไม่สามารถคำนวณมาตราส่วนจากการวัดนี้ได้"
+calibrationPaperDistance = "ระยะทางบนหน้าที่วัดได้: {{distance}}"
+calibrationTitle = "ปรับเทียบมาตราส่วน"
+calibrationTooltip = "วัดระยะทางที่ทราบเพื่อคำนวณมาตราส่วนโดยอัตโนมัติ"
+customScale = "มาตราส่วนกำหนดเอง"
+noneSet = "ยังไม่ได้ตั้งค่ามาตราส่วนกำหนดเอง"
+presets = "มาตราส่วนที่ตั้งไว้ล่วงหน้า"
+ratio = "อัตราส่วนมาตราส่วน"
+ratioHelp = "อัตราส่วน: 1 หน่วยหน้า = X หน่วยจริง"
+ratioPlaceholder = "เช่น 100"
+ratioPositive = "อัตราส่วนต้องมากกว่าศูนย์"
+ratioRequired = "จำเป็นต้องมีอัตราส่วน"
+realDistance = "ระยะทางจริง"
+realDistancePlaceholder = "เช่น 5"
+reset = "รีเซ็ตเป็นค่าเริ่มต้น"
+unit = "หน่วย"
+unitInvalid = "หน่วยไม่ถูกต้อง: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "เกณฑ์มุม:"
-10 = "ตั้งค่าขนาดขอบที่เพิ่มและลบเพื่อป้องกันขอบขาวในผลลัพธ์ (ค่าเริ่มต้น: 1)"
-2 = "ตั้งค่ามุมขั้นต่ำที่จำเป็นสำหรับการหมุนภาพ (ค่าเริ่มต้น: 10)"
-3 = "ความอดทน:"
-4 = "กำหนดช่วงความแตกต่างของสีรอบสีพื้นหลังที่คาดคะเน (ค่าเริ่มต้น: 30)"
-5 = "พื้นที่ขั้นต่ำ:"
-6 = "ตั้งค่าเกณฑ์พื้นที่ขั้นต่ำสำหรับรูปภาพ (ค่าเริ่มต้น: 10000)"
-7 = "พื้นที่เค้าโครงขั้นต่ำ:"
-8 = "ตั้งค่าเกณฑ์พื้นที่เค้าโครงขั้นต่ำสำหรับรูปภาพ"
-9 = "ขนาดขอบ:"
-
 [scannerImageSplit]
 submit = "แยกรูปภาพสแกน"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "ทำอะไร"
 whatThisDoesDesc = "ค้นหาและดึงรูปถ่ายแต่ละรูปจากหน้าที่สแกนหรือภาพรวมโดยอัตโนมัติ—ไม่ต้องครอปเอง"
 whenToUse = "ควรใช้เมื่อใด"
 
+[ScannerImageSplit.selectText]
+1 = "เกณฑ์มุม:"
+10 = "ตั้งค่าขนาดขอบที่เพิ่มและลบเพื่อป้องกันขอบขาวในผลลัพธ์ (ค่าเริ่มต้น: 1)"
+2 = "ตั้งค่ามุมขั้นต่ำที่จำเป็นสำหรับการหมุนภาพ (ค่าเริ่มต้น: 10)"
+3 = "ความอดทน:"
+4 = "กำหนดช่วงความแตกต่างของสีรอบสีพื้นหลังที่คาดคะเน (ค่าเริ่มต้น: 30)"
+5 = "พื้นที่ขั้นต่ำ:"
+6 = "ตั้งค่าเกณฑ์พื้นที่ขั้นต่ำสำหรับรูปภาพ (ค่าเริ่มต้น: 10000)"
+7 = "พื้นที่เค้าโครงขั้นต่ำ:"
+8 = "ตั้งค่าเกณฑ์พื้นที่เค้าโครงขั้นต่ำสำหรับรูปภาพ"
+9 = "ขนาดขอบ:"
+
 [search]
 noResults = "ไม่พบผลลัพธ์"
 placeholder = "ป้อนคำค้นหา..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "เซิร์ฟเวอร์ Stirling-PDF ขอ
 [session]
 expired = "สถานะของคุณในระบบหมดอายุ กรุณารีเฟรชหน้าและลองใหม่อีกครั้ง"
 
-[sessionManagement.tooltip]
-header = "การจัดการเซสชันการลงนาม"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "ผู้เข้าร่วมใหม่จะถูกเพิ่มไว้ท้ายลำดับการลงนาม"
-bullet2 = "ไม่สามารถเพิ่มผู้เข้าร่วมหลังจากสรุปผลเซสชันแล้ว"
-bullet3 = "ผู้เข้าร่วมแต่ละคนจะได้รับการแจ้งเตือนเมื่อถึงคิวของตน"
-description = "คุณสามารถเพิ่มผู้เข้าร่วมเพิ่มเติมในเซสชันที่ใช้งานได้ทุกเมื่อก่อนการสรุปผล"
-title = "การเพิ่มผู้เข้าร่วม"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>สรุปผลเต็มรูปแบบ</b>: ผู้เข้าร่วมทั้งหมดได้ลงนามแล้ว"
-bullet2 = "<b>สรุปผลบางส่วน</b>: บางคนยังไม่ได้ลงนาม"
-bullet3 = "ผู้เข้าร่วมที่ยังไม่ลงนามจะถูกตัดออกจากเอกสารสุดท้าย"
-bullet4 = "เมื่อสรุปผลแล้ว คุณสามารถโหลด PDF ที่ลงนามแล้วไปยังไฟล์ที่ใช้งานอยู่ได้"
-description = "การสรุปผลจะรวมลายเซ็นทั้งหมดเข้าเป็น PDF ที่ลงนามฉบับเดียว การดำเนินการนี้ไม่สามารถย้อนกลับได้"
-title = "การสรุปผลเซสชัน"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "ไม่สามารถลบผู้เข้าร่วมที่ได้ลงนามแล้ว"
-bullet2 = "ผู้ที่ถูกลบจะไม่ได้รับการแจ้งเตือนอีก"
-bullet3 = "ลำดับการลงนามจะปรับโดยอัตโนมัติ"
-description = "สามารถลบผู้เข้าร่วมออกจากเซสชันได้ก่อนที่พวกเขาจะลงนาม"
-title = "การลบผู้เข้าร่วม"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "แต่ละลายเซ็นจะถูกใช้กับ PDF ตามลำดับ"
-bullet2 = "ผู้ลงนามภายหลังสามารถเห็นลายเซ็นก่อนหน้าได้"
-bullet3 = "สำคัญสำหรับเวิร์กโฟลว์การอนุมัติและการส่งมอบตามสายโซ่ทางกฎหมาย"
-description = "ลำดับที่คุณกำหนดเมื่อสร้างเซสชันจะกำหนดว่าใครลงนามก่อน"
-title = "ลำดับลายเซ็น"
-
 [settings]
 close = "ปิด"
 
+[settings.ai]
+documents = "เอกสารและ RAG"
+general = "ทั่วไป"
+limits = "ขีดจำกัดและประสิทธิภาพ"
+models = "โมเดลและผู้ให้บริการ"
+title = "AI"
+
 [settings.configuration]
 advanced = "ขั้นสูง"
 database = "ฐานข้อมูล"
 endpoints = "Endpoints"
 features = "ฟีเจอร์"
+folderAccess = "การเข้าถึงโฟลเดอร์"
 mcp = "MCP Server"
 storageSharing = "การจัดเก็บไฟล์และการแชร์"
 systemSettings = "การตั้งค่าระบบ"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "โปรแกรมแก้ไข PDF เริ่มต
 defaultPdfEditorActive = "Stirling PDF เป็นโปรแกรมแก้ไข PDF เริ่มต้นของคุณ"
 defaultPdfEditorChecking = "กำลังตรวจสอบ..."
 defaultPdfEditorInactive = "มีแอปอื่นตั้งเป็นค่าเริ่มต้น"
+defaultPdfEditorRemind = "เตือนให้ตั้งเป็นค่าเริ่มต้น"
+defaultPdfEditorRemindDescription = "แสดงแบนเนอร์เมื่อ Stirling PDF ไม่ใช่แอปพลิเคชัน PDF เริ่มต้นของคุณ"
 defaultPdfEditorSet = "เป็นค่าเริ่มต้นอยู่แล้ว"
 defaultStartupView = "มุมมองเริ่มต้นเมื่อเปิดแอป"
 defaultStartupViewDescription = "เลือกแท็บที่ใช้งานในคอลัมน์ซ้ายเมื่อแอปเริ่มทำงาน"
@@ -8817,9 +9771,18 @@ languageDescription = "เลือกภาษาที่แสดง"
 logout = "ออกจากระบบ"
 setAsDefault = "ตั้งเป็นค่าเริ่มต้น"
 theme = "ธีม"
+themeAccent = "สีเน้น"
+themeAccentCustom = "สีกำหนดเอง"
+themeAccentCustomHint = "กำหนดเอง (แนะนำค่าเริ่มต้น)"
+themeAccentDark = "สีเน้นโหมดมืด"
+themeAccentDefault = "ค่าเริ่มต้น"
+themeAccentDefaultHint = "ธีมเริ่มต้น (แนะนำ)"
+themeAccentDescription = "ปุ่ม ลิงก์ และไฮไลต์จะใช้สีนี้ และจะเติมโทนสีให้แอปอย่างละเอียดอ่อน โหมดสว่างและมืดมีสีของตนเอง ระบบจะใช้สีใดก็ตามที่ใช้งานอยู่"
+themeAccentLight = "สีเน้นโหมดสว่าง"
 themeDark = "มืด"
 themeDescription = "สลับระหว่างโหมดสว่างและมืด"
 themeLight = "สว่าง"
+themeReset = "คืนค่าธีมเป็นค่าเริ่มต้น"
 themeSystem = "System"
 title = "ทั่วไป"
 user = "ผู้ใช้"
@@ -8833,6 +9796,12 @@ intro = "เปิดใช้การยืนยันตัวตนผู
 learnMore = "เรียนรู้เพิ่มเติมในเอกสาร"
 title = "สำหรับผู้ดูแลระบบ"
 
+[settings.general.loginLanding]
+description = "เลือกแอปที่จะเปิดเมื่อคุณลงชื่อเข้าใช้ Stirling Cloud"
+editor = "ตัวแก้ไข"
+processor = "ตัวประมวลผล"
+title = "หลังจากลงชื่อเข้าใช้"
+
 [settings.general.mode]
 fullscreen = "เต็มหน้าจอ"
 sidebar = "แถบด้านข้าง"
@@ -9041,6 +10010,11 @@ security = "ความปลอดภัย"
 telegram = "Telegram"
 title = "ความปลอดภัยและการยืนยันตัวตน"
 
+[settings.signOut]
+confirm = "คุณแน่ใจหรือไม่ว่าต้องการลงชื่อออก?"
+submit = "ลงชื่อออก"
+title = "ลงชื่อออก"
+
 [settings.team]
 title = "ทีม"
 
@@ -9657,6 +10631,9 @@ uploadButton = "อัปโหลดไปยังเซิร์ฟเวอ
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "คลิกที่นี่"
+fallback = "หากไม่ได้เปิดโดยอัตโนมัติ"
+opening = "กำลังเปิด Swagger UI ในแท็บใหม่..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "เอกสาร API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "เลือกไฟล์ในไฟล์ที่ใช
 singleFileScope = "ใช้เฉพาะกับ: {{fileName}}"
 viewerMode = "สลับไปที่ตัวแก้ไขไฟล์เพื่อเลือกหลายไฟล์"
 
+[toolFormat]
+ANY = "ไฟล์ใดก็ได้"
+CBR = "ไฟล์เก็บถาวรหนังสือการ์ตูน (CBR)"
+CBZ = "ไฟล์เก็บถาวรหนังสือการ์ตูน (CBZ)"
+CSV = "ไฟล์ CSV"
+EBOOK = "อีบุ๊ก"
+EMAIL = "อีเมล"
+EXCEL = "สเปรดชีต"
+HTML = "หน้าเว็บ"
+IMAGE = "รูปภาพ"
+JAVASCRIPT = "ไฟล์ JavaScript"
+JSON = "ไฟล์ JSON"
+MARKDOWN = "ไฟล์ Markdown"
+NONE = "ไม่มีไฟล์"
+PCL = "ไฟล์พิมพ์ PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF ที่ป้องกันด้วยรหัสผ่าน"
+POSTSCRIPT = "ไฟล์ PostScript"
+PPT = "งานนำเสนอ"
+TEXT = "ไฟล์ข้อความ"
+VIDEO = "วิดีโอ"
+WORD = "เอกสาร Word"
+XML = "ไฟล์ XML"
+XPS = "เอกสาร XPS"
+ZIP = "ไฟล์เก็บถาวร ZIP"
+
 [toolPanel]
 alpha = "อัลฟา"
 backToAllTools = "กลับไปที่เครื่องมือทั้งหมด"
 collapse = "ยุบแผง"
 expand = "ขยายแผง"
 goBack = "ย้อนกลับ"
+pdfTools = "เครื่องมือ PDF"
 placeholder = "เลือกเครื่องมือเพื่อเริ่มต้น"
 premiumFeature = "ฟีเจอร์พรีเมียม:"
+searchTools = "ค้นหาเครื่องมือ"
 toolsHeader = "เครื่องมือ"
 viewAllTools = "ดูเครื่องมือทั้งหมด"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "ไม่พบเครื่องมือ"
 quickAccess = "เข้าถึงด่วน"
 searchPlaceholder = "ค้นหาเครื่องมือ..."
 
-[toolPicker.categories]
-advancedTools = "เครื่องมือขั้นสูง"
-recommendedTools = "เครื่องมือแนะนำ"
-standardTools = "เครื่องมือมาตรฐาน"
-
 [toolPicker.subcategories]
 advancedFormatting = "การจัดรูปแบบขั้นสูง"
 automation = "การทำงานอัตโนมัติ"
@@ -9950,16 +10950,31 @@ title = "ผู้ใช้"
 you = "(คุณ)"
 
 [users.action]
+cancelInvite = "ยกเลิกคำเชิญ"
 deleteTeam = "ลบทีม"
 disableMfa = "รีเซ็ต MFA"
 move = "ย้ายไปยังทีม"
 reinstate = "คืนสถานะ"
 remove = "ลบออกจากองค์กร"
+removeTeam = "นำออกจากทีม"
 rename = "เปลี่ยนชื่อทีม"
 resetPw = "รีเซ็ตรหัสผ่าน"
 suspend = "ระงับ"
 unlock = "ปลดล็อกบัญชี"
 
+[users.activity]
+daysAgo = "{{count}} วันก่อน"
+hoursAgo = "{{count}} ชั่วโมงก่อน"
+justNow = "เมื่อสักครู่"
+minutesAgo = "{{count}} นาทีก่อน"
+monthsAgo_one = "{{count}} เดือนก่อน"
+monthsAgo_other = "{{count}} เดือนก่อน"
+never = "ไม่เคย"
+weeksAgo_one = "{{count}} สัปดาห์ก่อน"
+weeksAgo_other = "{{count}} สัปดาห์ก่อน"
+yearsAgo_one = "{{count}} ปีก่อน"
+yearsAgo_other = "{{count}} ปีก่อน"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "อนุมัตินโยบาย"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "ยกเลิกคำเชิญไปยัง {{email}}? พวกเขาจะไม่สามารถเข้าร่วมด้วยลิงก์ปัจจุบันได้"
+cancelInviteTitle = "ยกเลิกคำเชิญ"
 deleteTeamBody = "ลบทีม {{name}} หรือไม่? ทีมต้องว่างก่อน - ย้ายสมาชิกไปยังทีมอื่น และต้องไม่ยังเป็นเจ้าของการกำหนดค่า integration ใด ๆ"
 deleteTeamTitle = "ลบทีม"
 disableMfaBody = "ลบการลงทะเบียน MFA ของ {{name}} หรือไม่? พวกเขาจะตั้งค่าอีกครั้งในการเข้าสู่ระบบครั้งถัดไปหากจำเป็น"
 disableMfaTitle = "รีเซ็ต MFA"
 removeBody = "ลบ {{name}} ออกจากองค์กรอย่างถาวรหรือไม่? การดำเนินการนี้ไม่สามารถย้อนกลับได้"
+removeTeamBody = "นำ {{name}} ออกจากทีมหรือไม่? ผู้ใช้จะยังคงมีบัญชีอยู่ แต่จะเสียสิทธิ์เข้าถึงทรัพยากรของทีมนี้"
 removeTitle = "ลบสมาชิก"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "ชื่อผู้ใช้"
 usernameError = "ชื่อผู้ใช้ต้องมีอย่างน้อย 3 อักขระ"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "เชิญโดย {{who}}"
+cancel = "ยกเลิก"
+count = "รอดำเนินการ {{count}} รายการ"
+desc = "ผู้ที่ได้รับเชิญแต่ยังไม่ได้เข้าร่วม พวกเขาจะถูกนับเป็นหนึ่งที่นั่งจนกว่าจะยอมรับ"
+expiresInDays_one = "หมดอายุใน {{count}} วัน"
+expiresInDays_other = "หมดอายุใน {{count}} วัน"
+expiresToday = "หมดอายุวันนี้"
+title = "คำเชิญที่รอดำเนินการ"
+
 [users.loadError]
 description = "เกิดข้อผิดพลาดในการติดต่อ backend หรือคุณไม่มีสิทธิ์เข้าถึง ลองอีกครั้ง"
 title = "ไม่สามารถโหลดสมาชิกได้"
@@ -10212,9 +11240,11 @@ title = "ไฟล์แนบ"
 
 [viewer.bookmarks]
 bookmarkTitle = "ชื่อบุ๊กมาร์ก"
+bookmarkTitleRequired = "จำเป็นต้องมีชื่อบุ๊กมาร์ก"
 closeSidebar = "ปิดแถบด้านข้างบุ๊กมาร์ก"
 collapseAll = "ยุบบุ๊กมาร์กทั้งหมด"
 expandAll = "ขยายบุ๊กมาร์กทั้งหมด"
+searchPlaceholder = "ค้นหาบุ๊กมาร์ก"
 
 [viewer.comments]
 addComment = "เพิ่มความคิดเห็น"
@@ -10605,30 +11635,6 @@ title = "ข้อความลายน้ำ"
 image = "รูปภาพ"
 text = "ข้อความ"
 
-[wetSignature.tooltip]
-header = "วิธีการสร้างลายเซ็น"
-
-[wetSignature.tooltip.draw]
-bullet1 = "ปรับแต่งสีและความหนาของปากกา"
-bullet2 = "ลบและวาดใหม่ได้จนกว่าจะพอใจ"
-bullet3 = "ใช้งานได้บนอุปกรณ์สัมผัส (แท็บเล็ต โทรศัพท์)"
-description = "สร้างลายเซ็นลายมือโดยใช้เมาส์หรือหน้าจอสัมผัส เหมาะที่สุดสำหรับลายเซ็นส่วนบุคคลที่เป็นธรรมชาติ"
-title = "วาดลายเซ็น"
-
-[wetSignature.tooltip.type]
-bullet1 = "เลือกจากหลายฟอนต์"
-bullet2 = "ปรับแต่งขนาดและสีของข้อความ"
-bullet3 = "เหมาะสำหรับลายเซ็นแบบมาตรฐาน"
-description = "สร้างลายเซ็นจากข้อความที่พิมพ์ รวดเร็วและสม่ำเสมอ เหมาะกับเอกสารทางธุรกิจ"
-title = "พิมพ์ลายเซ็น"
-
-[wetSignature.tooltip.upload]
-bullet1 = "รองรับ PNG, JPG และรูปแบบภาพอื่นๆ"
-bullet2 = "แนะนำให้ใช้ภาพพื้นหลังโปร่งใสเพื่อผลลัพธ์ที่ดีที่สุด"
-bullet3 = "รูปภาพจะถูกปรับขนาดให้พอดีกับพื้นที่ลายเซ็น"
-description = "อัปโหลดรูปภาพลายเซ็นที่สร้างไว้แล้ว เหมาะอย่างยิ่งหากคุณมีลายเซ็นที่สแกนไว้หรือโลโก้บริษัท"
-title = "อัปโหลดรูปภาพลายเซ็น"
-
 [workbenchBar]
 activeFiles = "ไฟล์ที่ใช้งานอยู่"
 annotations = "คำอธิบายประกอบ"
@@ -10652,6 +11658,7 @@ redact = "ปกปิดข้อมูล"
 rotateLeft = "หมุนซ้าย"
 rotateRight = "หมุนขวา"
 ruler = "ไม้บรรทัด / วัดระยะ"
+rulerSettings = "การตั้งค่ามาตราส่วน"
 save = "บันทึก"
 saveAll = "บันทึกทั้งหมด"
 saveAs = "บันทึกเป็น"
diff --git a/frontend/editor/public/locales/tr-TR/translation.toml b/frontend/editor/public/locales/tr-TR/translation.toml
index 6c9031be44..1842088fbe 100644
--- a/frontend/editor/public/locales/tr-TR/translation.toml
+++ b/frontend/editor/public/locales/tr-TR/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "dosya seçildi"
 font = "Yazı tipi"
 fontSizeTooltip = "Sayfa numarası metninin punto cinsinden boyutu. Daha büyük sayılar daha büyük metin oluşturur."
 fontTypeTooltip = "Sayfa numaraları için yazı tipi ailesi. Belgenizin stiline göre seçin."
-genericSubmit = "Gönder"
 green = "Yeşil"
 help = "Yardım"
-imgPrompt = "Resim(leri) seçin"
 incorrectPasswordMessage = "Mevcut şifre yanlış."
 info = "Bilgi"
 invalidUndoData = "Geri alma yapılamıyor: geçersiz işlem verisi"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Giriş Sözleşmesi"
 logOut = "Oturumu kapat"
 marginTooltip = "Sayfa numarası ile sayfa kenarı arasındaki mesafe."
 moreOptions = "Daha Fazla Seçenek"
-multiPdfPrompt = "PDFleri seçin (2+)"
 never = "Asla"
 no = "Hayır"
 noFileSelected = "Hiçbir dosya seçilmedi. Lütfen bir dosya yükleyin."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Özel Sayfa Sırası (Virgülle ayrılmış sayfa numaraları
 pages = "Sayfalar"
 pageSelectionPrompt = "Özel Sayfa Seçimi (1,5,6 sayfa numaralarının virgülle ayrılmış bir listesini veya 2n+1 gibi bir fonksiyon girin) :"
 password = "Parola"
-pdfPrompt = "PDF(leri) seçin"
 pin = "Dosyayı Sabitle (araç çalıştıktan sonra etkin tut)"
 pro = "Pro"
 processingComplete = "Dosyanız hazır."
@@ -356,6 +352,7 @@ text = "Bu izinler, kullanıcıların PDF ile neler yapabileceğini kontrol eder
 title = "İzinleri Değiştir"
 
 [addStamp]
+preview = "Damgayı Önizle"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Manuel indirmeler: bağlantılara tıklayın ve dosyaları tessda
 noLanguages = "Yapılandırılan dizinde tessdata dili bulunamadı."
 permissionNotice = "tessdata yolu yazılabilir değil. İndirmeler tarayıcıda açılacak; lütfen .traineddata dosyalarını elle tessdata klasörüne kaydedin."
 
+[admin.settings.ai.documents]
+description = "Belgeler üzerinden soruları yanıtlamak için kullanılan embedding modelini ve getirme ayarlarını yapılandırın. Kaydedildiğinde AI engine'e uygulanır."
+title = "Belgeler ve RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Engine'in kendi ortam kimlik bilgisini kullanmak için boş bırakın. Kendi barındırılan tek engine dağıtımları için geçerlidir."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Kaydedildi - geçerli key'i korumak için boş bırakın"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI uyumlu / Ollama embeddings endpoint'inin temel URL'si, örn. http://ollama:11434/v1. Güvenilir bir dahili endpoint'e işaret etmelidir (SSRF açısından hassas)."
+label = "Embedding temel URL'si"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Embedding model adı. Serbest metin; öneriler yalnızca ipucudur."
+label = "Embedding model"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Belge metnini vektör embedding'lere dönüştürmek için kullanılan sağlayıcı."
+label = "Embedding sağlayıcısı"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Agent'ın istek başına çalıştırabileceği maksimum getirme araması sayısı."
+label = "Maksimum arama"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Embedding modelini değiştirmek hemen etkili olur, ancak önceki modelle indekslenen belgelerin aramada doğru sonuçlar döndürmesi için yeniden indekslenmesi gerekir."
+title = "Yeniden indeksleme gerekli"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Embedding modelini değiştirdiyseniz, aramanın yeni modeli kullanması için mevcut belgeleri yeniden indeksleyin."
+
+[admin.settings.ai.documents.topK]
+description = "Arama başına getirilen en alakalı parça sayısı."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Stirling'i Python AI engine'e bağlayın ve hangi AI özelliklerinin sunulacağını seçin. Değişiklikler yeniden başlatmada uygulanır."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Tek tek AI özelliklerini açın veya kapatın. Devre dışı bırakılan özellikler uygulamada gizlenir."
+title = "Yetenekler"
+
+[admin.settings.ai.general.enabled]
+description = "Ana anahtar. Kapalıyken hiçbir AI aracı, agent veya engine çağrısı kullanılamaz."
+label = "AI'ı etkinleştir"
+
+[admin.settings.ai.general.features.chat]
+description = "PDF'lerle çalışmak için konuşmaya dayalı asistan."
+label = "Sohbet asistanı"
+
+[admin.settings.ai.general.features.classify]
+description = "Belgeleri türüne veya içeriğine göre otomatik olarak kategorize edin."
+label = "Belge sınıflandırma"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Bir AI agent aracılığıyla yeni bir PDF oluşturun (örn. HTML'den)."
+label = "Komuttan PDF oluştur"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Yüklenen bir belgeye dayalı sorular sorun ve yanıtlar alın."
+label = "Belge soruları"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Belgeleri matematiksel ve sayısal hatalar açısından inceleyin."
+label = "Matematik denetçisi"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Bir PDF'ye AI tarafından yazılmış inceleme yorumları ve ek açıklamalar ekleyin."
+label = "PDF yorum agent'ı"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Belge oluşturma gibi daha ağır agent işlemleri için zaman aşımı."
+label = "Uzun süreli zaman aşımı (saniye)"
+
+[admin.settings.ai.general.note]
+body = "AI engine ayrı bir hizmet olarak çalışır. Paylaşılan sırrı"
+body2 = "bir container ortam değişkeni aracılığıyla ayarlanır. Sağlayıcı API key'leri bu sayfalara girilebilir veya engine ortam değişkenleri olarak sağlanabilir; buraya girilen key'ler kaydedildiğinde engine'e gönderilir."
+title = "AI engine hakkında"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Akış halinde (token token) sohbet yanıtları için zaman aşımı."
+label = "Akış zaman aşımı (saniye)"
+
+[admin.settings.ai.general.test]
+button = "Bağlantıyı test et"
+failBody = "AI engine yanıt vermedi. URL'yi, engine container'ının çalıştığını ve AI'ın etkin olduğunu kontrol edin (etkinleştirdikten sonra yeniden başlatma gerekir)."
+failTitle = "AI engine'e ulaşılamıyor"
+okBody = "AI engine sağlık kontrolüne yanıt verdi."
+okTitle = "AI engine'e ulaşılabiliyor"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Engine'e yapılan standart AI istekleri için zaman aşımı."
+label = "İstek zaman aşımı (saniye)"
+
+[admin.settings.ai.general.url]
+description = "Python AI engine'in dahili URL'si, örn. http://stirling-pdf-engine:5001."
+label = "AI engine URL'si"
+
+[admin.settings.ai.limits]
+description = "AI isteklerinin ne kadar iş yapabileceği ve kaçının eş zamanlı çalışabileceği için koruma sınırları. Kaydedildiğinde AI engine'e uygulanır."
+title = "Sınırlar ve Performans"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Koruma sınırı: çıkarılan metni bu uzunluğu aşan AI isteklerini reddet."
+label = "İstek başına maksimum karakter"
+
+[admin.settings.ai.limits.maxPages]
+description = "Koruma sınırı: bu kadar PDF sayfasını aşan AI isteklerini reddet."
+label = "İstek başına maksimum sayfa"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Tüm engine genelinde aynı anda devam eden maksimum model çağrısı sayısı."
+label = "Model maksimum eş zamanlılık"
+
+[admin.settings.ai.models]
+description = "AI engine'in kullandığı LLM sağlayıcısını ve akıllı/hızlı modelleri seçin. Kaydedildiğinde AI engine'e uygulanır."
+title = "Modeller ve Sağlayıcılar"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Engine'in kendi ortam kimlik bilgisini kullanmak için boş bırakın. Kendi barındırılan tek engine dağıtımları için geçerlidir."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Kaydedildi - geçerli key'i korumak için boş bırakın"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI uyumlu / Ollama endpoint'inin temel URL'si, örn. http://ollama:11434/v1."
+label = "Sağlayıcı temel URL'si"
+warning = "Temel URL güvenilir bir dahili endpoint'e işaret etmelidir. Engine bu adrese sunucu tarafı istekleri yapacaktır, bu nedenle güvenilmeyen bir değer SSRF açısından hassastır."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Hızlı model için maksimum çıktı token'ları."
+label = "Hızlı model maksimum token"
+
+[admin.settings.ai.models.fastModel]
+description = "Hafif görevler için daha ucuz, daha hızlı model. Serbest metin; öneriler yalnızca ipucudur."
+label = "Hızlı model"
+
+[admin.settings.ai.models.provider]
+description = "Engine'in hangi LLM sağlayıcısıyla konuşacağı."
+label = "Sağlayıcı"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Akıllı model için maksimum çıktı token'ları."
+label = "Akıllı model maksimum token"
+
+[admin.settings.ai.models.smartModel]
+description = "Karmaşık akıl yürütme için yüksek yetenekli model. Serbest metin; öneriler yalnızca ipucudur."
+label = "Akıllı model"
+
+[admin.settings.ai.saved]
+body = "Değişiklikler otomatik olarak AI engine'e gönderildi."
+bodyNoPush = "Ayarlar kaydedildi. AI engine yapılandırmasını bir sonraki aldığında uygulanacak."
+title = "AI ayarları kaydedildi"
+
 [admin.settings.badge]
 clickToUpgrade = "Plan ayrıntılarını görmek için tıklayın"
 
@@ -938,6 +1094,25 @@ label = "Başlangıçta Yeniden Oluştur"
 description = "Sertifikanın geçerli olacağı gün sayısı"
 label = "Sertifika Geçerliliği (gün)"
 
+[admin.settings.folderAccess]
+description = "Klasör kaynaklarının ve klasör çıktılarının okuma ve yazma izni olan dizinler. Bu bir güvenlik sınırıdır: otomasyonlar asla bu listenin dışındaki bir sunucu yoluna yönlendirilemez."
+securityNote = "Klasör kaynaklarını ve çıktılarını tamamen devre dışı bırakmak için bunu boş bırakın. Stirling'in kendi yapılandırma dizini her zaman erişime kapalıdır."
+title = "Klasör Erişimi"
+
+[admin.settings.folderAccess.implied]
+description = "Stirling tarafından yönetilen bu dizinlere her zaman izin verilir ve burada değiştirilemez."
+serverStorage = "Sunucu dosya depolama"
+title = "Her zaman izinli"
+watchedFolder = "Pipeline izlenen klasör"
+
+[admin.settings.folderAccess.roots]
+add = "Ekle"
+empty = "İzin verilen klasör yok. Klasör kaynakları ve çıktıları şu anda devre dışı."
+hint = "Mutlak yollar girin, örneğin /data/inbox."
+label = "İzin verilen klasör kökleri"
+placeholder = "/data/inbox"
+remove = "Klasör kökünü kaldır"
+
 [admin.settings.general]
 description = "Markalaşma ve varsayılan davranış dahil olmak üzere sistem genelinde uygulama ayarlarını yapılandırın."
 system = "Sistem"
@@ -1842,6 +2017,15 @@ export = "Dışa Aktar"
 accessDenied = "Erişim Reddedildi"
 insufficientPermissions = "Bu işlemi gerçekleştirmek için izniniz yok."
 
+[auth.callback]
+completing = "Kimlik doğrulama tamamlanıyor"
+invalidToken = "OAuth oturum açma başarısız - geçersiz token."
+missingToken = "OAuth oturum açma başarısız - token alınmadı."
+oauthFailed = "OAuth oturum açma başarısız. Lütfen tekrar deneyin."
+pleaseWait = "Oturum açmanızı tamamlarken lütfen bekleyin."
+signedOut = "Oturumunuz kapatıldı. Lütfen tekrar oturum açın."
+windowMayClose = "Tamamlandığında bu pencereyi kapatabilirsiniz."
+
 [auth.displayName]
 guest = "Konuk"
 user = "Kullanıcı"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "JavaScript ve gömülü dosyalar gibi potansiyel olarak k
 description = "Bu araç, PDF dosyalarını içeriklerine göre otomatik olarak yeniden adlandırır. Metinden en uygun başlığı bulmak için belgeyi analiz eder."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Otomatik Döndür"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Güven eşiği"
+
+[autoRotate.detectionMode]
+auto = "Otomatik"
+osd = "Yalnızca OCR"
+text = "Yalnızca metin"
+title = "Algılama yöntemi"
+
+[autoRotate.error]
+failed = "PDF otomatik döndürülürken bir hata oluştu."
+
+[autoRotate.inferUndetected]
+title = "Düşük güvenli sayfaları eşleşecek şekilde döndür"
+
+[autoRotate.report]
+applied = "{{degrees}}° saat yönünde"
+confidenceValue = "Güven {{value}}"
+noChange = "Değişiklik yok"
+pageLabel = "Sayfa {{number}}"
+summary = "{{total}} sayfanın {{rotated}} tanesi döndürüldü, {{unchanged}} tanesi olduğu gibi bırakıldı"
+title = "Algılama raporu"
+
+[autoRotate.report.method]
+inferred = "Eşleştirildi"
+none = "Atlandı"
+osd = "OCR"
+text = "Metin"
+
+[autoRotate.report.note]
+belowThreshold = "Eşiğin altında"
+blankPage = "Sayfa boş"
+inferredFromDocument = "Diğer sayfalarla aynı"
+noDominantDirection = "Karışık metin yönleri"
+osdFailed = "Okunabilir metin bulunamadı"
+osdNoVerdict = "Hangi yönün yukarı olduğu belirlenemedi"
+tesseractUnavailable = "OCR yüklü değil"
+tooFewGlyphs = "Çok az metin"
+
+[autoRotate.results]
+title = "Otomatik Döndürme Sonuçları"
+
+[autoRotate.settings]
+title = "Ayarlar"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Bir sayfanın döndürülmeden önce kontrolün ne kadar emin olması gerektiği. Daha fazla sayfayı döndürmek için düşürün, daha fazla sayfayı dokunulmadan bırakmak için yükseltin."
+title = "Güven eşiği"
+
+[autoRotate.tooltip.description]
+text = "Her sayfanın hangi yönünün yukarı olması gerektiğini belirler ve doğru yöne döndürür. Zaten dik olan sayfalar olduğu gibi bırakılır."
+
+[autoRotate.tooltip.detectionMode]
+text = "Otomatik önce sayfadaki metni okur, bu yeterli değilse sayfaya görüntü olarak bakar. Yalnızca metin, hiç taranmamış belgeler için en hızlı olan görüntü kontrolünü atlar. Yalnızca OCR her sayfayı görüntü olarak ele alır."
+title = "Algılama yöntemi"
+
+[autoRotate.tooltip.header]
+title = "Otomatik Döndür"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Boş veya neredeyse boş sayfalar tek başına kontrol edilemez. Okunabilen her sayfa aynı dönüşe ihtiyaç duyduğunda, bu sayfalar onlarla eşleşecek şekilde döndürülür."
+title = "Düşük güvenli sayfaları eşleşecek şekilde döndür"
+
 [autoSizeSplitPDF]
 tags = "pdf,bölme,belge,organizasyon"
 
@@ -2189,33 +2440,6 @@ keywords = "Anahtar kelimeler: odd, even"
 numbers = "Sayılar/aralıklar: 5, 10-20"
 progressions = "İlerlemeler: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Sertifika Türleri"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Sistem yöneticileri tarafından yönetilir"
-bullet2 = "Yetkili kullanıcılar arasında paylaşılır"
-bullet3 = "Şirket kimliğini temsil eder, bireyi değil"
-bullet4 = "En uygun: Resmi belgeler, ekip imzaları"
-description = "Kuruluşunuz tarafından sağlanan paylaşılan bir sertifika. Şirket çapında imzalama yetkisi için kullanılır."
-title = "Kuruluş Sertifikası"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "İlk kullanımda otomatik oluşturulur"
-bullet2 = "Kullanıcı hesabınıza bağlıdır"
-bullet3 = "Diğer kullanıcılarla paylaşılamaz"
-bullet4 = "En uygun: Kişisel belgeler, bireysel sorumluluk"
-description = "Kullanıcı hesabınıza özgü otomatik oluşturulmuş bir sertifika. Bireysel imzalar için uygundur."
-title = "Kişisel Sertifika"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "P12/PFX dosyası ve parola gerektirir"
-bullet2 = "Harici Sertifika Otoriteleri tarafından verilebilir"
-bullet3 = "Hukuki belgeler için daha yüksek güven seviyesi"
-bullet4 = "En uygun: Hukuken bağlayıcı sözleşmeler, harici doğrulama"
-description = "Kendi PKCS#12 sertifika dosyanızı kullanın. Sertifika özellikleri üzerinde tam kontrol sağlar."
-title = "Özel P12 Yükle"
-
 [certSign]
 awaitingSignatures = "İmzalar bekleniyor"
 chooseCertificate = "Sertifika Dosyası Seç"
@@ -2542,34 +2766,6 @@ server = "Sunucu"
 stepTitle = "Sertifika kaynağı"
 upload = "Yükle"
 
-[certSign.tooltip.header]
-title = "İmzaları Yönetme Hakkında"
-
-[certSign.tooltip.overview]
-bullet1 = "Mevcut imzaları ve geçerliliklerini kontrol edin"
-bullet2 = "İmzalayanlar ve sertifikalar hakkında ayrıntılı bilgileri görüntüleyin"
-bullet3 = "Belgelerinize yeni dijital imzalar ekleyerek güvence sağlayın"
-bullet4 = "Kolay gezinme ile birden çok dosya desteklenir"
-text = "Bu araç, PDF'lerinizin dijital olarak imzalı olup olmadığını kontrol etmenizi ve yeni dijital imzalar eklemenizi sağlar. Dijital imzalar, bir belgenin kimin tarafından oluşturulduğunu veya onaylandığını kanıtlar ve imzalandıktan sonra değiştirilip değiştirilmediğini gösterir."
-title = "Bu araç ne yapabilir?"
-
-[certSign.tooltip.signing]
-bullet1 = "PEM, PKCS12, JKS ve sunucu sertifika biçimlerini destekler"
-bullet2 = "PDF üzerinde imzayı gösterme veya gizleme seçeneği"
-bullet3 = "Neden, konum ve imzalayan adını ekleyin"
-bullet4 = "Görünür imzaların hangi sayfaya yerleştirileceğini seçin"
-bullet5 = "Basit 'Stirling PDF ile İmzala' seçeneği için sunucu sertifikasını kullanın"
-text = "Bir PDF'yi imzalamak için dijital bir sertifikaya (PEM, PKCS12 veya JKS gibi) ihtiyacınız vardır. İmzayı belgede görünür yapmayı veya yalnızca güvenlik için görünmez tutmayı seçebilirsiniz."
-title = "İmza Ekleme"
-
-[certSign.tooltip.validation]
-bullet1 = "İmzaların geçerli mi geçersiz mi olduğunu gösterir"
-bullet2 = "İmzalayan bilgilerini ve imzalama tarihini görüntüler"
-bullet3 = "Belgenin imzadan sonra değiştirilip değiştirilmediğini kontrol eder"
-bullet4 = "Doğrulama için özel sertifikalar kullanılabilir"
-text = "İmzaları kontrol ettiğinizde, araç bunların geçerli olup olmadığını, belgenin kimin tarafından imzalandığını, ne zaman imzalandığını ve imzadan sonra belgenin değiştirilip değiştirilmediğini size bildirir."
-title = "İmzaları Kontrol Etme"
-
 [changeCreds]
 changeUsername = "Kullanıcı adınızı güncelleyin. Güncellemeden sonra oturumunuz kapatılacak."
 credsUpdated = "Hesap güncellendi"
@@ -2824,6 +3020,7 @@ next = "Sonraki"
 preview = "Önizleme"
 previous = "Önceki"
 refresh = "Yenile"
+remaining = "Kalan"
 retry = "Yeniden dene"
 save = "Kaydet"
 
@@ -3264,24 +3461,6 @@ description = "Bu çerezler, web sitesinin düzgün çalışabilmesi için gerek
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Gelişmiş izleme"
-allInOneWorkspace = "Tümü bir arada PDF çalışma alanı (görüntüleyici, araçlar ve ajan)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Özel destek ve SLA'lar"
-fasterThroughput = "10 kat daha hızlı işleme hızı"
-fullyPrivateFiles = "Tamamen özel dosyalar"
-largeFileProcessing = "Büyük dosya işleme"
-orgWideAccess = "Kuruluş genelinde erişim kontrolleri"
-premiumAiModels = "Premium AI modelleri"
-prioritySupport = "Öncelikli destek"
-privateDocCloud = "Özel Belge Bulutu"
-ragFineTuning = "RAG + ince ayar"
-secureApiAccess = "Güvenli API erişimi"
-standardThroughput = "Standart işleme hızı"
-unlimitedApiAccess = "Sınırsız API erişimi"
-unlimitedSeats = "Sınırsız kullanıcı"
-
 [crop]
 autoCrop = "Boşlukları otomatik kırp"
 noFileSelected = "Kırpmaya başlamak için bir PDF seçin"
@@ -3346,6 +3525,7 @@ message = "Varsayılan PDF işleyicisi ayarlanamadı"
 title = "Hata"
 
 [defaultApp.prompt]
+dontRemind = "Bana tekrar hatırlatma"
 message = "PDF dosyalarını açmak için varsayılan uygulamanız Stirling PDF olsun."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Grupları özelleştir"
 dropHint = "Başlamak için dosya açın"
 dropToAdd = "Drop files to add"
 expand = "Kenar çubuğunu genişlet"
-files = "Dosyalar"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive yapılandırılmamış"
 leaveMyFiles = "Dosyalarımdan çık"
+library = "PDF Kitaplığı"
 myFiles = "Dosyalarım"
 noFiles = "Henüz dosya yok"
 openFileManager = "Dosya yöneticisini aç"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Ekle"
-addLabel = "Etiket ekle…"
-categoryIconAria = "{{name}} için bir simge seç"
-createCategory = "Kategori oluştur"
-delete = "Kategoriyi sil"
 done = "Bitti"
-hide = "Kategoriyi gizle"
-newCategory = "Yeni kategori adı…"
-removeLabel = "{{name}} etiketini kaldır"
-rename = "Yeniden adlandır"
 reset = "Varsayılanlara sıfırla"
-search = "Etiket ara…"
-show = "Kategoriyi göster"
 subtitle = "Dosyalarınızı üst kategoriler halinde gruplandırın. Bir kategoriye mevcut veya yeni etiketler ekleyin, yeniden adlandırın ya da kendi kategorinizi oluşturun. Kategorilerinizin hiçbirinde olmayan dosyalar “Diğer” altında görünür."
 title = "Kenar çubuğu kategorileri"
 
@@ -3808,6 +3977,7 @@ refresh = "Sunucudan yenile"
 remove = "Sil"
 removeVersion = "Bu sürümü sil"
 rename = "Yeniden adlandır"
+renamed = "Yeniden adlandırıldı"
 renameFolder = "Klasörü yeniden adlandır"
 resizeFolderTree = "Klasör ağacını yeniden boyutlandır (yön tuşları, büyük adımlar için Shift; otomatik sığdırmak için çift tıklayın)"
 save = "Kaydet"
@@ -3910,9 +4080,7 @@ count = "Dosyalar"
 folder = "Klasör"
 labels = "Etiketler"
 modified = "Değiştirildi"
-name = "Ad"
 size = "Boyut"
-toolHistoryAtVersion = "Kümülatif araç zinciri"
 totalSize = "Toplam boyut"
 type = "Tür"
 versionHistory = "Sürüm yolculuğu"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Tümü kaydedildi"
+extractCsvError = "CSV çıkarılamadı"
+extractXlsxError = "XLSX çıkarılamadı"
 flattenAfterFilling = "Doldurduktan sonra düzleştir"
+requiredAbbreviation = "zor"
+requiredFieldsError = "Lütfen tüm zorunlu alanları doldurun"
 rescanFields = "Alanları yeniden tara"
 rescanFormFields = "Form alanlarını yeniden tara"
 save = "Kaydet"
+saveShortcut = "Kaydetmek için Ctrl+S"
+unsavedChanges = "Kaydedilmemiş değişiklikler"
 
 [formFill.sidebar]
 close = "Kenar çubuğunu kapat"
@@ -4309,6 +4484,11 @@ desc = "Algılanan başlığına göre bir PDF dosyasını otomatik olarak yenid
 tags = "otomatik_algılama,başlık_tabanlı,düzenle,yeniden_adlandır"
 title = "PDF'yi Otomatik Adlandır"
 
+[home.autoRotate]
+desc = "Her sayfanın yönünü algılayın ve otomatik olarak dik konuma döndürün."
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "Otomatik Döndür"
+
 [home.autoSizeSplitPDF]
 tags = "otomatik,böl,boyut"
 title = "Otomatik Boyut/Sayıya Böl"
@@ -4608,13 +4788,13 @@ hint = "PDF üzerine yerleştirmek için bir PNG, JPG, SVG veya başka bir görs
 label = "Görsel Yükle"
 placeholder = "Görsel dosyası seç"
 
-[imageToPdf]
-tags = "dönüşüm,img,jpg,fotoğraf,resim"
-
 [imageToPDF]
 header = "Resimden PDF'e"
 title = "Resimden PDF'e"
 
+[imageToPdf]
+tags = "dönüşüm,img,jpg,fotoğraf,resim"
+
 [infoBanner]
 dismiss = "Kapat"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Davet edildiniz!"
 
 [landing]
 addFiles = "Dosya Ekle"
-heroSubtitle = "Başlamak için bir PDF bırakın veya mevcut bir PDF ekleyin."
 mobileUpload = "Mobil Cihazdan Yükle"
 openFromComputer = "Bilgisayardan aç"
 uploadFromComputer = "Bilgisayardan yükle"
-workbenchEmptyStateHero = "Herhangi bir yere PDF bırakın"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Giriş"
 magicLinkSent = "Sihirli bağlantı {{email}} adresine gönderildi! Giriş yapmak için e-postanızı kontrol edip bağlantıya tıklayın."
 mfaCode = "Kimlik doğrulama kodu"
 mfaRequired = "İki faktörlü kimlik doğrulama kodu gerekli"
+noAccount = "Hesabınız yok mu?"
 or = "Veya"
 password = "Şifre"
 passwordChangedSuccess = "Şifre başarıyla değiştirildi! Lütfen yeni şifrenizle giriş yapın."
@@ -4715,26 +4894,10 @@ signInWith = "Şununla giriş yap"
 title = "Giriş Yap"
 unexpectedError = "Beklenmeyen hata: {{message}}"
 updatePassword = "Parolayı güncelle"
-useEmailInstead = "E-posta ile giriş yap"
 useMagicLink = "Bunun yerine sihirli bağlantı kullan"
 username = "Kullanıcı adı"
 youAreLoggedIn = "Giriş yaptınız!"
 
-[login.slides.edit]
-alt = "PDF'leri düzenle"
-subtitle = "PDF'leri sansürlemek, imzalamak, okumak ve işlemek için bir düzineden fazla araçla aradığınızı bulacaksınız."
-title = "İstediğiniz bilgiyi göstermek/korumak için PDF'leri düzenleyin"
-
-[login.slides.overview]
-alt = "Stirling PDF genel bakış"
-subtitle = "PDF'ler için gizlilik odaklı bir bulut paketi; belgeleri dönüştürmenize, imzalamanıza, sansürlemenize ve yönetmenize olanak tanır, ayrıca 50+ başka güçlü araçla birlikte gelir."
-title = "PDF ihtiyaçlarınızın tümü için tek adresiniz."
-
-[login.slides.secure]
-alt = "PDF'leri güvenli hale getirin"
-subtitle = "Parola ekleyin, içeriği sansürleyin ve sertifikaları kolayca yönetin."
-title = "PDF'lerinizdeki hassas bilgileri koruyun"
-
 [margin]
 large = "Büyük"
 medium = "Orta"
@@ -4976,6 +5139,7 @@ pinButton = "Dosyaların üzerinde araçları çalıştırdıktan sonra aktif ka
 results = "Araç çalışmayı bitirdikten sonra, <strong>Gözden Geçir</strong> adımı bu panelde sonuçların bir önizlemesini gösterir ve işlemi geri almanıza veya dosyayı indirmenize olanak tanır. "
 runButton = "Araç yapılandırıldıktan sonra bu düğme, aracı seçili tüm PDF'lerde çalıştırmanıza olanak tanır."
 selectCropTool = "Araçlardan birinin nasıl kullanılacağını göstermek için <strong>Kırp</strong> aracını seçelim."
+stepOf = "Adım {{current}} / {{total}}"
 toolInterface = "Burası <strong>Kırp</strong> aracının arayüzü. Gördüğünüz gibi, üzerinde çalışacak PDF dosyaları henüz eklemediğimiz için pek bir şey yok."
 workbench = "Burası <strong>Çalışma Alanı</strong> - PDF'lerinizi görüntüleyip düzenlediğiniz ana alandır."
 wrapUp = "Her şey hazır! Uygulamanın ana alanlarını ve bunları nasıl kullanacağınızı öğrendiniz. Bu turu tekrar görmek istediğinizde istediğiniz zaman <strong>Yardım</strong> düğmesine tıklayın."
@@ -4988,6 +5152,26 @@ showMeAround = "Bana etrafı göster"
 skipForNow = "Şimdilik atla"
 skipTheTour = "Turu atla"
 
+[onboarding.checklist]
+dismiss = "Kapat"
+title = "Stirling PDF'yi kurun"
+
+[onboarding.checklist.downloadDesktop]
+description = "Stirling'i makinenizde yerel olarak çalıştırın"
+title = "Masaüstü için Stirling'i indir"
+
+[onboarding.checklist.inviteTeam]
+description = "Ekibinizle iş birliği yapın"
+title = "Ekip üyelerini davet et"
+
+[onboarding.checklist.shareAnalytics]
+description = "Stirling'i geliştirmeye yardımcı olun"
+title = "Anonim kullanım verilerini paylaş"
+
+[onboarding.checklist.takeTour]
+description = "Kısa bir gezintiyle Stirling'in nasıl çalıştığını görün"
+title = "Tura katıl"
+
 [onboarding.desktopInstall]
 body = "Stirling, bir masaüstü uygulaması olarak en iyi şekilde çalışır. Çevrimdışı kullanabilir, belgelere daha hızlı erişebilir ve düzenlemeleri bilgisayarınızda yerel olarak yapabilirsiniz."
 selectOs = "İşletim sistemini seç"
@@ -4996,7 +5180,21 @@ titleWithOs = "{{osLabel}} için indir"
 
 [onboarding.mfa]
 authenticationCode = "Kimlik doğrulama kodu"
+description = "Bir kimlik doğrulama uygulamasını bağlayarak hesabınızı güvence altına alın. QR kodunu tarayın veya kurulum key'ini girin, ardından tamamlamak için 6 haneli kodu onaylayın."
+enable = "MFA'yı etkinleştir"
+enableError = "İki faktörlü kimlik doğrulama etkinleştirilemiyor. Kodu kontrol edip tekrar deneyin."
+enterCode = "Uygulamanızdaki 6 haneli kodu girin."
+enterCodeError = "Devam etmek için kimlik doğrulama kodunu girin."
+logout = "Çıkış yap"
+openAuthenticator = "Google Authenticator, Authy veya 1Password'ü açın."
 qrCodeLoading = "QR kodunuz oluşturuluyor…"
+regenerateQrCode = "QR kodunu yeniden oluştur"
+scanQrCode = "QR kodunu tarayın veya aşağıdaki kurulum key'ini girin."
+setupError = "İki faktörlü kurulum başlatılamıyor. Lütfen tekrar deneyin."
+setupKey = "Kurulum key'i (manuel giriş)"
+stepByStep = "Adım adım"
+success = "MFA etkinleştirildi. Şimdi devam edebilirsiniz."
+title = "Çok Faktörlü Kimlik Doğrulama Kurulumu"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Oturum açma modunu etkinleştirdiğinizde kullanıcıları yönetebilir, ayarları yapılandırabilir ve sunucu sağlığını izleyebilirsiniz. Sunucunuzdaki ilk <strong>{{freeTierLimit}}</strong> kişi Stirling'i ücretsiz kullanır."
@@ -5005,6 +5203,11 @@ adminTitle = "Yönetici Özeti"
 userBody = "Ekip arkadaşlarını davet edin, roller atayın ve belgelerinizi tek bir güvenli çalışma alanında düzenli tutun. Tek başına kullanımdan büyümeye hazır olduğunuzda oturum açma modunu etkinleştirin."
 userTitle = "Plan Özeti"
 
+[onboarding.processorIntro]
+body = "Stirling artık <strong>İlkeler</strong> çalıştırıyor — her belge geldiğinde onu sınıflandıran, güvenceye alan ve işleyen otomatik kurallar. Bunları ayarlayın ve çalışmaları <strong>Processor</strong> içinde izleyin."
+cta = "Processor'ı incele"
+title = "Stirling Processor'ı inceleyin"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Ön ödemeli yıl"
+
+[payg.prepaid.banner]
+exhausted = "Ön ödemeli kapasiteniz tükendi; ölçümlü faturalandırma yeniden başladı. İndirimi korumak için yükleme yapın."
+expiring_one = "Ön ödemeli yılınız {{count}} gün içinde sona eriyor. Kullanılmayan kapasite sona erer — yeni bir yıl başlatmak için yükleme yapın."
+expiring_other = "Ön ödemeli yılınız {{count}} gün içinde sona eriyor. Kullanılmayan kapasite sona erer — yeni bir yıl başlatmak için yükleme yapın."
+low = "Ön ödemeli kapasitenizin %{{pct}} seviyesine düştünüz. İşlemenin kesintisiz kalması için istediğiniz zaman yükleme yapın."
+
+[payg.prepaid.card]
+subtitle = "Ölçümlü faturalandırmadan önce ve harcama sınırınızın dışında kullanılır."
+title = "Ön ödemeli kapasite"
+
+[payg.prepaid.meter]
+capSuffix = "{{total}} ön ödemeli krediden"
+expires = "Sona erme {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Tükendi"
+healthy = "Bol miktarda kaldı"
+low = "Azalıyor"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "E-postanızdaki lisans anahtarını yapıştırın"
 success = "Lisans Etkinleştirildi!"
 successMessage = "Lisansınız başarıyla etkinleştirildi. Bu pencereyi şimdi kapatabilirsiniz."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "uygulandı"
-enforcing = "Uygulanıyor..."
-failed = "Uygulama başarısız oldu"
 outputsUnavailable = "Politika çıktıları artık indirilemiyor."
 partialOutputsUnavailable = "Bazı politika çıktıları artık indirilemiyor."
-retrying = "Meşgul, yeniden deneniyor..."
 runNotFound = "Uygulama çalışması artık bulunamıyor."
-step = "adım {{current}}/{{total}}"
 timedOut = "İşlem tamamlanmadan önce uygulama zaman aşımına uğradı."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Kapat"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "{{names}} uygulanıyor"
 applyingProgress = "{{names}} uygulanıyor ({{done}} / {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} dosyadan {{failures}} işlenemedi ve olduğu gibi dış
 failureTitle = "Tam uygulama olmadan dışa aktarıldı"
 printPolicyAppliedBody = "Bu PDF bir politikayı karşılamak için güncellendi. Değişiklikleri gözden geçirin, ardından yeniden yazdırın."
 printPolicyAppliedTitle = "Yazdırmadan önce politika uygulandı"
-queued = "+{{count}} sıraya alındı"
 successTitle = "{{names}} uygulandı"
 summaryMore = "{{first}}, {{second}} ve {{more}} daha"
 summaryTwo = "{{first}} ve {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Dönüştürmeden önce uygulanıyor"
-default = "Uygulanıyor"
-export = "Dışa aktarmadan önce uygulanıyor"
-input = "İçe aktarırken uygulanıyor"
-print = "Yazdırmadan önce uygulanıyor"
-
-[policies.field]
-accessLog = "Erişim günlüğü"
-archiveAfter = "Şundan sonra arşivle"
-auditTrail = "Denetim izi"
-belowThreshold = "Eşik altında"
-destination = "Hedef"
-frameworks = "Çerçeveler"
-immutableHold = "Değiştirilemez tutma"
-keepFor = "Şu kadar süre tut"
-minConfidence = "Min güven"
-notify = "Yönlendirmede bildir"
-onViolation = "Uyumsuz olduğunda"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Ekle"
-addPlaceholder = "Etiket ekle…"
-customNote = "Ekibiniz için özelleştirildi."
-defaultNote = "Ekibinizle paylaşılan yerleşik varsayılan kullanılıyor."
-duplicate = "\"{{name}}\" zaten mevcut."
-edit = "Etiketleri düzenle"
-empty = "Henüz etiket yok."
-export = "JSON dışa aktar"
-iconAria = "{{name}} için bir simge seç"
-import = "JSON içe aktar"
-importError = "Bu dosya içe aktarılamadı."
-managedNote = "Ekip etiketleri ekip lideriniz tarafından yönetilir."
-modalSubtitle = "Tüm ekibinizle paylaşılır. Sınıflandırıcı her belgeye uyan etiketleri seçer."
-modalTitle = "Sınıflandırma etiketleri"
-pickIcon = "{{label}} simgesini kullan"
-removeAria = "{{name}} etiketini kaldır"
-resetToDefault = "Varsayılana sıfırla"
-saveForTeam = "Ekip için kaydet"
-saving = "Kaydediliyor…"
-sectionLabel = "Sınıflandırma etiketleri"
-startFromScratch = "Sıfırdan başla"
-teamCount = "ekip etiketleri"
-tooLong = "Etiketler en fazla {{max}} karakter olabilir."
-ungrouped = "Gruplandırılmamış"
-view = "Etiketleri görüntüle"
+categoryCount = "kategori"
+hideCategory = "Kategoriyi gizle"
+labelCount = "etiket"
+sharedNote = "Bu etiketler yerleşiktir ve tüm ekibiniz genelinde paylaşılır."
+showCategory = "Kategoriyi göster"
 
 [policies.pii]
 account = "Hesap numaraları (etiketli)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "ABD yönlendirme numaraları (ABA)"
 ssn = "Sosyal Güvenlik numaraları"
 
-[policies.settings]
-noneExport = "Şu anda dışa aktarmada çalışan politika yok."
-noneUpload = "Şu anda yüklemede çalışan politika yok."
-onExport = "Dışa aktarmada"
-onUpload = "Yüklemede"
-reorderHandle = "Yeniden sıralamak için sürükle"
-runOrderDesc = "Aynı tetikleyicide birden fazla politika çalıştığında, bu sırayla çalışırlar — her biri önceki politikanın çıktısı üzerinde. Yeniden sıralamak için sürükleyin."
-title = "Politika ayarları"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Politika seçenekleri"
-policySettings = "Politika ayarları"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Başarısız politikaları yeniden dene ({{count}})"
-rowProgress = "{{total}} dosyadan {{completed}} tanesi işlendi"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Politika nedir?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Belgedeki hassas ayrıntıları — Sosyal Güvenlik ve kart numaraları gibi — otomatik olarak bulur ve okunamayacak şekilde karartır."
-sanitize = "Dosyadan gizli JavaScript'i kaldırır; böylece biri açtığında hiçbir şey otomatik olarak çalışmaz."
-watermark = "Her sayfaya görünür bir işaret (ör. \"Gizli\") basar."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Kapat"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} uygulanıyor..."
 badgeRan = "{{name}} politikası bu dosyada çalıştı"
+badgeRunning = "{{name}} çalışıyor..."
 blockingAction = "Politika uygulanırken {{action}} engellendi, lütfen bekleyin..."
 dismiss = "Katmanı kapat"
 enforcingTitle = "Politika uygulanıyor..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Dosyayı görüntüle (politika hâlâ uygulanıyor)"
 [policyOption]
 autoRedactPhi = "PHI'yi otomatik sansürle"
 blockExport = "Dışa aktarmayı engelle"
+ccpa = "CCPA"
 contracts = "Sözleşmeler"
 documents = "Belgeler"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor planı"
 subscribed = "Processor planı"
 unlinked = "Bağlı değil"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Belgeden başlat"
-sectionsAriaLabel = "Agent Builder bölümleri"
-selectorAriaLabel = "Ajanlar"
-subtitle = "Belgelerinizi sınıflandıran, ayıklayan ve yönlendiren AI ajanlarını tasarlayın, test edin ve yayınlayın. Senaryoları tanımlayın, araç erişimini sınırlayın, bir altın set çalıştırın ve bir sürüm yayınlayın."
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "İptal"
-dropzoneText = "Örnek bir belge seçin (PDF veya görüntü)"
-lead = "Örnek bir belge bırakın; geliştirebileceğiniz senaryolar ve bir ayıklama şeması önereceğiz. Siz inceleyene kadar hiçbir şey yayınlanmaz."
-submit = "Ajanı başlat"
-subtitle = "Temsili bir dosyadan yeni bir ajanı başlatın"
-title = "Bir belgeden başlat"
-
-[portal.agentBuilder.empty]
-description = "Senaryolarını ve ayıklama şemasını başlatmak için örnek bir belgeden bir ajan oluşturun, ardından geliştirin ve yayınlayın."
-title = "Henüz ajan yok"
-
-[portal.agentBuilder.evals]
-casesPassing = "Geçen vakalar"
-columnCase = "Eval vakası"
-columnLatency = "Gecikme"
-columnResult = "Sonuç"
-fail = "başarısız"
-goldenSetPassRate = "Altın set geçme oranı"
-latencyMs = "{{ms}} ms"
-notRun = "çalıştırılmadı"
-pass = "başarılı"
-passRate = "Geçme oranı"
-runEvals = "Eval'ları çalıştır"
-
-[portal.agentBuilder.evals.empty]
-description = "Eval'lar senaryolarınızı tekrarlanabilir bir altın sete dönüştürür. Geçme oranını zaman içinde yakalamak ve yayınları buna göre kapılamak için yükseltin."
-title = "Henüz altın set yok"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "altın setler genelinde"
-activeAgents = "Aktif ajanlar"
-avgPassRate = "Ort. eval geçme oranı"
-fleetWide = "filo genelinde"
-latestPublished = "Son yayınlanan"
-scenarios = "Senaryolar"
-testCases = "test vakaları"
-totalDescription_one = "toplam {{count}}"
-totalDescription_other = "toplam {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Ekle"
-addScenario = "Senaryo ekle"
-enable = "Etkinleştir"
-expectationLabel = "Beklenen davranış"
-expectationPlaceholder = "Ajanın ne yapması gerektiği"
-inEval = "eval'da"
-mute = "Sessize al"
-muted = "sessize alındı"
-nameLabel = "Ad"
-namePlaceholder = "örn. Uyumluluk eskalasyonu"
-
-[portal.agentBuilder.tabs]
-evals = "Eval'lar"
-scenarios = "Senaryolar"
-tools = "Araçlar"
-versions = "Sürümler"
-
-[portal.agentBuilder.tools]
-broadAccess = "Geniş erişim"
-deniedHint = "Seçili araçlar engellenir. Diğer her şey çağrılabilir kalır."
-deniedTools = "Reddedilen araçlar"
-governanceGate = "Araç yönetişimi Enterprise planında mevcuttur."
-restricted = "Kısıtlı"
-restrictedAccess = "Kısıtlı araç erişimi"
-restrictedDescription = "Aşağıda reddettikleriniz dışındaki tüm araçlara izin verin."
-
-[portal.agentBuilder.versions]
-current = "geçerli"
-historyGate = "Tam sürüm geçmişi ve geri alma Enterprise planında mevcuttur."
-publish = "Yayınla"
-rollBack = "Geri al"
-
 [portal.assistant]
 close = "Asistanı kapat"
 error = "Asistana ulaşılamadı."
@@ -6365,9 +6346,21 @@ typing = "Yazıyor"
 loading = "Yükleniyor"
 redirectingToEditor = "Editöre yönlendiriliyor..."
 
+[portal.billing.activation]
+maybeLater = "Belki sonra"
+title = "Processor'ı aç"
+
+[portal.billing.activation.payg]
+sub = "Aylık bir limit belirleyin. Çalıştırdığınız kadar ödeyin."
+title = "Kullandıkça öde"
+
+[portal.billing.activation.prepay]
+badge = "2 ay ücretsiz"
+sub = "Tek fatura, kart veya banka transferi."
+title = "Bir yıl için ön ödeme yap"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function client_secret döndürmedi."
-subtitle = "Ücretsiz Editor planı hakkınızı aşarak devam etmek için bir kart ekleyin. Gerisini Stripe halleder."
 title = "Processor planını aç"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Ödemeniz başarılı oldu, ancak aktivasyon normalden biraz daha uzun s
 close = "Kapat"
 title = "Neredeyse hazır"
 
+[portal.billing.checkout.cap]
+amountAria = "Aylık harcama limiti"
+back = "Geri"
+continue = "Ödemeye devam et"
+error = "Harcama limitiniz ayarlanamadı"
+finePrint = "Faturalar aylık olarak düzenlenir. İstediğiniz zaman iptal edin."
+noLimit = "Limit yok"
+note = "Limitinizin ötesinde asla faturalandırılmazsınız. İşleme sadece duraklar."
+perMonth = "/ ay"
+title = "Harcama limitinizi belirleyin"
+
+[portal.billing.checkout.card]
+fields = "Kart numarası · AA / YY · CVC · ZIP"
+label = "Kart bilgileri"
+note = "Kart bilgileri Stripe tarafından toplanır. Stirling hiçbir zaman PAN veya CVC saklamaz."
+
 [portal.billing.checkout.error]
 title = "Checkout başlatılamadı"
 
@@ -6383,10 +6392,9 @@ body = "Ödemeniz gerçekleşti. Bağlı örneklerinizde ölçümlü işlemeyi a
 hint = "Lütfen bu pencereyi açık tutun."
 title = "Processor planınız etkinleştiriliyor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "uygulama içi checkout'u etkinleştirmek için portal env içinde ayarlayın."
-bodyBefore = "Ayarla"
-title = "Stripe yapılandırılmamış"
+[portal.billing.checkout.pay]
+limit = "Aylık harcama limiti {{amount}}/ay. Limitte işleme duraklar."
+limitNoCap = "Harcama limiti yok. İşleme duraklamaz. Faturalar aylık olarak düzenlenir."
 
 [portal.billing.enterpriseUpsell]
 cta = "Enterprise teklifinizi oluşturun"
@@ -6409,10 +6417,12 @@ currentPlan = "Geçerli plan"
 freeForever = "Sonsuza kadar ücretsiz"
 noTeamResolved = "Cüzdanınızda henüz bir ekip çözümlenmedi — yenileyin ve tekrar deneyin."
 ownerOnly = "Processor planını yalnızca ekip sahibi açabilir."
+payInvoice = "Tamamlamak için faturayı öde"
 planName = "Editor"
 ssoIncluded = "SSO dahil"
 switchOnProcessor = "Processor'ı aç →"
 unlimitedUsers = "Sınırsız kullanıcı"
+viewQuote = "Teklifi görüntüle"
 
 [portal.billing.invoices]
 columnAmount = "Tutar"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Doğrudan API istekleri"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Otomasyonlar ve pipeline'lar"
 segmentAutomationLabel = "Otomasyon"
+sizeMultiplier = "{{formatted}} PDF bir boyut çarpanı kullandı"
+summary = "{{unique}} benzersiz · {{units}} sayaç birimi · PDF başına ort. {{avg}}"
+summaryNoRate = "{{unique}} benzersiz · {{units}} sayaç birimi"
 unit = "ölçümlü PDF'ler"
+unitsPending_one = "{{units}} sayaç birimi bağlı örneklerden senkronizasyon bekliyor"
+unitsPending_other = "{{units}} sayaç birimi bağlı örneklerden senkronizasyon bekliyor"
+
+[portal.billing.prepaid]
+capSuffix = "{{total}} ön ödemeli krediden"
+expires = "Sona erme {{date}}"
+eyebrow = "Ön ödemeli kapasite"
+note = "Ölçümlü faturalandırmadan önce ve harcama limitinizin dışında kullanılır."
+topUp = "Yükleme yap"
+
+[portal.billing.prepaid.buy]
+back = "Geri"
+calcTitle = "Yıllık ödemenizi hesaplayın"
+cancel = "İptal"
+cancelPurchase = "Satın almayı iptal et"
+close = "Kapat"
+continueToPayment = "Ödemeye devam et"
+finalise = "Sonlandır"
+invoiceErrorTitle = "Fatura oluşturulamadı"
+loadingTitle = "Teklifiniz yükleniyor"
+payTitle = "Yılınız için ödeme yapın"
+step = "Adım {{current}} / {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Değiştir"
+deployRow = "Dağıtım"
+done = "Bitti"
+enterpriseHint = "Bu kurumsal ölçektir. Bu hacimde kurumsal tarifeler tüm self servis indirimlerden daha avantajlıdır. Tarife kilidi, şartlar ve dakikalar içinde teklif."
+governanceRow = "Yönetişim"
+governanceValue = "{{label}} · {{count}} ilke"
+handlesLabel = "Processor'ınız"
+handlesValue = "{{volume}} kredi / ay işler"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} ilke"
+poolCaption = "Yıl için {{credits}} kredilik tek bir havuz. Yoğun aylar hafif aylardan ödünç alır."
+priceLabel = "Yılınız · 10 ay fiyatına 12 ay"
+rateUnknown = "Kesin fiyatı ödeme sırasında göstereceğiz."
+savings = "{{amount}} tasarruf edersiniz · 2 ay ücretsiz."
+sizingRow = "Boyutlandırma"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Toplam kullanıcı"
+
+[portal.billing.prepaid.consent]
+label = "Ön ödemeli kapasitem kullanıldığında veya 12 ay sonra sona erdiğinde, iptal etmediğim sürece işlemenin standart ölçümlü kullandıkça öde tarifesiyle (harcama limitime kadar) otomatik olarak devam edeceğini ve faturalandırma portalından istediğim zaman iptal edebileceğimi anlıyorum."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Stirling tarafından yönetilir. Dakikalar içinde canlı."
+cloudValue = "Stirling Cloud · Yönetilen"
+selfhost = "Kendi barındırılan"
+selfhostDesc = "Özel altyapıda çalışır. Aynı tarife."
+selfhostValue = "Kendi barındırılan · Özel altyapı"
+
+[portal.billing.prepaid.offer]
+cta = "Teklifi incele"
+subtitle = "Bir yıllık PDF işleme için ön ödeme yapın ve iki ay ücretsiz kazanın; ölçümlü faturalandırmadan önce, harcama limitinizin dışında kullanılır."
+title = "10 ay fiyatına 12 ay alın"
+
+[portal.billing.prepaid.pay]
+accountName = "Hesap sahibi adı"
+accountNamePlaceholder = "örn. Jane Smith"
+companyName = "Şirket adı (isteğe bağlı)"
+companyNamePlaceholder = "örn. Acme Inc."
+downloadInvoice = "Faturayı indir"
+payOnline = "Online öde"
+poNumber = "PO numarası (isteğe bağlı)"
+poNumberPlaceholder = "örn. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Gelişmiş"
+advancedDesc = "Pipelines işlemenizin çoğunu yürütür."
+none = "Yok"
+noneDesc = "Henüz pipelines çalıştırılmıyor. İstediğiniz zaman açın."
+standard = "Standart"
+standardDesc = "Birkaç pipeline gelen PDF'leri yeniden işler."
+
+[portal.billing.prepaid.posture]
+essentials = "Temel"
+essentialsDesc = "Sınıflandırma, varsayılan ve ayrıca Paylaşım"
+governed = "Yönetilen"
+governedDesc = "Güvenlik ve Yönlendirme ekler"
+regulated = "Düzenlenmiş"
+regulatedDesc = "Uyumluluk, Saklama, Alım dahil her kategori"
+
+[portal.billing.prepaid.review]
+download = "Teklifi indir (PDF)"
+downloading = "Hazırlanıyor…"
+share = "onay için paylaş"
+
+[portal.billing.prepaid.size]
+compact = "Kompakt"
+compactDesc = "25 MB altı dosyalar, veri ücreti yok"
+heavy = "Ağır"
+heavyDesc = "Taranmış veya görüntü ağırlıklı, genellikle 50 MB+"
+standard = "Standart"
+standardDesc = "Çoğunlukla küçük, bazı taramalar 25 MB'ı aşar"
+
+[portal.billing.prepaid.state]
+exhausted = "Tükendi"
+healthy = "Bol miktarda kaldı"
+low = "Azalıyor"
 
 [portal.billing.spendLimit]
 adjustLimit = "Limiti ayarla"
@@ -6494,6 +6608,8 @@ label = "Aşması öngörülüyor."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Bu ayki harcama"
+freeRemaining_one = "{{formatted}} ücretsiz PDF kaldı"
+freeRemaining_other = "{{formatted}} ücretsiz PDF kaldı"
 processed_one = "{{formattedCount}} PDF işlendi."
 processed_other = "{{formattedCount}} PDF işlendi."
 processedWithRate_one = "{{formattedCount}} PDF işlendi, her biri {{rate}}."
@@ -6534,6 +6650,350 @@ signature = "imza"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Yeni bağlantı"
+createTitleFor = "{{name}} bağla"
+delete = "Sil"
+edit = "Düzenle"
+editTitle = "Bağlantıyı düzenle"
+unsupportedType = "Bu bağlantı türü burada düzenlenemez."
+
+[portal.connections.categories.advanced]
+description = "Henüz desteklemediğimiz bir hizmet için."
+label = "Gelişmiş"
+
+[portal.connections.categories.audit]
+description = "Bir belgeye ne olduğunu, denetçilerinizin zaten baktığı yerde kaydedin."
+label = "Denetim ve uyumluluk günlükleme"
+
+[portal.connections.categories.notify]
+description = "Başka bir sisteme bir şey olduğunu bildirin."
+label = "Bildirim ve iş akışı"
+
+[portal.connections.categories.security]
+description = "Bir belge taşınmadan önce tarayın veya etiketleyin."
+label = "Güvenlik ve sınıflandırma"
+
+[portal.connections.categories.signing]
+description = "Bir belgeyi imzalanması veya noter onayı için gönderin."
+label = "E-imza ve noter onayı"
+
+[portal.connections.categories.storage]
+description = "İşlenen belgelerin sona erdiği yer - bir bucket, drive, ticket veya sayfa."
+label = "Dosya ve ek"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling bunu şifreli olarak saklar ve bir daha asla göstermez."
+label = "Erişim token'ı"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Bu bağlantıyı kullanan adımlar yalnızca bu URL altındaki yolları çağırabilir, asla başka bir host'u değil."
+label = "Sunucu URL'si"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Parola"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Kullanıcı adı"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Hizmetin size verdiği URL'yi yapıştırın. Yalnızca bunun altındaki yollar çağrılabilir."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Bağlantı adı"
+namePlaceholder = "örn. Production"
+
+[portal.connections.picker]
+cancel = "İptal"
+createNew = "Yeni bağlantı..."
+placeholder = "Bir bağlantı seçin"
+save = "Bağlantıyı kaydet"
+
+[portal.connections.picker2]
+back = "Entegrasyonu değiştir"
+heading = "Neyi bağlamak istiyorsunuz?"
+noResultsBody = "Bunu henüz desteklemiyoruz - bize bildirin, eklemeyi değerlendirelim."
+noResultsTitle = "\"{{query}}\" ile eşleşen yok"
+searchPlaceholder = "Entegrasyonlarda ara - \"sign\", \"ocr\" veya bir ürün adı deneyin"
+
+[portal.connections.types.api]
+description = "Bir ilkeden herhangi bir HTTP API çağırın. URL'yi, kimlik doğrulamayı ve payload'ı siz seçersiniz."
+label = "Özel API"
+
+[portal.connections.types.api.fields.authType]
+label = "Kimlik doğrulama"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Kullanıcı adı ve parola"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Özel bir header içinde token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Yok"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Token için oturum aç"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Bu bağlantıyı kullanan adımlar yalnızca bu URL altındaki yolları çağırabilir, asla başka bir host'u değil."
+label = "Temel URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header adı"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Oturum açma yolu"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Parola"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "API bir indirme bağlantısıyla yanıt verirse, yalnızca bu host'lar getirilebilir. Virgülle ayırın. Yalnızca temel URL'nin kendi host'una izin vermek için boş bırakın."
+label = "İzin verilen sonuç host'ları"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Token'ı bu header olarak gönder"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Oturum açma çağrısının token'ı döndürdüğü yanıt header'ı, örn. X-Auth-Token."
+label = "Token yanıt header'ı"
+
+[portal.connections.types.api.fields.username]
+label = "Kullanıcı adı"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Çalıştırdığınız bir sunucuda belgeleri kötü amaçlı yazılımlara karşı tarayın - ağınızdan hiçbir şey çıkmaz."
+label = "ClamAV (kendi barındırılan)"
+
+[portal.connections.types.cloudmersive]
+description = "Bir ilkede belgeler için virüs ve içerik taraması."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Yalnızca bilinen kötü amaçlı yazılımları değil; macro, yürütülebilir dosya, script veya gömülü nesne içeren belgeleri engelleyin."
+label = "Cloudmersive Gelişmiş Tarama"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "İşlenen belgeleri bir Confluence sayfasına ekleyin."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Belgeleri elektronik imza ve noter onayı için ConsignO Cloud'a (Notarius) gönderin."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "/api/v1 dahil ConsignO Cloud ortamınız."
+label = "Sunucu URL'si"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Parola"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Yalnızca kuruluşunuz tenant kullanıyorsa gereklidir."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Kullanıcı adı"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Bir ilke bir belgeyi işlediğinde Discord'a mesaj gönderin."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Bir ilke bir belgeyi her ele aldığında Elasticsearch'te bir denetim olayı indeksleyin."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Yeni belgeler için bir FTP veya FTPS sunucusunu yoklayın."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Bağlantı modu"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Aktif"
+passive = "Pasif (önerilen)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Düz FTP kimlik bilgilerini ve dosyaları şifrelemeden gönderir; sunucu destekliyorsa FTPS seçin."
+label = "Şifreleme"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Yok (düz FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Bir ilke çalıştığında bir Google Chat alanına mesaj gönderin."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "İşlenen belgeleri bir Jira issue'ya ekleyin."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Bir ilke çalıştığında bir belgeyi veya bildirimi email ile gönderin."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "İşlenen belgeleri Nextcloud'a dosyalayın."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "Uygulama parolası"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Çalıştırdığınız bir Presidio sunucusunu kullanarak belge metnindeki kişisel verileri algılayın."
+label = "Presidio (kendi barındırılan)"
+
+[portal.connections.types.purview]
+description = "PDF'lerde Microsoft Purview duyarlılık etiketlerini okuyun ve uygulayın."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "İsteğe bağlı. Yalnızca etiketleri ada göre seçmek için gereklidir; etiketleme onsuz çalışır."
+label = "Uygulama (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Her etikete SiteId olarak damgalanır, böylece Purview uyumlu araçlar hangi kuruluşun uyguladığını bilir."
+label = "Dizin (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Kaynakların okuyabileceği ve pipeline çıktılarının yazabileceği bir S3 bucket."
+label = "S3 depolama"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Erişim key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS için boş bırakın. MinIO veya başka bir S3 uyumlu depo için bunu ayarlayın."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Bölge"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Bir ilke çalıştığında bir belgeyi veya bildirimi email ile gönderin."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Yeni belgeler için bir SFTP (SSH) sunucusunu yoklayın."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "İsteğe bağlı. Sunucunun SHA-256 host key fingerprint'i (`ssh-keyscan host | ssh-keygen -lf -` çıktısından). Ayarlandığında yalnızca bu key'i sunan bir sunucu kabul edilir; boş bırakıldığında ilk bağlantıda görülen key sabitlenir ve sonraki değişiklikler reddedilir."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Bunun yerine private key ile kimlik doğruluyorsanız boş bırakın."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "İsteğe bağlı. Parola yerine key ile kimlik doğrulamak için bir OpenSSH private key yapıştırın."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Bir ilke bir belgeyi işlediğinde Slack'e mesaj gönderin."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Bir SMB / CIFS ağ paylaşımını izleyin (Windows veya Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Ağ paylaşımı"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "İsteğe bağlı. Sunucunuz kullanıyorsa Windows domain'i veya çalışma grubu."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Paylaşım"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Bir ilke bir belgeyi her ele aldığında Splunk'a denetim olayı gönderin."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Bir Sumo Logic HTTP collector'a denetim olayı gönderin."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Bir ilke çalıştığında Teams kanalına mesaj gönderin."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Her belgeyi veya yalnızca ayrıntıları seçtiğiniz bir URL'ye gönderin."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Bir ilkeden Zap veya Make senaryosunu tetikleyin."
+label = "Zapier ve Make"
+
+[portal.docs]
+browse = "Dokümanlara göz at"
+viewSource = "Kaynağı GitHub'da görüntüle"
+
 [portal.docs.authentication]
 codeCaption = "her istek"
 eyebrow = "BAŞLANGIÇ"
@@ -6619,11 +7079,19 @@ title = "Resmi SDK'lar"
 beta = "Beta"
 deprecated = "Kullanımdan kaldırıldı"
 
+[portal.docs.search]
+empty = "Eşleşen doküman yok"
+placeholder = "Dokümanlarda ara"
+results = "{{count}} sonuç"
+
 [portal.docs.skills]
 eyebrow = "BECERİLER"
 lead = "Ajanınızın tek bir araç olarak çağırdığı paketlenmiş, adlandırılmış yetenekler. Her beceri, eval'ları ekli deterministik bir op zinciridir."
 title = "Ajan becerileri"
 
+[portal.docs.toc]
+title = "Bu sayfada"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERANSI"
@@ -6697,6 +7165,8 @@ type = "Tür"
 user = "Kullanıcı"
 
 [portal.documents.queue.empty]
+connectSource = "Bir kaynak bağla"
+createPipeline = "Bir pipeline oluştur"
 description = "Kaynaklar belgeleri pipeline'larınıza besledikçe, inceleme için burada görünürler."
 title = "Kuyrukta belge yok"
 
@@ -6806,13 +7276,71 @@ description = "Bu görünüm beklenmeyen bir hatayla karşılaştı. Tekrar dene
 retry = "Tekrar dene"
 title = "Bu sayfada bir şeyler ters gitti"
 
+[portal.home.download]
+back = "Geri"
+body = "Masaüstü uygulamasını indirin veya sunucuyu kendi ortamınızda barındırın."
+done = "Bitti"
+guide = "{{name}} kılavuzunu aç"
+openInBrowser = "Bunun yerine tarayıcıda aç"
+sectionDesktop = "Masaüstü uygulaması"
+sectionSelfHosted = "Kendi barındırılan"
+title = "Stirling PDF Editor'ı yükleyin"
+
+[portal.home.download.docker]
+detailBody = "Resmi image'ı sunucunuzda çalıştırın."
+note = ":8080 üzerinde açılır. Varsayılan giriş: admin / stirling."
+tagline = "Sunucuyu bir container içinde çalıştırın"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Resmi Helm chart'ını kurun."
+note = "Ayarları kalıcı hale getirmek için /configs için bir PVC ekleyin."
+tagline = "Helm ile bir cluster'a dağıtın"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Dağıtımınız için native derlemeler."
+guideBtn = "Linux kurulum seçeneklerini görüntüle"
+note = "Yaygın dağıtımlar için AppImage, .deb ve .rpm derlemeleri mevcuttur."
+tagline = "Dağıtımınız için native masaüstü uygulaması"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Veya Homebrew ile"
+detailBody = "Yükleyiciyi çalıştırın veya Homebrew kullanın."
+downloadBtn = "macOS için indir"
+tagline = "Apple silicon ve Intel için native uygulama"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = ".jar dosyasını bare metal bir sunucuda çalıştırın."
+downloadBtn = ".jar dosyasını indir"
+note = "Java 21+ gerektirir. :8080'de açılır; varsayılan giriş admin / stirling."
+runLabel = "Ardından çalıştırın"
+tagline = ".jar dosyasını bare metal bir sunucuda çalıştırın"
+title = "Manuel sunucu kurulumu"
+
+[portal.home.download.windows]
+altLabel = "Veya winget ile"
+detailBody = "Yükleyiciyi çalıştırın veya bir paket yöneticisi kullanın."
+downloadBtn = "Yükleyiciyi indir"
+tagline = "Microsoft Windows için native uygulama"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} aktif"
-invite = "Ekip arkadaşlarını davet et"
+activeOfDeployed = "Bu ay {{total}} içinden {{active}} aktif"
 name = "Stirling PDF Editor"
 open = "Tarayıcıda aç"
 updated = "{{time}} güncellendi"
 
+[portal.home.editor.deploy]
+finish = "Dağıtımı tamamla"
+options = "Dağıtım seçeneklerini görüntüle"
+start = "Editor'ı dağıt"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "İyi günler"
 evening = "İyi akşamlar"
 morning = "Günaydın"
 
-[portal.home.onboarding]
-dismiss = "Kurulumu kapat"
-notStarted = "Başlatılmadı"
-progress = "{{total}} öğeden {{done}} tamamlandı"
-title = "Kurulumu tamamlayın"
-
-[portal.home.onboarding.enterprise]
-body = "Kuruluş geneli SSO + SCIM + RBAC, taahhütlü hacim fiyatlandırması ve ağdan izole dağıtım."
-cta = "Denemeyi Başlat"
-ctaQuote = "Teklif Al"
-lead = "250+ çalışan için."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Masaüstü uygulamasını dağıtın, sonsuza kadar ücretsiz."
-title = "PDF Editor'ü indir"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} aktif · {{recommended}} önerilen"
-chip = "{{active}} aktif"
-title = "İlkeleri aç"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} bağlı · her PDF ulaştığı yerde yönetilir"
-chip = "{{connected}} bağlı"
-title = "Kaynaklarınızı bağlayın"
-
-[portal.home.quickActions]
-subtitle = "Bugünün başlıca görevleri"
-title = "Hızlı eylemler"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Türlendirilmiş işlem kitaplığı üzerinde 3 adımlı oluşturucu"
-title = "Bir pipeline oluştur"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, ajanlar, webhooks, izlenen klasörler"
-title = "Bir kaynak bağla"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Hız sınırları ve IP izin listesi olan kapsamlı anahtar"
-title = "Bir API anahtarı ver"
-
 [portal.infrastructure]
 manageEditorDeployment = "Editor dağıtımını yönet"
 sectionsAriaLabel = "Altyapı bölümleri"
@@ -6878,13 +7363,9 @@ heading = "API anahtarları"
 subheading = "Anahtar bazında hız sınırları, izinler ve IP izin listeleri olan kapsamlı kimlik bilgileri."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "İzin verilen IP'ler"
-anyIp = "Herhangi bir IP (izin listesi yok)"
 created = "Oluşturuldu"
 lastUsed = "Son kullanım"
-permissions = "İzinler"
-rateLimit = "Hız sınırı"
-rateLimitValue = "{{value}} istek/dk"
+revoke = "Anahtarı iptal et"
 usageMonth = "Bu ay kullanım"
 usageToday = "Bugünkü kullanım"
 
@@ -6892,6 +7373,20 @@ usageToday = "Bugünkü kullanım"
 description = "Stirling API'yi çağırmaya başlamak için kapsamlı bir anahtar oluşturun."
 title = "Henüz API anahtarı yok"
 
+[portal.infrastructure.apiKeys.error]
+load = "API anahtarlarınız yüklenemedi. Lütfen tekrar deneyin."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "\"{{name}}\" iptal edilsin mi? Bu anahtarı hâlâ kullanan tüm entegrasyonlar hemen 401 hataları almaya başlayacaktır. Bu işlem geri alınamaz."
+cancel = "İptal"
+confirm = "Anahtarı iptal et"
+title = "API anahtarını iptal et"
+
+[portal.infrastructure.attestationLabel]
+attested = "Doğrulanmış"
+inScope = "Kapsamda"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Denetim etkinliklerini kategoriye göre filtrele"
 heading = "Denetim günlükleri"
@@ -6935,6 +7430,7 @@ all = "Tümü"
 auth = "Kimlik doğrulama"
 config = "Yapılandırma"
 elevation = "Yetki yükseltme"
+policy = "Politika"
 processing = "İşleme"
 security = "Güvenlik"
 
@@ -6944,19 +7440,35 @@ title = "Erişiminiz yok"
 
 [portal.infrastructure.audit.metrics]
 config = "Yapılandırma"
-elevation = "Yetki yükseltme"
+policy = "Politika"
 processing = "İşleme"
 totalEvents = "Toplam etkinlik · 24 sa"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Kimlik doğrulama"
+config = "Yapılandırma"
+elevation = "Yükseltme"
+policy = "Politika"
+processing = "İşleme"
+security = "Güvenlik"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Hata"
+info = "Bilgi"
+success = "Başarılı"
+warning = "Uyarı"
+
+[portal.infrastructure.certLabel]
+certified = "Sertifikalı"
+inProgress = "Devam ediyor"
+notStarted = "Başlatılmadı"
+
 [portal.infrastructure.createKey]
 cancel = "İptal"
 createKey = "Anahtar oluştur"
 done = "Tamam"
-ipAllowlistHelper = "Virgülle ayrılmış CIDR aralıkları. Herhangi bir IP'ye izin vermek için boş bırakın."
-ipAllowlistLabel = "IP izin listesi"
 keyNameLabel = "Anahtar adı"
 keyNamePlaceholder = "örn. Üretim · içe alma"
-permissionsLabel = "İzinler"
 secretKeyCaption = "Gizli anahtar"
 secretWarning = "Bunu bir secrets manager içinde saklayın. Stirling yalnızca bir hash saklar — daha sonra geri almanın yolu yoktur."
 subtitle = "Anahtarı ihtiyaç duyduğu minimum kapsamla sınırlayın. İstediğiniz zaman döndürebilir veya iptal edebilirsiniz."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Bu sırrı şimdi kopyalayın — tekrar gösterilmeyecek."
 title = "API anahtarı oluştur"
 titleCreated = "Anahtar oluşturuldu"
 
+[portal.infrastructure.deployLabel]
+live = "Canlı"
+queued = "Kuyrukta"
+rolledBack = "Geri alındı"
+rolling = "Yayınlanıyor"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/dk"
@@ -6999,6 +7517,15 @@ subheading = "Dağıtılmış her Stirling bölgesi için canlı sağlık — ge
 description = "Çalışma alanınız hazırlandıktan sonra dağıtılmış bölgeler burada görünür."
 title = "Dağıtılmış bölge yok"
 
+[portal.infrastructure.keyLabel]
+active = "Aktif"
+revoked = "İptal edildi"
+
+[portal.infrastructure.modelLabel]
+active = "Aktif"
+degraded = "Bozulmuş"
+disabled = "Devre dışı"
+
 [portal.infrastructure.models]
 heading = "Modeller"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Durum"
 type = "Tür"
 version = "Sürüm"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/çağrı"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Aktif modeller"
 avgLatency = "Ort. gecikme"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} için model"
 operation = "İşlem"
 routedTo = "Yönlendirildiği yer"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Sınıflandırma"
+extraction = "Çıkarma"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Bozulmuş"
+down = "Kapalı"
+healthy = "Sağlıklı"
+
 [portal.infrastructure.security.access.byok]
 description = "Kendi KMS'nizden bir anahtar sağlayın. Stirling bununla şifreler ancak yine de okuyabilir."
 label = "Kendi anahtarınızı getirin (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Modeller"
 security = "Güvenlik"
 storage = "Depolama"
 
+[portal.integrations]
+addAnother = "Başka ekle"
+availableHeading = "Kullanılabilir"
+comingSoonHeading = "Yakında"
+connect = "Bağlan"
+connectedHeading = "Bağlı"
+connectionCount_one = "{{count}} bağlantı"
+connectionCount_other = "{{count}} bağlantı"
+customApi = "Özel API"
+searchPlaceholder = "Entegrasyonlarda ara"
+subtitle = "Stirling'in konuşabileceği her şey. Kimlik bilgileri burada bir kez oluşturulur, ardından kaynaklar, politikalar ve işlem hatları tarafından referans verilir."
+title = "Entegrasyonlar"
+typedName = "{{tool}} adı"
+
+[portal.integrations.filters]
+all = "Tümü"
+audit = "Denetim"
+connected = "Bağlı"
+notify = "Bildirim"
+security = "Güvenlik"
+signing = "İmzalama"
+storage = "Depolama"
+
+[portal.integrations.status]
+connected = "Bağlı"
+
+[portal.integrations.table]
+integration = "Entegrasyon"
+worksWith = "Birlikte çalışır"
+
+[portal.integrations.worksWith]
+pipelines = "İşlem hatları"
+policies = "Politikalar"
+sources = "Kaynaklar"
+
+[portal.legal]
+draft = "{{label}} · taslak"
+loadError = "Bu belge yüklenemedi. Lütfen tekrar deneyin."
+loading = "Yükleniyor…"
+title = "Yasal belge"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "Bileşenler"
@@ -7182,6 +7765,7 @@ documents = "Belgeler"
 editor = "Editor"
 home = "Ana Sayfa"
 infrastructure = "Altyapı"
+integrations = "Entegrasyonlar"
 pipelines = "Pipelines"
 policies = "İlkeler"
 procurement = "Tedarik"
@@ -7190,25 +7774,9 @@ sources = "Kaynaklar"
 usage = "Kullanım ve Faturalandırma"
 users = "Kullanıcılar"
 
-[portal.notifications]
-markAllRead = "Tümünü okundu işaretle"
-title = "Bildirimler"
-viewAll = "Tümünü görüntüle"
-
-[portal.notifications.ariaLabel]
-none = "Bildirimler, okunmamış yok"
-unread_one = "Bildirimler, {{count}} okunmamış"
-unread_other = "Bildirimler, {{count}} okunmamış"
-
-[portal.notifications.count]
-allRead = "tümü okundu"
-loading = "yükleniyor"
-new_one = "{{count}} yeni"
-new_other = "{{count}} yeni"
-
-[portal.notifications.empty]
-description = "Yeni bildirim yok."
-title = "Her şey tamam"
+[portal.nav.section]
+platform = "PDF Platformu"
+processor = "PDF İşleyici"
 
 [portal.pipelines]
 subtitle = "Backend üzerindeki her otomatik belge pipeline'ı: bir tetikleyiciyle çalışan, bir kaynak kümesi üzerinde sıralı işlemler zinciri. Adımlarını ve kaynaklarını görmek için bir satıra tıklayın."
@@ -7220,15 +7788,28 @@ newPipeline = "Yeni pipeline"
 [portal.pipelines.builder]
 addStep = "Araç ekle"
 back = "Pipeline'lara dön"
+cannotFollow = "{{produced}} alınamaz"
+chooseAccount = "Bir hesap seçin"
+chooseDestination = "Bir hedef seçin"
+chooseOperation = "Bu adımın ne yapacağını seçin"
+chooseSource = "Bir kaynak seçin"
 discard = "Değişiklikleri at"
 enabled = "Etkin"
+inputs = "Girdi"
+inputSource = "Girdi kaynağı"
+inputTrigger = "Tetikleyici"
 keepEditing = "Düzenlemeye devam et"
+needsConfiguring = "Kurulum gerekli"
 needsUpload = "Yüklenmiş bir dosya gerekiyor"
+noSources = "Henüz bağlı kaynak yok. Girdi olarak kullanmak için bir tane oluşturun."
 noToolMatches = "Aramanızla eşleşen araç yok."
 pipelineSettings = "Pipeline ayarları"
 searchTools = "Araç ara"
 selectToolBody = "Pipeline'ınızı oluşturmak için bir araç ekleyin."
 selectToolTitle = "Henüz araç yok"
+sendToSystem = "Başka bir sisteme gönder"
+stepsIncompatible = "Bu adımlar, önceki adımlarının ürettiği üzerinde çalışamaz: {{tools}}."
+stepsNeedSetup = "Kaydetmeden önce bu adımların hâlâ kurulması gerekiyor: {{tools}}."
 toolSettings = "Araç ayarları"
 unknownStep = "Tanınmayan işlem, olduğu gibi tutuldu."
 unsavedBody = "Kaydedilmemiş değişiklikleriniz var. Ayrılmadan önce kaydedin mi, yoksa atılsın mı?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Kaydedilmemiş değişiklikler"
 uploadUnsupported = "Yüklenen dosyalar henüz pipeline'larda desteklenmiyor, bu nedenle şu adımlar kaydedilemez: {{tools}}."
 usesDefaults = "Varsayılan ayarlarla çalışır"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Önceki adımdaki her dosyayı birleştirir"
+fan-out = "Önceki adımdaki her dosya için bir kez çalışır"
+format-mismatch = "{{accepts}} gerekiyor, ancak önceki adım {{produced}} üretiyor"
+output-uncertain = "Çalışmayabilir: önceki adımın çıktısı nasıl kurulduğuna bağlıdır"
+source-mismatch = "{{accepts}} gerekiyor, ancak bu işlem hattının girdisi {{produced}}"
+undeclared-operation = "Bu adımın ne kabul ettiği denetlenemiyor"
+
 [portal.pipelines.composer]
 addTool = "Araç ekle"
 cancel = "İptal"
 chainEmpty = "Pipeline'ınızı oluşturmaya başlamak için bir araç ekleyin."
 create = "Pipeline oluştur"
-directory = "Çıktı klasörü"
-directoryHelp = "Sunucudaki mutlak yol. Yapılandırılmış izin verilen klasörlerin içinde olmalıdır."
 editingUnsupported = "Bu araç parametrelerinin düzenleme için görüntülenmesi henüz desteklenmiyor."
 moveDown = "Aşağı taşı"
 moveUp = "Yukarı taşı"
 name = "Ad"
 namePlaceholder = "örn. Redaction taraması"
-noSources = "Henüz bağlı kaynak yok. Pipeline, doğrudan kendisine sağlanan dosyalarda yine de çalışabilir."
 noToolSettings = "Bu aracın yapılandırılabilir ayarı yok."
 operations_one = "İşlem ({{count}})"
 operations_other = "İşlemler ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Sil"
 title = "Pipeline silinsin mi?"
 
 [portal.pipelines.detail]
+clearHistory = "Geçmişi temizle"
 delete = "Pipeline sil"
 run = "Şimdi çalıştır"
 
 [portal.pipelines.empty]
 action = "Bir pipeline oluştur"
+connectSource = "Bir kaynak bağla"
 description = "İlk pipeline'ınızı oluşturun: çalışacağı kaynakları seçin, işlemleri zincirleyin ve çıktının nereye gideceğini belirleyin."
 title = "Henüz pipeline yok"
 
@@ -7286,15 +7874,17 @@ active = "Aktif"
 paused = "Duraklatıldı"
 total = "Pipelines"
 
-[portal.pipelines.output]
-folder = "Klasöre yaz"
-inline = "Dosyaları döndür"
-
 [portal.pipelines.run]
+allProcessed_one = "Çalıştırılacak bir şey yok: kaynağın {{count}} belgesi zaten işlendi."
+allProcessed_other = "Çalıştırılacak bir şey yok: kaynaklardaki {{count}} belgenin tümü zaten işlendi."
 completed_one = "Çalıştırma tamamlandı."
 completed_other = "{{count}} çalıştırmanın tümü tamamlandı."
 empty = "Çalıştırılacak bir şey yok: kaynaklarda işlenecek belge yoktu."
 failed = "Çalıştırma başarısız: {{error}}"
+historyCleared = "Geçmiş temizlendi. Sonraki çalıştırma, şu anda kaynaklarda bulunan her şeyi yeniden işler."
+inFlight = "Çalıştırılacak yeni bir şey yok: belgeler önceki bir çalıştırmadan hâlâ işleniyor."
+parked_one = "Çalıştırılacak bir şey yok: {{count}} belge daha önce başarısız oldu ve park edildi. Nedeni düzeltin, ardından yeniden denemek için geçmişi temizleyin."
+parked_other = "Çalıştırılacak bir şey yok: {{count}} belge daha önce başarısız oldu ve park edildi. Nedeni düzeltin, ardından yeniden denemek için geçmişi temizleyin."
 running = "Çalıştırma başladı; hâlâ devam ediyor."
 timeout = "Çalıştırma beklenenden uzun sürüyor; arka planda yine de tamamlanabilir."
 
@@ -7314,12 +7904,18 @@ manual = "Manuel"
 schedule = "Zamanlanmış"
 
 [portal.policies]
+defaultName = "{{category}} Politikası"
 subtitle = "Her belgeye bir araç pipeline'ı uygulayan kalıcı otomasyonlar. Her ilke yükleme veya dışa aktarma sırasında tetiklenir, araç zincirini çalıştırır ve zorunlu sürümü orijinalin yanında kaydeder."
 title = "İlkeler"
 
 [portal.policies.card]
 comingSoon = "Enterprise'a yükselt"
 notSetUp = "Kurulmadı"
+requiresAiEngine = "AI motoru gerektirir"
+
+[portal.policies.categories.classification]
+desc = "Yükleme sırasında her belgenin türünü tanımlayın ve dosyalama ile arama için meta verilerini etiketleyin."
+label = "Sınıflandırma"
 
 [portal.policies.categories.compliance]
 desc = "Her belgede HIPAA, GDPR, SOC 2 veya FedRAMP gereksinimlerini zorunlu kılın."
@@ -7344,6 +7940,13 @@ label = "Güvenlik"
 [portal.policies.config]
 scopeAll = "Tüm belgeler"
 
+[portal.policies.config.classification]
+summary = "Yüklenen her belgeyi ekibinizin etiketlerine göre sınıflandırır ve meta verilerini etiketler."
+
+[portal.policies.config.classification.rules]
+0 = "Sınıflandır"
+1 = "Meta verileri etiketle"
+
 [portal.policies.config.compliance]
 summary = "Belgeler sistemden ayrılmadan önce düzenleyici çerçevelere göre doğrular."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Min güven"
 2 = "Adlandır"
 3 = "Normalleştir"
 
+[portal.policies.config.purview]
+label = "Bir Microsoft Purview duyarlılık etiketi uygula"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Etiket ID"
+labelIdHelp = "Purview portalından etiketin GUID'si. Bir etiket uygulamak, meta verilerini PDF üzerine yazar; şifreleyemez, bunun için Microsoft client gerekir."
+labelName = "Etiket adı (isteğe bağlı)"
+labelNameHelp = "Kişilerin ve araçların etiketi tanıyabilmesi için ID ile birlikte kaydedilir."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview, bir politikanın uyguladığı etiketi bir kişinin seçtiği etiketten ayırır."
+label = "Etiket nasıl kaydedilir"
+privileged = "Bir kişi tarafından seçilmiş olarak"
+standard = "Otomatik uygulanmış olarak"
+
+[portal.policies.config.purviewRead]
+label = "Bir Microsoft Purview etiketi oku"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Belgenin zaten taşıdığı etiketi okur, böylece sonraki adımlar buna göre işlem yapabilir."
+
 [portal.policies.config.retention]
 summary = "Belgelerin ne kadar süre tutulacağını, ne zaman arşivleneceğini ve ne zaman silineceğini zorunlu kılar."
 
@@ -7438,6 +8064,7 @@ title = "Henüz etkinlik yok"
 [portal.policies.endpoints]
 addWatermark = "Filigran"
 autoRedact = "PII'yi karart"
+classifyAndLabel = "Sınıflandır"
 compressPdf = "Sıkıştır"
 flatten = "Düzleştir"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "İlkeleriniz kaydedildi ve bağlantı yeniden kurulduğunda gör
 retry = "Yeniden dene"
 title = "Backend kullanılamıyor"
 
+[portal.policies.operations]
+change = "Bu adımın ne yapacağını değiştir"
+noResults = "Bununla eşleşen adım yok. Bir ürün adı veya \"scan\", \"notify\", \"attach\" deneyin."
+searchPlaceholder = "Adımlarda ara - \"scan\", \"attach\" veya bir ürün adı deneyin"
+
+[portal.policies.operations.bodyMode]
+binary = "Ham dosya baytları"
+json = "Bir JSON payload içinde"
+multipart = "Dosya yükleme olarak (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Kendi ClamAV sunucunuz belgeyi denetler; ağınızdan hiçbir şey çıkmaz."
+label = "Virüs tara (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Makro, yürütülebilir dosya, script veya gömülü nesne taşıyan belgeleri reddeder."
+label = "Aktif içeriği engelle"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive belgeyi denetler ve temiz değilse çalıştırma durur."
+label = "Virüs tara"
+
+[portal.policies.operations.confluenceAttach]
+description = "İşlenen belgeyi bir sayfaya dosyalar."
+label = "Bir Confluence sayfasına ekle"
+
+[portal.policies.operations.consignoSubmit]
+description = "Belgeyi imzalama için ConsignO Cloud'a gönderir."
+label = "İmza için gönder (ConsignO)"
+note = "Belgeyi gönderir. İmzalı kopyayı alma henüz desteklenmiyor, çünkü bir adım sonucu sonraki adıma aktaramaz."
+
+[portal.policies.operations.customApiCall]
+description = "Çağrıyı kendiniz oluşturun: path, method, body ve yanıt işleme."
+label = "Özel bir API çağır"
+
+[portal.policies.operations.discordNotify]
+description = "Politikanın bir belgeyi işlediğini bir kanala bildirir."
+label = "Discord'a mesaj gönder"
+
+[portal.policies.operations.elasticIndex]
+description = "Politikanın ne yaptığını aranabilir bir belge olarak kaydeder."
+label = "Elasticsearch'te bir denetim olayını indeksle"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart, yükleme API'lerine uygundur; JSON, dosyayı bir payload içinde isteyen API'lere uygundur; binary ham baytları gönderir."
+label = "Belge nasıl gönderilsin"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Olduğu gibi gönderilen bir JSON body. {{document.base64}} dosyayı taşır; {{document.*}} ve {{run.*}} belge başına doldurulur."
+label = "JSON body"
+
+[portal.policies.operations.fields.connection]
+label = "Hesap"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API'nin belgeyi altında beklediği form alanı."
+label = "Dosya alanı adı"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Kimden"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Header ad/değer çiftlerinden oluşan bir JSON nesnesi. Bağlantının kimlik bilgisi sizin için eklenir."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue anahtarı"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Mesaj gövdesi olarak gönderilir. {{document.*}} ve {{run.*}} belge başına doldurulur."
+label = "Mesaj"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Sayfa ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Bağlantının base URL'sine eklenir. Asla başka bir host'a ulaşamaz."
+label = "Path"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Drive içinde nereye yazılacağı. {{document.filename}} belge başına doldurulur."
+label = "Hedef path"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Rapor belgeye dokunmadan bırakır. Değiştir, gelen her neyse belgeyi onunla değiştirir."
+label = "Yanıtla ne yapılsın"
+
+[portal.policies.operations.fields.signerEmail]
+label = "İmzalayanın e-postası"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Konu"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio bu metni analiz eder. {{document.title}} kullanın veya denetlenmesini istediğiniz metni yapıştırın."
+label = "Denetlenecek metin"
+
+[portal.policies.operations.fields.to]
+label = "Kime"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud kullanıcı adı"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Politikanın bir belgeyi işlediğini bir alana bildirir."
+label = "Google Chat'e mesaj gönder"
+
+[portal.policies.operations.jiraAttach]
+description = "İşlenen belgeyi bir issue'ya dosyalar."
+label = "Bir Jira issue'suna ekle"
+
+[portal.policies.operations.mailgunEmail]
+description = "İşlenen belgeyi ek olarak gönderir."
+label = "Belgeyi e-posta ile gönder (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "İşlenen belgeyi bir klasöre yazar."
+label = "Nextcloud'a yükle"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Kendi Presidio sunucunuz bulduğu kişisel verileri raporlar."
+label = "Kişisel verileri algıla"
+note = "Presidio dosyaları değil, metni okur. Denetlenmesini istediğiniz metni verin — belgenin kendisi yüklenmez."
+
+[portal.policies.operations.responseMode]
+replace = "Belgeyi yanıtla değiştir"
+report = "Belgeyi koru, yanıtı kaydet"
+
+[portal.policies.operations.sendgridEmail]
+description = "İşlenen belgeyi ek olarak gönderir."
+label = "Belgeyi e-posta ile gönder (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Politikanın bir belgeyi işlediğini bir kanala bildirir."
+label = "Slack'e mesaj gönder"
+
+[portal.policies.operations.splunkEvent]
+description = "Politikanın ne yaptığını denetçilerinizin zaten baktığı yere kaydeder."
+label = "Splunk'a denetim olayı gönder"
+
+[portal.policies.operations.sumologicEvent]
+description = "Politikanın ne yaptığını bir HTTP collector'a kaydeder."
+label = "Sumo Logic'e denetim olayı gönder"
+
+[portal.policies.operations.teamsNotify]
+description = "Politikanın bir belgeyi işlediğini bir kanala bildirir."
+label = "Teams'e mesaj gönder"
+
+[portal.policies.operations.webhookPost]
+description = "Belgenin kendisini seçtiğiniz bir URL'ye gönderir."
+label = "Belgeyi bir webhook'a gönder"
+
+[portal.policies.operations.zapierNotify]
+description = "Çalıştırmanın ayrıntılarını otomasyonunuza aktarır."
+label = "Bir Zap veya Make senaryosu tetikle"
+
 [portal.policies.stats]
 activeFor = "Aktif"
 dataProcessed = "İşlenen veri"
@@ -7473,6 +8277,13 @@ label = "Uygulanan belgeler"
 description = "Yapılandırıldı ancak tetiklenmiyor"
 label = "Duraklatıldı"
 
+[portal.policies.table]
+appliesTo = "Uygulandığı yer"
+docs = "Zorunlu kılınan belgeler"
+enforces = "Zorunlu kılar"
+policy = "Politika"
+status = "Durum"
+
 [portal.policies.wizard.actions]
 back = "Geri"
 cancel = "İptal"
@@ -7480,6 +8291,10 @@ continue = "Devam"
 enablePolicy = "İlkeyi etkinleştir"
 saveChanges = "Değişiklikleri kaydet"
 
+[portal.policies.wizard.capability.classify]
+desc = "Belgenin türünü ekibinizin etiketlerinden tanımlar ve etiketler; böylece kategoriye göre dosyalanır ve aranır."
+label = "Belgeyi sınıflandır"
+
 [portal.policies.wizard.capability.compress]
 desc = "Belgeyi daha küçük bir dosya boyutuna sıkıştırır."
 label = "Dosya boyutunu azalt"
@@ -7500,10 +8315,18 @@ label = "Hassas bilgileri karart"
 desc = "Belge açıldığında hiçbir şeyin otomatik çalışmaması için gizli JavaScript'i kaldırır."
 label = "Aktif içeriği çıkar"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Bağımsız bir zaman damgası yetkilisi kullanarak belgenin belirli bir zamanda tam olarak bu biçimde var olduğunu kanıtlar. Yalnızca bir hash gönderilir - belge asla sunucunuzdan ayrılmaz."
+label = "Güvenilir zaman damgası ekle"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Her sayfanın üzerine görünür bir işaret (örn. “Gizli”) basar."
 label = "Filigran uygula"
 
+[portal.policies.wizard.classification]
+description = "Yüklenen her belge yerleşik etiketlere göre sınıflandırılır ve uygun türlerle etiketlenir. Etiket kümesi tüm ekibiniz arasında paylaşılır."
+labelsHeading = "Sınıflandırma etiketleri"
+
 [portal.policies.wizard.errors]
 noTools = "Önce iş akışında en az bir aracı etkinleştirin."
 saveFailed = "İlke kaydedilemedi. Lütfen tekrar deneyin."
@@ -7548,73 +8371,118 @@ setUp = "{{category}} ilkesini kur"
 [portal.policies.wizard.workflow]
 description = "Bu ilkenin işlediği her belgeye ne yapacağını seçin."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} aktif"
-noRule = "Henüz uygulanan kural yok"
-subtitle = "Hangi pipeline işlerse işlesin, her belgenin geçtiği kalıcı otomasyonlar."
-title = "PDF'lerinizde çalışanlar"
-
 [portal.policySummary.action]
-comingSoon = "Enterprise'a yükselt"
-configure = "Yapılandır"
 setUp = "Kur"
 
-[portal.policySummary.column]
-activeRule = "Aktif kural"
-policy = "İlke"
-status = "Durum"
+[portal.processorFlow]
+footnote = "Sayılar son 24 saate aittir. Akış hızı temsili amaçlıdır."
+liveBadge = "Canlı"
+stats = "{{connected}} bağlı · {{processed}} PDF işlendi"
+title = "PDF İşleyici"
 
-[portal.policySummary.empty]
-description = "İlkeler yapılandırıldığında kategoriler burada görünür."
-title = "Henüz ilke yok"
+[portal.processorFlow.lens]
+ariaLabel = "Görünüm modu"
+flow = "Akış"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Aktif"
-off = "Kapalı"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24s"
+failed = "Başarısız"
+heading = "Sonuçlar"
+success = "Teslim edildi"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} aktif"
+count = "{{n}} · 24s"
+heading = "Politikalar"
+setUp = "Kur"
 soon = "Yakında"
 
-[portal.processingStatus]
-managePlan = "Planı yönet"
-volumeSuffix = "İşlenen PDF'ler · son 30 gün"
+[portal.processorFlow.sankey]
+waist = "Politikalar · {{n}} aktif"
+
+[portal.processorFlow.sankey.empty]
+description = "Belgelerin işleyiciden akışını izlemek için bir kaynak bağlayın ve bir politikayı açın."
+title = "Henüz akış yok"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Bağlan"
+editor = "Stirling PDF Editor"
+heading = "Kaynaklar"
+perDay = "{{n}} / 24s"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "E-posta alımı"
 
 [portal.procurement]
-reset = "Satın almayı sıfırla (demo)"
 subtitle = "Ekibinizin değerlendirme, sözleşme ve katılım süreçlerini tamamlayın. Her belge tek yerde."
 title = "Satın alma"
 
-[portal.procurement.action]
-download = "İndir"
-pay = "Şimdi öde"
-request = "Talep et"
-sign = "İncele ve imzala"
-upload = "Yükle"
-
 [portal.procurement.agreement]
 agreeCta = "Kabul et ve abone ol"
+confidential = "Gizli"
 confirm = "Stirling Enterprise Agreement'ı okudum ve kabul ediyorum."
-eyebrow = "Anlaşma"
-intro = "Tek bir birleşik anlaşma, anlaşmanızı kapsar: Master Service Agreement, Order Form, EULA ve Data Processing Agreement. İnceleyin, ardından teklifi taahhütlü bir abonelik olarak kabul etmek için onaylayın."
-title = "Enterprise anlaşmanızı inceleyin"
+docName = "Stirling Kurumsal Sözleşmesi"
+docSub = "MSA, Sipariş Formu, EULA ve DPA, tek bir imzada birleştirildi."
+download = "İndir"
+downloadDraftError = "Sözleşme PDF'i oluşturulamadı - belge renderer kullanılamıyor. Lütfen kısa süre sonra tekrar deneyin veya destekle iletişime geçin."
+downloadError = "İmzalı sözleşme indirilemedi. Lütfen tekrar deneyin."
+legalName = "Tüzel kişi adı"
+legalNamePlaceholder = "İmzalayacak tüzel kişi"
+loadError = "Sözleşme yüklenemedi. Lütfen tekrar deneyin."
+loading = "Sözleşme yükleniyor..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Değişiklik iste"
+scrollHint = "İncelemek için kaydırın"
+signatory = "İmzalayan adı"
+signatoryPlaceholder = "Tam ad"
+signatoryTitle = "İmzalayan unvanı"
+signatoryTitlePlaceholder = "örn. Genel Hukuk Müşaviri"
+signError = "İmzanız kaydedilemedi. Lütfen tekrar deneyin."
 
 [portal.procurement.builder]
 addons = "Eklentiler"
+addressLine1 = "Adres satırı 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Adres satırı 2"
+addressLine2Placeholder = "Daire, kat, bina"
 back = "Geri"
 businessName = "İşletme adı"
 businessNamePlaceholder = "Şirketiniz"
+city = "Şehir"
+cityPlaceholder = "San Francisco"
+completeRequired = "Lütfen teklif oluşturmadan önce gerekli alanları (* ile işaretli) geçerli bir e-posta ile doldurun."
+contactEmail = "İletişim e-postası"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "İletişim adı"
+contactNamePlaceholder = "Jane Doe"
 continue = "Devam"
-country = "Ülke"
-countryEuro = "Euro Bölgesi (EUR €)"
-countryUK = "Birleşik Krallık (GBP £)"
-countryUS = "Amerika Birleşik Devletleri (USD $)"
+done = "Tamam"
 eula = "Stirling Enterprise EULA'yı okudum ve kabul ediyorum. Bu tekliften oluşturulan anlaşmayı yönetir."
 generate = "Teklif oluştur"
-included = "Dahil"
 indemnification = "IP tazminatı"
 indemnificationSub = "EULA uyarınca uygun IP taleplerini savunuruz"
-offlineLicense = "Çevrimdışı / air-gapped lisans"
-offlineLicenseSub = "Air-gapped, kendi sunucusunda barındırılan bir örnek için indirilebilir lisans dosyası"
+paperEyebrow = "Kurumsal teklif"
+paperFor = "Hazırlanan"
+pdfSize = "PDF boyutu"
+poNumber = "PO numarası"
+poNumberPlaceholder = "İsteğe bağlı"
+postalCode = "Posta kodu"
+postalCodePlaceholder = "94105"
+posture = "Yönetişim"
+posture_count = "~{{count}} politika"
+posture_essentials = "Temel öğeler"
+posture_essentialsSub = "Sınıflandırma + Paylaşım — varsayılanlar"
+posture_governed = "Yönetilen"
+posture_governedSub = "Güvenlik ve Yönlendirme ekler"
+posture_regulated = "Düzenlemeye tabi"
+posture_regulatedSub = "Her kategori — Uyumluluk, Saklama, Alım"
 qbr = "Üç aylık iş değerlendirmeleri"
 qbrSub = "SE'niz her çeyrek kullanım ve yol haritasını inceler"
+region = "Eyalet / bölge"
+regionPlaceholder = "California"
 running = "{{annual}} / yıl · {{years}} yıllık {{tcv}}"
 s1Sub = "Ekibiniz ve her yıl çalıştırmayı beklediğiniz PDF'ler."
 s1Title = "Ne kadar işlem yapacaksınız?"
@@ -7623,6 +8491,12 @@ s2Title = "Taahhüt ve hizmet"
 s3Sub = "Teklif ve oluşturduğu anlaşma için."
 s3Title = "Bilgileriniz"
 serviceLevel = "Hizmet seviyesi"
+size_compact = "Kompakt"
+size_compactSub = "Çoğunlukla metin, 1 MB altında"
+size_heavy = "Ağır"
+size_heavySub = "Taranmış veya görsel ağırlıklı, 5 MB+"
+size_standard = "Standart"
+size_standardSub = "Karışık metin ve görseller, 1 ila 5 MB"
 slDedicated = "Özel"
 slDedicatedSub = "4 iş saati · özel hesap yöneticisi · +30%"
 slPriority = "Öncelikli"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Aynı iş günü · atanmış CSM · +15%"
 slStandard = "Standart"
 slStandardSub = "Sonraki iş günü · paylaşılan CSM · dahil"
 stepOf = "Adım {{n}} / {{total}}"
+taxId = "VAT / Vergi ID"
+taxIdPlaceholder = "İsteğe bağlı"
 term = "Vade"
 termDiscount = "{{pct}}% çok yıllı taahhüt indirimi uygulandı"
 title = "Teklifinizi oluşturun"
@@ -7637,6 +8513,7 @@ training = "İlk kurulum ve eğitim"
 trainingSub = "Ekibinizi çalışır hale getirmek için canlı oturumlar"
 users = "Toplam kullanıcı"
 usersPlaceholder = "örn. 250"
+viewEula = "Oku"
 volEstimated = "{{count}} kullanıcıdan tahmin edildi (her biri ~2.000 PDF, otomasyon dahil). Daha iyi biliyorsanız düzenleyin."
 volManual = "Kendi rakamınız kullanılıyor. İstediğiniz zaman ekip boyutunuzdan yeniden tahmin edin."
 volNoUsers = "Emin değil misiniz? Ekip boyutunuzu girin, biz tahmin edelim."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "örn. 1.000.000"
 years_one = "{{count}} yıl"
 years_other = "{{count}} yıl"
 
-[portal.procurement.docs]
-count_one = "{{count}} belge"
-count_other = "{{count}} belge"
-done = "Tamamlandı"
-here = "Buradasınız"
-hide = "Gizle"
-optional = "İsteğe bağlı"
-paidAddon = "Ücretli eklenti"
-show = "Göster"
-subtitle = "Yolculuğun her adımında ihtiyacınız olan her şey, anlaşma ilerledikçe görünür hale gelir."
-supportingSubtitle = "SOC 2, güvenlik incelemeleri, vergi formları ve daha fazlası, güvenlik veya satın alma ekibiniz istediğinde hazır. Bazılarında tek seferlik ücret bulunur."
-supportingTitle = "Değerlendirmenizi destekleme"
+[portal.procurement.documents]
+agreement = "Kurumsal Sözleşme"
+agreementSub = "MSA, Sipariş Formu ve DPA tek imzada."
+download = "İndir"
+eula = "EULA ve Ticari Şartlar"
+eulaSub = "Yazılım ve self-servis ticari şartlar."
+invoice = "Fatura"
+invoiceSub = "İlk abonelik faturanız."
+laterInvoice = "Kabul ettikten sonra kullanılabilir"
+laterQuote = "Teklifiniz düzenlendiğinde kullanılabilir"
+quote = "Teklif"
+quoteSub = "Kalemlere ayrılmış kurumsal teklifiniz."
+sla = "SLA Eki"
+slaSub = "Destek kademeleri ve yanıt hedefleri."
+subprocessors = "Alt işleyiciler"
+subprocessorsSub = "Sizin adınıza veri işleyen üçüncü taraflar."
+subtitle = "Anlaşma evraklarınız her zaman kullanılabilir."
 title = "Belgeler"
-upcoming = "Yaklaşan"
+view = "Görüntüle"
 
 [portal.procurement.error]
 title = "Bir şeyler ters gitti"
 
 [portal.procurement.hero]
-company = "Enterprise anlaşmanız"
+barAria = "Aşama {{current}} / {{total}}"
 ctaAgreement = "Anlaşmayı incele ve imzala"
-ctaLive = "Yayındasınız"
-ctaPayment = "Ödeme ekle"
+ctaExploring = "Denemenizi kurun"
 ctaQuote = "Teklifinizi inceleyin"
+ctaReviewQuote = "Teklifi incele"
 ctaTrial = "Teklifinizi oluşturun"
+documents = "Belgeler"
 eyebrow = "Enterprise satın alma"
+eyebrowCompany = "{{company}} Kurumsal"
 inviteTeammates = "Takım arkadaşlarını davet et"
-keyDocs = "Önemli belgeler"
-nextStep = "Sonraki adım: {{action}}"
-notStarted = "Başlatılmadı"
+licenseKey = "Lisans anahtarı"
+liveSub = "Kuruluşunuz provision edildi ve lisansınız aktif."
+liveTitle = "Stirling Enterprise'ta canlıdasınız"
+next = "Sonraki: {{stage}}"
 open = "Satın almayı aç"
 scheduleCall = "Görüşme planla"
-setup1Sub = "Takım arkadaşlarınızı davet edin"
-setup1Title = "PDF Editor'ı dağıtın"
-setup2Sub = "Editor'lar ve diğer kaynaklar genelinde işlemeyi açın"
-setup2Title = "PDF Processor'ı bağlayın"
-setup3Sub = "İhtiyacınız olduğunda Güvenlik, Uyumluluk, Yönlendirme veya Saklama'yı açın"
-setup3Title = "Önerilen ilkeleri ekleyin"
+sentenceAgreement = "sözleşmeyi inceleyip imzalama"
+sentenceLive = "provisioning ve kullanıma alma"
+sentencePayment = "satın alma siparişi ve ödeme"
+sentenceQuote = "teklifinizi inceleyip kabul etme"
+sentenceTrial = "deneme çalışma alanınızı kurma"
 
 [portal.procurement.journey]
 daysLeft_one = "{{count}} gün kaldı"
 daysLeft_other = "{{count}} gün kaldı"
-engineerLabel = "Çözüm mühendisiniz"
-eyebrow = "Yayına alma süreciniz"
-live = "Stirling Enterprise'ta yayındasınız"
-nextStep = "Sonraki adım: {{action}}"
-subtitle = "Çözüm mühendisiniz her adımda yanınızda. Her seferinde tek bir sonraki eylem; tam kontrol listesi aşağıdadır."
-title = "Denemeden canlıya, rehberli tek yol"
-trialTitle = "Enterprise denemesi"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Tek imza MSA, sipariş formu, EULA ve DPA'yı kapsar."
@@ -7727,6 +8604,9 @@ downloadError = "Çevrimdışı lisans dosyası henüz oluşturulamadı — lüt
 downloadOffline = "Çevrimdışı lisansı indir (.lic)"
 hint = "Etkinleştirmek için bu anahtarı kendi sunucunuzda barındırılan bir örneğe yapıştırın veya kayıtlarınız için saklayın. Güvende tutun."
 label = "Lisans anahtarınız"
+subtitle = "Kendi barındırdığınız bir instance'ı bu anahtarla etkinleştirin veya kayıtlarınız için saklayın."
+title = "Lisans anahtarınız"
+trialFileHint = "Bu, deneme lisans dosyanızdır. Sözleşmeniz yürürlüğe girdikten sonra geri dönüp tekrar indirin — çevrimiçi lisans anahtarının aksine, .lic dosyası kendiliğinden güncellenmez."
 
 [portal.procurement.link]
 cta = "Hesabı bağla"
@@ -7739,65 +8619,62 @@ description = "Aboneliğiniz aktif ve lisansınız verildi. Ekibiniz hazırland
 eyebrow = "Canlı"
 title = "Stirling Enterprise'ta yayındasınız"
 
-[portal.procurement.locked]
-description = "Deneme anahtarları, taahhütlü hacim teklifleri, tek imzalı anlaşma, ödeme ve belge kayıt defteriniz, enterprise değerlendirmesine başladığınızda burada yer alır."
-eyebrow = "Yalnızca Enterprise"
-talkToSales = "Satış ekibiyle görüş"
-title = "Satın alma süreci Enterprise ile açılır"
-
 [portal.procurement.milestone]
-accept = "Kabul et ve devam et"
-description = "PDF'yi ekibinizle paylaşmak için indirin, hazır olduğunuzda kabul etmek için geri gelin veya değişiklik yapın."
-download = "PDF indir"
 downloadError = "Teklif PDF'si henüz indirilemedi — lütfen birazdan tekrar deneyin."
-edit = "Teklifi düzenle"
-eyebrow = "Teklif {{number}}"
-perYear = " / yıl"
-preparedFor = "{{company}} için hazırlandı"
-tcv = "{{value}} toplam sözleşme değeri"
-title = "Teklifiniz hazır"
-
-[portal.procurement.modal]
-cancel = "İptal"
-chooseFile = "Dosya seç"
-close = "Kapat"
-downloadBody = "İndirmeniz kısa süre içinde başlayacak."
-downloadCta = "İndir"
-downloadTitle = "İndir"
-noFile = "Dosya seçilmedi"
-payBody = "Taahhütlü sözleşmenizi Stripe üzerinden kartla veya banka transferiyle ödeyin. Ödeme temizlenir temizlenmez çalışma alanınız hazırlanır."
-payCta = "Stripe'a devam et"
-payTitle = "Ödemeyi onayla"
-requestBodyFree = "Bunu talep üzerine oluştururuz. Onaylayın, çözüm mühendisiniz kısa süre içinde gönderecek."
-requestBodyPaid = "Bu ücretli bir eklentidir. Onaylayın, çözüm mühendisiniz kapsamını belirleyip evrakları gönderecek."
-requestCta = "Talep et"
-requestTitle = "Bu belgeyi talep et"
-signBody = "Elektronik imza için Stirling Enterprise Agreement'ı açar: tek imza MSA, sipariş formu, EULA ve DPA'yı kapsar. Biz otomatik olarak karşı imza atarız ve ödemeye geçersiniz."
-signCta = "İmza için aç"
-signTitle = "Anlaşmanızı inceleyin ve imzalayın"
-uploadBody = "PO'nuzu bize gönderin, biz de şartlarınıza göre faturalandıralım. PDF'yi sürükleyin veya aşağıdan bir dosya seçin."
-uploadCta = "Satın alma emrini yükle"
-uploadTitle = "Satın alma emrinizi yükleyin"
 
 [portal.procurement.payment]
 description = "Teklifiniz kabul edildi ve lisansınız zaten aktif — ekibiniz hemen başlayabilir. Hazır olduğunuzda ilk faturayı ödeyin; e-posta gerekmeden burada ödeyebilir veya indirebilirsiniz."
+downloadAgreement = "İmzalı sözleşmeyi indir"
 downloadInvoice = "Faturayı indir"
-simulate = "Ödeme alındı simülasyonu yap (demo)"
+eyebrow = "Ödeme"
 title = "Abonelik oluşturuldu"
 viewInvoice = "Faturayı görüntüle ve öde"
 
+[portal.procurement.review]
+acceptCta = "Teklifi kabul et"
+annual = "Yıllık ücret (1. yıl)"
+downloadCta = "Teklifi indir"
+poNumber = "Satın alma siparişi: {{po}}"
+renewal = "Dönemden sonra {{amount}}/yıl üzerinden yenilenir (+{{pct}}% CPI)"
+tcv = "{{years}} yıllık dönem, peşin tam ödemeli: {{tcv}}"
+validUntil = "{{date}} tarihine kadar geçerli"
+
 [portal.procurement.schedule]
 fallback = "Planlayıcı yüklenemedi."
 fallbackLink = "Planlamayı yeni sekmede aç"
+loading = "Zamanlayıcı yükleniyor..."
 subtitle = "Çözüm mühendisiniz ekibinize yayına alma sürecinde rehberlik edecek. Size uygun bir zaman seçin."
 title = "Görüşme planla"
 
-[portal.procurement.status]
-action = "Eylem gerekli"
-available = "Kullanılabilir"
-complete = "Tamamlandı"
-pending = "Beklemede"
-request = "Talep üzerine"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Kapalı, dışa giden yok"
+back = "Geri"
+businessName = "İşletme adı"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Yönetilen, en hızlı başlangıç"
+continue = "Devam et"
+deployment = "Nereye dağıtılmalı?"
+eula = "Stirling EULA ve Ticari Şartlar'ı kabul ediyorum."
+fullName = "Tam ad"
+fullNamePlaceholder = "Adınız"
+invites = "Ekip arkadaşlarını davet et · isteğe bağlı"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Bir görüşme planla"
+seats = "Test eden kişiler"
+seatsPlaceholder = "örn. 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker veya Kubernetes"
+start = "Denemeyi başlat"
+stepOf = "Adım {{n}} / {{total}}"
+subtitle = "14 gün ücretsiz, kart gerekmez."
+subtitleDetails = "Teklifiniz ve sözleşmeniz için birkaç ayrıntı."
+talkFirst = "Önce konuşmayı mı tercih edersiniz?"
+title = "Denemenizi kurun"
+viewEula = "Oku"
+workEmail = "İş e-postası"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Uzatma 7 gün ekler ve çözüm mühendisinizi bilgilendirir."
@@ -7808,20 +8685,6 @@ maxed = "Sınıra ulaşıldı"
 subtitle = "Ücretsiz denemeniz {{date}} tarihine kadar sürer. Kart gerekmez."
 title = "Enterprise denemesi"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Taahhütlü hacim fiyatlandırması, kuruluş genelinde SSO + SCIM + RBAC, 90 günlük değiştirilemez denetim ve özel bir SE."
-homeCta = "Denemeyi Başlat →"
-homeHeadline = "Milyonlarca PDF işleyin."
-
-[portal.recentActivity]
-title = "Son etkinlik"
-viewAll = "Tümünü görüntüle"
-
-[portal.recentActivity.empty]
-description = "Pipeline çalıştırmaları, dağıtımlar ve aracı etkinlikleri burada görünecek."
-title = "Henüz burada bir şey yok"
-
 [portal.search]
 ariaLabel = "Ara"
 placeholder = "Stirling'de ara — endpoints, pipelines, docs…"
@@ -7838,58 +8701,50 @@ admin = "Yönetici"
 [portal.settings.sections]
 account-link = "Hesap bağlantısı"
 
-[portal.shell.header]
-accountFallback = "Hesap"
-accountMenu = "Hesap menüsü"
-darkMode = "Koyu mod"
-lightMode = "Açık mod"
-search = "Ara"
-searchPlaceholder = "Ara…"
-signOut = "Çıkış yap"
-switchToDark = "Koyu temaya geç"
-switchToLight = "Açık temaya geç"
-
 [portal.shell.sidebar]
 appEditor = "Editor"
 appProcessor = "Processor"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} belge"
 linkAccount = "Stirling hesabını bağla"
-planEditor = "Editor planı"
-planEnterprise = "Enterprise planı"
-planProcessor = "Processor planı"
 primaryNav = "Birincil gezinme"
 switchApp = "Uygulama değiştir"
 
+[portal.shell.topbar]
+closeNav = "Gezinmeyi kapat"
+openNav = "Gezinmeyi aç"
+search = "Ara"
+
 [portal.sources]
 subtitle = "Belgeleri Stirling'e besleyen yeniden kullanılabilir giriş bağlantıları. Bir bağlantıyı bir kez yapılandırın, ardından istediğiniz sayıda ilkeden referans verin. Yapılandırması ve hangi ilkelerin kullandığı için bir satıra tıklayın."
 title = "Kaynaklar"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Kaynak bağla"
 
+[portal.sources.builder]
+back = "Kaynaklara dön"
+backToTypes = "Tüm kaynak türleri"
+cancel = "İptal"
+chooseHint = "Belgelerin nereden geldiğini seçin. Gri görünen connector'lar yolda."
+comingSoon = "Yakında"
+comingSoonHeading = "Yakında"
+create = "Kaynak oluştur"
+createTitle = "Bir kaynak bağla"
+delete = "Sil"
+editTitle = "Kaynağı düzenle"
+enabled = "Etkin"
+save = "Değişiklikleri kaydet"
+
+[portal.sources.builder.folderAccess]
+description = "Klasör otomasyonları yalnızca bir yöneticinin izin verdiği klasörleri kullanabilir. Klasör Erişimi ayarları altında ekleyin, ardından tekrar deneyin."
+openSettings = "Klasör Erişimi ayarları"
+title = "Bu klasöre izin verilmiyor"
+
 [portal.sources.delete]
 body = "\"{{name}}\" silinsin mi? Bu işlem geri alınamaz. Ona referans veren ilkelerin güncellenmesi gerekir."
 cancel = "İptal"
 confirm = "Sil"
 title = "Kaynak silinsin mi?"
 
-[portal.sources.detail]
-closeAriaLabel = "Ayrıntıyı kapat"
-delete = "Kaynağı sil"
-docs24h = "Son 24 saat"
-docs30d = "Son 30 gün"
-docsTotal = "Toplam görülen"
-docsTrend = "Son 30 gündeki belgeler"
-documents = "Belgeler"
-edit = "Düzenle"
-notReferenced = "Hiçbir ilke tarafından referans verilmiyor, bu yüzden silmek güvenli."
-pause = "Duraklat"
-resume = "Sürdür"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Kullanan"
-
 [portal.sources.empty]
 description = "İlkelerinizin belgeleri alabileceği bir yer olması için bir klasör (ve yakında bulut depolama) bağlayın."
 title = "Henüz bağlı kaynak yok"
@@ -7899,18 +8754,57 @@ inUse = "Kullanımda"
 total = "Bağlantılar"
 unused = "Kullanılmıyor"
 
+[portal.sources.networkFields.connection]
+helperText = "Sunucu adresi ve kimlik bilgilerini içeren saklanan bağlantı. Ona referans veren her kaynak tarafından yeniden kullanılır."
+label = "Bağlantı"
+
+[portal.sources.networkFields.directory]
+helperText = "Sunucuda yoklanacak klasör, giriş ana dizinine veya share köküne göre göreli. Kök için boş bırakın."
+label = "Klasör"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume, her politika işledikten sonra her dosyayı sunucudan kaldırır."
+label = "Okuma modu"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: her dosyayı bir kez işle"
+snapshot = "Snapshot: her çalıştırmada klasörü yeniden oku"
+
+[portal.sources.networkFields.recursive]
+label = "Klasör derinliği"
+
+[portal.sources.networkFields.recursive.options]
+all = "Alt klasörleri dahil et"
+top = "Yalnızca üst seviye"
+
 [portal.sources.status]
 active = "Aktif"
 disabled = "Devre dışı"
 unused = "Kullanılmıyor"
 
 [portal.sources.table]
+documents = "Belgeler"
 source = "Kaynak"
 status = "Durum"
 usedBy = "İlkeler"
 
+[portal.sources.types.box]
+description = "Ekibinizin zaten paylaştığı Box klasörlerinden belgeleri çekin."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Paylaşılan bir Dropbox klasöründen belgeleri çekin."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Ekibinizin editörde, politika ve AI çalıştırmaları genelinde işlediği belgeler."
 label = "Editor"
+noPolicies = "Editörden henüz politika çalıştırılmadı."
+
+[portal.sources.types.email]
+description = "Ayrılmış bir mailbox'a gönderilen ekleri belgelere dönüştürün."
+label = "E-posta gelen kutusu"
 
 [portal.sources.types.folder]
 description = "Yeni belgeler için sunucudaki bir dizini izleyin."
@@ -7943,25 +8837,80 @@ label = "Klasör derinliği"
 all = "Alt klasörleri dahil et"
 top = "Yalnızca üst seviye"
 
+[portal.sources.types.ftp]
+description = "Yeni belgeler için bir FTP veya FTPS sunucu klasörünü yoklayın."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Paylaşılan Google Drive klasörlerinden belgeleri çekin."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Yeni belgeler için bir SMB ağ paylaşımını izleyin."
+label = "Ağ sürücüsü"
+
+[portal.sources.types.onedrive]
+description = "Yeni belgeler için OneDrive klasörlerini izleyin."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Belgeleri Amazon S3 veya S3 uyumlu bir bucket'tan çekin."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Bucket ve kimlik bilgilerini tutan saklanan bağlantı. Ona referans veren her kaynak ve işlem hattı çıktısı tarafından yeniden kullanılır."
+label = "Bağlantı"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume, her politika işledikten sonra her nesneyi bucket'tan kaldırır."
+label = "Okuma modu"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: her nesneyi bir kez işle"
+snapshot = "Snapshot: her çalıştırmada bucket'ı yeniden oku"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Yalnızca anahtarları bu prefix ile başlayan nesneler işlenir."
+label = "Anahtar prefix'i"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Yeni belgeler için bir SFTP drop klasörünü yoklayın."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "SharePoint belge kitaplıklarından belgeleri çekin."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Kaynak"
 
+[portal.sources.types.webhook]
+createNote = "Bu webhook'u oluşturduğunuzda bir teslim URL'si ve imzalama secret'ı oluşturulur. Gönderenler belgeleri o URL'ye POST eder ve referans veren politikalar varışta çalışır."
+description = "Herhangi bir harici sistemden imzalı HTTP POST ile belgeler alın."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Teslim URL'si"
+secretNote = "İmzalama secret'ı webhook oluşturulduğunda bir kez gösterilir. Yenilemek için kaynağı yeniden oluşturun."
+
+[portal.sources.types.webhook.reveal]
+copy = "Kopyala"
+done = "Tamam"
+secret = "İmzalama secret'ı"
+secretHelp = "Her teslimatın ham body içeriğini bu anahtarla imzalayın (HMAC-SHA256) ve X-Stirling-Signature header'ı olarak gönderin."
+secretWarning = "İmzalama secret'ını şimdi kopyalayın. Güvenliğiniz için yalnızca bir kez gösterilir ve daha sonra alınamaz."
+title = "Webhook oluşturuldu"
+url = "Teslim URL'si"
+usage = "Her belgeyi binary content type (application/pdf veya application/octet-stream) ile ham request body olarak teslim URL'sine POST edin. Referans veren politikalar varışta otomatik olarak çalışır."
+
 [portal.sources.wizard]
-back = "Geri"
-cancel = "İptal"
-continue = "Devam"
-editTitle = "Kaynağı düzenle"
 name = "Ad"
 namePlaceholder = "örn. Talep alımı"
-save = "Değişiklikleri kaydet"
-subtitle = "Adım {{current}} / {{total}} · {{label}}"
-title = "Kaynak bağla"
 type = "Tür"
 
-[portal.sources.wizard.steps]
-chooseType = "Tür seç"
-configure = "Yapılandır"
-review = "İncele ve bağla"
+[portal.stepModal]
+close = "Kapat"
 
 [portal.usage]
 managePayment = "Ödemeyi yönet"
@@ -8021,16 +8970,9 @@ summary = "Bir takımın sahibidir — takım üyelerinin kaynaklarını ve payl
 2 = "Varsayılan ilke üzerinden portal erişimi"
 3 = "Üyenin yapabildiği her şey"
 
-[portal.welcome]
-ariaLabel = "Stirling PDF'ye hoş geldiniz"
-badge = "Açık kaynak"
-installEditor = "Editor'ı yükle"
-inviteTeammates = "Takım arkadaşlarını davet et"
-openInBrowser = "Tarayıcıda aç"
-perks = "Sonsuza kadar ücretsiz · Kendi sunucunuzda barındırılabilir"
-subtitle = "Dünyanın en güvenli PDF Editor'ı, her boyuttaki takım için ücretsizdir. 60+ PDF işlemi ve SSO içerir."
-title = "Hoş geldiniz"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Sınırsız"
 
 [printFile]
 title = "Dosya Yazdır"
@@ -8613,6 +9555,14 @@ text = "PDF sayfalarınızı 90 derecelik artışlarla saat yönünde veya saat
 [rotate.tooltip.header]
 title = "Döndürme Ayarları Genel Bakış"
 
+[ruler]
+clearAll = "Tümünü temizle"
+hideAllLabels = "Tüm etiketleri gizle"
+hideSmallLabels = "Küçük etiketleri gizle"
+physicalValues = "Fiziksel"
+scaled = "Ölçekli"
+showAllLabels = "Tüm etiketleri göster"
+
 [sanitize]
 desc = "PDF dosyalarından potansiyel olarak zararlı öğeleri kaldırın."
 sanitizationResults = "Temizleme Sonuçları"
@@ -8654,31 +9604,45 @@ label = "XMP Üstverisini Kaldır"
 [sanitize.steps]
 settings = "Ayarlar"
 
-[sanitizePdf]
-tags = "temizle,güvende,korunaklı,tehditleri-kaldır"
-
 [sanitizePDF]
 title = "PDF'i Temizle"
 
+[sanitizePdf]
+tags = "temizle,güvende,korunaklı,tehditleri-kaldır"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Sayfa Ölçeğini Ayarla"
 
+[scaleSettings]
+activeScale = "Aktif Ölçek"
+apply = "Ölçeği Uygula"
+applyCalibration = "Kalibrasyonu Uygula"
+calculatedScale = "Hesaplanan ölçek"
+calibrate = "Kalibre et"
+calibrating = "Kalibre ediliyor"
+calibrationDistanceRequired = "Sıfırdan büyük bir gerçek dünya mesafesi girin"
+calibrationInvalid = "Bu ölçümden ölçek hesaplanamıyor"
+calibrationPaperDistance = "Ölçülen sayfa mesafesi: {{distance}}"
+calibrationTitle = "Ölçeği Kalibre Et"
+calibrationTooltip = "Ölçeği otomatik olarak hesaplamak için bilinen bir mesafeyi ölçün"
+customScale = "Özel Ölçek"
+noneSet = "Özel ölçek ayarlanmadı"
+presets = "Hazır Ölçekler"
+ratio = "Ölçek Oranı"
+ratioHelp = "Oran: 1 sayfa birimi = X gerçek dünya birimi"
+ratioPlaceholder = "örn., 100"
+ratioPositive = "Oran sıfırdan büyük olmalıdır"
+ratioRequired = "Oran gereklidir"
+realDistance = "Gerçek dünya mesafesi"
+realDistancePlaceholder = "örn., 5"
+reset = "Varsayılanlara Sıfırla"
+unit = "Birim"
+unitInvalid = "Geçersiz birim: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Açı Eşiği:"
-10 = "Çıktıda beyaz kenarların önlenmesi için eklenen ve kaldırılan kenarın boyutunu ayarlar (varsayılan: 1)."
-2 = "Resmin döndürülmesi için gereken minimum mutlak açıyı ayarlar (varsayılan: 10)."
-3 = "Tolerans:"
-4 = "Tahmini arka plan rengi etrafındaki renk varyasyon aralığını belirler (varsayılan: 30)."
-5 = "Minimum Alan:"
-6 = "Bir fotoğraf için minimum alan eşiğini ayarlar (varsayılan: 10000)."
-7 = "Minimum Kontur Alanı:"
-8 = "Bir fotoğraf için minimum kontur alanı eşiğini ayarlar"
-9 = "Kenar Boyutu:"
-
 [scannerImageSplit]
 submit = "Görsel Taramalarını Çıkar"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Ne yapar"
 whatThisDoesDesc = "Taranmış bir sayfa veya bileşik görüntüdeki her fotoğrafı otomatik olarak bulur ve çıkarır—manuel kırpma yok."
 whenToUse = "Ne zaman kullanılır"
 
+[ScannerImageSplit.selectText]
+1 = "Açı Eşiği:"
+10 = "Çıktıda beyaz kenarların önlenmesi için eklenen ve kaldırılan kenarın boyutunu ayarlar (varsayılan: 1)."
+2 = "Resmin döndürülmesi için gereken minimum mutlak açıyı ayarlar (varsayılan: 10)."
+3 = "Tolerans:"
+4 = "Tahmini arka plan rengi etrafındaki renk varyasyon aralığını belirler (varsayılan: 30)."
+5 = "Minimum Alan:"
+6 = "Bir fotoğraf için minimum alan eşiğini ayarlar (varsayılan: 10000)."
+7 = "Minimum Kontur Alanı:"
+8 = "Bir fotoğraf için minimum kontur alanı eşiğini ayarlar"
+9 = "Kenar Boyutu:"
+
 [search]
 noResults = "Sonuç bulunamadı"
 placeholder = "Arama terimi girin..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Stirling-PDF sunucunuz çevrimdışı ve \"{{endpoint
 [session]
 expired = "Oturumunuzun süresi doldu. Lütfen sayfayı yenileyip tekrar deneyin."
 
-[sessionManagement.tooltip]
-header = "İmzalama Oturumlarını Yönetme"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Yeni katılımcılar imzalama sırasının sonuna eklenir"
-bullet2 = "Oturum sonlandırıldıktan sonra katılımcı eklenemez"
-bullet3 = "Her bir katılımcı sırası geldiğinde bir bildirim alır"
-description = "Sonlandırmadan önce istediğiniz zaman aktif bir oturuma daha fazla katılımcı ekleyebilirsiniz."
-title = "Katılımcı Ekleme"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Tam sonlandırma</b>: Tüm katılımcılar imzaladı"
-bullet2 = "<b>Kısmi sonlandırma</b>: Bazı katılımcılar henüz imzalamadı"
-bullet3 = "İmzalamayan katılımcılar nihai belgeden hariç tutulur"
-bullet4 = "Sonlandırdıktan sonra imzalı PDF'yi aktif dosyalara yükleyebilirsiniz"
-description = "Sonlandırma, tüm imzaları tek bir imzalı PDF'de birleştirir. Bu işlem geri alınamaz."
-title = "Oturumu Sonlandırma"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Zaten imzalamış katılımcılar kaldırılamaz"
-bullet2 = "Kaldırılan katılımcılara artık bildirim gönderilmez"
-bullet3 = "İmzalama sırası otomatik olarak ayarlanır"
-description = "Katılımcılar imzalamadan önce oturumlardan kaldırılabilir."
-title = "Katılımcıları Kaldırma"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Her imza PDF'ye sıralı olarak uygulanır"
-bullet2 = "Sonraki imzalayanlar önceki imzaları görebilir"
-bullet3 = "Onay iş akışları ve yasal teslim zincirleri için kritiktir"
-description = "Oturumu oluştururken belirttiğiniz sıra, kimin önce imzalayacağını belirler."
-title = "İmza Sırası"
-
 [settings]
 close = "Kapat"
 
+[settings.ai]
+documents = "Belgeler ve RAG"
+general = "Genel"
+limits = "Sınırlar ve Performans"
+models = "Modeller ve Sağlayıcılar"
+title = "AI"
+
 [settings.configuration]
 advanced = "Gelişmiş"
 database = "Veritabanı"
 endpoints = "Uç Noktalar"
 features = "Özellikler"
+folderAccess = "Klasör Erişimi"
 mcp = "MCP Server"
 storageSharing = "Dosya Depolama ve Paylaşma"
 systemSettings = "Sistem Ayarları"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Varsayılan PDF düzenleyici"
 defaultPdfEditorActive = "Stirling PDF varsayılan PDF düzenleyiciniz"
 defaultPdfEditorChecking = "Kontrol ediliyor..."
 defaultPdfEditorInactive = "Varsayılan olarak başka bir uygulama ayarlı"
+defaultPdfEditorRemind = "Varsayılan olarak ayarlamayı hatırlat"
+defaultPdfEditorRemindDescription = "Stirling PDF varsayılan PDF uygulamanız olmadığında bir banner göster."
 defaultPdfEditorSet = "Zaten Varsayılan"
 defaultStartupView = "Başlangıçtaki varsayılan görünüm"
 defaultStartupViewDescription = "Uygulama başlarken sol sütunda hangi sekmenin etkin olacağını seçin"
@@ -8817,9 +9771,18 @@ languageDescription = "Görüntüleme dilini seçin"
 logout = "Oturumu kapat"
 setAsDefault = "Varsayılan Yap"
 theme = "Tema"
+themeAccent = "Vurgu rengi"
+themeAccentCustom = "Özel renk"
+themeAccentCustomHint = "Özel (varsayılanlar önerilir)"
+themeAccentDark = "Koyu mod vurgu rengi"
+themeAccentDefault = "Varsayılan"
+themeAccentDefaultHint = "Varsayılan tema (önerilir)"
+themeAccentDescription = "Düğmeler, bağlantılar ve vurgular bunu takip eder ve uygulamayı hafifçe renklendirir. Açık ve koyu modların her birinin kendine ait rengi vardır. Sistem, hangisi etkinse onu kullanır."
+themeAccentLight = "Açık mod vurgu rengi"
 themeDark = "Koyu"
 themeDescription = "Açık ve koyu mod arasında geçiş yapın"
 themeLight = "Açık"
+themeReset = "Temayı varsayılana geri yükle"
 themeSystem = "System"
 title = "Genel"
 user = "Kullanıcı"
@@ -8833,6 +9796,12 @@ intro = "Kuruluşunuz için kullanıcı kimlik doğrulaması, ekip yönetimi ve
 learnMore = "Belgelerde daha fazla bilgi edinin"
 title = "Sistem Yöneticileri için"
 
+[settings.general.loginLanding]
+description = "Stirling Cloud'da oturum açtığınızda hangi uygulamanın açılacağını seçin."
+editor = "Düzenleyici"
+processor = "İşleyici"
+title = "Oturum açtıktan sonra"
+
 [settings.general.mode]
 fullscreen = "Tam ekran"
 sidebar = "Kenar çubuğu"
@@ -9041,6 +10010,11 @@ security = "Güvenlik"
 telegram = "Telegram"
 title = "Güvenlik ve Kimlik Doğrulama"
 
+[settings.signOut]
+confirm = "Oturumu kapatmak istediğinizden emin misiniz?"
+submit = "Oturumu kapat"
+title = "Oturumu kapat"
+
 [settings.team]
 title = "Takım"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Sunucuya Yükle"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "buraya tıklayın"
+fallback = "Otomatik olarak açılmadıysa,"
+opening = "Swagger UI yeni bir sekmede açılıyor..."
 tags = "api,dokümantasyon,swagger,uç noktalar,geliştirme"
 title = "API Dokümantasyonu"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Bu aracı çalıştırmak için Etkin Dosyalar içinden dosya
 singleFileScope = "Yalnızca şu dosyaya uygulanıyor: {{fileName}}"
 viewerMode = "Birden çok dosya seçmek için dosya düzenleyiciye geçin."
 
+[toolFormat]
+ANY = "herhangi bir dosya"
+CBR = "bir çizgi roman arşivi (CBR)"
+CBZ = "bir çizgi roman arşivi (CBZ)"
+CSV = "bir CSV dosyası"
+EBOOK = "bir e-kitap"
+EMAIL = "bir e-posta"
+EXCEL = "bir elektronik tablo"
+HTML = "bir web sayfası"
+IMAGE = "görseller"
+JAVASCRIPT = "bir JavaScript dosyası"
+JSON = "bir JSON dosyası"
+MARKDOWN = "bir Markdown dosyası"
+NONE = "dosya yok"
+PCL = "bir PCL yazdırma dosyası"
+PDF = "bir PDF"
+PDF_ENCRYPTED = "parola korumalı bir PDF"
+POSTSCRIPT = "bir PostScript dosyası"
+PPT = "bir sunum"
+TEXT = "bir metin dosyası"
+VIDEO = "bir video"
+WORD = "bir Word belgesi"
+XML = "bir XML dosyası"
+XPS = "bir XPS belgesi"
+ZIP = "bir ZIP arşivi"
+
 [toolPanel]
 alpha = "Alfa"
 backToAllTools = "Tüm araçlara geri dön"
 collapse = "Paneli daralt"
 expand = "Paneli genişlet"
 goBack = "Geri dön"
+pdfTools = "PDF Araçları"
 placeholder = "Başlamak için bir araç seçin"
 premiumFeature = "Premium özellik:"
+searchTools = "Araçları ara"
 toolsHeader = "Araçlar"
 viewAllTools = "Tüm araçları görüntüle"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Hiç araç bulunamadı"
 quickAccess = "HIZLI ERİŞİM"
 searchPlaceholder = "Araçlarda ara..."
 
-[toolPicker.categories]
-advancedTools = "Gelişmiş Araçlar"
-recommendedTools = "Önerilen Araçlar"
-standardTools = "Standart Araçlar"
-
 [toolPicker.subcategories]
 advancedFormatting = "Gelişmiş Biçimlendirme"
 automation = "Otomasyon"
@@ -9950,16 +10950,31 @@ title = "Kullanıcılar"
 you = "(siz)"
 
 [users.action]
+cancelInvite = "Davetiyeyi iptal et"
 deleteTeam = "Takımı sil"
 disableMfa = "MFA'yı sıfırla"
 move = "Takıma taşı"
 reinstate = "Yeniden etkinleştir"
 remove = "Kuruluştan kaldır"
+removeTeam = "Takımdan kaldır"
 rename = "Takımı yeniden adlandır"
 resetPw = "Parolayı sıfırla"
 suspend = "Askıya al"
 unlock = "Hesabın kilidini aç"
 
+[users.activity]
+daysAgo = "{{count}} gün önce"
+hoursAgo = "{{count}} saat önce"
+justNow = "Az önce"
+minutesAgo = "{{count}} dk önce"
+monthsAgo_one = "{{count}} ay önce"
+monthsAgo_other = "{{count}} ay önce"
+never = "Hiçbir zaman"
+weeksAgo_one = "{{count}} hafta önce"
+weeksAgo_other = "{{count}} hafta önce"
+yearsAgo_one = "{{count}} yıl önce"
+yearsAgo_other = "{{count}} yıl önce"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "İlkeyi onaylar"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "{{email}} adresine gönderilen davetiye iptal edilsin mi? Mevcut bağlantıyla katılamayacaklar."
+cancelInviteTitle = "Davetiyeyi iptal et"
 deleteTeamBody = "{{name}} takımı silinsin mi? Takım önce boş olmalıdır - üyelerini başka bir takıma taşıyın ve hâlâ herhangi bir entegrasyon yapılandırmasına sahip olmamalıdır."
 deleteTeamTitle = "Takımı sil"
 disableMfaBody = "{{name}} adlı kullanıcının MFA kaydı kaldırılsın mı? Gerekliyse bir sonraki girişte tekrar kuracak."
 disableMfaTitle = "MFA'yı sıfırla"
 removeBody = "{{name}} adlı kullanıcı kuruluştan kalıcı olarak kaldırılsın mı? Bu işlem geri alınamaz."
+removeTeamBody = "{{name}} takımdan kaldırılsın mı? Hesabını korur ancak bu takımın kaynaklarına erişimini kaybeder."
 removeTitle = "Üyeyi kaldır"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Kullanıcı adı"
 usernameError = "Kullanıcı adı en az 3 karakter olmalıdır"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Davet eden: {{who}}"
+cancel = "İptal"
+count = "{{count}} beklemede"
+desc = "Henüz katılmamış davet edilen kişiler. Kabul edene kadar bir koltuk tutarlar."
+expiresInDays_one = "{{count}} gün içinde sona erer"
+expiresInDays_other = "{{count}} gün içinde sona erer"
+expiresToday = "Bugün sona erer"
+title = "Bekleyen davetiyeler"
+
 [users.loadError]
 description = "Arka uca ulaşılırken bir sorun oluştu veya erişiminiz yok. Tekrar deneyin."
 title = "Üyeler yüklenemedi"
@@ -10212,9 +11240,11 @@ title = "Ekler"
 
 [viewer.bookmarks]
 bookmarkTitle = "Yer imi başlığı"
+bookmarkTitleRequired = "Yer imi başlığı gereklidir"
 closeSidebar = "Yer imleri kenar çubuğunu kapat"
 collapseAll = "Tüm yer imlerini daralt"
 expandAll = "Tüm yer imlerini genişlet"
+searchPlaceholder = "Yer imlerini ara"
 
 [viewer.comments]
 addComment = "Yorum ekle"
@@ -10605,30 +11635,6 @@ title = "Filigran Metni"
 image = "Resim"
 text = "Metin"
 
-[wetSignature.tooltip]
-header = "İmza Oluşturma Yöntemleri"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Kalem rengi ve kalınlığını özelleştirin"
-bullet2 = "Memnun kalana kadar temizleyip yeniden çizin"
-bullet3 = "Dokunmatik cihazlarda çalışır (tabletler, telefonlar)"
-description = "Fareyi veya dokunmatik ekranı kullanarak el yazısı imza oluşturun. Kişisel ve özgün imzalar için en iyisidir."
-title = "İmza Çiz"
-
-[wetSignature.tooltip.type]
-bullet1 = "Birden çok yazı tipinden seçin"
-bullet2 = "Metin boyutunu ve rengini özelleştirin"
-bullet3 = "Standartlaştırılmış imzalar için idealdir"
-description = "Yazılan metinden bir imza oluşturun. Hızlı ve tutarlıdır, iş belgeleri için uygundur."
-title = "İmza Yaz"
-
-[wetSignature.tooltip.upload]
-bullet1 = "PNG, JPG ve diğer görüntü formatlarını destekler"
-bullet2 = "En iyi sonuçlar için şeffaf arka plan önerilir"
-bullet3 = "Görüntü, imza alanına sığacak şekilde yeniden boyutlandırılacaktır"
-description = "Önceden oluşturulmuş bir imza görüntüsü yükleyin. Taranmış bir imzanız veya şirket logonuz varsa idealdir."
-title = "İmza Görüntüsü Yükle"
-
 [workbenchBar]
 activeFiles = "Etkin dosyalar"
 annotations = "Ek açıklamalar"
@@ -10652,6 +11658,7 @@ redact = "Karart"
 rotateLeft = "Sola döndür"
 rotateRight = "Sağa döndür"
 ruler = "Cetvel / Ölçüm"
+rulerSettings = "Ölçek Ayarları"
 save = "Kaydet"
 saveAll = "Tümünü kaydet"
 saveAs = "Farklı kaydet"
diff --git a/frontend/editor/public/locales/uk-UA/translation.toml b/frontend/editor/public/locales/uk-UA/translation.toml
index c4e274255b..4649792ad7 100644
--- a/frontend/editor/public/locales/uk-UA/translation.toml
+++ b/frontend/editor/public/locales/uk-UA/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "файлів обрано"
 font = "Шрифт"
 fontSizeTooltip = "Розмір тексту номера сторінки у пунктах. Більші числа дають більший текст."
 fontTypeTooltip = "Гарнітура для номерів сторінок. Оберіть відповідно до стилю документа."
-genericSubmit = "Надіслати"
 green = "Зелений"
 help = "Допомога"
-imgPrompt = "Оберіть зображення(я)"
 incorrectPasswordMessage = "Поточний пароль невірний."
 info = "Інформація"
 invalidUndoData = "Не можна скасувати: недійсні дані операції"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Угода під час входу"
 logOut = "Вийти"
 marginTooltip = "Відстань між номером сторінки та краєм сторінки."
 moreOptions = "Додаткові параметри"
-multiPdfPrompt = "Оберіть PDFи (2+)"
 never = "Ніколи"
 no = "Ні"
 noFileSelected = "Файл не вибрано. Будь ласка, завантажте один."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Порядок сторінок (введіть список
 pages = "Сторінки"
 pageSelectionPrompt = "Користувацький вибір сторінки (введіть список номерів сторінок через кому 1,5,6 або функції типу 2n+1) :"
 password = "Пароль"
-pdfPrompt = "Оберіть PDF(и)"
 pin = "Закріпити файл (залишити активним після виконання інструмента)"
 pro = "Pro"
 processingComplete = "Ваш файл готовий."
@@ -356,6 +352,7 @@ text = "Ці дозволи контролюють, що користувачі
 title = "Змінити дозволи"
 
 [addStamp]
+preview = "Попередній перегляд штампа"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Ручні завантаження: натисніть поси
 noLanguages = "У налаштованому каталозі не знайдено мов tessdata."
 permissionNotice = "Шлях до tessdata недоступний для запису. Завантаження буде відкрито в браузері; будь ласка, збережіть файли .traineddata вручну до папки tessdata."
 
+[admin.settings.ai.documents]
+description = "Налаштуйте модель ембедингів і параметри пошуку, що використовуються для відповідей на запитання щодо документів. Застосовується до AI engine після збереження."
+title = "Документи та RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Залиште порожнім, щоб використовувати власні облікові дані середовища engine. Застосовується до самостійно розгорнутих одно-engine розгортань."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Збережено - залиште порожнім, щоб зберегти поточний ключ"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Базовий URL OpenAI-сумісної / Ollama кінцевої точки ембедингів, напр. http://ollama:11434/v1. Має вказувати на довірену внутрішню кінцеву точку (SSRF-чутливо)."
+label = "Базовий URL ембедингів"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Назва моделі ембедингів. Довільний текст; пропозиції є лише підказками."
+label = "Модель ембедингів"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Постачальник, що використовується для перетворення тексту документа на векторні ембединги."
+label = "Постачальник ембедингів"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Максимальна кількість пошукових запитів для отримання даних, які агент може виконати за один запит."
+label = "Макс. пошуків"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Зміна моделі ембедингів набуває чинності негайно, але документи, проіндексовані попередньою моделлю, потрібно переіндексувати, щоб пошук повертав правильні результати."
+title = "Потрібне переіндексування"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Якщо ви змінили модель ембедингів, переіндексуйте наявні документи, щоб пошук використовував нову модель."
+
+[admin.settings.ai.documents.topK]
+description = "Кількість найрелевантніших фрагментів, отриманих за один пошук."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Підключіть Stirling до Python AI engine і виберіть, які можливості AI будуть доступні. Зміни застосовуються після перезапуску."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Увімкніть або вимкніть окремі функції AI. Вимкнені функції приховані в застосунку."
+title = "Можливості"
+
+[admin.settings.ai.general.enabled]
+description = "Головний перемикач. Якщо вимкнено, інструменти AI, агенти або виклики engine недоступні."
+label = "Увімкнути AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Розмовний помічник для роботи з PDF."
+label = "Чат-помічник"
+
+[admin.settings.ai.general.features.classify]
+description = "Автоматично категоризувати документи за типом або вмістом."
+label = "Класифікація документів"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Створити новий PDF (наприклад, з HTML) через AI-агента."
+label = "Створити PDF із запиту"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Ставте запитання й отримуйте відповіді на основі завантаженого документа."
+label = "Запитання щодо документа"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Перевіряти документи на математичні та числові помилки."
+label = "Математичний аудитор"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Додавати до PDF коментарі та анотації огляду, створені AI."
+label = "Агент коментарів PDF"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Тайм-аут для важчих операцій агентів, таких як створення документів."
+label = "Тайм-аут тривалих операцій (секунди)"
+
+[admin.settings.ai.general.note]
+body = "AI engine працює як окремий сервіс. Його спільний секрет"
+body2 = "задається через змінну середовища контейнера. Provider API keys можна ввести на цих сторінках або надати як змінні середовища engine; ключі, введені тут, надсилаються до engine після збереження."
+title = "Про AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Тайм-аут для потокових (токен за токеном) відповідей чату."
+label = "Тайм-аут потоку (секунди)"
+
+[admin.settings.ai.general.test]
+button = "Перевірити з’єднання"
+failBody = "AI engine не відповів. Перевірте URL, чи запущено контейнер engine і чи увімкнено AI (після увімкнення потрібен перезапуск)."
+failTitle = "AI engine недоступний"
+okBody = "AI engine відповів на перевірку справності."
+okTitle = "AI engine доступний"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Тайм-аут для стандартних AI-запитів до engine."
+label = "Тайм-аут запиту (секунди)"
+
+[admin.settings.ai.general.url]
+description = "Внутрішній URL Python AI engine, напр. http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "Обмеження для обсягу роботи, яку можуть виконувати AI-запити, і кількості одночасних запусків. Застосовується до AI engine після збереження."
+title = "Ліміти та продуктивність"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Обмеження: відхиляти AI-запити, витягнутий текст яких перевищує цю довжину."
+label = "Макс. символів на запит"
+
+[admin.settings.ai.limits.maxPages]
+description = "Обмеження: відхиляти AI-запити з більшою кількістю сторінок PDF."
+label = "Макс. сторінок на запит"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Максимальна кількість одночасних активних викликів моделі в усьому engine."
+label = "Макс. паралельність моделі"
+
+[admin.settings.ai.models]
+description = "Виберіть LLM provider і розумні/швидкі моделі, які використовує AI engine. Застосовується до AI engine після збереження."
+title = "Моделі та постачальники"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Залиште порожнім, щоб використовувати власні облікові дані середовища engine. Застосовується до самостійно розгорнутих одно-engine розгортань."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Збережено - залиште порожнім, щоб зберегти поточний ключ"
+
+[admin.settings.ai.models.baseUrl]
+description = "Базовий URL OpenAI-сумісної / Ollama кінцевої точки, напр. http://ollama:11434/v1."
+label = "Базовий URL постачальника"
+warning = "Базовий URL має вказувати на довірену внутрішню кінцеву точку. Engine виконуватиме до неї серверні запити, тому недовірене значення є SSRF-чутливим."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Максимальна кількість вихідних токенів для швидкої моделі."
+label = "Макс. токенів швидкої моделі"
+
+[admin.settings.ai.models.fastModel]
+description = "Дешевша, швидша модель для легких завдань. Довільний текст; пропозиції є лише підказками."
+label = "Швидка модель"
+
+[admin.settings.ai.models.provider]
+description = "З яким LLM provider взаємодіє engine."
+label = "Постачальник"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Максимальна кількість вихідних токенів для розумної моделі."
+label = "Макс. токенів розумної моделі"
+
+[admin.settings.ai.models.smartModel]
+description = "Модель із високими можливостями для складних міркувань. Довільний текст; пропозиції є лише підказками."
+label = "Розумна модель"
+
+[admin.settings.ai.saved]
+body = "Зміни автоматично надсилаються до AI engine."
+bodyNoPush = "Налаштування збережено. Вони застосуються, коли AI engine наступного разу підхопить свою конфігурацію."
+title = "Налаштування AI збережено"
+
 [admin.settings.badge]
 clickToUpgrade = "Клацніть, щоб переглянути деталі плану"
 
@@ -938,6 +1094,25 @@ label = "Генерувати знову під час запуску"
 description = "Кількість днів дії сертифіката"
 label = "Строк дії сертифіката (дні)"
 
+[admin.settings.folderAccess]
+description = "Каталоги, з яких джерелам папок і виходам папок дозволено читати та до яких дозволено записувати. Це межа безпеки: автоматизації ніколи не можна спрямувати на серверний шлях поза цим списком."
+securityNote = "Залиште порожнім, щоб повністю вимкнути джерела папок і виходи. Власний каталог конфігурації Stirling завжди заборонений."
+title = "Доступ до папок"
+
+[admin.settings.folderAccess.implied]
+description = "Ці каталоги, керовані Stirling, завжди дозволені й не можуть бути змінені тут."
+serverStorage = "Сховище файлів сервера"
+title = "Завжди дозволено"
+watchedFolder = "Відстежувана папка конвеєра"
+
+[admin.settings.folderAccess.roots]
+add = "Додати"
+empty = "Дозволених папок немає. Джерела папок і виходи наразі вимкнені."
+hint = "Введіть абсолютні шляхи, наприклад /data/inbox."
+label = "Дозволені корені папок"
+placeholder = "/data/inbox"
+remove = "Видалити корінь папки"
+
 [admin.settings.general]
 description = "Налаштуйте загальносистемні параметри застосунку, зокрема брендинг і поведінку за замовчуванням."
 system = "Система"
@@ -1842,6 +2017,15 @@ export = "Експорт"
 accessDenied = "Доступ заборонено"
 insufficientPermissions = "У вас немає прав для виконання цієї дії."
 
+[auth.callback]
+completing = "Завершення автентифікації"
+invalidToken = "Вхід через OAuth не вдався - недійсний токен."
+missingToken = "Вхід через OAuth не вдався - токен не отримано."
+oauthFailed = "Вхід через OAuth не вдався. Спробуйте ще раз."
+pleaseWait = "Зачекайте, поки ми завершимо ваш вхід."
+signedOut = "Ви вийшли з системи. Увійдіть знову."
+windowMayClose = "Ви можете закрити це вікно після завершення."
+
 [auth.displayName]
 guest = "Гість"
 user = "Користувач"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Захищає документи PDF, видаляючи
 description = "Цей інструмент автоматично перейменує файли PDF на основі їхнього вмісту. Він аналізує документ, щоб знайти найвідповіднішу назву з тексту."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Автоповорот"
+tags = "автоповорот,виправити орієнтацію,догори дриґом,боком,вирівняти,орієнтувати,визначити орієнтацію,виправити поворот,автоорієнтація,скановано,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Поріг упевненості"
+
+[autoRotate.detectionMode]
+auto = "Авто"
+osd = "Лише OCR"
+text = "Лише текст"
+title = "Метод визначення"
+
+[autoRotate.error]
+failed = "Під час автоповороту PDF сталася помилка."
+
+[autoRotate.inferUndetected]
+title = "Повернути сторінки з низькою впевненістю відповідно"
+
+[autoRotate.report]
+applied = "{{degrees}}° за год. стр."
+confidenceValue = "Упевненість {{value}}"
+noChange = "Без змін"
+pageLabel = "Сторінка {{number}}"
+summary = "Повернуто {{rotated}} з {{total}} сторінок, {{unchanged}} залишено без змін"
+title = "Звіт визначення"
+
+[autoRotate.report.method]
+inferred = "Зіставлено"
+none = "Пропущено"
+osd = "OCR"
+text = "Текст"
+
+[autoRotate.report.note]
+belowThreshold = "Нижче порога"
+blankPage = "Сторінка порожня"
+inferredFromDocument = "Так само, як інші сторінки"
+noDominantDirection = "Змішані напрямки тексту"
+osdFailed = "Читабельний текст не знайдено"
+osdNoVerdict = "Не вдалося визначити верх"
+tesseractUnavailable = "OCR не встановлено"
+tooFewGlyphs = "Замало тексту"
+
+[autoRotate.results]
+title = "Результати автоповороту"
+
+[autoRotate.settings]
+title = "Налаштування"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Наскільки певною має бути перевірка, перш ніж сторінку буде повернуто. Зменште, щоб повертати більше сторінок, збільште, щоб залишати більше сторінок без змін."
+title = "Поріг упевненості"
+
+[autoRotate.tooltip.description]
+text = "Визначає, якою стороною догори має бути кожна сторінка, і повертає її правильно. Сторінки, які вже розташовані правильно, залишаються без змін."
+
+[autoRotate.tooltip.detectionMode]
+text = "Авто спочатку читає текст на сторінці, а потім, якщо цього недостатньо, розглядає сторінку як зображення. Лише текст пропускає перевірку зображення, що найшвидше для документів, які ніколи не сканувалися. Лише OCR обробляє кожну сторінку як зображення."
+title = "Метод визначення"
+
+[autoRotate.tooltip.header]
+title = "Автоповорот"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Порожні або майже порожні сторінки не можна перевірити окремо. Коли всі сторінки, які вдалося прочитати, потребують однакового повороту, ці сторінки повертаються відповідно до них."
+title = "Повернути сторінки з низькою впевненістю відповідно"
+
 [autoSizeSplitPDF]
 tags = "pdf,розділити,документ,організація"
 
@@ -2189,33 +2440,6 @@ keywords = "Ключові слова: odd, even"
 numbers = "Числа/діапазони: 5, 10-20"
 progressions = "Прогресії: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Типи сертифікатів"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Керується адміністраторами системи"
-bullet2 = "Спільний для авторизованих користувачів"
-bullet3 = "Представляє компанію, а не окрему особу"
-bullet4 = "Найкраще для: офіційних документів, командних підписів"
-description = "Спільний сертифікат, наданий вашою організацією. Використовується для загальноорганізаційного підписання."
-title = "Сертифікат організації"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Автоматично створюється під час першого використання"
-bullet2 = "Прив’язаний до вашого облікового запису"
-bullet3 = "Не може бути спільним з іншими користувачами"
-bullet4 = "Найкраще для: особистих документів, індивідуальної відповідальності"
-description = "Автоматично створений сертифікат, унікальний для вашого облікового запису. Підходить для індивідуальних підписів."
-title = "Персональний сертифікат"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Потрібен файл P12/PFX і пароль"
-bullet2 = "Може бути виданий зовнішніми центрами сертифікації"
-bullet3 = "Вищий рівень довіри для юридичних документів"
-bullet4 = "Найкраще для: юридично зобов’язуючих контрактів, зовнішньої валідації"
-description = "Використовуйте власний файл сертифіката PKCS#12. Забезпечує повний контроль над властивостями сертифіката."
-title = "Завантажити власний P12"
-
 [certSign]
 awaitingSignatures = "Очікування підписів"
 chooseCertificate = "Вибрати файл сертифіката"
@@ -2542,34 +2766,6 @@ server = "Сервер"
 stepTitle = "Джерело сертифіката"
 upload = "Завантажити"
 
-[certSign.tooltip.header]
-title = "Про керування підписами"
-
-[certSign.tooltip.overview]
-bullet1 = "Перевіряйте наявні підписи та їхню дійсність"
-bullet2 = "Переглядайте детальну інформацію про підписантів і сертифікати"
-bullet3 = "Додавайте нові цифрові підписи для захисту ваших документів"
-bullet4 = "Підтримується кілька файлів із зручною навігацією"
-text = "Цей інструмент дозволяє перевірити, чи підписані ваші PDF цифровим підписом і додати нові цифрові підписи. Цифрові підписи підтверджують, хто створив або затвердив документ, і показують, чи його змінювали після підписання."
-title = "Що може цей інструмент?"
-
-[certSign.tooltip.signing]
-bullet1 = "Підтримує формати PEM, PKCS12, JKS і серверні сертифікати"
-bullet2 = "Можна показувати або приховувати підпис у PDF"
-bullet3 = "Додавайте причину, місце та ім’я підписанта"
-bullet4 = "Вибирайте сторінку для розміщення видимих підписів"
-bullet5 = "Використовуйте серверний сертифікат для простого варіанту 'Підписати зі Stirling-PDF'"
-text = "Щоб підписати PDF, вам потрібен цифровий сертифікат (наприклад, PEM, PKCS12 або JKS). Можна зробити підпис видимим у документі або невидимим — лише для безпеки."
-title = "Додавання підписів"
-
-[certSign.tooltip.validation]
-bullet1 = "Показує, чи підписи дійсні або недійсні"
-bullet2 = "Відображає інформацію про підписанта та дату підпису"
-bullet3 = "Перевіряє, чи документ було змінено після підписання"
-bullet4 = "Може використовувати користувацькі сертифікати для перевірки"
-text = "Під час перевірки інструмент повідомляє, чи дійсні підписи, хто підписав документ, коли його підписано та чи змінювався документ після підписання."
-title = "Перевірка підписів"
-
 [changeCreds]
 changeUsername = "Оновіть ім’я користувача. Після оновлення вас буде виведено із системи."
 credsUpdated = "Обліковий запис оновлено"
@@ -2824,6 +3020,7 @@ next = "Далі"
 preview = "Попередній перегляд"
 previous = "Назад"
 refresh = "Оновити"
+remaining = "Залишилося"
 retry = "Повторити"
 save = "Зберегти"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Розширений моніторинг"
-allInOneWorkspace = "Єдиний робочий простір для PDF (переглядач, інструменти та агент)"
-apiSandbox = "Пісочниця API"
-dedicatedSupportSlas = "Виділена підтримка та SLA"
-fasterThroughput = "Пропускна здатність у 10 разів вища"
-fullyPrivateFiles = "Повністю приватні файли"
-largeFileProcessing = "Обробка великих файлів"
-orgWideAccess = "Контроль доступу по всій організації"
-premiumAiModels = "Преміум AI-моделі"
-prioritySupport = "Пріоритетна підтримка"
-privateDocCloud = "Приватна хмара документів"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Безпечний доступ до API"
-standardThroughput = "Стандартна пропускна здатність"
-unlimitedApiAccess = "Необмежений доступ до API"
-unlimitedSeats = "Необмежена кількість місць"
-
 [crop]
 autoCrop = "Автообрізання білих полів"
 noFileSelected = "Виберіть PDF, щоб почати обрізання"
@@ -3346,6 +3525,7 @@ message = "Не вдалося встановити обробник PDF за з
 title = "Помилка"
 
 [defaultApp.prompt]
+dontRemind = "Більше не нагадувати"
 message = "Зробіть Stirling PDF типовою програмою для відкриття PDF-файлів."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Налаштувати групи"
 dropHint = "Відкрийте файли, щоб почати"
 dropToAdd = "Drop files to add"
 expand = "Розгорнути бічну панель"
-files = "Файли"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive не налаштовано"
 leaveMyFiles = "Вийти з «Мої файли»"
+library = "Бібліотека PDF"
 myFiles = "Мої файли"
 noFiles = "Файлів ще немає"
 openFileManager = "Відкрити файловий менеджер"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Додати"
-addLabel = "Додати мітку…"
-categoryIconAria = "Виберіть іконку для {{name}}"
-createCategory = "Створити категорію"
-delete = "Видалити категорію"
 done = "Готово"
-hide = "Приховати категорію"
-newCategory = "Назва нової категорії…"
-removeLabel = "Видалити {{name}}"
-rename = "Перейменувати"
 reset = "Скинути до стандартних налаштувань"
-search = "Пошук міток…"
-show = "Показати категорію"
 subtitle = "Групуйте файли в батьківські категорії. Додавайте наявні або нові мітки до категорії, перейменовуйте її або створюйте власну. Файли, які не належать до жодної з ваших категорій, відображаються в розділі «Інше»."
 title = "Категорії бічної панелі"
 
@@ -3808,6 +3977,7 @@ refresh = "Оновити з сервера"
 remove = "Видалити"
 removeVersion = "Вилучити цю версію"
 rename = "Перейменувати"
+renamed = "Перейменовано"
 renameFolder = "Перейменувати папку"
 resizeFolderTree = "Змінити розмір дерева папок (клавіші зі стрілками, Shift — для більших кроків; подвійне клацання — авто-підгін)"
 save = "Зберегти"
@@ -3910,9 +4080,7 @@ count = "Файли"
 folder = "Папка"
 labels = "Мітки"
 modified = "Змінено"
-name = "Назва"
 size = "Розмір"
-toolHistoryAtVersion = "Сукупний ланцюжок інструментів"
 totalSize = "Загальний розмір"
 type = "Тип"
 versionHistory = "Історія версій"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Усе збережено"
+extractCsvError = "Не вдалося витягти CSV"
+extractXlsxError = "Не вдалося витягти XLSX"
 flattenAfterFilling = "Сплющити після заповнення"
+requiredAbbreviation = "обов."
+requiredFieldsError = "Заповніть усі обов’язкові поля"
 rescanFields = "Повторно сканувати поля"
 rescanFormFields = "Повторно сканувати поля форми"
 save = "Зберегти"
+saveShortcut = "Ctrl+S для збереження"
+unsavedChanges = "Незбережені зміни"
 
 [formFill.sidebar]
 close = "Закрити бічну панель"
@@ -4309,6 +4484,11 @@ desc = "Автоматично перейменовує PDF-файл на осн
 tags = "автовизначення,на основі заголовка,організувати,перейменувати"
 title = "Автоперейменити PDF"
 
+[home.autoRotate]
+desc = "Визначайте орієнтацію кожної сторінки й автоматично повертайте її вертикально."
+tags = "автоповорот,виправити орієнтацію,догори дриґом,боком,вирівняти,орієнтувати,визначити орієнтацію,виправити поворот,автоорієнтація,скановано,OSD"
+title = "Автоповорот"
+
 [home.autoSizeSplitPDF]
 tags = "авто,розділити,розмір"
 title = "Автоподіл за розміром/стор."
@@ -4608,13 +4788,13 @@ hint = "Завантажте PNG, JPG, SVG або інший файл зобра
 label = "Завантажити зображення"
 placeholder = "Виберіть файл зображення"
 
-[imageToPdf]
-tags = "конвертація,зображення,jpg,картинка,фото"
-
 [imageToPDF]
 header = "Зображення в PDF"
 title = "Зображення в PDF"
 
+[imageToPdf]
+tags = "конвертація,зображення,jpg,картинка,фото"
+
 [infoBanner]
 dismiss = "Закрити"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Вас запросили!"
 
 [landing]
 addFiles = "Додати файли"
-heroSubtitle = "Перетягніть або додайте наявний PDF, щоб почати."
 mobileUpload = "Завантажити з мобільного"
 openFromComputer = "Відкрити з комп’ютера"
 uploadFromComputer = "Завантажити з комп’ютера"
-workbenchEmptyStateHero = "Перетягніть PDF будь-куди"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Вхід"
 magicLinkSent = "Магічне посилання надіслано на {{email}}! Перевірте пошту та перейдіть за посиланням, щоб увійти."
 mfaCode = "Код автентифікації"
 mfaRequired = "Потрібен код двофакторної автентифікації"
+noAccount = "Немає облікового запису?"
 or = "Або"
 password = "Пароль"
 passwordChangedSuccess = "Пароль успішно змінено! Увійдіть із новим паролем."
@@ -4715,26 +4894,10 @@ signInWith = "Увійти за допомогою"
 title = "Вхід"
 unexpectedError = "Неочікувана помилка: {{message}}"
 updatePassword = "Оновити пароль"
-useEmailInstead = "Увійти за email"
 useMagicLink = "Використати магічне посилання"
 username = "Ім’я користувача"
 youAreLoggedIn = "Ви увійшли!"
 
-[login.slides.edit]
-alt = "Редагуйте PDF"
-subtitle = "Понад десяток інструментів для приховування, підписання, читання та обробки PDF — ви точно знайдете потрібне."
-title = "Редагуйте PDF, щоб відображати й захищати потрібну інформацію"
-
-[login.slides.overview]
-alt = "Огляд Stirling PDF"
-subtitle = "Хмарний пакет із пріоритетом приватності для PDF: конвертуйте, підписуйте, приховуйте та керуйте документами, плюс 50+ інших потужних інструментів."
-title = "Усе для PDF в одному місці."
-
-[login.slides.secure]
-alt = "Захищайте PDF"
-subtitle = "Легко додавайте паролі, приховуйте вміст і керуйте сертифікатами."
-title = "Захищайте конфіденційну інформацію у ваших PDF"
-
 [margin]
 large = "Великий"
 medium = "Середній"
@@ -4976,6 +5139,7 @@ pinButton = "Ви можете скористатися кнопкою <strong>
 results = "Після завершення роботи інструмента крок <strong>Перегляд</strong> покаже попередній перегляд результатів у цій панелі та дозволить скасувати операцію або завантажити файл. "
 runButton = "Після налаштування інструмента ця кнопка дозволяє запустити його для всіх вибраних PDF."
 selectCropTool = "Давайте виберемо інструмент <strong>Обрізка</strong>, щоб показати, як користуватися одним з інструментів."
+stepOf = "Крок {{current}} з {{total}}"
 toolInterface = "Це інтерфейс інструменту <strong>Обрізка</strong>. Як бачите, тут поки що небагато, адже ми ще не додали жодного PDF для роботи."
 workbench = "Це <strong>Робоча область</strong> — головна зона, де ви переглядаєте й редагуєте свої PDF."
 wrapUp = "Готово! Ви дізналися про основні області застосунку та як ними користуватися. Натискайте кнопку <strong>Допомога</strong>, щоб будь-коли переглянути цей тур знову."
@@ -4988,6 +5152,26 @@ showMeAround = "Проведіть екскурсію"
 skipForNow = "Пропустити зараз"
 skipTheTour = "Пропустити тур"
 
+[onboarding.checklist]
+dismiss = "Закрити"
+title = "Налаштуйте Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Запускайте Stirling нативно на своєму комп’ютері"
+title = "Завантажити Stirling для Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Співпрацюйте зі своєю командою"
+title = "Запросити членів команди"
+
+[onboarding.checklist.shareAnalytics]
+description = "Допоможіть покращити Stirling"
+title = "Ділитися анонімними даними використання"
+
+[onboarding.checklist.takeTour]
+description = "Подивіться, як працює Stirling, у короткому огляді"
+title = "Пройти огляд"
+
 [onboarding.desktopInstall]
 body = "Stirling найкраще працює як настільний додаток. Ви можете працювати офлайн, швидше отримувати доступ до документів і редагувати їх локально на своєму комп’ютері."
 selectOs = "Виберіть операційну систему"
@@ -4996,7 +5180,21 @@ titleWithOs = "Завантажити для {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Код автентифікації"
+description = "Захистіть свій обліковий запис, підключивши застосунок автентифікатора. Відскануйте QR-код або введіть ключ налаштування, а потім підтвердьте 6-значний код для завершення."
+enable = "Увімкнути MFA"
+enableError = "Не вдалося увімкнути двофакторну автентифікацію. Перевірте код і спробуйте ще раз."
+enterCode = "Введіть 6-значний код із вашого застосунку."
+enterCodeError = "Введіть код автентифікації, щоб продовжити."
+logout = "Вийти"
+openAuthenticator = "Відкрийте Google Authenticator, Authy або 1Password."
 qrCodeLoading = "Створення вашого QR-коду…"
+regenerateQrCode = "Згенерувати QR-код повторно"
+scanQrCode = "Відскануйте QR-код або введіть ключ налаштування нижче."
+setupError = "Не вдалося почати налаштування двофакторної автентифікації. Спробуйте ще раз."
+setupKey = "Ключ налаштування (ручне введення)"
+stepByStep = "Покроково"
+success = "MFA увімкнено. Тепер ви можете продовжити."
+title = "Налаштування багатофакторної автентифікації"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Щойно ввімкнете режим входу, ви зможете керувати користувачами, налаштовувати параметри та відстежувати стан сервера. Перші <strong>{{freeTierLimit}}</strong> людей на вашому сервері користуються Stirling безкоштовно."
@@ -5005,6 +5203,11 @@ adminTitle = "Огляд для адміністратора"
 userBody = "Запрошуйте колег, призначайте ролі та тримайте документи впорядкованими в одному безпечному робочому просторі. Увімкніть режим входу, коли будете готові вирости за межі сольного використання."
 userTitle = "Огляд плану"
 
+[onboarding.processorIntro]
+body = "Stirling тепер запускає <strong>Політики</strong> — автоматизовані правила, які класифікують, захищають і обробляють кожен документ під час надходження. Налаштовуйте їх і відстежуйте запуски в <strong>Processor</strong>."
+cta = "Переглянути Processor"
+title = "Ознайомтеся зі Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Передплачений рік"
+
+[payg.prepaid.banner]
+exhausted = "Вашу передплачену ємність вичерпано; тарифікацію за лічильником відновлено. Поповніть, щоб зберегти знижку."
+expiring_one = "Ваш передплачений рік завершується через {{count}} день. Невикористана ємність закінчується — поповніть, щоб почати новий рік."
+expiring_other = "Ваш передплачений рік завершується через {{count}} днів. Невикористана ємність закінчується — поповніть, щоб почати новий рік."
+low = "У вас залишилося {{pct}}% передплаченої ємності. Поповніть будь-коли, щоб обробка не переривалася."
+
+[payg.prepaid.card]
+subtitle = "Використовується перед тарифікацією за лічильником і поза вашим лімітом витрат."
+title = "Передплачена ємність"
+
+[payg.prepaid.meter]
+capSuffix = "із {{total}} передплачених кредитів"
+expires = "Закінчується {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Вичерпано"
+healthy = "Достатньо залишилося"
+low = "Закінчується"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Вставте ліцензійний ключ із листа
 success = "Ліцензію активовано!"
 successMessage = "Вашу ліцензію успішно активовано. Тепер можете закрити це вікно."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "застосовано"
-enforcing = "Застосування..."
-failed = "Застосування не вдалося"
 outputsUnavailable = "Результати політик більше недоступні для завантаження."
 partialOutputsUnavailable = "Деякі результати політик більше недоступні для завантаження."
-retrying = "Зайнято, повторна спроба..."
 runNotFound = "Запуск застосування більше не знайдено."
-step = "крок {{current}}/{{total}}"
 timedOut = "Час очікування застосування вичерпано до завершення запуску."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Закрити"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Застосовуємо {{names}}"
 applyingProgress = "Застосовуємо {{names}} ({{done}} з {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{failures}} з {{total}} файлів не вдалося обр
 failureTitle = "Експорт без повного застосування"
 printPolicyAppliedBody = "Цей PDF оновлено відповідно до політики. Перегляньте зміни, потім надрукуйте ще раз."
 printPolicyAppliedTitle = "Політику застосовано перед друком"
-queued = "+{{count}} у черзі"
 successTitle = "{{names}} застосовано"
 summaryMore = "{{first}}, {{second}} і ще {{more}}"
 summaryTwo = "{{first}} і {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Застосування перед перетворенням"
-default = "Застосування"
-export = "Застосування перед експортом"
-input = "Застосування під час імпорту"
-print = "Застосування перед друком"
-
-[policies.field]
-accessLog = "Журнал доступу"
-archiveAfter = "Архівувати після"
-auditTrail = "Аудиторський слід"
-belowThreshold = "Нижче порога"
-destination = "Призначення"
-frameworks = "Фреймворки"
-immutableHold = "Незмінне утримання"
-keepFor = "Зберігати протягом"
-minConfidence = "Мін. впевненість"
-notify = "Сповіщати під час маршрутизації"
-onViolation = "У разі невідповідності"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Додати"
-addPlaceholder = "Додати мітку…"
-customNote = "Налаштовано для вашої команди."
-defaultNote = "Використовується вбудоване стандартне значення, спільне для вашої команди."
-duplicate = "\"{{name}}\" уже існує."
-edit = "Редагувати мітки"
-empty = "Міток ще немає."
-export = "Експорт JSON"
-iconAria = "Виберіть іконку для {{name}}"
-import = "Імпорт JSON"
-importError = "Не вдалося імпортувати цей файл."
-managedNote = "Командними мітками керує керівник вашої команди."
-modalSubtitle = "Спільно для всієї вашої команди. Класифікатор вибирає мітки, що відповідають кожному документу."
-modalTitle = "Мітки класифікації"
-pickIcon = "Використати іконку {{label}}"
-removeAria = "Видалити {{name}}"
-resetToDefault = "Скинути до стандартного"
-saveForTeam = "Зберегти для команди"
-saving = "Збереження…"
-sectionLabel = "Мітки класифікації"
-startFromScratch = "Почати з нуля"
-teamCount = "командні мітки"
-tooLong = "Мітки можуть містити щонайбільше {{max}} символів."
-ungrouped = "Без групи"
-view = "Переглянути мітки"
+categoryCount = "категорії"
+hideCategory = "Приховати категорію"
+labelCount = "мітки"
+sharedNote = "Ці мітки вбудовані та спільні для всієї вашої команди."
+showCategory = "Показати категорію"
 
 [policies.pii]
 account = "Номери рахунків (позначені)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Маршрутні номери США (ABA)"
 ssn = "Номери соціального страхування"
 
-[policies.settings]
-noneExport = "Наразі під час експорту не виконується жодна політика."
-noneUpload = "Наразі під час завантаження не виконується жодна політика."
-onExport = "Під час експорту"
-onUpload = "Під час завантаження"
-reorderHandle = "Перетягніть, щоб змінити порядок"
-runOrderDesc = "Коли на одному тригері виконується кілька політик, вони виконуються в цьому порядку — кожна на вихідних даних попередньої політики. Перетягніть, щоб змінити порядок."
-title = "Налаштування політик"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Параметри політики"
-policySettings = "Налаштування політик"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Повторити невдалі політики ({{count}})"
-rowProgress = "Оброблено файлів: {{completed}} з {{total}}"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Що таке політика?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Автоматично знаходить і замальовує конфіденційні дані — наприклад номери соціального страхування та карток — щоб їх не можна було прочитати в документі."
-sanitize = "Видаляє прихований JavaScript з файлу, щоб нічого не запускалося автоматично під час відкриття."
-watermark = "Додає видиму позначку (напр., \"Confidential\") на кожній сторінці."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Закрити"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} застосовується..."
 badgeRan = "Політика {{name}} виконана для цього файлу"
+badgeRunning = "{{name}} виконується..."
 blockingAction = "{{action}} заблоковано під час застосування політики, зачекайте..."
 dismiss = "Закрити накладення"
 enforcingTitle = "Застосування політики..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Переглянути файл (політика ще засто
 [policyOption]
 autoRedactPhi = "Автоматично приховати PHI"
 blockExport = "Заблокувати експорт"
+ccpa = "CCPA"
 contracts = "Договори"
 documents = "Документи"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "План Editor"
 subscribed = "План Processor"
 unlinked = "Не прив’язано"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Ініціалізувати з документа"
-sectionsAriaLabel = "Розділи конструктора агентів"
-selectorAriaLabel = "Агенти"
-subtitle = "Проєктуйте, тестуйте й запускайте AI-агентів, які класифікують, витягують дані з ваших документів і маршрутизують їх. Визначайте сценарії, обмежуйте доступ до інструментів, запускайте еталонний набір і публікуйте версію."
-title = "Конструктор агентів"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Скасувати"
-dropzoneText = "Виберіть зразок документа (PDF або зображення)"
-lead = "Додайте зразок документа, і ми запропонуємо сценарії та схему витягання, які ви зможете уточнити. Нічого не публікується, доки ви це не переглянете."
-submit = "Ініціалізувати агента"
-subtitle = "Створіть нового агента на основі одного репрезентативного файлу"
-title = "Ініціалізація з документа"
-
-[portal.agentBuilder.empty]
-description = "Ініціалізуйте агента зі зразка документа, щоб створити його сценарії та схему витягання, а потім уточніть і опублікуйте."
-title = "Агентів ще немає"
-
-[portal.agentBuilder.evals]
-casesPassing = "Успішні випадки"
-columnCase = "Випадок оцінювання"
-columnLatency = "Затримка"
-columnResult = "Результат"
-fail = "невдача"
-goldenSetPassRate = "Частка успішних для еталонного набору"
-latencyMs = "{{ms}} мс"
-notRun = "не запускалося"
-pass = "успіх"
-passRate = "Частка успішних"
-runEvals = "Запустити оцінювання"
-
-[portal.agentBuilder.evals.empty]
-description = "Оцінювання перетворюють ваші сценарії на повторюваний еталонний набір. Оновіть план, щоб відстежувати частку успішних з часом і блокувати публікації на її основі."
-title = "Еталонного набору ще немає"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "за еталонними наборами"
-activeAgents = "Активні агенти"
-avgPassRate = "Середня частка успішних оцінювань"
-fleetWide = "по всьому парку"
-latestPublished = "Остання опублікована"
-scenarios = "Сценарії"
-testCases = "тестові випадки"
-totalDescription_one = "{{count}} загалом"
-totalDescription_other = "{{count}} загалом"
-
-[portal.agentBuilder.scenarios]
-add = "Додати"
-addScenario = "Додати сценарій"
-enable = "Увімкнути"
-expectationLabel = "Очікувана поведінка"
-expectationPlaceholder = "Що має зробити агент"
-inEval = "в оцінюванні"
-mute = "Вимкнути звук"
-muted = "вимкнено"
-nameLabel = "Назва"
-namePlaceholder = "напр. ескалація відповідності"
-
-[portal.agentBuilder.tabs]
-evals = "Оцінювання"
-scenarios = "Сценарії"
-tools = "Інструменти"
-versions = "Версії"
-
-[portal.agentBuilder.tools]
-broadAccess = "Широкий доступ"
-deniedHint = "Вибрані інструменти заблоковано. Усе інше залишається доступним для виклику."
-deniedTools = "Заборонені інструменти"
-governanceGate = "Керування інструментами доступне на плані Enterprise."
-restricted = "Обмежено"
-restrictedAccess = "Обмежений доступ до інструментів"
-restrictedDescription = "Дозволити всі інструменти, крім тих, які ви забороните нижче."
-
-[portal.agentBuilder.versions]
-current = "поточна"
-historyGate = "Повна історія версій і відкат доступні на плані Enterprise."
-publish = "Опублікувати"
-rollBack = "Відкотити"
-
 [portal.assistant]
 close = "Закрити помічника"
 error = "Не вдалося зв’язатися з помічником."
@@ -6365,9 +6346,21 @@ typing = "Друкує"
 loading = "Завантаження"
 redirectingToEditor = "Перенаправлення до редактора..."
 
+[portal.billing.activation]
+maybeLater = "Можливо, пізніше"
+title = "Увімкнути Processor"
+
+[portal.billing.activation.payg]
+sub = "Установіть місячний ліміт. Платіть за те, що запускаєте."
+title = "Платіть за використання"
+
+[portal.billing.activation.prepay]
+badge = "2 місяці безкоштовно"
+sub = "Один рахунок, картка або банківський переказ."
+title = "Передплатити рік"
+
 [portal.billing.checkout]
 noClientSecret = "Edge-функція не повернула client_secret."
-subtitle = "Додайте картку, щоб продовжити після безкоштовного гранту плану Editor. Stripe подбає про решту."
 title = "Увімкнути план Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Ваш платіж успішний, але активація трив
 close = "Закрити"
 title = "Майже готово"
 
+[portal.billing.checkout.cap]
+amountAria = "Місячний ліміт витрат"
+back = "Назад"
+continue = "Перейти до оплати"
+error = "Не вдалося встановити ліміт витрат"
+finePrint = "Рахунки виставляються щомісяця. Скасувати можна будь-коли."
+noLimit = "Без ліміту"
+note = "З вас ніколи не стягнуть більше вашого ліміту. Обробка просто призупиниться."
+perMonth = "/ міс."
+title = "Установіть ліміт витрат"
+
+[portal.billing.checkout.card]
+fields = "Номер картки · MM / YY · CVC · ZIP"
+label = "Дані картки"
+note = "Дані картки збирає Stripe. Stirling ніколи не зберігає PAN або CVC."
+
 [portal.billing.checkout.error]
 title = "Не вдалося розпочати checkout"
 
@@ -6383,10 +6392,9 @@ body = "Ваш платіж пройшов. Ми вмикаємо обробку
 hint = "Будь ласка, залиште це вікно відкритим."
 title = "Активація вашого плану Processor..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "у portal env, щоб увімкнути checkout у застосунку."
-bodyBefore = "Налаштуйте"
-title = "Stripe не налаштовано"
+[portal.billing.checkout.pay]
+limit = "Місячний ліміт витрат {{amount}}/міс. Обробка призупиниться на ліміті."
+limitNoCap = "Без ліміту витрат. Обробка не призупинятиметься. Рахунки виставляються щомісяця."
 
 [portal.billing.enterpriseUpsell]
 cta = "Сформувати вашу пропозицію Enterprise"
@@ -6409,10 +6417,12 @@ currentPlan = "Поточний план"
 freeForever = "Безкоштовно назавжди"
 noTeamResolved = "Для вашого гаманця ще не визначено команду — оновіть і спробуйте ще раз."
 ownerOnly = "Лише власник команди може ввімкнути план Processor."
+payInvoice = "Оплатити рахунок для завершення"
 planName = "Editor"
 ssoIncluded = "SSO включено"
 switchOnProcessor = "Увімкнути Processor →"
 unlimitedUsers = "Необмежена кількість користувачів"
+viewQuote = "Переглянути пропозицію"
 
 [portal.billing.invoices]
 columnAmount = "Сума"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Прямі API-запити"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Автоматизації та конвеєри"
 segmentAutomationLabel = "Автоматизація"
+sizeMultiplier = "{{formatted}} PDF використали множник розміру"
+summary = "{{unique}} унікальних · {{units}} одиниць лічильника · {{avg}} середнє на PDF"
+summaryNoRate = "{{unique}} унікальних · {{units}} одиниць лічильника"
 unit = "PDF за лічильником"
+unitsPending_one = "{{units}} одиниця лічильника очікує синхронізації з пов’язаних екземплярів"
+unitsPending_other = "{{units}} одиниць лічильника очікують синхронізації з пов’язаних екземплярів"
+
+[portal.billing.prepaid]
+capSuffix = "із {{total}} передплачених кредитів"
+expires = "Закінчується {{date}}"
+eyebrow = "Передплачена ємність"
+note = "Використовується перед тарифікацією за лічильником і поза вашим лімітом витрат."
+topUp = "Поповнити"
+
+[portal.billing.prepaid.buy]
+back = "Назад"
+calcTitle = "Розрахуйте свій річний платіж"
+cancel = "Скасувати"
+cancelPurchase = "Скасувати покупку"
+close = "Закрити"
+continueToPayment = "Перейти до оплати"
+finalise = "Завершити"
+invoiceErrorTitle = "Не вдалося згенерувати рахунок"
+loadingTitle = "Завантаження вашої пропозиції"
+payTitle = "Оплатіть свій рік"
+step = "Крок {{current}} з {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Змінити"
+deployRow = "Розгортання"
+done = "Готово"
+enterpriseHint = "Це корпоративний масштаб. За такого обсягу корпоративні тарифи вигідніші за будь-яку знижку самообслуговування. Фіксація тарифу, умови та пропозиція за лічені хвилини."
+governanceRow = "Управління"
+governanceValue = "{{label}} · {{count}} політик"
+handlesLabel = "Ваш Processor"
+handlesValue = "обробляє {{volume}} кредитів / міс."
+pipelinesLabel = "Конвеєри"
+policiesMeta = "{{count}} політик"
+poolCaption = "Один пул із {{credits}} кредитів на рік. Важкі місяці позичають у легких."
+priceLabel = "Ваш рік · 12 місяців за ціною 10"
+rateUnknown = "Ми покажемо точну ціну під час оформлення."
+savings = "Ви заощаджуєте {{amount}} · 2 місяці безкоштовно."
+sizingRow = "Розмір"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Усього користувачів"
+
+[portal.billing.prepaid.consent]
+label = "Я розумію, що коли моя передплачена ємність буде вичерпана або закінчиться через 12 місяців, обробка автоматично продовжиться за стандартним тарифом pay-as-you-go за лічильником (до мого ліміту витрат), якщо я не скасую, і що я можу скасувати будь-коли з порталу виставлення рахунків."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Керується Stirling. Працює за лічені хвилини."
+cloudValue = "Stirling Cloud · Керовано"
+selfhost = "Self-hosted"
+selfhostDesc = "Працює на приватній інфраструктурі. Такий самий тариф."
+selfhostValue = "Self-hosted · Приватна інфраструктура"
+
+[portal.billing.prepaid.offer]
+cta = "Переглянути пропозицію"
+subtitle = "Передплатіть рік обробки PDF і отримайте два місяці безкоштовно; використовується перед тарифікацією за лічильником, поза вашим лімітом витрат."
+title = "Отримайте 12 місяців за ціною 10"
+
+[portal.billing.prepaid.pay]
+accountName = "Ім’я власника рахунку"
+accountNamePlaceholder = "напр. Jane Smith"
+companyName = "Назва компанії (необов’язково)"
+companyNamePlaceholder = "напр. Acme Inc."
+downloadInvoice = "Завантажити рахунок"
+payOnline = "Оплатити онлайн"
+poNumber = "Номер PO (необов’язково)"
+poNumberPlaceholder = "напр. PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Розширені"
+advancedDesc = "Конвеєри виконують більшість вашої обробки."
+none = "Немає"
+noneDesc = "Конвеєри ще не запущені. Увімкніть їх будь-коли."
+standard = "Стандартні"
+standardDesc = "Кілька конвеєрів повторно обробляють PDF, що надходять."
+
+[portal.billing.prepaid.posture]
+essentials = "Основи"
+essentialsDesc = "Класифікація, стандартно, плюс спільний доступ"
+governed = "Керований"
+governedDesc = "Додає безпеку та маршрутизацію"
+regulated = "Регульований"
+regulatedDesc = "Кожна категорія, включно з відповідністю вимогам, зберіганням, отриманням"
+
+[portal.billing.prepaid.review]
+download = "Завантажити пропозицію (PDF)"
+downloading = "Підготовка…"
+share = "поділитися для затвердження"
+
+[portal.billing.prepaid.size]
+compact = "Компактний"
+compactDesc = "Файли до 25 MB, без плати за дані"
+heavy = "Важкий"
+heavyDesc = "Скановані або насичені зображеннями, зазвичай 50 MB+"
+standard = "Стандартний"
+standardDesc = "Переважно малі, деякі скани понад 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Вичерпано"
+healthy = "Достатньо залишилося"
+low = "Закінчується"
 
 [portal.billing.spendLimit]
 adjustLimit = "Змінити ліміт"
@@ -6494,6 +6608,8 @@ label = "Прогнозується перевищення."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Витрати цього місяця"
+freeRemaining_one = "Залишився {{formatted}} безкоштовний PDF"
+freeRemaining_other = "Залишилося {{formatted}} безкоштовних PDF"
 processed_one = "Оброблено {{formattedCount}} PDF."
 processed_other = "Оброблено {{formattedCount}} PDF."
 processedWithRate_one = "Оброблено {{formattedCount}} PDF, по {{rate}} за кожен."
@@ -6534,6 +6650,350 @@ signature = "підпис"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Нове з’єднання"
+createTitleFor = "Підключити {{name}}"
+delete = "Видалити"
+edit = "Редагувати"
+editTitle = "Редагувати з’єднання"
+unsupportedType = "Цей тип з’єднання не можна редагувати тут."
+
+[portal.connections.categories.advanced]
+description = "Для сервісу, який ми ще не підтримуємо."
+label = "Розширені"
+
+[portal.connections.categories.audit]
+description = "Записуйте, що сталося з документом, там, де ваші аудитори вже переглядають."
+label = "Журнал аудиту та відповідності"
+
+[portal.connections.categories.notify]
+description = "Повідомте іншу систему, що щось сталося."
+label = "Сповіщення та робочий процес"
+
+[portal.connections.categories.security]
+description = "Скануйте або позначайте документ перед тим, як він рухатиметься далі."
+label = "Безпека та класифікація"
+
+[portal.connections.categories.signing]
+description = "Надішліть документ на підпис або нотаріальне засвідчення."
+label = "Електронний підпис і нотаріальне засвідчення"
+
+[portal.connections.categories.storage]
+description = "Куди потрапляють оброблені документи - bucket, диск, ticket або сторінка."
+label = "Файли та вкладення"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling зберігає це зашифрованим і більше ніколи не показує."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Кроки, що використовують це з’єднання, можуть викликати лише шляхи під цим URL, ніколи інший host."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Пароль"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Ім’я користувача"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Вставте URL, який надав сервіс. Викликати можна лише шляхи під ним."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Назва з’єднання"
+namePlaceholder = "напр. Production"
+
+[portal.connections.picker]
+cancel = "Скасувати"
+createNew = "Нове з’єднання..."
+placeholder = "Виберіть з’єднання"
+save = "Зберегти з’єднання"
+
+[portal.connections.picker2]
+back = "Змінити інтеграцію"
+heading = "Що ви хочете підключити?"
+noResultsBody = "Ми ще не підтримуємо це - розкажіть нам про це, і ми розглянемо додавання."
+noResultsTitle = "Нічого не збігається з «{{query}}»"
+searchPlaceholder = "Пошук інтеграцій - спробуйте «sign», «ocr» або назву продукту"
+
+[portal.connections.types.api]
+description = "Викликайте будь-який HTTP API з політики. Ви вибираєте URL, автентифікацію і payload."
+label = "Custom API"
+
+[portal.connections.types.api.fields.authType]
+label = "Автентифікація"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Ім’я користувача та пароль"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Токен у власному заголовку"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Немає"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Увійти для токена"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Кроки, що використовують це з’єднання, можуть викликати лише шляхи під цим URL, ніколи інший host."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Назва заголовка"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Шлях входу"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Пароль"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Якщо API відповідає посиланням для завантаження, отримувати можна лише з цих host. Розділяйте комами. Залиште порожнім, щоб дозволити лише власний host базового URL."
+label = "Дозволені host результатів"
+
+[portal.connections.types.api.fields.token]
+label = "Токен"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Надсилати токен як цей заголовок"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Заголовок відповіді, у якому виклик входу повертає токен, напр. X-Auth-Token."
+label = "Заголовок відповіді з токеном"
+
+[portal.connections.types.api.fields.username]
+label = "Ім’я користувача"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Скануйте документи на malware на сервері, яким ви керуєте - нічого не залишає вашу мережу."
+label = "ClamAV (self-hosted)"
+
+[portal.connections.types.cloudmersive]
+description = "Сканування документів на віруси та вміст у політиці."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Блокуйте документи, що містять макроси, виконувані файли, скрипти або вбудовані об’єкти - не лише відоме malware."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Прикріплюйте оброблені документи до сторінки Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Надсилайте документи до ConsignO Cloud (Notarius) для електронного підпису та нотаріального засвідчення."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Ваше середовище ConsignO Cloud, включно з /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Пароль"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Потрібно лише якщо ваша організація використовує tenant."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Ім’я користувача"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Публікуйте повідомлення в Discord, коли політика обробляє документ."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Індексуйте подію аудиту в Elasticsearch щоразу, коли політика обробляє документ."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Опитуйте FTP або FTPS сервер щодо нових документів."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Режим з’єднання"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Активний"
+passive = "Пасивний (рекомендовано)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "Звичайний FTP надсилає облікові дані та файли незашифрованими; виберіть FTPS, якщо сервер це підтримує."
+label = "Шифрування"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Немає (звичайний FTP)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Публікуйте повідомлення в просторі Google Chat, коли політика запускається."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Прикріплюйте оброблені документи до issue Jira."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Надсилайте документ або сповіщення Email, коли політика запускається."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Розміщуйте оброблені документи в Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Виявляйте персональні дані в тексті документа за допомогою сервера Presidio, яким ви керуєте."
+label = "Presidio (self-hosted)"
+
+[portal.connections.types.purview]
+description = "Читайте та застосовуйте мітки чутливості Microsoft Purview до PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Необов’язково. Потрібно лише для вибору міток за назвою; маркування працює й без цього."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Штампується на кожну мітку як її SiteId, щоб інструменти, сумісні з Purview, знали, яка організація її застосувала."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket, з якого джерела можуть читати і до якого виходи конвеєра можуть записувати."
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Залиште порожнім для AWS. Установіть це для MinIO або іншого S3-сумісного сховища."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Надсилайте документ або сповіщення Email, коли політика запускається."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Опитуйте SFTP (SSH) сервер щодо нових документів."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Необов’язково. SHA-256 відбиток host key сервера (з `ssh-keyscan host | ssh-keygen -lf -`). Якщо задано, приймається лише сервер, що надає цей ключ; якщо порожньо, ключ, побачений під час першого підключення, закріплюється, а подальші зміни відхиляються."
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Парольна фраза ключа"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Залиште порожнім, якщо замість цього автентифікуєтеся приватним ключем."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Необов’язково. Вставте приватний ключ OpenSSH для автентифікації ключем замість пароля."
+label = "Приватний ключ"
+
+[portal.connections.types.slack]
+description = "Публікуйте повідомлення в Slack, коли політика обробляє документ."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Відстежуйте мережевий ресурс SMB / CIFS (Windows або Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Мережевий ресурс"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Необов’язково. Windows domain або workgroup, якщо ваш сервер їх використовує."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Надсилайте подію аудиту до Splunk щоразу, коли політика обробляє документ."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Надсилайте подію аудиту до Sumo Logic HTTP collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Публікуйте повідомлення в каналі Teams, коли політика запускається."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Надсилайте кожен документ або лише деталі на URL, який ви виберете."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Запускайте Zap або Make scenario з політики."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Переглянути docs"
+viewSource = "Переглянути source на GitHub"
+
 [portal.docs.authentication]
 codeCaption = "кожен запит"
 eyebrow = "ПОЧАТОК РОБОТИ"
@@ -6619,11 +7079,19 @@ title = "Офіційні SDK"
 beta = "Beta"
 deprecated = "Застаріло"
 
+[portal.docs.search]
+empty = "Немає відповідних docs"
+placeholder = "Пошук docs"
+results = "{{count}} результатів"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Вбудовані іменовані можливості, які ваш агент викликає як один інструмент. Кожна навичка — це детермінований ланцюг операцій із прикріпленими оцінюваннями."
 title = "Навички агента"
 
+[portal.docs.toc]
+title = "На цій сторінці"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API REFERENCE"
@@ -6697,6 +7165,8 @@ type = "Тип"
 user = "Користувач"
 
 [portal.documents.queue.empty]
+connectSource = "Підключити джерело"
+createPipeline = "Створити конвеєр"
 description = "Коли джерела подаватимуть документи у ваші конвеєри, вони з’являться тут для перевірки."
 title = "У черзі немає документів"
 
@@ -6806,13 +7276,71 @@ description = "У цьому поданні сталася неочікуван
 retry = "Спробувати ще раз"
 title = "На цій сторінці щось пішло не так"
 
+[portal.home.download]
+back = "Назад"
+body = "Завантажте desktop app або self-host сервер."
+done = "Готово"
+guide = "Відкрити посібник {{name}}"
+openInBrowser = "Відкрити в браузері замість цього"
+sectionDesktop = "Desktop app"
+sectionSelfHosted = "Self-hosted"
+title = "Встановити Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Запустіть офіційний image на своєму сервері."
+note = "Відкривається на :8080. Стандартний вхід: admin / stirling."
+tagline = "Запустіть сервер у container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Установіть офіційний Helm chart."
+note = "Додайте PVC для /configs, щоб зберігати налаштування."
+tagline = "Розгорніть у кластері за допомогою Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Нативні збірки для вашого дистрибутива."
+guideBtn = "Переглянути варіанти встановлення Linux"
+note = "Збірки AppImage, .deb і .rpm доступні для поширених дистрибутивів."
+tagline = "Нативний настільний застосунок для вашого дистрибутива"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Або через Homebrew"
+detailBody = "Запустіть інсталятор або скористайтеся Homebrew."
+downloadBtn = "Завантажити для macOS"
+tagline = "Нативний застосунок для Apple silicon та Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Запустіть .jar на фізичному сервері."
+downloadBtn = "Завантажити .jar"
+note = "Потрібна Java 21+. Відкривається на :8080; типовий логін admin / stirling."
+runLabel = "Потім запустіть"
+tagline = "Запустіть .jar на фізичному сервері"
+title = "Ручне налаштування сервера"
+
+[portal.home.download.windows]
+altLabel = "Або через winget"
+detailBody = "Запустіть інсталятор або скористайтеся менеджером пакетів."
+downloadBtn = "Завантажити інсталятор"
+tagline = "Нативний застосунок для Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} активних"
-invite = "Запросити колег"
+activeOfDeployed = "{{active}} з {{total}} активні цього місяця"
 name = "Stirling PDF Editor"
 open = "Відкрити в браузері"
 updated = "оновлено {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Завершити розгортання"
+options = "Переглянути варіанти розгортання"
+start = "Розгорнути Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Самостійне розміщення · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Добрий день"
 evening = "Добрий вечір"
 morning = "Доброго ранку"
 
-[portal.home.onboarding]
-dismiss = "Закрити налаштування"
-notStarted = "Не розпочато"
-progress = "{{done}} з {{total}} виконано"
-title = "Завершіть налаштування"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC для всієї організації, погоджене ціноутворення за обсягом та ізольоване розгортання."
-cta = "Почати пробний період"
-ctaQuote = "Отримати пропозицію"
-lead = "Для 250+ співробітників."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Розгорніть настільний застосунок, безкоштовно назавжди."
-title = "Завантажте PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} активних · {{recommended}} рекомендовано"
-chip = "{{active}} активних"
-title = "Увімкніть політики"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} підключено · кожен PDF керується там, де він потрапляє"
-chip = "{{connected}} підключено"
-title = "Підключіть джерела"
-
-[portal.home.quickActions]
-subtitle = "Головні завдання на сьогодні"
-title = "Швидкі дії"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "3-кроковий конструктор над бібліотекою типізованих операцій"
-title = "Створити конвеєр"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, агенти, webhooks, відстежувані папки"
-title = "Підключити джерело"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Ключ з областю дії, обмеженнями швидкості та списком дозволених IP"
-title = "Видати ключ API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Керувати розгортанням Редактора"
 sectionsAriaLabel = "Розділи інфраструктури"
@@ -6878,13 +7363,9 @@ heading = "Ключі API"
 subheading = "Облікові дані з областю дії, обмеженнями швидкості для кожного ключа, дозволами та списками дозволених IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "Дозволені IP"
-anyIp = "Будь-який IP (без списку дозволених)"
 created = "Створено"
 lastUsed = "Останнє використання"
-permissions = "Дозволи"
-rateLimit = "Обмеження швидкості"
-rateLimitValue = "{{value}} зап./хв"
+revoke = "Відкликати ключ"
 usageMonth = "Використання цього місяця"
 usageToday = "Використання сьогодні"
 
@@ -6892,6 +7373,20 @@ usageToday = "Використання сьогодні"
 description = "Створіть ключ з областю дії, щоб почати викликати Stirling API."
 title = "Ключів API ще немає"
 
+[portal.infrastructure.apiKeys.error]
+load = "Не вдалося завантажити ваші API ключі. Спробуйте ще раз."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Відкликати \"{{name}}\"? Будь-яка інтеграція, яка ще використовує цей ключ, негайно почне отримувати помилки 401. Цю дію не можна скасувати."
+cancel = "Скасувати"
+confirm = "Відкликати ключ"
+title = "Відкликати API ключ"
+
+[portal.infrastructure.attestationLabel]
+attested = "Підтверджено"
+inScope = "У межах обсягу"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Фільтрувати події аудиту за категорією"
 heading = "Журнали аудиту"
@@ -6935,6 +7430,7 @@ all = "Усі"
 auth = "Автентифікація"
 config = "Конфігурація"
 elevation = "Підвищення доступу"
+policy = "Політика"
 processing = "Обробка"
 security = "Безпека"
 
@@ -6944,19 +7440,35 @@ title = "У вас немає доступу"
 
 [portal.infrastructure.audit.metrics]
 config = "Конфігурація"
-elevation = "Підвищення доступу"
+policy = "Політика"
 processing = "Обробка"
 totalEvents = "Усього подій · 24 год"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Автентифікація"
+config = "Конфігурація"
+elevation = "Підвищення прав"
+policy = "Політика"
+processing = "Обробка"
+security = "Безпека"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Помилка"
+info = "Інформація"
+success = "Успіх"
+warning = "Попередження"
+
+[portal.infrastructure.certLabel]
+certified = "Сертифіковано"
+inProgress = "Виконується"
+notStarted = "Не розпочато"
+
 [portal.infrastructure.createKey]
 cancel = "Скасувати"
 createKey = "Створити ключ"
 done = "Готово"
-ipAllowlistHelper = "Діапазони CIDR, розділені комами. Залиште порожнім, щоб дозволити будь-який IP."
-ipAllowlistLabel = "Список дозволених IP"
 keyNameLabel = "Назва ключа"
 keyNamePlaceholder = "напр. Production · ingest"
-permissionsLabel = "Дозволи"
 secretKeyCaption = "Секретний ключ"
 secretWarning = "Збережіть це в менеджері секретів. Stirling зберігає лише хеш — відновити його пізніше неможливо."
 subtitle = "Обмежте ключ мінімально необхідною областю. Ви можете ротувати або відкликати його будь-коли."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Скопіюйте цей секрет зараз — йог
 title = "Створити ключ API"
 titleCreated = "Ключ створено"
 
+[portal.infrastructure.deployLabel]
+live = "Працює"
+queued = "У черзі"
+rolledBack = "Відкочено"
+rolling = "Розгортається"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} мс"
 throughputValue = "{{value}}/хв"
@@ -6999,6 +7517,15 @@ subheading = "Поточний стан кожного розгорнутого
 description = "Розгорнуті регіони з’являться тут після підготовки вашого робочого простору."
 title = "Регіони не розгорнуто"
 
+[portal.infrastructure.keyLabel]
+active = "Активний"
+revoked = "Відкликаний"
+
+[portal.infrastructure.modelLabel]
+active = "Активна"
+degraded = "Погіршена"
+disabled = "Вимкнена"
+
 [portal.infrastructure.models]
 heading = "Моделі"
 msValue = "{{value}} мс"
@@ -7026,6 +7553,10 @@ status = "Статус"
 type = "Тип"
 version = "Версія"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/виклик"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Активні моделі"
 avgLatency = "Середня затримка"
@@ -7049,6 +7580,17 @@ modelForAria = "Модель для {{operation}}"
 operation = "Операція"
 routedTo = "Спрямовано до"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Класифікація"
+extraction = "Видобування"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Погіршено"
+down = "Недоступно"
+healthy = "Справно"
+
 [portal.infrastructure.security.access.byok]
 description = "Надайте ключ із власного KMS. Stirling шифрує ним, але все ще може читати."
 label = "Власний ключ (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Моделі"
 security = "Безпека"
 storage = "Сховище"
 
+[portal.integrations]
+addAnother = "Додати ще одну"
+availableHeading = "Доступні"
+comingSoonHeading = "Незабаром"
+connect = "Підключити"
+connectedHeading = "Підключено"
+connectionCount_one = "{{count}} підключення"
+connectionCount_other = "{{count}} підключень"
+customApi = "Власний API"
+searchPlaceholder = "Пошук інтеграцій"
+subtitle = "Усе, з чим Stirling може взаємодіяти. Облікові дані створюються тут один раз, а потім використовуються джерелами, політиками та конвеєрами."
+title = "Інтеграції"
+typedName = "Назва {{tool}}"
+
+[portal.integrations.filters]
+all = "Усі"
+audit = "Аудит"
+connected = "Підключено"
+notify = "Сповіщення"
+security = "Безпека"
+signing = "Підписування"
+storage = "Сховище"
+
+[portal.integrations.status]
+connected = "Підключено"
+
+[portal.integrations.table]
+integration = "Інтеграція"
+worksWith = "Працює з"
+
+[portal.integrations.worksWith]
+pipelines = "Конвеєри"
+policies = "Політики"
+sources = "Джерела"
+
+[portal.legal]
+draft = "{{label}} · чернетка"
+loadError = "Не вдалося завантажити цей документ. Спробуйте ще раз."
+loading = "Завантаження…"
+title = "Юридичний документ"
+
 [portal.nav]
 agent-builder = "Конструктор агентів"
 components = "Компоненти"
@@ -7182,6 +7765,7 @@ documents = "Документи"
 editor = "Редактор"
 home = "Головна"
 infrastructure = "Інфраструктура"
+integrations = "Інтеграції"
 pipelines = "Конвеєри"
 policies = "Політики"
 procurement = "Закупівлі"
@@ -7190,25 +7774,9 @@ sources = "Джерела"
 usage = "Використання та оплата"
 users = "Користувачі"
 
-[portal.notifications]
-markAllRead = "Позначити всі як прочитані"
-title = "Сповіщення"
-viewAll = "Переглянути всі"
-
-[portal.notifications.ariaLabel]
-none = "Сповіщення, немає непрочитаних"
-unread_one = "Сповіщення, {{count}} непрочитане"
-unread_other = "Сповіщення, {{count}} непрочитаних"
-
-[portal.notifications.count]
-allRead = "усі прочитані"
-loading = "завантаження"
-new_one = "{{count}} нове"
-new_other = "{{count}} нових"
-
-[portal.notifications.empty]
-description = "Немає нових сповіщень."
-title = "У вас усе переглянуто"
+[portal.nav.section]
+platform = "PDF платформа"
+processor = "PDF Processor"
 
 [portal.pipelines]
 subtitle = "Кожен автоматизований конвеєр документів на backend: упорядкований ланцюг операцій над набором джерел, що запускається тригером. Натисніть рядок, щоб переглянути його кроки та джерела."
@@ -7220,15 +7788,28 @@ newPipeline = "Новий конвеєр"
 [portal.pipelines.builder]
 addStep = "Додати інструмент"
 back = "Назад до конвеєрів"
+cannotFollow = "Не можна прийняти {{produced}}"
+chooseAccount = "Виберіть обліковий запис"
+chooseDestination = "Виберіть призначення"
+chooseOperation = "Виберіть, що робить цей крок"
+chooseSource = "Виберіть джерело"
 discard = "Відхилити зміни"
 enabled = "Увімкнено"
+inputs = "Вхідні дані"
+inputSource = "Вхідне джерело"
+inputTrigger = "Тригер"
 keepEditing = "Продовжити редагування"
+needsConfiguring = "Потрібне налаштування"
 needsUpload = "Потрібен завантажений файл"
+noSources = "Поки що немає підключених джерел. Створіть одне, щоб використовувати його як вхід."
 noToolMatches = "Жоден інструмент не відповідає вашому пошуку."
 pipelineSettings = "Налаштування конвеєра"
 searchTools = "Пошук інструментів"
 selectToolBody = "Додайте інструмент, щоб створити конвеєр."
 selectToolTitle = "Інструментів ще немає"
+sendToSystem = "Надіслати до іншої системи"
+stepsIncompatible = "Ці кроки не можуть працювати з тим, що створює попередній крок: {{tools}}."
+stepsNeedSetup = "Ці кроки все ще потрібно налаштувати перед збереженням: {{tools}}."
 toolSettings = "Налаштування інструмента"
 unknownStep = "Нерозпізнана операція, залишено як є."
 unsavedBody = "У вас є незбережені зміни. Зберегти їх перед виходом чи відхилити?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Незбережені зміни"
 uploadUnsupported = "Завантажені файли поки не підтримуються в конвеєрах, тому ці кроки не можна зберегти: {{tools}}."
 usesDefaults = "Запускається з типовими налаштуваннями"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Об'єднує кожен файл із попереднього кроку"
+fan-out = "Запускається один раз для кожного файлу з попереднього кроку"
+format-mismatch = "Потрібно {{accepts}}, але попередній крок створює {{produced}}"
+output-uncertain = "Може не запуститися: вихідні дані попереднього кроку залежать від його налаштування"
+source-mismatch = "Потрібно {{accepts}}, але вхід цього конвеєра — {{produced}}"
+undeclared-operation = "Не вдається перевірити, що приймає цей крок"
+
 [portal.pipelines.composer]
 addTool = "Додати інструмент"
 cancel = "Скасувати"
 chainEmpty = "Додайте інструмент, щоб почати створювати конвеєр."
 create = "Створити конвеєр"
-directory = "Вихідна папка"
-directoryHelp = "Абсолютний шлях на сервері. Має бути в межах налаштованих дозволених папок."
 editingUnsupported = "Відображення цих параметрів інструмента для редагування поки не підтримується."
 moveDown = "Перемістити вниз"
 moveUp = "Перемістити вгору"
 name = "Назва"
 namePlaceholder = "напр. Redaction sweep"
-noSources = "Джерела ще не підключено. Конвеєр усе одно може запускатися для файлів, переданих йому напряму."
 noToolSettings = "Цей інструмент не має налаштовуваних параметрів."
 operations_one = "Операція ({{count}})"
 operations_other = "Операції ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Видалити"
 title = "Видалити конвеєр?"
 
 [portal.pipelines.detail]
+clearHistory = "Очистити історію"
 delete = "Видалити конвеєр"
 run = "Запустити зараз"
 
 [portal.pipelines.empty]
 action = "Створити конвеєр"
+connectSource = "Підключити джерело"
 description = "Створіть свій перший конвеєр: виберіть джерела, для яких він запускається, з’єднайте операції та виберіть, куди надходитиме вивід."
 title = "Конвеєрів ще немає"
 
@@ -7286,15 +7874,17 @@ active = "Активні"
 paused = "Призупинені"
 total = "Конвеєри"
 
-[portal.pipelines.output]
-folder = "Записати в папку"
-inline = "Повернути файли"
-
 [portal.pipelines.run]
+allProcessed_one = "Нічого запускати: {{count}} документ джерела вже оброблено."
+allProcessed_other = "Нічого запускати: усі {{count}} документів у джерелах уже оброблено."
 completed_one = "Запуск завершено."
 completed_other = "Усі {{count}} запусків завершено."
 empty = "Немає чого запускати: джерела не мали документів для обробки."
 failed = "Запуск не вдався: {{error}}"
+historyCleared = "Історію очищено. Наступний запуск повторно обробить усе, що зараз є в джерелах."
+inFlight = "Немає нічого нового для запуску: документи все ще обробляються з попереднього запуску."
+parked_one = "Нічого запускати: {{count}} документ раніше не вдалося обробити, і його відкладено. Усуньте причину, а потім очистьте історію, щоб повторити спробу."
+parked_other = "Нічого запускати: {{count}} документів раніше не вдалося обробити, і їх відкладено. Усуньте причину, а потім очистьте історію, щоб повторити спробу."
 running = "Запуск розпочато; ще виконується."
 timeout = "Запуск триває довше, ніж очікувалося; він може ще завершитися у фоновому режимі."
 
@@ -7314,12 +7904,18 @@ manual = "Вручну"
 schedule = "За розкладом"
 
 [portal.policies]
+defaultName = "Політика {{category}}"
 subtitle = "Постійні автоматизації, що застосовують конвеєр інструментів до кожного документа. Кожна політика спрацьовує під час завантаження або експорту, запускає свій ланцюг інструментів і зберігає примусово оброблену версію поруч з оригіналом."
 title = "Політики"
 
 [portal.policies.card]
 comingSoon = "Оновити до Enterprise"
 notSetUp = "Не налаштовано"
+requiresAiEngine = "Потрібен AI рушій"
+
+[portal.policies.categories.classification]
+desc = "Визначайте тип кожного документа під час завантаження та позначайте його метадані для зберігання й пошуку."
+label = "Класифікація"
 
 [portal.policies.categories.compliance]
 desc = "Забезпечуйте вимоги HIPAA, GDPR, SOC 2 або FedRAMP для кожного документа."
@@ -7344,6 +7940,13 @@ label = "Безпека"
 [portal.policies.config]
 scopeAll = "Усі документи"
 
+[portal.policies.config.classification]
+summary = "Класифікує кожен завантажений документ за мітками вашої команди та позначає його метадані."
+
+[portal.policies.config.classification.rules]
+0 = "Класифікувати"
+1 = "Позначити метадані"
+
 [portal.policies.config.compliance]
 summary = "Перевіряє документи на відповідність нормативним фреймворкам перед тим, як вони залишать систему."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Мін. впевненість"
 2 = "Назвати"
 3 = "Нормалізувати"
 
+[portal.policies.config.purview]
+label = "Застосувати мітку чутливості Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Тенант Purview"
+labelId = "ID мітки"
+labelIdHelp = "GUID мітки з порталу Purview. Застосування мітки записує її метадані в PDF; це не може шифрувати, для цього потрібен клієнт Microsoft."
+labelName = "Назва мітки (необов'язково)"
+labelNameHelp = "Записується разом із ID, щоб люди й інструменти могли розпізнати мітку."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview відрізняє мітку, застосовану політикою, від мітки, яку вибрала людина."
+label = "Як записується мітка"
+privileged = "Як вибрана людиною"
+standard = "Як застосована автоматично"
+
+[portal.policies.config.purviewRead]
+label = "Прочитати мітку Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Тенант Purview"
+connectionHelp = "Зчитує мітку, яку документ уже має, щоб наступні кроки могли діяти на її основі."
+
 [portal.policies.config.retention]
 summary = "Застосовує правила щодо того, як довго зберігаються документи, коли архівуються та коли видаляються."
 
@@ -7438,6 +8064,7 @@ title = "Активності ще немає"
 [portal.policies.endpoints]
 addWatermark = "Водяний знак"
 autoRedact = "Редагувати PII"
+classifyAndLabel = "Класифікувати"
 compressPdf = "Стиснути"
 flatten = "Звести"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Ваші політики збережено, і вони з’я
 retry = "Повторити"
 title = "Backend недоступний"
 
+[portal.policies.operations]
+change = "Змінити, що робить цей крок"
+noResults = "Жоден крок не відповідає цьому. Спробуйте назву продукту або \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Пошук кроків — спробуйте \"scan\", \"attach\" або назву продукту"
+
+[portal.policies.operations.bodyMode]
+binary = "Сирі байти файлу"
+json = "Усередині JSON payload"
+multipart = "Як завантаження файлу (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Ваш власний сервер ClamAV перевіряє документ; нічого не залишає вашу мережу."
+label = "Сканувати на віруси (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Відхиляє документи з макросами, виконуваними файлами, скриптами або вбудованими об'єктами."
+label = "Блокувати активний вміст"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive перевіряє документ, і запуск зупиняється, якщо він не чистий."
+label = "Сканувати на віруси"
+
+[portal.policies.operations.confluenceAttach]
+description = "Зберігає оброблений документ на сторінці."
+label = "Прикріпити до сторінки Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Надсилає документ до ConsignO Cloud для підписання."
+label = "Надіслати на підпис (ConsignO)"
+note = "Надсилає документ. Отримання підписаної копії ще не підтримується, оскільки крок не може передати результат наступному кроку."
+
+[portal.policies.operations.customApiCall]
+description = "Створіть виклик самостійно: шлях, метод, тіло та обробка відповіді."
+label = "Викликати власний API"
+
+[portal.policies.operations.discordNotify]
+description = "Повідомляє канал, що політика обробила документ."
+label = "Опублікувати повідомлення в Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Записує дії політики як документ, доступний для пошуку."
+label = "Індексувати подію аудиту в Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart підходить для upload API; JSON підходить для API, яким потрібен файл усередині payload; binary надсилає сирі байти."
+label = "Як надіслати документ"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "JSON тіло, надіслане як є. {{document.base64}} містить файл; {{document.*}} і {{run.*}} заповнюються для кожного документа."
+label = "JSON тіло"
+
+[portal.policies.operations.fields.connection]
+label = "Обліковий запис"
+
+[portal.policies.operations.fields.domain]
+label = "Домен Mailgun"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Поле форми, у якому API очікує документ."
+label = "Назва поля файлу"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Від"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "JSON об'єкт пар назва/значення заголовків. Облікові дані підключення додаються автоматично."
+label = "Заголовки"
+
+[portal.policies.operations.fields.index]
+label = "Індекс"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Ключ задачі"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Надсилається як тіло повідомлення. {{document.*}} і {{run.*}} заповнюються для кожного документа."
+label = "Повідомлення"
+
+[portal.policies.operations.fields.method]
+label = "Метод"
+
+[portal.policies.operations.fields.pageId]
+label = "ID сторінки"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Додається до базового URL підключення. Він ніколи не може звернутися до іншого хоста."
+label = "Шлях"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Куди на диску записати файл. {{document.filename}} заповнюється для кожного документа."
+label = "Шлях призначення"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Звіт залишає документ без змін. Заміна замінює його на те, що повернеться у відповіді."
+label = "Що робити з відповіддю"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email підписанта"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Тема"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio аналізує цей текст. Використайте {{document.title}} або вставте текст, який потрібно перевірити."
+label = "Текст для перевірки"
+
+[portal.policies.operations.fields.to]
+label = "Кому"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Ім'я користувача Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Повідомляє простір, що політика обробила документ."
+label = "Опублікувати повідомлення в Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Зберігає оброблений документ у задачі."
+label = "Прикріпити до задачі Jira"
+
+[portal.policies.operations.mailgunEmail]
+description = "Надсилає оброблений документ як вкладення."
+label = "Надіслати документ email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Записує оброблений документ у папку."
+label = "Завантажити в Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Ваш власний сервер Presidio повідомляє про знайдені персональні дані."
+label = "Виявити персональні дані"
+note = "Presidio читає текст, а не файли. Надайте текст, який потрібно перевірити — сам документ не завантажується."
+
+[portal.policies.operations.responseMode]
+replace = "Замінити документ відповіддю"
+report = "Зберегти документ, записати відповідь"
+
+[portal.policies.operations.sendgridEmail]
+description = "Надсилає оброблений документ як вкладення."
+label = "Надіслати документ email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Повідомляє канал, що політика обробила документ."
+label = "Опублікувати повідомлення в Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Записує дії політики там, де ваші аудитори вже переглядають дані."
+label = "Надіслати подію аудиту до Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Записує дії політики в HTTP колектор."
+label = "Надіслати подію аудиту до Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Повідомляє канал, що політика обробила документ."
+label = "Опублікувати повідомлення в Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Надсилає сам документ на URL, який ви виберете."
+label = "Опублікувати документ у webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Передає деталі запуску вашій автоматизації."
+label = "Запустити сценарій Zap або Make"
+
 [portal.policies.stats]
 activeFor = "Активна"
 dataProcessed = "Оброблено даних"
@@ -7473,6 +8277,13 @@ label = "Оброблено документів"
 description = "Налаштовано, але не запускається"
 label = "Призупинено"
 
+[portal.policies.table]
+appliesTo = "Застосовується до"
+docs = "Застосовано до документів"
+enforces = "Забезпечує"
+policy = "Політика"
+status = "Статус"
+
 [portal.policies.wizard.actions]
 back = "Назад"
 cancel = "Скасувати"
@@ -7480,6 +8291,10 @@ continue = "Продовжити"
 enablePolicy = "Увімкнути політику"
 saveChanges = "Зберегти зміни"
 
+[portal.policies.wizard.capability.classify]
+desc = "Визначає тип документа за мітками вашої команди та позначає його, щоб він зберігався й шукався за категорією."
+label = "Класифікувати документ"
+
 [portal.policies.wizard.capability.compress]
 desc = "Стискає документ до меншого розміру файлу."
 label = "Зменшити розмір файлу"
@@ -7500,10 +8315,18 @@ label = "Редагувати конфіденційну інформацію"
 desc = "Видаляє прихований JavaScript, щоб нічого не запускалося автоматично під час відкриття документа."
 label = "Видалити активний вміст"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Доводить, що документ існував саме в такій формі в певний момент часу, використовуючи незалежний центр часових позначок. Надсилається лише хеш — документ ніколи не залишає ваш сервер."
+label = "Додати довірену часову позначку"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Наносить видиму позначку (наприклад, «Конфіденційно») на кожну сторінку."
 label = "Застосувати водяний знак"
 
+[portal.policies.wizard.classification]
+description = "Кожен завантажений документ класифікується за вбудованими мітками та позначається відповідними типами. Набір міток спільний для всієї вашої команди."
+labelsHeading = "Мітки класифікації"
+
 [portal.policies.wizard.errors]
 noTools = "Спочатку увімкніть принаймні один інструмент у робочому процесі."
 saveFailed = "Не вдалося зберегти політику. Спробуйте ще раз."
@@ -7548,73 +8371,118 @@ setUp = "Налаштувати політику {{category}}"
 [portal.policies.wizard.workflow]
 description = "Виберіть, що ця політика робить із кожним документом, який обробляє."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} активні"
-noRule = "Ще не застосовано жодного правила"
-subtitle = "Постійні автоматизації, через які проходить кожен документ, незалежно від того, який конвеєр його обробляє."
-title = "Що запускається для ваших PDF"
-
 [portal.policySummary.action]
-comingSoon = "Перейти на Enterprise"
-configure = "Налаштувати"
 setUp = "Налаштувати"
 
-[portal.policySummary.column]
-activeRule = "Активне правило"
-policy = "Політика"
-status = "Статус"
+[portal.processorFlow]
+footnote = "Підрахунки наведено за останні 24 години. Швидкість потоку є ілюстративною."
+liveBadge = "Live"
+stats = "{{connected}} підключено · {{processed}} PDF оброблено"
+title = "PDF Processor"
 
-[portal.policySummary.empty]
-description = "Після налаштування політик категорії з’являться тут."
-title = "Політик ще немає"
+[portal.processorFlow.lens]
+ariaLabel = "Режим перегляду"
+flow = "Потік"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Активна"
-off = "Вимкнено"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24 год"
+failed = "Не вдалося"
+heading = "Результати"
+success = "Доставлено"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} активних"
+count = "{{n}} · 24 год"
+heading = "Політики"
+setUp = "Налаштувати"
 soon = "Незабаром"
 
-[portal.processingStatus]
-managePlan = "Керувати планом"
-volumeSuffix = "PDF оброблено · останні 30 днів"
+[portal.processorFlow.sankey]
+waist = "Політики · {{n}} активних"
+
+[portal.processorFlow.sankey.empty]
+description = "Підключіть джерело та ввімкніть політику, щоб спостерігати, як документи проходять через processor."
+title = "Потоку ще немає"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Підключити"
+editor = "Stirling PDF Editor"
+heading = "Джерела"
+perDay = "{{n}} / 24 год"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Приймання email"
 
 [portal.procurement]
-reset = "Скинути закупівлю (демо)"
 subtitle = "Оцініть, укладіть контракт і підключіть свою команду. Кожен документ в одному місці."
 title = "Закупівля"
 
-[portal.procurement.action]
-download = "Завантажити"
-pay = "Сплатити зараз"
-request = "Запитати"
-sign = "Переглянути й підписати"
-upload = "Завантажити"
-
 [portal.procurement.agreement]
 agreeCta = "Погодитися й підписатися"
+confidential = "Конфіденційно"
 confirm = "Я прочитав(-ла) і погоджуюся з Stirling Enterprise Agreement."
-eyebrow = "Угода"
-intro = "Одна об’єднана угода охоплює вашу угоду: Master Service Agreement, Order Form, EULA та Data Processing Agreement. Перегляньте її, а потім погодьтеся прийняти пропозицію в зобов’язану підписку."
-title = "Перегляньте вашу корпоративну угоду"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA, Order Form, EULA і DPA, об'єднані в один підпис."
+download = "Завантажити"
+downloadDraftError = "Не вдалося згенерувати PDF угоди — рендерер документа недоступний. Спробуйте невдовзі ще раз або зверніться до служби підтримки."
+downloadError = "Не вдалося завантажити підписану угоду. Спробуйте ще раз."
+legalName = "Назва юридичної особи"
+legalNamePlaceholder = "Юридична особа, яка підписуватиме"
+loadError = "Не вдалося завантажити угоду. Спробуйте ще раз."
+loading = "Завантаження угоди..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Запросити зміни"
+scrollHint = "Прокрутіть, щоб переглянути"
+signatory = "Ім'я підписанта"
+signatoryPlaceholder = "Повне ім'я"
+signatoryTitle = "Посада підписанта"
+signatoryTitlePlaceholder = "наприклад, General Counsel"
+signError = "Не вдалося записати ваш підпис. Спробуйте ще раз."
 
 [portal.procurement.builder]
 addons = "Додатки"
+addressLine1 = "Адреса, рядок 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Адреса, рядок 2"
+addressLine2Placeholder = "Suite, floor, building"
 back = "Назад"
 businessName = "Назва компанії"
 businessNamePlaceholder = "Ваша компанія"
+city = "Місто"
+cityPlaceholder = "San Francisco"
+completeRequired = "Заповніть обов'язкові поля (позначені *) дійсним email перед створенням комерційної пропозиції."
+contactEmail = "Контактний email"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Ім'я контактної особи"
+contactNamePlaceholder = "Jane Doe"
 continue = "Продовжити"
-country = "Країна"
-countryEuro = "Єврозона (EUR €)"
-countryUK = "Велика Британія (GBP £)"
-countryUS = "Сполучені Штати (USD $)"
+done = "Готово"
 eula = "Я прочитав(-ла) і погоджуюся зі Stirling Enterprise EULA. Вона регулює угоду, створену з цієї пропозиції."
 generate = "Створити пропозицію"
-included = "Включено"
 indemnification = "Відшкодування за IP"
 indemnificationSub = "Ми захищаємо від прийнятних претензій щодо IP відповідно до EULA"
-offlineLicense = "Офлайн / ізольована ліцензія"
-offlineLicenseSub = "Файл ліцензії для завантаження для ізольованого self-hosted екземпляра"
+paperEyebrow = "Enterprise пропозиція"
+paperFor = "Підготовлено для"
+pdfSize = "Розмір PDF"
+poNumber = "Номер PO"
+poNumberPlaceholder = "Необов'язково"
+postalCode = "Поштовий індекс"
+postalCodePlaceholder = "94105"
+posture = "Управління"
+posture_count = "~{{count}} політик"
+posture_essentials = "Основи"
+posture_essentialsSub = "Класифікація + спільний доступ — типові налаштування"
+posture_governed = "Керований"
+posture_governedSub = "Додає безпеку та маршрутизацію"
+posture_regulated = "Регульований"
+posture_regulatedSub = "Кожна категорія — відповідність, зберігання, приймання"
 qbr = "Щоквартальні бізнес-огляди"
 qbrSub = "Ваш SE щокварталу переглядає використання та roadmap"
+region = "Штат / регіон"
+regionPlaceholder = "California"
 running = "{{annual}} / рік · {{years}}-річний {{tcv}}"
 s1Sub = "Ваша команда та PDF, які ви плануєте обробляти щороку."
 s1Title = "Скільки ви оброблятимете?"
@@ -7623,6 +8491,12 @@ s2Title = "Зобов’язання та сервіс"
 s3Sub = "Для пропозиції та угоди, яку вона створює."
 s3Title = "Ваші дані"
 serviceLevel = "Рівень сервісу"
+size_compact = "Компактний"
+size_compactSub = "Переважно текст, менше 1 MB"
+size_heavy = "Важкий"
+size_heavySub = "Сканований або з великою кількістю зображень, 5 MB+"
+size_standard = "Стандартний"
+size_standardSub = "Змішаний текст і зображення, від 1 до 5 MB"
 slDedicated = "Виділений"
 slDedicatedSub = "4 робочі години · виділений менеджер облікового запису · +30%"
 slPriority = "Пріоритетний"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Того ж робочого дня · призначений C
 slStandard = "Стандартний"
 slStandardSub = "Наступного робочого дня · спільний CSM · включено"
 stepOf = "Крок {{n}} з {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Необов'язково"
 term = "Термін"
 termDiscount = "Застосовано знижку {{pct}}% за багаторічне зобов’язання"
 title = "Створіть свою пропозицію"
@@ -7637,6 +8513,7 @@ training = "Підключення та навчання"
 trainingSub = "Живі сесії, щоб ваша команда швидко почала роботу"
 users = "Усього користувачів"
 usersPlaceholder = "наприклад, 250"
+viewEula = "Прочитати"
 volEstimated = "Оцінено на основі {{count}} користувачів (~2,000 PDF кожен, включно з автоматизацією). Змініть, якщо знаєте точніше."
 volManual = "Використовується ваше значення. Переоцініть на основі розміру команди в будь-який час."
 volNoUsers = "Не впевнені? Введіть розмір вашої команди, і ми оцінимо його."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "наприклад, 1,000,000"
 years_one = "{{count}} рік"
 years_other = "{{count}} років"
 
-[portal.procurement.docs]
-count_one = "{{count}} документ"
-count_other = "{{count}} документів"
-done = "Готово"
-here = "Ви тут"
-hide = "Приховати"
-optional = "Необов’язково"
-paidAddon = "Платний додаток"
-show = "Показати"
-subtitle = "Усе, що вам потрібно на кожному кроці шляху, відображається в міру просування угоди."
-supportingSubtitle = "SOC 2, перевірки безпеки, податкові форми та інше — готові, коли ваша команда безпеки або закупівель попросить. Деякі мають одноразову плату."
-supportingTitle = "Підтримка вашої оцінки"
+[portal.procurement.documents]
+agreement = "Enterprise Agreement"
+agreementSub = "MSA, Order Form і DPA в одному підписі."
+download = "Завантажити"
+eula = "EULA та комерційні умови"
+eulaSub = "Програмне забезпечення та комерційні умови самообслуговування."
+invoice = "Рахунок"
+invoiceSub = "Ваш перший рахунок за підписку."
+laterInvoice = "Доступно після прийняття"
+laterQuote = "Доступно після випуску вашої пропозиції"
+quote = "Комерційна пропозиція"
+quoteSub = "Ваша деталізована Enterprise пропозиція."
+sla = "Додаток SLA"
+slaSub = "Рівні підтримки та цілі часу відповіді."
+subprocessors = "Субпроцесори"
+subprocessorsSub = "Треті сторони, які обробляють дані від вашого імені."
+subtitle = "Ваші документи угоди, доступні будь-коли."
 title = "Документи"
-upcoming = "Майбутні"
+view = "Переглянути"
 
 [portal.procurement.error]
 title = "Щось пішло не так"
 
 [portal.procurement.hero]
-company = "Ваша корпоративна угода"
+barAria = "Етап {{current}} з {{total}}"
 ctaAgreement = "Переглянути й підписати угоду"
-ctaLive = "Ви вже працюєте"
-ctaPayment = "Додати платіж"
+ctaExploring = "Налаштувати пробний період"
 ctaQuote = "Переглянути вашу пропозицію"
+ctaReviewQuote = "Переглянути пропозицію"
 ctaTrial = "Створити пропозицію"
+documents = "Документи"
 eyebrow = "Корпоративна закупівля"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Запросити колег"
-keyDocs = "Ключові документи"
-nextStep = "Наступний крок: {{action}}"
-notStarted = "Не розпочато"
+licenseKey = "Ліцензійний ключ"
+liveSub = "Вашу організацію підготовлено, і ваша ліцензія активна."
+liveTitle = "Ви працюєте на Stirling Enterprise"
+next = "Далі: {{stage}}"
 open = "Відкрити закупівлю"
 scheduleCall = "Запланувати дзвінок"
-setup1Sub = "Запросіть своїх колег"
-setup1Title = "Розгорнути PDF Editor"
-setup2Sub = "Увімкніть обробку в редакторах та інших джерелах"
-setup2Title = "Підключити PDF Processor"
-setup3Sub = "Увімкніть Security, Compliance, Routing або Retention, коли вони вам потрібні"
-setup3Title = "Додати рекомендовані політики"
+sentenceAgreement = "перегляньте та підпишіть угоду"
+sentenceLive = "підготовка та розгортання"
+sentencePayment = "замовлення на купівлю та оплата"
+sentenceQuote = "перегляньте та прийміть вашу пропозицію"
+sentenceTrial = "налаштуйте пробний робочий простір"
 
 [portal.procurement.journey]
 daysLeft_one = "Залишився {{count}} день"
 daysLeft_other = "Залишилося {{count}} днів"
-engineerLabel = "Ваш solutions engineer"
-eyebrow = "Ваше впровадження"
-live = "Ви вже працюєте в Stirling Enterprise"
-nextStep = "Наступний крок: {{action}}"
-subtitle = "Ваш solutions engineer супроводжує кожен крок. Одна наступна дія за раз; повний список нижче."
-title = "Від trial до запуску — один керований шлях"
-trialTitle = "Enterprise trial"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Один підпис охоплює MSA, order form, EULA та DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Поки що не вдалося створити офлайн
 downloadOffline = "Завантажити офлайн-ліцензію (.lic)"
 hint = "Вставте цей ключ у self-hosted екземпляр, щоб активувати його, або збережіть для своїх записів. Зберігайте його безпечно."
 label = "Ваш ліцензійний ключ"
+subtitle = "Активуйте self-hosted інстанс цим ключем або збережіть його для своїх записів."
+title = "Ваш ліцензійний ключ"
+trialFileHint = "Це ваш пробний файл ліцензії. Коли угоду буде укладено, поверніться та завантажте його знову — на відміну від онлайн-ліцензійного ключа, файл .lic не оновлюється самостійно."
 
 [portal.procurement.link]
 cta = "Прив’язати обліковий запис"
@@ -7739,65 +8619,62 @@ description = "Ваша підписка активна, і ліцензію в
 eyebrow = "Live"
 title = "Ви вже працюєте в Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Trial-ключі, пропозиції за зобов’язаним обсягом, угода з одним підписом, оплата та ваш реєстр документів — усе буде тут після початку корпоративної оцінки."
-eyebrow = "Лише Enterprise"
-talkToSales = "Зв’язатися з відділом продажів"
-title = "Шлях закупівлі відкривається з Enterprise"
-
 [portal.procurement.milestone]
-accept = "Прийняти й продовжити"
-description = "Завантажте PDF, щоб поділитися ним із командою, поверніться, щоб прийняти, коли будете готові, або внесіть зміни."
-download = "Завантажити PDF"
 downloadError = "Поки що не вдалося завантажити PDF пропозиції — спробуйте ще раз за мить."
-edit = "Редагувати пропозицію"
-eyebrow = "Пропозиція {{number}}"
-perYear = " / рік"
-preparedFor = "Підготовлено для {{company}}"
-tcv = "{{value}} загальна вартість контракту"
-title = "Ваша пропозиція готова"
-
-[portal.procurement.modal]
-cancel = "Скасувати"
-chooseFile = "Вибрати файл"
-close = "Закрити"
-downloadBody = "Ваше завантаження незабаром почнеться."
-downloadCta = "Завантажити"
-downloadTitle = "Завантажити"
-noFile = "Файл не вибрано"
-payBody = "Сплатіть ваш зобов’язаний контракт карткою або банківським переказом через Stripe. Ваш робочий простір буде підготовлено, щойно платіж пройде."
-payCta = "Продовжити до Stripe"
-payTitle = "Підтвердити платіж"
-requestBodyFree = "Ми створюємо це на вимогу. Підтвердьте, і ваш solutions engineer незабаром надішле це вам."
-requestBodyPaid = "Це платний додаток. Підтвердьте, і ваш solutions engineer оцінить обсяг і надішле документи."
-requestCta = "Запитати"
-requestTitle = "Запитати цей документ"
-signBody = "Відкриває Stirling Enterprise Agreement для електронного підпису: один підпис охоплює MSA, order form, EULA та DPA. Ми автоматично ставимо зустрічний підпис, і ви переходите до оплати."
-signCta = "Відкрити для підпису"
-signTitle = "Перегляньте та підпишіть вашу угоду"
-uploadBody = "Надішліть нам ваш PO, і ми виставимо рахунок за вашими умовами. Перетягніть PDF або виберіть файл нижче."
-uploadCta = "Завантажити purchase order"
-uploadTitle = "Завантажте ваш purchase order"
 
 [portal.procurement.payment]
 description = "Вашу пропозицію прийнято, і ваша ліцензія вже активна — ваша команда може почати одразу. Сплатіть перший рахунок, коли будете готові; ви можете сплатити або завантажити його тут, без email."
+downloadAgreement = "Завантажити підписану угоду"
 downloadInvoice = "Завантажити рахунок"
-simulate = "Імітувати отримання платежу (демо)"
+eyebrow = "Оплата"
 title = "Підписку створено"
 viewInvoice = "Переглянути й сплатити рахунок"
 
+[portal.procurement.review]
+acceptCta = "Прийняти пропозицію"
+annual = "Річна плата (рік 1)"
+downloadCta = "Завантажити пропозицію"
+poNumber = "Замовлення на купівлю: {{po}}"
+renewal = "Поновлюється за {{amount}}/рік після строку (+{{pct}}% CPI)"
+tcv = "{{years}}-річний строк, повна передоплата: {{tcv}}"
+validUntil = "Дійсно до {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Не вдалося завантажити планувальник."
 fallbackLink = "Відкрити планування в новій вкладці"
+loading = "Завантаження планувальника..."
 subtitle = "Ваш solutions engineer проведе вашу команду через впровадження. Виберіть зручний час."
 title = "Запланувати дзвінок"
 
-[portal.procurement.status]
-action = "Потрібна дія"
-available = "Доступно"
-complete = "Завершено"
-pending = "Очікує"
-request = "За запитом"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Ізольовано, без вихідних з'єднань"
+back = "Назад"
+businessName = "Назва компанії"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Керований, найшвидший старт"
+continue = "Продовжити"
+deployment = "Де розгорнути?"
+eula = "Я погоджуюся з Stirling EULA та комерційними умовами."
+fullName = "Повне ім'я"
+fullNamePlaceholder = "Ваше ім'я"
+invites = "Запросити колег · необов'язково"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Запланувати дзвінок"
+seats = "Користувачі для тестування"
+seatsPlaceholder = "наприклад, 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker або Kubernetes"
+start = "Почати пробний період"
+stepOf = "Крок {{n}} з {{total}}"
+subtitle = "Безкоштовно 14 днів, картка не потрібна."
+subtitleDetails = "Кілька деталей для вашої пропозиції та угоди."
+talkFirst = "Хочете спочатку поговорити?"
+title = "Налаштуйте пробний період"
+viewEula = "Прочитати"
+workEmail = "Робочий email"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Продовження додає 7 днів і повідомляє вашого solutions engineer."
@@ -7808,20 +8685,6 @@ maxed = "Ліміт вичерпано"
 subtitle = "Ваш безкоштовний trial триває до {{date}}. Картка не потрібна."
 title = "Enterprise trial"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Ціни за зобов’язаним обсягом, загальноорганізаційні SSO + SCIM + RBAC, 90-денний незмінний аудит і виділений SE."
-homeCta = "Почати Trial →"
-homeHeadline = "Обробляйте мільйони PDF."
-
-[portal.recentActivity]
-title = "Нещодавня активність"
-viewAll = "Переглянути все"
-
-[portal.recentActivity.empty]
-description = "Запуски конвеєрів, розгортання та події агентів з’являться тут."
-title = "Тут поки нічого немає"
-
 [portal.search]
 ariaLabel = "Пошук"
 placeholder = "Пошук у Stirling — endpoints, конвеєри, документи…"
@@ -7838,58 +8701,50 @@ admin = "Адміністратор"
 [portal.settings.sections]
 account-link = "Прив’язка облікового запису"
 
-[portal.shell.header]
-accountFallback = "Обліковий запис"
-accountMenu = "Меню облікового запису"
-darkMode = "Темний режим"
-lightMode = "Світлий режим"
-search = "Пошук"
-searchPlaceholder = "Пошук…"
-signOut = "Вийти"
-switchToDark = "Перемкнути на темну тему"
-switchToLight = "Перемкнути на світлу тему"
-
 [portal.shell.sidebar]
 appEditor = "Редактор"
 appProcessor = "Обробник"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} документів"
 linkAccount = "Прив’язати обліковий запис Stirling"
-planEditor = "План Editor"
-planEnterprise = "План Enterprise"
-planProcessor = "План Processor"
 primaryNav = "Основна навігація"
 switchApp = "Перемкнути застосунок"
 
+[portal.shell.topbar]
+closeNav = "Закрити навігацію"
+openNav = "Відкрити навігацію"
+search = "Пошук"
+
 [portal.sources]
 subtitle = "Багаторазові вхідні підключення, які передають документи в Stirling. Налаштуйте підключення один раз, а потім посилайтеся на нього з будь-якої кількості політик. Натисніть рядок, щоб переглянути його конфігурацію та політики, які його використовують."
 title = "Джерела"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Підключити джерело"
 
+[portal.sources.builder]
+back = "Назад до джерел"
+backToTypes = "Усі типи джерел"
+cancel = "Скасувати"
+chooseHint = "Виберіть, звідки надходять документи. З'єднувачі, позначені сірим, уже в роботі."
+comingSoon = "Незабаром"
+comingSoonHeading = "Незабаром"
+create = "Створити джерело"
+createTitle = "Підключити джерело"
+delete = "Видалити"
+editTitle = "Редагувати джерело"
+enabled = "Увімкнено"
+save = "Зберегти зміни"
+
+[portal.sources.builder.folderAccess]
+description = "Автоматизації папок можуть використовувати лише папки, дозволені адміністратором. Додайте її в налаштуваннях доступу до папок, а потім спробуйте ще раз."
+openSettings = "Налаштування доступу до папок"
+title = "Ця папка не дозволена"
+
 [portal.sources.delete]
 body = "Видалити «{{name}}»? Цю дію не можна скасувати. Політики, які посилаються на нього, потрібно буде оновити."
 cancel = "Скасувати"
 confirm = "Видалити"
 title = "Видалити джерело?"
 
-[portal.sources.detail]
-closeAriaLabel = "Закрити деталі"
-delete = "Видалити джерело"
-docs24h = "Останні 24 год"
-docs30d = "Останні 30 днів"
-docsTotal = "Усього побачено"
-docsTrend = "Документи за останні 30 днів"
-documents = "Документи"
-edit = "Редагувати"
-notReferenced = "Не використовується жодною політикою, тому його безпечно видалити."
-pause = "Призупинити"
-resume = "Відновити"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Використовується"
-
 [portal.sources.empty]
 description = "Підключіть папку (а незабаром — і cloud storage), щоб ваші політики мали звідки отримувати документи."
 title = "Джерела ще не підключено"
@@ -7899,18 +8754,57 @@ inUse = "Використовується"
 total = "Підключення"
 unused = "Не використовується"
 
+[portal.sources.networkFields.connection]
+helperText = "Збережене підключення з адресою сервера та обліковими даними. Повторно використовується кожним джерелом, яке на нього посилається."
+label = "Підключення"
+
+[portal.sources.networkFields.directory]
+helperText = "Папка на сервері для опитування, відносно домашньої папки входу або кореня спільного ресурсу. Залиште порожнім для кореня."
+label = "Папка"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume видаляє кожен файл із сервера після того, як кожна політика його обробить."
+label = "Режим читання"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: обробляти кожен файл один раз"
+snapshot = "Snapshot: перечитувати папку під час кожного запуску"
+
+[portal.sources.networkFields.recursive]
+label = "Глибина папок"
+
+[portal.sources.networkFields.recursive.options]
+all = "Включати підпапки"
+top = "Лише верхній рівень"
+
 [portal.sources.status]
 active = "Активне"
 disabled = "Вимкнене"
 unused = "Не використовується"
 
 [portal.sources.table]
+documents = "Документи"
 source = "Джерело"
 status = "Статус"
 usedBy = "Політики"
 
+[portal.sources.types.box]
+description = "Отримуйте документи з папок Box, якими ваша команда вже ділиться."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Отримуйте документи зі спільної папки Dropbox."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Документи, які ваша команда обробила в editor, у межах політик і AI запусків."
 label = "Редактор"
+noPolicies = "Поки що немає політик, запущених з editor."
+
+[portal.sources.types.email]
+description = "Перетворюйте вкладення, надіслані до спеціальної поштової скриньки, на документи."
+label = "Email inbox"
 
 [portal.sources.types.folder]
 description = "Відстежувати каталог на сервері для нових документів."
@@ -7943,25 +8837,80 @@ label = "Глибина папки"
 all = "Включити підпапки"
 top = "Лише верхній рівень"
 
+[portal.sources.types.ftp]
+description = "Опитуйте папку FTP або FTPS сервера на наявність нових документів."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Отримуйте документи зі спільних папок Google Drive."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Відстежуйте SMB мережевий ресурс на наявність нових документів."
+label = "Мережевий диск"
+
+[portal.sources.types.onedrive]
+description = "Відстежуйте папки OneDrive на наявність нових документів."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Отримуйте документи з Amazon S3 або S3-сумісного bucket."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Збережене підключення, що містить bucket та облікові дані. Повторно використовується кожним джерелом і виходом конвеєра, які на нього посилаються."
+label = "Підключення"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume видаляє кожен об'єкт із bucket після того, як кожна політика його обробить."
+label = "Режим читання"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: обробляти кожен об'єкт один раз"
+snapshot = "Snapshot: перечитувати bucket під час кожного запуску"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Обробляються лише об'єкти, ключі яких починаються з цього префікса."
+label = "Префікс ключа"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Опитуйте папку приймання SFTP на наявність нових документів."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Отримуйте документи з бібліотек документів SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Джерело"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL і секрет підписання генеруються під час створення цього webhook. Відправники POST документи на цей URL, а політики, що посилаються на нього, запускаються після надходження."
+description = "Отримуйте документи через підписаний HTTP POST з будь-якої зовнішньої системи."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Секрет підписання показується один раз, коли webhook створено. Повторно створіть джерело, щоб змінити його."
+
+[portal.sources.types.webhook.reveal]
+copy = "Копіювати"
+done = "Готово"
+secret = "Секрет підписання"
+secretHelp = "Підписуйте сире тіло кожної доставки цим ключем (HMAC-SHA256) і надсилайте його як заголовок X-Stirling-Signature."
+secretWarning = "Скопіюйте секрет підписання зараз. З міркувань безпеки він показується лише один раз і не може бути отриманий пізніше."
+title = "Webhook створено"
+url = "Delivery URL"
+usage = "POST кожен документ як сире тіло запиту на Delivery URL з binary content type (application/pdf або application/octet-stream). Політики, що посилаються на нього, автоматично запускаються після надходження."
+
 [portal.sources.wizard]
-back = "Назад"
-cancel = "Скасувати"
-continue = "Продовжити"
-editTitle = "Редагувати джерело"
 name = "Назва"
 namePlaceholder = "наприклад, Прийом заяв"
-save = "Зберегти зміни"
-subtitle = "Крок {{current}} з {{total}} · {{label}}"
-title = "Підключити джерело"
 type = "Тип"
 
-[portal.sources.wizard.steps]
-chooseType = "Вибрати тип"
-configure = "Налаштувати"
-review = "Переглянути й підключити"
+[portal.stepModal]
+close = "Закрити"
 
 [portal.usage]
 managePayment = "Керувати платежем"
@@ -8021,16 +8970,9 @@ summary = "Володіє командою — керує ресурсами ї
 2 = "Доступ до порталу через стандартну політику"
 3 = "Усе, що може Учасник"
 
-[portal.welcome]
-ariaLabel = "Вітаємо в Stirling PDF"
-badge = "Open-source"
-installEditor = "Установити Редактор"
-inviteTeammates = "Запросити колег"
-openInBrowser = "Відкрити в браузері"
-perks = "Безкоштовно назавжди · Можна self-host"
-subtitle = "Найбезпечніший PDF Editor у світі безкоштовний для команд будь-якого розміру. Включає понад 60 операцій із PDF та SSO."
-title = "Вітаємо в"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Без обмежень"
 
 [printFile]
 title = "Роздрукувати файл"
@@ -8613,6 +9555,14 @@ text = "Поверніть сторінки PDF за або проти годи
 [rotate.tooltip.header]
 title = "Огляд налаштувань повороту"
 
+[ruler]
+clearAll = "Очистити все"
+hideAllLabels = "Приховати всі мітки"
+hideSmallLabels = "Приховати малі мітки"
+physicalValues = "Фізичні"
+scaled = "Масштабовані"
+showAllLabels = "Показати всі мітки"
+
 [sanitize]
 desc = "Видаліть потенційно шкідливі елементи з файлів PDF."
 sanitizationResults = "Результати санітизації"
@@ -8654,31 +9604,45 @@ label = "Видалити метадані XMP"
 [sanitize.steps]
 settings = "Налаштування"
 
-[sanitizePdf]
-tags = "чистка,безпека,безпечні,віддалення загроз"
-
 [sanitizePDF]
 title = "Дезінфекція PDF"
 
+[sanitizePdf]
+tags = "чистка,безпека,безпечні,віддалення загроз"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Відрегулювати масштаб сторінки"
 
+[scaleSettings]
+activeScale = "Активний масштаб"
+apply = "Застосувати масштаб"
+applyCalibration = "Застосувати калібрування"
+calculatedScale = "Обчислений масштаб"
+calibrate = "Калібрувати"
+calibrating = "Калібрування"
+calibrationDistanceRequired = "Введіть реальну відстань, більшу за нуль"
+calibrationInvalid = "Не вдалося обчислити масштаб за цим вимірюванням"
+calibrationPaperDistance = "Виміряна відстань на сторінці: {{distance}}"
+calibrationTitle = "Калібрувати масштаб"
+calibrationTooltip = "Виміряйте відому відстань, щоб автоматично обчислити масштаб"
+customScale = "Користувацький масштаб"
+noneSet = "Користувацький масштаб не встановлено"
+presets = "Попередньо задані масштаби"
+ratio = "Співвідношення масштабу"
+ratioHelp = "Співвідношення: 1 одиниця сторінки = X реальних одиниць"
+ratioPlaceholder = "наприклад, 100"
+ratioPositive = "Співвідношення має бути більшим за нуль"
+ratioRequired = "Потрібно вказати співвідношення"
+realDistance = "Реальна відстань"
+realDistancePlaceholder = "наприклад, 5"
+reset = "Скинути до стандартних"
+unit = "Одиниця"
+unitInvalid = "Недійсна одиниця: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Пороговий кут:"
-10 = "Встановлює розмір додаваної та видаляної рамки, щоб запобігти появі білих рамок на виході (за замовчуванням: 1)."
-2 = "Встановлює мінімальний абсолютний кут, необхідний для повороту зображення (за замовчуванням: 10)."
-3 = "Толерантність:"
-4 = "Визначає діапазон зміни кольору навколо передбачуваного кольору фону (за замовчуванням: 30)."
-5 = "Мінімальна площа:"
-6 = "Встановлює мінімальний поріг площі для фотографії (за замовчуванням: 10000)."
-7 = "Мінімальна площа контуру:"
-8 = "Встановлює мінімальний поріг площі контуру для фотографії"
-9 = "Розмір рамки:"
-
 [scannerImageSplit]
 submit = "Витягнути скановані зображення"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Що це робить"
 whatThisDoesDesc = "Автоматично знаходить і витягує кожне фото зі сканованої сторінки або комбінованого зображення—без ручного кадрування."
 whenToUse = "Коли використовувати"
 
+[ScannerImageSplit.selectText]
+1 = "Пороговий кут:"
+10 = "Встановлює розмір додаваної та видаляної рамки, щоб запобігти появі білих рамок на виході (за замовчуванням: 1)."
+2 = "Встановлює мінімальний абсолютний кут, необхідний для повороту зображення (за замовчуванням: 10)."
+3 = "Толерантність:"
+4 = "Визначає діапазон зміни кольору навколо передбачуваного кольору фону (за замовчуванням: 30)."
+5 = "Мінімальна площа:"
+6 = "Встановлює мінімальний поріг площі для фотографії (за замовчуванням: 10000)."
+7 = "Мінімальна площа контуру:"
+8 = "Встановлює мінімальний поріг площі контуру для фотографії"
+9 = "Розмір рамки:"
+
 [search]
 noResults = "Нічого не знайдено"
 placeholder = "Введіть пошуковий запит..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Ваш сервер Stirling-PDF офлайн і \"{{
 [session]
 expired = "Ваш сеанс закінчився. Будь ласка, оновіть сторінку та повторіть спробу."
 
-[sessionManagement.tooltip]
-header = "Керування сеансами підписання"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Нових учасників додають у кінець порядку підписання"
-bullet2 = "Неможливо додати учасників після завершення сеансу"
-bullet3 = "Кожен учасник отримує сповіщення, коли настає його черга"
-description = "Ви можете додати більше учасників до активного сеансу в будь-який час до завершення."
-title = "Додавання учасників"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Повне завершення</b>: Усі учасники підписали"
-bullet2 = "<b>Часткове завершення</b>: Деякі учасники ще не підписали"
-bullet3 = "Непідписані учасники будуть виключені з остаточного документа"
-bullet4 = "Після завершення ви можете завантажити підписаний PDF до активних файлів"
-description = "Завершення об’єднує всі підписи в один підписаний PDF. Цю дію неможливо скасувати."
-title = "Завершення сеансу"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Неможливо видалити учасників, які вже підписали"
-bullet2 = "Видалені учасники більше не отримуватимуть сповіщень"
-bullet3 = "Порядок підписання коригується автоматично"
-description = "Учасників можна видалити із сеансів до того, як вони підпишуть."
-title = "Видалення учасників"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Кожен підпис застосовується до PDF послідовно"
-bullet2 = "Наступні учасники можуть бачити попередні підписи"
-bullet3 = "Важливо для процесів затвердження та юридичних ланцюгів збереження доказів"
-description = "Порядок, який ви вказуєте під час створення сеансу, визначає, хто підписує першим."
-title = "Порядок підписів"
-
 [settings]
 close = "Закрити"
 
+[settings.ai]
+documents = "Документи й RAG"
+general = "Загальні"
+limits = "Обмеження та продуктивність"
+models = "Моделі та провайдери"
+title = "AI"
+
 [settings.configuration]
 advanced = "Додатково"
 database = "База даних"
 endpoints = "Кінцеві точки"
 features = "Функції"
+folderAccess = "Доступ до папок"
 mcp = "MCP Server"
 storageSharing = "Зберігання файлів і спільний доступ"
 systemSettings = "Системні налаштування"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "PDF-редактор за замовчуванням"
 defaultPdfEditorActive = "Stirling PDF — ваш PDF-редактор за замовчуванням"
 defaultPdfEditorChecking = "Перевірка..."
 defaultPdfEditorInactive = "Інша програма встановлена як типова"
+defaultPdfEditorRemind = "Нагадувати встановити за замовчуванням"
+defaultPdfEditorRemindDescription = "Показувати банер, коли Stirling PDF не є вашим PDF-застосунком за замовчуванням."
 defaultPdfEditorSet = "Вже типовий"
 defaultStartupView = "Типовий вигляд під час запуску"
 defaultStartupViewDescription = "Виберіть, яка вкладка буде активною в лівій колонці під час запуску застосунку"
@@ -8817,9 +9771,18 @@ languageDescription = "Виберіть мову інтерфейсу"
 logout = "Вийти"
 setAsDefault = "Зробити типовим"
 theme = "Тема"
+themeAccent = "Акцентний колір"
+themeAccentCustom = "Користувацький колір"
+themeAccentCustomHint = "Користувацький (рекомендовано стандартні)"
+themeAccentDark = "Акцентний колір темного режиму"
+themeAccentDefault = "Стандартний"
+themeAccentDefaultHint = "Стандартна тема (рекомендовано)"
+themeAccentDescription = "Кнопки, посилання та виділення використовують його, і він ледь помітно забарвлює застосунок. Світлий і темний режими мають власні. Системний режим використовує активний варіант."
+themeAccentLight = "Акцентний колір світлого режиму"
 themeDark = "Темна"
 themeDescription = "Перемикання між світлим і темним режимами"
 themeLight = "Світла"
+themeReset = "Відновити стандартну тему"
 themeSystem = "System"
 title = "Загальні"
 user = "Користувач"
@@ -8833,6 +9796,12 @@ intro = "Увімкніть автентифікацію користувачі
 learnMore = "Докладніше в документації"
 title = "Для системних адміністраторів"
 
+[settings.general.loginLanding]
+description = "Виберіть, який застосунок відкриватиметься після входу в Stirling Cloud."
+editor = "Редактор"
+processor = "Обробник"
+title = "Після входу"
+
 [settings.general.mode]
 fullscreen = "Повноекранний"
 sidebar = "Бічна панель"
@@ -9041,6 +10010,11 @@ security = "Безпека"
 telegram = "Telegram"
 title = "Безпека та автентифікація"
 
+[settings.signOut]
+confirm = "Ви впевнені, що хочете вийти?"
+submit = "Вийти"
+title = "Вихід"
+
 [settings.team]
 title = "Команда"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Завантажити на сервер"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "натисніть тут"
+fallback = "Якщо він не відкрився автоматично,"
+opening = "Відкриття Swagger UI у новій вкладці..."
 tags = "api,documentation,swagger,endpoints,development"
 title = "Документація API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Виберіть файли в Активних файлах,
 singleFileScope = "Застосовується лише до: {{fileName}}"
 viewerMode = "Перейдіть до редактора файлів, щоб вибрати кілька файлів."
 
+[toolFormat]
+ANY = "будь-який файл"
+CBR = "архів коміксів (CBR)"
+CBZ = "архів коміксів (CBZ)"
+CSV = "CSV-файл"
+EBOOK = "електронна книга"
+EMAIL = "електронний лист"
+EXCEL = "електронна таблиця"
+HTML = "вебсторінка"
+IMAGE = "зображення"
+JAVASCRIPT = "файл JavaScript"
+JSON = "JSON-файл"
+MARKDOWN = "файл Markdown"
+NONE = "немає файлу"
+PCL = "файл друку PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "захищений паролем PDF"
+POSTSCRIPT = "файл PostScript"
+PPT = "презентація"
+TEXT = "текстовий файл"
+VIDEO = "відео"
+WORD = "документ Word"
+XML = "XML-файл"
+XPS = "документ XPS"
+ZIP = "ZIP-архів"
+
 [toolPanel]
 alpha = "Альфа"
 backToAllTools = "Назад до всіх інструментів"
 collapse = "Згорнути панель"
 expand = "Розгорнути панель"
 goBack = "Повернутися"
+pdfTools = "Інструменти PDF"
 placeholder = "Виберіть інструмент, щоб почати"
 premiumFeature = "Преміум-функція:"
+searchTools = "Пошук інструментів"
 toolsHeader = "Інструменти"
 viewAllTools = "Переглянути всі інструменти"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Інструментів не знайдено"
 quickAccess = "ШВИДКИЙ ДОСТУП"
 searchPlaceholder = "Пошук інструментів..."
 
-[toolPicker.categories]
-advancedTools = "Розширені інструменти"
-recommendedTools = "Рекомендовані інструменти"
-standardTools = "Стандартні інструменти"
-
 [toolPicker.subcategories]
 advancedFormatting = "Розширене форматування"
 automation = "Автоматизація"
@@ -9950,16 +10950,31 @@ title = "Користувачі"
 you = "(ви)"
 
 [users.action]
+cancelInvite = "Скасувати запрошення"
 deleteTeam = "Видалити команду"
 disableMfa = "Скинути MFA"
 move = "Перемістити до команди"
 reinstate = "Відновити"
 remove = "Видалити з організації"
+removeTeam = "Вилучити з команди"
 rename = "Перейменувати команду"
 resetPw = "Скинути пароль"
 suspend = "Призупинити"
 unlock = "Розблокувати обліковий запис"
 
+[users.activity]
+daysAgo = "{{count}} дн. тому"
+hoursAgo = "{{count}} год тому"
+justNow = "Щойно"
+minutesAgo = "{{count}} хв тому"
+monthsAgo_one = "{{count}} місяць тому"
+monthsAgo_other = "{{count}} місяців тому"
+never = "Ніколи"
+weeksAgo_one = "{{count}} тиждень тому"
+weeksAgo_other = "{{count}} тижнів тому"
+yearsAgo_one = "{{count}} рік тому"
+yearsAgo_other = "{{count}} років тому"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Схвалює політику"
@@ -9967,11 +10982,14 @@ editor = "Редактор"
 processor = "Обробник"
 
 [users.confirm]
+cancelInviteBody = "Скасувати запрошення для {{email}}? Вони не зможуть приєднатися за поточним посиланням."
+cancelInviteTitle = "Скасувати запрошення"
 deleteTeamBody = "Видалити команду {{name}}? Спершу команда має бути порожньою — перемістіть її учасників до іншої команди, і вона не повинна все ще володіти жодними конфігураціями інтеграцій."
 deleteTeamTitle = "Видалити команду"
 disableMfaBody = "Видалити реєстрацію MFA для {{name}}? Якщо потрібно, вони налаштують її знову під час наступного входу."
 disableMfaTitle = "Скинути MFA"
 removeBody = "Назавжди видалити {{name}} з організації? Цю дію не можна скасувати."
+removeTeamBody = "Вилучити {{name}} з команди? Вони збережуть свій обліковий запис, але втратять доступ до ресурсів цієї команди."
 removeTitle = "Видалити учасника"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Ім’я користувача"
 usernameError = "Ім’я користувача має містити щонайменше 3 символи"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Запросив(ла) {{who}}"
+cancel = "Скасувати"
+count = "{{count}} очікують"
+desc = "Запрошені люди, які ще не приєдналися. Вони займають місце, доки не приймуть запрошення."
+expiresInDays_one = "Закінчується через {{count}} день"
+expiresInDays_other = "Закінчується через {{count}} днів"
+expiresToday = "Закінчується сьогодні"
+title = "Запрошення, що очікують"
+
 [users.loadError]
 description = "Сталася помилка під час звернення до бекенду, або у вас немає доступу. Спробуйте ще раз."
 title = "Не вдалося завантажити учасників"
@@ -10212,9 +11240,11 @@ title = "Вкладення"
 
 [viewer.bookmarks]
 bookmarkTitle = "Назва закладки"
+bookmarkTitleRequired = "Потрібно вказати назву закладки"
 closeSidebar = "Закрити бічну панель закладок"
 collapseAll = "Згорнути всі закладки"
 expandAll = "Розгорнути всі закладки"
+searchPlaceholder = "Пошук закладок"
 
 [viewer.comments]
 addComment = "Додати коментар"
@@ -10605,30 +11635,6 @@ title = "Текст водяного знака"
 image = "Зображення"
 text = "Текст"
 
-[wetSignature.tooltip]
-header = "Способи створення підпису"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Налаштуйте колір і товщину пера"
-bullet2 = "Очищуйте та перемальовуйте, доки не будете задоволені"
-bullet3 = "Працює на сенсорних пристроях (планшети, телефони)"
-description = "Створіть рукописний підпис за допомогою миші або сенсорного екрана. Найкраще підходить для особистих, автентичних підписів."
-title = "Намалювати підпис"
-
-[wetSignature.tooltip.type]
-bullet1 = "Виберіть один із кількох шрифтів"
-bullet2 = "Налаштуйте розмір і колір тексту"
-bullet3 = "Ідеально для стандартизованих підписів"
-description = "Згенеруйте підпис із введеного тексту. Швидко та уніфіковано, підходить для ділових документів."
-title = "Ввести підпис"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Підтримує PNG, JPG та інші формати зображень"
-bullet2 = "Для найкращих результатів рекомендовано прозоре тло"
-bullet3 = "Зображення буде змінено за розміром під область підпису"
-description = "Завантажте заздалегідь створене зображення підпису. Ідеально, якщо у вас є відсканований підпис або логотип компанії."
-title = "Завантажити зображення підпису"
-
 [workbenchBar]
 activeFiles = "Активні файли"
 annotations = "Анотації"
@@ -10652,6 +11658,7 @@ redact = "Затемнити"
 rotateLeft = "Повернути ліворуч"
 rotateRight = "Повернути праворуч"
 ruler = "Лінійка / Вимірювання"
+rulerSettings = "Налаштування масштабу"
 save = "Зберегти"
 saveAll = "Зберегти всі"
 saveAs = "Зберегти як"
diff --git a/frontend/editor/public/locales/vi-VN/translation.toml b/frontend/editor/public/locales/vi-VN/translation.toml
index 9f6861ecbe..fed594577f 100644
--- a/frontend/editor/public/locales/vi-VN/translation.toml
+++ b/frontend/editor/public/locales/vi-VN/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "tệp đã chọn"
 font = "Phông chữ"
 fontSizeTooltip = "Kích thước chữ số trang theo point. Số lớn hơn sẽ tạo chữ lớn hơn."
 fontTypeTooltip = "Họ phông chữ cho số trang. Chọn theo phong cách tài liệu của bạn."
-genericSubmit = "Gửi"
 green = "Xanh lá"
 help = "Trợ giúp"
-imgPrompt = "Chọn (các) hình ảnh"
 incorrectPasswordMessage = "Mật khẩu hiện tại không chính xác."
 info = "Thông tin"
 invalidUndoData = "Không thể hoàn tác: dữ liệu thao tác không hợp lệ"
@@ -62,7 +60,6 @@ loginAgreementTitle = "Thỏa thuận đăng nhập"
 logOut = "Đăng xuất"
 marginTooltip = "Khoảng cách giữa số trang và mép trang."
 moreOptions = "Tùy chọn khác"
-multiPdfPrompt = "Chọn các tệp PDF (2+)"
 never = "Không bao giờ"
 no = "Không"
 noFileSelected = "Chưa chọn tệp. Vui lòng tải lên một tệp."
@@ -80,7 +77,6 @@ pageOrderPrompt = "Thứ tự trang tùy chỉnh (Nhập danh sách số trang 
 pages = "Trang"
 pageSelectionPrompt = "Lựa chọn trang tùy chỉnh (Nhập danh sách số trang được phân tách bằng dấu phẩy 1,5,6 hoặc Các hàm như 2n+1) :"
 password = "Mật khẩu"
-pdfPrompt = "Chọn (các) tệp PDF"
 pin = "Ghim tệp (giữ hoạt động sau khi chạy công cụ)"
 pro = "Pro"
 processingComplete = "Tệp của bạn đã sẵn sàng."
@@ -356,6 +352,7 @@ text = "Các quyền này kiểm soát những gì người dùng có thể làm
 title = "Thay đổi quyền"
 
 [addStamp]
+preview = "Xem trước Dấu đóng"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "Tải xuống thủ công: nhấp vào các liên kết và đặ
 noLanguages = "Không tìm thấy ngôn ngữ tessdata trong thư mục đã cấu hình."
 permissionNotice = "Đường dẫn tessdata không thể ghi. Tệp tải xuống sẽ được mở trong trình duyệt; vui lòng lưu các tệp .traineddata thủ công vào thư mục tessdata."
 
+[admin.settings.ai.documents]
+description = "Cấu hình mô hình embedding và cài đặt truy xuất dùng để trả lời câu hỏi trên tài liệu. Được áp dụng cho AI engine khi lưu."
+title = "Tài liệu & RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "Để trống để dùng thông tin xác thực môi trường riêng của engine. Áp dụng cho các triển khai tự lưu trữ một engine."
+generic = "Embedding API key"
+openai = "OpenAI API key"
+setPlaceholder = "Đã lưu - để trống để giữ key hiện tại"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "Base URL của endpoint embedding tương thích OpenAI / Ollama, ví dụ http://ollama:11434/v1. Phải trỏ tới endpoint nội bộ đáng tin cậy (nhạy cảm với SSRF)."
+label = "Embedding base URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "Tên mô hình embedding. Văn bản tự do; gợi ý chỉ mang tính tham khảo."
+label = "Mô hình embedding"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "Nhà cung cấp dùng để chuyển văn bản tài liệu thành vector embedding."
+label = "Nhà cung cấp embedding"
+
+[admin.settings.ai.documents.maxSearches]
+description = "Số lần tìm kiếm truy xuất tối đa mà agent có thể chạy cho mỗi yêu cầu."
+label = "Số tìm kiếm tối đa"
+
+[admin.settings.ai.documents.reindexNote]
+body = "Việc thay đổi mô hình embedding có hiệu lực ngay lập tức, nhưng các tài liệu đã được lập chỉ mục bằng mô hình trước đó phải được lập chỉ mục lại để tìm kiếm trả về kết quả chính xác."
+title = "Cần lập chỉ mục lại"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "Nếu bạn đã thay đổi mô hình embedding, hãy lập chỉ mục lại các tài liệu hiện có để tìm kiếm dùng mô hình mới."
+
+[admin.settings.ai.documents.topK]
+description = "Số đoạn liên quan nhất được truy xuất cho mỗi lần tìm kiếm."
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "Kết nối Stirling với Python AI engine và chọn các khả năng AI được hiển thị. Thay đổi áp dụng khi khởi động lại."
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "Bật hoặc tắt từng tính năng AI. Các tính năng bị tắt sẽ bị ẩn trong ứng dụng."
+title = "Khả năng"
+
+[admin.settings.ai.general.enabled]
+description = "Công tắc chính. Khi tắt, không có công cụ AI, agent hoặc lệnh gọi engine nào khả dụng."
+label = "Bật AI"
+
+[admin.settings.ai.general.features.chat]
+description = "Trợ lý hội thoại để làm việc với PDF."
+label = "Trợ lý chat"
+
+[admin.settings.ai.general.features.classify]
+description = "Tự động phân loại tài liệu theo loại hoặc nội dung."
+label = "Phân loại tài liệu"
+
+[admin.settings.ai.general.features.createPdf]
+description = "Tạo PDF mới (ví dụ từ HTML) thông qua AI agent."
+label = "Tạo PDF từ prompt"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "Đặt câu hỏi và nhận câu trả lời dựa trên tài liệu đã tải lên."
+label = "Câu hỏi về tài liệu"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "Rà soát tài liệu để tìm lỗi toán học và số liệu."
+label = "Kiểm toán toán học"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "Thêm nhận xét đánh giá và chú thích do AI viết vào PDF."
+label = "PDF comment agent"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "Thời gian chờ cho các thao tác agent nặng hơn như tạo tài liệu."
+label = "Thời gian chờ tác vụ dài (giây)"
+
+[admin.settings.ai.general.note]
+body = "AI engine chạy như một dịch vụ riêng biệt. Bí mật dùng chung của nó"
+body2 = "được đặt qua biến môi trường container. Provider API key có thể được nhập trên các trang này hoặc cung cấp dưới dạng biến môi trường của engine; các key nhập tại đây sẽ được đẩy tới engine khi lưu."
+title = "Giới thiệu về AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "Thời gian chờ cho phản hồi chat được stream (từng token)."
+label = "Thời gian chờ stream (giây)"
+
+[admin.settings.ai.general.test]
+button = "Kiểm tra kết nối"
+failBody = "AI engine không phản hồi. Kiểm tra URL, đảm bảo container engine đang chạy và AI đã được bật (cần khởi động lại sau khi bật)."
+failTitle = "Không thể truy cập AI engine"
+okBody = "AI engine đã phản hồi kiểm tra trạng thái."
+okTitle = "Có thể truy cập AI engine"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "Thời gian chờ cho các yêu cầu AI tiêu chuẩn tới engine."
+label = "Thời gian chờ yêu cầu (giây)"
+
+[admin.settings.ai.general.url]
+description = "URL nội bộ của Python AI engine, ví dụ http://stirling-pdf-engine:5001."
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "Giới hạn bảo vệ cho khối lượng công việc mà yêu cầu AI có thể thực hiện và số lượng chạy đồng thời. Được áp dụng cho AI engine khi lưu."
+title = "Giới hạn & Hiệu năng"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "Giới hạn bảo vệ: từ chối yêu cầu AI nếu văn bản được trích xuất vượt quá độ dài này."
+label = "Số ký tự tối đa mỗi yêu cầu"
+
+[admin.settings.ai.limits.maxPages]
+description = "Giới hạn bảo vệ: từ chối yêu cầu AI vượt quá số trang PDF này."
+label = "Số trang tối đa mỗi yêu cầu"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "Số lệnh gọi mô hình đang xử lý đồng thời tối đa trên toàn bộ engine."
+label = "Số đồng thời tối đa của mô hình"
+
+[admin.settings.ai.models]
+description = "Chọn nhà cung cấp LLM và các mô hình thông minh/nhanh mà AI engine sử dụng. Được áp dụng cho AI engine khi lưu."
+title = "Mô hình & Nhà cung cấp"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "Để trống để dùng thông tin xác thực môi trường riêng của engine. Áp dụng cho các triển khai tự lưu trữ một engine."
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "Đã lưu - để trống để giữ key hiện tại"
+
+[admin.settings.ai.models.baseUrl]
+description = "Base URL của endpoint tương thích OpenAI / Ollama, ví dụ http://ollama:11434/v1."
+label = "Provider base URL"
+warning = "Base URL phải trỏ tới endpoint nội bộ đáng tin cậy. Engine sẽ thực hiện các yêu cầu phía máy chủ tới đó, vì vậy giá trị không đáng tin cậy sẽ nhạy cảm với SSRF."
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "Số token đầu ra tối đa cho mô hình nhanh."
+label = "Số token tối đa của mô hình nhanh"
+
+[admin.settings.ai.models.fastModel]
+description = "Mô hình rẻ hơn, nhanh hơn cho các tác vụ nhẹ. Văn bản tự do; gợi ý chỉ mang tính tham khảo."
+label = "Mô hình nhanh"
+
+[admin.settings.ai.models.provider]
+description = "Nhà cung cấp LLM mà engine giao tiếp."
+label = "Nhà cung cấp"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "Số token đầu ra tối đa cho mô hình thông minh."
+label = "Số token tối đa của mô hình thông minh"
+
+[admin.settings.ai.models.smartModel]
+description = "Mô hình năng lực cao cho suy luận phức tạp. Văn bản tự do; gợi ý chỉ mang tính tham khảo."
+label = "Mô hình thông minh"
+
+[admin.settings.ai.saved]
+body = "Thay đổi được tự động đẩy tới AI engine."
+bodyNoPush = "Đã lưu cài đặt. Chúng sẽ được áp dụng vào lần tới khi AI engine nhận cấu hình."
+title = "Đã lưu cài đặt AI"
+
 [admin.settings.badge]
 clickToUpgrade = "Nhấp để xem chi tiết gói"
 
@@ -938,6 +1094,25 @@ label = "Tạo lại khi khởi động"
 description = "Số ngày chứng chỉ còn hiệu lực"
 label = "Hiệu lực chứng chỉ (ngày)"
 
+[admin.settings.folderAccess]
+description = "Các thư mục mà nguồn thư mục và đầu ra thư mục được phép đọc và ghi. Đây là ranh giới bảo mật: tự động hóa không bao giờ có thể được trỏ tới đường dẫn máy chủ nằm ngoài danh sách này."
+securityNote = "Để trống mục này để tắt hoàn toàn nguồn thư mục và đầu ra thư mục. Thư mục cấu hình riêng của Stirling luôn bị cấm truy cập."
+title = "Quyền truy cập thư mục"
+
+[admin.settings.folderAccess.implied]
+description = "Các thư mục do Stirling quản lý này luôn được phép và không thể thay đổi tại đây."
+serverStorage = "Lưu trữ tệp máy chủ"
+title = "Luôn được phép"
+watchedFolder = "Thư mục được Pipeline theo dõi"
+
+[admin.settings.folderAccess.roots]
+add = "Thêm"
+empty = "Không có thư mục nào được phép. Nguồn thư mục và đầu ra hiện đang bị tắt."
+hint = "Nhập đường dẫn tuyệt đối, ví dụ /data/inbox."
+label = "Gốc thư mục được phép"
+placeholder = "/data/inbox"
+remove = "Xóa gốc thư mục"
+
 [admin.settings.general]
 description = "Cấu hình cài đặt hệ thống cho ứng dụng, bao gồm thương hiệu và hành vi mặc định."
 system = "Hệ thống"
@@ -1842,6 +2017,15 @@ export = "Xuất"
 accessDenied = "Từ chối truy cập"
 insufficientPermissions = "Bạn không có quyền thực hiện thao tác này."
 
+[auth.callback]
+completing = "Đang hoàn tất xác thực"
+invalidToken = "Đăng nhập OAuth thất bại - token không hợp lệ."
+missingToken = "Đăng nhập OAuth thất bại - không nhận được token."
+oauthFailed = "Đăng nhập OAuth thất bại. Vui lòng thử lại."
+pleaseWait = "Vui lòng chờ trong khi chúng tôi hoàn tất đăng nhập cho bạn."
+signedOut = "Bạn đã đăng xuất. Vui lòng đăng nhập lại."
+windowMayClose = "Bạn có thể đóng cửa sổ này khi hoàn tất."
+
 [auth.displayName]
 guest = "Khách"
 user = "Người dùng"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "Bảo vệ tài liệu PDF bằng cách loại bỏ nội
 description = "Công cụ này sẽ tự động đổi tên tệp PDF dựa trên nội dung của chúng. Nó phân tích tài liệu để tìm tiêu đề phù hợp nhất từ văn bản."
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "Tự động xoay"
+tags = "auto rotate,sửa hướng,bị lộn ngược,nằm ngang,làm thẳng,định hướng,phát hiện hướng,sửa xoay,tự động định hướng,đã quét,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "Ngưỡng tin cậy"
+
+[autoRotate.detectionMode]
+auto = "Tự động"
+osd = "Chỉ OCR"
+text = "Chỉ văn bản"
+title = "Phương pháp phát hiện"
+
+[autoRotate.error]
+failed = "Đã xảy ra lỗi khi tự động xoay PDF."
+
+[autoRotate.inferUndetected]
+title = "Xoay các trang có độ tin cậy thấp để khớp"
+
+[autoRotate.report]
+applied = "{{degrees}}° theo chiều kim đồng hồ"
+confidenceValue = "Độ tin cậy {{value}}"
+noChange = "Không thay đổi"
+pageLabel = "Trang {{number}}"
+summary = "Đã xoay {{rotated}} trên {{total}} trang, giữ nguyên {{unchanged}} trang"
+title = "Báo cáo phát hiện"
+
+[autoRotate.report.method]
+inferred = "Đã khớp"
+none = "Đã bỏ qua"
+osd = "OCR"
+text = "Văn bản"
+
+[autoRotate.report.note]
+belowThreshold = "Dưới ngưỡng"
+blankPage = "Trang trống"
+inferredFromDocument = "Giống các trang khác"
+noDominantDirection = "Hướng văn bản hỗn hợp"
+osdFailed = "Không tìm thấy văn bản đọc được"
+osdNoVerdict = "Không xác định được chiều đúng"
+tesseractUnavailable = "OCR chưa được cài đặt"
+tooFewGlyphs = "Quá ít văn bản"
+
+[autoRotate.results]
+title = "Kết quả tự động xoay"
+
+[autoRotate.settings]
+title = "Cài đặt"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "Mức độ chắc chắn cần có trước khi xoay một trang. Giảm để xoay nhiều trang hơn, tăng để giữ nguyên nhiều trang hơn."
+title = "Ngưỡng tin cậy"
+
+[autoRotate.tooltip.description]
+text = "Xác định chiều đúng của từng trang và xoay về đúng hướng. Các trang đã đúng chiều sẽ được giữ nguyên."
+
+[autoRotate.tooltip.detectionMode]
+text = "Tự động đọc văn bản trên trang trước, sau đó xem trang như hình ảnh nếu chưa đủ. Chỉ văn bản bỏ qua kiểm tra hình ảnh, nhanh nhất cho tài liệu chưa từng được quét. Chỉ OCR xử lý mọi trang như hình ảnh."
+title = "Phương pháp phát hiện"
+
+[autoRotate.tooltip.header]
+title = "Tự động xoay"
+
+[autoRotate.tooltip.inferUndetected]
+text = "Các trang trống hoặc gần như trống không thể tự kiểm tra. Khi mọi trang đọc được đều cần xoay cùng một hướng, các trang này sẽ được xoay để khớp với chúng."
+title = "Xoay các trang có độ tin cậy thấp để khớp"
+
 [autoSizeSplitPDF]
 tags = "pdf,chia,tài liệu,tổ chức"
 
@@ -2189,33 +2440,6 @@ keywords = "Từ khóa: odd, even"
 numbers = "Số/khoảng: 5, 10-20"
 progressions = "Cấp số: 3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "Các loại chứng chỉ"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "Được quản lý bởi quản trị viên hệ thống"
-bullet2 = "Chia sẻ cho người dùng được ủy quyền"
-bullet3 = "Đại diện cho danh tính công ty, không phải cá nhân"
-bullet4 = "Phù hợp cho: Tài liệu chính thức, chữ ký nhóm"
-description = "Chứng chỉ dùng chung do tổ chức của bạn cung cấp. Dùng cho quyền ký ở cấp độ toàn công ty."
-title = "Chứng chỉ tổ chức"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "Tự động tạo khi lần đầu sử dụng"
-bullet2 = "Gắn với tài khoản người dùng của bạn"
-bullet3 = "Không thể chia sẻ với người dùng khác"
-bullet4 = "Phù hợp cho: Tài liệu cá nhân, trách nhiệm cá nhân"
-description = "Chứng chỉ được tự động tạo, duy nhất cho tài khoản của bạn. Phù hợp với chữ ký cá nhân."
-title = "Chứng chỉ cá nhân"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "Yêu cầu tệp P12/PFX và mật khẩu"
-bullet2 = "Có thể do Tổ chức cấp Chứng chỉ bên ngoài cấp"
-bullet3 = "Mức độ tin cậy cao hơn cho tài liệu pháp lý"
-bullet4 = "Phù hợp cho: Hợp đồng có giá trị pháp lý, xác thực bên ngoài"
-description = "Sử dụng tệp chứng chỉ PKCS#12 của bạn. Cung cấp toàn quyền kiểm soát thuộc tính chứng chỉ."
-title = "Tải lên P12 tùy chỉnh"
-
 [certSign]
 awaitingSignatures = "Đang chờ chữ ký"
 chooseCertificate = "Chọn tệp chứng chỉ"
@@ -2542,34 +2766,6 @@ server = "Máy chủ"
 stepTitle = "Nguồn chứng chỉ"
 upload = "Tải lên"
 
-[certSign.tooltip.header]
-title = "Giới thiệu về quản lý chữ ký"
-
-[certSign.tooltip.overview]
-bullet1 = "Kiểm tra chữ ký hiện có và tính hợp lệ của chúng"
-bullet2 = "Xem thông tin chi tiết về người ký và chứng chỉ"
-bullet3 = "Thêm chữ ký số mới để bảo vệ tài liệu của bạn"
-bullet4 = "Hỗ trợ nhiều tệp với điều hướng dễ dàng"
-text = "Công cụ này cho phép bạn kiểm tra PDF có được ký số không và thêm chữ ký số mới. Chữ ký số chứng minh ai đã tạo hoặc phê duyệt tài liệu và cho thấy tài liệu có bị thay đổi sau khi ký không."
-title = "Công cụ này làm gì?"
-
-[certSign.tooltip.signing]
-bullet1 = "Hỗ trợ định dạng PEM, PKCS12, JKS và chứng chỉ máy chủ"
-bullet2 = "Tùy chọn hiển thị hoặc ẩn chữ ký trên PDF"
-bullet3 = "Thêm lý do, địa điểm và tên người ký"
-bullet4 = "Chọn trang để đặt chữ ký hiển thị"
-bullet5 = "Dùng chứng chỉ máy chủ cho tùy chọn 'Sign with Stirling-PDF' đơn giản"
-text = "Để ký PDF, bạn cần chứng chỉ số (như PEM, PKCS12 hoặc JKS). Bạn có thể chọn hiển thị chữ ký trên tài liệu hoặc giữ ẩn chỉ vì mục đích bảo mật."
-title = "Thêm chữ ký"
-
-[certSign.tooltip.validation]
-bullet1 = "Hiển thị chữ ký hợp lệ hoặc không hợp lệ"
-bullet2 = "Hiển thị thông tin người ký và ngày ký"
-bullet3 = "Kiểm tra tài liệu có bị chỉnh sửa sau khi ký không"
-bullet4 = "Có thể dùng chứng chỉ tùy chỉnh để xác minh"
-text = "Khi bạn kiểm tra chữ ký, công cụ sẽ cho biết chúng có hợp lệ không, ai đã ký tài liệu, khi nào ký và liệu tài liệu có bị thay đổi sau khi ký không."
-title = "Kiểm tra chữ ký"
-
 [changeCreds]
 changeUsername = "Cập nhật tên người dùng. Bạn sẽ bị đăng xuất sau khi cập nhật."
 credsUpdated = "Đã cập nhật tài khoản"
@@ -2824,6 +3020,7 @@ next = "Tiếp"
 preview = "Xem trước"
 previous = "Trước"
 refresh = "Làm mới"
+remaining = "Còn lại"
 retry = "Thử lại"
 save = "Lưu"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog Analytics"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "Giám sát nâng cao"
-allInOneWorkspace = "Không gian làm việc PDF tất cả trong một (viewer, tools & agent)"
-apiSandbox = "API sandbox"
-dedicatedSupportSlas = "Hỗ trợ riêng & SLA"
-fasterThroughput = "Tốc độ xử lý nhanh gấp 10 lần"
-fullyPrivateFiles = "Tệp hoàn toàn riêng tư"
-largeFileProcessing = "Xử lý tệp lớn"
-orgWideAccess = "Kiểm soát truy cập toàn tổ chức"
-premiumAiModels = "Mô hình AI cao cấp"
-prioritySupport = "Hỗ trợ ưu tiên"
-privateDocCloud = "Đám mây tài liệu riêng tư"
-ragFineTuning = "RAG + fine-tuning"
-secureApiAccess = "Truy cập API an toàn"
-standardThroughput = "Tốc độ xử lý tiêu chuẩn"
-unlimitedApiAccess = "Truy cập API không giới hạn"
-unlimitedSeats = "Số ghế không giới hạn"
-
 [crop]
 autoCrop = "Tự động cắt khoảng trắng"
 noFileSelected = "Chọn một tệp PDF để bắt đầu cắt xén"
@@ -3346,6 +3525,7 @@ message = "Không thể đặt trình xử lý PDF mặc định"
 title = "Lỗi"
 
 [defaultApp.prompt]
+dontRemind = "Đừng nhắc lại"
 message = "Đặt Stirling PDF làm ứng dụng mặc định để mở tệp PDF."
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "Tùy chỉnh nhóm"
 dropHint = "Mở tệp để bắt đầu"
 dropToAdd = "Drop files to add"
 expand = "Mở rộng thanh bên"
-files = "Tệp"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive chưa được cấu hình"
 leaveMyFiles = "Rời Tệp của tôi"
+library = "Thư viện PDF"
 myFiles = "Tệp của tôi"
 noFiles = "Chưa có tệp nào"
 openFileManager = "Mở trình quản lý tệp"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "Thêm"
-addLabel = "Thêm nhãn…"
-categoryIconAria = "Chọn biểu tượng cho {{name}}"
-createCategory = "Tạo danh mục"
-delete = "Xóa danh mục"
 done = "Xong"
-hide = "Ẩn danh mục"
-newCategory = "Tên danh mục mới…"
-removeLabel = "Xóa {{name}}"
-rename = "Đổi tên"
 reset = "Đặt lại về mặc định"
-search = "Tìm kiếm nhãn…"
-show = "Hiển thị danh mục"
 subtitle = "Nhóm các tệp của bạn vào danh mục cha. Thêm nhãn hiện có hoặc nhãn mới vào danh mục, đổi tên danh mục hoặc tự tạo danh mục riêng. Các tệp không thuộc danh mục nào của bạn sẽ xuất hiện trong “Khác”."
 title = "Danh mục thanh bên"
 
@@ -3808,6 +3977,7 @@ refresh = "Làm mới từ máy chủ"
 remove = "Xóa"
 removeVersion = "Xóa phiên bản này"
 rename = "Đổi tên"
+renamed = "Đã đổi tên"
 renameFolder = "Đổi tên thư mục"
 resizeFolderTree = "Thay đổi kích thước cây thư mục (phím mũi tên, Shift cho bước lớn hơn; nhấp đúp để tự khớp)"
 save = "Lưu"
@@ -3910,9 +4080,7 @@ count = "Tệp"
 folder = "Thư mục"
 labels = "Nhãn"
 modified = "Sửa đổi"
-name = "Tên"
 size = "Kích thước"
-toolHistoryAtVersion = "Chuỗi công cụ tích lũy"
 totalSize = "Tổng kích thước"
 type = "Loại"
 versionHistory = "Hành trình phiên bản"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "Đã lưu tất cả"
+extractCsvError = "Không thể trích xuất CSV"
+extractXlsxError = "Không thể trích xuất XLSX"
 flattenAfterFilling = "Làm phẳng sau khi điền"
+requiredAbbreviation = "bắt buộc"
+requiredFieldsError = "Vui lòng điền tất cả các trường bắt buộc"
 rescanFields = "Quét lại trường"
 rescanFormFields = "Quét lại trường biểu mẫu"
 save = "Lưu"
+saveShortcut = "Ctrl+S để lưu"
+unsavedChanges = "Thay đổi chưa lưu"
 
 [formFill.sidebar]
 close = "Đóng thanh bên"
@@ -4309,6 +4484,11 @@ desc = "Tự động đổi tên tệp PDF dựa trên tiêu đề được phá
 tags = "tự động phát hiện,dựa trên tiêu đề,tổ chức,đổi nhãn"
 title = "Tự động đổi tên tệp PDF"
 
+[home.autoRotate]
+desc = "Phát hiện hướng của từng trang và tự động xoay cho thẳng."
+tags = "auto rotate,sửa hướng,bị lộn ngược,nằm ngang,làm thẳng,định hướng,phát hiện hướng,sửa xoay,tự động định hướng,đã quét,OSD"
+title = "Tự động xoay"
+
 [home.autoSizeSplitPDF]
 tags = "tự động,chia,kích thước"
 title = "Tự động chia theo kích thước/số lượng"
@@ -4608,13 +4788,13 @@ hint = "Tải lên PNG, JPG, SVG hoặc tệp hình ảnh khác để đặt lê
 label = "Tải ảnh lên"
 placeholder = "Chọn tệp ảnh"
 
-[imageToPdf]
-tags = "chuyển đổi,img,jpg,hình ảnh,ảnh"
-
 [imageToPDF]
 header = "Hình ảnh sang PDF"
 title = "Hình ảnh sang PDF"
 
+[imageToPdf]
+tags = "chuyển đổi,img,jpg,hình ảnh,ảnh"
+
 [infoBanner]
 dismiss = "Bỏ qua"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "Bạn đã được mời!"
 
 [landing]
 addFiles = "Thêm tệp"
-heroSubtitle = "Kéo thả hoặc thêm một PDF hiện có để bắt đầu."
 mobileUpload = "Tải lên từ Di động"
 openFromComputer = "Mở từ máy tính"
 uploadFromComputer = "Tải lên từ máy tính"
-workbenchEmptyStateHero = "Thả PDF vào bất kỳ đâu"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "Đăng nhập"
 magicLinkSent = "Magic link đã được gửi tới {{email}}! Hãy kiểm tra email và nhấp vào liên kết để đăng nhập."
 mfaCode = "Mã xác thực"
 mfaRequired = "Yêu cầu mã hai yếu tố"
+noAccount = "Chưa có tài khoản?"
 or = "Hoặc"
 password = "Mật khẩu"
 passwordChangedSuccess = "Đổi mật khẩu thành công! Vui lòng đăng nhập bằng mật khẩu mới."
@@ -4715,26 +4894,10 @@ signInWith = "Đăng nhập với"
 title = "Đăng nhập"
 unexpectedError = "Lỗi không mong muốn: {{message}}"
 updatePassword = "Cập nhật mật khẩu"
-useEmailInstead = "Đăng nhập bằng email"
 useMagicLink = "Thay vào đó dùng magic link"
 username = "Tên người dùng"
 youAreLoggedIn = "Bạn đã đăng nhập!"
 
-[login.slides.edit]
-alt = "Chỉnh sửa PDF"
-subtitle = "Với hơn chục công cụ giúp bạn ẩn/xóa, ký, đọc và thao tác với PDF, bạn chắc chắn sẽ tìm được thứ mình cần."
-title = "Chỉnh sửa PDF để hiển thị/bảo vệ thông tin bạn muốn"
-
-[login.slides.overview]
-alt = "Tổng quan Stirling PDF"
-subtitle = "Bộ công cụ đám mây ưu tiên quyền riêng tư cho PDF cho phép bạn chuyển đổi, ký, ẩn/xóa thông tin và quản lý tài liệu, cùng hơn 50 công cụ mạnh mẽ khác."
-title = "Giải pháp tất cả trong một cho mọi nhu cầu PDF của bạn."
-
-[login.slides.secure]
-alt = "Bảo mật PDF"
-subtitle = "Thêm mật khẩu, che nội dung và quản lý chứng chỉ dễ dàng."
-title = "Bảo vệ thông tin nhạy cảm trong PDF của bạn"
-
 [margin]
 large = "Lớn"
 medium = "Trung bình"
@@ -4976,6 +5139,7 @@ pinButton = "Bạn có thể dùng nút <strong>Ghim</strong> nếu muốn tệp
 results = "Sau khi công cụ chạy xong, bước <strong>Đánh giá</strong> sẽ hiển thị bản xem trước kết quả trong bảng này, và cho phép bạn hoàn tác thao tác hoặc tải tệp xuống."
 runButton = "Khi công cụ đã được cấu hình, nút này cho phép chạy công cụ trên tất cả PDF đã chọn."
 selectCropTool = "Hãy chọn công cụ <strong>Cắt xén</strong> để minh họa cách sử dụng một công cụ."
+stepOf = "Bước {{current}} trên {{total}}"
 toolInterface = "Đây là giao diện công cụ <strong>Cắt xén</strong>. Như bạn thấy, chưa có nhiều vì chúng ta chưa thêm tệp PDF nào để làm việc."
 workbench = "Đây là <strong>Bàn làm việc</strong> - khu vực chính nơi bạn xem và chỉnh sửa PDF."
 wrapUp = "Bạn đã sẵn sàng! Bạn đã biết về các khu vực chính của ứng dụng và cách sử dụng chúng. Nhấp nút <strong>Trợ giúp</strong> bất cứ lúc nào để xem lại chuyến tham quan này."
@@ -4988,6 +5152,26 @@ showMeAround = "Hướng dẫn nhanh"
 skipForNow = "Bỏ qua tạm thời"
 skipTheTour = "Bỏ qua hướng dẫn"
 
+[onboarding.checklist]
+dismiss = "Bỏ qua"
+title = "Thiết lập Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "Chạy Stirling nguyên bản trên máy của bạn"
+title = "Tải xuống Stirling cho Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "Cộng tác với đội ngũ của bạn"
+title = "Mời thành viên đội ngũ"
+
+[onboarding.checklist.shareAnalytics]
+description = "Giúp cải thiện Stirling"
+title = "Chia sẻ dữ liệu sử dụng ẩn danh"
+
+[onboarding.checklist.takeTour]
+description = "Xem cách Stirling hoạt động qua hướng dẫn nhanh"
+title = "Tham quan nhanh"
+
 [onboarding.desktopInstall]
 body = "Stirling hoạt động tốt nhất như ứng dụng desktop. Bạn có thể dùng offline, truy cập tài liệu nhanh hơn và chỉnh sửa trực tiếp trên máy."
 selectOs = "Chọn hệ điều hành"
@@ -4996,7 +5180,21 @@ titleWithOs = "Tải cho {{osLabel}}"
 
 [onboarding.mfa]
 authenticationCode = "Mã xác thực"
+description = "Bảo mật tài khoản của bạn bằng cách liên kết ứng dụng xác thực. Quét mã QR hoặc nhập khóa thiết lập, sau đó xác nhận mã 6 chữ số để hoàn tất."
+enable = "Bật MFA"
+enableError = "Không thể bật xác thực hai yếu tố. Kiểm tra mã và thử lại."
+enterCode = "Nhập mã 6 chữ số từ ứng dụng của bạn."
+enterCodeError = "Nhập mã xác thực để tiếp tục."
+logout = "Đăng xuất"
+openAuthenticator = "Mở Google Authenticator, Authy hoặc 1Password."
 qrCodeLoading = "Đang tạo mã QR của bạn…"
+regenerateQrCode = "Tạo lại mã QR"
+scanQrCode = "Quét mã QR hoặc nhập khóa thiết lập bên dưới."
+setupError = "Không thể bắt đầu thiết lập hai yếu tố. Vui lòng thử lại."
+setupKey = "Khóa thiết lập (nhập thủ công)"
+stepByStep = "Từng bước"
+success = "MFA đã được bật. Bây giờ bạn có thể tiếp tục."
+title = "Thiết lập xác thực đa yếu tố"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "Khi bật chế độ đăng nhập, bạn có thể quản lý người dùng, cấu hình cài đặt và theo dõi tình trạng server. <strong>{{freeTierLimit}}</strong> người đầu tiên trên server của bạn được dùng Stirling miễn phí."
@@ -5005,6 +5203,11 @@ adminTitle = "Tổng quan Admin"
 userBody = "Mời đồng đội, gán vai trò và quản lý tài liệu gọn gàng trong một không gian làm việc an toàn. Bật chế độ đăng nhập khi bạn sẵn sàng vượt qua chế độ dùng cá nhân."
 userTitle = "Tổng quan gói"
 
+[onboarding.processorIntro]
+body = "Stirling hiện chạy <strong>Chính sách</strong> — các quy tắc tự động phân loại, bảo mật và xử lý mọi tài liệu khi tài liệu đến. Thiết lập và theo dõi các lần chạy trong <strong>Processor</strong>."
+cta = "Xem Processor"
+title = "Khám phá Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "Năm trả trước"
+
+[payg.prepaid.banner]
+exhausted = "Dung lượng trả trước của bạn đã dùng hết; tính phí theo mức sử dụng đã tiếp tục. Nạp thêm để giữ ưu đãi."
+expiring_one = "Năm trả trước của bạn kết thúc sau {{count}} ngày. Dung lượng chưa dùng sẽ hết hạn — nạp thêm để bắt đầu một năm mới."
+expiring_other = "Năm trả trước của bạn kết thúc sau {{count}} ngày. Dung lượng chưa dùng sẽ hết hạn — nạp thêm để bắt đầu một năm mới."
+low = "Bạn chỉ còn {{pct}}% dung lượng trả trước. Nạp thêm bất cứ lúc nào để tiếp tục xử lý không gián đoạn."
+
+[payg.prepaid.card]
+subtitle = "Được dùng trước tính phí theo mức sử dụng và ngoài giới hạn chi tiêu của bạn."
+title = "Dung lượng trả trước"
+
+[payg.prepaid.meter]
+capSuffix = "trên {{total}} tín dụng trả trước"
+expires = "Hết hạn {{date}}"
+
+[payg.prepaid.state]
+exhausted = "Đã dùng hết"
+healthy = "Còn nhiều"
+low = "Sắp hết"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "Dán khóa giấy phép từ email của bạn"
 success = "Đã kích hoạt giấy phép!"
 successMessage = "Giấy phép của bạn đã được kích hoạt thành công. Bạn có thể đóng cửa sổ này."
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "đã thực thi"
-enforcing = "Đang thực thi..."
-failed = "Thực thi thất bại"
 outputsUnavailable = "Đầu ra của chính sách không còn khả dụng để tải xuống."
 partialOutputsUnavailable = "Một số đầu ra của chính sách không còn khả dụng để tải xuống."
-retrying = "Đang bận, thử lại..."
 runNotFound = "Không còn tìm thấy lần thực thi."
-step = "bước {{current}}/{{total}}"
 timedOut = "Thực thi đã hết thời gian chờ trước khi hoàn tất."
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "Đóng"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "Đang áp dụng {{names}}"
 applyingProgress = "Đang áp dụng {{names}} ({{done}} trong {{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "Không thể xử lý {{failures}} trong số {{total}} tệp và
 failureTitle = "Đã xuất mà không thực thi đầy đủ"
 printPolicyAppliedBody = "PDF này đã được cập nhật để đáp ứng một chính sách. Hãy xem lại các thay đổi, rồi in lại."
 printPolicyAppliedTitle = "Đã áp dụng chính sách trước khi in"
-queued = "+{{count}} đang chờ"
 successTitle = "Đã áp dụng {{names}}"
 summaryMore = "{{first}}, {{second}} và còn {{more}} nữa"
 summaryTwo = "{{first}} và {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "Thực thi trước khi chuyển đổi"
-default = "Đang thực thi"
-export = "Thực thi trước khi xuất"
-input = "Thực thi khi nhập"
-print = "Thực thi trước khi in"
-
-[policies.field]
-accessLog = "Nhật ký truy cập"
-archiveAfter = "Lưu trữ sau"
-auditTrail = "Dấu vết kiểm toán"
-belowThreshold = "Dưới ngưỡng"
-destination = "Đích đến"
-frameworks = "Frameworks"
-immutableHold = "Giữ bất biến"
-keepFor = "Giữ trong"
-minConfidence = "Độ tin cậy tối thiểu"
-notify = "Thông báo khi định tuyến"
-onViolation = "Khi không tuân thủ"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "Thêm"
-addPlaceholder = "Thêm nhãn…"
-customNote = "Đã tùy chỉnh cho nhóm của bạn."
-defaultNote = "Đang dùng mặc định tích hợp, được chia sẻ với nhóm của bạn."
-duplicate = "\"{{name}}\" đã tồn tại."
-edit = "Chỉnh sửa nhãn"
-empty = "Chưa có nhãn nào."
-export = "Xuất JSON"
-iconAria = "Chọn biểu tượng cho {{name}}"
-import = "Nhập JSON"
-importError = "Không thể nhập tệp đó."
-managedNote = "Nhãn nhóm do trưởng nhóm của bạn quản lý."
-modalSubtitle = "Được chia sẻ với toàn bộ nhóm của bạn. Bộ phân loại chọn các nhãn phù hợp với từng tài liệu."
-modalTitle = "Nhãn phân loại"
-pickIcon = "Dùng biểu tượng {{label}}"
-removeAria = "Xóa {{name}}"
-resetToDefault = "Đặt lại về mặc định"
-saveForTeam = "Lưu cho nhóm"
-saving = "Đang lưu…"
-sectionLabel = "Nhãn phân loại"
-startFromScratch = "Bắt đầu từ đầu"
-teamCount = "nhãn nhóm"
-tooLong = "Nhãn có tối đa {{max}} ký tự."
-ungrouped = "Chưa nhóm"
-view = "Xem nhãn"
+categoryCount = "danh mục"
+hideCategory = "Ẩn danh mục"
+labelCount = "nhãn"
+sharedNote = "Các nhãn này được tích hợp sẵn và chia sẻ trên toàn bộ đội ngũ của bạn."
+showCategory = "Hiển thị danh mục"
 
 [policies.pii]
 account = "Số tài khoản (được gắn nhãn)"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "Số routing của Mỹ (ABA)"
 ssn = "Số An sinh Xã hội"
 
-[policies.settings]
-noneExport = "Hiện không có chính sách nào chạy khi xuất."
-noneUpload = "Hiện không có chính sách nào chạy khi tải lên."
-onExport = "Khi xuất"
-onUpload = "Khi tải lên"
-reorderHandle = "Kéo để sắp xếp lại"
-runOrderDesc = "Khi nhiều chính sách chạy trên cùng một trình kích hoạt, chúng chạy theo thứ tự này — mỗi chính sách chạy trên đầu ra của chính sách trước đó. Kéo để sắp xếp lại."
-title = "Cài đặt chính sách"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "Tùy chọn chính sách"
-policySettings = "Cài đặt chính sách"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "Thử lại chính sách thất bại ({{count}})"
-rowProgress = "Đã xử lý {{completed}} trong {{total}} tệp"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "Chính sách là gì?"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "Tự động tìm và làm đen các thông tin nhạy cảm — như số An sinh Xã hội và số thẻ — để không thể đọc được trong tài liệu."
-sanitize = "Xóa JavaScript ẩn khỏi tệp, để không có gì chạy tự động khi ai đó mở tệp."
-watermark = "Đóng một dấu hiển thị (ví dụ: \"Confidential\") trên mọi trang."
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "Đóng"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "Đang thực thi {{name}}..."
 badgeRan = "Chính sách {{name}} đã chạy trên tệp này"
+badgeRunning = "{{name}} đang chạy..."
 blockingAction = "{{action}} bị chặn trong khi thực thi chính sách, vui lòng chờ..."
 dismiss = "Đóng lớp phủ"
 enforcingTitle = "Đang thực thi chính sách..."
@@ -6151,6 +6211,7 @@ viewAnyway = "Xem tệp (chính sách vẫn đang thực thi)"
 [policyOption]
 autoRedactPhi = "Tự động che PHI"
 blockExport = "Chặn xuất"
+ccpa = "CCPA"
 contracts = "Hợp đồng"
 documents = "Tài liệu"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Gói Editor"
 subscribed = "Gói Processor"
 unlinked = "Chưa liên kết"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "Khởi tạo từ tài liệu"
-sectionsAriaLabel = "Các phần của trình tạo agent"
-selectorAriaLabel = "Agent"
-subtitle = "Thiết kế, kiểm thử và triển khai các agent AI để phân loại, trích xuất từ và định tuyến tài liệu của bạn. Xác định kịch bản, giới hạn quyền truy cập công cụ, chạy bộ chuẩn và phát hành phiên bản."
-title = "Trình tạo Agent"
-
-[portal.agentBuilder.bootstrap]
-cancel = "Hủy"
-dropzoneText = "Chọn tài liệu mẫu (PDF hoặc hình ảnh)"
-lead = "Thả một tài liệu mẫu và chúng tôi sẽ đề xuất kịch bản cùng schema trích xuất để bạn tinh chỉnh. Không có gì được phát hành cho đến khi bạn xem xét."
-submit = "Khởi tạo agent"
-subtitle = "Tạo agent mới từ một tệp đại diện"
-title = "Khởi tạo từ tài liệu"
-
-[portal.agentBuilder.empty]
-description = "Khởi tạo agent từ tài liệu mẫu để tạo kịch bản và schema trích xuất, sau đó tinh chỉnh và phát hành."
-title = "Chưa có agent nào"
-
-[portal.agentBuilder.evals]
-casesPassing = "Trường hợp đạt"
-columnCase = "Trường hợp đánh giá"
-columnLatency = "Độ trễ"
-columnResult = "Kết quả"
-fail = "không đạt"
-goldenSetPassRate = "Tỷ lệ đạt của bộ chuẩn"
-latencyMs = "{{ms}} ms"
-notRun = "chưa chạy"
-pass = "đạt"
-passRate = "Tỷ lệ đạt"
-runEvals = "Chạy đánh giá"
-
-[portal.agentBuilder.evals.empty]
-description = "Đánh giá biến các kịch bản của bạn thành một bộ chuẩn có thể lặp lại. Nâng cấp để ghi lại tỷ lệ đạt theo thời gian và dùng nó làm điều kiện phát hành."
-title = "Chưa có bộ chuẩn"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "trên các bộ chuẩn"
-activeAgents = "Agent đang hoạt động"
-avgPassRate = "Tỷ lệ đạt đánh giá trung bình"
-fleetWide = "toàn hệ thống"
-latestPublished = "Đã phát hành mới nhất"
-scenarios = "Kịch bản"
-testCases = "trường hợp kiểm thử"
-totalDescription_one = "Tổng {{count}}"
-totalDescription_other = "Tổng {{count}}"
-
-[portal.agentBuilder.scenarios]
-add = "Thêm"
-addScenario = "Thêm kịch bản"
-enable = "Bật"
-expectationLabel = "Hành vi mong đợi"
-expectationPlaceholder = "Agent nên làm gì"
-inEval = "trong đánh giá"
-mute = "Tắt tiếng"
-muted = "đã tắt tiếng"
-nameLabel = "Tên"
-namePlaceholder = "ví dụ: Nâng cấp tuân thủ"
-
-[portal.agentBuilder.tabs]
-evals = "Đánh giá"
-scenarios = "Kịch bản"
-tools = "Công cụ"
-versions = "Phiên bản"
-
-[portal.agentBuilder.tools]
-broadAccess = "Quyền truy cập rộng"
-deniedHint = "Các công cụ đã chọn bị chặn. Mọi công cụ khác vẫn có thể được gọi."
-deniedTools = "Công cụ bị từ chối"
-governanceGate = "Quản trị công cụ có sẵn trên gói Enterprise."
-restricted = "Bị hạn chế"
-restrictedAccess = "Quyền truy cập công cụ bị hạn chế"
-restrictedDescription = "Cho phép mọi công cụ ngoại trừ các công cụ bạn từ chối bên dưới."
-
-[portal.agentBuilder.versions]
-current = "hiện tại"
-historyGate = "Lịch sử phiên bản đầy đủ và rollback có sẵn trên gói Enterprise."
-publish = "Phát hành"
-rollBack = "Rollback"
-
 [portal.assistant]
 close = "Đóng trợ lý"
 error = "Không thể kết nối với trợ lý."
@@ -6365,9 +6346,21 @@ typing = "Đang nhập"
 loading = "Đang tải"
 redirectingToEditor = "Đang chuyển hướng đến trình chỉnh sửa..."
 
+[portal.billing.activation]
+maybeLater = "Để sau"
+title = "Bật Processor"
+
+[portal.billing.activation.payg]
+sub = "Đặt giới hạn hàng tháng. Trả tiền cho những gì bạn chạy."
+title = "Trả theo mức sử dụng"
+
+[portal.billing.activation.prepay]
+badge = "Miễn phí 2 tháng"
+sub = "Một hóa đơn, thẻ hoặc chuyển khoản ngân hàng."
+title = "Trả trước một năm"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function không trả về client_secret."
-subtitle = "Thêm thẻ để tiếp tục sau quyền dùng miễn phí của gói Editor. Stripe xử lý phần còn lại."
 title = "Bật gói Processor"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "Thanh toán của bạn đã thành công, nhưng việc kích hoạt đ
 close = "Đóng"
 title = "Sắp xong"
 
+[portal.billing.checkout.cap]
+amountAria = "Giới hạn chi tiêu hàng tháng"
+back = "Quay lại"
+continue = "Tiếp tục đến thanh toán"
+error = "Không thể đặt giới hạn chi tiêu của bạn"
+finePrint = "Hóa đơn được lập hàng tháng. Hủy bất cứ lúc nào."
+noLimit = "Không giới hạn"
+note = "Bạn không bao giờ bị tính phí vượt quá giới hạn. Xử lý chỉ tạm dừng."
+perMonth = "/ tháng"
+title = "Đặt giới hạn chi tiêu của bạn"
+
+[portal.billing.checkout.card]
+fields = "Số thẻ · MM / YY · CVC · ZIP"
+label = "Chi tiết thẻ"
+note = "Chi tiết thẻ do Stripe thu thập. Stirling không bao giờ lưu PAN hoặc CVC."
+
 [portal.billing.checkout.error]
 title = "Không thể bắt đầu thanh toán"
 
@@ -6383,10 +6392,9 @@ body = "Thanh toán của bạn đã hoàn tất. Chúng tôi đang bật xử l
 hint = "Vui lòng giữ cửa sổ này mở."
 title = "Đang kích hoạt gói Processor của bạn..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "trong portal env để bật thanh toán trong ứng dụng."
-bodyBefore = "Đặt"
-title = "Chưa cấu hình Stripe"
+[portal.billing.checkout.pay]
+limit = "Giới hạn chi tiêu hàng tháng {{amount}}/tháng. Xử lý tạm dừng khi đạt giới hạn."
+limitNoCap = "Không có giới hạn chi tiêu. Xử lý sẽ không tạm dừng. Hóa đơn được lập hàng tháng."
 
 [portal.billing.enterpriseUpsell]
 cta = "Tạo báo giá Enterprise của bạn"
@@ -6409,10 +6417,12 @@ currentPlan = "Gói hiện tại"
 freeForever = "Miễn phí mãi mãi"
 noTeamResolved = "Chưa xác định được nhóm nào trên ví của bạn — hãy làm mới và thử lại."
 ownerOnly = "Chỉ chủ sở hữu nhóm mới có thể bật gói Processor."
+payInvoice = "Thanh toán hóa đơn để hoàn tất"
 planName = "Editor"
 ssoIncluded = "Bao gồm SSO"
 switchOnProcessor = "Bật Processor →"
 unlimitedUsers = "Người dùng không giới hạn"
+viewQuote = "Xem báo giá"
 
 [portal.billing.invoices]
 columnAmount = "Số tiền"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "Yêu cầu API trực tiếp"
 segmentApiLabel = "API"
 segmentAutomationDesc = "Tự động hóa & pipeline"
 segmentAutomationLabel = "Tự động hóa"
+sizeMultiplier = "{{formatted}} PDF đã dùng hệ số kích thước"
+summary = "{{unique}} duy nhất · {{units}} đơn vị đo · trung bình {{avg}} mỗi PDF"
+summaryNoRate = "{{unique}} duy nhất · {{units}} đơn vị đo"
 unit = "PDF tính theo mức sử dụng"
+unitsPending_one = "{{units}} đơn vị đo đang chờ đồng bộ từ các phiên bản được liên kết"
+unitsPending_other = "{{units}} đơn vị đo đang chờ đồng bộ từ các phiên bản được liên kết"
+
+[portal.billing.prepaid]
+capSuffix = "trên {{total}} tín dụng trả trước"
+expires = "Hết hạn {{date}}"
+eyebrow = "Dung lượng trả trước"
+note = "Được dùng trước tính phí theo mức sử dụng và ngoài giới hạn chi tiêu của bạn."
+topUp = "Nạp thêm"
+
+[portal.billing.prepaid.buy]
+back = "Quay lại"
+calcTitle = "Tính khoản thanh toán hằng năm của bạn"
+cancel = "Hủy"
+cancelPurchase = "Hủy giao dịch mua"
+close = "Đóng"
+continueToPayment = "Tiếp tục đến thanh toán"
+finalise = "Hoàn tất"
+invoiceErrorTitle = "Không thể tạo hóa đơn"
+loadingTitle = "Đang tải báo giá của bạn"
+payTitle = "Thanh toán cho năm của bạn"
+step = "Bước {{current}} trên {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "Thay đổi"
+deployRow = "Triển khai"
+done = "Xong"
+enterpriseHint = "Đây là quy mô doanh nghiệp. Ở mức này, giá doanh nghiệp tốt hơn mọi ưu đãi tự phục vụ. Khóa giá, điều khoản và báo giá trong vài phút."
+governanceRow = "Quản trị"
+governanceValue = "{{label}} · {{count}} chính sách"
+handlesLabel = "Processor của bạn"
+handlesValue = "xử lý {{volume}} tín dụng / tháng"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} chính sách"
+poolCaption = "Một nhóm {{credits}} tín dụng cho cả năm. Tháng dùng nhiều mượn từ tháng dùng ít."
+priceLabel = "Năm của bạn · 12 tháng với giá của 10 tháng"
+rateUnknown = "Chúng tôi sẽ hiển thị giá chính xác khi thanh toán."
+savings = "Bạn tiết kiệm {{amount}} · miễn phí 2 tháng."
+sizingRow = "Quy mô"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "Tổng số người dùng"
+
+[portal.billing.prepaid.consent]
+label = "Tôi hiểu rằng khi dung lượng trả trước của tôi được dùng hết hoặc hết hạn sau 12 tháng, quá trình xử lý sẽ tự động tiếp tục theo mức giá trả theo mức sử dụng tiêu chuẩn (tối đa đến giới hạn chi tiêu của tôi) trừ khi tôi hủy, và tôi có thể hủy bất cứ lúc nào từ cổng thanh toán."
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "Do Stirling quản lý. Hoạt động trong vài phút."
+cloudValue = "Stirling Cloud · Được quản lý"
+selfhost = "Tự lưu trữ"
+selfhostDesc = "Chạy trên hạ tầng riêng. Cùng mức giá."
+selfhostValue = "Tự lưu trữ · Hạ tầng riêng"
+
+[portal.billing.prepaid.offer]
+cta = "Xem ưu đãi"
+subtitle = "Trả trước một năm xử lý PDF và nhận miễn phí hai tháng, được dùng trước tính phí theo mức sử dụng, ngoài giới hạn chi tiêu của bạn."
+title = "Nhận 12 tháng với giá của 10 tháng"
+
+[portal.billing.prepaid.pay]
+accountName = "Tên chủ tài khoản"
+accountNamePlaceholder = "ví dụ Jane Smith"
+companyName = "Tên công ty (tùy chọn)"
+companyNamePlaceholder = "ví dụ Acme Inc."
+downloadInvoice = "Tải xuống hóa đơn"
+payOnline = "Thanh toán trực tuyến"
+poNumber = "Số PO (tùy chọn)"
+poNumberPlaceholder = "ví dụ PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "Nâng cao"
+advancedDesc = "Pipelines thúc đẩy phần lớn quá trình xử lý của bạn."
+none = "Không có"
+noneDesc = "Chưa chạy pipelines. Bật chúng bất cứ lúc nào."
+standard = "Tiêu chuẩn"
+standardDesc = "Một vài pipelines xử lý lại các PDF đến."
+
+[portal.billing.prepaid.posture]
+essentials = "Cơ bản"
+essentialsDesc = "Phân loại, mặc định, cộng với Chia sẻ"
+governed = "Được quản trị"
+governedDesc = "Thêm Bảo mật và Định tuyến"
+regulated = "Được quản lý theo quy định"
+regulatedDesc = "Mọi danh mục, bao gồm Tuân thủ, Lưu giữ, Tiếp nhận"
+
+[portal.billing.prepaid.review]
+download = "Tải xuống báo giá (PDF)"
+downloading = "Đang chuẩn bị…"
+share = "chia sẻ để phê duyệt"
+
+[portal.billing.prepaid.size]
+compact = "Gọn nhẹ"
+compactDesc = "Tệp dưới 25 MB, không tính phí dữ liệu"
+heavy = "Nặng"
+heavyDesc = "Đã quét hoặc nhiều hình ảnh, thường xuyên 50 MB+"
+standard = "Tiêu chuẩn"
+standardDesc = "Chủ yếu nhỏ, một số bản quét vượt 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "Đã dùng hết"
+healthy = "Còn nhiều"
+low = "Sắp hết"
 
 [portal.billing.spendLimit]
 adjustLimit = "Điều chỉnh giới hạn"
@@ -6494,6 +6608,8 @@ label = "Dự kiến sẽ vượt."
 
 [portal.billing.spendThisMonth]
 eyebrow = "Chi tiêu tháng này"
+freeRemaining_one = "Còn {{formatted}} PDF miễn phí"
+freeRemaining_other = "Còn {{formatted}} PDF miễn phí"
 processed_one = "Đã xử lý {{formattedCount}} PDF."
 processed_other = "Đã xử lý {{formattedCount}} PDF."
 processedWithRate_one = "Đã xử lý {{formattedCount}} PDF, với {{rate}} mỗi PDF."
@@ -6534,6 +6650,350 @@ signature = "chữ ký"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "Kết nối mới"
+createTitleFor = "Kết nối {{name}}"
+delete = "Xóa"
+edit = "Chỉnh sửa"
+editTitle = "Chỉnh sửa kết nối"
+unsupportedType = "Không thể chỉnh sửa loại kết nối này tại đây."
+
+[portal.connections.categories.advanced]
+description = "Cho một dịch vụ mà chúng tôi chưa hỗ trợ."
+label = "Nâng cao"
+
+[portal.connections.categories.audit]
+description = "Ghi lại những gì đã xảy ra với tài liệu, nơi kiểm toán viên của bạn đang xem."
+label = "Ghi nhật ký kiểm toán & tuân thủ"
+
+[portal.connections.categories.notify]
+description = "Thông báo cho hệ thống khác rằng có điều gì đó đã xảy ra."
+label = "Thông báo & quy trình làm việc"
+
+[portal.connections.categories.security]
+description = "Quét hoặc gắn nhãn tài liệu trước khi tài liệu tiếp tục di chuyển."
+label = "Bảo mật & phân loại"
+
+[portal.connections.categories.signing]
+description = "Gửi tài liệu đi để ký hoặc công chứng."
+label = "Chữ ký điện tử & công chứng"
+
+[portal.connections.categories.storage]
+description = "Nơi tài liệu đã xử lý kết thúc - bucket, drive, ticket hoặc page."
+label = "Tệp & đính kèm"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling lưu trữ mục này ở dạng mã hóa và không bao giờ hiển thị lại."
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "Các bước dùng kết nối này chỉ có thể gọi các đường dẫn dưới URL này, không bao giờ gọi host khác."
+label = "Server URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "Mật khẩu"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "Tên người dùng"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "Dán URL mà dịch vụ đã cung cấp cho bạn. Chỉ các đường dẫn dưới URL đó mới có thể được gọi."
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "Tên kết nối"
+namePlaceholder = "ví dụ Production"
+
+[portal.connections.picker]
+cancel = "Hủy"
+createNew = "Kết nối mới..."
+placeholder = "Chọn một kết nối"
+save = "Lưu kết nối"
+
+[portal.connections.picker2]
+back = "Đổi tích hợp"
+heading = "Bạn muốn kết nối gì?"
+noResultsBody = "Chúng tôi chưa hỗ trợ mục này - hãy cho chúng tôi biết và chúng tôi sẽ xem xét thêm vào."
+noResultsTitle = "Không có kết quả khớp với \"{{query}}\""
+searchPlaceholder = "Tìm kiếm tích hợp - thử \"sign\", \"ocr\" hoặc tên sản phẩm"
+
+[portal.connections.types.api]
+description = "Gọi bất kỳ HTTP API nào từ một chính sách. Bạn chọn URL, xác thực và payload."
+label = "API tùy chỉnh"
+
+[portal.connections.types.api.fields.authType]
+label = "Xác thực"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "Tên người dùng và mật khẩu"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "Token trong header tùy chỉnh"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "Không có"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "Đăng nhập để lấy token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "Các bước dùng kết nối này chỉ có thể gọi các đường dẫn dưới URL này, không bao giờ gọi host khác."
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Tên header"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "Đường dẫn đăng nhập"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "Mật khẩu"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "Nếu API phản hồi bằng liên kết tải xuống, chỉ các host này có thể được truy xuất. Phân tách bằng dấu phẩy. Để trống để chỉ cho phép host riêng của base URL."
+label = "Host kết quả được phép"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "Gửi token dưới dạng header này"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "Header phản hồi mà lệnh gọi đăng nhập trả về token, ví dụ X-Auth-Token."
+label = "Header phản hồi token"
+
+[portal.connections.types.api.fields.username]
+label = "Tên người dùng"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "Quét tài liệu để tìm malware trên máy chủ bạn vận hành - không có gì rời khỏi mạng của bạn."
+label = "ClamAV (tự lưu trữ)"
+
+[portal.connections.types.cloudmersive]
+description = "Quét virus và nội dung cho tài liệu trong một chính sách."
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "Chặn tài liệu chứa macro, tệp thực thi, script hoặc đối tượng nhúng - không chỉ malware đã biết."
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "Đính kèm tài liệu đã xử lý vào một trang Confluence."
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "Gửi tài liệu tới ConsignO Cloud (Notarius) để ký điện tử và công chứng."
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "Môi trường ConsignO Cloud của bạn, bao gồm /api/v1."
+label = "Server URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "Mật khẩu"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "Chỉ cần nếu tổ chức của bạn dùng tenants."
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "Tên người dùng"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "Đăng tin nhắn lên Discord khi một chính sách xử lý tài liệu."
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "Lập chỉ mục một sự kiện kiểm toán trong Elasticsearch mỗi khi một chính sách xử lý tài liệu."
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "Thăm dò máy chủ FTP hoặc FTPS để tìm tài liệu mới."
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "Chế độ kết nối"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "Active"
+passive = "Passive (khuyến nghị)"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "FTP thường gửi thông tin xác thực và tệp không được mã hóa; chọn FTPS nếu máy chủ hỗ trợ."
+label = "Mã hóa"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS (explicit / AUTH TLS)"
+implicit = "FTPS (implicit)"
+none = "Không có (FTP thường)"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "Đăng tin nhắn lên một Google Chat space khi một chính sách chạy."
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "Đính kèm tài liệu đã xử lý vào một Jira issue."
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "Gửi email tài liệu hoặc thông báo khi một chính sách chạy."
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "Lưu tài liệu đã xử lý vào Nextcloud."
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "Phát hiện dữ liệu cá nhân trong văn bản tài liệu bằng máy chủ Presidio bạn vận hành."
+label = "Presidio (tự lưu trữ)"
+
+[portal.connections.types.purview]
+description = "Đọc và áp dụng nhãn độ nhạy Microsoft Purview trên PDF."
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "Tùy chọn. Chỉ cần để chọn nhãn theo tên; việc gắn nhãn vẫn hoạt động khi không có."
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "Được đóng dấu lên mọi nhãn dưới dạng SiteId của nhãn, để các công cụ nhận biết Purview biết tổ chức nào đã áp dụng nhãn đó."
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "Một S3 bucket mà nguồn có thể đọc và đầu ra pipeline có thể ghi vào."
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "Để trống cho AWS. Đặt mục này cho MinIO hoặc kho lưu trữ tương thích S3 khác."
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "Gửi email tài liệu hoặc thông báo khi một chính sách chạy."
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "Thăm dò máy chủ SFTP (SSH) để tìm tài liệu mới."
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "Tùy chọn. Dấu vân tay SHA-256 host key của máy chủ (từ `ssh-keyscan host | ssh-keygen -lf -`). Khi đặt, chỉ máy chủ xuất trình key này mới được chấp nhận; khi để trống, key được thấy ở lần kết nối đầu tiên sẽ được ghim và các thay đổi sau đó bị từ chối."
+label = "Dấu vân tay host key"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "Để trống nếu bạn xác thực bằng private key thay thế."
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "Tùy chọn. Dán OpenSSH private key để xác thực bằng key thay vì mật khẩu."
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "Đăng tin nhắn lên Slack khi một chính sách xử lý tài liệu."
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "Theo dõi một SMB / CIFS network share (Windows hoặc Samba)."
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / Network share"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "Tùy chọn. Windows domain hoặc workgroup, nếu máy chủ của bạn dùng."
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "Gửi một sự kiện kiểm toán tới Splunk mỗi khi một chính sách xử lý tài liệu."
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "Gửi một sự kiện kiểm toán tới Sumo Logic HTTP collector."
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "Đăng tin nhắn lên một kênh Teams khi một chính sách chạy."
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "Đăng từng tài liệu, hoặc chỉ chi tiết, tới URL bạn chọn."
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "Kích hoạt một Zap hoặc Make scenario từ một chính sách."
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "Duyệt tài liệu"
+viewSource = "Xem mã nguồn trên GitHub"
+
 [portal.docs.authentication]
 codeCaption = "mọi yêu cầu"
 eyebrow = "BẮT ĐẦU"
@@ -6619,11 +7079,19 @@ title = "SDK chính thức"
 beta = "Beta"
 deprecated = "Không còn dùng"
 
+[portal.docs.search]
+empty = "Không có tài liệu phù hợp"
+placeholder = "Tìm kiếm tài liệu"
+results = "{{count}} kết quả"
+
 [portal.docs.skills]
 eyebrow = "KỸ NĂNG"
 lead = "Các năng lực đi kèm, có tên, mà agent của bạn gọi như một công cụ duy nhất. Mỗi kỹ năng là một chuỗi thao tác xác định với đánh giá đính kèm."
 title = "Kỹ năng agent"
 
+[portal.docs.toc]
+title = "Trên trang này"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "THAM CHIẾU API"
@@ -6697,6 +7165,8 @@ type = "Loại"
 user = "Người dùng"
 
 [portal.documents.queue.empty]
+connectSource = "Kết nối nguồn"
+createPipeline = "Tạo pipeline"
 description = "Khi các nguồn đưa tài liệu vào pipeline của bạn, chúng sẽ xuất hiện ở đây để xem xét."
 title = "Không có tài liệu trong hàng đợi"
 
@@ -6806,13 +7276,71 @@ description = "Chế độ xem này gặp lỗi không mong muốn. Hãy thử l
 retry = "Thử lại"
 title = "Đã xảy ra lỗi trên trang này"
 
+[portal.home.download]
+back = "Quay lại"
+body = "Tải xuống ứng dụng desktop hoặc tự lưu trữ máy chủ."
+done = "Xong"
+guide = "Mở hướng dẫn {{name}}"
+openInBrowser = "Mở trong trình duyệt thay thế"
+sectionDesktop = "Ứng dụng desktop"
+sectionSelfHosted = "Tự lưu trữ"
+title = "Cài đặt Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "Chạy image chính thức trên máy chủ của bạn."
+note = "Mở tại :8080. Đăng nhập mặc định: admin / stirling."
+tagline = "Chạy máy chủ trong container"
+title = "Docker"
+variantFat = "Fat"
+variantLite = "Ultra-Lite"
+variantStandard = "Standard"
+
+[portal.home.download.kubernetes]
+detailBody = "Cài đặt Helm chart chính thức."
+note = "Thêm PVC cho /configs để duy trì cài đặt."
+tagline = "Triển khai lên cluster bằng Helm"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "Bản build gốc cho bản phân phối của bạn."
+guideBtn = "Xem các tùy chọn cài đặt Linux"
+note = "Các bản build AppImage, .deb và .rpm có sẵn cho các distro phổ biến."
+tagline = "Ứng dụng desktop gốc cho distro của bạn"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "Hoặc qua Homebrew"
+detailBody = "Chạy trình cài đặt, hoặc dùng Homebrew."
+downloadBtn = "Tải xuống cho macOS"
+tagline = "Ứng dụng gốc cho Apple silicon và Intel"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "Chạy .jar trên máy chủ bare metal."
+downloadBtn = "Tải xuống .jar"
+note = "Yêu cầu Java 21+. Mở tại :8080; đăng nhập mặc định admin / stirling."
+runLabel = "Sau đó chạy lệnh"
+tagline = "Chạy .jar trên máy chủ bare metal"
+title = "Thiết lập máy chủ thủ công"
+
+[portal.home.download.windows]
+altLabel = "Hoặc qua winget"
+detailBody = "Chạy trình cài đặt, hoặc dùng trình quản lý gói."
+downloadBtn = "Tải xuống trình cài đặt"
+tagline = "Ứng dụng gốc cho Microsoft Windows"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} đang hoạt động"
-invite = "Mời đồng đội"
+activeOfDeployed = "{{active}} trong {{total}} hoạt động tháng này"
 name = "Stirling PDF Editor"
 open = "Mở trong trình duyệt"
 updated = "đã cập nhật {{time}}"
 
+[portal.home.editor.deploy]
+finish = "Hoàn tất triển khai"
+options = "Xem tùy chọn triển khai"
+start = "Triển khai Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "Self-hosted · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "Chào buổi chiều"
 evening = "Chào buổi tối"
 morning = "Chào buổi sáng"
 
-[portal.home.onboarding]
-dismiss = "Bỏ qua thiết lập"
-notStarted = "Chưa bắt đầu"
-progress = "Đã hoàn tất {{done}}/{{total}}"
-title = "Hoàn tất thiết lập"
-
-[portal.home.onboarding.enterprise]
-body = "SSO + SCIM + RBAC toàn tổ chức, giá theo khối lượng cam kết và triển khai air-gapped."
-cta = "Bắt đầu dùng thử"
-ctaQuote = "Nhận báo giá"
-lead = "Dành cho 250+ nhân viên."
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "Triển khai ứng dụng desktop, miễn phí mãi mãi."
-title = "Tải PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} đang hoạt động · {{recommended}} được đề xuất"
-chip = "{{active}} đang hoạt động"
-title = "Bật chính sách"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} đã kết nối · mọi PDF được quản trị tại nơi nó đến"
-chip = "{{connected}} đã kết nối"
-title = "Kết nối nguồn của bạn"
-
-[portal.home.quickActions]
-subtitle = "Các tác vụ hàng đầu hôm nay"
-title = "Hành động nhanh"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "Trình soạn thảo 3 bước trên thư viện thao tác có kiểu"
-title = "Tạo pipeline"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3, agent, webhook, thư mục được theo dõi"
-title = "Kết nối nguồn"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "Khóa có phạm vi với giới hạn tốc độ và danh sách cho phép IP"
-title = "Cấp khóa API"
-
 [portal.infrastructure]
 manageEditorDeployment = "Quản lý triển khai Editor"
 sectionsAriaLabel = "Các phần hạ tầng"
@@ -6878,13 +7363,9 @@ heading = "Khóa API"
 subheading = "Thông tin xác thực có phạm vi với giới hạn tốc độ theo từng khóa, quyền và danh sách cho phép IP."
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "IP được phép"
-anyIp = "Bất kỳ IP nào (không có danh sách cho phép)"
 created = "Đã tạo"
 lastUsed = "Lần dùng gần nhất"
-permissions = "Quyền"
-rateLimit = "Giới hạn tốc độ"
-rateLimitValue = "{{value}} req/phút"
+revoke = "Thu hồi khóa"
 usageMonth = "Sử dụng tháng này"
 usageToday = "Sử dụng hôm nay"
 
@@ -6892,6 +7373,20 @@ usageToday = "Sử dụng hôm nay"
 description = "Tạo khóa có phạm vi để bắt đầu gọi Stirling API."
 title = "Chưa có khóa API"
 
+[portal.infrastructure.apiKeys.error]
+load = "Không thể tải API key của bạn. Vui lòng thử lại."
+
+[portal.infrastructure.apiKeys.revoke]
+body = "Thu hồi \"{{name}}\"? Mọi tích hợp vẫn đang dùng khóa này sẽ ngay lập tức bắt đầu nhận lỗi 401. Không thể hoàn tác thao tác này."
+cancel = "Hủy"
+confirm = "Thu hồi khóa"
+title = "Thu hồi API key"
+
+[portal.infrastructure.attestationLabel]
+attested = "Đã chứng thực"
+inScope = "Trong phạm vi"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "Lọc sự kiện kiểm tra theo danh mục"
 heading = "Nhật ký kiểm tra"
@@ -6935,6 +7430,7 @@ all = "Tất cả"
 auth = "Xác thực"
 config = "Cấu hình"
 elevation = "Nâng quyền"
+policy = "Chính sách"
 processing = "Xử lý"
 security = "Bảo mật"
 
@@ -6944,19 +7440,35 @@ title = "Bạn không có quyền truy cập"
 
 [portal.infrastructure.audit.metrics]
 config = "Cấu hình"
-elevation = "Nâng quyền"
+policy = "Chính sách"
 processing = "Xử lý"
 totalEvents = "Tổng sự kiện · 24 giờ"
 
+[portal.infrastructure.auditCatLabel]
+auth = "Xác thực"
+config = "Cấu hình"
+elevation = "Nâng quyền"
+policy = "Chính sách"
+processing = "Xử lý"
+security = "Bảo mật"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "Lỗi"
+info = "Thông tin"
+success = "Thành công"
+warning = "Cảnh báo"
+
+[portal.infrastructure.certLabel]
+certified = "Đã chứng nhận"
+inProgress = "Đang tiến hành"
+notStarted = "Chưa bắt đầu"
+
 [portal.infrastructure.createKey]
 cancel = "Hủy"
 createKey = "Tạo khóa"
 done = "Xong"
-ipAllowlistHelper = "Các dải CIDR phân tách bằng dấu phẩy. Để trống để cho phép bất kỳ IP nào."
-ipAllowlistLabel = "Danh sách cho phép IP"
 keyNameLabel = "Tên khóa"
 keyNamePlaceholder = "ví dụ: Production · ingest"
-permissionsLabel = "Quyền"
 secretKeyCaption = "Khóa bí mật"
 secretWarning = "Lưu khóa này trong trình quản lý bí mật. Stirling chỉ lưu hash — không có cách nào khôi phục lại sau này."
 subtitle = "Giới hạn phạm vi khóa ở mức tối thiểu cần thiết. Bạn có thể xoay vòng hoặc thu hồi bất cứ lúc nào."
@@ -6964,6 +7476,12 @@ subtitleCreated = "Sao chép bí mật này ngay — nó sẽ không được hi
 title = "Tạo khóa API"
 titleCreated = "Đã tạo khóa"
 
+[portal.infrastructure.deployLabel]
+live = "Đang chạy"
+queued = "Đang xếp hàng"
+rolledBack = "Đã rollback"
+rolling = "Đang triển khai"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/phút"
@@ -6999,6 +7517,15 @@ subheading = "Tình trạng trực tiếp cho từng khu vực Stirling đã tri
 description = "Các khu vực đã triển khai sẽ xuất hiện tại đây sau khi workspace của bạn được cấp phát."
 title = "Chưa triển khai khu vực nào"
 
+[portal.infrastructure.keyLabel]
+active = "Đang hoạt động"
+revoked = "Đã thu hồi"
+
+[portal.infrastructure.modelLabel]
+active = "Đang hoạt động"
+degraded = "Suy giảm"
+disabled = "Đã tắt"
+
 [portal.infrastructure.models]
 heading = "Mô hình"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "Trạng thái"
 type = "Loại"
 version = "Phiên bản"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/lần gọi"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "Mô hình đang hoạt động"
 avgLatency = "Độ trễ trung bình"
@@ -7049,6 +7580,17 @@ modelForAria = "Mô hình cho {{operation}}"
 operation = "Thao tác"
 routedTo = "Định tuyến đến"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "Phân loại"
+extraction = "Trích xuất"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "Suy giảm"
+down = "Ngừng hoạt động"
+healthy = "Khỏe mạnh"
+
 [portal.infrastructure.security.access.byok]
 description = "Cung cấp khóa từ KMS của riêng bạn. Stirling mã hóa bằng khóa đó nhưng vẫn có thể đọc."
 label = "Mang khóa của riêng bạn (BYOK)"
@@ -7174,6 +7716,47 @@ models = "Mô hình"
 security = "Bảo mật"
 storage = "Lưu trữ"
 
+[portal.integrations]
+addAnother = "Thêm mục khác"
+availableHeading = "Có sẵn"
+comingSoonHeading = "Sắp ra mắt"
+connect = "Kết nối"
+connectedHeading = "Đã kết nối"
+connectionCount_one = "{{count}} kết nối"
+connectionCount_other = "{{count}} kết nối"
+customApi = "API tùy chỉnh"
+searchPlaceholder = "Tìm kiếm tích hợp"
+subtitle = "Mọi thứ Stirling có thể giao tiếp. Thông tin xác thực được tạo một lần tại đây, rồi được tham chiếu bởi nguồn, chính sách và pipeline."
+title = "Tích hợp"
+typedName = "Tên {{tool}}"
+
+[portal.integrations.filters]
+all = "Tất cả"
+audit = "Kiểm toán"
+connected = "Đã kết nối"
+notify = "Thông báo"
+security = "Bảo mật"
+signing = "Ký"
+storage = "Lưu trữ"
+
+[portal.integrations.status]
+connected = "Đã kết nối"
+
+[portal.integrations.table]
+integration = "Tích hợp"
+worksWith = "Hoạt động với"
+
+[portal.integrations.worksWith]
+pipelines = "Pipeline"
+policies = "Chính sách"
+sources = "Nguồn"
+
+[portal.legal]
+draft = "{{label}} · bản nháp"
+loadError = "Không thể tải tài liệu này. Vui lòng thử lại."
+loading = "Đang tải…"
+title = "Tài liệu pháp lý"
+
 [portal.nav]
 agent-builder = "Trình tạo Agent"
 components = "Thành phần"
@@ -7182,6 +7765,7 @@ documents = "Tài liệu"
 editor = "Editor"
 home = "Trang chủ"
 infrastructure = "Hạ tầng"
+integrations = "Tích hợp"
 pipelines = "Pipeline"
 policies = "Chính sách"
 procurement = "Mua sắm"
@@ -7190,25 +7774,9 @@ sources = "Nguồn"
 usage = "Sử dụng & Thanh toán"
 users = "Người dùng"
 
-[portal.notifications]
-markAllRead = "Đánh dấu tất cả đã đọc"
-title = "Thông báo"
-viewAll = "Xem tất cả"
-
-[portal.notifications.ariaLabel]
-none = "Thông báo, không có mục chưa đọc"
-unread_one = "Thông báo, {{count}} chưa đọc"
-unread_other = "Thông báo, {{count}} chưa đọc"
-
-[portal.notifications.count]
-allRead = "tất cả đã đọc"
-loading = "đang tải"
-new_one = "{{count}} mới"
-new_other = "{{count}} mới"
-
-[portal.notifications.empty]
-description = "Không có thông báo mới."
-title = "Bạn đã xem hết"
+[portal.nav.section]
+platform = "Nền tảng PDF"
+processor = "Bộ xử lý PDF"
 
 [portal.pipelines]
 subtitle = "Mọi pipeline tài liệu tự động trên backend: một chuỗi thao tác có thứ tự trên một tập nguồn, chạy theo trigger. Nhấp vào một hàng để xem các bước và nguồn của nó."
@@ -7220,15 +7788,28 @@ newPipeline = "Pipeline mới"
 [portal.pipelines.builder]
 addStep = "Thêm công cụ"
 back = "Quay lại pipeline"
+cannotFollow = "Không thể nhận {{produced}}"
+chooseAccount = "Chọn tài khoản"
+chooseDestination = "Chọn đích đến"
+chooseOperation = "Chọn việc bước này thực hiện"
+chooseSource = "Chọn nguồn"
 discard = "Hủy thay đổi"
 enabled = "Đã bật"
+inputs = "Đầu vào"
+inputSource = "Nguồn đầu vào"
+inputTrigger = "Kích hoạt"
 keepEditing = "Tiếp tục chỉnh sửa"
+needsConfiguring = "Cần thiết lập"
 needsUpload = "Cần một file đã upload"
+noSources = "Chưa có nguồn nào được kết nối. Tạo một nguồn để dùng làm đầu vào."
 noToolMatches = "Không có công cụ nào khớp với tìm kiếm của bạn."
 pipelineSettings = "Cài đặt pipeline"
 searchTools = "Tìm kiếm công cụ"
 selectToolBody = "Thêm công cụ để xây dựng pipeline của bạn."
 selectToolTitle = "Chưa có công cụ"
+sendToSystem = "Gửi đến hệ thống khác"
+stepsIncompatible = "Các bước này không thể chạy trên kết quả mà bước trước tạo ra: {{tools}}."
+stepsNeedSetup = "Các bước này vẫn cần thiết lập trước khi lưu: {{tools}}."
 toolSettings = "Cài đặt công cụ"
 unknownStep = "Thao tác không được nhận dạng, giữ nguyên."
 unsavedBody = "Bạn có thay đổi chưa lưu. Lưu trước khi rời đi hay hủy chúng?"
@@ -7236,19 +7817,24 @@ unsavedTitle = "Thay đổi chưa lưu"
 uploadUnsupported = "File đã upload chưa được hỗ trợ trong pipeline, vì vậy không thể lưu các bước này: {{tools}}."
 usesDefaults = "Chạy với cài đặt mặc định"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "Kết hợp mọi file từ bước trước"
+fan-out = "Chạy một lần cho mỗi file từ bước trước"
+format-mismatch = "Cần {{accepts}}, nhưng bước trước tạo ra {{produced}}"
+output-uncertain = "Có thể không chạy: đầu ra của bước trước phụ thuộc vào cách thiết lập"
+source-mismatch = "Cần {{accepts}}, nhưng đầu vào của pipeline này là {{produced}}"
+undeclared-operation = "Không thể kiểm tra bước này chấp nhận gì"
+
 [portal.pipelines.composer]
 addTool = "Thêm công cụ"
 cancel = "Hủy"
 chainEmpty = "Thêm công cụ để bắt đầu xây dựng pipeline của bạn."
 create = "Tạo pipeline"
-directory = "Thư mục đầu ra"
-directoryHelp = "Đường dẫn tuyệt đối trên server. Phải nằm trong các thư mục được phép đã cấu hình."
 editingUnsupported = "Chưa hỗ trợ hiển thị các tham số công cụ này để chỉnh sửa."
 moveDown = "Di chuyển xuống"
 moveUp = "Di chuyển lên"
 name = "Tên"
 namePlaceholder = "ví dụ: Quét che giấu"
-noSources = "Chưa có nguồn nào được kết nối. Pipeline vẫn có thể chạy trên các file được cung cấp trực tiếp cho nó."
 noToolSettings = "Công cụ này không có cài đặt có thể cấu hình."
 operations_one = "Thao tác ({{count}})"
 operations_other = "Thao tác ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "Xóa"
 title = "Xóa pipeline?"
 
 [portal.pipelines.detail]
+clearHistory = "Xóa lịch sử"
 delete = "Xóa pipeline"
 run = "Chạy ngay"
 
 [portal.pipelines.empty]
 action = "Tạo pipeline"
+connectSource = "Kết nối một nguồn"
 description = "Tạo pipeline đầu tiên của bạn: chọn các nguồn mà nó chạy, nối chuỗi các thao tác và chọn nơi đầu ra sẽ đến."
 title = "Chưa có pipeline"
 
@@ -7286,15 +7874,17 @@ active = "Đang hoạt động"
 paused = "Đã tạm dừng"
 total = "Pipeline"
 
-[portal.pipelines.output]
-folder = "Ghi vào thư mục"
-inline = "Trả về file"
-
 [portal.pipelines.run]
+allProcessed_one = "Không có gì để chạy: {{count}} tài liệu của nguồn đã được xử lý."
+allProcessed_other = "Không có gì để chạy: tất cả {{count}} tài liệu trong các nguồn đã được xử lý."
 completed_one = "Lượt chạy đã hoàn tất."
 completed_other = "Tất cả {{count}} lượt chạy đã hoàn tất."
 empty = "Không có gì để chạy: các nguồn không có tài liệu để xử lý."
 failed = "Lượt chạy thất bại: {{error}}"
+historyCleared = "Đã xóa lịch sử. Lần chạy tiếp theo sẽ xử lý lại mọi thứ hiện có trong các nguồn."
+inFlight = "Không có gì mới để chạy: tài liệu vẫn đang được xử lý từ một lần chạy trước đó."
+parked_one = "Không có gì để chạy: {{count}} tài liệu đã thất bại trước đó và đang được tạm dừng. Khắc phục nguyên nhân, rồi xóa lịch sử để thử lại."
+parked_other = "Không có gì để chạy: {{count}} tài liệu đã thất bại trước đó và đang được tạm dừng. Khắc phục nguyên nhân, rồi xóa lịch sử để thử lại."
 running = "Lượt chạy đã bắt đầu; vẫn đang tiến hành."
 timeout = "Lượt chạy mất nhiều thời gian hơn dự kiến; nó có thể vẫn hoàn tất trong nền."
 
@@ -7314,12 +7904,18 @@ manual = "Thủ công"
 schedule = "Theo lịch"
 
 [portal.policies]
+defaultName = "Chính sách {{category}}"
 subtitle = "Các tự động hóa thường trực áp dụng một pipeline công cụ trên mọi tài liệu. Mỗi chính sách kích hoạt khi upload hoặc export, chạy chuỗi công cụ của nó và lưu phiên bản đã áp dụng cùng với bản gốc."
 title = "Chính sách"
 
 [portal.policies.card]
 comingSoon = "Nâng cấp lên Enterprise"
 notSetUp = "Chưa thiết lập"
+requiresAiEngine = "Yêu cầu AI engine"
+
+[portal.policies.categories.classification]
+desc = "Xác định loại của từng tài liệu khi tải lên và gắn thẻ metadata để lưu trữ và tìm kiếm."
+label = "Phân loại"
 
 [portal.policies.categories.compliance]
 desc = "Áp dụng các yêu cầu HIPAA, GDPR, SOC 2 hoặc FedRAMP trên mọi tài liệu."
@@ -7344,6 +7940,13 @@ label = "Bảo mật"
 [portal.policies.config]
 scopeAll = "Tất cả tài liệu"
 
+[portal.policies.config.classification]
+summary = "Phân loại mọi tài liệu đã tải lên theo nhãn của nhóm bạn và gắn thẻ metadata của tài liệu."
+
+[portal.policies.config.classification.rules]
+0 = "Phân loại"
+1 = "Gắn thẻ metadata"
+
 [portal.policies.config.compliance]
 summary = "Xác thực tài liệu theo các framework quy định trước khi chúng rời khỏi hệ thống."
 
@@ -7371,6 +7974,29 @@ minConfidence = "Độ tin cậy tối thiểu"
 2 = "Đặt tên"
 3 = "Chuẩn hóa"
 
+[portal.policies.config.purview]
+label = "Áp dụng nhãn độ nhạy Microsoft Purview"
+
+[portal.policies.config.purview.fields]
+connection = "Purview tenant"
+labelId = "Label ID"
+labelIdHelp = "GUID của nhãn, từ cổng Purview. Việc áp dụng nhãn ghi metadata của nhãn vào PDF; nó không thể mã hóa, việc này cần Microsoft client."
+labelName = "Tên nhãn (tùy chọn)"
+labelNameHelp = "Được ghi cùng ID để người dùng và công cụ có thể nhận diện nhãn."
+
+[portal.policies.config.purview.fields.method]
+help = "Purview phân biệt nhãn do chính sách áp dụng với nhãn do một người chọn."
+label = "Cách ghi nhãn"
+privileged = "Như được một người chọn"
+standard = "Như được áp dụng tự động"
+
+[portal.policies.config.purviewRead]
+label = "Đọc nhãn Microsoft Purview"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview tenant"
+connectionHelp = "Đọc nhãn mà tài liệu đã có, để các bước sau có thể hành động dựa trên đó."
+
 [portal.policies.config.retention]
 summary = "Áp dụng thời gian giữ tài liệu, khi nào lưu trữ và khi nào xóa."
 
@@ -7438,6 +8064,7 @@ title = "Chưa có hoạt động"
 [portal.policies.endpoints]
 addWatermark = "Hình mờ"
 autoRedact = "Che PII"
+classifyAndLabel = "Phân loại"
 compressPdf = "Nén"
 flatten = "Làm phẳng"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "Các chính sách của bạn đã được lưu và sẽ xuất
 retry = "Thử lại"
 title = "Backend không khả dụng"
 
+[portal.policies.operations]
+change = "Thay đổi việc bước này thực hiện"
+noResults = "Không có bước nào khớp. Hãy thử tên sản phẩm, hoặc \"scan\", \"notify\", \"attach\"."
+searchPlaceholder = "Tìm kiếm bước - thử \"scan\", \"attach\" hoặc tên sản phẩm"
+
+[portal.policies.operations.bodyMode]
+binary = "Byte file thô"
+json = "Bên trong payload JSON"
+multipart = "Dưới dạng file upload (multipart)"
+
+[portal.policies.operations.clamavScan]
+description = "Máy chủ ClamAV của bạn kiểm tra tài liệu; không có gì rời khỏi mạng của bạn."
+label = "Quét virus (self-hosted)"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "Từ chối tài liệu chứa macro, file thực thi, script hoặc đối tượng nhúng."
+label = "Chặn nội dung hoạt động"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive kiểm tra tài liệu và lần chạy sẽ dừng nếu tài liệu không sạch."
+label = "Quét virus"
+
+[portal.policies.operations.confluenceAttach]
+description = "Lưu tài liệu đã xử lý vào một trang."
+label = "Đính kèm vào trang Confluence"
+
+[portal.policies.operations.consignoSubmit]
+description = "Gửi tài liệu đến ConsignO Cloud để ký."
+label = "Gửi để ký (ConsignO)"
+note = "Gửi tài liệu. Hiện chưa hỗ trợ truy xuất bản đã ký, vì một bước không thể chuyển kết quả cho bước sau."
+
+[portal.policies.operations.customApiCall]
+description = "Tự tạo lệnh gọi: đường dẫn, phương thức, body và xử lý phản hồi."
+label = "Gọi API tùy chỉnh"
+
+[portal.policies.operations.discordNotify]
+description = "Thông báo cho một kênh rằng chính sách đã xử lý một tài liệu."
+label = "Đăng tin nhắn lên Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "Ghi lại việc chính sách đã làm dưới dạng tài liệu có thể tìm kiếm."
+label = "Lập chỉ mục sự kiện kiểm toán trong Elasticsearch"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart phù hợp với API upload; JSON phù hợp với API muốn file nằm trong payload; binary gửi byte thô."
+label = "Cách gửi tài liệu"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "Body JSON được gửi nguyên trạng. {{document.base64}} chứa file; {{document.*}} và {{run.*}} được điền cho từng tài liệu."
+label = "Body JSON"
+
+[portal.policies.operations.fields.connection]
+label = "Tài khoản"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun domain"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "Trường form mà API mong đợi chứa tài liệu."
+label = "Tên trường file"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "Từ"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "Một đối tượng JSON gồm các cặp tên/giá trị header. Thông tin xác thực của kết nối được thêm sẵn cho bạn."
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "Được gửi làm nội dung tin nhắn. {{document.*}} và {{run.*}} được điền cho từng tài liệu."
+label = "Tin nhắn"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "Được nối vào URL cơ sở của kết nối. Nó không bao giờ có thể truy cập host khác."
+label = "Đường dẫn"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "Vị trí trong drive để ghi. {{document.filename}} được điền cho từng tài liệu."
+label = "Đường dẫn đích"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Báo cáo giữ nguyên tài liệu. Thay thế sẽ đổi tài liệu bằng bất kỳ nội dung nào trả về."
+label = "Làm gì với phản hồi"
+
+[portal.policies.operations.fields.signerEmail]
+label = "Email của người ký"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "Chủ đề"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio phân tích văn bản này. Dùng {{document.title}} hoặc dán văn bản bạn muốn kiểm tra."
+label = "Văn bản cần kiểm tra"
+
+[portal.policies.operations.fields.to]
+label = "Đến"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Tên người dùng Nextcloud"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "Thông báo cho một space rằng chính sách đã xử lý một tài liệu."
+label = "Đăng tin nhắn lên Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "Lưu tài liệu đã xử lý vào một issue."
+label = "Đính kèm vào Jira issue"
+
+[portal.policies.operations.mailgunEmail]
+description = "Gửi tài liệu đã xử lý dưới dạng tệp đính kèm."
+label = "Gửi tài liệu qua email (Mailgun)"
+
+[portal.policies.operations.nextcloudUpload]
+description = "Ghi tài liệu đã xử lý vào một thư mục."
+label = "Tải lên Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "Máy chủ Presidio của bạn báo cáo dữ liệu cá nhân mà nó tìm thấy."
+label = "Phát hiện dữ liệu cá nhân"
+note = "Presidio đọc văn bản, không đọc file. Cung cấp văn bản bạn muốn kiểm tra — bản thân tài liệu không được tải lên."
+
+[portal.policies.operations.responseMode]
+replace = "Thay thế tài liệu bằng phản hồi"
+report = "Giữ tài liệu, ghi lại phản hồi"
+
+[portal.policies.operations.sendgridEmail]
+description = "Gửi tài liệu đã xử lý dưới dạng tệp đính kèm."
+label = "Gửi tài liệu qua email (SendGrid)"
+
+[portal.policies.operations.slackNotify]
+description = "Thông báo cho một kênh rằng chính sách đã xử lý một tài liệu."
+label = "Đăng tin nhắn lên Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "Ghi lại việc chính sách đã làm, nơi kiểm toán viên của bạn đã xem."
+label = "Gửi sự kiện kiểm toán đến Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "Ghi lại việc chính sách đã làm vào một HTTP collector."
+label = "Gửi sự kiện kiểm toán đến Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "Thông báo cho một kênh rằng chính sách đã xử lý một tài liệu."
+label = "Đăng tin nhắn lên Teams"
+
+[portal.policies.operations.webhookPost]
+description = "Gửi chính tài liệu đến URL bạn chọn."
+label = "Post tài liệu đến webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "Chuyển chi tiết lần chạy cho automation của bạn."
+label = "Kích hoạt Zap hoặc Make scenario"
+
 [portal.policies.stats]
 activeFor = "Hoạt động"
 dataProcessed = "Dữ liệu đã xử lý"
@@ -7473,6 +8277,13 @@ label = "Tài liệu đã áp dụng"
 description = "Đã cấu hình nhưng không kích hoạt"
 label = "Đã tạm dừng"
 
+[portal.policies.table]
+appliesTo = "Áp dụng cho"
+docs = "Tài liệu đã thực thi"
+enforces = "Thực thi"
+policy = "Chính sách"
+status = "Trạng thái"
+
 [portal.policies.wizard.actions]
 back = "Quay lại"
 cancel = "Hủy"
@@ -7480,6 +8291,10 @@ continue = "Tiếp tục"
 enablePolicy = "Bật chính sách"
 saveChanges = "Lưu thay đổi"
 
+[portal.policies.wizard.capability.classify]
+desc = "Xác định loại tài liệu từ nhãn của nhóm bạn và gắn thẻ cho tài liệu, để tài liệu được lưu và tìm kiếm theo danh mục."
+label = "Phân loại tài liệu"
+
 [portal.policies.wizard.capability.compress]
 desc = "Nén tài liệu thành kích thước file nhỏ hơn."
 label = "Giảm kích thước file"
@@ -7500,10 +8315,18 @@ label = "Che thông tin nhạy cảm"
 desc = "Xóa JavaScript ẩn để không có gì có thể tự động chạy khi tài liệu được mở."
 label = "Loại bỏ nội dung hoạt động"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "Chứng minh tài liệu đã tồn tại đúng ở dạng này tại một thời điểm, bằng cách dùng cơ quan timestamp độc lập. Chỉ hash được gửi - tài liệu không bao giờ rời khỏi máy chủ của bạn."
+label = "Thêm timestamp tin cậy"
+
 [portal.policies.wizard.capability.watermark]
 desc = "Đóng dấu một dấu hiển thị (ví dụ: “Bảo mật”) trên mọi trang."
 label = "Áp dụng hình mờ"
 
+[portal.policies.wizard.classification]
+description = "Mọi tài liệu đã tải lên được phân loại theo các nhãn tích hợp và được gắn thẻ với các loại phù hợp. Bộ nhãn được chia sẻ trong toàn bộ nhóm của bạn."
+labelsHeading = "Nhãn phân loại"
+
 [portal.policies.wizard.errors]
 noTools = "Trước tiên hãy bật ít nhất một công cụ trong workflow."
 saveFailed = "Không thể lưu chính sách. Vui lòng thử lại."
@@ -7548,73 +8371,118 @@ setUp = "Thiết lập chính sách {{category}}"
 [portal.policies.wizard.workflow]
 description = "Chọn những gì chính sách này thực hiện với mỗi tài liệu mà nó xử lý."
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} đang hoạt động"
-noRule = "Chưa áp dụng quy tắc nào"
-subtitle = "Các tự động hóa cố định mà mọi tài liệu đều đi qua, bất kể pipeline nào xử lý nó."
-title = "Những gì chạy trên PDF của bạn"
-
 [portal.policySummary.action]
-comingSoon = "Nâng cấp lên Enterprise"
-configure = "Cấu hình"
 setUp = "Thiết lập"
 
-[portal.policySummary.column]
-activeRule = "Quy tắc đang hoạt động"
-policy = "Chính sách"
-status = "Trạng thái"
+[portal.processorFlow]
+footnote = "Số đếm trong 24 giờ qua. Tốc độ luồng chỉ mang tính minh họa."
+liveBadge = "Trực tiếp"
+stats = "{{connected}} đã kết nối · {{processed}} PDF đã xử lý"
+title = "Bộ xử lý PDF"
 
-[portal.policySummary.empty]
-description = "Sau khi chính sách được cấu hình, các danh mục sẽ xuất hiện ở đây."
-title = "Chưa có chính sách"
+[portal.processorFlow.lens]
+ariaLabel = "Chế độ xem"
+flow = "Luồng"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "Hoạt động"
-off = "Tắt"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "Thất bại"
+heading = "Kết quả"
+success = "Đã gửi"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} đang hoạt động"
+count = "{{n}} · 24h"
+heading = "Chính sách"
+setUp = "Thiết lập"
 soon = "Sắp có"
 
-[portal.processingStatus]
-managePlan = "Quản lý gói"
-volumeSuffix = "PDF đã xử lý · 30 ngày qua"
+[portal.processorFlow.sankey]
+waist = "Chính sách · {{n}} đang hoạt động"
+
+[portal.processorFlow.sankey.empty]
+description = "Kết nối một nguồn và bật một chính sách để xem tài liệu chảy qua bộ xử lý."
+title = "Chưa có luồng"
+
+[portal.processorFlow.sources]
+comingSoonTag = "Kết nối"
+editor = "Stirling PDF Editor"
+heading = "Nguồn"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Nhận Email"
 
 [portal.procurement]
-reset = "Đặt lại mua sắm (demo)"
 subtitle = "Giúp đội ngũ của bạn được đánh giá, ký hợp đồng và triển khai. Mọi tài liệu ở cùng một nơi."
 title = "Mua sắm"
 
-[portal.procurement.action]
-download = "Tải xuống"
-pay = "Thanh toán ngay"
-request = "Yêu cầu"
-sign = "Xem lại & ký"
-upload = "Tải lên"
-
 [portal.procurement.agreement]
 agreeCta = "Đồng ý & đăng ký"
+confidential = "Bảo mật"
 confirm = "Tôi đã đọc và đồng ý với Thỏa thuận Stirling Enterprise."
-eyebrow = "Thỏa thuận"
-intro = "Một thỏa thuận kết hợp bao gồm giao dịch của bạn: Master Service Agreement, Order Form, EULA và Data Processing Agreement. Hãy xem lại, sau đó đồng ý chấp nhận báo giá thành một đăng ký cam kết."
-title = "Xem lại thỏa thuận enterprise của bạn"
+docName = "Thỏa thuận Stirling Enterprise"
+docSub = "MSA, Order Form, EULA và DPA, kết hợp trong một chữ ký."
+download = "Tải xuống"
+downloadDraftError = "Không thể tạo PDF thỏa thuận - trình kết xuất tài liệu không khả dụng. Vui lòng thử lại sau hoặc liên hệ bộ phận hỗ trợ."
+downloadError = "Không thể tải xuống thỏa thuận đã ký. Vui lòng thử lại."
+legalName = "Tên pháp nhân"
+legalNamePlaceholder = "Pháp nhân sẽ ký"
+loadError = "Không thể tải thỏa thuận. Vui lòng thử lại."
+loading = "Đang tải thỏa thuận..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "Yêu cầu thay đổi"
+scrollHint = "Cuộn để xem lại"
+signatory = "Tên người ký"
+signatoryPlaceholder = "Họ và tên"
+signatoryTitle = "Chức danh người ký"
+signatoryTitlePlaceholder = "ví dụ: General Counsel"
+signError = "Không thể ghi nhận chữ ký của bạn. Vui lòng thử lại."
 
 [portal.procurement.builder]
 addons = "Tiện ích bổ sung"
+addressLine1 = "Địa chỉ dòng 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "Địa chỉ dòng 2"
+addressLine2Placeholder = "Suite, tầng, tòa nhà"
 back = "Quay lại"
 businessName = "Tên doanh nghiệp"
 businessNamePlaceholder = "Công ty của bạn"
+city = "Thành phố"
+cityPlaceholder = "San Francisco"
+completeRequired = "Vui lòng hoàn tất các trường bắt buộc (đánh dấu *) với email hợp lệ trước khi tạo báo giá."
+contactEmail = "Email liên hệ"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "Tên liên hệ"
+contactNamePlaceholder = "Jane Doe"
 continue = "Tiếp tục"
-country = "Quốc gia"
-countryEuro = "Khu vực đồng Euro (EUR €)"
-countryUK = "Vương quốc Anh (GBP £)"
-countryUS = "Hoa Kỳ (USD $)"
+done = "Xong"
 eula = "Tôi đã đọc và đồng ý với Stirling Enterprise EULA. EULA này điều chỉnh thỏa thuận được tạo từ báo giá này."
 generate = "Tạo báo giá"
-included = "Đã bao gồm"
 indemnification = "Bồi thường IP"
 indemnificationSub = "Chúng tôi bảo vệ các khiếu nại IP đủ điều kiện, theo EULA"
-offlineLicense = "Giấy phép offline / air-gapped"
-offlineLicenseSub = "File giấy phép có thể tải xuống cho một phiên bản tự host air-gapped"
+paperEyebrow = "Báo giá Enterprise"
+paperFor = "Chuẩn bị cho"
+pdfSize = "Kích thước PDF"
+poNumber = "Số PO"
+poNumberPlaceholder = "Tùy chọn"
+postalCode = "Mã bưu chính"
+postalCodePlaceholder = "94105"
+posture = "Quản trị"
+posture_count = "~{{count}} chính sách"
+posture_essentials = "Thiết yếu"
+posture_essentialsSub = "Phân loại + Chia sẻ — mặc định"
+posture_governed = "Được quản trị"
+posture_governedSub = "Thêm Bảo mật và Định tuyến"
+posture_regulated = "Được quản lý theo quy định"
+posture_regulatedSub = "Mọi danh mục — Tuân thủ, Lưu giữ, Nạp dữ liệu"
 qbr = "Đánh giá kinh doanh hàng quý"
 qbrSub = "SE của bạn xem xét việc sử dụng và lộ trình mỗi quý"
+region = "Tiểu bang / vùng"
+regionPlaceholder = "California"
 running = "{{annual}} / năm · {{years}} năm {{tcv}}"
 s1Sub = "Đội ngũ của bạn và số PDF bạn dự kiến xử lý mỗi năm."
 s1Title = "Bạn sẽ xử lý bao nhiêu?"
@@ -7623,6 +8491,12 @@ s2Title = "Cam kết và dịch vụ"
 s3Sub = "Cho báo giá và thỏa thuận mà nó tạo ra."
 s3Title = "Thông tin của bạn"
 serviceLevel = "Cấp dịch vụ"
+size_compact = "Gọn nhẹ"
+size_compactSub = "Chủ yếu là văn bản, dưới 1 MB"
+size_heavy = "Nặng"
+size_heavySub = "Đã quét hoặc nhiều hình ảnh, 5 MB+"
+size_standard = "Tiêu chuẩn"
+size_standardSub = "Kết hợp văn bản và hình ảnh, 1 đến 5 MB"
 slDedicated = "Chuyên trách"
 slDedicatedSub = "4 giờ làm việc · quản lý tài khoản chuyên trách · +30%"
 slPriority = "Ưu tiên"
@@ -7630,6 +8504,8 @@ slPrioritySub = "Cùng ngày làm việc · CSM được chỉ định · +15%"
 slStandard = "Tiêu chuẩn"
 slStandardSub = "Ngày làm việc tiếp theo · CSM dùng chung · đã bao gồm"
 stepOf = "Bước {{n}} trên {{total}}"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "Tùy chọn"
 term = "Thời hạn"
 termDiscount = "Đã áp dụng giảm giá {{pct}}% cho cam kết nhiều năm"
 title = "Tạo báo giá của bạn"
@@ -7637,6 +8513,7 @@ training = "Triển khai & đào tạo"
 trainingSub = "Các phiên trực tiếp để giúp đội ngũ của bạn bắt đầu"
 users = "Tổng số người dùng"
 usersPlaceholder = "ví dụ: 250"
+viewEula = "Đọc"
 volEstimated = "Ước tính từ {{count}} người dùng (~2.000 PDF mỗi người, bao gồm tự động hóa). Chỉnh sửa nếu bạn biết rõ hơn."
 volManual = "Đang dùng số liệu của bạn. Ước tính lại từ quy mô đội ngũ bất cứ lúc nào."
 volNoUsers = "Không chắc? Nhập quy mô đội ngũ của bạn và chúng tôi sẽ ước tính."
@@ -7645,55 +8522,55 @@ volumePlaceholder = "ví dụ: 1.000.000"
 years_one = "{{count}} năm"
 years_other = "{{count}} năm"
 
-[portal.procurement.docs]
-count_one = "{{count}} tài liệu"
-count_other = "{{count}} tài liệu"
-done = "Xong"
-here = "Bạn đang ở đây"
-hide = "Ẩn"
-optional = "Tùy chọn"
-paidAddon = "Tiện ích bổ sung trả phí"
-show = "Hiển thị"
-subtitle = "Mọi thứ bạn cần ở từng bước của hành trình, được hiển thị khi giao dịch tiến triển."
-supportingSubtitle = "SOC 2, đánh giá bảo mật, biểu mẫu thuế và nhiều hơn nữa, sẵn sàng khi đội ngũ bảo mật hoặc mua sắm của bạn yêu cầu. Một số có phí một lần."
-supportingTitle = "Hỗ trợ việc đánh giá của bạn"
+[portal.procurement.documents]
+agreement = "Thỏa thuận Enterprise"
+agreementSub = "MSA, Order Form và DPA trong một chữ ký."
+download = "Tải xuống"
+eula = "EULA & Điều khoản thương mại"
+eulaSub = "Điều khoản phần mềm và thương mại tự phục vụ."
+invoice = "Hóa đơn"
+invoiceSub = "Hóa đơn đăng ký đầu tiên của bạn."
+laterInvoice = "Có sẵn sau khi bạn chấp nhận"
+laterQuote = "Có sẵn khi báo giá của bạn được phát hành"
+quote = "Báo giá"
+quoteSub = "Báo giá enterprise chi tiết của bạn."
+sla = "Phụ lục SLA"
+slaSub = "Các cấp hỗ trợ và mục tiêu phản hồi."
+subprocessors = "Subprocessors"
+subprocessorsSub = "Bên thứ ba xử lý dữ liệu thay mặt bạn."
+subtitle = "Giấy tờ giao dịch của bạn, có sẵn bất cứ lúc nào."
 title = "Tài liệu"
-upcoming = "Sắp tới"
+view = "Xem"
 
 [portal.procurement.error]
 title = "Đã xảy ra lỗi"
 
 [portal.procurement.hero]
-company = "Giao dịch enterprise của bạn"
+barAria = "Giai đoạn {{current}} trong {{total}}"
 ctaAgreement = "Xem lại & ký thỏa thuận"
-ctaLive = "Bạn đã hoạt động"
-ctaPayment = "Thêm thanh toán"
+ctaExploring = "Thiết lập bản dùng thử của bạn"
 ctaQuote = "Xem lại báo giá của bạn"
+ctaReviewQuote = "Xem lại báo giá"
 ctaTrial = "Tạo báo giá của bạn"
+documents = "Tài liệu"
 eyebrow = "Mua sắm Enterprise"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "Mời đồng đội"
-keyDocs = "Tài liệu chính"
-nextStep = "Bước tiếp theo: {{action}}"
-notStarted = "Chưa bắt đầu"
+licenseKey = "Khóa giấy phép"
+liveSub = "Tổ chức của bạn đã được cấp phát và giấy phép của bạn đang hoạt động."
+liveTitle = "Bạn đang chạy Stirling Enterprise"
+next = "Tiếp theo: {{stage}}"
 open = "Mở mua sắm"
 scheduleCall = "Lên lịch cuộc gọi"
-setup1Sub = "Mời đồng đội của bạn"
-setup1Title = "Triển khai PDF Editor"
-setup2Sub = "Bật xử lý trên các trình chỉnh sửa và nguồn khác"
-setup2Title = "Kết nối PDF Processor"
-setup3Sub = "Bật Security, Compliance, Routing hoặc Retention khi bạn cần"
-setup3Title = "Thêm chính sách được đề xuất"
+sentenceAgreement = "xem lại và ký thỏa thuận"
+sentenceLive = "cấp phát và triển khai"
+sentencePayment = "đơn đặt hàng và thanh toán"
+sentenceQuote = "xem lại và chấp nhận báo giá của bạn"
+sentenceTrial = "thiết lập không gian làm việc dùng thử của bạn"
 
 [portal.procurement.journey]
 daysLeft_one = "Còn {{count}} ngày"
 daysLeft_other = "Còn {{count}} ngày"
-engineerLabel = "Kỹ sư giải pháp của bạn"
-eyebrow = "Triển khai của bạn"
-live = "Bạn đã hoạt động trên Stirling Enterprise"
-nextStep = "Bước tiếp theo: {{action}}"
-subtitle = "Kỹ sư giải pháp của bạn đồng hành ở mọi bước. Mỗi lần một hành động tiếp theo; danh sách kiểm tra đầy đủ ở bên dưới."
-title = "Từ dùng thử đến hoạt động, một lộ trình có hướng dẫn"
-trialTitle = "Dùng thử Enterprise"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "Một chữ ký bao gồm MSA, order form, EULA và DPA."
@@ -7727,6 +8604,9 @@ downloadError = "Chưa thể tạo file giấy phép offline — vui lòng thử
 downloadOffline = "Tải xuống giấy phép offline (.lic)"
 hint = "Dán khóa này vào một phiên bản tự host để kích hoạt, hoặc lưu lại cho hồ sơ của bạn. Hãy giữ an toàn."
 label = "Khóa giấy phép của bạn"
+subtitle = "Kích hoạt một phiên bản self-hosted bằng khóa này, hoặc giữ lại để lưu hồ sơ."
+title = "Khóa giấy phép của bạn"
+trialFileHint = "Đây là file giấy phép dùng thử của bạn. Khi thỏa thuận của bạn đã hoàn tất, hãy quay lại và tải xuống lần nữa — khác với khóa giấy phép trực tuyến, file .lic sẽ không tự cập nhật."
 
 [portal.procurement.link]
 cta = "Liên kết tài khoản"
@@ -7739,65 +8619,62 @@ description = "Đăng ký của bạn đang hoạt động và giấy phép củ
 eyebrow = "Hoạt động"
 title = "Bạn đã hoạt động trên Stirling Enterprise"
 
-[portal.procurement.locked]
-description = "Khóa dùng thử, báo giá theo khối lượng cam kết, thỏa thuận một chữ ký, thanh toán và sổ cái tài liệu của bạn đều ở đây sau khi bạn bắt đầu đánh giá enterprise."
-eyebrow = "Chỉ dành cho Enterprise"
-talkToSales = "Trao đổi với sales"
-title = "Lộ trình mua sắm mở với Enterprise"
-
 [portal.procurement.milestone]
-accept = "Chấp nhận & tiếp tục"
-description = "Tải xuống PDF để chia sẻ với đội ngũ của bạn, quay lại để chấp nhận khi bạn sẵn sàng, hoặc thực hiện thay đổi."
-download = "Tải xuống PDF"
 downloadError = "Chưa thể tải xuống PDF báo giá — vui lòng thử lại sau giây lát."
-edit = "Chỉnh sửa báo giá"
-eyebrow = "Báo giá {{number}}"
-perYear = " / năm"
-preparedFor = "Chuẩn bị cho {{company}}"
-tcv = "{{value}} tổng giá trị hợp đồng"
-title = "Báo giá của bạn đã sẵn sàng"
-
-[portal.procurement.modal]
-cancel = "Hủy"
-chooseFile = "Chọn file"
-close = "Đóng"
-downloadBody = "Tải xuống của bạn sẽ bắt đầu ngay."
-downloadCta = "Tải xuống"
-downloadTitle = "Tải xuống"
-noFile = "Chưa chọn file"
-payBody = "Thanh toán hợp đồng cam kết của bạn bằng thẻ hoặc chuyển khoản ngân hàng qua Stripe. Workspace của bạn sẽ được cấp phát ngay khi thanh toán hoàn tất."
-payCta = "Tiếp tục đến Stripe"
-payTitle = "Xác nhận thanh toán"
-requestBodyFree = "Chúng tôi tạo tài liệu này theo yêu cầu. Xác nhận và kỹ sư giải pháp của bạn sẽ gửi tài liệu ngay sau đó."
-requestBodyPaid = "Đây là tiện ích bổ sung trả phí. Xác nhận và kỹ sư giải pháp của bạn sẽ xác định phạm vi và gửi giấy tờ."
-requestCta = "Yêu cầu"
-requestTitle = "Yêu cầu tài liệu này"
-signBody = "Mở Thỏa thuận Stirling Enterprise để ký điện tử: một chữ ký bao gồm MSA, order form, EULA và DPA. Chúng tôi tự động ký đối ứng và bạn chuyển sang thanh toán."
-signCta = "Mở để ký"
-signTitle = "Xem lại và ký thỏa thuận của bạn"
-uploadBody = "Gửi cho chúng tôi PO của bạn và chúng tôi sẽ lập hóa đơn theo điều khoản của bạn. Kéo PDF vào hoặc chọn một file bên dưới."
-uploadCta = "Tải lên purchase order"
-uploadTitle = "Tải lên purchase order của bạn"
 
 [portal.procurement.payment]
 description = "Báo giá của bạn đã được chấp nhận và giấy phép của bạn đã hoạt động — đội ngũ của bạn có thể bắt đầu ngay. Thanh toán hóa đơn đầu tiên khi bạn sẵn sàng; bạn có thể thanh toán hoặc tải xuống tại đây, không cần email."
+downloadAgreement = "Tải xuống thỏa thuận đã ký"
 downloadInvoice = "Tải xuống hóa đơn"
-simulate = "Mô phỏng đã nhận thanh toán (demo)"
+eyebrow = "Thanh toán"
 title = "Đã tạo đăng ký"
 viewInvoice = "Xem & thanh toán hóa đơn"
 
+[portal.procurement.review]
+acceptCta = "Chấp nhận báo giá"
+annual = "Phí hằng năm (năm 1)"
+downloadCta = "Tải xuống báo giá"
+poNumber = "Đơn đặt hàng: {{po}}"
+renewal = "Gia hạn ở mức {{amount}}/năm sau thời hạn (+{{pct}}% CPI)"
+tcv = "Thời hạn {{years}} năm, trả trước toàn bộ: {{tcv}}"
+validUntil = "Có hiệu lực đến {{date}}"
+
 [portal.procurement.schedule]
 fallback = "Không thể tải trình lên lịch."
 fallbackLink = "Mở lên lịch trong tab mới"
+loading = "Đang tải trình đặt lịch..."
 subtitle = "Kỹ sư giải pháp của bạn sẽ hướng dẫn đội ngũ của bạn qua quá trình triển khai. Chọn thời gian phù hợp với bạn."
 title = "Lên lịch cuộc gọi"
 
-[portal.procurement.status]
-action = "Cần hành động"
-available = "Có sẵn"
-complete = "Hoàn tất"
-pending = "Đang chờ"
-request = "Theo yêu cầu"
+[portal.procurement.setup]
+airgap = "Air-gapped"
+airgapSub = "Kín, không có kết nối outbound"
+back = "Quay lại"
+businessName = "Tên doanh nghiệp"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "Được quản lý, bắt đầu nhanh nhất"
+continue = "Tiếp tục"
+deployment = "Nên triển khai ở đâu?"
+eula = "Tôi đồng ý với Stirling EULA & Điều khoản thương mại."
+fullName = "Họ và tên"
+fullNamePlaceholder = "Tên của bạn"
+invites = "Mời đồng đội · tùy chọn"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "Lên lịch cuộc gọi"
+seats = "Người dùng thử"
+seatsPlaceholder = "ví dụ: 15"
+selfhost = "Self-hosted"
+selfhostSub = "Docker hoặc Kubernetes"
+start = "Bắt đầu dùng thử"
+stepOf = "Bước {{n}} trong {{total}}"
+subtitle = "Miễn phí trong 14 ngày, không cần thẻ."
+subtitleDetails = "Một vài thông tin cho báo giá và thỏa thuận của bạn."
+talkFirst = "Muốn trao đổi trước?"
+title = "Thiết lập bản dùng thử của bạn"
+viewEula = "Đọc"
+workEmail = "Email công việc"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "Gia hạn sẽ thêm 7 ngày và thông báo cho kỹ sư giải pháp của bạn."
@@ -7808,20 +8685,6 @@ maxed = "Đã đạt giới hạn"
 subtitle = "Bản dùng thử miễn phí của bạn kéo dài đến {{date}}. Không cần thẻ."
 title = "Dùng thử Enterprise"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "Giá theo khối lượng cam kết, SSO + SCIM + RBAC toàn tổ chức, audit bất biến 90 ngày và SE chuyên trách."
-homeCta = "Bắt đầu dùng thử →"
-homeHeadline = "Xử lý hàng triệu PDF."
-
-[portal.recentActivity]
-title = "Hoạt động gần đây"
-viewAll = "Xem tất cả"
-
-[portal.recentActivity.empty]
-description = "Các lần chạy pipeline, triển khai và sự kiện agent sẽ xuất hiện ở đây."
-title = "Chưa có gì ở đây"
-
 [portal.search]
 ariaLabel = "Tìm kiếm"
 placeholder = "Tìm kiếm Stirling — endpoint, pipeline, tài liệu…"
@@ -7838,58 +8701,50 @@ admin = "Quản trị"
 [portal.settings.sections]
 account-link = "Liên kết tài khoản"
 
-[portal.shell.header]
-accountFallback = "Tài khoản"
-accountMenu = "Menu tài khoản"
-darkMode = "Chế độ tối"
-lightMode = "Chế độ sáng"
-search = "Tìm kiếm"
-searchPlaceholder = "Tìm kiếm…"
-signOut = "Đăng xuất"
-switchToDark = "Chuyển sang giao diện tối"
-switchToLight = "Chuyển sang giao diện sáng"
-
 [portal.shell.sidebar]
 appEditor = "Trình chỉnh sửa"
 appProcessor = "Trình xử lý"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} tài liệu"
 linkAccount = "Liên kết tài khoản Stirling"
-planEditor = "Gói Editor"
-planEnterprise = "Gói Enterprise"
-planProcessor = "Gói Processor"
 primaryNav = "Điều hướng chính"
 switchApp = "Chuyển ứng dụng"
 
+[portal.shell.topbar]
+closeNav = "Đóng điều hướng"
+openNav = "Mở điều hướng"
+search = "Tìm kiếm"
+
 [portal.sources]
 subtitle = "Các kết nối đầu vào có thể tái sử dụng để đưa tài liệu vào Stirling. Cấu hình một kết nối một lần, sau đó tham chiếu nó từ bất kỳ số lượng chính sách nào. Nhấp vào một hàng để xem cấu hình và những chính sách sử dụng nó."
 title = "Nguồn"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "Kết nối nguồn"
 
+[portal.sources.builder]
+back = "Quay lại nguồn"
+backToTypes = "Tất cả loại nguồn"
+cancel = "Hủy"
+chooseHint = "Chọn nơi tài liệu đến từ. Các connector bị làm mờ đang được phát triển."
+comingSoon = "Sắp ra mắt"
+comingSoonHeading = "Sắp ra mắt"
+create = "Tạo nguồn"
+createTitle = "Kết nối một nguồn"
+delete = "Xóa"
+editTitle = "Chỉnh sửa nguồn"
+enabled = "Đã bật"
+save = "Lưu thay đổi"
+
+[portal.sources.builder.folderAccess]
+description = "Tự động hóa thư mục chỉ có thể dùng các thư mục mà quản trị viên đã cho phép. Thêm thư mục trong cài đặt Quyền truy cập thư mục, rồi thử lại."
+openSettings = "Cài đặt Quyền truy cập thư mục"
+title = "Thư mục này không được phép"
+
 [portal.sources.delete]
 body = "Xóa \"{{name}}\"? Không thể hoàn tác. Các chính sách tham chiếu đến nguồn này sẽ cần được cập nhật."
 cancel = "Hủy"
 confirm = "Xóa"
 title = "Xóa nguồn?"
 
-[portal.sources.detail]
-closeAriaLabel = "Đóng chi tiết"
-delete = "Xóa nguồn"
-docs24h = "24 giờ qua"
-docs30d = "30 ngày qua"
-docsTotal = "Tổng đã thấy"
-docsTrend = "Tài liệu trong 30 ngày qua"
-documents = "Tài liệu"
-edit = "Chỉnh sửa"
-notReferenced = "Không được chính sách nào tham chiếu, nên có thể xóa an toàn."
-pause = "Tạm dừng"
-resume = "Tiếp tục"
-subtitle = "{{type}} · {{status}}"
-usedBy = "Được sử dụng bởi"
-
 [portal.sources.empty]
 description = "Kết nối một thư mục (và sắp tới là cloud storage) để chính sách của bạn có nơi lấy tài liệu."
 title = "Chưa kết nối nguồn nào"
@@ -7899,18 +8754,57 @@ inUse = "Đang sử dụng"
 total = "Kết nối"
 unused = "Chưa dùng"
 
+[portal.sources.networkFields.connection]
+helperText = "Kết nối đã lưu với địa chỉ máy chủ và thông tin xác thực. Được tái sử dụng bởi mọi nguồn tham chiếu đến nó."
+label = "Kết nối"
+
+[portal.sources.networkFields.directory]
+helperText = "Thư mục trên máy chủ để thăm dò, tương đối với thư mục home đăng nhập hoặc gốc share. Để trống cho thư mục gốc."
+label = "Thư mục"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume xóa từng file khỏi máy chủ sau khi mọi chính sách đã xử lý file đó."
+label = "Chế độ đọc"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume: xử lý mỗi file một lần"
+snapshot = "Snapshot: đọc lại thư mục mỗi lần chạy"
+
+[portal.sources.networkFields.recursive]
+label = "Độ sâu thư mục"
+
+[portal.sources.networkFields.recursive.options]
+all = "Bao gồm thư mục con"
+top = "Chỉ cấp trên cùng"
+
 [portal.sources.status]
 active = "Hoạt động"
 disabled = "Đã tắt"
 unused = "Chưa dùng"
 
 [portal.sources.table]
+documents = "Tài liệu"
 source = "Nguồn"
 status = "Trạng thái"
 usedBy = "Chính sách"
 
+[portal.sources.types.box]
+description = "Kéo tài liệu từ các thư mục Box mà nhóm bạn đã chia sẻ."
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "Kéo tài liệu từ một thư mục Dropbox được chia sẻ."
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "Tài liệu mà nhóm bạn đã xử lý trong editor, qua các lần chạy chính sách và AI."
 label = "Trình chỉnh sửa"
+noPolicies = "Chưa có chính sách nào chạy từ editor."
+
+[portal.sources.types.email]
+description = "Biến tệp đính kèm gửi đến một hộp thư chuyên dụng thành tài liệu."
+label = "Hộp thư Email"
 
 [portal.sources.types.folder]
 description = "Theo dõi một thư mục trên server để phát hiện tài liệu mới."
@@ -7943,25 +8837,80 @@ label = "Độ sâu thư mục"
 all = "Bao gồm thư mục con"
 top = "Chỉ cấp cao nhất"
 
+[portal.sources.types.ftp]
+description = "Thăm dò một thư mục máy chủ FTP hoặc FTPS để tìm tài liệu mới."
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "Kéo tài liệu từ các thư mục Google Drive được chia sẻ."
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "Theo dõi một SMB network share để tìm tài liệu mới."
+label = "Network drive"
+
+[portal.sources.types.onedrive]
+description = "Theo dõi các thư mục OneDrive để tìm tài liệu mới."
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "Kéo tài liệu từ Amazon S3 hoặc bucket tương thích S3."
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "Kết nối đã lưu chứa bucket và thông tin xác thực. Được tái sử dụng bởi mọi nguồn và đầu ra pipeline tham chiếu đến nó."
+label = "Kết nối"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume xóa từng object khỏi bucket sau khi mọi chính sách đã xử lý nó."
+label = "Chế độ đọc"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume: xử lý mỗi object một lần"
+snapshot = "Snapshot: đọc lại bucket mỗi lần chạy"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "Chỉ xử lý các object có key bắt đầu bằng prefix này."
+label = "Key prefix"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "Thăm dò thư mục drop SFTP để tìm tài liệu mới."
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "Kéo tài liệu từ các thư viện tài liệu SharePoint."
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "Nguồn"
 
+[portal.sources.types.webhook]
+createNote = "Delivery URL và signing secret được tạo khi bạn tạo webhook này. Người gửi POST tài liệu đến URL đó và các chính sách tham chiếu sẽ chạy khi nhận được."
+description = "Nhận tài liệu bằng HTTP POST đã ký từ bất kỳ hệ thống bên ngoài nào."
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "Delivery URL"
+secretNote = "Signing secret được hiển thị một lần, khi webhook được tạo. Tạo lại nguồn để xoay secret."
+
+[portal.sources.types.webhook.reveal]
+copy = "Sao chép"
+done = "Xong"
+secret = "Signing secret"
+secretHelp = "Ký raw body của mỗi lần gửi bằng khóa này (HMAC-SHA256) và gửi dưới dạng header X-Stirling-Signature."
+secretWarning = "Sao chép signing secret ngay bây giờ. Vì bảo mật của bạn, nó chỉ được hiển thị một lần và không thể truy xuất sau."
+title = "Webhook đã được tạo"
+url = "Delivery URL"
+usage = "POST từng tài liệu dưới dạng raw request body đến delivery URL với binary content type (application/pdf hoặc application/octet-stream). Các chính sách tham chiếu sẽ tự động chạy khi nhận được."
+
 [portal.sources.wizard]
-back = "Quay lại"
-cancel = "Hủy"
-continue = "Tiếp tục"
-editTitle = "Chỉnh sửa nguồn"
 name = "Tên"
 namePlaceholder = "ví dụ: Tiếp nhận yêu cầu bồi thường"
-save = "Lưu thay đổi"
-subtitle = "Bước {{current}} trên {{total}} · {{label}}"
-title = "Kết nối một nguồn"
 type = "Loại"
 
-[portal.sources.wizard.steps]
-chooseType = "Chọn loại"
-configure = "Cấu hình"
-review = "Xem lại & kết nối"
+[portal.stepModal]
+close = "Đóng"
 
 [portal.usage]
 managePayment = "Quản lý thanh toán"
@@ -8021,16 +8970,9 @@ summary = "Sở hữu một đội — quản lý tài nguyên và cấu hình d
 2 = "Quyền truy cập portal qua chính sách mặc định"
 3 = "Mọi thứ Thành viên có thể làm"
 
-[portal.welcome]
-ariaLabel = "Chào mừng đến với Stirling PDF"
-badge = "Open-source"
-installEditor = "Cài đặt Editor"
-inviteTeammates = "Mời đồng đội"
-openInBrowser = "Mở trong trình duyệt"
-perks = "Miễn phí mãi mãi · Có thể tự host"
-subtitle = "PDF Editor bảo mật nhất thế giới miễn phí cho các đội ngũ ở mọi quy mô. Bao gồm hơn 60 thao tác PDF và SSO."
-title = "Chào mừng đến với"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · Không giới hạn"
 
 [printFile]
 title = "In tệp"
@@ -8613,6 +9555,14 @@ text = "Xoay các trang PDF theo chiều kim đồng hồ hoặc ngược chiề
 [rotate.tooltip.header]
 title = "Tổng quan cài đặt xoay"
 
+[ruler]
+clearAll = "Xóa tất cả"
+hideAllLabels = "Ẩn tất cả nhãn"
+hideSmallLabels = "Ẩn nhãn nhỏ"
+physicalValues = "Vật lý"
+scaled = "Đã chia tỷ lệ"
+showAllLabels = "Hiển thị tất cả nhãn"
+
 [sanitize]
 desc = "Loại bỏ các thành phần có thể gây hại khỏi tệp PDF."
 sanitizationResults = "Kết quả làm sạch"
@@ -8654,31 +9604,45 @@ label = "Xóa siêu dữ liệu XMP"
 [sanitize.steps]
 settings = "Cài đặt"
 
-[sanitizePdf]
-tags = "làm sạch,bảo mật,an toàn,loại bỏ mối đe dọa"
-
 [sanitizePDF]
 title = "Làm sạch PDF"
 
+[sanitizePdf]
+tags = "làm sạch,bảo mật,an toàn,loại bỏ mối đe dọa"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "Điều chỉnh tỷ lệ trang"
 
+[scaleSettings]
+activeScale = "Tỷ lệ đang hoạt động"
+apply = "Áp dụng tỷ lệ"
+applyCalibration = "Áp dụng hiệu chuẩn"
+calculatedScale = "Tỷ lệ đã tính"
+calibrate = "Hiệu chuẩn"
+calibrating = "Đang hiệu chỉnh"
+calibrationDistanceRequired = "Nhập khoảng cách thực tế lớn hơn 0"
+calibrationInvalid = "Không thể tính tỷ lệ từ phép đo này"
+calibrationPaperDistance = "Khoảng cách trang đã đo: {{distance}}"
+calibrationTitle = "Hiệu chỉnh tỷ lệ"
+calibrationTooltip = "Đo một khoảng cách đã biết để tự động tính tỷ lệ"
+customScale = "Tỷ lệ tùy chỉnh"
+noneSet = "Chưa đặt tỷ lệ tùy chỉnh"
+presets = "Tỷ lệ đặt sẵn"
+ratio = "Tỷ lệ"
+ratioHelp = "Tỷ lệ: 1 đơn vị trang = X đơn vị thực tế"
+ratioPlaceholder = "ví dụ: 100"
+ratioPositive = "Tỷ lệ phải lớn hơn 0"
+ratioRequired = "Bắt buộc nhập tỷ lệ"
+realDistance = "Khoảng cách thực tế"
+realDistancePlaceholder = "ví dụ: 5"
+reset = "Đặt lại về mặc định"
+unit = "Đơn vị"
+unitInvalid = "Đơn vị không hợp lệ: {{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "Ngưỡng góc:"
-10 = "Đặt kích thước của viền được thêm vào và loại bỏ để ngăn chặn viền trắng trong đầu ra (mặc định: 1)."
-2 = "Đặt góc tuyệt đối tối thiểu cần thiết để xoay hình ảnh (mặc định: 10)."
-3 = "Dung sai:"
-4 = "Xác định phạm vi biến đổi màu sắc xung quanh màu nền ước tính (mặc định: 30)."
-5 = "Diện tích tối thiểu:"
-6 = "Đặt ngưỡng diện tích tối thiểu cho một ảnh (mặc định: 10000)."
-7 = "Diện tích đường viền tối thiểu:"
-8 = "Đặt ngưỡng diện tích đường viền tối thiểu cho một ảnh"
-9 = "Kích thước viền:"
-
 [scannerImageSplit]
 submit = "Trích xuất ảnh quét"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "Tính năng"
 whatThisDoesDesc = "Tự động tìm và trích xuất từng ảnh từ một trang quét hoặc ảnh tổng hợp—không cần cắt thủ công."
 whenToUse = "Khi nào dùng"
 
+[ScannerImageSplit.selectText]
+1 = "Ngưỡng góc:"
+10 = "Đặt kích thước của viền được thêm vào và loại bỏ để ngăn chặn viền trắng trong đầu ra (mặc định: 1)."
+2 = "Đặt góc tuyệt đối tối thiểu cần thiết để xoay hình ảnh (mặc định: 10)."
+3 = "Dung sai:"
+4 = "Xác định phạm vi biến đổi màu sắc xung quanh màu nền ước tính (mặc định: 30)."
+5 = "Diện tích tối thiểu:"
+6 = "Đặt ngưỡng diện tích tối thiểu cho một ảnh (mặc định: 10000)."
+7 = "Diện tích đường viền tối thiểu:"
+8 = "Đặt ngưỡng diện tích đường viền tối thiểu cho một ảnh"
+9 = "Kích thước viền:"
+
 [search]
 noResults = "Không tìm thấy kết quả"
 placeholder = "Nhập từ khóa tìm kiếm..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "Máy chủ Stirling-PDF của bạn đang ngoại tuy
 [session]
 expired = "Phiên của bạn đã hết hạn. Vui lòng làm mới trang và thử lại."
 
-[sessionManagement.tooltip]
-header = "Quản lý phiên ký"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "Người tham gia mới được thêm vào cuối thứ tự ký"
-bullet2 = "Không thể thêm người tham gia sau khi phiên đã hoàn tất"
-bullet3 = "Mỗi người tham gia sẽ nhận thông báo khi đến lượt"
-description = "Bạn có thể thêm nhiều người tham gia vào phiên đang hoạt động bất kỳ lúc nào trước khi hoàn tất."
-title = "Thêm người tham gia"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>Hoàn tất đầy đủ</b>: Tất cả người tham gia đã ký"
-bullet2 = "<b>Hoàn tất một phần</b>: Một số người tham gia chưa ký"
-bullet3 = "Những người chưa ký sẽ bị loại khỏi tài liệu cuối cùng"
-bullet4 = "Sau khi hoàn tất, bạn có thể tải PDF đã ký vào các tệp đang hoạt động"
-description = "Việc hoàn tất kết hợp tất cả chữ ký thành một PDF đã ký duy nhất. Hành động này không thể hoàn tác."
-title = "Hoàn tất phiên"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "Không thể xóa người tham gia đã ký"
-bullet2 = "Người tham gia bị xóa sẽ không còn nhận thông báo"
-bullet3 = "Thứ tự ký sẽ tự động điều chỉnh"
-description = "Có thể xóa người tham gia khỏi phiên trước khi họ ký."
-title = "Xóa người tham gia"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "Mỗi chữ ký được áp dụng tuần tự lên PDF"
-bullet2 = "Người ký sau có thể thấy các chữ ký trước"
-bullet3 = "Quan trọng cho quy trình phê duyệt và chuỗi lưu ký pháp lý"
-description = "Thứ tự bạn chỉ định khi tạo phiên quyết định ai ký trước."
-title = "Thứ tự chữ ký"
-
 [settings]
 close = "Đóng"
 
+[settings.ai]
+documents = "Tài liệu & RAG"
+general = "Chung"
+limits = "Giới hạn & hiệu suất"
+models = "Mô hình & nhà cung cấp"
+title = "AI"
+
 [settings.configuration]
 advanced = "Nâng cao"
 database = "Cơ sở dữ liệu"
 endpoints = "Endpoints"
 features = "Tính năng"
+folderAccess = "Quyền truy cập thư mục"
 mcp = "MCP Server"
 storageSharing = "Lưu trữ & Chia sẻ Tệp"
 systemSettings = "Cài đặt hệ thống"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "Trình chỉnh sửa PDF mặc định"
 defaultPdfEditorActive = "Stirling PDF là trình chỉnh sửa PDF mặc định của bạn"
 defaultPdfEditorChecking = "Đang kiểm tra..."
 defaultPdfEditorInactive = "Ứng dụng khác đang được đặt mặc định"
+defaultPdfEditorRemind = "Nhắc tôi đặt làm mặc định"
+defaultPdfEditorRemindDescription = "Hiển thị biểu ngữ khi Stirling PDF không phải là ứng dụng PDF mặc định của bạn."
 defaultPdfEditorSet = "Đã là mặc định"
 defaultStartupView = "Chế độ xem mặc định khi khởi chạy"
 defaultStartupViewDescription = "Chọn tab sẽ hoạt động trong cột bên trái khi ứng dụng khởi động"
@@ -8817,9 +9771,18 @@ languageDescription = "Chọn ngôn ngữ hiển thị"
 logout = "Đăng xuất"
 setAsDefault = "Đặt làm mặc định"
 theme = "Chủ đề"
+themeAccent = "Màu nhấn"
+themeAccentCustom = "Màu tùy chỉnh"
+themeAccentCustomHint = "Tùy chỉnh (khuyến nghị dùng mặc định)"
+themeAccentDark = "Màu nhấn chế độ tối"
+themeAccentDefault = "Mặc định"
+themeAccentDefaultHint = "Giao diện mặc định (khuyến nghị)"
+themeAccentDescription = "Các nút, liên kết và phần tô sáng sẽ theo màu này, đồng thời tạo sắc thái nhẹ cho ứng dụng. Chế độ sáng và tối có màu riêng. Hệ thống sử dụng màu đang hoạt động."
+themeAccentLight = "Màu nhấn chế độ sáng"
 themeDark = "Tối"
 themeDescription = "Chuyển giữa chế độ sáng và tối"
 themeLight = "Sáng"
+themeReset = "Khôi phục giao diện về mặc định"
 themeSystem = "System"
 title = "Chung"
 user = "Người dùng"
@@ -8833,6 +9796,12 @@ intro = "Bật xác thực người dùng, quản lý nhóm và các tính năng
 learnMore = "Tìm hiểu thêm trong tài liệu"
 title = "Dành cho Quản trị viên Hệ thống"
 
+[settings.general.loginLanding]
+description = "Chọn ứng dụng sẽ mở khi bạn đăng nhập vào Stirling Cloud."
+editor = "Trình chỉnh sửa"
+processor = "Bộ xử lý"
+title = "Sau khi đăng nhập"
+
 [settings.general.mode]
 fullscreen = "Toàn màn hình"
 sidebar = "Thanh bên"
@@ -9041,6 +10010,11 @@ security = "Bảo mật"
 telegram = "Telegram"
 title = "Bảo mật & Xác thực"
 
+[settings.signOut]
+confirm = "Bạn có chắc chắn muốn đăng xuất không?"
+submit = "Đăng xuất"
+title = "Đăng xuất"
+
 [settings.team]
 title = "Nhóm"
 
@@ -9657,6 +10631,9 @@ uploadButton = "Tải lên máy chủ"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "nhấp vào đây"
+fallback = "Nếu không tự động mở,"
+opening = "Đang mở Swagger UI trong tab mới..."
 tags = "api,tài liệu,swagger,điểm cuối,phát triển"
 title = "Tài liệu API"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "Chọn tệp trong Tệp đang hoạt động để chạy c
 singleFileScope = "Chỉ áp dụng cho: {{fileName}}"
 viewerMode = "Chuyển sang trình chỉnh sửa tệp để chọn nhiều tệp."
 
+[toolFormat]
+ANY = "bất kỳ file nào"
+CBR = "kho truyện tranh (CBR)"
+CBZ = "kho truyện tranh (CBZ)"
+CSV = "file CSV"
+EBOOK = "sách điện tử"
+EMAIL = "email"
+EXCEL = "bảng tính"
+HTML = "trang web"
+IMAGE = "hình ảnh"
+JAVASCRIPT = "file JavaScript"
+JSON = "file JSON"
+MARKDOWN = "file Markdown"
+NONE = "không có file"
+PCL = "file in PCL"
+PDF = "PDF"
+PDF_ENCRYPTED = "PDF được bảo vệ bằng mật khẩu"
+POSTSCRIPT = "file PostScript"
+PPT = "bản trình bày"
+TEXT = "file văn bản"
+VIDEO = "video"
+WORD = "tài liệu Word"
+XML = "file XML"
+XPS = "tài liệu XPS"
+ZIP = "kho lưu trữ ZIP"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "Quay lại tất cả công cụ"
 collapse = "Thu gọn bảng"
 expand = "Mở rộng bảng"
 goBack = "Quay lại"
+pdfTools = "Công cụ PDF"
 placeholder = "Chọn một công cụ để bắt đầu"
 premiumFeature = "Tính năng Premium:"
+searchTools = "Tìm kiếm công cụ"
 toolsHeader = "Công cụ"
 viewAllTools = "Xem tất cả công cụ"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "Không tìm thấy công cụ"
 quickAccess = "TRUY CẬP NHANH"
 searchPlaceholder = "Tìm kiếm công cụ..."
 
-[toolPicker.categories]
-advancedTools = "Công cụ nâng cao"
-recommendedTools = "Công cụ đề xuất"
-standardTools = "Công cụ tiêu chuẩn"
-
 [toolPicker.subcategories]
 advancedFormatting = "Định dạng nâng cao"
 automation = "Tự động hóa"
@@ -9950,16 +10950,31 @@ title = "Người dùng"
 you = "(bạn)"
 
 [users.action]
+cancelInvite = "Hủy lời mời"
 deleteTeam = "Xóa đội"
 disableMfa = "Đặt lại MFA"
 move = "Chuyển sang đội"
 reinstate = "Khôi phục"
 remove = "Xóa khỏi tổ chức"
+removeTeam = "Xóa khỏi nhóm"
 rename = "Đổi tên đội"
 resetPw = "Đặt lại mật khẩu"
 suspend = "Đình chỉ"
 unlock = "Mở khóa tài khoản"
 
+[users.activity]
+daysAgo = "{{count}} ngày trước"
+hoursAgo = "{{count}} giờ trước"
+justNow = "Vừa xong"
+minutesAgo = "{{count}} phút trước"
+monthsAgo_one = "{{count}} tháng trước"
+monthsAgo_other = "{{count}} tháng trước"
+never = "Chưa bao giờ"
+weeksAgo_one = "{{count}} tuần trước"
+weeksAgo_other = "{{count}} tuần trước"
+yearsAgo_one = "{{count}} năm trước"
+yearsAgo_other = "{{count}} năm trước"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "Phê duyệt chính sách"
@@ -9967,11 +10982,14 @@ editor = "Editor"
 processor = "Processor"
 
 [users.confirm]
+cancelInviteBody = "Hủy lời mời đến {{email}}? Họ sẽ không thể tham gia bằng liên kết hiện tại."
+cancelInviteTitle = "Hủy lời mời"
 deleteTeamBody = "Xóa đội {{name}}? Trước tiên đội phải trống - hãy chuyển thành viên sang đội khác, và đội không được còn sở hữu bất kỳ cấu hình tích hợp nào."
 deleteTeamTitle = "Xóa đội"
 disableMfaBody = "Xóa đăng ký MFA của {{name}}? Họ sẽ thiết lập lại vào lần đăng nhập tiếp theo nếu được yêu cầu."
 disableMfaTitle = "Đặt lại MFA"
 removeBody = "Xóa vĩnh viễn {{name}} khỏi tổ chức? Không thể hoàn tác thao tác này."
+removeTeamBody = "Xóa {{name}} khỏi nhóm? Họ vẫn giữ tài khoản nhưng mất quyền truy cập vào tài nguyên của nhóm này."
 removeTitle = "Xóa thành viên"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "Tên người dùng"
 usernameError = "Tên người dùng phải có ít nhất 3 ký tự"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "Được mời bởi {{who}}"
+cancel = "Hủy"
+count = "{{count}} đang chờ"
+desc = "Những người đã được mời nhưng chưa tham gia. Họ giữ một chỗ cho đến khi chấp nhận."
+expiresInDays_one = "Hết hạn sau {{count}} ngày"
+expiresInDays_other = "Hết hạn sau {{count}} ngày"
+expiresToday = "Hết hạn hôm nay"
+title = "Lời mời đang chờ"
+
 [users.loadError]
 description = "Đã xảy ra lỗi khi kết nối tới backend, hoặc bạn không có quyền truy cập. Hãy thử lại."
 title = "Không thể tải thành viên"
@@ -10212,9 +11240,11 @@ title = "Tệp đính kèm"
 
 [viewer.bookmarks]
 bookmarkTitle = "Tiêu đề dấu trang"
+bookmarkTitleRequired = "Bắt buộc nhập tiêu đề dấu trang"
 closeSidebar = "Đóng thanh bên dấu trang"
 collapseAll = "Thu gọn tất cả dấu trang"
 expandAll = "Mở rộng tất cả dấu trang"
+searchPlaceholder = "Tìm kiếm dấu trang"
 
 [viewer.comments]
 addComment = "Thêm bình luận"
@@ -10605,30 +11635,6 @@ title = "Văn bản hình mờ"
 image = "Hình ảnh"
 text = "Văn bản"
 
-[wetSignature.tooltip]
-header = "Phương thức tạo chữ ký"
-
-[wetSignature.tooltip.draw]
-bullet1 = "Tùy chỉnh màu và độ dày bút"
-bullet2 = "Xóa và vẽ lại cho đến khi hài lòng"
-bullet3 = "Hoạt động trên thiết bị cảm ứng (máy tính bảng, điện thoại)"
-description = "Tạo chữ ký viết tay bằng chuột hoặc màn hình cảm ứng của bạn. Phù hợp nhất cho chữ ký cá nhân, chân thực."
-title = "Vẽ chữ ký"
-
-[wetSignature.tooltip.type]
-bullet1 = "Chọn từ nhiều phông chữ"
-bullet2 = "Tùy chỉnh kích thước và màu chữ"
-bullet3 = "Lý tưởng cho chữ ký tiêu chuẩn hóa"
-description = "Tạo chữ ký từ văn bản nhập. Nhanh và nhất quán, phù hợp cho tài liệu doanh nghiệp."
-title = "Nhập chữ ký"
-
-[wetSignature.tooltip.upload]
-bullet1 = "Hỗ trợ PNG, JPG và các định dạng ảnh khác"
-bullet2 = "Khuyến nghị nền trong suốt để có kết quả tốt nhất"
-bullet3 = "Hình ảnh sẽ được đổi kích thước để vừa vùng chữ ký"
-description = "Tải lên hình ảnh chữ ký đã tạo sẵn. Lý tưởng nếu bạn có chữ ký quét hoặc logo công ty."
-title = "Tải lên hình ảnh chữ ký"
-
 [workbenchBar]
 activeFiles = "Tệp đang mở"
 annotations = "Chú thích"
@@ -10652,6 +11658,7 @@ redact = "Bôi đen"
 rotateLeft = "Xoay trái"
 rotateRight = "Xoay phải"
 ruler = "Thước / Đo"
+rulerSettings = "Cài đặt tỷ lệ"
 save = "Lưu"
 saveAll = "Lưu tất cả"
 saveAs = "Lưu dưới dạng"
diff --git a/frontend/editor/public/locales/zh-BO/translation.toml b/frontend/editor/public/locales/zh-BO/translation.toml
index 603011afd5..fa47b98661 100644
--- a/frontend/editor/public/locales/zh-BO/translation.toml
+++ b/frontend/editor/public/locales/zh-BO/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "ཡིག་ཆབདམས་ཟིན།"
 font = "ཡིག་གཟུགས་ཌྷ"
 fontSizeTooltip = "页码文本的磅值大小。数值越大文本越大。"
 fontTypeTooltip = "页码的字体族。可根据文档风格选择。"
-genericSubmit = "ཕུལ་བཅོས།"
 green = "ལྗང་ཁུ།"
 help = "རོགས་རམ།"
-imgPrompt = "པར་རིས་འདེམས་རོགས།"
 incorrectPasswordMessage = "ད་ལྟའི་གསང་ཚིག་ནོར་འདུག"
 info = "ཆ་འཕྲིན།"
 invalidUndoData = "无法撤销：操作数据无效"
@@ -62,7 +60,6 @@ loginAgreementTitle = "登录协议"
 logOut = "退出登录"
 marginTooltip = "页码与页面边缘之间的距离。"
 moreOptions = "更多选项"
-multiPdfPrompt = "PDF གཉིས་ཡན་འདེམས་རོགས།"
 never = "从不"
 no = "མིན།"
 noFileSelected = "未选择文件。请上传一个。"
@@ -80,7 +77,6 @@ pageOrderPrompt = "ཤོག་ངོས་གོ་རིམ་རང་སྒ
 pages = "ཤོག་ངོས་ཁག"
 pageSelectionPrompt = "ཤོག་ངོས་འདེམས་སྒྲུག（ཤོག་གྲངས་ཀྱི་ཐོ་གཞུང་ 1,5,6 འམ་རྩིས་རྒྱག་བྱེད་ཐབས་ 2n+1 ལྟ་བུ་འཇུག་རོགས།）"
 password = "གསང་ཚིག།"
-pdfPrompt = "PDF འདེམས་རོགས།"
 pin = "固定文件（工具运行后保持活动）"
 pro = "ཆེད་ལས།"
 processingComplete = "您的文件已准备就绪。"
@@ -356,6 +352,7 @@ text = "这些权限控制用户对 PDF 的操作。与所有者密码结合使
 title = "更改权限"
 
 [addStamp]
+preview = "预览印章"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "手动下载：点击链接并将文件放入 tessdata 文件夹
 noLanguages = "在已配置的目录中未找到 tessdata 语言。"
 permissionNotice = "tessdata 路径不可写。下载将会在浏览器中打开；请将 .traineddata 文件手动保存到 tessdata 文件夹中。"
 
+[admin.settings.ai.documents]
+description = "配置用于回答文档问题的嵌入模型和检索设置。保存后应用到 AI 引擎。"
+title = "文档与 RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "留空以使用引擎自身的环境凭据。适用于自托管的单引擎部署。"
+generic = "嵌入 API key"
+openai = "OpenAI API key"
+setPlaceholder = "已保存 - 留空以保留当前 key"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI 兼容 / Ollama 嵌入端点的基础 URL，例如 http://ollama:11434/v1。必须指向受信任的内部端点（SSRF 敏感）。"
+label = "嵌入基础 URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "嵌入模型名称。自由文本；建议仅作提示。"
+label = "嵌入模型"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "用于将文档文本转换为向量嵌入的提供商。"
+label = "嵌入提供商"
+
+[admin.settings.ai.documents.maxSearches]
+description = "代理每个请求可运行的最大检索搜索次数。"
+label = "最大搜索次数"
+
+[admin.settings.ai.documents.reindexNote]
+body = "更改嵌入模型会立即生效，但使用先前模型建立索引的文档必须重新建立索引，搜索才能返回正确结果。"
+title = "需要重新建立索引"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "如果你更改了嵌入模型，请重新索引现有文档，以便搜索使用新模型。"
+
+[admin.settings.ai.documents.topK]
+description = "每次搜索检索的最相关片段数量。"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "将 Stirling 连接到 Python AI 引擎，并选择公开哪些 AI 功能。更改将在重启后应用。"
+title = "AI 引擎"
+
+[admin.settings.ai.general.capabilities]
+description = "开启或关闭单个 AI 功能。禁用的功能会在应用中隐藏。"
+title = "功能"
+
+[admin.settings.ai.general.enabled]
+description = "总开关。关闭时，AI 工具、代理或引擎调用均不可用。"
+label = "启用 AI"
+
+[admin.settings.ai.general.features.chat]
+description = "用于处理 PDFs 的对话助手。"
+label = "聊天助手"
+
+[admin.settings.ai.general.features.classify]
+description = "按类型或内容自动分类文档。"
+label = "文档分类"
+
+[admin.settings.ai.general.features.createPdf]
+description = "通过 AI 代理生成新的 PDF（例如从 HTML）。"
+label = "从提示创建 PDF"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "提出问题并获得基于上传文档的回答。"
+label = "文档问答"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "检查文档中的数学和数值错误。"
+label = "数学审计器"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "向 PDF 添加由 AI 编写的审阅评论和注释。"
+label = "PDF 评论代理"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "较重的代理操作（如文档生成）的超时时间。"
+label = "长时间运行超时（秒）"
+
+[admin.settings.ai.general.note]
+body = "AI 引擎作为单独服务运行。其共享密钥"
+body2 = "通过容器环境变量设置。提供商 API key 可在这些页面输入，或作为引擎环境变量提供；此处输入的 key 会在保存时推送到引擎。"
+title = "关于 AI 引擎"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "流式（逐 token）聊天响应的超时时间。"
+label = "流超时（秒）"
+
+[admin.settings.ai.general.test]
+button = "测试连接"
+failBody = "AI 引擎未响应。请检查 URL、引擎容器是否正在运行，以及 AI 是否已启用（启用后需要重启）。"
+failTitle = "AI 引擎无法访问"
+okBody = "AI 引擎响应了健康检查。"
+okTitle = "AI 引擎可访问"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "发送到引擎的标准 AI 请求的超时时间。"
+label = "请求超时（秒）"
+
+[admin.settings.ai.general.url]
+description = "Python AI 引擎的内部 URL，例如 http://stirling-pdf-engine:5001。"
+label = "AI 引擎 URL"
+
+[admin.settings.ai.limits]
+description = "限制 AI 请求可执行的工作量以及并发运行数量。保存后应用到 AI 引擎。"
+title = "限制与性能"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "保护限制：拒绝提取文本超过此长度的 AI 请求。"
+label = "每个请求的最大字符数"
+
+[admin.settings.ai.limits.maxPages]
+description = "保护限制：拒绝超过此 PDF 页数的 AI 请求。"
+label = "每个请求的最大页数"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "整个引擎中同时进行的模型调用最大数量。"
+label = "模型最大并发数"
+
+[admin.settings.ai.models]
+description = "选择 AI 引擎使用的 LLM 提供商以及智能/快速模型。保存后应用到 AI 引擎。"
+title = "模型与提供商"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "留空以使用引擎自身的环境凭据。适用于自托管的单引擎部署。"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "已保存 - 留空以保留当前 key"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI 兼容 / Ollama 端点的基础 URL，例如 http://ollama:11434/v1。"
+label = "提供商基础 URL"
+warning = "基础 URL 必须指向受信任的内部端点。引擎会向其发起服务器端请求，因此不受信任的值具有 SSRF 风险。"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "快速模型的最大输出 tokens。"
+label = "快速模型最大 tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "用于轻量任务的更便宜、更快的模型。自由文本；建议仅作提示。"
+label = "快速模型"
+
+[admin.settings.ai.models.provider]
+description = "引擎连接的 LLM 提供商。"
+label = "提供商"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "智能模型的最大输出 tokens。"
+label = "智能模型最大 tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "用于复杂推理的高能力模型。自由文本；建议仅作提示。"
+label = "智能模型"
+
+[admin.settings.ai.saved]
+body = "更改会自动推送到 AI 引擎。"
+bodyNoPush = "设置已保存。下次 AI 引擎获取其配置时将应用这些设置。"
+title = "AI 设置已保存"
+
 [admin.settings.badge]
 clickToUpgrade = "点击查看方案详情"
 
@@ -938,6 +1094,25 @@ label = "启动时重新生成"
 description = "证书有效的天数"
 label = "证书有效期（天）"
 
+[admin.settings.folderAccess]
+description = "允许文件夹源和文件夹输出读取和写入的目录。这是安全边界：自动化永远不能指向此列表之外的服务器路径。"
+securityNote = "留空可完全禁用文件夹源和输出。Stirling 自身的配置目录始终禁止访问。"
+title = "文件夹访问"
+
+[admin.settings.folderAccess.implied]
+description = "这些由 Stirling 管理的目录始终被允许，且无法在此处更改。"
+serverStorage = "服务器文件存储"
+title = "始终允许"
+watchedFolder = "流水线监视文件夹"
+
+[admin.settings.folderAccess.roots]
+add = "添加"
+empty = "未允许任何文件夹。文件夹源和输出当前已禁用。"
+hint = "输入绝对路径，例如 /data/inbox。"
+label = "允许的文件夹根目录"
+placeholder = "/data/inbox"
+remove = "移除文件夹根目录"
+
 [admin.settings.general]
 description = "配置全局应用设置，包括品牌和默认行为。"
 system = "系统"
@@ -1842,6 +2017,15 @@ export = "导出"
 accessDenied = "拒绝访问"
 insufficientPermissions = "你没有执行此操作的权限。"
 
+[auth.callback]
+completing = "正在完成身份验证"
+invalidToken = "OAuth 登录失败 - token 无效。"
+missingToken = "OAuth 登录失败 - 未收到 token。"
+oauthFailed = "OAuth 登录失败。请重试。"
+pleaseWait = "请稍候，我们正在完成登录。"
+signedOut = "你已退出登录。请重新登录。"
+windowMayClose = "完成后你可以关闭此窗口。"
+
 [auth.displayName]
 guest = "访客"
 user = "用户"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "通过移除可能的恶意内容（如 JavaScript 和嵌
 description = "此工具将根据内容自动重命名 PDF 文件。它会分析文档以从文本中找到最合适的标题。"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "自动旋转"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "置信度阈值"
+
+[autoRotate.detectionMode]
+auto = "自动"
+osd = "仅 OCR"
+text = "仅文本"
+title = "检测方法"
+
+[autoRotate.error]
+failed = "自动旋转 PDF 时发生错误。"
+
+[autoRotate.inferUndetected]
+title = "旋转低置信度页面以匹配"
+
+[autoRotate.report]
+applied = "{{degrees}}° 顺时针"
+confidenceValue = "置信度 {{value}}"
+noChange = "无更改"
+pageLabel = "第 {{number}} 页"
+summary = "已旋转 {{rotated}} / {{total}} 页，{{unchanged}} 页保持原样"
+title = "检测报告"
+
+[autoRotate.report.method]
+inferred = "已匹配"
+none = "已跳过"
+osd = "OCR"
+text = "文本"
+
+[autoRotate.report.note]
+belowThreshold = "低于阈值"
+blankPage = "页面为空白"
+inferredFromDocument = "与其他页面相同"
+noDominantDirection = "文本方向混合"
+osdFailed = "未找到可读文本"
+osdNoVerdict = "无法判断朝向"
+tesseractUnavailable = "OCR 未安装"
+tooFewGlyphs = "文本过少"
+
+[autoRotate.results]
+title = "自动旋转结果"
+
+[autoRotate.settings]
+title = "设置"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "在旋转页面前检测结果需要达到的确定程度。降低它可旋转更多页面，提高它可让更多页面保持不变。"
+title = "置信度阈值"
+
+[autoRotate.tooltip.description]
+text = "判断每页应朝向哪一边，并将其旋转到正确方向。已正向的页面会保持不变。"
+
+[autoRotate.tooltip.detectionMode]
+text = "自动会先读取页面文本，如果不够，再将页面作为图像检查。仅文本会跳过图像检查，对于从未扫描过的文档最快。仅 OCR 会将每页都视为图像。"
+title = "检测方法"
+
+[autoRotate.tooltip.header]
+title = "自动旋转"
+
+[autoRotate.tooltip.inferUndetected]
+text = "空白或近乎空白的页面无法单独检查。当所有可读取页面都需要相同旋转时，这些页面也会旋转以匹配它们。"
+title = "旋转低置信度页面以匹配"
+
 [autoSizeSplitPDF]
 tags = "pdf,ཁ་གྱེས།,ཡིག་ཆ།,གོ་སྒྲིག"
 
@@ -2189,33 +2440,6 @@ keywords = "关键字：odd, even"
 numbers = "数字/范围：5, 10-20"
 progressions = "等差式：3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "证书类型"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "由系统管理员管理"
-bullet2 = "在授权用户间共享"
-bullet3 = "代表公司身份，而非个人"
-bullet4 = "适用于：正式文档、团队签名"
-description = "您的组织提供的共享证书。用于公司范围的签署授权。"
-title = "组织证书"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "首次使用时自动生成"
-bullet2 = "与您的用户账号绑定"
-bullet3 = "不能与其他用户共享"
-bullet4 = "适用于：个人文档、个人责任追溯"
-description = "为您的用户账号自动生成且唯一的证书。适用于个人签名。"
-title = "个人证书"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "需要 P12/PFX 文件和密码"
-bullet2 = "可由外部 CA 机构签发"
-bullet3 = "对法律文档具有更高信任级别"
-bullet4 = "适用于：具有法律效力的合同、外部验证"
-description = "使用您自己的 PKCS#12 证书文件。可完全控制证书属性。"
-title = "上传自定义 P12"
-
 [certSign]
 awaitingSignatures = "等待签署"
 chooseCertificate = "选择证书文件"
@@ -2542,34 +2766,6 @@ server = "服务器"
 stepTitle = "证书来源"
 upload = "上传"
 
-[certSign.tooltip.header]
-title = "关于签名管理"
-
-[certSign.tooltip.overview]
-bullet1 = "检查现有签名及其有效性"
-bullet2 = "查看签名者和证书的详细信息"
-bullet3 = "添加新的数字签名以保护文档"
-bullet4 = "支持多个文件并提供便捷导航"
-text = "此工具可检查您的 PDF 是否已数字签名，并添加新的数字签名。数字签名可证明谁创建或批准了文档，并显示自签名后是否被更改。"
-title = "此工具能做什么？"
-
-[certSign.tooltip.signing]
-bullet1 = "支持 PEM、PKCS12、JKS 和服务器证书格式"
-bullet2 = "可选择在 PDF 上显示或隐藏签名"
-bullet3 = "可添加原因、地点和签名者姓名"
-bullet4 = "选择放置可见签名的页面"
-bullet5 = "使用服务器证书以使用简单的“Sign with Stirling-PDF”选项"
-text = "要签署 PDF，您需要数字证书（如 PEM、PKCS12 或 JKS）。您可以选择让签名在文档中可见或仅用于安全而保持不可见。"
-title = "添加签名"
-
-[certSign.tooltip.validation]
-bullet1 = "显示签名是否有效或无效"
-bullet2 = "显示签名者信息和签署日期"
-bullet3 = "检查文档是否在签名后被修改"
-bullet4 = "可使用自定义证书进行验证"
-text = "在检查签名时，工具会告诉您它们是否有效、谁签署了文档、签署时间，以及文档在签名后是否已被更改。"
-title = "检查签名"
-
 [changeCreds]
 changeUsername = "更新您的用户名。更新后您将被登出。"
 credsUpdated = "账户已更新"
@@ -2824,6 +3020,7 @@ next = "下一步"
 preview = "预览"
 previous = "上一步"
 refresh = "刷新"
+remaining = "剩余"
 retry = "重试"
 save = "保存"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog 分析"
 scarf = "Scarf 像素"
 
-[credits.modal]
-advancedMonitoring = "高级监控"
-allInOneWorkspace = "一体化 PDF 工作空间（查看器、工具与代理）"
-apiSandbox = "API 沙盒"
-dedicatedSupportSlas = "专属支持与 SLA"
-fasterThroughput = "10 倍吞吐速度"
-fullyPrivateFiles = "完全私有的文件"
-largeFileProcessing = "大文件处理"
-orgWideAccess = "组织范围的访问控制"
-premiumAiModels = "高级 AI 模型"
-prioritySupport = "优先支持"
-privateDocCloud = "私有文档云"
-ragFineTuning = "RAG + 微调"
-secureApiAccess = "安全的 API 访问"
-standardThroughput = "标准吞吐"
-unlimitedApiAccess = "无限 API 访问"
-unlimitedSeats = "无限席位"
-
 [crop]
 autoCrop = "自动裁剪空白"
 noFileSelected = "选择一个 PDF 文件开始裁剪"
@@ -3346,6 +3525,7 @@ message = "设置默认 PDF 处理程序失败"
 title = "错误"
 
 [defaultApp.prompt]
+dontRemind = "不再提醒我"
 message = "将 Stirling PDF 设为打开 PDF 的默认应用。"
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "自定义分组"
 dropHint = "打开文件以开始"
 dropToAdd = "Drop files to add"
 expand = "展开侧边栏"
-files = "文件"
 googleDrive = "Google Drive"
 googleDriveDisabled = "未配置 Google Drive"
 leaveMyFiles = "离开我的文件"
+library = "PDF 库"
 myFiles = "我的文件"
 noFiles = "尚无文件"
 openFileManager = "打开文件管理器"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "添加"
-addLabel = "添加标签…"
-categoryIconAria = "为 {{name}} 选择图标"
-createCategory = "创建类别"
-delete = "删除类别"
 done = "完成"
-hide = "隐藏类别"
-newCategory = "新类别名称…"
-removeLabel = "移除 {{name}}"
-rename = "重命名"
 reset = "重置为默认值"
-search = "搜索标签…"
-show = "显示类别"
 subtitle = "将文件归入父类别。向类别添加现有或新标签、重命名类别，或创建自己的类别。不属于任何类别的文件会显示在“其他”下。"
 title = "侧边栏类别"
 
@@ -3808,6 +3977,7 @@ refresh = "从服务器刷新"
 remove = "删除"
 removeVersion = "移除此版本"
 rename = "重命名"
+renamed = "已重命名"
 renameFolder = "重命名文件夹"
 resizeFolderTree = "调整文件夹树大小（方向键，按住 Shift 为更大步长；双击自动适配）"
 save = "保存"
@@ -3910,9 +4080,7 @@ count = "文件"
 folder = "文件夹"
 labels = "标签"
 modified = "修改时间"
-name = "名称"
 size = "大小"
-toolHistoryAtVersion = "累积工具链"
 totalSize = "总大小"
 type = "类型"
 versionHistory = "版本历程"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "全部已保存"
+extractCsvError = "提取 CSV 失败"
+extractXlsxError = "提取 XLSX 失败"
 flattenAfterFilling = "填写后扁平化"
+requiredAbbreviation = "必填"
+requiredFieldsError = "请填写所有必填字段"
 rescanFields = "重新扫描字段"
 rescanFormFields = "重新扫描表单字段"
 save = "保存"
+saveShortcut = "Ctrl+S 保存"
+unsavedChanges = "未保存的更改"
 
 [formFill.sidebar]
 close = "关闭侧边栏"
@@ -4309,6 +4484,11 @@ desc = "根据检测到的页眉自动重命名 PDF 文件"
 tags = "自动检测,基于页眉,组织,重命名"
 title = "自动重命名 PDF 文件"
 
+[home.autoRotate]
+desc = "检测每页方向并自动旋转为正向。"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "自动旋转"
+
 [home.autoSizeSplitPDF]
 tags = "自动,拆分,大小"
 title = "按大小/页数自动拆分"
@@ -4608,13 +4788,13 @@ hint = "上传 PNG、JPG、SVG 或其他图像文件以放置到 PDF 上。SVG 
 label = "上传图片"
 placeholder = "选择图片文件"
 
-[imageToPdf]
-tags = "བསྒྱུར་བ།,པར་རིས།,jpg,པར།,འདྲ་པར།"
-
 [imageToPDF]
 header = "པར་རིས་ནས་ PDF ལ།"
 title = "པར་རིས་ནས་ PDF ལ།"
 
+[imageToPdf]
+tags = "བསྒྱུར་བ།,པར་རིས།,jpg,པར།,འདྲ་པར།"
+
 [infoBanner]
 dismiss = "关闭"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "您已收到邀请！"
 
 [landing]
 addFiles = "添加文件"
-heroSubtitle = "拖入或添加现有 PDF 以开始。"
 mobileUpload = "从手机上传"
 openFromComputer = "从电脑打开"
 uploadFromComputer = "从电脑上传"
-workbenchEmptyStateHero = "将 PDF 拖放到任意位置"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "登录"
 magicLinkSent = "魔法链接已发送至 {{email}}！请检查邮箱并点击链接登录。"
 mfaCode = "身份验证代码"
 mfaRequired = "需要双重身份验证代码"
+noAccount = "没有账户？"
 or = "或"
 password = "密码"
 passwordChangedSuccess = "密码修改成功！请使用新密码登录。"
@@ -4715,26 +4894,10 @@ signInWith = "使用以下方式登录"
 title = "�ང་འཛུལ།"
 unexpectedError = "意外错误：{{message}}"
 updatePassword = "更新密码"
-useEmailInstead = "使用邮箱登录"
 useMagicLink = "改用魔法链接"
 username = "用户名"
 youAreLoggedIn = "您已登录！"
 
-[login.slides.edit]
-alt = "编辑 PDF"
-subtitle = "十余种工具助您涂黑、签名、阅读与处理 PDF，满足您的各种需求。"
-title = "编辑 PDF 以展示或保护您想要的信息"
-
-[login.slides.overview]
-alt = "Stirling PDF 概览"
-subtitle = "以隐私为先的 PDF 云套件，支持转换、签名、涂黑和管理文档，并提供 50+ 款强大工具。"
-title = "满足您所有 PDF 需求的一站式工具。"
-
-[login.slides.secure]
-alt = "保护 PDF"
-subtitle = "轻松添加密码、涂黑内容并管理证书。"
-title = "保护 PDF 中的敏感信息"
-
 [margin]
 large = "大"
 medium = "中"
@@ -4976,6 +5139,7 @@ pinButton = "如果您希望在运行工具后文件保持活动状态，可以
 results = "工具运行完成后，<strong>审阅</strong> 步骤将在此面板显示结果预览，并允许您撤销操作或下载文件。 "
 runButton = "配置好工具后，此按钮允许您对所有选中的 PDF 运行该工具。"
 selectCropTool = "让我们选择 <strong>裁剪</strong> 工具来演示如何使用其中一个工具。"
+stepOf = "第 {{current}} 步，共 {{total}} 步"
 toolInterface = "这是 <strong>裁剪</strong> 工具界面。如您所见，因为我们还没有添加任何要处理的 PDF 文件，所以这里内容不多。"
 workbench = "这是 <strong>工作台</strong> - 查看和编辑您的 PDF 的主区域。"
 wrapUp = "一切就绪！您已了解应用的主要区域及其用法。随时点击 <strong>帮助</strong> 按钮再次查看此导览。"
@@ -4988,6 +5152,26 @@ showMeAround = "带我看看"
 skipForNow = "暂时跳过"
 skipTheTour = "跳过引导"
 
+[onboarding.checklist]
+dismiss = "关闭"
+title = "设置 Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "在你的机器上原生运行 Stirling"
+title = "下载 Stirling 桌面版"
+
+[onboarding.checklist.inviteTeam]
+description = "与你的团队协作"
+title = "邀请团队成员"
+
+[onboarding.checklist.shareAnalytics]
+description = "帮助改进 Stirling"
+title = "分享匿名使用数据"
+
+[onboarding.checklist.takeTour]
+description = "通过快速演示了解 Stirling 的工作方式"
+title = "开始导览"
+
 [onboarding.desktopInstall]
 body = "Stirling 作为桌面应用效果最佳。可离线使用、更快访问文档，并在本机进行编辑。"
 selectOs = "选择操作系统"
@@ -4996,7 +5180,21 @@ titleWithOs = "适用于 {{osLabel}} 的下载"
 
 [onboarding.mfa]
 authenticationCode = "验证码"
+description = "通过关联身份验证器应用来保护你的账户。扫描 QR code 或输入设置 key，然后确认 6 位代码以完成。"
+enable = "启用 MFA"
+enableError = "无法启用双因素身份验证。请检查代码并重试。"
+enterCode = "输入来自应用的 6 位代码。"
+enterCodeError = "请输入身份验证代码以继续。"
+logout = "退出登录"
+openAuthenticator = "打开 Google Authenticator、Authy 或 1Password。"
 qrCodeLoading = "正在生成你的 QR 码…"
+regenerateQrCode = "重新生成 QR code"
+scanQrCode = "扫描 QR code 或输入下方的设置 key。"
+setupError = "无法开始双因素设置。请重试。"
+setupKey = "设置 key（手动输入）"
+stepByStep = "逐步说明"
+success = "MFA 已启用。你现在可以继续。"
+title = "多因素身份验证设置"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "启用登录模式后，您可以管理用户、配置设置并监控服务器健康状况。服务器上的前 <strong>{{freeTierLimit}}</strong> 位用户可免费使用 Stirling。"
@@ -5005,6 +5203,11 @@ adminTitle = "管理员概览"
 userBody = "邀请队友、分配角色，并在一个安全的工作区中整理文档。准备扩大规模时，可随时启用登录模式。"
 userTitle = "方案概览"
 
+[onboarding.processorIntro]
+body = "Stirling 现在运行 <strong>策略</strong> — 自动化规则会在每个文档到达时对其分类、保护并处理。在 <strong>处理器</strong> 中设置并监控运行。"
+cta = "查看处理器"
+title = "查看 Stirling 处理器"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "预付年度"
+
+[payg.prepaid.banner]
+exhausted = "你的预付容量已用完；按量计费已恢复。充值以保留折扣。"
+expiring_one = "你的预付年度将在 {{count}} 天后结束。未使用容量将过期 — 充值以开始新的年度。"
+expiring_other = "你的预付年度将在 {{count}} 天后结束。未使用容量将过期 — 充值以开始新的年度。"
+low = "你的预付容量已降至 {{pct}}%。可随时充值以保持处理不中断。"
+
+[payg.prepaid.card]
+subtitle = "在按量计费之前使用，且不计入你的支出上限。"
+title = "预付容量"
+
+[payg.prepaid.meter]
+capSuffix = "共 {{total}} 预付 credits"
+expires = "{{date}} 过期"
+
+[payg.prepaid.state]
+exhausted = "已用完"
+healthy = "剩余充足"
+low = "即将用完"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "粘贴您邮件中的许可证密钥"
 success = "许可证已激活！"
 successMessage = "您的许可证已成功激活。您现在可以关闭此窗口。"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "已强制执行"
-enforcing = "正在强制执行…"
-failed = "强制执行失败"
 outputsUnavailable = "策略输出已无法下载。"
 partialOutputsUnavailable = "部分策略输出已无法下载。"
-retrying = "忙碌，正在重试…"
 runNotFound = "该次强制执行运行已无法找到。"
-step = "步骤 {{current}}/{{total}}"
 timedOut = "在运行完成前强制执行已超时。"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "关闭"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "正在应用 {{names}}"
 applyingProgress = "正在应用 {{names}}（{{done}}/{{total}}）"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} 个文件中有 {{failures}} 个无法处理，已原
 failureTitle = "未完全强制执行即导出"
 printPolicyAppliedBody = "此 PDF 已为满足策略而更新。请检查更改后再打印。"
 printPolicyAppliedTitle = "打印前已应用策略"
-queued = "+{{count}} 已排队"
 successTitle = "{{names}} 已应用"
 summaryMore = "{{first}}、{{second}} 以及另外 {{more}} 个"
 summaryTwo = "{{first}} 和 {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "转换前强制执行"
-default = "正在强制执行"
-export = "导出前强制执行"
-input = "导入时强制执行"
-print = "打印前强制执行"
-
-[policies.field]
-accessLog = "访问日志"
-archiveAfter = "在此之后归档"
-auditTrail = "审计跟踪"
-belowThreshold = "低于阈值"
-destination = "目标位置"
-frameworks = "框架"
-immutableHold = "不可变保留"
-keepFor = "保留时长"
-minConfidence = "最低置信度"
-notify = "路由时通知"
-onViolation = "不合规时"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "添加"
-addPlaceholder = "添加标签…"
-customNote = "已为您的团队自定义。"
-defaultNote = "正在使用内置默认值，与您的团队共享。"
-duplicate = "\"{{name}}\" 已存在。"
-edit = "编辑标签"
-empty = "还没有标签。"
-export = "导出 JSON"
-iconAria = "为 {{name}} 选择图标"
-import = "导入 JSON"
-importError = "无法导入该文件。"
-managedNote = "团队标签由您的团队负责人管理。"
-modalSubtitle = "与整个团队共享。分类器会为每个文档选择合适的标签。"
-modalTitle = "分类标签"
-pickIcon = "使用 {{label}} 图标"
-removeAria = "移除 {{name}}"
-resetToDefault = "重置为默认值"
-saveForTeam = "为团队保存"
-saving = "正在保存…"
-sectionLabel = "分类标签"
-startFromScratch = "从头开始"
-teamCount = "团队标签"
-tooLong = "标签最多可包含 {{max}} 个字符。"
-ungrouped = "未分组"
-view = "查看标签"
+categoryCount = "类别"
+hideCategory = "隐藏类别"
+labelCount = "标签"
+sharedNote = "这些标签是内置的，并在整个团队中共享。"
+showCategory = "显示类别"
 
 [policies.pii]
 account = "已标注的账户号码"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "美国银行路由号码（ABA）"
 ssn = "社会安全号码"
 
-[policies.settings]
-noneExport = "当前没有在导出时运行的策略。"
-noneUpload = "当前没有在上传时运行的策略。"
-onExport = "导出时"
-onUpload = "上传时"
-reorderHandle = "拖动以重新排序"
-runOrderDesc = "当多个策略在同一触发器上运行时，它们会按此顺序运行——每个策略都基于上一个策略的输出。拖动以重新排序。"
-title = "策略设置"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "策略选项"
-policySettings = "策略设置"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "重试失败的策略 ({{count}})"
-rowProgress = "已处理 {{completed}} / {{total}} 个文件"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "什么是策略？"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "自动查找并涂黑敏感信息（如社会安全号码和卡号），使其在文档中不可阅读。"
-sanitize = "从文件中移除隐藏的 JavaScript，防止有人打开时自动运行任何内容。"
-watermark = "在每一页加盖可见标记（例如“机密”）。"
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "关闭"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} 正在执行..."
 badgeRan = "{{name}} 策略已在此文件上运行"
+badgeRunning = "{{name}} 正在运行..."
 blockingAction = "执行策略时已阻止 {{action}}，请稍候..."
 dismiss = "关闭覆盖层"
 enforcingTitle = "正在执行策略..."
@@ -6151,6 +6211,7 @@ viewAnyway = "查看文件（策略仍在执行）"
 [policyOption]
 autoRedactPhi = "自动遮盖 PHI"
 blockExport = "阻止导出"
+ccpa = "CCPA"
 contracts = "合同"
 documents = "文档"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor 方案"
 subscribed = "Processor 方案"
 unlinked = "未链接"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "从文档引导创建"
-sectionsAriaLabel = "智能体构建器部分"
-selectorAriaLabel = "智能体"
-subtitle = "设计、测试并发布用于分类、提取和路由文档的 AI 智能体。定义场景，限制工具访问，运行黄金集，并发布版本。"
-title = "智能体构建器"
-
-[portal.agentBuilder.bootstrap]
-cancel = "取消"
-dropzoneText = "选择示例文档（PDF 或图像）"
-lead = "放入一个示例文档，我们将提出场景和可供您完善的提取架构。在您审核之前，不会发布任何内容。"
-submit = "引导创建智能体"
-subtitle = "从一个代表性文件初始化新智能体"
-title = "从文档引导创建"
-
-[portal.agentBuilder.empty]
-description = "从示例文档引导创建智能体，以初始化其场景和提取架构，然后进行完善和发布。"
-title = "还没有智能体"
-
-[portal.agentBuilder.evals]
-casesPassing = "通过的用例"
-columnCase = "评估用例"
-columnLatency = "延迟"
-columnResult = "结果"
-fail = "失败"
-goldenSetPassRate = "黄金集通过率"
-latencyMs = "{{ms}} ms"
-notRun = "未运行"
-pass = "通过"
-passRate = "通过率"
-runEvals = "运行评估"
-
-[portal.agentBuilder.evals.empty]
-description = "评估会将您的场景转换为可重复的黄金集。升级后可随时间捕获通过率，并将其作为发布门禁。"
-title = "还没有黄金集"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "跨黄金集"
-activeAgents = "活跃智能体"
-avgPassRate = "平均评估通过率"
-fleetWide = "全局范围"
-latestPublished = "最新发布"
-scenarios = "场景"
-testCases = "测试用例"
-totalDescription_one = "共 {{count}} 个"
-totalDescription_other = "共 {{count}} 个"
-
-[portal.agentBuilder.scenarios]
-add = "添加"
-addScenario = "添加场景"
-enable = "启用"
-expectationLabel = "预期行为"
-expectationPlaceholder = "智能体应执行的操作"
-inEval = "在评估中"
-mute = "静音"
-muted = "已静音"
-nameLabel = "名称"
-namePlaceholder = "例如 合规升级"
-
-[portal.agentBuilder.tabs]
-evals = "评估"
-scenarios = "场景"
-tools = "工具"
-versions = "版本"
-
-[portal.agentBuilder.tools]
-broadAccess = "广泛访问"
-deniedHint = "所选工具已被阻止。其他所有工具仍可调用。"
-deniedTools = "被拒绝的工具"
-governanceGate = "工具治理在 Enterprise 方案中可用。"
-restricted = "受限"
-restrictedAccess = "受限工具访问"
-restrictedDescription = "允许所有工具，除了您在下方拒绝的工具。"
-
-[portal.agentBuilder.versions]
-current = "当前"
-historyGate = "完整版本历史记录和回滚在 Enterprise 方案中可用。"
-publish = "发布"
-rollBack = "回滚"
-
 [portal.assistant]
 close = "关闭助手"
 error = "无法连接到助手。"
@@ -6365,9 +6346,21 @@ typing = "正在输入"
 loading = "正在加载"
 redirectingToEditor = "正在重定向到编辑器..."
 
+[portal.billing.activation]
+maybeLater = "稍后再说"
+title = "启用处理器"
+
+[portal.billing.activation.payg]
+sub = "设置月度限额。按实际运行量付费。"
+title = "按量付费"
+
+[portal.billing.activation.prepay]
+badge = "免费 2 个月"
+sub = "一张发票，可用银行卡或银行转账。"
+title = "预付一年"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function 未返回 client_secret。"
-subtitle = "添加银行卡以在免费 Editor 方案额度用完后继续使用。其余由 Stripe 处理。"
 title = "启用 Processor 方案"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "您的付款已成功，但激活时间比平时稍长。它会自动启
 close = "关闭"
 title = "即将完成"
 
+[portal.billing.checkout.cap]
+amountAria = "月度支出限额"
+back = "返回"
+continue = "继续付款"
+error = "无法设置你的支出限额"
+finePrint = "发票按月开具。可随时取消。"
+noLimit = "无限制"
+note = "你的账单永远不会超过限额。处理会暂停。"
+perMonth = "/月"
+title = "设置你的支出限额"
+
+[portal.billing.checkout.card]
+fields = "卡号 · MM / YY · CVC · ZIP"
+label = "银行卡详情"
+note = "银行卡详情由 Stripe 收集。Stirling 从不存储 PAN 或 CVC。"
+
 [portal.billing.checkout.error]
 title = "无法开始结账"
 
@@ -6383,10 +6392,9 @@ body = "您的付款已完成。我们正在您的已链接实例上启用按量
 hint = "请保持此窗口打开。"
 title = "正在激活您的 Processor 方案..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "在门户 env 中以启用应用内结账。"
-bodyBefore = "设置"
-title = "未配置 Stripe"
+[portal.billing.checkout.pay]
+limit = "月度支出限额 {{amount}}/月。达到限额时处理会暂停。"
+limitNoCap = "无支出限额。处理不会暂停。发票按月开具。"
 
 [portal.billing.enterpriseUpsell]
 cta = "创建您的 Enterprise 报价"
@@ -6409,10 +6417,12 @@ currentPlan = "当前方案"
 freeForever = "永久免费"
 noTeamResolved = "您的钱包尚未解析到团队——请刷新后重试。"
 ownerOnly = "只有团队所有者可以启用 Processor 方案。"
+payInvoice = "支付发票以完成"
 planName = "Editor"
 ssoIncluded = "包含 SSO"
 switchOnProcessor = "启用 Processor →"
 unlimitedUsers = "无限用户"
+viewQuote = "查看报价"
 
 [portal.billing.invoices]
 columnAmount = "金额"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "直接 API 请求"
 segmentApiLabel = "API"
 segmentAutomationDesc = "自动化和流水线"
 segmentAutomationLabel = "自动化"
+sizeMultiplier = "{{formatted}} PDFs 使用了大小倍数"
+summary = "{{unique}} 唯一 · {{units}} 计量单位 · 每个 PDF 平均 {{avg}}"
+summaryNoRate = "{{unique}} 唯一 · {{units}} 计量单位"
 unit = "按量 PDFs"
+unitsPending_one = "{{units}} 个计量单位正在等待从关联实例同步"
+unitsPending_other = "{{units}} 个计量单位正在等待从关联实例同步"
+
+[portal.billing.prepaid]
+capSuffix = "共 {{total}} 预付 credits"
+expires = "{{date}} 过期"
+eyebrow = "预付容量"
+note = "在按量计费之前使用，且不计入你的支出限额。"
+topUp = "充值"
+
+[portal.billing.prepaid.buy]
+back = "返回"
+calcTitle = "计算你的年度付款"
+cancel = "取消"
+cancelPurchase = "取消购买"
+close = "关闭"
+continueToPayment = "继续付款"
+finalise = "完成"
+invoiceErrorTitle = "无法生成发票"
+loadingTitle = "正在加载你的报价"
+payTitle = "支付你的年度费用"
+step = "第 {{current}} 步，共 {{total}} 步"
+
+[portal.billing.prepaid.calc]
+change = "更改"
+deployRow = "部署"
+done = "完成"
+enterpriseHint = "这是企业级规模。在此用量下，企业费率优于任何自助折扣。费率锁定、条款和报价可在数分钟内获得。"
+governanceRow = "治理"
+governanceValue = "{{label}} · {{count}} 个策略"
+handlesLabel = "你的处理器"
+handlesValue = "每月处理 {{volume}} credits"
+pipelinesLabel = "流水线"
+policiesMeta = "{{count}} 个策略"
+poolCaption = "全年共一个 {{credits}} credits 池。繁忙月份可借用空闲月份的额度。"
+priceLabel = "你的年度 · 以 10 个月价格获得 12 个月"
+rateUnknown = "我们会在结账时显示准确价格。"
+savings = "你节省 {{amount}} · 免费 2 个月。"
+sizingRow = "规模"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "总用户数"
+
+[portal.billing.prepaid.consent]
+label = "我了解，当我的预付容量用完或 12 个月后过期时，除非我取消，否则处理会自动按标准按量付费费率继续（不超过我的支出限额），并且我可以随时从计费门户取消。"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "由 Stirling 托管。几分钟内上线。"
+cloudValue = "Stirling Cloud · 托管"
+selfhost = "自托管"
+selfhostDesc = "在私有基础设施上运行。费率相同。"
+selfhostValue = "自托管 · 私有基础设施"
+
+[portal.billing.prepaid.offer]
+cta = "查看优惠"
+subtitle = "预付一年 PDF 处理费用并获得两个月免费，在按量计费之前使用，且不计入你的支出限额。"
+title = "以 10 个月价格获得 12 个月"
+
+[portal.billing.prepaid.pay]
+accountName = "账户持有人姓名"
+accountNamePlaceholder = "例如 Jane Smith"
+companyName = "公司名称（可选）"
+companyNamePlaceholder = "例如 Acme Inc."
+downloadInvoice = "下载发票"
+payOnline = "在线支付"
+poNumber = "PO 编号（可选）"
+poNumberPlaceholder = "例如 PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "高级"
+advancedDesc = "流水线驱动你的大部分处理。"
+none = "无"
+noneDesc = "尚未运行流水线。可随时开启。"
+standard = "标准"
+standardDesc = "少量流水线会重新处理到达的 PDFs。"
+
+[portal.billing.prepaid.posture]
+essentials = "基础"
+essentialsDesc = "分类，默认项，加上共享"
+governed = "受治理"
+governedDesc = "增加安全和路由"
+regulated = "受监管"
+regulatedDesc = "每个类别，包括合规、保留、摄取"
+
+[portal.billing.prepaid.review]
+download = "下载报价（PDF）"
+downloading = "正在准备…"
+share = "分享以供审批"
+
+[portal.billing.prepaid.size]
+compact = "紧凑"
+compactDesc = "文件小于 25 MB，无数据费用"
+heavy = "重型"
+heavyDesc = "扫描件或图像较多，通常 50 MB+"
+standard = "标准"
+standardDesc = "大多较小，部分扫描件超过 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "已用完"
+healthy = "剩余充足"
+low = "即将用完"
 
 [portal.billing.spendLimit]
 adjustLimit = "调整限额"
@@ -6494,6 +6608,8 @@ label = "预计会超出。"
 
 [portal.billing.spendThisMonth]
 eyebrow = "本月支出"
+freeRemaining_one = "剩余 {{formatted}} 个免费 PDF"
+freeRemaining_other = "剩余 {{formatted}} 个免费 PDFs"
 processed_one = "已处理 {{formattedCount}} 个 PDF。"
 processed_other = "已处理 {{formattedCount}} 个 PDFs。"
 processedWithRate_one = "已处理 {{formattedCount}} 个 PDF，每个 {{rate}}。"
@@ -6534,6 +6650,350 @@ signature = "签名"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "新建连接"
+createTitleFor = "连接 {{name}}"
+delete = "删除"
+edit = "编辑"
+editTitle = "编辑连接"
+unsupportedType = "此连接类型无法在此处编辑。"
+
+[portal.connections.categories.advanced]
+description = "用于我们尚未支持的服务。"
+label = "高级"
+
+[portal.connections.categories.audit]
+description = "记录文档发生了什么，并记录到审计人员已查看的位置。"
+label = "审计与合规日志"
+
+[portal.connections.categories.notify]
+description = "通知另一个系统发生了某件事。"
+label = "通知与工作流"
+
+[portal.connections.categories.security]
+description = "在文档继续流转前扫描或标记它。"
+label = "安全与分类"
+
+[portal.connections.categories.signing]
+description = "发送文档以进行签名或公证。"
+label = "电子签名与公证"
+
+[portal.connections.categories.storage]
+description = "处理后的文档最终到达的位置 - 存储桶、驱动器、工单或页面。"
+label = "文件与附加"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling 会加密存储此项，并且不会再次显示。"
+label = "访问 token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "使用此连接的步骤只能调用此 URL 下的路径，不能调用其他主机。"
+label = "服务器 URL"
+
+[portal.connections.commonFields.email]
+label = "电子邮件"
+
+[portal.connections.commonFields.host]
+label = "主机"
+
+[portal.connections.commonFields.password]
+label = "密码"
+
+[portal.connections.commonFields.port]
+label = "端口"
+
+[portal.connections.commonFields.username]
+label = "用户名"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "粘贴服务提供给你的 URL。只能调用其下的路径。"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "连接名称"
+namePlaceholder = "例如 Production"
+
+[portal.connections.picker]
+cancel = "取消"
+createNew = "新建连接..."
+placeholder = "选择连接"
+save = "保存连接"
+
+[portal.connections.picker2]
+back = "更改集成"
+heading = "你想连接什么？"
+noResultsBody = "我们尚未支持它 - 告诉我们相关信息，我们会考虑添加。"
+noResultsTitle = "没有匹配 \"{{query}}\" 的结果"
+searchPlaceholder = "搜索集成 - 试试 \"sign\"、\"ocr\" 或产品名称"
+
+[portal.connections.types.api]
+description = "从策略调用任何 HTTP API。你可以选择 URL、身份验证和 payload。"
+label = "自定义 API"
+
+[portal.connections.types.api.fields.authType]
+label = "身份验证"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "用户名和密码"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "自定义 header 中的 token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "无"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "登录以获取 token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "使用此连接的步骤只能调用此 URL 下的路径，不能调用其他主机。"
+label = "基础 URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header 名称"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "登录路径"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "密码"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "如果 API 回复下载链接，只能获取这些主机。用逗号分隔。留空则只允许基础 URL 自身的主机。"
+label = "允许的结果主机"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "将 token 作为此 header 发送"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "登录调用在其中返回 token 的响应 header，例如 X-Auth-Token。"
+label = "Token 响应 header"
+
+[portal.connections.types.api.fields.username]
+label = "用户名"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "在你运行的服务器上扫描文档中的恶意软件 - 不会离开你的网络。"
+label = "ClamAV（自托管）"
+
+[portal.connections.types.cloudmersive]
+description = "用于策略中文档的病毒和内容扫描。"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "阻止包含宏、可执行文件、脚本或嵌入对象的文档 - 不只是已知恶意软件。"
+label = "Cloudmersive 高级扫描"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "将处理后的文档附加到 Confluence 页面。"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "将文档发送到 ConsignO Cloud (Notarius) 以进行电子签名和公证。"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "你的 ConsignO Cloud 环境，包括 /api/v1。"
+label = "服务器 URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "密码"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "仅当你的组织使用 tenants 时需要。"
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "用户名"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "当策略处理文档时向 Discord 发布消息。"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "每当策略处理文档时，在 Elasticsearch 中索引一条审计事件。"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "轮询 FTP 或 FTPS 服务器以获取新文档。"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "连接模式"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "主动"
+passive = "被动（推荐）"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "普通 FTP 会以未加密方式发送凭据和文件；如果服务器支持，请选择 FTPS。"
+label = "加密"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS（显式 / AUTH TLS）"
+implicit = "FTPS（隐式）"
+none = "无（普通 FTP）"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "当策略运行时向 Google Chat space 发布消息。"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "将处理后的文档附加到 Jira issue。"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "当策略运行时发送文档或通知电子邮件。"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "将处理后的文档归档到 Nextcloud。"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "使用你运行的 Presidio 服务器检测文档文本中的个人数据。"
+label = "Presidio（自托管）"
+
+[portal.connections.types.purview]
+description = "读取并应用 Microsoft Purview PDFs 敏感度标签。"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "可选。仅在按名称选择标签时需要；没有它也可以标记。"
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "作为 SiteId 印到每个标签上，以便支持 Purview 的工具知道由哪个组织应用。"
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "S3 bucket，源可从中读取，流水线输出可写入其中。"
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS 留空。为 MinIO 或其他 S3 兼容存储设置此项。"
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "当策略运行时发送文档或通知电子邮件。"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "轮询 SFTP (SSH) 服务器以获取新文档。"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "可选。服务器的 SHA-256 主机 key fingerprint（来自 `ssh-keyscan host | ssh-keygen -lf -`）。设置后，仅接受提供此 key 的服务器；留空时，首次连接时看到的 key 会被固定，之后的更改将被拒绝。"
+label = "主机 key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "如果你改用 private key 进行身份验证，请留空。"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "可选。粘贴 OpenSSH private key，以使用 key 而不是密码进行身份验证。"
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "当策略处理文档时向 Slack 发布消息。"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "监视 SMB / CIFS 网络共享（Windows 或 Samba）。"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / 网络共享"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "可选。如果你的服务器使用 Windows domain 或 workgroup，请填写。"
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "每当策略处理文档时向 Splunk 发送审计事件。"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "向 Sumo Logic HTTP collector 发送审计事件。"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "当策略运行时向 Teams channel 发布消息。"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "将每个文档或仅其详情发布到你选择的 URL。"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "从策略触发 Zap 或 Make scenario。"
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "浏览文档"
+viewSource = "在 GitHub 上查看源代码"
+
 [portal.docs.authentication]
 codeCaption = "每个请求"
 eyebrow = "入门"
@@ -6619,11 +7079,19 @@ title = "官方 SDKs"
 beta = "Beta"
 deprecated = "已弃用"
 
+[portal.docs.search]
+empty = "没有匹配的文档"
+placeholder = "搜索文档"
+results = "{{count}} 个结果"
+
 [portal.docs.skills]
 eyebrow = "技能"
 lead = "捆绑的命名能力，您的智能体可将其作为单个工具调用。每项技能都是附带评估的确定性操作链。"
 title = "智能体技能"
 
+[portal.docs.toc]
+title = "本页内容"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API 参考"
@@ -6697,6 +7165,8 @@ type = "类型"
 user = "用户"
 
 [portal.documents.queue.empty]
+connectSource = "连接源"
+createPipeline = "创建流水线"
 description = "当来源将文档送入您的管道时，它们会出现在这里以供审核。"
 title = "队列中没有文档"
 
@@ -6806,13 +7276,71 @@ description = "此视图遇到意外错误。请重试，或从侧边栏选择
 retry = "重试"
 title = "此页面出现问题"
 
+[portal.home.download]
+back = "返回"
+body = "下载桌面应用或自托管服务器。"
+done = "完成"
+guide = "打开 {{name}} 指南"
+openInBrowser = "改为在浏览器中打开"
+sectionDesktop = "桌面应用"
+sectionSelfHosted = "自托管"
+title = "安装 Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "在你的服务器上运行官方镜像。"
+note = "在 :8080 打开。默认登录：admin / stirling。"
+tagline = "在容器中运行服务器"
+title = "Docker"
+variantFat = "完整版"
+variantLite = "超轻量版"
+variantStandard = "标准版"
+
+[portal.home.download.kubernetes]
+detailBody = "安装官方 Helm chart。"
+note = "为 /configs 添加 PVC 以持久保存设置。"
+tagline = "使用 Helm 部署到集群"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "适用于您的发行版的原生构建。"
+guideBtn = "查看 Linux 安装选项"
+note = "常见发行版可使用 AppImage、.deb 和 .rpm 构建。"
+tagline = "适用于您发行版的原生桌面应用"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "或通过 Homebrew"
+detailBody = "运行安装程序，或使用 Homebrew。"
+downloadBtn = "下载 macOS 版本"
+tagline = "适用于 Apple silicon 和 Intel 的原生应用"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "在裸机服务器上运行 .jar。"
+downloadBtn = "下载 .jar"
+note = "需要 Java 21+。在 :8080 打开；默认登录 admin / stirling。"
+runLabel = "然后运行它"
+tagline = "在裸机服务器上运行 .jar"
+title = "手动服务器设置"
+
+[portal.home.download.windows]
+altLabel = "或通过 winget"
+detailBody = "运行安装程序，或使用包管理器。"
+downloadBtn = "下载安装程序"
+tagline = "适用于 Microsoft Windows 的原生应用"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} 位活跃"
-invite = "邀请队友"
+activeOfDeployed = "本月 {{total}} 个中有 {{active}} 个处于活跃状态"
 name = "Stirling PDF Editor"
 open = "在浏览器中打开"
 updated = "已更新 {{time}}"
 
+[portal.home.editor.deploy]
+finish = "完成部署"
+options = "查看部署选项"
+start = "部署 Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "自托管 · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "下午好"
 evening = "晚上好"
 morning = "早上好"
 
-[portal.home.onboarding]
-dismiss = "关闭设置"
-notStarted = "未开始"
-progress = "已完成 {{done}} / {{total}}"
-title = "完成设置"
-
-[portal.home.onboarding.enterprise]
-body = "全组织 SSO + SCIM + RBAC、承诺用量定价和隔离网络部署。"
-cta = "开始试用"
-ctaQuote = "获取报价"
-lead = "适用于 250+ 名员工。"
-tag = "企业版"
-
-[portal.home.onboarding.steps.editor]
-blurb = "部署桌面应用，永久免费。"
-title = "下载 PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} 个活跃 · {{recommended}} 个推荐"
-chip = "{{active}} 个活跃"
-title = "启用策略"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} 个已连接 · 每个 PDF 在落地处受管控"
-chip = "{{connected}} 个已连接"
-title = "连接您的来源"
-
-[portal.home.quickActions]
-subtitle = "今日重点任务"
-title = "快捷操作"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "基于类型化操作库的 3 步编排器"
-title = "构建管道"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3、代理、webhooks、监视文件夹"
-title = "连接来源"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "带速率限制和 IP 允许列表的范围化密钥"
-title = "签发 API 密钥"
-
 [portal.infrastructure]
 manageEditorDeployment = "管理 Editor 部署"
 sectionsAriaLabel = "基础设施部分"
@@ -6878,13 +7363,9 @@ heading = "API 密钥"
 subheading = "带每密钥速率限制、权限和 IP 允许列表的范围化凭据。"
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "允许的 IP"
-anyIp = "任意 IP（无允许列表）"
 created = "已创建"
 lastUsed = "上次使用"
-permissions = "权限"
-rateLimit = "速率限制"
-rateLimitValue = "{{value}} 请求/分钟"
+revoke = "撤销密钥"
 usageMonth = "本月用量"
 usageToday = "今日用量"
 
@@ -6892,6 +7373,20 @@ usageToday = "今日用量"
 description = "创建范围化密钥以开始调用 Stirling API。"
 title = "尚无 API 密钥"
 
+[portal.infrastructure.apiKeys.error]
+load = "无法加载您的 API 密钥。请重试。"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "撤销“{{name}}”？任何仍在使用此密钥的集成都将立即开始收到 401 错误。此操作无法撤销。"
+cancel = "取消"
+confirm = "撤销密钥"
+title = "撤销 API 密钥"
+
+[portal.infrastructure.attestationLabel]
+attested = "已认证"
+inScope = "在范围内"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "按类别筛选审计事件"
 heading = "审计日志"
@@ -6935,6 +7430,7 @@ all = "全部"
 auth = "身份验证"
 config = "配置"
 elevation = "权限提升"
+policy = "策略"
 processing = "处理"
 security = "安全"
 
@@ -6944,19 +7440,35 @@ title = "您没有访问权限"
 
 [portal.infrastructure.audit.metrics]
 config = "配置"
-elevation = "权限提升"
+policy = "策略"
 processing = "处理"
 totalEvents = "总事件 · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "身份验证"
+config = "配置"
+elevation = "权限提升"
+policy = "策略"
+processing = "处理"
+security = "安全"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "错误"
+info = "信息"
+success = "成功"
+warning = "警告"
+
+[portal.infrastructure.certLabel]
+certified = "已认证"
+inProgress = "进行中"
+notStarted = "未开始"
+
 [portal.infrastructure.createKey]
 cancel = "取消"
 createKey = "创建密钥"
 done = "完成"
-ipAllowlistHelper = "以逗号分隔的 CIDR 范围。留空则允许任意 IP。"
-ipAllowlistLabel = "IP 允许列表"
 keyNameLabel = "密钥名称"
 keyNamePlaceholder = "例如：生产 · 摄取"
-permissionsLabel = "权限"
 secretKeyCaption = "秘密密钥"
 secretWarning = "请将其存储在密钥管理器中。Stirling 只会存储哈希 — 之后无法恢复。"
 subtitle = "将密钥范围限制为所需的最小范围。您可以随时轮换或吊销。"
@@ -6964,6 +7476,12 @@ subtitleCreated = "立即复制此密钥 — 它不会再次显示。"
 title = "创建 API 密钥"
 titleCreated = "密钥已创建"
 
+[portal.infrastructure.deployLabel]
+live = "在线"
+queued = "已排队"
+rolledBack = "已回滚"
+rolling = "正在发布"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/分钟"
@@ -6999,6 +7517,15 @@ subheading = "每个已部署 Stirling 区域的实时健康状况 — 延迟、
 description = "工作区完成配置后，已部署区域会显示在这里。"
 title = "没有已部署区域"
 
+[portal.infrastructure.keyLabel]
+active = "活跃"
+revoked = "已撤销"
+
+[portal.infrastructure.modelLabel]
+active = "活跃"
+degraded = "性能下降"
+disabled = "已禁用"
+
 [portal.infrastructure.models]
 heading = "模型"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "状态"
 type = "类型"
 version = "版本"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/次调用"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "活跃模型"
 avgLatency = "平均延迟"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} 的模型"
 operation = "操作"
 routedTo = "路由至"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "分类"
+extraction = "提取"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "性能下降"
+down = "宕机"
+healthy = "健康"
+
 [portal.infrastructure.security.access.byok]
 description = "从您自己的 KMS 提供密钥。Stirling 使用它加密，但仍可读取。"
 label = "自带密钥 (BYOK)"
@@ -7174,6 +7716,47 @@ models = "模型"
 security = "安全"
 storage = "存储"
 
+[portal.integrations]
+addAnother = "再添加一个"
+availableHeading = "可用"
+comingSoonHeading = "即将推出"
+connect = "连接"
+connectedHeading = "已连接"
+connectionCount_one = "{{count}} 个连接"
+connectionCount_other = "{{count}} 个连接"
+customApi = "自定义 API"
+searchPlaceholder = "搜索集成"
+subtitle = "Stirling 可以与之通信的一切。凭据在此处创建一次，然后由来源、策略和流水线引用。"
+title = "集成"
+typedName = "{{tool}} 名称"
+
+[portal.integrations.filters]
+all = "全部"
+audit = "审计"
+connected = "已连接"
+notify = "通知"
+security = "安全"
+signing = "签名"
+storage = "存储"
+
+[portal.integrations.status]
+connected = "已连接"
+
+[portal.integrations.table]
+integration = "集成"
+worksWith = "适用于"
+
+[portal.integrations.worksWith]
+pipelines = "流水线"
+policies = "策略"
+sources = "来源"
+
+[portal.legal]
+draft = "{{label}} · 草稿"
+loadError = "无法加载此文档。请重试。"
+loading = "正在加载…"
+title = "法律文件"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "组件"
@@ -7182,6 +7765,7 @@ documents = "文档"
 editor = "编辑器"
 home = "首页"
 infrastructure = "基础设施"
+integrations = "集成"
 pipelines = "管道"
 policies = "策略"
 procurement = "采购"
@@ -7190,25 +7774,9 @@ sources = "来源"
 usage = "用量与账单"
 users = "用户"
 
-[portal.notifications]
-markAllRead = "全部标为已读"
-title = "通知"
-viewAll = "查看全部"
-
-[portal.notifications.ariaLabel]
-none = "通知，无未读"
-unread_one = "通知，{{count}} 条未读"
-unread_other = "通知，{{count}} 条未读"
-
-[portal.notifications.count]
-allRead = "全部已读"
-loading = "加载中"
-new_one = "{{count}} 条新通知"
-new_other = "{{count}} 条新通知"
-
-[portal.notifications.empty]
-description = "没有新通知。"
-title = "您已全部处理完毕"
+[portal.nav.section]
+platform = "PDF 平台"
+processor = "PDF 处理器"
 
 [portal.pipelines]
 subtitle = "后端上的每个自动化文档管道：一组来源上的有序操作链，由触发器运行。点击一行查看其步骤和来源。"
@@ -7220,15 +7788,28 @@ newPipeline = "新建管道"
 [portal.pipelines.builder]
 addStep = "添加工具"
 back = "返回管道"
+cannotFollow = "无法接收 {{produced}}"
+chooseAccount = "选择一个账户"
+chooseDestination = "选择一个目标"
+chooseOperation = "选择此步骤执行的操作"
+chooseSource = "选择一个来源"
 discard = "放弃更改"
 enabled = "已启用"
+inputs = "输入"
+inputSource = "输入来源"
+inputTrigger = "触发器"
 keepEditing = "继续编辑"
+needsConfiguring = "需要设置"
 needsUpload = "需要上传的文件"
+noSources = "尚未连接来源。创建一个以将其用作输入。"
 noToolMatches = "没有工具匹配您的搜索。"
 pipelineSettings = "管道设置"
 searchTools = "搜索工具"
 selectToolBody = "添加工具以构建您的管道。"
 selectToolTitle = "尚无工具"
+sendToSystem = "发送到另一个系统"
+stepsIncompatible = "这些步骤无法在其上一步生成的内容上运行：{{tools}}。"
+stepsNeedSetup = "保存前这些步骤仍需要设置：{{tools}}。"
 toolSettings = "工具设置"
 unknownStep = "无法识别的操作，已按原样保留。"
 unsavedBody = "您有未保存的更改。离开前保存，还是放弃？"
@@ -7236,19 +7817,24 @@ unsavedTitle = "未保存的更改"
 uploadUnsupported = "管道尚不支持上传的文件，因此这些步骤无法保存：{{tools}}。"
 usesDefaults = "使用默认设置运行"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "合并上一步中的每个文件"
+fan-out = "对上一步中的每个文件运行一次"
+format-mismatch = "需要 {{accepts}}，但上一步生成 {{produced}}"
+output-uncertain = "可能不会运行：上一步的输出取决于其设置方式"
+source-mismatch = "需要 {{accepts}}，但此流水线的输入是 {{produced}}"
+undeclared-operation = "无法检查此步骤接受的内容"
+
 [portal.pipelines.composer]
 addTool = "添加工具"
 cancel = "取消"
 chainEmpty = "添加工具以开始构建您的管道。"
 create = "创建管道"
-directory = "输出文件夹"
-directoryHelp = "服务器上的绝对路径。必须位于已配置的允许文件夹内。"
 editingUnsupported = "尚不支持显示这些工具参数用于编辑。"
 moveDown = "下移"
 moveUp = "上移"
 name = "名称"
 namePlaceholder = "例如：修订扫描"
-noSources = "尚未连接来源。管道仍可在直接提供给它的文件上运行。"
 noToolSettings = "此工具没有可配置的设置。"
 operations_one = "操作（{{count}}）"
 operations_other = "操作（{{count}}）"
@@ -7273,11 +7859,13 @@ confirm = "删除"
 title = "删除管道？"
 
 [portal.pipelines.detail]
+clearHistory = "清除历史记录"
 delete = "删除管道"
 run = "立即运行"
 
 [portal.pipelines.empty]
 action = "创建管道"
+connectSource = "连接来源"
 description = "创建您的第一个管道：选择运行的来源，串联操作，并选择输出位置。"
 title = "尚无管道"
 
@@ -7286,15 +7874,17 @@ active = "活跃"
 paused = "已暂停"
 total = "管道"
 
-[portal.pipelines.output]
-folder = "写入文件夹"
-inline = "返回文件"
-
 [portal.pipelines.run]
+allProcessed_one = "无需运行：来源中的 {{count}} 个文档已处理。"
+allProcessed_other = "无需运行：来源中的所有 {{count}} 个文档均已处理。"
 completed_one = "运行已完成。"
 completed_other = "全部 {{count}} 次运行已完成。"
 empty = "没有可运行内容：来源中没有要处理的文档。"
 failed = "运行失败：{{error}}"
+historyCleared = "历史记录已清除。下一次运行将重新处理当前来源中的所有内容。"
+inFlight = "没有新的可运行内容：文档仍在从早先的运行中处理中。"
+parked_one = "无需运行：{{count}} 个文档此前失败并已暂存。修复原因后，清除历史记录以重试。"
+parked_other = "无需运行：{{count}} 个文档此前失败并已暂存。修复原因后，清除历史记录以重试。"
 running = "运行已开始；仍在进行中。"
 timeout = "运行耗时超过预期；它可能仍会在后台完成。"
 
@@ -7314,12 +7904,18 @@ manual = "手动"
 schedule = "已计划"
 
 [portal.policies]
+defaultName = "{{category}} 策略"
 subtitle = "常驻自动化会在每个文档上强制执行工具管道。每项策略在上传或导出时触发，运行其工具链，并将强制处理后的版本与原始文件一同保存。"
 title = "策略"
 
 [portal.policies.card]
 comingSoon = "升级到企业版"
 notSetUp = "未设置"
+requiresAiEngine = "需要 AI 引擎"
+
+[portal.policies.categories.classification]
+desc = "在上传时识别每个文档的类型，并标记其元数据以便归档和搜索。"
+label = "分类"
 
 [portal.policies.categories.compliance]
 desc = "在每个文档上强制执行 HIPAA、GDPR、SOC 2 或 FedRAMP 要求。"
@@ -7344,6 +7940,13 @@ label = "安全"
 [portal.policies.config]
 scopeAll = "所有文档"
 
+[portal.policies.config.classification]
+summary = "根据您团队的标签对每个上传文档进行分类，并标记其元数据。"
+
+[portal.policies.config.classification.rules]
+0 = "分类"
+1 = "标记元数据"
+
 [portal.policies.config.compliance]
 summary = "在文档离开系统前，根据监管框架验证文档。"
 
@@ -7371,6 +7974,29 @@ minConfidence = "最低置信度"
 2 = "命名"
 3 = "规范化"
 
+[portal.policies.config.purview]
+label = "应用 Microsoft Purview 敏感度标签"
+
+[portal.policies.config.purview.fields]
+connection = "Purview 租户"
+labelId = "标签 ID"
+labelIdHelp = "来自 Purview 门户的标签 GUID。应用标签会将其元数据写入 PDF；它无法加密，加密需要 Microsoft 客户端。"
+labelName = "标签名称（可选）"
+labelNameHelp = "与 ID 一起记录，以便人员和工具识别该标签。"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview 会区分由策略应用的标签和由人员选择的标签。"
+label = "标签的记录方式"
+privileged = "作为人员选择的标签"
+standard = "作为自动应用的标签"
+
+[portal.policies.config.purviewRead]
+label = "读取 Microsoft Purview 标签"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview 租户"
+connectionHelp = "读取文档已携带的标签，以便后续步骤可以对其执行操作。"
+
 [portal.policies.config.retention]
 summary = "强制执行文档保留多久、何时归档以及何时删除。"
 
@@ -7438,6 +8064,7 @@ title = "尚无活动"
 [portal.policies.endpoints]
 addWatermark = "水印"
 autoRedact = "遮盖 PII"
+classifyAndLabel = "分类"
 compressPdf = "压缩"
 flatten = "扁平化"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "您的政策已保存，连接恢复后将显示。"
 retry = "重试"
 title = "后端不可用"
 
+[portal.policies.operations]
+change = "更改此步骤执行的操作"
+noResults = "没有匹配的步骤。尝试产品名称，或“scan”、“notify”、“attach”。"
+searchPlaceholder = "搜索步骤 - 试试“scan”、“attach”或产品名称"
+
+[portal.policies.operations.bodyMode]
+binary = "原始文件字节"
+json = "在 JSON payload 内"
+multipart = "作为文件上传（multipart）"
+
+[portal.policies.operations.clamavScan]
+description = "您自己的 ClamAV 服务器会检查文档；没有任何内容离开您的网络。"
+label = "扫描病毒（自托管）"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "拒绝包含宏、可执行文件、脚本或嵌入对象的文档。"
+label = "阻止活动内容"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive 会检查文档；如果文档不干净，运行将停止。"
+label = "扫描病毒"
+
+[portal.policies.operations.confluenceAttach]
+description = "将处理后的文档归档到页面。"
+label = "附加到 Confluence 页面"
+
+[portal.policies.operations.consignoSubmit]
+description = "将文档提交到 ConsignO Cloud 进行签名。"
+label = "发送签名（ConsignO）"
+note = "提交文档。尚不支持取回已签名副本，因为步骤无法将结果传递给后续步骤。"
+
+[portal.policies.operations.customApiCall]
+description = "自行编写调用：路径、方法、正文和响应处理。"
+label = "调用自定义 API"
+
+[portal.policies.operations.discordNotify]
+description = "通知频道该策略已处理一个文档。"
+label = "向 Discord 发布消息"
+
+[portal.policies.operations.elasticIndex]
+description = "将策略执行的操作记录为可搜索的文档。"
+label = "在 Elasticsearch 中索引审计事件"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart 适合上传 API；JSON 适合希望文件位于 payload 内的 API；binary 发送原始字节。"
+label = "如何发送文档"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "按原样发送的 JSON 正文。{{document.base64}} 携带文件；{{document.*}} 和 {{run.*}} 会按文档填充。"
+label = "JSON 正文"
+
+[portal.policies.operations.fields.connection]
+label = "账户"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun 域名"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API 期望用于接收文档的表单字段。"
+label = "文件字段名称"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "发件人"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "由 header 名称/值对组成的 JSON 对象。连接的凭据会为您添加。"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "索引"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "问题键"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "作为消息正文发送。{{document.*}} 和 {{run.*}} 会按文档填充。"
+label = "消息"
+
+[portal.policies.operations.fields.method]
+label = "方法"
+
+[portal.policies.operations.fields.pageId]
+label = "页面 ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "附加到连接的基础 URL。它永远无法访问其他主机。"
+label = "路径"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "写入驱动器中的位置。{{document.filename}} 会按文档填充。"
+label = "目标路径"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "报告会保持文档不变。替换会将其换成返回的内容。"
+label = "如何处理回复"
+
+[portal.policies.operations.fields.signerEmail]
+label = "签名者的电子邮件"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "主题"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio 会分析此文本。使用 {{document.title}} 或粘贴您想检查的文本。"
+label = "要检查的文本"
+
+[portal.policies.operations.fields.to]
+label = "收件人"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud 用户名"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "通知空间该策略已处理一个文档。"
+label = "向 Google Chat 发布消息"
+
+[portal.policies.operations.jiraAttach]
+description = "将处理后的文档归档到问题。"
+label = "附加到 Jira 问题"
+
+[portal.policies.operations.mailgunEmail]
+description = "将处理后的文档作为附件发送。"
+label = "通过电子邮件发送文档（Mailgun）"
+
+[portal.policies.operations.nextcloudUpload]
+description = "将处理后的文档写入文件夹。"
+label = "上传到 Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "您自己的 Presidio 服务器会报告其发现的个人数据。"
+label = "检测个人数据"
+note = "Presidio 读取文本，而不是文件。请提供您想检查的文本 — 文档本身不会上传。"
+
+[portal.policies.operations.responseMode]
+replace = "用回复替换文档"
+report = "保留文档，记录回复"
+
+[portal.policies.operations.sendgridEmail]
+description = "将处理后的文档作为附件发送。"
+label = "通过电子邮件发送文档（SendGrid）"
+
+[portal.policies.operations.slackNotify]
+description = "通知频道该策略已处理一个文档。"
+label = "向 Slack 发布消息"
+
+[portal.policies.operations.splunkEvent]
+description = "在审计人员已查看的位置记录策略执行的操作。"
+label = "向 Splunk 发送审计事件"
+
+[portal.policies.operations.sumologicEvent]
+description = "将策略执行的操作记录到 HTTP 收集器。"
+label = "向 Sumo Logic 发送审计事件"
+
+[portal.policies.operations.teamsNotify]
+description = "通知频道该策略已处理一个文档。"
+label = "向 Teams 发布消息"
+
+[portal.policies.operations.webhookPost]
+description = "将文档本身发送到您选择的 URL。"
+label = "将文档发布到 webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "将运行详情交给您的自动化。"
+label = "触发 Zap 或 Make 场景"
+
 [portal.policies.stats]
 activeFor = "活动"
 dataProcessed = "已处理数据"
@@ -7473,6 +8277,13 @@ label = "已执行文档"
 description = "已配置但未触发"
 label = "已暂停"
 
+[portal.policies.table]
+appliesTo = "应用于"
+docs = "已执行文档"
+enforces = "执行"
+policy = "策略"
+status = "状态"
+
 [portal.policies.wizard.actions]
 back = "返回"
 cancel = "取消"
@@ -7480,6 +8291,10 @@ continue = "继续"
 enablePolicy = "启用政策"
 saveChanges = "保存更改"
 
+[portal.policies.wizard.capability.classify]
+desc = "根据您团队的标签识别文档类型并为其打标签，使其可按类别归档和搜索。"
+label = "分类文档"
+
 [portal.policies.wizard.capability.compress]
 desc = "将文档压缩为更小的文件大小。"
 label = "减小文件大小"
@@ -7500,10 +8315,18 @@ label = "遮盖敏感信息"
 desc = "移除隐藏的 JavaScript，确保文档打开时不会自动运行任何内容。"
 label = "移除活动内容"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "使用独立时间戳机构证明该文档在某一时间点以此确切形式存在。只会发送 hash - 文档绝不会离开您的服务器。"
+label = "添加可信时间戳"
+
 [portal.policies.wizard.capability.watermark]
 desc = "在每一页上加盖可见标记（例如“机密”）。"
 label = "应用水印"
 
+[portal.policies.wizard.classification]
+description = "每个上传文档都会根据内置标签进行分类，并标记符合的类型。标签集在整个团队中共享。"
+labelsHeading = "分类标签"
+
 [portal.policies.wizard.errors]
 noTools = "请先在工作流中启用至少一个工具。"
 saveFailed = "无法保存政策。请重试。"
@@ -7548,73 +8371,118 @@ setUp = "设置 {{category}} 政策"
 [portal.policies.wizard.workflow]
 description = "选择此政策对其处理的每个文档执行的操作。"
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} 活动"
-noRule = "尚未执行规则"
-subtitle = "每个文档都会经过的常驻自动化，无论由哪个管道处理。"
-title = "您的 PDF 上运行的内容"
-
 [portal.policySummary.action]
-comingSoon = "升级到企业版"
-configure = "配置"
 setUp = "设置"
 
-[portal.policySummary.column]
-activeRule = "活动规则"
-policy = "政策"
-status = "状态"
+[portal.processorFlow]
+footnote = "计数基于过去 24 小时。流程速度仅作示意。"
+liveBadge = "实时"
+stats = "{{connected}} 已连接 · {{processed}} 个 PDF 已处理"
+title = "PDF 处理器"
 
-[portal.policySummary.empty]
-description = "配置政策后，类别将显示在这里。"
-title = "尚无政策"
+[portal.processorFlow.lens]
+ariaLabel = "查看模式"
+flow = "流程"
+sankey = "桑基图"
 
-[portal.policySummary.state]
-active = "活动"
-off = "关闭"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "失败"
+heading = "结果"
+success = "已交付"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} 个活跃"
+count = "{{n}} · 24h"
+heading = "策略"
+setUp = "设置"
 soon = "即将推出"
 
-[portal.processingStatus]
-managePlan = "管理方案"
-volumeSuffix = "已处理 PDF · 最近 30 天"
+[portal.processorFlow.sankey]
+waist = "策略 · {{n}} 个活跃"
+
+[portal.processorFlow.sankey.empty]
+description = "连接一个来源并启用一个策略，即可查看文档流经处理器。"
+title = "暂无流程"
+
+[portal.processorFlow.sources]
+comingSoonTag = "连接"
+editor = "Stirling PDF Editor"
+heading = "来源"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "电子邮件接收"
 
 [portal.procurement]
-reset = "重置采购（演示）"
 subtitle = "让您的团队完成评估、签约和入门。所有文档集中一处。"
 title = "采购"
 
-[portal.procurement.action]
-download = "下载"
-pay = "立即付款"
-request = "请求"
-sign = "审核并签署"
-upload = "上传"
-
 [portal.procurement.agreement]
 agreeCta = "同意并订阅"
+confidential = "机密"
 confirm = "我已阅读并同意 Stirling Enterprise Agreement。"
-eyebrow = "协议"
-intro = "一份合并协议涵盖您的交易：Master Service Agreement、Order Form、EULA 和 Data Processing Agreement。请审核后同意，将报价接受为已承诺的订阅。"
-title = "审核您的企业协议"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA、订单表、EULA 和 DPA，合并为一次签名。"
+download = "下载"
+downloadDraftError = "无法生成协议 PDF - 文档渲染器不可用。请稍后重试或联系支持。"
+downloadError = "无法下载已签署协议。请重试。"
+legalName = "法律实体名称"
+legalNamePlaceholder = "将签署的法律实体"
+loadError = "无法加载协议。请重试。"
+loading = "正在加载协议..."
+ref = "参考 {{ref}} · {{version}}"
+requestChanges = "请求更改"
+scrollHint = "滚动以审阅"
+signatory = "签名人姓名"
+signatoryPlaceholder = "全名"
+signatoryTitle = "签名人职务"
+signatoryTitlePlaceholder = "例如：总法律顾问"
+signError = "无法记录您的签名。请重试。"
 
 [portal.procurement.builder]
 addons = "附加项"
+addressLine1 = "地址行 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "地址行 2"
+addressLine2Placeholder = "套房、楼层、建筑"
 back = "返回"
 businessName = "企业名称"
 businessNamePlaceholder = "您的公司"
+city = "城市"
+cityPlaceholder = "San Francisco"
+completeRequired = "请在生成报价前填写必填字段（标记为 *），并提供有效电子邮件。"
+contactEmail = "联系人电子邮件"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "联系人姓名"
+contactNamePlaceholder = "Jane Doe"
 continue = "继续"
-country = "国家/地区"
-countryEuro = "欧元区 (EUR €)"
-countryUK = "英国 (GBP £)"
-countryUS = "美国 (USD $)"
+done = "完成"
 eula = "我已阅读并同意 Stirling Enterprise EULA。它管理由此报价生成的协议。"
 generate = "生成报价"
-included = "已包含"
 indemnification = "IP 赔偿"
 indemnificationSub = "我们根据 EULA 为符合条件的 IP 索赔提供抗辩"
-offlineLicense = "离线 / 隔离网络许可证"
-offlineLicenseSub = "用于隔离网络自托管实例的可下载许可证文件"
+paperEyebrow = "企业报价"
+paperFor = "准备给"
+pdfSize = "PDF 大小"
+poNumber = "PO 编号"
+poNumberPlaceholder = "可选"
+postalCode = "邮政编码"
+postalCodePlaceholder = "94105"
+posture = "治理"
+posture_count = "~{{count}} 个策略"
+posture_essentials = "基础"
+posture_essentialsSub = "分类 + 共享 — 默认项"
+posture_governed = "受治理"
+posture_governedSub = "添加安全和路由"
+posture_regulated = "受监管"
+posture_regulatedSub = "每个类别 — 合规、保留、摄取"
 qbr = "季度业务评审"
 qbrSub = "您的 SE 每季度评审使用情况和路线图"
+region = "州 / 地区"
+regionPlaceholder = "California"
 running = "{{annual}} / 年 · {{years}} 年 {{tcv}}"
 s1Sub = "您的团队，以及预计每年运行的 PDF。"
 s1Title = "您将处理多少内容？"
@@ -7623,6 +8491,12 @@ s2Title = "承诺和服务"
 s3Sub = "用于报价及其生成的协议。"
 s3Title = "您的详细信息"
 serviceLevel = "服务级别"
+size_compact = "紧凑"
+size_compactSub = "主要为文本，小于 1 MB"
+size_heavy = "大型"
+size_heavySub = "扫描件或大量图片，5 MB+"
+size_standard = "标准"
+size_standardSub = "文本和图片混合，1 到 5 MB"
 slDedicated = "专属"
 slDedicatedSub = "4 个工作小时 · 专属客户经理 · +30%"
 slPriority = "优先"
@@ -7630,6 +8504,8 @@ slPrioritySub = "同一工作日 · 指定 CSM · +15%"
 slStandard = "标准"
 slStandardSub = "下一工作日 · 共享 CSM · 已包含"
 stepOf = "第 {{n}} 步，共 {{total}} 步"
+taxId = "VAT / 税务 ID"
+taxIdPlaceholder = "可选"
 term = "期限"
 termDiscount = "已应用 {{pct}}% 多年承诺折扣"
 title = "构建您的报价"
@@ -7637,6 +8513,7 @@ training = "入门与培训"
 trainingSub = "实时课程，帮助您的团队开始使用"
 users = "用户总数"
 usersPlaceholder = "例如 250"
+viewEula = "阅读"
 volEstimated = "根据 {{count}} 位用户估算（每人约 2,000 个 PDF，包括自动化）。如果您更清楚，可进行编辑。"
 volManual = "正在使用您的数值。可随时根据团队规模重新估算。"
 volNoUsers = "不确定？输入您的团队规模，我们会进行估算。"
@@ -7645,55 +8522,55 @@ volumePlaceholder = "例如 1,000,000"
 years_one = "{{count}} 年"
 years_other = "{{count}} 年"
 
-[portal.procurement.docs]
-count_one = "{{count}} 个文档"
-count_other = "{{count}} 个文档"
-done = "完成"
-here = "您在这里"
-hide = "隐藏"
-optional = "可选"
-paidAddon = "付费附加项"
-show = "显示"
-subtitle = "旅程每一步所需的一切都会随着交易推进而显示出来。"
-supportingSubtitle = "SOC 2、安全评审、税务表单等，在您的安全或采购团队需要时即可提供。部分项目会收取一次性费用。"
-supportingTitle = "支持您的评估"
+[portal.procurement.documents]
+agreement = "企业协议"
+agreementSub = "MSA、订单表和 DPA，一次签名完成。"
+download = "下载"
+eula = "EULA 和商业条款"
+eulaSub = "软件和自助商业条款。"
+invoice = "发票"
+invoiceSub = "您的第一张订阅发票。"
+laterInvoice = "接受后可用"
+laterQuote = "报价发出后可用"
+quote = "报价"
+quoteSub = "您的逐项企业报价。"
+sla = "SLA 附件"
+slaSub = "支持等级和响应目标。"
+subprocessors = "子处理方"
+subprocessorsSub = "代表您处理数据的第三方。"
+subtitle = "您的交易文件，随时可用。"
 title = "文档"
-upcoming = "即将进行"
+view = "查看"
 
 [portal.procurement.error]
 title = "出现问题"
 
 [portal.procurement.hero]
-company = "您的企业交易"
+barAria = "阶段 {{current}} / {{total}}"
 ctaAgreement = "审核并签署协议"
-ctaLive = "您已上线"
-ctaPayment = "添加付款"
+ctaExploring = "设置您的试用"
 ctaQuote = "审核您的报价"
+ctaReviewQuote = "审阅报价"
 ctaTrial = "构建您的报价"
+documents = "文档"
 eyebrow = "企业采购"
+eyebrowCompany = "{{company}} 企业版"
 inviteTeammates = "邀请队友"
-keyDocs = "关键文档"
-nextStep = "下一步：{{action}}"
-notStarted = "未开始"
+licenseKey = "许可证密钥"
+liveSub = "您的组织已完成配置，许可证处于活跃状态。"
+liveTitle = "您已在 Stirling Enterprise 上线"
+next = "下一步：{{stage}}"
 open = "打开采购"
 scheduleCall = "安排通话"
-setup1Sub = "邀请您的队友"
-setup1Title = "部署 PDF 编辑器"
-setup2Sub = "在编辑器和其他来源中启用处理"
-setup2Title = "连接 PDF 处理器"
-setup3Sub = "在需要时启用安全、合规、路由或保留"
-setup3Title = "添加推荐政策"
+sentenceAgreement = "审阅并签署协议"
+sentenceLive = "配置和推出"
+sentencePayment = "采购订单和付款"
+sentenceQuote = "审阅并接受您的报价"
+sentenceTrial = "设置您的试用工作区"
 
 [portal.procurement.journey]
 daysLeft_one = "剩余 {{count}} 天"
 daysLeft_other = "剩余 {{count}} 天"
-engineerLabel = "您的解决方案工程师"
-eyebrow = "您的推出流程"
-live = "您已在 Stirling Enterprise 上线"
-nextStep = "下一步：{{action}}"
-subtitle = "您的解决方案工程师会参与每一步。一次只需完成一个下一步操作；完整清单如下。"
-title = "从试用到上线，一条引导路径"
-trialTitle = "企业试用"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "一次签署涵盖 MSA、订单表、EULA 和 DPA。"
@@ -7727,6 +8604,9 @@ downloadError = "暂时无法生成离线许可证文件——请稍后重试。
 downloadOffline = "下载离线许可证 (.lic)"
 hint = "将此密钥粘贴到自托管实例中以激活它，或将其保留作记录。请妥善保管。"
 label = "您的许可证密钥"
+subtitle = "使用此密钥激活自托管实例，或保留以作记录。"
+title = "您的许可证密钥"
+trialFileHint = "这是您的试用许可证文件。协议就位后，请回来再次下载 — 与在线许可证密钥不同，.lic 文件不会自行更新。"
 
 [portal.procurement.link]
 cta = "关联账户"
@@ -7739,65 +8619,62 @@ description = "您的订阅已激活，许可证已签发。您的团队已预
 eyebrow = "上线"
 title = "您已在 Stirling Enterprise 上线"
 
-[portal.procurement.locked]
-description = "开始企业评估后，试用密钥、承诺用量报价、一次签署协议、付款以及您的文档台账都将在这里。"
-eyebrow = "仅限企业版"
-talkToSales = "联系销售"
-title = "采购流程随企业版开放"
-
 [portal.procurement.milestone]
-accept = "接受并继续"
-description = "下载 PDF 与团队分享，准备好后回来接受，或进行更改。"
-download = "下载 PDF"
 downloadError = "暂时无法下载报价 PDF——请稍后重试。"
-edit = "编辑报价"
-eyebrow = "报价 {{number}}"
-perYear = " / 年"
-preparedFor = "为 {{company}} 准备"
-tcv = "{{value}} 合同总价值"
-title = "您的报价已准备好"
-
-[portal.procurement.modal]
-cancel = "取消"
-chooseFile = "选择文件"
-close = "关闭"
-downloadBody = "您的下载将很快开始。"
-downloadCta = "下载"
-downloadTitle = "下载"
-noFile = "未选择文件"
-payBody = "通过 Stripe 使用银行卡或银行转账支付您的承诺合同。付款结清后，您的工作区会立即预配。"
-payCta = "继续前往 Stripe"
-payTitle = "确认付款"
-requestBodyFree = "我们会按需生成此文档。确认后，您的解决方案工程师将很快发送给您。"
-requestBodyPaid = "这是付费附加项。确认后，您的解决方案工程师将评估范围并发送文件。"
-requestCta = "请求"
-requestTitle = "请求此文档"
-signBody = "打开 Stirling Enterprise Agreement 进行电子签名：一次签署涵盖 MSA、订单表、EULA 和 DPA。我们会自动会签，您将进入付款步骤。"
-signCta = "打开以签署"
-signTitle = "审核并签署您的协议"
-uploadBody = "将您的 PO 发送给我们，我们会按您的条款开具发票。拖入 PDF 或在下方选择文件。"
-uploadCta = "上传采购订单"
-uploadTitle = "上传您的采购订单"
 
 [portal.procurement.payment]
 description = "您的报价已接受，许可证已激活——您的团队可以立即开始使用。准备好后支付第一张发票；您可以在这里付款或下载，无需电子邮件。"
+downloadAgreement = "下载已签署协议"
 downloadInvoice = "下载发票"
-simulate = "模拟已收到付款（演示）"
+eyebrow = "付款"
 title = "订阅已创建"
 viewInvoice = "查看并支付发票"
 
+[portal.procurement.review]
+acceptCta = "接受报价"
+annual = "年费（第 1 年）"
+downloadCta = "下载报价"
+poNumber = "采购订单：{{po}}"
+renewal = "期限结束后以 {{amount}}/年续订（+{{pct}}% CPI）"
+tcv = "{{years}} 年期限，预先全额支付：{{tcv}}"
+validUntil = "有效期至 {{date}}"
+
 [portal.procurement.schedule]
 fallback = "无法加载调度程序。"
 fallbackLink = "在新标签页中打开调度"
+loading = "正在加载调度器..."
 subtitle = "您的解决方案工程师将带领团队完成推出流程。请选择适合您的时间。"
 title = "安排通话"
 
-[portal.procurement.status]
-action = "需要操作"
-available = "可用"
-complete = "完成"
-pending = "待处理"
-request = "按请求提供"
+[portal.procurement.setup]
+airgap = "隔离网络"
+airgapSub = "封闭，无外发连接"
+back = "返回"
+businessName = "企业名称"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "托管，最快开始"
+continue = "继续"
+deployment = "应部署在哪里？"
+eula = "我同意 Stirling EULA 和商业条款。"
+fullName = "全名"
+fullNamePlaceholder = "您的姓名"
+invites = "邀请队友 · 可选"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "安排通话"
+seats = "测试人数"
+seatsPlaceholder = "例如：15"
+selfhost = "自托管"
+selfhostSub = "Docker 或 Kubernetes"
+start = "开始试用"
+stepOf = "第 {{n}} 步，共 {{total}} 步"
+subtitle = "免费 14 天，无需银行卡。"
+subtitleDetails = "为您的报价和协议提供一些详细信息。"
+talkFirst = "想先聊聊？"
+title = "设置您的试用"
+viewEula = "阅读"
+workEmail = "工作电子邮件"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "延长会增加 7 天并通知您的解决方案工程师。"
@@ -7808,20 +8685,6 @@ maxed = "已达上限"
 subtitle = "您的免费试用持续到 {{date}}。无需银行卡。"
 title = "企业试用"
 
-[portal.procurement.upsell]
-homeBadge = "企业版"
-homeBody = "承诺用量定价、全组织 SSO + SCIM + RBAC、90 天不可变审计，以及专属 SE。"
-homeCta = "开始试用 →"
-homeHeadline = "处理数百万个 PDF。"
-
-[portal.recentActivity]
-title = "最近活动"
-viewAll = "查看全部"
-
-[portal.recentActivity.empty]
-description = "管道运行、部署和代理事件将显示在这里。"
-title = "这里还没有内容"
-
 [portal.search]
 ariaLabel = "搜索"
 placeholder = "搜索 Stirling — 端点、管道、文档…"
@@ -7838,58 +8701,50 @@ admin = "管理员"
 [portal.settings.sections]
 account-link = "账户关联"
 
-[portal.shell.header]
-accountFallback = "账户"
-accountMenu = "账户菜单"
-darkMode = "深色模式"
-lightMode = "浅色模式"
-search = "搜索"
-searchPlaceholder = "搜索…"
-signOut = "退出登录"
-switchToDark = "切换到深色主题"
-switchToLight = "切换到浅色主题"
-
 [portal.shell.sidebar]
 appEditor = "编辑器"
 appProcessor = "处理器"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} 个文档"
 linkAccount = "关联 Stirling 账户"
-planEditor = "编辑器方案"
-planEnterprise = "企业版方案"
-planProcessor = "处理器方案"
 primaryNav = "主导航"
 switchApp = "切换应用"
 
+[portal.shell.topbar]
+closeNav = "关闭导航"
+openNav = "打开导航"
+search = "搜索"
+
 [portal.sources]
 subtitle = "可重复使用的输入连接，将文档送入 Stirling。配置一次连接，然后可在任意数量的政策中引用它。点击一行可查看其配置以及使用它的政策。"
 title = "来源"
 
 [portal.sources.actions]
-agentBuilder = "代理构建器"
 connectSource = "连接来源"
 
+[portal.sources.builder]
+back = "返回来源"
+backToTypes = "所有来源类型"
+cancel = "取消"
+chooseHint = "选择文档来自哪里。灰色连接器即将推出。"
+comingSoon = "即将推出"
+comingSoonHeading = "即将推出"
+create = "创建来源"
+createTitle = "连接来源"
+delete = "删除"
+editTitle = "编辑来源"
+enabled = "已启用"
+save = "保存更改"
+
+[portal.sources.builder.folderAccess]
+description = "文件夹自动化只能使用管理员已允许的文件夹。请在文件夹访问设置中添加它，然后重试。"
+openSettings = "文件夹访问设置"
+title = "不允许使用此文件夹"
+
 [portal.sources.delete]
 body = "删除 \"{{name}}\"？此操作无法撤销。引用它的政策需要更新。"
 cancel = "取消"
 confirm = "删除"
 title = "删除来源？"
 
-[portal.sources.detail]
-closeAriaLabel = "关闭详情"
-delete = "删除来源"
-docs24h = "最近 24 小时"
-docs30d = "最近 30 天"
-docsTotal = "总计已见"
-docsTrend = "最近 30 天的文档"
-documents = "文档"
-edit = "编辑"
-notReferenced = "未被任何政策引用，因此可以安全删除。"
-pause = "暂停"
-resume = "恢复"
-subtitle = "{{type}} · {{status}}"
-usedBy = "使用者"
-
 [portal.sources.empty]
 description = "连接一个文件夹（很快还可连接云存储），让您的政策有位置可拉取文档。"
 title = "尚未连接来源"
@@ -7899,18 +8754,57 @@ inUse = "使用中"
 total = "连接"
 unused = "未使用"
 
+[portal.sources.networkFields.connection]
+helperText = "包含服务器地址和凭据的已保存连接。由引用它的每个来源重复使用。"
+label = "连接"
+
+[portal.sources.networkFields.directory]
+helperText = "服务器上要轮询的文件夹，相对于登录主目录或共享根目录。留空表示根目录。"
+label = "文件夹"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume 会在每个策略处理完文件后，从服务器移除该文件。"
+label = "读取模式"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume：每个文件只处理一次"
+snapshot = "Snapshot：每次运行重新读取文件夹"
+
+[portal.sources.networkFields.recursive]
+label = "文件夹深度"
+
+[portal.sources.networkFields.recursive.options]
+all = "包含子文件夹"
+top = "仅顶层"
+
 [portal.sources.status]
 active = "活动"
 disabled = "已禁用"
 unused = "未使用"
 
 [portal.sources.table]
+documents = "文档"
 source = "来源"
 status = "状态"
 usedBy = "政策"
 
+[portal.sources.types.box]
+description = "从您团队已共享的 Box 文件夹中拉取文档。"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "从共享 Dropbox 文件夹中拉取文档。"
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "您的团队在编辑器中处理过的文档，涵盖策略和 AI 运行。"
 label = "编辑器"
+noPolicies = "编辑器尚未运行任何策略。"
+
+[portal.sources.types.email]
+description = "将发送到专用邮箱的附件转换为文档。"
+label = "电子邮件收件箱"
 
 [portal.sources.types.folder]
 description = "监视服务器上的目录以发现新文档。"
@@ -7943,25 +8837,80 @@ label = "文件夹深度"
 all = "包含子文件夹"
 top = "仅顶层"
 
+[portal.sources.types.ftp]
+description = "轮询 FTP 或 FTPS 服务器文件夹以获取新文档。"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "从共享 Google Drive 文件夹中拉取文档。"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "监视 SMB 网络共享以获取新文档。"
+label = "网络驱动器"
+
+[portal.sources.types.onedrive]
+description = "监视 OneDrive 文件夹以获取新文档。"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "从 Amazon S3 或 S3-compatible 存储桶中拉取文档。"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "保存的连接，包含存储桶和凭据。由引用它的每个来源和流水线输出重复使用。"
+label = "连接"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume 会在每个策略处理完对象后，从存储桶移除该对象。"
+label = "读取模式"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume：每个对象只处理一次"
+snapshot = "Snapshot：每次运行重新读取存储桶"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "仅处理键以此前缀开头的对象。"
+label = "键前缀"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "轮询 SFTP 投递文件夹以获取新文档。"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "从 SharePoint 文档库中拉取文档。"
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "来源"
 
+[portal.sources.types.webhook]
+createNote = "创建此 webhook 时会生成投递 URL 和签名密钥。发送方将文档 POST 到该 URL，引用的策略会在到达时运行。"
+description = "通过来自任何外部系统的已签名 HTTP POST 接收文档。"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "投递 URL"
+secretNote = "签名密钥仅在创建 webhook 时显示一次。重新创建来源以轮换它。"
+
+[portal.sources.types.webhook.reveal]
+copy = "复制"
+done = "完成"
+secret = "签名密钥"
+secretHelp = "使用此密钥（HMAC-SHA256）对每次投递的原始正文进行签名，并将其作为 X-Stirling-Signature header 发送。"
+secretWarning = "现在复制签名密钥。为了您的安全，它只显示一次，之后无法找回。"
+title = "Webhook 已创建"
+url = "投递 URL"
+usage = "将每个文档作为原始请求正文 POST 到投递 URL，并使用 binary 内容类型（application/pdf 或 application/octet-stream）。引用的策略会在到达时自动运行。"
+
 [portal.sources.wizard]
-back = "返回"
-cancel = "取消"
-continue = "继续"
-editTitle = "编辑来源"
 name = "名称"
 namePlaceholder = "例如 理赔接收"
-save = "保存更改"
-subtitle = "第 {{current}} 步，共 {{total}} 步 · {{label}}"
-title = "连接来源"
 type = "类型"
 
-[portal.sources.wizard.steps]
-chooseType = "选择类型"
-configure = "配置"
-review = "审核并连接"
+[portal.stepModal]
+close = "关闭"
 
 [portal.usage]
 managePayment = "管理付款"
@@ -8021,16 +8970,9 @@ summary = "拥有团队——管理其成员的资源和共享配置。"
 2 = "通过默认政策访问门户"
 3 = "成员能做的一切"
 
-[portal.welcome]
-ariaLabel = "欢迎使用 Stirling PDF"
-badge = "开源"
-installEditor = "安装编辑器"
-inviteTeammates = "邀请队友"
-openInBrowser = "在浏览器中打开"
-perks = "永久免费 · 可自托管"
-subtitle = "世界上最安全的 PDF 编辑器对各种规模的团队免费。包含 60+ 项 PDF 操作和 SSO。"
-title = "欢迎使用"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · 无限"
 
 [printFile]
 title = "ཡིག་ཆ་པར་འདེབས།"
@@ -8613,6 +9555,14 @@ text = "以 90 度为增量将 PDF 页面顺时针或逆时针旋转。PDF 中
 [rotate.tooltip.header]
 title = "旋转设置概览"
 
+[ruler]
+clearAll = "全部清除"
+hideAllLabels = "隐藏所有标签"
+hideSmallLabels = "隐藏小标签"
+physicalValues = "物理"
+scaled = "已缩放"
+showAllLabels = "显示所有标签"
+
 [sanitize]
 desc = "从 PDF 文件中移除潜在有害元素。"
 sanitizationResults = "净化结果"
@@ -8654,31 +9604,45 @@ label = "移除 XMP 元数据"
 [sanitize.steps]
 settings = "设置"
 
-[sanitizePdf]
-tags = "གཙང་སེལ།,བདེ་འཇགས།,ཉེན་མེད།,ཉེན་ཁ་སེལ་བ།"
-
 [sanitizePDF]
 title = "PDF གཙང་སེལ།"
 
+[sanitizePdf]
+tags = "གཙང་སེལ།,བདེ་འཇགས།,ཉེན་མེད།,ཉེན་ཁ་སེལ་བ།"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "ཤོག་ངོས་ཆེ་ཆུང་སྙོམ་སྒྲིག"
 
+[scaleSettings]
+activeScale = "当前比例"
+apply = "应用比例"
+applyCalibration = "应用校准"
+calculatedScale = "计算比例"
+calibrate = "校准"
+calibrating = "正在校准"
+calibrationDistanceRequired = "请输入大于零的实际距离"
+calibrationInvalid = "无法根据此测量值计算比例"
+calibrationPaperDistance = "测得页面距离：{{distance}}"
+calibrationTitle = "校准比例"
+calibrationTooltip = "测量已知距离以自动计算比例"
+customScale = "自定义比例"
+noneSet = "未设置自定义比例"
+presets = "预设比例"
+ratio = "比例比率"
+ratioHelp = "比率：1 个页面单位 = X 个实际单位"
+ratioPlaceholder = "例如，100"
+ratioPositive = "比率必须大于零"
+ratioRequired = "必须填写比率"
+realDistance = "实际距离"
+realDistancePlaceholder = "例如，5"
+reset = "重置为默认值"
+unit = "单位"
+unitInvalid = "无效单位：{{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "�ུར་ཚད་མཚམས།"
-10 = "ཕྱིར་འདོན་པའི་ནང་དཀར་མཐའ་འགོག་པའི་ཆེད་དུ་སྣོན་པ་དང་སུབ་པ་བྱེད་པ�� (སྔོན་སྒྲིག 1)"
-2 = "པར་རིས་འཁོར་སྐྱོད་བྱེད་དགོས་པའི་ཉུང་མཐའི་ཟུར་ཚད་སྒྲིག་འགོད་བྱེད་པ། (སྔོན་སྒྲིག 10)"
-3 = "བཟོད་སྲན་ཚད།"
-4 = "ཚོད་དཔག་བྱས་པའི་རྒྱབ་ལྗོངས་ཚོས་གཞིའི་མཐའ་འཁོར་གྱི་ཚོས་མདོག་འགྱུར་བའི་ཁྱབ་ཚད་ཐག་གཅོད་བྱེད་པ། (སྔོན་སྒྲིག 30)"
-5 = "ཉུང་མཐའི་རྒྱ་ཁྱོན།"
-6 = "པར་རིས་ཤིག་གི་ཉུང་མཐའི་རྒྱ་ཁྱོན་མཚམས་སྒྲིག་འགོད་བྱེད་པ། (སྔོན་སྒྲིག 10000)"
-7 = "ཉུང་མཐའི་མཐའ་འཁོར་རྒྱ་ཁྱོན།"
-8 = "པར་རིས་ཤིག་གི་ཉུང་མཐའི་མཐའ་འཁོར་རྒྱ་ཁྱོན་མཚམས་སྒྲིག་འགོད་བྱེད་པ།"
-9 = "མཐའ་མཚམས་ཆེ་ཆུང་།"
-
 [scannerImageSplit]
 submit = "提取图像扫描"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "功能简介"
 whatThisDoesDesc = "自动在扫描页或合成图中查找并提取每张照片——无需手动裁剪。"
 whenToUse = "适用场景"
 
+[ScannerImageSplit.selectText]
+1 = "�ུར་ཚད་མཚམས།"
+10 = "ཕྱིར་འདོན་པའི་ནང་དཀར་མཐའ་འགོག་པའི་ཆེད་དུ་སྣོན་པ་དང་སུབ་པ་བྱེད་པ�� (སྔོན་སྒྲིག 1)"
+2 = "པར་རིས་འཁོར་སྐྱོད་བྱེད་དགོས་པའི་ཉུང་མཐའི་ཟུར་ཚད་སྒྲིག་འགོད་བྱེད་པ། (སྔོན་སྒྲིག 10)"
+3 = "བཟོད་སྲན་ཚད།"
+4 = "ཚོད་དཔག་བྱས་པའི་རྒྱབ་ལྗོངས་ཚོས་གཞིའི་མཐའ་འཁོར་གྱི་ཚོས་མདོག་འགྱུར་བའི་ཁྱབ་ཚད་ཐག་གཅོད་བྱེད་པ། (སྔོན་སྒྲིག 30)"
+5 = "ཉུང་མཐའི་རྒྱ་ཁྱོན།"
+6 = "པར་རིས་ཤིག་གི་ཉུང་མཐའི་རྒྱ་ཁྱོན་མཚམས་སྒྲིག་འགོད་བྱེད་པ། (སྔོན་སྒྲིག 10000)"
+7 = "ཉུང་མཐའི་མཐའ་འཁོར་རྒྱ་ཁྱོན།"
+8 = "པར་རིས་ཤིག་གི་ཉུང་མཐའི་མཐའ་འཁོར་རྒྱ་ཁྱོན་མཚམས་སྒྲིག་འགོད་བྱེད་པ།"
+9 = "མཐའ་མཚམས་ཆེ་ཆུང་།"
+
 [search]
 noResults = "未找到结果"
 placeholder = "输入搜索词..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "您的 Stirling-PDF 服务器已离线，且本地后
 [session]
 expired = "ཁྱེད་ཀྱི་གླེང་མོལ་དུས་ཡོལ་ཟིན། ཤོག་ངོས་གསར་སྒྱུར་བྱས་ནས་ཡང་བསྐྱར་ཚོད་ལྟ་བྱེད་རོགས།"
 
-[sessionManagement.tooltip]
-header = "签署会话管理"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "新增参与者将被添加到签署顺序末尾"
-bullet2 = "会话定稿后无法再添加参与者"
-bullet3 = "到其轮次时，每位参与者都会收到通知"
-description = "在定稿之前，您可随时向活动会话添加更多参与者。"
-title = "添加参与者"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>完全定稿</b>：所有参与者均已签署"
-bullet2 = "<b>部分定稿</b>：部分参与者尚未签署"
-bullet3 = "未签署的参与者将被排除在最终文档之外"
-bullet4 = "定稿后，您可以将已签署的 PDF 加载到活动文件中"
-description = "定稿会将所有签名合并为一个已签署的 PDF。此操作无法撤销。"
-title = "会话定稿"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "无法移除已签署的参与者"
-bullet2 = "被移除的参与者将不再接收通知"
-bullet3 = "签署顺序将自动调整"
-description = "参与者可在签署前从会话中移除。"
-title = "移除参与者"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "每个签名都会按顺序应用到 PDF"
-bullet2 = "后续签署者可以看到先前的签名"
-bullet3 = "对审批流程和法律保全链至关重要"
-description = "您在创建会话时指定的顺序决定谁先签署。"
-title = "签署顺序"
-
 [settings]
 close = "关闭"
 
+[settings.ai]
+documents = "文档与 RAG"
+general = "常规"
+limits = "限制与性能"
+models = "模型与提供商"
+title = "AI"
+
 [settings.configuration]
 advanced = "高级"
 database = "数据库"
 endpoints = "端点"
 features = "功能"
+folderAccess = "文件夹访问权限"
 mcp = "MCP Server"
 storageSharing = "文件存储与共享"
 systemSettings = "系统设置"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "默认 PDF 编辑器"
 defaultPdfEditorActive = "Stirling PDF 是您的默认 PDF 编辑器"
 defaultPdfEditorChecking = "正在检查..."
 defaultPdfEditorInactive = "已由其他应用设为默认"
+defaultPdfEditorRemind = "提醒我设为默认"
+defaultPdfEditorRemindDescription = "当 Stirling PDF 不是您的默认 PDF 应用程序时显示横幅。"
 defaultPdfEditorSet = "已是默认"
 defaultStartupView = "启动时的默认视图"
 defaultStartupViewDescription = "选择应用启动时左侧栏中默认激活的选项卡"
@@ -8817,9 +9771,18 @@ languageDescription = "选择显示语言"
 logout = "退出登录"
 setAsDefault = "设为默认"
 theme = "主题"
+themeAccent = "强调色"
+themeAccentCustom = "自定义颜色"
+themeAccentCustomHint = "自定义（建议使用默认值）"
+themeAccentDark = "深色模式强调色"
+themeAccentDefault = "默认"
+themeAccentDefaultHint = "默认主题（推荐）"
+themeAccentDescription = "按钮、链接和高亮会遵循该颜色，并为应用轻微着色。浅色和深色模式各自有单独设置。系统会使用当前启用的设置。"
+themeAccentLight = "浅色模式强调色"
 themeDark = "深色"
 themeDescription = "在浅色与深色模式之间切换"
 themeLight = "浅色"
+themeReset = "将主题恢复为默认"
 themeSystem = "System"
 title = "常规"
 user = "用户"
@@ -8833,6 +9796,12 @@ intro = "为您的组织启用用户认证、团队管理和工作区功能。"
 learnMore = "在文档中了解更多"
 title = "面向系统管理员"
 
+[settings.general.loginLanding]
+description = "选择登录 Stirling Cloud 后打开哪个应用。"
+editor = "编辑器"
+processor = "处理器"
+title = "登录后"
+
 [settings.general.mode]
 fullscreen = "全屏"
 sidebar = "侧边栏"
@@ -9041,6 +10010,11 @@ security = "安全"
 telegram = "Telegram"
 title = "安全与认证"
 
+[settings.signOut]
+confirm = "您确定要退出登录吗？"
+submit = "退出登录"
+title = "退出登录"
+
 [settings.team]
 title = "团队"
 
@@ -9657,6 +10631,9 @@ uploadButton = "上传到服务器"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "点击此处"
+fallback = "如果没有自动打开，"
+opening = "正在新标签页中打开 Swagger UI..."
 tags = "api,文档,swagger,端点,开发"
 title = "API 文档"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "在“活动文件”中选择文件以运行此工具"
 singleFileScope = "仅应用于：{{fileName}}"
 viewerMode = "切换到文件编辑器以选择多个文件。"
 
+[toolFormat]
+ANY = "任何文件"
+CBR = "漫画书归档文件 (CBR)"
+CBZ = "漫画书归档文件 (CBZ)"
+CSV = "CSV 文件"
+EBOOK = "电子书"
+EMAIL = "电子邮件"
+EXCEL = "电子表格"
+HTML = "网页"
+IMAGE = "图像"
+JAVASCRIPT = "JavaScript 文件"
+JSON = "JSON 文件"
+MARKDOWN = "Markdown 文件"
+NONE = "无文件"
+PCL = "PCL 打印文件"
+PDF = "PDF"
+PDF_ENCRYPTED = "受密码保护的 PDF"
+POSTSCRIPT = "PostScript 文件"
+PPT = "演示文稿"
+TEXT = "文本文件"
+VIDEO = "视频"
+WORD = "Word 文档"
+XML = "XML 文件"
+XPS = "XPS 文档"
+ZIP = "ZIP 归档文件"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "返回所有工具"
 collapse = "折叠面板"
 expand = "展开面板"
 goBack = "返回"
+pdfTools = "PDF 工具"
 placeholder = "选择一个工具以开始"
 premiumFeature = "高级功能："
+searchTools = "搜索工具"
 toolsHeader = "工具"
 viewAllTools = "查看所有工具"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "未找到工具"
 quickAccess = "快速访问"
 searchPlaceholder = "搜索工具..."
 
-[toolPicker.categories]
-advancedTools = "高级工具"
-recommendedTools = "推荐工具"
-standardTools = "标准工具"
-
 [toolPicker.subcategories]
 advancedFormatting = "高级格式化"
 automation = "自动化"
@@ -9950,16 +10950,31 @@ title = "用户"
 you = "（您）"
 
 [users.action]
+cancelInvite = "取消邀请"
 deleteTeam = "删除团队"
 disableMfa = "重置 MFA"
 move = "移动到团队"
 reinstate = "恢复"
 remove = "从组织中移除"
+removeTeam = "从团队中移除"
 rename = "重命名团队"
 resetPw = "重置密码"
 suspend = "暂停"
 unlock = "解锁账户"
 
+[users.activity]
+daysAgo = "{{count}} 天前"
+hoursAgo = "{{count}} 小时前"
+justNow = "刚刚"
+minutesAgo = "{{count}} 分钟前"
+monthsAgo_one = "{{count}} 个月前"
+monthsAgo_other = "{{count}} 个月前"
+never = "从未"
+weeksAgo_one = "{{count}} 周前"
+weeksAgo_other = "{{count}} 周前"
+yearsAgo_one = "{{count}} 年前"
+yearsAgo_other = "{{count}} 年前"
+
 [users.cap]
 addProcessor = "+ 处理器"
 approver = "批准政策"
@@ -9967,11 +10982,14 @@ editor = "编辑器"
 processor = "处理器"
 
 [users.confirm]
+cancelInviteBody = "要取消对 {{email}} 的邀请吗？他们将无法使用当前链接加入。"
+cancelInviteTitle = "取消邀请"
 deleteTeamBody = "删除 {{name}} 团队？团队必须先为空 - 将其成员移动到其他团队，并且它不能仍拥有任何集成配置。"
 deleteTeamTitle = "删除团队"
 disableMfaBody = "移除 {{name}} 的 MFA 注册？如果需要，他们将在下次登录时重新设置。"
 disableMfaTitle = "重置 MFA"
 removeBody = "永久从组织中移除 {{name}}？此操作无法撤销。"
+removeTeamBody = "要将 {{name}} 从团队中移除吗？他们将保留账户，但会失去对此团队资源的访问权限。"
 removeTitle = "移除成员"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "用户名"
 usernameError = "用户名必须至少包含 3 个字符"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "由 {{who}} 邀请"
+cancel = "取消"
+count = "{{count}} 个待处理"
+desc = "已邀请但尚未加入的人员。他们在接受前会占用一个席位。"
+expiresInDays_one = "{{count}} 天后过期"
+expiresInDays_other = "{{count}} 天后过期"
+expiresToday = "今天过期"
+title = "待处理邀请"
+
 [users.loadError]
 description = "连接后端时出错，或者你没有访问权限。请重试。"
 title = "无法加载成员"
@@ -10212,9 +11240,11 @@ title = "附件"
 
 [viewer.bookmarks]
 bookmarkTitle = "书签标题"
+bookmarkTitleRequired = "必须填写书签标题"
 closeSidebar = "关闭书签侧边栏"
 collapseAll = "折叠所有书签"
 expandAll = "展开所有书签"
+searchPlaceholder = "搜索书签"
 
 [viewer.comments]
 addComment = "添加评论"
@@ -10605,30 +11635,6 @@ title = "水印文本"
 image = "图像"
 text = "文本"
 
-[wetSignature.tooltip]
-header = "签名创建方式"
-
-[wetSignature.tooltip.draw]
-bullet1 = "自定义笔的颜色和粗细"
-bullet2 = "清除并重新绘制，直到满意为止"
-bullet3 = "适用于触控设备（平板、手机）"
-description = "使用鼠标或触摸屏创建手写签名。最适合个人、真实的签名。"
-title = "绘制签名"
-
-[wetSignature.tooltip.type]
-bullet1 = "可从多种字体中选择"
-bullet2 = "自定义文本大小和颜色"
-bullet3 = "非常适合标准化签名"
-description = "从输入的文本生成签名。快速且一致，适用于商务文档。"
-title = "输入签名"
-
-[wetSignature.tooltip.upload]
-bullet1 = "支持 PNG、JPG 及其他图像格式"
-bullet2 = "为获得最佳效果，建议使用透明背景"
-bullet3 = "图像会调整大小以适配签名区域"
-description = "上传预先创建的签名图像。若您有扫描的签名或公司徽标，效果理想。"
-title = "上传签名图像"
-
 [workbenchBar]
 activeFiles = "活动文件"
 annotations = "注释"
@@ -10652,6 +11658,7 @@ redact = "涂黑"
 rotateLeft = "向左旋转"
 rotateRight = "向右旋转"
 ruler = "标尺 / 测量"
+rulerSettings = "比例设置"
 save = "保存"
 saveAll = "全部保存"
 saveAs = "另存为"
diff --git a/frontend/editor/public/locales/zh-CN/translation.toml b/frontend/editor/public/locales/zh-CN/translation.toml
index a391627a4b..e6aa3b3fbf 100644
--- a/frontend/editor/public/locales/zh-CN/translation.toml
+++ b/frontend/editor/public/locales/zh-CN/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "选中的文件"
 font = "字体"
 fontSizeTooltip = "页码文本的点数大小。数值越大文字越大。"
 fontTypeTooltip = "页码的字体族。根据文档风格选择。"
-genericSubmit = "提交"
 green = "绿色"
 help = "帮助"
-imgPrompt = "选择图像"
 incorrectPasswordMessage = "当前密码不正确。"
 info = "信息"
 invalidUndoData = "无法撤销：操作数据无效"
@@ -62,7 +60,6 @@ loginAgreementTitle = "登录协议"
 logOut = "退出登录"
 marginTooltip = "页码与页面边缘的距离。"
 moreOptions = "更多选项"
-multiPdfPrompt = "选择多个 PDF（2个或更多）"
 never = "从不"
 no = "否"
 noFileSelected = "未选择文件，请上传一个文件。"
@@ -80,7 +77,6 @@ pageOrderPrompt = "页面顺序（输入逗号分隔的页码列表或函数）
 pages = "页码"
 pageSelectionPrompt = "自定义页面选择（输入以逗号分隔的页码列表或函数：1,5,6、2n+1）："
 password = "密码"
-pdfPrompt = "选择 PDF"
 pin = "固定文件（在工具运行后保持激活）"
 pro = "专业版"
 processingComplete = "您的文件已就绪。"
@@ -356,6 +352,7 @@ text = "这些权限控制用户对 PDF 的操作。与所有者密码配合时
 title = "更改权限"
 
 [addStamp]
+preview = "预览印章"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "手动下载：点击链接并将文件放入 tessdata 文件夹
 noLanguages = "在配置的目录中未找到 tessdata 语言。"
 permissionNotice = "tessdata 路径不可写。下载将会在浏览器中打开；请手动将 .traineddata 文件保存到 tessdata 文件夹中。"
 
+[admin.settings.ai.documents]
+description = "配置用于回答文档问题的嵌入模型和检索设置。保存后应用到 AI 引擎。"
+title = "文档与 RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "留空以使用引擎自身的环境凭据。适用于自托管单引擎部署。"
+generic = "嵌入 API key"
+openai = "OpenAI API key"
+setPlaceholder = "已保存 - 留空以保留当前 key"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI 兼容 / Ollama 嵌入端点的基础 URL，例如 http://ollama:11434/v1。必须指向受信任的内部端点（SSRF 敏感）。"
+label = "嵌入基础 URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "嵌入模型名称。可自由输入；建议仅作提示。"
+label = "嵌入模型"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "用于将文档文本转换为向量嵌入的提供商。"
+label = "嵌入提供商"
+
+[admin.settings.ai.documents.maxSearches]
+description = "代理每个请求最多可执行的检索搜索次数。"
+label = "最大搜索次数"
+
+[admin.settings.ai.documents.reindexNote]
+body = "更改嵌入模型会立即生效，但使用先前模型索引的文档必须重新索引，搜索才能返回正确结果。"
+title = "需要重新索引"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "如果更改了嵌入模型，请重新索引现有文档，以便搜索使用新模型。"
+
+[admin.settings.ai.documents.topK]
+description = "每次搜索检索的最相关片段数量。"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "将 Stirling 连接到 Python AI 引擎，并选择公开哪些 AI 能力。更改将在重启后生效。"
+title = "AI 引擎"
+
+[admin.settings.ai.general.capabilities]
+description = "开启或关闭单个 AI 功能。已禁用的功能会在应用中隐藏。"
+title = "能力"
+
+[admin.settings.ai.general.enabled]
+description = "总开关。关闭时，所有 AI 工具、代理或引擎调用都不可用。"
+label = "启用 AI"
+
+[admin.settings.ai.general.features.chat]
+description = "用于处理 PDF 的对话助手。"
+label = "聊天助手"
+
+[admin.settings.ai.general.features.classify]
+description = "按类型或内容自动分类文档。"
+label = "文档分类"
+
+[admin.settings.ai.general.features.createPdf]
+description = "通过 AI 代理生成新的 PDF（例如从 HTML 生成）。"
+label = "从提示词创建 PDF"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "提问并获取基于上传文档的答案。"
+label = "文档问答"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "检查文档中的数学和数值错误。"
+label = "数学审核器"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "向 PDF 添加由 AI 编写的审阅评论和注释。"
+label = "PDF 评论代理"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "文档生成等较重代理操作的超时时间。"
+label = "长时间运行超时（秒）"
+
+[admin.settings.ai.general.note]
+body = "AI 引擎作为独立服务运行。其共享密钥"
+body2 = "通过容器环境变量设置。提供商 API key 可以在这些页面输入，也可以作为引擎环境变量提供；此处输入的 key 会在保存时推送到引擎。"
+title = "关于 AI 引擎"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "流式（逐 token）聊天响应的超时时间。"
+label = "流超时（秒）"
+
+[admin.settings.ai.general.test]
+button = "测试连接"
+failBody = "AI 引擎未响应。请检查 URL、引擎容器是否正在运行，以及 AI 是否已启用（启用后需要重启）。"
+failTitle = "无法访问 AI 引擎"
+okBody = "AI 引擎已响应健康检查。"
+okTitle = "AI 引擎可访问"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "发送到引擎的标准 AI 请求超时时间。"
+label = "请求超时（秒）"
+
+[admin.settings.ai.general.url]
+description = "Python AI 引擎的内部 URL，例如 http://stirling-pdf-engine:5001。"
+label = "AI 引擎 URL"
+
+[admin.settings.ai.limits]
+description = "限制 AI 请求可执行的工作量以及并发运行数量的保护措施。保存后应用到 AI 引擎。"
+title = "限制与性能"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "保护措施：拒绝提取文本超过此长度的 AI 请求。"
+label = "每个请求最大字符数"
+
+[admin.settings.ai.limits.maxPages]
+description = "保护措施：拒绝超过此 PDF 页数的 AI 请求。"
+label = "每个请求最大页数"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "整个引擎中同时进行的模型调用最大数量。"
+label = "模型最大并发数"
+
+[admin.settings.ai.models]
+description = "选择 AI 引擎使用的 LLM 提供商以及智能/快速模型。保存后应用到 AI 引擎。"
+title = "模型与提供商"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "留空以使用引擎自身的环境凭据。适用于自托管单引擎部署。"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "已保存 - 留空以保留当前 key"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI 兼容 / Ollama 端点的基础 URL，例如 http://ollama:11434/v1。"
+label = "提供商基础 URL"
+warning = "基础 URL 必须指向受信任的内部端点。引擎将向其发起服务器端请求，因此不受信任的值存在 SSRF 风险。"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "快速模型的最大输出 token 数。"
+label = "快速模型最大 token 数"
+
+[admin.settings.ai.models.fastModel]
+description = "用于轻量任务的更便宜、更快速模型。可自由输入；建议仅作提示。"
+label = "快速模型"
+
+[admin.settings.ai.models.provider]
+description = "引擎连接的 LLM 提供商。"
+label = "提供商"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "智能模型的最大输出 token 数。"
+label = "智能模型最大 token 数"
+
+[admin.settings.ai.models.smartModel]
+description = "用于复杂推理的高能力模型。可自由输入；建议仅作提示。"
+label = "智能模型"
+
+[admin.settings.ai.saved]
+body = "更改会自动推送到 AI 引擎。"
+bodyNoPush = "设置已保存。下次 AI 引擎获取其配置时将应用这些设置。"
+title = "AI 设置已保存"
+
 [admin.settings.badge]
 clickToUpgrade = "点击查看计划详情"
 
@@ -938,6 +1094,25 @@ label = "启动时重新生成"
 description = "证书的有效天数"
 label = "证书有效期（天）"
 
+[admin.settings.folderAccess]
+description = "允许文件夹源和文件夹输出读取与写入的目录。这是一个安全边界：自动化绝不能指向此列表之外的服务器路径。"
+securityNote = "留空可完全禁用文件夹源和输出。Stirling 自身的配置目录始终禁止访问。"
+title = "文件夹访问"
+
+[admin.settings.folderAccess.implied]
+description = "这些由 Stirling 管理的目录始终允许访问，且不能在此处更改。"
+serverStorage = "服务器文件存储"
+title = "始终允许"
+watchedFolder = "流水线监视文件夹"
+
+[admin.settings.folderAccess.roots]
+add = "添加"
+empty = "未允许任何文件夹。文件夹源和输出当前已禁用。"
+hint = "输入绝对路径，例如 /data/inbox。"
+label = "允许的文件夹根目录"
+placeholder = "/data/inbox"
+remove = "移除文件夹根目录"
+
 [admin.settings.general]
 description = "配置全局应用设置，包括品牌和默认行为。"
 system = "系统"
@@ -1842,6 +2017,15 @@ export = "导出"
 accessDenied = "拒绝访问"
 insufficientPermissions = "您没有执行此操作的权限。"
 
+[auth.callback]
+completing = "正在完成身份验证"
+invalidToken = "OAuth 登录失败 - token 无效。"
+missingToken = "OAuth 登录失败 - 未收到 token。"
+oauthFailed = "OAuth 登录失败。请重试。"
+pleaseWait = "请稍候，我们正在完成登录。"
+signedOut = "您已退出登录。请重新登录。"
+windowMayClose = "完成后即可关闭此窗口。"
+
 [auth.displayName]
 guest = "访客"
 user = "用户"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "通过移除可能的恶意内容（如 JavaScript 和嵌
 description = "此工具将基于内容自动重命名 PDF 文件。它会分析文档以从文本中找到最合适的标题。"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "自动旋转"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "置信度阈值"
+
+[autoRotate.detectionMode]
+auto = "自动"
+osd = "仅 OCR"
+text = "仅文本"
+title = "检测方法"
+
+[autoRotate.error]
+failed = "自动旋转 PDF 时发生错误。"
+
+[autoRotate.inferUndetected]
+title = "旋转低置信度页面以匹配"
+
+[autoRotate.report]
+applied = "{{degrees}}° 顺时针"
+confidenceValue = "置信度 {{value}}"
+noChange = "无更改"
+pageLabel = "第 {{number}} 页"
+summary = "{{total}} 页中已旋转 {{rotated}} 页，{{unchanged}} 页保持原样"
+title = "检测报告"
+
+[autoRotate.report.method]
+inferred = "已匹配"
+none = "已跳过"
+osd = "OCR"
+text = "文本"
+
+[autoRotate.report.note]
+belowThreshold = "低于阈值"
+blankPage = "页面为空白"
+inferredFromDocument = "与其他页面相同"
+noDominantDirection = "文本方向混合"
+osdFailed = "未找到可读文本"
+osdNoVerdict = "无法判断朝向"
+tesseractUnavailable = "未安装 OCR"
+tooFewGlyphs = "文本过少"
+
+[autoRotate.results]
+title = "自动旋转结果"
+
+[autoRotate.settings]
+title = "设置"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "在旋转页面前，检测结果需要达到的确定程度。降低它可旋转更多页面，提高它可让更多页面保持不变。"
+title = "置信度阈值"
+
+[autoRotate.tooltip.description]
+text = "判断每个页面应朝向哪边，并将其旋转到正确方向。已经正向的页面会保持不变。"
+
+[autoRotate.tooltip.detectionMode]
+text = "自动会先读取页面上的文本，如果不足，再将页面作为图像检查。仅文本会跳过图像检查，适合从未扫描过的文档且速度最快。仅 OCR 会将每个页面都视为图像。"
+title = "检测方法"
+
+[autoRotate.tooltip.header]
+title = "自动旋转"
+
+[autoRotate.tooltip.inferUndetected]
+text = "空白或几乎空白的页面无法单独检查。当所有可读取页面都需要相同旋转时，这些页面也会旋转以匹配它们。"
+title = "旋转低置信度页面以匹配"
+
 [autoSizeSplitPDF]
 tags = "pdf、拆分、文件、组织"
 
@@ -2189,33 +2440,6 @@ keywords = "关键字：odd、even"
 numbers = "数字/范围：5，10-20"
 progressions = "等差：3n，4n+1"
 
-[certificateChoice.tooltip]
-header = "证书类型"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "由系统管理员管理"
-bullet2 = "在授权用户间共享"
-bullet3 = "代表公司身份，而非个人"
-bullet4 = "最佳用途：正式文档、团队签署"
-description = "由您的组织提供的共享证书。用于全公司范围的签署授权。"
-title = "组织证书"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "首次使用时自动生成"
-bullet2 = "与您的用户帐户绑定"
-bullet3 = "不可与其他用户共享"
-bullet4 = "最佳用途：个人文档、个人责任"
-description = "为您的用户帐户自动生成的唯一证书。适用于个人签名。"
-title = "个人证书"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "需要 P12/PFX 文件和密码"
-bullet2 = "可由外部证书颁发机构签发"
-bullet3 = "对法律文档具有更高信任级别"
-bullet4 = "最佳用途：具有法律效力的合同、外部验证"
-description = "使用您自己的 PKCS#12 证书文件。可完全控制证书属性。"
-title = "上传自定义 P12"
-
 [certSign]
 awaitingSignatures = "等待签署"
 chooseCertificate = "选择证书文件"
@@ -2542,34 +2766,6 @@ server = "服务器"
 stepTitle = "证书来源"
 upload = "上传"
 
-[certSign.tooltip.header]
-title = "签名管理说明"
-
-[certSign.tooltip.overview]
-bullet1 = "检查现有签名及其有效性"
-bullet2 = "查看签署人和证书的详细信息"
-bullet3 = "添加新的数字签名以保护文档"
-bullet4 = "支持多个文件并便于导航"
-text = "此工具可检查您的 PDF 是否已数字签名，并可添加新的数字签名。数字签名可证明文档的创建者或批准者，并显示签署后是否被更改。"
-title = "该工具能做什么？"
-
-[certSign.tooltip.signing]
-bullet1 = "支持 PEM、PKCS12、JKS 以及服务器证书格式"
-bullet2 = "可选择在 PDF 上显示或隐藏签名"
-bullet3 = "可添加原因、地点和签署人姓名"
-bullet4 = "可选择放置可见签名的页面"
-bullet5 = "可使用服务器证书实现简便的“使用 Stirling-PDF 签名”选项"
-text = "要对 PDF 进行签名，您需要数字证书（如 PEM、PKCS12 或 JKS）。您可以选择让签名在文档上可见，或仅用于安全而不可见。"
-title = "添加签名"
-
-[certSign.tooltip.validation]
-bullet1 = "显示签名是否有效"
-bullet2 = "显示签署人信息与签署日期"
-bullet3 = "检查文档在签署后是否被修改"
-bullet4 = "可使用自定义证书进行验证"
-text = "检查签名时，工具会告诉您签名是否有效、谁签了名、何时签的，以及自签署后文档是否被更改。"
-title = "检查签名"
-
 [changeCreds]
 changeUsername = "更新您的用户名。更新后您将被登出。"
 credsUpdated = "账户已更新"
@@ -2824,6 +3020,7 @@ next = "下一页"
 preview = "预览"
 previous = "上一页"
 refresh = "刷新"
+remaining = "剩余"
 retry = "重试"
 save = "保存"
 
@@ -3264,24 +3461,6 @@ description = "These cookies are essential for the website to function properly.
 posthog = "PostHog 分析"
 scarf = "Scarf Pixel"
 
-[credits.modal]
-advancedMonitoring = "高级监控"
-allInOneWorkspace = "一体化 PDF 工作空间（查看器、工具与代理）"
-apiSandbox = "API 沙盒"
-dedicatedSupportSlas = "专属支持与 SLA"
-fasterThroughput = "吞吐量提升 10 倍"
-fullyPrivateFiles = "完全私密的文件"
-largeFileProcessing = "大文件处理"
-orgWideAccess = "组织范围的访问控制"
-premiumAiModels = "高级 AI 模型"
-prioritySupport = "优先支持"
-privateDocCloud = "私有文档云"
-ragFineTuning = "RAG + 微调"
-secureApiAccess = "安全 API 访问"
-standardThroughput = "标准吞吐量"
-unlimitedApiAccess = "无限 API 访问"
-unlimitedSeats = "无限席位"
-
 [crop]
 autoCrop = "自动裁剪空白"
 noFileSelected = "选择一个 PDF 文件开始裁剪"
@@ -3346,6 +3525,7 @@ message = "设置默认 PDF 处理程序失败"
 title = "错误"
 
 [defaultApp.prompt]
+dontRemind = "不再提醒我"
 message = "将 Stirling PDF 设为打开 PDF 文件的默认应用。"
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "自定义分组"
 dropHint = "打开文件以开始"
 dropToAdd = "Drop files to add"
 expand = "展开侧边栏"
-files = "文件"
 googleDrive = "Google Drive"
 googleDriveDisabled = "未配置 Google Drive"
 leaveMyFiles = "离开我的文件"
+library = "PDF 库"
 myFiles = "我的文件"
 noFiles = "暂无文件"
 openFileManager = "打开文件管理器"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "添加"
-addLabel = "添加标签…"
-categoryIconAria = "为 {{name}} 选择图标"
-createCategory = "创建类别"
-delete = "删除类别"
 done = "完成"
-hide = "隐藏类别"
-newCategory = "新类别名称…"
-removeLabel = "移除 {{name}}"
-rename = "重命名"
 reset = "重置为默认值"
-search = "搜索标签…"
-show = "显示类别"
 subtitle = "将文件分组到父类别中。向类别添加现有或新标签、重命名类别，或创建自己的类别。不属于任何类别的文件会显示在“其他”下。"
 title = "侧边栏类别"
 
@@ -3808,6 +3977,7 @@ refresh = "从服务器刷新"
 remove = "删除"
 removeVersion = "移除此版本"
 rename = "重命名"
+renamed = "已重命名"
 renameFolder = "重命名文件夹"
 resizeFolderTree = "调整文件夹树大小（方向键，按住 Shift 步长更大；双击自动适配）"
 save = "保存"
@@ -3910,9 +4080,7 @@ count = "文件数"
 folder = "文件夹"
 labels = "标签"
 modified = "修改时间"
-name = "名称"
 size = "大小"
-toolHistoryAtVersion = "累计工具链"
 totalSize = "总大小"
 type = "类型"
 versionHistory = "版本历程"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "全部已保存"
+extractCsvError = "提取 CSV 失败"
+extractXlsxError = "提取 XLSX 失败"
 flattenAfterFilling = "填写后扁平化"
+requiredAbbreviation = "必填"
+requiredFieldsError = "请填写所有必填字段"
 rescanFields = "重新扫描字段"
 rescanFormFields = "重新扫描表单字段"
 save = "保存"
+saveShortcut = "按 Ctrl+S 保存"
+unsavedChanges = "未保存的更改"
 
 [formFill.sidebar]
 close = "关闭侧边栏"
@@ -4309,6 +4484,11 @@ desc = "基于检测到的页眉自动重命名 PDF 文件"
 tags = "自动检测,基于标题,组织,重新标记"
 title = "自动重命名 PDF 文件"
 
+[home.autoRotate]
+desc = "检测每页的方向并自动旋转为正向。"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "自动旋转"
+
 [home.autoSizeSplitPDF]
 tags = "自动,拆分,大小"
 title = "自动根据大小/数目拆分 PDF"
@@ -4608,13 +4788,13 @@ hint = "上传 PNG、JPG、SVG 或其他图像文件以放置到 PDF 上。为
 label = "上传图片"
 placeholder = "选择图片文件"
 
-[imageToPdf]
-tags = "转换、图像、JPG、图片、照片"
-
 [imageToPDF]
 header = "将图片转换为 PDF"
 title = "图片转 PDF"
 
+[imageToPdf]
+tags = "转换、图像、JPG、图片、照片"
+
 [infoBanner]
 dismiss = "关闭"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "您已被邀请！"
 
 [landing]
 addFiles = "添加文件"
-heroSubtitle = "拖放或添加现有 PDF 以开始使用。"
 mobileUpload = "从手机上传"
 openFromComputer = "从电脑打开"
 uploadFromComputer = "从电脑上传"
-workbenchEmptyStateHero = "将 PDF 拖放到任意位置"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "登录"
 magicLinkSent = "魔法链接已发送至 {{email}}！请检查邮箱并点击链接登录。"
 mfaCode = "认证代码"
 mfaRequired = "需要双重身份验证代码"
+noAccount = "没有账户？"
 or = "或"
 password = "密码"
 passwordChangedSuccess = "密码修改成功！请使用新密码登录。"
@@ -4715,26 +4894,10 @@ signInWith = "使用以下方式登录"
 title = "登录"
 unexpectedError = "意外错误：{{message}}"
 updatePassword = "更新密码"
-useEmailInstead = "使用邮箱登录"
 useMagicLink = "改用魔法链接"
 username = "用户名"
 youAreLoggedIn = "您已登录！"
 
-[login.slides.edit]
-alt = "编辑 PDF"
-subtitle = "拥有十余种工具，助您涂黑、签名、阅读并处理 PDF，定能满足您的需求。"
-title = "编辑 PDF，以展示/保护您所需的信息"
-
-[login.slides.overview]
-alt = "Stirling PDF 概览"
-subtitle = "面向隐私优先的 PDF 云套件，支持转换、签名、涂黑与管理文档，并提供 50+ 个其他强大工具。"
-title = "满足您全部 PDF 需求的一站式平台。"
-
-[login.slides.secure]
-alt = "保护 PDF"
-subtitle = "轻松添加密码、涂黑内容并管理证书。"
-title = "保护 PDF 中的敏感信息"
-
 [margin]
 large = "大"
 medium = "中"
@@ -4976,6 +5139,7 @@ pinButton = "如果您希望在运行工具后文件仍保持为活动状态，
 results = "工具运行完成后，<strong>审阅</strong> 步骤会在此面板显示结果预览，并允许您撤销操作或下载文件。 "
 runButton = "配置完成后，使用此按钮在所有选中的 PDF 上运行该工具。"
 selectCropTool = "让我们选择 <strong>裁剪</strong> 工具，演示如何使用其中一个工具。"
+stepOf = "第 {{current}} 步，共 {{total}} 步"
 toolInterface = "这是 <strong>裁剪</strong> 工具界面。正如您所见，目前内容不多，因为我们还没有添加可处理的 PDF 文件。"
 workbench = "这是 <strong>工作台</strong> - 用于查看和编辑 PDF 的主要区域。"
 wrapUp = "一切就绪！您已了解应用的主要区域及其用法。随时点击 <strong>帮助</strong> 按钮重新查看本导览。"
@@ -4988,6 +5152,26 @@ showMeAround = "带我看看"
 skipForNow = "暂时跳过"
 skipTheTour = "跳过导览"
 
+[onboarding.checklist]
+dismiss = "关闭"
+title = "设置 Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "在您的计算机上原生运行 Stirling"
+title = "下载 Stirling 桌面版"
+
+[onboarding.checklist.inviteTeam]
+description = "与您的团队协作"
+title = "邀请团队成员"
+
+[onboarding.checklist.shareAnalytics]
+description = "帮助改进 Stirling"
+title = "共享匿名使用数据"
+
+[onboarding.checklist.takeTour]
+description = "通过快速导览了解 Stirling 的工作方式"
+title = "开始导览"
+
 [onboarding.desktopInstall]
 body = "Stirling 作为桌面应用效果最佳。可离线使用、更快访问文档，并在电脑本地进行编辑。"
 selectOs = "选择操作系统"
@@ -4996,7 +5180,21 @@ titleWithOs = "为 {{osLabel}} 下载"
 
 [onboarding.mfa]
 authenticationCode = "验证码"
+description = "通过关联身份验证器应用来保护您的账户。扫描 QR 码或输入设置 key，然后确认 6 位代码以完成。"
+enable = "启用 MFA"
+enableError = "无法启用双因素身份验证。请检查代码并重试。"
+enterCode = "输入应用中的 6 位代码。"
+enterCodeError = "输入身份验证代码以继续。"
+logout = "退出登录"
+openAuthenticator = "打开 Google Authenticator、Authy 或 1Password。"
 qrCodeLoading = "正在生成您的 QR 码…"
+regenerateQrCode = "重新生成 QR 码"
+scanQrCode = "扫描 QR 码或输入下面的设置 key。"
+setupError = "无法开始双因素设置。请重试。"
+setupKey = "设置 key（手动输入）"
+stepByStep = "分步说明"
+success = "MFA 已启用。您现在可以继续。"
+title = "多因素身份验证设置"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "启用登录模式后，您可以管理用户、配置设置并监控服务器健康。服务器上的前 <strong>{{freeTierLimit}}</strong> 位用户可免费使用 Stirling。"
@@ -5005,6 +5203,11 @@ adminTitle = "管理员概览"
 userBody = "邀请队友、分配角色，并在一个安全的工作区中整理文档。准备好从单人使用扩展时，可随时启用登录模式。"
 userTitle = "方案概览"
 
+[onboarding.processorIntro]
+body = "Stirling 现在运行 <strong>策略</strong> — 自动规则会在每个文档到达时对其进行分类、保护和处理。在 <strong>Processor</strong> 中设置并监控运行。"
+cta = "查看 Processor"
+title = "查看 Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "预付年"
+
+[payg.prepaid.banner]
+exhausted = "您的预付容量已用完；已恢复按量计费。充值以保持折扣。"
+expiring_one = "您的预付年将在 {{count}} 天后结束。未使用容量将过期 — 充值以开始新的年度。"
+expiring_other = "您的预付年将在 {{count}} 天后结束。未使用容量将过期 — 充值以开始新的年度。"
+low = "您的预付容量剩余 {{pct}}%。随时充值以保持处理不中断。"
+
+[payg.prepaid.card]
+subtitle = "在按量计费之前使用，且不计入您的支出上限。"
+title = "预付容量"
+
+[payg.prepaid.meter]
+capSuffix = "共 {{total}} 个预付积分"
+expires = "{{date}} 到期"
+
+[payg.prepaid.state]
+exhausted = "已用完"
+healthy = "余量充足"
+low = "即将用完"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "粘贴您邮件中的许可证密钥"
 success = "许可证已激活！"
 successMessage = "您的许可证已成功激活。现在可以关闭此窗口。"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "已强制执行"
-enforcing = "正在强制执行..."
-failed = "强制执行失败"
 outputsUnavailable = "策略输出已无法下载。"
 partialOutputsUnavailable = "部分策略输出已无法下载。"
-retrying = "忙碌中，正在重试..."
 runNotFound = "无法再找到此强制执行运行。"
-step = "步骤 {{current}}/{{total}}"
 timedOut = "在运行完成之前强制执行已超时。"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "关闭"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "正在应用 {{names}}"
 applyingProgress = "正在应用 {{names}} ({{done}}/{{total}})"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} 个文件中有 {{failures}} 个无法处理，已按
 failureTitle = "未完全强制执行的导出"
 printPolicyAppliedBody = "此 PDF 已更新以符合某项策略。请检查更改，然后重新打印。"
 printPolicyAppliedTitle = "打印前已应用策略"
-queued = "+{{count}} 已排队"
 successTitle = "已应用 {{names}}"
 summaryMore = "{{first}}、{{second}} 以及另外 {{more}} 个"
 summaryTwo = "{{first}} 和 {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "在转换前强制执行"
-default = "正在强制执行"
-export = "在导出前强制执行"
-input = "在导入时强制执行"
-print = "在打印前强制执行"
-
-[policies.field]
-accessLog = "访问日志"
-archiveAfter = "归档时间"
-auditTrail = "审计跟踪"
-belowThreshold = "低于阈值"
-destination = "目标位置"
-frameworks = "框架"
-immutableHold = "不可变保留"
-keepFor = "保留时长"
-minConfidence = "最低置信度"
-notify = "路由时通知"
-onViolation = "不合规时"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "添加"
-addPlaceholder = "添加标签…"
-customNote = "已为您的团队自定义。"
-defaultNote = "正在使用内置默认设置，并与您的团队共享。"
-duplicate = "\"{{name}}\" 已存在。"
-edit = "编辑标签"
-empty = "还没有标签。"
-export = "导出 JSON"
-iconAria = "为 {{name}} 选择图标"
-import = "导入 JSON"
-importError = "无法导入该文件。"
-managedNote = "团队标签由您的团队负责人管理。"
-modalSubtitle = "与整个团队共享。分类器会选择适合每个文档的标签。"
-modalTitle = "分类标签"
-pickIcon = "使用 {{label}} 图标"
-removeAria = "移除 {{name}}"
-resetToDefault = "重置为默认值"
-saveForTeam = "为团队保存"
-saving = "正在保存…"
-sectionLabel = "分类标签"
-startFromScratch = "从头开始"
-teamCount = "团队标签"
-tooLong = "标签最多 {{max}} 个字符。"
-ungrouped = "未分组"
-view = "查看标签"
+categoryCount = "类别"
+hideCategory = "隐藏类别"
+labelCount = "标签"
+sharedNote = "这些标签为内置标签，并在整个团队中共享。"
+showCategory = "显示类别"
 
 [policies.pii]
 account = "账户号码（带标签）"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "美国银行路由号码（ABA）"
 ssn = "社会安全号码"
 
-[policies.settings]
-noneExport = "当前没有在导出时运行的策略。"
-noneUpload = "当前没有在上传时运行的策略。"
-onExport = "导出时"
-onUpload = "上传时"
-reorderHandle = "拖动以重新排序"
-runOrderDesc = "当多个策略在同一触发器上运行时，它们会按此顺序运行——每个策略都基于前一个策略的输出。拖动以重新排序。"
-title = "策略设置"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "策略选项"
-policySettings = "策略设置"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "重试失败的策略（{{count}}）"
-rowProgress = "已处理 {{completed}} / {{total}} 个文件"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "什么是策略？"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "自动查找并涂黑敏感信息（如社会安全号码和卡号），以防在文档中被读取。"
-sanitize = "从文件中移除隐藏的 JavaScript，这样在有人打开时不会自动运行任何内容。"
-watermark = "在每一页上加盖可见标记（例如 \"Confidential\"）。"
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "关闭"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} 正在强制执行..."
 badgeRan = "{{name}} 策略已在此文件上运行"
+badgeRunning = "{{name}} 正在运行..."
 blockingAction = "强制执行策略时已阻止 {{action}}，请稍候..."
 dismiss = "关闭叠加层"
 enforcingTitle = "正在强制执行策略..."
@@ -6151,6 +6211,7 @@ viewAnyway = "查看文件（策略仍在强制执行）"
 [policyOption]
 autoRedactPhi = "自动遮盖 PHI"
 blockExport = "阻止导出"
+ccpa = "CCPA"
 contracts = "合同"
 documents = "文档"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor 计划"
 subscribed = "Processor 计划"
 unlinked = "未关联"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "从文档引导创建"
-sectionsAriaLabel = "智能体构建器部分"
-selectorAriaLabel = "智能体"
-subtitle = "设计、测试并发布用于对文档进行分类、提取和路由的 AI 智能体。定义场景、限制工具访问、运行黄金集，并发布版本。"
-title = "智能体构建器"
-
-[portal.agentBuilder.bootstrap]
-cancel = "取消"
-dropzoneText = "选择示例文档（PDF 或图像）"
-lead = "拖放一个示例文档，我们将提出场景和可供您优化的提取架构。在您审核之前，不会发布任何内容。"
-submit = "引导创建智能体"
-subtitle = "从一个代表性文件开始创建新智能体"
-title = "从文档引导创建"
-
-[portal.agentBuilder.empty]
-description = "从示例文档引导创建智能体，以生成其场景和提取架构，然后优化并发布。"
-title = "还没有智能体"
-
-[portal.agentBuilder.evals]
-casesPassing = "通过的用例"
-columnCase = "评估用例"
-columnLatency = "延迟"
-columnResult = "结果"
-fail = "失败"
-goldenSetPassRate = "黄金集通过率"
-latencyMs = "{{ms}} ms"
-notRun = "未运行"
-pass = "通过"
-passRate = "通过率"
-runEvals = "运行评估"
-
-[portal.agentBuilder.evals.empty]
-description = "评估会将您的场景转化为可重复的黄金集。升级后可随时间捕获通过率，并将其作为发布门禁。"
-title = "还没有黄金集"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "跨黄金集"
-activeAgents = "活跃智能体"
-avgPassRate = "平均评估通过率"
-fleetWide = "全局范围"
-latestPublished = "最新发布"
-scenarios = "场景"
-testCases = "测试用例"
-totalDescription_one = "共 {{count}} 个"
-totalDescription_other = "共 {{count}} 个"
-
-[portal.agentBuilder.scenarios]
-add = "添加"
-addScenario = "添加场景"
-enable = "启用"
-expectationLabel = "预期行为"
-expectationPlaceholder = "智能体应执行的操作"
-inEval = "在评估中"
-mute = "静音"
-muted = "已静音"
-nameLabel = "名称"
-namePlaceholder = "例如：合规升级"
-
-[portal.agentBuilder.tabs]
-evals = "评估"
-scenarios = "场景"
-tools = "工具"
-versions = "版本"
-
-[portal.agentBuilder.tools]
-broadAccess = "广泛访问"
-deniedHint = "所选工具已被阻止。其他所有工具仍可调用。"
-deniedTools = "拒绝的工具"
-governanceGate = "工具治理在 Enterprise 计划中可用。"
-restricted = "受限"
-restrictedAccess = "受限工具访问"
-restrictedDescription = "允许除下方拒绝工具之外的所有工具。"
-
-[portal.agentBuilder.versions]
-current = "当前"
-historyGate = "完整版本历史记录和回滚在 Enterprise 计划中可用。"
-publish = "发布"
-rollBack = "回滚"
-
 [portal.assistant]
 close = "关闭助手"
 error = "无法连接助手。"
@@ -6365,9 +6346,21 @@ typing = "正在输入"
 loading = "正在加载"
 redirectingToEditor = "正在重定向到编辑器..."
 
+[portal.billing.activation]
+maybeLater = "稍后再说"
+title = "开启 Processor"
+
+[portal.billing.activation.payg]
+sub = "设置月度限额。按实际运行量付费。"
+title = "按量付费"
+
+[portal.billing.activation.prepay]
+badge = "免费 2 个月"
+sub = "一张发票，可用银行卡或银行转账。"
+title = "预付一年"
+
 [portal.billing.checkout]
 noClientSecret = "Edge 函数未返回 client_secret。"
-subtitle = "添加银行卡，即可在免费 Editor 计划额度用完后继续使用。其余由 Stripe 处理。"
 title = "启用 Processor 计划"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "您的付款已成功，但激活所需时间比平常稍长。它会自
 close = "关闭"
 title = "即将完成"
 
+[portal.billing.checkout.cap]
+amountAria = "月度支出限额"
+back = "返回"
+continue = "继续付款"
+error = "无法设置您的支出限额"
+finePrint = "发票按月生成。可随时取消。"
+noLimit = "无限额"
+note = "您永远不会被收取超过限额的费用。处理只会暂停。"
+perMonth = "/ 月"
+title = "设置您的支出限额"
+
+[portal.billing.checkout.card]
+fields = "卡号 · MM / YY · CVC · ZIP"
+label = "银行卡详情"
+note = "银行卡详情由 Stripe 收集。Stirling 从不存储 PAN 或 CVC。"
+
 [portal.billing.checkout.error]
 title = "无法开始结账"
 
@@ -6383,10 +6392,9 @@ body = "您的付款已完成。我们正在为您的已关联实例启用按量
 hint = "请保持此窗口打开。"
 title = "正在激活您的 Processor 计划..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "，以启用应用内结账。"
-bodyBefore = "在门户 env 中设置"
-title = "Stripe 未配置"
+[portal.billing.checkout.pay]
+limit = "月度支出限额 {{amount}}/月。达到限额时处理会暂停。"
+limitNoCap = "无支出限额。处理不会暂停。发票按月生成。"
 
 [portal.billing.enterpriseUpsell]
 cta = "生成您的 Enterprise 报价"
@@ -6409,10 +6417,12 @@ currentPlan = "当前计划"
 freeForever = "永久免费"
 noTeamResolved = "您的钱包尚未解析到团队——请刷新并重试。"
 ownerOnly = "只有团队所有者可以启用 Processor 计划。"
+payInvoice = "支付发票以完成"
 planName = "Editor"
 ssoIncluded = "包含 SSO"
 switchOnProcessor = "启用 Processor →"
 unlimitedUsers = "无限用户"
+viewQuote = "查看报价"
 
 [portal.billing.invoices]
 columnAmount = "金额"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "直接 API 请求"
 segmentApiLabel = "API"
 segmentAutomationDesc = "自动化和流水线"
 segmentAutomationLabel = "自动化"
+sizeMultiplier = "{{formatted}} 个 PDF 使用了大小倍率"
+summary = "{{unique}} 个唯一 · {{units}} 个计量单位 · 平均每个 PDF {{avg}}"
+summaryNoRate = "{{unique}} 个唯一 · {{units}} 个计量单位"
 unit = "按量计费 PDFs"
+unitsPending_one = "{{units}} 个计量单位等待从已关联实例同步"
+unitsPending_other = "{{units}} 个计量单位等待从已关联实例同步"
+
+[portal.billing.prepaid]
+capSuffix = "共 {{total}} 个预付积分"
+expires = "{{date}} 到期"
+eyebrow = "预付容量"
+note = "在按量计费之前使用，且不计入您的支出限额。"
+topUp = "充值"
+
+[portal.billing.prepaid.buy]
+back = "返回"
+calcTitle = "计算您的年度付款"
+cancel = "取消"
+cancelPurchase = "取消购买"
+close = "关闭"
+continueToPayment = "继续付款"
+finalise = "完成"
+invoiceErrorTitle = "无法生成发票"
+loadingTitle = "正在加载您的报价"
+payTitle = "支付您的年度费用"
+step = "第 {{current}} 步，共 {{total}} 步"
+
+[portal.billing.prepaid.calc]
+change = "更改"
+deployRow = "部署"
+done = "完成"
+enterpriseHint = "这是企业级规模。在此用量下，企业费率优于任何自助折扣。锁定费率、条款，并在几分钟内获得报价。"
+governanceRow = "治理"
+governanceValue = "{{label}} · {{count}} 个策略"
+handlesLabel = "您的 Processor"
+handlesValue = "处理 {{volume}} 积分 / 月"
+pipelinesLabel = "流水线"
+policiesMeta = "{{count}} 个策略"
+poolCaption = "全年一个包含 {{credits}} 积分的池。高峰月份可借用低峰月份的额度。"
+priceLabel = "您的年度 · 以 10 个月价格享 12 个月"
+rateUnknown = "我们将在结账时显示准确价格。"
+savings = "您节省 {{amount}} · 免费 2 个月。"
+sizingRow = "规模"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "用户总数"
+
+[portal.billing.prepaid.consent]
+label = "我理解，当我的预付容量用完或 12 个月后过期时，除非我取消，否则处理会自动按标准按量付费费率继续（最高到我的支出限额），并且我可以随时从计费门户取消。"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "由 Stirling 管理。几分钟内上线。"
+cloudValue = "Stirling Cloud · 托管"
+selfhost = "自托管"
+selfhostDesc = "运行在私有基础设施上。费率相同。"
+selfhostValue = "自托管 · 私有基础设施"
+
+[portal.billing.prepaid.offer]
+cta = "查看优惠"
+subtitle = "预付一年 PDF 处理费用，免费获得两个月，在按量计费之前使用，且不计入您的支出限额。"
+title = "以 10 个月价格享 12 个月"
+
+[portal.billing.prepaid.pay]
+accountName = "账户持有人姓名"
+accountNamePlaceholder = "例如 Jane Smith"
+companyName = "公司名称（可选）"
+companyNamePlaceholder = "例如 Acme Inc."
+downloadInvoice = "下载发票"
+payOnline = "在线支付"
+poNumber = "PO 编号（可选）"
+poNumberPlaceholder = "例如 PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "高级"
+advancedDesc = "流水线驱动您的大部分处理。"
+none = "无"
+noneDesc = "尚未运行流水线。可随时开启。"
+standard = "标准"
+standardDesc = "少量流水线会重新处理到达的 PDF。"
+
+[portal.billing.prepaid.posture]
+essentials = "基础"
+essentialsDesc = "分类、默认项以及共享"
+governed = "受治理"
+governedDesc = "增加安全和路由"
+regulated = "受监管"
+regulatedDesc = "所有类别，包括合规、保留、摄取"
+
+[portal.billing.prepaid.review]
+download = "下载报价（PDF）"
+downloading = "正在准备…"
+share = "共享以供审批"
+
+[portal.billing.prepaid.size]
+compact = "紧凑"
+compactDesc = "文件小于 25 MB，无数据费用"
+heavy = "重型"
+heavyDesc = "扫描或图像较多，通常 50 MB+"
+standard = "标准"
+standardDesc = "主要为小文件，部分扫描件超过 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "已用完"
+healthy = "余量充足"
+low = "即将用完"
 
 [portal.billing.spendLimit]
 adjustLimit = "调整限额"
@@ -6494,6 +6608,8 @@ label = "预计会超出。"
 
 [portal.billing.spendThisMonth]
 eyebrow = "本月支出"
+freeRemaining_one = "剩余 {{formatted}} 个免费 PDF"
+freeRemaining_other = "剩余 {{formatted}} 个免费 PDF"
 processed_one = "已处理 {{formattedCount}} 个 PDF。"
 processed_other = "已处理 {{formattedCount}} 个 PDFs。"
 processedWithRate_one = "已处理 {{formattedCount}} 个 PDF，每个 {{rate}}。"
@@ -6534,6 +6650,350 @@ signature = "签名"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "新建连接"
+createTitleFor = "连接 {{name}}"
+delete = "删除"
+edit = "编辑"
+editTitle = "编辑连接"
+unsupportedType = "无法在此处编辑此连接类型。"
+
+[portal.connections.categories.advanced]
+description = "用于我们尚未支持的服务。"
+label = "高级"
+
+[portal.connections.categories.audit]
+description = "记录文档发生了什么，并写入审计员已有查看位置。"
+label = "审计与合规日志"
+
+[portal.connections.categories.notify]
+description = "通知另一个系统发生了某件事。"
+label = "通知与工作流"
+
+[portal.connections.categories.security]
+description = "在文档继续流转前扫描或标记它。"
+label = "安全与分类"
+
+[portal.connections.categories.signing]
+description = "发送文档以进行签名或公证。"
+label = "电子签名与公证"
+
+[portal.connections.categories.storage]
+description = "处理后的文档最终到达的位置 - 存储桶、网盘、工单或页面。"
+label = "文件与附件"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling 会加密存储此信息，且不会再次显示。"
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "使用此连接的步骤只能调用此 URL 下的路径，不能调用其他主机。"
+label = "服务器 URL"
+
+[portal.connections.commonFields.email]
+label = "电子邮件"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "密码"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "用户名"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "粘贴服务提供给您的 URL。只能调用其下的路径。"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "连接名称"
+namePlaceholder = "例如 生产环境"
+
+[portal.connections.picker]
+cancel = "取消"
+createNew = "新建连接..."
+placeholder = "选择连接"
+save = "保存连接"
+
+[portal.connections.picker2]
+back = "更改集成"
+heading = "您想连接什么？"
+noResultsBody = "我们尚未支持它 - 告诉我们相关信息，我们会考虑添加。"
+noResultsTitle = "没有与 \"{{query}}\" 匹配的项"
+searchPlaceholder = "搜索集成 - 试试 \"sign\"、\"ocr\" 或产品名称"
+
+[portal.connections.types.api]
+description = "从策略调用任意 HTTP API。您可以选择 URL、身份验证和 payload。"
+label = "自定义 API"
+
+[portal.connections.types.api.fields.authType]
+label = "身份验证"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "用户名和密码"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "自定义 header 中的 token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "无"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "登录以获取 token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "使用此连接的步骤只能调用此 URL 下的路径，不能调用其他主机。"
+label = "基础 URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header 名称"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "登录路径"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "密码"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "如果 API 返回下载链接，只能获取这些主机。用逗号分隔。留空则仅允许基础 URL 自身的主机。"
+label = "允许的结果主机"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "将 token 作为此 header 发送"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "登录调用返回 token 所在的响应 header，例如 X-Auth-Token。"
+label = "Token 响应 header"
+
+[portal.connections.types.api.fields.username]
+label = "用户名"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "在您运行的服务器上扫描文档中的恶意软件 - 任何内容都不会离开您的网络。"
+label = "ClamAV（自托管）"
+
+[portal.connections.types.cloudmersive]
+description = "用于策略中文档的病毒和内容扫描。"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "阻止包含宏、可执行文件、脚本或嵌入对象的文档 - 不仅仅是已知恶意软件。"
+label = "Cloudmersive 高级扫描"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "将处理后的文档附加到 Confluence 页面。"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "将文档发送到 ConsignO Cloud (Notarius) 进行电子签名和公证。"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "您的 ConsignO Cloud 环境，包括 /api/v1。"
+label = "服务器 URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "密码"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "仅当您的组织使用租户时才需要。"
+label = "租户"
+
+[portal.connections.types.consigno.fields.username]
+label = "用户名"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "当策略处理文档时向 Discord 发布消息。"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "每当策略处理文档时，在 Elasticsearch 中索引审计事件。"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "轮询 FTP 或 FTPS 服务器以获取新文档。"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "连接模式"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "主动"
+passive = "被动（推荐）"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "普通 FTP 会以未加密方式发送凭据和文件；如果服务器支持，请选择 FTPS。"
+label = "加密"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS（显式 / AUTH TLS）"
+implicit = "FTPS（隐式）"
+none = "无（普通 FTP）"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "当策略运行时向 Google Chat 空间发布消息。"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "将处理后的文档附加到 Jira issue。"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "当策略运行时发送文档或通知电子邮件。"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "将处理后的文档归档到 Nextcloud。"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "应用密码"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "使用您运行的 Presidio 服务器检测文档文本中的个人数据。"
+label = "Presidio（自托管）"
+
+[portal.connections.types.purview]
+description = "读取并应用 Microsoft Purview 对 PDF 的敏感度标签。"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "可选。仅按名称选择标签时需要；没有它也可进行标记。"
+label = "应用程序（客户端）ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "客户端 secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "作为 SiteId 加盖到每个标签上，以便支持 Purview 的工具知道哪个组织应用了它。"
+label = "目录（租户）ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "源可以读取、流水线输出可以写入的 S3 存储桶。"
+label = "S3 存储"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "访问 key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "存储桶"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS 留空。若使用 MinIO 或其他 S3 兼容存储，请设置此项。"
+label = "端点"
+
+[portal.connections.types.s3.fields.region]
+label = "区域"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "当策略运行时发送文档或通知电子邮件。"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "轮询 SFTP (SSH) 服务器以获取新文档。"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "可选。服务器的 SHA-256 主机 key 指纹（来自 `ssh-keyscan host | ssh-keygen -lf -`）。设置后，仅接受提供此 key 的服务器；留空时，首次连接时看到的 key 会被固定，之后更改会被拒绝。"
+label = "主机 key 指纹"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key 密码短语"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "如果您改用私钥进行身份验证，请留空。"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "可选。粘贴 OpenSSH 私钥，以使用 key 而不是密码进行身份验证。"
+label = "私钥"
+
+[portal.connections.types.slack]
+description = "当策略处理文档时向 Slack 发布消息。"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "监视 SMB / CIFS 网络共享（Windows 或 Samba）。"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / 网络共享"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "可选。如果您的服务器使用 Windows 域或工作组，请填写。"
+label = "域"
+
+[portal.connections.types.smb.fields.share]
+label = "共享"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "每当策略处理文档时向 Splunk 发送审计事件。"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "向 Sumo Logic HTTP 收集器发送审计事件。"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "当策略运行时向 Teams 频道发布消息。"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "将每个文档或仅其详细信息发布到您选择的 URL。"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "从策略触发 Zap 或 Make 场景。"
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "浏览文档"
+viewSource = "在 GitHub 上查看源代码"
+
 [portal.docs.authentication]
 codeCaption = "每个请求"
 eyebrow = "入门"
@@ -6619,11 +7079,19 @@ title = "官方 SDKs"
 beta = "Beta"
 deprecated = "已弃用"
 
+[portal.docs.search]
+empty = "没有匹配的文档"
+placeholder = "搜索文档"
+results = "{{count}} 个结果"
+
 [portal.docs.skills]
 eyebrow = "技能"
 lead = "打包的命名能力，您的智能体可将其作为单个工具调用。每项技能都是附带评估的确定性操作链。"
 title = "智能体技能"
 
+[portal.docs.toc]
+title = "本页内容"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API 参考"
@@ -6697,6 +7165,8 @@ type = "类型"
 user = "用户"
 
 [portal.documents.queue.empty]
+connectSource = "连接源"
+createPipeline = "创建流水线"
 description = "当来源将文档送入您的流水线时，它们会显示在此处以供审核。"
 title = "队列中没有文档"
 
@@ -6806,13 +7276,71 @@ description = "此视图遇到意外错误。请重试，或从侧边栏选择
 retry = "重试"
 title = "此页面出现问题"
 
+[portal.home.download]
+back = "返回"
+body = "下载桌面应用或自托管服务器。"
+done = "完成"
+guide = "打开 {{name}} 指南"
+openInBrowser = "改为在浏览器中打开"
+sectionDesktop = "桌面应用"
+sectionSelfHosted = "自托管"
+title = "安装 Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "在您的服务器上运行官方镜像。"
+note = "在 :8080 打开。默认登录：admin / stirling。"
+tagline = "在容器中运行服务器"
+title = "Docker"
+variantFat = "完整"
+variantLite = "超轻量"
+variantStandard = "标准"
+
+[portal.home.download.kubernetes]
+detailBody = "安装官方 Helm chart。"
+note = "为 /configs 添加 PVC 以持久保存设置。"
+tagline = "使用 Helm 部署到集群"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "适用于你的发行版的原生构建。"
+guideBtn = "查看 Linux 安装选项"
+note = "AppImage、.deb 和 .rpm 构建可用于常见发行版。"
+tagline = "适用于你的发行版的原生桌面应用"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "或通过 Homebrew"
+detailBody = "运行安装程序，或使用 Homebrew。"
+downloadBtn = "下载 macOS 版"
+tagline = "适用于 Apple silicon 和 Intel 的原生应用"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "在裸机服务器上运行 .jar。"
+downloadBtn = "下载 .jar"
+note = "需要 Java 21+。在 :8080 打开；默认登录 admin / stirling。"
+runLabel = "然后运行它"
+tagline = "在裸机服务器上运行 .jar"
+title = "手动服务器设置"
+
+[portal.home.download.windows]
+altLabel = "或通过 winget"
+detailBody = "运行安装程序，或使用包管理器。"
+downloadBtn = "下载安装程序"
+tagline = "适用于 Microsoft Windows 的原生应用"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} 活跃"
-invite = "邀请队友"
+activeOfDeployed = "本月 {{total}} 个中有 {{active}} 个处于活跃状态"
 name = "Stirling PDF Editor"
 open = "在浏览器中打开"
 updated = "已更新 {{time}}"
 
+[portal.home.editor.deploy]
+finish = "完成部署"
+options = "查看部署选项"
+start = "部署编辑器"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "自托管 · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "下午好"
 evening = "晚上好"
 morning = "早上好"
 
-[portal.home.onboarding]
-dismiss = "关闭设置"
-notStarted = "未开始"
-progress = "已完成 {{done}} / {{total}}"
-title = "完成设置"
-
-[portal.home.onboarding.enterprise]
-body = "组织范围的 SSO + SCIM + RBAC、承诺用量定价，以及隔离网络部署。"
-cta = "开始试用"
-ctaQuote = "获取报价"
-lead = "适用于 250+ 名员工。"
-tag = "企业版"
-
-[portal.home.onboarding.steps.editor]
-blurb = "部署桌面应用，永久免费。"
-title = "下载 PDF Editor"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} 个活跃 · {{recommended}} 个推荐"
-chip = "{{active}} 个活跃"
-title = "启用策略"
-
-[portal.home.onboarding.steps.sources]
-blurb = "已连接 {{connected}} 个 · 每个 PDF 到达后均受管控"
-chip = "已连接 {{connected}} 个"
-title = "连接您的来源"
-
-[portal.home.quickActions]
-subtitle = "今日热门任务"
-title = "快捷操作"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "基于类型化操作库的 3 步编排器"
-title = "构建流水线"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3、代理、webhook、监视文件夹"
-title = "连接来源"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "带速率限制和 IP allowlist 的作用域密钥"
-title = "签发 API 密钥"
-
 [portal.infrastructure]
 manageEditorDeployment = "管理 Editor 部署"
 sectionsAriaLabel = "基础设施部分"
@@ -6878,13 +7363,9 @@ heading = "API 密钥"
 subheading = "带有单密钥速率限制、权限和 IP allowlist 的作用域凭据。"
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "允许的 IP"
-anyIp = "任意 IP（无 allowlist）"
 created = "已创建"
 lastUsed = "最后使用"
-permissions = "权限"
-rateLimit = "速率限制"
-rateLimitValue = "{{value}} 次请求/分钟"
+revoke = "撤销密钥"
 usageMonth = "本月用量"
 usageToday = "今日用量"
 
@@ -6892,6 +7373,20 @@ usageToday = "今日用量"
 description = "创建作用域密钥以开始调用 Stirling API。"
 title = "还没有 API 密钥"
 
+[portal.infrastructure.apiKeys.error]
+load = "无法加载你的 API 密钥。请重试。"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "撤销“{{name}}”？任何仍在使用此密钥的集成都将立即开始收到 401 错误。此操作无法撤消。"
+cancel = "取消"
+confirm = "撤销密钥"
+title = "撤销 API 密钥"
+
+[portal.infrastructure.attestationLabel]
+attested = "已证明"
+inScope = "范围内"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "按类别筛选审计事件"
 heading = "审计日志"
@@ -6935,6 +7430,7 @@ all = "全部"
 auth = "身份验证"
 config = "配置"
 elevation = "权限提升"
+policy = "策略"
 processing = "处理"
 security = "安全"
 
@@ -6944,19 +7440,35 @@ title = "您没有访问权限"
 
 [portal.infrastructure.audit.metrics]
 config = "配置"
-elevation = "权限提升"
+policy = "策略"
 processing = "处理"
 totalEvents = "事件总数 · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "认证"
+config = "配置"
+elevation = "提权"
+policy = "策略"
+processing = "处理"
+security = "安全"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "错误"
+info = "信息"
+success = "成功"
+warning = "警告"
+
+[portal.infrastructure.certLabel]
+certified = "已认证"
+inProgress = "进行中"
+notStarted = "未开始"
+
 [portal.infrastructure.createKey]
 cancel = "取消"
 createKey = "创建密钥"
 done = "完成"
-ipAllowlistHelper = "逗号分隔的 CIDR 范围。留空则允许任意 IP。"
-ipAllowlistLabel = "IP allowlist"
 keyNameLabel = "密钥名称"
 keyNamePlaceholder = "例如：生产 · 摄取"
-permissionsLabel = "权限"
 secretKeyCaption = "密钥"
 secretWarning = "请将其存储在密钥管理器中。Stirling 只会存储哈希 — 之后无法恢复。"
 subtitle = "将密钥的作用域限定为所需的最小范围。您可以随时轮换或撤销。"
@@ -6964,6 +7476,12 @@ subtitleCreated = "立即复制此密钥 — 它不会再次显示。"
 title = "创建 API 密钥"
 titleCreated = "密钥已创建"
 
+[portal.infrastructure.deployLabel]
+live = "上线"
+queued = "已排队"
+rolledBack = "已回滚"
+rolling = "正在发布"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/分钟"
@@ -6999,6 +7517,15 @@ subheading = "每个已部署 Stirling 区域的实时健康状况 — 延迟、
 description = "工作区完成预配后，已部署区域会显示在此处。"
 title = "未部署区域"
 
+[portal.infrastructure.keyLabel]
+active = "活跃"
+revoked = "已撤销"
+
+[portal.infrastructure.modelLabel]
+active = "活跃"
+degraded = "已降级"
+disabled = "已禁用"
+
 [portal.infrastructure.models]
 heading = "模型"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "状态"
 type = "类型"
 version = "版本"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/次调用"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "活跃模型"
 avgLatency = "平均延迟"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} 的模型"
 operation = "操作"
 routedTo = "路由到"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "分类"
+extraction = "提取"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "已降级"
+down = "停机"
+healthy = "健康"
+
 [portal.infrastructure.security.access.byok]
 description = "从您自己的 KMS 提供密钥。Stirling 使用它进行加密，但仍可读取。"
 label = "自带密钥 (BYOK)"
@@ -7174,6 +7716,47 @@ models = "模型"
 security = "安全"
 storage = "存储"
 
+[portal.integrations]
+addAnother = "再添加一个"
+availableHeading = "可用"
+comingSoonHeading = "即将推出"
+connect = "连接"
+connectedHeading = "已连接"
+connectionCount_one = "{{count}} 个连接"
+connectionCount_other = "{{count}} 个连接"
+customApi = "自定义 API"
+searchPlaceholder = "搜索集成"
+subtitle = "Stirling 可以通信的一切。凭据在此处创建一次，然后由源、策略和管道引用。"
+title = "集成"
+typedName = "{{tool}} 名称"
+
+[portal.integrations.filters]
+all = "全部"
+audit = "审计"
+connected = "已连接"
+notify = "通知"
+security = "安全"
+signing = "签名"
+storage = "存储"
+
+[portal.integrations.status]
+connected = "已连接"
+
+[portal.integrations.table]
+integration = "集成"
+worksWith = "适用于"
+
+[portal.integrations.worksWith]
+pipelines = "管道"
+policies = "策略"
+sources = "源"
+
+[portal.legal]
+draft = "{{label}} · 草稿"
+loadError = "无法加载此文档。请重试。"
+loading = "正在加载…"
+title = "法律文档"
+
 [portal.nav]
 agent-builder = "Agent Builder"
 components = "组件"
@@ -7182,6 +7765,7 @@ documents = "文档"
 editor = "编辑器"
 home = "主页"
 infrastructure = "基础设施"
+integrations = "集成"
 pipelines = "流水线"
 policies = "策略"
 procurement = "采购"
@@ -7190,25 +7774,9 @@ sources = "来源"
 usage = "用量与计费"
 users = "用户"
 
-[portal.notifications]
-markAllRead = "全部标为已读"
-title = "通知"
-viewAll = "查看全部"
-
-[portal.notifications.ariaLabel]
-none = "通知，无未读"
-unread_one = "通知，{{count}} 条未读"
-unread_other = "通知，{{count}} 条未读"
-
-[portal.notifications.count]
-allRead = "全部已读"
-loading = "正在加载"
-new_one = "{{count}} 条新通知"
-new_other = "{{count}} 条新通知"
-
-[portal.notifications.empty]
-description = "没有新通知。"
-title = "您已全部处理完毕"
+[portal.nav.section]
+platform = "PDF 平台"
+processor = "PDF 处理器"
 
 [portal.pipelines]
 subtitle = "后端上的每个自动化文档流水线：针对一组来源的有序操作链，由触发器运行。单击一行以查看其步骤和来源。"
@@ -7220,15 +7788,28 @@ newPipeline = "新建流水线"
 [portal.pipelines.builder]
 addStep = "添加工具"
 back = "返回流水线"
+cannotFollow = "无法接收 {{produced}}"
+chooseAccount = "选择账户"
+chooseDestination = "选择目标位置"
+chooseOperation = "选择此步骤执行的操作"
+chooseSource = "选择源"
 discard = "放弃更改"
 enabled = "已启用"
+inputs = "输入"
+inputSource = "输入源"
+inputTrigger = "触发器"
 keepEditing = "继续编辑"
+needsConfiguring = "需要设置"
 needsUpload = "需要上传文件"
+noSources = "尚未连接源。创建一个源以将其用作输入。"
 noToolMatches = "没有工具符合您的搜索。"
 pipelineSettings = "流水线设置"
 searchTools = "搜索工具"
 selectToolBody = "添加工具以构建您的流水线。"
 selectToolTitle = "还没有工具"
+sendToSystem = "发送到另一个系统"
+stepsIncompatible = "这些步骤无法处理其上一步产生的内容：{{tools}}。"
+stepsNeedSetup = "保存前仍需设置这些步骤：{{tools}}。"
 toolSettings = "工具设置"
 unknownStep = "无法识别的操作，已按原样保留。"
 unsavedBody = "您有未保存的更改。离开前保存，还是放弃更改？"
@@ -7236,19 +7817,24 @@ unsavedTitle = "未保存的更改"
 uploadUnsupported = "流水线尚不支持上传的文件，因此这些步骤无法保存：{{tools}}。"
 usesDefaults = "使用默认设置运行"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "合并上一步中的每个文件"
+fan-out = "对上一步中的每个文件运行一次"
+format-mismatch = "需要 {{accepts}}，但上一步产生 {{produced}}"
+output-uncertain = "可能不会运行：上一步的输出取决于其设置方式"
+source-mismatch = "需要 {{accepts}}，但此管道的输入是 {{produced}}"
+undeclared-operation = "无法检查此步骤接受的内容"
+
 [portal.pipelines.composer]
 addTool = "添加工具"
 cancel = "取消"
 chainEmpty = "添加工具以开始构建您的流水线。"
 create = "创建流水线"
-directory = "输出文件夹"
-directoryHelp = "服务器上的绝对路径。必须位于已配置的允许文件夹内。"
 editingUnsupported = "尚不支持显示这些工具参数以进行编辑。"
 moveDown = "下移"
 moveUp = "上移"
 name = "名称"
 namePlaceholder = "例如：修订扫描"
-noSources = "尚未连接来源。流水线仍可直接对提供给它的文件运行。"
 noToolSettings = "此工具没有可配置的设置。"
 operations_one = "操作 ({{count}})"
 operations_other = "操作 ({{count}})"
@@ -7273,11 +7859,13 @@ confirm = "删除"
 title = "删除流水线？"
 
 [portal.pipelines.detail]
+clearHistory = "清除历史记录"
 delete = "删除流水线"
 run = "立即运行"
 
 [portal.pipelines.empty]
 action = "创建流水线"
+connectSource = "连接源"
 description = "创建您的第一个流水线：选择要运行的来源，串联操作，并选择输出位置。"
 title = "还没有流水线"
 
@@ -7286,15 +7874,17 @@ active = "活跃"
 paused = "已暂停"
 total = "流水线"
 
-[portal.pipelines.output]
-folder = "写入文件夹"
-inline = "返回文件"
-
 [portal.pipelines.run]
+allProcessed_one = "无需运行：源的 {{count}} 个文档已处理。"
+allProcessed_other = "无需运行：源中的全部 {{count}} 个文档已处理。"
 completed_one = "运行已完成。"
 completed_other = "所有 {{count}} 次运行均已完成。"
 empty = "没有可运行内容：来源中没有要处理的文档。"
 failed = "运行失败：{{error}}"
+historyCleared = "历史记录已清除。下次运行将重新处理源中当前的所有内容。"
+inFlight = "没有新的内容可运行：文档仍在从先前的运行中处理。"
+parked_one = "无需运行：{{count}} 个文档之前处理失败并已搁置。修复原因后，清除历史记录以重试。"
+parked_other = "无需运行：{{count}} 个文档之前处理失败并已搁置。修复原因后，清除历史记录以重试。"
 running = "运行已开始；仍在进行中。"
 timeout = "运行耗时超过预期；它可能仍会在后台完成。"
 
@@ -7314,12 +7904,18 @@ manual = "手动"
 schedule = "已计划"
 
 [portal.policies]
+defaultName = "{{category}} 策略"
 subtitle = "在每个文档上强制执行工具流水线的常驻自动化。每个策略在上传或导出时触发，运行其工具链，并将强制执行后的版本与原始文件一起保存。"
 title = "策略"
 
 [portal.policies.card]
 comingSoon = "升级到企业版"
 notSetUp = "未设置"
+requiresAiEngine = "需要 AI 引擎"
+
+[portal.policies.categories.classification]
+desc = "在上传时识别每个文档的类型，并为其元数据添加标签，便于归档和搜索。"
+label = "分类"
 
 [portal.policies.categories.compliance]
 desc = "对每个文档强制执行 HIPAA、GDPR、SOC 2 或 FedRAMP 要求。"
@@ -7344,6 +7940,13 @@ label = "安全"
 [portal.policies.config]
 scopeAll = "所有文档"
 
+[portal.policies.config.classification]
+summary = "根据你团队的标签对每个上传的文档进行分类，并为其元数据添加标签。"
+
+[portal.policies.config.classification.rules]
+0 = "分类"
+1 = "标记元数据"
+
 [portal.policies.config.compliance]
 summary = "在文档离开系统之前，根据监管框架验证文档。"
 
@@ -7371,6 +7974,29 @@ minConfidence = "最低置信度"
 2 = "命名"
 3 = "规范化"
 
+[portal.policies.config.purview]
+label = "应用 Microsoft Purview 敏感度标签"
+
+[portal.policies.config.purview.fields]
+connection = "Purview 租户"
+labelId = "标签 ID"
+labelIdHelp = "来自 Purview 门户的标签 GUID。应用标签会将其元数据写入 PDF；它无法加密，加密需要 Microsoft 客户端。"
+labelName = "标签名称（可选）"
+labelNameHelp = "与 ID 一起记录，以便用户和工具识别该标签。"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview 会区分策略应用的标签和人员选择的标签。"
+label = "标签的记录方式"
+privileged = "作为人员选择的标签"
+standard = "作为自动应用的标签"
+
+[portal.policies.config.purviewRead]
+label = "读取 Microsoft Purview 标签"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview 租户"
+connectionHelp = "读取文档已携带的标签，以便后续步骤据此执行操作。"
+
 [portal.policies.config.retention]
 summary = "强制执行文档保留时长、何时归档以及何时删除。"
 
@@ -7438,6 +8064,7 @@ title = "暂无活动"
 [portal.policies.endpoints]
 addWatermark = "水印"
 autoRedact = "遮盖 PII"
+classifyAndLabel = "分类"
 compressPdf = "压缩"
 flatten = "扁平化"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "你的策略已保存，连接恢复后将显示。"
 retry = "重试"
 title = "后端不可用"
 
+[portal.policies.operations]
+change = "更改此步骤执行的操作"
+noResults = "没有匹配的步骤。尝试产品名称，或“scan”、“notify”、“attach”。"
+searchPlaceholder = "搜索步骤 - 试试“scan”、“attach”或产品名称"
+
+[portal.policies.operations.bodyMode]
+binary = "原始文件字节"
+json = "在 JSON 负载中"
+multipart = "作为文件上传（multipart）"
+
+[portal.policies.operations.clamavScan]
+description = "你自己的 ClamAV 服务器检查文档；任何内容都不会离开你的网络。"
+label = "扫描病毒（自托管）"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "拒绝包含宏、可执行文件、脚本或嵌入对象的文档。"
+label = "阻止活动内容"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive 检查文档，如果不干净，运行将停止。"
+label = "扫描病毒"
+
+[portal.policies.operations.confluenceAttach]
+description = "将处理后的文档归档到页面上。"
+label = "附加到 Confluence 页面"
+
+[portal.policies.operations.consignoSubmit]
+description = "将文档提交到 ConsignO Cloud 进行签名。"
+label = "发送以供签名（ConsignO）"
+note = "提交文档。尚不支持检索已签名副本，因为步骤无法将结果传递给后续步骤。"
+
+[portal.policies.operations.customApiCall]
+description = "自行编写调用：路径、方法、正文和响应处理。"
+label = "调用自定义 API"
+
+[portal.policies.operations.discordNotify]
+description = "通知频道该策略已处理文档。"
+label = "向 Discord 发布消息"
+
+[portal.policies.operations.elasticIndex]
+description = "将策略执行的操作记录为可搜索文档。"
+label = "在 Elasticsearch 中索引审计事件"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart 适合上传 API；JSON 适合需要将文件放入负载中的 API；binary 发送原始字节。"
+label = "如何发送文档"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "按原样发送的 JSON 正文。{{document.base64}} 携带文件；{{document.*}} 和 {{run.*}} 会按文档填充。"
+label = "JSON 正文"
+
+[portal.policies.operations.fields.connection]
+label = "账户"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun 域"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API 期望接收文档的表单字段。"
+label = "文件字段名称"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "发件人"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "标头名称/值对的 JSON 对象。连接的凭据会为你添加。"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "索引"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "作为消息正文发送。{{document.*}} 和 {{run.*}} 会按文档填充。"
+label = "消息"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "页面 ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "追加到连接的基础 URL。它绝不会访问另一个主机。"
+label = "路径"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "写入驱动器中的位置。{{document.filename}} 会按文档填充。"
+label = "目标路径"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "Report 会保持文档不变。Replace 会将其替换为返回的内容。"
+label = "如何处理回复"
+
+[portal.policies.operations.fields.signerEmail]
+label = "签署人邮箱"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "主题"
+placeholder = "已处理：{{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio 会分析此文本。使用 {{document.title}} 或粘贴你想检查的文本。"
+label = "要检查的文本"
+
+[portal.policies.operations.fields.to]
+label = "收件人"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud 用户名"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "通知空间该策略已处理文档。"
+label = "向 Google Chat 发布消息"
+
+[portal.policies.operations.jiraAttach]
+description = "将处理后的文档归档到 issue 上。"
+label = "附加到 Jira issue"
+
+[portal.policies.operations.mailgunEmail]
+description = "将处理后的文档作为附件发送。"
+label = "通过 Email 发送文档（Mailgun）"
+
+[portal.policies.operations.nextcloudUpload]
+description = "将处理后的文档写入文件夹。"
+label = "上传到 Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "你自己的 Presidio 服务器报告其发现的个人数据。"
+label = "检测个人数据"
+note = "Presidio 读取文本，而不是文件。提供你想检查的文本 — 文档本身不会上传。"
+
+[portal.policies.operations.responseMode]
+replace = "用回复替换文档"
+report = "保留文档，记录回复"
+
+[portal.policies.operations.sendgridEmail]
+description = "将处理后的文档作为附件发送。"
+label = "通过 Email 发送文档（SendGrid）"
+
+[portal.policies.operations.slackNotify]
+description = "通知频道该策略已处理文档。"
+label = "向 Slack 发布消息"
+
+[portal.policies.operations.splunkEvent]
+description = "在审计人员已查看的位置记录策略执行的操作。"
+label = "向 Splunk 发送审计事件"
+
+[portal.policies.operations.sumologicEvent]
+description = "将策略执行的操作记录到 HTTP 收集器。"
+label = "向 Sumo Logic 发送审计事件"
+
+[portal.policies.operations.teamsNotify]
+description = "通知频道该策略已处理文档。"
+label = "向 Teams 发布消息"
+
+[portal.policies.operations.webhookPost]
+description = "将文档本身发送到你选择的 URL。"
+label = "将文档 POST 到 webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "将运行详情交给你的自动化。"
+label = "触发 Zap 或 Make 场景"
+
 [portal.policies.stats]
 activeFor = "活跃"
 dataProcessed = "已处理数据"
@@ -7473,6 +8277,13 @@ label = "已应用策略的文档"
 description = "已配置但未触发"
 label = "已暂停"
 
+[portal.policies.table]
+appliesTo = "应用于"
+docs = "已执行文档数"
+enforces = "执行"
+policy = "策略"
+status = "状态"
+
 [portal.policies.wizard.actions]
 back = "返回"
 cancel = "取消"
@@ -7480,6 +8291,10 @@ continue = "继续"
 enablePolicy = "启用策略"
 saveChanges = "保存更改"
 
+[portal.policies.wizard.capability.classify]
+desc = "根据你团队的标签识别文档类型并为其添加标签，以便按类别归档和搜索。"
+label = "对文档分类"
+
 [portal.policies.wizard.capability.compress]
 desc = "将文档压缩为更小的文件大小。"
 label = "减小文件大小"
@@ -7500,10 +8315,18 @@ label = "遮盖敏感信息"
 desc = "移除隐藏的 JavaScript，使文档打开时不会自动运行任何内容。"
 label = "移除活动内容"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "使用独立的时间戳机构证明文档在某一时间点以此确切形式存在。只发送哈希值 - 文档绝不会离开你的服务器。"
+label = "添加可信时间戳"
+
 [portal.policies.wizard.capability.watermark]
 desc = "在每一页上盖上可见标记（例如“机密”）。"
 label = "应用水印"
 
+[portal.policies.wizard.classification]
+description = "每个上传的文档都会根据内置标签进行分类，并标记适合的类型。标签集在整个团队中共享。"
+labelsHeading = "分类标签"
+
 [portal.policies.wizard.errors]
 noTools = "请先在工作流中启用至少一个工具。"
 saveFailed = "无法保存策略。请重试。"
@@ -7548,73 +8371,118 @@ setUp = "设置 {{category}} 策略"
 [portal.policies.wizard.workflow]
 description = "选择此策略对其处理的每个文档执行的操作。"
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} 个活跃"
-noRule = "尚未执行任何规则"
-subtitle = "每个文档都会经过的常驻自动化流程，无论由哪个流水线处理。"
-title = "你的 PDFs 上运行的内容"
-
 [portal.policySummary.action]
-comingSoon = "升级到 Enterprise"
-configure = "配置"
 setUp = "设置"
 
-[portal.policySummary.column]
-activeRule = "活跃规则"
-policy = "策略"
-status = "状态"
+[portal.processorFlow]
+footnote = "计数基于过去 24 小时。流动速度仅作示意。"
+liveBadge = "实时"
+stats = "{{connected}} 个已连接 · 已处理 {{processed}} 个 PDF"
+title = "PDF 处理器"
 
-[portal.policySummary.empty]
-description = "配置策略后，类别将显示在这里。"
-title = "暂无策略"
+[portal.processorFlow.lens]
+ariaLabel = "查看模式"
+flow = "流"
+sankey = "Sankey"
 
-[portal.policySummary.state]
-active = "活跃"
-off = "关闭"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "失败"
+heading = "结果"
+success = "已交付"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} 个活跃"
+count = "{{n}} · 24h"
+heading = "策略"
+setUp = "设置"
 soon = "即将推出"
 
-[portal.processingStatus]
-managePlan = "管理方案"
-volumeSuffix = "已处理 PDFs · 过去 30 天"
+[portal.processorFlow.sankey]
+waist = "策略 · {{n}} 个活跃"
+
+[portal.processorFlow.sankey.empty]
+description = "连接源并启用策略，以查看文档流经处理器。"
+title = "暂无流"
+
+[portal.processorFlow.sources]
+comingSoonTag = "连接"
+editor = "Stirling PDF 编辑器"
+heading = "源"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email 接收"
 
 [portal.procurement]
-reset = "重置采购（演示）"
 subtitle = "让你的团队完成评估、签约和上线。所有文档集中在一处。"
 title = "采购"
 
-[portal.procurement.action]
-download = "下载"
-pay = "立即支付"
-request = "请求"
-sign = "审阅并签署"
-upload = "上传"
-
 [portal.procurement.agreement]
 agreeCta = "同意并订阅"
+confidential = "机密"
 confirm = "我已阅读并同意 Stirling Enterprise Agreement。"
-eyebrow = "协议"
-intro = "一份合并协议涵盖你的交易：主服务协议、订单表、EULA 和数据处理协议。请审阅后同意，将报价接受为承诺订阅。"
-title = "审阅你的企业协议"
+docName = "Stirling 企业协议"
+docSub = "MSA、订单表、EULA 和 DPA，合并为一次签名。"
+download = "下载"
+downloadDraftError = "无法生成协议 PDF - 文档渲染器不可用。请稍后重试或联系支持。"
+downloadError = "无法下载已签署的协议。请重试。"
+legalName = "法人实体名称"
+legalNamePlaceholder = "将签署的法人实体"
+loadError = "无法加载协议。请重试。"
+loading = "正在加载协议..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "请求更改"
+scrollHint = "滚动以审阅"
+signatory = "签署人姓名"
+signatoryPlaceholder = "全名"
+signatoryTitle = "签署人职务"
+signatoryTitlePlaceholder = "例如：总法律顾问"
+signError = "无法记录你的签名。请重试。"
 
 [portal.procurement.builder]
 addons = "附加项"
+addressLine1 = "地址行 1"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "地址行 2"
+addressLine2Placeholder = "套房、楼层、建筑"
 back = "返回"
 businessName = "企业名称"
 businessNamePlaceholder = "你的公司"
+city = "城市"
+cityPlaceholder = "San Francisco"
+completeRequired = "请填写必填字段（标有 *），并提供有效邮箱，然后生成报价。"
+contactEmail = "联系人邮箱"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "联系人姓名"
+contactNamePlaceholder = "Jane Doe"
 continue = "继续"
-country = "国家/地区"
-countryEuro = "欧元区 (EUR €)"
-countryUK = "英国 (GBP £)"
-countryUS = "美国 (USD $)"
+done = "完成"
 eula = "我已阅读并同意 Stirling Enterprise EULA。它管理由此报价生成的协议。"
 generate = "生成报价"
-included = "已包含"
 indemnification = "IP 赔偿"
 indemnificationSub = "我们会根据 EULA 为符合条件的 IP 索赔提供抗辩"
-offlineLicense = "离线 / 隔离网络许可证"
-offlineLicenseSub = "用于隔离网络自托管实例的可下载许可证文件"
+paperEyebrow = "企业报价"
+paperFor = "准备给"
+pdfSize = "PDF 大小"
+poNumber = "PO 编号"
+poNumberPlaceholder = "可选"
+postalCode = "邮政编码"
+postalCodePlaceholder = "94105"
+posture = "治理"
+posture_count = "约 {{count}} 条策略"
+posture_essentials = "基础"
+posture_essentialsSub = "分类 + 共享 — 默认项"
+posture_governed = "受治理"
+posture_governedSub = "添加安全和路由"
+posture_regulated = "受监管"
+posture_regulatedSub = "每个类别 — 合规、保留、摄取"
 qbr = "季度业务回顾"
 qbrSub = "你的 SE 每季度审查使用情况和路线图"
+region = "州 / 地区"
+regionPlaceholder = "California"
 running = "{{annual}} / 年 · {{years}} 年 {{tcv}}"
 s1Sub = "你的团队，以及预计每年处理的 PDFs 数量。"
 s1Title = "你将处理多少？"
@@ -7623,6 +8491,12 @@ s2Title = "承诺和服务"
 s3Sub = "用于报价及其生成的协议。"
 s3Title = "你的详细信息"
 serviceLevel = "服务级别"
+size_compact = "紧凑"
+size_compactSub = "主要为文本，小于 1 MB"
+size_heavy = "较大"
+size_heavySub = "扫描件或图像较多，5 MB+"
+size_standard = "标准"
+size_standardSub = "文本和图像混合，1 到 5 MB"
 slDedicated = "专属"
 slDedicatedSub = "4 个工作小时 · 专属客户经理 · +30%"
 slPriority = "优先"
@@ -7630,6 +8504,8 @@ slPrioritySub = "同一工作日 · 指定 CSM · +15%"
 slStandard = "标准"
 slStandardSub = "下一个工作日 · 共享 CSM · 已包含"
 stepOf = "第 {{n}} 步，共 {{total}} 步"
+taxId = "VAT / 税号"
+taxIdPlaceholder = "可选"
 term = "期限"
 termDiscount = "已应用 {{pct}}% 多年承诺折扣"
 title = "构建你的报价"
@@ -7637,6 +8513,7 @@ training = "入门与培训"
 trainingSub = "实时课程帮助你的团队开始使用"
 users = "用户总数"
 usersPlaceholder = "例如 250"
+viewEula = "阅读"
 volEstimated = "根据 {{count}} 位用户估算（每人约 2,000 个 PDFs，包括自动化）。如果你更清楚，可自行编辑。"
 volManual = "正在使用你的数值。你可以随时根据团队规模重新估算。"
 volNoUsers = "不确定？输入你的团队规模，我们将为你估算。"
@@ -7645,55 +8522,55 @@ volumePlaceholder = "例如 1,000,000"
 years_one = "{{count}} 年"
 years_other = "{{count}} 年"
 
-[portal.procurement.docs]
-count_one = "{{count}} 个文档"
-count_other = "{{count}} 个文档"
-done = "完成"
-here = "你在这里"
-hide = "隐藏"
-optional = "可选"
-paidAddon = "付费附加项"
-show = "显示"
-subtitle = "在旅程的每一步，你需要的所有内容都会随交易推进而显示。"
-supportingSubtitle = "SOC 2、安全审查、税务表格等，在你的安全或采购团队需要时即可提供。有些需要一次性费用。"
-supportingTitle = "支持你的评估"
+[portal.procurement.documents]
+agreement = "企业协议"
+agreementSub = "MSA、订单表和 DPA，一次签名。"
+download = "下载"
+eula = "EULA 和商业条款"
+eulaSub = "软件和自助商业条款。"
+invoice = "发票"
+invoiceSub = "你的第一张订阅发票。"
+laterInvoice = "接受后可用"
+laterQuote = "报价发布后可用"
+quote = "报价"
+quoteSub = "你的逐项企业报价。"
+sla = "SLA 附件"
+slaSub = "支持层级和响应目标。"
+subprocessors = "子处理方"
+subprocessorsSub = "代表你处理数据的第三方。"
+subtitle = "你的交易文件，随时可用。"
 title = "文档"
-upcoming = "即将到来"
+view = "查看"
 
 [portal.procurement.error]
 title = "出现问题"
 
 [portal.procurement.hero]
-company = "你的企业交易"
+barAria = "第 {{current}} 阶段，共 {{total}} 阶段"
 ctaAgreement = "审阅并签署协议"
-ctaLive = "你已上线"
-ctaPayment = "添加付款"
+ctaExploring = "设置你的试用"
 ctaQuote = "审阅你的报价"
+ctaReviewQuote = "审阅报价"
 ctaTrial = "构建你的报价"
+documents = "文档"
 eyebrow = "企业采购"
+eyebrowCompany = "{{company}} 企业版"
 inviteTeammates = "邀请队友"
-keyDocs = "关键文档"
-nextStep = "下一步：{{action}}"
-notStarted = "未开始"
+licenseKey = "许可证密钥"
+liveSub = "你的组织已预配，许可证已激活。"
+liveTitle = "你已在 Stirling Enterprise 上线"
+next = "下一步：{{stage}}"
 open = "打开采购"
 scheduleCall = "安排通话"
-setup1Sub = "邀请你的队友"
-setup1Title = "部署 PDF Editor"
-setup2Sub = "在编辑器和其他源中开启处理"
-setup2Title = "连接 PDF Processor"
-setup3Sub = "在需要时开启安全、合规、路由或保留策略"
-setup3Title = "添加推荐策略"
+sentenceAgreement = "审阅并签署协议"
+sentenceLive = "预配和推出"
+sentencePayment = "采购订单和付款"
+sentenceQuote = "审阅并接受你的报价"
+sentenceTrial = "设置你的试用工作区"
 
 [portal.procurement.journey]
 daysLeft_one = "剩余 {{count}} 天"
 daysLeft_other = "剩余 {{count}} 天"
-engineerLabel = "你的解决方案工程师"
-eyebrow = "你的推出流程"
-live = "你已在 Stirling Enterprise 上线"
-nextStep = "下一步：{{action}}"
-subtitle = "你的解决方案工程师会参与每一步。一次只处理一个下一步操作；完整清单如下。"
-title = "从试用到上线，一条引导路径"
-trialTitle = "Enterprise 试用"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "一次签名涵盖 MSA、订单表、EULA 和 DPA。"
@@ -7727,6 +8604,9 @@ downloadError = "暂时无法生成离线许可证文件——请稍后重试。
 downloadOffline = "下载离线许可证 (.lic)"
 hint = "将此密钥粘贴到自托管实例中以激活它，或留作记录。请妥善保管。"
 label = "你的许可证密钥"
+subtitle = "使用此密钥激活自托管实例，或将其保存作为记录。"
+title = "你的许可证密钥"
+trialFileHint = "这是你的试用许可证文件。协议就位后，请回来再次下载它 — 与在线许可证密钥不同，.lic 文件不会自行更新。"
 
 [portal.procurement.link]
 cta = "关联账户"
@@ -7739,65 +8619,62 @@ description = "你的订阅已激活，许可证已签发。你的团队已配
 eyebrow = "已上线"
 title = "你已在 Stirling Enterprise 上线"
 
-[portal.procurement.locked]
-description = "开始企业评估后，试用密钥、承诺用量报价、一签式协议、付款和你的文档账本都会在这里。"
-eyebrow = "仅限 Enterprise"
-talkToSales = "联系销售"
-title = "采购流程随 Enterprise 开启"
-
 [portal.procurement.milestone]
-accept = "接受并继续"
-description = "下载 PDF 与你的团队共享，准备好后回来接受，或进行更改。"
-download = "下载 PDF"
 downloadError = "暂时无法下载报价 PDF——请稍后重试。"
-edit = "编辑报价"
-eyebrow = "报价 {{number}}"
-perYear = " / 年"
-preparedFor = "为 {{company}} 准备"
-tcv = "{{value}} 合同总价值"
-title = "你的报价已准备好"
-
-[portal.procurement.modal]
-cancel = "取消"
-chooseFile = "选择文件"
-close = "关闭"
-downloadBody = "你的下载即将开始。"
-downloadCta = "下载"
-downloadTitle = "下载"
-noFile = "未选择文件"
-payBody = "通过 Stripe 使用银行卡或银行转账支付你的承诺合同。付款到账后，你的工作区会立即配置。"
-payCta = "继续到 Stripe"
-payTitle = "确认付款"
-requestBodyFree = "我们会按需生成此文档。确认后，你的解决方案工程师会很快发送给你。"
-requestBodyPaid = "这是付费附加项。确认后，你的解决方案工程师会评估范围并发送文件。"
-requestCta = "请求"
-requestTitle = "请求此文档"
-signBody = "打开 Stirling Enterprise Agreement 进行电子签名：一次签名涵盖 MSA、订单表、EULA 和 DPA。我们会自动会签，然后你将进入付款步骤。"
-signCta = "打开签署"
-signTitle = "审阅并签署你的协议"
-uploadBody = "向我们发送你的 PO，我们将按其条款开具发票。拖入 PDF 或在下方选择文件。"
-uploadCta = "上传采购订单"
-uploadTitle = "上传你的采购订单"
 
 [portal.procurement.payment]
 description = "你的报价已接受，许可证也已激活——你的团队可以立即开始使用。准备好后支付第一张发票；你可以在这里支付或下载，无需 email。"
+downloadAgreement = "下载已签署协议"
 downloadInvoice = "下载发票"
-simulate = "模拟已收到付款（演示）"
+eyebrow = "付款"
 title = "订阅已创建"
 viewInvoice = "查看并支付发票"
 
+[portal.procurement.review]
+acceptCta = "接受报价"
+annual = "年度费用（第 1 年）"
+downloadCta = "下载报价"
+poNumber = "采购订单：{{po}}"
+renewal = "期限结束后按 {{amount}}/年续订（+{{pct}}% CPI）"
+tcv = "{{years}} 年期限，预先全额支付：{{tcv}}"
+validUntil = "有效期至 {{date}}"
+
 [portal.procurement.schedule]
 fallback = "无法加载调度器。"
 fallbackLink = "在新标签页中打开调度"
+loading = "正在加载调度器..."
 subtitle = "你的解决方案工程师将带领你的团队完成推出流程。选择一个适合你的时间。"
 title = "安排通话"
 
-[portal.procurement.status]
-action = "需要操作"
-available = "可用"
-complete = "完成"
-pending = "待处理"
-request = "按请求提供"
+[portal.procurement.setup]
+airgap = "隔离网络"
+airgapSub = "封闭，无出站连接"
+back = "返回"
+businessName = "企业名称"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "托管，最快开始"
+continue = "继续"
+deployment = "应部署在哪里？"
+eula = "我同意 Stirling EULA 和商业条款。"
+fullName = "全名"
+fullNamePlaceholder = "你的姓名"
+invites = "邀请队友 · 可选"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "预约通话"
+seats = "测试人数"
+seatsPlaceholder = "例如：15"
+selfhost = "自托管"
+selfhostSub = "Docker 或 Kubernetes"
+start = "开始试用"
+stepOf = "第 {{n}} 步，共 {{total}} 步"
+subtitle = "免费 14 天，无需信用卡。"
+subtitleDetails = "为你的报价和协议提供一些详细信息。"
+talkFirst = "想先聊聊？"
+title = "设置你的试用"
+viewEula = "阅读"
+workEmail = "工作邮箱"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "延长会增加 7 天，并通知你的解决方案工程师。"
@@ -7808,20 +8685,6 @@ maxed = "已达上限"
 subtitle = "你的免费试用持续到 {{date}}。无需银行卡。"
 title = "Enterprise 试用"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "承诺用量定价、全组织 SSO + SCIM + RBAC、90 天不可变审计，以及专属 SE。"
-homeCta = "开始试用 →"
-homeHeadline = "处理数百万个 PDFs。"
-
-[portal.recentActivity]
-title = "近期活动"
-viewAll = "查看全部"
-
-[portal.recentActivity.empty]
-description = "流水线运行、部署和代理事件将显示在这里。"
-title = "这里还没有内容"
-
 [portal.search]
 ariaLabel = "搜索"
 placeholder = "搜索 Stirling — 端点、流水线、文档…"
@@ -7838,58 +8701,50 @@ admin = "管理员"
 [portal.settings.sections]
 account-link = "账户关联"
 
-[portal.shell.header]
-accountFallback = "账户"
-accountMenu = "账户菜单"
-darkMode = "深色模式"
-lightMode = "浅色模式"
-search = "搜索"
-searchPlaceholder = "搜索…"
-signOut = "退出登录"
-switchToDark = "切换到深色主题"
-switchToLight = "切换到浅色主题"
-
 [portal.shell.sidebar]
 appEditor = "编辑器"
 appProcessor = "处理器"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} 个文档"
 linkAccount = "关联 Stirling 账户"
-planEditor = "编辑器方案"
-planEnterprise = "Enterprise 方案"
-planProcessor = "处理器方案"
 primaryNav = "主导航"
 switchApp = "切换应用"
 
+[portal.shell.topbar]
+closeNav = "关闭导航"
+openNav = "打开导航"
+search = "搜索"
+
 [portal.sources]
 subtitle = "可复用的输入连接，用于将文档送入 Stirling。配置一次连接，然后可在任意数量的策略中引用它。点击一行查看其配置以及使用它的策略。"
 title = "源"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "连接源"
 
+[portal.sources.builder]
+back = "返回源"
+backToTypes = "所有源类型"
+cancel = "取消"
+chooseHint = "选择文档来源。灰显的连接器即将推出。"
+comingSoon = "即将推出"
+comingSoonHeading = "即将推出"
+create = "创建源"
+createTitle = "连接源"
+delete = "删除"
+editTitle = "编辑源"
+enabled = "已启用"
+save = "保存更改"
+
+[portal.sources.builder.folderAccess]
+description = "文件夹自动化只能使用管理员已允许的文件夹。在文件夹访问设置中添加它，然后重试。"
+openSettings = "文件夹访问设置"
+title = "不允许使用此文件夹"
+
 [portal.sources.delete]
 body = "删除“{{name}}”？此操作无法撤销。引用它的策略需要更新。"
 cancel = "取消"
 confirm = "删除"
 title = "删除源？"
 
-[portal.sources.detail]
-closeAriaLabel = "关闭详情"
-delete = "删除源"
-docs24h = "过去 24 小时"
-docs30d = "过去 30 天"
-docsTotal = "累计发现"
-docsTrend = "过去 30 天的文档"
-documents = "文档"
-edit = "编辑"
-notReferenced = "未被任何策略引用，因此可以安全删除。"
-pause = "暂停"
-resume = "恢复"
-subtitle = "{{type}} · {{status}}"
-usedBy = "使用者"
-
 [portal.sources.empty]
 description = "连接一个文件夹（很快还会支持云存储），让你的策略有地方拉取文档。"
 title = "尚未连接源"
@@ -7899,18 +8754,57 @@ inUse = "使用中"
 total = "连接"
 unused = "未使用"
 
+[portal.sources.networkFields.connection]
+helperText = "包含服务器地址和凭据的已存储连接。由引用它的每个源重复使用。"
+label = "连接"
+
+[portal.sources.networkFields.directory]
+helperText = "要轮询的服务器文件夹，相对于登录主目录或共享根目录。留空表示根目录。"
+label = "文件夹"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "Consume 会在每个策略处理完文件后，从服务器移除该文件。"
+label = "读取模式"
+
+[portal.sources.networkFields.mode.options]
+consume = "Consume：每个文件只处理一次"
+snapshot = "Snapshot：每次运行重新读取文件夹"
+
+[portal.sources.networkFields.recursive]
+label = "文件夹深度"
+
+[portal.sources.networkFields.recursive.options]
+all = "包含子文件夹"
+top = "仅顶层"
+
 [portal.sources.status]
 active = "活跃"
 disabled = "已禁用"
 unused = "未使用"
 
 [portal.sources.table]
+documents = "文档"
 source = "源"
 status = "状态"
 usedBy = "策略"
 
+[portal.sources.types.box]
+description = "从团队已共享的 Box 文件夹中拉取文档。"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "从共享的 Dropbox 文件夹中拉取文档。"
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "你的团队在编辑器中处理过的文档，跨策略和 AI 运行。"
 label = "编辑器"
+noPolicies = "编辑器尚未运行任何策略。"
+
+[portal.sources.types.email]
+description = "将发送到专用邮箱的附件转换为文档。"
+label = "Email 收件箱"
 
 [portal.sources.types.folder]
 description = "监视服务器上的目录以发现新文档。"
@@ -7943,25 +8837,80 @@ label = "文件夹深度"
 all = "包含子文件夹"
 top = "仅顶层"
 
+[portal.sources.types.ftp]
+description = "轮询 FTP 或 FTPS 服务器文件夹以获取新文档。"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "从共享的 Google Drive 文件夹中拉取文档。"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "监视 SMB 网络共享以获取新文档。"
+label = "网络驱动器"
+
+[portal.sources.types.onedrive]
+description = "监视 OneDrive 文件夹以获取新文档。"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "从 Amazon S3 或 S3 兼容存储桶中拉取文档。"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "包含存储桶和凭据的已存储连接。由引用它的每个源和管道输出重复使用。"
+label = "连接"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "Consume 会在每个策略处理完对象后，从存储桶移除该对象。"
+label = "读取模式"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "Consume：每个对象只处理一次"
+snapshot = "Snapshot：每次运行重新读取存储桶"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "仅处理键以此前缀开头的对象。"
+label = "键前缀"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "轮询 SFTP 投递文件夹以获取新文档。"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "从 SharePoint 文档库中拉取文档。"
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "源"
 
+[portal.sources.types.webhook]
+createNote = "创建此 webhook 时会生成投递 URL 和签名密钥。发送方将文档 POST 到该 URL，引用的策略会在到达时运行。"
+description = "通过来自任何外部系统的签名 HTTP POST 接收文档。"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "投递 URL"
+secretNote = "签名密钥仅在创建 webhook 时显示一次。重新创建源以轮换它。"
+
+[portal.sources.types.webhook.reveal]
+copy = "复制"
+done = "完成"
+secret = "签名密钥"
+secretHelp = "使用此密钥（HMAC-SHA256）签署每次投递的原始正文，并将其作为 X-Stirling-Signature 标头发送。"
+secretWarning = "立即复制签名密钥。为保障你的安全，它只显示一次，以后无法检索。"
+title = "Webhook 已创建"
+url = "投递 URL"
+usage = "将每个文档作为原始请求正文 POST 到投递 URL，并使用二进制内容类型（application/pdf 或 application/octet-stream）。引用的策略会在到达时自动运行。"
+
 [portal.sources.wizard]
-back = "返回"
-cancel = "取消"
-continue = "继续"
-editTitle = "编辑源"
 name = "名称"
 namePlaceholder = "例如 理赔接收"
-save = "保存更改"
-subtitle = "第 {{current}} 步，共 {{total}} 步 · {{label}}"
-title = "连接源"
 type = "类型"
 
-[portal.sources.wizard.steps]
-chooseType = "选择类型"
-configure = "配置"
-review = "审阅并连接"
+[portal.stepModal]
+close = "关闭"
 
 [portal.usage]
 managePayment = "管理付款"
@@ -8021,16 +8970,9 @@ summary = "拥有一个团队——管理其成员资源和共享配置。"
 2 = "通过默认策略访问门户"
 3 = "Member 可以做的所有事"
 
-[portal.welcome]
-ariaLabel = "欢迎使用 Stirling PDF"
-badge = "开源"
-installEditor = "安装编辑器"
-inviteTeammates = "邀请队友"
-openInBrowser = "在浏览器中打开"
-perks = "永久免费 · 可自托管"
-subtitle = "全球最安全的 PDF Editor 对各种规模的团队免费。包括 60+ 个 PDF 操作和 SSO。"
-title = "欢迎使用"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · 无限"
 
 [printFile]
 title = "打印文件"
@@ -8613,6 +9555,14 @@ text = "以 90° 为增量顺时针或逆时针旋转 PDF 页面。PDF 中所有
 [rotate.tooltip.header]
 title = "旋转设置概览"
 
+[ruler]
+clearAll = "全部清除"
+hideAllLabels = "隐藏所有标签"
+hideSmallLabels = "隐藏小标签"
+physicalValues = "物理"
+scaled = "已缩放"
+showAllLabels = "显示所有标签"
+
 [sanitize]
 desc = "移除 PDF 文件中的潜在有害元素。"
 sanitizationResults = "安全清理结果"
@@ -8654,31 +9604,45 @@ label = "删除 XMP 元数据"
 [sanitize.steps]
 settings = "设置"
 
-[sanitizePdf]
-tags = "清理、安全、安全、删除威胁"
-
 [sanitizePDF]
 title = "清理 PDF"
 
+[sanitizePdf]
+tags = "清理、安全、安全、删除威胁"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "调整页面缩放比例"
 
+[scaleSettings]
+activeScale = "当前比例"
+apply = "应用比例"
+applyCalibration = "应用校准"
+calculatedScale = "计算比例"
+calibrate = "校准"
+calibrating = "正在校准"
+calibrationDistanceRequired = "请输入大于零的实际距离"
+calibrationInvalid = "无法根据此测量值计算比例"
+calibrationPaperDistance = "测得页面距离：{{distance}}"
+calibrationTitle = "校准比例"
+calibrationTooltip = "测量已知距离以自动计算比例"
+customScale = "自定义比例"
+noneSet = "未设置自定义比例"
+presets = "预设比例"
+ratio = "比例"
+ratioHelp = "比例：1 页面单位 = X 实际单位"
+ratioPlaceholder = "例如，100"
+ratioPositive = "比例必须大于零"
+ratioRequired = "比例为必填项"
+realDistance = "实际距离"
+realDistancePlaceholder = "例如，5"
+reset = "恢复默认设置"
+unit = "单位"
+unitInvalid = "无效单位：{{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "角度阈值："
-10 = "设置添加和删除的边框大小，以防止输出中出现白边（默认值：1）。"
-2 = "设置图像被旋转所需的最小绝对角度（默认：10）。"
-3 = "公差："
-4 = "确定估计背景颜色周围的颜色变化范围（默认值：30）。"
-5 = "最小面积："
-6 = "设置照片的最小面积阈值（默认：10000）。"
-7 = "最小轮廓面积："
-8 = "设置照片的最小轮廓面积阈值。"
-9 = "边框尺寸："
-
 [scannerImageSplit]
 submit = "提取图像扫描"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "功能说明"
 whatThisDoesDesc = "自动查找并从扫描页面或合成图像中提取每张照片 - 无需手动裁剪。"
 whenToUse = "何时使用"
 
+[ScannerImageSplit.selectText]
+1 = "角度阈值："
+10 = "设置添加和删除的边框大小，以防止输出中出现白边（默认值：1）。"
+2 = "设置图像被旋转所需的最小绝对角度（默认：10）。"
+3 = "公差："
+4 = "确定估计背景颜色周围的颜色变化范围（默认值：30）。"
+5 = "最小面积："
+6 = "设置照片的最小面积阈值（默认：10000）。"
+7 = "最小轮廓面积："
+8 = "设置照片的最小轮廓面积阈值。"
+9 = "边框尺寸："
+
 [search]
 noResults = "未找到结果"
 placeholder = "输入搜索词…"
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "您的 Stirling-PDF 服务器处于离线状态，且
 [session]
 expired = "您的会话已过期。请刷新页面并重试。"
 
-[sessionManagement.tooltip]
-header = "管理签署会话"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "新参与者将添加到签署顺序的末尾"
-bullet2 = "会话最终确定后无法再添加参与者"
-bullet3 = "轮到他们时，每位参与者都会收到通知"
-description = "在最终确定前，您可以随时向活动会话添加更多参与者。"
-title = "添加参与者"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>完全最终确定</b>：所有参与者均已签署"
-bullet2 = "<b>部分最终确定</b>：部分参与者尚未签署"
-bullet3 = "未签署的参与者将被排除在最终文档之外"
-bullet4 = "最终确定后，您可以将已签署的 PDF 加载到活动文件中"
-description = "最终确定会将所有签名合并为一个已签署的 PDF。此操作无法撤销。"
-title = "会话最终确定"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "无法移除已签署的参与者"
-bullet2 = "被移除的参与者将不再收到通知"
-bullet3 = "签署顺序将自动调整"
-description = "参与者可在签署前从会话中移除。"
-title = "移除参与者"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "每个签名都会按顺序应用到 PDF"
-bullet2 = "后续签署者可以看到较早的签名"
-bullet3 = "对审批流程和法律保全至关重要"
-description = "您在创建会话时指定的顺序决定谁先签署。"
-title = "签署顺序"
-
 [settings]
 close = "关闭"
 
+[settings.ai]
+documents = "文档与 RAG"
+general = "常规"
+limits = "限制与性能"
+models = "模型与提供商"
+title = "AI"
+
 [settings.configuration]
 advanced = "高级"
 database = "数据库"
 endpoints = "端点"
 features = "功能"
+folderAccess = "文件夹访问"
 mcp = "MCP Server"
 storageSharing = "文件存储与共享"
 systemSettings = "系统设置"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "默认 PDF 编辑器"
 defaultPdfEditorActive = "Stirling PDF 是您的默认 PDF 编辑器"
 defaultPdfEditorChecking = "正在检查..."
 defaultPdfEditorInactive = "其他应用被设为默认"
+defaultPdfEditorRemind = "提醒我设置为默认"
+defaultPdfEditorRemindDescription = "当 Stirling PDF 不是你的默认 PDF 应用程序时显示横幅。"
 defaultPdfEditorSet = "已为默认"
 defaultStartupView = "启动时的默认视图"
 defaultStartupViewDescription = "选择应用启动时左侧栏中激活的选项卡"
@@ -8817,9 +9771,18 @@ languageDescription = "选择显示语言"
 logout = "退出登录"
 setAsDefault = "设为默认"
 theme = "主题"
+themeAccent = "强调色"
+themeAccentCustom = "自定义颜色"
+themeAccentCustomHint = "自定义（建议使用默认值）"
+themeAccentDark = "深色模式强调色"
+themeAccentDefault = "默认"
+themeAccentDefaultHint = "默认主题（推荐）"
+themeAccentDescription = "按钮、链接和高亮会使用它，并为应用提供微妙的色调。浅色和深色模式各自拥有独立设置。系统模式会使用当前启用的设置。"
+themeAccentLight = "浅色模式强调色"
 themeDark = "深色"
 themeDescription = "在浅色和深色模式间切换"
 themeLight = "浅色"
+themeReset = "将主题恢复为默认"
 themeSystem = "System"
 title = "通用"
 user = "用户"
@@ -8833,6 +9796,12 @@ intro = "为您的组织启用用户认证、团队管理和工作区功能。"
 learnMore = "在文档中了解更多"
 title = "面向系统管理员"
 
+[settings.general.loginLanding]
+description = "选择登录 Stirling Cloud 后打开的应用。"
+editor = "编辑器"
+processor = "处理器"
+title = "登录后"
+
 [settings.general.mode]
 fullscreen = "全屏"
 sidebar = "侧边栏"
@@ -9041,6 +10010,11 @@ security = "安全"
 telegram = "Telegram"
 title = "安全与认证"
 
+[settings.signOut]
+confirm = "确定要退出登录吗？"
+submit = "退出登录"
+title = "退出登录"
+
 [settings.team]
 title = "团队"
 
@@ -9657,6 +10631,9 @@ uploadButton = "上传到服务器"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "点击这里"
+fallback = "如果未自动打开，"
+opening = "正在新标签页中打开 Swagger UI..."
 tags = "api,文档,swagger,端点,开发"
 title = "API 文档"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "在“活动文件”中选择文件以运行此工具"
 singleFileScope = "仅应用于：{{fileName}}"
 viewerMode = "切换到文件编辑器以选择多个文件。"
 
+[toolFormat]
+ANY = "任意文件"
+CBR = "漫画书归档文件 (CBR)"
+CBZ = "漫画书归档文件 (CBZ)"
+CSV = "CSV 文件"
+EBOOK = "电子书"
+EMAIL = "电子邮件"
+EXCEL = "电子表格"
+HTML = "网页"
+IMAGE = "图片"
+JAVASCRIPT = "JavaScript 文件"
+JSON = "JSON 文件"
+MARKDOWN = "Markdown 文件"
+NONE = "无文件"
+PCL = "PCL 打印文件"
+PDF = "PDF"
+PDF_ENCRYPTED = "受密码保护的 PDF"
+POSTSCRIPT = "PostScript 文件"
+PPT = "演示文稿"
+TEXT = "文本文件"
+VIDEO = "视频"
+WORD = "Word 文档"
+XML = "XML 文件"
+XPS = "XPS 文档"
+ZIP = "ZIP 归档文件"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "返回所有工具"
 collapse = "折叠面板"
 expand = "展开面板"
 goBack = "返回"
+pdfTools = "PDF 工具"
 placeholder = "选择一个工具以开始"
 premiumFeature = "高级功能："
+searchTools = "搜索工具"
 toolsHeader = "工具"
 viewAllTools = "查看所有工具"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "未找到工具"
 quickAccess = "快速访问"
 searchPlaceholder = "搜索工具…"
 
-[toolPicker.categories]
-advancedTools = "高级工具"
-recommendedTools = "推荐工具"
-standardTools = "标准工具"
-
 [toolPicker.subcategories]
 advancedFormatting = "高级排版"
 automation = "自动化"
@@ -9950,16 +10950,31 @@ title = "用户"
 you = "（你）"
 
 [users.action]
+cancelInvite = "取消邀请"
 deleteTeam = "删除团队"
 disableMfa = "重置 MFA"
 move = "移动到团队"
 reinstate = "恢复"
 remove = "从组织中移除"
+removeTeam = "从团队移除"
 rename = "重命名团队"
 resetPw = "重置密码"
 suspend = "暂停"
 unlock = "解锁账户"
 
+[users.activity]
+daysAgo = "{{count}} 天前"
+hoursAgo = "{{count}} 小时前"
+justNow = "刚刚"
+minutesAgo = "{{count}} 分钟前"
+monthsAgo_one = "{{count}} 个月前"
+monthsAgo_other = "{{count}} 个月前"
+never = "从未"
+weeksAgo_one = "{{count}} 周前"
+weeksAgo_other = "{{count}} 周前"
+yearsAgo_one = "{{count}} 年前"
+yearsAgo_other = "{{count}} 年前"
+
 [users.cap]
 addProcessor = "+ 处理器"
 approver = "批准策略"
@@ -9967,11 +10982,14 @@ editor = "编辑器"
 processor = "处理器"
 
 [users.confirm]
+cancelInviteBody = "取消对 {{email}} 的邀请？他们将无法使用当前链接加入。"
+cancelInviteTitle = "取消邀请"
 deleteTeamBody = "删除 {{name}} 团队？该团队必须先为空——请将其成员移动到其他团队，并且它不能仍拥有任何集成配置。"
 deleteTeamTitle = "删除团队"
 disableMfaBody = "移除 {{name}} 的 MFA 注册？如果需要，他们将在下次登录时重新设置。"
 disableMfaTitle = "重置 MFA"
 removeBody = "永久从组织中移除 {{name}}？此操作无法撤销。"
+removeTeamBody = "将 {{name}} 从团队中移除？他们会保留账户，但会失去对此团队资源的访问权限。"
 removeTitle = "移除成员"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "用户名"
 usernameError = "用户名必须至少包含 3 个字符"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "由 {{who}} 邀请"
+cancel = "取消"
+count = "{{count}} 个待处理"
+desc = "已受邀但尚未加入的人员。在接受邀请之前，他们会占用一个席位。"
+expiresInDays_one = "{{count}} 天后过期"
+expiresInDays_other = "{{count}} 天后过期"
+expiresToday = "今天过期"
+title = "待处理邀请"
+
 [users.loadError]
 description = "连接后端时出现问题，或者你没有访问权限。请重试。"
 title = "无法加载成员"
@@ -10212,9 +11240,11 @@ title = "附件"
 
 [viewer.bookmarks]
 bookmarkTitle = "书签标题"
+bookmarkTitleRequired = "书签标题为必填项"
 closeSidebar = "关闭书签侧边栏"
 collapseAll = "折叠所有书签"
 expandAll = "展开所有书签"
+searchPlaceholder = "搜索书签"
 
 [viewer.comments]
 addComment = "添加评论"
@@ -10605,30 +11635,6 @@ title = "水印文本"
 image = "图像"
 text = "文本"
 
-[wetSignature.tooltip]
-header = "签名创建方式"
-
-[wetSignature.tooltip.draw]
-bullet1 = "自定义笔颜色和粗细"
-bullet2 = "清除并重新绘制直至满意"
-bullet3 = "适用于触控设备（平板、手机）"
-description = "使用鼠标或触摸屏创建手写签名。最适合个人、真实的签名。"
-title = "手写签名"
-
-[wetSignature.tooltip.type]
-bullet1 = "从多种字体中选择"
-bullet2 = "自定义文字大小和颜色"
-bullet3 = "适用于标准化签名"
-description = "从输入文本生成签名。快速一致，适用于商务文档。"
-title = "文字签名"
-
-[wetSignature.tooltip.upload]
-bullet1 = "支持 PNG、JPG 等图像格式"
-bullet2 = "建议使用透明背景以获得最佳效果"
-bullet3 = "图像将调整大小以适配签名区域"
-description = "上传预先制作的签名图像。如果您有扫描的签名或公司徽标，理想之选。"
-title = "上传签名图像"
-
 [workbenchBar]
 activeFiles = "活动文件"
 annotations = "注释"
@@ -10652,6 +11658,7 @@ redact = "涂黑"
 rotateLeft = "向左旋转"
 rotateRight = "向右旋转"
 ruler = "标尺/测量"
+rulerSettings = "比例设置"
 save = "保存"
 saveAll = "全部保存"
 saveAs = "另存为"
diff --git a/frontend/editor/public/locales/zh-TW/translation.toml b/frontend/editor/public/locales/zh-TW/translation.toml
index c6684c234e..ea0df1561f 100644
--- a/frontend/editor/public/locales/zh-TW/translation.toml
+++ b/frontend/editor/public/locales/zh-TW/translation.toml
@@ -46,10 +46,8 @@ filesSelected = "已選取 {{count}} 個檔案"
 font = "字型"
 fontSizeTooltip = "頁碼文字大小（點）。數值越大文字越大。"
 fontTypeTooltip = "頁碼的字型家族。可依文件風格選擇。"
-genericSubmit = "送出"
 green = "綠色"
 help = "說明"
-imgPrompt = "選擇圖片"
 incorrectPasswordMessage = "目前密碼不正確。"
 info = "資訊"
 invalidUndoData = "無法復原：無效的作業資料"
@@ -62,7 +60,6 @@ loginAgreementTitle = "登入協議"
 logOut = "登出"
 marginTooltip = "頁碼與頁面邊緣的距離。"
 moreOptions = "更多選項"
-multiPdfPrompt = "選擇多個 PDF 檔案"
 never = "永不"
 no = "否"
 noFileSelected = "未選擇檔案，請上傳一個。"
@@ -80,7 +77,6 @@ pageOrderPrompt = "自訂頁面順序（輸入以逗號分隔的頁碼或函式
 pages = "頁面"
 pageSelectionPrompt = "自訂頁面選擇（輸入以逗號分隔的頁碼 1、5、6 或 2n+1 等函式的清單）："
 password = "密碼"
-pdfPrompt = "選擇 PDF 檔案"
 pin = "釘選檔案（工具執行後保持作用中）"
 pro = "專業版"
 processingComplete = "您的檔案已就緒。"
@@ -356,6 +352,7 @@ text = "這些權限控制使用者對 PDF 可進行的操作。與擁有者密
 title = "變更權限"
 
 [addStamp]
+preview = "預覽印章"
 tags = "stamp,mark,seal,approved,rejected,confidential,stamp tool,rubber stamp,date stamp,approval stamp,received,void,copy,original"
 
 [AddStampRequest]
@@ -691,6 +688,165 @@ manualLinks = "手動下載：按一下連結，並將檔案放入 tessdata 資
 noLanguages = "在已設定的目錄中找不到任何 tessdata 語言。"
 permissionNotice = "tessdata 路徑不可寫入。下載將在瀏覽器中開啟；請手動將 .traineddata 檔案儲存到 tessdata 資料夾中。"
 
+[admin.settings.ai.documents]
+description = "設定用於回答文件相關問題的嵌入模型與檢索設定。儲存後會套用至 AI engine。"
+title = "文件與 RAG"
+
+[admin.settings.ai.documents.embeddingApiKey]
+description = "留空以使用 engine 自身的環境認證。適用於自架單一 engine 部署。"
+generic = "嵌入 API key"
+openai = "OpenAI API key"
+setPlaceholder = "已儲存 - 留空以保留目前的 key"
+voyageai = "VoyageAI API key"
+
+[admin.settings.ai.documents.embeddingBaseUrl]
+description = "OpenAI 相容 / Ollama embeddings 端點的基礎 URL，例如 http://ollama:11434/v1。必須指向受信任的內部端點（SSRF 敏感）。"
+label = "嵌入基礎 URL"
+
+[admin.settings.ai.documents.embeddingModel]
+description = "嵌入模型名稱。自由文字；建議僅供提示。"
+label = "嵌入模型"
+
+[admin.settings.ai.documents.embeddingProvider]
+description = "用於將文件文字轉換為向量嵌入的提供者。"
+label = "嵌入提供者"
+
+[admin.settings.ai.documents.maxSearches]
+description = "代理程式每個請求可執行的最大檢索搜尋次數。"
+label = "最大搜尋次數"
+
+[admin.settings.ai.documents.reindexNote]
+body = "變更嵌入模型會立即生效，但使用先前模型建立索引的文件必須重新建立索引，搜尋才能回傳正確結果。"
+title = "需要重新建立索引"
+
+[admin.settings.ai.documents.saved]
+reindexNote = "如果您變更了嵌入模型，請重新為現有文件建立索引，讓搜尋使用新模型。"
+
+[admin.settings.ai.documents.topK]
+description = "每次搜尋擷取的最相關區塊數量。"
+label = "Top K"
+
+[admin.settings.ai.general]
+description = "將 Stirling 連接至 Python AI engine，並選擇要公開的 AI 功能。變更會在重新啟動後套用。"
+title = "AI Engine"
+
+[admin.settings.ai.general.capabilities]
+description = "開啟或關閉個別 AI 功能。停用的功能會在應用程式中隱藏。"
+title = "功能"
+
+[admin.settings.ai.general.enabled]
+description = "主開關。關閉時，將無法使用任何 AI 工具、代理程式或 engine 呼叫。"
+label = "啟用 AI"
+
+[admin.settings.ai.general.features.chat]
+description = "用於處理 PDFs 的對話式助理。"
+label = "聊天助理"
+
+[admin.settings.ai.general.features.classify]
+description = "依類型或內容自動分類文件。"
+label = "文件分類"
+
+[admin.settings.ai.general.features.createPdf]
+description = "透過 AI 代理程式產生新的 PDF（例如從 HTML）。"
+label = "從提示建立 PDF"
+
+[admin.settings.ai.general.features.documentQuestions]
+description = "提出問題並取得以已上傳文件為依據的答案。"
+label = "文件問答"
+
+[admin.settings.ai.general.features.mathAuditor]
+description = "檢查文件中的數學與數值錯誤。"
+label = "數學稽核員"
+
+[admin.settings.ai.general.features.pdfComment]
+description = "將 AI 撰寫的審閱註解與標註新增至 PDF。"
+label = "PDF 註解代理程式"
+
+[admin.settings.ai.general.longRunningTimeoutSeconds]
+description = "文件產生等較繁重代理程式操作的逾時時間。"
+label = "長時間執行逾時（秒）"
+
+[admin.settings.ai.general.note]
+body = "AI engine 會作為獨立服務執行。其共用密鑰"
+body2 = "會透過容器環境變數設定。提供者 API keys 可在這些頁面輸入，或作為 engine 環境變數提供；在此輸入的 keys 會在儲存時推送至 engine。"
+title = "關於 AI engine"
+
+[admin.settings.ai.general.streamTimeoutSeconds]
+description = "串流（逐 token）聊天回應的逾時時間。"
+label = "串流逾時（秒）"
+
+[admin.settings.ai.general.test]
+button = "測試連線"
+failBody = "AI engine 未回應。請檢查 URL、engine 容器是否正在執行，以及 AI 是否已啟用（啟用後需要重新啟動）。"
+failTitle = "無法連線至 AI engine"
+okBody = "AI engine 已回應健康檢查。"
+okTitle = "可連線至 AI engine"
+
+[admin.settings.ai.general.timeoutSeconds]
+description = "對 engine 的標準 AI 請求逾時時間。"
+label = "請求逾時（秒）"
+
+[admin.settings.ai.general.url]
+description = "Python AI engine 的內部 URL，例如 http://stirling-pdf-engine:5001。"
+label = "AI engine URL"
+
+[admin.settings.ai.limits]
+description = "限制 AI 請求可執行的工作量，以及可同時執行的數量。儲存後會套用至 AI engine。"
+title = "限制與效能"
+
+[admin.settings.ai.limits.maxCharacters]
+description = "防護限制：拒絕擷取文字超過此長度的 AI 請求。"
+label = "每個請求的最大字元數"
+
+[admin.settings.ai.limits.maxPages]
+description = "防護限制：拒絕超過此 PDF 頁數的 AI 請求。"
+label = "每個請求的最大頁數"
+
+[admin.settings.ai.limits.modelMaxConcurrency]
+description = "整個 engine 中同時進行的模型呼叫最大數量。"
+label = "模型最大並行數"
+
+[admin.settings.ai.models]
+description = "選擇 LLM 提供者，以及 AI engine 使用的智慧/快速模型。儲存後會套用至 AI engine。"
+title = "模型與提供者"
+
+[admin.settings.ai.models.apiKey]
+anthropic = "Anthropic API key"
+description = "留空以使用 engine 自身的環境認證。適用於自架單一 engine 部署。"
+generic = "API key"
+openai = "OpenAI API key"
+setPlaceholder = "已儲存 - 留空以保留目前的 key"
+
+[admin.settings.ai.models.baseUrl]
+description = "OpenAI 相容 / Ollama 端點的基礎 URL，例如 http://ollama:11434/v1。"
+label = "提供者基礎 URL"
+warning = "基礎 URL 必須指向受信任的內部端點。engine 會向其發出伺服器端請求，因此不受信任的值具有 SSRF 風險。"
+
+[admin.settings.ai.models.fastMaxTokens]
+description = "快速模型的最大輸出 tokens。"
+label = "快速模型最大 tokens"
+
+[admin.settings.ai.models.fastModel]
+description = "較便宜、較快速的模型，用於輕量工作。自由文字；建議僅供提示。"
+label = "快速模型"
+
+[admin.settings.ai.models.provider]
+description = "engine 要與哪個 LLM 提供者通訊。"
+label = "提供者"
+
+[admin.settings.ai.models.smartMaxTokens]
+description = "智慧模型的最大輸出 tokens。"
+label = "智慧模型最大 tokens"
+
+[admin.settings.ai.models.smartModel]
+description = "具備高能力、用於複雜推理的模型。自由文字；建議僅供提示。"
+label = "智慧模型"
+
+[admin.settings.ai.saved]
+body = "變更會自動推送至 AI engine。"
+bodyNoPush = "設定已儲存。下次 AI engine 取得其設定時會套用。"
+title = "AI 設定已儲存"
+
 [admin.settings.badge]
 clickToUpgrade = "點選查看方案詳細資訊"
 
@@ -938,6 +1094,25 @@ label = "啟動時重新產生"
 description = "憑證的有效天數"
 label = "憑證有效期（天）"
 
+[admin.settings.folderAccess]
+description = "允許資料夾來源與資料夾輸出讀取和寫入的目錄。這是安全邊界：自動化絕不能指向此清單之外的伺服器路徑。"
+securityNote = "留空可完全停用資料夾來源與輸出。Stirling 自身的設定目錄一律禁止存取。"
+title = "資料夾存取"
+
+[admin.settings.folderAccess.implied]
+description = "這些由 Stirling 管理的目錄一律允許，且無法在此變更。"
+serverStorage = "伺服器檔案儲存空間"
+title = "一律允許"
+watchedFolder = "Pipeline 監看資料夾"
+
+[admin.settings.folderAccess.roots]
+add = "新增"
+empty = "未允許任何資料夾。目前已停用資料夾來源與輸出。"
+hint = "輸入絕對路徑，例如 /data/inbox。"
+label = "允許的資料夾根目錄"
+placeholder = "/data/inbox"
+remove = "移除資料夾根目錄"
+
 [admin.settings.general]
 description = "設定全系統的應用程式選項，包括品牌與預設行為。"
 system = "系統"
@@ -1842,6 +2017,15 @@ export = "匯出"
 accessDenied = "拒絕存取"
 insufficientPermissions = "您沒有執行此操作的權限。"
 
+[auth.callback]
+completing = "正在完成驗證"
+invalidToken = "OAuth 登入失敗 - token 無效。"
+missingToken = "OAuth 登入失敗 - 未收到 token。"
+oauthFailed = "OAuth 登入失敗。請再試一次。"
+pleaseWait = "請稍候，我們正在完成登入。"
+signedOut = "您已登出。請再次登入。"
+windowMayClose = "完成後您可以關閉此視窗。"
+
 [auth.displayName]
 guest = "訪客"
 user = "使用者"
@@ -1987,6 +2171,73 @@ secureWorkflowDesc = "移除 JavaScript 與內嵌檔案等可能的惡意內容
 description = "此工具會根據內容自動重新命名 PDF 檔。它會分析文件，從文字中找出最合適的標題。"
 tags = "auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 
+[autoRotate]
+submit = "自動旋轉"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+
+[autoRotate.confidenceThreshold]
+title = "信心閾值"
+
+[autoRotate.detectionMode]
+auto = "自動"
+osd = "僅 OCR"
+text = "僅文字"
+title = "偵測方法"
+
+[autoRotate.error]
+failed = "自動旋轉 PDF 時發生錯誤。"
+
+[autoRotate.inferUndetected]
+title = "旋轉低信心頁面以符合其他頁面"
+
+[autoRotate.report]
+applied = "{{degrees}}° 順時針"
+confidenceValue = "信心 {{value}}"
+noChange = "無變更"
+pageLabel = "第 {{number}} 頁"
+summary = "已旋轉 {{rotated}} / {{total}} 頁，{{unchanged}} 頁保持不變"
+title = "偵測報告"
+
+[autoRotate.report.method]
+inferred = "已符合"
+none = "已略過"
+osd = "OCR"
+text = "文字"
+
+[autoRotate.report.note]
+belowThreshold = "低於閾值"
+blankPage = "頁面空白"
+inferredFromDocument = "與其他頁面相同"
+noDominantDirection = "文字方向混合"
+osdFailed = "找不到可讀文字"
+osdNoVerdict = "無法判斷正確方向"
+tesseractUnavailable = "未安裝 OCR"
+tooFewGlyphs = "文字太少"
+
+[autoRotate.results]
+title = "自動旋轉結果"
+
+[autoRotate.settings]
+title = "設定"
+
+[autoRotate.tooltip.confidenceThreshold]
+text = "頁面被旋轉前，檢查需要達到的確定程度。降低可旋轉更多頁面，提高則會讓更多頁面保持不變。"
+title = "信心閾值"
+
+[autoRotate.tooltip.description]
+text = "判斷每一頁應朝上的方向，並將其旋轉至正確方向。已經正向的頁面會保持不變。"
+
+[autoRotate.tooltip.detectionMode]
+text = "自動會先讀取頁面上的文字，若不足再將頁面視為影像檢查。僅文字會略過影像檢查，對於從未掃描的文件最快。僅 OCR 會將每一頁視為影像。"
+title = "偵測方法"
+
+[autoRotate.tooltip.header]
+title = "自動旋轉"
+
+[autoRotate.tooltip.inferUndetected]
+text = "空白或幾乎空白的頁面無法單獨檢查。當所有可讀頁面都需要相同旋轉時，這些頁面也會旋轉以符合它們。"
+title = "旋轉低信心頁面以符合其他頁面"
+
 [autoSizeSplitPDF]
 tags = "pdf,分割,文件,組織"
 
@@ -2189,33 +2440,6 @@ keywords = "關鍵字：odd, even"
 numbers = "數字/範圍：5, 10-20"
 progressions = "等差序列：3n, 4n+1"
 
-[certificateChoice.tooltip]
-header = "憑證類型"
-
-[certificateChoice.tooltip.organization]
-bullet1 = "由系統管理員管理"
-bullet2 = "授權的使用者共同使用"
-bullet3 = "代表公司身分，而非個人"
-bullet4 = "適用於：正式文件、團隊簽署"
-description = "由組織提供的共用憑證，用於全公司的簽署授權。"
-title = "組織憑證"
-
-[certificateChoice.tooltip.personal]
-bullet1 = "首次使用時自動產生"
-bullet2 = "綁定個人帳號"
-bullet3 = "無法與其他使用者共用"
-bullet4 = "適用於：個人文件、個人負責制"
-description = "帳號專屬的自動產生憑證，適用於個人簽署。"
-title = "個人憑證"
-
-[certificateChoice.tooltip.upload]
-bullet1 = "需要 P12/PFX 檔案及密碼"
-bullet2 = "可由外部憑證授權機構核發"
-bullet3 = "法律文件具有更高的信任等級"
-bullet4 = "適用於：具法律效力的合約、外部驗證"
-description = "使用自己的 PKCS#12 憑證檔案，可完全掌控憑證屬性。"
-title = "上傳自訂 P12"
-
 [certSign]
 awaitingSignatures = "等待簽署中"
 chooseCertificate = "選擇憑證檔"
@@ -2542,34 +2766,6 @@ server = "伺服器"
 stepTitle = "憑證來源"
 upload = "上傳"
 
-[certSign.tooltip.header]
-title = "關於管理簽章"
-
-[certSign.tooltip.overview]
-bullet1 = "檢查現有簽章及其有效性"
-bullet2 = "檢視簽署者與憑證的詳細資訊"
-bullet3 = "新增數位簽章以保護您的文件"
-bullet4 = "支援多檔，且易於導覽"
-text = "此工具可檢查您的 PDF 是否已有數位簽章，並新增數位簽章。數位簽章可證明文件的建立者或核准者，並顯示簽署後是否被變更。"
-title = "此工具可以做什麼？"
-
-[certSign.tooltip.signing]
-bullet1 = "支援 PEM、PKCS12、JKS 與伺服器憑證格式"
-bullet2 = "可選擇在 PDF 上顯示或隱藏簽章"
-bullet3 = "可新增簽署原因、位置與簽署者姓名"
-bullet4 = "可選擇放置可見簽章的頁面"
-bullet5 = "使用伺服器憑證，享有簡單的「以 Stirling PDF 簽署」選項"
-text = "要簽署 PDF，您需要數位憑證（如 PEM、PKCS12 或 JKS）。您可以選擇在文件上顯示簽章或僅加入隱形簽章以提高安全性。"
-title = "新增簽章"
-
-[certSign.tooltip.validation]
-bullet1 = "顯示簽章為有效或無效"
-bullet2 = "顯示簽署者資訊與簽署日期"
-bullet3 = "檢查文件是否在簽署後被修改"
-bullet4 = "可使用自訂憑證進行驗證"
-text = "當您檢查簽章時，工具會告知是否有效、誰簽署、何時簽署，以及文件在簽署後是否被變更。"
-title = "檢查簽章"
-
 [changeCreds]
 changeUsername = "更新您的使用者名稱。更新後您將被登出。"
 credsUpdated = "帳號已更新"
@@ -2824,6 +3020,7 @@ next = "下一步"
 preview = "預覽"
 previous = "上一步"
 refresh = "重新整理"
+remaining = "剩餘"
 retry = "重試"
 save = "儲存"
 
@@ -3264,24 +3461,6 @@ description = "這些 Cookies 對網站正常運作至關重要。它們讓核
 posthog = "PostHog 分析"
 scarf = "Scarf 像素"
 
-[credits.modal]
-advancedMonitoring = "進階監控"
-allInOneWorkspace = "一體化 PDF 工作空間（檢視器、工具與代理）"
-apiSandbox = "API 沙箱"
-dedicatedSupportSlas = "專屬支援與 SLA"
-fasterThroughput = "10 倍更快的處理速度"
-fullyPrivateFiles = "完全私密的檔案"
-largeFileProcessing = "大型檔案處理"
-orgWideAccess = "組織層級的存取控制"
-premiumAiModels = "進階 AI 模型"
-prioritySupport = "優先支援"
-privateDocCloud = "私人檔案雲"
-ragFineTuning = "RAG + 微調"
-secureApiAccess = "安全的 API 存取"
-standardThroughput = "標準吞吐量"
-unlimitedApiAccess = "無限 API 存取"
-unlimitedSeats = "不限人數"
-
 [crop]
 autoCrop = "自動裁切空白"
 noFileSelected = "選取一個 PDF 檔以開始裁切"
@@ -3346,6 +3525,7 @@ message = "設定預設 PDF 處理程式失敗"
 title = "錯誤"
 
 [defaultApp.prompt]
+dontRemind = "不要再提醒我"
 message = "將 Stirling PDF 設為開啟 PDF 檔的預設應用程式。"
 
 [defaultApp.settingsOpened]
@@ -3697,10 +3877,10 @@ customizeGroups = "自訂群組"
 dropHint = "開啟檔案以開始使用"
 dropToAdd = "Drop files to add"
 expand = "展開側邊欄"
-files = "檔案"
 googleDrive = "Google Drive"
 googleDriveDisabled = "尚未設定 Google Drive"
 leaveMyFiles = "離開我的檔案"
+library = "PDF Library"
 myFiles = "我的檔案"
 noFiles = "尚無檔案"
 openFileManager = "開啟檔案管理器"
@@ -3723,19 +3903,8 @@ uploadToServer = "Upload to server"
 versionHistory = "Version history"
 
 [fileSidebar.groupsModal]
-add = "新增"
-addLabel = "新增標籤…"
-categoryIconAria = "為 {{name}} 選擇圖示"
-createCategory = "建立類別"
-delete = "刪除類別"
 done = "完成"
-hide = "隱藏類別"
-newCategory = "新類別名稱…"
-removeLabel = "移除 {{name}}"
-rename = "重新命名"
 reset = "重設為預設值"
-search = "搜尋標籤…"
-show = "顯示類別"
 subtitle = "將您的檔案分組到父類別中。將現有或新的標籤新增至類別、重新命名，或建立您自己的類別。不屬於任何類別的檔案會顯示在「其他」下。"
 title = "側邊欄類別"
 
@@ -3808,6 +3977,7 @@ refresh = "從伺服器重新整理"
 remove = "刪除"
 removeVersion = "移除此版本"
 rename = "重新命名"
+renamed = "已重新命名"
 renameFolder = "重新命名資料夾"
 resizeFolderTree = "調整資料夾樹狀結構大小（方向鍵，按住 Shift 以加大步進；按兩下自動適配）"
 save = "儲存"
@@ -3910,9 +4080,7 @@ count = "檔案數"
 folder = "資料夾"
 labels = "標籤"
 modified = "修改時間"
-name = "名稱"
 size = "大小"
-toolHistoryAtVersion = "累積工具鏈"
 totalSize = "總大小"
 type = "類型"
 versionHistory = "版本歷程"
@@ -4072,10 +4240,17 @@ discord = "Discord"
 issues = "GitHub"
 
 [formFill]
+allSaved = "全部已儲存"
+extractCsvError = "擷取 CSV 失敗"
+extractXlsxError = "擷取 XLSX 失敗"
 flattenAfterFilling = "填寫後扁平化"
+requiredAbbreviation = "必填"
+requiredFieldsError = "請填寫所有必填欄位"
 rescanFields = "重新掃描欄位"
 rescanFormFields = "重新掃描表單欄位"
 save = "儲存"
+saveShortcut = "Ctrl+S 儲存"
+unsavedChanges = "未儲存的變更"
 
 [formFill.sidebar]
 close = "關閉側邊欄"
@@ -4309,6 +4484,11 @@ desc = "依偵測到的標頭自動重新命名 PDF 檔案"
 tags = "自動偵測,依標頭,整理,重新命名,auto-detect,header-based,organize,relabel,auto rename,automatic rename,smart rename,rename by content,filename,file naming,detect title"
 title = "自動重新命名 PDF 檔案"
 
+[home.autoRotate]
+desc = "偵測每一頁的方向並自動旋轉為正向。"
+tags = "auto rotate,fix orientation,upside down,sideways,straighten,orient,detect orientation,correct rotation,auto orient,scanned,OSD"
+title = "自動旋轉"
+
 [home.autoSizeSplitPDF]
 tags = "自動,分割,大小,auto,split,size"
 title = "根據大小/數量自動分割"
@@ -4608,13 +4788,13 @@ hint = "上傳 PNG、JPG、SVG 或其他影像檔以放置在 PDF 上。為了
 label = "上傳影像"
 placeholder = "選取影像檔"
 
-[imageToPdf]
-tags = "轉換,img,jpg,圖片,照片"
-
 [imageToPDF]
 header = "圖片轉 PDF"
 title = "圖片轉 PDF"
 
+[imageToPdf]
+tags = "轉換,img,jpg,圖片,照片"
+
 [infoBanner]
 dismiss = "關閉"
 
@@ -4647,11 +4827,9 @@ welcomeTitle = "您已獲邀！"
 
 [landing]
 addFiles = "新增檔案"
-heroSubtitle = "拖放或新增現有的 PDF 即可開始。"
 mobileUpload = "從行動裝置上傳"
 openFromComputer = "從電腦開啟"
 uploadFromComputer = "從電腦上傳"
-workbenchEmptyStateHero = "將 PDF 拖放到任何位置"
 
 [language]
 direction = "ltr"
@@ -4696,6 +4874,7 @@ login = "登入"
 magicLinkSent = "魔術連結已寄至 {{email}}！請查看您的電子郵件並點選連結登入。"
 mfaCode = "驗證碼"
 mfaRequired = "需要雙重驗證碼"
+noAccount = "還沒有帳號？"
 or = "或"
 password = "密碼"
 passwordChangedSuccess = "密碼變更成功！請使用新密碼登入。"
@@ -4715,26 +4894,10 @@ signInWith = "使用以下方式登入"
 title = "登入"
 unexpectedError = "未預期的錯誤：{{message}}"
 updatePassword = "更新密碼"
-useEmailInstead = "使用電子郵件登入"
 useMagicLink = "改用魔術連結"
 username = "使用者名稱"
 youAreLoggedIn = "您已登入！"
 
-[login.slides.edit]
-alt = "編輯 PDF"
-subtitle = "提供十多種工具，協助您遮蔽、簽署、閱讀與處理 PDF，滿足您的各種需求。"
-title = "編輯 PDF 以顯示/保護您想要的資訊"
-
-[login.slides.overview]
-alt = "Stirling PDF 概覽"
-subtitle = "以隱私為先的 PDF 雲端套件，讓您轉換、簽署、遮蔽與管理文件，並提供 50+ 種強大工具。"
-title = "滿足您所有 PDF 需求的一站式平台。"
-
-[login.slides.secure]
-alt = "保護 PDF"
-subtitle = "輕鬆新增密碼、遮蔽內容並管理憑證。"
-title = "保護 PDF 中的敏感資訊"
-
 [margin]
 large = "大"
 medium = "中"
@@ -4976,6 +5139,7 @@ pinButton = "如果您希望檔案在執行工具後保持使用中狀態，可
 results = "工具執行完畢後，<strong>檢閱</strong> 步驟會在此面板顯示結果預覽，並允許您復原操作或下載檔案。 "
 runButton = "設定完成後，使用此按鈕即可在所有已選取的 PDF 上執行該工具。"
 selectCropTool = "我們先選擇 <strong>裁切</strong> 工具，示範如何使用其中一個工具。"
+stepOf = "步驟 {{current}} / {{total}}"
 toolInterface = "這是 <strong>裁切</strong> 工具介面。如您所見，因為尚未加入任何 PDF 檔可供操作，因此內容不多。"
 workbench = "這裡是 <strong>工作區</strong>——檢視與編輯 PDF 的主要區域。"
 wrapUp = "大功告成！您已了解此應用程式的主要區域與使用方式。隨時點選 <strong>說明</strong> 按鈕可再度觀看本導覽。"
@@ -4988,6 +5152,26 @@ showMeAround = "帶我導覽"
 skipForNow = "暫時略過"
 skipTheTour = "略過導覽"
 
+[onboarding.checklist]
+dismiss = "關閉"
+title = "設定 Stirling PDF"
+
+[onboarding.checklist.downloadDesktop]
+description = "在您的電腦上原生執行 Stirling"
+title = "下載 Stirling Desktop"
+
+[onboarding.checklist.inviteTeam]
+description = "與您的團隊協作"
+title = "邀請團隊成員"
+
+[onboarding.checklist.shareAnalytics]
+description = "協助改善 Stirling"
+title = "分享匿名使用資料"
+
+[onboarding.checklist.takeTour]
+description = "透過快速導覽了解 Stirling 的運作方式"
+title = "開始導覽"
+
 [onboarding.desktopInstall]
 body = "Stirling 最適合以桌面應用程式使用。您可以離線操作、更快存取文件，並在電腦本機進行編輯。"
 selectOs = "選擇作業系統"
@@ -4996,7 +5180,21 @@ titleWithOs = "下載適用於 {{osLabel}} 的版本"
 
 [onboarding.mfa]
 authenticationCode = "驗證碼"
+description = "透過連結驗證器應用程式保護您的帳號。掃描 QR code 或輸入設定 key，然後確認 6 位數代碼以完成。"
+enable = "啟用 MFA"
+enableError = "無法啟用雙因素驗證。請檢查代碼後再試一次。"
+enterCode = "輸入您應用程式中的 6 位數代碼。"
+enterCodeError = "請輸入驗證代碼以繼續。"
+logout = "登出"
+openAuthenticator = "開啟 Google Authenticator、Authy 或 1Password。"
 qrCodeLoading = "正在產生您的 QR 碼…"
+regenerateQrCode = "重新產生 QR code"
+scanQrCode = "掃描 QR code 或輸入下方設定 key。"
+setupError = "無法開始雙因素設定。請再試一次。"
+setupKey = "設定 key（手動輸入）"
+stepByStep = "逐步說明"
+success = "MFA 已啟用。您現在可以繼續。"
+title = "多因素驗證設定"
 
 [onboarding.planOverview]
 adminBodyLoginDisabled = "啟用登入模式後，您可以管理使用者、設定參數並監控伺服器健康狀態。伺服器上的前 <strong>{{freeTierLimit}}</strong> 人可免費使用 Stirling。"
@@ -5005,6 +5203,11 @@ adminTitle = "管理員總覽"
 userBody = "邀請隊友、指派角色，並在單一安全的工作區中整理您的文件。當您準備好超越個人使用時，可隨時啟用登入模式。"
 userTitle = "方案總覽"
 
+[onboarding.processorIntro]
+body = "Stirling 現在會執行 <strong>Policies</strong> — 自動化規則會在每份文件抵達時進行分類、保護與處理。請在 <strong>Processor</strong> 中設定並監控執行狀態。"
+cta = "查看 Processor"
+title = "查看 Stirling Processor"
+
 [onboarding.saas.freeEditor]
 freeLine = "The editor is now <free>completely free</free>."
 premium = "We've added loads of new features, including <strong>Policies</strong> and <strong>Agent Chat</strong>."
@@ -5401,6 +5604,28 @@ docs = "PDFs"
 subtitle = "Billable PDFs each teammate has processed this period."
 title = "Team member usage"
 
+[payg.prepaid]
+chip = "預付年費"
+
+[payg.prepaid.banner]
+exhausted = "您的預付容量已用完；計量計費已恢復。加值以保留折扣。"
+expiring_one = "您的預付年度將在 {{count}} 天後結束。未使用容量將到期 — 加值以開始新的一年。"
+expiring_other = "您的預付年度將在 {{count}} 天後結束。未使用容量將到期 — 加值以開始新的一年。"
+low = "您的預付容量只剩 {{pct}}%。隨時加值以保持處理不中斷。"
+
+[payg.prepaid.card]
+subtitle = "在計量計費之前使用，且不受您的支出上限限制。"
+title = "預付容量"
+
+[payg.prepaid.meter]
+capSuffix = "共 {{total}} 預付 credits"
+expires = "{{date}} 到期"
+
+[payg.prepaid.state]
+exhausted = "已用完"
+healthy = "剩餘充足"
+low = "即將用完"
+
 [payg.role]
 leader = "Team owner"
 member = "Member"
@@ -5937,49 +6162,12 @@ keyDescription = "貼上電子郵件中的授權金鑰"
 success = "授權已啟用！"
 successMessage = "您的授權已成功啟用。您現在可以關閉此視窗。"
 
-[policies]
-deleteConfirmBody = "This removes the policy and its workflow. Documents already processed are not affected."
-deleteConfirmTitle = "Delete {{label}} policy?"
-
 [policies.activity]
-enforced = "已強制執行"
-enforcing = "正在強制執行..."
-failed = "強制執行失敗"
 outputsUnavailable = "政策輸出結果已無法下載。"
 partialOutputsUnavailable = "部分政策輸出結果已無法下載。"
-retrying = "忙碌中，正在重試..."
 runNotFound = "找不到此強制執行作業。"
-step = "步驟 {{current}}/{{total}}"
 timedOut = "強制執行在作業完成前逾時。"
 
-[policies.catalog]
-compliance = "Compliance"
-ingestion = "Ingestion"
-retention = "Retention"
-routing = "Routing"
-security = "Security"
-
-[policies.detail]
-close = "關閉"
-editSettings = "Edit Settings"
-enforces = "Enforces"
-managedByOrg = "Managed by your organisation. Contact a team leader to change this policy."
-noActivityDescription = "Documents will appear here once this policy runs."
-noActivityTitle = "No activity yet"
-onEveryUpload = "On every upload"
-originalsNote = "Originals stay untouched • Enforced version saved alongside"
-pause = "Pause"
-recentActivity = "Recent Activity"
-resume = "Resume"
-retry = "Retry"
-showLess = "Show less"
-showMore = "Show more"
-statActive = "Active"
-statDataProcessed = "Data processed"
-statDocsEnforced = "Docs enforced"
-statusActive = "Active"
-statusPaused = "Paused"
-
 [policies.enforcement]
 applying = "正在套用 {{names}}"
 applyingProgress = "正在套用 {{names}}（{{done}} / {{total}}）"
@@ -5989,61 +6177,16 @@ failureBody = "{{total}} 個檔案中有 {{failures}} 個無法處理，已照
 failureTitle = "未完全強制執行即匯出"
 printPolicyAppliedBody = "已更新此 PDF 以符合政策。請檢視變更後再重新列印。"
 printPolicyAppliedTitle = "列印前已套用政策"
-queued = "+{{count}} 已佇列"
 successTitle = "{{names}} 已套用"
 summaryMore = "{{first}}、{{second}}，以及另外 {{more}} 個"
 summaryTwo = "{{first}} 與 {{second}}"
 
-[policies.enforcement.triggerVerb]
-convert = "轉換前強制執行"
-default = "正在強制執行"
-export = "匯出前強制執行"
-input = "匯入時強制執行"
-print = "列印前強制執行"
-
-[policies.field]
-accessLog = "存取記錄"
-archiveAfter = "之後封存"
-auditTrail = "稽核軌跡"
-belowThreshold = "低於門檻"
-destination = "目的地"
-frameworks = "架構"
-immutableHold = "不可變更保留"
-keepFor = "保留期間"
-minConfidence = "最低信心度"
-notify = "路由時通知"
-onViolation = "不符合規範時"
-webhookUrl = "Webhook URL"
-
-[policies.fields]
-selectedCount = "{{count}} selected"
-
 [policies.labels]
-add = "新增"
-addPlaceholder = "新增標籤…"
-customNote = "已為您的團隊自訂。"
-defaultNote = "使用內建預設值，與您的團隊共用。"
-duplicate = "\"{{name}}\" 已存在。"
-edit = "編輯標籤"
-empty = "尚無標籤。"
-export = "匯出 JSON"
-iconAria = "為 {{name}} 選擇圖示"
-import = "匯入 JSON"
-importError = "無法匯入該檔案。"
-managedNote = "團隊標籤由您的團隊負責人管理。"
-modalSubtitle = "與整個團隊共用。分類器會挑選適合每份文件的標籤。"
-modalTitle = "分類標籤"
-pickIcon = "使用 {{label}} 圖示"
-removeAria = "移除 {{name}}"
-resetToDefault = "重設為預設值"
-saveForTeam = "為團隊儲存"
-saving = "正在儲存…"
-sectionLabel = "分類標籤"
-startFromScratch = "從頭開始"
-teamCount = "團隊標籤"
-tooLong = "標籤最多可為 {{max}} 個字元。"
-ungrouped = "未分組"
-view = "檢視標籤"
+categoryCount = "類別"
+hideCategory = "隱藏類別"
+labelCount = "標籤"
+sharedNote = "這些標籤為內建，並在整個團隊中共用。"
+showCategory = "顯示類別"
 
 [policies.pii]
 account = "帳戶號碼（具標籤）"
@@ -6056,93 +6199,10 @@ placeholder = "Select PII types"
 routing = "美國銀行路由號碼（ABA）"
 ssn = "社會安全號碼"
 
-[policies.settings]
-noneExport = "目前匯出時沒有執行任何政策。"
-noneUpload = "目前上傳時沒有執行任何政策。"
-onExport = "匯出時"
-onUpload = "上傳時"
-reorderHandle = "拖曳以重新排序"
-runOrderDesc = "當多個政策在同一觸發條件下執行時，它們會依此順序執行 — 每個政策都會使用前一個政策的輸出。拖曳以重新排序。"
-title = "政策設定"
-
-[policies.sidebar]
-activeCount = "{{count}} active"
-infoTooltip = "A policy is a fixed set of tools that runs automatically whenever it's triggered — for example when a new document arrives — enforcing rules like redacting PII with no manual steps."
-loading = "Loading…"
-optionsAriaLabel = "政策選項"
-policySettings = "政策設定"
-railAriaLabel = "{{label}} policy — {{status}}"
-railSuffixActive = " (Active)"
-railSuffixPaused = " (Paused)"
-retryFailed = "重試失敗的政策（{{count}}）"
-rowProgress = "已處理 {{completed}} / {{total}} 個檔案"
-setUp = "Set up"
-title = "Policies"
-upgradeToEnterprise = "Upgrade to enterprise"
-whatIsPolicy = "什麼是政策？"
-
-[policies.status]
-active = "Active"
-paused = "Paused"
-setup = "Set up"
-
-[policies.toolConfig]
-enableAriaLabel = "Enable {{tool}}"
-infoAriaLabel = "What does {{tool}} do?"
-
-[policies.toolConfig.info]
-redact = "自動找出並塗黑敏感資訊（如社會安全號碼與卡號），使其在文件中無法讀取。"
-sanitize = "移除檔案中的隱藏 JavaScript，以避免在開啟時自動執行任何內容。"
-watermark = "在每一頁加蓋可見標記（例如 \"Confidential\"）。"
-
-[policies.wizard]
-allDocTypesDescription = "Enable the Classification policy to filter by document type."
-allDocTypesTitle = "All document types"
-back = "Back"
-builderDesc = "Build the sequence of tools this policy runs on each document."
-clear = "Clear"
-close = "關閉"
-continue = "Continue"
-docTypesLabel = "Document types"
-edit = "Edit"
-editTitle = "Edit {{label}} Policy"
-enablePolicy = "Enable Policy"
-filenameAutoNumber = "Auto-number"
-filenamePositionAria = "Filename position"
-filenamePrefix = "Prefix"
-filenameSuffix = "Suffix"
-filenameTextAria = "Filename text"
-filenameTextPlaceholder = "Text to add (optional)"
-lockedDescription = "Contact a team leader to change this policy."
-lockedTitle = "Managed by your organisation"
-maxRetriesLabel = "Max retries"
-noToolsError = "Add at least one configured tool to the workflow first."
-outputAsLabel = "Output as"
-outputFilenameSubhead = "Output filename"
-outputModeAria = "Output mode"
-outputNewFile = "New file"
-outputNewVersion = "New version"
-outputRetriesLabel = "Output & retries"
-outputSubhead = "Output"
-retryDelayAria = "Retry delay minutes"
-retryDelayLabel = "Retry delay (min)"
-runOnExport = "Export"
-runOnLabel = "Run on"
-runOnSubhead = "Run on"
-runOnUpload = "Upload"
-saveChanges = "Save Changes"
-saveError = "Couldn't save the policy. Please try again."
-setupClassification = "Set up Classification"
-setupTitle = "Set up {{label}} Policy"
-sourcesDesc = "Choose where this policy runs and which document types it applies to."
-sourcesLabel = "Sources"
-stepOf = "Step {{step}} of {{total}}"
-toolChainDesc = "Configure the tools this policy runs on each document."
-typesSelected = "{{count}} types selected"
-
 [policy]
 badgeEnforcing = "{{name}} 正在強制執行..."
 badgeRan = "{{name}} 政策已在此檔案上執行"
+badgeRunning = "{{name}} 執行中..."
 blockingAction = "強制執行政策時已封鎖 {{action}}，請稍候..."
 dismiss = "關閉覆蓋層"
 enforcingTitle = "正在強制執行政策..."
@@ -6151,6 +6211,7 @@ viewAnyway = "檢視檔案（政策仍在強制執行）"
 [policyOption]
 autoRedactPhi = "自動遮蔽 PHI"
 blockExport = "封鎖匯出"
+ccpa = "CCPA"
 contracts = "合約"
 documents = "文件"
 fedramp = "FedRAMP"
@@ -6269,86 +6330,6 @@ free = "Editor 方案"
 subscribed = "Processor 方案"
 unlinked = "未連結"
 
-[portal.agentBuilder]
-bootstrapFromDocument = "從文件啟動"
-sectionsAriaLabel = "代理程式建構器區段"
-selectorAriaLabel = "代理程式"
-subtitle = "設計、測試並發布可分類、擷取及路由文件的 AI 代理程式。定義情境、限制工具存取、執行 golden set，並發布版本。"
-title = "Agent Builder"
-
-[portal.agentBuilder.bootstrap]
-cancel = "取消"
-dropzoneText = "選擇範例文件（PDF 或影像）"
-lead = "拖放範例文件，我們會提出情境和擷取 schema 供您調整。在您審查之前不會發布任何內容。"
-submit = "啟動代理程式"
-subtitle = "以一個代表性檔案建立新代理程式的初始資料"
-title = "從文件啟動"
-
-[portal.agentBuilder.empty]
-description = "從範例文件啟動代理程式，以建立其情境和擷取 schema 的初始資料，然後調整並發布。"
-title = "尚無代理程式"
-
-[portal.agentBuilder.evals]
-casesPassing = "通過案例"
-columnCase = "Eval 案例"
-columnLatency = "延遲"
-columnResult = "結果"
-fail = "失敗"
-goldenSetPassRate = "Golden-set 通過率"
-latencyMs = "{{ms}} ms"
-notRun = "未執行"
-pass = "通過"
-passRate = "通過率"
-runEvals = "執行 evals"
-
-[portal.agentBuilder.evals.empty]
-description = "Evals 會將您的情境轉換為可重複的 golden set。升級即可追蹤一段時間內的通過率，並以此作為發布門檻。"
-title = "尚無 golden set"
-
-[portal.agentBuilder.kpi]
-acrossGoldenSets = "跨 golden sets"
-activeAgents = "啟用中的代理程式"
-avgPassRate = "平均 eval 通過率"
-fleetWide = "全系統"
-latestPublished = "最新發布"
-scenarios = "情境"
-testCases = "測試案例"
-totalDescription_one = "共 {{count}} 個"
-totalDescription_other = "共 {{count}} 個"
-
-[portal.agentBuilder.scenarios]
-add = "新增"
-addScenario = "新增情境"
-enable = "啟用"
-expectationLabel = "預期行為"
-expectationPlaceholder = "代理程式應該做什麼"
-inEval = "在 eval 中"
-mute = "靜音"
-muted = "已靜音"
-nameLabel = "名稱"
-namePlaceholder = "例如：合規升級"
-
-[portal.agentBuilder.tabs]
-evals = "Evals"
-scenarios = "情境"
-tools = "工具"
-versions = "版本"
-
-[portal.agentBuilder.tools]
-broadAccess = "廣泛存取"
-deniedHint = "選取的工具已被封鎖。其他所有工具仍可呼叫。"
-deniedTools = "拒絕的工具"
-governanceGate = "工具治理可在 Enterprise 方案使用。"
-restricted = "受限制"
-restrictedAccess = "受限制的工具存取"
-restrictedDescription = "允許所有工具，除了您在下方拒絕的工具。"
-
-[portal.agentBuilder.versions]
-current = "目前"
-historyGate = "完整版本歷史記錄與復原可在 Enterprise 方案使用。"
-publish = "發布"
-rollBack = "復原"
-
 [portal.assistant]
 close = "關閉助理"
 error = "無法連線到助理。"
@@ -6365,9 +6346,21 @@ typing = "正在輸入"
 loading = "載入中"
 redirectingToEditor = "正在重新導向至編輯器..."
 
+[portal.billing.activation]
+maybeLater = "稍後再說"
+title = "啟用 Processor"
+
+[portal.billing.activation.payg]
+sub = "設定每月上限。依使用量付費。"
+title = "隨用隨付"
+
+[portal.billing.activation.prepay]
+badge = "免費 2 個月"
+sub = "一張發票，以卡片或銀行轉帳付款。"
+title = "預付一年"
+
 [portal.billing.checkout]
 noClientSecret = "Edge function 未傳回 client_secret。"
-subtitle = "新增卡片以在免費 Editor 方案額度用完後繼續使用。其餘由 Stripe 處理。"
 title = "啟用 Processor 方案"
 
 [portal.billing.checkout.activationSlow]
@@ -6375,6 +6368,22 @@ body = "您的付款已成功，但啟用花費的時間比平常稍長。它會
 close = "關閉"
 title = "快完成了"
 
+[portal.billing.checkout.cap]
+amountAria = "每月支出上限"
+back = "返回"
+continue = "繼續付款"
+error = "無法設定您的支出上限"
+finePrint = "發票每月開立。可隨時取消。"
+noLimit = "無上限"
+note = "您的帳單絕不會超過上限。處理只會暫停。"
+perMonth = "/ 月"
+title = "設定您的支出上限"
+
+[portal.billing.checkout.card]
+fields = "卡號 · MM / YY · CVC · ZIP"
+label = "卡片詳細資料"
+note = "卡片詳細資料由 Stripe 收集。Stirling 絕不儲存 PAN 或 CVC。"
+
 [portal.billing.checkout.error]
 title = "無法開始結帳"
 
@@ -6383,10 +6392,9 @@ body = "您的付款已完成。我們正在您的已連結執行個體上啟用
 hint = "請保持此視窗開啟。"
 title = "正在啟用您的 Processor 方案..."
 
-[portal.billing.checkout.notConfigured]
-bodyAfter = "於入口網站 env 中，以啟用應用程式內結帳。"
-bodyBefore = "設定"
-title = "尚未設定 Stripe"
+[portal.billing.checkout.pay]
+limit = "每月支出上限 {{amount}}/月。達到上限時處理會暫停。"
+limitNoCap = "無支出上限。處理不會暫停。發票每月開立。"
 
 [portal.billing.enterpriseUpsell]
 cta = "建立您的 Enterprise 報價"
@@ -6409,10 +6417,12 @@ currentPlan = "目前方案"
 freeForever = "永久免費"
 noTeamResolved = "您的錢包尚未解析到團隊 — 請重新整理後再試。"
 ownerOnly = "只有團隊擁有者可以啟用 Processor 方案。"
+payInvoice = "支付發票以完成"
 planName = "Editor"
 ssoIncluded = "包含 SSO"
 switchOnProcessor = "啟用 Processor →"
 unlimitedUsers = "不限使用者數"
+viewQuote = "檢視報價"
 
 [portal.billing.invoices]
 columnAmount = "金額"
@@ -6465,7 +6475,111 @@ segmentApiDesc = "直接 API 請求"
 segmentApiLabel = "API"
 segmentAutomationDesc = "自動化與管線"
 segmentAutomationLabel = "自動化"
+sizeMultiplier = "{{formatted}} PDFs 使用了大小乘數"
+summary = "{{unique}} 個不重複 · {{units}} 個計量單位 · 每個 PDF 平均 {{avg}}"
+summaryNoRate = "{{unique}} 個不重複 · {{units}} 個計量單位"
 unit = "計量 PDFs"
+unitsPending_one = "{{units}} 個計量單位等待從連結的執行個體同步"
+unitsPending_other = "{{units}} 個計量單位等待從連結的執行個體同步"
+
+[portal.billing.prepaid]
+capSuffix = "共 {{total}} 預付 credits"
+expires = "{{date}} 到期"
+eyebrow = "預付容量"
+note = "在計量計費之前使用，且不受您的支出上限限制。"
+topUp = "加值"
+
+[portal.billing.prepaid.buy]
+back = "返回"
+calcTitle = "計算您的年度付款"
+cancel = "取消"
+cancelPurchase = "取消購買"
+close = "關閉"
+continueToPayment = "繼續付款"
+finalise = "完成"
+invoiceErrorTitle = "無法產生發票"
+loadingTitle = "正在載入您的報價"
+payTitle = "支付您的年度費用"
+step = "步驟 {{current}} / {{total}}"
+
+[portal.billing.prepaid.calc]
+change = "變更"
+deployRow = "部署"
+done = "完成"
+enterpriseHint = "這是企業級規模。在此用量下，企業費率優於任何自助折扣。費率鎖定、條款與報價可在數分鐘內完成。"
+governanceRow = "治理"
+governanceValue = "{{label}} · {{count}} 個 policies"
+handlesLabel = "您的 Processor"
+handlesValue = "可處理 {{volume}} credits / 月"
+pipelinesLabel = "Pipelines"
+policiesMeta = "{{count}} 個 policies"
+poolCaption = "年度共用 {{credits}} credits。用量高的月份可借用用量低月份的額度。"
+priceLabel = "您的年度 · 12 個月只付 10 個月價格"
+rateUnknown = "我們會在結帳時顯示確切價格。"
+savings = "您節省 {{amount}} · 免費 2 個月。"
+sizingRow = "規模"
+sizingValue = "{{label}} · {{desc}}"
+usersLabel = "使用者總數"
+
+[portal.billing.prepaid.consent]
+label = "我了解當我的預付容量用完或 12 個月後到期時，除非我取消，處理會自動以標準計量隨用隨付費率繼續（最高至我的支出上限），且我可以隨時從帳單入口網站取消。"
+
+[portal.billing.prepaid.deploy]
+cloud = "Stirling Cloud"
+cloudDesc = "由 Stirling 管理。數分鐘內上線。"
+cloudValue = "Stirling Cloud · 代管"
+selfhost = "自架"
+selfhostDesc = "在私人基礎架構上執行。相同費率。"
+selfhostValue = "自架 · 私人基礎架構"
+
+[portal.billing.prepaid.offer]
+cta = "檢視優惠"
+subtitle = "預付一年 PDF 處理費用並獲得兩個月免費，在計量計費之前使用，且不受您的支出上限限制。"
+title = "以 10 個月價格取得 12 個月"
+
+[portal.billing.prepaid.pay]
+accountName = "帳戶持有人姓名"
+accountNamePlaceholder = "例如 Jane Smith"
+companyName = "公司名稱（選填）"
+companyNamePlaceholder = "例如 Acme Inc."
+downloadInvoice = "下載發票"
+payOnline = "線上付款"
+poNumber = "PO 編號（選填）"
+poNumberPlaceholder = "例如 PO-2026-0142"
+
+[portal.billing.prepaid.pipelines]
+advanced = "進階"
+advancedDesc = "Pipelines 會驅動您大部分的處理。"
+none = "無"
+noneDesc = "尚未執行 pipelines。您可以隨時啟用。"
+standard = "標準"
+standardDesc = "少數 pipelines 會重新處理抵達的 PDFs。"
+
+[portal.billing.prepaid.posture]
+essentials = "基本"
+essentialsDesc = "分類、預設項目，加上分享"
+governed = "受治理"
+governedDesc = "新增安全性與路由"
+regulated = "受規範"
+regulatedDesc = "每個類別，包含合規、保留、擷取"
+
+[portal.billing.prepaid.review]
+download = "下載報價（PDF）"
+downloading = "準備中…"
+share = "分享以供核准"
+
+[portal.billing.prepaid.size]
+compact = "精簡"
+compactDesc = "檔案小於 25 MB，無資料費用"
+heavy = "大量"
+heavyDesc = "掃描或影像較多，通常 50 MB+"
+standard = "標準"
+standardDesc = "多為小檔案，部分掃描超過 25 MB"
+
+[portal.billing.prepaid.state]
+exhausted = "已用完"
+healthy = "剩餘充足"
+low = "即將用完"
 
 [portal.billing.spendLimit]
 adjustLimit = "調整限制"
@@ -6494,6 +6608,8 @@ label = "預計會超出。"
 
 [portal.billing.spendThisMonth]
 eyebrow = "本月支出"
+freeRemaining_one = "剩餘 {{formatted}} 個免費 PDF"
+freeRemaining_other = "剩餘 {{formatted}} 個免費 PDFs"
 processed_one = "已處理 {{formattedCount}} 個 PDF。"
 processed_other = "已處理 {{formattedCount}} 個 PDFs。"
 processedWithRate_one = "已處理 {{formattedCount}} 個 PDF，每個 {{rate}}。"
@@ -6534,6 +6650,350 @@ signature = "簽章"
 beta = "Beta"
 ga = "GA"
 
+[portal.connections]
+createTitle = "新增連線"
+createTitleFor = "連接 {{name}}"
+delete = "刪除"
+edit = "編輯"
+editTitle = "編輯連線"
+unsupportedType = "此連線類型無法在此編輯。"
+
+[portal.connections.categories.advanced]
+description = "適用於我們尚未支援的服務。"
+label = "進階"
+
+[portal.connections.categories.audit]
+description = "在您的稽核人員已查看的位置記錄文件發生的事件。"
+label = "稽核與合規記錄"
+
+[portal.connections.categories.notify]
+description = "告知另一個系統發生了某件事。"
+label = "通知與工作流程"
+
+[portal.connections.categories.security]
+description = "在文件繼續移動前掃描或標記文件。"
+label = "安全性與分類"
+
+[portal.connections.categories.signing]
+description = "將文件送出以進行簽署或公證。"
+label = "電子簽署與公證"
+
+[portal.connections.categories.storage]
+description = "處理後文件的目的地 - bucket、drive、ticket 或 page。"
+label = "檔案與附件"
+
+[portal.connections.commonFields.accessToken]
+helperText = "Stirling 會加密儲存此項目，且不會再次顯示。"
+label = "Access token"
+
+[portal.connections.commonFields.apiKey]
+label = "API key"
+
+[portal.connections.commonFields.apiToken]
+label = "API token"
+
+[portal.connections.commonFields.baseUrl]
+helperText = "使用此連線的步驟只能呼叫此 URL 下的路徑，絕不能呼叫其他主機。"
+label = "伺服器 URL"
+
+[portal.connections.commonFields.email]
+label = "Email"
+
+[portal.connections.commonFields.host]
+label = "Host"
+
+[portal.connections.commonFields.password]
+label = "密碼"
+
+[portal.connections.commonFields.port]
+label = "Port"
+
+[portal.connections.commonFields.username]
+label = "使用者名稱"
+
+[portal.connections.commonFields.webhookUrl]
+helperText = "貼上服務提供給您的 URL。只能呼叫其下的路徑。"
+label = "Webhook URL"
+
+[portal.connections.fields]
+name = "連線名稱"
+namePlaceholder = "例如 Production"
+
+[portal.connections.picker]
+cancel = "取消"
+createNew = "新增連線..."
+placeholder = "選擇連線"
+save = "儲存連線"
+
+[portal.connections.picker2]
+back = "變更整合"
+heading = "您想連接什麼？"
+noResultsBody = "我們尚未支援它 - 告訴我們，我們會考慮新增。"
+noResultsTitle = "沒有符合「{{query}}」的項目"
+searchPlaceholder = "搜尋整合 - 試試「sign」、「ocr」或產品名稱"
+
+[portal.connections.types.api]
+description = "從 policy 呼叫任何 HTTP API。您可以選擇 URL、驗證與 payload。"
+label = "自訂 API"
+
+[portal.connections.types.api.fields.authType]
+label = "驗證"
+
+[portal.connections.types.api.fields.authType.options.basic]
+label = "使用者名稱與密碼"
+
+[portal.connections.types.api.fields.authType.options.bearer]
+label = "Bearer token"
+
+[portal.connections.types.api.fields.authType.options.header]
+label = "自訂 header 中的 token"
+
+[portal.connections.types.api.fields.authType.options.none]
+label = "無"
+
+[portal.connections.types.api.fields.authType.options.tokenLogin]
+label = "登入以取得 token"
+
+[portal.connections.types.api.fields.baseUrl]
+helperText = "使用此連線的步驟只能呼叫此 URL 下的路徑，絕不能呼叫其他主機。"
+label = "Base URL"
+placeholder = "https://api.example.com/v1"
+
+[portal.connections.types.api.fields.headerName]
+label = "Header 名稱"
+placeholder = "X-API-Key"
+
+[portal.connections.types.api.fields.loginPath]
+label = "登入路徑"
+placeholder = "/auth/login"
+
+[portal.connections.types.api.fields.password]
+label = "密碼"
+
+[portal.connections.types.api.fields.resultUrlHosts]
+helperText = "如果 API 回覆下載連結，只能擷取這些 hosts。以逗號分隔。留空則只允許基礎 URL 自身的 host。"
+label = "允許的結果 hosts"
+
+[portal.connections.types.api.fields.token]
+label = "Token"
+
+[portal.connections.types.api.fields.tokenHeaderName]
+label = "以此 header 傳送 token"
+
+[portal.connections.types.api.fields.tokenResponseHeader]
+helperText = "登入呼叫回傳 token 的 response header，例如 X-Auth-Token。"
+label = "Token response header"
+
+[portal.connections.types.api.fields.username]
+label = "使用者名稱"
+
+[portal.connections.types.clamav]
+baseUrlPlaceholder = "http://clamav-rest:9000"
+description = "在您執行的伺服器上掃描文件是否有惡意軟體 - 任何內容都不會離開您的網路。"
+label = "ClamAV（自架）"
+
+[portal.connections.types.cloudmersive]
+description = "在 policy 中對文件進行病毒與內容掃描。"
+label = "Cloudmersive"
+
+[portal.connections.types.cloudmersiveadvanced]
+description = "封鎖包含巨集、可執行檔、指令碼或嵌入物件的文件 - 不只是已知惡意軟體。"
+label = "Cloudmersive Advanced Scan"
+
+[portal.connections.types.confluence]
+baseUrlPlaceholder = "https://your-site.atlassian.net/wiki/api/v2"
+description = "將處理後的文件附加到 Confluence 頁面。"
+label = "Confluence"
+
+[portal.connections.types.consigno]
+description = "將文件傳送至 ConsignO Cloud (Notarius) 進行電子簽署與公證。"
+label = "ConsignO Cloud"
+
+[portal.connections.types.consigno.fields.baseUrl]
+helperText = "您的 ConsignO Cloud 環境，包含 /api/v1。"
+label = "伺服器 URL"
+placeholder = "https://your-org.consignocloud.com/api/v1"
+
+[portal.connections.types.consigno.fields.clientId]
+label = "API key"
+
+[portal.connections.types.consigno.fields.clientSecret]
+label = "API secret"
+
+[portal.connections.types.consigno.fields.password]
+label = "密碼"
+
+[portal.connections.types.consigno.fields.tenantId]
+helperText = "僅在您的組織使用 tenants 時需要。"
+label = "Tenant"
+
+[portal.connections.types.consigno.fields.username]
+label = "使用者名稱"
+
+[portal.connections.types.discord]
+baseUrlPlaceholder = "https://discord.com/api/webhooks/..."
+description = "當 policy 處理文件時，將訊息發布到 Discord。"
+label = "Discord"
+
+[portal.connections.types.elastic]
+baseUrlPlaceholder = "https://your-cluster:9200"
+description = "每次 policy 處理文件時，在 Elasticsearch 中建立稽核事件索引。"
+label = "Elasticsearch"
+
+[portal.connections.types.ftp]
+description = "輪詢 FTP 或 FTPS 伺服器以取得新文件。"
+hostPlaceholder = "ftp.example.com"
+label = "FTP / FTPS"
+
+[portal.connections.types.ftp.fields.passive]
+label = "連線模式"
+
+[portal.connections.types.ftp.fields.passive.options]
+active = "主動"
+passive = "被動（建議）"
+
+[portal.connections.types.ftp.fields.security]
+helperText = "純 FTP 會以未加密方式傳送認證與檔案；如果伺服器支援，請選擇 FTPS。"
+label = "加密"
+
+[portal.connections.types.ftp.fields.security.options]
+explicit = "FTPS（explicit / AUTH TLS）"
+implicit = "FTPS（implicit）"
+none = "無（純 FTP）"
+
+[portal.connections.types.googlechat]
+baseUrlPlaceholder = "https://chat.googleapis.com/v1/spaces/..."
+description = "當 policy 執行時，將訊息發布到 Google Chat space。"
+label = "Google Chat"
+
+[portal.connections.types.jira]
+baseUrlPlaceholder = "https://your-site.atlassian.net"
+description = "將處理後的文件附加到 Jira issue。"
+label = "Jira"
+
+[portal.connections.types.mailgun]
+description = "當 policy 執行時，透過 Email 傳送文件或通知。"
+label = "Mailgun"
+
+[portal.connections.types.nextcloud]
+baseUrlPlaceholder = "https://your-server/remote.php/dav"
+description = "將處理後的文件存入 Nextcloud。"
+label = "Nextcloud"
+
+[portal.connections.types.nextcloud.fields.appPassword]
+label = "App password"
+
+[portal.connections.types.presidio]
+baseUrlPlaceholder = "http://presidio-analyzer:3000"
+description = "使用您執行的 Presidio 伺服器偵測文件文字中的個人資料。"
+label = "Presidio（自架）"
+
+[portal.connections.types.purview]
+description = "讀取並套用 Microsoft Purview 敏感度標籤到 PDFs。"
+label = "Microsoft Purview"
+
+[portal.connections.types.purview.fields.clientId]
+helperText = "選填。只有在需要依名稱選取標籤時才需要；沒有它也能標記。"
+label = "Application (client) ID"
+
+[portal.connections.types.purview.fields.clientSecret]
+label = "Client secret"
+
+[portal.connections.types.purview.fields.tenantId]
+helperText = "會加蓋到每個標籤作為其 SiteId，讓支援 Purview 的工具知道是哪個組織套用的。"
+label = "Directory (tenant) ID"
+placeholder = "cb46c030-1825-4e81-a295-151c039dbf02"
+
+[portal.connections.types.s3]
+description = "來源可讀取且 pipeline 輸出可寫入的 S3 bucket。"
+label = "S3 storage"
+
+[portal.connections.types.s3.fields.accessKeyId]
+label = "Access key ID"
+
+[portal.connections.types.s3.fields.bucket]
+label = "Bucket"
+
+[portal.connections.types.s3.fields.endpoint]
+helperText = "AWS 請留空。若使用 MinIO 或其他 S3 相容儲存，請設定此項。"
+label = "Endpoint"
+
+[portal.connections.types.s3.fields.region]
+label = "Region"
+
+[portal.connections.types.s3.fields.secretAccessKey]
+label = "Secret access key"
+
+[portal.connections.types.sendgrid]
+description = "當 policy 執行時，透過 Email 傳送文件或通知。"
+label = "SendGrid"
+
+[portal.connections.types.sftp]
+description = "輪詢 SFTP (SSH) 伺服器以取得新文件。"
+hostPlaceholder = "sftp.example.com"
+label = "SFTP"
+
+[portal.connections.types.sftp.fields.hostKeyFingerprint]
+helperText = "選填。伺服器的 SHA-256 host key fingerprint（來自 `ssh-keyscan host | ssh-keygen -lf -`）。設定後，只接受提供此 key 的伺服器；留空時，首次連線時看到的 key 會被釘選，之後若變更會被拒絕。"
+label = "Host key fingerprint"
+placeholder = "SHA256:..."
+
+[portal.connections.types.sftp.fields.passphrase]
+label = "Key passphrase"
+
+[portal.connections.types.sftp.fields.password]
+helperText = "如果您改用 private key 驗證，請留空。"
+
+[portal.connections.types.sftp.fields.privateKey]
+helperText = "選填。貼上 OpenSSH private key，以使用 key 而非密碼進行驗證。"
+label = "Private key"
+
+[portal.connections.types.slack]
+description = "當 policy 處理文件時，將訊息發布到 Slack。"
+label = "Slack"
+
+[portal.connections.types.smb]
+description = "監看 SMB / CIFS 網路共用（Windows 或 Samba）。"
+hostPlaceholder = "fileserver.example.com"
+label = "SMB / 網路共用"
+
+[portal.connections.types.smb.fields.domain]
+helperText = "選填。如果您的伺服器使用 Windows domain 或工作群組，請填寫。"
+label = "Domain"
+
+[portal.connections.types.smb.fields.share]
+label = "Share"
+placeholder = "documents"
+
+[portal.connections.types.splunk]
+baseUrlPlaceholder = "https://your-splunk:8088"
+description = "每次 policy 處理文件時，將稽核事件傳送至 Splunk。"
+label = "Splunk"
+
+[portal.connections.types.sumologic]
+baseUrlPlaceholder = "https://endpoint.collection.sumologic.com/receiver/v1/http/..."
+description = "將稽核事件傳送至 Sumo Logic HTTP collector。"
+label = "Sumo Logic"
+
+[portal.connections.types.teams]
+baseUrlPlaceholder = "https://your-org.webhook.office.com/webhookb2/..."
+description = "當 policy 執行時，將訊息發布到 Teams 頻道。"
+label = "Microsoft Teams"
+
+[portal.connections.types.webhook]
+baseUrlPlaceholder = "https://example.com/hooks/documents"
+description = "將每份文件或僅其詳細資料發布到您選擇的 URL。"
+label = "Webhook"
+
+[portal.connections.types.zapier]
+baseUrlPlaceholder = "https://hooks.zapier.com/hooks/catch/..."
+description = "從 policy 觸發 Zap 或 Make scenario。"
+label = "Zapier & Make"
+
+[portal.docs]
+browse = "瀏覽文件"
+viewSource = "在 GitHub 上檢視來源"
+
 [portal.docs.authentication]
 codeCaption = "每個請求"
 eyebrow = "開始使用"
@@ -6619,11 +7079,19 @@ title = "官方 SDKs"
 beta = "Beta"
 deprecated = "已淘汰"
 
+[portal.docs.search]
+empty = "沒有相符文件"
+placeholder = "搜尋文件"
+results = "{{count}} 個結果"
+
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "代理程式以單一工具呼叫的內建命名能力。每項 skill 都是附有 evals 的確定性操作鏈。"
 title = "代理程式 skills"
 
+[portal.docs.toc]
+title = "本頁內容"
+
 [portal.docs.webhooks]
 codeCaption = "document.processed"
 eyebrow = "API 參考"
@@ -6697,6 +7165,8 @@ type = "類型"
 user = "使用者"
 
 [portal.documents.queue.empty]
+connectSource = "連接來源"
+createPipeline = "建立 pipeline"
 description = "當來源將文件送入您的管線時，它們會出現在這裡供審查。"
 title = "佇列中沒有文件"
 
@@ -6806,13 +7276,71 @@ description = "此檢視發生未預期的錯誤。請再試一次，或從側
 retry = "再試一次"
 title = "此頁面發生問題"
 
+[portal.home.download]
+back = "返回"
+body = "下載桌面應用程式或自架伺服器。"
+done = "完成"
+guide = "開啟 {{name}} 指南"
+openInBrowser = "改在瀏覽器中開啟"
+sectionDesktop = "桌面應用程式"
+sectionSelfHosted = "自架"
+title = "安裝 Stirling PDF Editor"
+
+[portal.home.download.docker]
+detailBody = "在您的伺服器上執行官方 image。"
+note = "於 :8080 開啟。預設登入：admin / stirling。"
+tagline = "在 container 中執行伺服器"
+title = "Docker"
+variantFat = "完整"
+variantLite = "超輕量"
+variantStandard = "標準"
+
+[portal.home.download.kubernetes]
+detailBody = "安裝官方 Helm chart。"
+note = "為 /configs 新增 PVC 以保留設定。"
+tagline = "使用 Helm 部署到叢集"
+title = "Kubernetes"
+
+[portal.home.download.linux]
+detailBody = "適用於您發行版的原生建置。"
+guideBtn = "檢視 Linux 安裝選項"
+note = "常見發行版可使用 AppImage、.deb 和 .rpm 建置。"
+tagline = "適用於您發行版的原生桌面應用程式"
+title = "Linux"
+
+[portal.home.download.mac]
+altLabel = "或透過 Homebrew"
+detailBody = "執行安裝程式，或使用 Homebrew。"
+downloadBtn = "下載 macOS 版"
+tagline = "適用於 Apple silicon 和 Intel 的原生應用程式"
+title = "macOS"
+
+[portal.home.download.manual]
+detailBody = "在裸機伺服器上執行 .jar。"
+downloadBtn = "下載 .jar"
+note = "需要 Java 21+。於 :8080 開啟；預設登入 admin / stirling。"
+runLabel = "然後執行"
+tagline = "在裸機伺服器上執行 .jar"
+title = "手動伺服器設定"
+
+[portal.home.download.windows]
+altLabel = "或透過 winget"
+detailBody = "執行安裝程式，或使用套件管理器。"
+downloadBtn = "下載安裝程式"
+tagline = "適用於 Microsoft Windows 的原生應用程式"
+title = "Windows"
+
 [portal.home.editor]
-activeUsers = "{{n}} 位活躍"
-invite = "邀請隊友"
+activeOfDeployed = "本月 {{total}} 個中有 {{active}} 個啟用"
 name = "Stirling PDF 編輯器"
 open = "在瀏覽器中開啟"
 updated = "已於 {{time}} 更新"
 
+[portal.home.editor.deploy]
+finish = "完成部署"
+options = "檢視部署選項"
+start = "部署 Editor"
+
 [portal.home.editor.target]
 cloud = "Managed Cloud"
 docker = "自託管 · Docker"
@@ -6823,49 +7351,6 @@ afternoon = "午安"
 evening = "晚安"
 morning = "早安"
 
-[portal.home.onboarding]
-dismiss = "關閉設定"
-notStarted = "尚未開始"
-progress = "已完成 {{done}} / {{total}}"
-title = "完成設定"
-
-[portal.home.onboarding.enterprise]
-body = "全組織 SSO + SCIM + RBAC、承諾用量價格，以及隔離網路部署。"
-cta = "開始試用"
-ctaQuote = "取得報價"
-lead = "適用於 250+ 名員工。"
-tag = "Enterprise"
-
-[portal.home.onboarding.steps.editor]
-blurb = "部署桌面應用程式，永久免費。"
-title = "下載 PDF 編輯器"
-
-[portal.home.onboarding.steps.policies]
-blurb = "{{active}} 個啟用 · {{recommended}} 個建議"
-chip = "{{active}} 個啟用"
-title = "啟用政策"
-
-[portal.home.onboarding.steps.sources]
-blurb = "{{connected}} 個已連接 · 每個 PDF 在抵達處皆受治理"
-chip = "{{connected}} 個已連接"
-title = "連接您的來源"
-
-[portal.home.quickActions]
-subtitle = "今日重點任務"
-title = "快速動作"
-
-[portal.home.quickActions.buildPipeline]
-blurb = "以型別化操作庫為基礎的 3 步驟組合器"
-title = "建立管線"
-
-[portal.home.quickActions.connectSource]
-blurb = "S3、代理程式、webhook、監看資料夾"
-title = "連接來源"
-
-[portal.home.quickActions.issueApiKey]
-blurb = "具速率限制和 IP 允許清單的範圍化金鑰"
-title = "發行 API 金鑰"
-
 [portal.infrastructure]
 manageEditorDeployment = "管理編輯器部署"
 sectionsAriaLabel = "基礎設施區段"
@@ -6878,13 +7363,9 @@ heading = "API 金鑰"
 subheading = "具每金鑰速率限制、權限與 IP 允許清單的範圍化憑證。"
 
 [portal.infrastructure.apiKeys.card]
-allowedIps = "允許的 IP"
-anyIp = "任何 IP（無允許清單）"
 created = "已建立"
 lastUsed = "上次使用"
-permissions = "權限"
-rateLimit = "速率限制"
-rateLimitValue = "{{value}} req/min"
+revoke = "撤銷金鑰"
 usageMonth = "本月用量"
 usageToday = "今日用量"
 
@@ -6892,6 +7373,20 @@ usageToday = "今日用量"
 description = "建立範圍化金鑰以開始呼叫 Stirling API。"
 title = "尚無 API 金鑰"
 
+[portal.infrastructure.apiKeys.error]
+load = "無法載入您的 API 金鑰。請再試一次。"
+
+[portal.infrastructure.apiKeys.revoke]
+body = "要撤銷「{{name}}」嗎？任何仍使用此金鑰的整合都會立即開始收到 401 錯誤。此操作無法復原。"
+cancel = "取消"
+confirm = "撤銷金鑰"
+title = "撤銷 API 金鑰"
+
+[portal.infrastructure.attestationLabel]
+attested = "已證明"
+inScope = "範圍內"
+notApplicable = "N/A"
+
 [portal.infrastructure.audit]
 filterAriaLabel = "依類別篩選稽核事件"
 heading = "稽核記錄"
@@ -6935,6 +7430,7 @@ all = "全部"
 auth = "驗證"
 config = "設定"
 elevation = "權限提升"
+policy = "政策"
 processing = "處理"
 security = "安全性"
 
@@ -6944,19 +7440,35 @@ title = "您沒有存取權"
 
 [portal.infrastructure.audit.metrics]
 config = "設定"
-elevation = "權限提升"
+policy = "政策"
 processing = "處理"
 totalEvents = "事件總數 · 24h"
 
+[portal.infrastructure.auditCatLabel]
+auth = "身分驗證"
+config = "設定"
+elevation = "權限提升"
+policy = "政策"
+processing = "處理"
+security = "安全性"
+
+[portal.infrastructure.auditStatusLabel]
+danger = "錯誤"
+info = "資訊"
+success = "成功"
+warning = "警告"
+
+[portal.infrastructure.certLabel]
+certified = "已認證"
+inProgress = "進行中"
+notStarted = "尚未開始"
+
 [portal.infrastructure.createKey]
 cancel = "取消"
 createKey = "建立金鑰"
 done = "完成"
-ipAllowlistHelper = "以逗號分隔的 CIDR 範圍。留空可允許任何 IP。"
-ipAllowlistLabel = "IP 允許清單"
 keyNameLabel = "金鑰名稱"
 keyNamePlaceholder = "例如：Production · ingest"
-permissionsLabel = "權限"
 secretKeyCaption = "秘密金鑰"
 secretWarning = "請將此儲存在 secrets manager 中。Stirling 只會儲存 hash — 之後無法復原。"
 subtitle = "將金鑰範圍限制在最低需求。您可以隨時輪換或撤銷。"
@@ -6964,6 +7476,12 @@ subtitleCreated = "立即複製此秘密 — 之後不會再顯示。"
 title = "建立 API 金鑰"
 titleCreated = "金鑰已建立"
 
+[portal.infrastructure.deployLabel]
+live = "上線"
+queued = "已排隊"
+rolledBack = "已復原"
+rolling = "推出中"
+
 [portal.infrastructure.deployments]
 msValue = "{{value}} ms"
 throughputValue = "{{value}}/min"
@@ -6999,6 +7517,15 @@ subheading = "每個已部署 Stirling 區域的即時健康狀態 — 延遲、
 description = "工作區佈建後，已部署區域會顯示在這裡。"
 title = "尚未部署區域"
 
+[portal.infrastructure.keyLabel]
+active = "啟用"
+revoked = "已撤銷"
+
+[portal.infrastructure.modelLabel]
+active = "啟用"
+degraded = "效能降低"
+disabled = "已停用"
+
 [portal.infrastructure.models]
 heading = "模型"
 msValue = "{{value}} ms"
@@ -7026,6 +7553,10 @@ status = "狀態"
 type = "類型"
 version = "版本"
 
+[portal.infrastructure.models.cost]
+perCall = "{{price}}/次呼叫"
+perThousand = "{{price}}/1k"
+
 [portal.infrastructure.models.metrics]
 activeModels = "活躍模型"
 avgLatency = "平均延遲"
@@ -7049,6 +7580,17 @@ modelForAria = "{{operation}} 的模型"
 operation = "操作"
 routedTo = "路由至"
 
+[portal.infrastructure.modelTypeLabel]
+classification = "分類"
+extraction = "擷取"
+llm = "LLM"
+ocr = "OCR"
+
+[portal.infrastructure.regionLabel]
+degraded = "效能降低"
+down = "停止運作"
+healthy = "健全"
+
 [portal.infrastructure.security.access.byok]
 description = "提供來自您自己 KMS 的金鑰。Stirling 會使用它加密，但仍可讀取。"
 label = "帶入您自己的金鑰 (BYOK)"
@@ -7174,6 +7716,47 @@ models = "模型"
 security = "安全性"
 storage = "儲存空間"
 
+[portal.integrations]
+addAnother = "新增另一個"
+availableHeading = "可用"
+comingSoonHeading = "即將推出"
+connect = "連線"
+connectedHeading = "已連線"
+connectionCount_one = "{{count}} 個連線"
+connectionCount_other = "{{count}} 個連線"
+customApi = "自訂 API"
+searchPlaceholder = "搜尋整合"
+subtitle = "Stirling 可連接的一切。憑證只需在此建立一次，之後由來源、政策和管線參照。"
+title = "整合"
+typedName = "{{tool}} 名稱"
+
+[portal.integrations.filters]
+all = "全部"
+audit = "稽核"
+connected = "已連線"
+notify = "通知"
+security = "安全性"
+signing = "簽署"
+storage = "儲存"
+
+[portal.integrations.status]
+connected = "已連線"
+
+[portal.integrations.table]
+integration = "整合"
+worksWith = "搭配使用"
+
+[portal.integrations.worksWith]
+pipelines = "管線"
+policies = "政策"
+sources = "來源"
+
+[portal.legal]
+draft = "{{label}} · 草稿"
+loadError = "無法載入此文件。請再試一次。"
+loading = "載入中…"
+title = "法律文件"
+
 [portal.nav]
 agent-builder = "代理程式建構器"
 components = "元件"
@@ -7182,6 +7765,7 @@ documents = "文件"
 editor = "編輯器"
 home = "首頁"
 infrastructure = "基礎設施"
+integrations = "整合"
 pipelines = "管線"
 policies = "政策"
 procurement = "採購"
@@ -7190,25 +7774,9 @@ sources = "來源"
 usage = "用量與帳單"
 users = "使用者"
 
-[portal.notifications]
-markAllRead = "全部標為已讀"
-title = "通知"
-viewAll = "檢視全部"
-
-[portal.notifications.ariaLabel]
-none = "通知，沒有未讀"
-unread_one = "通知，{{count}} 則未讀"
-unread_other = "通知，{{count}} 則未讀"
-
-[portal.notifications.count]
-allRead = "全部已讀"
-loading = "載入中"
-new_one = "{{count}} 則新通知"
-new_other = "{{count}} 則新通知"
-
-[portal.notifications.empty]
-description = "沒有新通知。"
-title = "您已全部處理完畢"
+[portal.nav.section]
+platform = "PDF 平台"
+processor = "PDF 處理器"
 
 [portal.pipelines]
 subtitle = "後端上的每個自動化文件管線：在一組來源上依序執行的操作鏈，並由觸發器執行。點擊列以查看其步驟與來源。"
@@ -7220,15 +7788,28 @@ newPipeline = "新增管線"
 [portal.pipelines.builder]
 addStep = "新增工具"
 back = "返回管線"
+cannotFollow = "無法接收 {{produced}}"
+chooseAccount = "選擇帳戶"
+chooseDestination = "選擇目的地"
+chooseOperation = "選擇此步驟的作用"
+chooseSource = "選擇來源"
 discard = "捨棄變更"
 enabled = "已啟用"
+inputs = "輸入"
+inputSource = "輸入來源"
+inputTrigger = "觸發器"
 keepEditing = "繼續編輯"
+needsConfiguring = "需要設定"
 needsUpload = "需要上傳的檔案"
+noSources = "尚未連線任何來源。建立一個來源以作為輸入。"
 noToolMatches = "沒有工具符合您的搜尋。"
 pipelineSettings = "管線設定"
 searchTools = "搜尋工具"
 selectToolBody = "新增工具以建立您的管線。"
 selectToolTitle = "尚無工具"
+sendToSystem = "傳送到另一個系統"
+stepsIncompatible = "這些步驟無法在其前一步產生的內容上執行：{{tools}}。"
+stepsNeedSetup = "儲存前仍需設定這些步驟：{{tools}}。"
 toolSettings = "工具設定"
 unknownStep = "無法辨識的操作，已原樣保留。"
 unsavedBody = "您有未儲存的變更。離開前要儲存，還是捨棄？"
@@ -7236,19 +7817,24 @@ unsavedTitle = "未儲存的變更"
 uploadUnsupported = "管線尚不支援上傳的檔案，因此無法儲存這些步驟：{{tools}}。"
 usesDefaults = "使用預設設定執行"
 
+[portal.pipelines.builder.diagnostic]
+fan-in = "合併前一步的每個檔案"
+fan-out = "對前一步的每個檔案執行一次"
+format-mismatch = "需要 {{accepts}}，但前一步產生 {{produced}}"
+output-uncertain = "可能不會執行：前一步的輸出取決於其設定方式"
+source-mismatch = "需要 {{accepts}}，但此管線的輸入是 {{produced}}"
+undeclared-operation = "無法檢查此步驟接受的內容"
+
 [portal.pipelines.composer]
 addTool = "新增工具"
 cancel = "取消"
 chainEmpty = "新增工具以開始建立您的管線。"
 create = "建立管線"
-directory = "輸出資料夾"
-directoryHelp = "伺服器上的絕對路徑。必須位於已設定的允許資料夾內。"
 editingUnsupported = "尚不支援顯示這些工具參數進行編輯。"
 moveDown = "下移"
 moveUp = "上移"
 name = "名稱"
 namePlaceholder = "例如：Redaction sweep"
-noSources = "尚未連接來源。管線仍可直接在提供給它的檔案上執行。"
 noToolSettings = "此工具沒有可設定的選項。"
 operations_one = "操作（{{count}}）"
 operations_other = "操作（{{count}}）"
@@ -7273,11 +7859,13 @@ confirm = "刪除"
 title = "刪除管線？"
 
 [portal.pipelines.detail]
+clearHistory = "清除歷程記錄"
 delete = "刪除管線"
 run = "立即執行"
 
 [portal.pipelines.empty]
 action = "建立管線"
+connectSource = "連線來源"
 description = "建立您的第一個管線：選擇執行來源、串接操作，並選擇輸出位置。"
 title = "尚無管線"
 
@@ -7286,15 +7874,17 @@ active = "啟用中"
 paused = "已暫停"
 total = "管線"
 
-[portal.pipelines.output]
-folder = "寫入資料夾"
-inline = "傳回檔案"
-
 [portal.pipelines.run]
+allProcessed_one = "沒有可執行項目：來源的 {{count}} 份文件已經處理過。"
+allProcessed_other = "沒有可執行項目：來源中的全部 {{count}} 份文件已經處理過。"
 completed_one = "執行已完成。"
 completed_other = "全部 {{count}} 次執行已完成。"
 empty = "沒有可執行的內容：來源沒有要處理的文件。"
 failed = "執行失敗：{{error}}"
+historyCleared = "歷程記錄已清除。下次執行會重新處理目前來源中的所有項目。"
+inFlight = "沒有新項目可執行：文件仍在從先前的執行中處理。"
+parked_one = "沒有可執行項目：{{count}} 份文件先前失敗且已暫停。修正原因後，清除歷程記錄以重試。"
+parked_other = "沒有可執行項目：{{count}} 份文件先前失敗且已暫停。修正原因後，清除歷程記錄以重試。"
 running = "執行已開始；仍在進行中。"
 timeout = "執行時間比預期更長；它可能仍會在背景完成。"
 
@@ -7314,12 +7904,18 @@ manual = "手動"
 schedule = "已排程"
 
 [portal.policies]
+defaultName = "{{category}} 政策"
 subtitle = "常駐自動化，可對每個文件強制執行工具管線。每項政策會在上傳或匯出時觸發，執行其工具鏈，並將強制版本與原始檔一併儲存。"
 title = "政策"
 
 [portal.policies.card]
 comingSoon = "升級到 Enterprise"
 notSetUp = "尚未設定"
+requiresAiEngine = "需要 AI 引擎"
+
+[portal.policies.categories.classification]
+desc = "上傳時識別每份文件的類型，並標記其中繼資料以便歸檔與搜尋。"
+label = "分類"
 
 [portal.policies.categories.compliance]
 desc = "對每個文件強制執行 HIPAA、GDPR、SOC 2 或 FedRAMP 要求。"
@@ -7344,6 +7940,13 @@ label = "安全性"
 [portal.policies.config]
 scopeAll = "所有文件"
 
+[portal.policies.config.classification]
+summary = "依據您團隊的標籤分類每份上傳的文件，並標記其中繼資料。"
+
+[portal.policies.config.classification.rules]
+0 = "分類"
+1 = "標記中繼資料"
+
 [portal.policies.config.compliance]
 summary = "在文件離開系統前，依監管框架驗證文件。"
 
@@ -7371,6 +7974,29 @@ minConfidence = "最低信心度"
 2 = "命名"
 3 = "正規化"
 
+[portal.policies.config.purview]
+label = "套用 Microsoft Purview 敏感度標籤"
+
+[portal.policies.config.purview.fields]
+connection = "Purview 租用戶"
+labelId = "標籤 ID"
+labelIdHelp = "來自 Purview 入口網站的標籤 GUID。套用標籤會將其中繼資料寫入 PDF；它無法加密，加密需要 Microsoft 用戶端。"
+labelName = "標籤名稱（選填）"
+labelNameHelp = "與 ID 一起記錄，讓人員和工具能辨識標籤。"
+
+[portal.policies.config.purview.fields.method]
+help = "Purview 會區分由政策套用的標籤與人員選擇的標籤。"
+label = "標籤的記錄方式"
+privileged = "作為人員選擇"
+standard = "作為自動套用"
+
+[portal.policies.config.purviewRead]
+label = "讀取 Microsoft Purview 標籤"
+
+[portal.policies.config.purviewRead.fields]
+connection = "Purview 租用戶"
+connectionHelp = "讀取文件已帶有的標籤，讓後續步驟可依此處理。"
+
 [portal.policies.config.retention]
 summary = "強制文件保留時間、何時封存以及何時刪除。"
 
@@ -7438,6 +8064,7 @@ title = "尚無活動"
 [portal.policies.endpoints]
 addWatermark = "浮水印"
 autoRedact = "遮蔽 PII"
+classifyAndLabel = "分類"
 compressPdf = "壓縮"
 flatten = "扁平化"
 ocrPdf = "OCR"
@@ -7448,6 +8075,183 @@ description = "您的政策已儲存，連線恢復後會顯示。"
 retry = "重試"
 title = "後端無法使用"
 
+[portal.policies.operations]
+change = "變更此步驟的作用"
+noResults = "沒有符合的步驟。請嘗試產品名稱，或「scan」、「notify」、「attach」。"
+searchPlaceholder = "搜尋步驟 - 試試「scan」、「attach」或產品名稱"
+
+[portal.policies.operations.bodyMode]
+binary = "原始檔案位元組"
+json = "在 JSON payload 內"
+multipart = "作為檔案上傳（multipart）"
+
+[portal.policies.operations.clamavScan]
+description = "您自己的 ClamAV 伺服器會檢查文件；沒有任何內容會離開您的網路。"
+label = "掃描病毒（自行託管）"
+
+[portal.policies.operations.cloudmersiveAdvancedScan]
+description = "拒絕含有巨集、可執行檔、指令碼或嵌入物件的文件。"
+label = "封鎖主動式內容"
+
+[portal.policies.operations.cloudmersiveScan]
+description = "Cloudmersive 會檢查文件；若不乾淨，執行會停止。"
+label = "掃描病毒"
+
+[portal.policies.operations.confluenceAttach]
+description = "將處理後的文件歸檔到頁面。"
+label = "附加到 Confluence 頁面"
+
+[portal.policies.operations.consignoSubmit]
+description = "將文件提交到 ConsignO Cloud 進行簽署。"
+label = "送出簽署（ConsignO）"
+note = "提交文件。尚不支援擷取已簽署的副本，因為步驟無法將結果傳遞給後續步驟。"
+
+[portal.policies.operations.customApiCall]
+description = "自行編寫呼叫：路徑、方法、主體和回應處理。"
+label = "呼叫自訂 API"
+
+[portal.policies.operations.discordNotify]
+description = "通知頻道政策已處理文件。"
+label = "發佈訊息到 Discord"
+
+[portal.policies.operations.elasticIndex]
+description = "將政策執行內容記錄為可搜尋的文件。"
+label = "在 Elasticsearch 中索引稽核事件"
+
+[portal.policies.operations.fields.bodyMode]
+helperText = "Multipart 適合上傳 API；JSON 適合需要檔案位於 payload 內的 API；binary 會傳送原始位元組。"
+label = "如何傳送文件"
+
+[portal.policies.operations.fields.bodyTemplate]
+helperText = "依原樣傳送的 JSON 主體。{{document.base64}} 會攜帶檔案；{{document.*}} 和 {{run.*}} 會依每份文件填入。"
+label = "JSON 主體"
+
+[portal.policies.operations.fields.connection]
+label = "帳戶"
+
+[portal.policies.operations.fields.domain]
+label = "Mailgun 網域"
+placeholder = "mg.acme.com"
+
+[portal.policies.operations.fields.fileFieldName]
+helperText = "API 預期文件所在的表單欄位。"
+label = "檔案欄位名稱"
+placeholder = "file"
+
+[portal.policies.operations.fields.from]
+label = "寄件者"
+placeholder = "processor@acme.com"
+
+[portal.policies.operations.fields.headers]
+helperText = "標頭名稱/值配對的 JSON 物件。系統會為您新增連線的憑證。"
+label = "Headers"
+
+[portal.policies.operations.fields.index]
+label = "Index"
+placeholder = "stirling-audit"
+
+[portal.policies.operations.fields.issueKey]
+label = "Issue key"
+placeholder = "OPS-42"
+
+[portal.policies.operations.fields.message]
+helperText = "作為訊息主體傳送。{{document.*}} 和 {{run.*}} 會依每份文件填入。"
+label = "訊息"
+
+[portal.policies.operations.fields.method]
+label = "Method"
+
+[portal.policies.operations.fields.pageId]
+label = "Page ID"
+placeholder = "66186"
+
+[portal.policies.operations.fields.path]
+helperText = "附加到連線的基礎 URL。它永遠無法到達其他主機。"
+label = "路徑"
+placeholder = "/v1/scan"
+
+[portal.policies.operations.fields.remotePath]
+helperText = "寫入到磁碟機中的位置。{{document.filename}} 會依每份文件填入。"
+label = "目的地路徑"
+placeholder = "Processed/{{document.filename}}"
+
+[portal.policies.operations.fields.responseMode]
+helperText = "報告會讓文件保持不變。取代會將其換成回傳的任何內容。"
+label = "如何處理回覆"
+
+[portal.policies.operations.fields.signerEmail]
+label = "簽署者電子郵件"
+placeholder = "signer@acme.com"
+
+[portal.policies.operations.fields.subject]
+label = "主旨"
+placeholder = "Processed: {{document.filename}}"
+
+[portal.policies.operations.fields.text]
+helperText = "Presidio 會分析此文字。使用 {{document.title}} 或貼上您要檢查的文字。"
+label = "要檢查的文字"
+
+[portal.policies.operations.fields.to]
+label = "收件者"
+placeholder = "records@acme.com"
+
+[portal.policies.operations.fields.username]
+label = "Nextcloud 使用者名稱"
+placeholder = "svc-stirling"
+
+[portal.policies.operations.googlechatNotify]
+description = "通知聊天室政策已處理文件。"
+label = "發佈訊息到 Google Chat"
+
+[portal.policies.operations.jiraAttach]
+description = "將處理後的文件歸檔到議題。"
+label = "附加到 Jira 議題"
+
+[portal.policies.operations.mailgunEmail]
+description = "將處理後的文件作為附件傳送。"
+label = "以電子郵件傳送文件（Mailgun）"
+
+[portal.policies.operations.nextcloudUpload]
+description = "將處理後的文件寫入資料夾。"
+label = "上傳到 Nextcloud"
+
+[portal.policies.operations.presidioAnalyze]
+description = "您自己的 Presidio 伺服器會回報其找到的個人資料。"
+label = "偵測個人資料"
+note = "Presidio 讀取文字，而非檔案。請提供您要檢查的文字 — 文件本身不會上傳。"
+
+[portal.policies.operations.responseMode]
+replace = "以回覆取代文件"
+report = "保留文件，記錄回覆"
+
+[portal.policies.operations.sendgridEmail]
+description = "將處理後的文件作為附件傳送。"
+label = "以電子郵件傳送文件（SendGrid）"
+
+[portal.policies.operations.slackNotify]
+description = "通知頻道政策已處理文件。"
+label = "發佈訊息到 Slack"
+
+[portal.policies.operations.splunkEvent]
+description = "在稽核人員已查看的位置記錄政策執行內容。"
+label = "傳送稽核事件到 Splunk"
+
+[portal.policies.operations.sumologicEvent]
+description = "將政策執行內容記錄到 HTTP collector。"
+label = "傳送稽核事件到 Sumo Logic"
+
+[portal.policies.operations.teamsNotify]
+description = "通知頻道政策已處理文件。"
+label = "發佈訊息到 Teams"
+
+[portal.policies.operations.webhookPost]
+description = "將文件本身傳送到您選擇的 URL。"
+label = "將文件發佈到 webhook"
+
+[portal.policies.operations.zapierNotify]
+description = "將執行詳細資料交給您的自動化。"
+label = "觸發 Zap 或 Make scenario"
+
 [portal.policies.stats]
 activeFor = "作用中"
 dataProcessed = "已處理資料"
@@ -7473,6 +8277,13 @@ label = "已套用文件"
 description = "已設定但未觸發"
 label = "已暫停"
 
+[portal.policies.table]
+appliesTo = "套用至"
+docs = "已強制執行的文件"
+enforces = "強制執行"
+policy = "政策"
+status = "狀態"
+
 [portal.policies.wizard.actions]
 back = "返回"
 cancel = "取消"
@@ -7480,6 +8291,10 @@ continue = "繼續"
 enablePolicy = "啟用政策"
 saveChanges = "儲存變更"
 
+[portal.policies.wizard.capability.classify]
+desc = "從您團隊的標籤識別文件類型並加以標記，讓文件可依類別歸檔與搜尋。"
+label = "分類文件"
+
 [portal.policies.wizard.capability.compress]
 desc = "將文件壓縮為較小的檔案大小。"
 label = "減少檔案大小"
@@ -7500,10 +8315,18 @@ label = "遮蔽敏感資訊"
 desc = "移除隱藏的 JavaScript，讓文件開啟時不會自動執行任何內容。"
 label = "移除主動內容"
 
+[portal.policies.wizard.capability.timestampPdf]
+desc = "使用獨立的時間戳記授權單位，證明文件在某個時間點以此確切形式存在。只會傳送雜湊值 - 文件永遠不會離開您的伺服器。"
+label = "新增可信任時間戳記"
+
 [portal.policies.wizard.capability.watermark]
 desc = "在每一頁加上可見標記（例如「機密」）。"
 label = "套用浮水印"
 
+[portal.policies.wizard.classification]
+description = "每份上傳的文件都會依內建標籤分類，並以符合的類型標記。標籤集會在整個團隊中共用。"
+labelsHeading = "分類標籤"
+
 [portal.policies.wizard.errors]
 noTools = "請先在工作流程中啟用至少一項工具。"
 saveFailed = "無法儲存政策。請再試一次。"
@@ -7548,73 +8371,118 @@ setUp = "設定 {{category}} 政策"
 [portal.policies.wizard.workflow]
 description = "選擇此政策對每份處理的文件執行的動作。"
 
-[portal.policySummary]
-activeSummary = "{{active}} / {{total}} 作用中"
-noRule = "尚未套用規則"
-subtitle = "每份文件都會通過的常設自動化，無論由哪個 pipeline 處理。"
-title = "您的 PDFs 上會執行什麼"
-
 [portal.policySummary.action]
-comingSoon = "升級至 Enterprise"
-configure = "設定"
 setUp = "設定"
 
-[portal.policySummary.column]
-activeRule = "作用中規則"
-policy = "政策"
-status = "狀態"
+[portal.processorFlow]
+footnote = "計數為過去 24 小時內的數據。流程速度僅供示意。"
+liveBadge = "即時"
+stats = "{{connected}} 已連線 · 已處理 {{processed}} 個 PDF"
+title = "PDF 處理器"
 
-[portal.policySummary.empty]
-description = "設定政策後，類別會顯示在這裡。"
-title = "尚無政策"
+[portal.processorFlow.lens]
+ariaLabel = "檢視模式"
+flow = "流程"
+sankey = "桑基圖"
 
-[portal.policySummary.state]
-active = "作用中"
-off = "關閉"
+[portal.processorFlow.outcomes]
+count = "{{n}} · 24h"
+failed = "失敗"
+heading = "結果"
+success = "已交付"
+
+[portal.processorFlow.policies]
+activeCount = "{{n}} 個啟用"
+count = "{{n}} · 24h"
+heading = "政策"
+setUp = "設定"
 soon = "即將推出"
 
-[portal.processingStatus]
-managePlan = "管理方案"
-volumeSuffix = "已處理 PDFs · 過去 30 天"
+[portal.processorFlow.sankey]
+waist = "政策 · {{n}} 個啟用"
+
+[portal.processorFlow.sankey.empty]
+description = "連線來源並開啟政策，即可觀看文件流經處理器。"
+title = "尚無流程"
+
+[portal.processorFlow.sources]
+comingSoonTag = "連線"
+editor = "Stirling PDF Editor"
+heading = "來源"
+perDay = "{{n}} / 24h"
+
+[portal.processorFlow.sources.comingSoon]
+apiMcp = "API · MCP"
+cloud = "Drive · Box · S3"
+email = "Email intake"
 
 [portal.procurement]
-reset = "重設採購（demo）"
 subtitle = "讓您的團隊完成評估、簽約並導入。所有文件集中在一處。"
 title = "採購"
 
-[portal.procurement.action]
-download = "下載"
-pay = "立即付款"
-request = "要求"
-sign = "檢閱並簽署"
-upload = "上傳"
-
 [portal.procurement.agreement]
 agreeCta = "同意並訂閱"
+confidential = "機密"
 confirm = "我已閱讀並同意 Stirling Enterprise Agreement。"
-eyebrow = "協議"
-intro = "一份合併協議涵蓋您的交易：Master Service Agreement、Order Form、EULA 和 Data Processing Agreement。檢閱後同意，即可接受報價並轉為承諾訂閱。"
-title = "檢閱您的企業協議"
+docName = "Stirling Enterprise Agreement"
+docSub = "MSA、Order Form、EULA 和 DPA，合併為一份簽署文件。"
+download = "下載"
+downloadDraftError = "無法產生協議 PDF - 文件轉譯器無法使用。請稍後再試或聯絡支援。"
+downloadError = "無法下載已簽署的協議。請再試一次。"
+legalName = "法人實體名稱"
+legalNamePlaceholder = "將簽署的法人實體"
+loadError = "無法載入協議。請再試一次。"
+loading = "正在載入協議..."
+ref = "Ref {{ref}} · {{version}}"
+requestChanges = "要求變更"
+scrollHint = "捲動以審閱"
+signatory = "簽署人姓名"
+signatoryPlaceholder = "全名"
+signatoryTitle = "簽署人職稱"
+signatoryTitlePlaceholder = "例如 總法律顧問"
+signError = "無法記錄您的簽署。請再試一次。"
 
 [portal.procurement.builder]
 addons = "附加項目"
+addressLine1 = "地址第 1 行"
+addressLine1Placeholder = "500 Howard St"
+addressLine2 = "地址第 2 行"
+addressLine2Placeholder = "套房、樓層、建築物"
 back = "返回"
 businessName = "企業名稱"
 businessNamePlaceholder = "您的公司"
+city = "城市"
+cityPlaceholder = "San Francisco"
+completeRequired = "請先以有效的電子郵件完成必填欄位（標示 *），再產生報價。"
+contactEmail = "聯絡電子郵件"
+contactEmailPlaceholder = "jane@acme.com"
+contactName = "聯絡人姓名"
+contactNamePlaceholder = "Jane Doe"
 continue = "繼續"
-country = "國家/地區"
-countryEuro = "歐元區 (EUR €)"
-countryUK = "英國 (GBP £)"
-countryUS = "美國 (USD $)"
+done = "完成"
 eula = "我已閱讀並同意 Stirling Enterprise EULA。它規範由此報價產生的協議。"
 generate = "產生報價"
-included = "已包含"
 indemnification = "IP 賠償保障"
 indemnificationSub = "我們會依 EULA 為符合資格的 IP 索賠進行抗辯"
-offlineLicense = "離線 / air-gapped 授權"
-offlineLicenseSub = "供 air-gapped 自架執行個體使用的可下載授權檔"
+paperEyebrow = "企業報價"
+paperFor = "準備對象"
+pdfSize = "PDF 大小"
+poNumber = "PO 號碼"
+poNumberPlaceholder = "選填"
+postalCode = "郵遞區號"
+postalCodePlaceholder = "94105"
+posture = "治理"
+posture_count = "~{{count}} 個政策"
+posture_essentials = "Essentials"
+posture_essentialsSub = "分類 + 分享 — 預設項目"
+posture_governed = "Governed"
+posture_governedSub = "新增安全性和路由"
+posture_regulated = "Regulated"
+posture_regulatedSub = "所有類別 — 合規、保留、擷取"
 qbr = "季度業務檢討"
 qbrSub = "您的 SE 每季檢視使用情況與 roadmap"
+region = "州 / 地區"
+regionPlaceholder = "California"
 running = "{{annual}} / 年 · {{years}} 年 {{tcv}}"
 s1Sub = "您的團隊，以及您預期每年處理的 PDFs。"
 s1Title = "您會處理多少量？"
@@ -7623,6 +8491,12 @@ s2Title = "承諾與服務"
 s3Sub = "用於報價及其產生的協議。"
 s3Title = "您的詳細資料"
 serviceLevel = "服務等級"
+size_compact = "精簡"
+size_compactSub = "主要為文字，小於 1 MB"
+size_heavy = "大型"
+size_heavySub = "掃描或大量圖片，5 MB+"
+size_standard = "標準"
+size_standardSub = "文字與圖片混合，1 到 5 MB"
 slDedicated = "專屬"
 slDedicatedSub = "4 個工作小時 · 專屬客戶經理 · +30%"
 slPriority = "優先"
@@ -7630,6 +8504,8 @@ slPrioritySub = "同一工作日 · 指定 CSM · +15%"
 slStandard = "標準"
 slStandardSub = "下一個工作日 · 共用 CSM · 已包含"
 stepOf = "第 {{n}} 步，共 {{total}} 步"
+taxId = "VAT / Tax ID"
+taxIdPlaceholder = "選填"
 term = "期限"
 termDiscount = "已套用 {{pct}}% 多年承諾折扣"
 title = "建立您的報價"
@@ -7637,6 +8513,7 @@ training = "導入與訓練"
 trainingSub = "即時課程協助您的團隊開始使用"
 users = "使用者總數"
 usersPlaceholder = "例如 250"
+viewEula = "閱讀"
 volEstimated = "根據 {{count}} 位使用者估算（每人約 2,000 份 PDFs，包含自動化）。如果您更清楚，可自行編輯。"
 volManual = "正在使用您提供的數字。您隨時可以依團隊規模重新估算。"
 volNoUsers = "不確定？輸入您的團隊規模，我們會為您估算。"
@@ -7645,55 +8522,55 @@ volumePlaceholder = "例如 1,000,000"
 years_one = "{{count}} 年"
 years_other = "{{count}} 年"
 
-[portal.procurement.docs]
-count_one = "{{count}} 份文件"
-count_other = "{{count}} 份文件"
-done = "完成"
-here = "您在這裡"
-hide = "隱藏"
-optional = "選用"
-paidAddon = "付費附加項目"
-show = "顯示"
-subtitle = "在流程的每個步驟中，您需要的一切都會隨交易進展顯示出來。"
-supportingSubtitle = "SOC 2、安全性審查、稅務表單等，在您的安全或採購團隊需要時即可提供。部分項目會收取一次性費用。"
-supportingTitle = "支援您的評估"
+[portal.procurement.documents]
+agreement = "企業協議"
+agreementSub = "MSA、Order Form 和 DPA 合併為一份簽署文件。"
+download = "下載"
+eula = "EULA 與商業條款"
+eulaSub = "軟體與自助式商業條款。"
+invoice = "發票"
+invoiceSub = "您的第一張訂閱發票。"
+laterInvoice = "接受後可用"
+laterQuote = "報價發出後可用"
+quote = "報價"
+quoteSub = "您的逐項企業報價。"
+sla = "SLA 附件"
+slaSub = "支援層級和回應目標。"
+subprocessors = "子處理者"
+subprocessorsSub = "代表您處理資料的第三方。"
+subtitle = "您的交易文件，可隨時存取。"
 title = "文件"
-upcoming = "即將到來"
+view = "檢視"
 
 [portal.procurement.error]
 title = "發生錯誤"
 
 [portal.procurement.hero]
-company = "您的企業採購案"
+barAria = "第 {{current}} 階段，共 {{total}} 階段"
 ctaAgreement = "檢閱並簽署協議"
-ctaLive = "您已上線"
-ctaPayment = "新增付款"
+ctaExploring = "設定您的試用"
 ctaQuote = "檢閱您的報價"
+ctaReviewQuote = "審閱報價"
 ctaTrial = "建立您的報價"
+documents = "文件"
 eyebrow = "企業採購"
+eyebrowCompany = "{{company}} Enterprise"
 inviteTeammates = "邀請隊友"
-keyDocs = "重要文件"
-nextStep = "下一步：{{action}}"
-notStarted = "尚未開始"
+licenseKey = "授權金鑰"
+liveSub = "您的組織已佈建，授權已啟用。"
+liveTitle = "您已在 Stirling Enterprise 上線"
+next = "下一步：{{stage}}"
 open = "開啟採購"
 scheduleCall = "安排通話"
-setup1Sub = "邀請您的隊友"
-setup1Title = "部署 PDF Editor"
-setup2Sub = "在編輯器和其他來源中啟用處理"
-setup2Title = "連接 PDF Processor"
-setup3Sub = "需要時啟用安全性、合規性、路由或保留"
-setup3Title = "新增建議政策"
+sentenceAgreement = "審閱並簽署協議"
+sentenceLive = "佈建與推出"
+sentencePayment = "採購單與付款"
+sentenceQuote = "審閱並接受您的報價"
+sentenceTrial = "設定您的試用工作區"
 
 [portal.procurement.journey]
 daysLeft_one = "剩餘 {{count}} 天"
 daysLeft_other = "剩餘 {{count}} 天"
-engineerLabel = "您的解決方案工程師"
-eyebrow = "您的推出流程"
-live = "您已在 Stirling Enterprise 上線"
-nextStep = "下一步：{{action}}"
-subtitle = "您的解決方案工程師會陪同每個步驟。一次只需完成下一個動作；完整清單如下。"
-title = "從試用到上線，一條受引導的路徑"
-trialTitle = "Enterprise 試用"
 
 [portal.procurement.journeySteps.agreement]
 blurb = "一個簽名涵蓋 MSA、order form、EULA 和 DPA。"
@@ -7727,6 +8604,9 @@ downloadError = "目前尚無法產生離線授權檔 — 請稍後再試。"
 downloadOffline = "下載離線授權 (.lic)"
 hint = "將此金鑰貼到自架執行個體以啟用，或保留作為記錄。請妥善保管。"
 label = "您的授權金鑰"
+subtitle = "使用此金鑰啟用自行託管的執行個體，或保留作為記錄。"
+title = "您的授權金鑰"
+trialFileHint = "這是您的試用授權檔案。協議就緒後，請回來再次下載 — 與線上授權金鑰不同，.lic 檔案不會自行更新。"
 
 [portal.procurement.link]
 cta = "連結帳戶"
@@ -7739,65 +8619,62 @@ description = "您的訂閱已啟用，授權已核發。您的團隊已完成
 eyebrow = "上線"
 title = "您已在 Stirling Enterprise 上線"
 
-[portal.procurement.locked]
-description = "開始企業評估後，試用金鑰、承諾數量報價、一簽式協議、付款和文件帳本都會在這裡。"
-eyebrow = "僅限 Enterprise"
-talkToSales = "聯絡業務"
-title = "採購流程會隨 Enterprise 開啟"
-
 [portal.procurement.milestone]
-accept = "接受並繼續"
-description = "下載 PDF 與您的團隊分享，準備好時回來接受，或進行變更。"
-download = "下載 PDF"
 downloadError = "目前尚無法下載報價 PDF — 請稍後再試。"
-edit = "編輯報價"
-eyebrow = "報價 {{number}}"
-perYear = " / 年"
-preparedFor = "為 {{company}} 準備"
-tcv = "{{value}} 總合約價值"
-title = "您的報價已準備就緒"
-
-[portal.procurement.modal]
-cancel = "取消"
-chooseFile = "選擇檔案"
-close = "關閉"
-downloadBody = "您的下載即將開始。"
-downloadCta = "下載"
-downloadTitle = "下載"
-noFile = "未選擇檔案"
-payBody = "透過 Stripe 使用卡片或銀行轉帳支付您的承諾合約。付款入帳後，您的工作區會立即佈建。"
-payCta = "繼續前往 Stripe"
-payTitle = "確認付款"
-requestBodyFree = "我們會依需求產生此文件。確認後，您的解決方案工程師會很快寄送給您。"
-requestBodyPaid = "這是付費附加項目。確認後，您的解決方案工程師會評估範圍並寄送文件。"
-requestCta = "要求"
-requestTitle = "要求此文件"
-signBody = "開啟 Stirling Enterprise Agreement 進行電子簽署：一個簽名涵蓋 MSA、order form、EULA 和 DPA。我們會自動會簽，您將進入付款步驟。"
-signCta = "開啟以簽署"
-signTitle = "檢閱並簽署您的協議"
-uploadBody = "將您的 PO 傳送給我們，我們會依您的條款開立發票。將 PDF 拖曳至此，或在下方選擇檔案。"
-uploadCta = "上傳採購單"
-uploadTitle = "上傳您的採購單"
 
 [portal.procurement.payment]
 description = "您的報價已被接受，授權也已啟用 — 您的團隊可以立即開始。準備好時支付第一張發票；您可以在這裡付款或下載，不需要 email。"
+downloadAgreement = "下載已簽署協議"
 downloadInvoice = "下載發票"
-simulate = "模擬已收到付款（demo）"
+eyebrow = "付款"
 title = "訂閱已建立"
 viewInvoice = "檢視並支付發票"
 
+[portal.procurement.review]
+acceptCta = "接受報價"
+annual = "年度費用（第 1 年）"
+downloadCta = "下載報價"
+poNumber = "採購單：{{po}}"
+renewal = "期限結束後以 {{amount}}/年續約（+{{pct}}% CPI）"
+tcv = "{{years}} 年期，預先全額支付：{{tcv}}"
+validUntil = "有效至 {{date}}"
+
 [portal.procurement.schedule]
 fallback = "無法載入排程工具。"
 fallbackLink = "在新分頁開啟排程"
+loading = "正在載入排程器..."
 subtitle = "您的解決方案工程師會帶領您的團隊完成推出流程。請選擇適合您的時間。"
 title = "安排通話"
 
-[portal.procurement.status]
-action = "需要動作"
-available = "可用"
-complete = "完成"
-pending = "待處理"
-request = "依要求提供"
+[portal.procurement.setup]
+airgap = "隔離網路"
+airgapSub = "封閉，無對外連線"
+back = "返回"
+businessName = "企業名稱"
+businessNamePlaceholder = "Acme Corp"
+cloud = "Stirling Cloud"
+cloudSub = "受管理，最快開始"
+continue = "繼續"
+deployment = "要部署到哪裡？"
+eula = "我同意 Stirling EULA 與商業條款。"
+fullName = "全名"
+fullNamePlaceholder = "您的姓名"
+invites = "邀請團隊成員 · 選填"
+invitesPlaceholder = "sam@acme.com, lee@acme.com"
+scheduleCall = "安排通話"
+seats = "測試人員"
+seatsPlaceholder = "例如 15"
+selfhost = "自行託管"
+selfhostSub = "Docker 或 Kubernetes"
+start = "開始試用"
+stepOf = "第 {{n}} 步，共 {{total}} 步"
+subtitle = "免費 14 天，無需信用卡。"
+subtitleDetails = "為您的報價和協議提供一些詳細資料。"
+talkFirst = "想先聊聊？"
+title = "設定您的試用"
+viewEula = "閱讀"
+workEmail = "工作電子郵件"
+workEmailPlaceholder = "you@company.com"
 
 [portal.procurement.trial]
 body = "延長會增加 7 天，並通知您的解決方案工程師。"
@@ -7808,20 +8685,6 @@ maxed = "已達上限"
 subtitle = "您的免費試用持續到 {{date}}。不需要卡片。"
 title = "Enterprise 試用"
 
-[portal.procurement.upsell]
-homeBadge = "Enterprise"
-homeBody = "承諾數量定價、全組織 SSO + SCIM + RBAC、90 天不可變稽核，以及專屬 SE。"
-homeCta = "開始試用 →"
-homeHeadline = "處理數百萬份 PDFs。"
-
-[portal.recentActivity]
-title = "最近活動"
-viewAll = "檢視全部"
-
-[portal.recentActivity.empty]
-description = "Pipeline 執行、部署和代理程式事件會顯示在這裡。"
-title = "這裡還沒有內容"
-
 [portal.search]
 ariaLabel = "搜尋"
 placeholder = "搜尋 Stirling — endpoints、pipelines、文件…"
@@ -7838,58 +8701,50 @@ admin = "管理員"
 [portal.settings.sections]
 account-link = "帳戶連結"
 
-[portal.shell.header]
-accountFallback = "帳戶"
-accountMenu = "帳戶選單"
-darkMode = "深色模式"
-lightMode = "淺色模式"
-search = "搜尋"
-searchPlaceholder = "搜尋…"
-signOut = "登出"
-switchToDark = "切換至深色主題"
-switchToLight = "切換至淺色主題"
-
 [portal.shell.sidebar]
 appEditor = "編輯器"
 appProcessor = "處理器"
-brandSuffix = "Stirling Processor"
-docsCount = "{{docs}} 份文件"
 linkAccount = "連結 Stirling 帳戶"
-planEditor = "Editor 方案"
-planEnterprise = "Enterprise 方案"
-planProcessor = "Processor 方案"
 primaryNav = "主要導覽"
 switchApp = "切換應用程式"
 
+[portal.shell.topbar]
+closeNav = "關閉導覽"
+openNav = "開啟導覽"
+search = "搜尋"
+
 [portal.sources]
 subtitle = "可重複使用的輸入連線，將文件送入 Stirling。設定一次連線後，即可從任意數量的政策參照它。點擊一列可查看其設定，以及使用它的政策。"
 title = "來源"
 
 [portal.sources.actions]
-agentBuilder = "Agent Builder"
 connectSource = "連接來源"
 
+[portal.sources.builder]
+back = "返回來源"
+backToTypes = "所有來源類型"
+cancel = "取消"
+chooseHint = "選擇文件來源。灰色顯示的連接器即將推出。"
+comingSoon = "即將推出"
+comingSoonHeading = "即將推出"
+create = "建立來源"
+createTitle = "連線來源"
+delete = "刪除"
+editTitle = "編輯來源"
+enabled = "已啟用"
+save = "儲存變更"
+
+[portal.sources.builder.folderAccess]
+description = "資料夾自動化只能使用管理員允許的資料夾。請在資料夾存取設定中新增，然後再試一次。"
+openSettings = "資料夾存取設定"
+title = "不允許此資料夾"
+
 [portal.sources.delete]
 body = "刪除「{{name}}」？此操作無法復原。參照它的政策需要更新。"
 cancel = "取消"
 confirm = "刪除"
 title = "刪除來源？"
 
-[portal.sources.detail]
-closeAriaLabel = "關閉詳細資料"
-delete = "刪除來源"
-docs24h = "過去 24 小時"
-docs30d = "過去 30 天"
-docsTotal = "總共看見"
-docsTrend = "過去 30 天的文件"
-documents = "文件"
-edit = "編輯"
-notReferenced = "未被任何政策參照，因此可以安全刪除。"
-pause = "暫停"
-resume = "繼續"
-subtitle = "{{type}} · {{status}}"
-usedBy = "使用者"
-
 [portal.sources.empty]
 description = "連接資料夾（雲端儲存即將推出），讓您的政策有地方擷取文件。"
 title = "尚未連接任何來源"
@@ -7899,18 +8754,57 @@ inUse = "使用中"
 total = "連線"
 unused = "未使用"
 
+[portal.sources.networkFields.connection]
+helperText = "儲存的連線，包含伺服器位址和憑證。會由參照它的每個來源重複使用。"
+label = "連線"
+
+[portal.sources.networkFields.directory]
+helperText = "要輪詢的伺服器資料夾，相對於登入主目錄或分享根目錄。留空表示根目錄。"
+label = "資料夾"
+placeholder = "incoming/"
+
+[portal.sources.networkFields.mode]
+helperText = "消耗會在每個政策處理完檔案後，將該檔案從伺服器移除。"
+label = "讀取模式"
+
+[portal.sources.networkFields.mode.options]
+consume = "消耗：每個檔案只處理一次"
+snapshot = "快照：每次執行都重新讀取資料夾"
+
+[portal.sources.networkFields.recursive]
+label = "資料夾深度"
+
+[portal.sources.networkFields.recursive.options]
+all = "包含子資料夾"
+top = "僅最上層"
+
 [portal.sources.status]
 active = "作用中"
 disabled = "已停用"
 unused = "未使用"
 
 [portal.sources.table]
+documents = "文件"
 source = "來源"
 status = "狀態"
 usedBy = "政策"
 
+[portal.sources.types.box]
+description = "從您團隊已分享的 Box 資料夾拉取文件。"
+label = "Box"
+
+[portal.sources.types.dropbox]
+description = "從共用 Dropbox 資料夾拉取文件。"
+label = "Dropbox"
+
 [portal.sources.types.editor]
+description = "您的團隊在編輯器中處理過的文件，涵蓋政策和 AI 執行。"
 label = "編輯器"
+noPolicies = "尚無從編輯器執行的政策。"
+
+[portal.sources.types.email]
+description = "將傳送到專用信箱的附件轉換為文件。"
+label = "電子郵件收件匣"
 
 [portal.sources.types.folder]
 description = "監看伺服器上的目錄以取得新文件。"
@@ -7943,25 +8837,80 @@ label = "資料夾深度"
 all = "包含子資料夾"
 top = "僅最上層"
 
+[portal.sources.types.ftp]
+description = "輪詢 FTP 或 FTPS 伺服器資料夾以尋找新文件。"
+label = "FTP"
+
+[portal.sources.types.googledrive]
+description = "從共用 Google Drive 資料夾拉取文件。"
+label = "Google Drive"
+
+[portal.sources.types.network]
+description = "監看 SMB 網路共用中的新文件。"
+label = "網路磁碟機"
+
+[portal.sources.types.onedrive]
+description = "監看 OneDrive 資料夾中的新文件。"
+label = "OneDrive"
+
+[portal.sources.types.s3]
+description = "從 Amazon S3 或 S3 相容儲存貯體拉取文件。"
+label = "Amazon S3"
+
+[portal.sources.types.s3.fields.connection]
+helperText = "儲存的連線，包含儲存貯體和憑證。會由參照它的每個來源和管線輸出重複使用。"
+label = "連線"
+
+[portal.sources.types.s3.fields.mode]
+helperText = "消耗會在每個政策處理完物件後，將該物件從儲存貯體移除。"
+label = "讀取模式"
+
+[portal.sources.types.s3.fields.mode.options]
+consume = "消耗：每個物件只處理一次"
+snapshot = "快照：每次執行都重新讀取儲存貯體"
+
+[portal.sources.types.s3.fields.prefix]
+helperText = "只會處理鍵以此前置詞開頭的物件。"
+label = "鍵前置詞"
+placeholder = "incoming/"
+
+[portal.sources.types.sftp]
+description = "輪詢 SFTP 投遞資料夾以尋找新文件。"
+label = "SFTP"
+
+[portal.sources.types.sharepoint]
+description = "從 SharePoint 文件庫拉取文件。"
+label = "SharePoint"
+
 [portal.sources.types.unknown]
 label = "來源"
 
+[portal.sources.types.webhook]
+createNote = "建立此 webhook 時會產生交付 URL 和簽署密鑰。傳送者將文件 POST 到該 URL，參照的政策會在到達時執行。"
+description = "透過來自任何外部系統的已簽署 HTTP POST 接收文件。"
+label = "Webhook"
+
+[portal.sources.types.webhook.detail]
+deliveryUrl = "交付 URL"
+secretNote = "簽署密鑰只會在建立 webhook 時顯示一次。重新建立來源即可輪替。"
+
+[portal.sources.types.webhook.reveal]
+copy = "複製"
+done = "完成"
+secret = "簽署密鑰"
+secretHelp = "使用此金鑰簽署每次交付的原始主體（HMAC-SHA256），並以 X-Stirling-Signature header 傳送。"
+secretWarning = "請立即複製簽署密鑰。為了您的安全，它只會顯示一次，之後無法擷取。"
+title = "Webhook 已建立"
+url = "交付 URL"
+usage = "將每份文件以原始請求主體 POST 到交付 URL，並使用 binary content type（application/pdf 或 application/octet-stream）。參照的政策會在到達時自動執行。"
+
 [portal.sources.wizard]
-back = "返回"
-cancel = "取消"
-continue = "繼續"
-editTitle = "編輯來源"
 name = "名稱"
 namePlaceholder = "例如 理賠收件"
-save = "儲存變更"
-subtitle = "第 {{current}} 步，共 {{total}} 步 · {{label}}"
-title = "連接來源"
 type = "類型"
 
-[portal.sources.wizard.steps]
-chooseType = "選擇類型"
-configure = "設定"
-review = "檢閱並連接"
+[portal.stepModal]
+close = "關閉"
 
 [portal.usage]
 managePayment = "管理付款"
@@ -8021,16 +8970,9 @@ summary = "擁有團隊 — 管理其成員資源和共用設定。"
 2 = "透過預設政策取得 portal 存取權"
 3 = "成員可執行的一切"
 
-[portal.welcome]
-ariaLabel = "歡迎使用 Stirling PDF"
-badge = "Open-source"
-installEditor = "安裝編輯器"
-inviteTeammates = "邀請隊友"
-openInBrowser = "在瀏覽器中開啟"
-perks = "永久免費 · 可自架"
-subtitle = "全球最安全的 PDF Editor 對各種規模的團隊免費。包含 60+ PDF 操作和 SSO。"
-title = "歡迎使用"
-titleAccent = "Stirling PDF"
+[portal.users.seats]
+limited = "{{used}} / {{limit}}"
+unlimited = "{{used}} · 無限制"
 
 [printFile]
 title = "列印檔案"
@@ -8613,6 +9555,14 @@ text = "以 90 度為單位，將 PDF 頁面順時針或逆時針旋轉。PDF 
 [rotate.tooltip.header]
 title = "旋轉設定概覽"
 
+[ruler]
+clearAll = "全部清除"
+hideAllLabels = "隱藏所有標籤"
+hideSmallLabels = "隱藏小標籤"
+physicalValues = "實體"
+scaled = "已縮放"
+showAllLabels = "顯示所有標籤"
+
 [sanitize]
 desc = "從 PDF 檔案移除可能有害的元素。"
 sanitizationResults = "淨化結果"
@@ -8654,31 +9604,45 @@ label = "移除 XMP 中繼資料"
 [sanitize.steps]
 settings = "設定"
 
-[sanitizePdf]
-tags = "清理,安全,無害,移除威脅"
-
 [sanitizePDF]
 title = "清理 PDF"
 
+[sanitizePdf]
+tags = "清理,安全,無害,移除威脅"
+
 [scalePages]
 tags = "resize,adjust,scale,page size,resize page,scale page,change size,adjust size,enlarge,shrink page,fit to page,A4,letter size"
 title = "調整頁面大小/比例"
 
+[scaleSettings]
+activeScale = "作用中比例"
+apply = "套用比例"
+applyCalibration = "套用校正"
+calculatedScale = "計算比例"
+calibrate = "校正"
+calibrating = "正在校準"
+calibrationDistanceRequired = "輸入大於零的實際距離"
+calibrationInvalid = "無法從此測量值計算比例尺"
+calibrationPaperDistance = "測得頁面距離：{{distance}}"
+calibrationTitle = "校準比例尺"
+calibrationTooltip = "測量已知距離以自動計算比例尺"
+customScale = "自訂比例尺"
+noneSet = "未設定自訂比例尺"
+presets = "預設比例尺"
+ratio = "比例尺比率"
+ratioHelp = "比率：1 頁面單位 = X 實際單位"
+ratioPlaceholder = "例如：100"
+ratioPositive = "比率必須大於零"
+ratioRequired = "必須輸入比率"
+realDistance = "實際距離"
+realDistancePlaceholder = "例如：5"
+reset = "重設為預設值"
+unit = "單位"
+unitInvalid = "無效的單位：{{scaleUnit}}"
+
 [scannerEffect]
 tags = "scan,simulate,create,fake scan,look scanned,scanner effect,make look scanned,photocopy effect,simulate scanner,realistic scan"
 
-[ScannerImageSplit.selectText]
-1 = "角度閾值："
-10 = "設定新增和移除的邊框大小，以防止輸出中的白色邊框（預設：1）。"
-2 = "設定影像旋轉所需的最小絕對角度（預設：10）。"
-3 = "容忍度："
-4 = "確定圍繞估計的背景顏色的顏色變化範圍（預設：30）。"
-5 = "最小區域："
-6 = "設定照片的最小區域閾值（預設：10000）。"
-7 = "最小輪廓區域："
-8 = "設定照片的最小輪廓區域閾值"
-9 = "邊框大小："
-
 [scannerImageSplit]
 submit = "擷取相片掃描"
 tags = "separate,auto-detect,scans,multi-photo,organize"
@@ -8710,6 +9674,18 @@ whatThisDoes = "功能說明"
 whatThisDoesDesc = "自動從掃描頁或合成影像中找出並擷取各張相片—無須手動裁切。"
 whenToUse = "適用時機"
 
+[ScannerImageSplit.selectText]
+1 = "角度閾值："
+10 = "設定新增和移除的邊框大小，以防止輸出中的白色邊框（預設：1）。"
+2 = "設定影像旋轉所需的最小絕對角度（預設：10）。"
+3 = "容忍度："
+4 = "確定圍繞估計的背景顏色的顏色變化範圍（預設：30）。"
+5 = "最小區域："
+6 = "設定照片的最小區域閾值（預設：10000）。"
+7 = "最小輪廓區域："
+8 = "設定照片的最小輪廓區域閾值"
+9 = "邊框大小："
+
 [search]
 noResults = "找不到結果"
 placeholder = "輸入搜尋詞..."
@@ -8727,46 +9703,22 @@ toolNotAvailableLocally = "您的 Stirling-PDF 伺服器已離線，且本機後
 [session]
 expired = "您的工作階段已過期。請重新整理頁面並再試一次。"
 
-[sessionManagement.tooltip]
-header = "管理簽署工作階段"
-
-[sessionManagement.tooltip.addParticipants]
-bullet1 = "新參與者會被加到簽署順序的末端"
-bullet2 = "工作階段定稿後即無法新增參與者"
-bullet3 = "每位參與者輪到時會收到通知"
-description = "在定稿前，可隨時為進行中的工作階段新增更多參與者。"
-title = "新增參與者"
-
-[sessionManagement.tooltip.finalization]
-bullet1 = "<b>完整定稿</b>：所有參與者皆已簽署"
-bullet2 = "<b>部分定稿</b>：部分參與者尚未簽署"
-bullet3 = "未簽署的參與者將被排除在最終文件之外"
-bullet4 = "定稿後即可將已簽署的 PDF 載入使用中檔案"
-description = "定稿會將所有簽章合併為單一已簽署的 PDF。此操作無法復原。"
-title = "工作階段定稿"
-
-[sessionManagement.tooltip.participantRemoval]
-bullet1 = "無法移除已簽署的參與者"
-bullet2 = "被移除的參與者將不再收到通知"
-bullet3 = "簽署順序會自動調整"
-description = "可在參與者簽署前將其移出工作階段。"
-title = "移除參與者"
-
-[sessionManagement.tooltip.signatureOrder]
-bullet1 = "每個簽章依序套用至 PDF"
-bullet2 = "後續簽署者可看到先前的簽章"
-bullet3 = "對於核准流程及法律保管鏈至關重要"
-description = "建立工作階段時指定的順序決定誰先簽署。"
-title = "簽署順序"
-
 [settings]
 close = "關閉"
 
+[settings.ai]
+documents = "文件與 RAG"
+general = "一般"
+limits = "限制與效能"
+models = "模型與提供者"
+title = "AI"
+
 [settings.configuration]
 advanced = "進階"
 database = "資料庫"
 endpoints = "端點"
 features = "功能"
+folderAccess = "資料夾存取權"
 mcp = "MCP Server"
 storageSharing = "檔案儲存與共用"
 systemSettings = "系統設定"
@@ -8800,6 +9752,8 @@ defaultPdfEditor = "預設 PDF 編輯器"
 defaultPdfEditorActive = "Stirling PDF 是您的預設 PDF 編輯器"
 defaultPdfEditorChecking = "正在檢查..."
 defaultPdfEditorInactive = "已由其他應用程式設為預設"
+defaultPdfEditorRemind = "提醒我設為預設"
+defaultPdfEditorRemindDescription = "當 Stirling PDF 不是您的預設 PDF 應用程式時顯示橫幅。"
 defaultPdfEditorSet = "已是預設"
 defaultStartupView = "啟動時的預設檢視"
 defaultStartupViewDescription = "選擇應用程式啟動時左側欄位中預設啟用的分頁"
@@ -8817,9 +9771,18 @@ languageDescription = "選擇顯示語言"
 logout = "登出"
 setAsDefault = "設為預設"
 theme = "主題"
+themeAccent = "重點色"
+themeAccentCustom = "自訂顏色"
+themeAccentCustomHint = "自訂（建議使用預設值）"
+themeAccentDark = "深色模式重點色"
+themeAccentDefault = "預設"
+themeAccentDefaultHint = "預設主題（建議）"
+themeAccentDescription = "按鈕、連結和醒目提示會遵循它，並為應用程式增添細微色調。淺色和深色各自有自己的設定。系統會使用目前啟用的設定。"
+themeAccentLight = "淺色模式重點色"
 themeDark = "深色"
 themeDescription = "在淺色與深色模式間切換"
 themeLight = "淺色"
+themeReset = "將主題還原為預設值"
 themeSystem = "System"
 title = "一般"
 user = "使用者"
@@ -8833,6 +9796,12 @@ intro = "為您的組織啟用使用者驗證、團隊管理與工作區功能
 learnMore = "在說明文件中了解更多"
 title = "系統管理員專用"
 
+[settings.general.loginLanding]
+description = "選擇登入 Stirling Cloud 時要開啟的應用程式。"
+editor = "編輯器"
+processor = "處理器"
+title = "登入後"
+
 [settings.general.mode]
 fullscreen = "全螢幕"
 sidebar = "側邊欄"
@@ -9041,6 +10010,11 @@ security = "安全性"
 telegram = "Telegram"
 title = "安全性與身分驗證"
 
+[settings.signOut]
+confirm = "您確定要登出嗎？"
+submit = "登出"
+title = "登出"
+
 [settings.team]
 title = "團隊"
 
@@ -9657,6 +10631,9 @@ uploadButton = "上傳至伺服器"
 title = "Stirling-PDF Survey"
 
 [swagger]
+clickHere = "點擊這裡"
+fallback = "如果未自動開啟，"
+opening = "正在新分頁中開啟 Swagger UI..."
 tags = "api,文件,swagger,端點,開發"
 title = "API 文件"
 
@@ -9764,14 +10741,42 @@ selectFilesHint = "請在「使用中的檔案」中選取檔案以執行此工
 singleFileScope = "僅套用至：{{fileName}}"
 viewerMode = "切換到檔案編輯器以選取多個檔案。"
 
+[toolFormat]
+ANY = "任意檔案"
+CBR = "漫畫書封存檔 (CBR)"
+CBZ = "漫畫書封存檔 (CBZ)"
+CSV = "CSV 檔案"
+EBOOK = "電子書"
+EMAIL = "電子郵件"
+EXCEL = "試算表"
+HTML = "網頁"
+IMAGE = "圖片"
+JAVASCRIPT = "JavaScript 檔案"
+JSON = "JSON 檔案"
+MARKDOWN = "Markdown 檔案"
+NONE = "無檔案"
+PCL = "PCL 列印檔案"
+PDF = "PDF"
+PDF_ENCRYPTED = "受密碼保護的 PDF"
+POSTSCRIPT = "PostScript 檔案"
+PPT = "簡報"
+TEXT = "文字檔案"
+VIDEO = "影片"
+WORD = "Word 文件"
+XML = "XML 檔案"
+XPS = "XPS 文件"
+ZIP = "ZIP 封存檔"
+
 [toolPanel]
 alpha = "Alpha"
 backToAllTools = "返回所有工具"
 collapse = "收合面板"
 expand = "展開面板"
 goBack = "返回"
+pdfTools = "PDF 工具"
 placeholder = "選擇一個工具以開始"
 premiumFeature = "進階功能："
+searchTools = "搜尋工具"
 toolsHeader = "工具"
 viewAllTools = "檢視所有工具"
 
@@ -9806,11 +10811,6 @@ noToolsFound = "找不到工具"
 quickAccess = "快速存取"
 searchPlaceholder = "搜尋工具..."
 
-[toolPicker.categories]
-advancedTools = "進階工具"
-recommendedTools = "推薦工具"
-standardTools = "標準工具"
-
 [toolPicker.subcategories]
 advancedFormatting = "進階格式化"
 automation = "自動化"
@@ -9950,16 +10950,31 @@ title = "使用者"
 you = "（您）"
 
 [users.action]
+cancelInvite = "取消邀請"
 deleteTeam = "刪除團隊"
 disableMfa = "重設 MFA"
 move = "移至團隊"
 reinstate = "恢復"
 remove = "從組織移除"
+removeTeam = "從團隊移除"
 rename = "重新命名團隊"
 resetPw = "重設密碼"
 suspend = "停權"
 unlock = "解鎖帳戶"
 
+[users.activity]
+daysAgo = "{{count}} 天前"
+hoursAgo = "{{count}} 小時前"
+justNow = "剛剛"
+minutesAgo = "{{count}} 分鐘前"
+monthsAgo_one = "{{count}} 個月前"
+monthsAgo_other = "{{count}} 個月前"
+never = "從未"
+weeksAgo_one = "{{count}} 週前"
+weeksAgo_other = "{{count}} 週前"
+yearsAgo_one = "{{count}} 年前"
+yearsAgo_other = "{{count}} 年前"
+
 [users.cap]
 addProcessor = "+ Processor"
 approver = "核准政策"
@@ -9967,11 +10982,14 @@ editor = "編輯器"
 processor = "處理器"
 
 [users.confirm]
+cancelInviteBody = "要取消對 {{email}} 的邀請嗎？他們將無法使用目前的連結加入。"
+cancelInviteTitle = "取消邀請"
 deleteTeamBody = "刪除 {{name}} 團隊？團隊必須先為空 — 請將其成員移至另一個團隊，且不能仍擁有任何整合設定。"
 deleteTeamTitle = "刪除團隊"
 disableMfaBody = "移除 {{name}} 的 MFA 註冊？若有要求，他們下次登入時會再次設定。"
 disableMfaTitle = "重設 MFA"
 removeBody = "永久從組織移除 {{name}}？此操作無法復原。"
+removeTeamBody = "要將 {{name}} 從團隊移除嗎？他們會保留帳戶，但會失去此團隊資源的存取權。"
 removeTitle = "移除成員"
 
 [users.empty]
@@ -10022,6 +11040,16 @@ username = "使用者名稱"
 usernameError = "使用者名稱至少需 3 個字元"
 usernamePlaceholder = "jsmith"
 
+[users.invites]
+by = "由 {{who}} 邀請"
+cancel = "取消"
+count = "{{count}} 個待處理"
+desc = "已受邀但尚未加入的人員。在他們接受前會佔用一個席位。"
+expiresInDays_one = "{{count}} 天後到期"
+expiresInDays_other = "{{count}} 天後到期"
+expiresToday = "今天到期"
+title = "待處理邀請"
+
 [users.loadError]
 description = "連線至後端時發生錯誤，或您沒有存取權限。請再試一次。"
 title = "無法載入成員"
@@ -10212,9 +11240,11 @@ title = "附件"
 
 [viewer.bookmarks]
 bookmarkTitle = "書籤標題"
+bookmarkTitleRequired = "必須輸入書籤標題"
 closeSidebar = "關閉書籤側邊欄"
 collapseAll = "收合所有書籤"
 expandAll = "展開所有書籤"
+searchPlaceholder = "搜尋書籤"
 
 [viewer.comments]
 addComment = "新增評論"
@@ -10605,30 +11635,6 @@ title = "浮水印文字"
 image = "影像"
 text = "文字"
 
-[wetSignature.tooltip]
-header = "簽名建立方式"
-
-[wetSignature.tooltip.draw]
-bullet1 = "可自訂筆跡顏色與粗細"
-bullet2 = "可清除並重繪直到滿意為止"
-bullet3 = "支援觸控裝置（平板電腦、手機）"
-description = "使用滑鼠或觸控螢幕繪製手寫簽名。最適合個人化的真跡簽名。"
-title = "手繪簽名"
-
-[wetSignature.tooltip.type]
-bullet1 = "可從多種字型中選擇"
-bullet2 = "可自訂文字大小與顏色"
-bullet3 = "非常適合標準化簽名"
-description = "透過輸入文字產生簽名。快速且一致，適用於商務文件。"
-title = "文字簽名"
-
-[wetSignature.tooltip.upload]
-bullet1 = "支援 PNG、JPG 及其他圖片格式"
-bullet2 = "建議使用透明背景以獲得最佳效果"
-bullet3 = "圖片將調整大小以符合簽名區域"
-description = "上傳預先製作的簽名圖片。適合已有掃描簽名或公司 Logo 的情況。"
-title = "上傳簽名圖片"
-
 [workbenchBar]
 activeFiles = "使用中的檔案"
 annotations = "註解"
@@ -10652,6 +11658,7 @@ redact = "遮蔽"
 rotateLeft = "向左旋轉"
 rotateRight = "向右旋轉"
 ruler = "尺規 / 測量"
+rulerSettings = "比例尺設定"
 save = "儲存"
 saveAll = "全部儲存"
 saveAs = "另存新檔"
diff --git a/scripts/translations/auto_translate.py b/scripts/translations/auto_translate.py
index 0da9323711..b5fb9d00a5 100644
--- a/scripts/translations/auto_translate.py
+++ b/scripts/translations/auto_translate.py
@@ -10,6 +10,7 @@ import sys
 import argparse
 import os
 import subprocess
+from concurrent.futures import ThreadPoolExecutor
 from pathlib import Path
 import time
 
@@ -141,27 +142,39 @@ def extract_untranslated(language_code, batch_size=500, include_existing=False):
 
 
 def translate_batches(
-    batch_files, language_code, api_key, timeout=600, model="gpt-5.5"
+    batch_files, language_code, api_key, timeout=600, model="gpt-5.5", parallel=1
 ):
     """Translate all batch files using the given OpenAI model."""
     if not batch_files:
         return []
 
-    print(f"\n🤖 Translating {len(batch_files)} batches using {model}...")
+    total = len(batch_files)
+    print(f"\n🤖 Translating {total} batches using {model}...")
     print(f"Timeout: {timeout}s ({timeout // 60} minutes) per batch")
+    if parallel > 1:
+        print(f"Running up to {parallel} batches in parallel")
 
-    translated_files = []
+    def translate_one(numbered_batch):
+        i, batch_file = numbered_batch
+        translated_file = batch_file.replace(".json", "_translated.json")
 
-    for i, batch_file in enumerate(batch_files, 1):
-        print(f"\n[{i}/{len(batch_files)}] Translating {batch_file}...")
+        # Resume: an existing output means this batch is already paid for
+        if Path(translated_file).exists():
+            print(f"\n[{i}/{total}] ✓ {batch_file} already translated, skipping")
+            return translated_file
+
+        print(f"\n[{i}/{total}] Translating {batch_file}...")
 
         # Always pass API key since it's required
         cmd = f'python3 scripts/translations/batch_translator.py "{batch_file}" --language {language_code} --api-key "{api_key}" --model {model}'
 
-        # Run with timeout
-        result = subprocess.run(
-            cmd, shell=True, capture_output=True, text=True, timeout=timeout
-        )
+        try:
+            result = subprocess.run(
+                cmd, shell=True, capture_output=True, text=True, timeout=timeout
+            )
+        except subprocess.TimeoutExpired:
+            print(f"✗ Timed out after {timeout}s: {batch_file}", file=sys.stderr)
+            return None
 
         if result.stdout:
             print(result.stdout)
@@ -172,14 +185,27 @@ def translate_batches(
             print(f"✗ Failed to translate {batch_file}")
             return None
 
-        translated_file = batch_file.replace(".json", "_translated.json")
-        translated_files.append(translated_file)
+        return translated_file
 
-        # Small delay between batches
-        if i < len(batch_files):
-            time.sleep(1)
+    numbered = list(enumerate(batch_files, 1))
 
-    print(f"\n✓ All {len(batch_files)} batches translated successfully")
+    if parallel > 1:
+        with ThreadPoolExecutor(max_workers=parallel) as pool:
+            translated_files = list(pool.map(translate_one, numbered))
+    else:
+        translated_files = []
+        for i, numbered_batch in enumerate(numbered, 1):
+            translated_files.append(translate_one(numbered_batch))
+            # Small delay between batches
+            if i < total:
+                time.sleep(1)
+
+    if any(f is None for f in translated_files):
+        failed = sum(1 for f in translated_files if f is None)
+        print(f"\n✗ {failed}/{total} batches failed")
+        return None
+
+    print(f"\n✓ All {total} batches translated successfully")
     return translated_files
 
 
@@ -310,6 +336,12 @@ Examples:
         action="store_true",
         help="Also retranslate existing keys that match English (default: only translate missing keys)",
     )
+    parser.add_argument(
+        "--parallel",
+        type=int,
+        default=1,
+        help="Batches to translate concurrently (default: 1 = sequential)",
+    )
     parser.add_argument(
         "--model",
         default="gpt-5.5",
@@ -349,7 +381,7 @@ Examples:
 
         # Step 2: Translate all batches
         translated_files = translate_batches(
-            batch_files, args.language, api_key, args.timeout, args.model
+            batch_files, args.language, api_key, args.timeout, args.model, args.parallel
         )
         if translated_files is None:
             sys.exit(1)

From 0c0a96aa83a9ac2b41580d7d94ad647a000911ed Mon Sep 17 00:00:00 2001
From: Ludy <Ludy87@users.noreply.github.com>
Date: Sun, 9 Aug 2026 21:30:33 +0200
Subject: [PATCH 120/122] build(deps): bump org.simplejavamail from 8.12.0 to
 9.2.0 (#7398)

Bump org.simplejavamail:simple-java-mail and outlook-module from 8.12.6
to 9.2.0 in app/common/build.gradle. Add a Dependabot group for the
org.simplejavamail artifacts in .github/dependabot.yml so updates for
those packages are grouped into a single PR.


---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have run `task check` to verify linters, typechecks, and tests
pass
- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .github/dependabot.yml                                       | 5 +++++
 app/common/build.gradle                                      | 4 ++--
 .../main/java/stirling/software/common/util/EmlParser.java   | 2 +-
 3 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c584ea1f7c..4489c2f4af 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,6 +16,11 @@ updates:
     cooldown:
       default-days: 7
     rebase-strategy: "auto"
+    groups:
+      simple-java-mail:
+        patterns:
+          - "org.simplejavamail:simple-java-mail"
+          - "org.simplejavamail:outlook-module"
 
   - package-ecosystem: "docker"
     directories:
diff --git a/app/common/build.gradle b/app/common/build.gradle
index f483d10c0c..f53ad0eb79 100644
--- a/app/common/build.gradle
+++ b/app/common/build.gradle
@@ -21,8 +21,8 @@ dependencies {
     api 'org.snakeyaml:snakeyaml-engine:3.0.1'
     api "org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.3"
     // Simple Java Mail for EML/MSG parsing (replaces direct Angus Mail usage)
-    api 'org.simplejavamail:simple-java-mail:8.12.6'
-    api 'org.simplejavamail:outlook-module:8.12.6' // MSG file support
+    api 'org.simplejavamail:simple-java-mail:9.2.0'
+    api 'org.simplejavamail:outlook-module:9.2.0' // MSG file support
     api 'jakarta.mail:jakarta.mail-api:2.1.5'
     runtimeOnly 'org.eclipse.angus:angus-mail:2.0.5'
 
diff --git a/app/common/src/main/java/stirling/software/common/util/EmlParser.java b/app/common/src/main/java/stirling/software/common/util/EmlParser.java
index bdc5cc3d07..09d55a02c2 100644
--- a/app/common/src/main/java/stirling/software/common/util/EmlParser.java
+++ b/app/common/src/main/java/stirling/software/common/util/EmlParser.java
@@ -194,7 +194,7 @@ public class EmlParser {
         }
         attachment.setFilename(filename);
 
-        String contentId = embedded ? stripCid(resourceName) : null;
+        String contentId = embedded ? stripCid(resource.getContentId()) : null;
         attachment.setContentId(contentId);
 
         String detectedContentType = EmlProcessingUtils.detectMimeType(filename, contentType);

From 4e901f7524b3789095cd02a76f7407a375836941 Mon Sep 17 00:00:00 2001
From: brios <127139797+balazs-szucs@users.noreply.github.com>
Date: Sun, 9 Aug 2026 21:41:57 +0200
Subject: [PATCH 121/122] refactor(package): rename example classes and update
 package structure (#7400)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# Description of Changes

Refactors a small set of previously vendored/derived PDFBox "example"
classes into Stirling’s own package namespaces.



<!--
Please provide a summary of the changes, including:

- What was changed
- Why the change was made
- Any challenges encountered

Closes #(issue_number)
-->

---

## Checklist

### General

- [X] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [X] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md)
(if applicable)
- [X] I have performed a self-review of my own code
- [X] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### Translations (if applicable)

- [ ] I ran
[`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [X] I have run `task check` to verify linters, typechecks, and tests
pass
- [X] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing)
for more details.
---
 .gitleaksignore                                                 | 2 +-
 .../software/common/service/CustomPDFDocumentFactory.java       | 2 +-
 .../software/common}/util/DeletingRandomAccessFile.java         | 2 +-
 .../SPDF/controller/api/security/CertSignController.java        | 2 +-
 .../software/SPDF/pdf}/signature/CMSProcessableInputStream.java | 2 +-
 .../software/SPDF/pdf}/signature/CreateSignatureBase.java       | 2 +-
 .../software/SPDF/pdf}/signature/TSAClient.java                 | 2 +-
 .../software/SPDF/pdf}/signature/ValidationTimeStamp.java       | 2 +-
 .../software/SPDF/utils}/ConnectedInputStream.java              | 2 +-
 .../software/SPDF/pdf}/signature/TSAClientTest.java             | 2 +-
 .../software/SPDF/pdf}/signature/ValidationTimeStampTest.java   | 2 +-
 .../software/SPDF/utils}/ConnectedInputStreamTest.java          | 2 +-
 12 files changed, 12 insertions(+), 12 deletions(-)
 rename app/common/src/main/java/{org/apache/pdfbox/examples => stirling/software/common}/util/DeletingRandomAccessFile.java (96%)
 rename app/core/src/main/java/{org/apache/pdfbox/examples => stirling/software/SPDF/pdf}/signature/CMSProcessableInputStream.java (97%)
 rename app/core/src/main/java/{org/apache/pdfbox/examples => stirling/software/SPDF/pdf}/signature/CreateSignatureBase.java (99%)
 rename app/core/src/main/java/{org/apache/pdfbox/examples => stirling/software/SPDF/pdf}/signature/TSAClient.java (99%)
 rename app/core/src/main/java/{org/apache/pdfbox/examples => stirling/software/SPDF/pdf}/signature/ValidationTimeStamp.java (99%)
 rename app/core/src/main/java/{org/apache/pdfbox/examples/util => stirling/software/SPDF/utils}/ConnectedInputStream.java (98%)
 rename app/core/src/test/java/{org/apache/pdfbox/examples => stirling/software/SPDF/pdf}/signature/TSAClientTest.java (99%)
 rename app/core/src/test/java/{org/apache/pdfbox/examples => stirling/software/SPDF/pdf}/signature/ValidationTimeStampTest.java (96%)
 rename app/core/src/test/java/{org/apache/pdfbox/examples/util => stirling/software/SPDF/utils}/ConnectedInputStreamTest.java (98%)

diff --git a/.gitleaksignore b/.gitleaksignore
index 089de4fedb..12d98aebeb 100644
--- a/.gitleaksignore
+++ b/.gitleaksignore
@@ -22,7 +22,7 @@ frontend/editor/src/portal/components/docs/GettingStartedSection.tsx:generic-api
 
 # False positive: generic-api-key matches the Java type name "X509Certificate"
 # in a method signature (CreateSignatureBase.resolveSignatureAlgorithm) - not a secret.
-app/core/src/main/java/org/apache/pdfbox/examples/signature/CreateSignatureBase.java:generic-api-key:224
+app/core/src/main/java/stirling/software/SPDF/pdf/signature/CreateSignatureBase.java:generic-api-key:224
 
 # Supabase publishable key (public by design, RLS-protected) used as a CI fallback
 # default in the tauri-build workflow when the GitHub secret is unset - not a real secret.
diff --git a/app/common/src/main/java/stirling/software/common/service/CustomPDFDocumentFactory.java b/app/common/src/main/java/stirling/software/common/service/CustomPDFDocumentFactory.java
index 7cc01541e4..178052ebf6 100644
--- a/app/common/src/main/java/stirling/software/common/service/CustomPDFDocumentFactory.java
+++ b/app/common/src/main/java/stirling/software/common/service/CustomPDFDocumentFactory.java
@@ -17,7 +17,6 @@ import java.util.concurrent.Semaphore;
 import java.util.function.Consumer;
 
 import org.apache.pdfbox.Loader;
-import org.apache.pdfbox.examples.util.DeletingRandomAccessFile;
 import org.apache.pdfbox.io.IOUtils;
 import org.apache.pdfbox.io.MemoryUsageSetting;
 import org.apache.pdfbox.io.RandomAccessReadBufferedFile;
@@ -31,6 +30,7 @@ import org.springframework.web.multipart.MultipartFile;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.api.PDFFile;
+import stirling.software.common.util.DeletingRandomAccessFile;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.TempFileManager;
 
diff --git a/app/common/src/main/java/org/apache/pdfbox/examples/util/DeletingRandomAccessFile.java b/app/common/src/main/java/stirling/software/common/util/DeletingRandomAccessFile.java
similarity index 96%
rename from app/common/src/main/java/org/apache/pdfbox/examples/util/DeletingRandomAccessFile.java
rename to app/common/src/main/java/stirling/software/common/util/DeletingRandomAccessFile.java
index 2c0341e19a..9df98bec9c 100644
--- a/app/common/src/main/java/org/apache/pdfbox/examples/util/DeletingRandomAccessFile.java
+++ b/app/common/src/main/java/stirling/software/common/util/DeletingRandomAccessFile.java
@@ -1,4 +1,4 @@
-package org.apache.pdfbox.examples.util;
+package stirling.software.common.util;
 
 import java.io.File;
 import java.io.IOException;
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java
index ffadb8fe1a..c268f48d8c 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/security/CertSignController.java
@@ -13,7 +13,6 @@ import java.util.Calendar;
 import java.util.List;
 
 import org.apache.commons.io.FileUtils;
-import org.apache.pdfbox.examples.signature.CreateSignatureBase;
 import org.apache.pdfbox.pdmodel.PDDocument;
 import org.apache.pdfbox.pdmodel.PDPage;
 import org.apache.pdfbox.pdmodel.PDPageContentStream;
@@ -76,6 +75,7 @@ import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.SPDF.config.swagger.StandardPdfResponse;
 import stirling.software.SPDF.model.api.security.SignPDFWithCertRequest;
+import stirling.software.SPDF.pdf.signature.CreateSignatureBase;
 import stirling.software.SPDF.service.HardwareKeyStoreService;
 import stirling.software.common.annotations.AutoJobPostMapping;
 import stirling.software.common.enumeration.ResourceWeight;
diff --git a/app/core/src/main/java/org/apache/pdfbox/examples/signature/CMSProcessableInputStream.java b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/CMSProcessableInputStream.java
similarity index 97%
rename from app/core/src/main/java/org/apache/pdfbox/examples/signature/CMSProcessableInputStream.java
rename to app/core/src/main/java/stirling/software/SPDF/pdf/signature/CMSProcessableInputStream.java
index 48d1da9800..ead6a26305 100644
--- a/app/core/src/main/java/org/apache/pdfbox/examples/signature/CMSProcessableInputStream.java
+++ b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/CMSProcessableInputStream.java
@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-package org.apache.pdfbox.examples.signature;
+package stirling.software.SPDF.pdf.signature;
 
 import java.io.IOException;
 import java.io.InputStream;
diff --git a/app/core/src/main/java/org/apache/pdfbox/examples/signature/CreateSignatureBase.java b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/CreateSignatureBase.java
similarity index 99%
rename from app/core/src/main/java/org/apache/pdfbox/examples/signature/CreateSignatureBase.java
rename to app/core/src/main/java/stirling/software/SPDF/pdf/signature/CreateSignatureBase.java
index d6fd18f060..77145cb336 100644
--- a/app/core/src/main/java/org/apache/pdfbox/examples/signature/CreateSignatureBase.java
+++ b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/CreateSignatureBase.java
@@ -14,7 +14,7 @@
  * limitations under the License.
  */
 
-package org.apache.pdfbox.examples.signature;
+package stirling.software.SPDF.pdf.signature;
 
 import java.io.IOException;
 import java.io.InputStream;
diff --git a/app/core/src/main/java/org/apache/pdfbox/examples/signature/TSAClient.java b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/TSAClient.java
similarity index 99%
rename from app/core/src/main/java/org/apache/pdfbox/examples/signature/TSAClient.java
rename to app/core/src/main/java/stirling/software/SPDF/pdf/signature/TSAClient.java
index 6f57e205a2..33530e4885 100644
--- a/app/core/src/main/java/org/apache/pdfbox/examples/signature/TSAClient.java
+++ b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/TSAClient.java
@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-package org.apache.pdfbox.examples.signature;
+package stirling.software.SPDF.pdf.signature;
 
 import java.io.IOException;
 import java.io.InputStream;
diff --git a/app/core/src/main/java/org/apache/pdfbox/examples/signature/ValidationTimeStamp.java b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/ValidationTimeStamp.java
similarity index 99%
rename from app/core/src/main/java/org/apache/pdfbox/examples/signature/ValidationTimeStamp.java
rename to app/core/src/main/java/stirling/software/SPDF/pdf/signature/ValidationTimeStamp.java
index d01666d769..405678181c 100644
--- a/app/core/src/main/java/org/apache/pdfbox/examples/signature/ValidationTimeStamp.java
+++ b/app/core/src/main/java/stirling/software/SPDF/pdf/signature/ValidationTimeStamp.java
@@ -15,7 +15,7 @@
  * limitations under the License.
  */
 
-package org.apache.pdfbox.examples.signature;
+package stirling.software.SPDF.pdf.signature;
 
 import java.io.ByteArrayInputStream;
 import java.io.IOException;
diff --git a/app/core/src/main/java/org/apache/pdfbox/examples/util/ConnectedInputStream.java b/app/core/src/main/java/stirling/software/SPDF/utils/ConnectedInputStream.java
similarity index 98%
rename from app/core/src/main/java/org/apache/pdfbox/examples/util/ConnectedInputStream.java
rename to app/core/src/main/java/stirling/software/SPDF/utils/ConnectedInputStream.java
index 30434f7165..d8a824ec3b 100644
--- a/app/core/src/main/java/org/apache/pdfbox/examples/util/ConnectedInputStream.java
+++ b/app/core/src/main/java/stirling/software/SPDF/utils/ConnectedInputStream.java
@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-package org.apache.pdfbox.examples.util;
+package stirling.software.SPDF.utils;
 
 import java.io.IOException;
 import java.io.InputStream;
diff --git a/app/core/src/test/java/org/apache/pdfbox/examples/signature/TSAClientTest.java b/app/core/src/test/java/stirling/software/SPDF/pdf/signature/TSAClientTest.java
similarity index 99%
rename from app/core/src/test/java/org/apache/pdfbox/examples/signature/TSAClientTest.java
rename to app/core/src/test/java/stirling/software/SPDF/pdf/signature/TSAClientTest.java
index ebbbc518b7..582f2b332c 100644
--- a/app/core/src/test/java/org/apache/pdfbox/examples/signature/TSAClientTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/pdf/signature/TSAClientTest.java
@@ -1,4 +1,4 @@
-package org.apache.pdfbox.examples.signature;
+package stirling.software.SPDF.pdf.signature;
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
diff --git a/app/core/src/test/java/org/apache/pdfbox/examples/signature/ValidationTimeStampTest.java b/app/core/src/test/java/stirling/software/SPDF/pdf/signature/ValidationTimeStampTest.java
similarity index 96%
rename from app/core/src/test/java/org/apache/pdfbox/examples/signature/ValidationTimeStampTest.java
rename to app/core/src/test/java/stirling/software/SPDF/pdf/signature/ValidationTimeStampTest.java
index fdb9eb41e4..3981f1ec9b 100644
--- a/app/core/src/test/java/org/apache/pdfbox/examples/signature/ValidationTimeStampTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/pdf/signature/ValidationTimeStampTest.java
@@ -1,4 +1,4 @@
-package org.apache.pdfbox.examples.signature;
+package stirling.software.SPDF.pdf.signature;
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
diff --git a/app/core/src/test/java/org/apache/pdfbox/examples/util/ConnectedInputStreamTest.java b/app/core/src/test/java/stirling/software/SPDF/utils/ConnectedInputStreamTest.java
similarity index 98%
rename from app/core/src/test/java/org/apache/pdfbox/examples/util/ConnectedInputStreamTest.java
rename to app/core/src/test/java/stirling/software/SPDF/utils/ConnectedInputStreamTest.java
index 48d8b11a48..5f02dfb687 100644
--- a/app/core/src/test/java/org/apache/pdfbox/examples/util/ConnectedInputStreamTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/utils/ConnectedInputStreamTest.java
@@ -1,4 +1,4 @@
-package org.apache.pdfbox.examples.util;
+package stirling.software.SPDF.utils;
 
 import static org.junit.jupiter.api.Assertions.*;
 import static org.mockito.Mockito.*;

From 7a2c4564a38d3672a38263f9433b0b94cdfaf698 Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Mon, 10 Aug 2026 12:04:51 +0100
Subject: [PATCH 122/122] chore: record onnxruntime-web in frontend third-party
 licenses

---
 frontend/editor/src/assets/3rdPartyLicenses.json | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/frontend/editor/src/assets/3rdPartyLicenses.json b/frontend/editor/src/assets/3rdPartyLicenses.json
index 110a6c88a5..62d989791f 100644
--- a/frontend/editor/src/assets/3rdPartyLicenses.json
+++ b/frontend/editor/src/assets/3rdPartyLicenses.json
@@ -392,6 +392,13 @@
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
+    {
+      "moduleName": "onnxruntime-web",
+      "moduleUrl": "https://github.com/Microsoft/onnxruntime",
+      "moduleVersion": "1.26.0",
+      "moduleLicense": "MIT",
+      "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
+    },
     {
       "moduleName": "pdfjs-dist",
       "moduleUrl": "https://github.com/mozilla/pdf.js",